Toyota RAV4 Forums banner

Has anyone installed IGLA anti-theft system

1.3K views 13 replies 6 participants last post by  Ruemiser  
#1 ·
Very elegant system, can use any of the buttons, steering, doors, console and certain combinations.

Impossible to drive without correct sequence. They gave us a FOB also but we leave that at home.

Setup for one of our other Hybrids and plan to add to Rav4
 
#4 ·
Sometimes the easiest solution is hardware: CAN Bus Vehicle Anti-Theft Shield by Miller CAT

having said that Toyota offers something called "TESS" Toyota Enhanced Security System in Europe. Which is a second immobilizer system that requires you to carry around a second smaller keyfob. If the battery on it is flat you plug it into the USB slot so it is powered.

I bring this up because the IGLA system might run into the same issue you hope thieves run into regarding can bus authentication. As in it won't work on the CAN bus.

As of now there are three different CAN bus authentication implementations in the RAV4 V:

1. No protection. Applies to all gas/hybrid models up to and including MY2023.
2. First SecOC implementation: all plugins/primes up to MY2023 and euro hybrids MY2023
3. Second SecOC implementation: MY2024+ on plugin prime and location dependent on hybrids (euro MY2024+)

Major difference between 2 and 3 is a HSM in the newer implementation which hasn't been cracked yet.

Technically speaking the first implementation has been cracked using a hardware exploit, however it requires the vehicle to already have been unlocked and in ready to drive mode so this isn't useful for thieves.

It is highly likely that you will be unable to use an IGLA system on a RAV4 with the newer SecOC implementation.
 
#13 ·
It is highly likely that you will be unable to use an IGLA system on a RAV4 with the newer SecOC implementation.
It will work just fine because engine shut off signal not encrypted. Plus properly installed IGLA works on both CAN and LIN buses and signal to shut off duplicated on both. If it installed on hybrid - AR20 analog relay has to be added to protect against CAN/LIN bus shortcut attack.
 
#5 ·
We like IGLA because it also comes with an inexpensive remote locator for about 5/month (1 year).
Even when 12v battery is disconnected and car stolen via flatbed truck (pulled up ramp), the remote locator works for up to 36 hours.
There is nothing visible to tell anyone IGLA is setup, transmission simply will not engage.

The only time we use the small FOB is if relative or dealer needs to drive car and we don't disclose the buttons to press or sequence.
 
#6 ·
The security and anti-theft systems in 2024-2025 Toyota RAV4 Hybrids involve evolving CAN bus authentication implementations, with newer models featuring enhanced SecOC (Secure Onboard Communication) protections. Here's a breakdown of the technical landscape and compatibility with IGLA anti-theft systems:

Key Security Implementations
  1. Unprotected Systems (Pre-2023 Models)
    • Applies to gas/hybrid RAV4s up to MY2023.
    • Vulnerable to CAN bus injection attacks, as demonstrated by hardware exploits targeting unencrypted communication
  2. First-Gen SecOC (2023 Plugins/Primes & Euro Hybrids)
    • Adds Message Authentication Codes (MACs) to CAN messages but was cracked via voltage glitching attacks on the power steering ECU to extract AES keys
    • Exploits require physical access and technical expertise, making theft impractical for most criminals
  3. Second-Gen SecOC (MY2024+ Plugins/Primes)
    • Introduces a Hardware Security Module (HSM) for key storage and cryptographic operations.
    • No public cracks exist for this implementation as of mid-2025
IGLA Anti-Theft System Compatibility
The IGLA system functions independently of CAN bus security by requiring a physical PIN code to start the vehicle, even with a valid key. Evidence suggests:
  • Successful Integration: IGLA has been installed on 2023–2024 RAV4 Hybrids (including models with first-gen SecOC) without conflicts, as it operates through direct button inputs rather than CAN bus manipulation
  • Installation Concerns: Some users reported wiring issues during IGLA removal, but no incompatibilities with factory security systems
For MY2024+ Models with Second-Gen SecOC:
  • The HSM’s unbroken encryption does not inherently block IGLA, as the system does not rely on CAN authentication.
  • However, dealerships or manufacturers might void warranties if aftermarket installations (e.g., tapping CAN wires) are detected
Conclusion
IGLA remains a viable anti-theft solution for MY2024+ RAV4 Hybrids despite the upgraded SecOC implementation, as it bypasses CAN bus vulnerabilities entirely. Its effectiveness depends on proper installation and adherence to warranty guidelines. The HSM’s security primarily impacts third-party CAN-based modifications (e.g., openpilot) rather than standalone systems like IGLA
 
#7 ·
We can close the forum and redirect all posts to a chatgpt model of choice I guess.

Plus it somehow seems as if you fed my post to the AI rather than posing an open question.

If you ever installed an igla you will notice that you are in fact splicing it into the CAN bus cables. Now those lines could theoretically not be protected but since you're definitely dealing with the shifter or engine start button that seems unlikely.

I could have been more precise though in my previous statement: You may not gain full functionality of the system. Because while I believe the CAN side of things would not allow you to send messages, you could still open/close the relevant circuit using LIN messages which would still be a significant hurdle for any would be thief to be aware of and find the igla. For example the A/C control panel would be a suitable LIN part that could unlock your vehicle.