Jaguar XJ8 (X308) Engine Failsafe Mode
On the X308 Engine Failsafe Mode most often comes from the brake pedal switch, especially when the cruise control drops out with it. I'd switch the cruise off as a test and charge the battery first, then read the code with a Jaguar-capable reader before touching the throttle body.
How bad is it · Garage, carefully
Drive gently to a garage and check your brake lights work
Often the car drives normally and only the cruise is lost. But the same switch lights the brake lamps, and a throttle fault can cut power sharply at speed.
Which one applies to yours depends on your symptoms, your model year and what has already been done to it.
Likely causes, most common first
Read the check cost before the odds: a free check that rules a cause out beats a likely guess that costs money.
Worn brake pedal switch
The switch on the brake pedal holds two micro switches — one for the brake lights, one to cancel the cruise — and the engine computer compares them. When they disagree, it shows Engine Failsafe Mode and turns the cruise off. The plastic arm wears where it rides on the pedal, so the switch acts late, or one micro switch gets dirty or fails.
Cruise control drops out or is unavailable, often with no loss of power; sometimes CHECK REAR LIGHTS or a rear bulb warning on braking. A generic reader usually shows nothing; a Jaguar-capable one may show P1797 with U1261. The main brake lights can stay on while the message is showing.
Turn the cruise master switch by the gear lever off and drive — if the message stays away, it's the brake switch. At the pedal, both micro switches should click within a few millimetres of travel. With the ignition on and the engine off, you should hear the switch click as the pedal goes down.
Open the ratchet self-adjuster a little so the switch acts sooner, or pack the worn arm with a thin shim. A new switch is the lasting cure; an X300 switch also fits straight in, and a replacement micro switch can be soldered in. The micro switches themselves rarely fail; the cam inside the switch drifts out of adjustment, and opening its gap by about 6 mm has cured it without a new switch.
Throttle position sensors or the throttle body relay
The electronic throttle body carries the pedal and throttle position sensors, and their tracks wear inside; they aren't sold on their own. When a signal goes out of range, the engine computer drops into fail-safe. A failed throttle body relay cuts the same circuit.
P1121 or P1226; a dead pedal, the engine held at about 1500 rpm, or the car slowing hard and holding one gear. It often clears when you switch off and restart. P1229 with cut-outs just after starting points at the relay. P1251 on the first start of the day, with the messages already up before the engine turns, has been the throttle motor relay. A sensor track worn at one throttle angle trips it at the same speed every time, around 2,650 rpm or about 80 mph in top, often with GEARBOX FAULT, ASC and TRAC NOT AVAILABLE alongside; cruise can mask it.
Read the code. Unplug, clean and refit the throttle body connectors first — they're a known weak spot. With P1229, swap the throttle body relay before anything else. The throttle motor relay is a brown 40 A relay, the same part as the fog lamp relay: swapping the two is a free test. Each throttle and pedal position signal comes from two tracks, one rising and one falling, and the computer drops into fail-safe when they stop agreeing. With the motor holding the throttle, the sensor can only be checked off the body or with the engine running.
A complete throttle body — new, reconditioned or used — cures a worn sensor. Fitting only the sensor means setting its closed and open voltages. Cleaning the plugs often buys weeks or months, then it returns. A professionally rebuilt throttle body has also cured it. Early cars had a throttle body campaign; on later cars a software update has cured some, so ask a dealer about outstanding work first.
Blocked part load breather filling the throttle body with oil
When the part load breather blocks, crankcase oil is pushed into the intake and collects in the throttle body. The throttle then misbehaves and the engine computer can drop into fail-safe.
Rough idle on a cold start with the failsafe message, stalling at idle with the wheel turned and the A/C on, surging at speed; oil in the bottom of the throttle body and the intake tube.
Take off the intake tube and look into the throttle body. Oil pooled there points at the breather, not the throttle body itself.
Clear the blocked part load breather and clean the oil out of the intake.
Gearbox side — conductor plate or gearbox wiring
The engine and gearbox computers talk over a shared network. A fault in the gearbox's conductor plate or harness can set network codes and drag the engine into fail-safe with it.
GEARBOX FAULT alongside the failsafe message, jolting late changes, network codes such as U1269 or P1638, sometimes the selector stuck in Park.
Read the codes with a Jaguar-capable reader and test the battery before blaming sensors. If it's stuck in Park, the release is under the star screw at the top left of the J-gate — push the key into the hole and move the lever. Look at the gearbox harness connector by the gearbox: it corrodes.
A new transmission conductor plate together with a new battery cleared the codes. A short in the gearbox harness can also damage the engine computer, so have the wiring checked before fitting another.
Broken wires in the boot-lid hinge harness
The harness to the boot lid flexes at the hinge every time the boot opens. When wires break inside the tape, the shared network drops messages and unrelated systems start reporting faults at once, Engine Failsafe Mode among them.
A BOOT OPEN message that won't clear, dead boot lights or an intermittent boot release, then a storm of warnings: failsafe, GEARBOX FAULT, ASC and TRAC NOT AVAILABLE, low brake fluid, handbrake, dead gauges. Key off and on clears it for a while. A network code such as P1642 may be stored.
Open the boot and unwrap the old tape on the harness where it runs over the hinge. Look for wires broken at more than one place, and wiggle the bundle with the fault present.
Solder and heat-shrink each broken wire, then rewrap with new tape and a ribbed sleeve. BOOT OPEN and the warning storm went together.
A faulty body module holding the brake lights on
The main brake lights are switched by a module, not straight by the pedal switch. If that module fails and holds them on, the engine computer sees the brakes applied all the time, cuts the cruise and flags fail-safe. A module on the damaged side of a car that has been in a crash is a prime suspect.
Failsafe and dead cruise after a few minutes' driving, with the main brake lights stuck on while the high stop light behaves. A new brake switch changes nothing.
With the fault present, unplug the brake pedal switch. If the main brake lights stay on, the switch is cleared and the module is next.
An auto electrician repaired the body module and the brake lights, cruise and failsafe message all came right.
Split cruise control vacuum hose
On early cars the cruise control works on vacuum. A split elbow or a broken plastic junction lets it fail, and the engine computer flags failsafe.
The message comes on when you press the cruise button or while cruising, with the brake switch and throttle body already ruled out. Only cars up to mid-1999 have vacuum cruise, with a round black actuator on the throttle body; later cars are electronic.
Lift the bulkhead cover and look at the small plastic four-way vacuum junction, then the vacuum elbow on top of the throttle body. With the engine idling, spray starting fluid round the joints: a rise in idle speed finds the leak.
Worth trying before anything dearer: replace the cracked elbow or junction.
Weak battery
The X308's electronics cope badly with low voltage. A tired battery can set off a whole cluster of unrelated warnings at once, often after short trips.
Engine Failsafe Mode together with TRANSMISSION FAULT, ASC NOT AVAILABLE, LOW BRAKE FLUID or TRAC NOT AVAILABLE; sometimes the car won't start. A low battery can also leave a stored P1797 that means nothing on its own.
Charge the battery fully off the car, then measure it — below 12.25 V, replace it. Watch the voltage while cranking too. At rest a healthy battery reads about 12.6 V; 12.2 V is already a quarter discharged.
Worth trying first: charge or replace the battery, then disconnect it for about half an hour so the modules reset.
The order to check them in
The point of the order is money: each step either rules a cause out or makes the next one worth doing. Green is free, amber costs a little, red is the one to arrive at last.
Note the exact message
ENGINE FAILSAFE MODE and RESTRICTED PERFORMANCE are different messages with different causes, and either can come with no stored code. If several unrelated warnings appear together, think battery first.
freeDrive with the cruise switched off
Turn the cruise master switch by the gear lever off. If the message stops, go straight to the brake pedal switch.
freeCharge and test the battery
Charge it fully off the car and measure: below 12.25 V it needs replacing. Then disconnect it for about half an hour to reset the modules.
freeRead the codes with a Jaguar-capable reader
A generic reader often shows nothing. P1797 with U1261 has turned out to be the brake switch, P1121 or P1226 the throttle body, P1229 its relay. P1251 on a cold first start: swap the throttle motor relay with the fog lamp relay.
a code readIf BOOT OPEN is stuck on, look at the boot hinge harness
A BOOT OPEN message that won't clear, together with a storm of unrelated warnings, points at broken wires where the harness crosses the boot hinge. Unwrap the tape there before buying any part.
freeCheck the brake pedal switch
It's held by one bolt and a self-locking nut, awkward to reach upside down in the footwell. When refitting, press the pedal so the tab and the pedal-arm peg engage. Fit a new switch rather than a used one.
free to adjust; about £50 newLook at the cruise vacuum hoses
Under the bulkhead cover check the four-way vacuum junction, then the elbow on top of the throttle body.
penniesClean the throttle body plugs, then the relay, then the body
Clean and refit the connectors first, and look inside for oil from the breather. Swap the throttle body relay if the code is P1229. Only then replace the throttle body.
£100–280What it usually isn't
Don't spend money here first:
If none of this finds it:
On jagaux.com
- Jaguar XJ8 (X308) Restricted PerformanceIf the dash says Restricted Performance rather than Engine Failsafe Mode.
- Jaguar XJ8 (X308) Transmission ProblemsIf GEARBOX FAULT comes with it, or the car is stuck in one gear.
- Jaguar XJ8 (X308) Won't Start, No Crank or Car DeadIf the warnings come with a no-start or a flat battery.
- XJ8 (X308) fuse and relay boxesTo find the throttle body relay before you swap it.
- Jaguar radio code generatorFree. For when the radio asks for its code after the battery has been off.
- Jaguar XJ8 (X308) Check Engine Light, Fault CodesIf there's no message on the dash, only the check engine light.
- Jaguar VIN decoderConfirm your exact model year, engine and factory options before ordering parts — free.
Ratings, fuse numbers and torque figures vary by model year and market. Read the legend on your own car before pulling anything, and use the figures in the manual for your car, not the ones in a video.
Check your VIN: exactly which car you have and which bulletins apply to it.