The crankshaft position sensor (CPS) in a Subaru Legacy is a critical engine management component that provides the engine control unit (ECU) with real-time data on the crankshaft’s angular position and rotational speed. This information is essential for precise fuel injection timing, ignition spark control, and variable valve timing operations. When the sensor begins to fail, common symptoms include intermittent stalling, rough idle, extended cranking before starting, and sometimes a check engine light with diagnostic trouble codes (DTCs) such as P0335 or P0336. Accurately locating the sensor is the first step in diagnosis or replacement. Because the Legacy has been produced across multiple generations with different engine families (EJ, EZ, FA, FB), the sensor’s position varies. This comprehensive guide covers typical sensor locations, required tools, step-by-step identification procedures, and troubleshooting tips for all major Subaru Legacy model years.

Understanding the Crankshaft Position Sensor in a Subaru Legacy

The crankshaft position sensor (CPS) in a Subaru Legacy functions as a magnetic or Hall-effect sensor that detects the rotation of the crankshaft by reading a toothed reluctor ring mounted either on the crankshaft or the flywheel. On Subaru’s horizontally opposed (boxer) engines, the sensor is usually mounted through the engine block or timing cover, positioned to face a reluctor ring with a 36-2 or 36-1 tooth pattern. The sensor must maintain a precise air gap, typically between 0.5 mm and 1.5 mm, between its sensing tip and the reluctor teeth for accurate signal generation. Any contamination such as oil or debris, physical damage, or misalignment can cause signal loss, resulting in misfires, rough running, or no-start conditions.

In Subaru Legacy engines, the CPS may be paired or integrated with the camshaft position sensor for engine synchronization, but it always retains a distinct physical location. Understanding the engine family in your specific Legacy helps narrow down the sensor’s location:

  • EJ series (found in Legacy models up to about 2009) often mounts the CPS near the front of the engine.
  • FA/FB series (from 2010 onward) tend to locate it near the oil pan or timing chain cover on the passenger side.
  • EZ six-cylinder engines (for H6 Legacy models) have the sensor mounted on the front of the block, close to the crankshaft pulley.

Knowing these distinctions makes locating, diagnosing, and replacing the sensor more efficient.

General Location Across Subaru Legacy Generations

The Subaru Legacy has spanned seven generations (1990–present). While early models share common EJ22/EJ25 engine mounting, later generations introduced FA20 and FB25 engines with timing chains instead of belts. Below is a detailed breakdown by generation.

First and Second Generation (1990–1999)

These Legacy models were equipped primarily with the EJ22 or EJ25 engine, featuring a timing belt-driven system. The crankshaft position sensor is mounted on the front of the engine, behind the timing belt cover. Specifically, the sensor is threaded into the engine block just above the crankshaft sprocket. Accessing it requires removal of the serpentine belt, the crankshaft pulley, and the timing belt covers.

The electrical connector is a two-pin weatherproof style and is located on the passenger side (right side of the engine) near the front. There is no need to remove the entire timing belt unless performing a full replacement; simply unbolt the sensor from its mounting boss.

On turbocharged Legacy models (e.g., Legacy GT), the CPS location is identical, but removal of the intercooler air ducting might be necessary to gain a clear line of sight. It is important to clean the area surrounding the sensor before removal to prevent debris from falling into the timing cover, which could lead to timing belt damage.

Third and Fourth Generation (2000–2009)

These Legacy generations introduced the EZ30 six-cylinder engine and evolved the EJ25 engine with variable valve timing (AVCS). For EJ engines, the crankshaft position sensor remains near the front, behind the timing belt cover, similar to earlier models. However, some 2005–2009 models with the EJ253 engine (non-turbo) have the sensor relocated to the lower right side of the engine block, adjacent to the oil pan. This relocation corresponds with a revised reluctor ring design.

You can identify the sensor location by tracing the main engine harness from the ECU down toward the passenger side of the block, near the starter motor area. This position is lower and requires access from underneath or from the side after removal of splash shields or engine covers.

For the EZ30 H6 engine, the sensor is mounted on the front of the engine, just above the crankshaft pulley, underneath the intake manifold plenum. Access requires removal of the air filter box and plastic intake duct. The sensor is secured by a single 10mm bolt, and its electrical connector points toward the radiator.

Fifth and Sixth Generation (2010–2019)

These models marked the transition to FA20 and FB25 engines with timing chains instead of belts. On the FA20 engine (used in some Legacy trims like the 2.0 GT, though more common in Forester and Impreza), the crankshaft position sensor is located on the passenger side of the engine block, low down just behind the alternator and above the oil pan. It is bolted to the block with a single 10mm head bolt. The sensor tip faces a reluctor wheel integrated into the crankshaft web.

Access from the top is often challenging due to tight engine bay packaging, so many technicians find it easier to work from underneath the vehicle after removing the plastic splash shield.

On the sixth generation (2015–2019), the FB25 engine continues with the same sensor location. Some owners report that the sensor is partially obscured by the wiring harness for the knock sensor. Carefully moving the harness aside reveals the two-pin connector. The sensor body is black plastic with a rectangular mounting flange.

Seventh Generation (2020–Present)

The current Legacy (2020 and newer), offered with the FB25 or FA24 turbocharged (Legacy XT) engines, carries a similar sensor placement as the previous generation. The sensor is located on the front (nose) of the engine, on the passenger side, at the junction between the timing chain cover and the oil pan. It is accessible from above after removal of the engine cover, which is a large plastic cover over the engine.

When the engine cover is removed, you will see a small black component with a two-pin connector pointing forward. A single 10mm bolt secures it to the timing chain cover. The air gap is preset at the factory, so the sensor simply bolts in place with no manual adjustment required.

For the FA24 turbocharged engine, the sensor is positioned slightly higher due to the routing of turbo oil and coolant lines, but the location remains essentially the same.

Step-by-Step Guide to Locating the Crankshaft Position Sensor

The following procedure applies to most Subaru Legacy models equipped with the EJ25 or FB25 engine. Always consult your vehicle’s factory service manual for torque specifications and exact connector locations, as these can vary by model year and engine variant.

Safety Precautions

  • Park the vehicle on a level surface and engage the parking brake.
  • Allow the engine to cool completely before beginning work to avoid burns from hot components.
  • Disconnect the negative battery terminal and wait at least 10 minutes to allow the airbag system capacitors to discharge.
  • Wear safety glasses and mechanic’s gloves to protect against debris and sharp edges.
  • If you need to access the underside of the vehicle, use proper jack stands—never rely solely on a hydraulic jack.

Tools You Will Need

  • 10mm socket with an extension (most CPS bolts are 10mm; some may be 8mm)
  • Ratchet wrench (1/4-inch or 3/8-inch drive)
  • Flathead screwdriver (helpful for prying stubborn electrical connectors)
  • Flashlight or work light for illuminating tight spaces
  • Trim removal tools (to safely remove clips and plastic covers without damage)
  • Replacement CPS (if replacing) – OEM sensor part numbers such as 22690-AA001 or equivalent
  • Dielectric grease (to protect connector pins and prevent corrosion)

Locating the Sensor: Step-by-Step

  1. Remove the engine cover: For 2000s-era Legacys, simply lift the plastic cover off the engine. Newer models use rubber grommets—pry up gently at these points to free the cover. Set the cover aside in a clean area.
  2. Identify the front of the engine: The crankshaft pulley is positioned at the front of the engine. The CPS will be located somewhere on the passenger side of the block, usually within 12 inches of the pulley.
  3. Inspect behind the alternator: On many FB25 and FA20 engines, the CPS sits just behind the alternator bracket. Look for a two-wire connector coming from the engine harness that connects to a small black or gray plastic sensor body.
  4. Check near the oil pan: On some EJ engines from 2005–2009, the CPS is mounted lower, almost level with the oil pan flange. Use a flashlight to look underneath the passenger side of the engine. Removing splash shields may be necessary for better access.
  5. Consult service manuals or online diagrams: If unsure, search for “Subaru Legacy crankshaft position sensor location” along with your engine code (e.g., EJ25 or FB25). Many enthusiasts and repair forums provide clear photos and detailed instructions.
  6. Confirm by unbolting the sensor: Once you believe you have located the sensor, trace the wiring 1–2 inches back to confirm it goes to a two-pin electrical connector. Carefully unbolt the sensor—if it is the CPS, you will see a long cylindrical sensing tip approximately 1 to 1.5 inches in length.

If you cannot see or access the sensor from above, accessing it from underneath the vehicle is often necessary. Remove the plastic under-engine splash shield (secured by 10mm bolts and push clips), then look toward the front of the oil pan on the passenger side. The CPS may be mounted horizontally into the side of the engine block.

Common Mistakes When Trying to Find the CPS

  • Confusing the CPS with the knock sensor: The knock sensor on Subaru engines is typically located near the top of the engine block, between the cylinder heads, and features a single wire. In contrast, the CPS is mounted lower and always has a two-wire connector (signal and ground).
  • Looking only at the front of the engine: Some Subaru Legacy models have the CPS located near the rear of the engine block close to the flywheel, particularly in certain automatic transmission configurations. Check the rear side of the engine near the bell housing if you cannot find the sensor at the front.
  • Assuming all EJ engines have the same sensor placement: The EJ253 and EJ255 turbo engines have different CPS locations due to variations in turbocharger placement and engine layout. For example, the EJ255/257 (Legacy GT) sensor is still front-mounted but often hidden by the turbo inlet duct.
  • Not disconnecting the battery before working: Accidentally shorting the sensor’s signal wire to ground while the engine is running can damage the ECU, leading to costly repairs.
  • Failing to clean the sensor area before removal: Dirt and debris can enter the timing belt or chain area if the sensor is removed without cleaning, resulting in potential engine damage.

When to Replace the CPS and How to Test It

If you have located the sensor and suspect it is faulty, there are several diagnostic tests you can perform before purchasing a replacement:

  • OBD2 Live Data Monitoring: Using a compatible OBD2 scan tool, monitor the crankshaft position sensor’s RPM readings while cranking the engine. The sensor should register a count, typically between 500 and 800 RPM during cranking, or show a voltage pulse pattern. A reading of zero RPM with no engine start usually indicates a CPS or wiring fault.
  • Visual Inspection: Inspect the sensor tip for metal shavings, oil contamination, or debris. Clean the tip gently with a lint-free cloth and reinstall to test if the issue resolves.
  • Connector and Wiring Check: Examine the electrical connector for corrosion or bent pins. Use dielectric grease on the connector pins to improve conductivity and prevent moisture intrusion.
  • Resistance Testing: Consult the vehicle’s service manual for specific resistance values. Using a multimeter, measure the sensor’s resistance across its two terminals. A reading significantly outside the specified range indicates sensor failure.

The air gap in most Subaru CPS units is preset at the factory and cannot be manually adjusted; the mounting bracket ensures proper clearance. If the sensor shows physical damage, corrosion, or the engine’s performance improves after unplugging and reconnecting the sensor (indicating an intermittent electrical connection), replacement is recommended.

Always use a genuine Subaru sensor or a high-quality aftermarket unit from reputable manufacturers such as Denso, Hitachi, or NTK. Cheap aftermarket sensors often fail prematurely or provide inaccurate signals, potentially causing more engine management problems.

Additional Tips for CPS Replacement and Maintenance

  • Label Connectors: When disconnecting wiring connectors, label them or take pictures to ensure correct reassembly.
  • Torque Specifications: Use the factory-recommended torque for sensor bolts (typically around 8–12 Nm) to avoid sensor damage or improper seating.
  • Inspect Related Components: While accessing the CPS, inspect the timing belt or chain condition, crankshaft pulley, and surrounding wiring harnesses for wear or damage.
  • Perform a System Reset: After replacement, clear any stored trouble codes with an OBD2 scanner and perform a test drive to confirm the repair.
  • Avoid Excessive Force: When removing the sensor or connector, avoid pulling on wires—use proper tools and techniques to minimize damage.
  • Check for Software Updates: Some Subaru models may benefit from ECU software updates after sensor replacement to optimize engine management.

Conclusion

Locating the crankshaft position sensor in a Subaru Legacy requires understanding the engine generation and following a methodical approach. Whether your Legacy is a 1996 EJ22, a 2007 EZ30 six-cylinder, or a 2022 FB25, the sensor will be found near the crankshaft—either at the front of the engine behind the timing cover, on the passenger side of the block above the oil pan, or occasionally near the flywheel at the rear. By using the guidelines provided in this article, you can visually identify the sensor within minutes, perform diagnostic checks, and replace it if necessary.

Remember to gather the proper tools, follow safety precautions, and consult your vehicle’s service manual for specific details. Proper maintenance and timely replacement of the crankshaft position sensor help ensure reliable engine performance and prevent breakdowns. If you encounter difficulties during the process, consider consulting a professional mechanic or Subaru dealership for assistance.