Index: firmware/App/Services/FpgaDD.c
===================================================================
diff -u -rdc451e960ab328d05a06137ffdc4d8b2b1601d55 -rfe42cf04eec138a529f06190ab70a72384b60e34
--- firmware/App/Services/FpgaDD.c	(.../FpgaDD.c)	(revision dc451e960ab328d05a06137ffdc4d8b2b1601d55)
+++ firmware/App/Services/FpgaDD.c	(.../FpgaDD.c)	(revision fe42cf04eec138a529f06190ab70a72384b60e34)
@@ -317,7 +317,7 @@
     U16 fpgaD18PresTemp;                        ///< Reg 534. D18 MPM pressure sensor RAW temperature data
     U16 fpgaD41PresPressure;                    ///< Reg 536. D41 MPM pressure sensor RAW pressure data
     U16 fpgaD41PresTemp;                        ///< Reg 538. D41 MPM pressure sensor RAW temperature data
-    U32 fpgaAvailableRegister1;                 ///< Reg 540. Available register 1
+    U32 fpgaD92SpeedCnt;                        ///< Reg 540. D92 Substitution Pump Hall sensor speed counter.
     U08 fpgaHallSensInputs;                     ///< Reg 544. Hall sensor Inputs
     U08 fpgaD42TxFIFOCnt;                       ///< Reg 545. Blood leak sensor transmit FIFO count
     U16 fpgaD42RxErrorCnt;                      ///< Reg 546. Blood leak sensor Receive error count
@@ -4001,4 +4001,16 @@
     return fpgaSensorReadings.fpgaP18CalMemCounter;
 }
 
+/*********************************************************************//**
+ * @brief
+ * The getFPGAD92PumpHallSenseCount function gets substitution pump, D92,
+ * hall sensor speed counter.
+ * @details \b Inputs: fpgaD92SpeedCnt
+ * @details \b Outputs: none
+ * @return substitution pump hall sense pulse width
+ *************************************************************************/
+U32 getFPGAD92PumpHallSenseCount( void )
+{
+    return fpgaSensorReadings.fpgaD92SpeedCnt;
+}
 /**@}*/
Index: firmware/App/Services/Messaging.c
===================================================================
diff -u -rdc451e960ab328d05a06137ffdc4d8b2b1601d55 -rfe42cf04eec138a529f06190ab70a72384b60e34
--- firmware/App/Services/Messaging.c	(.../Messaging.c)	(revision dc451e960ab328d05a06137ffdc4d8b2b1601d55)
+++ firmware/App/Services/Messaging.c	(.../Messaging.c)	(revision fe42cf04eec138a529f06190ab70a72384b60e34)
@@ -61,6 +61,7 @@
 #include "StateInletPressureCheck.h"
 #include "SubstitutionPump.h"
 #include "SystemCommDD.h"
+#include "SubstitutionPump.h"
 #include "Temperature.h"
 #include "TestSupport.h"
 #include "TDInterface.h"
@@ -292,6 +293,8 @@
     { MSG_ID_DD_TEMPERATURE_SENSOR_FILTERED_TEMP_OVERRIDE_REQUEST,                  &testDDTemperatureSensorFilteredReadingsOverride },
     { MSG_ID_FP_SET_RECOVERY_VALVES_REQUEST,                                        &testIOFPSetValveRecoveryConfig },
     { MSG_ID_DD_SUBSTITUTION_PUMP_START_STOP_OVERRIDE_REQUEST,                      &testSubstitutionPumpStartStopOverride },
+    { MSG_ID_DD_SUBSTITUTION_PUMP_BROADCAST_OVERRIDE_REQUEST,                       &testSubstitutionPumpDataPublishIntervalOverride },
+    { MSG_ID_DD_SUBSTITUTION_PUMP_TARGET_SPEED_OVERRIDE_REQUEST,                    &testSubstitutionPumpTargetSpeedOverride },
 };
 
 /// Calculation for number of entries in the incoming message function handler look-up table.