Vehicle Diagnostics Protection (VDP), Diagnostic Filters, Firewall (Solution)

Code:

Adresse 09: Zentralelektrik (J519)   Teilenummer SW: 1EE 937 089 D    HW: 1EE 937 089   Bauteil: SAM_H         H08 0530   ASAM-Datensatz: EV_SAMVW31x 005001   VCID: 43DB1062BB164BA2C69-8016 SFD

Protection of Vehicle Diagnostics (SFD), diagnostic filters & firewall

Code:

Adresse 19: CAN-Gateway (J533)   Teilenummer SW: 1EE 937 012 D    HW: 1EE 937 012   Bauteil: ICAS1 Host-SG 021 0411   ASAM-Datensatz: EV_GatewICAS1MEBUNECE 001013   VCID: 353F7EBAE5C2E51278D-8060 SFD+SFD2

Protection of Vehicle Diagnostics (SFD) Protection of Vehicle Diagnostics (SFD), also known as Protection of Vehicle Diagnostics (PVD), replaces the existing login and security access functionality. This means that basic functions such as reading the engine control unit (ECU) identification, event data, diagnostic trouble codes (DTCs), or measured values will not be affected.However, advanced functions such as coding, adaptation, basic settings, and/or output tests may be limited and require an SFD unlock. SFD (Software Feature Disable) was first introduced in the 2020 model year and was initially limited to newly introduced models and/or control units. There are vehicles where some control units still use the traditional login/security access protection, while other control units in the same vehicle utilize the newer SFD protection.A VCDS scan will show you whether a specific control unit requires SFD unlocks for certain functions. This is indicated by the addition of "SFD" in the VCID line. Vehicle Diagnostics Protection 2 (SFD2) SFD2 does NOT replace the SFD described above. Instead, it serves as an extension of the original SFD functionality to protect control units from unauthorized manipulation (legally required). This primarily targets driver assistance systems, autonomous driving, software updates, and general cybersecurity (e.g., UNECE R 155 and/or UNECE R 156).The vehicle manufacturer must ensure that all modifications are factory-authorized. This means that features like encoding and adaptation, as well as updates, etc., can only be implemented if they are digitally signed and cryptographically secured.This restriction does not apply to most service-related functions such as service resets, diesel particulate filter regeneration, brake pad replacement, or other typical workshop tasks. These can continue to be performed even after a regular SFD unlock. SFD2, however, restricts/prevents most modifications and similar attempts to enable features that are not originally available from the manufacturer.A vehicle scan using VCDS will show you whether a specific control unit requires SF2-signed messages for certain functions. This is indicated by the addition of "SFD2" in the VCID line: See also: Unlocking the vehicle diagnostic protection / Unlocking SFD Discussion about SFD