Vehicle Diagnostics Protection (VDP)

Hello,

Does anyone have experience with SFD (Software Flash Download) on the current models of Audi, Seat, Skoda, and VW?
Recently, a customer wanted to have a brand new Audi S3 programmed, but unfortunately, the attempt failed.

Best regards, Rainer.

Good evening, Rainer,

Adjustments are possible. Conditional coding only.

For vehicles equipped with SFD, the hood must be open and the parking brake must be engaged.

Here, you could ask the customer again if they have made sure of something. Of course, it also depends on which control unit he wanted to connect it to.

17, 5F, 19, and 09 are definitely secured. I'm not sure about the engine control unit. There were some changes or modifications there. EU regulations.

Maybe he'll get lucky.


Otherwise, I was able to determine that after clearing the SFD (Subaru Fault Data), it is possible to continue working with VCDS as normal.


Best regards,

Michael.

Hello,

Currently, certain adjustments can still be modified, but this will become increasingly limited in the future.
For official workshops (including independent ones), VW offers a cost-based online access to unlock the SFD (Software Feature Definer) function.
After activation, access is also possible via, for example. VCDS is possible.
After a certain period of time, or when using the original tester with the diagnostic output, the control units will be locked again.
Best regards, Dago.

Does this also work for individuals, or only for companies?
Best regards, Dago.

Dagomanu wrote:

Does this also work for individuals, or only for companies? Best regards, Dago

Hello,

It depends on the country. In Switzerland and Germany, I believe this is only applicable to companies (workshops).

Best regards, Rainer.

Hello everyone,

Currently, an offline token is required to disable the SFD in VCDS. This can be generated via the access point in the dealer portal.

The requirements for accessing the merchant portal are the same as those for the GeKo system. In addition, it is planned that each technician will be assigned a unique identifier.

Ultimately, it is possible to determine which technician made which modification.


Best regards,

Michael.

There's something new coming soon regarding SFD, and the possibilities for independent workshops will become simpler.

dieselschrauber wrote:

There will soon be something new regarding SFD, and the possibilities for independent workshops will become simpler.

Okay, thanks, and please keep us updated.

Hello everyone,
Are there any new findings regarding SFD?

I have a 2020 Caddy with SFD, but I haven't been able to...
To activate the EPB (Electronic Parking Brake) overlay mode to switch between BBS (Brake Bleed System) and BS (Brake System)?

Reading the token via SFD in VCDS and then entering it to unlock the SFD in the control unit results in an "invalid token" error?

Is there another way?

Best regards.
Heiko.

Hello,

That's not how it works.

Using the unlock request structure from VCDS, a token must be generated by VAG.

See:

VAG wrote:

https://erwin.volkswagen.de/erwin/downloadStaticFile/volkswagen/files/diagnostic/DE_SFD-Anleitung_fuer_UMB.pdf

Ross-Tech is working on a way to make this process more convenient.

Best regards, Rainer.

Hello,

Ross-Tech plans to provide owners of the HEX-V2 and HEX-NET devices, starting from a certain production year, with a limited-time SFD credit that they can use to generate corresponding tokens.
This would enable service work on the corresponding models.

Ross-Tech is working with VAG on an implementation. However, the challenges, which are not only technical, seem to be significant, and everyone working on a corresponding solution for diagnostic tools is grappling with them.

News related to this topic will be posted here.

Best regards, Rainer.

Distinction between SFD and SFD2:

SFD: Enables restricted access to control units using a release token (via VCDS).

In your car's scan, modules such as 15 (Airbags) and 46 (Central Conv.) display the SFD label, but not SFD2.
The SFD button appears in VCDS, and the protocol is UDS (not UDS-R).

SFD2 (enhanced security level):

Blocks all access (except for the gateway) with VCDS versions prior to 25.3 (currently only available in English).

The latest version of VCDS (25.3 or higher) requires "Restricted Mode" (UDS-R) to even perform a basic scan.

Attention, an SFD code is usually valid for 90 minutes.

Code:

------------------------------------------------------------------------------- Adresse 03: Bremsenelektronik (J104) Labeldatei: 5WA-614-517-V1.clb Teilenummer SW: 5WA 614 517 CF HW: 5WA 614 517 N Bauteil: ESC H13 0135 Seriennummer: 92483000028622 Datenstand-Nummer: V03935404AQ 0001 CVN: BAE3684C Codierung: B6046D9856246A6E527F6C0236CA81814BD208554AC8E70821BCB631018FF100001C38 ASAM Datensatz: EV_Brake1ESCEPBMQB37W 013058 ROD: EV_Brake1ESCEPBMQB37W_013_AU38.rod VCID: 0E445BxxxxxF52FA0D6-805A SFD <--- Kein(e) Fehlercode(s) gefunden. -------------------------------------------------------------------------------

...according to plans by Ross-Tech, owners of the unlimited HEX-V2 and HEX-NET starting from a certain production year will receive a time-limited SFD credit, with which they can generate corresponding tokens...

dieselschrauber wrote:

That sounds good - I'm very excited to see what the future holds here. How do we solve this by then? "I'm planning to have my braking system overhauled soon - and I'm seeing SFD in the log."

What other solutions are currently available if you don't have access to Erwin? Can a 1-hour access period be created for SFD?

dieselschrauber wrote:

Hello, Ross-Tech plans to provide owners of the HEX-V2 and HEX-NET devices, starting from a certain production year, with a limited-time SFD credit that they can use to generate corresponding tokens. This would enable service work on the corresponding models. Ross-Tech is working with VAG on an implementation. However, the challenges, which are not only technical, seem to be significant, and everyone working on a corresponding solution for diagnostic tools is grappling with them. News related to this topic will be posted here. Best regards, Rainer

Hello,

Are there any updates yet?

Best regards, Thomas.

Hello,

There is news about ....

OEMs (Original Equipment Manufacturers) don't just want to get rid of private users; they also make it difficult for independent workshops.

I'm sharing an email I received.

The company is looking for a highly motivated and experienced software engineer to join our team. The ideal candidate will have a strong background in Java and experience with cloud technologies. We offer a competitive salary and benefits package.


Dear Sir or Madam,

To access the information needed for repairs online, independent market participants must apply for a FAZIT/GeKo authorization. Since April 1, 2024, this application process has no longer been handled by market societies/importers, but rather by national conformity assessment bodies.



"So far, all GeKo permissions that were granted before the introduction of the SERMI process on April 1, 2024, have remained valid. This will change on March 31, 2026. To comply with EU security standards, it will be mandatory from April 1, 2026, that you link your GRP user account with your valid SERMI certificate." All users with extended diagnostic privileges whose GRP user account is not linked to a valid SERMI certificate as of April 1, 2026, will have their FAZIT/GeKo privileges revoked starting April 1, 2026.

(If you have already linked your GRP user account with your SERMI certificate, you will not be affected by the aforementioned change.)

Even without FAZIT/GeKo authorization, you will be able to perform SFD unlocks and SVM functions. Safety-related work is only possible again once you have linked your GRP user account with your valid SERMI certificate.



How do I link my GRP user account with my SERMI certificate?

To activate the GeKo rights, you must start the "SERMI" application in the GRP system. You can generate a QR code there and use it to link to the certificate that was issued to you by one of our services.
The certificate was issued by an accredited certification body (https://www.vehiclesermi.eu/req.html#req). You can find a corresponding click-through guide in the attachments to this email. Please also refer to the procedures described in "Hinweise zum Diebstahlschutz und Beantragung einer FAZIT/ GeKo Berechtigung" <Volkswagen> for further information.

Please note that the connection established to the SERMI certificate is only valid for 60 days. Therefore, please remember to renew the certificate before the expiration date to prevent the revocation of your GeKo rights (to do so, simply follow the process described in...). Please review the SERMI click-through instructions again.

------------------End of text.----------------


For SFD 2, real-name verification and the Google Authenticator are required. I'm not sure how far you can get without an entry in the trade register or with a valid business license. The registration process alone is extremely lengthy, which already reflects a certain unwillingness to cooperate.

I can't imagine that things will be reversed or made easier. The fees for the Serma certification and for unlocking the gateways, as well as the OEM fees, are not insignificant. The fees are so high that it's hardly worth it for private users.

In future vehicles, the error memory will be located in the backend and will no longer be stored in the vehicle itself.



Best regards,

Michael.