SFD - Revision history

Sebastian1 at 17:57, 29 December 2025

2025-12-29T17:57:51Z

Sebastian1 at 16:37, 11 August 2025

2025-08-11T16:37:48Z

← Older revision		Revision as of 16:37, 11 August 2025
Line 103:		Line 103:
	#		#
	# '''Does SFD/SFD2 only apply to [https://en.wikipedia.org/wiki/United_Nations_Economic_Commission_for_Europe UNECE] Regions/Countries?'''		# '''Does SFD/SFD2 only apply to [https://en.wikipedia.org/wiki/United_Nations_Economic_Commission_for_Europe UNECE] Regions/Countries?'''
	#: SFD applies to Audi, Bentley Bugatti, CUPRA, MAN, SEAT, Skoda, Volkswagen and Volkswagen Commercial models starting with MY 2020/2021, no matter which Region/Country the vehicle was produced for. While SFD2 is related to [https://en.wikipedia.org/wiki/United_Nations_Economic_Commission_for_Europe UNECE] R 155/156, it is also rolled out in non-UNECE Regions/Countries.		#: SFD applies to Audi, Bentley, Bugatti, CUPRA, MAN, SEAT, Skoda, Volkswagen and Volkswagen Commercial models starting with MY 2020/2021 (exact introduction dates differ from model to model), no matter which Region/Country the vehicle was produced for. While SFD2 is related to [https://en.wikipedia.org/wiki/United_Nations_Economic_Commission_for_Europe UNECE] R 155/156, it is also rolled out in non-UNECE Regions/Countries.

Sebastian1 at 16:36, 11 August 2025

2025-08-11T16:36:36Z

← Older revision		Revision as of 16:36, 11 August 2025
Line 15:		Line 15:
	= Schutz der Fahrzeugdiagnose 2 (SFD2) =		= Schutz der Fahrzeugdiagnose 2 (SFD2) =

	SFD2 does NOT replace the aforementioned SFD. Instead it is meant as an extension for the original SFD functionality in order to secure Control Modules against unauthorized manipulation (by law). This is primarily aimed at driver assistance systems, autonomous driving, software updates and cyber security in general (i.e. UNECE R 155 and/or UNECE R 156).		SFD2 does NOT replace the aforementioned SFD. Instead it is meant as an extension for the original SFD functionality in order to secure Control Modules against unauthorized manipulation (by law). This is primarily aimed at driver assistance systems, autonomous driving, software updates and cyber security in general (i.e. [https://en.wikipedia.org/wiki/United_Nations_Economic_Commission_for_Europe UNECE] R 155 and/or [https://en.wikipedia.org/wiki/United_Nations_Economic_Commission_for_Europe UNECE] R 156).

	The vehicle manufacturer has to ensure that all modifications must be factory authorized, resulting in functions like Coding and Adaptation, as well as Updates etc. only being possible when digitally and cryptographically signed.		The vehicle manufacturer has to ensure that all modifications must be factory authorized, resulting in functions like Coding and Adaptation, as well as Updates etc. only being possible when digitally and cryptographically signed.
Line 97:		Line 97:
	#		#
	# '''While an automated/built-in unlock isn't released yet, can Ross-Tech provide ''offline'' unlock tokens for SFD?'''		# '''While an automated/built-in unlock isn't released yet, can Ross-Tech provide ''offline'' unlock tokens for SFD?'''
	#: No, but they can be obtained for example [https://shop.pci-diagnosetechnik.de/SFD-Unlock-Base-Rate-incl-1-Control-Unit from one of our distributors]		#: No, but they can be obtained for example [https://shop.pci-diagnosetechnik.de/SFD-Unlock-Base-Rate-incl-1-Control-Unit from one of our distributors]. Some markets/regions/countries (i.e. China) may be excluded from this offer.
	#		#
			# '''How to determine if a vehicles has SFD/SFD2 without an Auto-Scan?'''
			#: You may see references to PR-Codes like PR-NI0/NI1/NI7/NI8/NI9 which do indicate that a vehicle conforms with the requirements for the specific market it was build for. With PR-NI1/NI7/NI8/NI9 you can expect some/all Control Modules to be SFD2 locked. There are no production/build codes that do show if a vehicle requires SFD unlocks.
			#
			# '''Does SFD/SFD2 only apply to [https://en.wikipedia.org/wiki/United_Nations_Economic_Commission_for_Europe UNECE] Regions/Countries?'''
			#: SFD applies to Audi, Bentley Bugatti, CUPRA, MAN, SEAT, Skoda, Volkswagen and Volkswagen Commercial models starting with MY 2020/2021, no matter which Region/Country the vehicle was produced for. While SFD2 is related to [https://en.wikipedia.org/wiki/United_Nations_Economic_Commission_for_Europe UNECE] R 155/156, it is also rolled out in non-UNECE Regions/Countries.

Dana at 13:12, 7 August 2025

2025-08-07T13:12:25Z

← Older revision		Revision as of 13:12, 7 August 2025
Line 75:		Line 75:
	#* IDE13754-MAS16875 Diagnosis filter: status-Filter status Filter active		#* IDE13754-MAS16875 Diagnosis filter: status-Filter status Filter active
	#:		#:
	#; In this case you must use steps 3 and 4. The Diagnostic Firewall active.		#; In this case you must use steps 3 and 4. The Diagnostic Firewall is active.
	#		#
	# SFD unlock the "Diagnostic Interface for Databus / Gateway" (#19) and verify the following Measuring Value shows a non-zero number of minutes:		# SFD unlock the "Diagnostic Interface for Databus / Gateway" (#19) and verify the following Measuring Value shows a non-zero number of minutes:

Sebastian1 at 13:09, 7 August 2025

2025-08-07T13:09:30Z

← Older revision		Revision as of 13:09, 7 August 2025
Line 11:		Line 11:
	Component: SAM_H H08 0530		Component: SAM_H H08 0530
	ASAM Dataset: EV_SAMVW31x 005001		ASAM Dataset: EV_SAMVW31x 005001
	~~ROD: EV_SAMVW31x_005_VWE3.rod~~		VCID: 43DB1062BB164BA2C69-8016 '''SFD'''
	VCID: 43DB1062BB164BA2C69-8016 SFD


	= Schutz der Fahrzeugdiagnose 2 (SFD2) =		= Schutz der Fahrzeugdiagnose 2 (SFD2) =
Line 29:		Line 27:
	Component: ICAS1 Host-SG 021 0411		Component: ICAS1 Host-SG 021 0411
	ASAM Dataset: EV_GatewICAS1MEBUNECE 001013		ASAM Dataset: EV_GatewICAS1MEBUNECE 001013
	~~ROD: EV_GatewICAS1MEBUNECE_VWE3.rod~~		VCID: 353F7EBAE5C2E51278D-8060 '''SFD+SFD2'''
	VCID: 353F7EBAE5C2E51278D-8060 SFD+SFD2

	= Diagnostic Firewall & Diagnostic Filter =		= Diagnostic Firewall & Diagnostic Filter =
Line 45:		Line 42:
	Coding: 0118BA4000012A008803010101010000000000000000000000000000211000		Coding: 0118BA4000012A008803010101010000000000000000000000000000211000
	ASAM Dataset: EV_SCMPasseSideCONTIAU736 006013		ASAM Dataset: EV_SCMPasseSideCONTIAU736 006013
	~~ROD: EV_SCMPasseSideCONTIAU736_VW38.rod~~		VCID: 3E2D6196D0F4264AA97-806A-'''R'''
	VCID: 3E2D6196D0F4264AA97-806A-R

	An Auto-Scan with VCDS can show you in the VCID line combinations of "-R" and SFD and ~~SFD~~ at the same time:		An Auto-Scan with VCDS can show you in the VCID line combinations of "-R" and SFD and SFD2 at the same time:

	~~Address C003: SW Cluster Housekeeping (SWC3)~~
	~~Part No: V04 007 000 TB~~
	~~Component: ICAS1 SWCL_HK 0411~~
	~~ASAM Dataset: EV_SWCLHouse1ICAS1UNECE 001007~~
	~~ROD: EV_SWCLHouse1ICAS1UNECE.rod~~
	~~VCID: 77A3B4B2BF4ED702AA1-8022-R SFD+SFD2~~

			Address 08: Auto HVAC (J979)
			Part No SW: 1EE 907 007 B HW: 1EE 907 007 B
			Component: Climatronic H01 0146
			Coding: 60202224A010120001100010110001102000103111101101000000000000
			ASAM Dataset: EV_ACClimaBHBE3ADV 002032
			VCID: 343943BEEEB8FC1A4F3-8060-'''R SFD+SFD2'''

	= Unlocking Schutz der Fahrzeugdiagnose (SFD) =		= Unlocking Schutz der Fahrzeugdiagnose (SFD) =
Line 65:		Line 60:

	# Determine which control modules you need to work on, for example:		# Determine which control modules you need to work on, for example:
	#* - Brake Electronics for Parking Brake related work		#* Brake Electronics for Parking Brake related work
	#* - Information Electronics for Service Reset		#* Information Electronics for Service Reset
	#		#
	# Determine if the diagnostic firewall was deactivated when opening the hood. This can be done by connecting to "Diagnostic Interface for Databus / Gateway" (#19) and viewing ''Diagnostic filter'' Advanced Measuring Values. Results that look like this confirm you do NOT need to unlock address 19 prior to making changes in other control modules:		# Determine if the diagnostic firewall was deactivated when opening the hood. This can be done by connecting to "Diagnostic Interface for Databus / Gateway" (#19) and viewing ''Diagnostic filter'' Advanced Measuring Values. Results that look like this confirm you do NOT need to unlock address 19 prior to making changes in other control modules:
Line 95:		Line 90:
	= Frequently Asked Questions =		= Frequently Asked Questions =

	# Can SFD be disabled?		# '''Can SFD and/or SFD2 be (permanently) disabled?'''
	#: No.		#: No, neither VCDS nor ODIS can disable SFD and/or SFD2 permanently.
			#
			# '''Will VCDS have SFD unlocking built-in at some point?'''
			#: While we are already working with Volkswagen to certify our implementation, we cannot provide a specific release date yet.
	#		#
	# ~~Can~~ Ross-Tech provide offline SFD ~~tokens~~?		# '''While an automated/built-in unlock isn't released yet, can Ross-Tech provide ''offline'' unlock tokens for SFD?'''
	#: No, but they can be obtained for example [https://shop.pci-diagnosetechnik.de/SFD-Unlock-Base-Rate-incl-1-Control-Unit from one of our distributors]		#: No, but they can be obtained for example [https://shop.pci-diagnosetechnik.de/SFD-Unlock-Base-Rate-incl-1-Control-Unit from one of our distributors]
	#		#
	~~# Will VCDS have SFD unlocking built-in at some point?~~
	~~#: We hope to have that in the future and are working with VW to make this happen.~~

Sebastian1 at 12:59, 7 August 2025

2025-08-07T12:59:03Z

← Older revision		Revision as of 12:59, 7 August 2025
Line 7:		Line 7:
	An Auto-Scan with VCDS will show you if a specific control module requires SFD unlocks to perform certain functions via an addition/suffix of "SFD" to the VCID line.		An Auto-Scan with VCDS will show you if a specific control module requires SFD unlocks to perform certain functions via an addition/suffix of "SFD" to the VCID line.

	Address 09: Cent. Elect. (J519) ~~Labels: 1EA-937-BCM-V1.clb~~		Address 09: Cent. Elect. (J519)
	Part No SW: 1EE 937 089 D HW: 1EE 937 089		Part No SW: 1EE 937 089 D HW: 1EE 937 089
	Component: SAM_H H08 0530		Component: SAM_H H08 0530
	~~Serial number: 01102328300374 Dataset Number: V03935400RK 0001~~
	ASAM Dataset: EV_SAMVW31x 005001		ASAM Dataset: EV_SAMVW31x 005001
	ROD: EV_SAMVW31x_005_VWE3.rod		ROD: EV_SAMVW31x_005_VWE3.rod
Line 26:		Line 25:
	An Auto-Scan with VCDS will show you if a specific control module requires SFD2 signed messages to perform certain functions via an addition/suffix of "SFD2" to the VCID line:		An Auto-Scan with VCDS will show you if a specific control module requires SFD2 signed messages to perform certain functions via an addition/suffix of "SFD2" to the VCID line:

	Address 19: CAN Gateway (J533) ~~Labels: 1EE-937-012.clb~~		Address 19: CAN Gateway (J533)
	Part No SW: 1EE 937 012 D HW: 1EE 937 012		Part No SW: 1EE 937 012 D HW: 1EE 937 012
	Component: ICAS1 Host-SG 021 0411		Component: ICAS1 Host-SG 021 0411
	~~Serial number: SMERBG220923006 Dataset Number: V03935420NB 0001~~
	~~GVL: 2D00080006C8D0FC8062904248181050C400400000010000000200000000C057~~
	ASAM Dataset: EV_GatewICAS1MEBUNECE 001013		ASAM Dataset: EV_GatewICAS1MEBUNECE 001013
	ROD: EV_GatewICAS1MEBUNECE_VWE3.rod		ROD: EV_GatewICAS1MEBUNECE_VWE3.rod
Line 43:		Line 40:
	An Auto-Scan with VCDS will show you if Restricted mode is active via an addition/suffix of "-R" to the VCID line for each control module:		An Auto-Scan with VCDS will show you if Restricted mode is active via an addition/suffix of "-R" to the VCID line for each control module:

	Address 06: Seat Mem. Pass (J521) ~~Labels:* None~~		Address 06: Seat Mem. Pass (J521)
	Part No SW: 1N3 959 760 H HW: 1N3 959 760 H		Part No SW: 1N3 959 760 H HW: 1N3 959 760 H
	Component: MEM-BFS 011 0571		Component: MEM-BFS 011 0571
	~~Serial number: 23A3101KA04891~~
	Coding: 0118BA4000012A008803010101010000000000000000000000000000211000		Coding: 0118BA4000012A008803010101010000000000000000000000000000211000
	~~Shop #: WSC 00000 000 00000~~
	ASAM Dataset: EV_SCMPasseSideCONTIAU736 006013		ASAM Dataset: EV_SCMPasseSideCONTIAU736 006013
	ROD: EV_SCMPasseSideCONTIAU736_VW38.rod		ROD: EV_SCMPasseSideCONTIAU736_VW38.rod
Line 55:		Line 50:
	An Auto-Scan with VCDS can show you in the VCID line combinations of "-R" and SFD and SFD at the same time:		An Auto-Scan with VCDS can show you in the VCID line combinations of "-R" and SFD and SFD at the same time:

	Address C003: SW Cluster Housekeeping (SWC3) ~~Labels: V04-007-XXX-SWC3.clb~~		Address C003: SW Cluster Housekeeping (SWC3)
	Part No: V04 007 000 TB		Part No: V04 007 000 TB
	Component: ICAS1 SWCL_HK 0411		Component: ICAS1 SWCL_HK 0411

Andy: /* Unlocking Schutz der Fahrzeugdiagnose (SFD) */

2025-08-06T20:32:59Z

Unlocking Schutz der Fahrzeugdiagnose (SFD)

← Older revision		Revision as of 20:32, 6 August 2025
Line 87:		Line 87:
	#; In this case you must use steps 3 and 4. The Diagnostic Firewall active.		#; In this case you must use steps 3 and 4. The Diagnostic Firewall active.
	#		#
	# SFD unlock the "Diagnostic Interface for Databus / Gateway" (#19).		# SFD unlock the "Diagnostic Interface for Databus / Gateway" (#19) and verify the following Measuring Value shows a non-zero number of minutes:
	#		#:
	# Disable the Diagnostic Filter in the "Diagnostic Interface for Databus / Gateway" (#19) (usually Adaptation channel IDE16611-Diagnosis filter: temporary deactivation adapted from active to not active).		#* MAS18157-MAS18164 SFD activated status-Duration of vehicle diagnostic to be protected 89 minutes (this counts down to zero and then SFD is locked again automatically)
	#		#*
			#:
			# Disable the Diagnostic Filter in the "Diagnostic Interface for Databus / Gateway" (#19) (usually Adaptation channel IDE16611-Diagnosis filter: temporary deactivation adapted from active to not active) and check the following Measuring Value:
			#:
			#* IDE13754-MAS16866 Diagnosis filter: status-Odometer 20 km (this counts down from 20 km to zero and then the filter is locked again automatically)
			#:
	# SFD unlock (all) additional SFD protected control modules you plan to work on.		# SFD unlock (all) additional SFD protected control modules you plan to work on.



	= Frequently Asked Questions =		= Frequently Asked Questions =

Andy: /* Frequently Asked Questions */

2025-08-06T13:57:16Z

Frequently Asked Questions

← Older revision		Revision as of 13:57, 6 August 2025
Line 101:		Line 101:
	#		#
	# Can Ross-Tech provide offline SFD tokens?		# Can Ross-Tech provide offline SFD tokens?
	#: No, but they can be obtained for example ~~from one of our distributors:~~		#: No, but they can be obtained for example [https://shop.pci-diagnosetechnik.de/SFD-Unlock-Base-Rate-incl-1-Control-Unit from one of our distributors]
	#; https://shop.pci-diagnosetechnik.de/SFD-Unlock-Base-Rate-incl-1-Control-Unit
	#		#
	# Will VCDS have SFD unlocking built-in at some point?		# Will VCDS have SFD unlocking built-in at some point?
	#: We hope to have that in the future and are working with VW to make this happen.		#: We hope to have that in the future and are working with VW to make this happen.

Andy at 13:35, 6 August 2025

2025-08-06T13:35:36Z

← Older revision		Revision as of 13:35, 6 August 2025
Line 73:		Line 73:
	#* - Information Electronics for Service Reset		#* - Information Electronics for Service Reset
	#		#
	# Determine if the diagnostic firewall was deactivated when opening the hood. This can be done by connecting to "Diagnostic Interface for Databus / Gateway" (#19) and viewing ''Diagnostic filter'' Advanced Measuring Values.		# Determine if the diagnostic firewall was deactivated when opening the hood. This can be done by connecting to "Diagnostic Interface for Databus / Gateway" (#19) and viewing ''Diagnostic filter'' Advanced Measuring Values. Results that look like this confirm you do NOT need to unlock address 19 prior to making changes in other control modules:
	#*		#:
	#* Results that look like this confirm you do NOT need to unlock address 19 prior to making changes in other control modules:		#* IDE13754-MAS16867 Diagnostic filter: status-Reason for deactivation hood open
	#*		#* IDE13754-MAS16875 Diagnostic filter: status-Filter status Filter is not active
	: IDE13754-MAS16867 Diagnostic filter: status-Reason for deactivation hood open		#:
	: IDE13754-MAS16875 Diagnostic filter: status-Filter status Filter is not active		#; In this case you can skip steps 3 and 4. The Diagnostic Firewall is already disabled.
	#		#:
	#* '''In this case you can skip steps 3 and 4. The Diagnostic Firewall is already disabled.~~'''~~		#: If the status is Filter active you will need to retrieve a Challenge/Token for "Diagnostic Interface for Databus / Gateway" (#19) and all additional SFD protected control modules you need to work on. Those results would look like this:
	#		#:
	# * If the status is Filter active you will need to retrieve a Challenge/Token for "Diagnostic Interface for Databus / Gateway" (#19) and all additional SFD protected control modules you need to work on. Those results would look like this:		#* IDE13754-IDE04447 Diagnosis filter: status-Function status Function active: SFD protected
			#* IDE13754-MAS16875 Diagnosis filter: status-Filter status Filter active
	IDE13754-IDE04447 Diagnosis filter: status-Function status Function active: SFD protected		#:
	IDE13754-MAS16875 Diagnosis filter: status-Filter status Filter active		#; In this case you must use steps 3 and 4. The Diagnostic Firewall active.
			#
	~~'''~~In this case you must use steps 3 and 4. The Diagnostic Firewall active.~~'''~~		# SFD unlock the "Diagnostic Interface for Databus / Gateway" (#19).
			#
			# Disable the Diagnostic Filter in the "Diagnostic Interface for Databus / Gateway" (#19) (usually Adaptation channel IDE16611-Diagnosis filter: temporary deactivation adapted from active to not active).
	3. SFD unlock the "Diagnostic Interface for Databus / Gateway" (#19).		#
			# SFD unlock (all) additional SFD protected control modules you plan to work on.
	4. Disable the Diagnostic Filter in the "Diagnostic Interface for Databus / Gateway" (#19) (usually Adaptation channel IDE16611-Diagnosis filter: temporary deactivation adapted from active to not active).

	5. SFD unlock (all) additional SFD protected control modules you plan to work on.


Line 101:		Line 98:

	# Can SFD be disabled?		# Can SFD be disabled?
	#* No.		#: No.
	#		#
	# Can Ross-Tech provide offline SFD tokens?		# Can Ross-Tech provide offline SFD tokens?
	#* No, but they can be obtained for example from one of our distributors:		#: No, but they can be obtained for example from one of our distributors:
	#* https://shop.pci-diagnosetechnik.de/SFD-Unlock-Base-Rate-incl-1-Control-Unit		#; https://shop.pci-diagnosetechnik.de/SFD-Unlock-Base-Rate-incl-1-Control-Unit
			#
	3) Will VCDS have SFD unlocking built-in at some point?		# Will VCDS have SFD unlocking built-in at some point?
			#: We hope to have that in the future and are working with VW to make this happen.
	We hope to have that in the future and are working with VW to make this happen.

Andy at 13:25, 6 August 2025

2025-08-06T13:25:36Z

← Older revision		Revision as of 13:25, 6 August 2025
Line 24:		Line 24:
	This limitation does not apply to most service related functions like Service Reset, Particle Filter Regeneration, Brake Pad Replacements or other typical workshop jobs, as these can still be performed after a regular SFD unlock. SFD2 does however limit/prevent most retrofits and similar efforts to enable functions not available from factory.		This limitation does not apply to most service related functions like Service Reset, Particle Filter Regeneration, Brake Pad Replacements or other typical workshop jobs, as these can still be performed after a regular SFD unlock. SFD2 does however limit/prevent most retrofits and similar efforts to enable functions not available from factory.

	An Auto-Scan with VCDS will show you if a specific control module requires SFD2 signed messages to perform certain functions via an addition/suffix of "SFD2" to the VCID line.		An Auto-Scan with VCDS will show you if a specific control module requires SFD2 signed messages to perform certain functions via an addition/suffix of "SFD2" to the VCID line:

	Address 19: CAN Gateway (J533) Labels: 1EE-937-012.clb		Address 19: CAN Gateway (J533) Labels: 1EE-937-012.clb
Line 41:		Line 41:
	Newer models still have this diagnostic firewall but in addition may have diagnostic filter blocking diagnostic access to control modules entirely. VCDS uses a workaround to access these control modules but may be in Restricted (read-only) mode, preventing most advanced functions like Coding, Adaptation, Basic Settings and/or Output Test etc.		Newer models still have this diagnostic firewall but in addition may have diagnostic filter blocking diagnostic access to control modules entirely. VCDS uses a workaround to access these control modules but may be in Restricted (read-only) mode, preventing most advanced functions like Coding, Adaptation, Basic Settings and/or Output Test etc.

	An Auto-Scan with VCDS will show you if Restricted mode is active via an addition/suffix of "-R" to the VCID line for each control module.		An Auto-Scan with VCDS will show you if Restricted mode is active via an addition/suffix of "-R" to the VCID line for each control module:

	Address 06: Seat Mem. Pass (J521) Labels:* None		Address 06: Seat Mem. Pass (J521) Labels:* None
Line 53:		Line 53:
	VCID: 3E2D6196D0F4264AA97-806A-R		VCID: 3E2D6196D0F4264AA97-806A-R

	An Auto-Scan with VCDS can show you in the VCID line combinations or "-R" and SFD and SFD at the same time:		An Auto-Scan with VCDS can show you in the VCID line combinations of "-R" and SFD and SFD at the same time:

	Address C003: SW Cluster Housekeeping (SWC3) Labels: V04-007-XXX-SWC3.clb		Address C003: SW Cluster Housekeeping (SWC3) Labels: V04-007-XXX-SWC3.clb
Line 69:		Line 69:
	The following steps are recommended if you are working on SFD protected vehicles...		The following steps are recommended if you are working on SFD protected vehicles...

	1. Determine which control modules you need to work on, for example:		# Determine which control modules you need to work on, for example:
	- Brake Electronics for Parking Brake related work		#* - Brake Electronics for Parking Brake related work
	- Information Electronics for Service Reset		#* - Information Electronics for Service Reset
			#
			# Determine if the diagnostic firewall was deactivated when opening the hood. This can be done by connecting to "Diagnostic Interface for Databus / Gateway" (#19) and viewing ''Diagnostic filter'' Advanced Measuring Values.
			#*
			#* Results that look like this confirm you do NOT need to unlock address 19 prior to making changes in other control modules:
			#*
			: IDE13754-MAS16867 Diagnostic filter: status-Reason for deactivation hood open
			: IDE13754-MAS16875 Diagnostic filter: status-Filter status Filter is not active
			#
			#* '''In this case you can skip steps 3 and 4. The Diagnostic Firewall is already disabled.'''
			#
			# * If the status is Filter active you will need to retrieve a Challenge/Token for "Diagnostic Interface for Databus / Gateway" (#19) and all additional SFD protected control modules you need to work on. Those results would look like this:

	2. Determine if the diagnostic firewall was deactivated when opening the hood. This can be done by connecting to "Diagnostic Interface for Databus / Gateway" (#19) and viewing ''Diagnostic filter'' Advanced Measuring Values.		IDE13754-IDE04447 Diagnosis filter: status-Function status Function active: SFD protected
			IDE13754-MAS16875 Diagnosis filter: status-Filter status Filter active
	* Results that look like this confirm you do NOT need to unlock address 19 prior to making changes in other control modules:

	~~IDE13754-MAS16867 Diagnostic filter: status-Reason for deactivation hood open~~
	~~IDE13754-MAS16875 Diagnostic filter: status-Filter status Filter is not active~~

	~~'''In this case you can skip steps 3 and 4. The Diagnostic Firewall is already disabled.'''~~

	* If the status is Filter active you will need to retrieve a Challenge/Token for "Diagnostic Interface for Databus / Gateway" (#19) and all additional SFD protected control modules you need to work on. Those results would look like this:

	IDE13754-IDE04447 Diagnosis filter: status-Function status Function active: SFD protected
	IDE13754-MAS16875 Diagnosis filter: status-Filter status Filter active

	'''In this case you must use steps 3 and 4. The Diagnostic Firewall active.'''		'''In this case you must use steps 3 and 4. The Diagnostic Firewall active.'''
Line 100:		Line 100:
	= Frequently Asked Questions =		= Frequently Asked Questions =

	1) Can SFD be disabled?		# Can SFD be disabled?
			#* No.
	No.		#
			# Can Ross-Tech provide offline SFD tokens?
	2) Can Ross-Tech provide offline SFD tokens?		#* No, but they can be obtained for example from one of our distributors:
			#* https://shop.pci-diagnosetechnik.de/SFD-Unlock-Base-Rate-incl-1-Control-Unit
	No, but they can be obtained for example from one of our distributors:

	https://shop.pci-diagnosetechnik.de/SFD-Unlock-Base-Rate-incl-1-Control-Unit

	3) Will VCDS have SFD unlocking built-in at some point?		3) Will VCDS have SFD unlocking built-in at some point?

	We hope to have that in the future and are working with VW to make this happen.		We hope to have that in the future and are working with VW to make this happen.

← Older revision		Revision as of 17:57, 29 December 2025
Line 1:		Line 1:
	= Schutz der Fahrzeugdiagnose (SFD) =		= Schutz der Fahrzeugdiagnose (SFD), Diagnostic Filter & Firewall =

			== Schutz der Fahrzeugdiagnose (SFD) ==

	Schutz der Fahrzeugdiagnose (SFD) aka. Protection of Vehicle Diagnostics (PVD) replaces the existing Login & Security Access functionality, which means it doesn't interfere with basic functions like reading Control Module Identification or Event and Diagnostic Trouble Codes (DTC's) or Measuring Values.		Schutz der Fahrzeugdiagnose (SFD) aka. Protection of Vehicle Diagnostics (PVD) replaces the existing Login & Security Access functionality, which means it doesn't interfere with basic functions like reading Control Module Identification or Event and Diagnostic Trouble Codes (DTC's) or Measuring Values.
Line 13:		Line 15:
	VCID: 43DB1062BB164BA2C69-8016 '''SFD'''		VCID: 43DB1062BB164BA2C69-8016 '''SFD'''

	= Schutz der Fahrzeugdiagnose 2 (SFD2) =		== Schutz der Fahrzeugdiagnose 2 (SFD2) ==

	SFD2 does NOT replace the aforementioned SFD. Instead it is meant as an extension for the original SFD functionality in order to secure Control Modules against unauthorized manipulation (by law). This is primarily aimed at driver assistance systems, autonomous driving, software updates and cyber security in general (i.e. [https://en.wikipedia.org/wiki/United_Nations_Economic_Commission_for_Europe UNECE] R 155 and/or [https://en.wikipedia.org/wiki/United_Nations_Economic_Commission_for_Europe UNECE] R 156).		SFD2 does NOT replace the aforementioned SFD. Instead it is meant as an extension for the original SFD functionality in order to secure Control Modules against unauthorized manipulation (by law). This is primarily aimed at driver assistance systems, autonomous driving, software updates and cyber security in general (i.e. [https://en.wikipedia.org/wiki/United_Nations_Economic_Commission_for_Europe UNECE] R 155 and/or [https://en.wikipedia.org/wiki/United_Nations_Economic_Commission_for_Europe UNECE] R 156).
Line 29:		Line 31:
	VCID: 353F7EBAE5C2E51278D-8060 '''SFD+SFD2'''		VCID: 353F7EBAE5C2E51278D-8060 '''SFD+SFD2'''

	= Diagnostic Firewall & Diagnostic Filter =		== Diagnostic Firewall & Diagnostic Filter ==

	Even before SFD and SFD2 unauthorized access and/or modifications were prevented by a diagnostic firewall, which required you to open the hood prior to having full access to control module functions. We recommend to open the hood on all MY 2015 and newer before you perform any diagnostic work to ensure the diagnostic firewall is deactivated.		Even before SFD and SFD2 unauthorized access and/or modifications were prevented by a diagnostic firewall, which required you to open the hood prior to having full access to control module functions. We recommend to open the hood on all MY 2015 and newer before you perform any diagnostic work to ensure the diagnostic firewall is deactivated.
Line 53:		Line 55:
	VCID: 343943BEEEB8FC1A4F3-8060-'''R SFD+SFD2'''		VCID: 343943BEEEB8FC1A4F3-8060-'''R SFD+SFD2'''

	= Unlocking Schutz der Fahrzeugdiagnose (SFD) =		== Unlocking Schutz der Fahrzeugdiagnose (SFD) ==

	While we are working on automating the unlock process, VCDS already does support the unlock and re-lock procedure using offline unlock tokens.		While we are working on automating the unlock process, VCDS already does support the unlock and re-lock procedure using offline unlock tokens.
Line 88:		Line 90:
	# SFD unlock (all) additional SFD protected control modules you plan to work on.		# SFD unlock (all) additional SFD protected control modules you plan to work on.

	= Frequently Asked Questions =		== Frequently Asked Questions ==

	# '''Can SFD and/or SFD2 be (permanently) disabled?'''		# '''Can SFD and/or SFD2 be (permanently) disabled?'''