Difference between revisions of "User:Peter"
From Ross-Tech Wiki
| (7 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
| − | + | = WARNING: RESTRICTED ACCESS = | |
| − | + | Your attempt to access this page is considered UNAUTHORIZED! | |
| + | '''ERROR 401: UNAUTHORIZED''' | ||
| + | Your IP address has been logged. | ||
| − | + | ------------------------------------------------------------ | |
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| Line 31: | Line 23: | ||
| − | |||
| − | + | = Volkswagen SFD, SFD2 & Service Reminder Reset (SRI) with VCDS = | |
| − | == | + | == Overview == |
| − | + | Volkswagen Group introduced SFD ('''Schutz der Fahrzeugdiagnose''' – Protection of Vehicle Diagnostics) in 2020 to enhance cybersecurity and control access to vehicle software. In 2024, a second layer called '''SFD2''' was introduced, requiring cryptographic validation for critical changes. | |
| − | + | This page explains how VCDS interacts with SFD and SFD2 systems and provides step-by-step instructions for resetting the Service Reminder (SRI) on protected vehicles. | |
| − | + | == What is SFD and SFD2? == | |
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | + | '''SFD (v1)''' restricts coding, adaptations, and other “write” functions unless a one-time unlock token is used. VCDS supports this system using a manual token entry method. | |
| − | |||
| + | '''SFD2 (v2)''' is used in 2024+ vehicles and protects specific data changes using encrypted, per-operation validation. SFD2 requires Volkswagen’s online infrastructure and is currently unsupported by VCDS. | ||
| − | ''' | + | SFD and SFD2 do '''not''' block: |
| − | + | * Reading fault codes (DTCs) | |
| − | + | * Viewing live data (Measuring Blocks) | |
| − | + | * Performing an Auto-Scan | |
| − | + | == How VCDS Works with SFD == | |
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | * | + | VCDS supports SFD by: |
| + | * Detecting SFD-protected modules | ||
| + | * Displaying the module's challenge string | ||
| + | * Allowing manual entry of the corresponding unlock token | ||
| − | + | VCDS does not generate or request unlock tokens itself. Tokens must be obtained separately and are valid for: | |
| − | * | + | * One module only |
| − | * | + | * One session (approximately 90 minutes) |
| + | '''SFD2 is not supported by VCDS.''' | ||
| − | + | == Manual Unlock Process in VCDS == | |
| − | + | # Open VCDS and connect to the module | |
| + | # Attempt a function (e.g., Adaptation or Security Access) | ||
| + | # Copy the displayed challenge string | ||
| + | # Submit the challenge to a trusted token provider | ||
| + | # Paste the returned release token into VCDS | ||
| + | # The module unlocks for ~90 minutes | ||
| + | == Resetting the Service Reminder (SRI) == | ||
| + | === Vehicles Without SFD (Pre-2020) === | ||
| − | + | Older vehicles do not require SFD unlocks. | |
| + | → [https://www.ross-tech.com/vcds/tour/sri-reset.php SRI Reset Tour Page] | ||
| − | + | === Vehicles With SFD === | |
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | + | Some newer vehicles (e.g., Golf 8, ID.4) have SFD in: | |
| − | + | * '''17-Instruments''' | |
| − | + | * '''5F-Infotainment''' | |
| − | |||
| − | * | ||
| − | * | ||
| − | + | Steps: | |
| − | + | # Retrieve the challenge string in VCDS | |
| + | # Obtain and enter the unlock token | ||
| + | # Perform the SRI reset within the 90-minute window | ||
| − | + | === Vehicles With SFD2 / Gateway Filtering === | |
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| + | Newer platforms may also use a diagnostic filter in '''19-Gateway'''. | ||
| − | + | Steps: | |
| − | + | # Retrieve and unlock 19 using a token | |
| − | + | # In 19, go to Adaptation and set: | |
| − | + | <code>DE16611 – Diagnosis filter: temporary deactivation → not active</code> | |
| + | # This disables the diagnostic filter for ~20 km | ||
| + | # Unlock 5F (or other protected modules) using tokens | ||
| + | # Perform the SRI reset | ||
| − | + | <span style="color:orange;"><b>Tip:</b> While in R-Mode, you can collect challenge strings for both 19 and 5F and request both tokens at once.</span> | |
| − | |||
| − | + | == SFD Requirement Matrix for SRI Reset == | |
| − | |||
| − | + | {| role="presentation" class="wikitable" style="background:lightgray; text-align:center; width:99%;" border="0" | |
| − | + | |- | |
| + | ! Service function !! Vehicles Without SFD !! SFD in 17-Instruments !! SFD in 5F-Infotainment !! SFD2 Gateway Filter | ||
| + | |- | ||
| + | ! SRI (Service Reminder) Reset | ||
| + | | style="background:limegreen" | Just perform SRI reset || style="background:orange" | Unlock 17 first || style="background:orange" | Unlock 5F first || style="background:red" | Unlock 19, then unlock 5F | ||
| + | |- | ||
| + | ! Is SFD Unlock Required? | ||
| + | | style="background:limegreen" | No || style="background:orange" | Yes || style="background:orange" | Yes || style="background:red" | Yes in 19 and 5F | ||
| + | |- | ||
| + | ! Can You Save Adaptation Values? | ||
| + | | style="background:limegreen" | Yes || style="background:orange" | Yes, after unlocking 17 || style="background:orange" | Yes, after unlocking 5F || style="background:red" | Unlock 19 to disable filter, then unlock other modules | ||
| + | |} | ||
| + | <sup>1</sup> 17 – Instrument Cluster | ||
| + | <sup>2</sup> 5F – Infotainment / MMI | ||
| + | <sup>3</sup> 19 – CAN Gateway with SFD2 diagnostic filtering | ||
| + | == NIx Coding Index Table == | ||
| − | + | Some vehicles contain a PR code indicating cybersecurity level: | |
| − | |||
| − | |||
| − | + | {| class="wikitable" | |
| − | + | |- | |
| + | ! NIx Index !! Cybersecurity Protection !! Software Update Protection !! SFD2 Gateway Present? | ||
| + | |- | ||
| + | | NI0 || No || No || No | ||
| + | |- | ||
| + | | NI1 || Yes || Yes || No | ||
| + | |- | ||
| + | | NI7 || Yes || No || No | ||
| + | |- | ||
| + | | NI8 || No || No || Yes | ||
| + | |- | ||
| + | | NI9 || Yes (non-UNECE markets) || Yes (non-UNECE markets) || No | ||
| + | |} | ||
| + | == Factory Tool vs VCDS Comparison == | ||
| − | + | {| class="wikitable" | |
| − | + | ! Feature !! ODIS (Factory Tool) !! VCDS | |
| − | + | |- | |
| − | + | | Token Handling || Online and automatic || (still in development) | |
| − | + | |- | |
| − | + | | Backend Access || Yes || (still in development) | |
| + | |- | ||
| + | | Lockout Behavior || Immediate logout or session close || Timeout (~90 minutes) | ||
| + | |- | ||
| + | | Token Source || VW Dealer Portal || (still in development) | ||
| + | |} | ||
| − | + | == Related Control Module Addresses == | |
| − | * | + | * '''17 – Instruments''': Cluster, odometer, service interval |
| − | ** | + | * '''5F – Infotainment''': MMI, media interface |
| + | * '''19 – Gateway''': Network access, diagnostic filter | ||
| − | + | == Resources == | |
| − | |||
| − | |||
| − | * | + | * [https://www.ross-tech.com/vcds/tour/sri-reset.php SRI Reset Tour] |
| − | * | + | * [https://www.ross-tech.com/vcds/tour/adaptations.php Adaptations Function Tour] |
| − | * | + | * [https://forums.ross-tech.com/ Ross-Tech Forums] |
| − | |||
| − | + | <span style="color:#d93025;"><b>Note:</b> If readiness or service reset functions fail, ensure the engine control unit software is up to date and that a full OBD drive cycle has been completed.</span> | |
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
Revision as of 14:37, 30 July 2025
WARNING: RESTRICTED ACCESS
Your attempt to access this page is considered UNAUTHORIZED! ERROR 401: UNAUTHORIZED
Your IP address has been logged.
Volkswagen SFD, SFD2 & Service Reminder Reset (SRI) with VCDS
Overview
Volkswagen Group introduced SFD (Schutz der Fahrzeugdiagnose – Protection of Vehicle Diagnostics) in 2020 to enhance cybersecurity and control access to vehicle software. In 2024, a second layer called SFD2 was introduced, requiring cryptographic validation for critical changes.
This page explains how VCDS interacts with SFD and SFD2 systems and provides step-by-step instructions for resetting the Service Reminder (SRI) on protected vehicles.
What is SFD and SFD2?
SFD (v1) restricts coding, adaptations, and other “write” functions unless a one-time unlock token is used. VCDS supports this system using a manual token entry method.
SFD2 (v2) is used in 2024+ vehicles and protects specific data changes using encrypted, per-operation validation. SFD2 requires Volkswagen’s online infrastructure and is currently unsupported by VCDS.
SFD and SFD2 do not block:
- Reading fault codes (DTCs)
- Viewing live data (Measuring Blocks)
- Performing an Auto-Scan
How VCDS Works with SFD
VCDS supports SFD by:
- Detecting SFD-protected modules
- Displaying the module's challenge string
- Allowing manual entry of the corresponding unlock token
VCDS does not generate or request unlock tokens itself. Tokens must be obtained separately and are valid for:
- One module only
- One session (approximately 90 minutes)
SFD2 is not supported by VCDS.
Manual Unlock Process in VCDS
- Open VCDS and connect to the module
- Attempt a function (e.g., Adaptation or Security Access)
- Copy the displayed challenge string
- Submit the challenge to a trusted token provider
- Paste the returned release token into VCDS
- The module unlocks for ~90 minutes
Resetting the Service Reminder (SRI)
Vehicles Without SFD (Pre-2020)
Older vehicles do not require SFD unlocks. → SRI Reset Tour Page
Vehicles With SFD
Some newer vehicles (e.g., Golf 8, ID.4) have SFD in:
- 17-Instruments
- 5F-Infotainment
Steps:
- Retrieve the challenge string in VCDS
- Obtain and enter the unlock token
- Perform the SRI reset within the 90-minute window
Vehicles With SFD2 / Gateway Filtering
Newer platforms may also use a diagnostic filter in 19-Gateway.
Steps:
- Retrieve and unlock 19 using a token
- In 19, go to Adaptation and set:
DE16611 – Diagnosis filter: temporary deactivation → not active
- This disables the diagnostic filter for ~20 km
- Unlock 5F (or other protected modules) using tokens
- Perform the SRI reset
Tip: While in R-Mode, you can collect challenge strings for both 19 and 5F and request both tokens at once.
SFD Requirement Matrix for SRI Reset
| Service function | Vehicles Without SFD | SFD in 17-Instruments | SFD in 5F-Infotainment | SFD2 Gateway Filter |
|---|---|---|---|---|
| SRI (Service Reminder) Reset | Just perform SRI reset | Unlock 17 first | Unlock 5F first | Unlock 19, then unlock 5F |
| Is SFD Unlock Required? | No | Yes | Yes | Yes in 19 and 5F |
| Can You Save Adaptation Values? | Yes | Yes, after unlocking 17 | Yes, after unlocking 5F | Unlock 19 to disable filter, then unlock other modules |
1 17 – Instrument Cluster 2 5F – Infotainment / MMI 3 19 – CAN Gateway with SFD2 diagnostic filtering
NIx Coding Index Table
Some vehicles contain a PR code indicating cybersecurity level:
| NIx Index | Cybersecurity Protection | Software Update Protection | SFD2 Gateway Present? |
|---|---|---|---|
| NI0 | No | No | No |
| NI1 | Yes | Yes | No |
| NI7 | Yes | No | No |
| NI8 | No | No | Yes |
| NI9 | Yes (non-UNECE markets) | Yes (non-UNECE markets) | No |
Factory Tool vs VCDS Comparison
| Feature | ODIS (Factory Tool) | VCDS |
|---|---|---|
| Token Handling | Online and automatic | (still in development) |
| Backend Access | Yes | (still in development) |
| Lockout Behavior | Immediate logout or session close | Timeout (~90 minutes) |
| Token Source | VW Dealer Portal | (still in development) |
Related Control Module Addresses
- 17 – Instruments: Cluster, odometer, service interval
- 5F – Infotainment: MMI, media interface
- 19 – Gateway: Network access, diagnostic filter
Resources
Note: If readiness or service reset functions fail, ensure the engine control unit software is up to date and that a full OBD drive cycle has been completed.