User:Peter
WARNING: RESTRICTED ACCESS
Your attempt to access this page is considered UNAUTHORIZED! ERROR 401: UNAUTHORIZED
Your IP address has been logged.
Volkswagen SFD, SFD2 & Service Reminder Reset (SRI) with VCDS
Overview
Volkswagen Group introduced SFD (Schutz der Fahrzeugdiagnose – Protection of Vehicle Diagnostics) in 2020 to enhance cybersecurity and control access to vehicle software. In 2024, a second layer called SFD2 was introduced, requiring cryptographic validation for critical changes.
This page explains how VCDS interacts with SFD and SFD2 systems and provides step-by-step instructions for resetting the Service Reminder (SRI) on protected vehicles.
What is SFD and SFD2?
SFD (v1) restricts coding, adaptations, and other “write” functions unless a one-time unlock token is used. VCDS supports this system using a manual token entry method.
SFD2 (v2) is used in 2024+ vehicles and protects specific data changes using encrypted, per-operation validation. SFD2 requires Volkswagen’s online infrastructure and is currently unsupported by VCDS.
SFD and SFD2 do not block:
- Reading fault codes (DTCs)
- Viewing live data (Measuring Blocks)
- Performing an Auto-Scan
How VCDS Works with SFD
VCDS supports SFD by:
- Detecting SFD-protected modules
- Displaying the module's challenge string
- Allowing manual entry of the corresponding unlock token
VCDS does not generate or request unlock tokens itself. Tokens must be obtained separately and are valid for:
- One module only
- One session (approximately 90 minutes)
SFD2 is not supported by VCDS.
Manual Unlock Process in VCDS
- Open VCDS and connect to the module
- Attempt a function (e.g., Adaptation or Security Access)
- Copy the displayed challenge string
- Submit the challenge to a trusted token provider
- Paste the returned release token into VCDS
- The module unlocks for ~90 minutes
Resetting the Service Reminder (SRI)
Vehicles Without SFD (Pre-2020)
Older vehicles do not require SFD unlocks. → SRI Reset Tour Page
Vehicles With SFD
Some newer vehicles (e.g., Golf 8, ID.4) have SFD in:
- 17-Instruments
- 5F-Infotainment
Steps:
- Retrieve the challenge string in VCDS
- Obtain and enter the unlock token
- Perform the SRI reset within the 90-minute window
Vehicles With SFD2 / Gateway Filtering
Newer platforms may also use a diagnostic filter in 19-Gateway.
Steps:
- Retrieve and unlock 19 using a token
- In 19, go to Adaptation and set:
DE16611 – Diagnosis filter: temporary deactivation → not active
- This disables the diagnostic filter for ~20 km
- Unlock 5F (or other protected modules) using tokens
- Perform the SRI reset
Tip: While in R-Mode, you can collect challenge strings for both 19 and 5F and request both tokens at once.
SFD Requirement Matrix for SRI Reset
| Service function | Vehicles Without SFD | SFD in 17-Instruments | SFD in 5F-Infotainment | SFD2 Gateway Filter |
|---|---|---|---|---|
| SRI (Service Reminder) Reset | Just perform SRI reset | Unlock 17 first | Unlock 5F first | Unlock 19, then unlock 5F |
| Is SFD Unlock Required? | No | Yes | Yes | Yes in 19 and 5F |
| Can You Save Adaptation Values? | Yes | Yes, after unlocking 17 | Yes, after unlocking 5F | Unlock 19 to disable filter, then unlock other modules |
1 17 – Instrument Cluster 2 5F – Infotainment / MMI 3 19 – CAN Gateway with SFD2 diagnostic filtering
NIx Coding Index Table
Some vehicles contain a PR code indicating cybersecurity level:
| NIx Index | Cybersecurity Protection | Software Update Protection | SFD2 Gateway Present? |
|---|---|---|---|
| NI0 | No | No | No |
| NI1 | Yes | Yes | No |
| NI7 | Yes | No | No |
| NI8 | No | No | Yes |
| NI9 | Yes (non-UNECE markets) | Yes (non-UNECE markets) | No |
Factory Tool vs VCDS Comparison
| Feature | ODIS (Factory Tool) | VCDS |
|---|---|---|
| Token Handling | Online and automatic | Manual (offline) |
| Backend Access | Yes | No |
| Lockout Behavior | Immediate logout or session close | Timeout (~90 minutes) |
| Token Source | VW Dealer Portal | Third-party vendor |
Related Control Module Addresses
- 17 – Instruments: Cluster, odometer, service interval
- 5F – Infotainment: MMI, media interface
- 19 – Gateway: Network access, diagnostic filter
Resources
Note: If readiness or service reset functions fail, ensure the engine control unit software is up to date and that a full OBD drive cycle has been completed.