|
|||||||
|
VCDS: SFD Diagnostic Firewall |
VW Audi Group SFD Diagnostic FirewallSeptember 15th 2026 - VCDS SFD access available on HEX-V2 and HEX-NETRoss-Tech have released SFD unlocking access to all owners of (genuine) HEX-V2 & HEX-NET interfaces. See below for details.VAG SFD?Some 2020 model year and newer VW Audi Group (VAG) vehicles, are fitted with the "SFD" system.SFD stands for 'Schutz der FahrzeugDiagnose', which directly translates to Vehicle Diagnostic Protection - essentially it's a diagnostic firewall. SFD is fitted in the name of security and intercepts diagnostic requests and responses between the tool and the vehicle, and can block some diagnostic commands - particularly coding or adaptation commands which could make a change to the vehicle. In order for these more advanced diagnostic requests to be allowed through, the control module you are connecting to will generate a 'challenge' token (an alphanumeric code which is unique to that diagnostic session). VAG's servers can use this to generate a 'release' token which, when presented back to the car, will unlock full access to that module for a set time period (typically 90 minutes). VCDS (with a HEX-V2 or HEX-NET interface) now supports SFD unlocking. There are a few hoops to jump through though, largely to satisfy Volkswagen in Germany. How do I sign up?Ross-Tech have documented the full process with written instructions available here, and they also have a video version:What will I need?To access the SFD service you will need:
How much will it cost?Ross-Tech reluctantly have to charge for SFD access, to cover the charges VW levy against them for access to the system.The cost for accessing the SFD service depends on the type of interface license you have. Should you have no requirement to use SFD yet (such as no 2020 or newer cars), you do not need to sign up, until such time as that changes.
What about SFD2?There is a lot of confusion and misinforation regarding SFD2.SFD2 is essentially VW's interpretation of the UNECE Cybersecurity regulations. It mainly applies to cars sold in Europe since 2024. SFD2 is not designed to totally lock the car out for enthusiasts - the aim is to prevent modification and coding/adaptation changes being made, without legitimate authorisation (to prevent actions such as stealing a car by coding in a new key). Contrary to popular belief, you do not need an SFD2 tool to maintain a car with SFD2 fitted. The first generation of SFD was only installed at a system level, so should you wish to perform an EPB pad change, you only had to unlock SFD on the Parking Brake or ABS controller (depending on the type of vehicle). SFD2 requires you to unlock the vehicle's CAN Gateway first. The unlock code supplied here determines whether the car grants SFD or SFD2 access to the tool. Once you're past the gateway, the systems required for general servicing and maintenance can still be unlocked via SFD (SFD1). So what's all the fuss about? UNECE / SFD2 prevents a lot of the tweaks and changes that VAG owners have become used to being able to do, such as disabling seatbelt chimes, enabling special modes on the dials or infotainment, retrofitting cruise control or a towbar etc. Coding and adaptation is only allowed on SFD2 protected vehicles where it is required for a service/maintenance function. Which models are known to be affected?From the 2020 model year on, vehicles based on the MQB2020, MQBevo and MEB platforms are known to have SFD.This list is not exhaustive though; other new models will also be affected: MQBevo / MQB2020 Platforms
MEB Platform
Additionally, the following models are known to have SFD2: Audi
Volkswagen
Skoda
Seat / Cupra
Porsche
Lamborghini
Can I see it in action?Sure, here it is in use on a 2023 Skoda Enyaq: |
|
|
Want to sign up to our email newsletter? *
* - We only email about once a week, and will only use your data as outlined in our Privacy Policy
|
|
| Switch to mobile site 📱 | Privacy policy | Cookie Policy | Delivery | Returns | Site map | Contact sales | © 2026 Gendan Limited | |