If you work on modern Volkswagen Audi Group (VAG) vehicles, you’ve likely bumped into a digital brick wall known as SFD (Schutz Fahrzeug Diagnose). Introduced to protect vehicle control modules from unauthorized alterations, this security gateway has completely changed the landscape of aftermarket diagnostics, coding, and adaptations.
Here is everything you need to know about SFD1 and SFD2, including which cars have them and how to bypass them.
What is SFD1?
Introduced for Model Year 2020, SFD1 is VAG's initial security gateway protocol. While it still allows standard diagnostic tools to perform basic functions like reading and clearing Diagnostic Trouble Codes (DTCs) or viewing live measuring values, it locks down advanced procedures.
If you want to perform coding, adaptations, or basic settings on protected modules, SFD1 requires an authorized unlock.
-
Active Years: Typically found on models from 2020 up to early 2024.
-
Common Platforms: MQB Evo, MEB (Electric), MLBevo, and PPC.
Common SFD1 Vehicle List
-
Volkswagen: Golf 8 (2020–2023), ID.3/ID.4/ID.5/ID.6 (2020–2023), ID.Buzz (2022–2023), Arteon (2020–2023), Tiguan Facelift (2021–2023), Caddy (2020–2023).
-
Audi: A3/S3/RS3 8Y (2020–2023), Q4 e-tron (2021–2023), Q3 (2020–2023).
-
Skoda & Seat/Cupra: Octavia IV, Enyaq iV, Leon IV, Formentor, Born (2020–2023).
The Next Level: What is SFD2?
Starting in early 2024, VAG rolled out SFD2 to comply with stricter global cybersecurity regulations (like UNECE R155/R156).
SFD2 introduces end-to-end cryptographic signing requirements for modifications. It is highly restrictive, making aftermarket retrofits and alterations to advanced driver assistance systems (ADAS) or powertrain modules significantly more complex. In many 2024+ models, SFD1 and SFD2 coexist within the same vehicle.
-
Active Years: 2024 to present.
-
Common Models: Audi A1–A8 (2024+), Q6 e-tron, VW Golf 8 Facelift (2024+), Passat B9, Tiguan MK3, Porsche Cayenne/Macan (2024+).
How to Unlock SFD1 vs. SFD2: What Professional Scanners Can Do
When it comes to bypassing these security gateways, there is a massive difference in capability between the two generations.
+-----------------------------------+-----------------------------------+
| Feature | SFD1 Gateway |
+-----------------------------------+-----------------------------------+
| Unlock Availability | Multi-Brand Scan Tools (Tokens) |
| Expiry | Per-session (60-90 mins) |
+-----------------------------------+-----------------------------------+
| Feature | SFD2 Gateway |
+-----------------------------------+-----------------------------------+
| Unlock Availability | OEM Only (ODIS Online) |
| Expiry | Strictly Monitored |
+-----------------------------------+-----------------------------------+
Unlocking SFD1: Scan Tool Tokens
Fortunately for independent shops and enthusiasts, SFD1 can be unlocked using major aftermarket diagnostic scan tools. These tools communicate online to purchase or utilize temporary access tokens (usually valid for a 60 to 90-minute session per VIN).
-
Autel Devices (e.g., MaxiIM IM608, MaxiSys Ultra): Support SFD1 timed unlocks via an annual subscription or individual per-VIN token purchases.
-
TOPDON Devices (e.g., Phoenix Series): Feature direct, in-app token purchases to seamlessly unlock the gateway during diagnostics.
-
Launch X431 (Pro and PAD series): Support online SFD1 gateway unlocking via official licensing.
Unlocking SFD2: Strictly OEM
This is the critical dividing line for technicians: Currently, there is no aftermarket tool solution to unlock SFD2.
While basic maintenance tasks (like oil reset or DPF regeneration) may still be accessible on some models, advanced coding and control unit modifications under SFD2 strictly require OEM access via factory ODIS (Offboard Diagnostic Information System) online servers. Aftermarket scan tools cannot pull or generate the cryptographic signatures required for SFD2 changes at this time.
