What is it
An official-style guide that explains Vehicle Diagnostic Protection (SFD) in the Volkswagen Group and how to unlock SFD-protected control units in ODIS Service. It covers user registration, roles in the Dealer Portal / Group Retail Portal, and the complete online and offline token activation workflow.
What SFD does
SFD replaces legacy 5-digit security access with a token-based system to protect writing functions (coding, adaptation, parameterization, routines) while allowing normal read services. Stage 1 adds access protection and logging; Stage 2 adds tamper protection with end-to-end safeguarding between VAG back-end and ECUs. Two-factor authentication (PKI/SecurID/OTP apps) is supported.
How it works (quick view)
Included content
Format & compatibility
Minimum system requirements
Source and responsibility
Source of Files: All documents in this post were collected from public, open sources on the internet. We do not claim to be the original authors or publishers of this manual.
• File Hosting: This forum does not host files. All download links point to third-party public cloud services. We are not responsible for content hosted on external sites.
• User Responsibility: This material is provided for educational and evaluation purposes only. You use it at your own risk. The authors of this post and the forum administration are not liable for any damage to your equipment or data that may result from its use.
An official-style guide that explains Vehicle Diagnostic Protection (SFD) in the Volkswagen Group and how to unlock SFD-protected control units in ODIS Service. It covers user registration, roles in the Dealer Portal / Group Retail Portal, and the complete online and offline token activation workflow.
What SFD does
SFD replaces legacy 5-digit security access with a token-based system to protect writing functions (coding, adaptation, parameterization, routines) while allowing normal read services. Stage 1 adds access protection and logging; Stage 2 adds tamper protection with end-to-end safeguarding between VAG back-end and ECUs. Two-factor authentication (PKI/SecurID/OTP apps) is supported.
How it works (quick view)
- Online activation (standard): Tester requests a token from the SFD back-end → token is issued and logged → tester forwards token to ECU → write access is granted for the session.
- Manual activation (offline fallback): Save ECU request structure → generate token via SFD web app in the Dealer/Group Retail Portal → load token to tester (e.g., USB) → send to ECU. One-time, ECU-specific
- Guided Fault Finding can request and close SFD automatically; self-diagnosis offers “Access authorization” with Online or Manual modes. Control units relock automatically (or on command).
Included content
- User/role setup in the Dealer Portal (SFD standard role assignment)
- Token generation pages and example screens
- GFF and Self-diagnosis sequences with status readouts and relock options
Format & compatibility
- PDF manual — opens on Windows, macOS, Linux, iOS and Android with any modern PDF reader
Minimum system requirements
- PDF reader application
- CPU — 1.0 GHz or better; RAM — 1 GB+
- Storage — 20 MB free space
Source and responsibility
Source of Files: All documents in this post were collected from public, open sources on the internet. We do not claim to be the original authors or publishers of this manual.
• File Hosting: This forum does not host files. All download links point to third-party public cloud services. We are not responsible for content hosted on external sites.
• User Responsibility: This material is provided for educational and evaluation purposes only. You use it at your own risk. The authors of this post and the forum administration are not liable for any damage to your equipment or data that may result from its use.
