VAG SFD1 and SFD2 Vehicle List
SFD1 (Schutz Fahrzeug Diagnose) is the initial security gateway protocol introduced by the Volkswagen Audi Group (VAG) starting in model year (MY) 2020. It protects advanced diagnostic functions like coding, adaptations, and basic settings on certain control modules, while allowing basic reads (e.g., DTCs, measuring values). It primarily affects vehicles on platforms like MQB Evo, MEB, MLBevo, and PPC. SFD1 is found in models from 2020 to around 2023/early 2024, before the transition to SFD2 in newer vehicles.
Here’s a list of common VAG vehicles equipped with SFD1, based on platform and model year introductions (note: not exhaustive, as it varies by region and specific control modules; some vehicles may have mixed SFD and classic security):
Vehicles Using VAG SFD2 Gateway
SFD2 is an enhanced version of SFD, introduced in early 2024 to comply with UNECE R155 (cyber security) and R156 (software updates) regulations. It adds cryptographic signing requirements for modifications, making it more restrictive for retrofits and changes to driver assistance or autonomous systems. Basic service functions (e.g., oil resets, DPF regeneration) are often still accessible after unlock, but advanced writes require signed tokens. SFD2 affects 2024+ models, often in facelifted or new versions, and can coexist with SFD1 in the same vehicle (shown as “SFD+SFD2”).
Here’s a list of known VAG vehicles with SFD2 (as of late 2025; lists are evolving, and it applies to models from April 2024 onward in many cases):
Tools to Unlock SFD1 and SFD2 Gateways
Unlocking SFD1/SFD2 requires authorized tools that communicate with VAG servers or use offline tokens for temporary access (typically 60-90 minutes per session). This bypasses the security module to enable protected functions. Note: SFD2 is harder to unlock due to cryptographic requirements, often needing signed tokens for specific changes. Unlocking cannot be made permanent with aftermarket tools; it’s per-session or per-VIN.
Some OBD tools will unlock VAG SFD1 gateway automatically or manually. As for SFD2, usually unlocked by ODIS online.