Secure Gateway and Security Access
Gateway modules, registration and security-related programming.
What is a secure gateway module and how do I get past it?
Short answer: A secure gateway blocks unauthorized write commands to the vehicle's network; independent shops get access by registering with the maker's authorized program and using a scan tool that supports that login.
Several vehicle makers added security gateways that let diagnostic tools read codes and data but block functions like clearing codes, running tests or coding unless the tool is authenticated. This protects the vehicle's network from unauthorized access.
Legitimate access usually works through a registration process. You create an account with the maker's or a third-party authentication service, verify your identity and shop details, and link your scan tool. When you connect to a gateway-equipped vehicle, the scan tool asks you to log in, and the gateway unlocks for that session.
Check whether your scan tool supports the gateway login for the makes you service, and keep your account active. Some vehicles also have a physical bypass point listed in service information for specific procedures, but follow the maker's instructions rather than aftermarket bypass cables of unknown origin.
Tools used for this job
What is NASTF and why would I need a VSP registration?
Short answer: NASTF runs the Vehicle Security Professional registry, which lets vetted independent technicians get security-related information such as key codes and immobilizer access from vehicle makers.
The National Automotive Service Task Force works to give independent shops access to service information, tools and training. Its Vehicle Security Professional registry handles security-sensitive tasks, such as obtaining key codes, immobilizer PINs and certain programming functions that makers restrict to verified users.
To register, a technician typically submits identification, a background check and business documentation. Once approved, they can request security information through participating makers' systems, usually tied to a specific vehicle and owner authorization.
If you plan to do key programming, immobilizer work or module replacement on vehicles that require security access, check NASTF's current requirements on its website and plan time for the approval process. Keep records of owner identification and authorization for each security request, as the program requires.
Tools used for this job
What is AutoAuth and which vehicles need it?
Short answer: AutoAuth is a service for registering technicians and tools so they can authenticate with the secure gateway on many Stellantis vehicles, so aftermarket tools can clear codes and run active tests.
Many newer Stellantis vehicles, including Chrysler, Dodge, Jeep and Ram models, have a secure gateway module that blocks aftermarket tools from writing commands without authentication. Reading codes may work, but clearing codes, active tests and programming need the gateway unlocked.
AutoAuth registers the shop and technicians and pairs supported scan tools to the account. The tool then signs in when it needs access. Check whether your scan tool supports AutoAuth and that you have an active account before taking on these vehicles.
Other vehicle makers use their own security approaches. Keep login details private to the registered technician, and follow the account's terms. Use a stable power supply during any programming.
Tools used for this job
Why does a programming or coding job fail with a security access error?
Short answer: The module may require online authentication, a PIN, a gateway unlock or a maker account, or the tool may not support that security level; check the requirement and the tool's coverage.
Modules protect sensitive functions, such as immobilizer, odometer, airbag and emissions related software, behind security access. A tool must provide the correct key or authenticate with the vehicle maker before the module accepts changes.
Common causes include an unregistered or expired account, a gateway that has not been unlocked, a missing PIN code, a tool that does not support the function, or an unstable internet connection during online authentication.
Check service information and the tool's coverage notes for the function. Confirm account registrations and subscriptions. Avoid repeated attempts, because some modules lock out after failed tries. Keep a stable power supply connected and follow the guided steps.
Tools used for this job
How do I set up vehicle maker accounts for security functions?
Short answer: Register the shop and each technician on the vehicle maker's site and, where required, through NASTF's Vehicle Security Professional registry, then link tools or credentials as each program instructs.
Security functions such as key programming and immobilizer work, and some module programming, need registered credentials. Vehicle makers usually require a business account and individual technician accounts.
The NASTF Vehicle Security Professional registry checks the technician's background and issues credentials that many vehicle makers accept for security related information. Some makers also use two-factor authentication and tie access to one person.
Allow time for registration and approval before you need the access. Keep credentials personal, never share logins, and store records of security jobs. Follow each maker's rules on verifying ownership before releasing security information.
Tools used for this job
General guidance only. Follow the vehicle and tool manufacturer's procedures, and confirm vehicle coverage on the tool maker's list before buying.