Sorry, you need to enable JavaScript to visit this website.
Skip to main content

Article 3: SGW is not the same everywhere: how Stellantis, Volkswagen SFD, Mercedes-Benz and Hyundai/KIA differ

The term Security Gateway sounds uniform, but each manufacturer implements it somewhat differently. The differences concern what is blocked, how long unlocking remains valid, how access is charged and what procedure the technician must follow.

When SGW is mentioned in workshop practice, it may create the impression that it is one technology with one procedure. In reality, it is more of a general category of security measures. Vehicle manufacturers are protecting diagnostic access in a similar direction, but the details differ.

For a workshop, the details are decisive. One brand may allow repeated work for a certain period after unlocking, while another may lock the gateway again after a few seconds and require continuous diagnostic communication. Some brands use a point or token-based system, others use time-based access.


Stellantis: SGW as a gateway to advanced functions

In vehicles of the former FCA group, now part of Stellantis, SGW appears in brands such as Abarth, Alfa Romeo, Chrysler, Dodge, Fiat, Jeep, Lancia, Maserati, RAM and Vauxhall. For Peugeot, Citroën and Opel the current focus is mainly on selected light commercial models such as Boxer, Jumper and Movano.

In practice, SGW in these vehicles may restrict, for example, fault clearing, actuator tests or special functions. This is especially important for workshops that were used to reading and clearing DTCs as a basic operation without additional conditions. On some models, this may no longer be the case.

Volkswagen Group: SFD and newer multi-level protection

The Volkswagen Group uses the term SFD. It is typically found on vehicles based on MQB Evo and MEB platforms, such as Golf 8, Octavia IV, Scala, Kamiq, Enyaq or the ID model family. The basic principle is protection of functions that change control unit settings: coding, adaptations, basic settings or actuator tests.

With SFD, temporary access is important. After unlocking, work is only permitted for a limited time. For the Volkswagen Group it is 90 minutes, with the time counted while the ignition is switched on. After switching the ignition off, the countdown stops and continues again after the ignition is switched on.

Newer vehicles also introduce stricter protection layers. In practice, it may therefore not be enough to unlock only a specific control unit; access via the gateway or diagnostic filter may also have to be handled. This is why new vehicles can involve more steps than older models.

Mercedes-Benz: stricter access in newer generations

At Mercedes-Benz, diagnostic security protection appears in newer vehicle generations from 2020, first in the S-Class generation W223. Affected models include, for example, C 206, E 214, EQE, EQS, SL, AMG GT and GLC.

For workshops, the important point is that on selected newer models, communication with control units may be significantly restricted without unlocking. This is no longer just a matter of blocking one particular service function, but a generally stricter access model for vehicle electronics.

Hyundai/KIA/Genesis: authorisation in the central gateway

For Hyundai, KIA and Genesis, the principle is again similar: the central gateway controls communication between vehicle network segments and blocks unauthorised special functions or actuator tests. According to the available materials, SGW appears in some models as early as 2018.

Affected vehicle lists include, for example, KIA Ceed, EV6, Sorento, Sportage, Hyundai Tucson, Ioniq 5, Santa Fe, Staria, and Genesis G70, G80, GV70 and GV80. The list should be treated as indicative: for a specific vehicle, the model year, equipment and electronic architecture are decisive.

Comparison for workshop practice

Group
Designation
Typical restriction
Note
Group: Stellantis / FCA
Designation: SGW
Typical restriction: Advanced functions, actuator tests, fault clearing on some models
Note: Typically time-based access outside the VW logic
Group: Volkswagen Group
Designation: SFD / SFD2
Typical restriction: Coding, adaptations, basic settings, actuator tests; stricter diagnostic filter on newer vehicles
Note: Point/token model; limited unlocking time
Group: Mercedes-Benz
Designation: SGW / EZS and related security
Typical restriction: On newer models, even the communication scope with control units may be limited
Note: Requires supported authorised access
Group: Hyundai / Kia / Genesis
Designation: SGW in the central gateway
Typical restriction: Special functions and actuator tests
Note: Depends on diagnostic support and the specific model

From the repair workshop’s point of view, the best approach is simple: do not expect all brands to behave the same. A workshop using multibrand diagnostics needs not only a universal device, but also clear information about supported brands, access type, cost, unlocking validity and the specific procedure for each manufacturer.

This is where modern diagnostics is about more than the technical unlocking function itself. The background provided by the diagnostic tool manufacturer also matters. With Security Gateways, it is often not enough to know that a vehicle is “protected”. The technician needs to know exactly what is unlocked for a given brand, how long the unlocking is valid, whether tokens, time-based access or another model is used, and what to do if a specific service function is not available.


Complex SGW solutions by DevCom

The strength of TSPro and Troodon solutions from DevCom is therefore not only SGW/SFD unlocking support, but also technical support as such. In practice, the workshop does not receive only a diagnostic device, but also a partner that helps solve concrete situations on concrete vehicles. This is important for SGW because the differences between brands are not merely formal. Some manufacturers restrict only write operations to selected control units, while others may block common service operations or communication with control units without unlocking.

Another practical advantage is the option to purchase a smaller amount of access according to the actual need. The workshop does not have to tie up money in large packages it may not use. If it is dealing with a one-off job or only occasional SGW/SFD vehicles, it can buy a smaller number of tokens or shorter time-based access. Money is therefore not left sitting in an unused licence, and costs can be tied more directly to a specific job.

In everyday workshop practice, this can be more important than the marketing statement that a diagnostic tool “supports SGW”. What matters is whether it can be used economically and technically in a reasonable way: whether the workshop knows what it is buying, for how long, for which brand, and how quickly it can get help if a problem occurs during unlocking or a service operation.

It therefore makes sense to follow diagnostic updates, keep the device correctly registered and use the manufacturer’s diagnostic portal. Without this, even a high-quality diagnostic tool may be stopped by a modern vehicle security rule that cannot be overcome without registration, active access or the correct procedure.