TOPDON diagnostic tools
Secure Gateway (SGW) Support with TOPDON Diagnostic Tools
A complete guide to what Secure Gateway means, why manufacturers require authentication, which brands use SGW systems, and how supported TOPDON diagnostic tools work with AutoAuth or OEM-specific access.
Secure Gateway basics
What Is a Secure Gateway (SGW)?
A Secure Gateway (SGW) is a cybersecurity system installed by vehicle manufacturers to protect critical vehicle networks.
It functions like a firewall, restricting access to certain control modules unless the technician is properly authenticated.
On SGW-equipped vehicles, advanced diagnostic functions, such as coding, bidirectional controls, and module adaptations, may be limited without authorization.
Why authentication exists
Why Manufacturers Require SGW Authentication
Vehicle manufacturers use Secure Gateway systems to:
Protect systems
Protect critical vehicle systems from unauthorized access.
Meet regulations
Comply with cybersecurity regulations.
Reduce intrusion risk
Reduce the risk of network intrusion.
Control module access
Control access to safety-related modules.
To unlock supported advanced diagnostic functions on SGW-equipped vehicles, technicians must complete an authentication process through an approved system.
Manufacturer coverage
Vehicle Manufacturers That Require Secure Gateway Systems
Secure Gateway systems are implemented by several vehicle manufacturers, including:
- Stellantis: Chrysler, Dodge, Jeep, Ram, Fiat, Maserati, and Alfa Romeo.
- Nissan and Infiniti.
- Mercedes-Benz.
- Volkswagen Group: Volkswagen, Audi, Seat, Skoda, Porsche, Bentley, and Bugatti.
- Ford.
Gateway requirements vary by manufacturer, model year, and platform. Authentication methods vary by manufacturer. Some utilize AutoAuth credential verification, while others require OEM-issued access tokens or manufacturer-specific authentication systems.
Before unlocking functions
How Do You Unlock an SGW-Equipped Vehicle?
To perform supported functions on an SGW-equipped vehicle, technicians must in most cases:
Reliable internet
Have a strong, reliable internet connection.
Required authentication
Authenticate through the manufacturer's required verification system, which may include AutoAuth or OEM-issued access tokens. AutoAuth requires an account, a yearly subscription fee, and a fee paid to the OEM for access.
Active scan tool subscription
Carry an active subscription on the scan tool. This is required by the OE manufacturer, not the tool manufacturer.
Latest software updates
Ensure the scan tool has the latest software updates installed.
Without authentication, the diagnostic tool may be limited to basic OBD functions.
Credential verification
What Is AutoAuth?
AutoAuth (Auto Authentication Authority) is a third-party credential verification service that allows approved aftermarket diagnostic tools to authenticate with participating vehicle manufacturers. AutoAuth validates technician credentials and enables supported communication with the manufacturer's Secure Gateway system.
Gaining SGW access through AutoAuth requires:
Account
Creating an AutoAuth account.
Tool registration
Registering the scan tool with AutoAuth utilizing the tool's serial number.
Annual subscription
Purchasing an AutoAuth annual subscription.
OEM fee
Paying the OEM's fee for access, facilitated through AutoAuth.
Tool subscription
Ensuring the scan tool has an active subscription with the tool manufacturer, a condition required by AutoAuth, not the tool manufacturer.
Software updates
Ensuring that the tool is up to date with the latest software.
It is important to note that none of the fees required are imposed by TOPDON. AutoAuth and the OE manufacturer have their own fees, and the scan tool's subscription requirement is imposed by AutoAuth.
TOPDON diagnostic tools
How SGW Support Works with TOPDON Tools
Compatible TOPDON diagnostic platforms integrate with manufacturer-required authentication systems, including AutoAuth and OEM-specific access token systems where supported.
Access is brand-specific. For AutoAuth access, including Nissan/Infiniti and Stellantis vehicles where supported, registration is handled through the AutoAuth website. VW and Audi access is processed through the TOPDON Mall.
After linking an active manufacturer subscription and completing credential verification, technicians can:
- Authenticate through the tool interface.
- Communicate with supported SGW-equipped vehicles.
- Perform manufacturer-authorized diagnostic functions.
SGW support availability depends on vehicle make, model year, and subscription status.
Support reference
SGW FAQs
What happens if I try to diagnose an SGW-equipped vehicle without authentication?
Without proper authentication, certain advanced diagnostic functions may be restricted.
In most cases, you can still:
- Read and clear diagnostic trouble codes (DTCs).
- View limited live data.
However, coding functions, security-related procedures, module adaptations, and certain bidirectional controls will not be available without authentication.
Does TOPDON include SGW access with tool purchase?
With the exception of Ford, SGW access is not automatically included with any TOPDON tool. TOPDON tools support SGW authentication, but SGW access methods are determined by the vehicle manufacturer.
Do I need an AutoAuth account to unlock SGW functions?
That depends on the manufacturer.
Some manufacturers, such as Stellantis, Nissan, and Mercedes-Benz, use AutoAuth for credential verification.
Others may use OEM-issued access tokens or manufacturer-specific authentication systems.
Authentication requirements vary by manufacturer, model year, and region.
Is an OEM subscription required for SGW authentication?
In most cases, technicians are required to carry an AutoAuth subscription, a current scan tool subscription, as well as pay a fee to the OEM through AutoAuth for SGW access.
None of these fees are imposed by the scan tool. They are a requirement of AutoAuth and the OEM.
Which TOPDON tools support SGW functions?
Select TOPDON diagnostic platforms support Secure Gateway authentication for participating manufacturers.
Gateway support may vary by:
- Tool model.
- Software version.
- Active subscription status.
- Vehicle manufacturer and platform.
- Quality of the network connection.
Refer to your tool's specifications or contact support for model-specific compatibility.
Are all functions unlocked after authentication?
Supported functions become available after successful authentication, but availability depends on:
- Manufacturer restrictions.
- Model year.
- Vehicle platform.
- Active subscription status.
Some manufacturers may still limit certain operations to dealership-level systems.
Do SGW requirements change by model year?
Yes. Gateway implementation often varies by:
- Model year.
- Vehicle platform.
- Software revision.
Always verify requirements for the specific vehicle you are servicing.
Can independent technicians use SGW-supported diagnostics?
Yes, provided they:
- Register with the required authentication system.
- Pay the appropriate fees to the authentication system and OEM manufacturer.
- Use a compatible diagnostic platform.
- Carry a current scan tool subscription with the latest updates.
Authentication systems are designed to allow credentialed independent technicians to perform supported functions within manufacturer guidelines.
Why are Secure Gateways becoming more common?
Vehicle cybersecurity standards continue to evolve. Manufacturers are implementing Secure Gateway systems to:
- Protect vehicle networks.
- Prevent unauthorized module access.
- Comply with global cybersecurity regulations.
- Safeguard safety-related systems.
As a result, authentication is increasingly required on newer model-year vehicles.
Need model-specific compatibility help? Contact TOPDON support.