What is NASTF? (credentials for mechanics, technicians, locksmiths)

The National Automotive Service Task Force (NASTF) is a (501c6) non-profit organization established in 2000 as a collaborative effort between auto manufacturers and aftermarket equipment and tool suppliers to provide service professionals with the necessary credentials to access security-related systems and information.

Industry Partnerships

Currently, thirty-eight auto manufacturers depend on NASTF to verify users' credentials and manage access according to their specific security requirements.

While these automakers depend on NASTF’s validation, the organization receives no financial support from them and is funded entirely through technician application fees.

Technicians, in turn, rely on NASTF because it unifies these varied processes into one standardized system. 

This shared framework is essential: without NASTF, each automaker would need to build its own credentialing infrastructure, and technicians would face separate, costly, and time-consuming approval processes for every manufacturer.

NASTF Team

The NASTF Registry supports more than 50,000 users with small but specialized teams. 

The Support Team of 3 full-time and one part-time staff manages compliance, technical and field issues, along with general user needs such as registry documentation. 

The Intake Team includes 3 part-time members who review approximately 400 applications each week, approving over 150, in addition to handling renewals.

And the Registry Team conducts final application reviews while administering audits and compliance enforcement.

SDRM Registry

If you’re a technician, locksmith, or repair professional who performs security-related automotive services such as programming keys, ordering codes or providing immobilizer resets, you will need to be registered through the National Automotive Security Task Force database.

However, before signing up for credentials, it’s important to understand which account is right for you.

Choosing an Account

The NASTF SDRM Registry offers two types of accounts to support users.

First, the free basic NASTF Membership provides access to industry insights, communications and resources such as the Learning Center, diagnostic networks, automaker service links, and more. However, there is no direct access to automotive security data.

The free basic NASTF account also includes an opt-in for Diagnostic Technician Access. This no-cost update to the User profile provides an ID and passcode for Hyundai, Genesis and Kia software Gateway Validation.

Also offered as an optional upgrade to the free basic NASTF account, the Assisted Immobilizer Reprogramming (or AIR) service provides remote assistance to repair technicians for ECM, BCM and PATS module reprogramming through NASTF authorized service providers.

This program is designed for users that may occasionally require reprogramming support but don’t necessarily need full VSP credentials. There is no signup cost and the first five transactions are $45, with all additional jobs free for each year; however, access to security data is limited and key programming is NOT permitted.

Second, for technicians who need full access to OEM security functions - such as programming keys, retrieving immobilizer codes, or ordering theft-related parts - NASTF offers Vehicle Security Professional (or VSP) credentials. 

This subscription costs $435 for two years and requires submitting standard business documentation during the application process. Once approved, technicians receive a unique ID number that provides access to manufacturer security data.

SDRM VSP Credentials

There are three types of VSP profiles to choose from:

• Primary
• Subordinate
• Administrative

Each new business must register a Primary VSP account before adding subsequent Subordinate VSPs or Company Admins.

The NASTF VSP Primary Account provides credentials for lead service technicians requiring access to OEM vehicle data such as programming keys, retrieving security codes or performing immobilizer resets. Registration requires an application process and costs $435 for two years. Multiple primary accounts can be added according to a business's operational requirements

VSP Subordinate accounts are available for businesses that require additional technicians to perform service functions and multiple subordinate accounts can be added. Like a VSP Primary account, this is a full-access credential for technicians who need to program keys, retrieve security codes, or perform immobilizer resets. Registration also requires an application process and costs $250 for two years; however, Subordinate accounts are only available to U.S. W-2 employees and must be directly linked to an active primary VSP account

Administrative Accounts are mainly used by business owners or office staff. This free account cannot access vehicle security data but is able to assist technicians with submitting forms and managing documentation

Registration

Once you have decided which account matches your needs, navigate to www.nastf.org and select the “Joining NASTF” link to begin your registration.

To apply for the SDRM VSP credentials, you will need to provide some basic personal information and business documentation along with an active mobile device number.

An important item to consider during the registration process is establishing your industry notifications. This will allow you to receive industry notifications by email or text. While these are minimal (usually 3-4 messages a month), you may find the information helpful in managing day-to-day operations

Resources

It is important to understand that NASTF does NOT provide codes or programming, but rather the credentials to access security information directly from auto manufacturers. To assist with this process, the NASTF Registry maintains a directory to reach every automaker involved with the program and provides links to take you straight to each site.

In addition to accessing OEM information, there are other benefits to NASTF membership at no extra cost.

The “Knowledge Base” link in the NASTF menu bar directs users to the Collabtic informational site with videos and documentation outlining the use and process for the SDRM portal along with guides for navigating Automaker sites, technical information and instruction.

Through a partnership with Diagnostic Network, NASTF members have access to a community driven resource where industry professionals can discuss and share solutions for repair issues in an open, collaborative forum. Any gaps in service or tool information can be brought to the attention of the appropriate automaker through NASTF’s Service Information Request (SIR). This process provides a means to formally document and notify manufacturers of service concerns while alerting NASTF to these matters.

Authorization Documents

When performing services that require NASTF credentials from a manufacturer (such as obtaining key codes, accessing immobilizer data, or using other automaker security information), VSPs are required to submit documentation through what is referred to as a D1 form request.

This documentation confirms that the technician has established ownership of the vehicle being serviced and connects a technician’s secure access to a specific vehicle and service while providing automakers with the authentication needed to release security data. The information is then stored digitally in your account to be accessed if required for security concerns.

While a D1 is not necessary to perform a service, it is NASTF policy to acquire customer information prior to performing a security operation and a completed D1 form must be submitted within five days of any security transaction. If it remains unresolved beyond that window, your account may be locked until proper documentation is provided.

There are several D1 forms to consider based on the type of transaction being performed. While the basic process is the same for each D1 form, some documentation may vary depending upon the nature of the services involved. This information verifies that the vehicle owner has authorized the work by capturing essential details including owner identification (a current and valid driver’s license), vehicle data (such as registration, title or insurance), and the technician’s signature.

• The Customer D1 Form is used when working directly with a customer and the vehicle is owned by an individual. 
• The Auction/Fleet D1 Form is used for company-owned vehicles from auctions, dealerships, or fleets. 
• The Contracting D1 Form is used when performing work for a 3^rd party (such as another shop). 
• The Mercedes TRP D1 is used to submit orders to Mercedes Benz dealerships for Theft-Relevant parts
• The Repossession/Recovery D1 Form is used when recovering a vehicle or working in a recovery lot. 
• The Rivian Security Request D1 Form is used when associating a new key to a Rivian vehicle.
• The In-Transit D1 Form is used when performing in-transit or special projects for manufacturers

Policies

NASTF policies are implemented to maintain the legitimacy of the SDRM directory, so, to maintain compliance with NASTF SDRM VSP guidelines, it’s important to remember a couple of items:

• Absolutely NO sharing of credentials or security information obtained with credentials
• Acquire customer information prior to performing any security transaction
• Completed D1 documentation must be submitted within 5 days of security transactions. Failure to comply with this policy results in the loss of access to NASTF credentials until all outstanding D1s are submitted.
• D1 documentation not submitted within 10 days of a transaction results in account suspension. You must then contact NASTF Support to reinstate the account.
• Continued non-compliance may lead to permanent termination of NASTF access.

Support

Additional support information can be found on the NASTF Support Portal at support.nastf.org. You can search for help articles and videos in the Knowledge Base.

If you have questions or concerns, please do not hesitate to open a support ticket for direct assistance at support.nastf.org.