Scan Tool Validation Program FAQ's

Recently, NASTF was tasked with creating and managing a program that enables aftermarket scan tools to validate the operator performing security functions. This is essentially the same method employed by Automakers (OE Manufacturers) Tools.

A NASTF VSP ID will be required to use a scan tool to perform security functions including:

    ●  Add a key     ● All keys lost     ● Immobilizer functions     ● Any process that the OE determines to be security related

Watch video for information:

Each VSP will be responsible for verifying the identity of the vehicle owner but will not be required to complete a D1. The tool and NASTF will complete this process behind-the-scenes.

When a security operation is requested, the scan tool will request an active VSP credential along with a NASTF passcode and the VSP must verify all customer ID and ownership documents. The tool will communicate with the SDRM Registry for validation and the automatic generation of a D1 allowing the technician to complete the operation. If no cellular or Wi-Fi connection is available – the tool will require log in with tool username, password, VSPID credential and NASTF passcode allowing for 24-hour offline security functions and then automatically log the transaction. Upon reconnection, each transaction will upload to the SDRM; however, each transaction in the 24-hour period requires VSP ID and passcode.

If you do NOT have your VSP ID, we recommend applying as soon as possible to avoid any potential interruption of your business. VSP applicants must provide documentation proving proper registration of their business, driver’s license, locksmith license in some states and locales and agree to a background check.

Application checklist

If I am already a VSP (Vehicle Security Professional) do I have to do anything to participate in this program?

No. All current security credentials and transactions will still operate in the same manner.

Will aftermarket tools still use “back door” methods or will they use OE methods?

NASTF does not dictate how OE Automakers or aftermarket tools perform their operations in any way. This system will simply allow tools to validate the operator.

Why is the “Add a Key” function part of this program?

Due to the capability of many aftermarket tools, the “Add a Key” function has emerged as the most common way that car thieves use to steal a car with a scan tool. It should be noted that if the vehicle has its own “Add a Key” feature that does not require a tool to initiate, this does not fall under the requirements of this program.

How does this affect my OE tools?

This process will not affect OE tools. NASTF is not currently aware of any OE tools changing their processes because of this program.

How does this affect American vehicles that are outside the USA?

NASTF only provides credentials for US and Canadian repair professionals. Vehicles sold in either market and taken to areas outside of those areas may or may not be supported by automakers. NASTF does not make these decisions.

Is the VSP ID needed by the tech performing repairs or the shop owner?

NASTF establishes credentials for individuals not businesses. Generally, in an auto repair shop environment, a single technician can be registered as a Vehicle Security Professional. Business owners can request a free Company Admin account to manage their employees. If additional on-site employees require credentials, NASTF has a subordinate account that is approximately half the price of the primary account for 2 years.

Can a group of technicians in a business share a VSP ID?

No. NASTF Terms and Conditions require that only the credentialed VSP is able to perform security work and access security information available from automaker websites. This does not mean that 2 technicians cannot work together on a vehicle; it simply means that only the credentialed VSP can access the information and must be directly involved in the repair. Providing an access code to another employee or simply “punching in” your ID and walking away is not acceptable and can result in termination from the NASTF VSP Registry.