Why am I here? (I need code!! I was directed/sent here from a tool / provider)
You might have been directed to this site because your scan tool is asking for credentials or identification to perform programming. This means you are attempting to perform a security related transaction with an automotive manufacturer or aftermarket tool that requires security credential validation to complete. This is the law enforcement supported method of performing security operations and is only required when performing security related repairs.
What do I need to do? (I’ve got a vehicle on lift! Emergency! Critical!)
First, determine which credentials are the most appropriate for your use; either an Assisted Immobilizer Reprogramming (AIR) Service Technician request or Vehicle Security Provider (VSP) subscription. Once you have decided on the best service, you can begin.
What is AIR (Assisted Immobilizer Reprogramming)?
The Assisted Immobilizer Reprogramming (AIR) Security Technician service was created for repair technicians to request remote assistance for transactions such as Electronic Control Modules (ECM), Body Control Modules (BCM), and Passive Anti-Theft Systems (PATS) reprogramming through NASTF contracted Service Providers. While there is no registration fee for AIR credentials, there is a cost of $45 for the first 5 completed transactions per year, from there on there is no charge for an AIR Request.
How long will this process take? How quickly can I get a code?
The speed depends on whether you plan to apply for the Assisted Immobilizer Reprogramming (AIR) service or Vehicle Security Professional (VSP) credentials. While both offer quick solutions, the AIR certification is meant to be completed within 24 hours, whereas the VSP application process can take longer.
- Gather required documents: Ensure you have all necessary identification, certifications, and supporting paperwork.
- Complete the appropriate application: Submit all accurate information through the designated application process.
- Verification process: Allow time for the credentialing authority to review and verify your information.
- Pay any applicable fees: Some credentialing processes may involve fees. Make sure to fulfill any financial requirements.
- Await approval: Once your application is reviewed and approved, you will receive your credentials.
- Follow additional guidance provided by the issuing authority.
What is a NASTF Vehicle Security Professional?
To perform certain security-related automotive services such as programming keys, ordering codes or immobilizer resets, you will need to be registered through the National Automotive Security Task Force Secure Registry Database. Following your approval, you will receive a universally accepted identification number and passcode to access secure automotive information including programming and codes.
The NASTF Vehicle Security Professional Registry is only available for use by qualified technicians, mechanics and locksmiths working in businesses that have a U.S. Federal taxpayer identification number or Canadian Business Number (which must be provided during the application process), are properly licensed and registered in all municipalities in which they do business, are in good standing in the jurisdictions where they conduct business and whose principal business provides repair or replacement services directly to the registered owners of the automobile for which the security related service information is being obtained.
What does the VSP subscription cost?
The $435 fee covers a 2-year subscription and application fee, providing access to essential automotive security programming services. It’s a cost-effective investment, comparable to a Netflix subscription.
How do I establish credentials? (documents and info required)
To establish credentials, you need to provide necessary business and personal documents and information. The exact requirements are outlined in each application process.
What is included in a background check?
The NASTF background check includes a review of relevant personal and professional information to ensure compliance with industry security standards and protect the automotive industry.
What is 2-step/multi-factor authentication? (Twilio Authy Authenticator)
Multi-factor or 2-step authentication, such as Twilio Authy Authenticator, adds an extra layer of security by requiring two or more verification steps, enhancing the protection of your account and information.
What documentation do I need to provide and why?
If you plan on utilizing NASTF-assigned credentials for automotive manufacturer security-related transactions, your business must be recognized by a governing agency. In order to confirm your business’s eligibility, documentation proving its active and good standing status within your state of operation is required. You will need to provide a few items, including:
Proof of Identification – A legible color copy of your current valid US or Canadian driver’s license from the state or province of operation
Proof of Employment/Ownership – establishes whether the applicant is working as a full-time (not contract or 1099) employee or is the owner of the business. Acceptable documents include:
- W-2 form (W-4’s and W-9’s will not be accepted)
- Current pay stub
- Current and dated HR letter (identifying employee by name and current work location)
- Current and dated legal business document listing applicant as owner of the company
Business License – shows the business is currently active and in good standing within the state of operation. Examples of documentation NASTF accepts include:
- Notice of Good Standing/Fact from Secretary of State, dated and signed this year.
- Screenshot from your state website showing your business is currently active.
- Business license issued by your county/city/state dated this year for your business.
- Sales tax certificate/permit from the city/county/state for your business, dated and signed this year.
- Annual tax return can also be accepted, dated and signed this year by a preparer.
Locksmith License – if required in your area, this is necessary to acquire key codes
Certificate of Insurance – since the VSP Applicant/User will be performing security-related transactions, the coverage provides assurance that in case of any concerns, the insured and NASTF are protected from liability. NASTF requires Primary Account Holders to maintain at least a $1 million aggregate / $500,000 per event Commercial General Liability policy.
For further clarification of NASTF requirements, please download the Tip Sheet for further details.
Why do I need to provide business documentation to receive VSP credentials?
The NASTF Registry is only available for use by individuals working in businesses (sole proprietorships, partnerships and corporations) that have a U.S. Federal taxpayer identification number or Canadian Business Number (which must be provided during the application process), are properly licensed and registered in all municipalities in which they do business, are in good standing in the jurisdictions where they conduct business and whose primary business provides repair or replacement services directly to the registered owners of the automobile for which the security related service information is being obtained to include privately owned, business owned, government owned vehicles (sold in North America) and in instances where a power of attorney has been granted in the case of collision repair or estate management of a deceased owner.
What if I cannot get insurance?
NASTF has members who are insured in mobile and brick and mortar businesses in every state and Canada. Contact us if you find that you cannot be underwritten for some reason and we will help you with companies others are using in your area.
Can I join NASTF without an EIN?
The Employer Identification Number identifies whether a business is a partnership, sole proprietor, corporation or non-personal entity. NASTF requires a business EIN to properly conduct services to NASTF compliance.
Can I use my Social Security Number (SSN) as the Federal Employer ID Number (FEIN)?
No. The term employer identification number (EIN) refers to a unique identifier that is assigned to a business entity so that it can easily be identified by the Internal Revenue Service (IRS). EINs are commonly used by employers for the purpose of reporting taxes. The number is made up of nine digits and is formatted as XX-XXXXXXX. Businesses can apply for EINs directly through the IRS, which usually issues them immediately.
State tax ID and federal tax ID numbers — also known as an Employer Identification Number (EIN) — work like a personal social security number, but for your business. They let your small business pay state and federal taxes.
Every organization must have an employer identification number (EIN), even if it will not have employees. The EIN is a unique number that identifies the organization to the Internal Revenue Service. To apply for an employer identification number, you should obtain Form SS-4PDF and its instructions.
Will I be reimbursed if I am rejected during the application process?
NASTF does not issue refunds for VSP application fees and biennial dues once the background check is initiated with the following exception: if the applicant does not pass the background screening NASTF will return all but the application fee of $75. If the applicant has made false or fraudulent statements in their application or has been previously suspended from the registry NASTF will retain the entire fee.
Why is a Driver’s License required for vehicle authentication?
Documentation is necessary to establish the requesting individual is legally authorized to request service and operate the vehicle after the VSP has provided accessibility. If the Vehicle Owner is an individual, this requires verifying the requesting individual’s identity through a current and valid U.S or Canadian driver’s license. At this time, no other form of identification is accepted. However, the only valid exception would be if the owner’s license had been stolen and the owner could prove the theft. In this case, a passport or other government issued ID can be accepted).
Additional note – Most states Driver’s Licenses require a Social Security Number; other identification (such as Driving Privilege Cards) does not and can be obtained without providing evidence of lawful presence in the United States.
Scan Tool Validation
Recently, NASTF has been tasked with creating and managing a program that provides AFTERMARKET scan tools with the ability to validate the operator of a tool performing security operations. This function is essentially the same as the method employed by Automakers (OE Manufacturers) Tools. The following are answers to some common questions.
If I am already a VSP (Vehicle Security Professional) do I have to do anything to participate in this program?
No. All current security credentials and transactions will still operate in the same manner.
Will aftermarket tools still use “back door” methods or will they use OE methods?
NASTF does not dictate how OE Automaker or aftermarket tools perform their operations in any way. This system will simply allow tools to validate the operator.
Why is the “Add a Key” function part of this program?
Due to the capability of many aftermarket tools, the “Add a Key” function has emerged as the most common way that car thieves use to steal a car with a scan tool. It should be noted that if the vehicle has its own “Add a Key” feature that does not require a tool to initiate, this does not fall under the requirements of this program.
How does this affect my OE tools?
This process will not affect OE tools. NASTF is not currently aware of any OE tools that will be changing their processes as a result of this program.
How does this affect American vehicles that are outside the USA?
NASTF only credentials US and Canadian repair professionals. Vehicles sold in either market and taken to areas outside of those areas may or may not be supported by automakers. NASTF does not make these decisions.
Is the VSP ID needed by the tech performing repairs or the shop owner?
NASTF establishes credentials for an individual not a business. Generally, in an auto repair shop environment, a single technician can be registered as a Vehicle Security Professional. Business owners can request a free Company Admin account to manage their employees. If additional on-site employees require credentials, NASTF has a subordinate account this is approximately half the price of the primary account for 2 years.
Can a group of technicians in a business share a VSP ID?
No. The NASTF Terms and Conditions require that only the person who is credentialed is able to perform security work and access security information available from automaker websites. This does not mean that 2 technicians cannot work together on a vehicle. It simply means that only the credentialed VSP can access the information and must be directly involved in the repair. Providing an access code to another employee or simply “punching in” your ID and walking away is not acceptable and can result in termination from the NASTF VSP Registry.