# Secure Gateways are now used to block diagnostic access **URL:** \ **Category:** Maintenance/Repairs\ **Created:** [June 25, 2026, 5:28pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900 "2026-06-25T17:28:48Z")\ **Posts on this page:** 20\ **Page:** 5
**Author:** ![bcohen2010](https://avatars.discourse-cdn.com/v4/letter/b/779978/32.png) [@bcohen2010](https://community.cartalk.com/u/bcohen2010)\ **Post date:** [July 5, 2026, 8:20pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/81 "2026-07-05T20:20:50Z")
> [@Nevada\_545](#): > > Much of a vehicle’s CAN bus systems will be found hidden deep inside a car, but since modern headlights are so smart these days, they require their own ECUs, which means they’re going to be wired into the whole car’s CAN bus system. Headlights should be no “smarter” than a molded polycarbonate lens surrounding a molded reflector, into which a standard dual-beam halogen bulb is inserted. Anything “smarter” than that is a solution in search of a problem. If modern headlights are really much “smarter” than this, to the point they require a computer module, no wonder modern vehicles are unaffordable to the majority of the population. ---
**Author:** ![jtsanders](https://avatars.discourse-cdn.com/v4/letter/j/c2a13f/32.png) [@jtsanders](https://community.cartalk.com/u/jtsanders)\ **Post date:** [July 5, 2026, 11:16pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/82 "2026-07-05T23:16:48Z")
Automatic headlights need at least one sensor to recognize when sunlight is dim enough to turn the headlights and tail lights on. My car also has a sensor to toggle the high beams when a car approaches in the oncoming lane. Whenever there are sensors, computer assistance is needed to initiate control. ---
**Author:** ![asemaster](https://avatars.discourse-cdn.com/v4/letter/a/5f9b8f/32.png) [@asemaster](https://community.cartalk.com/u/asemaster)\ **Post date:** [July 6, 2026, 1:24am UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/83 "2026-07-06T01:24:03Z")
> [@TwinTurbo](#): > > This is where the real profit exists for them- recurring revenue for their authorized service centers FCA/Stellantis is the biggest customer at any CDJR dealer service department, through warranty repairs. And even if that weren’t true, how would FCA profit from a third-party authentication service? Do you think all the indys and DIY’er will just throw up their hands and say “well, I’m locked out. No choice but to take it to the dealer.”? It’s Sunday but I’m catching up on some work. I opened my company laptop and logged into Concur to work on my expense account. To gain access I had to use another registered device and authenticate to make sure I was who I say I am and have a secure connection. Secure Gateway, Okta, Microsoft Authenticator, it’s all the same thing and everything has a cost. Interesting side note about warranty work at dealers…back when it was Daimler/Chrysler, someone did a study and noted that Toyota sold almost twice as many cars as Chrysler, but Chrysler spent almost twice as much money as Toyota fixing their own cars under warranty. > [@bcohen2010](#): > > Headlights should be no “smarter” than a molded polycarbonate lens surrounding a molded reflector, into which a standard dual-beam halogen bulb is i Again, people want so much more than that with their cars. Your headlamp assembly is a $1500 LED CAN Bus component with adaptive lighting that swivels into turns to illuminate what you otherwise couldn’t see. If you’re working on your patio and load 6 bags of concrete into the trunk of your sedan the headlights are now aimed at the sky, the car will adjust them so you can see on your way home. Your taillight housing also contains the radar sensor for your blind spot monitor and may need to be programmed and calibrated when replacing it. Do you want all these things? Do I? Not really. But “people” do. BTW how’s the work on the Neon going? ---
**Author:** ![Nevada\_545](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/nevada_545/32/41232_2.png) [@Nevada\_545](https://community.cartalk.com/u/Nevada_545)\ **Post date:** [July 6, 2026, 3:05am UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/84 "2026-07-06T03:05:07Z")
> [@asemaster](#): > > To gain access I had to use another registered device and authenticate to make sure I was who I say I am and have a secure connection. 2 step authentication to use the company time clock is a ploy to consume 1 minute of my time each day. 😉 Back to the main topic; vehicle manufactures advertise for “The Works” Ford service package or for MR GoodWrench to sell parts and bring customers closer to the showroom. The advertising program is a rewards incentive for dealers with high customer survey results. Will requiring the competition to use qualified equipment bring customers to dealer showrooms? Not effectively. Competing shops using qualified diagnostic tools will improve the vehicle ownership experience. In an example posted in the discussion above; an independent shop is using a Tech2 scan tool so out of date it would not work on a 2010 Pontiac. Who did the mechanic blame for the deficiency? ---
**Author:** ![bing](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/bing/32/4619_2.png) [@bing](https://community.cartalk.com/u/bing)\ **Post date:** [July 6, 2026, 5:43am UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/85 "2026-07-06T05:43:20Z")
My sensors for daylight are on the dash. No need to be in the headlights. Also we did have side marker lights that lit up the area you were turning into. Standard sockets and bulbs. I dunno but I’m not sure the public has been asking for all this. More like the manufacturers are using it for a sale gimmick whether we like it or not. ---
**Author:** ![ChrisTheTireWhisperer](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/christhetirewhisperer/32/34798_2.png) [@ChrisTheTireWhisperer](https://community.cartalk.com/u/ChrisTheTireWhisperer)\ **Post date:** [July 6, 2026, 6:55am UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/86 "2026-07-06T06:55:57Z")
> [@asemaster](#): > > I opened my company laptop and logged into Concur to work on my expense account. To gain access I had to use another registered device and authenticate to make sure I was who I say I am I. LOATHE. 2-Factor Authentication. (2FA) It has no business in the civilian sector, except as optional. ---
**Author:** ![TwinTurbo](https://avatars.discourse-cdn.com/v4/letter/t/8baadc/32.png) [@TwinTurbo](https://community.cartalk.com/u/TwinTurbo)\ **Post date:** [July 6, 2026, 1:00pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/87 "2026-07-06T13:00:26Z")
> [@asemaster](#): > > how would FCA profit from a third-party authentication service? C’mon now, you think they give that away for free? Of course not, someone has a contract and pays them yearly fees for the business. > [@asemaster](#): > > I am and have a secure connection. Secure Gateway, Okta, Microsoft Authenticator, it’s all the same thing and everything has a cost. You seem to be losing focus on the issue. The issue is not “does it cost money to implement a secure gateway” the issue is, “should a secure gateway be needed to lock people out of common diagnostic routines”. And the answer is obvious- NO. ---
**Author:** ![davesmopar](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/davesmopar/32/41750_2.png) [@davesmopar](https://community.cartalk.com/u/davesmopar)\ **Post date:** [July 6, 2026, 1:23pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/88 "2026-07-06T13:23:39Z")
> [@ChrisTheTireWhisperer](#): > > 2-Factor Authentication. (2FA) > > It has no business in the civilian sector, except as optional Funny, I’ve been on disability retirement now for nearly 5 years, so nothing to do with any kind of work, and I have to use 2FA for a lot of stuff I log into that is 100% civilian… just saying… 😉 ---
**Author:** ![VOLVO-V70](https://avatars.discourse-cdn.com/v4/letter/v/8e8cbc/32.png) [@VOLVO-V70](https://community.cartalk.com/u/VOLVO-V70)\ **Post date:** [July 6, 2026, 1:35pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/89 "2026-07-06T13:35:57Z")
> [@ChrisTheTireWhisperer](#): > > It has no business in the civilian sector, except as optional. Once again you are wrong. Many institution’s have the 2-factor because the web hackers are really good at mining passwords. ---
**Author:** ![MikeInNH](https://avatars.discourse-cdn.com/v4/letter/m/a587f6/32.png) [@MikeInNH](https://community.cartalk.com/u/MikeInNH)\ **Post date:** [July 6, 2026, 1:44pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/90 "2026-07-06T13:44:40Z")
> [@ChrisTheTireWhisperer](#): > > 2-Factor Authentication. (2FA) > > It has no business in the civilian sector, except as optional. You have no idea what you’re talking about. You should spend some time learning about the [technology](https://www.microsoft.com/en-us/security/business/security-101/what-is-two-factor-authentication-2fa) before making any idiotic statements. 2 factor authentication is to protect clients and the business. I’m glad my Finance account manager has 2 factor authentication. I’m glad my Apple and Microsoft accounts have 2 factor authorization. All the customer facing accounts we setup as my job as Software Architect and Director of software engineer for a small Telecom solutions company had 2 Factor Authorization. We were one of the first in our industry, and now it’s pretty much standard. I wish my Amazon account did. ---
**Author:** ![ChrisTheTireWhisperer](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/christhetirewhisperer/32/34798_2.png) [@ChrisTheTireWhisperer](https://community.cartalk.com/u/ChrisTheTireWhisperer)\ **Post date:** [July 6, 2026, 2:34pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/91 "2026-07-06T14:34:04Z")
Ok, for work-related and business purposes, fine. But not for one’s personal GMail or Facebook for heavens sakes. ---
**Author:** ![MikeInNH](https://avatars.discourse-cdn.com/v4/letter/m/a587f6/32.png) [@MikeInNH](https://community.cartalk.com/u/MikeInNH)\ **Post date:** [July 6, 2026, 2:38pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/92 "2026-07-06T14:38:39Z")
> [@ChrisTheTireWhisperer](#): > > But not for one’s personal GMail or Facebook for heavens sakes. Facebook - maybe. GMail - DEFINITELY. A persons email account can contain extremely sensitive information. The #1 app that is used to hack into a persons computer since person computers is EMAIL. Nothing else even comes close. ---
**Author:** ![VDCdriver](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/vdcdriver/32/30_2.png) [@VDCdriver](https://community.cartalk.com/u/VDCdriver)\ **Post date:** [July 6, 2026, 2:41pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/93 "2026-07-06T14:41:28Z")
> [@MikeInNH](#): > > You have no idea what you’re talking about. You should spend some time learning about the [technology](https://www.microsoft.com/en-us/security/business/security-101/what-is-two-factor-authentication-2fa) before making any idiotic statements. +1 I have to use 2FA for all of my investment accounts, for my state’s pension account, for setting-up many of the new apps on my phone, for accessing info on my doctors’ websites, and when paying my credit card bills. ---
**Author:** ![TwinTurbo](https://avatars.discourse-cdn.com/v4/letter/t/8baadc/32.png) [@TwinTurbo](https://community.cartalk.com/u/TwinTurbo)\ **Post date:** [July 6, 2026, 4:47pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/94 "2026-07-06T16:47:30Z")
> [@MikeInNH](#): > > I wish my Amazon account did. They do, you have to enable 2 step verification (as they call it). Look in your account menu under login and security to turn it on… ---
**Author:** ![bing](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/bing/32/4619_2.png) [@bing](https://community.cartalk.com/u/bing)\ **Post date:** [July 6, 2026, 7:48pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/95 "2026-07-06T19:48:19Z")
It’s a little bothersome but only the banks and investment accounts do this for me. In addition to daily limits, I feel a little safer with the authentation. Accounts can be drained very quickly otherwise. ---
**Author:** ![asemaster](https://avatars.discourse-cdn.com/v4/letter/a/5f9b8f/32.png) [@asemaster](https://community.cartalk.com/u/asemaster)\ **Post date:** [July 7, 2026, 2:30pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/96 "2026-07-07T14:30:10Z")
> [@TwinTurbo](#): > > the issue is, “should a secure gateway be needed to lock people out of common diagnostic routines”. And the answer is obvious- NO. No, the issue is should people be complaining about having to buy the proper tool to do the job. In order to be OBD-2 compliant you need to be able to read fault codes, verify readiness monitors, see freeze frame, and basic live data. You don’t need SGA to do those things. You want to do advanced diag and repair, buy advanced tooling. Remember back in the 80’s GM started using T15 torx fasteners and all anybody had in their home toolbox was a philips screwdriver? People complained and moaned about that. Carb mixture screws used to be capped and if you did access them you needed a double-d socket to turn them. People have been “locked out” of common service procedures since the days of sealed carbs and T15 screws. But the remedy is so simple and cheap–spend a few bucks and buy the right tools–that it really isn’t worth arguing about. So when a shop tells a customer that the car has to go to the dealer to get fixed, or a DIY’er complains about being locked out, it’s simply a matter of proper training and tooling. ---
**Author:** ![MikeInNH](https://avatars.discourse-cdn.com/v4/letter/m/a587f6/32.png) [@MikeInNH](https://community.cartalk.com/u/MikeInNH)\ **Post date:** [July 7, 2026, 2:49pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/97 "2026-07-07T14:49:08Z")
> [@asemaster](#): > > Remember back in the 80’s GM started using T15 torx fasteners and all anybody had in their home toolbox was a philips screwdriver? 80’s? My 1973 Vega had some torx fasteners. ---
**Author:** ![TwinTurbo](https://avatars.discourse-cdn.com/v4/letter/t/8baadc/32.png) [@TwinTurbo](https://community.cartalk.com/u/TwinTurbo)\ **Post date:** [July 7, 2026, 3:37pm UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/98 "2026-07-07T15:37:42Z")
Now we’ll have to just disagree. You say I should be able to view diagnostic codes but not be able to turn a solenoid on/off unless I have a subscription for the tool I already own and currently has that ability. It’s not a new tool or service or something different, it’s just creating a roadblock that requires a fee to access. Enuf said… ---
**Author:** ![Nevada\_545](https://sea1.discourse-cdn.com/cartalk/user_avatar/community.cartalk.com/nevada_545/32/41232_2.png) [@Nevada\_545](https://community.cartalk.com/u/Nevada_545)\ **Post date:** [July 8, 2026, 12:10am UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/99 "2026-07-08T00:10:44Z")
> [@asemaster](#): > > when a shop tells a customer that the car has to go to the dealer to get fixed Last year I watched a YouTube video of a shop owner explaining that he can’t replace a hydraulic brake actuator on a LS460 for his customer and that a Lexus dealer must replace it; because of a “programming” requirement. I have replaced many brake actuators; it is a daunting procedure. A scan tool is needed to complete the brake bleed procedure, set the zero-point calibration in the yaw rate sensor and to perform the linear valve offset calibration. Probably too technical for the general automotive maintenance shop. The Car Wizard has 1.2 million video subscribers, many supporting comments after the video with the belief that Toyota has him locked out of performing repairs. Mechanics make excuses for not performing the more challenging repairs and the crowd believes this is a “right to repair” issue. Seems he is not capable of bleeding the brakes on a Lexus. ---
**Author:** ![asemaster](https://avatars.discourse-cdn.com/v4/letter/a/5f9b8f/32.png) [@asemaster](https://community.cartalk.com/u/asemaster)\ **Post date:** [July 8, 2026, 3:58am UTC](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900/100 "2026-07-08T03:58:42Z")
> [@Nevada\_545](#): > > Last year I watched a YouTube video of a shop owner explaining that he can’t replace a hydraulic brake actuator on a LS460 for his customer and that a Lexus dealer must replace it; because of a “programming” requirement. That’s the kind of outright lying straight to a customer’s face that I absolutely hate. Not that any other kind of lying is ok… > [@Nevada\_545](#): > > many supporting comments after the video with the belief that Toyota has him locked out of performing repairs. When the actual truth is that he is unwilling to use the proper tools and equipment to do the work. It’s such an easy excuse to use. > [@Nevada\_545](#): > > crowd believes this is a “right to repair” issue. R2R is a solution looking for a problem. I’ve said this many times before…with the exception of certain security/anti-theft related devices, anyone anywhere can repair their own car if they wish to invest in the proper tooling. And yes, software and subscriptions are tools. > [@Nevada\_545](#): > > Car Wizard Car Wizard, Scotty Kilmer, same difference… [Previous page](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900.md?page=4) [Next page](https://community.cartalk.com/t/secure-gateways-are-now-used-to-block-diagnostic-access/205900.md?page=6)