SERMI Certification

Why SERMI?

High-tech car theft is on the rise across Europe, the responsibility of vehicle repair technicians has evolved and in response, the new compulsory certification scheme SERMI, has been introduced.

Data from Motor.com shows a sharp uptick in vehicle theft between 2021 and 2023,

with increases of 7%in the UK and Italy, and nearly a fifth in France
In Germany, thefts surged by 17.5%in a single year
The UK’s Royal Automotive Club (RAC) reports that car thefts are at a 15-year high, with nearly 130,000vehicles stolen between April 2023 and March 2024

Most stolen car crimes go unsolved: instead, the cars end up being reprogrammed and sold. Repair technicians have the ability to know if a vehicle’s registration or log are authentic. They also have the tools and authorization to re-program security systems if the car owner locks themselves out of a car or has lost their keys. SERMI requires that the technician makes the necessary ownership checks before accessing the vehicle’s security system.

Media and police warnings suggest that thieves’ knowledge is evolving. New techniques such as “keyless theft”, using remote access or fob cloning, have emerged. It is now the responsibility of the technician to make sure that anti-theft technology is up-to-date, incorporating the many security updates manufacturers have made.

What is SERMI CERTIFICATION?

SERMI (short for SEcurity-related vehicle Repair and Maintenance Information) is a European certification system that regulates access to vehicle OBD – On Board Diagnostics and RMI - Repair and Maintenance Information and to prevent the misuse of the information. OBD and RMI concern the functional security of the vehicle, including systems related to assisted driving technology but also the immobiliser and anti-theft systems, key coding, locks, transmitters, and other products from car lock systems from passenger vehicles, trucks and even trailers.

Subject to SERMI are the IO - “Independent Operators” (i.e. carbody workshops which work for multiple brands belonging to different automotive concerns) and the Remote Service Suppliers (i.e. service provider offering remote technical services such as programming or fitting, activating of parts and equipment on a vehicle). SERMI was officially launched in August 2023 and is being rolled out gradually across the European Union.

In essence, SERMI is pushing

  • All automotive OEM’s to
    • implement an online portal to provide access to repair and maintenance information
    • allow the access to the repair and maintenance information on their portal only if the Independent Operator ‘s employee (and Remote Service Supplier ‘s employee) has its digital SERMI-certificate, allowing the access to the OEM’s portal 
  • All Independent Operator ‘s to 
    • check and ensure that the vehicle on which they perform security related repair and maintenance activities, is not stolen 
  • All Independent Operator ‘s and Remote Service Suppliers which require access to sensitive technical information related to vehicle safety
    • only perform legitimate business activities in the automotive after market
      - organisations which do car-tuning, chip-tuning, tampering with systems which affect pollution- or emission control, … can’t get certified for SERMI. 
    • get SERMI-certified
      - organisations which do not get SERMI-certified won’t be able to access the RMI and OBD information

SERMI certification in a nutshell

  • SERMI certification, valid for 5 years, concerns anyone dealing with “On Board Diagnostics” (OBD) in vehicle repair workshops, both on company and individual employee level
  • The first step in the certification process is a remote inspection of the following documents, proving compliance with SERMI
     
    • Documentation of ownership
    • liability insurance with a minimum amount of coverage of 1 million Euro for bodily injury and 0.5 million Euro for property damage
    • (blank) criminal records for legal representative and concerned mechanics
    • The required training and qualification certificates (varies per country)
    • Proof of legitimate business activities in the automotive after market (e.g. organizations which do car-tuning, chip-tuning, tampering with systems which affect pollution- or emission control, … can’t get certified for SERMI)
    • auto-declaration confirming compliance to the SERMI-requirements
    • certificate not yet revoked due to misuse
  • Once certification is obtained, the repair workshop is also subject to (an) unannounced inspection(s) during the 5-year certification period and a renewal audit 6 months before the end of the certification where they will also need to demonstrate that organization and technicians fulfill the authorization criteria and check that the vehicles are not stolen, before doing any security related repair and maintenance activities.

Benefits of SERMI Certification

  • Security

    Access control

    Image
    Why developing a cybersecurity safe culture is urgent

    only certified people and certified organizations can access the sensitive technology, preventing improper use

  • Increased competitiveness

    Standardized access

    Image
    How to achieve Cybersecurity Compliance as an Automotive Supplier

    Standardized access to the Repair and Maintenance Information for the independent aftermarket service suppliers increases their access and ability to support with different brands

  • Legal compliance

    SERMI certification required for EU compliance.

    Image
    CYBERSECURITY TESTING

    Being based on European legislation, the only way to demonstrate compliance is through SERMI certification

  • Consumer trust

    Standardization enhances repair safety & reliability.

    Image
    IATF 16949 Update 2024: Key Changes for Automotive Quality Management

    The standardization, increased level of control on the technology impacting the vehicle security improve the perception of safety and reliability of repair services