Secure Your Access to Vehicle Security Information with VALIDX
Ensure Compliance with the Latest EU Regulations for Security-Related Repair and Maintenance Information (RMI)
The SERMI Scheme is a European regulatory framework ensuring that only authorized, certified workshops and technicians can access security-related vehicle repair and maintenance information (RMI) from Vehicle Manufacturers (VMs). Under Regulation (EU) 2021/1244, Independent Operators (IOs) and Remote Operators (ROs) must obtain official certification to continue performing essential security-related vehicle services, including key programming, immobilizer resets, ECU coding, and anti-theft module repairs.
By choosing VALIDX, you are partnering with a trusted Conformity Assessment Body (CAB) that operates under ISO/IEC 17020 standards, ensuring a transparent, efficient, and fully compliant certification process. Our expert team guides you through the entire SERMI certification journey, providing industry-leading support and regulatory expertise to help you meet compliance requirements seamlessly.
Why Choose VALIDX for Your SERMI Certification?
VALIDX goes beyond standard certification. As an expert in inspection, accreditation compliance, and regulatory frameworks, we provide a structured and streamlined process that ensures your certification experience is:
Comprehensive & Hassle-Free
Our team guides you through every step, from document submission to final approval, ensuring a smooth and efficient certification process.
Regulatory-Compliant
We ensure your business fully adheres to SERMI regulations, ISO 18541 for RMI access, and GDPR for data protection, preventing any compliance risks.
Fast-Track Processing
Our digitalized processes, expert auditors, and Trust Center (Digidentity) integration help accelerate certification approval.
Ongoing Compliance Support
Certification isn’t a one-time process. We provide guidance on regulatory updates, inspection readiness, and renewal requirements to maintain continuous compliance.
Who Needs SERMI Certification?
SERMI Certification is mandatory for:
Independent Workshops & Service Centers (IOs): Businesses that need direct access to security-related RMI.
Mobile & Remote Operators (ROs): Professionals performing off-site diagnostics, programming, and security module updates.
Technicians Handling Security Features: Anyone performing key coding, ECU programming, immobilizer resets, and anti-theft system repairs.
Failure to obtain certification will result in blocked access to essential security-related vehicle data, impacting the ability to service modern vehicles effectively.
What Do You Need to Comply With SERMI Requirements?
To qualify for SERMI Certification, companies and technicians must demonstrate compliance with strict security and operational criteria, including:
Legal Business Registration – Proof that the workshop or operator is legally registered as a business within the EU.
Employee Authorization & Background Verification – Each technician applying for access to security-related RMI must pass criminal record checks and identity verification to prevent unauthorized access.
Secure Handling of Security-Related Information – Certified entities must implement secure storage and operational measures to prevent unauthorized use or disclosure of security-related RMI.
Technical & Procedural Compliance – Applicants must follow ISO 18541 standards for standardized access to vehicle RMI and demonstrate adherence to SERMI security protocols.
Unannounced On-Site Inspection – Every certified entity must undergo at least one unannounced on-site compliance check within five years to maintain certification validity.
VALIDX assists in ensuring all documentation, compliance procedures, and security protocols are correctly implemented, reducing the risk of delays or non-conformities in the certification process.
The Certification Process – How It Works with VALIDX
Our SERMI Certification process follows a structured, step-by-step approach to ensure efficiency and compliance:
Application Submission – Register your company and submit required documentation via our secure online platform.
Document & Compliance Review – Our experts assess your business compliance, employee authorization, and security measures.
Remote & On-Site Verification – Initial compliance checks are conducted remotely, followed by a mandatory unannounced on-site inspection.
Trust Center Integration – Once approved, your business and employees receive secure digital credentials through Digidentity (SERMI Trust Center) for seamless authentication with Vehicle Manufacturers.
Certification Issurance & Ongoing Compliance – Your SERMI Certificate is issued, valid for five years, with continuous support for compliance maintenance.
GDPR & Data Protection – How Your Data Is Handled
Your company and employee data is processed securely in compliance with GDPR (Regulation (EU) 2016/679) and ISO/IEC 27001. Data is used exclusively for SERMI certification purposes and is only shared with accreditation authorities and the SERMI Trust Center (Digidentity) for identity verification and certification issuance. VALIDX guarantees the highest standards of data security, confidentiality, and regulatory compliance.
Get SERMI Certified – Start Your Application Today!
Ensure your business remains compliant with the latest SERMI regulations and maintains uninterrupted access to security-related vehicle repair and maintenance information.
SERMI Certification FAQ
Once your company and employees obtain SERMI certification, specific responsibilities must be fulfilled to maintain compliance. Below, you’ll find essential information about these responsibilities, including details on on-site inspections.*
*Please note that the European Association is still finalizing the full requirements, and some details may be subject to change.
Digidentity serves as the official Trust Center (TC) for SERMI and is responsible for issuing SERMI certificates through VALIDX. This enables us to provide certifications to Independent Operator employees (IOe) and Remote Service Supplier employees (RSSe). Additionally, Digidentity offers the Wallet app (iOS/Android), which securely stores the SERMI certificate.
After applying for certification and completing all necessary documentation, both the company and certified employees will receive an approval email. Employees will also receive a separate email from Digidentity containing a QR code. Simply download the Digidentity Wallet app and scan the QR code to access your SERMI certificate. Your SERMI certificate is securely stored in the Digidentity Wallet app and can only be accessed with a PIN. When accessing a vehicle manufacturer’s Repair and Maintenance Information (RMI) portal, use the app to scan the QR code provided on the manufacturer’s website and enter your PIN.
For additional guidance, Digidentity offers the following instructional videos:
Installing the Digidentity Wallet app and scanning the QR code;
Linking an Independent Operator (IO) with a Remote Service Supplier (RSS);
Using a SERMI certificate to access the Tesla portal.
Certified companies must inform VALIDX of any changes related to:
Contact details;
Company locations conducting SERMI-related activities;
Employment changes of certified employees (within three business days of termination);
Company closure.
Additionally, companies are responsible for:
Maintaining a secure register of all security-related RMI activities;
Reporting any security violations or misuse by certified employees to the appropriate authorities;
Ensuring employees use only their personal SERMI certification;
Providing ongoing training to employees for automotive security, reprogramming, and maintenance tasks;
Scheduling an on-site inspection at least six months before certification expiry for revalidation;
Being prepared for unannounced on-site inspections at any location performing SERMI activities.
Certified employees are required to:
Register with the vehicle manufacturer’s RMI system;
Access security-related RMI in compliance with EN ISO 18541:2014;
Ensure that downloaded security-related RMI is stored only as long as needed for operational purposes;
Notify their employer when their digital certificate is no longer required;
Keep their personal SERMI certificate, software token, and PIN confidential;
Properly use their personal token and PIN and report loss or misuse within 24 hours;
Report unauthorized use of the SERMI system by others;
Verify customer identity, vehicle details, and authorization before performing security-related work.
Companies have flexibility in how they maintain security-related RMI records, but the data must be accessible for auditing. The register should include, at minimum:
Customer Information:
1. Full name or business name and contact person; 2. ID, passport, or driver’s license number; 3. Address and phone number.
Vehicle Identification Information
Proof of Assignment by Customer
During an inspection, the following items will be reviewed:
Verification of business activities, company ownership, and legal representatives;
Validation of the VOG (RP) submitted in the application;
Review of employee records, including:
o Valid and signed employment contracts; o Documentation of required education or experience; o The VOG submitted at the time of certification; o If an employee works at multiple locations, their records will be reviewed at each location.
Proof of valid liability insurance in compliance with SERMI requirements;
Verification that business activities align with the SERMI framework;
Audit of security-related RMI records.
LOOKING FOR SOMETHING SPECIFIC?
Search for info, services, certifications and more
