In today’s increasingly connected automotive world, security is paramount. Mercedes-Benz has implemented enhanced security measures within XENTRY Diagnosis to protect vehicle systems and data. A key component of this enhanced security is the requirement for a second authentication factor for users accessing XENTRY Flash functions, such as ECU commissioning, programming, and coding. This article will guide you through these changes, focusing on how your Xentry Scn Account plays a vital role in maintaining a secure and efficient diagnostic process.
Two-Factor Authentication: Adding an Extra Layer of Security to Your XENTRY SCN Account
To ensure the highest levels of security when using XENTRY Flash, Mercedes-Benz now mandates two-factor authentication. This security measure, familiar from online banking and other sensitive platforms, adds an extra layer of protection to your XENTRY SCN account. Instead of just a username and password, you’ll need a second verification method to confirm your identity.
You can choose from two convenient authentication factors to secure your XENTRY SCN account:
- Smartphone Authenticator App: Use an authenticator app like PingID or Microsoft Authenticator on your smartphone. These apps generate time-based codes, providing a dynamic and secure second factor.
- USB Security Key: A USB security key supporting the FIDO2 standard offers a physical security option. These keys are readily available from electronics retailers and provide robust protection for your XENTRY SCN account.
We strongly recommend setting up both authentication methods for your XENTRY SCN account. This redundancy ensures that if you lose access to one factor, you can still securely access XENTRY Diagnosis with the other, minimizing downtime and maintaining workshop efficiency.
Setting Up and Managing Your XENTRY SCN Account Authentication
To assist you with the setup process, Mercedes-Benz provides a helpful HelpCard with detailed instructions. You can download this guide to easily configure your chosen authentication factors for your XENTRY SCN account.
Downloadable Resources
— HelpCard (PDF)
What if You Lose Your Authentication Factor? SCN Account Recovery Options
Losing an authentication factor doesn’t mean losing access to your XENTRY SCN account. Mercedes-Benz provides several recovery options:
- Use Your Alternative Factor: If you’ve wisely set up both a smartphone app and a USB security key for your XENTRY SCN account, simply use the alternative method to authenticate.
- Contact Your Org Admin: If you lack an alternative factor, your organization administrator (Org Admin) can reset your second factor. This allows you to set up a new authentication method and regain access to your XENTRY SCN account. You can find your Org Admin details within Alice under your profile data by clicking “Administrators.”
Instructions for Org Admins on resetting the second factor are also available for download:
Instructions for org admins on how to reset the second factor (PDF)
XENTRY Flash and Your SCN Account: Versatile Applications
Your XENTRY SCN account and XENTRY Flash are essential for a wide range of workshop tasks. From flashing ECUs to performing SCN/CVN coding and entering equipment codes, XENTRY Flash supports Mercedes-Benz Cars (including smart*, Maybach, and SLR) and Mercedes-Benz Vans. For trucks, online parameterization of control units streamlines data availability after ECU replacement. All these processes are seamlessly integrated within XENTRY Diagnosis and XENTRY DAS, minimizing manual steps for technicians and maximizing efficiency when using your XENTRY SCN account.
* except smart model #1
Streamlined Processes: Automatic SCN Coding and VeDoc Documentation with Your XENTRY Account
After ECU programming, the SCN coding process (if supported by the control unit) and VeDoc reverse documentation are automatically initiated. This automation, linked to your XENTRY SCN account, ensures that any modifications to the vehicle or ECU software are accurately updated in the VeDoc Vehicle Documentation System, maintaining a comprehensive vehicle history.
Single Sign-On: Seamless Workflow with Your XENTRY Workshop Applications
Once logged into one XENTRY workshop application (like XENTRY Flash or WIS) using your XENTRY SCN account, you benefit from single sign-on. No repeated logins are needed for other central online systems, creating a smooth and efficient workflow in your workshop. You’ll remain logged in for up to one hour of inactivity, further enhancing convenience when working with your XENTRY SCN account.
Diagnosis User Rights and Your XENTRY SCN Account
With the introduction of newer Mercedes-Benz models like the E-Class facelift and the S-Class, a new security concept has been implemented that impacts XENTRY Diagnosis software usage and your XENTRY SCN account.
Since June 2020, accessing diagnosis functions on these newer models requires a personalized username and password associated with your XENTRY SCN account. Diagnosis is impossible without this login information, meaning unauthorized access is effectively prevented. Repairing and diagnosing these vehicles now necessitates proper diagnosis access authorization linked to each XENTRY SCN account. It’s also important to note that XENTRY Diagnosis Kit 2 is no longer sufficient for these models; XENTRY Diagnosis Kit 3 or higher is required.
Two types of user rights are defined for your XENTRY SCN account:
- XENTRY Standard Diagnosis: For users without XENTRY Flash authorization, allowing basic functions like reading and erasing fault memories.
- XENTRY Flash User: Corresponds to the existing XENTRY Flash user role, granting access to flashing and coding functions via your XENTRY SCN account.
To obtain the necessary user rights for your XENTRY SCN account:
-
XENTRY Flash Authorization: Both Standard-Flash and Extended Flash roles can be requested through UMAS. Each user must complete a one-time identification process via UMAS to obtain Flash roles linked to their XENTRY SCN account.
-
XENTRY Standard Diagnosis Rights: All diagnosis users must independently request Standard Diagnosis rights via https://umas.mercedes-benz.com/umas and complete the one-off identification process to associate these rights with their XENTRY SCN account. Market-specific ISP support may need to create the user in GEMS if a user ID doesn’t already exist for the XENTRY SCN account.
Certificate-Based Diagnosis: Why the Increased Security?
Modern vehicles are increasingly complex computer systems, making them potential targets for cyberattacks and misuse. Growing media attention on vehicle hacking and forthcoming UNECE regulations necessitate robust vehicle protection. Mercedes-Benz is proactively implementing security measures, including certificate-based diagnosis, to safeguard against unauthorized access. This system relies heavily on the security and proper management of your XENTRY SCN account.
Affected Vehicles: Certificate-Based Diagnosis Rollout
Certificate-based diagnosis was initially introduced with the E-Class facelift (W213 facelift) for individual control units. The S-Class W223 saw full implementation. Moving forward, all new Mercedes-Benz model series and facelifts will incorporate certificate-based diagnosis, further emphasizing the importance of XENTRY SCN account security.
Diagnosis Process Changes: Certificates and Your XENTRY Account
In the new system, performing diagnosis requires a digital certificate provided by Mercedes-Benz. At the start of each diagnosis session, this certificate is automatically exchanged between the diagnostic tester and the vehicle. This background process, linked to your validated XENTRY SCN account, ensures secure and authorized communication.
Obtaining Certificates and Registration for Independent Workshops
- XENTRY Diagnosis Kit 3/4 or XENTRY Pass Thru EU Users: Certificates are provided directly by Mercedes-Benz AG.
- Independent Tool Manufacturers’ Diagnosis Tools: Certificate availability depends on agreements between the tool manufacturer and Mercedes-Benz AG regarding data usage. Contact your tool manufacturer for details.
Diagnosis tool manufacturers, technical inspection agencies, and official bureaus should contact Mercedes-Benz AG directly for certificate information.
Costs Associated with Certificates
Mercedes-Benz AG provides these security certificates to all customers free of charge, ensuring that enhanced security doesn’t create additional financial burdens for workshops using XENTRY SCN accounts.
Data Requirements for Access Levels and Your SCN Account
Data requirements depend on the level of access needed:
- Read Access Authorizations: Tied to an organization and issued for an organization/service operation, managed through organizational XENTRY SCN accounts.
- Write Access Authorizations: Personalized and require prior personal authentication, linked to individual XENTRY SCN accounts authenticated by Mercedes-Benz AG or independent tool manufacturers.
OBD-II Functionality and Functions Requiring Certificates
Standard OBD-II functions (SAE J1979) remain unrestricted and available without certificates. However, all advanced diagnostic functions now require certificates associated with your XENTRY SCN account, with access levels determined by organizational or personal authorization.
XENTRY Flash Support and Further Assistance
For XENTRY Flash support, utilize the “Need help?” section within the application. If FAQs don’t provide an answer, you can open a support ticket via the provided link.
