SERMI scheme goes live in UK: Independent garages gain access to security data | News

After 17 years of industry campaigning, the UK’s independent garage sector finally has unrestricted access to vehicle security data. From 1 April 2026 the European Security-related Repair and Maintenance Information (SERMI) scheme is officially active in the UK. Compliant independent workshops that meet the scheme’s strict criteria can now access security-controlled technical information – such as key programming and immobiliser data – through a single manufacturer-recognised framework. The UK is the first country outside the EU to implement SERMI in full, and launch support from major brands ensures it is immediately meaningful in practice.

What is SERMI and why it matters

SERMI (Security-related Repair & Maintenance Information) was created under EU law to balance theft-prevention with fair access. In practice it means that tasks involving security systems – for example, programming new keys, replacing or re-flashing immobiliser or engine-control units, or other anti-theft functions – are now gated behind the SERMI “wall”. Independent operators must be authorised under the SERMI scheme to perform these jobs legally. If they are, they gain standardised access to the same security data as main dealers, but only after stringent identity and security checks. SERMI ensures that each technician and garage is vetted – independent workshops must register, supply business and security credentials, and undergo audit – before getting digital certificates to unlock manufacturer data.

Building consumer confidence is a key aim. As Digidentity (the UK’s SERMI Trust Centre) reports, most drivers worry about how garages handle their vehicle’s data. Under SERMI every technician is verified through a secure app: once approved, Digidentity issues a five-year digital certificate to each individual, giving manufacturers full visibility of who accesses their systems. In turn, motorists can be assured that security-sensitive repairs are done only by qualified, trusted operators.

Strong manufacturer backing

Twenty-two vehicle marques have already committed to the UK launch, reflecting widespread industry support. The list includes Jaguar Land Rover, Ford, Peugeot, Mercedes‑Benz, Nissan, Toyota and many others (notably, the Volkswagen Group brands have yet to sign up). By agreeing to use the SERMI framework voluntarily – even though UK law does not mandate it – these manufacturers provide a single unified authorisation route instead of separate approvals per brand. This means an approved garage can apply once and unlock data for any participating brand, greatly simplifying the process. As the SERMI Association notes, the UK launch (effective 1 April 2026) was enabled by close cooperation with government and the European Trust Centre, underlining its significance for the whole aftermarket.

Industry reaction and advice

Industry bodies have hailed the launch as a “defining moment” for independents. IGA Chief Executive Stuart James says SERMI “changes the position of the independent sector” by giving “professional, compliant businesses access to the information they need to repair modern vehicles properly, safely, and legitimately”. He also points out that SERMI approval will become a mark of quality: workshops that achieve it can demonstrate they meet a trusted, manufacturer-supported standard recognised across Europe.

Many aftermarket leaders emphasise that readiness is essential. The NBRA (National Body Repair Association) notes that while SERMI levels the playing field, companies that delay engagement “risk disruption” – without SERMI credentials, shops could lose access to critical functions. However, NBRA also welcomes the UK’s phased, voluntary approach, which lets British businesses learn from EU experience and adopt best practices before any future requirement. Phil Peace, Managing Director of Repairify, likewise calls SERMI a “significant shift” that offers “a clearer and more consistent pathway” for independents to reach the same manufacturer data as dealers. He warns that interpretation of “security-related” can vary by maker, and encourages repairers to understand exactly which procedures require SERMI and which do not. In practice this means most advanced jobs (e.g. key coding or replacing locked-out modules) will soon require a SERMI-approved technician on site.

Industry associations stress that garages have options if they choose not to certify every technician in-house. A tiered approach is emerging: shops can become fully SERMI-certified themselves, or use SERMI-authorised Remote Service Providers (RSPs), or send mobile qualified technicians to handle the secure work. Independent Garage Association and NBRA are already running briefings and training to help workshops adapt. All urge businesses to start the onboarding process now, because the scheme’s requirements (such as DBS checks and application lead times) take weeks or months to complete.

Getting SERMI certified – steps for garages

To join the scheme, a UK workshop must register as a SERMI “Independent Operator” via the official UK conformity body (RMISC). Key steps include:

Demonstrate technician experience or qualifications. Every authorised workshop needs at least one nominated Independent Operator Employee (IOE) per brand, and each IOE must have 2+ years’ hands-on mechanic experience or an approved qualification. (If in doubt, workshops can complete a short SERMI/OBD training course as proof.)
Prepare business credentials. The garage must prove it is a legitimate motor repair business (with tax records or trade membership), holds public liability insurance (at least €1m coverage), and does not sell or use prohibited devices (e.g. diesel defeat devices). Applicants must declare any relevant past convictions (a clean or limited record is required).
Apply and pay fees. Submit an Expression of Interest via the SERMI website and complete the official application form. A processing fee is due (approximately £30/month for five years, or ~£1,800 up front). Payment is required before identity checks proceed.
Obtain DBS checks. A Basic DBS (Disclosure) check is mandatory for the garage’s legal representative and all technicians to be authorised. (These should be done within 3 months of application.)
Verify identities in the Trust Centre. Once RMISC has reviewed the paperwork, each person submits to identity verification through the Digidentity app (the UK SERMI Trust Centre). This issues each technician a unique digital credential valid for five years.
Undergo compliance audit. RMISC conducts a desk-based audit (and sometimes a site visit) of your application documents. If approved, the garage is issued a SERMI inspection certificate and digital authorisation for each approved employee.

Once certified, a workshop must maintain compliance (e.g. renew DBS checks as needed and allow occasional audits) to keep its SERMI status. Certified technicians may only access security data on behalf of their employer, and credentials cannot be shared.

The road ahead

The SERMI launch removes a long-standing barrier for UK repairers. It means a homeowner in Harrogate or Hove can now take a Jaguar, Ford or Toyota to a local garage and have the electric locks or key fob reprogrammed just as easily as at a franchised dealer. More broadly, it signals confidence that the independent sector meets high security standards – a point Independent Garage Association stresses as a marketing advantage.

The focus now is on adoption. Garage owners are advised to review their workflows and identify which services require SERMI authorisation. Industry groups and training providers stand ready to help. As one Repairify executive puts it, “preparation today will be key to maintaining productivity tomorrow”. With SERMI in place, compliant UK garages can look forward to playing by the rules on security data and competing fully in the modern vehicle market.