With unrivalled expertise in remote diagnostics and ADAS, we'll help you find the right solution

With unrivalled expertise we can help you find the right solution

Slide 1

SERMI Independent Operator (IO) Registration Guide

SERMI (Security-related Repair and Maintenance Information) is a European scheme that authorises independent operators to access manufacturer security-related data. This enables services including immobiliser coding, module repairs, and other security-critical vehicle maintenance.

Key requirements

Before applying, ensure your business meets these essential criteria:

  • Valid business status: Your garage must be an established automotive service provider.
  • Automotive focus: Demonstrated work history in vehicle repair and maintenance.
  • Insurance: Public liability insurance minimum of €1 million (bodily injury) and €0.5 million (property damage).
  • No prohibited activities: Your business must not offer emission control defeat devices or services that negatively impact emissions performance.
  • Clean criminal record: No unspent convictions; certain spent convictions (automotive-related crimes or fraud) can disqualify applicants.
  • Legitimate business declaration: Commitment to ethical business practices in vehicle security.

Registration process (8 steps)

Submit Expression of Interest
Complete the online form at sermi.co.uk. You'll receive confirmation with application documentation and a requirements checklist.
Apply for DBS checks
Obtain a Basic DBS check for the IO Legal Representative and each technician you wish to approve. Cost: £21.50 per check. Checks must be completed within 3 months of your application date.
Prepare required documentation
Gather evidence of business ownership, automotive experience, insurance, declarations, and DBS certificates.
Complete application form
Submit organisation details, IO Legal Representative details, technician information, supporting documents, and signed agreements/declarations.
Payment
Pay the SERMI approval and 5-year authorisation fee. Costs are either £30 per month over 5 years or a one‑off payment of £1,800 for the full 5‑year certificate. Payment is required before identity verification can proceed.
Identity verification (Digidentity)
After payment, each person receives a secure link to verify identity using the Digidentity app.
Device requirements: iOS 14+ or Android 9+, front & rear cameras, and device must not be rooted/jailbroken.
Approval audit (RMISC)
RMISC (Conformity Assessment Body) reviews your application and evidence. In most cases this is a desk-based audit, with site visits in some cases.
Certificate issuance
On approval you'll receive the garage inspection certificate, digital authorisation certificates for each approved technician (valid 5 years), and access to the Trust Centre platform.

Documentation checklist

Use this quick reference before starting your application:

Business ownership

Tax returns, business bank statements (last 3 months), utility bills with business name, HMRC correspondence, or an accountant's letter.

Automotive experience

Companies House registration with appropriate SIC codes, recent repair invoices, or membership in approved trade associations (IGA, TMG, etc.).

Insurance proof

Public liability insurance certificates confirming the required coverage levels.

Declarations and DBS

Signed legitimate business declaration, Basic DBS certificates for representatives and technicians, plus self-declarations for any spent convictions (where applicable).

Adding additional technicians

You can add more technicians after initial approval. Each employee applicant must provide:

  • Completed and signed application form (signed by IO Legal Representative)
  • Basic DBS certificate (completed within 6 months of application)
  • Self-declaration for any spent convictions
  • Employment contract with your organisation
  • UK proof of identity (driving licence, passport, or ID card)
  • Automotive qualification with practical assessment and OBD component (dated at least 2 years prior)

Ongoing responsibilities & compliance

Once approved

  • Your organisation is authorised for 60 months (5 years).
  • Individual technician authorisation remains valid for the remainder of the IO authorisation period.
  • Technicians can only access information on behalf of your organisation.
  • Technician credentials are personal and must never be shared.

Audits during your authorisation period

  • Minimum of one random unannounced site inspection.
  • One planned re-approval inspection in the final 6 months.
  • Annual compliance checks on documentation and business practices.
  • Failure to complete the re-approval inspection can result in revocation.

Record keeping (retain for 5 years)

  • Signed customer repair orders (digital copies acceptable)
  • Vehicle identification verification (VIN checks against registration documents)
  • Customer identity verification documentation (ID, passport, or licence details)
  • Records of which technician performed the work
  • Manufacturer access logs and transaction records
Important compliance notes
  • Misuse of credentials: sharing logins or using them for personal purposes can lead to permanent revocation.
  • Single-organisation access: technicians can only access information for their authorised IO; moving to another organisation requires new authorisation.
  • Prohibited activities: emissions tampering/defeat devices/odometer manipulation can terminate authorisation.
  • Security standards: maintain the standards outlined in the SERMI Scheme document and be prepared for audits.

Contact & support

RMISC (SERMI Scheme Administrator)

Core Diagnostics support

For guidance, questions, and best-practice setup, our team can help you navigate SERMI requirements and preparation.

Copyright © Core Diagnostics. All rights reserved. Powered by Core