Component Protection Removal for Used VAG Parts

If you fitted a used MMI unit, instrument cluster, airbag module or engine ECU to your Audi, Volkswagen, Porsche, Bentley or Lamborghini and it either does nothing or shows a component protection message, the part is almost certainly not faulty. It is locked. Component protection is the anti-theft system VAG uses to tie certain control modules to the VIN of the car they were first registered to. Move that module to another car and it drops into a restricted mode until the pairing is cleared on the manufacturer’s server. If you typed ‘component protection removal vag’ into a search engine, that server-side clearing is the job you are looking for, and it is routine work when it is done with the right access.

This guide covers what the system does, why it activated on your part, what the removal actually involves, and why a standard OBD tool cannot do it. The short version: it is solvable, usually within an hour per module, and in most cases it can be done remotely at your car.

What Component Protection Does on a VAG Vehicle

Audi introduced component protection, Komponentenschutz in the German service literature, on the A8 D3 around 2003 alongside the first MMI system. The idea was simple. Make stolen infotainment hardware worthless by locking it to one VIN. Over the following decade it spread across the whole group. On the MQB platform (Golf Mk7 onwards, Octavia, Leon, A3 8V) and MLB Evo (A4 B9, Q7 4M, Cayenne E3, Bentayga, Urus) most networked control units now carry it. Porsche applies the same concept through PIWIS, and Bentley and Lamborghini inherit it with the Audi and Porsche electronics their cars are built on.

Each protected module stores the VIN it was registered to. At every ignition cycle it checks that stored identity against what the gateway and instrument cluster report. If they do not match, the module logs a fault along the lines of ‘Component Protection: Active’ and drops into a restricted mode. What survives depends on the module:

• Infotainment (MMI, MIB1, MIB2, MIB3): the screen shows a component protection message, audio is muted, and navigation and phone functions are blocked.
• Instrument cluster: warning text in the display and blanked information fields. On many cars the immobiliser will not release either, because the cluster is part of that system too.
• Airbag control unit: the airbag warning lamp stays on and the module reports restricted function.
• Engine and transmission control units (MQB and newer): the engine will not run normally until protection is cleared, even after a correct immobiliser adaptation.
• Other modules: ABS and ESC units, LED headlight power modules, gateways, amplifiers, TV and DAB tuners, climate control heads on older Audi models, and driver assistance cameras on some platforms.

The practical effect is the same every time. A perfectly good used part behaves like a dead one, and the fault memory tells you exactly why. Understanding that the part is locked rather than broken is the first step in any component protection removal VAG work.

Why Component Protection Activates

Protection does not trigger at random. A flat battery or a bad coding session will not cause it. It activates when a module finds itself paired with a VIN it does not recognise. The common scenarios are:

• A used part from a dismantler or online marketplace. The module is still registered to the donor car. This accounts for most of the component protection removal VAG enquiries we receive.
• A brand new part that was never registered. New modules ship in an unregistered state and still need an online activation to your VIN. Fit one without that step and you get the same fault.
• A module that was cloned or flashed incorrectly. Copying data between units without handling the protection data leaves the target unit locked.
• A donor car the server rejects. If the module’s original VIN is flagged as stolen, the removal request can be refused. This is rare, but it is why buying from a reputable dismantler matters.

One distinction saves a lot of confusion. Component protection is not the immobiliser. The immobiliser stops the engine from starting and lives in the cluster, the engine ECU and the key transponders. Component protection restricts the function of an individual module. On a modern engine ECU swap you usually need both an immobiliser adaptation and a protection removal, and both need the same level of manufacturer access.

Why Component Protection Removal VAG Needs GEKO, Not a Scan Tool

This is the part that frustrates owners most. A tool like VCDS from Ross-Tech will read the ‘Component Protection: Active’ status and show you the fault, but it cannot clear it, and Ross-Tech says as much in its own documentation. OBDeleven, Carista and the various dealer-tool clones sit in the same position. The reason is architectural, not a feature you can pay to unlock. The release is not stored anywhere in the car. It is issued by the manufacturer’s backend server, and only an authorised online diagnostic session can request it.

That session runs through ODIS Service, or PIWIS for Porsche, using a GEKO login. GEKO is short for the German Geheimnis- und Komponentenschutz, which translates roughly as secrecy and component protection. It is a personal, vetted user role tied to a named technician, protected by a two-factor token, and it unlocks the security functions on the server: immobiliser adaptation, key learning and component protection removal. Independent workshops can apply for it through the manufacturer’s erWin repair information portal, but the vetting, the recurring costs and the diagnostic hardware put it out of reach for most general repairers. That is why we offer component protection removal as a standalone service, and why the component protection removal VAG specialists carry out cannot be folded into a regular diagnostic visit.

How the Component Protection Removal VAG Process Works

Here is what actually happens during a component protection removal VAG session, whether the car is in our workshop or on your driveway with a remote connection.

Step 1: Confirm the part is compatible

The server only registers a module that fits the car. Before anything is sent, the technician reads the identification of the used module: the full part number including the revision index (the last letter), the hardware and software versions, and the ASAM dataset. These are compared against the original module and the vehicle’s build data. A MIB2 unit with the wrong software index or the wrong market version fails this check, so this is where most avoidable delays are caught. If you have not bought the part yet, send us the numbers first.

Step 2: Online session with the manufacturer server

The car is connected through a supported interface, typically a VAS 6154 or a J2534 pass-through device, with the battery on a charger holding at least 12.5 V for the whole session. The technician logs into ODIS with GEKO credentials and runs the component protection function for the affected module. ODIS sends the module identification and the vehicle VIN to the server. The server validates the technician’s authorisation and the part’s history, then returns the release. The module is written with the new VIN pairing and its status changes to not active. A single module usually takes 15 to 45 minutes from connection to a cleared fault memory.

Step 3: Coding, parameters and activation codes

Clearing protection is not the end of the job. The used module still carries the donor car’s coding, adaptation values and, on infotainment units, its feature set. On MIB2 and MIB3 systems, options such as navigation, wireless CarPlay and online traffic are governed by activation codes, known as FeC, that are tied to the VIN. The codes matching your car’s original specification have to be reissued through the software version management (SVM) function. The module then needs coding to your car’s equipment, parameter data where the platform requires it, and a final scan to confirm every module on the bus is happy. This is the same skill set behind our ECU programming and coding services, and it is the difference between a unit that merely powers up and one that works exactly as the original did.

Used Parts That Trigger It Most Often

Certain swaps come up again and again in component protection removal VAG requests:

• MMI and MIB head units. The most common case by far, usually bought to replace a failed unit or to step up from a lower-spec system.
• Airbag control units after a collision. A used module saves hundreds compared with new, but every one arrives locked to the donor car and needs its crash data checked as well.
• Instrument clusters. Locked by protection and tied into the immobiliser, so both systems are handled in the same session.
• Engine ECUs on MQB cars. Immobiliser adaptation, protection removal and SVM coding. Each step needs GEKO.
• ABS and ESC modules. Often swapped after a hydraulic unit failure and often forgotten as a protected component.
• Bentley and Lamborghini infotainment. A Bentayga or Urus runs Audi-derived MIB hardware and a Continental GT runs Porsche-derived PCM hardware. The unlock path is the same, but very few independents worldwide can carry it out on these cars. We are one of them.

Remote or In-Person Component Protection Removal VAG

Because the release is issued by a server rather than by a tool plugged into the car, location matters far less than people expect. For a remote job you need a laptop at the vehicle with a stable internet connection, a compatible interface on the OBD port (the diagnostic CAN lives on pins 6 and 14, and any current VCI handles it), and a battery charger. We connect to that laptop, run the session and hand the car back with the fault memory cleared. Most infotainment, cluster, airbag and ABS cases are handled this way. It is how the majority of our remote component protection removal VAG jobs are completed for workshops that do not hold GEKO access of their own.

Some cases still call for the car or the module in front of us. A unit that has been damaged, flashed with the wrong software or tampered with at EEPROM level may need bench work before the server will accept it. A car with a gateway or cluster fault on top of the protection issue also benefits from hands-on diagnosis. There are bench-level workarounds for some older units, but on anything MQB, MLB Evo or MSB the online path is the only one that leaves the car in a clean, dealer-serviceable state. We will tell you honestly which route your case needs before any work starts.

Before You Buy a Used VAG Module

A few minutes of checking before the money changes hands avoids most of the pain. Most delays in component protection removal VAG work come from mismatched part numbers, not from the unlock itself.

• Match the full part number, including the revision letter, and the software version to your original unit or to what the parts catalogue lists for your VIN.
• Stay within your market. A North American MIB unit in a European car, or the reverse, brings region and feature mismatches that coding cannot fully solve.
• Ask the seller for the donor VIN. A legitimate dismantler will provide it, and it lets the removal request go through without questions.
• Ignore claims that protection has been ‘already removed’. It is a pairing with a specific VIN, so a module stays locked to the last car it was registered to until it is registered to yours.
• Keep your original module until the used one is confirmed working, coded and fault-free.

Component Protection Is a Lock, Not a Dead End

A used part that shows a component protection fault is doing exactly what it was designed to do. Nothing is broken. Once the module is registered to your VIN through an authorised online session, then coded and activated to your car’s specification, it behaves like the original and the fault does not come back. That is all component protection removal VAG really is: a registration, not a repair. It needs GEKO access, the right interface and someone who has done it many times across MQB, MLB Evo and MSB platforms. It does not need a trip to the dealer or a new part at list price.

If you are an owner with a locked module, send us the part number and the fault text and we will tell you the same day whether it can be registered to your car. If you run a workshop and want a partner for the component protection removal VAG customers bring through your door, our remote VAG programming service connects to your bay from anywhere in the world, with no GEKO account or ODIS licence needed on your side.