Purpose

To ensure proper use and documentation of NASTF LSID’s.

Summary

This documentexplains what an LSID is, how it is used and how to keep proper documentation as per NASTF regulations

Definitions

●    NASTF - National Automotive ServiceTask Force

●    LSID - Locksmith Identification Number

●    VSP - Vehicle Service Provider

●    SDRM - Secure Data ReleaseModel

Personnel Qualifications

●    Approved NASTF Application

●    Access to Internal

●    Must be computer/smartphone literate

Equipment and Supplies

●    NASTF provided LSID

●    Computer or smartphone

●    Access to OEM websites and accounts

Proper Use

Your NASTF LSIDis used to access various types of security-related service information, suchas key codes and security PIN codes. Asa Registered VSP, you must not shareyour LSID or password with anyone. You are entitled to acquire security-relatedinformation with your LSID on behalf of a customer with verified authority ONLY.Likewise, you must not acquireinformation with your LSID and share it with others,except as specified in the Terms& Conditions of Use.

Failure to follow the Terms &Conditions will put your own access to automaker security-related service information at stake, and if a crime occurs, perhapseven criminal prosecution.

IMPORTANT:Your lsid is associated with your name, your social security number and yourbusiness identification. Transactions for security-related information are logged by the nationalinsurance crime bureau and monitored by the national crime information center.Misuse of your LSID is directly traceable back to you.

INAPPROPRIATE USE OF LSID:It is a violation of the registryterms & conditions of use to share your LSIDcredential with anyone outside the company. It is also a violation to shareinformation acquired with your lsid with others. Obtaining a Cut Code, PINcode, or any other information with your LSID/VSC for another employee isstrictly prohibited. Violation of the registry Terms & Conditions of usewill result in suspension or revocation of your LSID.

Positive ID

Vehiclesecurity-related information may only be acquired by a Registered VSP on behalfof the registered owner of a motor vehicle.The Positive ID Policy isa written statement of procedural requirements that defines how todetermine if an information "requestor" has the authority to make therequest. A Registered VSP is required by the Terms & Conditions of Use tofollow the Positive ID Policy to establish proof positive that theperson making the request is the registered owner of the vehicle.

NASTF requiresCar Keys Expressto keep detailedrecords of each transaction in which you used your LSID.The Form D1 is used to collectthis information and must be kept on file for 2 years.NASTF performs random audits to ensure these records arebeing kept properly. Failure toprovide this information, as outlined below, could result in suspension orrevocation of your LSID.

Dealership Customers

Inthe case that the vehicleyou are servicing is dealer owned, as will be most vehicles you service, youare required to record the following information on the invoice:

●      Dealership Name

●      Full name of person who authorized the service

●      Full VIN

●      Vehicle Color

●      Vehicle Make/Model/Year

●      PO/Stock Number

●      Odometer reading

Thisinformation only needs to be collected when you had to use your LSID to service the vehicle.

Whencreating an invoiceyou will be asked “Did you use your LSID to service this vehicle?” If you did,you must select “Yes”.

Selecting “Yes” will allow you to enter the vehicle color, odometerreading, and the FULL name of the person who authorized the work.

Walk UpCustomers

In the case of a non-dealer customeryou are required to verify the person requesting serviceowns the vehicle.The information on theirvehicle’s registration must match their drivers license exactly. You must alsorecord the following information on the invoice:

●      Vehicle Owners FULLName

●      License Plate Number

●      Registration State

●      Drivers License Number

●      Drivers License State

●      Drivers License Expiration Date

●      Full VIN

●      Vehicle Color

●      Vehicle Make/Model/Year

●      PO/Stock Number

●      Odometer reading

Thisinformation only needs to be collected when you had to use your LSID to service the vehicle.

Whencreating an invoiceyou will be asked “Did you use your LSID to service this vehicle?” If you did,you must select “Yes”.

Selecting “Yes” will allow you toenter the vehicle color, odometer reading, and the FULL name of the person who authorized the work.

Digital Signatures

If you used your LSID to complete serviceyou MUST collecta digital signature. We need the electronicsignature to use as a work authorization.

SDRM / D1 Authorization Automation

If the information above has been correctly entered,Internal will automatically sync with SDRM to create therequired D1 Authorization form. You will receivean email showingthe results of the sync.If any transactions are not successful you must log into SDRM andmanually complete the D1. Walk-up customers require an additional step ofuploading a completed and signed Owner Authorization Form.

PIN Code Clients

Your LSID may only be used to obtainPIN codes throughthe OEM websites.

ACURA / HONDA AUDI CHRYSLER

GENERAL MOTORS FORD

HYUNDAI INFINITIKIALEXUSMAZDA

MITSUBISHINISSAN SAAB SUBARU

TOYOTA / SCION VOLKSWAGEN

http://www.ServiceExpress.Honda.com https://erwin.audiusa.com http://www.techauthority.com https://www.acdelcotds.com/acdelco/action/home http://www.motorcraftservice.com

http://www.hmaservice.com orhttp://www.hyundaitechinfo.com http://www.infiniti-techinfo.com/home.aspx http://www.kiatechinfo.com

http://techinfo.lexus.com http://www.mazdaserviceinfo.com http://www.mitsubishitechinfo.com http://www.nissan-techinfo.com/home.aspx http://www.epsiportal.com https://subaru.locksmithsdrm.com/sr-sdrm/ http://techinfo.toyota.com https://erwin.vw.com

3rd Party PIN code clients

You may not use your LSID with 3rd party PIN code clientssuch as Autocode. Using anything otherthan an OEM website couldcause NASTF to terminate your LSID.

AD QR Scanner

The AdvancedDiagnostics QR Scanneris the client used to retrieve 2013+Ford codes. You will enteryour LSID for every transaction, for each of those transactions you mustenter the required information into the NASTF Authorization form in internal.

If you need detailedinstructions for usingthe AD QR Scanner pleaseemail operations@carkeysexpress.com.

NASTF Do’s and Don’ts

Do:

Start the process when a customercalls by collecting their information and making sure that you are talkingto the owner or someone authorized by the owner to act on their behalf.

Fill in all information on the D1. Even the mileage and color are very important should a vehiclebe stolen. They assist NICB and law enforcement toidentify vehicles faster

If you are doinga job for a repair shop it is your responsibility to verify that the shop hascollected positive ID and owner authorization before you performthe job. This protects you and the shop who does not always have your knowledge or experience insecurity protocols. We have had customers call stating that a VSP made anunauthorized key for a shop without confirming authorization and it created aproblem for the shop and the VSP with law enforcement even though the car wasnot technically stolen.

Don’t

Share your LSIDor password with anyone; even other employees in your business. You must accessthe automaker portal and perform the positive ID and authorization yourself because you are legallyresponsible and accountable for that transaction.

Use of codebroker websites like Autocode violate our terms and conditions. These companiesare not endorsed by NASTFor the automakers. It has been foundthat many of these companies use VSP credentials that were shared with them tosetup an account and acquire key and immobilizer codes for other individuals.We found one VSP who had over 500 different people using his account. Use of asource other than the automaker websites is grounds for permanent terminationof your Vehicle Security Credential.

Writing your key codes on the D1 form or your invoiceis not allowed. By havingthem together you have given someone who might get that information all the information they need to steal a car. They are intendedto stay separate so please donot write down or database security information.

Do not producekeys and mail them. Even if it is a transponder key that has to be programmedto the vehicle it is a violation of our terms and conditions if you do notpersonally verify the vehicle owner and acquire authorization through the D1form. This includes auctions and recovery companies and dealers. The measure issimple. If the key will be put in the vehicle by you with an authorization orPO you received, it is a good transaction. If the key has to be mailed or shipped it is not and will result in permanent termination of your VSC credential.

By acknowledging thisbulletin you agree that you have read and understand the NASTF LSID StandardOperating Procedures and Policy described above and accept this policy as acondition of your employment. Iadditionally understand that failure to follow this SOP/policy could result indisciplinary action, up to and including termination of employment.