A customer brings a 2019 Ram 2500 into the shop with an MM3 tuner in one hand and a look of frustration on his face. He plugged the tuner into the OBD-II port, followed the instructions, and the device never connected to the ECM. It sat there searching. The tuner is not defective. The truck is not broken. The problem is a module FCA installed between the OBD-II port and the ECM in 2018 — the Security Gateway — and it is doing exactly what it was designed to do: blocking unauthorized CAN-BUS traffic.
Every 2018 and newer Ram 2500 and 3500 with the 6.7L Cummins has an SGW module. Every aftermarket tuner that connects through the OBD-II port will hit this wall. The fix is not a software workaround. The fix is a physical bypass harness that routes around the SGW. The 2018-2023 Ram Cummins Security Gateway Pass-Thru Bypass Harness is a $35.69 plug-and-play cable that bridges the CAN-BUS around the gateway — and until it is installed, no tuning device on the market will write to the ECM through the OBD port.
What the Security Gateway Is and Why FCA Installed It
The Security Gateway Module is a CAN-BUS firewall. Physically, it is a small black module mounted to a bracket behind the OBD-II port under the dashboard. Electronically, it sits between the OBD-II diagnostic connector and the CAN-C bus — the high-speed CAN network that carries communication between the ECM, TCM, and other powertrain modules.
The SGW’s job is to inspect every message that enters through the OBD-II port and decide whether to pass it to the CAN-C bus or discard it. Diagnostic read requests — scan tools pulling codes, live data, freeze frame — pass through. Write requests — flashing calibration data, modifying parameters, changing the ECM tune — do not pass through unless the message carries a valid encrypted security token issued by FCA’s authentication server. Aftermarket tuning devices do not have this token. The tuner sends a flash command, the SGW drops the packet, and the ECM never sees it.
This architecture was introduced across the FCA lineup starting in 2018. The trigger was a widely publicized 2015 demonstration in which security researchers remotely accessed a 2014 Jeep Cherokee through its cellular telematics module, took control of the CAN bus, and disabled the transmission and brakes from a laptop miles away. FCA’s engineering response was to segment the CAN bus behind an authenticated gateway at the OBD-II port. The SGW is not a performance restriction — it is a cybersecurity measure. But the side effect for anyone who wants to tune a 2018 or newer Ram Cummins is that the OBD-II port is locked for calibration writes.
What to Look for in an SGW Bypass
Not every bypass is built to the same standard. Before buying, a technician or owner should evaluate three things.
Physical or logical bypass. A physical bypass harness routes the CAN-C bus lines around the SGW entirely. It creates an alternate diagnostic port that connects directly to the CAN-C bus. A logical bypass is a software tool that attempts to authenticate with the SGW using a stored token or brute-force negotiation. Physical bypasses cannot be disabled by an OTA update. Logical bypasses can be — and have been — patched with a dealer reflash. A physical bypass is the safer bet for a truck that will be tuned long-term.
Diagnostics pass-through. The bypass should allow a standard OBD-II scan tool to read codes, live data, and monitor readiness through the original OBD-II port without removing the bypass. If the harness kills the factory diagnostic port entirely, the truck cannot be scanned for a state inspection without pulling the bypass out first. A well-designed harness keeps the factory diagnostic lane open while opening a separate tuning lane.
Reversibility. The bypass should install and remove without cutting, splicing, or modifying the factory harness. The truck will need to go back to stock for dealer visits, warranty work, and emissions inspections. If the bypass leaves permanent evidence behind, it has turned a 10-minute reversible job into a liability.
The 2018-2023 Ram Cummins SGW Bypass Harness is a physical pass-thru design that meets all three criteria: direct CAN-C routing, factory diagnostic port retention, and plug-and-play reversibility.
How the Pass-Thru Harness Works
The SGW sits between two CAN bus segments. On one side is the diagnostic CAN bus that connects to the OBD-II port. On the other side is the CAN-C powertrain bus that connects to the ECM. The SGW is the gatekeeper in the middle.
The bypass harness works by tapping into the CAN-C bus at the SGW’s connector. It is a T-shaped cable assembly: one end plugs into the SGW module, one end plugs into the factory harness that was originally connected to the SGW, and the third leg terminates at a secondary OBD-II port on the harness. The secondary port is wired directly to the CAN-C bus lines, bypassing the SGW entirely.
The SGW remains powered and connected during bypass — this is important, because if the SGW goes offline, the instrument cluster will detect a missing node on the bus and illuminate a warning. The factory OBD-II port under the dash remains fully functional for scan tools and inspection equipment, because the bypass routes only the tuning port around the SGW, not the diagnostic port.
The harness is constructed with sealed, heat-resistant connectors and automotive-grade terminal pins rated for the pin-cycling frequency of repeated plug events. The secondary port can be routed to the glovebox, the driver-side kick panel, or any location within the cable’s reach. Unlike older dual-ended bypass cables that run a full-length harness from the SGW to a bulkhead-mounted second port, this design is compact — a short pigtail with the SGW plugs on one end and a standard OBD-II female receptacle on the other, with no excess cable to bundle or conceal. On a Ram where under-dash real estate is already tight, the shorter form factor means the harness stays put without fighting the knee bolster or the parking brake bracket.
What the Bypass Unlocks
Once the bypass is installed and the tuning device is connected to the secondary OBD-II port, the ECM is fully accessible for calibration writes. This opens the door to several categories of work that were previously impossible through the OBD-II port.
Emissions delete tuning. MM3 RaceME, EFILive CSP5, and EZ LYNK platforms require direct ECM write access to flash delete-capable calibrations that disable DPF regeneration, EGR operation, and DEF injection. Without the bypass, the ECM never receives the flash command.
Parameter adjustments. Tire size calibration, TPMS threshold changes, axle ratio corrections, and speed limiter adjustments all require writing to ECM parameter blocks. A scan tool can read these values without the bypass. It cannot change them.
Feature activations. Remote start activation, high-idle enable, and fog-light dropout disable are configuration changes stored in the body control module but initiated through a CAN-C gateway command that passes through the ECM. The bypass provides the CAN-C access needed to trigger these writes.
Failsafe tuning access. If the SGW module itself fails — which can happen from water intrusion at the A-pillar seal, a known issue on the 2018-2023 Ram cab — the ECM is unreachable through the OBD-II port even for diagnostic reads. The bypass harness provides an alternate communication path that does not depend on the SGW being functional, allowing a technician to pull codes and flash calibrations from a truck with a dead gateway module.
The Trade-Offs
The bypass harness solves a specific problem, but it is not without considerations.
The bypass must be removed for dealer service. If the truck goes in for warranty work or a manufacturer recall, the bypass should be disconnected and the factory harness reconnected before the truck enters the service bay. A tech plugging into the factory OBD-II port will still be able to scan the truck, but the presence of the bypass is visually obvious and will be noted on a warranty claim. Removal takes five minutes and requires no tools.
The secondary port adds a connection point. Every additional connector in a circuit adds a potential failure point — terminal fretting, pin oxidation, and vibration fatigue are real concerns over tens of thousands of miles. The secondary port should be secured in a location that does not see direct water exposure and does not experience repeated cable strain from knee contact or passenger footwell activity. A zip-tie to a fixed bracket is all that is required.
The bypass is not a license to tune. The harness enables communication between the tuning device and the ECM. What you do with that communication — and whether it is legal for your truck’s registration and intended use — is a separate question. The bypass is a tool. Its legality is determined by what it is used for and where the truck is operated.
Installation
The SGW module is located behind the OBD-II diagnostic port under the dashboard on the driver side. The OBD-II port is the black trapezoidal connector visible below the knee bolster. Follow it rearward, and the SGW module is clipped to a metal bracket approximately six inches behind the port.
Unplug the two factory connectors from the SGW module — one carries the diagnostic CAN lines, the other carries the CAN-C powertrain lines. Plug the corresponding connectors on the bypass harness into the SGW module. Plug the factory connectors into the matching receptacles on the bypass harness. Route the secondary OBD-II port to the preferred mounting location — the glovebox interior, the driver-side kick panel, or zip-tied to a bracket under the dash — and secure the cable away from the pedal assembly and steering column linkage.
The job takes 10 minutes with no tools. The hardest part is reaching the SGW module bracket, which on some trucks requires removing the knee bolster panel with a trim tool. The bypass is reversible by unplugging the harness and reconnecting the factory connectors directly to the SGW module.
Conclusion
The 2018 model year is a hard break in Ram Cummins tuning history. Before 2018, the OBD-II port was an open door to the ECM — plug in a tuner and flash. After 2018, the door is locked behind a Security Gateway that drops every calibration write command an aftermarket tuner sends.
The 2018-2023 Ram Cummins Security Gateway Bypass Harness is a $35.69 physical pass-thru that unlocks the door. It does not tune the truck. It enables the tuner to do its job. Until the bypass is installed, no MM3, no EZ LYNK, and no EFILive device will communicate with the ECM on a 2018 or newer Ram. It is available at www.dieseltok.com.
FAQ
Does the bypass work if the SGW module itself has failed?
Yes. The bypass taps the CAN-C bus at the SGW connector, not inside the SGW module. If the SGW is dead from water damage or a shorted circuit, the ECM is unreachable through the factory OBD-II port. The bypass harness provides a direct CAN-C path that does not depend on the SGW being operational, allowing a technician to flash a calibration or pull diagnostic data from a truck with a failed gateway.
Will the bypass trigger a check engine light?
No. The SGW remains connected and powered during bypass. The instrument cluster and ECM continue to see the SGW on the CAN bus. No modules detect a fault, and no diagnostic trouble codes are set.
Can I leave the bypass installed permanently?
Yes, but with one caveat. Removing it before dealer visits is recommended to avoid comments on a warranty claim. For daily use, the bypass can remain installed indefinitely — it has no moving parts, no power draw, and no software logic that could fail or conflict with an OTA update.
Does this bypass work with all tuner brands?
The bypass makes the CAN-C bus available at the secondary OBD-II port. Any tuner that communicates through a standard OBD-II pinout and CAN protocol can use it — MM3 RaceME, EZ LYNK, EFILive, HP Tuners, and standard J2534 pass-thru programming tools. The bypass does not care which device is plugged into it. If the tuner works on a pre-2018 Ram Cummins through the OBD-II port, it will work on a 2018 or newer truck through the bypass.
Is the installation tool-free or do I need to remove panels?
On most trucks, the SGW is accessible by reaching under the dashboard without removing panels. On some 2018-2019 Ram 2500 and 3500 trucks, the knee bolster directly below the steering column partially blocks access and needs to be removed — it is held in by two 8 mm bolts and a friction clip, and a trim tool or flat-blade screwdriver releases it in under a minute. The bypass itself installs without cutting or splicing.
