M720Q Bios Password removal

[DARNO786]

Hi guys i have an m720q bios which has a password on it.

i tried Patching with the autopatcher but it gave an error

it has also shows up with the 0199 error on boot

Anybody know how i can patch this?


Thanks

[DARNO786]

M720Q MT-M 10T8-SH9WOU S/N S4QG6811

[hoaca388]

M720Q MT-M 10T8-SH9WOU S/N S4QG6811

Feedback, please !

[DARNO786]

will test and get back to you. thanks

[DARNO786]

WORKED perfectly thanks!!!!

[fcda]

I have the same problem with my M720q. I'm struggling to find detailed instructions.

Should this patched dump work with my machine or do I need to get a new dump?

If it should work, how do I flash it?

I downloaded the latest bios update from Lenovo and it contains a .ROM file, so not sure what to do with a .BIN file.

If I need a new dump, how do I do that?

Thanks

[fcda]

I tried dumping using AFUWINx64.EXE which is included with the latest bios update I downloaded from Lenovo. It produced a 12.5 MB file. DARNO786 's file was 16MB 🤷

Next I tried using my dump with autopatch and it says:

dump.bin is corrupted or does not contain a valid dump.
There was an error... Aborting.

[SMDFlea]

I have the same problem with my M720q. I'm struggling to find detailed instructions.
Should this patched dump work with my machine or do I need to get a new dump?
If it should work, how do I flash it?
I downloaded the latest bios update from Lenovo and it contains a .ROM file, so not sure what to do with a .BIN file.
If I need a new dump, how do I do that?
Thanks

Find the bios chip on the motherboard, buy an SPI programmer and adapter and/or clip depending on the chip type , make a backup of the bios chip that is on the motherboard, post that backup here. Someone will help

More info - https://www.badcaps.net/forum/troubl...28#post1622428

[fcda]

Thanks. Is that the only way?

I've been hammering google to try to work it out and came across FPTW64.exe, part of IntelCSTools - specifically CSME System Tools v12 r38 on github (Flash Programming Tool/WIN64/)

After some blue screens, I got this to dump the bios in safe mode. The bios image is 16MB and in UEFITOOL it appers as "Intel image" like DARNO786's.

But autopatch still rejects it.

dump.bin is corrupted or does not contain a valid dump.
There was an error... Aborting.

I had a look at autopatch's python code to get more info about what's failling. It's failling when trying to execute the following:

tools\UEFIReplace.exe dump_PATCHED.bin e0746c42-d3f9-4f8b-b211-1410957b9ff5 07 patch\DXE\BootOption.ffs -asis -all -o temp.bin

The output from UEFIReplace is as follows:

parseBios: unaligned revision 2 volume
parseFile: non-empty pad-file contents will be destroyed after volume modifications
No replacements can be applied to input file​

Is it just that autopatch doesn't support this bios? Are there manual instructions for editing the bios that I could follow?

Thanks

[SMDFlea]

Thanks. Is that the only way?
After some blue screens, I got this to dump the bios in safe mode. The bios image is 16MB and in UEFITOOL it appers as "Intel image" like DARNO786's.

But autopatch still rejects it.
Thanks

The Autopatcher does not work with this bios , it`s an AMI bios. Make another backup using this command and post the backup here

FPTw64.exe -bios -d biosreg.bin

[fcda]

Thanks SMDFlea

File size is similar to what AFUWINx64.EXE gives at around 12MB.

I've attached both dumps from FPTW64.



Machine info: ThinkCentre M720q, 10T8S00S00, PC0ZNX6M, bios revision: M1UKT21A

[hoaca388]

Thanks SMDFlea

File size is similar to what AFUWINx64.EXE gives at around 12MB.

I've attached both dumps from FPTW64.



Machine info: ThinkCentre M720q, 10T8S00S00, PC0ZNX6M, bios revision: M1UKT21A

M720q Desktop (ThinkCentre) - Type 10T8

[SMDFlea]

Thanks SMDFlea

File size is similar to what AFUWINx64.EXE gives at around 12MB.

I've attached both dumps from FPTW64.



Machine info: ThinkCentre M720q, 10T8S00S00, PC0ZNX6M, bios revision: M1UKT21A

Flash this bios region using the command: FPTw64.exe -bios -f biosreg.bin

If it doesn`t work then your only option is to use an SPI programmer to flash the full bios posted by hoaca388

[fcda]

No luck flashing with that bin (or my unmodified one):

Error 167: Protected Range Registers are currently set by BIOS, preventing flash access.
Please contact the target system BIOS vendor for an option to disable
Protected Range Registers.

FPT Operation Failed.

But, I have managed to reset the password!

I reached out to Lenovo support and they gave instructions. They weren't sure if they would work but they did.

Other instructions I found said that moving JP35 to 2&4 and powering up was enough, but this had never worked for me. The difference in the Lenovo instructions was to do this with a bootable usb stick with a flash update on it. When I did this, it booted into bios, installed the update and powered off. When I removed the jumper and restarted, the password was gone.

Create USB BIOS update flash drive

• Download BIOS files: https://download.lenovo.com/pccbbs/t...m1ujt77usa.zip
• Copy these to a USB disk (mine was FAT32 formatted)

Recovery instructions from Lenovo (fixed the up where necessary)

1. Remove all media from the drives and turn off all connected devices.
2. Plug in BIOS usb disk, and then turn off the computer.
3. Disconnect all power cords from electrical outlets. Then, remove any parts that impede access to the Clear CMOS jumper.
4. Move the jumper (JP35, back left near wifi antenna) from the standard position (5&6) to the maintenance position (2&4)
5. Reconnect the power cords for the computer and the monitor to electrical outlets.
6. Turn on the computer and the monitor. With the USB disk connected the computer will not beep. The BIOS screen should appear with a progress indicator as the bios is updated.
7. After the recovery process is completed, the computer will be turned off automatically. Note: Depending on the computer model, the recovery process will take two to three minutes.
8. Disconnect all power cords from electrical outlets.
9. Move the jumper back to the standard position (5&6).
10. Reinstall all the parts that have been removed. Then, reconnect the power cords for the computer and the monitor to electrical outlets.
11. Turn on the computer and the monitor. When the logo screen is displayed, press F1 or Fn+F1.
12. You should now have full access to the bios. Save and Exit.

[mu3g]

No luck flashing with that bin (or my unmodified one):

Error 167: Protected Range Registers are currently set by BIOS, preventing flash access.
Please contact the target system BIOS vendor for an option to disable
Protected Range Registers.

FPT Operation Failed.

But, I have managed to reset the password!

I reached out to Lenovo support and they gave instructions. They weren't sure if they would work but they did.

Other instructions I found said that moving JP35 to 2&4 and powering up was enough, but this had never worked for me. The difference in the Lenovo instructions was to do this with a bootable usb stick with a flash update on it. When I did this, it booted into bios, installed the update and powered off. When I removed the jumper and restarted, the password was gone.

Create USB BIOS update flash drive

• Download BIOS files: https://download.lenovo.com/pccbbs/t...m1ujt77usa.zip
• Copy these to a USB disk (mine was FAT32 formatted)

Recovery instructions from Lenovo (fixed the up where necessary)

1. Remove all media from the drives and turn off all connected devices.
2. Plug in BIOS usb disk, and then turn off the computer.
3. Disconnect all power cords from electrical outlets. Then, remove any parts that impede access to the Clear CMOS jumper.
4. Move the jumper (JP35, back left near wifi antenna) from the standard position (5&6) to the maintenance position (2&4)
5. Reconnect the power cords for the computer and the monitor to electrical outlets.
6. Turn on the computer and the monitor. With the USB disk connected the computer will not beep. The BIOS screen should appear with a progress indicator as the bios is updated.
7. After the recovery process is completed, the computer will be turned off automatically. Note: Depending on the computer model, the recovery process will take two to three minutes.
8. Disconnect all power cords from electrical outlets.
9. Move the jumper back to the standard position (5&6).
10. Reinstall all the parts that have been removed. Then, reconnect the power cords for the computer and the monitor to electrical outlets.
11. Turn on the computer and the monitor. When the logo screen is displayed, press F1 or Fn+F1.
12. You should now have full access to the bios. Save and Exit.

fcda - I want to thank you very much for providing this. I can confirm this worked for me for my Giga Devices 25B127DSIG BIOS Chip. Followed your instructions exactly and it worked flawlessly! Thank you so much!