Help with Thinkpad Maintenace Utility on T590

[x16]

Hi,

i unlocked my T590 with SVOD4 and wrote new ec from lenovo site. Now password is gone but dmi is missing now. So i have to write it back with Thinkpad Maintenace Utility.

I now have newest version of lenovo U1 golden key software (3.5.52) for USB boot stick. This tool starts the Thinkpad Maintenace Utility V1.20.
But i can't initialize eeprom. It says: "ERROR: Written data is unmatch."

So i can't write sn number without initializing it first.

Any ideas?

[Maxpower3]

can you post your EC dumps?
have you tried planar services?
with dump eeprom (5), are there serials and information marked in it ?

you can try with SERUPDT (exemple 7 and 8 in my pics)

with lenovo diskette
create eeprom.dat with serial info
place in root of usbkey
IN EFI SHELL
cd A:\MTMSN\ThinkPad\

for write
SERUPDT L eeprom.dat

for save in eeprom.dat
SERUPDT S eeprom.dat

[x16]

Here the 2 files of EC dump.

I tried planer service. It is empty. If i want to add, i write this:
1S20N5S56P00PF272VRD

It says the SN is ok but one line under it says: "Invalid configuration information area"

Even dump eeprom dump(5) is empty, all with 00 filled

[Maxpower3]

have you tried cleaning the setup?
In security and tpm chip everything cleaned and then 2 empty password and then a load and save by default
retest after

[Maxpower3]

Even dump eeprom dump(5) is empty, all with 00 filled

Do you have the page titles block 0/1 SER# Block 2/3 USR# Block 4/5 CON# displayed with dump eeprom?

in A:\MTMSN\ThinkPad\bootx64
with HxD
find two times 43 00 45 00 45 00 50 00 5F 00 49 00 4E 00 49 00 54 00 20 00 2D replace Y by C
and go init eeprom

-S (Initialize serialize information)
-U (Initialize user information)
-C (Initialize configuration information)
-Y Full init

[x16]

With dump eeprom i can see Block 0,1 / Block 2,3 / Block 4,5 / Block 6,7

And yes i load standard options with F9 then cleaned all security options.
What I have noticed is that I cannot set a password. When I set a password in the bios and restart, no password is set.

[Maxpower3]

even initialize it must not be EMPTY
you can even see the magic number AA55 at the end of the 5 pages

[Maxpower3]

even initialize it must not be EMPTY

we find the different pages in bootx64 written on EC

[Maxpower3]

What I have noticed is that I cannot set a password. When I set a password in the bios and restart, no password is set.

you can see status of password under windows with script. put both files on the desktop

[x16]

Thank you very much for your help.
Here the results:

with lenovo diskette
create eeprom.dat with serial info
place in root of usbkey
IN EFI SHELL
cd A:\MTMSN\ThinkPad\

This dont work because i have no diskette. If i try this with boot stick, then shell doesn't know the command serupdt

have you tried cleaning the setup?
In security and tpm chip everything cleaned and then 2 empty password and then a load and save by default
retest after

Yes i do but no luck after trying to initialize eeprom

Do you have the page titles block 0/1 SER# Block 2/3 USR# Block 4/5 CON# displayed with dump eeprom?

Yes but there are no words like SER# USR# or CON#

in A:\MTMSN\ThinkPad\bootx64
with HxD
find two times 43 00 45 00 45 00 50 00 5F 00 49 00 4E 00 49 00 54 00 20 00 2D replace Y by C
and go init eeprom

I did it but no change. I even dit it in ThinkPadT directory to be sure. Filename in both directorys is BootX64t.efi

even initialize it must not be EMPTY
you can even see the magic number AA55 at the end of the 5 pages

yes i can see this number, but initialize is not successfull, so nothing is written in eeprom: "ERROR: Written data is unmatch."

we find the different pages in bootx64 written on EC

I don't understand what you mean

you can see status of password under windows with script. put both files on the desktop

Statuscode is 0

---------------------------

I don't know if it is important, but i have no harddrive, Display, Keyboard connected to the T590. I'm working with usb Keyboard, HDMI Display.

[Maxpower3]

Yes but there are no words like SER# USR# or CON#

This is not normal, someone with a T590 or equivalent on hand to display the pages.
Can you post pics of yours?
For me it must have the titles at the beginning of each block

look my video here
https://www.badcaps.net/forum/troubl...63#post1831963
you can see the beginnings of the block. I'm not sure about myself for T590 or after but it must be the same.
can someone confirm please

[x16]

Yes on your Video i can see SER#........ but not in mine.
Here is my Video:
(First i press 1 for initialize, then 2 for dump)

[Maxpower3]

you have done the maintenance key with usbfmtpw.exe to have access rights.
Otherwise it could also pose a problem.

[Maxpower3]

Yes on your Video i can see SER#........ but not in mine.
Here is my Video:
(First i press 1 for initialize, then 2 for dump)

the dump is completely blank, that's not okay!!
you see that it wants to write SER# in block 0/1 but it doesn't happen because the information doesn't match.
Why doesn't he try the other blocks too, he stops.
did you put EEPINIT -Y back correctly?

post your golden key, I don't have this version please

[x16]

Yes, i installed Windows 7 on an old Laptop to get usbfmtpw.exe to work. There i formated it with usbfmtpw.exe and then did the rest with U1. I even tryed with second USB Stick with 4GB. But same result.

Maybe i damaged de mec chip? It was the first time i unlock with svod4. First i tried read and write back but passoword not gone, then i do this:

What i did with svod4 tool:
- read mec main with 192kb
- read mec main with 256kb
- read mec main with 288kb
- read mec eeprom with 2kb

- erased mec main with 192kb
- erased mec main with 256kb
- erased mec main with 288kb
- erased mec eeprom with 2kb

- write mec with new main ec from lenovo homepage 256kb

I know it was to much. Maybee i should only delete eeprom with 2kb next time?

[x16]

the dump is completely blank, that's not okay!!
you see that it wants to write SER# in block 0/1 but it doesn't happen because the information doesn't match.
Why doesn't he try the other blocks too, he stops.

Can't i write it manualy with the dump of EC? Or other way?

did you put EEPINIT -Y back correctly?

What do you mean? You mean that with BootX64t.efi? Then yes i deleted the stick and completey made new one with U1.

ost your golden key, I don't have this version please

Of course:

[Maxpower3]

have you tried with a clean bios like here?

https://www.badcaps.net/forum/troubl...64#post1864864

[x16]

Yes i tried this but no luck. I think mec ist locked or something like this. Maybee i do something wrong.

For nextime: just read eeprom with svod4 and write it back? Is this right? Then dmi data isn't get lost?

[Maxpower3]

here the 4 blocks, read on a T590

[Maxpower3]

The password is once again hidden at 0x300 in EC eeprom
I get the impression by comparing.
just clean from 300 to 35F maybe necessary?
(after analyse 300 to 34F should be sufficient, see photos above of the T590 without password)



here's how it is for me!
Maybe I'm all wrong, I don't know,)



the number of header characters is identical and a lot of similarity compared to the photos of the eeprom dump above
I'm pretty sure that's it

[x16]

OK i try it...

[Maxpower3]

https://www.badcaps.net/forum/troubl...74#post3162074

[keczuk]

can you post your EC dumps?
have you tried planar services?
with dump eeprom (5), are there serials and information marked in it ?

you can try with SERUPDT (exemple 7 and 8 in my pics)

with lenovo diskette
create eeprom.dat with serial info
place in root of usbkey
IN EFI SHELL
cd A:\MTMSN\ThinkPad\

for write
SERUPDT L eeprom.dat

for save in eeprom.dat
SERUPDT S eeprom.dat

Can u share your disk ?? i want try read and save EC info but i don't have option in my Lenovo disk and i use command but not working, show me is not recognise command.

IN EFI SHELL
cd A:\MTMSN\ThinkPad\

for write
SERUPDT L eeprom.dat

for save in eeprom.dat
SERUPDT S eeprom.dat zz0.tv1brsjeiazz