HP mt46 Mobile Thin Client

[zak009]

HP mt46 Mobile Thin Client
SN:5CG1173D4N
PLEAS HELP FOR UNLOCK THIS BIOS

[hoaca388]

HP mt46 Mobile Thin Client
SN:5CG1173D4N
PLEAS HELP FOR UNLOCK THIS BIOS

Unlocked

[hpboy]

Hi hoaca388 - please could you let me know how you unlock the BIOS? I have a similar issue (posted here - https://www.badcaps.net/forum/troubl...cu-help-please ) and I would like to understand how to do this. Thank you

[SMDFlea]

https://www.badcaps.net/forum/troubl...23#post1622423

Or,you can compare a locked and unlocked bios with a hex editor if you really want to learn.

[hpboy]

Hi hoaca388 - please could you let me know how you unlock the BIOS? I have a similar issue (posted here - https://www.badcaps.net/forum/troubl...cu-help-please ) and I would like to understand how to do this. Thank you

SMDFlea Would love to but my BIOS is from a different model than the OP, so not sure what I am comparing/what to look for?

[SMDFlea]

The OP wants a bios password removing,not MPM unlocking

[Bharath Ram]

Need clarification of bios password storage location
May I know where the bios password is stored in HP mt46?
Is it stored in bios w25q256jv chip or does it have a separate EEPROM chip for password storage?

[bykanovm]

Hello. I have five HP mt46 R3-4450U laptops with motherboard ID 6050a3147201-mb-a01, and all of them have a BIOS password.
I read on the forum about how to remove it. I figured out that I need to replace the EC data area in the BIOS in lines 37000–37380 with FF.
Am I correct? I also noticed that many people are asking for DMI data after this. What's the correct way to do this?

[danito]

Здравствуйте. У меня пять ноутбуков HP mt46 R3-4450U с материнской платой 6050a3147201-mb-a01, и на всех них установлен пароль BIOS.
Я читал на форуме о том, как его снять. Я понял, что мне нужно заменить область данных EC в BIOS на строках 37000–37380 на FF.
Я прав? Я также заметил, что многие после этого теряют данные DMI. Как это правильно сделать?

english?

[bykanovm]

Corrected, sorry.

[bykanovm]

I'm currently running a test. I split the EC BIOS image into two 16MB parts, patched the first 16MB part using RCUnlocker, and RCUnlocker didn't patch the second part. I merged them into a 32MB file. I'm trying to flash it.
But after comparing, I noticed that RCUnlocker cleared the data from address 37000, but slightly further than address 37380. I'll solder the flash drive and check.

[bykanovm]

It worked. The password is removed and there are no errors.

[yooolaaa]

I'm currently running a test. I split the EC BIOS image into two 16MB parts, patched the first 16MB part using RCUnlocker, and RCUnlocker didn't patch the second part. I merged them into a 32MB file. I'm trying to flash it.
But after comparing, I noticed that RCUnlocker cleared the data from address 37000, but slightly further than address 37380. I'll solder the flash drive and check.

Thank you for your valuable experience. I will give it a try.