Lenovo Thinkpad Ec Pwd Bypass

[Sr_Osorio]

post ec bios and snid

I would like to thank you for your support. But I tried the short circuit process described in the first post and after several trials it worked. There seems to be an exact moment to perform the short circuit. I was afraid of shorting in the wrong place, but everything worked fine.. thank you very much everyone here.. I saved a lot of money.. my laptop became a brick after the ssd burned out.

[szepesif]

Hey guys!

Can you help me identify where to attempt the bios password removal for the Lenovo Thinkpad E15 Gen2?

It has the IT8227E EC chip. I'm attaching the board view and the schematics. Is the EC_ESPI_RST the correct point to short to ground?

[Andreasbest]

Hey guys!

Can you help me identify where to attempt the bios password removal for the Lenovo Thinkpad E15 Gen2?

It has the IT8227E EC chip. I'm attaching the board view and the schematics. Is the EC_ESPI_RST the correct point to short to ground?

If it's eSPI then it's not possible with short, you will damage the cpu.

[szepesif]

If it's eSPI then it's not possible with short, you will damage the cpu.

The first post mentions this model (E15 Gen2) and I also found successful posts with the IT8227E EC chip so I think it's possible, I just need confirmation and a little guidance to get started.

[Andreasbest]

The first post mentions this model (E15 Gen2) and I also found successful posts with the IT8227E EC chip so I think it's possible, I just need confirmation and a little guidance to get started.

If you are successful it will be the first time that this trick success on any gen 2 and on eSPI channel.

[szepesif]

If you are successful it will be the first time that this trick success on any gen 2 and on eSPI channel.

Check the first post please. There's an E15 Gen2 zip file there which means it's possible. Also, if you search on the "IT8227" here you will see other success stories. So that's why I think it's possible.

[Stefan Steff]

Check the first post please. There's an E15 Gen2 zip file there which means it's possible. Also, if you search on the "IT8227" here you will see other success stories. So that's why I think it's possible.

I think that board in the zip file is a E15 Gen 3 not Gen 2...and yes it has an IT8227 with LPC

[fernandoalonso]

Maxpower3
I confirm your genius method is working for T14 gen 1 AMD GT4A1 NM-C801 rev.1.0 Thank you very much!

Hello Volinakis,

How did you find the correct pins on the NM-C801 to short the EC? Any help is appreciated.

Best regards

[volinakis]

Hello Volinakis,

How did you find the correct pins on the NM-C801 to short the EC? Any help is appreciated.

Best regards

one of them to the ground

[szepesif]

I think that board in the zip file is a E15 Gen 3 not Gen 2...and yes it has an IT8227 with LPC

So I can try shorting any of the LAD(0-3) lines with ground without killing my CPU?

[anhbanxoi]

So I can try shorting any of the LAD(0-3) lines with ground without killing my CPU?

Short those signal cannot kill your CPU but these are too small so you may ended up shorting other signals that can kill your CPU. So be careful.

[Stefan Steff]

So I can try shorting any of the LAD(0-3) lines with ground without killing my CPU?

I have success more with LAD0 and yes I made more then 20 without damaging the CPU or SIO.
Good Luck!

[rediii]

whoever says that you can kill you pch/cpu with shorting the lpc OR espi bus is doing it wrong. end of story...

[fernandoalonso]

one of them to the ground

Hello!

I can confirm that the method works on T14 Gen 1 AMD, NM-C801 with ITE IT5261-VG EC chip. After consulting the boardview file, I found out that the LPC_AD0 to LPC_AD3 pins are accessible through some test points and I used them, so that I did not have to cut open the PCB paint layer. The timing is tedious, but it definitely works and it works really well - even my machine serials are preserved. Thank you for your help on this matter. Thanks to Maxpower3 for his genius method. Boardview is attached below if anyone needs it.

[ahmedmeer]

L13 2nd gen bypass solution have? plz help

[Andreasbest]

¯\_(ツ)_/¯

whoever says that you can kill you pch/cpu with shorting the lpc OR espi bus is doing it wrong. end of story...

[rediii]

¯\_(ツ)_/¯

yeah, but i never killed a cpu, lel

[Andreasbest]

yeah, but i never killed a cpu, lel

LOL!!!!

[Usering]

I am killed 3 cpu
2 t14 gen 2 mec1503
1 t14 gen 3 npcx997
shorting inside cpu

[LASTname]

Hello Master Chief.. I'm still trying with the thnkpad L14 GEN 1 (10 GEN) with BIOS PASSWORD. I invented a pencil similar to yours but it seems that it doesn't make contact (I did it with the red tip of a tester and I got the same grip on the USB but there I think it doesn't make contact because it appears the same to me) the truth is I don't know if it would be the model of the chip Where does one make the bypass or will it be the motherboard or will it be the SNID or will it be the generation of the processor... I don't know what it will be? I hope you help me.. good day..