HP Elitebook 650 G10

[Dallen Bryce]

Hello, I'm trying to remove the password from an HP Elitebook 650 G10. It's motherboard has two chips, a 32mb spi (W25Q256JVEN) and 32mb ec (GD25B256EYIG). I have created a dump of each, but don't know which one(s) to patch. Could someone point me in the right direction or just patch it for me?

[rex98]

Hello, I'm trying to remove the password from an HP Elitebook 650 G10. It's motherboard has two chips, a 32mb spi (W25Q256JVEN) and 32mb ec (GD25B256EYIG). I have created a dump of each, but don't know which one(s) to patch. Could someone point me in the right direction or just patch it for me?

serial number?

[Dallen Bryce]

serial number?

SN: 5CD337MNLH
Let me know if there is any further required information.

[rex98]

SN: 5CD337MNLH
Let me know if there is any further required information.

Only flash this main do not touch the EC.

first boot press f10 apply factory defaults and restart, 2nd boot reset security settings to defaults and exit.
use BCU. you can permanently disable Absolute lock in BCU.
here's your DMI:

Serial Number: 5CD337MNLH
Product #/SKU: 7Z5F2UT#ABA
CT Number: PRVPA068JIK0H2
Description: HP EliteBook 650 15.6 inch G
BuildID: 23WWKRBZ602#SABA#DABA
Feature Byte: 476J6S6b7B7H7M7R7W7m7saBaEapaqauawbhcAfPgSguhKjhk8mEmGn7nVpDpTpnpppqprqMqz.R4
MAC Address : E4:0D:36:09:18:CA

[Dallen Bryce]

Only flash this main do not touch the EC.

first boot press f10 apply factory defaults and restart, 2nd boot reset security settings to defaults and exit.
use BCU. you can permanently disable Absolute lock in BCU.
here's your DMI:

Serial Number: 5CD337MNLH
Product #/SKU: 7Z5F2UT#ABA
CT Number: PRVPA068JIK0H2
Description: HP EliteBook 650 15.6 inch G
BuildID: 23WWKRBZ602#SABA#DABA
Feature Byte: 476J6S6b7B7H7M7R7W7m7saBaEapaqauawbhcAfPgSguhKjhk8mEmGn7nVpDpTpnpppqprqMqz.R4
MAC Address : E4:0D:36:09:18:CA

Flashed to main, now computer doesn't turn on. Just a flashing white/yellow power led and solid numlock led. How to progress?

[rex98]

Flashed to main, now computer doesn't turn on. Just a flashing white/yellow power led and solid numlock led. How to progress?

check solder. flash your original dump see if it boots.

[Dallen Bryce]

Only flash this main do not touch the EC.

first boot press f10 apply factory defaults and restart, 2nd boot reset security settings to defaults and exit.
use BCU. you can permanently disable Absolute lock in BCU.
here's your DMI:

Serial Number: 5CD337MNLH
Product #/SKU: 7Z5F2UT#ABA
CT Number: PRVPA068JIK0H2
Description: HP EliteBook 650 15.6 inch G
BuildID: 23WWKRBZ602#SABA#DABA
Feature Byte: 476J6S6b7B7H7M7R7W7m7saBaEapaqauawbhcAfPgSguhKjhk8mEmGn7nVpDpTpnpppqprqMqz.R4
MAC Address : E4:0D:36:09:18:CA

Excellent! Now I'm getting the MPM error on booting with a countdown, is the info you put supposed to help remove that? Please tell me how to apply it.

[rex98]

Excellent! Now I'm getting the MPM error on booting with a countdown, is the info you put supposed to help remove that? Please tell me how to apply it.

make sure you follow my instructions at first boot..

goto bios set machine unique data put that DMI i sent and restart a few times to get rid of the mpm mode. or goto youtube university search how to use BCU

[Dallen Bryce]

make sure you follow my instructions at first boot..

goto bios set machine unique data put that DMI i sent and restart a few times to get rid of the mpm mode. or goto youtube university search how to use BCU

I successfully filled out all the information except for the mac address. Now the internet doesn't work on windows. I'm getting 'Access Denied' when trying to unlock mpm through bcu. How can I set the mac address without reflashing?

[rex98]

I successfully filled out all the information except for the mac address. Now the internet doesn't work on windows. I'm getting 'Access Denied' when trying to unlock mpm through bcu. How can I set the mac address without reflashing?

its optional to fill the mac address. make sure you have drivers.

[Dallen Bryce]

its optional to fill the mac address. make sure you have drivers.

Yep, I have drivers, but the wifi device fails to start (code 10 in windows). Resetting the device shows error 43. Booting into a live linux distro shows a bunch of errors about the wifi card.

By the way, would it be safe to reflash the bios with the same patched bin you sent?

[Dallen Bryce]

its optional to fill the mac address. make sure you have drivers.

Here is a list of the network interfaces on the computer. Should there be a mismatch between them? I really want to get this fixed.

Name:    Ethernet
Description:    Intel(R) Ethernet Connection (16) I219-V
Physical address (MAC):    64:4e:d7:ac:91:5a
Status:    Not operational
Maximum transmission unit:    1500
Connectivity (IPv4/IPv6):    Disconnected

Name:    Wi-Fi
Description:    Intel(R) Wi-Fi 6E AX211 160MHz
Physical address (MAC):    e4:0d:36:09:18:ca
Status:    Not operational
Maximum transmission unit:    0
Connectivity (IPv4/IPv6):    Disconnected

Name:    Local Area Connection* 9
Description:    Microsoft Wi-Fi Direct Virtual Adapter
Physical address (MAC):    e4:0d:36:09:18:cb
Status:    Not Present
Maximum transmission unit:    0
Connectivity (IPv4/IPv6):    Disconnected
Proxy Auto Detect:    On

[rex98]

Yep, I have drivers, but the wifi device fails to start (code 10 in windows). Resetting the device shows error 43. Booting into a live linux distro shows a bunch of errors about the wifi card.

By the way, would it be safe to reflash the bios with the same patched bin you sent?

YES flash it again. after following my instructions about the reset settings. flash your original dump main and it will be okay. password will be gone

[Dallen Bryce]

YES flash it again. after following my instructions about the reset settings. flash your original dump main and it will be okay. password will be gone

Reflashed, same problem. Could this be an intel me problem? I'm out of options and don't know what to do.

[miansh621]

motherboard code

[Dallen Bryce]

motherboard code

Under the ram it shows
HSN-Q32C-4MB

MODEL:X8T
DAX8TMB8E1 like this

DAX8TMB8E1 like this

HSNQ32C4MB ?

[JanBono]

Hello, I've a similar problem with my HP Elitebook 650 G10 recently bought. W10 Pro64 is well installed, up to date, HP drivers updated through HP support site including BIOS update, and I could even make a W11 upgrade...but I cannot access the BIOS as I've not the BIOS password.
I see that rex98, a badcaps veteran 👍 , may be in position to give some recommendations on the way to reinitiate password in a software way.
If this is feasible, what have I to do for reflashing the BIOS?
Here are some info:

Product Numbers: 917G0EC#ABF

Serial Number: 5CD3439CB8

I see that some of you made "dumps" for getting more useful information? How did you proceed?
Thanks for any relevant advice 😊. Best

[hoaca388]

Hello, I've a similar problem with my HP Elitebook 650 G10 recently bought. W10 Pro64 is well installed, up to date, HP drivers updated through HP support site including BIOS update, and I could even make a W11 upgrade...but I cannot access the BIOS as I've not the BIOS password.
I see that rex98, a badcaps veteran 👍 , may be in position to give some recommendations on the way to reinitiate password in a software way.
If this is feasible, what have I to do for reflashing the BIOS?
Here are some info:

Product Numbers: 917G0EC#ABF

Serial Number: 5CD3439CB8

I see that some of you made "dumps" for getting more useful information? How did you proceed?
Thanks for any relevant advice 😊. Best

You have to learn how to use a programmer, the cheapest one is the CH341A.

https://www.youtube.com/watch?v=Ta_PPndnCTk&t=447s

[JanBono]

hoaca388, thank you for the tip!
Nevertheless, I'm a newbee on the domain. Is there a end-to-end process somewher on the forum to guide me on the steps?
I understand the steps:

Find a CH341A with motherboard connectot and the gets the associated soft (AsProgrammer?)
Identify which cheap to connect on the Motherboard
Make the extraction/dump
Then How do I program it in hexa for suppressing the password?
...

Anyway, thanks for your support.
No urgency as my PC is working well with W10 and even can be upgrade in W11. I just would be happy to control it if a BIOS change is needed.
Best

[hoaca388]

hoaca388, thank you for the tip!
Nevertheless, I'm a newbee on the domain. Is there a end-to-end process somewher on the forum to guide me on the steps?
I understand the steps:

Find a CH341A with motherboard connectot and the gets the associated soft (AsProgrammer?)
Identify which cheap to connect on the Motherboard
Make the extraction/dump
Then How do I program it in hexa for suppressing the password?
...

Anyway, thanks for your support.
No urgency as my PC is working well with W10 and even can be upgrade in W11. I just would be happy to control it if a BIOS change is needed.
Best

The fist read : https://www.badcaps.net/forum/troubl...rces-and-tools

The software (Asrogrammer,.....) is free.

Post your locked bios here, someone will unlock it for you.