HP factory bios patcher

[SMDFlea]

***************************************************************************************************************************
* DISCLAIMER: badcaps.net and its members do no support unlocking stolen or company-owned devices.
* The unlock scripts given here are for personal use only, ie. you accidentally set a password on your own
* machine,you forgot the password you set a long time ago or you mistyped the password when setting it
* and cannot get in again.
***************************************************************************************************************************
* DISCLAIMER: THIS SCRIPT IS FREE AND IS INTENDED FOR EDUCATIONAL PURPOSES ONLY.
* You CAN download it, use it.I only ask that you DON'T modify it ,sell it or try to make a profit from it,
* and that you please credit the authors for the time and work they put into it.
* I TAKE NO RESPONSIBILITY FOR ANY DAMAGE YOU DO TO YOUR MACHINE.Making these kinds
* of modifications is risky and might leave you with an unusable/broken machine. The script is not perfect
* by any means, and while I haven't bricked any hardware (yet) I can't promise that won't happen to you.
* USE IT AT YOUR OWN RISK.
***************************************************************************************************************************

A macro script to patch a HP bios to factory settings. It just invalidates the serial number,featurebyte etc allowing new DMI to be added.
This will only work with some HP business machines (AMI bios), not cheaper models (Insyde bios).
Thanks to volinakis for testing, and other members who posted and shared which hex to patch.

Make sure you have all the DMI info before flashing the bios back !


This will only work if you have made a good bios backup !!!!!!

1. Install Tiny Hexer -> link in thread at post #1 https://www.badcaps.net/forum/showthread.php?p=1214739

2. Make a new folder on your C: drive called DMICOPY .

3. Move or copy the contents of the extracted zip folder to the DMICOPY folder.

4. Move or copy your bios backup to the DMICOPY folder.

5. Rename your backup bios to "locked.bin" (without the quotes "") .

6. Run the full script, if it doesn`t work try the others one by one. After each script has run close Tiny Hexer and when prompted to save, Save ,then go onto the next script.
If there is an error go onto the next script.
If it work, great, if it doesn`t, well you`re out of luck, try another way.

7. Click on the save button or close Tiny Hexer,and when promted to save... save :-)

EDIT: Added script to disable Absolute. It is not in the full script but only as a standalone script . File name HP_Factory_Mode_6.mps

EDIT: If you are using the patcher for G10`s that have a password the patcher will not work if your bios version is newer than February 2024. For G11`s is no solution yet

Tested working

450 G9
640 G9
845 G9
Elite Mini 600 G9
Pro One 440 G9
x360 Fortis 11 G9
Zbook Firefly 14 G7
Zbook Firefly 14 G8
HP ZBook Fury 15 G7

[gabrielguadag]

Hello! After use the patcher, I need to do like had been told in other hp bios unlock posts: "At 1st boot press F10 and RESET BIOS to factory defaults, save, restart and password will go on. After that enter in to bios setup and in Main tab you have "set machine unique data" and write there what it's written on the label inside the cover, or use hp bcu tool"? I didn't tried it yet, but i'm planing to do.

[SMDFlea]

Yes, i neglected to mention that.

[Bonzas]

this patcher will work on corrupted bios or not sir ?

[SMDFlea]

this patcher will work on corrupted bios or not sir ?

It depends what you mean by corrupted bios. Will it help to clean corrupted ME firmware,bios region no. It just invalidates the serial number,featurebyte etc allowing new DMI to be added.

[Bonzas]

It depends what you mean by corrupted bios. Will it help to clean corrupted ME firmware,bios region no. It just invalidates the serial number,featurebyte etc allowing new DMI to be added.

i mean if the prevoius bios have no display sir, try with virgin bios without any editing work. But when i copy serial number block even with hex editor no display again, i end up using hpdmi to fill dmi

[thampy]

Hey SMDFlea, I appreciate this post. You have helped me a lot in the past with your guides. I have a HP Pro x360 Fortis 11 inch G9, which I believe is the x360 Fortis 11 G9 model you tested in your post. I successfully ran the full script and reprogrammed my BIOS chip. Once I boot the device after reinstalling the BIOS chip, I am getting a popup and it is reverting my BIOS changes. The dialog says "The BIOS has recovered its identity data from the Embedded Controller due to data mismatch."

Do you have any advice here?

[SMDFlea]

Hey SMDFlea, I appreciate this post. You have helped me a lot in the past with your guides. I have a HP Pro x360 Fortis 11 inch G9, which I believe is the x360 Fortis 11 G9 model you tested in your post. I successfully ran the full script and reprogrammed my BIOS chip. Once I boot the device after reinstalling the BIOS chip, I am getting a popup and it is reverting my BIOS changes. The dialog says "The BIOS has recovered its identity data from the Embedded Controller due to data mismatch."
Do you have any advice here?

Did the bios have a password

[thampy]

Did the bios have a password

The BIOS did not have a password.

[jpwise]

Morning all - new member, and semi-new to bios programming (have done some stuff with ESP's, but that's about it).

Currently researching for exactly this process - reverting a previously used HP mainboard to a state suitable for putting into a spares pool and then re-dmi when installed into a machine.
Primarily EB840 G7+G8, some 850's of the same, and potentially moving into the G9+G10 models. Business, not consumer models.

This is probably the most relevant thread to ask the question in (and thanks to any that answer)
For the purposes of refurbishing boards for re-use - what are the options? Most of these boards do not have passwords, but do have committed DMI data.

Most of what I've read so far has been articles related to removing bios passwords, and board locks rather than re-instating MPM mode for wider re-use.
As a general rule of thumb - what should I be expecting to see?
The above macros (as stated) look to modify an existing bin image to invalidate the DMI permitting BCU to be re-run.
Question - can the resulting image be used as a generic image to re-write onto subsequent (same pn) mainboards?
Speculatively - I've seen mention of the EC also needing to be reflashed to match the main bios - so could these macros be applied to a clean Bios download from HP also, and then the main bios + ec both flashed with the resulting clean/mpm unlocked images?
- would there be any potential downsides of doing this? I'd need to double check if the BCU tool also generates a new UUID for the board on these or not.
- are there only the two modules - bios & ec - to consider, or are there other modules that may require reflash in this scenario?
- just considering the options/viability of a 'standard' bios+ec per board that could be loaded onto additional boards rather than wasting the time to read it back and modify each one individually only to reflash it back.

Thanks in advance.
Jp.

[Mahesa09]

This will only work if you have made a good bios backup !!!!!!

1. Install Tiny Hexer -> link in thread at post #1 https://www.badcaps.net/forum/showthread.php?p=1214739

2. Make a new folder on your C: drive called DMICOPY .

3. Move or copy the contents of the extracted zip folder to the DMICOPY folder.

4. Move or copy your bios backup to the DMICOPY folder.

5. Rename your backup bios to "locked.bin" (without the quotes "") .

6. Run the full script, if it doesn`t work try the others one by one. If it work, great, if it doesn`t, well you`re out of luck, try another way.

7. Click on the save button or close Tiny Hexer,and when promted to save... save :-)

I have tried and an error appears

[SMDFlea]

Read the instructions carefully and try again. I don`t know what you`ve done wrong

[testinglaptops]

I have tried and an error appears

I was also facing same error, but then i changed my already bin file name only to "locked" (without the quotes ""). because i already saved my bios file as bin file. then no need to rename as locked.bin. this worked for me and my BIOS is Patched.

Thank You SMDFlea and BadCaps all Senior Members.

[jim1296]

what file need to flash again the locked.bin.bak or just locked.bin?

[SMDFlea]

Use locked.bin .The file with .bak is a backup file

[Hm Yaseen]

SMDPlea plzz tell me how we know our locked.bin file is unlocked??

[SMDFlea]

If the script has patched the bios with no errors flash the bios back. Read post 2 for steps to take at boot. It will work or it won`t, no guarantees.

[sir_faitty]

Script didn't work on x360 g11. Keeps restoring data from ec and password still there

[SMDFlea]

The only way at the moment to unlock the G11 models is to flash the EC. Replacing the EC with one from a donor board might also work, not sure.

[jpwise]

Script didn't work on x360 g11. Keeps restoring data from ec and password still there
SMDFlea commented
Today, 08:57 AM
The only way at the moment to unlock the G11 models is to flash the EC. Replacing the EC with one from a donor board might also work, not sure.

Ran into the same issue on a couple of 840 G8's I was using for testing. "Bios Identity Data Recovered - The BIOS has recovered it's identity data from the Embedded Controller due to a data mismatch."
I figured it was similarly going to require the EC to be either patched or reflashed as well - there's another thread on the 830 G10 where someone else reported the same issue - https://www.badcaps.net/forum/troubl...ng#post3323028 and apparently located an older "EC ver. 51.2B.00 which allowed me to enter in MPM Mode"

Can anyone give any guidance on the interoperability of the older EC versions with current Bios? If an earlier EC without the recovery data can be located is it likely to cause any issues? After the MPM data is committed I would assume it should then be possible to do a normal Bios update to bring both versions up to date.

Thx

[ArtHunting]

The script works perfectly with the HP Elite X2 G4. Tested.

[santoslao]

I tested this on a 640 g9 bios version U75 and it didn't work. It makes the corrections and at the end in tiny hexer a last message appears as in the down image. I save the file and then flash it on the machine, but at startup it still asks for the password. I think you need to correct something else within the patch file and the program doesn't do it, according to another comparison of unlocked files that I see.

[SMDFlea]

It disables absolute , AA 55 3F to AA 55 3C

[clrscr]

can you unlock hp G11 ? thanks!

model: HP EliteBook 830 13 inch G11 Notebook PC
SN: 5CG411421H

[SMDFlea]

can you unlock hp G11 ? thanks!

model: HP EliteBook 830 13 inch G11 Notebook PC
SN: 5CG411421H

No .

[clrscr]

No .

oh!

Any solution? now can't unlock?