HP Envy x360 15-fh0097nr

[compcellinfo]

This laptop is an HP Envy x360 15-fh0097nr. The client's brother had set a BIOS password that they could not remember and we were unable to find a BIOS pw bypass. I attempted dumping the chip with a clamp programmer (see attached), and verified the image successfully. I then tried reimaging the chip with the BIOS found on HP's website (both with the clamp programmer and soldered directly onto a CH341A), but every time I attempt a verify it fails. The computer now does not POST.

The chip itself is a Winbond 25R128JWSQ, which does not appear to have a direct match in NeoProgrammer, but it does autoselect another Winbond chip and appears to execute most functions on it just fine. Any suggestions?

[m1ch43lzm]

Try, I don't know which BIOS version you downloaded from HP website, the version from your backup is F.06, also attached latest version F.13, as there's a note in HP website

- Provides enhanced security. NOTE: Due to the security updates installed by this BIOS update, previous BIOS versions cannot be reinstalled after this BIOS update is run.

Your backup looks correct by the way

BIOS extracted from HP website, serial/win key inserted
HP Envy x360 2-in-1 Laptop 15-fh0097nr (7N486UA)
BID 08BE9
S/N CND33409GS
DMI + Win key B1000-B203F

Hope you didn't damage the BIOS chip, or the CPU if you used a clip (on AMD the BIOS is connected straight to the CPU) by sending 3.3V to 1.8V power rail/CPU (SOC) data lines

[volinakis]

This laptop is an HP Envy x360 15-fh0097nr. The client's brother had set a BIOS password that they could not remember and we were unable to find a BIOS pw bypass. I attempted dumping the chip with a clamp programmer (see attached), and verified the image successfully. I then tried reimaging the chip with the BIOS found on HP's website (both with the clamp programmer and soldered directly onto a CH341A), but every time I attempt a verify it fails. The computer now does not POST.

The chip itself is a Winbond 25R128JWSQ, which does not appear to have a direct match in NeoProgrammer, but it does autoselect another Winbond chip and appears to execute most functions on it just fine. Any suggestions?

post serial no.
25R128JWSQ is 1.8v, use 1.8V adapter and chose 25Q128JW

[compcellinfo]

post serial no.
25R128JWSQ is 1.8v, use 1.8V adapter and chose 25Q128JW

Oops, forgot the S/N: PF3JRR1J
I didn't even know there was such a thing as a 1.8v adapter, I assumed the CH341A could handle multiple voltages :/
Ordered a kit, should get it tomorrow.
Should I also replace the chip? Is it possible I cooked it with the higher voltage?

[volinakis]

Oops, forgot the S/N: PF3JRR1J
I didn't even know there was such a thing as a 1.8v adapter, I assumed the CH341A could handle multiple voltages :/
Ordered a kit, should get it tomorrow.
Should I also replace the chip? Is it possible I cooked it with the higher voltage?

PF3JRR1J serial is for Ideapad 5

if chipset is detected by programmer (ID: xxxx) no need to replace it. Read 3-4 times and compare results, when you have 2 identical it means you have a good backup. CH341A doesn't verify the backup against the content of the chipset.

[compcellinfo]

PF3JRR1J serial is for Ideapad 5

if chipset is detected by programmer (ID: xxxx) no need to replace it. Read 3-4 times and compare results, when you have 2 identical it means you have a good backup. CH341A doesn't verify the backup against the content of the chipset.

Jesus, it's been hectic in here this morning, I gave the complete wrong SN. This one is CND33409GS.

Unfortunately I'd already tampered with the chip by trying to write to it so further backup attempts won't be very productive. Hopefully someone can cobble us together a functional binary I can flash onto the chip once I get the adapter in.

[volinakis]

Jesus, it's been hectic in here this morning, I gave the complete wrong SN. This one is CND33409GS.

Unfortunately I'd already tampered with the chip by trying to write to it so further backup attempts won't be very productive. Hopefully someone can cobble us together a functional binary I can flash onto the chip once I get the adapter in.

try this file when 1.8V adapter is coming.

[m1ch43lzm]

Try, I don't know which BIOS version you downloaded from HP website, the version from your backup is F.06, also attached latest version F.13, as there's a note in HP website

- Provides enhanced security. NOTE: Due to the security updates installed by this BIOS update, previous BIOS versions cannot be reinstalled after this BIOS update is run.

Your backup looks correct by the way

BIOS extracted from HP website, serial/win key inserted
HP Envy x360 2-in-1 Laptop 15-fh0097nr (7N486UA)
BID 08BE9
S/N CND33409GS
DMI + Win key B1000-B203F

Hope you didn't damage the BIOS chip, or the CPU if you used a clip (on AMD the BIOS is connected straight to the CPU) by sending 3.3V to 1.8V power rail/CPU (SOC) data lines

[compcellinfo]

Try, I don't know which BIOS version you downloaded from HP website, the version from your backup is F.06, also attached latest version F.13, as there's a note in HP website

Your backup looks correct by the way

BIOS extracted from HP website, serial/win key inserted
HP Envy x360 2-in-1 Laptop 15-fh0097nr (7N486UA)
BID 08BE9
S/N CND33409GS
DMI + Win key B1000-B203F

Hope you didn't damage the BIOS chip, or the CPU if you used a clip (on AMD the BIOS is connected straight to the CPU) by sending 3.3V to 1.8V power rail/CPU (SOC) data lines

Oh lord; I did indeed use a clip on the initial attempts. Is it likely I hosed the board?
This is a big facepalm moment for me, I didn't know the CH341A had voltage limitations

[m1ch43lzm]

It depends if the clip made good contact or not... Sometimes it takes several tries to align the clip properly, if by chance pin 8 (VCC) didn't make proper contact there may be hope, if possible desolder the BIOS chip from the board and try again with the 1.8v adapter
Depends on which version of the CH341A you have, there's one with black PCB with rounded end which is 3.3V, with those you have to use 1.8V adapter for 1.8V chips (all AMD Ryzen, some Intel platforms)

There's another CH341A version with a voltage selector switch

Best to get a better programmer that supports more chips, there's the T48, RT809H, T76, REVELPROG-IS, SVOD4 (this one also does EC programming)

[compcellinfo]

It depends if the clip made good contact or not... Sometimes it takes several tries to align the clip properly, if by chance pin 8 (VCC) didn't make proper contact there may be hope, if possible desolder the BIOS chip from the board and try again with the 1.8v adapter
Depends on which version of the CH341A you have, there's one with black PCB with rounded end which is 3.3V, with those you have to use 1.8V adapter for 1.8V chips (all AMD Ryzen, some Intel platforms)

There's another CH341A version with a voltage selector switch

Best to get a better programmer that supports more chips, there's the T48, RT809H, T76, REVELPROG-IS, SVOD4 (this one also does EC programming)

Thanks for the advice, I'll look into those options. We definitely have the 3.3v version with the rounded-off end. I'm pretty sure I had that sucker on there good since I was able to dump the chip and supposedly to write to it. Hopefully I didn't fry the client's board, that would be... unfortunate.

[compcellinfo]

m1ch43lzm tried flashing the F06 version; I get programming "success" but then it quickly fails a verify pass. Tried this both on and off the motherboard. Should I bother trying another chip?

*edit: Verification also fails on F13.
**edit edit: tried soldering the chip to the adapter thing, still get the same verification error. I'm gonna go ahead and order a couple of these chips.

[compcellinfo]

@m1ch43lzm update: new chip flashed fine and computer now powers on. I do get a message declaring "manufacture programming mode is in unlock mode", and I'm not sure how to make that go away, but it does POST and attempt to start Windows. Obviously we're hitting a BitLocker wall but this is much better than it was!

Edit: apparently we just need to get it into Windows and run the HP BIOS Configuration Utility to get rid of that message at startup.

Thanks for your help, everyone!

[m1ch43lzm]

For Bitlocker key, it's should be on customer's MS account
https://support.microsoft.com/en-us/...3-056f5ab347d6

Follow the instructions on the MS article linked above, if you can't get the key/customer doesn't remember MS account details, goodbye data

The "Manufacture programming mode", yes, use BCU to change it to *Lock, check if the serial/product name/SKU/feature byte is correct in BCU or BIOS setup (it should be as I copied from the old BIOS)

HP BCU https://ftp.ext.hp.com/pub/caps-soft...it/HP_BCU.html

[compcellinfo]

For Bitlocker key, it's should be on customer's MS account
https://support.microsoft.com/en-us/...3-056f5ab347d6

Follow the instructions on the MS article linked above, if you can't get the key/customer doesn't remember MS account details, goodbye data

The "Manufacture programming mode", yes, use BCU to change it to *Lock, check if the serial/product name/SKU/feature byte is correct in BCU or BIOS setup (it should be as I copied from the old BIOS)

HP BCU https://ftp.ext.hp.com/pub/caps-soft...it/HP_BCU.html

Yup we already dug up the key, now he's gotta reset his PIN before we can run BCU. Thanks for your help!!