Lenovo ThinkPad T540P LKM-1 SWG2 MB 12308-2 48.4L016.021 PASSWORD

[Andreasbest]

Hello.
A customer wants to bring me 3x Lenovo T540p with locked BIOS.
Once I unlocked a T540p but it was a huge procedure that required completely tear down of whole laptop, took me around 2 hours just for one device.
Is it possible to extract the password from the locked BIOS file?
It will be much easier to unlock them this way.

Thank you!

[Maxpower3]

not possible extract password
look if debug connector is available for try use bypass

Wistron Kome-1 SWG2 LKM-1 SWG2 MB 12308-2

[Andreasbest]

not possible extract password
look if debug connector is available for try use bypass

Wistron Kome-1 SWG2 LKM-1 SWG2 MB 12308-2

I was afraid of it.
I tried AMIDecryptor but works until 3rd Gen.I'lI check for the lps bus location, I hope is easy to reach.

[Maxpower3]

I was afraid of it.
I tried AMIDecryptor but works until 3rd Gen.I'lI check for the lps bus location, I hope is easy to reach.

t540p vs w540

found on u39 and DB2 too

[nuno_nunes]

t540p vs w540

found on u39 and DB2 too

I need help to thinkpad t540p

[Andreasbest]

I need help to thinkpad t540p

T540p is super easy for EC bypass, done 40 yesterday in only 5 hours, LPC also is super easy to access, just remove the wlan/wwan cover and it's right behind the wlan card, just unscrew it and you see it (DB2).
Short any LPC with GND for 1 sec when Lenovo logo appears and press F1, it will enter BIOS, then press 2 times blank code on Administrator password to disable it, ctrl alt del and you are done.

[nuno_nunes]

T540p is super easy for EC bypass, done 40 yesterday in only 5 hours, LPC also is super easy to access, just remove the wlan/wwan cover and it's right behind the wlan card, just unscrew it and you see it (DB2).
Short any LPC with GND for 1 sec when Lenovo logo appears and press F1, it will enter BIOS, then press 2 times blank code on Administrator password to disable it, ctrl alt del and you are done.

Could you please make a video if possible?

[SMDFlea]

Could you please make a video if possible?

Different model but you`ll get the idea https://www.youtube.com/watch?v=Xw28inqitKk

[nuno_nunes]

Different model but you`ll get the idea https://www.youtube.com/watch?v=Xw28inqitKk

I don't understand this pin motherboard? U39 to db2 ou db1

i try pin to u39 to db2 and not work

[Andreasbest]

I don't understand this pin motherboard? U39 to db2 ou db1

i try pin to u39 to db2 and not work

ANY of these 4 pins (not all, just pick one) to the GROUND!

[nuno_nunes]

ANY of these 4 pins (not all, just pick one) to the GROUND!

Is not easy

[Andreasbest]

Where do you stuck?

[nuno_nunes]

Where do you stuck?

I tried with the images you have of the board with the points and nothing and that's why I'm not going to fix this because I don't want to destroy the PC.

[SMDFlea]

I tried with the images you have of the board with the points and nothing and that's why I'm not going to fix this because I don't want to destroy the PC.

Do you have an EC programmer ? . https://www.badcaps.net/forum/troubl...79#post1703979

[nuno_nunes]

Do you have an EC programmer ? . https://www.badcaps.net/forum/troubl...79#post1703979

This programmer of bios?

[Andreasbest]

This programmer of bios?

A programmer like CH341A, very cheap. With Lenovo Autopatcher you can disable password with it, the BIOS chip is under the heatsink, thus means you have to disassemble the whole laptop, done it once and i decided there will be no second time.

[Maxpower3]

T540p is super easy for EC bypass, done 40 yesterday in only 5 hours, LPC also is super easy to access, just remove the wlan/wwan cover and it's right behind the wlan card, just unscrew it and you see it (DB2).
Short any LPC with GND for 1 sec when Lenovo logo appears and press F1, it will enter BIOS, then press 2 times blank code on Administrator password to disable it, ctrl alt del and you are done.

I'm glad it helps you

[Andreasbest]

I'm glad it helps you

First time i tried it in so old laptop and the only reason i tried it is because before a month i opened one for Autopatcher, bios chip was so deep in this model that i had to completely dismantle the whole laptop, motherboard and even the heatsink (chip in underneath) plus the T540p dump for some reason is not compatible with Autopatcher and produces error at the end making the patched backup unusable, only the patched dump on this link works and then i write back the original.

Fun fact: probably because it's too old, the short never produced any error (no fan detected, no mouse detected, no kb detected etc.) so it enter the bios with 1 or 2 tries, extremely easy.

For 10th time thank you for it Max!