mec 16xx dump with info block

[wangbreeze]

Sharing my experience. I have two t490 that need svp removal. I have the rt809f programmer.

the first one did not give me problems. Read erase write and svp is gone.

however, the second one I cannot even recognize the mec chip. The programmer reported 0xCDCDCDCD as the mec chip id. This is the same as if the chip is disconnected from the programmer (i actually tried it with out any pins attached to the programmer, it also reported this chip id).

I wonder what could be the cause of this discrepancy in the chips response. The one without problem has it’s BIOS dated back to 2021 while the one giving me problems has BIOS dating back to 2022 (so it’s newer).

anyone can help? Thanks.

Turned out to be the programmer issue. The RT809F I have worked on the first machine but stopped working on the second (showing 0xCDCDCDCD chip id and reading garbage). I used another rt809h and everything works now.

[vuquanghoanh]

did you update the product brand to thinkpad T**?

Sure. I have successfully entered the brand name. Just like in the photo.
But every time I start up, the laptop still reports error 2202.
I don't know what to do anymore

[Maxpower3]

Sure. I have successfully entered the brand name. Just like in the photo.
But every time I start up, the laptop still reports error 2202.
I don't know what to do anymore

not 7th gen just 7th

otherwise use planar service with your serial
https://www.badcaps.net/forum/troubl...id#post3220825

[noktabiz]

I have successfully removed EC password. The system has received complete information. But when starting the laptop there is still message 2202: Product name is invalid.
I used the Gold key to re-enter the information but the problem was not resolved.
Has anyone solved this problem yet?
Thanks,

Change the ec you use. and write another one and enter your information again

[vuquanghoanh]

not 7th gen just 7th

otherwise use planar service with your serial
https://www.badcaps.net/forum/troubl...id#post3220825

Thank you so much.
I have been trying to enter Brand name for 1 week but without success. With your guidance, I succeeded the first time.
Thank you so much.

[vuquanghoanh]

Change the ec you use. and write another one and enter your information again

I followed Maxpower3's instructions and it worked. Follow him, you will also succeed.
Let's thank Maxpower3.

[mily.gawel]

Hello, maybe one of you can help me. I have 2 T14s laptops with board number NM-C891, after soldering the wires and moving the resistor, I still get the message in SVOD 4.

MEC IDCODE: B1240020
Device ID: 0
Device Revision: 0
Device Status: 0
Flash Status: 0000000000
Boot Block in not protected mode
Boot Block in not protected mode

the reading is empty every time. I will add that in the X390, where the board is very similar, I managed to do it every time. Maybe someone had a similar problem ?

[wangbreeze]

Hello, maybe one of you can help me. I have 2 T14s laptops with board number NM-C891, after soldering the wires and moving the resistor, I still get the message in SVOD 4.

MEC IDCODE: B1240020
Device ID: 0
Device Revision: 0
Device Status: 0
Flash Status: 0000000000
Boot Block in not protected mode
Boot Block in not protected mode

the reading is empty every time. I will add that in the X390, where the board is very similar, I managed to do it every time. Maybe someone had a similar problem ?

I think the chip is locked sometimes. In this case, you cannot read. You would need to erase and write the EC file extracted from Lenovo BIOS update package.

[mily.gawel]

Unfortunately I tried but it also cannot be cleaned.

[TigTex]

try

Hey Maxpower3, I've noticed that you've filled with F the blocks from 0x300 to 0x34F. Is this all it takes with all MEC1663 to erase SVP or was this something specific for this user's laptop?
I've screwed up a T14 gen1 and now I need to erase the SVP to make it bootable again (0199 System Security error). I'm going to use a Vertyanov JIG V3 for that and I would like to avoid losing all OEM info and windows activation.

[Maxpower3]

Hey Maxpower3, I've noticed that you've filled with F the blocks from 0x300 to 0x34F. Is this all it takes with all MEC1663 to erase SVP or was this something specific for this user's laptop?
I've screwed up a T14 gen1 and now I need to erase the SVP to make it bootable again (0199 System Security error). I'm going to use a Vertyanov JIG V3 for that and I would like to avoid losing all OEM info and windows activation.

yes 300 to 34F is enough, no loss of DMI information or windows key
just look at the following CON# (43 4F 4E 23 53 00 02 A8 F4) or BC B0 B1 DC AC FF FD 57 0B 02 A8) in Xor version.
Same principle for all, can be doubled on certain models

[skazide]

I have read the EEPROM area of MEC1663.
Where and how should I edit the BIN file to remove only the BIOS password?"
Thank you in advance.

X1 Carbon Gen8 20UA

how you did it bro

[EGUG]

Hello,

I have RT809F and a damaged Thinkpad T490 board (M2-Connector was damaged and is removed). I use it for testing the procedure of removing the SVP from MEC-Chip. (Yes, I have the SVP.) I do this test because we received Thinkpads T490 donated for our school but they have SVPs. At present they are used. But during summer holidays I hope to remove the SVPs this way.

Typ 20N3001EGE
Serial PF1DTJNC
Bios N2IET99W (1.77)

The MEC chip is recognized correctly. I can read and write the MEC using MEC1633_256. My problem is that erasing of the Chip doest not work.

Does anyone have an idea what the cause could be?

[ajbernasko]

I have SVOD4, I can read and write it5679-1M chip for the P14s gen 2, nm-D451. Can someone share the file for this chip ?

[SMDFlea]

serial number https://www.badcaps.net/forum/troubl...before-posting

[EGUG]

Nobody has an idea ? (Post 413)

[vuquanghoanh]

Hi,
My laptop has bios password.
Thinkpad T490S FT491/FX390 NM-B891 REV 2.0
S/T: MJ-0C3ABP
Here is bios dump. Please unlock it.
Thanks,...

[Stefan Steff]

Hi,
My laptop has bios password.
Thinkpad T490S FT491/FX390 NM-B891 REV 2.0
S/T: MJ-0C3ABP
Here is bios dump. Please unlock it.
Thanks,...

Hi !
There is no difference between your uploaded MEC content and the factory one (attached)...they are identical.
The password is stored in the 2K EEPROM inside the MEC.
There are programmers (like SVOD 4) that can read the eeprom content separately and then you can delete the password.
If you don't have such a programmer you can simply erase and reprogram the whole MEC1633 and after that reinsert the DMI info.
This is my opinion.

SS

[vuquanghoanh]

Hi !
There is no difference between your uploaded MEC content and the factory one (attached)...they are identical.
The password is stored in the 2K EEPROM inside the MEC.
There are programmers (like SVOD 4) that can read the eeprom content separately and then you can delete the password.
If you don't have such a programmer you can simply erase and reprogram the whole MEC1633 and after that reinsert the DMI info.
This is my opinion.

SS

I read the Mec file, erased the chip. Reload the original file (do not edit). Password is removed. This is how I did it successfully for the T490S and T14 Gen 1.
Thank you very much

[Stefan Steff]

I read the Mec file, erased the chip. Reload the original file (do not edit). Password is removed. This is how I did it successfully for the T490S and T14 Gen 1.
Thank you very much

Wonderful
You're welcome !

[bhatt]

Re: mec 16xx dump with info block



Hello, do it with this tool and watch this video. https://www.youtube.com/watch?v=gKL9JUTgo-g&t=519s

what is the u1u zip file password