LENOVO BIOS AUTO-PATCHER for Supervisor Password Removal

[yuyuyak]

DoCNC
You got it!
I'm not expert enough to tell you about switching bios model versions but everything inside me says "NOOOOOO!" Stefan Steff has been around for awhile, so his advice sounds trustworthy.
Hard to argue with success, perhaps Xargon1975 would be kind enough to point you to the one that worked for him, he was a t480 kinda guy.

[DoCNC]

The T580 is nearly the same „shit“ than the T480..
the T580 is just a little bit larger in display size and has an num pad..
but I’m not sure if this is the only differ between this models…

[thepombo]

Hi,
This method wont work on this E490 mobo.
No image after patch

Type: 20N8-000RPG
Serial: PF-1KXGTT
19/01

[veiu0107]

Any chance this tool is working with yoga x1 gen7? Bios dump uploaded if anyone can check...

[yuyuyak]

DoCNC, I have to say --- why? Just use the exact proper version, there are many available, just use badcaps search, I've seen them. Especially warm & fuzzy when you find one that someone has posted back something to the effect of "works for me".
Oh, and BTW, physical appearance has nothing to do with it. They could look exactly the same and have totally different bioses and often do.

[DoCNC]

Hi,

I'm looking for some assitance. I used the T495Main_PATCHED file to knock out the admin password.
The notebook entered the menu asking if i really wanted to delete it, i pressed the spaces multiple times, and it restarted.
After that only a blank screen showed everytime it got restarted, so I went to write the flash again now the original that was on the notebook.
But now for some reason there was continously too much voltage on the writer, so I had removed the chip, and used the elevated 1.8v board on the CHA341-A-PRO instead of the clips.
When I tried to write it again, I had multiple cannot read sector errors and probably killed the chip, so i purchased the only avalible replacement that I could get my hands on: MX25U12835FM2I-10G
Today I wrote the old dump, to the new chip and soldered it to the board, when I first turned it on the screen had the backlight glowing, and it turned off after around 10 seconds.
I tried going into the BIOS, and I succeded once, cause I heard the beeping sound that it is supposed to make. But I couldnt make it any further than this.
I was measuring 1.8v on most lines and 300mv on a few lines, I tried removing the SSD, the extra RAM, externals monitors, but I couldnt get an image.
Now after a few restarts I measured 1.8v to all lines from the ground, except to VCC, which is probably the issue, but at this point I have no idea on how to fix it.
I also bought multiple chips in case I killed it again, so that won't be an issue, if needed.
I see that you guys recommended to reinstall the BIOS, but I don't think I can do that without a screen.

Any adivce or tips on how to fix it are appreciated!

Hello Csanád Balogh
Just for getting sure...
Can you please post a picture of your CH341A Programmer?
MayBe i have a solution for your Problem... But there is a lot of different versions of the CH341A Programmer out there... That's why i asked for a Picture...


yuyuyak
I will try the t480 files that Stefan Steff provided @ post # 3786 Page 190 of this thread...
I will report after i test it..

[KnonicaL]

Hi! Newbie here. I have a Thinkpad L14 gen 4 (21h6). After hours can take a dump from W25Q256JW (1.8). When I try to pass the dump to the auto-patcher, I get the "is currupted or does not contain a valid dump."

I use a CH341 (black) with the 1.8 adapter. Programmer NeoProgrammer 2.2.0.10, was the only programme that auto detect the IC.

Any suggestion?

Model: L14 GEN 4
Serial: PW-0B7NFN 21H6

Attached the dump, if its required. Thanks.

[DoCNC]

KnonicaL
I tried to patch your Posted dump and it shows me the same errormessage...
Did you create more than 1 dump? (i did 4 dumps in series and compare them using sha256sum Checksum of each dump, to get sure there are identical...
one dump can fail, a second dump maybe too.. But if you get 3 or more dumps and all have the same checksum it would be a "good dump"...
In this case you can choose only one to patch...

So try to dump again, more tan one time...

Good luck..

[KnonicaL]

Hi! Newbie here. I have a Thinkpad L14 gen 4 (21h6). After hours can take a dump from W25Q256JW (1.8). When I try to pass the dump to the auto-patcher, I get the "is currupted or does not contain a valid dump."

I use a CH341 (black) with the 1.8 adapter. Programmer NeoProgrammer 2.2.0.10, was the only programme that auto detect the IC.

Any suggestion?

Model: L14 GEN 4
Serial: PW-0B7NFN 21H6

Attached the dump, if its required. Thanks.

DoCNC Thanks for reply.

I did many dumps, all same checksum, same values no one worked. The programmer and the CH341B do not have any problem at auto detect the IC, soo I assume are correctly.

I will update a little bit more I have the board lg4 lt5 2 amd 8l gen4 pcb svt2 and have a W25Q128FW (1.8) marked as BIOS2. Tried to dump too but didn't work with the patcher too. it's the W25Q128FW the EC?

I don't what to do.

[DoCNC]

KnonicaL at first make sure you dump the correct chip... - I dont know your board.. Maybe get the Schematics for your board and compare the chip you dumped...

In my case (T480) it is U49.. Make sure you clamp in the right direction...

If anything failed you have to detach the Chip from the board.. Some boards can interrupt your dump..

[DoCNC]

yuyuyak
I will try the t480 files that Stefan Steff provided @ post # 3786 Page 190 of this thread...
I will report after i test it..

This BIOS Dump works like a Charm..
Everything as expected...

Thanks alot to Knucklegrumble for this amazing Patch & Stefan Steff for the BIOS Files that help me to unlock my ThinkPad T480..

[Csanád Balogh]

Hello Csanád Balogh
Just for getting sure...
Can you please post a picture of your CH341A Programmer?
MayBe i have a solution for your Problem... But there is a lot of different versions of the CH341A Programmer out there... That's why i asked for a Picture...


yuyuyak
I will try the t480 files that Stefan Steff provided @ post # 3786 Page 190 of this thread...
I will report after i test it..

Here is my CHA-341A-PRO it was modified to 3.3v only after i found out about the 5v fault on the data lines. It uses an elevator board to convert to 1.8v. The programmer was working fine after modifying it, and flashed the chip.

I think just have a bad bios flashed on the chip now, but honestly I have no idea I was just following the guide.

[Maxpower3]

I get the "is currupted or does not contain a valid dump."

Any suggestion?

Patcher doesn't work, BIOS 32MB, only 16MB.
And Gen4 certainly requires EC reading.

[DoCNC]

Here is my CHA-341A-PRO it was modified to 3.3v only after i found out about the 5v fault on the data lines. It uses an elevator board to convert to 1.8v. The programmer was working fine after modifying it, and flashed the chip.

I think just have a bad bios flashed on the chip now, but honestly I have no idea I was just following the guide.

This is what I wanted to know..
you did the „lift pin mod“ there is an other mod out there who is more comfortable…
hopefully you made a couple of dumps after modding your programmer before you flash it with a patched dump?

[Csanád Balogh]

This is what I wanted to know..
you did the „lift pin mod“ there is an other mod out there who is more comfortable…
hopefully you made a couple of dumps after modding your programmer before you flash it with a patched dump?

Yes, I have made 3-4 dumps of the original contents of the chip, then I patched it with the program, wrote that to the chip.
The prompt came up to press "SPACE" 3 times to reset password, I did that. Then the laptop was in a blank screen state, so I removed the chip from the board, and flashed back the original BIOS.
And now when I turned it on it had a blank screen for a few seconds, after that it disappeared, that's when I tried pressing "F2", "DEL" and "F12" to get into the BIOS. I heard the beeps that it gives, when getting in, but I had no screen and couldnt reset to original settings.

But, i can't do any of that anymore. When I turn it on the fan spins for a second, but nothing else happens except the chip and the CPU heating up to around 50°C.
When writing I verified the checksum multiple times, so I'm 100% sure that I wrote what was in the .bin file.

So, that's what I need help with, what should I do now? Remove the chip and write the original to it again, then try again with the process?
Cause I'm thinking about taking it to a real technician, since the password is now removed his only job would be to get it up and running again.

[Maxpower3]

Yes, I have made 3-4 dumps of the original contents of the chip, then I patched it with the program, wrote that to the chip.
The prompt came up to press "SPACE" 3 times to reset password, I did that. Then the laptop was in a blank screen state, so I removed the chip from the board, and flashed back the original BIOS.
And now when I turned it on it had a blank screen for a few seconds, after that it disappeared, that's when I tried pressing "F2", "DEL" and "F12" to get into the BIOS. I heard the beeps that it gives, when getting in, but I had no screen and couldnt reset to original settings.

But, i can't do any of that anymore. When I turn it on the fan spins for a second, but nothing else happens except the chip and the CPU heating up to around 50°C.
When writing I verified the checksum multiple times, so I'm 100% sure that I wrote what was in the .bin file.

So, that's what I need help with, what should I do now? Remove the chip and write the original to it again, then try again with the process?
Cause I'm thinking about taking it to a real technician, since the password is now removed his only job would be to get it up and running again.

Corrupted bios or lost resistors near the chip.
Try original bios or put another one.
Too many problems with these cheap programmers.
If white screen probably bios problem
Don't use clamp

try
T495 Laptop (ThinkPad) - Type 20NK.rar

Provided serial number and model type

[pitdahl]

Hello friends,
first sorry for my bad english. I have a problem with my
Lenovo thinkpad E590 i5 type20NB laptop,
I have to change SSD’s and boot order but there is a supervisor password which is unknown or forgetten L

So I wanted to autopatch it, but I have my problems with the decribed workflow in #1. For experts it may be clear, but as a noob as me, I am understanding something not really.
So far as I understood:
A: I have to dump my Lenovo bios.bin file, but how can I do that? Do I need a programmer or a software to do that? (Is there a describtion?)

B: Then I have to patch the original_bios.bin file with autopatch.cmd into a patched_bios.bin file, right? (autopatch.cmd bios.bin)

C: When I have the patched_bios.bin file, how can I flash this file onto my laptop? Is this autopatch.py for? Or must I have a flashing circuit to do that?

Then I have to do Step1 to Step 9.
In step4, the character I have to put in is the new password?

Does the E590 have any tamper switch?

I have to put off the harddisk while booting with the new, patched bios file? Why do I have to put off the harddisk?

Sorry for the noob questions, but I don’t want to kill my laptop. I hope someone can explain some of my questions or have describtions.

Or does someone have a patched bios.bin file for this type of laptop.
Lenovo thinkpad E590 i5, type 20NB005HGE, Bios version ROYET54W (1.37)

Thanks and best regards
Pit

[KnonicaL]

Patcher doesn't work, BIOS 32MB, only 16MB.
And Gen4 certainly requires EC reading.

Thanks for reply.

So How can I identify the EC? Have this chips W25Q16JVSIQ, W25Q128JW, 25R256JW.

I'm using the CH341B and I think it's not working properly with this chips.

[KnonicaL]

Thanks for reply.

So How can I identify the EC? Have this chips W25Q16JVSIQ, W25Q128JW, 25R256JW.

I'm using the CH341B and I think it's not working properly with this chips.

I will make a update. I find the EC its NPCX997KAABX. So, I do not how process now. Had any way to clean the supervisor pass?

[Csanád Balogh]

Corrupted bios or lost resistors near the chip.
Try original bios or put another one.
Too many problems with these cheap programmers.
If white screen probably bios problem
Don't use clamp

try
T495 Laptop (ThinkPad) - Type 20NK.rar

Provided serial number and model type

Thanks, I will try this flash out in a few days. There is no screen at all, and I didn't use clips, but I think my old file is wrong, so I thank you for this file.