Announcement

Collapse

Forum Rules *ALL NEW MEMBERS, PLEASE READ!! UPDATED!!*

First and foremost, Welcome to the Badcaps Capacitor Search Engine & Forums!

New members that have activated their accounts have limited access to certain features of the site until established. Members with zero posts have no access to the private messaging system. Also, members with zero posts may not edit certain profile attributes, such as signatures. New members also may not create new threads. However, new members with zero posts have full access to all technical information contained on this forum, and that also includes attachments (images and files that other members have uploaded), and new members that have activated their accounts are free to post replies to existing threads. If you wish to create a new thread, the fix is simple! All you need is ONE post to be able to have full unrestricted access, and that can be simply posting an introduction of yourself or say hello in THIS THREAD. This may seem a little strange, but it helps keep spam and abuse curved. Please note, that it may take up to one hour from your first post for the limits to be removed. If you make a post and don't immediately see the restrictions gone, be patient. The promotion system updates every hour.

Please complete your profile after making your first post, with your name, locale, and other info. It's nice to know members on a first name basis, and know where they're from. Makes for a much friendlier environment!

Posting rules for this forum will be STRICTLY enforced by myself as the owner/administrator, and my moderator crew.

Badcaps.net IS A BUSINESS!!! If you are a servicer, service center, or vendor of any kind in the computer/capacitor industry, you are NOT permitted to advertise, link, promote, or plug your business on this forum in ANY way! NO EXCEPTIONS!! This includes asking for "donations" in exchange for BIOS passwords or tech advice for anything! If I see you doing that, your post will be edited or deleted, and you warned. If it happens again, you will be banned. The only exceptions are the references to the companies quoted in the FAQ which the administration have added for the convenience of those around the world who have difficulty to source caps for their repair.

This also includes using this forum's private message system to solicit business. Members, if you receive a PM from anyone offering repair services or components, please alert me immediately! Myself or any of my moderators, will never private message a user soliciting business, for Badcaps.net, or any other servicer/vendor. If you PM me about repairing your device, I will reply and take care of you, however, I will not message you first.

------------------------------------

Posting rules:

This forum was created to be a technical support forum primarily for the do-it-yourselfers who choose to repair their own boards. Any and all technical questions are welcome!

1) Please use the SEARCH feature!! Your question may have been answered in another thread! Please search first and see if it has!

2) When posting a technical question, be as detailed as possible in your thread. The more information we have about your specific problem, the better we can answer your question.

3) Please use COMPLETE sentences, punctuation, and grammar! Nobody is perfect, hence, a spelling error on occasion is no biggie. However, posts/threads that are unreadable will be deleted. This includes any and all forms of 'ebonics', leet, chatroom jargon, and 'text message' shorthand and slang. This forum is not a chatroom/text message, please use full words and complete sentences.

4) Keep discussion on topic!! DO NOT HIJACK THREADS! It's easy to do (I've done it myself a few times...) Lets try to keep it down to a minimal!! If you have something really off topic, that's what the lounge is for!

5) Keep things civil! There will be no tolerance for flaming, bashing, hateful remarks, racial remarks, adult material of ANY kind, and so on.

6) THE LOUNGE RULES! The lounge is a place for off topic chit-chat! If you post something that might be considered questionable or something you don't want kids to see, or something you can't view at work/school, etc, please label that thread *NWS* or NOT WORK SAFE in the thread title as a warning. The Lounge is NOT moderated, anything is welcome... Feel free to post rants, jokes, cars, hot women (remember the NWS warning in the title), or just about anything within reason. It's an open forum! Please refrain from participating in political topics if you have thin skin, they can get heated sometimes!! Remember that we have members here from all over the world, with many different views and cultures. Political debates can turn really ugly, and really fast, and if they degrade to personal attacks and useless banter/bashing, moderator action will ensue. I want this forum to be a safe haven for technical discussions from all walks of life, so lets keep off topic discussions civil and friendly.

7) Spamming and spammers will NOT be tolerated or accepted in any way, shape, or form! Spam bots are instantly and permanently banned, and their threads deleted! The mod crew is really quick to zap spammers, we typically pop them before they even get to post. This also includes regular members as well. be courteous and not post spam. This includes links to off-site information that's not relevant to the thread at hand. Do not plug other websites, forums, or businesses in your signatures. You may do so in a thread if the off-site link you're posting is relevant to the topic, but otherwise, don't do it. If you see a thread which clearly a spam bot posting that we have not removed yet, DO NOT click any links in it!! Simply click the 'report bad post' button, and it'll be taken care of, usually within minutes.

8) Account removals & closures: Since no personal information is given in the creation of your Badcaps.net Forum account, requests to remove and/or delete accounts will be declined. Any requests for removal of threads & posts you created will also be declined. The reason is the missing posts can/will leave threads incomplete and fragmented. For the threads to be of help to others later on, information can't and won't be missing. However, if you inadvertently posted personal identifiable information in a post (such as an email address, real name, or phone number), please contact a staff member. In those cases, the post may be edited or removed, at the staff members discretion.

That's about it for the rules, the setup here is pretty loose. However, if you're caught violating any of the rules above, here's what will happen:

First offense: Warning by me or a moderator
Second offense: Banning for 1 day
Third offense: Banning for 3 days
Fourth offense: Banned permanently.

If you do something really dumb, or are just a troll, I will skip the warning and the temporary banning, and ban you permanently!

The rules are pretty cut and dry... However, if you have any questions about this policy, feel free to contact me.
See more
See less

BIOS guides, methods, resources and tools

Collapse
This topic is closed.
X
This is a sticky topic.
X
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

    BIOS guides, methods, resources and tools

    Please post any suggestions and corrections to the discussion thread: https://www.badcaps.net/forum/showthread.php?t=103527

    For additional information on SPI ROM, BIOS, EC, Intel ME, etc., please read: https://github.com/ISpillMyDrink/UEFI-Repair-Guide/wiki


    Table of Contents:
    Code:
    [URL="https://www.badcaps.net/forum/showpost.php?p=1108840&postcount=2"]1. How to dump and flash[/URL]
      1.1. BIOS
        1.1.1. Programmers
          1.1.1.1. TL866II
          1.1.1.2. T56
          1.1.1.3. RT809F
          1.1.1.4. RT809H
          1.1.1.5. EZP2019
          1.1.1.6. CH341A
        1.1.2. Adapters
      1.2. EC
        1.2.1. Programmers
          1.2.1.1. SVOD3
          1.2.1.2. SVOD4
          1.2.1.3. Vertyanov
          1.2.1.4. RT809H
          1.2.1.5. RT809F
          1.2.1.6. T56
          1.2.1.7. TL866II
        1.2.2. Adapters
        1.2.3. Automatic flashing
    [URL="https://www.badcaps.net/forum/showpost.php?p=1108841&postcount=3"]2. How to clean ME/TXE region[/URL]
    [URL="https://www.badcaps.net/forum/showpost.php?p=1108842&postcount=4"]3. Password removal by laptop brand[/URL]
      3.1. Acer
      3.2. Apple
        3.2.1. 2011 and older
        3.2.2. 2012 to 2017
        3.2.3. 2018 to 2020 (T2)
        3.2.4. 2020 and newer (M1)
      3.3. Asus
      3.4. Dell
      3.5. Fujitsu-Siemens
      3.6. HP
      3.7. Lenovo ThinkPad
        3.7.1. Password ROM bypass (2012 and older)
        3.7.2. DXE password bypass driver injection (2012-2018)
        3.7.3. Flashing EC (2019-*)
      3.8. Microsoft Surface
      3.9. Panasonic, and some other standard AMI implementation
      3.10. Toshiba
        3.10.1. Consumer
        3.10.2. Business
    [URL="https://www.badcaps.net/forum/showpost.php?p=1108843&postcount=5"]4. DMI editing by brand[/URL]
      4.1. AMI-based standard BIOS (SuperMicro…)
      4.2. Acer
      4.3. Apple
      4.4. Asus
      4.5. HP
      4.6. Intel Network Adapters
      4.7. Lenovo
    [URL="https://www.badcaps.net/forum/showpost.php?p=1108844&postcount=6"]5. Clearing NVRAM[/URL]
    [URL="https://www.badcaps.net/forum/showpost.php?p=1261507&postcount=7"]6. Finding bios update packages[/URL]
      6.1. Major brands
        6.1.2. Acer
        6.1.3. Apple
        6.1.4. Asus
        6.1.5. Dell
        6.1.6. Dynabook (Formerly Toshiba)
        6.1.7. Fujitsu
        6.1.8. HP
        6.1.9. Lenovo
        6.1.10. Microsoft
        6.1.11. Samsung
      6.2. Other brands
        6.2.1. Clevo
        6.2.2. Gigabyte
        6.2.3. Haier
        6.2.4. Medion
        6.2.5. MSI
        6.2.6. Schenker
    [URL="https://www.badcaps.net/forum/showpost.php?p=1108845&postcount=8"]7. Extracting BIOS/EC firmware from update packages[/URL]
      7.1. Desktops
      7.2. Laptops
        7.2.1. Asus
        7.2.2. HP
        7.2.3. Lenovo
        7.2.4. Samsung
    Last edited by SMDFlea; 08-12-2023, 03:07 PM.
    OpenBoardView — https://github.com/OpenBoardView/OpenBoardView

    #2
    Re: BIOS guides, methods, resources and tools

    1. How to dump and flash
    1.1. BIOS
    BIOS can be updated from software using the manufacturer's tool. It can also often be dumped from software (although not really reliable).
    However, if you need to re-flash the BIOS because the computer does not boot and BIOS recovery procedure does not work, you need an external programmer.
    Likewise, if you want to modify the BIOS to remove a password, it must be done with an external programmer.

    When flashing a BIOS always make a backup first. Take 2 or 3 different dumps and make sure they are identical.
    On Windows, you can use the command "fc /b" to check if two dumps are identical.
    Make sure that the dumps looks good, i.e. not filled with 0x00 or 0xFF. After compression, if the file has a size of only a few kilobytes, the EEPROM was most likely not read properly.

    Additionally, please read the FAQ at: https://www.badcaps.net/forum/showthread.php?t=98665

    1.1.1. Programmers
    TL866II is arguably the most reliable and easy to use programmer while still being relatively cheap.
    If you also need eMMC support, consider T56 or RT809H
    If you need LCD monitor In-System Programming through VGA port, consider RT809F or RT809H.

    1.1.1.1. TL866II
    Supports I2C, SPI, LPC, FWH, parallel.
    Support list: http://www.autoelectric.cn/MiniPro/TL866II_List.txt

    1.1.1.2. T56
    Supports I2C, SPI, LPC, FWH, parallel, eMMC.
    Support list: http://www.xgecu.com/MiniPro/T56_List.txt

    1.1.1.3. RT809F
    Supports I2C, SPI, LPC, FWH, VGA ISP.
    Parallel interfaces support requires PEB-1 extension board and can be troublesome.
    Support list: https://www.hklrf.com/Download__1.html
    Software: http://doc.ifix.net.cn/@rt809/ENGLISH.html

    1.1.1.4. RT809H
    Supports I2C, SPI, LPC, FWH, parallel, eMMC, VGA ISP.
    Support list: https://www.hklrf.com/Download__1.html
    Software: http://doc.ifix.net.cn/@rt809/ENGLISH.html

    1.1.1.5. EZP2019
    Supports I2C (24-series), SPI (25-series), 93-series.
    Support list: https://www.hklrf.com/24download/img/EZP2019-List.txt


    Note: Auto-detection may not work properly for 8Mb and larger ROMs, it is recommended to select the part number manually. In addition, if there are errors when reading and writing, try to lower the speed.

    1.1.1.6. CH341A
    Supports I2C (24-series), SPI (25-series).

    This programmer is not recommended but it is the cheapest programmer available.
    It has several shortcomings:
    • Limited interfaces support, only SPI and I2C
    • Several different software with varying level of reliability and ROM IC support (especially troublesome with 128Mb and larger ICs)
    • Several different hardware design, some of them having design defects
    • No proper detection of communication issue with the ROM IC


    Available software include: NeoProgrammer, Colibri, AsProgrammer, Flashrom…
    Read the guide there: https://winraid.level1techs.com/t/gu...rammer/32948/3

    If you have a black PCB, it is very likely that it needs to be modified for 3V operation instead of 5V. Failing to do so could damage the ROM IC.
    Watch the instructions there:
    https://www.youtube.com/watch?v=-ln3VIZKKaE
    https://www.youtube.com/watch?v=HwnzzF645hA

    1.1.2. Adapters

    It is possible to use clips on SOIC-8 ICs to avoid desoldering, however it is *very unreliable* and will often lead to an empty or corrupt dump. Avoid whenever possible.
    If you insist on using a clip, then make sure the programmer uses an additional buffer and line driver for SPI. For the TL866II this is available as an additional adapter, the T56 has it built-in.
    It is recommended to desolder the chip and use an adapter board or socket. They exist for all sorts of packages: SOIC-8 200mil, SOIC-8 150mil, SOIC-16, WSON-8 8x6mm, WSON-8 6x5mm, USON-8 4x3mm, PLCC-32, TSSOP-48…

    Most common packages for the BIOS SPI ROM on modern boards are SOIC-8 200mil and WSON-8 8x6mm.
    Desktop boards sometimes use DIP-8 which can be inserted directly into the programmer.
    Desktop boards before around 2005 used PLCC-32 (which can use a LPC, FWH or parallel bus), even older boards (in the 90s or older) used DIP-32.

    MacBook Pro 15"/17" boards before 2015, MacBook Pro 13" non-Retina and MacBook air before 2011 use SOIC-8 200mil
    MacBook Air and MacBook Pro 13" Retina boards between 2011 and 2015 use WSON-8 8x6mm.
    Apple boards from 2015 to 2017 use WSON-8 6x5mm.
    Apple boards from 2018 onwards use USON-8 4x3mm for T2/M1 ROM.


    1.2. EC

    Dumping and flashing EC often requires a dedicated EC programmer. Some EC can be flashed with regular SPI ROM programmers.
    List of EC that may require programming: https://www.badcaps.net/forum/showthread.php?t=66963

    1.2.1. Programmers

    1.2.1.1. SVOD3
    Code:
    ENE
    ITE
    Nuvoton
    SMSC
    
    SVOD3 debug ZIF programming PCB - https://www.badcaps.net/forum/showthread.php?t=108704
    1.2.1.2. SVOD4
    Code:
    ENE
    ITE
    Nuvoton
    SMSC
    1.2.1.3. Vertyanov
    Code:
    ENE
    ITE
    Nuvoton
    SMSC
    1.2.1.4. RT809H
    Support list: https://www.hklrf.com/Download__1.html

    Code:
    ENE
     KB9010
     KB9012
     KB9016
     KB9018
     KB9022
     KB9028
    ITE
     IT8386E
     IT8580E
     IT8585E
     IT8586E
     IT8587E
     IT8595E
     IT8985E
     IT8987E
     IT8996E
    Nuvoton
     NPCE288N
     NPCE388N
    SMSC 
     MEC1653
     MEC1650
     MEC1633
     MEC1609
     MEC1619
     MEC1618
     MEC5035
     MEC5045
     MEC5055
     MEC5075
     MEC5085
    1.2.1.5. RT809F
    Not a dedicated EC programmer, standalone programmer supports EC SPI and JTAG interfaces only. PEB-1 extension board supports ITE interface.

    Support list: https://www.hklrf.com/Download__1.html
    Code:
    ENE
     KB9010
     KB9012
     KB9016
     KB9018
     KB9022
     KB9028
    ITE (requires PEB-1 extension board)
     IT8580
     IT8585
     IT8586
     IT8587
     IT8985
     IT8595
     IT8987
     IT8996E
    SMSC
     MEC1653
     MEC1650
     MEC1633
     MEC1609
     MEC1619
     MEC1618
     MEC5035
     MEC5045
     MEC5055
     MEC5075
     MEC5085
    1.2.1.6. T56
    Not a dedicated EC programmer, supports EC SPI interface only.
    Support list: http://www.xgecu.com/MiniPro/T56_List.txt
    Code:
    ENE
     KB9010
     KB9012
     KB9016
     KB9018
     KB9022
    1.2.1.7. TL866II
    Not a dedicated EC programmer, supports EC SPI interface only.

    Support list: http://www.autoelectric.cn/MiniPro/TL866II_List.txt
    Code:
    ENE
     KB9010
     KB9012
     KB9016
     KB9018
     KB9022
    1.2.2. Adapters
    Adapter boards exist for some programmers, chip must be (partially) soldered on the adapter board, then the adapter board is connected to the programmer to be flashed.

    In most cases, EC can also be programmed in-system through the keyboard connector. Adapter for the programmer to keyboard connector is required, as well as correct cable (keyboard connectors can have different number of pins and different pitch). Pinout of the keyboard connector matching the EC programming interface must be known and set up in the programmer software.

    1.2.3. Automatic flashing

    Some platforms can automatically flash a blank EC from the image stored in an external SPI ROM alongside the main BIOS when power is first applied. This assumes that there is no other issue on the board.
    Platform with automatic flashing:
    • Most Asus laptops
    • Quanta Y11A
    • To be completed…
    Last edited by SMDFlea; 05-07-2023, 05:31 AM. Reason: edited winraid link
    OpenBoardView — https://github.com/OpenBoardView/OpenBoardView

    Comment


      #3
      Re: BIOS guides, methods, resources and tools

      2. How to clean ME/TXE region
      Cleaning ME/TXE region is required after replacing the PCH or the SoC. Sometimes the ME region gets corrupted on its own and it also required cleaning.
      Cleaning ME/TXE region consists in replacing the existing ME/TXE region in the BIOS dump by a fresh, non-paired one, retaining the manufacturer's configuration.

      Symptoms when ME region cleaning may be required include:
      • Shutdown after 30 minutes (unrelated cause is using Core i3/i5/i7 with HM70 PCH, cleaning ME region won't help)
      • Slow POST
      • Fans spinning at full speed
      • Intel MEI not working in Device Manager
      • In case of Apple machine, macOS reboots or freezes during boot
      • No POST


      Refer to: https://www.badcaps.net/forum/showthread.php?t=88533 and https://winraid.level1techs.com/t/gu...lization/31277 .

      Do not use use Intel ME/TXE Injector/Easy Clean ME or similar tools: they do not retain the manufacturer's configuration and can cause subsequent problems.

      MS Surface no touchscreen after cleaning ME Firmware: https://www.badcaps.net/forum/showthread.php?t=104153
      Last edited by SMDFlea; 04-26-2023, 09:16 AM. Reason: Edited win-raid URL. No longer worked
      OpenBoardView — https://github.com/OpenBoardView/OpenBoardView

      Comment


        #4
        Re: BIOS guides, methods, resources and tools

        3. Password removal by laptop brand

        DISCLAIMER: badcaps.net and its members do no support unlocking stolen or company-owned devices. The information given here is for personal use only, ie. you accidentally set a password on your own machine, you forgot the password you set a long time ago or you mistyped the password when setting it and cannot get in again.
        Note that a device bought locked might also have been stolen if the previous owner cannot give the correct password. This is especially common with business-grade equipment (Lenovo ThinkPad…) that employees sneak out or do not return.


        3.1. Acer
        If you enter empty password 3 times, the BIOS gives you a code.
        8-digit answer generators are easily found on the web.
        For 10 digits, see here: https://www.badcaps.net/forum/showthread.php?t=84084

        3.2. Apple

        3.2.1. 2011 and older
        For 2011 and older machines, changing RAM configuration and performing 3x PRAM reset can clear the password. Password can also be extracted from BIOS dump.

        3.2.2. 2012 to 2017
        For 2012 to 2017 machines, BIOS must be edited and reflashed to clear the password. There are 2 methods for this:
        • Clear out the whole SVS store. There are other stuff in this store, no idea what they are for so better avoid doing this.
        • Invalidate the CBF2CC32 NVRAM variable in that SVS store which contains the encrypted password. You just have to change one bit in its name, so like replace the C with an A or whatever. Note that strings are UCS-2 encoded, so in the hex editor it'll show up as 0x43 0x00 0x42 0x00 0x46 0x00 etc.

        If there is an iCloud pin, you need to perform 3x PRAM reset after removing password. If FindMyMac is still enabled, you have to reinstall macOS while being disconnected from the Internet, then reconnect after logging in and bind to a new Apple account.

        3.2.3. 2018 to 2020 (T2)
        For 2018 to 2020 machines with T2, T2 DFU restore with Apple Configurator 2 can clear the EFI password, however it will not remove the iCloud account. iCloud account is bound to the T2 of the machine on Apple servers and cannot be permanently unbound except by Apple. Methods to bypass activation screen thanks to checkm8 exploit exist.

        3.2.4. 2020 and newer (M1)
        For 2020 and newer machines with M1, no publicly known bypass method has been confirmed yet.

        3.3. Asus
        A lot of Asus machines use a standard AMI implementation, and BIOS password can be decoded or cleared from AMITSESetup NVRAM variable. See: https://www.badcaps.net/forum/showpo...55&postcount=2
        Master codes for some dates also exist.

        3.4. Dell

        Dell laptops store the password in EC. However, some generators exist depending on the code suffix.
        See: https://beta.bios-pw.org/ .If the website is offline try: https://web.archive.org/web/*/https://bios-pw.org/
        Note: All passwords must be entered with a US QWERTY Keyboard,you can use a USB one.
        Note: The 6FF1 suffix has a bug,use your service tag with the 1F5A or BF97 suffix instead,Example: 1234ABC-BF97 .
        Note: The list of examples does not include some other suffix codes that do work,such as E7A8 .
        Note: If the BF97 suffix does not work try it with the E7A8 suffix instead.
        Note: There is no publicly available 8FC8 generator available at the moment.
        The CTRL-ENTER-ENTER keystroke after the password only applied to laptops with a suffix (xxxxxxx-8FC8 for example), until Dell also required it in some laptops using System Disable 16-Hex algorithm, on which only the Password+ENTER was needed at first and then in some models you needed the CTRL-ENTER-ENTER to properly delete the system passwords, otherwise the password would remain SET upon the automatic system reboot if just doing Password+ENTER until the proper CTRL-ENTER-ENTER keystroke was performed in certain models.
        Dell 8FC8 Bios Password Patcher https://www.badcaps.net/forum/showthread.php?t=125468

        3.5. Fujitsu-Siemens
        See: https://www.badcaps.net/forum/showthread.php?t=79974

        3.6. HP
        BIOS password is stored in NVRAM in the BIOS. BIOS editing and re-flashing is required.
        You can use the automatic unlocker at: https://www.badcaps.net/forum/showthread.php?t=98539
        Another tool that may also work: https://www.badcaps.net/forum/showthread.php?t=103184

        3.7. Lenovo ThinkPad
        There are mainly 3 methods to unlock ThinkPads and some other Lenovo laptops depending on the generation.

        3.7.1. Password ROM bypass (2012 and older)
        Most ThinkPads from 2012 and older (3rd gen Intel and older) use a 24-series dedicated password ROM. It can often be bypassed during boot by shorting the SDA and SCL pins together.
        Other times, flashing the ROM may be required.

        3.7.2. DXE password bypass driver injection (2012-2018)
        For newer machines (2012-2018, 4th to 8th gen Intel), the password itself is stored in the EC. BIOS must be modified and re-flashed to insert a special driver that will allow bypassing the BIOS password.
        Refer to https://www.badcaps.net/forum/showthread.php?t=87588 and https://www.badcaps.net/forum/showthread.php?t=81573

        3.7.3. Flashing EC (SMSC MEC, 2019-*)
        On the latest generations of ThinkPads, the security issue that allowed to inject the DXE driver and bypass the password does not exist anymore. The password is still stored inside the EC, in a write-only region.
        However, it appears that dumping the EC with a dedicated programmer, erasing it and flashing back can actually clear the password. See: https://www.badcaps.net/forum/showth...t=95736&page=5
        https://www.badcaps.net/forum/showthread.php?t=111439

        3.7.4. Flashing EC (ENE KB9012)
        ThinkPad S1 Yoga 12: https://www.badcaps.net/forum/showpo...4&postcount=19

        3.7.5. Flashing EC (Nuvoton NPCE288/NPCE388)
        ThinkPad X390 Yoga: https://www.badcaps.net/forum/showthread.php?t=117284

        3.8. Microsoft Surface
        Surface Pro 3 passwords are stored in AMITSESetup NVRAM variable and can be decoded from the BIOS dump without any need to re-flash. See: https://www.badcaps.net/forum/showpo...&postcount=139
        Surface Pro 4 and newer cannot be decoded, password must be removed from dump and re-flashed.

        3.9. Panasonic, and some other standard AMI implementation
        Password often can be decoded from the BIOS dump, see: https://www.badcaps.net/forum/showthread.php?t=102275
        Otherwise, AMITSESetup variable can be cleared from the BIOS dump and re-flashed.

        3.10. Toshiba

        3.10.1. Consumer
        A lot of Toshiba consumer laptops have a jumper on the motherboard that needs to be shorted before boot to clear the password.

        3.10.2. Business
        Most Toshiba business laptops do not have a jumper, and the password is stored inside a protected region of the EC. See affected models: https://www.badcaps.net/forum/showpo...2&postcount=19
        Either you need a donor EC without password, or you need to unlock through challenge-response.
        Response generator is not available publicly, however, some generous people may be able to generate a response for you. Ask in this thread: https://www.badcaps.net/forum/showthread.php?t=79489
        Laptop must not be rebooted, the challenge will change.
        Last edited by SMDFlea; 11-05-2023, 08:18 AM. Reason: dell
        OpenBoardView — https://github.com/OpenBoardView/OpenBoardView

        Comment


          #5
          Re: BIOS guides, methods, resources and tools

          4. DMI editing by brand
          DMI editing can be required to restore model number and serial number after flashing a blank dump or rebrand a machine after board replacement.

          Copy DMI info easily with Hex editing software and Macro script: https://www.badcaps.net/forum/showthread.php?p=1214739

          WinKeyFinder - Search for Windows key in BIOS dump: https://www.badcaps.net/forum/showthread.php?t=115044

          4.1. AMI-based standard BIOS (SuperMicro…)
          See: https://www.badcaps.net/forum/showpo...2&postcount=18

          4.2. Acer
          See: https://www.badcaps.net/forum/showthread.php?t=103301

          4.3. Apple
          For 2017 and older machines, serial number is stored in Fsys store of BIOS and can be edited with hexadecimal editor. Fsys checksum needs to be fixed afterwards
          Search for "ssn", edit the serial number, save, open dump in UEFITool, go to the Fsys store and write down the suggested checksum in the panel on the right. Checksum is 4 bytes at the end of the Fsys store, between one zone of 0x00 either Gaid or another zone of 0xFF, it must be written in reverse order (so last 2 characters from UEFITool must be written first).
          See: https://www.youtube.com/watch?v=poA8HByYqTM

          4.4. Asus
          With these tools you can add DMI information, add a MAC address to older generation Asus boards and fix the keyboard backlight not working on newer generation boards.


          4.5. HP
          See: https://www.badcaps.net/forum/showthread.php?t=69204

          4.6. Intel Network Adapters
          Not specific to a board manufacturer but rather to the Ethernet controller on the board.
          If you want to fix the MAC address of some Intel controllers, you can use eeupdate: https://www.badcaps.net/forum/showpo...8&postcount=17

          4.7. Lenovo
          Sometimes you only need a hex editor to edit the DMI,or to copy the DMI to a different bios. Lenovo DMI tools also exist such as LVAR .
          Also some can be edited using the bios update software from the command line,read the bios release notes to find out which ones are supported that way.

          Lenovo IdeaPad C340-15IML/FLEX-15IML/S340-15IML/S340-15IML Touch/S340-14IML Lenovo XiaoXin-15IML 2019/XiaoXin-14IML 2019: https://www.badcaps.net/forum/showthread.php?t=98038

          LVAR: https://www.badcaps.net/forum/showth...64#post1133564

          Lenovo Gold Key U1 Tool: https://github.com/ASparkOfFire/lenovo-u1-tool

          ThinkPad Config Information Update Utility: https://www.badcaps.net/forum/showth...90#post1174090
          Last edited by piernov; 03-02-2023, 04:42 AM.
          OpenBoardView — https://github.com/OpenBoardView/OpenBoardView

          Comment


            #6
            Re: BIOS guides, methods, resources and tools

            5. Clearing NVRAM
            Clearing NVRAM manually from the BIOS can help if NVRAM variables become corrupt and POST does not finish successfully, or BIOS freezes before boot, or when entering Setup.
            Actual process may vary between BIOSes, but blanking the first VSS store inside the first NVRAM area can be enough.
            OpenBoardView — https://github.com/OpenBoardView/OpenBoardView

            Comment


              #7
              Re: BIOS guides, methods, resources and tools

              6. Finding bios update packages
              In order to fix a corrupt BIOS or EC firmware, it may be necessary to find and use an image provided by the manufacturer. Manufacturers rarely provide an image ready to flash, but rather an update file that may
              contain extra data or missing part of the full image. Note that using a clean BIOS like this will lose DMI info.
              All of the major brands provide an official support page.If your laptop or PC originated in your own country go to the country specific support page or region.

              6.1. Major brands
              The current Top 10 brands,listed in alphabetical order.

              6.1.2. Acer
              https://www.acer.com/
              Enter the SNID at the downloads/drivers page.

              6.1.3. Apple

              6.1.4. Asus
              https://www.asus.com/support/
              Laptop - Look for a barcode or QR code on the motherboard for a model number to find the bios
              version the board came with and search at the support site with that model number.
              See: [TUTORIAL] fix asus bios with bios from asus web support https://www.badcaps.net/forum/showthread.php?t=96604

              6.1.5. Dell
              https://www.dell.com/support/home/en-uk?app=drivers
              Enter the service tag.Also look at the configuration that the laptop shipped with - the OS,
              AMT enabled or disabled,Corporate or consumer ME firmware.

              6.1.6. Dynabook (Formerly Toshiba)
              https://dynabook.com/global/en/index.html
              Dynabook has dropped support for many toshiba models.If no bios update is found with the serial
              number search with the short product number instead.

              6.1.7. Fujitsu
              https://www.fujitsu.com/global/support/

              6.1.8. HP
              https://support.hp.com
              See: [Guide] How to find the right HP bios version to flash https://www.badcaps.net/forum/showthread.php?t=122195

              6.1.9. Lenovo
              https://support.lenovo.com
              Enter the serial number and/or model type.

              6.1.10. Microsoft
              Some but not all updates can be found inside the MSI installer drivers package
              See: https://www.badcaps.net/forum/showpo...25&postcount=2

              6.1.11. Samsung
              Samsung do not provide bios downloads at their support pages.
              See: ID Samsung bios from dump and download the official update https://www.badcaps.net/forum/showthread.php?t=88206

              6.2. Other brands
              This list will not be kept in alphabetical order.

              6.2.1. Clevo
              No bios downloads at official support page.
              See: https://www.badcaps.net/forum/showpo...89&postcount=2
              log in with - username repo . password repo

              6.2.2. Gigabyte
              https://www.gigabyte.com/Support

              6.2.3. Intel
              6.2.4. Medion
              https://www.medion.com/gb/service/
              Enter the product number or MSN.Some updates can be found by searching the Medion forums.
              To find bios updates via google search put an x at the end of the model number instead of the
              last number,followed by the word bios.

              6.2.5. MSI
              https://www.msi.com/support

              6.2.6. Schenker & XMG
              https://download.schenker-tech.de/

              6.2.7. Panasonic
              https://pc-dl.panasonic.co.jp/itn/index.html
              https://panasonic.net/cns/pc/

              6.2.8. NEC
              https://www.nec.com/en/global/support/index.html

              6.2.9. Huawei
              https://consumer.huawei.com/en/search/?
              Search by laptop model number then click on support tab.

              6.2.10. ASRock
              https://www.asrock.com/support/

              6.2.11. ECS Elitegroup
              https://www.ecs.com.tw/en/download-center
              Last edited by SMDFlea; 09-07-2023, 02:47 AM.
              OpenBoardView — https://github.com/OpenBoardView/OpenBoardView

              Comment


                #8
                Re: BIOS guides, methods, resources and tools

                7. Extracting BIOS/EC firmware from update packages
                In order to fix a corrupt BIOS or EC firmware, it may be necessary to use an image provided by the manufacturer. Manufacturers rarely provide an image ready to flash, but rather an update file that may contain extra data or missing part of the full image. Note that using a clean BIOS like this will lose DMI info.

                BIOSUtilities: https://github.com/platomav/BIOSUtilities
                • AMI BIOS Guard Extractor
                • AMI UCP Update Extractor
                • Apple EFI IM4P Splitter
                • Apple EFI Image Identifier
                • Apple EFI Package Extractor
                • Apple EFI PBZX Extractor
                • Award BIOS Module Extractor
                • Dell PFS/PKG Update Extractor
                • Fujitsu SFX BIOS Extractor
                • Fujitsu UPC BIOS Extractor
                • Insyde iFlash/iFdPacker Extractor
                • Panasonic BIOS Package Extractor
                • Phoenix TDK Packer Extractor
                • Portwell EFI Update Extractor
                • Toshiba BIOS COM Extractor
                • VAIO Packaging Manager Extractor



                7.1. Desktops
                Retail motherboards can have a full BIOS image or only an update. Pre-built desktops will have DMI info, and mostly only a BIOS update.
                The full BIOS image may be packed into an UEFI Update Capsule. UEFITool with recognize the UEFI Update Capsule and allow you to extract the body in order to obtain the raw BIOS image.

                7.2. Laptops
                For laptops, the manufacturer rarely provide the full BIOS image. The usual procedure is to extract the BIOS region, and if provided the ME region, from the update package, and insert them back into the original dump using Intel FITC. If ME region is not provided, it can be cleaned with one from the win-raid repository at the same time.

                7.2.1. Acer and other Insyde-based UEFI
                See: https://github.com/ISpillMyDrink/UEF...-Tool-(H2OFFT)

                7.2.2. Asus
                See: https://www.badcaps.net/forum/showthread.php?t=96604

                7.2.3. Dell
                AFUDELL: https://www.badcaps.net/forum/showthread.php?t=115830

                7.2.4. HP
                See: [Guide] How to extract ready for programming dump from HP update executable file https://www.badcaps.net/forum/showthread.php?t=121948

                7.2.5. Lenovo
                Phoenix TDK: https://www.badcaps.net/forum/showthread.php?t=80861
                Last edited by SMDFlea; 08-20-2023, 04:01 AM.
                OpenBoardView — https://github.com/OpenBoardView/OpenBoardView

                Comment

                Working...
                X