T14s - MEC-1663 - Jtag - Pinout - Bios Password Removal

[Andromedus_81]

Hello
Does SVOD 4 read MEC EEPROM without JTAG? If not, what board do I need to buy for SVOD to do JTAG? Thanks

[elle24]

you need to find schema or boardview and check that the card manages LPC.
If Espi it is not possible.
read the different pages on this thread to have more information

the password is contained in npcx997
maybe someone here has already tried but found nothing

How can i read the npcx997 chip, please tell me the name of the programmer ?

[Young Man]

I have successfully read EC rom before. But recently when connecting ok, but reading error "Buffer area is empty, click OK to continue save as empty file". Has anyone encountered this error? How to fix it?
Thanks,

[dewako]

Hi.
I Have 4th Gen X1 Thinkpad Yoga type=20QG
i use SVOD-4 i replaced 10k Resistor,JTAG Wire connection also correct but giving me following Error.
can someone Help me Please.

MEC IDCODE: B1240020
Device ID: 0
Device Revision: 0
Device Status: 0
Flash Status: 0000000000
Boot Block in not protected mode
Flash Configuration: 0000000000
MECxxxx series in protect mode, work mass erase only

[elle24]

Dear sir, how can i find out if mine has ESPI or other, just tell me the method ?

[elle24]

Thank you for reply dear sir, but can i just get a chip reader and read the entire npcx997 chip, the big one?

And

Where can i find the schematics or board view for this model, please help me ?

Thanks

[Maxpower3]

Dear Sir M.X.P please see my pictures and help me ?

Thank you
Regards
Elle

you need to find schema or boardview and check that the card manages LPC.
If Espi it is not possible.
read the different pages on this thread to have more information

the password is contained in npcx997
maybe someone here has already tried but found nothing

[elle24]

Dear Sir M.X.P please see my pictures and help me ?

Thank you
Regards
Elle

[elle24]

Hi, please help me, i forgot my bios supervisor password on my new Lenovo T14s Gen 4 AMD Ryzen 7 Pro,

Please tell me where is the bios chip to reset here from my pictures, where is the Jtag and what should i shorten together here, which pins, please tell me ?

See my motherboard in pictures attached and tell me what to do please !

[adamgouadma]

Here is all the info you should need to remove bios password from your same model or one with an MEC-Chip and also write back the config data

T14s - MEC-1663 - Jtag - Pinout - Bios Password Removal

Thanks

[jomerfx28]

Please share the bios file you used.

laptop now is in dead stage, so i just need to flash the bios, not the mec? from that t490 bios?

Since no one has responded to my inquiry, i will give the direct solution on the said dead programming issue and this will erase the supervisor password.

1. Erase MEC1663 using MEC1633 256K
2. Flash the MEC1663 with the file i'll attached, this was taken from here also from rex98
https://www.badcaps.net/forum/troubl...nd-t490s/page3
3. Flash back the original bios or whatever bios you have save before on the 8 Pin Bios chip
4. Return the 10k resistor to its place
5. Plug-in charger - you will get some error codes 1 to 3 kinds, the solution for that is to used the Lenovo maintenance utitlity
6.Using the Gold key - https://github.com/ASparkOfFire/lenovo-u1-tool
reference here - follow the steps on the github website - specially on the updated procedure
https://www.badcaps.net/forum/troubl...tools?t=103526
7. On the lenovoUone menu. choose option1 and enter details like this - reference from Dan20701

(01) Sample in adding your Serial Number.

Put, 1S, In front, Then the, Type from the sticker, 20NY S11B00, Then the Serial Number, PC1BBS4M

1S 20NY S11B00 PC1BBS4M (No Spacers)

(02) Set the Laptop Name, ThinkPad T490s

(03) You will find an option to assign UUID which will automatically update the system board serial number.

[Alassane]

Hello, I need advice regarding ec programming mec1723, lenovo t14s gen4 nm-f151 rev 1.0 which has a password I got its boardview and datasheet from mec172x and also identify the points (tms, tdo, tck , tdi) its jtag enable point with the resistor. but I have an rt809h programmer which cannot read because its database limits mec16xx. so can you give me some advice please?

[volinakis]

Please erase this procedure instead. as its not helpful. thanks

If you are not able to understand what it is about doesn't mean "this procedure ... its not helpful" ...

[volinakis]

This method also works if I don't have a BIOS password in it, but I have Secure Boot on through Grub 2.02, which is password protected. I can't turn off Secure Boot in the BIOS.

you have to turn off Device Guard in Security ...

[jomerfx28]

Here is all the info you should need to remove bios password from your same model or one with an MEC-Chip and also write back the config data
T14s - MEC-1663 - Jtag - Pinout - Bios Password Removal
Coolshrimp

Please erase this procedure instead. as its not helpful. thanks

[jomerfx28]

I am posting my experiences here to help the next person who may find this not so easy.

I have a rt 809h programmer that i intended to use to remove the sv password and bios password from a lenovo T490s laptop 20NY-sv3n00. this is a Gen 8 laptop i5 processor.

in the rt809h software you MUST select MEC1633_256K (do not select MEC1633#ISP) for your initial read out.

if you select the wrong one and read the file out and erase the chip you will not have the complete file and will be unable to re flash the chip. it will not work. I learned this the hard way. when i initially tried in the way the board leds would not light up and it appeared I bricked the chip. and board. Nothing would work, it would not boot, no fans, nothing.

to solve this i found a generic bios file from a t490 and tried to flash this bios file into the chip after switching the rt809h software to MEC1633_256K. once i did this i was able to get the laptop to boot back up after i moved the resistor back to its original position.

Please share the bios file you used.

laptop now is in dead stage, so i just need to flash the bios, not the mec? from that t490 bios?

[Maxpower3]

Everythings works as described above. I set the serial number and model and now it asks for last 4 digits of keyboard language ID. Any idea for international US or UK?

[Keyboard]
1009=Canadian French (058)
0401=Arabic
0813=Belgian
0416=Brazilian Portuguese
0402=Bulgarian
0c0c=Canadian French ACNOR
0405=Czech/Slovak
0406=Danish
0409=US English
0425=Estonian
8409=US English International
040c=French
9009=Canadian French English
0407=German
0408=Greek
040d=Hebrew
040e=Hungarian
040f=Icelandic
4009=India English
0410=Italian
0411=Japanese
0412=Korean
080a=LA Spanish
0414=Norwegian
8406=Nordic
0816=Portuguese
0419=Russian
0424=Slovenian
040a=Spanish
040b=Swedish/Finnish
0807=Swiss
0404=Traditional Chinese
041e=Thai
041f=Turkish
841f=Turkish-F
0809=UK English
0422=Ukrainian

[nistel]

Everythings works as described above. I set the serial number and model and now it asks for last 4 digits of keyboard language ID. Any idea for international US or UK?

[jomerfx28]

Here is all the info you should need to remove bios password from your same model or one with an MEC-Chip and also write back the config data
Coolshrimp

Followed this guide.

Read
Erase
removed power
write dump back

now the device is unresponsive, or no power at all. charger still indicated 20v

[SMDFlea]

bios şifresini kaldıramıyorum yardımcı olursaıs sevinirim (I can't remove the bios password, I would appreciate any help.)

Off topic, post your request here -> https://www.badcaps.net/forum/troubl...-bios-password .Also read the rules please,you must post the laptop serial number with your request -> https://www.badcaps.net/forum/troubl...before-posting