If it works via JTAG, that would be great. If I understand correctly, some have already tried, but it didn't work.
If it doesn't work, then there are only two options (in my opinion):
1) easier - replace the EC chip
2) more difficult - edit the EC firmware so that it clears the memory block with the password. However, I don't know if the firmware is signed. It's possible that the modified firmware won't even start....
I can't say for 100%, but it seems that in this laptop the password is stored inside the MEC1723N and at the moment the only option to reset the password is to replace this chip.
Hello!
If I understood correctly, there is an update for the ME region on the manufacturer's portal.
In the "Motherboard Devices" section, there is a file "Intel Management Engine Firmware for Windows 11", version 16.1.35.2557.
After unpacking, there are two files with the .cap extension.
Maybe someone can tell us how to extract the region from such a file?)
ps The unpacked region with this version is on the winraid.level1techs.com portal
ps I didn't find this serial number in the dump, and there are no matches on the Lenovo website either.
If I understood correctly, the serial number is stored in the EC
Read from a working device.
I unsoldered two large chips for reading.
I read the third one without removing it from the board.
I read each chip 3 times and the dumps matched (I didn't write the firmware to the chips again for checking).
...
Hello.
Boardview recently appeared on some paid sites
Unfortunately, I don't have enough points to download and share.
I would appreciate if someone shared it.
I flashed the BIOS and, to my regret, the behavior did not change - static consumption of 13V, 370mA.
After a couple of attempts to turn on, I read the contents of the flash IC.
The contents of the large flash IC remained unchanged.
The contents of the small flash IC changed in two places:
1) 72 bytes at address 0x2C2000 (beginning of block = "FCRI")
2) 64 bytes at 0x2C3000 (beginning of block = "FCNT")
Got a response from the forum support with a recommendation to attach the file again - attachments should work. So attempt number 4
ps Initially I tried to add an archive with three files (dump of the first and second flash IC and their combination) - it didn't work.
Then I made an archive with one final file - the attachment can be downloaded successfully....
I also apologize for the long response (in the settings, the option to receive notifications about all events was selected, but something went wrong and I did not receive an email).
ps Looks like there's a glitch on the forum. Many links are not working at the moment.
pss Definitely a glitch. The attachment I just sent can't be downloaded....
The laptop responds to the power button, the indicator next to the button starts to light, but there is no video.
The hub starts to heat up a little.
A small inspection showed that all power supplies are raised, except for VCC_CORE and VCC_GT - there is no exchange on the SVID bus between RT3624BE and the processor.
Power consumption from a laboratory power supply (when connected instead of a battery) is 13V, 370mA....
Leave a comment: