Hi
I have a NM-D011 (E14 Gen2, Intel) board that's stuck in a boot loop. My findings:[LIST][*]the board consumes around 1.5 - 2W (~0.1A)[*]there is continous coil whining[*]all main power rails are active[*]there are no clock signals, especially eSPI (although I haven't checked the XTAL and RTC crystals because I don't know how to)[*]+VCCIN is 0v, none of the CPU power rails are below 40Ohm to ground[*]the controller providing +VCCIN (PU8/RT3612EG) isn't enabled[*]neither the enabling signal (EC_VR_ON) nor the power rail pulling it up (+VCCST_CPU) are there[*]no other parts seem...
theBread
Member
Last Activity: 05-29-2025, 03:10 PM
Joined: 04-16-2022
Location: Frankfurt / Main
-
Hi ^^
I have a E14 Gen2 that boots, but then throws [CODE]0183: Bad CRC of Security Settings in EFI variable.[/CODE]
I cannot continue booting and entering the BIOS prompts for a supervisor password that probably doesn't exist. Entering the BIOS anyway by using [URL="https://www.badcaps.net/forum/troubleshooting-hardware-devices-and-electronics-theory/troubleshooting-laptops-tablets-and-mobile-devices/bios-requests-only/3237235-lenovo-thinkpad-ec-pwd-bypass"]maxpowers EC bypass method[/URL] and emptying the supervisor password doesn't result in an update notification... -
Hi ^^
I'm trying this bypass (after succeeding on an L580 and X390 Yoga, thanks for that
) on an E14 Gen2 (NM-D011, should be the same as the E15) by shorting ESPI_IO1 (pin 9 of the IT8227) to ground, but several issues occur along the way:[LIST][*]Upon boot I get [CODE]0183: Bad CRC of Security Settings in EFI variable.[/CODE][*]Upon reseting the Supervisor password in the BIOS I get [CODE]Failed to save storage: LenovoSecurityConfig. Status: Time out.[/CODE][*]An EATA error occurs if the reboot after the BIOS succeeds (sometimes fails as well, display stays black)[*]Shorting to...
Leave a comment:
-
Success with LPC_AD2 - thank you very much! It seems that different pins have different symptoms when the timing is bad. Also, it seems to be a "good" sign if most of the machine metadata (like board UI, SVP etc.) is corrupted during the procedure - it announced to cancel the POST task, but I could type F1 and get to the BIOS anyway (just don't save the BIOS in that state!). It also may happen that you partially success and get access to a "harmless" part of the BIOS with less settings, but that's not the interesting part
Sorry for dumping the whole process,...Leave a comment:
-
Ah well ok, my bad, didn't catch that part. Will try the bypass, thank you for pointing it out ^^'...Leave a comment:
-
[QUOTE=SMDFlea;n3637552]
Is your motherboard model number[B] LTS-2 MB 17812-1
Nope, at least that is nowhere on the board. If I look that up I only find boards for the [B]T[/B]580. Did you get that number from the dump?
One additional identifier I can provide is [B]NM-B461[/B] or sometimes just [B]NM-B46[/B] if it helps.
Thanks in advance
[QUOTE=SMDFlea;n3637552]
Is your motherboard model number[B] LTS-2 MB 17812-1
Nope, at least that is nowhere on the board. If I look that up I only find boards for the [B]T[/B]580. Did youLeave a comment:
-
Hey
I've got an L580 with locked BIOS - as far I've seen in the [URL="https://www.badcaps.net/forum/troubleshooting-hardware-devices-and-electronics-theory/troubleshooting-laptops-tablets-and-mobile-devices/bios-requests-only/3237235-lenovo-thinkpad-ec-pwd-bypass"]EC bypass thread[/URL] the password is not stored in the EC itself or at least not as easily bypassable as with other ECs, so I'd be really happy if someone could unlock the attached dump
Also, are there any ressources I can refer to to learn something like that myself and help others as well? Is there...Leave a comment:
-
Hey, yeah, that's the file above called TPS65988.zip. It [I]should[/I] work as I've now discovered that my board boots when I use just a little force on the standard USB-C port - good luck
Edit: Read that you're search for thunderbolt firmware - not entirely sure, but that chip stores the PD controller firmware if I correctly understand the schematicsHey, yeah, that's the file above called TPS65988.zip. It [I]should[/I] work as I've now discovered that my board boots when I use just a little force on the standard USB-C port - good luck
Edit: Read that you're searchLeave a comment:
-
Hi, small update - I just remembered that I have one of those usb c voltage/amperemeter so I decided to plug that in an check the ports for fun and games.
I plugged it in with just a little bit accompanying force and voila, 20v, fan spin and POST. My next steps will be to replace that port and then continue debugging the thunderbolt issue (which may be a bit harder because lots of "source rails" for other rails seem to be missing). I will post my results here just in case other people find this useful.
If someone happens to try this as well, please stay aware that...Leave a comment:
-
TBT_EE_CLK in diode mode measures .791 and is not shorted.
+1.8VALW is indeed a stable 0v - according to the schematics it depends on +5VALW (via PU801), which is 0v as well.
Btw the whole B+ rail (which itself depends on VSYSTEM2 according to schematics page 97) is 0v as well, which explains why +5VALW is 0v.
I think I'll have a look at those, but I'm still unsure as my repair knowledge is still pretty limited ^^'Leave a comment:
-
Thanks for your quick answer
Some measurements so far:[LIST][*]VCC3_LDO_PD is 3v3 as expected[*]the CCx are not shorted (up to the point where they enter U4501), CC1 is 1v6[*]PP_CABLEx is 0v as 5VTPC is created somewhere later on after VSYSTEM2[*]U4502 is powered, DO pin is high - CS and the clock however are 0v (altough I suspect that the clock is simply not measurable that way)[*]SPI_MISO is the only SPI pin that is high on U4501, LDO_1V8[*]TYPEC_VBUS20 is 5.2V, USBC_VBUS20 (again) 0.3V[/LIST]
Is there a way to safely verify that the PD firmware is not loaded? My...Last edited by theBread; 05-11-2025, 11:48 AM. Reason: Didn't have a dump ready and didn't want to spam the threadLeave a comment:
-
5V only on EL580 NM-B461
Hi 😄
I have a NM-B461 board that doesn't boot up.
Current observations:[LIST][*]The board has no obvious damage, corrosion or previous tempering[*]I measured the voltage on the TYPEC_VBUS20 and USBC_VBUS20 lines (which are the rails that get powered first according to the [URL="https://www.badcaps.net/filedata/fetch?id=2113081"]schematics[/URL]) - the dock port measures 5V and the direct port 0V.​[*]USBC_VBUS20 (the rail from the direct port) measures 0.3V when powered via the dock port?! There is no short between those lines tho and there is no connection in... -
Hello
I've got a T440P that beeps five times upon booting, the screen stays black as well. I've dumped the BIOS and cleaned the ME region according to the instructions, but the issue stays the same. Another thing that confuses me is that the CPU and RAM gets warm, so it seems that something is actually happening.
The mainboard I'm using is a replacement so I can only give you the values of the decoded data matrices on the stickers:
S/N: 28D24459A3F9
Type: VILT2 NM-A131
I'm attaching my BIOS dumps as well as the output file from Flash Image...Leave a comment:
-
Hello
My name is Fabio and I'm a computer science student from Germany. The computer science part is my professional interest so to say, but I love playing around with microelectronics and repairing stuff like laptops and giving them another chance.
Have a nice day everyone
Leave a comment:
No activity results to display
Leave a comment: