Re: Unlock SVP Lenovo Thinkpad T14 Gen2

Found some info claiming that MEC152x is a recommended replacement for 150x and the corresponding spec is [url]https://cdn.badcaps-static.com/pdfs/7898a592a0cfbc0c90036b690ab72918.pdf[/url].
According to it, MEC1523 has 2KB of EEPROM and it is likely that the password is stored in there if MEC1503 also has it.
I guess the old spec that I found before was written before MEC1503 was released, that's why it is not mentioned in there.

On the investigation side, I connected my JTAG controller based on FT232H and played...

Re: Unlock SVP Lenovo Thinkpad T14 Gen2

Well, SRAM usually means static RAM, though I might be wrong. My guess it is used to copy code from the flash for speedy execution and for program variables etc. I doubt that it is suitable to store information across power cycles.

Re: Unlock SVP Lenovo Thinkpad T14 Gen2

I managed to find the datasheet:
According to it, MEC1503 does not have embedded flash at all.
I see couple of flash chips that are connected to MEC: U2201 (W25R256JVEIQ) and U2202 (MX25L25673GM2I). Both of them are in WSON8 package, so it will be tricky to read/write to it.

Re: Unlock SVP Lenovo Thinkpad T14 Gen2


Could you please share some details? Especially, what programmer you were using and what MEC chip you selected in there?
I use RT809H and finally was able to get some output from the MEC. Sometimes the expected ID shows up right on the first read attempt, but it is always wrong on the subsequent ones and after 3-5 reads it shows up as 0 and stays that way no matter how many times I try to read or reset. I have to recycle power to get a non-0 ID and even if I do that, it is not always the right one.
I removed R4313 to...