Hi everyone,

I want to provide a technical summary of everything I’ve tried so far on this HP Elite Mini 8 G1a (AMD Ryzen 3 210) to see if any expert can point me in the right direction. It seems the standard patching methods are being defeated by the new EC/PSP security synchronization.

Current Status & Failed Attempts
1. Automated Patching: Tried HP G9 Unlocker V3.0 on the 32MB U19 dump.
• Result: Password still active. The tool likely doesn't support this 2025/26 offset yet.

2. Manual Patch (attempt 1): Flashed a modified U19.
•...

Hi marian4474 (and everyone else following),

Thank you for the file and the instructions. I followed your steps exactly (kept the CMOS battery connected, let the original BIOS POST, and then flashed your modified file to the U19 chip).

As you predicted, the machine only rebooted once. However, the password is still there.

This time, the previous "EC Identity Data" error is gone. Instead, the machine throws a new, specific HP Sure Start error screen. Here is the exact message:

"HP Sure Start Recovery: HP Sure Start detected an unauthorized...

Hi everyone,

Just a quick follow-up to reinforce this request. All technical details, serial numbers, and the original dumps are already provided in the previous posts of this thread.

shiyab
Vesko356
peste
hoaca388
SMDFlea
rethink

If any of you could spare a moment to help me with this HP G9 BIOS, I would be extremely grateful.
​
Thank you for your time and assistance!...

Hi shiyab ,

Thank you for your help and for providing the file. I have just finished testing it, but unfortunately, the password remains active.

I performed the tests in two ways:
With the U68 shunt (bypass): The password was still there.
Without the shunt: The result was exactly the same.

In both scenarios, the machine triggers the following warning during boot: "BIOS Identity Data Recovered: The BIOS has recovered its identity data from the Embedded Controller due to data mismatch."

It seems the EC is detecting the modification...

Hi shiyab,

Thank you so much for the modified file! I really appreciate the time and effort you put into patching this for me.

I will flash this file to the U19 chip and test the machine today.

Just one quick question before I proceed: since this is an "unss" patched file, can I just boot the PC normally to the BIOS after flashing the U19? Or do I still need to perform the physical shunt/short on pins 2 and 4 of the U68 NAND chip during the first boot to bypass the Sure Start check?

I will let you know the results as soon as I test...

Hi shiyab,

Thank you for your patience while I performed the hardware analysis and data extraction.

I have completed the dumping process for both the U19 (32MB Macronix) and the U68 (128MB Macronix NAND). To ensure 100% data integrity, I performed three separate read passes for each chip. I am pleased to confirm that all three hashes (MD5) match perfectly for both chips, so the attached dumps are verified and reliable.

Regarding your request for a 16MB chip: I have meticulously inspected both the front and back of the motherboard and there is no 16MB SPI...

Hi shiyab, thanks for replying!

By "both", do you mean the U19 dump and the U68 dump? Or do you mean the Original U19 dump and the G9 Unlocker modified dump?

​If you mean the U68 chip, unfortunately, I cannot read it right now because it is an SPI NAND (MX35UF1GE4AD) and my basic CH341A programmer (with NeoProgrammer) doesn't seem to support it. That is why I am currently bypassing the U68 using the hardware shunt method.
​
However, if the U68 dump is absolutely necessary to clear the password, do you know of any alternative software or trick...

Hi everyone,

My name is Ricky and I'm a repair technician/enthusiast. I've been learning a lot from this community and have successfully done some basic BIOS unlocks in the past, but this particular modern HP model is giving me a really hard time!

I need some help manually removing the BIOS administrator password from this machine.

I have already tried using the "HP G9 Unlocker V3.0" on my 32MB dump. I successfully bypassed the U68 Sure Start chip (SPI NAND) by isolating Pin 8, preventing the auto-recovery. The machine boots and bypasses Sure Start,...