ThinkPad x395 attempt at password removal

[siddiq]

Did some experimenting to try supervisor password removal ... initially laptop has supervisor password and no computrace. I erase IT8186VG controller, it self-reprograms upon booting with serial number errors and supervisor password is gone but to my surprise computrace automatically activates ... I program a clean bios file downloaded and cut from website and upon booting, self-healing activates and upon checking setup, password still gone but computrace remains activated ... I write back backups of both Bios and EC and things are back to normal, that is supervisor password is back and computrace is off... I also noticed that removing UL5 (MX25L80) from the motherboard stops Bios self-healing so that's probably where backup is stored. So long story short, I'm back to square one ... anybody had success unlocking? I think the whole secret lies in the EC firmware ... still can't wrap my head around what's causing the computrace to activate ...

[volinakis]

Re: ThinkPad x395 attempt at password removal

Did some experimenting to try supervisor password removal ... initially laptop has supervisor password and no computrace. I erase IT8186VG controller, it self-reprograms upon booting with serial number errors and supervisor password is gone but to my surprise computrace automatically activates ... I program a clean bios file downloaded and cut from website and upon booting, self-healing activates and upon checking setup, password still gone but computrace remains activated ... I write back backups of both Bios and EC and things are back to normal, that is supervisor password is back and computrace is off... I also noticed that removing UL5 (MX25L80) from the motherboard stops Bios self-healing so that's probably where backup is stored. So long story short, I'm back to square one ... anybody had success unlocking? I think the whole secret lies in the EC firmware ... still can't wrap my head around what's causing the computrace to activate ...

What programmer did you use to erase IT8186VG?

[siddiq]

Re: ThinkPad x395 attempt at password removal

Svod 3

[volinakis]

Re: ThinkPad x395 attempt at password removal

I also have a X395 with password, I did try to unlock it with RT809H but no luck. I set up lines as in schematics, I used a 24pins FFC cable but I get "failed to enter the ISP status". UL5 is linked with ethernet controller, I erased it and nothing happened, no bios recovery, all DMI data shows in bios, so...
Maybe someone with more experience take a look and tell me what I did wrong or if RT809H is able to read IT8186VG. 24pins FFC cable I used is B-type - reverse contact.Thank you.

[volinakis]

Re: ThinkPad x395 attempt at password removal

Svod 3

your X395 is with Ryzen? if it is I found a solution to full unlock, by patching bios - mine has a 25q128fw 1.8V.

[dimah77]

Re: ThinkPad x395 attempt at password removal

your X395 is with Ryzen? if it is I found a solution to full unlock, by patching bios - mine has a 25q128fw 1.8V.

can you share this patching solution bro ?

[rbvndonh]

Re: ThinkPad x395 attempt at password removal

your X395 is with Ryzen? if it is I found a solution to full unlock, by patching bios - mine has a 25q128fw 1.8V.

please share solution

[volinakis]

Re: ThinkPad x395 attempt at password removal

please share solution

post your bios dump

[soulcoder]

Re: ThinkPad x395 attempt at password removal

post your bios dump

Hi. i have problem with x395.

Originally, the bios dont boot and play melody error. I dump the bios (Orinal.bin) and flashed one new. NOw when i boot up, asked for a password. I try patch the new bios with lenovo bios auto-patcher but i get melody error....


can u help me?

[ytsoc]

Re: ThinkPad x395 attempt at password removal

your X395 is with Ryzen? if it is I found a solution to full unlock, by patching bios - mine has a 25q128fw 1.8V.

hello,

i have the same: x395: ryzen +128FW can you help?

[volinakis]

Re: ThinkPad x395 attempt at password removal

hello,

i have the same: x395: ryzen +128FW can you help?

try this and follow the steps:
[ HOW TO USE THE PATCH ]
STEP 1: Flash and replace current BIOS with the generated patch file
STEP 2: Boot the machine
STEP 3: Press ENTER/F1/etc. to enter BIOS settings
STEP 4: Enter any character when asked for Supervisor Password
STEP 5: Press enter when it shows Hardware ID
STEP 6: Press space bar 2x when asked
STEP 7: Turn off machine
STEP 8: Restore original BIOS
STEP 9: Reset BIOS settings to factory default

[ NOTES ]
When booting the patched BIOS you might have to:
- Hold the anti-tamper switch down the whole time (use tape)
- Remove the hard disk or replace it with a locked one

[volinakis]

Re: ThinkPad x395 attempt at password removal

Hi. i have problem with x395.

Originally, the bios dont boot and play melody error. I dump the bios (Orinal.bin) and flashed one new. NOw when i boot up, asked for a password. I try patch the new bios with lenovo bios auto-patcher but i get melody error....


can u help me?

try this and follow the steps:
[ HOW TO USE THE PATCH ]
STEP 1: Flash and replace current BIOS with the generated patch file
STEP 2: Boot the machine
STEP 3: Press ENTER/F1/etc. to enter BIOS settings
STEP 4: Enter any character when asked for Supervisor Password
STEP 5: Press enter when it shows Hardware ID
STEP 6: Press space bar 2x when asked
STEP 7: Turn off machine
STEP 8: Restore original BIOS
STEP 9: Reset BIOS settings to factory default

[ NOTES ]
When booting the patched BIOS you might have to:
- Hold the anti-tamper switch down the whole time (use tape)
- Remove the hard disk or replace it with a locked one

[ddhlawi]

I have X395 bios password Can one help me

[SMDFlea]

I have X395 bios password Can one help me

Post the serial number...

RULES UPDATE for BIOS requests/offers AVOID BANNING, READ BEFORE POSTING
https://www.badcaps.net/forum/troubl...ng?t=103570

[ddhlawi]

SN : PC-1KRJZK

[ddhlawi]

Hi
I tried auto patcher with my x395 rayzan 5 but no display and play Melody

Think pad X395
CM : FA391/FA491 NM-C181. RÉV : 1.0
S/N : PC-1KRJZK
MTM : 20NM-S1U800

[volinakis]

Hi
I tried auto patcher with my x395 rayzan 5 but no display and play Melody

Think pad X395
CM : FA391/FA491 NM-C181. RÉV : 1.0
S/N : PC-1KRJZK
MTM : 20NM-S1U800

try this bios and follow steps described in autopatcher

[ddhlawi]

try this bios and follow steps described in autopatcher

I follow all steps ok
but when i programmes it originally no display .After minutes i turne off forcément.
Now no allumage no charge.
There IS 5v 3.3v 1.8v and 3.3 in thé Betton on off

[volinakis]

so, patched file worked and you were able to unlock it. And when you put back original file laptop doesn't turn on, right? Check soldering and if your chipset is MX25L128 change it with a winbond W25Q128.

[ddhlawi]

the same problem

[Mitolamito]

Hello everyone.
I am new member Mitolamito.
I would like to offer my one tip on this issue that has been stagnant for 5 months now.

I am a Thinkpad X395 user with Bios Lock applied.

I have been trying to unlock this ThinkPad for about 2 weeks now, but have been unable to solve the problem.

The tools I used are.
Lenovo auto patcher
Uefi Play-ground
HxD
Uefitool... etc.

Today I decided to edit the EC chip and give up if it doesn't work.
Since I was in the middle of the last work, I removed the Cmos battery and wrote the original BIOS back to the chip.

Then what do you think? Instead of the dreaded key symbol, the Entering Setup.... appeared on the screen. Fortunately, I was able to enter the BIOS.
Immediately I turned off all BIOS passwords, rebooted, and successfully launched Windows 11!

However, this was a complete coincidence. In fact, I had no idea what I had just done to bring about this result.

More however, one thing is for sure: there is possible that you can also unlock BIOS of X395 without an EC programmer like Vertyanov.
I did not use an EC programmer this time.

I'm tired of typing long sentences, so I'll stop here first.
In my next reply, I will itemize the main tasks I did.

[3mz3t]

volinakis I also have a t495s laptop with a supervisor password set (I know this thread is for X395, but it's the same motherboard).

Can you please patch the attached bios dump for me so that I can try your method? S/N PC-1HF898

Thanks.