Lenovo T450 supervisor password reset


Rendering Error in layout Widget/Social: Call to a member function exists() on null. Please enable debug mode for more information.
More
5 years 10 months ago #9798 by ChrisMe
Hello the community,

Is there someone here understanding the big picture of the protection that have the Lenovo T450 bios?
Beside asking for money for a unlock (like @vnn567 partial unlock for 55$), can we discuss technical details of this?

It looks like the T450 has a Winbond 25Q128FVSQ (or variant) 8P/SOIC flash memory that holds the BIOS data.
This BIOS flash memory integrity is protected by a TPM chip that holds its checksum.
There is an other component "MEC1633L secure eeprom" that seems to hold the supervisor password as well as certificates.

According to allservice.ro , they will inject a UEFI program that will "read MEC1633L secure eeprom, reset the SVP and certificate, write the secure eeprom, then reset TPM and de-activate Computrace (if active) and set the correct checksums".

Any other information?

Thanks for sharing,

Please Log in or Create an account to join the conversation.

More
5 years 10 months ago #9801 by Mafioso3
Interested...

Please Log in or Create an account to join the conversation.

More
5 years 9 months ago #9924 by niceman123
I can unlock for 30$.

Please Log in or Create an account to join the conversation.

More
5 years 9 months ago #9973 by vagaras

ChrisMe wrote: Hello the community,

Is there someone here understanding the big picture of the protection that have the Lenovo T450 bios?
Beside asking for money for a unlock (like @vnn567 partial unlock for 55$), can we discuss technical details of this?

It looks like the T450 has a Winbond 25Q128FVSQ (or variant) 8P/SOIC flash memory that holds the BIOS data.
This BIOS flash memory integrity is protected by a TPM chip that holds its checksum.
There is an other component "MEC1633L secure eeprom" that seems to hold the supervisor password as well as certificates.

According to allservice.ro , they will inject a UEFI program that will "read MEC1633L secure eeprom, reset the SVP and certificate, write the secure eeprom, then reset TPM and de-activate Computrace (if active) and set the correct checksums".

Any other information?

Thanks for sharing,


check link below

bios-fix.com/index.php?forums/bios-password-recovery.5/

Please Log in or Create an account to join the conversation.

More
5 years 9 months ago #10026 by KingBonecrusher
1) MEC1633L has 2Kb area you cannot read or write by any programmer. There is the nice stuff, like password and serial etc. This area is only writeable trough spi interface, and hello dxe driver...
2) yes, correct... EVERYBODY uses the allservice stuff and sells it...

I say, take a look at a patched bios and the rest are peanuts to get a working solution to unlock ;-)
The following user(s) said Thank You: kimrocco

Please Log in or Create an account to join the conversation.

More
5 years 6 months ago #10476 by stojke

KingBonecrusher wrote: 1) MEC1633L has 2Kb area you cannot read or write by any programmer. There is the nice stuff, like password and serial etc. This area is only writeable trough spi interface, and hello dxe driver...
2) yes, correct... EVERYBODY uses the allservice stuff and sells it...

I say, take a look at a patched bios and the rest are peanuts to get a working solution to unlock ;-)


If it is so peanuts why don´t you provide us with an solution or resource?

Please Log in or Create an account to join the conversation.

More
5 years 6 months ago #10490 by KingBonecrusher

stojke wrote:

KingBonecrusher wrote: 1) MEC1633L has 2Kb area you cannot read or write by any programmer. There is the nice stuff, like password and serial etc. This area is only writeable trough spi interface, and hello dxe driver...
2) yes, correct... EVERYBODY uses the allservice stuff and sells it...

I say, take a look at a patched bios and the rest are peanuts to get a working solution to unlock ;-)


If it is so peanuts why don´t you provide us with an solution or resource?


Why should I? To feed pigs?
The following user(s) said Thank You: drgn997

Please Log in or Create an account to join the conversation.

More
5 years 6 months ago #10492 by drgn997
You couldn't have said that in a more clever way!! LOL

Please Log in or Create an account to join the conversation.

Moderators: token.paul

Who's Online

We have 460 guests and no members online

N00BZ

  • ljamal
  • ljamal74
  • mikeg2atest
  • ducchinhbui
  • anjarezt

Cookies