Panasonic Toughbook CF-H2

My Current Project is A Panasonic Toughbook CF-H2

The main issue is the bios is locked and the Lan, Wireless Lan, Com port and Usb are all disabled, I managed to get windows on it by doing a pre-build on a fresh hdd and installing the many drivers after Tracing the hardware ID's, the Bios goes to read only in windows making most bios tools useless

Panasonic CF-H2AKABEDE
AMI Bios v1.00L14
25L6406e Eeprom

I have a Eeprom dump - If some one can point me to the address or help me remove the password that would be much appreciated

Dump the 6405e with a Pomona clip and upload here

I did clip the chip in board but it wouldn't read, so I ended up pulling the chip

www.sendspace.com/file/tgodse

I'll have a look at it.

Often times when you're attempting to read these chips in place, your programmer suffers a voltage drop trying to power ancillary components on the same rail.

To avoid the hassle of pulling the chip (if it's a hassle for you (- I always power on without ram installed. This will usually power all circuitry, but nothing will initialize (or lock the EFI rom for that matter) allowing you to connect your programmer and transact. You should pull the vcc but leave ground connected.

Anyway, I'll download that dump and see about yanking the password when I get home

No hassle as I have smd rework equipment Also in this machine the board has loading on both side and so-dimm sockets on both sides so you have to unscrew the heat sink/heat pipes and remove the whole frame with the board attached then, unplug the 4 flex cables then you can remove the board

The eeprom is on the top side of the board so easy access, had a poke around the eeprom dump and come across the nvar locations, also had a look at the .bin using the ubu tools (Backup of the dump)

panasonic tough(to work on)book. lol

i'm trying to locate a clean bios to compare to.
easier said than done.

i extracted the v2.0 firmware update files from panasonic, but it only includes a bios patch, not a full write /-;

i've currently loaded the (locked) bios into IDApro to see if i can't learn something new.

I have hunted around for a bios but can only find updates for the mk 2 and 3, Panasonic are ....... erm well useless, i have found a unlocked chip but they want way to much USD

yes once, due to serious time constraints, i ordered a preprogrammed chip off eBay for $40. what a raping. i ordered 25 blanks from arrow for $.70 ea.

i'm still fussing with this dump, will let you know what i find

Not sure if this of any use but I have a IFR text dump from the setup section of the bios (read with MMtool Aptio)

Possibly useful. I have several chunks of the bios from expanding the firmware update, but this hasn't got much in common with Apple efi

Having a look at the text, it wouldn't be as easy as changing the variable ? would it

unfortunately not. i've searched the bios in both raw ASCII and in decompiled hex for all the usual suspects, but have found nothing.

when decompiling the hex, all variable names are lost. if we could locate a clean dump, we could probably find that data and reference that offset in your locked bios... therealjayvi does more work with PC laptops than i do, and i'm trying to bring him in.

well actually yes, it would be as easy as changing that, if we could find it (-;

i have managed to find fingerprint setup... still slugging away at it

A little set back this afternoon a pin dropped off the eeprom, just ordered a few new ones, having a poke around at a Panasonic dump of similar age one unlocked the other locked it seems most of the settings are at the top of the bin, I may of tracked down a unlocked bin file but I need to wait due to time zones etc.

ooh. can you provide the board model for your laptop?

Sorry for the late reply as I have been waiting on parts

I got hold of a unlocked bios for a few $$ - unlocked, no serial and no model

I also Picked up another CF-H2A And did it the other way

1. remove hdd and batteries
2. remove all the screw covers minus the centre one in the handle and remove all the screws
3. Open the LAN port cover and remove the 2 screws -the cover then lifts away
4. remove the 2 screw on the hdd bay and the ones hidden behind the battery door
5. lift off the back cover

6. undo all the screws on the shield that covers the main board (note the are 2 screw on the left where the lcd plugs in
7. put the batteries back in and using a magnet or one of the batteries doors hold it against the hall effect sensor (each battery door has a hall effect sensor)

8. Power on holding the key and power buttons until you get the password screen
9. clip the 25L6406E eeprom (located by the so-dim socket this usually has a paint mark on it) pin 1 is marked by a dimple
10. Detect and read the chip (save if required) Erase the chip and write the bin file

remove the clip and batteries, test before reassembly

that's great news!

did you get the original machine up and running?

i'd love to see the dump from the clean model

The bin file is on my main PC so I cant do it at the moment

yes both machines are working but I did lift 2 tracks what I need to repair with a bit of 30 awg wrap wire on the first machine

fun stuff. did you ever figure out the bios? or just write the clean one you acquired?
i'm still interested in learning a little bit hehe.

whenever you can, either attach here or email it to me.

thanks!
good job!