HP EliteBook **70 Series BIOS Password Reset [Util Test]

Discussion in 'BIOS Mods' started by Mazzif, Sep 12, 2014.

Page 21 of 28

Asw MDL Novice

Nov 20, 2019

17

2

0
#401 Asw, Dec 9, 2019
You need to login to view this posts content.
d771 MDL Novice

Dec 9, 2019

2

0

0

#402 d771, Dec 10, 2019

Asw said: ↑

treat me a cup of coffee if it working
Click to expand...

It works! Do you have paypal account? PM me, I want to buy a cup of coffee for you
Asw MDL Novice

Nov 20, 2019

17

2

0
#403 Asw, Dec 19, 2019
mp3boy said: ↑

Firstly I'd like to thank Mazzif for your research and work in writing and releasing both your orginal tool and the information in this thread.

I know this has been mentioned in previous posts on the thread, but it's possible to erase only the "HP_BiosUser01" and "HP-BiosUser02" regions within the VSS_Store, and flash only the affected region using Flashrom's Layout feature, which saves a few minutes compared to flashing the whole SPI chip.

I thought I would post my notes on this process if it helps anyone out. This is using a Raspberry PI with Flashrom, auto detected SPI chip. You will need to add the -c option if your chip is not auto detected.

read:

Code:

flashrom -p linux_spi :dev=/dev/spidev0.0,spispeed=8000 -c "W25Q128.V" -r dump-a.bin flashrom -p linux_spi :dev=/dev/spidev0.0,spispeed=8000 -c "W25Q128.V" -r dump-b.bin md5sum dump-a.bin md5sum dump-b.bin

If they match, proceed. If not, take more reads until you have a matched pair at minimum.

Copy to desktop, open bios dump BIN file in UEFItool, go to Intel Image\BIOS Region\FFF...\VSS Store and find the line with HP-BiosUser-01 in the text column
note the Offset displayed at the top of the Information pane e.g. EE010Ch (ignore h)

Once you have the offset address, open bios dump bin file in HxD (or your favourite hex editor) and:

goto offset discovered above e.g. EE010C (Ctrl-G)
paste write (ctrl-B) the following data (4KB of FF):

Code:

FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF

take note of the offset displayed at the bottom left of HXD - this is your second offset for the layout file.

save this file as dump-clean.bin

create layout.txt file containing the following three lines:

Code:

000000:EE010B prior ("zero" to "one less than uefitool offset") EE010C:EE02BA vss ("offset shown in uefitool" to "one less than end of paste offset") EE02BB:FFFFFF end ("end of paste offset" to "end of file")

upload/copy both files to your flashrom folder then use the following command to flash only the relevant region:

Code:

flashrom -p linux_spi :dev=/dev/spidev0.0,spispeed=2000 --layout layout.txt --image vss -w bios-clean.bin

For older laptops, this will blank the VSS region anyway and you need to use DMI Tool to re-program it.
For newer lapops Folio/Ultraslim (2013+), it will recover data from the secondary SPI chip during first boot and no reprogramming is required.
Click to expand...

The answer is on page 8. There is someone success to remove only the bios password, no need use DMI tools
Interwebz MDL Novice

Dec 19, 2019

2

0

0

#404 Interwebz, Dec 19, 2019

Hi guys,

Anyone interesting in helping out with a HP EliteBook Foolio 9470m notebook with locked BOIS password?

HP apparently no longer supports sending smc.bin files, just chatted with support. This is a legit machine that was acquired for pennies in a company close down.

HP EliteBook Foolio 9470m
S/N : CNU417BYLY
UUID : DF52446D0850E4119DAEC3125D06C00D

Thank you
Charly900 MDL Novice

Dec 20, 2019

2

0

0

#405 Charly900, Dec 20, 2019

Hello everyone

I need help in unlocking the HP 8570W.
UUID: F07CE31035BEE21199313266B90000FE
SN: 5CB31918T9

Thank you.
krykot MDL Novice

Jun 18, 2019

2

0

0

#406 krykot, Dec 23, 2019

Interwebz said: ↑

Hi guys,

Anyone interesting in helping out with a HP EliteBook Foolio 9470m notebook with locked BOIS password?

HP apparently no longer supports sending smc.bin files, just chatted with support. This is a legit machine that was acquired for pennies in a company close down.

HP EliteBook Foolio 9470m
S/N : CNU417BYLY
UUID : DF52446D0850E4119DAEC3125D06C00D

Thank you
Click to expand...

Please upload your dump.
hamish13 MDL Novice

Feb 17, 2015

4

0

0

#407 hamish13, Dec 23, 2019

StvOchi said: ↑

Thanks so much. It worked on my 9470m. Managed to get rid of the system error ooa. Thanks a million
Click to expand...

Can any one help?
Will this work with HP Probook 450 G2 ?
Interwebz MDL Novice

Dec 19, 2019

2

0

0

#408 Interwebz, Dec 23, 2019
Last edited: Dec 24, 2019

You need to login to view this posts content.
JLSCUba MDL Novice

Dec 24, 2019

1

0

0

#409 JLSCUba, Dec 24, 2019

CFSACO_HP said: ↑

Hey Mazzif,

After a lengthy hiatus, I was finally able to get back to this. After following your guide, I was successful in clearing the BIOS password on an HP 8570.
I just wanted to thank you for not only discovering this solution, but also for sharing this. I found it to be a great learning experience.

I am curious about something though. Having all F's in the UUID seems to result in a new UUID being generated. I took a picture of the System Information (F1) prior to flashing the BIOS. Is there anything wrong with using WinDMIFit to re-enter the original UUID?

Along the same lines, what is the reasoning for leaving all O's in the System Board CT field, instead of re-entering the original number?

Thanks again
Click to expand...

Hi.
Ijust got a second hand 8570W brought to me from the United States. I need a solution to change or remove the bios password.
Thanks.
530v8 MDL Novice

Mar 24, 2017

4

1

0

#410 530v8, Dec 25, 2019

Upload your dumps I can do it
LatinMcG Bios Borker

Feb 27, 2011

5,711

1,606

180

#411 LatinMcG, Dec 26, 2019

You need to login to view this posts content.
530v8 MDL Novice

Mar 24, 2017

4

1

0

#412 530v8, Dec 26, 2019

to unlock its good to have flashrom and spoic8 to upload correct dumps
make 2 or 3 dumps then compare and send your dumps

only right dumps can be removed so try that
you need to clip it directly to your bios chip
Charly900 MDL Novice

Dec 20, 2019

2

0

0

#413 Charly900, Jan 1, 2020

Hello everyone, welcome to the new year.
What I have to do to save the locked dump from my 8570W laptop?
greeting
Thomas
x3meee MDL Novice

Jan 3, 2020

1

0

0

#414 x3meee, Jan 3, 2020

Hi, I have also bought two HP notebooks from second hand - 8570w (F.31) and 8460p (F.67). Can you unlock both or only 8570w? I will buy you some more coffees of course.
Mario Grossi MDL Novice

Jan 20, 2020

1

0

0

#415 Mario Grossi, Jan 20, 2020

Hi need to unlock an HP Elitebook 830 G5 ProdID 2FZ80AV SN# 5CG8404W4L.
Please can You help me.
awoli MDL Novice

Jun 14, 2013

6

1

0

#416 awoli, Jan 26, 2020

You need to login to view this posts content.
MehmetKavruk MDL Novice

Feb 13, 2020

1

0

0

#417 MehmetKavruk, Feb 14, 2020

[QUOTE = "lancera, posta: 1402975, üye: 1002894"] Merhaba, cevap için teşekkür ederim.
Ama tavsiye denediğimde bunu aldım.
smc komut hatası [/ QUOTE]
[QUOTE = "adeade, post: 1401941, üye: 726840"] MPM'nin kilidini açmak, Wndmifit64.exe dosyasını çalıştırın ve ardından MPM'yi yeniden kilitleyin. Kilidini açmak
MPM, FSMC.bin dosyasını WNDMIFIT klasöründen bir Fat32 biçimli
USB sürücüsü. Dosyayı SMC.bin olarak yeniden adlandırın. USB sürücüyü
Kapat. Windows Tuşu + Ok YUKARI Tuşu + Ok Aşağı Tuşu aynı anda basılı tutun ve
sistemi açın. Mavi HP logosunu gördüğünüzde tüm tuşları serbest bırakın. Malısın
beyaz ekranda SMC komutunun işlendiğini belirten kısa bir mesaj görün
Başarıyla. Bu, MPM'nin kilidinin açık olduğu ve
sonraki 10 güç çevrimi. [/ QUOTE]

Merhaba Dosyaları indirmek için bağlantı paylaşabilirmisiniz?
rincewind68 MDL Novice

Feb 14, 2020

1

0

0

#418 rincewind68, Feb 15, 2020

Hi folks

I need help to in unlocking the HP 8570W.
UUID: 51BCBB6AC55CE311AB208C66B900802E
SN: 5CB3460W2B

Thank you.
Chinsert MDL Novice

Feb 22, 2020

1

0

0

#419 Chinsert, Feb 22, 2020

530v8 said: ↑

Upload your dumps I can do it
Click to expand...

I could sure use some help getting into an Elitebook folio 9470m. Can’t get past bios administrator password
Any help would be greatly appreciated!
Lion67 MDL Novice

Mar 4, 2020

1

0

0
#420 Lion67, Mar 4, 2020
Dear all i locked myself
I need help in unlocking the HP Elite X2 G2.
UUID: 011F64E475B29FA5A176C4F4F254F422
SN: 5CG7505C2S
Thanks in advance

(You must log in or sign up to post here.)

Page 21 of 28