digmorepaka / thinkpad-firmware-patches Goto Github PK

please change 'To get a working TPM use Thrimbor's uefi-sign for xx20, xx30, and xx40 ThinkPads. For soldered xx40, xx50 and xx80 replace 4C 4E 56 42 42 53 45 43 FB with 4C 4E 56 42 42 53 45 43 FF on the previously patched binary' to say that you MUST do this, as the the t480 does not have tmp support, and it can be interpreted as meaning that this only needs to be done for machines with tpm support, even though required on the t480 as well.

Hey @digmorepaka , I bricked a X240 :D
Just wanted to make sure, I do understand what went wrong to prevent this from happen to a newly bought X240 motherboard.

The device came with BIOS v2.25, which has been upgraded by myself to v2.49 using an external CD drive and the official BIOS utility. Embedded controller got updated to v1.18 sucessfully, too.
After dumping that image, I flashed a modified one which included only the patches from https://github.com/digmorepaka/thinkpad-firmware-patches/blob/master/xx40_xx50_patches_v7.txt - result: devices booted successful (I was able to see the Advanced menu in the BIOS) but with (not absolutley sure anymore) 5 beep tones. I thought that's the tamper protection complaining (but it seems to be the chassis intrusion only?).

From here everything went wrong: So is started to sign the image with "Thrimbor's uefi-sign" and flashed that image. Display wasn't working anymore, though the keyboard backlight turns on, even the fan for a short time, but I got no more beep tones. Flashed a BIOS image which included only the replacement of "4C 4E 56 42 42 53 45 43 FB" with "4C 4E 56 42 42 53 45 43 FF" (besides the patches, but no uefi-sign) with the same outcome. I read back the image several times to verify it's the one written to it (even though flashrom does that for me, just wanted to double check) - turned out it has the same md5sum. Flashed the patched one, which worked initially, same outcome. Flashed the initial v2.49 without any modifications - same outcome, still bricked. Flashed the v2.25 which I dumped too in the beginning, same outcome: still bricked.

My question: can you think of any recovery method to this issue? Or do you have an idea what could have gone wrong?
"uefi-sign" is not needed for X240, bc TPM is not working? I don't care about TPM, aiming to run Linux.
Do I really have to replace the "4C 4E 56 42 42 53 45 43 FB" with "4C 4E 56 42 42 53 45 43 FF" for the X240 (Intel i5-4210U)?

Thanks in advance :)

I have the same: #42

Black screen and 010288 tone error.

bios: N24ET67W (1.42)
ec: N24HT31W (1.16)

I'm willing to help test things

Tried to patch t480 twice, and all I got was error beeps. Used all relevant patches, unable to find hex string 4C 4E 56 42 42 53 45 43 FB in patched BIOS. Thinkpad is on latest firmware update

hi guys i am patching i am signing i am inserting new card for whitelist i am writing with ch341a. The system still detects that it is an unauthorized card. Thanks for your help.
patched and unpatched version is here.

https://1drv.ms/f/s!AqWiMiHDqdmYjKw7OK-adeChJPenuA?e=HQne1b

Hi I am new here, I recently bought thinkpad x395 with AMD Ryzen R5 3500u and 8 GB ram and I tried patching bios using both patches, but to no avail.
All I could hear on boot was just the melody and thats it, also when I clicked fn button it would make shorter melody 3 times.
If anybody knows whats up with that I would very much appriciate help.
And I would like to know what kind of tpm patch i need to use as I cant figure it out.
Thanks.

Hi.

1. Used xx70_xx80_patches_v7.txt for P52, only "enable advance menu Lenovo xx70/xx80" is selected
2. Applied paranoidbashthot bypass method
3. Flashed back
4. no POST, 0285 Beep code "TCG-compliant functionality-related error (might be the TPM initialization failure)"
   P52_PatchIssues.zip

I am requesting firmware patches for Thinkpad T460p.

I was wondering why there isn't any patch for x90 thinkpads (T490, L390, X390 and so on). They share the same board, so if you patch one of them you'll have a patch for every laptop.

I can provide a dump of L390 yoga bios if somehow useful.

I am trying to figure out if the NVME slots of the Lenovo P53 have some sort of whitelist applied. It appears nobody has been able to run an eGPU via the NVME slots on a P53 yet. Is it technically possible to create a whitelist on a PCIe/M.2 slot which says "only allow storage devices to connect"?

And if this is indeed the case, is it possible to modify and flash the P53 BIOS to remove this limitation?

hi! anyone knows which patch can I use for ThinkPad X1 tablet 3gen?

After applying xx40_xx50_patches_v7.txt with the "show XMP and manual memory timings (cleaned up)" enabled, I now have options to select a memory profile. With a normal non XMP stick, I get Default Profile, XMP 1 and XMP 2, with XMP 1 profile having manual timing control, but CAS latency can go only to 10 and not any higher which is not acceptable. After I flashed a XMP profile to my RAM's SPD, I now only have XMP Profile 1 as an option with the manual timings, which in this case, CL10 is too low and the laptop won't boot with it. Tried flashing 2 different XMP profiles, even to a ram stick that was not the OEM hynix one, no dice. Attached some pics

Hey,

two points I'm unsure:

• What do you mean with "Internal flash" on the compatibility table? Every SPI-BIOS-chip is "internal flash" from my point of view or am I missing something?
• TPM yes/no means "in MFG Mode yes/no" or is there a third state I'm not aware of? Maybe a clearification for both points would be good...

I've successfully been able to apply the patches to upen up the AMD menu, and it works fine.

I've loaded the related PE files into a disassembler, but I can't figure out what the data that's being edited by these patches represents. I'm wondering if there might be more hidden menus that can be enabled? Is there any documentation on what this data means?

Specifically, I'm wondering if there might be some option to control the amount of VRAM? I'd like to expand it a bit beyond the defaults...

Hello, my issue is very same as #18 - I have dumped the original firmware, applied the patch, replaced 4C 4E 56 42 42 53 45 43 FB with 4C 4E 56 42 42 53 45 43 FF, flashed the patched firmware, got the Advanced Menu with overclocking and all other stuff, but the WWAN whitelist is still in force - the laptop does not boot and shows error "1802: unauthorized network card" with a 3rd party card. If I put the original WWAN card the laptop boots normally.

Also there is another small issue - the laptop complains about incorrect time/date and wants me to adjust it but I could not find where to change the time/date in the patched BIOS. It is not on the 2nd tab as it was in the original BIOS (as far as I remember) and I wasn't able to find it anywhere else, could you advise how do I change the time/date?

The full model name is: 20HN0012UK SDK0J40697

I do patch my bios with the patch file provided, but after flash back to the bios chip ; It is not working.
My Bios version: 2.52 (the latest one)
I see that, The tested just on the bios 2.41.

My Dump Bios from flashrom :https://drive.google.com/file/d/1VfIPq9IYaQaMMazW0DTnYnkv889cCGB8/view?usp=sharing

Many Thanks

Title. What patch do I need for my P50 to unlock the BIOS? xx60?

do i need the 1.8v adapter or will item linked below work? i didnt use the adapter for my T440P before but i returned that CH341A to amazon when i was done with it lol

https://www.ebay.ca/itm/165928313612?itmmeta=01HS9VXV02KGKMQBE50F6SDGVE&hash=item26a219230c:g:rtUAAOSwVWdhpMnC&itmprp=enc%3AAQAJAAAA4D%2BrwJzquBeAX4k66nXOoz5WlsUwZxeAu%2B65uDu7ZRJ10K8Ap7N7Rr92LrrlWiKY81wyVJFcOpNuDW8H2axpL%2FFr7B6DJBsJ2UZppX5bYuouJwXc2YgrqrDJAGAmTScISIj1e8Svns7fmZCOyUw30gBn44W3VmnTwnZc%2BRcRxPTtsr9T7sBYxCI9frArZQ%2FSFpNQGfa5Mj59ElYT1KltvW1EaYJYuXHFegrh4Da9tgxST5NGNocemf67hMr9YaWUfh%2Bj%2B%2FY81yyQxMsirzTIHVJcG0AysmsMx4TPzc6I4SO%2B%7Ctkp%3ABFBMkLD3u8pj

Hello, can someone assist me on removing the WWAN whitelist and maybe unlock advanced setting on a ThinkEdge SE30?
Unfurtatly I'm unable to find any trace of the infamous LenovoWmaPolicyDxe module in my bios chip dump (see attachment)
Thank you in advance.
dump.gz

Hi, can you make patch for t470s? I've apply the patch (xx70_xx80_patches_v7) to my t470s BIOS, but no luck

My laptop beeping 5 times, but not boot to BIOS or OS. Just black screen

Thanks in advance!

Model: ThinkPad x280
Patchset: xx70_xx80_patches_v7.txt with all patches (nothig commented out)
TPM: 4C 4E 56 42 42 53 45 43 FB -> 4C 4E 56 42 42 53 45 43 FF

Notes: Do not use fix_vendor_hashes.py, it damages patched bios file and machine becomes unbootable. Just patch and change sequence (above).

TPM stick in "MFG mode".

A while ago I paid some guy on bios-mods to patch my BIOS, and requested the following for my X230...

• Whitelist keyboard for X220 kb
• Whitelist Wifi
• Whitelist battery
• Advanced menu
• 16GB patch
• Remove Intel ME

What is needed to achieve this nowadays? Can I achieve the same functionality with 1vyrain and the firmware patcher on this github? would I need hamishcoleman/thinkpad-ec at all?

X1 Carbon 6th owners, if your Thunderbolt and HDMI is working we need your ROM dump

Mods please delete if inappropriate and apologies in advance. I am very sorry for asking this here but situation is dire.

I am desperately looking for some X1 Carbon 6th gen owners with CH341a SPI Programmer and SOIC8 Clip and whose X1 Carbon Thunderbolt and HDMI ports work properly to extract the bin file in their laptop and share with us since our HDMI nor DP from TB ports do not work at all due some intel ME firmware is messing up things.

https://www.reddit.com/r/thinkpad/comments/rsri27/urgent_wanted_x1c6_thunderbolt_working_bin_file/
fwupd/firmware-lenovo#264

Thank you again and all the best

Everything is working fine, except for m.2 ssd, which worked good before patching.
No matter how I try. With every bios settings I've tried.
It's not being detected both in BIOS and Windows.

SSD is working fine itself. Checked in another laptop.

What could be the problem?

Hello everyone!
I'm trying to remove the WWAN whitelist on my T480s.

I've applied the patches "enable advance menu" and "remove wwan whitelist" in xx70_xx80_patches_v6.txt
To disable tamper protection I've replaced 4C 4E 56 42 42 53 45 43 FB with 4C 4E 56 42 42 53 45 43 FF in a hex editor, and after flashing it back, I have the advanced menu in the BIOS, but the WWAN whitelist is still there. If I leave the WWAN card inserted, I get error 1802:

1802: Unauthorized network card is plugged in - Power off and remove the network card
System is halted

TPM was previously disabled, but after the patch, it was in "MFG" state.

Should I use a different script on my T480s?
Could someone help me to remove the WWAN whitelist?

Thank you very much!

I'm trying to add an NVMe SSD to the WWAN slot on my T560, and getting the "1802: Unauthorized network card is plugged in" error. I've tried patches from "xx60_patches_v1.txt", "xx40_xx50_patches_v7.txt", and "xx70_xx80_patches_v7.txt". All of them either do not apply in UEFIPatcher or fail to remove the whitelist error when flashed to the machine.

I'm going to hazard a guess this is related to the several other outstanding requests here for help with WWAN issues.

Anyone have any ideas? Lenovo is doing a really good job of ensuring my next notebook purchase is from Framework.

xx40_xx50_patches_v7.txt untouched
confirmed removed WL for wifi and wwan
TPM and other specifics not tested

Thanks

Thinkpad t560
Most settings work, but a few in the advanced Intel platform settings will brick the bios.

Tpm works, and I can use bitlocker.

For example, bios guard in the bios settings will show as enabled, but disabling it and then save/exiting will require you to reflash the bios.

I'm trying to remove the whitelist on my 6th gen X1 Carbon so I can use a Sierra EM7455. I applied all the patches in xx70_xx80_patches_v6.txt, and replaced 4C 4E 56 42 42 53 45 43 FB with 4C 4E 56 42 42 53 45 43 FF in a hex editor, and I have the advanced menu in the BIOS, but it seems like the whitelist is (mostly) still there. Sometimes it boots fine and recognises the EM7455, and sometimes it gives me the "Unauthorized network card" error, and I don't know why. I updated the BIOS to version 1.54, so I'm wondering if it only works on older versions, or different models, or something. I double checked that I'd uncommented the right lines in the text file. Am I doing something wrong?

I have done WL removal and advanced tab unlock for lenovo M495 (E4325), I wonder if I can submmit the patch here.

Sorry, a little bit of an unrelated question, would you know if the 1.36 bios update disables undervolting for the T480?