All About Bios Password Removal

1 All About Bios Password Removal – Part I IBM Lenovo ThinkPad Password Chip 24RF08 P24S08 8-Pin This Password chip will remove the Supervisor password on any of the listed Laptops: This chip removes the BIOS / Power On / SVP Supervisor password and the follow errors: "0175, 0187, 0188, 0189, 0190, 0191, 0192, 0195, 0196, 0197, 0199, 0271, 0176, 0260, 0270" on your ThinkPad notebook IBM / Lenovo Thinkpads: T61, T61p, R61, R61i, X200, X200s, X300, X301, R400, R500, T400, T500, W500, W700 2 The Chip is ready to go straight in and has no password set. What you need to do: 1. disassemble the laptop 2. find the right chip 3. remove the old chip and solder the new one on place 4. re-assemble the laptop. That's it! It is so easy!!! Toshiba Laptop BIOS password Recovery Toshiba laptops aren’t like most laptops where you can remove the BIOS battery and let it sit for a few hours to reset the BIOS. So what do you do? There are three forms of BIOS password removal being used currently by Toshiba: 1. Parallel port wraparound connector 2. Shorting a jumper, with power and with no power 3. Challenge/Response code Method 1. Printer Dongle Method: Works with Portege, Satellite, Satellite Pro, Tecra and Libretto Laptops of the following model numbers : 100(1xx) 200(2xx) 300(3xx) 400(4xx) 500(5xx) 600(6xx) 700(7xx) 1000(1xxx) 2000(2xxx) 3000(3xxx) 4000(4xxx) 7000(7xxx) 8000(8xxx) (A15-S 127) (1415-S 173) SERIES & Some DVD Models The “xxx” above means that each x can be any number, i.e. 1xx could be 101, 103, 111, 112 etc. * First cut a plug from an old DB25 printer cable, and open the casing of the plug. This is how the pins look: 3 * Now connect: o Pin 1 to Pin 5 and to Pin 10 ( go from 1 to 5 and from 5 to 10) o Pin 2 to 11 o Pin 3 to 17 o Pin 4 to 12 o Pin 6 to 16 o Pin 7 to 13 o Pin 8 to 14 o Pin 9 to 15 o Pin 18 to 25 It should look something like this: 4 Plug it in and bootup 5 METHOD 2. Shorting a jumper: In order to clear a BIOS of Compal manufactured units you need to use the NO POWER method, units manufactured by Inventec need to be to be POWERED ON to rest the BIOS. To reset Compal units: 1. Turn off the POWER 2. Remove the battery and power cord 3. Peel back any black mylar (if any) covering the jumper 4. Using a flat screwdriver, short the jumper by connecting the two jumper points 5. Reset the computer and verify the BIOS has been reset, if not then repeat steps Inventec units can skip steps 1 and 2 METHOD 3. Challenge/Response Code: The challenge/response code method consists of matching a Challenge code ( power the machine up,press ctrl,then tab,then ctrl, then enter) generated on your machine and matching a Response code generated by Toshiba and calling a Toshiba Tech Support Agent. added 5/31/10: 6 Satellite p100 and pro p100 : with laptop off,remove wifi card and short pads marked jp8 for 10 secs satellite l10,l20,l30 and pro l20 : with laptop of short pads marked jp1 for 15 secs (l20 short pads marked g1) satellite m100 and tecra a6 : with laptop off ,remove memory and insulation under memory and short pads marked clr1 for 15 secs (satellite 17** series,1100,1110,1130, 1200, 1900, 2430, 3000 P20,P30, P33, A30, A70, A80, M40X, M50,M60, M70, M100)as above tecra a3,s2,a5,a6 : pads are by memory modules and will be labeled J1, J2, J5, J7, J9 or clr1 satellite a100,tecra m7 : remove keyboard and short pads marked c88 while turning laptop on, remove short as soon as Toshiba logo appears Satellite A100 (PSAA2A-02C01N) : Remove Memory Cover from base of machine Release & remove right side Memory Module, Lift black plastic insulation Locate & short PAD500 Pin 1 & 2 together, Power on machine while still shorting Pin 1 & 2 As soon as the TOSHIBA logo appears, remove short TECRA A4 & Satellite M40 Open modem & Wi-Fi card cover, Remove mini PCI Wi-Fi card Lift up black plastic, Locate & short C738 Pads 1 & 2 together Power on machine while still shorting Pads 1 & 2 As soon as the TOSHIBA logo appears, remove short tecra s1 : TECRA S1 Open palm rest cover,Remove mini PCI Wi-Fi card Lift up black plastic,Locate & short C5071 Pin 1 & 2 together Power on machine while still shorting Pin 1 & 2 As soon as the TOSHIBA logo appears, remove short 7 Shorting Bios Password For Dell Laptop Series 1. The laptop 2. A small screwdriver 3. A paperclip Introduction This is the prepatory section where I explain some things about the chip, CMOS, asset and service tags, and passwords; so that you will have a good grasp of the big picture. Hopefully it will also clear up any thing you have gotten a vague idea about on another website. All computers have special chips inside them that store information about the computer. Some of them are manufactured with permanent information that can not be changed (and, as a rule, all have exactly the same information on them; thus not for passwords.) These contain information about the computer model or are part of its functional circuitry. Another type of chip (the kind we are interested in) is manufactured with a blank information area that can be programmed or filled with information. These chips are commonly used to store settings and passwords; and come in 2 basic sorts: VOLATILE and NON-VOLATILE. 8 VOLATILE chips use a source of electricity to help them keep their information, such as a battery. They are less expensive and are used to store computer settings, and also passwords on most computers. If one of these chips has a password on it, the battery can be removed and after a time (between 2 seconds to 30 minutes, depending on the chip) the password will be erased. NON-VOLATILE chips do not need electricity to keep their information, but are more expensive. If there is a password on one of these chips, it can be removed from power for years and still have the password on it. (However this does not mean that it is permanent.) Remember that the information on Non-Volatile chips can be filled with information. This information can also be changed or erased. If you have read this far you probably own a Dell or similar laptop with a password that is obviously stored in a Non-Volatile chip, or are an employee of a company that makes one. These laptops have most of their setting information stored in Volatile (inexpensive) chips, and their passwords are stored on a tiny Non-Volatile (more expensive) chip. The chip that Dell uses is called a 24C02 chip. This is the Chip Type number used to refer to the chip's design in the electronics industry. The 24C02 is a small, rather common surface mount* dip* chip with 8 leads (or legs), which costs about $5. It measures 4.5 mm long x 3.5 mm wide x 2 mm tall, and stores 256 Bytes (or one quarter of a Kilobyte) of information. It is commonly used in modems, DIMM Memory, and other electronic devices; and in a different shape it is used in many wallet sized "smart cards." * SURFACE MOUNT means that the chip is soldered onto the surface of the printed circuit, instead of having pins sticking through the board. This is the most difficult type of circuitry to solder by hand. * DIP means 'Dual Inline Package'. This means that the chip has 2 rows of leads (or legs) in straight lines running down its sides. That's the chip we will be dealing with, if you would like to know more about the chip, click here, or read the "Some unnecessary information about the chip." section later on. The laptop that was used in this demonstration is a Model 630 type PPX. Other laptops may be different from the one shown in the full breakdown demonstration photos. The following links provide in depth information on specific models: Removing and Replacing Parts: Dell™ Latitude™ CP and CPi Removing and Replacing Parts: Dell™ Latitude™ C600/C500 Series Service Manual Removing and Replacing Parts: Dell™ Latitude™ C800/C805 Service Manual Removing and Replacing Parts: Dell™ Latitude™ C810 Service Manual 9 If a certain laptop does not correspond to any of these diagrams, more information might be found on the web, or, anyone not reading for informational purposes only - could decide to simply "Wing it." Also, the chip containing the password may be in a different location on some motherboards, but it should be able to be found by reading the numbers on the top of the chip, although a magnifying glass might be necessary. ** --- UPDATE --- ** I have information about other models of Dell laptops now. Thanks to people's e-mail information, I can now tell you more about other models of laptops. Here is a list of different models showing what I know about them and don't as pertains to the chip and this procedure. I am adding short pages of special procedures for certian other models when I can get my hands on them. Please read through the entire main site's procedure before you attempt any of these subprocedures. Model / Series Type Number Chip Clears Comments Procedure Latitude XP ? ? X Latitude XPi Yes Yes X Latitude CP Yes ? X Latitude CPi Yes Yes The chip is under the processor. Latitude CPiA Yes Yes The Chip is on the top side of motherboard, under MMC2 processor module. X Latitude CPx Yes Yes X Latitude CPxJ Yes Yes The Chip is on the top side of motherboard, under MMC2 processor module. X Latitude CS ? ? X Latitude CSx Yes Yes The hard drive on this laptop may lockup after procedure. (don't know for sure) reported not to have service tag or serial #. X Latitude c400 Yes ? X Latitude c500 Yes Yes The Chip is on the bottom side of motherboard, under the PCMCIA card slots. X Latitude c510 Yes ? The Chip is on the bottom side of motherboard, under the PCMCIA card slots. X Latitude c600 Yes Yes The Chip is on the bottom side X 10 of motherboard, under the PCMCIA card slots. Latitude c610 Yes Yes The chip is located near the DIMM 1 memory slot. Latitude c640 ? No The Chip is on the bottom of the motherboard just to the left of DIMM 1. X Latitude c800 Yes ? X Latitude L400 Yes Yes You can clear the password from this laptop simply by removing that CMOS Battery for 5 minutes. See procedure. Inspiron 2650 ? ? X Inspiron 600m Yes Yes This Laptop may have another number on the chip, located near the processor. X Inspiron 3200 Yes No A program called KILLCMOS.EXE is reproted to work for this laptop. X Inspiron 3800 Yes Yes The Chip is on the top side of motherboard, under MMC2 processor module. X Inspiron 4000 Yes Yes The Chip is on the bottom side of motherboard, under the PCMCIA card slots. X Inspiron 5100 ? ? X Inspiron 7000 24C164 No This is a different chip and probably a different type of password circuit. X Inspiron 7500 Yes No X Inspiron 8000 Yes No The chip is under the CDROM X Inspiron 8100/8200 Yes Not Certain The chip is located under the keyboard. Inspiron 8500 ? ? X Omnibook 6000 ? ? X Now we are informed and ready to begin. Anyone attempting this procedure should have the implements shown in this picture, along with any others they may deem needful or useful. They may also wish to write down the Service Tag number for later use, as it will be erased. 11 Laptop - Screwdriver - Paperclip And remember, when using a screwdriver, it's "righty - tightey, lefty - loosey." 12 Taking it apart Step One This is the first step in the procedure; and demonstrates how the laptop is prepared for disassembly, and begin the actual disassembly process. For this particular laptop, a size 0 Phillips™ screwdriver is recommended. Other models may require a different size or type. *note: These photographs show the procedure being performed without any special devices or methods used to prevent or reduce the risk of either personal injury or damage to the device; such as safety goggles, electrostatic wrist bands. It is not the purpose of this website to promote, assure, or condone this or any procedure as being safe or reasonable without the use of such devices or methods. Anyone performing this or any similar procedure is responsible for seeing to the safety needs of and resulting from such a procedure. Furthermore, on the subject of Electrostatic Discharge (ESD,) and potential damage to computer chips or circuitry: During the past 5 years that I have worked as a computer technician, apart from volatile memory (SIMM / DIMM modules,) I have never needed to use ESD reducing devices, nor known any computer device to fail due to the effects of ESD from handling or use without ESD reducing equipment. This may, in part, be because I live in an area where the average humidity is around 70% - 80%. I understand that increased humidity tends to lower ESD effects, while lower humidity tends to increase this. Anyone deciding to perform this procedure must make their own decisions about the importance of ESD in their environment and the need for special devices or procedures. 13 (Remember that SIMM / DIMM memory modules / sticks are always extremely susceptible to ESD damage at any humidity, under any environmental conditions, and should always be handled with the utmost care and precaution against damage.) The first thing that needs to be done, is the removable of any batteries, floppy drives, CD-ROMs, PCMCIA cards, or other removable / swappable components of the laptop. Also the power cord / adapter should be disconnected. One may, or may not want to remove the RAM, depending on personal preference. If possible, the hard drive should be removed as well. First the hard drive retaining screw is removed like this: 14 Removing the hard drive will prevent any erroneous information that may develop while working with the chip from causing a password to appear on the hard drive, or from changing an already known hard drive password I do not know of any method for sucessfully removing a hard drive password, or discovering what the password on a hard drive might be. The hard drive caddy cover is pressed down (towards the bottom of the laptop,) unlocking it. The hard drive caddy is pulled and slid outwards until it is free from the laptop assembly. 15 The next thing that needs to be done is the removing of the keyboard. (This particular model) The keyboard is released from the rest of the assembly by the removal of 7 screws on the bottom of the laptop. These are indicated here by blue arrows: 16 They are also indicated on the bottom of the laptop by a circle with the letter 'K' inside of it next to the location of each screw. The keyboard is then lifted upwards and out of the main laptop assembly, except for 2 thin connection cables. The keyboard can then be lain perpendicular to its original position so that these cable's connectors can be accessed. 17 The larger cable pictured here can be pulled straight up, disconnecting it from the main board. 18 The retention clip of the smaller cable must be pressed on both sides (in the direction of the cable) gently. It should not be forced, and when open, will still be attached to the main connector, but be moved approximately 1 - 2 mm from its original position. 19 The cable can then be pulled from the connector. Taking it apart, continued Step Two The rest of the disassembly process. The next thing that needs to be done is removing of the palmrest. (This particular model) The palmrest is released from the rest of the assembly by the removal of 5 screws on the bottom of the laptop. These are indicated here by red arrows: 20 They are also indicated on the bottom of the laptop by a circle with the letter 'P' inside of it next to the location of each screw. The electronic components of the palmrest are disconnected from the main circuit by pulling this tab, which contained one of the keyboard connectors on it, straight up away from the main circuit board. Also, if the CMOS information needs to be cleared for any reason, it can be done by disconnecting this connector for only a few seconds. This is because the battery is located in the palmrest just above the right speaker (at least on this model.) And because this particular CMOS chip doesn't hold its data very long without a battery, and is located on the main board. I personally found this to be somewhat odd. 21 Now the latch pictured here must be released from its hold on the bottom of the case. I used a small flat screwdriver to gently pry it back while easing the front of the palmrest upwards. Be careful not to lift the palmrest up too much, as there are still 2 more hitches securing it to the rest of the case. There are 2 latches, one on each side of the palmrest. They are towards the back of the palmrest, near the screen. They can be unhooked from the main assembly in the manner shown in this picture, by lifting the corner of the other section of the case up about a millimeter. After both of these are freed the palmrest can be lifted away. 22 The official repair manual for this laptop stated that the display must be removed before the palmrest can be taken off. But, as you can see, for anyone who is mechanically inclined enough to be able to cross a country road, this is not actually necessary. (Although this procedure does require the removal of the screen, which is next.) The first thing that needs to be done when removing the screen is to disconnect this ribbon cable from its connector on the motherboard by pulling it upwards. This is the only electronic connection that the screen has with the rest of the notebook. 23 To release the screen from the main assembly, the 3 screws shown here by red arrows, and also by a circle containing the letter 'D' next to each screw. Make sure you keep track of all screws, put them in something, and keep track of which ones go where. After these screws are removed, the screen can be lifted straight up and away. 24 The motherboard is the next part to be removed. This model has 2 screws fastening the motherboard to the case as shown in the picture. There are 2 more photos following, which show close-ups of each screw to avoid any confusion. They are shown by red arrows in the photographs. But, unlike previous screws, they do not have a convenient circled letter next to them. * For this model, these are the only screws that need to be removed on the motherboard! There are other screws which may look as though they need to be removed, such as the ones by the processor or fan but these should not be removed. 25 Remember to check the next 2 pictures first. The screw on the right. The screw on the left. 26 The motherboard is now released from the bottom of the case and the unit is placed in its normal position on a flat surface. 27 Applying a steady gentle lifting force under the middle fore section of the motherboard causes it to swing up. Reorienting things just a tad Step Three In order to clear the password on the chip, some of the laptop must be put back together. This is because the laptop will need to be powered on during the process. Seeing how easy it was to disassemble, this is not a difficult task. This page shows how this part of the procedure is done, and the next page is where the real action of actually clearing the password takes place. 28 First the display screen must be put back on. This can easily be done by holding it in this manner and setting it into its slot. Then it must be held in place with screws, one on each side as shown in this picture should be sufficient to hold it. Up to this point we have something that looks like this: 29 Now the palmrest is be put back on. 30 The video connector is plugged back in. And the palmrest connector is also plugged back in. 31 The keyboard is also reconnected. The smaller Keyboard cable is slid back into its connector, and is held fast by closing the connector as shown is this picture. The larger cable is then gently pushed back onto its connector. The keyboard is placed back in its seating, like this: 32 And finally, this one screw is used to hold the keyboard in place while the work of clearing the password is performed. 33 Now the laptop is ready to and there is free access to the password chip which is located on the bottom of the motherboard. 34 Now, you are probably thinking to yourself 'Wait a minute! I just put almost the entire laptop back together! The wascally wabbits that made this thing sure made it difficult to get to that chip!' OK, so, you're probably not thinking the part about 'Wascally Wabbits'; but, yes, this is somewhat of a study in redundancy. The good news is that it's almost done. Nothing more has to be bought, soldered, or disassembled.