IBM x3550/x3650 M3 Password Clear Tool
Small EFI utility that clears the power-on and setup passwords in IBM x3550/x3650 M3 servers
You'll need the GNU-EFI headers and libraries installed if you want to build this from source. Alternatively, you can just download a precompiled binary from the release page.
The resulting binary is named
- You can directly boot to the binary if you rename it to
shellx64.efiand place it on a USB drive. The server should automatically reboot after clearing the passwords.
- Alternatively, you can also boot into a UEFI shell and run
Wait, how am I supposed to run this tool if the boot and setup passwords are both set?
This can be disabled with a switch on the motherboard.
This one is harder, because you can't change boot options unless you know the setup password. If you're lucky, USB UEFI boot might already be enabled. If it isn't, you can try resetting the CMOS settings. PXE boot is enabled in the default settings, and it's relatively simple to PXE boot an EFI binary (either a shell or this tool).
Will this work on a non-IBM server?
No, this uses IBM-specific UEFI hooks to reset the passwords.
Will this work on other IBM server models?
I don't know. It definitely won't work on older servers that don't use UEFI. It might work on other M3-series servers, but I can only be sure it works on the x3550 and x3650 models because they share the same motherboard. It's possible that it could work on newer IBM/Lenovo servers, but they also could have changed or removed the UEFI hook that this tool relies on.
This has been reported to work on x3650 M4 servers, so it will probably work on x3550 M4 servers as well.
Use at your own risk, and don't use this tool without permission on any servers you don't own.
This project is licensed under the MIT License - see the LICENSE.md file for details
- Nikolaj Schlej's UEFITool made all this possible
- Pedro Vilaça's EFISwissKnife IDA plugin and blog post on Apple EFI reverse engineering were both enormously helpful
- Jethro Beekman's blog post on UEFI reverse engineering
This tool is made available for absolutely no charge, but if it helps you out and you want to send a couple of bucks my way, feel free to use the donation button.