Skip to content

How to remove a BIOS supervisor password with a pair of tweezers and a screwdriver

Notifications You must be signed in to change notification settings

zacacollier/no-more-thinkpad-super

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

9 Commits
 
 
 
 

Repository files navigation

Regain access to the BIOS of (almost) any ThinkPad

"Or, for that matter, any PC that uses an EEPROM to store administrative BIOS settings"

*Disclaimer: This guide is intended for educational purposes only. The methods contained herein will most likely void the warranty of any system hardware you attempt to compromise, and could potentially destroy your motherboard and / or any related hardware. Proceed with caution!

Introduction:

BIOS and Restricted Access

All modern PCs I know of allow for a few levels of restricted access that can be configured to take effect at boot time. In the event that you find yourself unable to gain access, most of these restrictions can be easily circumvented with minimal effort.

Power-On Password

A common instance is a forgotten Power-On Password, which can be easily removed by opening up the computer and disconnecting a small back-up battery that's connected to the CMOS, thereby voiding its contents - including the Power-On Password. Then you would power on your computer, enter the BIOS to reset your Date and Time settings (which have also been removed from CMOS memory), and proceed to configure the BIOS.

Similar methods for overriding other forms of restricted access such as a hard drive password can be easily obtained online; for most modern hardware architecture, these methods are (to my knowledge) conceptually the same - regardless of the manufacturer.

The Supervisor Password

To bypass the highest level of BIOS password-protection - the Supervisor Password - there is most often no official solution. In my case, Lenovo's support documentation, for instance, says verbatim: "there is no way to reset" a forgotten Supervisor password. Your only option is to present a valid proof of purchase to a certified Lenovo tech and pay to have the motherboard replaced.

You can imagine my disappointment when, after purchasing a very cheap "for-parts" ThinkPad t420s on Ebay, I discover that it has a Supervisor password set, and find no support options from Lenovo other than an expensive motherboard replacement. This drastically discounted system, in excellent cosmetic condition, replete with a solid 2nd-gen i5 CPU, 6GB of RAM, as well as some compelling bells and whistles such as WiMax and mSATA compatability, was - in Lenovo's eyes - a lemon.

A Brief Aside: Motivation

If you've read this far, you may have inferred that I did find a solution, albeit an unofficial one. Obviously I wouldn't be writing this guide if I hadn't - in fact I'm doing so in part as a way to constructively (debatable?) kill time while the system in question compiles a fresh Gentoo installation.

Another reason is that for all my googling I have yet to find a single, go-to resource describing this technique; this is an attempt to rectify that.

Finally, I am writing this guide as a reflection of personal ethics. I understand where Lenovo, Dell, Apple, HP et al. are coming from - in business strategy there's almost always a more profitability in coercing your customers into buying replacement hardware rather than encouraging self-repair.

At best, I'm guessing that a confiscated motherboard will go sit in a repair queue somewhere. Another more probable (read: economically feasible) option is that the manufacturer - Lenovo in this case - will simply throw it away. It's a shame to see good hardware go to waste - especially beyond the immediately obvious anti-utilitarian consequences. E-waste is a rapidly-growing ecological and humanitarian concern that has a profound impact on the well-being of the developing nations where it accumulates.

Nowadays there are many formidably large-scale efforts aiming to address E-waste management, and more and morecomputer hardware manufacturers are becoming active participants. Nevertheless, as a consumer of electronics, it's good to stay informed on what you can do to better manage your individual level of impact. Breathing life into an otherwise inaccessible PC is a very rewarding way to do just that, and it has the added bonus of being a very inexpensive way to add another system to your collection.

Who's this guide for, then?

This is great for anyone looking for a project PC, something you're not afraid to tinker with and possibly break. I, for instance, was looking for a cheap laptop I could use for learning more about Linux.

If you're in the market for a daily driver, that is, you're looking to purchase a system that you intend to be your primary workstation, I don't recommend you invest the time and effort in this method. Consider a used or refurbished system (craigslist is always a good resource). Read up on manufacturer warranties and how you might acquire one for a secondhand system - Applecare, for instance, can be purchased for any system up to one year after its initial date-of-purchase, regardless of prior ownership.

First steps

As soon as you receive your PC in the mail, unpack it and check to make sure that it is in the condition described by the seller. Inspect the screen and chassis for any undisclosed flaws & damages. Then make sure the battery is intact & securely attached to the housing, and power on the machine.

Power-On Password

If you see this symbol:

Power-On Password

then your system is locked with a Power-On Password. To fix this, you'll need to disconnect your system's CMOS backup battery to dissolve any Password settings that are stored there.

The location of your system's CMOS can be quickly found via Google. Once you've gathered information about where it's located, you're ready to proceed.

First, power down the machine and remove the battery from the laptop. Disconnect any charging cables as well. Always perform these steps before cracking open your system to prevent damage from electrical shortage. As an extra precaution, toggle the power button a few times to drain out any remaining current.

Now, grab a screwdriver and, per your manufacturer's instructions, disassemble your laptop to access the motherboard. Take care not to drop any screws!

As a brief aside, I'd like to note that this is one of my favorite differentiating characteristics of Thinkpads. They are really easy to take apart. In the case of my t420s, accessing the motherboard only required me to remove 4 screws. The keyboard simply pops out without the need to be disconnected - this came in handy whenever I needed to test-boot the machine while it was still disassembled.

Once you've located the CMOS battery, disconnect it. Toggle the power button a few times to drain the CMOS of any residual current.

Now, with the battery still removed, reconnect the AC adapter and power on the laptop. If you see a Date / Time error on the screen, the Power-On Password is now disabled! (The password prompt may still show up, even though the password itself isn't intact - simply hit enter) You can now enter the BIOS and verify that your system's hardware matches the seller's description.

About

How to remove a BIOS supervisor password with a pair of tweezers and a screwdriver

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published