Go Down

Topic: Thinkpad supervisor password read /clear (Read 3245 times) previous topic - next topic

deif

This script reads the supervisor password from the i2c eeprom (ATMEL 24RF08) in thinkpad laptops
in case of an encrypted password (passphrase set) the password can be cleared. (write to eeprom, last resort only!!)
There is tons of information about this on the web.
The missing piece was how to clear a password: just write 0x00 to all 16 password bytes.
Find the eeprom location of your laptop on those pages and connect some wires to it.
http://www.allservice.ro
http://www.ja.axxs.net/

The hex dump can be imported into the program IBMPass to create a standard dump like the ones from the parallelport readers.

The eeprom is powered by 3.3V so use a voltage converter or power your arduino with 3.3V
This can be done easily with 2 arduino boards.
You can try using normal 5V but this can trash the mainboard.

Warning:
Allways make a dump of the eeprom before attempting to clear the password!!!
Any damage to your device is your own fault.

I used it with a T40 and a X201.


Good luck


ap6709

I have actually applied this method and recovered my password. It works and is worth about $120 because that is what a used IBM thinkpad R52 costs in India. Thanks a ton deif...you rock!!!

Bianco

That's a nice hack.

I Wish I could do the same on my Dell Latitude.

Awesome! Worked 100% removing a password on a Thinkpad T410 with encrypted password. Way quicker than any other options I found. Excellent work!

Simply used 2k resistors and and 5v zeners to do the level shifting.

Go Up