Forum RSS Feed Follow @ Twitter Follow @ Twitter

Thread Rating:
  • 7 Vote(s) - 3.71 Average
  • 1
  • 2
  • 3
  • 4
  • 5
[REQUEST] Lenovo Thinkpad T420 (83ETxxWW) Whitelist Removal
(08-17-2018, 01:48 PM)zmb Wrote: Here are the modded bios 1.52. Modded only the part responsible for checking the whitelist. Use it at your own risk, it worked on my pc but I have no option to check it on another t420.


Link: http://rgho.st/7VphNmm2f

Can someone share the 1.52 bios with 1600MHz & 1866MHz RAM support and Advanced options. the above mod is only for the whitelist.
find
quote
Here are some additional modifications to the bios modded some time ago (I think everything that people usually want):
- No whitelist
- AES-NI lock removed
- MSR 0xE2 unlocked
- Added advanced menu
- Memory lock to 1333 removed (now supports DDR3 1600 and 1866)
- Intel vbios updated from 2089->2170
- Re-signed with custom key to get rid of 5 beeps on boot (Does anybody have these beeps? If you get the error 1901: or some nonsense about security after this, you need to reset bios settings to defaults)

In the folder mod, there are bioses with different number of modification. It is possible to know what modification is applied from the name of the file: NWL - no whitelist, NWL_ADV - no whitelist + advanced menu etc. if you need to apply specific bios from the list, you need rename it to $01C8000.FL1 and place it to the folder 83ET82WW.

All credit goes to the TimeWalker and ValdikSS from the folowing posts:
1. https://www.bios-mods.com/forum/Thread-T...#pid114437 (this post has nice descriptions how to implement all the modifications)
2. https://www.bios-mods.com/forum/Thread-R...#pid141098
 (the re-signing thing)

Every modification is tested on my t420. But as always, use it at your own risk.

Link: http://rgho.st/private/7DYcBR7MF/7572e9d...8da07b25e0
find
quote
When the newer version of the bios will be available (if at all) you could try change yourself. There is an easy way to apply modifications to the new bios version without disassemblers or any such fancy tools.

For this you need one external tool: UEFItool

This tool could be used to extract some specific module from the bios image (*.FL1 - file) and then to replace it with the modified one. Each module is a program, which performs some functions. For example the whitelist check is done in the module "LenovoWmaPolicyDxe.efi"

The idea is that for the minor bios changes the modules in the bios-image of different versions are the same. And it is possible to replace the original module in the newer version of the bios with patched module from the older one. (see pic1)

For example if I extract the "LenovoWmaPolicyDxe.efi" from 1.51 bios and from 1.52 and compare them in binary mode, then I will see that the modules are the same. (command for binary compare: fc /b file1 file2 - see pic2)


This means, that I could take the patched module from the v1.52 ("LenovoWmaPolicyDxe_modded.efi") and replace the original module in the v1.51. This way I would get the whitelist free version of the bios v1.51.

The example above may be true for the next version of the bios v1.53 and for other models of thinkpads as well.

Of course If the extracted module is not the same and the binary compare shows differences, then bad luck and it is better not to touch it.


Attached Files Thumbnail(s)
       
find
quote
Hi zmb.
I'm under Windows 10. i made the genuine 1.52 update. I't ok
can i use http://rgho.st/private/7DYcBR7MF/7572e9d...8da07b25e0 on w10?
can you please provide the step by step how to
i rename $01C8000_NWL_ADV_0xE2_AES-NI_RAM_VBIOS.FL1.rom to $01C8000.FL1 (put it in 83ET82WW folder)

how do i do that 2. Then run WINUPTP.EXE /S from this folder, WINUPTP.EXE seems to be unknown
must i do an Windows 7 install to mod my bios?
find
quote
It is alright to apply the modified bios on top of the original one.

Step-by-step manual:
1. rename "$01C8000_NWL_ADV_0xE2_AES-NI_RAM_VBIOS.FL1.rom" to the "$01C8000.FL1"
2. put the file "$01C8000.FL1" to the folder "83ET82WW" (you need to replace the existing file)
3. create a shortcut for the winuptp.exe application and modify it's properties adding the "/S" flag to the end of the line in the "Target:" field)  or use command line prompt under administrator (cmd.exe)
4. run the shortcut and wait. The "*.log" files will be created in the bios folder, so you can check if the update was successful.
5. Reboot.

Regarding the windows 10 I'm not sure if the update will work on it or not. I tested it only on win7x64.
find
quote
(12-23-2018, 08:23 AM)zmb Wrote: Here are some additional modifications to the bios modded some time ago (I think everything that people usually want):
- No whitelist
- AES-NI lock removed
- MSR 0xE2 unlocked
- Added advanced menu
- Memory lock to 1333 removed (now supports DDR3 1600 and 1866)
- Intel vbios updated from 2089->2170
- Re-signed with custom key to get rid of 5 beeps on boot (Does anybody have these beeps? If you get the error 1901: or some nonsense about security after this, you need to reset bios settings to defaults)

In the folder mod, there are bioses with different number of modification. It is possible to know what modification is applied from the name of the file: NWL - no whitelist, NWL_ADV - no whitelist + advanced menu etc. if you need to apply specific bios from the list, you need rename it to $01C8000.FL1 and place it to the folder 83ET82WW.

All credit goes to the TimeWalker and ValdikSS from the folowing posts:
1. https://www.bios-mods.com/forum/Thread-T...#pid114437 (this post has nice descriptions how to implement all the modifications)
2. https://www.bios-mods.com/forum/Thread-R...#pid141098
 (the re-signing thing)

Every modification is tested on my t420. But as always, use it at your own risk.

Link: http://rgho.st/private/7DYcBR7MF/7572e9d...8da07b25e0

Thanks !!! really appreciate it !
find
quote
(12-23-2018, 08:23 AM)zmb Wrote: Here are some additional modifications to the bios modded some time ago (I think everything that people usually want):
- No whitelist
- AES-NI lock removed
- MSR 0xE2 unlocked
- Added advanced menu
- Memory lock to 1333 removed (now supports DDR3 1600 and 1866)
- Intel vbios updated from 2089->2170
- Re-signed with custom key to get rid of 5 beeps on boot (Does anybody have these beeps? If you get the error 1901: or some nonsense about security after this, you need to reset bios settings to defaults)

In the folder mod, there are bioses with different number of modification. It is possible to know what modification is applied from the name of the file: NWL - no whitelist, NWL_ADV - no whitelist + advanced menu etc. if you need to apply specific bios from the list, you need rename it to $01C8000.FL1 and place it to the folder 83ET82WW.

All credit goes to the TimeWalker and ValdikSS from the folowing posts:
1. https://www.bios-mods.com/forum/Thread-T...#pid114437 (this post has nice descriptions how to implement all the modifications)
2. https://www.bios-mods.com/forum/Thread-R...#pid141098
 (the re-signing thing)

Every modification is tested on my t420. But as always, use it at your own risk.

Link: http://rgho.st/private/7DYcBR7MF/7572e9d...8da07b25e0
Finally OK under W7 64 (can't do it on W10) my Dell 1510 is ok under W10 now (ok under OS X too)
Thanks a lot ZMB for this share and the how to :-)
best regards
find
quote
Hi zmb!
I just registered to post a big thank you for putting all your work together and presenting it as DL.
Some people (like me) are using their T420 as Hackintosh were WL removal and swapping the 1/2 mPCI-e are the first things to do.
Great that yours and the work of others will keep the T420 oldies running!
find
quote
help needed
with EasyUEFI i'll try to delete all un necessary BIOS entries (F12)
i should have not.
my T420 does not boot any more on any HDD/SSD
power on ok
light ok, screen is always black
must be a bios issue.
can someone help
F1, F12 no result (black screen)
Any advice would be great
find
quote
(12-23-2018, 08:23 AM)zmb Wrote: Here are some additional modifications to the bios modded some time ago (I think everything that people usually want):
- No whitelist
- AES-NI lock removed
- MSR 0xE2 unlocked
- Added advanced menu
- Memory lock to 1333 removed (now supports DDR3 1600 and 1866)
- Intel vbios updated from 2089->2170
- Re-signed with custom key to get rid of 5 beeps on boot (Does anybody have these beeps? If you get the error 1901: or some nonsense about security after this, you need to reset bios settings to defaults)

In the folder mod, there are bioses with different number of modification. It is possible to know what modification is applied from the name of the file: NWL - no whitelist, NWL_ADV - no whitelist + advanced menu etc. if you need to apply specific bios from the list, you need rename it to $01C8000.FL1 and place it to the folder 83ET82WW.

All credit goes to the TimeWalker and ValdikSS from the folowing posts:
1. https://www.bios-mods.com/forum/Thread-T...#pid114437 (this post has nice descriptions how to implement all the modifications)
2. https://www.bios-mods.com/forum/Thread-R...#pid141098
 (the re-signing thing)

Every modification is tested on my t420. But as always, use it at your own risk.

Link: http://rgho.st/private/7DYcBR7MF/7572e9d...8da07b25e0

Will it works with i7-QM or WL affects on mini-pcie cards only? I'm on 1.45 now, updating may brick my T420. Thanks
find
quote


Forum Jump:


Users browsing this thread: 1 Guest(s)
Expand chat
Expand chat
Expand chat

To join us in the community live chat, please register or log-in