Surface Pro bios password removal

[Rob983]

Good morning,

I buyed a dead Surface Pro 5, restored it and found that the bios had a password.

With RPi and a cable I managed to recover the Bios.

Tryed (comparing another bios from Surface Pro 4) with Hex editor to FF some adresses, I managed to boot the bios without password, but brobably broke VSS/NVRAM region.

An user from another forum had a look to the bios and said this:

Luckily for you this BIOS is booting, you broke the VSS Store/NVRAM, so before I even look into BIOS or what you edited, we know password is stored in VSS/NVRAM or something there pulls password from another location but it can't load now due to this region is broken 
Since you broke the entire section, no NVRAM can be loaded. You may or may not have removed the password, it's simply not loaded due to it's all broken now.
This is why your driver installs fail, product name, family, SKU etc is all stored in NVRAM (windows keys, serial, UUID is too)

What you FF'd out, is the following, none of which is the actual password entry. GUID names is mainly what you FF'd and it's contents after = sign below (which is not much)
AuthVarKeyDatabase = 00
VendorKeysNV = 01
MemoryOverwriteRequestControlLock = 00
RTC (Real Time Clock) = FF 07 00 00
RTC Alarm = 98 00 06 09 00 00 00 00 00 00 00 00 FF 07 00 00
CapsuleLongModuffer = AA (you only FF'd one byte of this modules GUID Header name entry, rest of GUID and module remains)

So, password still remains there, somewhere between 600000 and 640000, or something there is invoked to read the password from another location.
I looked but didn't recognize any modules that look to hold a password, but as I mentioned I'm not familiar with removing these passwords.

Can anuone help me remove password from original BIOS?

Here<--- is the original BIOS

Here<--- is the modded one with hex editor.

Thanks!

[DeathBringer]

Make a photo with a password prompt.
And other photo with result when invalid password was typed.

[Rob983]

Make a photo with a password prompt.
And other photo with result when invalid password was typed.

Good Evening @DeathBringer and thank you for the answer,

Here <--- are the requested photos.

[DeathBringer]

Try to flash back my mod.

[Rob983]

Try to flash back my mod.

Works like a charm!

Thank You!

Roberto

[DeathBringer]

Nice news!

[TheRealBoss]

Hello!

Could you reupload the modded file? Or could you tell me in which part is the password located?
I've got one Pro 4 in need of a save without deleting the whole VSS part.

[camptr]

Read PM.

Hi DB, i have the same problem with my ms Surface Pro 1796, getting blue screen after regular updates, recovery image not working cuz of forgotten boot password, any help or idea would be greatful for me, thank you.

Surface Pro 1796

[DeathBringer]

camptr
Have you a hardware programmer to flash back modded BIOS?

[camptr]

camptr
Have you a hardware programmer to flash back modded BIOS?

yes, i can  have a hw programmer no problem