Coolshrimp Modz | Lenovo T14s - MEC-1663 - Jtag - Pinout - for Bios Password Removal

Lenovo T14s - MEC-1663 - Jtag - Pinout - for Bios Password Removal

MEC-1663 JTAG pinout and RT809H method to remove the BIOS password on a Lenovo T14s (same approach as T490s / X390).

HomeGuides indexBoardview, Schematics & Bios GuidesLenovo T14s - MEC-1663 - Jtag - Pinout - for Bios Password Removal

Lenovo T14s MEC-1663 JTAG pinout

Everything you need to remove the BIOS password from a Lenovo T14s (or any board with an MEC chip) and write the config data back afterwards.

Required Hardware

RT809h programmer. Use the MEC-1633#ISP profile on your RT809h. This is the same JTAG pinout and method as the T490s / X390 (but the R/W 10K resistor may be in a different location on those boards).

How It Works

MEC chips store the BIOS password in a secure, un-editable area. The steps below clear that area so it re-initializes itself to default (blank).

Removing the BIOS Password

  1. Read the MEC chip.
  2. Erase the chip.
  3. Unplug power from the board for 2 minutes.
  4. Write back the dump you just read — the password is now gone.
Warning

Remember to move the R/W 10K resistor back to its original position for normal operation. Clearing the password also wipes the serial and model number — restore them with the ThinkPad Config utility below before returning the machine to service.

Restoring the Serial / Model Number

After clearing the BIOS password you've also wiped the serial and model number. Restore them with the ThinkPad Config Information Update Utility v1.11 (attached below). Serial/model info can usually be found on the motherboard stickers and the bottom cover.

  1. Extract and run usbfmtpw.exe — this formats your USB and copies the files over. (Check the files copied after formatting; if not, manually copy them to the root of the USB.)
  2. Insert the USB into the laptop and boot to it as USB FDD (EFI, not Legacy).
  3. Choose 1, then use 2 to read the current keys. Record any keys shown — take a photo, as they'll be erased if not already.
  4. Go back to the main menu and choose Initialize EEPROM. This clears all keys plus the UUID and stops the overflow error.
  5. Choose 1, then 1 again to add new info. Enter C0 then Enter.
  6. Enter the serial and model in long form — it starts with 1S, so 1STTTTMMMMCCSSSSSSS.
  7. Press Enter and the key is stored.
  8. Optionally add more, or use option 3 for a few extra config details (I set my brand name there).
  9. Once all info is set, go to Assign UUID and say Yes. (Once you generate the UUID you cannot edit the serials again unless you initialize and redo them all.)
  10. Reboot and check the BIOS screen — your info should be there, with no more beeps on boot.
Product ID: TTTT-MMMMCC
Serial#:    SS-SSSSS

TTTT    = Machine Type
MMMM    = Model Type
CC      = Country Code
SSSSSSS = Serial Number
Advertisement

Similar Guides

A Guide to Diagnosing a Slow Windows PC

Track down what's slowing your PC — Task Manager, startup programs, disk health, malware checks and more, step by step.

2
How to Convert MBR to GPT on Windows 10

Convert your disk from MBR to GPT with Microsoft's built-in mbr2gpt tool — no reinstall, no data loss — and switch to UEFI boot.

3
CO2 Laser Setup and Tips for Beginners

First-use setup, material tests and ramp tests to dial in your CO2 laser for clean cutting and engraving — plus essential safety tips.

2
RetroPie Tweaks/Setup for Raspberry Pi 3

Everything you need to build and configure your RetroPie emulation setup. Also suitable for Pi 1/2/4/Zero.

3