Looks good, you can reboot now and test if you can flash ME via FPT >> FPTw.exe -me -f mefilename.bin

Sorry, but I have to run for now, will be back tomorrow night Hope all goes smoothly!!

Do not try to press forward with FPT if you are unsure about anything, or get any red or size errors, just stop there and wait for help or you can brick the board.

* Edit @marianFCBT - Hey, you know what! Sorry, I don't think I ever asked you at the beginning what error you were getting with FPT when trying to write ME Region.
ME Re-Flash setting is not for allowing ME reflash via FPT, this is to allow it via ME FW Update tool, and that only works if your ME FW is not corrupted, so changing this setting has nothing to do with you being able to (or not) write ME FW region via FPT.
The only thing stopping you from that is possibly FPRR, which I didn't change.

Please show me what error you get with FPT when trying to flash ME Region, then we'll go from there. Very sorry I didn't think of this until now!

Hey, @Lost_N_BIOS! I was getting, and I still get the "Error 451: The host CPU does not have write access to the target flash area. To enable write access for this operation you must modify the descriptor settings to give host access to this region. FPT Operation Failed. " Sadly, I still get this error, even though I didn't get any error when flashing the vars.

Zitat

---

Very sorry I didn't think of this until now!

---

You don't need to be sorry! I didn't know that FPT requires a healthy ME Firmware, and I'm not in a hurry anyway, so thanks for your response and, if you will have the time, maybe we will fix this problem!

@marianFCBT - Thanks, I just tried to find your original post, where you and plutomaniac had discussions and I can't find it. He's great at ME, so he would have known this ME Re-Flash would not help in this situation, unless he just forgot accidentally which he usually never does with ME stuff
FPT doesn't require a healthy ME FW, but ME FW Update tool does (which is what you enable ME FW Re-Flash to use). Since your ME FW is corrupt, you can't write to ME FW w/ ME FW Update tool, thus ME FW Re-Flash option will be of no use here to fix this.

What you need is FPRR disabled, and this may not may not easily be done via the settings only. There is a setting for this, but there is also sometimes BIOS modules that this lock needs edited out of, so you may not have any thing you can do except purchase flash programmer and SOIC8 test clip with cable.
vars writing has nothing to do with Flash Protected areas covered by Flash Protection Range Registers (FPRR). Sorry again I didn't notice and ask about this error at beginning, I assumed you spoke with Plutomaniac as mentioned, and he correctly told you what was needed here, I didn't realize until later this was wrong.

Please first try changing this variable via grub w/ setup_var (normal) >> setup_var 0x612 0x0
Only use regular setup_var grub, don't use the var2/var3 one. Then if same error (Can't write to efi), just do below. If you do not get this error, then go ahead and reboot and try to FPT flash ME region only.

If you do get same error above, please program in this vars and dump back for me, then once I check reboot and try FPT flash of ME region only again and show me error (if still same, one more I can change I think)
This is to disable BIOS Lock and FPRR only (variables 0x17 and 0x612)
http://s000.tinyupload.com/index.php?fil...417965659964659

@Lost_N_BIOS Hi, I've tried running the setup_var 0x612 0x0 command from GRUB, but I got the same "Can't write to efi" error. I flashed the variables you sent me, and I dumped the file I attached. I will wait for your response to know if I can restart or not!

@Lost_N_BIOS - I had to restart my laptop after the vars flash because of a Windows update and, after restarting and running the fptw command again, I get the same error 451. However, I don't have much knowledge about how this variable flash works but I don't know for sure if the updates we've tried really do apply at BIOS level. I mean, you said that enabling the "Me Fw Re-Flash" option will make my laptop's fan run at maximum speed and show wrong values, but it just as peaceful and accurate as it always been. Also, no new BIOS option showed in BIOS. Is there a way I can figure out if these changes really apply, since the command prompt result is always "Operation successful"? Maybe there is something I am doing wrong, but I live with the sensation that it is all fine. Anyway, thank you very much for involvement and for help!

Plutomaniac ME Re-Flash only allows ME FW Update tool to update ME, correct, or have I always understood that incorrectly? Or this can sometimes allow a normal BIOS update process to update ME FW too.
No matter what, ME FW update tool can't be used, since it's corrupt ME. But you are the ME Wizard, so I'm sure you're correct!! I've never had to enable this option for anyone to FPT flash the ME, only unlock FD for ME or other locks such as PRR/FPRR.
I did give user vars with ME FW Re-Flash enabled, and they tried ME FW update via FPT, still error 451 (FPRR error, result at #17)
Thanks for link!

@marianFCBT - yes, these are being applied at the NVRAM level only, however these settings can be stored and used by the BIOS from several different locations.
The FPRR one in particular can be locked in a file itself too that needs edited directly, thus actual BIOS edit/flash may need to occur before that lock is removed.

As for the vars changes not seeming to apply, this could be true, your BIOS may only access what's stored in the setup module instead, which we can only change if you can flash BIOS region. Or they may apply, all except FPRR change due to other files locking this down.
In the last vars I sent you ME FW Re-Flash option was not changed, so nothing would happen in regards to what I mentioned with this. Anyway, lets test and see if BIOS settings are being used from NVRAM or not, by checking if BIOS lock is now disabled.
This is stored in NVRAM/vars and setup module, but can also be locked down with FPRR settings too, so still may fail.

So, please test dumping BIOS region now (new dump) >> FPTw.exe -bios -biosreg.bin
And then immediately flash it back >> FPTw.exe -bios -f biosreg.bin

If BIOS settings are used from vars/NVRAM then BIOS lock is now disabled, so this should not give you error. If you do get error, stop and tell me the error. Do not proceed with the flash at all if you get a red or size warning.

Since you mention your fans are running just fine that is odd, usually fans ramp up when ME FW is corrupted, but I guess maybe that doesn't always happen.
No new things should be showing in BIOS, we aren't doing any BIOS menu edits here. If you can now flash BIOS region, then I can make some changes you'd visible see, and I can disable BIOS Lock/FPRR on all modules that contain these.

Hello back! The "FPTw.exe -bios -biosreg.bin" command does not work, it reports "User input error". I assume it should have been FPTw.exe -bios -d biosreg.bin. I ran this one and I got a biosreg.bin file, which I tried to flash using the "FPTw.exe -bios -f biosreg.bin" command. However, I got this message:
"Error 316: Protected Range Registers are currently set by BIOS, preventing flash access.
Please contact the target system BIOS vendor for an option to disable Protected Range Registers.
FPT Operation Failed."

Yes, sorry, typo there, my fault Should be this as you suspected >> FPTw.exe -bios -d biosreg.bin
Same/similar error >> 451/316 = FPRR/PRR. Not much else you can do without opening the system up to pinmod or dump the BIOS, we've attempted to disable this in the only way possible for now (via NVRAM edit)
The only way to disable this lock is via setup edit, or the actual file/files that control/process the lock itself, which you can't edit due to this lock in place so this puts you at a stand-still.

You need flash programmer, or there is a slight chance it may be possible for me to edit the Lenovo stock Insyde files to make it flash in a modified BIOS, let me dig into it.
Please link me (At Lenovo's site) to the BIOS you are using, I can only find this one https://pcsupport.lenovo.com/us/en/downloads/ds500895
I will need to make a simple edit, then give you the package, you try to flash, then show me image of the error/errors it gives you, then I edit the iscflash.sys try and get you around those errors.
This works most often on older BIOS, or BIOS that do not reboot to flash. Does this reboot to flash when you flash a stock BIOS, or does it flash it, say complete and then ask to reboot (or something like that)?

plutomaniac - thanks for confirmation. I've never had to enable that for anyone to use FPT to flash ME, only to allow BIOS itself to reflash ME or attempt to allow that to happen during BIOS update/reflash.
I know you know all about ME, but this just my experience with BIOS and BIOS editing, anyone I've ever helped flash ME via FPT only had to unlock FD and then they could write to ME. I've always thought that was for allowing or denying ME FW tool updates
In the end though, none of that matters for this system, the only edits that can be made are to NVRAM via H20UVE vars edit, and these are apparently not being used by the BIOS during these checks as all have been ignored so it must be obtaining the settings from Setup module or other modules instead (For PRR/FPRR for sure)

Hello! This is the link for the Bios Update executable: https://pcsupport.lenovo.com/ro/ro/downloads/ds500140
Sadly, the update procedure is the folowing: it starts to flash, then it reboots, shows on the screen how it is flashing the EC Roms. Then, it reboots again, verifies each EC Rom and then reboots back to Windows. I've thought about the idea that we may be able to mod the Bios file that the upgrader uses so that it can flash the settings we want to make. I have a questiin though. If it happens that we can't fix this via software, and Lenovo support prompts me to send in my laptop for repair (which I don't want to do, because I depend on this laptop daily), would a Usb flash programmer do the job? After all, I did't buy the laptop from Lenovo, but from a third party reseller. I know the name of the repair facility they work with, but:
1. I don't know if they would send my laptop to repair at all, since they might say that it wasn't my job to do such updates
2. If I use a flash programmer I theoretically void my warranty, but I don't know if, let's say, I have problems with my screen they will check my Bios or dump it to check if I made any modifications, or teardown it to see any unattended modifications. It is only one month old, so I still hope that I don't need to void it's warranty, but if we can't do it the software way, I will see what I am going to do. Thank you both for support!

Yes, USB Flash programmer will resolve anything you want to do with BIOS, but you will have to open the bottom of the laptop up.
I don't think they can deny you warranty/RMA service due to BIOS update, since those are posted on their website for customers to use, also now Microsoft is sending out some BIOS updates with windows updates too, forcing pushed BIOS updates out to many systems bricking them.
Not that this applies to your situation, but you can see from that how BIOS update can't be described as something user shouldn't do when windows updates are doing it to people, and as mentioned they post the BIOS update for user to use and a crashed update is due to their EXE not you.

As for the warranty, and opening the laptop, yes, that is "against the rules" for warranty coverage, but unless you damage something usually there is no way they can check this on a BIOS re-program, because you are not putting on different thermal paste or anything like that where'd they'd be able to easily notice.
If there is a sticker you must break/cut to get in there, then yes, they'd know that way. As for what they do under service, it's tough to say, usually they would update/fix the BIOS to latest version, but not always is that done, especially if you don't mention BIOS this may or may not be done.
If you send it in for screen repair, hard to say what they would check and how, and same as above about BIOS if display was the issue mentioned for sending in they may or may not check/update BIOS.

Mentioning BIOS or ME would be best thing for you to do if you send it in, tell them it crashed at their BIOS update process and you followed all directed procedures/instructions during the BIOS update process.

Now, onto what I asked about and what you answered some in regards to how the stock BIOS updates/reboots etc. You mentioned it reboots and updates EC FW, but you didn't mention anything about the BIOS update, when/where do you see that part of the process take place?
You said it "Starts to flash, then reboots" What does "Start to flash" mean to you, do you see it updating stuff, anything mentioned on screen, can you see/tell if BIOS is updated at that point, then reboot is for EC update only?
We can enable log file via the ini, but I'm not sure if this one would be used or the ini on chip. Default is disabled. Lets test, please flash this stock BIOS and then check in this same folder once it's done for H2OFFT.log (if you don't find there, look in windows temp - C:\Users\yourusername\AppData\Local\Temp)

In this package there is two BIOS files. Please remove 8MBcut.fd and set aside in another folder or your desktop, then run H2OFFT-W.exe and let it do it's thing, then check for the log file in both places mentioned above. If you find, rename to log1 and then copy to somewhere else, delete the original.
Then remove BIOS.fd from the folder, and put back in 8MBCut.fd, and run H2OFFT-W.exe, once done check for new log and then if you get rename it to log2 and send both to me.
http://s000.tinyupload.com/index.php?fil...964383107937137

After this, with or without logs, I will make you simple test mod BIOS, so we can try to flash via stock package files and you can show me when and what the exact error you get is that stops mod BIOS from flashing.
Then I will attempt to go around that for you, if we can tell it's not doing the BIOS flash post-reboot, usually if it's done after a reboot that often means the files I would edit may not be used but we can still try then too.

@Lost_N_BIOS Hello, and sorry for posting after such a long time! I was in a holiday for a few days, and I saw yout post, but I didn't have the laptop with me and I realized that my description of how the BIOS update procedure actually works, so I created this short clip. I'm really sorry for the quality of the material, but I recorded it at night, to better show you how long it actually takes to cold boot or reboot and, also, to show you exactly how this procedure works. That being said, I will wait your response to know if I can go ahead with the H2OFFT program, because I don't know what it actually does. Does it flash anything, or does it only create a log file? Also, the 8MBCut file you sent me has a .bin extension. Can I just change it's extension to .fd?
Also, there is one more thing: I trust you to the bitter end, but is there any chance I can brick my laptop? I'm not (very) afraid to do what you think that it will solve my problem, but I would feel better if I know from the very beginning what is the risk I'm exposing to. Thank you very much for all your help!

@marianFCBT - It's OK about later reply, never in a hurry here and I'm always behind too, so it's OK

H2OFFT is the stock flashing tool that comes with your BIOS exe, the files above are what is extracted from the stock exe. Yes, it flashes, and then we attempt to make it create log in those two instances (stock BIOS is what is source BIOS there)
Yes, sorry, please change that 8MBcut.bin to .fd, I must have forgot. All the same, but it will be looking for .fd first, unsure if it looks for bin next or what happens.

No, with the above stuff, you can't brick anything other than what risk you take every time you flash stock BIOS (always a risk to flash BIOS, stock or mod). The above is not edited BIOS, only stock and only stock files.
You have to do something, unless you want to ignore all these issues? I mean, you have to lets figure this out and or you get a flash programmer and we sort it directly, or send it in for a RMA. Those are only two options here, only you can decide what you want to do.

As for your video, I's probably not helpful here, but I will check it out. I say this because the way the stock BIOS is configured, it will check BIOS version and if that is same as flash attempted it wont flash BIOS
So I wouldn't see BIOS update in that video, unless you flash some newer version, or use the above files I made since I changed this option. * Edit, great, I see you downgraded and upgraded to avoid this, good catch

Check your UEFI Folder/partition, see if you see a copy of H2OFFT there now, if not it's using one in on-board BIOS and we can't modify .sys file to get around that.
We can try and see if it uses the one in folder, but generally if it reboots like that and then flashes this doesn't work because it uses in onboard BIOS files to flash. Maybe we can get luck though, only way to find out is to try.
First I'd need to send you mod BIOS with some simple edit, see the error you get from that, then edit the .sys file to bypass that, then have you retry and see if error changes or not.
But, you have to decide what you want to do first.

Hello back! I tried to run the H2OFFT-W program from the archive you sent me but, after the laptop restarted, I got an error message saying: "Invalid firmware image. Press any key to reboot".