Hello, I bought a Surface 6 Pro. The seller doesn’t remember the UEFI Password. I can enter it in read mode and it also seems the boot from usb is unlocked. But I have no access to advanced settings like switching camera on/off etc.
Long time ago i flashed a broken bios of a Lenovo Think Pad. But there i had to wire the chip on the motherboard connect it to a programmer and so on (used a guide to do this). So i hoped its maybe possible to do this with the surface pro 6 too.
The Problem is that I do not have access to the BIOS/UEFI chip (I don’t want to open the device. They are known for easily breaking screens)

My question now. Do I have any chance (without opening the device) to flash the BIOS/UEFI at stock or only a section of it so the UEFI password will be removed?

I read in another thread that via the Intel Management Engine it would be possible to flash the firmwares of this device. Does it mean that there is maybe a way to flash the UEFI too so it removes the UEFI password?
Like here: Help flashing bios on Microsoft Surface Pro 2

Please create bootable USB drive with UEFI Shell & CHIPSEC - https://github.com/chipsec/chipsec/wiki/...with-UEFI-Shell
And run:
cd chipsec
python chipsec_main.py -m common.bios_wp

And I need result of MEInfoWin64.exe -verbose from Intel CSME System Tools v11

Thanks, It could take a moment until all is done :)
Do you think there is maybe a way?

Update1:
MEInfo is uploaded :)

OK.
Make current BIOS dump by ftpw64.exe from Intel CSME System Tools v11:
fptw64 -bios -d bios.rom

And I still need CHIPSEC information.

Ok, im running chipsec on the surface. So far so good.
"python chipsec_main.py" is working. It runs the whole main stuff. But if i run "python chipsec_main.py -m common.bios_wp" it says "ERROR: Invalid module path: chipsec.modules.common.bios_wp"
On my USB stick there are 2 folders in the root directory:
-efi
-chipsec

In the chipsec folder are all files from mast-chipsec of githup: https://github.com/chipsec/chipsec

I try to get it working^^

Read attentively

Zitat

---

Extract the contents of __install__/UEFI/chipsec_uefi_x64.zip to the USB drive...

Run CHIPSEC in UEFI Shell:
fs0:
cd chipsec
python chipsec_main.py -m common.bios_wp

---

Y i did all the steps above. idk whats wrong at the moment but running chipsec_main.py also runs the bios_wp module :)
...hmm Bios write protection enabled ...sounds not good :S

Well.
BIOS is write protected and can be modified in SMM only.
It BIOS chip also has one protected range: 0x700000 - 0xFFFFFF
And Boot Guard is activated.

Now you need to learn how to use Read Universal in EFI shell.
Run RU.efi and press ALT-= to open list of UEFI variables.
Make a photo of results.

And I still need BIOS dump.

Ok, wow man nice!
Ok sry, y somehow i cant find ftpw64.exe in the downloaded Intel CSME System Tools v11. I'm loocking Forward to find it^^

Zitat von Patrick im Beitrag #9

---

cant find ftpw64.exe in the downloaded Intel CSME System Tools v11.

---

XD ups, typo, it's FPTW64.exe. Found it ...one Moment
One moment. bios.rom is over 6 mb. to large for upload

So my bios.rom file is there: https://1drv.ms/u/s!AnmfKZRphhvAkq8AppgebaDbvaWyuA?e=3pirSZ

OK. Dump is good.
-------------------

I'm waiting for RU.efi's results (UEFI Variable List).
And I need a photo of the screen with password prompt and a photo of the screen when incorrect password was entered.

I'm running now ru.efi. works, im in :) ..but i have a german keyboard :D... Key "ALT-=" key combo isnt working.. I keep looking to make it work
Update> ALT+C and then select "UEFI Variable "

Read PM.

Hi.. i've got the same problem bought a SH surface pro 6 and i've realised that the battery not charging after 48% i suspect it is a setting from uefi bios but there is password protected and i don't know it. I can boot from USB install OS . I can enter bios but only to see info and boot from usb. Can you help me please?