[Request] Gigabyte Aero 15 OLED BIOS unlocked

@raph03 , maybe PL1 or PL2, or some TDP limit if not PL1 or PL2. I am not familiar with how to set PL1/PL2 though, you’ll have to google around about that and your CPU model

@RogSmitty - deleting keys is not done or required, that’s not how to disable secure boot, that should be above this or on page before keys area. I see the actual setting is hidden from you on the other hidden Boot page. You’ll have to change OS type to disable it
Since you can boot to GRUB, do you still get error when trying to set variable there? If yes, set legacy boot, and make a DOS bootable USB and do the RU method.
Use this method to make MBR FAT32 USB, follow only steps 1-2 - [Help needed] Hidden Advanced menu Bios HP Z1 J52_0274.BIN (2)
Then put RU on there, and boot to USB (not labelled UEFI) - Never mind, I see in images you can boot to RU already

Make sure you do not have BIOS Password set, make sure you do not have any TPM or encryption enabled like bitlocker etc.
Change OS Type to Legacy, then reboot and try RU again. << This will be key, once you change OS Type to Legacy Secure boot will be disabled, and system mode on security page should change to system or user, not setup

New day new problem, I’m afraid. So I was able to boot into legacy and run RU. However, when I do that, I am unable to access the ‘UEFI variable’ page using Alt =. All it does is send me back to the page I was already on.

So to recap, now I have tried changing my lock variable using GRUB (with and without the superUEFIinboot trick) & RU (both in UEFI and legacy modes). I’m convinced that I’m either missing something very obvious or there’s something else going on here that’s different. It’s a brand new system so maybe something that hasn’t been seen before?

I’m going to go through all the suggestions you’ve sent me one more time just to see if I’m doing something wrong.

RU Legacy Mode Pics

@RogSmitty - You and raph03 have nearly same system, I think he has XA, and this is kinda universal to all computers so model doesn’t really matter.
Yes, probably something simple being missed or overlooked, seems that’s always what holds us back from accomplishing computer related stuff some days
Caps lock key on maybe? Did you try both ALT keys? Did you try just navigating to UEFI Variable and hitting enter, instead of trying to use ALT=? To use hotkeys, I see it says be sure to use English KB layout, see 2.4 comments about that. But really, you should just be able to navigate to that and then hit enter.

BTW, good to see you finally made it into RU

@RogSmitty - Where did you go? Hope all is well!!

Hello,
i have also a aero 15 oled sa and i have updated my bios to the latest version (FB09 FB09 https://download.gigabyte.com/FileList/B…d09-ec-f007.zip) in hope, that some new features become visible :-(.
With the new version i think we need a different FPTw.exe. When i try to use the latest Intel CSME System Tools v14.0 r4 - (2020-06-06) then i get the hint, that cannonlake platform is not supported.
Can someone help me with this?
Has anyone already tried to unlock the newest bios version?

Thanks

@mail123456654321 - You need to use correct ME System tools package, I doubt it’s V14, check using below info and this is how we get started to unlock your BIOS
I checked the BIOS itself, and it has V12, but this is not always what is in your BIOS on the board so you need to check how I mentioned below. BIOS unlock is not an issue for me on this series, version does not matter

If you have already modified the BIOS in ANY way, you will need to re-flash it back to factory defaults using factory method (NOT FPT)!!!

If you do not have Intel ME drivers installed, install them now from your system driver download page, then start over here after reboot.
Check your BIOS’ main page and see if ME FW version is shown. If not then > DOWNLOAD HWINFO64 HERE <

Once HWINFO is open, look at the large window on the left side, expand motherboard, and find the ME area.
Inside that section is the ME Firmware version. Take note of the version. (ie. write it down or get a screenshot)

Once you have that, go to the thread linked below, and in the section “C.2” find and download the matching ME System Tools Package for your system.
(ie if ME FW version = 10.x get V10 package, if 9.0-9.1 get V9.1 package, if 9.5 or above get V9.5 package etc)
> DOWNLOAD " ME System Tools " packages HERE <

Once downloaded, inside you will find Flash Programming Tool folder, and then inside that a Windows or Win/Win32 folder (NOT x64).
Highlight that Win/Win32 folder, then hold shift and press right click. Choose “open command window here” (Not power shell! >> * See Registry file below *).

If you get an error, reply to this post with a screenshot of it, OR write down the EXACT command entered and the EXACT error given.

((If “open command window here” does not appear, look for the “Simple Registry Edit” below…))

Step #1

Now you should be at the command prompt.
You are going to BACKUP the factory un-modified firmware, so type the following command:
Command: " FPTw.exe -bios -d biosreg.bin "

>> Attach the saved "biosreg.bin ", placed into a compressed ZIP/RAR file, to your next post!!! <<

Step #2

Right after you do that, try to write back the BIOS Region dump and see if you get any error(s).
Command: " FPTw.exe -bios -f biosreg.bin "
^^ This step is important! Don’t forget! ^^

If you get an error, reply to this post with a screenshot of it, OR write down the EXACT command entered and the EXACT error given.

Here is a SIMPLE REGISTRY EDIT that adds “Open command window here as Administrator” to the right click menu, instead of Power Shell
Double-click downloaded file to install. Reboot after install may be required
> CLICK HERE TO DOWNLOAD CMD PROMPT REGISTRY ENTRY <

If the windows method above does NOT work for you…
Then you may have to copy all contents from the Flash Programming Tool \ DOS folder to the root of a Bootable USB disk and do the dump from DOS
( DOS command: " FPT.exe -bios -d biosreg.bin " )

Thanks, it was now working.
Lost_N_BIOS can you send me more information on how i can modify the bios myself.
I want to learn this, so that i can do this also in future by myself and i’m not feeling very comfortable to send and get modified bios.
Are you using the amibcp? Which version do i need for this? Thanks.

This would be very nice ;-).

@mail123456654321 - No, I don’t use AMIBCP for anything here. UEFITool 25 (not newer, and not 25.1) and hex editor is used to do this edit.
Which BIOS does your system use out of the EXE, P75VAFB09 or P75VAFD09? If you are not sure, you’ll have to send me your BIOS region dump, then I can give you info to edit yourself

@Lost_N_BIOS . Hello, you have help me to unlock bios since 1 month and it works fine. I have tried yesterday to downgrade bios with stock rom fb08 (proclem of c state) but i doesnt work; Can you help me please

@jlodebx - Did you disable BIOS Guard if enabled, and secure boot, as well as remove any BIOS password or TPM/Encryption? What error do you get, show me image? Maybe Gigabyte has blocked BIOS downgrade, this is common (nothing to do with mod BIOS)
What is “problem of C-State”, and you’re going back because you know you did not have this problem on previous BIOS?

@Lost_N_BIOS Apologies for the delayed response. I’m still hammering away at this issue with zero progress. Everything I have tried to change the lock bit has failed (RU or GRUB; legacy or UEFI). I went back and double checked that secure boot and tpm was disabled and indeed it was. I even re-enabled secure boot and was still able to enter grub using the workaround method that you showed me previously but still no luck when trying change the lock bit. Everything has given me the same error (error: can’t set variable using efi (error: 0x000000000000001a). Also, when I boot into RU while in legacy mode I have no way to change the UEFI variable lock bit (0x17). There simply is no way to select that portion of the menu…it just sends me back to the main page.

Any other ideas or screenshots I can send you?

@RogSmitty - Keep secure boot disabled, as well as TPM, and remove any BIOS password.

Not sure what you mean about “can’t change variable with RU”? use numbers above keyboard, in case numlock key on numpad is messing you up
Move down to line 10, then go over to >> 07 = 17

Did I already send you SCEWin package? You should be able to change all this with RU, but we can also see if SCEWin will let us too, if we have not already?

Back to RU - AND, I just noticed, these are NOT in setup, but are in >> PchSetup - 4570B7F1-ADE8-4943-8DC3-406472842384
^^ This may be the issue all along, but really, it should let you change whatever you want, wherever you want, no matter the outcome
So incorrect location wouldn’t cause you to not be able to change, but “Setup” was not correct location, I didn’t see that until now, so good you could not change anyway

Below are what you want to change to 00, if not already.
Flash Protection Range Registers (FPRR) >> 0x6DD << in PchSetup
BIOS Lock, VarStoreInfo (VarOffset/VarName): 0x17 << in PchSetup

Change this one first, then reboot and change the ones above
BIOS Guard, VarStoreInfo (VarOffset/VarName): 0xDB << Located in CpuSetup - B08F97FF-E6E8-4193-A997-5E9E9B0ADB32

That was it! The lock bit was in PchSetup all along. I was able to change 0x17 to 0x00 in RU and performed a bios dump and write with no issues. The other registers (FPRR & BIOS Guard) were already set to 0x00 so no issues there. Here’s a link to my dumped biosreg.bin

https://1drv.ms/u/s!ApHYlYaDdmIEhPkjNtEzWsF4MuWwog?e=ATuzns
--------------------
Whoops, forgot to tag you @Lost_N_BIOS

@RogSmitty - I have tagging disabled, too many PM’s as it is, if I had that enabled I’d never see actual PM’s they’d be buried in all the tag PM mess I view forum like this, so I see all new incoming posts anyway - forum.php?show=last
Great to hear that was the issue all along with RU!! Sorry I missed that until recently
Here is your unlocked BIOS, flash back via >> FPTw.exe -bios -f biosregm.bin

http://s000.tinyupload.com/index.php?fil…647482470856069

*** WARNING - To ANYONE with laptop and unlocked BIOS!!!
DO NOT try to enable this graphics card or disable that card, switch cards etc. Otherwise you will end up with no display output (ie black screen) and no way to recover except by blind flash or with flash programmer.
You can change graphics related settings, like changing memory sizes, or core speeds etc, just don’t try to disable one card or change which is main etc.

Additionally, be very careful when trying to undervolt CPU, you can leave BIOS unbootable due to CPU voltage too low (Sometimes even 0.05 is too much)

WARNING *** - This BIOS is user specific! If you are not user RogSmitty at Win-RAID.com forum, DO NOT USE THIS BIOS!!
If you do, and you are not RogSmitty, then you will loose your serial, UUID, OG NVRAM, and possibly LAN MAC ID as well.
You have been warned!!!

@Lost_N_BIOS Worked perfectly! Thanks so much!

@RogSmitty - Great to hear it, you’re welcome and thanks for quick report back!!
Sorry we had some hassles to get there, but this instance will remind me to keep this in mind for users who grub doesn’t work and I suggest RU method

@Lost_N_BIOS : Excuse me,finally it works. I have need to flash my bios with FPTw my non modified Bios before flash with Stock Bios. I have downgrade with FB08 instead of FB09 because yhe last bios disable C states so the cpu can’t reach the maximum frequency in turbo boost mode(5Ghz) ? Can you modify this bios like you did with my last bios?

@jlodebx - That’s odd to have to do before flash, but at least you figured it out
You control C-States in the BIOS, no matter what version it is, especially with fully unlocked BIOS where you have much more control over the C-States.
So, if you need C-States enabled, on FD09, all you had to do was enabled them, same will apply to FD08. Both should have C-States enabled by default anyway, but maybe in FD09 they had a bug or accidentally set disabled, but you can enable them yourself if you wanted.
So, are you sure you want old BIOS mod now, or do you want to reflash back to FD09 and enable the C-States how you want? Not sure why you didn’t just do that before?

Hi @Lost_N_BIOS ,

i think it should be FB09, this is shown in BIOS menu as parameter “Bios fw version”.
Or is this not the relevant information?

Is it possible to get the flexicharger integrated? This is a functionality for clevo’s to control the battery charging levels.

Thank you

@mail123456654321 - OK, I explain in general at post #4 how this unlock is done, and give a link in that post to a guide about this kind of editing in general as well.
For your specific BIOS SA FB09, here is my edit notes, similar to what you see at post #4 - Use UEFITool 25.0 (not 25.1, not older and not newer either)

Flexicharger? No, something from Clevo BIOS cannot be put in Gigabyte BIOS
There is a “charging” setting at unlocked Advanced >> Platform Settings >> Charging Method (Options normal/Fast) - I believe this is for USB Charging, that is all that’s in this BIOS named charge/charging

Swapped Main, Advanced, Chipset, Save & Exit, enable both boot menus

4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15

BIOS Lock, VarStoreInfo (VarOffset/VarName): 0xB4D, VarStore: 0x1, QuestionId: 0xC23, Size: 1, Min: 0x0, Max 0x1, Step: 0x0 {05 91 98 0A 99 0A 23 0C 01 00 4D 0B 10 10 00 01 00}
Default: DefaultId: 0x0, Value (8 bit): 0x1 {5B 06 00 00 00 01}
One Of Option: Disabled, Value (8 bit): 0x0 (default MFG) {09 07 04 00 20 00 00}
One Of Option: Enabled, Value (8 bit): 0x1 {09 07 03 00 00 00 01}

NVRAM String for BIOS Lock
01 00 00 00 00 00 00 01 00 00 00 01 03 00 02 00 00 00 00 00 00 00 00 00 00 01 02 00 01 01 00 00 01 01 02 03 00 00 01 01 << Here >> 00

Setup PE32 (As-Is) - Iinfo from IFR output -
Setup, FormId: 0x2710 {01 86 10 27 07 00}
Main, VarStoreInfo (VarOffset/VarName): 0xFFFF, VarStore: 0x0, QuestionId: 0x1, FormId: 0x2717 {0F 0F 09 00 02 00 01 00 00 00 FF FF 00 17 27}
Advanced, VarStoreInfo (VarOffset/VarName): 0xFFFF, VarStore: 0x0, QuestionId: 0x2, FormId: 0x2718 {0F 0F 1E 00 02 00 02 00 00 00 FF FF 00 18 27}
Chipset, VarStoreInfo (VarOffset/VarName): 0xFFFF, VarStore: 0x0, QuestionId: 0x3, FormId: 0x2719 {0F 0F 1F 00 02 00 03 00 00 00 FF FF 00 19 27}
Security, VarStoreInfo (VarOffset/VarName): 0xFFFF, VarStore: 0x0, QuestionId: 0x4, FormId: 0x271A {0F 0F 3A 00 02 00 04 00 00 00 FF FF 00 1A 27}
Boot, VarStoreInfo (VarOffset/VarName): 0xFFFF, VarStore: 0x0, QuestionId: 0x5, FormId: 0x271B {0F 0F 20 00 02 00 05 00 00 00 FF FF 00 1B 27}
Save & Exit, VarStoreInfo (VarOffset/VarName): 0xFFFF, VarStore: 0x0, QuestionId: 0x6, FormId: 0x271C {0F 0F 4D 00 02 00 06 00 00 00 FF FF 00 1C 27}

Form: Main, FormId: 0x2711 {01 86 11 27 09 00}
Form: Advanced, FormId: 0x2712 {01 86 12 27 1E 00}
Form: Chipset, FormId: 0x2713 {01 86 13 27 1F 00}
Form: Security, FormId: 0x2714 {01 86 14 27 3A 00}
Form: Boot, FormId: 0x2715 {01 86 15 27 20 00}
Form: Save & Exit, FormId: 0x2716 {01 86 16 27 4D 00}

AMITSE PE32 (BODY)

@0004FB50 - blocked
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 17 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 18 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 19 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 1A 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 1B 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 1C 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
06 00 00 00 00 00 00 00

@000505A0 - All
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 17 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 18 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 19 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 1A 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 1B 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 1C 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 11 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 12 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 13 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 14 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 15 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 16 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

@000507E0 - Blocked
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 17 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 18 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 19 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 1A 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 1B 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 1C 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

-------------------- Final Edits >>> ------------------------

@4FB50 - blocked
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 11 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 12 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 13 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 1A 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 16 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

@000507E0 - blocked
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 11 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 12 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 13 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 1A 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
4A 10 59 7B 0D C0 58 41 87 FF F0 4D 63 96 A9 15 16 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00

Laptop Model: Gigabyte Aero 15 XB (2070 Super Max-Q, Non-OLED)

I’ve read some of the threads on here to try to get a good template together however I was unable to determine what information is most definitely needed.

I have zero experience with BIOS modding and stumbled by this forum through extensive research if undervolting is possible on the 10th gen series.

I am on BIOS Ver: FB05 FD05 (as shown in the drivers download list on the official page) / HFD05 (as shown in the actual BIOS).

Please let me know what other information is required.

Thanks,
Esu