[TOOL] Lenovo (H20) Bios Unlocker and Locker

Worked on Lenovo Legion 5 - 17IMH05H Bios Version-EFCN48WW

Thanks alot lampardrobi, trying this and will leave feedback.
I have an Alienware M15 r5 5800H 3070 16gb switched mem to hyperx 2666 cl15 spd but sorrowfully xmp isnt allowed!!! even got taiphoon burner (paid) and found both stock and hyperx kits are EEPROM spd write protected! i freaking hate dell and asus

This laptop is identical InsydeK20 bios like lenovo so i’m hoping someone can help? (SPI last resort)
This is the famous disabled 3070 cores Jarrod’s Tech 3070 dell scandal cause of fail dell engineering (cheating!)
i got it cause it was massively discounted december 21 roughly after cashback of 10% 1350$ in usd (converted from aud) basically the 3060 exact model or even Dell G5 equivalent are higher price!!! lol

Hi @AARCH64_EL3 can I have source code too?

Hi, check on the old post, I remember Uploading here, so you should be able to find it

1 Like

Hi, i really need your help, i forgot my bios pass on legion 7 (16ACHg6), is it possible to fix?

Unlocked on BGCN33WW (L340-17IRH)

But I am afraid to change something.
I am thinking enabling XMP but I have read some comments here saying it will brick.
I am on Intel system and do have the option.

I’ve noticed something interesting. I have an Ideapad 3-15IML05 with a BIOS version that’s over a year out of date (DXCN28WW). Wasn’t planning on doing the unlocking procedure due to the risk involved but I was still curious whether the BIOS for this laptop was even supported. I just snagged the latest BIOS update (DXCN41WW, released in January 2022) from Lenovo’s website and extracted the BIOS.fd file. Opening it with UEFITool and searching for “cE!” yielded no results. Now, I would’ve stopped there if it wasn’t for my curiosity. I downloaded the previous BIOS update (DXCN39WW, released in October 2021), extracted it using the same procedure and did the UEFITool search. To my surprise, this time it returned 2 matching results in DebugPageDxe and H2OFormBrowserDXE, confirming that this particular BIOS version is supported.

So, to summarize, it seems that Lenovo has patched (or at least altered) the BIOS unlocking procedure in their latest BIOS updates. For anyone looking to update, make sure to check your BIOS for support if you plan on using this tool. I also apologize if this is old news, haven’t really read much of the thread.

Hi all, so Windows updated my bios of the legion 7 16IGH6g with the 11980HK and 3080 before I started to look on how to unlock the bios. I turned on the bios flashback setting but can’t find a previous version of the bios I need. Can someone link me a previous version or will I need to wait until this gets updated?

Thanks!

Google searching this model number comes up with nothing for me. What is your Machine type? mine is 82JU, look for something similar, and I will get you the BIOS.

sorry for the very late reply man this legion 5 laptop is a very resilient server it just stays warm and never overheats despite the continuous CPU/GPU loads across two VMs
but one day windows shit itself so i decided to run some diagnostic related commands on livecd just to check the CPU info and specs ill attach the logs here so far no errors found
its a shame generic 3050/3060/3070/ does not work with vgpu_unlock (however 3080/3090 desktop is partially supported not sure about mobile)
kinda wish i got the 1660 or better yet the 2060 variant instead other than that GPU-P does work very smoothly on my underpowered 1650ti but i had to sacrifice the powerful radeon due to a bug on windows ill try the nvidia trial license on spare ssd before wiping windows

did you modify the boot parameters or the bios settings after firmware update

nope the script just still hangs and i dont see any error logs in the mobilepassthrough folder whatsoever
dunno if the some of the values touched by the unlocker got stuck since i left the bios unlocked before reverting to EUCN31WW however i did reset it first but oh well everything still looks the same no bios issues so far though there is that one time one time the screen just froze and went off black and suddenly rebooted without bsod while using vm with igpu disabled though i dont think its related there since i reset it

i looked around that other day and it seems that most of the MUXed laptops in the store uses generic 3050 with dgpu on 0 and igpu 1 ram is 512 mb vram but the other 4600h ideapad gaming had 2gb igpu from the store havent looked at the bios yet but the other iris XE intel laptops have the igpu and dgpu in proper order on task manager weird but i dont think it really matters in the long run
after looking on a different store i noticed that the 4000 series cpus have gimped igpu and the good stuff disabled but on the 5000 series (released on the same year) seems to have enabled everything including pcr7 binding by default not sure about the top of the line 6000 series though since ddr5 is too expensive in my country and they haven’t shipped yet so i cant check

what does PCR7 binding have to do with this

on my other intel ideapad both kernel DMA and pcr7 is enabled by default on linux livecd vmware shows the virtualize iommu option tired the same on my legion but it does not show up indicating that something is disabled or unsupported in the bios (or maybe its intel only)
i dont wanna repeat the same mistake when buying my legion even though it gets the job done ideapad gaming fits my criteria but the cooling is not that good and the best legion with the similar specs has kernel DMA disabled though other than that a bios mod should work but i dont want to risk it this time
TL;DR its definitely possible to make a custom firmware that lets me have the best of both worlds but first we may need to look at the ideapad AMD model BIOSes im pretty sure the code is very similar there

slightly off topic questions but is self healing enabled mode enabled by default? can it be turned off in the bios? do i need to remove the SSD before bios flash
does lenovo legion have firmware verification? i heard that some laptops refuse to boot if the bios image is not signed or tampered
any AMD users have problems with the radeon iGPU bios settings? i could not get the vram to 2gb no matter the settings
is it ok if i make a bios request here if not where should i do it? should i bump the old legion 5 topic or should i stay in this thread?
is there some kind of instruction manual/documentation for the AMD insyde bios? i dunno what the other functions do hopefully i don’t accidentally fry something by flipping the wrong settings
Edit oops messed the text formatting sorry for the long post

igpu is stuck to 1gb

hold on i think figured out the cause but i still coudn’t get it to 2gb it turns out that setting the UMA actually triggers a bug which makes it revert to default settings which is in case 1gb which is why no matter which one i select its still does not work properly this also explains why i get this 77hz monitor bug on linux and the ubuntu display settings keep popping up whenever i press FN brightness keys but works normally with the default bios settings oddly when i plug hdmi dongle the monitor disappears for a slight second and the 1650 is now at GPU 2 task manager (not sure if this is a bug)

legion also the mobilepassthough script no longer works after i unlocked my bios

hold on a second after testing it on my other laptops without modifications it still does not work its not me turns out they updated something on the github that broke it unfortunately i forgot to save the earlier revisions of the script (the git releases empty and i just left it on the liveCD ramdisk)

does anyone gets this error when booting ubuntu livecd before using the unlocker it seems lenovo specific [integrity problem loading x.509 certificate (-65)] after that the xfce desktop loads just fine but after i used setup_vars_cv ubuntu no longer boots
after poking a bit the iommu device shows on lspci indicating that it works but the BIOS is not perfect the manjaro livecd also never starts at all on my system even if the bios is in the default settings idk why
for those who already have linux installed try this GitHub - antony-jr/lenovo-legion5-15arh05-scripts: Simple scripts and guides to work around with issues on running linux in Lenovo Legion 5 15ARH05 version. it might come handy later on (not sure if the newer amd 5000 variant uses the same mechanism)
also after booting ubuntu on ideapad without touching anything in the bios fnlock became stuck ON and the webcam no longer works with usb descriptor failed resetting bios did not help im screwed how do i fix this (i heard on some secure surface laptop models the webcam is shut off when tampered with)

@withinboredom
for me i would rather use an external usb ssd for temporary dual booting the second drive will be used for storing large VM related data since im not ready to wipe windows yet

@Coconut_Cube @Call-Me-Conference77

how do i get the older bios version

hold on i think i figured something out lenovo laptops BIOS Update for Windows 10 (64-bit) - Legion 5-15ARH05 - Lenovo Support PH
here is the official download page for my legion BIOS and the file link itself https://download.lenovo.com/consumer/mobiles/eucn37ww.txt
now replace eucnXXww (28 is oldest in this particular model) with the version you are looking for and then add .exe for the installer file itself or .txt for the readME im sure there is something similar for your model

Edit: added the files not sure if these would be relevant turns out left the logs on cloud storage when i first used it (on the zipped txt files i had to type the commands manually)
82B5 without integrated gpu.zip (53.4 KB)
EUCN33WW before biosiommu patch.zip (52.6 KB)
manual logs for winraid.zip (75.5 KB)

You need this one:

https://download.lenovo.com/consumer/mobiles/h1cn44ww.exe

Honestly forgot to check back here until now, but it worked. Thank you!

hi, tell me, is it safe after all these manipulations to update bios, which is not supported by an unlocker(54ww)? will all the settings fly off. or will the system start at no all?

Has anyone tested the Lenovo Legion Y540-15IRH with product number 81SX012TUS and BIOS version BHCN45WW?

If not, can someone point me to the appropriate instructions for executing the appropriate “!cE search via UEFITool (I assume 0.28 is good)?

I’m sure I can muddle through this, but I’d like to go into it with some more experienced input in this area.

Guy if you want a method for the 2022 model, or the newest locker Bios, head over to my GH:
https://github.com/SmokelessCPUv2/SmokelessRuntimeEFIPatcher#lenovo-bios-unlock

2 Likes

can someone test if this exploit still works hope its not patched yet [Guide] Unlock Insyde H2O BIOS with Checksum Control - #21 by B83C i want to flash a custom BIOS entirely without the checksum verification taking this laptop apart might void my warranty
also where is the appropriate subforum for BIOS modding requests? im asking for a small favor here
ill be getting an extra 32gb teamgroup stick to fully utilize my cpu soon

Hey guys, do you know in what tab I can find options like Gear Down Mode,Down Mode and Bank Group Swap? I unlocked bios on legion 5 2021 bios version gkcn49ww and I cant find these options anywhere

Amd cbs-umc common options-dram memory pamming-bank group swap alt mode
Amd cbs-umc common options-dram controller configuration-gear down mo disabled
Amd cbs-umc common options-dram controller configuration-dram power option-power down enabled disabled

1 Like

Forgive me if it’s already been posted, the post has grown rather long, has anyone figured out how to change ram settings in the AMD version 2021 legions? I have upgraded the ram in my 5800h/3070 legion 5 17. The results aren’t all that impressive and I know others have unlocked a lot of potential with custom ram timings, but I’m not especially sure where to start in this advanced bios. All the guides I’ve found have been for intel versions.