Toshiba BIOS passwo...
 
Notifications
Clear all

Toshiba BIOS password reset

12 Posts
4 Users
0 Reactions
4,594 Views
(@trewmte)
Noble Member
Joined: 19 years ago
Posts: 1877
Topic starter  

To a question asked about a Toshiba BIOS password reset problem I read this answer

From an electronic point-of-view, it is possible, but you will need to take the main board out. Locate the BIOS chip, turn the main board over. Pin one on the chip will have a square solder point. Remove the BIOS battery, connect pin 1 to the highest numbered pin with a wire. This should be the same type of wire used to connect a CPU fan, so that the resistance is low enough.

Connect the main board to the PSU. Plug it in and power it up. A few seconds should be enough. This will short out the BIOS chip and remove all settings from the COS, putting it back to factory settings and thus removing all passwords including TPM password security.
This is, of course, not for the faint hearted. My advice comes from experience. I have done this many times, but it carries no warranty.


   
Quote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

To a question asked about a Toshiba BIOS password reset problem I read this answer

… and … ? ?

jaclaz


   
ReplyQuote
(@trewmte)
Noble Member
Joined: 19 years ago
Posts: 1877
Topic starter  

There is no more to my post. Just passing on different techniques noted for dealing with BIOS password issues should they arise during examination. Case of passing on info…


   
ReplyQuote
jhup
 jhup
(@jhup)
Noble Member
Joined: 16 years ago
Posts: 1442
 

Which Toshiba?


   
ReplyQuote
(@trewmte)
Noble Member
Joined: 19 years ago
Posts: 1877
Topic starter  

Which Toshiba?

Toshiba Satellite C660D 19X


   
ReplyQuote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

There is no more to my post. Just passing on different techniques noted for dealing with BIOS password issues should they arise during examination. Case of passing on info…

Well, with all due respect ) , as is it looks a lot like "hearsay".

I mean, if (say) trewmte or jhup ) posted that as their personal experience, it would have a lot of validity, a "vague" method without the actual "source" is IMHO only some added "noise" on the internet.

There are tens of similar advices around, for a number of different Toshiba laptops, some posted by someone who seemingly know what he/she is doing, some just being a repost of a repost of a repost, some being actually accurate in describing the procedure and clearly wriiten by someone in the knows, some seemingly written by someone that sounds like having very little familiarity with the matter.

In this specific case I am very perplexed by the

This should be the same type of wire used to connect a CPU fan, so that the resistance is low enough.

Most of the methods you can find around short a couple of pads on the board, usually under the memory sticks, not the CMOS pins.

It is perfectly possible that this specific model needs to have the CMOS pins shorted, of course, but personally I would like to have some details on the source before even thinking of trying the method.

jaclaz


   
ReplyQuote
(@trewmte)
Noble Member
Joined: 19 years ago
Posts: 1877
Topic starter  

Well Toshiba states

"You can not remove a BIOS Password yourself, if you have forgotten it.

The notebook has to be returned to a Toshiba Authorized Reseller or Toshiba Authorized Service Provider who will remove the password as a chargeable service."
http//aps2.toshiba-tro.de/kb0/FAQ35002I000IR01.htm

The intention behind the method outlined in the Response Given is a get-around in a TPM password environment. As it was a general forum discussion I can see the wording used by the person is generalised. I didn't name the person because the comments were made by that person in a private forum and the person appears to be involved in general IT, not forensics.

There are a number Youtube videos (some with adverts before the showing) dealing with Toshiba BIOS password removal e.g.

https://www.youtube.com/watch?v=ihwj_MctVo4
https://www.youtube.com/watch?v=Boc2_3Mkdtc

The procedure being suggested here is experimental, so really it identifies a method similar to the way people experiment with chip off on test smartphones before touching evidence. As the process is not obligatory, it is just another way of potentially dealing with possible e.g. (deliberately) blocked devices. Some information that maybe potentially useful for the examiners toolbox should all else fail.


   
ReplyQuote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

The procedure being suggested here is experimental, so really it identifies a method similar to the way people experiment with chip off on test smartphones before touching evidence. As the process is not obligatory, it is just another way of potentially dealing with possible e.g. (deliberately) blocked devices. Some information that maybe potentially useful for the examiners toolbox should all else fail.

So, one should happen to get a "locked" Toshiba Satellite C660D 19X as part of a case he/she should
1) procure another one
2) lock it with a password
3) disassemble the laptop
4) experiment by attempting to short pin 1 of the BIOS to the last pin with the same type of wire used to connect a CPU fan, so that the resistance is low enough
5) IF the thingy does not fry AND IF the password is cleared then redo the same on the evidence laptop

Now it is clear, thanks.

Just for the record, both example videos you posted do not use that technique but - as hinted before - rather jump together two pads on the motherboard, curiously marked JCMOS (but this depends on the exact model of course, I have seen some other videos about two pads marked B500/XXX or some other pads), without disassembling the laptop (just removing the memory stick(s)) and seemingly to jump the pads also a much thinner wire would do.

jaclaz


   
ReplyQuote
(@trewmte)
Noble Member
Joined: 19 years ago
Posts: 1877
Topic starter  

Well that sounds about right jaclaz but the purpose of the post is so that people can experiment now to have knowledge/experience and refine the process should it be needed down the line.

I get the impression from your comments this line of electronic discovery is not really your forte or field so understandable that you possibly see more negatives in it than others might.

Experimenting has being going on as far back as I can remember with computers and mobile phones so this discussion will not be new to a lot of people.

You are right about the youtube videos, they were not the same. They were only suggested to indicate varying work in this area. What was interesting about the Response Given reply was that I didn't see a youtube video about Toshiba Satellite C660D 19X dealing with this subject and therefore the reply may help someone, which is why I posted in the first place.


   
ReplyQuote
jaclaz
(@jaclaz)
Illustrious Member
Joined: 18 years ago
Posts: 5133
 

Well that sounds about right jaclaz but the purpose of the post is so that people can experiment now to have knowledge/experience and refine the process should it be needed down the line.

I get the impression from your comments this line of electronic discovery is not really your forte or field so understandable that you possibly see more negatives in it than others might.

Not really-really I am all about experimenting BUT around or starting from information that at least sounds reliable or is provided with a minimal background.

I do understand your (good) intentions in sharing that piece of info, but as said I found it sounding a bit too "vague" or "casual" (or if you prefer "general") to be considered reliable, particularly from an anonymous/unreferenced/unknown source.

You can call me skeptic (or old or grumpy) as much as you want, of course.

Experimenting has being going on as far back as I can remember with computers and mobile phones so this discussion will not be new to a lot of people.

Sure ) , and let me assure you that I have fried 😯 quite a few thingies in similar experiments (besides a few successes).
In my (very little) experience I never happened to read or hear that a (very short) piece of wire needs to be of a given size/type (described as "same type of wire used to connect a CPU fan") because "the resistance is low enough" .
This sounded (and still sounds) to me as "queer" and - I believe legitimately - prompted my questions on the source/background of the info.

You are right about the youtube videos, they were not the same. They were only suggested to indicate varying work in this area. What was interesting about the Response Given reply was that I didn't see a youtube video about Toshiba Satellite C660D 19X dealing with this subject and therefore the reply may help someone, which is why I posted in the first place.

I know they are not the same, I was trying to say something slightly different, all known methods for all other Toshiba laptops revolve around shorting a jumper or however a couple of pads on the motherboard without needing to completely disassemble the laptop to get access to actual BIOS chip, unless this specific model is completely different, it seems to me improbable that there is a need for dismantling it and to directly short the IC pins.

jaclaz


   
ReplyQuote
Page 1 / 2
Share: