ThinkPad BIOS locks and error messages

First identify the lock shown on your ThinkPad. A supervisor password (SVP) protects UEFI / BIOS settings. A Windows password or PIN belongs to the operating system sign-in; a BitLocker prompt asks for a recovery key. Our service removes SVP and CBA, but does not remove Windows passwords, BitLocker protection or drive locks.

Ask the previous IT team or owner for the credentials. If the supervisor password is no longer available, we assess whether we can remove it from your device. The device finder lists models and our verification status; our BIOS password removal service explains scope and next steps.

Reinstalling Windows does not remove a supervisor password. Removing the CMOS battery is not an SVP reset either. Our guide to ThinkPad BIOS password reset methods and limits explains the differences.

If your device shows “System Security: Supervisor Password Required”, read our explanation of that lock prompt. Include the model and exact message in your enquiry. Do not send passwords or recovery keys.

In this case, a supervisor password is set. Pressing Enter without entering a password opens UEFI / BIOS with restricted access. You can view settings, but cannot change protected settings.

To make changes, you need the supervisor password or professional removal of the lock. Request an unlock.

If your ThinkPad stops at this message, the configured supervisor password is blocking startup. The operating system does not start, so the device cannot be used. The correct password must be entered or the lock professionally removed to restore access.

If you do not know the password, you can request an unlock. Include the exact model and the wording of the message. A photo or screenshot helps us assess the situation.

A QR code requesting access during startup or when opening UEFI / BIOS may indicate Certificate-Based BIOS Authentication (CBA). Early CBA generations can display a long hexadecimal string of letters and digits instead of a QR code.

We can remove this CBA lock too. Our CBA removal service describes the scope. Send us the exact model and a photo or screenshot of the screen.

A QR code alone does not establish a lock. The CBA guide explains certificates, request data and access through the responsible IT team.

When Windows Update also installs a UEFI / BIOS update, we frequently see a subsequent password prompt. This does not mean that Windows created a new password.

In our experience so far, USB or EFI updates appear not to trigger this additional prompt. We have no reliable first-hand experience with updates under Linux. We cannot give a universal explanation of the cause; behaviour may vary by model and firmware version.

If the prompt blocks startup, see our System Security: Supervisor Password Required FAQ.

In the cases we have encountered, saving the UEFI / BIOS settings again was required. If this requires the supervisor password, the change cannot be completed without it.

If the password is unknown and the message blocks startup, we may be able to help with an unlock. Include your model and error code 0183.

In the cases we have handled, removing the supervisor password resolved this error. Normal startup was then possible again.

Send us your model and error code 0177 so we can assess whether our service suits your case.

Yes. The UEFI / BIOS lock we remove stays removed. A new password or certificate-based lock can be configured later. MDM / Intune is separate and is not automatically included in UEFI / BIOS unlocking.

Lenovo describes no reset procedure through its regular service for a forgotten supervisor password, specifying a chargeable replacement of the system board instead. See, for example, the Lenovo Z13/Z16 manual. Our unlocking service assesses an alternative on the existing board. The methods overview explains the differences.

We focus on ThinkPads with Intel processors from the 11th generation or AMD Ryzen from the 5000 series. The device finder shows models and our verification status. We do not yet have first-hand service experience with unlisted or unconfirmed models. Unlocking is not ruled out – please ask about your model.

The following information applies to ThinkPads whose service we confirm after assessing the model and condition. Additional services are agreed separately.

Yes. We also remove Certificate-Based BIOS Authentication on ThinkPads. Enquiries, shipping and processing follow the same steps as supervisor password removal. See the QR code and CBA FAQ for the possible screens. Request a ThinkPad unlock.

We remove supervisor passwords (SVP) and Certificate-Based BIOS Authentication (CBA) on ThinkPads. Windows passwords, BitLocker and drive locks are not included. Power-on and system management passwords require separate assessment.

Our ThinkPad BIOS password and CBA removal service explains the unlocking service in detail.

MDM / Intune is a separate, experimental additional service covering Microsoft Intune and the associated Windows Autopilot registration. Absolute / Computrace remains a separate experimental offering.

We offer this as an experimental additional service on request. For suitable devices, we assess removal or deactivation of Absolute / Computrace and then set the BIOS feature to “Permanently Disabled”. This prevents reactivation and cannot be reversed.

Availability depends on the model and activation state. This service is not included in the standard SVP/CBA unlock and is agreed separately. See the additional services below the price table for prices and details. Ask about this service.

Yes. We also service detached ThinkPad mainboards. Select “Detached mainboard” in the form. We agree the required test components and power-on condition beforehand. Please use ESD protection and suitable padding. Enquire about a mainboard unlock.

Yes. E and L series devices may also be eligible for unlocking. We assess the options for the specific model. Our focus is on the premium ThinkPad range.

Based on our current knowledge, the Embedded Controller (EC) does not fundamentally limit our ThinkPad service.

Designations such as MEC1663, MEC1503, MEC1724, MEC1742, MEC1743, NPCX997 or NPCX397 help identify the hardware. This also applies to controllers from ITE and ENE. You do not need to know the controller to enquire; the model and device condition are enough for an initial assessment.

Please ask about older or unlisted models. We will tell you whether our service fits or help you find an alternative.

We can assess your enquiry or refer you to our network of independent refurbishers, repair shops and technical specialists. Feasibility and terms are agreed individually. We share referral details only by agreement.

Pricing depends on the processor platform. The price table shows business prices excluding VAT and prices for private customers including VAT. Shipping both ways is additional. We quote individually for batches and agree any extra work and costs beforehand.

We normally process your device within 2 – 4 working days after arrival and fulfilment of the payment terms. We can split larger orders into batches and agree the scope, sequence and schedule with you.

We work on a No Fix / No Fee basis. If unlocking is unsuccessful, we do not charge for the unlock and refund any unlocking fees already paid within 14 days. Shipping both ways and separately agreed assessments or additional services are excluded.

Yes, subject to prior booking confirmation. See the additional services below the price table for prices and terms. We complete the agreed unlock by the end of the next working day after arrival and fulfilment of the payment terms. Working days are Monday to Friday, excluding public holidays in Hamburg.

If we miss this deadline, the express surcharge is waived. We refund any express fees already paid. Shipping time is separate. Please use express shipping and include a prepaid express return label. Ask about express processing.

Please provide the exact model, MTM code and serial number, and describe the lock or error message. For multiple devices, include these details for each device and the total quantity.

Example: Lenovo ThinkPad T14 Gen 6 (Intel), Intel Ultra 5 225U, MTM 21QC0037MH. The four-character model identifier 21QC is also sufficient as the MTM. You can find the eight-character serial number on the device label or in the system information. Please do not send passwords or recovery keys.

Submit a request and wait for our order and price confirmation. Agree payment and shipping authorisation with us before sending the device. We return it after assessment and successful unlocking. The service process describes the steps and payment terms. Submit a service request.

Of course. We are happy to discuss your device and the process before you ship. Your questions also help us improve the information for other customers. We agree the model, lock type and existing damage with you beforehand. Please wait for our confirmation before shipping. Contact us.

After our order and price confirmation, you receive payment details for PayPal or bank transfer. Please pay only then and use the supplied order or invoice number as the payment reference.

Private customers pay in full upfront and ship only after we confirm receipt of payment. Business payment terms and shipping authorisation are agreed individually. Refunds for unsuccessful unlocking follow our No Fix / No Fee policy.

You arrange and pay for shipping both ways. Please include a prepaid return label and check the addresses on both labels. Agree carriers other than DHL or Hermes with us beforehand. Statutory rights and the legal allocation of transport risk remain unaffected.

Cushion the notebook securely. For complete notebooks, we need the battery, but not the power adapter. If the bottom cover is already open, it may remain unscrewed; refit and secure it for transport. Protect detached mainboards against ESD. Include your request reference or signed PDF form and a prepaid return label. The shipping checklist explains preparation.

No. Unlocking does not require storage, and we prefer devices without an SSD. Remove it only if it is safe and your IT policy allows it. Removable SSD heatsinks or copper plates belonging to it can also stay with you. The shipping guide explains preparation in detail.

Where required, we may update and reset the UEFI / BIOS; unchanged settings are not guaranteed. You confirm consent in the service request. Data on your storage is not part of the service. Back up data and required recovery information beforehand; passwords and keys stay with you. The backup guide explains BitLocker and firmware changes.

Yes, by prior arrangement. Please tell us the shipping country. You arrange and pay for shipping both ways and ensure compliance with the shipping, packaging and import requirements of each destination country. This includes any required customs declarations, accompanying documents and carrier requirements, particularly for batteries.

We agree the details and documents for shipment and return with you beforehand.

If damage occurs during the work, we inform you promptly, explain the effects we have identified and discuss the next steps. We agree any further action with you. Your statutory rights remain unaffected.

We assess identifiable risks before intervening. If the risk of damage is too high, we decline the work, for example where epoxy obstructs access to the required contact points.

Yes. Epoxy can block access to contact points or make the work too risky. Declining a device for this reason does not mean that unlocking is technically impossible. What matters is whether we can work safely.

If the contact points are later professionally exposed and the device still functions, we can reassess the order. Agree the approach with us before shipping so we can clarify the situation where possible. Do not remove epoxy yourself based on these notes: doing so can permanently damage the mainboard. We confirm the unlock only after assessing your specific request.

Yes. The device or mainboard must function and power on. A password prompt alone does not count as a startup failure. Check untested devices before shipping. We cannot work on devices that do not power on; general repairs are not part of the service.

We take a flexible approach to isolated exceptions. However, if a batch within a bulk order contains a high number of non-starting boards, a previously agreed handling fee may apply.

Please report all known damage and issues beyond normal wear and tear or age-related signs of use, such as deep scratches, significant dents, cracks, dead pixels, missing parts or functional faults. Include previous repair attempts. You do not need to list normal signs of use individually.

Yes. Clips and fixings on used or previously repaired devices may already be weakened or brittle, only becoming apparent on opening. We work carefully, document issues and discuss them with you. This is not a blanket exclusion of liability.

We document the situation, pause work when needed and contact you. Together we discuss a different approach, a repair or stopping the service. Chargeable additional work requires your express agreement.

Yes. Photograph the case, display, ports and known damage before shipping. This records the initial condition and helps resolve later questions.

In our experience, the work is not visually apparent on most devices. Some models require us to partly remove or cut protective films and, where necessary, remove epoxy from contact areas. We agree any extra work and costs beforehand.

We work as carefully as possible, but cannot rule out minor visible traces. Technical changes, such as a UEFI / BIOS update, a reset or changed security settings, may also be identifiable.

Whether and to what extent an existing Lenovo warranty is affected depends on the applicable terms and the work required. We cannot give a blanket assurance that the warranty will remain unchanged. If this matters to you, please discuss it with us before shipping.

You must own the device or be authorised to commission the work and confirm this in the service request. If origin is unclear, we may request evidence and refuse work. Our authorisation examples explain how to clarify this for company or acquired devices.

We primarily work with ITAD providers, refurbishers, recyclers, commercial resellers and intermediaries acquiring device lots or lease returns. This includes smaller dealers buying individual lots and businesses managing their own device fleets.

We handle individual ThinkPads as well as larger bulk orders. Private customers are welcome too. Enquire about multiple devices.

Yes. We process larger quantities as a bulk order and can split them into batches. Tell us the models and approximate quantity so we can agree the process. Enter the total quantity in the service request. For different models or variants, select “Different devices” and enter one representative device. List the other models, quantities and relevant details under “Additional devices and notes”. For several identical devices, the quantity is sufficient.

An assessment and handling fee per affected board may apply only to bulk orders with a high number of non-starting boards. We take a flexible approach to isolated exceptions and discuss them individually; the fee is not automatically charged for every unsuitable device.

You confirm the terms in the service request before shipping. See the pricing section for our prices and further information.

By arrangement, we can service larger orders on site. For more than 75 devices, this may make more sense than shipping. Tell us the location, models and approximate quantity so we can agree the requirements, date and terms.

When company equipment changes hands, previous credentials may be missing: they were not recorded, the IT team is unavailable or cannot disclose them. A UEFI / BIOS lock alone therefore does not establish the device’s origin.

An accessible UEFI / BIOS allows quality hardware to be configured for reuse. This supports refurbishment, extends its potential useful life and can improve resale value without replacing the motherboard solely because of a UEFI / BIOS lock.

No. UNLOCKNG is an independent service by DG Consulting. It is not a Lenovo partner or authorised Lenovo service. Trademarks belong to their respective owners.