KM9AUSB

 

Home
Up
Read this First
KeyMaker X1
KeyMaker LCD
Buy Now
Delivery times
Firmware Update
Functionality Upgrade
Damaged Board
Safety Precautions
User's Guides
EEPROM Locations
Customer Feedback
New Page 3

Joe's KeyMaker 9A USB ThinkPad Supervisor Password Recovery or Clear tool.
Can be used unlimited times on unlimited numbers of ThinkPads!

Joe in Australia offers the only Affordable Fully Assembled, Programmed and Tested unlimited use USB based ThinkPad Supervisor Password Recovery or Clear Tools in the world.

Joe's KeyMaker 9A USB can recover or clear Supervisor Passwords from all current ThinkPad models except SL300 SL400 SL500 G550 T*40 X*40 X1 Carbon (Gen 2), even if TPM/TCPA  security has been enabled.

Joe's KeyMaker 9A USB is no longer sold, it has been replaced by the KMX1

No More:

bullet

outdated RS-232 ports (which are fast disappearing from all PCs and laptops)

bullet

having to  build the  Interface

bullet

spending hours sourcing the components for the interface

bullet

spending more hours getting the interface to work

I decided to move away from all the antiquated, difficult stuff and provide a Fully Assembled, Tested and ready to use USB Tool which is powered by the locked ThinkPad and will remove the SUPERVISOR PASSWORD (SVP) from that ThinkPad at the push of a single button. This is indeed a major step forward and, as usual, brought to you FIRST by Joe in Australia.

Joe's KM9AUSB can easily remove Supervisor Password (SVP) from a ThinkPad (TP) without:

bullet

requiring the use of a second PC

bullet

without you shipping your TP to a total stranger,

bullet

without worrying and wondering if you will ever see your TP again. 

KM9AUSB does not require you to do a crash course in electronics:

Joe's KM9AUSB can be used to unlock a ThinkPad in two different ways;

  1. Stand Alone Mode - Zaps the SVP unlocking your TP, no need for a second PC or Laptop.

  2. Using another PC or Laptop to display your recovered SVP which you can then type in at the password prompt to unlock your TP.

See more detail below of the 2 different available methods

NOTE: if you already have a KM9AUSB please follow the instructions in the KM9AUSB User's Guide

The instructions below are a simplified OVERVIEW.

Joe's KeyMaker 9A USB being used in Stand Alone mode to Zap the SVP unlocking a TP without requiring the use of another PC or Laptop.

Stand Alone mode simply means that you do not need any other PC or Laptop - just the KM9AUSB board with its ZAP SVP button and power from the USB port of the password locked TP.

You can Zap/unlock an unlimited number of TPs.

You really want to unlock your TP and use it again?

The example below explains how to use KM9AUSB to Zap a SVP using KM9AUSB in Stand Alone mode

Well it doesn't get easier than this!

You can easily do it yourself! NO shipping ,NO wondering and NO worrying if you will ever see your TP again. 

NO Electronics crash course to complete, NO endless forums to read, NO guesswork.

Nothing to build and wonder if you got it right.

You don't have to become a Geek to get the job done.

KM9AUSB arrives fully assembled, tested and ready to use - You know it will work when you switch it on.

You can devote all your effort to the task of actually Zapping/Clearing that pesky Supervisor Password even if encrypted TPM/TCPA  has been enabled.

You have access to detailed illustrated instructions right here including details of how to identify which TP model you have, which EEPROM type is in your model TP and how to gain access to it.

First, you Hook up 3 wires to your Password Protected TP, you can use clips or sharp probes to make the connections, then Switch your TP ON

Your TP is asking you to enter the Supervisor Password? 

Well now you have the tools to Clear the Supervisor Password!  

Even if the optional TPM/TCPA  Security (encryption) was enabled, not a problem.

You simply depress the Zap SVP button on your KM9AUSB 

The green EEPROM activity LED will light up on the board which lets you know that the EEPROM is being accessed, the LED will remain lit for about 15 seconds while the SVP is cleared.

The green LED will briefly turn OFF.

If the operation was successfully completed the LED will turn ON for 1/2 second, OFF for 1/2 second and back ON for 1/2 second, in other words 2 SLOW flashes of the green LED means all is OK. Your pesky SVP is GONE!

If the operation fails you will see a FAST burst of flashes from the green LED signifying the SVP was not cleared which usually means your 3 EEPROM connections are wrong or became disconnected during the operation. You can check the connections and try again. 

Switch OFF your TP, switch it back ON again and it will NOT ask you for a SVP, as if it never existed.

Your TP is now unlocked

Time to congratulate yourself on a job well done.

Below are photos of an R52 being unlocked, using Joe's KeyMaker 9A USB (KM9AUSB) in Stand Alone mode. 

The R52 has been opened and placed on its side to allow access to the ON/OFF push button and also to allow access to the underside of the R52.

The Memory cover underneath the R52 has been removed to allow access to the EEPROM connection points, only 1 screw to undo.

KM9AUSB is powered by the USB port of the R52 which is being unlocked

Making the 2 probes used is described here

No other PC or anything else is required.

A black clip is being used for the GND connection attached to the metal clip which normally holds the Memory in place.

Leaving one hand free to operate the Zap SVP button.

Looks easy - because - it is easy when you have the right tools.

You can find the EEPROM location and connection points for the R52 in this case on the EEPROM Locations page, there you can find the R52 page which has the photo below of the R52 EEPROM connections.

The 2 probes held in place, GND clip visible at bottom of photo.

The Zap SVP button is pressed.

Your ThinkPad's Supervisor (SVP) is gone as if it never existed!  Your ThinkPad is now unlocked

Now you have full access to your TP

Time to congratulate yourself on a job well done.

Please take careful NOTE

3 wires are connected INSIDE the locked TP to its EEPROM, NOT to a USB port

Only the KeyMaker 9A USB itself is connected to the USB Port on the locked TP. In the Stand Alone mode the USB cable is only used to supply power to the KM9AUSB board.

When used with a second PC or Laptop to display recovered SVP, the USB connection is also used to interact with the firmware (program) inside the ATMega328 Microcontroller on the KM9AUSB board and also to display progress and results on your PC or laptop Screen.

This is NOT some new found magical way to unlock a TP without having to connect to an EEPROM inside the locked TP

Physically connecting to the EEPROM inside a locked TP cannot be avoided this is the ONLY way a Password Locked TP can be unlocked.

There is no other way to access the EEPROM inside the locked TP in order to unlock it.

Joe's KeyMaker 9A USB being used with a second PC or Laptop to display the Recovered SVP.

Read more here about using KM9AUSB with a second PC or Laptop

Below are photos of an R52 being unlocked using another R52 to run the Terminal software and power the KM9AUSB.

The password locked R52 has been opened and placed on its side to allow access to the ON/OFF push button and also to allow access to the underside of the R52.

The Memory cover underneath the R52 has been removed, the Memory has also been removed to allow access to the EEPROM connection points, only 1 screw to undo.

KM9AUSB is powered by the USB port of the second R52, the one running the Terminal Software to communicate with KM9AUSB.

Making the 2 probes used is described here

Nothing else is required.

A black clip is being used for the GND connection attached to the metal clip which normally holds the Memory in place.

Leaving one hand free to operate the Terminal Software, in some case you may need 2 persons.

Looks easy - because - it is easy when you have the right tools.

You can find the EEPROM location and connection points for the R52 in this case on the EEPROM Locations page, there you can find the R52 page which has the photo below of the R52 EEPROM connections.

The 2 probes held in place, GND clip not visible clipped to finger on left that holds memory in place.

Recovered Password ABCDEFG displayed ready to type in a the password prompt using a QWERTY English Keyboard.

NOTE: You can select an English, German or French keyboard, so that the recovered SVP is displayed ready to type in using one of those keyboards.

Your type in the recovered SVP at the password prompt

 

Your TP is now unlocked,  as a reward, you are greeted by this welcome sign of an UNLOCKED TP

Now you have full access to your TP

Time to congratulate yourself on a job well done.

Once you have unlocked your TP, I would recommend that you set a new Supervisor Password, one you can remember. If you don't set one someone else can and you may have to do this all over again, much easier to set your own password so no one else can set one and frustrate you.

A quick lesson;

When using KM9AUSB connection leads to the EEPROM inside a TP can be connected whilst the TP is switched OFF or ON, the leads can be left connected while the TP is being switched ON and OFF.

If you are new to TP unlocking you might be thinking - so what! well read on and you will see what a significant difference that can make.

RS-232 based simple interfaces when connected to the EEPROM inside a TP impose a substantial load on the EEPROM's signal lines and if left connected will interfere with the power on and power off functions of the TP. 

Which means that when using an old RS-232 interface the EEPROM leads  must be disconnected while the TP is powering up, connected to perform a function then disconnected again before switching the TP OFF. 

When using an old RS-232 interface the EEPROM leads can ONLY be connected after the TP has been switched ON and has completed its power up functions.

KM9AUSB

A lot of TP unlock operations require that you Power Cycle the TP, in other words Switch OFF, Switch ON the TP, having to disconnect leads from the EEPROM and  reconnect those EEPROM leads each time the TP is switched ON or OFF becomes tedious and can lead to mistakes.

Another plus for Joe's KeyMaker 9A USB.

KM9AUSB, in "Stand Alone Mode" - will easily Zap/Remove SVP an unlimited number of times, from all the TP Models listed below, that is all models that have either a 24RF08 or LSI EEPROM, at the push of a button even if encrypted TPM/TCPA  is enabled without needing a second PC or Laptop.

ThinkPads that will work with the KM9AUSB in "Stand Alone Mode" 

24RF08 and LSI EEPROM TP MODELS

240, 240X, 390E, 390X, 570,  600e, 600X, 770Z, A20m, A21e, A21m, A22e, A22m, A30, A30p, A31, A31p, G40, G41, R30, R31, R32,  R40, R50, R50p, R51, R52, R61, R60, R61, R61i, R400, R500,  SL410, SL510, T20, T21, T22, T23, T30, T40, T40p, T41, T41p, T42, T42p, T43, T43p, T400,  T500, T60, T60p, T61, T61p, TransNote, W500, X20, X21, X22, X23, X24, X30, X31, X40, X41, X41T, X60, X60s,  X61, X61s, X61t, X200, X300, X301, Z60, Z61

That is: EVERY ThinkPad made by IBM that has the 24RF08, LSI, or similar security chip installed. 93C46 based ThinkPad owners (560) will have to read a little more:

KM9AUSB, when connected to a second PC or Laptop will easily Display SVP from LSI and 24RF08 models listed above if not TPM/TCPA  encrypted, it displays SVP from 24C01, 24C03, 9A3C46 models listed below, it Clears SVP passwords on LSI and 24RF08 models listed above even if encrypted TPM/TCPA  is enabled.

24C01, 24C03 and 93C46 EEPROM TP Models

370C, 380Z, 380XD, 390, 560Z, 600, 760EL, 760LD, 770 series, 770E, 770ED

Remember All operations can be performed an UNLIMITED number of times on an UNLIMITED number of TPs.

Joe's KeyMaker 9A USB is shipped Fully Assembled, Programmed and Tested ready to use;

Included with Joe's KeyMaker 9A USB

  1. KM9AUSB board fully assembled, tested and programmed with Joe's KeyMaker 9A USB Firmware.

  2. 4 way cable with 4 combined sockets at one end and 4 individual sockets at the other end.  
    ONLY 3 pins of this cable are used by most people.

  3. 4 way dual male header, used for attaching custom made cables.

  4. Documentation, right here on this web site KM9A User's Guide, which includes detailed illustrated instructions on how to connect it to various TP models.

NOTE: Clips [not supplied] you can easily make or purchase your own clips ..See section on clips options.

You will need to source your own Mini USB cable NOT SUPPLIED, you most likely already have a few of those.

Joe's KeyMaker 9A USB is supplied with 4 way cable depicted above, this cable will do 99% of all TP models.

 

KeyMaker 9A USB Key Features

NO MORE excuses for not turning that Password Locked door-stop back into a working TP.

Designed and programmed entirely by Joe in Australia who has been unlocking TP's for the past 8 years and who has 30+ years experience in Microcontroller hardware and software design.

Joe's first innovation in TP unlocking (back in 2002) was to unlock TP's  without having to unsolder the EEPROM. Many have copied that and other innovations from Joe in Australia. Some even like to pretend  they thought of it first.

Just remember:  you ALWAYS see it here first.  Joe's KeyMaker 9A USB with its unique ZAP SVP feature is yet another first.

USB ports are everywhere, antiquated RS-232 ports are almost extinct.

Joe's KeyMaker 9A USB arrives in your hands FULLY assembled, programmed and tested, you KNOW  it is going to work and can concentrate on starting to unlock your TP.

No need to waste time and money sourcing parts that, depending on where you buy them, can easily cost a lot MORE than the assembled and tested Joe's KeyMaker 9A USB. Ready to go - it does not get easier than that.

You can start work immediately on unlocking your TP instead of being forced to do a short Electronics crash-course before you can even start.

You can keep it REALLY SIMPLE and just zap that pesky Supervisor Password by pressing the ZAP SVP button on the board, no charts to consult at all, no guesswork.

It isn't fudged by using bit-banging, it is done properly with a fully compliant i2c hardware interface.

The entire Program runs inside the onboard ATmega328 Microcontroller. To interact with you, it  only requires that you install the appropriate USB driver for your system and any one of the numerous freely available "Terminal Software programs" on your PC, MAC or Linux System.

Can handle all LSI and 24RF08 EEPROM based TP models.

All operations can be repeated an UNLIMITED NUMBER OF Times, on any number of different TPs.

Can either ZAP Supervisor passwords (SVPs) an unlimited number of times, including clearing LSI encrypted passwords from any number of different TPs.

You will be hard pressed to find anything that even comes close to Joe's KeyMaker 9A USB in one quality state of the art feature rich convenient USB powered TP unlocking tool that does it ALL.

Close-up view of Joe's KeyMaker 9A USB, how is it connected. 

Mini USB cable [not supplied] connects to the Mini USB connector [top left] to your PC, MAC or Linux system and the supplied 4 way cable connects the 4 pin I2C header [bottom right] to the EEPROM in your ThinkPad.

Only 3 connections GND, SCL and SDA are used 99% of the time. 

Those are ALL the required connections.

You are NOT excluded if you have a MAC or prefer to run Linux 

The reason, is Joe's KeyMaker 9A USB is a powerful state of the art Microcontroller based board with an USB interface, ALL THE WORK is done ON the board by the Microcontroller and my firmware program,  you ONLY need a Personal Computer of some kind to interact with the program running on the board and display the results whilst performing Initial Activation. 

All you need to install on your PC, MAC or Linux Personal Computer is;

  1. USB drivers for the FTDI FT232RL USB chip, Detailed installation guides for FTDI USB drivers

  2. Any one of the many FREE Terminal Software programs, GOOGLE for "Free Terminal Software".
    I prefer to use Tera Term for Windows, actual software download is here.

FTDI USB Drivers are compatible with the following operating systems; 

Windows Server 2008 R2

Windows 7

Windows 7 x64

Windows Server 2008

Windows Server 2008 x64

Windows Vista

Windows Vista x64

Windows Server 2003

Windows Server 2003 x64

Windows XP

Windows XP x64

Windows 2000

Windows ME

Windows 98

Linux

Mac OS X

Mac OS 9

Mac OS 8

Windows CE.NET (Version 4.2 and greater)

 

 

Disclaimer

I make no warranty that any of my information is correct, or safe, or does or does not breach any warranty clause,  or anything else, it is up to you to decide if you will follow all or any of the instructions to recover the Supervisor Password from a TP. It is up to you to decide, I am not responsible for the results or for any consequential or incidental damages whatsoever.

  If you have any questions, email Joe at

Hit Counter