In the newer SONY VAIO Notebooks, the BIOS password is no longer stored in the volatile CMOS-area but on an EEPROM.
Jean Delvare has published his results of an analysis of various Sony Vaio EEPROM dumps on his homepage. There you can see that the BIOS password is stored encrypted in the first 7 Bytes of the EEPROM and, if no password is set, these Bytes are 00h. So if you delete the whole chip – like you can do with DELL notebooks – you should get rid of the password.
Unfortunately, this would delete all other informations like e.g. serial number, model name, etc., so that specific Sony-Applications might cause trouble or even don’t accept the notebook as a SONY-device.
If you are still able to boot up the notebook, but only can’t get into the BIOS setup, you can approach the password the following way:
- download and extract the DOS-version of HWiNFO
- copy the program GETSMBUS.EXE from HWiNFO to a FAT(32)-partition on the target computer or on a floppy.
- boot up a DOS-based operating system, e.g. from a Win98/WinME-Installation-CD.
- run the program GETSMBUS.EXE.
The file SMBUS57.DAT
created by GETSMBUS.EXE contains a complete dump of the EEPROM at address 0x57 – in 99% the SONY VAIO chip. The EEPROM can be read easily through the so-called SMBus. Usually the SMBus is used to query e.g. the RAM-modules for Vendor and Speed-Infos (they have a similar EEPROM). Also temperatures and fan-speeds can be read through the SMBus.
Now you have the encrypted password and only have to decrypt it.
Alternatively, you can desolder the EEPROM (likely of Type 93C46) and read it with an EEPROM-Programmer. Or just overwrite the first 7 Bytes with 00h. But it seems as if the EEPROM is built onto the bottom side of the mainboard and therefore it’s hard to reach.
Decrypt the password
If you take a look onto the encrypted Bytes with a Hex-Editor, you’ll soon notice that each Byte is an even number. So just divide by 2 and take a look at the character with this ASCII-code.
I also wrote a small Program which is able to parse the file SMBUS57.DAT
or even query the SMBus directly. From the obtained data it shows informations about the SONY Vaio-notebook – even the password(s). Here is a screen-shot:
Download here: Sony VAIO Analyzer
Interior views
PCG-Z1XEP
This is an interior view of a SONY VAIO Z1:
(The DIP-switches below the keyboard are probably for setting the used TFT-panel. You can not delete the password with them anyway!)
PCG-V505
This is a naked SONY VAIO V505:
hi,
where is GETSMBUS.EXE?
Ahem, just read the text: “download and extract the DOS-version of HWiNFO” …
thank you for sharing sony vaio bios password. how to get GETSMBUS.exe
Can you please tell me where the CMOS battery is stored on the Z1? BIOS is password protected, OS is corupted so cant boot into windows and I’m not sure if the cd/dvd drive is working or not! HELP!
i have a password on bios i cant login computer and ms dos and nothing when i start te computer laptop ask me bios password i have sony vaio vgn-nw21jf model and i cant find the bios battery i think ther is an eprom bios (but not sure) how can i open this and am i right is this an eprom bios ? what must i do
you have to use your serial number off the laptop to get the code u need use the last 7 numbers of the sn number and get your code number to inter take a look at number 1 and number 2 number 1 is mine and number 2 was my code
“`
0 0 8 7 2 1 2 6
1 9 7 6 1 0 1 5
2 8 6 5 0 9 0 4
3 7 5 4 9 8 9 3
4 6 4 3 8 7 8 2
5 5 3 2 7 6 7 1
6 4 2 1 6 5 6 0
7 3 1 0 5 4 5 9
8 2 0 9 4 3 4 8
9 1 9 8 3 2 3 7
Number 2 = 7770681
Number 1 = 3102545
“`
hell would you have a pic of dell latitdue e6400? so i could see where i can see where the BIOS-password is in an 24C02-EEPROM
You’re all wet. How the hell do I boot up to a DOS (Win 98/ME) disk when the laptop prompts for the BIOS password BEFORE the boot?
This is very good information to have for us Sony laptop owners. Thanks for sharing your information and scripts.
disaksen
HWINO doesn’t contain getsmbus anymore.
This tip worked greatly for my VAIO PCG-Z1vxzlp. Thanks a lot.
My case was not boot password, but bios password.
SMBUS not found, when i run getsmbus
Error: smbus host not found
Hi I have a Vaio VGN-455D, and the problem is the boot password.
My son put a password but do not remember which.
After three attempts, a red screen appears with a key of type 2PV3-F2T3-67TK-8TKJ, and asks for another password, I do not know what would.