Skip to content

SONY VAIO

In the newer SONY VAIO Notebooks, the BIOS password is no longer stored in the volatile CMOS-area but on an EEPROM.

Jean Delvare has published his results of an analysis of various Sony Vaio EEPROM dumps on his homepage. There you can see that the BIOS password is stored encrypted in the first 7 Bytes of the EEPROM and, if no password is set, these Bytes are 00h. So if you delete the whole chip - like you can do with DELL notebooks - you should get rid of the password.

Unfortunately, this would delete all other informations like e.g. serial number, model name, etc., so that specific Sony-Applications might cause trouble or even don't accept the notebook as a SONY-device.

If you are still able to boot up the notebook, but only can't get into the BIOS setup, you can approach the password the following way:

  • download and extract the DOS-version of HWiNFO
  • copy the program GETSMBUS.EXE from HWiNFO to a FAT(32)-partition on the target computer or on a floppy.
  • boot up a DOS-based operating system, e.g. from a Win98/WinME-Installation-CD.
  • run the program GETSMBUS.EXE.

The file SMBUS57.DAT created by GETSMBUS.EXE contains a complete dump of the EEPROM at address 0x57 - in 99% the SONY VAIO chip. The EEPROM can be read easily through the so-called SMBus. Usually the SMBus is used to query e.g. the RAM-modules for Vendor and Speed-Infos (they have a similar EEPROM). Also temperatures and fan-speeds can be read through the SMBus.

Now you have the encrypted password and only have to decrypt it.

Alternatively, you can desolder the EEPROM (likely of Type 93C46) and read it with an EEPROM-Programmer. Or just overwrite the first 7 Bytes with 00h. But it seems as if the EEPROM is built onto the bottom side of the mainboard and therefore it's hard to reach.

Decrypt the password

If you take a look onto the encrypted Bytes with a Hex-Editor, you'll soon notice that each Byte is an even number. So just divide by 2 and take a look at the character with this ASCII-code.

I also wrote a small Program which is able to parse the file SMBUS57.DAT or even query the SMBus directly. From the obtained data it shows informations about the SONY Vaio-notebook - even the password(s). Here is a screen-shot:

Download here: Sony VAIO Analyzer

Interior views

PCG-Z1XEP

This is an interior view of a SONY VAIO Z1:

(The DIP-switches below the keyboard are probably for setting the used TFT-panel. You can not delete the password with them anyway!)

PCG-V505

This is a naked SONY VAIO V505:

Back to overview.

Trackbacks

blog.mbirth.de on : BIOS Passwords

Show preview
Diese Seite auf Deutsch. Since Notebook-manufacturers know of the problem of forgotten passwords, they often implement easy ways to remove BIOS passwords into their notebooks. WARNING! I don't take any responsibility for damages your notebook could ge

blog.mbirth.de on : BIOS Passwörter 🇩🇪

Show preview
This page in English. Da Notebook-Hersteller die Vergesslichkeit von Passwörtern als Problem erkannt haben, ist es oft recht einfach, ein vergessenes BIOS-Passwort zu entfernen. ACHTUNG! Ich übernehme keine Garantie dafür, dass diese Tricks funktionie

Comments

Display comments as Linear | Threaded

Mobilestown on :

hi,

where is GETSMBUS.EXE?

Markus Birth on :

Ahem, just read the text: "download and extract the DOS-version of HWiNFO" ...

Gssr2ece on :

thank you for sharing sony vaio bios password. how to get GETSMBUS.exe

Battousai86 on :

Can you please tell me where the CMOS battery is stored on the Z1? BIOS is password protected, OS is corupted so cant boot into windows and I'm not sure if the cd/dvd drive is working or not! HELP!

Hunkarus on :

i have a password on bios i cant login computer and ms dos and nothing when i start te computer laptop ask me bios password i have sony vaio vgn-nw21jf model and i cant find the bios battery i think ther is an eprom bios (but not sure) how can i open this and am i right is this an eprom bios ? what must i do

lealand on :

you have to use your serial number off the laptop to get the code u need use the last 7 numbers of the sn number and get your code number to inter take a look at number 1 and number 2 number 1 is mine and number 2 was my code

0    0 8 7 2 1 2 6
1    9 7 6 1 0 1 5
2    8 6 5 0 9 0 4
3    7 5 4 9 8 9 3
4    6 4 3 8 7 8 2
5    5 3 2 7 6 7 1
6    4 2 1 6 5 6 0
7    3 1 0 5 4 5 9
8    2 0 9 4 3 4 8
9    1 9 8 3 2 3 7

Number 2 = 7770681
Number 1 = 3102545

Mickyme43 on :

hell would you have a pic of dell latitdue e6400? so i could see where i can see where the BIOS-password is in an 24C02-EEPROM

Oneclickplus on :

You're all wet. How the hell do I boot up to a DOS (Win 98/ME) disk when the laptop prompts for the BIOS password BEFORE the boot?

D Isaksen on :

This is very good information to have for us Sony laptop owners. Thanks for sharing your information and scripts.
disaksen

Oto on :

HWINO doesn't contain getsmbus anymore.

newbie on :

This tip worked greatly for my VAIO PCG-Z1vxzlp. Thanks a lot.
My case was not boot password, but bios password.

pepe le piu on :

SMBUS not found, when i run getsmbus

Adanali on :

Error: smbus host not found

capn on :

Hi I have a Vaio VGN-455D, and the problem is the boot password.
My son put a password but do not remember which.
After three attempts, a red screen appears with a key of type 2PV3-F2T3-67TK-8TKJ, and asks for another password, I do not know what would.

Add Comment

Markdown format allowed
E-Mail addresses will not be displayed and will only be used for E-Mail notifications.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Form options