IBM A22M laptop BIOS - don't know administrator password

Posted on 2005-04-26
Last Modified: 2008-02-01
Hi.  I have my laptop set all with everything I want (Windows XP etc), except I want to update the BIOS (from KXET29WW) to latest.  I hope this improves my usb speed.  I don't know the administrator password and haven't needed it to date (bought laptop second hand some time ago).

Is there anyway to determine/crack the Administrator password.  In searching through other questions I found some links to the ibm site - but they no longer work

Question by:Brett39
    LVL 26

    Expert Comment

    by:Leon Fester
    You could try removing the CMOS battery, and then starting the machine it removed. Just make sure to properly disconnect all power from the laptop before doing anything like that. I'd recommend you ask somebody who knows laptop hardware to assist you. 'cos you could end up breaking something, if you're not sure about the internals. Alternatively there may be a jumper setting on the Mobo that you can change to flush that password...this also requires opening the machine and having the neccessary mobo documentation. Depending on th age of the notebook, it may/may not be available on the ibm site.
    LVL 18

    Expert Comment

    Are you talking about a bios password or the administrator password to log onto windows?
    LVL 18

    Expert Comment

    Nevermind...missed the part about updating bios
    LVL 9

    Accepted Solution

    LVL 9

    Expert Comment

    Can you boot to DOS from, say, a win98 cd?

    If so, try this: (copied from which was  athread regarding an ACER laptop, not your IBM, but they apparently used similar technology in protecting BIOS passwords (EEPROM))


    debug <ENTER>
    A <ENTER>
    MOV AX,0 <ENTER>
    OUT 70,AL <ENTER>
    MOV AX,0 <ENTER>
    OUT 71,AL <ENTER>
    CMP CX,100 <ENTER>
    JB 103 <ENTER>
    INT 20 <ENTER>
    <ENTER> Note: Nothing is typed on this line
    G <ENTER> By pressing G this will execute the above script,
    Q <ENTER>


    If you can't boot to alternate media (BIOS set to boot hd first), then your left w/ this PATA to try:

    (quoted same thread, several posts page)

    "Time to take the hard drive out and slave it in another PC with an adapter. Fdisk it, format it, and sys it so it's bootable to a dos prompt. Then copy the script files that Norm suggested to it. Put it back in the laptop, boot it up and run the script to clear the password."

    If you do that, make sure you have the w98 debug executable copied on the disk...the "script from Norm" was one of either a PASCAL script or C code that you'd need to compile.  If you have a compiler handy, here's the C code (also copied from the same thread)

    int __stdcall Clear_Cmos( )
    _outp(0x70,0x2E); //password will get cleared

    /* if you want to clear whole CMOS
    use following code
    for(int i=0;i<256;i++) // whole cmos will get cleared

    return 0;

    I'm not a C guy, so I don't know if that's complete or not...looks to me that's just the routine to poke the hex into CMOS.  Prolly still needs standard includes, void (main) or whatever, etc....should be trivial for someone who knows C.

    LVL 9

    Expert Comment

    Might want to try these passwords first...sometimes there are default manufacturer BIOS passes installed:

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Join & Write a Comment

    How to sign a powershell script so you can prevent tampering, and only allow users to run authorised Powershell scripts
    This paper addresses the security of Sennheiser DECT Contact Center and Office (CC&O) headsets. It describes the DECT security chain comprised of “Pairing”, “Per Call Authentication” and “Encryption”, which are all part of the standard DECT protocol.
    Migrating to Microsoft Office 365 is becoming increasingly popular for organizations both large and small. If you have made the leap to Microsoft’s cloud platform, you know that you will need to create a corporate email signature for your Office 365…
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    23 Experts available now in Live!

    Get 1:1 Help Now