MEBx Password Reset not possible

[caveB]

I own a HP EliteDesk 800 G2 Desktop Mini with 35W where i want to use the Intel vPro Features.

I am unable to provision and use the Intel AMT functionality. This part is still locked in the BIOS with password protection.

System BIOS N21 Ver. 02.60 10/15/2022

Intel Management Engine BIOS Extension v11.0.0.0012

Intel ME v11.8.82.3838

I can enter the normal BIOS and change stuff like Boot Order etc... My issue here is NOT a BIOS Password Protection. I can enter the BIOS. The Problem is the MEBx Password is unknown and it is not possible to reset it correctly to the factory default "admin".

I can also get into "Advanced->Remote Management Options". There i set "Unconfigure AMT on next boot" to the Value "Apply". Save & Exit & Reboot.

At the next Reboot there is a prompt to continue with the AMT unprovisioning, to reset all AMT settings already done (including the MEBx Password). This unconfiguration does not reset the MEBx password!

Unfortunately the Password for the MEBx part in the BIOS is still password protected. The Password is not reset to the default password "admin" or "Admin".

Therefore, i cannot enter the MEBx part and provision the AMT settings.

I also did remove the BIOS/CMOS Battery for more than 24h hours, updated the BIOS to the latest version, downgrade is not allowed, unjumpered the CMOS Jumper and booted, pressed the CMOS Button.

Nothing helps to get rid of the unknown MEBx password protection and reset it to factory defaults?

How is the MEBx password correctly disabled on this Hardware?

[Prométhée]

Hello
we cannot help you here, regarding the password
For a user account
the only option, if you can't, is to use factory recovery, which is annoying, as it can lead to data loss
You will need to contact a computer person who, if honest, will ask for proof that the computer is yours.

 Change or reset the computer password in Windows 10

What if I forget my password? Windows 7 
How to Change or Reset Password (Windows 😎 
Reset a forgotten Microsoft account password 

 if it is for the bios, there is nothing that can be done for you here

Forgotten or Lost BIOS Password 

a system board replacement is required, and additional customer costs apply

>you will need to contact an Hp repair center or other computer service repair

Locate a service center near you

if still under warranty, you can try contacting hp directly

but there will probably be additional costs

Contact HP

Although it may be available elsewhere
It is not normal to give information to bypass a password on a public platform
anyone can abuse this, to hack into a computer, use a stolen computer, or steal someone's information
hp.rules of participation 
No posting shall include instructions or guidelines intended to circumvent or subvert security measures, including passwords, locking mechanisms, fingerprint scans, etc., or to circumvent security measures. security.

so

all I can advise you is to check in the documents, if there is a procedure mentioned

https://support.hp.com/us-en/product/hp-elitedesk-800-35w-g2-desktop-mini-pc/7633266/model/7633272/m...

 HP PC Commercial BIOS (UEFI) Setup Administration Guide For Business Notebook and Desktop 2015 Mode...

HP EliteDesk 800 G2 Desktop Mini, HP EliteDesk 705 G2 Desktop Mini, HP ProDesk 600 G2 Desktop Mini, ...

[caveB]

Hi, 

Thanks for your answer. I have to admit, i'm not amused about your answer. If you are not a "Computer Person" i'll gladly ask you to retain from answering at random. 

My guess is, you did not even read my question, at least Intel vPro, Intel AMT, KVM and MEBx are unknown to you, therefor you  have answered about Windows Password Reset. 

There is no disk or whatsoever installed. So there is zero risk of data loss. Just a CPU, a Mainboard and 8 gig of RAM running a BIOS. The functionality Intel vPro is locked and password protected, and there is no official instruction working to reset that password to default.   

This is a used item, actually it's called "refurbished" and the serial number, which belongs to me, is listed on my official invoice and is also registered with my HP Account which i use right now. I AM the legal owner. Retain from any insinuation here. 

I's not a LOST BIOS PASSWORD. <= i just pointed out it's not about that topic. Please stop posting if you do not answer to my initial question. Especially do not answer a solution where it was already clearly ruled out it's not about that. 

I've already checked the official documentation. There are procedures listed, which just do not work as described. The MEBx password is not possible to be reset to "admin". And for sure, it's not a Windows Password. 

The links provided, despite the fact i've already read them, do not cover the MEBx topic at all. Why do you post them? with +13k Posts on that forum, you should already be able to distinguish Noob Questions and specific and detailed questions. 

So again and TL;DR: MEBx password reset not possible  <-- is there a solution which i miss. Why are the HP provided solutions not working? 

[DGroves]

as you have discovered, resetting the bios will/does not reset the MEBx password this is by design and is a security feature

once this password is enabled, you must know it (enter it) to perform any further "ME" changes

the system defaults to common password (admin) when first enabled and then forces you to change this to a unique one of your choosing

so if someone enabled and saved a new password there is no known way to reset/change it  short of entering the current saved password and as pointed out previously a motherboard replacement with a unset "ME/AMT" password will be required

[Prométhée]

hi

excuse me @caveB 
but if you understand correctly I wrote a Macro type answer
Which works in all situations, in relation to the rules of the community
So sorry if you can't find the answer in the manuals

[caveB]

http://h10032.www1.hp.com/ctg/Manual/c03883429.pdf  <-- guide for the 800G1 version. 

There it's stated:

Full unprovisioning - This option does not reset all ME configuration settings (such as network settings) or the MEBx password.

Unconfigure AMT/ME &&  Advanced/AMT Configuration : The unconfigure option clears CMOS, thus returning all MEBx settings to factory defaults; for example, the password is reset to admin. 

Unfortunately, it's not related to the 800G2, just to the 800G1 version. 

So therefore it's not a general rule, to have the MEBx burned into EPROM. Other competitors still put it into CMOS, therefore the functionality is not scraped/voided for refurbished/aftermarket products. 

There must be some way to reset that MEBx for the Elitedesk 800G2 

[DGroves]

your model system has the AMT Full unconfigure option/unprovisioning settings  INSIDE the AMT bios options page, there are no bypass jumpers and you are unable to access this section until you enter the last saved password

HP has stated that there is no known way to recover this password, short of replacing the motherboard or unofficially by possibly replacing the existing bios chip with a new burned bios chip that has not had the AMT enabled