*

Quick hack: Removing the Chromebook Write-Protect screw

Robert Foss avatar

Posted on 08/03/2017 by Robert Foss

Share this post:

Before being able to write firmware data to any production Chromebook device, the Write-Protect screw has to be removed.

This post will look specifically at removing the WP screw from a Chell (HP Chromebook 13 G1) device, and verifying that it has been successfully removed.

To actually flash firmware to Chromebook machines, a device called a Servo is needed. While these devices aren't available publicly, they can be produced freely or possibly requested from Google if you are contributing code to the ChromiumOS project.

Removing the Write-Protect screw

WP screw on Chell Chromebook

So this is what the WP screw looks like on a Chell Chromebook. This may or may not be what you will find in other devices. But if you take a close look, you will notice that the copper pad that the the screw attaches against is split into parts that are bridged by a screw being inserted.

Disable Write-Protect

So this is the part that requires a Servo device. And a ChromiumOS checkout, for some help setting one up, have a look at my previous post.

# Go to your ChromiumOS checkout
cd /opt/chromiumos

# Enter dev environment
cros_sdk

# Set device variable
export BOARD=chell

# Connect to Chromebook using a Servo device
sudo servod -b $BOARD &

# Disable WP
# This step may vary depending on the hardware of your actual Chromebook
dut-control fw_wp:off
sudo /usr/sbin/flashrom -p ft2232_spi:type=servo-v2 --wp-disable
sudo /usr/sbin/flashrom -p ec --wp-disable

 

References

ChromiumOS Servo
Setting up a ChromiumOS dev environment

 

Thanks!

This post has been a part of work undertaken by my employer Collabora.

 

Original post

Comments (16)

  1. Michael A Hall:
    Jan 15, 2018 at 09:33 PM

    Can you replace the screw after flashing?

    Reply to this comment

    Reply to this comment

    1. Robert Foss:
      Jan 16, 2018 at 03:16 PM

      Hi Michael,

      Yes you can! As far as my experience has been, the screw only protects against writes.
      If there write have already happened, you're good.


      Rob.

      Reply to this comment

      Reply to this comment

  2. Conundrum:
    Feb 14, 2018 at 09:28 AM

    Hi, yes this is by design to prevent malware messing with the unit.
    Unfortunately it also makes repairs harder, if the uEFI gets corrupted the unit is bricked until opened, screw removed and re-flashed.
    I did look into using a "magic" SD card as a workaround, as some netbooks can be jigged using a BIOS update that enables the missing function, essentially it stores the boot sector in high memory > 2MB and provides a "boot SD" option.

    Reply to this comment

    Reply to this comment

  3. lloyd:
    Feb 22, 2018 at 04:17 PM

    where wp screw on hp chromebook 11.6 v020wm

    Reply to this comment

    Reply to this comment

    1. Robert Foss:
      Mar 01, 2018 at 07:13 AM

      Hey Lloyd,

      No, unfortunately I don't have access to that hardware or documentation for it.
      If you look at the PCB the WP-screw will likely have a split exposed copper ring, which the metal screw bridges.


      Rob.

      Reply to this comment

      Reply to this comment

  4. AG:
    Feb 26, 2018 at 12:55 AM

    DO YOU KNOW WHERE IS THE write-protect screw chromebook lenovo n21 PLEASE HELP ME

    Reply to this comment

    Reply to this comment

    1. Robert Foss:
      Mar 01, 2018 at 07:13 AM

      Hey Ag,

      No, unfortunately I don't have access to that hardware or documentation for it.
      If you look at the PCB the WP-screw will likely have a split exposed copper ring, which the metal screw bridges.


      Rob.

      Reply to this comment

      Reply to this comment

  5. Gavin:
    Apr 26, 2018 at 04:43 AM

    Does anyone know where the write-protect screw is on the lenovo n23?

    Reply to this comment

    Reply to this comment

    1. Lenovo Support Number:
      Aug 08, 2018 at 06:01 AM

      It'll be the screw with the large flat chrome head, near what looks like the Wi-Fi card, with a split solder pad underneath it.

      Reply to this comment

      Reply to this comment

  6. Toshiba Bios:
    Oct 24, 2018 at 06:56 AM

    Thanks, Robert, I successfully removed the screw from the Chromebook. Things tend to get a little easier when you look around the web. Nice hack!

    Reply to this comment

    Reply to this comment

  7. HP printer in error state:
    Nov 02, 2018 at 12:23 PM

    I want to install Gallium OS on my Chromebook, but I can't find the write protect screw on my Samsung. I am not sure if there is a write-protect screw on the Samsung Chromebook 3.

    Reply to this comment

    Reply to this comment

    1. Robert Foss:
      Nov 03, 2018 at 05:30 PM

      Hey!

      Unfortunately I don't have information about other devices.

      If a WP screw exists it can be identified by the screw itself bridging two connections.


      Rob.

      Reply to this comment

      Reply to this comment

  8. Raileanu:
    Mar 05, 2019 at 01:34 AM

    Hello. Does anyone have a working bios dump for this HP Chromebook 13 G1 as mine one get corrupted and the computer doesn't power on at all now. Only charging led flashing but thats all, not even keyboard backlight. I have the device to flash the winbond x64 bios chip. Thank You.

    Reply to this comment

    Reply to this comment

    1. Robert Foss:
      Mar 05, 2019 at 03:22 PM

      Hey Raileanu,

      Unfortunately I don't have any Winbondx128 bios dumps.


      Rob.

      Reply to this comment

      Reply to this comment

  9. Raileanu:
    Mar 05, 2019 at 01:49 AM

    Sorry just want to correct that the chip is actually a Winbondx128 (16MB) not x64

    Reply to this comment

    Reply to this comment


Add a Comment






Allowed tags: <b><i><br>Add a new comment:


Latest Blog Posts

An overview of the Panfrost driver

13/03/2019

During the past few months significant progress has been made on the Open Source Arm Mali GPU driver front, culminating in the Panfrost…

Quick hack: Raspberry Pi meets Linux kernel mainline

12/03/2019

With just a few simple steps, you can compile and boot a Raspberry Pi using the Linux kernel mainline source code. Here's how.

News from the Debian Cloud Team

05/03/2019

Since the last Debian release, a number of changes have been made in the Debian Cloud Team, both on the technical & organisational level…

Panfrost update: A new kernel driver

04/03/2019

Following two months of work to develop a new kernel driver for Midgard and Bifrost GPUs, the kernel side of Panfrost is now in a form close…

Modern USB gadget on Linux & how to integrate it with systemd (Part 1)

18/02/2019

A look at how to implement USB gadget devices on Linux machines which have the necessary UDC hardware, automate the manual configfs process…

FOSDEM 2019 - Recorded presentations (videos)

15/02/2019

From the latest on Open Source projects Zink (OpenGL on Vulkan) and VirGL (virtual 3D GPU for QEMU), to a state of the union on GStreamer…

Open Since 2005 logo

We use cookies on this website to ensure that you get the best experience. By continuing to use this website you are consenting to the use of these cookies. To find out more please follow this link.

Collabora Ltd © 2005-2019. All rights reserved. Website sitemap.