*

Quick hack: Removing the Chromebook Write-Protect screw

Robert Foss avatar

Posted on 08/03/2017 by Robert Foss

Before being able to write firmware data to any production Chromebook device, the Write-Protect screw has to be removed.

This post will look specifically at removing the WP screw from a Chell (HP Chromebook 13 G1) device, and verifying that it has been successfully removed.

To actually flash firmware to Chromebook machines, a device called a Servo is needed. While these devices aren't available publicly, they can be produced freely or possibly requested from Google if you are contributing code to the ChromiumOS project.

Removing the Write-Protect screw

WP screw on Chell Chromebook

So this is what the WP screw looks like on a Chell Chromebook. This may or may not be what you will find in other devices. But if you take a close look, you will notice that the copper pad that the the screw attaches against is split into parts that are bridged by a screw being inserted.

Disable Write-Protect

So this is the part that requires a Servo device. And a ChromiumOS checkout, for some help setting one up, have a look at my previous post.

# Go to your ChromiumOS checkout
cd /opt/chromiumos

# Enter dev environment
cros_sdk

# Set device variable
export BOARD=chell

# Connect to Chromebook using a Servo device
sudo servod -b $BOARD &

# Disable WP
# This step may vary depending on the hardware of your actual Chromebook
dut-control fw_wp:off
sudo /usr/sbin/flashrom -p ft2232_spi:type=servo-v2 --wp-disable
sudo /usr/sbin/flashrom -p ec --wp-disable

 

References

ChromiumOS Servo
Setting up a ChromiumOS dev environment

 

Thanks!

This post has been a part of work undertaken by my employer Collabora.

 

Original post

Comments (9)

  1. Michael A Hall:
    Jan 15, 2018 at 09:33 PM

    Can you replace the screw after flashing?

    Reply to this comment

    Reply to this comment

    1. Robert Foss:
      Jan 16, 2018 at 03:16 PM

      Hi Michael,

      Yes you can! As far as my experience has been, the screw only protects against writes.
      If there write have already happened, you're good.


      Rob.

      Reply to this comment

      Reply to this comment

  2. Conundrum:
    Feb 14, 2018 at 09:28 AM

    Hi, yes this is by design to prevent malware messing with the unit.
    Unfortunately it also makes repairs harder, if the uEFI gets corrupted the unit is bricked until opened, screw removed and re-flashed.
    I did look into using a "magic" SD card as a workaround, as some netbooks can be jigged using a BIOS update that enables the missing function, essentially it stores the boot sector in high memory > 2MB and provides a "boot SD" option.

    Reply to this comment

    Reply to this comment

  3. lloyd:
    Feb 22, 2018 at 04:17 PM

    where wp screw on hp chromebook 11.6 v020wm

    Reply to this comment

    Reply to this comment

    1. Robert Foss:
      Mar 01, 2018 at 07:13 AM

      Hey Lloyd,

      No, unfortunately I don't have access to that hardware or documentation for it.
      If you look at the PCB the WP-screw will likely have a split exposed copper ring, which the metal screw bridges.


      Rob.

      Reply to this comment

      Reply to this comment

  4. AG:
    Feb 26, 2018 at 12:55 AM

    DO YOU KNOW WHERE IS THE write-protect screw chromebook lenovo n21 PLEASE HELP ME

    Reply to this comment

    Reply to this comment

    1. Robert Foss:
      Mar 01, 2018 at 07:13 AM

      Hey Ag,

      No, unfortunately I don't have access to that hardware or documentation for it.
      If you look at the PCB the WP-screw will likely have a split exposed copper ring, which the metal screw bridges.


      Rob.

      Reply to this comment

      Reply to this comment

  5. Gavin:
    Apr 26, 2018 at 04:43 AM

    Does anyone know where the write-protect screw is on the lenovo n23?

    Reply to this comment

    Reply to this comment


Add a Comment






Allowed tags: <b><i><br>Add a new comment:


Latest Blog Posts

The docker.io Debian package is back to life

04/07/2018

Last week, a new version of docker.io, the Docker package provided by Debian, was uploaded to Debian Unstable. Quickly afterwards, the package…

Introducing debos, a versatile images generator

27/06/2018

In Debian and derivative systems, there are many ways to build images. The simplest tool of choice is often debootstrap. It works by downloading…

Secure video comes of age

25/06/2018

Launched by Haivision in 2017, and freely available on GitHub via the Mozilla Public License 2.0, SRT is an innovative UDP-based protocol…

GStreamer CI support for embedded devices

11/06/2018

Embedded devices are a popular deployment target for GStreamer yet they are not tested on the project's Continuous Integration (CI) system.…

Happy 20th, Open Source

05/06/2018

In late January 1998, Netscape surprised everyone by releasing the source for Communicator, its web browser, making it readily available…

Four open months at Collabora

29/05/2018

At the start of 2018 in January, I joined Collabora, an open source software consultancy, as a Software Engineer Intern with the Multimedia…

Open Since 2005 logo

We use cookies on this website to ensure that you get the best experience. By continuing to use this website you are consenting to the use of these cookies. To find out more please follow this link.

Collabora Ltd © 2005-2018. All rights reserved. Website sitemap.