ThinkPad P72 EC Firmware Update (Thanks Windows..)

[735]

Hello,

A few months ago, I clicked Windows Update (Windows 10) and it had a > expansion for "optional updates"

I checked all of them, and did the update. A few minutes later the machine rebooted, and I saw the ThinkPad "Firmware" updater page come up, and it was talking about "updating embedded controller firmware"

I didn't think anything of it, as subsequent to this the machine booted fine, and booted into Windows no problem.

Then, I clicked start -> shutdown, and waited for it to power off before I closed the lid. It shut off, and then, it powered up again. I thought OK, maybe it's due to the update. I logged in, start -> shutdown again, and same thing happened. It shut off, and then, 2 seconds later, it powered up again.

Fast forward 6 months, and I need to get this fixed as I literally stopped using this machine at all due to this problem and have shifted to my P1 Gen4.

This however is not a solution.

Could someone please help me with this, please.

Has anyone had anything like this happen? I have a P53, X1 C Gen6, W530, P1 Gen4, never seen something like this before.

This update *did not* come out of Lenovo System Update, it came from Microsoft / Windows Update.

I'm heartbroken, as it's looking like I need fork over 500 USD to buy a new motherboard (I have a Xeon model.. ), and it's not even the 500 USD I'm sad about, it's the *labor* I will have to painstakingly do in order to completely disassemble this machine in order to replace the board. I know how hard it is, as I re pasted this 2 yrs ago.

Thank you all for any potential advice or help
Thanks

[RealBlackStuff]

Before starting digging to find the problem, have you left the machine ON for 24 hours?
Maybe it needs some time to finish installing all those updates from 6 months ago.

[axur-delmeria]

One question: have you tried rebooting the laptop? Sometimes it's a Windows issue rather than hardware.

[735]

Hi,

I'm since running RHEL 10 on the machine and Windows is but a long forgotten memory.

Is there any bootable ISO that could be used to do both a BIOS, and EC firmware update?

It just feels weird to me to replace the system board, when all that is really wrong is the embedded controller firmware needs to be flashed..
Any chance to rollback firmware?

On my W530 I used 1vyrain, i.e. it blasted through the Lenovo default firmware and now I have an enhanced BIOS, etc, is there such a beast available for the P72 ?

Thank you!

[RealBlackStuff]

You can get many P72 BIOS versions here: https://pcsupport.lenovo.com/us/en/prod ... s/ds504024
They include ISOs to make bootable CDs.
Maybe try to just re-install it?

[735]

Thank you, that was what I was looking for.

Will do it today and let all know if we are OK, thanks!

[axur-delmeria]

Since you're running RHEL, you could use gnome-firmware to update the BIOS, sometimes even revert it.

[735]

Hello,

I was unable to use fwupdmgr in RHEL to deal with this.

I removed my NVME and put another scratch NVME, used the Lenovo USB restore stick to get it back to Windows 10.
Installed Lenovo System update, searched for updates, clicked the BIOS update, downloaded, and it installs.
It says, will reboot in 5 minutes - rebooted
Comes back up, same BIOS version is still installed

Checked BIOS

I "reset to defaults" and chose "OS Defaults" as well

Went back into Windows, did same procedure again,
All good, then it comes back to the reboot where it should do the update and then it says

"Secure Flash Authentication Failed!")

I checked the BIOS again, and confirmed that this is as it should be:
(Secure Rollback prevention / Disabled)

https://support.lenovo.com/id/en/solutions/ht117858

Note, I'm not trying to rollback my BIOS, I'm trying to go from 1.54 (July 2024) to 1.55 (August 2025)

I'm quite annoyed at this point as all of this happened from *Windows Update*, NOT Lenovo System Update. I really don't appreciate Microsoft updating my firmware on the machine and breaking it.

Anyone have any ideas, I'm *this* close to ordering another motherboard.

Very annoying, and this should serve as a warning to everyone here that uses Windows to *beware* of letting Microsoft deal with your firmware on your devices..

[RealBlackStuff]

Stop using Windows!
The ISO can be installed onto a USB-stick, using e.g. Rufus (Windows) or Etcher (Linux).
Once you have the stick, remove the HDD/SSD, then boot from USB to install BIOS.

[735]

>> The ISO can be installed onto a USB-stick, using e.g. Rufus (Windows) or Etcher (Linux).

I did this, both with a USB (dd'd it) and with a CD-RW drive (Sony DVDRW USB)

I go through the firmware update process, it reboots, and then says "Secure Flash Authentication Failed!"
I've tried all possible combinations under UEFI BIOS update option, i.e. secure rollback prevention, disabled, enabled, disabled, reset BIOS defaults, reset BIOS defaults with "OS" defaults, nothing works

It's always "Secure FLash Authentication Failed"

>> Stop using Windows!
I use RHEL 10 everywhere (was SuSE before those fools deprecated YaST in SuSE 16)
It was a terrible *terrible* mistake to click that update in Windows. I'm very sad.

I really also can't bring myself to pay 700 USD for a motherboard, when the only problem here is that the machine powers on, after you power it off.

I can buy a P17 Gen2 for 2K, but then what to do with this one if I can't fix it.

[RealBlackStuff]

IMHO it should be possible to copy the BIOS from one P72 to another.
On eBay you can even buy BIOS chips to replace yours, such as this: https://www.ebay.ie/itm/402733901271
To do this you need soldering skills or find someone to do it for you.
You'll need to make a note of all your current BIOS settings so you can set those into the new chip.
A screenshot or two would also help.

[735]

Thank you *VERY MUCH* for that information

In that case I will buy a BIOS chip
I have a guy that will solder the chip for me that's no problem

I just was very annoyed firstly because a) I love this machine, and b) I bought it brand new and therefore paid FULL PRICE for it a few years ago.
I can't just accept to throw it out, and buying a "used" P17 to replace it is a joke for me, I paid *NEW* money for mine, and I want to keep it.

Thank you for that update RE: the bios chip, I really appreciate it.


I will order it and get it done.

Do you think that BIOS chip also has the "EC" firmware on it? i.e. embedded controller ?

[RealBlackStuff]

Better ask the people you buy the chip from, they will know for sure.

[735]

Hello,

I accidentally found something:

This 100% proves beyond a shadow of a doubt that Microsoft did this to me with that ridiculous "windows update".

This, is my current BIOS as per DMIDECODE

BIOS Information
Vendor: LENOVO
Version: N2CET72W (1.55 )
Release Date: 07/24/2024
Address: 0xE0000
Runtime Size: 128 kB
ROM Size: 16 MB
Characteristics:
PCI is supported
PNP is supported
BIOS is upgradeable
BIOS shadowing is allowed
Boot from CD is supported
Selectable boot is supported
EDD is supported
3.5"/720 kB floppy services are supported (int 13h)
Print screen service is supported (int 5h)
8042 keyboard services are supported (int 9h)
Serial services are supported (int 14h)
Printer services are supported (int 17h)
CGA/mono video services are supported (int 10h)
ACPI is supported
USB legacy is supported
BIOS boot specification is supported
Targeted content distribution is supported
UEFI is supported
BIOS Revision: 1.55
Firmware Revision: 1.16

Handle 0x0014, DMI type 1, 27 bytes
System Information
Manufacturer: LENOVO
Product Name: 20MB0023US
Version: ThinkPad P72

However, looking at this page, and scrolling down, shows that this versoin 1.55, does not exist, and/or was pulled.

https://pcsupport.lenovo.com/us/en/prod ... s/ds504024

The problem is now, that whilst I have 1.55, I can't upgrade to 1.57 as I have the "Secure Flash Authentication Failed!" irrespective of which options I choose in the UEFI BIOS Firmware Security option in BIOS (i.e. allow end user firmware, all 3 I've repeatedly tried all combinations, it does no change either with Windows BIOS update, fwupdmgr update, or CD-ROM update)

This leads us back to the discussion RE: the BIOS chip.

I am absolutely going to buy that chip and get it soldered. It's exactly absolutely clear what has happened here, these fools pushed the update out (1.55) which is faulty, then they pulled it, and of course I and many others will suffer to get this fixed.

[RealBlackStuff]

Have you tried going back to 1.54?

[735]

I think I tried that last year when this happened to me -
I will however do it now and report back

[735]

Have you tried going back to 1.54?

I tried 1.40, 1.41, and 1.54

All result in "Secure Flash Authentication Failed!"

Something is broken in the BIOS I have, and honestly I suspect that the behaviour I am fighting (powering on automatically after power off) is linked to the BIOS not being properly flashed in the first place, as though the machine is still in flash mode.

Of course the BIOS setting is "Disabled" for BIOS downgrade protection as we discussed previously.

I am certain that replacing the chip will end this.

Now I need to see where that chip is physically located on the P72..

[RealBlackStuff]

I take it you have seen this?
https://pcsupport.lenovo.com/ag/en/prod ... t450-t450s

[735]

https://pcsupport.lenovo.com/ag/en/prod ... t450-t450s

Yes of course, this setting makes no difference, on, off (enabled/disabled) no changes
it fails

I am 100% certain the BIOS I have is faulty (v1.55) which was pushed out to me via Microsoft.

I ordered the BIOS chip and I will have the machine repaired in no time

I really like this system. I have many newer machines but this is my favorite, the P1 Gen4 is an incredible system as well but 2560x1600 on 16" is too small for me, it's not comfortable for more than 1-2 hours. This P72 however with it's beautiful 1920x1080 17" panel is absolutely perfect for hours of work. It's a very comfortable machine and I see it becoming my new "W530" 10 yrs from now.

[RealBlackStuff]

On T470 (2017) and T480 (2018) they use one of these BIOS chips:
Winbond W25Q128JVSIQ or
Macronix MX25L12873FM2I-10
This P52 (2018) uses Winbond W25Q128FVSIQ
Have a look at this pic from a P52, with a bit of luck P72 is similar: https://www.reddit.com/r/thinkpad/comme ... _location/

Chances are they use the same 8-pin chips in your P72.

[735]

Hello,

Great news, my ThinkPad P72 is now dead. BIOS and EC chips were replaced, it does not turn on any longer.

I am looking for a motherboard now

1.5 hours to disassemble, 2 hours spent at workshop waiting for chip replacement, 2+ hrs to re-paste, re-assemble, carefully, etc. ..

[TPFanatic]

That is such a bummer. After all this, even tho you love the laptop, please compare the price against replacing the laptop or taking no further action.

Respectfully

[RealBlackStuff]

Wow, that is so sad...
Any chance the BIOS chips were soldered upside down?
Or the chips were by accident swapped?
What exactly (make/model/how many) chip(s) did you have and what did you get?
Did you take pictures before/after?
Don't give up yet!

[735]

That is such a bummer. After all this, even tho you love the laptop, please compare the price against replacing the laptop or taking no further action.

Respectfully

I did, and I bought the new board. .. ...

I have many newer machines that I don't like at all. e.g. the P1 Gen4 which I bought in hopes of one day replacing the P72 is not going to fill it's shoes ever..

This was one of those moments where you close your eyes, pay, and move on. I need that machine and imagine, I bought it brand new, it doesn't have a single scratch or wear mark on it.

pff..

[TPFanatic]

Always follow your heart.

[RealBlackStuff]

Looking through Reddit/r/Thinkpad I came across this, it says:
change BIOS settings (Security \ UEFI BIOS Update Option \ Windows UEFI Firmware Update)
Checking the P72 BIOS, it has the same option to disable Windows UEFI Firmware Update.
Looks like Lenono allowed Micro$haft to eff up your BIOS...
When you get your new mobo, make sure to DISABLE it there.

And don't throw the 'old' mobo away, someone will be able to fix it eventually.