http://www.staff.uni-marburg.de/~schmit ... covery.zip
1. USB floppy
2. Update Key/boot-block jumper LPT_plug (wiring diagram see .pdf)
3. WinXP running machine
4. decompress software i.e. 7zip
steps on WinX pmachine:
1. download from Lenovo site BIOS Update (Non-Diskette) image/program
(i.e. 1yuj18us.exe or 70uj29us.exe)
2. decompress (i.e by 7zip) image/program to find .img-file
(i.e.: 1YUJ18US.IMG or 70UJ29US.IMG)
2a.decompress img-file to find file $xxxxxxxxx.FL1 (x=dummy)
(i.e. $0197000.FL1 or $0199000.FL1)
3. extract BIOS.WPH by running at command prompt:
"e_bcpvpw.exe $0197000.FL1 BIOS.WPH" or
"e_bcpvpw.exe $0199000.FL1)BIOS.WPH"
4. place BIOS.WPH into folder containing
a. WINCRIS.EXE
b. PHLASH16.EXE
c. MINIDOS.SYS
d. MAKEBOOT.EXE
e. CRISBOOT.BIN
5. plug USB floppy to WinXP machine
6. run WINCRIS.exe to create Crisis Recovery Floppy
steps on Thinkpad T43 with faulty BIOS:
1. connect to Update Key/boot-block jumper LPT_plug
2. connect USB floppy
3. push poweron button
4. wait until Thinkpad T43 beebs and stops running
5. disconnect Update Key/boot-block jumper LPT_plug
have fun

edit: may be I succeeded with my two types of T43 as there was no SuperVisorPassword SVP set and TCPA security chip was disabled. besides these conditions there might be different results

http://www.staff.uni-marburg.de/~schmitzr/TCPA.pdf