Lenovo T530 (Maximized)

Table of contents
  1. Lenovo T530 (Maximized)
    1. ⚠️ EOL: No microcode updates
    2. ✅ PROTECTED: TPM GPIO Reset
    3. ⚡ Safety First
    4. Disassembly
    5. Flashing

⚠️ EOL: No microcode updates

This board’s CPU generation has reached End of Servicing Updates. See per-board EOL/ESU status for ESU dates and Heads threat model for security implications.

✅ PROTECTED: TPM GPIO Reset

Pre-Skylake — dedicated PLTRST# pin. See Per-Board Protection Status, TPM GPIO Reset Vulnerability.

⚡ Safety First

Before starting, please read our SPI Programmer Best Practices guide for essential safety information and programmer recommendations.

Disassembly

The T530 shares the same board and SPI layout as the W530. See:

→ Coreboot W530/T530 documentation (dual SPI flash, /CS sharing trick) → Lenovo Ivy Bridge series (8MB + 4MB, socketed=no) → Internal flashing (SMM_BWP/BLE exploit for BIOS < 2014) → ThinkPad W530/T530 HMM (Hardware Maintenance Manual — shared for T530 and W530)

The T530 and W530 use a dual SPI flash layout (8 MB bottom + 4 MB top), with both chips sharing the same /CS line. The MOSI/MISO lines are linked between the two chips through zero-ohm resistors. When externally flashing one chip, the other chip’s CS# must be pulled HIGH (to VCC, 3.3V) via a 47 Ω resistor to disable it and prevent bus contention. The same trick is used on the W541 — see the libreboot W541 external flashing guide for detailed wiring instructions.

The physical disassembly (keyboard removal, palmrest removal, then flip the board) is the same as the T430 since they share the same chassis family. See the T430 disassembly guide for step-by-step photos.

On older BIOS versions (pre-2014) with SMM_BWP=0 and BLE=0, internal flashing is possible without disassembly — see the coreboot internal flashing link above.

Flashing

The SPI flash layout and flashing commands are the same as the T430. The top chip is 4 MB (contains BIOS and reset vector) and the bottom chip is 8 MB (contains ME firmware and flash descriptor).

Before connecting the programmer to either chip, ensure the other chip’s CS# is pulled HIGH to VCC via a 47 Ω resistor to prevent bus contention. See the libreboot W541 guide above for wiring details.

Then follow the T430 flashing procedure step-by-step:

Use [flasher] of your choice (flashrom or flashprog – see Tool Interchangeability) with the programmer you selected ([programmer] – see Programmer Selection):

# Identify the chip
sudo [flasher] --programmer [programmer]

# Read and verify the top (4 MB) chip twice
sudo [flasher] --read ~/top.bin --programmer [programmer] --chip <chip> && \
    sudo [flasher] --verify ~/top.bin --programmer [programmer] --chip <chip>

# Write the top ROM
sudo [flasher] --programmer [programmer] --chip <chip> --write ~/heads/build/x86/t530-maximized/t530-maximized-top.rom

# Repeat for the bottom (8 MB) chip
sudo [flasher] --read ~/bottom.bin --programmer [programmer] --chip <chip> && \
    sudo [flasher] --verify ~/bottom.bin --programmer [programmer] --chip <chip>

sudo [flasher] --programmer [programmer] --chip <chip> --write ~/heads/build/x86/t530-maximized/t530-maximized-bottom.rom

After flashing, force power off by holding the power button for 10 seconds. Two reboots are sometimes needed after flash since memory training data is wiped.

Then follow through with configuring keys.