EFI BIOS Master User Manual v1.2.2VM ctf8th
EFI BIOS Master User Manual v1.2.2VM ctf8th
EFI BIOS Master User Manual v1.2.2VM ctf8th
(Version 1.2.2)
Table of Contents
Warnings and Limitations ..................................................................................................................... 3
Introduction ............................................................................................................................................ 4
User and Hardware Interface................................................................................................................. 4
Getting Started ....................................................................................................................................... 5
EFI chip, SPI and Probe locations ........................................................................................................... 6
LED Info ................................................................................................................................................. 19
Troubleshooting ................................................................................................................................... 20
When the flex cable needs to be used, please do not apply too much pressure to the flex
connectors while connecting or disconnecting which might damage the flex cable: just use a
single fingernail to lift the connector from each side but slowly and carefully.
Macunlocks does not warrant that the operation of the unlocker will be uninterrupted or error-
free. Macunlocks is not responsible for damage arising from failure to follow instructions
relating to unlocker’s use. Macunlocks is also not responsible for the damages caused by
accidents, misuse, abuse, neglect, misapplication, fire, water, lightning or other acts of nature;
incorrect electrical voltage or surges; damage caused by improper installation; product
alteration or modification; improper or unauthorized repair; cosmetic damage. By using the
unlocker device, you confirm that you have read the above warnings and limitations, that you
understand them and that you agree to be bound by them.
SPI (Flex)
Connector (New)
(2010 - 2011) (Pin 1)
SPI (Flex)
10 pin SPI (Flex) Connector
Connector (New) (2012 - 2014)
(Pin 1 CS) (Pin 1)
2- Turn off the mac by holding the power button around 5 - 7 seconds, disconnect power
sources including battery, magsafe adapter and/or power cable.
3- You need to access the logic board to start the unlocking. For Macbook, Macbook Pro and
Air, you need to remove the metal cover at the bottom. For the iMac you need to remove the
screen for the most models. For any other mac models, you can find the dismantling guides at
https://www.ifixit.com
4- When you access the logic board, you should find the corresponding location to connect
the flexible SPI cable or the SOIC8 clip. If the connection of the flexible SPI cable required,
the probe connection is also required for 2010 – 2015 models to supply +3.3V as the flexible
SPI cable only carries data (For the most 2016 or newer models, the probe connection is not
needed). In the manual, we provide some of the SPI and probe locations and more will be
added in the future.
5- After connecting the clip or the SPI cable and probe, turn on the unlocker device using the
on/off switch. The LED indicator will be blinking red couple of times to start detecting the
chip. When the unlocker detects the chip, the LED indicator will be solid yellow and it will
start the unlocking process (if the LED is off please check the “LED Info” page). This
process will take around 15 seconds and finally the four flashing green LED means the
unlocking has been completed successfully. If the flexible SPI cable and probe used for the
process, the cable should be connected and the probe should be hold in position carefully
steady at all times until the four flashing green LED indicator. Otherwise the unlocking
process will be interrupted and unsuccessful. (Warning: If you are using SOIC8 clip for the
process, do not use the voltage probe as the SOIC8 cable has its own power pin, sole purpose
of the voltage probe is to be used with flexible SPI cable as a supply voltage for 2010 – 2015
models)
6- After four blinking green indicator, if you used SPI flex cable, you should first take the
voltage probe off the board carefully, turn off the unlocker and remove the SPI flex cable. If
you used the SOIC8 clip, turn off the unlocker and remove the clip from the board.
7- Now you can connect the battery if this is a Macbook Air or Pro and/or assemble the Mac.
To check the unlock result, turn the Mac on and hold Option (alt) key to access the startup
manager. If you don’t see a padlock screen then the unlocking has been completed. To
prevent re-locks in the future, you should do NVRAM reset and boot from an external USB
or DVD OSX installation media and from the disk utility, erase all hdd/ssd partitions then
start new OS installation. (For NVRAM reset details: https://support.apple.com/en-
us/HT204063 )
For the Macbook Pro, Mac mini and iMac models 2010 – 2014, you usually see SOIC8 Serial
Flash Chips used to store the EFI firmware depending on the size. The picture below shows
typical SOIC8 EFI chip.
The hole or white dot on the chip shows the pin 1 so taking this as a reference helps to
connect the clip to the chip. The size could be 32 or 64Mbits and this size could be identified
by looking at the writing on the chip. 32 Mbit chip stores 4MB and 64 Mbit chip stores 8MB
firmware. The writing on the chip can be MX25L6406E, 25Q064A or W25Q64FVSSIG. As
you can see each chip has common parts like “25” and “64”, this helps us to understand that
this chip is a 64Mbit serial flash chip. If you see a chip writing MX25L3206E, this is a
32Mbit chip.
There are other types of serial flash chips such as WSON8, WSON8 (6X5) and WLCSP seen
in the pictures below. These chips are usually used in Macbook Air models and new models
of Macbook Pro and iMacs.
For the 2015 – 2016 models, Apple uses a smaller connector as shown below:
As for the pin numberings, when you want to connect the flexible SPI cable to the connector,
usually the pin 1 of the SPI cable should point to the battery but not always (For A1534, 2016
and newer models, this is opposite so it should point to the back of the Mac). In the provided
locations and videos you can see that most of the time. To make sure connecting the cable
correctly, one should look at the logic board schematics and boardview to check the pin 1 of
the SPI debug connector therefore the pin 1 of the SPI cable and connector should match.
For the probe connection (2010 - 2015), we provided some locations. Basically, these probe
points are directly connected to the EFI serial flash chip’s +3.3 volts VCC supply voltage.
These points could be PP3V3_SUS, PP3V3_SUS_FET_R, P3V3_S5 or PP3V3S5_LL
depending on the connection to the EFI serial flash chip’s supply voltage line. To make sure
you can verify this by checking the logic board schematics and boardview before connecting
the probe. If you can’t find the schematics and boardview, you can connect the probe to the
pin 8 (VCC) of the EFI serial flash chip.
c ks
lo
un
ac
EFI BIOS
Chip Pin 1
(SOIC8 Clip)
M
s
ck
lo
un
ac
M
c ks
lo
un EFI BIOS
ac
Chip Pin 1
(SOIC8 Clip)
M
EFI BIOS
Chip Pin 1
(SOIC8 Clip)
M
ks
SPI flex
connector
c
(2015 - 2016)
Pin 1
lo
un
ac
Voltage
Probe (3.3V)
M
s
ck
Macbook Pro A1398 2015 (EMC 2910)
lo
un
ks
Voltage
Probe (3.3V)
c
lo
SPI flex
connector
(2012 - 2014)
Pin 1 un
ac
M
s
ck
lo
un
SPI flex
connector
ac
(2015 - 2016)
Pin 1
Voltage
Probe (3.3V)
M
ks
SPI flex
connector
(2012 - 2014)
c
Pin 1
lo
un
ac
M
Voltage
Probe (3.3V)
s
ck
iMac A1311 2011
lo
EFI BIOS
CHIP SOIC8
un
(Pin 1)
ac
M
c ks
lo
un
ac
M
s
ck
Macbook Air A1466 2012
lo
un
ac
SPI flex
connector
(2012 - 2014)
M
Voltage
Probe (3.3V)
c ks
lo
SPI flex
un
connector
(2012 - 2014)
Pin 1
ac
M
Voltage
Probe (3.3V)
s
ck
lo
un
ac
M
c ks
lo
SPI flex
connector
un
(2012 - 2014)
Pin 1
ac
M
SPI flex
s
connector
(2015 - 2016)
ck
Pin 1
lo
un
ac
M
Voltage
Probe (3.3V)
ks
EFI BIOS
c
Chip Pin 1
(SOIC8 Clip)
lo
un
ac
M
s
ck
lo
un
ac
EFI BIOS
Chip Pin 1
(SOIC8 Clip)
M
ks
Warning: A1534, 2016 and newer models are still experimental and should usually work as
expected however enhanced tests have not been completed yet thus we do not guarantee if
it’s fail safe or free from side effects. Therefore Macunlocks do not accept responsibility if
c
the usage of the unlocker device causes any temporary and/or permanent damages on the Mac
lo
computers. Probe connection is not required for these models. Please also disconnect the
battery and charger adapters through the unlocking process for these models.
un
Macbook A1534 2015, 2016, 2017
SPI flex
ac
connector
(2015 - 2016)
Pin 1
M
s
ck
lo
SPI flex
connector
(2015 - 2016)
ac
Pin 1
M
ks
c
lo
un
ac
SPI flex
connector
(2015 - 2016)
Pin 1
M
SPI flex
un
connector
(2015 - 2016)
Pin 1
ac
M
Red(blink 1 times): Trying to detect the chip (the chip smaller than 32Mbits will not be
detected)
Green(blink 3 times): AA battery low or incompatible (use new energizer ultimate lithium)
Blue(blink 2 times) Light Blue(blink 1 times): Unlocker test (If the light is faint, the battery
should be replaced)
Warning: Indicator LED off or very dim (always): If there is something wrong, even if the
device is on, the LED might be off or dim (assuming the AA batteries are good), in that case
immediately disconnect the flex or SOIC8 cables from the logic board and from the device,
turn off the device, remove the batteries and contact us.
1- Check the AA lithium batteries, measure their voltage, the voltage should not be less than
1.7 volts. Despite its 1.5v writing, measured voltage is always higher in new batteries (please
do not use zinc-carbon or alkaline types, instead use the “Energizer Ultimate Lithium” which
is at least 3x more powerful than standard batteries)
2- If the voltage is good, please do the following. (Warning: The steps below are only valid
for 2010 to 2015 models; do not try on newer models):
3-Close the screen lid and flip the Mac so you can access the board but the Mac
should be working
5-Touch the probe as soon as you disconnect the Mac battery to keep EFI chip active
4-Close the screen lid and flip the Mac so you can access the board but the Mac
should be working
6- As soon as you remove the power to the Mac, turn on the unlocker.