EVGA

UEFI BIOS Password Reset Not Possible - Flaw or Security Feature?

Author
tayres
New Member
  • Total Posts : 2
  • Reward points : 0
  • Joined: 2019/06/12 20:28:00
  • Status: offline
  • Ribbons : 1
2019/06/14 19:57:42 (permalink)
I've had to RMA a new H370 Stinger MB after clearing both passwords in the BIOS because I can't get past a window requesting a password immediately on powering up.  Nothing I enter works. The debug code (after 3 attempts) in the lower right corner shows "D8" indicating an invalid password. I've jumped the CMOS reset pins and removed the battery overnight (with no power connected).  All that does is start the system up for 20 seconds or so, automatically powers down, then automatically powers up again to that password window.
 
This thread for the Z170 FTW describes what looks like the same problem:
https://forums.evga.com/Bios-security-password-reset-m2705497.aspx

Since the H370 Stinger doesn't have a BIOS switch or removable BIOS chip, I seem forced to RMA the MB if I ever try to clear or change the BIOS password(s).
 
My questions are:
1) Why does the BIOS state that it will "clear" the password when I enter nothing in the password change field, if I can't clear it back to no password?
2) Why does the BIOS ask for the current password in order to let me change the password if I can't (see linked thread)?
3) If my only choice is to RMA the MB anytime this happened accidentally, does that mean I can RMA the board again and again within the 3 year warranty period?
4) What happens outside the 3 year warranty period?  Or if EVGA doesn't manufacture the board anymore?
 
This seems like very strong security, but it's not practical if someone keeps the board more than 3 years or ever needs to change password(s) more than once, like if I give the board to someone else outside the warranty period and they don't want to have to enter a password. 
 
Any thoughts?
 
Thanks.
 
 
post edited by tayres - 2019/06/14 22:28:35
#1

4 Replies Related Threads

    rjohnson11
    EVGA Forum Moderator
    • Total Posts : 102262
    • Reward points : 0
    • Joined: 2004/10/05 12:44:35
    • Location: Netherlands
    • Status: offline
    • Ribbons : 84
    Re: UEFI BIOS Password Reset Not Possible - Flaw or Security Feature? 2019/06/15 03:45:54 (permalink)
    For this question please contact EVGA technical support

    AMD Ryzen 9 7950X,  Corsair Mp700 Pro M.2, 64GB Corsair Dominator Titanium DDR5  X670E Steel Legend, MSI RTX 4090 Associate Code: H5U80QBH6BH0AXF. I am NOT an employee of EVGA

    #2
    EVGA_Lee
    Moderator
    • Total Posts : 4247
    • Reward points : 0
    • Joined: 2016/11/04 14:43:35
    • Location: Brea, CA
    • Status: offline
    • Ribbons : 14
    Re: UEFI BIOS Password Reset Not Possible - Flaw or Security Feature? 2019/07/11 14:11:39 (permalink)
    @OP - I believe you may have worked with our Customer Service to resolve this issue on your end, but for anyone else concerned about this issue, please update the motherboard BIOS:
     
    *https://forums.evga.com/BIOS-Updates-for-H370-Stinger-107-B360-Micro-107-m2972313.aspx
    #3
    tayres
    New Member
    • Total Posts : 2
    • Reward points : 0
    • Joined: 2019/06/12 20:28:00
    • Status: offline
    • Ribbons : 1
    Re: UEFI BIOS Password Reset Not Possible - Flaw or Security Feature? 2019/07/11 19:22:47 (permalink)
    This is my first EVGA motherboard and the support has been great.
    post edited by tayres - 2019/07/11 19:25:10
    #4
    EVGATech_DanielM
    EVGA Tech Support
    • Total Posts : 1132
    • Reward points : 0
    • Joined: 2017/07/07 19:01:01
    • Status: offline
    • Ribbons : 2
    Re: UEFI BIOS Password Reset Not Possible - Flaw or Security Feature? 2019/07/11 19:36:36 (permalink)
    We do appreciate your kind words. You are partly the reason we spotted this issue and we want to thank you. 
    #5
    Jump to:
  • Back to Mobile