Very interesting!

Could you please explain which serial? Can you do dmidecode and tell me which Handle/ UUID is all zeroes?

Even if it may not directly apply to current thinkpads, it implies the UEFI module might have other conditionals before going on checking the positive list - something that should be easy to check by reversing the LenovoWmaPolicyDxe.sct PE32.

If you’re interested, I have a dump of my TP bios flash unmodified and then the same version I paid some Russian guy to modify so the whitelist is removed and an extra menu unlocked. I basically sent them the dump, and after a “donation” I got the patches dump back.

Would love to learn how to figure out what the changes are because with my limited knowledge I didn’t figure anything out.

Which thinkpad model?

If you want to learn, https://erfur.github.io/2019/03/28/down_the_rabbit_hole_pt3.... is a good guide!

Thanks, I am so going down this rabbit hole.

It's for an X230, I wanted 802.11ac wifi in it.

If you are interested in doing other modifications yourself, also read about UEFI variables, how they control menu options and can be tweaked with just grub

x230 is easy, just install coreboot instead of messing with bios patches.

I've run coreboot for a while but had issues with USB3 and the docking station so I unfortunately had to revert back to the Lenovo BIOS.