Smi Mass Production Tool Setting Password

Posted By admin On 17.09.21

SMI Mass Production Tool 1.17.13 can be downloaded from our website for free. SMI Mass Production Tool relates to System Utilities. Our built-in antivirus checked this download and rated it as 100% safe. The most popular version of the SMI Mass Production Tool 1.1. Commonly, this program's installer has the following filename: MPT.exe. Download: SMI Mass Production Tool 1.17.13 (Mirror Link #2) SM32X Test Program and ISP Release Note SM323&321 Test Program and ISP Release Note: Release Date ISP Version ISP Check Sum Test AP Version Description 2004/08/15 AB:2004-08-15 AB:0005A0DF 2004/08/15 TestAP: modify.

Production Tool Supply Locations

The program is for SMI SM32X's Mass Production. This tool can. 1 Setting Function of SM32X Production Tool. 2 Password entering for 「Setting」Function. Flash Drive Repair: SMI MPTool V2.03 for SM3255EN Recovery Fix corrupted SMI USB flash drives.Download SMI Mass Production Tool and format SMI with SM2355EN chip controller.Learn how to repair SM3255EN chip controller. Utility to restore the flash controllers Silicon Motion SM3257. Password to change the configuration: 320. SMI Mass Production Tool F0609 (SM340).

There are 2 (two) ways to have multiple partitions accessible on a USB stick on NT based systems:. flip the removable bit.

install a filter driver To flip the removable bit you may find - besides the 'Lexar' utility, the manufacturer's 'Mass Production Tool' for the USB controller used in your USB stick. You can install the filter driver 'on the fly', but this is considered 'advanced' and requires a good understanding of the procedure and of English. I am sorry for your English (or lack of it), but this is an English forum, and it is unlikely that you will find here help in your native language (whatever it is), You may want to:.

find a suitable technical forum in your language or. find a friend that better understands English that can help you In other words, you are trying to do an 'advanced' something without the needed tools (basic English knowledge), it will take you some time and a lot of efforts, maybe it would be easier if you buy a 'Lexar compatible' new USB stick. If you want to try finding the appropriate Mass production tool, get chipgenius: fint the Vid/Pid of your stick see if you can find a suitable tool here: or post an EXACT description of the stick AND it's Vid/Pid, and I may try helping you in the search. Very strange. 04FC should be 'Sunplus Technology Ltd.' , which does not produce AFAIK memory sticks, and HP should be 03F0. Please describe that stick, brand, is it this one?

That is from PNY (HP v175w) PNY should have Vid 154B. Though there are reports of using different Vid's. The PNY's I have seen use Phison chips: but I have also seen references to some of them using SMI chips: You may want to try some of the apps listed above, but first check if the PNY software: has any reference to the actual chip manufacturer.

Jaclaz Edited December 21, 2010 by jaclaz. Sorry for late reply Jaclaz.It doesn't install factory driver.(It doesn't show 'Installed OK'.).It recognize it again as 'hp v175w'. Does it matter that I'm using windows 7,not xp.I mean I'm using Windows 7.not windows Xp.

Yes, it could be part of the problem, all the stupid drivers not signed, elevated privileges and what not may cause it. But more generally this kind of tools are developed for technicians and are very poorly documented, so it is possible also that you are simply doing something 'wrong'. And another thing is that the fact that the stick has a SMI chip is still an.assumption. on my part, I wasn't able to find any definite reference/data about it, only a generic SMI reference inside the tools that you can download from the PNY website.

If I were you I would try on a machine running XP, if you really want to further experiment, I presume that you can find some friend crazy enbough to let you use his/her XP PC and installing to it an.experimental. driver.

Please also keep in mind that even if you successfully manage to run the app, it is a very risky program to run, and if used incorrectly it may lead to an unrecoverable device. Jaclaz Edited December 23, 2010 by jaclaz.

-->

Microsoft Surface Enterprise Management Mode (SEMM) is a feature of Surface devices with Surface Unified Extensible Firmware Interface (UEFI). You can use SEMM to:

Secure and manage firmware settings in your organization.
Prepare UEFI settings configurations and install them on a Surface device.

SEMM also uses a certificate to protect the configuration from unauthorized tampering or removal. To migrate a Surface Hub 2S to Windows 10 Pro or Windows Enterprise, SEMM is required.

Note

SEMM is only available on devices with Surface UEFI firmware. This includes most other Surface devices including Surface Pro 7+, Surface Pro X, Surface Hub 2S, Surface Laptop 4 commercial SKUs with an Intel processor, Surface Laptop 4 commercial SKUs with AMD processor, Surface Laptop 3 commercial SKUs with an Intel processor, and Surface Laptop Go. SEMM is not supported on the 15' Surface Laptop 3 SKU with AMD processor (available only as a retail SKU).

When Surface devices are configured by SEMM and secured with the SEMM certificate, they're considered enrolled in SEMM. When the SEMM certificate is removed and control of UEFI settings is returned to the user of the device, the Surface device is considered unenrolled in SEMM.

There are two administrative options that you can use to manage SEMM and enroll Surface devices:

SEMM standalone tool, Microsoft Surface UEFI Configurator, is described in this article.
Integration with Microsoft Endpoint Configuration Manager. For information, see Use Microsoft Endpoint Configuration Manager to manage devices with SEMM.

Note

SEMM is supported on Surface Pro X via the UEFI Manager only. You can download UEFI Manager from Surface Tools for IT. For more information, refer to Deploying, managing, and servicing Surface Pro X.

Microsoft Surface UEFI Configurator

The primary workspace of SEMM is Microsoft Surface UEFI Configurator, as shown in Figure 1.

You can use Microsoft Surface UEFI Configurator to:

Create Windows Installer (.msi) packages.
Use WinPE images to enroll, configure, and unenroll SEMM on a Surface device.

These packages contain a configuration file that specifies the UEFI settings. SEMM packages also contain a certificate that's installed and stored in firmware and is used to verify the signature of configuration files before UEFI settings are applied.

Tip

You can now use Surface UEFI Configurator and SEMM to manage ports on Surface Dock 2. To learn more, see Secure Surface Dock 2 ports with SEMM.

Figure 1. Microsoft Surface UEFI Configurator

You can use the Microsoft Surface UEFI Configurator tool in three modes:

Surface UEFI Configuration Package. Use this mode to create a Surface UEFI configuration package to enroll a Surface device in SEMM and to configure UEFI settings on enrolled devices.
Surface UEFI Reset Package. Use this mode to unenroll a Surface device from SEMM.
Surface UEFI Recovery Request. Use this mode to respond to a recovery request to unenroll a Surface device from SEMM where a Reset Package operation is not successful.

Download Microsoft Surface UEFI Configurator

You can download Microsoft Surface UEFI Configurator from the Surface Tools for IT page in the Microsoft Download Center.

Configuration package

Surface UEFI configuration packages are the primary mechanism to implement and manage SEMM on Surface devices. These packages contain a configuration file and a certificate file, as shown in Figure 2. The configuration file contains UEFI settings that are specified when the package is created in Microsoft Surface UEFI Configurator. When a configuration package runs for the first time on a Surface device that's not already enrolled in SEMM, it provisions the certificate file in the device’s firmware and enrolls the device in SEMM. When enrolling a device in SEMM, and before the certificate is stored and the enrollment finishes, you're prompted to confirm the operation by providing the last two digits of the SEMM certificate thumbprint. This confirmation requires a user to be physically present at the device during enrollment to perform the confirmation.

Figure 2. Secure a SEMM configuration package with a certificate

For more information about the requirements for the SEMM certificate, see the Surface Enterprise Management Mode certificate requirements section later in this article.

Tip

You have the option to require a UEFI password with SEMM. If you do, the password is required to view the Security, Devices, Boot Configuration, and Enterprise Management pages of Surface UEFI.

After a device is enrolled in SEMM, the configuration file is read, and the settings specified in the file are applied to UEFI. When you run a configuration package on a device that's already enrolled in SEMM, the signature of the configuration file is checked against the certificate that's stored in the device firmware. If the signature doesn't match, no changes are applied to the device.

Enable or disable devices in Surface UEFI with SEMM

The following list shows all the available devices that you can manage in SEMM:

Docking USB port
On-board audio
Digital graphics processing unit
Type cover
Micro SD card
Front camera
Rear camera
Infrared camera (for Windows Hello)
Bluetooth only
Wireless network and Bluetooth
Long-term evolution (LTE)

Note

On the UEFI Devices page, the built-in devices might vary, depending on your device or corporate environment. For example, the UEFI Devices page isn't supported on Surface Pro X; LTE appears only on LTE-equipped devices.

Configure advanced settings with SEMM

Table 1. Advanced settings

Setting	Description
IPv6 for PXE Boot	Allows you to manage IPv6 support for PXE boot. If you don't configure this setting, IPv6 support for PXE boot is disabled.
Alternate Boot	Allows you to manage the use of an Alternate boot order to boot directly to a USB or Ethernet device by pressing both the Volume Down button and Power button during boot. If you don't configure this setting, Alternate boot is enabled.
Boot Order Lock	Allows you to lock the boot order to prevent changes. If you don't configure this setting, Boot Order Lock is disabled.
USB Boot	Allows you to manage booting to USB devices. If you don't configure this setting, USB Boot is enabled.
Network Stack	Allows you to manage Network Stack boot settings. If you don't configure this setting, the ability to manage Network Stack boot settings is disabled.
Auto Power On	Allows you to manage Auto Power On boot settings. If you don't configure this setting, Auto Power on is enabled.
Simultaneous Multi-Threading (SMT)	Allows you to manage Simultaneous Multi-Threading (SMT) to enable or disable hyperthreading. If you don't configure this setting, SMT is enabled.
Enable Battery limit	Allows you to manage Battery limit functionality. If you don't configure this setting, Battery limit is enabled
Security	Displays the Surface UEFI Security page. If you don't configure this setting, the Security page is displayed.
Devices	Displays the Surface UEFI Devices page. If you don't configure this setting, the Devices page is displayed.
Boot	Displays the Surface UEFI Boot page. If you don't configure this setting, the Boot page is displayed.
DateTime	Displays the Surface UEFI DateTime page. If you don't configure this setting, the DateTime page is displayed.
EnableOSMigration	Allows you to migrate Surface Hub 2 from Windows 10 Team to Windows 10 Pro or Enterprise. If you don't configure this setting, Surface Hub 2 devices can run only the Windows 10 Team OS. Note: Dual booting between Windows 10 Team and Windows 10 Pro/Enterprise isn't available on Surface Hub 2.

Tip

Smi Mass Production Tool Setting Password

When you create a SEMM configuration package, two characters are shown on the Successful page, as shown in Figure 3.

Figure 3. Display of the last two characters of the certificate thumbprint on the Successful page

These characters are the last two characters of the certificate thumbprint and should be written down or recorded. The characters are required to confirm enrollment in SEMM on a Surface device, as shown in Figure 4.

Figure 4. Enrollment confirmation in SEMM with the SEMM certificate thumbprint

Tip

Administrators with access to the certificate file (.pfx) can read the thumbprint at any time by opening the .pfx file in CertMgr. To view the thumbprint with CertMgr:

Select and hold (or right-click) the .pfx file, and then select Open.
In the navigation pane, expand the folder.
Select Certificates.
In the main pane, select and hold (or right-click) your certificate, and then select Open.
Select the Details tab.
In the Show drop-down menu, All or Properties Only must be selected.
Select the Thumbprint field.

To enroll a Surface device in SEMM or apply the UEFI configuration from a configuration package, run the .msi file with administrative privileges on the intended Surface device. You can use application deployment or operating system deployment technologies, like Microsoft Endpoint Configuration Manager or the Microsoft Deployment Toolkit. When you enroll a device in SEMM, you must be physically present to confirm the enrollment on the device. When you apply a configuration to devices that are already enrolled in SEMM, user interaction isn’t required.

For a step-by-step walkthrough of how to enroll a Surface device in SEMM or apply a Surface UEFI configuration with SEMM, see Enroll and configure Surface devices with SEMM.

Reset package

A Surface UEFI reset package is used to perform only one task — to unenroll a Surface device from SEMM. The reset package contains signed instructions to remove the SEMM certificate from the device’s firmware and to reset UEFI settings to the factory default settings. Like a Surface UEFI configuration package, a reset package must be signed with the same SEMM certificate that’s provisioned on the Surface device. When you create a SEMM reset package, you’re required to supply the serial number of the Surface device that you intend to reset. SEMM reset packages aren’t universal — they’re specific to one device.

Recovery request

In some scenarios, it might be impossible to use a Surface UEFI reset package. (For example, if Windows becomes unusable on the Surface device.) In these scenarios you can unenroll the Surface device from SEMM through the Enterprise Management page of Surface UEFI (shown in Figure 5) with a Recovery Request operation.

Figure 5. Initiate a SEMM recovery request on the Enterprise Management page

When you use the process on the Enterprise Management page to reset SEMM on a Surface device, you’re given a Reset Request. This Reset Request can be saved as a file to a USB drive, copied as text, or read as a QR Code with a mobile device to be easily emailed or messaged. Use the Microsoft Surface UEFI Configurator Reset Request option to load a Reset Request file or to enter the Reset Request text or QR Code. Microsoft Surface UEFI Configurator generates a verification code that can be entered on the Surface device. If you enter the code on the Surface device and select Restart, the device is unenrolled from SEMM.

Note

A Reset Request expires two hours after it's created.

For a step-by-step walkthrough of how to unenroll Surface devices from SEMM, see Unenroll Surface devices from SEMM.

Surface Enterprise Management Mode certificate requirements

When you use SEMM with Microsoft Surface UEFI Configurator and want to apply UEFI settings, a certificate is required to verify the signature of configuration files. This certificate ensures that after a device enrolls in SEMM, only packages created with the approved certificate can be used to modify the UEFI settings.

Note

To make any modification to SEMM or Surface UEFI settings on enrolled Surface devices, the SEMM certificate is required. If the SEMM certificate is corrupt or lost, SEMM can’t be removed or reset. Manage your SEMM certificate accordingly with an appropriate solution for backup and recovery

Packages created with the Microsoft Surface UEFI Configurator tool are signed with a certificate. This certificate ensures that after a device is enrolled in SEMM, only packages created with the approved certificate can be used to modify the settings of UEFI.

Recommended certificate settings

The following settings are recommended for the SEMM certificate:

Key Algorithm – RSA
Key Length – 2048
Hash Algorithm – SHA-256
Type – SSL Server Authentication
Key Usage – Digital signature, Key Encipherment
Provider – Microsoft Enhanced RSA and AES Cryptographic Provider
Expiration Date – 15 Months from certificate creation
Key Export Policy – Exportable

It's also recommended that the SEMM certificate be authenticated in a two-tier public key infrastructure (PKI) architecture where the intermediate certification authority (CA) is dedicated to SEMM, enabling certificate revocation. For more information about a two-tier PKI configuration, see Test Lab Guide: Deploying an AD CS Two-Tier PKI Hierarchy.

Self-signed certificate

You can use the following example PowerShell script to create a self-signed certificate for use in proof-of-concept scenarios.To use this script, copy the following text into Notepad, and then save the file as a PowerShell script (.ps1).

Note

This script creates a certificate with a password of 12345678. The certificate generated by this script isn't recommended for production environments.

Important

For use with SEMM and Microsoft Surface UEFI Configurator, the certificate must be exported with the private key and with password protection. Microsoft Surface UEFI Configurator prompts you to select the SEMM certificate file (.pfx) and certificate password.

To create a self-signed certificate:

On your C: drive, create the folder where you'll save the script; for example, C:SEMM.
Copy the example script into Notepad (or equivalent text editor), and then save the file as a PowerShell script (.ps1).
Sign in to your computer with administrator credentials, and then open an elevated PowerShell session.
Make sure that your permissions are set to allow scripts to run. By default, scripts are blocked from running unless you modify the execution policy. To learn more, see About Execution Policies.
At the command prompt, enter the full path of the script and then press Enter. The script creates a Demo Certificate named TempOwner.pfx.

Alternatively, you can create your own self-signed certificate using PowerShell. For more information, see New-SelfSignedCertificate.

Note

For organizations that use an offline root in their PKI infrastructure, Microsoft Surface UEFI Configurator must be run in an environment connected to the root CA to authenticate the SEMM certificate. The packages generated by Microsoft Surface UEFI Configurator can be transferred as files, so they can be transferred outside the offline network environment with removable storage, such as a USB stick.

Managing certificates FAQ

The recommended minimum length is 15 months. You can use a certificate that expires in less than 15 months or use a certificate that expires in longer than 15 months.

Note

When a certificate expires, it doesn't automatically renew.

Smi Mass Production Tool Setting Password Reset

Will an expired certificate affect the functionality of SEMM-enrolled devices?
No, a certificate only impacts IT admin management tasks in SEMM and has no effect on device functionality when it expires.

Will the SEMM package and certificate need to be updated on all machines that have it?
If you want SEMM reset or recovery to work, the certificate needs to bevalid and not expired.

Can bulk reset packages be created for each surface that we order? Can one be built that resets all machines in our environment?
The PowerShell samples that create a config package for a specific device type can also be used to create a reset package that's serial-number independent. If the certificate is still valid, you can create a reset package using PowerShell to reset SEMM.