A Toughbook FZ-40 BIOS password cannot be reset from the outside, but the original can usually be recovered from the laptop’s own firmware, as long as the machine still starts Windows. Battery pulls, SSD swaps and reinstalls all leave it in place. You save a copy of the BIOS ROM with a small AMI tool and send me the file, and the password is read out of it. Nothing is flashed, and the laptop never leaves your hands.
The FZ-40 in brief: the CF-31’s replacement
Panasonic sells this machine as the Toughbook 40. FZ-40 is the model number on the underside label. It launched in 2022 as the fully rugged successor to the CF-31, with a larger 14-inch touchscreen and a carry handle. The first version, the Mk1, runs 11th-generation Intel Core processors with vPro. The later Mk2 moved to Intel Core Ultra.
It goes to police, utility, military and federal fleets, and those buyers set a supervisor password on every unit as policy. The 40 is too new to be old surplus, so a locked one normally has a recent story:
- It moved between departments or contractors, and the password did not move with it.
- It came from a government or fleet auction with a clean drive and a locked Setup.
- The one technician who knew the fleet password has moved on.
Where the Toughbook FZ-40 BIOS password is stored
The 40 is the most modular Toughbook Panasonic has built. The battery, SSD, memory, keyboard and the xPAK expansion modules all come out by hand or with a screwdriver. None of those parts carries the lock.
The Toughbook FZ-40 BIOS password is held in non-volatile flash on the motherboard, in the same chip as the UEFI firmware. That chip keeps its contents with no power at all. Here is what that rules out:
- Removing the batteries. The 40 can carry two packs and hot-swap between them. Run both flat and the password is still there.
- Changing the SSD. The drive sits in a quick-release caddy. A blank drive gives you a blank Windows and the same locked Setup.
- Replacing memory, the keyboard or an xPAK. None of them stores firmware settings.
- Reinstalling or resetting Windows. A reset only rewrites the drive.
- Hunting for a jumper. There is no clear-password jumper, and a laptop this new may still be under warranty.
So the practical fix is recovery, not reset: learn the original password, then change or remove it yourself in Setup.
What a locked Setup costs you on a 40
In the usual case Windows loads normally, and the prompt only appears when you press F2. The laptop works, but you cannot manage it:
- You cannot change the boot order, so no USB installer and no network imaging.
- Radios, cameras and ports that the last owner switched off in Setup stay off.
- Concealed mode, which blacks out the screen, lights and sound with one key press, stays configured the old way.
- Secure Boot, TPM and virtualization settings are out of reach.
The other case is harder. If the prompt appears at power-on and you cannot get past it, Windows never starts. The extraction tool needs Windows, so the software route cannot be done.
A Windows sign-in, a BitLocker recovery key, and a device-management or theft-tracking lock are separate problems. This service recovers the BIOS supervisor password and nothing else.
Which Windows it runs, and which tool folder to use
The ROM is saved with AMI’s AFUWIN utility. The FZ-40 keeps the choice simple: every unit is 64-bit, and none shipped with Windows 7 or 8.
Mk1 and Mk2
The Mk1 arrived just after Windows 11 did. Most were sold with Windows 11 Pro, while some agencies ordered the Windows 10 Pro downgrade and have stayed on it. The Mk2 is a Windows 11 Pro machine. To check yours, run winver.
Whichever you find, start with the AMI-Windows-11 folder, because it suits the recent Aptio firmware in this model. If it will not save, try AMI-Windows-10 next. The tool only reads, so a second try is harmless. The ROM extraction guide walks through each click.
The Secured-core quirk
Panasonic markets the Toughbook 40 as a Secured-core PC. Windows protections such as Memory integrity are often on from the factory. AFUWIN reads the firmware through a small AMI driver, and those protections can refuse to load it. If the tool stops with a driver error, do not start turning off security features on a work laptop. Copy the exact message and send it to me first.
How the recovery works
- Message me with the model, Mk1 or Mk2 if you know it, and your Windows version. I send a link to the tools folder.
- Connect the AC adapter and sign in with an administrator account.
- Right-click AFUWIN and choose Run as administrator. Click Save, and never Flash.
- Name the file after yourself, such as
John_Smith.rom, and send it over. - I review the ROM before any money changes hands. You buy only if I confirm the password can be recovered.
- The original password is recovered from your file, and a printed Recovery Report is mailed to you.
Two tips. Panasonic still updates this firmware, so hold off on any BIOS update while your file is under review. Recovery never writes to the chip, so BitLocker is not disturbed. Later, when you use your recovered Toughbook FZ-40 BIOS password to change Secure Boot or TPM settings, have your BitLocker recovery key ready first.
The How It Works page covers the full sequence. The Toughbook BIOS password recovery service page explains the service as a whole.
Message me before you buy
Please do not purchase first. Message me through eBay before you buy, or use the contact page. Say that you have a Toughbook FZ-40 BIOS password problem, and tell me which Windows the laptop runs. Then send the ROM named after yourself. I review the ROM first, and you pay only once recovery is confirmed possible.
The semi-rugged FZ-55 and the FZ-G2 tablet each have their own page, and the supported Toughbook models list covers the rest. The pricing and what you get page describes what arrives with the report.
Owner-authorized systems only. This service is for Toughbooks you own or are authorized in writing to service. Agency property needs that authorization from the agency itself. I will not help with a machine you cannot show is yours, and I may ask for proof of ownership.
Panasonic and Toughbook are trademarks of Panasonic Holdings Corporation. This is an independent service and is not affiliated with, endorsed by, or sponsored by Panasonic.
Download the ROM-BIOS backup tool
Save a firmware backup on Windows x64. The public edition does not include password-hash extraction.