Dump your firmware with an SPI flasher and or get a bios
region binary from Lenovo.
Comment/Uncomment wanted patches in patches file for your model.
Use LongSoft's UEFIPatch to apply them to your rom.
To get a working TPM use Thrimbor's uefi-sign for xx20, xx30, and xx40 ThinkPads. And sibrazdic's utility for newer machines.
xx paranoidbashthot dudu2002 leokim