Locked Aurix 23x

Tip / Sign in to post questions, reply, level up, and achieve exciting badges. Know more

cross mob
Not applicable
Hello,

I tried to set BMHD0 and BMHD1 of Aurix TC23x. For this purpose I wrote Lauterbach Trace32 script

; Set BMHD0
Data.Set 0xA0000000++0x17 %Long 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000 0x00000000
Data.SUM 0xA0000000++0x17 /Long /ByteSWAP /CRC32
Data.Set 0xA0000018 %Long Data.SUM()
Data.Set 0xA000001C %Long ~Data.SUM()

; Set BMHD1
Data.Set 0xA0020000++0x17 %Long 0xA0080900 0xB3590160 0x00000000 0x00000000 0x00000000 0x00000000
Data.SUM 0xA0020000++0x17 /Long /ByteSWAP /CRC32
Data.Set 0xA0020018 %Long Data.SUM()
Data.Set 0xA002001C %Long ~Data.SUM()

My goal was to clear BMHD0 and set BMHD1 to start executing software from 0xA0080900. Unfortunately after this procedure I have no communication with the CPU.

What's wrong? Can it be undone?
0 Likes
7 Replies
MoD
Employee
Employee
50 likes received 500 replies posted 100 solutions authored
Hello,
boths BMHD are invalid and ignored during startup. This should not lock the device. You can check this with the ESR0 signal. If ESR0 is always low then the device is locked. If the ESR0 is always high (external pull-up on this pin is needed) after power on reset and the debugger can't access then the device is in the Generic Bootstraploader and wait for data via ASC/CAN.
Which board you are using? How are the external connections on P14.3, P10.5 and P10.6?
0 Likes
User19266
Level 2
Level 2
If the BMHD is valid and ESR0 is always high (external pull up) and debugger can not access. Is the device will be in Generic bootstrap?.
0 Likes
MoD
Employee
Employee
50 likes received 500 replies posted 100 solutions authored
I expect the device in Generic BSL.
You use a Lauterbach debugger for access the device?
Which board you are using? How are the external connections on P14.3, P10.5 and P10.6?
0 Likes
User19266
Level 2
Level 2
BMHD was reviewed. I use isystem debugger.

It is not evaluation board. It is developed by third party according to our app.
14.3 not connected
10.5 not connected
10.6 not connected
0 Likes
MoD
Employee
Employee
50 likes received 500 replies posted 100 solutions authored
It is possible to put P14.3 to low and P10.5 P10.6 to high? Then check if access via debugger is possible, should be.
Your used BMHD is not complete valid. You selected ABM as bootmode but there is no address and CRC for range check. Therefore the ABM is not working.
0 Likes
User19266
Level 2
Level 2
The flashed boot mode header disable HWCFG, internal flash mode not ABM. CRC and inverted CRC are calculated in a correct way.
0 Likes
MoD
Employee
Employee
50 likes received 500 replies posted 100 solutions authored
BMI is 0x0160 in the mentioned BMHD1 which means Lockstep is enabled for CPU0, Startup-mode selection 110 Alternate Bootmode (ABM) and Mode selection by HWCFG pins is enabled.
0 Likes