CC2538 failed to load flash loader

Actually, I'd like to know how to recovery CC2538 in this situation.

Try to do a mass erase from Flash Programmer 2.

Hi YiKai,

Thanks for reply. But my Flash Programmer2 cannot detect CC2538 device at all shown as below. So how can I do  mass erase then? Is there any other tools or utilities to recover my CC2538EM?

Thanks

Do you use CC2538DK?

Hi YiKai,

As suggested, I run "Forced Mass Erase" from Flash Programmer2, but I got the following error:

How could I do then?

Thanks,

Lei

Do you use CC2538DK and can Flash Programmer 2 recognize your CC2538 before?

Yes, see below my board

Yes, Flash programmer2 can recognize my CC2538EM beofore. After I programmed with OTA-ImageA described as the first post, my CC2538 cannot be detected by Flash programmer2.

I found something about error code -230 

Do you have another CC2538EM? If yes, try to replace it to the one on this CC2538DK and see can Flash Programmer 2 recognize it.

Yes, I tried CC2538EM on two RF06EBs and none of them recognize CC2538EM any more. I am suspecting that the chip cc2538 is held in reset.

That's strange. Can you replace an USB cable and test again? Sometimes, a not qualified cable would cause similar problem.

Yes, I tried using different cables on different PC but same problem. There is little possibility caused by connection now coz I can reproduce this problem anyway.

I ran out of idea. I would suggest you to ask for replacement at www.ti.com/.../faq-returns-and-refunds.page

If you try to use IAR to download application, does it work?

No, it gave me error shown in the first post. We want to get know how to fix it coz eventually we'll probably have the same problem for our custom board.

Maybe try to contact TI local FAE to see if they can help you.

Hi YiKai,

Thanks for your suggestion, I already submitted the issue online and hopefully will get them back very shortly. Thanks again for your great help.

Thanks,

You are welcome.

Lei Jin, if you have writtend the various lock bits in the CC2538's CCA area, you have probably bricked the device. For example, you can disable the debug interface and the ability to unlock the device. This is a security feature and is intentionally not possible to undo.

TIABO

Hello TIABO,

No, I did not write any in the CC2538's CCA area while or before doing OTA upgrade. This only happened after OTA upgrading made on TI CC2538EM and our custom CC2538 board.

Right now, I cannot do anything on the damaged TI CC2538EM and our custom CC2538 board coz Flash Programmer2 and IAR cannot detect this two CC2538 devices anymore shown Unknown. I would like to know how I can recover them. But you said it is not possible to undo and does that mean I cannot recover them anymore?

Thanks,

Lei

Lei Jin said:

I would like to know how I can recover them. But you said it is not possible to undo and does that mean I cannot recover them anymore?

Yes, that is unfortunately what I'm saying: If forced mass erase in SmartRF Flash Programmer 2 isn't working, then you have bricked your CC2538 device and you cannot use it again.

TIABO

OTA to CC2538 shouldn't cause this problem. I would suggest you to ask for replacement to your CC2538EM from www.ti.com/.../faq-returns-and-refunds.page .

Thanks YiKai. I agreed with you that OTA should not cause 2538 bricked. I will try to contact them though.

Thanks,

Lei

You are welcome.

Hi TIABO,

I dont understand why OTA caused 2538 bricked. I never had such issue until I started trying on OTA upgrade. From TI side, would you try to reproduce this issue as what I did in the 1st post and figure it out why it happened during OTA upgrade? In the near future, we will put thousands of 2538 devices in the field and we'd not expect this issue happen again and ask for replacement.

Thanks,

Lei

hi all,
i have same issue,
Can use jtage(xds100 or segger ) to write flash register to erase cc2538
in 8.7.1FlashMassErase Procedure ,it only use ICEPick to do.

Hi Steven,

I am not fully understanding ur comments, did u fix this issue? If so, can u provide more detail about ur solution?

Thx,

I'm having the same issue too.. Any ideas?

Hi YK Chen,
does this issue closed? I have the same issue after I do the OTA upgrade, but I can download the chip with IAR + Jlink, I think the issue maybe is in the OTA_Boot project.

What version of SmartRF Flash Programmer 2 is used when getting the (dbgtrace create failed error)? It indicates that a DLL is missing from the installation.

It is possible to get the error popup messages about subpaths not being accessible if your project locks the the Debug TAP on the device, or disables mass erase (also known as chip erase). This is configured in the CCA area of the device. Check your OTA project to see what your CCA is configured to.

TIABO

I have the same 230 error with both a CC2538EM V1.2 (some weeks back Zstack 3.0 OTA client sample code) - not resolved, and now today also our prototype custom hardware based on the EM (which was programming fine).

Like what's reported in this thread the occurrences happened with the OTAClient image software being programmed. I hope it won't be necessary to desolder the CC2538 IC from our custom hardware or alternately populate a replacement board.

Here is the SmartRF Flash Programmer 2 ver 1.7.5 mass erase cmdline output with the SmartRF06EM V1.2 hardware:

<================================================>
dbgTrace Version 0.76 (02/13/15)
Cmd line args present = 3
Traceprobelib.dll Version 0.2.3.1
Calling init
Running TPL Init
Pod Type = 2
Attempting to open generic emulator!
Error opening generic emulator, code = -230
Traceprobe DLL Initalization (Create) Fail
Error Code = 0
press return to exit

**But the SmartRF Flash Programmer 2 reports success in it's status area:

>Forced mass erase OK.
>An external reset followed by a refresh of the device list
must be performed in order for the mass erase to take effect.

Pressing the physical EM Reset button and then the GUI <refresh> button of the device list fails to identify the CC2538 EM with "Unknown" still reported.

**Does TI have another software tool that can perform the mass erase on the cc2538 with the XDS100 V3 debug probe?
**I note with interest that there is a bug fix Mar 1 2017 in the "XDS Emulation Software (emupack)" 6.0.579.0 containing "Stellaris driver fixes for Debug Port Unlock" processors.wiki.ti.com/.../XDS_Emulation_Software_Package

According to the CC2538 user guide S 6.6 with the right command sequence we should be able to unlock and regain JTAG Debug access shouldn't we?
6.6 Debug Access Security Through ICEPick
The top most page the Flash contains the lock bit information. A value of 1 enables the access to all the
secondary/slave DAP/TAP connected to the ICEPick while 0 disables all the access.
After having locked debug access, a mass erase of the device, followed by an external reset, must be
performed to regain control of the chip.

Darkside's ArmProgConsole Full Chip Erase option works great - the TI EM and our custom hardware are now unbricked. A power down worked fine as the reset for our custom hardware too. Thanks very much. Now to add some protection to the lock bits page.

You are welcome and it's good to know it works.