• State
  • Replies 3 replies
  • Subscribers 31 subscribers
  • Views 76 views
  • Users 0 members are here
Support feedback
Options
Options
Related

MSPM0G3507: rollback protection

Zq
Prodigy 60 points
Part Number: MSPM0G3507
Other Parts Discussed in Thread: MSPM0G3519

Dear TI Support Team,

We are currently using the MSPM0G3507 and performing firmware updates. In the BIM example documentation, we noticed the following statement regarding rollback protection:

"This feature is not available on current M0L or M0G devices due to the non-main write protect occurring statically once upon startup. Rollback protection generally requires the hardware capability to prevent writes to a region dynamically (after verifying but before jumping to an image)."

We understand that rollback protection is not supported on the MSPM0G3507 according to the BIM example. Could you please clarify:

  1. Does this limitation apply only to the BIM example, or is rollback protection generally not supported on this device?

  2. Are there any recommended alternative methods or approaches to achieve rollback protection on the MSPM0G3507?

Thank you for your guidance.

Best regards,
Ziqiang

  • 0
    TI__Expert 5170 points

    Hi Ziqiang,

    Zq said:
    Does this limitation apply only to the BIM example, or is rollback protection generally not supported on this device?

    Rollback protection doesn't support on the MSPM0G3507 device. But it is supported on the device like MSPM0L228/MSPM0G3519 since they have firewall feature which is a dynamic protection mechanism.

    Zq said:
    Are there any recommended alternative methods or approaches to achieve rollback protection on the MSPM0G3507?

    Since MSPM0G3507 does not have the firewall feature, so it is not possible to dynamically modify the version number for the next comparison and protect this area before jump to the APP code.

    Best Regards,
    Peter

  • 0 in reply to Peter Jiang
    Prodigy 60 points

    Hi Peter,

    Thanks for the clarification. I think I may have mixed up two different concepts earlier.

    What we actually need is not “rollback protection” (preventing downgrade to older versions), but a firmware fallback mechanism. Our use case is: if a firmware update is interrupted or the new firmware image is corrupted, the device can automatically boot back to the previous working firmware.

    I would like to comfirm if i understand it corretly. Is this kind of firmware fallback / fail-safe update supported on the MSPM0G3507?
    Is there any reference design or demo in the SDK that shows this type of mechanism?

    Best Regards

    Ziqiang

  • 0 in reply to Zq
    TI__Expert 5170 points

    Hi Ziqiang,

    I believe this could be implemented by software, like record the upgrade flag in a certain flash region and read it when next power-on to determine whether a rollback should be performed, but sorry to tell you that we don't have a demo in SDK for it.

    Best Regards,
    Peter