TMS320F280049C: Unlocking a secured LAUNCHXL-F280049C

Pat Blanchon

Part Number: TMS320F280049C
Other Parts Discussed in Thread: LAUNCHXL-F280049C

Hello,

I have a secured LAUNCHXL-F280049C configure to boot from 0x80000 which I cannot attach to via JTAG. The keys have been set in the GEL file to no avail - with this error message displayed on the console:

C28xx_CPU1: Trouble Writing Memory Block at 0x5f010 on Page 1 of Length 0x2: (Error -1156 @ 0x800) Device may be operating in low-power mode. Do you want to bring it out of this mode? Choose 'Yes' to force the device to wake up and retry the operation. Choose 'No' to retry the operation without waking the device. (Emulation package 20.0.0.3178) 
C28xx_CPU1: GEL: Error while executing OnTargetConnect(): Target failed to write 0x0005F010@Data
     at *((unsigned long*) 0x5F010)=<my_key_0> [f280049c.gel:80]
     at OnTargetConnect()

Is there any way to recover from this?

Thank you

2 months ago

0 Matt Kukucka 2 months ago

TI__Mastermind 20380 points

Hello,

Can you put the device in wait boot before attempting to connect?

Best,

Matt

0 Pat Blanchon 2 months ago

Prodigy 10 points

Hi Matt,

No. The device cannot be put in wait boot.

Thank you

0 Matt Kukucka 2 months ago in reply to Pat Blanchon

TI__Mastermind 20380 points

Hi Pat,

The issue is that ECSL protection is disconnecting the JTAG probe before the CSMKEY write can occur. Either there needs to be a way to connect to the device while the PC is in unsecure memory, or wait boot can be used.

Best,
Matt

0 Pat Blanchon 2 months ago in reply to Matt Kukucka

Prodigy 10 points

Thank you Matt. I will try that out & get back to you.

0 Pat Blanchon 2 months ago in reply to Pat Blanchon

Prodigy 10 points

Well I've got a little bit further. With a fresh board & configuring GPIO24 to select booting from 0x80000 or wait boot, I can select boot wait & attempt to connect with CCS - but attempting starting debugging with CCS fails with the message:

C28xx_CPU1: Warning: Failed unlocking device (zone 1) after reset.
C28xx_CPU1: Flash Programmer: Error erasing Sector 0. FMSTAT (STATCMD on some devices) value = 1040. Operation Cancelled (0).
C28xx_CPU1: File Loader: Memory write failed: Unknown error

I have changed the GEL file to match my zone1 passwords as set in the DCSM syscfg page, with Password0 written to 0x5F010, Password1 written to 0x5F012, etc. I can see my debug from the GEL script so it's definitely the correct file.

Am I missing anything else ?

Cheers Pat

+1 Matt Kukucka 2 months ago in reply to Pat Blanchon

TI__Mastermind 20380 points

Hi Pat,

Apologies for the difficulties of bringing up the DCSM, it can be a complicated module. Please also make sure you also change the passwords in the On-Chip Flash tool as well. The flash plugin likely references them before performing flash operations.

This looks very similar to this issue: TMS320F280041: "C28xx_CPU1: Warning: Failed unlocking device (zone 1) after reset." after securing DCSM zones, even after unlocking

Best,
Matt

0 Pat Blanchon 2 months ago in reply to Matt Kukucka

Prodigy 10 points

Thank you Matt. Setting the passwords in the On-Chip Flash tool was the missing step. I can now unlock a secured F280049C.

For those that may be interested - the steps were:

Use wait boot mode
Change the target config to use a custom gel file which contains the passwords
Set the passwords in the On-Chip flash tool.

Thanks again

C2000™︎ microcontrollers

C2000 microcontrollers forum

TMS320F280049C: Unlocking a secured LAUNCHXL-F280049C