• State Resolved
  • Locked Locked
  • Replies 10 replies
  • Answers 1 answer
  • Subscribers 83 subscribers
  • Views 566 views
  • Users 0 members are here
Support feedback
Options
Options
Related

This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

MSP430FR2433: on-chip Flash programming with MSP-GANG

AnBer
Mastermind 30395 points
Part Number: MSP430FR2433
Other Parts Discussed in Thread: MSP-GANG, , MSP-FET, UNIFLASH

Team,

The plan is to use the MSP-GANG for the FR2433 on-chip Flash programming at production.

Question about the 'Secure Device Option' of the GUI (section 2.1.6 of www.ti.com/lit/pdf/SLAU358):
If this is set when programming the 'MSP430FR2433 ', is there still the possibility to perform re-programming ('Clear-Lock-Action', 'Erase memory', set to 'factory-state' ...) ?

Thanks in advance,

A.

  • 0
    Guru 34773 points

    Yes, and this mass erase (back to factory state) on secured device can be done by SBW / JTAG interface.

  • 0
    Prodigy 10 points

    How can I do this action (-> mass erase back to factory state) with the MSP-GANG software?

    For the MCU 'MSP430FR2433', the 'Clear Locked Device' button is not vissible ...

  • 0 in reply to Jürgen Krebs
    Guru 34773 points

    This can be done by SBW/JTAG interface with any TI FET and MSP430Flasher with option -e ERASE_USER_CODE

    Don't know where is this button in MSP-GANG GUI.

  • 0
    Prodigy 30 points

    The main question how it is possible to apply a mass erase via the MSP-GANG USB/RS232 Interface? Or do we need a special command in the image/script and this will be  started via USB/RS232 Interface? Thanks.

  • 0
    TI__Guru* 79301 points

    Hi A,

    This answer depends on the device family used as for some parts this is supported but not for others. For your case: No, MSP430FR2433 device does not support the option for JTAG lock with password (which is the feature that section 2.1.6 refers to for being able to unlock the part again) - that is only available on MSP430FR5xx/6xx devices. There is a nice summary table in my application note www.ti.com/lit/pdf/slaa685 Table 1 JTAG locking features across MSP Families. MSP430FR2xx/4xx only supports JTAG lock via electronic fuse. That is then described in the same application note in section 2.2 Electronic Fuse or Lock without Password. As described in that section, the only way to clear that would be using the bootloader in the part. That can be done by MSP-GANG or MSP-FET but requires different/additional connections than JTAG/SBW.

    Are you asking out of a concern about device security, or wanting to know options to debug any devices you might get back if you have an issue in the field? 

    Regards,

    Katie

  • 0 in reply to Katie Pier
    Prodigy 30 points

    Hello Katie thank you for your answer. At the moment we are in the testing state, so we are using a launchpad with some FW to check succesful flashing. Within that, we tried to lock the device that readout is impossible. but of course see that with this Secure Option we cann not programm our device again. With the launchpad we used the ez-FET inside (without connecting RX and TX) and with Uniflash we were able to unlock the device to reprogramm it again. But my question is, it was the same connected pins we are used with MSP-Gang? Which connection is needed to unlock the Device via BSL?

    From the idea, we would like to programm and secure the device (even BSL, so no possibility for readout the FW). Sometimes a secured and programmed mcu should be reprogrammed, but only if everything is fully erased (mass-erase). Is this possible with MSP-Gang? Thank you for your support

  • +1 in reply to Steffen Boettcher
    TI__Guru* 79301 points

    Hi Stephen,

    Are you saying you didn't have the jumpers on the launchpad for RX and TX populated when you unlocked the part? These are in the same jumper block as the other SBW signals going between the eZ-FET and the target device section of the board.

    MSP-GANG does support unlocking the part via BSL, and supports programming over BSL as well. You could lock the JTAG access to the part, and regain access by using the MSP-GANG with a wrong BSL password which will trigger a mass erase. At that point you can get back in via JTAG or BSL again to reprogram the part. You could even just do all MSP-GANG programming over bootloader if so desired and even secure JTAG through that interface.

    www.ti.com/lit/pdf/slau358 figure 5-6 shows the JTAG + BSL header, you simply connect the BSL-TX and BSL-RX in addition if you want to support both JTAG and BSL. 

    You can also fully disable BSL in the part (see www.ti.com/lit/pdf/slaa685 ) but the tradeoff if you do that is you'll have no way into the part. If you leave BSL enabled but put a secure password, then someone has to have the BSL password if they want to access your code, and on a wrong password the part is mass erased.

    Regards,

    Katie

  • 0 in reply to Katie Pier
    TI__Guru* 79301 points

    Hi Stephen,

    I looked again and found what you were talking about, the JTAG mailbox command is mentioned in www.ti.com/lit/pdf/slau320 and that's probably what the Uniflash was using. Let me see if MSP-GANG supports this feature. 

    Regards,

    Katie

  • 0 in reply to Katie Pier
    TI__Mastermind 30395 points

    Hi Katie,

    Thanks for checking for the Mailbox command support on MSP-GANG.


    Looking at www.ti.com/lit/pdf/slau320 :
    It seems that for JTAG Lock Key a BOR (Brownout reset) is needed.
    Could you please check as well if the MSP-GANG is able to generate a BOR too?

    Thanks in advance,

    A.

  • +1 in reply to AnBer
    TI__Guru* 79301 points

    Hi A.

    I checked with our MSP-GANG designer, the MSP-GANG does not currently implement this unlock via mailbox functionality. 

    MSP-GANG can generate BOR via toggling the RST line, it also supports toggling Vcc. You can even set the part to run after programming. See www.ti.com/lit/pdf/slau358 p. 135 question 6.4 "How to have parts run after programming?". By default RST line is forced low after programming which should reset the part, but you can set more things using the Setup > Finish Action.

**Attention** This is a public forum