SBW write BSL Password --> Blow Security Fuse

BSL password will be vector table, and without knowing password it will not be able for BSL to read stored firmware. However, it should be able to execute BSL mass erase and store new firmware on chip (that will have again new BSL password).

BSL is note related to 4 wire JTAG or SBW, and security fuse. Blowing security fuse (not supported by TI SBW tools, supported by MSP-GANG), will disable JTAG/SBW interface forever, and it will not be possible to do any JTAG/SBW  action on target chip.

zrno soli said:

No, this did not answer my questions:

BSL password will be vector table, and without knowing password it will not be able for BSL to read stored firmware . However, it should be able to execute BSL mass erase and store new firmware on chip (that will have again new BSL password)(this is all good and true)

BSL is note related to 4 wire JTAG or SBW, and security fuse (Is the answer to my question:  ?NO/YES, one can/can not write [change default BSL password] the BSL password vector table with the 2-wire JTAG?).  Blowing security fuse (not supported by TI SBW tools, supported by MSP-GANG (Yes, but does MSP-GANG support BSL?)  (Sorry, I'm calling the 14-pin JTAG, and the 4-pin JTAG "SBY"), will disable JTAG/SBW interface forever, and it will not be possible to do any JTAG/SBW  action on target chip (yep).

AFAIK, MSP-GANG support JTAG, SBW and BSL. On each target 14-pin connector are JTAG / SBW / BSL lines (slau358).

If security fuse is blown, there is no possibility to make any changes (read/erase/write) on target flash by JTAG and SBW.

This may be a question for a TI employee?

No this did not answer my question, see original post:

(1) is it posable to change the default BSL password with the SBY (2-wire JTAG) while loading the firmware, then blow the security fuse?

Yes, it is possible to change BSL password by JTAG (during flashing process) and than blow security fuse after firmware was updated.

Thank you for your response, could you give a reference to where you found the above information?

I think that you are confused with something in relation between BSL and blowing JTAG fuse. BSL password is not related to JTAG fuse.

BSL password is part of firmware (vector table, and added info by user). BSL is located in ROM of MSP430F2xx, and it can't be blocked / removed /deleted. When programer put target device in BSL programming mode, target device will not enable firmware reading if programmer don't send right password. Mass erase and any operation after is without restriction. So main code protection for BSL is password.

When programmer put target device in SBW / JTAG programming mode, target firmware is not protected, and any operation can be executed on it. SBW / JTAG connection can't be possible if JTAG fuse is blown. Blowing JTAG fuse can be done by user anytime and it is not related to moment of upgrading firmware.

MAC Engineering said:

Thank you for your response, could you give a reference to where you found the above information?

I don't have MSP-GANG or any other TI tool. AFAIK, SBW TI tools (for example launchpad) are not able to blow JTAG fuse. MSP-FET430UIF can blow JTAG fuse, but it is not support BSL. Anyway, details about TI products knows TI team.

I am working on world fastest MSP430 multi-programming tool so I know something related to this stuff.

http://forum.43oh.com/topic/2972-sbw-msp430f550x-based-programmer

Thanks for the clear answer!

"However, the GUI provided doesn't support BSL.  You would need to write your own application for BSL support via the MSP-GANG."

Is there an application report or tutorial for writing an application to use with the MSP-GANG for the purpose of programming the MSP430 via BSL? 

Thanks for TI's excellent customer service!

Michael S said:

Correct.  However, the GUI provided doesn't support BSL.  You would need to write your own application for BSL support via the MSP-GANG.  APIs are provided in the MSP-GANG software download package.

In the slau358c (MSP Gang Programmer User's Guide) there is picture (Fig 2-1) on page 13 with Dialog GUI BSL example.

Michael S said:

@Zrno - fuse blow via SBW is possible but not via the EZ-FET (Launchpad, EZ430-based kits).  MSP-GANG and MSP-FET430UIF can perform fuse blows over the SBW interface. (SLAU278)

Thanks for info, was thinkging that blowing fuse with TI tools is only possible under JTAG, not with SBW.

Thank you zrno. Looks like I need to pull down the s/w package and update.

Thanks to all, yes I was going off of the image of the MSP-GANG Interface on the TI web-page.

I did not catch the Fig. 2-1 on page 13 of slau3558d.pdf.

So now I am confused for sure, does the present MSP-GANG have a GUI that can be used with the BSL, or does one have to make their own?  It seems clear from the PDF that all one has to do is provide an image (code file), I assume CCS can work with the MSP-GANG to do this. 

Michael S said:

@Zrno - fuse blow via SBW is possible but not via the EZ-FET (Launchpad, EZ430-based kits).  MSP-GANG and MSP-FET430UIF can perform fuse blows over the SBW interface. (SLAU278)

Teh EZ-FETs are unable to provide voltagte and current for the fuse blow. Also, IIRC, the fuse blow won't work with just the SBW signals of the FET. I remember a specific wiring on the target side required for the fuse blow if the 4-wire JTAG pins are not connected, as the blow voltage comes from TDI signal line but must be applied to SBWTCK/TEST (SLAU320e)

The 2 SBW signals alone will not blow a JTAG fuse, this is true.  You need to bring in the TEST/VPP signal as shown below.