• State Resolved
  • Locked Locked
  • Replies 2 replies
  • Answers 1 answer
  • Subscribers 62 subscribers
  • Views 346 views
  • Users 0 members are here
Support feedback
Options
Options
Similar topics

This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

BQ40Z60EVM-578: unseal the BQ40Z60 by a host system

R D2
Intellectual 265 points
Part Number: BQ40Z60EVM-578
Other Parts Discussed in Thread: BQ40Z60, BQSTUDIO, BQ40Z50-R1

Hi together,

1. is it possible to unseal or completely unseal (µC) the bq40z60 by the host system?

When I send the following command to BQ40Z60
0x44 0x36 0x72 0x04 0x14
nothing happens. But if I send the command over BQSTUDIO like I unsealed the device.

And second attempt i try to send it twice within 2 seconds nothing happens.

2. is the command to unseal correct?

kind regards and thanks

Riccardo

  • 0
    TI__Guru 52115 points

    Yes.

    Here is the procedure mentioned in the bq40z60 TRM.

    Unsealing is a two-step command performed by writing the first word of the unseal key to ManufacturerAccess() (MAC), followed by the second word of the unseal key to ManufacturerAccess(). The two words must be sent within 4 s.

    My suggestion is to click the UNSEAL button in the bqStudio, use a logic analyzer to capture the whole sequence, and implement the same sequence in your host.

    Andy 

  • 0 in reply to Andy Liu (BMS)
    Intellectual 265 points

    Ok, I found an example in the bq40z50-R1 TRM that works perfectly..

    The TRM at Chapter 10.5.2 SEALED to UNSEALED says:

    "The default UNSEAL key is 0x0414 and 0x3672. To go from SEALED to UNSEALED, these two words

    must be sent to ManufacturerAccess()  (MAC) with 0x0414 sent first, followed by 0x3672. Both are sent

    sequentially with the second word sent within 4 seconds of the first."

    That was my error.