Actions
Forum Thread Details
  • Replies 1 reply
  • Subscribers 39 subscribers
  • Views 338 views
  • Users 0 members are here
Related

How to remove the securrity state after executing mass_erase process

bluesea

I use bdm interface with DIY to mass_erase a SH8 mcu. But its content all become 0xff. include the NVOPT location of flash. So the mcu into secure state. Then I can not hold on to program or burst code into it. I have attempted to reset or write 0x7e to NVOPT(0xffbf) after executing mass_erase process. But I found it out that the erase, program and burst process are all failure at the moment.How to unlock the secure state when executed mass_erase process. Please someone could give me any opinion. ps. But it can mass_erase and program code if use the ERASE_MODULE command of hivave.exe to erase the mcu.

  • I wonder what is DIY, do it yourself? Not sure 100% about S08, but to unsecure S12 over BDM you first mass erase, then simply reset and reenter BDM mode. On entry to active BDM mode, BDM firmware performs blank check of EEPROM and FLASH, and if both are erased, then you get read/write access to everything until next reset. Read/write access to mass erased part is granted, though security bits are both set and part should be secured. Since read/write accesses over BDM are granted, there's no problem to reflash whole part or just security bits

    I don't see in SH8 RM how to unsecure it over BDM, I would try resetting and reentering active BDM mode, then flashing new firmware or just NVOPT.