MIB JITAG

[TT-2016]

No, the solution was for MIB1.
I tried to follow a similar way on my MIB2, but git stuck. I think the NVFlash Version I got is still not the right one.

[chris2011]

Are these BCT files uniqe for each MMX board ?? or are the working if it is same FW on other MMX board ?

[congo]

BCT is specific for board model.

[chris2011]

thanks congo, i am stuck in EFU red menu flash is damaged , JTAG can't connect, and i have no backup :-( , so only way is to desolder and read SGL ?

[TT-2016]

@aleka

I'm still stuck with the issue:
[ATTACH=CONFIG]69214[/ATTACH]

Any ideas?

[chris2011]

i tested tegrarcm uploaded BCT and qboot works, connection for JTAG is then unlocked and working it start to read SGL512 but the unit reboots after 1min so i cant read or write the flash.

[TT-2016]

How far gone is your MMX?

Mine is completly dead and I do not have success with the qboot and BCT I extracted from my MMX backup.

Could you share your setting or compare with mine I postet earlier?

[chris2011]

mine is also completly dead i flashed the QB_primary and QB_Recovery to the adresses which was posted here in this thread, after it shows stage2 bootloader failed to load.

Using nvflash you are supposed to able to flash MMX as well ������.

with nvflash it should be possible to flash the NOR then no Jtag is need , ;-)

[Kastrati]

This does not work?
https://cartechnology.co.uk/showthread. ... #pid566411

Regards.

Somebody can explain how to restart or pause watchdog in MIB1? or copy here, I dont have acess to this link... :-(

[chris2011]

reading is working fine , but i never could write it , i think there maybe must set TRST low maybe

[Kastrati]

Somebody can explain how to restart or pause watchdog in MIB1? or copy here, I dont have acess to this link... :-(

Info: for Mib1, after login in emergency mode you must execute "slay -9 MIBEmergency" and it stop reboot and counter.

[Kastrati]

You can not write full flash due reboot, but first part of mmx dump have Emergency tool. Due the Emergency tool you can write whole flash.

Hi @aleka , Do you now if is possible to flash eifs.img from emergency mode?. (MIB1 MHIG)
I have full time access to emergency by Uart but i dont know telnet passwd. The unit have some problems and I try to repair it reflashing.

[Kastrati]

A0000 -> qb_recovery.img 262144


120000 -> qb_primary.img 262144


760000 -> mifs-stage1.img 3145728


A60000 -> mifs-stage2.img 48234496


160000 -> eifs.img 6291456


0x03600000 -> efs-system.img 2097152


0x03800000 -> efs-persist.img

Some of my notes.

Only to correct this, if "A60000 -> mifs-stage2.img 48234496" it is long to 0x0385FFFF therefore overwrites 0x03600000 -> efs-system.img 2097152 and 0x03800000 -> efs-persist.img, My correction is:

120000 -> qb_primary.img 262144


760000 -> mifs-stage1.img 3145728


A60000 -> mifs-stage2.img 48234496


160000 -> eifs.img 6291456


0x03A40000 -> efs-system.img 2097152


0x03EC0000 -> efs-persist.img