eobdtool.co.uk

eobdtool.co.uk
HOT

2018年2月24日星期六

How to Unlock CRP3 LPC2478 by Ktag/Kess

As you know, for crp3 we can do the trick for unlock crp3 heating on Ktag or Kess V2 programmer or buy a new NXP and write it (only one time)
Here are some questions & answers on Google form, questions about “how will you use J-ink if its crp3 ?”...
Q:Can I update NXP directly if at this moment I have Ktag 6.070? Or I will need to replace it with new one and then to update to 7.030 ?
A:if your actual fw is crp3 you will have to do "heating trick " or change nxp, you will know if jlink doesn’t recognise firmware ( i think message about cannot find cpu chain or something like that) , simple

Q:More information this real version or china version? and whats this you can update or or only talk?? thanks
A: this is fw 7.030 we are talking about REAL firmware, not modding number in sw or similar, about second question i don’t understand what you ask.


Q:Need connect 12v ?my led red always off if not connect 12v
A: LED needs to monitor the state of the processor and it must be switched by the controller. If you do not have the power on the controller when connected by USB, then connect the other power source.

Q: How work on ktag, i tried but led already on
A: LED need to monitor the state of the processor and it must be switched by the controller. If you do not have the power on the controller when connected by USB, then connect the other power source.
To flash the LPC2478 via J-link, the level of protection should be CRP0, ie protection should be disabled. If security levels CRP1 and CRP2 have the ability to erase and reflash LPC2478 via UART, eg via USB to UART TTL adapter ftdi232 or cp2102 and Flashmagic program.


Q: LPC2478 connect Flash Magic, KESS or KTAG?
A: ...KESS & KTAG...both ok
Note: not all ktag 5.001 can be read with j-link
some are crp3 protected
some are not


Attachment 1: Code Read Protection (CRP)
CRP explanationCRP statusVolume label
The user flash can be read or written.No CRPCRP DISABLD
The user flash content cannot be read but can be updated. The flash memory sectors are updated depending on the new firmware imageCRP1CRP1 ENABLD
The user flash content cannot be read but can be updated. The entire user flash memory is erased before writing the new firmware image.CRP2CRP2 ENABLD
The user flash content cannot be read or updated. The USB bootloader ignores the Entry Mechanism (P0.15 pin) and always executes the user application if present. If user application is not present then "Update" mode is entered.CRP3CRP3 ENABLD

Attachment 2: Here are all pinouts
A method of disabling the protection CRP3 microcontroller LPC2478.... make a photo high resolution of connection on pcb of that wire...and also,what pin you must to touch on nxp
K-Tag pins.


Attachment 3: Photos ofLPC2478 connect Flash Magic
It allows you to erase the NXP MCUs on both Kess & KTag via UART0. This will work for firmwares up to CRP2. CRP0, best off using J-Link as it only takes 30s as opposed to 30 minutes. If you've blocked your KTag properly (CRP3), it won't help you. You will need to swap the processor.

Kess V2 connection method 1:

Kess V2 connection method 2:

KTag connection:

Disclaimer: Photography of Pinouts is not mine. I am not responsible for a bad use.

没有评论:

发表评论