Talk:Service Connectors
A special CP Board can be used to connect via the Service Connector to the PS3
PLAYSTATION3 Tool Service Manager for Cookie Version: 1.3.1 <built 17:20:03, 01/17/11 JST>
- Where did you get this message from ? did you just run the Tool's TSM on top of the cookie board or is it from another CP board somehow ?
- -Mathieulh
- I patched the tsm::is_cytology(void) function to "return" false; however, if I would know the pinout of the CP Connector (CN4403) I would test it because I haven't found a single (Tool) syscon UART command that doesn't work on my COK-001 (Prototype). The problem is, that the CN4403 has over 100 pins and the COOKIE/COK Service Connector only 30 ;).
- -Strike Venom
- Are you running the TSM on an actual CP board ? If so you are quite daring to take a reftool appart and connect the CP board elsewhere, I never attempted this but I am quite interested as I never could exploit the retail version of the system controller firmware and doing this might allow it to happen, depending on what is allowed.
- I am quite sure the Tool board has extra pins for the CP, if there is a CP for retail boards, then it is probably much more limited, in fact it is probably meant to be a diag board, I doubt TSM is meant to run on retail hardware, CPs were however quite common on internal revisions of the CEB hardware (while 3rd parties did not have access to it), back then the CP board would connect to a pci express port on the motherboard which was unpopulated on 3rd party versions (despite the fact that the cell was 00 paired on 3rd party CEB devices)
- I believe TSM did run on the CEB and DEH consoles and as such a check as added later to make sure it only runs on cytology (the current reftool).
- The fact that you see the TSM output just means that the diag board uses the same UART than the CP does (which makes sense, in fact on reftool, the CP is used for diag as well and has a full set of diag binaries available to it, I assume you can run all/most of them on a board attached to retail hardware. Is there an interface to SB from the service connector as well ?
- -Mathieulh
- SB_UART (and SB_TRG diag on serv.con.) is present on DEH-H1000A-E, DEH-H1001-D COOKIE-13 and Retail models' service connector and PCI pads
- Euss
- I'm running the TSM on a TCP-520 CP Board, but the TSM halts after the patched tsm::is_cytology(void) check (which makes sense because it's running on a cytology or there's no code for the cookie target :D). If I want to connect the TCP-520 to a cookie board, I need to patch the CP Firmware, as (for example) loading the GPIO driver on the South Bridge would just crash the PS3.
- -Strike Venom
http://i.imgur.com/mekmGAZ.png needs some documenting Zecoxao 05:04, 2 January 2015
- glad I won't have to ask for a more fuzzy vague picture of an unpopulated CN6504 SC JTAG /sarcasm - Euss (talk) 03:14, 2 January 2015 (EST)
- You're the one with the 24MP camera :D (but seriously now, i just need a picture of the Service Connector in this page)
unpopulated connector, near jig-pin machine testpoints for NOR layot 4
In this photo, the unknown testpoint with 3 question marks over the text RY and located in the middle of a wide trace is 3.3V_EVER_A (connected to pin 8 of voltage regulator mitsumi 463A)
http://www.psdevwiki.com/ps3/File:JSD-001_NOR_-_nor_testpoints.png
DECR SYSCON Testpoint Voltages
http://pastie.org/private/9qguibdzfcifmuzutlxg
(as you can see, all JTAG points are voltage active on a standby DECR. we need now to verify on a Test Proto if it's the same.)
Service devices
PS1
| Model | Equipment ID | Name |
|---|---|---|
| PRJ-001 | J-2504-003-A | Switch on JIG |
| ? | J-2504-008-A | Analog controller checker |
PS2
| Model | Equipment ID | Name |
|---|---|---|
| SVC-HH306 | J-2504-188-A | H-Chassis pin-JIG |
PSP
| Model | Equipment ID | Name |
|---|---|---|
| SVC-HPT501SS | J-2504-739-A | (for DTP) |
| SVC-HPA502SS | ? | ? |
| SVC-HPA503SC | ? | ? |
| SVC-HPA504SS | ? | (for PSP-1000) |
| SVC-HPA506AD | J-2504-816-A | ? |
PS3
| Model | Equipment ID | Name |
|---|---|---|
| ? | ? | Console reset JIG |
| SVC-H3A601SS | J-2504-879-A | BD adjustment JIG |
Other images
.jpg){kind=link}
"Missing components"
The syscon JTAG ports are almost never connected directly to the service connector (on Cookie Boards you even need jump wires - there're no traces).
If you trace the pins to syscon you'll see that they never changed the Sherwood Syscon connector.
The only thing they do is randomly add/remove resistors.
Even on the VERTIGO prototypes there were missing resistors.