Cypress FR MB91460 Series Owner's manual

FR Family MB91460 Series,
Flash Programming
Doc. No. 002-05153 Rev. *A
Cypress Semiconductor
198 Champion Court
San Jose, CA 95134-1709
http://www.cypress.com

Copyrights
FR Family MB91460 Series, Flash Programming, Doc. No. 002-05153 Rev. *A 2
Copyrights
© Cypress Semiconductor Corporation, 2006-2016. The information contained herein is subject to change without notice.
Cypress Semiconductor Corporation assumes no responsibility for the use of any circuitry other than circuitry embodied in a
Cypress product. Nor does it convey or imply any license under patent or other rights. Cypress products are not warranted nor
intended to be used for medical, life support, life saving, critical control or safety applications, unless pursuant to an express
written agreement with Cypress. Furthermore, Cypress does not authorize its products for use as critical components in life-
support systems where a malfunction or failure may reasonably be expected to result in significant injury to the user. The
inclusion of Cypress products in life-support systems application implies that the manufacturer assumes all risk of such use
and in doing so indemnifies Cypress against all charges.
Trademarks
All other trademarks or registered trademarks referenced herein are property of the respective corporations.
Source Code
Any Source Code (software and/or firmware) is owned by Cypress Semiconductor Corporation (Cypress) and is protected by
and subject to worldwide patent protection (United States and foreign), United States copyright laws and international treaty
provisions. Cypress hereby grants to licensee a personal, non-exclusive, non-transferable license to copy, use, modify, create
derivative works of, and compile the Cypress Source Code and derivative works for the sole purpose of creating custom
software and or firmware in support of licensee product to be used only in conjunction with a Cypress integrated circuit as
specified in the applicable agreement. Any reproduction, modification, translation, compilation, or representation of this Source
Code except as specified above is prohibited without the express written permission of Cypress.
Disclaimer
CYPRESS MAKES NO WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, WITH REGARD TO THIS MATERIAL,
INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
PARTICULAR PURPOSE. Cypress reserves the right to make changes without further notice to the materials described
herein. Cypress does not assume any liability arising out of the application or use of any product or circuit described herein.
Cypress does not authorize its products for use as critical components in life-support systems where a malfunction or failure
may reasonably be expected to result in significant injury to the user. The inclusion of Cypress’ product in a life-support
systems application implies that the manufacturer assumes all risk of such use and in doing so indemnifies Cypress against all
charges.
Use may be limited by and subject to the applicable Cypress software license agreement.

FR Family MB91460 Series, Flash Programming, Doc. No. 002-05153 Rev. *A 3
Contents
1. Introduction....................................................................................................................................................................5
2. Background Information...............................................................................................................................................6
2.1 Connection to PC...................................................................................................................................................6
2.2 Boot ROM..............................................................................................................................................................7
3. FME-FR Programmer...................................................................................................................................................11
3.1 Automatic Mode...................................................................................................................................................11
3.2 Manual Mode (Step-by-Step)...............................................................................................................................14
4. Cypress FR Flash Programmer..................................................................................................................................17
4.1 Full Operation......................................................................................................................................................18
4.2 Manual (Step-by-step) Operation.........................................................................................................................19
5. GALEP-Programmer....................................................................................................................................................20
5.1 GALEP-4 .............................................................................................................................................................20
5.1.1 Parallel Programming with GALEP-4 Programmer.................................................................................21
5.1.2 Serial Synchronous Programming with GALEP-4 Programmer..............................................................24
5.1.3 Serial Asynchronous Programming with GALEP-4 Programmer............................................................26
5.2 GALEP-5 .............................................................................................................................................................27
5.2.1 Parallel Programming with GALEP-5 Programmer.................................................................................27
5.2.2 Serial Synchronous Programming with GALEP-5 Programmer..............................................................30
5.2.3 Serial Asynchronous Programming with GALEP-5 Programmer............................................................33
6. SK-91F467D-208PFV (-GPIO) / SK-91F467-FlexRay..................................................................................................34
7. SK-91460-MAIN with SK-91460-91F467D-208PFV.....................................................................................................37
7.1 Connection to SK-91460-MAIN ...........................................................................................................................37
7.2 Connection to SK-91460-91F467D-208PFV........................................................................................................39
8. SK-91464A-100PMC.....................................................................................................................................................42
9. SK-91465K-120PMT.....................................................................................................................................................45
10. SK-91469G-256BGA.....................................................................................................................................................48
11. SK-91463N-64PMC.......................................................................................................................................................51
12. SK-91467R-176PMC.....................................................................................................................................................54
13. SK-91467B-144PMC.....................................................................................................................................................57

Contents
FR Family MB91460 Series, Flash Programming, Doc. No. 002-05153 Rev. *A 4
14. SK-91465X-100PMC.....................................................................................................................................................60
15. SK-91467C-144PMC.....................................................................................................................................................63
16. SK-91460P-176PMC(-GPIO) ........................................................................................................................................66
17. SK-91460S-176PMC.....................................................................................................................................................69
18. SK-91460T-144PMC(-GPIO).........................................................................................................................................72
19. Appendix ......................................................................................................................................................................75
19.1 Additional Documents..........................................................................................................................................75
Revision History...................................................................................................................................................................77
Document Revision History ...........................................................................................................................................77

FR Family MB91460 Series, Flash Programming, Doc. No. 002-05153 Rev. *A 5
1. Introduction
This document describes various possibilities programming the internal flash memory of the Cypress 32-bit
microcontrollers of the MB91460 series.
In the first chapter some basic information for the connection of the microcontroller to the PC and a short
description of the internal Boot ROM of the MCU are given.
The second chapter describes the handling of the ‘FME-FR Programmer’ for serial asynchronous programming.
In the third chapter another serial asynchronous programming tool, the ‘Cypress FR Flash Programmer’, is
explained.
Chapter four describes the third-party programming tools GALEP-4 and GALEP-5 which can be used for serial
synchronous and asynchronous as well as parallel programming.
The next chapters list the needed settings for serial asynchronous programming on the different starterkits for the
flash derivates of the MB91460 series.
The last chapter gives some hints on additional literature.

FR Family MB91460 Series, Flash Programming, Doc. No. 002-05153 Rev. *A 6
2. Background Information
This chapter gives some information for connection of the microcontroller to the PC and the internal Boot ROM of
the MCU.
2.1 Connection to PC
For serial asynchronous programming of the internal Flash, UART channel 4 is used on MB91460 series flash
devices. Therefore UART pins SIN4 (serial input) and SOT4 (serial output) have to be connected to the PC’s
COM port via RS232 transceiver.
The figure below shows an example for this connection. You can also connect the RS232 signals DTR or RTS to
the reset input of the microcontroller for controlling the reset signal by the programmer software.
Some terminal applications also need a connection between Pin 7 (RTS) and Pin 8 (CTS) on connector side.
Figure 2-1. Example of UART Connection
Figure 2-2. RS232 Signal Connection
GND DTR RxD TxD
CTS RTS DSR
1
6
5
9

Background Information
FR Family MB91460 Series, Flash Programming, Doc. No. 002-05153 Rev. *A 7
2.2 Boot ROM
The Boot ROM is a fixed start-up routine, which is executed always after the Reset Cancellation Sequence of
every INIT or RST reset if the device is configured with the mode pins set to MD[2:0]=”000” (internal ROM/vector
mode).
The purpose of the Boot ROM is to configure the device after a reset and to provide a simple serial bootloader
for programming the embedded flash memories.
After the chip initialization and saving the RSRR (Reset Cause Register) to CPU register R4, there is a check for
boot conditions.
All Flash devices have two Boot Security Vectors (BSV1, BSV2). These vectors are located in parallel sector to
the Flash Security Vectors (FSV1, FSV2):
Figure 2-3: Location of the Boot Security Vectors on MB91F467D
Sector SA4
Sector SA5
(8kB)
(8kB)
…
…
0x14:8008
FSV2
BSV2
0x14:8000
FSV1
BSV1
At first, BSV1 is checked: if the data of this vector represents a valid address in the specified address range
(depending on Flash-ROM size), the Boot Security Vector itself becomes valid.
Table 2-1. Boot Security Vector Addresses and Flash Address Valid Range
Device
Valid Boot Security Vector
address range
BSV1
address
BSV2
address
MB91F464A
0x0A:0000 –0x0F:FFFF
0x14:8000 –0x14:FFFF
0x14:8004
0x14:800C
MB91F465B
0x08:0000 –0x0F:FFFF
0x14:8000 –0x14:FFFF
0x14:8004
0x14:800C
MB91F467B
0x04:0000 –0x14:FFFF
0x14:8004
0x14:800C
MB91F463C
0x0C:0000 –0x0F:FFFF
0x14:8000 –0x14:FFFF
0x14:8004
0x14:800C
MB91F465C
0x08:0000 –0x0F:FFFF
0x14:8000 –0x14:FFFF
0x14:8004
0x14:800C
MB91F467C
0x04:0000 –0x14:FFFF
0x14:8004
0x14:800C
MB91F465D
0x08:0000 –0x0F:FFFF
0x14:8000 –0x14:FFFF
0x14:8004
0x14:800C
MB91F467D
0x04:0000 –0x14:FFFF
0x14:8004
0x14:800C
MB91F469G
0x04:0000 –0x24:FFFF
0x24:8004
0x24:800C
64bit width

Background Information
FR Family MB91460 Series, Flash Programming, Doc. No. 002-05153 Rev. *A 8
Device
Valid Boot Security Vector
address range
BSV1
address
BSV2
address
MB91F464H
0x0A:0000 –0x0F:FFFF
0x14:8000 –0x14:FFFF
0x14:8004
0x14:800C
MB91F465K
0x08:0000 –0x0F:FFFF
0x14:8000 –0x14:FFFF
0x14:8004
0x14:800C
MB91F467M
0x04:0000 –0x14:FFFF
0x14:8004
0x14:800C
MB91F465P
0x08:0000 –0x0F:FFFF
0x14:8000 –0x14:FFFF
0x14:8004
0x14:800C
MB91F467P
0x04:0000 –0x14:FFFF
0x14:8004
0x14:800C
MB91F465X
0x08:0000 –0x0F:FFFF
0x14:8000 –0x14:FFFF
0x14:8004
0x14:800C
MB91F467R and MB91F463N do NOT contain this version of Boot ROM and do NOT support
Boot Security Vector functionality! Please note that the programming UART is
changed to UART0 on these devices and that the dial-up procure is different!
If BSV1 is valid, there will be an additional check before entering user program at the entry address given by
BSV1 (1). Otherwise checks for entering the internal bootloader will be done (2).
The purpose of this feature is to disable the execution of the internal bootloader due to security reasons or to
minimize startup time of application. If the user sets BSV1 to a valid address range, this bootloader cannot be
entered any more.
(1) If the check for BSV1 is valid, the Magic Number, which should be located on the four bytes before the
address BSV1 points to, is compared to 0x000A897A. If the Magic Number matches this value, the user
application is entered at the address given by BSV1.
The Magic Number is used as flag for a valid user application, or especially for a user bootloader. If you want to
re-program this user bootloader, a second user bootloader, which handles the re-programming of the first user
bootloader, has to be located at the address BSV2 points to. If BSV2 does not point to a valid address range,
then application is started at default user program entry address 0x0F:4000.
(2) If the check for BSV1 is not valid, the reset cause will be checked as second boot condition. Only if the reset
cause was an INIT reset (external INITX input, RSRR=0x80), the check for boot conditions will go on. Otherwise
Boot ROM is left and application is started at default user program entry address 0x0F:4000.
If the reset cause was an INIT reset, serial clock pin SCK4 is checked for an external clock signal. Therefore
logic level at this pin is monitored for about 1ms. If port level is constant, UART4 is initialized to asynchronous
mode: 9600 baud, 8 data bits, 1 stop bit, no parity. If port level changes, UART4 is initialized to synchronous
slave mode. UART-reception is checked for about 100 ms. If during this time period the ASCII-character “V”
(0x56) is received, the internal bootloader is entered and ASCII-character “F” (0x46) is sent back as
acknowledge sign. Otherwise Boot ROM is left and application is also started at default user program entry
address 0x0F:4000.
The following flow chart shows more detailed the checking conditions:

Background Information
FR Family MB91460 Series, Flash Programming, Doc. No. 002-05153 Rev. *A 9
Figure 2-4. Flow chart of Boot ROM
The internal bootloader provides some basic functions for reading and writing the internal RAM, function calling
or changing the communication speed. These functions are normally used to write a programming kernel to the
internal RAM of the microcontroller which handles the programming of the flash memory.
*1) Boot Security Vector points to address in Flash-ROM
*2) Magic Number = 0x0A897A?
*3) Start user application at address given by Boot Security Vector 1/2
*4) Start user application at default user program entry address
*5) Timeout about 100 ms

Background Information
FR Family MB91460 Series, Flash Programming, Doc. No. 002-05153 Rev. *A 10
Table 2-2. Internal bootloader functions
Command
PC to MCU
MCU to PC
Remark
READ
1 (0x01)
2 (0x02)
Address (4 bytes)
Size (2 bytes)
241 (0xF1)
130 (0x82)
Binary Dump
CheckSum (2 bytes)
Lo, MidLo, MidHi, Hi
Lo, Hi
Direct read and dump
Bootloader sends 16bit checksum
WRITE
1 (0x01)
3 (0x03)
Address (4 bytes)
Size (2 bytes)
Binary Dump
241 (0xF1)
131 (0x83)
CheckSum (2 bytes)
Lo, MidLo, MidHi, Hi
Lo, Hi
Receive and store dump in RAM
Bootloader sends 16bit checksum
CALL
1 (0x01)
4 (0x04)
Address (4 bytes)
241 (0xF1)
132 (0x84)
Return Parameter
Lo, MidLo, MidHi, Hi
Calls specified Address and waits for a
return
The returned parameter in R4 will be
echoed to the PC
CHECKSUM
1 (0x01)
5 (0x05)
241 (0xF1)
133 (0x85)
CheckSum (2 bytes)
MCU re-dumps 16bit checksum (Lo, Hi)
calculated at last write or read operation
BAUDRATE
1 (0x01)
6 (0x06)
Baudrate (4 bytes)
241 (0xF1)
134 (0x86)
Lo, MidLo, MidHi, Hi
Initializes UART with new baudrate
value

FR Family MB91460 Series, Flash Programming, Doc. No. 002-05153 Rev. *A 11
3. FME-FR Programmer
This chapter explains the usage of the ‘FME-FR Programmer’ for serial asynchronous programming of the
MB91460 series flash devices.
The ‘FME-FR Programmer’ is a serial asynchronous programming tool for the Cypress FR flash microcontrollers
of the MB91360 and MB91460 series. It uses the internal bootloader functions to set up communication.
The ‘FME-FR Programmer’ can be used for development purposes free-of-charge and is not released for any
mass-production purposes.
Figure 3-1: FME-FR Programmer Icon
There are two ways of programming:
Automatic mode
Manual mode (step-by-step)
3.1 Automatic Mode
The automatic mode is the easiest way of using the programmer software. There are only some user settings
needed on the “Automatic” sheet.

FME-FR Programmer
FR Family MB91460 Series, Flash Programming, Doc. No. 002-05153 Rev. *A 12
Figure 3-2. Settings for Automatic Mode
Choose the microcontroller device (e.g. “MB91F467D”) as device type and browse to the mhx-file you want to
program to the embedded flash memory of the microcontroller. After that reset the microcontroller and press
button “Automatic Mode” to start programming.
If your hardware supports MCU reset via DTR or RTS signal lines of the PC’s COM port, go to sheet “Signals”
and select the appropriate reset signal line. The programmer now resets the microcontroller automatically before
starting the programming sequence and you do not have to reset the MCU manually.
RESET MCU

FME-FR Programmer
FR Family MB91460 Series, Flash Programming, Doc. No. 002-05153 Rev. *A 13
Figure 3-3. Reset Signal Settings
The software now automatically writes a flash loader to the microcontroller, does a blank check and erases the
flash memory if necessary. After that the user application is programmed to the embedded flash memory.
During this sequence the actual progress status can be seen by checked off steps on the “Automatic” sheet and
the messages below in the message box.
If the programming sequence is ended successfully, you will receive the output shown in figure 7.
MB91F464A/H, MB91F465B/C/D/K/P/X, MB91F467B/C/D/M/P/S/T:
Addresses 0x14:8000 to 0x14:800F cannot be written in automatic mode.
MB91F469G:
Addresses 0x24:8000 to 0x24:800F cannot be written in automatic mode.
This is a built in security feature to prevent unintended writing to the Flash Security Vectors and Boot Security
Vectors. Otherwise it would be possible to secure flash content and to lock the microcontroller for serial
programming/reading/erasing by not being able to enter the internal loader anymore. If you want to use these
features explicitly, you have to program these dedicated addresses by using the “Prog Word” Function of the
step-by-step mode.

FME-FR Programmer
FR Family MB91460 Series, Flash Programming, Doc. No. 002-05153 Rev. *A 14
Figure 3-4: Successful Programming in Automatic Mode
3.2 Manual Mode (Step-by-Step)
The manual mode provides each function of the internal bootloader and the downloaded flash loader kernel as
single steps.
Figure 3-5. Connect to internal bootloader

FME-FR Programmer
FR Family MB91460 Series, Flash Programming, Doc. No. 002-05153 Rev. *A 15
Select the device type, e.g. “MB91F467D”, reset the microcontroller and press “Connect” button. You can also
use the DTR or RTS lines for resetting the MCU. Refer to chapter 3.1 for needed settings.
If connection is successful the functions on sheet “BootROM_Functions” become enabled. To program
embedded flash memory execute the functions “Write File”, “Write Byte” and “Call” with the default settings.
Table 3-1: BootROM Functions of FME-FR Programmer
Function
Description
Write File
Dumps a binary file into the internal RAM beginning at the specified address. The
transmission will be verified by a checksum.
Write Byte
Writes one single byte to the given location (RAM).
Call
Calls the program or function at the given address. If there is a “RET”-statement at the
end, the operation will continue (return value is displayed).
Read
Reads out a number of bytes from a given address and creates a binary file.
Checksum
Displays the checksum from the last operation.
If you have performed the above mentioned steps and the appropriate bin-file (e.g. “brl467d.bin” for the
MB91F467D) is successfully loaded to RAM and started, go to sheet “Flash_Functions”.
Figure 3-6. Flash_Functions of FME-FR Programmer
Press button “Initialize”. If the command prompt of the flash loader is received, all the flash loader functions
become enabled. See table 3 for a short description of each function. MB91460 series devices do not support
“Autodetect” function!

FME-FR Programmer
FR Family MB91460 Series, Flash Programming, Doc. No. 002-05153 Rev. *A 16
Table 3-2: Flash Loader Functions of FME-FR Programmer
Function
Description
Initialize
Checks if the flash loader, which was dumped to RAM, is available, initialized at the
correct baudrate and ready to operate. This function checks for a prompt character (“>”). If
this operation fails (e.g. no flash loader present), none of the following functions will be
enabled.
Blank Check
Reads out every byte of each flash-sector to check for non-blank cells. The result is
displayed in the flash-diagram on the right side (red = not blank sectors; green=blank
sectors).
Chip Erase
Erases the entire flash-ROM (all sectors).
Sector Erase
Erases one sector indicated by the sector number.
Call
This function will divert operation of the device to the specified location. This terminates
the flash loader.
Read
Reads out a given number of bytes beginning at the specified address and displays the
results in hexadecimal format on the log-window.
Prog 32bit
Programs one word to flash at the specified address.
Read to File
Reads out the Flash content and writes to the given bin-file.
Prog File
Handles the transfer of the specified MHX-file to the flash loader.
To program user application to the flash memory browse to correct mhx-file and use “Prog File” function. After
successful programming press “Disconnect” button to close COM port.
For further information on the FME-Flash Programmer software please refer to the user guide
.

FR Family MB91460 Series, Flash Programming, Doc. No. 002-05153 Rev. *A 17
4. Cypress FR Flash Programmer
This chapter explains the usage of the ‘Cypress FR Flash Programmer’ for serial asynchronous programming of
the MB91460 series flash devices.
The ‘Cypress FR Flash Programmer’ is a serial asynchronous programming tool for the Cypress FR flash
microcontrollers. It supports a lot of FR series.
The ‘Cypress FR Flash Programmer’ can be used for development purposes free-of-charge and is not released
for any mass-production purposes.
Figure 4-1: Cypress FR Flash Programmer Icon
There are two ways of programming:
Full Operation
Manual (step-by-step)

Cypress FR Flash Programmer
FR Family MB91460 Series, Flash Programming, Doc. No. 002-05153 Rev. *A 18
4.1 Full Operation
Full Operation is the easiest way to use this programmer software. You only have to select the target
microcontroller device (e.g. “MB91F467D”) and the mhx-file you want to program to the embedded flash
memory.
Figure 4-2. Cypress FR Flash Programmer Full Operation 1
Press button “Full Operation”. A new window pops up which gives the order to reset the microcontroller. Reset
the MCU and the software starts the sequences of the programming progress. In case of a blank chip,
processing is performed in order of Download, Blank Check, and Program & Verify. When it is not a blank chip,
processing is performed in order of Download, Blank Check, Erase, Blank Check, and then Program & Verify.
The actual status can be seen on the progress bars.
Figure 4-3. Cypress FR Flash Programmer Full Operation 2

Cypress FR Flash Programmer
FR Family MB91460 Series, Flash Programming, Doc. No. 002-05153 Rev. *A 19
4.2 Manual (Step-by-step) Operation
The above mentioned steps can also be executed as single steps. But nevertheless, as first operation always the
Download function has to be executed to set up communication and to write flash loader kernel to RAM.
Table 4-1: Functions of Cypress FR Flash Programmer
Function
Description
Download
Sets up communication and downloads flash loader kernel to RAM.
Erase
Does a chip erase of the flash memory.
Blank Check
Checks that all flash memory areas are blank.
Program & Verify
Writes the selected mhx-file to flash ROM and does block wise CRC checking.
Read & Compare
Reads out flash memory and compares content with selected mhx-file.
Copy
Reads out flash memory and writes it to mhx-file.

FR Family MB91460 Series, Flash Programming, Doc. No. 002-05153 Rev. *A 20
5. GALEP-Programmer
This chapter explains the usage of the ‘GALEP-4’ and ‘GALEP-5’ programmer for serial synchronous/
asynchronous programming and parallel programming of the MB91460 series flash devices.
5.1 GALEP-4
GALEP-4 Programmer is a third party tool developed by ‘Conitec’ (www.conitec.com).
This programmer allows parallel as well as serial programming of several Cypress microcontrollers.
In case of parallel programming, different socket-adapters are available, depending on the microcontroller family
and device package.
In case of serial programming both synchronous and asynchronous modes are supported. For serial-
synchronous programming an optional ISP-adapter is offered. For serial-asynchronous programming the
programmer itself behaves like a dongle, the programming is done directly via the PC’s COM-port connected to
the microcontroller.
The GALEP-4 is a PC-controlled programmer using the parallel-port (LPTx). It can be powered by an external
power-supply (12V, 400mA) but also by accumulators (6x Type AAA NiMh 1.2V).
Figure 5-1: Conitec GALEP-4 Programmer