Editing Talk:Service Connectors

A special [[Communication Processor|CP Board]]  can be used to connect via the Service Connector to the PS3 
<pre>
PLAYSTATION3 Tool Service Manager for Cookie
Version: 1.3.1 <built 17:20:03, 01/17/11 JST>
</pre>

:Where did you get this message from ? did you just run the Tool's TSM on top of the cookie board or is it from another CP board somehow ?

:-Mathieulh

::I patched the <b>tsm::is_cytology(void)</b> function to "return" false; however, if I would know the pinout of the CP Connector (CN4403) I would test it because I haven't found a single (Tool) syscon UART command that doesn't work on my [[COK-001 (Prototype)]]. The problem is, that the CN4403 has over 100 pins and the COOKIE/COK Service Connector only 30 ;).

::-Strike Venom

:::Are you running the TSM on an actual CP board ? If so you are quite daring to take a reftool appart and connect the CP board elsewhere, I never attempted this but I am quite interested as I never could exploit the retail version of the system controller firmware and doing this might allow it to happen, depending on what is allowed.

:::I am quite sure the Tool board has extra pins for the CP, if there is a CP for retail boards, then it is probably much more limited, in fact it is probably meant to be a diag board, I doubt TSM is meant to run on retail hardware, CPs were however quite common on internal revisions of the CEB hardware (while 3rd parties did not have access to it), back then the CP board would connect to a pci express port on the motherboard which was unpopulated on 3rd party versions (despite the fact that the cell was 00 paired on 3rd party CEB devices)
:::I believe TSM did run on the CEB and DEH consoles and as such a check as added later to make sure it only runs on cytology (the current reftool).

:::The fact that you see the TSM output just means that the diag board uses the same UART than the CP does (which makes sense, in fact on reftool, the CP is used for diag as well and has a full set of diag binaries available to it, I assume you can run all/most of them on a board attached to retail hardware. Is there an interface to SB from the service connector as well ?

:::-Mathieulh

::::SB_UART (and SB_TRG diag on serv.con.) is present on [[DEH-H1000A-E]], [[DEH-H1001-D ]] [[COOKIE-13]] and Retail models' [[Service_Connectors#CN4009|service connector]] and [[PCI|PCI pads]] 
::::[[User:Euss|Euss]]

:::::I'm running the TSM on a TCP-520 CP Board, but the TSM halts after the patched <b>tsm::is_cytology(void)</b> check (which makes sense because it's running on a cytology or there's no code for the cookie target :D). If I want to connect the TCP-520 to a cookie board, I need to patch the CP Firmware, as (for example) loading the GPIO driver on the South Bridge would just crash the PS3.

:::::-Strike Venom

<br>
https://www.psdevwiki.com/ps3/File:mekmGAZ.png needs some documenting [[User:Zecoxao|Zecoxao]] 05:04, 2 January 2015
:glad I won't have to ask for a more fuzzy vague picture of an [[:File:TMU-520_1-871-645-11_A_Detail_3_%28SYSCON%29.jpg|unpopulated]] [[TMU-520#CN6504_10p_.28Syscon_JTAG.29|CN6504]] [[:File:TMU-520-4.jpg|SC]] [[Syscon_Hardware#Syscon_JTAG|JTAG]] /sarcasm - [[User:Euss|Euss]] ([[User talk:Euss|talk]]) 03:14, 2 January 2015 (EST)
::You're the one with the 24MP camera :D (but seriously now, i just need a picture of the Service Connector in this page)

=== DECR  pinout ===

====CN6504 (JTAG)====
{| class="wikitable sortable"
! Pin !! Pogo-Pin Con. !! Name !! Connected to !! Function !! Group
|-
| 1 || - || - || - || - || - | -
|-
| 2 || - || - || - || - || - | -
|-
| style="background-color:black;color:white" | 3 || {{NO}} || +3.3V_EVER || style="background-color:green;color:white" | DC-DC Regulator || +3.3V line || -
|-
| 4  || {{YES}} || JRTCK || style="background-color:red;color:white" | Syscon || Return Test Clock ||  rowspan="7" | <b>[[Syscon_Hardware#Syscon_JTAG|Syscon JTAG]]</b>
|-
| 5  || {{YES}} || JTCK || style="background-color:red;color:white" | Syscon || Test Clock   
|-
| 6  || {{YES}} || JTMS || style="background-color:red;color:white" | Syscon || Test Mode Select   
|-
| 7  || {{YES}} || JTDO || style="background-color:red;color:white" | Syscon || Test Data Out   
|-
| 8  || {{YES}} || JTDI || style="background-color:red;color:white" | Syscon || Test Data In   
|-
| 9  || {{YES}} || JNTRST || style="background-color:red;color:white" | Syscon || Test Reset   
|-
| 10 || {{YES}} - (JL7500) || SC_RESET? || style="background-color:red;color:white" | Syscon || System Reset (nSRST)? 
|-
|}

pins are labeled from left to right.

==== Diag/Backup ====


{| class="wikitable sortable"
! Pin !! Pogo-Pin Con. !! Name !! Connected to !! Function !! Group
|-
| - || (JL7401) || Backup Mode || style="background-color:red;color:white" | SysCon || Backup Mode || -
|-
| - || (JL7402) || Diag Mode || style="background-color:red;color:white" | SysCon || Diagnose Mode || -
|-
|}

* There are 4 traces that lead to L7402 (which is probably related with JL7402)

==== UART ====
{| class="wikitable sortable"
! Pin !! Pogo-Pin Con. !! Name !! Connected to !! Function !! Standby Voltage !! Group
|-
| style="background-color:black;color:white" | - || (JL6839) || +3.3V_EVER? || style="background-color:green;color:white" | DC-DC Regulator || +3.3V line || 3.3 || <b>-</b>
|-
| - || (JL6838) || Rx? || style="background-color:red;color:white" | Syscon || Receive UART || 0 || rowspan="2" | <b>[[Syscon_Hardware#Syscon_UART|Syscon UART]]</b>
|-
| - || (JL6837) || Tx? || style="background-color:red;color:white" | Syscon  || Transfer UART || 3.14
|-
| style="background-color:black;color:white" | - || (JL6836) || GND? || style="background-color:green;color:white" | DC-DC Regulator || Ground line  || 0 || rowspan="1" | <b>-</b>
|-
|}

pins are labeled from left to right, Unknown so far, needs testing<br>

==== Pictures (Traces) ====
* JTAG/BAK/DIA/UART TX/UART RX -> http://i.imgur.com/7eGuCpc.jpg

== unpopulated connector, near jig-pin machine testpoints for NOR layot 4 ==
In this photo, the unknown testpoint with 3 question marks over the text '''RY''' and located in the middle of a wide trace is '''3.3V_EVER_A''' (connected to pin 8 of voltage regulator '''mitsumi 463A''')

http://www.psdevwiki.com/ps3/File:JSD-001_NOR_-_nor_testpoints.png

== DECR SYSCON Testpoint Voltages ==
http://pastie.org/private/9qguibdzfcifmuzutlxg <br>
(as you can see, all JTAG points are voltage active on a standby DECR. we need now to verify on a Test Proto if it's the same.)

= Service devices =
== PS1 ==
{| class="wikitable sortable"
! Model !! Equipment ID !! Name
|-
| PRJ-001 || J-2504-003-A || Switch on JIG
|-
| ? || J-2504-008-A || Analog controller checker
|-
|}
== PS2 ==
{| class="wikitable sortable"
! Model !! Equipment ID !! Name
|-
| SVC-HH306 || J-2504-188-A || H-Chassis pin-JIG
|-
|}

== PSP ==
{| class="wikitable sortable"
! Model !! Equipment ID !! Name
|-
| SVC-HPT501SS || J-2504-739-A || (for DTP)
|-
| SVC-HPA502SS || ? || ?
|-
| SVC-HPA503SC || ? || ?
|-
| SVC-HPA504SS || ?|| (for PSP-1000)
|-
| SVC-HPA506AD || J-2504-816-A || ?
|-
|}

== PS3 ==
{| class="wikitable sortable"
! Model !! Equipment ID !! Name
|-
| ? || ? || Console reset JIG
|-
| SVC-H3A601SS || J-2504-879-A || BD adjustment JIG
|-
|}

=Other images=
<gallery>
File:SC Serv Connector.JPG
</gallery>

= "Missing components" =

The syscon JTAG ports are almost never connected directly to the service connector (on Cookie Boards you even need jump wires - there're no traces).<br>
If you trace the pins to syscon you'll see that they never changed the Sherwood Syscon connector.<br>
The only thing they do is randomly add/remove resistors.<br>
Even on the [https://pbs.twimg.com/profile_banners/769308379/1502188569/1500x500 VERTIGO prototypes] there were missing resistors.
----
The mentions to the 3 missing SMD components in the "3rd generation service connector" (pins 7,8,9) are just a prevention incase someone checks the lines with a multimeter but '''doesnt realizes that are missing and is going to be like "this is wrong"'''... and we are going to be like... "dude, check the circuit again, there is an SMD component missing in each of the JTAG lines". Im mentioning it in my last edits yesterday to prevent this misunderstanding. If is something generic that affects other versions of this connector (not only 3rd gen but many other versions) then i guess it could be added at top of the page as something generic that "should be checked for every motherbord model". Anyway, this is not the real problem, please dont confuse it with the other edits i made yesterday<br>
<strike>The real problem of the pinout of the "3rd gen service connector" are pins 10,11,12,13 because are not really connected to syscon, right now im not sure who added that info to wiki but im assuming at the time it was added it was right, so the only explanation posible i see right now is that sony repuposed the pins of the "3rd generation service connector" for other stuff</strike>, and since JSD-001/JTP-001 (or around) sony access syscon UART through the "PCI 80 pins connector". See [https://www.psdevwiki.com/ps3/index.php?title=Talk:PCI&diff=59140&oldid=59139 this edit]<br>
Additionally, the southbridge UART access is also made through the "PCI 80 pins connector", <strike>so right now im guessing pins 4,5 (and maybe more) of the "3rd gen service connector" are also wrong</strike><br>
But the party is not over yet... this displacement of the syscon and southbridge UART ports from the "3rd generation service connector" to the "PCI 80 pins connector" means they modifyed the pinout of the "PCI 80 pins connector"<br>
I have the feeling this changes happened in JSD-001/JTP-001, at the same time they moved the syscon to the opposite side of the moterboard<br>
Damn, i just realized there are other 4 missing SMD components for the "3rd gen service connector" pins 10,11,12,13... but are located [https://www.psdevwiki.com/ps3/images/a/af/SC_Serv_Connector.JPG at the other side of the motherboard]--[[User:Sandungas|Sandungas]] ([[User talk:Sandungas|talk]]) 02:43, 9 May 2021 (UTC)