Talk:Service Connectors

A special CP Board can be used to connect via the Service Connector to the PS3

PLAYSTATION3 Tool Service Manager for Cookie
Version: 1.3.1 <built 17:20:03, 01/17/11 JST>

Where did you get this message from ? did you just run the Tool's TSM on top of the cookie board or is it from another CP board somehow ?

-Mathieulh

I patched the tsm::is_cytology(void) function to "return" false; however, if I would know the pinout of the CP Connector (CN4403) I would test it because I haven't found a single (Tool) syscon UART command that doesn't work on my COK-001 (Prototype). The problem is, that the CN4403 has over 100 pins and the COOKIE/COK Service Connector only 30 ;).

-Strike Venom

Are you running the TSM on an actual CP board ? If so you are quite daring to take a reftool appart and connect the CP board elsewhere, I never attempted this but I am quite interested as I never could exploit the retail version of the system controller firmware and doing this might allow it to happen, depending on what is allowed.

I am quite sure the Tool board has extra pins for the CP, if there is a CP for retail boards, then it is probably much more limited, in fact it is probably meant to be a diag board, I doubt TSM is meant to run on retail hardware, CPs were however quite common on internal revisions of the CEB hardware (while 3rd parties did not have access to it), back then the CP board would connect to a pci express port on the motherboard which was unpopulated on 3rd party versions (despite the fact that the cell was 00 paired on 3rd party CEB devices)

I believe TSM did run on the CEB and DEH consoles and as such a check as added later to make sure it only runs on cytology (the current reftool).

The fact that you see the TSM output just means that the diag board uses the same UART than the CP does (which makes sense, in fact on reftool, the CP is used for diag as well and has a full set of diag binaries available to it, I assume you can run all/most of them on a board attached to retail hardware. Is there an interface to SB from the service connector as well ?

-Mathieulh

SB_UART (and SB_TRG diag on serv.con.) is present on DEH-H1000A-E, DEH-H1001-D COOKIE-13 and Retail models' service connector and PCI pads

Euss

I'm running the TSM on a TCP-520 CP Board, but the TSM halts after the patched tsm::is_cytology(void) check (which makes sense because it's running on a cytology or there's no code for the cookie target :D). If I want to connect the TCP-520 to a cookie board, I need to patch the CP Firmware, as (for example) loading the GPIO driver on the South Bridge would just crash the PS3.

-Strike Venom

http://i.imgur.com/mekmGAZ.png needs some documenting Zecoxao 05:04, 2 January 2015

glad I won't have to ask for a more fuzzy vague picture of an unpopulated CN6504 SC JTAG /sarcasm - Euss (talk) 03:14, 2 January 2015 (EST)

You're the one with the 24MP camera :D (but seriously now, i just need a picture of the Service Connector in this page)

unpopulated connector, near jig-pin machine testpoints for NOR layot 4

In this photo, the unknown testpoint with 3 question marks over the text RY and located in the middle of a wide trace is 3.3V_EVER_A (connected to pin 8 of voltage regulator mitsumi 463A)

http://www.psdevwiki.com/ps3/File:JSD-001_NOR_-_nor_testpoints.png

DECR SYSCON Testpoint Voltages

http://pastie.org/private/9qguibdzfcifmuzutlxg
(as you can see, all JTAG points are voltage active on a standby DECR. we need now to verify on a Test Proto if it's the same.)

Service devices

PS1

Model	Equipment ID	Name
PRJ-001	J-2504-003-A	Switch on JIG
?	J-2504-008-A	Analog controller checker

PS2

Model	Equipment ID	Name
SVC-HH306	J-2504-188-A	H-Chassis pin-JIG

PSP

Model	Equipment ID	Name
SVC-HPT501SS	J-2504-739-A	(for DTP)
SVC-HPA502SS	?	?
SVC-HPA503SC	?	?
SVC-HPA504SS	?	(for PSP-1000)
SVC-HPA506AD	J-2504-816-A	?

PS3

Model	Equipment ID	Name
?	?	Console reset JIG
SVC-H3A601SS	J-2504-879-A	BD adjustment JIG

Other images

• 

"Missing components"

The syscon JTAG ports are almost never connected directly to the service connector (on Cookie Boards you even need jump wires - there're no traces).
If you trace the pins to syscon you'll see that they never changed the Sherwood Syscon connector.
The only thing they do is randomly add/remove resistors.
Even on the VERTIGO prototypes there were missing resistors.

---

The mentions to the 3 missing SMD components in the "3rd generation service connector" (pins 7,8,9) are just a prevention incase someone checks the lines with a multimeter but doesnt realizes that are missing and is going to be like "this is wrong"... and we are going to be like... "dude, check the circuit again, there is an SMD component missing in each of the JTAG lines". Im mentioning it in my last edits yesterday to prevent this misunderstanding. If is something generic that affects other versions of this connector (not only 3rd gen but many other versions) then i guess it could be added at top of the page as something generic that "should be checked for every motherbord model". Anyway, this is not the real problem, please dont confuse it with the other edits i made yesterday
The real problem of the pinout of the "3rd gen service connector" are pins 10,11,12,13 because are not really connected to syscon, right now im not sure who added that info to wiki but im assuming at the time it was added it was right, so the only explanation posible i see right now is that sony repuposed the pins of the "3rd generation service connector" for other stuff, and since JSD-001/JTP-001 (or around) sony access syscon UART through the "PCI 80 pins connector". See this edit
Additionally, the southbridge UART access is also made through the "PCI 80 pins connector", so right now im guessing pins 4,5 (and maybe more) of the "3rd gen service connector" are also wrong
But the party is not over yet... this displacement of the syscon and southbridge UART ports from the "3rd generation service connector" to the "PCI 80 pins connector" means they modifyed the pinout of the "PCI 80 pins connector"
I have the feeling this changes happened in JSD-001/JTP-001, at the same time they moved the syscon to the opposite side of the moterboard
Damn, i just realized there are other 4 missing SMD components for the "3rd gen service connector" pins 10,11,12,13... but are located at the other side of the motherboard--Sandungas (talk) 02:43, 9 May 2021 (UTC)