Editing Southbridge

PS4 southbridge contains two processors named EMC and EAP on the same die that are mainly used on boot, during rest mode and for servicing.

= Components =

== Southbridge processors ==

The two processors are on the same die. It is a SoC (System on Chip).

=== EMC ===

EMC could stand for External Micro Controller. EMC was named MediaCon by some people when its name was still unknown.

The role of EMC is to load EMC Initial Program Loader, to be an interface for icc for the main [[APU]] kernel and [[Syscon]] and to offer a debug interface via UART that does not rely on [[Syscon]] or main APU. EMC runs its own FreeBSD kernel. It is a Marvell Armada, an ARM-based SoC. Sony stuck a [[PCIe]] bridge on it. It exposes ARM peripherals to the x86 side. There is some extra stuff (e.g. HPET, ACPI stuff).

EMC cpuid = 412FC231 (ARM Cortex-M3 r2p1). CPU clock: maybe about 100MHz.

==== EMC Initial Program Loader ====

EMC Initial Program Loader is stored encrypted in a SLB2 container in PS4 Serial Flash. Its role is to launch both EAP Kernel Boot Loader and AMD bootROM.

=== EAP ===

EAP could stand for External Application Processor.

The role of EAP is to handle media (online [[Wireless]]/[[GbLAN]], [[Bluray Drive]] and [[HDD SSD|HDD/SSD]]) even when the PS4 is in standby mode. EAP runs its own FreeBSD kernel in standby mode, activated to handle tasks such as downloading games updates while the PS4 is in standby.

It handles several tasks to offload the [[APU]]:
* Network connections: [[Wireless]] and [[GbLAN]], including background downloading and [[PlayGo]]
* File handling ([[Bluray Drive]], [[Harddrive]] and [[USB 3.0]]), including background caching
* Main serial flash handling

EAP consists of Marvell PJ4C B0 rev 1 cores, ARMv7 CORTEX-A8 running FreeBSD 9 kernel. CPU clock: 500MHz. DDR clock: 800MHz.

As EAP Core software is unsigned, unencrypted and easily replaceable on PS4 HDD with a PS4 kernel exploit, it is possible to run homebrew code on EAP processor. See [https://github.com/psxdev/eapdev eapdev by Bigboss (psxdev)].

==== EAP Kernel Boot Loader ====

EAP Kernel Boot Loader is stored encrypted in a SLB2 container in PS4 Serial Flash. The role of EAP Kernel Boot Loader is to decrypt then uncompress the EAP Kernel. The encrypted EAP Kernel is stored at virtual address 0xC1000000 and the decrypted and uncompressed EAP Kernel is located at virtual address 0xC3000000.

==== EAP Kernel ====

EAP Kernel is located at virtual address 0xC3000000. Encrypted EAP Kernel is mounted on device da0x2 along with minila file.

==== minila ====

minila is an ELF file stored in /minila/ folder in EAP virtual filesystem (packed along with EAP Kernel). Minila is "AMD SceSysCore mini" equivalent for EAP.

==== EAP Core ====

EAP Core is the only usermode executable running on EAP. It is stored unencrypted as SceEapCore.elf in PS4 HDD.

==== EAP Filesystem from EAP Kernel binary ====

<pre>
/dev/
/eap_tmp/
/eap_user/
/eap_vsh/
/minila/
/minila/minila
/rescue/
/update/
/user/
</pre>

==== EAP files on HDD ====

* da0x2 HDD partition is mounted to /eap_kern/ but is encrypted. Only EMC Kernel Boot Loader reads and decrypts this partition then loads it in EAP DDR3 memory and launches EMC Kernel.
* da0x3 HDD partition is mounted to /eap_vsh/.

<pre>
/eap_vsh/common/
/eap_vsh/common/cert/
/eap_vsh/common/cert/CA_list.cer
/eap_vsh/etc/
/eap_vsh/etc/bgdc/
/eap_vsh/etc/bgdc/config.xml
/eap_vsh/etc/timezone.dat
/eap_vsh/SceEapCore.elf
</pre>

==== EAP files on Serial Flash ====

<pre>
sflash0s0x33: SLB2 container
sflash0s0x33/C0010001: EMC Kernel Boot Loader
sflash0s0x33/C0018001: EMC Kernel Boot Loader Information
</pre>

== Southbridge RAM ==

Southbridge chip is connected to its own DDR3 SDRAM. It is named "sbram" as abbreviation for SouthBridge RAM.

=== PS4 Fat and Slim ===

PS4 Fat and Slim Southbridge has access to one 2Gb DDR3 chip, for a total of 256MB of memory.

=== PS4 Pro ===

PS4 Pro Southbridge has access to two 4Gb DDR3 chips, for a total of 1GB of memory.

== Serial Flash ==

Southbridge contains a 256MB Serial flash.

[[Aeolia]] has Macronix [[MX25L25635FMI-10G]].

== Auxiliary components ==

Southbridge is connected to the main [[APU]] by [[PCIe|PCI-Express x4]] and to [[Syscon]] by SPI.

[[Aeolia]] has SATA bridge [[MB86C311B]], [[GbLAN]] controller [[88EC060-NN82]].

= Southbridge revisions =

There are three major hardware revisions of the PS4 southbridge, named Aeolia, Belize and Baikal.

See also [[Aeolia]].

== Motherboards per Southbridge revisions ==

{| class="wikitable sortable"
|-
! Southbridge Codename !! Southbridge Labeling !! Motherboards
|-
| [[Aeolia]] || [[CXD90025G]] ||
[[CVN-K12]]<br />
[[SAA-001]]<br />
[[SAB-001]]
|-
| [[Belize]] || [[CXD90036G]] ||
[[SAC-001]]<br />
[[SAD-001]]<br />
[[SAD-003]] (1-981-769-11)<br />
[[HAC-001]]<br />
[[NVA-001]]
|-
| [[Belize 2]] || [[CXD90046GG]] ||
[[NVB-003]]<br />
[[NVG-001]]<br />
?[[SAD-003]] (1-981-769-21, 1-981-769-31)?<br />
[[SAE-001]]<br />
[[SAE-003]]<br />
[[SAF-003]]<br />
[[SAF-005]]
|-
| [[Baikal]] || [[CXD90042GG]] ||
[[NVB-004]]<br />
[[NVG-002]]<br />
[[NVG-004]]<br />
[[SAD-002]]<br />
[[SAE-002]]<br />
[[SAE-004]]<br />
[[SAF-004]]<br />
[[SAF-006]]
|}

== Southbridge revisions per chassis ==

{| class="wikitable sortable"
|-
! Model (chassis) !! Motherboards !! Southbridge Codename !! Oldest Manufacturing Date !! Newest Manufacturing Date
|-
| D1000 || All CVN || Aeolia || ||
|-
| 1000 || All SAA || Aeolia || ||
|-
| 1100 || All SAB || Aeolia || ||
|-
| 1200 || All SAC || Belize || 2015-10 ||
|-
| 2000 || SAD-001, SAD-003 (1-981-769-11) || Belize || 2016-04 ||
|-
| 2000 || SAD-002 || Baikal || 2016-09 ||
|-
| 2000 || SAD-003 (1-981-769-21, 1-981-769-31) || ?Belize or Belize 2? || 2016-08 ||
|-
| D7000 || HAC-001 || Belize || ||
|-
| 7000 || NVA-001 || Belize || 2017-05 ||
|-
| 2100 || SAE-001, SAE-003 || Belize 2 || 2017-11 || 2017-12
|-
| 2100 || SAE-002, SAE-004 || Baikal || 2017-06 || 2017-12
|-
| 7100 || NVB-003 || Belize 2 || 2018-05 || 2018-08
|-
| 7100 || NVB-004 || Baikal || 2017-11 ||
|-
| 2200 || SAF-003, SAF-005 || Belize 2 || 2018-06 || 2018-09
|-
| 2200 || SAF-004, SAF-006 || Baikal || 2018-03 || 2020-05
|-
| 7200 || NVG-001, NVG-003 || Belize 2 || 2018-11 || 2019-05
|-
| 7200 || NVG-002, NVG-004 || Baikal || 2018-09 || 2019-06
|}


{{Motherboard Components}}
<noinclude>
[[Category:Main]]
</noinclude>