AN-603--Active-Serial-Remote-System-Upgrade-Refere

©April2010AlteraCorporationAN603:ActiveSerialRemoteSystemUpgradeReferenceDesignAN-603-1.0©April2010AN603:ActiveSerialRemoteSystemUpgradeReferenceDesignThisapplicationnoteprovidesareferencedesignfortheactiveserial(AS)remotesystemupgradefeatureinArriaIIGX,StratixIII,andStratixIVdevices.TheASremotesystemupgradefeatureenablessupportedAlteradevicestoreceivenewconfigurationdatafromaremotesource,updateoftheflashmemorycontent,andreconfigurethedevicewithnewconfigurationdata,allowingyoutoovercomedifficultchallengessuchasshortendesigncycles,evolvingstandards,andsystemdeploymentsinremotelocations.ThisreferencedesigninstantiatestheALTREMOTE_UPDATEmegafunctionandauserlogictoinitiatethereconfigurationcycle.UsethisreferencedesigntobeginusingtheremotesystemupgradefeatureinArriaIIGX,StratixIII,andStratixIVdevicesandthenyoucanmodifythedesigntosuityoursystemusage.Thisapplicationnotecontainsthefollowingsections:■“RemoteUpdateMode”onpage2■“FunctionalDescription”onpage3■“FactoryConfigurationImageUserLogicStateMachine”onpage10■“ApplicationConfigurationImageUserLogicStateMachine”onpage16■“RemoteSystemUpgradeReconfiguration”onpage19■“ASRemoteSystemUpgradeTestingProcedure”onpage231ThisreferencedesignistargetedforArriaIIGXdevices.BecausetheremotesystemupgradecircuitryforStratixIIIandStratixIVdevicesareidenticaltotheArriaIIGXdevices,thisreferencedesignisalsoapplicableforthesedevices.fFormoreinformationabouttheASmodeandremotesystemupgradefeatureforArriaIIGX,StratixIII,andStratixIVdevices,refertothefollowingchapters:■Configuration,DesignSecurity,andRemoteSystemUpgradesinArriaIIGXDeviceschapterinvolume1oftheArriaIIGXDeviceHandbook.■RemoteSystemUpgradeswithStratixIIIDeviceschapterinvolume1oftheStratixIIIDeviceHandbook.■Configuration,DesignSecurity,andRemoteSystemUpgradesinStratixIVDeviceschapterinvolume1oftheStratixIVDeviceHandbook.Page2RemoteUpdateModeAN603:ActiveSerialRemoteSystemUpgradeReferenceDesign©April2010AlteraCorporationRemoteUpdateModeWhenthedeviceisfirstpoweredupinremoteupdatemode,itloadsthefactoryconfigurationlocatedatpagezero(pageregistersPGM[23..0]=24’h000000).Youmustalwaysstorethefactoryconfigurationimageforyoursystematpageaddresszero.Thiscorrespondstothestartaddressof0×000000intheserialconfigurationdevice(EPCS).Afterpoweruporaconfigurationerror,thefactoryconfigurationlogicautomaticallyloads.Theuser-definedfactoryconfigurationdetermineswhichapplicationconfigurationtoloadbeforetriggeringareconfigurationcycle.Thefactoryconfigurationalsomustspecifywhethertoenabletheuserwatchdogtimerfortheapplicationconfigurationand,ifenabled,toincludethetimersettinginformationaswell.Figure1showsthetransitionbetweenthefactoryandapplicationconfigurationimageinremoteupdatemode.Ifanerroroccurswhentheapplicationconfigurationimageisloading,thededicatedremoteupgradecircuitryofyourdeviceupdatestheremotesystemupgradestatusregisterwiththeerrorinformation.Thefollowingactionscancausetheremotesystemupgradestatusregistertobewritten:■nSTATUSisdrivenlow■Internalconfigurationcyclicalredundancycheck(CRC)error■Configurationresetfromthelogicarray(corenCONFIG)■ExternalnCONFIGassertion■UserwatchdogtimertimeoutAfteranerror,thesystemrevertsbacktothefactoryconfigurationimage.Youcanreadtheremoteupgradestatusregistertodeterminethereconfigurationsourceanddetermineyournextcourseofaction.Figure1.TransitionBetweenConfigurationsinRemoteUpdateModeFactoryConfigurationApplication1ConfigurationApplicationandConfigurationSetControlRegisterandReconfigureConfigurationErrorSetControlRegisterandReconfigureConfigurationErrorReloadaDifferentApplicationReloadaDifferentApplicationPowerUpConfigurationErrorFunctionalDescriptionPage3©April2010AlteraCorporationAN603:ActiveSerialRemoteSystemUpgradeReferenceDesignWhenthedevicesuccessfullyloadstheapplicationconfigurationimage,thesoftlogicintheapplicationconfigurationimagedetermineswhentheremotesystemupdateisarriving.Whenaremotesystemupdatearrives,thesoftlogicreceivestheincomingdata,writesittothememoryconfigurationdevices,andtriggersthesystemtoloadthefactoryconfigurationimage.Thefactoryconfigurationimagereadstheremotesystemupgradestatusregister,determinesthevalidapplicationconfigurationimagetoload,writestheremotesystemupgradecontrolregister,andinitiatessystemreconfiguration.FunctionalDescriptionThissectiondescribestheseparatelogicblocksinstantiatedinthereferencedesign.Figure2showstheremotesystemupgradereferencedesignblockdiagram.UserLogicControlBlockIntheremotesystemupgradeapplication,userlogicisuser-defined.Theuserlogicinthisreferencedesignperformsthefollowingactions:■ReadsfromtheALTREMOTE_UPDATEmegafunctiontodeterminethesourceofreconfigurationandreportsthestatusaccordingly.Thefactoryconfigurationimageuserlogicinthisreferencedesignreportsthesourceofreconfigurationinducedbyawatchdogtimertimed-outerror,externalnCONFIGassertion,corenCONFIGassertion,configurationCRCerror,nSTATUSerror,orinvalidapplicationconfigurationimageloadingerrors.■WritestotheALTREMOTE_UPDATEmegafunctiontosettheapplication-not-factory(AnF)bit.■Determinesandwritesthenextboota