Click or drag to resize

17.8.2 Boot Failure Fallback Mechanism

As mentioned in 17.5 Firmware Images and SD-Card Partitions, 17.8.1 Fail-Safe Update Mechanism, and 18.1 Power LED Signalling, the SP-ICE-3 Card implements a fallback mechanism for use in the event that it fails to boot the current firmware image.

Causes of Boot Failure

Amongst other reasons, the card may fail to boot because:

  • The power supply is unstable during the initial stages of the boot sequence.

  • An Update has failed, so that the new image is incomplete or damaged.

  • The current image was accidentally damaged during normal operation, and the firmware cannot be started.

In such cases, the card applies the following fallback strategy:

Fallback Mechanism used in the event of Boot Failure

  1. Attempt to boot the current image up to 10 times.
    If it still fails, move on to step 2.

  2. Attempt to boot the previous image up to 10 times.
    If it still fails, move on to step 3.

  3. If all else fails:
    Boot the recovery image.

See Also