8845 video phone won't reset

[Eileen_Mills]

I have an 8845 which was successfully programmed one time. The configuration for it in CUCM was modified, and a factory reset was started (123456789*0#). However, it was unplugged before the reset was able to complete. Now when power is applied, there is only a blank screen the voicemail light is lit. There are no lights of any other kind, and no response to any key presses. This happens regardless of whether # is held or not. The configuration has since been removed from CUCM in an effort to force an Autoreg, but this did not resolve the issue.

Is it now a brick? And if so, what would the procedure be to unbrick it?

[Brandon Buffin]

Are you holding # as power is applied to the phone? Have you tried a power brick instead of PoE for power?

Brandon

[Eileen_Mills]

Yes, I am holding # when power is applied, which has thus far come from the data connection. I'll see if I can dig up a power brick...

[Jaime Roldan]

Hello Eileen,

Do you know if the phone is getting IP from the DHCP server?.

If you want to troubleshoot this issue yourself, you might need make a phone console cable. This will allow you to gather the phone console logs and determine what is happening during the boot process.

Here are two guides on how to make such a cable:

https://www.cisco.com/c/en/us/support/docs/collaboration-endpoints/unified-ip-phone-7900-series/212061-How-To-Make-A-Cisco-IP-Phone-Console-Cab.html

https://www.cisco.com/c/en/us/support/docs/interfaces-modules/port-adapters/200084-How-To-Custom-Make-Cisco-IP-Phone-Consol.html

If you happen to go through this process, i will be more than glad to check the phone console logs for you.

Best Regards, Jaime.

[Eileen_Mills]

Hello Jaime,

No, the phone is not able to be found on the network. I've also not been able to locate a Power Cube 4 (I'll try to get one ordered).

Thank you for the links and for the offer to go over the logs! I will search around for a console cable and give this a try.

[Eileen_Mills]

--------------------------
CAPRI BOOTROM - ASIC VER:0x111400A3 SW VER:NEWPROM_BUILD_2.10
Powerup reason : 0x11
ROM_CONF: 0x01000023 DEV_STAT: 0x00000001 STRAP_PIN: 0x00002015
UART boot Start
BOOT STATE = INIT
HW RESET
BOOT STATE = RESUME
TIMEOUT(UART_DRIVER_CMD_TIMER)
USB boot Start
BOOT STATE = INIT
VBUS NOT DETECTED
USB boot end
eMMC0 boot is disabled
NAND boot start
Read NAND Table : addr cycles:5
NAND table found: page 0 addr 0x00000000

NAND configruation info
-------------------------
Page size 2 KB
ECC info 8/512
-------------------------
NAND memory is initialized
nand_page_read success: page: 1
Image identifier is founded 0:0x00000800
Image size: 0x00006EB4
nand_page_read success: page: 2
nand_page_read success: page: 3
nand_page_read success: page: 4
nand_page_read success: page: 5
nand_page_read success: page: 6
nand_page_read success: page: 7
nand_page_read success: page: 8
nand_page_read success: page: 9
nand_page_read success: page: 10
nand_page_read success: page: 11
nand_page_read success: page: 12
nand_page_read success: page: 13
nand_page_read success: page: 14
Image loading succeed
post_speedup_init
[ABI] KEK OK
[ABI] [AUTHENTICATING] HWCONF #-1
import_issw:1
issw_execute
[ABI] [LOADING] SSB #0
[ABI] [AUTHENTICATING] SSB #0 @ 0x8FF00000
[ABI] SSB Load OK
[ABI] [LOADING] Loader #0
[ABI] [AUTHENTICATING] Loader #0 @ 0x88080000
[ABI] [STARTING] Loader...
Set pmu mbc ctrl2 ...PMU at I2C PMU
pmu_mbc ctrl2 read bit 0-7 0x0(3)
i2c write 0x0(3)
pmu_mbc ctrl2 read bit 0-7 0x0(3)
Get pmu dev enb 2 ...PMU at I2C PMU
pmu_dev_enb2 bit 0-7 0x0(3)
Get pmu mbc read ...PMU at I2C PMU
pmu_mbc read bit 0-7 0x0(3)
Get adc reading ...PMU at I2C PMU
adc reading bit 8-9 index 0 0x0(3)
adc reading bit 0-7 0x0(3)
adc reading bit 0-15 0x0
Read PMU ID ...PMU at I2C PMU
PMU ID 0x0(3)
UNIDENTIFIED PMU
Row 5 OTP value = 0x0, csr_val = 0x0
Start setting CSR ...PMU at I2C PMU
PMU CSRCTRL1 before write 0x0(3)
i2c write 0x0(3)
PMU CSRCTRL3 read 0x0(3)
i2c write 0x0(3)
Start setting VSR ...PMU at I2C PMU
PMU VSRPMCTRL1 before write 0x0(3)
i2c write 0x0(3)
PMU VSRPMCTRL1 after write 0x0(3)
PMU VSRPMCTRL2 before write 0x0(3)
i2c write 0x0(3)
PMU VSRPMCTRL2 after write 0x0(3)
PMU VSRPMCTRL3 before write 0x0(3)
i2c write 0x0(3)
PMU VSRPMCTRL3 after write 0x0(3)
PMU VSRPMCTRL4 before write 0x0(3)
i2c write 0x0(3)
PMU VSRPMCTRL4 after write 0x0(3)
Start setting MMCLDO1PMCTRL1 ...PMU at I2C PMU
312MHz Clk setting
1200MHz Clk setting

********************************************************************************
Loader version 1.0 started. Built date: Apr 21 2015 Time 01:06:49d
********************************************************************************
Chip Name: CAPRI
Chip Revision: A3
Mode: Big
********************************************************************************
+bootldr_boot_parms_init
U-Boot flash addr 0xc0000
U-Boot load addr 0x8e000000
Copy DT-Blob data to RAM 0x8c000000 for SB2 access
-bootldr_boot_parms_init
+bootldr_flash_init
-bootldr_flash_init

[FLASH] Applying Pinmux and GPIO settings...

dt_parser: dt-blob size 6201 bytes!
model: Broadcom board
compatible: Broadcom,
dt_parser: found pinmux node @0x88089ae8!
reg: 0x35004800, 0x10c
data@0x88089b38, size=1072
dt_parser: found gpio node @0x88089f78!
reg: 0x35003000, 0x28
data@0x88089fc4, size=320
Valid DT-Blob! dt_pinmux_nr=268
Configured pin-mux! 62 gpio pins!
Missing initial cfg for GPIO bank2 (mask=0x78008000)
Missing initial cfg for GPIO bank3 (mask=0x820)
Missing initial cfg for GPIO bank4 (mask=0x3ff00)
Missing initial cfg for GPIO bank5 (mask=0x34600000)
Configured gpio!
[FLASH] U-Boot loading...
+bootldr_load_main_image
Loading First Block...
Loaded 2KB in 1 ms from 0x000C0000 to 0x8E000000.
Found image size: 0x6988C
-bootldr_load_main_image
+bootldr_load_main_image
LOADING 0x69a1c...
NAND page read error!

ERROR during loading.[LOADER] [ERROR] First SB2 Image Remaining Blocks load Failed, try backup one.
+bootldr_load_main_image
LOADING 0x69a1c...
Loaded 422KB in 94 ms from 0x00280000 to 0x8E000000.
-bootldr_load_main_image
[LOADER]--- do img auth on SB2: imgauth_authenticate_sb2(header addr:0x8e06988c, payload addr:0x8e000000, payload size:432268)
[imgauth_authenticate_sb2]--- imageHeader:0x8e06988c, imaeBuffer:0x8e000000, imageSize:432268)
authenticate_cisco_image: imageHeader:0x8e06988c, imageBuffer:0x8e000000, imaegSize:432268, authMode:0, imageHash:0x800dfb9c
calculateBufferHash: inBuffer:0x8e000000, inSize:432268, outBuffer:0x800dfb9c
Error: Magic pattern does not match in header
[LOADER] [ERROR] Second SB2 Image Authentication Failed.

[Eileen_Mills]

Apologies for the log directly to the thread. I had attached it as a .txt file and written a short note. Obviously, that did not work the way I intended.

[Eileen_Mills]

Anybody know how to unbrick an 8845 IP video phone? Log is inline above...
Thanks!

[tgarst]

We also have a 8851 that has bricked (4th session button light stuck during boot).  I have Cisco TAC case and sent AUX debug log, but no bugs (even internal) match our issue.  In our situation, we were doing network replacement project (moved from 3750 switches to 9300 switches) and found the phone stuck after doing this work.  I suspect that the phone was possibly unplugged from the patch panel while randomly booting, or, possibly it was hard to unplug at the patch and caused the issue.

I found this thread by searching UNIDENTIFIED PMU as this was in my log on the 8851.

I have also seen odd stuff at three different Corporations with 88xx model including needing to use CAT6 instead of CAT5e (symptom is phone will spin in 'Connecting' and indicate 'No Ethernet Connected' in status messages).

Not trying to threadjack, just commenting that maybe there are some issues with 88xx model as Cisco would not share the internal details of the BUG with me.

Here is one of the bugs that describes this:  “ https://bst.cloudapps.cisco.com/bugsearch/bug/CSCuq79974 “, however in the cases where I see this they just replaced the phone.