TWI858939B - Management platform system and bootloader repariring method thereof - Google Patents

Abstract

A management platform system and a bootloader repairing method thereof. The management platform system includes a control circuit, a programmable logic circuit, a first storage circuit, a selection circuit, and a second storage circuit. The control circuit has an output pin, a reset pin, and a transmission interface. The programmable logic circuit is electrically connected to the control circuit. The first storage circuit is configured to store an active bootloader. The selection circuit is electrically connected to the transmission interface of the control circuit, the programmable logic circuit, and the first storage circuit, and the selection circuit is configured to select a transmission target of the first storage circuit, wherein the transmission target is selected from the control circuit and the programmable logic circuit. The second storage circuit is electrically connected to the programmable logic circuit and is configured to store a backup bootloader. The control circuit is configured to execute at least one of the active bootloader, the active image, and the backup bootloader.

Description

Management platform system and boot program repair method thereof

The present invention relates to a baseboard management controller, and more particularly to a management platform system and a boot program repair method thereof.

In recent years, the safety and stability of servers have received more and more attention, and it has become more and more popular to use auxiliary controllers to assist the baseboard management controller (BMC) in the system to maintain stable operation. When the server is powered on, before the BMC starts to initialize, the BMC needs to load the execution firmware image file for initialization, and then load the firmware main program in the execution firmware image file after the initialization is completed. After that, the various functions of the BMC can be performed by executing the firmware main program. However, when the loaded firmware image file is wrong or damaged, personnel are required to go to the site to update the BMC firmware image file.

In view of this, the present case proposes a management platform system. The management platform system includes a control circuit, a programmable logic circuit, a first storage circuit, a selection circuit and a second storage circuit. The control circuit has an output pin, a reset pin and a transmission interface. The programmable logic circuit is electrically connected to the control circuit, and the programmable logic circuit includes a control module, a detection module and an access module. The detection module is used to detect the logic level of the output pin. The first storage circuit is used to store an active boot program and an active image file. The selection circuit is electrically connected to the transmission interface of the control circuit, the programmable logic circuit and the first storage circuit and is used to select a transmission target of the first storage circuit, wherein the transmission target is selected from the control circuit or the programmable logic circuit. The second storage circuit is electrically connected to the programmable logic circuit and is used to store a backup boot program. The control circuit is further used to execute at least one of the active boot program, the active image file and the backup boot program; the control module is used to control the detection module to generate a reset signal to the reset pin to enable or disable the control circuit, control the detection module to generate a selection signal to the selection module to select the transmission target of the first storage circuit, and write the backup boot program stored in the second storage circuit into the first storage circuit via the access module.

In some embodiments, the management platform system further includes an independent circuit, which is disposed between the control circuit and the programmable logic circuit, wherein the programmable logic circuit is further used to transmit an error log file to the control circuit via the independent circuit.

In some embodiments, the management platform system further includes a power circuit, which is electrically connected to the control circuit and is used to generate supply power.

In some embodiments, the management platform system further includes a communication circuit electrically connected to the control circuit, wherein the communication module is used to electrically connect to an external device via a transmission medium to receive a backup image file corresponding to the control circuit.

In some embodiments, the capacity of the second storage circuit is smaller than the capacity of the first storage circuit.

The present invention also proposes a boot program repair method suitable for a management platform system. The boot program repair method includes: receiving a power supply through a control circuit; executing an active boot program stored in a first storage circuit; detecting a logic level of an output pin of the control circuit; and when the logic level of the output pin is a high logic level, executing the following steps: disabling the control circuit according to the logic level of a reset signal corresponding to a detection module of a programmable logic circuit. ; selecting a transmission target of the first storage circuit as a programmable logic circuit according to a logic level of a corresponding selection signal generated by the detection module; writing a backup boot program stored in the second storage circuit into the first storage circuit; selecting a transmission target of the first storage circuit as a control circuit according to the logic level of the corresponding selection signal; and enabling the control circuit according to the change of the reset signal.

In some embodiments, the boot program repair method further includes, after the step of enabling the control circuit by resetting the pin: executing a backup boot program stored in a first storage circuit; detecting a logic level of an output pin of the control circuit; and when the logic level of the output pin is a low voltage logic level, performing the following steps: electrically connecting to an external device via a transmission medium; and receiving a backup image file corresponding to the control circuit.

In some embodiments, the boot program repair method further includes: transmitting an error log file from the programmable logic circuit to the control circuit via an independent line.

In summary, according to some embodiments, when an active boot program stored in the first storage circuit is erroneous or damaged, the management platform system writes the backup boot program stored in the second storage circuit into the first storage circuit to repair the active boot program. In this way, the control circuit can download and install the corresponding image file, so that the control circuit can normally execute its corresponding firmware main program to execute various functions of the control circuit.

Please refer to FIG. 1 , which is a circuit block diagram of some embodiments of the management platform system 10. The management platform system 10 includes a control circuit 100, a programmable logic circuit 110, a first storage circuit 120, a selection circuit 130, and a second storage circuit 140, wherein the control circuit 100 has an output pin 101, a reset pin 102, and a transmission interface 103, and the programmable logic circuit 110 includes a control module 111, a detection module 112, and an access module 113. In some embodiments, the programmable logic circuit 110 is electrically connected to the control circuit 100 and the second storage circuit 140.

Please refer to Fig. 2, which is a schematic diagram of a module of some embodiments of the selection circuit 130 in Fig. 1. The selection circuit 130 is electrically connected to the transmission interface 103 of the control circuit 100, the programmable logic circuit 110 and the first storage circuit 120, and the selection circuit 130 is used to receive and select a transmission target of the first storage circuit 120 according to a selection signal Sse, wherein the transmission target is selected from the control circuit 100 or the programmable logic circuit 110. When the transmission target of the first storage circuit 120 is the control circuit 100, the first storage circuit 120 is electrically connected to the control circuit 100; similarly, when the transmission target of the first storage circuit 120 is the programmable logic circuit 110, the first storage circuit 120 is electrically connected to the programmable logic circuit 110. In some embodiments, the initial transmission target of the first storage circuit 120 can be preset to the control circuit 100 or the programmable logic circuit 110. The following description will be made by taking the control circuit 100 as the initial preset transmission target of the first storage circuit 120 as an example.

Please refer to Figures 1 to 3, Figure 3 is an operation flow chart of some embodiments of the management platform system 10 in Figure 1. When the management platform system 10 is powered on, the control circuit 100 receives a supply power VSP provided by a power supply 20 and prepares to be initialized (step S100). When the management platform system 10 is just powered on but before the control circuit 100 is initialized, its output pin 101 cannot output a default health signal because it has not been initialized, and thus transmits a signal that does not match the default health signal. Among them, the signal that does not match the default health signal can be a high logic level representing "1" or a low logic level representing "0", but is not limited to this.

In some embodiments, the control circuit 100 is electrically connected to the power supply 20 to directly receive the standby power VST as the supply power VSP required for operation or to receive the supply power VSP having a voltage level different from the standby power VST generated by converting the standby power VST by a power circuit 150. In other words, regardless of whether the management platform system 10 is in a boot-up state or a shutdown state, as long as the power supply 20 provides the standby power VST to the management platform system 10, the control circuit 100 can receive the supply power VSP.

After step S100, the control circuit 100 of the management platform system 10 first loads and executes an active boot program stored in the first storage circuit 120 (step S110) for initialization, and then controls its output pin 101 to transmit a logic level that meets the default health signal. The management platform system 10 detects the logic level of the output pin 101 of the control circuit 100 through the detection module 112 of the programmable logic circuit 110 (step S120), wherein the logic level of the output pin 101 is selected from a high logic level representing "1" and a low logic level representing "0", but is not limited to this. The signal transmitted by the output pin 101 may also be a differential signal (e.g., a pair of differential signal lines transmitting a high logic level representing "1" and a low logic level representing "0") or a serial signal (e.g., 01, 010, 0110, etc.). The management platform system 10 detects the signal of the output pin 101 of the control circuit 100 through the detection module 112 of the programmable logic circuit 110 after being powered and after a preset detection time to avoid misjudgment.

In some embodiments, when the signal of the output pin 101 meets the preset health signal (hereinafter, a low logic level representing "0" is used as the signal meeting the preset health signal, but this is not limited to it), it means that the control circuit 100 operates normally and can be guided by executing an active boot program (such as the aforementioned Uboot) to load and execute the corresponding firmware main program of the control circuit 100. At this time, the control circuit 100 can load and execute the firmware main program corresponding to an active image file stored in the first storage circuit 120, thereby enabling the control circuit 100 to perform various functions (step S130). When the logic level of the output pin 101 is a high logic level representing "1", it means that the control circuit 100 may be erroneous or damaged and cannot normally execute the active boot program and cannot operate normally. In other embodiments, when the logic level of the output pin 101 is a high logic level representing "1", it means that the control circuit 100 operates normally; when the logic level of the output pin 101 is a low logic level representing "0", it means that the control circuit 100 may be erroneous or damaged, but it is not limited to this.

In other words, in some embodiments, before the control circuit 100 is initialized, the output pin 101 of the control circuit 100 is pulled up to a high logic level by the standby power VST. When the control circuit 100 is initialized, the control circuit 100 pulls down the logic level of the output pin 101 from a high logic level to a low logic level by executing the active boot program; on the contrary, when the control circuit 100 does not normally execute the active boot program due to its own abnormality or an error in the active boot program it executes, the logic level of the output pin 101 cannot be normally controlled by the control circuit 100 and maintains a high logic level.

Please refer to Figures 1 to 4, Figure 4 is an operation flow chart of some embodiments of the subsequent step S120 in Figure 3. After step S120, when the control circuit 100 cannot normally execute the active boot program (i.e., the logic level of the output pin 101 is a high logic level), the management platform system 10 disables the control circuit 100 according to the logic level of a reset signal Sre (step S141), wherein the reset signal Sre is generated by the programmable logic circuit 110 according to the detection result of the detection module 112 and transmitted to the reset pin 102 of the control circuit 100. In some embodiments, the logic level of the reset signal Sre is selected from a high logic level representing "1" and a low logic level representing "0", wherein the user can define the logic level used to disable the control circuit 100. For example, in some embodiments, when the detection module 112 generates a reset signal Sre of a high logic level to the reset pin 102 of the control circuit 100, the control circuit 100 is disabled and stops any behavior or operation; in other embodiments, when the detection module 112 generates a reset signal Sre of a low logic level to the reset pin 102 of the control circuit 100, the control circuit 100 is disabled and stops any behavior or operation.

After step S141, the selection circuit 130 of the management platform system 10 selects the transmission target of the first storage circuit 120 as the programmable logic circuit 110 according to the logic level of a corresponding selection signal Sse (for example but not limited to a high logic level representing "1") (step S142), so that the transmission target of the first storage circuit 120 is switched from the control circuit 100 to the programmable logic circuit 110, wherein the selection signal Sse is generated by the programmable logic circuit 110 according to the detection result of the detection module 112. In other words, at this time, the first storage circuit 120 is electrically connected to the programmable logic circuit 110.

After step S142, the management platform system 10 writes a backup boot program stored in the second storage circuit 140 to the first storage circuit 120 (step S143), wherein the backup boot program is a backup file of the active boot program that can be executed normally. In other words, the active boot program before being damaged and the backup boot program are the same file. In another embodiment, the backup boot program may be different from the active boot program before being damaged, for example, a new version of the active boot program, or an active boot program specifically used to repair the control circuit 100, and both are used to start the control circuit 100 and guide the control circuit 100 to load and execute the firmware main program corresponding to the active image file, so that the control circuit 100 can execute the corresponding function by executing the firmware main program. In other words, the control circuit 100 needs to execute the active boot program and the corresponding firmware main program to operate normally and execute the corresponding function, and the control circuit 100 cannot complete its own initialization by only executing the active boot program without executing the firmware main program. On the contrary, the control circuit 100 cannot complete its own initialization by executing only the firmware main program without executing the active boot program. In some embodiments, the management platform system 10 writes the backup boot program from the second storage circuit 140 to the access module 113 of the programmable logic circuit 110 through the control module 111, and then writes the backup boot program from the access module 113 to the first storage circuit 120. In some embodiments, the backup boot program can be pre-stored in the second storage circuit 140. In other embodiments, when the management platform system 10 is powered on for the first time and the control circuit 100 successfully executes the active boot program and the active image file to complete initialization and operate normally, the programmable logic circuit 110 controls the switching of the selection circuit 130 to copy the active boot program that can be executed normally to the second storage circuit 140 as a backup boot program.

In some embodiments, when the backup boot program is written to the first storage circuit 120, the backup boot program is written to the remaining storage space in the first storage circuit 120. In other words, at this time, the active boot program and/or the active image file including the firmware main program that has an error or is damaged is still stored in the first storage circuit 120. In other embodiments, when the backup boot program is written to the first storage circuit 120, the backup boot program overwrites the active boot program. The management platform system 10 first erases the first storage circuit 120 through the access module 113, and then writes the backup boot program into the first storage circuit 120, so that the first storage circuit 120 only stores the backup boot program but not the firmware main program.

After step S143, the selection circuit 130 of the management platform system 10 selects the transmission target of the first storage circuit 120 as the control circuit 100 according to the logic level of another corresponding selection signal Sse (for example but not limited to a low logic level representing "0") (step S144), so that the transmission target of the first storage circuit 120 is switched from the programmable logic circuit 110 to the control circuit 100. In other words, at this time, the first storage circuit 120 is electrically connected to the control circuit 100.

After step S144, the management platform system 10 enables the control circuit 100 according to the changing edge of the reset signal Sre (step S145). For example, in some embodiments, when the management platform system 10 disables the control circuit 100 according to the reset signal Sre of a high logic level, the management platform system 10 enables the control circuit 100 according to the falling edge of the reset signal Sre; in other embodiments, when the management platform system 10 disables the control circuit 100 according to the reset signal Sre of a low logic level, the management platform system 10 enables the control circuit 100 according to the rising edge of the reset signal Sre.

Please refer to Figures 1 to 5, Figure 5 is an operation flow chart of some embodiments of the subsequent step S145 in Figure 4. In some embodiments, the management platform system 10 further includes a communication circuit 160, and the communication circuit 160 is electrically connected to the control circuit 100, and the backup boot program includes an address of a default management device and a loading method. After step S145, when the control circuit 100 is enabled, the control circuit 100 executes the backup boot program stored in the first storage circuit 120 to initialize the control circuit 100 (step S146), and the management platform system 10 detects the logic level of the output pin 101 of the control circuit 100 again through the detection module 112 (step S147).

In some embodiments of step S147, when the logic level of the output pin 101 is still a high logic level representing "1", it means that the step of writing the backup boot program to the first storage circuit 120 (i.e., step S143) occurs, or the hardware of the first storage circuit 120 is damaged. At this time, the management platform system 10 terminates the operation to avoid further problems. In some other embodiments of step S147, when the logic level of the output pin 101 is a low logic level representing "0", it means that there is no problem in writing the backup boot program to the first storage circuit 120 (i.e., step S143), and the control circuit 100 successfully executes the backup boot program so that the control circuit 100 can load and execute the firmware main program normally. The management platform system 10 loads the firmware main program according to the loading method of the backup boot program. The loading method is to read the storage memory inside the management platform system 10 (not shown), read the storage device external to the management platform system 10 (not shown), or request an external device and load the firmware main program (the loading method will be explained below by taking the request with the external device as an example). At this time, the management platform system 10 is electrically connected to an external device (the external device corresponds to the address of the default management device) through a communication circuit 160 via a transmission medium (not shown, step S148), and receives a backup image file Img corresponding to the control circuit 100 from the external device through the communication circuit 160 (step S149). The backup image file Img includes a backup firmware main program (i.e., a firmware main program that can be executed normally), and the backup firmware main program can be the same as or different from the firmware main program originally stored in the first storage circuit 120 (e.g., an updated version of the firmware main program or a factory version of the firmware main program).

In some embodiments, after the control circuit 100 receives the backup image file Img through the communication circuit 160 (corresponding to step S149), the control circuit 100 writes the backup image file Img into the first storage circuit 120. At this time, the first storage circuit 120 stores the backup boot program and the backup image file Img, so that the control circuit 100 can continue to install the backup image file Img to execute the backup firmware main program, thereby enabling the control circuit 100 to execute various functions.

In some embodiments, the transmission medium may be a network communication protocol for transmitting data through a network cable, such as but not limited to File Transfer Protocol (FTP), Trivial File Transfer Protocol (TFTP) or TCP/IP communication protocol. In other embodiments, the transmission medium may also be a physical cable for transmitting data, such as but not limited to a Universal Serial Bus (USB) cable, a Type-C cable or a Lightning cable.

In some embodiments, the external device may be a local/remote storage system for storing various program files or image files, such as but not limited to a computer host, a direct-attached storage (DAS) device, a network-attached storage (NAS) server, a cloud database, or a remote data center.

Please refer to Figures 1 to 6, Figure 6 is an operation flow chart of some embodiments of the subsequent step S149 in Figure 5. After step S149, the management platform system 10 transmits an error log file Le from the programmable logic circuit 110 to the control circuit 100 via an independent line L6 (step S150), wherein the error log file Le is generated by the programmable logic circuit 110, and the error log file Le is used to record relevant information when an error or damage occurs in the active boot program (such as the time of error occurrence, the cause of error occurrence, or the number of error occurrences). In other words, in some embodiments, the management platform system 10 has a function of recording a system error, so that the engineer operating the management platform system 10 can immediately know what the system error is after the control circuit 100 operates normally. In some embodiments, the independent line L6 is only used to transmit the error log file Le but not to transmit other files.

In some embodiments, after the control circuit 100 receives the error log file Le, the control circuit 100 may display the content of the error log file Le on a display device (e.g., an external screen) to inform the engineer that an error has occurred in the system. In other embodiments, the control circuit 100 may also store the error log file Le in the first storage circuit 120, so that the engineer can check the content of the error log file Le at any time to confirm whether an error has occurred in the system.

In some embodiments, the control circuit 100 may be a hardware component having a control function, such as but not limited to a baseboard management controller (BMC), a central processing unit (CPU), a microprocessor (Microprocessor), a digital signal processor (DSP), an application specific integrated circuit (ASIC) or a microcontroller unit (MCU).

In some embodiments, the programmable logic circuit 110 may be a hardware component with firmware programming function, such as but not limited to a complex programmable logic device (CPLD) or a field programmable logic gate array (FPGA). In other words, the functions of each device in the programmable logic circuit 110 (including the control module 111, the detection module 112, and the access module 113) are implemented by the firmware burned into the programmable logic circuit 110.

In some embodiments, the first storage circuit 120 and the second storage circuit 140 may be storage elements with read and write functions, such as but not limited to non-volatile memory or flash memory. In other embodiments, the second storage circuit 140 may be a storage element with only a read function but not a write function, so that the backup boot program stored in the second storage circuit 140 cannot be modified to ensure its correctness and integrity. The second storage circuit 140 may be, for example, a read-only memory (ROM) or a flash memory with a write function disabled, but is not limited thereto.

In some embodiments, the capacity of the second storage circuit 140 is smaller than the capacity of the first storage circuit 120, and the second storage circuit 140 does not store the active image file or (backup image file Img), nor does it store the firmware main program (or backup firmware main program) corresponding to the active image file (or backup image file Img). Among them, since the file size of the active boot program (or backup boot program) is smaller than the file size of the active image file (or backup image file Img), and the second storage circuit 140 only stores the backup boot program but does not have the active image file (or backup image file Img) or the backup firmware main program, the second storage circuit 140 can select a storage element with a capacity smaller than that of the first storage circuit 120 to save the cost of the management platform system 10. For example, in some embodiments, the file size of the active boot program (or backup boot program) is, for example, but not limited to, 2 million bits (i.e., 2Mb), and the file size of the active image file (or backup image file Img) is between 64Mb and 128Mb, but is not limited thereto. Therefore, the capacity of the first storage circuit 120 must be at least greater than 130 Mb. In contrast, the capacity of the second storage circuit 140 only needs to be greater than 2 Mb.

In some embodiments, the selection circuit 130 may be a hardware component having a path selection function, such as but not limited to a multiplexer (MUX) or a switch (Switch).

In some embodiments, the power circuit 150 may be a hardware component having a power conversion function, such as but not limited to an analog-to-digital converter (ADC), a digital-to-analog converter (DAC), a rectifier, or an inverter.

In some embodiments, the communication circuit 160 can be a hardware component with wired communication function or wireless communication function, such as but not limited to a USB connector, a Type-C connector, a Lightning connector, a Wi-Fi chip, a Bluetooth chip, or a two-in-one wireless chip with both Wi-Fi and Bluetooth functions.

In some embodiments, lines L1~L5 and independent line L6 can be transmission channels or transmission interfaces with data transmission functions, such as but not limited to general purpose input and output (GPIO) interface, serial general purpose input and output (SGPIO) interface, serial peripheral interface (SPI) bus, low voltage differential signaling channel protocol and interface (LTPI), system management bus (SMBus) or universal asynchronous receiver and transmitter (UART).

In summary, according to some embodiments, when an active boot program stored in the first storage circuit is erroneous or damaged, the management platform system writes the backup boot program stored in the second storage circuit into the first storage circuit to repair the active boot program. In this way, the control circuit can download and install the corresponding image file, so that the control circuit can normally execute its corresponding firmware main program to execute various functions of the control circuit.

Although the present invention has been disclosed as above by way of embodiments, it is not intended to limit the invention. Anyone with ordinary knowledge in the relevant technical field may make some modifications and changes without departing from the spirit and scope of the present disclosure. However, such modifications and changes are still within the scope of the patent application of the present invention.

10: Management platform system

100: Control circuit

101: Output pin

102: Reset foot position

103:Transmission interface

110: Programmable logic circuit

111: Control module

112: Detection module

113: Access module

120: First storage circuit

130: Select circuit

140: Second storage circuit

150: Power circuit

160: Communication circuit

20: Power supply

Img: Backup Image

L1~L5: Line

L6: Independent line

Le: Error log file

S100~S130, S150: Steps

S141~S149: Steps

Sre: reset signal

Sse: Select signal

V1: Logical Level

VSP: Power Supply

VST: Standby power

FIG. 1 is a circuit block diagram of some embodiments of the management platform system. FIG. 2 is a module schematic diagram of some embodiments of the selection circuit in FIG. 1. FIG. 3 is an operation flow chart of some embodiments of the management platform system in FIG. 1. FIG. 4 is an operation flow chart of some embodiments of the subsequent step S120 in FIG. 3. FIG. 5 is an operation flow chart of some embodiments of the subsequent step S145 in FIG. 4. FIG. 6 is an operation flow chart of some embodiments of the subsequent step S149 in FIG. 5.

10: Management platform system

100: Control circuit

101: Output pin

102: Reset foot position

103: Transmission interface

110: Programmable logic circuit

111: Control module

112: Detection module

113: Access module

120: First storage circuit

130: Select circuit

140: Second storage circuit

150: Power circuit

160: Communication circuit

20: Power supply

Img: backup image

L1~L5: Line

L6: Independent line

Le: Error log file

Sre: reset signal

Sse: Select signal

V1: Logical level

VSP: Power supply

VST: Standby power

Claims (8)

A management platform system includes: a control circuit having an output pin, a reset pin and a transmission interface; a programmable logic circuit electrically connected to the control circuit, the programmable logic circuit including: a control module; a detection module for detecting the logic level of the output pin; and an access module; a first storage circuit for storing an active boot program and an active image file; a selection circuit electrically connected to the transmission interface of the control circuit, the programmable logic circuit and the first storage circuit for selecting a transmission target of the first storage circuit, wherein the transmission target is selected from the control circuit or the programmable logic circuit; and a second storage circuit electrically connected to The programmable logic circuit is used to store a backup boot program; wherein the control circuit is used to execute at least one of the active boot program, the active image file and the backup boot program; the control module is further used to control the detection module to generate a reset signal to the reset pin to enable or disable the control circuit, control the detection module to generate a selection signal to the selection circuit to select the transmission target of the first storage circuit, and write the backup boot program stored in the second storage circuit to the first storage circuit through the access module; the capacity of the second storage circuit is smaller than the capacity of the first storage circuit; the active boot program and the backup boot program do not include a firmware main program. The management platform system as described in claim 1 further includes an independent line, which is arranged between the control circuit and the programmable logic circuit, wherein the programmable logic circuit is further used to transmit an error log file to the control circuit via the independent line. The management platform system as described in claim 1 further includes a power circuit, which is electrically connected to the control circuit and is used to generate a supply power. The management platform system as described in claim 1 further includes a communication circuit electrically connected to the control circuit, wherein the communication circuit is used to electrically connect to an external device via a transmission medium to receive a backup image file corresponding to the control circuit. A boot program repair method is suitable for a management platform system. The management platform system includes a control circuit, a programmable logic circuit, a first storage circuit, a selection circuit and a second storage circuit. The boot program repair method includes: receiving a supply power through the control circuit; executing an active boot program stored in the first storage circuit; detecting a logic level of an output pin of the control circuit; and when the logic level of the output pin is a high logic level, executing the following steps: disabling the logic level of a corresponding reset signal generated by a detection module of the programmable logic circuit the control circuit; selecting a transmission target of the first storage circuit as the programmable logic circuit according to the logic level of a corresponding selection signal generated by the detection module; writing a backup boot program stored in the second storage circuit into the first storage circuit; selecting the transmission target of the first storage circuit as the control circuit according to the logic level of the corresponding selection signal; and enabling the control circuit according to the change of the reset signal; wherein the capacity of the second storage circuit is less than the capacity of the first storage circuit; the active boot program and the backup boot program do not include a firmware main program. The boot program repair method as described in claim 5, wherein the management platform system further includes a communication circuit, and the boot program repair method further includes: executing the backup boot program stored in the first storage circuit after the step of enabling the control circuit via a reset pin of the control circuit; detecting the logic level of the output pin of the control circuit; and when the logic level of the output pin is a low voltage logic level, executing the following steps: electrically connecting to an external device via a transmission medium; and receiving a backup image file corresponding to the control circuit. The boot program repair method as described in claim 6, wherein the management platform system further includes an independent line, and the boot program repair method further includes: transmitting an error log file from the programmable logic circuit to the control circuit via the independent line. The boot program repair method as described in claim 5, wherein the management platform system further includes a power circuit, which is used to generate the supply power.

Images