B&R Automation X20 CP1584 – Bootloader and Recovery Procedures
Applies to: B&R X20 CP1484, CP1584, CP1585, CP1586 and related X20 Compact CPUs. Based on: B&R X20 System User’s Manual, X20CP148x/158x datasheets, B&R Community forums, and field experience. This is unofficial documentation compiled from publicly available sources. Always consult the official B&R manuals at br-automation.com for authoritative procedures.
Table of Contents
- Boot Sequence Overview
- What Happens When the CF Card Is Corrupted or Missing
- Bootloader Modes and Operating Mode Switch
- LED Indications During Boot Failure
- How to Enter Bootloader Mode on the CP1584
- Serial Console Access
- Firmware Recovery via Serial (B&R Service Utility)
- TFTP Recovery Procedure
- USB-Based Recovery
- Runtime Utility Center for Firmware Operations
- Automation Studio Offline Installation
- Creating Recovery Media
- Safe Mode and Diagnostic Mode
- Minimum Files Needed on CF Card for Boot
- How to Unbrick a CP1584 That Won’t Boot
- How to Reload the Entire System from Scratch
- Prevention and Best Practices
- References
1. Boot Sequence Overview
When power is applied to an X20 CP1584, the following boot sequence occurs:
- Hardware POST – The CPU performs power-on self-test. Internal flash boots the embedded bootloader firmware (stored in internal flash, not on the CF card).
- CF Card Detection – The bootloader checks the CompactFlash slot for a valid storage card. The CF LED illuminates green if a card is detected.
- Boot Mode Evaluation – The bootloader reads the operating mode switch position (BOOT / RUN / DIAG) and determines the startup strategy:
- BOOT: Starts “Boot AR” – a minimal runtime environment that allows firmware installation via the online interface (Ethernet or RS-232). No user application runs.
- RUN: Attempts to load Automation Runtime from the CF card, initialize the I/O bus, and start the user application.
- DIAG: Boots into diagnostic mode. User RAM and User Flash contents are not initialized.
- Runtime Load – In RUN mode, the bootloader reads the SYSTEM partition on the CF card, loads Automation Runtime, and begins I/O bus initialization.
- Application Start – The user application (task classes) begins execution. The R/E LED turns solid green.
- Runtime to Run – Automation Runtime transitions from RUN state to normal operation. The full X2X bus and POWERLINK networks are brought up.
The embedded bootloader is stored in internal flash on the CPU itself. It cannot be erased by CF card corruption. This is the safety net that allows recovery even when the CF card is completely destroyed.
2. What Happens When the CF Card Is Corrupted or Missing
CF Card Missing (No Card Inserted)
| Condition | Behavior |
|---|---|
| Switch in RUN | CPU enters BOOT mode from internal flash. The internal embedded firmware starts a limited runtime that allows online connections for firmware transfer. R/E LED = red, RDY/F LED = yellow. |
| Switch in BOOT | CPU enters BOOT mode normally (same as missing card in RUN). |
| Switch in DIAG | CPU enters DIAG mode from internal flash. |
The CPU does not become a brick when no CF card is present. The internal bootloader always fires and provides a minimal environment for recovery.
CF Card Corrupted
| Corruption Type | Behavior |
|---|---|
| Invalid partition table (partition count = 0) | CPU stays in BOOT mode. Automation Runtime cannot find a SYSTEM partition. |
| SYSTEM partition filesystem corruption | CPU may enter BOOT mode or, if Automation Runtime partially loads, may enter DIAG mode (Diagnostic). Automation Runtime has failed to boot correctly. |
| Missing or corrupted user application | CPU boots Automation Runtime successfully but enters SERVICE mode – no task classes are running. |
| Firmware/B&R component files corrupted | CPU may enter BOOT mode with error in the Logger. Automation Runtime fails to fully initialize. |
| RAW filesystem (unformatted) | CF LED may light green (card detected) but the CPU cannot read it. Stays in BOOT mode. |
Key Diagnostic: CF Card Recognition
- CF LED off – No CF card detected at all (physical seating issue, dead card).
- CF LED green – Card is detected and readable at the hardware level.
- CF LED yellow – Card is being read from or written to (normal during boot).
- CPU stays in BOOT mode after setting switch to RUN with CF card inserted – Strong indicator that CF card is not recognized, not formatted correctly (needs FAT16), or does not contain a valid operating system.
3. Bootloader Modes and Operating Mode Switch
The X20 CP1584 has a physical operating mode switch on the front panel:
Switch Positions
| Switch Position | Mode | Description |
|---|---|---|
| BOOT | Boot Mode | Starts “Boot AR” – the minimal embedded runtime. The online interface (Ethernet + RS-232) is initialized, allowing firmware download and initial installation via Automation Studio. No user application runs. User flash memory is erased only when the download begins. |
| RUN | Run Mode | Normal operation. CPU loads Automation Runtime from the CF card, initializes all bus systems and I/O modules, and starts the user application. If no valid CF card or runtime is found, falls back to BOOT behavior. |
| DIAG | Diagnostic Mode | CPU boots into diagnostic mode. Program sections in User RAM and User FlashPROM are not initialized. After diagnostic mode, the CPU always boots with a warm restart. Used for troubleshooting without affecting user program memory. |
Important: A switch position between BOOT, RUN, and DIAG is not permitted. The switch has detents at these three positions only.
Reset Button Behavior
The reset button is located below the USB interfaces on the bottom of the CPU housing. It can be pressed with a small pointed object (e.g., paperclip).
| Action | Result |
|---|---|
| Press < 2 seconds | Warm restart (reboot). The CPU restarts. |
| Press 2 – 5 seconds | Stops all application programs, sets all outputs to zero, and the PLC starts up in SERVICE mode by default. The startup mode that follows can be configured in Automation Studio. |
| Press > 5 seconds (or hold through a short-press reboot cycle) | On X20 Panel-based controllers: enters DIAGNOSTIC mode. On X20 CPUs: the behavior is similar – a full reset that stops all running programs. Some B&R documentation indicates holding through the initial reboot (< 2s pulse, then hold > 2s within 2 seconds) can force diagnostic entry. |
Note: Pressing Reset does not erase the program from CF card. It stops execution and reboots.
4. LED Indications During Boot Failure
Primary CPU Status LEDs (CP1484 / CP1584 / CP1585 / CP1586)
| LED | Color | State | Meaning |
|---|---|---|---|
| R/E | Green | On | Application running (normal RUN) |
| R/E | Green | Blinking | Boot mode – CPU is initializing application, all bus systems, and I/O modules. This can take several minutes. |
| R/E | Green | Double flash | Mode BOOT (during firmware update). |
| R/E | Red | On | SERVICE mode |
| R/E | Red | Blinking | License violation (R/E blinks red AND RDY/F blinks yellow) |
| RDY/F | Yellow | On | CPU is active in SERVICE or BOOT mode |
| RDY/F | Yellow | Blinking | License violation (with R/E red blink) |
| RDY/F | Red | On | Overtemperature shutdown (110°C CPU / 95°C board per B&R datasheet; error 9204 in logbook) |
| S/E | Green | On | POWERLINK/Ethernet link established |
| S/E | Green | Blinking | Ethernet activity |
| S/E | Red | On | System error (check logbook) |
| S/E | Red | Blinking | System stop with error code (see error codes below) |
| PLK | Green | On | POWERLINK link established |
| PLK | Green | Blinking | POWERLINK activity |
| ETH | Green | On | Ethernet link established |
| ETH | Green | Blinking | Ethernet activity |
| CF | Green | On | CompactFlash inserted and detected |
| CF | Yellow | On | CompactFlash read/write access |
| DC | Yellow | On | CPU power supply OK |
| DC | Red | On | Backup battery empty |
System Stop Error Codes (S/E LED Blinking Red)
The error code is indicated by the S/E LED blinking red. The pattern consists of 4 switch-on phases, each either short (150 ms) or long (600 ms), repeated every 2 seconds.
| Code Pattern | Error | Resolution |
|---|---|---|
| Short Short Short Long | RAM error | Device is defective and must be replaced. |
| Short Short Long Long | Hardware error | Device or a system component is defective and must be replaced. |
| Short Short Short Short | Not an error | Normal startup blinking (several red blinks immediately after power-on are normal). |
Power Supply LEDs
| LED | Color | State | Meaning |
|---|---|---|---|
| r (green) | Off | Module not supplied with power | |
| r (green) | Single flash | Mode RESET | |
| r (green) | Blinking | Mode PREOPERATIONAL | |
| r (green) | On | Mode RUN | |
| e (red) | Off | Everything OK | |
| e (red) | On | Error (single state) | |
| e (red) | Double flash | X2X Link overload, I/O supply too low, or input voltage too low | |
| e + r | Solid red + single green flash | Invalid firmware |
Interpreting Common Boot Failure LED Patterns
| LED Pattern | Diagnosis |
|---|---|
| R/E red ON, RDY/F yellow ON | SERVICE mode (program crashed, missing, or fault) |
| R/E green blinking (stuck) | BOOT mode – system initializing (could take minutes; if stuck, CF card issue) |
| R/E red blinking + RDY/F yellow blinking | License violation |
| CF LED OFF | CF card not detected (remove and re-seat, or replace card) |
| DC LED red | Backup battery empty (replace CR2477N battery) |
| S/E red blinking with code pattern | Hardware or RAM error (device may need replacement) |
| No LEDs at all | No power to module (check power supply and wiring) |
5. How to Enter Bootloader Mode on the CP1584
Method 1: Operating Mode Switch (Primary)
- Set the switch to BOOT – Slide the mode switch to the BOOT position.
- Power cycle – Power off the X20 system, wait 30 seconds, power back on.
- The CPU will start in BOOT mode. R/E LED = red, RDY/F LED = yellow.
- In BOOT mode, the embedded Boot AR runtime initializes the Ethernet and RS-232 interfaces, allowing you to connect for firmware download.
Method 2: Missing/Invalid CF Card with Switch in RUN
- Remove the CF card (or leave a corrupted card in place).
- Set switch to RUN.
- Power cycle – the CPU will fall back to BOOT mode since no valid runtime is found on the CF card.
- This gives you the same recovery environment as Method 1.
Method 3: Reset Button
- With the CPU running, press the reset button for less than 2 seconds to trigger a warm restart.
- Within 2 seconds of the restart, press and hold the reset button for more than 2 seconds (while R/E LED is red indicating reboot).
- This can force the CPU into diagnostic/reset mode, which also allows recovery operations.
Method 4: Software Stop Target
- Connect to the CPU via Automation Studio (Ethernet or serial).
- Use Online > Stop Target to halt the application.
- The CPU enters SERVICE mode. From here you can perform diagnostics and recovery.
6. Serial Console Access
Serial Port (IF1) Specifications
| Parameter | Value |
|---|---|
| Interface | RS-232 (non-isolated) |
| Connector | 12-pin terminal block (X20TB12) |
| Pinout | Power supply: GND, +24V I/O, +24V I/O, GND, +24V CP/X2X, +24V CP/X2X, I_r, S, (reserved). RS232: TX, RX, GND (bottom row, separate from power pins) |
| Max distance | 900 m (B&R rating; see note in cp1584-hardware-ref.md regarding standard RS232 limits) |
| Max baud rate | 115.2 kbit/s |
| Default baud rate | 57600 bps (factory default) |
| Default parity | Even |
| Data bits | 8 |
| Stop bits | 1 (8,E,1) |
| Flow control | None (hardware flow control not typically used) |
Connection Procedure
-
Wire RS-232 correctly:
PLC RX (Pin 5) <---> PC TX (Pin 3) PLC TX (Pin 3) <---> PC RX (Pin 2) PLC GND (Pin 7) <---> PC GND (Pin 5)Double-check the pin assignments on your specific terminal block. The X20TB12 pin numbering follows B&R conventions shown in the datasheet.
-
Configure terminal emulation software (e.g., PuTTY, Tera Term, HyperTerminal):
- Baud: 57600
- Parity: Even
- Data: 8 bit
- Stop: 1
- Flow: None
-
Open the serial connection. If using PVI Transfer Tool or Automation Studio, configure these same settings in the online connection settings.
-
The RS-232 LED on the power supply module will light yellow when data is being transmitted or received.
RS-232 Serial Interface — Important Notes
- The RS-232 interface is not electrically isolated from the PLC. Use caution with ground loops.
- In BOOT mode, the RS-232 interface is initialized and ready for communication – this is the fallback path when Ethernet is unavailable.
- If the default 57600 baud doesn’t work, try 9600 or 115200. The baud rate can be configured in the project’s serial interface settings (IF1) in Automation Studio. If someone changed it, you may need to cycle through baud rates.
- USB interfaces (IF4/IF5) on the X20 CPUs are USB 1.1 and are only for B&R-approved devices (dongles, approved USB storage). They cannot be used for serial communication with a PC.
7. Firmware Recovery via Serial (B&R Service Utility)
The B&R Service Utility is a firmware installation tool that can set the embedded firmware of a B&R PLC via serial connection. It is typically provided by B&R service and is not part of the standard Automation Studio distribution.
When Serial Recovery Is Needed
- The CF card is completely corrupted or missing.
- You have no way to connect via Ethernet (no IP address, unknown subnet, etc.).
- The embedded firmware itself needs to be reflashed (rare – this is the lowest-level firmware in the CPU’s internal flash).
Serial Recovery Procedure
- Obtain the B&R Service Utility and the appropriate firmware files from B&R support.
- Connect the RS-232 serial cable between your PC and the CPU’s IF1 terminal block.
- Set the CPU mode switch to BOOT.
- Power on the CPU.
- Launch the B&R Service Utility on your PC.
- Configure the serial port settings (57600, 8, E, 1).
- Select the firmware file(s) appropriate for your CPU model.
- Follow the utility’s prompts to begin the firmware transfer.
- After completion, the CPU should be able to boot from a properly prepared CF card.
Note: The B&R Service Utility and its firmware files are generally only available through B&R service/support channels, not through public download. Contact your local B&R support office if you need this tool.
8. TFTP Recovery Procedure
B&R X20 CPUs with the embedded Boot AR runtime in BOOT mode support firmware installation over the network. While B&R does not publicly document a “TFTP boot” command set in the same way consumer routers do, the recovery process uses the standard B&R online transfer mechanism which internally uses the B&R protocol (not raw TFTP).
Network-Based Firmware Installation (BOOT Mode)
This is the standard network recovery path:
-
Prepare the CPU:
- Set mode switch to BOOT.
- Power on the CPU. Wait for BOOT mode (R/E red, RDY/F yellow).
-
Establish Network Connectivity:
- Connect an Ethernet cable from the CPU’s IF2 (Ethernet port) to your PC or network switch.
- The CPU in BOOT mode may default to IP 0.0.0.0 until configured, or may have a previously configured IP.
- Set your PC’s Ethernet interface to the same subnet (e.g., 192.168.0.10).
- Optionally set the CPU’s IP via SNMP in Automation Studio’s Browse window, or use a DHCP server on the network.
-
Browse for the Target:
- Open Automation Studio.
- Go to Online > Settings.
- Click Browse targets – the CPU should appear in the list.
- Right-click the CPU and select Set IP parameters if needed.
-
Transfer Automation Runtime:
- In Automation Studio, go to Project > Services > Transfer Automation Runtime.
- Follow the wizard to select the target and transfer the runtime to the CF card.
- This formats the SYSTEM partition, installs Automation Runtime, and prepares the card.
-
Transfer Your Application:
- After Automation Runtime is installed, transfer your application project:
- Project > Transfer > Total (or configure individual transfer types).
What Happens Internally
The Boot AR runtime in the CPU listens on the configured network interface. Automation Studio connects using the B&R PVI (Process Visualization Interface) protocol, which internally manages file transfer. This is not a raw TFTP session but rather a proprietary B&R protocol running over TCP/IP.
9. USB-Based Recovery
X20 CPU USB Limitations
The USB interfaces (IF4 and IF5) on X20 CPUs are USB 1.1 host ports designed only for B&R-approved devices:
- B&R dongles (license keys)
- B&R-approved USB floppy drives
- B&R-approved USB mass storage (DiskOnKey)
The USB ports cannot be used for:
- Direct PC-to-PLC communication (online connection)
- Serial-over-USB communication
- Keyboard/mouse
USB Installation for Panel Controllers
For B&R Panel controllers with built-in HMI (e.g., PowerPanel, Panel PCs like the 4PPC70 series), USB installation is a supported recovery method:
- Format a USB stick as FAT32.
- In Automation Studio, go to Project > Project Installation > Offline Installation.
- Select USB as the target and generate the installation package.
- Insert the USB stick into the controller’s USB port.
- Set the mode switch to BOOT (press reset < 2s, then hold > 2s within 2 seconds).
- The installation should automatically execute.
Note: For the X20 CP1584 CPU (no built-in HMI display), USB installation may not be directly applicable in the same way. The primary recovery paths for X20 CPUs are: CF card (offline install to CF card reader), Ethernet online transfer, and RS-232 serial transfer.
USB CF Card Reader Method (Recommended for X20 CPUs)
Since X20 CPUs use removable CompactFlash, the standard “USB recovery” is:
- Remove the CF card from the CPU.
- Connect the CF card to your PC using a USB CF card reader.
- Use Automation Studio’s Offline Installation to write the CF card.
- Reinsert the CF card into the CPU and power on.
This is covered in detail in Section 11.
10. Runtime Utility Center for Firmware Operations
Overview
Runtime Utility Center (RUC) is part of the PVI Development Setup package, available for free download from B&R’s website under Software > Automation Runtime. It provides tools for creating, backing up, and restoring CompactFlash cards without needing an active PLC connection.
Key Functions
| Function | Description |
|---|---|
| Create CompactFlash (F9) | Generates a complete CF card image from a project/configuration, writing all necessary files to a CF card in a USB card reader. |
| Create Image (Backup) | Creates a sector-level backup (.img file) of an existing CF card to your PC. |
| Restore Image | Writes a previously backed-up image (.img) to a CF card. |
| PVI Transfer | Upload/download program modules between PC and a connected PLC. |
| Format/Partition | Prepares CF card with correct partition structure. |
Creating a CF Card with RUC
- Download and install PVI Development Setup from br-automation.com.
- Launch Runtime Utility Center from the Start menu.
- Insert a blank CF card into a USB card reader connected to your PC.
- Press F9 or use the menu to open Create CompactFlash.
- Click Select source and browse to your configuration/backup files.
- Select the CF card drive letter from the list.
- Click Create to generate the CF card.
- Wait for completion. The card will be formatted and populated with the required files.
Backing Up a CF Card
- Insert the source CF card into a USB card reader.
- Open Runtime Utility Center.
- Navigate to CF Card Tools.
- Select Create Image to save a backup (.img file) to your PC.
- Save with a descriptive name (e.g.,
CP1584_backup_2026-07-10.img).
Restoring a CF Card from Backup
- Insert a blank (or same-capacity/larger) CF card into the card reader.
- Open Runtime Utility Center.
- Navigate to CF Card Tools.
- Select Restore Image.
- Browse to your .img backup file.
- Confirm the restore operation.
Backup File Formats
RUC creates backup files named zp.1, zp.2, zp.3 etc. These are incremental sector images of the CF card. To restore, select the latest zp file.
CF Card Backup and Restore — Important Notes
- Always use a quality card reader. Many CF card issues during backup/restore are caused by cheap or faulty readers.
- For X20 CPUs, use B&R-approved CF cards (SLC type preferred): 5CFCRD series.
- The CF card must have a valid FAT16 partition for the CPU to recognize it.
- RUC may show “partitions = 0” if the card has no valid partition table or is in RAW format.
11. Automation Studio Offline Installation
The Offline Installation is the most common method for preparing a CF card for an X20 CPU. It does not require the CPU to be connected at all – you write the card on your PC.
Offline Installation Procedure
- Open your project in Automation Studio.
- Go to Project > Project Installation > Offline Installation (in some versions: Tools > Create CompactFlash or the wizard).
- Select the target:
- CompactFlash card – requires a CF card reader connected to your PC.
- USB stick – for controllers that support USB boot (Panel PCs).
- Configure the installation:
- Select the Automation Runtime version to install.
- Choose whether to create a USER partition for user files.
- Select any additional files to include.
- Click Create or Install.
- Automation Studio will:
- Format/prepare the CF card with correct partitions (SYSTEM partition formatted FAT16, then converted to the B&R raw filesystem for speed).
- Install the Automation Runtime operating system.
- Copy the application project files.
- Set up the transfer folder with installation instructions.
- Insert the CF card into the CPU.
- Power on with the mode switch in RUN.
- On first boot, the CPU performs the initial installation:
- The transfer folder contents are unpacked.
- SYSTEM partition is finalized.
- The CPU will reboot one or more times.
- After several minutes, it should enter RUN mode (R/E green solid).
CF Card Preparation Requirements
Before offline installation:
- Windows Disk Management: The CF card should have its partitions removed (show as “Unallocated”) or have a single primary FAT16/FAT32 partition.
- If the card shows as RAW: Delete the volume first in Disk Management (right-click > Delete Volume), then create a new primary partition.
- Run Automation Studio as Administrator: This ensures partition-level access to the CF card.
Troubleshooting Offline Installation
| Problem | Solution |
|---|---|
| “One or more partitions do not have assigned drive letters” | Format the card first in Disk Management (FAT16 or FAT32). |
| “Invalid partitioning data (partition count = 0)” | Card has no valid partition. Use Disk Management or diskpart to create one. |
| CPU doesn’t enter RUN after offline install | Check Logger on CF card (RPSHD folder). May need to update BIOS/MTCX on APC units. Verify the project was built successfully. |
| Card keeps reverting to RAW | Likely a faulty card reader. Try a different reader or a different CF card. |
12. Creating Recovery Media
What You Need
| Item | Details |
|---|---|
| CF card reader | USB CompactFlash card reader (quality brand recommended) |
| CF card | B&R SLC CF card (5CFCRD series). Minimum 512 MB recommended. |
| Automation Studio | Version matching your project (or newer, with migration). |
| PVI Development Setup | For Runtime Utility Center (backup/restore). |
| Project file | Your Automation Studio project (.apj) with the full configuration. |
| Automation Runtime installer | The AR version your project requires. |
Creating a Recovery CF Card (Full Method)
-
Obtain a new or known-good CF card of appropriate capacity.
-
Connect the CF card to your PC via card reader.
-
In Windows Disk Management, ensure the card has a clean partition layout:
diskpart select disk X (where X is the CF card disk number) clean create partition primary format fs=fat16 assign letter=ZWARNING: Double-check the disk number.
cleandestroys all data on the selected disk. -
Open Automation Studio and load your project.
-
Go to Project > Project Installation > Offline Installation.
-
Select the CF card as target.
-
Enable:
- Automation Runtime installation
- User partition creation (if needed)
- Any user files to pre-populate
-
Generate the installation.
-
Label the CF card with the project name, date, and AR version.
-
Store in a safe location as your recovery media.
Creating a Recovery Image (Backup Method)
- Take the working CF card from a running system.
- Back up using Runtime Utility Center Create Image.
- Save the .img file to your PC and external backup storage.
- To restore: Use RUC Restore Image to write to a new CF card.
Disk Image Method (Alternative)
If RUC is unavailable, use sector-level imaging:
-
Backup: Use a disk imaging tool (e.g.,
ddon Linux, Clonezilla, or Win32DiskImager) to create a raw image of the entire CF card:dd if=/dev/sdX of=cp1584_backup.img bs=4M status=progress -
Restore: Write the image back:
dd if=cp1584_backup.img of=/dev/sdX bs=4M status=progress
Warning: This creates a byte-for-byte clone. The destination card must be the same capacity or larger, and may need manual partition resizing if larger.
13. Safe Mode and Diagnostic Mode
Diagnostic Mode
Diagnostic mode is entered when:
- The mode switch is set to DIAG.
- The reset button is held for longer than 5 seconds (on some controller types).
In Diagnostic mode:
- Program sections in User RAM and User FlashPROM are not initialized.
- I/O modules are initialized and the bus system is checked.
- You can connect via Automation Studio to run diagnostics, inspect I/O states, and read the logbook.
- After leaving DIAG mode (power cycle or switch change), the CPU always performs a warm restart.
Service Mode
Service mode is entered when:
- The reset button is pressed for 2-5 seconds.
- The “Stop Target” command is sent from Automation Studio.
- A critical runtime error occurs (cycle time violation, page fault, divide by zero, etc.).
In Service mode:
- No task classes are running. The application program is halted.
- Outputs are set to zero (or their configured safe state).
- You can connect via Automation Studio to diagnose the fault.
- Check the Logger (Open > Logger in Automation Studio) for error codes.
- The Diagnostic buffer contains the fault information.
System Diagnostics Manager (SDM)
When Automation Runtime is running (or in SERVICE mode), the CPU runs a built-in web server for diagnostics:
- Connect your PC to the same network as the CPU.
- Open a web browser and navigate to
http://<CPU_IP>/sdm(default:http://10.0.0.220/sdmfor some configurations). - The SDM web interface shows:
- Hardware status
- Software components and versions
- Error and event log
- I/O module status
- Network diagnostics
Note: SDM may be disabled in some project configurations. Check the project’s Ethernet settings if you cannot reach the SDM page.
Safe Commissioning
B&R provides a SafeCommissioning mechanism for initial commissioning and recovery. This allows a controlled initial startup where the system can be verified before full operation:
- The SafeCommissioning configuration is stored in the SYSTEM partition.
- A backup of the modified SafeCommissioning file should be maintained separately from the SYSTEM partition.
Safety-Relevant Boot Behavior
- The CPU does not silently ignore faults during boot.
- Any unrecoverable error during boot causes the CPU to enter SERVICE or BOOT mode, not RUN mode.
- The logbook records all boot errors with timestamps and error codes.
14. Minimum Files Needed on CF Card for Boot
CF Card Partition Structure
A properly formatted B&R X20 CF card has (at minimum) a SYSTEM partition containing the Automation Runtime:
[SYSTEM Partition - B&R Raw Filesystem]
|-- Automation Runtime files
|-- System configuration
|-- Transfer folder (used during initial installation)
|-- Logger data (RPSHD folder)
|-- ...
[USER Partition - FAT16/FAT32] (optional)
|-- User application data
|-- Configuration files
|-- Backups
|-- ...
Minimum Requirements for Boot to RUN
- Valid partition table – At least one partition must exist.
- SYSTEM partition – Formatted with the B&R raw filesystem (created by Automation Studio during offline install).
- Automation Runtime files – The operating system components:
- B&R Automation Runtime kernel
- Required system libraries and drivers
- Hardware support packages (for the specific CPU model)
- System configuration – Network settings, I/O configuration, task class definitions.
- Application project – At minimum, a project with configured task classes (even if empty tasks). Without any application, the CPU may enter SERVICE mode rather than RUN mode.
What the Boot AR Internal Firmware Provides
Even with no CF card, the CPU’s internal flash contains enough firmware to:
- Initialize the Ethernet interface (limited functionality)
- Initialize the RS-232 serial interface
- Respond to network browsing from Automation Studio
- Enter BOOT mode for firmware download
- Display basic boot status via LEDs and serial console
CF Card Corruption Recovery: Decision Tree
When a CF card is suspected to be corrupted (PLC won’t boot to RUN, or keeps entering SERVICE mode), follow this decision tree:
PLC won't boot to RUN
|
|-- Are LEDs lit on power-up?
| |-- NO LEDs at all → Check 24V power supply to CPU
| |-- Only PWR LED → Internal firmware OK, CF card not being read
| | |-- Remove CF card → Clean contacts with isopropyl alcohol → reinsert
| | |-- Try known-good CF card → If boots → original card is faulty
| | `-- If still no boot with known-good card → CPU hardware fault
| |
| |-- RDY/F flashing rapidly → CF card is being read but system files are corrupt
| | |-- Check arlogsys.log via FTP (anonymous, C: partition may be partially readable)
| | |-- Image the CF card with dd for forensic analysis before any recovery attempt
| | |-- Restore from backup image → if works, card had logical corruption
| | `-- If backup fails → create new CF card via AS Offline Installation
| |
| |-- RDY/F solid red → SERVICE mode
| |-- Connect via AS and check Logger → identifies the specific error
| |-- If Logger shows "file system error" → CF card filesystem corruption
| |-- If Logger shows cycle time violation (144/145) → application bug, not CF issue
| `-- If Logger shows no error → may be retentive data corruption or battery issue
|
`-- CPU enters BOOT mode (RDY/F alternating red/green)
|-- Mode switch is in BOOT position → move to RUN
|-- CF card has only transfer folder (not yet installed) → normal for first-time install
`-- CF card is blank or unrecognizable → need fresh Offline Installation
Community-sourced tip (B&R Community Forum): If the files on the CF card are corrupt, the PLC will boot into Diagnostic mode and Automation Runtime won’t start. You can still access the CF card contents via FTP (anonymous, read-only to C: partition) to pull the arlogsys.log and diagnose what went wrong. On some AR versions, a partial boot allows limited SDM access even with corrupted files — try browsing to http://<PLC_IP>/sdm before removing the CF card.
CF Card Write Endurance and Failure Patterns
B&R-branded SLC (Single-Level Cell) CF cards have significantly higher write endurance than consumer MLC cards. However, they still have finite lifespan:
| Card Type | Write Endurance | Expected Life in PLC Service | Failure Mode |
|---|---|---|---|
| B&R SLC (5CFCRD series) | ~100,000 write cycles per block | 5-10 years typical | Gradual — bad blocks detected and remapped |
| Consumer MLC | ~3,000-10,000 cycles per block | 1-2 years (often less) | Sudden — card dies without warning |
| Consumer TLC | ~1,000-3,000 cycles per block | < 1 year | Sudden — unpredictable failure |
Failure progression pattern for B&R SLC cards:
- Phase 1: Increased boot time (filesystem wear leveling overhead)
- Phase 2: Occasional file write errors (logged in arlogsys.log)
- Phase 3: Files becoming unreadable (0-byte files, corrupted data)
- Phase 4: Complete card failure — CPU cannot read any partition
The CP1584 bootloader is designed to handle Phase 1-3 gracefully:
- In Phase 1-2, the PLC boots normally but may show slower startup
- In Phase 3, the PLC may enter Diagnostic mode or fall back to BOOT mode
- In Phase 4, the CPU enters BOOT mode and the system LED shows a solid pattern
- At this point the bootloader still accepts firmware via serial/TFTP, so the CPU itself is not bricked — only the CF card is dead
Detection: Monitor arlogsys.log for filesystem-related errors (error codes related to file I/O, bad sectors). If you see increasing filesystem errors over weeks/months, the CF card is approaching end of life. Replace it proactively — do not wait for complete failure.
Recommended Minimum CF Card Size
| Use Case | Minimum Size |
|---|---|
| Automation Runtime only (no user data) | 512 MB |
| Automation Runtime + typical application | 1 GB |
| Automation Runtime + application + user data + logs | 2 GB |
| Full installation with user partition | 4 GB |
Always use B&R SLC CF cards for reliability:
- 5CFCRD.0512-06 (512 MB)
- 5CFCRD.1024-06 (1 GB)
- 5CFCRD.2048-06 (2 GB)
- 5CFCRD.4096-06 (4 GB)
15. How to Unbrick a CP1584 That Won’t Boot
Diagnosis Flowchart
Power on CPU
|
+-- No LEDs at all?
| --> Check power supply (24VDC), wiring, fuse.
|
+-- CF LED off?
| --> Re-seat CF card. Try a known-good CF card.
| --> If still off, possible CF slot hardware failure.
|
+-- Stuck in BOOT mode (R/E red, RDY/F yellow)?
| --> CF card issue. Proceed to "CF Card Recovery" below.
|
+-- Stuck in SERVICE mode (R/E red)?
| --> Application issue. Connect via AS, check Logger.
|
+-- S/E red blinking with error code?
| --> Hardware error. May need CPU replacement.
|
+-- DC LED red?
--> Battery empty. Replace CR2477N battery.
Step-by-Step Unbrick Procedure
Phase 1: Quick Checks
- Check all LED states and document them before doing anything.
- Full power cycle: Power off, wait 30 seconds, power on.
- Check backup battery: Replace if DC LED is red. Use only Renata CR2477N.
- Re-seat the CF card: Remove it, inspect for damage/corrosion, reinsert firmly.
- Try a known-good CF card: If you have a spare, try it.
Phase 2: CF Card Recovery
If the CF card is suspected corrupted:
Option A: Recreate from Automation Studio (Preferred)
- Remove the CF card and connect it to your PC via card reader.
- Back up the card if possible (RUC Create Image or file copy).
- In Windows Disk Management, delete all partitions and create a single FAT16 primary partition.
- Use Automation Studio Offline Installation to write the CF card.
- Reinsert into CPU, power on with switch in RUN.
Option B: Total CF Card Replacement
- Obtain a new B&R CF card.
- Connect to PC via card reader.
- Format as FAT16 primary partition (via Disk Management or
diskpart). - Use Automation Studio Offline Installation.
- Insert and power on.
Option C: Restore from Backup Image
- If you have a backup .img or zp files, use RUC Restore Image.
- Write to a new CF card.
- Insert and power on.
Phase 3: Network Recovery (No Valid CF Card)
If you cannot prepare a CF card:
- Set mode switch to BOOT.
- Connect Ethernet cable directly from CPU to your PC.
- Set your PC’s IP to the same expected subnet.
- Open Automation Studio > Online > Settings > Browse.
- Find the CPU in the list (it appears in BOOT mode).
- Right-click > Set IP parameters if needed.
- Perform Transfer Automation Runtime (Project > Services > Transfer Automation Runtime).
- After AR is transferred to the CF card, perform Total Transfer of your project.
Phase 4: Serial Recovery (No Network)
If Ethernet is unavailable:
- Connect RS-232 cable from PC to CPU IF1 terminal block.
- Configure terminal: 57600, 8, E, 1, no flow control.
- Set mode switch to BOOT.
- Power on.
- In Automation Studio, configure a serial connection to the CPU.
- Transfer Automation Runtime and project via serial.
- Serial transfers are slow but reliable.
Phase 5: Hardware Failure
If none of the above works:
- Module swap test: Remove the CPU and test it in a different X20 rack/slot with a known-good power supply and CF card.
- Check for bent pins or corrosion on the backplane connectors.
- If S/E LED shows a RAM or Hardware error code (see Section 4), the CPU may be defective.
- Contact B&R support for RMA/repair.
Special Case: APC Panels (Automation PC)
For B&R Automation PCs (APC3100, APC910, etc.) that use CFast instead of CF:
- Check BIOS settings: Ensure “Realtime Environment” is enabled, “Hypervisor Environment” is disabled.
- Update BIOS and MTCX to the latest versions.
- Disable “Quick Boot” and “Quiet Boot” in BIOS to see boot messages.
- CFast cards can be prepared the same way as CF cards via Offline Installation.
- If the screen shows BIOS-level messages about SATA mass storage, the CFast card or BIOS may be the issue.
16. How to Reload the Entire System from Scratch
This procedure assumes you want to start from a completely blank state.
Prerequisites
- PC with Automation Studio installed
- CF card reader
- New or wiped CF card
- Your project file (.apj)
- Automation Runtime installer package (matching your project’s AR version)
Step-by-Step
1. Prepare the CF Card
diskpart
list disk
select disk X (your CF card -- double-check!)
clean
create partition primary
format fs=fat16
assign
exit
2. Create the Installation Media
- Open Automation Studio with your project loaded.
- Project > Project Installation > Offline Installation.
- Target: The CF card drive.
- Options:
- Install Automation Runtime: Yes
- Create USER partition: Yes (if you need persistent user data)
- Include user files: Point to any configuration files to pre-load
- SYSTEM partition size: Leave default (minimum ~488 MB)
- Click Create/Install.
- Wait for completion.
3. Install in the CPU
- Power off the X20 system.
- Insert the prepared CF card into the CPU.
- Set mode switch to RUN.
- Power on.
- The CPU will:
- Boot from the CF card
- Perform initial installation (unpack transfer folder)
- Reboot one or more times
- Transition through PREOPERATIONAL to RUN
- Watch the LEDs:
- R/E green blinking: Initializing (wait)
- R/E green solid: Application running (success)
- If stuck red/yellow: Something went wrong – check the CF card or use the Logger
4. Verify
- Connect via Automation Studio (Ethernet).
- Go to Online > Settings and verify the CPU appears and is in RUN mode.
- Check the Logger for any warnings or errors.
- Verify all I/O modules are detected and operating.
- Verify POWERLINK/Ethernet communication.
5. Configure Network (if needed)
If you need to change the IP address after installation:
- Open the project in Automation Studio.
- Navigate to the CPU’s Ethernet configuration.
- Set the desired IP address, subnet mask, and gateway.
- Enable SNMP for future diagnostics.
- Transfer the updated configuration (Project > Transfer > Configuration or Total).
17. Prevention and Best Practices
Backup Strategy
| What to Back Up | How | Frequency |
|---|---|---|
| Automation Studio project | Version control (Git) or file copies | Every change |
| CF card image | RUC Create Image or sector clone (.img) | After every successful commissioning |
| User data files | Copy from USER partition | Regularly |
| Logger data | Extract RPSHD folder from CF card | After fault events |
| Hardware configuration | Screenshot or export from AS | After changes |
CF Card Handling
- Never remove the CF card while the CPU is powered on.
- Use only B&R SLC CF cards (5CFCRD series) for industrial environments.
- Store spare CF cards in anti-static packaging.
- Replace CF cards every 3-5 years in harsh industrial environments (SLC cards have limited write cycles).
Battery Maintenance
- Replace the backup battery (CR2477N) every 4 years or whenever the DC LED shows red.
- Only use Renata CR2477N batteries. Other brands may present fire/explosion hazards.
- Replace within 1 minute if power is off to prevent data loss.
- The battery buffers: remanent variables, user RAM, system RAM, and the real-time clock.
Firmware and Software
- Keep Automation Studio and PVI updated to the latest stable version.
- Keep Automation Runtime at the version specified by your project.
- Test firmware upgrades on a spare CPU before deploying to production.
- Use B&R’s Update tool for firmware upgrades to ensure compatibility.
Power Quality
- Ensure proper 24VDC power conditioning.
- Verify power supply can handle the full load of the X20 system.
- Use slow-blow fuses (max 10A) as specified.
- Protect against power surges and voltage sags.
Network Configuration
- Always enable SNMP in the project for diagnostics.
- Document all IP addresses and network settings.
- Keep a record of the CPU’s station address (hex switches).
- Ensure your PC can reach the CPU’s default IP before making changes.
Key Findings
- The CP1584 cannot be bricked by CF card damage alone — the embedded bootloader in internal flash always provides a minimal recovery environment (Boot AR) with Ethernet and RS-232 access, even with no CF card inserted.
- Serial console defaults to 57600 baud, 8 data bits, even parity, 1 stop bit (8,E,1) on the IF1 RS-232 terminal block — this is your fallback path when Ethernet is unavailable, and the baud rate may have been changed from default by a prior configuration.
- BOOT mode vs. SERVICE mode are fundamentally different — BOOT mode means Automation Runtime failed to load from the CF card (firmware/OS issue); SERVICE mode means AR loaded successfully but the user application crashed or was stopped (application issue). The diagnostic approach for each is completely different.
- The operating mode switch (BOOT/RUN/DIAG) is the primary recovery control — set to BOOT, power cycle, and the CPU enters the minimal Boot AR runtime ready for firmware transfer via Ethernet or serial.
- CF card corruption is the most common failure cause — always re-seat the card first, then try a known-good spare before escalating to firmware reflash or hardware replacement. The CF LED being off immediately indicates a physical detection problem.
- Three recovery paths exist in priority order: (1) prepare a new CF card via Automation Studio Offline Installation, (2) network recovery via BOOT mode and Transfer Automation Runtime, (3) serial recovery at 57600 baud as last resort.
- USB ports on X20 CPUs cannot be used for PC communication or serial console — they are USB 1.1 host ports restricted to B&R-approved devices only; the serial-to-USB approach requires the RS-232 terminal block, not USB.
- Always image a CF card before any recovery attempt using Runtime Utility Center (Create Image) or sector-level
dd— the original card may contain the only copy of the safety configuration and application parameters.
18. Cross-References
| Related File | Relevance |
|---|---|
cf-card-boot.md | Detailed CF card partition structure, file types, boot stages, and imaging procedures |
firmware.md | B&R firmware architecture, memory layout, and firmware update mechanisms |
firmware-version-mgmt.md | Firmware version inventory, compatibility matrices, and update procedures without OEM access |
config-file-formats.md | Configuration file formats found on the CF card that control boot behavior |
access-recovery.md | Password recovery and admin access restoration when credentials are lost |
cp1584-hardware-ref.md | Physical switch settings, LED indicators, and connector pinouts for bootloader recovery |
ar-rtos.md | Automation Runtime OS internals relevant to understanding boot failures |
retentive-data.md | Battery-backed SRAM data preservation during recovery and cold restarts |
ftp-web-interface.md | FTP-based CF card access for backup before recovery attempts |
19. References
Official B&R Documentation
| Document | Source |
|---|---|
| X20 System User’s Manual | br-automation.com |
| X20CP148x Data Sheet | B&R Downloads |
| X20CP158x Data Sheet | B&R Downloads |
| PVI Development Setup | br-automation.com |
| Automation Runtime Downloads | br-automation.com |
| B&R Community Forum | community.br-automation.com |
Community and Third-Party References
| Resource | URL |
|---|---|
| B&R Community - Service Mode Diagnostics | community.br-automation.com/t/service-mode |
| B&R Community - Boot Mode Troubleshooting | community.br-automation.com/t/boot-mode |
| B&R Community - Offline Installation | community.br-automation.com/t/offline-installation |
| B&R Community - CF Card from Mapp Backup | community.br-automation.com/t/creating-cf |
| Johnson Controls - X20 CPU LED Reference | docs.johnsoncontrols.com |
Cross-References
| Related Document | Relevance |
|---|---|
| cf-card-boot.md | CF card file layout, partition structure, and boot sequence stages |
| firmware.md | Firmware architecture, AR components, and firmware update procedures |
| firmware-version-mgmt.md | Firmware version identification, downgrade paths, and compatibility |
| config-file-formats.md | Configuration files that the bootloader reads (ARConfig.ini, etc.) |
| access-recovery.md | Gaining access to BOOT mode when passwords are unknown |
| cp1584-hardware-ref.md | CP1584 hardware specs, mode switch, LED indicators, serial console pinout |
| first-60-minutes.md | Emergency recovery playbook for immediate response to boot failures |
| diagnostics-sdm.md | Using SDM to diagnose boot-related issues before resorting to bootloader recovery |
| license-mgmt.md | License reactivation after firmware reload or CF card replacement |
| remanufacturing.md | Migration planning when bootloader recovery is insufficient |
Revision History
| Date | Description |
|---|---|
| 2026-07-10 | Initial document – compiled from public sources and B&R documentation |