HardICE‎ > ‎Reference‎ > ‎Intel‎ > ‎

JTAG Instructions

Instruction Name Reference


 Name Description Microarchitecture
 PMENTER Enter probe mode after asserting R/S
 P4+
 PMNOW Enters Probe Mode without asserting R/S
 P6+
 PMEXIT
 Exit Probe mode P6+
 WRSUBPIR Writes to Probe Instruction Register
 P6+?
 READPDR* Read one of the PDR.
 P6+
   
   
   
   

P5 Microarchitecture

Pentium

IR Register Size: 13

Boundary Scan

EXTEST: 0x0
SAMPLE/PRELOAD: 0x1
IDCODE:0x2
RUNBIST: 0x7
BYPASS: 0x3FFF
HIGHZ: 0x3FFB

P6 Microarchitecture

Used in Pentium ProPentium IIPentium II XeonPentium III, and Pentium III Xeon microprocessors. 

this is one of the earliest. going through revisions up till the pentium 4. All p6's (and later) have Probe Mode.

the following functions were noted in some p6 debug code.

PMENTER: 0x2C
PMNOW: 0x2B
PMEND: 0x2F

Read/Write: 0x22
Write Register: 0x24
Read: 0x32

It was also noted that amd k5 has an "apparently identical" implementation. One difference being a write register at 0x23

Pentium Pro

IR Register Size: 6

Boundary Scan

EXTEST: 0x0
SAMPLE/PRELOAD: 0x1
IDCODE:0x2
CLAMP: 0x4
RUNBIST: 0x7
BYPASS: 0x3F
HIGHZ: 0x8

Pentium 2

IR Register Size: 6

Boundary Scan

EXTEST: 0x0
SAMPLE/PRELOAD: 0x1
IDCODE:0x2
CLAMP: 0x4
RUNBIST: 0x7
BYPASS: 0x3F
HIGHZ: 0x8

Pentium III

IR Register Size: 6

Boundary Scan

EXTEST: 0x0
SAMPLE/PRELOAD: 0x1
IDCODE:0x3
CLAMP: 0x4
RUNBIST: 0x7
BYPASS: 0x3F
HIGHZ: 0x8

Pentium M

It is likely that most of the p6 functionality is here.

Netburst Microarchitecture

Used in Pentium 4Pentium D, and some Xeon microprocessors. Commonly referred to as P7 although its internal name was P68 (P7 was used for Itanium). Later revisions were the first to feature Intel's x86-64 architecture.

A short lived architecture. However, it is believed much pioneering went into processor validation.

The following was "found": 

CRBUSGO - 0x09
BRKPTCTL A and B (micro breakpoints) - 0x11 and 0x12
READPDR 0 and 1- 0x15 and 0x16

Pentium 4

IR Register Size: 7

Boundary Scan

EXTEST: 0x0
SAMPLE/PRELOAD: 0x1
IDCODE:0x2
CLAMP: 0x4
RUNBIST: 0x7
HIGHZ:0x8
BYPASS: 0x7F

Debug

The following table describes the JTAG functionality on Netburst Architecture Processors. Most of the following table was first discovered in [ref here]. It is uncertain if any of these functions were available in the P6 line. It is very likely that many of these have implementations in previous processors, but not in whole as the "P4 Spec" defines. Most of this surely found its way into Intel's latest line.

CRBUSGOSerial Control Register BusP4 Spec.









CRBUSNOGOSerial Control Register BusP4 Spec.









CRPRELOADSerial Control Register BusP4 Spec.









CRBUSPOLLSerial Control Register BusP4 Spec.









CRCANCELSerial Control Register BusP4 Spec.









ARRAYFRZArray FreezeP4 Spec.









STALLREQStalls (Allocator and Front End)P4 Spec.









TSENCATThermal sensor controlP4 Spec.









TSENTHROTThermal sensor controlP4 Spec.









DATSERIALParallel Control Register Bus (DAT Mode)P4 Spec.









TESTMODEParallel Control Register Bus (DAT Mode)P4 Spec.









ISCANDATMODEParallel Control Register Bus (DAT Mode)P4 Spec.









STOPCLKStopClkP4 Spec.









STARTCLKStopClkP4 Spec.









ALLCLKENStopClkP4 Spec.









ALLCLKDISStopClkP4 Spec.









SCANOUTLOADScanout chain, snapshot modeP4 Spec.









SCANOUTSHIFTScanout chain, snapshot modeP4 Spec.









TESTMODEScanout chain, signature modeP4 Spec.









ISCANDATMODETscanP4 Spec.









TSCANTIMERTscanP4 Spec.









TSCANTscanP4 Spec.









TSCANSETUPTscanP4 Spec.









TSCANCREGTscanP4 Spec.









TSCANFNCNTRTscanP4 Spec.









IOTESTLOADIO Self-testP4 Spec.









IOTESTMODEIO Self-testP4 Spec.









BSCANREADIO Self-testP4 Spec.









BRKPTCTLAMicro-breakpoint mechanismP4 Spec.









BRKPTCTLBMicro-breakpoint mechanismP4 Spec.









PMENTERProbe ModeP4 Spec.









PMEXITProbe ModeP4 Spec.









PMNOWProbe ModeP4 Spec.









WRSUBPIRProbe ModeP4 Spec.









READPDR0Probe ModeP4 Spec.









READPDR1Probe ModeP4 Spec.









PMSETHIDProbe ModeP4 Spec.









PMCLRTHIDProbe ModeP4 Spec.









FUSECTLFuse ProgrammingP4 Spec.









FUSESHIFTFuse ProgrammingP4 Spec.









FUSECSRFuse ProgrammingP4 Spec.









FUSESSRFuse ProgrammingP4 Spec.









PHASEDSHIFTClock Comp ProgrammingP4 Spec.









LOCKSecure/Unsecure modesP4 Spec.









UNLOCKSecure/Unsecure modesP4 Spec.









TAPSTATUSStatus ReportingP4 Spec.









TAPSTATUSPRVTStatus ReportingP4 Spec.









VIEWPLLViewPLLP4 Spec.

Intel Xeon (Netburst-based)

IR Register Size: 7

Boundary Scan

EXTEST: 0x0
SAMPLE/PRELOAD: 0x1
IDCODE:0x2
RUNBIST: 0x7
HIGHZ:0x8
CLAMP: 0xC
BYPASS: 0x7F

Itantium Microarchitecture

Who the hell uses itaniums?

Intel Itanium

IR Register Size: 6

Boundary Scan

EXTEST: 0x0
SAMPLE/PRELOAD: 0x1
IDCODE:0x2
CLAMP: 0x4
RUNBIST: ?
HIGHZ:0x8
BYPASS: 0x3F

Intel Itanium Core

IR Register Size: 8

Boundary Scan

EXTEST: 0x0
SAMPLE/PRELOAD: 0x1
IDCODE:0x2
RUNBIST: 0x7
HIGHZ:0x8
CLAMP: 0xC
BYPASS: 0xFF

Core Microarchitecture

Rearchitected P6-based microarchitecture used in Core 2 and Xeon microprocessors, built on a 65 nm process.

Bonnell Microarchitecture

Atom

Nehalem Microarchitecture

Released 2008-11-17, built on a 45 nm process and used in the Core i7Core i5Core i3 microprocessors.

Sandy Bridge Microarchitecture

Released 2011-01-09, built on a 32 nm process and used in the Core i7Core i5Core i3 second generation microprocessors. Formerly called Gesher but renamed in 2007.[1]

References

Codenames, dates, etc

http://titancity.com/articles/intel.html
http://www.informit.com/articles/article.aspx?p=130978&seqNum=23
Comments