Trying to unbrick TEEMO

Support General Device Support
1

System Details

  • Device: TEEMO Asus Chromebox 3 CN65
  • OS: Unknown but maybe ChromeOS
  • Firmware Type: ChromeOS?
  • Firmware Version: Unknown
  • Internal storage type: SATA

Summary of the Issue

I picked up an ASUS Chromebox 3 CN65 (TEEMO). The only information I have from what the previous owner was doing was “Something went wrong during a bios flash, on power on the LED blinks once and turns off.”

Inside the unit, the RAM and SSD are present although the write-protect screw and CMOS battery are missing (the CMOS battery plastic is damaged, but we aren’t there yet lol).

When I connected the unit to power, the indicator light blinked red. I believe there were no other signs of life, but now I am unsure.

I proceeded with the “unbricking with SuzyQ” guide. It showed some positive signs during the process. I was able to get the ttyUSB to show up. I was able to extract the VPD.bin. However, the gbb_utility was unable to extract the HWID. I stole the HWID from another TEEMO I had laying around and built the shellball.

I was able to flash the stock firmware to the device using flashrom and it completed successfully.

Now, the device blinks red once, then loops blinking white once every five seconds or so. Pressing the recovery button has no effect. Pressing the power button shows the red light, then the white light loops again. The device does not seem to power down when I hold the power button.

I tried two different barrel power supplies, and one USB-C power supply, with no change. I also tried sticking a CMOS battery in the slot and holding it down, no change.

At first I thought it might be RAM training, but I let it sit for 12 minutes without any change.

Am I missing something? Should I try flashing again? Should I try flashing the UEFI firmware instead of stock? Or is this likely a hardware failure and I’m out of luck? I can’t find any information online about what the blinking white light means. Thanks!

I may try flashing again with a debug build of the UEFI firmware and see where we end up.

2

if the stock firmware (shellball image) doesn’t boot, it’s not a firmware issue

3

after flashing a debug build, I got some output from ttyUSB0 and ttyUSB2. nothing from ttyUSB1.

Trying to wrap my head around it but curious if this is a solvable issue rather than hardware failure. I see something about the NVME?

ttyUSB0:

user@debian:~/test$ sudo minicom -D /dev/ttyUSB0 -b 115200


Welcome to minicom 2.10

OPTIONS: I18n 
Port /dev/ttyUSB0, 14:15:08 [U]

Press CTRL-A Z for help on special keys

n]
[Image: RW, 0.5.350/cr50_v0.0.13913-1a35fa3b7 tpm2:v2.0.104-f5b6842 pinweaver:v]
[0.004074 Inits done]
strap pin readings: a1:2 a9:2 a6:0 a12:0
[0.006259 Valid strap: 0xa properties: 0x41]
[0.007808 init_jittery_clock_locking_optional: run level high, request to enabl]
[0.092758 init took 14858]
[0.094985 update_rollback_mask: bailing out at bit 2]
[0.097209 update_rollback_mask: bailing out at bit 3]
read_tpm_nvmem: object at 0x100a not found
[0.100799 Console unlock allowed]
[0.101776 tpm_rst_asserted]
read_tpm_nvmem: object at 0x1008 not found
[0.103424 load_ec_hash error: 0x1203]
[0.104385 FIPS power-up tests completed in 63885]       
[0.105388 FIPS module digest a4459b5bcbda8970...]        
[0.106418 Running in FIPS 140-2 approved mode]           
Console is enabled; type HELP for help.                  
> [0.112075 Rdd connect]                                 
[0.196186 EC RX only] 
[1.101730 AP UART off] 
[1.109344 Servo disconnect] 
[1.110271 EC on] 
[1.110904 CCD EXT enable] 
[1.111476 USB PHY B] 
[1.112487 CCD state: UARTEC USBEC] 
[1.239246 usb_reset, status 4801020] 
[1.361270 usb_reset, status 1020] 
[1.482837 SETAD 0x0f (15)] 
[3.102535 AP off] 
n] 
[Image: RW, 0.5.350/cr50_v0.0.13913-1a35fa3b7 tpm2:v2.0.104-f5b6842 pinweaver:v]
[0.004081 Inits done] 
strap pin readings: a1:2 a9:2 a6:0 a12:0 
[0.006267 Valid strap: 0xa properties: 0x41] 
[0.007808 init_jittery_clock_locking_optional: run level high, request to enabl]
[0.092750 init took 14843] 
[0.094982 update_rollback_mask: bailing out at bit 2] 
[0.097209 update_rollback_mask: bailing out at bit 3] 
read_tpm_nvmem: object at 0x100a not found 
[0.100811 Console unlock allowed] 
[0.101791 tpm_rst_asserted] 
read_tpm_nvmem: object at 0x1008 not found 
[0.103443 load_ec_hash error: 0x1203] 
[0.104408 FIPS power-up tests completed in 63904] 
[0.105415 FIPS module digest a4459b5bcbda8970...] 
[0.106441 Running in FIPS 140-2 approved mode] 
Console is enabled; type HELP for help. 
> [0.112075 Rdd connect] 
[0.195636 EC RX only]                                    
[1.101760 AP UART off]                                   
[1.109378 Servo disconnect]                              
[1.110290 EC on]                                         
[1.110942 CCD EXT enable]                                
[1.111507 USB PHY B] 
[1.112510 CCD state: UARTEC USBEC] 
[1.240314 usb_reset, status 4801020] 
[1.362236 usb_reset, status 1020] 
[1.483802 SETAD 0x10 (16)] 
[3.102561 AP off] 
[33.299812 power button pressed] 
[33.836467 AP UART on] 
[39.236930 power button pressed] 
[39.362335 AP UART off] 
[39.813510 AP UART on] 
n] 
[Image: RW, 0.5.350/cr50_v0.0.13913-1a35fa3b7 tpm2:v2.0.104-f5b6842 pinweaver:v]
[0.004074 Inits done] 
strap pin readings: a1:2 a9:2 a6:0 a12:0 
[0.006263 Valid strap: 0xa properties: 0x41] 
[0.007801 init_jittery_clock_locking_optional: run level high, request to enabl]
[0.092750 init took 14828] 
[0.094989 update_rollback_mask: bailing out at bit 2] 
[0.097213 update_rollback_mask: bailing out at bit 3] 
read_tpm_nvmem: object at 0x100a not found 
[0.100975 Console unlock allowed] 
[0.101959 tpm_rst_asserted] 
read_tpm_nvmem: object at 0x1008 not found 
[0.103603 load_ec_hash error: 0x1203] 
[0.104568 FIPS power-up tests completed in 63922]        
[0.105670 FIPS module digest a4459b5bcbda8970...]        
[0.106601 Running in FIPS 140-2 approved mode]           
Console is enabled; type HELP for help.                  
> [0.112350 Rdd connect]                                 
[0.196353 EC RX only] 
[1.101924 AP UART off] 
[1.109516 Servo disconnect] 
[1.110431 EC on] 
[1.111080 CCD EXT enable] 
[1.111648 USB PHY B] 
[1.112651 CCD state: UARTEC USBEC] 
[1.239852 usb_reset, status 4801020] 
[1.361850 usb_reset, status 1020] 
[1.483356 SETAD 0x11 (17)] 
[3.102699 AP off] 
 
 
--- UART initialized after reboot --- 
[Reset cause: power-on] 
[Image: RW, 0.5.350/cr50_v0.0.13913-1a35fa3b7 tpm2:v2.0.104-f5b6842 pinweaver:v]
[0.004077 Inits done] 
strap pin readings: a1:2 a9:2 a6:0 a12:0 
[0.006263 Valid strap: 0xa properties: 0x41] 
[0.007808 init_jittery_clock_locking_optional: run level high, request to enabl]
[0.092758 init took 14854] 
[0.094993 update_rollback_mask: bailing out at bit 2] 
[0.096881 update_rollback_mask: bailing out at bit 3] 
read_tpm_nvmem: object at 0x100a not found 
[0.100738 Console unlock allowed] 
[0.101707 tpm_rst_asserted] 
read_tpm_nvmem: object at 0x1008 not found 
[0.103351 load_ec_hash error: 0x1203] 
[0.104316 FIPS power-up tests completed in 63893] 
[0.105323 FIPS module digest a4459b5bcbda8970...] 
[0.106349 Running in FIPS 140-2 approved mode]          
Console is enabled; type HELP for help.                 
> [0.112007 Rdd connect]                                
[0.195571 EC RX only]                                   
[1.101676 AP UART off]                                  
[1.109287 Servo disconnect] 
[1.110210 EC on] 
[1.110855 CCD EXT enable] 
[1.111419 USB PHY B] 
[1.112426 CCD state: UARTEC USBEC] 
[1.239624 usb_reset, status 4801020] 
[1.361576 usb_reset, status 1020] 
[1.483100 SETAD 0x12 (18)] 
[3.102481 AP off] 
[24.551265 power button pressed] 
[25.083461 AP UART on]

ttyusb2:

user@debian:~/test$ sudo minicom -D /dev/ttyUSB2 -b 115200


Welcome to minicom 2.10

OPTIONS: I18n 
Port /dev/ttyUSB2, 14:19:06 [U]

Press CTRL-A Z for help on special keys
                                                        
[0.935201 hash done 1599338bc1357432819c4d31e993e98e044312828a109c9e8a6aafe37b6]
C0 st34                                                 
C0 st35                                                 
C0 HARD RST TX                                          
C0 st4
C0 st5
[0.969311 hash done 1599338bc1357432819c4d31e993e98e044312828a109c9e8a6aafe37b6]
C0 st34
C0 st35
C0 HARD RST TX
C0 st4
C0 st5
[3.789453 power button pressed]
[3.789803 cold reset]

 
--- UART initialized after reboot --- 
[Reset cause: soft] 
[Image: RO, fizz_v1.1.7839-96640173e 2018-04-05 23:45:42 @build22-m2.golo.chrom]
[0.032406 init buttons] 
Restarting system with PMIC. 
 
 
--- UART initialized after reboot --- 
[Reset cause: reset-pin] 
[Image: RO, fizz_v1.1.7839-96640173e 2018-04-05 23:45:42 @build22-m2.golo.chrom]
[0.001039 init buttons] 
[0.001261 VB Main] 
[0.007510 VB HW-WP not asserted.] 
[0.007758 VB request_power] 
[0.007974 Inits done] 
[0.019619 SW 0x07] 
[0.020691 hash start 0x00040000 0x00020000] 
[0.021458 Power source is p1 (BJ)] 
[0.021961 CBI Reading board info] 
[0.023834 Board Version: 0x0301] 
[0.024441 Setting fan RPM to 5600] 
[0.024787 PB init-on] 
[0.032682 PD comm enabled] 
[0.033197 PB task 8 = init-on] 
[0.033554 PB task 8 = init-on, wait 41464] 
[0.037195 TCPC p0 init ready] 
[0.037489 TCPC p0 VID:0x1da0 PID:0x8751 DID:0x1 FWV:0x37] 
C0 st2 
C0 st3 
Console is enabled; type HELP for help. 
> [0.066347 hostcmd init 0x0000000000000000] 
[0.066879 power state 0 = G3, in 0x0020] 
[0.067297 power state 4 = G3->S5, in 0x0020] 
[0.067731 Not enough power to boot: chg=-1 pwr=0] 
[0.076660 PB task 8 = init-on] 
[0.076993 PB PCH pwrbtn=LOW] 
[0.077278 PB task 9 = recovery, wait 199995] 
[0.079152 New charger p1] 
[0.079506 CL: p1 s3 i3330 v19500] 
[0.081279 Setting fan RPM to 2800] 
C0 st5 
[0.277837 PB task 9 = recovery] 
[0.278196 PB PCH pwrbtn=HIGH] 
[0.278511 PB task 7 = eat-release, wait -1] 
[0.326023 PMIC init done] 
[0.326362 power state 1 = S5, in 0x0028] 
[0.327833 power state 1 = S5, in 0x0029] 
[0.341097 power state 1 = S5, in 0x0039] 
[0.351671 Pass through GPIO_RSMRST_L_PGOOD: 1] 
[0.353522 power state 1 = S5, in 0x003f] 
[0.353956 power state 5 = S5->S3, in 0x003f] 
[0.354411 Cleared AP_OFF flag] 
[0.354979 PD:S5->S3] 
[0.355690 power state 2 = S3, in 0x003f] 
[0.356125 power state 6 = S3->S0, in 0x003f] 
[0.357057 PD:S3->S0] 
[0.357812 power state 3 = S0, in 0x003f] 
[0.503634 power state 3 = S0, in 0x0039] 
[0.504122 power state 7 = S0->S3, in 0x0039] 
[0.504926 PD:S0->S3] 
[0.505691 power state 2 = S3, in 0x0039] 
[0.506158 power state 8 = S3->S5, in 0x0039] 
[0.506616 Set AP_OFF flag] 
[0.506948 HC Suppressed: 0x97=0 0x98=0 0x115=0] 
[0.527429 PD:S3->S5] 
[0.528207 power state 1 = S5, in 0x0039] 
C0 st33 
C0 st34 
C0 st35 
C0 HARD RST TX 
C0 st4 
[0.991738 hash done 1599338bc1357432819c4d31e993e98e044312828a109c9e8a6aafe37b6]
[1.087956 Setting fan RPM to 2800] 
C0 st34 
C0 st35 
C0 HARD RST TX 
C0 st4 
C0 st5 
[4.737875 power state 1 = S5, in 0x003f] 
[4.738369 power state 5 = S5->S3, in 0x003f] 
[4.738828 Cleared AP_OFF flag] 
[4.739403 PD:S5->S3] 
[4.739994 power state 2 = S3, in 0x003f] 
[4.740595 power state 6 = S3->S0, in 0x003f] 
[4.741480 PD:S3->S0] 
[4.742225 power state 3 = S0, in 0x003f] 
[4.887799 power state 3 = S0, in 0x0039] 
[4.888292 power state 7 = S0->S3, in 0x0039] 
[4.889098 PD:S0->S3] 
[4.889869 power state 2 = S3, in 0x0039] 
[4.890340 power state 8 = S3->S5, in 0x0039] 
[4.890803 Set AP_OFF flag] 
[4.891140 HC Suppressed: 0x97=0 0x98=0 0x115=0] 
[4.911601 PD:S3->S5] 
[4.912308 power state 1 = S5, in 0x0039] 
[5.114163 Setting fan RPM to 2800] 
[5.568436 power button released] 
[5.568796 buttons: 0] 
[5.569097 event set 0x0000000004000000] 
[5.569534 PB ignoring release] 
[5.577219 SW 0x05] 
[9.040828 power button pressed] 
[9.041178 cold reset] 
 
 
--- UART initialized after reboot --- 
[Reset cause: soft] 
[Image: RO, fizz_v1.1.7839-96640173e 2018-04-05 23:45:42 @build22-m2.golo.chrom]
[0.032374 init buttons] 
Restarting system with PMIC. 
 
 
--- UART initialized after reboot --- 
[Reset cause: reset-pin] 
[Image: RO, fizz_v1.1.7839-96640173e 2018-04-05 23:45:42 @build22-m2.golo.chrom]
[0.001022 init buttons] 
[0.001227 VB Main] 
[0.007461 VB HW-WP not asserted.] 
[0.007709 VB request_power] 
[0.007941 Inits done] 
[0.019553 SW 0x07] 
[0.020651 hash start 0x00040000 0x00020000] 
[0.021419 Power source is p1 (BJ)] 
[0.021921 CBI Reading board info] 
[0.023747 Board Version: 0x0301] 
[0.024356 Setting fan RPM to 5600] 
[0.024702 PB init-on] 
[0.032597 PD comm enabled] 
[0.033111 PB task 8 = init-on] 
[0.033468 PB task 8 = init-on, wait 41550] 
[0.037021 TCPC p0 init ready] 
[0.037315 TCPC p0 VID:0x1da0 PID:0x8751 DID:0x1 FWV:0x37] 
C0 st2 
C0 st3 
Console is enabled; type HELP for help. 
> [0.066569 hostcmd init 0x0000000000000000] 
[0.067101 power state 0 = G3, in 0x0020] 
[0.067519 power state 4 = G3->S5, in 0x0020] 
[0.067953 Not enough power to boot: chg=-1 pwr=0] 
[0.076633 PB task 8 = init-on] 
[0.076966 PB PCH pwrbtn=LOW] 
[0.077251 PB task 9 = recovery, wait 199995] 
[0.079372 New charger p1] 
[0.079725 CL: p1 s3 i3330 v19500] 
[0.081505 Setting fan RPM to 2800] 
C0 st5 
[0.277835 PB task 9 = recovery] 
[0.278196 PB PCH pwrbtn=HIGH] 
[0.278512 PB task 7 = eat-release, wait -1] 
[0.325448 PMIC init done] 
[0.325788 power state 1 = S5, in 0x0028] 
[0.327257 power state 1 = S5, in 0x0029] 
[0.340535 power state 1 = S5, in 0x0039] 
[0.351146 Pass through GPIO_RSMRST_L_PGOOD: 1] 
[0.352958 power state 1 = S5, in 0x003f] 
[0.353420 power state 5 = S5->S3, in 0x003f] 
[0.353874 Cleared AP_OFF flag] 
[0.354414 PD:S5->S3] 
[0.355152 power state 2 = S3, in 0x003f] 
[0.355585 power state 6 = S3->S0, in 0x003f] 
[0.356454 PD:S3->S0] 
[0.357194 power state 3 = S0, in 0x003f] 
[0.502766 power state 3 = S0, in 0x0039] 
[0.503255 power state 7 = S0->S3, in 0x0039] 
[0.504063 PD:S0->S3] 
[0.504808 power state 2 = S3, in 0x0039] 
[0.505247 power state 8 = S3->S5, in 0x0039] 
[0.505734 Set AP_OFF flag] 
[0.506067 HC Suppressed: 0x97=0 0x98=0 0x115=0] 
[0.526569 PD:S3->S5] 
[0.527340 power state 1 = S5, in 0x0039] 
C0 st33 
C0 st34 
C0 st35 
C0 HARD RST TX 
C0 st4 
[0.992202 hash done 1599338bc1357432819c4d31e993e98e044312828a109c9e8a6aafe37b6]
[1.088241 Setting fan RPM to 2800] 
C0 st34 
C0 st35 
C0 HARD RST TX 
C0 st4 
C0 st5 
[2.859217 power button released] 
[2.859577 buttons: 0] 
[2.859877 event set 0x0000000004000000] 
[2.860313 PB ignoring release] 
[2.868528 SW 0x05] 
[4.735463 power state 1 = S5, in 0x003f] 
[4.735956 power state 5 = S5->S3, in 0x003f] 
[4.736416 Cleared AP_OFF flag] 
[4.737001 PD:S5->S3] 
[4.737593 power state 2 = S3, in 0x003f] 
[4.738193 power state 6 = S3->S0, in 0x003f] 
[4.739067 PD:S3->S0] 
[4.739813 power state 3 = S0, in 0x003f] 
[4.885393 power state 3 = S0, in 0x0039] 
[4.885888 power state 7 = S0->S3, in 0x0039] 
[4.886695 PD:S0->S3] 
[4.887466 power state 2 = S3, in 0x0039] 
[4.887938 power state 8 = S3->S5, in 0x0039] 
[4.888401 Set AP_OFF flag] 
[4.888739 HC Suppressed: 0x97=0 0x98=0 0x115=0] 
[4.909194 PD:S3->S5] 
[4.909901 power state 1 = S5, in 0x0039] 
[5.111824 Setting fan RPM to 2800] 
[9.120289 power state 1 = S5, in 0x003f] 
[9.120784 power state 5 = S5->S3, in 0x003f] 
[9.121243 Cleared AP_OFF flag] 
[9.121829 PD:S5->S3] 
[9.122585 power state 2 = S3, in 0x003f] 
[9.123024 power state 6 = S3->S0, in 0x003f] 
[9.123898 PD:S3->S0] 
[9.124657 power state 3 = S0, in 0x003f] 
[9.270207 power state 3 = S0, in 0x0039] 
[9.270702 power state 7 = S0->S3, in 0x0039] 
[9.271509 PD:S0->S3] 
[9.272318 power state 2 = S3, in 0x0039] 
[9.272762 power state 8 = S3->S5, in 0x0039] 
[9.273254 Set AP_OFF flag] 
[9.273563 HC Suppressed: 0x97=0 0x98=0 0x115=0] 
[9.294014 PD:S3->S5] 
[9.294732 power state 1 = S5, in 0x0039] 
[10.119248 Setting fan RPM to 2800] 
[13.505153 power state 1 = S5, in 0x003f] 
[13.505657 power state 5 = S5->S3, in 0x003f] 
[13.506125 Cleared AP_OFF flag] 
[13.506718 PD:S5->S3] 
[13.507491 power state 2 = S3, in 0x003f] 
[13.507968 power state 6 = S3->S0, in 0x003f] 
[13.508852 PD:S3->S0] 
[13.509607 power state 3 = S0, in 0x003f] 
[13.655042 power state 3 = S0, in 0x0039] 
[13.655544 power state 7 = S0->S3, in 0x0039] 
[13.656348 PD:S0->S3] 
[13.657129 power state 2 = S3, in 0x0039] 
[13.657611 power state 8 = S3->S5, in 0x0039] 
[13.658112 Set AP_OFF flag] 
[13.658458 HC Suppressed: 0x97=0 0x98=0 0x115=0] 
[13.679456 PD:S3->S5] 
[13.680182 power state 1 = S5, in 0x0039] 
[14.125285 Setting fan RPM to 2800] 
[17.890389 power state 1 = S5, in 0x003f] 
[17.890891 power state 5 = S5->S3, in 0x003f] 
[17.891360 Cleared AP_OFF flag] 
[17.891944 PD:S5->S3] 
[17.892697 power state 2 = S3, in 0x003f] 
[17.893145 power state 6 = S3->S0, in 0x003f] 
[17.894068 PD:S3->S0] 
[17.894834 power state 3 = S0, in 0x003f] 
[18.040301 power state 3 = S0, in 0x0039] 
[18.040804 power state 7 = S0->S3, in 0x0039] 
[18.041648 PD:S0->S3] 
[18.042418 power state 2 = S3, in 0x0039] 
[18.042871 power state 8 = S3->S5, in 0x0039] 
[18.043371 Set AP_OFF flag] 
[18.043717 HC Suppressed: 0x97=0 0x98=0 0x115=0] 
[18.064710 PD:S3->S5] 
[18.065437 power state 1 = S5, in 0x0039] 
[18.131449 Setting fan RPM to 2800] 
[22.276341 power state 1 = S5, in 0x003f] 
[22.276843 power state 5 = S5->S3, in 0x003f] 
[22.277311 Cleared AP_OFF flag] 
[22.277894 PD:S5->S3] 
[22.278643 power state 2 = S3, in 0x003f] 
[22.279090 power state 6 = S3->S0, in 0x003f] 
[22.279999 PD:S3->S0] 
[22.280774 power state 3 = S0, in 0x003f] 
[22.426303 power state 3 = S0, in 0x0039] 
[22.426806 power state 7 = S0->S3, in 0x0039] 
[22.427652 PD:S0->S3] 
[22.428423 power state 2 = S3, in 0x0039] 
[22.428876 power state 8 = S3->S5, in 0x0039] 
[22.429376 Set AP_OFF flag] 
[22.429723 HC Suppressed: 0x97=0 0x98=0 0x115=0] 
[22.450716 PD:S3->S5] 
[22.451432 power state 1 = S5, in 0x0039] 
[23.138617 Setting fan RPM to 2800] 
[26.663688 power state 1 = S5, in 0x003f] 
[26.664191 power state 5 = S5->S3, in 0x003f] 
[26.664659 Cleared AP_OFF flag]                          
[26.665243 PD:S5->S3]                                    
[26.665996 power state 2 = S3, in 0x003f]                
[26.666444 power state 6 = S3->S0, in 0x003f]            
[26.667358 PD:S3->S0]                                    
[26.668110 power state 3 = S0, in 0x003f] 
[26.813658 power state 3 = S0, in 0x0039] 
[26.814160 power state 7 = S0->S3, in 0x0039] 
[26.814966 PD:S0->S3] 
[26.815734 power state 2 = S3, in 0x0039] 
[26.816215 power state 8 = S3->S5, in 0x0039] 
[26.816716 Set AP_OFF flag] 
[26.817063 HC Suppressed: 0x97=0 0x98=0 0x115=0] 
[26.838070 PD:S3->S5] 
[26.838797 power state 1 = S5, in 0x0039] 
[27.144935 Setting fan RPM to 2800] 
[30.464278 power state 1 = S5, in 0x00C0 st34 
C0 st35 
C0 HARD RST TX 
C0 st4 
C0 st5
4

if you’re not getting any output on ttyUSB1, then coreboot is never running / the CPU isn’t getting released from reset. nothing in the logs gives an indication as to why though