Kermit
Jump to navigation
Jump to search
The PS Vita main SoC, nicknamed Kermit, is manufactured by Toshiba. The design is a stacked SoC with the SDRAM found in the same chip as the processor cores. Toshiba details their "Stacked Chip SOC" on their site.
More information can be found at Chipworks.
According to the internal photos found in the FCC filings, it appears that an earlier version of the chip is labeled T9ML7MBG-S. This does not appear to be a standard model and is likely custom designed in partnership with Sony Computer Entertainment Japan. It is possible that Sony used this service from Toshiba in their design process which is why the prototype demonstrated in the FCC filing shows a Toshiba chip.
Variants
There are multiple known variants of Kermit. SoC revision is readable from a ScePervasiveMisc register.
The following table is split in two depending on the Kermit version (1.0 or 1.5). X and Y from the ESX.Y column corresponds to the values in the revision0 register (0x000000XY).
| Engineering Sample revision | SoC model number | Unit model number or motherboard | Notes |
|---|---|---|---|
| Kermit 1.0 | |||
| ES1 | ??? | DEM revision before DEM-3000G | CPU is Cortex-A8, GPU is SGX541MP, ?no CDRAM?. Has two minor revisions: ES1.0 and ES1.1. |
| ES2 | ??? | DEM-3000G? to DEM-3000H? | CPU is Cortex-A9, GPU is SGX543MP4+. Has only one minor revision: ES2.0. Has 2 banks of LPDDR2. |
| ES3 | ??? | ?DEM-3000JEC, some DEM-3000K/J? | Has three minor revisions: ES3.0, ES3.1 and ES3.2. Has 2 or 4 banks of LPDDR2. |
| ES4.0 | ??? | ? | Known to exist from strings in a debugging second_loader.bin dated 2011/05/24.
|
| ?ES4.2? | T9ML7MBG-S | CEM-3000VD1 (IRS-002 (0-845-846-U8MU) 2011-07 (week 30)) | PCH-1001 FCC certification and PCH-1101 FCC certification units use this chip. |
| ES4.2 | CXD5315GG | IRS-002, DOL-1001 (1-888-648-11, 1-888-648-21), DOL-1002 (1-893-481-11) | © 2011 marking - No Debug Bus hardware. Has 2 banks of 256MiB LPDDR2. |
| ES4.2 | CXD5315GG-1 | IRT-002 | © 2011 marking - Has additional hardware on Debug Bus. Has 4 banks of 256MiB LPDDR2 ?1.5GiB LPDDR2?. |
| Kermit 1.5 | |||
| ES1.5 | CXD5316GG | IRS-1001, USS-1001, DOL-1002 (1-893-481-21) | © 2012 marking - Unit used for PCH-2001 FCC certification has this chip. Has 2 banks of 256MiB LPDDR2. |
| ES1.5? | CXD5316BGG | USS-1002 | © 2014 marking. Has 1 bank of 512MiB LPDDR2. |
Errata
| Erratum code | Present on | Fixed on | Description |
|---|---|---|---|
| 93 | Kermit ES1 | Kermit ES2 | The SDIO bus must not be set to High Speed due to a silicon bug. |
Schema
This is for DevKit. Retail and TestKit are different:
- The DevKit carries 1 GiB of LPDDR2 DRAM (usually referred to as the "main memory"). The retail unit and TestKit carry 512 MiB of LPDDR2 DRAM.
More detailed bus layout information can be found in debug version of SceKernelBusError. The interconnect registers can also be poked to gather more information.
Thanks to these sources, the following detailed bus diagram has been reconstructed:
CPU
See Main_Processor.
GPU
See SGX543.
LPDDR2 DRAM (main memory)
- The retail unit and TestKit carry 512 MiB of LPDDR2 DRAM.
- The DevKit carries 1 GiB of LPDDR2 DRAM (usually referred to as the "main memory").
Trace Memory
The DevKit mounts 512 MiB of LPDDR2 DRAM for performance analysis.
This memory is for storing performance measurement data referred by a performance analyzer (Razor for PlayStation®Vita) or runtime libraries.
Custom DRAM
The DevKit carries 128 MiB of custom DRAM (usually referred to as the "video memory"). ?Retail/TesKit too?
Codec Engine
Codec Engine is a media processor configured with multiple cores. Only the specific processing of the specific libraries is processed through Codec Engine instead of CPU.
Other Key Units and Bus Configuration
As other key units, the custom SoC includes the features below:
- Direct Memory Access Controllers (DMAC)
- AVC Decoder
- A video out interface
- Misc input/outputs interface etc.
Pinout
The pinout is mostly reversed from the PCB delayer and is based off of PCH-1XXX on the IRS-002 board. It may not include some pins only used in other PS Vita models.
UART
See UART Console for pinout and UART Registers for programming.
| Name | Pin | Description |
|---|---|---|
| CTS0 | D12 | UART0 clear to send |
| RTS0 | B12 | UART0 request to send |
| TX0 | B10 | UART0 transmit |
| RX0 | B11 | UART0 receive |
| RTS5 | E17 | UART5 request to send |
| CTS5 | B17 | UART5 clear to send |
| RX5 | D17 | UART5 receive |
| TX5 | A17 | UART5 transmit |
USB
See EHCI.
| Name | Pin | Description |
|---|---|---|
| D+ 3G | AD24 | 3G modem USB D+ (host EHCI) |
| D- 3G | AD25 | 3G modem USB D (host EHCI) |
| D+ Acc | AD27 | Accessory port USB D+ (host EHCI) |
| D- Acc | AD28 | Accessory port USB D (host EHCI) |
| D+ UDC | AA30 | Multiconnector USB D+ (client, OTG maybe supported) |
| D- UDC | AB30 | Multiconnector USB D (client, OTG maybe supported) |
| USB VBUS | AA29 | Also goes to SN99057 |
SDIO
See SceSdif.
| Name | Pin | Description |
|---|---|---|
| CLK 0 | AC7 | eMMC clock |
| CMD 0 | AB2 | eMMC CMD |
| DAT0 0 | AC6 | eMMC DAT0 |
| DAT1 0 | AD6 | eMMC DAT1 |
| DAT2 0 | AC5 | eMMC DAT2 |
| DAT3 0 | AD5 | eMMC DAT3 |
| DAT4 0 | AC4 | eMMC DAT4 |
| DAT5 0 | AD4 | eMMC DAT5 |
| DAT6 0 | AC3 | eMMC DAT6 |
| DAT7 0 | AD3 | eMMC DAT7 |
| CLK 1 | AA1 | Gamecard clock |
| CMD 1 | V1 | Gamecard CMD |
| DAT0 1 | Z1 | Gamecard DAT0 |
| DAT1 1 | Z2 | Gamecard DAT1 |
| DAT2 1 | Y1 | Gamecard DAT2 |
| DAT3 1 | Y2 | Gamecard DAT3 |
| DAT4 1 | X1 | Gamecard DAT4 (unused) |
| DAT5 1 | X2 | Gamecard DAT5 (unused) |
| DAT6 1 | W1 | Gamecard DAT6 (unused) |
| DAT7 1 | W2 | Gamecard DAT7 (unused) |
| CLK 2 | T1 | Wlan/Bt clock |
| CMD 2 | Q1 | Wlan/Bt CMD |
| DAT0 2 | S1 | Wlan/Bt DAT0 |
| DAT1 2 | S2 | Wlan/Bt DAT1 |
| DAT2 2 | R1 | Wlan/Bt DAT2 |
| DAT3 2 | R2 | Wlan/Bt DAT3 |
| Vddq | U1 | SDIO voltage regulation |
| Vddq | U2 | SDIO voltage regulation |
MS
See MSIF Registers.
| Name | Pin | Description |
|---|---|---|
| CLK | AD14 | Memorycard CLK |
| INS | AD13 | Memorycard insert detect |
| BS | AD8 | Memorycard bus state (select bit) |
| DAT0 | AC11 | Memorycard DAT0 |
| DAT1 | AD12 | Memorycard DAT1 |
| DAT2 | AD11 | Memorycard DAT2 |
| DAT3 | AC10 | Memorycard DAT3 |
MIPI DSI
See DSI Registers.
| Name | Pin | Description |
|---|---|---|
| DC+ 0 | F1 | Internal display clock lane |
| DC- 0 | E1 | Internal display clock lane |
| D0+ 0 | D1 | Internal display data 0 lane |
| D0- 0 | C1 | Internal display data 0 lane |
| D1+ 0 | H1 | Internal display data 1 lane |
| D1- 0 | G1 | Internal display data 1 lane |
MIPI CSI
| Name | Pin | Description |
|---|---|---|
| AD15 | Front/back camera | |
| AD16 | Front/back camera | |
| AD17 | Front/back camera | |
| AD18 | Front/back camera | |
| AD19 | Front/back camera | |
| AD20 | Front/back camera | |
| AD21 | Front/back camera | |
| AD22 | Front/back camera |
SPI
See SPI Registers.
| Name | Pin | Description |
|---|---|---|
| CS 0 | AA14 | Syscon SPI chip select |
| SCK 0 | Z15 | Syscon SPI clock |
| MISO 0 | AA15 | Syscon SPI output |
| MOSI 0 | Z14 | Syscon SPI input |
| CS 1 | AA12 | Barkley SPI chip select |
| SCK 1 | Z13 | Barkley SPI clock |
| MISO 1 | AA13 | Barkley SPI output |
| MOSI 1 | Z12 | Barkley SPI input |
GPIO
See GPIO Registers.
| Name | Pin | Description |
|---|---|---|
| Syscon | D18 | To syscon |
| Syscon | E18 | To syscon |
| Syscon | E19 | To syscon |
| Syscon | A20 | To syscon |
| Motion | E25 | To Motion (accelerometer IC) |
| Motion | A26 | To Motion (accelerometer IC) |
| Camera | E21 | To camera |
| Camera | D21 | To camera |
| Camera | B21 | To camera |
| PS LED | E20 | To transistor gate powering PS button LED |
| GC LED | D20 | To LED next to gamecard port |
| PMIC | A22 | To PMIC |
| PMIC | A25 | To PMIC |
| PMIC | B20 | To PMIC |
| OLED | A19 | To OLED connector port |
| GPIO_80 | A21 | 3G modem pin 23 |
| GPIO_H2 | B27 | 3G modem pin 11 |
| VBUS_CTRL | A27 | 3G modem pin 17 |
| eMMC RST_N | B26 | RST_N of eMMC |
I2C
See I2C Registers.
| Name | Pin | Description |
|---|---|---|
| SCL 0 | T4 | I2C0 clock |
| SDA 0 | T5 | I2C0 data |
| SCL 1 | S4 | I2C1 clock |
| SDA 1 | S5 | I2C1 data |
Misc
| Name | Pin | Description |
|---|---|---|
| pad AC28 | AC26 | Goes to pad with passive, grouped with AC28? |
| pad AC26 | AC28 | Goes to pad with passive, grouped with AC26? |
| pullup? | AB29 | Goes to a pullup resistor? |
| Wlan/Bt | AA9 | Goes to Wlan/Bt SoC |
| pad W4 | X4 | Goes to pad, connects with W4 |
| pad X4 | W4 | Goes to pad, connects with X4 |
| pullup X27 | W27 | Pullup resistor to X27 |
| X29 | Goes near PMIC | |
| X30 | Goes near PMIC | |
| pad M7 | U29 | Connects to M7 with a passive |
| rst? | U30 | Goes near PMIC, might be reset |
| pad U29 | M7 | Connects to U29 with a passive |
| Capacitor | L5 | Goes to a capacitor, voltage regulation? |
| Camera | K4 | Goes to camera, camera audio input? |
| Audio | K5 | Maybe I2S |
| Audio | K7 | Maybe I2S |
| Audio | G5 | Maybe I2S |
| Audio | B4 | Maybe I2S |
| Syscon | B9 | Goes to syscon |
| pad D11 | D10 | Connects to D10 through passive |
| pad D10 | D11 | Connects to D11 through passive |
| pad G30 | G29 | Connects to G30 through passive |
| pad G29 | G30 | Connects to G29 through passive |
Clocks/Reset
See Pervasive.
| Name | Pin | Description |
|---|---|---|
| 24M | B5 | 24.576MHz, suspected audio related |
| 24M | B6 | 24.576MHz, suspected audio related |
| 27M | A11 | 27MHz, suspected input to main PLL |
| 48M | AC27 | 48MHz, SD controller |
| 37M | C30 | 37MHz, suspected main clock |
| RST_N | B9 | Held for 20ms on startup by Syscon, 100K pulldown |
Power
Different power domains are numbered. Some voltages are unknown.
| Name | Pin | Description |
|---|---|---|
| VDD09 1 | W9 | 0.9V power domain 1 |
| VDD09 1 | W10 | 0.9V power domain 1 |
| VDD09 1 | W11 | 0.9V power domain 1 |
| VDD09 1 | W12 | 0.9V power domain 1 |
| VDD09 1 | W13 | 0.9V power domain 1 |
| VDD09 1 | W14 | 0.9V power domain 1 |
| VDD09 1 | W15 | 0.9V power domain 1 |
| VDD09 1 | V10 | 0.9V power domain 1 |
| VDD09 1 | V11 | 0.9V power domain 1 |
| VDD09 1 | V12 | 0.9V power domain 1 |
| VDD09 1 | V13 | 0.9V power domain 1 |
| VDD09 1 | V14 | 0.9V power domain 1 |
| VDD09 1 | V15 | 0.9V power domain 1 |
| VDD09 1 | V16 | 0.9V power domain 1 |
| VDD09 1 | V17 | 0.9V power domain 1 |
| VDD09 1 | V18 | 0.9V power domain 1 |
| VDD09 1 | V19 | 0.9V power domain 1 |
| VDD09 1 | V20 | 0.9V power domain 1 |
| VDD09 1 | V21 | 0.9V power domain 1 |
| VDD09 1 | U10 | 0.9V power domain 1 |
| VDD09 1 | T10 | 0.9V power domain 1 |
| VDD09 1 | S10 | 0.9V power domain 1 |
| VDD09 1 | R10 | 0.9V power domain 1 |
| VDD09 1 | H16 | 0.9V power domain 1 |
| VDD09 1 | H17 | 0.9V power domain 1 |
| VDD09 1 | H18 | 0.9V power domain 1 |
| VDD09 1 | H19 | 0.9V power domain 1 |
| VDD09 1 | H20 | 0.9V power domain 1 |
| VDD09 1 | H21 | 0.9V power domain 1 |
| VDD09 1 | H22 | 0.9V power domain 1 |
| VDD09 1 | B18 | 0.9V power domain 1 |
| VDD10 1 | K9 | 1.0V power domain 1 |
| VDD10 1 | J9 | 1.0V power domain 1 |
| VDD10 1 | I9 | 1.0V power domain 1 |
| VDD10 1 | I10 | 1.0V power domain 1 |
| VDD10 1 | I11 | 1.0V power domain 1 |
| VDD10 1 | I12 | 1.0V power domain 1 |
| VDD10 1 | I13 | 1.0V power domain 1 |
| VDD10 2 | I14 | 1.0V power domain 2 |
| VDD10 2 | I15 | 1.0V power domain 2 |
| VDD10 2 | I16 | 1.0V power domain 2 |
| VDD10 2 | I17 | 1.0V power domain 2 |
| VDD10 2 | I18 | 1.0V power domain 2 |
| VDD10 2 | I19 | 1.0V power domain 2 |
| VDD10 2 | I20 | 1.0V power domain 2 |
| VDD10 2 | I21 | 1.0V power domain 2 |
| VDD10 2 | I22 | 1.0V power domain 2 |
| VDD10 2 | J22 | 1.0V power domain 2 |
| VDD10 2 | K22 | 1.0V power domain 2 |
| VDD10 2 | L22 | 1.0V power domain 2 |
| VDD12 1 | U11 | 1.2V power domain 1 (main core power) |
| VDD12 1 | U12 | 1.2V power domain 1 (main core power) |
| VDD12 1 | U13 | 1.2V power domain 1 (main core power) |
| VDD12 1 | U14 | 1.2V power domain 1 (main core power) |
| VDD12 1 | U15 | 1.2V power domain 1 (main core power) |
| VDD12 1 | U16 | 1.2V power domain 1 (main core power) |
| VDD12 1 | U17 | 1.2V power domain 1 (main core power) |
| VDD12 1 | U18 | 1.2V power domain 1 (main core power) |
| VDD12 1 | U19 | 1.2V power domain 1 (main core power) |
| VDD12 1 | U20 | 1.2V power domain 1 (main core power) |
| VDD12 1 | U21 | 1.2V power domain 1 (main core power) |
| VDD12 1 | U22 | 1.2V power domain 1 (main core power) |
| VDD12 1 | T22 | 1.2V power domain 1 (main core power) |
| VDD12 1 | S22 | 1.2V power domain 1 (main core power) |
| VDD12 1 | R22 | 1.2V power domain 1 (main core power) |
| VDD12 1 | M22 | 1.2V power domain 1 (main core power) |
| VDD12 1 | L22 | 1.2V power domain 1 (main core power) |
| VDD12 1 | K22 | 1.2V power domain 1 (main core power) |
| VDD12 1 | J22 | 1.2V power domain 1 (main core power) |
| VDD12 1 | J21 | 1.2V power domain 1 (main core power) |
| VDD12 1 | J20 | 1.2V power domain 1 (main core power) |
| VDD12 1 | J19 | 1.2V power domain 1 (main core power) |
| VDD12 1 | J18 | 1.2V power domain 1 (main core power) |
| VDD12 1 | J17 | 1.2V power domain 1 (main core power) |
| VDD12 1 | J16 | 1.2V power domain 1 (main core power) |
| VDD12 1 | J15 | 1.2V power domain 1 (main core power) |
| VDD12 1 | J14 | 1.2V power domain 1 (main core power) |
| VDD12 1 | J13 | 1.2V power domain 1 (main core power) |
| VDD12 1 | J12 | 1.2V power domain 1 (main core power) |
| VDD12 1 | J11 | 1.2V power domain 1 (main core power) |
| VDD12 1 | J10 | 1.2V power domain 1 (main core power) |
| VDD12 1 | K10 | 1.2V power domain 1 (main core power) |
| VDD12 1 | L10 | 1.2V power domain 1 (main core power) |
| VDD12 1 | M10 | 1.2V power domain 1 (main core power) |
| VDD12 1 | N10 | 1.2V power domain 1 (main core power) |
| VDD12 1 | O10 | 1.2V power domain 1 (main core power) |
| VDD12 1 | P10 | 1.2V power domain 1 (main core power) |
| VDD12 1 | Q10 | 1.2V power domain 1 (main core power) |
| VDD12 2 | M9 | 1.2V power domain 2 |
| VDD12 2 | L9 | 1.2V power domain 2 |
| VDD12 2 | Q21 | 1.2V power domain 2 |
| VDD12 2 | P21 | 1.2V power domain 2 |
| VDD12 2 | O21 | 1.2V power domain 2 |
| VDD12 2 | N21 | 1.2V power domain 2 |
| VDD12 3 | W18 | 1.2V power domain 3 |
| VDD12 3 | W19 | 1.2V power domain 3 |
| VDD12 3 | W20 | 1.2V power domain 3 |
| VDD12 3 | W21 | 1.2V power domain 3 |
| VDD12 3 | W22 | 1.2V power domain 3 |
| VDD12 3 | Q22 | 1.2V power domain 3 |
| VDD12 3 | P22 | 1.2V power domain 3 |
| VDD12 3 | O9 | 1.2V power domain 3 |
| VDD12 3 | N9 | 1.2V power domain 3 |
| VDD12 3 | H11 | 1.2V power domain 3 |
| VDD12 3 | H12 | 1.2V power domain 3 |
| VDD12 3 | H13 | 1.2V power domain 3 |
| VDD12 3 | H14 | 1.2V power domain 3 |
| VDD12 3 | H15 | 1.2V power domain 3 |
| VDD12 4 | T22 | 1.2V power domain 4 |
| VDD12 4 | S22 | 1.2V power domain 4 |
| VDD12 4 | R22 | 1.2V power domain 4 |
| VDD12 4 | O22 | 1.2V power domain 4 |
| VDD12 4 | N22 | 1.2V power domain 4 |
| VDD12 4 | M22 | 1.2V power domain 4 |
| VDD18 1 | Y26 | 1.8V power domain 1 |
| VDD18 1 | Y27 | 1.8V power domain 1 |
| VDD18 1 | N8 | 1.8V power domain 1 |
| VDD18 1 | M8 | 1.8V power domain 1 |
| VDD18 1 | L8 | 1.8V power domain 1 |
| VDD18 1 | K8 | 1.8V power domain 1 |
| VDD18 1 | O23 | 1.8V power domain 1 |
| VDD18 1 | N23 | 1.8V power domain 1 |
| VDD18 1 | H9 | 1.8V power domain 1 |
| VDD18 1 | H10 | 1.8V power domain 1 |
| VDD18 1 | G15 | 1.8V power domain 1 |
| VDD18 1 | G16 | 1.8V power domain 1 |
| VDD18 1 | G19 | 1.8V power domain 1 |
| VDD18 1 | G20 | 1.8V power domain 1 |
| VDD18 1 | G21 | 1.8V power domain 1 |
| VDD18 1 | G22 | 1.8V power domain 1 |
| VDD18 1 | W16 | 1.8V power domain 1 |
| VDD18 1 | W17 | 1.8V power domain 1 |
| VDD18 1 | V22 | 1.8V power domain 1 |
| VDD18 1 | U22 | 1.8V power domain 1 |
| VDD18 2 | AA6 | 1.8V power domain 2 |
| VDD18 2 | Z6 | 1.8V power domain 2 |
| VDD18 2 | AA17 | 1.8V power domain 2 |
| VDD18 2 | Z17 | 1.8V power domain 2 |
| VDD18 2 | AA18 | 1.8V power domain 2 |
| VDD18 2 | Z18 | 1.8V power domain 2 |
| VDD18 2 | V4 | 1.8V power domain 2 |
| VDD18 2 | V5 | 1.8V power domain 2 |
| VDD18 2 | P7 | 1.8V power domain 2 |
| VDD18 2 | O7 | 1.8V power domain 2 |
| VDD18 2 | J23 | 1.8V power domain 2 |
| VDD18 2 | I23 | 1.8V power domain 2 |
| VDD18 2 | H8 | 1.8V power domain 2 |
| VDD18 2 | G8 | 1.8V power domain 2 |
| VDD18 2 | E8 | 1.8V power domain 2 |
| VDD18 2 | D8 | 1.8V power domain 2 |
| VDD? 1 | AA26 | Unknown power |
| VDD? 1 | Z26 | Unknown power |
| VDD? 2 | AA25 | Unknown power |
| VDD? 2 | Z25 | Unknown power |
| VDD? 3 | AA20 | Unknown power |
| VDD? 3 | Z20 | Unknown power |
| VDD? 4 | AA8 | Unknown power |
| VDD? 4 | Z8 | Unknown power |
| VDD? 4 | Y4 | Unknown power |
| VDD? 4 | Y5 | Unknown power |
| VDD? 4 | X27 | Unknown power |
| VDD? 5 | E6 | Unknown power |
| VDD? 5 | D6 | Unknown power |
| VDD? 6 | H7 | Unknown power |
| VDD? 6 | G7 | Unknown power |
| VDD? 7 | P24 | Unknown power |
| VDD? 7 | O24 | Unknown power |
| VDD? 8 | T24 | Unknown power |
| VDD? 8 | S24 | Unknown power |
| VDD? 9 | E26 | Unknown power |
| VDD? 9 | E27 | Unknown power |
| VDD? 9 | D29 | Unknown power |
| VDD? 9 | D30 | Unknown power |
| VDD? 9 | C29 | Unknown power |
| VDD? 9 | B30 | Unknown power |
| VDD? 10 | F26 | Unknown power |
| VDD? 10 | F27 | Unknown power |