Update and Recovery

Gecko OS is part of a larger sophisticated application framework installed on all Gecko OS devices. The framework provides a hardened bootloader, read/write file system, safemode recovery mechanism, and secure over-the-air (OTA) update capability.

DFU - Device Firmware Update

The Gecko OS Device Firmware Update (DFU) feature allows device firmware to be updated via the device serial interface. See Device Firmware Update.

The Device Management Server (DMS)

To update a Gecko OS device using Gecko OS, you need to sign up for an account with the Device Management Server (DMS) and then you need to claim your device.

You may also need to activate your device to a Gecko OS product.

The terms claim and activate are used in a special sense with the DMS, and are defined as follows.

To perform Gecko OS OTA update, the steps are:

Signing up with the DMS

To sign up for an account with the DMS, go to https://dms.zentri.com and follow the Create an Account link.

During the sign up process, you will create a DMS username and password.

Claim Your Device

To claim your device, issue the dms_claim command:

dms_claim <dms_token>

The Gecko DMS Commands

When using Gecko OS, DMS commands is used to claim and activate devices:

Activate a Product by Product Code

To activate a device to a specific product, use the dms_activate command.

dms_activate <product code>

Safe Mode

Safe mode operation is guaranteed in the unlikely event the device is configured in a way that causes repeated and/or unexpected reboots. The bootloader automatically switches to safe mode after eight exceptions occur with the offending boot application. Safe mode is indicated by the system.safemode.status variable.

It is easy to return the device to normal operation when the device is in safe mode. Follow the command sequence in the following table and your device will be back to normal in no time.

Gecko OS Commands Description

get system.safemode.status

<- Check if the device is in safemode? 0 = no, 1 = yes
<- Print a list of faults (8 faults should print)
<- Reset faults counter
<- Check there are no more faults after reset
<- Reboot the device

In some cases, a misconfigured device may quickly return to safe mode since the device may be inadvertently setup to invoke a fault. If this occurs, we recommend the device is returned to factory reset.

Once in safe mode, the device boots into the kernel. The kernel provides the ability to update the firmware, or switch back to Gecko OS using the faults_reset command.

For a detailed discussion of recovery procedures, see the Recovery from Safemode application note.

To force entry into safemode, assert the factory reset GPIO for more than 20 seconds.

Safemode Network Connectivity Failures

The issue of network connectivity failures in safemode is addressed by three variables:

Commands and Variables Available in Safe Mode

In safe mode a subset of the commands and variables is available.

Safe Mode Commands

Safe Mode Variables

Factory Reset

Factory reset returns the device to a known state.

The device may be factory reset by GPIO or by the Gecko OS factory_reset command.

After a successful factory reset, all variables are set to the factory configuration and the device reboots.

See Configuration and Setup, Resetting Variable Values for details of reset types and the reset process.

See Configuration and Setup, Factory Configuration for details on creating a custom factory configuration file.

Factory Reset GPIO

The factory reset GPIO is GPIO 0 on all Gecko OS devices. To perform a factory reset by GPIO:

Button 1 is wired to GPIO 0 on evaluation boards. On an evaluation board, to factory reset:

Note: GPIO 0 always acts as the factory reset GPIO. GPIO 0 may be configured to initialize to another GPIO function, but the factory reset function takes priority over other functions.

Note: You can configure a factory reset GPIO. See system.factory_reset.gpio.

To ensure factory reset is invoked, the GPIO (or button) must not be asserted for more than 20 seconds.

If the factory reset GPIO is asserted for more than 20 seconds then the device is forced into safemode.

Locking Variable Values

The following variables can be locked to prevent change on factory reset. See system.variable_lock:

Factory Reset Command

Use the factory_reset command to perform a factory reset. To avoid accidental factory reset, the device Wi-Fi MAC address must be provided: