Management platform system and boot program repairing method thereof

Abstract

The invention discloses a management platform system and a boot program repairing method thereof. The management platform system comprises a control circuit, a programmable logic circuit, a first storage circuit, a selection circuit and a second storage circuit. The control circuit is provided with an output pin, a reset pin and a transmission interface. The programmable logic circuit is electrically connected to the control circuit. The first storage circuit is configured to store an active boot program. The selection circuit is electrically connected to the transmission interface of the control circuit, the programmable logic circuit and the first storage circuit and is used for selecting a transmission target of the first storage circuit, wherein the transmission target is selected from the control circuit or the programmable logic circuit. The second storage circuit is electrically connected to the programmable logic circuit and is used for storing a backup boot program. The control circuit is configured to execute at least one of an active boot program, an active image file, and a backup boot program.

Description

Technical Field

[0001] The invention relates to a baseboard management controller, and in particular to a management platform system and a boot program repair method thereof. Background Art

[0002] In recent years, the security and stability of servers have received increasing attention, and it has become increasingly popular to use auxiliary controllers to help the baseboard management controller (BMC) in the system maintain stable operation. When the server is powered on, before the BMC starts to initialize, the BMC needs to load and execute the firmware image file for initialization, and then load and execute the firmware main program in the firmware image file after the initialization is completed. Only then can the various functions of the BMC be performed by executing the firmware main program. However, when the loaded firmware image file has errors or is damaged, personnel are required to go to the site to update the BMC firmware image file. Summary of the invention

[0003] In view of this, the present invention proposes a management platform system. The management platform system includes a control circuit, a programmable logic circuit, a first storage circuit, a selection circuit and a second storage circuit. The control circuit has an output pin, a reset pin and a transmission interface. The programmable logic circuit is electrically connected to the control circuit, and the programmable logic circuit includes a control module, a detection module and an access module. The detection module is used to detect the logic level of the output pin. The first storage circuit is used to store an active boot program and an active image file. The selection circuit is electrically connected to the transmission interface of the control circuit, the programmable logic circuit and the first storage circuit and is used to select a transmission target of the first storage circuit, wherein the transmission target is selected from the control circuit or the programmable logic circuit. The second storage circuit is electrically connected to the programmable logic circuit and is used to store a backup boot program. The control circuit is further used to execute at least one of the active boot program, the active image file and the backup boot program; the control module is used to control the detection module to generate a reset signal to the reset pin to enable or disable the control circuit, control the detection module to generate a selection signal to the selection circuit to select the transmission target of the first storage circuit, and write the backup boot program stored in the second storage circuit into the first storage circuit via the access module.

[0004] In some embodiments, the management platform system further includes an independent line, which is arranged between the control circuit and the programmable logic circuit, wherein the programmable logic circuit is further used to transmit an error log file to the control circuit via the independent line.

[0005] In some embodiments, the management platform system further includes a power circuit, which is electrically connected to the control circuit and is used to generate a supply power.

[0006] In some embodiments, the management platform system further includes a communication circuit electrically connected to the control circuit, wherein the communication circuit is used to electrically connect to an external device via a transmission medium to receive a backup image file corresponding to the control circuit.

[0007] In some embodiments, the capacity of the second storage circuit is smaller than the capacity of the first storage circuit.

[0008] The present invention also proposes a boot program repair method suitable for a management platform system. The management platform system includes a control circuit, a programmable logic circuit, a first storage circuit, a selection circuit and a second storage circuit. The boot program repair method includes: receiving a supply power through the control circuit; executing an active boot program stored in the first storage circuit; detecting the logic level of an output pin of the control circuit; and when the logic level of the output pin is a high logic level, performing the following steps: disabling the control circuit according to the logic level of a corresponding reset signal generated by a detection module of the programmable logic circuit; selecting a transmission target of the first storage circuit as the programmable logic circuit according to the logic level of a corresponding selection signal generated by the detection module; writing a backup boot program stored in the second storage circuit into the first storage circuit; selecting the transmission target of the first storage circuit as the control circuit according to the logic level of the corresponding selection signal; and enabling the control circuit according to the change of the reset signal.

[0009] In some embodiments, the management platform system further includes a communication circuit, and the boot program repair method further includes, after the step of enabling the control circuit via a reset pin of the control circuit: executing the backup boot program stored in the first storage circuit; detecting the logic level of the output pin of the control circuit; and when the logic level of the output pin is a low voltage logic level, performing the following steps: electrically connecting to an external device via a transmission medium; and receiving a backup image file corresponding to the control circuit.

[0010] In some embodiments, the management platform system further includes an independent line, and the boot program repair method further includes: transmitting an error log file from the programmable logic circuit to the control circuit via the independent line.

[0011] In some embodiments, the management platform system further includes a power circuit, which is used to generate the supply power.

[0012] In some embodiments, the capacity of the second storage circuit is smaller than the capacity of the first storage circuit.

[0013] Compared with the prior art, the management platform system and the boot program repair method thereof of the present invention, according to some embodiments, when the active boot program stored in the first storage circuit is erroneous or damaged, the management platform system writes the backup boot program stored in the second storage circuit into the first storage circuit to repair the active boot program. In this way, the control circuit can download and install the corresponding image file, thereby allowing the control circuit to normally execute its corresponding firmware main program to execute various functions of the control circuit. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] Other features and effects of the present invention will be clearly presented in the embodiments with reference to the accompanying drawings, in which:

[0015] Figure 1 is a circuit block diagram of some embodiments of the management platform system;

[0016] Figure 2 yes Figure 1 Schematic diagram of modules of some embodiments of the selection circuit;

[0017] Figure 3 yes Figure 1 Operational flow chart of some embodiments of the management platform system;

[0018] Figure 4 yes Figure 3 The operation flow chart of some embodiments of the step S120;

[0019] Figure 5 yes Figure 4 The operation flow chart of some embodiments of the step S145 is as follows; and

[0020] Figure 6 yes Figure 5 The operation flow chart of some embodiments of the process following step S149 is shown in FIG. DETAILED DESCRIPTION

[0021] Before the present invention is described in detail, it should be noted that similar elements are denoted by the same reference numerals in the following description.

[0022] Please refer to Figure 1 , Figure 11 is a circuit block diagram of some embodiments of the management platform system 10. The management platform system 10 includes a control circuit 100, a programmable logic circuit 110, a first storage circuit 120, a selection circuit 130, and a second storage circuit 140, wherein the control circuit 100 has an output pin 101, a reset pin 102, and a transmission interface 103, and the programmable logic circuit 110 includes a control module 111, a detection module 112, and an access module 113. In some embodiments, the programmable logic circuit 110 is electrically connected to the control circuit 100 and the second storage circuit 140.

[0023] Please refer to Figure 2 , Figure 2 yes Figure 1 1 is a block diagram of some embodiments of the selection circuit 130. The selection circuit 130 is electrically connected to the transmission interface 103 of the control circuit 100, the programmable logic circuit 110 and the first storage circuit 120, and the selection circuit 130 is used to receive and select a transmission target of the first storage circuit 120 according to a selection signal Sse, wherein the transmission target is selected from the control circuit 100 or the programmable logic circuit 110. When the transmission target of the first storage circuit 120 is the control circuit 100, the first storage circuit 120 is electrically connected to the control circuit 100; similarly, when the transmission target of the first storage circuit 120 is the programmable logic circuit 110, the first storage circuit 120 is electrically connected to the programmable logic circuit 110. In some embodiments, the initial transmission target of the first storage circuit 120 can be the control circuit 100 by default, or it can be the programmable logic circuit 110 by default. The following description will be made by taking the control circuit 100 as the initial default transmission target of the first storage circuit 120 as an example.

[0024] Please refer to Figures 1 to 3 , Figure 3 yes Figure 1 Operational flow chart of some embodiments of the management platform system 10. When the management platform system 10 is powered, the control circuit 100 receives a supply power VSP provided by a power supply 20 and prepares to be initialized (step S100). When the management platform system 10 is just powered but before the control circuit 100 is initialized, its output pin 101 cannot output a default health signal because it has not been initialized, and thus transmits a signal that does not match the default health signal. The signal that does not match the default health signal can be a high logic level representing "1" or a low logic level representing "0", but is not limited thereto.

[0025] In some embodiments, the control circuit 100 is electrically connected to the power supply 20 to directly receive the standby power VST as the supply power VSP required for operation or to receive the supply power VSP with a voltage level different from the standby power VST generated by converting the standby power VST by a power circuit 150. In other words, no matter whether the management platform system 10 is in the boot state or the shutdown state, as long as the power supply 20 provides the standby power VST to the management platform system 10, the control circuit 100 can receive the supply power VSP.

[0026] After step S100, the control circuit 100 of the management platform system 10 first loads and executes an active boot program stored in the first storage circuit 120 (step S110) to perform initialization, and then controls its output pin 101 to transmit a logic level that conforms to the default health signal, and the management platform system 10 detects the logic level of the output pin 101 of the control circuit 100 through the detection module 112 of the programmable logic circuit 110 (step S120), wherein the logic level of the output pin 101 is selected from a high logic level representing "1" and a low logic level representing "0", but not limited to this. The signal transmitted by the output pin 101 can also be a set of differential signals (for example, a pair of differential signal lines transmit signals of a high logic level representing "1" and a low logic level representing "0") or a set of serial signals (for example, 01, 010, 0110...), etc. The management platform system 10 detects the signal of the output pin 101 of the control circuit 100 through the detection module 112 of the programmable logic circuit 110 after being powered on and after a default detection time to avoid misjudgment.

[0027] In some embodiments, when the signal of the output pin 101 meets the default health signal, (hereinafter, the low logic level representing "0" is used as the signal meeting the default health signal, but it is not limited thereto), it means that the control circuit 100 operates normally and can be guided by executing an active boot program (such as the aforementioned Uboot) to load and execute the corresponding firmware main program of the control circuit 100. At this time, the control circuit 100 can load and execute the firmware main program corresponding to an active image file stored in the first storage circuit 120, thereby enabling the control circuit 100 to perform various functions (step S130). When the logic level of the output pin 101 is a high logic level representing "1", it means that the control circuit 100 may have an error or damage and cannot normally execute the active boot program and cannot operate normally. In other embodiments, when the logic level of the output pin 101 is a high logic level representing "1", it means that the control circuit 100 operates normally; when the logic level of the output pin 101 is a low logic level representing "0", it means that the control circuit 100 may have an error or be damaged, but it is not limited to this.

[0028] In other words, in some embodiments, before the control circuit 100 is initialized, the output pin 101 of the control circuit 100 is pulled up to a high logic level by the influence of the standby power supply VST. When the control circuit 100 is initialized, the control circuit 100 pulls down the logic level of the output pin 101 from a high logic level to a low logic level by executing the active boot program; on the contrary, when the control circuit 100 does not normally execute the active boot program due to its own abnormality or an error in the active boot program it executes, the logic level of the output pin 101 cannot be normally controlled by the control circuit 100 and maintains a high logic level.

[0029] Please refer to Figures 1 to 4 , Figure 4 yes Figure 3 14 is an operation flow chart of some embodiments of the process of continuing step S120. After step S120, when the control circuit 100 cannot normally execute the active boot procedure (i.e., the logic level of the output pin 101 is a high logic level), the management platform system 10 disables the control circuit 100 according to the logic level of a reset signal Sre (step S141), wherein the reset signal Sre is generated by the programmable logic circuit 110 according to the detection result of the detection module 112 and transmitted to the reset pin 102 of the control circuit 100. In some embodiments, the logic level of the reset signal Sre is selected from a high logic level representing "1" and a low logic level representing "0", wherein the user can define the logic level used to disable the control circuit 100. For example, in some embodiments, when the detection module 112 generates a reset signal Sre of a high logic level to the reset pin 102 of the control circuit 100, the control circuit 100 is disabled and stops any behavior or operation; in other embodiments, when the detection module 112 generates a reset signal Sre of a low logic level to the reset pin 102 of the control circuit 100, the control circuit 100 is disabled and stops any behavior or operation.

[0030] After step S141, the selection circuit 130 of the management platform system 10 selects the transmission target of the first storage circuit 120 as the programmable logic circuit 110 according to the logic level of a corresponding selection signal Sse (for example but not limited to a high logic level representing "1") (step S142), so that the transmission target of the first storage circuit 120 is switched from the control circuit 100 to the programmable logic circuit 110, wherein the selection signal Sse is generated by the programmable logic circuit 110 according to the detection result of the detection module 112. In other words, at this time, the first storage circuit 120 is electrically connected to the programmable logic circuit 110.

[0031] After step S142, the management platform system 10 writes a backup boot program stored in the second storage circuit 140 to the first storage circuit 120 (step S143), wherein the backup boot program is a backup file of the active boot program that can be executed normally. In other words, the active boot program before being damaged and the backup boot program are the same file. In another embodiment, the backup boot program can also be different from the active boot program before being damaged, such as a new version of the active boot program, or an active boot program specifically used to repair the control circuit 100, and both of them are used to start the control circuit 100 and guide the control circuit 100 to load and execute the firmware main program corresponding to the active image file, so that the control circuit 100 can execute the corresponding function by executing the firmware main program. In other words, the control circuit 100 needs to execute the active boot program and the corresponding firmware main program to operate normally and execute the corresponding function, and the control circuit 100 cannot only execute the active boot program without executing the firmware main program to complete its own initialization. On the contrary, the control circuit 100 cannot complete its own initialization by executing only the firmware main program without executing the active boot program. In some embodiments, the management platform system 10 writes the backup boot program from the second storage circuit 140 to the access module 113 of the programmable logic circuit 110 through the control module 111, and then writes the backup boot program from the access module 113 to the first storage circuit 120. In some embodiments, the backup boot program can be pre-stored in the second storage circuit 140. In other embodiments, when the management platform system 10 is powered on for the first time, and the control circuit 100 successfully executes the active boot program and the active image file to complete the initialization and operate normally, the programmable logic circuit 110 controls the switching of the selection circuit 130 to copy the normally executable active boot program to the second storage circuit 140 as a backup boot program.

[0032] In some embodiments, when the backup boot program is written to the first storage circuit 120, the backup boot program is written to the remaining storage space in the first storage circuit 120. In other words, the active boot program and / or the active image file including the firmware main program that has an error or is damaged is still stored in the first storage circuit 120. In other embodiments, when the backup boot program is written to the first storage circuit 120, the backup boot program overwrites the active boot program. The management platform system 10 first erases the first storage circuit 120 through the access module 113, and then writes the backup boot program to the first storage circuit 120, so that the first storage circuit 120 only stores the backup boot program but not the firmware main program.

[0033] After step S143, the selection circuit 130 of the management platform system 10 selects the transmission target of the first storage circuit 120 as the control circuit 100 according to the logic level of another corresponding selection signal Sse (for example but not limited to a low logic level representing "0") (step S144), so that the transmission target of the first storage circuit 120 is switched from the programmable logic circuit 110 to the control circuit 100. In other words, at this time, the first storage circuit 120 is electrically connected to the control circuit 100.

[0034] After step S144, the management platform system 10 enables the control circuit 100 according to the change edge of the reset signal Sre (step S145). For example, in some embodiments, when the management platform system 10 disables the control circuit 100 according to the reset signal Sre of a high logic level, the management platform system 10 enables the control circuit 100 according to the falling edge of the reset signal Sre; in other embodiments, when the management platform system 10 disables the control circuit 100 according to the reset signal Sre of a low logic level, the management platform system 10 enables the control circuit 100 according to the rising edge of the reset signal Sre.

[0035] Please refer to Figures 1 to 5 , Figure 5 yes Figure 4 145. In some embodiments, the management platform system 10 further includes a communication circuit 160, and the communication circuit 160 is electrically connected to the control circuit 100, and the backup boot program includes an address of a default management device and a loading method. After step S145, when the control circuit 100 is enabled, the control circuit 100 executes the backup boot program stored in the first storage circuit 120 to initialize the control circuit 100 (step S146), and the management platform system 10 detects the logic level of the output pin 101 of the control circuit 100 again through the detection module 112 (step S147).

[0036] In some embodiments of step S147, when the logic level of the output pin 101 is still a high logic level representing "1", it means that the step of writing the backup boot program to the first storage circuit 120 (i.e., step S143) occurs, or the hardware of the first storage circuit 120 is damaged. At this time, the management platform system 10 ends the operation to avoid further problems. In other embodiments of step S147, when the logic level of the output pin 101 is a low logic level representing "0", it means that there is no problem with the step of writing the backup boot program to the first storage circuit 120 (i.e., step S143), and the control circuit 100 successfully executes the backup boot program so that the control circuit 100 can load and execute the firmware main program normally. The management platform system 10 loads the firmware main program according to the loading method of the backup boot program. The loading method is to read the storage memory inside the management platform system 10 (not shown), read the storage device external to the management platform system 10 (not shown), or request and load the firmware main program through an external device (the loading method will be described below by taking the request with the external device as an example). At this time, the management platform system 10 is electrically connected to an external device (the external device corresponds to the address of the default management device) through a transmission medium through the communication circuit 160 (not shown, step S148), and receives a backup image file Img corresponding to the control circuit 100 from the external device through the communication circuit 160 (step S149). The backup image file Img includes a backup firmware main program (that is, a firmware main program that can be executed normally), and the backup firmware main program can be the same as or different from the firmware main program originally stored in the first storage circuit 120 (for example, an updated version of the firmware main program or a factory version of the firmware main program).

[0037] In some embodiments, after the control circuit 100 receives the backup image file Img through the communication circuit 160 (corresponding to step S149), the control circuit 100 writes the backup image file Img into the first storage circuit 120. At this time, the first storage circuit 120 stores the backup boot program and the backup image file Img, so that the control circuit 100 can subsequently install the backup image file Img to execute the backup firmware main program, thereby allowing the control circuit 100 to execute various functions.

[0038] In some embodiments, the transmission medium may be a network protocol for transmitting data through a network cable, such as but not limited to File Transfer Protocol (FTP), Trivial File Transfer Protocol (TFTP) or TCP (Transmission Control Protocol) / IP (Internet Protocol) communication protocol. In other embodiments, the transmission medium may also be a physical cable for transmitting data, such as but not limited to a Universal Serial Bus (USB) cable, a Type-C cable or a Lightning cable (Lightning cable or Apple cable).

[0039] In some embodiments, the external device may be a local / remote storage system for storing various program files or image files, such as but not limited to a computer host, a direct-attached storage (DAS, Distributed Antenna System) device, a network-attached storage (NAS, Network Attached Storage) server, a cloud database, or a remote data center.

[0040] Please refer to Figures 1 to 6 , Figure 6 yes Figure 5 14 is an operational flow chart of some embodiments of the process of continuing step S149. After step S149, the management platform system 10 transmits an error log file Le from the programmable logic circuit 110 to the control circuit 100 via an independent line L6 (step S150), wherein the error log file Le is generated by the programmable logic circuit 110, and the error log file Le is used to record relevant information (such as the time when the error occurred, the cause of the error, or the number of times the error occurred) when an error or damage occurs in the active boot program. In other words, in some embodiments, the management platform system 10 has the function of recording a system error, so that the engineer operating the management platform system 10 can immediately know what the system error is after the control circuit 100 operates normally. In some embodiments, the independent line L6 is only used to transmit the error log file Le without transmitting other files.

[0041] In some embodiments, after the control circuit 100 receives the error log file Le, the control circuit 100 may display the content of the error log file Le on a display device (e.g., an external screen) to notify the engineer that an error has occurred in the system. In other embodiments, the control circuit 100 may also store the error log file Le in the first storage circuit 120, so that the engineer can check the content of the error log file Le at any time to confirm whether an error has occurred in the system.

[0042] In some embodiments, the control circuit 100 may be a hardware element with a control function, such as but not limited to a baseboard management controller (BMC), a central processing unit (CPU), a microprocessor (Microprocessor), a digital signal processor (DSP), an application specific integrated circuit (ASIC) or a microcontroller unit (MCU).

[0043] In some embodiments, the programmable logic circuit 110 may be a hardware component with a firmware programming function, such as but not limited to a complex programmable logic device (CPLD) or a field programmable gate array (FPGA). In other words, the functions of each device in the programmable logic circuit 110 (including the control module 111, the detection module 112, and the access module 113) are implemented by the firmware burned into the programmable logic circuit 110.

[0044] In some embodiments, the first storage circuit 120 and the second storage circuit 140 may be storage elements with read and write functions, such as but not limited to non-volatile memory or flash memory. In other embodiments, the second storage circuit 140 may be a storage element with only a read function but not a write function, so that the backup boot program stored in the second storage circuit 140 cannot be modified to ensure its correctness and integrity. The second storage circuit 140 may be, for example, a read-only memory (ROM) or a flash memory with a write function disabled, but is not limited thereto.

[0045] In some embodiments, the capacity of the second storage circuit 140 is smaller than the capacity of the first storage circuit 120, and the second storage circuit 140 does not store the active image file or (backup image file Img), nor does it store the firmware main program (or backup firmware main program) corresponding to the active image file (or backup image file Img). Since the file size of the active boot program (or backup boot program) is smaller than the file size of the active image file (or backup image file Img), and the second storage circuit 140 only stores the backup boot program but does not have the active image file (or backup image file Img) or the backup firmware main program, the second storage circuit 140 can select a storage element with a smaller capacity than the first storage circuit 120 to save the cost of the management platform system 10. For example, in some embodiments, the file size of the active boot program (or backup boot program) is, for example but not limited to, 2 megabits (i.e., 2Mb), and the file size of the active image file (or backup image file Img) is between 64Mb and 128Mb, but is not limited thereto. Therefore, the capacity of the first storage circuit 120 must be at least greater than 130 Mb. In contrast, the capacity of the second storage circuit 140 only needs to be greater than 2 Mb.

[0046] In some embodiments, the selection circuit 130 may be a hardware element having a path selection function, such as but not limited to a multiplexer (MUX) or a switch.

[0047] In some embodiments, the power circuit 150 may be a hardware component having a power conversion function, such as but not limited to an analog-to-digital converter (ADC), a digital-to-analog converter (DAC), a rectifier or an inverter.

[0048] In some embodiments, the communication circuit 160 can be a hardware component with wired communication function or wireless communication function, such as but not limited to a USB connector, a Type-C connector, a Lightning connector, a Wi-Fi chip, a Bluetooth chip, or a two-in-one wireless chip with both Wi-Fi and Bluetooth functions.

[0049] In some embodiments, lines L1 to L5 and the independent line L6 can be transmission channels or transmission interfaces with data transmission functions, such as but not limited to a general-purpose input / output (GPIO) interface, a serial general-purpose input / output (SGPIO) interface, a serial peripheral interface (SPI) bus, a low-voltage differential signaling channel protocol and interface (LTPI), a system management bus (SMBus) or a universal asynchronous receiver / transmitter (UART).

[0050] In summary, according to some embodiments, when an active boot program stored in the first storage circuit is erroneous or damaged, the management platform system writes the backup boot program stored in the second storage circuit into the first storage circuit to repair the active boot program. In this way, the control circuit can download and install the corresponding image file, thereby allowing the control circuit to normally execute its corresponding firmware main program to perform various functions of the control circuit.

[0051] The above is only a specific embodiment of the present invention, but the protection scope of the present invention is not limited thereto. Any person skilled in the art can easily think of changes or substitutions within the technical scope disclosed by the present invention, which should be included in the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims

1. A management platform system, characterized in that: Include: A control circuit having an output pin, a reset pin and a transmission interface; A programmable logic circuit is electrically connected to the control circuit, and the programmable logic circuit includes: a control module; a detection module, used to detect the logic level of the output pin; and an access module; A first storage circuit for storing an active boot program and an active image file; a selection circuit electrically connected to the transmission interface of the control circuit, the programmable logic circuit and the first storage circuit, for selecting a transmission target of the first storage circuit, wherein the transmission target is selected from the control circuit or the programmable logic circuit; as well as a second storage circuit, electrically connected to the programmable logic circuit, for storing a backup boot program; The control circuit is used to execute at least one of the active boot program, the active image file and the backup boot program; The control module is further used to control the detection module to generate a reset signal to the reset pin to enable or disable the control circuit, control the detection module to generate a selection signal to the selection circuit to select the transmission target of the first storage circuit, and write the backup boot program stored in the second storage circuit into the first storage circuit via the access module.

2. The management platform system according to claim 1, characterized in that: The invention further comprises an independent circuit which is arranged between the control circuit and the programmable logic circuit, wherein the programmable logic circuit is further used to transmit an error log file to the control circuit via the independent circuit.

3. The management platform system according to claim 1, characterized in that: The invention further comprises a power circuit which is electrically connected to the control circuit and is used for generating a supply power.

4. The management platform system according to claim 1, characterized in that: The invention further comprises a communication circuit electrically connected to the control circuit, wherein the communication circuit is used to electrically connect to an external device via a transmission medium to receive a backup image file corresponding to the control circuit.

5. The management platform system according to claim 1, characterized in that: The capacity of the second storage circuit is smaller than the capacity of the first storage circuit.

6. A boot program repair method, suitable for a management platform system, the management platform system comprising a control circuit, a programmable logic circuit, a first storage circuit, a selection circuit and a second storage circuit, characterized in that: The bootloader repair method includes: receiving a power supply via the control circuit; Executing an active boot program stored in the first storage circuit; Detecting a logic level of an output pin of the control circuit; as well as When the logic level of the output pin is a high logic level, the following steps are performed: Disabling the control circuit according to the logic level of a corresponding reset signal generated by a detection module of the programmable logic circuit; Selecting a transmission target of the first storage circuit as the programmable logic circuit according to the logic level of a corresponding selection signal generated by the detection module; Writing a backup boot program stored in the second storage circuit into the first storage circuit; Selecting the transmission target of the first storage circuit as the control circuit according to the corresponding logic level of the selection signal; and The control circuit is enabled according to the change of the reset signal.

7. The boot program repair method according to claim 6, characterized in that: The management platform system further includes a communication circuit, and the boot program repair method further includes, after the step of enabling the control circuit via a reset pin of the control circuit: Executing the backup boot program stored in the first storage circuit; Detecting the logic level of the output pin of the control circuit; and When the logic level of the output pin is a low voltage logic level, the following steps are performed: electrically connected to an external device via a transmission medium; and A backup image file corresponding to the control circuit is received.

8. The boot program repair method according to claim 7, characterized in that: The management platform system further includes an independent circuit, and the boot program repair method further includes: An error log file is transmitted from the programmable logic circuit to the control circuit via the independent line.

9. The boot program repair method according to claim 6, characterized in that: The management platform system further includes a power circuit, which is used to generate the supply power.

10. The boot program repair method according to claim 6, characterized in that: The capacity of the second storage circuit is smaller than the capacity of the first storage circuit.

Images