The invention relates to the technical field of
spacecraft electronic systems, and discloses a
satellite-borne computer multi-stage fault-tolerant starting method which comprises the following steps: step 1, a management FPGA (
Field Programmable Gate Array) reads a starting source identification bit of a BIOSBOOT register, and selects a main
BIOS (Basic Input / Output
System) storage address or a standby
BIOS storage address according to an identification bit value; 2, the management FPGA starts a
BIOS level
watchdog timer corresponding to the BIOS storage address, and the duration of the
timer is configured by a BIOSWDT register; and 3, when the BIOS-level
watchdog timer is overtime and does not receive the reset
signal, the management FPGA modifies the starting source identification bit of the BIOSBOOT register, and a
system reset
signal is generated. According to the method, the management FPGA is taken as a core, and a double-BIOS redundant architecture and a multi-disk hot standby mechanism are combined, so that the problem of
system startup single-point failure caused by BIOS
firmware code bit flipping or startup disk physical damage is solved, autonomous fault-tolerant
recovery of
firmware and a storage medium is realized, and the defect that an existing single-BIOS single-storage-medium architecture cannot self-repair hardware failure is overcome.