M29W128GH M29W128GL 128-Mbit (16 Mbit x8 or 8 Mbit x16, page, uniform block) 3 V supply flash memory Features BGA Supply voltage - VCC = 2.7 to 3.6 V for program, erase, read - VCCQ = 1.65 to 3.6 V for I/O buffers - VPPH = 12 V for fast program (optional) TSOP56 (N) 14 x 20 mm Asynchronous random/page read - Page size: 8 words or 16 bytes - Page access: 25, 30 ns - Random access: 60 (only available upon customer request) or 70, 80 ns TBGA64 (ZA) 10 x 13 mm BGA FBGA (ZS) 11 x 13 mm Unlock Bypass/Block Erase/Chip Erase/Write to Buffer/Enhanced Buffer Program commands - Faster production/batch programming - Faster block and chip erase Fast program commands - 32 words (64-byte write buffer) VPP/WP pin for fast program and write: protects first or last block regardless of block protection settings Enhanced buffered program commands - 256 words Software protection: - Volatile protection - Non-volatile protection - Password protection Programming time - 16 s per byte/word typical - Chip program time: 5 s with VPPH and 8 s without VPPH Common flash interface - 64-bit security code Memory organization - M29128GH/L: 128 main blocks, 128 Kbytes/64 Kwords each 128-word extended memory block - Extra block used as security block or to store additional information Program/erase controller - Embedded byte/word program algorithms Low power consumption - Standby and automatic standby Program/ erase suspend and resume - Read from any block during program suspend - Read and program another block during erase suspend Minimum 100,000 program/erase cycles per block RoHS compliant packages Automotive device grade: Temperature -40 C to 125 C (Automotive grade certified) Table 1. Device summary Root part number Device code M29W128GH: uniform, last block protected by VPP/WP 227Eh + 2221h + 2201h M29W128GL: uniform, first block protected by VPP/WP 227Eh + 2221h + 2200h August 2010 Rev 11 1/94 www.numonyx.com 1 Contents M29W128GH, M29W128GL Contents 1 Description . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8 2 Signal descriptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 3 4 2/94 2.1 Address inputs (A0-A22) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 2.2 Data inputs/outputs (DQ0-DQ7) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 2.3 Data inputs/outputs (DQ8-DQ14) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 2.4 Data inputs/outputs or address inputs (DQ15A-1) . . . . . . . . . . . . . . . . . . 13 2.5 Chip enable (E) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 2.6 Output enable (G) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13 2.7 Write enable (W) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 2.8 VPP/write protect (VPP/WP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 2.9 Reset (RP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 2.10 Ready/busy output (RB) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 2.11 Byte/word organization select (BYTE) . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 2.12 VCC supply voltage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 2.13 VCCQ input/output supply voltage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15 2.14 Vss ground . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16 Bus operations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 3.1 Bus read . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 3.2 Bus write . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 3.3 Output disable . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 3.4 Standby . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17 3.5 Reset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 3.6 Automatic standby . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 3.7 Auto select mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 3.7.1 Read electronic signature . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18 3.7.2 Verify extended memory block protection indicator . . . . . . . . . . . . . . . . 19 3.7.3 Verify block protection status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 3.7.4 Hardware block protect . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19 Hardware protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 M29W128GH, M29W128GL 5 Software protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23 5.1 Volatile protection mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 5.2 Non-volatile protection mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 5.3 6 Contents 5.2.1 Non-volatile protection bits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24 5.2.2 Non-volatile protection bit lock bit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25 Password protection mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25 Command interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27 6.1 6.2 6.3 Standard commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27 6.1.1 Read/Reset command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27 6.1.2 Auto Select command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27 6.1.3 Read CFI Query command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 6.1.4 Chip Erase command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 6.1.5 Block Erase command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28 6.1.6 Erase Suspend command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29 6.1.7 Erase Resume command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 6.1.8 Program Suspend command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 6.1.9 Program Resume command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30 6.1.10 Program command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31 Fast program commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 6.2.1 Write to Buffer Program command . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34 6.2.2 Enhanced Buffered Program command . . . . . . . . . . . . . . . . . . . . . . . . 35 6.2.3 Buffered Program Abort Reset command . . . . . . . . . . . . . . . . . . . . . . . 36 6.2.4 Write to Buffer Program Confirm command . . . . . . . . . . . . . . . . . . . . . . 37 6.2.5 Enhanced Buffered Program Confirm command . . . . . . . . . . . . . . . . . . 37 6.2.6 Unlock Bypass command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37 6.2.7 Unlock Bypass Program command . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37 6.2.8 Unlock Bypass Block Erase command . . . . . . . . . . . . . . . . . . . . . . . . . 38 6.2.9 Unlock Bypass Chip Erase command . . . . . . . . . . . . . . . . . . . . . . . . . . 38 6.2.10 Unlock Bypass Write to Buffer Program command . . . . . . . . . . . . . . . . 38 6.2.11 Unlock Bypass Enhanced Buffered Program command . . . . . . . . . . . . 38 6.2.12 Unlock Bypass Reset command . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Protection commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 6.3.1 Enter Extended Memory Block command . . . . . . . . . . . . . . . . . . . . . . . 41 6.3.2 Exit Extended Memory Block command . . . . . . . . . . . . . . . . . . . . . . . . 42 6.3.3 Lock register command set . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 3/94 Contents 7 M29W128GH, M29W128GL 6.3.4 Password protection mode command set . . . . . . . . . . . . . . . . . . . . . . . 42 6.3.5 Non-volatile protection mode command set . . . . . . . . . . . . . . . . . . . . . 43 6.3.6 NVPB lock bit command set . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45 6.3.7 Volatile protection mode command set . . . . . . . . . . . . . . . . . . . . . . . . . 45 6.3.8 Exit Protection Command Set command . . . . . . . . . . . . . . . . . . . . . . . . 45 Registers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50 7.1 7.2 7.3 Lock register . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50 7.1.1 Password protection mode lock bit (DQ2) . . . . . . . . . . . . . . . . . . . . . . . 50 7.1.2 Non-volatile protection mode lock bit (DQ1) . . . . . . . . . . . . . . . . . . . . . 50 7.1.3 Extended block protection bit (DQ0) . . . . . . . . . . . . . . . . . . . . . . . . . . . 50 7.1.4 DQ15 to DQ3 reserved . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50 Status register . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 7.2.1 Data polling bit (DQ7) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 7.2.2 Toggle bit (DQ6) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 7.2.3 Error bit (DQ5) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53 7.2.4 Erase timer bit (DQ3) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54 7.2.5 Alternative toggle bit (DQ2) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54 Buffered program abort bit (DQ1) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54 8 Maximum ratings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58 9 DC and AC parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 10 Package mechanical . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75 11 Ordering information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78 Appendix A Block addresses and read/modify protection groups . . . . . . . . . . 79 Appendix B Common flash interface (CFI). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83 Appendix C Extended memory block . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88 C.1 Factory locked extended memory block . . . . . . . . . . . . . . . . . . . . . . . . . . 88 C.2 Customer lockable extended memory block . . . . . . . . . . . . . . . . . . . . . . . 89 Appendix D Flowcharts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90 4/94 M29W128GH, M29W128GL 12 Contents Revision history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92 5/94 List of tables M29W128GH, M29W128GL List of tables Table 1. Table 2. Table 3. Table 4. Table 5. Table 6. Table 7. Table 8. Table 9. Table 10. Table 11. Table 12. Table 13. Table 14. Table 15. Table 16. Table 17. Table 18. Table 19. Table 20. Table 21. Table 22. Table 23. Table 24. Table 25. Table 26. Table 27. Table 28. Table 29. Table 30. Table 31. Table 32. Table 33. Table 34. Table 35. Table 36. Table 37. Table 38. Table 39. Table 40. Table 41. Table 42. Table 43. 6/94 Device summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1 Signal names . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 VPP/WP functions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14 Bus operations, 8-bit mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20 Bus operations, 16-bit mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20 Read electronic signature - auto select mode - programmer method (8-bit mode) . . . . . . 21 Read electronic signature - auto select mode - programmer method (16-bit mode) . . . . . 21 Block protection - auto select mode - programmer method (8-bit mode) . . . . . . . . . . . . . . 22 Block protection - auto select mode - programmer method (16-bit mode) . . . . . . . . . . . . . 22 Standard commands, 8-bit mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32 Standard commands, 16-bit mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33 Fast program commands, 8-bit mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39 Fast program commands, 16-bit mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 Enhanced buffered program commands, 16-bit mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 Block protection commands, 8-bit mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46 Block protection commands, 16-bit mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48 Program, erase times and program, erase endurance cycles . . . . . . . . . . . . . . . . . . . . . . 49 Lock register bits. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51 Block protection status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51 Status register bits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55 Absolute maximum ratings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58 Operating and AC measurement conditions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 Power-up waiting timings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60 Device capacitance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 DC characteristics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 Read AC characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65 Write AC characteristics, write enable controlled . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68 Write AC characteristics, chip enable controlled. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71 Reset AC characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72 Accelerated program and data polling/data toggle AC characteristics . . . . . . . . . . . . . . . . 74 TSOP56 - 56 lead plastic thin small outline, 14 x 20 mm, package mechanical data . . . . 75 TBGA64 10 x 13 mm - 8 x 8 active ball array, 1 mm pitch, package mechanical data. . . . 76 FBGA64 11 x 13 mm--8 x 8 active ball array, 1 mm pitch, package mechanical data . . . 77 Ordering information scheme . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78 Block addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79 Query structure overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83 CFI query identification string . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83 CFI query system interface information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84 Device geometry definition . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85 Primary algorithm-specific extended query table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86 Security code area . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87 Extended memory block address and data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89 Document revision history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92 M29W128GH, M29W128GL List of figures List of figures Figure 1. Figure 2. Figure 3. Figure 4. Figure 5. Figure 6. Figure 7. Figure 8. Figure 9. Figure 10. Figure 11. Figure 12. Figure 13. Figure 14. Figure 15. Figure 16. Figure 17. Figure 18. Figure 19. Figure 20. Figure 21. Figure 22. Figure 23. Figure 24. Figure 25. Figure 26. Figure 27. Figure 28. Figure 29. Figure 30. Figure 31. Logic diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9 TSOP connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10 TBGA and FBGA connections (top view through package) . . . . . . . . . . . . . . . . . . . . . . . . 11 Block addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 Software protection scheme . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26 NVPB program/erase algorithm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44 Lock register program flowchart . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52 Data polling flowchart . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56 Data toggle flowchart . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57 AC measurement load circuit . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 AC measurement I/O waveform . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60 Power-up waiting timings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60 Random read AC waveforms (8-bit mode) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 Random read AC waveforms (16-bit mode) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 BYTE transition AC waveforms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 Page read AC waveforms (16-bit mode) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64 Write enable controlled program waveforms (8-bit mode) . . . . . . . . . . . . . . . . . . . . . . . . . 66 Write enable controlled program waveforms (16-bit mode) . . . . . . . . . . . . . . . . . . . . . . . . 67 Chip enable controlled program waveforms (8-bit mode) . . . . . . . . . . . . . . . . . . . . . . . . . . 69 Chip enable controlled program waveforms (16-bit mode) . . . . . . . . . . . . . . . . . . . . . . . . . 70 Chip/block erase waveforms (8-bit mode) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71 Reset AC waveforms (no program/erase ongoing). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72 Reset during program/erase operation AC waveforms. . . . . . . . . . . . . . . . . . . . . . . . . . . . 72 Accelerated program timing waveforms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73 Data polling AC waveforms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73 Toggle/alternative toggle bit polling AC waveforms (8-bit mode) . . . . . . . . . . . . . . . . . . . . 74 TSOP56 - 56 lead plastic thin small outline, 14 x 20 mm, package outline, top view . . . . 75 TBGA64 10 x 13 mm - 8 x 8 active ball array, 1 mm pitch, package outline, bottom view . 76 FBGA64 11 x 13 mm--8 x 8 active ball array, 1 mm pitch, package outline, bottom view. 77 Write to buffer program flowchart and pseudocode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90 Enhanced buffered program flowchart and pseudocode . . . . . . . . . . . . . . . . . . . . . . . . . . 91 7/94 Description 1 M29W128GH, M29W128GL Description The M29W128GH and M29W128GL are 128-Mbit (8 Mbit x16 or 16 Mbit x8) non-volatile flash memories that can be read, erased and reprogrammed. These operations can be performed using a single low voltage (2.7 to 3.6 V) supply. On power-up the memory defaults to its read mode. The memory array is divided into 64-Kword/128-Kbyte uniform blocks that can be erased independently so it is possible to preserve valid data while old data is erased. Program and Erase commands are written to the command interface of the memory. An on-chip program/erase controller simplifies the process of programming or erasing the memory by taking care of all of the special operations that are required to update the memory contents. The end of a program or erase operation can be detected and any error conditions identified. The command set required to control the memory is consistent with JEDEC standards. Chip Enable, Output Enable and Write Enable signals control the bus operation of the memory. They allow simple connection to most microprocessors, often without additional logic. The M29W128GH and M29W128GL support asynchronous random read and page read from all blocks of the memory array. The devices also feature a write to buffer program capability that improves the programming throughput by programming in one shot a buffer of 32 words/64 bytes. The enhanced buffered program feature is also available to speed up the programming throughput, allowing to program 256 words in one shot (only in x16 mode). The VPP/WP signal can be used to enable faster programming of the device. The M29W128GH and M29W128GL have an extra block, the extended block, of 128 words in x16 mode or of 256 bytes in x8 mode that can be accessed using a dedicated command. The extended block can be protected and so is useful for storing security information. However the protection is not reversible, once protected the protection cannot be undone. The device features different levels of hardware and software block protection to avoid unwanted program or erase (modify): Hardware protection: - The VPP/WP provides a hardware protection of the highest and lowest block on the M29W128GH, M29W128GL, respectively. Software protection: - Volatile protection - Non-volatile protection - Password protection The M29W128GH and M29W128GL are offered in TSOP56 (14 x 20 mm), and TBGA64 (10 x 13 mm, 1 mm pitch), packages. The memories are delivered with all the bits erased (set to `1'). 8/94 M29W128GH, M29W128GL Table 2. Description Signal names Name A0-A22 Description Direction Address inputs Inputs DQ0-DQ7 Data inputs/outputs I/O DQ8-DQ14 Data inputs/outputs I/O Data input/output or address input I/O DQ15A-1 E Chip enable Input G Output enable Input W Write enable Input RP Reset Input RB Ready/busy output Output BYTE Byte/word organization select VCCQ Input/output buffer supply voltage Supply Supply voltage Supply VCC VPP/WP(1) Input VPP/write protect Supply/Input VSS Ground - NC Not connected - 1. VPP/WP may be left floating as it is internally connected to a pull-up resistor which enables program/erase operations. Figure 1. Logic diagram VCC VCCQ VPP/WP 23 15 A0-A22 DQ0-DQ14 DQ15A-1 W E M29W128GH M29W128GL G RB RP BYTE VSS AI13330b 1. Also see Appendix A and Table 35 for a full listing of the block addresses. 9/94 Description Figure 2. M29W128GH, M29W128GL TSOP connections NC A22 A15 A14 A13 A12 A11 A10 A9 A8 A19 A20 W RP A21 VPP/WP RB A18 A17 A7 A6 A5 A4 A3 A2 A1 NC NC 1 56 14 43 M29W128GH 15 M29W128GL 42 28 29 NC NC A16 BYTE VSS DQ15A-1 DQ7 DQ14 DQ6 DQ13 DQ5 DQ12 DQ4 VCC DQ11 DQ3 DQ10 DQ2 DQ9 DQ1 DQ8 DQ0 G VSS E A0 NC VCCQ AI13331b 10/94 M29W128GH, M29W128GL Figure 3. Description TBGA and FBGA connections (top view through package) 6 7 8 W A9 A13 NC VPP/WP RP A8 A12 A22 A6 A18 A21 A10 A14 NC A1 A5 A20 A19 A11 A15 VCCQ A0 DQ0 DQ2 DQ5 DQ7 A16 VSS E DQ8 DQ10 DQ12 DQ14 BYTE NC G DQ9 DQ11 VCC DQ13 DQ15 A-1 NC VSS DQ1 DQ3 DQ4 DQ6 VSS NC 1 2 3 4 5 A NC A3 A7 RB B NC A4 A17 C NC A2 D NC E NC F VCCQ G NC H NC AI11527c 11/94 Description Figure 4. M29W128GH, M29W128GL Block addresses (x8) Address lines A22-A0, DQ15A-1 FFFFFFh (x16) Address lines A22-A0 7FFFFFh 128 Kbytes 64 Kwords Total of 128 uniform blocks 03FFFFh 64 Kwords 128 Kbytes 020000h 01FFFFh 00FFFFh 128 Kbytes 000000h 64 Kwords 000000h AI13332 12/94 M29W128GH, M29W128GL 2 Signal descriptions Signal descriptions See Figure 1: Logic diagram, and Table 2: Signal names, for a brief overview of the signals connected to this device. 2.1 Address inputs (A0-A22) The address inputs select the cells in the memory array to access during bus read operations. During bus write operations they control the commands sent to the command interface of the program/erase controller. 2.2 Data inputs/outputs (DQ0-DQ7) The data I/O outputs the data stored at the selected address during a bus read operation. During bus write operations they represent the commands sent to the command interface of the internal state machine. 2.3 Data inputs/outputs (DQ8-DQ14) The data I/O outputs the data stored at the selected address during a bus read operation when BYTE is High, VIH. When BYTE is Low, VIL, these pins are not used and are high impedance. During bus write operations the command register does not use these bits. When reading the status register these bits should be ignored. 2.4 Data inputs/outputs or address inputs (DQ15A-1) When the device is in x 16 bus mode, this pin behaves as a data input/output pin (as DQ8DQ14). When the device operates in x 8 bus mode, this pin behaves as the least significant bit of the address. Throughout the text consider references to the data input/output to include this pin when the device operates in x 16 bus mode and references to the address inputs to include this pin when the device operates in x 8 bus mode except when stated explicitly otherwise. 2.5 Chip enable (E) The chip enable pin, E, activates the memory, allowing bus read and bus write operations to be performed. When chip enable is High, VIH, all other pins are ignored. 2.6 Output enable (G) The output enable pin, G, controls the bus read operation of the memory. 13/94 Signal descriptions 2.7 M29W128GH, M29W128GL Write enable (W) The write enable pin, W, controls the bus write operation of the memory's command interface. 2.8 VPP/write protect (VPP/WP) The VPP/write protect pin provides two functions. The VPPH function allows the memory to use an external high voltage power supply to reduce the time required for program operations. This is achieved by bypassing the unlock cycles. The write protect function provides a hardware method of protecting the highest or lowest block (see Section 1: Description). When VPP/write protect is Low, VIL, the highest or lowest block is protected. Program and erase operations on this block are ignored while VPP/write protect is Low. When VPP/write protect is High, VIH, the memory reverts to the previous protection status of the highest or lowest block. Program and erase operations can now modify the data in this block unless the block is protected using block protection. When VPP/write protect is raised to VPPH the memory automatically enters the unlock bypass mode (see Section 6.2.6). When VPP/write protect is raised to VPPH, the execution time of the command is lower (see Table 17: Program, erase times and program, erase endurance cycles). When VPP/write protect returns to VIH or VIL normal operation resumes. During unlock bypass program operations the memory draws IPP from the pin to supply the programming circuits. See the description of the Unlock Bypass command in the command interface section. The transitions from VIH to VPPH and from VPPH to VIH must be slower than tVHVPP (see Figure 24: Accelerated program timing waveforms). Never raise VPP/write protect to VPPH from any mode except read mode, otherwise the memory may be left in an indeterminate state. A 0.1 F capacitor should be connected between the VPP/write protect pin and the VSS ground pin to decouple the current surges from the power supply. The PCB track widths must be sufficient to carry the currents required during unlock bypass program (see IPP1, IPP2, IPP3, IPP4 in Table 25: DC characteristics). The VPP/write protect pin may be left floating or unconnected because it features an internal pull-up. Refer to Table 3 for a summary of VPP/WP functions. Table 3. VPP/WP functions VPP/WP VIL Highest block protected on M29W128GH. Lowest block protected on M29W128GL. VIH Highest and lowest block unprotected unless a software protection is activated (see Section 4: Hardware protection). VPPH 14/94 Function Unlock bypass mode. It supplies the current needed to speed up programming. M29W128GH, M29W128GL 2.9 Signal descriptions Reset (RP) The reset pin can be used to apply a hardware reset to the memory. A hardware reset is achieved by holding reset Low, VIL, for at least tPLPX. After reset goes High, VIH, the memory will be ready for bus read and bus write operations after tPHEL or tRHEL, whichever occurs last. See Section 2.10: Ready/busy output (RB), Table 29: Reset AC characteristics, Figure 22 and Figure 23 for more details. 2.10 Ready/busy output (RB) The ready/busy pin is an open-drain output that can be used to identify when the device is performing a program or erase operation. During program or erase operations ready/busy is Low, VOL (see Table 20: Status register bits). Ready/busy is high-impedance during read mode, auto select mode and erase suspend mode. After a hardware reset, bus read and bus write operations cannot begin until ready/busy becomes high-impedance. See Table 29: Reset AC characteristics, Figure 22 and Figure 23. The use of an open-drain output allows the ready/busy pins from several memories to be connected to a single pull-up resistor. A Low will then indicate that one, or more, of the memories is busy. 2.11 Byte/word organization select (BYTE) It is used to switch between the x8 and x16 bus modes of the memory. When byte/word organization select is Low, VIL, the memory is in x8 mode, when it is High, VIH, the memory is in x16 mode. 2.12 VCC supply voltage VCC provides the power supply for all operations (read, program and erase). The command interface is disabled when the VCC supply voltage is less than the lockout voltage, VLKO. This prevents bus write operations from accidentally damaging the data during power-up, power-down and power surges. If the program/erase controller is programming or erasing during this time then the operation aborts and the memory contents being altered will be invalid. A 0.1 F capacitor should be connected between the VCC supply voltage pin and the VSS ground pin to decouple the current surges from the power supply. The PCB track widths must be sufficient to carry the currents required during program and erase operations (see ICC1, ICC2, ICC3 in Table 25: DC characteristics). 2.13 VCCQ input/output supply voltage VCCQ provides the power supply to the I/O pins and enables all outputs to be powered independently from VCC. 15/94 Signal descriptions 2.14 M29W128GH, M29W128GL Vss ground VSS is the reference for all voltage measurements. The device features two VSS pins both of which must be connected to the system ground. 16/94 M29W128GH, M29W128GL 3 Bus operations Bus operations There are five standard bus operations that control the device. These are bus read (random and page modes), bus write, output disable, standby and automatic standby. See Table 4: Bus operations, 8-bit mode and Table 5: Bus operations, 16-bit mode for a summary. Typical glitches of less than 5 ns on chip enable, write enable, and reset pins are ignored by the memory and do not affect bus operations. 3.1 Bus read Bus read operations read from the memory cells, or specific registers in the command interface. To speed up the read operation the memory array can be read in page mode where data is internally read and stored in a page buffer. The page has a size of 8 words (or 16 bytes) and each word in the page is addressed by the address inputs A2-A0 in x 16 mode and A2-A0 plus DQ15A-1 in byte mode. A valid bus read operation involves setting the desired address on the address inputs, applying a Low signal, VIL, to chip enable and output enable and keeping write enable High, VIH. The data inputs/outputs will output the value, see Figure 13: Random read AC waveforms (8-bit mode), Figure 16: Page read AC waveforms (16-bit mode), and Table 26: Read AC characteristics, for details of when the output becomes valid. 3.2 Bus write Bus write operations write to the command interface. A valid bus write operation begins by setting the desired address on the address inputs. The address inputs are latched by the command interface on the falling edge of chip enable or write enable, whichever occurs last. The Data inputs/outputs are latched by the command interface on the rising edge of chip enable or write enable, whichever occurs first. Output enable must remain High, VIH, during the whole bus write operation. See Figure 17, and Figure 18, Write AC waveforms, and Table 27 and Table 28, Write AC characteristics, for details of the timing requirements. 3.3 Output disable The data inputs/outputs are in the high impedance state when output enable is High, VIH. 3.4 Standby Driving chip enable High in read mode, causes the memory to enter standby mode and the data inputs/outputs pins are placed in the high-impedance state. To reduce the supply current to the standby supply current, ICC2, chip enable should be held within VCC 0.3 V. For the standby current level see Table 25: DC characteristics. During program or erase operations the memory will continue to use the program/erase supply current, ICC3, for program or erase operations until the operation completes. 17/94 Bus operations 3.5 M29W128GH, M29W128GL Reset During reset mode the memory is deselected and the outputs are high impedance. The memory is in reset mode when RP is at VIL. The power consumption is reduced to the standby level, independently from the chip enable, output enable or write enable inputs. 3.6 Automatic standby Automatic standby allows the memory to achieve low power consumption during read mode. After a read operation, if CMOS levels (VCC 0.3 V) are used to drive the bus and the bus is inactive for tAVQV + 30 ns or more, the memory enters automatic standby where the internal supply current is reduced to the standby supply current, ICC2 (see Table 25: DC characteristics). The data inputs/outputs will still output data if a bus read operation is in progress. The power supplier of data bus, VCCQ, can have a null consumption (depending on load circuits connected with data bus) when the memory enters automatic standby. 3.7 Auto select mode The auto select mode allows the system or the programming equipment to read the electronic signature, verify the protection status of the extended memory block, and apply/remove block protection. For example, this mode can be used by a programming equipment to automatically match a device and the application code to be programmed. There are two methods to enter auto select mode: programmer method: Additional bus operations are used. They require VID to be applied to address pin A9. Refer to Table 6, Table 7, Table 8, and Table 9 for a description of the bus operations required to read the electronic signature using the programmer method in-system method: The auto select mode is entered by issuing the Auto Select command (see Section 6.1.2). It is not necessary to apply VID to A9. At power-up, the device is in read mode, and can then be put in auto select mode by using one of the methods described above. The device cannot enter auto select mode when a program or erase operation is ongoing (RB Low). However, auto select mode can be entered if the erase operation has been suspended by issuing an Erase Suspend command (see Section 6.1.6). The auto select mode is exited by performing a reset. The device is returned to read mode, except if the auto select mode was entered after an Erase Suspend or a Program Suspend command. In this case, it returns to the erase or program suspend mode. 3.7.1 Read electronic signature The memory has two codes, the manufacturer code and the device code used to identify the memory. These codes can be accessed by performing read operations with control signals and addresses set as shown in Table 6: Read electronic signature - auto select mode - 18/94 M29W128GH, M29W128GL Bus operations programmer method (8-bit mode) and Table 7: Read electronic signature - auto select mode - programmer method (16-bit mode). These codes can also be accessed by issuing an Auto Select command (see Section 6.1.2: Auto Select command). 3.7.2 Verify extended memory block protection indicator The extended memory block is either factory locked or customer lockable. The protection status of the extended memory block (factory locked or customer lockable) can be accessed by reading the extended memory block protection indicator. It can be read in auto select mode using either the programmer (see Table 8 and Table 9) or the in-system method (see Table 10 and Table 11). The protection status of the extended memory block is then output on bit DQ7 of the data input/outputs (see Table 4 and Table 5, Bus operations in 8-bit and 16-bit mode). 3.7.3 Verify block protection status The protection status of a block can be directly accessed by performing a read operation with control signals and addresses set as shown in Table 8 and Table 9. If the block is protected, then 01h (in x 8 mode) is output on data input/outputs DQ0-DQ7, otherwise 00h is output. 3.7.4 Hardware block protect The VPP/WP pin can be used to protect the highest or lowest block. When VPP/WP is at VIL the highest (M29W128GH) or lowest block (M29W128GL) is protected and remains protected regardless of the block protection status or the reset pin state. 19/94 Bus operations Table 4. M29W128GH, M29W128GL M Bus operations, 8-bit mode Operation(1) Bus read Address Inputs E G VIL VIL W VIH RP Data inputs/outputs VPP/WP VIH X (2) A22-A0, DQ15A-1 DQ14-DQ8 DQ7-DQ0 Cell address Hi-Z Data output Command address Hi-Z Data input(3) Bus write VIL VIH VIL VIH Standby VIH X X VIH X X Hi-Z Hi-Z Output disable VIL VIH VIH VIH X X Hi-Z Hi-Z X X X VIL X X Hi-Z Hi-Z Reset X 1. X = VIL or VIH. 2. If WP is Low, VIL, the outermost block remains protected. 3. Data input as required when issuing a command sequence, performing data polling or block protection. Table 5. Bus operations, 16-bit mode Operation(1) Bus read E VIL G VIL W VIH Address inputs Data inputs/outputs A22-A0 DQ15A-1, DQ14-DQ0 RP VPP/WP VIH X Cell address Data output Command address Data input(3) Bus write VIL VIH VIL VIH X(2) Standby VIH X X VIH X X Hi-Z Output disable VIL VIH X X Hi-Z VIL X X Hi-Z Reset X VIH VIH X X 1. X = VIL or VIH. 2. If WP is Low, VIL, the outermost block remains protected. 3. Data input as required when issuing a command sequence, performing data polling or block protection. 20/94 M29W128GH, M29W128GL Table 6. Bus operations Read electronic signature - auto select mode - programmer method (8-bit mode) Address inputs Read cycle(1) E G W A22-A10 A9 A8A7 A6 A5-A4 A3 A2 A1 A0 DQ15A-1 DQ14-DQ8 Manufacture r code Device code (cycle 1) Device code (cycle 2) VIL VIL VIH X VID (2) X Data inputs/outputs VIL DQ7-DQ0 VIL VIL VIL VIL X X 20h VIL VIL VIL VIH X X 7Eh (both devices) VIH VIH VIH VIL X X 21h (both devices) VIH VIH VIH VIH X X 01h (M29W128GH) 00h (M29W128GL) X Device code (cycle 3) 1. X = VIL or VIH. 2. When using the in-system method, applying VID to A9 is not required. A9 can be either VIL or VIH. Table 7. Read electronic signature - auto select mode - programmer method (16-bit mode) Address inputs Read cycle(1) E G Data inputs/outputs W A5-A4 A3 A2 A1 A0 DQ15A-1, DQ14-DQ0 Manufacturer code VIL VIL VIL VIL 0020h Device code (cycle 1) VIL VIL VIL VIH 227Eh (both devices) VIH VIH VIH VIL 2221h (both devices) VIH VIH VIH VIH 2201h (M29W128GH) 2200h (M29W128GL) Device code (cycle 2) A22-A10 A9 A8-A7 VIL VIL VIH Device code (cycle 3) X VID (2) X A6 VIL X 1. X = VIL or VIH. 2. When using the in-system method, applying VID to A9 is not required. A9 can be either VIL or VIH. 21/94 Bus operations Table 8. M29W128GH, M29W128GL Block protection - auto select mode - programmer method (8-bit mode) Address inputs Operation(1) Verify extended memory block protection indicator (bit DQ7) E G W Data inputs/outputs DQ15 DQ14 A5- A3A8A22- A14A1 A0 A6 A9 A-1 -DQ8 A4 A2 A7 A16 A10 DQ7-DQ0 89h (factory locked) 09h (customer lockable) M29W128GL X M29W128GH VIL VIL VIH Verify block protection status X VID (2) VIH X VIL X VIL VIH BAd X X 99h (factory locked) 19h (customer lockable) 01h (protected) 00h (unprotected) VIL 1. X = VIL or VIH. BAd any address in the block. 2. When using the in-system method, applying VID to A9 is not required. A9 can be either VIL or VIH. Table 9. Block protection - auto select mode - programmer method (16-bit mode) Address inputs Operation(1) Verify extended memory block indicator (bit DQ7) E G W A22A16 A14A10 A9 A8A6 A7 A5A4 Data inputs/outputs A3A2 A1 A0 0089h (factory locked) 0009h (customer lockable) M29W128GL X M29W128GH VIL VIL VIH Verify block protection status X BAd VID (2) VIH X VIL X VIL VIH VIL 1. X = VIL or VIH. BAd any address in the block. 2. When using the in-system method, applying VID to A9 is not required. A9 can be either VIL or VIH. 22/94 DQ15A-1, DQ14-DQ0 0099h (factory locked) 0019h (customer lockable) 0001h (protected) 0000h (unprotected) M29W128GH, M29W128GL 4 Hardware protection Hardware protection The M29W128GH and M29W128GL feature a VPP/WP pin that protects the highest or lowest block. Refer to Section 2: Signal descriptions for a detailed description of the signal. 5 Software protection The M29W128GH and M29W128GL have three different software protection modes: Volatile protection Non-volatile protection Password protection On first use all parts default to operate in non-volatile protection mode and the customer is free to activate the non-volatile or the password protection mode. The desired protection mode is activated by setting either the one-time programmable nonvolatile protection mode lock bit, or the password protection mode lock bit of the lock register (see Section 7.1: Lock register). Programming the non-volatile protection mode lock bit or the password protection mode lock bit, to `0' will permanently activate the non-volatile or the password protection mode, respectively. These two bits are one-time programmable and non-volatile: once the protection mode has been programmed, it cannot be changed and the device will permanently operate in the selected protection mode. It is recommended to activate the desired software protection mode when first programming the device. The non-volatile and password protection modes both provide non-volatile protection. Volatilely protected blocks and non-volatilely protected blocks can co-exist within the memory array. However, the volatile protection only control the protection scheme for blocks that are not protected using the non-volatile or password protection. If the user attempts to program or erase a protected block, the device ignores the command and returns to read mode. The device is shipped with all blocks unprotected. The block protection status can be read either by performing a read electronic signature (see Table 6 and Table 7) or by issuing an Auto Select command (see Table 19: Block protection status). For the lowest and highest blocks, an even higher level of block protection can be achieved by locking the blocks using the non-volatile protection and then by holding the VPP/WP pin Low. 23/94 Software protection 5.1 M29W128GH, M29W128GL Volatile protection mode The volatile protection allows the software application to easily protect blocks against inadvertent change. However, the protection can be easily disabled when changes are needed. Volatile protection bits, VPBs, are volatile and unique for each block and can be individually modified. VPBs only control the protection scheme for unprotected blocks that have their non-volatile protection bits, NVPBs, cleared (erased to `1') (see Section 5.2: Nonvolatile protection mode and Section 6.3.5: Non-volatile protection mode command set). By issuing the VPB Program or VPB Clear commands, the VPBs are set (programmed to `0') or cleared (erased to `1'), thus placing each block in the protected or unprotected state respectively. The VPBs can be set (programmed to `0') or cleared (erased to `1') as often as needed. When the parts are first shipped, or after a power-up or hardware reset, the VPBs can be set or cleared depending upon the ordering option chosen: If the option to clear the VPBs after power-up is selected, then the blocks can be programmed or erased depending on the NVPBs state (see Table 19: Block protection status) If the option to set the VPBs after power-up is selected, the blocks default to be protected. Refer to Section 6.3.7 for a description of the volatile protection mode command set. 5.2 Non-volatile protection mode 5.2.1 Non-volatile protection bits A non-volatile protection bit (NVPB) is assigned to each block. When a NVPB is set to `0', the associated block is protected, preventing any program or erase operations in this block. The NVPB bits are set individually by issuing a NVPB Program command. They are nonvolatile and will remain set through a hardware reset or a power-down/power-up sequence. The NVPBs cannot be cleared individually, they can only be cleared all at the same time by issuing a Clear all Non-volatile Protection bits command. The NVPBs can be protected all at a time by setting a volatile bit, the NVPB lock bit (see Section 5.2.2: Non-volatile protection bit lock bit). If one of the non-volatile protected blocks needs to be unprotected (corresponding NVPB set to `1'), a few more steps are required: Note: 24/94 1. First, the NVPB lock bit must be cleared by either putting the device through a power cycle, or hardware reset 2. The NVPBs can then be changed to reflect the desired settings 3. The NVPB lock bit must be set once again to lock the NVPBs. The device operates normally again. 1 To achieve the best protection, it is recommended to execute the NVPB Lock Bit Program command early in the boot code and to protect the boot code by holding VPP/WP Low, VIL. 2 The NVPBs and VPBs have the same function when VPP/WP pin is High, VIH, as they do when VPP /WP pin is at the voltage for program acceleration (VPPH). M29W128GH, M29W128GL Software protection Refer to Table 19: Block protection status and Figure 5: Software protection scheme for details on the block protection mechanism, and to Section 6.3.5 for a description of the nonvolatile protection mode command set. 5.2.2 Non-volatile protection bit lock bit The non-volatile protection bit lock bit (NVPB lock bit) is a global volatile bit for all blocks. When set (programmed to `0'), it prevents changing the state of the NVPBs. When cleared (programmed to `1'), the NVPBs can be set and reset using the NVPB Program command and Clear all NVPBs command, respectively. There is only one NVPB lock bit per device. Refer to Section 6.3.6 for a description of the NVPB lock bit command set. Note: 5.3 1 No software command unlocks this bit unless the device is in password protection mode; it can be cleared only by taking the device through a hardware reset or a power-up. 2 The NVPB lock bit must be set (programmed to `0') only after all NVPBs are configured to the desired settings. Password protection mode The password protection mode provides an even higher level of security than the nonvolatile protection mode by requiring a 64-bit password for unlocking the device NVPB lock bit. In addition to this password requirement, the NVPB lock bit is set `0' after power-up and reset to maintain the device in password protection mode. Successful execution of the Password Unlock command by entering the correct password clears the NVPB lock bit, allowing for block NVPBs to be modified. If the password provided is not correct, the NVPL lock bit remains locked and the state of the NVPBs cannot be modified. To place the device in password protection mode, the following steps are required: 1. Prior to entering the password protection mode, it is necessary to set a 64-bit password and to verify it (see Password protection mode command set on page 42). Password verification is only allowed during the password programming operation 2. The password protection mode is then activated by programming the password protection mode lock bit to `0'. This operation is not reversible and once the bit is programmed it cannot be erased, the device permanently remains in password protection mode, and the 64-bit password can neither be retrieved nor reprogrammed. Moreover, all commands to the address where the password is stored, are disabled. Refer to Table 19: Block protection status and Figure 5: Software protection scheme for details on the block protection scheme. Refer to Section 6.3.4 for a description of the password protection mode command set. Note: There is no means to verify the password after it is set. If the password is lost after setting the password mode lock bit, there is no way to clear the NVPB lock bit. 25/94 Software protection Figure 5. M29W128GH, M29W128GL Software protection scheme VPB(2) Parameter block or main block Volatile protection NVPB(1) NVPB Lock bit(3) Non-volatile protection Non-volatile protection mode Password protection mode AI13676 1. NVPBs default to `1' (block unprotected) after power-up and hardware reset. A block is protected or unprotected when its NVPB is set to `0' and `1', respectively. NVPBs are programmed individually and cleared collectively. 2. VPB default status depends on ordering option. A block is protected or unprotected when its VPB is set to `0' and `1', respectively. VPBs are programmed and cleared individually. For the volatile protection to be effective, the NVPB lock bit must be set to `0' (NVPB bits unlocked) and the block NVPB must be set to `1' (block unprotected). 3. The NVPB lock bit is volatile and default to `1' (NVPB bits unlocked) after power-up and hardware reset. NVPB bits are locked by setting the NVPB lock bit to `0'. Once programmed to `0', the NVPB lock bit can be reset to `1' only be taking the device through a power-up or hardware reset. 26/94 M29W128GH, M29W128GL 6 Command interface Command interface All bus write operations to the memory are interpreted by the command interface. Commands consist of one or more sequential bus write operations. Failure to observe a valid sequence of bus write operations will result in the memory returning to read mode. The long command sequences are imposed to maximize data security. The address used for the commands changes depending on whether the memory is in 16bit or 8-bit mode. 6.1 Standard commands See either Table 10, or Table 11, depending on the configuration that is being used, for a summary of the standard commands. 6.1.1 Read/Reset command The device is in read mode after reset or after power-up. The Read/Reset command returns the memory to read mode. It also resets the errors in the status register. Either one or three bus write operations can be used to issue the Read/Reset command. The Read/Reset command can be issued, between bus write cycles before the start of a program or erase operation, to return the device to read mode. If the Read/Reset command is issued during the timeout of a block erase operation, the memory will take up to 10 s to abort. During the abort period no valid data can be read from the memory. The Read/Reset command will not abort an erase operation when issued while in erase suspend. 6.1.2 Auto Select command The Auto Select command puts the device in auto select mode, when using the in-system method (see Section 3.7: Auto select mode). When in auto select mode, the system can read the manufacturer code, the device code, the protection status of each block (block protection status) and the extended memory block protection indicator. Three consecutive bus write operations are required to issue the Auto Select command. Once the Auto Select command is issued bus read operations to specific addresses output the manufacturer code, the device code, the extended memory block protection indicator and a block protection status (see Table 10 and Table 11 in conjunction with Table 6, Table 7, Table 8, and Table 9). The memory remains in auto select mode until a Read/Reset or CFI Query command is issued. 27/94 Command interface 6.1.3 M29W128GH, M29W128GL Read CFI Query command The memory contains an information area, named CFI data structure, which contains a description of various electrical and timing parameters, density information and functions supported by the memory. See Appendix B, Table 36, Table 37, Table 38, Table 39, Table 40 and Table 41 for details on the information contained in the common flash interface (CFI) memory area. The Read CFI Query command is used to put the memory in read CFI query mode. Once in read CFI query mode, bus read operations to the memory will output data from the common flash interface (CFI) memory area. One bus write cycle is required to issue the Read CFI Query command. This command is valid only when the device is in the read array or auto select mode. The Read/Reset command must be issued to return the device to the previous mode (the read array mode or auto select mode). A second Read/Reset command is required to put the device in read array mode from auto select mode. 6.1.4 Chip Erase command The Chip Erase command can be used to erase the entire chip. Six bus write operations are required to issue the Chip Erase command and start the program/erase controller. If some block are protected, then these are ignored and all the other blocks are erased. If all of the blocks are protected the Chip Erase operation appears to start but will terminate within about 100 s, leaving the data unchanged. No error condition is given when protected blocks are ignored. During the erase operation the memory will ignore all commands, including the Erase Suspend command. It is not possible to issue any command to abort the operation. Typical chip erase times are given in Table 17. All bus read operations during the chip erase operation will output the status register on the data inputs/outputs. See Section 7.2: Status register for more details. After the chip erase operation has completed the memory will return to the read mode, unless an error has occurred. When an error occurs the memory will continue to output the status register. A Read/Reset command must be issued to reset the error condition and return to read mode. The Chip Erase command sets all of the bits in unprotected blocks of the memory to '1'. All previous data is lost. The chip erase operation is aborted by performing a reset or powering down the device. In this case, data integrity cannot be ensured, and it is recommended to erase again the entire chip. 6.1.5 Block Erase command The Block Erase command can be used to erase a list of one or more blocks. It sets all of the bits in the unprotected selected blocks to '1'. All previous data in the selected blocks is lost. Six bus write operations are required to select the first block in the list. Each additional block in the list can be selected by repeating the sixth bus write operation using the address of the additional block. After the command sequence is written, a block erase timeout occurs. During the timeout period, additional sector addresses and sector erase commands may be written. Once the program/erase controller has started, it is not possible to select any more 28/94 M29W128GH, M29W128GL Command interface blocks. Each additional block must therefore be selected within the timeout period of the last block. The timeout timer restarts when an additional block is selected. After the sixth bus write operation, a bus read operation outputs the status register. See Figure 17: Write enable controlled program waveforms (8-bit mode) and Figure 18: Write enable controlled program waveforms (16-bit mode) for details on how to identify if the program/erase controller has started the block erase operation. After the block erase operation has completed, the memory returns to the read mode, unless an error has occurred. When an error occurs, bus read operations will continue to output the status register. A Read/Reset command must be issued to reset the error condition and return to read mode. If any selected blocks are protected then these are ignored and all the other selected blocks are erased. If all of the selected blocks are protected the block erase operation appears to start but will terminate within about 100 s, leaving the data unchanged. No error condition is given when protected blocks are ignored. During the block erase operation the memory ignores all commands except the Erase Suspend command and the Read/Reset command which is only accepted during the timeout period. Typical block erase time and block erase timeout are given in Table 17. The block erase operation is aborted by performing a reset or powering down the device. In this case, data integrity cannot be ensured, and it is recommended to erase again the blocks aborted. 6.1.6 Erase Suspend command The Erase Suspend command can be used to temporarily suspend a block erase operation. One bus write operation is required to issue the command together with the block address. The program/erase controller suspends the erase operation within the erase suspend latency time of the Erase Suspend command being issued. However, when the Erase Suspend command is written during the block erase timeout, the device immediately terminates the timeout period and suspends the erase operation. Once the program/erase controller has stopped, the memory operates in read mode and the erase is suspended. During erase suspend it is possible to read and execute program or write to buffer program operations in blocks that are not suspended; both read and program operations behave as normal on these blocks. Reading from blocks that are suspended will output the status register. If any attempt is made to program in a protected block or in the suspended block then the Program command is ignored and the data remains unchanged. In this case the status register is not read and no error condition is given. It is also possible to issue the Auto Select (after entering Autoselect mode), Read CFI Query and Unlock Bypass commands during an erase suspend. The Read/Reset command must be issued to return the device to read array mode before the Resume command will be accepted. During erase suspend a bus read operation to the extended memory block will output the extended memory block data. Once in the extended block mode, the Exit Extended Block command must be issued before the erase operation can be resumed. The Erase Suspend command is ignored if written during chip erase operations. Refer to Table 17: Program, erase times and program, erase endurance cycles for the values of block erase timeout and block erase suspend latency time. 29/94 Command interface M29W128GH, M29W128GL If the erase suspend operation is aborted by performing a reset or powering down the device, data integrity cannot be ensured, and it is recommended to erase again the blocks suspended. 6.1.7 Erase Resume command The Erase Resume command is used to restart the program/erase controller after an erase suspend. The device must be in read array mode before the Resume command will be accepted. An erase can be suspended and resumed more than once. 6.1.8 Program Suspend command The Program Suspend command allows the system to interrupt a program operation so that data can be read from any block. When the Program Suspend command is issued during a program operation, the device suspends the program operation within the program suspend latency time (see Table 17: Program, erase times and program, erase endurance cycles) and updates the status register bits. After the program operation has been suspended, the system can read array data from any address. However, data read from program-suspended addresses is not valid. The Program Suspend command may also be issued during a program operation while an erase is suspended. In this case, data may be read from any addresses not in erase suspend or program suspend. If a read is needed from the extended memory block area (one-time program area), the user must use the proper command sequences to enter and exit this region. The system may also issue the Auto Select command sequence when the device is in the program suspend mode. The system can read as many auto select codes as required. When the device exits the auto select mode, the device reverts to the program suspend mode, and is ready for another valid operation. See Auto Select command sequence for more information. If the program suspend operation is aborted by performing a reset or powering down the device, data integrity cannot be ensured, and it is recommended to program again the words or bytes aborted. 6.1.9 Program Resume command After the Program Resume command is issued, the device reverts to programming. The controller can determine the status of the program operation using the DQ7 or DQ6 status bits, just as in the standard program operation. Refer to Figure 17: Write enable controlled program waveforms (8-bit mode) and Figure 18: Write enable controlled program waveforms (16-bit mode) for details. The system must issue a Program Resume command, to exit the program suspend mode and to continue the programming operation. Further issuing of the Resume command is ignored. Another Program Suspend command can be written after the device has resumed programming. 30/94 M29W128GH, M29W128GL 6.1.10 Command interface Program command The Program command can be used to program a value to one address in the memory array at a time. The command requires four bus write operations, the final write operation latches the address and data in the internal state machine and starts the program/erase controller. Programming can be suspended and then resumed by issuing a Program Suspend command and a Program Resume command, respectively (see Section 6.1.8: Program Suspend command and Section 6.1.9: Program Resume command). If the address falls in a protected block then the program command is ignored, the data remains unchanged. The status register is never read and no error condition is given. After programming has started, bus read operations output the status register content. See Figure 17: Write enable controlled program waveforms (8-bit mode) and Figure 18: Write enable controlled program waveforms (16-bit mode) for more details. Typical program times are given in Table 17: Program, erase times and program, erase endurance cycles. After the program operation has completed the memory will return to the read mode, unless an error has occurred. When an error occurs, bus read operations to the memory continue to output the status register. A Read/Reset command must be issued to reset the error condition and return to read mode. One of the erase commands must be used to set all the bits in a block or in the whole memory from '0' to '1'. The program operation is aborted by performing a reset or powering-down the device. In this case data integrity cannot be ensured, and it is recommended to reprogram the word or byte aborted. 31/94 Command interface Table 10. M29W128GH, M29W128GL Standard commands, 8-bit mode Command(1) Length Bus operations(2) 1st Add 2nd Data Add Data 3rd Add 4th 5th 6th Data Add Data Add Data Add Data 1 X F0 3 AAA AA 555 55 X F0 3 AAA AA 555 55 AAA 90 (3)(4) (3)(4) Program(5) 4 AAA AA 555 55 AAA A0 PA PD Chip Erase 6 AAA AA 555 55 AAA 80 AAA AA 555 55 AAA 10 Block Erase 6+ AAA AA 555 55 AAA 80 AAA AA 555 55 BAd 30 Erase/Program Suspend 1 X B0 Erase/Program Resume 1 X 30 Read CFI Query 1 AA 98 Read/Reset Manufacturer code Device code Auto Select Extended memory block protection indicator Block protection status 1. The device doesn't tolerate FFh as a valid command, and once FFh is issued to the device, the M29W128G will enter unexpected state. Adding a F0h command systematically after FFh command is necessary. 2. X don't care, PA program address, PD program data, BAd any address in the block. All values in the table are in hexadecimal. 3. These cells represent read cycles. The other cells are write cycles. 4. The auto select addresses and data are given in Table 6: Read electronic signature - auto select mode - programmer method (8-bit mode), and Table 8: Block protection - auto select mode - programmer method (8-bit mode), except for A9 that is `don't care'. 5. In unlock bypass, the first two unlock cycles are no more needed (see Table 12: Fast program commands, 8-bit mode and Table 13: Fast program commands, 16-bit mode). 32/94 M29W128GH, M29W128GL Table 11. Command interface Standard commands, 16-bit mode Command(1) Length Bus operations(2) 1st Add 2nd Data Add Data 3rd Add 4th 5th 6th Data Add Data Add Data Add Data 1 X F0 3 555 AA 2AA 55 X F0 3 555 AA 2AA 55 555 90 (3)(4) (3)(4) Program(5) 4 555 AA 2AA 55 555 A0 PA PD Chip Erase 6 555 AA 2AA 55 555 80 555 AA 2AA 55 555 10 Block Erase 6+ 555 AA 2AA 55 555 80 555 AA 2AA 55 BAd 30 Erase/Program Suspend 1 X B0 Erase/Program Resume 1 X 30 Read CFI Query 1 55 98 Read/Reset Manufacturer code Device code Extended memory Auto Select block protection indicator Block protection status 1. The device doesn't tolerate FFh as a valid command, and once FFh is issued to the device, the M29W128G will enter unexpected state. Adding a F0h command systematically after FFh command is necessary. 2. X don't care, PA program address, PD program data, BAd any address in the block. All values in the table are in hexadecimal. 3. These cells represent read cycles. The other cells are write cycles. 4. The auto select addresses and data are given in Table 7: Read electronic signature - auto select mode - programmer method (16-bit mode), and Table 9: Block protection - auto select mode - programmer method (16-bit mode), except for A9 that is `don't care'. 5. In unlock bypass, the first two unlock cycles are no more needed (see Table 12 and Table 13 Fast Program commands, 8bit and 16-bit mode). 33/94 Command interface 6.2 M29W128GH, M29W128GL Fast program commands The M29W128GH/L offers a set of fast program commands to improve the programming throughput: Write to Buffer Program Enhanced Buffered Program (valid in x 16 mode only) Unlock Bypass. See either Table 12, Table 13 or Table 14 depending on the configuration that is being used, for a summary of the fast program commands. When VPPH is applied to the VPP/write protect pin the memory automatically enters unlock bypass mode (see Section 6.2.6: Unlock Bypass command). After programming has started, bus read operations in the memory output the status register content. Write to Buffer Program command can be suspended and then resumed by issuing a Program Suspend command and a Program Resume command, respectively (see Section 6.1.8: Program Suspend command and Section 6.1.9: Program Resume command). After the fast program operation has completed, the memory will return to read mode, unless an error has occurred. When an error occurs bus read operations to the memory will continue to output the status register. A Read/Reset command must be issued to reset the error condition and return to read mode. One of the erase commands must be used to set all the bits in a block or in the whole memory from '0' to '1'. Typical program times are given in Table 17: Program, erase times and program, erase endurance cycles. 6.2.1 Write to Buffer Program command The Write to Buffer Program command makes use of the device's 32-word/64-byte write buffer to speed up programming. 32 words/64 bytes can be loaded into the write buffer. Each write buffer has the same A22-A5 addresses.The Write to Buffer Program command dramatically reduces system programming time compared to the standard non-buffered Program command. When issuing a Write to Buffer Program command, the VPP/WP pin can be either held High, VIH, or raised to VPPH. See Table 17 for details on typical write to buffer program times in both cases. Five successive steps are required to issue the Write to Buffer Program command: 34/94 1. The Write to Buffer Program command starts with two unlock cycles 2. The third bus write cycle sets up the Write to Buffer Program command. The setup code can be addressed to any location within the targeted block 3. The fourth bus write cycle sets up the number of words/bytes to be programmed. Value N is written to the same block address, where N+1 is the number of words/bytes to be programmed. N+1 must not exceed the size of the write buffer or the operation will abort 4. The fifth cycle loads the first address and data to be programmed 5. Use N bus write cycles to load the address and data for each word/byte into the write buffer. Addresses must lie within the range from the start address+1 to the start address + N-1. M29W128GH, M29W128GL Command interface All the addresses used in the write to buffer program operation must lie within the same page. To program the content of the write buffer, this command must be followed by a Write to Buffer Program Confirm command. If an address is written several times during a write to buffer program operation, the address/data counter will be decremented at each data load operation and the data will be programmed to the last word loaded into the buffer. Invalid address combinations or failing to follow the correct sequence of bus write cycles will abort the write to buffer program. The status register bits DQ1, DQ5, DQ6, DQ7 can be used to monitor the device status during a write to buffer program operation. It is possible to detect program operation fails when changing programmed data from `0' to `1', that is when reprogramming data in a portion of memory already programmed. See Appendix D, Figure 30: Write to buffer program flowchart and pseudocode, for a suggested flowchart on using the Write to Buffer Program command. 6.2.2 Enhanced Buffered Program command The Enhanced Buffered Program command, available only in x 16 mode, makes use of the device's 256-word write buffer to speed up programming. 256 words can be loaded into the write buffer. Each write buffer has the same A22-A8 addresses. The Enhanced Buffered Program command dramatically reduces system programming time compared to both the standard non-buffered Program command and the Write to Buffer command. When issuing an Enhanced Buffered Program command, the VPP/WP pin can be either held High, VIH, or raised to VPPH. See Table 17: Program, erase times and program, erase endurance cycles for details on typical enhanced buffered program times in both cases. Three successive steps are required to issue the Enhanced Buffered Program command: The Enhanced Buffered Program command starts with two unlock cycles The third bus write cycle sets up the Enhanced Buffered Program command. The setup code can be addressed to any location within the targeted block The fourth bus write cycle loads the first address and data to be programmed. There a total of 256 address and data loading cycles. To program the content of the write buffer, the Enhanced Buffered Program command must be followed by an Enhanced Buffered Program Confirm command. The command ends with an internal enhanced buffered program confirm cycle. Note that address/data cycles must be loaded in an increasing address order (from ADD[7:0]=00000000 to ADD[7:0]=11111111) and completely (all 256 words). Invalid address combinations or failing to follow the correct sequence of bus write cycles will abort the enhanced buffered program. The status register bits DQ1, DQ5, DQ6, and DQ7 can be used to monitor the device status during an enhanced buffered program operation. An external supply (12 V) can be used to improve programming efficiency. 35/94 Command interface M29W128GH, M29W128GL It is possible to detect program operation fails when changing programmed data from `0' to `1', that is when reprogramming data in a portion of memory already programmed. The resulting data will be the logical OR between the previous and the current value. See Appendix D and Figure 31: Enhanced buffered program flowchart and pseudocode, for a suggested flowchart on using the Enhanced Buffered Program command. 6.2.3 Buffered Program Abort Reset command A Buffered Program Abort Reset command must be issued to abort the write to buffer program and enhanced buffered program operation and reset the device in read mode. The write to buffer and enhanced buffered programming sequence can be aborted in the following ways: Load a value that is greater than the page buffer size during the number of locations to program step in the Write to Buffer Program command Write to an address in a block different than the one specified during the write-bufferload command Write an address/data pair to a different write-buffer-page than the one selected by the starting address during the write buffer data loading stage of the operation Write data other than the Confirm command after the specified number of data load cycles Load address/data pairs in an incorrect sequence during the enhanced buffered program. The abort condition is indicated by DQ1 = 1, DQ7 = DQ7 (for the last address location loaded), DQ6 = toggle, and DQ5 = 0 (all of which are status register bits). A Buffered Program Abort and Reset command sequence must be written to reset the device for the next operation. Note that the full 3-cycle Buffered Program Abort and Reset command sequence is required when using write to buffer and enhanced buffered programming features in unlock bypass mode. Note: 36/94 Enhanced Buffered Program commands are available for x 16 mode only. M29W128GH, M29W128GL 6.2.4 Command interface Write to Buffer Program Confirm command The Write to Buffer Program Confirm command is used to confirm a Write to Buffer Program command and to program the N+1 words/bytes loaded in the write buffer by this command. 6.2.5 Enhanced Buffered Program Confirm command The Enhanced Buffered Program Confirm command is used to confirm an Enhanced Buffered Program command and to program the 256 words loaded in the buffer. 6.2.6 Unlock Bypass command The Unlock Bypass command is used to place the device in unlock bypass mode. When the device enters the unlock bypass mode, the two initial unlock cycles required in the standard program command sequence are no more needed, and only two write cycles are required to program data, instead of the normal four cycles (see Note 5 below Table 10 and Table 11). This results in a faster total programming time. Unlock Bypass command is consequently used in conjunction with the Unlock Bypass Program command to program the memory faster than with the standard program commands. When the cycle time to the device is long, considerable time saving can be made by using these commands. Three bus write operations are required to issue the Unlock Bypass command. When in unlock bypass mode, only the Unlock Bypass Program, Unlock Bypass Block Erase, Unlock Bypass Chip Erase, and Unlock Bypass Reset commands are valid: The Unlock Bypass Program command can be issued to program addresses within the memory The Unlock Bypass Block Erase command can then be issued to erase one or more memory blocks The Unlock Bypass Chip Erase command can be issued to erase the whole memory array The Unlock Bypass Write to Buffer Program command can be issued to speed up programming operation The Unlock Bypass Enhanced Buffered Program command can be issued to speed up programming operation The Unlock Bypass Reset command can be issued to return the memory to read mode. In unlock bypass mode the memory can be read as if in read mode. 6.2.7 Unlock Bypass Program command The Unlock Bypass Program command can be used to program one address in the memory array at a time. The command requires two bus write operations, the final write operation latches the address and data and starts the program/erase controller. The program operation using the Unlock Bypass Program command behaves identically to the program operation using the Program command. The operation cannot be aborted, a bus read operation to the memory outputs the status register. See the Program command for details on the behavior. 37/94 Command interface 6.2.8 M29W128GH, M29W128GL Unlock Bypass Block Erase command The Unlock Bypass Block Erase command can be used to erase one or more memory blocks at a time. The command requires two bus write operations instead of six using the standard Block Erase command. The final bus write operation latches the address of the block and starts the program/erase controller. To erase multiple block (after the first two bus write operations have selected the first block in the list), each additional block in the list can be selected by repeating the second bus write operation using the address of the additional block. The Unlock Bypass Block Erase command behaves in the same way as the Block Erase command: the operation cannot be aborted, and a bus read operation to the memory outputs the status register (see Section 6.1.5: Block Erase command for details). 6.2.9 Unlock Bypass Chip Erase command The Unlock Bypass Chip Erase command can be used to erase all memory blocks at a time. The command requires two bus write operations only instead of six using the standard Chip Erase command. The final bus write operation starts the program/erase controller. The Unlock Bypass Chip Erase command behaves in the same way as the Chip Erase command: the operation cannot be aborted, and a bus read operation to the memory outputs the status register (see Section 6.1.4: Chip Erase command for details). 6.2.10 Unlock Bypass Write to Buffer Program command The Unlock Bypass Write to Buffer command can be used to program the memory in fast program mode. The command requires two bus write operations less than the standard Write to Buffer Program command. The Unlock Bypass Write to Buffer Program command behaves in the same way as the Write to Buffer Program command: the operation cannot be aborted and a bus read operation to the memory outputs the status register (see Section 6.2.1: Write to Buffer Program command for details). The Write to Buffer Program Confirm command is used to confirm an Unlock Bypass Write to Buffer Program command and to program the N+1 words/bytes loaded in the write buffer by this command. 6.2.11 Unlock Bypass Enhanced Buffered Program command The Unlock Bypass Enhanced Buffered Program command can be used to program the memory in fast program mode. The command requires two address/data loading cycles less than the standard Enhanced Buffered Program command (see Table 14: Enhanced buffered program commands, 16-bit mode). The Unlock Bypass Enhanced Buffered Program command behaves identically to the enhanced buffered program operation using the Enhanced Buffered Program command. The operation cannot be aborted and a bus read operation to the memory outputs the status register (see Section 6.2.2: Enhanced Buffered Program command for details on the behavior). The Enhanced Buffered Program Confirm command is used to confirm an Unlock Bypass Enhanced Buffered Program command and to program the 256 words loaded in the buffer. 38/94 M29W128GH, M29W128GL 6.2.12 Command interface Unlock Bypass Reset command The Unlock Bypass Reset command can be used to return to read/reset mode from unlock bypass mode. Two bus write operations are required to issue the Unlock Bypass Reset command. Read/Reset command does not exit from unlock bypass mode. Command Fast program commands, 8-bit mode Bus write operations(1) Length Table 12. 1st Add Write to Buffer Program N+5 AAA Write to Buffer Program Confirm 1 Buffered Program Abort and Reset BAd 2nd Data Add AA 3rd 4th Data Add Data Add Data Add 555 55 BAd 25 BAd N(2) PA (5) 29 3 AAA AA 555 55 AAA F0 Unlock Bypass 3 AAA AA 555 55 AAA 20 Unlock Bypass Program 2 X A0 PA PD Unlock Bypass Block Erase 2+ X 80 BAd 30 Unlock Bypass Chip Erase 2 X 80 X 10 N+3 BAd 25 BAd N(2) 2 X 90 X 00 Unlock Bypass Write to Buffer Program Unlock Bypass Reset 5th PA (3) PD WBL (6) (3) 6th Data PD Add WBL (4) 7th Data Add Data 8th 9th Add Data Add Data PD PD 1. X don't care, PA program address, PD program data, BAd any address in the block, WBL write buffer location. All values in the table are in hexadecimal. 2. The maximum number of cycles in the command sequence is 68. N+1 is the number of bytes to be programmed during the write to buffer program operation. 3. Each buffer has the same A22-A5 addresses. A0-A4 and A-1 are used to select a byte within the N+1 byte page. 4. The 6th cycle has to be issued N time. WBL scans the word inside the page. 5. BAd must be identical to the address loaded during the write to buffer program 3rd and 4th cycles. 6. The 4th cycle has to be issued N time. WBL scans the word inside the page. 39/94 Command interface Table 13. M29W128GH, M29W128GL Fast program commands, 16-bit mode Length Bus write operations(1) Command Write to Buffer Program N+5 Write to Buffer Program Confirm 1 Buffered Program Abort and Reset 1st 2nd 3rd 4th 5th 6th Add Data Add Data Add Data Add Data Add Data 555 AA 2AA 55 BAd 25 BAd N(2) PA(3) PD BAd (5) 29 3 555 AA 2AA 55 555 F0 Unlock Bypass 3 555 AA 2AA 55 555 20 Unlock Bypass Program 2 X A0 PA PD Unlock Bypass Block Erase 2+ X 80 BAd 30 Unlock Bypass Chip Erase 2 X 80 X 10 Unlock Bypass Write to Buffer Program N+3 BAd 25 BAd N(2) Unlock Bypass Reset 2 X 90 X 00 PA WBL PD (3) (6) Add Data WBL PD (4) PD 1. X don't care, PA program address, PD program data, BAd any address in the block, WBL write buffer location. All values in the table are in hexadecimal. 2. The maximum number of cycles in the command sequence is 36. N+1 is the number of words to be programmed during the write to buffer program operation. 3. Each buffer has the same A22-A5 addresses. A0-A4 are used to select a word within the N+1 word page. 4. The 6th cycle has to be issued N time. WBL scans the word inside the page. 5. BAd must be identical to the address loaded during the write to buffer program 3rd and 4th cycles. Enhanced buffered program commands, 16-bit mode(1) Table 14. Command Length Bus write operations 1st 2nd 3rd Add Data Add Data 2AA 55 BAd (00) Data Enhanced Buffered Program 259 555 AA Enhanced Buffered Program Confirm 1 BAd (00) 29 Unlock Bypass Enhanced Buffered Program 257 BAd 33 1. Only available from week 8 of 2008. 40/94 4th Add Data Add Data BAd 33 BAd (00) Data ... 257th Add Data ... ... Add BAd (FF) Data Data 258th Add Data 259th Add Data BAd (FF) Data 260th Add Data M29W128GH, M29W128GL 6.3 Command interface Protection commands Blocks can be protected individually against accidental program, erase or read operations. The device block protection scheme is shown in Figure 5: Software protection scheme. See either Table 15, or Table 16, depending on the configuration that is being used, for a summary of the block protection commands. Block protection commands are available both in 8-bit and 16-bit configuration. The memory block and extended memory block protection is configured through the lock register (see Section 7.1: Lock register). The program commands referred to in the following sectons must be used according to all the Program command timings listed here: 6.3.1 Figure 17.: Write enable controlled program waveforms (8-bit mode), Figure 18.: Write enable controlled program waveforms (16-bit mode), Figure 19.: Chip enable controlled program waveforms (8-bit mode), Figure 20.: Chip enable controlled program waveforms (16-bit mode). Enter Extended Memory Block command The M29W128GH/L has one extra 128-word block (extended memory block) that can only be accessed using the Enter Extended Memory Block command. Three bus write cycles are required to issue the Extended Memory Block command. Once the command has been issued the device enters the extended memory block mode where all bus read or program operations are conducted on the extended memory block. Once the device is in the extended block mode, the extended memory block is addressed by using the addresses occupied by block 0 in the other operating modes (see Table 35: Block addresses). The device remains in extended memory block mode until the Exit Extended Memory Block command is issued or power is removed from the device. After power-up or a hardware reset, the device reverts to read mode, and the commands issued to block 0 addresses will properly address block 0. The extended memory block cannot be erased, and can be treated as one-time programmable (OTP) memory. In extended block mode, Erase, Chip Erase, Erase Suspend and Erase Resume commands are not allowed. To exit from the extended memory block mode the Exit Extended Memory Block command must be issued. The extended memory block can be protected by setting the extended memory block protection bit to `1' (see Section 7.1: Lock register); however once protected the protection cannot be undone. Note: When the device is in the extended memory block mode, the VPP/WP pin cannot be used for fast programming and the unlock bypass mode is not available (see Section 2.8: VPP/write protect (VPP/WP)). 41/94 Command interface 6.3.2 M29W128GH, M29W128GL Exit Extended Memory Block command The Exit Extended Memory Block command is used to exit from the extended memory block mode and return the device to read mode. Four bus write operations are required to issue the command. 6.3.3 Lock register command set The M29W128GL and M29W128GH offer a set of commands to access the lock register and to configure and verify its content. See the following sections in conjunction with Section 7.1: Lock register, Table 15 and Table 16. Enter Lock Register Command Set command Three bus write cycles are required to issue the Enter Lock Register Command Set command. Once the command has been issued, all bus read or program operations are issued to the lock register. Lock Register Program and Lock Register Read command The Lock Register Program command is used to configure the lock register. The programmed data can then be checked by issuing a Lock Register Read command. The Lock Register Program command is a special kind of Program command and must be used according to all the Program command timings. The result from this command can be verified by checking the status register. An Exit Protection Command Set command must then be issued to return the device to read mode (see Section 6.3.8: Exit Protection Command Set command). 6.3.4 Password protection mode command set Enter Password Protection Command Set command Three bus write cycles are required to issue the Enter Password Protection Command Set command. Once the command has been issued, the commands related to the password protection mode can be issued to the device. Any other command is ignored. Password Program command The Password Program command is used to program the 64-bit password used in the password protection mode. To program the 64-bit password, the complete command sequence must be entered eight times at eight consecutive addresses selected by A1-A0 plus DQ15A-1 in 8-bit mode, or four times at four consecutive addresses selected by A1-A0 in 16-bit mode. The Password Program command is a special kind of Program command and must be used according to all the Program command timings. The result from this command can be verified by checking the status register. The password can be checked by issuing a Password Read command. Once password program operation has completed, an Exit Protection Command Set command must be issued to return the device to read mode. The password protection mode can then be selected. By default, all password bits are set to `1'. 42/94 M29W128GH, M29W128GL Command interface Password Read command The Password Read command is used to verify the password used in password protection mode. To verify the 64-bit password, the complete command sequence must be entered eight times at eight consecutive addresses selected by A1-A0 plus DQ15A-1 in 8-bit mode, or four times at four consecutive addresses selected by A1-A0 in 16-bit mode. If the password mode lock bit is programmed and the user attempts to read the password, the device will output FFh onto the I/O data bus. An Exit Protection Command Set command must be issued to return the device to read mode. Password Unlock command The Password Unlock command is used to clear the NVPB lock bit allowing to modify the NVPBs. The Password Unlock command must be issued along with the correct password. There must be a 1 s delay between successive password unlock commands in order to prevent hackers from cracking the password by trying all possible 64-bit combinations. If this delay is not respected, the latest command will be ignored. Approximately 1 s is required for unlocking the device after the valid 64-bit password has been provided. 6.3.5 Non-volatile protection mode command set Enter Non-volatile Protection Command Set command Three bus write cycles are required to issue the Enter Non-volatile Protection Command Set command. Once the command has been issued, the commands related to the non-volatile protection mode can be issued to the device. Non-volatile Protection Bit Program command (NVPB Program) A block can be protected from program or erase by issuing a Non-volatile Protection Bit command along with the block address. This command sets the NVPB to `1' for a given block. The Non-volatile Bit Program command is a special kind of Program command and must be used according to all the Program command timings. The result from this command can be verified by checking the status register. Read Non-volatile Protection Bit Status command (Read NVPB Status) The status of a NVPB for a given block or group of blocks can be read by issuing a Read Non-Volatile Modify Protection Bit command along with the block address. Clear all Non-volatile Protection Bits command (Clear all NVPBs) The NVPBs are erased simultaneously by issuing a Clear all Non-volatile Protection Bits command. No specific block address is required. If the NVPB lock bit is set to `0', the command fails. 43/94 Command interface Figure 6. M29W128GH, M29W128GL NVPB program/erase algorithm Enter NVPB command set. Program NVPB Addr = BAd Read Byte twice Addr = BAd DQ6= Toggle NO YES NO DQ5=1 Wait 500 s YES Read Byte twice Addr = BAd DQ6= Toggle NO Read Byte twice Addr = BAd NO DQ0= '1'(Erase) '0'(Program) YES Fail Reset Pass Exit NVPB command set AI14242 44/94 M29W128GH, M29W128GL 6.3.6 Command interface NVPB lock bit command set Enter NVPB Lock Bit Command Set command Three bus write cycles are required to issue the Enter NVPB Lock Bit Command Set command. Once the command has been issued, the commands allowing to set the NVPB lock bit can be issued to the device. NVPB Lock Bit Program command The NVPB Lock Bit Program command is used to set the NVPB lock bit to `0' thus locking the NVPBs and preventing them from being modified. The NVPB Lock Bit Program command is a special kind of Program command and must be used according to all the Program command timings. The result from this command can be verified by checking the status register. Read NVPB Lock Bit Status command This command is used to read the status of the NVPB lock bit. 6.3.7 Volatile protection mode command set Enter Volatile Protection Command Set command Three bus write cycles are required to issue the Enter Volatile Protection Command Set command. Once the command has been issued, the commands related to the volatile protection mode can be issued to the device. Volatile Protection Bit Program command (VPB Program) The VPB Program command individually sets a VPB to `0' for a given block. If the NVPB for the same block is set, the block is locked regardless of the value of the VPB bit. (see Table 19: Block protection status). Read VPB Status command The status of a VPB for a given block can be read by issuing a Read VPB Status command along with the block address. VPB Clear command The VPB Clear command individually clears (sets to `1') the VPB for a given block. If the NVPB for the same block is set, the block is locked regardless of the value of the VPB bit (see Table 19: Block protection status). 6.3.8 Exit Protection Command Set command The Exit Protection Command Set command is used to exit from the lock register, password protection, non-volatile protection, volatile protection, and NVPB lock bit command set mode. It returns the device to read mode. 45/94 Command interface Table 15. M29W128GH, M29W128GL Block protection commands, 8-bit mode(1)(2)(3) Command Length Bus operations 1st 2nd 3rd 4th Ad Data Ad Data Ad Data 55 AAA 40 AAA 60 5th 6th 7th 8th Ad Data Ad Data Ad Data Ad Data Ad Data 3 AAA AA 555 Lock Register Program 2 X A0 X Lock Register Read 1 X Enter Password Protection Command Set(4) 3 AAA AA 555 55 Password Program (6)(7) 2 X A0 PWA n PWD n Password Read 8 00 PWD 0 01 PWD 1 02 PWD 2 03 PWD 3 04 PWD 4 05 PWD 5 06 PWD 6 07 PWD 7 Password Unlock(7) 1 1 00 25 00 03 00 PWD 0 01 PWD 1 02 PWD 2 03 PWD 3 04 PWD 4 05 PWD 5 Enter NonVolatile Protection Command Set(4) 3 AAA AA 555 55 AAA C0 NVPB Program(8) 2 X A0 BAd 00 Clear all NVPBs(9) 2 X 80 00 30 Read NVPB Status (8) 1 BAd RD(0) Enter NVPB Lock Bit Command Set 3 AAA AA 555 55 AAA 50 NVPB Lock Bit Program(8) 2 X A0 X 00 Read NVPB Lock Bit Status (8) 1 X RD(0) Enter Volatile Protection Command Set 3 AAA AA 555 55 AAA E0 2 BAh A0 BAd 00 1 X RD(0) 2 X A0 BAd 01 2 X 90 X 00 Enter Extended Block(4) 3 AAA AA 555 55 AAA 88 Exit Extended Block 4 AAA AA 555 55 AAA 90 X 00 Volatile Protection NVPB Lock bit Non-volatile Protection Password Protection Lock Register Enter Lock Register Command Set(4) VPB Program(8) (10) Read VPB Status VPB Clear(8) (10) Exit Protection Command Set (11) 46/94 9th 10th 11th Ad Data Ad Data Ad Data 06 PWD 6 07 PWD 7 00 29 DATA (5) DATA (5) M29W128GH, M29W128GL 1. Command interface Ad address, Dat data, BAd any address in the block, RD read data, PWDn password byte 0 to 7, PWAn password address (n = 0 to 7), X don't care. All values in the table are in hexadecimal. 2. Grey cells represent read cycles. The other cells are Write cycles. 3. DQ15 to DQ8 are `don't care' during unlock and command cycles. A22 to A16 are `don't care' during unlock and command cycles unless an address is required. 4. An Enter command sequence must be issued prior to any operation. It disables read and write operations from and to block 0. Read and write operations from any other block are allowed. 5. DATA = lock register content. 6. Only one portion of password can be programmed or read by each Password Program command. 7. The password portion can be entered or read in any order as long as the entire 64-bit password is entered or read. 8. Protected and unprotected states correspond to 00 and 01, respectively. 9. The Clear all NVPBs command programs all NVPBs before erasure in order to prevent the over-erasure of previously cleared non volatile modify protection bits. 10. The VPB program and VPB clear operations can be performed only with a timing /WE controlled not CE controlled. 11. If an Entry Command Set command is issued, an Exit Protection Command Set command must be issued to return the device to read mode. 47/94 Command interface M29W128GH, M29W128GL Block protection commands, 16-bit mode(1)(2)(3) Table 16. Length Bus operations 1st 2nd 3rd 4th Ad Data Ad Data Ad Data 55 555 40 555 60 5th Ad Data Enter Lock Register Command Set(4) 3 555 AA 2AA Lock Register Program 2 X A0 X Lock Register Read 1 X Enter Password Protection Command Set(4) 3 555 AA 2AA 55 Password Program (6)(7) 2 X A0 PWAn PWDn Password Read 4 00 PWD0 01 PWD1 02 PWD2 03 PWD3 Password Unlock 7 00 25 00 03 00 PWD0 01 PWD1 Enter Non-volatile Protection Command Set(4) 3 555 AA 2AA 55 555 C0 NVPB Program(8) 555 50 555 E0 X 00 X A0 BAd 00 2 X 80 00 30 Read NVPB Status 1 BAd RD(0) Enter NVPB Lock Bit Command Set 3 555 AA 2AA 55 NVPB Lock Bit Program 2 X A0 X 00 Read NVPB Lock Bit Status 1 X RD(0) Enter Volatile Protection Command Set 3 555 AA 2AA 55 VPB Program(10) 2 X A0 BAd 00 Read VPB Status 1 BAd RD(0) 2 X A0 BAd 01 Exit Protection Command Set(11) 2 X 90 X 00 Enter Extended Block(4) 3 555 AA 2AA 55 555 88 Exit Extended Block 4 555 AA 2AA 55 555 90 VPB Clear Data Ad Data Ad Data 02 PWD2 03 PWD3 00 29 (5) 2 (10) Ad DATA NVPBs(9) Clear all 7th (5) NVPB Lock bit (7) 6th DATA Volatile Protection Non-Volatile Protection Password Protection Lock register Command 1. Ad address, Dat data, BAd any address in the block, RD read data, PWDn password word 0 to 3, PWAn password address (n = 0 to 3), X don't care. All values in the table are in hexadecimal. 2. Grey cells represent read cycles. The other cells are write cycles. 3. DQ15 to DQ8 are `don't care' during unlock and command cycles. A22 to A16 are `don't care' during unlock and command cycles unless an address is required. 4. An Enter command sequence must be issued prior to any operation. It disables read and write operations from and to block 0. Read and write operations from any other block are allowed. 5. DATA = lock register content. 6. Only one portion of password can be programmed or read by each Password Program command. 7. The password portion can be entered or read in any order as long as the entire 64-bit password is entered or read. 8. Protected and unprotected states correspond to 00 and 01, respectively. 9. The Clear all NVPBs command programs all NVPBs before erasure in order to prevent the over-erasure of previously cleared non-volatile modify protection bits. 10. The VPB program and VPB clear operations can be performed only with a timing /WE controlled not CE controlled. 11. If an Entry Command Set command is issued, an Exit Protection Command Set command must be issued to return the device to read mode. 48/94 M29W128GH, M29W128GL Table 17. Command interface Program, erase times and program, erase endurance cycles Parameter Min Typ(1)(2) Max(2) Unit 40 400(3) s 0.5 2 s 25 45 s Chip Erase Block Erase (128 kbytes) (4) Erase Suspend latency time Block Erase timeout 50 Single Byte Program Byte Program Write to Buffer Program (64 bytes at-a-time) Write to Buffer Program (32 words at-a-time) VPP/WP = VPPH 51 VPP/WP = VIH 78 200(3) s s 16 VPP/WP = VPPH 51 VPP/WP = VIH 78 Chip Program (word by word) (5) Chip Program (Write to Buffer Program with VPP/WP = VPPH)(5) Chip Program (Enhanced Buffered Program)(5) Chip Program (Enhanced Buffered Program with VPP/WP = VPP)(5) Program Suspend latency time Program/Erase cycles (per block) Data retention 200 (3) s Chip Program (byte by byte) Chip Program (Write to Buffer Program) s 16 Single Word Program Word Program s 270 800(3) s 135 400(3) s 20 200(3) s 13 50(3) s 8 40 s 5 25 s 5 15 s 100,000 Cycles 20 Years 1. Typical values measured at room temperature and nominal voltages and for not cycled devices. 2. Sampled, but not 100% tested. 3. Maximum value measured at worst case conditions for both temperature and VCC after 100,000 program/erase cycles. 4. Block erase polling cycle time (seeFigure 25: Data polling AC waveforms). 5. Intrinsic program timing, that means without the time required to execute the bus cycles to load the program commands. 49/94 Registers 7 M29W128GH, M29W128GL Registers The device feature two registers: 7.1 A lock register that allows to configure the memory blocks and extended memory block protection (see Table 19: Block protection status) A status register that provides information on the current or previous program or erase operations. Lock register The lock register is a 16-bit one-time programmable register. The bits in the lock register are summarized in Table 18: Lock register bits. See Section 6.3.3: Lock register command set for a description of the commands allowing to read and program the lock register. 7.1.1 Password protection mode lock bit (DQ2) The password protection mode lock bit, DQ2, is one-time programmable. Programming (setting to `0') this bit permanently places the device in password protection mode. Any attempt to program the password protection mode lock bit when the non-volatile protection mode bit is programmed causes the operation to abort and the device to return to read mode. 7.1.2 Non-volatile protection mode lock bit (DQ1) The non-volatile protection mode lock bit, DQ1, is one-time programmable. Programming (setting to `0') this bit permanently places the device in non-volatile protection mode. When shipped from the factory, all parts default to operate in non-volatile protection mode. The memory blocks can be either unprotected (NVPBs set to `1') or protected (NVPBs set to `0'), according to the ordering option that has been chosen. Any attempt to program the non-volatile protection mode lock bit when the password protection mode bit is programmed causes the operation to abort and the device to return to read mode. 7.1.3 Extended block protection bit (DQ0) If the device has not been shipped with the extended memory block factory locked, the block can be protected by setting the extended memory block protection bit, DQ0, to `0'. However, this bit is one-time programmable and once protected the extended memory block cannot be unprotected. The extended memory block protection status can be read in auto select mode either by applying VID to A9 (see Table 8 and Table 9) or by issuing an Auto Select command (see Table 10 and Table 11). 7.1.4 DQ15 to DQ3 reserved They are `don't care'. 50/94 M29W128GH, M29W128GL Registers Lock register bits(1) Table 18. DQ15-3 DQ2 DQ1 DQ0 Don't care Password protection mode lock bit Non-volatile protection mode lock bit Extended block protection bit 1. DQ0, DQ1 and DQ2 lock register bits are set to `1' when shipped from the factory. Table 19. Block protection status NVPB lock bit(1) Block NVPB(2) Block VPB(3) Block protection status Block protection status 0 0 x 01h Block protected (non-volatile protection through NVPB) 0 1 1 00h Block unprotected 0 1 0 00h Block protected (volatile protection through VPB) 1 0 x 01h Block protected (non-volatile protection through NVPB) 1 1 0 01h Block protected (volatile protection through VPB) 1 1 1 00h Block unprotected 1. If the NVPB lock bit is set to `0', all NVPBs are locked. If the NVPB lock bit is set to `1', all NVPBs are unlocked. 2. If the block NVPB is set to `0', the block is protected, if set to `1', it is unprotected. 3. If the block VPB is set to `0', the block is protected, if set to `1', it is unprotected. 51/94 Registers Figure 7. M29W128GH, M29W128GL Lock register program flowchart START Write Unlock cycles: Add 555h, Data AAh Add 2AAh, Data 55h Unlock cycle 1 unlock cycle 2 Write Enter Lock Register command set: Add 555h, Data 40h Program Lock Register Data: Add Dont' care, Data A0h Add Dont' care(1), Data PDh Polling algorithm YES Done NO DQ5 = 1 NO YES Device returned to Read mode PASS: Write Lock Register Exit command: Add Dont' care, Data 90h Add Dont' care, Data 00h FAIL Reset to return the device to Read mode ai13677 1. PD is the programmed data (see Table 18: Lock register bits). 2. The lock register can only be programmed once. 52/94 M29W128GH, M29W128GL 7.2 Registers Status register The M29W128GH/L has one status register. The various bits convey information and errors on the current and previous program/erase operation. Bus read operations from any address within the memory, always read the status register during program and erase operations. It is also read during erase suspend when an address within a block being erased is accessed. The bits in the status register are summarized in Table 20: Status register bits. 7.2.1 Data polling bit (DQ7) The data polling bit can be used to identify whether the program/erase controller has successfully completed its operation or if it has responded to an erase suspend. The data polling bit is output on DQ7 when the status register is read. During program operations the data polling bit outputs the complement of the bit being programmed to DQ7. After successful completion of the program operation the memory returns to read mode and bus read operations, from the address just programmed, output DQ7, not its complement. During erase operations the data polling bit outputs '0', the complement of the erased state of DQ7. After successful completion of the erase operation the memory returns to read mode. In erase suspend mode the data polling bit will output a '1' during a bus read operation within a block being erased. The data polling bit will change from '0' to '1' when the program/erase controller has suspended the erase operation. Figure 8: Data polling flowchart, gives an example of how to use the data polling bit. A valid address is the address being programmed or an address within the block being erased. 7.2.2 Toggle bit (DQ6) The toggle bit can be used to identify whether the program/erase controller has successfully completed its operation or if it has responded to an erase suspend. The toggle bit is output on DQ6 when the status register is read. During a program/erase operation the toggle bit changes from '0' to '1' to '0', etc., with successive bus read operations at any address. After successful completion of the operation the memory returns to read mode. During erase suspend mode the toggle bit will output when addressing a cell within a block being erased. The toggle bit will stop toggling when the program/erase controller has suspended the erase operation. Figure 9: Data toggle flowchart, gives an example of how to use the toggle bit. 7.2.3 Error bit (DQ5) The error bit can be used to identify errors detected by the program/erase controller. The error bit is set to '1' when a program, block erase or chip erase operation fails to write the correct data to the memory. If the error bit is set a Read/Reset command must be issued 53/94 Registers M29W128GH, M29W128GL before other commands are issued. The error bit is output on DQ5 when the status register is read. Note that the Program command cannot change a bit set to '0' back to '1' and attempting to do so will set DQ5 to `1'. A bus read operation to that address will show the bit is still `0'. One of the erase commands must be used to set all the bits in a block or in the whole memory from '0' to '1'. 7.2.4 Erase timer bit (DQ3) The erase timer bit can be used to identify the start of program/erase controller operation during a Block Erase command. Once the program/erase controller starts erasing the erase timer bit is set to '1'. Before the program/erase controller starts the erase timer bit is set to '0' and additional blocks to be erased may be written to the command interface. The erase timer bit is output on DQ3 when the status register is read. 7.2.5 Alternative toggle bit (DQ2) The alternative toggle bit can be used to monitor the program/erase controller during erase operations. The alternative toggle bit is output on DQ2 when the status register is read. During chip erase and block erase operations the toggle bit changes from '0' to '1' to '0', etc., with successive bus read operations from addresses within the blocks being erased. A protected block is treated the same as a block not being erased. Once the operation completes the memory returns to read mode. During erase suspend the alternative toggle bit changes from '0' to '1' to '0', etc. with successive bus read operations from addresses within the blocks being erased. Bus read operations to addresses within blocks not being erased will output the memory array data as if in read mode. After an erase operation that causes the error bit to be set, the alternative toggle bit can be used to identify which block or blocks have caused the error. The alternative toggle bit changes from '0' to '1' to '0', etc. with successive bus read operations from addresses within blocks that have not erased correctly. The alternative toggle bit does not change if the addressed block has erased correctly. 7.3 Buffered program abort bit (DQ1) The buffered program abort bit, DQ1, is set to `1' when a write to buffer program or enhanced buffered program operation aborts. The Buffered Program Abort and Reset command must be issued to return the device to read mode (see write to buffer program in Section 6.1: Standard commands). 54/94 M29W128GH, M29W128GL Registers Status register bits(1) Table 20. Operation Address DQ7 DQ6 Any address DQ7 Toggle 0 Any address DQ7 Toggle Buffered program abort Any address DQ7 Program error Any address Chip erase Program(2) Program during erase suspend (2) Block erase before timeout Block erase DQ5 DQ3 DQ2 DQ1 RB - - 0 0 0 - - - 0 Toggle 0 - - 1 0 DQ7 Toggle 1 - - - Hi-Z Any address 0 Toggle 0 1 Toggle - 0 Erasing block 0 Toggle 0 0 Toggle - 0 Non-erasing block 0 Toggle 0 0 No toggle - 0 Erasing block 0 Toggle 0 1 Toggle - 0 Non-erasing block 0 Toggle 0 1 No toggle - 0 Erasing block 1 No Toggle 0 - Toggle - Hi-Z - Hi-Z Erase suspend Non-erasing block Data read as normal Good block address 0 Toggle 1 1 No toggle - Hi-Z Faulty block address 0 Toggle 1 1 Toggle - Hi-Z Erase error 1. Unspecified data bits should be ignored. 2. DQ7 for write to buffer program and enhanced buffered program is related to the last address location loaded. 55/94 Registers M29W128GH, M29W128GL Figure 8. Data polling flowchart START READ DQ5 & DQ7 at VALID ADDRESS DQ7 = DATA YES NO NO DQ5 = 1 YES READ DQ7 at VALID ADDRESS DQ7 = DATA NO FAIL YES PASS AI07760 56/94 M29W128GH, M29W128GL Figure 9. Registers Data toggle flowchart START READ DQ6 at Valid Address READ DQ5 & DQ6 at Valid Address DQ6 = TOGGLE NO YES NO DQ5 =1 YES READ DQ6 TWICE at Valid Address DQ6 = TOGGLE NO YES FAIL PASS AI11530 57/94 Maximum ratings 8 M29W128GH, M29W128GL Maximum ratings Stressing the device above the rating listed in Table 21: Absolute maximum ratings may cause permanent damage to the device. Exposure to absolute maximum rating conditions for extended periods may affect device reliability. These are stress ratings only and operation of the device at these or any other conditions above those indicated in the operating sections of this specification is not implied. Table 21. Absolute maximum ratings Symbol Parameter Min Max Unit TBIAS Temperature under bias -50 125 C TSTG Storage temperature -65 150 C VIO Input or output voltage(1)(2) -0.6 VCC + 0.6 V VCC Supply voltage -0.6 4 V Input/output supply voltage -0.6 4 V Identification voltage -0.6 13.5 V Program voltage -0.6 13.5 V VCCQ VID VPPH(3) 1. Minimum voltage may undershoot to -2 V during transition and for less than 20 ns during transitions. 2. Maximum voltage may overshoot to VCC + 2 V during transition and for less than 20 ns during transitions. 3. VPPH must not remain at 12 V for more than a total of 80 hrs. 58/94 M29W128GH, M29W128GL 9 DC and AC parameters DC and AC parameters This section summarizes the operating measurement conditions, and the DC and AC characteristics of the device. The parameters in the DC and AC characteristics tables that follow, are derived from tests performed under the measurement conditions summarized in Table 22: Operating and AC measurement conditions. Designers should check that the operating conditions in their circuit match the operating conditions when relying on the quoted parameters. Table 22. Operating and AC measurement conditions M29W128GH, M29W128GL 70 or 60(1) ns Parameter 80 ns Unit Min Max Min Max VCC supply voltage 2.7 3.6 2.7 3.6 V VCCQ supply voltage (VCCQ VCC) 2.7 3.6 1.65 3.6 V Ambient operating temperature (temperature range 1) 0 70 0 70 C Ambient operating temperature (temperature range 3) - 40 125 - 40 125 C Ambient operating temperature (temperature range 6) - 40 85 - 40 85 C Load capacitance (CL) 30 Input rise and fall times 30 10 Input pulse voltages Input and output timing ref. voltages pF 10 ns 0 to VCCQ 0 to VCCQ V VCCQ/2 VCCQ/2 V 1. Only available upon customer request. Figure 10. AC measurement load circuit VPP VCC VCCQ 25 k DEVICE UNDER TEST CL 0.1 F 25 k 0.1 F CL includes JIG capacitance AI05558b 59/94 DC and AC parameters Figure 11. M29W128GH, M29W128GL AC measurement I/O waveform VCCQ VCCQ/2 0V AI05557b Table 23. Power-up waiting timings M29W128GH, M29W128GL Symbol Parameter 70 or 60(1) ns Unit 80 ns VCC(2) High to Chip Enable Low Min 55 s tVCQHEL VCCQ(2) High to Chip Enable Low Min 55 s tVCHWL VCC High to Write Enable Low Min 500 s VCCQ High to Write Enable Low Min 500 s tVCHEL tVCQHWL 1. Only available upon customer request. 2. VCC and VCCQ ramps must be synchronized during power-up. Figure 12. Power-up waiting timings tVCHEL VCC VCCQ tVCQHEL E W tVCHWL tVCQHWL AI14247 60/94 M29W128GH, M29W128GL DC and AC parameters Device capacitance(1) Table 24. Symbol Parameter Test condition Max Unit VIN = 0 V 6 pF VOUT = 0 V 12 pF Input capacitance CIN COUT Output capacitance Min 1. Sampled only, not 100% tested. Table 25. DC characteristics Symbol Parameter Max Unit 0 V VIN VCC 1 A 0 V VOUT VCC 1 A Random read E = VIL, G = VIH, f = 6 MHz 10 mA Page read E = VIL, G = VIH, f = 10 MHz 15 mA ILI(1) Input leakage current ILO Output leakage current ICC1 ICC2 ICC3(2) Read current Supply current (standby) Supply current (program/erase) Read or standby IPP1 IPP2 Test condition Program current (program) IPP3 Min Typ E# = VCCQ 0.2 V Grade 6 100 A E# = VCCQ 0.2 V Grade 3 200 A VPP/WP = VIL or VIH 20 mA VPP/WP = VPPH 20 mA Program/erase controller active VPP/WP VCC 1 5 A RP = VSS 0.2 V 1 5 A Program operation ongoing VPP/WP = 12 V 5% 1 10 mA VPP/WP = VCC 1 5 A Erase operation ongoing VPP/WP = 12 V 5% 3 10 mA VPP/WP = VCC 1 5 A Reset IPP4 Program current (erase) VIL Input Low voltage VCC 2.7 V -0.5 0.3VCCQ V VIH Input High voltage VCC 2.7 V 0.7VCCQ VCCQ+0.4 V VOL Output Low voltage IOL = 100 A, VCC = VCC(min), VCCQ = VCCQ(min) 0.15VCCQ V VOH Output High voltage IOH = 100 A, VCC = VCC(min), VCCQ = VCCQ(min) VID Identification voltage 11.5 12.5 V Voltage for VPP/WP program acceleration 11.4 12.6 V Program/erase lockout supply voltage 1.8 2.5 V VPPH VLKO(2) 0.85VCCQ V 1. The maximum input leakage current is 5 A on the VPP/WP pin. 2. Sampled only, not 100% tested. Icc2 Supply Current(Standby) E# = Vccq +/- 0.2V Grade 6 100 uA 61/94 DC and AC parameters M29W128GH, M29W128GL E# = Vccq +/- 0.2V Grade 3 200 Figure 13. Random read AC waveforms (8-bit mode) VALID A0-A22 tAVQV VALID tAXQX E tEHQZ tGLQV G tGHQZ tELQV Hi-Z DQ0-DQ14, DQ15A-1 Random_Read_AC-Wavefore-x8 Note: BYTE = VIL Figure 14. Random read AC waveforms (16-bit mode) VALID A-1,A0-A22 tAVQV VALID tAXQX E tGLQV tEHQZ G tELQV DQ0-DQ7 tGHQZ Hi-Z Random_Read_AC-Waveform-x16 Note: 62/94 BYTE = VIH M29W128GH, M29W128GL DC and AC parameters Figure 15. BYTE transition AC waveforms A0-AMAX VALID A-1 VALID tAXQX tAVQV BYTE# tBHQV DATA OUT DQ0-DQ7 tBLQX Hi-Z DQ8-DQ15 DATA OUT tBLQZ Byte_Transition_AC-Waveform Note: Chip Enable (E) and Output Enable (G) = VIL 63/94 64/94 DQ0-DQ15 DQ15A-1 G E tELQV tAVQV tGLQV VALID VALID tAVQV1 VALID A0-A2 VALID VALID A3-A22 VALID VALID VALID VALID VALID VALID VALID VALID VALID VALID tGHQZ tGHQX tEHQZ VALID VALID AI08971c tEHQX DC and AC parameters M29W128GH, M29W128GL Figure 16. Page read AC waveforms (16-bit mode) M29W128GH, M29W128GL Table 26. DC and AC parameters Read AC characteristics M29W128GH, M29W128GL Test condition 80 ns VCCQ=1.65 V to VCC Unit 70 80 ns 60 70 80 ns E = VIL , Max G = VIL 25 25 30 ns Chip Enable Low to Output transition G = VIL Min 0 0 0 ns Chip Enable Low to Output Valid G = VIL Max 60 70 80 ns tOLZ Output Enable Low to Output transition E = VIL Min 0 0 0 ns tGLQV tOE Output Enable Low to Output Valid E = VIL Max 25 25 30 ns tEHQZ(2) tHZ Chip Enable High to Output Hi-Z G = VIL Max 20 20 30 ns tGHQZ(2) tDF Output Enable High to Output Hi-Z E = VIL Max 20 20 20 ns tEHQX tGHQX tAXQX tOH Chip Enable, Output Enable or Address transition to Output transition Min 0 0 0 ns Symbol Alt. Parameter tAVAV tRC Address Valid to Next Address Valid E = VIL , G = VIL Min 60 tAVQV tACC Address Valid to Output Valid E = VIL , Max G = VIL tAVQV1 tPAGE Address Valid to Output Valid (page) tELQX(2) tLZ tELQV tE tGLQX(2) 70 ns 60 ns(1) VCCQ=VCC VCCQ=VCC tELBL tELBH tELFL Chip Enable to BYTE Low tELFH or High Max 5 5 5 ns tBLQZ tFLQZ BYTE Low to Output Hi-Z Max 25 25 25 ns tBHQV tFHQV BYTE High to Output Valid Max 30 30 30 ns 1. Only available upon customer request. 2. Sampled only, not 100% tested. 65/94 DC and AC parameters M29W128GH, M29W128GL Figure 17. Write enable controlled program waveforms (8-bit mode) 3rd cycle 4th cycle A0-A22/ A-1 Read cycle Data Polling tAVAV tAVAV 555h PA PA tAVWL tWLAX tELQV tWHEH tELWL E tGLQV tGHWL G tWLWH tWHWL W tDVWH DQ0-DQ7 tWHWH1 AOh PD DQ7 DOUT tGHQZ tAXQX DOUT tWHDX AI13333 1. Only the third and fourth cycles of the Program command are represented. The Program command is followed by the check of status register data polling bit and by a read operation that outputs the data, DOUT, programmed by the previous Program command. 2. PA is the address of the memory location to be programmed. PD is the data to be programmed. 3. DQ7 is the complement of the data bit being programmed to DQ7 (see Section 7.2.1: Data polling bit (DQ7)). 4. SeeTable 27: Write AC characteristics, write enable controlled, Table 28: Write AC characteristics, chip enable controlled and Table 26: Read AC characteristics for details on the timings. 66/94 M29W128GH, M29W128GL DC and AC parameters Figure 18. Write enable controlled program waveforms (16-bit mode) 3rd cycle 4th cycle A0-A22 Read cycle Data Polling tAVAV tAVAV 555h PA PA tAVWL tWLAX tELQV tWHEH tELWL E tGLQV tGHWL G tWLWH tWHWL W tDVWH DQ0-DQ1', DQ15A-1 tWHWH1 AOh PD DQ7 DOUT tGHQZ tAXQX DOUT tWHDX AI13699 1. Only the third and fourth cycles of the Program command are represented. The Program command is followed by the check of status register data polling bit and by a read operation that outputs the data, DOUT, programmed by the previous Program command. 2. PA is the address of the memory location to be programmed. PD is the data to be programmed. 3. DQ7 is the complement of the data bit being programmed to DQ7 (see Section 7.2.1: Data polling bit (DQ7)). 4. SeeTable 27: Write AC characteristics, write enable controlled, Table 28: Write AC characteristics, chip enable controlled and Table 26: Read AC characteristics for details on the timings. 67/94 DC and AC parameters Table 27. M29W128GH, M29W128GL M Write AC characteristics, write enable controlled M29W128GH, M29W128GL Symbol Alt Parameter Unit 60 ns(1) 70 ns 80 ns tAVAV tWC Address Valid to Next Address Valid Min 65 70 80 ns tELWL tCS Chip Enable Low to Write Enable Low Min 0 0 0 ns tWLWH tWP Write Enable Low to Write Enable High Min 35 35 35 ns tDVWH tDS Input Valid to Write Enable High Min 45 45 45 ns tWHDX tDH Write Enable High to Input transition Min 0 0 0 ns tWHEH tCH Write Enable High to Chip Enable High Min 0 0 0 ns tWHWL tWPH Write Enable High to Write Enable Low Min 30 30 30 ns tAVWL tAS Address Valid to Write Enable Low Min 0 0 0 ns tWLAX tAH Write Enable Low to Address transition Min 45 45 45 ns Output Enable High to Write Enable Low Min 0 0 0 ns tOEH Write Enable High to Output Enable Low Min 0 0 0 ns tBUSY Program/Erase Valid to RB Low Max 30 30 30 ns tVCS VCC High to Chip Enable Low Min 50 50 50 s tGHWL tWHGL tWHRL (2) tVCHEL 1. Only available upon customer request. 2. Sampled only, not 100% tested. 68/94 M29W128GH, M29W128GL DC and AC parameters Figure 19. Chip enable controlled program waveforms (8-bit mode) 3rd cycle 4th cycle Data Polling PA PA tAVAV A0-A22/ A-1 555h tAVEL tELAX tEHWH tWLEL W tGHEL G tELEH tEHEL1 E tDVEH DQ0-DQ7 tWHWH1 AOh PD DQ7 DOUT tEHDX AI13334 1. Only the third and fourth cycles of the Program command are represented. The Program command is followed by the check of status register data polling bit. 2. PA is the address of the memory location to be programmed. PD is the data to be programmed. 3. DQ7 is the complement of the data bit being programmed to DQ7 (see Section 7.2.1: Data polling bit (DQ7)). 4. See Table 27: Write AC characteristics, write enable controlled, Table 28: Write AC characteristics, chip enable controlled and Table 26: Read AC characteristics for details on the timings. 69/94 DC and AC parameters M29W128GH, M29W128GL Figure 20. Chip enable controlled program waveforms (16-bit mode) 3rd cycle 4th cycle Data Polling PA PA tAVAV A0-A22 555h tAVEL tELAX tEHWH tWLEL W tGHEL G tELEH tEHEL1 E tDVEH DQ0-DQ14 A-1 tWHWH1 AOh PD DQ7 DOUT tEHDX AI14100 1. Only the third and fourth cycles of the Program command are represented. The Program command is followed by the check of status register data polling bit. 2. PA is the address of the memory location to be programmed. PD is the data to be programmed. 3. DQ7 is the complement of the data bit being programmed to DQ7 (see Section 7.2.1: Data polling bit (DQ7)). 4. See Table 27: Write AC characteristics, write enable controlled, Table 28: Write AC characteristics, chip enable controlled and Table 26: Read AC characteristics for details on the timings. 70/94 M29W128GH, M29W128GL DC and AC parameters Figure 21. Chip/block erase waveforms (8-bit mode) tAVAV A0-A22/ A-1 555h 2AAh tAVWL 555h 555h 2AAh 555h/BAd (1) tWLAX tWHEH tELWL E tGHWL G tWLWH tWHWL W tDVWH DQ0-DQ7 AAh 55h AAh 80h 55h 10h/ 30h tWHDX AI13335 1. For a Chip Erase command, addresses and data are 555h and 10h, respectively, while they are BAd and 30h for a Block Erase command. 2. BAd is the block address. 3. See Table 27: Write AC characteristics, write enable controlled, Table 28: Write AC characteristics, chip enable controlled and Table 26: Read AC characteristics for details on the timings. Table 28. Write AC characteristics, chip enable controlled M29W128GH, M29W128GL Symbol Alt. Parameter Unit 60 ns(1) 70 ns 80 ns tAVAV tWC Address Valid to Next Address Valid Min 65 70 80 ns tWLEL tWS Write Enable Low to Chip Enable Low Min 0 0 0 ns tELEH tCP Chip Enable Low to Chip Enable High Min 35 35 35 ns tDVEH tDS Input Valid to Chip Enable High Min 45 45 45 ns tEHDX tDH Chip Enable High to Input transition Min 0 0 0 ns tEHWH tWH Chip Enable High to Write Enable High Min 0 0 0 ns tEHEL tCPH Chip Enable High to Chip Enable Low Min 30 30 30 ns tAVEL tAS Address Valid to Chip Enable Low Min 0 0 0 ns tELAX tAH Chip Enable Low to Address transition Min 45 45 45 ns Output Enable High Chip Enable Low Min 0 0 0 ns tGHEL 1. Only available upon customer request. 71/94 DC and AC parameters M29W128GH, M29W128GL Figure 22. Reset AC waveforms (no program/erase ongoing) RB E, G, W tPHEL, tPHGL tPHWL RP tPLPX AI11300c Figure 23. Reset during program/erase operation AC waveforms tPLYH RB tRHEL, tRHGL, tRHWL E, G, W RP tPLPX AI11301c Table 29. Symbol Reset AC characteristics Alt. M29W128GH, M29W128GL Parameter 60(1) tPLYH(2) tREAD tPLPX tPHEL, tPHGL, tPHWL(2) 80 ns RP Low to read mode, during program or erase Max 50 50 50 s tRP RP pulse width Min 10 10 10 s tRH RP High to Write Enable Low, Chip Enable Low, Output Enable Low Min 50 50 50 ns RP Low to standby mode, during read mode Min 10 10 10 s RP Low to standby mode, during program or erase Min 50 50 50 s RB High to Write Enable Low, Chip Enable Low, Output Enable Low 0 0 0 ns tRB 1. Only available upon customer request. 2. Sampled only, not 100% tested. 72/94 70 ns Y tRPD tRHEL, tRHGL, tRHWL(2) ns Unit Min M29W128GH, M29W128GL DC and AC parameters Figure 24. Accelerated program timing waveforms VPPH VPP/WP VIL or VIH tVHVPP tVHVPP AI05563 Figure 25. Data polling AC waveforms tWHEH tELQV tEHQZ tGHQZ E tGLQV G tWHGL2 W tWHWH1 or tWHWH2 DQ7 DATA DQ6-DQ0 DATA DQ7 DQ6-DQ0= Output flag DQ7= Valid data DQ6-DQ0= Valid data Hi-Z Hi-Z tWHRL R/B AI13336c 1. DQ7 returns valid data bit when the ongoing Program or Erase command is completed. 2. See Table 30: Accelerated program and data polling/data toggle AC characteristics and Table 26: Read AC characteristics for details on the timings. 73/94 DC and AC parameters M29W128GH, M29W128GL Figure 26. Toggle/alternative toggle bit polling AC waveforms (8-bit mode) A0-A22/ A-1 tGHAX tAXGL E tWHGL2 tAVEL tEHAX W tEHEL2 tGHGL2 tGHGL2 G tGLQV tWHDX DQ6/DQ2 Data Toggle tELQV Toggle Toggle Output Valid Stop toggling tWHRL R/B AI13337 1. DQ6 stops toggling when the ongoing Program or Erase command is completed. DQ2 stops toggling when the ongoing Chip Erase or Block Erase command is completed. 2. See Table 30: Accelerated program and data polling/data toggle AC characteristics and Table 26: Read AC characteristics for details on the timings. Table 30. Symbol Accelerated program and data polling/data toggle AC characteristics Alt M29W128GH, M29W128GL Parameter 60(1) tVHVPP ns Unit 70 ns 80 ns VPP/WP raising and falling time Min 250 250 250 ns tAXGL tASO Address setup time to Output Enable Low during toggle bit polling Min 10 10 10 ns tGHAX, tEHAX tAHT Address hold time from Output Enable during toggle bit polling Min 10 10 10 ns tEHEL2 tEPH Chip Enable High during toggle bit polling Min 10 10 10 ns tWHGL2, tGHGL2 tOEH Output hold time during data and toggle bit polling Min 20 20 20 ns Max 30 30 30 ns tWHRL tBUSY Program/Erase Valid to RB Low 1. Only available upon customer request. 74/94 M29W128GH, M29W128GL 10 Package mechanical Package mechanical To meet environmental requirements, Numonyx offers these devices in RoHS compliant packages, which are lead-free. The category of second level interconnect is marked on the package and on the inner box label, in compliance with JEDEC Standard JESD97. The maximum ratings related to soldering conditions are also marked on the inner box label. Figure 27. TSOP56 - 56 lead plastic thin small outline, 14 x 20 mm, package outline, top view 1 56 e B D1 L1 29 28 A2 E1 E A A1 DIE L C CP TSOP-K 1. Drawing is not to scale. Table 31. TSOP56 - 56 lead plastic thin small outline, 14 x 20 mm, package mechanical data Millimeters Inches Symbol Typ Min Max Typ Min Max A -- -- 1.20 -- -- 0.047 A1 0.10 0.05 0.15 0.004 0.002 0.006 A2 1.00 0.95 1.05 0.039 0.037 0.041 B 0.22 0.17 0.27 0.009 0.007 0.011 C -- 0.10 0.21 -- 0.004 0.008 CP -- -- 0.10 -- -- 0.004 D1 14.00 13.90 14.10 0.551 0.547 0.555 E 20.00 19.80 20.20 0.787 0.780 0.795 E1 18.40 18.30 18.50 0.724 0.720 0.728 e 0.50 -- -- 0.020 -- -- L 0.60 0.50 0.70 0.024 0.020 0.028 3 0 5 3 0 5 75/94 Package mechanical M29W128GH, M29W128GL Figure 28. TBGA64 10 x 13 mm - 8 x 8 active ball array, 1 mm pitch, package outline, bottom view D D1 FD FE E SD SE E1 ddd BALL "A1" A e b A2 A1 BGA-Z23 1. Drawing is not to scale. Table 32. TBGA64 10 x 13 mm - 8 x 8 active ball array, 1 mm pitch, package mechanical data millimeters inches Symbol Typ Min Max Typ Min Max A -- -- 1.20 -- -- 0.047 A1 0.30 0.20 0.35 0.012 0.008 0.014 A2 0.80 -- -- 0.031 -- -- b -- 0.35 0.50 -- 0.014 0.020 D 10.00 9.90 10.10 0.394 0.390 0.398 D1 7.000 -- -- 0.276 -- -- ddd -- -- 0.10 -- -- 0.004 e 1.00 -- -- 0.039 -- -- E 13.00 12.90 13.10 0.512 0.508 0.516 E1 7.00 -- -- 0.276 -- -- FD 1.50 -- -- 0.059 -- -- FE 3.00 -- -- 0.118 -- -- SD 0.50 -- -- 0.020 -- -- SE 0.50 -- -- 0.020 -- -- 76/94 M29W128GH, M29W128GL Package mechanical Figure 29. FBGA64 11 x 13 mm--8 x 8 active ball array, 1 mm pitch, package outline, bottom view D D1 FD FE E SD SE E1 ddd BALL "A1" A e b A2 A1 BGA-Z23 1. Drawing is not to scale. Table 33. FBGA64 11 x 13 mm--8 x 8 active ball array, 1 mm pitch, package mechanical data millimeters inches Symbol Typ Min Max Typ Min Max A -- -- 1.40 -- -- 0.055 A1 0.48 0.43 0.53 0.018 0.016 A2 0.80 -- -- 0.031 -- -- b -- 0.55 0.65 -- 0.021 0.025 D 11.00 10.90 11.10 0.433 0.429 0.437 D1 7.00 -- -- 0.275 -- -- ddd -- -- 0.15 -- -- 0.0059 e 1.00 -- -- 0.039 -- -- E 13.0 12.90 13.10 0.511 0.507 0.515 E1 7.00 -- -- 0.275 -- -- FD 2.00 -- -- 0.078 -- -- FE 3.00 -- -- 0.118 -- -- SD 0.50 -- -- 0.0196 -- -- SE 0.50 -- -- 0.0196 -- -- 77/94 Ordering information 11 M29W128GH, M29W128GL Ordering information Table 34. Ordering information scheme Example: M29W128GH 70 N 6 F Device type M29 Operating voltage W = VCC = 2.7 to 3.6 V Device function 128GH = 128-Mbit (x8/x16), page, uniform block, flash memory, highest block protected by VPP/WP# 128GL = 128-Mbit (x8/x16), page, uniform block, flash memory, lowest block protected by VPP/WP# Speed 70 = 70 ns (80 ns if VCCQ = 1.65 V to VCC) 60 = 60 ns (80 ns if VCCQ = 1.65 V to VCC)(1) 7A = 70 ns (80 ns if VCCQ = 1.65 V to VCC) Automotive qualified (available only with option 6) Package N = TSOP56: 14 x 20 mm ZA = TBGA64: 10 x 13 mm, 1 mm pitch ZS = FBGA64: 11 x 13 mm, 1 mm pitch Temperature range 1 = 0 to 70 C 6 = Industrial temperature range, -40 to 85 C 3 = Industrial temperature range, -40 to 125 C Option F = RoHS compliant package, tape & reel packing E = RoHS compliant package, standard packing 1. Only available upon customer request. Note: This product is also available with the extended memory block factory locked. For further details and ordering information contact your nearest Numonyx sales office. Devices are shipped from the factory with the memory content bits erased to '1'. For a list of available options (speed, package, etc.) or for further information on any aspect of this device, please contact your nearest Numonyx sales office. Automotive Grade Part is qualified and characterized according to AEC Q100 and Q003 or equivalent; advanced screening according to AEC Q001 and Q002 or equivalent. 78/94 M29W128GH, M29W128GL Appendix A Block addresses and read/modify protection groups Block addresses and read/modify protection groups Table 35. Block addresses Block Protection group Block size (Kbytes/ Kwords) 8-bit address range (in hexadecimal) 16-bit address range (in hexadecimal) 0 Protection group 128/64 0000000-001FFFF 0000000-000FFFF 1 Protection group 128/64 0020000-003FFFF 0010000-001FFFF 2 Protection group 128/64 0040000-005FFFF 0020000-002FFFF 3 Protection group 128/64 0060000-007FFFF 0030000-003FFFF 4 Protection group 128/64 0080000-009FFFF 0040000-004FFFF 5 Protection group 128/64 00A0000-00BFFFF 0050000-005FFFF 6 Protection group 128/64 00C0000-00DFFFF 0060000-006FFFF 7 Protection group 128/64 00E0000-00FFFFF 0070000-007FFFF 8 Protection group 128/64 0100000-011FFFF 0080000-008FFFF 9 Protection group 128/64 0120000-013FFFF 0090000-009FFFF 10 Protection group 128/64 0140000-015FFFF 00A0000-00AFFFF 11 Protection group 128/64 0160000-017FFFF 00B0000-00BFFFF 12 Protection group 128/64 0180000-019FFFF 00C0000-00CFFFF 13 Protection group 128/64 01A0000-01BFFFF 00D0000-00DFFFF 14 Protection group 128/64 01C0000-01DFFFF 00E0000-00EFFFF 15 Protection group 128/64 01E0000-01FFFFF 00F0000-00FFFFF 16 Protection group 128/64 0200000-021FFFF 0100000-010FFFF 17 Protection group 128/64 0220000-023FFFF 0110000-011FFFF 18 Protection group 128/64 0240000-025FFFF 0120000-012FFFF 19 Protection group 128/64 0260000-027FFFF 0130000-013FFFF 20 Protection group 128/64 0280000-029FFFF 0140000-014FFFF 21 Protection group 128/64 02A0000-02BFFFF 0150000-015FFFF 22 Protection group 128/64 02C0000-02DFFFF 0160000-016FFFF 23 Protection group 128/64 02E0000-02FFFFF 0170000-017FFFF 24 Protection group 128/64 0300000-031FFFF 0180000-018FFFF 25 Protection group 128/64 0320000-033FFFF 0190000-019FFFF 26 Protection group 128/64 0340000-035FFFF 01A0000-01AFFFF 27 Protection group 128/64 0360000-037FFFF 01B0000-01BFFFF 28 Protection group 128/64 0380000-039FFFF 01C0000-01CFFFF 29 Protection group 128/64 03A0000-03BFFFF 01D0000-01DFFFF 79/94 Block addresses and read/modify protection groups Table 35. 80/94 M29W128GH, M29W128GL Block addresses (continued) Block Protection group Block size (Kbytes/ Kwords) 8-bit address range (in hexadecimal) 16-bit address range (in hexadecimal) 30 Protection group 128/64 03C0000-03DFFFF 01E0000-01EFFFF 31 Protection group 128/64 03E0000-03FFFFF 01F0000-01FFFFF 32 Protection group 128/64 0400000-041FFFF 0200000-020FFFF 33 Protection group 128/64 0420000-043FFFF 0210000-021FFFF 34 Protection group 128/64 0440000-045FFFF 0220000-022FFFF 35 Protection group 128/64 0460000-047FFFF 0230000-023FFFF 36 Protection group 128/64 0480000-049FFFF 0240000-024FFFF 37 Protection group 128/64 04A0000-04BFFFF 0250000-025FFFF 38 Protection group 128/64 04C0000-04DFFFF 0260000-026FFFF 39 Protection group 128/64 04E0000-04FFFFF 0270000-027FFFF 40 Protection group 128/64 0500000-051FFFF 0280000-028FFFF 41 Protection group 128/64 0520000-053FFFF 0290000-029FFFF 42 Protection group 128/64 0540000-055FFFF 02A0000-02AFFFF 43 Protection group 128/64 0560000-057FFFF 02B0000-02BFFFF 44 Protection group 128/64 0580000-059FFFF 02C0000-02CFFFF 45 Protection group 128/64 05A0000-05BFFFF 02D0000-02DFFFF 46 Protection group 128/64 05C0000-05DFFFF 02E0000-02EFFFF 47 Protection group 128/64 05E0000-05FFFFF 02F0000-02FFFFF 48 Protection group 128/64 0600000-061FFFF 0300000-030FFFF 49 Protection group 128/64 0620000-063FFFF 0310000-031FFFF 50 Protection group 128/64 0640000-065FFFF 0320000-032FFFF 51 Protection group 128/64 0660000-067FFFF 0330000-033FFFF 52 Protection group 128/64 0680000-069FFFF 0340000-034FFFF 53 Protection group 128/64 06A0000-06BFFFF 0350000-035FFFF 54 Protection group 128/64 06C0000-06DFFFF 0360000-036FFFF 55 Protection group 128/64 06E0000-06FFFFF 0370000-037FFFF 56 Protection group 128/64 0700000-071FFFF 0380000-038FFFF 57 Protection group 128/64 0720000-073FFFF 0390000-039FFFF 58 Protection group 128/64 0740000-075FFFF 03A0000-03AFFFF 59 Protection group 128/64 0760000-077FFFF 03B0000-03BFFFF 60 Protection group 128/64 0780000-079FFFF 03C0000-03CFFFF 61 Protection group 128/64 07A0000-07BFFFF 03D0000-03DFFFF 62 Protection group 128/64 07C0000-07DFFFF 03E0000-03EFFFF M29W128GH, M29W128GL Table 35. Block addresses and read/modify protection groups Block addresses (continued) Block Protection group Block size (Kbytes/ Kwords) 8-bit address range (in hexadecimal) 16-bit address range (in hexadecimal) 63 Protection group 128/64 07E0000-07FFFFF 03F0000-03FFFFF 64 Protection group 128/64 0800000-081FFFF 0400000-040FFFF 65 Protection group 128/64 0820000-083FFFF 0410000-041FFFF 66 Protection group 128/64 0840000-085FFFF 0420000-042FFFF 67 Protection group 128/64 0860000-087FFFF 0430000-043FFFF 68 Protection group 128/64 0880000-089FFFF 0440000-044FFFF 69 Protection group 128/64 08A0000-08BFFFF 0450000-045FFFF 70 Protection group 128/64 08C0000-08DFFFF 0460000-046FFFF 71 Protection group 128/64 08E0000-08FFFFF 0470000-047FFFF 72 Protection group 128/64 0900000-091FFFF 0480000-048FFFF 73 Protection group 128/64 0920000-093FFFF 0490000-049FFFF 74 Protection group 128/64 0940000-095FFFF 04A0000-04AFFFF 75 Protection group 128/64 0960000-097FFFF 04B0000-04BFFFF 76 Protection group 128/64 0980000-099FFFF 04C0000-04CFFFF 77 Protection group 128/64 09A0000-09BFFFF 04D0000-04DFFFF 78 Protection group 128/64 09C0000-09DFFFF 04E0000-04EFFFF 79 Protection group 128/64 09E0000-09FFFFF 04F0000-04FFFFF 80 Protection group 128/64 0A00000-0A1FFFF 0500000-050FFFF 81 Protection group 128/64 0A20000-0A3FFFF 0510000-051FFFF 82 Protection group 128/64 0A40000-0A5FFFF 0520000-052FFFF 83 Protection group 128/64 0A60000-0A7FFFF 0530000-053FFFF 84 Protection group 128/64 0A80000-0A9FFFF 0540000-054FFFF 85 Protection group 128/64 0AA0000-0ABFFFF 0550000-055FFFF 86 Protection group 128/64 0AC0000-0ADFFFF 0560000-056FFFF 87 Protection group 128/64 0AE0000-0AFFFFF 0570000-057FFFF 88 Protection group 128/64 0B00000-0B1FFFF 0580000-058FFFF 89 Protection group 128/64 0B20000-0B3FFFF 0590000-059FFFF 90 Protection group 128/64 0B40000-0B5FFFF 05A0000-05AFFFF 91 Protection group 128/64 0B60000-0B7FFFF 05B0000-05BFFFF 92 Protection group 128/64 0B80000-0B9FFFF 05C0000-05CFFFF 93 Protection group 128/64 0BA0000-0BBFFFF 05D0000-05DFFFF 94 Protection group 128/64 0BC0000-0BDFFFF 05E0000-05EFFFF 95 Protection group 128/64 0BE0000-0BFFFFF 05F0000-05FFFFF 81/94 Block addresses and read/modify protection groups Table 35. 82/94 M29W128GH, M29W128GL Block addresses (continued) Block Protection group Block size (Kbytes/ Kwords) 8-bit address range (in hexadecimal) 16-bit address range (in hexadecimal) 96 Protection group 128/64 0C00000-0C1FFFF 0600000-060FFFF 97 Protection group 128/64 0C20000-0C3FFFF 0610000-061FFFF 98 Protection group 128/64 0C40000-0C5FFFF 0620000-062FFFF 99 Protection group 128/64 0C60000-0C7FFFF 0630000-063FFFF 100 Protection group 128/64 0C80000-0C9FFFF 0640000-064FFFF 101 Protection group 128/64 0CA0000-0CBFFFF 0650000-065FFFF 102 Protection group 128/64 0CC0000-0CDFFFF 0660000-066FFFF 103 Protection group 128/64 0CE0000-0CFFFFF 0670000-067FFFF 104 Protection group 128/64 0D00000-0D1FFFF 0680000-068FFFF 105 Protection group 128/64 0D20000-0D3FFFF 0690000-069FFFF 106 Protection group 128/64 0D40000-0D5FFFF 06A0000-06AFFFF 107 Protection group 128/64 0D60000-0D7FFFF 06B0000-06BFFFF 108 Protection group 128/64 0D80000-0D9FFFF 06C0000-06CFFFF 109 Protection group 128/64 0DA0000-0DBFFFF 06D0000-06DFFFF 110 Protection group 128/64 0DC0000-0DDFFFF 06E0000-06EFFFF 111 Protection group 128/64 0DE0000-0DFFFFF 06F0000-06FFFFF 112 Protection group 128/64 0E00000-0E1FFFF 0700000-070FFFF 113 Protection group 128/64 0E20000-0E3FFFF 0710000-071FFFF 114 Protection group 128/64 0E40000-0E5FFFF 0720000-072FFFF 115 Protection group 128/64 0E60000-0E7FFFF 0730000-073FFFF 116 Protection group 128/64 0E80000-0E9FFFF 0740000-074FFFF 117 Protection group 128/64 0EA0000-0EBFFFF 0750000-075FFFF 118 Protection group 128/64 0EC0000-0EDFFFF 0760000-076FFFF 119 Protection group 128/64 0EE0000-0EFFFFF 0770000-077FFFF 120 Protection group 128/64 0F00000-0F1FFFF 0780000-078FFFF 121 Protection group 128/64 0F20000-0F3FFFF 0790000-079FFFF 122 Protection group 128/64 0F40000-0F5FFFF 07A0000-07AFFFF 123 Protection group 128/64 0F60000-0F7FFFF 07B0000-07BFFFF 124 Protection group 128/64 0F80000-0F9FFFF 07C0000-07CFFFF 125 Protection group 128/64 0FA0000-0FBFFFF 07D0000-07DFFFF 126 Protection group 128/64 0FC0000-0FDFFFF 07E0000-07EFFFF 127 Protection group 128/64 0FE0000-0FFFFFF 07F0000-07FFFFF M29W128GH, M29W128GL Appendix B Common flash interface (CFI) Common flash interface (CFI) The common flash interface is a JEDEC approved, standardized data structure that can be read from the flash memory device. It allows a system software to query the device to determine various electrical and timing parameters, density information and functions supported by the memory. The system can interface easily with the device, enabling the software to upgrade itself when necessary. When the Read CFI Query command is issued, the memory enters read CFI query mode and read operations output the CFI data. Table 36, Table 37, Table 38, Table 39, Table 40 and Table 41 show the addresses (A-1, A0-A7) used to retrieve the data. The CFI data structure also contains a security area where a 64-bit unique security number is written (see Table 41: Security code area). This area can be accessed only in read mode by the final user. It is impossible to change the security number after it has been written by Numonyx. Query structure overview(1) Table 36. Address Sub-section name Description x16 x8 10h 20h CFI query identification string Command set ID and algorithm data offset 1Bh 36h System interface information Device timing & voltage information 27h 4Eh Device geometry definition Flash device layout 40h 80h Primary algorithm-specific extended query table Additional information specific to the primary algorithm (optional) 61h C2h Security code area 64-bit unique device number 1. Query data are always presented on the lowest order data outputs. CFI query identification string(1) Table 37. Address Data x16 x8 10h 20h 0051h 11h 22h 0052h 12h 24h 0059h 13h 26h 0002h 14h 28h 0000h 15h 2Ah 0040h 16h 2Ch 0000h 17h 2Eh 0000h 18h 30h 0000h 19h 32h 0000h 1Ah 34h 0000h Description Value `Q' Query unique ASCII string `QRY' `R' `Y' Primary algorithm command set and control interface ID code 16 bit ID code defining a specific algorithm Spansion compatible Address for primary algorithm extended query table (see Table 40) P = 40h Alternate vendor command set and control interface ID code second vendor - specified algorithm supported NA Address for alternate algorithm extended query table NA 1. Query data are always presented on the lowest order data outputs (DQ7-DQ0) only. DQ8-DQ15 are `0'. 83/94 Common flash interface (CFI) Table 38. M29W128GH, M29W128GL CFI query system interface information(1) Address Data Description Value x16 x8 1Bh 36h 0027h VCC logic supply minimum program/erase voltage bit 7 to 4BCD value in volts bit 3 to 0BCD value in 100 mV 2.7 V 1Ch 38h 0036h VCC logic supply maximum program/erase voltage bit 7 to 4BCD value in volts bit 3 to 0BCD value in 100 mV 3.6 V 1Dh 3Ah 00B5h VPPH [programming] supply minimum program/erase voltage bit 7 to 4HEX value in volts bit 3 to 0BCD value in 100 mV 11.5 V 1Eh 3Ch 00C5h VPPH [programming] supply maximum program/erase voltage bit 7 to 4HEX value in volts bit 3 to 0BCD value in 100 mV 12.5 V 1Fh 3Eh 0004h Typical timeout for single byte/word program = 2n s 16 s 20h 40h 0004h Typical timeout for minimum size write buffer program = 2n s 16 s 21h 22h 42h 44h 0009h 0010h Typical timeout for individual block erase = 2n ms n Typical timeout for full chip erase = 2 ms 0.5 s 40 s n 23h 46h 0004h Maximum timeout for byte/word program = 2 times typical 200 s 24h 48h 0004h Maximum timeout for write buffer program = 2n times typical 200 s 25h 26h 4Ah 4Ch 0003h 0004h n Maximum timeout per individual block erase = 2 times typical Maximum timeout for chip erase = 2 times typical 1. The values given in the above table are valid for both packages. 84/94 n 2.3 s 400 s M29W128GH, M29W128GL Table 39. Common flash interface (CFI) Device geometry definition Address Data Description Value x16 x8 27h 4Eh 0018h Device size = 2n in number of bytes 28h 29h 50h 52h 0002h 0000h Flash device interface code description 2Ah 2Bh 54h 56h 0006h 0000h Maximum number of bytes in multiple-byte program or page= 2n 64 2Ch 58h 0001h Number of Erase block regions. It specifies the number of regions containing contiguous Erase blocks of the same size. 1 2Dh 2Eh 5Ah 5Ch 007Fh 0000h Erase block region 1 information Number of Erase blocks of identical size = 007Fh +1 2Fh 30h 5Eh 60h 0000h 0002h Erase block region 1 information Block size in region 1 = 0200h * 256 byte 31h 32h 33h 34h 62h 64h 66h 68h 0000h 0000h 0000h 0000h Erase block region 2 information 0 35h 36h 37h 38h 6Ah 6Ch 6Eh 70h 0000h 0000h 0000h 0000h Erase block region 3 information 0 39h 3Ah 3Bh 3Ch 72h 74h 76h 78h 0000h 0000h 0000h 0000h Erase block region 4 information 0 16 Mbytes x8, x16 async. 128 128 Kbytes 85/94 Common flash interface (CFI) Table 40. M29W128GH, M29W128GL Primary algorithm-specific extended query table (1) Address Data Description Value x16 x8 40h 80h 0050h 41h 82h 0052h 42h 84h 0049h 43h 86h 0031h Major version number, ASCII `1' 44h 88h 0033h Minor version number, ASCII `3' 45h 8Ah 000Dh Address sensitive unlock (bits 1 to 0) 00 = required, 01= not required Silicon revision number (bits 7 to 2) 46h 8Ch 0002h Erase suspend 00 = not supported, 01 = read only, 02 = read and write 2 47h 8Eh 0001h Block protection 00 = not supported, x = number of blocks per group 1 48h 90h 0000h Temporary block unprotect 00 = not supported, 01 = supported 49h 92h 0008h Block protect /unprotect 06 = M29W128GH/M29W128GL 4Ah 94h 0000h Simultaneous operations: not supported 4Bh 96h 0000h Burst mode, 00 = not supported, 01 = supported 4Ch 98h 0002h Page mode, 00 = not supported, 02 = 8-word page 4Dh 9Ah 00B5h VPPH supply minimum program/erase voltage bit 7 to 4 HEX value in volts bit 3 to 0 BCD value in 100 mV 11.5 V 4Eh 9Ch 00C5h VPPH supply maximum program/erase voltage bit 7 to 4 HEX value in volts bit 3 to 0 BCD value in 100 mV 12.5 V `P' Primary algorithm extended query table unique ASCII string "PRI" `R' `I' Yes 90 nm Not supported 6 NA Not supported 02 4Fh 9Eh 00xxh Top/bottom boot block flag xx = 04 = M29W128GL. First block protected by VPP/WP xx = 05 = M29W128GH. Last block protected by VPP/WP Uniform + VPP/WP protecting highest or lowest block 50h A0h 0001h Program suspend, 00 = not supported, 01 = supported Supported 1. The values given in the above table are valid for both packages. 86/94 M29W128GH, M29W128GL Table 41. Common flash interface (CFI) Security code area Address Data x16 x8 61h C3h, C2h XXXX 62h C5h, C4h XXXX 63h C7h, C6h XXXX 64h C9h, C8h XXXX Description 64-bit: unique device number 87/94 Extended memory block Appendix C M29W128GH, M29W128GL Extended memory block The M29W128GH/L has an extra block, the extended memory block, that can be accessed using a dedicated command. This extended memory block is 128 words in x 16 mode and 256 bytes in x 8 mode. It is used as a security block (to provide a permanent security identification number) or to store additional information. The device can be shipped either with the extended memory block factory locked, or factory unlocked. If the extended memory block is not factory locked, it can be customer lockable. Its status is indicated by bit DQ7. This bit is permanently set to either `1' or `0' at the factory and cannot be changed. When set to `1', it indicates that the device is factory locked and the extended memory block is protected. When set to `0', it indicates that the device is customer lockable. Bit DQ7 being permanently locked to either `1' or `0' is another security feature which ensures that a customer lockable device cannot be used instead of a factory locked one. Bit DQ7 is the most significant bit in the extended memory block verify indicator. It can be read in auto select mode using either the programmer (see Table 8 and Table 9) or the insystem method (see Table 10 and Table 11). The extended memory block can only be accessed when the device is in extended memory block mode. For details of how the extended memory block mode is entered and exited, refer to the Section 6.3.1: Enter Extended Memory Block command and Section 6.3.2: Exit Extended Memory Block command, and to Table 15 and Table 10. C.1 Factory locked extended memory block In devices where the extended memory block is factory locked, the security identification number is written to the extended memory block address space (see Table 42: Extended memory block address and data) in the factory. The DQ7 bit is set to `1' and the extended memory block cannot be unprotected. 88/94 M29W128GH, M29W128GL C.2 Extended memory block Customer lockable extended memory block A device where the extended memory block is customer lockable is delivered with the DQ7 bit set to `0' and the extended memory block unprotected. It is up to the customer to program and protect the extended memory block but care must be taken because the protection of the extended memory block is not reversible. If the device has not been shipped with the extended memory block factory protected, the block can be protected by setting the extended memory block protection bit, DQ0, to `0'. However, this bit is one-time programmable and once protected the extended memory block cannot be unprotected. Once the extended memory block is programmed, the Exit Extended Memory Block command must be issued to exit the extended memory block mode and return the device to read mode. Table 42. Extended memory block address and data Address(1) Data x8 x16 Factory locked Customer lockable 000000h-0000FFh 000000h-00007Fh Security identification number Determined by customer 1. See Table 35: Block addresses. 89/94 Flowcharts Appendix D M29W128GH, M29W128GL Flowcharts Figure 30. Write to buffer program flowchart and pseudocode Start Write to Buffer command, block address Write n(1), block address First three cycles of the Write to Buffer and Program command Write Buffer Data, start address X=n YES X=0 NO Abort Write to Buffer YES Write to a different block address NO Write Next Data,(3) Program Address Pair Write to Buffer and Program Aborted(2) X = X-1 Write to Buffer Program Confirm, block address Read Status Register (DQ1, DQ5, DQ7) at last loaded address YES DQ7 = Data NO NO DQ1 = 1 NO DQ5 = 1 YES YES Check Status Register (DQ5, DQ7) at last loaded address DQ7 = Data YES (4) NO FAIL OR ABORT(5) END AI08968b 1. n+1 is the number of addresses to be programmed. 2. A write to buffer program abort and reset must be issued to return the device in read mode. 3. When the block address is specified, any address in the selected block address space is acceptable. However when loading write buffer address with data, all addresses must fall within the selected write buffer page. 4. DQ7 must be checked since DQ5 and DQ7 may change simultaneously. 5. If this flowchart location is reached because DQ5='1', then the Write to Buffer Program command failed. If this flowchart location is reached because DQ1='1', then the Write to Buffer Program command aborted. In both cases, the appropriate reset command must be issued to return the device in read mode: a Reset command if the operation failed, a Write to Buffer Program Abort and Reset command if the operation aborted. 6. See Table 10 and Table 11, for details on Write to Buffer Program command sequence. 90/94 M29W128GH, M29W128GL Flowcharts Figure 31. Enhanced buffered program flowchart and pseudocode Start Enhanced Buffered Program command, block address First three cycles of the Enhanced Buffered Program command Write Buffer Data, start address (00), X=255 YES X=0 NO Abort Write to Buffer YES Write to a different block address NO Write Next Data,(2) Program Address Pair Enhanced Buffered Program Aborted(1) X = X-1 Enhanced Buffered Program Confirm, block address Read Status Register (DQ1, DQ5, DQ7) at last loaded address YES DQ7 = Data NO NO DQ1 = 1 YES NO DQ5 = 1 YES Check Status Register (DQ5, DQ7) at last loaded address DQ7 = Data YES (3) NO FAIL OR ABORT(4) END AI14243 1. A buffered program abort and reset must be issued to return the device in read mode. 2. When the block address is specified, all the addresses in the selected block address space must be issued starting from (00). Furthermore, when loading write buffer address with data, data program addresses must be consecutive. 3. DQ7 must be checked since DQ5 and DQ7 may change simultaneously. 4. If this flowchart location is reached because DQ5='1', then the Enhanced Buffered Program command failed. If this flowchart location is reached because DQ1='1', then the Enhanced Buffered Program command aborted. In both cases, the appropriate reset command must be issued to return the device in read mode: a Reset command if the operation failed, a Buffered Program Abort and Reset command if the operation aborted. 5. See Table 14: Enhanced buffered program commands, 16-bit mode, for details on Enhanced Buffered Program command sequence. 91/94 Revision history M29W128GH, M29W128GL 12 Revision history Table 43. Document revision history Date Version 24-Nov-2006 0.1 Changes Initial release. 1 VIO changed to VCCQ in the whole document and added in Table 21: Absolute maximum ratings. Chip program time without VPPH updated in Features section. RP signal acting as a reset input, unprotection of all the blocks previously protected using a high voltage block protection technique removed. Table 4: Bus operations, 8-bit mode and Table 5: Bus operations, 16-bit mode updated. Table 6: Read electronic signature - auto select mode - programmer method (8-bit mode) and Table 7: Read electronic signature - auto select mode programmer method (16-bit mode) updated. Table 8: Block protection - auto select mode - programmer method (8-bit mode) and Table 9: Block protection - auto select mode - programmer method (16-bit mode) updated. Section 5: Software protection added, together with the related commands. Unlock Bypass Block Erase, Unlock Bypass Chip Erase, and Unlock Write to Buffer and Program commands added. Lock register description added in Section 7.1. 2 Enhanced Buffered Program commands added (see on page1 and from Section 6.2.2 to Section 6.2.12). Modified values for page access, random access, programming time, and chip program time on page 1. Speed classes changed in Table 27, Table 28, Table 29, Table 30, and Table 34. Table 14: Enhanced buffered program commands, 16-bit mode added. Table 12, Table 13, Table 15, Table 16, Table 17, Table 22, Table 26, Table 38, and Table 40 updated as well as Figure 23. Figure 31: Enhanced buffered program flowchart and pseudocode added in Appendix D. 28-Jan-2008 3 Document status promoted from preliminary data to datasheet. Speed classes and page size modified on page 1. Modified: Section 2.8: VPP/write protect (VPP/WP), Section 3.6: Automatic standby, Section 6.1.5: Block Erase command, Table 3: VPP/WP functions, Table 22: Operating and AC measurement conditions, Table 25: DC characteristics, and Table 40: Primary algorithm-specific extended query table. Added: Table 23: Power-up waiting timings and Figure 12: Power-up waiting timings. Changed erase suspend latency time in Table 17: Program, erase times and program, erase endurance cycles. Minor text changes. 20-Mar-2008 4 Applied Numonyx branding. 5 Modified: Table 4: Bus operations, 8-bit mode, Table 5: Bus operations, 16-bit mode, Table 23: Power-up waiting timings, Table 40: Primary algorithm-specific extended query table, and Figure 12: Power-up waiting timings. Added tPHWL and tRHWL timings in Table 29: Reset AC characteristics, Figure 22: Reset AC waveforms (no program/erase ongoing), and Figure 23: Reset during program/erase operation AC waveforms. Minor text changes. 30-Mar-2007 23-Oct-2007 21-Apr-2008 92/94 M29W128GH, M29W128GL Table 43. Revision history Document revision history (continued) Date Version Changes 6-Oct-2008 6 Added automotive device grade and automotive qualified information to cover page and order information page. 5-Nov-2008 7 Made the following changes: - New ambient temperature range 1 (0 - 70 C) to Section 9: DC and AC parameters and to Section 11: Ordering information. - New package FBGA 11 x 13 - Corrected a CFI field (address 24h in x16 mode) - Minor text changes 18-Feb-2009 8 Added information for Automotive Device Grade 3; This Grade 3 changes extends the possible upper temperature range from 85 C to 125 C, which change is shown in the cover page. 11-March-2009 9 Corrected LBGA to FBGA (package name). 24-April-2009 10 Corrected block address numbers in Figure 4.: Block addresses. 11 Made the following changes: - In Table 15.: Block protection commands, 8-bit mode on page 46, the Read VPB Status row, changed X to BAh - Table 16.: Block protection commands, 16-bit mode on page 48, the Read VPB Status row, changed X to BAd - In Table 17.: Program, erase times and program, erase endurance cycles on page 49, changed Block Erase max value to 2 seconds; changed Erase Suspend Latency Time max value to 45 s. - In Table 25.: DC characteristics on page 61, added ICC2 Grade 6 with a max value of 100 uA; added ICC2 Grade 3 with a max value of 200 uA. - Added the followng note to Table 15.: Block protection commands, 8-bit mode and Table 16.: Block protection commands, 16-bit mode: The VPB program and VPB clear operations can be performed only with a timing /WE controlled not CE controlled. 19-April-2010 93/94 M29W128GH, M29W128GL Please Read Carefully: INFORMATION IN THIS DOCUMENT IS PROVIDED IN CONNECTION WITH NUMONYXTM PRODUCTS. NO LICENSE, EXPRESS OR IMPLIED, BY ESTOPPEL OR OTHERWISE, TO ANY INTELLECTUAL PROPERTY RIGHTS IS GRANTED BY THIS DOCUMENT. EXCEPT AS PROVIDED IN NUMONYX'S TERMS AND CONDITIONS OF SALE FOR SUCH PRODUCTS, NUMONYX ASSUMES NO LIABILITY WHATSOEVER, AND NUMONYX DISCLAIMS ANY EXPRESS OR IMPLIED WARRANTY, RELATING TO SALE AND/OR USE OF NUMONYX PRODUCTS INCLUDING LIABILITY OR WARRANTIES RELATING TO FITNESS FOR A PARTICULAR PURPOSE, MERCHANTABILITY, OR INFRINGEMENT OF ANY PATENT, COPYRIGHT OR OTHER INTELLECTUAL PROPERTY RIGHT. Numonyx products are not intended for use in medical, life saving, life sustaining, critical control or safety systems, or in nuclear facility applications. Numonyx may make changes to specifications and product descriptions at any time, without notice. Numonyx, B.V. may have patents or pending patent applications, trademarks, copyrights, or other intellectual property rights that relate to the presented subject matter. The furnishing of documents and other materials and information does not provide any license, express or implied, by estoppel or otherwise, to any such patents, trademarks, copyrights, or other intellectual property rights. Designers must not rely on the absence or characteristics of any features or instructions marked "reserved" or "undefined." Numonyx reserves these for future definition and shall have no responsibility whatsoever for conflicts or incompatibilities arising from future changes to them. Contact your local Numonyx sales office or your distributor to obtain the latest specifications and before placing your product order. Copies of documents which have an order number and are referenced in this document, or other Numonyx literature may be obtained by visiting Numonyx's website at http://www.numonyx.com. Numonyx StrataFlash is a trademark or registered trademark of Numonyx or its subsidiaries in the United States and other countries. *Other names and brands may be claimed as the property of others. Copyright (c) 2010, Numonyx, B.V., All Rights Reserved. 94/94