How I used voltage fault injection to unlock hardware features on a CMP 170HX.