The nand contains two firmware images, one is the normal firmware and one is a backup. The backup is a very basic firmware which only allows the flashing of a new firmware image - when you boot from it you get a black screen for quite a while (but less than a couple of minutes if I remember) then a white screen with the instrument model number, serial, IP address and the message 'Follow support instructions to restore the firmware'.
You can force the booting of this second image by connecting a serial interface to the back of the front panel. During boot hold down space (I think) and it will stop at a uboot prompt. Then type in 'run bootcmd' hit enter then immediately hold down space. This should drop you into a windows CE bootloader and should say something like
Microsoft Windows CE Bootloader Common Library Version 1.4 Built May 22 2012 09:09:57
Microsoft Windows CE 6.0 Ethernet Bootloader for the Agilent P500 board
Adaptation performed by Agilent Technologies (c) 2008
Reading NAND configuration
P500 Boot Loader Configuration :
Mac address .......... ()
Ip address ........... ()
Subnet Mask address .. (255.255.255.0)
DHCP ................. (Enabled)
Boot delay (seconds).. (0)
Load image 1 at startup
Image addresses. (0xdxxxxxxx for NAND, 0x8xxxxxxx for RAM)
1 (0xd0620000)
2 (0xd2120000)
l) Load memory resident image Load image 1 now
1) Load memory resident image 1 now
2) Load memory resident image 2 now
3) Load memory resident image 3 now
d) Download from platform builder now
u) Start u-boot by resetting
v) Verify Images
If you enter 2 and hit enter it should load the backup. If anything goes wrong, the serial console is the best place to look.
And please don't try and reball or resolder any of the boards, the chances of a bad solder joint being the fault are incredibly small especially considering the temperature these chips run at.
[edit]
If you don't get to the coloured boot screen, then windows CE hasn't finished booting. If it hasn't finished booting, then you won't be able to update the firmware via USB (as it is part of the application) or Ethernet (as the tftp server is enabled via a SCPI command).
There are two main processors on the front panel board - the spear ARM processor and an NXP microcontroller. The spear runs everything, the NXP is used for the soft power button.
If you are seeing an agilent boot screen, when you update to the keysight firmware it will take a while at boot and it does look like it has frozen (for a couple of minutes), just leave it, it will get there eventually.
[/edit]