Omniswitch 9700E-CMM what is the filename of the miniboot file please?

[Gman]

I need to boot into miniboot on a Omniswitch 9700E-CMM to clear the password. I get the error

=> run miniboot
## Booting image at ff800000 ...
Bad Magic Number

1. What is the name of the miniboot file so I can be sure it is not deleted?
2. Is ff800000 the typical default address for miniboot?
3. Can someone explain why line "reflash=if tftp...." is asking to erase 0xfff80000 which is the address where miniboot is called from later in the env settings?

Here is my machine

=> printenv
bootargs=
baudrate=9600
loads_echo=1
loadaddr=0x3000000
stdin=serial
stdout=serial
stderr=serial
reflash=if tftp 0x500000 u-boot.bin; then protect off all; erase 0xfff80000 0xffffffff; cp.b 0x500000 0xfff80000 0x80000; else echo reflash failed
; fi
rescue=usb scan; fatload usb 0 $loadaddr rescue.img; bootm
miniboot=bootm 0xff800000
osboot=fatload ide 0 $loadaddr $rootpath/$bootfile; bootm || setenv rootpath certified; fatload ide 0 $loadaddr certified/Jos.img; bootm || run miniboot
aosImageId=fatload ide 0 0x4000000 $rootpath/Jrelease.img
ethaddr=e8:e7:32:67:72:3f
eth1addr=e8:e7:32:67:72:3f
bootdelay=2
serverip=
hostname=CMM
bootfile=Jos.img
serialmode=modemControlOff
bootcmd=run osboot
bootpre519=false
ramsize=1073741824
rootpath=certified
ipaddr=192.168.1.1
netmask=255.255.255.0
gatewayip=192.168.1.254
bootflags=0x1000

Environment size: 833/8188 bytes


==============================================
Here are the files in the directory from the compact flash listed on a windows machine.

certified directory
"D:\certified\Jadvrout.img"
"D:\certified\Jbase.img"
"D:\certified\Jdiag.img"
"D:\certified\Jdni.img"
"D:\certified\Jeni.img"
"D:\certified\Jos.img"
"D:\certified\Jsecu.img"
"D:\certified\software.lsm"

working directory
"D:\working\Jdiag.img"
"D:\working\Jdni.img"
"D:\working\Jeni.img"
"D:\working\Jos.img"
"D:\working\Jsecu.img"
"D:\working\software.lsm"
"D:\working\Jadvrout.img"
"D:\working\Jbase.img"