you need be in normal mode (not open mode) and clean/erase the cert-sw..., and you can downgrade the APE side (not the CMT side)