On SPC5, the unlock of a password protected processor requires a special sequence, which is not compatible to the normal SYStem.Up sequence. You can either use SYStem.Mode.Attach or follow the instructions in chapter "Censorship Unlock" of debugger_m...
For SPC5, the program entry address is not set in the DCF records, but in the boot record, which is located in a normal FLASH sector. The boot record usually is (and should be) part of the ELF file. Check the RM for your device to find the supported ...
A power cycle is required to recover the device from reset escalation. In the menu, select SPC58X -> Tools -> Halt Core at power-on reset. Then follow the instructions on the screen.