Hi @phuong_nguyenle
If the HSE firmware was erased by SBAF due to some fatal error, the only option to install the firmware again is a method via MU. It is mentioned here in the HSE FW RM:

HSE DEMOAPP uses only installation via IVT method, so it cannot be used.
So, take a look at section "3.3.1 MU Installation steps by host in AB_SWAP configuration" in the HSE FW RM. This describes the steps you need to follow. It can be done quite easily by debugger, it's just a few writes to registers. The timeouts are long enough.
Regards,
Lukas