In the operating states (RESET, DIAGNOSTIC, ACTIVE, and SAFE), if the BOOST switching-clock error is detected while the internal OSC clock source is in good condition, then the following occurs:

• The BOOST_FSW_CLK_ERR status bit is set.
• The BOOST converter is disabled without activating resistive discharge.
• The device goes into the SAFE state.
• The device error counter increments.
• The ENDRV/nIRQ pin is asserted low to interrupt the external system MCU.

If the BOOST converter is configured as a RESET state condition, and when the BOOST output discharges to less than its UV-threshold level, then the device goes into the RESET state. In the RESET state, the BOOST converter is enabled again only after the BOOST has discharged below the V_{BOOST_RESTART_LEVEL} voltage level and the f_{SW_BOOST} clock monitor indicates that clock is in good condition. Enabling the BOOST converter again is followed by a full ABIST run during an NRES extension after there is no active RESET state condition.

If an ABIST run in the RESET state fails (because of a clock monitor failure or any other failure) the device goes into the SAFE state again, repeating the same procedure until the device error counter reaches its programmed power-down threshold value and the device goes into the OFF state.

While the device is in the SAFE state, the system MCU can detect if a reported clock failure occurred because of a clock-monitor failure or true clock failure. A false clock failure occurs when a clock monitor fails. In case of false clock-failure detection, the system MCU can disable the clock monitoring. As a single-point failure, clock monitoring failure is not a critical failure, and therefore, the system MCU can ignore it.

While the device is in the RESET state, and when the BOOST converter is enabled again, the device goes into the OFF state, if the BOOST does not ramp-up within the time-out interval for the RESET state, and the device transitions to the OFF state.

If the BOOST converter is not configured as a RESET state condition, the device stays in the SAFE state as the BOOST output discharges to less than its UV-threshold level. The system MCU can enable the BOOST converter by setting the BOOST_EN control bit in the PWR_CTRL control register.

While the device is in the SAFE state, the system MCU can command the clock-monitor to perform a diagnostic test. If this diagnostic test fails, the system MCU can disable the clock monitoring function. As a single-point failure clock monitoring failure is not a critical failure, and therefore, the system MCU can ignore it.