SPRUIV7B May 2022 – September 2023 AM620-Q1 , AM623 , AM625 , AM625-Q1 , AM625SIP
This reset is issued when the M4FSS detects a catastrophic safety error or a MCU WDT timeout occurs.
Errors in the MCU domain cause the MCU ESM module to trigger error output.
This is routed as a device warm reset when enabled by the MCU domain CTRLMMR bit (MCU_ESM_ERROR_RST_ENz).
This is an asynchronous reset type (takes effect immediately).
All modules in MCU domain are reset except for MCU domain CTRLMMR bits which are reset only on PORz.
IOs are not affected.
Error is reported on MCU_ERRORn pin.
When SAFETY_ERROR_RST_n is de-asserted, the MCU domain needs to be reconfigured by the R5FSS (secondary boot loader) in the MAIN domain.
External hardware (PMIC or secondary MCU safety channel) must issue MCU_PORz to recover from this error.
All modules in MAIN domain are reset except for reset isolated modules and MAIN domain CTRLMMR bits which are reset only on PORz.
IOs are not affected.
Device will re-boot. During boot-up, the R5FSS (secondary boot loader) will poll the CTRLMMR reset source register and configure the MCU domain/M4FSS processor accordingly.
If the device boot fails, and MCU_ERRORn level is still LOW, then an external safety device should issue the MCU_PORz reset to allow the device to recover from the error.