SLVUCM3 july 2023 AM62A3 , AM62A3-Q1 , AM62A7 , AM62A7-Q1 , TPS6593-Q1
To achieve a system functional safety level of ASIL-B, the following PDN features are available:
Additional Safety Features
The PMIC internal over voltage and under voltage monitoring and their respective monitoring threshold levels are enabled by default and can be updated through I2C after startup. PMIC power rails connected directly to the processor are monitored by default. The unused feedback pin of BUCK3 on TPS65931211-Q1, FB_B3, is assigned to monitor the load switch output voltage that supplies the 3.3V I/O domain. A 3.3V supply must be connected to the feedback pin in order to prevent an error since the PMIC is expecting the 3.3V to be present.
The internal Q&A Watchdog is enabled on the TPS65931211-Q1 NVM. Once the device is in ACTIVE state, the trigger or Q&A watchdog settings can be configured through the secondary I2C2 (GPIO1/GPIO2) in the device. The primary and secondary I2C CRC is not enabled by default but must be enabled with the I2C_2 trigger described in Section 6.2. Once enabled the secondary I2C is disabled for 2ms. It is recommended to enable I2C CRC and wait a minimum of 2ms before starting the Q&A Watchdog. The steps for configuring and starting the watchdog can be found in the TPS6593-Q1 data sheet. Setting the DISABLE_WDOG signal high disables the watchdog timer if this feature needs to be suspended during initial development or is not required in the system.
GPIO_7 of the primary TPS65931211-Q1 PMIC is configured as the MCU error signal monitor, and must be enabled though the ESM_MCU_EN register bit. MCU and Main Domain reset is supported through the connection between the nRSTOUT pin of the PMIC and the MCU_PORz pin of the processor.
There is an option to use the EN_DRV to indicate an error has been detected and the system is entering SAFE state. This signal can be utilized if the system has external circuitry that needs to be driven by an error event. In this PDN, the EN_DRV is not utilized, but available if needed.
The current monitoring is enabled by default for all BUCKs and LDOs.
ASIL-B | ||||
---|---|---|---|---|
External SW Wdog | INTn |
Safety MCU Processing ESM Safety MCU Reset |
Safety Status Signal with IO Read-Back feature | System Input Voltage Monitoring |
PMIC: Q&A Watchdog and I2C2. |
PMIC: nINT pin connected to EXTINTn on the processor |
PMIC: nERR_MCU connected to MCU_ERRORn on the processor |
PMIC: ENDRV | VCCA OV/UV is disabled by default but can be enabled by I2C. |
Device | Power Resource | PDN Power Rail | ASIL-B Supply Voltage Monitoring |
---|---|---|---|
TPS65931211-Q1 (PMIC) | BUCK1-3 | VDD_CORE | PMIC - OV & UV |
BUCK4 | VDDS_DDR | PMIC - OV & UV | |
BUCK5 | DVDD1V8(VDDSHVy) | PMIC - OV & UV | |
LDO1 | VDDSHV5 | PMIC - OV & UV check with mike if UV/OV are monitored when LDO is configured as bypass |
|
LDO2 | VPP (eFUSE) | PMIC - OV & UV | |
LDO3 | VDDR_CORE | PMIC - OV & UV | |
LDO4 | VDDA_MCU | PMIC - OV & UV | |
TPS22965-Q1 | Load Switch | DVDD3V3(VDDSHVx) | PMIC (FB_B3) - OV & UV |