SPRUIM2H May 2020 – October 2023 AM2431 , AM2432 , AM2434 , AM6411 , AM6412 , AM6421 , AM6422 , AM6441 , AM6442
This reset is issued when the M4FSS detects a catastrophic safety error or a MCU WDT timeout occurs.
Errors in the MCU domain cause the MCU ESM module to trigger ESM_ERRORz.
This is routed as a device warm reset when enabled by the MCU domain CTRLMMR bit (MCU_ESM_ERROR_RST_ENz).
This is an asynchronous reset type (takes effect immediately).
All modules in MCU domain are reset except for reset isolated modules and MCU domain CTRLMMR bits which are reset only on PORz.
IOs are not effected.
Error is reported on MCU_SAFETY_ERRORn pin.
When SAFETY_ERROR_RST_n is de-asserted, the MCU domain needs to be reconfigured by the R5FSS (secondary boot loader) in the MAIN domain.
External hardware (PMIC or secondary MCU safety channel) must issue MCU_PORz to recover from this error.
All modules in MAIN domain are reset except for reset isolated modules and MAIN domain CTRLMMR bits which are reset only on PORz.
IOs are not effected.
Device will re-boot. During boot-up, the R5FSS (secondary boot loader) will poll the CTRLMMR reset source register and configure the MCU domain/M4FSS processor accordingly.
If the device boot fails, and MCU_SAFETY_ERRORn level is still LOW, then an external safety device should issue the MCU_PORz reset to allow the device to recover from the error.