SLLSFM2A November 2024 – October 2025 TCAN2855-Q1 , TCAN2857-Q1
PRODUCTION DATA
The device has a fail-safe mode, default on, which is entered when certain fault events take place. When fail-safe mode is entered, a global interrupt is issued and the sleep wake error (SWE) timer, tINACTIVE, if enabled starts and VCC1, VCC2 and VEXCC are turned off. The reason for entering fail-safe mode is provided by register 8'h17[3:1] and expanded further with other interrupt flags. This mode can be disabled by using register 8'h17[0], but the recommendation is to stay enabled as fault monitoring is active in fail-safe mode and not sleep mode. This mode turns on LIMP and brings other functions into lower power mode states. When entering fail-safe mode the LDOs are kept off for at least tLDOOFF, approximately 300ms. During this time wake events are monitored and preserved. After tLDOOFF times out wake events causes the device to transition to restart mode. If enabled and the SWE timer times out prior to faults being cleared and a wake event taking place, the device transitions to sleep mode. Figure 8-26 shows the various fault conditions that causes the device to enter fail-safe mode. If the fault conditions are cleared and a wake event takes place, the device transitions to restart mode. Figure 8-27 provides a high level flow chart for fail-safe mode.
A fail-safe mode counter is available allowing a set number of fail-safe events in a row which then causes the device to perform the programmed action which can include going to sleep where a WUP, WUF or LWU event does not wake the device. A power on reset is required. The counter is default disabled and can be enabled at 8'h17[7:4] ≠ 0000b. The counter expiration action is at 8'h17[7:4]. The number of events before action is programmed is set at 8'h18[7:4] with a value up to 16 events. 8'h18[3:0] is the running up/down fail-safe event counter that can be read and cleared.
There are multiple ways to exit fail-safe mode depending upon the fault and programmed configuration.
For the device to enter fail-safe mode, there has to be a method for the device to wake up. This can be by the communication bus or a WAKE pin. If these are all disabled for fail-safe mode, the device automatically makes the CAN FD and LIN transceivers wake capable.
When the device enters fail-safe mode, the SWE timer automatically starts, if enabled.
When fail-safe mode is entered due to any condition other than TSD the following takes place.