Hi Ti,
We are working on the safety application which are compliant to IEC61508 SIL3, we are having doubts on connections of the nERROR pin from MCU. In RM48 datasheet it is mentioned, some external monitor circuit should be there in design to move the system to safe state.
1. Is there any design for external monitor circuit other than TPS65381 PMIC, which shall put the system into safe state?
2. Whether the nERROR pin can be connected (in loopback) to any of the GIO pins, so that the MCU can monitor the IO interrupt? If any error occurs, the MCU can do warm reset. Is this method shall be complaint to IEC61508 SIL3?
Please provide your suggestion, if any. But we have to achieve SIL3 complaint.
Regards,
Monish