Hi,
As documented in chapter 14.5.3 of TMS570LC4357 TRM, when enabled the PLL slip detection will feed the OSCIN to the GCM clock source 1, when a PLL slip is detected.
What occurs if the Clock source 0 (main oscillator) is disabled before the PLL slip is detected?
I assume that the clock monitoring is disabled: if not, the clock monitoring will feed HF LPO to GCM source 0 and GCM source 1, preventing the use of the PLL.
But as described in chapter 14.4.2 of the TRM, it is the clock monitoring that switches the clock input to HF LPO to GCM sources 0 and GCM source 1 in case of an oscillator failure only. If the clock monitoring is disabled, then I understand that the main oscillator, even if disabled, will be fed to GCM source 1 if a PLL slip is detected.
Am I correct on this or is there any information I missed in the documentation?
Some context: in our safety-critical system we have an external watchdog that will detect a failure in case the PLL logic fails or if the main oscillator fails.
Though, I find interesting having a backup clock to continue software execution to log a fault in a non volatile memory for investigation purpose, even if the CPU runs slower.
I just assume that if the PLL fails, it might be due to a main oscillator failure, and I would prefer the backup of the PLL to be directly the HF LPO, instead of having multiple source switching from PLL to main oscillator to HF LPO.
If this can't be done by an other mean, I'll do it, but I'd just want to know if there is a possibility to do that directly.
Best regards,
Gael