This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

TMS320F28335-Q1: Automotive qualified Master Drive Motor Driver MCU selection

Part Number: TMS320F28335-Q1
Other Parts Discussed in Thread: C2000WARE, TIDM-02009

Hi team,

Here's an issue from the customer may need your help:

The customers are developing an automotive primary drive motor drive with plans to use the C2000 series as the master chip. The models currently under consideration are F28335-Q1, F28379D-Q1, F280049-Q1, and F28386D-Q1.

They have previously worked on projects on the F28335 and have development experience on the third generation C200 and have referenced to following two documents to meet the needs of ASIL-D:

The customer has the following questions:

1) Is functional safety support libraries all in C2000WARE? Or is it required an additional request? Or are there export controls?

2) Since customer are more familiar with the F28335, is it appropriate to develop on the F28335-Q1? For functional safety, does the F28335 also have the same software support as the third generation C2000?

3) Is there a reference design? They've noticed TIDM-02009, but it does not seem to have functional safety in the source code.

4) Does TI have support for autosar and auto code generation?

Could you help check this case? Thanks.

Best Regards,


  • Hi Cherry,

    To answer your question about safety software, the SDL, which provides some reference implementations of several safety mechanisms, is part of C2000Ware. We do have two additional libraries, CLA_STL and C28x_STL, for testing the CLA and CPU respectively that are only available by request since they have been independently assessed and certified. There is more info in the swab014 document you mentioned above. The export controls on those should be the same standard screening we use for C2000Ware.

    None of these libraries support F28335. In general the Gen 3 devices will have more safety software and documentation available as many of them are (or will be) functional safety compliant.


  • Hi Whitney,

    Thanks for your support.

    If the customer are still developing on the F28335, is it required to implement the relevant functional safety tests by themselves? Do these tests require hardware support at the chip level (only available in Gen 3 C2000)?

    Also is there any examples of use cases for primary drive motor drives with C2000 processors? 

    Thanks and regards,


  • Cherry,

    There are some diagnostics for F28335 in this library, but as you can see, it was only developed for IEC 60730. In addition to software, the gen 3 devices do have more hardware features as well that make them capable of functional safety compliance.

    For EV Traction, the TIDM-02009 you pointed out is the most relevant reference design.