Other Parts Discussed in Thread: TMS320F28388D
Hi,
My customer has several questions to the C2000 TMS320F2837xD series for use in avionics:
- [SAFETY] less safety mechanisms, when compared with Hercules or other options from different vendors. For example, the CPUs are not in lockstep. Why is this the case, and how can we compensate using available safety features?
- [MEMORY] maximum 1 MB of flash, which is quite small. Using the same comparisons mentioned above, we usually find 4 MB. Why is the flash this little? Will customers typically need to use external flash for advanced applications?
- [DEVELOPMENT] no program or data tracing possible. This is a feature we usually expect, why was it deemed not necessary for these MCUs?
- [CONNECTIVITY] we have a system requirement to support two redundant and dissimilar CAN buses. One should be conformant to CAN 2.0, the other one to a CAN FD spec. There is no CAN FD controller in these MCUs, and of course one option would be place an external one. However, in case the required dissimilarity was only at the physical layer (different signaling on the bus, but the same bitrate and message format as in CAN 2.0), could we just use an internal CAN 2.0 controller, with an external CAN FD transceiver? Would this work, technically speaking?
- [CERTIFICATION] is there any other avionics project worldwide that uses these MCUs? Because civil aviation authorities will likely give us a harder time, if we propose the use of devices that are new and unknown for airborne systems.
(*) We also know about the newer TMS320F2838xD. The major addition I see there is the additional connectivity manager core. But multi-core solutions are very challenging to certify in avionics, so our idea is to use only one C28x + CLA. Additionally, these ones are newer, and for us it is usually better to go with more proven devices
Can you please help?
Best regards,
Jan