This thread has been locked.

If you have a related question, please click the "Ask a related question" button in the top right corner. The newly created question will be automatically linked to this question.

TDA4VM-Q1: Does TDA4 based ASIL B System necessarily need to comply with all Product Safety Constraints/Assumptions in Safety Manual?

Part Number: TDA4VM-Q1

Hello TI,

1、we only use OSC0 in our system, Regarding [SA_20] and [SA_21], it is a problem in ASIL B system?

or is there any other solution?

2、By the way, does TDA4 based ASIL B System necessarily need to comply with all Product Safety Constraints/Assumptions in Safety Manual?

  • Hi,

    (1)

    The TDA4 device has two external crystal oscillators(HFOSC0 and HFOSC1) , where OSC0 is for the MCU domain and OSC1 is for the Main domain.  Customers can choose to use a single external clock source for Main domain and the MCU domain. OSC0 is required for the MCU/WKUP domain functionality.

    If a single external crystal (WKUP_OSCO), is to be used for entire device, all the diagnostics for the clock are still applicable (DCCs, on-chip clock detection etc.), just that the customer is not providing independent clock sources for both these domains. There by,  failure of the OSC0 will result in the loss of functionality of both domains and use external PMICs to bring the device to safe state would be required.

    Further details at (+) [FAQ] TDA4VM: Is HSFOSC1 external clock required - Processors forum - Processors - TI E2E support forums

    (2)

    Not all diagnostics listed in the Safety Manual need to be implemented.  Section 7 "An In-Context Look at this Safety Element out of Context" goes over this, and provides some high level examples of how to identify IPs that are critical to the safety function.

    Regards,

    kb