Part Number: AM6548
Hi,
We are currently defining the implementation approach for the DMSC-related diagnostics in the AM65x Functional Safety Manual and would appreciate clarification regarding DMSC5, DMSC6, DMSC8, and DMSC9.
The manual states that DMSC8/DMSC9 are the primary diagnostics and should be implemented by the MCU-domain safety processor (R5F), while DMSC5/DMSC6 are listed as additional diagnostics. However, the descriptions appear very similar, and we would like to better understand the intended distinction.
Could you please clarify:
-
Are DMSC5/DMSC6 and DMSC8/DMSC9 intended to verify the same configuration registers/MMRs, with the only difference being whether the readback is performed by:
- the DMSC firmware (SYSFW/TIFS), or
- the application/safety CPU (MCU R5F)?
-
Which configuration categories are expected to be covered by these diagnostics (e.g., firewall, power, clock, security, resource ownership, processor configuration, memory/resource assignment, etc.)?
-
Is there a defined list of registers, MMRs, or configuration items that should be verified as part of these diagnostics?
-
Since SYSFW/TIFS is delivered as a binary image and cannot be modified by the system integrator, is implementation of DMSC8/DMSC9 on the safety MCU (R5F) considered sufficient from the system integrator perspective?
Our current understanding is that the safety MCU should independently verify the resulting safety-critical configuration state after DMSC configuration activities and that DMSC8/DMSC9 represent the diagnostics intended to be implemented by customer application software. Could you please confirm whether this interpretation is correct?
Thank you for your support.
Kind regards,
Hamdi Ertan Yasar
Hamdi Ertan Yasar