SPRUJB3C March 2024 – November 2025 AM67 , AM67A , TDA4AEN-Q1 , TDA4VEN-Q1
This reset is issued when the R5FSS detects a catastrophic safety error or a MCU WDT timeout occurs.
Errors in the MCU domain cause the MCU ESM module to trigger error output.
This is routed as a device warm reset when enabled by the MCU domain WKUP_CTRL_MMR1 bit (MCU_ESM_ERROR_RST_ENz).
This is an asynchronous reset type (takes effect immediately).
All modules in MCU domain are reset except for MCU domain WKUP_CTRL_MMR1 bits which are reset only on PORz.
IOs are not affected.
Error is reported on MCU_ERRORn pin.
When SAFETY_ERROR_RST_n is de-asserted, the MCU domain needs to be reconfigured by the R5FSS (secondary boot loader) in the MAIN domain.
External hardware (PMIC or secondary MCU safety channel) must issue MCU_PORz to recover from this error.
All modules in MAIN domain are reset except for reset isolated modules and MAIN domain WKUP_CTRL_MMR0 bits which are reset only on PORz.
IOs are not affected.
Device will re-boot. During boot-up, the R5FSS (secondary boot loader) will poll the CTRLMMR reset source register and configure the MCU domain/R5FSS processor accordingly.
If the device boot fails, and MCU_ERRORn level is still LOW, then an external safety device should issue the MCU_PORz reset to allow the device to recover from the error.