Hello NXP Team,
SM_133 and SM_137 require redundancy at HW.
In our system(ASILB), ADC and GPIO inputs are safety relevant.
Both ADC and GPIO inputs are used to monitor the power supply. ADC check the voltages on power rails are within expected range and GPIO indicates error status of PMIC.
Do the assumptions on redundancy apply for ASILB?
Will these be necessary if below SW mechanisms are implemented
ADC - ADC tests suggested in manual.
GPIO - Stuck to Battery/GND checks at startup.
Hello,
Apologies for the delay.
The ADC tests mentioned in the safety manual must be executed once per MPFDTI for the use case when the ADCs are used as a safety mechanism.
However for checking against single point faults the ADC self-test can be executed periodically once per FHTI to check for single point faults of the ADC instead of redundancy at the system level. However this would require that the safety application using the ADC as a part of safety function must halt its usage every time the self-test is in execution.
Thanks!
-Yashwant