
To clear a fault directly in the monitor, an additional (and optional) signal is available (clear signal in
yellow arrow). The de-assertion of the FCCU_RF_Sn status bit indicates that the software has properly cleared
the fault. Some monitors miss the clear signal. In this case (clear signal in
, blue arrow) the fault can be
cleared by a write operation into a specific register of the monitor.
Depending on the monitor, the fault indication is a pulse, that is, fault edge triggered, or a constant value, fault
level triggered.
The fault management shall consider that the user can configure a fault as:
•
HW recoverable fault, that is, the fault status within the FCCU remains asserted until the monitor keeps the
fault indication asserted. As soon as the monitor clears the fault indication, it also clears the fault status
within the FCCU.
•
SW recoverable fault, that is, the fault status within the FCCU remains asserted until the software clears it
even if the monitor de-asserts the fault indication.
The generic recommendation is to configure all faults as SW recoverable. In such a way, the FCCU clears the
respective status flag only after an explicit request from the software. In case of HW recoverable, the status flag
automatically clears, and the application may not react properly to the incoming fault.
AN5752
FCCU fault injection, clearing and fake fault interface
AN5752
-
Rev 1
page 6/35