Set Condition

The following failures can cause resets of the low level software:

• General exception (real time operating system, micro controller monitoring, division by zero, etc.)
• Watchdog communication failure
• A safety function was not run in its defined cycle time
• Monitoring of low level software safety functions indicates a failure

The following failures can cause resets of the high level software:

• Monitoring of Shift-By-Wire safety functions indicates a failure
• Monitoring of Signal I/O safety functions indicates a failure
• Failure to store safety relevant fault in the error handler (Error Reaction Manager)
• Failure to set safety relevant limp in action in the error handler (Error Reaction Manager)
• Monitoring of Shift-Control safety functions indicates a failure (electrical current not plausible, inconsistency of actual gear or target gear, power flow implausible, power flow inconsistent to actual gear, implausible combination of valves/clutches)

If no information about the cause of the reset is stored, it is understood to be an under voltage condition. In this case the active state (operation mode) of the operating system when the reset occurred is stored:

• Initialization
• Normal operation mode
• Standby