What advantages does the module’s CPU offer from Cetitec’s point of view?
Dr. Michael Back: A unique feature of the processor is its dedicated accelerators for safety processing and network communication, known at NXP® as FlexLLCE (Low-Latency Communication Engine) and PFE (Packet Forwarding Engine). These specialized engines allow the CPU to efficiently handle domain and zone control tasks in vehicle architectures. Processing happens with minimal latency, significantly accelerating safety-critical functions such as ECU communication and real-time data handling in vehicle gateways. While often described as hardware acceleration, the performance is actually driven by tailored firmware optimized for the architecture.

The architecture is also highly scalable, allowing developers to implement different operating systems on the cores. In addition to QNX for high-performance control, AUTOSAR OS can be used for resource-efficient real-time processing. Parallel use of multiple operating systems allows each software component to be run in the most optimal environment.

What are the safety and security requirements, and how does the CPU support them?
Dr. Michael Back: To meet stringent functional safety and cybersecurity standards, the S32Z2 processor includes a dedicated Hardware Security Engine (HSE) that ensures secure booting of authenticated firmware only. The secure boot chain protects the module against tampered updates or cyberattacks—especially important in vehicles receiving over-the-air (OTA) updates. Only signed and verified firmware can be installed.

A dedicated microcontroller also monitors voltage levels, protecting the system against unexpected power fluctuations or faulty supplies. This function increases reliability in safety-critical applications and supports ISO 26262 compliance.

Ms. Schindler, comprehensive connectivity is becoming increasingly important in modern vehicle architectures—keyword: Car-to-X communication. How does the module meet these demands?
Ina Schindler: To meet the highest demands for connectivity in cars or construction machinery, the module offers dual Gigabit Ethernet, 16 CAN, and three I3C interfaces. It also supports Zipwire, FlexRay, LIN, and Aurora—covering both traditional and modern communication architectures and enabling efficient integration with existing ECUs and sensors.

While CAN remains widely used for classic ECUs and sensors, modern high-speed bus systems like FlexRay and Ethernet-based protocols are gaining ground. Aurora, a high-speed serial protocol, enables low-latency transmission of high-frequency data streams between FPGAs, processors, or accelerators. The I3C support allows efficient connection of modern sensors for ADAS and environmental perception systems.

The CPU is only one side of the equation—what about software safety and security compliance?
Dr. Michael Back: Cetitec’s security architecture avoids wildcards, ensuring that only validated messages are processed. All messages are defined in a safety matrix with specific access rights, lengths, and parameters, and transmitted securely with firmware containers. This greatly reduces the risk of manipulation, as attacks would require a full compromise of the manufacturer’s update chain.

For functional safety, Cetitec complies with ISO 26262 standards. Certified out-of-context safety elements—like the Safetycore modules—enable ASIL-compliant integration of safety-critical functions, providing flexible solutions for advanced control systems.

Are there other software-related advantages?
Dr. Michael Back: A key benefit of Cetitec’s software is its OS-agnostic design. Post-build configurability allows developers to adjust system-critical parameters without recompiling the source code. Cetitec provides a developer-friendly toolchain that enables flexible configuration.

The software can run on bare metal, static systems, Linux, or POSIX, making it highly scalable. Middleware frameworks also help bridge communication between Linux, AUTOSAR, and bare-metal environments.

Dr. Back, can you provide a real-world example of how MicroSys hardware and Cetitec software work together?
Dr. Michael Back: In highly dynamic control applications, choosing the right sampling rate is crucial. Too low a rate leads to aliasing, distorting control algorithms and causing instability—especially in high-speed environments like drones, which can fly at 500 knots. Sensors must operate at high cutoff frequencies to calculate real-time flight corrections. The S32Z2’s DSP enables efficient real-time signal processing for data interpolation and noise filtering, significantly improving control precision.

Ms. Schindler, the first platform MicroSys adapted was NXP’s S32G CPU. How do the S32Z and S32G platforms complement each other?
Ina Schindler: As mentioned, we offer both S32Z2 and S32G platforms from NXP®. The S32G is ideal as a companion chip for specific applications. Customers benefit from a unified architecture using a single chip provider, simplifying system integration.

The S32G is optimized for communication and gateway functions, while the S32Z handles real-time control. Combined, they allow for efficient data aggregation, distribution, and processing—driven by the tight integration between MicroSys and Cetitec. In practice, we often see that a single chip can’t cover all use cases, especially as new sensors or functions are added. A redesign with added Z-controller integration allows all functional requirements to be implemented flexibly and efficiently.