ST extends STM32 platform into automotive safety

STMicroelectronics has introduced the STM32A microcontroller family, extending its STM32 platform into automotive and other safety-critical control systems through three product lines designed for different performance, memory, and functional safety requirements.

The STM32A4, STM32A5, and STM32A9 families form the first stage of a unified microcontroller architecture intended to support automotive electronics, industrial automation, robotics, and other systems requiring dependable real-time control.

ST introduced the range at its STM32 Summit on 4 November 2026. Initial devices are sampling to selected customers, with broader availability expected to begin during the first half of 2027, starting with STM32A9.

The new platform builds on the company’s established STM32 ecosystem, which has historically served a broad range of industrial and embedded applications. Extending the architecture into automotive systems creates opportunities to reuse development tools and selected software components while addressing the additional safety and qualification requirements of vehicle electronics.

Automotive control systems increasingly combine functions that were previously distributed across separate electronic control units. Zone controllers, local control nodes, and central computing platforms must communicate reliably while managing tasks with different timing and safety requirements.

A local actuator controller may require relatively modest processing resources, yet its outputs must still respond correctly to sensor information and control commands. A larger multi-domain controller can require substantially more memory, computational performance, and communication capacity because it supervises several functions within the vehicle.

ST has divided the STM32A architecture into three tiers to address these different requirements. The entry-level STM32A4 family targets local sensors, actuators, access-control points, safety monitors, and compact control units.

STM32A4 provides configurations with up to 0.5 MB of memory. ST identifies quality-managed applications and automotive functional safety support up to ASIL B, alongside cryptographic capabilities, among the intended characteristics of the family.

Compact controllers often operate close to the physical components they monitor or control. They may acquire analogue measurements, process digital inputs, and operate outputs according to defined timing requirements while communicating with other electronic units.

Maintaining reliable operation requires suitable diagnostic functions and fault handling, even where the computational workload is relatively small. The level of functional safety required depends on the hazards associated with the intended application and the safety requirements allocated to the controller.

The mid-range STM32A5 family extends the platform into body and comfort systems, together with more demanding industrial and robotics applications. ST identifies memory configurations reaching 4 MB, ASIL B safety support, and a hardware security module among its planned capabilities.

The additional memory capacity can accommodate larger applications and more extensive software components. Its relevance will depend on the amount of application code, calibration data, communication software, and diagnostic functionality required by the completed product.

Hardware security modules provide protected processing and storage capabilities for selected cryptographic operations. These can support device authentication, secure communications, and firmware integrity functions when incorporated into an appropriately designed security architecture.

Automotive electronic systems must often remain operational over long service lives, during which software updates and changes in cybersecurity requirements can become necessary. Security support must therefore be considered alongside the ability to maintain and replace firmware without compromising the required operation of the control system.

STM32A9 is intended for the most demanding applications within the initial family. ST identifies up to 12 MB of memory, ASIL D safety support, a split-lock processing architecture, a hardware security module, and Ethernet-oriented connectivity as principal characteristics.

Split-lock processing provides different ways of allocating processor resources. In a split configuration, processing resources may be assigned to separate workloads, while lockstep operation allows redundant execution paths to be compared for fault detection.

Such diagnostic mechanisms can identify certain hardware faults by detecting differences between the results produced by corresponding processing resources. Their effectiveness depends on the processor implementation, supported operating modes, diagnostic coverage, and the response of the surrounding system.

Functional safety remains a system-level engineering requirement. ASIL classifications originate from the hazard analysis and risk assessment process defined by ISO 26262, with the resulting requirements allocated across the relevant hardware and software components.

A semiconductor device designed to support ASIL D applications provides capabilities and supporting development evidence relevant to those requirements. It does not automatically establish that a completed vehicle controller satisfies ASIL D simply because the selected microcontroller supports that level.

System developers must still address fault detection, diagnostic coverage, safe-state behaviour, hardware failure analysis, software verification, and the interaction between the controller and connected equipment.

STM32A9’s networking capabilities are intended for systems where several vehicle functions share processing and communication resources. Ethernet-based connections can provide additional bandwidth for exchanging data between controllers and central computing systems.

Communication throughput is only one part of the requirement. Time-critical control also depends on latency, message scheduling, priority handling, and the ability of the system to respond appropriately when communication fails or becomes unavailable.

These considerations become more important as software-defined vehicle architectures consolidate functions. A controller responsible for several domains may need to isolate safety-critical operations from less critical workloads while maintaining access to common communication and diagnostic resources.

The shared STM32 development ecosystem is intended to assist engineers working across the three families. ST identifies its continuing use of Arm Cortex-M architectures, common software tools, and supporting semiconductor technologies as foundations of the unified platform.

Software reuse can reduce the amount of work required when adapting an application to a related processor family. However, peripheral differences, timing behaviour, memory organisation, and safety qualification requirements may still necessitate substantial engineering and verification.

Code developed for conventional industrial equipment cannot be assumed to satisfy automotive safety requirements without the relevant development evidence and testing. Shared tools and software interfaces can assist migration, but the final application must be assessed against its assigned functional requirements.

ST is also maintaining its existing automotive semiconductor portfolio alongside STM32A. The new range introduces another architecture for future designs rather than establishing an immediate replacement timetable for every automotive microcontroller already supplied by the company.

The first three STM32A families are at the customer sampling stage, while device-level availability, package options, peripheral configurations, and production pricing remain to be established for the broader product range.

Initial engineering evaluations will determine how the planned processing, memory, communication, and safety capabilities translate into individual controller designs as STM32A progresses towards wider commercial availability during 2027.