123 Main Street, New York, NY 10001

Clocking & Timing for Automotive ECUs (CAN-FD, Ethernet, PLLs)

← Back to: Automotive Electronics Assemblies

This page helps you turn “I just need some clocks” into a clear clocking concept for your ECUs: how to split timing domains, build clock trees, choose oscillators and RTCs, control jitter and EMC, and map everything to real automotive parts and BOM fields.

Role of Clocking & Timing in Automotive ECUs

Clocking and timing have quietly moved from a background utility to a central design concern in modern vehicles. Higher CAN-FD bit rates, Ethernet backbones and tightly coordinated camera and radar sensors all depend on stable, well-synchronized clocks. Timing now affects not only signal integrity but also data freshness and fusion quality.

In traditional powertrain ECUs, most functions relied on local timers and on-chip PLLs. As long as the engine speed, injection timing and ignition windows were correct within a single ECU, small absolute time errors rarely surfaced. Today, the same vehicle may host dozens of networked ECUs that must share a common sense of time.

New gateway and domain controller architectures introduce cross-ECU and cross-domain synchronization. Autonomous driving and ADAS features depend on consistent time-stamping across camera, radar, LiDAR and inertial sensors so that software can line up events and trajectories correctly. Time has effectively become a shared resource inside the vehicle, with explicit accuracy and jitter budgets.

This page focuses on how to plan clock trees and timing architectures for these use cases: when internal PLLs are sufficient, when dedicated automotive clock generators are required, how CAN-FD and Ethernet synchronization drive reference clock requirements, and how to turn timing decisions into concrete BOM fields for sourcing timing ICs.

Growing role of timing in automotive ECUs Diagram comparing legacy local-timer ECUs with modern networked ECUs that share time via a gateway and domain controllers for ADAS and body functions. From local timing to networked time in the vehicle Legacy powertrain ECU Local timers & on-chip PLLs Single-ECU scheduling More sensors, more ECUs Time must be shared Networked ECUs Gateway & domain controllers Shared time for ADAS, body, infotainment ADAS Body Cockpit Time as a shared resource Accuracy, jitter and synchronization budgets now shape ECU and network design. Clock trees Internal PLLs vs dedicated clock generators. CAN-FD & Ethernet Timing requirements for bus reliability. BOM & sourcing Translating timing needs into part fields.
Illustration of how timing has evolved from local ECU timers to a shared resource coordinated by gateways and domain controllers, with clear impacts on clock trees, networks and BOM planning.

System-Level Timing Requirements & Timing Domains

System-level timing requirements come from several overlapping domains. Network time is driven by CAN-FD and Ethernet TSN synchronization, where gPTP or similar mechanisms align clocks across ECUs. Compute time is driven by MCU and SoC clocking, DDR interfaces and on-chip buses that need low jitter and deterministic latency.

Sensor and actuator timing covers ADC and DAC sampling, PWM generation, position feedback and drive waveforms. These functions often rely on tightly coupled timers or synchronous sampling across multiple channels. Finally, always-on and RTC domains maintain a long-term sense of time across key-off intervals, supporting logs, billing, telematics and scheduled wake-ups from low-power states.

In many architectures a central gateway or compute node acts as a time master, distributing network time to other ECUs while each ECU still maintains its own local clock tree. Some domains may only need local precision, while others require alignment to a global time within microseconds. Accuracy, precision, jitter, skew and wander form the vocabulary for budgeting these requirements.

Network and compute domains mainly stress jitter and skew budgets, whereas sensor domains emphasize deterministic sampling intervals and phase alignment between channels. The RTC and always-on domain contributes long-term accuracy and drift behaviour. Understanding how these domains interact is the first step in choosing clock sources, PLLs and timing ICs that match the real use cases of your ECUs.

Timing domains and time master roles Map of network, compute, sensor and RTC timing domains around a central gateway or time master, with ECUs in powertrain, ADAS, body and cockpit following the shared time. Timing domains around a vehicle time master Gateway / Time Master Network time source for ECUs Network time domain CAN-FD, Ethernet TSN, gPTP Compute time domain SoC / MCU cores, DDR, buses Sensor / actuator domain ADC, DAC, PWM, feedback Always-on / RTC domain Logs, billing, wake timers Powertrain Engine / TCU ECUs ADAS Radar, camera, LiDAR Body BCM, HVAC, lighting Cockpit Cluster, head unit Timing metrics Accuracy, jitter, skew, wander
System-level view of network, compute, sensor and RTC timing domains around a gateway time master, and how these domains feed powertrain, ADAS, body and cockpit ECUs.

CAN-FD & Ethernet Synchronization in Practice

Designing CAN-FD and automotive Ethernet links always starts with timing. For CAN-FD, bus timing, the sample point position, oscillator accuracy and the overall tolerance budget determine how much margin is left before frame errors appear. For Ethernet links such as 100BASE-T1 and 1000BASE-T1, reference clock quality and PHY jitter directly influence eye diagrams and bit error rates.

At the protocol level, time synchronization mechanisms such as gPTP or related TSN profiles align timestamps across ECUs. In hardware, this is realized as limits on oscillator stability, recovered clock quality and timestamp resolution. Each ECU must balance the precision of its local clock against the correction capability and update interval of the network time synchronization scheme.

There are two broad strategies for building a time-aligned network. One uses a local crystal or oscillator in each ECU and relies on protocol-level synchronization to correct frequency and phase differences over time. The other distributes one or more centralized reference clocks, using PLLs and phase alignment so that key ECUs share a tightly controlled timing source with less drift between them.

When reading CAN-FD and Ethernet standards, note the allowed bit-rate tolerance, sampling windows and time-sync accuracy targets instead of hunting for part numbers. From these, derive oscillator accuracy in ppm, acceptable jitter for PHY reference clocks in tens of picoseconds, and the timing error budget per hop. These values can then be written directly into clock and oscillator requirements in your ECU specifications and BOM.

CAN-FD and Ethernet synchronization options Diagram showing CAN-FD and Ethernet ECUs with local oscillators, a gateway or time master, and two strategies: each node with a local crystal plus protocol sync, or centralized reference clock with PLL distribution. CAN-FD & Ethernet timing in practice CAN-FD bus timing Local oscillator & sample point CAN-FD bus ECU 1 XO ECU 2 XO ECU 3 XO Bit timing, sample point, oscillator tolerance budget Ethernet & TSN timing 100/1000BASE-T1, gPTP Ethernet backbone ECU A ECU B ECU C gPTP / TSN Time alignment strategies Local XO + protocol sync Simple wiring, higher drift per ECU Central reference + PLL alignment Tighter control, more routing From standard to timing spec Bit-rate & sample window Oscillator ppm over temp PHY jitter in tens of ps Time budget per hop / ECU
Practical view of CAN-FD and Ethernet timing with local oscillators, TSN time synchronization and two options for building a unified time base across automotive ECUs.

Automotive Clock Sources: Oscillators, PLLs & Jitter Cleaners

Automotive clock trees are built from a small set of building blocks: crystal or MEMS-based oscillators that provide a stable base frequency, PLL-based clock generators that create multiple rails from a single reference, and jitter cleaners or fan-out buffers that redistribute clean clocks to several devices. Real-time clock oscillators add a low-frequency, always-on time base for logging and wake-up functions.

External crystals or oscillators must maintain their frequency accuracy across -40 to 125 or 150 °C, survive automotive shock and vibration and meet long lifetime requirements. PLL clock generators translate one reference into several domain-specific clocks for SoC cores, DDR, Ethernet PHYs or SerDes, while respecting jitter, phase noise and power-up sequencing constraints specific to the ECU.

Jitter cleaners and fan-out buffers become important when clocks are recovered from networks or high-speed links and need to be reconditioned before driving sensitive PHYs or ADCs. They can filter high-frequency jitter and provide multiple outputs with controlled skew. RTC oscillators, often at 32.768 kHz, focus on ultra-low power and long-term drift instead of very low jitter, so they are optimised and specified differently from high-speed clock sources.

In automotive designs, all of these devices must satisfy AEC-Q qualification, EMC limits and cold-crank behaviour. Gateway and domain controller ECUs frequently combine one high-quality XO with a multi-output clock generator, while many body ECUs rely on a single oscillator feeding the MCU’s internal PLLs. The key is to match the clock source architecture to the timing domains and jitter budgets identified earlier, instead of treating clocking as an afterthought.

Clock source options for automotive ECUs Card-style diagram comparing crystal and MEMS oscillators, PLL-based clock generators, jitter cleaners and RTC oscillators for different automotive ECU use cases. Clock source options for automotive ECUs XO / Crystal / MEMS Base frequency source ppm over temperature Body & simple ECUs XO Clock generator 1-in → multi-out PLL SoC, DDR, TSN PHY Gateway / domain controller Jitter cleaner / fan-out Clean recovered clocks Low jitter distribution High-speed links, SerDes RTC oscillator 32.768 kHz, always-on Logs, billing, wake timers Backup supply domain Automotive constraints on all clock sources -40…125/150 °C, AEC-Q grade, EMC limits, cold-crank and long lifetime Gateway / domain controller XO + clock generator Multiple rails & TSN PHYs ADAS / radar / camera ECU Ref clock for SerDes / RF Optional jitter cleaner Body / comfort ECU Single XO + MCU PLL CAN-FD timing, cost focus XO
Overview of crystal and MEMS oscillators, PLL-based clock generators, jitter cleaners and RTC oscillators, and how they map onto different automotive ECU types and constraints.

Real-Time Clock (RTC) & Always-On Domains

Real-time clock and always-on domains provide the long-term sense of time in an automotive system. They support timestamping events, recording mileage and usage for fleet and billing, keeping diagnostic logs ordered and scheduling wake-up events when the rest of the ECU is powered down. Unlike high-speed clock sources, RTCs focus on calendar time and drift over months and years, not picosecond jitter.

Many simple ECUs rely on an internal RC oscillator for coarse timing, but its accuracy and temperature drift are usually insufficient for long-term logging or billing. A 32.768 kHz crystal or MEMS-based RTC oscillator offers much better stability over -40 to 125 or 150 °C and can be calibrated to reduce long-term error. The trade-off is extra BOM cost, layout care and startup time, which must be weighed against project requirements.

The RTC typically lives in an always-on power domain that remains supplied when the main ECU rails are off. This can be powered by a coin cell, a supercapacitor or a keep-alive rail derived from the vehicle battery. Backup domain current in the nanoamp to microamp range directly sets how long the RTC can retain valid time across parking and storage intervals.

On power-up, the main clock tree ramps, and the MCU or SoC reads the RTC to restore system time if the backup domain remained valid. If the RTC has lost power or drifted beyond limits, the ECU must re-establish time from telematics, backend services or driver input and flag the logs accordingly. When selecting RTC devices, calendar support, alarm count and flexibility, I²C/SPI interfaces, operating and backup voltage ranges, current consumption and AEC-Q qualification are all key parameters that should be written explicitly into the ECU specification and BOM.

RTC and always-on domain in an automotive ECU Diagram showing an RTC and always-on domain with 32.768 kHz oscillator and backup supply, feeding logs, mileage and scheduled wake-up functions, alongside the main ECU clock tree. RTC and always-on timing in an automotive ECU RTC & always-on domain Long-term time across key-off RTC Calendar & alarms 32.768 kHz Crystal / MEMS Backup supply domain Coin cell / supercap / keep-alive rail Main ECU domain SoC, DDR, PHYs, peripherals Clock tree Time sync on power-up What the RTC & always-on domain enables Time-stamped logs Diagnostics, fault history Mileage & billing Fleet usage, service intervals Scheduled wake-up Periodic reports, charge windows
The RTC and always-on domain use a low-frequency oscillator and backup supply to preserve calendar time for logs, mileage, billing and scheduled wake-ups while the main ECU clock tree is powered down.

Designing Clock Trees for Different ECU Types

Once timing domains are understood, clock trees must be tailored to the type of ECU. Gateways and central compute nodes concentrate network traffic and often act as time masters, so they need structured clock distribution for SoC cores, DDR, TSN Ethernet PHYs and high-speed links. ADAS domain controllers combine heavy compute with high-bandwidth sensor interfaces, which pushes clock tree design toward low jitter and flexible expansion.

Infotainment head units mix application processors, memory, display timing, audio clocks and connectivity modules. Their clock trees must balance signal integrity with EMC and mechanical constraints while leaving room for future screen or interface upgrades. In contrast, body control modules and other simple ECUs typically use a single oscillator feeding an MCU PLL, meeting CAN-FD timing and local control needs without the complexity of a full clock generator.

For each ECU type, it is useful to list the required clock domains: CPU and SoC cores, DDR and memory interfaces, high-speed serial links such as PCIe and SerDes, CAN-FD and Ethernet PHY domains, low-speed peripherals and the RTC or always-on domain. From there, designers can decide how many frequencies must be generated externally, how much can rely on internal PLLs and how many spare outputs should be reserved for later variants.

Gateways, ADAS controllers and head units are strong candidates for a unified clock generator architecture: one high-quality oscillator feeding a multi-output PLL tree. Simple body and comfort ECUs can often remain on a “one XO plus MCU PLL” scheme. Many real projects end up with a hybrid approach where critical high-speed and timing-sensitive domains share a common clock generator, while less critical subsystems use local oscillators for cost and layout simplicity.

Example clock tree for an ADAS domain controller Example clock tree with a main XO feeding a clock generator, which then distributes clocks to SoC core, DDR, Ethernet TSN PHY, SerDes links and RTC domains in an ADAS controller. Clock tree example for an ADAS domain controller ECU Main XO 25 / 40 MHz ref Clock generator & PLLs Multi-output clock tree Config via I²C / SPI SoC core & bus High-speed CPU domain DDR / LPDDR Memory interface clock Ethernet TSN PHY Ref clock for backbone SerDes & camera links GMSL / FPD-Link RTC & always-on Logging & wake timers ADAS domain controller ECU Consolidated timing domains Spare clock outputs for future variants Leave margin in the clock generator for additional PHYs, sensors or display links as the ADAS platform evolves.
Example of a unified clock generator architecture for an ADAS domain controller, with a main XO feeding PLLs that supply SoC cores, DDR, Ethernet TSN PHY, SerDes links and RTC / always-on domains.

Jitter, Phase Noise, Skew & EMC Considerations

Clock quality matters most where it shows up as visible errors. In CAN-FD networks, jitter and phase noise reduce the effective sampling window and eat into the tolerance budget, so frames may need to retransmit more often under worst-case temperature and voltage conditions. In Ethernet links, reference clock jitter and phase noise shrink the eye diagram margin and increase bit error rates at the PHY.

High-speed SerDes links such as GMSL and FPD-Link are particularly sensitive to deterministic jitter, which reduces timing margin and can lead to visible camera artifacts, dropped frames or link re-training. For multi-channel ADCs and DACs, skew and trace length mismatch between channels translate directly into phase errors between signals and distortion in reconstructed waveforms or sensor fusion results.

Display systems that stitch multiple panels or drive complex timing also rely on controlled skew and jitter. Row and column sync signals must stay aligned across cables and boards, otherwise tearing and intermittent jumps become visible to the driver. In all of these cases, the relevant jitter and skew numbers are not abstract: they tie back to link margin, eye openings and system-level performance.

From an EMC perspective, faster clock edges tend to increase radiated and conducted emissions, but simply slowing edges can break timing budgets and worsen jitter. Spread-spectrum techniques can reduce EMI peaks but introduce additional deterministic jitter that must be considered for sensitive PHYs and SerDes links. Layout filters and EMI measures therefore need to be coordinated with clock tree design, while the detailed filter and shield strategy remains with the dedicated EMC and EMI subsystem.

Impact of jitter, phase noise, skew and EMC on interfaces Diagram showing clock quality metrics feeding CAN-FD, Ethernet, SerDes and ADC or display domains, with resulting effects on sampling window, eye diagram, margin and visible artifacts, plus EMC and spread-spectrum trade-offs. Where clock quality shows up in the system Clock quality Jitter, phase noise Skew, edge rate CAN-FD bus Sampling window & retries Ethernet PHY Eye diagram & BER SerDes links GMSL / FPD-Link margin ADC / display timing Channel skew & sync Data integrity Errors & retries Visual artifacts Drops, tearing, jitter EMC and spread-spectrum trade-offs Faster edges raise EMI, but slowing them too much can break timing and jitter budgets. Spread-spectrum helps EMI peaks but adds deterministic jitter that sensitive links must tolerate.
Clock jitter, phase noise and skew directly affect CAN-FD sampling windows, Ethernet eye diagrams, SerDes margin and ADC or display timing, while EMC measures and spread-spectrum settings must be balanced against timing budgets.

Functional Safety, Diagnostics & Redundancy Hooks

In safety-related ECUs, clock sources are not just convenience components: a faulty oscillator or PLL can cause otherwise healthy software to misbehave. Safety standards treat clocks as safety-related hardware elements whose failures must be detected, contained and reported. Undetected clock faults can create bad-but-valid outputs that are more dangerous than a clean shutdown.

At minimum, safety architectures should include mechanisms to detect missing clocks, out-of-range frequencies and loss of PLL lock. Frequency window monitors and missing-clock detectors help identify crystals that have stopped oscillating or drifted far beyond their specified ppm range. PLL lock status flags provide the SoC or safety microcontroller with a simple indication that the internal phase alignment is no longer guaranteed.

Redundancy is often implemented by pairing an external crystal with an internal RC oscillator or by providing two clock paths, such as a primary PLL and a backup oscillator chain. On fault detection, the safety logic can switch to the backup clock and enter a degraded or limp-home mode while still keeping essential functions alive. Watchdog timers, ECC on memories and controlled reset paths complete the response, ensuring that clock faults do not leave the system in an undefined state.

Diagnostic hooks must be visible both locally and to higher-level diagnostic systems. Clock monitors and PLLs should expose lock and fault status via pins or registers to the MCU or safety controller. Clock-related errors, aging indicators and failover events should be logged as diagnostic trouble codes with timestamps so that fleet and service tools can spot patterns over time. Redundant clocking, clear status reporting and well-defined fault reactions together form the basis of a clocking concept that can be integrated into the overall functional safety and FMEDA process.

Functional safety hooks around clock sources Diagram showing primary and backup clock paths feeding a clock monitor, with status signals to MCU or safety controller, watchdog and reset logic, and diagnostic logging for functional safety. Safety, diagnostics and redundancy around clock sources Primary path Crystal + main PLL Backup path Internal RC / backup PLL Clock monitor Missing clock, frequency window PLL lock & switchover logic ECU clock domain SoC, CPU, peripherals Safety MCU / controller Reads status flags Lock & fault status Watchdog & reset Fault response path DTC & logs Clock faults, aging, failover events Safety-oriented clocking concept Combine primary and backup clock paths with monitors, watchdogs and diagnostic logging so clock faults are detected, reported and handled within the functional safety concept.
Functional safety around clocking uses primary and backup clock paths, clock monitors, watchdog and reset logic and diagnostic logging so that clock faults are visible, controlled and integrated into the ECU safety concept.

Vendor & IC Type Mapping (7 Key Suppliers & IC Types)

This section gives engineers and procurement teams a map of where to look for clocking and timing devices, rather than a list of specific part numbers. The goal is to connect the clocking roles described on this page with the main automotive product lines offered by the major vendors, so that shortlists can be built efficiently.

Clocking and Timing IC Types

Clocking devices can be grouped into a few functional categories. Each category maps to dedicated automotive product lines at the major vendors.

Roles of the Seven Major Vendors

The following overview does not list specific device numbers. Instead, it highlights how each vendor positions its automotive clocking and timing product lines so that you know which catalog sections to search.

If your system has a separate “Clock & Timing Solutions” overview page, this section should link to it as the global catalog. Otherwise, treat this mapping as a local map for the Clocking & Timing topic and rely on the individual ECU and application pages for more specific guidance.

BOM & Procurement Checklist

Before approaching suppliers or building RFQ templates, it is helpful to collect all clocking requirements into a structured checklist. The fields below can be translated directly into BOM columns or inquiry paragraphs so that vendors understand the intended use cases and performance targets without guessing.

Clock Generator and PLL Requirements

Oscillator, Crystal and MEMS Requirements

RTC Requirements

System-Level Timing Specification

These fields can be reused directly in BOM tables, RFQ forms and inquiry emails. By stating the clock generator, oscillator, RTC and system-level timing requirements explicitly, you reduce ambiguity, focus supplier responses on suitable automotive product lines and shorten iteration cycles on clocking and timing design.

Request a Quote

Accepted Formats

pdf, csv, xls, xlsx, zip

Attachment

Drag & drop files here or use the button below.

FAQs – Clocking & Timing in Automotive ECUs

These twelve questions collect the real decisions you face when planning automotive clocking and timing: when to move from MCU PLLs to dedicated clock ICs, how precise your oscillators must be, how to handle TSN and safety, and what to tell suppliers so they can quote suitable automotive-grade devices.

When do I need a dedicated automotive clock generator instead of relying on the MCU’s internal PLLs?

You need a dedicated clock generator when one MCU PLL can no longer cover all the domains you care about: SoC core, DDR, Ethernet or TSN PHYs, SerDes, display links and spare outputs. If your ECU is small, with one MCU, CAN-FD and a few peripherals, the internal PLL is usually enough.

What oscillator accuracy do I need for CAN-FD at my chosen bit-rates, and how tight should the tolerance budget be?

For CAN-FD you normally start from the transceiver and controller timing limits, then work backwards. Choose an oscillator accuracy that keeps worst case drift within the sample point window once you add temperature, aging and layout effects. Many designs target tens of ppm per node, but your system budget should drive the exact value.

How does Ethernet TSN / gPTP translate into concrete clock jitter and time-sync requirements on my ECUs?

TSN and gPTP define how tightly nodes must agree on time, but you still have to translate that into hardware limits. Look at the required time error across the network, the sync interval and timestamp resolution, then derive oscillator stability and jitter budgets that keep your ECUs comfortably inside those targets.

What are typical jitter limits for 100BASE-T1 and 1000BASE-T1 reference clocks in automotive systems?

For 100BASE-T1 and 1000BASE-T1 you usually end up with reference clock jitter limits in the tens of picoseconds, integrated over a defined bandwidth. The exact numbers come from the PHY datasheet, but your job is to keep the clock generator, layout and any spread-spectrum settings well inside those margins.

How should I structure the clock tree of a gateway or domain controller ECU to support future feature growth?

For a gateway or domain controller it helps to treat the clock tree as a shared service. Start from your SoC, DDR, Ethernet and SerDes needs, then add a clock generator with enough low jitter outputs and a few spare channels. That way you can add PHYs or links later without redesigning everything.

When should I use a separate RTC IC instead of the MCU’s built-in real-time clock?

A built in MCU RTC is fine if you only need coarse timers while the ECU is powered. You move to a separate RTC IC when you care about timestamping logs, billing or fleet data across key off, need very low backup current or want more alarms and calendar features than the MCU can offer.

How do spread-spectrum techniques help with automotive EMC, and what is the impact on jitter?

Spread spectrum helps you by spreading clock energy over a small frequency range so EMI peaks drop. The trade off is that you introduce deterministic jitter. If your SerDes, TSN or ADC domains are already tight on margin, enable spread spectrum only where you have headroom and always recheck link performance.

What redundancy and diagnostics are recommended for safety-critical clocks in ASIL-B/C/D systems?

For ASIL projects you normally pair a primary crystal or PLL with a backup path and monitors. Use missing clock and frequency window detectors, expose PLL lock status and feed faults into watchdog and reset logic. Your safety MCU should see clear status bits and log clock incidents as diagnostic trouble codes.

How do temperature and aging affect oscillator choice for long-lifetime automotive platforms?

Temperature and aging slowly move your oscillator away from its nominal value, so you have to think in years, not minutes. Long lifetime platforms often choose tighter stability grades or MEMS options, then budget for drift over worst case temperature and lifetime. If timekeeping really matters, also plan for in field calibration.

How can I reuse the same clock tree across multiple ECU variants without over-designing?

To reuse a clock tree across ECU variants, design a core clock generator that covers common domains, then leave a couple of spare outputs and footprints for local oscillators. High end variants can populate extra PHYs or SerDes while low end versions keep the same PCB and simply leave those options empty.

What BOM fields should I specify when sourcing automotive-grade oscillators and clock generators?

When you write the BOM for clocking, do not just say oscillator or clock chip. Spell out frequency, initial accuracy, temperature stability, aging, load capacitance, jitter targets, number of outputs, interfaces, supply range, package and AEC-Q grade. That level of detail tells vendors you are asking for a specific automotive timing solution.

How do I decide whether to centralize time in a gateway ECU or distribute time masters per domain?

Choosing between a central time master and per domain time masters is mostly about coupling. If your sensors and ECUs are tightly fused across the car, a gateway based time master keeps life simpler. If domains are more independent, you can let each domain own its time and bridge them with TSN or gPTP.