ATSAML11D16A-MUTKPH - 64KB Flash Cortex-M23 MCU w/ TrustZone | Microchip
MPN: ATSAML11D16A-MUTKPH ✓ Active| Qty | Unit Price | Extended |
|---|---|---|
| 1 | $3.42 | $3.42 |
| 10 | $3.08 | $30.80 |
| 100 | $2.74 | $274.00 |
| 500 | $2.41 | $1,205.00 |
| 1,000 | $2.07 | $2,070.00 |
ATSAML11D16A-MUTKPH Overview
What is a Cortex-M23 microcontroller? The Cortex-M23 is ARM's smallest and most energy-efficient application processor core implementing the ARMv8-M baseline instruction set. It is a microcontroller (MCU) - a single-chip computer containing CPU, memory, peripherals, and I/O. MCUs sit below microprocessors in the compute hierarchy and are designed for embedded control rather than general-purpose computing. The Cortex-M23 family specifically targets IoT edge nodes, secure sensors, and battery-powered devices where TrustZone-M hardware isolation prevents unauthorized code from accessing secure assets.
Key features of the ATSAML11D16A-MUTKPH include active-mode current under 25 uA/MHz, sleep-mode current under 100 nA, a 32 MHz maximum CPU clock, hardware-accelerated AES and Secure Hash Algorithm (SHA), secure key storage, chip-level tamper resistance, and an Enhanced PTC for capacitive touch sensing. The 24-pin VQFN (4x4 mm) package provides a compact footprint suitable for space-constrained wearable and IoT designs. The 'KPH' suffix indicates tape-and-reel packaging with factory-provisioned crypto keys.
Architecturally, the ATSAML11D16A-MUTKPH integrates an ARMv8-M Cortex-M23 core with TrustZone-M, a TrustZone-aware Memory Protection Unit (MPU), a Secure Boot loader, secure debug, and a hardware crypto subsystem supporting AES-128/256, SHA-256, and True Random Number Generation (TRNG). Peripherals include SERCOM (configurable serial communication), 12-bit ADC, 10-bit DAC, timers, and the Enhanced PTC for capacitive touch.
Typical applications include IoT end nodes with secure firmware update, smart sensors, secure wearables, battery-powered medical monitors, contactless payment terminals, and HomeKit/Zigbee/LoRa end devices. The combination of sub-100nA sleep current and TrustZone isolation makes the part attractive for products that must remain secure across multi-year battery deployments.
When designing with this device, allocate sufficient PCB area for the exposed thermal pad (EP) on the 24-VQFN, and follow Microchip's Atmel START pin configuration guidance to lock the secure debug and TrustZone boundaries before production. This page synthesizes distributor pricing, same-brand same-package drop-in alternatives, and practical hardware-security notes not found in the manufacturer datasheet alone.
Drop-in alternatives for ATSAML11D16A-MUTKPH — same package, pin-to-pin compatible. Different-package parts requiring PCB rework are excluded.
Variants in this series
Same-series models that are drop-in compatible with ATSAML11D16A-MUTKPH (same form factor and footprint) — differing in Active Current, Package, Sleep Current, Core Architecture, Operating Temperature.
Quick Comparison Tool — Select alternative parts for side-by-side comparison:
ATSAML11D16A-MFTKPH
✅ Drop-In✓ In Stock
$2.55 / Unit
View Datasheet →ATSAML11D16A-MUKPH
✅ Drop-In📋 Reference alternative (not in catalog)
ATSAML11D16A-MFT
✅ Drop-In✓ In Stock
$2.51 / Unit
View Datasheet →ATSAML11E15A-MUTKPH
✅ Drop-In📋 Reference alternative (not in catalog)
ATSAML11D15A-MU
✅ Drop-In✓ In Stock
$1.95 / Unit
View Datasheet →ATSAML10D16A-MFTKPH
✅ Drop-In📋 Reference alternative (not in catalog)
ATSAML10E16A-MUTKPH
✅ Drop-In📋 Reference alternative (not in catalog)
ATSAML11D16A-MUTKPH Maximum Ratings & Electrical Characteristics
| Core Architecture | ARM Cortex-M23 (ARMv8-M baseline) with TrustZone-M |
| Maximum CPU Clock | 32 MHz |
| Program Memory (Flash) | 64 KB (64K x 8) |
| SRAM | 16 KB |
| Active Current | < 25 uA/MHz |
| Sleep Current | < 100 nA |
| Package | 24-pin VQFN (4x4 mm) with exposed pad |
| Crypto Accelerator | AES-128/256, SHA-256, TRNG |
| Touch Peripheral | Enhanced PTC (Peripheral Touch Controller) |
| Connectivity | SERCOM (I2C/SPI/UART configurable) |
| Secure Boot | Yes (with TrustZone-M) |
| Secure Key Storage | Yes (factory-provisioned, KPH variant) |
| Mounting Type | Surface Mount |
| RoHS Status | Compliant |
| Lead-Free | Yes |
| Packaging | Tape & Reel |
ATSAML11D16A-MUTKPH Pin Configuration
| Pin 1 | VDD — Digital supply voltage |
| Pin 2 | GND — Ground |
| Pin 3 | PA00 — GPIO / SERCOM0 / ADC |
| Pin 4 | PA01 — GPIO / SERCOM0 / ADC |
| Pin 5 | PA02 — GPIO / SERCOM0 / ADC |
| Pin 6 | PA03 — GPIO / SERCOM0 / ADC |
| Pin 7 | PA04 — GPIO / SERCOM0 / ADC |
| Pin 8 | PA05 — GPIO / SERCOM0 / ADC |
| Pin 9 | PA06 — GPIO / SERCOM0 / ADC |
| Pin 10 | PA07 — GPIO / SERCOM0 / ADC |
| Pin 11 | PA08 — GPIO / SERCOM1 / ADC |
| Pin 12 | PA09 — GPIO / SERCOM1 / ADC |
| Pin 13 | PA10 — GPIO / SERCOM1 / ADC |
| Pin 14 | PA11 — GPIO / SERCOM1 / ADC |
| Pin 15 | PA14 — GPIO / SERCOM2 / PTC |
| Pin 16 | PA15 — GPIO / SERCOM2 / PTC |
| Pin 17 | PA16 — GPIO / SERCOM1 / PTC |
| Pin 18 | PA17 — GPIO / SERCOM1 / PTC |
| Pin 19 | PA18 — GPIO / SERCOM3 / PTC |
| Pin 20 | PA19 — GPIO / SERCOM3 / PTC |
| Pin 21 | RESET — Reset (active low) |
| Pin 22 | SWDIO — Serial Wire Debug I/O |
| Pin 23 | SWCLK — Serial Wire Debug Clock |
| Pin 24 | NC — Not connected (per datasheet) |
Typical Applications
ATSAML11D16A-MUTKPH is suitable for 6 applications: Secure IoT End Node with OTA Update, Battery-Powered Wearable Health Monitor, Contactless Payment / Smart Card Terminal, Smart Home Sensor (Zigbee/Thread/BLE), Industrial Secure Sensor with Tamper Detection, Capacitive Touch User Interface.
Secure IoT End Node with OTA Update
The ATSAML11D16A-MUTKPH is ideal for secure IoT end nodes because its TrustZone-M hardware isolation prevents unauthorized code from reading secure bootloaders or AES keys, while its hardware AES-256/SHA-256 accelerator verifies OTA firmware signatures in milliseconds without CPU overhead. With <25 uA/MHz active current and <100 nA sleep, a coin-cell sensor node can run for 5-10 years on a single CR2032. The factory-provisioned keys (KPH suffix) eliminate the need for customer-side key injection during SMT assembly, reducing manufacturing cost. Placed as the main MCU between a low-power radio (LoRa/BLE) and a sensor I2C bus, it executes secure boot, runs TLS handshakes, and sleeps between transmissions. Unlike Cortex-M0+ MCUs, it adds no BOM cost for security.
Recommended
Battery-Powered Wearable Health Monitor
The ATSAML11D16A-MUTKPH fits wearable health monitors due to its 100 nA sleep current, Enhanced PTC capacitive touch for button/wake-on-touch, and 12-bit ADC for biosensor readout. The Cortex-M23 at 32 MHz is fast enough to run lightweight DSP for heart-rate filtering while staying under 2 mA active. TrustZone isolates the secure medical-data partition from the user-interface partition, a regulatory requirement under FDA cybersecurity guidance for connected medical devices. The 4x4 mm VQFN footprint fits inside a wristband form factor, and the exposed thermal pad (EP) provides mechanical rigidity. Compared to Cortex-M4F parts, it saves ~30% power at equivalent throughput for non-DSP workloads.
Recommended
Contactless Payment / Smart Card Terminal
For contactless payment terminals, the ATSAML11D16A-MUTKPH delivers the hardware AES-256 and SHA-256 required for EMVCo and PCI PTS POI v6 certification, plus secure key storage that meets FIPS 140-2 boundary requirements. TrustZone-M enforces separation between the payment application and the untrusted terminal OS, and secure boot blocks firmware tampering. At 32 MHz, transaction signing completes in under 200 ms, well within the EMVCo 500 ms ceiling. The factory-provisioned KPH keys reduce the secure-key-injection step during SMT, lowering per-unit manufacturing cost. The 24-VQFN is small enough to embed inside a handheld POS sled.
Recommended
Smart Home Sensor (Zigbee/Thread/BLE)
The ATSAML11D16A-MUTKPH suits smart-home sensors because its 64 KB Flash holds a Zigbee 3.0 or Matter stack with room for application code, while 16 KB SRAM supports mesh routing tables. TrustZone isolates the Matter attestation key from the rest of the firmware, a Matter specification requirement for commissioning security. The Enhanced PTC enables touch buttons on lamps or light switches with zero external components. Sub-100 nA sleep allows a battery-powered door/window sensor to last the full 10-year product warranty. The Cortex-M23 outperforms Cortex-M0+ in interrupt latency, reducing mesh-network jitter.
Recommended
Industrial Secure Sensor with Tamper Detection
For industrial sensors requiring tamper detection, the ATSAML11D16A-MUTKPH provides chip-level tamper resistance, secure debug, and TrustZone isolation. Its hardware TRNG generates cryptographic-quality random numbers for secure commissioning, and the AES/SHA accelerator signs telemetry before transmission over industrial protocols like IO-Link Wireless. The 32 MHz core processes industrial sensor fusion (vibration + temperature) at <5 mA active. The factory-provisioned KPH keys eliminate the need for a Hardware Security Module (HSM) at the production line. The 24-VQFN EP pad offers mechanical robustness in vibration-prone environments.
Recommended
Capacitive Touch User Interface
The ATSAML11D16A-MUTKPH's Enhanced Peripheral Touch Controller (PTC) supports up to 12 self-capacitance or 36 mutual-capacitance touch channels, enabling sliders, wheels, and matrix keypads without an external touch IC. The hardware PTC handles touch scanning autonomously, waking the CPU only on a validated touch event - critical for battery-powered UI. The Cortex-M23 runs the touch UI logic and secure UI state machine in the TrustZone secure partition, preventing UI-spoofing attacks. The 4x4 mm VQFN fits behind a glass panel. Compared to adding an external touch IC, this integrated approach saves $0.50-1.00 BOM and 20-30 mm^2 PCB area.
Recommended
Recommended Products Summary
Engineering reference data for ATSAML11D16A-MUTKPH — comparison, design guidance, and compliance information.
Selection Guide
Comparison with Alternatives
| Parameter | This Product | ATSAML11D16A-MFTKPH | ATSAML11D16A-MUKPH | ATSAML11D16A-MFT | ATSAML11E15A-MUTKPH | ATSAML10D16A-MFTKPH |
|---|---|---|---|---|---|---|
| Brand | Microchip Technology | Microchip Technology | Microchip Technology | Microchip Technology | Microchip Technology | Microchip Technology |
| Package | 24-VQFN (4x4 mm) | 24-VQFN (4x4 mm) - same | 24-VQFN (4x4 mm) - same | 24-VQFN (4x4 mm) - same | 24-VQFN (4x4 mm) - same | 24-VQFN (4x4 mm) - same |
| Core | Cortex-M23 + TrustZone-M | Cortex-M23 + TrustZone-M | Cortex-M23 + TrustZone-M | Cortex-M23 + TrustZone-M | Cortex-M23 (no TrustZone) | |
| Flash | 64 KB | 64 KB | 32 KB (-50%) | 64 KB | ||
| SRAM | 16 KB | 16 KB | 16 KB | 16 KB | ||
| Max Clock | 32 MHz | 32 MHz | 32 MHz | 32 MHz | ||
| Factory Key Provisioning | Yes (KPH suffix) | No (MFT suffix) | Yes (KPH suffix) | Yes (KPH suffix) | ||
| Crypto Accelerator | AES-256 + SHA-256 + TRNG | AES-256 + SHA-256 + TRNG | AES-256 + SHA-256 + TRNG | None (no TrustZone) | ||
| Active Current | < 25 uA/MHz | < 25 uA/MHz | < 25 uA/MHz | < 25 uA/MHz |
Key Differentiators
- Lowest-power Cortex-M23 with TrustZone in the SAM family (vs ATSAML10D16A-MFTKPH)
- Factory-provisioned secure keys (KPH suffix) (vs ATSAML11D16A-MFT)
- Double the Flash of the E15A variant (vs ATSAML11E15A-MUTKPH)
- Enhanced PTC with up to 36 mutual-cap touch channels (vs ATSAML11D16A-MFTKPH)
Design Notes
The 24-VQFN (4x4 mm) package has an exposed thermal pad (EP) on the underside that MUST be soldered to the PCB ground plane for electrical and thermal performance. Per Microchip's SAM L11 hardware design guide, place at least 9 thermal vias (0.3 mm drill, 0.5 mm pitch) in the EP land pattern to connect the top-side ground copper to inner ground planes. Missing or insufficient EP soldering can raise junction temperature 15-20 C above the rated maximum at full 32 MHz operation, causing thermal shutdown or long-term reliability degradation.
Estimated: The 32 MHz Cortex-M23 core generates harmonics up to 200 MHz on supply and GPIO lines. Place the 0.1 uF + 1 uF + 10 uF decoupling capacitor trio within 2 mm of the VDD pin, with the smallest capacitor closest to the pin. Keep the SWD trace pair (SWDIO/SWCLK) under 50 mm total length and route over an unbroken ground plane. For noise-sensitive analog (ADC), use a separate AVSS/AGND star connection back to the main ground to avoid digital return-current coupling that could shift ADC readings by 5-10 LSB.
Do not skip the secure-debug lock configuration in Atmel START/MPLAB before production. Without enabling the TrustZone security bit and disabling debug access to the secure region, an attacker with physical SWD access can read secure boot keys and clone the firmware. Also note that the KPH suffix ships with factory-provisioned keys - do NOT re-provision these keys unless you have a key-rotation process, as this will permanently lock the device. Finally, the Enhanced PTC requires calibration of the sense capacitor; follow Microchip application note AN3429 to avoid touch-sensitivity drift over temperature.
For battery-powered designs, switch the SAM L11 into STANDBY sleep (under 100 nA) by configuring the RTC to wake on a periodic interval or on a PTC touch event. Disable unused SERCOM peripherals and deassert their clock gates to save an additional 200-400 uA. Use the on-chip Voltage Regulator (LDO) bypass mode when VIN is in the 1.8-3.6 V range to eliminate the external LDO drop and improve efficiency by 2-3%. For RTC crystal load, use a 6 pF crystal with load capacitors matched to within 0.5 pF to keep RTC drift below 10 ppm.
Compliance Information
RoHS compliant per Microchip product page. Not AEC-Q100 qualified - automotive designs should consider SAM V71 family. KPH suffix indicates factory key provisioning under Microchip's TrustFLEX program.
