Rockwell Automation AADvance Controller Solutions Handbook - Manual (Page 54)

 

2-4 Document: 553631
(ICSTT-RM447J_EN_P) Issue: 09:
Solutions Handbook (AADvance Controller)
SIL2 Output Architecture
A SIL2 output architecture has a single output module with single processor and single
or redundant input modules.
 In de-energize to trip operation, the output modules operate in 1oo2D no fault
conditions and degrade to 1oo1D on detection of the first fault in either module
and fail-safe when there are faults on both output modules.
 In energize to action operation, the output module operates in 1oo2D under no
fault conditions, degrade to 1oo1D on the detection of the first fault in either
module, and they fail-safe when there are faults on both modules.
The illustration shows a SIL2 single output arrangement where the output and
processor modules operate in 1oo1D under no fault conditions and will fail-safe on the
first detected fault.
Table 7: Modules for SIL2 Fault Tolerant Output Architecture
Position Module Type
I/P A T9401/2 Digital Input Module, 24V dc, 8/16 Channel. +
T9801 Digital Input TA, 16 Channel, Simplex
or
T9431/2 Analogue Input Module, 8/16 Channel +
T9831 Analogue Input TA, 16 Channel, Simplex
T9300 Base Unit
CPU A 1 x T9110 Processor Module, T9100 Processor Base Unit
and 9300 I/O Base Unit
O/P A 1 × T9451 Digital Output Module, 24V dc, 8 Channel +
T9851 Digital Output TA, 24V dc, 8 Channel, Dual