Rockwell Automation AADvance Controller Solutions Handbook - Manual (Page 56)

 

2-6 Document: 553631
(ICSTT-RM447J_EN_P) Issue: 09:
Solutions Handbook (AADvance Controller)
Position Module Type
I/P A 2 × T9401/2 Digital Input Module, 24V dc, 8/16 Channel +
T9802 Digital Input TA, 16 Channel, Dual or
2 × T9431/2 Analogue Input Module, 8/16 channel + T9832
Analogue Input TA, 16 Channel, Dual
2 × T9300 I/O Base unit
CPU A &
CPU B
2 x T9110 Processor,, T9100 Processor Base Unit
O/P A 2 × T9451 Digital Output Module, 24V dc, 8 Channel + T9852
Digital Output TA, 24V dc, 8 channel,
T9300 Base unit
SIL3 Architectures
SIL3 architectures have at least two processor modules and are suitable for use with:
 SIL3 de-energize to trip applications
 SIL3 energize to action applications when fitted with dual output modules
Faulted input modules in a SIL3 arrangement may be replaced without a time limit;
faulted output modules must be replaced within the MTTR assumed in the PFD
calculations.
In all SIL3 architectures, when the processor modules have degraded to 1oo1D on the
first detected fault, the system must be restored to at least 1oo2D by replacing the
faulty processor module within the MTTR assumed in the PFD calculations or all SIL3
safety instrumented function and high demand safety instrumented functions must be
shut down.