Rockwell Automation T8094 8000 Series TMR System Safety Manual - Manual (Page 119)

SAFETY MANUAL
D oc N umber T8094
I ssue 27 – June 2013
Page 98 of 103
9.10.6.26 STM, start time
Purpose: The STM (start time) parameter sets the hour value of the time of day when the
ITSTM or OTSTM will start its first test sequence of the day.
Data type: analogue
Direction: From application to ITSTM or OTSTM
Values: 0 to 23
Notes: A value outside the range 0 to 23 is taken to be 12
9.10.6.27 TA, test active
Purpose: The TA (test active) output lets an ITSTM or OTSTM tell the application when it
is managing an active test.
Data type: Boolean
Direction: From ITSTM or OTSTM to application
Values: TRUE – a test is active
Otherwise FALSE
9.10.6.28 TRA / TRB, test relay A / B
Purpose: The TR (test relay) outputs let the ITSTM control the two test relays ‘A’ and ‘B’
for the input termination assemblies
Data type: Boolean
Direction: From ITSTM to application
Values: FALSE – test of applicable slice is active
Otherwise TRUE
.
9.10.7 Connecting F&G and ESD Systems
If the legacy CS300 system is for a fire and gas detection and protection application
and it provides hardwired shutdown command signals to a complementary emergency
shutdown (ESD) system, these signals must be configured as standard ESD outputs
using dual TM-117-RME termination panels and follow a 3-2-0 output configuration:
• If one 8162 CS300 bridge module fails, the fire and gas detection system will
continue to run.
• If two 8162 CS300 bridge modules fail, the fire and gas detection system will stop
running, and the outputs from the system to the ESD system will go to their default
states when the relevant watchdog timers time out. It is necessary to set up these
default states and the watchdog timers so that, if two CS300 bridge modules
should fail, the operating plant is correctly and safely shutdown.
9.10.8 Retaining the CD901 Diagnostic Panel
The CD901 diagnostic panel provides a LED display of system status and common
alarms. In the legacy CS300 system, it formed a first line indication of system faults.
Although the Trusted TM Toolset provides an indication of system faults, it may be
worthwhile to retain the diagnostic panel to reduce the amount of operator retraining
needed for the migrated system. If the panel is retained, provide suitable support for it
in the migrated application.
9.10.9 TM117-DMX Matrix Driver Interface Module
The TM117-DMX matrix LED driver interface module is used for fault annunciation in
some CS300 systems.
If the migrated system retains the TM117-DMX module, the system must use the
external serial ports on the Trusted
TM TMR processor to drive the module. The
migrated application will use an I/O board interface (implemented by the I/O driver
software of the Trusted TMR Processor) to control the serial ports.