Rockwell Automation T8473 Trusted TMR 120V ac Isolated Digital Output Module - Manual

SDS-8473
Trusted TM Industrial Control System
Trusted TM TMR 120V ac Isolated Digital Output Module-T8473
Issue 2 Jan 2006
T
8
47
3
T
ru
st
e
d
T
M
R
12
0
V
a
c
Is
o
la
te
d
O
u
tp
u
t
FRONT PANEL
DESCRIPTION
The Trusted
TM TMR 120V ac Digital
Output module interfaces to 16 field
output devices. Each output is
isolated. Fault tolerance is achieved
through Triple Modular Redundancy
(TMR) within the same module for
each of the 16 output channels.
The module provides on-board
Sequence of Events (SOE) reporting
with a resolution of 1ms. The “event”
is the actual sensing of the field
device loop current. Each triplicated
section (slice) of the module receives
output data from the Trusted
TM TMR
Processor and sends its data to an
internal safety layer hardware voter.
Each slice uses the voted data to
control the outputs. Every output
channel consists of a four-element
voted array. The output switch array
provides fault tolerant, uninterrupted
control under an output switch failure
condition. Output switching and fault
diagnostics
comply with the
demanding requirements of IEC-
61508 SIL-3 for First Fault - Fault
Tolerant, and Second Fault - Fail
Safe outputs.
When a module fault is detected, the
Trusted
TM TMR Processor will flag the
unhealthy condition, indicating the
need to replace the module. Control
continues
until a replacement
(healthy) module is available.
Replacement modules can be located
in a standby slot next to the module.
Each output is user configurable to
perform line monitoring of the
connected field devices to detect field
wiring and load failures. Automatic
over-current protection is inherent in
every output circuit which eliminates
the need for fuses.
Modules may be placed in any I/O
module slot in a Trusted
TM Processor
Chassis or Expander chassis. Once
the I/O module configuration is set,
mechanical keying is available on all
I/O modules to prevent inserting a
module into an incorrect slot.
Configuration of the module is carried
out using the Trusted
TM Toolset
running on an Engineering
Workstation. Once configured and
loaded into the Trusted
TM Controller,
replacement modules are on-line
educated by the TMR Processor.
FEATURES
Triplicated TMR system
architecture, with fault tolerant
output switching.
16 Isolated Output Channels:
120VAC, 0.5A per channel.
Comprehensive, automatic
diagnostics and self-test.
Automatic line monitoring per
channel to detect open circuit
field wiring / load faults and
short circuit field wiring faults
for energised outputs.
2500Vdc optical and magnetic
isolation barrier.
Automatic channel over-
current protection, no fuses
required.
On-board Sequence of Events
(SOE) reporting with 1ms
resolution.
Module can be hot-replaced
on-line using dedicated
‘Companion Slot’ (adjacent
slot).
Front panel output status
LED’s for each channel
indicate output status and field
wiring faults.
Front panel module status
LED’s indicate module health
and operational mode (Active,
Standby, Educated)
IEC 61508, SIL 3 safety
applications