beautypg.com

General design measures for functional safety -2 – Rockwell Automation AADvance Controller Safety Manual User Manual

Page 58

background image

4-2

Document: 553630

ICSTT-RM446K-EN-P Issue: 10

_C

Safety Manual (AADvance Controller)


General Design Measures for Functional Safety

I/O Modules

The AADvance system supports single module configurations, where it is

acceptable to either stop the system or allow the signals corresponding to that
module to change to their default fail-safe state. It also supports fault tolerant

I/O configurations where it is required to ensure continued system operation

in the event of a fault.
All configurations may be used for safety-related applications; the choice

between the configurations being dependent on the end-user's fault tolerance

requirements.
The input modules can be configured as a simplex, dual or triple arrangement.

Output modules can be configured as a simplex or dual arrangement. All I/O

modules include line-monitoring facilities; it is recommended that these line

monitoring facilities be enabled for safety-related I/O. For normally de-
energized I/O these facilities shall be enabled.

Note: Refer to the section Digital Field Loop Circuits for details of line
monitoring circuits.