Rockwell Automation AADvance Controller Safety Manual User Manual
Page 87
Document: 553630
ICSTT-RM446K-EN-P Issue: 10
_C
4-31
Careful consideration should be given to the affect on the process of
using the 'hold last state' setting. The PFD & PFH data has been calculated on
the basis that the shutdown state is configured to the OFF state. Therefore the
OFF state shall be used for SIL2 and SIL3
An installed module automatically transitions from the Shutdown mode to the
Ready or Recover modes and hence to the Run mode when the RESET button
on the processor is pressed and the application is running.
The following conditions will also cause a module to enter the Shutdown
mode from the Ready, Recover or Run modes:
Stopping the application for any reason
Invalid calibration - the module will not be able to transition out of the
Shutdown mode until the module has been re-calibrated (module
calibration interval recommendation is every 2 years)
Disable line test
The digital output module incorporates line test functionality that can report
and indicate 'no load' field faults. This functionality can be enabled or disabled.
The settings are:
Yes - disables reporting and indication of 'no load' field faults
No - 'No load' field faults are reported and indicated
Availability of output modules
Output modules support redundancy when configured in dual operation using
the appropriate termination assembly. One redundant module may be inserted
or removed at any time without any impact on the safety function of the
system.
DO Termination assembly
The DO termination assembly is safety critical, it comes in two sizes —
simplex or dual. It has fuses for field output power and 8 field termination
connections for the output signals.
Analogue Output Module Safety Features
Analogue Output Module Safety Applications
The Analogue Output Module can be used in the following safety related
applications:
The fail-safe state current of the analogue output module is less than 2mA.
For energize to action high demand applications you must use dual
analogue output modules.
When the module is unlocked, all of its output channels (including any
channels set to hold last state) always go to the de-energized state.