Rockwell Automation AADvance Controller Safety Manual - Manual (Page 88)

 

4-32 Document: 553630
ICSTT-RM446K-EN-P Issue: 10 _C
Safety Manual (AADvance Controller)
Analogue Output module Safety Functions
The Analogue output Module is rated at SIL3 as a fail-safe simplex module.
And 1oo2D as a dual module. For high demand SIL2 energize to action high
demand applications you must use dual analogue output modules. This
arrangement is also rated as SIL3 for energize to action applications. Each
module provides the following safety functions:

Commanded Values and Scaling Factor

Fail-safe Guard Band

Shutdown

Module Status

Diagnostics
Commanded Values and Scaling Factor

User configurable value.

The application cannot change the scaling factor; it can only be changed by
an online update.
Fail-Safe Guard

User configurable value.

Fail-safe guard is user configurable and cannot be changed by the
application; it can only be changed by an online update.

The default value is 1% (0.2mA).
Shutdown
When in the Shutdown mode the Ready and Run indicators will go RED. You
can configure the state of the outputs when the module is in the Shutdown
Mode. You have to decide when you configure the module how you want the
output channels to behave in the Shutdown mode.The output modules can be
configured to provide the following channel values:

De-energized (Off default fail-safe value)

Custom shutdown value

Hold Last State