manualshive.com logo in svg

ABB Triguard SC300E, Safety Manual

Share
Download
ABB Triguard SC300E Safety Manual Download Page 24

Issue 5 - September 2006

 

Page 24 of 65 

 

1 

Logic Supply B power fail fault 

2

Logic Supply C power fail fault 

3

Reserved 

4

Reserved 

5

Reserved 

6

Field power fail fault 

7

Output discrepancy error 

8

Reserved 

9

Reserved 

10 Reserved 
11 Reserved 
12 Reserved 
13 Reserved 
14 Reserved 
15 Reserved 

Table 4 Piano and Analogue Fault Flags 

The following alarm contacts are available and can be wired into the system for use by the 
application logic. 
 

Power supply fault 

2 off, any system or field power supply 

System cabinet over-temperature 

Cabinet high temperature \ ventilation 
alarm, if fitted. 

Fuse failure 

Any fuse failure, grouping being application 
dependent. 

Watchdog monitoring alarms 

3 off inputs monitoring the external 
triplicated watchdog. 

Table 5 System Alarms 

3.5.9  Automatic Diagnostic Action 

Certain actions, dependent on configuration, must be taken by the application logic on the result 
of certain error flags and combination of error flags. 

3.5.10  Without Time Constraint Configuration 

If a system is configured without time constraint (eg each critical process parameter is controlled 
by at least two separate digital output modules), then only annunciation of diagnostics is 
required. 

3.5.11  With Time Constraint Configuration 

If a system is configured with time constraint (eg any critical process parameter is controlled by 
a single TMR digital output module) then Global Output bit is used to start a timer equal to the 
time constraint of the Output Module and when this timer has elapsed an ESD command should 
be instigated.  Example shown in Appendix 1 

3.5.12  Long Process Time Constraint System 

For systems controlling a process that has single inputs configured using the single slot hot 
repair facility then the "Single Slot Off-Line" error flag must be used to start a timer equal to the 
process time constraint.  When this timer is elapsed an ESD command should be instigated. 

3.5.13 Initialisation Flags 

This flag indicates a wrong configuration of I/O modules or an I/O module or modules missing.  
Although these errors are inherently fail safe (eg when an on-line output module is removed its 
outputs automatically fail-safe). 

Summary of Contents for Triguard SC300E

Page 1: ...Document Reference SS 0728 Issue 5 September 2006 Triguard SC300E Safety Manual Copyright ICS Triplex Technology 1998 2006 Printed in England ...

Page 2: ...d 5 DTW 16 th Dec 2000 released 01 Added further fault diagnostic information corrected RTTS release info and product info DTW 12 th Sept 2001 02 Chapter replaced by section throughout manual 3 5 8 I O module dependent fault flags bit 8 updated 3 6 1 remove analogue restriction 3 6 11 use of triplicated watchdog with remote chassis added 4 1 change reference to User Manual Apdx 4 bit 4 offline mod...

Page 3: ...9 3 5 4 Display System Diagnostics 19 3 5 5 Maintenance Workstations 19 3 5 6 Error Flags and Automatic Diagnostic Actions 19 3 5 7 Monitor flag register 23 3 5 8 I O module dependant fault flags 23 3 5 9 Automatic Diagnostic Action 24 3 5 10 Without Time Constraint Configuration 24 3 5 11 With Time Constraint Configuration 24 3 5 12 Long Process Time Constraint System 24 3 5 13 Initialisation Fla...

Page 4: ...d Events 32 5 4 4 Maintenance Engineering Station 32 5 5 System Shutdown 32 5 5 1 Process Shutdown 32 5 5 2 Triguard SC300E System Shutdown 32 6 Maintenance And Modifications 33 6 1 Introduction 33 6 2 Routine Maintenance 33 6 2 1 System Verification 33 6 2 2 Diagnostic Alarms and Messages 33 6 2 3 Module Change Out 34 6 2 4 Sequence of Repair 35 6 2 5 System Time Constraints 36 6 2 6 Life Cycle P...

Page 5: ... 56 11 4 2 SC300E RTTS 8 30 006 56 12 Appendix 5 RTTS 8 30 007 and 008 57 12 1 System Identification RTTS 8 30 007 57 12 2 Change History 57 12 3 System Identification RTTS 8 30 008 57 12 4 Change History 57 13 Appendix 6 TUV Approved Part Numbers and Revisions 59 13 1 Hardware Approvals 59 13 2 Software Approvals 63 Table of Figures Figure 1 System Overview 10 Figure 2 Current to Voltage Conversi...

Page 6: ...Output IEC International Electrotechnical Commission ISO International Standards Organisation LED Light Emitting Diode LFD Latent Fault Detection MBB Bus Buffer Interface module MDR Mandatory Design Review MPP Main Processor MTTR Mean Time To Repair PAC AC Power Supply for a Triguard system PID Proportional Integral and Derivative process control signals PLC Programmable Logic Controller PSU Power...

Page 7: ... 2006 Page 7 of 65 TÜV Technischer Überwachungs Verein translates to Technical Supervisory Association of Germany TWD Triplicated Watchdog UL Underwriters Laboratories V V Verification and Validation WI Work Instruction ...

Page 8: ...anual is restricted to safety aspects of the functions covered and does not remove the requirements to follow the guidance in SC300E User Manual 008 5197 2 2 Manual Organisation The manual is structured following the introduction section to follow the safety aspects of the Life Cycle model of the Triguard SC300E Programmable Safety Systems Sections are therefore provided on the safety aspects of D...

Page 9: ...urrent state of the system using a 2 oo 3 software vote logging any discrepancies found in a local diagnostic history table Each processor then executes its programmed application logic and sets its respective outputs via the I O communications bus to the required state Commanded output states are received by an output module s microcontrollers which using 2 oo 3 hardware voters set the outputs to...

Page 10: ...three healthy processors otherwise the start up diagnostics will prevent execution of the system application logic The RTTS permits an SC300E system to operate 3 2 0 i e a system will continue to operate with one failed processor For ESD safety configurations output modules are configured to de energise their outputs when the second processor fails Replacement processors can be brought online usin...

Page 11: ... modules have identity type registers that allow the hot repair task to confirm the status of all fitted modules correct module type fitted and online healthy correct module type fitted and offline healthy module type xxx missing incorrect module fitted xxx should be yyy For further information regarding the RTTS please refer to the TriBuild Software Manual 008 5206 For a full description of Trigu...

Page 12: ...fication Requirements That the specified plant input and output configuration fully meets the required Safety Classification Safety Integrity Level Selections eg for Safety Classification AK6 Safety Integrity Level 3 Loops at least 2 independent final element paths are established That the Cause and Effect Fault Schedule Function Block Diagrams or other primary design information is correct That t...

Page 13: ...ation Card will be connected to the Triguard SC300E Input Module via a standard system cable which connects to the socket on the appropriate Hot Repair Adapter Card THR or chassis slot Through the hot repair adapter card where required and the chassis backplane connector the input signal is connected to the configured digital input slot position where a Digital Input Module would be located All th...

Page 14: ...ltage Conversion Where separate transmitters are used to monitor the same safety parameters to meet increased integrity levels these should be configured to separate Analogue Input Modules where practical Switch inputs with end of line and series line monitoring resisters fitted may be connected as analogue inputs These line monitored inputs provide increased diagnostic information to the safety s...

Page 15: ...ety classification requirements of a safety loop requires two or more final elements to be available for shutdown purpose then each final elements should be driven from a separate Digital Output Module and Termination Card where practical The shutdown signal is connected from the Output Module through the chassis backplane the hot repair adapter card and the system cable to the Termination Card wh...

Page 16: ...n a time constraint will apply The time constraint has been conservatively calculated by TUV dependent on the SIL level low demand and based on worst case of all outputs used Time constraint for SIL 3 systems is 2353 hours Time constraint for SIL 2 systems is 7440 hours Time constraint for SIL 1 systems is 23528 hours Time constraint may be extended if less than 32 outputs are safety related for e...

Page 17: ...Issue 5 September 2006 Page 17 of 65 Figure 3 Dual Final Elements ...

Page 18: ...edback from the relay these should be safety type relays It is the responsibility of the system designer to advise the end user of all such devices that are included within the safety systems scope of supply in order for the end user to evaluate there configuration and suitability for the complete safety loop 3 4 4 Systematic Software Faults To provide further tolerance to systematic design and ap...

Page 19: ...h the event is to be referenced to the alarm diagnostic message to be printed The message database is compiled and loaded as part of the load module 3 5 3 Diagnostic LED s As all diagnostic information exists as discretes within the database these can be utilised to drive outputs directly to light panel mounted LED s for example It is also practical to utilise the Dual Serial Multiplexer System TM...

Page 20: ...r 2006 Page 20 of 65 The fault error flags will be located in the Register specified by the user in the Fault Call and are defined as follows for RTTS 8 3 005 006 see appendix 4 please use table for RTTS 8 3 001 to 003 ...

Page 21: ...sed to give primary indication to the operator maintainer that a fault exists within the system In addition to the error flags the chassis system power supply fault contacts should also be wired to at least one digital input channel and used for system power supply fault reporting On the majority of systems other external fault indications would be wired to digital input channels to provide mainte...

Page 22: ...wer feeds into the processor either fuse blown or possibly no chassis PSU fitted 3 5 6 10 Bit 9 B Power MPP 2 Power health this bit indicates that there is a problem with one of the power feeds into the processor either fuse blown or possibly no chassis PSU fitted 3 5 6 11 Bit 10 C Power MPP 3 Power health this bit indicates that there is a problem with one of the power feeds into the processor ei...

Page 23: ...off by microcontroller A 13 Programmatic Health B Health Lamp turned off by microcontroller B 14 Programmatic Health C Health Lamp turned off by microcontroller C 15 Reserved Table 2 Monitor Flag Register 3 5 8 I O module dependant fault flags The 16 bit fault flag register has a format dependant on the I O module type Currently only the DO and Piano and Analogue output modules are supported Bit D...

Page 24: ...traint Configuration If a system is configured without time constraint eg each critical process parameter is controlled by at least two separate digital output modules then only annunciation of diagnostics is required 3 5 11 With Time Constraint Configuration If a system is configured with time constraint eg any critical process parameter is controlled by a single TMR digital output module then Gl...

Page 25: ... Non Safety Functions The following function calls must not be used in Emergency Shutdown Safety Applications GOTO PAUS Only the TUV approved library elements marked with an should be used for safety functions 3 6 2 Modularity and Version Control The TriBuild Ladder Network Editor is a page by page editor allowing function and sub function to be structured on a page by page basis This facility sho...

Page 26: ...itions All Triguard SC300E input and output modules must have their 3 2 0 configuration checked and logged prior to the start of the Factory Acceptance Test FAT In addition to a 100 Cause and Effect Validation full Functional Test the FAT should include as much random testing as is practical as well as test to confirm both fault tolerance and maintainability Particular care should be taken in the ...

Page 27: ...s to enable the proper control of access to the Triguard SC300E Safety System Software security access via the password protection scheme of TriBuild will be the responsibility of the end user The System Integrator must ensure that the end user is fully aware of the facilities of the TriBuild password protection scheme Each processor when in normal operation should have its front key in the run po...

Page 28: ...d The Power Distribution and Alarm Panel PDD24 is a suitable product for this application The Triguard SC300E termination cards provide individual loop fusing with alarms 3 11 3 Field Power Diagnostics Each redundant power module will provide diagnostics fault detection All faults in external power supply modules connected directly to the system eg field power supplies must be alarmed and reported...

Page 29: ...s to the system cabinet must be confirmed and access to the safety system must be by authorised key holders only 4 3 Process Field Connection All input and output safety and safety related loops must be tested including all field devices the sensors and final elements and the results recorded during the loop test period 4 4 Systems Start up and Shutdown Procedures The System start up and shutdown ...

Page 30: ...o application changes during the commissioning phase of a Safety Systems Project When however changes are required it is mandatory to follow the full life cycle change sequence including re confirmation of HAZOPS and full validation All changes must be fully documented and under version control to the same standard as the original system design All changes must be completed prior to the final Site...

Page 31: ...rd SC300E Safety System An auditable permit to works system must be in operation before any system process start up operation occurs Trained maintenance staff will only complete the system power up The Operational Start up procedures documented in the Operations and Maintenance Manual must be followed in the order presented 5 3 1 Process Loading and Start up Before the process is re loaded into th...

Page 32: ...nly be shutdown during a planned major plant maintenance cycle During this period it is likely that both major equipment will be dismantled and serviced and possible process and system parameters modified If process and system parameters are to be modified then Section 7 Maintenance and Modification must be adhered to 5 5 1 Process Shutdown Before the Triguard SC300E Safety System is shutdown the ...

Page 33: ...riguard System the on line system is checked against the off line system stored on the workstation If the systems are different a warning is given and the off line system must be closed down and the correct system selected prior to connecting to the Triguard system 6 2 1 1 Application Logic Verification The application logic can be verified by using the TriBuild Ladder compare facility This compar...

Page 34: ...ion mode 3 2 0 GTZ and HW for output modules In the case dual slot configuration of Triguard SC300E input and output modules the new module should be inserted into the relevant hot repair slot and after the module has confirmed its health by powering the health led the maintenance switch may be toggled which will request the hot repair cycle to be initiated The hot repair cycle is initiated by the...

Page 35: ...supply module should be visually checked The faulty power supply should first be switched off using the front panel switch before unscrewing the chassis fixing screws and then removed The spare module should then be plugged in and powered up The error history clear should now be operated to allow any new faults that occur to be readily diagnosed 6 2 3 5 History Clear During a maintenance repair ac...

Page 36: ...any one time will be limited to the maximum number configured by the system administrator Overrides applied by the use of the TriBuild workstation will have limited time duration related to the shift operating time typically 8 hours A warning is provided by the system that the maintenance overrides will be automatically removed unless reinstated 5 3 Modifications Wherever possible on line modifica...

Page 37: ...d prior to installation 6 2 12 Installation and Commissioning All safety aspects given in Section 5 of this manual must be adopted during the installation and commissioning phase of a modification 6 2 13 Acceptance Test Validation A system validation cause and effect test will be implemented for the modified parts of the systems prior to bringing the modified parts of the system on line 6 2 14 Per...

Page 38: ...at occur during the operational life of the Triguard SC300E Safety System must be logged and analysed for their safety impact All failures or faults must be reported back to the system supplier It is the responsibility of the end user to ensure that an accurate reliability database is maintained for all equipment used for safety related functions 6 6 Maintenance Completion When a modification or m...

Page 39: ...hutdowns in the sequence of shutdown operation Once the plant is in its final safe state all inflammable and hazardous material must be removed from the plant safely and environmentally correctly disposed of or recycled into other operating plants A full clean purge sequence must then be operated and the plant must be certified as fully safe by the appropriate authority before power is finally rem...

Page 40: ...down PIM INIT Fault Shutdown 2oo3 Watchdog Vote Shutdown Network 2 System Repair Time Constraint Shutdown Network 3 4 Diagnostic Alarm Annunciation Network 5 USR3 Analogue Test 1Hz Clock example Network 6 7 Fail Safe Analogue Alarm Processing example Network 8 9 Typical Logic s Network 10 TMR Watchdog Drive Network 11 Communication of diagnostics to DCS using the GDIA call Network 12 Configuration...

Page 41: ...one processor is running on start up or an critical I O module is Off line for more that the time set in timer R1203 or an I O module is removed from the chassis without first being taken Off line or a I O chassis is lost to be system by total power failure or loss of two MBB modules SINGLE SLOT MODULE OFFLINE OverlapDis15852 MODULE OFFLINE PRE ALARM OverlapDis15826 MPP A OUT OF SYNC MPP B OUT OF ...

Page 42: ...C PLC SHUTDOWN TIME CONSTRAINT SHUTDOWN COMBINED PLC SHUTDOWN WorkingDis6006 WorkingDis6008 WorkingDis6009 If the system has any single element safety outputs or any dual element safety outputs are configured on a single output module than the system must be configured with a time constraint Mandatory This timw constraint is set in hours in the Up counter Minimum 2353 hours for SIL 3 7440 hours fo...

Page 43: ...I P FAULT OverlapDis15849 OutputDis9013 MPP C POWER I P FAULT MPP C POWER I P FAULT OverlapDis15850 GLOBAL BATTERY LOW ALARM GLOBAL BATTERY LOW ALARM OverlapDis15851 OutputDis9014 15826 9015 15853 9016 15854 9017 1003 9018 1004 9019 7922 9020 MODULE OFFLINE PRE ALARM SINGLE SLOT MODULE OFFLINE OverlapDis15826 OutputDis9015 GLOBAL O P FAULT GLOBAL O P FAULT OverlapDis15853 OutputDis9016 MULTIPLE FA...

Page 44: ...SYNC MPP A POWER UP FAULT MPP B POWER UP FAULT OverlapDis15845 OverlapDis15846 OverlapDis15847 OverlapDis15848 OverlapDis15849 MPP C POWER UP FAULT GLOBAL BATTERY LOW ALARM MODULE OFFLINE PRE ALARM GLOBAL O P FAULT MULTIPLE FAULTS OverlapDis15850 OverlapDis15851 OverlapDis15826 OverlapDis15853 OverlapDis15854 FIELD PSU FAULT SYSTEM PSU FAULT GLOBAL ANALOGUE FAULT SYSTEM FUSE FAILED InputDis1003 In...

Page 45: ...st and Event Processing Functions Not Mandatory Discrete 7922 is set to logic zero to reset the analogue test logic in USR3 if used Not Mandatory Discrete 6004 is a one scan clock that is true every 0 5 seconds with no accumulative error unless the scan time is set to greater than 0 5 seconds Discrete 6005 is a 1Hz clock with equal mark space ratio It can be used to flash lamps In these example ne...

Page 46: ...ogic generated must be include fail safe logic This is Mandatory A number of methods are available to generate fail safe digital logic inputs from analogue inputs an example utilising the USR3 Analogue test package is given above The values used are those given in the default Analogue test configuration The example above is for a single channel with both high 3800 and low 900 alarms The above circ...

Page 47: ...e logic Thie is Mandatory A number of methods are available to generate fail safe digital logic inputs from analogue inputs an example utilising DEAD BAND elements is given above The fault discretes used are those given in the default Analogue test configuration The example above if for a single channel with both high 3800 and low 900 alarms The above circuit includes user configurable hysteresis ...

Page 48: ... HIGH HIGH ALARM STEAM HEADER PRESSURE PAHH0001C PAHH0001 C PALL0001A LOGIC INPUT PALL0001B LOGIC INPUT PALL0001 2oo3 VOTED LOGIC INPUT WorkingDis5000 WorkingDis5002 WorkingDis3001 PALL0001A LOGIC INPUT PALL0001C LOGIC INPUT WorkingDis5000 WorkingDis5004 PALL0001B LOGIC INPUT PALL0001C LOGIC INPUT WorkingDis5002 WorkingDis5004 PAHH0001A LOGIC INPUT PAHH0001B LOGIC INPUT WorkingDis5001 WorkingDis50...

Page 49: ...2 PALL0001B LOGIC INPUT WorkingDis5002 ESD 1 BLOCK VALVE COMBINED PLC SHUTDOWN WorkingDis6009 ESD2 RESET ESDV0002 HS005 POSITIVE LOGIC LATCH WorkingDis3004 Example Shutdown Logic with resets are shown both positive and negative logic example are shown Implementation of Logic is to customer Cause Effects Logic Diagrams or other design documentation It is Mandatory that the diagnostic shutdown is in...

Page 50: ...orkingDis6005 OutoutDis9000 MPP B OUT OF SYNCH 1 Hz CLOCK WATCHDOG B PULSE OUTPUT OverlapDis15846 WorkingDis6005 OutoutDis9001 OverlapDis15847 WorkingDis6005 OutoutDis9002 The triplicated watchdog module outputs are pulsed every 1 second provided that the system time constraint has not been exceeded and that the associated MPP module is not out of synch stopped This is Mandatory Logic and must be ...

Page 51: ... fault status is non zero and not changing then the GDIA element is called every 30 seconds 25x1 2 secs The fault bits returned by GDIA are packed into one register per chassis If the Fault status is zero then the chassis diagnostics are cleared the number of registers being equal to the number of chassis in the system If the fault status is non zero but does change then the 30 second timer is res...

Page 52: ... 00256 00000 R1003 00256 MOVE 00001 R1003 00256 0000 R1001 The dead band element and the move function are mandatory to ensure that the analogue outputs are not driven below 256 decimal which will result in the module losing health The value in the move element may be modified to higher value to prevent the output being driven below some minimum value example 4 mA 895 A similar network may be used...

Page 53: ...3 1 63718 20149 6372 2 58062 18361 5806 3 53686 16977 5369 4 50170 15865 5017 5 47266 14947 4727 6 44813 14171 4481 7 42707 13505 4271 8 40872 12925 4087 9 39256 12414 3926 10 37816 11959 3782 11 36525 11550 3652 12 35357 11181 3536 13 34295 10845 3429 14 33323 10538 3332 15 32429 10255 3243 16 31603 9994 3160 17 30838 9752 3084 18 30125 9526 3013 19 29460 9316 2946 20 28837 9119 2884 21 28252 893...

Page 54: ...6 F852h U87 D05Fh U107 0273h 8 30 005 SC300E Operating system Identified Version 8 30 LOC SC 300E ROM System 005 Generated 19 May 2000 11 07 Checksum U86 486Eh U106 0BC0h U87 46ACh U107 3E43h 8 30 006 SC300E Operating system Identified Version 8 30 LOC SC 300E ROM System 006 Generated 12 Jul 2000 15 38 Checksum U86 4885h U106 0BCFh U87 469Fh U107 3D53h 8 30 007 SC300E Operation System Identified V...

Page 55: ...nchronisation 6 MPP B Processor B failure out of synchronisation 7 MPP C Processor C failure out of synchronisation 8 MPP A power Processor A loss of power fuse or PSU 9 MPP B power Processor B loss of power fuse or PSU 10 MPP C power Processor C loss of power fuse or PSU 11 MPP low Battery Memory battery low charge on one or more of the processor s batteries 12 Off line module Single slot repair ...

Page 56: ...llowing conditions must be applied when using the analogue output module 1 The registers used for the analogue outputs must be initialised to 256 or greater to prevent the module losing health 2 The ladders for the analogue outputs must be configured to prevent the output registers going below 256 resulting in the module losing health 11 4 System identification Both RTTS 8 30 versions are identifi...

Page 57: ...1375 31 0383 12 2 Change History Support for Remote chassis added For full change history see PRN RTTS 8 30 007 Release Notes 12 3 System Identification RTTS 8 30 008 Version 8 30 REM SC 300E ROM System 008 Generated 28 Aug 2003 11 27 RTTS 8 30 008 is stored in PVCS Version Manager archives using the version label Version 8 30 008 The part numbers and checksums for the RTTS EPROMs are IC Part No C...

Page 58: ...sing the version label Version 8 30 009 The part numbers and checksums for the RTTS EPROMs are IC Part No Checksum U86 006 1372 34 0FFF U87 006 1373 34 5B97 U106 006 1374 34 6909 U107 006 1375 34 CF30 12 6 Change History Added automatic hot repair option to periodically swap over hot repair partners the period is configured in TriBuild 1 44 For full change history see PRN RTTS 8 30 009 Release Not...

Page 59: ... 001 1111 07 00 3 Bus Buffer Module MBB 001 1116 08 00 3 Serial communications module 4 port RS232 MSR04XI 001 1103 04 00 I F Remote Bus Extender Slave MRB01XS 001 1130 04 00 3 Remote Bus Extender Master MRB04XM 001 1129 04 00 3 supported in RTTS 8 30 007 and above Digital Input and Output Modules 32 channel analogue input module isolated 0 20mA MAI32NAD 001 1145 02 00 3 32 channel analogue input ...

Page 60: ...igital output module Supervised 24Vdc MDO32BNS 001 1112 04 00 3 32 channel digital output module Supervised 24Vdc MDO32BNS 001 1112 05 00 3 4 Channel pulse input and 4 Channel analogue output module MHB44IND 001 1118 02 02 I F Termination Cards Analogue Input 16 channel analogue input DIN to screw terminals external power TAI16AEA 099 1278 03 01 16 channel analogue input DIN to screw terminals ext...

Page 61: ...l input DIN to screw terminals external power 24Vdc TDI32AEA 099 1322 01 00 32 channel digital input DIN to screw terminals internal power 24Vdc TDI32AIA 099 1301 02 00 I F 32 channel digital input DIN to DIN external power 24Vdc TDI32BEA 099 1323 01 01 32 channel digital input DIN to DIN internal power 24Vdc TDI32BIA 099 1302 02 00 I F 32 channel digital input DIN to ELCO external power 24Vdc TDI...

Page 62: ...9 1271 03 02 DMX Display Cards 64 channel display driver daughterboard single TM117 DMxD B 099 1035 07 01 I F 64 channel display driver motherboard single dual TM117 DMxM B 099 1048 05 01 I F Triplicated Watchdog Timer Triplicated Watchdog Timer comprising TWT10XZO 001 1187 01 00 3 Motherboard 099 1382 01 3 Daughterboard 099 1383 01 3 Miscellaneous Items Common Interface CI 091 1004 03 00 3 Common...

Page 63: ...oved modules for use in ESD applications Module name Version Analog alarm processing analog a86 1 2 3 Analog alarm processing analog a86 1 3 3 always used cmpcrtts a86 1 01 3 First up Alarm Processing f1a a86 1 1 3 Event processing events a86 1 4 3 Ladder element library always used ladder lib 5 43 3 Ladder element library always used ladder lib 5 44 3 Ladder element library always used ladder lib...

Page 64: ...n halonb a86 1 0 Halon Hanolh a86 1 0 Halon Halonl a86 1 0 Lamp test Lmptest a86 1 1 N of M alarm Nofmalm a86 1 1 N of M alarm X Nofmalmx a86 1 1 Status Stausb a86 1 0 Status Staush a86 1 0 Status Stausl a86 1 0 MODBUS Modbus slave RTU protocol modrtu p86 1 3 3 Stand alone modules Discrete mapping dismap a86 1 1 3 Time synchronisation Timesync a86 1 4 3 Programmed Devices MBB MBB FPGA 006 1435 04 ...

Page 65: ... serial I O firmware V1 02 U21 006 1355 03 I F Quad serial I O firmware V1 02 U26 006 1356 03 I F Quad serial I O firmware V1 03 U21 006 1355 04 I F Quad serial I O firmware V1 03 U26 006 1356 04 I F Daughter board 099 1240 00 I F MPP RTC 3 2 1 U32 006 1371 01 3 RTC 3 2 1 U32 006 1371 02 3 MRB01XS Firmware U5 006 1543 02 3 MRB04XM Firmware U22 006 1542 01 3 ...

Reviews:

No comments

Brands by name

Popular brands

Load more brands