100
Rockwell Automation Publication ICSTT-RM446N-EN-P - April 2018
Chapter 4
AADvance Functional Safety System Implementation
produced by the AADvance Workbench confirms that there are no errors
introduced by the Compiler during the development of the application.
To achieve this CVT decompiles the application project file and then
compares each individual application project (POU) source files with its
decomposed version. The CVT analysis is displayed in the Workbench
window.
Communications Interaction
The AADvance system provides a range of communications options to allow
interaction with external systems. Where this communication is used for
reporting (or out-going) communications, there are no specific safety
requirements.
Data received from external equipment that either controls safety-related
functions or affects their operation must be handled with caution. The
Application Program shall handle the received data.
The received data should be such that it is limited to interactions which:
• Initiates safety operations, i.e. initiates shutdown sequences
• Resets signals, with the reset action only possible once the initiating
conditions have been removed
• Initiate timed start-up override signals which are removed automatically
either on expiration of the start period or once the associated signal has
stabilized in the normal operating condition
• Adjust control parameters within defined safe operational limits, i.e.
lowering of trip thresholds.
Where the interaction does not fall within these categories, the effects of
incorrect values and sequences of values shall be considered and measures taken
to ensure that the system will respond safely in the event of erroneous data.
Alternatively, measures may be implemented within the application to ensure
the integrity and validity of the data.
ATTENTION:
The following applies to all safety related applications:
• The CVT must be enabled for the final compilation of any application used for safety control. See
Knowledgebase article,
KB 494470
• The CVT may return compiler errors or warnings. Compiler errors prevent to download of an
application to a controller, warnings do not.
• •If there are any warnings that refer to non – recommended programming constructs, the
constructs should be removed and new code constructed according to the coding guidelines in
Knowledgebase article,
KB 685793
.
• If any warnings still remain, contact
Rockwell Automation customer support and maintenance
(CSM) services
.
