Rockwell Automation Allen-Bradley AADvance T9110, Solutions Handbook

Page: 23 / 165

Rockwell Automation Publication ICSTT-RM447M-EN-P - July 2019 23
The AADvance Safety Controller Chapter 2
SIL 3
SIL 3 architectures:
• SIL 3 de-energize to trip applications.
• SIL 3 energize to action applications when fitted with dual digital
output modules.
• SIL 3 simplex or dual output module architectures
• SIL 3 fail safe I/O fault tolerant processor architecture
• SIL 3 fault tolerant architecture
• SIL 3 fault tolerant simplex, dual and triple input architectures
• SIL 3 dual or triple processor architectures
• SIL 3 high demand applications where the required safe state is greater
than 4 mA, when fitted with dual analogue output modules (A ‘safe
state’ is an output configured to go to a specific value, or configured to
hold last state)
Performance and Electrical
Specifications Table 1 - Controller Performance and Electrical Specifications
Attribute Value
Performance Characteristics
Safety Integrity Level IEC 61508 SIL 2
IEC 61508 SIL 3
(depending on processor and I/O module configuration)
Safety level Degradation 1oo1D, 1oo2D, 2oo3D
(1)
(1) When a controller's processor modules have degraded to 1oo1D, the system must be restored to at least 1oo2D by replacing the
faulty processor module(s) within the MTTR assumed in the PFD calculations; also, unless compensating measures are defined in
the Safety Requirements Specification (SRS) and documented in operating procedures, the application program must be designed
to shut down safety instrumented functions if a module failure due to dangerous fault has not been replaced within the MTTR.
Processor Modules supported Three
I/O Modules supported 48 (8 or 16 channels modules)
Safety Accuracy Limit:
Digital inputs
Analogue inputs
1.0 Vdc
200 μA
Sequence of Event Resolution
Processor Module (for internal Variables):
Event Resolution
Time Stamp Accuracy
Digital Input Module:
Event Resolution
Time Stamp Accuracy
1 ms
Application Scan
1 ms
10 ms
Electrical Characteristics
Supply voltage Redundant 24 Vdc nominal, 18 Vdc to 32 Vdc range
Channel isolation (channel to channel and channel to
chassis
Maximum withstanding
± 1.5 kVdc withstand for 1 minute.