Rockwell Automation Allen-Bradley AADvance T9110, Solutions Handbook

Page: 70 / 165

70 Rockwell Automation Publication ICSTT-RM447M-EN-P - July 2019
Chapter 4 AADvance System Architectures
Digital Output Modules
A digital output module fault must be repaired within the MTTR which was
used in the PFD calculation. This rule applies to simplex digital output
modules in de-energize to trip applications and to dual digital output modules
in energize to action applications.
Analogue Output Modules
An analogue output module fault must be repaired within the MTTR which
was used in the PFD calculation. This rule applies to simplex analogue output
modules where the safe state is less than or equal to 4 mA and to dual analogue
output modules where the safe state is more than 4 mA.
Table 10 - Modules for SIL 3 Fault Tolerant Architectures
SIL 3 TMR Input and Processor, Fault Tolerant Output
A SIL 3 TMR architecture offers the highest level of fault tolerance for an
AADvance controller and consists of triple input modules, triple processors
and dual output modules.
• The input and processor modules operate in a 2oo3D under no fault
conditions, degrade to 1oo2D on detection of the first fault in any
module, and degrade to 1oo1 on the detection of faults in any two
modules and will fail-safe when there are faults on all three modules.
Position Module Type
I/P A
and
I/P B 2 × T9401/2 Digital Input Module, 24 Vdc, 8/16 C
T9802 Digital Input TA, 16 Channel, Dual or
2 × T9431/2 Analogue Input Module, 8/16 C
T9832 Analogue Input TA, 16 Channel, Dual
2 x T9300 I/O Base Unit
CPU A & CPU B 2 × T9110 Processor Module, 9100 Processor Base Unit
O/P A
and
O/P B 1 x T9451 Digital Output Module, 24 Vdc, 8 C
T9851 Single Digital Output TA, 24 Vdc, 8 Channel for de-energize to action
T9300 Base unit
2 x T9451 Digital Output Module, 24 Vdc, 8 C
T9852 Dual Digital Output TA for energize to action
T9300 Base Unit
Or
2 x T9481/T9842 Analogue Output Module, 3/8 Ch, Is
T9882 Analogue Output TA, 8 Ch, Dual
T9300 Base Unit