Rockwell Automation Allen-Bradley AADvance T9110 Solutions Handbook Download Page 86

Page: 86 / 165

Rockwell Automation Publication ICSTT-RM447M-EN-P - July 2019

Chapter 4

AADvance System Architectures

Figure 22 - Distributed System

Typical Network Applications

A usual distributed AADvance system uses two networks:

• An information network, which supplies connectivity to the BPCS

(basic process control system) and to OPC devices

• A dedicated safety network, which handles data shared between the

AADvance controllers

Summary of Contents for Allen-Bradley AADvance T9110

Page 1: ...AADvance Controller Catalog Numbers T9110 T9300 T9310 T9401 2 T9431 2 T9451 T9481 2 Solutions Handbook OriginalInstructions ...

Page 2: ...with any particular installation Rockwell Automation Inc cannot assume responsibility or liability for actual use based on the examples and diagrams No patent liability is assumed by Rockwell Automation Inc with respect to use of information circuits equipment or software described in this manual Reproduction of the contents of this manual in whole or in part without written permission of Rockwell...

Page 3: ...ltage may be present BURNHAZARD Labelsmaybeonorinsidetheequipment forexample adriveormotor toalertpeoplethatsurfacesmay reach dangerous temperatures ARC FLASH HAZARD Labels may be on or inside the equipment for example a motor control center to alert people to potentialArcFlash ArcFlashwillcausesevereinjuryordeath WearproperPersonalProtectiveEquipment PPE FollowALL Regulatory requirements for safe...

Page 4: ...4 Rockwell Automation Publication ICSTT RM447M EN P July 2019 ...

Page 5: ...ine update feature and module specification data 10 July 2014 Release 1 33 updates 11 March 2015 Release 1 34 updates 12 June 2015 Correct Issue Record L April 2018 Release 1 40 updates M July 2019 Updated for Release 1 34 IEC 61508 Edition 2 0 certification Topic Page Updatedrelease number in Prefaceto 1 34 7 Updated Performance and Electrical Specifications section 23 Added references to ATEX an...

Page 6: ...6 Rockwell Automation Publication ICSTT RM447M EN P July 2019 Summary of Changes ...

Page 7: ...out the construction operation or maintenance of a control system installation You should also refer to your own local or supplied system safety manual installation and operator maintenance manuals REVISION AND UPDATING POLICY This document is based on information available at the time of its publication The document contents are subject to change from time to time The latest versions of the manua...

Page 8: ... and I O modules An AADvance system is formed by one or more controllers their power sources communications networks and workstations This technical manual describes the features performance and functionality of the AADvance controller and systems It sets out some guidelines on how to make a system that fits your application requirements WHO SHOULD USE MANUAL This manual is intended primarily for ...

Page 9: ...uly 2019 9 Preface Environmental compliance Rockwell Automation maintains current product environmental information on its website at http www rockwellautomation com rockwellautomation about us sustainability ethics product environmental compliance page ...

Page 10: ...10 Rockwell Automation Publication ICSTT RM447M EN P July 2019 Preface ...

Page 11: ...ocking Mechanism 31 Processor Base Unit 32 External Ethernet Serial Data and Power Connections 33 Serial Communications Ports 33 I O Base Unit 35 Termination Assemblies 36 Product Dimensions 40 Corrective Maintenance and Module Replacement 42 Processor Back up Battery 42 Expansion Cable 44 Technical Features 46 TUV Approved Operating System 46 Internal Diagnostics and Fault Reset 46 Remote Fault R...

Page 12: ...2 Fail safe Architecture 63 SIL 2 Fault Tolerant Input Architectures 64 SIL 2 Fault Tolerant Output Architecture 65 SIL 2 Fault Tolerant Input and SIL 2 High Demand Architecture 66 SIL 3 Architectures 67 SIL 3 Fail safe I O Fault Tolerant Processor 68 SIL 3 Fault Tolerant I O Architectures 69 SIL 3 TMR Input and Processor Fault Tolerant Output 70 Certified Configurations 72 Example Architectures w...

Page 13: ... Enclosure Requirements for a Non hazardous Environment 102 Enclosure Requirements for a Hazardous Environment Class I Division 2 Groups A B C and D 103 Estimate Heat Dissipation 105 Backplane Electrical Ratings 106 System Power Requirements 107 Power Arrangements for Field Devices 107 Power Supply and Power Distribution Requirements 108 Estimating Power Consumption 109 Chapter7 Module Overview an...

Page 14: ... T9881 2 Analogue Output Termination Assembly Specification 134 Chapter8 Application Resource Development Programming Language Support 135 Program Management Facilities 135 Support for Variable Types 136 I O Connection Addressing of Physical I O 136 Off line Simulation and Testing 136 Application Resource Program Security 137 Aids to Software Development 137 Chapter9 System Build Controller Mounti...

Page 15: ...Rockwell Automation Publication ICSTT RM447M EN P July 2019 15 Table of Contents Chapter11 Additional Resources Regional Offices 152 Glossary 153 ...

Page 16: ...16 Rockwell Automation Publication ICSTT RM447M EN P July 2019 Table of Contents ...

Page 17: ...tions The flexibility of the design means that a system can meet a wide variety of business needs An AADvance system is assembled to a scale and configuration that is applicable to your initial requirements and can be easily changed to meet your changing business requirements in the future A system is built from an approved range of modules and assemblies This chapter introduces the primary compon...

Page 18: ...18 Rockwell Automation Publication ICSTT RM447M EN P July 2019 Chapter 1 The AADvance System ...

Page 19: ...o a customer s specification for any of the following applications Emergency shutdown system Fire and gas installation protection system Critical process control Burner management Boiler and furnace control Distributed process monitoring and control Turbo machinery governor control and over speed protection not yet released An AADvance controller is particularly useful for emergency shut down and ...

Page 20: ... control system A Key benefit of the AADvance system is its flexibility All of the configurations are readily achieved by combining modules and assemblies without using special cables or interface units System architectures are user configurable and can be changed without major system modifications I O redundancy is configurable so you can make a decision between fail safe NOTEThe printed circuit ...

Page 21: ...s internally between the processors and I O modules uses a proprietary communications protocol over a custom wired harness The AADvance system supports transport layer communication protocols such as TCP and UDP for MODBUS CIP IXL Telnet and SNTP services A secure network communications protocol SNCP developed by Rockwell Automation for the AADvance system permits distributed control and safety us...

Page 22: ...ain components that provide the safety architecture are the processor and I O modules the remaining components provide secure external interfaces and connectivity between the field elements and the main components and add to the safety functionality AADvance processor modules are designed to meet the requirements for SIL 2 and SIL 3 in a dual or triplicated configuration Individual input modules a...

Page 23: ...ding on processor and I O module configuration Safety level Degradation 1oo1D 1oo2D 2oo3D 1 1 When a controller s processor modules have degraded to 1oo1D the system must be restored to at least 1oo2D by replacing the faulty processor module s within the MTTR assumed in the PFD calculations also unless compensating measures are defined in the Safety Requirements Specification SRS and documented in...

Page 24: ...shown above Where Sync time is a function of the total number of modules defined according to the following table IMPORTANT Overall system power consumption heat dissipation and weight can be estimated using the values given in the heat dissipation and weight data tables shown in this manual Module Scan 9402 Digital input module 24 Vdc 16 channel Simplex Dual Triple 0 924 ms 1 676 ms 2 453 ms 9432...

Page 25: ...s Minimum throughput time 129 5 ms 7 ms 136 5 ms Maximum throughput time 2 x 129 5 ms 13 ms 272 0 ms Environmental Specification An AADvance system can be installed in a non hazardous or a hazardous environment In a non hazardous environment a system does not have to be installed in an enclosure however the area where it is installed must maintain a Pollution Degree 2 environment IEC 60664 1 The f...

Page 26: ...o 150 Hz Acceleration 0 1 g in 3 axes Endurance 10 Hz to 150 Hz Acceleration 0 5 g in 3 axes Shock 15 g peak 11 ms duration sine Altitude Operating 0 to 2 000 m 0 to 6 600 ft Storage and Transport 0 to 3 000 m 0 to 10 000 ft This equipment must not be transported in unpressurized aircraft flown above 10 000 ft Electromagnetic Interference Tested to the following standards EN 61326 1 2006 Class A E...

Page 27: ...zardous Environments ATEX Certificate Refer to AADvance Series T9000 Programmable Control and Safety System ATEX certificate publication 9000 CT003 IECEx UL Certificate Refer to AADvance Series T9000 Programmable Control and Safety System IECEx certificate publication 9000 CT006 Module Label The following label information must be attached to each module ...

Page 28: ... need for inter module wiring Compact Module Design Each processor and I O module has a flame retardant and impact resistant plastic cover The cover is designed to help ventilation and heat dissipation occur naturally without the need for fan assisted cooling Processor and I O modules fit onto standardized base units Base units plug together by side connectors and are securely held in position by ...

Page 29: ...here is a matched termination assembly The controller incorporates module polarization keying to make sure that they are correctly mated when installed Sockets on the rear end plate align and NOTE Standard AADvance modules have a plastic casing and are rated IP20 Protected against solid objects over 12 mm 1 2 in for example fingers There is no specific protection against liquids ...

Page 30: ...P July 2019 Chapter 2 The AADvanceSafety Controller mate with coding pins found on the termination assembly The alignment of the sockets and pins make sure that only the matched I O modules and termination assemblies can be mated Figure 2 Coding Sockets ...

Page 31: ...res the module onto its base unit The locking mechanism is in the form of a clamp screw which can be seen on the front panel of the module and engaged by a quarter turn of a flat blade screwdriver The module senses the locking mechanism position and notifies the controller accordingly This acts as an interlock device and helps prevent the module from going on line when it is not in the locked posi...

Page 32: ...32 Rockwell Automation Publication ICSTT RM447M EN P July 2019 Chapter 2 The AADvanceSafety Controller Processor Base Unit A processor base unit holds up to three processor modules ...

Page 33: ... Ethernet port connectors The KEY connector supports all three processor modules and helps prevent access to the application unless the Program Enable key is inserted Serial Communications Ports The serial ports S1 1 and S1 2 S2 1 and S2 2 S3 1 and S3 2 support the following signal modes depending on use RS485fd A four wire full duplex connection that features different busses for transmit and rec...

Page 34: ...tion Publication ICSTT RM447M EN P July 2019 Chapter 2 The AADvanceSafety Controller RS485hdmux A two wire half duplex connection applicable for master slave or slave use This is shown in the MODBUS over serial standard ...

Page 35: ...Rockwell Automation Publication ICSTT RM447M EN P July 2019 35 The AADvance Safety Controller Chapter 2 I O Base Unit An I O base unit holds up to three I O modules ...

Page 36: ... give the system designer flexibility when configuring redundant and fault tolerant systems Termination assemblies come in three types simplex dual or triple to accommodate one two or three I O modules Each termination assembly provides connections for up to 16 channels but can accommodate 8 or 16 channel modules The version illustrated is a simplex termination assembly for a digital input module ...

Page 37: ...9451 Digital Output Module and provides 8 dual configuration output channels It shares the same pin out as the standard AADvance T9852 Digital Output Terminal Assembly and has the same coding peg configuration The difference is that the T9892 has a separate connector for the field power input voltage connections the left most terminal block shown below It also has additional fusing to give extra p...

Page 38: ...ce wiring connections are made to industry standard screw terminal blocks on the termination assemblies Terminals are easy to access without needing to dismantle assemblies The specification for the field wiring sizes is given in the topic Power and External Connector Wiring Requirements This illustration shows field wiring connections at the termination assemblies ...

Page 39: ...l Automation Publication ICSTT RM447M EN P July 2019 39 The AADvance Safety Controller Chapter 2 Figure 8 Field Wiring Connections NOTE The recommended torque for termination assembly screw connectors is 5 Nm ...

Page 40: ...ty Controller Product Dimensions A typical controller arrangement is shown with processor modules installed on the processor base unit and an I O base unit mated with the processor base unit I O modules are installed on the base unit and a termination assembly plugged into the I O base unit ...

Page 41: ...ctors that mate inside the module connectors Adding the depth of a module 118 mm to the depth of the base unit gives the overall depth of the controller assembly at 136 mm ModuleDimensions All modules have the same dimensions Figure 9 Module Dimensions Attribute Value Base unit dimensions H W D approx 233 mm 126 mm 18 mm see text 9 in 5 in in Module dimensions H W D approx 166 mm 42 mm 118 mm 6 in...

Page 42: ...rent configurations Processor Back up Battery The 9110 processor module has a back up battery that powers its internal Real Time Clock RTC and a part of the volatile memory RAM The battery only supplies power when the processor module is no longer powered from the system power supplies The specific functions that the battery maintains on complete loss of power are Real Time Clock The battery suppl...

Page 43: ... not require Real Time Clock functionality or there are specific constraints for example the controller is in an inaccessible location that make it necessary to remove the battery when the system is installed and set up the battery failure alarm can be disabled at the Workbench BatteryLocation The battery is supplied separately and inserted into a slot behind a removable cover on the front panel o...

Page 44: ...er Battery Specification A Polycarbon monofluoride Lithium Coin Battery with a nominal voltage of 3V Nominal capacity mAh 190 Continuous standard load mA 0 03 Operating temperature range 30ºC to 80ºC manufactured by Panasonic Expansion Cable This is used to add extra rows of I O base units and modules ...

Page 45: ...s occurred There is also a summary system healthy indication for all of the controller The application software uses its variable structures to report a fault problem these variables give status reports and are configured using the AADvance Workbench Faults in the processor modules are none latching The controller will recover automatically and the fault indication will clear once the fault condit...

Page 46: ...unications master sending commands to its I O modules and processing their returned responses The two command busses I O Bus 1 and I O Bus 2 take the commands from the processor to the I O modules on a multi drop basis An inter processor link IPL supplies the communication links between dual or triple processor modules Each I O module has a dedicated response line which returns to the processor Th...

Page 47: ...ake the changes to the system fully operational the hardware configuration in the AADvance Workbench software must be updated by an on line update When there is not sufficient space for extra I O base units on a row you can use the Expansion Cable to connect a new row of I O base units and modules to further expand the I O system Hot Swap I O for Business Critical Channels You can add a hot swap c...

Page 48: ...or and press and hold the Fault Reset button to enter the Recovery Mode Then run the latest version of 354400_xxxx_ControlFLASH msi program to install the ControlFLASH to upgrade your processor s OS FPGA LSP and BUSP When stage 1 is completed ControlFLASH can be used to upgrade three processor modules in the same processor base unit all at the same time ToolsandResources You will need the ControlF...

Page 49: ...or a controller It lets you create local and distributed control applications using the five languages of IEC 61131 3 Instruction List IL and Sequential Function Chart SFC languages are not supported by AADvance Workbench 2 0 Engineers can use one language or a combination that best suits their knowledge and programming style and the type of application The Workbench is a secure development enviro...

Page 50: ...g Systems 32 or 64 bit The minimum workstation requirements for the application development software are as follows Microsoft Windows XP Service Pack 3 Windows Vista Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Hardware 1 6 GHz CPU 1 GB RAM 32 bit or 2 GB RAM 64 bit add 512 MB if running in a virtual machine DirectX 9 capable video card running at 1024 x 768 resolution dis...

Page 51: ...use only one controller The software features which add a second or subsequent controller to the project are disabled and you cannot open an existing project which uses more than one controller The full license supplies all of the features of the AADvance Workbench It is applicable for applications with one or more controllers The demo license is a like a full license but with a time limit You can...

Page 52: ...52 Rockwell Automation Publication ICSTT RM447M EN P July 2019 Chapter 2 The AADvanceSafety Controller ...

Page 53: ...developed by the user to meet their safety and business requirements are downloaded from a Workstation that has the AADvance Workbench application development software installed A security device on the processor backplane helps prevent unauthorized access to the application software Process Safety Time The Process Safety Time PST setting defines the maximum time that the processor will let the ou...

Page 54: ...oller One or more controller Ethernet ports may be used for CIP communications so long as they are on separate subnets Consideration must be given to the number and mix of produce consume variables being used Each CIP consumer variable identifies the ControlLogix controller and the tag produced by that controller which provides a value to be consumed The AADvance controller sets its consumer varia...

Page 55: ...s measurement in engineering units Errors on HART communication seen by the field device Status of the field device Time since the most recent update in milliseconds You can use the loop current variable for diagnostic checks in the application to compare the value of the variable with the value on the 4 to 20 mA loop and react if there is a discrepancy You can also monitor the status of the field...

Page 56: ...bined on a common network resulting in safety and non safety data sharing a common physical network This does not compromise the SIL rating of the network but again does introduce failure modes and possibly security risks which can increase the spurious trip rate Therefore careful consideration must be given to the network topology during the applications specification and design phase SNCP Networ...

Page 57: ...ignal that the processors will use for their real time clock The processor module can be configured as a unicast or broadcast client The AADvance controller can also fulfill the role of an SNTP server To enable serving of time on an interface you need to enable the interface and then you need to specify the direct broadcast address for that interface This works for broadcast or unicast modes When ...

Page 58: ... multiple MODBUS RTU slaves without requiring an acknowledgment The AADvance controller can control and monitor each of the MODBUS Master objects and their slave links MODBUS Master Hardware and Physical Connections The MODBUS Master functionality is built into the 9110 Processor Module The physical communication ports are located on the 9100 Processor Base Unit You do not need to add any other ha...

Page 59: ...devices are shown connected to the Ethernet ports on different networks Alternatively these devices can be combined onto one network Refer to the AADvance System Build Manual for more details about physical connections Controller IP Address The AADvance controller stores its IP address data in non volatile memory in the 9100 processor base unit The data is independent of the 9110 processor modules...

Page 60: ...ices of different applications and thus specify the priority of IP traffic DiffServ is useful to make sure that high priority services are not delayed or less delayed during periods of network congestion When applied the service uses bit patterns in the DS byte of IP which for IPv4 is Type of Service ToS octet When you configure DiffServ you apply a priority value to a service and thus identify it...

Page 61: ...e in the controller forwards unicast messages intended for other devices and all broadcast and multicast messages between its two Ethernet ports A device connected through the processor module can get its IP configuration through BOOTP or DHCP or statically The processor module in the first position slot in the 9100 processor base unit forwards these messages from port E1 1 to E1 2 and in the oppo...

Page 62: ...he 9110 processor modules You do not have to change the setting during corrective maintenance Compiler Verification Tool The Compiler Verification Tool CVT is a software utility that validates the output of the application compilation procedure It is automatically enabled for resources when a project is created and when you add a resource to an existing project This procedure in conjunction with t...

Page 63: ...ration is restored to 1oo2D 1 out of two with diagnostics In all SIL 2 architectures when the processor modules have degraded to 1oo1D on the first detected fault the system must be restored to 1oo2D by replacing the faulty processor module within the MTTR assumed in the PFD calculations also unless compensating measures are defined in the Safety Requirements Specification SRS and documented in op...

Page 64: ...ditions and fail safe on the first detected fault When a triple input module arrangement is configured the group of input modules operate in 2oo3D under no fault conditions degrade to 1oo2D on the detection of first fault in any module then degrade to 1oo1D on the detection of faults in any two modules and fail safe when there are faults on all three modules NOTE Simplexoutputmodulesusedforenergiz...

Page 65: ... first fault in either processor module and will fail safe when there are faults on both processor modules Digital Output For digital output modules the following applies If the required safe state is ON you must use dual digital output modules for High Demand applications Position Module Type I P A and B 2 T9401 2 Digital Input Module 24 Vdc 8 16 Channel T9802 Digital Input TA 16 Channel Dual or ...

Page 66: ...detection of the first fault in any module then degrade to 1oo1D on the detection of faults in any two modules and will fail safe when there are faults on all three modules The processor will operate in 1oo2D under no fault conditions will degrade to 1oo1D on the first fault in either processor module and will fail safe when there are faults on both processor modules For high demand applications t...

Page 67: ...ulations In all SIL 3 architectures when the processor modules have degraded to 1oo1D on the first detected fault the system must be restored to at least 1oo2D by replacing the faulty processor module within the MTTR assumed in the PFD calculations or all SIL 3 safety instrumented function and high demand safety instrumented functions must be shut down WARNING For Continuous Mode applications the ...

Page 68: ...les and fail safe when there are faults on all three modules DigitalOutputModules For de energize to action operation one 9451 output module is sufficient for SIL 3 requirements However for energize to action operation dual digital output modules are required A digital output module fault must be repaired within the MTTR which was used in the PFD calculation This rule applies to simplex digital ou...

Page 69: ...o action operation one digital output module is sufficient for SIL 3 requirements However for energize to action operation dual digital output modules are required The single output module operates in 1oo1D under no fault conditions and fail safe when there are is a fault on the module For energize to action operation the output modules operate in 1oo2D under no fault conditions degrade to 1oo1D o...

Page 70: ...rance for an AADvance controller and consists of triple input modules triple processors and dual output modules The input and processor modules operate in a 2oo3D under no fault conditions degrade to 1oo2D on detection of the first fault in any module and degrade to 1oo1 on the detection of faults in any two modules and will fail safe when there are faults on all three modules Position Module Type...

Page 71: ...simplex analogue output modules where the safe state is less than or equal to 4 mA and to dual analogue output modules where the safe state is more than 4 mA A safe state is an output configured to go to a specific value or configured to hold last state Table 11 Modules for TMR Input and Processor Fault Tolerant Output Position Module Type I P A 3 T9401 2 Digital Input Module 24 Vdc 8 16 Channel T...

Page 72: ... channel Simplex Dual TMR 1oo1D 1oo2D 2oo3D De energized to action normally energized SIL 3 with 1 2 or 3 modules fitted Energize to action normally de energized with 1 2 or 3 modules fitted Note When the integrity level is at 1oo1D then the faulty module must be replaced to restore the integrity level back to 1oo2D Analogue Inputs T9431 2 8 16 Channel isolated T9831 2 3AnalogueInputTA 16 Channel ...

Page 73: ...o2D De energize to action normally energized SIL 3 with 1 or 2 modules fitted 1oo2D with dual output modules fitted Energize to action normally de energized SIL 2 with 1 module fitted and SIL 3 with 2 modules fitted A faulty digital output module must be repaired or replaced within the MTTR whichwasusedinthePFDcalculation This rule applies to all simplex digital output modules and to dual digital ...

Page 74: ...ectures Figure 10 Example Simplex SIL 2 System Output modules in simplex and or dual arrangements Figure 11 Example SIL 3 with Dual Input and Output Modules An AADvance system can mix different I O architectures within one controller for example simplex and dual input modules with dual processor ...

Page 75: ...output module will fail safe on the first detected fail danger fault and the process under control will shut down The processor operates in 1oo2D under no fault conditions will degrade to 1oo1D on the first fault in either processor module and will fail safe when there are faults on both processor modules LowDemandSIL2Architecture This is an example of a SIL 2 controller which is suited to low dem...

Page 76: ...for architectures designed to meet SIL 2 The T9401 2 digital input module the same as the module for the SIL 2 controller is rated SIL 3 as it stands The only constraint is that the simplex output stage will not drive an energize to action output for SIL 3 this requires a dual arrangement of output modules This output configuration is applicable for a de energize to action output at SIL 3 The seco...

Page 77: ...Outputs A dual architecture configuration shown uses two dual redundant modules for each stage The use of two processor modules supplies SIL 3 integrity for the processor stage as for the previous example while the second input module supplies fault tolerance for the inputs A SIL 3 fault tolerant processor and I O is achieved by dual input and output module configurations with dual or triple proce...

Page 78: ... and Output System IncreasingI OCapacity The capacity of this controller is increased by adding pairs of I O modules and related dual termination assemblies The subsequent example shows how to supply 16 inputs and 16 outputs this could also be 32 inputs if 16 channel input modules are used The outputs shown are digital output modules ...

Page 79: ...MR architecture offers the highest level of fault tolerance for an AADvance controller and consists of triple input modules triple processors and dual output modules If a failure occurs in an element of a channel the channel processor will still supply a satisfactory output which could be voted on because of the coupling between the channels This is why the triple modular redundant implementation ...

Page 80: ...example a triple modular redundant controller using 8 channel modules for 16 inputs and 16 outputs could be arranged like this For 16 channel TMR input you must use the T9402 16 channel digital input modules in the same arrangement IMPORTANT All configurations that use dual or triplicate processor modules are applicable for SIL 3 architectures with de energize to action outputs Dual output modules...

Page 81: ... the example a T9310 expansion cable assembly is used to connect the right hand I O base unit to another I O base unit and modules Mixed Architectures It is straightforward to make dual and triple I O controller architectures A system can have a mixed level of redundancy fault tolerance and safety integrity levels to meet your business application needs without over specifying the I O ...

Page 82: ...needs 16 inputs and 16 outputs half of which must be duplicated and half of which can be simplex This can be fulfilled by controller architecture like this Figure 19 Mixed I O System Equation Mixed Safety Integrity Levels Such is the flexibility of AADvance that a single controller can support mixed safety integrity levels for example if a system needs SIL 3 energize to trip outputs alongside SIL ...

Page 83: ...RM447M EN P July 2019 83 AADvance System Architectures Chapter 4 inputs or 32 two duplicated 8 channel inputs or duplicated 16 channel versions and two groups of 8 outputs one dual one simplex for field devices Figure 20 Mixed Safety System ...

Page 84: ...res Distributed Architectures AADvance is designed to support a distributed safety architecture Using an SNCP network a SIL 3 architecture can be maintained across multiple controllers by sharing safety data over an Ethernet network shown in the example below Figure 21 Distributed Safety Architecture ...

Page 85: ...nt represented by the two compressors K1 and K2 in this system allows controllers 1 and 2 to be fail safe designs The parts of the plant managed by Controllers 3 and 5 are assumed for the sake of this illustration to need safety instrumented systems certified to a mixture of SIL 2 and SIL 3 Controller 3 exploits the flexibility of the AADvance system to supply mixed SILs in one controller Controll...

Page 86: ...gure 22 Distributed System Typical Network Applications A usual distributed AADvance system uses two networks An information network which supplies connectivity to the BPCS basic process control system and to OPC devices A dedicated safety network which handles data shared between the AADvance controllers ...

Page 87: ...he OPC portal server collects data from the controllers and displays it on the HMIs and conversely delivers commands from the HMIs to the controllers The data network carries real time data MODBUS TCP from the BPCS to the controllers Controller External Network Connectors The controller features six auto sensing 10 100BASE TX Ethernet ports which let it to connect to a local area network through s...

Page 88: ...ssor Modules Specifying a Safety Network Once a system uses distributed controllers with shared data the topology of the safety network must be robust To do this make sure the network has no single point of failure refer to the AADvance Safety Manual Document ICSTT RM446 for further details about specifying a safety Network 10 100BASE TX Ports T9110 Processor Module E1 1 E1 2 Processor A E2 1 E2 2...

Page 89: ... thus increase the I O channel capacity per module An expansion cable allows you to use the controller second I O bus I O Bus 2 and add up to 24 I O modules giving a total of 48 I O modules per controller An AADvance system also supports and integrates fully with existing MODBUS subsystems and through its own server supplies interoperability with HMIs and other OPC devices Simplex I O Channel Capa...

Page 90: ...ile three base units will hold four pairs Arrange base units in groups of two or four to optimize capacity for dual redundant modules If you assemble base units in groups of two or four a single controller supports 24 pairs of I O modules The capacity using for example eight pairs of 16 channel input modules and sixteen pairs of output modules is 256 I O channels 8 x 16 128 16 x 8 128 The capacity...

Page 91: ...ted input modules will with a ratio of 2 1 of inputs to outputs supply 96 input channels and 48 output channels These capacities are derived like this Input Channels 12 groups of three 8 channel input modules have 12 base units and yield 12 x 8 96 input channels Output Channels 6 pairs of output modules have the remaining 4 base units and yield 6 x 8 48 output channels Adding I O Channel Capacity ...

Page 92: ...ies are pushed into the I O base unit for the additional I O modules To put the new modules on line and make the changes to the system fully operational the hardware configuration in the AADvance Workbench software must be updated by an on line update When there is not sufficient space for extra I O base units on a row you can use the Expansion Cable to connect a new row of I O base units and modu...

Page 93: ...pansion Cables for I O Bus 1 2 Redundancy and Fault Tolerance An important advantage of the AADvance design is the option to add redundant modules to increase fault tolerance as an when they are required Redundant configurations let you replace faulty modules without affecting the system operation This flexibility and operational persistence is made possible by Termination Assemblies that supply r...

Page 94: ... O modules only when you actually need them Expansion using Distributed Controllers You can expand an AADvance system by adding more controllers to create a distributed system The AADvance Discover Discovery and Configuration utility enables you to connect to external controllers IMPORTANT The recommended maximum size of a typical distributed AADvance system is 20 controllers ...

Page 95: ...g sets of information are needed to specify a new controller The intended safety integrity level SIL 2 or SIL 3 for your application The desirable degree of fault tolerance Whether any final elements are energize to action affects output module arrangements for SIL 3 requirements The type and quantity of inputs and outputs The process safety time for each safety function Do you need a hot swap fea...

Page 96: ...96 Rockwell Automation Publication ICSTT RM447M EN P July 2019 Chapter 6 Specifying a New Controller ...

Page 97: ...Rockwell Automation Publication ICSTT RM447M EN P July 2019 97 Specifying a New Controller Chapter 6 ...

Page 98: ...98 Rockwell Automation Publication ICSTT RM447M EN P July 2019 Chapter 6 Specifying a New Controller ...

Page 99: ...nation assembly for each group of related modules For example Four T9401 digital input modules used in two dual redundant configurations need two T9802 termination assemblies one for each pair of modules Four T9401 digital input modules used for simplex inputs need four T9801 termination assemblies one for each module Simplex I O Module Configuration Dual I O Module Configuration Triple I O Module...

Page 100: ...s It is highly recommended that module supply power and field loop power consumption calculations are done to find out the heat dissipation before designing a suitable enclosure and making a decision about the installation environment see topic System Design for Heat Dissipation Item Number Used Weight Allowance g oz Subtotal T9100 Processor Base Unit 460 g 16 oz T9110 Processor Module 430 g 15 oz...

Page 101: ...stem components The enclosure must also be able to handle the heat dissipated by the modules and other components devices included in the same enclosure WARNING You must use the installation guidelines given in this manual and any installation and commissioning procedures that comply with applicable international or local codes and standards ATTENTION AADvance modules are suitable for use in Class...

Page 102: ...NTE La température am biante nominale maximum dans une enceinte où un processeur AADvance et des modules d E S standard sont installés pour assurer une fiabilité prévisible est de 70 ºC 158 F pour modules d E S et de 60 C 140 F pour un processeur modules La consommation électrique du système et du terrain par les modules et les ensembles de raccordementestdissipéesousformedechaleur Vousdeveztenirc...

Page 103: ... Groups A B C and D The enclosure must comply with the following UL requirements WARNING Special Conditions for Safe Use Models9110 Theambienttemperaturerangeis 25 Cto 60 C 13 F to 140 F AllotherModels theambienttemperaturerangeis 25 Cto 70 C 13 F to 158 F Subject devices are to be installed in an ATEX IECEx Certified IP54 tool accessible enclosure that has been evaluated to the requirements of EN...

Page 104: ... raccordement des conducteurs Le conducteur de mise à la terre devra avoir une section minimale de 3 31 mm Les dispositifs concernés sont utilisables dans un environnement présentant un degré de pollution 2 au maximum conformément à la norme CEI 60664 1 Les dipositifs concernés doivent utiliser des conducteurs avec une température nominale minimum de 85 C Les dispositifs concernés doivent être ins...

Page 105: ...0 9801 9803 9831 9833 9851 9852 9892 9881and9882adisconnectsuitableforthelocationwherethey are installed shall be provided to allow for removal of power from the fuses before replacement AVERTISSEMENT Pour les modules AADvance 9110 9801 9803 9831 9833 9851 9852 9892 9881 et 9882 un sectionneur adapté à l environnement où ils sont installés devra être fourni pour couper l alimentation en amont des ...

Page 106: ...U hr Digital Inputs Input Voltage V 5125 Analogue Inputs Input current A x 135 Digital Outputs x Output current A x 0 57 Analogue outputs x Field voltage V x Output Current A load Resistance Ω x Output current A 1 Total IMPORTANT These are the maximum allowed electrical ratings given by UL for the backplane load installed with the relevant TAs and modules They are not operating values so don t use...

Page 107: ...voltage is an extra low voltage circuit with a protective partition from other circuits which has a protective earth connection To satisfy SELV and PELV requirements the power source must have a safety transformer with a protective partition between the primary and secondary windings so that the windings are galvanic and electrically isolated Power Arrangements for Field Devices Output modules use...

Page 108: ...philosophy specific earthing philosophy power requirements and the separation requirements where items of equipment are separately supplied for example system internal supplies and field loop supplies Make sure that the chosen Power Supply Units PSUs are compatible with the power feeds supplied Alternatively measures must be put in place to make sure that the power feeds stay within the specificat...

Page 109: ...o the table Field Loop Power Heat Dissipation The field power requirements should be calculated separately and is dependent on the number and type of field elements Refer to the specifications for the Digital and Analogue output modules for details of the channel output electrical specifications Item Number of Modules Power Consumption Subtotal W T9110 Processor Module 8 0 W T9401 Digital Input Mo...

Page 110: ...110 Rockwell Automation Publication ICSTT RM447M EN P July 2019 Chapter 6 Specifying a New Controller ...

Page 111: ...ated from external power supplies and data links so that any faults developed in the field cannot cause the module to fail The module will continue to operate if a failure occurs in one of its dual redundant 24 Vdc power supplies The module incorporates under and over voltage protection for its internal power supplies which show a power valid signal to the modules own diagnostics microprocessor Th...

Page 112: ...failure due to dangerous faulthas not been replaced within the MTTR Processor clock 400 MHz Memory Boot flash 512 kB SRAM 512 kB Bulk flash 64 MB SDRAM 32 MB Sequence of events for internal variables Event resolution 1 ms Time stamp accuracy Application Scan Self Test Interval 5 5 hours Performance Characteristics Safety Integrity Level SIL 1 processor non safety applications up to SIL 1 2 Process...

Page 113: ...les and for the remaining controller modules Each base unit can be mounted onto standard DIN rails or directly onto a panel or wall The moldings use slots and clamps for DIN rail mountings and holes for screw fixing to flat panels The processor base unit holds the IP address of each processor module separately in a BUSP component that is installed during manufacture This allows you to remove a fau...

Page 114: ...114 Rockwell Automation Publication ICSTT RM447M EN P July 2019 Chapter 7 Module Overview and Specifications Figure 27 Processor base unit ...

Page 115: ... 2 E3 1 E3 2 Connectors for Ethernet Ports 1 2 for Processor A B and C Wiring shielded RJ45 sockets according to IEC6063 7 2 or 4 pair shielding S1 1 S1 2 S2 1 S2 2 S3 1 S3 2 Connectors for Serial Ports 1 2 for Processor A B and C Wiring Six5 wayconnectors maximum1 31mm 16AWG Stripping length 7 mm 9 32 in PWR 1 PWR 2 Connectors forRedundant 24Vdc Power Supplies Wiring Two 3 way connectors Conducto...

Page 116: ...imum of three I O modules of any type and their related termination assemblies Each base unit can be mounted onto standard DIN rails or directly onto a panel or wall The moldings use slots and clamps for DIN rail mountings and holes for screw fixing It contains a passive backplane that supplies the electrical connections between the I O modules and the T9100 processor base unit i e the command and...

Page 117: ...Rockwell Automation Publication ICSTT RM447M EN P July 2019 117 Module Overview and Specifications Chapter 7 Figure 28 I O Base Unit ...

Page 118: ... and are routed direct to the module connectors The backplane has a connector at the right for the next I O backplane The connection to the left of the backplane can connect to a processor base unit or another I O base unit Adjacent base units clip together and are held in position by a plastic retaining clip Alternatively rows of I O base units can be connected together using a T9310 expansion ca...

Page 119: ...f a processor base unit The socket connects to the left hand bus connector of an I O base unit The expansion cable offers the following features Two meter cable length Secured with retaining screws and screw cap screws Connects all command and response signals and system power Screened to decrease resonance emissions Attribute Value Electrical Specification Supply voltage requirements Redundant 24...

Page 120: ...cification Table 26 T9310 Extension Cable Specification Attribute Value Electrical Specification Carries the following Signals Command Bus I O Response Bus x 24 Backplane 0 V Return Redundant System 24 Vdc_1 2 power supplies Mechanical Specification Length 2 m 78 74 in Weight SCS1 3 Cable Assembly Cable Plug Assembly Cable Socket 57 g 2 oz 50 g 2 oz 50 g 2 oz ...

Page 121: ...arrangement monitors the module operation and gives more fault containment by a shutdown mechanism should a fault occur These modules mate with the T9801 2 3 Digital input termination assemblies When digital input modules are installed in a dual or TMR configuration they provide fault tolerant input functionality enabling you to replace a faulty input module without interrupting the channel data f...

Page 122: ... the process safety time of the configured module Figure 30 Digital Input Slew Tolerance Maximum Transition Rate 1 Application Scan Time 10 ms Hz2 Input channel load see TA specification Input measurement voltage accuracy 0 5 V Input measurement voltage resolution 5 mV 13 bit Field loop power dissipation seeT9801 2 3 Termination Assembly Channel Isolation maximum withstand 1 5 KVdc for 1 minute Me...

Page 123: ... that supply simplex dual and triple modular redundant configurations A T9801 termination assembly is for a simplex application and has terminations for 16 non isolated digital inputs it has connections for one T9401 or T9402 digital input module The T9802 and T9803 termination assemblies support 16 isolated digital inputs for dual and triple modular redundant arrangements of digital input modules...

Page 124: ...nput modules Table 28 T9801 2 3 Digital Input TA Characteristics Attribute Value Functional Characteristics Field Connections 16 wiring Conductor cross section maximum 1 31 mm 16 AWG Stripping length 6 mm in Input modules supported T9801 One T9401 2 T9802 Two T9401 2 T9803 Three T9401 2 Electrical Characteristics Input channel fuses 50 mA 125 V Type T manufactured by Littelfuse Channel load 5 125 ...

Page 125: ...er isolation circuits which divide each input channel from the remainder of the system protecting the controller from field faults An independent watchdog arrangement monitors the module operation and supplies more fault containment by a shutdown mechanism if a fault occurs These modules mate with the T9831 2 3 Analogue Input termination assemblies When analogue modules are installed in a dual or ...

Page 126: ...r 6 ms Value of least significant bit 0 98 μA Error at 25 C 2 C After 1 year at 40 C After 2 years at 40 C After 5 years at 40 C 0 21 10 μA 0 22 10 μA 0 23 10 μA Temperature drift 0 01 0 3 μA per C Electrical Characteristics Module supply voltage Voltage Redundant 24 Vdc nominal Module supply power dissipation T9431 3 3 W 11 3 BTU hr T9432 4 0 W 13 6 BTU hr Input Current Nominal 4 mAdc to 20 mAdc ...

Page 127: ... to verify that channels are operating within their defined safety accuracy T9831 2 3 Termination Assemblies for Analogue Inputs There are three termination assemblies for use with analogue input modules for simplex dual and triple modular redundant configurations A T9831 termination assembly is for a simplex application and has terminations for 16 non isolated analogue inputs It supports one T943...

Page 128: ...r a simplex configuration and has terminations for 16 non isolated digital inputs The T9832 and T9833 termination assemblies support 16 isolated digital inputs for dual and triple modular redundant arrangements of digital input modules Table 30 T9831 2 3 Analogue Input TA Specification Attribute Value Functional Characteristics Field connections 16 Wiring Conductor cross section maximum 1 31mm 16 ...

Page 129: ...circuit and open circuit line monitoring is supplied on all outputs see article 605753 on the Rockwell Knowledgebase website Internal diagnostics do ongoing functionality checks ensuring that the output channel command data is correctly transferred to the output The processor module initiates a test sequence on each output channel checking for stuck on and stuck off conditions on the output switch...

Page 130: ...TU hr Output Voltage Maximum voltage without damage 1 V to 60 Vdc Operating field supply voltage 18 Vdc to 32 Vdc Maximum Field Voltage Slew Rate 150 V s 2 3 Output current 1 A continuous for each channel Minimum current required for line monitoring 10 mA for each module 20 mA for dual pair Maximum voltage drop 1 Vdc Maximum current at de rated temperature De rated current at maximum temperature 8...

Page 131: ...mination assembly The terminal blocks also accept two 24 Vdc power sources for field power The termination assembly incorporates two replaceable 10 A fuses one for each field power source T9851 2 Digital Output Termination Assembly Specifications Table 32 Digital Output TA Specification T9892 Digital Output Termination Assembly The T9892 Terminal Assembly module operates in conjunction with the T9...

Page 132: ...nk device and in simplex mode a channel drops the full demanded current In dual module operation each channel drops half the output current The module features voltage and load current channel monitoring reverse current protection and short and open circuit line monitoring It is designed to always be able to switch off an output when demanded Internal diagnostics do continuous functionality checks...

Page 133: ... Safety accuracy 200 μA Self test interval 1 hour system dependent Value of least significant bit control 0 98 μA Value of least significant bit monitor 3 9 μΑ Error at 25 C 2 C After 1 year at 40 C After 2 years at 40 C After 5 years at 40 C 0 30 10 μΑ 0 35 10 μΑ 0 44 10 μΑ Temperature drift 0 01 0 1 μA for each C Electrical Characteristics Module supply voltage Voltage Redundant 24 Vdc nominal 1...

Page 134: ... Typical 250 Ω Maximum field loop power dissipation 0 77 W for each field loop 2 63BTU hr Mechanical Specification Dimensions height width depth 166 mm 42 mm 118 mm 6 in 1 21 32 in 4 21 32 in Weight 290 g 10 5 oz Casing Plastic non flammable Attribute Value Attribute Value Functional Characteristics Field connections 8 Wiring Conductor cross section maximum 1 31 mm 16 AWG Stripping length 6mm in M...

Page 135: ...agram graphical Structured text textual Instruction list textual Sequential function chart graphical Program Management Facilities The development environment is designed for collaborative working A group of engineers can work together with shared ownership of a project Each contributor can simply look at the part of the application on which they wish to work Program management features let you id...

Page 136: ...ication program and the physical I O channel available on the controller the AADvance Workbench has a powerful I O connection editor I O channel links are easily identified between the logical programming and the I O wiring configuration The I O configuration can be tested separately from the application execution such that each module can be debugged separately Any I O device can be represented a...

Page 137: ...application resource The program enable key is supplied with the processor base unit and is fitted as shown Other security features are available such as password protection at the Workbench and the use of firewall settings Aids to Software Development The development environment automatically verifies the syntax of the source code entered in each of its supported languages It performs checks at e...

Page 138: ...138 Rockwell Automation Publication ICSTT RM447M EN P July 2019 Chapter 8 Application Resource Development ...

Page 139: ...ichever mounting method is used the minimum depth from the rear mounting panel to the front panel and space around the base units are shown in the illustration if you wish to mount the controller on DIN rails increase this allowance by the increased depth of the DIN rails The DIN rails must be TS35 rail which is a 35mm 7 5mm standard symmetric rail You must have sufficient free space around the ba...

Page 140: ...140 Rockwell Automation Publication ICSTT RM447M EN P July 2019 Chapter 9 System Build This illustration shows the minimum recommended clearances for a flat panel or DIN rail mounting ...

Page 141: ...Rockwell Automation Publication ICSTT RM447M EN P July 2019 141 System Build Chapter 9 The flat panel drilling holes are shown in the illustration Figure 35 Flat Panel Mounting ...

Page 142: ...odules are installed to maintain predictable reliability is 70 ºC 158 F for I O modules and 60 C 140 F for processor modules System and field power consumption by modules and termination assemblies is dissipated as heat You should consider the effect of heat dissipation on the design and positioning of your enclosure e g enclosures exposed to continuous sunlight will have a higher internal tempera...

Page 143: ... O Bus 2 The module positions slots in the I O base units are numbered from 01 to 24 the left most position being slot 01 Any individual module position within the controller can thus be uniquely identified by the combination of its bus and slot numbers for example 1 01 The electrical characteristics of the I O bus interface limit the maximum possible length of either of the two I O buses the comb...

Page 144: ...as fuses without failing The power supply protection of the controller is in the modules the power distribution arrangement must have a circuit breaker on the input side of each power source The controller is designed to be resistant to a reverse polarity connection without permanent damage The power sources must come from a commercially available industrial un interruptible power supply UPS syste...

Page 145: ... Adding Field Cable Management The field power and other system wiring will be connected to terminals along the top of the base units It is recommended a length of cable trunking or the equivalent be put above each set of base units for cable management Figure 37 Field Wiring Connections ...

Page 146: ...146 Rockwell Automation Publication ICSTT RM447M EN P July 2019 Chapter 9 System Build ...

Page 147: ...igital input module 24 Vdc 8 channel isolated T9402 Digital input module 24 Vdc 16 channel isolated T9451 Digital output module 24 Vdc 8 channel isolated commoned T9431 Analogue input module 8 channel isolated T9432 Analogue input module 16 channel isolated T9481 Analogue output module 3 channel isolated T9482 Analogue output module 8 channel isolated Part No Part Description T9441 Frequency Input...

Page 148: ...mplex commoned T9852 Digital output TA 24Vdc 8 channel dual T9881 Analogue output TA 8 channel simplex commoned T9882 Analogue output TA 8 channel dual T9844 Frequency Input Module TA Simplex Active not yet released T9845 Frequency Input Module TA Dual Active not yet released T9846 Frequency Input Module TA TMR Active not yet released T9847 Frequency Input Module TA Simplex Passive not yet release...

Page 149: ...ery BR2032 20 mm dia Nominal voltage 3 V Nominal capacity mAh 190 Continuous standard load mA 0 03 Operating temperature 30 C to 80 C supplied by Panasonic Part No Part Description T9901 Replacement input fuse 50 mA for T9801 2 3 and T9831 2 3 pack of 201 T9902 Replacement output fuse 10A for T9851 2 pack of 202 T9903 Replacement coding pegs pack of 20 T9904 Replacement backplane clips pack of 20 ...

Page 150: ...t program enable key T9907 Installation tool kit T9908 Fuse Extractor Tool T9082U IEC 61131 Workbench USB key single user single controller T9082D IEC 61131 Workbench hard disk key single user single controller T9083U IEC 61131 Workbench USB key multiple controllers T9083D IEC 61131 Workbench hard disk key multiple controllers T9084U IEC 61131 Workbench 5 user USB key multiple controllers T9085 5 ...

Page 151: ...s document map Actual configuration guide applicable is dependent upon version of AADvance Workbench used Resource Document Number Safety Manual ICSTT RM446 System Build Manual ICSTT RM448 Configuration Guide ICSTT RM405 Configuration Guide ICSTT RM458 OPC Portal Server User Manual ICSTT RM407 PFH and PFDavg Data Manual ICSTT RM449 Solutions Handbook ICSTT RM447 Troubleshooting and Maintenance Man...

Page 152: ...r system operation and application requirements Troubleshooting and Maintenance Manual This technical manual describes how to maintain troubleshoot and repair an AADvance Controller OPC Portal Server User Manual This manual describes how to install configure and use the OPCServer for an AADvance Controller PFH and PFDavg Data This document contains the PFH and PFDavg Data for the AADvance Controll...

Page 153: ...input termination assembly alarms and events AE An OPC data type providing time stamped alarm and event notifications allotted process safety time The part of the total process safety time allotted to a sub function of a process application software Software written specially for a user application typically using logic sequences limits and expressions to read inputs make decisions and control out...

Page 154: ...nce controller base unit Boolean A type of variable that can only accept only the values true and false BPCS Basic process control system A system responding to input signals and generating output signals causing a process and its related equipment to operate in a desired way having no safety instrumented functions with a safety integrity level of 1 or higher See IEC 61511 and ANSI ISA 84 00 01 20...

Page 155: ...errors introduced by the Workbench or the compiler Frequently abbreviated to CVT configuration A grouping of the application software and settings for a specified AADvance controller The grouping must have a target but for an AADvance controller it can have only one resource consumer The consuming controller requests the tag from the producing controller contact A graphical component of a Ladder D...

Page 156: ...ted function where the devices are usually de energized Application of power activates the field device EUC Equipment under control The machinery apparatus or plant used for manufacturing processing transportation medical or other activities expansion cable assembly A flexible interconnection carrying bus signals and power supplies between AADvance base units available in a variety of lengths Used...

Page 157: ...nt Equipment which routes an alarm signal from control and indicating equipment to a fire alarm receiving station function block diagram An IEC 61131 language describing a function between input variables and output variables Input and output variables are connected to blocks by connection lines See limited variability language functional safety The ability of a system to perform the actions neces...

Page 158: ...ameters and environmental conditions for programmable logic controllers Part 3 which is entitled Programming Languages defines more than one limited variability language IEC 61499 An international standard defining an open architecture for distributed control and automation IEC 61508 An international standard for functional safety encompassing electrical electronic and programmable electronic syst...

Page 159: ...moval of the module and reinsertion will cause no electrical harm to the system Also known as hot swap low demand mode Where the Safety Instrumented Function only performs its designed task on demand and the frequency of demands is no more than one time each year M manual call point A component of a fire detection and fire alarm system enabling a person to trigger an alarm MODBUS An industry stand...

Page 160: ...works connecting together a series of AADvance or Trusted controllers enabling application data to pass between them pinging In MODBUS communications sending the diagnostic Query Data command over a link and by receiving a reply to verify that the link is healthy and the slave can communicate with the master No process data is transferred or modified portable equipment Enclosed equipment that is m...

Page 161: ...es encompass electrical parameters data representation signaling authentication and error detection Examples include MODBUS TCP and IP PST Process Safety Time The process safety time for the equipment under control denoted PSTEUC is the length of time a dangerous condition can exist before a hazardous event occurs without a safety system as a protection R real A class of analogue variable stored i...

Page 162: ...ons to get or maintain a safe state of a process when unacceptable or dangerous process conditions are detected SIL Safety Integrity Level One of four possible levels specified in IEC 61508 and IEC 61511 for specifying the performance requirements of the safety functions allocated to a safety related system SIL4 has the highest level of safety integrity SIL 1 has the lowest For an installation to ...

Page 163: ...tion assembly A printed circuit board connecting field wiring to an input or output module The circuit includes fuses for field circuits The board carries screw terminals to connect the field wiring to the controller and the whole assembly clips onto the 9300 I O base unit TMR Triple modular redundant A fault tolerant arrangement in which three systems complete a process and their result is proces...

Page 164: ...N P July 2019 Glossary W withstand voltage The maximum voltage level that can be applied between circuits or components without causing a failure of the insulation word A 16 bit unsigned value from 0 to 65535 One of the IEC 61131 types See also integer ...

Page 165: ...o route your call directly to a technical support engineer http www rockwellautomation com global support direct dial page Literature Library Installation Instructions Manuals Brochures and Technical Data http www rockwellautomation com global literature library overview page Product Compatibility and Download Center PCDC Get help determining how products interact check features and capabilities a...

Search results

Summary of Contents for Allen-Bradley AADvance T9110

Reviews:

Related manuals for Allen-Bradley AADvance T9110

Brands by name

Popular brands

Rockwell Automation Allen-Bradley AADvance T9110, Solutions Handbook

Search results

Summary of Contents for Allen-Bradley AADvance T9110

Reviews:

Related manuals for Allen-Bradley AADvance T9110

Brands by name

Popular brands