Allen-Bradley AADvance T9110, Руководство по безопасности, Страница: 94 / 131

94 Rockwell Automation Publication ICSTT-RM446N-EN-P - April 2018
Chapter 4 AADvance Functional Safety System Implementation
Shutdown
When in the Shutdown mode the Ready and Run indicators will go RED. You
can configure the state of the outputs when the module is in the Shutdown
Mode. You have to decide when you configure the module how you want the
output channels to behave in the Shutdown mode. The output modules can be
configured to provide the following channel values:
• De-energized (Off default fail-safe value)
• Custom shutdown value
• Hold Last State
Reactions to faults in output modules
When an output module goes faulty the following status information is
reported:
• module presence
• module health and status
• channel health and status
• field faults
• an echo of the front panel indicators for each module
When any of the following internal conditions exist the output module will
fail-safe:
• internal software error detected by the FPGA
• power feed combiner over temperature detection
Input and Output Forcing The AADvance Workbench supports forcing of individual inputs and outputs.
The AADvance Workbench uses the term 'locking' to describe forcing.
Forcing requires the program enable key to be fitted to the 9100 Processor Base
Unit and is intended only for the purposes of engineering, installation and
commissioning activities. When the system is in-service, maintenance overrides
ATTENTION: Careful consideration should be given to the affect on the
process of using the ‘custom shutdown value’ or the 'hold last state' setting.
The PFH & PFD
avg
data has been calculated on the basis that the shutdown
state is configured to the OFF state. Therefore the OFF state shall be used for
SIL 2 and SIL 3.
ATTENTION: It is important the implications of forcing (or locking) of input
and output points on the process and their impact on safety are understood
by any person using these facilities. It is the plant operators' responsibility to
ensure that if forced conditions are present that they do not jeopardize the
functional safety.