ML24306A076

Tricon Technical Product Guide

ML24306A076
Person / Time
Site:	Pennsylvania State University
Issue date:	11/04/2024
From:	Penn State College of Engineering, Pennsylvania State Univ
To:	Office of Nuclear Reactor Regulation
References
Download: ML24306A076 (1)

Text

Technical Product Guide Tricon v10 Systems

Introduction.......................................................................... 1 Theory of Operation............................................................. 3 System Configuration........................................................ 11 Product Specifications....................................................... 17 Field Termination Options.................................................. 55 Communication Capabilities.............................................. 67 TriStation 1131 Developers Workbench........................... 71 CEM Programming Language Editor................................. 75 Sequence of Events (SOE) Capability............................... 77 Safety View ABM............................................................... 79 Part Number Cross-Reference.......................................... 81 Glossary............................................................................. 85

Part No. 9791007-024, Rev 0 November 2012 Preface

Information in this document is su bject to change without notice. Companies, names and data used in examples herein are fictitious unless otherwise noted. No part of this document may be reproduced or transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express written permission of Invensys Systems, Inc.

© 2006-2012 Invensys Systems, Inc. All rights reserved.

Invensys, the Invensys logo, Foxboro, I/A Series, ArchestrA, InTouch, Triconex, Tricon, Trident, and TriStation are trademarks of Invensys plc, its subsidia ries and affiliates. All other brands may be trademarks of their respective owners.

DISCLAIMER Because of the variety of uses for th is equipment and because of the differences between this fault-tolerant equipment and traditional programmable logic and process controllers, the user of, and those responsible for applying, this equipment must satisfy themselves as to the acceptability of each application and the use of the equipment.

The illustrations, charts and layout examples shown in th is manual are intended solely to illustrate the text of this manual. Because of the many va riables and requirements associated with any particular installation, Invensys Systems, Inc. cannot assume responsibility or liability for actual use based upon the illustrative uses and applications.

In no event will Invensys Systems, Inc. be responsib le or liable for indirect or consequential damages resulting from the use or application of this equipment.

INVENSYS SYSTEMS, INC. DISCLAIMS ANY IMPLIED WARRANTY OF FITNESS FOR A PARTICULAR PURPOSE.

Invensys Systems, Inc. reserves the ri ght to make changes at any time in order to improve design and to supply the most reliable product. No patent or copyright liability is assumed by Invensys Systems, Inc. with respect to use of information, circuits, equipment or software described in this text.

TECHNICAL SUPPORT Customers in the U.S. and Canada can obtain technical support from the Invensys Global Customer Support (GCS) center at the numbers below. International customers should contact their regional support center.

Telephone: Toll-free number 866-746-6477 Toll number 508-549-2424 (outside U.S.)

Fax: Toll number 508-549-4999 TheTr i c o nfaulttolerantcontrollerisbasedonaTr i p l eModular Redundant(TMR)architecture.

Introduction

What Is Fault-Tolerant Control?

A fault-tolerant control system identi-fies and compensates for failed control system elements and allows repair while continuing an assigned task without process interruption. A high-integrity control system such as the Tricon' controller is used in critical process applications that require a significant degree of safety and avail-ability.

What Is the Tricon Controller?

The Tricon is a state-of-the art controller that provides fault tolerance by means of Triple-Modular Redundant (TMR) architecture. TMR integrates three isolated, parallel control systems and extensive diagnostics in one control system. The system uses two-out-of-three voting to provide high-integrity, error-free, uninterrupted process operation.

The Tricon controller uses three iden-tical channels. Each channel indepen-dently executes the control program in parallel with the other two channels. The Tricon Fault-Tolerant Controller Specialized hardwa re/software voting mechanisms qualify and verify all controller is online, without inter-set of control program logic. The digital inputs and outputs from the rupting the process. Tricon controller manages the rest!

field, while analog in puts are subject to a mid-value selection process. Setting up control programs is simpli-Extensive diagnostics on each channel, Because each channel is isolated from fied with the triplicated Tricon system, module, and functional circuit immedi-the others, no single-point failure in any because it operates as a single control ately detect and report operational channel can pass to another. If a hard-system from the user s point of view. faults by means of indicators or alarms.

ware failure occurs on one channel, the The user terminates sensors and actua-All diagnostic fault information is other channels override it. Meanwhile, tors at a single wiring terminal and accessible by the control program and the faulting module can easily be programs the Tricon controller with one the operator. The program or the oper-removed and replaced, while the ator can use diagnostic data to modify

1 Introduction

control actions or direct maintenance shutdown systemsimplemented with Offshore Fire and Gas procedures. mechanical or electronic relays Protection Other key features of the Tricon provide shutdown protection but can The protection of offshore platforms controller that ensure the highest also cause dangerous nuisance trips. from fire and gas threats requires possible system integrity are: The Tricon controller increases system continuous availability as well as reli-

• Ability to operate with three, two, or integrity, providing automatic detection ability. The Tricon controller provides one Main Processors before and verification of field sensor integ-this availability through online replace-shutdown rity, integrated shutdown and control ment of faulty modules. Faults in indi-functionality, and direct connection to vidual modules, field wiring, and

• Fully implemented and transparent the supervisory data highway for sensors are managed automatically by triplication continuous monitoring of safety-crit-built-in diagnostics. Analog fire and

• Comprehensive system diagnosticsical functions. gas detectors are connected directly to Boiler Flame Safety the Tricon, eliminati ng the need for trip

• Complete range of I/O modules amps. An operator interface monitors

• Dual and single I/O modules for Process steam boilers function as a crit-fire and gas systems as well as diagnos-safety-critical points with a limited ical component in most refinery appli-tics for the Tricon controller and its need for availability cations. Protection of the boiler from attached sensors. Traditional fire and upset conditions, safety interlock for gas panels can be replaced with a single

• Remote I/O up to 7.5 miles normal startup and shutdown, and integrated system, sa ving costly floor (12 kilometers) away from the MPs flame-safety applications are combined space while maintaining high levels of

• Simple, online module repairby one integrated Tricon system. In safety and availability.

traditional applications, these functions

• Unsurpassed reliability and had to be provided by separate, non-What Is TriStation 1131?

availability integrated components. But with the fault-tolerant, fail-safe Tricon TriStation' 1131 Developer's controller, the boiler operations staff Workbench is an integrated tool for What Are Typical User can use a critical resource more produc-developing, testing and documenting Applications? tively while maintaining safety at or control programs that execute in the Each day the Tricon controller supplies above the level of electromechanical Tricon controller. The TriStation 1131 increased safety, reliability, and avail-protection systems. software complies with the IEC 61131 ability to a worldwide installed base. Turbine Control Systems International Standard for The following are a few typical applica-Programmable Controllers and follows tions. For more information on how a The control and protection of gas or the Microsoft Windows guidelines Tricon controller can add value to your steam turbines requires high integrity for graphical user interfaces.

applications, ask your sales representa-as well as safety. The continuous oper-tive for additional documentation and ation of the fault-tolerant Tricon controller provides the turbine operator What About Communication customer references. with maximum availability while main-Capabilities?

Emergency Safety Shutdown taining equivalent levels of safety. Optional modules enable the Tricon (ESD) Speed control as well as start-up and controller to communicate with other The Tricon controller provides contin-shutdown sequencing are implemented Triconex controllers and with other uous protection for safety-critical units in a single integrated system. Unsched-hosts such as:

in refineries, petrochemical/chemical uled outages are avoided by using hot-plants, and other industrial processes. spares for the I/O modules. If a fault

• Modbus masters and slaves For example, in react or and compressor occurs in a module, a replacement

• Distributed Control Systems (DCS) units, plant-trip signalsfor pressure, module is automatically activated

• Operator workstations product feed rates, expander pressure without operator intervention.

equalization and temperatureare

• Host computers using Ethernet monitored, and shutdown actions taken (802.3) protocol if an upset condition occurs. Traditional For more information, see Communi-cation Capabilities on page 67.

2 TheTr i c o ncontroller isdesignedwith afullytriplicatedarchitecture throughout,fromtheinputmodulesthroughtheMainProcessors (MPs) totheoutputmodules.

Theoryof Operation

Triple Modular Redundant (TMR) sate for errors that occur between the As each input module is polled, the architecture ensures fault tolerance and Main Processor and the final output appropriate channel of the I/O bus provides error-free, uninterrupted driven to the field. transmits new input data to the Main control in the presence of either hard Each I/O slot can contain two identical Processor. The input data is assembled failures of components or transient I/O modules, which means if a fault is into a table in the Main Processor and is faults from internal or external sources. detected on one module, control is stored in memory for use in the hard-Every I/O module houses the circuitry automatically switched to the healthy ware voting process.

for three independent channels. Each module. A faulty module can also be The individual input table in each Main channel on the input modules reads the replaced online when only one module Processor is transf erred to its neigh-process data and passes that informa-is installed in the slot. In this case, a boring Main Processors over the tion to its respective Main Processor. healthy module is inserted in the spare TriBus. During this transfer, hardware The three Main Processors communi-slot and the control is switched to this voting takes place. The TriBus uses a cate with each other using a proprietary module, which allows the faulty direct memory access programmable high-speed bus system called the module to be pulled and sent for repair. device to synchronize, transmit, vote, TriBus. and compare data among the three Main Processors.

Au t o Sp a r e Au t o Sp a r eIf a disagreement occurs, the signal

I nput I/O Bus Ou t p ut value found in two out of three Leg Ma i n Leg tables prevails, and the third table is A Tr i B u sProcessor A A corrected accordingly. One-time

Input Ma i n Tr i B u s Ou t p ut differences which result from Leg Processor B I/O Bus Leg Vo t e rsample timing variations are distin-Input B B Out put Te r mi n a t i o n Ma i n Te r m i n a t i o nguished from a pattern of differing Tr i B u sProcessor data. Each Main Processor main-Input I/O Bus C Out pu t Leg Leg tains data about necessary correc-C C tions in local memory. Any disparity is flagged and used at the end of the Simplified Tricon System Architecture scan by the Tricon controller built-in fault analyzer routines to deter-Once per scan, the Main Processors Main Processor Modules mine whether a fault exists on a synchronize and communicate with A Tricon controller contains three Main particular module.

their neighbors over the TriBus. The Processor modules. Each Main The Main Processors put corrected data TriBus votes digital input data, Processor controls a separate channel into the control program. The 32-bit compares output data, and sends copies of the system and operates in parallel main microprocessor executes the of analog input data to each Main with the other Main Processors. A dedi-control program in parallel with the Processor. The Main Processors cated I/O Processor on each Main neighboring Main Processor modules.

execute the control program and send Processor manages the data exchanged The control program generates a table outputs generated by the control between the Main Processor and the I/O of output values which are based on the program to the output modules. The modules. A triplicated I/O bus, located table of input values according to Tricon controller votes the output data on the chassis backplane, extends from customer-defined ru les built into the on the output modules as close to the chassis to chassis by means of I/O bus control program. The I/O Processor on field as possible to detect and compen-cables.

3 Theory of Operation

Dual Power Rails Processors, which ensures the same data is received by the Dual-Power +3.3 Volts upstream processor and down-Regulators +5 Volts stream processor.

802.3 NetworkReserved for (RJ-45) future use I/O Bus DIAG Read (DB25) Modbus (DB9)

Each I/O module transfers Diag Bus Up Clock/ I/O & COMM Fault TolerantI/O Modules signals to or from the field (to otherStreamDownMain Processor NVRAM Processor I/O Bus 375Kb through its associated field MPS) Stream MPC860A 32 KB MPC860A termination assembly. Two posi-COMM Bus Communication tions in the chassis tie together as 2Mb Modules one logical slot. Termination 32 Bit bus 32-Bit BusShared cables are tied to panel connec-Memory128K tors at the top of the backplane.

Each connection extends from the termination module to both FLASH Tr i B u s DRAM DRAM active and hot-spare I/O 6 MB FPGA 16 MB 16 MB modules, which means both the active module and the hot-spare Up Stream Down Stream module receive the same infor-TriBus Up Stream Down Stream (to other MPS) mation from the field termina-tion wiring.

Main Processor (Model 3008) Architecture The triplicated I/O bus transfers data between the I/O modules each Main Processor manages the Power Module or power rail does not and the Main Processors at 375 transmission of output data to the affect system performance. kilobits per second. The I/O bus is output modules by means of the I/O carried along the bottom of the back-bus. plane. Each channel of the I/O bus runs Using the table of output values, the I/O Bus Systems and between one Main Processor and the Processor generates smaller tables, Power Distribution corresponding channels on the I/O each corresponding to an individual Three triplicated bus systems are module. The I/O bus extends between output module in the system. Each etched on the chassis backplane: the chassis using a set of three I/O bus small table is transmitted to the appro-TriBus, the I/O bus, and the communi-cables.

priate channel of the corresponding cation bus. Communication Bus output module over the I/O bus. For Tr i B u s The communication (COMM) bus runs example, Main Processor A transmits The TriBus consists of three indepen-between the Main Processors and the the appropriate table to Channel A of dent serial links which synchronizes the communication modules at 2 megabits each output module over I/O Bus A. Main Processors at the beginning of a per second.

The transmittal of output data has scan, and performs either of these func-Power Distribution priority over the routine scanning of all tions:

I/O modules. The I/O Processor Power for the chassis is distributed manages the data exchanged between

• Transfers I/O, diagnostic, and across two independent power rails and the Main Processors and the communi-communication data. down the center of the backplane. Each cation modules using the communica-

• Compares data and flags module in the chassis draws power tion bus which supports a broadcast disagreements of output or memory from both power rails through dual mechanism. data from the previous scan. power regulators. There are four sets of Main Processors receive power from An important feature of Tricon power regulators on each input and dual Power Modules and power rails in controller architecture is the use of a output board: one set for each channel the Main Chassis. A failure on one single transmitter to send data to both (A, B, and C) and one set for the status the upstream and downstream Main indicators.

4 ELCO Connectors for I/O Termination communication processor located on

Power the corresponding Main Processor. For Te r m i n a lTerminal Strip Strip example, Main Processor A interro-

1. 1

1234 65 gates Input Table A over I/O Bus A.

Te r m i n a l Strip

1. 2 TriBus On TMR Digital Input Modules, all critical signal paths are 100 percent

Power triplicated for guaranteed safety and Supply maximum availability. Each channel

1. 1 Dual conditions signals independently and Power Rails provides isolation between the field and the Tricon controller. (The Model 3504E High-Density Digital Input Module is an exceptionit has no Power Channel A Supply Channel BComm channel-to-channel isolation.)

1. 2 Bus Channel C DC models of the TMR Digital Input Modules can self-test to detect stuck-Channel AI/O Channel B ON conditions where the circuitry Channel C Bus cannot tell whether a point has gone to the OFF state. Because most safety sys-

Right I/ O Module* tems use a de-energize-to-trip setting, ProcessorsMa i n Typical Logical Slot the ability to detect the Off state is an A, B, & C Left I /O Module*

Communication Module important feature. To test for stuck-On inputs, a switch within the input cir-

• Either the left module or right module functions as the active or hot-spare module.cuitry is closed to allow a zero input Tricon Bus Systems and Power Distribution (Off) to be read by the optical isolation circuitry. The last data reading is frozen Field Signals in general, followed by specifics for in the I/O Processor while the test is Each I/O module tran sfers signals to or TMR and Single modules. running.

from the field through its associated Every Digital Input Module houses the On Single Digital Input Modules, only field termination panel. Two positions circuitry for three identical channels those portions of the signal path which in the chassis tie together as one logical (A, B, and C). Although the channels are required to ensure safe operation are slot. The first position holds the active reside on the same module, they are triplicated. Single modules are opti-I/O module and the second position completely isolated from each other mized for those safety-critical applica-holds the hot-spare I/O module. Termi-and operate independently. A fault on tions where low cost is more important nation cables are connect ed to the top of one channel cannot pass to another. In than maximum availability. Special the backplane. Each connection addition, each channel contains an 8-bit self-test circuitry detects all stuck-On extends from the termination panel to microprocessor call ed the I/O commu-and stuck-Off fault conditions within both active and hot-spare I/O modules. nication processor, which handles the non-triplicated signal conditioners Therefore, both the active module and communication with its corresponding in less than half a second. This is a the hot-spare module receive the same Main Processor. mandatory feature of a fail-safe system, information from the field termination which must detect all faults in a timely wiring. Each of the three input channels asyn-manner and, upon detection of an input chronously measures the input signals fault, force the meas ured input value to Digital Input Modules from each point on the input module, the safe state. Because the Tricon is The Tricon controller supports two determines the respective states of the optimized for de-energize-to-trip appli-basic types of Digital Input Modules: input signals, and places the values into cations, detection of a fault in the input TMR and Single. The following para-input tables A, B, and C respectively. circuitry forces to Off (the de-energized graphs describe Digital Input Modules Each input table is regularly interro-state) the value reported to the Main gated over the I/O bus by the I/O Processors by each channel.

5 Theory of Operation

channels B and C, or FI ELD CI RCUI TRY TYPI CAL POI NT ( 1 of 32)I NTELLI GENT I / O CONTROLLER( S) T RI PL I CATED channels A and C I/O BUS AC/ DC I nput Ci r cui t I ndi vi dual Opt o-I sol at i on I nt el l i gent I / O Cont r ol l er ( s)command them to closein other words,

-+ 2-out-of-3 drivers Threshol d Det ect Input Pr oc Bus A Op t o - I s o l a t o rMu x Xcvr voted On. The quadru-

Op t o - plicated voter I sol at or Du a l circuitry provides Po r t RAM multiple redundancy

-+ for all critical signal Threshol d Det ect Input Pr oc Bus B Op t o - I s o l a t o rMu x Xcvr paths, guaranteeing

Op t o - safety and maximum I sol at or Du a l availability.

Leg-t o-Leg Br i dge Po r t Isolation Re c t i f i e r Op t i c a l RAM AC Isolation Each type of Digital

-+ Smoot hi ng Output Module Thr eshol d Det ect Input Bus C Opto-Isolator Mu x Pr oc Xcvr executes a particular

Op t o - Output Voter Diag-Cont r ol Si gnal I sol at or Dua l nostic (OVD) for RAMPo r t every point. Loop-back on the module Architecture of TMR Digital Input Module with Sel f-Test (DC Model) allows each micropro-cessor to read the Digital Output Modules voter circuitry is based on parallel-output value for the There are four basic types of Digital series paths which pass power if the point to determine whether a latent fault Output Modules: dual, supervised, DC drivers for channels A and B, or exists within the output circuit.

voltage and AC voltage.

The following paragraphs TRI PLI CATED INTELLIGENT I/O CONTROLLER(S) FI ELD CI RCUI TRY TYPI CAL POI NT ( 16)

I/O BUS describe Digital Output Modules in general, A A Bus Pr oc Po i n t Ou t p u t followed by specifics for the Xc vr Regi st er Swi t c h Dr i ve four types. Ci r c u i t r y +V Every Digital Output *

• A and B A B Module houses the circuitry A Ou t p u t B for three identical, isolated Swi t c h to Dr i ve C Loopback Detectorot her channels. Each channel B Bus Pr oc Po i n t Ci r c u i t r y poi nt s Xc vr Regi st er includes an I/O micropro-cessor which receives its B output table from the I/O Ou t p u t Swi t c h communication processor Dr i ve Ci r c u i t r y on its corresponding Main C Bu s Po i n t *

• Processor. All of the Digital Xcvr Pr oc Re g i s t e r C A and B C

Output Modules, except the Ou t p u t Swi t c h LD dual DC modules, use a Dr i ve Ci r c u i t r y patented quadruplicated A output circuitry, referred to B Loopback C De t e c t o r as Quad Voter, which votes RT N to on the individual output

• Al l out put swi t ches ar e opt o-i sol at ed. ot her poi nt s signals just before they are applied to the load. This Architecture of 16-Point Supervised Digital Output Module

6 Analog Input Modules On an Analog Input Module, each ANALOG I NPUT SI GNAL I NDI VI DUAL ADC I NTELLI GENT TRI PLI CATED CIRCUIT CONDI TI ONI NGFOR EACH LEG I / O CONTROLLER( S)I/O BUS of the three channels asynchro-TYPI CAL POI NT nously measures the input signals and places the results into a table Bus A Amp ADC Pr oc Xc v r of values. Each of the three input tables is passed to its associated Mu x Main Processor module using the I/O bus. The input table in each Bus B Main Processor is transferred to Amp ADC Pr o c Xc v r its neighbors across the TriBus.

The middle value is selected by Mu x each Main Processor, and the input table in each Main Amp ADC Pr o c Bus C Processor is corrected accord-Xc v r ingly. In TMR mode, the mid-Mu x value data is used by the control program; in duplex mode, the average is used. Architecture of TMR Analog Input Module Each Analog Input Module is designation of driving channel is Communication Modules automatically calibrated using multiple rotated among the channels, so that all reference voltages read through the three channels are tested. By means of the communication multiplexer. These voltages determine modules described in this section, the the gain and bias that are required to Tricon controller can interface with adjust readings of the analog-to-digital Field Terminations Modbus masters and slaves, other converter (ADC). Triconex controllers in a Triconex peer-Analog Input Modules and termination Various termination options are avail-to-peer network, external hosts on panels are available to support a wide able for field wiring of the Tricon Ethernet networks, and Honeywell' variety of analog inputs, in both chassis, including external termination and Foxboro distributed control isolated and non-isolated versions: 0-5 panels (ETPs) and fanned-out cables. systems (DCS). The Main Processors VDC, -5 to +5 VDC, 0-10 VDC, 4-20 An ETP is an electrically-passive broadcast data to the communication mA, thermocouples (types K, J, T, E), printed circuit board to which field modules across th e communication and resistive thermal devices (RTDs). wiring is easily attached. An ETP bus. Data is typically refreshed every passes input signals from the field to an scan; it is never more than two scan-Analog Output Module input module or passes signals gener-times old. For more information, see The Analog Output Module receives ated by an output module directly to Communication Capabilities on three tables of output values, one for field wiring, thereby permitting page 67.

each channel from the corresponding removal or replacement of the input or Tricon Communication Module Main Processor. Each channel has its output module without disturbing field (TCM) own digital-to-analog converter wiring. The Tricon Communication Module (DAC). One of the three channels is A fanned-out cable is a lower-cost (TCM) enables a Tricon controller to selected to drive th e analog outputs. alternative to an ETP when using communicate with Modbus devices The output is continuously checked for Digital Input Modules or Digital (masters or slaves), a TriStation 1131 correctness by loop-back inputs on Output Modules. One end of a fanned-PC, a network printer, other Triconex each point which are read by all three out cable connects to the Tricon controllers, and other external devices microprocessors. If a fault occurs in the controller backplane and the other end on Ethernet networks.

driving channel, that channel is provides 50 fanned -out leads, each declared faulty and a new channel is individually labeled with a pin number Each TCM has four serial ports, two selected to drive th e field device. The that matches the connector signals. Ethernet network ports, and one debug port (for Invensys use).

7 Theory of Operation

Peer-to-Peer The NCMG enables time synchroniza-tion to a GPS device.

Hiway Interface Module (HIM)

The HIM acts as an interface between a Tricon controller and a Honeywell TDC-3000 Distributed Control System DCS Environment (DCS) by means of the Hiway Gateway and Local Control Network (LCN). The TRICON Chassis DCS Bus HIM enables higher-order devices, such as computers and operator worksta-tions, to communicate with the Tricon.

DCS Safety Manager Module (SMM)

Operator The SMM acts as an interface between Workstation a Tricon controller and a Honeywell Universal Control Network (UCN), one of three principal networks of the GPS TDC-3000 DCS. The SMM appears to the TDC-3000 as a safety node on the

MPs TCMsUniversal Control Network (UCN),

allowing the Tricon controller to manage process-critical points within the overall TDC-3000 environment.

The SMM transmits all Tricon aliased TriStation Modbus Serial Modbus Serial data and diagnostic information to 1131 Slave Master TDC-3000 operator workstations in

alarm alarm alarm alarm alarm display formats that are familiar to alarm alarm alarm alarm alarm

alarm alarm alarm alarm alarm Honeywell operators.

Annunciator Advanced Communication Module (ACM)

The ACM acts as an interface between Sample of the TCM Communication Capabilities a Tricon controller and a Foxboro Intel-ligent Automation (I/A) Series DCS.

A single Tricon controller supports up two EICM modules which reside in one The ACM appears to the Foxboro to four TCMs, which reside in two logical slot. This arrangement provides system as a safety node on the I/A logical slots. This arrangement a total of six Modbus ports, two TriSta-Series Nodebus, allowing the Tricon provides a total of sixteen serial ports tion ports, and two printer ports. controller to manage process-critical and eight Ethernet network ports. Network Communication Module points within the overall I/A DCS envi-Enhanced Intelligent (NCM) ronment. The ACM transmits all Tricon Communication Module (EICM) The NCM supports Ethernet (802.3) aliased data and diagnostic information The EICM enables a Tricon controller communication at 10 megabits per to I/A operator workstations in display to communicate with Modbus devices second for Triconex-proprietary proto-formats that are familiar to Foxboro (masters or slaves), with a TriStation cols and applications. operators.

1131 PC, and with a printer. The four The NCM also supports OPC Server See Product Specifications on serial ports are uniquely addressed and which can be used by any OPC client. page 17 for specifications of the TCM, can be used for Modbus or TriStation In addition, users can write their own EICM, NCM, SMM, HIM, and ACM.

communication at speeds up to 19.2 applications using the TSAA protocol.

kilobits per second. A single Tricon High-Density controller supports up to

8 HART Communication Power Modules Highway Addressable Remote Trans-Each Tricon chassis houses two Power ducer protocol (HART') is a bi-direc-Modules arranged in a dual-redundant tional industrial field communication configuration. Each module derives protocol used to communicate between power from the backplane and has inde-intelligent field instruments and host pendent power regulators for each systems over 4-20 mA instrumentation channel. Each can support the power wiring. Invensys offers these compo-requirements for all the modules in the nents to enable HART communication chassis in which it resides, and each between HART devices in the field and feeds a separate power rail on the Configuration and Asset Management chassis backplane. The Power Modules Software running on a PC: have built-in diagnostic circuitry which

• Model 2770H HART Analog Input checks for out-of-range voltages and Interface Module over-temperature conditions. A short on a channel disables the power regu-

• Model 2870H HART Analog Output lator rather than affecting the power Interface Module bus.

Architecture of Power Module Subsystem

9 Notes ATr i c o nsystemconsistsofoneMain Chassisand upto fourteenadditionalchassis.

SystemConfiguration

A Tricon system is composed of a Main A B Chassis and up to 14 Expansion or Remote Expansion (RXM) Chassis.

The maximum system size is 15 chassis supporting a total of 118 I/O modules C (maximum including spares), interface modules, and communication modules that interface with OPC clients, D Modbus devices, other Tricon control-lers, and external host applications on Ethernet (802.3) networks, as well as Foxboro and Honeywell distributed control systems (DCS).

The following sections provide guide-E lines for chassis layout and system configuration.

Chassis Layout Two power supplies reside on the left side of all chassis, one above the other.

In the Main Chassis, the three Main Processors are immedi ately to the right. F The remainder of the chassis is divided into six logical slots for I/O and communication modules and one COM slot with no hot-spare position. Each logical slot provides two physical spaces for modules, one for the active module and the other for its optional hot-spare module.

The layout of an Expansion Chassis is similar to that of the Main Chassis, GIJKLMH except that Expansion Chassis provide eight logical slots for I/O modules. A. Memory backup battery F. Redundant Power Modules K. DO module with hot-spare (The spaces used by the Main Proces-B. Connectors for terminations G. Three Main Processors L. AI module with hot-spare sors and the COM slot in the Main C. I/O expansion ports H. COM slot (empty) M. AO module without spare Chassis are now available for other D. Power terminals I. Two TCMs purposes.) E. Keyswitch J. DI module without spare The Main and Expansion Chassis are Sample Layout of a Tricon Chassis interconnected by means of triplicated

11 System Configuration

I/O bus cables. The maximum I/O bus With the hot-spare method, a logical automatically transition from tripli-cable length between the Main Chassis slot contains two identical I/O modules. cated to dual control and back again and the last Expansion Chassis is 100 While one module is active, the other without process interruption.

feet (30 meters), but in restricted appli-module is powered but inactive. The A Tricon system should include at least cations the length can be greater. Tricon system cycles control between one hot-spare module in place for each (Please contact the Invensys Global the two healthy I/O modules approx-type of I/O module in the system. With Customer Support (GCS) center for imately every hour, so that each under-this arrangement, hot-spare modules assistance when configuring a system goes complete diagnostics on a regular are tested regularly and can be used for that exceeds 100 feet (30 meters) of I/O basis. If a fault is detected on one online module replacement anywhere bus cable length.) module, the Tricon system automati-in the system.

RXM Chassis are used for systems in cally switches control to the other which the total cable distance between module, allowing the system to main-the first chassis and the last chassis tain three healthy channels continu-I/O Bus Connections exceeds the distance which can be ously. The faulty module can then be The I/O Bus Ports figure shows the supported by copper. Each RXM removed and replaced. three sets of RS-485 I/O bus ports (IN Chassis houses a set of three RXM Alternatively, a module can be replaced and OUT) on each chassis. Additional Modules in the same position as the online even when only one I/O module chassis may branch out from the Main Main Processors in the Main Chassis. is normally installed in a logical slot. If Chassis by means of the I/O bus ports, Six remaining logical slots are avail-a fault occurs, the Fault indicator turns up to a maximum of 14. There are six able in an RXM Chassis and one blank on, but the module remains active on portstwo sets of three for triplicated (unused) slot. two channels. A replacement module is serial communica tion located on a then inserted into the unused space in panel in the upper left corner of the the slot. The Tricon system will grant backplane. One set of three I/O bus Online Module Repair control to this second I/O module after cables is required for each Expansion The logical slot arrangement of a it passes a diagnostic test. Once the Chassis, and for each RXM Chassis Tricon chassis provides two approaches replacement I/O module becomes that houses a primary RXM Module to the online repair of faulting modules: active, the faulty module can be set. (Remote RXM Chassis are the hot-spare method and online removed. This repair method demon-connected to the primary RXM Chassis module replacement. strates the Tricon controller s ability to with fiber-optic cables.) Communica-tion across the I/O bus cables (and the I/O Bus Ports Tricon Chassis, RXM fiber-optic cables) is at 375 kilo-Front View bits per second, the same rate as the internal I/O bus on the backplane of OUT each chassis.

ABC

IN

I / O Bus Connect i ons OUT A Leg A out put por t OUT B Leg B out put por t OUT C Leg C out put por t IN A Leg A i nput por t IN B Leg B i nput por t IN C Leg C i nput por t

I/O Bus Ports

12 System Configuration Guidelines RXM Chas s i s Expansi on Chassi s A Tricon system must have a Main

A Chassis, and may have up to14 Expan-A

B sion or Remote Expansion (RXM) Re mo t e B Chassis. The following configuration Locat i on #1 C C

Remo t e guidelines apply. RXM Set Main Chassis Configuration Guidelines Jumper Cabl e

• There is one Main Chassis with a NOTES Junct i on Dotted lines represent six fiber-optic cables chassis address of 1. Box for remot e l ocat i on. Sol i d l i nes r epr esent Ma i n RS-485 I / O Bus Cabl es for l ocal expansi on.

• The Main Chassis must contain Ca bl e Junct i on A Tr i con syst em may cont ai n a maxi mum of 15 three Model 3008 Main Processors Box chassi s, i ncl udi ng Mai n, Expansi on and RXM Chassi s.

for Tricon v10 and later systems.

Jumper Cabl e

• The Main Chassis must house two Power Modules.

Mai n Chassi s

• The Main Chassis provides six MP s RXM Chas s i s Expansi on Chassi s logical slots for user-selected A A A

modules and one COM slot. B B

B

• A v10 low-density configuration C C C

includes a v5-v8 chassis with v10 Pr i mar y RXM Set Main Processors, communication, and I/O modules.

Expansion Chassis to Remote Locat i on #3 Configuration Guidelines to Remote Locat i on #2

• Expansion Chassis are used when the total I/O bus cable length for the system is less than 100 feet (30 System Configuration with Three Remote Locations meters) for each channel.

• Each Expansion Chassis must have a RXM Chassis Configuration supported. Contact Invensys unique address between 2 and 15. Guidelines regarding other configurations.

This address must not be used by

• RXM Chassis must be used when

• Each primary RXM Module set can any other chassis. the total I/O bus cable length for the support up to three remote sites,

• Each Expansion Chassis must house system is greater than 100 feet (30 each up to 7.5 miles (12 kilometers) two Power Modules. meters) for each channel. away.

• One set of triplicated I/O bus cables

• Each RXM Chassis must have a

• One RXM Chassis must be located is used to interconnect channels A, unique address between 2 and 15. at each remote site. This RXM B, and C between Expansion This address must not be used by Chassis must house a remote RXM Chassis. any other chassis. Module set.

• Each Expansion Chassis provides

• One RXM Chassis must be located

• A primary RXM Module set and a eight logical slots. within 100 feet (30 meters) of the remote RXM Module set are Main Chassis. This RXM Chassis connected by six fiber-optic cables must house the primary RXM which transmit and receive signals Module set. Up to three primary for channels A, B, and C.

RXM Module sets are normally

13 System Configuration

Chassis and Terminations Mounted in an Enclosure

• RXM Chassis can be connected to Communication Module

• Up to two logical slots can be local Expansion Chassis using I/O Configuration Guidelines configured for NCMs. Matched bus cables. The following rules apply to the TCM, pairs of NCMs can be installed in the

• Each RXM Chassis must contain EICM, NCM, HIM, SMM, and ACM in left and right positions of each two Power Modules. a Tricon system: logical slot. If only one logical slot is

• A TriStation 1131 PC communicates used, the slot can be in the Main

• Each RXM Chassis provides six Chassis or Chassis 2. If two logical logical slots for I/O modules and one with a Tricon controller through a slots are used, they must be Slot 6 blank (unused) slot. TCM, EICM, NCM or ACM, so at and 7 in the Main Chassis, and Peer-least one of these modules must be to-Peer cannot be used.

installed in the Main Chassis or

• Up to two logical slots can be Chassis 2. configured for TCMs. Matched pairs

• One logical slot is available for of TCMs can be installed in the left EICMs or ACMs, respectively. and right positions of each logical Matched pairs of these modules can slot, and they can be located in the be installed in both the left and right Main Chassis or Chassis 2.

positions of one logical slot.

14

• Up to three logical slots can be Module Type Watts Consumed configured for SMMs. A matched ACM 15 pair of SMMs can be installed in the left and right positions of each Analog Input 10 logical slot. All three slots must be Analog Input, Models 3720 and 3721 12 in the Main Chassis or Chassis 2. Analog Input, Isolated 15

• Up to two logical slots can be Analog Input, High-Density 10 configured for HIMs. Both slots Analog Output 15 must be in the Main Chassis. Analog Output, Bipolar 20

• The COM slot can be configured Digital Input, High-Density 10 only for the EICM, TCM, or NCM. Digital Input, Single 10

• You cannot install an NCM and a Digital Input, TMR 10 TCM in the same Tricon system. Digital Output, AC 10 You also cannot install an EICM and a TCM in the same system. Digital Output, DC 10

• Model 4351A, 4351B, 4352A, and Digital Output, Dual 10 4352B TCMs cannot be installed Digital Output, Supervised 15 into a system with Model 4351 or EICM 10 4352 TCMs, even if they are HART Analog Input Interface 5 installed in different chassis. HART Analog Output Interface 5

• If communication modules are HIM 10 housed in Chassis 2, this chassis Main Processor, Model 3008 10 must be connected directly to the Main Chassis using I/O COMM NCM 20 cables (Model 9001) rather than Power Module n/a standard I/O bus cables. SMM 20

• Chassis 2 can be an I/O Expansion TCM 7 Chassis or a primary RXM Chassis. Thermocouple Input, Isolated 15 Chassis Power Limitations Thermocouple Input, Non-Isolated 10 To maintain the safety and reliability of Pulse Input 20 the Tricon controller, each system must Pulse Totalizer 10 be configured for operation under a RXM 5 worst-case scenario. These circum-stances include operat ion with only one Relay Output 15 functional power supply at 140° F (60° C), ambient. (See Power Modules on page 32 for detailed specifications).

Under these conditions, the power supply is rated to deliver 175 watts. The table to the right lists the logic power consumption per module in watts.

15 Notes The Tricon controller suppor ts a comprehensive range of modulestomeetcustomersneeds.

ProductSpecifications

The Triconex product family includes a Main Processors Automation (I/A) Series DCS and a comprehensive range of modules. This The Main Processors execute the TriStation 1131 application.

section includes: a summary of the system diagnostics and the user-written Fiber-Optic Remote system components and their uses, a control program. Extender Modules (RXM) table that lists standard products and Communication Modules For operation of Expansion Chassis up their model numbers, and a summary of to 7.5 miles (12 kilometers) away from specifications for each standard product

• Tricon Communication Modules the Main Chassis, with exceptional in the Tricon controller family. (TCM) support a number of immunity against electro-static and See the Planning and Installation Triconex protocols and applications electro-magnetic interference.

Guide for Tricon v9-v10 Systems for and user-written applications on complete information. Ethernet (802.3) networks, Interface Modules including TriStation, Modbus TCP,

• HART Analog Input Interface and OPC. It also supports RS-232 Modules act as an interface between Summary of Tricon System and RS-485 serial communication 4-20 mA analog input points from Components with Modbus devices, TriStation HART smart devices in the field and 1131, and GPS for time HART Host software running on a Chassis synchronization. PC.

• Main Chassishouses Main

• Enhanced Intelligent

• HART Analog Output Interface Processors, memory back-up Communication Modules (EICM) Modules act as an interface between batteries, communication modules support RS-232, RS-422 and RS-4-20 mA analog output points from and I/O modules. 485 serial communication with HART smart devices in the field and

• Expansion Chassisfor additional Modbus devices and TriStation 1131 HART Host software running on a I/O modules with up to 100 feet (30 applications. PC.

meters) total cable length between

• Network Communication Modules the Main Chassis and the last (NCM) support a number of I/O Modules Expansion Chassis. Triconex protocols and applications

• Digital Input Modules receive

• RXM Chassisfor I/O modules up and user-written applications on discrete signals of these nominal to 7.5 miles (12 kilometers) away Ethernet (802.3) networks, voltages: 115 VAC/VDC, 48 from the Main Chassis. including the TriStation 1131 VAC/VDC, and 24 VAC/VDC. All

• Mechanical Keying Each slot in software. voltages are available in TMR the Tricon controller is mechanically

• Safety Manager Modules (SMM) act modules. Non-TMR modules are keyed to correspond with a specific as an interface between a Tricon available in 24 VDC and 48 VDC type of module. This prevents the controller and a Honeywell only. Speed input and totalization installation of modules into Universal Control Network (UCN), modules are also available.

improper slots. one of three principal networks of

• Supervised Digital Output Modules For chassis mounting and enclosure the TDC-3000 DCS. produce discrete output signals of specifications, see page 31.

• Hiway Interface Modules (HIM) act these nominal voltages, with Power Supply Modules as an interface between a Tricon diagnostic coverage of the field

• Provide logic power to modules in controller and a Honeywell circuit and load device: 115 VAC, the Main, Expansion or RXM TDC-3000 Hiway Gateway and 120 VDC, 48 VDC, and 24 VDC.

Chassis. Available in 24 VDC, 115 Local Control Network (LCN).

• Digital Output Modules produce VAC and 230 VAC versions. The

• Advanced Communication Modules discrete output signals of these power rating of each power supply is (ACM) allow a Tricon controller to nominal voltages: 115 VAC, 120 175 watts at 140° F (60° C). interface with a Foxboro Industrial 17 Product Specifications

VDC, 24 VDC, and 48 VDC. Dual Conformal Coating

• Blank slot covers output modules are also available. Most of the Tricon hardware models in Neoprene dust covers are provided with

• Analog Input Modules receive the Planning and Installation Guide for external termination panels and chassis analog signals of these types: 0-5 Tricon v9-v10 Systems and the Field that are conformal coated. You can VDC, -5 to +5 VDC, 0-10 VDC, and Terminations Guide for Tricon v9-v10 install the dust covers on unused Thermocouple types J, K, T and E. Systems can be ordered with conformal external termination panel connectors Available in both isolated and DC-coating by adding the letter C to the and unused backplan e connectors, at coupled versions. end of the standard model number. your discretion.

• Analog Output Modules are The following equipment cannot be Some of the Tricon hardware with available in these versions: eight ordered with conformal coating: conformal coating has been certified output points at 4-20 mA; six output

• Equipment certified for use in for use in marine environments. For points at 4-20 mA and two at 20-320 nuclear 1E applications more information, see Tricon Equip-mA; and four output points at -60 to

• All types of cables; including ment Certified for Use in Marine Envi-60 mA. interface cables, I/O bus cables, and ronments on page 21.

fanned-out cables

18 Standard Tricon System Products

Description Model No. See Chassis Assemblies Main Chassis, High-Density Configuration, includes the Tricon printed manuals 8110 page 13, page 29 Expansion Chassis, High-Density Configuration 8111 page 13, page 29 Expansion Chassis, Enhanced Low-Density Configuration 8121 page 13, page 29 Remote Expansion Chassis, High-Density Configuration 8112 page 13, page 29 I/O Bus Expansion Cables (Set of 3) 9000a page 12 I/O-COMM Bus Expansion Cables (Set of 3) 9001 page 12, page 29 Blank I/O Slot Panel 8105 page 30 Power Modules 120 VAC/VDC - 175-Watt Power Module 8310 page 32 24 VDC - 175-Watt Power Module 8311 page 32 230 VAC - 175-Watt Power Module 8312 page 32 Main Processor Modules 3008 Main Processor, 16 megabytes DRAM 3008 page 33 Communication Hardware and Software Tricon Communication Module (TCM), Ethernet (802.3) and serial (RS-232/RS-485) ports 4351A, 4352A, page 34 4351B, 4352B 4353, 4354 Enhanced Intelligent Communication Module (EICM), serial (RS-232/RS-422/RS-485) ports 4119, 4119A page 35 Safety Manager Module (SMM), Honeywell UCN Interface 4409 page 36 Network Communication Module (NCM), Ethernet (802.3) ports 4329, 4329G page 37 Advanced Communication Module (ACM), Foxboro I/A Series Nodebus Interface 4609 page 38 Hiway Interface Module (HIM), Honeywell Data Hiway Interface 4509 page 39 Triconex DDE Server Software Contact Invensys page 69 Network Accessory Kit (Ethernet thin cable, connectors and terminators) 7600-3 n/a Remote Extender Modules Primary RXM, Multi-Mode Fiber Optics, Set of 3 Modules 4200-3 page 40 Remote RXM, Multi-Mode Fiber Optics, Set of 3 Modules 4201-3 page 40 Primary SRXM, Single-Mode Fiber Optics, Set of 3 Modules 4210-3 page 40 Remote SRXM, Single-Mode Fiber Optics, Set of 3 Modules 4211-3 page 40 Interface Modules HART Analog Input Interface Module with 2071H HART Multiplexer 2770H page 54 HART Analog Input Interface Module with 2071H HART Multiplexer and Amp-Elco 2750-2H page 54 Adapter Cable HART Analog Output Interface Module with 2071H HART Multiplexer 2870H page 54 HART Multiplexer 2071H page 54 TriStation 1131 and Diagnostic Software TriStation 1131 v4.x Software License with printed manuals Contact Invensys page 71 Enhanced Diagnostic Monitor v2.x Contact Invensys page 72

19 Product Specifications

Description Model No. See Documentation Sets Tricon Planning and Installation, Field Terminations, and Communication printed manuals Contact Invensys Triconex User Documentation, includes all manuals in PDF format (CD-ROM) Contact Invensys

a. I/O Bus Expansion Cables are available in custom lengths. Please contact Invensys for more information.

Tricon I/O Modules

Vo l t a g e Description Ty p e Model No. Points For Details, See Digital Input Modules 115 VAC/VDC Opto-Isolated, Non-Commoned TMR 3501E/3501T 32 page 41 48 VAC/VDC Commoned in Groups of 8, Self-Test TMR 3502E 32 page 41 24 VAC/VDC Commoned in Groups of 8, Self-Test TMR 3503E 32 page 41 24/48 VDC High-Density, DC Coupled TMR 3504E 64 page 42 24 VDC Low Threshold with Self-test, Commoned TMR 3505E 32 page 41 24 VDC Single, Opto-Isolated, Commoned Single 3564 64 page 42 Pulse Input Differential, AC Coupled TMR 3511 8 page 43 Pulse Totalizer Opto-isolated, Non-commoned TMR 3515 32 page 44 Digital Output Modules 115 VAC Opto-Isolated, Non-commoned TMR 3601E/3601T 16 page 45 120 VDC Opto-Isolated, Non-commoned TMR 3603B, 16 page 45 Opto-Isolated, Commoned 3603E/3603T 24 VDC Opto-Isolated, Non-commoned TMR 3604E 16 page 45 48 VDC Opto-Isolated, Non-commoned TMR 3607E 16 page 45 115 VAC Galvanically Isolated, Commoned., Supv. TMR 3611E 8 page 47 48 VDC Galvanically Isolated, Commoned, Supv. TMR 3617E 8 page 47 120 VDC Opto-Isolated, Commoned, Supervised TMR 3623/3623T 16 page 46 24 VDC Opto-Isolated, Commoned, Supervised TMR 3624 16 page 46 24 VDC Supervised/Non-Supervised, Commoned TMR 3625/3625A 32 page 46 24 VDC Opto-Isolated, Commoned Dual 3664 32 page 48 24 VDC Opto-Isolated, Commoned Dual 3674 32 page 48 Relay Output Non-triplicated, Normally Open Non-3636R/3636T 32 page 43 triplicated Analog Input Modules 0-5 VDC Differential, DC Coupled TMR 3700A 32 page 49 0-10 VDC Differential, DC Coupled TMR 3701 32 page 49 0-5, 0-10 VDC Differential, Isolated TMR 3703E 16 page 49 0-5, 0-10 VDC High-Density, Differential, DC Coupled TMR 3704E 64 page 49 Thermocouple Differential, DC Coupled TMR 3706A 32 page 52 Thermocouple Differential, Isolated TMR 3708E 16 page 52

20 Vo l t a g e Description Ty p e Model No. Points For Details, See 0-5 VDC Single-Ended TMR 3720 64 page 49 0 to 5 or -5 to +5 VDC Differential, DC Coupled TMR 3721 32 page 49 Analog Output Modules 4-20 mA Current Loop, DC Coupled TMR 3805E/3805H 8 page 50 4-20 mA and 20-320 mA Current Loop, DC Coupled TMR 3806E 6 and 2 page 50

-60 to 60 mA Bipolar, Commoned Return, DC Coupled TMR 3807 4 page 50

Tricon Equipment Certified for Use in Marine Environments Bureau Veritas (BV) has certified specifi c Tricon products as being in full compliance with the following internationally recog-nized standard and qualified for use in marine environments:

BV NR467:2011, Part C, Ch 2-3 Rules for the Classification of Steel Ships; Part C - Machinery, Electricity, Automation and Fire Protection; Chapters 2-3 Bureau Veritas Environmental Category, EC Code: 31C The following table lists the model numbers of Tricon equipment certified for use in marine environments and identifies the sta n-dard model to see for information about the equipment. All of the information (specifications, simplified schematics, installation guidelines, and so on) for standard equipment also applies to marine equipment. Additionally, refer to the Planning and Instal-lation Guide for Tricon v9-v10 Systems for application-specific installation instructions.

Model Number Description See This Standard Model Modules and Chassisa 8110C Main Chassis 8110 8111C Expansion Chassis 8111 8112C Remote Expansion Chassis 8112 8310C High-Density Power Module, 120 V 8310 8311C High-Density Power Module, 24 VDC 8311 8312C High-Density Power Module, 230 VAC 8312 3008C Enhanced Main Processor III, 16 Mb 3008 4200C Remote Extender Module 4200 4200-3C Remote Extender Module (Set) 4200-3 4201C Remote Extender Module 4201 4201-3C Remote Extender Module (Set) 4201-3 4351BC Tricon Communication Module (TCM), copper 4351B 4352BC Tricon Communication Module (TCM), fiber-optic 4352B 4353C Tricon Communication Module (TCM), Embedded OPC Server, copper 4353 4354C Tricon Communication Module (TCM), Embedded OPC Server, fiber-optic 4354 3703EC AI, 0-5 VDC or 0-10 VDC, differential, isolated, TMR, 16 pts. 3703E 3721C AI, 0-5 VDC or -5 to +5 VDC, differential, DC-coupled, TMR, 32 pts. 3721 3700AC AI, 0-5 VDC, non-commoned, differential, DC-coupled, TMR, 32 pts. 3700A 3720C AI, 0-5 VDC, single-ended, 64 pts. 3720

21 Product Specifications

Model Number Description See This Standard Model 3805HC AO, 4-20 mA, current loop, DC-coupled, TMR, 8 pts. 3805H 3505EC DI, 24 VDC, low threshold, 32 pts. 3505E 3503EC DI, 24 VAC/VDC, commoned in groups of 8, self-test, TMR, 32 pts. 3503E 3564C DI, 0-5 VDC, single-ended, high-density, TMR, 64 pts. 3564 3664C DO, 24 VDC, commoned, opto-isolated, self-protected, dual, 32 pts. 3664 3625C DO, 24 VDC, supervised/non-supervised, commoned, TMR, 32 pts. 3625 3625AC DO, 24 VDC, supervised/non-supervised, commoned, TMR, 32 pts. 3625A 3511C Pulse Input, differential, AC-coupled, TMR, 8 pts. 3511 3636TC Relay Output, normally open, non-trip licated, 32 pts. 3636T External Termination Panels and FT4 Interface Cables b 9563-810FC Term panel with cable 4000187-310; for use with 3503EC and 3505EC 9563-810F 9566-710FC Term panel with cable 4000187-310; for use with 3564C 9566-710F 9662-610FC Term panel with cable 4000188-310; for use with 3625C, 3625AC, and 3664C 9662-610F 9668-110FC Term panel with cable 4000188-110c; for use with 3636TC 9668-110F 9753-110FC Term panel with cable 4000189-510; for use with 3511C 9753-110F 9765-210FC Term panel with cable 4000206-510; for use with 3720C 9765-210F 9771-210FC Term panel with cable 4000189-510; for use with 3700AC, 3703EC, and 3721C 9771-210F 9853-610FC Term panel with cable 4000190-510; for use with 3805HC 9853-610F

a. For information about modules and chassis, see the Planning and Installation Guide for Tricon v9-v10 Systems.

b. For information about external termination panels and interface cables, see the Field Terminations Guide for Tricon v9-v10 Systems.

c. A low smoke zero halogen (LSZH) cable is also certified for use with the external termination assembly (ETA) that is included with model 9668-110FC. If you need the LSZH cable, order ETA 3000590-110C and LSZH cable 4000141-110, separately.

22 Tricon v10.x Equipment Certified for Use in Nuclear 1E Applications Invensys has qualified specific Tricon version 10 products for use in 1E (safety-related) applications in nuclear power plants in accordance with EPRI Report TR-107330, Generic Requirements Specification for Qualifying Commercially Available PLC for Safety-Related Applications in Nucl ear Power Plants. EMC testing was perf ormed in accordance with USNRC Regulatory Guide 1.180, Revision 1, Guidelines for Evaluating Electromagn etic and Radio-Frequency Interference in Safety-Related Instrumentation and Control Systems.

All of the information (specifications, simplified schematics, installation guidelines, and so on) for standard equipment also applies to nuclear equipment. Th e following table lists the model numbers of Tricon v10.x equipment certified for use in Nuclear 1E applications and identifies the standard model to see for information about the equipment.

Model Number Description See This Standard Model Modulesa 8110N2 Main Chassis 8110 8111N Expansion Chassis 8111 8112N Remote Expansion Chassis 8112 8310N2 High-Density Power Module, 120 V 8310 8311N2 High-Density Power Module, 24 VDC 8331 8312N2 High-Density Power Module, 230 VAC 8312 3008N Enhanced Main Processor III, 16 Mb 3008 4200N Remote Extender Module 4200 4200-3N Remote Extender Module (Set) 4200-3 4201N Remote Extender Module 4201 4201-3N Remote Extender Module (Set) 4201-3 4352AN Tricon Communication Module (TCM) 4352A 4352BN Tricon Communication Module (TCM) 4352B 3701N2 0-10 VDC, Differential DC Coupled, TMR 3701 3703EN 0-5 VDC or 0-10 VDC, Differential, Isolated, TMR 3703E 3721N 0-5 VDC or -5 to +5 VDC, Differential, DC Coupled, TMR 3721 3805HN 4-20 mA, Current Loop, DC Coupled, TMR 3805H 3501TN2 115 VAC, Opto-isolated, Non-commoned, TMR 3501T 3502EN2 48 VAC/VDC, Commoned in Groups of 8, Self-Test, TMR 3502E 3503EN2 24 VAC/VDC, Commoned in Groups of 8, Self-Test, TMR 3503E 3601TN 115 VAC, Opto-isolated, Non-commoned, TMR 3601T 3603TN 120 VDC, Opto-isolated, Commoned, TMR 3603T 3607EN 48 VDC, Opto-isolated, Non-commoned, TMR 3607 3623TN 120 VDC, Opto-isolated, Commoned, Supervised, TMR 3623T 3625N 24 VDC, Supervised/Non-supervised, Commoned, TMR 3625 3511N Pulse Input, Differential, AC Coupled, TMR 3511 3708EN Thermocouple, Differential, Isolated, TMR 3708 3636TN Relay Output, Normally Open, Non-triplicated 3636T 8105N Blank Module Panel 8105

23 Product Specifications

Model Number Description See This Standard Model External Termination Panels with XLPE I/F Cablesb 9561-110N Term Panel (3501TN2) with XLPE Cable 9561-110F 9561-810N Term Panel (3501TN2) with XLPE Cable 9561-810F 9562-810N Term Panel (3502EN2) with XLPE Cable 9562-810F 9563-810N Term Panel (3503EN2) with XLPE Cable 9563-810F 9662-610N Term Panel (3625N) with XLPE Cable 9662-610F 9662-810N Term Panel (3625N) with XLPE Cable 9662-810F 9663-610N Term Panel (3601TN) with XLPE Cable 9663-610F 9664-810N Term Panel (3603TN, 3623TN) with XLPE Cable 9664-810F 9667-810N Term Panel (3607EN) with XLPE Cable 9667-810F 9668-110N Term Panel (3636TN) with XLPE Cable 9668-110F 9764-310N Term Panel (3721N) with XLPE Cable 9764-310F 9782-110N Term Panel (3708EN) with XLPE Cable 9782-110F 9783-110N Term Panel (3721N, 3703EN, 3701N2) with XLPE Cable 9783-110F 9790-610N Term Panel (3721N, 3703EN) with XLPE Cable 9790-610F 9792-610N Term Panel (16-56 V Analog Input, 4-20 mA Nuclear EMC) with XLPE Cable 9792-610F 9794-110N Term Panel (3511N) with XLPE Cable 9794-110F 9795-610N Term Panel (3701N2) with XLPE Cable 9795-610F 9860-610N Term Panel (3805HN) with XLPE Cable 9860-610F External Termination Panels with XLPEJ I/F Cablesb 9561-110NJ Term Panel (3501TN2) with XLPEJ Cable 9561-110F 9561-810NJ Term Panel (3501TN2) with XLPEJ Cable 9561-810F 9562-810NJ Term Panel (3502EN2) with XLPEJ Cable 9562-810F 9563-810NJ Term Panel (3503EN2) with XLPEJ Cable 9563-810F 9662-610NJ Term Panel (3625N) with XLPEJ Cable 9662-610F 9662-810NJ Term Panel (3625N) with XLPEJ Cable 9662-810F 9663-610NJ Term Panel (3601TN) with XLPEJ Cable 9663-610F 9664-810NJ Term Panel (3603TN, 3623TN) with XLPEJ Cable 9664-810F 9667-810NJ Term Panel (3607EN) with XLPEJ Cable 9667-810F 9668-110NJ Term Panel (3636TN) with XLPEJ Cable 9668-110F 9764-310NJ Term Panel (3721N) with XLPEJ Cable 9764-310F 9782-110NJ Term Panel (3708EN) with XLPEJ Cable 9782-110F 9783-110NJ Term Panel (3721N, 3703EN, 3701N2) with XLPEJ Cable 9783-110F 9790-610NJ Term Panel (3721N, 3703EN) with XLPEJ Cable 9790-610F 9792-610NJ Term Panel (16-56 V Analog Input, 4-20 mA Nuclear EMC) with XLPEJ Cable 9792-610F 9794-110NJ Term Panel (3511N) with XLPEJ Cable 9794-110F 9795-610NJ Term Panel (3701N2) with XLPEJ Cable 9795-610F 9860-610NJ Term Panel (3805HN) with XLPEJ Cable 9860-610F

24 Model Number Description See This Standard Model External Termination Panels with PVC I/F Cablesb 9561-110N-P Term Panel (3501TN2) with PVC Cable 9561-110F 9561-810N-P Term Panel (3501TN2) with PVC Cable 9561-810F 9562-810N-P Term Panel (3502EN2) with PVC Cable 9562-810F 9563-810N-P Term Panel (3503EN2) with PVC Cable 9563-810F 9662-610N-P Term Panel (3625N) with PVC Cable 9662-610F 9662-810N-P Term Panel (3625N) with PVC Cable 9662-810F 9663-610N-P Term Panel (3601TN) with PVC Cable 9663-610F 9664-810N-P Term Panel (3603TN, 3623TN) with PVC Cable 9664-810F 9667-810N-P Term Panel (3607EN) with PVC Cable 9667-810F 9668-110N-P Term Panel (3636TN) with PVC Cable 9668-110F 9764-310N-P Term Panel (3721N) with PVC Cable 9764-310F 9782-110N-P Term Panel (3708EN) with PVC Cable 9782-110F 9783-110N-P Term Panel (3721N, 3703N, 3701N) with PVC Cable 9783-110F 9790-610N-P Term Panel (3721N, 3703N) 9790-610F 9792-610N-P Term Panel (16-56 V Analog Input, 4-20 mA Nuclear EMC) with PVC Cable 9792-610F 9794-110N-P Term Panel (3511N) with PVC Cable 9794-110F 9795-610N-P Term Panel (3701N2) with PVC Cable 9795-610F 9860-610N-P Term Panel (3805HN) with PVC Cable 9860-610F Tricon I/O Cable Setsc 9000N I/O Bus Cable Set with XLPE Cable 9000 9001N I/O and Comm Bus Cable Set with XLPE Cable 9001 9000NJ I/O Bus Cable Set with XLPEJ Cable 9000 9001NJ I/O and Comm Bus Cable Set with XLPEJ Cable 9001 9000N-P I/O Bus Cable Set with PVC Cable 9000 9001N-P I/O and Comm Bus Cable Set with PVC Cable 9001 Signal Conditionersd 1600024-010N Signal Conditioner (-100° C to 100° C) Pt 1600024-010 1600024-020N Signal Conditioner (0° C to 100° C) Pt 1600024-020 1600024-030N Signal Conditioner (0° C to +200° C) Pt 1600021-030 1600024-040N Signal Conditioner (0° C to +600°) Pt 1600024-040 1600081-001N Signal Conditioner (0° C to 120° C) Cu 1600081-001 1600082-001N Signal Conditioner (0 to 100 mV) Pt 1600082-001 1600083-200N Signal Conditioner (0° C to 200° C) Pt Contact Invensys 1600083-600N Signal Conditioner (0° C to 600° C) Pt Contact Invensys

25 Product Specifications

Model Number Description See This Standard Model External Termination Assembly (ETA) Mounting Plates (Blank Panels) 9420017-010N ETA Blank Panel 1.75 inches Contact Invensys 9420017-030N ETA Blank Panel 3.5 inches Contact Invensys 9420017-050N ETA Blank Panel 5.25 inches Contact Invensys 9420017-070N ETA Blank Panel 7 inches Contact Invensys Chassis Mounting Bracket Kits 8405N Auxiliary Chassis Mounting Bracket Assembly Kit (Auxiliary/Rear Bracket) 8405

a. For information about modules, see the Planning and Installation Guide for Tricon v9-v10 Systems.

b. For information about external termination panels, see the Field Terminations Guide for Tricon v9-v10 Systems.

c. The maximum length for cable models 9001N, 9001NJ, and 9001N-P is 6 feet.

d. For information about signal conditioners, see the Field Terminations Guide for Tricon v9-v10 Systems.

26 General Environmental and EMC Specifications Other than the optional conformal coating of all PCB assemblies, the Tricon controller is not explicitly protected against dust or falling debris.

Atmospheric and airborne-particle protection must be provided by housing the Tricon controller in an appropriate NEMA-rated enclosure.

Operating Temperature 32° to 140° F (0° to 60° C), ambient, as measured at the bottom of the chassis, per IEC 60068-2-1 Test Nb Storage Temperature -40° to 167° F (-40° to 75° C), per IEC 60068-2-14, Test Na Relative Humidity 5% to 95%, non-condensing, per IEC 60068-2-2, Test Bb, and IEC 60068-2-3 test Db Corrosive Environment Class G3 Level as defined in ISA Standard S71.04, based on exposure testing according to EIA Standard 364-65A, Class IIIA Sinusoidal Vibrations per Axis 2 G @ 10 to 150 Hz, per IEC 60068-2-6, Test Fc Shock 15 G for 6-11 ms in each axis, per IEC 60068-2-27 Electrostatic Discharge IEC 61000-4-2, 8 kV air, 4 kV contact Conducted Susceptibility IEC 61000-4-4, Fast Transient/Burst, 2 kV power, 1 kV signal lines and IEC 61000-4-5, Surge Withstand, 2 kV CM AC power lines, etc.

IEC 61000-4-6, RFI, 0.15-80 MHz, 10V Radiated Susceptibility IEC 61000-4-3, 26-1000 MHz, 10 V/m and IEC 61000-4-8, 50-60 Hz, 30 A/m Conducted Emissions CISPR 16, Class A, 0.15-30 MHz, 73-79 db when installed per the guidelines of the P&I Guide Radiated Emissions CISPR 11, Class A, 30-1000 MHz @ 10 m, 4-47 db when installed per the guidelines of the P&I Guide Cable Flame Test Ratinga Interface cables (connect external termination panels to I/O modules):

FT4 Vertical Flame Test-Cables in Cable Trays per C.S.A. C22.2 No. 0.3-92 Para 4.11.4b I/O bus cables (connect chassis):

FT6 Horizontal Flame & Smoke Test-per C.S.A. C22.2 No. 0.3-92 Appendix B c

a.Applies to cables shipped after April 1, 2009.

b.Cables will be marked with FT4 or CMG rating, but they all actually meet the more stringent FT4 rating.

c.Cables will be marked with FT6 or CMR rating, but they all actually meet the more stringent FT6 rating.

27 Product Specifications

International Approvals The Tricon controller has been certified as complying with multiple internationally recognized standards by the following internationally recognized certification agencies, these certifications have qualified the Tricon for use around the world in safety critical applications. Test reports from the various certification agencies are available upon request.

TÜV Rheinland TÜV has certified that the Tricon v9 and v10 controllers are in full compliance with the internationally recognized standards listed below, and thus are qualified for use in the following applicat ions and jurisdictions.

• Emergency safety shut-down or other critical control applications requiring SIL 1-3 certification per the functional safety requirements of IEC 61508 9 (only Tricon v9.6 or later systems)

• Emergency safety shut-down or other critical control applications requiring AK 1-AK6 certification per the functional safety requirements of DIN V 19250 and DIN V VDE 0801 (only Tricon v9.x systems)

• Fire and gas detection applications requiring certification per the requirements of EN 54

• Fire and gas detection applications requiring certification per the requirements of NFPA 72 (only Tricon v9.6 or later systems)

• Burner management applications requiring certification per the requirements of DIN VDE 0116

• Burner management applications requiring certification per the requirements of NFPA 8501 or NFPA 8502 (only Tricon v9.6 or later systems)

• All applications in the European Union or other jurisdictions requiring compliance with the EMC Directive No. 89/336/EEC and Low Voltage Equipment Directive No. 72/23/EEC

• All applications in the European Union or other jurisdictions requiring compliance with the ATEX Directive No. 94/9/EC for Zone 2, Group IIB hazardous locations

• Environmental, health, and safety applications in semiconductor manufacturing facilities per the requirements of SEMI S2 For hazardous location applications, see the Planning and Installation Guide for Tricon v9-v10 Systems for application-specific installation instructions.

Canadian Standards Association (CSA) CSA has certified that the Tricon v10 controller is in full compliance with the internationally recog-nized electrical safety standards and is qualified for general use in North American and other jurisdictions requiring compliance with these standards.

Factory Mutual Research (FM) Factory Mutual has certified that the Tricon v10 controller is in full compliance with the internationally recog-nized standards and is qualified for use in Class I, Division 2 Temperature T4, Groups A, B, C, and D hazardous indoor (or outdoor in a NEMA 4 cabinet) locations. For hazardous location applications, see the Planning and Installation Guide for Tricon v9-v10 Systems for application-specific installation instructions.

Bureau Veritas (BV) BV has certified specific Tricon products as being in full compliance with the internationally recognized standard and qual-ified for use in marine environments. For more information, see Tricon Equipment Certified for Use in Ma rine Environments on page 21. Also, for application-specific installation instructions, see the Planning and Installation Guide for Tricon v9-v10 Systems.

European Union CE Mark Based upon the independent TÜV evaluation and test results, Triconex has certified the Tricon controller is suitable to use in the European Union and all other jurisdictions requiring compliance with the European Union EMC Directive No. 89/336/EEC and Low Voltage Equipment Directive No. 72/23/EEC, see Certificate of Compliance for details. For hazardous location applications, see the Planning and Installation Guide for Tricon v9-v10 Systems for application-specific installation instructions.

U.S. Nuclear Regulatory Commission (NRC) The NRC has certified that the Tricon controller is suitable for use in nuclear 1E applications within the limitations and guidelines referenced in the NRC Safety Evaluation Report (SER) ML013470433, Review of Triconex Corporation Topical Reports 7286-545, Qualification Summary Report and 7286-546, Amendment 1 To Qualification Summary Report, Revision 1. This report is avail-able from the NRC via the Agency Document Access and Management System (ADAMS) website. This qualification was based upon EPRI TR-107330, Generic Requirements Specification for Qualifying a Commercially Available PLC for Safety-Related Applications in Nuclear Power Plants.

For details on models and revisions qualified for 1E applications, please contact Invensys Nuclear by calling toll-free 866-703-6300, toll 949-885-0885, or visit the Invensys Nuclear website at http://www.invensysnuclear.com.

28 Chassis Options Ke y s wi t c h A Tricon system is made up of one or L O C A L I/O Expansion Ba ck pl a ne more chassis assemblies which contain REMOT E

• RUNBus Ports I/O and communicat ion modules. The first chassis of a system is called the

• PROGRAM Main Chassis (Model 8110). To enlarge

• STOP a system, Expansion Chassis (Model 8111 or 8121) and/or RXM Chassis (Model 8112) can be added. (See System Configuration on page 11 for Power Supply Module #1 details.)

I/O Expansion Bus Each chassis has six RS-485 I/O expan-Power Supply sion bus ports at the top left corner of Module #2 the backplane. There are two sets of ports for channels A, B, and C, providing for two triplicated serial MP s 234567 communications paths between chassis. Logical Slots for I/O &

Communication Modules One set of cables is required for each Expansion Chassis and for the RXM program. Attempts to modify program Chassis which houses the primary Keyswitch for System Control variables by a TriStation 1131 RXM Module set. The standard length The Main Chassis has a four-position application, Modbus masters, or of a cable set (Model 9000) is 6 feet keyswitch which controls all the external hosts are rejected. However, a longer cables are available if needed. chassis in the system. The keyswitch control program may call gated access The triplicated I/O bus transfers data setting is readable by Tricon control-functions to enable external host writes between the I/O modules and the Main lers, TriStation 1131 software, and the during a designated window of time.

Processors at 375 kilobits per second. control programs. Switch settings are: PROGRAM For program loading and The communication bus runs between RUNNormal operation with read-checkout. Allows control of the Tricon the Main Processors and the communi-only capability. The Main Processors system from the TriStation 1131 plat-cation modules at 2 megabits per execute the previously-loaded control form, including Download All and second. Download Changes. Also allows writes to program variables by external hosts.

Mechanical Specifications STOPStops reading inputs, forces These specifications apply to Main, Expansion, and RXM Chassis; Power non-retentive digital and analog outputs Supply Modules; and othe r modules where indicated. to 0, and halts the control program.

Overall Dimensions 19 in wide by 22.75 in high by 17.75 in deep(Retentive outputs retain the value they (48.3 cm by 57.8 cm by 45.1 cm) had before the keyswitch was turned to Chassis Fabrication Black zinc-plated and welded cold-rolled steelStop.) The Stop setting can be used for Approximate Weights installation and service of process-Main or Expansion Chassis 54.0 lbs. (24.5 kg.) related equipment, but is not required for service of the Tricon controller.

Power Module 7.2 lbs. (3.3 kg.)

Main Processor 4.7 lbs. (2.1 kg.)REMOTEAllows writes to program I/O Module 4.7 to 6.0 lbs. (2.1 kg. to 2.7 kg.)variables by TriStation 1131 application and external hosts.

HART Interface Module 4.8 lbs. (2.2 kg.)(Download All and Download Changes Communication Module 5.0 lbs. (2.3 kg.)by the TriStation 1131 software are not 16-point Termination Panel.09 lbs. (.04 kg.) allowed.) Modification of program 32-point Termination Panel 2.1 lbs. (.95 kg.) logic is not allowed.

29 Product Specifications

Chassis and Mounting Slot Covers integration engineer must make provi-Specifications All unused slots in a chassis should be sions for sufficient heat management.

The Tricon system can be rack-filled with Blank I/O Slot Panels You can manage the temperature of the mounted or panel-mounted in an (Model 8105) to maintain proper air enclosure by using either convection industry-standard NEMA enclosure as flow. cooling or fans.

described on the next page. Cabinets All enclosure installations must meet can optionally be equipped with base these two requirements:

and casters. Multiple cabinets can be Heat Management bolted together on the sides, but suffi-When mounting Tricon chassis into

• The temperature rise through each cient clearance must be allowed to fully vented or non-vented enclosures, the chassis must not exceed 27° F (15° open their front and rear doors. C), as measured at the screened area at the top of the chassis at all points.

19. 00"

• The inlet temperature into the

48. 3cm screened area at the bottom of each

Opt i onal l ocat i on of mount i ng bracket 17. 40" chassis must not exceed 140° F (60° for r ear - rack or panel mount i ng of uni t44. 2cm

( 2 pl aces) C) at all points.

For temperatures above 86° F, Invensys recommends installing baffles 1/ 4 - 20 t hr eaded chassi s gr ound 16. 50" (Triconex part number 2000361-001),

To p V i e w 41. 9cm as shown on page 25. For higher of Chassi s temperatures, other heat management

St andar d l ocat i on of mount i ng bracket ( use for Rack or Panel Mount i ng) components should be implemented:

for f r ont rack mount i ng of uni t

( 2 pl aces) 21. 00"

53. 3cm

• Louvers and pagoda top

• Lower-density filters

• Redundant fans (running all the

3. 00" R

7. 6cm time)

Mi ni mal cl ear ance r equi r ement s for communi cat i on cabl es

• Failure detection circuitry

18. 31"

46. 5cm

NOTE: Bol t hol e spaci ng on Top of Backpl ane Top of Backpl ane chassi s f i t s st andar d 19" Sl ot t ed Cl earance for 1/ 4" Scr ew

( 48. 3cm) r ack hol e spaci ng. ( 2 pl aces)

Cl earance for

1. 10 scr ew 22. 75"

( 4 pl aces) 57. 8cm

Fr o n t V i e w Fr o n t V i e w

14. 25" for Rack Mount i ng for Panel Mount i ng

36. 2cm

10. 25"

26. 0cm 13. 12"

5. 50" 33. 3cm

14. 0cm 2. 62"

6. 7cm

Mi ni mum cl ear ance 5. 25" ( 13. 3cm), t o ot her equi pment & cabi net f l oorMi ni mum cl earance 5. 25" (13. 3cm), t o ot her equi pment & cabi net f l oor

1. 50"

3. 8cm

Dimensions and Clearances for Rack and Panel Mounting

30 31.5" 31.5" 31.5" (80 cm) (80 cm) (80 cm)

(80.0cm)31.5" Field Power Supply DC Distribution Panel A/C Distribution Panel Analog Input/

Digital Input External Termination Panel

(11.4 cm x4.5" x 10" Tr i c on 25.4 cm)

Expansion Chassis

(220 cm)86.0"

1.75" Baffle (4.45 cm) minimum

Tr i con Main Chassis Digital Output 16-point Tricon Termination External Chassis Panel (11.4 cm x4.5" x 5.0"

12.7 cm)

5.25" (13.3 cm) minimum

5.25" (13.3 cm) 5.25" 5.25" 4.0" minimum (13.3 cm) (13.3 cm) (10.2 cm) minimum minimum minimum FRONT VIEW SIDE VIEW REAR VIEW

Typical Dimensions and Clearances for Chassis Installation with External Terminations NOTE This drawing shows a typical set-up for external termination panelsother set-ups are possible.

Please contact the Invensys Global Customer Support (GCS) center for details.

Clearances Invensys recommends that you leave a mi nimum of 5.25 inches (13.3 centimeters) of space between the enclosure panels and the bottom screen, sides, and front of each chassis, and a mini mum of 5.25 inches (13.3 centime ters) of space between the top screen of each chassis and an y obstructions to airflow.

Mounting Tricon Chassis in Enclosures Invensys will mount Tricon chassis in any of the industry-standard enclosures listed below. (Please contact Invensys regarding other enclosures, available for additional engineering and doc umentation charges.) See page 14 for a photograph of Tricon chassis and terminations mounted in a sample enclosure.

Enclosures Typically Supported by Invensys*

Ty p e Width Depth Height Rittal NEMA 12 31.5 inches (800 mm) 31.5 inches (800 mm) 86.0 inches (2,200 mm) 31.5 inches (800 mm) 31.5 inches (800 mm) 78.0 inches (2,000 mm)

MarkHon NEMA 1 31.5 inches (800 mm) 31.5 inches (800 mm) 85.0 inches (2,160 mm)

• Other sizes are available. Please contact Invensys for more information.

31 Product Specifications

Power Modules

• A module is missing from the use the Model 8311 24 VDC Power Each Tricon chassis is equipped with system Module along with the ATEX-certified two Power Moduleseither one is

• The hardware configuration 24 VDC power supply from Phoenix fully capable of running the Tricon conflicts with the control programs Contact (part number: QUINT-PS-100-controller at full load and rated temper-logical configuration 240AC/24DC/10/EX).

ature. Each Power Module can be

• A module fails replaced online. The Power Modules,

• A Main Processor detects a system Front Panel of Power Module:

located on the left side of the chassis, fault (located on lower left side of chassis) convert line power to DC power appro-

• Primary power to a Power Module priate for all Tricon modules. Terminal fails strips for system grounding, incoming 120 VAC/DC power and hard-wired alarms are

• A Power Module has a Low 5A 1 47-63Hz 3 WIRE/5A 3 WIRE located on the lower left corner of the Battery or Over Temperature PASS backplane. Incoming power should be warning FAIL

ALARM rated for a minimum of 240 watts per WARNING: Do not use the Model TEMP power supply. 8312 Power Module in Tricon systems BATT LOW The Power Module alarm contacts are that are located in hazardous locations actuated when: and must meet ATEX requirements. If you have 230 V line voltage and your system must meet ATEX requirements,

Power Module Specifications POWER MODULE MODEL 8310 Isolation >1,000 VAC or 1,500 VDC, Input to Output Input Terminations Protected by safety cover Accepts three 12-gauge wires (3.310mm2): neutral, hot, and protective earth (chassis ground) Terminal Strip for Power Module:

Over-Temp. Sensor Temperature warning monitortrips when internal temp. is (located on backplane above the Power Module) greater than 181° F (83° C); this typically occurs at ambient temperature 140° F (60° C) or higher L Alarm Contacts Normally open, normally closed and common N Each contact supports 120 VAC @ 1 amp 1 NO Accepts 12-gauge (3.310mm2) wire C NC Protected by safety cover L Input Power Required 240 watts minimum per Power Module N Output Power 175 watts at 140° F (60° C) 2 NO Output Voltage 6.5 VDC, +/-1% under all operating conditions RC C NC Output Current 27 amps maximum at 140° F (60° C) ambient

Power Module Model 8310 8311 8312 Chassis Type Main/Expansion/RXM Main/Expansion/RXM Main/Expansion/RXM Nominal Voltage 120 VAC/VDC 24 VDC 230 VAC Input VAC @ 47-63 Hz 85-140 n/a 185-285 Input VDC 95-180 20.4-28.8 n/a Fuse Rating and Type 5 amps, time-delay 15 amps, time-delay 2.5 amps, time-delay Output Hold Time 20 ms minimum 2.8 ms minimum 20 ms minimum (nominal to 0 volts)

Diagnostic Indicators PASS, FAULT, ALARM, TEMP, PASS, FAULT, ALARM, TEMP, PASS, FAULT, ALARM, TEMP, BAT LOW BAT LOW BAT LOW

32 Main Processor Modules If multiple Tricon systems are

• Test all basic processor and floating-Model 3008 Main Processors (MP) are connected by means of NCMs, the time point instructions and operating available for Tricon v9.6 and later synchronization capability ensures a modes systems. For detailed specifications, consistent time base for effective SOE

• Validate user memory by means of see the Planning and Installation Guide time-stamping. See page 78 for more the TriBus hardware-voting for Tricon Systems. information. circuitry Three MPs must be installed in the Diagnostics

• Verify the shared memory interface Main Chassis of ev ery Tricon system. Extensive diagnostics validate the with each I/O communication Each MP independently communicates health of each MP, I/O module and processor and channel with its I/O subsystem and executes the communication channel. Transient

• Verify handshake and interrupt user-written control program. faults are recorded and masked by the signals between the CPU, each I/O Sequence of Events (SOE) hardware majority-voting circuit. communication processor and and Time Synchronization Persistent faults are diagnosed and the channel errant module is hot-replaced.

• Check each I/O communication During each scan, the MPs inspect MP diagnostics perform these tasks: processor and channel designated discrete variables for state microprocessor, ROM, shared changes known as events. When an

• Verify fixed-program memory and memory access and loopback of RS-event occurs, the MPs save the current static RAM 485 transceivers variable state and time stamp in the buffer of an SOE block.

• Verify the TriClock and TriBus interfaces Physical Description of Model 3008 Main Processors

Feature Description Tricon Communication Microprocessor Motorola MPC860, 32 bit, 50 MHz Module Memory

• 16 MB DRAM (non-battery backed-up)The Tricon Communication Module

• 32 KB SRAM, battery backed-up (TCM), which is compatible with only Tricon v10.0 and later systems, allows

• 6 MB Flash PROM the Tricon controller to communicate Tribus Communication Rate

• 25 megabits per secondwith the TriStation 1131 software, other

• 32-bit CRC protected Tricon, Trident', or Tri-GP control-

• 32-bit DMA, fully isolated lers, Modbus master and slave devices, I/O Bus and Communication Bus

• Motorola MPC860 and external hosts over Ethernet Processors networks.

• 32 bit

• 50 MHz Each TCM contains four serial ports, two network ports, and one debug port (for Invensys use).

Indicators on Main Processors Each serial port is uniquely addressed PASS Module has passed self-diagnostic testsand can be configur ed as a Modbus master or slave. Seri al Port #1 supports FAULT Module has a fault and should be replacedeither the Modbus or the Trimble GPS ACTIVE Module is executing the user-written control programinterface. Serial Port #4 supports either MAINT1 Maintenance indicator 1 the Modbus or the TriStation interface.

MAINT2 Maintenance indicator 2 Each TCM supports an aggregate data rate of 460.8 kilobits per second, for all COM TX Transmitting data across COMM bus four serial ports.

COM RX Receiving data from COMM bus Any standard Modbus device can I/O TX Transmitting data across I/O buscommunicate with the Tricon controller I/O RX Receiving data from I/O busthrough the TCM, provided that aliases are assigned to the Tricon variables.

33 Product Specifications

Alias numbers must also be used when supports the Peer-to-Peer (UDP/IP) and host computers access the Tricon Peer-to-Peer Time Synchronization controller through other communica-protocols.

PASS tion modules. See Communication FAULT On TCM Models 4353 and 4354, NET 2 ACTIVE Capabilities on page 67 for more information. supports only the embedded OPC

FIRM server, TriStation, and SNTP protocols, TCM Models 4353 and 4354 have an while NET 1 supports all of the listed NET 1 LINK embedded OPC server on NET 2, protocols except the embedded OPC NET 1 TX RX which allows up to 10 OPC clients to server.

(Copper or Fiber Ethernet) subscribe to data collected by the OPC A single Tricon system supports a Server. The embedded OPC Server maximum of four TCMs, which must supports the Data Access 2.05 standard NET 2 reside in two logical slots. Different LINK and the Alarms and Events 1.10 stan-TX RX TCM Models cannot be mixed in one NET 2 dard. logical slot. Each Tricon system (Copper or Fiber Ethernet)

Each TCM contains two network supports a total of 32 Modbus masters or portsNET 1 and NET 2. Models slavesthis total includes network and 4351A, 4351B, and 4353 have two serial ports. The hot-spare feature is not

SERIAL 1 copper Ethernet (802.3) ports and available for the TCM, though you can TX RX Serial Port #1 Models 4352A, 4352B, and 4354 have replace a faulty TCM while the for GPS or two fiber-optic Ethernet ports. controller is online.

Modbus interface On TCM Models 4351A, 4351B, 4352A, and 4352B, NET 1 and NET 2 support the TCP/IP, Modbus TCP/IP SERIAL 2 TX RX Slave/Master, TSAA, TriStation, Serial Port #2 SNTP, and Jet Direct (for network for Modbus interface printing) protocols. NET 1 also

TCM Specifications

SERIAL 3 TX RX Model Number 4351A, 4351B, 4352A, 4352B, 4353, 4354 Serial Port #3 Serial ports 4, RS-232/RS-485 ports, DB-9 connectors for Modbus interface Network ports 2, 10/100BaseT Ethernet ports, RJ-45 connectors (Models 4351A, 4351B, 4353) 2, fiber-optic mode Ethernet ports, MT-RJ connectors with 62.5/125 um fiber cables (Models 4352A, 4352B, 4354)

SERIAL 4 Port isolation 500 VDC TX RX Serial Port #4 Protocols TriStation, Modbus, TCP/IP, ICMP, SNTP, TSAA (with support for IP for TriStation 1131 or Multicast), Trimble GPS, Embedded OPC Server (Models 4353 and Modbus interface 4354), Peer-to-Peer (UDP/IP), Peer-to-Peer Time Synchronization, Jet Direct (network printing)

Modbus functions 01 Read Coil Status 06 Modify Register Content supported 02 Read Input Status 07 Read Exception Status

DEBUG 03 Read Holding Registers 08 Loopback Diagnostic Test Debug Port 04 Read Input Registers 15 Force Multiple Coils for Invensys use 05 Modify Coil Status 16 Preset Multiple Registers Communication Copper Ethernet ports: 10/100 Mbps (Model 4353 supports only 100 speed Mbps)

TCM Fiber Ethernet ports: 100 Mbps 435x Serial ports: up to 115.2 Kbps per port Status Indicators PASS, FAULT, ACTIVE, FIRM LINK 1 per network port, TX (Transmit) 1 per port, RX (Receive) 1 per port

34 Enhanced Intelligent Modbus or TriStation interface. Modbus Communication Module communication can be performed in either The Model 4119A Enhanced Intelligent RTU or ASCII mode. The parallel port Communication Module (EICM) provides a Centronics interface to a allows the Tricon controller to commu-printer.

nicate with Modbus masters and slaves, Each EICM supports an aggregate data the TriStation 1131 software, and rate of 57.6 kilobits per second (for all printers. four serial ports).

For Modbus connections, the EICM Programs for the Tricon controller use user can select the RS-232 point-to-variable names as identifiers but Modbus point interface for one master and one devices use numeric addresses called slave, or the RS-485 interface for one aliases. Therefore an alias must be master and up to 32 slaves. The RS-485 assigned to each Tricon variable name that network trunk can be one or two will be read by or written to a Modbus twisted-pair wires up to a maximum of device. An alias is a five-digit number 4,000 feet (1,200 meters). which represents the Modbus message Each EICM contains four serial ports type and the address of the variable in the and one parallel port which can operate Tricon controller. An alias number is concurrently. Each serial port can be assigned in the TriStation 1131 software.

configured as a Modbus master with up Any standard Modbus device can commu-to seven Modbus masters per Tricon nicate with the Tricon controller through chassis. A single Tricon system the EICM, provided that aliases are supports a maximum of two EICMs, assigned to the Tricon variables. Alias which must reside in one logical slot. numbers must also be used when host (The hot-spare feature is not available computers access the Tricon controller for the EICM, though you can replace a through other communication modules, faulty EICM while the controller is such as the NCM. See Communication online.) Each serial port is uniquely Capabilities on page 67 for more infor-addressed and supports either the mation.

EICM Specifications

Model Number 4119A, Isolated Serial ports 4 ports RS-232, RS-422 or RS-485 Parallel ports 1, Centronics, isolated Port isolation 500 VDC Protocol TriStation, Modbus Modbus functions supported 01 Read Coil Status 02 Read Input Status 03 Read Holding Registers 04 Read Input Registers 05 Modify Coil Status 06 Modify Register Content 07 Read Exception Status 08 Loopback Diagnostic Test 15 Force Multiple Coils 16 Preset Multiple Registers Communication speed 1200, 2400, 9600, or 19,200 Baud Diagnostic Indicators Pass, FaULT, Active TX (Transmit) 1 per port RX (Receive) 1 per port

35 Product Specifications

Safety Manager Module

• Reads Tricon controller diagnostics The Model 4409 Safety Manager for display by the DCS

PASS Module (SMM) acts as an interface

• Write protection to lock out changes

FA U LT between a Tricon controller and a to the Tricon controller from all

ACT I V E Honeywell Universal Control Network TDC-3000 sources (UCN), one of three principal networks

• Time synchronization from the DCS LOW of the TDC-3000 Distributed Control BATT master clock SPARE System. Appearing to the Honeywell RDY system as a safety node on the UCN, the

• Peer-to-Peer communication for

UCN A SMM communicates process informa-plants with many Tricon controllers, tion at full network data rates for use UCN B each containing an SMMthe DCS anywhere on the TDC-3000. The SMM can use shared data to alert XMI T transmits Tricon aliased data (including downstream Tricon controllers of Four - char act er A system variables) and diagnostic infor-significant process changes al phanumer i c di spl ay f or 0 mation to operator workstations in SMM di agnost i c codes 7 display formats that are familiar to

• Sequence of Eventstransmits

STATUS Honeywell operators. Tricon controller event data to Universal Stations for display or The SMM makes the following func-History Modules for recording, to UCN A tions available to the TDC-3000: help determine the cause of plant

• Handles critical I/O points and trips and increase process up-time passes results to the DCS

• Hot-spare capability for F-Connect or s uninterrupted communication with f or Redundant

• Processes Tricon controller alarms UCN Po r t s and propagates them to user-defined Honeywell networks

UCN B DCS destinations (consoles, printers, etc.)

• Reads/writes aliased data to satisfy DCS requests

SMM Specifications

Model Number 4409 UCN ports 2 isolated (AC coupled)

UCN data rate 5 MBytes per second DB-25P Connect or Status indicators PASS (Module Status) for RS-232 Debug Por t FAULT (Module Status)

( f or Tr i conex &

Honeywel l use onl y) ACTIVE (Module Status)

LOW BATT (Low Battery)

S MM SPARE RDY (Hot Spare Ready) 4409 UCN A (UCN Port A Active)

UCN B (UCN Port B Active)

XMIT (SMM Transmitting)

STATUS (Module Node and Diagnostic Info.)

Power Module load < 20 watts Isolation 500 VDC

36 Network Communication software, SOE, OPC Server, and DDE Module Server or user-written applications. See With a Model 4329 Network Commu-Communication Capabilities on PA S S nication Module (NCM) installed, the page 67 for more information about FAU LT Tricon controller can communicate Triconex protocols and applications. ACT I V E with other Tricon controllers and with Two NCMs can reside in one logical external hosts over Ethernet (802.3) slot of the Tricon chassis, but they networks. The NCM supports a number function independently, not as hot-of Triconex proprietary protocols and spare modules. External hosts can read NET 1 applications as well as user-written or write data only to Tricon variables to applications, including those that use which Alias numbers have been BNC Co nn e c t o r f o r the TSAA protocol. assigned. (See Enhanced Intelligent Thi n I EEE 802. 3 Cabl e The NCMG module has the same func-Communication Module on page 35 TX tionality as the NCM, as well as the for more information about Aliases.) RX Por t #1 f or Peer - t o-Peer &

ability to synchronize time based on a The NCM is compatible with Ethernet Ti me Synchr oni zat i on Onl y GPS system. For more information, see (IEEE 802.3 electrical interface) and 15-Pi n " D" Connect or the Communication Guide for Tricon operates at 10 megabits per second. The f or Sel f - power ed Systems. NCM connects with external host Ext er nal Tr anscei ver The NCM provides two BNC computers by means of coaxial cable ( r eser ved) connectors as ports: NET 1 supports (RG58) at typical distances up to 607 Peer-to-Peer and Time Synchronization feet (185 meters). Distances up to 2.5 protocols for safety networks miles (4,000 meters) are possible using NET 2 comprised of Tricon controllers only. repeaters and standard (thick-net or NET 2 supports open networking to fiber-optic) cabling. BNC Co nn e c t o r f o r Thi n I EEE 802. 3 Cabl e external systems using Triconex The Main Processors typically refresh applications such as the TriStation 1131 data on the NCM once per scan. TX RX Por t #2 or TSAA, f Ext er nal Host Appl i cat i ons NCM Specifications ( i ncl udi ng TRI STATI ON)

& TCP-I P/ UDP-I P Model Number 4329, 4329G 15-Pi n " D" Connect or Ethernet (802.3) ports 2, BNC connectors, RG58 50-ohm thin cablef or Sel f - power ed External Transceiver Ports 2, 15-pin D-connectors Ext er nal Tr anscei ver Serial port 1, RS-232 compatible( r eser ved)

Port Isolation 500 VDC Protocol TSAACOMM (TCP(UDP)/IP/802.3) TX RX Functions supported TRICON_DATA (Frame Type 1)

TRICON_DATA_REQ (Frame Type 2) RS-232 Ser i al Por t WRITE_TRICON_DATA (Frame Type 3) Reser ved f or f ut ur e use WRITE_TRICON_DATA_RSP (Frame Type 4)

READ_TRICON_CLOCK (Frame Type 5)

READ_TRICON_CLOCK_RSP (Frame Type 6)

SET_TRICON_CLOCK (Frame Type 7)

SET_TRICON_CLOCK_RSP (Frame Type 8) NCM READ_TRICON_DATA (Frame Type 11) 4329 READ_TRICON_RSP (Frame Type 12)

Communication speed 10 megabits per second (for Ethernet ports)

Status indicators PASS, FAULT, ACTIVE TX (Transmit) 1 per port RX (Receive) 1 per port 37 Product Specifications

Advanced Communication

• Propagates Tricon controller alarms Module (ACM) as I/A Series system messages

PA S S The Model 4609 Advanced Communi-

• Reads/writes aliased data to satisfy

FAU LT cation Module (ACM) acts as an inter-I/A Series requests ACT I V E I / A SERI ES face between a Tricon controller and a

• Time synchronization from the I/A Interface to NODEBUS Foxboro Intelligent Automation (I/A) Series environment I/A Series Nodebus ONL I NE Series system, appearing to the

SBRDY

• Reads Tricon controller diagnostics Foxboro system as a safety node on the for display by the I/A Series TX RX I/A Series Nodebus. The ACM communicates process information at workstation BNC Conne ct or

• Write protection to lock out changes Re s e r ve d full network data rates for use NET 1 anywhere on the I/A Series system, to the Tricon controller from all I/A transmitting all Tricon aliased data Series sources AUI Connect or (including system variables and

• Hot-spare capability for t o DNBI No d e bu s Da t a system aliases) a nd diagnostic infor-uninterrupted communication with mation to operator workstations in the I/A Series Nodebus

DNBI display formats that are familiar to TX RX Foxboro operators. The ACM makes The ACM also suppor ts the following the following functions available to Triconex protocols and applications on RS-423 Ser i al Por t the I/A Series: external host PCs connected to a sepa-t o DNBI No d e bu s Co n t r o l rate BNC port (labeled NET 2):

• Handles critical I/O points and

• TriStation protocol for the TriStation TriStation/TSAA Interface TS/ TSAA passes results to the I/A Series 1131 software

23456789 using the Object Management Node Addr ess Swi t ches NODE Database (OMDB)

• TSAA protocol for Triconex ADDRESS

23456789 applications

• Processes Tricon controller alarms

TX RX and propagates them to user-

• TSAA/TCP (UDP/IP) for user-NET2 BNC Connect or NE T 2 defined I/A Series destinations written applications on external Tr i St at i on, SOE and (consoles, printers, and so on) hosts and TSAA appl i cat i ons

2 TX RX ACM Specifications

RS-232/ 422 Ser i al Por t Model Number 4609 Re s e r v e d Nodebus Ports

1 TX RX BNC connector 1 for RG58 50-ohm thin cable (reserved) 15-pin D connector 1 for AUI cable to DNBI RS-232 Ser i al Por t 9-pin RS-423 connector 1 for Control Bus to DNBI Re s e r v e d NET 2 porta 1 BNC connector for RG58 50-ohm AC M Thin cable to Ethernet network 4609 9-pin serial ports RS-232/RS-485 protocol (reserved)

Port isolation 500 VDC (Ethernet and RS-232 ports)

Communication speeds BNC and 15-pin D connectors 10 megabits per second 9-pin Nodebus connector 2400 baud Status indicators Module status PASS, FAULT, ACTIVE Nodebus/standby activity ONLINE and SBRDY Port activity TX and RX1 each per port Power Module load 20 watts

a. The address for this port is set by the TS/TSAA Node Addresses switches.

38 Hiway Interface Module to communicate with the Tricon The Model 4509 Hiway Interface controller.

Module (HIM) acts as an interface The HIM allows redundant BNC between a Tricon controller and a connections directly to the Data Hiway Honeywell TDC-3000 control system and has the same functional capacity as by means of the Hiway Gateway and four extended Data Hiway Port (DHP)

Local Control Network (LCN). The addresses.

HIM can also interface with Honey-The HIM provides eight Hiway wells older TDC 2000 control system addresses, implemen ts the same slot by means of the Data Hiway. structure as the DHP, and typically The HIM enables higher-order devices refreshes all data in less than 0.5 on the LCN or Data Hiway, such as seconds. The hot-spare capability computers and operat or workstations, allows online replacem ent of a faulty module.

HIM Specifications

Model Number 4509 Data Hiway channels 2 isolated (AC coupled)

Poll response switches 2 per channel Baud rate 250 kilobits per second Status indicators PASS (Module Status)

FAULT (Module Status)

ACTIVE (Module Status)

ON LN (HIM Online)

H I/F (Hiway Interface)

CAL UP (Call-up Received)

CH A (Channel A Active)

CH B (Channel B Active)

XMIT (HIM Transmitting)

STD BY IN (Standby Module Inserted)

STD BY READY (Standby Module Ready)

Power Module load < 10 watts Isolation 500 VDC

39 Product Specifications

Remote Extender Module (RXM)

PA S S PA S S PA S S PA S S PA S S PA S S RXMs and chassis allow I/O modules to be located several kilometers from FAU LT FAU LT FAU LT FAU LT FA U LT FAU LT

the Main Chassis. RXM sets, consisting ACTI VE ACTI VE ACT I VE ACTI VE ACT I V E ACTI VE of three identical modules, serve as TX TX TX TX TX TX repeaters and extenders of the Tricon (Receive) (Receive)

I/O bus and provide ground loop isola-tion. A primary RXM set supports three RX1 RX1 RX1 RX RX RX To R e m o t e remote locations by connecting to three Locat i on #1 A B C remote RXM sets housed in a remote (Transmit) (Transmit) chassis. See System Configuration on page 11 regarding configurations that use RXMs.

RXM sets are available for fiber-optic ( Recei ve) cables with a communication rate of RX2 RX2 RX2 375 kilobits per second. These sets To R e m o t e Locat i on #2 provide maximum immunity against (Transmit) electro-static and electro-magnetic interference, and support configura-tions with optical modems and fiber-optic point-to-point cabling. Remote sites can be located as far as 7.5 miles (Receive)

(12 kilometers) from the primary site. RX3 RX3 RX3 To R e m o t e The figure at right shows uni-direc-Locat i on #3 tional cabling for three channels of a (Transmit) remote location. For each channel, one cable carries data transmitted from the primary RXM to the remote RXM, and RXM RXM RXM RXM RXM RXM the other cable carries data received by 42x0 42x0 42x0 42x1 42x1 42x1 the primary RXM from the remote RXM. A pair of modules must be wired Channel A Channel B Channel C Channel A Channel B Channel C for each of the three channels, amounting to a total of six cables for Pr i mar y RXM Set Re mo t e RXM Se t Locat ed Near Mai n Chassi s at Remot e Locat i on #1 each remote location. Sample Wiring for One Remote Location

NOTE: The selection and installation of fiber-optic cabling requires specialized knowledge, training and tools. Invensys recommends hiring a fiber-optic specialist to handle these tasks.

RXM Specifications

RXM Model 4200-3 4201-3 4210-3 4211-3 RXM Chassis Location Primary Remote Primary Remote Cable Type Multi-mode Multi-mode Single-mode Single-mode Cable Length Limit 1.2 miles (2 kilometers) 1.2 miles (2 kilometers) 7.5 miles (12 kilometers) 7.5 miles (12 kilometers)

Connectors 6/remote site 6 6/remote site 6 Remote Sites Supported 3 n/a 3 n/a Modem Ports Fiber Optic with ST Fiber Optic with ST Fiber Optic with ST Fiber Optic with ST connectors connectors connectors connectors Diagnostic Indicators PASS, FAIL, ACTIVE, PASS, FAIL, ACTIVE, PASS, FAIL, ACTIVE, PASS, FAIL, ACTIVE, TX, RX1, RX2, RX3 TX, RX1, RX2, RX3 TX, RX1, RX2, RX3 TX, RX1, RX2, RX3

40 TMR Digital Input Modules All TMR Digital Input Modules sustain de-energize-to-trip capability, the Each TMR Digital Input (DI) module complete, ongoing diagnostics for each ability to detect Off points is an impor-has three isolated input channels which channel. Failure of any diagnostic on tant feature. To test for stuck-On inputs, independently process all data input to any channel activates the module Fault a switch within the input circuitry is the module. A microprocessor on each indicator, which in turn activates the closed to allow a zero input (Off) to be channel scans each input point, chassis alarm signal. The module Fault read by the optical isolation circuitry.

compiles data, and transmits it to the indicator points to a channel fault, not a The last data reading is frozen in the I/O Main Processors upon demand. Then module failure. The module is guaran-communication processor while the test input data is voted at the Main Proces-teed to operate properly in the presence is running.

sors just prior to processing to ensure of a single fault and may continue to All TMR Digital Input Modules the highest integrity. All critical signal operate properly with certain kinds of support hot-spare capability, and paths are 100 percent triplicated for multiple faults. require a separate external termination guaranteed safety and maximum avail-Models 3502E, 3503E, and 3505E can panel (ETP) with a cable interface to ability. Each channe l conditions signals self-test to detect stuck-On conditions the Tricon controller backplane. Each independently and provides optical where the circuitry cannot tell whether module is mechanically keyed to isolation between the field and the a point has gone to the Off state. Since prevent improper installation in a Tricon controller. most safety systems are set up with a configured chassis.

32-Point Digital Input Module Specifications

Model Number 3501E/3501T 3502E 3503E 3505E Type TMR TMR with Self-Test TMR with Self-Test TMR, Low Threshold Voltage 115 VAC/VDC 48 VAC/VDC 24 VAC/VDC 24 VDC Points 32, non-commoned,32, commoned32, commoned32, commoned isolated in groups of 8 in groups of 8 in groups of 8 AC Range/DC Range 90-155 VAC/VDC 35-95 VAC/VDC 20-42.5 VAC/VDC 20-42.5 VDC Frequency Range DC or 47-63 Hz DC or 47-63 Hz DC or 47-63 Hz n/a Maximum Voltage 155 VAC/VDC 95 VAC/VDC 42.5 VAC/VDC 42.5 VDC Switching Level Off to Ona < 86 VAC/VDC < 32 VAC/VDC < 18 VAC/VDC < 12 VDC On to Offb > 28 VAC/VDC > 11 VAC/VDC > 6 VAC/VDC > 4 VDC Nominal Turn-On 6-9 mA 6-9 mA 6-9 mA 3 mA to 5 mA Typical Hysteresis 32 VAC/VDC 7 VAC/VDC 4 VAC/VDC 2 VDC Input Delay OFF to ON/ON to OFF < 8 ms/< 15 ms < 8 ms/< 15 ms < 8 ms/< 15 ms < 8 ms/< 15 ms Point Isolation 1,500 VDC/ 2500 VDCc 1,500 VDC 1,500 VDC 1,500 VDC Nominal Input Impedance > 8.5 K > 2.9 K > 1.25 K > 1.25 K Nominal Field Power Load Per On point 1.5 watts 1.0 watts 0.5 watts 0.5 watts

@ max. field voltage 2.9 watts 3.2 watts 1.5 watts 1.5 watts Diagnostic Indicators Input Status 1 per point 1 per point 1 per point 1 per point Module Status PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE Stuck Test n/a On On On Color Code Red Dark Red Dark Red Dark Red

a. Off to On transition is guaranteed at or above this level but it might occur at a lower voltage, depending on the modules hysteresis.

b. On to Off transition is guaranteed at or below this level but it might occur at a hi gher voltage, depending on the modules hysteresis.

c. For 3501T.

41 Product Specifications

64-Point Digital Input may operate properly with certain kinds The Model 3564 Single Digital Input Modules of multiple faults. Module is optimized for safety-critical Each 64-point Digital Input (DI) All Digital Input Modules support hot-applications where low cost is more module has three isolated channels spare modules and require a separate important than maximum availability.

which independently process all data external termination panel (ETP) with a On single modules, only those portions input to the module. A microprocessor cable interface to the Tricon controller of the signal path which are required to on each channel scans each input point, backplane. Each module is ensure safe operat ion are triplicated.

compiles data and transmits it to the mechanically keyed to prevent Special self-test circuitry detects all Main Processors on demand. Then improper installation in a chassis. stuck-On and stuck-Off fault conditions input data is voted at the Main Proces-in less than half a second. If a single sors just prior to processing to ensure The Model 3504E High-Density module detects an input fault, it reports the highest integrity. Digital Input Module continuously that point as Off, which may cause a verifies the ability of the Tricon glitch during switch-over to a hot-spare All Digital Input Modules sustain controller to detect transitions to the module.

complete, ongoing diagnostics for each opposite state. On this TMR module, all channel. A failure on any channel acti-critical signal paths are 100 percent vates the Fault indicator which in turn triplicated for guaranteed safety and activates the chassis alarm. A TMR maximum availability. Each channel module is guaranteed to operate prop-conditions signals independently erly in the presence of a single fault and between the field and the Tricon controller.

64-Point Digital Input Module Specifications

Model Number 3564 3504E Type Single, DI TMR, DI Voltage 24 VDC 24 or 48 VDCa Points 64, commoned 64, commoned, DC coupled DC Range 15-30 VDC 20-72 VDC Maximum Voltage 36 VDC 72 VDC Switching Level 24 V 48 V OFF to ONb > 15 VDC >18 VDC >32 VDC ON to OFFc < 6 VDC < 6 VDC <11 VDC Nominal Turn-On 2-3 mA negligible Typical Hysteresis 4 VDC 4 VDC/7 VDC Input Delay Off to On/On to Off < 2 ms/< 2 ms < 10 ms/< 10 ms Minimum Point Isolation 1,500 VDC n/a Nominal Input Impedance > 3.0 K > 30 K Nominal Field Power Load Per On point 0.2 watts negligible

@ maximum field voltage 0.5 watts negligible Diagnostic Indicators Input Status 1 per point 1 per point Module Status PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE Stuck Test On and Off On and Off Color Code Dark Red Dark Red

a. The voltage is selected using the TriStation 1131 software.

b. Off to On transition is guaranteed at or above this level but it might occur at a lower voltage, depending on the modules hysteresis.

c. On to Off transition is guaranteed at or below this level but it might occur at a higher voltage, depending on the modules hysteresis.

42 Pulse Input Module Each module provides complete cated modules for us e on non-critical The Model 3511 Pulse Input (PI) ongoing diagnostics on each channel. points which are not compatible with Module provides eight very sensitive, Failure of any diagnostic on any high-side solid-state output switches.

high-frequency inputs. It is optimized channel activates the Fault indicator, An example is inte rfacing with annun-for use with non-amplified magnetic which in turn activates the chassis ciator panels. The Relay Output module speed sensors common on rotating alarm signal. The Fault indicator receives output signals from the Main equipment such as turbines or compres-merely indicates a channel fault, not a Processors on each of three channels.

sors. The module senses voltage transi-module failure. The module is guaran-The three sets of signals are then voted, tions from magnetic transducer input teed to operate properly in the presence and the voted data is used to drive the devices, accumulating them during a of a single fault and may continue to 32 individual relays.

selected window of time (rate measure-operate properly with certain kinds of Each output has a loopback circuit ment). The resulting count is used to multiple faults. The Pulse Input Module which verifies the operation of each generate a frequency or RPM which is supports hot-spare modules. relay switch independently of the pres-transmitted to the Main Processors. The WARNING: The PI module does not ence of a load, while ongoing diagnos-pulse count is measured to 1 micro-provide a totalization capabilityit is tics test the operational status of the second resolution. optimized for measuring the speed of module. Failure of any diagnostic acti-The PI module includes three isolated rotation equipment. For pulse totaliza-vates the Fault indicator, which in turn input channels. Each input channel tion, see Model 3515 on page 44. activates the chassis alarm.

independently processes all data input The Relay Output module comes with to the module and passes the data to the Relay Output Module normally open (NO) contacts. It Main Processors, which vote on the supports hot-spare modules and data to ensure the highest integrity. The Model 3636R and 3636T Relay requires a separate external termination Output (RO) Modules are non-tripli-panel (ETP) with a cable interface to the Tricon controller backplane.

Pulse Input Module Specifications RO Module Specifications

Model Number 3511 Model Number 3636R/T Type TMR, PIType Non-triplicated, RO Input Signals 8, non-commonedPoints 32, non-commoned Resolution 16 bitsVoltage Range 125 VAC/VDC, Accuracy 1,000 Hz to 20,000 Hz, +/- 0.01%maximum Input Characteristics (AC coupled, balanced differential) Current Load 2A, maximum Update Rate 25 ms, typicalMinimum 10 mA, 5 VDC Permissible Load Impedance (load) > 8 KW, 20 KW typicalSwitching Power, 2,000 V A, 150 watts Common Mode Range -100 VDC to +100 VDC peak-to-peakResistive maximum Normal Mode Range 1.5 V to 200 V peak-to-peak Point Isolation 1,500 VDC Overrange Protection +/-150 VDC, continuous 1,900 VDCa Hysteresis 150 millivolts, typicalFuses 1 per output (2.5A fast-acting)

Wave Shape Sine, square, pulse, etc.Diagnostic Indicators Duty Cycle 10% to 90% Output Status1 per point Frequency 20 Hz to 20,000 Hz Module StatusPASS, FAULT, Current Range 0-20 mA (250-ohm shunt)ACTIVE Diagnostic Indicators (ON=true) Output Contact Normally Open Input Status 1 per pointColor Code Silver Blue Module Status PASS, FAULT, ACTIVEa. For 3636T.

Color Light Purple 43 Product Specifications

Pulse Totalizer Input Module The PTI module has three isolated input chassis alarm. The Fault indicator The Model 3515 Pulse Totalizer Input channels. Each input channel indepen-points to a channel fault, not a module (PTI) Module provides 32 individual dently processes all input data and failure. The PTI module is guaranteed 31-bit counters that operate indepen-passes it to the Main Processors, where to operate properly in the presence of a dently. The counters are used with it is voted before processing to ensure single fault, and may continue to active-flow sensors or per-unit sensors the highest integrity. operate with certain kinds of multiple to measure a quantity (count) which is Each PTI module provides complete faults.

transmitted to the Main Processors. At ongoing diagnostics on each channel, The PTI module can operate with or the time specified by the control including channel-to-channel count without a hot-spare module. If you use program, the Main Processors clear a comparison. Failure of any diagnostic a hot-spare module, it re-educates all single counter or all counters. on any channel activates the Fault indi-counter values from the active module.

cator, which in turn activates the

Pulse Totalizer Input Module Specifications

Model Number 3515 Type TMR, Pulse Totalizer Number of Input Signals 32, non-commoned Input Frequency Range 0 Hz to 1 KHz Minimum Input Pulse Width 300 microseconds Accuracy Active Module +/- 2 counts Hot-spare module (maximum error 1-10 >= 100 Hz counts during hot replacement) 0-1 <= 100 Hz Maximum Count 2,147,483,647 (231 - 1)

Counter Overflow (worst case @ 1 KHz) 596 Hours (24 days)

Count Overflow Indication Count goes to negative integer Count Resets Individual reset per counter Recommended Input Voltage Range 42.5 VDC absolute maximum Count Up Switching Level Rising edge (Off to On)

Switching Voltages Off to On 15 VDC typical, 18 VDC worst case On to Off 8 VDC typical, 6 VDC worst case Typical Hysteresis 4 VDC Normal Turn-on Current 6mA to 9mA Count Input Delay < 15 ms Point Isolation (opto-isolated) 1,500 VDC minimum Diagnostic Indicators On or Off State 1 per point Module Status PASS, FAULT, ACTIVE Logic Power < 10 watts Nominal Field Power Load 0.5 watts per On point 1.5 watts @ maximum field voltage Color Code Purple

44 TMR Digital Output Modules exist. Failure of the detected field All TMR Digital Output Modules Each TMR Digital Output (DO) voltage to match the commanded state support hot-spare capability, and module receives out put signals from of the output point activates the require a separate external termination the Main Processors on each of three LOAD/FUSE alarm indicator. panel (ETP) with a cable interface to channels. Each set of three signals is In addition, ongoing diagnostics are the Tricon controller backplane. Each then voted by special quadruplicated performed on each channel and circuit module is mechanically keyed to output circuitry on the module. The of a TMR Digital Output Module. prevent improper installation in a circuitry produces one voted output Failure of any diagnostic on any configured chassis.

signal and passes it to the field termina-channel activates the Fault indicator, Digital outputs are designed to source tion. The quadruplicated voter circuitry which in turn activates the chassis the current to field devices, so field provides multiple redundancy for all alarm signal. The Fault indicator power must be wired to each output critical signal paths, guaranteeing merely indicates a channel fault, not a point on the field termination.

safety and maximum availability. module failure. The module is guaran-Each TMR Digital Output Module has teed to operate properly in the presence a voltage-loopback circuit which veri-of a single fault and may continue to fies the operation of each output switch operate properly with certain kinds of independently of the presence of a load multiple faults.

and determines whether latent faults

16-Point Digital Output Module Specifications

Model Number 3601E/3601T 3603B/3603E/3603T 3607E 3604E Nominal Voltage 115 VAC 120 VDC 48 VDC 24 VDC Type TMR, DO TMR, DO TMR, DO TMR, DO Output Signals 16, non-commoned 16, commoned (3603E/T16, non-commoned 16, non-commoned 16, non-commoned (3603B Voltage Range 80-155 VAC 90-150 VDC 44-80 VDC 22-45 VDC Vo l t a g e D r o pa < 3V, typical < 1.5V, typical < 3V, typical < 4V, typical Frequency Range 47-63 Hz n/a n/a n/a Current Ratings, 2A per point 0.8A per point 1A per point 2A per point Maximum 12A surge/cycle 4A surge/10 ms 5A surge/10 ms 10A surge/10 ms Load Leakage 2 mA maximum @ 60 Hz 2 mA maximum 2 mA maximum 2 mA maximum Chassis Leakage 4 mA maximum @ 60 Hz n/a n/a n/a Fuses (on Field 1 per output, 1 per output, 1 per output, 1 per output, Termination) 3A fast-acting 1.0A fast-acting 1.25A fast-acting 2.5A fast-acting Point Isolation 1,500 VDC/ 2500 VDCb1,500 VDC/ 2500 VDCc 1,500 VDC 1,500 VDC Diagnostic Indicators On or Off state 1 per point 1 per point 1 per point 1 per point Module Status PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE Field Alarm LOAD/FUSE LOAD/FUSE LOAD/FUSE LOAD/FUSE Color Code Green Blue Light blue Dark blue

a. WARNING: The voltage drop may be significantly higher in some applications.

b. For 3601T.

c. For 3603T.

45 Product Specifications

16-Point Supervised and so that one voted output signal is passed

• Loss of power or blown fuse 32-Point Supervised/Non-to the field termination.

• Open or missing load Supervised Digital Output Each SDO module has voltage and

• A field short resulting in the load Modules current loopback circ uitry coupled with being energized in error Designed for the most critical control sophisticated online diagnostics that

• A shorted load in the de-energized programs, Supervised Digital Output verify the operation of each output state (SDO) modules meet the needs of switch, the field circuit and the pres-systems whose outputs remain in a ence of a load. This design provides Failure to detect field voltage on any single state for extended periods of time complete fault coverage without the output point energizes the power alarm (in some applicati ons, for years). An need to influence the output signal. indicator. Failure to detect the presence SDO module receives output signals The modules are called supervised of a load energizes the load alarm indi-from the Main Processors on each of because fault coverage is extended to cator.

three channels. Each set of three signals include potential field problems. In All SDO modules support hot-spare is then voted upon by a fully fault-other words, the field circuit is super-modules and require a separate external tolerant quadruplicated output switch vised by the SDO module so that the termination panel (ETP) with a cable whose elements are power transistors, following field faults can be detected: interface to the Tricon controller back-plane.

16-Point and 32-Point Supervised Digi tal Output Module Specifications

Model Number 3623/3623Ta 3624 3625/3625Ab Nominal Voltage 120 VDC 24 VDC 24 VDC Type TMR, Supervised DO TMR, Supervised DO TMR, Supervised/Non-Supervised DO Output Signals 16, commoned 16, commoned 32, commoned Voltage Range 90-150 VDC 16-30 VDC 16-32 VDC Maximum Voltage 160 VDC 36 VDC 36 VDC Voltage Drop < 1.5 VDC, typical < 1.5 VDC, typical < 2.8 VDC @ 1.7A, typical Power Module Load < 10 watts < 10 watts < 13 watts Current Ratings, Maximum 0.8A per point 0.7A per point 1.7A per point 4A surge per 10 ms 4.8A surge per 10 ms 7A surge per 10 ms Minimum Required Load 30 mA 30 mA 10 mA Load Leakage 4 mA maximum 4 mA maximum 4 mA maximum Fuses (on Field Termination) 1A fast-acting n/aself-protecting n/aself-protecting Point Isolation 1,500 VDC/ 2500 VDCc 1,500 VDC 1,500 VDC Diagnostic Indicators On or Off State 1 per point 1 per point 1 per point Module Status PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE PASS, FAULT, LOAD, ACTIVE Field Alarm POWER, LOAD (1 per point) POWER, LOAD (1 per point) LOAD (1 per point)

Color Code Steel blue Turquoise green Dark blue

a. CAUTION: Invensys highly recommends that you perform compatibility testing before selectin g the Model 3623T module for use in applications that have field wiring lengths over 328 feet (100 me ters), cable that is not twisted pair, or atypical loads such as smart devices, strobe lights, or klaxons.

b. CAUTION: Invensys highly recommends using a single set of redundant field power supplies for the 3625/3625A termination pane ls. For the 3625A module, if field power is supplied to the terminatio n panels using four independent power sources, the voltage from all power sources m ust be maintained within 5% of the highest voltage supplied.

c. For 3623T.

46 8-Point Supervised Digital sophisticated online diagnostics that

• A shorted load in the de-energized Output Modules verify the operation of each output state Designed for the most critical applica-switch, the field circuit and the pres-Failure to detect field voltage on any tions, Supervised Digital Output (SDO) ence of a load. This design provides output point energizes the power alarm modules meet the needs of systems complete fault coverage without the indicator. Failure to detect the presence whose outputs remain in a single state need to influence the output signal. of a load energizes the load alarm indi-for extended periods of time (in some The modules are called supervised cator. When an optional secondary applications, for years). An SDO because fault coverage is extended to power supply is used, shorted loads in module receives out put signals from include potential field problems. In the Off state can be detected. (This the Main Processors on each of three other words, the field circuit is super-feature is not provided on Model channels. Each set of three signals is vised by the SDO module so that the 3611E, an AC module.)

then voted upon by a fully fault-tolerant following field faults can be detected: All SDO modules support hot-spare quadruplicated output switch whose

• Loss of power or blown fuse capability, and they require separate elements are mechanical power relays, external termination panels (ETP) with so that one voted output signal is passed

• Open or missing load a cable interface to the Tricon controller to the field termination.

• A field short resulting in the load backplane.

Each SDO module has voltage and being energized in error current loopback circ uitry coupled with

8-Point Supervised Digital Ou tput Module Specifications

Model Number 3611E 3617E Nominal Voltage 115 VAC 48 VDC Type TMR, Supervised DO TMR, Supervised DO Points 8, commoned 8, commoned Voltage Range 90-155 VAC 36-72 VDC Frequency Range 47-63 Hz n/a Maximum Switching Power 2,000 VA (resistive) 150 W (resistive)

On State Voltage Dropa < 2V, typical < 2V, typical Current Ratings, Maximum 2A per point 1A per point 10A/AC cycle 5A/10 ms Minimum Required Load 50 mA 100 mA Voltage Range of Secondary Power Supply n/a 5.00 VDC

+/-.25 VDC Chassis Leakage 1mA max. @ 60 Hz n/a Load Leakage 4 mA max. 4 mA max.

Fuses (on Field Termination) 1 per output (2.5A fast-acting) 1 per output (1.25A fast-acting)

Point Isolation 1,500 VDC, min. 1,500 VDC, min.

Diagnostic Indicators Output Status POINT, PWR, LOAD, POINT, PWR, LOAD, Module Status PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE Color Code Deep green Mint green

a. WARNING: The voltage drop may be significantly higher in some applications.

47 Product Specifications

Dual Digital Output Module each output switch independently of the during switch-over to a hot-spare Dual Digital Output (DDO) modules presence of a load and determines module.

receive output signals from the Main whether latent faults exist. Failure of DDO modules support hot-spare capa-Processors along a si ngle parallel or the detected field vo ltage to match the bility, which allows online replacement series path, and applies a 2-out-of-3 commanded state of the output point of a faulty module. Each module is voting process individually to each activates the LOAD /FUSE alarm indi-mechanically keyed to prevent switch. The switches produce one cator. improper installation in a configured output signal which is then passed to In addition, ongoing diagnostics are chassis.

the field termination. While the quadru-performed on each channel and circuit DDO modules require a separate plicated output circuitry on TMR of a DDO module. Failure of any diag-external termination panel (ETP) with a modules provides multiple redundancy nostic on any channel activates the cable interface to th e Tricon controller for all critical signal paths, dual Fault indicator, which in turn activates backplane. Digital outputs are designed circuitry provides just enough redun-the chassis alarm signal. A dual module to source the current to field devices, so dancy to ensure safe operation. DDO operates properly in the presence of field power must be wired to each modules are optimized for those safety-most single faults and may operate output point on the field termination.

critical control programs where low properly with some kinds of multiple cost is more important than maximum faults, but stuck-Off faults are an availability. exception. If one of the output switches DDO modules have a voltage-loopback has a stuck-Off fault, the output goes to circuit which verifies the operation of the Off state and a glitch may occur

Dual Digital Output Module Specifications

Model Number 3664/3674 Nominal Voltage 24 VDC Type Dual DO, serial (recommended for de-energize-to-trip control programs)

Output Signals 32, commoned Voltage Range 16-30 VDC Maximum Voltage 36 VDC Voltage Drop < 1.5 VDC, typical Power Module Load < 10 watts Current Ratings, Maximum 2A per point 10A surge per 10 ms Load Leakage 2 mA maximum Fuses (on Field Termination) n/aself-protecting Point Isolation 1,500 VDC minimum Diagnostic Indicators On or Off State 1 per point Module Status PASS, FAULT, ACTIVE Field Alarm LOAD/FUSE Load Alarm, output stuck-On 3664 Stuck-On point, all others commanded state - On or Off 3674 Stuck-On point, all others commanded Off (de-energized)

Load Alarm, output stuck-Off 3664 and 3674 Stuck-Off point, all others commanded state On or Off Color Code Dark blue

48 Analog Input Modules affecting another chan nel. Each Analog Analog Input Modules require a sepa-Analog Input (AI) Modules includes Input Module sustains complete, rate external termination panel (ETP) three independent input channels. Each ongoing diagnostics for each channel. with a cable interface to the Tricon input channel receives variable voltage Failure of any diagnostic on any controller backplane. Each module is signals from each point, converts them channel activates the Fault indicator for mechanically keyed for proper installa-to digital values, and transmits the the module, which in turn activates the tion in a Tricon chassis.

values to the three Main Processor chassis alarm sign al. The modules modules on demand. In TMR mode, Fault indicator merely reports a channel one value is then selected using a mid-fault, not a module failurethe module value selection algorithm to ensure can operate properly with as many as correct data for every scan. two faulty channels.

Sensing of each input point is Analog Input Modules support hot-performed in a manner that prevents a spare capability, which allows online single failure on one channel from replacement of a faulty module.

Analog Input Module Specifications

Model Number 3700/3700A 3701 3703E Voltage 0-5V, + 6% (only 3700A) 0-10V 0-5V or 0-10Va, + 6%

Type TMR, AI TMR, AI TMR, AI No. of Input Points 32, diff, DC coupled 32, diff, DC coupled 16, diff, isolated Isolated Points No No Yes Input Update Rate 55 ms 55 ms 50 ms Resolution 12 bits 12 bits 12 bits Accuracy <.15% of FSR,<.15% of FSR, <.15% of FSR, from 0° to 60° C from 0° to 60° C from 0° to 60° C Input Resistance (load) 30 M (DC), min. 30 M (DC), min. 30 M (DC), min.

Power-Off Resistance 30 K (DC), typical 30 K (DC), typical 30 M (DC), min.

Common Mode Rejection -80 dB (DC-100Hz), -80 dB (DC-100Hz), -90 dB @ 60Hz, min.

typical typical -100 dB @ DC, min.

Common Mode Range -12V to +12V peak -12V to +12V peak +200V peak Leg-to-Leg Isolation 200 K, typical 200 K, typical 20 K, typical Normal Mode Rejection

@ 8Hz -3 dB -3 dB -3 dB

@ 60Hz -17 dB -17 dB -17 dB

@ 120Hz -23 dB -23 dB -23 dB Input Overrange 150 VDC/115 VAC 150 VDC/115 VAC 150 VDC/115 VAC Protection continuous continuous continuous Current Range 0-20 mA, 0-20 mA, 0-20 mA, 250 shunt 500 shunt 250 shunt for 5V 500 shunt for 10V Diagnostic Indicators Module Status Pass, Fault, Active Pass, Fault, Active Pass, Fault, Active Color Code Yellow Light yellow Mustard yellow

a. The voltage is selected using the TriStation 1131 software.

49 Product Specifications

Analog Input Module Specifications

Model Number 3704E 3720 3721 Voltage 0-5V or 0-10Va, + 6%0-5VDC, + 6% 0 to 5 VDC or -5 to +5 VDCa, + 6%

Type TMR, AI TMR, AI TMR, AI No. of Input Points 64, commoned 64, single-ended 32 differential, DC-coupled Isolated Points No Yes Yes Input Update Rate 75 ms 10 ms 10 ms Resolution 12 bits 12 bits or 14 bits programmable 12 bits or 14 bits programmable Accuracy < 0.25% of FSR from 0° to 60° C < 0.15% of FSR from 0° to 60° C < 0.15% of FSR from 0° to 60° C Input Resistance (load) 30 M (DC), min. 10 M (DC), min. 10 M (DC), min.

Power-Off Resistance 30 k (DC), typical 140 k (DC), typical 140 k (DC), typical Common Mode Rejection n/a n/a -85 dB (DC - 100 Hz)

Common Mode Range n/a n/a -12V to +12V peak Leg-to-Leg Isolation 200 k, typical 420 k, typical 420 k, typical Normal Mode Rejection -1 dB @ 8Hz -3 dB @ 8Hz -3 dB @ 23 Hz

-12 dB @ 60Hz -17 dB @ 60Hz -8 dB @ 60 Hz

-18 dB @ 120Hz -23 dB @ 120Hz -14 dB @ 120 Hz Input Overrange 150 VDC/115 VAC 150 VDC/115 VAC 150 VDC/115 VAC Protection continuous continuous continuous Current Range 0-20 mA, 0-20 mA (plus 6% over-range) with 0-20 mA with 250 shunt resistor 250 shunt for 5V 250 shunt resistor 500 shunt for 10V Diagnostic Indicators Module Status PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE, FIELD PASS, FAULT, ACTIVE, FIELD Color Code Copper Yellow Yellow

a. The voltage is selected using the TriStation 1131 software.

Analog Output Modules field. In addition, ongoing diagnostics supplies for analog outputs must be Analog Output (AO) modules receive are performed on each channel and provided by the user. A LOAD indi-output signals from the Main Processor circuit of the module. Failure of any cator activates if an open loop is module on each of three channels. Each diagnostic test deactivates the faulty detected on one or more output points.

set of data is then voted and a healthy channel and activates the Fault indi-PWR1 and PWR2 are on if loop power channel is selected to drive the outputs. cator and the chassis alarm. The is present.

Each module monitors its own current module Fault indicator merely indicates AO modules support hot-spare capa-outputs (as input voltages) and main-a channel fault, not a module failure. bility, which allows online replacement tains an internal voltage reference to The module continues to operate prop-of a faulty module.

provide self-calibration and module erly with as many as two channels health information. failed. Open loop detection is provided AO modules require a separate external by a LOAD indicator which activates if termination panel (ETP) with a cable Each channel on a module has a current the module is unable to drive current to interface to the Tricon controller loopback circuit which verifies the one or more outputs. backplane. Each module is accuracy and presence of analog The module provides for redundant mechanically keyed to prevent signals independently of load presence loop power sources with individual improper installation in a configured or channel selection. The modules power and fuse indicators called PWR1 chassis.

design prevents a non-selected channel and PWR2. External loop power from driving an analog signal to the

50 The Model 3805H module has been The Model 3806E High Current AO Model 3807 contains four hard-wired modified to support increased inductive Module has two 20 to 320 mA outputs coil diagnostic inputs. The Model 3807 loads. It is fully compatible for use in to drive servo actuators. is designed for control applications all applications of the 3805E module. The Model 3807 Bipolar AO Module only, and should not be used in safety The Model 3806E and Model 3807 has four -60 to + 60 mA outputs to drive applications.

modules are optimized for turboma-servo coils in servo-control applica-chinery control. tions. The termination panel for the

Analog Output Module Specifications

Model Number 3805E/3805H 3806E 3807 Type TMR, AO TMR, AO TMR, AO Output current range 4-20 mA output (+6% overrange) 4-20 mA and 20-320 mA -60 to 60 mA Number of points 8 output 6 (4-20 mA) output; 2 (20-320 mA) 4 bipolar output output Isolated points No, commoned return, DC coupled No, commoned return, DC coupled No, commoned return, DC coupled Resolution 12 bits 12 bits 13 bits Output Accuracy <0.25% (in range of 4-20 mA) of<0.25% (in range of 4-20 mA) of < 0.25% (in range of -60 to 60 mA)

FSR (0-21.2 mA), from 32° to 140° FSR (0-21.2 mA and 0-339.2 mA), of Full Scale Range (FSR), from 0° F (0° to 60° C) from 32° to 140° F (0° to 60° C) to 60° C. FSR = 120 mA.

External loop power +42.5 VDC, maximum +42.5 VDC, maximum 24 VDC -15%/+20%, +5% ripple (reverse voltage protected) +24 VDC, nominal +24 VDC, nominal Output loop power requirements Max. load vs. external loop voltage Load (Ohms) Loop power required 4-20 mA 16-320 mA Compliance voltage is +/- 9V and is 250 > 20 VDC (1 amp minimum) 20 VDC < 275 <15 independent of variations in 500 > 25 VDC (1 amp minimum) 24 VDC < 475 <25 external loop power supply voltage 750 > 30 VDC (1 amp minimum) 28 VDC < 650 <40 150 ohm @ +/- 60 mA 1000 > 35 VDC (1 amp minimum) 32 VDC < 825 <50 1 kohm @ +/- 9 mA

9 kohm @ +/- 1 mA.

Over-range protection +42.5 VDC, continuous < +42.5 VDC +36 VDC, continuous Switch time on leg failure < 10 ms, typical < 10 ms, typical < 10 ms, typical Diagnostic Indicators Module status PASS, FAULT, ACTIVE, PASS, FAULT, ACTIVE, PASS, FAULT, ACTIVE, (one each per module) LOAD, PWR1, PWR2 LOAD, PWR1, PWR2 LOAD, PWR1, PWR2 Color code Pea green Light green Light green

51 Product Specifications

Thermocouple Input Modules isolated Thermocouple Input Modules. Failure of any diagnostic on any Thermocouple Input (TC) modules The isolated module allows users to channel activates the Fault indicator, include three independent input chan-select upscale or downscale burnout which in turn activates the chassis nels. Each input channel receives vari-detection with the TriStation 1131 alarm signal. The module Fault indi-able voltage signals from each point, software. For non-isolated modules, cator merely reports a channel fault, not performs thermocouple linearization upscale or downscale burnout detection a module failure. Th e module continues and cold-junction compensation, and depends on the field termination to operate properly with as many as two converts the result to degrees Celsius or selected. faulty channels.

Fahrenheit. Each channel then trans-Triplicated temperature transducers Thermocouple Input Modules support mits 16-bit signed integers representing residing on the field termination panel hot-spare capability, which allows 0.125 degrees per count to the three support cold-junction compensation. online replacement of a faulty module.

Main Processors on demand. In TMR Each channel of a Thermocouple Input Thermocouple Input Modules require a mode, a value is then selected using a Module performs auto-calibration separate external termination panel mid-value selection algorithm to ensure using internal precision voltage refer- (ETP) with a cable interface to the correct data for every scan. ences. On the isolated module, a Tricon controller backplane.

Each Thermocouple Input Module is faulting cold-junction transducer is Each module is mechanically keyed to programmable to support one annunciated by a cold-junction indi-prevent improper installation in a thermocouple type, se lected from J, K cator on the front panel. configured chassis.

and T for standard Thermocouple Input Each module performs complete Modules and from J, K, T, and E for ongoing diagnostics on each channel.

Thermocouple Input Module Specifications

Model Number 3706A 3708E Type TMR, thermocouple TMR, thermocouple Number of input signals 32 differential, DC coupled 16 differential, isolated Isolated points No Yes Input update rate 50 ms, maximuma50 ms Thermocouple types supportedb J, K, T J, K, T, E Accuracy/temp range See Table A See Table B Input resistance (load) 22 M (DC), typical 30 M (DC), minimum Noise rejection Common mode -85 dB @ 0-60 Hz, minimum-90 dB @ 0-60 Hz, minimum

-95 dB @ DC, typical -100 dB @ DC, minimum Normal mode -17 dB @ 60 Hz -3 dB @ 8 Hz, typical

-17 dB @ 60 Hz, typical Common mode range +/-10 VDC max. (channel-to-channel+/-200 VDC, max (channel-to-channel or channel-to-ground) or channel-to-ground)

Leg-to-leg isolation 200 K, typical 20 K, typical Input point protection 110 VAC, continuous 110 VAC, continuous Reference junction compensation range 32°-140° F (0°-60° C) 32°-140° F (0°-60° C)

Diagnostic indicators PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE, CJ FAULT Color code Tan Deep yellow

a. Inputs frozen for one second upon insertion of spare module.

b. Selected using the TriStation 1131 software.

52 Accuracy of Thermocouple Types for Model 3706A

Accuracya (TC Termination Module @ 32-140F [0-60C])

TC Type Temperature Range Ta = 77 F (25C) Ta = 32-140F (0-60C)

(Typical) (Maximum)

J -250 to 32° F (-157 to 0° C° C) +/- 5.0° F (2.8° C) +/- 7.0° F (3.9° C)>32 to 2000° F (0 to 1093° C) +/- 4.0° F (2.3° C) +/- 5.0° F (2.8° C)

K -250 to 32° F (-157 to 0° C) +/- 6.0° F (3.4° C) +/- 9.0° F (5.0° C)>32 to 2500° F (0 to 1371° C) +/- 4.0° F (2.3° C) +/- 6.0° F (3.4° C)

T -250 to 32° F (-157 to 0° C) +/- 5.0° F (2.8° C) +/- 9.0° F (5.0° C)>32 to 752° F (0 to 400° C) +/- 3.0° F (1.7° C) +/- 5.0° F (2.8° C)

Accuracy of Thermocouple Types for Model 3708E

Accuracya (TC Termination Module @ 32-140F [0-60C])

TC Type Temperature Range Ta = 77 F (25C) Ta = 32-140F (0-60C)

(Typical) (Maximum)

J -238 to 32° F (-150 to 0° C) +/- 3.0° F (1.7° C) +/- 9.0° F (5.0° C)>32 to 1400° F (0 to 760° C) +/- 5.5° F (3.1° C)

K -238 to 32° F (-150 to 0° C) +/- 4.0° F (2.3° C) +/- 8.0° F (4.5° C)>32 to 2284° F (0 to 1370° C) +/- 7.0° F (3.9° C)

T -250 to 32° F (-161 to 0° C) +/- 3.0° F (1.7° C) +/- 8.5° F (4.8° C)>32 to 752° F (0 to 400° C) +/- 4.5° F (2.5° C)

E -328 to 32° F (-200 to 0° C) +/- 3.0° F (1.7° C) +/- 8.0° F (4.5° C)

>32 to 1830° F (0 to 999° C) +/- 5.0° F (2.8° C)

a. Accuracy specifications account for errors related to reference-junction compensa tion, but do not account for errors caused by temperature gradients between the temperature transducers and the TC terminations. The user is responsible for main taining a uniform temperature across the TC Termination Module.

53 Product Specifications

HART Interface Modules and 2,200 Hz. These frequencies are Only Tricon v10.4.x and later systems Highway Addressable Remote Trans-high enough that the low-bandwidth can use HART Interface Modules; ducer (HART) is an industry standard loop is unaffected and the HART elec-earlier Tricon systems must upgrade to field bus protocol that superimposes a tronics can impose and extract the Tricon v10.4.x. The chassis require-Frequency Key Shifted (FSK) signal HART signals easily. ments for using HART Interface onto the 4-20 mA loop. The Tricon HART communication through the Modules in a system upgraded to Model 2071H HART Multiplexer HART multiplexer is separate from the Tricon v10.4.x differ depending on the Module that is incorporated into each of Tricon system and is certified not to original system version, as described in the HART Interface Modules capaci-interfere with the 4-20 mA safety the Tricon Chassis Usage for HART tively couples the HART signal to the signals of the Analog Input and Analog Communication table.

AI or AO signals. The HART signals Output Modules.

are approximately +/-0.5 mA at 1,200

HART Interface Module Specifications

Model Number 2770H 2870H Type HART Analog Input Interface HART Analog Output Interface Compatible Modules 3700A, 3721 3805E, 3805H Number of signals 32 input 8 output Input/Output type 4-20 mA, 0-5 VDC input 4-20 mA, 0-5 VDC output HART MUX module 2071H (includes the Triconex 4850 HART 2071H (includes the Triconex 4850 HART Multiplexer) Multiplexer)

Status indicator: HART MUX module PWR, FAULT, HOST, HART PWR, FAULT, HOST, HART HART protocol HART Field Communication Protocol, HART Field Communication Protocol, Revision 5.0-7.0 Revision 5.0-7.0 Logic power < 5 Watts < 5 Watts

Tricon Chassis Usage for HART Communication

If Your Original System Version is... Upgrade to... Install HART Interface Modules in Chassis...

Tricon v10.4.x or later (High-Density) n/a

• Model 8121 Enhanced Low-Density Expansion Chassis Tricon v10.0.x - 10.3.x (High-Density) Tricon v10.4.x

• Model 8121 Enhanced Low-Density Expansion Chassis Tricon v9.x (High-Density) Tricon v10.4.x

• Model 8121 Enhanced Low-Density Expansion Chassis Tricon v6.x - v10.x (Low-Density) Tricon v10.4.x

• Model 8100-x Main Chassis

• Model 8101 Low-Density Expansion Chassis

• Model 8102 Low-Density RXM Chassis

• Model 8121 Enhanced Low-Density Expansion Chassis

54 Aterminationpanel andassociated cablepasssignalstoorfromthe field,permittingrepla cem en tofI/OModuleswithoutdisturbing fieldwiring.

FieldTerminationOptions

There are two general types of field External Termination Panels External termination panels allow you termination products available from An external termination panel (ETP) is to marshal field signals in a separate Invensys: an electrically-passive printed circuit enclosure up to 99 feet (30 meters) from

• External termination panelsboard (PCB) to which field wiring is a Tricon chassis.

• Cables easily attached. A panel connector, Standard termination panels are best for terminal blocks and various compo-remote marshaling of field wiring All termination panels and cables are nents are mounted to the PCB and where maximum flexibility, high built to withstand harsh industrial envi-enclosed in a plastic housing. A termi-density and simple maintenance is ronments. The environmental specifi-nation panel and associated cable pass desired.

cations for components used on these input signals from the field directly to A standard termination panel consists products are the same as for a Tricon an input module, or pass output signals of a PCB with all necessary compo-chassis. (See General Environmental from an output module directly to field nentssuch as two-piece terminal and EMC Specifications on page 27 wiring. This arrangement permits the blocks, resistors, fuses and blown-fuse for details.) removal or replacement of I/O modules indicatorsmounted on a DIN rail-without disturbing field wiring. compatible plastic housing. The

housing snaps into mounting rails in accordance with DIN 50 022.

Compression terminals on the standard panel are designed for use with 24-to 12-gauge (0.3 mm2 to 2.1 mm2) wiring.

Some panels have an optional current-limiting series resistor, others have a fuse with a blown-fuse indicator, to protect the field wiring and field device.

Standard termination panels are pre-configured for speci fic applications.

For instance, the thermocouple input termination panel provides cold-junc-tion temperature sensors and can be ordered with upscale, downscale or programmable burnout detection. A standard termination panel for analog voltage inputs provides commoned signal returns, while the current-mode version has a precision resistor at each input point to convert current to voltage.

Each standard termination panel is Tricon Chassis with External Termination Panels and Standard 10' Cables packaged with a matched interface

55 Field Termination Options

cable that connects the panel to the Customer Support (GCS) website at snaps into mounting rails in accordance backplane of a Tricon chassis. A female http://support.ips.invensys.com. with DIN 50 022. The user must connector at one en d of the cable is In addition to standard termination provide any other components required keyed to match the male connector on panels, there are other types of termina-by his application.

the Tricon controller backplane. A male tion panels, including: Other features of the basic termination connector on the other end of the cable panels are the same as for the standard attaches to the standard termination

• Basic termination panelspanels.

panel. Two types of cables are avail-

• Hazardous location (nonincendive) ableone that exits the Tricon termination panels Hazardous Location controller backplane at a ninety-degree (Nonincendive) Termination angle and one that exits at a zero-degree

• Termination panels with interposing Panels angle (straight, front-entry). relays Hazardous location (nonincendive)

External termination panel model

• Bypass panels for digital inputstermination panels are suitable for use numbers that end with a Z contain

• Termination panels with in Zone 2 (ATEX), and Class 1, Divi-zero-degree interface cables. Model RTD/TC/AI input signal sion 2 (North America) field circuits.

numbers for ninety-degree configura-conditioning These panels contain extra circuitry tions are referenced throughout this designed to limit power available to the guide. It is implied that where a model

• Termination panels for 3603B field terminals and have been examined number is referenced for a ninety-digital output modules and certified by TÜV Rheinland as degree configuration, a zero-degree

• Termination panels for 3806E being nonincendive. This guarantees configuration also is available. analog output modules that if the field wi res are accidentally Zero-degree cables are designed to be opened, shorted, or grounded, and the used with G-Series Enclosures for Basic Termination Panels Tricon controller is operating normally, Tricon controllers that have front Basic termination panels are a low-cost the wiring and attach ed devices will not access. For more information on G-means of connecting field wiring to a release sufficient energy to cause igni-Series Enclosures for Tricon Systems, Tricon controller. However, basic tion in the specified flammable atmo-see the G-Series Enclosures Product termination panels do not provide any sphere.

Specification Sheet, PSS Number: PSS components other than a 56-pin Termination Panels with 21H-2X8 B3, on the Invensys Global connector and terminal blocks. These Interposing Relays two components are mounted on a DIN Interposing relays are recommended rail-compatible plastic housing that for applications that have load currents greater than 2 amps, or field voltages greater than 115 VAC which require field-circuit conversion or compati-bility with motor-starter circuits.

Each interposing relay provides an auxiliary contact that can be connected to a digital input module by means of an optional loopback cable to verify relay activation by the digital output module.

Interposing relay panels use compact general-purpose power relays for maximum reliability and can be used with most digital output modules.

Bypass Panels for Digital Inputs Bypass termination panels can be used to connect digital inputs using a bank of 32 pre-wired switches. The bypass Standard Termination Panels in 16-Point and 32-Point Styles

56 panel has a master keyswitch and Each fanned-out cable has the termination panel is installed. For terminals for redundant +24 VDC following characteristics: Model 3708E, upscale or downscale power sources. Each input point

• PVC outer coveringburnout detection is configured with contains an On status indicator and a the TriStation 1131 software.

position for a user-defined label. Each

• 56-pin connector at one endThe Termination Options table (on bypass termination panel comes with

• 50 stranded, stripped, tinned and the next two pages) shows the available one or two 10-foot cables for labeled 22-gauge leads at opposite termination choices for each I/O connecting the termination panel to a end module and gives the correct model Tricon controller backplane. number for each choice.

Termination Panels for Use Fanned-out cables should only be used with Signal Conditioners with digital input and digital output Termination panels which use industry-modules. They are not certified for use Over-Current Protection standard analog signal conditioners with analog signals. Contact the Non-basic termination panels offer provide a flexible, user-configurable Invensys Global Customer Support over-current protection in various interface to resistive thermal devices (GCS) center if you need a fanned-out ways:

(RTDs), thermocouples, and 4-20 mA cable for handling analog signals.

transmitters. Each termination panel Although the normal length of all

• Fuses for individual points and/or supports 16 points and each analog cables is 10 feet (3 meters), any length field power sources module can support up to 2 panels. cable can be ordered up to 99 feet (30

• Series resistors These termination panels are compat-meters) in 10-foot increments, using the

• Self-protection for digital output and ible with any signal conditioners in the last two digits of the cable model analog output modules 1 to 5 volt output range. For example, number to specify the length in feet. For the 7B series of signal conditioners example, the model number 9101-050F If you are using basic termination from Analog Devices are known to specifies a 50-foot cable instead of the panels, you must supply your own work well. normal 10-foot cable. components for over-current protec-tion.

These signal conditioners can be Termination Configuration purchased from Invensys, or directly from Analog Devices at: Options Termination Products for Use

• http://www.analog.com/IOSTerminations are av ailable in various in 1E (Safety-Related) factory configurations: Applications in Nuclear

• 1-800-426-2564 in the USA* Non-commoned Terminations can Power Plants

• 781-461-3100 from anywhere in the accommodate individual power For a list of Tricon v10 termination world supplies for each point. products qualified for use in 1E (safety-

• Commoned Terminations can related) applications in nuclear power support one power supply which is plants, see Tricon v10.x Equipment Fanned-Out Cables shared by multiple points. Points can Certified for Use in Nuclear 1E Appli-Fanned-out cables are a low-cost alter-be commoned in groups of 8 and cations on page 23.

native to using external termination groups of 16.

panels. Fanned-out cables allow you to marshal field signals in a separate

• Analog signals can be read as 3-wire enclosure up to 99 feet (30 meters) from transmitter inputs, voltage inputs or a Tricon chassis. One end of a fanned-current inputs.

out cable has a female connector that

• Thermocouple terminations provide connects to a Tricon chassis backplane. cold-junction temperature sensors The other end of the cable contains 50 and are available for either upscale fanned-out leads, each individually or downscale burnout detection. For labeled with its corresponding Model 3706A, upscale or downscale connector pin number. burnout detection depends on which

57

59 Field Termination Options

Dimensions of External Termination Panels

Width Length Height Panel Model (across DIN rail) (along DIN rail) (out from DIN rail) 9251-210F 7 in (17.78 cm) 19 in (48.26 cm) 4.75 in (12.065 cm) 9551-110F 3 in (7.62 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9552-610F 3 in (7.62 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9553-610F 3 in (7.62 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9561-110F 4.5 in (11.43 cm) 7.75 in (19.685 cm) 4.25 in (10.795 cm) 9561-810F 4.5 in (11.43 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9562-810F 4.5 in (11.43 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9563-810F 4.5 in (11.43 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9563-910F 4.5 in (11.43 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9565-710F 4.5 in (11.43 cm) 10 in (25.4 cm) 4.25 in (10.795 cm) 9565-810F 4.5 in (11.43 cm) 10 in (25.4 cm) 4.25 in (10.795 cm) 9566-710F 4.5 in (11.43 cm) 10 in (25.4 cm) 4.25 in (10.795 cm) 9566-810F 4.5 in (11.43 cm) 10 in (25.4 cm) 4.25 in (10.795 cm) 9570-610F 4.42 in (11.23 cm) 9.88in (25.08 cm) 4.25 in (10.795 cm) 9571-610F 4.42 in (11.23 cm) 9.88 in (25.08 cm) 4.25 in (10.795 cm) 9572-610F 4.42 in (11.23 cm) 5.02 in (12.75 cm) 4.25 in (10.795 cm) 9651-110F 3 in (7.62 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9652-610F 3 in (7.62 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9653-610F 3 in (7.62 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9661-110F 4.5 in (11.43 cm) 7.75 in (19.685 cm) 4.25 in (10.795 cm) 9661-510F 4.5 in (11.43 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9661-610F 4.5 in (11.43 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9661-710F 4.5 in (11.43 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9661-810F 4.5 in (11.43 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9661-910F 4.5 in (11.43 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9662-110F 4.5 in (11.43 cm) 7.75 in (19.685 cm) 4.25 in (10.795 cm) 9662-610F 4.5 in (11.43 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9662-710F 4.5 in (11.43 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9662-810F 4.5 in (11.43 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9662-910F 4.5 in (11.43 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9663-610F 4.5 in (11.43 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9664-110F 4.5 in (11.43 cm) 7.75 in (19.685 cm) 4.25 in (10.795 cm) 9664-810F 4.5 in (11.43 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9667-110F 4.5 in (11.43 cm) 7.75 in (19.685 cm) 4.25 in (10.795 cm) 9667-810F 4.5 in (11.43 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9667-910F 4.5 in (11.43 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9668-110F 4.5 in (11.43 cm) 7.75 in (19.685 cm) 4.25 in (10.795 cm) 9670-110F 7 in (17.78 cm) 19 in (48.26 cm) 4.75 in (12.065 cm)

60 Width Length Height Panel Model (across DIN rail) (along DIN rail) (out from DIN rail) 9670-610F 7 in (17.78 cm) 19 in (48.26 cm) 4.75 in (12.065 cm) 9671-610F 4.42 in (11.23 cm) 5.02 in (12.75 cm) 4.25 in (10.795 cm) 9671-810F 7 in (17.78 cm) 19 in (48.26 cm) 4.75 in (12.065 cm) 9672-810F 7 in (17.78 cm) 19 in (48.26 cm) 4.75 in (12.065 cm) 9673-810F 7 in (17.78 cm) 19 in (48.26 cm) 4.75 in (12.065 cm) 9750-210F 3 in (7.62 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9750-310F 3 in (7.62 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9750-410F 3 in (7.62 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9750-810F 3 in (7.62 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9753-110F 3 in (7.62 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9760-210F 4.5 in (11.43 cm) 10 in (25.4 cm) 4.25 in (10.795 cm) 9760-410F 4.5 in (11.43 cm) 10 in (25.4 cm) 4.25 in (10.795 cm) 9761-210F 4.5 in (11.43 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9761-410F 4.5 in (11.43 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9762-210F 4.5 in (11.43 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9762-410F 4.5 in (11.43 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9763-810F 4.5 in (11.43 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9764-310F 3.5 in (8.89 cm) 19 in (48.26 cm) 3 in (7.62 cm) 9765-210F 4.5 in (11.43 cm) 10 in (25.4 cm) 4.25 in (10.795 cm) 9765-610F 4.5 in (11.43 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9766-210F 4.5 in (11.43 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9766-510F 4.5 in (11.43 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9771-210F 4.5 in (11.43 cm) 5.729 in (14.552 cm) 4.25 in (10.795 cm) 9782-110F 4.42 in (11.23 cm) 5.02 in (12.75 cm) 4.25 in (10.795 cm) 9783-110F 4.42 in (11.23 cm) 5.02 in (12.75 cm) 4.25 in (10.795 cm) 9784-610F 4.42 in (11.23 cm) 5.02 in (12.75 cm) 4.25 in (10.795 cm) 9785-610F 4.42 in (11.23 cm) 5.02 in (12.75 cm) 4.25 in (10.795 cm) 9786-110F 4.42 in (11.23 cm) 5.02 in (12.75 cm) 4.25 in (10.795 cm) 9787-110F 4.42 in (11.23 cm) 5.02 in (12.75 cm) 4.25 in (10.795 cm) 9789-610F 4.42 in (11.23 cm) 9.88 in (25.08 cm) 4.25 in (10.795 cm) 9790-610F 4.42 in (11.23 cm) 5.02 in (12.75 cm) 4.25 in (10.795 cm) 9791-610F 4.42 in (11.23 cm) 5.02 in (12.75 cm) 4.25 in (10.795 cm) 9792-610F 4.42 in (11.23 cm) 7.75 in (19.685 cm) 4.25 in (10.795 cm) 9793-110F 4.42 in (11.23 cm) 5.02 in (12.75 cm) 4.25 in (10.795 cm) 9794-110F 4.42 in (11.23 cm) 5.02 in (12.75 cm) 4.25 in (10.795 cm) 9795-610F 4.42 in (11.23 cm) 5.02 in (12.75 cm) 4.25 in (10.795 cm) 9853-610F 3 in (7.62 cm) 5 in (12.7 cm) 4.25 in (10.795 cm) 9860-610F 4.42 in (11.23 cm) 5.02 in (12.75 cm) 4.25 in (10.795 cm) 9861-610F 4.42 in (11.23 cm) 5.02 in (12.75 cm) 4.25 in (10.795 cm) 9863-710F 3 in (7.62 cm) 6.66 in (16.9164 cm) 4.25 in (10.795 cm) 9871-810F 3 in (7.62 cm) 5 in (12.7 cm) 4.25 in (10.795 cm)

61 Field Termination Options

Width Length Height Panel Model (across DIN rail) (along DIN rail) (out from DIN rail) 9881-810F 3 in (7.62 cm) 5 in (12.7 cm) 4.25 in (10.795 cm)

BP9228-010F 3.5 in (8.89 cm) 19 in (48.26 cm) 8 in (20.32 cm)

BP9229-010F 3.5 in (8.89 cm) 19 in (48.26 cm) 8 in (20.32 cm)

Sample Drawings of External Termination Panels

F2 F4 F6 F8 F10 F12 F14 F16 1 F2 F4 F6 F8 F10 F12 F14 F16

2

F1 F3 F5 F7 F9 F11 F13 F15 F1 F3 F5 F7 F9 F11 F13 F15 CR2 CR1 CR7 3 4 8 12 13 16 3 4 L+ L+

L-L-PS1 PS2 CR6 CR3 SPWR

8-Point and 16-Point Digital Output Termination Panels with Fuses

J1

A A

C C

E E

Basic Termination Panel for Various Types of I/O Modules

62 W1 W2 W5 W7 W8 W9 W13 W16

R2 R8 R10 R16 R24 R28 R30 J1

R1 R3 R9 R13 R19 R23 R25 R29

T+

PS1 PS2 T-

A CR1 CR5

16-Point Analog Input and Digital Input Termination Panels 16-Point Thermocouple Input and Analog Input Termination Panels

R4 R24

R3 R23

1 3 4 13 16 17 21 25 28 29 32

PS1 32-Point Analog Input and Digital Input Termination Panels

J1

1 3 7 9 10 15 16

LOAD

PWR

Standard Non-Commoned Termination Panels for Digital Input, Digital Output and Relay Modules

63 Field Termination Options

CR2

1 9 12 13 16 21 22 25 28 29 +

T T

N T

R PS1 PS2

3-Wire Transmitter Analog Input Termination Panel

NN 1 234 56789 110 1411 1512 163

KK

J1 CR1C20

D + P2P1 U1 U2 U3 U4 U5 U6 U7 U8 U9 U1 2 U1 3 U1 4 U1 5 U1 6J3J5J7U10U1 1J9

A J2

C2 1 J6C19J4J8J10 RTD/TC/AI External Termination Panel

2 AMP 250V

BLOWN FUSE

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 ON

OFF TRI CONEX External Bypass Termination Panel

+ - 1 + - + - 2 + - 3 4 + - 5 + - 6 + - 7 + - 8 + - PW1 + - PW2 + - 9 + - 10 + - 11 + - 12 + - 13 + - 14 + - 15 + - 16

POWER POWER

CR1 CR2

F1 F2 F3 F4 F5 F6 F7 F8 F9 F10 F11 F12 F13 F14 F15 F16

R2 5 TRI CONEX CORP.

R17 R2 6 ASSY. NO. 7400121-REV R1 8 R2 7 RELAY EXTERNAL TERMI NATOR R19 R2 8 R2 0 R2 9 © 1990 SERI AL NO.

R2 1 MODEL NUMBER VOLTAGE R3 0 MADE IN U.S.A.

R22 ISOLATED REDUNDANT DI GI TAL OUTPUT R3 1 DI GI TAL I NPUT R2 3 COMMON R3 2 R24 RACK/ CHASSI S/ SLOT K1 K2 K3 K4 K5 K6 K7 K8 K9 K10 K11 K12 K13 K14 K15 K16

CONTACT CONTACT

C NO 1 C NO 2 C NO 3 C NO 4 C NO 5 C NO 6 C NO 7 C NO 8 C NO 9 C 10 NO C 11 NO C 12 NO C 13 NO C 14 NO C 15 NO C 16 NO

External Relay Termination with 16 Interposing Relay Contacts 64 Sample Drawings of Nonincendi ve External Termination Panels

8-Point Nonincendive Analog Output 16-Point Nonincendive Analog Input and Termination Panels Pulse Input Termination Panels

16-Point Nonincendive Digital Output 16-Point Nonincendive Current Analog Termination Panels Input and Digital Input Termination Panels

32-Point Nonincendive Analog Input and Digital Input Termination Panels

65 Notes The Tr i c o ncontrollercan interface withModbus mastersand slaves, DistributedControl Systems (DCS), externalhostcomputers on Ethernetnetworks,other Tr i c o n e xControllersona PeertoPeer network, and aTriStation11 3 1 PC. CommunicationCapabilities

In most process-control applications, Today, the state-of-the-art, micropro-

• External host computers on Ethernet there are two systems which monitor cessor-based architecture of the Tricon (802.3) networks and manage the process. One is a controller supports several modes of

• Other Triconex controllers in a Peer-Distributed Control System (DCS) and communication. Depending on control to-Peer, TÜV-certified network the other is a safety system such as the program requiremen ts, the Tricon can Tricon controller. These two systems interface with:

• A TriStation 1131 PC are usually isolated, but share a

• Any Modbus master, including DCS

• OPC Server for Triconex common operator interface. Distributed from ABB, Bailey, Fisher-Control Systems are designed to allow Rosemount and Yokogawa highly effective communication with Networking with Modbus the process operator, who must be

• Modbus slave devices The Tricon Communication Module informed of the state of the process at

• A Foxboro Intelligent Automation (TCM) supports the industry-standard all times. This is desirable for safety (I/A) Series Nodebus Modbus protocol over a serial link or a systems as well, but was not feasible in TCP network. The Enhanced Intelli-the past because of the type of tech-

• A Honeywell Universal Control gent Communication Module (EICM) nology used to implement these Network (UCN) supports the Modbus protocol over a systems.

• A Honeywell Data Hiway and Local serial link. Most suppliers of operator Control Network (LCN)

TCM Communication with Modbus Master and TriStation 1131 PC

67 Communication Capabilities

workstation software (PC-based or Protocols TCM EICM NCM ACM mini-computer-based) support Modbus Peer-to-Peer RTU and ASCII protocol, as do most DCS vendors, by means of a network-Time Synchronization bridging device. Trimble GPS (TAIP)

Because the TCM and the EICM can SNTP operate as a Modbus master or slave Network Printing using Jet Direct (the EICM can simultaneously act as TriStation both), the productivity of the Tricon Tricon System Access control program controller can be expanded in a low- (TSAA) cost manner for non-critical I/O. When Protocols for User-Written Applications the TCM or the EICM operates as the master, it can control slave devices such Modbus RTU and ASCII as annunciators, bypass switches on Modbus TCP non-critical PLCs, or other Tricon TCP-IP/TCP-UDP controllers. When the TCM or the Triconex Applications EICM operates as a slave, a computer on the network is the masterthis can Sequence of Events be a DCS, an operator workstation, or DDE Server any general-purpose computer TriStation 1131 programmed to support Modbus Enhanced Diagnostic Monitor devices.

TCM and EICM users can select the OPC Server for Triconexa RS-232 point-to-point interface for one Protocols and Applications for Networking master and one slave, or the RS-485 NOTES interface for one master and up to 32 aTCM Models 4351A, 4351B, 4352A, and 4352B, and NCMs rely on an external Matrikon OPC Server.

slaves. The RS-485 network trunk can TCM Models 4353 and 4354 have an Embedded OPC Server.

be one or two twisted-pair wires up to a See page 33, page 35, page 37, and page 38 for network port usage on the TCM, EICM, NCM, and ACM maximum of 4,000 feet (1,200 meters).

While the TCM and the EICM are with external systems by means of intermittent cable connections, port appropriate for many applications, TCP-IP/UDP-IP protocol. failures, or TCM/ NCM/ACM failures.

Invensys offers alternate communica-In addition, the TCM and NCM support External host redundancy is obtained tion methods when fast response time the Triconex Peer-to-Peer and Time by connecting a spare external host or a large amount of data throughput is Synchronization protocols on the machine to the network. If the primary required. NET 1 port. The TCM and NCM also host fails, it can be shut down and the support a fully redundant OPC capa-control program restarted on the spare bility. The table above lists the proto-host. All Triconex applications use PCs Networking with Ethernet cols and applications that can be used as external hosts, so all of the applica-The Tricon controller supports Ethernet with the TCM, NCM, and ACM. tions could be loaded on the primary (802.3) communication through the To maximize safety, the Tricon system and spare hosts without requiring any NET 1 and NET 2 ports on the Tricon offers module, media, and workstation other PCs.

Communication Module (TCM), and redundancy. Module/media redun-Triconex Protocols the NET 2 ports on the Advanced dancy is achieved by installing two A protocol is a set of rules for Communication Module (ACM) and TCMs, NCMs, or ACMs in the same exchanging data between two or more the Network Communication Module logical slot and connecting their devices. In a Peer-to-Peer protocol, any (NCM). All of these modules support network nodes with two sets of cables. device on the network can initiate a data Triconex applications, user-written This arrangement permits continuous transfer operation. In a master/slave applications, and open networking operation in case of broken cables, protocol, only the master can initiate a

68 data exchange. Invensys has developed communicate with only one slave at a applications are briefly described in the one peer-to-peer protocol and three time. table below.

master/slave protocols (Time Synchro-TSAA The Tricon controller offers consider-nization, TriStation, and TSAA) to The Tricon System Access control able flexibility and functionality in the support different types of applications. program (TSAA) protocol is a area of data communication, and can All of the following Triconex protocols master/slave protocol in which the readily be configured to match control support a maximum of 31 Tricon master (the extern al host) communi-program requirements. Invensys is controllers on a network. Please contact cates with one or more slaves (Tricon continually striving to advance the state Invensys for application guidelines and controllers) over an open network. of the art in safety systems. High-speed, potential performance limitations. TSAA specifies the interfaces, redundant network communication is Peer-to-Peer commands and data st ructures used to another example of that commitment.

Peer-to-Peer protocol allows Tricon develop applications that send and controllers to exch ange small amounts receive data to and from Tricon control-Foxboro's Intelligent of safety and process information on lers.

the proprietary network. For TSAA can be used to develop these Automation Series System information about using the Peer-to-types of applications: Invensys offers the Advanced Commu-Peer Send and Recv functions in nication Module (ACM) for tightly-applications, see the TriStation 1131

• Control (read/write) applications integrated interfacing with Foxboro's Developer s Guide. such as an operator interface that Intelligent Automation (I/A) Series Time Synchronization requires access to Tricon controller Nodebus. The ACM communicates Time Synchronization is a master/slave status and the ability to write data to process information at full network protocol used to maintain a consistent the Tricon controller. data rates for use anywhere on the I/A time base for all Tricon controllers

• Monitor (read only) applications Series system, transmitting all Tricon connected to each other by means of such as a Sequential Events aliased data and diagnostic information TCMs or NCMs. Recorder, Event Logger or status to operator workstations in display display that retrieves data from the formats that are familiar to Foxboro Tr i S t a t i o n Tricon controller. operators.

The TriStation protocol is a For more information about TSAA, see The ACM makes the following func-master/slave protocol in which the the Communication Guide for Tricon tions available to the I/A Series:

master (the TriStation 1131 PC) v9-v10 Systems.

• Handles critical I/O points and communicates with the slave (the passes results to the I/A Series Tricon controller) over an Ethernet Triconex Applications network. Although the TriStation Invensys offers several applications for

• Processes Tricon controller alarms protocol supports a maximum of 31 Ethernet (802.3) networks, all of which and propagates them to user-defined Tricon controllers, the master can use a PC as the external host. These

Triconex Application Description TriStation 1131 Allows development, testing, and monitoring of applications for the Tricon controller.

Sequence of Events (SOE) Retrieves events (state changes of discrete variables) from Tricon controllers on a network. For system maintenance and shutdown analysis.

Enhanced Diagnostic Monitor Allows monitoring the hardware and application status of Tricon controllers.

DDE Server Allows Windows-based DDE client applications such as Microsoft Excel to read and write Tricon aliased data.

OPC Server for Triconexa Allows OPC clients to have read and write access to Triconex controller program variables. Requires the Network Communication Module (NCM) or the Tricon Communication Module (TCM).

aTCM Models 4351A, 4351B, 4352A, and 4352B, and NCMs rely on an external Matrikon OPC Server. TCM Models 4353 and 4354 have an e mbedded OPC Server.

69 Communication Capabilities

I/A Series destinations (consoles, Honeywells TDC-3000 DCS The HIM interfaces with the TDC-3000 printers, etc.) Invensys offers the Safety Manager by means of the Hiway Gateway and

• Propagates Tricon controller alarms Module (SMM) and the Hiway Inter-Local Control Network (LCN). The as I/A Series system messages face Module (HIM) for tightly-inte-HIM can also interface with Honey-grated interfacing with various well's older TDC 2000 control system

• Reads/writes aliased data to satisfy networks of the TDC-3000 DCS. by means of the Data Hiway. Using the I/A Series requests HIM, higher-order devices on the LCN

• Enables time synchronization from The SMM is used solely for communi-or Data Hiway (such as computers and the I/A Series environment cation with the Universal Control operator workstations) can communi-Network (UCN), one of three principal cate with the Tricon controller.

• Reads Tricon controller diagnostics networks of the TDC-3000. Appearing Both the SMM and the HIM offer the for display by the I/A Series to the Honeywell system as a safety hot-spare capability for uninterrupted workstation node, the SMM communicates process communication with Honeywell

• Provides write protection to lock out information at full network data rates networks.

changes to the Tricon controller for use anywhere on the TDC-3000.

from all I/A Series sources The SMM transmits all Tricon aliased data and diagnostic information to

• Provides hot-spare capability for operator workstations in display uninterrupted communication with formats that are fami liar to Honeywell the I/A Series Nodebus operators.

The ACM also supports these Triconex The SMM makes the following func-protocols and applications on external tions available to the TDC-3000:

host PCs connected to a separate BNC

• Handles critical I/O points and port (that is, NET 2): passes results to the DCS

• TriStation protocol for the TriStation

• Processes Tricon controller alarms 1131 software and propagates them to user-defined

• TSAA protocol for Triconex DCS destinations (consoles, applications printers, etc.)

• TSAA/TCP(UDP)/IP for user-* Reads/writes aliased data to satisfy written applications on external DCS requests hosts

• Reads Tricon controller diagnostics for display by the DCS

• Provides write protection to lock out changes to the Tricon controllers from all TDC-3000 sources

• Enables time synchronization from the DCS

• Allows Peer-to-Peer communication for plants with many Tricon controllers

• Provides sequence of events to help determine the cause of plant trips and increase process uptime

• Provides hot-spare capability for uninterrupted communication with Honeywell networks

70 Easytousedevelopersworkbenchallowsyoutodevelop,test,and documentprocess controlapplicationsfortheTr i c o ncontroller.

TriStation11 3 1DevelopersWo r k b e n c h

TriStation 1131 Developer s Work-Notice for TriStation 1131 v4.x, avail-

• Declare tagnames bench is an integrated tool for devel-able on the Invensys Global Customer

• Test applications in the Triconex oping, testing, and documenting safety Support (GCS) website. Emulator and critical-proces s control applica-tions for the Tricon controller. The

• Download and monitor applications programming methodology, user inter-Functional Overview face and self-docum entation capabili-The TriStation 1131 software provides ties make the system superior to three editors which support these IEC Features in TriStation 1131 traditional and competing engineering 61131-3 languages: v4.10.0 tools. TriStation 1131 version 4.10.0 is a signif-This table identifies the compatibility

• Function Block Diagram icant release, with the following new of Tricon system and TriStation 1131

• Ladder Diagram features:

software versions.

• Structured Text

• I/O Utilization and Disabled Points An optional Triconex programming Reports Tr i S ta t i o n 11 3 1 Tr i c o n language, CEMPLE (Cause and Effect 4.1.419-4.1.420 10.0.xMatrix Programming Language Editor)

• Support for process alarm 4.1.433 10.0.x-10.1.xsupports the widely used Cause and configuration and monitoring 4.1.437 10.0.x-10.2.xEffect Matrix (CEM) methodology.

• Verification of downloaded 4.2.x 10.0.x-10.3.xThe TriStation 1131 software allows programs 4.3.x-4.5.x 10.0.x-10.4.xyou to:* Enhanced Peer-to-Peer 4.6.x-4.10.x 10.0.x-10.5.x* Create programs, functions, and communication function blocks The TriStation 1131 software is

• Define the controller configuration compliant with Part 3 of the IEC 61131 International Standard for Program-mable Controllers, which defines programming languages.

The TriStation 1131 v4.7.0 and later software supports the following Windows operating systems:

• Windows XP Professional

• Windows 7 Professional/Enterprise (32-bit and 64-bit)

• Windows Server 2003

• Windows Server 2008 R2 (32-bit and 64-bit)

For detailed version compatibility Example of the TriStation 1131 4.x Software Interface information, see the Product Release

71 TriStation 1131 Developer s Workbench

Enhanced Diagnostic Monitor The Enhanced Diagnostic Monitor is an application which monitors the hardware health of Triconex controllers and allows users to effectively troubleshoot the safety system during maintenance.

Starting with TriStation 1131 v4.1.437, the Enhanced Diagnostic Monitor is a separate application from the TriStation 1131 software.

For more information on the Enhanced Diagnostic Monitor, see the online Help or printed guide included with the Enhanced Diagnostic Monitor.

Elements of a TriStation 1131 Project Sample Logic in FBD, ST, and LD Languages A TriStation 1131 project contains all of the elements required to implement a

• IEC 61131-3 Standard Library - a safety or control program in a Tricon Function Blocks set of functions and function blocks controller. Some of these elements are A function block is a logic element defined by the IEC 61131-3 automatically included in every project which yields one or more results. To Standard by the TriStation 1131 software, while use a function block in a program, an others are user-created. instance of the function block type must

• Triconex Library - a set of Triconex Programs first be declared. Each instance is iden-functions and function blocks that tified by a user-defined instance name. can be used with any Triconex A program is the highest-level execut-All of the data associated with a programmable controller able logic element in a TriStation 1131 specific instance of a function block is

• Tricon Library - a set of functions project. It is an assembly of program-retained from one evaluation of the and function blocks that are ming language elements (functions, function block to the next. specifically for use with the Tricon function blocks, and data variables) that controller work together to allow a programmable Data Types control system to achieve control of a A data type defines the size and charac-In addition to the pre-defined libraries, machine or a process. Each program is teristics of variables declared in a you can also develop your own libraries uniquely identified by a user-defined program, function or function block. of project elements. These libraries can type name. A TriStation 1131 project Data types used by the TriStation 1131 include programs, functions, function can support hundreds of programs. software include discrete (BOOL), blocks, and data types which can be Functions analog (DINT), and real (REAL). imported to other TriStation 1131 proj-A function is a logic element which Libraries ects.

yields exactly one result. Unlike a func-The TriStation 1131 software includes tion block, the data associated with a libraries of pre-defined functions, func-Programming Languages function is not retained from one evalu-tion blocks, and data types that can be The TriStation 1131 software includes ation of the function to the next. Func-used in a project. these programming languages: Func-tions do not have to be instanced. The TriStation 1131 software includes tion Block Diagram, Structured Text, these libraries: and Ladder Diagram. An optional language, CEMPLE, can be purchased separately.

72 Function Block Diagram (FBD)

Function Block Diagram is a graph-ical language that corresponds to circuit diagrams. FBD elements appear as blocks that are wired together to form circuits. The wires transfer binary and other types of data between elements.

Structured Text (ST)

Structure Text is a high-level, textual programming language that is similar to PASCAL. Structured Text allows Boolean and arithmetic expressions, and programming structures such as conditional (IFTHENELSE) statements. Functions and function blocks can be invoked in Structured Sample CEM from a TriStation 1131 Project Text. FBD in that they transfer only binary CEMPLE is the first automated imple-In the TriStation 1131 v4.0 software, data between the elements. mentation of CEM, a methodology that these structures were added: arrays, Cause and Effect Matrix is commonly used throughout the structures, ForLoo p and Exit state-Programming Language Editor process-control industry and readily ments, CASE statement, enumerated (CEMPLE) understood by a broad range of plant data types, var-external, and var-temp personnel. CEM diagrams are automat-variables. CEMPLE is a high-level graphical ically translated into IEC 61131-3 Ladder Diagram (LD) language that provides a two-dimen-compliant Function Block Diagrams, Ladder Diagram is a graphical sional matrix in which you can asso-thereby eliminating the risks associated language that uses a standard set of ciate a problem in a process with one or with manual translation from hand-symbols for representing relay logic. more corrective actions. The problem is drawn CEMs.

The basic elements are coils and referred to as the cause and the action as Controller Configuration contacts which are connected by links. the effect. The matrix associates a cause Links are different from the wires in with an effect in the intersection of the In the TriStation 1131 software, the cause row and the effect column. controller configuration identifies the modules in the system, communication settings, memory allocation for tagnames, and operating parameters.

These configuratio n settings are included in the control program that is downloaded to the controller.

Declaring Tagnames in a Program

73 TriStation 1131 Developer s Workbench

program version changes. This detailed log keeps track of user actions and comments by automatically time-stamping critical events within a session and manually logging user comments on demand.

Annotations Annotations can be added to constants, tagnames, and variables An annotation can be used to display descriptive text, including information specified in system and user-modifiable macros.

You can also display the value of a vari-able during program execution.

Comments Comments can be added to programs, functions, and function blocks to add information about the operations.

Help Documentation Emulator Panel The TriStation 1131 software features an extensive online Help system which Emulator Panel terminals. You can also specify the provides detailed information about directory location for files. TriStation 1131 features and functions.

The Emulator Panel allows you to connect to the Triconex Emulator, Reports and Documentation download the control program, and test The TriStation 1131 software includes and debug the control program. The multiple methods of sorting data and panel lists the programs, variables, and documenting project elements, both tagnames in the control program. during and after project development.

Testing can be done by dragging vari-Printouts of user-developed function ables and tagnames from the list to the blocks and programs can be obtained monitor panel and changing the values on a variety of user-selected engi-as desired. You can specify commands neering drawing templates.

to run the control program without Standard reports are available to docu-intervention, to run in single-step, or to ment the project configuration data.

halt the execution. You can also create customized reports Controller Panel with Crystal Reports'.

The Controller Panel allows connection Password Security to the controller for real-time execution The TriStation 1131 software provides of the control program. a security system th at defines users and TriStation 1131 Interface Options their privileges with regard to editing, The TriStation 1131 software allows library changes, state changes and other you to specify options to be used in the operations.

interface. For example, you can specify Project History the drawing colors used in the program-An audit trail function is provided to ming editors, and editor options such as document the history of a project and its double-spacing between function block

74 CEMPLE is theTr i c o n e xautomatedimplementationofthe traditional CEMmethodologythathasbeenusedbyprocess controlengineersfor decades.

CEMProgrammingLanguageEditor

Cause and Effect Matrix (CEM) is a

• Automatic conversion of matrix to Matrix methodology that is commonly used in Function Block Diagram language As the major component of the CEM the process control industry to define

• Customized view monitoring of Editor, the Matrix identifies the parts of alarms, emergency shutdown strate-active causes, intersections, and associated with cau ses, effects, and gies, and mitigation actions. For effects intersections. The Matrix can also decades, process control engineers include functions or function blocks have used manual methods such as

• Multiple levels of undo and redo related to causes, effects, and intersec-graph paper and spreadsheet programs editing tions.

to identify problem conditions and corrective actions.

CEM Editor FBD Network Automated CEM The CEM Editor includes the following The FBD Network displays the Func-components as shown in the figure tion Block Diagram (FBD) related to Called CEMPLE below: the cause, intersection, or effect that is The traditional CEM method is time- *Matrix selected in the matr ix. It can also be consuming and subject to errors caused used to specify properties and to invert by misinterpretation of the matrix or *FBD Network values for variables.

inaccurate coding. Triconex has auto-

• Variable Detail Table mated the CEM process with the Cause and Effect Matrix Program-Matrix rows and columns ming Language Editor, referred to as CEMPLE.

CEMPLE enables a cause and effect matrix to be used as the basis for a TriStation 1131 program.

CEMPLE Features CEMPLE includes the following features:

• Ability to specify up to 99 causes, 99 effects, and 1,000 intersections

• Ability to invoke functions and function blocks to evaluate cause, intersection, and effect states Variable Detail Table FBD Network

CEM Editor Components

75 CEM Programming Language Editor

many purposes, such as; evalu-ation of process input to deter-mine the cause state, calculating one or more process variable values based on the state of an effect, and using time delays.

User-created functions and function blocks, must be created and enabled for use before they can be included in a matrix.

Testing and Monitoring Like all TriStation 1131 programs, a matrix can be tested and debugged off-line using the Emulator Control Panel. After the project is downloaded, the Control Panel can be used to monitor the values of variables during real-time execution.

Instance View of a Matrix In an instance view of a matrix,

The FBD network uses internal boolean requires. In a basic matrix, causes are active causes, intersections, variables to save and move results to identified as true or false inputs related and effects can be viewed in a choice of associated cells so that causes and to one or more effects through the inter-colors.

effects can be evaluated. For each sections between them. The state of a As with other types of executable cause, effect, and intersection, an cause (true or false) determines the elements, values and variables can be internal variable is automatically state of the related effect. If more than set for use during emulation and real-created to store and move results one cause is related to an effect, the time execution.

between cells. state of the effect is based on how the matrix is evaluated.

Variable Detail Table The effect state can be determined in CEMPLE Tools The Variable Detail Table displays the either of two ways: by a logical AND A matrix can be developed and edited inputs and outputs of the FBD Network operation or by a logical OR operation using a variety of graphical interface that are generated when a cause, effect, on the intersection. A logical AND is methods. Commands can be selected or intersection is selected. typically used for de-energize to trip from a main menu, toolbar, and pop-up systems; a logical OR is typically used menu.

The variable type and data type can also for energize to trip systems. Variables can be added or renamed by be specified from the Variable Detail making changes in the Variable Detail Ta b l e. Using Functions and Table. Where appropriate, drop-down Function Blocks lists provide variable names or function Developing a Matrix For more complex processes, CEMPLE and function block names to be enables functions and function blocks selected.

A matrix created in CEMPLE can be as For more information, see the TriSta-basic or complex as the situation to be added to causes, effects, and inter-sections. This feature can be used for tion 1131 Developer s Guide.

76 Duringeachscan of the control program, the MainProcessorsexamine selecteddiscrete variablesfor state changes known as events.

SequenceofEvents(SOE)Capability

Triconex systems support the ability to associated with the tagname in the information about the event variable report, by exception, events that are Configuration file in the TriStation from the SOE definition file.

significant in your application. This 1131 software.

capability, called Sequence of Events These tasks are done in the TriStation (SOE), includes the following parts: 1131 software:

• Defining the discrete data items to Preparing Your System

• Defining SOE blocks with buffer be monitored through the TriStation for Event Collection size and block types 1131 application To enable the controller to detect

• Assigning event variables to the

• Monitoring and collecting events by events, event variables and SOE blocks SOE blocks the Triconex controller are identified in the TriStation 1131

• Adding SOE function blocks to the project. In addition, the project must program logic

• Retrieving the events from the include an SOE function block that Triconex controller using a host starts the event collection. Types of Event Variables system After an SOE-enabled project is down-The types of discrete variables that can The following host systems can be used loaded to the controller, the TriStation be designated as event variables are:

to retrieve event data: 1131 software creates an SOE defini-

• BOOL input

• Triconex SOE Recorder, a tion file that contains the SOE block Windows-based application that definitions.

• BOOL aliased memory variables runs on a PC When the SOE software collects an

• Safety Manager Module (SMM) for event from the contro ller, it obtains the Honeywell DCS systems tagname, alias, state name, and other

• Advanced Communication Module (ACM) for Foxboro DCS systems

• An OPC client control program which has implemented the Alarm and Events Handler as specified in the OPC standard version 1.0 Tricon Tricon Tricon 1 2 nn T T T T TT M M M C C M M M C C M M M C C With the Triconex SOE Recorder PPP MM PPP MM PPP MM A12BC A12BC A12BC software you can:

• Collect and analyze event data °°

• Export event database files

• Print reports with event data The SOE data file, which is output from the TriStation 1131 software, is only for SOE Recorder TriStation 1131 use with Triconex SOE Recorder. This file is read by the software and adds Tricon Network with SOE PC descriptive information which is

77 Sequence of Events (SOE) Capability

Configuring SOE Blocks An SOE block is a data structure that resides in the memory of a controller s Main Processors. Wh en SOE blocks are configured, the event variables to be detected by the controller are specified for each block.

The maximum individual block size is 20,000 events, with 60,000 events for all blocks. The block size is the amount of memory that the Main Processors reserve for recording of events.

When a block is co llecting events, the SOE Events File Main Processors write an event entry which includes the values of event vari-While the TriStation 1131 project is related to trip conditions, these vari-ables that changed during the current running, the SOE software can be used ables must be evaluated in combination scan and a time stamp. to analyze events online as it collects to determine the final state of the trip SOE Function Blocks them from the controllers. Snapshots of variable. When a trip event occurs, the SOE function blocks control and verify events that cover specific periods of SOE software can automatically create event collection for SOE blocks. The time before or after trips have occurred a trip snapshot. This snapshot is a file following function blocks are available: can also be saved. of events that occurred x minutes To analyze the event data, the Triconex before a trip and y minutes after a trip,

• SOESTRT starts event collectionSOE Recorder software includes tools based on the settings in the TriStation

• SOESTOP stops event collectionfor these tasks: 1131 software.

• SOESTAT checks status of SOE

• Finding events and copying them to blocks other Windows-based applications Time Synchronization

• SOECLR clears status of SOE

• Filtering and sorting saved event and Time Stamps blocks data In a typical Peer-to-Peer network, the The SOESTRT function block must be

• Specifying the display of point controllers synchronize their time with added to the TriStation 1131 program properties for event data the master node (the controller with the to identify the SOE blocks from which lowest node number) within +/-25 milli-events are to be collected. The other

• Viewing the properties of individual seconds. A controller recognizes SOE function blocks are optional. events events on a scan basis and time-stamps SOE Recorder also allows event data to each event at the begi nning of the scan.

SOE Software be exported to database or ASCII text Because the scans of the various files, either manually or automatically. controllers on the network are not SOE software can simultaneously A report engine and standard report are synchronized, the same event can be collect event data from as many as 31 included. logged by two controllers with networked controllers. It queries all the different time stamps. The worst-case controllers on the network to determine Trip Processing difference is the longer scan time plus which downloaded TriStation 1131 25 milliseconds.

projects include SOE blocks. If a A trip is a shutdown of the controlled project includes one or more SOE process, or a portion of the controlled Each day, the SOE software compares blocks, the software opens the appro-process. A TriStation 1131 project used its clock with the clock of each priate SOE definition file and begins for safety shutdown typically includes controller from which event data is collecting events fr om the associated one trip variable, whose state change being collected. If a controller s clock controller. initiates the shutdown activities. If a is out of sync by more than five project requires several variables minutes, a message is displayed in the SOE message bar.

78 Tr i c o n e xSafetyVi e wABMallowsyoutomonitorandmanage safetyalarms.

SafetyVi e wABM

Triconex Safety View Alarm and Functional Overview also retrieves alarm and process Bypass Management (ABM) is part of Safety View ABM depends on the condition information continuously the Triconex Safety View suite of appli-implementation of process alarms in the from the configured controllers and cations. Safety View ABM is used to safety controller using TriStation 1131. displays the collect ed information in monitor and acknowledge safety the Alarm Monitoring Application alarms, and bypass tagnames. The Safety View ABM supports alarm even when no user is logged on.

safety alarms are generated from field states and sequences as defined in the

• Safety View Database: The Safety devices connected to the safety control-ISA 18.1 - 2004 (R)-Annunciator View database stores configuration lers, and represent conditions impacting Sequences and Specifications standard. information, alarm state data, and the safety of the equipment under Safety View ABM allows you to: security information from the control. Safety View ABM also Configuration Component, the displays the current alarm state and

• Configure tagnames for alarm Alarm Monitoring Application, and process condition for all configured monitoring the controllers.

tagnames. The user interface, configu-

• Monitor alarms generated from rability, and bypass capabilities make controllers

• Alarm Monitoring Application:

Safety View ABM superior to tradi-The Alarm Monitoring Application tional safety monitoring tools.

• Retrieve alarm-related data from up is a managed InTouch application Safety View ABM supports compliance to 63 controllers simultaneously that is deployed to monitoring with NERC cyber security require-Safety View ABM is comprised of workstations via the Configuration ments, and is TÜV-approved for use several components, including the Component. It allows you to with SIL3 safety systems per IEC following: perform a number of alarm 61508 and IEC 61511. Safety View management functions.

ABM can be used with the following

• Configuration Component: The The Safety View ABM components are Triconex controllers: Safety View Configuration installed on designated PCs or servers Component allows you to add, in the supervisory network. The

• Tricon v9.x and laterdelete, update, import, and export Invensys ArchestrA' framework

• Trident v1.x and laterconfiguration settings for maintains the Safety View ABM controllers, users, tagnames, alarms, components and serves as the under-

• Triconex General Purpose (Tri-GP) and monitoring workstations. Once lying infrastructure that supports Safety v2.x and later configuration is complete, you Vi e w A B M.

Safety View ABM v1.0.0 supports the deploy the Alarm Monitoring following Windows operating systems: Application to the monitoring workstations.

• Windows Server 2003* Safety View Server : The Safety

• Windows Server 2008 SP2 (32-bit View server manages and 64-bit) communication with the controller, the Safety View database, and the

• Windows XP Professional SP3Alarm Monitoring Application. The

• Windows 7 Professional (32-bit and server sends commands from the 64-bit) Alarm Monitoring Application to the controller for processing and to the database for storage. The server

79 SafetyVi e wABM

Alarm Monitoring Application Features The Safety View ABM Alarm Moni-toring Application allows a plant oper-ator to view, manage, and bypass tagnames and safety alarms. It continu-ally updates alarm states and process conditions even when an operator is not logged in; user authentication is required to perform any operation. The Shift Change functionality re-activates all alarms acknowledged by an operator during the previous work shift.

The Safety View ABM Alarm Moni-toring Application allows you to:

• Acknowledge individual and group alarms

• Re-activate alarms acknowledged by an operator during the previous Example of the Configuration Component Interface work shift

• Clear first-out alarmsConfiguration Component

• Safety controllers

• Bypass and unbypass tagnamesFeatures

• Users, roles, and security

• Add and review notes for bypassed The Safety View ABM Configuration permissions tagnames Component is an Arch estrA object that

• Monitoring workstations and their is accessed from the ArchestrA IDE. It corresponding displays

• Silence audible alarmsallows you to add, delete, update,

• Reset alarms in the ringback stateimport, and export configuration

• Areas, lines of equipment (LoEs),

settings for the following: safety instrumented functions

• Print audit trail records (SIFs), and field devices

• Alarm colors and sounds

• Audit trail network printer

Example of the Alarm Monitoring Application Interface

80 PartNumberCrossReference

The table below identifies the external te rmination assembly (ETA) part number an d the cable part number for each termina-tion panel model number.

There are four cable types included in this table:

• FT4: Ninety-degree cables that meet FT4 fl ame test ratings. Add F at the end of the base model number to obtain the complete model number. For example, 9551-110F.

• Z: Zero-degree cables, designed to be used with G-Series Enclosures for Tricon systems that have front access. Add F-Z at the end of the base model number to obtain the complete model number. For example, 9551-110F-Z.

• LSZH: Low Smoke Zero Halogen ninety-degr ee cables. Add J at the end of the base model number to obtain the complete model number. For example, 9551-110J.

• FT1: Ninety-degree cables that were shipped with pre-FT4 ETP models. These models did not include a letter at the end of the base model number.

Part Number Cross-ReferenceETPs

Base Model # ETA FT4 Cable Z Cable LSZH Cable FT1 Cable (Old)

9551-110 3000400-160 4000187-110 4000192-110 4000140-110 4000093-110

9552-610 3000400-260 4000187-210 4000192-210 4000140-210 4000093-210

9553-610 3000400-360 4000187-310 4000192-310 4000140-310 4000093-310

9561-110 3000560-110 4000187-110 4000192-110 4000140-110 4000093-110

9561-810 3000510-180 4000187-110 4000192-110 4000140-110 4000093-110

9562-810 3000510-280 4000187-210 4000192-210 4000140-210 4000093-210

9563-810 3000510-380 4000187-310 4000192-310 4000140-310 4000093-310

9563-910 3000510-390 4000187-310 4000192-310 4000140-310 4000093-310

9565-810 3000540-280 4000187-210 4000192-210 4000140-210 4000093-210

9566-710 3000530-380 4000187-310 4000192-310 4000140-310 4000093-310

9566-810 3000540-380 4000187-310 4000192-310 4000140-310 4000093-310

9570-610 3000768-370 4000195-310 4000199-310 n/a 4000165-310

9571-610 3000768-390 4000195-310 4000199-310 n/a 4000165-310

9572-610 3000771-380 4000195-310 4000199-310 n/a 4000165-310

9651-110 3000410-160 4000188-110 4000193-110 4000141-110 4000094-110

9652-610 3000410-260 4000188-210 4000193-210 4000141-210 4000094-210

9653-610 3000410-360 4000188-310 4000193-310 4000141-310 4000094-310

9661-110 3000570-110 4000188-110 4000193-110 4000141-110 4000094-110

9661-510 3000550-160 4000188-110 4000193-110 4000141-110 4000094-110

81 Part Number Cross-Reference

Part Number Cross-ReferenceETPs (continued)

Base Model # ETA FT4 Cable Z Cable LSZH Cable FT1 Cable (Old)

9661-610 3000520-160 4000188-110 4000193-110 4000141-110 4000094-110

9661-810 3000550-180 4000188-110 4000193-110 4000141-110 4000094-110

9661-910 3000520-180 4000188-110 4000193-110 4000141-110 4000094-110

9662-110 3000570-310 4000188-310 4000193-310 4000141-310 4000094-310

9662-610 3000520-390 4000188-310 4000193-310 4000141-310 4000094-310

9662-710 3000550-390 4000188-310 4000193-310 4000141-310 4000094-310

9662-810 3000520-380 4000188-310 4000193-310 4000141-310 4000094-310

9662-910 3000550-380 4000188-310 4000193-310 4000141-310 4000094-310

9663-610 3000725-160 4000188-110 4000193-110 4000141-110 4000094-110

9664-110 3000726-110 4000188-110 4000193-110 4000141-110 4000094-110

9664-810 3000520-170 4000188-110 4000193-110 4000141-110 4000094-110

9667-110 3000570-710 4000188-210 4000193-210 4000141-210 4000094-210

9667-810 3000520-280 4000188-210 4000193-210 4000141-210 4000094-210

9667-910 3000550-280 4000188-210 4000193-210 4000141-210 4000094-210

9668-110 3000590-110 4000188-110 4000193-110 4000141-110 4000094-110

9670-110 3000290-110 4000203-110 4000204-110 n/a 4000111-110

9670-610 3000290-160 4000203-110 4000204-110 n/a 4000111-110

9671-610 3000769-390 4000196-310 4000200-310 n/a 4000166-310

9671-810 3000290-380 4000203-310 4000204-310 n/a 4000111-310

9672-810 3000290-280 4000203-210 4000204-210 n/a 4000111-210

9673-810 3000290-181 4000203-110 4000204-110 n/a 4000111-110

9750-210 3000420-120 4000206-510 4000207-510 n/a 4000093-510

9750-310 3000420-310 4000187-310 4000192-310 4000140-310 4000093-310

9750-410 3000420-410 4000187-210 4000192-210 4000140-210 4000093-210

9750-810 3000420-180 4000206-510 4000207-510 n/a 4000093-510

9753-110 3000400-510 4000189-510 4000191-510 4000142-510 4000103-510

9760-210 3000470-510 4000206-510 4000207-510 n/a 4000093-510

9760-410 3000470-530 4000206-510 4000207-510 n/a 4000093-510

9761-210 3000510-510 4000189-510 4000191-510 4000142-510 4000103-510

9761-410 3000510-530 4000189-510 4000191-510 4000142-510 4000103-510

9762-210 3000510-560 4000189-510 4000191-510 4000142-510 4000103-510

82 Part Number Cross-ReferenceETPs (continued)

Base Model # ETA FT4 Cable Z Cable LSZH Cable FT1 Cable (Old)

9762-410 3000510-580 4000189-510 4000191-510 4000142-510 4000103-510

9763-810 3000580-110 4000189-510 4000191-510 4000142-510 4000103-510

9764-310 3000712-200 4000189-510 4000191-510 4000142-510 4000103-510

9765-210 3000475-520 4000206-510 4000207-510 n/a 4000093-510

9765-610 3000580-230 4000189-510 4000191-510 4000142-510 4000103-510

9766-210 3000580-210 4000189-510 4000191-510 4000142-510 4000103-510

9766-510 3000580-220 4000189-510 4000191-510 4000142-510 4000103-510

9771-210 3000656-210 4000189-510 4000191-510 4000142-510 4000103-510

9782-110 3000767-280 4000189-510 4000191-510 4000142-510 4000103-510

9783-110 3000767-160 4000189-510 4000191-510 4000142-510 4000103-510

9784-610 3000767-220 4000197-510 4000201-510 n/a 4000164-510

9785-610 3000767-210 4000197-510 4000201-510 n/a 4000164-510

9786-110 3000767-230 4000197-510 4000201-510 n/a 4000164-510

9787-110 3000767-110 4000197-510 4000201-510 n/a 4000164-510

9789-610 3000768-510 4000209-510 4000208-510 n/a 4000165-510

9790-610 3000771-560 4000189-510 4000191-510 4000142-510 4000103-510

9791-610 3000771-510 4000197-510 4000201-510 4000142-510 4000164-510

9792-610 3000772-660 4000191-510 4000201-510 4000142-510 4000103-510

9793-110 3000767-115 4000201-510 4000191-510 n/a 4000164-510

9794-110 3000767-165 4000189-510 4000191-510 4000142-510 4000103-510

9795-610 3000771-460 4000191-510 4000194-510 4000142-510 4000103-510

9853-610 3000400-530 4000190-510 4000194-510 4000157-510 4000098-510

9860-610 3000770-610 4000194-510 4000202-510 4000157-510 4000098-510

9861-610 3000770-560 4000202-510 4000194-510 n/a 4000163-510

9863-710 1600049-010 4000194-510 4000202-510 4000157-510 4000098-510 1600049-100

9871-810 3000818-560 4000202-510 4000194-510 n/a 4000163-510

9881-810 3000818-660 4000194-510 4000192-110 4000157-510 4000098-510

83 Notes Glossary

cause The symbol which represents ohm. In CEM methodology, a cause is a problem to be solved by the matrix.

The symbol which represents micro. CEM Stands for Cause and Effect Matrix which is a two-A dimensional matrix for the development of safety control Abbreviation for amp. programs. In this type of matrix, causes are represented by rows and effects are represented by columns.

alias A five-digit number which identifies the data type and CE Mark hardware address of a point in the Triconex controller. A type of certification by the European Union which Alias is a convention of Modbus which is a communica-ensures the electro-magnetic compatibility of Triconex tion protocol available with Triconex communication controllers with other pieces of electrical and electronic modules. equipment.

control program CEMPLE A control program is the compiled code (built from A language editor in the TriStation 1131 Developer's program elements and configuration information in a Workbench that allows you to develop CEMs for safety TriStation 1131 project) that is downloaded to and runs in shutdown applications.

a Triconex controller.

communication modules ASIC Modules that enable the Triconex controllers to commu-Stands for Application Specific Integrated Circuit. nicate with host computers. Invensys offers communica-tion modules with Ethernet and serial protocol.

AT E X Stands for Atomsphres Explosibles and refers to the configuration European Union Directive 94/9/EC, which is one of a In the TriStation 1131 software, the modules and settings number of new approach directives developed by the used in a Triconex controller, including Main Processors, European Union and covers all equipment and protective communication and I/O modules, field termination systems intended for use in potentially explosive atmo-panels, and memory and module settings.

spheres.

control system availability The system which governs the operation of plant, The probability that the control system is operational at machinery, or other equipment by producing appropriate some instance of time. instructions in response to input signals.

bin controller An address range of aliased variables in Triconex A Triconex controller includes Main Processors, controllers, based on Class and Type combinations. communication and I/O modules, and field termination devices.

board See module. DCS Stands for distributed control system, which is a system card that controls a process and pr ovides status information to See module. an operator.

85 Glossary

DDE programs are structured by groups of interconnected Stands for Dynamic Data Exchange (DDE) which is an elements (networks), allowing the integration of function interprocess communication mechanism provided by and function blocks.

Microsoft Windows. Windows-based applications can use DDE to send and receive data and instructions to and HART from each other. Highway Addressable Remote Transducer protocol is a bi-directional industrial field communication protocol debug used to communicate between intelligent field instru-The act of locating and correc ting faults: 1) one of the ments and host systems over 4-20 mA instrumentation normal operations in software development such as wiring.

editing, compiling, debugging, loading, and verifying; or

2) the identification and isolation of a faulty physical hazardous location component, including its repl acement or repair to return Any location that contains, or has the potential to contain, the PLC to operational status. an explosive or flammable atmosphere.

effect host In CEM methodology, an effect is an action that must be See external device.

taken to solve a cause (problem).

hot-spare event A unique feature of Triconex controllers which allows A state change of a discrete aliased variable which has spare I/O modules to be installed with automatic switch been designated for event logging. An event occurs when to the spare in case the primary module fails.

a variable changes from the normal state to another state.

IEEE event logger Stands for the Institute of El ectrical and Electronics Engi-A utility that logs, displays, and prints critical events in neers (IEEE) which is a prof essional society for engi-real time, based on state changes of discrete variables in neers.

the user-written control progr am. Proper use of an event logger warns users about dangerous conditions and print-IEC 61131-3 outs of events can help identify the sequence of events The part of the IEC 61131 standard for programmable that led to a trip. controllers that specifies th e syntax and semantics of a unified suite of programming languages for program-event variable mable controllers.

A discrete memory variable or discrete input point that has been assigned to an SOE block. input poll time The time required by the Tricon ex controller to collect external device input data from the controlled process. Input polling is A device (PC, server, printer, or other device) that asynchronous and overlaps execution of the user-written communicates with the Tricon controller over a network. control program.

fault tolerance instance view The ability to identify and compensate for failed control In the TriStation 1131 software, the Emulator Control system elements and allow re pair while continuing an Panel and Triconex Control Panel displays the values of assigned task without process interruption. Fault toler-annotated variables while a TriStation 1131 project is ance is achieved by incorporating redundancy and fault running. In an instance view, you can change the values masking. of variables during emulation or real-time execution.

FBD intermittent fault Stands for Function Block Diagram which is a graphical A fault or error that is onl y occasionally present due to programming language that corresponds to circuit unstable hardware or varying software states.

diagrams. Used for connective programming, FBD

86 Glossary

intersection including the time taken to repair the system. Usually In CEMPLE, a cell in a matr ix where a cause row inter-expressed in hours.

sects an effect column.

MTTF intersection function Stands for Mean Time To Failure which is the expected In CEMPLE, a function or function block that can be average time to a system failure in a population of iden-selected from a list in the In tersection cell of a cause row tical systems. Usually expressed in hours.

and an effect row.

MTTR ISO Stands for Mean Time To Repair which is the expected Stands for the International Organization for Standard-time to repair a failed system or subsystem. Usually ization (ISO) which is a worldwide federation of national expressed in hours.

standards bodies (ISO member bodies) that promulgates standards affecting international commerce and commu-node nications. Any of the machines on a network. In this document, node usually means a Triconex controller.

LD Stands for Ladder Diagram, which is a graphical node number programming language that uses a set of symbols to The physical address of a node.

represent relay logic. Modu les are defined by their connection to a left and right power rail. nonincendive Not capable of igniting a flammable gas or vapor under logical slot normal operating conditions.

In a Triconex chassis, a logical slot is a repository for a primary module, a hot-spare mo dule, and their associated open network field termination component. A network to which an external host can be connected.

m output poll time Abbreviation for milli. The time required by the Tric onex controller to imple-ment the outputs generated by the user-written control Markov model program in response to inputs from the controlled A generalized modeling technique which can be used to process.

represent a system with an arbitrary number of modules, failure events, and repair events. A Markov model can be Peer-to-Peer mathematically solved to produce a resultant probability. A protocol that allow multiple Triconex controllers on a proprietary network to exchange limited amounts of matrix process and safety information.

1. A CEM program

2. A traditional methodology for ESD applications which program associates a problem (cause) in a process with one or 1. The set of instructions, commands, and/or directions more actions (effects) that must be taken to correct the that define the Triconex controller s output signals in problem. terms of input signals. 2. Th e act of creating such a set of instructions using the relay ladder language of the TriSta-module tion 1131 programming software.

An active field-replaceable un it consisting of an elec-tronic circuit assembly housed in a metal spine. Also protocol called board or card. A set of rules describing the format used for data exchange between two entities.

MTBF Stands for Mean Time Between Failure which is the expected average time betw een failures of a system,

87 Glossary

reliability TMR The probability that no failur e of the system will have Stands for Triple-Modular Redundant architecture, which occurred in a given period of time. allows Triconex controllers to achieve fault tolerance.

The complete system is tripli cated; each of the three iden-scan time tical systems is called a le g. Each leg independently The period of the Triconex controller s cycle of required executes the user-written cont rol program in parallel with control functions. Scan time is composed of three the other legs.

elements:

• Input poll time (asynchronous with execution of the trip user-written control program) A safety-related shutdown of the controlled process or a

• The time required to execute the user-written control portion of the controlled process.

program TriStation 1131

• Output poll time Software for developing and downloading user-written control programs and for performing maintenance and ST diagnostics.

Stands for Structured Text, which is a high-level programming language used for complex arithmetic TriStation protocol calculations and procedures th at are not easily expressed A master/slave protocol used by the TriStation 1131 soft-in graphical languages. ware for communication with Triconex controllers.

system TÜV Rheinland Consists of a set of components which interact under the TÜV stands for Technischer Überwachungs-Verein control of a design. which translates to Technical Supervisory Association. In Germany, TÜV Rheinland is an authorized technical TCP/IP inspection agency for a wi de variety of products, Stands for Transmission Control Protocol/Internet processes, installations, plants and equipment.

Protocol (TCP/IP) which are protocols for the Transport and Network layers of the OSI network model. TCP/IP UDP/IP provides reliable, sequenced data delivery. Stands for User Datagram Protocol/Internet Protocol (UDP/IP) which are protocols for the Transport and Time Synchronization Network layers of the OSI network model. UDP/IP A Triconex protocol used to establish and maintain a provides best-effort datagram delivery.

synchronized, network-wide time basis. Time can be synchronized with the master node in a network of Tricon voting or Trident controllers, with a distributed control system A mechanism whereby each leg of a TMR system (DCS), or with an OPC client/server control program. compares and corrects the data in each leg using a two-out-of-three majority voting scheme.

transient fault A fault or error resulting from a temporary environmental condition.

88