Safety Manager Safety Manual - Tuv-fs.com

3 – Safety Manager fault detection and response
SM Controller faults
Below topics provide an overview of detected Controller faults and the Controller
response to these faults.
QPP faults
Table 4 on page 22 provides an overview of faults that the Controller detects
related to the QPP and the response to these faults.
Table 4 Controller response to QPP faults
QPP faults
Non redundant Redundant Controller response
related to diagnostics report includes
Controller
response
CP X( faulty) CP Y (not faulty)
temperature monitoring high alarm or low alarm none -continue none -continue
(set points user
configurable)
high-high alarm or
low-low alarm
1 sensor faulty and temp.
more than 3 degrees from
shutdown limits
1 sensor faulty and temp.
less than 3 degrees from
shutdown limits
halt Controller halt CP none -continue
none -continue
none -continue
halt Controller halt CP none -continue
Memory QPP memory halt Controller halt CP none -continue
Execution
execution time out of halt Controller halt CP none -continue
range / failure
error on logical sheet
halt Controller
Watchdog output shorted halt Controller halt CP none -continue
de-energized watchdog
line for redundant outputs
halt Controller halt CP none -continue
de-energized watchdog
line for non-redundant
outputs
halt Controller
de-energize non redundant outputs,
continue operation on redundant
outputs
Watchdog faulty halt Controller halt CP none -continue
Bus drivers
Internal link
QPP module
secondary switch-off faulty halt Controller halt CP none -continue
22 Release 131, Issue 4.2