Safety Manager Safety Manual - Tuv-fs.com

SM Controller faults
Table 7 Controller response to PSU faults
PSU faults
Non redundant Redundant Controller response
related to diagnostics report includes
Controller
response
CP X( faulty) CP Y (not faulty)
Voltage monitoring spurious watchdog interrupt halt Controller halt CP none -continue
module faulty PSU module
Communication faults
Note
Please note that a fault in the communication links may be caused by USI modules.
communication faults
Related to
broken link
wrong protocol assigned
time-out
Table 9 on page 27 provides an overview of faults that can be detected in relation
to communication and the response to these faults.
Table 8 Controller response to communication faults
Diagnostic message
reports
communication
fault
Non redundant
communication or
“shared CP”
Controller
response *
apply FR state to
COM & FSC inputs
of that channel
if channel belongs
to active clock
source, switch to
other clock source
too many data requests USI module faulty apply FR state to
COM & FSC inputs
of that USI
data mismatch between
inputs ****
(SafeNet redundant)
data mismatch between
inputs****
(redundant Experion or
Modbus)
Redundant communication
Controller response
CP X(faulty)
CP Y(not faulty
continue
communication via
healthy link **
use values from
CP Y for affected
COM and FSC
inputs ***
compare error n.a. apply FR state
n.a.
none -continue
values received by CP2 prevail.
Safety Manager Safety Manual 25