Safety Considerations Guide for Triconex General ... - ICEWeb
Safety Considerations Guide for Triconex General ... - ICEWeb Safety Considerations Guide for Triconex General ... - ICEWeb
18 Chapter 2 Application Guidelines Emergency Shutdown Systems The safe state of the plant should be a de-energized or low (0) state. All power supplies should be monitored for proper operation. Burner Management Systems The safe state of the plant is a de-energized or low (0) state. When a safety system is required to conform to the EN 50156 standard for electrical equipment for furnaces, PES throughput time should ensure that a safe shutdown can be performed within one second after a problem in the process is detected. Fire and Gas Systems Fire and gas applications should operate continuously to provide protection. The following industry guidelines apply: • If inputs and outputs are energized to mitigate a problem, a PES system should detect and alarm open and short circuits in the wiring between the PES and the field devices. • An entire PES system should have redundant power supplies. Also, the power supplies that are required to activate critical outputs and read safety-critical inputs should be redundant. All power supplies should be monitored for proper operation. • De-energized outputs may be used for normal operation. To initiate action to mitigate a problem, the outputs are energized. This type of system shall monitor the critical output circuits to ensure that they are properly connected to the end devices. Safety Considerations Guide for Triconex General Purpose v2 Systems
Guidelines for Triconex Controllers 19 Guidelines for Triconex Controllers This section provides information about industry guidelines that are specific to Triconex controllers when used as a PES in an SIS: • Safety-Critical Modules on page 19 • Safety-Shutdown on page 20 • Response Time and Scan Time on page 20 • Disabled Points Alarm on page 20 • Disabled Output Voter Diagnostic on page 20 • Download All at Completion of Project on page 20 • Modbus Master Functions on page 20 • Triconex Peer-to-Peer Communication on page 20 • SIL2 Guidelines on page 22 • Periodic Offline Test Interval Guidelines on page 23 • Project Change and Control on page 23 • Maintenance Overrides on page 24 • Safety Controller Boundary on page 27 Safety-Critical Modules It is recommended that only the following modules be used for safety-critical applications: • Main Processor Module • Communication Module (only when using protocols defined for safety-critical applications) • Analog Input Module • Analog Input/Digital Input Module • Analog Output Modules • Digital Input Modules • Digital Output Modules • Pulse Input Module The Solid-State Relay Output Module is recommended for non-safety-critical points only. Safety Considerations Guide for Triconex General Purpose v2 Systems
- Page 1 and 2: Triconex General Purpose v2 Systems
- Page 3 and 4: Contents Preface vii Summary of Sec
- Page 5 and 6: Contents v Partitioned Processes. .
- Page 7 and 8: Preface This guide provides informa
- Page 9 and 10: Preface ix • All other requests a
- Page 11 and 12: 1 Safety Concepts Overview 2 Hazard
- Page 13 and 14: Overview 3 Protection Layers Method
- Page 15 and 16: Hazard and Risk Analysis 5 Hazard a
- Page 17 and 18: Hazard and Risk Analysis 7 Sample S
- Page 19 and 20: Hazard and Risk Analysis 9 Safety L
- Page 21 and 22: Hazard and Risk Analysis 11 • Eac
- Page 23 and 24: Safety Standards 13 CAN/CSA-C22.2 N
- Page 25 and 26: 2 Application Guidelines Overview 1
- Page 27: General Guidelines 17 General Guide
- Page 31 and 32: Guidelines for Triconex Controllers
- Page 33 and 34: Guidelines for Triconex Controllers
- Page 35 and 36: Guidelines for Triconex Controllers
- Page 37 and 38: Guidelines for Triconex Controllers
- Page 39 and 40: Guidelines for Triconex Controllers
- Page 41 and 42: 3 Fault Management Overview 32 Syst
- Page 43 and 44: System Diagnostics 33 System Diagno
- Page 45 and 46: Operating Modes 35 Operating Modes
- Page 47 and 48: Module Diagnostics 37 Analog Output
- Page 49 and 50: Module Diagnostics 39 Calculation f
- Page 51 and 52: Module Diagnostics 41 External Comm
- Page 53 and 54: 4 Application Development Developme
- Page 55 and 56: Development Guidelines 45 Array Ind
- Page 57 and 58: Setting Scan Time 47 application. T
- Page 59 and 60: Sample Safety-Shutdown Programs 49
- Page 61 and 62: Sample Safety-Shutdown Programs 51
- Page 63 and 64: Sample Safety-Shutdown Programs 53
- Page 65 and 66: Sample Safety-Shutdown Programs 55
- Page 67 and 68: Sample Safety-Shutdown Programs 57
- Page 69 and 70: Alarm Usage 59 Alarm Usage To imple
- Page 71 and 72: A Triconex Peer-to-Peer Communicati
- Page 73 and 74: Data Transfer Time 63 Data Transfer
- Page 75 and 76: Data Transfer Time 65 A typical dat
- Page 77 and 78: Examples of Peer-to-Peer Applicatio
<strong>Guide</strong>lines <strong>for</strong> <strong>Triconex</strong> Controllers 19<br />
<strong>Guide</strong>lines <strong>for</strong> <strong>Triconex</strong> Controllers<br />
This section provides in<strong>for</strong>mation about industry guidelines that are specific to <strong>Triconex</strong><br />
controllers when used as a PES in an SIS:<br />
• <strong>Safety</strong>-Critical Modules on page 19<br />
• <strong>Safety</strong>-Shutdown on page 20<br />
• Response Time and Scan Time on page 20<br />
• Disabled Points Alarm on page 20<br />
• Disabled Output Voter Diagnostic on page 20<br />
• Download All at Completion of Project on page 20<br />
• Modbus Master Functions on page 20<br />
• <strong>Triconex</strong> Peer-to-Peer Communication on page 20<br />
• SIL2 <strong>Guide</strong>lines on page 22<br />
• Periodic Offline Test Interval <strong>Guide</strong>lines on page 23<br />
• Project Change and Control on page 23<br />
• Maintenance Overrides on page 24<br />
• <strong>Safety</strong> Controller Boundary on page 27<br />
<strong>Safety</strong>-Critical Modules<br />
It is recommended that only the following modules be used <strong>for</strong> safety-critical applications:<br />
• Main Processor Module<br />
• Communication Module (only when using protocols defined <strong>for</strong> safety-critical<br />
applications)<br />
• Analog Input Module<br />
• Analog Input/Digital Input Module<br />
• Analog Output Modules<br />
• Digital Input Modules<br />
• Digital Output Modules<br />
• Pulse Input Module<br />
The Solid-State Relay Output Module is recommended <strong>for</strong> non-safety-critical points only.<br />
<strong>Safety</strong> <strong>Considerations</strong> <strong>Guide</strong> <strong>for</strong> <strong>Triconex</strong> <strong>General</strong> Purpose v2 Systems
Change language