1756-RM001B-EN-P, Using ControlLogix in SIL2 ... - Tuv-fs.com
1756-RM001B-EN-P, Using ControlLogix in SIL2 ... - Tuv-fs.com 1756-RM001B-EN-P, Using ControlLogix in SIL2 ... - Tuv-fs.com
8-4 General Requirements for Application SoftwareForcingForcing must be disabled after system test and validation.SecurityThe user must define what measures are to be applied for theprotection against manipulation.In the ControlLogix system and in RSLogix 5000, protectionmechanisms are available that prevent unintentional or unauthorizedmodifications to the safety system:• The following tools may be employed for security reasons in aSIL2-certified ControlLogix application:– Logix CPU Security Tool– Source Protection Tool– RSI Security ServerEach of these tools offers different security features, includingpassword protection, at varying levels of granularity throughoutthe application. The description of these tools is too large inscope to list here. Users can contact their local RockwellAutomation representative for more information.• The controller keyswitch should be in the RUN position and thekey removed during normal operating conditions.• Operator options are set up per user login in the ControlLogixsystem.• The link between RSLogix 5000 and the ControlLogix system isnot permitted during normal SIL2 RUN operation.The requirements of the safety and application standards regardingthe protection against manipulations must be observed. Theauthorization of employees and the necessary protection measures arethe responsibility of the individuals starting the system.Publication 1756-RM001B-EN-P - October 2003
General Requirements for Application Software 8-5ControlLogix SystemOperational ModesA three-position keyswitch on the front of the controller governsControlLogix system operational modes. The following modes areavailable:• Run• Program• Remote - This software-enabled mode can be program or run.Figure 8.1 shows a controller with the keyswitch in the Run mode.Figure 8.142525When a SIL2-certified ControlLogix application is operating in the Runmode, the controller keyswitch must be in the RUN position and thekey removed. Outputs are only enabled in this mode.Publication 1756-RM001B-EN-P - October 2003
- Page 30 and 31: 2-4 The ControlLogix SystemData Ech
- Page 32 and 33: 2-6 The ControlLogix SystemSoftware
- Page 34 and 35: 2-8 The ControlLogix SystemNotes:Pu
- Page 36 and 37: 3-2 ControlLogix System HardwareCon
- Page 38 and 39: 3-4 ControlLogix System HardwareRec
- Page 40 and 41: 3-6 ControlLogix System HardwareNot
- Page 42 and 43: 4-2 ControlLogix ControllerRecommen
- Page 44 and 45: 5-2 ControlLogix Communications Mod
- Page 46 and 47: 5-4 ControlLogix Communications Mod
- Page 48 and 49: 6-2 ControlLogix I/O ModulesFigure
- Page 50 and 51: 6-4 ControlLogix I/O ModulesModule
- Page 52 and 53: 6-6 ControlLogix I/O ModulesWiring
- Page 54 and 55: 6-8 ControlLogix I/O ModulesGeneral
- Page 56 and 57: 6-10 ControlLogix I/O ModulesWiring
- Page 58 and 59: 6-12 ControlLogix I/O ModulesApplic
- Page 60 and 61: 6-14 ControlLogix I/O Modules• Ch
- Page 62 and 63: 6-16 ControlLogix I/O ModulesWiring
- Page 64 and 65: 6-18 ControlLogix I/O ModulesWiring
- Page 66 and 67: 6-20 ControlLogix I/O ModulesUsing
- Page 68 and 69: 6-22 ControlLogix I/O ModulesFigure
- Page 70 and 71: 6-24 ControlLogix I/O ModulesWiring
- Page 72 and 73: 6-26 ControlLogix I/O ModulesCheckl
- Page 74 and 75: 7-2 Faults in the ControlLogix Syst
- Page 76 and 77: 7-4 Faults in the ControlLogix Syst
- Page 78 and 79: 8-2 General Requirements for Applic
- Page 82 and 83: 8-6 General Requirements for Applic
- Page 84 and 85: 9-2 Technical SIL2 Requirements for
- Page 86 and 87: 9-4 Technical SIL2 Requirements for
- Page 88 and 89: 9-6 Technical SIL2 Requirements for
- Page 90 and 91: 9-8 Technical SIL2 Requirements for
- Page 92 and 93: 10-2 Use and Application of Human t
- Page 94 and 95: 10-4 Use and Application of Human t
- Page 96 and 97: A-2 Response Times in ControlLogixE
- Page 98 and 99: A-4 Response Times in ControlLogixR
- Page 100 and 101: B-2 System Self-Testing and User-Pr
- Page 102 and 103: C-2 Additional Information on Handl
- Page 104 and 105: D-2 Spurious Failure EstimatesNotes
- Page 106 and 107: E-2 Sample Probability of Failure o
- Page 108 and 109: E-4 Sample Probability of Failure o
- Page 110: 2 IndexMMean time between failures
General Requirements for Application Software 8-5<strong>ControlLogix</strong> SystemOperational ModesA three-position keyswitch on the front of the controller governs<strong>ControlLogix</strong> system operational modes. The follow<strong>in</strong>g modes areavailable:• Run• Program• Remote - This software-enabled mode can be program or run.Figure 8.1 shows a controller with the keyswitch <strong>in</strong> the Run mode.Figure 8.142525When a <strong>SIL2</strong>-certified <strong>ControlLogix</strong> application is operat<strong>in</strong>g <strong>in</strong> the Runmode, the controller keyswitch must be <strong>in</strong> the RUN position and thekey removed. Outputs are only enabled <strong>in</strong> this mode.Publication <strong>1756</strong>-<strong>RM001B</strong>-<strong>EN</strong>-P - October 2003