AADvance Safety Manual - Tuv-fs.com

AADvance Safety ManualProcessor Functional Safety ConfigurationThe 9110 Processor Module supports a limited set of configuration options; the systemwill verify the hardware configuration, such as the module locations against actualmodule types. The processor module process safety time can be specified through theWorkbench.Make sure that all specified modules for the required configuration are present andinstalled.Processor Safety FunctionsSafety functionsThe processor module is classified as safety critical and is responsible for the followingsafety functions: solving application logic external communication (Ethernet and serial) communication with I/O modules such as receiving input values, sending outputvalues, coordinating diagnostics enforcement of system PST diagnostics, fault indications and degradation of the processor module enforcement of input PST diagnostics, fault indications and degradation of input modules initiating diagnostics, fault declaration and for some fault conditions thedegradation of output modules.Reaction to faults in the processor moduleThe processor module reports faults by front panel indicators and fault codes stored inthe System Event log. The key indicator SYSTEM HEALTHY reports a fault in any ofthe I/O modules and any processor module. They report to the user application by thevariables set up during the system configuration process. These variables provide thefollowing information: module presence module health and status channel health and status an echo of the front panel indicationsAvailability of processor modulesOne to three redundant processor modules can be installed into a base unit.Thesystem remains functional even if two of three modules are faulty or not present.When two or more processor modules are installed the controller can be configuredfor a SIL3 fault tolerant application.5-18 Document number 553630 Issue 7: February 2010