AADvance Safety Manual - Tuv-fs.com

AADvance Safety ManualAnalogue input module process value = a calculated value based on a count value of 0 (51 counts = 0.2mA) line fault = TRUE Discrepancy= TRUE Channel Fault = TRUE Count value = 0In safety critical applications, the discrepancy alarms shall be monitored by theapplication program and be used to provide an alarm to the plant operations personneland the channel goes into a shutdown state.Output Module Safety FunctionsSafety FunctionsThe digital output module is rated at SIL3 as a fail-safe module. In dual redundantconfigurations it can be used for energize to action and de-energize to trip SIL3applications. Each module provides the following safety functions: output channel signals based on commands from the processor redundant voltage and current measurements to the processor modules formonitoring and diagnostics over current and over voltage channel protection executing diagnostic tests (on command from the processor module) and reportingresults back to the processor module On power up or module insertion all output channels are set to the de-energized(fail-safe) state until command states are received from the processor. Eachchannel is driven individually according to the command state values.Reactions to faults in output modulesWhen an output module goes faulty the following status information is reported: module presence module health and status channel health and status field faults an echo of the front panel indicators for each moduleWhen any of the following internal conditions exist the output module will always failsafe: internal software error detected by the FPGA power feed combiner over temperature detection power supply rails out of tolerance5-22 Document number 553630 Issue 7: February 2010