Allen-Bradley OptiSIS 1711-P05SISID050S User manual

OptiSIS Safety Instrumented System
Catalog Numbers 1711-P05SISID050S, 1711-P05SISID050T, 1711-P05SISOD050S, 1711-P05SISOD050T, 1711-P05SISID100S,
1711-P05SISID100T, 1711-P05SISOD100S, 1711-P05SISOD100T
User Manual
Original Instructions

Important User Information
Read this document and the documents listed in the additional resources section about installation, configuration, and
operation of this equipment before you install, configure, operate, or maintain this product. Users are required to
familiarize themselves with installation and wiring instructions in addition to requirements of all applicable codes, laws,
and standards.
Activities including installation, adjustments, putting into service, use, assembly, disassembly, and maintenance are
required to be carried out by suitably trained personnel in accordance with applicable code of practice.
If this equipment is used in a manner not specified by the manufacturer, the protection provided by the equipment may
be impaired.
In no event will Rockwell Automation, Inc. be responsible or liable for indirect or consequential damages resulting from
the use or application of this equipment.
The examples and diagrams in this manual are included solely for illustrative purposes. Because of the many variables and
requirements associated with any particular installation, Rockwell Automation, Inc. cannot assume responsibility or
liability for actual use based on the examples and diagrams.
No patent liability is assumed by Rockwell Automation, Inc. with respect to use of information, circuits, equipment, or
software described in this manual.
Reproduction of the contents of this manual, in whole or in part, without written permission of Rockwell Automation,
Inc., is prohibited
Throughout this manual, when necessary, we use notes to make you aware of safety considerations.
Labels may also be on or inside the equipment to provide specific precautions.
WARNING: Identifies information about practices or circumstances that can cause an explosion in a hazardous
environment, which may lead to personal injury or death, property damage, or economic loss.
ATTENTION: Identifies information about practices or circumstances that can lead to personal injury or death, property
damage, or economic loss. Attentions help you identify a hazard, avoid a hazard, and recognize the consequence.
IMPORTANT Identifies information that is critical for successful application and understanding of the product.
SHOCK HAZARD: Labels may be on or inside the equipment, for example, a drive or motor, to alert people that dangerous
voltage may be present.
BURN HAZARD: Labels may be on or inside the equipment, for example, a drive or motor, to alert people that surfaces may
reach dangerous temperatures.
ARC FLASH HAZARD: Labels may be on or inside the equipment, for example, a motor control center, to alert people to
potential Arc Flash. Arc Flash will cause severe injury or death. Wear proper Personal Protective Equipment (PPE). Follow ALL
Regulatory requirements for safe work practices and for Personal Protective Equipment (PPE).

Rockwell Automation Publication 1711-UM004C-EN-P - April 2018 3
Table of Contents
Preface
About This Publication. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Summary of Changes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Terminology. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
About the OptiSIS Solution. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Catalog Numbers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
I/O Configurations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Enclosure Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Additional Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Chapter 1
Safety Requirements Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Safety Architecture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Fail-safe System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Fault Tolerant System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Safe State . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Process Safety Lifecycle, Functional Testing, and Validation . . . . . . 13
Safety Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
PFD/PFH Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Password Protection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Program Enable Key. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Certification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Chapter 2
Installation Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Unpack. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Inspection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Storage and Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Wall Mount — 50 I/O Solution . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Floor Mount — 100 I/O Solution . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Chapter 3
Connect Power Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Power Distribution and Grounding. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Power Cable Types/Recommendations . . . . . . . . . . . . . . . . . . . . . . . . . 24
Cable Entry. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Bottom Entry Conduit. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Cable Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Lugs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Power Layout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

4Rockwell Automation Publication 1711-UM004C-EN-P - April 2018
Table of Contents
Chapter 4
Connect Field Wiring Grounding Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Input Wiring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Analog Output Wiring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Digital and Relay Output Wiring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Contact Derating. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Chapter 5
Startup First-time Powerup. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Navigation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Operator. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Maintenance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Alarm . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Warning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Help. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Connect Peripherals. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Application Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Configure User Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
Log Out Current User . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Chapter 6
Configure I/O Configure I/O Points. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
Configure an I/O . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Configure Analog Input Characteristics . . . . . . . . . . . . . . . . . . . . . 46
Configure Digital Input Characteristics . . . . . . . . . . . . . . . . . . . . . 50
Configure Analog Output Characteristics . . . . . . . . . . . . . . . . . . . 55
Configure Digital Output Characteristics . . . . . . . . . . . . . . . . . . . 58
Validate Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
Chapter 7
Configure Logic Using Cause and Effect Charts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62
Configuration Methods. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
Configure Cause and Effect Charts by Using
the HMI Display . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
Back up and Restore . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
Chapter 8
Communication Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
IP Addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
Using Modbus Communication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
HART Protocol. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
HART Data Over Modbus Network. . . . . . . . . . . . . . . . . . . . . . . . 72
HART Device Management by Using an AMS . . . . . . . . . . . . . . 73

Rockwell Automation Publication 1711-UM004C-EN-P - April 2018 5
Table of Contents
Chapter 9
Operation Monitor System State. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
System Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
I/O Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
View Alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
View Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
Reset after Trip . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
Reset by Using the HMI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
Reset by Using Supplied Modbus Point. . . . . . . . . . . . . . . . . . . . . . 92
Chapter 10
Maintenance Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
Technical Support Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
Opening the Enclosure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
Repair Procedures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94
Electrostatic Precautions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94
Processor Module Battery Replacement . . . . . . . . . . . . . . . . . . . . . . . . . 94
Reset OptiSIS Solution Default Settings . . . . . . . . . . . . . . . . . . . . . . . . 96
Change Date and Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96
Preparing Your OptiSIS Solution for Upgrades . . . . . . . . . . . . . . . . . . 97
Appendix A
Offline Configuration Tool Begin Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100
General Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100
Configure Inputs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101
Configure Outputs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
Configure Cause and Effect Charts . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105
Save Configuration File. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
Edit a Configuration File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108
Load or Restore Configuration File . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
Appendix B
Specifications SIL Capability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
Hardware Architecture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
I/O Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
I/O Characteristics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112
System Power . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112
Environmental . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
Performance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
Communication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
Approximate Dimensions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
Appendix C
Spare Parts List Recommended Spare Parts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 115

6Rockwell Automation Publication 1711-UM004C-EN-P - April 2018
Table of Contents
Appendix D
Safety Checklist Checklist . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117
Appendix E
Modbus Communication Address Modbus RTU Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119
OptiSIS Solution Modbus Map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153

Rockwell Automation Publication 1711-UM004C-EN-P - April 2018 7
Preface
About This Publication The OptiSIS® solution is a ready to install configurable logic solver for use in
safety instrumented system (SIS) applications. Once installed and wired, it can
be configured and tested to provide a complete SIS solution that can meet
application requirements up to SIL 3.
This manual is intended for engineers or technicians that are directly involved
in the installation, connection, use, and maintenance of the OptiSIS solution.
Summary of Changes This manual contains new and updated information as indicated in the
following table.
ATTENTION: To meet any claimed safety integrity level, the OptiSIS solution
must be applied by following the Process Safety Lifecycle phases that are
defined in these resources:
• IEC 61511
• Other applicable sector Functional Safety standards
• Any application sector codes
• This user manual
ATTENTION: To operate the touch screen, use a finger, gloved finger, or
plastic stylus with a minimum tip radius of 1.3 mm (0.051 in.). Use of any
other object or tool can damage the keypad or touch screen.
Topic Page
Updated Table 1 8
Replaced Figure 7 23
Replaced image in Step 325
Updated screen captures in Navigation section 31
Updated screen captures in Connect Peripherals section 37
Updated screen captures in Configure I/O Points section 41
Updated screen captures in Configure an I/O section 43
Updated screen captures in Validate Configuration section 59
Updated screen captures in Monitor System State section 75
Updated Appendix D 117
Updated OptiSIS Solution Modbus Map section and Table 27 119

8Rockwell Automation Publication 1711-UM004C-EN-P - April 2018
Preface
Terminology This table defines the terms and abbreviations that are used in this manual.
About the OptiSIS Solution The OptiSIS solution is a packaged, pre-built, pre-programmed safety
instrumented system (SIS) logic solver that you mount, wire, and configure as
part of a complete SIS solution. The solution can meet application
requirements up to SIL 3. The solution uses a Rockwell Automation® industrial
computer, AADvance® controllers, and I/O modules.
Such applications include the following:
• Emergency shutdown systems/safety instrumented systems
• Burner management systems
• High-integrity pressure protection systems
• Energize-to-action systems
Table 1 - Terms and Abbreviations
Term/
Abbreviation
Definition Term/
Abbreviation
Definition
AI Analog input ISA International Society of Automation
AMS Asset management system: A system that is used to manage
(diagnose, configure, and maintain) smart field devices MOC Management of change process
MTTR Mean time to repair
AO Analog output NC Normally closed
AWG American Wire Gauge: A standard system that is used for
designating the size of electrical conductors. NEC National Electrical Code: A set of regulations that govern the construction and installation of electrical wiring and apparatus.
C & E Cause and effect NEMA National Electrical Manufacturers Association
CommDTM A communication driver that is installed as part of an AMS. This
driver provides a specific communication interface between the
FDT framework and the specific automation technology the AMS
system is connected to
NO Normally open
PCDC Product Compatibility and Download Center
PFD Probability of a dangerous failure on demand
CPU Processor module PFH Probability of dangerous failure per hour
DeviceDTM A software driver that is installed into an AMS that is specific to the
device of a manufacturer, which provides the data interface
specific to that model
PSAT Pre-startup acceptance test: A functional test of the safety
instrumented system
PST Process safety time
DI Digital input PV Process variable
DO Digital output RRF Risk reduction factor
DTM Device type manager. There are two types of DTM, a DeviceDTM
and a CommDTM RTU Remote terminal unit
SIF Safety instrumented functions
F & G Fire and gas SIL Safety integrity level
FDT Field device tool: A technology for configuration and access of field
devices. It allows field device data to be shared between different
technologies. For more information, go to www.fdtgroup.org
SIS Safety instrumented system
SRS Safety requirements specification
TCP Transmission control protocol
HART Highway addressable transducer protocol TCP/IP Transmission control protocol/internet protocol
HFT Hardware fault tolerance TMR Triple modular redundancy
HMI Human machine interface USB Universal serial bus
I/O Input/output UTC Coordinated universal time
IP Ingress protection

Rockwell Automation Publication 1711-UM004C-EN-P - April 2018 9
Preface
Catalog Numbers
I/O Configurations
The OptiSIS solution is available in two sizes:
• 50 I/O solution (see Table 15 on page 111 for a listing of I/O types)
• 100 I/O solution (see Table 16 on page 111 for a listing of I/O types)
Enclosure Options
The following enclosure options are available for the OptiSIS solution:
1711 - P05 SIS ID 050 S
Bulletin Number
• 1711: OptiSIS
solution
P05 - Packaged
solution
SIS - Safety
instrumented system
Area
• ID: Indoor
•OD: Outdoor
I/O
• 050: 50 I/O
• 100: 100 I/O
Configuration
•S: Fail-safe
•T: Fault tolerant
IMPORTANT Screen captures in this manual show the 50 I/O solution. Screens for the 100
I/O solution differ.
Location Solution Enclosure Material Enclosure Rating
Indoor (ID) 50 I/O and 100 I/O Powder-coated steel IP66 and NEMA 4
Outdoor (OD) ANSI 304 stainless steel IP66 and NEMA 4X

10 Rockwell Automation Publication 1711-UM004C-EN-P - April 2018
Preface
Additional Resources These documents contain additional information concerning related products
from Rockwell Automation.
You can view or download publications at
http://www.rockwellautomation.com/literature/. To order paper copies of
technical documentation, contact your local Allen-Bradley distributor or
Rockwell Automation sales representative.
Resource Description
Integrated Display Industrial Computers for Hazardous
Locations User Manual, publication 6181X-UM001 Contains information on how to install, configure, operate, and troubleshoot the 6181X integrated
display industrial computers.
Integrated Display Industrial Computers User Manual,
publication 6181P-UM003 Contains information on how to install, configure, operate, and troubleshoot the 6181P integrated
display industrial computers.
Power Supply reference manual, publication 1606-RM001 Provides installation, operation, and features
information for switched mode power supplies.
Process Safebook 1 - Safety-related control systems in the
process industry reference manual, publication
SAFEBK-RM003
Provides information, guidance, and examples to
understand and apply Functional Safety and Process
Safety standards.
AADvance Safety Manual, publication ICSTT-RM446 Defines how to apply AADvance controllers for a
Safety Instrument Function.
AADvance Troubleshooting Guide, ICSTT-RM406 Provides maintenance and troubleshooting
information for AADvance controllers.
PFHavg and PFDavg Data Reference Manual, publication
ICSTT-RM449 Provides information on AADvance controller reliability.
HART Protocol, www.fdtgroup.org. Provides details on HART protocol.
Field Loop Configuration application note, publication
AN-T80004 Provides information for line monitoring and includes
advice for fire detectors, which are not simple
volt-free contacts.
International Electrotechnical Commission
http://www.iec.ch Provides details on IEC 61511.
National Fire Protection Association (NFPA 72),
http://www.nfpa.org Provides details on NFPA 72.
International Society of Automation (ISA 84.00.01),
https://www.isa.org/ Provides details on ISA 84.00.01.
National Electric Code, http://www.necconnect.org Provides details on NEC Table 310.15(B)(16).
Industrial Automation Wiring and Grounding Guidelines,
publication 1770-4.1 Provides general guidelines for installing a Rockwell Automation® industrial system.
Product Certifications website,
http://www.rockwellautomation.com/global/
certification/overview.page
Provides declarations of conformity, certificates, and
other certification details.
Product Compatibility and Download Center (PCDC)
http://www.rockwellautomation.com/global/support/
pcdc.page?.
Provides help to find product-related downloads
including firmware, release notes, associated
software, drivers, tools, and utilities.

Rockwell Automation Publication 1711-UM004C-EN-P - April 2018 11
Chapter 1
Safety Requirements
Introduction The certification authority Technischer Überwachungs-Verein (TÜV)
independently certifies that the AADvance control system meets the
requirements of IEC 61508 SIL 3.
The OptiSIS solution is designed and implemented in accordance with the
requirements of the AADvance Controller Safety Manual, publication
ICSTT-RM446. See this manual for certifications as well.
Safety Architecture The OptiSIS solution is available in both fail-safe and fault tolerant
configurations.
Fail-safe System
The fail-safe architecture option means that the failure of a channel or module
can degrade the applied safety integrity level, or can result in the loss of
function where the fail-safe system brings the process to the safe state.
The actual behavior under fault conditions is also dependent on configuration
options.
Figure 1 - Fail-safe System
ATTENTION: Personnel responsible for deploying a Process Safety solution
must verify that the SIS is tested against the Safety Requirements
Specification (SRS) before the introduction of Hazardous materials into the
Process.
ATTENTION: The Safety Architecture defines how the system behaves under
fault conditions. The correct architecture must be selected based on the
requirements that are defined in the SRS.
Sensors I/P
A
CPU
A
CPU
B
VVO/P
A
Final
Elements
I/P = Input Module
CPU = Processor Modules
O/P = Output Modules
V = Vote

12 Rockwell Automation Publication 1711-UM004C-EN-P - April 2018
Chapter 1 Safety Requirements
Fault Tolerant System
The fault tolerant architecture option means that the failure of a channel or
module does not degrade the applied safety integrity level, or result in the loss
of function and the resulting taking the process to the safe state.
The actual behavior under fault conditions is also dependent on configuration
options.
Figure 2 - Fault Tolerant System
Safe State
The internal configuration of the AADvance system that is used in the
OptiSIS solution is that the safe state is OFF (de-energize-to-action).
De-energize-to-action is the state that an input or output assumes during a
channel or module failure. The OptiSIS solution does however, let you
configure digital inputs and digital outputs to operate in either a normally
energized (de-energize-to-action) or a normally de-energized (energize-to-
action).
See Configure I/O on page 41 for the configuration of the normal operating
state.
Sensors Final
Elements
I/P
A
I/P
B
CPU
A
CPU
B
CPU
C
V
V
V
V
V
VV
O/P
A
O/P
B
I/P = Input Module
CPU = Processor Modules
O/P = Output Modules
V = Vote
ATTENTION: Use Energize-to-action configurations only if the following
conditions apply:
• At least two independent power sources to the OptiSIS solution panel must
be used.
• At least one of the power feeds to the panel must be a secure power source
(for example, a UPS or a battery). The power supply hold-up time must
provide power for long enough to bring the process to a safe state.
• OptiSIS solution power supplies generate an alarm when power is lost
(either due to power feed failure or PSU failure). Any power failure alarm
must be responded to and rectified within the mean time to repair (MTTR).
• For SIL 3 and high demand energize-to-action applications, the Fault
Tolerant option must be used.

Rockwell Automation Publication 1711-UM004C-EN-P - April 2018 13
Safety Requirements Chapter 1
Process Safety Lifecycle,
Functional Testing, and
Validation
Before putting the system into operation, perform a pre-startup acceptance
test (PSAT) which is a functional test of the safety instrumented system (SIS).
The PSAT must be a documented and recorded test procedure that includes
(but is not limited to) the following:
• All power, signal, and ground wiring is checked and secure.
• All input/output loops are functionally exercised through their entire
operating range (including field device calibration).
• All safety functions are tested, including timing properties.
• All functions such as bypasses, alarms, and communication interfaces
(where appropriate) are tested and recorded.
It is recommended to evaluate your PSAT with the checklist in Appendix D on
page 117. This evaluation helps you to meet safety requirements for the
OptiSIS solution.
Safety Data The OptiSIS solution has a process safety time (PST) of 1.5 seconds. The PST
brings the system to its safe state (off ) in the event a dangerous fault is
detected. The PST of the safety functions the SIS performs must be greater
than or equal to the OptiSIS PST of 1.5 seconds. This value is not configurable
in the standard system.
Mean time to repair (MTTR) is the maximum allowed time between the
occurrence of a failure and the completion of the repair of that failure, to
maintain the assigned safety integrity level. The allowed time includes the time
to detect the failure, complete the repair, and return the affected SIF back into
service. This configurable parameter has a range of 0…168 hours (no decimals).
ATTENTION: Follow the Process Safety Lifecycle as described in the
AADvance Controller Safety Manual, publication ICSTT-RM446.
ATTENTION:
• Faulty output modules in a dual configuration that are used in energize to
trip applications must be replaced within the MTTR to maintain SIL 3
performance.
• Faulty processors in a dual configuration must be replaced within the MTTR
to maintain SIL 3 performance.
• The MTTR timer is provided in the human machine interface (HMI). You can
configure the MTTR time according to your SIL level from the System Status
display when you are logged in as the Engineer user in the HMI. If you want
to maintain SIL 3 performance, act on the timer alarm. For more information
on Maintenance displays, see Chapter 8 on page 71.

14 Rockwell Automation Publication 1711-UM004C-EN-P - April 2018
Chapter 1 Safety Requirements
PFD/PFH Data
Reliability, PFD, and PFH data is published in the PFHavg and PFDavg Data
for AADvance Controllers Reference Manual, publication ICSTT-RM449.
Password Protection The HMI has a security model that is built in to restrict access to specific
functions. The model relies on user roles as defined in this table. The password
is case-sensitive.
The Windows Administrator user has complete control over the industrial
computer. They can change settings and access the files and programs that are
stored in the computer.
The Windows Operator user has limited control over the industrial computer
and its intended purpose is to execute the OptiSIS solution application.
See Application Accounts on page 37 for login and password information.
ATTENTION: For security reasons, we recommend that you change the
default passwords.
Table 2 - HMI User Roles and Passwords
User Role
Default
Password
Force I/O Apply Configurations Acknowledge/Reset Alarms Remove Suppress and Force Access Diagnostic Functions Suppress I/O Shutdown System
Default (not logged in)
Operator operator X
Supervisor supervisor X X
Maintenance maintenance X X X
Engineer engineer X X X X
Administrator administrator (1)
(1) For HMI version B10 and earlier, the password for Administrator is “password.”
XX X XX
RA Administrator raadmin X X X X X X
Table 3 - Windows User Passwords
User Role Password
Administrator 1ADMINISTRATOR
Operator 1OPERATOR

Rockwell Automation Publication 1711-UM004C-EN-P - April 2018 15
Safety Requirements Chapter 1
Figure 3 - User Session Timeout Warning
Program Enable Key The Program Enable Key is a security device that is required to be present in an
OptiSIS solution when applying Rockwell Automation supplied application
and firmware updates. The key is a 9-way D-type plug and is supplied with the
processor base unit.
The key must be plugged into the processor base unit to allow upgrades to be
performed. The key is installed if the controller appears in yellow on the
Overview display (see Figure 36 on page 76).
ATTENTION: The OptiSIS has an auto-logout feature. The User Logon Session
Timeout Warning display automatically appears after 20 minutes of
inactivity and lets you refresh the application before completing the
automatic log-off process. If the Refresh button is not pressed within 2
minutes, the current user is automatically logged off and the default user is
logged in.
IMPORTANT The Program Enable Key is shipped separately. Never leave the Program
Enable Key in place. After use, remove the key and store it in a safe place
with controlled access.

16 Rockwell Automation Publication 1711-UM004C-EN-P - April 2018
Chapter 1 Safety Requirements
Diagnostics The AADvance controller embodies sophisticated internal diagnostic systems
to identify faults that may develop during operation and raise appropriate
alarm and status indications. The diagnostic systems run automatically and
check for system faults that are associated with the controller (processor and
I/O modules) and field faults that are associated with field I/O circuits. The
internal diagnostics detect and reveal both safe and dangerous failures.
Certification The OptiSIS solution does not carry a specific ‘Product’ certification as it is a
Solution, which is composed of standard products. Each product that is used in
the solution carries specific certifications. To find more information, go to the
Rockwell Automation Product Certification website:
http://www.rockwellautomation.com/global/certification/
Each of the products that are used to create the solution have been installed,
wired, and programmed in accordance with the appropriate user manuals.
Specifically, the AADvance equipment has been designed, installed,
programmed, and tested according to both the AADvance Controller Safety
Manual, publication ICSTT-RM446, and following the appropriate lifecycle
phases of IEC61511.
ATTENTION: When the OptiSIS solution is in a normally unmanned area, a
method for reporting diagnostic alarms into a normally manned area must
be provided to make sure that the defined MTTR is met.

Rockwell Automation Publication 1711-UM004C-EN-P - April 2018 17
Chapter 2
Installation
This chapter provides basic background information about the solution and
instructions for installation.
Introduction Figure 4 (page 18), Figure 5 (page 18), and Figure 6 (page 19) show the
solution and its components:
• AADvance controller CPU
• Flexible inputs (analog/digital)
•Analog outputs
• Digital outputs
•Industrial computer (HMI)
• Enclosure and accessories
ATTENTION: You must use procedures to install and commission that comply
with applicable standards of the country of installation. The applicable
standards can include, for example, IEC 61511, NFPA72, and ISA 84.00.01,
depending on the location.
ATTENTION: Radio frequency interference can influence most electronic
equipment. Exercise caution regarding the use of portable communication
equipment around such equipment. Post signs in the vicinity of the
equipment to provide caution against the use of portable communications
equipment.
IMPORTANT These guidelines are not intended to supersede local electrical codes.

18 Rockwell Automation Publication 1711-UM004C-EN-P - April 2018
Chapter 2 Installation
Figure 4 - OptiSIS Solution – External View
Figure 5 - OptiSIS Solution – Internal View
AADvance Controller CPU
and I/O Modules
Industrial Computer
(Mounted on Door)
Power Distribution
Logic Write Keyswitch
(Mounted on Door)
Power Supplies
Power Feeds
Customer Field Terminals
•Analog Output
•Modbus RTU
• Modbus TCP/IP
• Digital Output
Customer Field Terminals
Flexible Inputs
TIP Indoor models include a fan in
the front door.

Rockwell Automation Publication 1711-UM004C-EN-P - April 2018 19
Installation Chapter 2
Figure 6 - HMI- USB Port Location
All required components are mounted, wired, and installed inside the solution
enclosure.
Installation The 50 I/O system is contained within a wall-mounted cabinet. The 100 I/O
system is contained within a floor-standing panel. See Table 23 on page 113 for
enclosure dimensions.
Unpack
Before unpacking any items, the packaging must be inspected for damage that
can occur during shipment.
If any packaging is damaged, the package identification marks (such as box
number or crate number) must be noted and communicated to
Rockwell Automation. The package must be stored in a suitable storage area in
the condition it was received. Rockwell Automation then contacts the shipping
agent who can request to inspect the damage. The package must not be opened
without the express written permission of Rockwell Automation.
If packaging is not damaged, the OptiSIS solution must be removed from the
packaging. Verify that all items on packing list are included. If any items are
missing, contact Rockwell Automation.
Hinged Door Covering
the USB Ports
6181X Bottom View 6181P Front View6181P Bottom View
USB Ports
ATTENTION: The USB ports must not be used unless the area is known to be
non-hazardous. All other ports or connections must not be disconnected
unless the area is known to be non-hazardous.

20 Rockwell Automation Publication 1711-UM004C-EN-P - April 2018
Chapter 2 Installation
Inspection
• Visually inspect the cabinets for mechanical damage. Check the
paintwork for scratches and abrasions.
• Verify that the cabinet door opens and closes and that all latches operate
smoothly.
• Verify that cable assemblies were not damaged during shipment and that
they are appropriately dressed with cable ties and/or spiral wrap.
• Verify that all wire ducts are fitted with covers.
• Verify that the industrial computer is mounted securely and has not
come loose during shipment.
• Verify that the internal components (AADvance modules, power supply
units, terminals, and so on) are mounted securely and have not come
loose during shipment.
Storage and Operation
Consider the environmental characteristics that are listed in Table 20 on
page 113 when you select the device and the mounting location.
IMPORTANT The standard unit is meant to be installed in a nonhazardous environment.
For additional environmental needs for your SIS, contact your local
Allen-Bradley distributor or Rockwell Automation sales representative.