Rockwell Automation Trusted TMR 24V DC User manual

Rockwell Automation Publication ICSTT-RM451D-EN-P - March 2021
Supersedes Publication ICSTT-RM451C-EN-P - January 2019
Product Description
Original Instructions
Trusted TMR 24V DC/48V DC
Output Module - 40 Channel
PD-T8461 Issue 16

Trusted TMR 24V DC/48V DC Output Module - 40 Channel
2 Rockwell Automation Publication ICSTT-RM451D-EN-P - March 2021
Important User Information
Read this document and the documents listed in the additional resources section about installation, configuration, and
operation of this equipment before you install, configure, operate, or maintain this product. Users are required to familiarize
themselves with installation and wiring instructions in addition to requirements of all applicable codes, laws, and standards.
Activities including installation, adjustments, putting into service, use, assembly, disassembly, and maintenance are required to
be carried out by suitably trained personnel in accordance with applicable code of practice.
If this equipment is used in a manner not specified by the manufacturer, the protection provided by the equipment may be
impaired.
In no event will Rockwell Automation, Inc. be responsible or liable for indirect or consequential damages resulting from the use
or application of this equipment.
The examples and diagrams in this manual are included solely for illustrative purposes. Because of the many variables and
requirements associated with any particular installation, Rockwell Automation, Inc. cannot assume responsibility or liability for
actual use based on the examples and diagrams.
No patent liability is assumed by Rockwell Automation, Inc. with respect to use of information, circuits, equipment, or software
described in this manual.
Reproduction of the contents of this manual, in whole or in part, without written permission of Rockwell Automation, Inc., is
prohibited.
Throughout this manual, when necessary, we use notes to make you aware of safety considerations.
WARNING:
Identifies information about practices or circumstances that can cause an explosion in a hazardous environment, which may lead to
personal injury or death, property damage, or economic loss.
ATTENTION:
Identifies information about practices or circumstances that can lead to personal injury or death, property damage, or economic loss.
Attentions help you identify a hazard, avoid a hazard,and recognize the consequence.
IMPORTANT
Identifies information that is critical for successful application and understanding of the product.
Labels may also be on or inside the equipment to provide specific precautions.
SHOCK HAZARD:
Labels may be on or inside the equipment, for example, a drive or motor, to alert people that dangerous voltage may be present.
BURN HAZARD:
Labels may be on or inside the equipment, for example, a drive or motor, to alert people that surfaces may reach dangerous
temperatures.
ARC FLASH HAZARD:
Labels may be on or inside the equipment, for example, a motor control center, to alert people to potential Arc Flash. Arc Flash will
cause severe injury or death. Wear proper Personal Protective Equipment (PPE). Follow ALL Regulatory requirements for safe work practices and for
Personal Protective Equipment (PPE).

Rockwell Automation Publication ICSTT-RM451D-EN-P - March 2021 3
Table of Contents
Summary of changes .................................................................................. 5
About this Publication................................................................................ 5
Chapter 1
Chapter 2
Field Termination Unit (FTU)................................................................... 11
Field Interface Unit (FIU).......................................................................... 11
Host Interface Unit (HIU) .........................................................................12
Front Panel Unit (FPU) ..............................................................................12
Line Monitoring and Output States..........................................................13
Housekeeping.............................................................................................13
Fault Detection/Testing.............................................................................13
Sequence of Events Characteristics..........................................................14
Output Switch Structure............................................................................14
Switch Diagnostics...............................................................................16
Short Circuit Protection ......................................................................16
Group Fail-Safe Switches ....................................................................16
Chapter 3
Module Insertion and Removal ................................................................19
Cable Selection...........................................................................................19
Termination...............................................................................................20
Module Pin-out Connections ...................................................................20
Trusted Module Polarisation/Keying........................................................21
Chapter 4
Module Configuration...............................................................................23
T8461 Complex Equipment Definition.....................................................23
Rack 3: AI.............................................................................................. 25
Rack 4: CI ............................................................................................. 25
Rack 5: LINE_FLT................................................................................ 26
Rack 6: DISCREP................................................................................. 26
Rack 7: HKEEPING ............................................................................. 26
Rack 8: INFO........................................................................................ 28
Sequence of Events Configuration .......................................................... 29
Chapter 5
Front Panel .................................................................................................31
Module Status LEDs ..................................................................................32
I/O Status Indicators..................................................................................33
Preface
Product overview
Description
Installation
Application
Operation

Table of Contents
4 Rockwell Automation Publication ICSTT-RM451D-EN-P - March 2021
Chapter 6
Fault Reporting ..........................................................................................35
Field Wiring Faults ....................................................................................35
Module Faults .............................................................................................35
Companion Slot..........................................................................................36
SmartSlot ....................................................................................................36
Cold Start ....................................................................................................36
Transfer between Active and Standby Modules.......................................37
Chapter 7
Appendix A
Fault Finding and Maintenance
Specifications
History of Changes

Rockwell Automation Publication ICSTT-RM451D-EN-P - March 2021 5
Preface
This manual includes new and updated information. Use these reference
tables to locate changed information.
Grammatical and editorial style changes are not included in this summary.
Global changes
This table identifies changes that apply to all information about a subject in
the manual and the reason for the change. For example, the addition of new
supported hardware, a software design change, or additional reference
material would result in changes to all of the topics that deal with that subject.
Subject
Reason
Updated branding
Marketing product change
This manual specifies the maintenance requirements and describes the
procedures to assist troubleshooting and maintenance of a Trusted system.
This manual is for plant maintenance personnel who are experienced in the
operation and maintenance of electronic equipment and are trained to work
with safety systems.
Disclaimer
It is not intended that the information in this publication covers every
possible detail about the construction, operation, or maintenance of a control
system installation. You should also refer to your own local (or supplied)
system safety manual, installation, and operator/maintenance manuals.
Revision and updating policy
This document is based on information available at the time of its publication,
however, they are subject to change from time to time. The latest versions of
the manuals are available at the Rockwell Automation Literature Library:
rok.auto/literature.
Trusted release
This technical manual was updated for Trusted Release 4.0.
Summary of changes
About this Publication

Preface
6 Rockwell Automation Publication ICSTT-RM451D-EN-P - March 2021
Latest product information
See the Trusted Release Note for the revision of this document applicable to
the release at rok.auto/pcdc.
For the latest information about this product, review the Product
Notifications and Technical Notes available at rok.auto/knowledgebase.
Some of the Articles in the Knowledgebase require a TechConnect℠Support
Contract. For more information, go to Knowledgebase Document ID: IP622-
TechConnect Support Contract - Access Level & Features.
Tip: Sign in to your Rockwell Automation account to view Knowledgebase articles.

Rockwell Automation Publication ICSTT-RM451D-EN-P - March 2021 7
Chapter 1
Product overview
The Trusted® Triple Modular Redundant (TMR) 24V DC / 48V DC Digital
Output Module interfaces to 40 field devices. Triplicated diagnostic tests are
performed throughout the Module including measurements for current, and
voltage on each portion of the voted output channel. Tests are also performed
for stuck on and stuck off failures. Fault tolerance is achieved through a TMR
architecture within the Module for each of the 40 output channels.
Automatic line-monitoring of the field device is provided. This feature enables
the Module to detect both open and short circuit failures in field wiring and
load devices.
The Module provides onboard Sequence of Events (SOE) reporting with a
resolution of 1 ms. An output change of state triggers an SOE entry. Output
states are automatically determined by voltage and current measurements
onboard the Module.
This Module is not approved for direct connection to hazardous areas and
should be used in conjunction with Intrinsic Safety Barrier devices.
Features
•40 TMR output channels per Module.
•Comprehensive, automatic diagnostics and self-test.
•Automatic line monitoring per channel to detect open circuit and short
circuit field wiring and load faults.
•2500V impulse withstand opto/galvanic isolation barrier.
•Automatic overcurrent protection (per channel), no external fuses
required.
•Onboard Sequence of Events (SOE) reporting with 1 ms resolution.
•Module can be hot-replaced online using dedicated Companion
(adjacent) Slot or SmartSlot (one spare slot for many Modules)
configurations.
•Front Panel output status light-emitting diodes (LEDs) for each
channel indicate output status and field wiring faults.
•Front Panel Module status LEDs indicate Module health and
operational mode (Active, Standby, Educated).
•TϋV Certified IEC 61508 SIL 3.
•Outputs are powered in isolated groups of eight. Each such group is a
Power Group (PG).

Rockwell Automation Publication ICSTT-RM451D-EN-P - March 2021 9
Chapter 2
Description
The TMR 24V DC/48V DC Digital Output Module is a member of the Trusted
range of Input/Output (I/O) Modules. All Trusted I/O Modules share common
functionality and form. At the most general level, all I/O Modules interface to
the Inter-Module Bus (IMB) which provides power and allows communication
with the TMR Processor. In addition, all Modules have a field interface that is
used to connect to Module-specific signals in the field. All Modules are Triple
Modular Redundant (TMR).

Chapter 2 Description
10 Rockwell Automation Publication ICSTT-RM451D-EN-P - March 2021
Figure 1: Module Architecture
All High Integrity I/O Modules are made up of four sections: Host Interface
Unit (HIU), the Field Interface Unit (FIU), the Field Termination Unit (FTU),
and the Front Panel Unit (or FPU).