Rockwell Automation Trusted TMR Operating and safety instructions

ICSTT-RM281P-EN-P (PD-T8471) Trusted
Rockwell Automation Publication ICSTT-RM281P-EN-P (PD-T8471) Issue 16
Trusted TMR 120 Vdc Output Module – 32 Channel
Product Overview
The Trusted® TMR 120 Vdc Digital Output Module interfaces to 32 field devices. Triplicated
diagnostic tests are performed throughout the Module including measurements for current, and
voltage on each portion of the voted output channel. Tests are also performed for stuck on and
stuck off failures. Fault tolerance is achieved through a Triple Modular Redundant (TMR)
architecture within the Module for each of the 32 output channels.
Automatic line-monitoring of the field device is provided. This feature enables the Module to detect
both open and short circuit failures in field wiring and load devices.
The Module provides on-board Sequence of Events (SOE) reporting with a resolution of 1 ms. An
output change of state triggers an SOE entry. Output states are automatically determined by
voltage and current measurements on-board the Module.
Features:
•32 Triple Modular Redundant (TMR) output channels per Module.
•Comprehensive, automatic diagnostics and self-test.
•Automatic line monitoring per channel to detect open circuit and short circuit field wiring
and load faults.
•2500 V impulse withstand opto/galvanic isolation barrier.
•Automatic over-current protection (per channel), no fuses required.
•On-board Sequence of Events (SOE) reporting with 1 ms resolution.
•Module can be hot-replaced on-line using dedicated Companion (adjacent).
•Front Panel output status Light Emitting Diodes (LEDs) for each channel indicate output
status and field wiring faults.
•Front Panel Module status LEDs indicate module health and operational mode (Active,
Standby, Educated).

Trusted ICSTT-RM281P-EN-P (PD-T8471)
Rockwell Automation Publication ICSTT-RM281P-EN-P (PD-T8471) Issue 16
•TϋV Certified IEC 61508 SIL 3
•Outputs are powered in isolated groups of eight.

Trusted TMR 120 Vdc Output Module – 32 Channel PREFACE
Rockwell Automation Publication ICSTT-RM281P-EN-P (PD-T8471) Issue 16 i
PREFACE
In no event will Rockwell Automation be responsible or liable for indirect or consequential damages
resulting from the use or application of this equipment. The examples given in this manual are
included solely for illustrative purposes. Because of the many variables and requirements related to
any particular installation, Rockwell Automation does not assume responsibility or reliability for
actual use based on the examples and diagrams.
No patent liability is assumed by Rockwell Automation, with respect to use of information, circuits,
equipment, or software described in this manual.
Allen‐Bradley, LISTEN. THINK. SOLVE., Rockwell Automation, TechConnect, and Trusted are
trademarks of Rockwell Automation, Inc.
All trademarks are acknowledged.
DISCLAIMER
It is not intended that the information in this publication covers every possible detail about the
construction, operation, or maintenance of a control system installation. You should also refer to
your own local (or supplied) system safety manual, installation and operator/maintenance manuals.
REVISION AND UPDATING POLICY
This document is based on information available at the time of its publication. The document
contents are subject to change from time to time. The latest versions of the manuals are available at
the Rockwell Automation Literature Library under "Product Information" information "Critical
Process Control & Safety Systems".
TRUSTED RELEASE
This technical manual was updated for Trusted Release 4.0.
LATEST PRODUCT INFORMATION
For the latest information about this product review the Product Notifications and Technical Notes
issued by technical support. Product Notifications and product support are available at the Rockwell
Automation Support Centre at
http://rockwellautomation.custhelp.com
At the Search Knowledgebase tab select the option "By Product" then scroll down and select the
Trusted product.
Some of the Answer ID’s in the Knowledge Base require a TechConnect℠Support Contract. For more
information about TechConnect Support Contract Access Level and Features, click on the following
link:
https://rockwellautomation.custhelp.com/app/answers/detail/a_id/50871
This will get you to the login page where you must enter your login details.

PREFACE Trusted TMR 120 Vdc Output Module – 32 Channel
ii Issue 16 Rockwell Automation Publication ICSTT-RM281P-EN-P (PD-T8471)
IMPORTANT A login is required to access the link. If you do not have an account then you can create one
using the "Sign Up" link at the top right of the web page.
DOCUMENTATION FEEDBACK
Your comments will help us serve your documentation needs better. If you have any suggestions on
how to improve this document, complete the How Are We Doing? form
at http://literature.rockwellautomation.com/idc/groups/literature/documents/du/ra-du002_-en-e.p
df.

Trusted TMR 120 Vdc Output Module – 32 Channel PREFACE
Rockwell Automation Publication ICSTT-RM281P-EN-P (PD-T8471) Issue 16 iii
SCOPE
This manual specifies the maintenance requirements and describes the procedures to assist
troubleshooting and maintenance of a Trusted system.
WHO SHOULD USE THIS MANUAL
This manual is for plant maintenance personnel who are experienced in the operation and
maintenance of electronic equipment and are trained to work with safety systems.
SYMBOLS
In this manual we will use these notices to tell you about safety considerations.
SHOCK HAZARD: Identifies an electrical shock hazard. If a warning label is fitted, it
can be on or inside the equipment.
WARNING: Identifies information about practices or circumstances that can cause
an explosion in a hazardous environment, which can cause injury or death,
property damage or economic loss.
ATTENTION: Identifies information about practices or circumstances that can cause
injury or death.
CAUTION: Identifies information about practices or circumstances that can cause
property damage or economic loss.
BURN HAZARD: Identifies where a surface can reach dangerous temperatures. If a
warning label is fitted, it can be on or inside the equipment.
This symbol identifies items which must be thought about and put in place when
designing and assembling a Trusted controller for use in a Safety Instrumented
Function (SIF). It appears extensively in the Trusted Safety Manual.
IMPORTANT Identifies information that is critical for successful application and understanding of
the product.
NOTE Provides key information about the product or service.
TIP Tips give helpful information about using or setting up the equipment.

PREFACE Trusted TMR 120 Vdc Output Module – 32 Channel
iv Issue 16 Rockwell Automation Publication ICSTT-RM281P-EN-P (PD-T8471)
WARNINGS AND CAUTIONS
WARNING: EXPLOSION RISK
Do not connect or disconnect equipment while the circuit is live or unless the area is
known to be free of ignitable concentrations or equivalent
AVERTISSEMENT - RISQUE D’EXPLOSION
Ne pas connecter ou déconnecter l’équipement alors qu’il est sous tension, sauf si
l’environnement est exempt de concentrations inflammables ou équivalente
MAINTENANCE
Maintenance must be carried out only by qualified personnel. Failure to follow these
instructions may result in personal injury.
CAUTION: RADIO FREQUENCY INTERFERENCE
Most electronic equipment is influenced by Radio Frequency Interference. Caution
should be exercised with regard to the use of portable communications equipment
around such equipment. Signs should be posted in the vicinity of the equipment
cautioning against the use of portable communications equipment.
CAUTION:
The module PCBs contains static sensitive components. Static handling precautions
must be observed. DO NOT touch exposed connector pins or attempt to dismantle a
module.

Trusted TMR 120 Vdc Output Module – 32 Channel PREFACE
Rockwell Automation Publication ICSTT-RM281P-EN-P (PD-T8471) Issue 16 v
ISSUE RECORD
Issue Date Comments
8Aug 05 Format / Text editing
9 Feb 06 Removal of SmartSlot
10 Aug 06 Channel States
11 Dec 06 Weights & Dims
12 Mar 07 Supply voltage
13 Nov 07 STATE descriptions
14 Apr 10 Table Rack 7 minor change
15 Jun 16 Rebranded and reformatted with correction to Relative Humidity Range
and Operating Temperature statements in the Specification Sections,
also correction to any typographical errors
16 Jan 20 In Line Monitoring and Output States, Rack 3: AI, and Specifications
sections, added possible scenarios when field voltage is lower than 35
Vdc.
Front Panel image (Figure 6) updated to show new label.
Updated Specifications section.
Updated Documentation Feedback section.
Updated document to display Rockwell Automation publication
numbers.
Added trademarks statement.

PREFACE Trusted TMR 120 Vdc Output Module – 32 Channel
vi Issue 16 Rockwell Automation Publication ICSTT-RM281P-EN-P (PD-T8471)
Page intentionally left blank

Trusted TMR 120 Vdc Output Module – 32 Channel Table of Contents
Rockwell Automation Publication ICSTT-RM281P-EN-P (PD-T8471) Issue 16 1
Table of Contents
1. Description .............................................................................................................3
1.1. Field Termination Unit (FTU)....................................................................................................... 4
1.2. Front Panel Unit (FPU) ................................................................................................................ 4
1.3. Host Interface Unit (HIU) ............................................................................................................5
1.4. Field Interface Unit (FIU).............................................................................................................5
1.5. Line Monitoring and Output States ............................................................................................ 6
1.6. Housekeeping.............................................................................................................................. 6
1.7. Fault Detection/Testing ..............................................................................................................7
1.8. Sequence of Events Characteristics ............................................................................................ 7
1.9. Output Switch Structure .............................................................................................................8
1.9.1. Switch Diagnostics............................................................................................................... 9
1.9.2. Short Circuit Protection Issues ..........................................................................................10
1.9.3. Group Fail Safe Switches ...................................................................................................10
2. Installation...........................................................................................................11
2.1. Module Insertion and Removal.................................................................................................11
2.2. Cable Selection..........................................................................................................................11
2.3. Termination............................................................................................................................... 12
2.4. Module Pin-out Connections ....................................................................................................12
2.5. Trusted Module Polarisation/Keying. .......................................................................................
13
3. Application ...........................................................................................................15
3.1. Module Configuration...............................................................................................................15
3.2. T8471 Complex Equipment Definition......................................................................................15
3.2.1. Rack 1: DO .........................................................................................................................17
3.2.2. Rack 2: STATE ....................................................................................................................17
3.2.3. Rack 3: AI ........................................................................................................................... 18
3.2.4. Rack 4: CI ...........................................................................................................................19
3.2.5. Rack 5: LINE_FLT................................................................................................................19
3.2.6. Rack 6: DISCREP.................................................................................................................19
3.2.7. Rack 7: Housekeeping .......................................................................................................20
3.2.8. Rack 8: INFO ......................................................................................................................22
3.3. Sequence of Events Configuration............................................................................................24
3.4. System.INI File Configuration....................................................................................................24
4. Operation .............................................................................................................25
4.1. Front Panel ................................................................................................................................25
4.2. Module Status LEDs...................................................................................................................27
4.3. I/O Status LEDs..........................................................................................................................28

Table of Contents Trusted TMR 120 Vdc Output Module – 32 Channel
2 Issue 16 Rockwell Automation Publication ICSTT-RM281P-EN-P (PD-T8471)
5. Fault Finding and Maintenance..............................................................................29
5.1. Fault Reporting..........................................................................................................................29
5.2. Field Wiring Faults.....................................................................................................................29
5.3. Module Faults ...........................................................................................................................29
5.4. Companion Slot.........................................................................................................................30
5.5. Cold Start...................................................................................................................................30
5.6. Transfer between Active and Standby Modules.......................................................................31
6. Specifications........................................................................................................33