Woodward 505XT User manual

Product Manual 35018V3
(Revision -, 3/2020)
Original Instructions
505XT Digital Control for Steam Turbines
(Single Valve, Extraction and/or Admission)
Manual 35018 consists of 3 volumes (35018V1, 35018V2 & 35018V3)
505XT Dual Redundant Volume 3
Released

Manual 35018V3 505XT Digital Control System for Steam Turbines
General
Precautions
Read this entire manual and all other publications pertaining to the work to be
performed before installing, operating, or servicing this equipment.
Practice all plant and safety instructions and precautions.
Failure to follow instructions can cause personal injury and/or property damage.
Revisions
This publication may have been revised or updated since this copy was produced.
To verify that you have the latest revision, check manual 26455 , Customer
Publication Cross Reference and Revision Status & Distribution Restrictions, on
the publications page of the Woodward website:
www.woodward.com/publications
The latest version of most publications is available on the publications page. If
your publication is not there, please contact your customer service representative
to get the latest copy.
Proper Use
Any unauthorized modifications to or use of this equipment outside its specified
mechanical, electrical, or other operating limits may cause personal injury and/or
property damage, including damage to the equipment. Any such unauthorized
modifications: (i) constitute "misuse" and/or "negligence" within the meaning of
the product warranty thereby excluding warranty coverage for any resulting
damage, and (ii) invalidate product certifications or listings.
Translated
Publications
If the cover of this publication states "Translation of the Original Instructions"
please note:
The original source of this publication may have been updated since this
translation was made. Be sure to check manual 26455 , Customer Publication
Cross Reference and Revision Status & Distribution Restrictions, to verify whether
this translation is up to date. Out-of-date translations are marked with . Always
compare with the original for technical specifications and for proper and safe
installation and operation procedures.
Revisions— A bold, black line alongside the text identifies changes in this publication since the
last revision.
Woodward reserves the right to update any portion of this publication at any time. Information provided by Woodward is
believed to be correct and reliable. However, no responsibility is assumed by Woodward unless otherwise expressly
undertaken.
Manual 35018V1
Copyright © Woodward, Inc. 2020
All Rights Reserved
Released

Manual 35018V3 505XT Dual Redundant Control System for Steam Turbines
Contents
W ARNINGS AND N OTICES ..............................................................................................................6
E LECTROSTATIC D ISCHARGE A WARENESS ....................................................................................7
C HAPTER 15. G ENERAL I NFORMATION ...........................................................................................8
Feature Differences between the 505DR and previous 505/505XT...........................................................10
C HAPTER 16. R EDUNDANT S ETUP AND C ONFIGURATION ..............................................................11
Hardware Setup ..........................................................................................................................................11
Input and Output Signals.............................................................................................................................12
Actuator Drivers ..........................................................................................................................................16
CAN Devices – Optional I/O and Digital Drivers.........................................................................................26
Communications .........................................................................................................................................38
Configuration Menu.....................................................................................................................................39
Service Menu ..............................................................................................................................................60
Calibration...................................................................................................................................................61
C HAPTER 17. R EDUNDANT O PERATION .......................................................................................62
Initializing a Redundant System..................................................................................................................62
System Diagnostics.....................................................................................................................................64
The SYSCON Unit ......................................................................................................................................67
The BACKUP Unit.......................................................................................................................................70
Operational Commands and Settings.........................................................................................................78
Online Unit Repairs.....................................................................................................................................79
RemoteView Connections...........................................................................................................................82
Failover Performance..................................................................................................................................84
Alarms.........................................................................................................................................................85
Trips ............................................................................................................................................................94
Modbus Addressing ....................................................................................................................................96
R EVISION H ISTORY ...................................................................................................................114
The following are trademarks of Woodward, Inc.:
ProTech
Woodward
The following are trademarks of their respective companies:
Modbus (Schneider Automation Inc.)
Pentium (Intel Corporation)
Released

Manual 35018V3 505XT Dual Redundant Control System for Steam Turbines
Illustrations and Tables
Figure 15-1. Typical Redundant 505XT Application Configuration...............................................................9
Figure 16-1. 505DR with FTM.....................................................................................................................12
Figure 16-2. Single Coil Shared Driver .......................................................................................................17
Figure 16-3 Single Coil Shared Driver with 505DR FTM............................................................................17
Figure 16-4 Dual Coil Driver........................................................................................................................18
Figure 16-5. Dual Coil Driver with 505DR FTM ..........................................................................................18
Figure 16-6. Redundant (Parallel) Actuator Driver .....................................................................................19
Figure 16-7. Redundant (Parallel) Actuator Driver with 505DR FTM .........................................................19
Figure 16-8. Actuator Driver with Redundant Demands.............................................................................20
Figure 16-9. Actuator Type Configuration...................................................................................................23
Figure 16-10. Driver Channel Configuration...............................................................................................24
Figure 16-11. mA Backup Channel Configuration ......................................................................................25
Figure 16-12. Driver Configuration Page Buttons.......................................................................................26
Figure 16-13. Servo Position Controller......................................................................................................27
Figure 16-14. SPC Driver CAN Links..........................................................................................................28
Figure 16-15a. SPC Driver Configuration for Redundant Actuators...........................................................29
Figure 16-15b. SPC Driver Configuration for Redundant Actuators...........................................................30
Figure 16-15c. SPC Driver Configuration for Redundant Actuators...........................................................31
Figure 16-15d. SPC Driver Configuration for Redundant Actuators...........................................................32
Figure 16-15e. SPC Driver Configuration for Redundant Actuators...........................................................33
Figure 16-15f. SPC Driver Configuration for Redundant Actuators............................................................33
Figure 16-15g. SPC Driver Configuration for Redundant Actuators...........................................................34
Figure 16-16a. SPC Driver Configuration for Dual Coil Actuators..............................................................34
Figure 16-16b. SPC Driver Configuration for Dual Coil Actuators..............................................................35
Figure 16-17. Expandable I/O Node 26 Driver (bumpless SYSCON transfer)...........................................37
Figure 16-18. Single Network Modbus Architecture ...................................................................................38
Figure 16-19. Redundant Network Modbus Architecture............................................................................38
Figure 17-1. Wait Run Permissive Screen..................................................................................................63
Figure 17-2. Navigating to the DR Overview Screen..................................................................................64
Figure 17-3. System Diagnostics Screen....................................................................................................66
Figure 17-4. Primary/Secondary SYSCON/BACKUP Indications...............................................................67
Figure 17-5. Front Panel CPU LED SYCON/BACKUP Indication..............................................................68
Figure 17-6. SYSCON I/O Monitoring Pages..............................................................................................70
Figure 17-7. BACKUP Unit Available Screen .............................................................................................71
Figure 17-8. BACKUP Unit Inhibited Screen ..............................................................................................72
Figure 17-9. BACKUP I/O Monitoring Menu...............................................................................................73
Figure 17-10 BACKUP Analog Inputs Screen ............................................................................................74
Figure 17-11. BACKUP Speed Inputs Screen............................................................................................74
Figure 17-12. BACKUP Analog Outputs Screen ........................................................................................75
Figure 17-13. BACKUP Actuator Outputs Screen ......................................................................................76
Figure 17-14. BACKUP Boolean Inputs Screen .........................................................................................77
Figure 17-15. BACKUP Relay Outputs Screen...........................................................................................77
Figure 17-16. User SYSCON Transfer Command......................................................................................79
Figure 17-17. User Unsync Backup Command ..........................................................................................80
Figure 17-18. User Reset Backup Command.............................................................................................80
Figure 17-19. System Diagnostic Faults Cleared .......................................................................................81
Figure 17-20. BACKUP Available ...............................................................................................................82
Figure 17-21. Session connections dialog box...........................................................................................83
Figure 17-22. Actuator Output Failover Performance.................................................................................84
Figure 17-23. RTCNet Node 26 Analog Output Performance....................................................................84
Figure 17-24. SPC Analog Output Performance.........................................................................................85
Released

Manual 35018V3 505XT Dual Redundant Control System for Steam Turbines
Table 16-1. Field Termination Module Kit Bill of Materials .........................................................................11
Table 16-2. Analog Input Fault Table..........................................................................................................13
Table 16-3. Single Speed Signal Fault Table .............................................................................................13
Table 16-4. 2 Speed Signal Fault Table .....................................................................................................13
Table 16-5. Analog Output Fault Table.......................................................................................................15
Table 16-6. Driver Single Coil Fault Table..................................................................................................15
Table 16-7. Driver Dual Coil or Redundant Fault Table..............................................................................16
Table 16-8. Woodward Redundant Actuators.............................................................................................19
Table 16-9. Boolean Input Configuration Options.......................................................................................20
Table 16-10. Driver Fault Current Table .....................................................................................................21
Table 16-11. Available (programmed) SPC Drivers ...................................................................................27
Table 16-12. Expandable I/O RTCNet Node Part Numbers.......................................................................35
Table 16-13. Analog Input Function List.....................................................................................................42
Table 16-14. Analog Output (Readout) Function List .................................................................................43
Table 16-15. Boolean Input Function List...................................................................................................45
Table 16-16. Relay Output Indication Function List....................................................................................47
Table 16-17. Relay Output Level Switch Function List...............................................................................50
Table 16-18. Actuator Driver Function List .................................................................................................51
Table 16-19. Configuration Error Messages...............................................................................................51
Table 17-1. System Diagnostic Descriptions..............................................................................................65
Table 17-2. Primary/Secondary SYSCON/BACKUP Status Descriptions..................................................67
Table 17-3. Front Panel CPU LED SYCON/BACKUP Descriptions...........................................................68
Table 17-4. Alarm Messages......................................................................................................................85
Table 17-5. Distributed I/O Alarm Messages..............................................................................................91
Table 17-6. Trip Messages .........................................................................................................................94
Table 17-7. Distributed I/O Trip Messages.................................................................................................95
Table 17-8. Boolean Write Addresses ........................................................................................................96
Table 17-9. Boolean Read Addresses........................................................................................................98
Table 17-10. Analog Read Addresses......................................................................................................106
Table 17-11. Analog Write Addresses ......................................................................................................113
Released

Manual 35018V3 505XT Dual Redundant Control System for Steam Turbines
Warnings and Notices
Important Definitions
This is the safety alert symbol used to alert you to potential personal injury hazards. Obey all
safety messages that follow this symbol to avoid possible injury or death.
•DANGER - Indicates a hazardous situation, which if not avoided, will result in death or serious injury.
•WARNING - Indicates a hazardous situation, which if not avoided, could result in death or serious
injury.
•CAUTION - Indicates a hazardous situation, which if not avoided, could result in minor or moderate
injury.
•NOTICE - Indicates a hazard that could result in property damage only (including damage to the
control).
•IMPORTANT - Designates an operating tip or maintenance suggestion.
Overspeed /
Overtemperature /
Overpressure
The engine, turbine, or other type of prime mover should be
equipped with an overspeed shutdown device to protect against
runaway or damage to the prime mover with possible personal injury,
loss of life, or property damage.
The overspeed shutdown device must be totally independent of the
prime mover control system. An overtemperature or overpressure
shutdown device may also be needed for safety, as appropriate.
Personal Protective
Equipment
The products described in this publication may present risks
that
could lead to personal injury, loss of life, or property damage.
Always wear the appropriate personal protective equipment (PPE) for
the job at hand. Equipment that should be considered includes but is
not limited to:
•Eye Protection
•Hearing Protection
•Hard Hat
•Gloves
•Safety Boots
•Respirator
Always read the proper Material Safety Data Sheet (MSDS) for any
working fluid(s) and comply with recommended safety equipment.
Start-up
Be prepared to make an emergency shutdown when starting the
engine, turbine, or other type of prime mover, to protect against
runaway or overspeed with possible personal injury, loss of life, or
property damage.
Released

Manual 35018V3 505XT Dual Redundant Control System for Steam Turbines
Electrostatic Discharge Awareness
Electrostatic
Precautions
Electronic controls contain static
-
sensitive parts. Observe the
following precautions to prevent damage to these parts:
•Discharge body static before handling the control (with power to
the control turned off, contact a grounded surface and maintain
contact while handling the control).
•Avoid all plastic, vinyl, and Styrofoam (except antistatic
versions) around printed circuit boards.
•Do not touch the components or conductors on a printed circuit
board with your hands or with conductive devices.
To prevent damage to electronic components caused by improper
handling, read and observe the precautions in Woodward manual
82715 , Guide for Handling and Protection of Electronic Controls,
Printed Circuit Boards, and Modules.
Follow these precautions when working with or near the control.
1. Avoid the build-up of static electricity on your body by not wearing clothing made of synthetic
materials. Wear cotton or cotton-blend materials as much as possible because these do not store
static electric charges as much as synthetics.
2. Do not remove the printed circuit board (PCB) from the control cabinet unless absolutely necessary.
If you must remove the PCB from the control cabinet, follow these precautions:
•Do not touch any part of the PCB except the edges.
•Do not touch the electrical conductors, the connectors, or the components with conductive
devices or with your hands.
•When replacing a PCB, keep the new PCB in the plastic antistatic protective bag it comes in
until you are ready to install it. Immediately after removing the old PCB from the control cabinet,
place it in the antistatic protective bag.
Released

Manual 35018V3 505XT Dual Redundant Control System for Steam Turbines
Chapter 15.
General Information
Two 505XT controllers can be applied together and configured to function in a redundant manner to
increase overall system reliability and availability. In such applications, one 505XT functions as the
SYSCON (In-Control) unit and controls all aspects of the turbine system. The second 505XT functions as
a BACKUP unit and tracks the SYSCON 505XT’s operating parameters to ensure a smooth transfer if the
SYSCON 505XT fails.
In a redundant configuration, all 505XT functionality is available so that redundant operation is available
for all steam turbines, including:
•Single Valve or split-range actuators turbines
•Controlled Extraction or Admission turbines (2 Control valves)
•Controlled Extraction and Admission turbines (2 Control valves)
The 505XT uses the term Primary to describe the unit with DIP Switch position 0001 and the term
Secondary to describe the unit with DIP Switch position 0002 (please refer to Appendix A in the Flex500
hardware manual 26838 for DIP switch configuration instructions). The Primary and Secondary unit
designations allow the system to identify each unit specifically. The term SYSCON is used to describe the
unit that is currently in-control of the system and the term BACKUP to describe the tracking unit. Either of
the Primary or Secondary units can become the SYSCON unit, but in a healthy system, the Primary unit
will always boot up as the SYSCON.
The 505XT operating system continuously keeps the BACKUP unit in-sync with the current control state
of the SYSCON. On a control transfer, the BACKUP unit becomes the new SYSCON in the exact same
state as the previous unit just prior to the transfer. The previous SYSCON will then become the BACKUP
unit and begin tracking the SYSCON in the same way. Once the transfer occurs, the new SYSCON
begins controlling the system processing its local IO. The system is designed to have identical IO signals
between both the Primary and Secondary units such that either unit can become SYSCON with no
change in the system control state. In the case of an IO signal discrepancy between the SYSCON and
BACKUP units, an alarm is annunciated.
If the system transfers control and an IO signal is not available, the new SYSCON unit will process the
signal failure of that function as described in Volume 1 of this manual. For example, if the AUX Input is
healthy on the SYSCON but failed on the BACKUP and the SYSCON fails, the control will transfer the
SYSCON and the AUX controller will be disabled.
Transfer of control is initiated under the following conditions:
•SYSCON 505XT failure (CPU or internal problem, OS )
•Loss of power to the SYSCON 505XT
•Loss of all speed probes to the SYSCON 505XT
•SYSCON 505XT actuator driver (ACT or AO) output failure detected
•CAN communication fault
•A user “Transfer” command
The 505XT operating system also manages operational commands (Local Panel Commands,
RemoteView Commands, or DCS Modbus Commands) and ensures that all operational commands are
given to the SYSCON when performed on either unit. This allows the turbine to be operated from either
the SYSCON or BACKUP unit. In this way, the BACKUP unit also serves as a redundant interface to
operate the turbine. The BACKUP unit will always display the same control states and variables as the
SYSCON. All IO as seen from the BACKUP unit on the IO channel pages and operation pages are the
signals being processed by the SYSCON. When the SYSCON is transferred, the signals displayed switch
to the other unit, as it is now in control of the system. The signals into the BACKUP unit can be monitored
from the DR Overview GUI pages.
Released

Manual 35018V3 505XT Dual Redundant Control System for Steam Turbines
Unlike commands over communication paths (Local Panel, RemoteView, or DCS Modbus Commands),
only the SYSCON processes hardwired Discrete Input signals. Therefore, the system is designed to have
Discrete Input signals wired to each 505XT controller so that a command or system signal is seen by both
505XT units simultaneously.
The 505DR Field Termination Module (FTM) provides a convenient method for wiring IO signals and the
discrete interconnect signals between the two 505XT units. Please refer to Appendix A in the Flex500
hardware manual 26838 for details on the 505DR FTM and IO signal wiring.
When configured for redundant applications the 505XT can be configured to drive single coil actuators,
dual coil actuators, or parallel actuators (Woodward redundant VariStroke I or CPCII skid). See the
redundant control configuration section of this manual to understand all redundant application options.
Figure 15-1. Typical Redundant 505XT Application Configuration
Released

Manual 35018V3 505XT Dual Redundant Control System for Steam Turbines
Part Number Options
In order to be used as a redundant system, the 505XT must be purchased as a redundant controller using
the part numbers below.
The simplex
505 and
505XT part numbers listed in Volume 1 of this
manual cannot be applied in a redundant application. The 505DR part
numbers below must be purchased for redundant applications.
Part Number Power
8200-1330 505DR (LVDC 18–36 Vdc Standard Compliance) STEAM TURBINE CONTROL
8200-1331 505DR (AC/DC 88–264 Vac or 90–150 Vdc Standard Compliance) STEAM TURBINE
CONTROL
5541-705 FTM AND CABLES, FLEX500 REDUNDANT
Terminology
505 Refers to the overall Woodward Product family / hardware platform
505XT Refers specifically to the Control/GUI application software features described in this
manual – identified on unit p/n label and logo on Home screen
505DR Refers to a Dual Redundant application of the 505XT.
FTM Refers to the Field Termination Module (FTM) kit that prewires the field IO and
interconnect signals
CrissCross Refers to the Relay #8 to DI #20 discrete health interconnection between the Primary and
Secondary units.
Feature Differences between the 505DR and previous 505/505XT
The 505DR supports all of the same turbine types and primary control functions of the previous 505 and
505XT simplex models. There are, however, some feature differences to note. The items added were
improvements and features that are likely options for redundant systems. A few minor items were
eliminated due to low utilizations and pending product changes that could affect the need for this to be a
Woodward digital link.
New Features added -
•Enhanced Actuator support - dual coil and redundant actuators on both HP and LP valves and allows
configuration of these outputs on 8 AO channels and 4 digital drivers (SPC’s)
•Support of SPC Digital Drivers (4) – to provide simplex or redundant drives to a wider variety of
actuator/valve assemblies including integrating valves.
•Support of LinkNet RTC nodes – (previous 505XT model supported using LinkNet HT nodes) which
allows control process variables and driver outputs to be connected via a real time distributed I/O
network
•Added support for redundancy of critical input signals – 7 analog inputs now support duplexed inputs
- Remote Speed, Load, Cascade, Auxiliary, Inlet, Extraction, and Exhaust
Features not supported in initial release –
•CAN interface to the VariStroke-II (expected to be added at a future software release)
•CAN interface to the MFR300 product, a power management multi-function protection relay
•Modbus interface to the HighProtec generator protection device
Released

Manual 35018V3 505XT Dual Redundant Control System for Steam Turbines
Chapter 16.
Redundant Setup and Configuration
Hardware Setup
Detailed hardware setup information is covered in the Flex500 Manual 26838 Appendix A.
The following is a bullet list of the hardware configuration and control interlocks required to operate the
505DR controllers in a redundant mode.
•Must use the correct 505DR part numbers identified in Chapter 1 of this manual, 35018V3.
•Must set DIP switches on top of controller to configure one as the Primary unit
•Must set DIP switches on top of controller to configure the other one as the Secondary unit
•Must use a CAT5 or 6 Ethernet cable and make a direct connection between ETHERNET port 4
of each controller
•Must wire DI 24vdc power of each controller to the COM terminal of Relay #8 of the other
controller and wire the NO terminal of Relay #8 back to DI #20
Woodward Flex500 DR FTM Kit (5541-705)
The FTM Kit includes the following parts:
Table 16-1. Field Termination Module Kit Bill of Materials
Part Number
Description
5541-705 FTM AND CABLES KIT, FLEX500/505/VERTEX REDUNDANT
5404-1484 (2x) HARNESS KIT, FTM, FLEX500/505/VERTEX REDUNDANT
5501-503 FTM MODULE, FLEX500/505/VERTEX REDUNDANT
KP-50001 CABLE – ENET CAT6A RJ45 Length 2 M
The FTM Kit simplifies the signal splitting of IO signals to each of the 505DR control units and provides a
single point of termination for field signals.
Flex500 FTM kit utilizes following input/outputs from 505DR units:
•Two Speed Sensor inputs MPU #1, MPU #2 (MPU inputs).
•Four Analog input 4-20 mA channels AIN #1 – AIN #4 (only in self-powered mode).
•Three Analog output 4-20 mA channels AO #1 – AO #3.
•Two Actuator output channels ACT #1 – ACT #2 (can work in 4-20 mA/20-200 mA current range).
•Seven Discrete input channels DI #13 – DI #19 with Contact Power (DI24V_1, DI24V_2, DI_COM).
•Two Relay outputs RELAY #6, RELAY #7 (form-c).
•Relay output RELAY #8 and Discrete input DI #20 used to control interlock in redundant mode
(connection between RELAY#8 from one Flex500 unit to DIN#20 from second Flex500 unit and vice
versa).
Detailed information on the FTM Kit is covered in the Flex500 Manual 26838 Appendix A.
Released

Manual 35018V3 505XT Dual Redundant Control System for Steam Turbines
Figure 16-1. 505DR with FTM
Input and Output Signals
Please refer to Appendix A in the Flex500 hardware manual 26838 for details on IO signal wiring for each
channel type.
The I/O channels are configured the same as described in V1 of this manual. When an IO channel is
configured, the configuration applies to both control units. All signal scaling and calibration is applied to
both units as the I/O signals are shared between both units for each channel.
The details for each IO channel type below describe how the channels function specifically in the 505XT
application and how failure modes are handled.
When 505XTs are used in a Dual Redundant configuration,
Relay 8
and Discrete Input 20 are used in the health status communication
between the units and are not available in the application.
Analog Inputs
Each Analog Input signal should be wired to both 505DR units utilizing the wiring methods described in
Appendix A of the Flex500 hardware Manual 26838. By following these wiring schemes:
1. A transducer mA signal is seen identically by both the Primary and Secondary units and
minimizes the disturbance of a transfer.
2. The diodes across each unit terminals allow for unit replacement by completing the circuit when
the terminal is disconnected from a 505XT unit.
Released

Manual 35018V3 505XT Dual Redundant Control System for Steam Turbines
The following table describes the SYSCON and BACKUP behaviors on signal failures:
Table 16-2. Analog Input Fault Table
Channel SYSCON FAULT
BACKUP FAULT BACKUP STAT
SYSCON Transfer
Analog Input FALSE FALSE Available No
Analog Input TRUE FALSE Available Yes
Analog Input FALSE TRUE Available (default) No
Analog Input TRUE TRUE Available Yes
A difference between the SYSCON and BACKUP Analog Input signals will be annunciated as a
difference alarm.
MPU Inputs
MPU transducer signals drive both Primary and Secondary Speed Signal Input channels such that the
signal is identical between the two units. The following table describes the SYSCON and BACKUP
behaviors on signal failures:
Table 16-3. Single Speed Signal Fault Table
1 Speed Signal Configured
Channel SYSCON FAULT BACKUP FAULT BACKUP STAT
SYSCON Transfer
Speed Input FALSE FALSE Available No
Speed Input TRUE FALSE Available Yes
Speed Input FALSE TRUE Unavailable No
Speed Input TRUE TRUE Unavailable Yes (TRIP)
Table 16-4. 2 Speed Signal Fault Table
2 Speed Signals Configured
Channel
SS1
SYSCON
FAULT
SS1
BACKUP
FAULT
SS2
SYSCON
FAULT
SS2
BACKUP
FAULT BACKUP STAT
SYSCON Transfer
Speed Input FALSE FALSE FALSE FALSE Available No
Speed Input TRUE TRUE X FALSE Available No *1
Speed Input X FALSE TRUE TRUE Available No *1
Speed Input X TRUE X TRUE Unavailable No *2
Speed Input TRUE FALSE FALSE FALSE Available No *3
Speed Input FALSE FALSE TRUE FALSE Available No *3
Speed Input TRUE FALSE TRUE FALSE Available Yes *4
Speed Input TRUE TRUE TRUE TRUE Unavailable Yes (TRIP) *5
*1 – As long as there is a BACKUP signal available, the BACKUP is available.
*2 – Both MPUs faulted on the BACKUP inhibits a transfer
*3 – A single channel fault does not transfer
*4 – A fault on both SYSCON channels causes a transfer
*5 – All probes must be failed to trip on SYSCON and BACKUP
A difference between the SYSCON and BACKUP MPU signals will be annunciated as a difference alarm.
The automatic Open Wire Detection function that is available on the simplex versions of the 505 and
505XT, is not available on the DR version. This is due to the fact that the MPU signals are paralleled
between the 2 controls. The open wire detection routine can be used as a manual check prior to starting
the unit and is available in the Service menu under the MPU signals screens.
Released

Manual 35018V3 505XT Dual Redundant Control System for Steam Turbines
To test the MPU
, remove the speed signal connector from the backup
unit, then initiate the test from the SYSCON unit. When complete, re-
attach the speed signal connector to the Backup unit. If the speed
signal connector is NOT removed from the Backup unit, the test will
always pass.
PROX Inputs
If active probes are used, the 505DR system will require a minimum of 2 probes and will support up to 4
probes. A minimum of 1 speed sensor per control is required and should be wired directly to the control,
no wiring of active/proximity probes is supported on the DR-FTM. In the configuration of the 505DR, only
select the choice of “Use Speed Input Channel 2” if 4 probes are being used (2 to each controller).
When using just 1 speed input into each controller –
•Both controllers will show the validated speed as the value seen by the SYSCON
•The 505DR will transfer SYSCON control to the other unit if it detects a failed speed input signal as
per the above table
•The speed value in each controller can be seen on the Speed Inputs page under the Redundancy
Overview page menu
•Adjust the “Speed Difference Tolerance” setting, on this page, to an acceptable level of difference in
speed that can be tolerated when switching between the 2 units. When the difference between the
SYSCON and the BACKUP exceeds this value, the control will annunciate an alarm and make the
BACKUP unit unavailable
Contact Inputs
In a healthy system, the SYSCON and BACKUP contact input signals will be identical. A difference
between the SYSCON and BACKUP Contact Input signals will be annunciated as a difference alarm. In
the case of a signal difference, the 505XT control will always follow the SYSCON signal status.
If a
DI difference alarm is present, an operator action or event
causing a SYSCON transfer may result in unexpected results,
including a TRIP.
Relay Outputs
Relay Outputs will follow the SYSCON demand signal. When the SYSCON drives a Relay Output channel
to energize, that output is also energized on the BACKUP unit channel. The Appendix A wiring diagrams
of manual 26838 illustrate how to wire these as a logical AND or an OR of the two relay outputs to the
field device.
Analog Outputs
Analog Output currents are shared between the SYSCON and BACKUP units. The BACKUP unit will
output a constant 2mA demand as a circuit health check. The SYSCON will output a 16-18mA signal to
modulate the output demand according to the control logic. On detection of a BACKUP fault, the
SYSCON will pick up the BACKUP demand and output the full 4-20mA demand. On detection of a
SYSCON fault, the SYSCON will transfer and the new SYSCON unit will pick up the full 4-20mA demand.
The following table describes the SYSCON and BACKUP behaviors on signal failures, depending on
whether the Analog Output is configured as a Readout or is being used as an Actuator Driver:
Released

Manual 35018V3 505XT Dual Redundant Control System for Steam Turbines
Table 16-5. Analog Output Fault Table
Channel
SYSCON
FAULT
BACKUP
FAULT
BACKUP
STAT
SYSCON
Transfer
Analog Output (RO) FALSE FALSE Available No
Analog Output (RO) TRUE FALSE Available Yes
Analog Output (RO) FALSE TRUE Available No
Analog Output (RO) TRUE TRUE Available Yes
Channel
SYSCON
FAULT
BACKUP
FAULT
BACKUP
STAT
SYSCON
Transfer
Analog Output
(Driver) FALSE FALSE Available No
Analog Output
(Driver) TRUE FALSE Available Yes
Analog Output
(Driver) FALSE TRUE Unavailable No
Analog Output
(Driver) TRUE TRUE Unavailable Yes (TRIP)
Actuator Outputs
Actuator Output currents are shared between the SYSCON and BACKUP units. The BACKUP unit will
output a constant current demand, equal to half of the Minimum current setting, as a circuit health check.
The SYSCON will output half of the Minimum current plus the full 0-100% current value signal to
modulate the output demand according to the control logic. On detection of a BACKUP fault, the
SYSCON will pick up the BACKUP demand and output the full current demand. On detection of a
SYSCON fault, the SYSCON will transfer and the new SYSCON unit will pick up the full current demand.
When the high current range (0
-
200 mA) is used on the actuator
channels, it is possible to damage the readback circuit on the
controller if both the following events occur:
1. A wiring fault (open wire) exists on one of the actuator return
wires (this cannot be detected or annunciated by the
application)
2. Operator commands both units to enter “Run Alone” mode –
which directs both controllers to become SYSCON
It is critical on these circuits to use the DR-FTM or if not using it to wire correctly as per the hardware
manual (using isolation diodes on both the positive and negative signal lines) in order to have correct
output current readback signals.
The following table describes the SYSCON and BACKUP behaviors on signal failures:
Table 16-6. Driver Single Coil Fault Table
Single Coil Shared Actuators
Channel SYSCON FAULT BACKUP FAULT BACKUP STAT SYSCON Transfer
Actuator Driver FALSE FALSE Available No
Actuator Driver TRUE FALSE Available Yes
Actuator Driver FALSE TRUE Unavailable No
Actuator Driver TRUE TRUE Unavailable Yes (TRIP)
Released

Manual 35018V3 505XT Dual Redundant Control System for Steam Turbines
Table 16-7. Driver Dual Coil or Redundant Fault Table
Dual Coil and Redundant Actuators
Channel
HP A
SYSCO
N HP A BACKUP HP B SYSCON HP B BACKUP BACKUP STAT SYSCON Transfer
Actuator Driver FALSE FALSE FALSE FALSE Available No
Actuator Driver TRUE FALSE X FALSE Available Yes *1
Actuator Driver X FALSE TRUE FALSE Available Yes *1
Actuator Driver FALSE TRUE X X Unavailable No *2
Actuator Driver X X FALSE TRUE Unavailable No *2
Actuator Driver TRUE FALSE TRUE FALSE Available Yes *3
Actuator Driver TRUE TRUE TRUE X Unavailable No (TRIP) *4
Actuator Driver TRUE X TRUE TRUE Unavailable No (TRIP) *4
*1 – Always transfer on a SYSCON Actuator fault if both BACKUPs are healthy
*2 – A BACKUP fault of either A / B inhibits the transfer
*3 – A fault on both A/B drivers on the SYSCON will transfer to BACKUP if they are both healthy
*4 – A fault on both A/B drivers will cause a TRIP if there is also a fault on one of the BACKUP drivers
Actuator Drivers
The Driver Configuration menu has been updated for new Driver functionality added in the 505DR control.
The 505DR supports configurations for 3 types of actuators: Single Coil, Dual Coil, and Redundant
Actuators for both the HP and LP valve output demands. In addition, the driver demands can also be
routed to Woodward Digital Drivers or a LinkNet RTC node for bumpless SYSCON transfers. For split-
range applications, HP2 and LP2 are supported as a Single Coil configuration.
The actuator functions (HP, HP2, LP, and LP2) can be configured on any of the following channels or
Digital Drivers:
•Actuator 1 or 2 Outputs
•Analog Outputs 1-6
•SPC Digital Drivers (configurable for up to 4 units)
•RTCNet Node 26 Analog Output 1 or 2
Actuator Types
The sections below detail the actuator types supported by the 505DR.
Single Coil
A Single Coil actuator is a single demand signal to the final drive device. The device may be an actuator
coil or digital driver (VariStroke, VariStroke, CPCII etc.). The drive signal is shared between the
configured channel of the Primary and Secondary 505DR units. The BACKUP unit outputs the backup
demand (trickle) current that should be configured to equal ½ of the minimum current, as a health check
on the backup unit circuit. The SYSCON outputs the required current (plus half of the Minimum current) to
drive the coil from 0 to 100%. For example the backup demand current for a 4-20 mA output should be
set to 2 mA.
Released

Manual 35018V3 505XT Dual Redundant Control System for Steam Turbines
Single Coil Shared
(+)
(-)
Primary 505DR
ACT 1
1 2 3
Secondary 505DR
4 5 6 1 2 3 4 5 6
ACT 2 ACT 1 ACT 2
Twisted Pair Shield
Figure 16-2. Single Coil Shared Driver
I
t is recommended to use the
505DR
FTM
which
builds
-
in
the diode
and wire junctions between Actuator Output channels on the Primary
and Secondary units.
Single Coil Shared
(+)
(-)
Primary 505DR Secondary 505DR
505DR
FTM
35 (+)
36 (-)
37 shld
Twisted Pair
Shield
TM Cable
Harness
Figure 16-3 Single Coil Shared Driver with 505DR FTM
Dual Coil
A Dual Coil actuator requires two independent output demand signals to the final drive. The position of
the actuator is the summed total of the mA current demands from the two demand signals. In this
configuration, each drive signal is ½ of the total current demand. Upon failure of one of the demand
signals, the healthy demand signal will step up to demand the full drive current.
For example – if the dual coil actuator requires 20-160 mA for full stroke from 0-100%, then the backup
demand current for each of the actuator channels should be set to 5 mA. Thus when both controllers and
all actuator circuits are healthy the sum of the current outputs will equal 20 mA at a demand of 0%. The
application will automatically account for providing the correct output current required on the healthy
channels due to any faults detected.
Released

Manual 35018V3 505XT Dual Redundant Control System for Steam Turbines
Dual Coil
(+)
(-)
Primary 505DR
ACT 1
1 2 3
Secondary 505DR
4 5 6 1 2 3 4 5 6
ACT 2 ACT 1 ACT 2
Twisted Pair
Shield
AB
(+)
(-)
Figure 16-4 Dual Coil Driver
It is recommended to use the
505DR
FTM
which builds
-
in
the diode
and wire junctions between Actuator Output channels on the Primary
and Secondary units.
Dual Coil
(+)
(-)
Primary 505DR Secondary 505DR
AB
(+)
(-)
505DR
FTM
35 (+)
36 (-)
37 shld
TM Cable
Harness
38 (+)
39 (-)
40 shld
Twisted Pair
Shield
Figure 16-5. Dual Coil Driver with 505DR FTM
Redundant (parallel) Actuators
A Redundant Actuator application requires two independent output demand signals to two separate final
drive devices. In this configuration, the 505DR outputs the full demand signal on each output. Typically
the valve position is driven by the high signal select (HSS) of the two servos.
For example – if the redundant actuators require 20-160 mA for full stroke from 0-100%, then the backup
demand current for each of the actuator channels should be set to 10 mA. Thus when both controllers
and all actuator circuits are healthy, both of the servos will receive an output current of 20 mA at a
demand of 0%. The application will automatically account for providing the correct output current
required on the healthy channels due to any faults detected.
The following are a couple examples of redundant actuators that are available from Woodward that would
be configured as redundant actuators in the 505DR.
Released

Manual 35018V3 505XT Dual Redundant Control System for Steam Turbines
Table 16-8. Woodward Redundant Actuators
Product Name
Part Number
Description
CPC-DX 8918-116 (10 Bar)
8918-118 (25 Bar) Current to Pressure Converter Dual Transfer Skid (manual 26758)
VariStrokeDX 8918-165, -167 (Zone 1)
8918-164, -166 (Zone 2) Varistroke DX Skid (manual 35132)
Redundant
Actuator
Drive
Servo
A
Servo
B
Varistroke DX
or
CPCII DX
Primary 505DR
ACT 1
1 2 3
Secondary 505DR
4 5 6 1 2 3 4 5 6
ACT 2 ACT 1 ACT 2
Twisted Pair
Shield
Figure 16-6. Redundant (Parallel) Actuator Driver
It is recommended to use the
505DR
FTM
which builds
-
in
the diode
and wire junctions between Actuator Output channels on the Primary
and Secondary units.
Primary 505DR Secondary 505DR
505DR
FTM
35 (+)
36 (-)
37 shld
TM Cable
Harness
38 (+)
39 (-)
40 shld
Twisted Pair
Shield
Redundant
Actuator
Drive
Servo
A
Servo
B
Varistroke DX
or
CPCII DX
Figure 16-7. Redundant (Parallel) Actuator Driver with 505DR FTM
Released

Manual 35018V3 505XT Dual Redundant Control System for Steam Turbines
When a Redundant Actuator is configured, the Boolean Input function lists can be used to provide the
health status of each actuator driver back to the 505DR. The Boolean input can be configured for the
following options:
Table 16-9. Boolean Input Configuration Options
Menu#
Boolean Input Function
52 Redundant HP A Health Contact
53 Redundant HP B Health Contact
81 Redundant LP A Health Contact
82 Redundant LP B Health Contact
If both A and B drivers indicate a fault to the 505DR, the unit will trip if the HP or LP driver are configured
to trip on an actuator fault.
Redundant Actuator drivers can also be used to drive redundant demands to a simplex VariStroke or
CPCII unit.
Primary 505DR Secondary 505DR
505DR
FTM
35 (+)
36 (-)
37 shld
TM Cable
Harness
38 (+)
39 (-)
40 shld
Twisted Pair
Shield
Redundant Actuator Drive Configured
VSI/II/CPCII
Redundant
Demand
Signals
Figure 16-8. Actuator Driver with Redundant Demands
Released