Module Change-Out - ABB Triguard SC300E Safety Manual

6.2.2.1 Detailed Diagnostics
Having received a diagnostic alarm the maintainer, having been given a permit to work, would
gain access to the system cabinets via keylocks.
The first level of detailed diagnostics is visual as each module in the Triguard SC300E System
has a green health led and the faulty module should already be indicating its fault by
extinguishing the health led.
In the unlikely event that all health LED's are still on, the next level of diagnostics evaluation
requires the use of TriBuild. The TriBuild Administrator will have given all maintainers
maintenance writes of access that will allow them to view diagnostics and, where appropriate,
networks but would not allow on-line changes. This access control is by password protection
(and, of course, cabinet keylock) details of which are provided in the TriBuild User Help facilities.
6.2.3

Module Change-Out

All Triguard SC300E Modules can be changed on-line without disturbing the safeguarding of the
process.
It is recommended that all spares be available from a spares test system, where the health of
the spare module can be confirmed prior to change-out.
Off-line modules must be tested periodically.
6.2.3.1 Input and Output Modules
The spare module should first be visual checked, in the case of input and output modules this
should include the fact that the coding blocks are correctly fitted (eg operation mode, GTZ...)
and that the settings of the fallback links are correct eg operation mode 3-2-0 (GTZ and HW for
output modules).
In the case dual slot configuration of Triguard SC300E input and output modules, the new
module should be inserted into the relevant hot repair slot and after the module has confirmed
its health by powering the health led, the maintenance switch may be toggled which will request
the hot repair cycle to be initiated.
The hot repair cycle is initiated by the main processors and is indicated by the flashing of the
LED's on the new module. It culminates with the on-line LED's of the new module going "on"
whilst at the same time the on-line LED's of the module to be removed goes off. Note that during
the change-over period the outputs can be frozen for up to 2 seconds.
When this cycle has been successfully completed, the location screws on the new module
should be tightened and the faulty module removed for repair.
The error clear should now be operated to bring the system back to 100% operation by clearing
the error history, which will allow any new faults that occur to be readily diagnosed.
6.2.3.2 Main Processor Modules
The spare processor module should first be visually checked to confirm the configuration
switches are correctly set.
If a warm-start keyswitch has not been made available by the application configuration, the
TriBuild Workstation should be connected to the console port and brought on-line.
Turning the processor keyswitch to the reset position should then halt the faulty processor and
then the faulty processor should be removed.
The new processor should now be plugged in to the vacant processor slot with the keyswitch set
in the reset position. The keyswitch is then turned to the 'run' position. The processor will then
Issue 5 - September 2006
Page 34 of 65