Allen-Bradley AADvance T9110 Safety Manual page 52

Chapter 3 AADvance System Architectures
52
module failure due to a dangerous fault has not been replaced within the
MTTR.
WARNING: For SIL 3 applications you must use a minimum of a dual
processor configuration.
Digital Output Modules
A digital output module fault must be repaired within the MTTR which was
used in the PFD calculation.
Analogue Output Modules
An analogue output module fault must be repaired within the MTTR which
was used in the PFD calculation.
Table 9 - Modules for SIL 3 Fault Tolerant Architectures
Position Module Type
I/P A 2 × T9401/2 Digital Input Module, 24V dc, 8/16 Channel, + T9802 Digital Input TA, 16 Channel,
Dual
and
or
I/P B
2 × T9431/2 Analogue Input Module, 8/16 Channel + T9832 Analogue Input TA, 16 Channel, Dual
2 x T9300 I/O Base Unit
CPU A & CPU B 2 × T9110 Processor Module, 9100 Processor Base Unit,
O/P A 1 × T9451 Digital Output Module, 24V dc, 8 Channel + T9851 Single Digital Output TA, 24V dc, 8
Channel for de-energize to action.
and
T9300 Base unit
O/P B
2 x T9451 Digital Output Module, 24V dc, 8 Channel + T9852 Dual Digital Output TA for energize to
action.
or
2 x T9481/T9842 Analogue Output Module, 3/8 Ch, Isolated + T9882 Analogue Output TA, 8 Ch,
Dual
Rockwell Automation Publication ICSTT-RM446N-EN-P - April 2018