Transfer Between Active And Standby Modules - Rockwell Automation Trusted TMR Manual

Trusted TMR Analogue Output Module – 40 Channel
Module once it has booted. Once educated, the Educated LED will be steady green and the
Active LED will be red flashing.
Input Modules will now be reading and reporting their inputs. Output Modules have not yet
energised their outputs. To activate outputs and to set the Module's Active LED and the
Processor's System Healthy LED steady green, press the Processor Reset pushbutton.

5.7. Transfer between Active and Standby Modules

The TMR Processor is responsible for managing a pair of I/O Modules through an
Active/Standby changeover. The following rules apply to Active/Standby changeovers,
though the TMR Processor and not the I/O Module enforces them:
• The user must define the primary, and optionally the secondary, I/O Module location
for each I/O Module pair. Each primary Module location must be unique and is
defined as part of the complex equipment definition within the IEC 61131 TOOLSET.
Secondary Module locations can be unique or shared between multiple secondary
Modules and are defined within the Module's section within the System.INI file. The
system will automatically determine the secondary Module position if the primary
Module is installed and is operable.
• On initial start-up, if the primary Module is installed, it will become the Active
Module by default. If the secondary Module has been defined within the System.INI
file and no primary Module is present, and if the secondary Module location is
unique, the secondary Module will become the Active Module by default. If the
secondary Module is installed with no primary Module present, and the secondary
Module location is not unique (as in a SmartSlot configuration), then NO Module for
that Module pair will become Active.
• In order for a Module to become the Active Module, the TMR Processor will verify
that the Module is the correct I/O Module type and that both Module Removal
switches are closed. At this point the I/O Module is configured and will be placed in
the Active state.
• A Module in the Active state should never be removed.
• When a fault occurs on the Active Module, the TMR Processor will be informed.
Once it becomes aware of the fault, the TMR Processor will attempt an
Active/Standby changeover.
• An Active/Standby changeover starts with the TMR Processor checking to see if a
Standby I/O Module is installed. If no Standby I/O Module is available, the TMR
Processor will continue to utilise the Active Module and will continue to check for an
available Standby I/O Module. Once a Standby Module is found, the TMR Processor
will verify that the I/O Module is of the correct type, that both Module Removal
switches are closed, and that the I/O Module is a part of the correct Module pair by
Rockwell Automation Publication ICSTT-RM284O-EN-P
5. Fault Finding and Maintenance
Issue 15 33