Table of Contents
Advertisement
Input Channel Calibration
Check
Transfer between Active
and Standby Modules
the Module's Active LED and the Processor's System Healthy LED steady
green, press the Processor Reset push button.
It is recommended that a check is carried out at two yearly intervals on the
input channel calibration. This check will detect long-term drift and any
inaccuracy as a result. Refer to Appendix F of Trusted TMR Safety Manual
T8094, publication ICSTT-RM459.
The TMR Processor is responsible for managing a pair of I/O Modules
through an Active/Standby changeover. The following rules apply to
Active/Standby changeovers, though the TMR Processor and not the I/O
Module enforces them:
• The user must define the primary, and optionally the secondary, I/O
Module location for each I/O Module pair. Each primary module
location must be unique and is defined as part of the complex
equipment definition within the IEC 61131 TOOLSET. Secondary
module locations can be unique or shared between multiple secondary
modules and are defined within the module's section within the
System.INI file. The system will automatically determine the
secondary module position if the primary module is installed and is
operable.
• On initial startup, if the primary module is installed, it will become the
Active Module by default. If the secondary module has been defined
within the System.INI file and no primary module is present, and if the
secondary module location is unique, the secondary module will
become the Active Module by default. If the secondary module is
installed with no primary module present, and the secondary module
location is not unique (as in a SmartSlot configuration), then NO
Module for that Module pair will become Active.
• In order for a Module to become the Active Module, the TMR Processor
will verify that the Module is the correct I/O Module type and that both
module removal switches are closed. At this point, the I/O Module is
configured and eventually placed in the Active state.
• A module in the Active state should never be removed.
• When a fault occurs on the Active Module, the TMR Processor will be
informed. Once it becomes aware of the fault, the TMR Processor will
attempt an Active/Standby changeover.
• An Active/Standby changeover starts with the TMR Processor checking
to see if a Standby I/O Module is installed. If no Standby I/O Module is
available, the TMR Processor will continue to use the Active Module
and will continue to check for an available Standby I/O Module. Once a
Standby Module is found, the TMR Processor will verify that the I/O
Module is of the correct type, that both module removal switches are
closed, and that the I/O Module is a part of the correct module pair by
using the SmartSlot link. At this point, the TMR Processor will
configure the Standby I/O Module with the same configuration
information as the currently Active I/O Module and place the Standby
Rockwell Automation Publication ICSTT-RM273Q-EN-P - August 2021
Chapter 6
Fault finding and maintenance
35
Advertisement
Table of Contents
