Digital governor for steam turbines with single or split-range actuators (176 pages)
Summary of Contents for Woodward MicroNet 8237-1252
Page 1
Released Product Manual 26547V1 (Revision G, 1/2021) Original Instructions MicroNet™ Safety Module Fault Tolerant Protection System Manual 26547 consists of 2 volumes (26547V1 & 26547V2) Volume 1 - Installation and Operation...
Page 2
Revisions— A bold, black line alongside the text identifies changes in this publication since the last revision. Woodward reserves the right to update any portion of this publication at any time. Information provided by Woodward is believed to be correct and reliable. However, no responsibility is assumed by Woodward unless otherwise expressly undertaken.
Start-up To prevent damage to a control system that uses an alternator or battery-charging device, make sure the charging device is turned off before disconnecting the battery from the system. Battery Charging Device Woodward...
Do not touch the components or conductors on a printed circuit board with your hands or with conductive devices. To prevent damage to electronic components caused by improper handling, read and observe the precautions in Woodward manual 82715 , Guide for Handling and Protection of Electronic Controls, Printed Circuit Boards, and Modules.
Compliance is limited to application for those units bearing the RCM: Regulatory Compliance Mark (RCM). Only EMC is applicable in virtually all Woodward intended applications. RCM on WWD products is very limited due to allowed exemptions from applying the RCM or having a DoC EMC: Electromagnetic Compatibility (EMC) Declaration of Conformity (DoC) RCM requirements for the Australian (&...
Page 10
II, III, or IV. Explosion Hazard—Do not connect or disconnect while circuit is live unless area is known to be non-hazardous. Substitution of components may impair suitability for Class I, Division 2 or Zone 2 applications. Woodward...
Programming and Configuration Tool Probability of Failure on Demand Probability of dangerous Failure per Hour Programmable Logic Controller PROX Proximity Probe Remote Terminal Unit Settings-File A file that contains the configuration settings loaded with the ProTech Service Tool (.wset). MicroNet™ Safety Module Woodward...
DCS. The MicroNet Safety Module is designed for critical applications where both personnel safety and unit availability (operation run time) is a concern or necessity. Figure 1-1. Typical MicroNet Safety Module Application (Voted Trip Relay Models) Woodward...
The MicroNet Safety Module is certified as an IEC61508 SIL-3 (Safety Integrity Level 3) safety device and can be applied as a stand-alone IEC61508-based device or within an IEC61511-based plant safety system. Figure 1-4. Typical Safety PLC Application (Voted Trip Relay Models) Woodward...
CRC codes. 10. From each module’s front panel, enter the configuration mode and verify that each of the overspeed and over-acceleration settings are correct. 11. Enter the configuration mode and configure all settings to the specific application’s requirements Woodward...
MicroNet Safety Module control’s back side, and a back cover is included to protect wiring terminals after installation. Figures 2-4 and 2-5 display the Panel-Mount MicroNet Safety Module model’s layout and mounting pattern. Figure 2-1. Typical MicroNet Safety Module Bulkhead Package—Front View Woodward...
Manual 26547V1 MicroNet Safety Module Fault Tolerant Protection System Figure 2-2. Typical MicroNet Safety Module Bulkhead Package—Front Door Open Figure 2-2a. Bulkhead Schematic Showing Front Panel A Connection to Module A and Front Panel C Connection to Module C—Top View Woodward...
1. Insert module into slot by pressing firmly on handles. The module has guides to assist in location. 2. Tighten 4 module retention screws 3. Install terminal blocks 4. Apply power and observe that the power LED is ON Woodward...
2. Remove 4 back panel retaining screws 3. Remove back panel 4. Verify power removed by observing power LED is OFF 5. Remove terminal blocks from module terminals 6. Loosen 4 module retaining screws 7. Remove module by pulling the two handles simultaneously Woodward...
Page 26
Released Manual 26547V1 MicroNet Safety Module Fault Tolerant Protection System Woodward...
Protection from high-voltage or high-current devices which produce electromagnetic interference • Avoidance of vibration • A location that has H S and SO gases at or below the levels classified in international standard IEC 721-3-3 1994 – environment Class 3C2 • Maximum purge pressure: 4 psi Woodward...
Each MicroNet Safety Module will function normally with power sourced to both or either power supply input independently, however Woodward recommends that both input power sources be used to improve system availability. Please refer to Table 1-1 for available MicroNet Safety Module models.
Installations with severe electromagnetic interference (EMI) may require relay and discrete input wiring to be shielded, conduits and/or double shielded wire may be needed, or other precautions may have to be taken. These additional precautions may be implemented in any installation. Contact Woodward for more information.
MicroNet Safety Module enclosure. Woodward also recommends that power wiring be segregated in the same manner, however LV & HV input power may be routed together.
Page 31
Field wiring access for panel-mounted models is located on the back of the MicroNet Safety Module enclosure. To allow proper installation of the unit’s back cover plate, Woodward recommends that all field wiring be routed from the bottom of the package. The units back cover must be installed. Refer to Figure 2-5 for field wiring access information.
Released Manual 26547V1 MicroNet Safety Module Fault Tolerant Protection System Figure 2-9. Trip Module – Included within Voted Trip Relay Units Only Figure 2-10a. Power Supply Field Wiring Routing & Stress Relief Diagram Woodward...
0.25 mm to 1.02 mm (0.010 inch to 0.040 inch) from tooth face to pole piece. For information on selecting the correct MPU or gear size please refer to Woodward manual 82510. Refer to Figure 2-11a for wiring information.
Active Probe Configured Figure 2-11c. Example Proximity Probe (Active Magnetic Pickup Unit) Wiring (External Power, Non-preferred) +24V Active Probe Configured Eddy Current Probe Bently Proximitor Active Probe Configured Sensor Figure 2-11d. Example Eddy Current Probe (Active Magnetic Pickup Unit) Wiring Woodward...
Ten configurable inputs per module (A, B, C) are available to sense discrete contact input signals or 4–20 mA analog input signals. Depending on the application’s needs, each input can be configured within the MicroNet Safety Module Programming and Configuration Tool (PCT) to function as discrete or analog input. Woodward...
The internal 24 V provides enough power to operate all 10 inputs in discrete mode. For reliability reasons, Woodward recommends that input circuitry for each module (A, B, C) be fully isolated from the input circuitry of the other two modules. For example, the power source and wiring for module A should not be shared or connected in any way to modules B or C.
AI. Damage may occur during PE ground bounce or high current transient ground fault conditions due to large potential differences in the remote PE ground & the local PE ground. For reliability reasons, Woodward recommends that input circuitry for each module (A, B, C) be fully isolated from the input circuitry of the other two modules.
2-o-o-3 voted fashion to drive two redundant Form-C trip relays. These two redundant have normally- open and normally closed output contacts rated for 220 V (ac) @ 8 A or 24 V (dc) @ 8 A. Refer to Figure 2-16a for relay terminal location and Figure 2-16d for wiring information. Woodward...
These are user-programmable and can be programmed to function as required. The programmable relay outputs have normally-open type contacts and are rated for 24 V (dc) @ 1 A. Refer to Figure 2-16e or f for wiring information. Figure 2-16e. Example Programmable Relay Wiring (Internal Supply) Woodward...
24 V EXT supply or Discrete Supply. Referencing input power to DISCRETE PWR or 24 V EXT causes the internal supplies to respond more readily to transients on the power bus. Woodward...
Tying the input power to the Discrete power causes bias offsets which make the supplies susceptible to transients. The supply must also be referenced correctly to Discrete PWR by connecting the two commons. Figure 2-17. Power Supply Relationship Diagram Woodward...
Optional termination resistors for RS-485 communication networks are included within the MicroNet Safety Module control’s internal circuitry, and only require terminal block wire jumper(s) for connection to a network, for applications requiring these termination resistors. Refer to Figure 2-18b for jumper connections. Figure 2-18b. Serial Com Port Interface Diagram —RS-485 Woodward...
Save application and configuration settings to a file • Download application and configuration settings to each MicroNet Safety Module • Upload application and configuration settings from a MicroNet Safety Module • Upload and view stored logged files from a MicroNet Safety Module Woodward...
The MicroNet Safety Module “Voted Trip Relay” models consist of three independent modules that each accept one speed input and 10 configurable analog/discrete inputs, and whose trip output commands are then voted in a 2-out-of-3 fashion to create the 2-out-of-3 trip output command. Woodward...
The trip command outputs are electrically separated, allowing each module to actuate a separate external relay or trip solenoid. These models are typically used with special 2-out-of-3 voted trip block assemblies or 2-out-of-3 voted trip string relay logic. Figure 3-1. Basic Functional Overview of Independent Trip Relay Models Woodward...
24 V (32 V max) Isolation: 500 V (ac) from output to chassis and output to all other circuits Signal Cable Length: Must be limited to 305 m / 1000 ft (low capacitance 1.3 mm² / 16 AWG pair) Woodward...
Page 55
Note 1: The input current specifications are for 1 module, measured with the other power supply input disconnected. With both power supply inputs connected, input current will never exceed the maximum specification, however the two power supplies do not load share internally. Woodward...
The Number of Gear Teeth and Gear Ratio must match the actual unit hardware or speed sensing and all association protection and functionality will not work correctly. Refer to Chapter 2 of this manual for related speed sensing input installation information. Woodward...
Page 57
2 kΩ (0.25 W) from terminals 70 to 69 and verify that the signal is read properly by the MicroNet Safety Module. Shielded cable is required when connecting to the speed input. Woodward...
When configured as a discrete Input, the channel accepts a (0 to 24) V (dc) discrete input. NOTE: <6 V (dc) = FALSE, >12 V (dc) = TRUE. The Boolean output associated with the Discrete input can be used in the user configured software. Figure 3-8. Discrete Input Example Woodward...
Configurable Input Specifications Table 3-12. General Specifications Number of Channels: 10, user configurable for individual analog or discrete input mode Signal Cable Length: Must be limited to 305 m / 1000 ft (low capacitance 1.3 mm² / 16 AWG) Woodward...
Voltage Rating: 24 V (32 V max) Isolation: 500 V (ac) from output to chassis and output to all other circuits Signal Cable Length: Must be limited to 305 m / 1000 ft (low capacitance 1.3 mm² / 16 AWG) Woodward...
Peak speed and peak acceleration are tracked and logged for every overspeed and over-acceleration occurrence, the last 20 occurrences logged and can be viewed from a front panel or loaded to a computer via the MicroNet Safety Module Programming and Configuration Tool (PCT). Woodward...
The logic unit provides configurable logic that allows the user to define how the input signals are used in detecting an unsafe condition and generating a trip signal. The configurable logic provides the following functions: • Analog comparators • Boolean combinatorial logic (AND, OR, NOT, etc.) Woodward...
Auto Speed Test or any of the User-defined Tests. User-defined Tests can be started through configurable logic—so a discrete input might be defined to initiate a test. Finally, there is a Periodic Overspeed Test function that will automatically run tests at a user-defined interval. Woodward...
Page 65
Modbus. The auto test starts at 100 rpm below setpoint. Then the frequency generator ramps up at approximately 10 rpm/s until the overspeed trip occurs. When the overspeed trip occurs, it is logged in the modules’ trip log and noted as a test. Woodward...
Page 66
0 to 30 minutes (1800 seconds) with 1 second resolution. When the test is enabled, the timer starts—if it reaches the timeout value, the test latch is automatically reset. The test latches can be reset from the configurable logic, or from the front panel, or via Modbus. Woodward...
TRIPPED light is illuminated on the front panel. The module trip relays are put in the trip state (which could be configured as energized or de-energized). Each Trip Input is individually latched, and those latched outputs are available on Modbus. The individual latches are reset by the reset function if the input is false. Woodward...
The log functions use scrolling buffers that keep the most recent data. The individual log sizes are described in the following descriptions. Logs can be cleared from the front panel with the appropriate password. The Test Level Password is needed to Reset All Logs except of the Peak Woodward...
Page 69
The maximum speed and acceleration detected by the module will be logged. This includes values generated by internal simulation testing. As this is intended to be a maximum value capture, no date or time information is associated with these values. This can be reset from the front panel with the Config Level Password. Woodward...
Frequency = (rpm) * (number of teeth) / 60 Figure 3-14. Response Time Definition Analog Output The response time of the analog output is less than 10 ms measured from a change in speed to a change in the output current. Woodward...
The MicroNet Safety Module is designed to allow only one module to be tested at a time. Thus a module will only accept an Initiate Test command and perform the requested test if all three modules are healthy, not tripped, and not in a test mode. Woodward...
Since Modbus can only handle integers, values that require a decimal point in the Modbus Master Device are multiplied by a scaling constant before being sent by MicroNet Safety Module. See the Modbus list for the scaling used on each analog parameter. Woodward...
Page 74
0 = internal fault trip is TRUE (Unit Health LED is green) 1 = internal fault trip is FALSE (Unit Health LED is amber) 2 = state of the internal fault trip is unknown because of a communication fault (Unit Health LED is off) Woodward...
Page 75
0:0203 Abort User Test 1 0:0301 Confirm User Defined Test 2 0:0302 Initiate User Defined Test 2 0:0303 Abort User Test 2 0:0401 Confirm User Defined Test 3 0:0402 Initiate User Defined Test 3 0:0403 Abort User Test 3 Woodward...
Page 76
Event Latch 3 1:1084 Analog Comparator 2 1:1023 Analog Input 1 HiHi 1:1085 Analog Comparator 3 1:1024 Analog Input 1 Hi 1:1086 Analog Comparator 4 1:1025 Analog Input 1 Lo 1:1087 Analog Comparator 5 1:1026 Analog Input 1 LoLo Woodward...
Unlit – No alarms or the module is not powered. • Yellow – Active alarms, press VIEW button below LED to see the alarm log or navigate to the Monitor Alarm Latch screen to see the active status on each alarm input. Woodward...
Internally supplied wetting Measure voltage from terminal 1 to voltage fault. terminal 81 and verify it is 23 V ±2 V. If out of range, return unit to Woodward. Woodward...
Page 81
Module, measure voltage between terminals 80, 81 and verify 24 V ±10 %. If it is not, remove the wiring from the 24 V EXT to unload the output and measure again to verify the voltage is not being overloaded. Woodward...
Page 82
COM Port Check that there is power applied to the MicroNet Safety Module module that the service tool is connected. Verify the correct COM port is selected when establishing communications and that Auto Detection BAUD rate is selected. Woodward...
Log. This log expands the Internal Fault annunciation. In general, it is not possible to fix internal faults without returning the unit to Woodward. Power Up Trip The module has lost Power source fault or Verify power source, power and has been breaker reset.
Page 84
Check wiring continuity has not detected speed probe fault and probe integrity. within the time set by the Speed Fail Timeout Incorrect speed fail See manual for setting. timeout time configured description of function. Use PCT to verify proper configuration settings. Woodward...
See manual for description Test simulated overspeed speed test. and limitations. test has been activated. Auto Sim. Speed Test Indicates the User initiated simulated See manual for description automated simulated speed test. and limitations. overspeed test has been activated. Woodward...
Page 86
Check external system by following the trip signal around the loop until it returns back to the MicroNet Safety Module input that is designated as the trip indicator input. Woodward...
If your configuration settings are using Active probes (not MPU’s) and your configuration has Speed Fail Trip set to “NOT USED” your configuration may be at risk in the event of a second fault. Woodward...
Page 88
PCT (Programming and Configuration Tool) as shown below: Figure 5-2. Speed Fail Trip Using PCT To determine the recommended configuration settings for detecting failed speed probes in systems that utilize Active Speed probes, reference the flowchart in Figure 5-3 below: Woodward...
Page 89
Customer should verify speed on the modules before and after reset. • Using Reset then issuing Start will validate the speed input and will trip if not above Speed Set point by end of start command. Figure 5-3. Configuration Guidance Flowchart Woodward...
PFD and PFH calculations have been performed on the MicroNet Safety Module according IEC61508. For SIL3, IEC states the following requirements. Table 6-2. SIL 3 Calculation Types and Values Type SIL 3 Value to 10 to 10 > 90 % Woodward...
Module, actuators, etc.) that make up the total process safety time. For this purpose, the MicroNet Safety Module response time is given below. Table 6-5. Response Time Response Time Independent Trip Relay Versions < 12 ms Voted Trip Relay Versions < 20 ms Woodward...
The MicroNet Safety Module has programming capability to facilitate the automatic checkout and periodic maintenance of the safety system. For help on programming, see the chapters on functionality, configuration and the example applications. The MicroNet Safety Module must be used within the published specification in this manual. Woodward...
All persons involved in the initial design or modification of the programmable software, installation and maintenance must have appropriate training. Training and guidance materials include this manual, the MicroNet Safety Module service tool, and training programs available at Woodward. See Chapter 8 (Service Options) for more information.
Page 94
Chassis isolation checks using resistance measurement. Measure from terminals 39, 66, 67 to a point on the MicroNet Safety Module chassis (the grounding braid is a good place for this measurement): < 1 Ω. 14. Perform a lamp test from front panel Test Menu. Woodward...
Woodward recommends that your product be sent back to Woodward or to a Woodward authorized service facility after every five to ten years of continuous service for inspection and component upgrades. Please refer to the service programs in the following chapter.
• An Authorized Independent Service Facility (AISF) provides authorized service that includes repairs, repair parts, and warranty service on Woodward's behalf. Service (not new unit sales) is an AISF's primary mission. A current list of Woodward Business Partners is available at www.woodward.com/directory.
All repair work carries the standard Woodward service warranty 5-09-0690 North American Terms and Conditions of Sale (Industrial Business Segment) on replaced parts and labor.
• The unit serial number, which is also on the nameplate Engineering Services Woodward offers various Engineering Services for our products. For these services, you can contact us by telephone, by email, or through the Woodward website. • Technical Support •...
MicroNet Safety Module Fault Tolerant Protection System Technical Assistance If you need to contact technical assistance, you will need to provide the following information. Please write it down here before contacting the Engine OEM, the Packager, a Woodward Business Partner, or the Woodward factory: General...
Modbus Ethernet Gateway Information Introduction ® For customers who want to use Modbus Ethernet communications or put the ProTech on the plant network, Woodward recommends the following Ethernet-to-Serial Gateways: B&B Electronics – Model: MESR901 Serial: RS-232, RS-485, or RS-422 Power Input: 10–48 Vdc B&B Electronics Mfg.
Page 101
Released Manual 26547V1 MicroNet Safety Module Fault Tolerant Protection System Wiring RS-232 Note: The Serial DB9 connection is used for RS-232 communication only. Woodward...
Page 102
When configuring for RS-485, termination resistors (120 ς) are needed at each end of the network. Note the location of the resistor on the device. The ProTech has the termination resistor built into the module, jumpers are necessary between terminals 14 – 15 and 18 – 19 to activate the termination. Woodward...
Page 103
Released Manual 26547V1 MicroNet Safety Module Fault Tolerant Protection System Configuration Configuration of the MESR901 is done through Vlinx Modbus Gateway Manager. The configuration software is provided with the device. Network Settings Modbus TCP Settings Woodward...
Page 104
Released Manual 26547V1 MicroNet Safety Module Fault Tolerant Protection System Serial Communication Settings Note: For RS-485 communication, select RS-485 under Mode, and use the terminal block connections. The DB9 port is for RS-232 communications only. Serial Modbus Settings Woodward...
485/422, you will need to assign each module a unique node address, which can be found in the Modbus configuration screen on the ProTech. Wiring RS-232 Verify that the dip switch on the front of the device is in the up position, indicating RS-232 communications. Woodward...
Page 106
When configuring for RS-485, termination resistors (120 ς) are needed at each end of the network. Note the location of the resistor on the device. The ProTech has the termination resistor built into the module, jumpers are necessary between terminals 14 – 15 and 18 – 19 to activate the termination. Woodward...
Page 107
Released Manual 26547V1 MicroNet Safety Module Fault Tolerant Protection System Configuration Configuration of the UDS100-Xpress DR IAP is done through DeviceInstaller. The configuration software is provided with the device. Overview Woodward...
Page 108
Released Manual 26547V1 MicroNet Safety Module Fault Tolerant Protection System Network Menu Serial Settings Menu Note: For RS-485 communications, choose option 3 under interface type and don’t forget to set the dip switch on the front of the device. Woodward...
Page 109
Released Manual 26547V1 MicroNet Safety Module Fault Tolerant Protection System Modem Control Menu Advanced Menu Woodward...
Changes in Revision E— • Updated Regulatory and Compliance Section • Updated DOC/DOI Changes in Revision D— • Updated manual to reflect changes to MPU input threshold and impedance Changes in Revision C— • Updated part numbers in Table 1-1 Woodward...
Released Manual 26547V1 MicroNet Safety Module Fault Tolerant Protection System Declarations Woodward...
Page 112
Email and Website—www.woodward.com Woodward has company-owned plants, subsidiaries, and branches, as well as authorized distributors and other authorized service and sales facilities throughout the world. Complete address / phone / fax / email information for all locations is available on our website.
Need help?
Do you have a question about the MicroNet 8237-1252 and is the answer not in the manual?
Questions and answers