Download Print this page
Woodward 8237-1492 Installation And Operation Instractions
Woodward 8237-1492 Installation And Operation Instractions

Woodward 8237-1492 Installation And Operation Instractions

Micronet safety module fault tolerant protection system with voted inputs

Advertisement

Quick Links

Released
Product Manual 26711V1
(Revision G, 12/2022)
Original Instructions
MicroNet™ Safety Module
Fault Tolerant Protection System
With Voted Inputs
Manual 26711 consists of 2 volumes (26711V1 & 26711V2)
Volume 1 - Installation and Operation

Advertisement

loading
Need help?

Need help?

Do you have a question about the 8237-1492 and is the answer not in the manual?

Questions and answers

Summary of Contents for Woodward 8237-1492

  • Page 1 Released Product Manual 26711V1 (Revision G, 12/2022) Original Instructions MicroNet™ Safety Module Fault Tolerant Protection System With Voted Inputs Manual 26711 consists of 2 volumes (26711V1 & 26711V2) Volume 1 - Installation and Operation...
  • Page 2 Revisions— A bold, black line alongside the text identifies changes in this publication since the last revision. Woodward reserves the right to update any portion of this publication at any time. Information provided by Woodward is believed to be correct and reliable. However, no responsibility is assumed by Woodward unless otherwise expressly undertaken.
  • Page 3   6. S .................... 104  HAPTER AFETY ANAGEMENT Product Variations Certified ........................104   Safe State..............................104   SIL Specifications ............................104   Failure Rate Data ............................105   Response Time Data ..........................106   Limitations ..............................106   Woodward...
  • Page 4 Product Service Options ........................... 110   Returning Equipment for Repair ....................... 111   Replacement Parts ............................ 112   Engineering Services ..........................112   Contacting Woodward’s Support Organization ..................112   Technical Assistance ..........................113   ............114  PPENDIX ODBUS THERNET...
  • Page 5 Figure 3-7. Functional Diagram of Single MicroNet Safety Module with Voted Trip Relay Outputs ... 59   Figure 3-8. Simplex Trip Block Assembly ....................60   Figure 3-9. Dual Redundant Trip Block Assembly ..................60   Figure 3-10. Discrete Input Example ......................64   Woodward...
  • Page 6   Table 5-1. I/O Troubleshooting ........................94   Table 5-2. Trip Indications ........................... 97   Table 5-3. Alarm Indications ........................99   Table 6-1. Trip Relay Safe State Configuration ..................104   Table 6-2. SIL Specifications ........................104   Woodward...
  • Page 7 Start-up To prevent damage to a control system that uses an alternator or battery-charging device, make sure the charging device is turned off before disconnecting the battery from the system. Battery Charging Device Woodward...
  • Page 8 Do not touch the components or conductors on a printed circuit board with your hands or with conductive devices. To prevent damage to electronic components caused by improper handling, read and observe the precautions in Woodward manual 82715 , Guide for Handling and Protection of Electronic Controls, Printed Circuit Boards, and Modules.
  • Page 9 CE Marking: RoHS Directive: Restriction of Hazardous Substances 2011/65/EU: Woodward Turbomachinery Systems products are intended exclusively for sale and use only as a part of Large Scale Fixed Installations per the meaning of Art.2.4(e) of directive 2011/65/EU.
  • Page 10 Regulatory Compliance Mark (RCM). Only EMC is applicable in virtually all Woodward intended applications. RCM on Woodward products is very limited due to allowed exemptions from applying the RCM or having a DoC. Electromagnetic Compatibility (EMC) Declaration of Conformity (DoC) RCM requirements for the Australian (&...
  • Page 11 Explosion Hazard The Service Port (RS-232 communication) is not designed to remain connected during operation except at servicing & programming intervals. It should not have a cable connected to it other than during programming & servicing. Woodward...
  • Page 12 Risque d’explosion—Ne pas raccorder ni débrancher tant que l’installation est sous tension, sauf en cas l’ambiance est décidément non dangereuse. La substitution de composants peut rendre ce matériel inacceptable pour les emplacements de Classe I, applications Division 2 ou Zone 2. Woodward...
  • Page 13 Probability of Failure on Demand Probability of dangerous Failure per Hour Programmable Logic Controller PROX Proximity Probe Remote Terminal Unit Settings-File A file that contains the configuration settings loaded with the MicroNet Safety Module Service Tool (.wset). MicroNet Safety Module Woodward...
  • Page 14 MSM – Panel Mount, HV/HV, voted relays, voted inputs 5437-1132 Spare Module for MSM models 8237-1494, -1498 5437-1133 Spare Module for MSM models 8237-1495, -1499 5437-1134 Spare Module for MSM models 8237-1492, -1496 5437-1135 Spare Module for MSM models 8237-1493, -1497 Woodward...
  • Page 15 DCS. The MicroNet Safety Module is designed for critical applications where both personnel safety and unit availability (operation run time) are a concern or necessity. Figure 1-1. Typical MicroNet Safety Module Application (Voted Trip Relay Models) Woodward...
  • Page 16 Released Manual 26711V1 MicroNet Safety Module Fault Tolerant Protection System Figure 1-2. Typical MicroNet Safety Module Application (Independent Trip Relay Models) Figure 1-3. Typical Gas Turbine Application (Voted Trip Relay Models) Woodward...
  • Page 17 Amm. Vapor PSVs Vapor vents Drains from Synth.& Ref. vessels V1503 Amm. Flash Vessel V1511 Vent To Storage Drum Liq.Amm. To Storage 1.7M3 To Urea Plant TI1590 To V1503 P1501A/B P1502 Figure 1-4. Typical Safety PLC Application (Voted Trip Relay Models) Woodward...
  • Page 18 CRC codes. 10. From each module’s front panel, enter the configuration mode and verify that each of the overspeed and over-acceleration settings are correct. 11. Enter the configuration mode and configure all settings to the specific application’s requirements Woodward...
  • Page 19 MicroNet Safety Module control’s back side, and a back cover is included to protect wiring terminals after installation. Figures 2-4 and 2-5 display the Panel-Mount MicroNet Safety Module model’s layout and mounting pattern. Figure 2-1. Typical MicroNet Safety Module Bulkhead Package—Front View Woodward...
  • Page 20 Manual 26711V1 MicroNet Safety Module Fault Tolerant Protection System Figure 2-2a. Typical MicroNet Safety Module Bulkhead Package—Front Door Open Figure 2-2b. Bulkhead Schematic Showing Front Panel A Connection to Module A and Front Panel C Connection to Module C—Top View Woodward...
  • Page 21 Released Manual 26711V1 MicroNet Safety Module Fault Tolerant Protection System   Figure 2-3. Mounting Outline Diagram for Bulkhead-Mounted Models Woodward...
  • Page 22 Currently, display circuit boards are not replaceable. Users should not attempt to remove or install any display board. If a display board is unresponsive, contact Woodward for a recommendation regarding service options. DO NOT ATTEMPT TO REPAIR! Follow this procedure for module removal and installation: Removal: 1.
  • Page 23 Released Manual 26711V1 MicroNet Safety Module Fault Tolerant Protection System 4 Retaining Screws Power LED 5. Remove module by pulling the two handles simultaneously Woodward...
  • Page 24 1. Insert module into slot by pressing firmly on handles. The module has guides to assist in location. 2. Tighten four module retention screws. 3. Install terminal blocks. 4. Insert power terminal block and observe that the power LED is ON. Woodward...
  • Page 25 Released Manual 26711V1 MicroNet Safety Module Fault Tolerant Protection System Figure 2-4a. Typical MicroNet Safety Module Panel Mount Package—Front View Figure 2-4b. Typical MicroNet Safety Module Panel Mount Package—Rear View With Cover Woodward...
  • Page 26 Modules Displays Figure 2-4d. Panel Mount Schematic Showing Front Panel A Connection to Module A and Front Panel C Connection to Module C—Top View Woodward...
  • Page 27 Released Manual 26711V1 MicroNet Safety Module Fault Tolerant Protection System Figure 2-5a. Mounting Outline Diagram for Panel-Mount Models Woodward...
  • Page 28 Released Manual 26711V1 MicroNet Safety Module Fault Tolerant Protection System Figure 2-5b. Mounting Outline Diagram for Panel-Mount Models Woodward...
  • Page 29 2. Remove 4 back panel retaining screws. 3. Remove back panel. 4. Verify power removed by observing power LED is OFF. 5. Remove terminal blocks from module terminals. 6. Loosen 4 module retaining screws. 7. Remove module by pulling the two handles simultaneously. Woodward...
  • Page 30 Released Manual 26711V1 MicroNet Safety Module Fault Tolerant Protection System Woodward...
  • Page 31 1. Insert module into slot by pressing firmly on handles. The module has guides to assist in location. 2. Tighten four module retaining screws. 3. Install back panel. 4. Install four retaining screws. 5. Install terminal blocks. 6. Apply power and observe that the power LED is ON. Woodward...
  • Page 32 1 High Voltage and 1 Low Voltage Wiring Constraints Each power supply input must be provided with its own breaker. This is to facilitate both on-line-removal of a module, and to protect other power supplies from tripping while connected to a common input power circuit. Woodward...
  • Page 33 Each MicroNet Safety Module will function normally with power sourced to both or either power supply input independently, however Woodward recommends that both input power sources be used to improve system availability. Please refer to Table 1-1 for available MicroNet Safety Module models.
  • Page 34 Installations with severe electromagnetic interference (EMI) may require relay and discrete input wiring to be shielded, conduits and/or double shielded wire may be needed, or other precautions may have to be taken. These additional precautions may be implemented in any installation. Contact Woodward for more information.
  • Page 35 Refer to Figure 2-3 for gland plate location and size. For EMI (electromagnetic interference) reasons, Woodward recommends that all low-voltage field wiring be separated from all high- voltage field wiring by using separate conduit and conduit entries into the MicroNet Safety Module enclosure.
  • Page 36 Field wiring access for panel-mounted models is located on the back of the MicroNet Safety Module enclosure. To allow proper installation of the unit’s back cover plate, Woodward recommends that all field wiring be routed from the bottom of the package. The units back cover must be installed. Refer to Figure 2-5 for field wiring access information.
  • Page 37 Released Manual 26711V1 MicroNet Safety Module Fault Tolerant Protection System Figure 2-7. Inside View of MicroNet Safety Module Woodward...
  • Page 38 Released Manual 26711V1 MicroNet Safety Module Fault Tolerant Protection System   Figure 2-8. MicroNet Safety Module Control Wiring Diagram Woodward...
  • Page 39 Released Manual 26711V1 MicroNet Safety Module Fault Tolerant Protection System   Figure 2-9. Trip Module – Included within Voted Trip Relay Units Only Figure 2-10a. Power Supply Field Wiring Routing & Stress Relief Diagram Woodward...
  • Page 40 To sense speed, each MicroNet Safety Module’s module (A, B, C) accepts a signal from a speed sensor mounted on a gear connected to the turbine rotor or engine crankshaft. Speed sensors may be any of the following:  Passive magnetic pickup unit (MPU)  Active proximity probe  Eddy current probe Woodward...
  • Page 41 0.25 mm to 1.02 mm (0.010 inch to 0.040 inch) from tooth face to pole piece. For information on selecting the correct MPU or gear size please refer to Woodward manual 82510. Refer to Figure 2-11a of this manual for wiring information.
  • Page 42 Active Probe Configured Figure 2-11c. Example Proximity Probe (Active Magnetic Pickup Unit) Wiring (External Power, Non- preferred) +24V Active Probe Configured Eddy Current Probe Bently Proximitor Active Probe Configured Sensor Figure 2-11d. Example Eddy Current Probe (Active Magnetic Pickup Unit) Wiring Woodward...
  • Page 43 Ten configurable inputs per module (A, B, C) are available to sense discrete contact input signals or 4–20 mA analog input signals. Depending on the application’s needs, each input can be configured with the MicroNet Safety Module Programming and Configuration Tool (PCT) to function as a discrete or analog input. Woodward...
  • Page 44 The internal 24 V provides enough power to operate all 10 inputs in discrete mode. For reliability reasons, Woodward recommends that input circuitry for each module (A, B, C) be fully isolated from the input circuitry of the other two modules. For example, the power source and wiring for module A should not be shared or connected in any way to modules B or C.
  • Page 45 PE ground & the local PE ground. For reliability reasons, Woodward recommends that input circuitry for each module (A, B, C) be fully isolated from the input circuitry of the other two modules.
  • Page 46 TRIP RELAY OUTPUT LOCATION FOR INDEPENDENT VOTED MODELS TRIP RELAY OUTPUT LOCATION FOR 2-o-o-3 VOTED MODELS Figure 2-16a. Example Trip Relay Output Wiring Woodward...
  • Page 47 24 V (dc) @ 1 A. Two of these relay outputs are dedicated as redundant trip signal outputs to drive the MSM’s 2-out-of-3 voted relay module, and the other three relay outputs are user-programmable which can be programmed to function independently as required. Woodward...
  • Page 48 These are user-programmable and can be programmed to function as required. The programmable relay outputs have normally-open type contacts and are rated for 24 V(dc) @ 1 A. Refer to Figure 2-16e or f for wiring information. Figure 2-16e. Example Programmable Relay Wiring (Internal Supply) Woodward...
  • Page 49 24 V EXT supply or Discrete Supply. Referencing input power to DISCRETE PWR or 24 V EXT causes the internal supplies to respond more readily to transients on the power bus. Woodward...
  • Page 50 DCS (distributed control system) or local HMI (human machine interface). This serial port can be wired and configured for RS-232 or RS-485 communications, depending on the specific application requirements. Refer to Figure 2-18a for RS-232 wiring information, and Figure 2-18b for RS-485 wiring information. Note: Only 2-wire communications are supported. Woodward...
  • Page 51 MicroNet Safety Module and for reading stored log files from the MicroNet Safety Module using the Programming and Configuration Tool (PCT). This port is designed to communicate to the computer using a serial DB9 extension (straight-through) type of computer cable. Figure 2-19. Service Tool Cable/Interface Diagram Woodward...
  • Page 52 Carrier Frequency: No carrier (DC Level Shift) Coded Expressions: BCD (Day, Hours, Minutes, and Seconds). Refer to Figure 2-20 for IRIG-B wiring information. MicroNet™ Safety Module IRIG-B IRIG-B IRIG Port IRIG-B Com Generator IRIG-B Shield Figure 2-20. IRIG-B Interface Diagram Woodward...
  • Page 53 Modbus Slave Address are also exceptions. Since these may be different, this information is not checked by the Configuration Compare function and is not copied between modules by the Copy Configuration function. In special cases that require a different application to be installed in each module, the Configuration Compare alarm can be disabled. Woodward...
  • Page 54 Each MicroNet Safety Module includes preset overspeed, over-acceleration, alarm latch, and trip latch functionality and can be custom configured to meet a specific application through a module’s front panel or the provided Programming and Configuration Tool (PCT). Refer to Figures 3-1 to 3-5 for functional logic diagrams. Woodward...
  • Page 55 Released Manual 26711V1 MicroNet Safety Module Fault Tolerant Protection System Figure 3-1. Module Diagram with Speed Redundancy Manager Configured (Configurable Analog/Digital Inputs, Logic Blocks, and Output Relays Not Shown) Woodward...
  • Page 56 Released Manual 26711V1 MicroNet Safety Module Fault Tolerant Protection System Figure 3-2. Module Diagram Without Speed Redundancy Manager Configured (Configurable Analog/Digital Inputs, Logic Blocks, and Output Relays Not Shown) Woodward...
  • Page 57 Compare module application programs for differences.  Verify the health and state of the other modules before allowing a module test to be performed.  Pass a “module test token” between modules when performing a “Periodic Overspeed Test” routine. Woodward...
  • Page 58 The trip command outputs are electrically separated, allowing each module to actuate a separate external relay or trip solenoid. These models are typically used with special 2-out-of-3 voted trip block assemblies or 2-out-of-3 voted trip string relay logic. Figure 3-3. Basic Functional Overview of Independent Trip Relay Models Woodward...
  • Page 59 Port Config Input #6 Config Input #7 Front Panel Interface Config Input #8 - Display - Keypad Config Input #9 - LEDs Config Input #10 Figure 3-4. Functional Diagram of Single MicroNet Safety Module with Independent Trip Relay Outputs Woodward...
  • Page 60 2-out-of-3 (2oo3) fashion to create the 2oo3 trip output command. Two redundant “Form- C” 2oo3 voted relays are used in these models providing four isolated relay output signals with normally open and normally closed contacts. Woodward...
  • Page 61 Port Config Input #6 Config Input #7 Front Panel Interface Config Input #8 - Display - Keypad Config Input #9 - LEDs Config Input #10 Figure 3-7. Functional Diagram of Single MicroNet Safety Module with Voted Trip Relay Outputs Woodward...
  • Page 62 24VDC or HVAC/DC Reset Start / Trip Relay Start Reset Trip Relay Logic Override Freq MPU or Prox Compare Set Pt. Configurable Trip & Alarm Relay Logic Prog Relay Prog Relay Prog Relay Figure 3-9. Dual Redundant Trip Block Assembly Woodward...
  • Page 63 The speed redundancy manager can be configured to vote the median, highest or lowest speed signal to use in its overspeed detection logic and can be configured to change its voting logic based on the number of healthy speed probes/signals. Woodward...
  • Page 64 Each speed input is designed to operate from its own speed probe. Do not connect a speed probe to more than one input. This will compromise the ability of the MicroNet Safety Module to sense open- wire (passive mode only) and interfere with the minimum amplitude sensitivity and accuracy. Woodward...
  • Page 65 Boolean Input Manager logic function can be configured to do so. Each module’s Boolean Input Manager function can be configured to accept, only it’s local Speed-Fail-Override contact input, or a specific module’s Speed-Fail-Override contact input, or all modules’ Speed-Fail- Override contact inputs. Woodward...
  • Page 66 (Hi), and high-high (HiHi) levels can be defined. The Boolean outputs associated with these levels for the analog input can be used in the user configured software. There is also a Range Error output to indicate that the Input is outside a 2–22 mA range. Woodward...
  • Page 67 Loop power is not provided by the MicroNet Safety Module  Shielded twisted pair cable is required when connecting to the analog inputs. Note 1: ±0.25 % represents the pk-pk noise of the input. The average accuracy is ±0.1 % of 25 mA. Woodward...
  • Page 68 4–20 mA range can be configured to any speed range desired. The accuracy of the analog output is better than ±0.5 % of 20 mA over the temperature range of the product. Shielded twisted pair cable is required when connecting to the analog outputs. Woodward...
  • Page 69 Peak speed and peak acceleration are tracked and logged for every overspeed and over-acceleration occurrence. The last 20 occurrences are logged and can be viewed from the front panel or loaded to a computer via the MicroNet Safety Module Programming and Configuration Tool (PCT). Woodward...
  • Page 70 1. Three used/healthy speed signals condition (Base Function): Median signal (middle signal) Highest signal Lowest signal 2. Two used/healthy speed signals condition (Fallback Function): Highest signal Lowest signal 3. One used/healthy speed signal condition (Two Inputs Failed Action): Used/sensed healthy speed signal Issue a trip command Woodward...
  • Page 71 1. Three used/healthy speed/acceleration signals condition (Base Function): Median signal (middle signal) Highest signal Lowest signal 2. Two used/healthy speed/acceleration signals condition (Fallback Function): Highest signal Lowest signal 3. One used/healthy speed/acceleration signal condition (Two Inputs Failed Action): Used/sensed healthy speed/acceleration signal Issue a trip command Woodward...
  • Page 72 Either, both, or neither of these methods can be selected. There is also an alarm that can be enabled to indicate any time the Speed is below the Speed Fail Setpoint. Woodward...
  • Page 73 Released Manual 26711V1 MicroNet Safety Module Fault Tolerant Protection System Figure 3-14. Start Logic Diagram Woodward...
  • Page 74 The Speed fail trip is overridden because the Speed fail timer is cleared whenever speed exceeds the Speed fail set point. The Speed fail timer should be started by the operator when the turbine or equipment is ready to be started again. Woodward...
  • Page 75 Comparators, Boolean logic, and timers can be used to implement relatively sophisticated algorithms including, noise suppression, test functions, alarming, and trip functions based on these signals. Woodward...
  • Page 76 0 to 30 minutes. When the test is enabled, the timer starts. If it reaches the timeout value, the test is automatically aborted. Once the module is in its tripped state, this test is disabled and the module’s overspeed setpoint is returned to its normal setting. Woodward...
  • Page 77 1 hour. If the timer is already below one hour, it will be increased to 1 hour. When Auto Sequence Test is enabled again, and no modules are in trip, alarm, or test, this limit on the timer will no longer be in effect. Woodward...
  • Page 78 Function will clear the associated trip even if the contact is still open. This is used in cases where the MicroNet Safety Module trip must be cleared to reset a trip system which feeds back a trip status that trips the MicroNet Safety Module. Woodward...
  • Page 79 The first input to set the Trip latch, or First Out (FO), is also latched. This first out indication is available in the trip log and on Modbus. The Trip latch output remains TRUE, and the First Out indication remains unchanged until the reset function occurs, and all inputs are false. Woodward...
  • Page 80 The logs can be viewed from the front panel of the MicroNet Safety Module or from the PCT tool. With PCT tool, the Configuration Error Log can also be viewed. Also, the logs can be exported using the PCT tool. Woodward...
  • Page 81 Configurable Discrete Inputs can be recorded with a resolution of 1 ms; all other events are recorded with the resolution of their rate of execution, for example 4 ms for any Boolean in the Configurable Logic. If IRIG-B time synchronization is not used, all events are recorded with a maximum resolution of 10 ms. Woodward...
  • Page 82 Redundancy Manager function is configured. Refer to below graphs to understand the system response differences. Independent Trip Relay Models—Response Graphs Figure 3-17. Total System Response Time Based on Sensed Frequency Level for Independent Trip Relay Models When Speed Redundancy Manager Function is Not Configured Woodward...
  • Page 83 Trip Relay Models When Speed Redundancy Manager Function is Configured Voted Trip Relay Models—Response Graphs Figure 3-19. Total System Response Time Based on Sensed Frequency Level for 2oo3 Voted Trip Relay Models When Speed Redundancy Manager Function is Not Configured Woodward...
  • Page 84 Frequency = (rpm) * (number of teeth) / 60 Figure 3-21. Response Time Definition Analog Output The response time of the analog output is less than 12 ms measured from a change in speed to a change in the output current. Woodward...
  • Page 85 If a Modbus port’s “Enable Write Commands” setting is configured “No”, the respective MicroNet Safety Module will not accept “write” commands from an external master device (DCS, etc.). For security purposes, the option to ignore “write” commands can only be enabled or disabled with a configuration- level password. Woodward...
  • Page 86 Configuration mode. Table 4-3. Modbus Serial Communication Port Settings Parameter Range Mode: RS-232 or RS-485 Baud Rate: 19200 TO 115200 Comm Parity: NONE, ODD or EVEN Slave Address: 1–247 Enable Write Commands: Yes or No Woodward...
  • Page 87 Modbus value `x100’ within the listed parameter table. Some values, like the Timer values, are sent using more than one register. The available Analog read registers, units (scaling), and range are listed in Table 4-5. Woodward...
  • Page 88 Initiate User Defined Test 1 0:0203 Abort User Test 1 Confirm User Defined Test 0:0301 0:0302 Initiate User Defined Test 2 0:0303 Abort User Test 2 Confirm User Defined Test 0:0401 0:0402 Initiate User Defined Test 3 0:0403 Abort User Test 3 Woodward...
  • Page 89 Event Latched Inputs 1 to 25 1:1042 Analog Input 10 Hi 1:0501 to 0525 Event Latch First Outs 1 to 25 1:1043 Analog Input 1 HiHi 1:1001 Speed Fail Override 1:1044 Analog Input 2 HiHi 1:1002 Overspeed 1:1045 Analog Input 3 HiHi Woodward...
  • Page 90 Logic Gate 49 1:1094 Analog Comparator 12 1:1147 Logic Gate 50 1:1095 Analog Comparator 13 1:1148 Latch 1 1:1096 Analog Comparator 14 1:1149 Latch 2 1:1097 Analog Comparator 15 1:1150 Latch 3 1:1098 Logic Gate 1 1:1151 Latch 4 Woodward...
  • Page 91 Analog Red Mgr 14 Input 2 Invalid 1:1202 Unit Delay 10 1:1255 Analog Red Mgr 14 Input 3 Invalid 1:1203 Reserved (Do not use) 1:1256 Analog Red Mgr 15 Input 1 Invalid 1:1204 Reserved (Do not use) 1:1257 Analog Red Mgr 15 Input 2 Invalid Woodward...
  • Page 92 Bool Red Mgr 10 Input 1 Invalid 1:1408 Module A Discrete Input 8 1:1302 Bool Red Mgr 10 Input 2 Invalid 1:1409 Module A Discrete Input 9 1:1303 Bool Red Mgr 10 Input 3 Invalid 1:1410 Module A Discrete Input 10 Woodward...
  • Page 93 Module A Trip Latch Out 1:1432 Module A Alarm Latch Out 1:1433 Module B Trip Latch Out 1:1434 Module B Alarm Latch Out 1:1435 Module C Trip Latch Out 1:1436 Module C Alarm Latch Out 1:1501 Heartbeat 1:1411 Module B Discrete Input 1 Woodward...
  • Page 94 Last Trip time and date indication registers (3:1001 - 1007) will indicate the sensed date and time of the event. This Date/Time will remain in locked in these registers until the next trip condition occurs. Woodward...
  • Page 95 1. Unlit – No alarms or the module is not powered. 2. Yellow – Active alarms, press VIEW button below LED to see the alarm log or navigate to the Monitor Alarm Latch screen to see the active status on each alarm input. Woodward...
  • Page 96 Internally supplied wetting Measure voltage from terminal 1 to voltage fault. terminal 81 and verify it is 23 V ±2 V. If out of range, return unit to Woodward. Woodward...
  • Page 97 Module, measure voltage between terminals 80, 81 and verify 24 V ±10 %. If it is not, remove the wiring from the 24 V EXT to unload the output and measure again to verify the voltage is not being overloaded. Woodward...
  • Page 98 COM Port Check that power is applied to the MicroNet Safety Module module and the service tool is connected. Verify the correct COM port is selected when establishing communications and that Auto Detection BAUD rate is selected. Woodward...
  • Page 99 Cycle input power. parameters. Internally fault. stored parameters are If Parameter Error persists constantly checked for return unit to Woodward data integrity. according to the instructions in Chapter 8 of this manual. Overspeed Trip The module tripped on...
  • Page 100 Incorrect speed fail See manual for description the time set by the timeout time of function. Use PCT to Speed Fail Timeout configured. verify proper configuration setting. settings. Woodward...
  • Page 101 One of the speed Wiring fault, speed Check wiring continuity and (if speed redundancy is probes is reading probe fault. probe integrity, replace used) different from the probe. others. Incorrect speed gear ratio or number of teeth Check speed sensor configured, configuration. Woodward...
  • Page 102 Auto Sim Spd Test Indicates the Internal problem with the Return unit to Woodward. Failed automated simulated unit. overspeed test failed. Auto Sequence Test Indicates the User enabled the auto...
  • Page 103 IRIG Signal Lost Alarm Indicates that IRIG IRIG signal has been Check the wiring of the Time synchronization disconnected or IRIG IRIG signal. is enabled but the input is faulted. module does not receive any valid IRIG time messages. Woodward...
  • Page 104 Redundancy Management" option and configure both "Base Function" and "Fallback Function" to be HSS. This can be complete using the Front Panel Interface as shown above or can be completed using the PCT (Programming and Configuration Tool) as shown below: Woodward...
  • Page 105   Speed Set point by end of start command. Customer should verify speed on the Customer should verify speed on the modules before and after reset. modules before and after reset. Figure 5-3. Configuration Guidance Flowchart Woodward...
  • Page 106 SIL 3 Value to 10 to 10 > 90 % The MicroNet Safety Module meets SIL3 with the following numbers: 7.8E-8 1/h Proof Test Interval 3.2E-5 6 months 5.2E-5 9 months 7.5E-5 1 year Safe Failure Fraction SFF > 90 % Woodward...
  • Page 107 Released Manual 26711V1 MicroNet Safety Module Fault Tolerant Protection System Diagnostic Coverage DC > 90 % Figure 6-1. ProTech MSM with Independent Relay Figure 6-2. ProTech MSM with Voted Relay Woodward...
  • Page 108 All persons involved in the initial design or modification of the programmable software, installation and maintenance must have appropriate training. Training and guidance materials include this manual, the MicroNet Safety Module service tool, and training programs available at Woodward. See Chapter 8 (Service Options) for more information.
  • Page 109 11. If possible, compare external speed with measured speed reading on the MicroNet Safety Module display. 12. If used as part of the safety system, verify the analog output. Measure this output by performing an automated overspeed trip test as described in step 6. Woodward...
  • Page 110 13. Chassis isolation checks using resistance measurement. Measure from terminals 39, 66, 67 to a point on the MicroNet Safety Module chassis (the grounding braid is a good place for this measurement): < 1 . 14. Perform a lamp test from front panel Test Menu. Woodward...
  • Page 111 Woodward recommends that your product be sent back to Woodward or to a Woodward authorized service facility after every five to ten years of continuous service for inspection and component upgrades. Please refer to the service programs in the following chapter.
  • Page 112  An Authorized Independent Service Facility (AISF) provides authorized service that includes repairs, repair parts, and warranty service on Woodward's behalf. Service (not new unit sales) is an AISF's primary mission. A current list of Woodward Business Partners is available at www.woodward.com/local-partner...
  • Page 113 All repair work carries the standard Woodward service warranty 5-09-0690 North American Terms and Conditions of Sale (Industrial Business Segment) on replaced parts and labor.
  • Page 114  The unit serial number, which is also on the nameplate Engineering Services Woodward offers various Engineering Services for our products. For these services, you can contact us by telephone, by email, or through the Woodward website.  Technical Support ...
  • Page 115 MicroNet Safety Module Fault Tolerant Protection System Technical Assistance If you need to contact technical assistance, you will need to provide the following information. Please write it down here before contacting the Engine OEM, the Packager, a Woodward Business Partner, or the Woodward factory: General...
  • Page 116 Modbus Ethernet Gateway Information Introduction For customers who want to use Modbus Ethernet communications or put the MicroNet Safety Module ProTech on the plant network, Woodward recommends the following Ethernet-to-Serial Gateways: B&B Electronics – Model: MESR901 Serial: RS-232, RS-485, or RS-422 Power Input: 10–48 Vdc...
  • Page 117 Released Manual 26711V1 MicroNet Safety Module Fault Tolerant Protection System Wiring RS-232 Note: The Serial DB9 connection is used for RS-232 communication only. Woodward...
  • Page 118 When configuring for RS-485, termination resistors (120 ) are needed at each end of the network. Note the location of the resistor on the device. The MicroNet Safety Module has the termination resistor built into the module, jumpers are necessary between terminals 14 – 15 and 18 – 19 to activate the termination. Woodward...
  • Page 119 Released Manual 26711V1 MicroNet Safety Module Fault Tolerant Protection System Configuration – Configuration of the MESR901 is done through Vlinx Modbus Gateway Manager. The configuration software is provided with the device. Network Settings Modbus TCP Settings Woodward...
  • Page 120 Released Manual 26711V1 MicroNet Safety Module Fault Tolerant Protection System Serial Communication Settings Note: For RS-485 communication, select RS-485 under Mode, and use the terminal block connections. The DB9 port is for RS-232 communications only. Serial Modbus Settings Woodward...
  • Page 121 RS-485/422, you will need to assign each module a unique node address, which can be found in the Modbus configuration screen on the MicroNet Safety Module. Wiring RS-232 Verify that the dip switch on the front of the device is in the up position, indicating RS-232 communications. Woodward...
  • Page 122 Note the location of the resistor on the device. The MicroNet Safety Module has the termination resistor built into the module, jumpers are necessary between terminals 14 – 15 and 18 – 19 to activate the termination. Woodward...
  • Page 123 Released Manual 26711V1 MicroNet Safety Module Fault Tolerant Protection System Configuration Configuration of the UDS100-Xpress DR IAP is done through DeviceInstaller. The configuration software is provided with the device. Overview Woodward...
  • Page 124 Released Manual 26711V1 MicroNet Safety Module Fault Tolerant Protection System Network Menu Serial Settings Menu Note: For RS-485 communications, choose option 3 under interface type and don’t forget to set the dip switch on the front of the device. Woodward...
  • Page 125 Released Manual 26711V1 MicroNet Safety Module Fault Tolerant Protection System Modem Control Menu Advanced Menu Woodward...
  • Page 126 Added Figure 3-14 Changes in Revision C—  Corrected title on Table 2-2 Changes in Revision B—  Expanded/clarified Module Removal & Installation section (Chapter 2) Changes in Revision A—  Updated 3 entries in Table 4-5 (page 77) Woodward...
  • Page 127 Released Manual 26711V1 MicroNet Safety Module Fault Tolerant Protection System Declarations Woodward...
  • Page 128 Released Manual 26711V1 MicroNet Safety Module Fault Tolerant Protection System Woodward...
  • Page 129 Email and Website—www.woodward.com Woodward has company-owned plants, subsidiaries, and branches, as well as authorized distributors and other authorized service and sales facilities throughout the world. Complete address / phone / fax / email information for all locations is available on our website.

This manual is also suitable for:

8237-14938237-14948237-14958237-14968237-14978237-1498 ... Show all