ICS Triplex T8100 Trusted TMR Controller Chassis

Triple Modular Redundant (TMR), fault tolerant (3-2-0) operation.

• Hardware Implemented Fault Tolerant (HIFT) architecture.

• Dedicated hardware and software test regimes which provide very fast fault recognition and

response times.

• Automatic fault handling without nuisance alarming.

• Time-stamped fault historian.

• Hot replacement (no need to re-load programs).

• Full suite of IEC 61131-3 programming languages.

• Front panel indicators that show module health and status.

• Front panel RS232 serial diagnostics port for system monitoring, configuration and

programming.

• IRIG-B002 and 122 time synchronisation signals (available on T8110B only).

• Active and Standby processor fault and failure contacts.

• Two RS422 / 485 configurable 2 or 4 wire connections (available on T8110B only).

• One RS485 2 wire connection (available on T8110B only).

• TϋV Certified IEC 61508 SIL 3.

Application

Module Configuration

The Trusted TMR Processor requires no hardware configuration.

Every Trusted System requires a System.INI configuration file. Details of how to design this

are given in PD-T8082 (Trusted Toolset Suite). The configuration has a Processor assigned to

the left slot of the Processor chassis by default. The System Configurator allows the

selection of options on ports, IRIG and system functions. The use of the System Configurator

is described in PD-T8082. The options are described below.

Updater Section

If Auto Protect Network Variables is selected, this configures the Trusted System to use a

reduced Modbus Protocol map. See product description PD-8151B (Trusted Communication

Interface Module) for further details.

Inter Group Delay equates to the Modbus update cycle. This is the minimum period

between successive Modbus update messages sent to each of the Communications

Interface Modules. The default value (as shown) is 50 ms which provides a compromise

between latency and performance. Adjustment is made in 32 integer ms increments, i.e. a

value of 33 will equal 64 ms as will 64.This may be increased or decreased as required,

however since only one update message is sent per application scan, and an application

scan may often be more than 50 ms, there is little benefit in adjusting this variable.