Technical Product Guide

Tricon Systems

Introduction .......................................................................... 1
Theory of Operation............................................................. 3
System Configuration ........................................................ 11
Product Specifications ....................................................... 17
Field Termination Options.................................................. 45
Communication Capabilities .............................................. 53
TriStation 1131 Developer’s Workbench ........................... 57
CEM Programming Language Editor................................. 61
Sequence of Events (SOE) Capability............................... 63
Part Number Cross-Reference .......................................... 65
Glossary............................................................................. 67

Part No. 9791007-010 April 2005

 Preface

Information in this document is subject to change without notice. Companies, names and data used in
examples herein are fictitious unless otherwise noted. No part of this document may be reproduced or
transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express
written permission of Triconex.
© 2005 Invensys Systems, Inc. All Rights Reserved.
Triconex, Tricon, Trident, TriStation 1131, and CEMPLE are trademarks of Invensys plc, its subsidiaries and
affiliates. All other brands may be trademarks of their respective owners.
DISCLAIMER
Because of the variety of uses for this equipment and because of the differences between this fault-tolerant
equipment and traditional programmable logic and process controllers, the user of, and those responsible for
applying, this equipment must satisfy themselves as to the acceptability of each application and the use of the
equipment.
The illustrations, charts and layout examples shown in this manual are intended solely to illustrate the text of
this manual. Because of the many variables and requirements associated with any particular installation,
Invensys Systems, Inc. cannot assume responsibility or liability for actual use based upon the illustrative uses
and applications.
In no event will Invensys Systems, Inc. be responsible or liable for indirect or consequential damages
resulting from the use or application of this equipment.
INVENSYS SYSTEMS, INC. DISCLAIMS ANY IMPLIED WARRANTY OF FITNESS FOR A
PARTICULAR PURPOSE.
Invensys Systems, Inc. reserves the right to make changes at any time in order to improve design and to supply
the most reliable product. No patent or copyright liability is assumed by Invensys Systems, Inc. with respect
to use of information, circuits, equipment or software described in this text.
TECHNICAL SUPPORT
Customers in the U.S. and Canada can obtain technical support from the Customer Satisfaction Center (CSC)
at the numbers below. International customers should contact their regional support center.
Telephone: Toll-free number 866-746-6477
Toll number 508-549-2424 (outside U.S.)
Fax: Toll number 508-549-4999
E-mail: [email protected]
The Tricon is a fault-tolerant controller based on a Triple-Modular
Redundant (TMR) architecture.

Introduction

What is Fault-Tolerant
Control?
A fault-tolerant control system identi-
fies and compensates for failed control
system elements and allows repair
while continuing an assigned task
without process interruption. A high-
integrity control system such as the
Tricon is used in critical process appli-
cations that require a significant degree
of safety and availability.

What is the Tricon?

The Tricon is a state-of-the art
controller that provides fault tolerance
by means of Triple-Modular Redundant
(TMR) architecture. TMR integrates
three isolated, parallel control systems
and extensive diagnostics in one control
system. The system uses two-out-of-
three voting to provide high-integrity,
error-free, uninterrupted process opera-
tion with no single point of failure.
The Tricon controller uses three iden-
tical channels. Each channel indepen-
dently executes the control program in
parallel with the other two channels.
Specialized hardware/software voting
mechanisms qualify and verify all
digital inputs and outputs from the
The Tricon Fault-Tolerant Controller
field, while analog inputs are subject to
a mid-value selection process.
controller is online without interrupting programs the Tricon with one set of
Because each channel is isolated from the process. control program logic. The Tricon
the others, no single-point failure in any controller manages the rest!
channel can pass to another. If a hard- Setting up control programs is simpli-
ware failure does occur on one channel, fied with the triplicated Tricon system, Extensive diagnostics on each channel,
the other channels override it. Mean- because it operates as a single control module, and functional circuit immedi-
while the faulting module can easily be system from the user’s point of view. ately detect and report operational
removed and replaced while the The user terminates sensors and actua- faults by means of indicators or alarms.
tors at a single wiring terminal and

1
Introduction

All diagnostic fault information is product feed rates, expander pressure Offshore Fire and Gas
accessible by the control program and equalization and temperature—are Protection
the operator. The program or the oper- monitored and shutdown actions taken The protection of offshore platforms
ator can use diagnostic data to modify if an upset condition occurs. Traditional from fire and gas threats requires
control actions or direct maintenance shutdown systems implemented with continuous availability as well as reli-
procedures. mechanical or electronic relays provide ability. The Tricon provides this avail-
shutdown protection but can also cause ability through online replacement of
Other key features of the Tricon
dangerous nuisance trips. faulty modules. Faults in individual
controller that ensure the highest
possible system integrity are: The Tricon increases system integrity, modules, field wiring and sensors are
providing automatic detection and veri- managed automatically by built-in
• No single point of failure diagnostics. Analog fire and gas detec-
fication of field sensor integrity, inte-
• Ability to operate with 3, 2 or 1 grated shutdown and control tors are connected directly to the
Main Processor before shutdown functionality, and direct connection to Tricon, eliminating the need for trip
the supervisory data highway for amps. An operator interface monitors
• Fully implemented and transparent fire and gas systems as well as diagnos-
continuous monitoring of safety-crit-
triplication tics for the Tricon controller and its
ical functions.
• Comprehensive system diagnostics attached sensors. Traditional fire and
Boiler Flame Safety gas panels can be replaced with a single
• Complete range of I/O modules Process steam boilers function as a crit- integrated system, saving costly floor
• Dual and single I/O modules for ical component in most refinery appli- space while maintaining high levels of
safety-critical points with a limited cations. Protection of the boiler from safety and availability.
need for availability upset conditions, safety interlock for
normal startup and shutdown, and
• Remote I/O up to 7.5 miles flame-safety applications are combined What is TriStation?
(12 kilometers) away from MPs by one integrated Tricon system. In TriStation 1131 Developer's Work-
• Simple, online module repair traditional applications, these functions bench is an integrated tool for devel-
had to be provided by separate, non- oping, testing and documenting control
• Unsurpassed reliability and integrated components. But with the programs that execute in the Tricon
availability fault-tolerant, fail-safe Tricon controller. TriStation 1131 complies
controller, the boiler operations staff with the IEC 61131 International Stan-
can use a critical resource more produc- dard for Programmable Controllers and
What are Typical User tively while maintaining safety at or follows the Microsoft Windows guide-
Applications? above the level of electromechanical lines for graphical user interfaces.
Each day the Tricon supplies increased protection systems.
safety, reliability and availability to a Turbine Control Systems
worldwide installed base. The What about Communication
following are a few typical applica- The control and protection of gas or
steam turbines requires high integrity
Capabilities?
tions. For more information on how a
as well as safety. The continuous oper- Optional modules enable the Tricon to
Tricon controller can add value to your
ation of the fault-tolerant Tricon communicate with other Triconex
applications, ask your sales representa-
controller provides the turbine operator controllers and with other hosts such as:
tive for additional documentation and
customer references. with maximum availability while main- • Modbus masters and slaves
taining equivalent levels of safety.
Emergency Safety Shutdown Speed control as well as start-up and • Distributed Control Systems (DCS)
(ESD) shutdown sequencing are implemented • Operator workstations
The Tricon provides continuous protec- in a single integrated system. Unsched- • Host computers using Ethernet
tion for safety-critical units in refin- uled outages are avoided by using hot- (802.3) protocol
eries, petrochemical/chemical plants spares for the I/O modules. If a fault
and other industrial processes. For occurs in a module, a replacement For more information, see “Communi-
example, in reactor and compressor module is automatically activated cation Capabilities” on page 53.
units, plant trip signals—for pressure, without operator intervention.

2
The Tricon is designed with a fully triplicated architecture
throughout, from the input modules through the main processors
(MPs) to the output modules.

Theory of Operation

Fault tolerance in the Tricon is achieved which takes control if a fault is detected memory for use in the hardware voting
by means of a Triple-Modular Redun- on the primary module during opera- process.
dant (TMR) architecture. The Tricon tion. The hot-spare position can also be
The individual input table in each main
provides error-free, uninterrupted used for online system repairs.
processor is transferred to its neigh-
control in the presence of either hard
boring main processors over the propri-
failures of components, or transient
etary TriBus. During this transfer,
faults from internal or external sources. Main Processor Modules
hardware voting takes place. The
The Tricon is designed with a fully trip- A Tricon system contains three main TriBus uses a direct memory access
licated architecture throughout, from processor (MP) modules to control (DMA) programmable device to
the input modules through the main three separate channels of the system. synchronize, transmit, vote and
processors to the output modules. Each main processor operates in compare data among the three main
Every I/O module houses the circuitry parallel with the other two main proces- processors.
for three independent channels, sors, as a member of a triad.
which are also referred to as legs.
Auto Spare Auto Spare
Each channel on the input modules
reads the process data and passes Input I/O Bus Output
that information to its respective Leg Main Leg
A Processor A
TriBus
main processor. The three main A

processors communicate with each Input Main TriBus

Processor Output
other using a proprietary high-speed Leg I/O Bus Leg Voter
B B
B
bus system called the TriBus. Input Output
Termination TriBus Main Termination
Processor
Once per scan, the three main Input I/O Bus C Output
Leg Leg
processors synchronize and commu- C C
nicate with their two neighbors over
the TriBus. The Tricon votes digital
input data, compares output data, Simplified Tricon Architecture
and sends copies of analog input
data to each main processor. A dedicated I/O and COMM processor If a disagreement is discovered, the
on each main processor manages the signal value found in two out of three
The main processors execute the data exchanged between the main tables prevails, and the third table is
control program and send outputs processors and the I/O modules. A trip- corrected accordingly. One-time differ-
generated by the control program to the licated I/O bus is located on the chassis ences which result from sample timing
output modules. The output data is backplane and is extended from chassis variations can be distinguished from a
voted on the output modules as close to to chassis by means of I/O bus cables. pattern of differing data. The three
the field as possible, which enables the independent main processors each
Tricon to detect and compensate for any As each input module is polled, the new
maintain data about necessary correc-
errors that might occur between the input data is transmitted to the main
tions in local memory. Any disparity is
voting and the final output driven to the processor over the appropriate channel
flagged and used at the end of the scan
field. of the I/O bus. The input data from each
by the built-in Fault Analyzer routines
input module is assembled into a table
For each I/O module, the system can to determine whether a fault exists on a
in the main processor and stored in
support an optional hot-spare module particular module.

3
Theory of Operation

After the TriBus transfer and input data priate channel of the corresponding The main processor modules receive
voting have corrected the input values, output module over the I/O bus. For power from dual power modules and
these corrected values are used by the example, Main Processor A transmits power rails in the main chassis. A
main processors as input to the user- the appropriate table to Channel A of failure on one power module or power
written control program. (The control each output module over I/O Bus A. rail will not affect the performance of
program is developed in the TriStation The transmittal of output data has the system.
software and downloaded to the main priority over the routine scanning of all
processors.) The 32-bit main micropro- I/O modules.
cessor executes the user-written control Bus Systems and
The I/O and COMM processor
program in parallel with the neigh-
manages the data exchanged between
Power Distribution
boring main processor modules. Three triplicated bus systems are etched
the main processors and the communi-
The user-written control program cation modules using the communica- on the chassis backplane: the TriBus,
generates a table of output values based tion bus, which supports a broadcast the I/O bus and the communication bus.
on the table of input values, according mechanism. The TriBus consists of three indepen-
to the rules built into the control dent serial links which operate at 25
The model 3008 Main Processors
program by the customer. The I/O megabits per second. The TriBus
provide 16 megabytes of DRAM,
processor on each main processor synchronizes the main processors at the
which is used for the control program,
manages the transmission of output beginning of a scan. Then each main
sequence-of-events data, I/O data, diag-
data to the output modules by means of processor sends its data to its upstream
nostics and communication buffers.
the I/O bus. and downstream neighbors. The TriBus
In the event of an external power performs one of two functions with the
Using the table of output values, the I/O
failure, the integrity of the user-written data:
processor generates smaller tables,
program and the retentive variables is
each corresponding to an individual • Transfer of data only—for I/O,
protected for a minimum of six months.
output module in the system. Each diagnostic and communication data.
small table is transmitted to the appro-
• Comparing data and
flagging disagreements—
Dual Power Rails
for the previous scan’s
output data and memory of
Dual-Power +3.3 Volts user-written control
Regulators +5 Volts
802.3 Network program.
(RJ-45) Reserved for
Modbus (DB9) future use An important feature of the
DIAG Read (DB25)
Tricon’s fault-tolerant archi-
Diag Bus
Up
Clock/ I/O & COMM Fault Tolerant tecture is the use of a single
Stream Main Processor I/O Modules
(to other NVRAM Processor I/O Bus 375Kb transmitter to send data to
Down MPC860A
MPS) 32 KB MPC860A
Stream both the upstream and down-
stream main processors. This
COMM Bus Communication
2Mb Modules ensures receipt of the same
32 Bit bus Shared 32-Bit Bus data by the upstream
Memory
128K processor and downstream
processor.

FLASH TriBus DRAM DRAM

6 MB FPGA 16 MB 16 MB

I/O Bus
Up Stream Down Stream The triplicated I/O bus trans-
TriBus
(to other MPS) Up Stream Down Stream fers data between the I/O
modules and the main proces-
sors at 375 kilobits per
Main Processor (Model 3008) Architecture

4
second. The triplicated I/O bus is ELCO Connectors for I/O Termination

carried along the bottom of the back- Term inal

Power
Terminal Strip
plane. Each channel of the I/O bus runs Strip
#1

between one of the three main proces- Term inal

1 2 3 4 5 6

Strip
sors and the corresponding channels #2

TriBus
on the I/O module.
The I/O bus can be extended between Power
Supply
chassis using a set of three I/O bus #1

cables.
Dual
Power
Rails
Communication Bus
The communication (COMM) bus Power Channel A
runs between the main processors and Supply
#2 Channel B Comm
Bus
the communication modules at 2 Channel C

megabits per second.

Channel A
Power for the chassis is distributed Channel B
I/O
Bus
across two independent power rails Channel C

down the center of the backplane.

Every module in the chassis draws Main
Right I/O Module *
Typical Logical Slot
power from both power rails through Processors Left I/O Module *
A, B, & C
dual power regulators. There are four Communication Module
sets of power regulators on each input * Either the left module or right module functions as the active or hot-spare module.
and output module: one set for each of
the channels A, B and C and one set for Backplane of the Main Chassis
the status-indicating LED indicators.
The following paragraphs describe respectively. Each input table is regu-
digital input modules in general, larly interrogated over the I/O bus by
Field Signals followed by specifics for TMR and the I/O communication processor
Each I/O module transfers signals to or single modules. located on the corresponding main
from the field through its associated processor module. For example, Main
Every digital input module houses the
field termination assembly. Two posi- Processor A interrogates Input Table A
circuitry for three identical channels
tions in the chassis tie together as one over I/O Bus A.
(A, B and C). Although the channels
logical slot. The first position holds the reside on the same module, they are On TMR digital input modules, all crit-
active I/O module and the second posi- completely isolated from each other ical signal paths are 100 percent tripli-
tion holds the hot-spare I/O module. and operate independently. A fault on cated for guaranteed safety and
Termination cables are connected to the one channel cannot pass to another. In maximum availability. Each channel
top of the backplane. Each connection addition, each channel contains an 8-bit conditions signals independently and
extends from the termination module to microprocessor called the I/O commu- provides isolation between the field and
both active and hot-spare I/O modules. nication processor, which handles the Tricon. (The 64-point high-density
Therefore, both the active module and communication with its corresponding digital input module is an exception—it
the hot-spare module receive the same main processor. has no channel-to-channel isolation.)
information from the field termination
wiring. Each of the three input channels asyn- DC models of the TMR digital input
chronously measures the input signals modules can self-test to detect stuck-
from each point on the input termina- ON conditions where the circuitry
Digital Input Modules tion module, determines the respective cannot tell whether a point has gone to
states of the input signals, and places the OFF state. Since most safety sys-
The Tricon supports two basic types of
the values into input tables A, B and C tems are set up with a de-energize-to-
digital input modules: TMR and single.

5
Theory of Operation

tions where low cost is

FIELD CIRCUITRY TYPICAL POINT (1 of 32) INTELLIGENT I/O CONTROLLER(S) TRIPLICATED
more important than
I/O BUS

AC/DC Input Circuit Individual Opto-Isolation Intelligent I/O Controller(s) maximum availability.
Special self-test
- +
Threshold Detect Input Bus
A circuitry detects all
Proc
Opto-Isolator Mux Xcvr stuck-ON and stuck-
Individual Point Field Termination

Opto- OFF fault conditions

Isolator
Dual
Port
within the non-tripli-
RAM cated signal condi-
- +
B
tioners in less than
Threshold Detect Input Bus
Opto-Isolator Mux
Proc
Xcvr half a second. This is a
mandatory feature of a
Opto-
Isolator Dual fail-safe system,
Leg-to-Leg Port
Isolation
Bridge
Rectifier Optical
RAM which must detect all
AC
- + Smoothing Isolation faults in a timely
C
Threshold Detect Input
Mux
Proc
Bus manner and upon
Opto-Isolator Xcvr
detection of an input
Opto-
Isolator Dual fault, force the
Control Signal Port
RAM measured input value
to the safe state.
Because the Tricon is
Architecture of TMR Digital Input Module with Self-Test (DC Model) optimized for de-ener-
gize-to-trip applica-
trip capability, the ability to detect munication processor while the test is tions, detection of a
stuck-ON points is an important fea- running. fault in the input circuitry forces to OFF
ture. To test for stuck-ON inputs, a (the de-energized state) the value
On single digital input modules, only reported to the main processors by each
switch within the input circuitry is
those portions of the signal path which channel.
closed to allow a zero input (OFF) to be
are required to ensure safe operation are
read by the isolation circuitry. The last
triplicated. Single modules are opti-
data reading is frozen in the I/O com-
mized for those safety-critical applica- Digital Output Modules
There are four basic types of
ANALOG INPUT SIGNAL INDIVIDUAL ADC INTELLIGENT TRIPLICATED digital output modules: dual,
CIRCUIT CONDITIONING FOR EACH LEG I/O CONTROLLER(S) I/O BUS
TYPICAL POINT supervised, DC voltage and AC
voltage. The following paragraphs
Bus A describe digital output modules in
Amp ADC Proc Xcvr general, followed by specifics for
the four types.
Mux

Every digital output module

B
houses the circuitry for three iden-
Field Terminations

Bus
Individual Point

Amp ADC Proc tical, isolated channels. Each

Xcvr
channel includes an I/O micropro-
Mux
cessor which receives its output
table from the I/O communication
Bus C processor on its corresponding
Amp ADC Proc
Xcvr main processor. All of the digital
output modules, except the dual
Mux
DC modules, use special quadru-
plicated output circuitry which
Architecture of TMR Analog Input Module votes on the individual output

6
signals just before they are TRIPLICATED
INTELLIGENT I/O CONTROLLER(S) FIELD CIRCUITRY TYPICAL POINT (16)
applied to the load. This I/O BUS

voter circuitry is based on A

parallel-series paths which A Bus Point Output
Proc
Xcvr Register Switch
pass power if the drivers for Drive
Circuitry
+V
channels A and B, or chan-
* *
nels B and C, or channels A A and B
A B

and C command them to A

Loopback
Detector
Output
Switch
B to
close—in other words, 2- Drive C other
B Bus Point Circuitry points
out-of-3 drivers voted ON. Xcvr
Proc
Register

The quadruplicated voter

circuitry provides multiple B
Output
redundancy for all critical Switch
Drive
signal paths, guaranteeing Circuitry

safety and maximum avail- C Bus Point * *

Proc C A and B
Xcvr Register
ability. C
Output
Each type of digital output Switch
Drive LD
module executes a partic- Circuitry

A
ular Output Voter Diag- B Loopback
C Detector
nostic (OVD) for every RTN
point. Loop-back on the to
other
* All output switches are opto-isolated. points
module allows each micro-
processor to read the output Architecture of 16-Point Supervised Digital Output Module
value for the point to deter-
mine whether a latent fault the gain and bias that are required to and a new channel is selected to drive
exists within the output circuit. adjust readings of the analog-to-digital the field device. The designation of
converter (ADC). “driving channel” is rotated among the
channels, so that all three channels are
Analog Input Modules Analog input modules and termination
tested.
panels are available to support a wide
On an analog input module, each of the
variety of analog inputs, in both
three channels asynchronously
isolated and non-isolated versions: 0-5
measures the input signals and places Field Terminations
VDC, 0-10 VDC, 4-20 mA, thermocou-
the results into a table of values. Each Various termination options are avail-
ples (types K, J, T, E), and Resistive
of the three input tables is passed to its able for field wiring of the Tricon
Thermal Devices (RTDs).
associated main processor module chassis, including external termination
using the corresponding I/O bus. The panels (ETPs) and fanned-out cables.
input table in each main processor
Analog Output Module An ETP is an electrically-passive
module is transferred to its neighbors
across the Tricon. The middle value is The analog output module receives printed circuit board to which field
selected by each main processor, and three tables of output values, one for wiring is easily attached. An ETP
the input table in each main processor is each channel from the corresponding passes input signals from the field to an
corrected accordingly. In TMR mode, main processor. Each channel has its input module or passes signals gener-
the mid-value data is used by the own digital-to-analog converter (DAC). ated by an output module directly to
control program; in duplex mode, the One of the three channels is selected to field wiring, thereby permitting
average is used. drive the analog outputs. The output is removal or replacement of the input or
continuously checked for correctness output module without disturbing field
Each analog input module is automati- by “loop-back” inputs on each point wiring.
cally calibrated using multiple refer- which are read by all three micropro-
ence voltages read through the A fanned-out cable is a lower-cost alter-
cessors. If a fault occurs in the driving
multiplexer. These voltages determine native to an ETP when using digital
channel, that channel is declared faulty
input or digital output modules. One

7
Theory of Operation

Each TCM has four serial ports, two

3HHUWR3HHU Ethernet network ports, and one debug
port (for Triconex use).
A single Tricon controller supports up
to four TCMs, which reside in two
logical slots. This arrangement
provides a total of sixteen serial ports
'&6(QYLURQPHQW and eight Ethernet network ports.
Enhanced Intelligent
75,&21&KDVVLV
'&6%XV Communication Module (EICM)
Supports RS-232, RS-422, and RS-485
serial communication with external
devices at speeds up to 19.2 kilobits per
'&6
2SHUDWRU second. The EICM provides four serial,
:RUNVWDWLRQ opto-isolated ports which can interface
with Modbus masters, slaves, or both;
or a TriStation. The module also
*36 provides a Centronics-compatible
parallel port.
03V 7&0V Network Communication Module
(NCM)
The NCM supports Ethernet (802.3)
communication at 10 megabits per
7UL6WDWLRQ 0RGEXV6HULDO 0RGEXV6HULDO second for Triconex-proprietary proto-
 6ODYH 0DVWHU cols and applications.
DODUPDODUPDODUPDODUPDODUP

DODUPDODUPDODUPDODUPDODUP
The NCM also supports OPC Server
DODUPDODUPDODUPDODUPDODUP
which can be used by any OPC client.
$QQXQFLDWRU In addition, users can write their own
applications using the TSAA protocol.

Sample of the TCM Communication Capabilities The NCMG enables time synchroniza-
tion to a GPS device.
end of a fanned-out cable connects to communication modules across the
communication bus. Data is typically Hiway Interface Module (HIM)
the Tricon backplane and the other end
provides 50 fanned-out leads, each indi- refreshed every scan; it is never more The HIM acts as an interface between
vidually labeled with a pin number that than two scan-times old. For more a Tricon controller and a Honeywell
matches the connector signals. information, see “Communication TDC 3000 Distributed Control System
Capabilities” on page 53. (DCS) by means of the Hiway
Tricon Communication Module Gateway and Local Control Network
Communication Modules (LCN). The HIM enables higher-order
(TCM)
By means of the communication devices, such as computers and
The Tricon Communication Module operator workstations, to communicate
modules described in this section, the
(TCM) enables a Tricon controller to with the Tricon.
Tricon can interface with Modbus
communicate with Modbus devices
masters and slaves, other Triconex Safety Manager Module (SMM)
(masters or slaves), a TriStation PC, a
controllers in a Triconex peer-to-peer
network printer, other Triconex control- The SMM acts as an interface between
network, external hosts on Ethernet
lers, and other external devices on a Tricon controller and a Honeywell
networks, and Honeywell and Foxboro
Ethernet networks. Universal Control Network (UCN), one
distributed control systems (DCS). The
of three principal networks of the TDC
main processors broadcast data to the

8
3000 DCS. The SMM appears to the ator workstations in display formats Power Supply Modules
TDC 3000 as a safety node on the that are familiar to Foxboro operators. Each Tricon chassis houses two power
Universal Control Network (UCN), modules arranged in a dual-redundant
See “Product Specifications” on
allowing the Tricon to manage process- configuration. Each module derives
page 17 for specifications of the TCM,
critical points within the overall TDC power from the backplane and has inde-
EICM, NCM, SMM, HIM, and ACM.
3000 environment. The SMM transmits pendent power regulators for each
all Tricon aliased data and diagnostic channel. Each can support the power
information to TDC 3000 operator requirements for all the modules in the
workstations in display formats that are chassis in which it resides, and each
familiar to Honeywell operators. feeds a separate power rail on the
Advanced Communication chassis backplane. The power modules
Module (ACM) have built-in diagnostic circuitry which
checks for out-of-range voltages and
The ACM acts as an interface between
over-temperature conditions. A short
a Tricon controller and a Foxboro Intel-
on a channel disables the power regu-
ligent Automation (I/A) Series DCS.
lator rather than affecting the power
The ACM appears to the Foxboro
bus.
system as a safety node on the I/A
Series Nodebus, allowing the Tricon to
manage process-critical points within
the overall I/A DCS environment. The
ACM transmits all Tricon aliased data
and diagnostic information to I/A oper-

Architecture of Power Subsystem

9
Notes
A Tricon system consists of one main chassis and up
to fourteen additional chassis.

System Configuration

A Tricon system is composed of a main

A B
chassis and up to 14 expansion or
remote expansion (RXM) chassis. The
maximum system size is 15 chassis
supporting a total of 118 I/O modules C
and communication modules that inter-
face with OPC clients, Modbus devices,
other Tricons, and external host appli-
D
cations on Ethernet (802.3) networks,
as well as Foxboro and Honeywell
distributed control systems (DCS).
The following sections provide guide-
lines for chassis layout and system
E
configuration.

Chassis Layout
Two power supplies reside on the left
side of all chassis, one above the other.
In the main chassis, the three main
processors are immediately to the right.
The remainder of the chassis is divided
into six logical slots for I/O and F
communication modules and one COM
slot with no hot-spare position. Each
logical slot provides two physical
spaces for modules, one for the active
module and the other for its optional
hot-spare module.
The layout of an expansion chassis is
similar to that of the main chassis,
except that expansion chassis provide
eight logical slots for I/O modules. G H I J K L M
(The spaces used by the main proces-
sors and the COM slot in the main A. Memory backup battery F. Redundant Power Modules K. DO module with hot-spare
chassis are now available for other B. Connectors for terminations G. Three Main Processors L. AI module with hot-spare
purposes.) C. I/O expansion ports H. COM slot (empty) M. AO module without spare
D. Power terminals I. Two TCMs
The main and expansion chassis are
E. Keyswitch J. DI module without spare
interconnected by means of triplicated
I/O bus cables. The maximum I/O bus Sample Layout of a Tricon Chassis
cable length between the main chassis

11
System Configuration

and the last expansion chassis is With the hot-spare method, a logical control and back again without process
normally 100 feet (30 meters), but in slot contains two identical I/O modules. interruption.
restricted applications the length can be While one module is active, the other
A Tricon system should include at least
up to 1,000 feet (300 meters). (Please module is powered but inactive. The
one hot-spare module in place for each
consult your Triconex Customer Tricon cycles control between the two
type of I/O module in the system. With
Support representative for assistance healthy I/O modules approximately
this arrangement, hot-spare modules
when configuring a system that exceeds every hour, so that each undergoes
are tested regularly and can be used for
30 meters of I/O bus cable length.) complete diagnostics on a regular basis.
online module replacement anywhere
If a fault is detected on one module, the
RXM chassis are used for systems in in the system.
Tricon automatically switches control
which the total cable distance between
to the other module, allowing the
the first chassis and the last chassis
system to maintain three healthy chan-
exceeds the distance which can be I/O Bus Connections
nels continuously. The faulty module
supported by copper. Each RXM The figure on this page shows the three
can then be removed and replaced.
chassis houses a set of three RXM sets of RS-485 I/O bus ports (IN and
modules in the same position as the Alternatively, a module can be replaced OUT) on each chassis. Additional
main processors in the main chassis. online even when only one I/O module chassis may branch out from the main
Six remaining logical slots are available is normally installed in a logical slot. If chassis by means of the I/O bus ports,
in an RXM chassis and one blank a fault occurs, the Fault indicator turns up to a maximum of 14. There are six
(unused) slot. on, but the module remains active on ports—two sets of three for triplicated
two channels. A replacement module is serial communication — located on a
then inserted into the unused space in panel in the upper left corner of the
Online Module Repair the slot. The Tricon will grant control to backplane. One set of three I/O bus
The logical slot arrangement of a this second I/O module after it passes a cables is required for each expansion
Tricon chassis provides two approaches diagnostic test. Once the replacement chassis, and for each RXM chassis that
to the online repair of faulting modules: I/O module becomes active, the faulty houses a primary RXM module set.
the hot- spare method and online module can be removed. This repair (Remote RXM chassis are connected to
module replacement. method demonstrates the Tricon the primary RXM chassis with fiber-
controller’s ability to automatically optic cables.) Communication across
transition from triplicated to dual the I/O bus cables (and the RXM fiber-
optic cables) is at 375 kilobits per
second, the same rate as the internal I/O
I/O Bus Ports Tricon Chassis,
bus on the backplane of each chassis.
Front View
OUT

A B C

IN

I/O Bus Connections

OUT A — Leg A output port
OUT B — Leg B output port
OUT C — Leg C output port
IN A — Leg A input port
IN B — Leg B input port
IN C — Leg C input port

I/O Bus Ports

12
System Configuration
Guidelines RXM Chassis Expansion Chassis
A Tricon system must have a main
chassis and may have up to14 expan- A
A

B
sion or remote expansion (RXM) Remote
B

Location #1
chassis. The following configuration C
C

Remote
guidelines apply. RXM Set

For Main Chassis

Jumper Cable
• There is one main chassis with a
chassis address of 1. NOTES
Junction
Dotted lines represent six fiber-optic cables
Box
• The main chassis must contain three Main
for remote location. Solid lines represent
RS-485 I/O Bus Cables for local expansion.
Cable
model 3008 Main Processors for A Tricon system may contain a maximum of 15
Junction chassis, including Main, Expansion and RXM Chassis.
Tricon v9.6 and later systems. Box

• The main chassis must house two Jumper Cable

power modules.
• The main chassis provides six Main Chassis
logical slots for user-selected MPs RXM Chassis Expansion Chassis
}

modules and one COM slot. A A

A

• A v9 low-density configuration B
B
B

includes a v5–v8 chassis with v9 C

C
C

main processors, communication, Primary

RXM Set
and I/O modules.
Expansion Chassis
to Remote
• Expansion chassis are used when the Location #3
total I/O bus cable length for the to Remote
Location #2
system is less than 100 feet (30
meters) for each channel.
• Each expansion chassis must have a System Configuration with Three Remote Locations
unique address between 2 and 15.
This address must not be used by Contact Triconex regarding other
any other chassis. For RXM Chassis configurations.
• Each expansion chassis must house • RXM chassis must be used when the • Each primary RXM module set can
two power modules. total I/O bus cable length for the support up to 3 remote sites, each up
system is greater than 100 feet (30 to 7.5 miles (12 kilometers) away.
• One set of triplicated I/O bus cables
meters) for each channel.
is used to interconnect channels A, B • One RXM chassis must be located at
and C between expansion chassis. • Each RXM chassis must have a each remote site. This RXM chassis
unique address between 2 and 15. must house a remote RXM module
• Each expansion chassis provides
This address must not be used by set.
eight logical slots.
any other chassis.
• A primary RXM module set and a
• One RXM chassis must be located remote RXM module set are
within 100 feet (30 meters) of the connected by 6 fiber-optic cables
main chassis. This RXM chassis which transmit and receive signals
must house the primary RXM for channels A, B and C.
module set. Up to 3 primary RXM
module sets are normally supported.

13
System Configuration

Chassis and Terminations Mounted in an Enclosure

• RXM chassis can be connected to Communication Modules • Up to two logical slots can be
local expansion chassis using I/O The following rules apply to the TCM, configured for NCMs. Matched
bus cables. EICM, NCM, HIM, SMM, and ACM in pairs of NCMs can be installed in the
a Tricon system: left and right positions of each
• Each RXM chassis must contain 2
logical slot. If only one logical slot is
power modules. • A TriStation PC communicates with used, the slot can be in the main
• Each RXM chassis provides 6 a Tricon controller through a TCM, chassis or Chassis 2. If two logical
logical slots for I/O modules and 1 EICM, NCM or ACM, so at least slots are used, they must be Slot 6
blank (unused) slot. one of these modules must be and 7 in the main chassis, and peer-
installed in the main chassis or to-peer cannot be used.
Chassis 2.
• Up to two logical slots can be
• One logical slot is available for configured for TCMs. Matched pairs
EICMs or ACMs, respectively. of TCMs can be installed in the left
Matched pairs of these modules can and right positions of each logical
be installed in both the left and right slot, and they can be located in the
positions of one logical slot. main chassis or Chassis 2.

14
• Up to three logical slots can be Module Type Watts Consumed
configured for SMMs. A matched
pair of SMMs can be installed in the ACM 15
left and right positions of each Analog Input 10
logical slot. All three slots must be Analog Input, Isolated 15
in the main chassis or Chassis 2. Analog Input, High Density 10
• Up to two logical slots can be Analog Output 15
configured for HIMs. Both slots Digital Input, High Density 10
must be in the main chassis.
Digital Input, Single 10
• The COM slot can be configured Digital Input, TMR 10
only for the EICM, TCM or NCM.
Digital Output, AC 10
• You cannot install an NCM and a Digital Output, DC 10
TCM in the same Tricon system.
You also cannot install an EICM and Digital Output, Dual 10
a TCM in the same system. Digital Output, Supervised 15

• If communication modules are EICM 10

housed in Chassis 2, this chassis HIM 10
must be connected directly to the Main Processor, model 3008 10
main chassis using I/O COMM NCM 20
cables (model 9001) rather than
standard I/O bus cables. Power Module n/a
SMM 20
• Chassis 2 can be an I/O expansion
chassis or a primary RXM chassis. TCM 7
Thermocouple Input, Isolated 15
Chassis Power Limitations
Thermocouple Input, Non-Isolated 10
To maintain the safety and reliability of
the Tricon, each system must be config- Pulse Input 20
ured for operation under a worst-case Pulse Totalizer 10
scenario. These circumstances include RXM 5
operation with only one functional Relay Output 15
power supply at 140°F (60°C),
ambient. (See “Power Modules” on
page 24 for detailed specifications).
Under these conditions, the power
supply is rated to deliver 175 watts. The
table to the right lists the logic power
consumption per module in watts.

15
Notes
The Tricon supports a comprehensive range of
modules to meet customers’ needs.

Product Specifications
The Triconex product family includes a Main Processors Fiber-Optic Remote
comprehensive range of modules. This The main processors execute the Extender Modules (RXM)
section includes: a summary of the system diagnostics and the user-written For operation of Expansion Chassis up
system components and their uses, a control program. to 7.5 miles (12 kilometers) away from
table that lists standard products and the Main Chassis, with exceptional
their model numbers, and a summary of Communication Modules
immunity against electro-static and
specifications for each standard product • Tricon Communication Module electro-magnetic interference.
in the Tricon family (TCM) supports a number of
Triconex protocols and applications I/O Modules
See the Tricon Planning and Installa- • Digital Input Modules receive
and user-written applications on
tion Guide for complete information. discrete signals of these nominal
Ethernet (802.3) networks,
including TriStation, Modbus TCP voltages: 115 VAC/VDC, 48
Summary of Tricon and OPC. It also supports RS-232, VAC/VDC, and 24 VAC/VDC. All
Components and RS-485 serial communication voltages are available in TMR
Chassis with Modbus devices, TriStation, modules. Non-TMR modules are
and GPS for time synchronization. available in 24 VDC and 48 VDC
• Main Chassis—houses main only. Speed input and totalization
processors, memory back-up • Enhanced Intelligent
Communication Module (EICM) modules are also available.
batteries, communication modules
and I/O modules. supports RS-232, RS-422 and RS- • Supervised Digital Output Modules
• Expansion Chassis—for additional 485 serial communication with produce discrete output signals of
I/O modules up to 100 feet (30 Modbus devices and TriStation. these nominal voltages, with
meters) away from the main chassis. • Network Communication Module diagnostic coverage of the field
In restricted applications, operation (NCM) supports a number of circuit and load device: 115 VAC,
up to 1,000 feet (300 meters) is Triconex protocols and applications 120 VDC, 48 VDC and 24 VDC.
supported. and user-written applications on • Digital Output Modules produce
• RXM Chassis—for I/O modules up Ethernet (802.3) networks, discrete output signals of these
to 7.5 miles (12 kilometers) away including TriStation. nominal voltages: 115 VAC, 120
from the main chassis. • Safety Manager Module (SMM) acts VDC, 24 and 48 VDC. Dual output
• Mechanical Keying—Each slot in as an interface between a Tricon modules are also available.
the Tricon is mechanically keyed to controller and a Honeywell
• Analog Input Modules receive
correspond with a specific type of Universal Control Network (UCN),
analog signals of these types: 0-5
module. This prevents the one of three principal networks of
VDC, 0-10 VDC and Thermocouple
installation of modules into the TDC 3000 DCS.
types J, K, T and E. Available in both
improper slots. • Hiway Interface Module (HIM) acts isolated and DC-coupled versions.
For chassis mounting and enclosure as an interface between a Tricon
specifications, see page 23. controller and a Honeywell TDC • Analog Output Module drives eight
3000 Hiway Gateway and Local 4-20 mA analog output signals. The
Power Supply Modules high-current AO module includes 6
Control Network (LCN).
• Provide logic power to modules in points at 4-20 mA and 2 points at 16-
the main, expansion or RXM • Advanced Communication Module 320 mA.
chassis. Available in 24 VDC, 115 (ACM) allows a Tricon controller to
VAC and 230 VAC versions. The interface with a Foxboro Industrial
power rating of each power supply is Automation (I/A) Series DCS and
175 watts at 140 ° F (60° C). TriStation.

17
Product Specifications
Standard Tricon Products
Description Model No. See
Chassis Assemblies
Main Chassis, High Density Configuration, includes the Tricon printed manuals 8110 page 13, page 21
Expansion Chassis, High Density Configuration 8111 page 13, page 21
Remote Expansion Chassis, High Density Configuration 8112 page 13, page 21
I/O Bus Expansion Cables (Set of 3) 90001 page 12
I/O-COMM Bus Expansion Cables (Set of 3) 9001 page 12, page 21
Blank I/O Slot Panel 8105 page 22
Power Modules
120 VAC/VDC – 175-Watt Power Module 8310 page 24
24 VDC – 175-Watt Power Module 8311 page 24
230 VAC – 175-Watt Power Module 8312 page 24
Main Processor Modules
3008 Main Processor, 16 megabytes DRAM 3008 page 25
Communication Hardware and Software
Tricon Communication Module (TCM), Ethernet (802.3) and serial (RS-232/RS-485) ports 4351, 4352, 4353, 4354 page 26
Enhanced Intelligent Communication Module (EICM), serial (RS-232/RS-422/RS-485) ports 4119, 4119A page 27
Network Communication Module (NCM), Ethernet (802.3) ports 4329, 4329G page 28
Safety Manager Module (SMM), Honeywell UCN Interface 4409 page 29
Hiway Interface Module (HIM), Honeywell Data Hiway Interface 4509 page 30
Advanced Communication Module (ACM), Foxboro I/A Series Nodebus Interface 4609 page 31
Triconex DDE Server Software 7523-1 page 55
Network Accessory Kit (Ethernet thin cable, connectors and terminators) 7600-3 n/a
Remote Extender Modules
Primary RXM, Multi-Mode Fiber Optics, Set of 3 Modules 4200-3 page 32
Remote RXM, Multi-Mode Fiber Optics, Set of 3 Modules 4201-3 page 32
Primary SRXM, Single-Mode Fiber Optics, Set of 3 Modules 4210-3 page 32
Remote SRXM, Single-Mode Fiber Optics, Set of 3 Modules 4211-3 page 32
TriStation Software
TriStation 1131 v4.1 Software License with printed manuals 7254-1 page 57
7255-1 (with CEMPLE)
TriStation 1131 v3.1.3 Software License with printed manuals 7244-4 page 57
CEMPLE Language Editor, v3.1.3 7224-4 page 61
Documentation Sets
Tricon v9–v10 Planning and Installation, Field Terminations, and Communication printed 8700-3
manuals
Triconex User Documentation, includes all manuals in PDF format (CD-ROM) 8825

1. I/O Bus Expansion Cables are available in custom lengths. Please contact Triconex for more information.

18
 Tricon I/O Modules
Voltage Description Type Model No. Points For Details, See

Digital Input Modules

115 VAC/VDC Opto-Isolated, Non-Commoned TMR 3501E/3501T 32 page 33
48 VAC/VDC Commoned in Groups of 8, Self-Test TMR 3502E 32 page 33
24 VAC/VDC Commoned in Groups of 8, Self-Test TMR 3503E 32 page 33
24/48 VDC High Density, DC Coupled TMR 3504E 64 page 34
24 VDC Low Threshold with Self-test, Commoned TMR 3505E 32 page 33
24 VDC Single, Opto-Isolated, Commoned Single 3564 64 page 34
Pulse Input Differential, AC Coupled TMR 3511 8 page 35
Pulse Totalizer Opto-isolated, Non-commoned TMR 3515 32 page 36

Digital Output Modules

115 VAC Opto-Isolated, Non-commoned TMR 3601E/3601T 16 page 37
120 VDC Opto-Isolated, Non-commoned TMR 3603B, 16 page 37
Opto-Isolated, Commoned 3603E/3603T
24 VDC Opto-Isolated, Non-commoned TMR 3604E 16 page 37
48 VDC Opto-Isolated, Non-commoned TMR 3607E 16 page 37
115 VAC Galvanically Isolated, Commoned., Supv. TMR 3611E 8 page 39
48 VDC Galvanically Isolated, Commoned, Supv. TMR 3617E 8 page 39
120 VDC Opto-Isolated, Commoned, Supervised TMR 3623/3623T 16 page 38
24 VDC Opto-Isolated, Commoned, Supervised TMR 3624 16 page 38
24 VDC Opto-Isolated, Commoned Dual 3664 32 page 40
24 VDC Opto-Isolated, Commoned Dual 3674 32 page 40
Relay Output Non-triplicated, Normally Open Non- 3636R/3636T 32 page 35
triplicated

Analog Input Modules

0-5 VDC Differential, DC Coupled TMR 3700A 32 page 41
0-10 VDC Differential, DC Coupled TMR 3701 32 page 41
0-5, 0-10 VDC Differential, Isolated TMR 3703E 16 page 41
0-5, 0-10 VDC High-Density, Differential, DC Coupled TMR 3704E 64 page 41
Thermocouple Differential, DC Coupled TMR 3706A 32 page 43
Thermocouple Differential, Isolated TMR 3708E 16 page 43

Analog Output Modules

4-20 mA Current Loop, DC Coupled TMR 3805E 8 page 42
4-20 mA and 20-320 mA Current Loop, DC Coupled TMR 3806E 6 and 2 page 42

19
Product Specifications
General Environmental and EMC Specifications
Other than the optional conformal coating of all PCB assemblies, the Tricon is not explicitly protected against dust, corrosive atmospheres or
falling debris. Atmospheric and airborne-particle protection must be provided by housing the Tricon in an appropriate NEMA-rated enclosure.

Operating Temperature 32° to 140° F (0° to 60° C), ambient, as measured at the bottom of the chassis, per IEC 60080-2-1 Test Nb
Storage Temperature -40° to 167° F (-40° to 75° C), per IEC 60068-2-14, Test Na
Relative Humidity 5% to 95%, non-condensing, per IEC 60068-2-2, Test Bb, and IEC 60068-2-3 test Db
Sinusoidal Vibrations per Axis 2 G @ 10 to 150 Hz, per IEC 60068-2-6, Test Fc
Shock 15 G for 6-11 ms in each axis, per IEC 60068-2-27
Electrostatic Discharge IEC 61000-4-2, 4 kV air, 8kV contact
Conducted Susceptibility IEC 61000-4-4, Fast Transient/Burst, 2 kV power, 1kV signal lines and IEC 61000-4-5, Surge Withstand,
2 kV CM AC power lines, etc. IEC 61000-4-6, RFI, 0.15-80 MHz, 10V
Radiated Susceptibility IEC 61000-4-3, 26-1000 MHz, 10V/m and IEC 61000-4-8, 50-60 Hz, 30A/m
Conducted Emissions CISPR 16, Class A, 0.15-30MHz, 73-79db when installed per the guidelines of the P&I Guide.
Radiated Emissions CISPR 11, Class A, 30-1000 MHz @ 10m, 4-47 db when installed per the guidelines of P&I Guide.

International Approvals
The Tricon controller has been certified as complying with multiple internationally recognized standards by the following internationally recognized
certification agencies, these certifications have qualified the Tricon for use around the world in safety critical applications. Test reports from the various
certification agencies are available upon request.
TÜV Rheinland — TÜV has certified that the Tricon v10 controller is in full compliance with the internationally recognized standards listed below,
and thus is qualified for use in the following applications and jurisdictions.
• Emergency safety shut-down or other critical control applications requiring SIL 1-3 certification per the functional safety requirements of IEC 61508
9 (only Tricon v9.6 or later)
• Emergency safety shut-down or other critical control applications requiring AK 1-AK6 certification per the functional safety requirements of DIN
V 19250 and DIN V VDE 0801 (only Tricon v9.x)
• Fire and gas detection applications requiring certification per the requirements of EN 54
• Fire and gas detection applications requiring certification per the requirements of NFPA 72 (only Tricon v9.6 or later)
• Burner management applications requiring certification per the requirements of DIN VDE 0116
• Burner management applications requiring certification per the requirements of NFPA 8501 or NFPA 8502 (only Tricon v9.6 or later)
• All applications for use in European Union or other jurisdictions requiring compliance with the EMC Directive No. 89/336/EEC and Low Voltage
Equipment Directive No. 72/23/EEC
• All applications for use in the European Union or other jurisdictions requiring compliance with the ATEX Directive No. 94/9/EC for Zone 2, Group
IIB hazardous locations
• Environmental, health, and safety applications in semiconductor manufacturing facilities per the requirements of SEMI S2
For hazardous location applications, see the Tricon Planning and Installation Guide for application-specific installation instructions.
Canadian Standards Association (CSA) — CSA has certified that the Tricon v10 controller is in full compliance with the internationally recog-
nized electrical safety standards and is qualified for general use in North American and other jurisdictions requiring compliance with these standards.
Factory Mutual Research (FM) — Factory Mutual has certified that the Tricon v10 controller is in full compliance with the international recog-
nized standards and is qualified for use in Class I, Division 2 Temperature T4, Groups A, B, C, and D hazardous indoor (or outdoor in a NEMA 4
cabinet) locations. For hazardous location applications, see the Tricon Planning and Installation Guide for application-specific installation instructions.
European Union CE Mark — Based upon the independent TÜV evaluation and test results, Triconex has certified the Tricon controller is suitable
to use in the European Union and all other jurisdictions requiring compliance with the European Union EMC Directive No. 89/336/EEC and Low
Voltage Equipment Directive No. 72/23/EEC, see Certificate of Compliance for details. For hazardous location applications, see the Tricon Planning
and Installation Guide for application-specific installation instructions.
U.S. Nuclear Regulatory Commission (NRC) — The NRC has certified that the Tricon v9.5 controller is suitable for use in nuclear 1E applica-
tions within the limitations and guidelines referenced in the NRC Safety Evaluation Report (SER) ML013470433, Review of Triconex Corporation
Topical Reports 7286-545, "Qualification Summary Report" and 7286-546, "Amendment 1 To Qualification Summary Report," Revision 1. This report
is available from the NRC via the Agency Document Access and Management System (ADAMS) Web site. This qualification was based upon EPRI
TR-107330, Generic Requirements Specification for Qualifying a Commercially Available PLC for Safety-Related Applications in Nuclear Power
Plants. As of this writing, qualification is pending for using the Tricon v10 in Nuclear 1E applications. Contact the Triconex Customer Satisfaction
Center for the most recent information.

20
Chassis Options Keyswitch
A Tricon system is made up of one or — LOCAL — I/O Expansion Backplane
more chassis assemblies which contain REMOTE Bus Ports

I/O and communication modules. The • RUN

first chassis of a system is called the • PROGRAM
main chassis (model 8110). To enlarge
• STOP
a system, expansion chassis (model
8111) and/or RXM chassis (model
8112) can be added. (See “System
Power Supply
Configuration” on page 11 for details.) Module #1

I/O Expansion Bus

Each chassis has six RS-485 I/O expan-
sion bus ports at the top left corner of Power Supply
Module #2
the backplane. There are two sets of
ports for channels A, B, and C,
providing for two triplicated serial
communications paths between chassis. MPs 2 3 4 5 6 7
One set of cables is required for each Logical Slots for I/O &
Communication Modules
expansion chassis and for the RXM
chassis which houses the primary RXM execute the previously-loaded control
module set. The standard length of a Keyswitch for System Control program. Attempts to modify program
cable set (model 9000) is 6 feet— The main chassis has a four-position variables by TriStation, Modbus
longer cables are available if needed. keyswitch which controls all the chassis masters or external hosts are rejected.
in the system. The keyswitch setting is However, an control program may call
The triplicated I/O bus transfers data
readable by Tricon controllers, TriSta- gated access functions to enable
between the I/O modules and the main
tion software, and the control programs. external host writes during a designated
processors at 375 kilobits per second.
Switch settings are: window of time.
The communication bus runs between
the main processors and the communi- RUN—Normal operation with read- PROGRAM—For program loading and
cation modules at 2 megabits per only capability. The main processors checkout. Allows control of the Tricon
second. system from the TriStation platform,
including Download All and Download
Change. Also allows writes to program
variables by external hosts.
Mechanical Specifications
These specifications apply to Main, Expansion and RXM Chassis; Power STOP—Stops reading inputs, forces
Supply Modules; and other modules where indicated. non-retentive digital and analog outputs
to 0, and halts the control program.
Overall Dimensions 19 in wide by 22.75 in high by 17.75 in deep (Retentive outputs retain the value they
(48.3 cm by 57.8 cm by 45.1 cm) had before the keyswitch was turned to
Chassis Fabrication Black zinc-plated and welded cold-rolled steel STOP.) The STOP setting can be used
Approximate Weights for installation and service of process-
Main or Expansion Chassis 54.0 lbs. (24.5 kg.) related equipment, but is not required
Power Module 7.2 lbs. (3.3 kg.) for service of the Tricon.
Main Processor 4.7 lbs. (2.1 kg.) REMOTE—Allows writes to program
I/O Module 4.7 to 6.0 lbs. (2.1 kg. to 2.7 kg) variables by TriStation and external
Communication Module 5.0 lbs. (2.3 kg.) hosts. (Download All and Download
Change by TriStation are not allowed.)
16-point Termination Panel .09 lbs. (.04 kg.)
Modification of program logic is not
32-point Termination Panel 2.1 lbs. (.95 kg.) allowed.

21
Product Specifications

Chassis and Mounting bolted together on the sides, but suffi- Slot Covers
Specifications cient clearance must be allowed to fully All unused slots in a chassis should be
open their front and rear doors. filled with Blank I/O Slot Panels
The Tricon system can be rack-
mounted or panel-mounted in an (model 8105) to maintain proper air
industry-standard NEMA enclosure as flow.
described on the next page. Cabinets
can optionally be equipped with base
and casters. Multiple cabinets can be Heat Management
When mounting Tricon chassis into
vented or non-vented enclosures, the
integration engineer must make provi-
19.00" sions for sufficient heat management.
48.3cm

Optional location of mounting bracket

17.40"
Triconex recommends the installation
for rear-rack or panel mounting of unit
(2 places) 44.2cm of baffles (Triconex part number
2000361-001), as shown on page 23.
For temperatures above 122° F (50° C),
1/4 - 20 threaded other heat management provisions
chassis ground 16.50"
41.9cm
must be implemented, such as:
Top View
of Chassis
• Louvers and pagoda top
Standard location of mounting bracket (use for Rack or Panel Mounting)
for front rack mounting of unit • Enlarged front and rear louvers with
(2 places)
21.00"
53.3cm raised pagoda top
• Lower density filters
• Redundant fans (running all the
3.00" R
7.6cm
time) with appropriate louvers and
Minimal clearance requirements pagoda top
for communication cables

• Failure detection circuitry

18.31"
46.5cm

NOTE: Bolt hole spacing on Top of Backplane Top of Backplane

chassis fits standard 19" Slotted Clearance
for 1/4" Screw
(48.3cm) rack hole spacing. (2 places)

Clearance for
#10 screw
(4 places) 22.75"
57.8cm

Front View Front View

14.25" for Rack Mounting for Panel Mounting
36.2cm
10.25"
26.0cm 13.12"
5.50" 33.3cm
14.0cm
2.62"
6.7cm

Minimum clearance 5.25" (13.3cm), Minimum clearance 5.25" (13.3cm),

1.50" to other equipment & cabinet floor to other equipment & cabinet floor
3.8cm

Dimensions and Clearances for Rack and Panel Mounting

22
 31.5" 31.5" 31.5"
(800 mm) (800 mm) (800 mm)

31.5"
Field Power Supply
(80.0cm)
DC Distribution
Panel
A/C Distribution
Panel Analog Input/
Digital Input
External
Termination
Panel
4.5" x 10"
(114 mm x 254 mm)

Tricon
Main

Wire Duct
Wire Duct
Chassis

86.0"
(2,200 mm)
1.75"
(44.5 mm)
Baffle minimum

Tricon
Expansion 16-point
Chassis Digital Output
Tricon External
Chassis Termination
(side view) Panel
4.5" x 5.0"
(114 mm x 127 mm)

3.5" minimum 4.0" minimum

(89 mm minimum) (102 mm minimum)

FRONT VIEW SIDE VIEW REAR VIEW

Typical Dimensions and Clearances for Chassis Installation with External Terminations

NOTE
This drawing shows a typical set-up for external termination panels—other set-ups are possible. Please contact Triconex for details.

Mounting Tricon Chassis in Enclosures

Triconex will mount Tricon chassis in any of the industry-standard enclosures listed below. (Please contact Triconex regarding
other enclosures, available for additional engineering and documentation charges.) See page 14 for a photograph of Tricon
chassis and terminations mounted in a sample enclosure.
Enclosures Typically Supported by Triconex*

Type Width Depth Height

Rittal NEMA 12 31.5 inches (800 mm) 31.5 inches (800 mm) 86.0 inches (2,200 mm)
31.5 inches (800 mm) 31.5 inches (800 mm) 78.0 inches (2,000 mm)
MarkHon NEMA 1 31.5 inches (800 mm) 31.5 inches (800 mm) 85.0 inches (2,160 mm)

* Other sizes are available. Please contact Triconex for more information.

23
Product Specifications

Terminal Strip for Power Module: Power Modules The power module alarm contacts are
(located on backplane above the Power Module) actuated when:
Each Tricon chassis is equipped with
L two power modules—either one is fully • The hardware configuration
N
capable of running the Tricon at full conflicts with the control program’s
1
NO load and rated temperature. Each power logical configuration
C module can be replaced online. The
NC • A module is missing from the
L power modules, located on the left side
system
N of the chassis, convert line power to DC
2 power appropriate for all Tricon • A module fails
NO
RC C modules. Terminal strips for system • A main processor detects a system
NC grounding, incoming power and hard- fault
wired alarms are located on the lower
• Primary power to a power module
left corner of the backplane. Incoming
fails
Front Panel of Power Module: power should be rated for a minimum
(located on lower left side of chassis) • A power module has a “Low
of 240 watts per power supply.
Battery” or “Over Temperature”
120 VAC/DC warning

PASS
FAULT
ALARM
Power Module Specifications
TEMP
BATT LOW Isolation >1000 VAC or 1500 VDC, Input to Output
Input Terminations Protected by safety cover
Accepts three 12-gauge wires (3.310mm2): neutral, hot, and
protective earth (chassis ground)
Over-Temp. Sensor Temperature warning monitor—trips when internal temp. is
greater than 181° F (83°C); this typically occurs at ambient
temperature 140°F (60°C) or higher
POWER MODULE Alarm Contacts Normally open, normally closed and common
MODEL 8310
Each contact supports 120 VAC @ 1 amp
Accepts 12-gauge (3.310mm2) wire
Protected by safety cover
Input Power Required 240 watts minimum per Power Module
Output Power 175 watts at 140°F (60°C)
Output Voltage 6.5 VDC, ±1% under all operating conditions
Output Current 27 amps maximum at 140°F (60°C) ambient

Power Module Model 8310 8311 8312

Chassis Type Main/Expansion/RXM Main/Expansion/RXM Main/Expansion/RXM
Nominal Voltage 120 VAC/VDC 24 VDC 230 VAC
Input VAC @ 47-63 Hz 85-140 n/a 185-285
Input VDC 95-180 22-31 n/a
Fuse Rating and Type 5 amps, time-delay 15 amps, time-delay 2.5 amps, time-delay
Output Hold Time 20 ms minimum 2.8 ms minimum 20 ms minimum
(nominal to 0 volts)
Diagnostic Indicators PASS, FAULT, ALARM, TEMP, PASS, FAULT, ALARM, TEMP, PASS, FAULT, ALARM, TEMP,
BAT LOW BAT LOW BAT LOW

24
Main Processor Modules Physical Description of Model 3008 Main Processors
Model 3008 Main Processors are avail- Feature Description
able for Tricon v9.6 and later systems.
Microprocessor Motorola MPC860, 32 bit, 50 MHz
For detailed specifications, see the
Planning and Installation Guide for Memory • 16 MB DRAM (non-battery backed-up)
Tricon Systems. • 32 KB SRAM, battery backed-up

Three MPs must be installed in the • 6 MB Flash PROM

main chassis of every Tricon system. Tribus Communication Rate • 25 megabits per second
Each MP independently communicates • 32-bit CRC protected
with its I/O subsystem and executes the • 32-bit DMA, fully isolated
user-written control program.
I/O Bus and Communication Bus • Motorola MPC860
Sequence of Events (SOE) Processors 32 bit
and Time Synchronization 50 MHz

During each scan, the MPs inspect

designated discrete variables for state
changes known as events. When an
event occurs, the MPs save the current
variable state and time stamp in the
buffer of an SOE block.
Indicators on Main Processors
If multiple Tricon systems are
connected by means of NCMs, the time PASS Module has passed self-diagnostic tests
synchronization capability ensures a FAULT Module has a fault and should be replaced
consistent time base for effective SOE ACTIVE Module is executing the user-written control program
time-stamping. See page 64 for more MAINT1 Maintenance indicator 1
information.
MAINT2 Maintenance indicator 2
Diagnostics COM TX Transmitting data across COMM bus
Extensive diagnostics validate the COM RX Receiving data from COMM bus
health of each MP, I/O module and
communication channel. Transient I/O TX Transmitting data across I/O bus
faults are recorded and masked by the I/O RX Receiving data from I/O bus
hardware majority-voting circuit.
Persistent faults are diagnosed and the
errant module is hot-replaced.
MP diagnostics perform these tasks:
• Verify fixed-program memory and • Verify handshake and interrupt
static RAM signals between the CPU, each I/O
• Test all basic processor and floating- communication processor and
point instructions and operating channel
modes • Check each I/O communication
• Validate user memory by means of processor and channel
the TriBus hardware-voting circuitry microprocessor, ROM, shared
memory access and loopback of RS-
• Verify the shared memory interface 485 transceivers
with each I/O communication
processor and channel • Verify the TriClock and TriBus
interfaces

25
Product Specifications

Tricon Communication Any standard Modbus device can

Module communicate with the Tricon through
the TCM, provided that aliases are
The Tricon Communication Module
assigned to the Tricon variables. Alias
(TCM) allows the Tricon to communi-
numbers must also be used when host
cate with TriStation, other Tricon or
computers access the Tricon through
Trident controllers, Ethernet devices,
other communication modules. See
and Modbus master and slave devices.
“Communication Capabilities” on
Each TCM contains four serial ports, page 53 for more information.
two network ports, and one debug port
Each TCM contains two network
(for Triconex use).
ports—Net 1 and Net 2. Models 4351
Each serial port is uniquely addressed and 4353 have two copper Ethernet
and can be configured as a Modbus (802.3) ports and Models 4352 and
master or slave. Serial port #1 supports 4354 have two fiber-optic Ethernet
either the Modbus or the Trimble GPS ports. Net 1* supports the Peer-to-Peer
interface. Serial port #4 supports either and Peer-to-Peer Time Synchronization
the Modbus or the TriStation interface. protocols. Net 2 supports the TCP/IP,
Each TCM supports an aggregate data Modbus TCP/IP Slave/Master, TSAA,
rate of 460.8 kilobits per second, for all TriStation, SNTP, and Jet Direct (for
four serial ports. network printing) protocols.
Programs for the Tricon use variable A single Tricon system supports a
names as identifiers but Modbus maximum of four TCMs, which must
devices use numeric addresses called reside in two logical slots. Different
aliases. Therefore, an alias must be TCM models cannot be mixed in one
assigned to each Tricon variable name logical slot. Each Tricon system
that will be read by or written to a supports a total of sixteen Modbus
Modbus device. An alias is a five-digit masters or slaves—this total includes
number which represents the Modbus network and serial ports. The hot-spare
message type and the address of the feature is not available for the TCM,
variable in the Tricon. An alias number though you can replace a faulty TCM
is assigned in TriStation. while the controller is online.
TCM Specifications
Model Number 4351, 4352, 4353, 4354
Serial ports 4, RS-232/RS-485 ports, DB-9 connectors
Network ports 2, 10/100BaseT Ethernet ports, RJ-45 connectors (model 4351 and 4353*)
2, fiber-optic mode Ethernet ports, MTRJ connectors with 62.5/125 um fiber
cables (model 4352 and 4354*)
*On models 4353 and 4354, Net 1 also supports the Open Protocols supported
on Net 2.
Port isolation 500 VDC
Protocols TriStation, Modbus, TCP/IP, ICMP, SNTP, TSAA, Trimble GPS,
Peer-to-Peer, Peer-to-Peer Time Synchronization, Jet Direct (network printing)
Modbus functions 01 — Read Coil Status 06 — Modify Register Content
supported 02 — Read Input Status 07 — Read Exception Status
03 — Read Holding Registers 08 — Loopback Diagnostic Test
04 — Read Input Registers 15 — Force Multiple Coils
05 — Modify Coil Status 16 — Preset Multiple Registers
Communication speed Copper Ethernet ports: 10/100 Mbps
Fiber Ethernet ports: 100 Mbps
Serial ports: up to 115.2 Kbps per port
Status Indicators PASS, FAULT, ACTIVE, FIRM
LINK— 1 per network port, TX (Transmit) — 1 per port,
RX (Receive) — 1 per port

26
 Enhanced Intelligent Modbus or TriStation interface.
Communication Module Modbus communication can be
PASS performed in either RTU or ASCII
The model 4119A Enhanced Intelligent
FAULT mode. The parallel port provides a
Communication Module (EICM)
ACTIVE Centronics interface to a printer.
allows the Tricon to communicate with
1TX Modbus masters and slaves, TriStation Each EICM supports an aggregate data
1RX and printers. rate of 57.6 kilobits per second (for all
four serial ports).
Serial Port #1
For Modbus connections, the EICM
for Modbus interface user can select the RS-232 point-to- Programs for the Tricon use variable
point interface for one master and one names as identifiers but Modbus
slave, or the RS-485 interface for one devices use numeric addresses called
master and up to 32 slaves. The RS-485 aliases. Therefore an alias must be
network trunk can be one or two assigned to each Tricon variable name
2TX
2RX
twisted-pair wires up to a maximum of that will be read by or written to a
4,000 feet (1,200 meters). Modbus device. An alias is a five-digit
Serial Port #2 number which represents the Modbus
Each EICM contains four serial ports
for Modbus interface message type and the address of the
and one parallel port which can operate
variable in the Tricon. An alias number
concurrently. Each serial port can be
is assigned in TriStation.
configured as a Modbus master with up
to seven Modbus masters per Tricon Any standard Modbus device can
3TX chassis. A single Tricon system communicate with the Tricon through
3RX
supports a maximum of two EICMs, the EICM, provided that aliases are
which must reside in one logical slot. assigned to the Tricon variables. Alias
Serial Port #3 (The hot-spare feature is not available numbers must also be used when host
for Modbus interface
for the EICM, though you can replace a computers access the Tricon through
faulty EICM while the controller is other communication modules, such as
online.) Each serial port is uniquely the NCM. See “Communication Capa-
addressed and supports either the bilities” on page 53 for more informa-
4TX
tion.
4RX
EICM Specifications
Serial Port #4
for TriStation Model Number 4119A, Isolated
or Modbus Serial ports 4 ports RS-232, RS-422 or RS-485
Parallel ports 1, Centronics, isolated
Port isolation 500 VDC
Protocol TriStation, Modbus
PRT
Modbus functions supported 01 — Read Coil Status
02 — Read Input Status
03 — Read Holding Registers
Parallel Port #5
04 — Read Input Registers
for Centronics-
compatible printer 05 — Modify Coil Status
06 — Modify Register Content
07 — Read Exception Status
EICM 08 — Loopback Diagnostic Test
4119A
15 — Force Multiple Coils
16 — Preset Multiple Registers
Communication speed 1200, 2400, 9600, or 19,200 Baud
Diagnostic Indicators PASS, FAULT, ACTIVE
TX (Transmit) — 1 per port
RX (Receive) — 1 per port

27
Product Specifications

Network Communication “Communication Capabilities” on

Module page 53 for more information about
Triconex protocols and applications.
With a model 4329 Network Communi- PASS

cation Module (NCM) installed, the Two NCMs can reside in one logical FAULT

Tricon can communicate with other slot of the Tricon chassis, but they func- ACTIVE

Tricons and with external hosts over tion independently, not as hot- spare
Ethernet (802.)3 networks. The NCM modules. External hosts can read or
supports a number of Triconex propri- write data only to Tricon variables to
etary protocols and applications as well which Alias numbers have been NET 1
as user-written applications, including assigned. (See “Enhanced Intelligent
those that use TSAA protocol. Communication Module” on page 27 BNC Connector for
for more information about Aliases.) Thin IEEE 802.3 Cable
The NCMG module has the same func- TX
tionality as the NCM as well as the The NCM is compatible with the IEEE RX
Port #1—for Peer-to-Peer &
ability to synchronize time based on a 802.3 electrical interface and operates
Time Synchronization Only
GPS system. For more information, see at 10 megabits per second. The NCM
the Tricon Communication Guide. connects with external host computers 15-Pin "D" Connector
by means of coaxial cable (RG58) at for Self-powered
The NCM provides two BNC connec- External Transceiver
typical distances up to 607 feet (185
tors as ports: Net1 supports Peer-to- (reserved)
meters). Distances up to 2.5 miles
Peer and Time Synchronization proto-
(4,000 meters) are possible using
cols for safety networks comprised of
repeaters and standard (thick-net or
Tricons only. Net2 supports open NET 2
fiber-optic) cabling.
networking to external systems using
BNC Connector for
Triconex applications such as TriSta- The main processors typically refresh
Thin IEEE 802.3 Cable
tion, SOE, OPC Server, and DDE data on the NCM once per scan.
Server or user-written applications. See TX
RX
Port #2—for TSAA,
NCM Specifications External Host Applications
(including TRISTATION)
Model Number 4329, 4329G & TCP-IP/UDP-IP
Ethernet (802.3) ports 2, BNC connectors, RG58 50-ohm thin cable 15-Pin "D" Connector
External Transceiver Ports 2, 15-pin D-connectors for Self-powered
Serial port 1, RS-232 compatible External Transceiver
Port Isolation 500 VDC (reserved)
Protocol TSAA
(TCP(UDP)/IP/802.3) COMM
Functions supported TRICON_DATA (Frame Type 1) TX
TRICON_DATA_REQ (Frame Type 2) RX
WRITE_TRICON_DATA (Frame Type 3)
WRITE_TRICON_DATA_RSP (Frame Type 4) RS-232 Serial Port
READ_TRICON_CLOCK (Frame Type 5) Reserved for future use
READ_TRICON_CLOCK_RSP (Frame Type 6)
SET_TRICON_CLOCK (Frame Type 7)
SET_TRICON_CLOCK_RSP (Frame Type 8)
READ_TRICON_DATA (Frame Type 11)
READ_TRICON_RSP (Frame Type 12) NCM
Communication speed 10 megabits per second (for Ethernet ports) 4329
Status indicators PASS, FAULT, ACTIVE
TX (Transmit) — 1 per port
RX (Receive) — 1 per port

28
 Safety Manager Module • Reads/writes aliased data to satisfy
The model 4409 SMM acts as an inter- DCS requests
PASS face between a Tricon controller and a • Reads Tricon diagnostics for display
FAULT Honeywell Universal Control Network by the DCS
ACTIVE (UCN), one of three principal networks
of the TDC 3000 Distributed Control • Write protection to lock out changes
LOW System. Appearing to the Honeywell to the Tricon safety system from all
BATT
system as a safety node on the UCN, the TDC 3000 sources
SPARE
RDY SMM communicates process informa- • Time synchronization from the DCS
UCN A tion at full network data rates for use master clock
UCN B anywhere on the TDC 3000. The SMM
transmits Tricon aliased data (including • Peer-to-Peer communication for
XMIT
system variables) and diagnostic infor- plants with many Tricon safety
A mation to operator workstations in systems, each containing an SMM—
Four-character the DCS can use shared data to alert
alphanumeric display for 0 display formats that are familiar to
SMM diagnostic codes 7 Honeywell operators. downstream Tricons of significant
STATUS process changes
The SMM makes the following func-
tions available to the TDC 3000: • Sequence of Events—transmits
UCN A Tricon event data to Universal
• Handles critical I/O points and Stations for display or History
passes results to the DCS Modules for recording, to help
• Processes Tricon alarms and determine the cause of plant trips
F-Connectors
propagates them to user-defined and increase process up-time
for Redundant
UCN Ports DCS destinations (consoles, • Hot-spare capability for
UCN B
printers, etc.) uninterrupted communication with
Honeywell networks

SMM Specifications

Model Number 4409

UCN ports 2 isolated (AC coupled)
UCN data rate 5 MBytes per second
Status indicators PASS (Module Status)
FAULT (Module Status)
ACTIVE (Module Status)
LOW BATT (Low Battery)
DB-25P Connector SPARE RDY (Hot Spare Ready)
for RS-232 Debug Port
UCN A (UCN Port A Active)
(for Triconex &
Honeywell use only) UCN B (UCN Port B Active)
XMIT (SMM Transmitting)
STATUS (Module Node and Diagnostic Info.)
SMM
4409 Power Module load < 20 watts
Isolation 500 VDC

29
Product Specifications

Hiway Interface Module HIM allows redundant BNC connec-

The model 4509 Hiway Interface tions directly to the Data Hiway and has
Module (HIM) acts as an interface the same functional capacity as four
between a Tricon controller and a extended Data Hiway Port (DHP)
Honeywell TDC 3000 control system addresses.
by means of the Hiway Gateway and The HIM provides eight Hiway
Local Control Network (LCN). The addresses, implements the same slot
HIM can also interface with Honey- structure as the DHP, and typically
well’s older TDC 2000 control system refreshes all data in less than 0.5
by means of the Data Hiway. seconds. The hot-spare capability
The HIM enables higher-order devices allows online replacement of a faulty
on the LCN or Data Hiway, such as module.
computers and operator workstations,
to communicate with the Tricon. The

HIM Specifications

Model Number 4509

Data Hiway channels 2 isolated (AC coupled)
Poll response switches 2 per channel
Baud rate 250 kilobits per second
Status indicators PASS (Module Status)
FAULT (Module Status)
ACTIVE (Module Status)
ON LN (HIM Online)
H I/F (Hiway Interface)
CAL UP (Call-up Received)
CH A (Channel A Active)
CH B (Channel B Active)
XMIT (HIM Transmitting)
STD BY IN (Standby Module Inserted)
STD BY READY (Standby Module Ready)
Power Module load < 10 watts
Isolation 500 VDC

30
 Advanced Communication • Propagates Tricon alarms as I/A
Module (ACM) Series system messages
PASS
The model 4609 ACM acts as an inter- • Reads/writes aliased data to satisfy
FAULT
face between a Tricon controller and a I/A Series requests
ACTIVE
Foxboro Intelligent Automation (I/A) • Time synchronization from the I/A
I/A SERIES
Interface to NODEBUS Series system, appearing to the
I/A Series Nodebus Series environment
ONLINE
Foxboro system as a safety node on the
SBRDY • Reads Tricon diagnostics for display
I/A Series Nodebus. The ACM
by the I/A Series workstation
TX RX
communicates process information at
full network data rates for use • Write protection to lock out changes
BNC Connector
Reserved anywhere on the I/A Series system, to the Tricon safety system from all
NET1
transmitting all Tricon aliased data I/A Series sources
(including system variables and • Hot-spare capability for
AUI Connector system aliases) and diagnostic infor- uninterrupted communication with
to DNBI Nodebus Data mation to operator workstations in the I/A Series Nodebus
display formats that are familiar to
The ACM also supports the following
DNBI
Foxboro operators. The ACM makes
Triconex protocols and applications on
TX RX the following functions available to the
external host PCs connected to a sepa-
I/A Series:
rate BNC port (labeled NET2):
RS-423 Serial Port
to DNBI Nodebus Control • Handles critical I/O points and
• Tristation protocol for the TriStation
passes results to the I/A Series
software
TriStation/TSAA Interface TS/TSAA using the Object Management
5 678
Database (OMDB) • TSAA protocol for Triconex
01234

9 ABC

DEF

Node Address Switches NODE applications

ADDRESS • Processes Tricon alarms and
5 678

propagates them to user-defined I/A • TSAA/TCP(UDP)IP for user-

01234

9 ABC

DEF

TX RX Series destinations (consoles, written applications on external

NET2 BNC Connector NET2
printers, etc.) hosts
TriStation, SOE and
and TSAA applications
2 TX RX ACM Specifications

RS-232/422 Serial Port

Model Number 4609
Reserved Nodebus Ports
BNC connector 1 for RG58 50-ohm thin cable (reserved)
1 TX RX 15-pin D connector 1 for AUI cable to DNBI
9-pin RS-423 connector 1 for Control Bus to DNBI
RS-232 Serial Port
Reserved NET2 port1 1 BNC connector for RG58 50-ohm
Thin cable to Ethernet network
9-pin serial ports RS-232/RS-485 protocol (reserved)
ACM Port isolation 500 VDC (Ethernet and RS-232 ports)
4609
Communication speeds
BNC and 15-pin D connectors 10 megabits per second
9-pin Nodebus connector 2400 baud
Status indicators
Module status PASS, FAULT, ACTIVE
Nodebus/standby activity ONLINE and SBRDY
Port activity TX and RX—1 each per port
Power module load 20 watts

1. The address for this port is set by the TS/TSAA Node Addresses switches.

31
Product Specifications

Remote Extender Module

(RXM)
PASS PASS PASS PASS PASS PASS
RXMs and chassis allow I/O modules
to be located several kilometers from FAULT FAULT FAULT FAULT FAULT FAULT

the main chassis. RXM sets, consisting ACTIVE ACTIVE ACTIVE ACTIVE ACTIVE ACTIVE

of three identical modules, serve as TX TX TX TX TX TX

repeaters and extenders of the Tricon

(Receive)
(Receive)
I/O bus and provide ground loop isola-
RX1 RX RX
tion. A primary RXM set supports three To Remote
RX1 RX1 RX

A B C
remote locations by connecting to three Location #1

remote RXM sets housed in a remote (Transmit) (Transmit)

chassis. See “System Configuration” on

page 11 regarding configurations that
use RXMs.
RXM sets are available for fiber-optic (Receive)

cables with a communication rate of RX2 RX2 RX2

To Remote
375 kilobits per second. These sets Location #2
provide maximum immunity against
(Transmit)
electro-static and electro-magnetic
interference, and support configura-
tions with optical modems and fiber-
optic point-to-point cabling. Remote
sites can be located as far as 7.5 miles (Receive)

(12 kilometers) from the primary site. RX3 RX3 RX3

To Remote
Location #3
The figure at right shows uni-direc-
tional cabling for three channels of a (Transmit)

remote location. For each channel, one

cable carries data transmitted from the
primary RXM to the remote RXM, and
RXM RXM RXM RXM RXM RXM
the other cable carries data received by 42x0 42x0 42x0 42x1 42x1 42x1

the primary RXM from the remote

RXM. A pair of modules must be wired Channel A Channel B Channel C Channel A Channel B Channel C
for each of the three channels,
Primary RXM Set Remote RXM Set
amounting to a total of six cables for Located Near Main Chassis at Remote Location #1

each remote location. Sample Wiring for One Remote Location

NOTE: The selection and installation of fiber-optic cabling requires specialized knowledge,
training and tools. Triconex recommends hiring a fiber-optic specialist to handle these tasks.
RXM Specifications
RXM Model 4200-3 4201-3 4210-3 4211-3
RXM Chassis Location Primary Remote Primary Remote
Cable Type Multi-mode Multi-mode Single-mode Single-mode
Cable Length Limit 1.2 miles (2 kilometers) 1.2 miles (2 kilometers) 7.5 miles (12 kilometers) 7.5 miles (12 kilometers)
Connectors 6/remote site 6 6/remote site 6
Remote Sites Supported 3 n/a 3 n/a
Modem Ports Fiber Optic with ST Fiber Optic with ST Fiber Optic with ST Fiber Optic with ST
connectors connectors connectors connectors
Diagnostic Indicators PASS, FAIL, ACTIVE, PASS, FAIL, ACTIVE, PASS, FAIL, ACTIVE, PASS, FAIL, ACTIVE,
TX, RX1, RX2, RX3 TX, RX1, RX2, RX3 TX, RX1, RX2, RX3 TX, RX1, RX2, RX3

32
TMR Digital Input Modules All TMR digital input modules sustain ability to detect OFF points is an impor-
Each TMR digital input (DI) module complete, ongoing diagnostics for each tant feature. To test for stuck-ON
has three isolated input channels which channel. Failure of any diagnostic on inputs, a switch within the input
independently process all data input to any channel activates the module Fault circuitry is closed to allow a zero input
the module. A microprocessor on each indicator which in turn activates the (OFF) to be read by the optical isolation
channel scans each input point, chassis alarm signal. The module Fault circuitry. The last data reading is frozen
compiles data, and transmits it to the indicator points to a channel fault, not a in the I/O communication processor
main processors upon demand. Then module failure. The module is guaran- while the test is running.
input data is voted at the main proces- teed to operate properly in the presence
All TMR digital input modules support
sors just prior to processing to ensure of a single fault and may continue to
hot-spare capability, and require a sepa-
the highest integrity. All critical signal operate properly with certain kinds of
rate external termination panel (ETP)
paths are 100 percent triplicated for multiple faults.
with a cable interface to the Tricon
guaranteed safety and maximum avail- Models 3502E, 3503E, and 3505E can backplane. Each module is mechani-
ability. Each channel conditions signals self-test to detect stuck-ON conditions cally keyed to prevent improper instal-
independently and provides optical where the circuitry cannot tell whether lation in a configured chassis.
isolation between the field and the a point has gone to the OFF state. Since
Tricon. most safety systems are set up with a
de-energize-to-trip capability, the

Model Number 3501E/3501T 3502E 3503E 3505E

Type TMR TMR with Self-Test TMR with Self-Test TMR, Low Threshold
Voltage 115 VAC/VDC 48 VAC/VDC 24 VAC/VDC 24 VDC
Points 32, non-commoned, 32, commoned 32, commoned 32, commoned
isolated in groups of 8 in groups of 8 in groups of 8
AC Range/DC Range 90-155 VAC/VDC 35-95 VAC/VDC 20-42.5 VAC/VDC 20-42.5 VDC
Maximum Voltage 155 VAC/VDC 95 VAC/VDC 42.5 VAC/VDC 42.5 VDC
Switching Level
OFF to ON > 86 VAC/VDC > 32 VAC/VDC > 18 VAC/VDC > 12 VDC
ON to OFF < 28 VAC/VDC < 11 VAC/VDC < 6 VAC/VDC < 4 VDC
Nominal Turn-On 6-9 mA 6-9 mA 6-9 mA 3 mA to 5 mA
Typical Hysteresis 32 VAC/VDC 7 VAC/VDC 4 VAC/VDC 2 VDC
Input Delay
OFF to ON/ON to OFF < 8 ms/< 15 ms < 8 ms/< 15 ms < 8 ms/< 15 ms < 8 ms/< 15 ms
Point Isolation 1500 VDC/ 2500 VDC1 1500 VDC 1500 VDC 1500 VDC
Nominal Input Impedance > 8.5 KΩ > 2.9 KΩ > 1.25 KΩ > 1.25 KΩ
Nominal Field Power Load
Per ON point 1.5 watts 1.0 watts 0.5 watts 0.5 watts
@ max. field voltage 2.9 watts 3.2 watts 1.5 watts 1.5 watts
Diagnostic Indicators
Input Status 1 per point 1 per point 1 per point 1 per point
Module Status PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE
Stuck Test n/a ON ON ON
Color Code Red Dark Red Dark Red Dark Red

1. For 3501T.

33
Product Specifications

64-Point Digital Input may operate properly with certain kinds The Single Digital Input Module
Modules of multiple faults. (model 3564) is optimized for safety-
critical applications where low cost is
Each 64-point digital input (DI) module All digital input modules support hot-
more important than maximum avail-
has three isolated channels which inde- spare modules and require a separate
ability. On single modules, only those
pendently process all data input to the external termination panel (ETP) with a
portions of the signal path which are
module. A microprocessor on each cable interface to the Tricon backplane.
required to ensure safe operation are
channel scans each input point, Each module is mechanically keyed to
triplicated. Special self-test circuitry
compiles data and transmits it to the prevent improper installation in a
detects all stuck-ON and stuck-OFF
main processors on demand. Then input chassis.
fault conditions in less than half a
data is voted at the main processors just
The model 3504E High Density Digital second. If a single module detects an
prior to processing to ensure the highest
Input Module continuously verifies the input fault, it reports that point as OFF,
integrity.
ability of the Tricon to detect transitions which may cause a glitch during
All digital input modules sustain to the opposite state. On this TMR switch-over to a hot-spare module.
complete, ongoing diagnostics for each module, all critical signal paths are 100
channel. A failure on any channel acti- percent triplicated for guaranteed safety
vates the Fault indicator which in turn and maximum availability. Each
activates the chassis alarm. A TMR channel conditions signals indepen-
module is guaranteed to operate prop- dently between the field and the Tricon.
erly in the presence of a single fault and

Model Number 3564 3504E

Type Single TMR
Voltage 24 VDC 24 or 48 VDC1
Points 64, commoned 64, commoned, DC coupled
DC Range 15-30 VDC 20-72 VDC
Maximum Voltage 36 VDC 72 VDC
Switching Level 24 V 48 V
OFF to ON > 15 VDC >18 VDC >32 VDC
ON to OFF < 6 VDC < 6 VDC <11 VDC
Nominal Turn-On 2-3 mA negligible
Typical Hysteresis 4 VDC 4 VDC/7 VDC
Input Delay
OFF to ON/ON to OFF < 2 ms/< 2 ms < 10 ms/< 10 ms
Minimum Point Isolation 1500 VDC n/a
Nominal Input Impedance > 3.0 KΩ > 30 KΩ
Nominal Field Power Load
Per ON point 0.2 watts negligible
@ maximum field voltage 0.5 watts negligible
Diagnostic Indicators
Input Status 1 per point 1 per point
Module Status PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE
Stuck Test ON and OFF ON and OFF
Color Code Dark Red Dark Red
1. The voltage is selected using the TriStation software.

34
Pulse Input Module Each module provides complete Relay Output Module
The pulse input (PI) module provides ongoing diagnostics on each channel. The model 3636R/T Relay Output (RO)
eight very sensitive, high-frequency Failure of any diagnostic on any Module is a non-triplicated module for
inputs. It is optimized for use with non- channel activates the Fault indicator, use on non-critical points which are not
amplified magnetic speed sensors which in turn activates the chassis compatible with “high-side” solid-state
common on rotating equipment such as alarm signal. The Fault indicator output switches. An example is inter-
turbines or compressors. The module merely indicates a channel fault, not a facing with annunciator panels. The
senses voltage transitions from module failure. The module is guaran- relay output module receives output
magnetic transducer input devices, teed to operate properly in the presence signals from the main processors on
accumulating them during a selected of a single fault and may continue to each of three channels. The three sets of
window of time (rate measurement). operate properly with certain kinds of signals are then voted, and the voted
The resulting count is used to generate multiple faults. data is used to drive the 32 individual
a frequency or RPM which is trans- The pulse input module supports hot- relays.
mitted to the main processors. The spare modules. Each output has a loopback circuit
pulse count is measured to 1 micro-
WARNING: The PI module does not which verifies the operation of each
second resolution.
provide a totalization capability—it is relay switch independently of the pres-
The PI module includes three isolated optimized for measuring the speed of ence of a load, while ongoing diagnos-
input channels. Each input channel rotation equipment. For pulse totaliza- tics test the operational status of the
independently processes all data input tion model 3515, see page 36. module. Failure of any diagnostic acti-
to the module and passes the data to the vates the Fault indicator, which in turn
main processors, which vote on the data activates the chassis alarm.
to ensure the highest integrity.
The relay output module comes with
normally open (NO) contacts. It
supports hot-spare modules and
requires a separate external termination
Model Number 3511 panel (ETP) with a cable interface to
Type TMR the Tricon backplane.
Input Signals 8, non-commoned
Resolution 16 bits Model Number 3636R/T
Accuracy 1000 Hz to 20,000 Hz, ± 0.01% Type Non-triplicated
Input Characteristics (AC coupled, balanced differential) Points 32, non-commoned
Update Rate 25 ms, typical Voltage Range 155 VAC/VDC,
maximum
Impedance (load) > 8 KW, 20 KW typical
Common Mode Range -100 VDC to +100 VDC peak-to-peak Current Load 2A, maximum

Normal Mode Range 1.5 V to 200 V peak-to-peak Switching Power, 2000 V A, 150 watts
Resistive maximum
Overrange Protection ±150 VDC, continuous
Point Isolation 1500 VDC
Hysteresis 150 millivolts, typical 2500 VDC1
Wave Shape Sine, square, pulse, etc. Fuses 1 per output (2.5A
Duty Cycle 10% to 90% fast-acting)
Frequency 20 Hz to 20,000 Hz Diagnostic Indicators
Current Range 0-20 mA (250-ohm shunt) Output Status 1 per point
Diagnostic Indicators (ON=true) Module Status PASS, FAULT,
ACTIVE
Input Status 1 per point
Module Status PASS, FAULT, ACTIVE Output Contact Normally Open

Color Code Light Purple Color Code Silver Blue

1. For 3636T.

35
Product Specifications

Pulse Totalizer Module passes it to the main processors, where The PTI module can operate with or
The model 3515 Pulse Totalizer Input it is voted before processing to ensure without a hot-spare module. If you use
(PTI) Module provides 32 individual the highest integrity. a hot-spare module, it re-educates all
31-bit counters that operate indepen- counter values from the active module.
Each PTI module provides complete
dently. The counters are used with ongoing diagnostics on each channel,
active-flow sensors or per-unit sensors including channel-to-channel count
to measure a quantity (count) which is comparison. Failure of any diagnostic
transmitted to the main processors. At on any channel activates the Fault indi-
the time specified by the TriStation cator, which in turn activates the chassis
control program, the main processors alarm. The Fault indicator points to a
clear a single counter or all counters. channel fault, not a module failure. The
The PTI module has three isolated input PTI module is guaranteed to operate
channels. Each input channel indepen- properly in the presence of a single
dently processes all input data and fault, and may continue to operate with
certain kinds of multiple faults.

Model Number 3515

Type TMR
Number of Input Signals 32, non-commoned
Input Frequency Range 0 Hz to 1 KHz
Minimum Input Pulse Width 300 microseconds
Accuracy
Active Module ± 2 counts
Hot-spare module (maximum error 1–10 >= 100 Hz
counts during hot replacement) 0-1 <= 100 Hz
Maximum Count 2147483647 (231 - 1)
Counter Overflow (worst case @ 1 KHz) 596 Hours (24 days)
Count Overflow Indication Count goes to negative integer
Count Resets Individual reset per counter
Recommended Input Voltage Range 42.5 VDC absolute maximum
Count Up Switching Level Rising edge (OFF to ON)
Switching Voltages
OFF to ON 15 VDC typical, 18 VDC worst case
ON to OFF 8 VDC typical, 6 VDC worst case
Typical Hysteresis 4 VDC
Normal Turn-on Current 6mA to 9mA
Count Input Delay < 15 ms
Point Isolation (opto-isolated) 1500 VDC minimum
Diagnostic Indicators
ON or OFF State 1 per point
Module Status PASS, FAULT, ACTIVE
Logic Power < 10 watts
Nominal Field Power Load 0.5 watts per ON point
1.5 watts @ maximum field voltage
Color Code Purple

36
TMR Digital Output Modules voltage to match the commanded state panel (ETP) with a cable interface to
A TMR digital output (DO) module of the output point activates the the Tricon backplane. Each module is
receives output signals from the main LOAD/FUSE alarm indicator. mechanically keyed to prevent
processors on each of three channels. improper installation in a configured
In addition, ongoing diagnostics are
Each set of three signals is then voted chassis.
performed on each channel and circuit
by special quadruplicated output of a TMR digital output module. Digital outputs are designed to source
circuitry on the module. The circuitry Failure of any diagnostic on any the current to field devices, so field
produces one voted output signal and channel activates the Fault indicator, power must be wired to each output
passes it to the field termination. The which in turn activates the chassis point on the field termination.
quadruplicated voter circuitry provides alarm signal. The Fault indicator
multiple redundancy for all critical merely indicates a channel fault, not a
signal paths, guaranteeing safety and module failure. The module is guaran-
maximum availability. teed to operate properly in the presence
Each TMR digital output module has a of a single fault and may continue to
voltage-loopback circuit which verifies operate properly with certain kinds of
the operation of each output switch multiple faults.
independently of the presence of a load All TMR digital output modules
and determines whether latent faults support hot-spare capability, and
exist. Failure of the detected field require a separate external termination

Model Number 3601E/3601T 3603B/3603E/3603T 3607E 3604E

Nominal Voltage 115 VAC 120 VDC 48 VDC 24 VDC
Type TMR TMR TMR TMR
Output Signals 16, non-commoned 16, commoned (3603E/T 16, non-commoned 16, non-commoned
16, non-commoned (3603B
Voltage Range 80-155 VAC 90-150 VDC 44-80 VDC 22-45 VDC
Voltage Drop1 < 3V, typical < 1.5V, typical < 3V, typical < 4V, typical
Current Ratings, 2A per point 0.8A per point 1A per point 2A per point
Maximum 12A surge/cycle 4A surge/10 ms 5A surge/10 ms 10A surge/10 ms
Load Leakage 2 mA maximum @ 60 Hz 2 mA maximum 2 mA maximum 2 mA maximum
Chassis Leakage 4 mA maximum @ 60 Hz n/a n/a n/a
Fuses (on Field 1 per output, 1 per output, 1 per output, 1 per output,
Termination) 3A fast-acting 1.0A fast-acting 1.25A fast-acting 2.5A fast-acting
Point Isolation 1500 VDC/ 2500 VDC2 1500 VDC/ 2500 VDC3 1500 VDC 1500 VDC
Diagnostic Indicators
ON or OFF state 1 per point 1 per point 1 per point 1 per point
Module Status PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE
Field Alarm LOAD/FUSE LOAD/FUSE LOAD/FUSE LOAD/FUSE
Color Code Green Blue Light Blue Dark Blue

1. WARNING: The voltage drop may be significantly higher in some applications.

2. For 3601T.
3. For 3603T.

37
Product Specifications

16-Point Supervised Digital verify the operation of each output Failure to detect field voltage on any
Output Modules switch, the field circuit and the pres- output point energizes the power alarm
ence of a load. This design provides indicator. Failure to detect the presence
Designed for the most critical control
complete fault coverage without the of a load energizes the load alarm indi-
programs, supervised digital output
need to influence the output signal. cator.
(SDO) modules meet the needs of
systems whose outputs remain in a The modules are called “supervised” All SDO modules support hot-spare
single state for extended periods of time because fault coverage is extended to modules and require a separate external
(in some applications, for years). An include potential field problems. In termination panel (ETP) with a cable
SDO module receives output signals other words, the field circuit is super- interface to the Tricon backplane.
from the main processors on each of vised by the SDO module so that the
three channels. Each set of three signals following field faults can be detected:
is then voted upon by a fully fault-
• Loss of power or blown fuse
tolerant quadruplicated output switch
whose elements are power transistors, • Open or missing load
so that one voted output signal is passed • A field short resulting in the load
to the field termination. being energized in error
Each SDO module has voltage and • A shorted load in the de-energized
current loopback circuitry coupled with state
sophisticated online diagnostics that

Model Number 3623/3623T 3624

Nominal Voltage 120 VDC 24 VDC
Type TMR, Supervised TMR, Supervised
Output Signals 16, commoned 16, commoned
Voltage Range 90-150 VDC 16-30 VDC
Maximum Voltage 160 VDC 36 VDC
Voltage Drop < 1.5 VDC, typical < 1.5 VDC, typical
Power Module Load < 10 watts < 10 watts
Current Ratings, Maximum 0.8A per point 0.7A per point
4A surge per 10 ms 4.8A surge per 10 ms
Minimum Required Load 30 mA 30 mA
Load Leakage 4 mA maximum 4 mA maximum
Fuses (on Field Termination) 1A fast-acting n/a—self-protecting
1
Point Isolation 1500 VDC/ 2500 VDC 1500 VDC
Diagnostic Indicators
ON or OFF State 1 per point 1 per point
Module Status PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE
Field Alarm POWER, LOAD (1 per point) POWER, LOAD (1 per point)
Color Code Steel Blue Turquoise Green

1. For 3623T.

38
8-Point Supervised Digital sophisticated online diagnostics that • A shorted load in the de-energized
Output Modules verify the operation of each output state
switch, the field circuit and the pres- Failure to detect field voltage on any
Designed for the most critical applica-
ence of a load. This design provides output point energizes the power alarm
tions, supervised digital output (SDO)
complete fault coverage without the indicator. Failure to detect the presence
modules meet the needs of systems
need to influence the output signal. of a load energizes the load alarm indi-
whose outputs remain in a single state
for extended periods of time (in some The modules are called “supervised” cator. When an optional secondary
applications, for years). An SDO because fault coverage is extended to power supply is used, shorted loads in
module receives output signals from the include potential field problems. In the OFF state can be detected. (This
main processors on each of three chan- other words, the field circuit is super- feature is not provided on model
nels. Each set of three signals is then vised by the SDO module so that the 3611E, an AC module.)
voted upon by a fully fault-tolerant following field faults can be detected: All SDO modules support hot-spare
quadruplicated output switch whose
• Loss of power or blown fuse capability and require a separate
elements are mechanical power relays,
external termination panel (ETP) with a
so that one voted output signal is passed • Open or missing load
cable interface to the Tricon backplane.
to the field termination. • A field short resulting in the load
Each SDO module has voltage and being energized in error
current loopback circuitry coupled with

Model Number 3611E 3617E

Nominal Voltage 115 VAC 48 VDC
Type TMR, Supervised TMR, Supervised
Points 8, commoned 8, commoned
Voltage Range 90-155 VAC 36-72 VDC
Maximum Switching Power 2000 VA (resistive) 150 W (resistive)
ON State Voltage Drop1 < 2V, typical < 2V, typical
Current Ratings, Maximum 2A per point 1A per point
10A/AC cycle 5A/10 ms
Minimum Required Load 50 mA 100 mA
Voltage Range of Secondary Power Supply n/a 5.00 VDC
±.25 VDC
Chassis Leakage 1mA max. @ 60 Hz n/a
Load Leakage 4 mA max. 4 mA max.
Fuses (on Field Termination) 1 per output (2.5A fast-acting) 1 per output (1.25A fast-acting)
Point Isolation 1500 VDC, min. 1500 VDC, min.
Diagnostic Indicators
Output Status POINT, PWR, LOAD, POINT, PWR, LOAD,
Module Status PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE
Color Code Deep Green Mint Green

1. WARNING: The voltage drop may be significantly higher in some applications.

39
Product Specifications

Dual Digital Output Module the operation of each output switch glitch may occur during switch-over to
The dual digital output (DDO) modules independently of the presence of a load a hot-spare module.
receive output signals from the main and determines whether latent faults
The dual digital output modules
processors along a single parallel or exist. Failure of the detected field
support hot-spare capability which
series path, and applies a 2-out-of-3 voltage to match the commanded state
allows online replacement of a faulty
voting process individually to each of the output point activates the
module. Each module is mechanically
switch. The switches produce one LOAD/FUSE alarm indicator.
keyed to prevent improper installation
output signal which is then passed to In addition, ongoing diagnostics are in a configured chassis.
the field termination. While the quadru- performed on each channel and circuit
plicated output circuitry on TMR The dual digital output modules require
of a dual digital output module. Failure
modules provides multiple redundancy a separate external termination panel
of any diagnostic on any channel acti-
for all critical signal paths, dual (ETP) with a cable interface to the
vates the Fault indicator, which in turn
circuitry provides just enough redun- Tricon backplane. Digital outputs are
activates the chassis alarm signal. A
dancy to ensure safe operation. The designed to source the current to field
dual module operates properly in the
dual module is optimized for those devices, so field power must be wired to
presence of most single faults and may
safety-critical control programs where each output point on the field termina-
operate properly with some kinds of
low cost is more important than tion.
multiple faults, but stuck-OFF faults are
maximum availability. an exception. If one of the output
The dual digital output modules have a switches has a stuck-OFF fault, the
voltage-loopback circuit which verifies output goes to the OFF state and a

Model Number 3664/3674

Nominal Voltage 24 VDC
Type Dual, serial (recommended for de-energize-to-trip control programs)
Output Signals 32, commoned
Voltage Range 16-30 VDC
Maximum Voltage 36 VDC
Voltage Drop < 1.5 VDC, typical
Power Module Load < 10 watts
Current Ratings, Maximum 2A per point
10A surge per 10 ms
Load Leakage 2 mA maximum
Fuses (on Field Termination) n/a—self-protecting
Point Isolation 1500 VDC minimum
Diagnostic Indicators
ON or OFF State 1 per point
Module Status PASS, FAULT, ACTIVE
Field Alarm LOAD/FUSE
Load Alarm, output stuck-ON 3664 — Stuck-ON point, all others commanded state - ON or OFF
3674 — Stuck-ON point, all others commanded OFF (de-energized)
Load Alarm, output stuck-OFF 3664 and 3674 — Stuck-OFF point, all others commanded state — ON or OFF
Color Code Dark Blue

40
Analog Input Modules affecting another channel. Each analog The analog input module requires a
An analog input (AI) module includes input module sustains complete, separate external termination panel
three independent input channels. Each ongoing diagnostics for each channel. (ETP) with a cable interface to the
input channel receives variable voltage Failure of any diagnostic on any Tricon backplane. Each module is
signals from each point, converts them channel activates the Fault indicator for mechanically keyed for proper installa-
to digital values, and transmits the the module, which in turn activates the tion in a Tricon chassis.
values to the three main processor chassis alarm signal. The module’s
modules on demand. In TMR mode, Fault indicator merely reports a channel
one value is then selected using a mid- fault, not a module failure—the module
value selection algorithm to ensure can operate properly with as many as
correct data for every scan. two faulty channels.

Sensing of each input point is Analog input modules support hot-

performed in a manner that prevents a spare capability which allows online
single failure on one channel from replacement of a faulty module.

Model Number 3700/3700A 3701 3703E 3704E

1, 0-5V or 0-10V1, + 6%
Voltage 0-5V, + 6% (only 3700A) 0-10V 0-5V or 0-10V + 6%
Type TMR TMR TMR TMR
No. of Input Points 32, diff, DC coupled 32, diff, DC coupled 16, diff, isolated 64, commoned
Isolated Points No No Yes No
Input Update Rate 55 ms 55 ms 50 ms 75 ms
Resolution 12 bits 12 bits 12 bits 12 bits
Accuracy < .15% of FSR, < .15% of FSR, < .15% of FSR, < .25% of FSR,
from 0° to 60°C from 0° to 60°C from 0° to 60°C from 0° to 60°C
Input Resistance (load) 30 MΩ (DC), min. 30 MΩ (DC), min. 30 MΩ (DC), min. 30 MΩ (DC), min.
Power-Off Resistance 30 KΩ (DC), typical 30 KΩ (DC), typical 30 MΩ (DC), min. 30 KΩ (DC), typical
Common Mode Rejection -80 dB (DC-100Hz), -80 dB (DC-100Hz), -90 dB @ 60Hz, min. n/a
typical typical -100 dB @ DC, min.
Common Mode Range -12V to +12V peak -12V to +12V peak +200V peak n/a
Leg-to-Leg Isolation 200 KΩ, typical 200 KΩ, typical 20 KΩ, typical 200 KΩ, typical
Normal Mode Rejection
@ 8Hz -3 dB -3 dB -3 dB -1 dB
@ 60Hz -17 dB -17 dB -17 dB -12 dB
@ 120Hz -23 dB -23 dB -23 dB -18 dB
Input Overrange 150 VDC/115 VAC 150 VDC/115 VAC 150 VDC/115 VAC 150 VDC/115 VAC
Protection continuous continuous continuous continuous
Current Range 0-20 mA, 0-20 mA, 0-20 mA, 0-20 mA,
250 Ω shunt 500 Ω shunt 250 Ω shunt for 5V 250 Ω shunt for 5V
500 Ω shunt for 10V 500 Ω shunt for 10V
Diagnostic Indicators
Module Status PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE
Color Code Yellow Light Yellow Mustard Yellow Copper

1. The voltage is selected using the TriStation software.

41
Product Specifications

Analog Output Module are performed on each channel and output module requires up to 1 amp @
An analog output (AO) module receives circuit of the module. Failure of any 24-42.5 volts. A LOAD indicator acti-
output signals from the main processor diagnostic deactivates the faulty vates if an open loop is detected on one
module on each of three channels. Each channel and activates the Fault indi- or more output points. PWR1 and
set of data is then voted and a healthy cator, which in turn activates the chassis PWR2 are on if loop power is present.
channel is selected to drive the eight alarm. The module Fault indicator The 3806E High Current (AO) module
outputs. The module monitors its own merely indicates a channel fault, not a is optimized for turbomachinery appli-
current outputs (as input voltages) and module failure. The module continues cations.
maintains an internal voltage reference to operate properly with as many as two
Analog output modules support hot-
to provide self-calibration and module channels failed. Open loop detection is
spare capability which allows online
health information. provided by a LOAD indicator which
replacement of a faulty module.
activates if the module is unable to
Each channel on the module has a drive current to one or more outputs. The analog output module requires a
current loopback circuit which verifies separate external termination panel
the accuracy and presence of analog The module provides for redundant
(ETP) with a cable interface to the
signals independently of load presence loop power sources with individual
Tricon backplane. Each module is
or channel selection. The module’s power and fuse indicators called PWR1
mechanically keyed to prevent
design prevents a non-selected channel and PWR2. External loop power
improper installation in a configured
from driving an analog signal to the supplies for analog outputs must be
chassis.
field. In addition, ongoing diagnostics provided by the user. Each analog

Model Number 3805E 3806E

Type TMR TMR
Output current range 4-20 mA output (+6% overrange) 4-20 mA and 20-320 mA
Number of output points 8 6 (4-20 mA); 2 (20-320 mA)
Isolated points No, commoned return, DC coupled No, commoned return, DC coupled
Resolution 12 bits 12 bits
Output Accuracy <0.25% (in range of 4-20 mA) of <0.25% (in range of 4-20 mA) of
FSR (0-21.2 mA), from 32° to 140° F FSR (0-21.2 mA and 0-339.2 mA),
(0° to 60° C) from 32° to 140° F (0° to 60° C)
External loop power +42.5 VDC, maximum +42.5 VDC, maximum
(reverse voltage protected) +24 VDC, nominal +24 VDC, nominal
Output loop power requirements Max. load Vx external loop voltage
Load (Ohms) Loop power required 4-20 mA 16-320 mA
250 > 20 VDC (1 amp minimum) 20 VDC < 275 <15
500 > 25 VDC (1 amp minimum) 24 VDC < 475 <25
750 > 30 VDC (1 amp minimum) 28 VDC < 650 <40
1000 > 35 VDC (1 amp minimum) 32 VDC < 825 <50
Over-range protection +42.5 VDC, continuous < +42.5 VDC
Switch time on leg failure < 10 ms, typical < 10 ms, typical
Diagnostic Indicators
Module status PASS, FAULT, ACTIVE, PASS, FAULT, ACTIVE,
(one each per module) LOAD, PWR1, PWR2 LOAD, PWR1, PWR2
Color code Pea Green Light Green

42
Thermocouple Modules isolated thermocouple input modules. Failure of any diagnostic on any
A thermocouple input (TC) module The isolated module allows users to channel activates the Fault indicator,
includes three independent input chan- select upscale or downscale burnout which in turn activates the chassis
nels. Each input channel receives vari- detection with the TriStation software. alarm signal. The module Fault indi-
able voltage signals from each point, For non-isolated modules, upscale or cator merely reports a channel fault, not
performs thermocouple linearization downscale burnout detection depends a module failure. The module continues
and cold-junction compensation, and on the field termination selected. to operate properly with as many as two
converts the result to degrees Celsius or faulty channels.
Triplicated temperature transducers
Fahrenheit. Each channel then trans- residing on the field termination panel The thermocouple input module
mits 16-bit signed integers representing support cold-junction compensation. supports hot-spare capability which
0.125 degrees per count to the three Each channel of a thermocouple input allows online replacement of a faulty
main processors on demand. In TMR module performs auto-calibration using module.The thermocouple input
mode, a value is then selected using a internal precision voltage references. module requires a separate external
mid-value selection algorithm to ensure On the isolated module, a faulting cold- termination panel (ETP) with a cable
correct data for every scan. junction transducer is annunciated by a interface to the Tricon backplane.
Each thermocouple input module is cold-junction indicator on the front
Each module is mechanically keyed to
programmable to support one thermo- panel.
prevent improper installation in a
couple type, selected from J, K and T Each module performs complete configured chassis.
for standard thermocouple input ongoing diagnostics on each channel.
modules and from J, K, T and E for

Model Number 3706A 3708E

Type TMR TMR
Number of input signals 32 differential, DC coupled 16 differential, isolated
Isolated points No Yes
Input update rate 50 ms, maximum1 50 ms
Thermocouple types supported2 J, K, T J, K, T, E
Accuracy/temp range See Table A See Table B
Input resistance (load) 22 MΩ (DC), typical 30 MΩ (DC), minimum
Noise rejection
Common mode -85 dB @ 0-60 Hz, minimum -90 dB @ 0-60 Hz, minimum
-95 dB @ DC, typical -100 dB @ DC, minimum
Normal mode -17 dB @ 60 Hz -3 dB @ 8 Hz, typical
-17 dB @ 60 Hz, typical
Common mode range ±10 VDC max. (channel-to-channel ±200 VDC, max (channel-to-channel
or channel-to-ground) or channel-to-ground)
Leg-to-leg isolation 200 KΩ, typical 20 KΩ, typical
Input point protection 110 VAC, continuous 110 VAC, continuous
Reference junction compensation range 32°-140°F (0°-60°C) 32°-140°F (0°-60°C)
Diagnostic indicators PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE, CJ FAULT
Color code Tan Deep Yellow

1. Inputs frozen for 1 second upon insertion of spare module.

2. Must be selected with TriStation.

43
Product Specifications

Table A. Accuracy of Thermocouple Types for Model 3706A

Accuracy1
(TC Termination Module @ 32-140°F [0-60°C])

Ta = 77°F (25°C) Ta = 32-140°F (0-60°C)

TC Type Temperature Range
(Typical) (Maximum)
-250 to 32°F (-157 to 0°C) ± 5.0°F (2.8°C) ± 7.0°F (3.9°C)
J
>32 to 2000°F (0 to 1093°C) ± 4.0°F (2.3°C) ± 5.0°F (2.8°C)
-250 to 32°F (-157 to 0°C) ± 6.0°F (3.4°C) ± 9.0°F (5.0°C)
K
>32 to 2500°F (0 to 1371°C) ± 4.0°F (2.3°C) ± 6.0°F (3.4°C)
-250 to 32°F (-157 to 0°C) ± 5.0°F (2.8°C) ± 9.0°F (5.0°C)
T
>32 to 752°F (0 to 400°C) ± 3.0°F (1.7°C) ± 5.0°F (2.8°C)

Table B. Accuracy of Thermocouple Types for Model 3708E

Accuracy1
(TC Termination Module @ 32-140°F [0-60°C])

Ta = 77°F (25°C) Ta = 32-140°F (0-60°C)

TC Type Temperature Range
(Typical) (Maximum)
-238 to 32°F (-150 to 0°C) ± 3.0°F (1.7°C) ± 9.0°F (5.0°C)
J
>32 to 1400°F (0 to 760°C) ± 5.5°F (3.1°C)
-238 to 32°F (-150 to 0°C) ± 4.0°F (2.3°C) ± 8.0°F (4.5°C)
K
>32 to 2284°F (0 to 1370°C) ± 7.0°F (3.9°C)
-250 to 32°F (-161 to 0°C) ± 3.0°F (1.7°C) ± 8.5°F (4.8°C)
T
>32 to 752°F (0 to 400°C) ± 4.5°F (2.5°C)
E -328 to 32°F (-200 to 0°C) ± 3.0°F (1.7°C) ± 8.0°F (4.5°C)
>32 to 1830°F (0 to 999°C) ± 5.0°F (2.8°C)

1. Accuracy specifications account for errors related to reference-junction compensation, but do not account for errors caused by
temperature gradients between the temperature transducers and the TC terminations. The user is responsible for maintaining a
uniform temperature across the TC Termination Module.

44
A termination panel and associated cable pass signals to or from the field,
permitting replacement of I/O Modules without disturbing field wiring.

Field Termination Options

There are two general types of field products are the same as for a Tricon easily attached. A panel connector,
termination products available from chassis. (See “General Environmental terminal blocks and various compo-
Triconex: and EMC Specifications” on page 20 nents are mounted to the PCB and
for details.) enclosed in a plastic housing. A termi-
• External termination panels
nation panel and associated cable pass
• Cables input signals from the field directly to
External Termination Panels an input module, or pass output signals
All termination panels and cables are
An external termination panel is an from an output module directly to field
built to withstand harsh industrial envi-
electrically-passive printed circuit wiring. This arrangement permits the
ronments. The environmental specifica-
tions for components used on these board (PCB) to which field wiring is

Tricon Chassis with External Termination Panels and Standard 10' Cables

45
Field Termination Options

removal or replacement of I/O modules cable that connects the panel to the ERT Panels With Interposing
without disturbing field wiring. backplane of a Tricon chassis. A female Relays
connector at one end of the cable is These panels can be used with all
There are three types of external termi-
keyed to match the male connector on digital output modules. Interposing
nation panels, all of which can connect
the Tricon backplane. A male relays are recommended for applica-
to field signals in a separate enclosure
connector on the other end of the cable tions that have load currents greater
up to 99 feet (30 meters) away from a
attaches to the standard termination than 2 amps, or field voltages greater
Tricon:
panel. than 115 VAC which require field-
• Standard circuit conversion or compatibility with
Basic Termination Panels
• Basic motor-starter circuits.
Basic termination panels are a low-cost
• Special means of connecting field wiring to a Each interposing relay provides an
Tricon. However, basic termination auxiliary contact that can be connected
Standard Termination Panels panels do not provide any components to a Digital Input Module by means of
Standard termination panels are best for other than a 56-pin connector and an optional loopback cable to verify
remote marshaling of field wiring terminal blocks. These two components relay activation by the digital output
where maximum flexibility, high are mounted on a DIN rail-compatible module. The ERT panel uses compact
density and simple maintenance is plastic housing that snaps into general-purpose power relays for
desired. mounting rails in accordance with DIN maximum reliability.
50 022. The user must provide any
A standard termination panel consists Bypass Panels For Digital Inputs
other components required by his appli-
of a PCB with all necessary compo- Bypass termination panels can be used
cation.
nents—such as two-piece terminal to connect digital inputs using a bank of
blocks, resistors, fuses and blown-fuse Other features of the basic termination 32 pre-wired switches. The bypass
indicators—mounted on a DIN rail- panels are the same as for the standard panel has a master keyswitch and termi-
compatible plastic housing. The panels. nals for redundant +24 VDC power
housing snaps into mounting rails in sources. Each input point contains an
Special Termination Panels
accordance with DIN 50 022. ON status indicator and a position for a
Special external termination panels are
Compression terminals on the standard user-defined label. Each bypass termi-
used for applications that require
panel are designed for use with 0.2 mm2 nation panel comes with one or two 10-
external relays, bypass switches, or
to 2.5 mm2 (24 – 4 AWG) wiring. Some foot cables for connecting the termina-
analog signal conditioners. Special
panels have an optional current- tion panel to a Tricon backplane.
termination panels furnish all the
limiting series resistor, other have a necessary components for the specified Termination Panels For Use
fuse with a blown-fuse indicator, to application, including a matched cable With Signal Conditioners
protect the field wiring and field device. for connecting to a Tricon chassis. Each Termination panels which use industry-
Standard termination panels are pre- special termination panel is designed standard analog signal conditioners
configured for specific applications. for rack-mounting and complies with provide a flexible, user-configurable
For instance, the thermocouple input the RS-310-C EIA standard. interface to Resistive Thermal Devices
termination panel provides cold-junc- The following special termination (RTDs), thermocouples, and 4-20 mA
tion temperature sensors and can be panels are available: transmitters. Each termination panel
ordered with upscale, downscale or supports 16 points and each Analog
programmable burnout detection. A • External Relay Termination (ERT) Module can support up to 2 panels.
standard termination panel for analog panels with interposing relays
These termination panels are compat-
voltage inputs provides commoned • Bypass panels for digital inputs ible with any signal conditioners in the
signal returns, while the current-mode 1 to 5 volt output range. For example,
version has a 250-ohm precision • Termination panels for use with
industry-standard analog signal the 7B series of signal conditioners
resistor at each input point to convert from Analog Devices are known to
current to voltage. conditioners
work well. These signal conditioners
Each standard termination panel is can be purchased from Triconex, or
packaged with a matched interface directly from Analog Devices at:

46
• http://www.analog.com/IOS • PVC outer covering The “Termination Options” table (on
the next two pages) shows the available
• 1-800-426-2564 in the USA • 56-pin panel connector at one end
termination choices for each I/O
• 781-461-3100 from anywhere in the • 50 stranded, stripped, tinned and Module and gives the correct model
world labeled 22-gauge leads at the other number for each choice.
end
Special Cables
Triconex Termination Cables Over-Current Protection
Cables for special applications are not
Three types of separate termination Standard and special termination panels
packaged with termination panels and
cables are available from Triconex: offer over-current protection in various
must be ordered separately. For
ways:
• Standard cables example, if the goal is to verify relay
activation by a digital output module, a • Fuses for individual points and/or
• Fanned-out cables
separate relay loopback cable must be field power sources
• Special cables used to connect the relay termination
• Series resistors
panel to a digital input module.
Although the normal length of all
Currently the only special cable avail- • Self-protection for Digital Output
cables is 10 feet (3 meters), any length
able is the External Relay Termination and Analog Output Modules
cable can be ordered up to 99 feet (30
(ERT) Loopback Cable (model 914x-
meters) in 1-foot increments, using the If standard or special termination
xx).
last two digits of the termination panels are not being used, the user must
panel’s model number to specify the supply his own components for over-
length in feet. For example, the model current protection.
Termination Configuration
number 9xxx-x50 specifies a 50-foot
cable instead of the normal 10-foot
Options
cable. Terminations are available in various Examples of External
factory configurations: Termination Panels
Standard Cables
Standard cables are packaged with all • Non-commoned Terminations can See page 50 through page 52 for illus-
standard and special termination accommodate individual power trations of the following types of
panels. Each standard cable has a supplies for each point. External Termination Panels:
female connector on one end for • Commoned Terminations can • Basic
connecting to the male connector on a support one power supply which is
Tricon backplane. • 16-point Digital Output without
shared by multiple points. Points can
Fuses
Fanned-Out Cables be commoned in groups of 8 and 16.
• 16-point Digital Output with Fuses
Fanned-out cables are a lower-cost • Analog signals can be read as 3-wire
alternative to using basic termination transmitter inputs, voltage inputs or • 8-point Supervised Digital Output
panels. A fanned-out cable has a female current inputs.
• 32-point Analog Input/Digital Input
connector on one end that corresponds • Thermocouple terminations provide
to a male connector on a Tricon back- • 16-point Analog Input/Digital Input
cold-junction temperature sensors
plane. The other end of the cable and are available for either upscale • 3-wire Transmitter Analog Input
provides 50 fanned-out leads, each or downscale burnout detection. For
individually labeled with a pin number • 16-point Thermocouple
the model 3706A, upscale or
that matches the connector signals. Input/Analog Input
downscale burnout detection
Before a fanned-out cable can be depends on which termination panel • ERT Panel with Interposing Relays
installed, the female connector must be is installed. For model 3708E,
• RTD/TC/AI Signal Conditioners
re-keyed to match its corresponding upscale or downscale burnout
male connector on the Tricon chassis. detection is configured with • External Bypass
TriStation.
Each fanned-out cable has the
following characteristics:

47
Field Termination Options

Match your I/O Module number in the first column with termination options on the right. An I/O Module can be wired to a maximum of two
termination panels, which may be of two different types—for example, commoned and non-commoned. The column labeled “Points/Panel” tells
how many points are handled by each termination panel. As an example, a module may have 32 points, but the desired termination panel only
handles 16 points—in such a case, two termination panels are required for one I/O Module.

Standard Terminations Other Termination Options Special Term. Panels

I/O Points/ Basic Term Fanned-out Bypass ERT Loop-
Type Commoned Non-Com
Module Panel Panels Cables Panels back Cable
DIGITAL INPUT
3501E/T 115 VAC/VDC 16 9561-810 9561-110 9551-110 9101-010 n/a 9141-010
3502E 48 VAC/VDC 16 9562-810 n/a 9552-610 9101-010 n/a 9142-010
3503E 24 VAC/VDC 16 9563-810 n/a 9553-610 9101-010 BP9228-010 9143-010
9566-810, 24V n/a 9750-310, 24V n/a BP9229-010 n/a
3504E 24/48 VDC Non-Isol. 32
9565-810, 48V n/a 9750-410, 48V n/a n/a n/a
3505E 24 VDC Low Thresh. 16 9563-810 n/a 9553-610 9101-010 BP9228-010 9143-010
3511 20-20 KHz, Pulse 8 n/a n/a 9753-110 n/a n/a n/a
3515 24 VDC Pulse Totalizer 32 n/a n/a 9753-110 n/a n/a n/a
3564 24 VDC Single 32 9566-710 n/a 9553-610 9101-010 n/a n/a
DIGITAL OUTPUT ERT Panel
3601E 115 VAC 16 9661-610 9661-110 9651-110 9101-010 n/a 9670-610
3601E/T 115 VAC 16 9663-610 9664-110 n/a n/a n/a n/a
3603E 120 VDC 16 9661-910 n/a 9651-110 9101-010 n/a 9673-810
3603E/T 120 VDC 16 9664-810 n/a n/a n/a n/a 9673-810
3604E 24 VDC 16 9662-810 9662-110 9653-610 9101-010 n/a 9671-810
3607E 48 VDC 16 9667-810 9667-110 9652-610 9101-010 n/a 9672-810
3611E 115 VAC 8 9661-510 n/a n/a n/a n/a n/a
3617E 48 VDC 8 9667-910 n/a n/a n/a n/a n/a
3623 120 VDC 16 9661-910 n/a 9651-110 9101-010 n/a n/a
3623T 120 VDC 16 9664-810 n/a n/a n/a n/a n/a
3624 24 VDC 16 9662-610 n/a 9653-610 9101-010 n/a n/a
3636R/T Relay (Non-triplicated) 16 n/a 9668-110 9651-110 9101-010 n/a n/a
Dual ERT Panel
3664 24 VDC, Self-Protect. 16 9662-610 n/a 9653-610 9101-010 n/a 9671-810
3674 24 VDC, Self-Protect. 16 9662-610 n/a 9653-610 9101-010 n/a 9671-810
THERMOCOUPLE INPUT Upscale Downscale
3706A J, K, T Differential 32 9766-210 9766-510 n/a n/a n/a n/a
3708E E, J, K, T Isolated 16 9765-610 9765-610 n/a n/a n/a n/a
ANALOG OUTPUT
3805E 4-20mA 8 n/a n/a 9853-610 n/a n/a n/a
3806E 4-20mA, 8-320mA 8 n/a n/a 9853-610 n/a n/a n/a
Standard Terminations Other Term. Options Special
ANALOG INPUT
3-Wire 4-20mA Voltage 2-Wire 4-20mA Basic Termination Panels RTD/TC/AI
9761-210
3700A 0-5 VDC, Differential 16 n/a 9763-810 9753-110, 0-5V 9764-3101
9771-210, 0-5V
3701 0-10 VDC, Differential 16 n/a 9763-810 9761-410 n/a
9753-110, 0-10V
9762-210, 0-5V
0-5/0-10 VDC,
3703E2 16 n/a 9763-810 9762-410, 0-10V
Isolated 9753-110, 0-5/0-10V n/a
9771-210, 0-5V
0-5/0-10 VDC, 9760-210, 0-5V 9750-210, 4-20mA n/a
3704E2 32 9765-210, 0-5V n/a
Non-Isolated 9760-410, 0-10V 9750-810, 0-5/0-10V n/a
1. Signal conditioners must be ordered separately. A total of 16 is required for each termination panel.
2. Must be configured with TriStation.
48
 Dimensions of Termination Panels
Width Length
Type of Panel
(Across DIN Rail) (Along DIN Rail)
Standard commoned termination (8-point or 16-point) 4.5 inches 5.0 inches
Standard non-commoned termination (16-point) 4.5 inches 7.5 inches
Voltage or 4-20 mA input termination (16-point) 4.5 inches 5.0 inches
Upscale or downscale thermocouple termination (16-point) 4.5 inches 5.0 inches
Standard commoned termination (32-point) 4.5 inches 10 inches
4-20 mA input termination (32-point) 4.5 inches 10 inches
Basic termination 3.0 inches 5.0 inches

Standard Termination Panels in 16-Point and 32-Point Styles

49
50
CR1 CR2 CR3

W17
CR5 CR4 J1

PS1
CR CR
2 1

PS1

PS2
F1
F2
A T- T+ PS2

F3
F4
R1
R2
W1
R3 L– L+
R4

F5
F6
W2
R5 1

SN
R6 W3
R7 2
R8

F7
F8
W4
3
CR1 R9
R10 W5 4 J1
R11
R12 W6 5
PS1

REV A

SN
CR2 R13 6
R14 W7
R15 7
R16 W8
PS2 R1 R2 R17 8
R18
W9 TRICONEX DIDO PANEL
R19 9 TM
R20
W10
10

F9
E
A
R21

REV A
F10
R3 R4 R22 W11 11
R23
1 R24 2
W12 12
4

F11
F12
2 R5 R6 R25

SN
R26 W13 13
3 R27 6
R28 W14 14
4 8

F13
F14
R7 R8 R29 15
R30 W15 10
5

7400166-
R31 16
6 R32 W16 12

7400195-
F15
F16
R9 R10 L– L+ 14
Field Termination Options

7 A T- T+
8 16

9 R11 R12 18

REV A
10 20
J1

11 22
R13 R14
12 24
CR9
13 26
R15 R16
14 PS1 28

15 30

F1
F2
32

7400150-
16
PS2

F3
F4
J1
CR8
C

CR7
E
A

F5
CR6 F6 SN
SN

CR3 7400143- REV A

F7
F8

L– L+

CR2
J1
R17 R18 1
REV A

17 2
3
18 R19 R20 4
19
5
20
6
Basic Termination Panel for Various Types of I/O Modules

R21 R22
21
F9
F10

8-Point and 16-Point Digital Output Termination Panels with Fuses

7
22

16-Point and 32-Point Analog Input/Digital Input Termination Panels

8
23 R23 R24
F11
F12

24 L– L+
Sample Drawings of External Termination Panels

CR1

25 R25 R26
F13
F14

26
SPWR
7300167-

27
R27 R28
28
F15
F16

29
30 R29 R30

31
32 R31 R32
 F1 F5
PWR LOAD

1
F2 F6
2

4 F3 F7
SN

6 F4 F8

7
J1
REV A

9
CR1

10 F9 F13
7400172-

PS1 CR2
11
PS2
12 F10 F14

RTN T– T+ 13
1
2

SN
14 F11 F15
3 for Digital Input/Output and Relay Modules
4 15
Standard Non-Commoned Termination Panel

5
6 16
F12 F16
7
8
9
10 REV A
11
12
13
14
15
7400153-

16
RTN T– T+
J1

– +
1
2
3 RTN T– T+
4 17

SN
5 18
J1
6 19
7 20
8 21
22

REV A
9
10 23
11 24

3-Wire Transmitter Analog Input Termination Panel

12 25
13 26
14 27
15 28
16 29
– + 30
31
7400171- 32
RTN T– T+

16-Point Thermocouple Input/Analog Input Termination Panel

51
Field Termination Options

NN 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16

7400225
7B14

7B14

7B14

7B14

7B14

7B14

7B14

7B14

7B14

7B14

7B14

7B14

7B14

7B14

7B14

7B14
KK
DEVICES
ANALOG

DEVICES
ANALOG

DEVICES
ANALOG

DEVICES
ANALOG

DEVICES
ANALOG

DEVICES
ANALOG

DEVICES
ANALOG

DEVICES
ANALOG

DEVICES
ANALOG

DEVICES
ANALOG

DEVICES
ANALOG

DEVICES
ANALOG

DEVICES
ANALOG

DEVICES
ANALOG

DEVICES
ANALOG

DEVICES
ANALOG
J1
NON-ISOLATED

NON-ISOLATED

NON-ISOLATED

NON-ISOLATED

NON-ISOLATED

NON-ISOLATED

NON-ISOLATED

NON-ISOLATED

NON-ISOLATED

NON-ISOLATED

NON-ISOLATED

NON-ISOLATED

NON-ISOLATED

NON-ISOLATED

NON-ISOLATED

NON-ISOLATED
CR1
RTD INPUT

RTD INPUT

RTD INPUT

RTD INPUT

RTD INPUT

RTD INPUT

RTD INPUT

RTD INPUT

RTD INPUT

RTD INPUT

RTD INPUT

RTD INPUT

RTD INPUT

RTD INPUT

RTD INPUT

RTD INPUT
C20

S/N
CR14

P1 P2 U1 U2 U3 U4 U5 U6 U7 U8 U9 U10 U11 U12 U13 U14 U15 U16

D + J3 J5 J7 J9
A

REV
J2

C21 C19
J4 J6 J8 J10

RTD/TC/AI External Termination Panel

2 AMP
250V

BLOWN
FUSE

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32
ON

OFF
TRICONEX

External Bypass Termination Panel

+ 1 – + 2 – + 3 – + 4 – + 5 – + 6 – + 7 – + 8 – + PW1 – + PW2 – + 9 – + 10 – + 11 – + 12 – + 13 – + 14 – + 15 – + 16 –

POWER POWER

CR1 CR2

F1 F2 F3 F4 F5 F6 F7 F8 F9 F10 F11 F12 F13 F14 F15 F16

R25 TRICONEX CORP.

R17 R26 ASSY. NO. 7400121- REV
R18 R27
R19 R28 RELAY EXTERNAL TERMINATOR
R20 R29 © 1990 SERIAL NO.
R21 MODEL NUMBER VOLTAGE R30 MADE IN U.S.A.
R22 ISOLATED REDUNDANT DIGITAL OUTPUT R31 DIGITAL INPUT
R23 COMMON R32
R24 RACK/CHASSIS/SLOT
K1 K2 K3 K4 K5 K6 K7 K8 K9 K10 K11 K12 K13 K14 K15 K16

CONTACT CONTACT

C 1 NO C 2 NO C 3 NO C 4 NO C 5 NO C 6 NO C 7 NO C 8 NO C 9 NO C 10 NO C 11 NO C 12 NO C 13 NO C 14 NO C 15 NO C 16 NO

External Relay Termination with 16 Interposing Relay Contacts

52
The Tricon controller can interface with Modbus masters and slaves,
Distributed Control Systems (DCS), external host computers on
Ethernet networks, other Triconex Controllers on a Peer-to-Peer network,
and a TriStation PC.
Communication Capabilities

In most process-control applications, Today, the state-of-the-art, micropro- • External host computers on Ethernet
there are two systems which monitor cessor-based architecture of the Tricon (802.3) networks
and manage the process. One is a controller supports several modes of
• Other Triconex controllers in a Peer-
Distributed Control System (DCS) and communication. Depending on control
to-Peer, TÜV-certified network
the other is a safety system such as the program requirements, the Tricon can
Tricon controller. These two systems interface with: • A TriStation PC
are usually isolated, but share a
• Any Modbus master, including DCS • OPC Server for Triconex
common operator interface. Distributed
from ABB, Bailey, Fisher-
Control Systems are designed to allow
Rosemount and Yokogawa
highly effective communication with
Networking with Modbus
the process operator, who must be • Modbus slave devices
informed of the state of the process at The Tricon Communication Module
• A Foxboro Intelligent Automation (TCM) supports the industry-standard
all times. This is desirable for safety
(I/A) Series Nodebus Modbus protocol over a serial link or a
systems as well, but was not feasible in
the past because of the type of tech- • A Honeywell Universal Control TCP network. The Enhanced Intelli-
nology used to implement these Network (UCN) gent Communication Module (EICM)
systems. supports the Modbus protocol over a
• A Honeywell Data Hiway and Local serial link. Most suppliers of operator
Control Network (LCN)

Proprietary Network

Redundant Proprietary Network

Tricon Tricon Tricon

1 2 3
N N N N N N
M M M C C M M M C C M M M C C
P P P M M P P P M M P P P M M
A B C 1 2 A B C 1 2 A B C 1 2

Redundant Open Network

Open Network Redundant PC

for Host Application,
SOE or TriStation

Host Application SOE PC TriStation

NCM Communication with Modbus Master and TriStation

53
Communication Capabilities

workstation software (PC-based or Protocols TCM EICM NCM ACM

mini-computer-based) support Modbus
Peer-to-Peer 9 — 9 —
RTU and ASCII protocol, as do most
DCS vendors, by means of a network- Time Synchronization 9 — 9 —
bridging device. Trimble GPS (TAIP) 9 — — —
Because the TCM and the EICM can SNTP 9 — — —
operate as a Modbus master or slave TriStation 9 9 9 9
(the EICM can simultaneously act as Tricon System Access control program 9 — 9 9
both), the productivity of the Tricon can (TSAA)
be expanded in a low-cost manner for Protocols for User-Written Applications
non-critical I/O. When the TCM or the
EICM operates as the master, it can Modbus RTU and ASCII 9 9 — —
control slave devices such as annuncia- Modbus TCP 9 — — —
tors, bypass switches on non-critical TCP-IP/TCP-UDP 9 — 9 9
PLCs, or other Tricons. When the TCM Triconex Applications
or the EICM operates as a slave, a
computer on the network is the Sequence of Events 9 — 9 9
master—this can be a DCS, an operator DDE Server 9 — 9 9
workstation, or any general-purpose TriStation software 9 9 9 9
computer programmed to support OPC Server for Triconex* 9 — 9 —
Modbus devices.
Protocols and Applications for Networking
TCM and EICM users can select the
RS-232 point-to-point interface for one NOTES
*TCM models 4351 and 4352 rely on an external Matrikon OPC Server. An Embedded OPC Server will
master and one slave, or the RS-485
be available in TCM models 4353 and 4354.
interface for one master and up to 32
See page 26, page 27, page 28, and page 31 for network port usage on the TCM, EICM, NCM, and ACM
slaves. The RS-485 network trunk can
be one or two twisted-pair wires up to a
maximum of 4,000 feet (1,200 meters). In addition, the TCM and NCM support host fails, it can be shut down and the
the Triconex Peer-to-Peer and Time control program restarted on the spare
While the TCM and the EICM are Synchronization protocols on the Net 1 host. All Triconex applications use PCs
appropriate for many applications, port. The TCM and NCM also support as external hosts, so all of the applica-
Triconex offers alternate communica- a fully redundant OPC capability. The tions could be loaded on the primary
tion methods when fast response time table above lists the protocols and and spare hosts without requiring any
or a large amount of data throughput is applications that can be used with the other PCs.
required. TCM, NCM, and ACM.
Triconex Protocols
To maximize safety, the Tricon system A protocol is a set of rules for
Networking with Ethernet offers module, media, and workstation exchanging data between two or more
redundancy. Module/media redundancy devices. In a Peer-to-Peer protocol, any
The Tricon controller supports Ethernet
is achieved by installing two TCMs, device on the network can initiate a data
(802.3) communication through the
NCMs, or ACMs in the same logical transfer operation. In a master/slave
Net 1 and Net 2 ports on the Tricon
slot and connecting their network nodes protocol, only the master can initiate a
Communication Module (TCM) and
with two sets of cables. This arrange- data exchange. Triconex has developed
the Network Communication Module
ment permits continuous operation in one peer-to-peer protocol and three
(NCM), and theNet 2 ports on the
case of broken cables, intermittent master/slave protocols (Time Synchro-
Advanced Communication Module
cable connections, port failures, or nization, TriStation, and TSAA) to
(ACM). All of these modules support
TCM/ NCM/ACM failures. support different types of applications.
Triconex applications, user-written
applications, and “open” networking External host redundancy is obtained All of the following Triconex protocols
with external systems by means of by connecting a spare external host support a maximum of 31 Tricons on a
TCP-IP/UDP-IP protocol. machine to the network. If the primary network. Please contact Triconex for

54
application guidelines and potential structures used to develop applications Foxboro's Intelligent
performance limitations. that send and receive data to and from Automation Series System
Tricon controllers.
Peer-to-Peer Triconex offers the Advanced Commu-
Peer-to-peer protocol allows Tricons to TSAA can be used to develop the these nication Module (ACM) for tightly-
exchange small amounts of safety and types of applications: integrated interfacing with Foxboro's
process information on the proprietary Intelligent Automation (I/A) Series
• Control (read/write) applications
network. For information about using Nodebus. The ACM communicates
such as an operator interface that
the peer-to-peer SEND and RECV process information at full network data
requires access to Tricon status and
functions in applications, see the rates for use anywhere on the I/A Series
the ability to write data to the Tricon
TriStation Developer’s Guide. system, transmitting all Tricon aliased
• Monitor (read only) applications data and diagnostic information to
Time Synchronization such as a Sequential Events operator workstations in display
Time Synchronization is a master/slave Recorder, Event Logger or status formats that are familiar to Foxboro
protocol used to maintain a consistent display that retrieves data from the operators.
time base for all Tricons connected to Tricon
The ACM makes the following func-
each other by means of TCMs or
For more information about TSAA, see tions available to the I/A Series:
NCMs.
the Tricon Communication Guide.
• Handles critical I/O points and
TriStation
Triconex Applications passes results to the I/A Series
The TriStation protocol is a
Triconex offers several applications for • Processes Tricon alarms and
master/slave protocol in which the
Ethernet (802.3) networks, all of which propagates them to user-defined I/A
master (the TriStation PC) communi-
use a PC as the external host. These Series destinations (consoles,
cates with the slave (Tricon) over an
applications are briefly described in the printers, etc.)
Ethernet network. Although the TriSta-
table below.
tion protocol supports a maximum of • Propagates Tricon alarms as I/A
31 Tricons, the master can communi- The Tricon controller offers consider- Series system messages
cate with only one slave at a time. able flexibility and functionality in the
area of data communication, and can • Reads/writes aliased data to satisfy
TSAA I/A Series requests
readily be configured to match control
The Tricon System Access control program requirements. Triconex is • Enables time synchronization from
program (TSAA) protocol is a continually striving to advance the state the I/A Series environment
master/slave protocol in which the of the art in safety systems. High-speed,
master (the external host) communi- redundant network communication is • Reads Tricon diagnostics for display
cates with one or more slaves (Tricons) another example of that commitment. by the I/A Series workstation
over an open network. TSAA specifies
the interfaces, commands and data

Name of control program Description

TriStation 1131 Allows development, testing, and monitoring of applications for the Tricon controller.
Retrieves events (state changes of discrete variables) from Tricon controllers on a network. For system
Sequence of Events (SOE)
maintenance and shutdown analysis.
DDE Server Allows Windows DDE client applications such as Excel to read and write Tricon aliased data.
Allows OPC clients to have read and write access to Triconex controller program variables. Requires
OPC Server
the Network Communication Module (NCM) or the Tricon Communication Module (TCM).

55
Communication Capabilities

• Provides write protection to lock out Honeywell’s TDC 3000 DCS The HIM interfaces with the TDC 3000
changes to the Tricon safety system Triconex offers the Safety Manager by means of the Hiway Gateway and
from all I/A Series sources Module (SMM) and the Hiway Inter- Local Control Network (LCN). The
face Module (HIM) for tightly-inte- HIM can also interface with Honey-
• Provides hot-spare capability for
grated interfacing with various well's older TDC 2000 control system
uninterrupted communication with
networks of the TDC 3000 DCS. by means of the Data Hiway. Using the
the I/A Series Nodebus
HIM, higher-order devices on the LCN
The ACM also supports these Triconex The SMM is used solely for communi- or Data Hiway (such as computers and
protocols and applications on external cation with the Universal Control operator workstations) can communi-
host PCs connected to a separate BNC Network (UCN), one of three principal cate with the Tricon.
port (that is, NET2): networks of the TDC 3000. Appearing
to the Honeywell system as a safety Both the SMM and the HIM offer the
• TriStation protocol for TriStation node, the SMM communicates process hot-spare capability for uninterrupted
1131 information at full network data rates communication with Honeywell
for use anywhere on the TDC 3000. networks.
• TSAA protocol for Triconex
applications The SMM transmits all Tricon aliased
data and diagnostic information to
• TSAA/TCP(UDP)IP for user- operator workstations in display
written applications on external formats that are familiar to Honeywell
hosts operators.
The SMM makes the following func-
tions available to the TDC 3000:
• Handles critical I/O points and
passes results to the DCS
• Processes Tricon alarms and
propagates them to user-defined
DCS destinations (consoles,
printers, etc.)
• Reads/writes aliased data to satisfy
DCS requests
• Reads Tricon diagnostics for display
by the DCS
• Provides write protection to lock out
changes to the Tricon safety system
from all TDC 3000 sources
• Enables time synchronization from
the DCS
• Allows Peer-to-Peer communication
for plants with many Tricon safety
systems
• Provides sequence of events to help
determine the cause of plant trips
and increase process uptime
• Provides hot-spare capability for
uninterrupted communication with
Honeywell networks

56
Easy-to-use developer's workbench allow you to develop, test and
document process-control applications for the Tricon Controller.

TriStation 1131 Developer’s Workbench

TriStation 1131 Developer’s Work- An optional Triconex programming • Backup project file is automatically
bench is an integrated tool for devel- language, CEMPLE (Cause and Effect saved after a Download All or
oping, testing, and documenting safety Matrix Programming Language Editor) Download Change and can be used
and critical-process control applica- supports the widely used Cause and to restore the project file.
tions for the Tricon controller. The Effect Matrix (CEM) methodology. • Write to File feature for intermediate
programming methodology, user inter- ST code.
face and self-documentation capabili- TriStation allows you to:
ties make the system superior to • Create programs, functions, and
traditional and competing engineering Diagnostic Monitor v4.1
function blocks
tools. TriStation v4.1 includes the Diagnostic
• Define the controller configuration
Monitor which monitors the control
This table identifies the compatibility of • Declare tagnames program and hardware status of
Tricon and TriStation versions. • Test applications in an emulator multiple controllers through a separate
TriStation 1131 Tricon • Download and monitor applications interface. In previous versions of
TriStation, these features are included
1.0.x 9.1.x—9.2.x
in the Diagnostic Panel. This software
1.1.x 9.3.x New Features in TriStation v4.1 is automatically installed when
2.0 9.4.x—9.5.x These are new features in TriStation v4.1: TriStation is installed.
3.0.x 9.5.2—9.5.5 • MS Windows 2000 and Windows For more information on the Diagnostic
3.1.x—4.0 9.5.5—9.51 XP compatible. Monitor, see the online Help or printed
4.1 9.5.x—9.51.x • Setup for new Analog Input, Digital guide included with TriStation.
4.1.420 or later 10 or later
Output, and Tricon Communication
Modules.
TriStation is compliant with Part 3 of
the IEC 61131 International Standard
for Programmable Controllers, which
defines programming languages.
TriStation v4.1 will run on Windows
NT, Windows 2000 and Windows XP.
TriStation v4.0 will run only on
Windows NT and Windows 2000.
Versions of TriStation lower than 4.0
will run only on Windows NT.

Functional Overview
TriStation provides three editors which
support these IEC 61131-3 languages:
• Function Block Diagram
• Ladder Diagram
• Structured Text Example of TriStation v4.1 Interface

57
TriStation 1131 Developer’s Workbench

Elements of a TriStation
Project
A TriStation project contains all of the
elements required to implement a
safety or control program in a Tricon
controller. Some of these elements are
automatically included in every
project by TriStation, while others are
user-created.
Programs
A program is the highest-level execut-
able logic element in a TriStation
project. It is an assembly of program-
ming language elements (functions,
function blocks, and data variables)
that work together to allow a program-
mable control system to achieve
control of a machine or a process.
Each program is uniquely identified
by a user-defined type name. A TriSta-
tion project can support hundreds of Sample Logic in FBD, ST and LD Languages
programs.
Functions
A function is a logic element which Libraries Programming Languages
yields exactly one result. Unlike a func- TriStation includes libraries of pre- TriStation includes these programming
tion block, the data associated with a defined functions, function blocks, and languages: Function Block Diagram,
function is not retained from one evalu- data types that can be used in a project. Structured Text, and Ladder Diagram.
ation of the function to the next. Func- An optional language, CEMPLE, can
tions do not have to be instanced. TriStation includes these libraries: be purchased separately.
Function Blocks • IEC 61131-3 Standard Library – a Function Block Diagram (FBD)
set of functions and function blocks
A function block is a logic element Function Block Diagram is a graphical
defined by the IEC 61131-3 Stan-
which yields one or more results. To use language that corresponds to circuit
dard
a function block in a program, an diagrams. FBD elements appear as
instance of the function block type must • Triconex Library – a set of Triconex blocks that are wired together to form
first be declared. Each instance is iden- functions and function blocks that circuits. The wires transfer binary and
tified by a user-defined instance name. can be used with any Triconex other types of data between elements.
All of the data associated with a programmable controller
specific instance of a function block is Structured Text (ST)
• Tricon Library – a set of functions
retained from one evaluation of the and function blocks that are specifi- Structure Text is a high-level, textual
function block to the next. cally for use with the Tricon programming language that is similar
controller to PASCAL. Structured Text allows
Data Types Boolean and arithmetic expressions,
In addition to the pre-defined libraries,
A data type defines the size and charac- and programming structures such as
you can also develop your own libraries
teristics of variables declared in a conditional (IF…THEN…ELSE) state-
of project elements. These libraries can
program, function or function block. ments. Functions and function blocks
include programs, functions, function
Data types used by TriStation include can be invoked in Structured Text.
blocks, and data types which can be
discrete (BOOL), analog (DINT), and
imported to other TriStation projects. In TriStation v4.0, these structures were
real (REAL).
added: arrays, structures, ForLoop and

58
Exit statements, CASE statement,
enumerated data types, var-external,
and var-temp variables.
Ladder Diagram (LD)
Ladder Diagram is a graphical
language that uses a standard set of
symbols for representing relay logic.
The basic elements are coils and
contacts which are connected by links.
Links are different from the wires in
FBD in that they transfer only binary
data between the elements.
Cause and Effect Matrix
Programming Language Editor
(CEMPLE) Sample CEM from a TriStation Project
CEMPLE is a high-level graphical
language that provides a two-dimen-
compliant Function Block Diagrams,
sional matrix in which you can asso-
thereby eliminating the risks associated Emulator Panel
ciate a problem in a process with one or
with manual translation from hand- The Emulator Panel allows you to
more corrective actions. The problem is
drawn CEMs. connect to an emulator, download the
referred to as the cause and the action as
the effect. The matrix associates a cause Controller Configuration control program, and test and debug the
with an effect in the intersection of the control program. The panel lists the
In TriStation, the controller configura-
cause row and the effect column. programs, variables, and tagnames in
tion identifies the modules in the
the control program. Testing can be
CEMPLE is the first automated imple- system, communication settings,
done by dragging variables and
mentation of CEM, a methodology that memory allocation for tagnames, and
tagnames from the list to the monitor
is commonly used throughout the operating parameters. These configura-
panel and changing the values as
process-control industry and readily tion settings are included in the control
desired. You can specify commands to
understood by a broad range of plant program that is downloaded to the
run the control program without inter-
personnel. CEM diagrams are automat- controller.
vention, to run in single-step, or to halt
ically translated into IEC 61131-3 the execution.
Controller Panel
The Controller Panel allows connection
to the controller for real-time execution
of the control program.
Diagnostic Panel
In TriStation versions prior to v4, the
Diagnostic Panel allows you to monitor
the status of MP, CM, and I/O modules
in the controller and to diagnose faults.
The panel also provides system perfor-
mance information including the
project name and version, memory size,
scan time and current execution state.
In TriStation v4.1, the Diagnostic
Monitor is a separate interface that
Declaring Tagnames in a Program

59
TriStation 1131 Developer’s Workbench

Emulator Panel with View of FBD Logic

enables monitoring of applications and Standard reports are available to docu- Annotations
hardware status on multiple controllers. ment the project configuration data. Annotations can be added to constants,
You can also create customized reports tagnames, and variables An annotation
TriStation Interface Options
with Crystal Reports™. can be used to display descriptive text,
TriStation allows you to specify options
to be used in the interface. For example, Password Security including information specified in
you can specify the drawing colors used TriStation provides a security system system and user-modifiable macros.
in the programming editors, and editor that defines users and their privileges You can also display the value of a vari-
options such as double-spacing with regard to editing, library changes, able during program execution.
between function block terminals. You state changes and other operations. Comments
can also specify the directory location Comments can be added to programs,
Project History
for files. functions, and function blocks to add
An audit trail function is provided to
Reports and Documentation document the history of a project and its information about the operations.
TriStation includes multiple methods of program version changes. This detailed Help Documentation
sorting data and documenting project log keeps track of user actions and TriStation features an online Help
elements, both during and after project comments by automatically time- system which provides detailed infor-
development. Printouts of user-devel- stamping critical events within a mation about TriStation. The online
oped function blocks and programs can session and manually logging user Help documentation includes the
be obtained on a variety of user- comments on demand. Developer’s Guide, TriStation
selected engineering drawing Libraries, Diagnostic Monitor, Error
templates. Messages, and Glossary.

60
CEMPLE is the Triconex automated implementation of the
traditional CEM methodology that has been used by process
control engineers for decades.

CEM Programming Language Editor

Cause and Effect Matrix (CEM) is a • Automatic conversion of matrix to Matrix

methodology that is commonly used in Function Block Diagram language As the major component of the CEM
the process control industry to define Editor, the Matrix identifies the parts of
• Customized view monitoring of
alarms, emergency shutdown strate- associated with causes, effects, and
active causes, intersections, and
gies, and mitigation actions. For intersections. The Matrix can also
effects
decades, process control engineers have include functions or function blocks
used manual methods such as graph • Multiple levels of undo and redo related to causes, effects, and intersec-
paper and spreadsheet programs to editing tions.
identify problem conditions and correc-
tive actions.
CEM Editor FBD Network
The CEM Editor includes the following The FBD Network displays the Func-
Automated CEM components as shown in the figure tion Block Diagram (FBD) related to
Called CEMPLE below: the cause, intersection, or effect that is
The traditional CEM method is time- • Matrix selected in the matrix. It can also be
consuming and subject to errors caused used to specify properties and to invert
by misinterpretation of the matrix or • FBD Network values for variables.
inaccurate coding. Triconex has auto- • Variable Detail Table
mated the CEM process with the Cause The FBD network uses internal boolean
and Effect Matrix Programming variables to save and move results to
Language Editor, referred to as
CEMPLE.
CEMPLE enables a cause and
effect matrix to be used as the
basis for a TriStation program.
Matrix

CEMPLE Features
CEMPLE includes the following
features:
• Ability to specify up to 99 FBD Network
causes, 99 effects, and 1,000
intersections
• Ability to invoke functions
and function blocks to
evaluate cause, intersection,
and effect states Variable Detail Table

CEM Editor Components

61
CEM Programming Language Editor

variable values based on the

state of an effect, and using
Instance time delays.
View
User-created functions and
function blocks, must be
created and enabled for use
before they can be included in a
matrix.
Active Areas
Shown in Red

Testing and Monitoring

Like all TriStation programs, a
matrix can be tested and
debugged off-line using the
Emulator Control Panel. After
the project is downloaded, the
Control Panel can be used to
monitor the values of variables
during real-time execution.
In an instance view of a matrix,
active causes, intersections,
and effects can be viewed in a
Instance View of a Matrix choice of colors.
As with other types of execut-
associated cells so that causes and sections between them. The state of a able elements, values and variables can
effects can be evaluated. For each cause (true or false) determines the be set for use during emulation and
cause, effect, and intersection, an state of the related effect. If more than real-time execution.
internal variable is automatically one cause is related to an effect, the
created to store and move results state of the effect is based on how the
between cells. matrix is evaluated. CEMPLE Tools
The effect state can be determined in A matrix can be developed and edited
either of two ways: by a logical AND using a variety of graphical interface
Variable Detail Table methods. Commands can be selected
operation or by a logical OR operation
The Variable Detail Table displays the on the intersection. A logical AND is from a main menu, toolbar, and pop-up
inputs and outputs of the FBD Network typically used for de-energize to trip menu.
that are generated when a cause, effect, systems; a logical OR is typically used Variables can be added or renamed by
or intersection is selected. for energize to trip systems. making changes in the Variable Detail
The variable type and data type can also Table. Where appropriate, drop-down
be specified from the Variable Detail lists provide variable names or function
Table. Using Functions and and function block names to be
Function Blocks selected.
For more complex processes, CEMPLE
For more information, see the
Developing a Matrix enables functions and function blocks
CEMPLE User’s Guide for Triconex
A matrix created in CEMPLE can be as to be added to causes, effects, and inter-
Systems.
basic or complex as the situation sections. This feature can be used for
requires. In a basic matrix, causes are many purposes, such as; evaluation of
identified as true or false inputs related process input to determine the cause
to one or more effects through the inter- state, calculating one or more process

62
During each scan of the TriStation project, the Main Processors examine
selected discrete variables for state changes known as events.

Sequence of Events (SOE) Capability

Triconex controllers and software Preparing Your System • Assigning event variables to the
include sequence of events capability for Event Collection SOE blocks
which provides the potential to track
To enable the controller to detect • Adding SOE function blocks to the
events which lead to an unsafe process
events, event variables and SOE blocks program logic
or system shutdown. During each scan
are identified in the TriStation project.
of the control program, the Main Types of Event Variables
In addition, the project must include an
Processors examine specified discrete
SOE function block that starts the event The types of discrete variables that can
variables for state changes known as
collection. be designated as event variables are:
events. Triconex software can be used
to retrieve the event data from the After an SOE-enabled project is down- • BOOL input
controller. loaded to the controller, TriStation
• BOOL aliased memory variables
creates an SOE definition file that
SOE for TriStation 1131 is compatible
contains the SOE block definitions. Configuring SOE Blocks
with Tricon v9.5 and later systems.
When the SOE software collects an An SOE block is a data structure that
The following host systems can be used resides in the memory of a controller’s
event from the controller, it obtains the
to retrieve event data: Main Processors. When SOE blocks are
tagname, alias, state name, and other
• SOE software from Triconex which information about the event variable configured, the event variables to be
runs on a PC from the SOE definition file. detected by the controller are specified
for each block.
• Safety Manager Module (SMM) for These tasks are done in TriStation:
Honeywell DCS systems The maximum individual block size is
• Defining SOE blocks with buffer 20,000 events, with 60,000 events for
• Advanced Communication Module size and block types
(ACM) for Foxboro DCS systems
• An OPC client control program
which has implemented the Alarm
and Events Handler as specified in
the OPC standard version 1.0
With SOE software you can: Tricon Tricon Tricon
1 2 nn
N N N N N N
• Collect and analyze event data M M M
P P P
C
M
C
M
M M M
P P P
C
M
C
M
M M M
P P P
C
M
C
M
A B C 1 2 A B C 1 2 A B C 1 2

• Export event database files

• Print reports with event data
∫∫
The SOE data file, which is output from
TriStation, is only for use with the
Triconex the SOE software. This file is
read by the software and adds descrip-
tive information which is associated
with the tagname in the Configuration
TriStation 1131
file in TriStation.
Tricon Network with SOE PC

63
Sequence of Events (SOE) Capability

all blocks. The block size is the amount

of memory that the Main Processors
reserve for recording of events.
When a block is collecting events, the
Main Processors write an event entry
which includes the values of event vari-
ables that changed during the current
scan and a time stamp.
SOE Function Blocks
SOE function blocks control and verify
event collection for SOE blocks. The
following function blocks are available:
• SOESTRT starts event collection
• SOESTOP stops event collection SOE Events File
• SOESTAT checks status of SOE
blocks • Filtering and sorting saved event Time Synchronization
data and Time Stamps
• SOECLR clears status of SOE
blocks • Specifying the display of point In a typical Peer-to-Peer network, the
properties for event data controllers synchronize their time with
The SOESTRT function block must be the master node (the controller with the
added to the TriStation program to • Viewing the properties of individual
events lowest node number) within ±25 milli-
identify the SOE blocks from which seconds. A controller recognizes events
events are to be collected. The other The SOE software also allows event
on a scan basis and time-stamps each
SOE function blocks are optional. data to be exported to database or
event at the beginning of the scan.
ASCII text files, either manually or
SOE Software automatically. A report engine and stan- Because the scans of the various
SOE software can simultaneously dard report are included. controllers on the network are not
collect event data from as many as 31 synchronized, the same event can be
networked controllers. It queries all the Trip Processing
logged by two controllers with
controllers on the network to determine A trip is a shutdown of the controlled different time stamps. The worst-case
which downloaded TriStation projects process, or a portion of the controlled difference is the longer scan time plus
include SOE blocks. If a project process. A TriStation project used for 25 milliseconds.
includes one or more SOE blocks, the safety shutdown typically includes one
software opens the appropriate SOE trip variable, whose state change Each day, the SOE software compares
definition file and begins collecting initiates the shutdown activities. If a its clock with the clock of each
events from the associated controller. project requires several variables controller from which event data is
related to trip conditions, these vari- being collected. If a controller’s clock
While the TriStation project is running, ables must be evaluated in combination is out of sync by more than five
the SOE software can be used to to determine the final state of the trip minutes, a message is displayed in the
analyze events online as it collects them variable. When a trip event occurs, the SOE message bar.
from the controllers. Snapshots of SOE software can automatically create
events that cover specific periods of a trip snapshot. This snapshot is a file of
time before or after trips have occurred events that occurred x minutes before a
can also be saved. trip and y minutes after a trip, based on
To analyze the event data, the SOE soft- TriStation settings.
ware includes tools for these tasks:
• Finding events and copying them to
other Windows applications

64
 Part Number Cross-Reference

This table identifies the ETA part number and cable part number for each termination panel model.

Model # ETA Cable Model # ETA Cable

9551-110 3000400-160 4000093-110 9664-110 3000726-110 4000094-110
9552-610 3000400-260 4000093-210 9664-810 3000520-170 4000094-110
9553-610 3000400-360 4000093-310 9667-110 3000570-710 4000094-210
9561-110 3000560-110 4000093-110 9667-610 3000520-290 4000094-210
9561-810 3000510-180 4000093-110 9667-710 3000520-260 4000094-210
9562-810 3000510-280 4000093-210 9667-810 3000520-280 4000094-210
9563-810 3000510-380 4000093-310 9667-910 3000550-280 4000094-210
9565-710 3000530-280 4000093-210 9668-110 3000590-110 4000094-110
9565-810 3000540-280 4000093-210 9670-610 3000290-160 4000111-110
9566-710 3000530-380 4000093-310 9671-810 3000290-380 4000111-310
9566-810 3000540-380 4000093-310 9672-810 3000290-280 4000111-210
9567-810 3000530-180 4000093-110 9673-810 3000290-181 4000111-110
9651-110 3000410-160 4000094-110 9750-210 3000420-120 4000093-510
9652-610 3000410-260 4000094-210 9750-310 3000420-310 4000093-310
9653-610 3000410-360 4000094-310 9750-410 3000420-410 4000093-210
9661-110 3000570-110 4000094-110 9750-810 3000420-180 4000093-510
9661-510 3000550-160 4000094-110 9753-110 3000400-510 4000103-510
9661-610 3000520-160 4000094-110 9760-210 3000470-510 4000093-510
9661-710 3000520-190 4000094-110 9760-410 3000470-530 4000093-510
9661-810 3000550-180 4000094-110 9761-210 3000510-510 4000103-510
9661-910 3000520-180 4000094-110 9664-110 3000726-110 4000094-110
9662-110 3000570-310 4000094-310 9664-810 3000520-170 4000094-110
9662-610 3000520-390 4000094-310 9667-110 3000570-710 4000094-210
9662-710 3000550-390 4000094-310 9667-610 3000520-290 4000094-210
9662-810 3000520-380 4000094-310 9761-410 3000510-530 4000103-510
9662-910 3000550-380 4000094-310 9762-210 3000510-560 4000103-510
9663-610 3000725-160 4000094-110 9762-410 3000510-580 4000103-510

65
Part Number Cross-Reference

Model # ETA Cable

9763-810 3000580-110 4000103-510
9764-310 3000712-200 4000103-510
9765-210 3000475-520 4000093-510
9765-610 3000580-230 4000103-510
9766-210 3000580-210 4000103-510
9766-510 3000580-220 4000103-510
9771-210 3000656-210 4000103-510
9853-610 3000400-530 4000098-510
1600049-010
9863-710 4000098-510
1600049-100

66
 Glossary

Ω programs. In this type of matrix, causes are represented

The symbol which represents ohm. by rows and effects are represented by columns.

µ CE Mark
The symbol which represents micro. A type of certification by the European Union which
ensures the electro-magnetic compatibility of Triconex
A controllers with other pieces of electrical and electronic
Abbreviation for amp. equipment.

alias CEMPLE
A five-digit number which identifies the data type and A language editor in the TriStation 1131 Developer's
hardware address of a point in the Triconex controller. Workbench that allows you to develop CEMs for safety
Alias is a convention of Modbus which is a communica- shutdown applications.
tion protocol available with Triconex communication
modules. communication modules
Modules that enable the Triconex controllers to commu-
control program nicate with host computers. Triconex offers communica-
In TriStation 1131, an control program is the compiled tion modules with Ethernet and serial protocol.
code (built from program elements and configuration
information) that is downloaded to and runs in a Triconex configuration
controller. In TriStation 1131, the modules and settings used in a
Triconex controller, including Main Processors, commu-
ASIC nication and I/O modules, field termination panels, and
Stands for control program Specific Integrated Circuit. memory and module settings.

availability control system

The probability that the control system is operational at The system which governs the operation of plant,
some instant of time. machinery or other equipment by producing appropriate
instructions in response to input signals.
bin
An address range of aliased variables in Triconex controller
controllers, based on Class and Type combinations. A Triconex controller includes Main Processors, commu-
nication and I/O modules, and field termination devices.
board
See module. DCS
Stands for distributed control system, which is a system
card that controls a process and provides status information to
See module. an operator.

cause DDE
In CEM methodology, a cause is a problem to be solved Stands for Dynamic Data Exchange (DDE) which is an
by the matrix. interprocess communication mechanism provided by
Microsoft Windows. Applications running under
CEM Windows can use DDE to send and receive data and
Stands for Cause and Effect Matrix which is a two- instructions to and from each other.
dimensional matrix for the development of safety control

67
Glossary

debug IEEE
The act of locating and correcting faults: 1) one of the Stands for the Institute of Electrical and Electronics Engi-
normal operations in software development such as neers (IEEE) which is a professional society for engi-
editing, compiling, debugging, loading, and verifying; or neers.
2) the identification and isolation of a faulty physical
component, including its replacement or repair to return IEC 61131-3
the PLC to operational status. The part of the IEC 61131 standard for programmable
controllers that specifies the syntax and semantics of a
effect unified suite of programming languages for program-
In CEM methodology, an effect is an action that must be mable controllers.
taken to solve a cause (problem).
input poll time
event The time required by the Triconex controller to collect
A state change of a discrete aliased variable which has input data from the controlled process. Input polling is
been designated for event logging. An event occurs when asynchronous and overlaps execution of the user-written
a variable changes from the normal state to another state. control program.

event logger instance view

A utility that logs, displays and prints critical events in In TriStation 1131, the Emulator Control Panel and
real time, based on state changes of discrete variables in Triconex Control Panel displays the values of annotated
the user-written control program. Proper use of an event variables while a TriStation 1131 project is running. In an
logger warns users about dangerous conditions and print- instance view, you can change the values of variables
outs of events can help identify the sequence of events during emulation or real-time execution.
that led to a trip.
intermittent fault
event variable A fault or error that is only occasionally present due to
A discrete memory variable or discrete input point that unstable hardware or varying software states.
has been assigned to an SOE block.
intersection
fault tolerance In CEMPLE, a cell in a matrix where a cause row inter-
The ability to identify and compensate for failed control sects an effect column.
system elements and allow repair while continuing an
assigned task without process interruption. Fault toler- intersection function
ance is achieved by incorporating redundancy and fault In CEMPLE, a function or function block that can be
masking. selected from a list in the Intersection cell of a cause row
and an effect row.
FBD
Stands for Function Block Diagram which is a graphical ISO
programming language that corresponds to circuit Stands for the International Organization for Standardiza-
diagrams. Used for connective programming, FBD tion (ISO) which is a worldwide federation of national
programs are structured by groups of interconnected standards bodies (ISO member bodies) that promulgates
elements (networks), allowing the integration of function standards affecting international commerce and commu-
and function blocks. nications.

host LD
See external host. Stands for Ladder Diagram, which is a graphical
programming language that uses a set of symbols to
hot-spare represent relay logic. Modules are defined by their
A unique feature of Triconex controllers which allows connection to a left and right power rail.
spare I/O modules to be installed with automatic switch
to the spare in case the primary module fails.

68
 Glossary

logical slot output poll time

In a Triconex chassis, a logical slot is a repository for a The time required by the Triconex controller to imple-
primary module, a hot-spare module, and their associated ment the outputs generated by the user-written control
field termination component. program in response to inputs from the controlled
process.
m
Abbreviation for milli. Peer-to-Peer
A protocol that allow multiple Triconex controllers on a
Markov model proprietary network to exchange limited amounts of
A generalized modeling technique which can be used to process and safety information.
represent a system with an arbitrary number of modules,
failure events, and repair events. A Markov model can be program
mathematically solved to produce a resultant probability. 1. The set of instructions, commands, and/or directions
that define the Triconex controller’s output signals in
matrix terms of input signals. 2. The act of creating such a set of
1. A CEM program instructions using the relay ladder language of the TriS-
2. A traditional methodology for ESD applications which tation programming system.
associates a problem (cause) in a process with one or
more actions (effects) that must be taken to correct the protocol
problem. A set of rules describing the format used for data
exchange between two entities.
module
An active field-replaceable unit consisting of an elec- reliability
tronic circuit assembly housed in a metal spine. Also The probability that no failure of the system will have
called board or card. occurred in a given period of time.

MTBF scan time

Stands for Mean Time Between Failure which is the The period of the Triconex controller’s cycle of required
expected average time between failures of a system, control functions. Scan time is composed of three
including the time taken to repair the system. Usually elements:
expressed in hours. • Input poll time (asynchronous with execution of the
user-written control program)
MTTF
• The time required to execute the user-written control
Stands for Mean Time To Failure which is the expected
program
average time to a system failure in a population of iden-
tical systems. Usually expressed in hours. • Output poll time

MTTR ST
Stands for Mean Time To Repair which is the expected Stands for Structured Text, which is a high-level
time to repair a failed system or subsystem. Usually programming language used for complex arithmetic
expressed in hours. calculations and procedures that are not easily expressed
in graphical languages.
node
Any of the machines on a network. In this document, system
node usually means a Triconex controller. Consists of a set of components which interact under the
control of a design.
node number
The physical address of a node. TCP/IP
Stands for Transmission Control Protocol/Internet
open network Protocol (TCP/IP) which are protocols for the Transport
A network to which an external host can be connected.

69
Glossary

and Network layers of the OSI network model. TCP/IP TriStation 1131
provides reliable, sequenced data delivery. An control program for developing and downloading
user-written control programs and for performing mainte-
Time Synchronization nance and diagnostics. Runs on Windows 2000 or NT
A Triconex protocol used to establish and maintain a operating systems.
synchronized, network-wide time basis. Time can be
synchronized with the master node in a network of Tricon TriStation protocol
or Tricon controllers, with a distributed control system A master/slave protocol used by a TriStation for commu-
(DCS), or with an OPC client/server control program. nication with the Triconex controllers.

transient fault TÜV Rheinland

A fault or error resulting from a temporary environmental TÜV stands for Technischer Überwachungs-Verein
condition. which translates to Technical Supervisory Association. In
Germany, TÜV Rheinland is an authorized technical
TMR inspection agency for a wide variety of products,
Stands for Triple-Modular Redundant architecture, which processes, installations, plants and equipment.
allows Triconex controllers to achieve fault tolerance.
The complete system is triplicated; each of the three iden- UDP/IP
tical systems is called a leg. Each leg independently Stands for User Datagram Protocol/Internet Protocol
executes the user-written control program in parallel with (UDP/IP) which are protocols for the Transport and
the other legs. Network layers of the OSI network model. UDP/IP
provides best-effort datagram delivery.
trip
A safety-related shutdown of the controlled process or a voting
portion of the controlled process. A mechanism whereby each leg of a TMR system
compares and corrects the data in each leg using a two-
out-of-three majority voting scheme.

70