Category: ICS TRIPLEX

Front Panel Unit (FPU)

The Front Panel Unit (FPU) contains the necessary connectors, switches,

logic, and LED indicators for the Front Panel. For every type of Trusted I/O

Module, the FPU contains the Slice Healthy, Active/Standby, the Educated

LED indicators, and the Module removal switches. Additional bicolor LEDs

provide status indication for the individual I/O signals. Serial data interfaces

connect the FPU to each of the HIU slices to control the LED status indicators

and monitor the Module removal switches.

Host Interface Unit (HIU)

The HIU is the point of access to the Inter-Module Bus (IMB) for the Module.

It also provides power distribution and local programmable processing

power. The HIU is the only section of the I/O Module to directly connect to the

IMB Backplane. The HIU is common to most high integrity I/O types and has

type dependent and product range common functions. Each HIU contains

three independent slices, commonly referred to as A, B, and C.

All interconnections between the three slices incorporate isolation to help

prevent any fault interaction between the slices. Each slice is considered a

Fault Containment Region (FCR), as a fault on one slice has no effect on the

operation of the other slices.

The HIU provides the following services common to the Modules in the

family:

• High-Speed Fault Tolerant Communications with the TMR Processor

via the IMB interface.

• FCR Interconnect Bus between slices to vote incoming IMB data and

distribute outgoing I/O Module data to the IMB.

• Galvanically isolated serial data interface to the FIU slices.

• Redundant power sharing of dual 24 Vdc chassis supply voltage and

power regulation for logic power to HIU circuitry.

• Magnetically isolated power to the FIU slices.

• Serial data interface to the FPU for Module status LEDs.

• SmartSlot link between Active and Standby Modules for coordination

during Module replacement.

• Digital Signal Processing to perform local data reduction and

self-diagnostics.

• Local memory resources for storing Module operation, configuration,

and field I/O data.

• Onboard housekeeping, which monitors reference voltages, current

consumption and board temperature.

Field Interface Unit (FIU)

The Field Interface Unit (FIU) is the section of the Module that contains the

specific circuits necessary to interface to the particular types of field I/O

signals. Each Module has three FIUs, one per slice. For the TMR 24 Vdc Digital

Output Module, the FIU contains one stage of the output switch structure,

and sigma-delta (ΣΔ) output circuit for each of the 40 field outputs. Two

additional ΣΔ circuits provide optional monitoring of the external field I/O

supply voltage.

The FIU receives isolated power from the HIU for logic. The FIU provides

additional power conditioning for the operational voltages required by the

FIU circuitry. An isolated 6.25 Mbit/sec serial link connects each FIU to one of

the HIU slices.

The FIU also measures a range of onboard “housekeeping” signals that assist

in monitoring the performance and operating conditions of the Module.

These signals include power supply voltages, current consumption, onboard

reference voltages and board temperature.

Field Termination Unit (FTU)

The Field Termination Unit (FTU) is the section of the I/O Module that

connects all three FIUs to a single field interface. The FTU provides the Group

Fail-Safe Switches and passive components necessary for signal conditioning,

overvoltage protection, and EMI/RFI filtering. When installed in a Trusted

Controller or Expander Chassis, the FTU field connector interconnects to the

Field I/O Cable Assembly attached at the rear of the Chassis.

The SmartSlot link is passed from the HIU to the field connections via the

FTU. These signals go directly to the field connector and maintain isolation

from the I/O signals on the FTU. The SmartSlot link is the intelligent

connection between Active and Standby Modules for coordination during

Module replacement.

Description

The TMR 24 Vdc Digital Output Module is a member of the Trusted range of

input/output (I/O) Modules. All Trusted I/O Modules share common

functionality and form. At the most general level, all I/O Modules interface to

the Inter-Module Bus (IMB) which provides power and allows communication

with the TMR Processor. In addition, all Modules have a field interface that is

used to connect to Module-specific signals in the field. All Modules are Triple

Modular Redundant (TMR).

All High Integrity I/O Modules are made up of four sections: Host Interface

Unit (HIU), the Field Interface Unit (FIU), the Field Termination Unit (FTU),

and the Front Panel Unit (or FPU).

Features

• 40 Triple Modular Redundant (TMR) output points per Module.

• Comprehensive, automatic diagnostics and self-test.

• Automatic line monitoring per point to detect open circuit and short

circuit field wiring and load faults.

• 2500V impulse withstand opto/galvanic isolation barrier.

• Automatic overcurrent protection (per channel), no external fuses

required.

• Onboard Sequence of Events (SOE) reporting with 1 ms resolution.

• Module can be hot-replaced online using dedicated Companion

(adjacent) Slot or SmartSlot (one spare slot for many Modules)

configurations.

• Front Panel output status light-emitting diodes (LEDs) for each point

indicate output status and field wiring faults.

• Front Panel Module status LEDs indicate Module health and

operational mode (Active, Standby, Educated).

• TϋV Certified IEC 61508 SIL 3.

• Outputs are powered in isolated groups of eight. Each such group is a

Power Group (PG).

Product Overview

The Trusted® TMR 24 Vdc Digital Output Module interfaces to 40 field

devices. Triplicated diagnostic tests are performed throughout the Module

including measurements for current, and voltage on each portion of the voted

output channel. Tests are also performed for stuck on and stuck off failures.

Fault tolerance is achieved through a Triple Modular Redundant (TMR)

architecture within the Module for each of the 40 output channels.

Automatic line monitoring of the field device is provided. This feature enables

the Module to detect both open and short circuit failures in field wiring and

load devices.

The Module provides onboard Sequence of Events (SOE) reporting with a

resolution of 1 ms. An output change of state triggers an SOE entry. Output

states are automatically determined by voltage and current measurements

onboard the Module.

This Module is not approved for direct connection to hazardous areas and

should be used in conjunction with Intrinsic Safety Barrier devices.

Trusted High Integrity Power Supply System

(110-240 Vac and 24 Vdc)

Product Overview 

The Trusted® power supply assembly converts redundant main line voltages of either 110

Vac / 240 Vac or 24 Vdc, to +15 Vdc or +24 Vdc output power for system and field power

requirements.

Features:

• Redundant power inputs.

• 250 W.

• Hot replaceable.

• Current sharing.

• Power factor correction.

• Front panel indicators for input, output voltage status and output current level on each

module.

• External status signals.

• TϋV Certified IEC 61508 SIL 3.

Description

The Power Supply Assembly consists of a Power Supply Chassis containing up to six Power

Supply Modules. The Chassis may be configured to distribute power in various

combinations. For example, a Chassis containing six Power Supply Modules may be set up

with three Modules providing triplicated power for Regent+Plus Input/Output (I/O)

assemblies and three Modules providing field power in a N+1 configuration. Alternatively,

the Chassis may be set up to provide separate dual 24 Vdc supplies for both a Trusted

System and associated field devices.

Power Supply Chassis

The Power Supply Chassis houses a maximum of six Power Supply Modules. It may be

mounted in a 19-inch rack or flush mounted on a panel. Table 1 identifies the available

types of Chassis.

The maximum recommended I/O cable length is 15 m. Cables longer than this may be specified if 

necessary but may suffer from voltage drop, offset, crosstalk and noise and will present materials 

handling problems.  

Internal cables are designed for cables where they are terminated in adjacent enclosures. If the 

cable needs to leave the enclosure environment, the external cable has more protection. Note that 

the ‘external’ cables are not armoured and are not suitable for truly external use and must still be 

treated with care. These cables will need protection when drawn through a cable route, and should 

also not be pulled by the connector(s). They should enter cabinets through transit/compression 

blocks and cannot be glanded. 

The Companion Slot cables described in this document allow hot-swap modules to be sited in 

adjacent slots using a double width chassis socket. For SmartSlot cables, allowing a remote slot to 

be assigned as necessary for a hot-swap, refer to Trusted I/O SmartSlot Cables, publication ICSTT

RM313 (PD-TC500). 

Trusted I/O Companion Slot Cables 

Product Overview 

This document provides detailed information for the types of Trusted® input/output (I/O) Cables 

available within the Companion Slot group. These types of cable provide connection facilities 

between the Trusted analogue and digital I/O modules, and Trusted Field Termination Assemblies 

(FTAs) or Trusted Versatile Field Termination Assemblies (VFTAs) as required. Cables are also 

available with a ‘flying lead’ at one end to allow connection to conditioned terminals. 

The types of Trusted I/O Companion Slot Cables currently available are listed in Table 1 on page 4. 

The cables are manufactured to user’s requirements; therefore length and type of cable insulation 

must be specified. Length must be specified to the nearest 0.5 m in the format xmx, e.g. 2m0 for a 

cable length of 2.0 m. This detail must be added to the end of the part number. Note that some 

cable lengths are preferred options and may be easier to obtain; please refer to Rockwell 

Automation for details. The type of cable insulation forms part of the cable part number and is 

denoted by 02 for Low Smoke Zero Halogen (LSZH) or 03 for UL Certified cable material. 02 is also 

flame retardant to IEC 60332-3 Cat A. When ordering cables, it is recommended that the user 

supplies the details as shown in Table 1.