Rockwell Automation 1715-OF8I Redundant I/O System User Manual - Manual (Page 211)

Rockwell Automation Publication 1715-UM001C-EN-P - March 2014 211
1715 Redundant I/O System in SIL 2 Safety Applications Chapter 6
Reaction to Faults
If an output module faults, the following status information is reported:
• Module presence
• Module health and status
• Channel health and status
• Field faults
• An echo of the front panel indicators for each module
If any of the following internal conditions exist, the output module fails safe:
• Internal software error is detected
• Over-temperature condition is detected
• Power supply rails are out of tolerance
The digital output module incorporates line test functionality that can detect
and indicate 'no load' field faults. This functionality can be enabled or disabled.
Shutdown Modes
When the module is in Shutdown mode, the Ready and Run indicators turn red.
During module configuration you choose how you want the output channels to
behave in the Shutdown mode, whether due to fault or Program mode. Output
module channels can be configured to provide the following channel values:
• De-energized (OFF), which is the default fail-safe value
• Hold Last State