Rockwell Automation T8094 8000 Series TMR System Safety Manual - Manual (Page 110)

SAFETY MANUAL
D oc N umber T8094
I ssue 27 – June 2013
Page 89 of 103
• These limits apply to all analogue input modules and all configurations of
termination module.
The application must use calibration drift monitoring for analogue inputs:
• One of the 16 channels on each analogue input card must be wired to a known
calibration source and a diagnostic ladder used to monitor for drift and to provide
the alarm.
• The calibration reference must be chosen to reflect the highest level for which the
input module is intended to read.
• The calibration reference channel must also be monitored through an LFLT
function block.
9.10.4.4 Testing Digital Outputs
If a safety integrated function (SIF) relies on one or more CS300 digital outputs, you
must use the function blocks to do tests on the outputs for stuck on / stuck off
conditions. You will use at least one OTSTM function block, to schedule the tests for
the outputs, and one or more RMET function blocks – one RMET for each output
module.
You must disable the Trusted TM latent fault detection (LFD) feature for outputs
connected through the CS300 equipment. This will prevent spurious Trusted TM
fault reports.
A digital output used for a SIF always uses two (duplex) digital output modules. The
function blocks look for discrepancies between the outputs from the two modules.
Although the DO module has 32 channels, its associated TM117-RME/SME
termination module has only 16 channels. The 16th channel (bit 16 in the illustration)