Rockwell Automation T8110B/T8110 Trusted TMR Processor - Manual (Page 35)

Trusted
TM
TMR Processor T8110B/T8110
Issue 18 Feb 08 PD-T8110B/T8110 35
5.3. Transfer between Active and Standby Processor Modules
Using the following procedure we have assumed that the standby processor does not have same
SYSTEM.INI configuration file as the active processor
The user will define the primary processor location as part of the complex equipment definition within
the IEC1131 TOOLSET. This will always be defined as chassis 1 slot 0, secondary processor locations
are never defined in either the configuration manager or the IEC1131 TOOLSET.
Usually active / standby changeovers will need to be performed when the Active Processor has a fault
the operation is as above, however on second insertion of the Standby processor the swap will be
automatic i.e. the ejectors will not have to be operated to initiate the change-over.
Active / standby changeovers will be inhibited if any IO has been forced on the system.
This will be indicated by the Active Processors inhibit led flashing green, prior to
insertion of the Standby Processor.
• The Standby Processor is inserted in the system; it will be initialised, then set to Standby. A
connection will be established between itself and the active module. It will then prepare and
write data to educate the Standby. Standby education is indicated by the Standbys education
led being steady green. Hand-over at this point is inhibited, indicated by the inhibit led on the
Active Processor flashing green.
• At this point the Standby Processor needs to be removed and re-inserted.
• On second insertion the Standby Processor will as before initialise then set to Standby. A
connection to the Active will be made and again data will be prepared and written for
education. However the Standbys initial configuration will be as the Active, therefore hand-
over will be allowed, the inhibit led on the Active Processor will stay green steady after the
Standby has educated.
• A hand-over can now be performed, by opening the ejectors on the Active Processor.
• On completion of the hand-over the Standby is taken out of service. To perform a second
hand-over this now Standby module will have to be removed and re-inserted.