General design measures for functional safety -2 – Rockwell Automation AADvance Controller Safety Manual User Manual
Page 58

4-2
Document: 553630
ICSTT-RM446K-EN-P Issue: 10
_C
Safety Manual (AADvance Controller)
General Design Measures for Functional Safety
I/O Modules
The AADvance system supports single module configurations, where it is
acceptable to either stop the system or allow the signals corresponding to that
module to change to their default fail-safe state. It also supports fault tolerant
I/O configurations where it is required to ensure continued system operation
in the event of a fault.
All configurations may be used for safety-related applications; the choice
between the configurations being dependent on the end-user's fault tolerance
requirements.
The input modules can be configured as a simplex, dual or triple arrangement.
Output modules can be configured as a simplex or dual arrangement. All I/O
modules include line-monitoring facilities; it is recommended that these line
monitoring facilities be enabled for safety-related I/O. For normally de-
energized I/O these facilities shall be enabled.
Note: Refer to the section Digital Field Loop Circuits for details of line
monitoring circuits.