50
Rev 2.1
Figure 4.10 – Changing Configuration Parameter Page
For safety configuration parameters an additional verification step is required to commit the changes. Safety parameters
are grouped into blocks that include only safety parameters, not a mixture of safety data and non-safety data. All
parameters within the safety group undergo a verification process. A safety parameter group is identified on the Operator
Interface Panel to indicate when the configuration parameters are safety-related. Each safety parameter group is verified
one at a time until all have been verified as in Figure 4.11.
Figure 4.11 – Safety Verification Page
Safety parameters can be viewed the same way non-safety parameters can be viewed. If the user makes no attempt to
change a safety parameter, the user isn’t required to enter safety verification mode. A verification step is required for each
safety parameter block that is changed. The verification steps do not have to be completed immediately; the user can
traverse between parameter groups before the verifications are done.
A Verify button is enabled that allows the user to conduct verification sessions.
NOTE: When the user proceeds with the safety parameter configuration the Operator Interface requests that the controller
enter this mode. In this mode the Control unlocks the safety parameters in this group and marks them unusable. Failure to
complete the entire safety configuration procedure leaves the boiler in an un-runnable state.
All safety configuration parameters in the group should have the same access level. If this condition isn’t so, the user is
asked to enter another password when a higher access level is needed. Successful entry of the controller into safety
verification mode is displayed and the lock icon will appear unlocked on the page with the first safety block displayed.
If the user terminates the safety configuration session after it has started, the controller is left in an un-configured and un-
runnable state. The user can terminate the session by pressing the Menu button or by attempting to leave the Verification
page with the Home or Back buttons top-left and -right screen corners, respectively. The user is warned that leaving the
session at this point leaves the boiler in an un-runnable state and confirms whether the user still wants to do so.