72 Rockwell Automation Publication ICSTT-RM447M-EN-P - July 2019
Chapter 4 AADvance System Architectures
Certified Configurations
Revisions of modules are subject to change. A list of the released versions can
be obtained from Rockwell Automation.
Table 12 - Central Modules
Table 13 - Input Modules
Modules Certified
Configuration
Conditions
Processor Module
T9110
1oo2D, 2oo3D Safety-related and can be used for safety-critical
applications in SIL 2 with 2 modules fitted and SIL 3
applications with 2 or 3 modules fitted.
Note: For both Low and High Demand applications
you must use a minimum of two processors.
Modules Certified Configuration Conditions
Digital Inputs
T9401/2, 24 Vdc, 8/16 Channel,
isolated.
+
T9801/2/3 Digital Input TA, 16
channel, Simplex/Dual/TMR
1oo1D, 1oo2D, 2oo3D De-energized to action (normally
energized): SIL 3 with 1, 2 or 3 modules
fitted.
Energize to action (normally de-
energized): with 1, 2 or 3 modules fitted
Note: When the integrity level is at 1oo1D
then the faulty module must be replaced
to restore the integrity level back to 1oo2D.
Analogue Inputs
T9431/2, 8/16 Channel, isolated
+
T9831/2/3 Analogue Input TA, 16
Channel, Simplex/Dual/TMR
1oo1D, 1oo2D, 2oo3D Within the manufactures specified safety
accuracy limits of 1 %. The safety state of
the analogue input has to be set to a safe
value which is a calculated value based on
a count value of 0 mA. (refer to the
AADvance Configuration Guide Doc Nos:
ICSTT-RM405 and ICSTT-RM458 for more
details)
SIL 3 with 1, 2 or 3 modules fitted.
Note: When the integrity level is at 1oo1D
then the faulty module must be replaced
within the MTTR assumed for the PFD
calculations to restore the integrity level
back to 1oo2D.
To Next Page
Loading...
Need help?
General
