Rockwell Automation Publication ICSTT-RM447M-EN-P - July 2019 75
AADvance System Architectures Chapter 4
modules. The modular construction of the controller enables you to create
numerous other arrangements that can be tailored for a particular application.
Once a system has been built and commissioned it can be expanded using
additional modules from the range to create many different architectures and
meet specific additional safety and fault tolerant business requirements.
Simplex I/O Architecture
A simplex configuration uses one input module for a field input, one output
module for a field output, and two processor modules. Each input and output
module will fail safe on the first detected fail danger fault and the process
under control will shut down. The processor operates in 1oo2D under no fault
conditions, will degrade to 1oo1D on the first fault in either processor module
and will fail-safe when there are faults on both processor modules.
Low Demand SIL 2 Architecture
This is an example of a SIL 2 controller which is suited to low demand mode
applications with de-energize and energize to action outputs. The T9801 and
T9851 illustrated are the related simplex termination assemblies that mate
with the T9401 and T9451 I/O modules. This arrangement is also applicable
for non-safety applications.
Figure 12 - Low Demand SIL 2 Architecture System
This example supports 8 field inputs and 8 outputs. There is space for one
more processor module and one more I/O module. To expand the I/O