Woodward MicroNet Simplex - Hazardous Area and Safety Warnings

Manual 26166V1 MicroNet Simplex & MicroNet Plus
Woodward 6
Warnings and Notices
Important Definitions
This is the safety alert symbol used to alert you to potential personal injury hazards. Obey all
safety messages that follow this symbol to avoid possible injury or death.
 DANGER - Indicates a hazardous situation, which if not avoided, will result in death or serious injury.
 WARNING - Indicates a hazardous situation, which if not avoided, could result in death or serious
injury.
 CAUTION - Indicates a hazardous situation, which if not avoided, could result in minor or moderate
injury.
 NOTICE - Indicates a hazard that could result in property damage only (including damage to the
control).
 IMPORTANT - Designates an operating tip or maintenance suggestion.
IOLOCK. When a CPU or I/O module fails, watchdog logic drives it
into an IOLOCK condition where all output circuits and signals are
driven to a known de-energized state as described below. The
System MUST be designed such that IOLOCK and power OFF states
will result in a SAFE condition of the controlled device.
 CPU and I/O module failures will drive the module into an
IOLOCK state.
 CPU failure will assert an IOLOCK signal to all modules and
expansion racks to drive them into an IOLOCK state.
 Discrete outputs / relay drivers will be non-active and de-
energized.
 Analog and actuator outputs will be non-active and de-energized
with zero voltage or zero current.
The IOLOCK state is asserted under various conditions including:
 CPU and I/O module watchdog failures
 PowerUp and PowerDown conditions
 System reset and hardware/software initialization
 Entering configuration mode
NOTE: Additional watchdog details and any exceptions to these
failure states are specified in the related CPU or I/O module section
of the manual.
Overspeed /
Overtemperature /
Overpressure
The engine, turbine, or other type of prime mover should be
equipped with an overspeed shutdown device to protect against
runaway or damage to the prime mover with possible personal injury,
loss of life, or property damage.
The overspeed shutdown device must be totally independent of the
prime mover control system. An overtemperature or overpressure
shutdown device may also be needed for safety, as appropriate.
Released