ABB Triguard SC300E Safety Manual

Also see for Triguard SC300E: User manual

Contents

ABB Triguard SC300E Safety Manual Manual pdf 27 page image

Issue 5 - September 2006 Page 27 of 65users application. The external watchdog timer will be configured for 2oo3 operation and mustbe tested periodically as recommended in the user manual.3.6.11 Use of Triplicated Watchdog Timer with Remote Chassis.When used in a system with one or more remote chassis, the voted output of the externalwatchdog timer is used to remove both power feeds to the chassis power supplies (PAC orPDC24) of the main chassis. This will ensure that all output modules will fail to a known safestate 2.64 seconds after the external watchdog trips by the common interface watchdogs.The fall back state is defined by the links on the digital output modules, for ESD system this isGTZ (Go To Zero).3.7 TriBuild, Network ExamplesRefer to Appendix 1 for example networks detailing the Mandatory Application logic required.3.8 Environmental FunctionalityTo meet CE Emission requirements the Triguard SC300E System must be mounted within astandard Rittal type cabinet with EMC seals fitted on all doors.3.9 SecurityAll system cabinets must be fitted with keylocks to enable the proper control of access to theTriguard SC300E Safety System.Software security access via the password protection scheme of TriBuild will be theresponsibility of the end user. The System Integrator must ensure that the end user is fullyaware of the facilities of the TriBuild password protection scheme.Each processor, when in normal operation, should have its front key in the run position and thekeys removed to further prevent unauthorised access. It is the responsibility of the end user toensure proper maintenance control of the Triguard SC300E Safety System.3.10 System Power SuppliesEach system and I/O chassis requires two power supply feeds. These feeds must beseparately protected and ideally should be derived from two separate secure sources.3.11 Field Sensors and Final ElementsIt is the responsibility of the System Integrator to review the proposed field equipment to ensurethe correct quality of Sensors and Final Elements is being used for safety loops.3.11.1 Field Power SuppliesAll field power supply failures must in principle be fail safe. The field power supply configurationwill be at a minimum 100% functionally redundant (any single power module failure leaves thebulk power supply in the position of being able to maintain 100% load).