Issue 5 - September 2006 Page 34 of 656.2.2.1 Detailed DiagnosticsHaving received a diagnostic alarm the maintainer, having been given a permit to work, wouldgain access to the system cabinets via keylocks.The first level of detailed diagnostics is visual as each module in the Triguard SC300E Systemhas a green health led and the faulty module should already be indicating its fault byextinguishing the health led.In the unlikely event that all health LED’s are still on, the next level of diagnostics evaluationrequires the use of TriBuild. The TriBuild Administrator will have given all maintainersmaintenance writes of access that will allow them to view diagnostics and, where appropriate,networks but would not allow on-line changes. This access control is by password protection(and, of course, cabinet keylock) details of which are provided in the TriBuild User Help facilities.6.2.3 Module Change-OutAll Triguard SC300E Modules can be changed on-line without disturbing the safeguarding of theprocess.It is recommended that all spares be available from a spares test system, where the health ofthe spare module can be confirmed prior to change-out.Off-line modules must be tested periodically.6.2.3.1 Input and Output ModulesThe spare module should first be visual checked, in the case of input and output modules thisshould include the fact that the coding blocks are correctly fitted (eg operation mode, GTZ...)and that the settings of the fallback links are correct eg operation mode 3-2-0 (GTZ and HW foroutput modules).In the case dual slot configuration of Triguard SC300E input and output modules, the newmodule should be inserted into the relevant hot repair slot and after the module has confirmedits health by powering the health led, the maintenance switch may be toggled which will requestthe hot repair cycle to be initiated.The hot repair cycle is initiated by the main processors and is indicated by the flashing of theLED’s on the new module. It culminates with the on-line LED’s of the new module going "on"whilst at the same time the on-line LED’s of the module to be removed goes off. Note that duringthe change-over period the outputs can be frozen for up to 2 seconds.When this cycle has been successfully completed, the location screws on the new moduleshould be tightened and the faulty module removed for repair.The error clear should now be operated to bring the system back to 100% operation by clearingthe error history, which will allow any new faults that occur to be readily diagnosed.6.2.3.2 Main Processor ModulesThe spare processor module should first be visually checked to confirm the configurationswitches are correctly set.If a warm-start keyswitch has not been made available by the application configuration, theTriBuild Workstation should be connected to the console port and brought on-line.Turning the processor keyswitch to the reset position should then halt the faulty processor andthen the faulty processor should be removed.The new processor should now be plugged in to the vacant processor slot with the keyswitch setin the reset position. The keyswitch is then turned to the 'run' position. The processor will then