1. Introduction

• Function: TMR safety processor, logic execution, I/O control, network & diagnostics

• Architecture: 3‑2‑0 TMR (three processing slices, majority vote)

• Safety: IEC 61508 SIL 3 (TÜV), CE, UL, CSA, ATEX, IECEx

• Processor: Triple 32‑bit RISC / ARM Cortex‑A9 (per slice)

• Memory: 2 GB RAM / 8 GB Flash (high‑integrity, ECC)

• Communication: Dual Ethernet (10/100 Mbps), RS‑232/485, Modbus TCP/RTU, EtherNet/IP

• Redundancy: Hot‑swap, redundant power, redundant network

• Operating Temp: –40 °C to +70 °C (conformal coated standard)

2. Product Overview

• TMR 3‑2‑0 fault tolerance: Three independent processing slices execute the same logic; outputs voted 2‑of‑3 → single‑slice faults safe, no trip on single fault.

• ECC memory & safe data: Error‑correcting RAM/Flash prevents data corruption; safe firmware & application storage.

• Comprehensive diagnostics: BIST, watchdog, slice sync check, I/O communication health, network redundancy monitoring.

• Hot‑swap: Online replacement without system shutdown or safety loop interruption.

• Redundant communications: Dual Ethernet ports for network redundancy (switchover <100 ms).

• SIL 3 certified: Meets IEC 61508 SIL 3 for process safety, ESD, BMS, and critical interlocks.

• Emergency Shutdown (ESD) systems (oil & gas, refining)

• Burner Management Systems (BMS) (power, chemical)

• Turbine overspeed & protection (steam/gas turbines)

• Critical process interlocks & safety trips

• Fire & gas (F&G) suppression control

3. Specifications

3.1 Mechanical

• Form Factor: T9100 chassis single‑width module, 6U

• Dimensions (H × W × D): 266 mm × 31 mm × 220 mm

• Weight: Approx. 1.1 kg

• Mounting: AADvance T9100 chassis slots 1–12 (processor slot recommended: slot 1/2)

• Protection: Conformal coated (standard T9110)

• Enclosure Rating: IP20 (for cabinet installation)

3.2 Electrical

• System Supply: 18–30 VDC (nominal 24 VDC ±10 %), dual redundant inputs

• Power Consumption: ≤ 12 W (typical); ≤ 15 W (max, all ports active)

• Backplane Isolation: 2500 VDC (processor ↔ I/O chassis)

• Communication Port Isolation: 1500 VAC (Ethernet/serial ↔ system)

3.3 Processing & Memory

• Architecture: Triple‑modular redundant (TMR), 3 synchronized slices

• Processor per Slice: 32‑bit RISC / ARM Cortex‑A9

• RAM: 2 GB DDRII, ECC protected

• Flash: 8 GB, safe firmware & application storage

• Real‑Time Clock (RTC): Battery‑backed, with diagnostics

• Logic Execution: Ladder diagram, function block (IEC 61131‑3)

• Scan Time: ≤ 1 ms (typical medium logic)

3.4 Communication Interfaces

• Ethernet: 2 × 10/100 Mbps (RJ45), redundant, Modbus TCP, EtherNet/IP

• Serial: 1 × RS‑232 / RS‑485 (configurable), Modbus RTU

• Backplane: T9100 high‑speed I/O bus (TMR‑safe)

• Redundancy: Dual Ethernet, automatic failover <100 ms

3.5 Functional & Safety

• Redundancy: TMR 3‑2‑0, single‑fault safe

• Voting: TriVote™ majority vote (2‑of‑3)

• Diagnostics:

  • Power supply monitoring (over/undervoltage)

  • Processor slice sync & health check

  • ECC memory error detection & correction

  • Watchdog (per slice + system)

  • I/O communication health

  • Network redundancy & link status

• Safe State: All outputs de‑energized on critical fault/power loss

• PFHd: < 2.5 × 10⁻⁹ / hour (SIL 3)

3.6 Environmental

• Operating Temperature: –40 °C to +70 °C

• Storage Temperature: –40 °C to +85 °C

• Humidity: 5–95 % RH, non‑condensing

• Vibration: 10–57 Hz ±0.10 mm; 57–150 Hz 1.5 g

• Shock: 20 g, ½ sine wave, 11 ms

• Hazardous Area: ATEX / IECEx Ex ia IIC T4 Ga (with barriers)

3.7 Certifications

• Safety: IEC 61508 SIL 3 (TÜV)

• Approvals: CE, UL, CSA, ATEX, IECEx, FM

4. Front Panel Indicators

• PWR (Green): ON = module power healthy; FLASHING = power fault

• RUN (Green): ON = executing safety logic; FLASHING = init/BIST

• FAULT (Red): ON = critical fault; FLASHING = minor fault

• COM (Green): FLASHING = backplane I/O communication active

• NET1 / NET2 (Yellow): FLASHING = Ethernet link/activity; ON = link up

5. Installation

• Chassis: Insert into T9100 chassis vacant slot (prefer slot 1/2 for processor)

• Hot‑Swap: Supported (T9100 SmartSlot)

• Front‑Panel Screws: Torque 0.8–1.0 Nm

• Cabling: Route Ethernet/serial cables away from high‑power AC (EMI avoidance)

• Environmental Note: Standard T9110 is conformal coated for harsh environments

6. Wiring & Communication

• Ethernet: NET1/NET2 to redundant switches (Modbus TCP/EtherNet/IP)

• Serial: RS‑232/485 to HMI/SCADA or Modbus RTU devices

• Backplane: Auto‑connects to T9100 I/O bus (no user wiring)

• Power: Dual 24 VDC inputs (redundant) to T9100 chassis

7. Ordering Information

• T9110: AADvance TMR Safety Processor Module (–40 °C to +70 °C, coated)

• T9100: AADvance system chassis (6U, 12 slots)

• T9100‑F2: Dual‑channel TMR safety relay output module

• T9850: Safety relay FTA (for T9100‑F2)