ICS Triplex T8111C Trusted TMR Processor Module

Description

The ICS Triplex T8111C is a coated Trusted TMR Processor Module for critical control and safety applications.

It uses a Triple Modular Redundant architecture with three independent Processor Fault Containment Regions. Each region contains an NXP PowerQUICC II series processor.

The three processors operate in lock-step and continuously compare their results. Hardware-based 2-out-of-3 voting isolates a single processor fault without interrupting system operation.

The T8111C executes application programs, scans Trusted I/O modules, and manages communications across the triplicated Inter-Module Bus.

Its Hardware Implemented Fault Tolerant architecture supports high system availability and safety integrity in demanding industrial environments.

Features

• Triple Modular Redundant architecture with fault-tolerant 3-2-0 operation.
• Hardware Implemented Fault Tolerant lock-step processing.
• Conformal-coated circuit assemblies for improved environmental protection.
• Three independent Processor Fault Containment Regions: FCR A, FCR B, and FCR C.
• NXP PowerQUICC II series processor within each containment region.
• Hardware-based 2oo3 voting for processor, memory, and bus operations.
• Continuous discrepancy detection and automatic fault isolation.
• Front-panel status LEDs for processor and system diagnostics.
• Front-panel RS-232 serial port for diagnostic access.
• IRIG-B002 and IRIG-B122 time synchronization interfaces.
• Separate processor fault and processor failure relay contacts.
• Configurable serial communication interfaces through the rear adapter unit.
• Hot replacement support for active and standby processor configurations.
• Automatic standby processor education without reloading the application program.

Applications

• Emergency Shutdown Systems
• Fire and Gas Detection Systems
• Burner Management Systems
• Critical Process Control Systems
• Turbomachinery Control Systems
• High-availability Safety Instrumented Functions rated up to SIL 3

Technical Specifications

Connections and Interfaces

External I/O Connector

PL1 is a 48-way DIN 41612 E-type connector located at the rear of the processor module.

It carries relay contacts, serial communications, time synchronization signals, and power supply monitoring connections.

Installation Guidelines

Handling Precautions

• Follow standard electrostatic discharge precautions before handling the module.
• Do not touch exposed backplane connector pins.
• Do not open or dismantle the module housing.
• Keep the module in approved antistatic packaging before installation.

Pre-Installation Inspection

• Inspect the module enclosure for physical damage.
• Check the rear connector for bent or misaligned pins.
• Do not force the module into an incorrectly aligned chassis slot.
• Do not attempt to straighten damaged connector pins.

Module Insertion

• Confirm that the rear adapter unit is correctly installed and aligned.
• Use the release key to open the upper and lower ejector tabs.
• Slide the processor module into its designated controller chassis slot.
• Press the module firmly until the rear connector is fully seated.
• Lock both ejector latches after completing the insertion.

Active and Standby Configuration

• Follow the approved hot-swap procedure when installing a standby processor.
• Allow the standby module to complete initialization and synchronization.
• Confirm the Educated status indication before initiating a processor handover.
• Verify the health of both processor modules before changing their operating roles.
• Do not remove a processor while it is actively controlling the system.

Compliance and Certification

• IEC 61508: Certified for applications up to SIL 3.