8811-IO-DC 8811-IO-DC-01 IO module

Description

SafetyNet IO Modules

SafetyNet IO Modules interface to safety system field wiring via Field Terminals.. The IO Modules and the Field Terminals mount on Carriers that provide mechanical support, but also connect the internal communication bus and power supply connections to the Modules.. The IO Modules are certified as suitable for use in SIL 2 safety-related applications..

•Certification

The SafetyNet IO Modules are certified for use in safety-related applications up to and including SIL 2.. The SafetyNet System achieves this certification with a 1oo1D architecture.. The SafetyNet IO Modules have been designed specifically for safety-related applications and are certified on the basis of the excellence of their design.. The certification does not depend on “proven in use” data..

•Diagnostics

The IO Modules perform comprehensive internal diagnostic tests as an essential part of ensuring that the IO can carry out the required safety function.. If the SafetyNet IO Module’s internal diagnostics detect a fault that would prevent the SafetyNet System from carrying out its safety function,

then it will initiate a controlled shutdown.. A controlled shutdown has two objectives – firstly, to ensure that the IO Module enters its failsafe mode; and secondly, to record sufficient data to allow the reason for the shutdown to be determined.. If a SafetyNet Module enters a controlled shutdown, then

all IO channels are deactivated: input channels are not scanned; and output channels are de-energized..

•Bussed Field Power

The Bussed Field Power (BFP) connectors on the rear of IO Module Carriers provide the power connections for field instruments wired to the IO Modules.. For the SafetyNet System, BFP must be 24 VDC and supplied by MTL’s 8914-PS-AC units.. These power supplies may be used in redundant pairs, if required..

•Live Maintenance

SafetyNet IO Modules can be removed and replaced in a Class 1, Division 2 or Zone 2 hazardous area – once the relevant Bussed Field Power (BFP) connection has been isolated using an appropriate hazardous area switch (such as the MTL951).. Removing

and replacing the Modules does not interrupt the operation of the other parts of the node.. If a Module is replaced by another Module of identically the same type, then no

intervention is required for the System to begin operating normally once the Bussed Field Power is restored..

•Line Fault Monitoring

In addition to the comprehensive internal diagnostics the SafetyNet IO Modules can monitor field wiring for line faults..