Technical Product Guide

Emergency Shutdown Systems

Tricon
Technical Product Guide
Version 9.4 Systems
Turbine Control Systems

Burner Management Systems

Fire & Gas Protection Systems

An Invensys Company
 Technical Product Guide

© Copyright 1995-1999 Triconex Corporation. All Rights Reserved.

Printed in the United States of America.

Information in this document is subject to change without notice and does not represent
a commitment on the part of Triconex Corporation.

Trademark Acknowledgments
Microsoft, Excel, Access, MS-DOS and Windows NT are registered trademarks of
Microsoft Corporation.
Foxboro and I/A Series are registered trademarks of The Foxboro Company.
TDC 3000, TDC 2000, UCN, LCN and Data Hiway are registered trademarks of
Honeywell Corporation.
IBM, Micro-Channel and VGA are registered trademarks of International Business
Machines Corporation.
InTouch is a registered trademark of Wonderware Corporation.
All other product names are copyrights, trademarks, or tradenames of their respective
owners.

DISCLAIMER
Because of the variety of uses for this equipment and because of the differences between
this fault-tolerant equipment and traditional programmable logic and process controllers,
the user of, and those responsible for applying, this equipment must satisfy themselves as
to the acceptability of each application and the use of the equipment.

The illustrations, charts and layout examples shown in this manual are intended solely to
illustrate the text of this manual. Because of the many variables and requirements associated
with any particular installation, Triconex Corporation cannot assume responsibility or
liability for actual use based upon the illustrative uses and applications.

In no event will Triconex Corporation be responsible or liable for indirect or consequential

damages resulting from the use or application of this equipment.

TRICONEX CORPORATION DISCLAIMS ANY IMPLIED WARRANTY OF FITNESS

FOR A PARTICULAR PURPOSE.

Triconex reserves the right to make changes at any time in order to improve design and to
supply the most reliable product. No patent or copyright liability is assumed by Triconex
Corporation with respect to use of information, circuits, equipment or software described
in this text.

Reproduction of the content of this manual, in whole or part, without written permission of
Triconex Corporation, is prohibited.
 Table of Contents

Introduction ........................................................................................................................ 1
Theory of Operation ........................................................................................................... 3
System Configuration ........................................................................................................13
Product Specifications .......................................................................................................17
Field Termination Options ..................................................................................................43
Communication Capabilities ............................................................................................... 51
TriStation 1131 Developer's Workbench ............................................................................ 55
Cause & Effect Matrix Programming Language Editor (CEMPLE) .....................................61
Sequence-of-Events (for TriStation 1131) ..........................................................................63
TriStation Multi-System Workstation (MSW) ...................................................................67
Sequence-of-Events (for TriStation MSW) ........................................................................ 70
Appendix A. Tricon Scan Time & Memory Usage ............................................................ 71
Appendix B. Hardware Requirements ...............................................................................77
Appendix C. Glossary .......................................................................................................78

Triconex Part No. 9791007-005, July 1999

 PREFACE

The Tricon fault-tolerant control system is the industry choice for critical
process applications requiring maximum safety and uninterrupted
operation. Leading producers of chemicals, oil and gas, pulp and paper,
and electric power have successfully implemented Tricon fault-tolerant
control to improve safety, increase productivity, and reduce downtime.

This Tricon Technical Product Guide will familiarize you with theory and
terminology for fault-tolerant control, reliability and availability. The
guide covers configuration and specifications of the Tricon system, and
discusses the capabilities of the TriStation Programming Systems and the
Communication Modules which enable the Tricon to interface with external
devices.

The information in the Tricon Technical Product Guide applies to Version

9.4 Tricon systems.

The Triconex sales and application staff is readily available to provide

additional information or assistance as needed. Triconex also offers techni-
cal courses on configuration, programming and Tricon maintenance. Open
enrollment courses are held at our headquarters in Irvine, California and at
our regional business centers. If desired, on-site training can be arranged
at your facility for your operation and maintenance personnel.

Product, support and service information are available for users 24 hours a
day through Internet connections. Administered by the Customer Satis-
faction Group at Triconex Headquarters, customer reference documents
can be downloaded or diagnostic files uploaded for analysis by Customer
Satisfaction Engineers.
For Tricon product information and support, please visit our website at
http://www.triconex.com or call our Technical Support Group at (949) 699-
2100, toll free (800) 325-2128, or fax (949) 768-6601.
The Tricon is a fault-tolerant controller based on a
Triple-Modular Redundant (TMR) architecture.

Introduction
What is Fault-Tolerant
Control?
A fault-tolerant control system
identifies and compensates for failed
control system elements and allows
repair while continuing an assigned
task without process interruption. A
high-integrity control system such
as the Tricon is used in critical
process applications that require a
significant degree of safety and
availability.

What is the Tricon?

The Tricon is a state-of-the art fault-
tolerant controller based on a
Triple-Modular Redundant (TMR)
architecture. TMR employs three
isolated, parallel control systems
and extensive diagnostics integrated
into one system. The system uses
two-out-of-three voting to provide
high integrity, error-free, uninter-
rupted process operation with no
single point of failure.
Sensor signals are separated into
three isolated paths on an input
module and sent by means of three The Tricon Fault-Tolerant Controller
separate paths to one of three Main
Processors. The TriBus inter- Output Selector. Voter circuitry Extensive diagnostics on each
processor bus performs a majority includes integral “loopback” circuits independent leg, each modular
vote on data and corrects any input for final validation of output states component, and each functional
discrepancies. This process ensures and diagnosis of latent faults. circuit detect and report operational
that each Main Processor uses the Setting up applications is simplified faults. All diagnostic information is
same voted data to execute its with the Tricon, because the tripli- stored in system variables and/or
application program. cated TMR system operates as a annunciated with Light-Emitting
single control system from the Diode (LED) indicators and alarm
Process outputs are then sent along
user’s point of view. The user contacts. This information can be
triplicated paths to output modules
terminates sensors and actuators at a used within the application program
where they are voted/selected again
single wiring terminal and programs to modify control actions or direct
to ensure integrity. Digital output
the Tricon with one set of applica- maintenance procedures. All faulty
voting is handled by a patented
tion logic. The Tricon manages the components can be replaced on-line
quadruplicated voting circuit; analog
rest! without process interruption. These
signals are selected by an Analog
1
 Introduction
features of the Tricon ensure the
highest possible system integrity at
all times.
The key features of a Tricon control
system include:
• No single point of failure
• Ability to operate with 3, 2 or 1
Main Processor before shutdown
• Fully implemented and transpar-
ent triplication
• Comprehensive system
diagnostics
• Complete range of I/O modules
• Dual and single I/O modules for
safety-critical points with a
limited need for availability
• Remote I/O up to 12 kilometers
(7.5 cable miles) away
• Simple, on-line module repair
• Unsurpassed reliability and
availability
What are Typical User
Applications?
Each day the Tricon supplies in-
creased safety, reliability and
availability to a worldwide installed
base. The following are a few
typical applications. For details on
the Tricon’s value to your applica-
tion, ask your sales representative
for additional documentation and
customer references.
Emergency Safety Shutdown (ESD):
The Tricon provides continuous
protection for safety-critical units in
refineries, petrochemical/chemical
plants and other industrial processes.
For example, in reactor and com-
pressor units, plant trip signals —
for pressure, product feed rates,
expander pressure equalization and
temperature — are monitored and
shutdown actions taken in the event
of an upset condition. Traditional
shutdown systems implemented
with mechanical or electronic relays
provide shutdown protection but can
also cause dangerous nuisance trips.
2
The Tricon also increases integrity,
providing automatic detection and
verification of field sensor integrity,
integrated shutdown and control
functionality, and direct connection
to the supervisory data highway for
continuous monitoring of safety-
critical functions.
Boiler Flame Safety: Process steam
boilers function as a critical compo-
nent in most refining and process
applications. Protection of the boiler
from upset conditions, safety inter-
lock for normal startup and
shutdown, and flame-safety applica-
tions are combined in the single
integrated Tricon. In traditional
applications these functions would
be provided in individual non-
integrated components. But with a
fault-tolerant, fail-safe controller,
the boiler operations staff can use a
critical resource more productively
while maintaining safety at or above
the level of electromechanical
protection systems.
Turbine Control Systems: The
control and protection of gas or
steam turbines requires high integ-
rity as well as safety. Continuous
non-stop operation of the fault-
tolerant Tricon controller provides
the turbine operator with maximum
availability while maintaining
equivalent levels of safety. Speed
control as well as start-up and
shutdown sequencing are imple-
mented in a single integrated
system. Unscheduled outages are
avoided by using hot spare modules
for the I/O. If a fault occurs in a
module, a replacement module is
automatically activated without
operator intervention.
Offshore Fire & Gas Protection:
The protection of offshore platforms
from fire and gas threats requires
continuous availability as well as
reliability. The Tricon provides this
availability through on-line replace-
ment of faulty modules. Faults in
individual modules, field wiring and
sensors are managed automatically
through built-in diagnostics. Analog
fire and gas detectors are connected
directly to the controller, eliminating
the need for trip amps. An operator
interface provides monitoring of the
fire and gas systems as well as
diagnostics on the Tricon controller
and its attached sensors. Traditional
fire and gas panels can be replaced
with a single integrated system,
saving costly floor space while
maintaining high levels of safety
and availability.
What is TriStation?
Triconex offers two programming
systems for developing, testing and
documenting process-control
applications that execute in the
Tricon controller: the TriStation
1131 Developer’s Workbench for
Windows NT and the TriStation
Multi-System Workstation (MSW)
for DOS. See pages 55 and 67 for
additional information.
What about Communication
Capabilities?
Triconex offers optional modules
which enable the Tricon to commu-
nicate with other Tricons on a
peer-to-peer network and with the
following external devices:
• Modbus masters and slaves
• Distributed Control Systems
(DCS)
• Operator workstations
• Host computers which are acces-
sible by means of TCP(UDP)/IP/
802.3 protocol
For more information, please refer
to the section called “Communica-
tion Capabilities” on page 51.
The Tricon's architecture is fully triplicated throughout,
from the Main Processors to the I/O circuitry.
Fault tolerance in the Tricon is
achieved through a Triple-Modular
Redundant (TMR) architecture. The
Tricon provides error-free, uninter-
rupted control in the presence of
either hard failures of components,
or transient faults from internal or
external sources.
The Tricon is designed with a fully
triplicated architecture throughout,
from the input modules through the
Main Processors to the output
modules. Every I/O module houses
the circuitry for three independent
Triplicated Architecture of the Tricon Controller
legs. Each leg on the input modules
reads the process data and passes
that information to its respective
Main Processor. The three Main
Processors communicate with each
other using a proprietary high-speed
bus system called the TriBus.
Once per scan, the three Main
Processors synchronize and commu-
nicate with their two neighbors over
the TriBus. The TriBus votes digital
input data, compares output data,
and sends copies of analog input
data to each Main Processor.
Theory of Operation
The Main Processors execute the
control program and send outputs
generated by the control program to
the output modules. In addition to
voting the input data, the Tricon
votes the output data. This is done
on the output modules as close to
the field as possible, in order to
detect and compensate for any errors
that could occur between the
TriBus voting and the final output
driven to the field.
For each I/O Module, the system
can support an optional hot-spare
module which takes control if a fault
is detected on the primary module
during operation. The hot-spare
position can also be used for on-line
system repairs.
Main Processor Modules
A Tricon system contains three
Main Processor (MP) Modules to
control three separate legs of the
system. Each Main Processor oper-
ates in parallel with the other two
Main Processors, as a member of a
triad.
A dedicated I/O Communication
(IOC) processor on each Main
Processor manages the data ex-
changed between the Main
Processors and the I/O modules. A
triplicated I/O Bus is located on the
chassis backplane and is extended
from chassis to chassis by means of
I/O Bus Cables.
As each input module is polled, the
new input data is transmitted to the
Main Processor over the appropriate
leg of the I/O Bus. The input data
from each Input Module is assembled
into a table in the Main Processor and
stored in memory for use in the
hardware voting process.
The individual input table in each
Main Processor is transferred to its
neighboring Main Processors over
the proprietary TriBus. During this
transfer, hardware voting takes
place. The TriBus uses a Direct
Memory Access programmable
device to synchronize, transmit, vote
and compare data among the three
Main Processors.
If a disagreement is discovered, the
signal value found in two out of
three tables prevails, and the third
table is corrected accordingly. One-
time differences which result from
sample timing variations can be
distinguished from a pattern of
differing data. The three indepen-
dent Main Processors each maintain
data about necessary corrections in
local memory. Any disparity is
flagged and used at the end of the
scan by the built-in Tricon Fault
Analyzer routines to determine
whether a fault exists on a particular
module.
3
 Theory of Operation
After the TriBus transfer and input
data voting have corrected the input
values, these corrected values are
used by the Main Processors as
input to the control program. (The
program is developed in the TriSta-
tion and downloaded to the Main
Processors.) The 32-bit main micro-
processor and a math co-processor
execute the control program in
parallel with the neighboring Main
Processor Modules.
The control program generates a
table of output values based on the
table of input values, according to
the rules built into the application by
the customer. The IOC processor on
each Main Processor manages the
transmission of output data to the
output modules by means of the I/O
Bus.
1 For more information about SOE, refer to the section called "Sequence of Events (SOE) Capability" later in this document.
Main Processor (Model 3006) Architecture
4
Using the table of output values, the
IOC generates smaller tables, each
corresponding to an individual
output module in the system. Each
small table is transmitted to the
appropriate leg of the corresponding
Output Module over the I/O Bus.
For example, Main Processor A
transmits the appropriate table to
Leg A of each Output Module over
I/O Bus A. The transmittal of output
data has priority over the routine
scanning of all I/O modules.
The I/O communication processor
manages the data exchanged be-
tween the Main Processors and the
communication modules using the
communication bus, which supports
a broadcast mechanism.
Model 3006 Main Processors pro-
vide 2 Megabytes SRAM each for
V9 Tricon Systems, while Model
3007 Main Processors provide 1
Megabyte SRAM each for Single
Chassis V9 Tricon Systems only.
The SRAM is used for the user-
written control program, SOE1 data,
I/O data, diagnostics and communi-
cation buffers. In the event of an
external power failure, the SRAM is
protected by batteries that reside on
the backplane of the Main Chassis.
The batteries maintain the integrity
of the program and the retentive
variables for a minimum of six
months in the absence of power to
the Tricon.
The Main Processor Modules
receive power from dual Power
Modules and power rails in the Main
Chassis. A failure on one Power
Module or power rail will not affect
the performance of the system.

Bus Systems & Power
Distribution
Three triplicated bus systems are
etched on the chassis backplane: the
TriBus, the I/O Bus and the Com-
munication Bus.
The TriBus consists of three
independent serial links operating at
4MBaud. The TriBus synchronizes
the Main Processors at the beginning
of a scan. Then each Main Processor
sends its data to its upstream and
downstream neighbors. The TriBus
performs one of three functions with
the data:
• Transfer of data only—for
analog, diagnostic and communi-
cation data.
Tricon Main Chassis Backplane
• Transfer and voting of data—for
digital input data.
• Comparing data and flagging
disagreements—for previous
scan’s output data and control
program memory.
An important feature of the Tricon’s
fault-tolerant architecture is the use
of a single transmitter to send data
to both the upstream and down-
stream Main Processors. This
ensures receipt of the same data by
the upstream processor and down-
stream processor.
Each I/O module transfers signals to
or from the field through its associ-
ated field termination assembly.
Two positions in the chassis tie
together as one logical slot. The first
position holds the active I/O module
and the second position holds the
hot-spare I/O module. Termination
cables are tied to panel connectors at
the top of the backplane. Each
connection extends from the termi-
nation module to both active and
hot-spare I/O modules. Therefore,
both the active module and the hot-
spare module receive the same
information from the field termina-
tion wiring.
The 375 KBaud I/O Bus transfers
data between the I/O Modules and
the Main Processors. The triplicated
I/O Bus is carried along the bottom
of the backplane. Each leg of the I/O
Bus runs between one of the three
Main Processors and the
corresponding legs on the I/O
module.
5
 Theory of Operation
The I/O Bus can be extended be-
tween chassis using a set of three I/O
Bus Cables.
The 2 MBaud Communication
(COMM) Bus runs between the
Main Processors and the Communi-
cation Modules.
Power for the chassis is distributed
across two independent power rails
down the center of the backplane.
Every module in the chassis draws
power from both power rails through
dual power regulators. There are
four sets of power regulators on each
input and output module: one set for
each of the legs A, B and C and one
set for the status-indicating LEDs.
Architecture of TMR Digital Input Module with Self-Test (DC Model)
6
Digital Input Modules
The Tricon supports two basic types
of digital input modules: TMR and
single. The following paragraphs
describe digital input modules in
general, followed by specifics for
TMR and single modules.
Every digital input module houses
the circuitry for three identical legs
(A, B and C). Although the legs
reside on the same module, they are
completely isolated from each other
and operate independently. A fault
on one leg cannot pass to another. In
addition, each leg contains an 8-bit
microprocessor which handles
communication with its correspond-
ing I/O Communication (IOC)
Processor on the Main Processor
Module.
Each of the three input legs asyn-
chronously measures the input
signals from each point on the input
termination module, determines the
respective states of the input signals,
and places the values into input
tables A, B and C respectively. Each
input table is regularly interrogated
over the I/O bus by the I/O commu-
nication processor located on the
corresponding Main Processor
module. For example, Main Proces-
sor A interrogates Input Table A
over I/O Bus A.
On TMR Digital Input Modules, all
critical signal paths are 100% tripli-
cated for guaranteed safety and
maximum availability. Each leg
conditions signals independently
and provides optical isolation be-
tween the field and the Tricon. (The
64-point High-Density Digital Input
Module is an exception—it has no
channel-to-channel isolation.)
DC models of the TMR digital input
modules can self-test to detect
“stuck ON” conditions where the
 Architecture of TMR Digital Output Module
circuitry cannot tell whether a point
has gone to the OFF state. Since
most safety systems are set up with
a “de-energize-to-trip” capability,
the ability to detect OFF points is an
important feature. To test for “stuck
ON” inputs, a switch within the
input circuitry is closed to allow a
zero input (OFF) to be read by the
optical isolation circuitry. The last
data reading is frozen in the I/O
communication processor while the
test is running.
On Single Digital Input Modules,
only those portions of the signal
path which are required to ensure
safe operation are triplicated. Single
modules are optimized for those
safety-critical applications where
low cost is more important than
maximum availability. Special self-
test circuitry detects all stuck-ON
and stuck-OFF fault conditions
within the non-triplicated signal
conditioners in less than half a
second. This is a mandatory feature
of a fail-safe system, which must
detect all faults in a timely manner
and upon detection of an input fault,
force the measured input value to
the safe state. Because the Tricon is
optimized for de-energize-to-trip
applications, detection of a fault in
the input circuitry forces to OFF
(the de-energized state) the value
reported to the Main Processors by
each leg.
Digital Output Modules
There are four basic types of Digital
Output Modules: dual, supervised,
DC voltage and AC voltage. The
following paragraphs describe
digital output modules in general,
followed by specifics for the four
types.
Every digital output module houses
the circuitry for three identical,
isolated legs. Each leg includes an
I/O microprocessor which receives
its output table from the I/O
communication processor on its
corresponding Main Processor. All
of the digital output modules, except
the dual DC modules, use special
quadruplicated output circuitry
which votes on the individual output
signals just before they are applied
7
 Theory of Operation
to the load. This voter circuitry is
based on parallel-series paths which
pass power if the drivers for Legs A
and B, or Legs B and C, or Legs A
and C command them to close—in
other words, 2-out-of-3 drivers
voted ON. The quadruplicated voter
circuitry provides multiple redun-
dancy for all critical signal paths,
guaranteeing safety and maximum
availability.
Each type of Digital Output Module
executes a particular Output Voter
Diagnostic (OVD) for every point.
Loop-back on the module allows
each microprocessor to read the
output value for the point to
determine whether a latent fault
exists within the output circuit.
Architecture of 16-point Supervised Digital Output Module
8
Dual Digital Output Modules pro-
vide a single parallel or series path,
with the 2-out-of-3 voting process
applied individually to each switch.
While quadruplicated output cir-
cuitry provides multiple redundancy
for all critical signal paths, dual
circuitry provides just enough
redundancy to ensure safe operation.
Dual modules are optimized for
those safety-critical applications
where low cost is more important
than maximum availability.
Supervised Digital Output Modules
provide both voltage and current
loopback, allowing complete fault
coverage for both energized and de-
energized-to-trip conditions. In
addition, the Supervised Digital
Output module verifies the presence
of the field load by doing continu-
ous circuit continuity checks. Any
loss of field load or shorted circuit is
annunciated by the module.
DC Voltage Digital Output Modules
are specifically designed to control
devices which hold points in one
state for long periods of time. The
OVD strategy for a DC voltage
module ensures full fault coverage
even if the commanded state of the
points never changes. On this type of
module, the output signal transition
normally occurs during OVD execu-
tion, but is guaranteed to be less than
2.0 milliseconds (500 microseconds
is typical) and is transparent to most
field devices. (For devices that
cannot tolerate a signal transition of
any length, OVD on both AC and
DC Voltage Digital Output Modules
can be disabled.)
 Architecture of TMR Analog Input Module
On AC Voltage Digital Output
Modules, a faulty switch identified
by the OVD process will cause the
output signal to transition to the
opposite state for a maximum of
half an AC cycle. This transition
might not be transparent to all field
devices. Once a fault is detected, the
module discontinues further itera-
tions of OVD. Each point on an AC
voltage Digital Output module
requires periodic cycling to both the
ON and OFF states to ensure 100%
fault coverage.
Analog Input Modules
On an Analog Input Module, each of
the three legs asynchronously mea-
sures the input signals and places
the results into a table of values.
Each of the three input tables is
passed to its associated Main Pro-
cessor Module using the
corresponding I/O Bus. The input
table in each Main Processor
Module is transferred to its
neighbors across the TriBus. The
middle value is selected by each
Main Processor, and the input table
in each Main Processor is corrected
accordingly. In TMR mode, the
mid-value data is used by the
control program; in duplex mode,
the average is used.
Each Analog Input Module is auto-
matically calibrated using multiple
reference voltages read through the
multiplexer. These voltages deter-
mine the gain and bias that are
required to adjust readings of the
analog-to-digital converter (ADC).
Analog Input Modules and Termina-
tion Modules are available to
support a wide variety of analog
inputs, in both isolated and non-
isolated versions: 0-5 VDC, 0-10
VDC, 4-20 mA, thermocouples
(types K, J, T, E), and Resistive
Thermal Devices (RTDs).
Analog Output Module
The Analog Output Module re-
ceives three tables of output values,
one for each leg from the corre-
sponding Main Processor. Each leg
has its own digital-to-analog con-
verter (DAC). One of the three legs
is selected to drive the analog out-
puts. The output is continuously
checked for correctness by “loop-
back” inputs on each point which
are read by all three microproces-
sors. If a fault occurs in the driving
leg, that leg is declared faulty and a
new leg is selected to drive the field
device. The designation of “driving
leg” is rotated among the legs, so
that all three legs are tested.
9
 Theory of Operation

Communication Capabilities of Tricon Modules

10
Termination Modules
For field wiring of the Tricon High
Density chassis, you can use either
Triconex-supplied termination
assemblies or provide your own
termination cables that match the
Tricon’s panel connectors. A field
termination module is an electrically
passive circuit board to which field
wiring is easily attached. A termina-
tion module merely passes input
signals from the field to an input
module or passes signals generated
by an output module directly to field
wiring, thereby permitting removal
or replacement of the input or output
module without disturbing field
wiring.
In addition, External Termination
Assemblies are available for special-
ized applications. Refer to page 43
for more information.
Communication Modules
By means of the communication
modules described in this section,
the Tricon can interface with
Modbus masters and slaves, other
Tricons in peer-to-peer networks, ex-
ternal hosts running applications
over 802.3 networks, and Honeywell
and Foxboro Distributed Control
Systems (DCS). The Main Proces-
sors broadcast data to the
communication modules across the
communication bus. Data is typi-
cally refreshed every scan; it is
never more than two scan-times old.
Enhanced Intelligent
Communication Module (EICM)—
Supports RS-232 and RS-485 serial
communication with external devices
at speeds up to 19.2 Kbaud. The
EICM provides four serial, opto-
isolated ports which can interface
with Modbus masters, slaves, or
both; or a TriStation. The module
also provides a Centronics-compat-
ible parallel port.
Network Communication Module Advanced Communication Module
(NCM)—This module supports (ACM)—This module acts as an
802.3 networking over a high-speed interface between a Tricon controller
10 Megabit/second data link for the and Foxboro’s Intelligent Automa-
use of Triconex-proprietary proto- tion (I/A) Series DCS. The ACM
cols and applications (described in appears to the Foxboro system as a
the section called “Communication safety node on the I/A Series
Capabilities” later in this document). Nodebus, allowing the Tricon to
In addition, users can write their manage process-critical points
own applications using the TCP-IP/ within the overall I/A DCS environ-
TCP-UDP protocol. ment. The ACM transmits all Tricon
aliased data and diagnostic informa-
Hiway Interface Module (HIM)—
tion to I/A operator workstations in
This module acts as an interface
display formats that are familiar to
between a Tricon controller and
Foxboro operators.
Honeywell’s TDC 3000 Distributed
Control System (DCS) by means of Refer to the section called “Product
the Hiway Gateway and Local Specifications” for specifications of
Control Network (LCN). The HIM the EICM, NCM, SMM and ACM.
enables higher-order devices, such
as computers and operator work-
stations, to communicate with the
Tricon.
Safety Manager Module (SMM)—
This module acts as an interface
between a Tricon controller and
Honeywell’s Universal Control
Network (UCN), one of three princi-
pal networks of the TDC 3000 DCS.
The SMM appears to the TDC 3000
as a safety node on the Universal
Control Network (UCN), allowing
the Tricon to manage process-
critical points within the overall
TDC 3000 environment. The SMM
transmits all Tricon aliased data and
diagnostic information to TDC 3000
operator workstations in display
formats that are familiar to
Honeywell operators.
11
 Theory of Operation

Architecture of Power Supply Subsystem

Power Supply Modules

Each Tricon chassis houses two
Power Modules arranged in a dual-
redundant configuration. Each
module derives power from the
backplane and has independent
power regulators for each leg. Each
can support the power requirements
for all the modules in the chassis in
which it resides, and each feeds a
separate power rail on the chassis
backplane. The Power Modules
have built-in diagnostic circuitry
which checks for out-of-range
voltages and over-temperature
conditions. A short on a leg disables
the power regulator rather than
affecting the power bus.

12
A Tricon system consists of one Main Chassis and
up to fourteen additional chassis.

System Configuration
A B
A Tricon system is composed of a
Main Chassis and up to 14 Expan-
sion or Remote Expansion (RXM)
Chassis. The maximum system size C
is 15 chassis supporting a total of
118 I/O modules and communica-
tion modules that interface with
Modbus devices, other Tricons, and D
external host applications over 802.3
networks, as well as Foxboro and
Honeywell Distributed Control
Systems (DCS).
The following sections provide E
guidelines for chassis layout and
system configuration.

Chassis Layout
Two Power Supplies reside on the
left side of all chassis, one above the
other. In the Main Chassis, the three
Main Processors are immediately to
the right. The remainder of the
chassis is divided into six logical
slots for I/O and communication
modules and one “COM” slot with
no hot spare position. Each logical F
slot provides two physical spaces for
modules, one for the active module
and the other for its optional hot-
spare.
The layout of an Expansion Chassis
is similar to that of the Main Chas-
sis, except that Expansion Chassis
provide eight logical slots for I/O
modules. (The spaces used by the
Main Processors and the COM slot
G H I J K L M N
in the Main Chassis are now avail-
able for other purposes.) A. Memory backup battery F. Redundant Power Modules K. DI module without spare
B. Connectors for terminations G. Three Main Processors L. DO module with hot spare
The Main and Expansion Chassis C. I/O expansion ports H. COM slot* with NCM M. DO module without spare
D. Power terminals I. AI module without spare N. EICM
are interconnected by means of
E. Keyswitch J. DI module with hot spare
triplicated I/O Bus Cables. The
maximum I/O bus cable length Sample Layout of a Tricon Chassis
between the Main Chassis and the
* The COM slot can be configured for the EICM or NCM only.
13
 System Configuration
last Expansion Chassis is normally 30
meters (100 feet), but in restricted
applications the length can be up to
300 meters (1000 feet). (Please
consult your Triconex Customer
Satisfaction representative for
assistance when configuring a
system that exceeds 30 meters of I/O
bus cable length.)
RXM Chassis are used for systems
in which the total cable distance
between the first chassis and the last
chassis exceeds 30 meters (100
feet). Each RXM Chassis houses a
set of three RXM modules in the
same position as the Main Proces-
sors in the Main Chassis. Six
remaining logical slots are available
in an RXM Chassis and one blank
(unused) slot.
On-Line Module Repair
The logical slot arrangement of a
Tricon chassis provides two ways to
repair faulting modules on-line: the
hot spare method and on-line
module replacement.
With the hot spare method, a logical
slot contains two identical I/O
modules. The primary module is
active, and the other module—the
hot spare—is powered but inactive.
The Tricon cycles control between
the two healthy I/O modules approx-
imately every hour, so that each
14 I/O Bus Ports
undergoes complete diagnostics on a
regular basis. If a fault is detected on
the primary module, the Tricon
automatically switches control to the
hot spare module, allowing the sys-
tem to maintain three healthy legs
continuously. The faulty module can
then be removed and replaced.
Alternatively, a module can be re-
placed on-line even when only one I/
O module is normally installed in a
logical slot. If a fault occurs, the
FAULT indicator turns ON, but the
module remains active on two legs. A
replacement module is then inserted
into the unused space in the slot. The
Tricon will grant control to this
second I/O module after it passes a
diagnostic test. Once the replacement
I/O module becomes active, the faulty
I/O module can be removed. This
repair method demonstrates the
Tricon’s ability to automatically
transition from triplicated to dual
control and back again without pro-
cess interruption.
A Tricon system should include at
least one hot-spare module in place
for each type of I/O module in the
system. With this arrangement, the
hot spare modules are tested regularly
and can be used for on-line module
replacement anywhere in the system.
I/O Bus Connections
As shown in the configuration draw-
ing on page 15, each chassis has two
sets of RS-485 I/O Bus Ports (IN &
OUT). Additional chassis' may
branch out from the Main Chassis by
means of the I/O Bus Ports, up to a
maximum of 14. There are six ports—
two sets of three for triplicated serial
communication — located on a panel
in the upper left corner of the
backplane. One set of three I/O Bus
Cables is required for each Expansion
Chassis, and for each RXM Chassis
which houses a Primary RXM module
set. (Remote RXM Chassis are con-
nected to the Primary RXM Chassis
with fiber-optic cables.) Communica-
tion across the I/O Bus Cables (and
the RXM fiber-optic cables) proceeds
at 375 kBaud, the same rate as the
internal I/O bus on each chassis’s
backplane.
System Configuration
Guidelines
The Tricon system is available in two
configurations: the Single Chassis V9
Tricon System and the fully expandable
V9 Tricon System.
Single Chassis Tricon V9 System
For small applications that use no more
than 288 I/O points (based on a typical
selection of digital input and digital
output modules), Triconex offers a con-
figuration called the Single Chassis V9
Tricon System with the following con-
figuration guidelines:
• There is one Main Chassis with a
chassis address of 1.
• The Main Chassis must contain
three Model 3007 Main Processors
with 1 Mbyte SRAM each.
• The Main Chassis must house two
Power Modules.
• The Main Chassis provides six
logical slots for user-selected
modules and one COM slot.
• Expansion and RXM Chassis are
not supported.
To upgrade the Single Chassis V9
System to a fully expandable Tricon
System, the Model 3007 Main Pro-
cessors must be upgraded to Model
3006 Main Processors (with 2
Mbytes SRAM each).

V9 Tricon System
A Tricon System is composed of a
Main Chassis and up to 14 Expan-
sion or Remote Expansion (RXM)
Chassis. The following configura-
tion guidelines apply:
For Main Chassis
• There is one Main Chassis with a
chassis address of 1.
• The Main Chassis must contain
three model #3006 Main Proces-
sors with 2 Megabytes SRAM
each.
• The Main Chassis must house
two Power Modules.
• The Main Chassis provides six
logical slots for user-selected
modules and one COM slot.
Expansion Chassis
• Expansion Chassis are used when
the total I/O Bus cable length for
the system is less than 30 meters
(100 feet) for each leg.
• Each Expansion Chassis must
have a unique address between 2
and 15. This address must not be
used by any other Expansion
Chassis or by an RXM Chassis.
System Configuration with Three Remote Locations
• Each Expansion Chassis must
house two Power Modules. • Each RXM Chassis must have a each up to 12 kilometers (7.5
• One set of triplicated I/O Bus unique address between 2 and 15. miles) away.
Cables is used to interconnect This address must not be used • One RXM Chassis must be
legs A, B and C of the system by any other RXM Chassis or by located at each remote site. This
between Expansion Chassis. an Expansion Chassis. RXM Chassis must house a
• Each Expansion Chassis provides • One RXM Chassis must be Remote RXM Module Set.
eight logical slots. located within 30 meters (100 • A Primary RXM Module Set and
cable-feet) of the Main Chassis. a Remote RXM Module Set are
For RXM Chassis
This RXM Chassis must house connected by 6 fiber-optic
• RXM Chassis must be used the Primary RXM Module Set. cables which transmit and re-
when the total I/O Bus cable Up to 2 Primary RXM Module ceive signals for legs A, B and C
length for the system is greater sets are supported*. of the Tricon system.
than 30 meters (100 feet) for each
• Each Primary RXM Module Set • RXM Chassis can be connected
leg.
can support up to 3 remote sites, to local Expansion Chassis using
I/O Bus Cables.
* For other configurations, please contact Triconex 15
 System Configuration

Module Type Watts Consumed

ACM ......................................................... 15
Analog Input ............................................. 10
Analog Input, Isolated .............................. 15
Analog Input, High Density ..................... 10
Analog Output .......................................... 15
Digital Input, High Density ...................... 10
Digital Input, Single ................................. 10
Digital Input, TMR ................................... 10
Digital Output, AC ................................... 10
Digital Output, DC ................................... 10
Digital Output, Dual ................................. 10
Digital Output, Supervised ....................... 15
EICM ........................................................ 10
HIM .......................................................... 10
Main Processor ......................................... 15
NCM ......................................................... 20
Power Module ......................................... n/a
SMM ......................................................... 20
Thermocouple Input, Isolated ................... 15
Thermocouple Input, Non-Isolated .......... 10
Pulse Input ................................................ 20
RXM ........................................................... 5
Tricon Chassis & Terminations Relay Output ............................................. 15
Mounted in an Enclosure
Chassis Power Limitations
In order to maintain the safety and reliability of the Tricon,
• Each RXM Chassis must contain each system must be configured for operation under a worst-
2 Power Modules. case scenario. These circumstances include operation with
• Each RXM Chassis provides 6 only one functional power supply at 60°C (140°F), ambient.
logical slots for I/O modules and (Refer to page 24 for detailed specifications.) Under these
1 blank (unused) slot. conditions, the power supply is rated to deliver 175 Watts.
Communication Modules The table above lists the logic power consumption per mod-
The following rules apply when ule in Watts.
selecting and installing EICM,
NCM, HIM, SMM and ACM mod-
ules in a Tricon system:
• Up to two logical slots can be • If communication modules are
• A TriStation PC can be con-
configured for SMM modules. A housed in Chassis #2, this chassis
nected to an EICM, NCM or
matched pair of SMMs can be must be connected directly to the
ACM, so at least one of these
installed in both the left and right Main Chassis using I/O COMM
modules must be included in
positions of each logical slot. Cables (Model #9001) rather than
each system.
• Up to two logical slots can be standard I/O Bus Cables.
• One logical slot is available for
configured for HIM modules, and • Chassis #2 must be an I/O Expan-
EICMs, NCMs and ACMs re-
both slots must be in the Main sion Chassis or a Primary RXM
spectively. Matched pairs of
Chassis. Chassis.
these modules can be installed in
• All types of communication
both the left and right positions
modules must be housed in the
of one logical slot.
Main Chassis or in Chassis #2.
• The COM slot can be configured
for the EICM or NCM only.

16
The Tricon supports a comprehensive range of
modules to meet customers’ needs.
The Tricon product family includes a
comprehensive range of modules to
meet users’ needs. To familiarize you
with the various options that
Triconex offers, this section includes:
• a summary of the system
components and their uses
• a table that lists standard products
and their model numbers, with
page references to the full specifi-
cation for each product
• full specifications for each stan-
dard product in the Tricon family
Summary of Tricon
Components
Chassis
• Main Chassis—houses Main
Processors, memory back-up
batteries, communication modules
and I/O modules.
• Expansion Chassis—for addi-
tional I/O modules up to 30
meters (100 feet) away from Main
Chassis. In restricted applications,
operation up to 300 meters (1000
feet) is supported.
• RXM Chassis—for I/O modules
up to 12 kilometers (7.5 miles)
away from the Main Chassis.
• Mechanical Keying—Each slot in
the Tricon is mechanically keyed
to correspond with a certain type
of module. This prevents the
installation of modules into
improper slots.
Specifications for mounting and
enclosure of Tricon chassis are
provided on pages 22 and 23.
Product Specifications
Power Supply Modules
• Provide power to modules in the
Main, Expansion or RXM Chas-
sis. Available in 24 VDC, 115 VAC
and 230 VAC versions. Each
Power Supply’s output rating is
175 W at 60°C (140 °F).
Main Processors
• The Main Processors execute the
system diagnostics and the user-
written control program.
Communication Modules
• Enhanced Intelligent Communi-
cation Module (EICM)—
Supports RS-232 and RS-485
serial communication with
Modbus devices and TriStation.
• Network Communication Module
(NCM)—Supports a number of
Triconex protocols and app-
lications and user-written
applications on 802.3 networks,
including TriStation and TCP-IP/
UDP-IP.
• Safety Manager Module
(SMM)—Acts as an interface
between a Tricon controller and
Honeywell’s Universal Control
Network (UCN), one of three
principal networks of the TDC
3000 DCS.
• Hiway Interface Module (HIM)—
Acts as an interface between a
Tricon controller and Honeywell’s
TDC 3000 Hiway Gateway and
Local Control Network (LCN).
• Advanced Communication Mod-
ule (ACM)—Allows the Tricon
controller to interface with
Foxboro’s Industrial Automation
(I/A) Series DCS and with TriSta-
tion.
Fiber-Optic Remote
Extender Modules (RXM)
• For operation of Expansion
Chassis up to 12 kilometers (7.5
miles) away from the Main
Chassis, with exceptional immu-
nity against electro-static and
electro-magnetic interference.
I/O Modules
• Digital Input Modules—receive
discrete signals of these nominal
voltages: 115 V AC/DC, 48 V AC/
DC, 24 V AC/DC & Pulse Input.
All voltages are available in TMR
modules. Non-TMR modules are
available in 24 V DC and 48 V DC
only.
• Supervised Digital Output
Modules—produce discrete
output signals of these nominal
voltages, with diagnostic cover-
age of the field circuit and load
device: 115 VAC, 120 VDC, 48
VDC & 24 VDC.
• Digital Output Modules—pro-
duce discrete output signals of
these nominal voltages: 115
VAC, 120 VDC, 48 VAC, 48
VDC & 24 VDC. Dual output
modules are also available.
• Analog Input Modules—receive
analog signals of these types: 0-5
VDC, 0-10 VDC and Thermo-
couple types J, K, T & E.
Available in both isolated and
DC-coupled versions.
• Analog Output Module—drives
eight 4-20 mA analog output
signals.
17
 Product Specifications

Standard Products of the Tricon Family

CHASSIS ASSEMBLIES
Description Model No. Refer to:
Single Chassis V9 Tricon System with Three #3007 Main Processors SCV9* page 14
Main Chassis, High Density Configuration 8110 page 15, 21
Expansion Chassis, High Density Configuration 8111 page 15, 21
Remote Expansion Chassis, High Density Configuration 8112 page 15, 21
I/O Bus Expansion Cables (Set of 3) 9000** page 14, 21
I/O-COMM Bus Expansion Cables (Set of 3) 9001 page 14
Blank I/O Slot Panel 8105 page 22

POWER MODULES
120 VAC/VDC - 175watt Power Module 8310 page 24
24 VDC - 175watt Power Module 8311 page 24
230 VAC - 175watt Power Module 8312 page 24

MAIN PROCESSOR MODULE

Enhanced Tricon Main Processor II, 2 Megabytes SRAM 3006 page 25
Enhanced Tricon Main Processor II, 1 Megabyte SRAM 3007 page 25

COMMUNICATION HARDWARE & SOFTWARE

Enhanced Intelligent Communication Module (EICM), Isolated 4119A page 26
Network Communication Module (NCM), 802.3 Port 4329 page 27
Safety Manager Module (SMM), Honeywell UCN Interface 4409 page 28
Hiway Interface Module (HIM), Honeywell Data Hiway Interface 4509 page 29
Advanced Communication Module (ACM), Foxboro I/A Series Nodebus Interface 4609 page 30
Network DDE Server Interface Software 7569-3 page 52, 53
Network Accessory Kit (802.3 thin cable, connectors & terminators) 7600-3 n/a

REMOTE EXTENDER MODULES

Primary RXM, Multi-mode Fiber Optics, Set of 3 Modules 4200-3 page 31
Remote RXM, Multi-mode Fiber Optics, Set of 3 Modules 4201-3 page 31
Primary SRXM, Single-mode Fiber Optics, Set of 3 Modules 4210-3 page 31
Remote SRXM, Single-mode Fiber Optics, Set of 3 Modules 4211-3 page 31

TRISTATION SOFTWARE
TriStation MSW Software Package, Version 9 License (per system) 7109-41 page 51
TriStation 1131 Software Package, Version 9 License (per system) 7202 page 51
TriStation 1131 Software Package, Workstation License (per station) 7242 page 51

* A Single Chassis V9 Tricon System consists of one High Density Main Chassis and three Model #3007 Main Processors.
** I/O Bus Expansion Cables are available in custom lengths. Please contact Triconex for more information.

18
 I/O Modules of the Tricon System

DIGITAL INPUT MODULES

Voltage Description Type Model No. Points Refer to:
115 VAC/VDC Opto-Isolated, Non-Commoned TMR 3501E/3501T 32 page 32
48 VAC/VDC Commoned in Groups of 8, Self-Test TMR 3502E 32 page 32
24 VAC/VDC Commoned in Groups of 8, Self-Test TMR 3503E 32 page 32
24/48 VDC High Density, DC Coupled TMR 3504E 64 page 33
24 VDC Low Threshold with Self-test, Commoned TMR 3505E 32 page 32
24 VDC Single, Opto-Isolated, Commoned Single 3564 64 page 33
Pulse Input Differential, AC Coupled TMR 3511 8 page 34
DIGITAL OUTPUT MODULES
Voltage Description Type Model No. Points Refer to:
115 VAC Opto-Isolated, Non-commoned TMR 3601E/3601T 16 page 35
120 VDC Opto-Isolated, Commoned TMR 3603E/3603T 16 page 35
24 VDC Opto-Isolated, Non-commoned TMR 3604E 16 page 35
48 VDC Opto-Isolated, Non-commoned TMR 3607E 16 page 35
115 VAC Galvanically Isolated, Commoned., Supv. TMR 3611E 8 page 37
48 VDC Galvanically Isolated, Commoned, Supv. TMR 3617E 8 page 37
120 VDC Opto-Isolated, Commoned, Supervised TMR 3623/3623T 16 page 36
24 VDC Opto-Isolated, Commoned, Supervised TMR 3624 16 page 36
24 VDC Opto-Isolated, Commoned Dual 3664 32 page 38
24 VDC Opto-Isolated, Commoned Dual 3674 32 page 38
Relay Output Non-triplicated, Normally Open Non-trip. 3636R 32 page 34
ANALOG INPUT MODULES
Voltage Description Type Model No. Points Refer to:
0-5 VDC Differential, DC Coupled TMR 3700A 32 page 39
0-10 VDC Differential, DC Coupled TMR 3701 32 page 39
0-5, 0-10 VDC Differential, Isolated TMR 3703E 16 page 39
0-5, 0-10 VDC High-Density, Differential, DC Coupled TMR 3704E 64 page 39
Thermocouple Differential, DC Coupled TMR 3706A 32 page 41
Thermocouple Differential, Isolated TMR 3708E 16 page 41
ANALOG OUTPUT MODULES
Voltage Description Type Model No. Points Refer to:
4-20 mA Current Loop, DC Coupled TMR 3805E 8 page 40
4-20 mA & 8-320 mA Current Loop, DC Coupled TMR 3806 6&2 page 40

19
 Product Specifications
Environmental Specifications
Designed for critical applications, the Tricon performs predictably in a hostile industrial environment. The specifications that
follow confirm this built-in reliability. However, due to the number of diverse items that make up a Tricon system, not all of the
listed specifications apply to every item. Please contact Triconex to obtain the specifications for particular items.

Operating Temperature 0 to 60°C (32 to 140°F), ambient*

Storage Temperature with Battery -40 to 75°C (-40 to 167°F)
NOTE
Storage Temperature without Battery -40 to 85°C (-40 to 185°F) Other than the optional conformal
Relative Humidity 5% to 95%, non-condensing coating of all PCB assemblies,
the Tricon is not explicitly
Sinusoidal Vibrations per Axis 2 G @ 10 to 500 Hz protected against dust, corrosive
Shock 15 G for 6-11 ms in each axis atmospheres or falling debris.
The user must provide atmo-
Electrostatic Discharge IEC 801-2, Level 3 (8KV) spheric and airborne-particle
Conducted Susceptibility IEC 801-4, Class 3, Fast Transient/Burst protection by housing the Tricon
in an appropriate NEMA-rated
& IEC 801-5, Level 3, Surge Withstand enclosure.
Radiated Susceptibility IEC 801-3, Level 3
Radiated Emissions** Measured per CISPR 11
* “Ambient” refers to the air temperature measured at the bottom of the chassis.
** Please contact Triconex for emission levels.

International Approvals
The Tricon system is regularly evaluated by third-party agencies and certified to meet the following standards. For additional
details, contact Triconex regarding the appropriate TÜV Report and CSA File.
TÜV Rheinland — TÜV certification ensures, per DIN standards, the functionality of Tricon systems for critical-process
applications requiring maximum safety and uninterrupted operation. The Tricon fulfills the requirements for Class 5 and Class
6 safety equipment as defined in the following documents:
• DIN V VDE 0801/01.90 • DIN VDE 0116/10.89 • EN 61131-2:1995 (Overvoltage Category II)
• DIN V VOE 0801/A1 10/94 • DIN EN 54 Part 2 (Draft/01.90) • IEC 801 Parts 1-5
• DIN V 19250 06/94 • DIN VOE 0110/01.89
Canadian Standards Association (CSA) — CSA/NRTL/C certification verifies the Tricon’s safety when it is attached to a power
distribution system (primary line) and when it operates within specific temperature ranges. The Tricon does not constitute a
fire hazard, and operator and maintenance persons are protected from electric shock when touching or replacing modules. CSA
has certified that the Tricon fulfills the following standards:
• CAN/CSA Standard C22.2 No.0-M91 — General Requirements - Canadian Electrical Code, Part II
• CSA Standard C22.2 No. 0.4-M1982 — Bonding and Grounding of Electrical Equipment/Protective Grounding
• CSA Standard C22.2 No.142-M1987 — Process Control Equipment
• UL Standard No. 508 — Industrial Control Equipment
Factory Mutual Research (FM) — Factory Mutual has certified the V9 Tricon System for use in hazardous environments that
meet Class I, Division 2 requirements.
European Union CE Mark — The CE Mark ensures the electro-magnetic compatibility (EMC) of the Tricon with other pieces
of electrical/electronic equipment. When properly installed, the Tricon fulfills the requirements of the European Union EMC
Directive No.89/336/EEC as defined by the following documents:
• EN 55011:1991, Radiated/Conducted Emissions (updated CISPR 11)
• EN 60801-2:1993, Electrostatic Discharge (updated IEC 801-2)
• prENV 50140:1993, Radiated Susceptibility (updated IEC 801-3)
• prENV 50142:1994, Conducted Susceptibility, Surge Withstand (updated IEC 801-5)
• IEC 801-4, Conducted susceptibility, Fast Transient/Burst
• IEC 801-6, Conducted susceptibility, RFI
• 77B(CO)17, AC Main Tolerance & Interruptions
20
Chassis Options
A Tricon system is made up of one
or more chassis assemblies which
contain I/O and communication
modules. The first chassis of a
system is called the Main Chassis
(Model 8110). To enlarge a system,
Expansion Chassis (Model 8111)
and/or RXM Chassis (Model 8112)
can be added. (For configuration
information, refer to the section
called “System Configuration.”)
I/O Expansion Bus
Each chassis has six RS-485 I/O
expansion bus ports at the top left
corner of the backplane. There are
two sets of ports for Legs A, B, and
C, providing for two triplicated
serial communications paths be-
tween chassis. One set of drop-line
cables is required for each Expan-
sion Chassis and for the RXM
Chassis which houses the Primary
RXM Module set. The standard
length of a cable set (Model 9000) is
6 feet—longer cables are available if
needed.
A 375 Kbaud triplicated I/O bus
transfers data between the I/O
modules and the Main Processors.
A 2 MBaud communication bus runs
Mechanical Specifications
These specifications apply to Main, Expansion and RXM Chassis;
Power Supply Modules; and other modules where indicated.
Overall Dimensions
Chassis Fabrication
Approximate Weights
Main or Expansion Chassis
Power Module
Main Processor
I/O Module
Communication Module
16-point Termination Panel
32-point Termination Panel
Typical Loaded Chassis
between the Main Processors and
the communication modules.
Keyswitch for System Control
The Main Chassis has a four-
position keyswitch which controls
all the chassis in the system. The
keyswitch setting is readable by
Tricon and TriStation system soft-
ware, and by application programs.
Switch settings are: PROGRAM—For program loading
and checkout. Allows control of the
RUN—Normal operation with Tricon system from the TriStation
read-only capability. The Main
software, including Download All
Processors execute the previously- and Download Change. Also allows
loaded application program.
writes to program variables by
Attempts to modify program Modbus masters and external hosts.
variables by TriStation, Modbus
masters or external hosts are re- STOP—Stops reading inputs, forces
jected. However, a control program non-retentive digital and analog
may call gated access functions to outputs to 0, and halts the control
enable external host writes during a program. (Retentive outputs will
designated window of time. retain the value they had before the
keyswitch was turned to STOP.) The
STOP setting is recommended for
installation and service of process-
related equipment, but is not
required for service of the Tricon.
REMOTE—Allows writes to pro-
48.3 cm x 57.8 cm x 45.1 cm gram variables by TriStation,
(19" W x 22.75" H x 17.75" D) Modbus masters and external hosts.
Black zinc-plated & (Download All and Download
welded cold-rolled steel Change by TriStation are not al-
lowed.)
24.5 kg. (54.0 lbs.)
3.3 kg. (7.2 lbs.)
2.1 kg. (4.7 lbs.)
2.1 kg. to 2.7 kg (4.7 to 6.0 lbs.)
2.3 kg. (5.0 lbs.)
.04 kg. (.09 lbs.)
.95 kg. (2.1 lbs.)
72.6 kg. (160 lbs.)—average
21
 Product Specifications
Chassis & Mounting the sides, but sufficient clearance Slot Covers
Specifications must be allowed to fully open their All unused slots in a chassis should
front and rear doors. (Triconex does be filled with Blank I/O Slot Panels
The Tricon system can be rack-
not recommend shipment of the (Model 8105) to minimize exposure
mounted or panel-mounted in an
Tricon system installed in a cabinet to dust and other particulate matter.
industry-standard NEMA enclosure
unless special provisions are made.
as described on the next page.
Please contact the factory for assis-
Cabinets can optionally be equipped
tance if shipping in this manner is
with base and casters. Multiple
necessary.)
cabinets can be bolted together on

NOTE
When mounting Tricon chassis into vented or
non-vented enclosures, the integration
engineer must make provisions for sufficient
heat management.
For environmental temperatures above 22°C,
Triconex recommends the installation of
baffles (Triconex part number 2000361-
001), as shown on page 23. For temperatures
above 40°C, other heat management provi-
sions must be implemented, such as the fol-
lowing:
• Louvers and pagoda top
• Enlarged front and rear louvers with
raised pagoda top
• Lower density filters
• Redundant fans (running all the time)
with appropriate louvers and pagoda
top

Dimensions & Clearances of Tricon Chassis, for Rack & Panel Mounting

22
 Typical Dimensions & Clearances for Chassis Installation with External Terminations

NOTE
This drawing shows a typical set-up for external termination panels—other set-ups are possible. Please contact Triconex for details.

Mounting Tricon Chassis in Enclosures

Triconex will mount Tricon chassis in any of the industry-standard enclosures listed below. (Please contact
Triconex regarding other enclosures, available for additional engineering and documentation charges.) Refer
to page 16 for a photograph of Tricon chassis and terminations mounted in a sample enclosure.

Enclosures Typically Supported by Triconex:*

Width Depth Height
Rittal NEMA 12 800 mm (31.5") 800 mm (31.5") 2,200 mm (86.0")
800 mm (31.5") 800 mm (31.5") 2,000 mm (78.0")

MarkHon NEMA 1 800 mm (31.5") 800 mm (31.5") 2,160 mm (85.0")

*Other sizes are available. Please contact Triconex for more information.

23
 Product Specifications
Power Modules
Each Tricon Chassis is equipped
with two Power Modules—either
one is fully capable of running the
Tricon at full load and rated
temperature. Each Power Module
can be replaced on-line while the
active module acts as a hot spare.
The Power Modules, located on the
lower left side of the chassis,
convert line power to DC power
appropriate for all Tricon modules.
Terminal strips for system
grounding, incoming power and
hard-wired alarms are located on the
lower left corner of the backplane.
Incoming power should be rated for
a minimum of 240 watts per power
supply.
The Power Module alarm contacts
are actuated when:
• The hardware configuration
conflicts with the control
program’s logical configuration
• A module is missing from the
system
• A module fails
• A Main Processor detects a
system fault
• Primary power to a Power Mod-
ule fails
• A Power Module has a “Low
Battery” or “Over Temperature”
warning

Power Module Specifications

Isolation >1000 VAC or 1500 VDC, Input to Output
Input Terminations Protected by safety cover
Accepts four 12-gauge wires (3.310mm2):
neutral, hot, protective earth (chassis ground)
Over-Temp. Sensor Temperature warning monitor—trips when
internal temp. is greater than 83°C (this typically
occurs at ambient temp. 60°C or higher)
Alarm Contacts Normally open, normally closed & common
Each contact supports 120 VAC @ 1 amp
Accepts 12-gauge (3.310mm2) wire
Protected by safety cover
Input Power Required 240 Watts minimum per Power Module
Output Power 175 Watts at 60°C
Output Voltage 6.5 VDC, ±1% under all operating conditions
Output Current 27 amperes maximum at 60°C ambient

Power Module Model 8310 8311 8312

Chassis Type Main/Expansion/RXM Main/Expansion/RXM Main/Expansion/RXM
Nominal Voltage 120 VAC/VDC 24 VDC 230 VAC
Input VAC @ 47-63 Hz 85-140 n/a 185-285
Input VDC 95-180 22-31 n/a
Fuse Rating & Type 5 amperes, time-delay 15 amperes, time-delay 2.5 amperes, time-delay
Output Hold Time 20 ms minimum 2.8 ms minimum 20 ms minimum
(nominal to 0 volts)
Diagnostic Indicators PASS, FAULT, ALARM, PASS, FAULT, ALARM, PASS, FAULT, ALARM,
TEMP, BAT LOW TEMP, BAT LOW TEMP, BAT LOW

24
Main Processor Modules
For fully expandable V9 Tricon sys-
tems, Model 3006 Main Processors
(MPs) offer 2 Mbytes SRAM each.
For Single Chassis V9 Tricon Sys-
tems, Model 3007 MPs offer 1
Megabyte SRAM each.
Three MPs must be installed in every
Tricon Main Chassis. Each MP
independently communicates with its
I/O subsystem and executes the user-
written control program. The three
MPs compare data and execute the
control program every scan.
Physical Description
Each MP operates autonomously
with no shared clocks, power regula-
tors or circuitry. A 32-bit NS32GX32
serves as the primary processor with
two processors managing I/O and
communication subsystems. The
NS32GX32 operates at 25 MHz. The
Communication Processor 80C152
operates at 16 MHz with a data rate
of 2 MBaud, while the I/O Commu-
nication Processor 80C31 operates at
12 MHz with a data rate of 375 Kbaud.
On each MP, a high-speed propri-
etary bus system called TriBus
handles:
• interprocessor communications
• hardware majority voting of all
digital input data
• comparison of control-program
variables
The TriBus uses a fully isolated,
serial communication channel oper-
ating at 4 Mbaud. A direct memory
access controller manages the
synchronization, transfer, voting
and data correction independently of
user applications or executive soft-
ware.
An MP’s SRAM is used for the
user-written control program, SOE
data, I/O data, diagnostics and
communication buffers. User
memory is regularly validated by the
TriBus hardware-voting circuitry.
Sequence of Events (SOE)
During each scan, the MPs inspect
designated discrete variables for
state changes known as events.
When an event occurs, the MPs save
the variable’s current state and time
stamp in a buffer which is part of an
SOE block. The user configures
SOE blocks with TriStation and can
retrieve event data with the SOE
Data Retrieval Utility. The SOE
User’s Manual provides details.
Time Synchronization
If multiple Tricon systems are con-
nected by means of NCMs, the Time
Synchronization capability ensures
that a consistent time base is main-
tained. This is a necessity for
effective SOE time-stamping in a
multiple-Tricon environment. Please
refer to page 63 for more information.
Diagnostics
Extensive diagnostics validate the
health of each MP, I/O module and
communication channel. Transient
faults are recorded and masked by
the hardware majority-voting cir-
cuit. Persistent faults are diagnosed
and the errant module is hot-re-
placed. MP diagnostics:
• verify fixed-program memory
and static RAM
• test all basic processor and
floating-point instructions and
operating modes
• verify the shared memory
interface with each I/O commu-
nication processor and leg
• verify handshake signals and
interrupt signals between the
CPU, each I/O communication
processor and leg
• check each I/O communication
processor and leg microproces-
sor, ROM, shared memory
access and loopback of RS-485
transceivers
• verify the TriClock and TriBus
interfaces
An RS-232 port at the bottom of
each MP can be used by Triconex
personnel for diagnostic analysis.
This port is fully isolated (500 VDC,
maximum) to provide protection
against ground faults.

Indicators for Main Processor—Models 3006 & 3007

PASS Module has passed self-diagnostic tests.
FAULT Module has a fault and should be replaced.
ACTIVE Module is executing the user-written control program.
MAINT1 High soft-error count. Module should be replaced to avoid hard failure.
MAINT2 High soft-error count. Module should be replaced to avoid hard failure.
COM TX Transmitting data across COMM bus.
COM RX Receiving data from COMM bus.
I/O TX Transmitting data across I/O bus.
I/O RX Receiving data from I/O bus.
25
 Product Specifications
Enhanced Intelligent
Communication Module
The Model 4119A Enhanced Intelli-
gent Communication Module
(EICM) allows the Tricon to com-
municate with Modbus masters and
slaves, TriStation and printers.
For Modbus connections, the EICM
user can select the RS-232 point-to-
point interface for one master and
one slave, or the RS-485 interface for
one master and up to 32 slaves. The
RS-485 network trunk can be one or
two twisted-pair wires up to a maxi-
mum of 4,000 feet (1,200 meters).
Each EICM contains four serial ports
and one parallel port which can
operate concurrently. Each serial
port can be configured as a Modbus
master with up to seven Modbus
masters per Tricon. A single Tricon
system supports a maximum of two
EICMs, which must reside in one
logical slot. (Hot sparing is not
available for the EICM.) Each serial
port is uniquely addressed and
supports either the Modbus or
TriStation interface. Modbus com-
munication can be performed in
either RTU or ASCII mode. The
parallel port provides a Centronics
interface to a printer.
EICM Specifications
Model Number
Serial ports
Parallel ports
Port isolation
Protocol
Modbus functions supported
Communication speed
Diagnostic LEDs
26
Each EICM supports an aggregate
data rate of 57.6 Kbaud (for all four
serial ports).
Programs for the Tricon use variable
names as identifiers but Modbus
devices use numeric
addresses called aliases. Therefore
an alias must be assigned to each
Tricon variable name that will be
read by or written to a Modbus
device. An alias is a five-digit
number which represents the
Modbus message type and the
address of the variable in the Tricon.
An alias is assigned using TriStation
MSW’s Dictionary Editor screen or
TriStation 1131’s Tricon Point
Connections window.
Any standard Modbus device can
communicate with the Tricon
through the EICM, provided that
aliases are assigned to the Tricon
variables. Alias numbers must also
be used when host computers access
the Tricon through other communi-
cation modules, such as the NCM.
Refer to the section called “Commu-
nication Capabilities” starting on
page 51 for more information.
4119A, Isolated
4, RS-232C or RS-485
1, Centronics, isolated
500 VDC
TriStation, Modbus
01 — Read Coil Status
02 — Read Input Status
03 — Read Holding Registers
04 — Read Input Registers
05 — Modify Coil Status
06 — Modify Register Content
07 — Read Exception Status
08 — Loopback Diagnostic Test
15 — Force Multiple Coils
16 — Preset Multiple Registers
1200, 2400, 9600, or 19,200 Baud
PASS, FAULT, ACTIVE
TX (Transmit) — 1 per port
RX (Receive) — 1 per port
Network Communication
Module
With a Model 4329 Network Com-
munication Module (NCM)
installed, the Tricon can communi-
cate with other Tricons and with
external hosts over 802.3 networks.
The NCM supports a number of
Triconex proprietary protocols and
applications as well as user-written
applications, including those that use
TCP-IP/UDP-IP protocol.
The NCM provides two BNC
connectors as ports: NET1 supports
Peer-to-Peer and Time Synchroniza-
tion protocols for safety networks
comprised of Tricons only. NET2
supports open networking to external
systems using Triconex applications
such as TriStation, SOE, SER and
DDE Server or user-written applica-
tions. Please refer to the section
called “Communication Capabilities”
starting on page 51 for more informa-
tion about Triconex protocols and
applications.
Two NCMs can reside in one logical
slot of the Tricon chassis, but they
will function independently, not as
hot spares. External hosts can read
or write data only to Tricon vari-
ables to which Alias numbers have
been assigned. (Refer to the EICM
description on page 26 for more
information about Aliases.)
The NCM is compatible with the
IEEE 802.3 electrical interface and
operates at communication speeds
up to 10 Mbaud. The NCM con-
nects with external host computers
by means of coaxial cable (RG58) at
typical distances up to 185 meters
(607 feet). Distances up to 4,000
meters (2.5 miles) are possible using
repeaters and standard (thick-net or
fiber-optic) cabling.
The Main Processors typically
refresh data on the NCM once per
scan.

NCM Specifications
Model Number
IEEE 802.3 ports
External Transceiver Ports
Serial port
Port Isolation
Protocol
Functions supported
Communication speed
Status indicators
4329
2, BNC connectors, RG58 50-ohm thin cable
2, 15-pin “D” connectors
1, RS-232 compatible
500 VDC
Tricon System-Access Application Protocol
(TCP(UDP)/IP/802.3)
TRICON_DATA (Frame Type 1)
TRICON_DATA_REQ (Frame Type 2)
WRITE_TRICON_DATA (Frame Type 3)
WRITE_TRICON_DATA_RSP (Frame Type 4)
READ_TRICON_CLOCK (Frame Type 5)
READ_TRICON_CLOCK_RSP (Frame Type 6)
SET_TRICON_CLOCK (Frame Type 7)
SET_TRICON_CLOCK_RSP (Frame Type 8)
READ_TRICON_DATA (Frame Type 11)
READ_TRICON_RSP (Frame Type 12)
10 MBaud (for 802.3 ports)
PASS, FAULT, ACTIVE
TX (Transmit) — 1 per port
RX (Receive) — 1 per port

27
 Product Specifications
Safety Manager Module
The Model 4409 SMM* acts as an
interface between a Tricon controller
and Honeywell’s Universal Control
Network (UCN), one of three princi-
pal networks of the TDC 3000
Distributed Control System. Appear-
ing to the Honeywell system as a
safety node on the UCN, the SMM
communicates process information
at full network data rates for use
anywhere on the TDC 3000. The
SMM transmits all Tricon aliased
data (including system variables)
and diagnostic information to opera-
tor workstations in display formats
that are familiar to Honeywell
operators.
The SMM makes the following
functions available to the TDC
3000:
• Handles critical I/O points and
passes results to the DCS
• Processes Tricon alarms and
propagates them to user-defined
DCS destinations (consoles,
printers, etc.)
SMM Specifications
Model Number
UCN ports
UCN data rate
Status indicators
Power Module load
Isolation
* For V9 systems, limited Tricon diagnostic information is available to the Honeywell
operator by means of the SMM. Please contact Triconex for details.
28
• Reads/writes aliased data to
satisfy DCS requests
• Reads Tricon diagnostics for
display by the DCS
• Write protection to lock out
changes to the Tricon safety
system from all TDC 3000
sources
• Time synchronization from the
DCS master clock
• Peer-to-Peer communication for
plants with many Tricon safety
systems, each containing an
SMM—the DCS can use shared
data to alert downstream Tricons
of significant process changes
• Sequence of Events—transmits
Tricon event data to Universal
Stations for display or History
Modules for recording, to help
determine the cause of plant trips
and increase process up-time
• Hot spare capability for uninter-
rupted communication with
Honeywell networks
4409
2 isolated (AC coupled)
5 MBytes per second
PASS (Module Status)
FAULT (Module Status)
ACTIVE (Module Status)
LOW BATT (Low Battery)
SPARE RDY (Hot Spare Ready)
UCN A (UCN Port A Active)
UCN B (UCN Port B Active)
XMIT (SMM Transmitting)
STATUS (Module Node & Diagnostic Info.)
< 20 watts
500 VDC
Hiway Interface Module The HIM provides eight Hiway
The Model 4509 Hiway Interface addresses, implements the same slot
Module (HIM) acts as an interface structure as the DHP, and typically
between a Tricon controller and refreshes all data in less than 0.5
Honeywell’s TDC 3000 control seconds. The hot spare feature
system by means of the Hiway allows on-line replacement of a
Gateway and Local Control Net- faulty module or continuous backup
work (LCN). The HIM can also to an active module.
interface with Honeywell’s older
TDC 2000 control system by means
of the Data Hiway.
The HIM enables higher-order
devices on the LCN or Data Hiway,
such as computers and operator
workstations, to communicate with
the Tricon. The HIM allows redun-
dant BNC connections directly to
the Data Hiway and has the same
functional capacity as four extended
Data Hiway Port (DHP) addresses.

HIM Specifications
Model Number 4509
Data Hiway channels 2 isolated (AC coupled)
Poll response switches 2 per channel
Baud rate 250 Kbaud
Status indicators PASS (Module Status)
FAULT (Module Status)
ACTIVE (Module Status)
ON LN (HIM On-line)
H I/F (Hiway Interface)
CAL UP (Call-up Received)
CH A (Channel A Active)
CH B (Channel B Active)
XMIT (HIM Transmitting)
STD BY IN (Standby Module Inserted)
STD BY READY (Standby Module Ready)
Power Module load < 10 watts
Isolation 500 VDC

29
 Product Specifications
Advanced Communication
Module (ACM)
The Model 4609 ACM acts as an
interface between a Tricon controller
and Foxboro’s Intelligent Automa-
tion (I/A) Series system, appearing
to the Foxboro system as a safety
node on the I/A Series Nodebus.
The ACM communicates process
information at full network data rates
for use anywhere on the I/A Series
system, transmitting all Tricon
aliased data (including system
variables and system aliases) and
diagnostic information to operator
workstations in display formats that
are familiar to Foxboro operators.
The ACM makes the following
functions available to the I/A Series:
• Handles critical I/O points and
passes results to the I/A Series
using the Object Management
Database (OMDB)
• Processes Tricon alarms and
propagates them to user-defined
I/A Series destinations (consoles,
printers, etc.)
• Propagates Tricon alarms as
I/A Series system messages
• Reads/writes aliased data to
satisfy I/A Series requests
• Time synchronization from the
I/A Series environment
• Reads Tricon diagnostics for
display by the I/A Series work-
station
• Write protection to lock out
changes to the Tricon safety
system from all I/A Series
sources
• Hot spare capability for uninter-
rupted communication with the
I/A Series Nodebus
The ACM also supports the follow-
ing Triconex protocols and
applications on external host PCs
connected to a separate BNC port
(labeled “TS/TSAA”):
• Tristation protocol for the TriSta-
tion Programming System
• TSAA protocol for Triconex
applications
• TSAA/TCP(UDP)IP for user-
written applications on external
hosts

ACM Specifications—Model 4609

Nodebus ports
BNC connector 1 for RG58 50-ohm thin cable (reserved)
15-pin D connector 1 for AUI cable to DNBI
9-pin RS-423 connector 1 for Control Bus to DNBI
TS/TSAA port 1 BNC connector for RG58 50-ohm
thin cable to 802.3 network
9-pin serial ports RS-232/RS-485 protocol (reserved)
Port isolation 500 VDC (802.3 & RS-232 ports)
Communication speeds
BNC & 15-pin D connectors 10 Mbaud
9-pin Nodebus connector 2400 baud
Status indicators
Module status PASS, FAULT, ACTIVE
Nodebus/standby activity ONLINE & SBRDY
Port activity TX & RX—1 each per port
Power module load < 20 watts

30
RXM Modules
RXM modules and chassis allow I/O
modules to be located several
kilometers away from the Main
Chassis. RXM module sets, consist-
ing of three identical modules, serve
as repeater/extenders of the Tricon I/
O bus and provide ground loop
isolation. A Primary RXM Module
Set supports three remote loca-
tions—the Primary RXM Module
Set is connected to three Remote
RXM Module Sets housed in remote
chassis. Please refer to the “System
Configuration” section for informa-
tion about configurations that use
RXMs.
RXM sets are available for fiber-
optic cables with a communication
rate of 375KBaud. These sets pro-
vide maximum immunity against
electro-static and electro-magnetic
interference, and support configura-
tions with optical modems and
fiber-optic point-to-point cabling.
Remote sites can be located as far as
7.5 miles (12 kilometers) from the
primary site.
The sample wiring diagram at right
illustrates the cabling for three legs
of a remote location. The cables are
uni-directional—for each leg, one
cable carries data transmitted from
the Primary RXM to the Remote
RXM, and the other cable carries
data received by the Primary RXM
from the Remote RXM. A pair of
modules must be wired for each of
the three legs, amounting to a total
Sample Wiring for One Remote Location
of six cables for each remote
location. NOTE: The selection and installation of fiber-optic cabling requires specialized knowledge,
training and tools. Triconex recommends hiring a fiber-optic specialist to handle these tasks.

Specifications for RXM Modules

RXM Model 4200-3 4201-3 4210-3 4211-3
RXM Chassis Location Primary Remote Primary Remote
Cable Type Multi-mode Multi-mode Single-mode Single-mode
Cable Length Limit 2 kilometers (1.2 miles) 2 kilometers (1.2 miles) 12 kilometers (7.5 miles) 12 kilometers (7.5 miles)
Connectors 6/remote site 6 6/remote site 6
Remote Sites Supported 3 n/a 3 na
Modem Ports Fiber Optic with Fiber Optic with Fiber Optic with Fiber Optic with
ST Connectors ST Connectors ST Connectors ST Connectors
Diagnostic LEDs PASS, FAIL, ACTIVE, PASS, FAIL, ACTIVE, PASS, FAIL, ACTIVE, PASS, FAIL, ACTIVE,
TX, RX1, RX2, RX3 TX, RX1, RX2, RX3 TX, RX1, RX2, RX3 TX, RX1, RX2, RX3
31
 Product Specifications
TMR Digital Input Modules
Each TMR Digital Input (DI) Module
has three isolated input legs which
independently process all data input
to the module. A microprocessor on
each leg scans each input point,
compiles data, and transmits it to the
Main Processors upon demand.
Then input data is voted at the Main
Processors just prior to processing
to ensure the highest integrity. All
critical signal paths are 100%
triplicated for guaranteed safety and
maximum availability. Each leg
conditions signals independently
and provides optical isolation
between the field and the Tricon.
All TMR Digital Input Modules
sustain complete, ongoing diagnos-
tics for each leg. Failure of any
diagnostic on any leg activates the
module’s FAULT indicator which in
turn activates the chassis alarm
signal. The FAULT indicator points
to a leg fault, not a module failure.
The module is guaranteed to operate
properly in the presence of a single
fault and may continue to operate
properly with certain kinds of mul-
tiple faults.
Models 3502E and 3503E can self-
test to detect “stuck ON” conditions
where the circuitry cannot tell
whether a point has gone to the OFF
state. Since most safety systems are
set up with a “de-energize-to-trip”
capability, the ability to detect OFF
points is an important feature. To
test for “stuck ON” inputs, a switch
within the input circuitry is closed
to allow a zero input (OFF) to be
read by the optical isolation cir-
cuitry. The last data reading is
frozen in the I/O communication
processor while the test is running.
All TMR Digital Input Modules
support hot spare functionality, and
require a separate Field Termination
Assembly with a cable interface to
the Tricon backplane. Each module
is mechanically keyed to prevent
improper installation in a configured
chassis.
The following is a summary of specifi-
cations for TMR Digital Input Modules.
See the Tricon Planning & Installation
Guide for details.

Model Number 3501E/3501T 3502E 3503E 3505E

Type TMR TMR with Self-Test TMR with Self-Test TMR, Low Threshold

Voltage 115 VAC/VDC 48 VAC/VDC 24 VAC/VDC 24 VDC

Points 32, non-commoned, 32, commoned 32, commoned 32, commoned

isolated in groups of 8 in groups of 8 in groups of 8

AC Range/DC Range 90-155 VAC/VDC 35-95 VAC/VDC 20-42.5 VAC/VDC 20-42.5 VDC

Maximum Voltage 155 VAC/VDC 95 VAC/VDC 42.5 VAC/VDC 42.5 VDC

Switching Level
OFF to ON > 86 VAC/VDC > 32 VAC/VDC > 18 VAC/VDC > 12 VDC
ON to OFF < 28 VAC/VDC < 11 VAC/VDC < 6 VAC/VDC < 4 VDC

Nominal Turn-On 6-9 mA 6-9 mA 6-9 mA 3 mA to 5 mA

Typical Hysteresis 32 VAC/VDC 7 VAC/VDC 4 VAC/VDC 2 VDC

Input Delay
OFF to ON/ON to OFF < 8 ms/< 15 ms < 8 ms/< 15 ms < 8 ms/< 15 ms < 8 ms/< 15 ms

Point Isolation 1500 VDC/ 2500 VDC* 1500 VDC 1500 VDC 1500 VDC

Nominal Input Impedance > 8.5 KΩ > 2.9 KΩ > 1.25 KΩ > 1.25 KΩ

Nominal Field Pwr Load

per ON point 1.5 Watts 1.0 Watt 0.5 Watt 0.5 Watt
@ max. field voltage 2.9 Watts 3.2 Watts 1.5 Watt 1.5 Watts

Diagnostic Indicators
Input Status 1 per point 1 per point 1 per point 1 per point
Module Status PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE

Stuck Test n/a ON ON ON

Color Code Red Dark Red Dark Red Dark Red

32 * For 3501T
64-point Digital Input
Modules
Each 64-point Digital Input (DI)
Module has three isolated legs
which independently process all data
input to the module. A microproces-
sor on each leg scans each input
point, compiles data and transmits it
to the Main Processors on demand.
Then input data is voted at the Main
Processors just prior to processing to
ensure the highest integrity.
All Digital Input Modules sustain
complete, ongoing diagnostics for
each leg. A failure on any leg acti-
vates the module’s FAULT indicator
which in turn activates the chassis
alarm. A TMR module is guaranteed
to operate properly in the presence of
a single fault and may operate
properly with certain kinds of mul-
tiple faults. A single module
operates properly in the presence of
most faults, but stuck-ON and
stuck-OFF faults are exceptions.
All Digital Input Modules support
hot spares and require a separate
Field Termination Assembly with a
cable interface to the Tricon
backplane. Each module is mechani-
cally keyed to prevent improper
installation in a chassis.
The Model 3504E High Density
Digital Input Module continuously
verifies the ability of the Tricon to
detect transitions to the opposite
state. On this TMR module, all
critical signal paths are 100% tripli-
cated for guaranteed safety and
maximum availability. Each leg
conditions signals independently
between the field and the Tricon.
The Single Digital Input Module
(Model 3564) is optimized for
safety-critical applications where
low cost is more important than
maximum availability. On single
modules, only those portions of the
signal path which are required to
ensure safe operation are triplicated.
Special self-test circuitry detects all
stuck-ON and stuck-OFF fault
conditions in less than half a second.
If a single module detects an input
fault, it reports that point as OFF,
which may cause a glitch during
switch-over to a hot spare.
The following is a summary of specifica-
tions for 64-point Digital Input Modules.
See the Tricon Planning & Installation
Guide for details.

Model Number 3564 3504E

Type Single TMR
Voltage 24 VDC 24 or 48 VDC*

Points 64, commoned 64, commoned, DC coupled

DC Range 15-30 VDC 20-72 VDC
Maximum Voltage 36 VDC 72 VDC
Switching Level 24 V 48 V
OFF to ON > 15 VDC >18 VDC >32 VDC
ON to OFF < 6 VDC < 6 VDC <11 VDC
Nominal Turn-On 2-3 mA negligible
Typical Hysteresis 4 VDC 4 VDC/7 VDC
Input Delay
OFF to ON/ON to OFF < 2 ms/< 2 ms < 10 ms/< 10 ms
Minimum Point Isolation 1500 VDC n/a
Nominal Input Impedance > 3.0 KΩ > 30 KΩ
Nominal Field Power Load
per ON point .0.2 Watt negligible
@ maximum field voltage 0.5 Watts negligible
Diagnostic Indicators
Input Status 1 per point 1 per point
Module Status PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE

Stuck Test ON & OFF ON & OFF

Color Code Dark Red Dark Red

* The voltage is selected using the TriStation software.

33
 Product Specifications
Pulse Input Module
The Pulse Input (PI) Module
provides eight very sensitive, high-
frequency inputs. It is optimized for
use with non-amplified magnetic
speed sensors common on rotating
equipment such as turbines or
compressors. The module senses
voltage transitions from magnetic
transducer input devices. The transi-
tions are accumulated during a
selected window of time (rate
measurement), and the resulting
count is used to generate a
frequency or RPM which is
transmitted to the Main Processors.
The pulse count is measured to 1
microsecond resolution.
The Pulse Input Module includes
three isolated input legs. Each input
leg independently processes all data
input to the module and passes the
data to the Main Processors, where
it is voted just prior to processing
to ensure the highest integrity.
Model Number
Type
Input Signals
Resolution
Accuracy
Input Characteristics (AC coupled, balanced differential)
Update Rate
Each module provides complete
ongoing diagnostics on each leg.
Failure of any diagnostic on any leg
activates the module’s FAULT
indicator, which in turn activates the
chassis alarm signal. The module’s
FAULT indicator merely indicates a
leg fault, not a module failure. The
module is guaranteed to operate
properly in the presence of a single
fault and may continue to operate
properly with certain kinds of
multiple faults.
The Pulse Input Module supports
hot sparing, and like all I/O mod-
ules, requires a separate Field
Termination Assembly with a cable
interface to the Tricon backplane.
WARNING
WARNING: The Pulse Input Mod-
ule does not provide a totalization
capability—it is optimized for
measuring the speed of rotation
equipment.
3511
TMR
8, non-commoned
16 bits
1000 Hz to 20,000 Hz, ± 0.01%
25 ms, typical
Relay Output Module
The Model 3636R Relay Output
(RO) Module is a non-triplicated
module for use on non-critical
points which are not compatible
with “high-side” solid-state output
switches. An example is interfacing
with annunciator panels. The Relay
Output Module receives output
signals from the Main Processors on
each of three legs. The three sets of
signals are then voted, and the voted
data is used to drive the 32 indi-
vidual relays.
Each output has a loopback circuit
which verifies the operation of each
relay switch independently of the
presence of a load, while ongoing
diagnostics test the operational
status of the module. Failure of any
diagnostic activates the FAULT
indicator, which in turn activates the
chassis alarm.
The Relay Output Module comes
with normally open (NO) contacts. It
supports hot spare functionality and
requires a separate Field Termina-
tion Assembly with a cable interface
to the Tricon backplane.
Model Number 3636R
Type Non-triplicated
Points 32, non-comm

Impedance (load) > 8 KΩ, 20 KΩ typical Voltage Range 155 VAC/VDC,

maximum
Common Mode Range -100 VDC to +100 VDC peak-to-peak
Current Load 2A, maximum
Normal Mode Range 1.5 V to 200 V peak-to-peak
Switching Power, 2000 VA, 150
Overrange Protection ±150 VDC, continuous Resistive watts maximum
Hysteresis 150 millivolts, typical Point Isolation 1500 VDC,
Wave Shape sine, square, pulse, etc. minimum
Fuses 1 per output
Duty Cycle 10% to 90%
(2.5A fast-acting)
Frequency 20 Hz to 20,000 Hz
Diagnostic Indicators
Current Range 0-20 mA (250-ohm shunt) Output Status 1 per point
Diagnostic Indicators (ON=true) Module Status PASS, FAULT,
Input status 1 per point ACTIVE
Module Status PASS, FAULT, ACTIVE Output Contact Normally Open
Color Code Light Purple Color Code Silver Blue

34
TMR Digital Output
Modules
A TMR Digital Output (DO) Mod-
ule receives output signals from the
Main Processors on each of three
legs. Each set of three signals is then
voted by special quadruplicated
output circuitry on the module. The
circuitry produces one voted output
signal and passes it to the field
termination. The quadruplicated
voter circuitry provides multiple
redundancy for all critical signal
paths, guaranteeing safety and
maximum availability.
Each TMR Digital Output Module
has a voltage-loopback circuit which
verifies the operation of each output
switch independently of the presence
of a load and determines whether
latent faults exist. Failure of the
detected field voltage to match the
commanded state of the output point
activates the LOAD/FUSE alarm
indicator.
In addition, ongoing diagnostics are
performed on each leg and circuit of
a TMR Digital Output Module.
Failure of any diagnostic on any leg
activates the module’s FAULT
indicator, which in turn activates the
chassis alarm signal. The module’s
FAULT indicator merely indicates a
leg fault, not a module failure. The
module is guaranteed to operate
properly in the presence of a single
fault and may continue to operate
properly with certain kinds of mul-
tiple faults.
All TMR Digital Output Modules
support hot spare functionality,
which allows on-line replacement of
a faulty module or continuous
backup to an active module. Each
module is mechanically keyed to
prevent improper installation in a
configured chassis.
Like every I/O module, each TMR
Digital Output Module requires a
separate Field Termination Assem-
bly with a cable interface to the
Tricon backplane. Digital outputs
are designed to source the current to
field devices, so field power must be
wired to each output point on the
field termination.
The following is a summary of specifi-
cations for the Digital Output Modules.
See the Tricon Planning & Installation
Guide for details.

Model Number 3601E/3601T 3603E/3603T 3607E 3604E

Nominal Voltage 115 VAC 120 VDC 48 VDC 24 VDC

Type TMR TMR TMR TMR

Output Signals 16, non-commoned 16, commoned 16, non-commoned 16, non-commoned

Voltage Range 80-155 VAC 90-150 VDC 44-80 VDC 22-45 VDC

Voltage Drop* < 3V, typical < 1.5V, typical < 3V, typical < 4V , typical

Current Ratings, 2A per point 0.8A per point 1A per point 2A per point
Maximum 12A surge/cycle 4A surge/10 ms 5A surge/10 ms 10A surge/10 ms
Load Leakage 2 mA maximum @ 60 Hz 2 mA maximum 2 mA maximum 2 mA maximum

Chassis Leakage 4 mA maximum @ 60 Hz n/a n/a n/a

Fuses (on Field 1 per output, 1 per output, 1 per output, 1 per output,
Termination) 3A fast-acting 1.0A fast-acting 1.25A fast-acting 2.5A fast-acting
Point Isolation 1500 VDC/ 2500 VDC** 1500 VDC/ 2500 VDC*** 1500 VDC 1500 VDC

Diagnostic Indicators
ON or OFF state 1 per point 1 per point 1 per point 1 per point
Module Status PASS, FAULT, PASS, FAULT, PASS, FAULT, PASS, FAULT,
ACTIVE, ACTIVE, ACTIVE, ACTIVE,
Field Alarm LOAD/FUSE LOAD/FUSE LOAD/FUSE LOAD/FUSE
Color Code Green Blue Light Blue Dark Blue

* WARNING—The voltage drop may be significantly higher in some applications.

Refer to the Tricon Planning & Installation Guide for detailed specifications.
** For 3601T
*** For 3603T
35
 Product Specifications
16-point Supervised Digital
Output Modules
Designed for the most critical applica-
tions, Supervised Digital Output
(SDO) Modules meet the needs of
systems whose outputs remain in a
single state for extended periods of
time (in some applications, for years).
An SDO Module receives output
signals from the Main Processors on
each of three legs. Each set of three
signals is then voted upon by a fully
fault-tolerant quadruplicated output
switch whose elements are power
transistors, so that one voted output
signal is passed to the field termina-
tion.
Each SDO module has voltage and
current loopback circuitry coupled
with sophisticated on-line diagnos-
tics that verify the operation of each
output switch, the field circuit and
the presence of a load. This design
provides complete fault coverage
without the need to influence the
output signal.
The modules are called “supervised”
because fault coverage is extended
to include potential field problems.
In other words, the field circuit is
supervised by the SDO Module so
that the following field faults can be
detected:
• loss of power or blown fuse
• open or missing load
• a field short resulting in the load
being energized in error
• a shorted load in the de-
energized state
Failure to detect field voltage on any
output point energizes the power
alarm indicator. Failure to detect the
presence of a load energizes the load
alarm indicator.
All SDO Modules support hot
spares and require a separate Field
Termination Assembly with a cable
interface to the Tricon backplane.
The following is a summary of specifi-
cations for 16-point SDO Modules.
See the Tricon Planning & Installation
Guide for details.

Model Number 3623/3623T 3624

Nominal Voltage 120 VDC 24 VDC
Type TMR, Supervised TMR, Supervised
Output Signals 16, commoned 16, commoned
Voltage Range 90-150 VDC 16-30 VDC
Maximum Voltage 160 VDC 36 VDC
Voltage Drop < 1.5 VDC, typical < 1.5 VDC, typical
Power Module Load < 10 Watts < 10 Watts
Current Ratings, Maximum 0.8A per point 0.7A per point
4A surge per 10 ms 4.8A surge per 10 ms
Minimum Required Load 30 mA 30 mA
Load Leakage 4 mA maximum 4 mA maximum
Fuses (on Field Termination) 1A fast-acting n/a—self-protecting
Point Isolation 1500 VDC/ 2500 VDC* 1500 VDC
Diagnostic Indicators
ON or OFF State 1 per point 1 per point
Module Status PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE
Field Alarm POWER, LOAD (1 per point) POWER, LOAD (1 per point)
Color Code Steel Blue Turquoise Green

* For 3623T

36
8-point Supervised Digital
Output Modules
Designed for the most critical applica-
tions, Supervised Digital Output
(SDO) Modules meet the needs of
systems whose outputs remain in a
single state for extended periods of
time (in some applications, for years).
An SDO Module receives output
signals from the Main Processors on
each of three legs. Each set of three
signals is then voted upon by a fully
fault-tolerant quadruplicated output
switch whose elements are mechani-
cal power relays, so that one voted
output signal is passed to the field
termination.
Each SDO module has voltage and
current loopback circuitry coupled
with sophisticated on-line diagnos-
tics that verify the operation of each
output switch, the field circuit and
the presence of a load. This design
provides complete fault coverage
without the need to influence the
output signal.
The modules are called “supervised”
because fault coverage is extended
to include potential field problems.
In other words, the field circuit is
supervised by the SDO Module so
that the following field faults can be
detected:
• loss of power or blown fuse
• open or missing load
• a field short resulting in the load
being energized in error
• a shorted load in the de-
energized state
Failure to detect field voltage on any
output point energizes the power
alarm indicator. Failure to detect the
presence of a load energizes the load
alarm indicator. When an optional
secondary power supply is used,
shorted loads in the OFF state can be
detected. (This feature is not pro-
vided on Model 3611E, an AC
module.)
All SDO Modules support hot
spares and require a separate Field
Termination Assembly with a cable
interface to the Tricon backplane.

The following is a summary of specifications for 8-point SDO Modules. See the Tricon Planning & Installation Guide for details.
Model Number 3611E 3617E
Nominal Voltage 115 VAC 48 VDC
Type TMR, Supervised TMR, Supervised
Points 8, commoned 8, commoned
Voltage Range 90-155 VAC 36-72 VDC
Max. Switching Power 2000 VA (resistive) 150 W (resistive)
ON State Voltage Drop* < 2V, typical < 2V, typical
Current Ratings, Max. 2A per point 1A per point
10A/AC cycle 5A/10 ms
Minimum Required Load 50 mA 100 mA
Voltage Range of n/a 5.00 VDC
Secondary Power Supply ± .25 VDC
Chassis Leakage 1mA max. @ 60 Hz n/a
Load Leakage 4 mA max. 4 mA max.
Fuses (on Field Term.) 1 per output 1 per output
(2.5A fast-acting) (1.25A fast-acting)
Point Isolation 1500 VDC, min. 1500 VDC, min.
Diagnostic Indicators
Output Status POINT, PWR, LOAD POINT, PWR, LOAD
Module Status PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE

Color Code Deep Green Mint Green

* WARNING
WARNING—The voltage drop may be significantly higher in some applications. Refer to the Tricon Planning &
Installation Guide for detailed specifications.

37
 Product Specifications
Dual Digital
Output Module
The Dual Digital Output (DDO)
Modules receive output signals from
the Main Processors along a single
parallel or series path, and applies a
2-out-of-3 voting process individu-
ally to each switch. The voting
produces one output signal which is
then passed to the field termination.
While the quadruplicated output
circuitry on TMR modules provides
multiple redundancy for all critical
signal paths, dual circuitry provides
just enough redundancy to ensure
safe operation. The dual module is
optimized for those safety-critical
applications where low cost is more
important than maximum availability.
The Dual Digital Output Modules
have a voltage-loopback circuit
which verifies the operation of each
output switch independently of the
presence of a load and determines
whether latent faults exist. Failure of
the detected field voltage to match
the commanded state of the output
point activates the LOAD/FUSE
alarm indicator.
In addition, ongoing diagnostics are
performed on each leg and circuit of
a Dual Digital Output Module.
Failure of any diagnostic on any leg
activates the module’s FAULT
indicator, which in turn activates the
chassis alarm signal. A dual module
operates properly in the presence of
most single faults and may operate
properly with some kinds of multiple
faults, but stuck-OFF faults are an
exception. If one of the output
switches has a stuck-OFF fault, the
output goes to the OFF state and a
glitch may occur during switch-over
to a hot spare.
The Dual Digital Output Modules
support hot spare functionality,
which allows on-line replacement of
a faulty module or continuous
backup to an active module. Each
module is mechanically keyed to
prevent improper installation in a
configured chassis.
Like every I/O module, the Dual
Digital Output Modules require a
separate Field Termination Assem-
bly with a cable interface to the
Tricon backplane. Digital outputs
are designed to source the current to
field devices, so field power must be
wired to each output point on the
field termination.
The following is a summary of specifi-
cations for the Dual Digital Output
Module. See the Tricon Planning &
Installation Guide for details.

Model Number 3664/3674

Nominal Voltage 24 VDC
Type Dual, serial (recommended for de-energize-to-trip applications)*
Output Signals 32, commoned
Voltage Range 16-30 VDC
Maximum Voltage 36 VDC
Voltage Drop < 1.5 VDC, typical
Power Module Load < 10 Watts
Current Ratings, Maximum 2A per point
10A surge per 10 ms
Load Leakage 2 mA maximum
Fuses (on Field Termination) n/a—self-protecting
Point Isolation 1500 VDC minimum
Diagnostic Indicators
ON or OFF State 1 per point
Module Status PASS, FAULT, ACTIVE
Field Alarm LOAD/FUSE
Load Alarm, output stuck-ON 3664 - Stuck-ON point, all others commanded state - ON or OFF
3674 - Stuck-ON point, all others commanded OFF (de-energized)
Load Alarm, output stuck-OFF 3664 & 3674 - Stuck-OFF point, all others commanded state - ON or OFF
Color Code Dark Blue
* Please contact Triconex regarding modules that are suitable for energize-to-trip applications.
38
Analog Input Modules
An Analog Input (AI) Module
includes three independent input
legs. Each input leg receives vari-
able voltage signals from each point,
converts them to digital values, and
transmits the values to the three
Main Processor Modules on de-
mand. One value is then selected
using a mid-value selection algo-
rithm to ensure correct data for
every scan.
Sensing of each input point is per-
formed in a manner that prevents a
single failure on one leg from affect-
ing another leg. Each Analog Input
Module sustains complete, ongoing
diagnostics for each leg. Failure of
any diagnostic on any leg activates
the module’s FAULT indicator
which in turn activates the chassis
alarm signal. The module’s FAULT
indicator merely reports a leg fault,
not a module failure—the module
can operate properly with as many
as two faulty legs.
Analog Input Modules support hot
spare functionality, which allows on-
line replacement of a faulty module
or continuous backup to an active
module.
The Analog Input Module requires a
separate Field Termination Assem-
bly with a cable interface to the
Tricon backplane. Each module is
mechanically keyed for proper
installation in a Tricon chassis.
The following is a summary of specifica-
tions for Analog Input Modules.
See the Tricon Planning & Installation
Guide for details.

Model Number 3700A 3701 3703E 3704E

Voltage 0-5V, + 6% 0-10V 0-5V or 0-10V*, + 6% 0-5V or 0-10V*, + 6%

Type TMR TMR TMR TMR

No. of Input Points 32, diff, DC coupled 32, diff, DC coupled 16, diff, isolated 64, commoned

Isolated Points No No Yes No

Input Update Rate 55 ms 55 ms 50 ms 75 ms

Resolution 12 bits 12 bits 12 bits 12 bits

Accuracy < .15% of FSR, < .15% of FSR, <.15% of FSR < .25% of FSR,
from 0° to 60°C from 0° to 60°C from 0° to 60°C from 0° to 60°C
Input Resistance (load) 30 MΩ (DC), min. 30 MΩ (DC), min. 30 MΩ (DC), min. 30 MΩ (DC), min.

Power-Off Resistance 30 KΩ (DC), typical 30 KΩ (DC), typical 30 MΩ (DC), min. 30 KΩ (DC), typical

Common Mode Rejection -80 dB (DC-100Hz), -80 dB (DC-100Hz), -90 dB @ 60Hz, min. n/a
typical typical -100 dB @ DC, min.
Common Mode Range -12V to +12V peak -12V to +12V peak +200V peak n/a

Leg-to-Leg Isolation 200 KΩ, typical 200 KΩ, typical 20 KΩ, typical 200 KΩ, typical

Normal Mode Rejection

@ 8Hz -3 dB -3 dB -3 dB -3 dB
@ 60Hz -17 dB -17 dB -17 dB -17 dB
@ 120Hz -23 dB -23 dB -23 dB -23 dB
Input Overrange 150 VDC/115 VAC 150 VDC/115 VAC 150 VDC/115 VAC 150 VDC/115 VAC
Protection continuous continuous continuous continuous
Current Range 0-20 mA, 0-20 mA, 0-20 mA, 0-20 mA,
250 Ω shunt 500 Ω shunt 250 Ω shunt for 5V 250 Ω shunt for 5V
500 Ω shunt for 10V 500 Ω shunt for 10V
Diagnostic Indicators (ON = true)
Module Status (one each) PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE PASS, FAULT, ACTIVE

Color Code Yellow Light Yellow Mustard Yellow Copper

* The voltage is selected using the TriStation software.

39
 Product Specifications
Analog Output Module
An Analog Output Module receives
output signals from the Main Pro-
cessor module on each of three legs.
Each set of data is then voted and a
healthy leg is selected to drive the
eight 4-20 mA outputs. The module
monitors its own current outputs (as
input voltages) and maintains an
internal voltage reference to provide
self-calibration and module health
information.
Each leg on the module has a cur-
rent loopback circuit which verifies
the accuracy and presence of analog
signals independently of load pres-
ence or leg selection. The module’s
design prevents a non-selected leg
from driving an analog signal to the
field. In addition, ongoing diagnos-
tics are performed on each leg and
circuit of the module. Failure of any
diagnostic deactivates the faulty leg
and activates the FAULT indicator,
which in turn activates the chassis
alarm. This module’s FAULT
indicator merely indicates a leg
fault, not a module failure. The
module continues to operate prop-
erly with as many as two legs failed.
Open loop detection is provided by
a LOAD indicator which activates if
the module is unable to drive current
to one or more outputs.
The module provides for redundant
loop power sources with individual
power and fuse indicators called
PWR1 and PWR2. External loop
power supplies for analog outputs
must be provided by the user. Each
Analog Output Module requires up
to 1 ampere @ 24-42.5 Volts. A
LOAD indicator activates if an open
loop is detected on one or more
output points. PWR1 and PWR2 are
on if loop power is present. The
3806 High Current (AO) module is
optimized for turbo-machinery
applications.
Analog Output Modules support
hot spare functionality, which allows
on-line replacement of a faulty
module or continuous backup to an
active module.
The Analog Output Module requires
a separate Field Termination As-
sembly with a cable interface to the
Tricon backplane. Each module is
mechanically keyed to prevent
improper installation in a configured
chassis.
The following is a summary of specifi-
cations for Analog Output Modules.
See the Tricon Planning & Installation
Guide for details.

Model Number 3805E 3806

Type TMR TMR
Output current range 4-20 mA output (+6% overrange) 4-20 mA & 8-320 mA
Number of output points 8 6 (4-20 mA); 2 (8-320 mA)
Isolated points No, commoned return, DC coupled No, commoned return, DC coupled
Resolution 12 bits 12 bits
Output Accuracy <0.25% <0.25% of FSR (0-22 mA & 0-352 mA),
of FSR (0-22 mA), from 0° to 60° C from 0° to 60° C
External loop power +42.5 VDC, maximum +42.5 VDC, maximum
(reverse voltage protected) +24 VDC, nominal +24 VDC, nominal
Output loop power requirements for specified load Max. load Vx external loop voltage
4-20 mA 8-320 mA
250 > 20 VDC (1 ampere minimum) 20 VDC < 275 < 15
500 > 25 VDC (1 ampere minimum) 24 VDC < 475 < 25
750 > 30 VDC (1 ampere minimum) 28 VDC < 650 < 40
1000 > 35 VDC (1 ampere minimum) 32 VDC < 825 < 50
Over-range protection +42.5 VDC, continuous < +42.5 VDC
Switch time on leg failure < 10 ms, typical < 10 ms, typical
Diagnostic Indicators (ON=true)
Module status (one each per module) PASS, FAULT, ACTIVE, LOAD, PWR1, PWR2 PASS, FAULT, ACTIVE, LOAD, PWR1, PWR2

Color code Pea Green Light Green

40
Thermocouple Modules
A Thermocouple (TC) Input Module
includes three independent input
legs. Each input leg receives vari-
able voltage signals from each point,
performs thermocouple linearization
and cold-junction compensation,
and converts the result to degrees
Celsius or Fahrenheit. Each leg then
transmits 16-bit signed integers
representing 0.125 degrees per count
to the three Main Processors on
demand. A value is then selected
using a mid-value selection algo-
rithm to ensure correct data for
every scan.
Each Thermocouple Module is
programmable to support one ther-
mocouple type, selected from J, K
and T for standard Thermocouple
Modules and from J, K, T and E for
Isolated Thermocouple Modules.
Model Number
Type
Number of input signals
Isolated points
Input update rate
Thermocouple types supported**
Accuracy/temp range
Input resistance (load)
Noise rejection
Common mode
Normal mode
Common mode range
Leg-to-leg isolation
Input point protection
Reference junction comp. range
Diagnostic indicators
Color code
* Inputs frozen for 1 second upon insertion of spare module.
** Must be selected with TriStation.
The Isolated Thermocouple module
allows users to select upscale or
downscale burnout detection with
the TriStation software. For Non-
Isolated modules, upscale or
downscale burnout detection de-
pends on the Field Termination
selected.
Triplicated temperature transducers
residing on the field termination
panel support cold-junction
compensation. Each leg of a
Thermocouple Module performs
auto-calibration using internal
precision voltage references. On the
Isolated Thermocouple Module, a
faulting cold-junction transducer is
annunciated by a cold-junction
indicator on the front panel.
Each module performs complete
ongoing diagnostics on each leg.
Failure of any diagnostic on any leg
3706A
TMR
32 differential, DC coupled
No
50 ms, maximum*
J, K, T
see Table A
22 MW (DC), typical
-85 dB @ 0-60 Hz, minimum
-95 dB @ DC, typical
-17 dB @ 60 Hz
±10 VDC max. (channel-to-
channel or channel-to-ground)
200 KΩ, typical
110 VAC, continuous
0°-60°C (32°-140°F)
PASS, FAULT, ACTIVE
Tan
activates the module’s FAULT
indicator, which in turn activates the
chassis alarm signal. The module’s
FAULT indicator merely reports a
leg fault, not a module failure. The
module continues to operate prop-
erly with as many as two faulty legs.
The Thermocouple Module
supports hot spare functionality for
on-line replacement of faulty
modules or continuous backup to
active modules. Each module is
mechanically keyed to prevent
improper installation in a configured
chassis and requires a separate Field
Termination Assembly with a cable
interface to the Tricon backplane.
The following is a summary of specifi-
cations for Thermocouple Modules.
See the Tricon Planning & Installation
Guide for details.
3708E
TMR
16 differential, isolated
Yes
50 ms
J, K, T, E
see Table B
30 MW (DC), minimum
-90 dB @ 0-60 Hz, minimum
-100 dB @ DC, minimum
-3 dB @ 8 Hz, typical
-17 dB @ 60 Hz, typical
±200 VDC, max (channel-to-
channel or channel-to-ground)
20 KΩ, typical
110 VAC, continuous
0°-60°C (32°-140°F)
PASS, FAULT, ACTIVE, CJ FAULT
Deep Yellow
41
 Product Specifications

Table A. Accuracy of Thermocouple Types for Model #3706A

Accuracy*
Temperature (TC Termination Module @ 32 - 140°F [0 - 60°C])
TC Type Range Ta = 77°F (25°C) Ta = 32 - 140°F (0 - 60°C)
(Typical) (Maximum)

J -250 to 32°F (-157 to 0°C) ± 5.0°F (2.8°C) ± 7.0°F (3.9°C)

>32 to 2000°F (0 to 1093°C) ± 4.0°F (2.3°C) ± 5.0°F (2.8°C)

K -250 to 32°F (-157 to 0°C) ± 6.0°F (3.4°C) ± 9.0°F (5.0°C)

>32 to 2500°F (0 to 1371°C) ± 4.0°F (2.3°C) ± 6.0°F (3.4°C)

T -250 to 32°F (-157 to 0°C) ± 5.0°F (2.8°C) ± 9.0°F (5.0°C)

>32 to 752°F (0 to 400°C) ± 3.0°F (1.7°C) ± 5.0°F (2.8°C)

Table B. Accuracy of Thermocouple Types for Model #3708E

Accuracy*
Temperature (TC Termination Module @ 32 - 140°F [0 - 60°C])
TC Type Range Ta = 77°F (25°C) Ta = 32 - 140°F (0 - 60°C)
(Typical) (Maximum)

J -238 to 32°F (-150 to 0°C) ± 9.0°F (5.0°C)

>32 to 1400°F (0 to 760°C) ± 3.0°F (1.7°C) ± 5.5°F (3.1°C)

K -238 to 32°F (-150 to 0°C) ± 8.0°F (4.5°C)

>32 to 2284°F (0 to 1370°C) ± 4.0°F (2.3°C) ± 7.0°F (3.9°C)

T -250 to 32°F (-161 to 0°C) ± 8.5°F (4.8°C)

>32 to 752°F (0 to 400°C) ± 3.0°F (1.7°C) ± 4.5°F (2.5°C)

E -328 to 32°F (-200 to 0°C) ± 8.0°F (4.5°C)

>32 to 1830°F (0 to 999°C) ± 3.0°F (1.7°C) ± 5.0°F (2.8°C)

* Accuracy specifications account for errors related to reference-junction compensation, but do not account for errors caused by
temperature gradients between the temperature transducers and the TC terminations. The user is responsible for maintaining a
uniform temperature across the TC Termination Module.

42
A termination panel and associated cable pass signals to or from the field,
permitting replacement of I/O Modules without disturbing field wiring.

Field Termination Options

There are two general types of field
termination products available from
Triconex:
• External termination panels
• Cables
All termination panels and cables are
built to withstand harsh industrial
environments. The environmental
specifications for components used
on these products are the same as
for a Tricon chassis. (See “Environ-
mental Specifications” in the
“Product Specifications” section for
details.)
External Termination Panels
An external termination panel is an
electrically-passive printed circuit
board (PCB) to which field wiring is
easily attached. A panel connector,
terminal blocks and optional
components are mounted to the PCB
and enclosed in a plastic housing. A
termination panel and associated
cable pass input signals from the
field directly to an input module, or
pass output signals from an output
module directly to field wiring. This
arrangement permits the removal or
replacement of I/O modules without
disturbing field wiring.

Tricon Chassis with External Termination Panels & Standard 10' Cables
43
 Field Termination Options
There are three types of external
termination panels, all of which can
connect to field signals in a separate
enclosure up to 99 feet (30 meters)
away from a Tricon:
• Standard
• Basic
• Special
Standard Termination Panels
Standard termination panels are best
for remote marshaling of field
wiring where maximum flexibility,
high density and simple maintenance
is desired.
A standard termination panel
consists of a PCB with all necessary
components—such as two-piece
terminal blocks, resistors, fuses and
blown-fuse indicators—mounted on
a DIN rail-compatible plastic
housing. The housing snaps into
mounting rails in accordance with
DIN 50 022.
Compression terminals on the
standard panel are designed for use
with 0.3 mm2 to 4.1 mm2 (22- to 14-
gauge) wiring. Each point can have
an optional current-limiting series
resistor, or a fuse with a blown-fuse
indicator, to protect the field wiring
and field device.
Standard termination panels are pre-
configured for specific applications.
For instance, the thermocouple input
termination panel provides cold-
junction temperature sensors and can
be ordered with upscale, downscale
or programmable burnout detection.
A standard termination panel for
analog voltage inputs provides
commoned signal returns, while the
current-mode version has a 250-ohm
precision resistor at each input point
to convert current to voltage.
Each standard termination panel is
packaged with a matched interface
cable that connects the panel to the
backplane of a Tricon chassis. A
female connector at one end of the
cable is keyed to match the male
44
connector on the Tricon backplane.
A male connector on the other end
of the cable attaches to the standard
termination panel.
Basic Termination Panels
Basic termination panels are a low-
cost means of connecting field
wiring to a Tricon. However, basic
termination panels do not provide
any components other than a 56-pin
connector and terminal blocks.
These two components are mounted
on a DIN rail-compatible plastic
housing that snaps into mounting
rails in accordance with DIN 50 022.
The user must provide any other
components required by his
application.
Other features of the basic termina-
tion panels are the same as for the
standard panels.
Special Termination Panels
Special external termination panels
are used to connect unusual applica-
tions such as external relays, bypass
switches, and Resistive Temperature
Detector (RTD) signal-conditioning
modules. Special termination panels
furnish all the necessary components
for the specified application,
including a matched cable for
connecting to a Tricon chassis. Each
special termination panel is designed
for rack-mounting and complies with
the RS-310-C EIA standard.
The following special termination
panels are available:
• External Relay Termination
(ERT) panels with interposing
relays
• Bypass panels for digital inputs
• Termination panels with RTD
input-signal conditioning
ERT Panels With Interposing Relays
These panels can be used with all
digital output modules. Interposing
relays are recommended for applica-
tions that have load currents greater
than 2 amperes, or field voltages
greater than 115 VAC which require
field-circuit conversion or compat-
ibility with motor-starter circuits.
Each interposing relay provides an
auxiliary contact that can be
connected to a Digital Input Module
by means of an optional loopback
cable to verify relay activation by
the digital output module. The ERT
panel uses compact general-purpose
power relays for maximum
reliability.
Bypass Panels For Digital Inputs
Bypass termination panels can be
used to connect digital inputs using a
bank of 32 pre-wired switches. The
bypass panel has a master keyswitch
and terminals for redundant +24
VDC power sources. Each input
point contains an ON status indica-
tor and a position for a user-defined
label. Each bypass termination panel
comes with two 10-foot cables for
connecting the termination panel to
a Tricon backplane.
Termination Panels With RTD
Input-Signal Conditioning
These termination panels are meant
for use with Analog Input Modules.
Each panel supports 16 points and
each Analog Input Module can
support up to two RTD termination
panels. The RTD signal-condition-
ing modules used on the termination
panels are Analog Devices 7B
series.
Triconex Termination Cables
Three types of separate termination
cables are available from Triconex:
• Standard cables
• Fanned-out cables
• Special cables
Although the normal length of all
cables is 10 feet (3 meters), any
length cable can be ordered up to 99
feet (30 meters) in 1-foot incre-
ments, using the last two digits of
the termination panel’s model
number to specify the length in feet.
For example, the model number
50 specifies a 50-foot cable
9xxx-x50
instead of the normal 10-foot cable.
Standard Cables
Standard cables are packaged with
all standard and special termination
panels. Each standard cable has a
female connector on one end for
connecting to the male connector on
a Tricon backplane.
Fanned-out Cables
Fanned-out cables are a lower-cost
alternative to using basic termina-
tion panels. A fanned-out cable has
a female connector on one end that
corresponds to a male connector on
a Tricon backplane. The other end
of the cable provides 50 fanned-out
leads, each individually labeled with
a pin number that matches the
connector signals.
Before a fanned-out cable can be
installed, the female connector must
be re-keyed to match its correspond-
ing male connector on the Tricon
chassis.
Each fanned-out cable has the
following characteristics:
• PVC outer covering
• 56-pin panel connector at one
end
• 50 stranded, stripped, tinned and
labeled 22-gauge leads at the
other end
Special Cables
Cables for special applications are
not packaged with termination
panels and must be ordered sepa-
rately. For example, if the goal is to
verify relay activation by a digital
output module, a separate relay
loopback cable must be used to
connect the relay termination panel
to a digital input module. Currently
the only special cable available is
the External Relay Termination
(ERT) Loopback Cable (model
#914x-xx).
Termination
Configuration Options
Terminations are available in
various factory configurations:
• Non-commoned Terminations
can accommodate individual
power supplies for each point.
• Commoned Terminations can
support one power supply which
is shared by multiple points.
Points can be commoned in
groups of 8 and 16.
• Analog signals can be read as 3-
wire transmitter inputs, voltage
inputs or current inputs.
• Thermocouple terminations
provide cold-junction tempera-
ture sensors and are available for
either upscale or downscale
burnout detection. For the Model
3706A, upscale or downscale
burnout detection depends on
which termination panel is
installed. For Model 3708E,
upscale or downscale burnout
detection is configured with
TriStation.
The “Termination Options” table (on
the next two pages) shows the
available termination choices for
each I/O Module and gives the
correct model number for each
choice.
Over-Current Protection
Standard and special termination
panels offer over-current protection
in various ways:
• fuses for individual points and/or
field power sources
• series resistors
• self-protection for Digital Output
and Analog Output Modules
If standard or special termination
panels are not being used, the user
must supply his own components for
over-current protection.
Examples of External
Termination Panels
Refer to pages 47 through 50 for
illustrations of the following types
of External Termination Panels:
• Basic
• 16-point Digital Output without
Fuses
• 16-point Digital Output with
Fuses
• 8-point Supervised Digital
Output
• 32-point Analog Input/Digital
Input
• 16-point Analog Input/Digital
Input
• 3-wire Transmitter Analog Input
• 16-point Thermocouple Input/
Analog Input
• ERT Panel with Interposing
Relays
• RTD Signal Conditioning
• External Bypass
45
 Field Termination Options
Match your I/O Module number in the first column with termination options on the right. An I/O Module can be wired to a maximum
of two termination panels, which may be of two different types—for example, commoned and non-commoned. The column labeled
“Points/Panel” tells how many points are handled by each termination panel. As an example, a module may have 32 points, but the
desired termination panel only handles 16 points—in such a case, two termination panels are required for one I/O Module.

Standard Terminations Other Termination Options Special Term. Panels

I/O Points/ Basic Term. Fanned-out Bypass ERT Loop-
Module Type Panel Commoned Non-Com. Panels Cables Panels back Cable
DIGITAL INPUT
3501E/T 115 V AC/DC 16 pts.
9561-810 9561-110 9551-110 9101-010 n/a 9141-010
3502E 48 V AC/DC 16 pts.
9562-810 n/a 9552-610 9101-010 n/a 9142-010
3503E 24 V AC/DC 16 pts.
9563-810 n/a 9553-610 9101-010 BP9228-010 9143-010
3504E* 24/48 VDC Non-Isol. 32 pts.
9566-810, 24V n/a 9750-310, 24V n/a n/a n/a
9565-810, 48V n/a 9750-410, 48V n/a n/a n/a
3505E 24 VDC, Low Thresh. 16 pts. 9563-810 n/a 9553-610 9101-010 BP9228-010 9143-010
3511 20-20 KHz, Pulse 8 pts. n/a n/a 9753-110 n/a n/a n/a
3564 24 VDC Single 32 pts. 9566-710 n/a 9553-610 9101-010 n/a n/a
DIGITAL OUTPUT ERT Panel
3601E/T 115 VAC 16 pts. 9661-610 9661-110 9651-110 9101-010 n/a 9670-110
9670-610
3603E/T 120 VDC 16 pts. 9661-910 n/a n/a 9101-010 n/a 9673-810
3604E 24 VDC 16 pts. 9662-810 9662-110 9653-610 9101-010 n/a 9671-810
3607E 48 VDC 16 pts. 9667-810 9667-110 9652-610 9101-010 n/a 9672-810
Supervised
3611E 115 VAC 8 pts. 9661-510 n/a n/a n/a n/a n/a
3617E 48 VDC 8 pts. 9667-910 n/a n/a n/a n/a n/a
3623/T 120 VDC 16 pts. 9661-910 n/a 9651-110 9101-010 n/a n/a
3624 24 VDC 16 pts. 9662-610 n/a 9653-610 9101-010 n/a n/a
Relay
3636R Relay (Non-triplicated) 16 pts. n/a 9668-110 9651-110 9101-010 n/a n/a
Dual
3664 24 VDC, Self-Protect. 16 pts. 9662-610 n/a 9653-610 9101-010 n/a 9671-810
3674 24 VDC, Self-Protect. 16 pts. 9662-610 n/a 9653-610 9101-010 n/a 9671-810
THERMOCOUPLE INPUT Upscale Downscale
3706A J, K, T Differential 32 pts. 9766-210 9766-510 n/a n/a n/a n/a
3708E E, J, K, T Isolated 16 pts. 9765-610 9765-610 n/a n/a n/a n/a
ANALOG OUTPUT
3805E 4-20 mA 8 pts. n/a n/a 9853-610 n/a n/a n/a
3806 4-20 mA, 8-320 mA 8 pts. n/a n/a 9853-610 n/a n/a n/a
ANALOG INPUT Standard Terminations Other Term. Options Special Terms.
3-Wire 2-Wire Fan.-
4-20 mA Voltage 4-20mA Basic Term. Panels Out RTD/AI
3700A 0-5 VDC, Differential 16 pts. n/a 9763-810 9761-210 9753-110, 0-5V n/a 2790-310T
9771-210, 0-5V
3701 0-10 VDC, Differential 16 pts. n/a 9763-810 9761-410 9753-110, 0-10V n/a n/a
3703E* 0-5/0-10 VDC, Isolated 16 pts. n/a 9763-810 9762-210, 0-5V 9753-110, 0-5/0-10V n/a n/a
9762-410, 0-10V n/a n/a n/a
9771-210, 0-5V
3704E* 0-5/0-10 VDC, Non-Isol. 32 pts. 9765-210 n/a 9760-210, 0-5V 9750-210, 4-20 mA n/a n/a
9760-410, 0-10V 9750-810, 0-5/0-10V n/a n/a
* Voltage must be configured with TriStation.

46
 Dimensions of Termination Panels
Width Length
Type of Panel (Across DIN Rail) (Along DIN Rail)
Standard commoned termination (8-point or 16-point) 4.5 inches 5.0 inches
Standard non-commoned termination (16-point) 4.5 inches 7.5 inches
Voltage or 4-20 mA input termination (16-point) 4.5 inches 5.0 inches
Upscale or downscale thermocouple termination (16-point) 4.5 inches 5.0 inches
Standard commoned termination (32-point) 4.5 inches 10 inches
4-20 mA input termination (32-point) 4.5 inches 10 inches
Basic termination 3.0 inches 5.0 inches

Standard Termination Panels in 16-point & 32-point Styles

47
 Field Termination Options
Sample Drawings of External Termination Panels

Basic Termination Panel for Various Types of I/O Modules

8-point and 16-point Digital Output Termination Panels with Fuses

16-point and 32-point Analog Input/Digital Input Termination Panels

48
Standard Non-commoned Termination Panel
for Digital Input/Output & Relay Modules

3-wire Transmitter Analog Input Termination Panel

16-point Thermocouple Input/Analog Input

Termination Panel
49
 Field Termination Options

Resistive Thermal Device (RTD) External Termination Panel

External Bypass Termination Panel

External Relay Termination with 16 Interposing Relay Contacts

50
The Tricon controller can interface with Modbus masters and slaves,
Distributed Control Systems (DCS), external host computers on 802.3
networks, other Tricons on a peer-to-peer network, and TriStation.

In most process-control applica-
tions, there are two systems which
monitor and manage the process.
One is a Distributed Control System
(DCS) and the other is a safety
system such as the Tricon controller.
These two systems are usually
isolated, but share a common opera-
tor interface. Distributed Control
Systems are designed to allow
highly effective communication with
the process operator, who must be
informed of the state of the process
at all times. This is desirable for
safety systems as well, but was not
feasible in the past because of the
type of technology used to imple-
ment these systems.
Communication Capabilities
Today, the state-of-the-art, micro-
processor-based architecture of the
Tricon controller supports several
modes of communication. Depend-
ing on application requirements, the
Tricon can interface with:
• Any Modbus master, including
DCS from ABB, Bailey, Fisher-
Rosemount and Yokogawa
• Modbus slave devices
• Foxboro's Intelligent Automation
(I/A) Series Nodebus
• Honeywell’s Universal Control
Network (UCN)
• Honeywell’s Data Hiway and
Local Control Network (LCN)
• External host computers on IEEE
802.3 (Ethernet) networks
• Other Tricons in a peer-to-peer,
TÜV-certified network
• A TriStation programming
workstation
Networking with Modbus
The Enhanced Intelligent Commu-
nication Module (EICM) supports
the industry-standard Modbus
protocol over a serial link. Most
suppliers of operator workstation
software (PC-based or mini-com-
puter-based) support Modbus RTU
and ASCII protocol, as do most DCS
vendors, by means of a network-
bridging device.
Because the EICM can operate as a
Modbus master, slave or both, the

Tricon Controllers on 802.3 Open & Proprietary Networks

51
 Communication Capabilities
productivity of the Tricon can be
expanded in a low-cost manner for
non-critical I/O. When the EICM
operates as the master, it can control
slave devices such as annunciators,
bypass switches on non-critical
PLCs, or other Tricons. When the
EICM operates as a slave, a com-
puter on the network is the
master—this can be a DCS, an
operator workstation, or any gen-
eral-purpose computer programmed
to support Modbus devices.
EICM users can select the RS-232
point-to-point interface for one
master and one slave, or the RS-485
interface for one master and up to 32
slaves. The RS-485 network trunk
can be one or two twisted-pair wires
up to a maximum of 1,200 meters
(4,000 feet).
While the EICM is appropriate for
many applications, Triconex offers
alternate communication methods
when fast response time or a large
amount of data throughput is
required.
Networking with Ethernet
The Tricon system supports IEEE
802.3 networking by means of
NET2 on both the Network Commu-
nication Module (NCM) and the
Advanced Communication Module
(ACM).1 Both of these modules
support Triconex applications, user-
written applications, and “open”
networking with external systems by
means of TCP-IP/UDP-IP protocol.
In addition, the NCM supports the
Triconex Peer-to-Peer and Time
Synchronization protocols on its
NET1 port. The table above lists the
protocols and applications that can
be used with the NCM, ACM and
EICM respectively.
To maximize safety, the Tricon
system offers module, media and
workstation redundancy. Module/
1 See pages 26, 27 and 30 for network port usage of the EICM, NCM and ACM.
52
Triconex Protocols NCM ACM EICM
Peer-to-Peer X — —
Time Synchronization X — —
TriStation X X X
Tricon System Access Application (TSAA) X X —
Protocols for User-written Applications
Modbus RTU and ASCII — — X
TCP-IP/TCP-UDP X X —
Triconex Applications
Sequence of Events X X —
Network DDE Server X X —
TriStation Programming Systems X X X
Protocols & Applications for Networking1
media redundancy is achieved by Triconex has developed one Peer-to-
installing two NCMs (or ACMs) in Peer protocol and three master/slave
the same logical slot and connecting protocols (Time Synchronization,
their network nodes with two sets of TriStation, and TSAA) to support
cables. This arrangement permits different types of applications. All
continuous operation in case of of the following Triconex protocols
broken cables, intermittent cable support a maximum of ten
connections, port failures or NCM/ Tricons on a proprietary network:
ACM failures.
Peer-to-Peer
External host redundancy is obtained
Peer-to-Peer protocol allows
by connecting a spare external host
Tricons to exchange small amounts
machine to the network. If the
of safety and process information
primary host fails, it can be shut
on the proprietary network. For
down and the application restarted
information about using the Peer-to-
on the spare host. All Triconex
Peer SEND and RECV functions in
applications use IBM-compatible
control programs, refer to the
PCs as external hosts, so all of the
TriStation Multi-System Worksta-
applications could be loaded on the
tion (MSW) User’s Manual and
primary and spare hosts without
TriStation 1131 User's Guide.
requiring any other PCs.
Triconex Protocols
Time Synchronization
A protocol is a set of rules for
Time Synchronization is a master/
exchanging data between two or
slave protocol used to maintain a
more devices. In a peer-to-peer
consistent time base for all
protocol, any device on the network
Tricons connected to each other by
can initiate a data transfer operation.
means of NCMs.
In a master/slave protocol, only the
master can initiate a data exchange.
TriStation
The TriStation protocol is a master/
slave protocol in which the master
(the TriStation PC) communicates
with the slave (Tricon) over an 802.3
network. Although the
TriStation protocol supports a
maximum of ten Tricons, the master
can communicate with only one
slave at a time.
TSAA
The Tricon System Access Applica-
tion (TSAA) protocol is a master/
slave protocol in which the master
(the external host) communicates
with one or more slaves (Tricons)
over an open network. TSAA speci-
fies the interfaces, commands and
data structures used to develop
application programs that send and
receive data to and from Tricon
systems.
Protocols for Open Networks
Customers who write their own
applications using TSAA can use
any of these transport, data link and
physical layers depending on perfor-
mance and reliability requirements:
• TCP/IP/802.3
• UDP/IP/802.3
• 802.2/802.3
TSAA, along with the lower-level
protocols, can be used to develop
the following types of applications
for open networks:
• Control (read/write) applications
such as an operator interface that
requires access to Tricon status
and the ability to write data to
the Tricon
• Monitor (read only) applications
such as a Sequential Events
Recorder, Event Logger or status
display that retrieves data from
the Tricon
Triconex Applications
Triconex offers several applications
for 802.3 networks, all of which use
an IBM PC-compatible system as
the external host. These applications
are briefly described in the table
below.
The Tricon controller offers consid-
erable flexibility and functionality in
the area of data communication, and
can readily be configured to match
application requirements. Triconex
is continually striving to advance the
state of the art in safety systems.
High-speed, redundant network
communication is another example
of that commitment.
Foxboro's Intelligent
Automation Series System
Triconex offers the Advanced Com-
munication Module (ACM) for
tightly-integrated interfacing with
Foxboro's Intelligent Automation
(I/A) Series Nodebus. The ACM
communicates process information
at full network data rates for use
anywhere on the I/A Series system,
transmitting all Tricon aliased data
and diagnostic information to opera-
tor workstations in display formats
that are familiar to Foxboro opera-
tors.
The ACM makes the following
functions available to the I/A Series:
• Handles critical I/O points and
passes results to the I/A Series
• Processes Tricon alarms and
propagates them to user-defined
I/A Series destinations (consoles,
printers, etc.)
• Propagates Tricon alarms as
I/A Series system messages
• Reads/writes aliased data to
satisfy I/A Series requests
• Enables time synchronization
from the I/A Series environment
• Reads Tricon diagnostics for
display by the I/A Series work-
station

Name of Application Brief Description

Sequence of Events (SOE) Retrieves events (state changes of discrete variables) from up to ten
Tricons on a network. For system maintenance and shutdown analysis.

Network DDE Server Interface Allows Windows DDE client applications like Excel, InTouch, etc. to read
and write Tricon aliased data. (Runs under Windows NT.)

TriStation Programming Systems Allow the user to write and download control programs for the Tricon,
display system status, monitor program execution, and perform maintenance
operations.

Triconex Applications

53
 Communication Capabilities
• Provides write protection to lock
out changes to the Tricon safety
system from all I/A Series
sources
• Provides hot spare capability for
uninterrupted communication
with the I/A Series Nodebus
The ACM also supports these
Triconex protocols and applications
on external host PCs connected to a
separate BNC port (that is, NET2):
• TriStation protocol for the Tri-
Station Programming System
• TSAA protocol for Triconex
applications
• TSAA/TCP(UDP)IP for user-
written applications on external
hosts
Honeywell’s TDC 3000 DCS
Triconex offers the Safety Manager
Module (SMM) and the Hiway
Interface Module (HIM) for tightly-
integrated interfacing with various
networks of the TDC 3000 DCS.
The SMM is used solely for commu-
nication with the Universal Control
Network (UCN), one of three princi-
pal networks of the TDC 3000.
Appearing to the Honeywell system
as a safety node, the SMM commu-
nicates process information at full
network data rates for use anywhere
on the TDC 3000. The SMM trans-
mits all Tricon aliased data and
diagnostic information to operator
workstations in display formats that
are familiar to Honeywell operators.
The SMM makes the following
functions available to the TDC
3000:
• Handles critical I/O points and
passes results to the DCS
• Processes Tricon alarms and
propagates them to user-defined
DCS destinations (consoles,
printers, etc.)
• Reads/writes aliased data to
satisfy DCS requests
54
• Reads Tricon diagnostics for
display by the DCS
• Provides write protection to lock
out changes to the Tricon safety
system from all TDC 3000
sources
• Enables time synchronization
from the DCS
• Allows peer-to-peer communica-
tion for plants with many Tricon
safety systems
• Provides sequence of events to
help determine the cause of plant
trips and increase process uptime
• Provides hot spare capability for
uninterrupted communication
with Honeywell networks
The HIM interfaces with the TDC
3000 by means of the Hiway Gate-
way and Local Control Network
(LCN). The HIM can also interface
with Honeywell's older TDC 2000
control system by means of the Data
Hiway. Using the HIM, higher-order
devices on the LCN or Data Hiway
(such as computers and operator
workstations) can communicate with
the Tricon.
Both the SMM and the HIM offer
the hot spare capability for uninter-
rupted communication with
Honeywell networks.
Easy-to-use developer's workbench allow users to develop, test
and document process-control applications for the Tricon.

TriStation 1131 Developer's Workbench

The TriStation 1131 Developer's
Workbench is an integrated tool for
developing, testing and document-
ing safety and critical-process
control applications for the Tricon
programmable logic controller. The
programming methodology, user
interface and self-documentation
capabilities make the system supe-
rior to traditional and competing
engineering tools.
TriStation 1131 Workbench is
compliant with Part 3 of the IEC 1131
International Standard for Program-
mable Controllers which defines
programming languages.
for Windows NT
that Triconex developed to support Using these editors and tools, the
the widely used Cause & Effect Matrix user can:
(CEM) methodology. Throughout the • Create programs, function
process control industry, CEMs are blocks and functions
often used to define alarms,
• Configure an application for the
emergency shutdown, and mitiga-
Tricon by:
tion actions.
• Defining the I/O module
configuration
To support the Tricon controller,
• Declaring tagnames for
TriStation 1131 supplies the follow-
input/output points
ing editors and tools:
• Declaring program
• Tricon Configuration Editor instances
• Emulator Control Panel • Connecting program
• Tricon Control Panel instance inputs & outputs
• Tricon Diagnostic Panel to tagnames

The TriStation 1131 software runs

under Microsoft’s Windows NT
operating system and follows the
Microsoft Windows graphical user
interface guidelines. See Appendix
B, page 77 for the minimum hardware
requirements for installing and
executing TriStation 1131.

The following pages provide an

overview of key TriStation 1131
features and describe the basic
elements of TriStation 1131 projects.

Functional Overview
The TriStation 1131 Workbench
provides three editors to support the
following IEC 1131-3 languages:
• Function Block Diagram
• Ladder Diagram
• Structured Text
The Workbench also provides the
Cause & Effect Matrix Program-
ming Language Editor (CEMPLE)
Overview of TriStation 1131 Components
55
 TriStation 1131 Developer's Workbench
• Test and monitor program
execution with the emulator
• Download and monitor program
execution in the Tricon
• Monitor the Tricon system
status and diagnose faults
Elements of a TriStation 1131
Project
A TriStation 1131 project contains
all the elements required to imple-
ment a safety or control application
in a Tricon controller. Some of these
elements are automatically included
in every project by TriStation 1131,
while others are created by the user.
Programs
A program is the highest-level
executable logic element within a
TriStation 1131 project. It is an
assembly of programming language
elements (function blocks, func-
tions, data variables) that work
together to allow a programmable
control system to achieve control of
a machine or process. Each program
is uniquely identified by a user-
defined type name. One TriStation
1131 project supports multiple
programs.
Function Blocks
A function block is a logic element
which yields one or more results and
is uniquely identified by a user-
defined type name. To use a
function block in a program, an
instance of the function block type
must first be declared. Each instance
is identified by a user-defined
instance name. All the data associ-
ated with a specific instance of a
function block is retained from one
evaluation of the function block to
the next.
56
Sample Logic in FBD, ST and LD Languages
Functions
A function is a logic element which
yields exactly one result and is
uniquely identified by a user-
defined type name. Unlike the
function block, the data associated
with a function is not retained from
one evaluation of the function to
the next. Functions do not have to
be instanced.
Data Types
A data type defines the size and
characteristics of variables declared
in a program, function or function
block. Examples of data types are
BOOL, DINT and REAL.
Shared Libraries
Shared libraries contain predefined
function blocks and functions that
can be used to develop programs as
well as other function blocks and
functions. TriStation 1131 provides
three shared libraries to every
project:
• IEC 1131-3 Standard Library –
the standard set of function
blocks and functions compliant
with the IEC 1131-3 Standard
• Triconex Library – a set of
Triconex function blocks and
function that can be used with
any Triconex programmable
controller
• Tricon Library – A set of
function blocks and functions
that are specifically imple-
mented for use with the Tricon
controller
Users may also develop their own
shared libraries and import them to
other TriStation 1131 projects.
Configuration
The configuration defines which
program elements will be instanced
for downloading to the Tricon
controller as well as which Tricon
points (tagnames) each instance will
access.
Programming Languages
Function Block Diagram (FBD)
A graphical language that corre-
sponds to circuit diagrams. FBD
elements appear as blocks that are
wired together, to form circuits. The
wires transfer binary and other types
of data between elements.

Structured Text (ST)

A high-level, textual programming
language, that is similar to PASCAL.
ST allows users to create Boolean and
arithmetic expressions, as well as
programming structures such as
conditional (IF…THEN…ELSE)
statements. Functions and function
blocks may be invoked in ST. Sample CEM from a TriStation 1131 Project

Ladder Diagram (LD) Function Block Diagrams, thereby the chassis and I/O modules re-
eliminating the risks associated with quired by the application. The editor
A graphical language that uses a manual translation from hand-drawn features a split-view window whose
standard set of symbols for repre- CEMs. left view contains a hierarchical
senting relay logic. The basic
configuration tree. The right view
elements are coils and contacts,
Tricon Configuration Editor displays information about the item
which are connected by links. Links
The Tricon Configuration editor is that is currently selected in the tree.
are different from the wires in FBD
used to define which programs will Four major editing functions are
in that they transfer only binary data
be instanced for downloading to the used to define the configuration of a
between the elements.
Tricon controller as well as which Tricon system:
Cause & Effect Matrix Program- Tricon points (tagnames) each Hardware Configuration
ming Language Editor (CEMPLE) instance will access. In addition, the Through a graphical interface, the
editor allows the user to configure user configures the chassis and I/O
A high-level graphical language that
provides a two-dimensional matrix in
which a user can easily associate a
problem in a process with one or
more corrective actions. The
problem is known as the cause and
the action as the effect. The matrix
associates a cause with an effect in
the intersection of the cause row
and the effect column.

CEMPLE is the world’s first

automated implementation of CEM,
a methodology that is commonly
used throughout the process-control
industry and readily understood by a
broad range of plant personnel.
CEM diagrams are automatically
translated into IEC 1131-3 compliant
Connecting Points with the Tricon Configuration Editor
57
 TriStation 1131 Developer's Workbench
Emulator Control Panel with Instance View of FBD Logic
modules to be used in the applica-
tion. TriStation 1131 automatically
allocates any memory required by
the module.
Tagname Definition
Allows the user to manually or
automatically declare tagnames and
other properties for I/O points and
aliased or non-aliased memory
points.
Program Instance Declaration
Allows the user to instance each
program that will be downloaded to
the Tricon controller and assign a
unique identifier to each instance. A
program may be instanced more than
once.
Program Instance Variable
Connections
Allows the user to connect (associ-
ate) each input variable and output
58
variable in a program instance with a
Tricon I/O or memory point.
Tools for the Tricon
Controller
Emulator Control Center
The Emulator Control Panel allows a
user to connect to the emulator and
download the project for testing and
debugging. The panel features a data
tree that lists the variables for all
program instances. Testing and moni-
toring is achieved by dragging the
desired variables from the tree on the
left to the monitor sheet on the right
and changing the variable values as
desired. Commands may be selected to
run, single-step, or halt program
execution.
Another control panel feature is a split-
screen instance view (shown above)
which displays the values of annotated
variables while the project is running.
Tricon Control Panel
The Tricon Control Panel provides
the same features as the Emulator
Control Panel except that it allows
connection to the Tricon controller
for real-time execution.
Tricon Diagnostic Panel
The Diagnostic Panel allows a user
to monitor the status of chassis and
modules in the Tricon system and
diagnose faults. The panel also
provides system performance
information including the project
name & version, memory size, scan
time and current execution state.
Other Key Features
Reports & Documentation
TriStation 1131 offers multiple
methods of sorting data and docu-
menting project elements, both
during and after project develop-

ment. Printouts of user-developed
function blocks and programs can
be obtained on a variety of user-
selected engineering drawing
templates. A number of standard
reports are available to document
the project configuration data. Users
can also create customized reports
with Crystal Reports™ or any other
dBASE-compatible report generator.
Password Security
TriStation 1131 provides a security
system that defines users and their
privileges with regard to editing,
library changes, Tricon state
changes and other operations.
Project History
An audit trail function is provided to
document the history of a project
and its program version changes.
This detailed log keeps track of user
actions and comments by automati-
cally time-stamping critical events
within a session and manually
logging user comments on demand.
Sample TriStation 1131 Report
Help System
TriStation 1131 features an easy-to-
use online help system which
provides detailed information about
developing and managing applica-
tions in TriStation 1131. Extensive
help is provided on using the various
editors, libraries and control panels.
The help system also includes infor-
mation about the Tricon platform,
IEC 1131-3 language refer-ence, a
how-to section describing common
tasks, a question-and-answer section,
and a list of error messages along
with cause-and-solution explana-
tions.
59
 TriStation 1131 Developer's Workbench

60
CEMPLE is the world's first automated implementation of the
traditional CEM methodology that has been used by process
control engineers for decades.

CEM Programming Language Editor (CEMPLE)1

This section introduces the Cause &
Effect Matrix Programming Language
Editor (CEMPLE), an optional editor
in the TriStation 1131 Developer’s
Workbench for developing safety
shutdown applications. Background
information is provided, and the
features of CEMPLE are described.
Traditional CEM Methodology
Cause and Effect Matrix (CEM) is a
methodology that is commonly used
throughout the process-control
industry to define alarms, shutdown
actions and mitigation actions. For
decades, process control engineers
have been planning shutdown
strategies with hand-drawn CEMs or
non-interactive spreadsheet pro-
grams. CEMs are frequently used for
fire and gas application systems
where the programming logic is
simple, but the volume of inputs and
outputs that need to be controlled is
high. In its simplicity, the CEM is
readily understood by a broad range
of plant personnel, from process
engineers to operators.
The CEM methodology allows the
user to easily associate a problem in
Cause Rows
a process with one or more correc-
tive actions. The problem is known
Automated CEM Called • Support for up to 99 Cause
CEMPLE Rows, 99 Effect Columns, and a
maximum of 1,000 active
The traditional CEM method is time-
intersections in a CEM
consuming and subject to errors
• Automatic generation of Func-
caused by misinterpretation of the
tion Block Diagrams (FBD)
CEM or inaccurate coding. To
from the CEM
greatly reduce these problems and
eliminate expensive, redundant • Instance view monitoring with
engineering, Triconex has intro- active causes, intersections and
duced CEMPLE, the world's first effects displayed in the user's
automated implementation of CEM choice of colors
methodology.
• Ability to name and recall
CEMPLE Features specific CEM views
The main features offered by Main Components
CEMPLE are:
The CEM editor window is divided
• Invocation of predefined and into three panes, as shown in the
user-defined functions and illustration below:
function blocks for evaluation • Matrix
of cause and effect matrix
• FBD Network
• Variable Detail Table
Effect Columns
Effect Header Intersection
Cause Header

as a cause and the action is known

as an effect. In a typical CEM, a
FBD Network
cause is represented by a row in the
matrix and an effect is represented
by a column.

Variable Detail Table

Main Components of CEMPLE

1
For use with TriStation 1131 only. 61
 CEM Programming Language Editor (CEMPLE)
Active areas highlighted
in user-selected color
Instance View of a CEM
Matrix
A CEMPLE matrix has two dimen-
sions which are specifically intended
for the development of safety shut-
down applications:
• Each Cause Row (horizontal
dimension) maps a cause to one
or more effects.
• Each Effect Row (vertical
dimension) maps one or more
causes to an effect.
In a CEM, causes are represented by
Boolean program input variables and
effects are represented by Boolean
program output variables.
FBD Network
For each Cause, active Intersection,
and Effect in a matrix, CEMPLE
automatically generates a Function
Block Diagram (FBD) which imple-
ments the safety shutdown strategy.
Variable Detail Table
The Variable Detail Table lists the
inputs and outputs of the FBD
network that is generated by the
selected part of the matrix.
62
Developing and Editing a CEM
A CEM is developed and edited
using a variety of graphical interface
methods. Commands are selected
from a main menu, toolbar and pop-
up menu. Variables are added or
renamed directly in white cells of the
Variable Detail Table. A drop-down
list in each cell provides a selection
of other variable names. For FBD
networks, a dialog box is used to
change the variable type and data
type of user-declared variables. In
addition, CEMPLE provides easy
techniques for selecting, editing,
sizing and hiding the various parts
of a matrix.
User-created functions and function
blocks that are invoked by a CEM
can be created at any stage of
program development, but must be
created before they are used in a
CEM.
Testing and Monitoring
Like all TriStation 1131 programs,
CEMs are tested and debugged off-
line using the Emulator Control
Panel
Panel. After the project is down-
loaded, the Tricon Control Panel can
be used to monitor the values of
variables during real-time execution.
In an instance view of a CEM, active
causes, intersections, and effects
can be viewed in the user's choice of
colors, as shown in the example on
the left. The user can select a cause
or effect header and monitor vari-
ables associated with the function of
the selected header. In the monitor
screen shown, selected variables
(marked with an x) are being moni-
tored. Also, the highlighted area
shows that Furn_Pres is in alarm
state (value greater than 20.0)
As with other types of executable
elements, the CEMPLE user can set
values and enable/disable variables
during emulation and real-time
execution. See page 58 for more
information about the control panels
in TriStation 1131.
During each scan of the control program, the Main Processors examine
selected discrete variables for state changes known as events.

Sequence of Events (SOE) Capability

(for Windows NT)

In many safety applications, the Preparing Your System the event variables. After down-
user needs to understand the for Event Collection loading the sample application to
sequence of events which led to an the Tricon, you must copy the
Events to be recorded must be
unsafe process condition and SOE Definition File to the PC
selected by the user. The following
eventual trip (shutdown). There- where the SOE application is
tasks need to be performed as you
fore the Tricon system includes installed.
develop your TriStation 1131 appli-
the integrated Sequence of Event
cation: Types of Event Variables
(SOE) capability for system main-
tenance and shutdown analysis. • Add SOE block control functions
The types of discrete variables
During each scan of the control to your program logic
that you can designate as event
program, the Main Processors • Configure SOE blocks with variables are:
examine selected discrete variables titles, buffer sizes and block
types • BOOL Input
for state changes known as events.
To retrieve, display and print • Assign event variables to the • BOOL Memory Read-only
information about events from as SOE blocks • BOOL Memory Read/write
many as 32 Tricons on a network, The TriStation 1131 Developer’s
a Tricon system includes the SOE Workbench provides a sample
Data Retrieval utility program for project that can be used to generate
use on a PC connected to the an SOE Definition File which
Tricon by means of a Network supplies Tricon point properties for
Communication Module (NCM).
Two SOE software packages are
available, one for TriStation 1131
running under Windows NT and
one for TriStation MSW running
under MS-DOS. This section
discusses SOE for TriStation 1131
only. For information about the
MS-DOS version, please see
separate section on page 71.
With SOE, you can:
• Retrieve and analyze event
data
• Print reports about event data
• Export event data to dBASE
IV files
The following pages describe
integrated SOE in greater detail.
Please contact Triconex for com-
prehensive information.

Tricon Network with SOE Data Retrieval

63
 SOE Capability (for Windows NT)
SOE Function Blocks
The control program manages
event collection by means of four
function blocks that the user
must include in the TriStation
1131 logic:
SOESTRT - Starts event
collection
SOESTOP - Stops event
collection
SOESTAT - Checks status of
SOE blocks
SOECLR - Clears status of
SOE blocks
Configuring SOE Blocks
The maximum block size is 20,000
events and 60,000 events across SOE Configuration
all blocks. The block size is the data from up to 32 Tricons on a required (see Appendix B, page 77).
amount of memory that the Main network. The event data can be used The PC is connected to the network
Processors reserve for recording for preventive maintenance, to help port of an NCM installed in the
of events. identify causes of system shutdown, Tricon. The diagram below shows
The example at the top shows the and to help solve process control all of SOE’s menus and sub-menus,
Tricon SOE Configuration win- problems. To install and run the SOE highlighting those which are associ-
dow on TriStation 1131 which is Data Retrieval application, a PC with ated with SOE’s two modes; Event
used to assigning event variables certain minimum specifications is Retrieval and Event Analysis.
to SOE Blocks. Assigning event
variables is possible only after
you have set up the blocks using
the SOE Block Definition dialog
box in the Tricon SOE Configura-
tion window.
SOE Data Retrieval Application
The Sequence of Events (SOE)
Data Retrieval application is a
menu driven, Windows NT based
program that help you retrieve,
analyze, display, and print event

Hierarchy of Menus for SOE Data Retrieval Application

64
As can be seen from the diagram, User-Written Programs for Event
several options can be chosen for Logging
viewing and reporting of events.
The filter allows you to select If desired, customers can write their
events: own application programs to collect
event date from the Tricon using the
• between two dates and times
Tricon System Access Application
• from one or more Tricon nodes (TSAA) protocol.
• from one or more blocks in each
As with the Tricon's integrated SOE
node
capability, a user-written application
• from all or a group of variable must retrieve SOE data from the
names (tags) Tricon by means of an NCM.
Time Synchronization & Time- For more information about using
stamps TSAA, see the Programmer's
Each Tricon on a network of Reference Manual for Tricon
Tricons synchronizes its time with System Access over TCP (UDP)/IP/
the master Tricon (the one with the 802.3 Protocol, or contact Triconex.
lowest node number) within ±25
milliseconds. To enable this feature,
the user must select appropriate
options when configuring the
Tricon’s network communication
modules using TriStation 1131.
A Tricon recognizes events on a
scan basis and time-stamps each
event at the beginning of the scan.
However, the scans of the various
Tricons on the network are not
synchronized—so the same event
(one discrete input point connected
to two networked Tricons) could be
logged by two Tricons with differ-
ent time-stamps. The worst-case
difference is the longer scan time
plus 25 milliseconds.

65
 SOE Capability (for Windows NT)

66
This easy-to-use programming system allow users to develop,
test and document process-control applications for the Tricon.
TriStation Multi-System Workstation
TriStation MSW is an MS-DOS-
based programming system which
runs on an IBM-compatible 486 or
better personal computer (see
Appendix B, page 77). Basic
TriStation programming methods
are described below.
Defining the Hardware
Configuration
The Module Configuration screen is
used to define the physical configu-
ration of the Tricon system. This
information becomes part of the
control program which is down-
loaded to the Tricon. After
downloading, the Tricon checks its
physical hardware configuration
against the logical Module Configu-
ration description, alarming the user
if a mismatch is identified. The
Chassis Configuration window
displays the modules which are
housed in each chassis of the
Tricon.
Writing the Control Program
TriStation MSW’s Ladder Editor
screen, illustrated below, is used to
code the control program. For
discrete control, the Ladder Editor
provides familiar Relay Ladder
Logic capability using standard and
relational contacts; standard coils;
and timing, counting, pulse and
blink coils. For analog control, the
Ladder Editor provides an easy-to-
write, high-level language similar to
BASIC for writing logical and
algebraic expressions—plus a
complete offering of pre-defined
functions for math, process control,
fire-and-gas, communication, event
logging and gated access.
TriStation’s Ladder Editor provides of a key. Expression boxes use a
significantly more power, flexibility high-level, BASIC-like language
and ease-of-use than most ladder which includes IF-THEN-ELSE
logic facilities on the market. clauses and algebraic expressions.
For example, some of TriStation’s The following main types of
useful features are: functions can be invoked from
expression boxes:
• Name-oriented programming
without specifying addresses • SOE Functions
• User-written comments dis- • Modbus Master Functions
played in the logic • Gated Access Functions
• Menu functions displayed on the • Peer-to-Peer SEND & RECV
screen Functions
The TriStation user can write an • Fire & Gas Functions
effective control program with less
On-Line Program Comments
effort and less logic than is possible
for most single PLC systems. On-line program comments are a
necessary part of any control
Expression Box Functions program. TriStation provides two
While ladder logic is very effective capabilities for making comments
for discrete control, it cannot per- within the control program:
form complex functions such as
• Comment boxes which allow
those needed for process control, free-format explanations above
communication and fire-and-gas
the associated logic
management. To invoke these
• Braces for making comments
functions, TriStation provides an
within expression boxes
easy-to-use feature called the
expression box which opens up
within the ladder logic at the stroke
LADDER EDITOR
Comment Box
This network tests for high pressure conditions using expression boxes
for Reactor #1 and using Relational Contacts for Reactor #2.
start If (RPress1 >= 495) | (RPress2 >= 495)
Expression Box
] [ then HiP1 = 1; else HiP1 =0;
endif;
Standard Coil
RPress3 HiP2
]>=[ ( )
495
Relational Contacts
RPress4
]>=[
495
Sample Network in the TriStation’s Ladder Editor Screen
67
 TriStation Multi-System Workstation
Defining Program Variables
TriStation’s Dictionary Editor
screen, shown at right, allows the
user to define all points and pro-
gram elements using alphabetic
variable names—numeric addresses
are not required. When the user is
defining a variable, the Dictionary
Editor displays only those fields
which are appropriate to that
variable’s Class and Type. Once
variables are defined, the Search
Template window can be used to
enter and/or display search criteria
for control-program variables.
Importing & Exporting
Dictionary Data
The Dictionary Editor provides two
functions that allow the transfer of
dictionary data to and from
TriStation:
• The import function allows
transfer of data from Excel,
Lotus 123, dBASE, Access, or
comma-delimited ASCII files
that have a TriStation compatible
format into the Dictionary Edi-
tor.
• The export function allows
transfer of data from the
Dictionary Editor into Excel,
Lotus 123, dBASE, Access, or
comma-delimited ASCII files
that have a TriStation compatible
format.
The ASCII text format used by the
import and export functions is
compatible with most PC database
applications.
Testing the Control Program
TriStation's Program Monitor screen
is used to simulate and test a control
program for a particular application.
With the Ladder Monitor, a user can
observe the execution of a whole
ladder logic program. This can be
done either in emulation mode with-
out connecting to a Tricon, or in
Tricon execution mode where actual
control-program values are moni-
tored in real time.
68
TriStation’s Dictionary Editor Screen
In emulation mode, specific inputs
can be toggled and variable values
modified. TriStation then simulates
the control-program actions to test
the logical results.
In Tricon execution mode, I/O points
must first be disabled before their
states or values can be changed.
Disabled points continually flash in
the Disabled Point Manager screen
to indicate that they are disabled. A
system variable keeps track of the
number of disabled variables found
in the control program.
Diagnosing System Faults
TriStation's Diagnostic screen,
shown on the next page, displays the
performance parameters of the
current control program and the fault
status of the Tricon system. The
Diagnostic screen provides the
following information:
• Node number and/or chassis
number
• The date and time the chassis
display was last updated by
Tricon data
• Whether the STOP position of the
Tricon keyswitch is logically
enabled or disabled
• Keyswitch setting and current
state of the control program
(REMOTE, RUN, PROGRAM
or STOP)
• Program name and version
• Available Memory
• Poll Time
• Requested and actual scan time
• Scan Surplus
The status indicators of the system
are graphically represented in the
Diagnostic screen, one chassis at a
time. If a fault is present, a Fault
Detail window can be accessed for
detailed information about the fault
condition.
Other Key Features
Documentation
Complete documentation of each
control program can easily be
obtained. The TriStation creates
several reports to satisfy the needs
of project, production and mainte-
nance personnel:
• Module Configuration Report—
provides an overview of the I/O
configuration and details about
the field instrumentation wired to
each point on each module. This
 information is useful for verify-
ing field loop check-out.
• Dictionary Reports—supply
information found in the Dictio-
nary Editor. Both standard and
cross-referenced reports are
available. The standard report
lists all Dictionary information in
alphabetical order by Name. The
cross-referenced report specifies
which networks use a particular
name. The cross-referenced
report is especially helpful for
debugging ladder logic.
• Ladder Logic Report—provides
a copy of the logic and indicates
whether or not each network has
been downloaded to the Tricon.
Password Security
TriStation provides password
protection at multiple security
levels. Four security levels are
standard but additional, customized
levels can be defined. The functions
available at each level are user-
definable. TriStation also allows the
user to assign a password to each
control program to help prevent
accidental changes to Tricons in a
network environment.
TriStation’s Diagnostic Screen
Master Menu
The Master Menu, which can be
accessed with one keystroke, lists all
the basic TriStation screens and the
most commonly used functions. The
user simply positions the cursor on
the desired selection, presses the
Enter key and the software performs
the requested function immediately.
On-screen Help
TriStation offers three levels of on-
screen Help:
• Overview Help files for each
TriStation screen
• Detailed Help files to describe
the individual function keys on
the screen
• Prompt Help files to explain the
prompts that are displayed as the
user works within the system.
69
 TriStation Multi-System Workstation

70
During each scan of the control program, the Main Processors examine
selected discrete variables for state changes known as events.

Sequence of Events (SOE) Capability

(for TriStation MSW)

In many safety applications, the
user needs to understand the
sequence of events which led to an
unsafe process condition and
eventual trip (shutdown). There-
fore the Tricon system includes
the integrated Sequence of Event
(SOE) capability for system
maintenance and shutdown analy-
sis. During each scan of the
control program, the Main Proces-
sors examine selected discrete
variables for state changes known
as events. To retrieve, display and
print information about events
from as many as 10 Tricons on a
network, a Tricon system includes
the SOE Data Retrieval utility
program for use on a PC con-
nected to the Tricon by means of
an ACM or NCM.
The following paragraphs de-
scribe integrated SOE in greater
detail. Please contact Triconex
for comprehensive information.
To use the Tricon’s SOE capability, SOE Functions
the following tasks must be done
The control program manages event
when the control program is set up:
collection by means of four func-
• Definition of event variables and tions that the user must include in
their alias numbers TriStation’s Relay Ladder Logic:
• Grouping of event variables into
SOESTRT — Starts event collec-
SOE blocks tion
• Addition of SOE functions to the
SOESTOP — Stops event collec-
ladder logic to start and stop the
tion
collection of data into SOE blocks
• Downloading of the control pro- SOESTAT — Checks status of an
gram SOE block
SOECLR — Clears an SOE
block
Types of Event Variables
The types of discrete variables that can
be designated as event variables are:
• Discrete input
• Discrete memory read-only
• Discrete memory read/write

Setting Up a System to Use SOE

During each scan of the control
program, the Tricon looks for
state changes to discrete, aliased
variables known as event vari-
ables. These must be selected by
the user with TriStation MSW’s
SOE Block Configuration [ALT
4] screen.

Tricon Network with SOE Data Retrieval

71
 SOE Capability (TriStation MSW)
SOE Data Retrieval Utility
This utility is a menu-driven,
MS-DOS based program
which retrieves, displays and
prints events from as many
as ten networked Tricons.
The event data can be used
for preventive maintenance
and to help identify the
causes of system shutdowns.
To install and run the SOE
Data Retrieval utility, a PC
with certain minimum speci-
fications is required (see
Appendix B, page 77). A
parallel printer is also useful
for printing events during
retrieval.
During the viewing or print-
Hierarchy of Menus for SOE Data Retrieval Utility
ing of events, either on-line or from
the disk file, the utility’s filter lets
the user select events: event at the beginning of the scan.
However, the scans of the various
• between two dates and times
Tricons on the network are not
• from one or more nodes synchronized—so the same event
(Tricons) (one discrete input point connected
• from one or more blocks in to two networked Tricons) could be
each node logged by two Tricons with different
• from all or a group of time-stamps. The worst-case differ-
variable names ence is the longer scan time plus 25
• between a range of aliases milliseconds.
The figure above describes the tasks User-Written Programs for Event
that can be performed using the Logging
menus of the SOE Data Retrieval If desired, customers can write their
Utility. own application programs to collect
Time Synchronization & Time- event date from the Tricon using the
stamps Tricon System Access Application
(TSAA) protocol.
Each Tricon on a network of
Tricons synchronizes its time with As with the Tricon's integrated SOE
the master Tricon (the one with the capability, a user-written application
lowest node number) within ±25 must retrieve SOE data from the
milliseconds. To enable this feature, Tricon by means of an NCM.
the user must select time synchroni- For more information about using
zation with the [F8 CONFIG TSAA, please refer to the
PROGRM] function of TriStation’s Programmer's Reference Manual for
Ladder Editor [ALT 1] screen. Tricon System Access over TCP
A Tricon recognizes events on a (UDP)/IP/802.3 Protocol, or contact
scan basis and time-stamps each Triconex.

72
 Appendix A
Tricon Scan Time & Memory Usage

The Tricon controller uses a scan-based mode of opera-
tion, performing required control functions on a cyclical
basis. The period of this cycle is the scan time, which is
composed of three elements:
• the time required to collect the input data
(input poll time)
• the time required to execute the control program
• the time required to implement the outputs
(output poll time)
Input polling is asynchronous and overlaps control pro-
gram execution. Therefore the control program execution
(CPE) time must be larger than the input poll time to
ensure stable operation of the system. If the scan time is
set to a value less than the total poll time, the Tricon will
try to execute the control program without the benefit of
updated field inputs. This condition is to be avoided, and
care should be taken to set the scan time to a value equal
to or greater than the required time.
In earlier systems, the CPE time was always considerably
larger than the total poll time, so the scan time was
Note:
Due to the extensive testing that is required, Triconex has not yet fully determined the effect of TriStation 1131 function calls on the
minimum system scan time and memory usage in V9.4 systems. Please use the following V9.0 numbers for a rough estimate and contact
Triconex for assistance if necessary.
essentially equal to the CPE time. In Version 9 systems,
the processing power of the model #3006 Main Proces-
sors significantly reduces the CPE time, and consequently
consideration must be given to both the input and output
poll times when computing the scan time. In general, if
the size of the control program is proportional to the
amount of physical I/O in the system, the CPE time will
be larger than the input poll time required. However, if
the system configuration has an unusually large amount
of physical I/O and/or a small control program, the scan
time should be set considering both the total poll time and
the CPE time. This is necessary because under these
conditions, the total poll time required could exceed the
CPE time. In such a case, the scan time should be set to
whichever of the two is greater.
The following worksheets for estimating Tricon scan
time and memory usage provide a mechanism to calculate
the required scan time based on both the system's I/O
configuration and the approximate composition and size
of the control program.

Estimating Tricon V9 Scan Time

Poll Time
Number Used Poll Time Subtotal
Module Configuration
(Independent of Dictionary Editor entries.)

64-point DI modules ________ x 1.2 msec = ________

32-point DI modules ________ x 1.1 msec = ________
64-point AI modules ________ x 7.2 msec = ________
32-point AI/TC modules ________ x 4.1 msec = ________
16-point AI/TC modules ________ x 2.5 msec = ________
8-point PI modules ________ x 4.7 msec = ________
32-point DO modules ________ x 1.0 msec = ________
16-point DO modules ________ x 0.9 msec = ________
8-point SDO modules ________ x 0.9 msec = ________
8-point AO modules ________ x 1.8 msec = ________

Poll Time msec

Overhead = 1 msec per chassis (minimum of 5 msec) = msec
TOTAL POLL TIME = msec

(continued on next page)

73
 Estimating Tricon V9 Scan Time (continued)

Control Program Execution1

Number Used Execution Time Subtotal

Ladder Logic
Normally open/normally closed contacts ________ x .001 msec = ________
Transition ON/OFF contacts ________ x .007 msec = ________
Relational contacts ________ x .006 msec = ________
Standard coils ________ x .010 msec = ________
Complex coils ________ x .020 msec = ________

Expression Box Functions

Active Modbus read/write functions ________ x .105 msec = ________
Inactive Modbus read/write functions ________ x .077 msec = ________
Peer-to-peer send function2 ________ x .400 msec = ________
Peer-to-peer receive function2 ________ x .400 msec = ________
Math functions ________ x .055 msec = ________
Process control functions ________ x .035 msec = ________
Fire & gas functions ________ x .040 msec = ________
Print/Printt/Printdt functions ________ x .100 msec = ________
Printed variables/discretes ________ x .015 msec = ________
Printed characters ________ x .001 msec = ________
IF-THEN-ELSE-ENDIF functions ________ x .010 msec = ________
Number of expression boxes ________ x .004 msec = ________
Number of operators* (“+”, “-”, “*”, etc.) ________ x .003 msec = ________
* If unknown, use 15 times the
number of expression boxes.

SOE Data Collection (per event)3 ________ x .025 msec = ________

Memory Variable Allocation4 ________ x .002 msec = ________

Control Program Execution Time msec

Overhead (Recovery & Diagnostics) + 20 msec
TOTAL CONTROL PROGRAM EXECUTION TIME msec

Estimated Scan Time = Total Control Program Execution Time

- OR -
Total Poll Time,
WHICHEVER IS GREATER
(minimum of 40 msec)

1 Scan-time effects for all items listed under Control Program Execution (except print functions) are
averaged. It is assumed that all print functions are executed each scan.
2 Use the maximum number of SEND and RECV functions.
3 Use the maximum number of events which could occur in one scan.
4 Obtain this number from the Memory Usage Worksheet on page 76 (see footnote #4, page 76).

74
 Estimating Tricon V9 Memory Usage

System Configuration Memory Allocation

Number Used Bytes Subtotal
Discrete Inputs (max. 2048 variables)1 ________ x 0.25 = ________
Analog Inputs (max. 1024 variables)1 ________ x 4.00 = ________
Real Inputs (max. 80 variables)1 ________ x 12.00 = ________
Discrete Outputs (max. 1024 variables)1 ________ x 0.25 = ________
Analog Outputs (max. 512 variables)1 ________ x 4.00 = ________
# of Expansion Chassis in system (max. 14) ________ x 4000.00 = ________
# of non-PI modules in system ________ x 88.00 = ________
# of PI modules in system (max. 10 modules) ________ x 506.00 = ________

Control Program Memory Allocation

Ladder Logic
Normally open/normally closed contacts ________ x 10.0 = ________
Transition ON/OFF contacts ________ x 52.0 = ________
Relational contacts ________ x 20.0 = ________
Standard coils ________ x 65.0 = ________
Complex coils ________ x 142.0 = ________
Expression Box Functions
Time adjustment functions ________ x 47.0 = ________
SOE control functions ________ x 35.0 = ________
SOE status function ________ x 47.0 = ________
Modbus read/write functions (1 variable)2 ________ x 77.0 = ________
Modbus control functions (1 variable)2 ________ x 77.0 = ________
Peer-to-peer send/receive functions (1 variable)2 ________ x 61.0 = ________
Math functions ________ x 35.0 = ________
Process control functions ________ x 60.0 = ________
Fire & gas functions ________ x 125.0 = ________
Print/Printt/Printdt functions ________ x 18.0 = ________
Printed variables/discretes ________ x 14.0 = ________
Printed characters ________ x 1.0 = ________
IF-THEN-ELSE-ENDIF functions ________ x 125.0 = ________
Number of operators2 (“+”, “-”, “*”, etc.) ________ x 30.0 = ________
* If unknown, use 15 times the
number of expression boxes.
Control Program Networks
Number of expression boxes ________ x 50.00 = ________
Total number of networks ________ x 8.00 = ________
Labels (min. 512 bytes) ________ x 0.13 = ________

Subtotal #1 bytes

(carry to next page)

1 Memory is automatically allocated for all module points when module is configured (independently of Dictionary entries).
2 Add 8 bytes for each additional variable.

75
 Estimating Tricon V9 Memory Usage (continued)

Control Program Memory Allocation (continued)

Number Used Bytes Subtotal

Memory Variables3
Non-Aliased Memory Discretes (min. 32 bytes) ________ x 0.25 = ________
Read-Only Aliased Memory Discretes (min. 32 bytes) ________ x 0.25 (0.5 w/ SOE) = ________
Read-Write Aliased Memory Discretes (min. 32 bytes) ________ x 0.25 (0.5 w/ SOE) = ________
Non-Aliased Memory Integers (min. 8 bytes) ________ x 4.125 = ________
Read-Only Aliased Memory Integers (min. 8 bytes) ________ x 4.125 = ________
Read-Write Aliased Memory Integers (min. 8 bytes) ________ x 4.125 = ________
Non-Aliased Memory Reals (min. 8 bytes) ________ x 4.125 = ________
Read-Only Aliased Memory Reals (min. 8 bytes) ________ x 4.125 = ________
Read-Write Aliased Memory Reals (min. 8 bytes) ________ x 4.125 = ________
PID6 ________ x 12 = ________
SCHED6 ________ x 16 = ________
LEAD-LAG6 ________ x 8 = ________
LOOP6 ________ x 24 = ________
Gases6 ________ x 40 = ________
Lines6 ________ x 12 = ________
SOE Blocks ________ x 60 = ________
Peer Sends ________ x 164 = ________
Peer Receives ________ x 492 = ________

Subtotal #2 bytes
Expansion Reservation = (.3 x Subtotal #2) bytes
MEMORY VARIABLE ALLOCATION4 bytes
Subtotal #1 (carried from previous page) bytes
Overhead 5000 bytes

TOTAL MEMORY USAGE5 bytes

3 Memory is automatically allocated if variable is used in ladder logic.

4 Use this number for memory variable allocation on page 74 of the Tricon
Scan Time Worksheet (see footnote #4, page 74).
5 The model #3006 Main Processors make available 2 Megabytes SRAM and
512 kBytes EPROM (operating-system memory).
6 Number of blocks.

76

Hardware Requirements for TriStation and SOE
For the TriStation 1131 PC
The PC selected for use with TriStation 1131 must
meet the following minimum requirements:
• Windows NT certified personal computer
• Microsoft Windows NT v.4.0 (SP3)
• 233 MHz, Pentium microprocessor
• 64 Mbyte RAM
• 125 Mbyte free hard disk space
• CD-ROM drive
• SVGA adapter and monitor, 1024 x 768 resolution
• Microsoft mouse or compatible pointing device
For the TriStation MSW PC
The personal computer (PC) selected for use with
TriStation MSW must meet the following minimum
requirements:
• MS-DOS operating system, Version 6.2 or later
• 33 MHz, 486 microprocessor
• 8 Mbyte RAM
• 20 Mbyte free hard disk space
• 3.5" high-density floppy disk drive
• VGA adapter and monitor (color)
• Optional printer—Epson or compatible
Triconex has qualified the TriStation MSW software
using 486-based PCs from COMPAQ.
Appendix B
For the SOE Data Retrieval PC (for Windows NT)
The PC selected for use with the SOE Data Retrieval
Utility must meet the following minimum requirements:
• Windows NT certified personal computer
• Microsoft Windows NT v.4.0 (SP3)
• 233 MHz, Pentium microprocessor
• 64 Mbyte RAM
• 100 Mbyte free hard disk space
• CD-ROM drive
• 3.5" high-density floppy disk drive
• SVGA adapter and monitor, 1024 x 768 resolution
• Microsoft mouse or compatible pointing device
• IEEE 802.3 I/F adapter
For the SOE Data Retrieval PC (for MS-DOS)
The PC selected for use with the SOE Data Retrieval
Utility must meet the following minimum requirements:
• MS-DOS operating system, Version 6.2 or later
• 25 MHz, 386 microprocessor
• 8 Mbyte RAM
• 80 Mbyte free hard disk space
• 3.5" high-density floppy disk drive
• VGA adapter and monitor (color)
• Optional printer—Epson or compatible
• 128K or larger print buffer
• IEEE 802.3 (3Com) interface adapter
77
 Appendix C
Glossary
alias
A five-digit number that the Tricon uses in place of a
variable name when communicating with an external
host. The alias is a convention of Modbus, an industry-
standard protocol adopted by Triconex for use with its
communication modules. Each alias contains a Modbus
message type and the address of the variable in the
Tricon.
availability
The probability that the control system is operational at
some instant of time.
bin
An address range of aliased variables in the Tricon
system, based on Class and Type combinations. For
example, all Read Only Input Discrete variables are
grouped into Bin 2, and all Read/Write Memory Integer
variables are grouped into Bin 12.
board
See module.
card
See module.
cause (CEMPLE)
In CEM methodology, a cause is a problem to be solved
by the matrix.
CEM (CEMPLE)
Acronym for Cause & Effect Matrix. CEM is a two-
dimentional matrix for the development of safety
applications, where causes are represented by rows and
effects are represented by columns.
CE Mark
A type of certification by the European Union which
ensures the electro-magnetic compatibility of the Tricon
with other pieces of electrical/electronic equipment.
CEMPLE
A language editor in the TriStation 1131 Developer's
Workbench that allows you to develop CEMs for
safety shutdown applications.
78
communication modules
Modules that enable the Tricon controller to communicate
with host computers. Triconex offers communication mo-
dules which use IEEE 802.3, TCP/IP or Modbus protocol.
configuration
The arrangement of the programmable electronics within
a Tricon and the combination of programmable and non-
programmable equipment within the installation.
control system
The system which governs the operation of plant, ma-
chinery or other equipment by producing appropriate
instructions in response to input signals.
DDE
Dynamic Data Exchange (DDE) is an interprocess com-
munication mechanism provided by Microsoft
Windows. Applications running under Windows can
use DDE to send and receive data and instructions to
and from each other.
debug
The act of locating and correcting faults: 1) one of the
normal operations in software development such as
editing, compiling, debugging, loading, and verifying; or
2) the identification and isolation of a faulty physical
component, including its replacement or repair to return
the PLC to operational status.
effect (CEMPLE)
In CEM methodology, an effect is an action that must be
taken to solve a cause (problem)
event
A state change of a discrete aliased variable which has
been designated for event logging. An event is said is to
occur if such a variable changes from the normal state.
If the variable later changes back to the normal state,
another event is said to have occurred.
event logger
An application that logs, displays and/or prints critical
events in real time, based on state changes of discrete
variables in the control program. Proper use of an event
logger warns users about dangerous conditions and
printouts of events can help identify the sequence of
events that led to a trip.
event variable
A discrete memory variable or discrete input point that
has been assigned to an SOE block.
fault tolerance
The ability to identify and compensate for failed
control system elements and allow repair while con-
tinuing an assigned task without process interruption.
Fault tolerance is achieved by incorporating redun-
dancy and fault masking.
Function Block Diagram (FBD) Language
FBD is a graphically-oriented language that corresponds
to circuit diagrams. The elements used in this language
appear as blocks wired together to form circuits. The
wires can communicate binary and other type of data
between FBD elements.
host
See external host.
hot spare
A unique feature of the Tricon which allows you to
install spare I/O modules with automatic switchover to
the spare in case the primary module fails.
I/A Series DCS
The acronym for Foxboro’s Intelligent Automation
(I/A) Series Distributed Control System. The Tricon’s
Advanced Communication Module (ACM) acts an
interface between the Tricon and the IA DCS.
IEEE
The Institute of Electrical and Electronics Engineers
(IEEE) is a professional society for engineers.
input poll time
The time required by the Tricon controller to collect
input data from the controlled process. Input polling is
asynchronous and overlaps control program execution.
instance view (TriStation 1131)
A feature of the Emulator Control Panel and Tricon
Control Panel which displays the values of annotated
variables while a TriStation 1131 project is running. In an
instance view, the user can change the values of variables
during emulation or real-time execution.
intermittent fault
A fault or error that is only occasionally present due to
unstable hardware or varying software states.
intersection (CEMPLE)
A cell in a matrix where a Cause Row intersects an
Effect Column.
intersection function (CEMPLE)
A function or function block that may be selected from
a drop-down list in the Intersection cell of a Cause Row
and an Effect Row.
ISO
The International Organization for Standardization
(ISO) is a worldwide federation of national standards
bodies (ISO member bodies) that promulgates stan-
dards affecting international commerce and
communications.
Ladder Diagram (LD) Language
LD is a graphically-oriented language that uses a
standard set of symbols to represent relay logic. The
basic elements are coils and contacts which are con-
nected by links that transfer binary data.
logical slot
In a Tricon chassis, a logical slot is a repository for a
primary module, a hot spare module, and their associ-
ated field termination component.
Markov model
A generalized modeling technique which can be used to
represent a system with an arbitrary number of mod-
ules, failure events, and repair events. A Markov model
can be mathematically solved to produce a resultant
probability.
matrix (CEMPLE)
1. A CEM program
2. A traditional methodology for ESD applications
which associates a problem (cause) in a process with
one or more actions (effects) that must be taken to
correct the problem.
module
An active field-replaceable unit consisting of an elec-
tronic circuit assembly housed in a metal spine. Also
called board or card.
MS-DOS
Microsoft Disk Operating System (MS-DOS) is the
operating system used by most IBM-compatible PCs.
All Triconex-provided applications and utilities run on
MS-DOS.
MTBF
The acronym for Mean Time Between Failure. The
expected average time between failures of a system,
including the time taken to repair the system. Usually
expressed in hours.
79
 MTTF
The acronym for Mean Time To Failure. The expected
average time to a system failure in a population of
identical systems. Usually expressed in hours.
MTTR
The acronym for Mean Time To Repair. The expected
time to repair a failed system or subsystem. Usually
expressed in hours.
node
Any of the machines on a network—in this document,
node usually means Tricon.
node number
The physical address of a node.
open network
A network to which an external host can be connected.
output poll time
The time required by the Tricon controller to implement
the outputs generated by the control program in re-
sponse to inputs from the controlled process.
peer-to-peer
A protocol that allow multiple Tricons on a proprietary
network to exchange small amounts of process and
safety information.
program
1. The set of instructions, commands, and/or direc-
tions that define the Tricon’s output signals in terms of
input signals. 2. The act of creating such a set of
instructions using the relay ladder language of the
TriStation programming system.
protocol
A set of rules describing the format used for data
exchange between two entities.
reliability
The probability that no failure of the system will have
occurred in a given period of time.
scan time
The period of the Tricon controller’s cycle of required
control functions. The scan time is composed of three
elements:
• Input poll time (asynchronous with control pro-
gram execution)
• The time required to execute the control program
• Output poll time
80
Structured Text (ST) Language
ST is a general purpose, high-level programming
language, similar to PASCAL or C. ST allows you to
create Boolean and arithmetic expressions and pro-
gramming structures such as conditional statements
(IF… THEN… ELSE).
system
Consists of a set of components which interact under
the control of a design.
TCP/IP
Transmission Control Protocol/Internet Protocol (TCP/
IP) are protocols for the Transport and Network layers
of the OSI network model. TCP/IP provides reliable,
sequenced data delivery.
transient fault
A fault or error resulting from a temporary environmen-
tal condition.
TMR
The acronym for Triple-Modular Redundant architec-
ture, which allows the Tricon to achieve fault tolerance.
The complete system is triplicated; each of the three
identical systems is called a leg. Each leg independently
executes the control program in parallel with the other
legs.
Tricon
A state-of-the-art programmable logic and process
controller that provides a high level of fault tolerance.
trip
A safety-related shutdown of the controlled process,
or a portion of the controlled process.
TriStation 1131
A Windows-NT based application for writing and
downloading control programs and for performing
maintenance and diagnostics on Version 9.1 and later
Tricon systems.
TriStation MSW
An MS-DOS based application for writing and down-
loading control programs and for performing
maintenance and diagnostics Tricon and TriconLite
systems.
TriStation protocol
A master/slave protocol used by a TriStation for com-
munication with the Tricon. The Tristation protocol
supports a maximum of 10 Tricons, but each master can
communicate with only one slave at a time.
TSAA
Tricon System Access Application (TSAA) protocol is
a master-slave protocol in which the master (an external
host) communicates with one or more slaves (Tricons
or TriconLites) over an open network. TSAA supports
a maximum of 10 Tricons.

TÜV Rheinland
TÜV is the acronym for Technischer Überwachungs-
Verein in German, which translates to Technical
Supervisory Association. In Germany, TÜV Rheinland
is an authorized technical inspection agency for a wide
variety of products, processes, installations, plants and
equipment. In addition, the agency is authorized to
carry out statutory inspections and acceptance tests by
more than 25 other countries.

UCN
The Universal Control Network (UCN) is one of three
principal networks of Honeywell’s TDC 3000 Distrib-
uted Control System (DCS). The Tricon provides the
Safety Manager Module (SMM) solely for communica-
tion with the UCN.

UDP/IP
User Datagram Protocol/Internet Protocol (UDP/IP) are
protocols for the Transport and Network layers of the
OSI network model. UDP/IP provides best-effort
datagram delivery.

voting
A mechanism whereby each leg of a TMR system
compares and corrects the data in each leg using a two-
out-of-three majority voting scheme.

81
82
 FAX REPLY FORM
Send to Triconex at 949-768-6601

We hope the Tricon Technical Product Guide has met your need for information about Triconex prod-
ucts, and we value your opinion. If you found any errors or omissions in the Product Guide, or would
like to see changes or additions to future Product Guides, please photocopy this form, fill in the blanks,
and fax it to Marketing Department, Irvine, California.

Recommended Changes
Section Name: ____________________________________________________________
Page Number(s): ___________________________________________________________
Change from: _____________________________________________________________
______________________________________________________________________
______________________________________________________________________
Change to: _______________________________________________________________
______________________________________________________________________
______________________________________________________________________

Section Name: ____________________________________________________________

Page Number(s): ___________________________________________________________
Change from: _____________________________________________________________
______________________________________________________________________
______________________________________________________________________
Change to: _______________________________________________________________
______________________________________________________________________
______________________________________________________________________

Recommended Additions
Section Name: ____________________________________________________________
Page Number(s): ___________________________________________________________
______________________________________________________________________
______________________________________________________________________
______________________________________________________________________

Other Comments
______________________________________________________________________
______________________________________________________________________
______________________________________________________________________
 Triconex Corporate Headquarters
15091 Bake Parkway
Irvine, CA 92618
USA
Tel: +1-949-699-2100
Fax: +1-949-768-6601
Americas Customer Business
and Integration Center
4916 FM 1765
La Marque, TX 77568
USA
Tel: +1-409-935-3555
Fax: +1-409-935-3881
Middle East Customer Business and
Integration Center
Rashid Al Majid Building
Airport Road
P.O. Box 62051
Dubai, UAE
Tel: +971-4-869-555
Fax: +971-4-869-955
European/African Customer Business
and Integration Center
10, avenue du Centaure
BP 8409 Cergy
95806 Cergy Pontoise Cedex
France
Tel: +33-1-34-43-26-26
Fax: +33-1-34-43-26-27
Asia-Pacific Customer Business
and Integration Center
750 Chai Chee Road #07-01/02
Chai Chee Industrial Park
Singapore 469005
Tel: +65-738-5488
Fax: +65-738-5188

For areas not listed, please contact the nearest Customer Business Center. Triconex is represented by agents and distributors worldwide.