Technical Product Guide

Trident v3 Systems

Introduction .......................................................................... 1
System Overview................................................................. 5
Setting up a Trident System .............................................. 15
Product Specifications ....................................................... 19
Communication Capabilities .............................................. 45
TriStation 1131 Developer’s Workbench ........................... 47
CEM Programming Language Editor................................. 51
Sequence of Events (SOE) Capability............................... 53
Safety View ABM ............................................................... 55
Glossary............................................................................. 59

Part No. 9791039-004, Rev 1 March 2016

 Preface

Information in this document is subject to change without notice. Companies, names and data used in
examples herein are fictitious unless otherwise noted. No part of this document may be reproduced or
transmitted in any form or by any means, electronic or mechanical, for any purpose, without the express
written permission of Invensys Systems, Inc, now part of Schneider Electric.
© 2004-2016 Invensys Systems, Inc. All rights reserved.
Schneider Electric, Foxboro, I/A Series, Triconex, Tricon, Trident, and TriStation are trademarks of
Schneider Electric SE, its subsidiaries and affiliates. All other brands may be trademarks of their respective
owners.
DISCLAIMER
Because of the variety of uses for this equipment and because of the differences between this fault-tolerant
equipment and traditional programmable logic and process controllers, the user of, and those responsible for
applying, this equipment must satisfy themselves as to the acceptability of each application and the use of the
equipment.
The illustrations, charts and layout examples shown in this manual are intended solely to illustrate the text of
this manual. Because of the many variables and requirements associated with any particular installation,
Invensys Systems, Inc. cannot assume responsibility or liability for actual use based upon the illustrative uses
and applications.
In no event will Invensys Systems, Inc. be responsible or liable for indirect or consequential damages
resulting from the use or application of this equipment.
INVENSYS SYSTEMS, INC. DISCLAIMS ANY IMPLIED WARRANTY OF FITNESS FOR A
PARTICULAR PURPOSE.
Invensys Systems, Inc. reserves the right to make changes at any time in order to improve design and to supply
the most reliable product. No patent or copyright liability is assumed by Invensys Systems, Inc. with respect
to use of information, circuits, equipment or software described in this text.
TECHNICAL SUPPORT
Customers in the U.S. and Canada can obtain technical support from the Global Customer Support (GCS)
center at the numbers below. International customers should contact their regional support center.
Telephone: Toll-free number 866-746-6477
Toll number 508-549-2424 (outside U.S.)
Fax: Toll number 508-549-4999
The Trident controller is state-of-the art and provides fault tolerance
by means of Triple-Modular Redundant (TMR) architecture.

Introduction

What is Fault-Tolerant Control?

Fault-tolerance in a control system
identifies and compensates for failed
system elements and allows repair
while continuing to control an indus-
trial process without interruption. A
high-integrity control system such as
the Trident® controller can be used in
critical process applications that require
a significant degree of safety and avail-
ability.
What is the Trident Controller?
The Trident controller is a state-of-the
art programmable logic controller that
provides fault tolerance by means of
Triple-Modular Redundant (TMR)
architecture. TMR integrates three
isolated, parallel control systems and
extensive diagnostics in one control
system. The system uses two-out-of-
three voting to provide high-integrity,
error-free, uninterrupted process opera-
tion.
The Trident controller uses three iden-
tical channels. Each channel indepen-
dently executes the application in
parallel with the other two channels.
Specialized hardware and software
voting mechanisms qualify and verify
all digital inputs and outputs from the
field, while analog inputs are subject to
a mid-value selection process.
Because each channel is isolated from
the others, no single-point failure in any
channel can pass to another. If a hard- Trident System Mounted on a Panel
ware failure occurs on one channel, the
other channels override it. Meanwhile, Setting up applications is simplified tors at a single wiring terminal and
the faulting module can be easily with the triplicated Trident system, program the Trident controller with one
removed and replaced while the because it operates as a single control set of application logic. The Trident
controller is online without interrupting system from a customer’s point of view. controller manages the rest.
the process. You can terminate sensors and actua-

1
Introduction
Extensive diagnostics on each channel,
module, and functional circuit immedi-
ately detect and report operational
faults by means of indicators or alarms.
All diagnostic fault information is
accessible to the application and the
operator. This diagnostic data can be
used to modify control actions or to
direct maintenance procedures.
Other features of the Trident controller
that ensure the highest possible system
integrity include:
• Ability to withstand harsh industrial
environments.
• Optimized for applications with
small to medium point counts.
• Support for remote and distributed
I/O.
• Wall- or skid-mounting outside of
control room and enclosures.
• Version 3.x supports 25 total I/O
Baseplates.
• Hot-spare I/O modules for critical
applications where prompt attention
from the operator is not possible.
• Integral support for redundant field
power and logic power sources.
• Integration of I/O modules with field
termination assemblies.
• Field installation and repair at the
module level while the controller
remains online and without
disturbing field wiring
• Execution of applications developed
and debugged using the TriStation™
1131 Developer’s Workbench.
• TriStation 1131 and Modbus
communication from the Main
Processor (MP), Communications
Integration Module (CIM), or
Communication Module (CM).
2
What are Typical User-
Created Applications?
Each day Trident systems supply
increased safety, reliability, and avail-
ability to a worldwide installed base.
The following sections describe typical
applications. For details on the value
Trident can bring to your applications,
ask your sales representative for addi-
tional documentation and customer
references.
Emergency Safety Shutdown
(ESD)
Trident controllers provide continuous
protection for safety-critical units in
refineries, petrochemical and chemical
plants, and other industrial processes.
For example, in reactor and compressor
units, plant trip signals—for pressure,
product feed rates, expander pressure
equalization and temperature—are
monitored and shutdown actions taken
if an upset condition occurs. Traditional
shutdown systems implemented with
mechanical or electronic relays may
provide shutdown protection, but can
also cause dangerous nuisance trips.
Boiler Flame Safety
Process steam boilers are a critical
component in most refinery applica-
tions. Protection of the boiler from
upset conditions, safety interlock for
normal startup and shutdown, and
flame-safety applications are combined
in one integrated Trident system.
In traditional applications, these func-
tions are provided by separate, non-
integrated components. With the fault-
tolerant, fail-safe Trident controller, the
boiler operations staff can use a critical
resource more productively while
maintaining safety at or above the level
of electromechanical protection
systems.
What is TriStation 1131
Developer's Workbench?
The TriStation 1131 Developer's Work-
bench is an integrated tool for devel-
oping, testing, and documenting
applications for the Trident controller.
The programming methodology, user
interface, and self-documentation capa-
bilities make TriStation 1131 software
superior to traditional and competing
engineering tools. TriStation 1131 soft-
ware complies with Part 3 of the IEC
61131 International Standard for
Programmable Controllers and follows
the Microsoft® Windows® guidelines
for graphical user interfaces.
What about Communication
Capabilities?
The Trident controller provides
communication capabilities through
ports on the Main Processor (MP) and
the Communications Integration
Modules (CIM) or the Communication
Modules (CM).
Ports on the MP support Modbus slave
and TriStation 1131 protocols.
Ports on both the CIM and the CM
support:
• Modbus slave (ASCII or RTU)
• Modbus master (RTU)
• Modbus master or slave (TCP)
• TriStation 1131 software
• TCP/IP
• TSAA (UDP/IP)
• TSAA with IP multicast (UDP/IP)
• Triconex Time Synchronization
(UDP/IP or SNTP)
• Triconex Peer-to-Peer (UDP/IP)
• HP JetDirect® (TCP/IP)
Introduction

Ports on only the CIM support:

• Enhanced Peer-to-Peer
• OPC UA
The CIM Baseplate can contain one or
two CIMs.
Ports on only the CM support:
• Triconex Time Synchronization
(DLC)
• Triconex Peer-to-Peer (DLC)
The CM Baseplate can contain one or
two CMs.
For more information, see page 45.

3
Introduction

Notes

4
The Trident controller is designed with a fully triplicated
architecture throughout, from the input modules through the Main
Processors to the output modules.

System Overview

Fault tolerance in the Trident controller
is achieved through the Triple Modular
Redundant (TMR) architecture. The
Trident provides error-free, uninter-
rupted control in the event of hard fail-
ures of components or transient faults
from internal or external sources.
The Trident is designed with a fully
triplicated architecture throughout,
from the input modules through the
MPs to the output modules. Each
module houses the circuitry for three
independent channels. Each channel on
an input module reads the process data
and passes it to the corresponding MP.
The three MPs communicate with each
other using a proprietary, high-speed
bus called the TriBus.
Once per scan, the MPs
synchronize and communi-
cate with their neighbors over
Each I/O Baseplate supports two
modules in one logical slot which
means both the active and hot-spare
module receive the same information
from the field termination wiring.
The MPs switch control between the
two healthy I/O modules approximately
every hour, so that each module under-
goes complete diagnostics on a regular
basis.
If a fault is detected on the active
module, Trident automatically switches
control to the hot-spare module,
allowing the system to continuously
work in triplicated control. The faulty
module can then be removed and
replaced. For details, see “Online
Module Repair” on page 13.
Input Module
Hot Spare
Main Processor Module
Every Trident system contains three
MPs. Each MP controls a separate
channel and operates in parallel with
the other two MPs.
A dedicated I/O control processor on
each MP manages the data exchanged
between the MP and the I/O modules. A
triplicated I/O bus, located on the base-
plates, extends from one column of I/O
modules to the next column using I/O
bus cables.
The I/O control processor polls the
input modules and transmits the new
input data to the MPs. The MPs then
assemble the input data into tables
which are stored in memory for use in
Output Module
Hot Spare

the TriBus. The TriBus sends

Input Channel A I/O Bus
copies of all analog and Channel A
Output
digital input data to each MP, Channel A
then compares output data
from each MP. The MPs vote MP A IOP A
(SX) (IOX)
the input data, execute the
Field Field
application, and send outputs Input
Channel B IO/ Bus
Output
Input Output
generated by the application
Output Voter

Channel B Channel B

to the output modules.

Diagnostic Channel
TriBus &TriTime

In addition, the Trident MP B IOP B

controller votes the output (SX) (IOX)

data on the output modules as

close to the field as possible. Output
Input Channel C I/O Bus Channel C
This allows the Trident to Channel C
detect and compensate for
any errors that could occur
between the TriBus voting MP C IOP C
(SX) (IOX)
and the final output driven to
the field.
Simplified Trident Architecture

5
System Overview

flash EPROM and loaded in DRAM for

Program Processor I/O Processor
execution. The MPs receive power
Dual 24 V from redundant 24-volt DC power
Power Inputs
Alarm 1 Redundant sources. In the event of an external
Alarm
Alarm 2 Relays
+3.3 V Dual-Power
power failure, all critical retentive data
+5 V Regulators is stored in NVRAM (Non-Volatile
3.6 V Random Access Memory).
System Program Battery Debug (RJ-12)

Debug (RJ-12)
Alarm Alarm and Monitor
I/O Bus
A failure of one power source does not
Modbus (DB-9) affect controller performance. If the
Reserved (DB-9) MPC860A Clock/NVRAM
MPC860A
Diagnostic Bus
Channels
controller loses power, the application
8 KB
Ethernet (to other MPs) and all critical data are retained indefi-
Network (RJ-45)
nitely.

Shared Ports on the MPs enable the Trident to

36-Bit Bus
Flash TriBus
6 MB FPGA
Up Stream
Tribus
Up Stream
(to other MPS)
Main Processor Architecture
the voting process. The input table in
each MP is transferred to its neigh-
boring MP by the TriBus. After this
transfer, voting takes place. The TriBus
uses a programmable device with direct
memory access to synchronize,
transmit, and compare data among the
three MPs.
If a disagreement occurs, the signal
value found in two out of three tables
prevails, and the MPs correct the third
table accordingly. One-time differences
which result from sample timing varia-
tions are distinguished from a pattern of
differing data. The MPs maintain data
about necessary corrections in local
memory. Built-in fault analyzer
routines flag any disparity and use it at
the end of each scan to determine
whether a fault exists on a particular
module.
The MPs send the corrected data to the
application. The 32-bit MP executes the
36-Bit Bus
Memory
128 K
communicate with TriStation 1131
software and with external devices by
means of Modbus and Ethernet
protocol.
DRAM DRAM
16 MB 16 MB Each MP provides:
• One Ethernet (IEEE 802.3) TriSta-
Down Stream
tion 1131 port for downloading the
Down Stream
application to the Trident controller
and uploading diagnostic informa-
tion. This port can also be used to
download Trident firmware to the
application in parallel with the neigh- Flash ROM.
boring MP and generates a table of • One Modbus RS-232 or RS-485
output values that is based on the table serial port which acts as a slave
of input values according to user- while an external device is the
defined rules. The I/O control processor master. Typically, a distributed
on each MP manages the transmission control system (DCS) monitors—
of output data to the output modules by and optionally updates—the Trident
means of the I/O bus. controller data directly through an
Using the table of output values, the I/O MP.
control processor generates a smaller
table for each output module and trans-
mits these tables to the appropriate
channels of the output modules over the
I/O bus. For example, MP A transmits a
table to Channel A of each output
module over I/O Bus A. The transmittal
of output data has priority over the
routine scanning of all I/O modules.
Each MP provides 16 megabytes of
DRAM for the user-written application,
sequence-of-events (SOE) and I/O
data, diagnostics, and communication
buffers. The application is stored in

6
Bus and Power Distribution
Power Power
The triplicated I/O bus and redundant Supply Supply
logic power (shown in the figure to the #1 #2

right) are carried from baseplate to

baseplate by user-installed Interconnect I/O Bus
Channel A

~ ~~
Assemblies, I/O Extender Modules and Channel B
Channel C
I/O Bus Cables.
(25 I/O
Baseplates
The TriBus, which is local to the MP Maximum)
EM
Baseplate, consists of three indepen-
CM I/O (8 I/O
dent, serial links operating at 25 mega- Baseplates
bits per second. The MPs synchronize Maximum
Communication per Column)
at the beginning of every scan, then Bus
each MP sends its data to its upstream I/O Bus
Interconnect
and downstream neighbors. Next, the Assembly
TriBus takes these actions: I/O

• Transfers input, diagnostic and

I/O Bus
communication data
• Compares data and identifies MP

disagreements with the output data I/O I/O

and application memory of the Power

previous scan Power Bus
Bus
An important feature of the Trident
architecture is the use of a single trans-
EM EM
mitter to send data to both the upstream
and downstream MPs. This ensures that
the same data is received by the
upstream processor and the down-
stream processor. I/O Bus and Logic Power Distribution

Each column of modules must have a

separate logic power connection.
Field signal distribution is local to each
I/O Baseplate. Each I/O module trans-
fers signals to or from the field through
its associated baseplate assembly. The
two I/O module slots on the baseplate
tie together as one logical slot. Either
position can hold the active I/O module
while the other position holds the hot-
spare I/O module.
A triplicated I/O bus between the I/O Isolation is provided between field and
modules and the MPs transfers data at 2 logic power on all I/O modules.
megabits per second. The I/O bus is
contained within an I/O column and can
be extended to another I/O column
using a set of three I/O bus cables (one
for each TMR channel).
Each column is typically limited to
eight baseplates due to vertical space
restrictions.

Each field connection on the baseplate
extends to both active and hot-spare I/O
modules. Consequently, both the active
module and the hot-spare module
receive the same information from the
field termination wiring.
Logic power for the modules in each
I/O column is distributed using two
independent power rails. Each I/O
column draws power from both power
rails through redundant DC-DC power
converters. Each channel is powered
independently by these redundant
power sources.

7
System Overview

Analog Input Module Analog Input Module Typical Point (1 of 32) Triplicated
I/O Bus
On an Analog Input (AI) Module, each
channel measures the input signals ADC
ASIC
Isolated
Bus
A

asynchronously and places the results Transceiver

into a table of values. Each input table Isolation

is passed to its associated MP over the Filtering
DAC
corresponding I/O bus. The input table
in each MP is transferred to its neigh-

Field Terminations
bors over the TriBus.

Individual Point
ADC Isolated B
In TMR mode, the mid-value data is ASIC Bus
Transceiver
used by the application; in dual mode,
the average is used.
DAC
AI Modules continuously execute
Forced Value Diagnostics (FVD) which
is a self-test diagnostic that detects and
Isolated
signals an alarm for all stuck-at and ADC
ASIC Bus
C
Transceiver
accuracy fault conditions typically in
less than 500 milliseconds. This safety
feature allows unrestricted operation DAC
under a variety of multiple-fault
scenarios.
Each AI Module is guaranteed to Analog Input Module Schematic
remain in calibration for the life of the
controller. Periodic manual calibration
is not required.
Analog Input/Digital Input Analog Input/Digital Input Module Typical Point (1 of 32) Triplicated
I/O Bus
Module
ADC Isolated A
The Analog Input/Digital Input ASIC Bus
Transceiver
Module has 16 digital input points
*
(points 1–16) and 16 analog input Isolation
Filtering
points (points 17–32). DAC

The AI/DI Module has three isolated

Field Terminations

sets of electronics, called channels,

Individual Point

which independently process field data ADC

ASIC
Isolated
Bus
B

input to the module. Sensing of each Transceiver

input point is performed in a manner *

that prevents a single failure on one DAC
channel from affecting another channel.
For analog input points, each channel
receives variable voltage signals from ADC Isolated C
ASIC Bus
each point, converts them to digital Transceiver

values, and transmits the values to the *

three MPs on demand.
DAC
For digital input points, an ASIC on
each channel scans each input point, *On DI points only
compiles data, and transmits it to the
MPs on demand. Analog Input/Digital Input Module Schematic

8
For all points, the MPs vote the data
before passing it to the control
program. In TMR mode, the data
passed is mid-value. In dual mode, the
data passed is the average.
AI/DI Modules sustain complete,
ongoing diagnostics for each channel.
If the diagnostics detect a failure on any
channel, the Fault indicator turns on
and activates the system alarm. The
Fault indicator identifies a channel
fault, not a complete module failure.
AI/DI Modules are guaranteed to
operate properly in the presence of a
single fault and may continue to operate
properly with multiple faults.
AI/DI Modules include the hot-spare
feature which allows online replace-
ment of a faulty module. The AI/DI
Module is mechanically keyed to
prevent improper installation in a
configured baseplate.
Analog Output Module
On an Analog Output (AO) Module,
each channel includes a proprietary
ASIC that receives its output table from
the I/O communication processor on its
corresponding MP. AO Modules use
special shunt circuitry to vote on the
individual output signals before they
are applied to the load. Voter circuitry
ensures only one output channel (A, B,
or C) is driving the field load. The shunt
output circuitry provides multiple
redundancy for all critical signal paths,
guaranteeing safety and maximum
availability.
AO Modules continuously execute
Forced Switch Diagnostics (FSD) on
each point. By carefully forcing error
conditions and observing proper
behavior of the voting circuitry, high
reliability and safe operation is ensured.
This safety feature allows unrestricted
operation under a variety of multiple-
fault scenarios.
Each AO Module is guaranteed to
remain in calibration for the life of the
controller. Periodic manual calibration
is not required.

Triplicated
I/O Bus I/O Controller(s) Field Circuitry Typical Point (4)

Isolated
A µProc Selector
Bus
A Logic
Transceiver

DAC

Voltage Loopback

Current Loopback

B Isolated µProc Selector

Bus B Logic
Transceiver

DAC

Voltage Loopback

Current Loopback Output

Termination

C
Isolated
µProc Selector
Bus
C Logic
Transceiver

DAC

Voltage Loopback

Current Loopback

Analog Output Modules Schematic

9
System Overview

Digital Input Module

A Digital Input (DI) Module contains
the circuitry for three identical channels
(A, B and C). Although the channels
reside on the same module, they are
completely isolated from each other
and operate independently. Each
channel conditions signals indepen-
dently. A fault on one channel cannot
pass to another. Each channel includes
a proprietary ASIC which handles
communication with its corresponding
MP, and supports run-time diagnostics.
Each input channel on the DI Module Digital Input Module Schematic
measures the input signals from each
point on the baseplate asynchronously,
determines the respective states of the output signals just before they are point is momentarily reversed on one of
input signals, and places the values into applied to the load. the output drivers, one after another.
input tables A, B and C respectively. This voter circuitry is based on parallel- Loop-back circuitry on the module
Each input table is interrogated at series paths which pass power if two allows each ASIC to read the output
regular intervals over the I/O bus by the out of three channels (A and B, or B and value for the point to determine
I/O communication processor located C, or A and C) command them to close. whether a latent fault exists within the
on the corresponding MP. For example, The Quad Voter circuitry has multiple output circuit.
MP A interrogates Input Table A over redundancy on all critical signal paths,
I/O Bus A. The output signal transition is guaran-
guaranteeing safety and maximum
teed to be less than 2 milliseconds (500
DI Modules continuously execute availability.
microseconds is typical) and is trans-
Forced Value Diagnostics (FVD) which During Output Voter Diagnostic (OVD) parent to most field devices. For
is a self-test diagnostic that detects and execution, the commanded state of each devices that cannot tolerate a signal
signals an alarm for all stuck-at fault
conditions typically in less than 500
milliseconds. This safety feature allows
unrestricted operation under a variety
of multiple-fault scenarios.
DI Module diagnostics are specifically
designed to monitor devices which hold
points in one state for long periods of
time. The diagnostics ensure complete
fault coverage of each input circuit
even if the actual state of the input
points never changes.
Digital Output Module
On the Digital Output (DO) Module,
each channel includes a proprietary
ASIC which receives its output table
from the I/O communication processor
on the corresponding MP. Digital
Output Modules use the patented Quad
Voter circuitry to vote on the individual Digital Output Module Schematic

10
transition of any length, OVD can be
disabled on a per-point basis from PI Module Typical Point (1 of 6) Triplicated
I/O Bus
TriStation 1131 software.
DO Module diagnostics are specifically +
Isolation
designed to monitor outputs which Filtering
remain in one state for long periods of ASIC
Isolated A
Bus
time. The OVD diagnostics ensure Transceiver
complete fault coverage of each output
–
circuit even if the actual state of the Isolation
output points never changes. Filtering

Pulse Input Module

On a Pulse Input (PI) Module, six sensi- Isolation
Field Terminations Filtering
tive, high-frequency inputs can be indi- Isolated
B
Individual Point

ASIC Bus
vidually configured for non-amplified Transceiver
and amplified magnetic speed sensors
common on rotating equipment, such as
Isolation
turbines or compressors. Filtering
The PI Module senses voltage transi-
tions from the speed sensors. Every Isolation
input transition is sampled and time is Filtering
Isolated C
measured for an optimized number of ASIC Bus
Transceiver
input gear pulses. The resulting count
and time are used to generate a
frequency (revolutions per minute), Isolation
which is transmitted to the MPs. Filtering

PI Modules have three independent

input channels. Each input channel
receives pulse input voltages from each Pulse Input Module Schematic
point, converts the values to frequency
(RPM) data, and transmits the values to
the MPs on demand. To ensure correct
data for each scan, one value is selected
using a mid-value selection algorithm.
Sensing of each input point is designed
to prevent a single failure on one
channel from affecting another channel.

11
System Overview
Solid-State Relay Output Module
On a Solid-State Relay Output (SRO)
Module, output signals are received
from the MPs on each of three chan-
nels. The three sets of signals are voted
and the voted data is used to drive the
32 individual relays. Each output has a
loop-back circuit which verifies the
operation of each relay switch indepen-
dently of the presence of a load.
Ongoing diagnostics test the opera-
tional status of the SRO Module.
The SRO Module is a non-triplicated
module for use on non-critical points
which are not compatible with high-
side, solid-state output switches; for
example, interfacing with annunciator
panels.
HART Communication
Highway Addressable Remote Trans-
ducer protocol (HART™) is a bi-direc-
tional industrial field communication
protocol used to communicate between
intelligent field instruments and host
systems over 4–20 mA instrumentation
wiring. Invensys offers these compo-
nents to enable HART communication
between HART devices in the field and
Configuration and Asset Management
Software running on a PC.
• 2354 Analog Input HART Baseplate
• 2354A Analog Input HART
Hazardous Location Baseplate
• 2483 Analog Output HART
Baseplate
• 2483A Analog Output HART
Hazardous Location Baseplate
• Triconex 4850 HART multiplexer
System Diagnostics
and Status Indicators
The Trident controller uses online diag-
nostics and specialized fault-moni-
toring circuitry to detect and alarm all
single-fault and most multiple-fault
conditions. The circuitry includes I/O
loop-back, watch-dog timers, loss-of-
12
Triplicated Intelligent I/O Controller(s) Field Circuitry Typical Point (2 of 32)
I/O Bus
C1
Isolated
A
Bus ASIC
Transceiver
B Isolated
Bus ASIC ASIC Com
Transceiver
C Isolated
Bus ASIC
Transceiver
C2
Solid-State Relay Output Module Schematic
power sensors, and other proprietary generation. Reporting is done through a
diagnostic mechanisms. Using the local or remote PC running TriStation
alarm information, you can tailor the 1131 software or host computer. For
response of the system to the specific more information on reporting, see the
fault sequence and operating priorities TriStation 1131 Developer’s Guide.
of the application.
Any I/O module can activate the system
integrity alarm, which consists of
redundant normally closed (NC) relay
contacts on each MP. Any failure
condition, including loss or brown-out
of system power, activates the alarm to
summon plant maintenance personnel.
The front panel of every I/O module
includes light-emitting diode (LED)
indicators that display the status of the
module or the external systems to
which it is connected. Pass, Fault and
System Status Indicators
Active indicators are common to all I/O
modules. Other indicators are module-
specific.
Normal service of a Trident system
consists of replacing plug-in modules.
A lighted Fault indicator shows that the
module has detected a fault and must be
replaced.
All internal diagnostic and alarm data is
available for remote logging and report
Online Module Repair Ideally, at least one hot-spare module
Because the logical slot for Trident should be installed for every type of I/O
modules can contain two identical I/O module used in the system. For
modules, a faulted module can be example, if a Trident system normally
repaired online without interrupting the operates with four DI Modules, at least
control process. one hot-spare DI Module should be
installed at all times. With this arrange-
In the case where there are two identical ment, the hot-spare module is tested
I/O modules in the slot, Trident period- regularly and can be used for online
ically switches control between each replacement of any DI Module in the
module. When one module is active, system.
the other acts as a hot-spare module—
powered, but inactive.
Trident switches control between the
two healthy I/O modules approximately
every hour, so that each module under-
goes complete diagnostics on a regular
basis.
If a fault is detected on the active
module, the Trident system automati-
cally switches control to the hot-spare
module, allowing the system to contin-
uously work in triplicated control. The
faulty module can then be removed and
replaced.
In the case where there is only one I/O
module in the slot and a fault occurs, a
second I/O module can be inserted in
the slot. After the replacement module
passes a diagnostic test, it becomes the
active module.
If a fault occurs on a system that does
not have a hot-spare module, the Fault
indicator turns on, but the module
remains active in dual control. When a
replacement module is inserted and
passes the diagnostic test, Trident
switches control to the second I/O
module and returns to triplicated
control.
After the replacement module becomes
active, the faulty module can be
removed and sent to Invensys for
repair. This method demonstrates the
Trident’s ability to automatically transi-
tion from triplicated to dual control and
back again without process interrup-
tion.

13
Notes
A typical Trident system is configured into one or more vertical I/O
columns guided by DIN rails and mounted on a sheet-metal panel.

Setting up a Trident System

A Trident system consists of: • Communication Module

• MPs and I/O modules (CM)
• Optional CIMs or CMs • Analog Input (AI)
• The baseplates on which the • Analog Input/Digital
modules are mounted Input (AI/DI) MP
End Cap
• Field wiring connections • Digital Input (DI)
DIN
• A programming workstation • Analog Output (AO) Rail

running TriStation 1131 software • Digital Output (DO)

A typical Trident system is configured • Pulse Input (PI) MP
I/O
End Cap
into one or more vertical I/O columns • Solid-State Relay Output
guided by DIN rails and mounted on a (SRO)
1
1

MP
sheet-metal panel, as shown in the Interconnect
The dimensions of the MP, Assembly
figure at the right.
CM, and CIM Baseplates
AI DO
Multiple I/O columns are connected by are identical to one another.
means of extender modules and I/O bus
Version 2.0 and later Trident 1 3

cables. The completed panel is installed

systems can include 25 total
in a floor- or wall-mounted enclosure I/O
I/O Baseplates (requires Interconnect

such as a Rittal® cabinet or a Hoffman®

Assembly
TriStation 1131 v4.5 soft- DI RO
box. ware or later).
For more information on available Version 2.0 and later Trident
2 4

baseplates, modules, and accessories, systems support: EM EM

see “Product Specifications” on
• 25 I/O Baseplates
page 19.
maximum I/O Bus
Cables

• 416 AI points maximum

Planning a System
Configuration
Before a Trident system can be physi-
cally installed, its configuration must
be planned, based on the requirements
described in this section.
A Trident system must include three
MPs and the MP Baseplate.
The system can also include any combi-
nation of these module types and base-
plates:
• Communications Integration
Module (CIM)
(13 AI baseplates, 13
AI/DI baseplates, or any
combination that does
not exceed 416 total AI
or AI/DI points)
• 20 AO points maximum
(5 baseplates)
• 640 DI points maximum (20 DI
baseplates, 25 AI/DI baseplates, or
any combination that does not
exceed 640 total DI points)
• 320 DO points maximum
(20 baseplates)
Typical System Configuration
• 30 PI points maximum
(5 baseplates)
• 640 SRO points maximum
(20 baseplates)
For information on other Trident
versions, see the Planning and Installa-
tion Guide for Trident v1 Systems or the
Planning and Installation Guide for
Trident v2-v3 Systems.

15
Setting up a Trident System

Performance and other considerations Maximum

may limit the maximum number of I/O Model
Module Logic Power Maximum Field Power (Watts)b
Number
points in some applications. (Watts)a

Please contact the Global Customer Primary Spare

Support (GCS) center for help config- Main Processor 3101 8 Not applicable Not applicable
uring large systems. Communication 3201 8 Not applicable Not applicable
Module
Interconnection of Baseplates
Communications 3211 13.7 Not applicable Not applicable
Baseplates are connected by Intercon-
Integration
nect Assemblies that carry I/O Module with
messages, logic power, and system Media Adapter
power across baseplates. The MP Inter- Analog Input 3351 3 4 Negligible
connect is connected to an I/O Base-
Analog Input/ 3361 3 4 Negligible
plate, and the I/O Interconnects are
Digital Input
connected to other I/O Baseplates.
Analog Output 3481 3 3 Negligible
Extending the I/O Bus
Analog Output 3482 3 7 Negligible
I/O Extender Modules (EM) and I/O
Digital Input 3301 3 7 Negligible
Bus Cables carry I/O messages from
one I/O column to another and to Digital Input 3311 3 7 Negligible
supply logic power connections for Digital Output 3401 3 4 Negligible
each I/O column. Digital Output 3411 3 20 Negligible
Modules mounted in two columns must Pulse Input 3382 3 Negligible Negligible
be connected together by an Intercon- Solid-State 3451 3 4 Negligible
nect Assembly. Two I/O Extender Relay Output
Modules are linked by I/O Bus Cables,
a.To convert watts to British thermal units: BTU = watts x 3.414.
as shown in the figure on page 15.
b.Field power is the percentage of field circuit power that is dissipated within the baseplate.
Required Accessories
For maximum reliability, the average • Length of I/O bus extension cables
End caps, terminal covers, and slot ambient temperature of a Trident
covers are used to minimize the expo- Note: For distances greater than 650
system should be below 120° F (50° C).
sure of Trident components to dust, feet or for applications requiring isola-
Adequate convection or forced-air
liquids, and corrosive atmospheres. tion, fiber-optic transceivers are
cooling should be provided. In vented
commercially available. For compat-
End caps protect the top and bottom of applications, air should flow into vents
ible units and supported distances,
each end-of-column baseplate. They at the bottom of the enclosure and exit
contact your regional customer center.
are available for both MP Baseplates at the top.
and I/O Baseplates. Addressing of System
I/O Bus Length
Components
I/O slot covers protect unused I/O slots. If the total length of the I/O bus is less
Terminal covers protect terminal base- The MP and CIM or CM (if used) are
than 20 feet (6 meters), the I/O bus can
plates. identified by the Address Plug located
be operated without termination.
at the bottom-left part of the MP Base-
Power and Cooling If the I/O bus length is greater than 20 plate. The Address Plug is the node
Considerations feet, the bus should be terminated. number for the system. In TriStation
Before operating a Trident system, the 1131 software, the number is used for
The maximum I/O bus length is 650
logic power consumption and cooling the configuration setup. (Node numbers
feet (200 meters) which includes the
requirements should be determined. can be from 1 to 63.)
following:
The heat load dissipated by the system The I/O modules also have Address
is calculated by adding the logic power • Length of all baseplates
Plugs which are used to identify field
and field power for all of the modules, • Length of I/O Extender Modules point connections and are the equiva-
using the table on this page.

16
lent of traditional Rack-Slot addresses.
In TriStation 1131 software, the
numbers are also used for the configu-
ration setup.

Mounting Components on a Sheet-Metal Panel

Placing an I/O Module on a Baseplate

17
Setting up a Trident System
Mechanical Installation
A Trident system is physically set up by
installing the following components on
a user-supplied sheet-metal panel:
• One MP Baseplate with three MP
Modules
• One Communications Integration
Baseplate with one or two CIMs
• One Communication Baseplate with
one or two CMs
• I/O Baseplates with one or two I/O
modules each
• Interconnect Assemblies for
connecting baseplates
• I/O bus extenders and cables for
connecting I/O columns
• End caps for the top and bottom of
each I/O column
Panel Mounting of Baseplates
and Modules
The sheet-metal panels on which base-
plates are mounted and the DIN rails
used for guidance are user-supplied.
The panels should be made of 12-gauge
or heavier steel and the DIN rails should
be compatible with the DIN 50-022
standard.
Invensys recommends installing DIN
rails to act as guides prior to mounting
the baseplates.
18
The basic steps for installing Trident Connecting to a PC Running
components include: TriStation 1131 Software
• Installing DIN rails The Trident controller communicates
with the TriStation 1131 PC through
• Fastening the baseplates onto the Ethernet network ports on the CIM,
panels
CM, or MP or through serial ports on
• Joining the baseplates together with the CIM or CM.
interconnect assemblies
For more information, see the
• Connecting multiple columns of TriStation 1131 Developer’s Guide and
baseplates with extender modules the Communication Guide for Trident
and I/O bus cables v2-v3 Systems.
• Installing the MP, CIM or CM, and
I/O modules onto the baseplates Connecting Field Devices
Typical Enclosures Field devices are wired to the termina-
tion strips mounted on either the base-
When all baseplates, modules, and
connective devices are securely plate or the external termination panel.
mounted on a panel, the entire system is
placed in a user-supplied metal enclo-
sure with a sealed bottom and a closed
door.
Either of the following can be used:
• A floor-mounted enclosure such as a
Rittal cabinet for one I/O column
• A wall-mounted enclosure such as a
Hoffman box for two or more I/O
columns
Connecting Logic Power
and Field Power
The Trident controller offers a flexible
power-handling system.
Logic Power
Logic power is distributed down each
column. This distribution is redundant
and both must be wired. If not wired, a
system alarm is generated. If a single
power source is used, it must be jump-
ered to the redundant termination
points.
Field Power
Field power is also redundant and both
wiring points must be wired. Each base-
plate is isolated from all other base-
plates. This configuration provides you
with a wide range of possibilities for
field power distribution.
The Trident controller supports a complete range of modules
for applications with low point counts and distributed I/O.
The Trident controller supports a range
of modules for applications with low
point counts and distributed I/O. This
section provides detailed specifications
for each product in the Trident family.
Also included are:
• International approvals (page 25)
• Environmental specifications
(page 27)
• Dimensions and clearances (page 27)
Main Processor Modules
and Baseplates
Every Trident system is controlled by
three MP Modules that reside on a single
baseplate. Each MP Module acts as one
channel of the triplicated Trident
system. For details, see page 27.
Communications Integration
Module/Communication Module
and Baseplates
The Communications Integration
Module (CIM) and the Communication
Module (CM) are three-to-one inter-
faces to the MPs that enable use of
industry-standard communication
protocols. A single Trident controller
can support up to two CIMs or CMs on
one CIM or CM Baseplate with each
CIM or CM operating independently.
Two CIMs or CMs can provide redun-
dant communication connections or
independent communication ports. For
details, see page 29.
Analog Input Module
and Baseplates
Each AI Module has three isolated chan-
nels which independently process
analog inputs from field devices. Each
channel transmits the data to the MP
Product Specifications
associated with the channel. The MPs
vote the data before passing it to the
application. In addition to the standard
AI baseplate, a HART AI baseplate and
a hazardous location HART AI base-
plate are available. For details, see
page 35.
Analog Input/Digital Input Module
and Baseplates
Each AI/DI Module has three isolated
channels which independently process
analog and digital inputs from field
devices. Each channel transmits the data
to the MP associated with the channel.
The MPs vote the data before passing it
to the application. For details, see
page 35.
Digital Input Modules
and Baseplates
Each DI Module has three isolated chan-
nels which independently process digital
input from field devices. Each channel
transmits the data to the MP associated
with the channel. For details, see
page 38.
Analog Output Modules
and Baseplates
Each AO Module has three isolated
channels which independently accept
data from the MPs. Voter circuitry
selects a single channel to drive the
output and shunts output from the other
channels. In addition to the standard AO
baseplate, a HART AO baseplate and a
hazardous location HART AO baseplate
are available. For details, see page 37.
Digital Output Modules
and Baseplates
Each DO Module has three isolated
channels which independently accept
data from the MP associated with each
channel. For details, see page 39.
Pulse Input Modules
and Baseplate
Each PI Module has three isolated chan-
nels which independently receive
voltage transitions from each point and
converts the transitions to frequency
(RPM) data. For details, see page 40.
Solid-State Relay Output Module
and Baseplate
Each SRO Module has three isolated
channels which independently accept
data from the MP associated with each
channel. The channels provide input to a
voter circuit which uses the voted value
to drive the coil of the relay. For details,
see page 42.
I/O Extender Modules
I/O Extender Module Kits are used to
carry I/O messages from one I/O column
to another and to provide logic power
terminals for each I/O column. For
details, see page 43.
Interconnect Assemblies
Trident baseplates within a single I/O
column are connected by Interconnect
Assemblies that carry I/O messages and
logic power across the baseplates. For
details, see page 44.
Required Accessories
Accessories such as end caps, terminal
covers, and slot covers are required to
protect Trident components from dust,
liquids, and corrosive atmospheres. For
details, see page 44. Components for the
Trident system are offered in TriPaks
and kits, as well as by individual parts.
For details, see page 20.
19
Product Specifications
Standard Trident Products
Model Product Name Qty Description Consists of
5101 Main Processor TriPak 3 Main Processor Module 3101
1 Main Processor Baseplate Kit 2101
5201 Communication Module TriPak 1 Communication Module 3201
1 Communication Module Baseplate Kit 2201
5211 Communications Integration 1 Communications Integration Module 3211
Module TriPak 1 Communications Integration Module Baseplate Kit 2211
1 Media Adapter 2211-100
5351 Analog Input TriPak 1 Analog Input Module 3351
1 Analog Input Baseplate Kit 2351
5361 Analog Input/Digital Input 1 Analog Input/Digital Input Module 3361
TriPak 1 Analog Input/Digital Input Baseplate Kit 2361
5352 Analog Input TriPak, RTD/TC/4- 1 Analog Input Module 3351
20 mA 1 Analog Input Baseplate, RTD/TC/4-20 mA 2352
5354 Analog Input TriPak, HART 1 Analog Input Module 3351
1 Analog Input Baseplate Kit, HART, 2354
1 Triconex 4850 HART Multiplexer 1600106-001
5354A Analog Input TriPak, HART, 1 Analog Input Module 3351
Hazardous Location 1 Analog Input Baseplate Kit, HART, Hazardous Location 2354A
1 Triconex 4850 HART Multiplexer 1600106-001
5481-1 Analog Output TriPak 1 Analog Output Module 3481
1 AO Module Baseplate Kit 2481
5482-1 Analog Output TriPak, High- 1 High-Current Analog Output Module 3482
Current 1 AO Module Baseplate Kit 2481
5301 Digital Input TriPak 1 Digital Input Module 3301
1 Digital Input Baseplate Kit 2301
5311 Digital Input TriPak, High 1 Digital Input Module, High Resolution 3311
Resolution 1 Digital Input Baseplate Kit 2301
5312-F Digital Input TriPak, High 1 Digital Input Module, High Resolution 3311
Resolution, High Voltage 1 Digital Input Baseplate Kit, High Voltage 2302-F
5302-F Digital Input TriPak, High 1 Digital Input Module 3301
Voltage 1 Digital Input Baseplate Kit, High Voltage 2302-F
5401 Digital Output TriPak 1 Digital Output Module 3401
1 Digital Output Baseplate Kit 2401
5401L Digital Output TriPak, Low 1 Digital Output Module 3401
Current 1 Digital Output Baseplate Kit, Low Current 2401L
5411H Digital Output TriPak, 1 Digital Output Module, Supervised 3411
Supervised, High Current 1 Digital Output Baseplate Kit, High Current 2401H
5402-F Digital Output TriPak, High 1 Digital Output Module 3401
Voltage 1 Digital Output Baseplate Kit, High Voltage 2402-F
5451 Solid-State Relay Output TriPak 1 Solid-State Relay Output Module 3451
1 Solid-State Relay Output Baseplate Kit 2451
5382-1 Pulse Input TriPak, Enhanced 1 Pulse Input Module, Enhanced 3382
1 Pulse Input Baseplate Kit 2381
5382A Pulse Input TriPak, Enhanced, 1 Pulse Input Module, Enhanced 3382
Hazardous Location 1 Pulse Input Baseplate Kit, Hazardous Location 2381A

20
Standard Trident Products (Continued)
Model Product Name Qty Description Consists of
5483 Analog Output TriPak, HART 1 Analog Output Module 3481
1 Analog Output Baseplate Kit, HART 2483
1 Triconex 4850 HART Multiplexer 1600106-001
5483A Analog Output TriPak, HART, 1 Analog Output Module 3481
Hazardous Location 1 Analog Output Baseplate Kit, HART, Hazard. Location 2483A
1 Triconex 4850 HART Multiplexer 1600106-001
2101 Main Processor Baseplate Kit 1 MP Baseplate 3000671-100
1 MP Interconnect Assembly 2920
1 Accessories Kit 8401
1 Top End Cap – I/O 2910
1 Top End Cap – MP 2912
1 Bottom End Cap – I/O 2911
1 Bottom End Cap – MP 2913
1 Triconex User Documentation CD Contact
Invensys
2201 Communications Module 1 Cover Module, Blank 2900
Baseplate Kit 1 Communications Module Baseplate 3000671-100
1 Interconnect Assembly 3000685-001
2211 Communications Integration 1 Cover Module, Blank 2900
Module Baseplate Kit 1 Communications Integration Module Baseplate 3000993-100
1 Interconnect Assembly 3000685-001
2281 I/O Bus Extender Module Kit 2 I/O Extender Module 3000678-100
3 2-ft. I/O Bus Cables 4000212-002
1 I/O Interconnect Assembly 2921
1 Top End Cap – I/O 2910
1 Bottom End Cap – I/O 2911
2291 I/O Bus Termination Kit, I/O 1 I/O Extender Module 3000678-100
Baseplate 1 I/O Interconnect Assembly 2921
1 I/O Bus Terminator Kit (Set of 3) 3900064-003
2292 I/O Bus Termination Kit, MP 1 I/O Extender Module 3000678-100
Baseplate 1 MP Interconnect Assembly 2920
1 I/O Bus Terminator Kit (Set of 3) 3900064-003
2301 Digital Input Baseplate Kit 1 I/O Baseplate 3000673-020
1 I/O Interconnect Assembly 2921
1 Slot Cover 2900
1 Terminal Cover 2901
2302-F Digital Input Baseplate Kit, High 1 I/O External Termination Baseplate 3000721-300
Voltage 2 External Termination Panel (Solid State Relay Input) 3000762-110
1 I/O Interconnect Assembly 2921
1 Slot Cover 2900
2 Interface Cable, 10 ft 4000187-310
SSR Input Modules for use with SSR Input ETP
100 to 240 VAC (ordered separately) 1300447-001
2302A-F Digital Input Baseplate Kit, 1 I/O External Termination Baseplate 3000989-305
Hazardous Location 1 External Termination Panel Kit 9573-610F
1 I/O Interconnect Assembly 2921
1 Slot Cover 2900
1 Terminal Cover 2901

21
Product Specifications
Standard Trident Products (Continued)
Model Product Name Qty Description Consists of
2342 Analog Input/Digital Input 1 I/O External Termination Baseplate 3000721-130
Baseplate Kit, External 1 I/O Interconnect Assembly 2921
Termination 1 Slot Cover 2900
2342A-F Analog Input/Digital Input 1 I/O External Termination Baseplate 3000989-135
Baseplate Kit, Hazardous 1 I/O Interconnect Assembly 2921
Location 1 Slot Cover 2900
1 AI/DI ETP Kit, Hazardous Location 9793-610F
2351 Analog Input Baseplate Kit 1 I/O Baseplate 3000675-010
1 I/O Interconnect Assembly 2921
1 Slot Cover 2900
1 Terminal Cover 2901
2352 Analog Input Baseplate Kit for 1 I/O External Termination Baseplate 3000721-100
TC, RTD, and 4-20mA (requires 1 I/O Interconnect Assembly 2921
2 of part number 9764-510F) 1 Slot Cover 2900
2352A-F Analog Input Baseplate Kit, 1 I/O External Termination Baseplate 3000989-105
Hazardous Location 1 External Termination Panel Kit 9792-310F
1 I/O Interconnect Assembly 2921
1 Slot Cover 2900
2354 Analog Input Baseplate Kit, 1 I/O HART Baseplate 3000851-010
HART 1 MP Interconnect Assembly 2920
1 Slot Cover 2900
1 Terminal Cover 2901
2354A Analog Input Baseplate Kit, 1 I/O HART Baseplate 3000851-110
HART, Hazardous Location 1 MP Interconnect Assembly 2920
1 Slot Cover 2900
1 Terminal Cover 2901
2361 Analog Input/Digital Input 1 I/O Baseplate 3000675-020
Baseplate Kit 1 I/O Interconnect Assembly 2921
1 Slot Cover 2900
1 Terminal Cover 2901
2381 Pulse Input Baseplate Kit 1 I/O Baseplate 3000719-100
1 I/O Interconnect Assembly 2921
1 Slot Cover 2900
1 Terminal Cover 2901
2381A Pulse Input Baseplate Kit, 1 I/O Hazardous Location Baseplate 3000719-200
Hazardous Location 1 I/O Interconnect Assembly 2921
1 Slot Cover 2900
1 Terminal Cover 2901
2401 Digital Output Baseplate Kit 1 I/O Baseplate 3000674-030
1 I/O Interconnect Assembly 2921
1 Slot Cover 2900
1 Terminal Cover 2901
2401H Digital Output Baseplate Kit, 1 I/O Baseplate 3000975-030
High Current 1 I/O Interconnect Assembly 2921
1 Slot Cover 2900
1 Terminal Cover 2901

22
Standard Trident Products (Continued)
Model Product Name Qty Description Consists of
2401L Digital Output Baseplate Kit, 1 I/O Baseplate 3000659-130
Low Current 1 I/O Interconnect Assembly 2921
1 Slot Cover 2900
1 Terminal Cover 2901
2402-F Digital Output Baseplate Kit, 1 I/O Baseplate 3000764-300
High Voltage 1 External Termination Panel (Relay Output ETP) 3000763-110
1 I/O Interconnect Assembly 2921
1 Slot Cover 2900
1 Interface Cable, 10 ft 4000188-310
Relay Output Modules for use with Relay Output ETP
(ordered separately)
SSR, 2 A at 75 to 264 VAC 1300462-001
SSR, 2 A at 4 to 60 VDC 1300471-001
SSR, 1.5 A at 40 to 200 VDC 1300472-001
SPDT Relay 5A to 30V 1300463-001
2402A-F Digital Output Baseplate Kit, 1 I/O External Termination Baseplate 3000764-305
Hazardous Location 1 External Termination Panel Kit 9671-610F
1 I/O Interconnect Assembly 2921
1 Slot Cover 2900
2451 Solid-State Relay Output 1 I/O Baseplate 3000676-310
Baseplate Kit 1 I/O Interconnect Assembly 2921
1 Slot Cover 2900
1 Terminal Cover 2901
2480A-F Analog Output Baseplate Kit, 1 I/O External Termination Baseplate 3000764-505
Hazardous Location 1 External Termination Panel Kit 9863-610F
1 I/O Interconnect Assembly 2921
1 Slot Cover 2900
2481 Analog Output Baseplate Kit 1 I/O Baseplate 3000674-010
1 I/O Interconnect Assembly 2921
1 Slot Cover 2900
1 Terminal Cover 2901
2483 Analog Output Baseplate Kit, 1 I/O HART Baseplate 3000852-020
HART 1 MP Interconnect Assembly 2920
1 Slot Cover 2900
1 Terminal Cover 2901
2483A Analog Output Baseplate Kit, 1 I/O HART Baseplate 3000852-120
HART, Hazardous Location 1 MP Interconnect Assembly 2920
1 Slot Cover 2900
1 Terminal Cover 2901
4 MTL4546 Intrinsic Safety Barrier—Isolator 1600107-001
8401 Trident/Triconex General 1 Set of Spare Fuses
Purpose Accessory Kit 2 Set of Address Plugs (1 through 10) 3000698-010
1 Set of Address Plugs (11 through 20) 3000698-020
1 Set of Address Plugs (21 through 32) 3000698-030
1 Set of Address Plugs (33 through 43) 3000698-040
1 Set of Address Plugs (44 through 54) 3000698-050
1 Set of Address Plugs (55 through 63) 3000698-060

23
Product Specifications
Standard Trident Products (Continued)
Model Product Name Qty Description Consists of
9573-610F Digital Input Termination Panel 2 External Termination Panel, DI 3000771-880
Kit, Hazardous Location 2 Interface Cable, 10 ft, DI 4000195-310
(for use with Model 2302A-F)
9671-610F Digital Output Termination Panel 1 External Termination Panel, DO 3000769-390
Kit, Hazardous Location 1 Interface Cable, 10 ft, DO 4000196-310
(for use with Model 2402A-F)
9764-510F RTD/TC/AI Termination Panel 1 External Termination Panel, RTD/TC/AI 3000712-100
Kit (for use with Model 2352) 1 Interface Cable, 10 ft 4000189-510
Signal Conditioning Modules for use with 9764-510F
(ordered separately)
4–20 mA 1600048-220
32° F to 392° F (0° C to 200° C), RTD 1600048-030
32° F to 1112° F (0° C to 600° C), RTD 1600048-040
32° F to 1400° F (0°C to 760° C), Type J TC 1600048-110
32° F to 2372° F (0° C to 1300° C), Type K TC 1600048-120
32° F to 752° F (0° C to 400° C), Type T TC 1600048-130
32° F to 1652° F (0° C to 900° C), Type E TC 1600048-140
Shorting Plug 1600048-300
9792-310F Analog Input Termination Panel 1 External Termination Panel, AI 3000771-710
Kit, Hazardous Location 1 Interface Cable, 10 ft, AI 4000197-510
(for use with Model 2352A-F)
9793-610F Analog Input/Digital Input 1 External Termination Panel, AI 3000771-710
Termination Panels Kit, 1 External Termination Panel, DI 3000771-880
Hazardous Location 1 Interface Cable, 10 ft, AI 4000197-510
(for use with Model 2342A)
1 Interface Cable, 10 ft, DI 4000195-310
9863-610F Analog Output Termination 1 External Termination Panel, AO 3000770-960
Panel Kit, Hazardous Location 1 Interface Cable, 10 ft, AO 4000198-510
(for use with Model 2480A)
Triconex 4850 Triconex 4850 HART 1 Triconex 4850 HART Multiplexer 1600106-001
Multiplexer
Contact Invensys TriStation 1131 and Diagnostic 1 TriStation 1131 v4.x Software License Contact
for current model Software Invensys
number
1 Enhanced Diagnostic Monitor v2.x and later Contact
1 Triconex DDE Server v4.x Invensys
1 SOE Recorder v4.x
Contact Invensys Triconex User Documentation 1 CD containing user documentation in PDF format Contact
for current model CD Invensys
number

NOTE
It is possible to upgrade older systems, which may contain models not listed in the table above, to system version 3.x. Contact
the Global Customer Support (GCS) center for detailed compatibility information.

24
 International Approvals
The Trident controller has been certi-
fied as complying with multiple inter-
nationally recognized standards by the
following internationally recognized
certification agencies, these certifica-
tions have qualified the Trident
controller for use around the world in
safety critical applications. Test reports
from the various certification agencies
are available upon request.
Canadian Standards Association
Canadian Standards Association (CSA)
has certified that the Trident v3.x
controller is in full compliance with the
following internationally recognized
electrical safety standards and is quali-
fied for general use in North American
and other jurisdictions requiring
compliance with these standards.
European Union CE Mark
Based upon the independent TÜV eval-
uation and test results, Invensys has
certified the Trident v3.x controller
suitable to use in the European Union
and all other jurisdictions requiring
compliance with the European Union
EMC Directive No. 89/336/EEC and
Low Voltage Equipment Directive No.
72/23/EEC. See Certificate of Compli-
ance for details. To ensure maximum
reliability and trouble-free operation,
the Trident and associated wiring must
be installed following the guidelines
outlined in the Planning and Installa-
tion Guide for Trident v2-v3 Systems.

Certifying Agency Standard Number Title

Canadian Standards CAN/CSA-C22.2 No.0-M91 General Requirements—Canadian Electrical Code, Part II
Association
CSA Std C22.2 No.0.4-M1982 Bonding and Grounding of Electrical Equipment (Protective Grounding)
CAN/CSA C22.2 No 1010.1-92 Safety Requirements for Electrical Equipment for Measurement, Control, and
Laboratory Use, Part 1: General Requirements
UL 3121-1 1998-07-14 Process Control Equipment
European Union CE IEC 61131-2 Programmable Controllers Part 2: Equipment Requirements and Test.
Mark Overvoltage Category II is assumed.
Factory Mutual 3611 Electrical Equipment for use in Class I-Division 2; Class II-Division 2; and
Class III-Divisions 1 and 2, Hazardous Locations
3810 Electrical and Electronic Test, Measuring and Process Control Equipment
3600 Electrical Equipment for Use in Hazardous (Classified) Locations-General
Requirements
TÜV Rheinland IEC 61508, Parts 1-7, 2010 Functional safety of electrical/electronic/programmable electronic safety-related
systems
IEC 61511:2004 Functional safety - Safety instrumented systems for the process industry sector
IEC 61131-2:2007 Programmable Controllers Part 2: Equipment Requirements and Test.
Overvoltage Category II is assumed.
IEC 61326-3-1:2008 Electrical equipment for measurement, control and laboratory use - EMC
requirements - Part 3-1: Immunity requirements for safety-related systems and
for equipment intended to perform safety-related functions (functional safety) -
General industrial applications
ANSI/ISA-84.00.01-2004 Functional Safety: Safety Instrumented Systems for the Process Industry Sector
(IEC 61511-1 Mod) - Part 1: Framework, Definitions, System, Hardware and Software Requirements
EN50156-1:2004 Electrical equipment for furnaces and ancillary equipment. Requirements for
application design and installation
EN 50178:1998 Electronic equipment for use in power installations
NFPA 72:2007 National Fire Alarm Code
NFPA 85:2007 Boiler and Combustion Systems Hazards Code, 2007 Edition
NFPA 86:2011 Standards for Ovens and Furnaces
EN 298:203 Automatic gas burner control systems for gas burners and gas burning
appliances with or without fans
EN 54-2:1997/A1:2006a Fire detection and fire alarm systems. Control and indicating equipment.

a.To comply with the requirements of EN 54-2:1997/A1:2006, the Trident system must be installed in a metal enclosure with a sealed bottom and a closed door,
connected to Safety Ground, and it must be installed in an area with an access level greater than 2.

25
Product Specifications
To comply with the CE Mark require-
ment for emissions and conducted
susceptibility, and EU directives, these
guidelines must be followed:
• The entire Trident system must be
installed in a metal enclosure with a
sealed bottom and a closed door,
connected to Safety Ground.
• Field power supplies must be
approved for use in safety extra-low-
voltage (SELV) circuits according to
the requirements of IEC 61010-1.
To comply with the requirements of EN
54-2:1997, the system must be located
in an area with an access level greater
than 2.
To comply with standards related to
conducted disturbance, a Schaffner®
FN 2410 line filter, or equivalent, must
be installed between power supplies
and baseplates.
TÜV Rheinland
TÜV has certified that the Trident v3.x
controller is in full compliance with the
internationally recognized standards
listed on page 25.
Factory Mutual
Factory Mutual (FM) has certified the
Trident v3.x controller is in full compli-
ance with the internationally recog-
nized standards listed on page 25 and is
qualified for use in Class I, Division 2
Temperature T4, Groups A, B, C, and D
hazardous indoor locations. In North
America, the field signals used with
ATEX-compliant external termination
panels are certified for use in Class 1,
Division 2, Groups C and D. For
hazardous location applications, redun-
dant power sources must be used for
system power. Also, any signal going to
or through a hazardous atmosphere
must use hazardous location protection,
such as an intrinsically safe (IS) barrier.
26
Feature Specification
Operating temperature -4° F to +158° F (-20° C to +70° C) ambient (which is the
air temperature measured at the bottom of the baseplate),
per IEC 60068-2-14, tests Na and Nb
Storage temperature -40° F to +185° F (-40° C to +85° C) per IEC 60068-2-2,
test Bb, IEC 60068-2-1, test Ab, and IEC 60068-2-30, test
Db
Relative humidity 5% to 95%, non-condensing
Corrosive environment Class G3 Level as defined in ISA Standard S71.04, based
on exposure testing according to EIA Standard 364-65A,
Class IIIA
Sinusoidal vibrations per axis 1.75 mm displacement @ 5 to 8.4 Hz (continuous)
0.5 g acceleration @ 8.4 to 150 Hz (continuous)
3.5 mm displacement @ 5 to 8.4 Hz (occasional)
1.0 g acceleration @ 8.4 to 150 Hz (occasional)
All tests per IEC 60068-2-6, test Fc
Shock 15 g, 11 ms, half-sine, 3 axis, per IEC 60068-2-27, test Ea
Electrostatic discharge IEC 61000-4-2, 4 kV contact, 8kV air
Conducted susceptibility IEC 61000-4-4, Fast Transient/Burst, 2 kV power &
unshielded AC I/O, 1 kV signal and communication lines
IEC 61000-4-5, Surge Withstand, 2 kV CM2/1 kV DM2
AC power and I/O, 1 kV CM2 I/O, shielded and
communication, 0.5 kV CM2/0.5 kV DM2 DC power
IEC 61000-4-6, RFI, 0.15-80 MHz, 10 V
IEC 61000-4-18, Damped Oscillatory Wave, 0.5 kV CM
shielded, 2.5 kV CM/1 kV DM unshielded AC I/O &
power, 1 kV CM/0.5 kV DM I/O
Radiated susceptibility IEC 61000-4-3, Radio Frequency Electromagnetic Fields,
80–1000 MHz: 10 V/m, 1.4–2.0 GHz: 3 V/m, 2.0–2.7
GHz: 1 V/m
Conducted emissions CISPR 16, Class A, 0.15-30MHz, 73-79db when installed
per the guidelines of the Planning and Installation Guide
for Trident v2-v3 Systems.
Radiated emissionsa CISPR 11, Class A, 30-1000 MHz @ 10m, 4-47 db when
installed per the guidelines of Planning and Installation
Guide for Trident v2-v3 Systems.
Power interruptions IEC 61000-4-29, 1 ms battery, 10 ms DC power supply
Cable flame test ratingb Interface cables
(connect external termination panels to baseplates):
FT4 Vertical Flame Test-Cables in Cable Trays per C.S.A.
C22.2 No. 0.3-92 Para 4.11.4c
I/O bus cables
(connect columns of baseplates):
FT6 Horizontal Flame & Smoke Test-per C.S.A. C22.2
No. 0.3-92 Appendix Bd
a. For European Union CE Mark and conducted susceptibility compliance, the Trident system must be
mounted in a metal enclosure with a sealed bottom and a closed door, connected to Safety Ground. Addi-
tionally, the system must be located in an area with an access level greater than 2 to comply with the
requirements of EN 54-2:1998.
b.Applies to cables shipped after April 1, 2009.
c.Cables will be marked with FT4 or CMG rating, but they all actually meet the more stringent FT4 rating.
d.Cables will be marked with FT6 or CMP rating, but they all actually meet the more stringent FT6 rating.
Environmental Specifications
Designed for critical applications, the
Trident performs predictably in a
hostile industrial environment. The
specifications listed in the table on the
preceding page confirm this built-in
reliability. However, due to the number
of diverse items that make up a Trident
system, not all of the listed specifica-
tions apply to every item. Please
contact Invensys to obtain the specifi-
cations for particular items.
Dimensions and Clearances
The dimensions given on the figure to
the left are predicated on the vertical
mounting of Trident baseplates on a
• I/O Baseplates other than AI and AO
HART are 7.0 inches (178 millime-
ters) wide by 9.79 inches (249 milli-
meters) long
All Trident I/O modules have the same
dimensions, which are:
• Height = 8.65 inches (220 mm)
• Width = 1.75 inches (44 mm)
• Depth = 6.65 inches (169 mm)
Clearance should always allow
adequate air flow around Trident
modules. For typical applications, there
should be at least 5 inches (15 centime-
ters) of clearance between active
modules and the walls of the enclosure.
Main Processor Module
Every Trident system is controlled by
three MP Modules that reside on a
single baseplate. Each MP Module acts
as one channel of the triplicated Trident
system and provides the following
features:
• An RS-232 or RS-485 Modbus port
for direct TMR connection to a DCS
(or other external host) without the
need for any other modules
• A 10BaseT Ethernet (IEEE 802.3)
port for connection to the TriStation
1131 programming workstation
• A lock lever that
indicates
PASS

panel. The DIN rails and baseplate assemblies whether the FAULT
ACTIVE

should be arranged on the panel to module is

The dimensions include the following: properly locked
allow for the installation of wiring MODE

• The MP Baseplate, CIM and CM channels (such as Panduit) along the on the baseplate REMOTE
RUN

Baseplates, AI HART Baseplates, left side of vertical columns. Alarm Indicators

PROGRAM
HALT

and AO HART Baseplates are 9

inches (229 millimeters) wide by The Trident fault- ALARMS

9.79 inches (249 millimeters) long monitoring circuitry FIELD POWER

LOGIC POWER

is able to detect and SYSTEM ALARM

PROGRAM ALARM

9.00 in. signal an alarm for OVER TEMPERATURE

229 mm
(MP, CIM, CM, HART AI, and HART AO Baseplates) all single faults and
most multiple
faults. The LOCK

following alarm
indicators are on the
front panel of each
MP: COMMUNICATIONS

IO BUS
TX
RX

• The Field Power TX

COMM BUS
alarm indicates RX

loss of field SERIAL

TX
RX

power or faulty LINK

9.79 in. field power TRISTATION TX

RX
249 mm supply MP3101
8.55 in.
217 mm • The Logic Power
alarm indicates a MP Front Panel
missing or faulty
system power supply
• The System Alarm indicates
problems with the application or
1.25 in. system integrity
32 mm

7.00 in.
178 mm
(I/O Baseplates)

27
Product Specifications

• The Program Alarm indicates
problems that are defined by the
user-written application
• The Over Temperature alarm
indicates when the module is over
183° F (84° C)
System Status Indicators
The system status indicators identify
the processing state of the module. The
status indicators include the following:
• The Pass indicator identifies when
the module is operating normally.
• The Active indicator blinks once per
scan when executing an application.
• The Fault indicator identifies when
the processor has an internal fault.
Other Indicators
Other indicators on the MP include the
following:
• Mode indicators (Remote, Run,
Program, and Halt) identify the
operating state of the entire Trident
system.
• Communication indicators that
identify the type of communication
occurring
Physical Description
Each MP provides 16 megabytes of
DRAM for the user-written application,
sequence-of-events (SOE) and I/O
data, diagnostics, and communication
buffers.
The three MPs compare their respective
data during every scan using the
TriBus, a high-speed, fault-tolerant
inter-processor bus. The MPs commu-
nicate with the I/O modules over a
TMR HDLC I/O bus that operates at 2
megabits per second.
In addition to the TriStation 1131 and
Modbus ports and alarm connectors,

DSP1
Logic Power
Fuses DSP2

ñ +
DSP3 Fuses and Blown
Logic Power FUSE Fuse Indicators
and Alarm DSP4
Terminal Blocks
FUSE

Modbus Ports
for Direct DCS
Connections

TriStation
Connectors

Debug
Connectors

1 Node
Address

MP Baseplate MP Baseplate Connectors

28
the MP Baseplate provides redundant, rable for Modbus point-to-point or 100Base-TX twisted-pair connections
24-volt fused logic power connectors. multi-point (network) connections. to convert the CIM network ports to
Logic power supplied here can operate Transmission rates up to 115 kilobits other Ethernet media types or to extend
the MPs and carry to the I/O Baseplates per second per port can be selected. network distances.
as well, so that no other logic power
Network Ports
supplies are needed for the column.
Each CIM Media Adapter provides two
network ports which are configured as
Communication Modules follows:
The communication modules (CIMs Two 100-megabit copper twisted pair
and CMs) are a one-to-one interface to Ethernet ports each with an RJ-45
the MPs. The Trident v2 and later CMs connector.
and the Trident v3 and later CIMs
Two small form-factor pluggable (SFP)
enable communication with:
slots that may be used in place of the
• External host computers
• Distributed control systems (DCS)
• Open networks
• Network printers
• Other Trident v2 or v3 and later PASS
FAULT
PASS
FAULT
systems ACTIVE
FIRMWARE
ACTIVE
FIRMWARE
NET 1 NET 1
SFP SFP
• Tricon™ version 9–10 systems
NET 2 NETWORK NETWORK NET 2
A single Trident controller can support SFP COMMUNICATIONS
SFP
COMMUNICATIONS
SFP
SFP

up to two CIMs or CMs on one Model NET 1

LINK
TX
NET 1
LINK
TX
NET 1 NET 1
2211 CIM Baseplate or one Model RJ45
RX RX
RJ45

2201 CM Baseplate. Each CIM or CM SFP

LINK
SFP
LINK
NET 2 NET 2 NET 2 NET 2
operates independently and supports RJ45 TX
RX
TX
RX
RJ45

three RS-232 or RS-485 serial ports and POWER POWER

two Ethernet ports per CIM/CM. Two

CIMs or CMs can provide redundant SERIAL 1 SERIAL 1

communication connections or addi- LOCK LOCK

tional independent communications SERIAL 2 SERIAL 2

ports. SERIAL SERIAL
COMMUNICATIONS COMMUNICATIONS

Communications Integration SERIAL 3 SERIAL 1

TX
RX
SERIAL 1
TX
RX
SERIAL 3

Module (CIM) Capabilities TX TX

SERIAL 2 SERIAL 2
RX RX
Each CIM provides the following DEBUG DEBUG
CIM MEDIA ADAPTER TX TX CIM MEDIA ADAPTER
communication capabilities, through MA SERIAL 3
RX
SERIAL 3
RX MA
the CIM Media Adapter:
SYNCHRONIZATION SYNCHRONIZATION

• Serial ports SYNC 1

SYNC 2
SYNC 1
SYNC 2

• Network ports
• Multiple protocol support
Serial Ports
Each CIM Media Adapter provides
three optically isolated RS-232 or RS-
485 serial ports that are user-configu-
Model 2211 CIM Baseplate with CIMs and Media Adapters

29
Product Specifications

Supported Protocols
Each CIM serial port supports these
protocols:
PASS
• Modbus master (RTU)
FAULT
• Modbus slave (ASCII or RTU) ACTIVE
FIRMWARE
NET 1 Each CIM network port supports these
SFP protocols:
• TSAA (UDP/IP)
NET 2 NETWORK
SFP • TSAA with IP Multicast (UDP/IP) COMMUNICATIONS
SFP
• TriStation 1131 LINK
NET 1
TX
NET 1 • Peer-to-Peer (UDP/IP)
RJ45 RX
• Modbus master or slave (TCP)
SFP
• Triconex Time Synchronization via
NET 2 LINK
RJ45 UDP/IP NET 2
TX
• SNTP Triconex Time RX
POWER Synchronization
• JetDirect Network Printer Server
TCP/IP
SERIAL 1
• Enhanced Peer-to-Peer
LOCK
• OPC UA
SERIAL 2 NOTE
The Trident CIM supports a maximum
of 16 Modbus TCP ports. SERIAL
COMMUNICATIONS
SERIAL 3
TX
SERIAL 1
RX

TX
DEBUG SERIAL 2
RX
CIM MEDIA ADAPTER
MA 2211-100 TX
SERIAL 3
RX

CIM Media Adapter SYNCHRONIZATION

Front Panel SYNC 1
SYNC 2

3211
CIM Front Panel

30
Communication Module (CM)
Capabilities
Each CM provides the following
communication capabilities:
• Serial ports
• Network ports
• Multiple protocol support
Serial Ports
Each CM provides three optically
isolated RS-232 or RS-485 serial ports
which are user-configurable for
Modbus point-to-point or multi-point
(network) connections.
Transmission rates up to 115 kilobits
per second per port can be selected.
Network Ports
Each CM provides two network ports
which are configured as follows:
One 10-megabit Ethernet port, with the
following connectors:
• 10BaseT CM Baseplate Connectors
• Attachment unit interface (AUI) for Each CM network port supports these Each CM Net1 network port supports
a 10-megabit media adapter unit protocols: Triconex Time Synchronization via
(MAU) DLC.
• TSAA (UDP/IP)
One 100-megabit Ethernet port, with
the following connectors: • TSAA with IP Multicast (UDP/IP)

• 100BaseTX • TriStation 1131

• Media independent interface (MII) • Peer-to-Peer (UDP/IP)

for a 100-megabit MAU • Peer-to-Peer (DLC)
Media adapter units may be used in • Modbus Master or Slave (TCP)
place of the 10/100 BaseT RJ-45
twisted-pair connections to convert the • Triconex Time Synchronization via
CM network ports to other Ethernet UDP/IP
media types or to extend network • SNTP Triconex Time
distances. Synchronization
Supported Protocols • JetDirect Network Printer Server
Each CM serial port supports these TCP/I
protocols:
• Modbus master (RTU) NOTE
• Modbus slave (ASCII or RTU) The Trident CM supports a maximum of
four Modbus TCP ports.

31
Product Specifications

Logic Power for CIMs and CMs

Logic power for CIMs and CMs is supplied by the MP Baseplate, as described in the following table.

Feature Specification
Nominal input voltage 24 VDC
Specified operational voltage range 24 VDC –15% or +20% + 5% AC ripple
(19.2 to 30 VDC)
CIM logic power (without SFPs) 11.5 W maximum
100 Mb SGMII type Media Adapter (SFP) 1.0 Watt per SFP
CM logic power (without MAUs) 8 W maximum
10 Mb AUI type MAU 6 W maximum additional per MAU
100 Mb MII type MAU 3.75 W maximum additional per MAU
Absolute maximum input voltage 33 VDC
Absolute maximum reverse input voltage –0.6 VDC
Input power interruption time from nominal value CIM: 10 ms maximum
CM: 1 ms maximum
Repetition rate 1 sec minimum
Reverse current isolation input to input 500 μA maximum
Inrush current per input 2.4 A maximum, typically 1.2 A for 50 ms
Short circuit current limit per input 2.4 A maximum
Functional earth to logic ground isolation 0 V, no isolation
Protective earth to functional earth isolation 500 VDC
CM +12 V AUI output power 12 V ± 10%, 6 W maximum, current limited
CM +5 V MII output power 5 V ± 5%, 3.75 W maximum, current limited

32
Common Features for
I/O Modules and Baseplates
The Digital Input (DI) Module and
Baseplate shown below serve as exam-
ples for all of the Trident I/O modules
and baseplates whose appearance is
similar. The following pages provide
detailed specifications for all of the I/O
modules and baseplates.
Each I/O module occupies one of two
slots on the baseplate that constitute an
I/O set. The left module occupies the
depending on which module is in The maximum operating temperature
control. for all types of I/O modules is 158° F
(70° C) ambient.
All types of I/O modules support a hot-
spare module. Each module is mechan-
ically keyed to prevent improper instal-
lation in a configured baseplate.
Each I/O Baseplate includes one I/O
Interconnect Assembly, one Slot Cover,
and one Terminal Cover.
For most types of I/O Baseplates, the
wiring for field devices is connected
PASS

directly to terminals on the baseplate, FAULT

slot below the “L” label on the base- ACTIVE

which are compression terminals that FIELD PWR
plate and the right module occupies the
are compatible with 24 to 12
slot below the “R” label. At any time, 1

the status of either the left or right (0.2 mm2 to 3.3 mm2) AWG wiring. 2
3

module can be active or hot-spare 4

5
6
7
8
9
10
11
12
13
14
15
16

LOCK

17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32

DI 3301 24v

DI Front Panel

DI Baseplate

33
Product Specifications

Common Specifications for All I/O Modules

The following tables identify the logic and field power specifications for all I/O modules.

Feature Specification
Nominal input voltage 24 VDC
Voltage range 24 VDC –15% or +20% +5% AC ripple (+19.2 to +30 VDC)
Logic power <3 W
Absolute maximum input voltage 33 VDC
Absolute maximum reverse input voltage – 0.6 VDC
Input power interruption time from nominal 1 ms maximum
Power interruption interval 1 sec minimum
Reverse current isolation input to input 500 μA maximum
Inrush current per input 2.4 A maximum
Short circuit current limit per input 2.4 A maximum
Functional earth to logic ground isolation 0 V, no isolation
Protective earth to functional earth isolation 500 VDC, minimum

Feature Specification
Nominal field voltage 24 VDC
Specified operational voltage range 24 VDC –15% or +20% +5% AC ripple (+19.2 to +30 VDC)a
Power See module specifications
Absolute maximum input voltage 33 VDC
Absolute maximum reverse input voltage – 0.6 VDC
Input power interruption time from nominal Not applicable
Power interruption interval Not applicable
Reverse current isolation 500 μA maximum
Functional earth to protective earth isolation 500 VDC, minimum
Functional earth to functional earth (logic ground) isolation 800 VDC, minimum

a.For the PI Module, the voltage range is configurable in TriStation 1131 software.

34
Analog Input Module
Each TMR Analog Input Module has
three isolated sets of electronics, called
channels, which independently process
field data input to the module. Each
channel places the processed data in an
array and transmits this array, on
request, to the MP associated with that
channel. The MPs vote the data before
passing it to the application. In TMR
mode, the data passed is mid-value. In
dual mode, the data passed is the
average.
AI Modules include complete, ongoing
diagnostics for each channel. If the
diagnostics detect a failure on any
channel, the Fault indicator turns on
and activates the system alarm. The
Fault indicator identifies a channel
fault, not a complete module failure. AI
Modules are guaranteed to operate
properly in the presence of a single fault
and may continue to operate properly • Model 2354A, which is used in 4-20
with multiple faults. mA applications in hazardous
locations and enables
AI Modules support a hot-spare
communication between HART
module. Each AI Module is mechani-
field devices and Configuration and
cally keyed to prevent improper instal-
Asset Management Software
lation in a configured baseplate.
running on a PC.
The Model 3351 AI Module can be
used with these baseplates:
• Model 2351, which is used in typical
4-20 mA applications.
• AI External Termination Baseplate,
which is used with the Model 9764-
510F RTD/TC/AI External
Termination Panel or the Model
9792-310F AI Hazardous Location
External Termination Panel.
• Model 2354, which is used in 4-20
mA applications and enables
communication between HART
field devices and Configuration and
Asset Management Software
running on a PC.

Feature Specification
Points 32, commoned
Nominal input current 4–20 mA DC
Specified operational current range 2–22 mA DC
Absolute maximum field voltage 33 VDC
Absolute maximum reverse field voltage – 0.6 VDC
Absolute maximum input current 50 mA DC
Input bandwidth (3dB) 16 Hz
Source impedance 180 Ω
Input impedance (with baseplate) 250 Ω
I to V resistor 100 Ω ± 0.01%
Resolution 12 bits
Absolute error 0.15% of full scale (20 mA)
Diagnostic Force-to-value diagnostic (FVD)
Scan time < 1 ms for all 32 points
Functional earth to protective earth isolation 500 VDC, minimum
Functional earth to functional earth (logic) isolation 800 VDC, minimum

35
Product Specifications

Analog Input/Digital Input

Features Common to all Points Specification Module
Points 32, commoned The Analog Input/Digital Input Module
(16 DI, points 1–16; 16 AI, points has 16 digital input points (1–16) and
17–32)
16 analog input points (17–32).
Functional earth to protective earth 500 VDC, minimum
isolation The AI/DI Module has three isolated
Functional earth to functional earth (logic) 800 VDC, minimum sets of electronics, called channels,
isolation which independently process field data
Features of AI Points Specification input to the module. Sensing of each
input point is performed in a manner
Nominal input current 4–20 mA DC
that prevents a single failure on one
Specified operational current range 2–22 mA DC channel from affecting another channel.
Absolute maximum field voltage 33 VDC
For analog input points, each channel
Absolute maximum reverse field voltage – 0.6 VDC receives variable voltage signals from
Absolute maximum input current 50 mA DC each point, converts them to digital
Input bandwidth (3dB) 16 Hz values, and transmits the values to the
three MPs on demand.
Source impedance 180 Ω
Input impedance (with baseplate) 250 Ω For digital input points, an ASIC on
each channel scans each input point,
I to V resistor 100 Ω ± 0.01%
compiles data, and transmits it to the
Resolution 12 bits MPs upon demand.
Absolute error 0.15% of full scale (20 mA)
For all points, the MPs vote the data
Diagnostic Force-to-value diagnostic (FVD) before passing it to the control
Scan time < 1 ms for all 32 points program. In TMR mode, the data
Features of DI Points Specification
passed is mid-value. In dual mode, the
data passed is the average.
Nominal input voltage 0–24 VDC
Operational voltage range 15–30 VDC
AI/DI Modules sustain complete,
ongoing diagnostics for each channel.
Absolute maximum input voltage 33 VDC If the diagnostics detect a failure on any
Absolute maximum reverse input voltage – 0.6 VDC channel, the Fault indicator turns on
Input Delay < 10 ms, On to Off, Off to On and activates the system alarm. The
Input impedance > 100 kΩ without baseplate
Fault indicator identifies a channel
~ 3 kΩ with baseplate fault, not a complete module failure.
Input power 0.2 W/pt, @ 24 VDC
AI/DI Modules are guaranteed to
0.5 W/pt, @ 33 VDC
operate properly in the presence of a
single fault and may continue to operate
Input threshold 0–5 VDC = Off region properly with multiple faults.
6–14 VDC = transition region
15–30 VDC = On region Analog Input/Digital Input Modules
Diagnostic (loss of view) Force-to-value diagnostic (FVD),
include the hot-spare feature which
< 2 ms/test
allows online replacement of a faulty
module. The AI/DI Module is mechan-
Maximum input toggle rate to maintain < 20/sec ically keyed to prevent improper instal-
diagnostic fault coverage
lation in a configured baseplate.
FVD Off state glitch
Duration < 2 ms The Model 3361 AI/DI Module is
Magnitude ≈ 36% test voltage compatible with the Model 2361 AI/DI
Output impedance 0–5 VDC, ≈100 kΩ Baseplate and the AI/DI External
ADC scan time < 1 ms for all DI points Termination Baseplate.

36
Analog Output Modules
Each TMR Analog Output Module has
three isolated sets of electronics, called
channels, which independently accept
data from the MP associated with each
channel. The channels provide input to
voter circuitry to select a single channel
to drive the output. Special circuitry is
used to ensure that the channels that are
not driving the output are shunted so
they cannot affect the output.
AO Modules include complete,
ongoing diagnostics for each channel.
If the diagnostics detect a failure on any
channel, the Fault indicator turns on
and activates the system alarm. The
Fault indicator identifies a channel
fault, not a complete module failure.
AO Modules are guaranteed to operate
properly in the presence of a single fault
and may continue to operate properly
with multiple faults.
Model Number
Points
Isolated points
Output current range
Output accuracy
Type
Resolution
Diagnostic
External loop power (reverse
voltage-protected)
Output loop power requirements
for specified load
Over-range protection
Switch time on leg failure
a.This specification applies to points 3 and 4. The specification for points 1 and 2 is the same as for Model 3481
AO Modules support a hot-spare Termination Panel in hazardous
module. Each AO Module is mechani- locations.
cally keyed to prevent improper instal-
The Model 3482 High-Current AO
lation in a configured baseplate.
Module is compatible with only the
The Model 3481 AO Module can be Model 2481 Analog Output Baseplate.
used with these baseplates:
• Model 2481, which is used in typical
applications.
• Model 2483, which enables
communication between HART
field devices and Configuration and
Asset Management Software
running on a PC.
• Model 2483A, which is used in
hazardous locations and enables
communication between HART
field devices and Configuration and
Asset Management Software
running on a PC.
• AO External Termination Baseplate,
which is used with the
Model 9863-610F External
3481 3482
4, commoned-return, DC-coupled 4, commoned-return, DC-coupled
None None
4–20 mA output, controlled 4–40 mA output, controlled
0.66–21.34 mA over-range 1.32–42.68 mA over-range
0.66 mA output capability (step function < 2 mA) 1.32 mA output capability (step function <4 mA)a
<0.25% (in range of 4–20 mA) of FSR (0–22 < 0.25% (in range of 4–40 mA) of FSR
mA), from 32° F to 158° F (0° C to 70° C) (0–44 mA), from 32° F to 122° F (0° C to 50° C)a
TMR TMR
12 bits 12 bits
Forced-switch diagnostic (FSD) Forced-switch diagnostic (FSD)
32 VDC, maximum 32 VDC, maximum
24 VDC, nominal 24 VDC, nominal
300 Ω @ >16 VDC (1 A minimum) 125 Ω @ >16 VDC (1 A minimum)
500 Ω @ >20 VDC (1 A minimum) 210 Ω @ >20 VDC (1 A minimum)
700 Ω @ >24 VDC (1 A minimum) 295 Ω @ >24 VDC (1 A minimum)
800 Ω @ >28 VDC (1 A minimum) 340 Ω @ >28 VDC (1 A minimum)a
36 VDC, continuous 36 VDC, continuous
0 VDC, continuous 0 VDC, continuous
1 ms, typical 1 ms, typical
3 ms, maximum 3 ms, maximum
37
Product Specifications

Digital Input Modules
Each TMR Digital Input Module has
three isolated sets of electronics, called
channels, which independently process
field data to the module. Each channel
places the processed data in an array
and transmits this array, on request, to
the MP associated with that channel.
The MPs vote on the data before
passing it to the application.
DI Modules include complete, ongoing
diagnostics for each channel. If the
diagnostics detect a failure on any
channel, the Fault indicator turns on
and activates the system alarm. The
Fault indicator identifies a channel
fault, not a complete module failure.
The DI Module continuously verifies
the ability of the system to detect tran-
sitions to the opposite state. DI
Modules are guaranteed to operate
properly in the presence of a single fault
and may continue to operate properly
with multiple faults.
DI Modules support a hot-spare
module. Each DI Module is mechani-
cally keyed to prevent improper instal-
lation in a configured baseplate.
The Model 3311 DI Module reports
Sequence of Events (SOE) with a reso-
lution of one millisecond or less and
with an accuracy of one millisecond or
less.
The Model 3301 and 3311 DI Modules
can be used with these baseplates:
• Model 2301, which is used with
typical applications.
• DI External Termination Baseplate,
which is used with the Solid State
Relay Input External Termination
Panel in high-voltage applications,
or the Model 9573-610F DI
Hazardous Location External
Termination Panel.

Model Number 3301 3311

Points 32, commoned 32, commoned
Nominal input voltage 24 VDC 24 VDC
Operational voltage range 19.2–30 VDC 19.2–30 VDC
Absolute maximum input voltage 33 VDC 33 VDC
Absolute maximum reverse input voltage – 0.6 VDC – 0.6 VDC
Input delay ON to OFF or OFF to ON ON to OFF or OFF to ON
Time constant = 2.86 msec, - 3dB @ 55 Hz Time constant = 0.13 msec, - 3dB @ 1.2 kHz
Input impedance >30 kΩ, without baseplate >30 kΩ, without baseplate
≈3 kΩ, with baseplate ≈3 kΩ, with baseplate
Input power 0.2 W/pt, @ 24 VDC 0.2 W/pt, @ 24 VDC
0.5 W/pt, @ 33 VDC 0.5 W/pt, @ 33 VDC
Input threshold 0–5 VDC = Off region 0–5 VDC = Off region
6–14 VDC = transition region 6–14 VDC = transition region
15–30 VDC = On region 15–30 VDC = On region
Diagnostic (loss of view) Force-to-value diagnostic (FVD), Force-to-value diagnostic (FVD),
<2 ms/test <2 ms/test
Force-to-trigger diagnostic (FTD),
<2 ms/test
Maximum input toggle rate to maintain <20/sec <20/sec
diagnostic fault coverage
FVD Off state glitch
Duration <2 ms <2 ms
Magnitude ≈36% test voltage ≈36% test voltage
Output Impedance 0–5 VDC, ≈100 kΩ 0–5 VDC, ≈100 kΩ
ADC scan time <1 ms for all 32 points <1 ms for all 32 points
Functional earth to protective earth 500 VDC, minimum 500 VDC, minimum
isolation
Functional earth to functional earth (logic 800 VDC, minimum 800 VDC, minimum
ground) isolation

38
Digital Output Modules
Each TMR Digital Output Module has
three isolated sets of electronics, called
channels, which independently accept
data from the MP associated with each
channel. The channels use the patented
Quad Voter circuitry to vote on indi-
vidual output signals as they are applied
to the load.
This voter circuitry is based on parallel-
series paths which pass power if two
out of three switches (channels A and
B, or channels B and C, or channels A
and C) command them to close. The
Quad Voter circuitry has multiple
redundancy on all critical signal paths,
guaranteeing safety and maximum
availability.
For each point, the DO Module period-
ically executes the Output Voter Diag-
nostic (OVD) routine. To allow
unrestricted safe operation under a
variety of multiple-fault scenarios,
OVD detects and alarms these types of
faults:
• Points—all stuck-on and stuck-offs
are detected.
• Switches—all stuck-on or stuck-off
switches or their associated drive
circuitry are detected.
DO Modules include complete,
ongoing diagnostics for each channel.
If the diagnostics detect a failure on any
channel, the Fault indicator turns on
and activates the system alarm. The
Fault indicator identifies a channel
fault, not a complete module failure.
DO Modules are guaranteed to operate
properly in the presence of a single fault
and may continue to operate properly
with certain multiple faults.

Model Number 3401 3411

Points 16, commoned 16, commoned
Nominal output voltage 24 VDC 24 VDC
Specified operational voltage range 19 to 30 VDC 19 to 30 VDC
Absolute maximum output voltage 33 VDC 45 VDC
Absolute maximum reverse input – 0.6 VDC – 0.6 VDC
voltage
Minimum required field load n/a 30 mA
Output current
Switching <4.8 A, self-limiting <4.8 A, self-limiting
3.0 A, typical 3.0 A, typical
Carry 700 mA maximum, self limiting 700 mA maximum, self limiting
(See the Planning and Installation Guide for
Trident v2-v3 Systems for extended carry
current limits and conditions.)
Field alarms Loss of field power, output point shorted On or Loss of field power, output point shorted On or
Off Off
Loop-back thresholds 0–5 VDC = Off region 0–5 VDC = Off region
6–14 VDC = transition region 6–14 VDC = transition region
15–30 VDC = On region 15–30 VDC = On region
Leakage to load (Off state) <1 mA <1 mA
Diagnostic glitch duration <2 ms, maximum <2 ms, maximum
500 μs, typical 500 μs, typical
Diagnostic fault coverage
Maximum toggle rate >20 ms >20 ms
Minimum toggle rate Not applicable Not applicable
On state voltage drop <1.0 VDC @ 1.5 A <1.6 VDC @ 1.6 A
Loop-back scan time <1.0 ms for all 16 points <8.0 ms for all 16 points
Functional earth to protective earth 500 VDC, minimum 500 VDC, minimum
isolation
Functional earth to functional earth 800 VDC, minimum 800 VDC, minimum
(logic) isolation

39
Product Specifications
DO Modules support a hot-spare
module. Each DO Module is mechani-
cally keyed to prevent improper instal-
lation in a configured baseplate.
These baseplates can be used with the
Model 3401 DO Module:
• Model 2401, which is used with
typical applications.
• Model 2401L, which is used with
low-current applications where
integral current limiting is required.
Each output is provided with a
180 ohm series resistor.
• DO External Termination Baseplate,
which is used with the Relay Output
External Termination Panel in high-
voltage applications, or the Model
9671-610F DO Hazardous Location
External Termination Panel.
These baseplates can be used with the
Model 3411 DO Module:
• Model 2401H, which is
recommended for use with high-
current power loads.
• DO External Termination Baseplate,
which is used with the Relay Output
External Termination Panel in high-
voltage applications, or the Model
9671-610F DO Hazardous Location
External Termination Panel.
40
Pulse Input Modules
Each TMR Pulse Input Module has
three isolated sets of electronics, called
channels, which independently receive
voltage transitions from each point and
converts the transitions to frequency
(RPM) data. Each channel places the
processed data in an array and transmits
the array, on request, to the MP associ-
ated with that channel. The MPs vote
the data before passing it to the applica-
tion.
The six sensitive, high-frequency
inputs can be individually configured
for non-amplified and amplified
magnetic speed sensors which are
common on rotating equipment, such as
turbines or compressors. The module is
capable of counting over 32,000 transi-
tions per second.
The PI Module senses voltage transi-
tions from the speed sensors, samples
every input transition, and measures
time to optimize the number of input
gear pulses. To ensure correct data for
each scan, one value is selected using a
mid-value selection algorithm. Sensing
of each input point is designed to
prevent a single failure on one channel
from affecting another channel. The
resulting count and time are used to
generate a frequency (revolutions per
minute), which is transmitted to the
Main Processors.
The type of speed sensor typically used
with the PI Module consists of an
inductive coil and rotating teeth. The
sensor is physically close to the teeth of
a gear on the rotating shaft. The output
frequency is proportional to the rota-
tional speed of the shaft and the number
of teeth. As the teeth move past the
sensor, the resulting change in the
magnetic field causes a sinusoidal
signal to be induced in the sensor.
Although the circuitry is designed for
high-frequency operation with de-
bounced edge detection, it is sensitive
to any type of waveform distortion that
could result in erroneous measure-
ments. Consequently, ringing on the
input signal can result in many addi-
tional transitions being counted.
PI Modules include complete, ongoing
diagnostics for each channel. If the
diagnostics detect a failure on any
channel, the Fault indicator turns on
and activates the system alarm. The
Fault indicator identifies a channel
fault, not a complete module failure. PI
Modules are guaranteed to operate
properly in the presence of a single fault
and may continue to operate properly
with multiple faults.
The Model 3382 PI Module enables the
controller to provide better control
response by providing the control
program with an accurate measurement
of angular acceleration. This can reduce
the response time of the controller to
one or two scan times.
PI Modules support a hot-spare
module. Each PI Module is mechani-
cally keyed to prevent improper instal-
lation in a configured baseplate.
The Model 3382 PI Module is compat-
ible with the Model 2381 PI Baseplate
and the Model 2381A PI Hazardous
Location Baseplate.
NOTE
The Model 3382 PI Module replaced
the Model 3381 PI Module.
 Model 3382
Points 6
Input type Differential: channel-isolated
Single-ended: commoned ground
Sensor compatibility Magnetic, active, open collector
Maximum operating voltage ±33 VDC
Minimum operating voltage
Differential 500 mV P-P, 2 Hz to 32,000 Hz
1 V P-P, 0.5 Hz to 2 Hz
Single-ended 1 V P-P, 2 Hz to 32,000 Hz
2 V P-P, 0.5 Hz to 2 Hz
Speed range n/a
c
Input frequency range 0.5 Hz to 32 kHz
Duty cycle 20% to 80%, or 10 μs minimum pulse width (positive and negative)
Maximum continuous slew rate n/a
Maximum continuous RPM slew rate
Number of gear teeth per point (programmable) 1–255a
Termination resistor Baseplate configurable
Pull-up resistor Baseplate configurable
Resolution n/a
b
Absolute error of input frequency ± 0.01%, 2,000 to 32,000 Hz
± 0.1%, 0.5 to 2,000 Hz
Absolute error n/a
Maximum acceleration rate 4,000 Hz/sec
Absolute error of acceleration (Hz/sec)b < 0.01 times the numeric value of the input frequency when the frequency range is
3kHz–32 kHz
Maximum jerk rate 500,000 Hz/sec2
Absolute error of jerk (Hz/sec2)b < 2.5 times the numeric value of the input frequency when the frequency range is 3
kHz–32 kHz
Measurement algorithm Gear multiple tracking
Diagnostic Precision frequency reference test
c
Scan update rate <32 ms
Functional-to-protective-earth isolation 500 VDC, minimum
Functional-to -functional-earth (logic) isolation 800 VDC, minimum

a.Absolute error of speed, acceleration, and jerk, may exceed the specified values if the number of gear teeth per point “G” is not within the range of
255 > n*G >= 240, where n is an integer.
b.Absolute error of speed, acceleration, and jerk, does not include error introduced by the field device. The reporting of speed acceleration and jerk is susceptible
to noise and inaccuracies in the gear manufacturing (tooth-tooth spacing)
c. For input frequencies of 32 Hz or greater, the scan update rate is less than 32 ms. However, for input frequencies of less than 32 Hz, the scan update rate is
the period of the input frequency.

41
Product Specifications

Solid-State Relay Output SRO Modules include complete, ongoing

Module diagnostics for each channel. If the diag-
nostics detect a failure on any channel,
Each Solid-State Relay Output Module
the Fault indicator turns on and activates
has three isolated sets of electronics,
the system alarm. The Fault indicator
called channels, which independently
identifies a channel fault, not a complete
accept data from the MP associated with
module failure. SRO Modules are guar-
each channel. The channels provide input
anteed to operate properly in the pres-
to a voter circuit which uses the voted
ence of a single fault and may continue to
value to drive the coil of the relay. The
operate properly with multiple faults.
output portion of this module is Simplex.
SRO Modules support a hot-spare
The SRO Module is a non-triplicated
module. Each SRO Module is mechani-
module for use on non-critical points
cally keyed to prevent improper installa-
which are not compatible with high-side,
tion in a configured baseplate.
solid-state output switches; for example,
interfacing with annunciator panels. The The Model 3451 SRO Module is compat-
SRO Module receives output signals ible with the Model 2451 SRO Baseplate.
from the MPs on each of three channels.
The three sets of signals are voted and the
voted data is used to drive the 32 indi-
vidual relays. Each output has a loop-
back circuit which verifies the operation
of each relay switch independently of the
presence of a load. Ongoing diagnostics
test the operational status of the SRO
Module.

Feature Specification
Points 32, commoned in pairs
Nominal input voltage ±24 V
Operational voltage range ±30 V
Maximum switching voltage ±33 V peak
Maximum switching power 15 W resistive
Maximum off-state leakage <100 μA
Maximum nominal current 0.5 A per channel
Maximum over current 0.7 A per channel
Voltage drop at baseplate <0.25 V @ 0.5 A
Fuses, mounted on baseplate 1 per output, 0.75 A, fast-acting
Functional earth to protective earth 500 VDC, minimum
isolation
Functional earth to functional earth (logic) 800 VDC, minimum
isolation

42
I/O Extender Module Kits
I/O Extender Module Kits are used to:
• Carry I/O messages from one I/O
column to another
• Provide logic power terminals for
each I/O column
You must connect 24 volt logic power
sources to every I/O column by using an
I/O Extender Module or an MP Base-
plate.
Connectors for
Each I/O Extender Module Kit includes: I/O Bus Cables
• Two I/O Extender Modules
• Three two-foot I/O Bus Cables
• One I/O or MP Interconnect Logic Power
Terminals
Assembly
The main components on an I/O
Extender Module are: I/O Extender Module

• Two 24-volt logic power input

terminal blocks, each with fuse and
blown-fuse indicators
• A protective earth (safety ground)
terminal
• Three DB-9-pin I/O bus connectors,
one per channel
In a typical Trident system, a maximum
of eight baseplates may be connected
end-to-end in an I/O column. To extend a
system beyond eight baseplates or to
distribute the baseplates into multiple I/O
columns, I/O Extender Modules and I/O
Bus Cables are used, as shown on the
figure at the right.
I/O Bus Cables
An I/O bus cable is required for each
TMR channel and is terminated at each
end by a male DB-9-pin connector.
Various cable lengths are available.
If the I/O bus is longer than 20 feet (6
meters), the bus should be terminated by
adding an I/O Bus Terminator Kit to both
open ends of the system. The maximum
allowable I/O bus length is 650 feet (200
meters).
Two I/O Extender Modules Linked by I/O Bus Cables

43
Product Specifications
Interconnect Assemblies
Trident baseplates within a single I/O
column are connected by Interconnect
Assemblies that carry I/O messages and
logic power across the baseplates. The
MP Interconnect is connected to an I/O
Baseplate, and the I/O Interconnects are
connected to other I/O Baseplates.
MP Interconnect Assembly
I/O Interconnect MP Interconnect
Assembly Assembly Physically, an MP Interconnect
Assembly consists of a small passive
PCB in a molded plastic housing with
two DIN-C 96-pin male connectors. The
assembly is attached to the top or bottom
of an MP Baseplate in order to connect
adjacent I/O Baseplates. The MP Inter-
connect Assembly also is used on AI and
AO HART Baseplates because they are
the same size as MP Baseplates.
Top End Cap Bottom End Cap
I/O Interconnect Assembly
Physically, an I/O Interconnect
End Caps for I/O Baseplate/I/O Extender Module
Assembly consists of a small passive
PCB in a molded plastic housing with
two DIN-C 96-pin male connectors. The
assembly is attached to the top or bottom
of an I/O Baseplate in order to connect
other I/O Baseplates.

Required Accessories
Top End Cap Bottom End Cap The following accessories are required to
protect Trident components from dust,
End Caps for MP Baseplate liquids and corrosive atmospheres:
• End caps
• Terminal covers
• Slot covers
End caps protect the top and bottom of
each end-of-column baseplate and serve
as a card guide. They are available for
both MP Baseplates and I/O Baseplates.
Slot Terminal covers protect any terminals on
Cover
a baseplate that are not connected to field
Terminal wiring.
Cover
Slot covers protect unused baseplate
slots.

44
The Trident’s Main Processor and Communication Modules
support Modbus, Ethernet, Peer-to-Peer, and TriStation 1131
protocols.

Communication Capabilities
The Trident controller provides state- Trident Communication Capabilities
of-the-art communication capabilities Type of Connection MP Only One CIM/CM Two CIM/CMs
through communication ports on the Trident as Modbus Slave 3 serial ports 3 serial ports 6 serial ports
CIM, CM, and MP. Ports on the MP
Trident as Modbus Master not available 3 serial ports 6 serial ports
support TriStation 1131 and Modbus
slave protocol. Ports on the CIM and Trident as Modbus Master/Slave not available 3 serial ports 6 serial ports
CM support TriStation 1131, TSAA Trident as Modbus Master or not available 2 Ethernet ports 4 Ethernet ports
client/server (DDE Server and OPC Slave using TCPa
UA Server or OPC Server), Peer-to- TriStation 1131 communication not available 1 serial portb 2 serial portsb
Peer, Time Synchronization, JetDirect using serial connection
printing, and Modbus master/slave TriStation 1131 communication 3 Ethernet 2 Ethernet ports 4 Ethernet ports
protocols. using TCP/IP protocol ports
Depending on application require- TSAA Client/Server or TSAA not available 2 Ethernet ports 4 Ethernet ports
Client/Server with IP Multicast
ments, the Trident controller can
communication
communicate with the following:
OPC UA (CIM) or OPC (CM) not available 2 Ethernet ports 4 Ethernet ports
• OPC UA clients (using a CIM) or
Peer-to-Peer communication— not available 2 Ethernet ports 4 Ethernet ports
OPC Server for Triconex (using a for one network of Triconex
CM) controllers only—using
UDP/IPc or DLCd
• Any Modbus master, including DCS
Triconex Time Synchronization not available 1 Ethernet portf 2 Ethernet portsf
from Foxboro®, Honeywell, ABB, via DLCe
Bailey, Fisher-Rosemount and
Triconex Time Synchronization not available 2 Ethernet ports 4 Ethernet ports
Yokogawa using UDP/IP or SNTP Triconex
• A PC running TriStation 1131 Time Synchronization
software through the TriStation HP JetDirect Printing not available 2 Ethernet ports 4 Ethernet ports
1131 (Ethernet) protocol
a.Maximum of 16 Modbus TCP ports on CIM; maximum of 4 on CM.
• Other Triconex controllers through b.Serial 3 only.
the Triconex Peer-to-Peer protocol c.NET1 or NET2 can be configured for Peer-to-Peer using UDP/IP, but not both at the same time.
d.CM only.
• External devices using TSAA which
e.CM only.
is a Triconex master/slave protocol
f.NET1 only.
used by devices on an Ethernet
network
Server, OPC UA Server, and OPC allows read and write access to Trident
TSAA Client/Server Protocol
Server for Triconex use TSAA. input, output, and memory variables,
Triconex System Access Application is and system attributes. OPC UA clients
a master/slave protocol that allows an OPC UA Server
that conform to the Data Access (DA)
external device acting as a master to Object Linking and Embedding (OLE) version 1.0.1 standard and the Alarms
communicate with one or more Trident for Process Control Unified Architec- and Events (A&E) version 1.10 stan-
controllers. Typically, a client/server ture (OPC UA) is a standard set of non- dard can communicate with a Trident
workstation connects to a DCS client proprietary interfaces used to develop controller through the embedded OPC
using TSAA protocol to access point client/server programs. CIMs have an UA Server on the CIM.
data in the Trident controller. DDE embedded OPC UA Server, which
45
Communication Capabilities
OPC Server for Triconex
OPC Server for Triconex is an OPC-
compliant product, available from
Matrikon that runs on a PC. OPC
Server for Triconex allows read and
write access to Trident input, output,
and memory variables, and system
attributes through the CM. OPC clients
that conform to OPC version 2.0 for
Data Access and version 1.0 for Alarms
and Events Handler can communicate
with a Trident through the OPC Server
for Triconex.
For more information on OPC Server
for Triconex and OPC client applica-
tions, see the Matrikon website at
www.matrikon.com.
DDE Server for Triconex
Triconex DDE Server is a Windows-
based application that enables DDE-
compliant clients to read and, if
allowed, to write data to a Triconex
control program. A client can read
input, output, and memory variables,
and system attributes.
Client applications use DDE (Dynamic
Data Exchange) protocol to communi-
cate with a DDE Server. Any Windows
application that supports DDE
protocol—such as Microsoft Excel®—
can use Triconex DDE Server.
Triconex DDE Server communicates
with one or more Triconex controllers
through TSAA protocol. To return data
to clients, the DDE server uses DDE
protocol. For detailed Windows version
compatibility information, see the
Product Release Notice for Triconex
DDE Server v4.1-v4.3.0, available on
the Invensys Global Customer Support
(GCS) website.
Modbus Communication
Modbus is an industry-standard
master/slave protocol that is tradition-
ally used for energy management,
transfer line control, pipeline moni-
toring, and other industrial processes.
A Trident controller can operate as a
Modbus master, slave, or both. A DCS
46
Serial Port Specifications software must be installed on a PC that
Mode MP CIM/CM is running Windows and is connected to
RTU
a CIM, CM, or MP port on the Trident
 
controller. For detailed Windows
ASCII  version compatibility information, see
RS-232   the Product Release Notice for TriSta-
RS-485
tion v4.x, available on the Global
 
Customer Support (GCS) website.
Master  TriStation 1131 software is compliant
Slave   with the IEC 61131 International Stan-
Point-to-Point
dard for Programmable Controllers.
 
Multi-drop  Peer-to-Peer
Triconex Peer-to-Peer protocol allows
Triconex General Purpose, Trident, and
typically acts as the master while the Tricon controllers in a closed network
Trident controller acts as the slave. The to exchange a limited amount of
master can also be an operator worksta- process control data. The controllers in
tion or any general-purpose computer a Peer-to-Peer network can be time-
programmed to support Modbus synchronized with the master node (the
devices. Serial ports on the MP, and controller with the lowest node
serial ports and network ports on the number). Peer-to-Peer protocol
CIM and CM, support Modbus commu- supports a maximum of 31 Triconex
nication. controllers.
TriStation 1131 Communication Upgrades to Flash ROM
TriStation 1131 protocol uses TCP/IP The CIM and CM firmware stored in
for CIM and CM ports, and DLC for the Flash ROM can be upgraded by
MP ports on Trident systems earlier connecting an Ethernet port to a PC that
than version 3.0, to enable communica- is running the Triconex Firmware
tion between a PC running TriStation Manager.
1131 software and a Trident controller.
TriStation 1131 Developer’s Work-
bench is used to develop, download,
operate, and monitor projects for the
Trident controller. The TriStation 1131
Communication Interfaces
Interface MP CIM CM
Modbus Serial Port (RS-232/RS-485)   
Ethernet Port (10BaseT IEEE 802.3)  
Ethernet Port (100BaseT IEEE 802.3) 
Ethernet Port (10BaseT/100BaseTX Auto-negotiable IEEE  
802.3)
Attachment unit interface (AUI) for MAU 
Media independent interface (MII) for MAU 
Reduced Gigabit Media Independent Interface (RGMII) 
Copper or Serial Gigabit Media Independent Interface
(SGMII) Fiber for Media Adapter
Debug port   
Easy-to-use developer's workbench allow you to develop, test and
document process-control applications for the Trident Controller

TriStation 1131 Developer’s Workbench

TriStation 1131 Developer's Work- • Structured Text Enhanced Diagnostic Monitor

bench is an integrated tool for devel-
oping, testing, and documenting safety
and critical-process control applica-
tions for the Trident controller. The
programming methodology, user inter-
face and self-documentation capabili-
ties make the system superior to
traditional and competing engineering
tools.
TriStation 1131 software is compliant
with Part 3 of the IEC 61131 Interna-
tional Standard for Programmable
Controllers, which defines program-
ming languages.
The TriStation 1131 v4.7.0 and later
software supports the following
Windows operating systems:
• Windows® XP Professional (32-bit)
• Windows 7 Professional/Enterprise
(32-bit and 64-bit)
An optional Triconex programming
language, CEMPLE (Cause and Effect
Matrix Programming Language Editor)
supports the widely used Cause and
Effect Matrix (CEM) methodology.
TriStation 1131 software allows you to:
• Create programs, functions, and
function blocks
• Define the controller configuration
• Declare tagnames
• Test applications in an emulator
• Download and monitor applications
For a list of features in TriStation 1131
software, see the Product Release
Notice for TriStation 1131 4.x available
on the Global Customer Support (GCS)
website.
The Enhanced Diagnostic Monitor is an
application which monitors the
hardware health of Triconex controllers
and allows users to effectively
troubleshoot the safety system during
maintenance.
For more information on the Enhanced
Diagnostic Monitor, see the online Help
or printed guide included with the
Enhanced Diagnostic Monitor.
Elements of a TriStation 1131
Project
A TriStation 1131 project contains all of
the elements required to implement a
safety or control application in a
Triconex controller. Some of these
elements are automatically included in

• Windows Server® 2003 (32-bit)

• Windows Server 2008 R2 (32-bit
and 64-bit)
For detailed version compatibility
information, see the Product Release
Notice for TriStation 1131 v4.x, avail-
able on the Global Customer Support
(GCS) website.

Functional Overview
TriStation 1131 software provides three
editors which support these IEC 61131-
3 languages:
• Function Block Diagram
• Ladder Diagram
Example of TriStation 1131 v4.x Software Interface

47
TriStation 1131 Developer’s Workbench

every project by TriStation 1131,

while others are user-created.
Programs
A program is the highest-level execut-
able logic element in a TriStation 1131
project. It is an assembly of program-
ming language elements (functions,
function blocks, and data variables)
that work together to allow a program-
mable control system to achieve
control of a machine or a process.
Each program is uniquely identified
by a user-defined type name. A TriSta-
tion 1131 project can include
hundreds of programs.
Functions
A function is a logic element which
yields exactly one result. Unlike a
function block, the data associated
with a function is not retained from
one evaluation of the function to the
next. Functions do not have to be
instanced.
Function Blocks
A function block is a logic element
which yields one or more results. To
use a function block in a program, an
instance of the function block type must
first be declared. Each instance is iden-
tified by a user-defined instance name.
All of the data associated with a
specific instance of a function block is
retained from one evaluation of the
function block to the next.
Data Types
A data type defines the size and charac-
teristics of variables declared in a
program, function or function block.
Data types used by TriStation 1131
software include discrete (BOOL),
analog (DINT), and real (REAL).
Libraries
TriStation 1131 software includes
libraries of pre-defined functions, func-
tion blocks, and data types that can be
used in a project.
Sample Logic in FBD, ST and LD Languages
TriStation 1131 software includes these
libraries:
• IEC 61131-3 Standard Library – a
set of functions and function blocks
defined by the IEC 61131-3 Stan-
dard
• Triconex Library – a set of Triconex
functions and function blocks that
can be used with any Triconex
programmable controller
• Tricon Library – a set of functions
and function blocks that are specifi-
cally for use with the Tricon
controller
In addition to the pre-defined libraries,
you can also develop your own libraries
of project elements. These libraries can
include programs, functions, function
blocks, and data types which can be
imported to other TriStation 1131 proj-
ects.
Programming Languages
TriStation 1131 software includes these
programming languages: Function
Block Diagram, Structured Text, and
Ladder Diagram. An optional language,
CEMPLE, can be purchased separately.
Function Block Diagram (FBD)
Function Block Diagram is a graphical
language that corresponds to circuit
diagrams. FBD elements appear as
blocks that are wired together to form
circuits. The wires transfer binary and
other types of data between elements.
Structured Text (ST)
Structure Text is a high-level, textual
programming language that is similar
to PASCAL. Structured Text allows
Boolean and arithmetic expressions,
and programming structures such as
conditional (IF…THEN…ELSE) state-
ments. Functions and function blocks
can be invoked in Structured Text.
In TriStation 1131 v4.0 software, these
structures were added: arrays, struc-
tures, For Loop and Exit statements,

48
CASE statement, enumerated data
types, var-external, and var-temp vari-
ables.
Ladder Diagram (LD)
Ladder Diagram is a graphical
language that uses a standard set of
symbols for representing relay logic.
The basic elements are coils and
contacts which are connected by links.
Links are different from the wires in
FBD in that they transfer only binary
data between the elements.
Cause and Effect Matrix
Programming Language Editor
(CEMPLE)
CEMPLE is a high-level graphical Sample CEM from a TriStation 1131 Project
language that provides a two-dimen-
compliant Function Block Diagrams, included in the application that is
sional matrix in which you can asso-
thereby eliminating the risks associated downloaded to the controller.
ciate a problem in a process with one or
with manual translation from hand-
more corrective actions. The problem is
drawn CEMs.
referred to as the cause and the action as
Emulator Panel
the effect. The matrix associates a cause
with an effect in the intersection of the The Emulator Panel allows you to
Controller Configuration connect to an emulator, download the
cause row and the effect column.
In TriStation 1131 software, the control program, and test and debug the
CEMPLE is the first automated imple- controller configuration identifies the control program. The panel lists the
mentation of CEM, a methodology that modules in the system, communication programs, variables, and tagnames in
is commonly used throughout the settings, memory allocation for the control program. Testing can be
process-control industry and readily tagnames, and operating parameters. done by dragging variables and
understood by a broad range of plant These configuration settings are tagnames from the list to the monitor
personnel. CEM diagrams are automat- panel and changing the values as
ically translated into IEC 61131-3 desired. You can specify commands to
run the control program without inter-
vention, to run in single-step, or to halt
the execution.

Controller Panel
The Controller Panel allows connection
to the controller for real-time execution
of the application.

TriStation 1131 Interface

Options
TriStation 1131 software allows you to
specify options to be used in the inter-
face. For example, you can specify the
Declaring Tagnames in a Program drawing colors used in the program-

49
TriStation 1131 Developer’s Workbench
Emulator Panel
ming editors, and editor options such as
double-spacing between function block
terminals. You can also specify the
directory location for files.
Reports and Documentation
TriStation 1131 software includes
multiple methods of sorting data and
documenting project elements, both
during and after project development.
Printouts of user-developed function
blocks and programs can be obtained
on a variety of user-selected engi-
neering drawing templates.
Standard reports are available to docu-
ment the project configuration data.
You can also create customized reports
with Crystal Reports™.
Password Security
TriStation 1131 software provides a
security system that defines users and
their privileges with regard to editing,
50
Comments
Comments can be added to programs,
functions, and function blocks to add
information about the operations.
Help Documentation
TriStation 1131 software features an
online Help system which provides
detailed information about the soft-
ware.
library changes, state changes and other
operations.
Project History
An audit trail function is provided to
document the history of a project and its
program version changes. This detailed
log keeps track of user actions and
comments by automatically time-
stamping critical events within a
session and manually logging user
comments on demand.
Annotations
Annotations can be added to constants,
tagnames, and variables An annotation
can be used to display descriptive text,
including information specified in
system and user-modifiable macros.
You can also display the value of a vari-
able during program execution.
CEMPLE is the Triconex automated implementation of the
traditional CEM methodology that has been used by process
control engineers for decades.

CEM Programming Language Editor

Cause and Effect Matrix (CEM) is a • Customized view monitoring of Matrix

methodology that is commonly used in active causes, intersections, and As the major component of the CEM
the process control industry to define effects Editor, the Matrix identifies the parts of
alarms, emergency shutdown strate- associated with causes, effects, and
• Multiple levels of undo and redo
gies, and mitigation actions. For intersections. The Matrix can also
editing
decades, process control engineers include functions or function blocks
have used manual methods such as CEM Editor related to causes, effects, and intersec-
graph paper and spreadsheet programs tions.
to identify problem conditions and The CEM Editor includes the following
corrective actions. components as shown in the figure FBD Network
below: The FBD Network displays the Func-
Automated CEM • Matrix tion Block Diagram (FBD) related to
Called CEMPLE the cause, intersection, or effect that is
• FBD Network selected in the matrix. It can also be
The traditional CEM method is time-
consuming and subject to errors caused • Variable Detail Table used to specify properties and to invert
by misinterpretation of the matrix or values for variables.
inaccurate coding. Invensys has auto- The FBD network uses internal boolean
mated the CEM process with the Cause variables to save and move results to
and Effect Matrix Programming
Language Editor, referred to as
Matrix rows and columns
CEMPLE.
CEMPLE enables a cause and
effect matrix to be used as the
basis for a TriStation 1131
program.
CEMPLE Features
CEMPLE includes the following
features:
• Ability to specify up to 99
causes, 99 effects, and 1,000
intersections
• Ability to invoke functions and
function blocks to evaluate
cause, intersection, and effect
states
• Automatic conversion of
matrix to Function Block
Diagram language Variable Detail Table FBD Network

CEM Editor Components

51
CEM Programming Language Editor
Instance View of a Matrix
associated cells so that causes and
effects can be evaluated. For each
cause, effect, and intersection, an
internal variable is automatically
created to store and move results
between cells.
Variable Detail Table
The Variable Detail Table displays the
inputs and outputs of the FBD Network
that are generated when a cause, effect,
or intersection is selected.
The variable type and data type can also
be specified from the Variable Detail
Table.
Developing a Matrix
A matrix created in CEMPLE can be as
basic or complex as the situation
requires. In a basic matrix, causes are
identified as true or false inputs related
to one or more effects through the inter-
sections between them. The state of a
cause (true or false) determines the
52
state of the related effect. If more than
one cause is related to an effect, the
state of the effect is based on how the
matrix is evaluated.
The effect state can be determined in
either of two ways: by a logical AND
operation or by a logical OR operation
on the intersection. A logical AND is
typically used for de-energize to trip
systems; a logical OR is typically used
for energize to trip systems.
Using Functions and
Function Blocks
For more complex processes, CEMPLE
enables functions and function blocks
to be added to causes, effects, and inter-
sections. This feature can be used for
many purposes, such as; evaluation of
process input to determine the cause
state, calculating one or more process
variable values based on the state of an
effect, and using time delays.
User-created functions and
function blocks, must be
created and enabled for use
before they can be included in a
matrix.
Testing and Monitoring
Like all TriStation 1131
programs, a matrix can be
tested and debugged offline
using the Emulator Control
Panel. After the project is
downloaded, the Control Panel
can be used to monitor the
values of variables during real-
time execution.
In an instance view of a matrix,
active causes, intersections,
and effects can be viewed in a
choice of colors.
As with other types of execut-
able elements, values and vari-
ables can be set for use during
emulation and real-time execu-
tion.
CEMPLE Tools
A matrix can be developed and edited
using a variety of graphical interface
methods. Commands can be selected
from a main menu, toolbar, and pop-up
menu.
Variables can be added or renamed by
making changes in the Variable Detail
Table. Where appropriate, drop-down
lists provide variable names or function
and function block names to be
selected.
For more information, see the TriSta-
tion 1131 Developer’s Guide.
During each scan of the TriStation 1131 project, the Main Processors
examine selected discrete variables for state changes known as events.

Sequence of Events (SOE) Capability

Triconex systems support the ability to
report, by exception, events that are
significant in your application. This
capability, called Sequence of Events
(SOE), includes the following parts:
• Defining the discrete data items to
be monitored through the TriStation
1131 application
Preparing Your System for The following tasks are completed in
Event Collection the TriStation 1131 software:
To enable the controller to detect • Defining SOE blocks
events, event variables and SOE blocks
• Assigning event variables to the
are identified in the TriStation 1131
SOE blocks
project. In addition, the project must
include an SOE function block that • Adding SOE function blocks to the
starts the event collection. program logic

• Monitoring and collecting events by
the Triconex controller
• Retrieving the events from the
Triconex controller using a host
system
The following host systems can be used
to retrieve event data:
• Triconex SOE Recorder, a
Windows-based application
• When using the OPC UA Server
embedded on the CIM, an OPC UA
client application
After an SOE-enabled project is down-
loaded to the controller, TriStation 1131
software creates an SOE definition file
that contains the SOE block definitions.
When the SOE Recorder collects an
event from the controller, it obtains the
tagname, alias, state name, and other
information about the event variable
from the SOE definition file.
Triconex Controller
Types of Event Variables
The types of discrete variables that can
be designated as event variables
include BOOL input and BOOL aliased
memory variables.
Configuring SOE Blocks
An SOE block is a data structure that
resides in the memory of a controller’s
Triconex Controller Triconex Controller

CIM CIM CIM

• When using an external OPC Server
with a CM, an OPC client NET2
NET1 NET1

application
With SOE Recorder you can:
• Collect and analyze event data
• Export event data to dBASE IV files MP MP MP

• Print reports with event data

The SOE data file, which is output from To DCS

TriStation 1131 software, is only for

use with the Triconex SOE Recorder
program. This file is read by the SOE
Recorder program and adds descriptive
information which is associated with
the tagname in the Configuration file in
PC Running TriStation 1131 Software PC Running SOE Software
a TriStation 1131 project.
Trident Network with SOE Recorder

53
Sequence of Events (SOE) Capability
MPs. When SOE blocks are config-
ured, the event variables to be detected
by the controller are specified for each
block.
The maximum individual block size is
20,000 events, with 60,000 events for
all blocks. The block size is the amount
of memory that the MPs reserve for
recording of events.
When a block is collecting events, the
MPs write an event entry which
includes the values of event variables
that changed during the current scan
and a time stamp.
SOE Function Blocks
SOE function blocks control and verify
event collection for SOE blocks. The
following function blocks are available:
• SOESTRT starts event collection
• SOESTOP stops event collection
• SOESTAT checks status of SOE
blocks
• SOECLR clears status of SOE
blocks
The SOESTRT function block must be
added to the TriStation 1131 program
to identify the SOE blocks from which
events are to be collected. The other
SOE function blocks are optional.
SOE Recorder
SOE Recorder can simultaneously
collect event data from as many as 31
networked controllers. It queries all the
controllers on the network to determine
which downloaded TriStation 1131
projects include SOE blocks. If a
project includes one or more SOE
blocks, then SOE Recorder opens the
appropriate SOE definition file and
begins collecting events from the asso-
ciated controller.
While the TriStation 1131 project is
running, SOE Recorder can be used to
analyze events online as it collects them
from the controllers. Snapshots of
54
SOE Events File
events that cover specific periods of
time before or after trips have occurred
can also be saved. SOE Recorder
allows you to:
• Find events and copy them to
Windows-based applications
• Filter and sort saved event data
• Specify the display of point
properties for event data
• View the properties of individual
events
SOE Recorder also allows event data to
be exported to dBASEIV or ASCII text
files, either manually or automatically.
A report engine and standard report are
included.
Trip Processing
A trip is a shutdown of the controlled
process, or a portion of the controlled
process. A TriStation 1131 project used
for safety shutdown typically includes
one trip variable, whose state change
initiates the shutdown activities. If a
project requires several variables
related to trip conditions, these vari-
ables must be evaluated in combination
to determine the final state of the trip
variable.
When a trip event occurs, SOE
Recorder can automatically create a trip
snapshot. This snapshot is a file of
events that occurred x minutes before a
trip and y minutes after a trip, based on
TriStation 1131 settings.
Time Synchronization
and Time Stamps
In a typical Peer-to-Peer network, the
controllers synchronize their time with
the master node (the controller with the
lowest node number) within ±25 milli-
seconds. A controller recognizes
events on a scan basis and time-stamps
each event at the beginning of the scan.
Because the scans of the various
controllers on the network are not
synchronized, the same event can be
logged by two controllers with
different time stamps. The worst-case
difference is the longer scan time plus
25 milliseconds.
Each day, SOE Recorder compares its
clock with the clock of each controller
from which event data is being
collected. If a controller’s clock is out
of sync by more than five minutes, a
message is displayed in the SOE
message bar.
For more information about SOE
Recorder, see the SOE Recorder User’s
Guide.
Triconex Safety View ABM allows you to monitor and manage
safety alarms and bypasses.
Triconex Safety View Alarm and
Bypass Management (ABM) is part of
the Triconex Safety View suite of appli-
cations. Safety View ABM is used to
monitor and acknowledge safety
alarms, and bypass tagnames. The
safety alarms are generated from field
devices connected to the safety control-
lers, and represent conditions impacting
the safety of the equipment under
control. Safety View ABM also
displays the current alarm state and
process condition for all configured
tagnames, and displays bypassed
tagnames. The user interface, configu-
rability, and bypass capabilities make
Safety View ABM superior to tradi-
tional safety monitoring tools.
Safety View ABM is TÜV-approved for
use with SIL3 safety systems per IEC
61508 and IEC 61511. Safety View
ABM can be used with the following
Triconex controllers:
• Tricon 10.x and later systems
• Trident 3.x and later systems
• Triconex General Purpose (Tri-GP)
3.x and later systems
Safety View ABM 1.1.0 supports the
following Windows operating systems:
• Windows 7 Professional SP1
(Standard 32-bit or 64-bit)
• Windows Server 2008 R2 SP1
(Standard 64-bit)
Safety View ABM
Functional Overview
Safety View ABM depends on the
implementation of process alarms in the
safety controller using TriStation 1131.
Safety View ABM supports alarm
states and sequences as defined in the
ISA 18.1 - 2004 (R)-Annunciator
Sequences and Specifications standard.
Safety View ABM allows you to:
• Configure tagnames for alarm
monitoring
• Monitor alarms generated from
controllers
• Retrieve alarm-related data from up
to 254 controllers simultaneously,
across multiple Safety View ABM
networks (a maximum of 62
controllers per network)
Safety View ABM is comprised of
several components, including the
following:
• Configuration Component: The
Safety View Configuration
Component allows you to add,
delete, update, import, and export
configuration settings for
controllers, users, tagnames, alarms,
and monitoring workstations. Once
configuration is complete, you
deploy the Alarm Monitoring
Application to the monitoring
workstations.
• Safety View Server: The Safety
View server manages
communication with the controller,
the Safety View database, and the
Alarm Monitoring Application. The
server sends commands from the
Alarm Monitoring Application to
the controller for processing and to
the database for storage. The server
also retrieves alarm and process
condition information continuously
from the configured controllers and
displays the collected information in
the Alarm Monitoring Application
even when no user is logged on.
• Safety View Database: The Safety
View database stores configuration
information, alarm state data, and
security information from the
Configuration Component, the
Alarm Monitoring Application, and
the controllers.
• Alarm Monitoring Application:
The Alarm Monitoring Application
is a managed InTouch® application
that is deployed to monitoring
workstations via the Configuration
Component. It allows you to
perform a number of alarm
management functions.
• HMI Designer: The Safety View
HMI Designer allows you to
customize the layout of the Alarm
Monitoring Application. You can
drag the objects you want in your
layout onto the canvas and then
define the object properties such as
position, size, and color.
The Safety View ABM components are
installed on designated PCs or servers
in the supervisory network. The
Invensys ArchestrA framework main-
tains the Safety View ABM compo-
nents and serves as the underlying
infrastructure that supports Safety View
ABM.
55
Safety View ABM

Alarm Monitoring Application

Features
The Safety View ABM Alarm Moni-
toring Application allows a plant oper-
ator to view, manage, and bypass
tagnames and safety alarms. It continu-
ally updates alarm states and process
conditions even when an operator is not
logged in; user authentication is
required to perform most operations.
The Shift Change functionality re-acti-
vates all alarms acknowledged by an
operator during the previous work shift.
All user actions are maintained in an
audit trail log.
The Safety View ABM Alarm Moni-
toring Application allows you to:
• Acknowledge active alarms Example of the Alarm Monitoring Application Interface
(individually, or all alarms at once) • Initiate or revoke an action command • View process value tagnames
using a General Purpose (GP) button associated with an alarm or LoE
• Silence the audio for active and
ringback alarms (not available when using the • Acknowledge bypassed tagnames
Modbus protocol) (when using the Custom layout)
• Clear first-out alarms
• Bypass tagnames grouped under • Re-activate alarms acknowledged
• Reset ringback alarms lines of equipment (LoEs) and safety by an operator during the previous
• Disable and enable alarms (not instrumented functions (SIFs) work shift
available when using the Modbus • Unbypass tagnames • Print audit trail records
protocol)
• Manage notes for bypassed tagnames
Configuration Component
Features
The Safety View ABM Configuration
Component is an ArchestrA object that
is accessed from the ArchestrA IDE. It
allows you to configure the following:
• Safety controllers
• Users, roles, and security
permissions
• Monitoring workstations and their
corresponding displays
• Areas, lines of equipment (LoEs),
safety instrumented functions
(SIFs), alarms, and general purpose
(GP) buttons
• Alarm colors and sounds
• Audit trail network printer
Example of the Configuration Component Interface

56
HMI Designer Features
The Safety View HMI Designer allows
you to customize the screen layout of
the Alarm Monitoring Application and
to perform some configuration tasks
that can also be performed using the
Safety View Configuration Component.
The HMI Designer can be used to
customize the following:
• Screen layout
• Colors and names of the alarm states
and process condition values
• Appearance of the alarm and GP
button faceplates
The HMI Designer can be used to Example of the HMI Designer Interface
configure the following:
• Controllers
• Areas, LoEs, SIFs, alarms, and GP
buttons
• Monitoring workstations and
associated monitors
• Assign sounds to the various alarm
conditions and add command
buttons to your interface

57
Notes
 Glossary

Ω CEM
The symbol which represents ohm. Stands for Cause and Effect Matrix which is a two-
dimensional matrix for the development of safety appli-
μ cations. In this type of matrix, causes are represented by
The symbol which represents micro. rows and effects are represented by columns.

A CE Mark
Abbreviation for amp. A type of certification by the European Union which
ensures the electro-magnetic compatibility of Triconex
alias controllers with other pieces of electrical and electronic
A five-digit number which identifies the data type and equipment.
hardware address of a point in the Triconex controller.
Alias is a convention of Modbus which is a communica- CEMPLE
tion protocol available with Triconex communication A language editor in the TriStation 1131 Developer's
modules. Workbench that allows you to develop CEMs for safety
shutdown applications.
ASIC
Stands for Application Specific Integrated Circuit. communication modules
Modules that enable the Triconex controllers to commu-
availability nicate with host computers. Invensys offers communica-
The probability that the control system is operational at tion modules with Ethernet and serial protocol.
some instant of time.
configuration
ATEX In TriStation 1131 software, the modules and settings
Stands for “Atomsphères Explosibles” and refers to the used in a Triconex controller, including MPs, communi-
European Union Directive 94/9/EC, which is one of a cation and I/O modules, field termination panels, and
number of approach directives developed by the memory and module settings.
European Union and covers all equipment and protective
systems intended for use in potentially explosive atmo- control program
spheres In TriStation 1131 software, a control program is the
compiled code (built from program elements and config-
bin uration information) that is downloaded to and runs in a
An address range of aliased variables in Triconex Triconex controller.
controllers, based on Class and Type combinations.
control system
board The system which governs the operation of plant,
See module. machinery or other equipment by producing appropriate
instructions in response to input signals.
card
See module. controller
A Triconex controller includes MPs, communication and
cause I/O modules, and field termination devices.
In CEM methodology, a cause is a problem to be solved
by the matrix. DCS
Stands for distributed control system, which is a system
that controls a process and provides status information to
an operator.

59
Glossary
DDE
Stands for Dynamic Data Exchange (DDE) which is an
interprocess communication mechanism provided by
Microsoft Windows. Applications running under
Windows can use DDE to send and receive data and
instructions to and from each other.
debug
The act of locating and correcting faults: 1) one of the
normal operations in software development such as
editing, compiling, debugging, loading, and verifying; or
2) the identification and isolation of a faulty physical
component, including its replacement or repair to return
the PLC to operational status.
effect
In CEM methodology, an effect is an action that must be
taken to solve a cause (problem).
event
A state change of a discrete aliased variable which has
been designated for event logging. An event occurs when
a variable changes from the normal state to another state.
event logger
A utility that logs, displays and prints critical events in
real time, based on state changes of discrete variables in
the user-written application. Proper use of an event logger
warns users about dangerous conditions and printouts of
events can help identify the sequence of events that led to
a trip.
event variable
A discrete memory variable or discrete input point that
has been assigned to an SOE block.
fault tolerance
The ability to identify and compensate for failed control
system elements and allow repair while continuing an
assigned task without process interruption. Fault toler-
ance is achieved by incorporating redundancy and fault
masking.
FBD
Stands for Function Block Diagram which is a graphical
programming language that corresponds to circuit
diagrams. Used for connective programming, FBD
programs are structured by groups of interconnected
elements (networks), allowing the integration of function
and function blocks.
60
HART
Highway Addressable Remote Transducer protocol is a
bi-directional industrial field communication protocol
used to communicate between intelligent field instru-
ments and host systems over 4–20 mA instrumentation
wiring.
host
See external host.
hot-spare
A unique feature of Triconex controllers which allows
spare I/O modules to be installed with automatic switch
to the spare in case the primary module fails.
IEEE
Stands for the Institute of Electrical and Electronics Engi-
neers (IEEE) which is a professional society for engi-
neers.
IEC 61131-3
The part of the IEC 61131 standard for programmable
controllers that specifies the syntax and semantics of a
unified suite of programming languages for program-
mable controllers.
input poll time
The time required by the Triconex controller to collect
input data from the controlled process. Input polling is
asynchronous and overlaps execution of the user-written
application.
instance view
In TriStation 1131 software, the Emulator Control Panel
and Triconex Control Panel displays the values of anno-
tated variables while a TriStation 1131 project is running.
In an instance view, you can change the values of vari-
ables during emulation or real-time execution.
intermittent fault
A fault or error that is only occasionally present due to
unstable hardware or varying software states.
intersection
In CEMPLE, a cell in a matrix where a cause row inter-
sects an effect column.
intersection function
In CEMPLE, a function or function block that can be
selected from a list in the Intersection cell of a cause row
and an effect row.

ISO
Stands for the International Organization for Standard-
ization (ISO) which is a worldwide federation of national
standards bodies (ISO member bodies) that promulgates
standards affecting international commerce and commu-
nications.
LD
Stands for Ladder Diagram, which is a graphical
programming language that uses a set of symbols to
represent relay logic. Modules are defined by their
connection to a left and right power rail.
logical slot
A logical slot includes two physical slots, which can
house a primary module and a hot spare module.
m control, factory automation, and business.
Abbreviation for milli.
Markov model
A generalized modeling technique which can be used to
represent a system with an arbitrary number of modules,
failure events, and repair events. A Markov model can be
mathematically solved to produce a resultant probability.
matrix
1. A CEM program
2. A traditional methodology for ESD applications which
associates a problem (cause) in a process with one or
more actions (effects) that must be taken to correct the
problem.
module
An active field-replaceable unit consisting of an elec-
tronic circuit assembly housed in a metal spine. Also
called board or card.
MTBF
Stands for Mean Time Between Failure which is the
expected average time between failures of a system,
including the time taken to repair the system. Usually
expressed in hours.
MTTF
Stands for Mean Time To Failure which is the expected
average time to a system failure in a population of iden-
tical systems. Usually expressed in hours.
Glossary
MTTR
Stands for Mean Time To Repair which is the expected
time to repair a failed system or subsystem. Usually
expressed in hours.
node
Any of the machines on a network. In this document,
node usually means a Triconex controller.
node number
The physical address of a node.
OPC
Stands for OLE for Process Control which is a standard
set of non-proprietary interfaces used to develop
client/server programs. OPC supports interoperability
between field devices and applications for process
OPC UA
Stands for OLE for Process Control Unified Architec-
ture, which is the next generation OPC standard that
provides a cohesive, secure, and reliable cross-platform
framework for access to real time data and events.
open network
A network to which an external host can be connected.
output poll time
The time required by the Triconex controller to imple-
ment the outputs generated by the user-written applica-
tion in response to inputs from the controlled process.
Peer-to-Peer
A protocol that allow multiple Triconex controllers on a
proprietary network to exchange limited amounts of
process and safety information.
program
1. The set of instructions, commands, and/or directions
that define the Triconex controller’s output signals in
terms of input signals.
2. The act of creating such a set of instructions using the
relay ladder language of the TriStation 1131 program-
ming system.
protocol
A set of rules describing the format used for data
exchange between two entities.
61
Glossary
reliability
The probability that no failure of the system will have
occurred in a given period of time.
scan time
The period of the Triconex controller’s cycle of required
control functions. Scan time is composed of three
elements:
• Input poll time (asynchronous with execution of the
user-written application)
• The time required to execute the user-written
application
• Output poll time
ST
Stands for Structured Text, which is a high-level
programming language used for complex arithmetic
calculations and procedures that are not easily expressed
in graphical languages.
system
Consists of a set of components which interact under the
control of a design.
TCP/IP
Stands for Transmission Control Protocol/Internet
Protocol (TCP/IP) which are protocols for the Transport
and Network layers of the OSI network model. TCP/IP
provides reliable, sequenced data delivery.
Time Synchronization
A Triconex protocol used to establish and maintain a
synchronized, network-wide time basis. Time can be
synchronized with the master node in a network of
Tricon, Triconex General Purpose, or Trident controllers,
with a distributed control system (DCS), or with an OPC
client/server application.
transient fault
A fault or error resulting from a temporary environmental
condition.
62
TMR
Stands for Triple-Modular Redundant architecture, which
allows Triconex controllers to achieve fault tolerance.
The complete system is triplicated; each of the three iden-
tical systems is called a leg. Each leg independently
executes the user-written application in parallel with the
other legs.
trip
A safety-related shutdown of the controlled process or a
portion of the controlled process.
TriStation 1131
A Windows-based application for developing and down-
loading user-written applications and for performing
maintenance and diagnostics.
TriStation 1131 protocol
A master/slave protocol used by a TriStation 1131 appli-
cation for communication with the Triconex controllers.
TÜV Rheinland
TÜV stands for Technischer Überwachungs-Verein
which translates to Technical Supervisory Association. In
Germany, TÜV Rheinland is an authorized technical
inspection agency for a wide variety of products,
processes, installations, plants and equipment.
UDP/IP
Stands for User Datagram Protocol/Internet Protocol
(UDP/IP) which are protocols for the Transport and
Network layers of the OSI network model. UDP/IP
provides best-effort datagram delivery.
voting
A mechanism whereby each leg of a TMR system
compares and corrects the data in each leg using a two-
out-of-three majority voting scheme.