User Manual Owner manual

Rockwell Automation Publication 1715-UM001C-EN-P - March 2014 211
1715 Redundant I/O System in SIL 2 Safety Applications Chapter 6
Reaction to Faults
If an output module faults, the following status information is reported:
Module presence
Module health and status
Channel health and status
Field faults
An echo of the front panel indicators for each module
If any of the following internal conditions exist, the output module fails safe:
Internal software error is detected
Over-temperature condition is detected
Power supply rails are out of tolerance
The digital output module incorporates line test functionality that can detect
and indicate 'no load' field faults. This functionality can be enabled or disabled.
Shutdown Modes
When the module is in Shutdown mode, the Ready and Run indicators turn red.
During module configuration you choose how you want the output channels to
behave in the Shutdown mode, whether due to fault or Program mode. Output
module channels can be configured to provide the following channel values:
De-energized (OFF), which is the default fail-safe value
Hold Last State