The ICS Triplex T8402 is a dual-channel 24 VDC digital input module within the Rockwell Automation Trusted Safety I/O series. A single module integrates 60 field input channels and adopts the 1oo2D 2-out-of-2 fault-tolerant architecture with diagnostics. Designed for signal acquisition of Safety Instrumented Function (SIF) loops, it supports connection to passive contact discrete signals from field devices.

The module incorporates an on-board Σ-Δ analog-to-digital acquisition circuit, with independent channel monitoring for cable open-circuit and short-circuit faults. It features on-board Sequence of Events (SOE) logging with a 1 ms time resolution. Certified TÜV IEC 61508 SIL 3, the module is compatible with Trusted TMR triple modular redundant controller racks and supports online hot-swap replacement. It serves as the standard digital acquisition hardware for high-safety-level systems in the process industry.

Model Code Breakdown

Full part number identifier: ICSTT-RM270M-EN-P (PD-T8402)

1. T8402: Base product model, the hardware unit of the Trusted series 60-channel dual-redundant 24 VDC digital input module
2. Trusted: Name of the safety control system series to which the product belongs, representing the Triple Modular Redundant (TMR) safety platform
3. Dual: Dual acquisition circuit design. Each field signal is equipped with two independent acquisition loops to realize 1oo2D fault tolerance
4. 24 Vdc: Matches standard 24-volt DC switch contact power supply signals from field sites
5. Digital Input: Hardware functional classification, discrete input acquisition module
6. 60 Channel: Maximum 60 independent field switch signals connectable per single module

Core Product Features

Hardware Architecture Features

The complete unit consists of four functional subassemblies: Field Terminal Unit (FTU), Field Interface Unit (FIU), Host Interface Unit (HIU) and Front Panel Unit (FPU). Each FIU partition is independently equipped with 60 Σ-Δ analog-to-digital converters. The HIU handles backplane IMB bus communication, redundant power distribution and on-board DSP fault diagnosis. The FTU integrates current-limiting resistors, overvoltage protection and EMI filter circuits. The SmartSlot communication link enables master-slave module coordination and interaction via the FTU. The module backplane operating voltage ranges from 20 to 32 VDC, with total power consumption of 20 W, channel input impedance of 5 kΩ, signal measurement range of ±40 VDC, and maximum single-channel withstand voltage of ±50 VDC.

Safety & Diagnostic Features

Four-wire circuit monitoring is implemented for all channels. With matching field circuit monitoring accessories, the module can detect open circuits, short circuits and ambiguous signal threshold zones. Multi-layer verification mechanisms are embedded: cyclic CRC checks for configurations stored in Flash memory, and periodic Safety Layer Test (SLT) execution to verify DSP calculation integrity. Three independent temperature sensors continuously monitor board temperatures across all partitions, while power supply voltage and current are scanned uninterruptedly. A DISCREP discrepancy register is automatically generated when deviations occur in channel acquisition data, accurately reporting inconsistent channel measurement faults. Insulation ratings comply with 50 V continuous reinforced insulation and 250 V basic fault insulation, with a pulse withstand voltage test of 2436 VDC maintained for 60 seconds.

Software Configuration & Data Output Features

No local DIP switches are provided on the module hardware. All parameters are downloaded via the IEC 61131 engineering workstation toolset and distributed through the TMR controller. The hardware exposes 8 logical Rack data areas, outputting channel logic status, voltage range judgment, raw measured voltage, circuit fault flags, channel discrepancy indicators, board maintenance monitoring data and module operating status information respectively. SOE event logging can be enabled per individual signal channel with a 1 ms change-of-state timestamp resolution and ±10 ms time error tolerance. Customizable voltage thresholds are available with hysteresis bands to eliminate false alarms caused by signal jitter, and built-in 50/60 Hz noise filter parameters can be configured separately for each channel.

Mechanical & Maintenance Features

Overall dimensions: 266 mm H × 31 mm W × 303 mm D, weight: 1.16 kg. Compatible with T8100 controller racks and T8300 expansion racks. Operating ambient temperature: 0~60 °C; storage temperature: -25~70 °C; relative humidity: 10%~95% non-condensing. A tri-color status LED array on the front panel indicates slice health, master/backup operating status and configuration readiness. Mechanical latch levers are fitted at both ends of the module; sliding the lever open automatically triggers master-backup switching logic. Polarity coding keys prevent incorrect insertion. Key positions 1, 3 and 4 must be removed on the T8402 to match the mating cables.

Core Advantages

1. Triple-isolation partition design. The module is divided into three independent Fault Containment Regions (FCRs): Partition A, B and C. Failures within one region cannot propagate to other acquisition channels, delivering robust hardware fault isolation performance.
2. Independent threshold configuration for all channels. Each input channel supports separate high/low voltage judgment points, paired with 50/60 Hz digital filtering to effectively suppress electromagnetic interference generated by field inverters and motors.
3. Synchronous dual voltage acquisition and cross-verification. The 1oo2D voting mechanism guarantees reliable signal acquisition. Accurate switch status can still be output normally even if one acquisition loop of a single channel fails.
4. Comprehensive on-board diagnostic system. It continuously monitors board temperature, multi-channel power supply, reference voltage and channel acquisition discrepancies, enabling precise fault localization down to individual channels and slices.
5. Millisecond-level SOE sequence logging. High-precision timestamps are automatically attached upon equipment status changes, facilitating incident tracing and process transient analysis.
6. Two redundant backup slot options available: dedicated adjacent Companion Slot and multi-module shared universal SmartSlot, compatible with various cabinet layout requirements.
7. 2500 V pulse withstand optoelectronic isolation. Complete electrical separation between field circuits and controller backplane prevents damage to the main processor caused by field surges and short circuits.
8. Online module replacement without shutdown. Field signal collection and safety logic operation remain uninterrupted during replacement, minimizing plant downtime.

Application Industries

1. Oil & gas extraction, long-distance transmission pipelines and station safety interlock systems
2. SIL 3 Safety Instrumented Systems (SIS) for refineries and fine chemical plants
3. Safety shutdown loops for high-temperature & high-pressure processes in coal chemical and coal-to-olefin facilities
4. Protection interlock control for thermal power plants, gas turbines and waste heat boilers
5. Safety signal acquisition for explosion-proof workshops in pharmaceutical and fine chemical industries
6. Emergency safety interlocks for water treatment, hazardous waste disposal and chemical wastewater treatment
7. Combustion safety monitoring systems for metallurgical blast furnaces and heating furnaces
8. Safety control systems for offshore platforms and onshore oil & gas gathering stations

Comparison of Trusted Series I/O Modules

Comparison 1: Channel Capacity

• T8402: 60-channel 24 VDC digital input module, delivering the maximum channel count among equivalent modules of the same series in the industry
• T8401: 32-channel 24 V digital input module with half the channel capacity, designed for cabinets with small-scale I/O point layouts

Comparison 2: Redundancy Architecture

• T8402: Standard 1oo2D dual acquisition loop fault-tolerant architecture, fulfilling SIL 3 full-channel fault tolerance requirements
• T8401: Simplified single acquisition loop architecture, only applicable to low safety integrity level scenarios of SIL 2 and below

Comparison 3: Circuit Monitoring Capability

• T8402: Cable open-circuit and short-circuit monitoring can be independently enabled or disabled for all 60 channels
• T8401: Only the first 16 channels support circuit monitoring; the remaining channels have no cable fault diagnosis function

Comparison 4: SOE Sequence of Event Logging

• T8402: Millisecond-level SOE timestamp logging supported on all channels
• T8401: SOE time sequence acquisition is only available for the first 16 channels

Comparison 5: Cabinet Space Occupancy

• T8402: 60 points per single slot, featuring higher point density to save rack slot resources
• T8401: 32 points per single slot, occupying more rack space for the same quantity of I/O points

Comparison 6: Applicable Safety Integrity Level

• T8402: TÜV certified to IEC 61508 SIL 3, with full loops compliant for high-safety process interlocks
• T8401: Maximum SIL 2 certification, solely used for signal acquisition of non-critical auxiliary interlocks

Supporting Parts List

1. Field Termination Assembly

T8802: Dedicated Field Termination Assembly (FTA) for 60-channel 24 VDC digital input, integrated with 5 kΩ termination matching resistors and voltage divider circuits for circuit monitoring

2. I/O Connection Cables

• PD-TC600 (ICSTT-RM314): 60-channel I/O cable for shared universal SmartSlot spare slots
• PD-TC700 (ICSTT-RM315): 60-channel I/O cable for dual-slot redundant dedicated Companion Slot
• TC-306-02: Interconnect jumper cable for cross-cabinet SmartSlot spare modules

3. Controller Racks

• T8100: Trusted main controller rack, natively compatible with TMR triple redundant processors and I/O modules
• T8300: Trusted I/O expansion rack for extending remote I/O points and supporting cross-cabinet SmartSlot redundancy

4. Controller Hardware

T8110, T8150: Trusted TMR triple redundant safety processors, responsible for module configuration download, logic calculation and SOE log storage

5. Supporting Software Tools

• ICSTT-RM249 (PD-T8082): Trusted tool suite, dedicated software for module parameter, threshold and filter configuration
• ICSTT-RM243 (PD-T8013): SOE event sequence and process historical recording software, used for reading and analyzing time sequence data of T8402

Frequently Asked Questions

Q1 Can the T8402 directly replace the T8401 module, and is program modification required?

A1 Direct replacement is not feasible. The two models differ in channel count, data Rack register address allocation, and 1oo2D fault-tolerant architecture logic. After replacement, you must remap I/O variables, reconfigure channel threshold and SOE parameters, then recompile and download the project.

Q2 What voltage rating of external field contacts is supported by the T8402? Can 220 VAC signals be connected directly?

A2 It is designed for standard 24 VDC passive contacts, with a maximum transient withstand voltage of ±50 VDC. Direct connection of 220 VAC signals is unsupported. External isolated conversion terminals are required if AC switch signals need to be acquired.

Q3 What is the maximum number of shared SmartSlot spare slots configurable in one system?

A3 Each standalone T8300 expansion rack only accommodates one universal SmartSlot spare slot. Multiple racks within the system can share spare modules via TC-306-02 jumper cables. There is no fixed upper limit for the whole system, subject to total available rack slots.

Q4 Will acquisition of the 60 field input channels be interrupted during hot-swap of the module?

A4 With dual-redundant Companion Slot configuration, the standby module instantly takes over all channels upon removal of the primary module, with zero interruption to signal acquisition. If only a single module is installed without a spare slot, all 60 associated signals will be lost and safety interlock logic will fail once the module is pulled out.

Q5 Where to troubleshoot if the circuit monitoring function fails to activate?

A5 1. Verify complete installation of the matching T8802 termination assembly; missing built-in voltage divider monitoring resistors on the FTA will disable this function. 2. Confirm the circuit monitoring toggle for the relevant channels is ticked in the engineering workstation configuration. 3. Check that field switches are fitted with circuit monitoring accessories to form a voltage divider loop for open/short-circuit detection.

Q6 Does the TÜV SIL 3 certification for T8402 cover matching termination assemblies and cables? Are full sets required for procurement?

A6 The SIL 3 certification covers the complete assembly including T8402 module, T8802 FTA and original manufacturer I/O cables. Sourcing third-party termination boards or cables separately will invalidate functional safety certification compliance. Original matching FTAs and cables must be ordered together during procurement.

Q7 What fault does a single flashing red Health LED on the module front panel indicate? Is immediate module replacement necessary?

A7 It signals a recoverable minor fault within one of the A/B/C Fault Containment Regions (FCRs). The system maintains normal signal acquisition via 1oo2D voting of the remaining two slices. Emergency shutdown is not required, but power supply, temperature and channel circuit faults must be diagnosed within 24 hours; persistent alarms will escalate overall failure risks.

Recommended Trusted Series I/O Models of the Same Brand

T8401: 32-channel 24 VDC digital input module

T8403: 60-channel 24 VDC digital output module

T8442: 16-channel analog input module

T8461: 8-channel analog output module

T8100: Trusted main controller rack

T8300: Trusted I/O expansion rack

T8150: TMR triple modular redundant processor module

T8802: Dedicated 60-channel Field Termination Assembly for T8402

T8423: Relay output digital module

T8451: RTD resistance temperature detector input module

T8431: Isolated digital input module

T8471: Pulse counter acquisition module