Experion PKS Startup Guide
Experion PKS Startup Guide
Experion PKS Startup Guide
While this information is presented in good faith and believed to be accurate, Honeywell disclaims the implied warranties of merchantability and fitness for a particular purpose and makes no express warranties except as may be stated in its written agreement with and for its customers. In no event is Honeywell liable to anyone for any indirect, special or consequential damages. The information and specifications in this document are subject to change without notice. Honeywell, PlantScape, Experion, and TotalPlant are registered trademarks of Honeywell International Inc. Other brand or product names are trademarks of their respective owners.
Honeywell International Process Solutions 2500 West Union Hills Phoenix, AZ 85027 1-800 343-0228
ii
R310.3 July/2008
Release Information
Document Name Startup and Shutdown Guide - ssgd Document ID EP-DCXX35 Release Number 310.3 Publication Date July/2008
References
The following list identifies all documents that may be sources of reference for material discussed in this publication.
Document Title
R310.3 July/2008
iii
Europe Contact: Phone: Facsimile: Mail: Honeywell TAC-EMEA +32-2-728-2732 +32-2-728-2696 TAC-BE02 Hermes Plaza Hermeslaan, 1H B-1831 Diegem, Belgium Honeywell Global TAC Pacific 1300-300-4822 (toll free within Australia) +61-8-9362-9559 (outside Australia) +61-8-9362-9564 Honeywell Limited Australia 5 Kitchener Way Burswood 6100, Western Australia [email protected]
Honeywell Global TAC India +91-20- 6603- 2718 / 19 and 1800-233-5051 +91-20- 66039800 Honeywell Automation India Ltd. 56 and 57, Hadapsar Industrial Estate Hadapsar, Pune 411 013, India [email protected]
Email:
Honeywell Global TAC Korea +82-2-799-6317 +82-11-9227-6324 +82-2-792-9015 Honeywell Co., Ltd 17F, Kikje Center B/D, 191, Hangangro-2Ga Yongsan-gu, Seoul, 140-702, Korea [email protected]
iv
R310.3 July/2008
Peoples Republic of China Contact: Honeywell Global TAC China Phone: +86- 21-52574568 Mail: Honeywell (China) Co., Ltd 33/F, Tower A, City Center, 100 Zunyi Rd. Shanghai 200051, Peoples Republic of China Email: [email protected] Singapore Contact: Phone: Facsimile: Mail: Global TAC South East Asia +65-6580-3500 +65-6580-3501 +65-6445-3033 Honeywell Private Limited Honeywell Building 17, Changi Business Park Central 1 Singapore 486073 [email protected] Global TAC Taiwan +886- 7- 536 2567 +886-7-536 2039 Honeywell Taiwan Ltd. 17F-1, No. 260, Jhongshan 2nd Road. Cianjhen District Kaohsiung, Taiwan, ROC [email protected] Global TAC Japan +81-3-6730-7160 +81-3-6730-7228 Honeywell Japan Inc. New Pier Takeshiba, South Tower Building, 20th Floor, 1-16-1 Kaigan, Minato-ku, Tokyo 105-0022, Japan [email protected]
Email:
R310.3 July/2008
Elsewhere Call your nearest Honeywell office. World Wide Web Honeywell Solution Support Online: http://www.honeywell.com/ps Training Classes Honeywell Automation College: http://www.automationcollege.com
Symbol Definitions
The following table lists those symbols used in this document to denote certain conditions.
Symbol Definition ATTENTION: Identifies information that requires special consideration.
TIP: Identifies advice or hints for the user, often in terms of performing a task. REFERENCE -EXTERNAL: Identifies an additional source of information outside of the bookset. REFERENCE - INTERNAL: Identifies an additional source of information within the bookset.
CAUTION
Indicates a situation which, if not avoided, may result in equipment or work (data) on the system being damaged or lost, or may result in the inability to properly operate the process. CAUTION: Indicates a potentially hazardous situation which, if not avoided, may result in minor or moderate injury. It may also be used to alert against unsafe practices. CAUTION symbol on the equipment refers the user to the product manual for additional information. The symbol appears next to required information in the manual.
vi
R310.3 July/2008
Symbol
Definition WARNING: Indicates a potentially hazardous situation, which, if not avoided, could result in serious injury or death. WARNING symbol on the equipment refers the user to the product manual for additional information. The symbol appears next to required information in the manual. WARNING, Risk of electrical shock: Potential shock hazard where HAZARDOUS LIVE voltages greater than 30 Vrms, 42.4 Vpeak, or 60 VDC may be accessible. ESD HAZARD: Danger of an electro-static discharge to which equipment may be sensitive. Observe precautions for handling electrostatic sensitive devices. Protective Earth (PE) terminal: Provided for connection of the protective earth (green or green/yellow) supply system conductor.
Functional earth terminal: Used for non-safety purposes such as noise immunity improvement. NOTE: This connection shall be bonded to Protective Earth at the source of supply in accordance with national local electrical code requirements. Earth Ground: Functional earth connection. NOTE: This connection shall be bonded to Protective Earth at the source of supply in accordance with national and local electrical code requirements. Chassis Ground: Identifies a connection to the chassis or frame of the equipment shall be bonded to Protective Earth at the source of supply in accordance with national and local electrical code requirements.
R310.3 July/2008
vii
viii
R310.3 July/2008
Contents
INTRODUCTION .....................................................................................1
Overview ..................................................................................................................... 1
Abstract ..................................................................................................................................1 Our assumptions about readers .............................................................................................1 A word about security/password protection............................................................................3 Process startup supplement...................................................................................................3
Conventions ............................................................................................................. 11
Terms and type representations...........................................................................................11
Contents
APPENDIX A ........................................................................................ 73
Initial Start Up of C200 Controller and I/O Chassis...............................................73
Hardware installation and wiring assumptions .................................................................... 73 Powering up for the first time............................................................................................... 73 Interpreting other hardware LED indications ....................................................................... 78
APPENDIX B ........................................................................................ 83
Input/Output Behavior Analysis..............................................................................83
Introduction ......................................................................................................................... 83 Operating scenarios and I/O behavior................................................................................. 83
R310.3 July/2008
Contents Tables
Tables
Table 1 Summary of switchover action for RCP power interruption............................. 35 Table 2 Normal LED indications for modules after powerup. ....................................... 75 Table 3 Inactivate and activate IOM function blocks .................................................... 84 Table 4 Delete IOM function blocks.............................................................................. 85 Table 5 Inactivate and activate IOC function block ...................................................... 86 Table 6 Delete IOC function block................................................................................ 88 Table 7 Delete and reload CM function block containing analog and digital output channels ................................................................................................................. 90 Table 8 Change in CEE state ....................................................................................... 91 Table 9 Shutdown and power cycle CPM..................................................................... 92 Table 10 Failure of I/O communications...................................................................... 95
R310.3 July/2008
xi
Contents Figures
Figures
Figure 1 Knowledge Builder Provides Online Documentation Access. ..........................2 Figure 2 Front face of all modules is clearly labeled for easy identification..................74
xii
R310.3 July/2008
Introduction
Overview
Abstract The intent of this guide is to provide concise procedures for operator tasks related to starting up an Experion system in response to one of the following general anomalies.
Power interruption Application unexpectedly quits or "crashes" Component failure and replacement
This guide also provides a suggested procedure for shutting down an Experion system. Our assumptions about readers We assume that you have experience in navigating within a Windows environment and you are somewhat familiar with the Experion applications of Control Builder and Station. If you do not have this experience, we recommend that you read the Experion Operator's Guide which is another document included in the online documentation database for the Experion system called Knowledge Builder, as shown in the following figure.
R310.3 July/2008
Introduction Overview
R310.3 July/2008
Introduction Overview
A word about security/password protection Be aware that security features can be an integration of a Windows user account and an Experion sytem operator definition. This means you have log-on and user-access security based on standard Windows tools for system administration and control configuration functions as well as the ability to define operator access levels for Station displays and Control Builder. REFERENCE
Please refer to the Network and Security Planning Guide for more information about security considerations.
If applicable, be sure to see your System Administrator to get your personal ID and password. You may need these to gain access to Station displays, if operator sign-on security is being used. Process startup supplement You may want to consider supplementing this guide with the unique startup and shutdown routines that have been developed for your process. These routines may involve initiating process actions through standard and/or custom displays in the Station application.
R310.3 July/2008
Getting Started
Starting conditions and assumptions We assume that you have completed the initial startup and the Experion system is up and running. This means a configuration is loaded in the Control Processor Module (CPM) and you can monitor operation through the Monitoring tree in Control Builder (CB) or a display in Station. For reference, Initial Start Up of C200 Controller and I/O Chassis in Appendix A includes data about initially applying power to a C200 Controller and/or an I/O chassis. You may want to review this data before restarting a Controller or I/O chassis after a hardware component failure. Reviewing Control Builder interaction considerations Keep the following considerations in mind as you interact with the Experion Control Builder application.
Only run 2 CB instances when you are connected to 2 different servers Do not perform multiple loads/delete/upload/import/export/QVCS checkin or checkout functions from CBs on the same node. Open no more than five charts in Control Builder at a time. Only activate Input/Output Modules (IOMs), if they are present in a chassis. You cannot rename standalone blocks such as a CPM, or container blocks such as a Control Module (CM) after it has been loaded. You cannot delete a loaded standalone block, container block, or I/O component block from the Project tree until it is deleted from the Loaded/Monitoring tree. While a load operation is in progress, all other CB functionality is inhibited. You can only assign IOMs, CMs, SCMs, or devices to an Execution Environment when no charts are open.
R310.3 July/2008
Multiple User Considerations The following table summarizes some operational limits relative to using Control Builder (CB) and Enterprise Model Builder (EMB) simultaneously on connected clients.
Consideration Maximum clients connected to single server Control Builder Limit 12 (for FTE systems) 4 (for ControlNet Systems) See Cautions below. Remote Access Service (RAS) support Dial-up Networking support Windows Terminal Service access Minimum continuously available Network Bandwidth required for each multiple-user CB Client. Maximum instances running simultaneously on a single workstation Not Supported Not Supported Supported 128 KB Not Supported Not Supported Supported 128 KB Enterprise Model Builder Limit 4
CAUTION
Using multiple CB clients to load to multiple controllers simultaneously actually increases the overall load time. Do not employ this technique as a way to save time in loading a controller with contents
CAUTION
Database operations (load, delete, upload, update, etc.) initiated from a CB or EMB client will affect the performance of applications that run on the backup server. Remote CB clients will also be affected by these operations. For instance, a CB client will experience reduced performance if another CB client is also connected to the same server and has requested a large database operation.
R310.3 July/2008
CAUTION
The following large database operations should only be performed by one CB at a time on nodes where more than one CB instance is running: Load Delete Upload Import/Export QVCS checkin/checkout
Remote building operations may be slower than when configuring on an ERDB server. Remote loading (to/from controller) may be slower than when loading from a computer that has a ControlNet connection. A CB client may not be upgraded to a PS Process Server or Engineering Workstation, or a CB Direct Connect Client. Modem support is limited by the NT Workstation Remote Access Server functionality. The first instance of Control Builder operating on a system object will have exclusive read/write access to the object. Additional clients will have read access only to that object. It is possible to run more than one instance of Control Builder on a single workstation node. This should only be done when each Control Builder is connected to a different server's database (ERDB) in the system.
R310.3 July/2008
Control Builder license influence on EMB usage The following table summarizes the interaction between licensed Control Builders (CB) and Enterprise Model Builder (EMB) usage.
Number of Control Builders Licensed 1 2 3 4 5 6 7 8 9 10 11 12 Maximum Number of Enterprise Model Builders Allowed 1 2 3 4 4 4 4 4 4 4 4 4
EMB capacity limits The following table lists some capacity limits for the Enterprise Model Builder application.
Function Maximum number of assets defined in a system Maximum number of assignable entities Maximum nesting depth for asset hierarchies Maximum number of children per asset 4000 1000 10 No limit (up to the 4000 total assets) Limit
R310.3 July/2008
Function Maximum number of alarm groups defined in a system Maximum number of children per alarm group Maximum nesting depth for alarm group hierarchies 5000 500 5
Limit
Terminal Services capability and configuration rules You can use terminal services connections to an Experion client host to remotely configure or monitor an Experion system. Be aware that this places additional load on the node that hosts the sessions. You should only use terminal services if you understand the resource loading issues described in the example below and observe the following configuration rules.
Only host terminal services on nodes that are normally used to host configuration tools applications (Flex Station, Console Station). Be sure the host node memory can provide 200 MB of RAM for each terminal services session that is expected to run on that node. Any one client node can host a maximum of 4 terminal services sessions. Any single node can run a maximum of 4 Control Builder sessions through terminal services. Any single node can run a maximum of 2 Enterprise Model Builder sessions . Configuration tools running directly on the hosting client reduces the number of tools that can be run through the terminal services connection. For example, if a CB session is running on the host client, then only 3 additional CB instances could be initiated through terminal services sessions.
Terminal Services example The following illustration shows a Flex Station as a terminal services server running a maximum of 4 terminal services sessions.
R310.3 July/2008
R310.3 July/2008
Terminal Services Restrictions when using multiple sessions per node When you run multiple sessions on the same terminal server node, the applications used in each session may share a common resource on the node hosting the sessions. The following table identifies some configuration operations and the potential for resource conflicts:
Application / Operation Qualification and Version Control System Potential Conflict A conflict will occur if dual check-in operations are attempted. This function is not recommended for use with Terminal Services.
There is a potential conflict if the same target location is used by two simultaneous users exporting files. Import/Export should only be performed by one terminal services user at a time. Server point building can fail if simultaneous loads are performed. Loading/Uploading should only be performed by one terminal services user at a time.
Considering input/output (I/O) behavior See Input/Output Behavior Analysis in Appendix B for an analysis of chassis I/O behavior for some operating scenarios that are unique to the Experion system's partitioned architecture. You may want to review this section to determine the possible impact a given operator action may have on chassis I/O during a startup procedure.
10
R310.3 July/2008
Introduction Conventions
Conventions
Terms and type representations The following table summarizes the terms and type representation conventions used in this Guide.
Term/Type Representation Click Meaning Click left mouse button once. (Assumes cursor is positioned on object or selection.) Click left mouse button twice in quick succession. (Assumes cursor is positioned on object or selection.) Press and hold left mouse button while dragging cursor to new screen location and then release the button. (Assumes cursor is positioned on object or selection to be moved.) Click right mouse button once. (Assumes cursor is positioned on object or selection.) Keys to be pressed are shown in angle brackets. Shows menu selection as menu name followed by menu selection Data to be keyed in at prompt or in an entry field. Example Click the Browse button.
double-click
drag
right-click
<Del> File->New
Press <F1> to view the online Help. Click File->New to start new drawing. Key in this path location >D:\setup.exe<.
>D:\setup.exe<
R310.3 July/2008
11
Introduction Conventions
12
R310.3 July/2008
System Startup/Restart
Restarting an Experion Service or Application
About Experion services For improved operating efficiency, the Experion system integrates the following functions into your computer as system services. The following list shows all possible services that may be included on your computer and many are automatically started when you reboot your computer:
The list above shows that both BOOTP Server and RSLinx services are included on the computer. The BOOTP Server supports a Fault Tolerant Ethernet supervisory network and RSLinx supports a ControlNet supervisory network. While these two networks cannot be used simultaneously on an Experion Server to communicate to C200 Controllers in a network, the services are compatiable and the RSLinx service
R310.3 July/2008
13
can run on a Server using the Fault Tolerant Etherent supervisory network, but the RSLinx service is not required. About Experion applications The Experion R210 system or greater includes the Configuration Studio, which provides a central location from which you can configure your Experion system. The individual tools required to configure parts of your system are launched from Configuration Studio. These tools include the following applications.
Control Builder Display Builder HMIWeb Display Builder Quick Builder Station
14
R310.3 July/2008
A word about Crashes We use the term "crash" to identify a computer service or application that has unexpectedly quit working. A common indication of a crash is a frozen cursor or no response from an initiated task. In most cases, you can recover from a crash by shutting down and restarting the application. If the RSLinx service crashes, be sure that the Control Data Access Server service is also stopped. Then, restart the Control Data Access Server service, which automatically restarts the RSLinx service. Using Engineering Tools control panel to start or stop services In Experion R210 system or greater, you can use the Engineering Tools services control panel as outlined below to start or stop Experion services.
Step 1 2 Action Click Start button in the task bar. Click Programs>Honeywell Experion PKS >Engineering Tools> Eng Tools Services Control Panel. On the Start_Stop_Services_Dialog, select the start or stop action you want to initiate.
3 4
Click the OK button. Depending upon which action you selected, a prompt dialog may appear asking if you want to also start or stop another service. Click the Yes or No button to acknowledge the prompt and initiate the selected action. Experion Startup and Shutdown Guide Honeywell 15
R310.3 July/2008
Step 5 6
Action You can monitor the progress of the start or stop action through the Start or Stop Services Application dialog. The action is completed when the dialog closes.
Restarting a service through Control Panel services Considerations There is some interaction between services when starting or stopping them through the Windows Control Panel. The following table lists some possible interactions for reference.
If You . . . Stop System Repository, Stop ER Server, Stop RSLinx, Stop GCL Name Server, Then . . . Control Data Access Server also stops. Control Data Access Server and System Repository also stop. Control Data Access Server and DTLR Server also stop. Control Data Access Server, System Repository, ER Server, DTLR Server and more also stop. System Repository and RSLinx also start.
The ER Server must be started before you can start the Control Data Access Server and/or System Repository. The Control Data Access Server must be shutdown before you can stop the RSLinx service through its Service Control Panel. While the following procedure shows the specific steps for restarting the Experion PKS Control Data Access Server, it can easily be adapted to apply for any other service. TIP
The easiest way to restart an Experion system after a crash or shutdown is to reboot the computer on which the crash occurred. If you cannot reboot the computer, refer to the appropriate procedure in this document to restart the given service or application. 16 Experion Startup and Shutdown Guide Honeywell R310.3 July/2008
The following procedure is provided for optional reference only; since in the Experion R210 system or greater, you can use the Eng Tools Services Control Panel to stop all services as noted in Using Engineering Tools control panel to start or stop services above.
Step 1 2 3 4 Action Click the Start button in the task bar. Click Settings->Control Panel. Double-click Administrative Tools icon. Double-click Services icon. Scroll Detail pane to locate Experion Control Data Access Server service and double-click it. Result Calls up Control Panel dialog. Calls up Administrative Tools dialog. Calls up Services dialog. Calls up properties dialog for sevice.
R310.3 July/2008
17
Step 5
Result Initiates restart and opens Service Control dialog to track progress.
6 7
After service starts, click OK button. Confirm that the status of the Experion System Repository, ER Server, DTLR Server, GCL Name Server, and the RSLinx services is Started. For system with Fault Tolerant Ethernet supervisory network, be sure BOOTP Server service is started. close button at top right Click the corner of dialog. Click File->Close. Go to the Alarm Summary display in Station. This completes the procedure.
Closes properties dialog. For each of these services that is not started, repeat Steps 4 to 6 to select and start it. Otherwise, go to Step 8.
Closes dialog.
9 10 11
You have launched the Configuration Studio and logged on with amble security level to manipulate control strategies.
Use the following procedure to attempt to restart Experion ER Replication service that fails to restart using the previous procedure.
18
R310.3 July/2008
Step 1
Action On the Configuration Explorer tab in Configuration Studio, click Control Strategy> Administer the control strategy database. Click plus sign for node icon.
Expands directory.
3 4 5
Click ERDB Active Locks icon. On Tools menu, Click Clear All Locks. Click Start button in the task bar. Click Programs>Honeywell Experion PKS >Engineering Tools> Eng Tools Services Control Panel. Select Stop SQL Only function and click the OK button. Repeat Step 7. Select Start SQL Only function and click the OK button See the previous procedure to check if ER Replication service has started.
Any current locks appear in view pane. Initiates action to clear all current locks. Calls up Start_Stop_Services_Dialog.
6 7 8
Shutdowns SQL Server services. This may take several seconds. Start SQL Server services. This may take several seconds. If ER Replication service has started, go to Step 13. If ER Replication service has not started, go to Next Step.
9 10 11
In DB Admin utility, click Admin Tasks icon. Click Disable Replication icon Click Yes button.
Opens Taskpad for ERDB administration in view pane. Prompt asks if you want to continue. Stops replication jobs and deletes configured replicationsetup.
R310.3 July/2008
19
Step 12 13
Action Wait for prompt to announce successful completion of action. Click OK button. Stop all Experion services through Eng Tools Service Control Panel. See previous procedure for access details. Click the Recover Secondary Database icon. Click the Yes button.
14 15
Prompt asks if you want to continue. Initiates function to backup the Primary database and use it to restore the Secondary database. Acknowledges prompt.
16
Wait for prompt to announce the successful completion of the action. Click the OK button. Start all Experion services through Eng Tools Service Control Panel. See previous procedure for access details. Click the Enable Replication icon.
17
18
Initiates replication of the database from the Primary to the Secondary. It sets up and starts the SQL server jobs to do the replication. Acknowledges prompt.
19
Wait for prompt to announce the successful completion of this operation. Click the OK button. Click Console->Exit to close dbadmin window and return to normal operation.
20
20
R310.3 July/2008
You have launched the Configuration Studio and logged on with amble security level to manipulate control strategies.
Use the following procedure to start up the Control Builder application after a crash.
Step 1 Action If Control Builder is still open, right-click in the task bar to open the shortcut menu and click Task Manager to call up the Windows Task Manager dialog box.
2 3
Click Control Builder in the Task list under the Applications tab. Click the End Task button. If applicable, Click End Task button in popup dialog box to stop CB. Click File->Exit Task Manager to close the Task Manager function. On the Configuration Explorer tab in Configuration Studio, click Control Strategy> Administer the control strategy database to start the DB Admin utility, which will allow you to clear any database locks that have been created. Open the folders in the tree pane of the DBADMIN window.
R310.3 July/2008
21
Step
Action
6 7 8 9
Click the ERDB Active Locks folder to display locks in the view pane. On Tools menu, click Refresh Locks to update the view. On Tools-menu, click Clear All Locks to clear all database locks. On Console menu, click Exit to close the DbAdmin function. On the Configuration Explorer tab in Configuration Studio, click Control Strategy> Configure process control strategy to start the Control Builder application. Resume operation.
10
22
R310.3 July/2008
Restarting Station Use the following procedure to start up Station after a crash.
Step 1 2 3 Action Click the Start button in the task bar. Click Programs-> Honeywell Experion PKS -> Station to start the Station application. After the connection is restored, Station returns to the display that was active when it crashed. Resume operation.
R310.3 July/2008
23
Restarting Experion Server Use the following procedure to start up the Experion Server after a crash.
Step 1 Action If the Experion Server stops running, a message in a dialog box tells you that Station has lost the connection to the host and asks if you want to try to reconnect. Click the Cancel button.
24
R310.3 July/2008
Step 3 4
Action Click the Start button in the task bar. Click Programs-> Honeywell Experion PKS -> Start-Stop Experion Server to open the Experion Server dialog box. Click the button for System Running or click the Start button. Click the Yes button to confirm the action. Wait for the Server to change state and click the close button to close the dialog box. Non-Full Mode Option
R310.3 July/2008
25
Step
Action
TIP
For redundant servers in System Running state, the server state (Primary or Backup) appears in parenthesis in the title bar of the dialog, as shown in the following illustration.
You can select whether you want the Full Mode option or the Non-Full Mode option of the Start/Stop dialog box as follows. At the left of Experion Server in the header of the dialog box, click the icon to open the shortcut menu.
Click Advanced->Full Mode to select or unselect the Full Mode option. (A check mark means the Full Mode option is currently selected.)
Click the Start button in the task bar. Click Programs->Experion PKS Server-> Station to start the Station application.
26
R310.3 July/2008
If this server is part of a redundant Server system and another Server is the primary, synchronize with the primary. From Station, click View -> System Status -> Server Redundancy to call up the Redundancy display. Click the Synchronize button to synch the server databases. Resume operation. Confirm the status for the monitored CEE and its assigned blocks in Control Builder
R310.3 July/2008
27
Restarting Console Station Use the following procedure to start a Console Station after a crash.
Step 1 Action Click the Start button in the task bar. Click Programs-> Honeywell Experion PKS -> Console Station -> Start-Stop Experion Console Station. The Start-stop dialog box displays in either Simple or Full mode. 2 Click the button for System Running or click the Start button. Click the Yes button to confirm the action. Wait for the Server to change state and click the close button to close the dialog box. Non-Full Mode Option
28
R310.3 July/2008
Step
Action
TIP
In a System Running state, the node status of the Console Station appears in parenthesis in the title bar of the dialog, as shown in the following illustration.
You can select whether you want the Full Mode option or the Non-Full Mode option of the Start/Stop dialog box as follows. At the left of Experion Server in the header of the dialog box, click the icon to open the shortcut menu.
Click Advanced->Full Mode to select or unselect the Full Mode option. (A check mark means the Full Mode option is currently selected.)
Click the Start button in the task bar. Click Programs->Experion PKS Console Station-> Station to start the Station application.
R310.3 July/2008
29
Restarting Display Builder or HMIWeb Display Builder Use the following procedure to start up the Display or HMIWeb Display Builder application after a crash.
Step 1 Action If Display or HMIWeb Display Builder is still open, right-click in the task bar to open the popup menu and click Task Manager to call up the Windows Task Manager dialog box.
2 3
Click Display or HMIWeb Display Builder in the Task list under the Applications tab. Click the End Task button. If applicable, Click the End Task button in the popup dialog box to stop Display or HMIWeb Display Builder. Click File->Exit Task Manager to close the Task Manager function. Click the Start button in the task bar. Click Programs-> Honeywell Experion PKS -> Display or HMIWeb Display Builder to start the Display or HMIWeb Display Builder application. Resume operation.
30
R310.3 July/2008
Restarting Quick Builder Use the following procedure to start up the Quick Builder application after a crash.
Step 1 Action If Quick Builder is still open, right-click in the task bar to open the popup menu, Click Task Manager to call up the Windows Task Manager dialog box.
2 3
Click Quick Builder in the Task list under the Applications tab. Click the End Task button. If applicable, Click the End Task button in the dialog box to stop Quick Builder. Click File->Exit Task Manager to close the Task Manager function. Return to Configuration Studio and restart the task you were working on when Quick Builder crashed. Resume operation.
4 5
R310.3 July/2008
31
System Startup/Restart Restarting the System after a Power Interruption or CPM Shutdown
Step 1
Action Be sure power switches on monitor and server are turned ON. Computer reboots to Windows environment. Press <Ctrl>+<Alt>+<Delete> to call up the logon dialog box. Key in your password to start the Windows session. All Experion servicess plus the MSSQLSERVER service start automatically when you reboot your computer. Click the Start button in task bar. Click Programs-> Honeywell Experion PKS Configuration Studio to open this function. Complete the Login with amble security level to manipulate control strategies. Select server and click the Connect button. On the Configuration Explorer tab in Configuration Studio, click Control Strategy> Administer the control strategy database to call up the DB Admin utility. Open the folders in the tree pane of the DBADMIN window. Click the ERDB Active Locks folder to display locks in the view pane. On Tools menu, click Refresh Locks to update the view. On Tools menu, click Clear All Locks to clear all database locks. On Console menu, cick Exit to close the DbAdmin function. If required, use the Windows Date/Time Control Panel function to set the "wall clock" time. Experion Startup and Shutdown Guide Honeywell R310.3 July/2008
2 3 4 5 6
7 8 9 10 11
32
System Startup/Restart Restarting the System after a Power Interruption or CPM Shutdown
Step 12
Action On the Configuration Explorer tab in Configuration Studio, click Control Strategy> Configure process control strategy to start the Control Builder application. Click the Start button in the task bar. Click Programs->HoneywellExperion PKS -> Server -> Station to start the Station application. Acknowledge "Lost comms with CDA Server" alarm and any other alarms as required.
13 14
15
Repeat any operation that was in progress when the power failed.
R310.3 July/2008
33
System Startup/Restart Restarting the System after a Power Interruption or CPM Shutdown
Starting up CPM after a power interruption This procedure assumes that the CPM was in RUN when the power was interrupted. ATTENTION
If the CPM is located in a Redundant Chassis Pair (RCP), a power interruption to C200 Controller chassis A with the redundancy state of Primary could initiate a switchover of control to C200 Controller Chassis B, depending on its current Secondary readiness state as shown in Table 1. While the graphics in the following procedure are specific to a nonredundant C200 CPM, they still represent the general indications for a C200 CPM in an RCP. You may also need to add a Step to manually initiate the synchronization of the Secondary after power is restored and initiate switchover to transition Secondary to Primary after a redundant CPM is restarted, if required. We assume that you are using separate power sources for the Controllers in the Redundant Chassis Pair (RCP). You must always turn OFF power to the Secondary chassis first and then the Primary chassis to avoid a switchover when powering down a RCP. In addition, when restarting an RCP, always turn ON the Primary chassis first and then the Secondary chassis to be sure the database is maintained in the Primary CPM.
34
R310.3 July/2008
System Startup/Restart Restarting the System after a Power Interruption or CPM Shutdown
R310.3 July/2008
35
System Startup/Restart Restarting the System after a Power Interruption or CPM Shutdown
Step 1
condition.
36
R310.3 July/2008
System Startup/Restart Restarting the System after a Power Interruption or CPM Shutdown
Step
Action
Data fields in CPU Loading view of CEE display in Station are darkened.
R310.3 July/2008
37
System Startup/Restart Restarting the System after a Power Interruption or CPM Shutdown
Step 3
Action Upon restoration of power, the CPM runs its diagnostics and returns to either the IDLE, NODB, or BKUP state. Confirm these conditions through Control Builder and Station displays.
CEE returns in its Idle state - CEE icon is Blue in CB Monitoring tree. Event Summary in Station may list these entries:
RCVBGN: EE recovery begin POWRON: Database Retained (Database restored through RAM Retention Start Up function) or Database NOT Retained IDLE: EE Alarming Disabled (CEE in IDLE state or NOTLDD for Not Loaded state) DIAG: Battery Not OK (CPM backup battery not connected or discharged) DIAG: Not Synchronized (redundant controllers) INFO: Primary chassis ID (redundant controllers) RCVEND: EE Recovery End
Main view in CEE detail display in Station shows CEE in IDLE and CPU
38
R310.3 July/2008
System Startup/Restart Restarting the System after a Power Interruption or CPM Shutdown
Step
Action
If the CPM did not retain its database, its front panel display will indicate NODB or BKUP if CPM is in a redundant controller. In the case of NODB, you can restore the database in the CPM using a valid database checkpoint file. From Control Builder Monitoring Tab, select the CPM to be restored. Select Controller -> Checkpoint -> Restore from Checkpoint. Select the node and checkpoint file to be restored and click the Restore button. Put CEE in RUN state through CPM function block Parameter [Monitoring] form in CB Monitoring tree or through Main view for CEE detail display in Station. This is not applicable for a CPM in a Secondary Controller in a Redundant Chassis Pair.
5 6 7
R310.3 July/2008
39
System Startup/Restart Restarting the System after a Power Interruption or CPM Shutdown
Step
Action
Resume operation.
40
R310.3 July/2008
System Startup/Restart Restarting the System after a Power Interruption or CPM Shutdown
Initiating CPM shutdown and Restarting CPM after shutdown Use the following procedure to issue a shutdown command to the CPM and then, restart the CPM. ATTENTION
If the CPM is located in a Redundant Chassis Pair (RCP), be sure the readiness state of the Secondary is "Disqualified" before you begin the following procedure; or, turn off the Secondary Controller chassis. In Control Builder Monitoring Tree, double-click the RM icon to call up RCP configuration forms, select the Summary tab, and click the Disqualify Secondary button to initiate the command. This prevents a Controller switchover in response to the CPM Shutdown command. The graphics in the following procedure are specific to a non-redundant C200 CPM. They still represent the general indications for Primary and Secondary CPMs in an RCP. Also, after restarting the redundant CPM, you may find that the Primary and Secondary are not synchonized and that transitioning from Secondary to Primary did not occur. In this case, you may need to add Steps to manually initiate the synchronization of the Secondary and initiate switchover from Secondary to Primary.
Step 1
Action Click the plus sign (+) in the tree root path to the CPM icon in the Monitoring tree to expand it. Click the plus sign (+) for the CEE folder to view its contents. Click the CEE folder to select it. Click Controller->Inactivate->Selected CEE(s), IOMs, CMs, and Applicable Function Blocks to inactivate the CEE and all assigned IOMs and CMs. Click the Yes button in the dialog box to confirm the action. Double-click the CPM icon to call up the Parameters [Monitoring] form in Control Builder Monitoring tree.
R310.3 July/2008
41
System Startup/Restart Restarting the System after a Power Interruption or CPM Shutdown
Step
Action
Click button in CPM Command field and click Shutdown selection. Click Yes button to confirm action.
42
R310.3 July/2008
System Startup/Restart Restarting the System after a Power Interruption or CPM Shutdown
Step
Action
CPM runs diagnostics and returns to Ready state. Check that LEDs on the CPM indicate RDY. If monitoring CM, the title bar will indicate diagnostic error Err7007, and icons in Monitoring tree will turn Red. Station display goes into Connection Timeout alarm. Flip toggle switch on chassis power supply to OFF and then back to ON to cycle power. CPM runs diagnostics and returns to NODB state as indicated in LEDs on the CPM. CPM icon in CB Monitoring tree turns Yellow to indicate that the CPM is in its NODB state. CEE icon turns Red to show that the database was not retained when CPM was restarted after shutdown. The shutdown action purges the database from the CPM.
In the Station, the CEE detail display shows NOT LOADED.
6 7 8
R310.3 July/2008
43
System Startup/Restart Restarting the System after a Power Interruption or CPM Shutdown
Step
Action
44
R310.3 July/2008
System Startup/Restart Restarting the System after a Power Interruption or CPM Shutdown
Step
Action
Click the CPM icon in the Monitoring tree, and restore the CPM database from snapshot, as described in the previous section, "Starting up CPM after a power interruption". Be sure to close any charts opened in CB. Click the CEE folder to select it. Click Controller->Activate->Selected CEE(s) IOMs, CMs and Applicable Function Blocks to activate the CEE and all assigned IOMs and CMs. Click the Yes button in the dialog box to confirm the action. Resume CB monitoring operation. Go to Station. Acknowledge all alarms and check journal of startup events in the Event Summary display.
10 11
12 13
R310.3 July/2008
45
System Startup/Restart Restarting the System after a Power Interruption or CPM Shutdown
Step
Action
14
46
R310.3 July/2008
PCIC card ControlNet Interface module ControlNet cable Ethernet Interface module Ethernet cable IOM module Redundancy cable Redundancy Module ATTENTION
A failed PCIC card, ControlNet Interface module, ControlNet cable, Redundancy cable, or Redundancy Module may initiate a switchover, if Primary and Secondary states are as noted in Table 1. The same is true for the removal and/or insertion under power (RIUP) of a module in the Primary chassis. The RIUP of a module in a Secondary chassis results in a Disqualified state. We recommend that you only RIUP a module in the Disqualified Secondary of an RCP.
REFERENCE - INTERNAL
Please review the Removal and Insertion Under Power (RIUP) Function Guidelines in the Control Hardware Installation Guide before you RIUP any module.
R310.3 July/2008
47
This procedure assumes that the failed component is removed and replaced.
Step 1 Action Check for these general indications of a failed component.
All icons in Monitoring tree turn Red for general communications failure or
title bar.
Communications Error alarm for given IOM failure. Condition also generates corresponding event entry in the Event Summary display.
48
R310.3 July/2008
Step
Action
their "health". 2 3 4 Once component is replaced and/or fault is repaired, confirm that CB Monitoring and Station display indications return to normal. Acknowledge alarm conditions and check Event Summary display for journal of failure and recovery events. Resume operation.
Optional If you replace a Control Processor module, use the following procedure to check the version of the installed CPM and load the personality image, if required. Normally, the factory only loads the boot code into the CPM and the CPM will go into its ALIVE state upon power up. This means you must load the personality image to the CPM before you can load or restore a configuration to the CPM. If the CPM LED display shows ALIV, go to Step 23 in the following procedure to start the personality image load. WARNING
Be sure your process is "Off Control" before you begin the following procedure.
R310.3 July/2008
49
ATTENTION
If you are updating CPMs in an RCP, we recommend you turn OFF power to one of the Controller chassis in the RCP, so you can update the firmware in the CPM in the powered Controller chassis while it is in a Primary-with-no-partner state. Once the CPM is updated in the powered chassis, turn OFF power to this chassis and turn ON power to the other Controller chassis to repeat the firmware update for the other CPM in the RCP. This avoids possible confusion caused by logical change in MAC IDs in response to a Controller switchover.
Prerequisites
You have launched the Configuration Studio and logged on with amble security level to manipulate control strategies.
Step 1 Action
On the Configuration Explorer tab in Configuration Studio, click Control
Strategy> Set options for maintaining control system firmware to open Select options for Netwrok Tools dialog.
Be sure all check boxes on the dialog are checked and click the OK button.
Strategy> Maintain control system firmware to launch the Network Tools application. 3
Click the OK button to acknowledge the information message. Click the Resume button
Is this the first time you have used the Network Tools application?
If the answer is Yes, complete Steps 5 through 12 to make the initial
5 With the Desktop icon selected, press the Settings button Settings dialog box. to call up the
50
R310.3 July/2008
Step 6
This means automatic scans are made periodically with the specified delay between scans.
Click Enable Module Version/Revision Checking to select it, if it is not
already checked. This turns ON the automatic firmware version/revision detection function. This means NetworkTools automatically detects any incompatible firmware in a given module and shows the module's firmware indication in Red instead of Green on the module's graphic representation.
Click Enable ControlNet Parameter Checking to select it, if it is not already
checked. This turns on the function for checking ControlNet parameter settings.
R310.3 July/2008
51
Step 8
Action When network nodes appear under the Desktop tree icon, click the first CNI icon to callup the settings dialog box. (Note that you only have to make these settings on the initial scan of the system.)
52
R310.3 July/2008
Step 9
Action
In the Local Chassis tab, adjust the number in the scroll box to match the
Step 11.
R310.3 July/2008
53
Step 10
Action
Click the Remote Chassis 1 tab. Click the "Check here . . . installed"
selection to select it. Adjust the numbers in the appropriate scroll box to match the following data about your remote chassis.
Number of slots in your remote chassis. MAC ID of CNI in your remote chassis. (Note that the assigned MAC ID is repeatedly shown in the LED display on the CNI module in the format A#NN. Where NN is the MAC ID. For example, a display of A#03 means the CNI MAC ID is 3.) Slot number where downlink CNI is installed in your local chassis. (This is the CNI that is cable connected to the uplink CNI in your remote chassis.)
Repeat this Step for other remote chassis by selecting the next numbered
tab, as required. 54 Experion Startup and Shutdown Guide Honeywell R310.3 July/2008
Step 11
Action When settings are complete, click OK. Look for the graphic of the chassis for given CNI to appear in the Detail pane. The graphic will also show remote chassis, if applicable.
12 13
Repeat Steps 8 to 11 for next CNI icon, as required. Click the CPM model in the graphic representation of your chassis configuration in the lower half of the window. If required, select another CNI icon to find the chassis that contains a CPM. This illustration is for example purposes only and does not represent current data.
14
If the numbers listed for the AV and BV data on the selected CPM graphic match you current release software and are colored green, the CPM is loaded with the personality image and boot code versions for your release and you can skip to Step 31. Otherwise, go to the next Step.
R310.3 July/2008
55
Step 15
Action With the CPM graphic still selected, click the flash button firmware update function. to initiate the
16
56
R310.3 July/2008
Step 17
Action Click the Yes button to issue a Stop (Shutdown) command to the CPM.
18
Wait for the CPM to reboot to its RDY state as shown in the CPM's LED display. .
R310.3 July/2008
57
Step 19
Action To load the boot image to a CPM, locate the cpmboot.pcm file in this directory location c:\Program Files\Honeywell\Experion\Engineering Tools\system\FIRMWARE\Controllers\C200CPM.
20
When cpmboot.pcm file appears in the list box, click it to select it, so it appears in the File Name entry field.
58
R310.3 July/2008
Action
Click the Open button to start the firmware load and click the Yes button to
Wait for the load to complete and the CPM to reboot to its ALIV status as
shown in the CPM's LED display. The Status field at the bottom of the Network Tools display tracks the load progress.
R310.3 July/2008
59
Step 22
Action Click the OK button to acknowledge the load completion with no errors.
23 24 25
Confirm that the LED display on the CPM shows ALIV. Wait for the CPM module to re-appear in the graphic representation of the chassis in the lower half of the Network Tools window and click it. Click the flash button to initiate the firmware update function.
60
R310.3 July/2008
Step 26
R310.3 July/2008
61
Step 27
Action To load the personality image to a CPM, locate the cee50.pcm (or cee5.pcm for pulse output) file in this directory location c:\Program Files\Honeywell\Experion\Engineering Tools\system\FIRMWARE\Controllers\C200CPM.
28
When the cee50.pcm (or cee5.pcm) file appears in the list box, click it to select it, so it appears in the File Name entry field.
62
R310.3 July/2008
Action
Click the Open button to start the firmware load and click the Yes button to
Wait for the load to complete and the CPM to reboot to its NODB status as
shown in the CPM's LED display. The Status field in the lower right-hand corner of the Network Tools window tracks the load progress.
R310.3 July/2008
63
Step 30
Action Click the OK button to acknowledge the load completion with no errors.
31 32
Repeat Steps 13 to 30 for other CPMs in your network, as required. Be sure to update the partner CPM in an RCP system configuration. Click NetworkTools->Exit to close the application.
Loading SIM personality image - Optional If you replace a Serial Interface module, use the previous procedure for Loading CPM personality image to load the SIM personality image. In this case, use the simboot.pcm and simrex.pcm files (located in the c:\Program Files\Honeywell\Experion\Engineering Tools\system\FIRMWARE\IOM\Serial directory) as the boot and personality image files, respectively. Loading IOLIM personality image - Optional If you replace an I/O Link Interface module, use the previous procedure for Loading CPM personality image to load the IOLIM personality image. In this case, use the iolimboot.nvs and iolimapp.nvs files as the boot and personality image files, respectively.
64
R310.3 July/2008
You have launched the Configuration Studio and logged on with amble security level to manipulate control strategies.
Use the following procedure to reset the channel on a diagnostic digital output module model TC-ODX081 or TC-ODX161 that detected a short or thermal overload fault condition. This procedure assumes that the condition that caused the fault has been corrected.
Step 1 Action On the Configuration Explorer tab in Configuration Studio, click Control Strategy> Maintain I/O modules to launch the tool.
R310.3 July/2008
65
Step 2 3
Action In the Navigator tab, open the drop-down selection box in the Select Driver field and select the applicable supervisory network driver. Key in the MAC ID and SLOT number for the diagnostic output module in the local chassis with a faulty channel output in the corresponding entry fields. If output module is located in a remote chassis, click the checkbox for In Remote Rack and key in appropriate MAC ID and SLOT number in corresponding Remote Rack entry fields. Click the Get Module Data button. Confirm the data in the Device Information entry fields. Click the Utilities tab to select it. Note that this tab is only active when you navigate to a diagnostic output module. Click the checkbox or boxes for channel or channels in a fault condition.
4 5 6
WARNING
If you reset a channel that is not in a fault condition, the channel's output may transition to the unpowered (OFF) state. 7 8 9 Click the Reset Command button. Click the Yes button to acknowledge the warning prompt and send the reset command to clear the fault condition. Click File->Exit to close the application. Check the appropriate Detail display in Station, IOCHANNEL Function Block in Control Builder, or the status LED on the front of the diagnostic output module to confirm that the detected fault condition has been reset.
66
R310.3 July/2008
Restarting a failed Primary Server in a redundant Server system Use the following procedure to restart a failed Primary Server (SERVERA) node in a redundant Server system. This procedure assumes that the Primary Server has been shut down.
Step 1 2 3 4 5 6 7 Action Turn ON power to the Primary Server (SERVERA) node, complete the Windows logon, and wait for SERVERA to return to its fully operational state. Click the Start button in the taskbar. Click Programs->Experion Server>Station to launch the Station application. In Station, click View->System Status->Server Redundancy to call up the redundant Server display. Click the Synchronize button to initiate synchronization with the Secondary Server (SERVERB) node. When SERVERA and SERVERB are synchronized, click the Manual Failover button to switch to SERVERA as the Primary. If Control Builder isn't running, click Start->Programs->Experion Engineering Tools->Control Builder to launch the application and logon as applicable. Click the Monitoring tab, check that the components in the Root directory Monitoring tree view reflect the newly restored Experion SERVERA Engineering Repository Database (ERDB). Resume operation.
R310.3 July/2008
67
68
R310.3 July/2008
R310.3 July/2008
69
70
R310.3 July/2008
System Shutdown
Initiating Normal System Shutdown
Shutting down a Experion System The following procedure outlines the steps for shutting down an Experion system under normal conditions. In most cases, shutting down the system using the Start key and Shut Down menu item will cause an orderly shut down of Experion services as part of shutting down your computer. The following steps detail how to stop Experion applications and services prior to shutting down your entire computer. WARNING
Be sure all process components are in their Idle or Safe state before initiating a system shutdown. Step 1 2 3 4 5 Close all open charts in CB. Click File -> Exit in the Control Builder main menu to exit CB. Click Station->Exit in Station application window. Click OK to acknowledge the confirmation prompt and exit Station. Click the Start button in the task bar. Select Programs-> HoneywellExperion Server-> Start-Stop Experion Server and click to open the server dialog box. Click the radio button for Database Unloaded or the Stop button, as applicable. Click the Yes button to acknowledge the confirmation prompt. Wait for the server to change state and minimize the dialog box. Click the Start button in task bar. Select Honeywell Experion->Engineering Tools->Eng Tools Services Control Panel. Select Stop All including SQL and click the OK button. Wait for the Stop services action to complete Action
6 7 8
R310.3 July/2008
71
Step 9
Action
Click Start button-Programs->Rockwell Software->RSLinx->RSLinx
stopped before you can stop RSLinx through its control panel.)
Wait for message RSLinx Service is not running to appear. Click the close
button 10
Close any other open applications as required. Click the Start button in the task bar. Click Shutdown, select Shutdown computer, and click the Yes button in Shut Down Windows dialog box to shutdown the computer. If you have a redundant server, close all open applications and shutdown the computer as described in Step 10. Turn OFF power to Experion Server(s). You must always turn OFF power to the Secondary chassis first and then the Primary chassis to avoid a switchover when powering down a RCP. In addition, when restarting an RCP, always turn ON the Primary chassis first and then the Secondary chassis to be sure the database is maintained in the Primary CPM.
11
12
Open the cover on the C200 Controller power supply and flip the power switch to its OFF position.
72
R310.3 July/2008
Appendix A
Initial Start Up of C200 Controller and I/O Chassis
Hardware installation and wiring assumptions We assume that you have installed and wired your C200 Controller and remote I/O chassis in accordance with instructions in the Control Hardware Installation Guide and applicable I/O component Implementation Guide in Knowledge Builder as well as local codes and ordinances. CAUTION
Before you apply power to your Controller and/or I/O Chassis for the first time, verify that the wiring is 100 percent correct. If you have any doubt, do not apply power until an electrician verifies that wiring is correct.
Powering up for the first time You only have to open the door on the Controller and/or I/O Chassis power supply and flip its toggle switch to the ON position to power up the C200 Controller and/or I/O Chassis. Table 2 summarizes what LED indications to look for after powering up. ATTENTION
Since the front face of all plug-in modules is clearly labeled, you may want to take a few minutes to confirm which modules are installed in your given C200 Controller and/or I/O Chassis for reference.
R310.3 July/2008
73
CONTROL PROCESSOR
ANALOG INPUT
N O D B C200
BAT OK
CAL
OK 4-20ma/10v6pt
Figure 2 Front face of all modules is clearly labeled for easy identification.
74
R310.3 July/2008
Indications/Descriptions
Chassis Pair (RCP) configuration) BAT LED lights. OK LED lights. Redundancy Module (RM) Four-character alphanumeric display shows:
PRIM (Identifies the Controller chassis as the Primary one in
an RCP configuration. This means the chassis is implementing the assigned system control functions. )
SYNC (Identifies the Controller chassis as the synchronized
Secondary one in an RCP configuration. This means the chassis can assume the control functions for the Primary chassis if a switchover occurs. )
DISQ (Identifies the Controller chassis as the disqualified
Secondary one in an RCP configuration. This means the chassis is not ready to assume the control functions for the Primary chassis if a switchover occurs.
STBY (This function is not supported at this time.) Alternately displays current RM state using the same
abbrevations listed in the next row for the ControlNet Interface Module. For example, a primary RM may alternately display PwNS, PwDS, PwQg, or PwQS depending on the current state of the secondary RM. Likewise, the secondary RM may alternately display DSNP, DSwP, Qfng, or QS depending on its current state as well as percent complete indication of synchronization progress. PRI LED:
Steady Green (Redundancy state is Primary)
R310.3 July/2008
75
Module
Indications/Descriptions
Off (Redundancy state is Secondary or Failed)
COM LED:
Flashing Green (The redundancy communication link is not
secondary chassis.)
PwQg (CNI is in primary chassis with a qualifying secondary
chassis.)
PwQS (CNI is in primary chassis with a qualified secondary
chassis.)
PwNS (CNI is in primary chassis with no secondary chassis.) QUAL (CNI in primary chassis is qualified with its partner in
76
R310.3 July/2008
Module
Indications/Descriptions
Qfng (CNI is in qualifying secondary chassis.) QS (CNI is in qualified secondary chassis.) DSNP (CNI is in disqualified secondary chassis with no
partner.)
DSwP (CNI is in disqualified secondary chassis with partner.)
OK LED lights. Channel A Green LED lights. Channel B Red LED flashes for single channel (A only) application, OR Channel B Green LED lights for dual channel (A and B) application. I/O Modules (IOM) OK LED flashes Green on Analog models, OR OK flashes Green in an alphanumeric display on Digital models. Serial Interface Module (SIM) Four-character alphanumeric display alternately flashes:
OK A ok B ok
OK LED lights Green A channel LED lights Green B channel LED lights Green
R310.3 July/2008
77
Interpreting other hardware LED indications The following table lists some other possible LED indications that you may encounter at one time or another with a possible cause for a given indication.
If. . . the power LED on the power supply does not light and no module LEDs are lit. the alphanumeric display on the ControlNet Interface module alternately flashes:
NET ERR A#XX Experion server is OFF. ControlNet
Then, cause could be. . . power source is OFF or faulty power wiring.
Other indications that might appear in conjunction with ERR indication include:
SW MAC ID setting changed after
powerup; or, in RCP, MAC ID of CNI in secondary chassis is not the same as its partner in the primary chassis.
CNFG ADDR RACK DUPL ControlNet configuration error. MAC ID of 1 used for two nodes or
or rack/slot address.
There is another node in the network
NODE
CNIC BPIC BPRX BPA#
78
R310.3 July/2008
If. . .
BW
>MAX
STOP
initialization.
Flash loading of firmware update is in
UPDT the A, B, and OK LEDs on the ControlNet Interface module are alternately flashing Red /OFF. the alphanumeric display on the CPM shows:
RDY
through CB. Cycle power to reboot CPM to NODB state. Or, use Network Tools to initiate boot code load.
ALIV personality image has not been
the BAT LED on the CPM is not lit. the alphanumeric display on the RM shows:
????
either a primary or secondary state or a fault mode within a minute or so after powerup.
THXX a test has failed or hung. Cycle power
R310.3 July/2008
79
If. . .
EXXX
BOOT
instructions. the OK LED and OK display on I/O modules cycle power to reboot all modules. If turn Red. indications persist, call our Technical Assistance Center. the alphanumeric display on the SIM shows:
RDY SIM shutdown was commanded
through NetworkTools. Cycle power to reboot SIM to OK state. Or, use NetworkTools to initiate boot code load.
ALIV personality image has not been
FTA.
channel can not communicate with
FTA.
FTA -A is reporting a soft failure. FTA -B is reporting a soft failure. Normally transient display means that
channel is being configured. Permanent display means bad configuration. 80 Experion Startup and Shutdown Guide Honeywell R310.3 July/2008
control.
no active I/O connection.
R310.3 July/2008
81
82
R310.3 July/2008
Appendix B
Input/Output Behavior Analysis
Introduction The performance of a control system depends, in large part, on how well its Input/Output (I/O) system responds under various operating conditions. The Experion system is designed to provide reliable I/O behavior while offering the ultimate flexibility in process control design and operation. This section provides an analysis of chassis I/O behavior for some operating scenarios that are unique to Experion's partitioned architecture. Operating scenarios and I/O behavior The following Tables summarize the analysis of chassis I/O behavior for a given general operation. Each Table identifies the Function Block (FB) of interest, the Configuration characteristics, the operating scenario, and the chassis I/O behavior. We assume that you are familiar with the Experion Control Builder application.
Release 100 Experion PKS Control Builder and C200 Startup and Shutdown Guide 1/03
83
I/O Behavior
Holds last value
(50%).
(50%).
turns OFF initialization Manual Mode for PID block. Digital Output Module
Inactivate DOM FB. Digital Input Channel (DIC) is Activate DOM FB. connected to the Digital Output Channel (DOC) that is associated with the Digital Output Module (DOM) FB. DOC status output is ON.
Changes in response
to new SP.
Holds last value (ON). Holds last value (ON).
Device Control FB pulsed output is connected to DOC ONPULSE input associated with DOM FB.
84
R310.3 July/2008
I/O Behavior
Holds last value
(50%).
Loaded Tab. Acknowledge Warning about AOC connection. it to the Control Processor and then activate the AOM.
(50%). Green LED on Module is blinking (in Idle). value (50%) with no "bump" in output.
Inactivate DOM FB. Holds last value (ON). Digital Input Channel (DIC) is Delete DOM FB from Holds last value (ON). connected to the Loaded Tab. Green LED on Module Digital Output Acknowledge Warning is blinking (in Idle). Channel (DOC) that about DOC connection. is associated with Maintains previous the Digital Output value (ON) with no With DOM inactive, reload Module (DOM) FB. "bump" in output. it to the Control Processor DOC status output and then activate the is ON. DOM.
R310.3 July/2008
85
I/O Behavior
Holds last value
(CM) containing AOC FB. This turns ON initialization Manual Mode for PID block.
While CM is inactive,
(60%).
(60%).
Changes in response
OFF initialization Manual Mode for PID block. Digital Output Channel
Inactivate CM containing Digital Input DOC FB. Channel (DIC) is connected to the Activate CM. Digital Output Channel (DOC) that is associated with the Digital Output Module (DOM) FB. DOC status output is ON.
to new SP.
Holds last value (ON). Holds last value (ON).
86
R310.3 July/2008
FB of Interest
Configuration Characteristics
Operating Scenario
I/O Behavior
Device Control FB Inactivate CM containing DOC FB. pulsed output is connected to the If DOC status DOC ONPULSE output is ON. input tha is associated with the DOM FB. If DOC status output is OFF.
Activate CM after DOC
Remains ON for
generated.
ON PULSE is
generated.
R310.3 July/2008
87
I/O Behavior
Holds last value (50%) Holds last value (50%)
AOC FB.
Call up CM in Project Tab
Maintains previous
AOC FB. Connect it to PID FB and establish AOM FB association as before. With CM inactive, reload it to the Control Processor and then activate the CM. Digital Output Channel
Inactivate CM containing Digital Input DOC FB. Channel (DIC) is connected to the Call up CM in Project Tab Digital Output and delete DOC FB. Channel (DOC) that Acknowledge Warning is associated with about uncontrolled output. the Digital Output Module (DOM) FB. With CM inactive, reload it DOC status output and then activate the CM. is ON. From Project Tab, rebuild DOC FB. Connect it to DIC FB and establish DOM FB association as before. With CM inactive, reload it and then activate the CM.
Returns to previous
value (50%) and changes if PID output differs from SP to bring output equal to SP
Holds last value (ON) Holds last value (ON)
Maintains previous
Returns to previous
value (ON)
88
R310.3 July/2008
Configuration Characteristics PID FB output is connected to the Analog Output Channel (AOC) FB that is associated with the Analog Output Module (AOM) FB. Output value equals 50%.
Operating Scenario
Inactivate CM containing
I/O Behavior
Holds last value
AOC FB.
Call up CM in Project Tab
(50%).
Maintains previous
and delete wire between AOC FB and PID FB. With CM inactive, reload it and then activate the CM.
From Project Tab, rewire
Returns to previous
AOC FB to PID FB as before. With CM inactive, reload it and then activate the CM. Digital Output Module
value (50%) and changes if PID output differs from SP to bring output equal to SP
Inactivate CM containing Holds last value (ON) Digital Input DOC FB. Channel (DIC) is Maintains previous connected to Digital Call up CM in Project Tab value (ON) with no Output Channel and delete wire between "bump" in output (DOC) associated DOC FB and DIC FB. with Digital Output With CM inactive, reload it Module (DOM) FB. and then activate the CM. DOC status output is ON. From Project Tab, rewire Returns to previously DOC FB to DIC FB as held value (ON) before. With CM inactive, reload it and then activate the CM.
R310.3 July/2008
89
Table 7 Delete and reload CM function block containing analog and digital output channels
FB of Interest Analog Output Channel and Digital Output Channel Configuration Characteristics PID FB output is connected to the Analog Output Channel (AOC) FB that is associated with the Analog Output Module (AOM) FB. Output value equals 70%. Digital Input Channel (DIC) is connected to the Digital Output Channel (DOC) that is associated with the Digital Output Module (DOM) FB. DOC status output is ON. Operating Scenario
Inactivate CM containing
I/O Behavior
Analog output goes to
AOC and DOC FBs. Then, delete CM from Control Processor. Acknowledge Warning about all CM connections being broken.
Reload CM to the Control
Analog output
changes if PID output differs from SP to bring output equal to SP and status output returns to ON.
90
R310.3 July/2008
(70%).
Holds last value
(70%).
Changes in response
Run state.
With CEE in its Run state, Holds last value (ON). Digital Input change state to Idle. Channel (DIC) is connected to the Change CEE back to its Returns to held value Digital Output Run state. (ON). Channel (DOC) that is associated with the Digital Output Module (DOM) FB. DOC status output is ON.
Device Control FB pulsed output is connected to the DOC ONPULSE input that is associated with DOM FB.
Remains ON for
Remains OFF.
Run state after DOC Remains OFF. status output goes OFF at end of Pulse Width time.
Change CEE back to its Goes OFF.
Run state while DOC status output is still ON during Pulse Width.
R310.3 July/2008
91
I/O Behavior
Channel 0 holds last
Database should be recovered through RAM Retention StartUp function. Once CEE state returns to Run, Channels 0 and 1 outputs should back initialize.
92
R310.3 July/2008
Configuration Characteristics
Operating Scenario
I/O Behavior
With all CMs loaded and Channel 0 holds last Digital Input controlling, remove power value (ON) Channel (DIC) 0 is from CPM. Channel 1 goes to connected to Digital OFF Output Channel Channel 2 goes ON (DOC) 0 associated with Digital Output Channel 0 returns to Module (DOM) FB Restore power to CPM. Database should be initialized output value channel 0. A recovered through RAM (ON) standalone DOC 1 Retention StartUp Channel 1 returns to is associated with function. Once CEE state initialized output value DOM Channel 1. returns to Run, Channels (OFF) Both DOC 0 and 0 and 1 outputs should Channel 2 remains DOC 1 status back initialize. ON outputs are ON
Shed mode configuration for DOM Channel 0 is for hold last state, Channel 1 is for Shed Value of OFF, and Channel 2 (no IOC associated) is for Shed Value of ON.
R310.3 July/2008
93
Configuration Characteristics Same as for previous AOC and DOC in this Table.
Operating Scenario
From Monitoring Tab,
I/O Behavior
Go to Fail state
issue commands through CPM FB to put CEE in Idle state and shutdown the CPM. CPM LED display shows "RDY" state and CPM is not accessible from Control Builder or Server.
Either load a new version
Return to initialized of CPM personality values image, or cycle power to See previous AOC CPM and restart current and DOC behavior in personality image. This this Table. purges the previous Both track current database. Reload the control values, if database from the server. necessary Activate the CEE and all CMs and IOMs. This should restore normal control. Hold last values
issue command through CPM FB to put CEE in Idle state. Reload the CM FB only. This purges database from CPM and losses connections to all IOMs.
Reload remaining control Return to initialized
strategy (CEE, CMs, and IOMs) from the server. Activate the CEE and all CMs and IOMs. This should restore normal control.
94
R310.3 July/2008
I/O Behavior
Go to Fail state
disconnect the I/O ControlNet cable from the downlink ControlNet Bridge. This causes loss of communication to all remote I/O modules.
Reconnect the I/O
Return to initialized
IOMs inactive, disconnect the I/O ControlNet cable from the downlink ControlNet Bridge. This causes loss of communication to all remote I/O modules.
Reconnect the I/O
Run state, return to initialized values and track current control values, if necessary
R310.3 July/2008
95
Honeywell International Process Solutions 2500 West Union Hills Phoenix, AZ 85027