Triconex: Product Alert Notice #25-Potential Safety Issue
Triconex: Product Alert Notice #25-Potential Safety Issue
::I S·
Triconex®
Product Alert Notice #25-Potential Safety Issue
Invensys has reviewed the issue described in this Product Alert Notice and determined that,
if no action is taken to resolve the issues described in this notice, there is a potential risk of
harm to people, property, and/or the environment. Third-party integrators and distributors
of Triconex® systems need to notify their end-user customers of this issue. All end-users
should immediately review and analyze the impact of this issue to their applications. If this
issue is found to be applicable, remedial actions should be taken to ensure the continued
safe operation of affected systems.
Affected Products
The following modules used in TriconTM system versions 10.2.0-10.2.5, 10.3.0-10.3.3,
10.4.0-10.4.3, and 10.5.0-10.5.2 are affected:
Problem Description
When pOints 1, 2, 17, and 18 on an affected module are ALL commanded OFF, one or both
of the following issues may occur:
1. In the presence of specific output voter faults, a point on an affected module may
transition to the opposite of the commanded state for as long as 227 milliseconds.
This issue has not been reported in the field.
2. When a Tricon controller is operated with a hot-spare Model 3625/A/N module
installed, multiple output points on the affected modules may simultaneously
transition to the opposite of the commanded state. The duration of the output
transitions can last as long as 227 milliseconds .
Affected modules with all points commanded OFF are immune to these transitions.
This issue has been reported in the field only on affected modules where a hot-spare
module is also installed in the slot, AND pOints 1, 2, 17, and 18 are all commanded
OFF.
Invensys Global Customer Support (GCS) Center +1-866-746-6477 (toli-free, US & Canada)
http://support.ips. in vensys.com +1 - 508- 549 -2424 (worldwide)
Background
Investigation of the problem discovered an initialization error in the output register
circuitry. The output register is periodically reset by the watchdog timeout diagnostic
routine.
When an output register watchdog reset occurs, the register may not be immediately
re-initialized to the correct commanded values. When a watchdog timeout diagnostic
routine runs on a second channel before the first channel has completely recovered from its
watchdog diagnostic routine, then spurious output transitions are possible.
2. When replacing an affected module, ensure that the module being replaced is
removed within 4 minutes after the system has made the replacement module
active.
Note: If you require probability of failure on demand (PFD) and spurious mean time to
failure (MTTF spurious) calculations to assess the impact of this issue, please contact the
Global Customer Support Center for assistance.
If you have any questions regarding this Product Alert Notice, please contact the Global
Customer Support Center, or your local Invensys office.
Product Alert Notice 25 October 12, 2011 Part No. 9791010-025 , Rev . 2
3 of 3
Location Americas GCS Asia Pacific GCS EURA GCS MENA GCS
Foxboro, MA, Singapore Baarn, Netherlands Cairo, Egypt
United States
Contact + 1-866-746-6477
Information dliom .egcaimenagcs
International: +65-6829-8899 +31-3554-84125
@invensys.com
+ 1-508-549-2424
i
Section Description
Affected Changed to indicate that only the following Tricon versions are affected: 10 .2.0-
Products 10 .2.5,10.3 .0-10.3.3,10.4.0-10.4.3, and 10 .5.0-10 .5.2.
Operational
Restrictions and • Added that the problem has been fixed in Tricon versions 10.2.6, 10 .3.4, 10.4.4, and
10.5.3.
Recommended
Added table listing firmware meta number for fixed modules .
Actions
© 2011 by Invensys Systems, Inc. All rights reserved. Invensys, the Invensys logo, Triconex, and Tricon are trademarks of Invensys pic, its
subsidiaries and affiliates. All other brands may be trademarks of their respective owners.