Product Specification
03363 (Rev. B)
MicroNet TMR® Control System
Applications
• Applicable for
The MicroNet TMR® (triple
modular redundant) controller is IEC61508 SIL-3
a state-of-the-art digital control applications
platform designed to reliably
control and protect steam • Superior reliability
turbines, gas turbines, and and availability
compressor trains used in
system-critical applications • Unmatched
where the chance of a safety diagnostics
issues or large economic losses
may be possible. The MicroNet • Deterministic scan
TMR’s 2-out-of-3 voting rate using
architecture ensures that correct synchronized I/O
decisions are made, correct responses are performed, and the prime mover
continues to safely operate with or without any single-point failure. This controller’s • On-line repairable
robustness, accuracy, and availability make it the choice of turbine and compressor
OEMs and operators. • On-line software
changes
The MicroNet TMR’s superior architecture and diagnostic coverage combine to
create a system with 99.999% availability and reliability. The MicroNet TMR can be • No single points of
applied as a component of protection and safety systems to allow the overall system failure
to meet IEC61508 SIL-3 compliance standards. IEC61508 calculations and
application assistance are available upon request. • High density I/O
Typical MicroNet TMR application experience and use: modules
• Refrigeration Compressors (Ethylene, Propylene)
• IEC61131
• Methane and Syn Gas Compressors
• Gas Cracker Compressors programming tools
• Charge Gas Compressors • OEM qualified
• Hydrogen Recycle Compressors
algorithms
• Critical Turbine Generator Sets
• Turbine Safety Systems • Interfaces to all
major DCS
Description systems
The MicroNet TMR control platform utilizes a robust rack-mounted chassis with on- • Engineering,
line replaceable I/O modules and triple modular architecture to achieve its 99.999% installation, and
availability. This triple modular redundant based system consists of three isolated
kernel sections (A, B, C) housed within the platform’s compact chassis. Each kernel
training services
section includes its own CPU, CPU power supply, and up to four I/O modules. The
I/O modules can be used for simplex I/O, redundant I/O, triple redundant I/O, or any
redundancy combination. I/O expandability is performed via additional system
chassis or through distributed I/O.
This platform’s high-density modules and integrated application program provide
first-out indication for monitored system events to reduce troubleshooting time.
These purpose-built modules time-stamp discrete events within 1 millisecond and
analog events within 5 milliseconds. The MicroNet TMR uses two power supplies,
each of which powers the control from a separate power source. Inside each power
supply are three independent power converters, one for each CPU and I/O section.
This triplicate power architecture provides maximum protection against single or
multi-point hardware failures.
Woodward 03363 p.2
The control’s special TMR Discrete I/O modules are All output values are then exchanged between kernels,
designed for use in critical discrete circuits. This module the results are voted, and the appropriate value is output.
accepts discrete inputs and distributes these inputs to
each of the separate kernel sections, as well as output Programming
relay-based contacts to drive discrete application logic.
The module’s special TMR outputs utilize a six-relay The MicroNet TMR control system provides an
configuration and integrated latent fault detection logic to IEC1131-3 environment for programming. Application
allow the failure of any one or in some cases two relays code is generated by use of Woodward’s GAP™
without affecting the integrity of the output contact. This Graphical Application Programming environment or
type of architecture allows routine relay testing to be Woodward’s Ladder Logic programming environment.
performed as well as on-line reparability, without • Function Block Programming — through Woodward
affecting the integrity of the output or system. GAP
Designed as a turbine control system, the MicroNet TMR • Sequential Function Chart Programming — through
controller’s actuator driver modules are designed to Woodward GAP
interface with proportional or integrating turbine valve • Ladder Logic Programming — through Woodward
servos using single or dual redundant coils, with AC or Ladder Logic Programmer
DC feedback position sensors. The MicroNet TMR The MicroNet TMR operating system, together with
control can accommodate any combination of Woodward GAP, produces a very powerful control environment
standard MicroNet I/O modules to provide maximum designed for control and protection of turbines and
application flexibility. compressors. Woodward’s unique scan rate structure
Available Inputs and Outputs include: ensures that control functions will execute
• Magnetic pickups (MPUs) and proximity probes deterministically at defined scan rates, with critical
• Discrete I/O control loops able to be processed within 5 milliseconds.
• Analog I/O Accurate speed and speed acceleration and
• Thermocouple inputs deceleration rates are sensed using a sampling rate of
• Resistance temperature devices (RTDs) 100 microseconds. These ultra-fast sampling and
response rates allow the controller to adequately
• Proportional and integrating actuator drivers
respond to system transients, failures, or safety events.
(integrated AC and DC position inputs)
• Ethernet and Serial communications
Communications
Fault Tolerance The MicroNet TMR platform’s open-architecture allows
users to easily interface with plant DCSs, HMIs, and
Each of the MicroNet TMR controller’s kernel sections
distributed I/O devices for system operation, as well as
individually monitors all input data, performs all
control programming and service. Multiple
application calculations, and generates all output values
communication ports and protocols are available for
and responses. This control’s architecture allows it to
system communications, allowing users to select their
operate with any single point of failure, without shutting
desired communication method and level of
down. Architected for reliability and safety, the system’s
communication redundancy. MicroNet-to-DCS
CPU fault tolerance logic of 3-2-0 allows the control to
communications have been performed and qualified with
function normally with any CPU module failed or
all major DCS vendors. The following communication
removed, and ensures a safe shutdown with multiple
ports are available for use:
CPU failures. An analog I/O fault tolerance logic of 3-2-
• Ethernet ports (10/100 BaseT)
1-0 allows the control to function normally with any one
or two analog modules failed or removed. A discrete I/O • RS-232/-422/-485 Serial ports
fault tolerance logic of 3-2-1-0 allows the control to • LON network for LinkNet® Distributed I/O Modules
function normally with any one or two discrete modules Protocols Supported:
failed or removed. A power supply fault tolerance logic of • Modbus® * (Serial or Ethernet)
2-1-0 allows the control to function normally with any one • Ethernet TCP/IP & UDP
power supply failed or removed. • OPC (OLE for Process Control)
Each kernel CPU module runs the identical software • Printer Drivers, Modems, Data Loggers
program, in “lock-step” with the other two CPUs. All *—Modbus is a trademark of Schneider Automation Inc.
inputs from each kernel are distributed to the other two Woodward also offers a suite of software service-tools to
kernels. For each sensed input, each CPU compares its simplify system troubleshooting and service. These tools
read value with the value the other two CPUs read provide high-speed (5 milliseconds) operational and
before outputting a signal to the application software. All analytical information such as graphical display of operating
CPUs use the same voted input signals in the same data, historical trending, event logging, X-Y plotting, system
application calculations to generate the same outputs. overviews, calibration pages, and other functions.
Woodward 03363 p.3
Expandability
The MicroNet TMR platform is expandable into additional expansion chassis as required by the system size, and will
support any mix of I/O, including networked and/or distributed I/O. Redundant “Real-Time Ethernet” networks are
utilized between main and expansion chassis to ensure a fast and reliable communications. Expansion chassis are
available in 6-, 8-, 12-, or 14-slot models. This TMR architecture allows all remote I/O points to be automatically
shared with each kernel CPU, increasing system robustness and availability.
Typical MicroNet TMR® System Architecture
Specifications
Operating Conditions
Temperature
0 to 55 °C (32 to 131 °F) ambient air temperature range
Shock
US MIL-STD-810C, method 516.2-1, procedure 1B
Vibration
Lloyd’s ENV2 test #1
Emissions *
EN61000-6-4
Immunity *
EN61000-6-2
Certifications *
CE, UL/cUL (Class I, Division 2), LR for ENV1 & ENV2, ABS, GOST-R
MicroNet TMR Chassis —18 slot chassis
Bulkhead mounted or adaptable to 19” (483 mm) rack mount back panel.
Control Chassis Dimensions
18.8” wide x 14.3” high x 12.1” deep (478 mm wide x 363 mm high x 307 mm deep)
Control Chassis Weight
55 lb (25 kg)
Power Chassis Dimensions
6.4” wide x 14.3” high x 12.1” deep (163 mm wide x 363 mm high x 307 mm deep)
Power Chassis Weight
16 lb (7 kg)
Power Supply Input Options
18–36 Vdc, 100–150 Vdc, 88–132 Vac (47–63 Hz), 180–264 Vac (47–63 Hz)
*—Specifications apply to most components and modules. Some certifications may be pending. Contact Woodward for further information. Do not
use the drawings in this specification for construction.
Woodward 03363 p.4
MicroNet TMR® Power Supply Chassis (Do not use for construction)
MicroNet TMR Control Chassis (Do not use for construction)
For more information contact:
PO Box 1519, Fort Collins CO, USA 80522-1519
1000 East Drake Road, Fort Collins CO 80525
Tel.: +1 (970) 482-5811 Fax: +1 (970) 498-3058
www.woodward.com
Distributors & Service
Woodward has an international network of distributors and service facilities.
For your nearest representative, call the Fort Collins plant or see the
Worldwide Directory on our website.
This document is distributed for informational purposes only. It is not to be construed as
creating or becoming part of any Woodward Governor Company contractual or warranty
obligation unless expressly stated in a written sales contract.
© Woodward 2008, All Rights Reserved 2009/1/Fort Collins
