Description
Honeywell FC‑QPP‑0002 Quad Processor Pack Module
Title
Honeywell FC‑QPP‑0002 Updated Quad‑Redundant Safety CPU for Safety Manager / FSC SIS System
Meta‑Description
Honeywell FC‑QPP‑0002 is upgraded quad‑redundant 1oo4 safety processor pack for Honeywell Safety Manager SIS, enhanced hardware revision of FC‑QPP‑0001, supports hot‑standby dual‑CPU redundancy, TÜV‑certified SIL3 IEC61508, installs in FS‑CPCHAS‑0001 controller chassis for petrochemical ESD and safety interlock applications.

FC‑QPP‑0002
Product Core Overview
FC‑QPP‑0002 is the upgraded successor CPU module for FC‑QPP‑0001 within Honeywell Safety Manager / FSC SIS platform. It retains the proven 1oo4 quad‑processor voting safety architecture, with component‑level hardware upgrades for improved temperature tolerance, component obsolescence mitigation and better long‑term reliability.
Supports dual‑CPU hot‑standby redundant configuration (A/B processor pair). Active processor executes safety application logic; standby processor maintains full data synchronization and can perform bumpless take‑over upon primary CPU failure. Interfaces with chassis safety bus to communicate with I/O chassis (FC‑IOCHAS‑0001S / 0001R) and all I/O modules. Must work with FC‑BKM‑0001 battery‑key‑switch module for SRAM volatile‑data backup and hardware‑enforced RUN/PROGRAM/FORCE key‑lock access control.
Front‑panel multi‑LED array displays run status, program mode, fault diagnostics and health information. This processor only fits into FS‑CPCHAS‑0001 controller chassis, cannot be mounted inside I/O chassis. Widely used for SIL3 ESD, emergency shutdown and safety interlock loops in oil‑gas and chemical plants.
Note: Pin‑to‑pin backward‑compatible replacement for older FC‑QPP‑0001; direct swap‑in without chassis modification. FC‑BKM‑001 is mandatory separate accessory.
Main Technical Specifications
| Item | Parameter |
|---|---|
| Part Number | FC‑QPP‑0002 |
| Module Type | Upgraded Quad‑Redundant Safety Processor Pack (CPU) |
| Compatible System | Honeywell Safety Manager / FSC SIS |
| Internal Architecture | 1oo4 quad‑processor cross‑voting |
| Redundancy Mode | Dual‑CPU hot‑standby A/B redundant pair supported |
| Memory | Battery‑backed SRAM (FC‑BKM‑001), non‑volatile Flash memory |
| Communication | Internal safety‑bus to I/O chassis; engineering port for Safety‑Builder |
| Safety Certification | TÜV SIL3, IEC 61508 / IEC 61511, CE, UL/cULus, FM |
| LED Indicators | RUN, PROGRAM, FAULT, multi‑CPU health status LEDs |
| Power Consumption | Max 12 W |
| Operating Temperature | 0 °C ~ +65 °C |
| Storage Temperature | −40 °C ~ +85 °C |
| Relative Humidity | 5‑95 % non‑condensing |
| Mounting | FS‑CPCHAS‑0001 controller chassis front‑plug‑in slot |
| Hot‑Swap | Mechanically hot‑pluggable; safety‑bypass procedure mandatory for live‑system replacement |
| Compatibility | Direct drop‑in upgrade for FC‑QPP‑0001 |
Quality Control Procedures
- Visual & Mechanical Incoming Inspection: Inspect PCB assembly, front‑panel LED indicators, gold‑plated backplane connector and part marking; record serial‑number for full‑lifecycle traceability.
- Backplane Interface Continuity Test: Verify pin‑level continuity, insulation and isolation for FS‑CPCHAS‑0001 backplane connector.
- Quad‑Core Voting Function Test: Validate 1oo4 internal voting mechanism under normal and simulated single‑core fault conditions.
- Redundant Hot‑Standby Test: Dual‑CPU synchronization and bumpless switch‑over test between primary and standby processor.
- Memory‑Backup Interface Test: Verify SRAM backup interface cooperation with FC‑BKM‑001 battery‑key‑switch module.
- Safety‑bus Communication Test: Validate reliable bidirectional data exchange between FC‑QPP‑0002 and I/O chassis modules.
- Environmental Stress Screening: Temperature‑cycle test covering full operating‑temperature range.
- EMC Compatibility Test: Industrial electromagnetic‑interference compliance test.
- Final End‑of‑Line Validation & Archiving: Complete full‑function test suite; archive test‑records bound to unit serial‑number before factory release.
Related Brand Model Recommendations
- FS‑CPCHAS‑0001: Controller chassis for mounting FC‑QPP‑0002 and FC‑BKM‑001.
- FC‑BKM‑001: Mandatory battery & key‑switch module.
- FC‑IOCHAS‑0001S: Non‑redundant I/O chassis.
- FC‑IOCHAS‑0001R: Redundant I/O chassis variant.
- FC‑SDIL‑160824VDC: Loop‑monitored safety digital‑input module.
- FC‑SDO‑0824: Safety solid‑state digital‑output module.
- FC‑SAI‑1620M: Conformal‑coated safety analog‑input module.
- FC‑PSU‑UNI2450U: SIS system 24 VDC power‑supply unit.

FC‑QPP‑0002
Frequently Asked Questions (FAQ)
Q1: What is the difference between FC‑QPP‑0002 and FC‑QPP‑0001? A: FC‑QPP‑0002 is upgraded hardware revision. It resolves old‑component obsolescence, improves thermal performance, maintains full pin‑to‑pin backward compatibility, can directly replace FC‑QPP‑0001 without hardware modification to chassis.
Q2: Can two FC‑QPP‑0002 work as redundant CPU pair? A: Yes. Install two FC‑QPP‑0002 inside FS‑CPCHAS‑0001 controller chassis for hot‑standby redundancy. Standby CPU keeps full synchronization; automatic bumpless switch‑over occurs upon primary CPU fault.
Q3: Can FC‑QPP‑0002 be installed in FC‑IOCHAS‑0001S I/O chassis? A: No. Processor module must be installed only inside FS‑CPCHAS‑0001 controller chassis.
Q4: Can I hot‑swap FC‑QPP‑0002 on running SIS rack? A: Mechanically hot‑pluggable. Under single‑CPU configuration, system will trip during replacement. Under dual‑redundant architecture, strictly follow Honeywell maintenance procedure, confirm standby CPU is healthy before removing faulty processor.
Q5: Can I repair module on‑site? A: No. Unauthorized disassembly voids SIL certification and warranty. Return defective unit to authorized service‑centre.
Installation & Configuration Guide
Pre‑Installation
- Inspect module for transit damage. Confirm part‑number FC‑QPP‑0002 and serial‑number match purchase‑order.
- Confirm FS‑CPCHAS‑0001 controller chassis, FC‑BKM‑001 battery‑key‑switch module, I/O chassis and I/O modules are complete.
- Prepare Safety Builder engineering software, configuration download cable, safety‑bus inter‑chassis cables.
- Review SIS project drawing: confirm single‑CPU or dual‑redundant CPU architecture definition.
Mechanical Installation
- Insert FC‑QPP‑0002 into target slot of FS‑CPCHAS‑0001 controller chassis from front panel, tighten quarter‑turn captive fasteners.
Important: For dual‑redundant configuration, install two FC‑QPP‑0002 modules in designated A / B slots. Do not force insertion; observe slot key‑position to avoid connector damage.
Electrical Wiring
- Complete chassis protective‑ground connection per SIS grounding specification.
- Connect safety‑bus cable between controller chassis FS‑CPCHAS‑0001 and I/O chassis FC‑IOCHAS‑0001S / 0001R.
- Connect 24VDC power supply from FC‑PSU‑UNI2450U to controller chassis power terminal.
- Connect engineering download cable for Safety‑Builder software access.
System Configuration & Commissioning
- After finishing hardware installation, power‑on SIS system. Observe FC‑QPP‑0002 front‑panel LED status.
- Launch Honeywell Safety‑Builder software, connect to processor, confirm FC‑QPP‑0002 and FC‑BKM‑001 are correctly recognized.
- Complete hardware configuration in project, download full safety‑logic application to CPU flash memory.
- For dual‑redundant CPU: verify data synchronization between primary and standby CPU, test automatic switch‑over function by simulating main CPU fault.
- Cooperate with I/O chassis to test input / output channels and all diagnostic‑alarm functions.
- Test key‑switch function via FC‑BKM‑001 (RUN / PROGRAM / FORCE mode).
- Save full‑project‑configuration‑backup‑file, system enters formal SIL3 safety‑interlock operation.

