Description
Triconex 3301 32-Channel Commoned TMR Digital Input Module for Trident SIS
Product Description
The Triconex 3301 is a triple modular redundant (TMR) digital input module designed exclusively for the Triconex Trident safety instrumented system. It acquires discrete 24 VDC field contact signals from switches, ESD pushbuttons, pressure/level switches and fire-gas detectors, then transmits validated status to the 3101 main processor triplet via the Trident I/O bus. Three isolated internal signal paths sample each input independently; the main processors perform 2oo3 voting to reject single hardware faults without interrupting safety functions. It incorporates Force-to-Value Diagnostic (FVD), a built-in channel test function that verifies circuit integrity and detects stuck-on / stuck-off faults, which is critical for SIL 2/3 proof-test requirements. The module supports hot-swap operation when the Trident rack remains online, enabling maintenance for continuous process facilities. It mates with dedicated Trident baseplates and external termination assemblies for field wiring.

TRICONEX 3301
Technical Specifications
- Brand: Triconex (Schneider Electric, Invensys legacy)
- Model: 3301
- Module Type: Digital Input (DI), Commoned Return
- Architecture: TMR Triple Modular Redundancy
- Channel Count: 32 commoned DC input points
- Nominal Input Voltage: 24 VDC
- Operating Input Range: 15–30 VDC
- Input Impedance: ~3 kΩ
- Filter / Response Time: <10 ms on/off delay
- Diagnostic: FVD force-to-value stuck test, wire break, module self-test, leg fault detection
- Max Switching Rate: 20 Hz (for reliable diagnostics)
- Backplane Interface: Trident I/O bus
- Hot Swap: Supported with healthy Trident rack online
- Operating Temperature: 0 °C to +60 °C
- Storage Temperature: -40 °C to +85 °C
- Relative Humidity: 5% to 95%, non-condensing
- Safety Certification: SIL 3 capable per IEC 61508
- Programming Software: TriStation 1131 (Trident only)
- Power Source: Powered via Trident baseplate backplane
Application Scenarios
- Legacy petrochemical and refinery ESD emergency shutdown systems
- Onshore oil & gas wellhead and process safety interlock retrofit projects
- Power plant boiler protection, turbine trip and burner management systems (BMS)
- Chemical continuous process safety switch and contact monitoring
- Pipeline pressure safety, fire and gas detection interlocks
- Hazardous Class I Div 2 / Zone 2 SIS cabinets built on Trident platform
- Sites requiring FVD diagnostics to meet SIL proof-test requirements
- Spare replacement and maintenance of existing Trident SIS installations
8 Related Triconex Model Recommendations
- 3101 – Trident Main Processor Module
- 3102 – Trident Redundant Communication Module
- 3302 – Trident Digital Output Module
- 3351 – Trident Analog Input Module
- 3401 – Trident Analog Output Module
- 3501 – Trident Chassis & Backplane Assembly
- 4000098-510 – Tricon / Trident Redundant Power Supply
- 3805E – Modern Tricon Main Processor (alternative platform)
Compatibility & Installation Pitfalls
Compatibility
- Only works with the Trident chassis and Trident backplane; not compatible with Tricon 3700/3600 family racks.
- Requires TriStation 1131 software; standard Tricon TriStation cannot communicate with Trident hardware.
- This is a commoned-return DI module; do not substitute for isolated input types.
- Must use matching Trident baseplate/termination unit; Tricon ETPs are not pin-compatible.
- Application logic is stored in the 3101 main processor, not locally on the 3301; spare replacement requires application download.
- SIL 3 integrity depends on a complete healthy TMR triplet of main processors; a standalone 3301 cannot implement SIL 3 functions.
Installation Pitfalls
- Hot-swap is permitted only when all three Trident MPs are in PASS state; avoid hot-swap during a processor fault or active safety trip.
- Commoned return wiring means shared field return; incorrect cabling causes cross-talk and false switch status.
- 24 VDC discrete field wiring must be separated from VFD and high-current AC cables; induced noise triggers spurious input changes.
- FVD stuck-test will momentarily force channel state; always coordinate with operations and isolate trips before running proof-test diagnostics.
- Do not exceed 30 VDC field input; overvoltage damages the input circuitry and invalidates safety certification.
- Mechanical keying prevents insertion into the wrong baseplate; never force the module into an incompatible slot.
- Module PASS LED confirms module health, but cannot verify mechanical switch degradation; periodic field contact proof-test remains mandatory.
- Mismatched firmware revisions between 3301 and the 3101 processor triplet can break FVD diagnostics and TMR voting.

TRICONEX 3301
Standard Operating Procedure (SOP)
SOP for 3301 Digital Input Module Inspection, Installation and Functional Test
- Pre-Installation Inspection Inspect the module for physical damage, bent pins or contamination. Confirm part number 3301 for Trident platform. Verify the matching baseplate and termination assembly. Review field contact voltage and commoned return design. Apply lockout-tagout to associated ESD and trip circuits before rack access.
- Rack Installation Power down the Trident chassis if this module serves a critical safety loop with no redundant I/O path. Insert the 3301 into the designated I/O baseplate and lock the latch. Connect ribbon cable from module rear to the external termination assembly. Terminate field switch wiring on the terminal base. Separate low-voltage discrete wiring from high-energy power circuits per approved SIS drawings.
- Software Configuration Open TriStation 1131 and upload the validated Trident application. Map the 3301 in the I/O configuration table. Enable FVD stuck-test diagnostics per the SIL safety plan. Download the application to the 3101 processor triplet and resolve configuration and firmware mismatch faults. Archive the compiled application for IEC 61508 audit traceability.
- Channel Functional and Diagnostic Test Toggle field switches and verify input status updates correctly in TriStation. Simulate open circuit conditions to confirm fault reporting. Execute FVD stuck-on / stuck-off tests and confirm the module detects channel faults as designed. Record input response and diagnostic behaviour in the SIS proof-test log.
- Safety Interlock Verification With approved test permission, trigger switch trip conditions and confirm the Trident executes the required shutdown sequence. Confirm TMR voting suppresses single leg faults and prevents spurious trips. Verify fault alarms route to HMI and front-panel indicators.
- Return to Service Clear all temporary test forces and diagnostic latches. Remove lockout tags and restore the safety interlock to online status. Monitor module PASS/FAULT status and input stability for the required observation window. Notify operations that discrete safety input monitoring is active.
- Periodic Maintenance and Replacement During planned outages, inspect baseplate terminals, cable integrity and switch contact condition. Repeat channel status checks and FVD diagnostics per the site SIS proof-test schedule. If the 3301 reports persistent unrecoverable leg faults, confirm the three MPs are healthy before hot-swap. After installing a spare module, synchronize with the Trident processor, reload validated I/O configuration and repeat the full channel and diagnostic test before releasing to safety duty.

