Triconex 3351 High Density 32-Channel 4-20mA TMR Analog Input Module for Tricon SIS

Description

Triconex 3351 High Density 32-Channel 4-20mA TMR Analog Input Module for Tricon SIS

Product Description

The Triconex 3351 (AI3351) is a triple modular redundant analog input module built for the Tricon Safety Instrumented System. It acquires 4–20 mA analog signals from field transmitters, converts analog measurements into digital values and transmits validated data to the Tricon 2oo3 main processor triplet over the Tricon backplane bus. It adopts independent three-channel voting architecture; single leg hardware faults are isolated and will not lead to false safety trips. The module provides comprehensive loop diagnostics to detect open circuit, short circuit, over-range and under-range conditions. It supports hot-swap replacement under a healthy Tricon rack, enabling online maintenance without shutdown of the safety system. It must be paired with a dedicated Tricon termination assembly for field loop wiring termination and can support both 2-wire and 4-wire transmitters.

TRICONEX 3351

Technical Specifications

• Brand: Triconex (Schneider Electric / Invensys Legacy)
• Model: 3351 (AI3351)
• Module Type: Analog Input (AI) Module
• Architecture: TMR Triple Modular Redundancy, 2oo3 voting
• Channel Count: 32 channels
• Input Signal: 4–20 mA DC, measurable range 2–22 mA
• Resolution: 16-bit
• Typical Accuracy: ±0.1% Full Scale
• Input Bandwidth: 16 Hz
• Input Impedance: 250 Ω
• Max Field Voltage: 33 VDC
• Diagnostics: Open loop, short circuit, over-range, under-range, leg fault, module self-test
• Status Indicators: Module PASS, FAULT, ACTIVE, FIELD PWR LEDs
• Backplane Interface: Tricon dedicated I/O bus
• Hot Swap: Supported with fully healthy Tricon processor triplet
• Operating Temperature: 0 °C to +60 °C
• Storage Temperature: -40 °C to +85 °C
• Relative Humidity: 5%–95%, non-condensing
• Safety Certification: SIL 3 capable per IEC 61508, ATEX Zone 2, UL, CE
• Compatible Chassis: Tricon 7-slot / 15-slot main and expansion chassis
• Power Source: Powered via Tricon chassis backplane
• Approximate Weight: 1.86 kg

Application Scenarios

• Petrochemical and refinery ESD emergency shutdown systems for pressure, temperature, flow and level transmitter monitoring
• Onshore and offshore oil & gas fire and gas safety instrumented systems
• Power plant boiler protection, turbine trip and burner management safety parameter acquisition
• LNG terminals and cryogenic plant SIL 3 safety loop analog signal monitoring
• Unmanned pipeline HIPPS and pressure safety cabinet transmitter signal collection
• Chemical reactor safety interlock and process trip analog monitoring
• Hazardous Class I Div 2 / Zone 2 SIS control panels
• Spare replacement and maintenance for existing Tricon SIS installations

8 Related Triconex Model Recommendations

1. 3703E – 8-Channel Analog Input Module
2. 3704E – 8-Channel Analog Output Module
3. 3503E – 32-Channel 24VDC Digital Input Module
4. 3625 – 32-Channel Supervised Digital Output Module
5. 3805E – Tricon Main Processor Module
6. 4351B – Tricon Communication Module TCM
7. 8311 – 24VDC Input Tricon Power Supply
8. 8312 – 230VAC Input Tricon Power Supply

Compatibility & Installation Pitfalls

Compatibility

• Designed exclusively for Tricon TMR chassis; not compatible with Trident racks or Bently Nevada 3500 racks.
• Requires Tricon firmware V9.6 or later and matching 3805E processor triplet.
• Must be matched with the dedicated Tricon termination assembly; mismatched termination units cause loop diagnostic failures.
• Application logic and I/O configuration reside in the Tricon main processor instead of local module memory.
• Supports 4–20mA current loops only by default; it cannot be directly used for thermocouple or RTD signals without separate signal conditioning.
• SIL 3 safety integrity depends on healthy TMR voting triplet and correct diagnostic configuration.

Installation Pitfalls

1. Hot-swap operation is only permitted when all three Tricon processors stay in PASS status. Never perform hot-swap during active safety trips or processor faults.
2. This module uses 250Ω internal shunt for 4–20mA; adding extra external resistors will distort current readings and degrade accuracy.
3. Analog signal wires must be shielded twisted pairs and routed separately from VFD and high-power AC cables to avoid EMI-induced measurement drift.
4. Onboard diagnostics detect electrical loop faults, but they cannot validate transmitter calibration drift; periodic proof-test of field instruments is mandatory.
5. Do not apply voltage signals directly to current input channels; out-of-range voltage will permanently damage channel circuits.
6. Mechanical keying prevents insertion into processor, power or communication slots; never force the module into non-I/O slots.
7. Polarity reversal at the termination assembly will disable open-loop diagnostics and cause abnormal measurement values.
8. Firmware mismatch between 3351 and processor triplet may invalidate TMR voting and suppress channel fault alarms.

TRICONEX 3351

Standard Operating Procedure (SOP)

SOP for 3351 Analog Input Module Inspection, Installation and Functional Test

1. Pre-Installation Inspection Inspect the module for physical damage, bent connectors or contamination. Confirm the part number 3351 and verify compatibility with the termination assembly and Tricon firmware revision. Review transmitter loop drawings and confirm 2-wire / 4-wire loop power arrangement. Apply lockout-tagout to associated analog safety loops if the module supports critical ESD functions.
2. Rack Installation Power down the chassis if replacing the only active module for a critical safety loop. Insert the 3351 into the designated I/O slot and secure module fasteners. Connect the ribbon cable between the module and field termination assembly. Terminate 4–20mA transmitter wiring at terminals. Separate analog signal wiring from high-energy power cables and implement shielding per approved SIS documentation.
3. Software Configuration Open TriStation and connect to the Tricon rack. Add and map the 3351 within the system I/O configuration. Enable open-loop and out-of-range diagnostics according to SIL requirement specification. Download the validated safety application to the 3805E processor triplet and resolve firmware or configuration mismatch alarms. Archive the I/O configuration for IEC 61508 audit traceability.
4. Channel and Diagnostic Test Inject 4 mA, 12 mA and 20 mA reference signals to each channel and confirm readings in TriStation stay within specified accuracy tolerance. Simulate open loop and short-circuit field conditions to validate diagnostic alarm reporting. Confirm TMR voting rejects single leg faults and prevents false trip signals. Record channel response and diagnostic performance in the SIS maintenance log.
5. System-Wide Interlock Verification Inject trip setpoint signals and confirm the Tricon executes the required shutdown sequence. Confirm single module or leg faults only trigger maintenance alarms and will not initiate undesired ESD activation. Verify trip status propagates correctly to HMI and peer Tricon systems.
6. Return to Service Clear temporary fault latches and alarm acknowledgements. Remove lockout-tagout as applicable. Monitor channel health, measurement stability and fault status through the required observation period. Notify operations that the Tricon analog input module is in service.
7. Periodic Maintenance and Replacement During planned outages, inspect terminal torque, cable shielding and transmitter calibration status. Perform full channel proof-test and loop fault diagnostic testing per site SIS schedule. If the 3351 reports persistent non-resettable leg faults, confirm the Tricon processor triplet is fully healthy before hot-swap. After replacement, recheck all channels and diagnostics before releasing the module to safety duty.