Description
- Model: ICS Triplex T9402 (Rockwell Trusted Series)
- Brand: ICS Triplex / Rockwell Automation
- Series: Trusted™ TMR (Triple Modular Redundant) System
- Core Function: 24 V DC TMR Digital Input Module (40 Channels)
- Product Type: Digital Input Safety Module
- Key Specs: SIL 3 Rated | 24 V DC Nominal | 40 Isolated Channels

ICS TRIPLEX T9402
Key Technical Specifications
- Number of Channels: 40 (Triple Redundant)
- Input Voltage: 24 V DC (Range: 18 V to 32 V DC)
- Input Current: Typ. 4 mA per channel at 24 V DC
- Safety Integrity Level: SIL 3 (IEC 61508)
- On-State Voltage: > 15 V DC
- Off-State Voltage: < 5 V DC
- Sequence of Events (SOE): 1 ms resolution across all channels
- Self-Test Interval: Automatic background testing of all input circuits
- Isolation: 500 V DC channel-to-chassis
- Power Consumption: 15 W (Typical)
- Hot-Swap: Fully supported within the Trusted Controller Chassis
Application Scenarios & Pain Points
In high-stakes environments like an offshore gas platform or a nuclear cooling system, a “ghost signal” or a failed input can trigger a multi-million dollar nuisance trip. The T9402 solves this by using Triple Modular Redundancy (TMR). Internally, the module processes every single one of its 40 inputs through three independent paths. If one path fails, the other two “outvote” it, allowing the process to keep running safely while flagging a maintenance alarm.
Typical Application Scenarios:
- Emergency Shutdown (ESD) Monitoring critical push-buttons and process switches (Pressure/Level/Flow) where a failure to sense a signal is not an option.
- Fire and Gas (F&G) Systems Interfacing with flame and smoke detectors. The T9402’s SOE (Sequence of Events) capability helps engineers reconstruct exactly which detector tripped first.
- Burner Management Systems (BMS) Monitoring flame scanners and fuel valve limit switches to ensure safe furnace startup and operation.
- Turbine Protection High-speed monitoring of overspeed switches and vibration trips where millisecond response times are required.
Case Study: The “Intermittent Contact” Mystery
Background: A refinery in Southeast Asia was suffering from “spurious trips” on a critical compressor. The logs showed a high-pressure trip, but the mechanical gauges showed normal pressure.
The Problem: The existing input module (a non-TMR competitor) was susceptible to contact bounce and electromagnetic interference (EMI). The system was seeing a 2ms “dip” in voltage as a legitimate trip signal.
Solution: The plant upgraded the rack to a Trusted system using T9402 modules. Because the T9402 uses complex voting and programmable input filtering (de-bounce), it was able to distinguish between actual process events and electrical noise.
Result:
- Zero Spurious Trips: Since the installation of the T9402, the compressor hasn’t had a single “phantom” trip.
- Granular Data: During a scheduled test, the SOE logs showed the exact millisecond each redundant contact closed, confirming the mechanical health of the switches.
- ROI: The avoided cost of just one unplanned trip paid for the entire module upgrade ten times over.

ICS TRIPLEX T9402
Compatible Replacement Models
The T9402 is a staple of the Trusted line, but ensure you match the voltage and channel count.
| Original Model | Alternative/Successor | Compatibility | Notes |
| T9402 | T9401 | ❌ Incompatible | T9401 is typically the 120 V AC version; different voltage levels. |
| T9402 | T9431 | ⚠️ Hardware Mod | T9431 is a 32-channel Analog/Digital hybrid; requires rewiring. |
| T9402 (Legacy) | T9402 (Latest Rev) | ✅ Direct | Newer revisions feature improved thermal management. |
Engineer’s Note: Honestly, if you’re replacing a T9402, check your T8151B Communications Interface too. If your comms module is on an ancient firmware version, it might not recognize the diagnostic heartbeat of a brand-new T9402 revision. Always verify the “System Info” tab in your Trusted Toolset software before a hot-swap.
Troubleshooting Quick Reference
| Symptom | Likely Cause | Action |
| “Active” LED Off | Internal module fault or not seated. | Check the latching levers. Reseat the module. |
| “Fault” LED (Solid Red) | TMR Voting failure (Internal). | Module has lost 2-out-of-3 internal paths. Replace immediately. |
| Channel LED “On” but no Logic | Logic forced in software or wrong Slot ID. | Check the “Forces” list in your safety program. |
| “Sequence of Events” Buffer Full | Rapid toggling of a noisy input. | Increase the “Input Filter” time for that specific channel. |
❗ Critical Wiring Note: The T9402 requires a specific Field Termination Assembly (FTA) or a standard Trusted Connector. If you find “Charring” on the gold fingers of the module you are pulling out, stop. Do not put the new module in until you have cleaned the backplane and verified the field voltage. A short-circuit in the field can “cook” the input protection resistors on the T9402.

