Description
The ICS Triplex T9402 (now part of the Rockwell Automation Trusted family) is a high-integrity, 40-channel Digital Input Module. It is a core component of the Trusted Triple Modular Redundant (TMR) system, designed for critical safety-related applications including Emergency Shutdown (ESD), Fire and Gas (F&G) systems, and Burner Management Systems (BMS).
Product Parameters (Datasheet)
- Model Number: T9402
- Series: Trusted TMR
- Input Channels: 40 Channels (Triple Modular Redundant)
- Input Voltage: 24 V DC (Nominal)
- Input Type: Digital (Current-sinking)
- Line Monitoring: Support for open circuit and short circuit detection (with external resistors)
- Isolation: 50V sustained (channel-to-channel and channel-to-chassis)
- Fault Tolerance: 3-2-0 Fault Tolerant architecture
- Self-Diagnostics: Continuous background testing with > 99.9% fault coverage
- Power Consumption: 15 W (typical)

ICS Triplex T9402

ICS Triplex T9402

ICS Triplex T9402
Country of Origin
This safety-critical module is engineered and manufactured by ICS Triplex (Rockwell Automation) in the United Kingdom.
Application Fields
The T9402 is utilized in industries where a single point of failure cannot be tolerated:
- Oil & Gas Production: Monitoring critical pressure and level switches on offshore platforms.
- Nuclear Power: Managing safety-related digital interlocks and reactor trip signals.
- Chemical Processing: Interfacing with emergency stop buttons and valve position feedbacks in hazardous areas.
- Refining: Operating as the primary input interface for SIL 3 rated safety instrumented functions (SIF).
- Turbine Protection: Capturing high-speed digital status signals for overspeed and vibration trips.
Product Usage Instructions
- Module Insertion: Ensure the Trusted Controller Chassis is powered. Align the T9402 with the designated I/O slot and push firmly until the ejector levers snap into place.
- Field Termination: Connect the field wiring to the corresponding Trusted Field Termination Assembly (FTA). The T9402 does not land wires directly; it interfaces via a high-density cable to the FTA.
- Line Monitoring Setup: If line monitoring is required, install the specified end-of-line (EOL) resistor network at the field device. Configure the threshold settings in the Toolset software.
- Redundancy Configuration: The T9402 automatically operates in TMR mode. Ensure the module is recognized by the Trusted Triple Processor and that all three internal “slices” are healthy.
- Hot-Swapping: This module is fully hot-swappable. To replace, simply open the levers and remove; the system will maintain safety integrity using the remaining I/O or redundant pairs if configured.
Product Technical Description
The T9402 embodies the Trusted TMR philosophy. Technically, every single input signal is routed to three independent “slices” within the module. Each slice processes the data and compares it with the other two using a proprietary voting hardware logic. This 3-2-0 architecture means that even if one internal slice fails, the module continues to operate with full safety integrity. The module also performs “active testing,” where it momentarily toggles internal circuits to verify they can still detect a change in state—all without interrupting the actual process signal. This ensures that a “stuck-at” fault is detected immediately rather than waiting for a real emergency.
Q&A (Common Questions)
- Q: What is the difference between T9401 and T9402?
- A: The T9402 is an updated version of the T9401, typically offering improved diagnostics, higher noise immunity, and better thermal performance.
- Q: Can I use this module for a SIL 3 application?
- A: Yes. When used as part of a complete Trusted TMR system, the T9402 is certified for use in applications up to SIL 3 (IEC 61508).
- Q: Does this module support Sequence of Events (SOE)?
- A: Yes, the T9402 provides high-resolution time-stamping for all 40 channels, allowing for detailed chronological analysis of trips.
- Q: What do the LEDs on the front panel signify?
- A: The “Healthy” LED indicates overall module status, while the individual channel LEDs indicate the logical state (ON/OFF) of each of the 40 inputs.
Similar Model Recommendations
- ICS Triplex T9432: 32-Channel Digital Output Module.
- ICS Triplex T9451: Analog Input Module (TMR).
- ICS Triplex T9110: Trusted TMR Processor.
- ICS Triplex T8403: Trusted Digital Input Module (Alternative version).
- ICS Triplex T8800: Trusted Field Termination Assembly (FTA).
For technical documentation or a quote for the ICS Triplex T9402, please contact our safety systems technical team.
