Description
- Model: T9432 (Trusted® 24V DC Digital Output Module)
- Brand: ICS Triplex (Rockwell Automation)
- Series: Trusted® TMR (Triple Modular Redundant) System
- Core Function: High-integrity 32-channel digital output for Safety Instrumented Systems (SIS).
- Condition: Brand New Surplus (Original hardware, zero field hours).
- Product Type: 32-Channel TMR Digital Output (DO).
- Key Specs: 24V DC | 32 Isolated Channels | SIL 3 Rated | Hot-Swappable.

ICS TRIPLEX T9432
Key Technical Specifications
- Number of Channels: 32 points, grouped in 4 (8 channels per group)
- Output Voltage: 24V DC (Field powered)
- Max Output Current: 0.5A per channel (continuous)
- Fault Tolerance: Triple Modular Redundant (TMR) internal architecture
- Short Circuit Protection: Electronic current limiting per channel
- Internal Diagnostics: Continuous self-test of all output switches and readback
- Safety Integrity Level: SIL 3 (IEC 61508)
- Power Dissipation: 15W (typical)
- Response Time: < 10ms (from TMR Processor command to field transition)
- Isolation: 500V DC (Field-to-Logic and Group-to-Group)
Installation & Configuration Guide
Phase 1: Pre-Installation (Preparation)
Safety Strategy:
- Redundancy Check: Ensure the Trusted system is currently in a “Healthy” or “Active” state. The T9432 is a TMR module; if you are replacing a failed unit, the sister modules should be handling the safety load.
- Field Wiring: Verify that the field 24V DC supply is within the 20-32V range. Low voltage can trigger “Under Voltage” diagnostic alarms on the T9432.
- Firmware Compatibility: Check your Trusted Toolset (Workbench) for the required firmware version of the T9432. Inserting a module with significantly older/newer firmware may require a “Firmware Update” via the processor.
Phase 2: Removing the Faulty Module
- Unlock the Ejector: Use a small flat-head screwdriver to release the locking screw on the top/bottom of the module handle.
- Handle Operation: Pull the ejector handle outward. This mechanically disengages the high-density backplane connectors.
- Slow Extraction: Slide the T9432 out of the rack. Note that the module is heavy (approx. 2kg) and contains sensitive TMR circuitry—handle with care.
Phase 3: Hardware Installation
- Slot Inspection: Peer into the empty slot. Ensure the Trusted backplane pins are straight and no dust is present.
- Module Alignment: Slide the new T9432 into the guide rails.
- Seating: Use the ejector handle to “cam” the module into the backplane. You should feel it seat firmly.
- Locking: Tighten the retaining screws. This is crucial for maintaining the earth/ground bond required for SIL 3 operation.
Phase 4: System Integration
- Status Monitoring: The “Ready” LED should blink, then turn steady Green.
- Diagnostic Check: Open the Trusted Explorer. The module should transition from
Not PresenttoActive. - Line Monitoring: Check if the T9432 reports any “Line Faults” (Open Circuit/Short Circuit). Since this is a new module, it may detect existing field wiring issues that the old, degraded module missed.
- Force Test: If the process allows, perform a “Force” test on one non-critical channel to ensure the TMR command path is fully functional.

ICS TRIPLEX T9432
Customer Cases & Industry Applications
Case 1: LNG Terminal ESD System Recovery An LNG (Liquefied Natural Gas) export terminal in Australia experienced a “Diagnostic Failure” on an Emergency Shutdown (ESD) output loop. The T9432 module had internal voting errors. Because this loop controlled a critical isolation valve, the terminal was operating under a “Safety Override,” which is a high-risk state. We dispatched a New Surplus T9432 within 24 hours. The hot-swap was completed in minutes, the safety overrides were removed, and the terminal returned to SIL 3 compliance immediately.
Case 2: Offshore Platform “Ghost Fault” Resolution A North Sea oil platform was seeing intermittent “Short Circuit” alarms on their Fire & Gas system. After tracing the wiring with no luck, the engineer suspected the internal readback circuitry of the T9432 was failing due to 15 years of continuous service in a high-vibration environment. We provided a New Surplus unit from the same manufacturing era to ensure perfect firmware compatibility. The “ghost faults” disappeared, proving that the old module’s internal diagnostic sensors had drifted out of calibration.
Frequently Asked Questions (FAQ)
Q: Can I hot-swap the T9432 while the system is live? A: Yes. The Trusted TMR system is designed for “Online Repair.” Replacing a T9432 does not interrupt the 24V DC outputs to the field, as the other redundant paths in the system maintain the state.
Q: Does the T9432 require a separate “Keying” on the backplane? A: The Trusted system uses mechanical keying to prevent you from accidentally inserting a Digital Output (T9432) into a Digital Input (T9401) slot. Ensure the keying pins on your rack match the T9432 before forcing it in.
Q: What is the difference between the T9432 and the T9431? A: The T9432 is the newer, standard 32-channel version with enhanced diagnostics. The T9431 is an older variant. In most cases, you should replace “like-for-like.” If you are looking to upgrade, a project-wide software change in the Trusted Toolset is usually required.
Q: Why buy “New Surplus” for a SIL 3 safety system? A: Honestly, safety engineers are often wary of “used” parts. Our New Surplus T9432s are original factory-new units that were never energized. This means the internal components (relays, capacitors, and ASICs) have 100% of their service life remaining. It provides the reliability of a new part at a lower cost and, more importantly, with immediate availability.
Q: Does it support “Line Monitoring”? A: Yes. The T9432 can detect open circuits and short circuits in the field wiring even when the output is OFF, provided you have the correct EOL (End of Line) resistors installed at the field device.

