Triconex 3005 (EMP II) Enhanced Main Power Supply Module

May 18, 2026

TRICONEX 3005 (EMP II) Enhanced Main Power Supply Module

TRICONEX 3005 (EMP II) is the second‑generation enhanced TMR main processor module for Tricon / Trident SIS. It delivers higher performance, larger memory, faster scan, and expanded diagnostics for ESD, BMS, FGS, and turbine safety systems, certified SIL3 (IEC 61508).

Description

1. Product Introduction

TRICONEX 3005 EMP II (Enhanced Main Processor Generation II) is the earliest triple modular redundant main control processor of the classic Tricon TMR safety instrument system under Invensys Triconex (now Schneider Electric), the original predecessor of 3006 and 3008 main processors. Three identical 3005 cards must be installed in one safety rack to form complete three-channel redundant architecture, implementing hardware two-out-of-three voting for all safety logic calculation, I/O data collection and full-system fault diagnosis.

It adopts single-chip dual-processor architecture, low-speed 2Mbps TriBus backplane bus, only isolated RS232 maintenance serial port, no on-board Ethernet communication, all upper monitoring data interaction must rely on external independent communication expansion modules. It cannot support online hot-swap replacement; full rack power cut-off is mandatory for disassembly and maintenance. Limited by early hardware design, its computing speed, memory capacity and bus bandwidth are the lowest among the 3005/3006/3008 MP series, only matching ultra-legacy low-capacity Tricon V7/V8 firmware versions, and it has been completely discontinued for new projects, only used for spare part replacement of old onshore safety systems. Single processor channel hardware failure will not interrupt overall safety interlock operation, and it runs stably 24/7 under wide-temperature, low-vibration indoor industrial environments, widely deployed in pre-1990s small-scale onshore petrochemical, conventional small thermal power and early onshore gas station SIL3 safety instrument systems.

2. Model Definition Explanation

The complete model TRICONEX 3005 EMP II consists of brand identifier, core hardware classification code and optional configuration suffix variants:

Prefix TRICONEX: Brand mark, representing Tricon TMR safety control hardware series, distinguished from I/O and communication auxiliary modules.
Four-digit core number 3005: Internal rack main processor classification coding. The first digit "3" stands for core safety control processing category; middle two digits "00" represent triple redundant main control circuit layout; last digit "5" represents the first-generation EMP II ultra-low-speed TriBus main processor hardware platform, the earliest MP card of the 3000 main control series, differentiated from upgraded 3006 and high-performance 3008.
Optional suffix configuration codes for differentiated project demands:

No extra suffix: Standard indoor control room basic version, universal non-offshore cabinet installation.
N suffix (3005N): Basic EMC noise suppression variant, optimized for ordinary workshop low-interference environments.
-E: Full English firmware variant; all front panel fault codes, diagnostic prompts and old-version TriStation software text display in English for overseas early projects.
-HT: High-temperature extended variant, stable upper operating temperature extended to +70°C for furnace side high-heat cabinets.

3. Technical Specifications

Electrical Performance

The module draws 5VDC operating power from Tricon rack backplane, rated power consumption 8–12W per card, allowable backplane voltage fluctuation 4.75VDC ~ 5.25VDC.

Core architecture: Single-chip dual-subprocessor design, main logic processor 16MHz 16-bit core, independent 8-bit auxiliary I/O communication coprocessor
Memory allocation: 512KB DRAM for program and real-time process data; 1KB battery-backed SRAM for limited SOE sequence records and fault logs; mask ROM solidified firmware, no Flash storage for online firmware upgrade
TriBus backplane communication speed: Fixed 2Mbps, 8-bit DMA transmission, 8-bit simple CRC data error protection, three mutually isolated redundant buses
External interface: 1×25-pin optically isolated RS232 serial port (250VDC isolation) for old-version TriStation program download, fault diagnosis and log export; no native Ethernet, all HMI/DCS data interaction requires external COM communication expansion modules
System control capacity: Supports maximum 256 I/O logical channels, only suitable for small single-unit simple safety interlock logic
Configurable logic scan cycle: Fixed minimum scan cycle 50ms, adjustable range 50ms ~ 500ms; SOE event timestamp resolution 10ms, battery-backed clock drift ±5 seconds per day
Built-in basic power protection: Backplane undervoltage and overvoltage lockout protection, no independent overcurrent protection circuit; single channel power abnormality only triggers local FAULT alarm without stopping cross-channel voting operation.

Functional Safety & Reliability Index

TRICONEX 3005 fully complies with IEC 61508 SIL 3 and IEC 61511 process safety standards, holding basic UL and CE industrial safety certifications, without ATEX offshore salt-fog certification scope. Three independent 3005 processors execute identical safety programs synchronously; hardware 2oo3 voting filters calculation deviation from any single channel, avoiding false safety trip caused by single-point processor, memory or communication fault. Hardware mean time to safe failure reaches 230,000 hours; mean time to repair controlled within 30 minutes due to mandatory full rack power-off maintenance rules. It has basic single-fault masking capability; one processor channel damage will not lead to full system safety logic shutdown. All hardware faults, I/O loop faults and SOE trip events are latched in tiny-capacity battery-backed SRAM, data reserved after rack power failure for basic safety audit traceability, but logs are easily overwritten without frequent manual export.

Environmental & Mechanical Parameters

Standard model operating temperature range: 0°C ~ +60°C; HT high-temperature variant extends stable upper limit to +70°C. Spare module storage temperature: -40°C ~ +85°C, applicable for long-term warehouse storage. Tolerable relative humidity: 5% ~ 95% non-condensing, cabinet installation IP20 protection grade. Only passes basic low-level industrial EMC tests including electrostatic discharge and mild radiated RF interference; anti-surge and anti-salt fog performance is extremely limited, completely unsuitable for offshore platform deployment. Standard single-slot horizontal installation in early Tricon 8100 main rack, no forced air cooling required under full rated load. Vibration resistance only meets onshore small gas station and conventional small thermal power plant standards; long-term low-frequency vibration easily causes TriBus communication packet loss without complete double-shielded wiring.

4. Interface and Communication Configuration

Hardware Interface Layout

Two independent hardware interface categories: rear backplane triple TriBus redundant bus interface and front panel status indicator + maintenance serial port interface.

The rear large gold finger connector is proprietary triple isolated 2Mbps TriBus bus interface, responsible for receiving backplane 5V power, three-way independent bidirectional I/O data polling exchange, and cross-synchronous data transmission with the other two main processors in the rack.

Front panel layout: Simplified multi-color LED diagnostic indicators + 25-pin RS232 maintenance port + mechanical locking extraction handle.

Status indicators include: PASS normal operation light, FAULT hardware fault alarm light, ACTIVE channel running indicator, shared serial COM TX/RX transmit/receive lights, shared TriBus bus communication status lights. The 25-pin RS232 port adopts basic optoelectronic isolation to block external maintenance PC mild surge interference from invading the processor core circuit, lacking advanced surge protection of 3006/3008.

Internal TriBus Redundant Communication Mechanism

Three rack main processors (MPA/MPB/MPC) correspond to three independent 2Mbps TriBus buses separately; each 3005 independently completes full I/O module data polling on its own bus channel at low speed. After single-channel logic operation completes, three MPs exchange operation results through simple inter-chip synchronous circuits, and hardware 2oo3 voting generates final valid safety output commands issued to I/O output modules. Faults such as TriBus disconnection, communication timeout and CRC check error only light the front panel red FAULT indicator, uploading extremely simplified fault codes without detailed channel fault classification positioning function compared with 3006 and 3008.

System Configuration Mode

All safety interlock programs, I/O point mapping, fixed scan cycle parameters and SOE trigger conditions are compiled and downloaded to 3005 mask ROM via ultra-old V7/V8 TriStation software through the RS232 serial port. Configuration parameters automatically synchronize to three redundant main processors after full rack power restart; the mask ROM cannot support field firmware upgrade, and hardware replacement is required if firmware is damaged. Upper monitoring data interaction must rely on external independent communication modules (serial Modbus COM card), the 3005 itself has no native network communication capability, unable to directly connect HMI or DCS systems.

5. Core Functions

Triple Redundant Synchronous Basic Safety Interlock Logic Calculation
Three independent 3005 main processors run identical simple user safety programs synchronously, collect limited digital and analog I/O signal data separately, and output valid safety trip/hold commands to field actuators only after passing hardware 2oo3 voting verification, eliminating false shutdown risks caused by single-channel processor hardware abnormality. Extremely limited memory and low bus bandwidth only support single-unit simple safety logic, unable to carry multi-unit combined interlock algorithms supported by 3006 and 3008.
Full Rack Limited I/O Data Polling and Simplified Fault Diagnosis
Each 3005 independently communicates with low-density early I/O modules via 2Mbps TriBus, completes real-time collection of field contact and analog signals, and executes basic diagnosis of I/O channel open circuit and short circuit faults. All I/O fault information is summarized to the main processor for unified storage and upload; diagnosis granularity is the coarsest among all 3000 series MPs, lacking independent channel fault classification prompts. Single redundant channel failure does not affect overall basic I/O data acquisition of the system.
10ms Low-Precision SOE Sequence-of-Event Recording
Built-in simple hardware timestamp unit, marking time for all digital state change events and safety trip actions, storing limited event sequences in tiny-capacity battery-backed SRAM. Even if rack main power is cut off, historical SOE records will not be lost temporarily, supporting basic post-accident root cause analysis; SRAM storage capacity is minimal, requiring weekly manual log export to avoid complete record coverage.
Single Serial Port Offline Exclusive Maintenance Operation
Only one basic isolated RS232 serial port for all maintenance work: program download, fault log reading and system hardware diagnosis. No separated online monitoring communication port; downloading programs or reading logs will occupy almost all system communication bandwidth, easily causing complete upper data transmission interruption if equipped with external communication modules. No remote maintenance function, all debugging must be completed on-site via serial cable connection with old-version maintenance PCs.
Basic Background System Self-Diagnosis and Fault Alarm
Continuous background diagnosis only covers processor core operation status, basic memory read-write integrity, TriBus bus communication link state and backplane power supply stability; lacking independent I/O module online real-time polling diagnosis function of upgraded MP models. All detected system-level faults trigger front panel FAULT light alarm, uploading only fault occurrence timestamp without classified fault codes to the monitoring platform. Single processor channel fault only triggers alarm, the remaining two redundant channels maintain normal basic safety interlock operation without system shutdown.
Triple Redundant Backup of Simple System Programs
All basic safety control programs and configuration parameters are solidified in mask ROM of each 3005 main processor; three MPs automatically synchronize program files after power-on to realize triple redundant backup. When replacing a faulty 3005 with a spare module, the other two normal MPs automatically copy complete programs and configurations to the new card, without repeated manual download by maintenance personnel, but mask ROM cannot support on-site program modification expansion.

6. Applicable Scenarios

Ultra-Legacy Small Petrochemical Refining ESD Safety Instrument Systems
Used as triple redundant main control core for pre-1990s small crude oil atmospheric-vacuum distillation unit safety racks, undertaking single-unit simple safety interlock logic operation, limited low-density I/O signal collection and basic SOE accident recording, only matching early low-channel-capacity Tricon I/O modules.
Onshore Conventional Small Oil & Gas Station Fire and Gas Protection Systems
Adapted to onshore small station control rooms with mild humidity and vibration, realizing basic safety monitoring of wellhead pressure and pipeline emergency cut-off valves; 3005N EMC basic variant is selected for workshops with low electromagnetic interference, not suitable for compressor island high-interference environments.
Ultra-Early-Built Mini Natural Gas Pipeline Compressor Station Safety Interlock Systems
Serves aging mini station safety racks, processing scattered simple pipeline pressure and valve position signals, executing basic overpressure safety trip logic, storing minimal SOE fault records of pipeline equipment.
Traditional Mini Thermal Power Plant Boiler Basic Safety Protection Systems
Applied in ultra-old small boiler SIS racks, matching low-density analog input modules to collect furnace temperature and pressure signals, completing simple overtemperature and overpressure safety interlock calculation, without any rotating equipment overspeed protection logic processing capability.
Small-Scale Low-Risk Legacy Fine Chemical Production Workshop Safety Control
Deployed in non-offshore ordinary control rooms, undertaking single small reactor temperature and pressure basic safety monitoring logic operation, realizing independent simple safety interlock control of small-batch reaction equipment.
Legacy Tricon V7/V8 SIS System Spare Part Replacement and Maintenance Projects
Only used for spare card replacement of ultra-early Tricon racks equipped with first-generation EMP II 3005 main processors, strictly matching original low-speed 2Mbps TriBus system architecture; completely prohibited for new safety instrument system construction due to ultra-low bus bandwidth, tiny memory capacity and lack of native Ethernet communication function.

7. Operation and Maintenance Instructions

Installation Requirements

Three TRICONEX 3005 main processors must be installed in three dedicated main processor slots of early Tricon 8100 safety main rack respectively; full rack power supply must be completely cut off before plugging or disassembly, online hot-swap operation is strictly prohibited. Insert the module horizontally into the card slot, fully lock the front panel mechanical handle to ensure reliable contact between rear TriBus gold finger connector and rack backplane bus. All RS232 maintenance cables adopt single-shielded twisted-pair cables; cable shielding layers must be single-point grounded at the control room cabinet ground bar, multi-point grounding on maintenance PC side is forbidden to prevent ground loop induced complete communication failure. A ventilation gap of at least 20 centimeters must be reserved around three main processor slots; high-power heat-generating I/O modules cannot be stacked beside 3005 modules to avoid overheating exceeding rated operating temperature and triggering continuous TriBus communication fault alarms.

Daily Routine Inspection Standards

Conduct daily visual inspection to confirm front panel PASS indicator stays steady green, global FAULT alarm light remains off, ACTIVE running light is normally lit, and serial COM shared TX/RX lights only flash during maintenance operation without constant bright or extinguished abnormal state. Log in to ultra-old V7/V8 TriStation configuration software or external serial communication HMI every day to check three-channel main processor synchronous running status, confirming no records of TriBus continuous communication errors and memory read-write faults. Export full-system SOE and processor fault logs every week to avoid log complete coverage caused by extremely limited SRAM storage capacity. Every month, clean dust accumulated on module front indicators, RS232 serial port and rack ventilation slits, check cabinet cooling fan operating status, ensure ambient temperature around three main processors stays within specified 0°C ~ +60°C operating range.

Regular Inspection and Calibration Cycle

Under standard indoor control room conditions, full processor communication function test and program CRC integrity verification shall be performed every 12 months; coastal salt-fog workshops and high-temperature furnace side cabinets are not recommended to deploy this module, and if forced to use, the inspection cycle is shortened to 4 months. Before inspection, back up complete safety control programs, I/O mapping parameters and limited historical SOE logs stored in three 3005 main processors to offline storage media. Use old-version TriStation maintenance tools to execute full mask ROM program CRC verification, test RS232 serial communication stability, and check battery-backed SRAM backup battery voltage; replace aging backup batteries when voltage is lower than the threshold to avoid all log loss after power failure. After completing all inspection items, save updated backup program files, retain written inspection records including inspection date, operator name and fault test data for factory safety compliance audit.

Common Fault Handling Procedures

When a single main processor front panel FAULT red light is permanently lit, first check whether the module handle is fully locked in the slot, inspect rear backplane connector for thick dust accumulation, corrosion or poor contact, and verify cabinet 5V power supply output voltage is within normal range. If TriBus shared communication lights stop flashing and multiple I/O modules display offline alarms simultaneously, cut off full rack power supply first, re-plug three 3005 main processors and restart the rack to execute automatic cross-channel program synchronization. If system diagnostics report internal dual-subprocessor core or memory hardware failure of the module, planned full rack shutdown maintenance must be arranged: cut off rack power, unlock front handle, steadily pull out faulty 3005 module, insert spare TRICONEX 3005 module of the same suffix version, lock handle tightly, restore rack power supply, wait for the other two normal main processors to automatically copy all programs and configuration parameters to the spare card, then verify three-channel synchronous running, limited I/O data collection and external serial communication functions, clear historical fault alarm logs. On-site disassembly of internal dual-subprocessor, memory and communication circuit components is forbidden; damaged modules must be returned to official authorized service centers for repair or scrapping. Unauthorized disassembly invalidates all SIL3 safety certifications of the hardware.

Spare Module Storage and Long-Term Service Management

Offline spare TRICONEX 3005 modules shall be stored in constant-temperature dry warehouse with ambient temperature maintained at 0°C ~ 40°C and relative humidity controlled below 70%. Modules must be sealed in original anti-static packaging bags to prevent static electricity damage to internal dual-subprocessor and memory chips, avoiding direct sunlight, corrosive gas and heavy dust environments. Every six months of shelf storage, take out spare modules for a 30-minute power-on aging test to activate internal circuit capacitors and check SRAM backup battery voltage, preventing component performance degradation from long-term power-off state. The module’s design service life under rated normal operating conditions is only 12 years, shorter than the 15-year service life of upgraded 3006 and 3008 main processors; all on-site installed 3005 modules shall be batch-replaced upon reaching service life to maintain overall SIL3 safety integrity level of legacy ultra-old SIS systems.

Maintenance Safety Prohibitions

Unauthorized modification of internal dual-subprocessor chips, independent firmware flashing or hardware circuit transformation of TRICONEX 3005 is strictly prohibited. Any modification voids functional safety certification and related industrial safety qualification certificates. Do not connect maintenance serial cables with instantaneous surge voltage exceeding 30V to RS232 ports for long durations; continuous surge will permanently burn internal basic optoelectronic isolation and processor core circuits. All maintenance operations involving module plugging, program download and serial communication parameter modification must be performed by certified SIS safety instrument maintenance personnel; full rack power supply must be cut off before disassembly of any main processor. Safety isolation measures for production safety interlock loops must be implemented before rack power-off maintenance to avoid full-unit safety logic loss and accidental equipment trip during shutdown replacement. Any disassembly or replacement of main processors is forbidden during critical production startup, full-load stable operation or emergency accident handling stages; all main processor maintenance work must be scheduled during planned equipment full-shutdown maintenance windows. This module is completely unsuitable for offshore platform, large complex process and new construction SIS projects due to ultra-low TriBus bandwidth, tiny memory capacity, mask ROM non-upgradable firmware and lack of native Ethernet communication function.

Contact Info