164NBT
164NBT
164NBT
®
ProTech TPS
Total Protection System
This publication may have been revised or updated since this copy was produced.
To verify that you have the latest revision, check manual 26311 , Revision Status &
Distribution Restrictions of Woodward Technical Publications, on the publications
Revisions page of the Woodward website:
www.woodward.com/publications
Revisions—Changes in this publication since the last revision are indicated by a black line
alongside the text.
Woodward reserves the right to update any portion of this publication at any time. Information provided by Woodward is
believed to be correct and reliable. However, no responsibility is assumed by Woodward unless otherwise expressly
undertaken.
Manual 26501V1
Copyright © Woodward 2010–2016
All Rights Reserved
Manual 26501V1 ProTechTPS Total Protection System
Contents
ii Woodward
Manual 26501V1 ProTechTPS Total Protection System
Figure 1-1. Typical ProTechTPS Application (Voted Trip Relay Models) ..............2
Figure 1-2. Typical ProTechTPS Application (Independent Trip Relay Models)....3
Figure 1-3. Typical Gas Turbine Application (Voted Trip Relay Models) ...............3
Figure 1-4. Typical Safety PLC Application (Voted Trip Relay Models) .................4
Figure 2-1. Typical ProTechTPS Bulkhead Package—Front View ........................6
Figure 2-2a. Typical ProTechTPS Bulkhead Package—Front Door Open ............7
Figure 2-2b. Bulkhead Schematic Showing Front Panel A Connection to Module
A and Front Panel C Connection to Module C—Top View................7
Figure 2-3. Mounting Outline Diagram for Bulkhead-Mounted Models ..................8
Figure 2-4a. Typical ProTechTPS Panel Mount Package—Front View ...............10
Figure 2-4b. Typical ProTechTPS Panel Mount Package—Rear View with
Cover ...............................................................................................10
Figure 2-4c. Typical ProTechTPS Panel Mount Package—Rear View without
Cover ...............................................................................................11
Figure 2-4d. Panel Mount Schematic Showing Front Panel A Connection to
Module A and Front Panel C Connection to Module C—Top View. 11
Figure 2-5a. Mounting Outline Diagram for Panel-Mount Models ........................12
Figure 2-5b. Mounting Outline Diagram for Panel-Mount Models ........................13
Figure 2-5c. Panel Cutout Diagram for Panel-Mount Models ..............................14
Figure 2-6. Screw Connection Terminal Block .....................................................19
Figure 2-7. Inside View of ProTechTPS ...............................................................21
Figure 2-8. ProTechTPS Control Wiring Diagram ................................................22
Figure 2-9. Trip Module – Included within Voted Trip Relay Units Only ..............23
Figure 2-10a. Power Supply Field Wiring Routing & Stress Relief Diagram ........23
Figure 2-10b. Configurable I/O Wiring Routing & Stress Relief Diagram ............24
Figure 2-10c. Relay Output Field Wiring Routing & Stress Relief Diagram .........24
Figure 2-11a. Example MPU (Passive Magnetic Pickup Unit) Wiring ..................25
Figure 2-11b. Example Proximity Probe (Active Magnetic Pickup Unit) Wiring
(Internal Power) ...............................................................................26
Figure 2-11c. Example Proximity Probe (Active Magnetic Pickup Unit) Wiring
(External Power, Non-preferred) .....................................................26
Figure 2-11d. Example Eddy Current Probe (Active Magnetic Pickup Unit)
Wiring ...............................................................................................26
Figure 2-12a. Example Standard Discrete Input Wiring (Internal Power Option) 27
Figure 2-12b. Example Standard Discrete Input Wiring (External Power
Option) .............................................................................................27
Figure 2-13a. Example Configurable Input Wiring—Discrete Input (Internal Power
Option) .............................................................................................28
Figure 2-13b. Example Configurable Input Wiring—Discrete Input (External
Power Option) ..................................................................................29
Figure 2-14. Example Configurable Input Wiring—Analog Input .........................29
Figure 2-15. Example Analog Output Wiring ........................................................30
Figure 2-16a. Example Trip Relay Output Wiring ................................................30
Figure 2-16b. Example Trip Relay Wiring (per Module) (Independent Trip Relay)
(Internal Supply) ..............................................................................31
Figure 2-16c. Example Trip Relay Wiring (per Module) (Independent Trip Relay)
(External Supply) .............................................................................31
Figure 2-16d. Example Trip Relay Wiring (Voted Trip Relay Models) .................32
Figure 2-16e. Example Programmable Relay Wiring (Internal Supply) ...............32
Figure 2-16f. Example Programmable Relay Wiring (External Supply) ...............33
Figure 2-17. Power Supply Relationship Diagram ...............................................34
Figure 2-18a. Serial Port Interface Diagram—RS-232 .........................................35
Figure 2-18b. Serial Com Port Interface Diagram—RS-485 ................................35
Figure 2-19. Service Tool Cable/Interface Diagram .............................................35
Figure 3-1. Basic Functional Overview of Independent Trip Relay Models .........39
Woodward iii
ProTechTPS Total Protection System Manual 26501V1
Figure 3-2. Functional Diagram of single ProTechTPS module with Independent
Trip Relay Outputs ...........................................................................40
Figure 3-3. Example TMR Trip Block Assembly Interface ...................................41
Figure 3-4. Basic Functional Overview of Voted Trip Relay Models ....................42
Figure 3-5. Functional Diagram of Single ProTechTPS Module with Voted Trip
Relay Outputs ..................................................................................43
Figure 3-6. Simplex Trip Block Assembly .............................................................44
Figure 3-7. Dual Redundant Trip Block Assembly ...............................................44
Figure 3-8. Discrete Input Example ......................................................................48
Figure 3-9. Analog Input Example ........................................................................49
Figure 3-10. Programmable Relay Output Diagram .............................................50
Figure 3-11. Over-Acceleration Enabling Diagram...............................................52
Figure 3-12. Speed Fail Trip Diagram ..................................................................52
Figure 3-13. Speed Fail Timeout Trip Diagram ....................................................53
Figure 3-14. Response Time Definition ................................................................60
Figure 3-15. Independent Trip Relay Response Time (Typical) Graph ...............61
Figure 3-16. Voted Trip Relay Response Time (Typical) Graph ..........................61
Figure 6-1. Illustration of Response Time Calcualations ......................................79
Figure A-1. RS-232 ...............................................................................................89
Figure A-2.RS-485 2-wire .....................................................................................89
Figure A-3. Network Settings................................................................................90
Figure A-4. Modbus TCP Settings ........................................................................90
Figure A-5. Serial Communication Settings .........................................................91
Figure A-6. Serial Modbus Settings ......................................................................91
Figure A-7. Lantronix RS-232 ...............................................................................92
Figure A-8 Lantronix RS-485 2-wire .....................................................................92
Figure A-9. Overview Screen ...............................................................................93
Figure A-10. Network Menu Screen .....................................................................93
Figure A-11. Serial Settings Menu........................................................................94
Figure A-12. Modem Control Menu ......................................................................94
Figure A-13. Advanced Menu ...............................................................................95
iv Woodward
Manual 26501V1 ProTechTPS Total Protection System
Table 6-3. SIL3 Specifications ..............................................................................78
Table 6-4. MTTF Value.........................................................................................79
Table 6-5. ProTechTPS Response Time .............................................................79
Table 6-6. Environmental Specifications: .............................................................80
DANGER: Indicates a hazardous situation, which if not avoided, will result in death or serious
injury.
WARNING: Indicates a hazardous situation, which if not avoided, could result in death or serious
injury.
CAUTION: Indicates a hazardous situation, which if not avoided, could result in minor or
moderate injury.
NOTICE: Indicates a hazard that could result in property damage only (including damage to the
control).
IMPORTANT: Designates an operating tip or maintenance suggestion.
Woodward v
ProTechTPS Total Protection System Manual 26501V1
vi Woodward
Manual 26501V1 ProTechTPS Total Protection System
Regulatory Compliance
European Compliance for CE Marking
Low Voltage Directive: Directive 2014/35/EU on the harmonisation of the laws of the Member
States relating to the making available on the market of electrical
equipment designed for use within certain voltage limits
ATEX – Potentially Directive 2014/34/EU on the harmonisation of the laws of the Member
Explosive Atmospheres States relating to equipment and protective systems intended for use in
Directive: potentially explosive atmospheres
Zone 2, Category 3, Group II G, Ex nA IIC T4 X
Other European Compliance
Compliance with the following European Directives or standards does not qualify this product for
application of the CE Marking:
RoHS Directive: Exempt from 2002/95/EC of the European Parliament and of the
Council of 27 January 2003 on the restriction of the use of certain
hazardous substances in electrical and electronic equipment. Exempt
per Annex IA of Directive 2002/95/EC referring to "monitoring and
control instruments" within the meaning of Category 9.
TÜV: TÜV certified for SIL-3 per IEC 61508 Parts 1-7, Functional Safety of
Electrical / Electronic / Programmable
Electronic Safety Related Systems
Woodward vii
ProTechTPS Total Protection System Manual 26501V1
Other Compliance
This equipment is suitable for use in European Zone 2, Group IIC environments or Non Hazardous
Locations Only.
Wiring must be in accordance with North American Class I, Division 2, or European Zone 2, Category 3
wiring methods as applicable, and in accordance with the authority having jurisdiction.
A fixed wiring installation is required and a switch or circuit breaker shall be included in the building
installation that is in close proximity to the equipment and within easy reach of the operator and that is
clearly marked as the disconnecting device for the equipment. The switch or circuit breaker shall not
interrupt the protective earth conductor.
Field wiring must be rated at least 85 °C for operating ambient temperatures expected to exceed 50 °C.
For European ATEX compliance on panel mount models, this equipment must be installed in an area
providing adequate protection against the entry of dust or water. A minimum ingress protection rating of
IP54 is required for the enclosure.
Personnel must discharge their electrostatic build up to the cabinet ground point or use an ESD strap
prior to touching the ProTech® interior surfaces if the engine/turbine is operational. The unit is designed to
have one of three modules be removed during operation; however ESD to the remaining operational
modules may cause signal deviations. Signal deviations due to direct ESD may be large enough to result
in the operational module to trip, shutting down the engine since two modules are in a tripped mode.
Signal deviations were noted when ESD testing was done to the Speed pins, the IRIG-B pins, Service
Port pins, and RS-232/RS-485 Modbus communications port pins.
The Service Port (RS-232 communication) is not designed to remain connected during operation except
at servicing & programming intervals. It should not have a cable connected to it other than during
programming & servicing.
This device contains a single cell primary battery. This battery is not to be charged and is not customer
replaceable.
viii Woodward
Manual 26501V1 ProTechTPS Total Protection System
Safety Symbols
Both direct and alternating current
Alternating current
Direct current
Woodward ix
Manual 26501V1 ProTechTPS Total Protection System
Chapter 1.
General Information
Description
The ProTechTPS (Total Protection System) is a safety system that provides specialized overspeed
protection functions plus additional programmable logic and configurable inputs and outputs to
address other safety critical functions.
The ProTechTPS consists of three independent modules whose trip outputs are either independent or
voted in a 2-out-of-3 configuration.
The ProTechTPS includes Alarm, Event, and Trip log functions with time-stamping. Indication that a
test was active at the time of the event are provided on all logs and first-out indications are provided
for Event and Trip logs. Trip response time monitoring and logging is also built into the ProTechTPS.
The ProTechTPS provides various pre-defined and user-definable test features including automated
periodic tests.
There are several ways to interface with the ProTechTPS. The front panel of allows the user to view
current values, and perform certain configuration and test functions. All of the features and most of
the information available from the front panel is also accessible via the Modbus® * interface. Finally,
the Programming and Configuration Tool (PCT) is software that is run on a PC to define configurable
inputs and programmable logic, download log files, and manage settings files.
*—Modbus is a trademark of Schneider Automation Inc.
This product is designed for critical applications and when installed correctly meets API-670, API-612,
API-611, and IEC61508 (SIL-3) standards.
The following table shows the various hardware configurations (mounting options, power supplies,
and trip relay options) available:
5437-1117 Spare Module for 8237-1248 Rev D or later, -1371 Rev B or later
5437-1118 Spare Module for 8237-1249 Rev D or later, -1372 Rev B or later
5437-1115 Spare Module for 8237-1250 Rev E or later, -1373 Rev B or later
5437-1116 Spare Module for 8237-1251 Rev E or later, -1374 Rev B or later
5437-1076 Spare Module for 8237-1248 Rev C or earlier, -1371 Rev A or earlier
5437-1077 Spare Module for 8237-1249 Rev C or earlier, -1372 Rev A or earlier
5437-1066 Spare Module for 8237-1250 Rev D or earlier, -1373 Rev A or earlier
5437-1075 Spare Module for 8237-1251 Rev D or earlier, -1374 Rev A or earlier
Woodward 1
ProTechTPS Total Protection System Manual 26501V1
Applications
The ProTechTPS is designed to be applied as a safety system for any size steam, gas, or hydro
turbine, reciprocating engine, or plant process equipment. This safety PLC’s fast (12 millisecond)
response time, 0.5 to 32 000 rpm speed range, and integrated overspeed and acceleration
detection/protection functionality, make it ideal for application on critical low-speed or high-speed
rotating motors, compressor, turbines or engines. This standalone safety device accepts 10 discrete
or analog inputs per module (30 total) and one speed (MPU or PROX) input (3 total). Each
ProTechTPS module provides 3 programmable relay outputs (9 total) and an analog speed output (3
total) in addition to the trip relay outputs. Configurable logic allows the customization required to meet
specific application requirements to ensure plant protection.
The ProTechTPS utilizes a triple modular redundant architecture and 2-out-of-3 voting logic to
accurately determine unsafe conditions and ensure that no single-point failure will affect system
reliability or availability. With this design, system failures (switches, transducers, modules) are
detected, annunciated, and allowed to be repaired or replaced while the monitored system continues
to operate
on-line.
Alternatively, this standalone safety device can be configured to protect any plant system or device,
and report the system’s device’s status to the plant DCS. The ProTechTPS control’s versatile inputs,
outputs, programming environment, and communications make it ideal as a safety protection device
for use in small applications that could possibly reach an unsafe state or condition and that must
communicate directly to the plant DCS. The ProTechTPS is designed for critical applications where
both personnel safety and unit availability (operation run time) is a concern or necessity.
ProTechTPS Control
Serial
Com. Plant DCS
Trip Header
LS
TS
Trip Valve
Monitor Signal
Actuator
Drain
Inlet Steam
Header
TS Generator
or
Trip Valve Compressor
or
Pump
TS
3 Redundant Speed Signals
TS PS
2 Woodward
Manual 26501V1 ProTechTPS Total Protection System
ProTechTPS Control
Serial
Com. Plant DCS
Trip Header
TS LS
PS
Trip Valve
203 Trip
TS
Monitor Signal
PS Block
TS Actuator
PS
Drain
Inlet Steam
Header
TS Generator
or
Trip Valve Compressor
or
Pump
TS
3 Redundant Speed Signals
TS PS
ProTechTPS Serial
ModBus
Control
Plant DCS
Closed Indication
Control
Valve
Gas
Trip Valve Trip Valve PS
Generator
or
Compressor
or
Pump
TS
Figure 1-3. Typical Gas Turbine Application (Voted Trip Relay Models)
Woodward 3
ProTechTPS Total Protection System Manual 26501V1
The ProTechTPS is certified as an IEC61508 SIL-3 (Safety Integrity Level 3) safety device and can
be applied as a stand-alone IEC61508-based device or within an IEC61511-based plant safety
system.
Figure 1-4. Typical Safety PLC Application (Voted Trip Relay Models)
4 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Chapter 2.
Installation
Introduction
This chapter provides instructions on how to mount and connect the ProTechTPS into a system.
Hardware dimensions, ratings, and jumper configurations are given to allow a customer to mount,
wire, and configure the ProTechTPS package to a specific application.
Electrical ratings, wiring requirements, and options are provided to allow a customer to fully install the
ProTechTPS into a new or existing application.
Unpacking
Before opening the shipping packaging, inspect the shipping container for damage and document any
damage.
Be careful when opening & removing the shipping container. You may retain the original shipping
container for unit storage or return shipping for suggested refurbishment. (See Asset Management
chapter for storage details.)
Be careful when unpacking the ProTechTPS system from the shipping container. The precautions
called out in the Electrostatic Discharge Awareness section should be followed during unpacking,
handling, installation, and operation during maintenance.
Once removed from the shipping packaging, check the device for signs of damage such as a bent or
dented case and loose or broken parts. If damage is found, notify the shipper immediately.
Enclosures
Depending on the model purchased, the ProTechTPS has either a bulkhead-mounted or a panel-
mounted enclosure package.
The bulkhead-mounted enclosure models are designed to be mounted on a wall or skid next to the
turbine and are rated for IP56-based environments. With these models, field-wiring access is through
gland plates located on the bottom of the enclosure. Figures 2-1, 2-2, and 2-3 display the bulkhead
mounted ProTechTPS model’s physical layout and mounting pattern.
The ProTechTPS panel-mounted enclosure models are designed for installation within a control room
panel or cabinet, and by itself, it cannot be bulkhead mounted. Once installed within an IP56 rated
panel or cabinet, the ProTechTPS panel-mounted models are rated for IP56-based environments. A
gasket is attached to the rear side of the package’s bezel to properly seal the ProTechTPS control’s
faceplate & around the mounting studs to a panel. With these models, field-wiring access is located
on the ProTechTPS control’s backside, and a back cover is included to protect wiring terminals after
installation. Figures 2-4 and 2-5 display the Panel-Mount ProTechTPS model’s layout and mounting
pattern.
6 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Figure 2-2b. Bulkhead Schematic Showing Front Panel A Connection to Module A and Front Panel C
Connection to Module C—Top View
Woodward 7
ProTechTPS Total Protection System Manual 26501V1
8 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Removal:
1. Disconnect power from the module to be removed.
2. Verify power removed by observing power LED is OFF.
3. Remove terminal blocks from module terminals.
4. Loosen 4 module retention screws.
5. Remove module by pulling the two handles simultaneously.
4 Retaining Screws
Power LED
Installation:
1. Insert module into slot by pressing firmly on handles. The module has guides to assist in
location.
2. Tighten 4 module retention screws.
3. Install terminal blocks.
4. Apply power and observe that the power LED is ON.
Woodward 9
ProTechTPS Total Protection System Manual 26501V1
Figure 2-4b. Typical ProTechTPS Panel Mount Package—Rear View with Cover
10 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Figure 2-4d. Panel Mount Schematic Showing Front Panel A Connection to Module A and Front
Panel C Connection to Module C—Top View
Woodward 11
ProTechTPS Total Protection System Manual 26501V1
12 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Woodward 13
ProTechTPS Total Protection System Manual 26501V1
14 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Removal:
1. Disconnect power from the module to be removed.
2. Remove 4 back panel retaining screws.
3. Remove back panel.
4. Verify power removed by observing power LED is OFF.
5. Remove terminal blocks from module terminals.
6. Loosen 4 module retaining screws.
7. Remove module by pulling the two handles simultaneously.
Woodward 15
ProTechTPS Total Protection System Manual 26501V1
4 Retaining Screws
Power LED
Installation:
1. Insert module into slot by pressing firmly on handles. The module has guides to assist in
location.
2. Tighten 4 module retaining screws.
3. Install back panel.
4. Install 4 retaining screws.
5. Install terminal blocks.
6. Apply power and observe that the power LED is ON.
16 Woodward
Manual 26501V1 ProTechTPS Total Protection System
HV / HV Models accept:
Input #1: High Voltage Power Source (88–264 Vac/47–63 Hz; 100–150 Vdc) @ 90 W (30 W per
module)
o Nominally AC: 115 Vac / 240 Vac
o Nominally 125 Vdc
Input #2: High Voltage Power Source (88–264 Vac/47–63 Hz; 100–150 Vdc) @ 90 W (30 W per
module)
o Nominally 115 Vac / 240 Vac
o Nominally 125 Vdc
HV / LV Models accept:
Input #1: High Voltage Power Source (88–264 Vac/47–63 Hz; 100–150 Vdc) @ 90 W (30 W per
module)
o Nominally 115 Vac / 240 Vac
o Nominally 125 Vdc
Input #2: Low Voltage Power Supply (18–32 Vdc) @ 90 W (30 W per module)
o Nominally 24 Vdc
Each ProTechTPS module will function normally with power sourced to both or either power supply
input independently, however Woodward recommends using both input power sources to improve
system availability. Please refer to Table 1-1 for available ProTechTPS models.
Each ProTechTPS module requires a power source capable of a certain output voltage and current.
In most cases, this power rating is stated in Volt-Amps (VA). Calculate the maximum VA of a source
by taking the rated output voltage times the maximum output current at that voltage. This value
should be greater than or equal to the VA requirement listed.
Woodward 17
ProTechTPS Total Protection System Manual 26501V1
Shielded Wiring
All shielded cable must be twisted conductor pairs with either a foil or a braided shield. A braided
shield is preferred and highly recommended. All analog & communication signal lines should be
shielded to prevent picking up stray signals from adjacent equipment. Connect the shields as shown
in the control wiring diagram (Figure 2-7). Wire exposed beyond the shield must not exceed 50 mm (2
inches). The shield termination should be done with the shield by opening the braid and pulling the
wires through, not with an added wire. If a wire is used it must be the largest gauge accepted by the
shield lug terminal. The other end of the shield must be left open or grounded through a capacitor and
insulated from any other conductor. Do not run shielded signal wires with other wires carrying large
currents or high voltages. See Woodward manual 50532, EMI Control in Electronic Governing
Systems, for more information.
Installations with severe electromagnetic interference (EMI) may require relay and discrete input
wiring to be shielded, conduits and/or double shielded wire may be needed, or other precautions may
have to be taken. These additional precautions may be implemented in any installation. Contact
Woodward for more information.
Figures 2-8 and 2-9 show the control wiring diagrams for the ProTechTPS system. Refer to Figure 2-
10 for proper routing and stress relief of field wiring entering the ProTechTPS system. Wire tie-wrap
fasteners are provided on each module to assist with I/O wire routing and installation.
Plug-in screw-type terminal blocks are used to connect field wiring to each ProTechTPS module & to
the trip (interposing) relay contacts.
18 Woodward
Manual 26501V1 ProTechTPS Total Protection System
The size of the field wiring to the ProTech system should be between 1.5 and 6 mm² (16 and 10 AWG) for
power supply wiring and between 0.3 and 4 mm² (22 and 12 AWG) for all other I/O wiring. Wires for the
all the pluggable I/O terminal blocks should be stripped at 8 mm (0.3 inch). Torque and screwdriver
requirements are listed below.
The screw lug terminal blocks are designed to flatten stranded wire.
Do not tin (solder) the wire’s strands that terminate at the ProTech
Terminal Blocks. If the wire strands are soldered together, the solder
will cold flow and shrink over time causing the connection to become
intermittent or disconnected.
Screwdriver blade:
0.4 X 2.5 mm (0.016 X 0.10
inch)
Screwdriver available as
Woodward PN 8992-005
Woodward 19
ProTechTPS Total Protection System Manual 26501V1
The ProTechTPS control’s terminal blocks are designed to be removed by hand.
With circuit power & trip (interposing) relay controlled power disconnected, all terminal blocks can be
removed, one at a time by unscrewing their terminal-locking screws and pulling them out of their
sockets by hand.
Field wiring access for bulkhead mounted models is through gland plates located on the bottom of the
enclosure. These gland plates allow users to bore multiple and different sized access holes for conduit entry,
as required. Refer to Figure
2-3 for gland plate location and size. For EMI (electromagnetic interference) reasons, Woodward
recommends that all low-voltage field wiring be separated from all high-voltage field wiring by using separate
conduit and conduit entries into the ProTechTPS enclosure. Woodward also recommends that power wiring
be segregated in the same manner, however LV & HV input power may be routed together.
Field wiring access for panel-mounted models is located on the back of the ProTechTPS enclosure. To
allow proper installation of the unit’s back cover plate, Woodward recommends that all field wiring be
routed from the bottom of the package. The units back cover must be installed. Refer to Figure 2-5 for field
wiring access information. For EMI (electromagnetic interference) reasons, Woodward recommends that
all low-voltage field wiring be separated from all high-voltage field wiring where possible. Woodward also
recommends that power wiring be segregated in the same manner, however LV & HV input power may be
routed together.
20 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Woodward 21
ProTechTPS Total Protection System Manual 26501V1
Figure 2-9. Trip Module – Included within Voted Trip Relay Units Only
Figure 2-10a. Power Supply Field Wiring Routing & Stress Relief Diagram
Woodward 23
ProTechTPS Total Protection System Manual 26501V1
Figure 2-10b. Configurable I/O Wiring Routing & Stress Relief Diagram
Figure 2-10c. Relay Output Field Wiring Routing & Stress Relief Diagram
24 Woodward
Manual 26501V1 ProTechTPS Total Protection System
A passive MPU provides a frequency output signal corresponding to turbine speed by sensing the
movement of a gear’s teeth past the MPU’s pole piece. The closer the MPU’s pole piece is to a gear’s
teeth and the faster the gear turns the higher a passive MPU’s output amplitude will be. (Speed signal
amplitude increase with both speed increase and distance decrease.) The ProTechTPS must sense
an MPU voltage of 1 to 35 Vrms for proper operation. With proper MPU, gear size, and MPU-to-gear
clearance, speed measurement can range from 100 to 32 000 Hz. Standard MPU clearance is
recommended to be 0.25 to 1.02 mm (0.010 to 0.040 inch) from tooth face to pole piece. For
information on selecting the correct MPU or gear size please refer to Woodward manual 82510. Refer
to Figure 2-11a for wiring information.
Proximity and eddy-current probes may be used to sense very low speeds to high speeds (0.5 to 25
000 Hz). The speed probe input voltage must be between 16 and 28 Vdc and output signal be
between 16 and 28 V peak-to-peak for proper speed detection. The voltage for the speed probes
must be from the provided voltage port or have its common referenced (connected) to the provided
common pin for proper operation. See Figures 2-11b thru 2-11c for proximity and eddy-current probe
wiring schematics.
An application may use the same or different types of speed probes (MPU, proximity, eddy-current),
between the three different inputs depending on the specific application’s requirements.
67
68
Magnetic
69 Pickup Unit
+ 70
_ 71
Woodward 25
ProTechTPS Total Protection System Manual 26501V1
+24V
67
Active Probe Configured
68
24V Proximity Probe
69
10K +
+ 70 _
_ 71
Figure 2-11b. Example Proximity Probe (Active Magnetic Pickup Unit) Wiring (Internal Power)
Figure 2-11c. Example Proximity Probe (Active Magnetic Pickup Unit) Wiring (External Power, Non-
preferred)
+24V
67
Active Probe Configured 68
69 Com Eddy Current Probe
10K
+ 70 Out
_ 71 VT
Bently Proximitor
Active Probe Configured Sensor
Figure 2-11d. Example Eddy Current Probe (Active Magnetic Pickup Unit) Wiring
26 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Figure 2-12a. Example Standard Discrete Input Wiring (Internal Power Option)
To Module C
To Module B
To Module A
To Control
Figure 2-12b. Example Standard Discrete Input Wiring (External Power Option)
Woodward 27
ProTechTPS Total Protection System Manual 26501V1
Figure 2-13a. Example Configurable Input Wiring—Discrete Input (Internal Power Option)
28 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Figure 2-13b. Example Configurable Input Wiring—Discrete Input (External Power Option)
Because analog inputs are not fully isolated, take care in their application and maintenance to avoid
“ground-loop” type problems. If interfacing to a
non-isolated device with one of these inputs, the use of a loop isolator is recommended to break any
return current paths, which could result in erroneous readings. Also, if a loop isolator is not used and
the non-isolated field device has a signal (or power) reference to PE ground connection, damage may
occur to the AI. Damage may occur during PE ground bounce or high current transient ground fault
conditions due to large potential differences in the remote PE ground & the local PE ground.
Woodward 29
ProTechTPS Total Protection System Manual 26501V1
Analog Output
One programmable 4–20 mA analog output per module (A, B, C) is available to drive a readout meter
or interface with other controllers or plant DCS’s (distributed control systems). This output is designed
to drive into an impedance between 0 to 500 . Twisted shielded pair wiring must be used. Refer to
the Chapter 3 (Functionality) of this manual for applicable analog output specifications. Refer to
Chapter 3 (Functionality) of this manual for information on how to program and use this analog output
in an application.
Relay Outputs
Two basic ProTechTPS model variations are available depending on the required trip system
architecture: the “Independent Trip Relay” model and the “Voted Trip Relay” model. Either version
also has 3 programmable Relay Outputs per module. Refer to Figure 2-16a for the general locations
for Trip Relay Output wiring in the two models.
Refer to the Chapter 3 (Functionality) of this manual for all applicable relay output specifications.
Refer to Chapter 3 (Functionality) of this manual for information on how to configure and use each
programmable relay output in an application.
Figure 2-16b. Example Trip Relay Wiring (per Module) (Independent Trip Relay) (Internal Supply)
Figure 2-16c. Example Trip Relay Wiring (per Module) (Independent Trip Relay) (External Supply)
Woodward 31
ProTechTPS Total Protection System Manual 26501V1
Figure 2-16d. Example Trip Relay Wiring (Voted Trip Relay Models)
32 Woodward
Manual 26501V1 ProTechTPS Total Protection System
+24V_P (0.5A) 80
ProTechTPS 81
Module P_GND
82
One power supply channel (+24 V_P) is capable of providing 24 Vdc ±10% @ 500 mA maximum
output current, to power external relays. This is supply is used for relay coils driven by the
Independent Trip Relay signals and Programmable Relays. Independent Trip Relay signal
connections can be made through terminals 29 and 30 with terminal 30 as common. Coil Voltage for
Programmable Relays is on terminals 80, 81, and 82 with terminals 81 and 82 as the commons.
Refer to Figure 2-17 for wiring information.
If additional current capability is needed the Voter & Programmable relay connections points may be
used as controlled switch contact connection points with an external power supply. An external supply
may be used instead of the internal supply only for the independent trip relays or programmable
relays as shown in figure 2-16f. The external supply should be referenced to terminal 80 or 81.
Woodward 33
ProTechTPS Total Protection System Manual 26501V1
A second power supply channel (Discrete PWR) is capable of providing 24 Vdc ±10% @ 50 mA
maximum output current, to power the module’s configurable input circuitry (configured as Discrete
Inputs). Power connections can be made through terminal 37, with terminal 38 as the common. This
power supply is sized to provide power for all ten discrete inputs. Refer to Figure 2-17 for information
on the module’s internal power supply relationship.
If additional current capability is needed, the DI wetting voltage may come from an external source. If
an external supply is used it must be an isolated supply.
34 Woodward
Manual 26501V1 ProTechTPS Total Protection System
20 COM
COM
19 Modbus
Master
18 Device
ISOLATED
TXD
RS485 / RS232 17 RXD
PORT RXD
16 TXD
+5V
15
ProTechTPS 14
Module
13
S_GND
Optional termination resistors for RS-485 communication networks are included within the
ProTechTPS control’s internal circuitry, and only require terminal block wire jumper(s) for connection
to a network, for applications requiring these termination resistors. Refer to Figure 2-18b for jumper
connections.
20
19 OPTIONAL
TERMINATION
18 JUMPER - LO
ISOLATED
LO
RS485 / RS232 17
PORT HI
16
+5V
15 OPTIONAL
HI LO COM HI LO COM
TERMINATION
ProTechTPS 14 JUMPER - HI
Module MODBUS MODBUS
13 SLAVE MASTER
S_GND DEVICE DEVICE
The RS-232 serial cable must be disconnected when not in use. The
port is a service port only, it is not designed for permanent
connection.
36 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Chapter 3.
Functionality
The ProTechTPS includes all the functionality of the original ProTech 203 Overspeed Protection
system, but adds additional inputs, outputs, protection features, and configurable software to allow
the ProTechTPS to meet the requirements of a Total Protection System.
Features
Fault Tolerant Design
Each ProTechTPS consists of three independent modules referred to as A, B and C. Each module
accepts one speed input, ten configurable analog / discrete inputs, and three dedicated function
discrete inputs. Each module also has three configurable relay outputs and one analog output for the
sensed speed output.
The ProTechTPS comes in two basic models – the “Independent Trip Relay” models and the “Voted
Trip Relay” models. This relates to the trip signal configuration. The differences between these two
models and their application are discussed in detail in the Product Models section of this chapter.
Each of the three ProTechTPS modules A, B, and C are fully fault isolated from each other, so that
faults in one module do not affect other modules. The modules do not share input or output
information but each module is aware of the status of the others.
Normally, each module is configured to operate the same exact application program and with the
same exact configuration settings. Monitoring logic is used to validate that all modules are running the
same exact application program as the other modules, and the monitoring logic will issue an alarm if it
detects that one or more of the modules are not running the exact same application program. Thus if
program changes are downloaded to a module, or a change to configuration setting is made to one
module, while the ProTechTPS is in normal operation and the turbine or equipment is on-line and
operating normally, each module will issue an alarm. Once all application programs are the same
again and all configuration settings are the same again, this alarm can be reset.
Some exceptions to this rule are permitted. The user-defined names can be different in each module
to allow the specification of unique tag names. Since these may be different, this information is not
checked by the Configuration Compare function and is not copied between modules by the Copy
Configuration function. In special cases that require a different application to be installed in each
module, the Configuration Compare alarm can be disabled.
The ProTechTPS is a SIL-3 (according to IEC-61508) triple modular design that allows users to easily
replace any of its modules (A, B, C) while the monitored equipment / turbine is on-line and operating
normally. This is also referred to as ‘hot replacement’. The unit’s backplane plug-and-operate
structure and its module-to-module program copying function enhance ease of replacement.
Programming/Configuring Overview
Each ProTechTPS module includes preset overspeed, over-acceleration, alarm latch, and trip latch
functionality and can be custom configured to meet a specific application through a module’s front
panel or the provided Programming and Configuration Tool (PCT).
A custom application program is required for use of any of the ProTechTPS configurable inputs,
outputs and related functionality. A software-based PCT is included with each ProTechTPS that can
be loaded onto a computer, and used to:
Create and change custom application programs
Change overspeed and over-acceleration functionality settings
Save application and configuration settings to a file
Download application and configuration settings to each ProTechTPS module
Woodward 37
ProTechTPS Total Protection System Manual 26501V1
Upload application and configuration settings from a ProTechTPS module
Upload and view stored logged files from a ProTechTPS module
Configuration and program logic changes are allowed while the service tool is connected (on-line) as
long as the module is in a tripped state. Configuration and program logic changes can also be made
off-line (service tool not connected) by editing a settings file that is loaded into the module later.
Normally, each ProTechTPS module is configured to operate the same exact application program
and with the same exact configuration settings. Program differences between modules are detected
and alarmed.
Although the overspeed and over-acceleration functionality can be programmed from either the PCT
or a module’s front panel, changes/additions to a custom application program can only be changed
via the PCT. Entry of the correct “configuration” level password is required to perform any program
changes or download a program into a module.
Refer to Chapters 9 and 10 of this manual for more information on performing program changes.
Security
The ProTechTPS utilizes two password levels, a Test Level Password and a Config Level Password.
The Programming and Configuration Tool (PCT) and Front Panel use the same passwords.
The Config Level Password provides access to any function that requires the Test Level Password.
Additionally, the Config Level Password is required to:
Change any program setting
Download an application program file into a module
Reset the Peak Speed/Acceleration Log.
Change the Config Level Password
Each of these passwords meets NERC (North American Electric Reliability Corporation) cyber
security requirements.
Module-to-Module Communications
An isolated communications bus is used between modules to:
Copy an application program from one module to another module
Compare module application programs for differences
Verify the health and state of the other modules before allowing a module test to be performed
Pass a “module test token” between modules when performing a “Periodic Overspeed Test”
routine
Product Models
Two basic ProTechTPS models are available depending on the required system architecture and
related output signal(s).
The ProTechTPS “Independent Trip Relay” models consist of three independent modules that
each accept one speed input and ten configurable analog/discrete inputs, then output two
redundant trip commands.
The ProTechTPS “Voted Trip Relay” models consist of three independent modules that each
accept one speed input and 10 configurable analog/discrete inputs, and whose trip output
commands are then voted in a 2-out-of-3 fashion to create the 2-out-of-3 trip output command.
38 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Both of these models can be purchased with different mounting options (bulkhead mount or panel
mount) and different input power supply options (two high-voltage power supply inputs or one high-
voltage and one low-voltage power supply input). Each ProTechTPS model can be configured to
function for energize-to-trip and de-energize-to-trip applications. The de-energize-to-trip functionality
is implemented such that a complete loss of power to the module results in a trip of that module. The
energize-to-trip functionality is implemented such that a complete loss of power to the module does
not result in a trip of that module.
Woodward 39
ProTechTPS Total Protection System Manual 26501V1
+24V Auxiliary
Isolated
24VDC or HVAC/DC Power Power
Supply
Reset
Trip Relay Trip Relay Output 1
Start Start / Reset
Logic Trip Relay Trip Relay Output 2
Override
Config Input #7
Front Panel Interface
Config Input #8 - Display
- Keypad
Config Input #9 - LEDs
Config Input #10
Figure 3-2. Functional Diagram of single ProTechTPS module with Independent Trip Relay Outputs
40 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Woodward 41
ProTechTPS Total Protection System Manual 26501V1
Speed Input
Module
Configurable A
Analog/Discrete
Inputs
Speed Input
Module
Configurable C
Analog/Discrete
Inputs
42 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Config Input #7
Front Panel Interface
Config Input #8 - Display
- Keypad
Config Input #9 - LEDs
Config Input #10
Figure 3-5. Functional Diagram of Single ProTechTPS Module with Voted Trip Relay Outputs
Woodward 43
ProTechTPS Total Protection System Manual 26501V1
Single ProTechTPS
HVAC/DC Module
24V
24VDC or HVAC/DC
Reset
Start / Trip Relay
Start Reset
Trip Relay
Override Logic
Freq
Gen
MPU or Prox
Compare
Set PT.
Trip Header
Configurable
Trip & Alarm
Relay Logic
Prog Relay
Prog Relay
Prog Relay
Hand Hand
CAN Port
Valve Valve
Single ProTechTPS
HVAC/DC Module
24V
24VDC or HVAC/DC
Freq
Gen
MPU or Prox
Set Pt.
Compare
A B
Configurable
Trip & Alarm
Relay Logic
Prog Relay
Prog Relay
Prog Relay
CAN Port
Single ProTechTPS
HVAC/DC Module
24V
Drain
24VDC or HVAC/DC
Reset
Start / Trip Relay
Start Reset
Trip Relay
Override Logic
Freq
Gen
MPU or Prox
Compare
Set Pt.
Configurable
Trip & Alarm
Relay Logic
Prog Relay
Prog Relay
Prog Relay
44 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Table 3-2. Voted Trip Relay Output Specifications
Power Supplies
Each ProTechTPS system consists of three separate internal modules (A, B, C), and each of these
three modules accept two input power sources (for redundancy). Depending on the ProTechTPS
model purchased, the internal modules will accept either two high-voltage (HV) input power sources
or one HV input power source and one low-voltage (LV) input power source. For reliability purposes,
each ProTechTPS module will function normally with power sourced to both or either power supply
input.
Note 1: The input current specifications are for 1 module, measured with the other power supply input
disconnected. With both power supply inputs connected, input current will never exceed the
maximum specification, however the two power supplies do not load share internally.
Woodward 45
ProTechTPS Total Protection System Manual 26501V1
When configured as an MPU signal input, special MPU open-wire detection circuitry is used to
validate that the MPU is properly connected before turbine operation, and special loss-of-speed
detection logic is used to validate speed sensor functionality during turbine operation. Depending on
the module’s program settings a loss of speed signal or open-wire detection will result in a trip or
alarm condition.
When configured as an MPU signal input, the speed sensor circuitry will sense MPU signals within
the voltage range of 1—35 Vrms.
When configured as a proximity (active) probe input or eddy current probe input, a 24 V power supply
is provided to power the probe, but an isolated external supply may be used instead, if referenced
correctly.
The Number of Gear Teeth and Gear Ratio are configured to convert the frequency input from the
speed probe to the unit speed.
The Number of Gear Teeth and Gear Ratio must match the actual unit
hardware or speed sensing and all associated protection and
functionality will not work correctly.
Refer to Chapter 2 of this manual for related speed sensing input installation information.
46 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Each speed input is designed to operate from its own speed probe.
Do not connect a speed probe to more than one input. This will
compromise the ability of the ProTechTPS to sense open wire
(passive mode only) and interfere with the minimum amplitude
sensitivity and accuracy.
When using open collector probes, verify that the signal is being
read properly at higher frequencies (>10 kHz). Long cable lengths
can significantly reduce the signal strength at higher frequencies. In
this case, add an external pull-up resistor of approximately 2 k (0.25
W) from terminals 70 to 69 and verify that the signal is read properly
by the ProTechTPS.
Woodward 47
ProTechTPS Total Protection System Manual 26501V1
Start
This contact input is used as part of the Start Logic “Speed Fail Timeout Trip” function. When this
function is Enabled, closing the Start contact will start the Speed Fail Timeout timer. This is an edge
triggered signal and re-selecting Start will re-start this timer. Refer to the Start Logic section below for
additional details.
Reset
This contact is used to clear module trips and alarms.
Speed-Fail-Override
This is used as part of the Start Logic “Speed Fail Trip” function. When this function is Enabled,
closing the Speed-Fail-Override contact overrides the Speed Fail Trip. This is a level sensitive trigger
so the contact must remain closed to prevent the Speed Fail Trip until speed is greater than the
speed fail setpoint. Refer to the Start Logic section below for additional details.
Configurable Inputs
Each module has 10 configurable analog/discrete inputs. Each input can be configured as Not Used,
Analog Input, or Discrete Input. User defined names can be associated with each input.
48 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Analog Input Configuration Example
When configured as an analog input, the channel accepts a 4–20 mA analog signal. The accuracy of
the analog input is better than ±0.5% of 20 mA over the temperature range of the product.
Engineering units and ranges are assigned to the 4–20 mA current input values. Additionally, low-low
(LoLo), low (Lo), high (Hi), and high-high (HiHi) levels can be defined. The Boolean outputs
associated with these levels for the analog input can be used in the user configured software. There
is also a Range Error output to indicate that the Input is outside a 2–22 mA range.
INPUT #
4-20 mA
INPUT
Input
Analog Analog Input #
MODE
Input
24 Char.
NAME
Input Name
Input 4mA
4
Value
20 Input 20mA
Value
7 Char.
Unit Name Unit
0 HiHi HiHi
0 Hi Hi
0 Lo Lo
0 LoLo LoLo
Range Err
KEY:
PROGRAMMABLE
SETTINGS
The Analog scaling must match the actual unit hardware, or the
signal sensing and all association protection and functionality will
not work correctly.
Number of Channels 10, user configurable for individual analog or discrete input mode
Signal Cable Length Must be limited to 1000 ft / 305 m (low capacitance
16 AWG / 1.3 mm²)
Woodward 49
ProTechTPS Total Protection System Manual 26501V1
Table 3-13. Analog Input Mode
50 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Table 3-15. Programmable Relay Output Specifications
Number of Channels 3
Output Type SPST Solid-state, Normally Open
Current Rating 1A
Voltage Rating 24 V (32 V max)
Isolation 500 Vac from output to chassis and output to all other circuits
Signal Cable Length Must be limited to 1000 ft / 305 m (low capacitance
16 AWG / 1.3 mm²)
Analog Output
A single 4–20 mA output is provided on each module to indicate the speed sensed by that module.
The 4–20 mA range can be configured to any speed range desired. The accuracy of the analog
output is better than ±0.5% of 20 mA over the temperature range of the product.
Number of Channels 1
Output Type 4–20 mA, isolated
Max Current Output 25 mA
Accuracy ±0.1% at 25 °C, ±0.5% over temperature
Resolution 12 bit
Response Time < 2 ms (2 to 20 mA)
Min Current Output 0 mA
Min Resistive 0
Max Resistive Load 500 at 25 mA
Isolation 500 Vac from output to chassis and output to all other circuits
Signal Cable Length Must be limited to 1000 ft / 305 m (low capacitance 16 AWG / 1.3 mm²)
Shielded twisted pair cable is required when connecting to the analog outputs.
The ProTechTPS senses speed and then compares the sensed speed to its programmed overspeed
trip setpoint to detect an overspeed condition and generate a trip command.
The ProTechTPS derives acceleration from the sensed speed and then compares the sensed
acceleration to its programmed over-acceleration trip setpoint to detect an over-acceleration condition
and generate a trip command. The ProTechTPS control’s acceleration detection function can be
configured to be enabled or disabled, or only enabled above a certain speed setpoint, depending on
the specific application’s requirements. The over-acceleration trip range is configurable from 0 to 25
000 RPM/s.
Peak speed and peak acceleration are tracked and logged for every overspeed and over-acceleration
occurrence, the last 20 occurrences logged and can be viewed from a front panel or loaded to a
computer via the ProTechTPS Programming and Configuration Tool (PCT).
Woodward 51
ProTechTPS Total Protection System Manual 26501V1
Trip Area
Overspeed Setting
(110%)
Max Turbine
Acceleration Setting
Trip Area
Rated Speed
(100%) 0 500
Turbine Speed Rate of Increase
(rpm/second)
Start Logic
The ProTechTPS control’s failed speed signal detection logic is used to sense no/zero speed and
issue a trip command. However, before a prime mover is started and as its speed gear begins to turn,
magnetic speed probes output a zero rpm signal until the speed exceeds the probe’s minimum
frequency. Two different start logic functions are available to use within the ProTechTPS to override
failed speed signal detection logic and allow the prime mover to be started. Either, both, or neither of
these methods can be selected. There is also an alarm that can be enabled to indicate any time the
Speed is below the Speed Fail Setpoint.
For example, if there is a failure in the speed probe before the contact is opened, the Speed Fail Trip
function will detect the missing speed signal and trip the module.
52 Woodward
Manual 26501V1 ProTechTPS Total Protection System
The Speed Fail Timeout trip is cleared by the reset function (the trip
and alarm reset function, not the reset input to the timer in the
diagram below), even if speed is still below the Speed Fail Setpoint.
The start signal is generated by selecting the START button on the front panel of a module or by
closing the predefined Start contact input. The start signal is edge triggered and re-selecting Start will
reset the timer.
Timer
Speed -
Reset
Speed Fail Threshold + Speed ok
When the turbine is ready to be started, the Speed fail timer is started by pressing the start key, or by
momentarily closing the start discrete input. The timer expires when it reaches the Speed fail timeout
value. If speed does not exceed the Speed fail set point before the timer expires, the unit trips.
If the unit is being restarted after a normal rolldown (that is, there was no trip), the unit does not
require a reset. The Speed fail trip is overridden because the Speed fail timer is cleared whenever
speed exceeds the Speed fail set point. The Speed fail timer should be started by the operator when
the turbine is ready to be started again.
For the speed fail timeout trip function to provide the intended fault
detection, Start must be selected when the turbine is to be started.
The timer can only be started when speed is below the Speed Fail
Setpoint. Selecting Start has no effect if speed is above the Speed
Fail Setpoint.
Configurable Logic
The ProTechTPS provides configurable, or user-definable, logic to implement custom
safety/protection and test programs. This can be used in conjunction with the configurable inputs and
user-definable alarms and trips to monitor values such as lube oil pressure, vibration, trip manifold
status, and provide parameter monitoring functions. Configurable logic is also used to implement the
user-defined test functionality. It is possible to generate (and reset) module trips, alarms, or events
and to use the associated logs and trip cycle time monitoring as part of the safety system test
validation.
The logic unit provides configurable logic that allows the user to define how the input signals are used
in detecting an unsafe condition and generating a trip signal.
The user is responsible to validate that the configured logic unit's input-to-output behavior performs
as expected, with the intent of confirming the following:
Verify that the logic unit was configured as intended;
Verify that the documentation for the logic unit has been correctly understood and applied;
Verify that the information presented to the user by the Programming and Configuration Tool
(PCT) is correct.
Functional Examples
Test Routines
Each ProTechTPS module provides a variety of test routines to support common test requirements.
The ProTechTPS also supports 3 User-defined Tests.
In general, a test may not be started if any other module is tripped or in test or if the current module is
tripped or in test. Also, tests will be aborted if another module trips. One exception to these rules is
the Temporary Overspeed Trip Setpoint which can be applied to multiple modules or if another
module is tripped. The other is the Lamp Test which can be applied to any module at any time without
a password. If a test is not permitted, or aborted, messages displayed on the front panel explain the
cause.
Any test may be initiated (or cancelled) from the ProTechTPS Front Panel. Modbus provides
commands to initiate the Auto Speed Test or any of the User-defined Tests. User-defined Tests can
be started through configurable logic – so a discrete input might be defined to initiate a test. Finally,
there is a Periodic Overspeed Test function that will automatically run tests at a user-defined interval.
54 Woodward
Manual 26501V1 ProTechTPS Total Protection System
The Temporary Overspeed Setpoint is designed to allow users to easily test the module’s overspeed
function at level lower than the normal overspeed setting or to test the overspeed function of a
mechanical bolt or other overspeed protection system at a higher speed that the normal overspeed
trip setting.
An alarm is generated when this test is enabled. Also, there is a Temporary Overspeed Trip Timeout
feature that prevents an operator from “forgetting” to disable this test. The timeout can be configured
from 0 to 30 minutes. When the test is enabled the timer starts, if it reaches the timeout value, the test
is automatically aborted.
Once the module is in its tripped state, this test is disabled and the module’s overspeed setpoint is
returned to its normal setting.
When the test is initiated, the frequency generator automatically starts at 100 rpm below the
overspeed setpoint. Then the operator can adjust the simulated speed up or down from the front
panel of the ProTechTPS.
When the overspeed trip occurs, it is logged in the modules’ trip log and noted as a test.
An alarm is generated while this test is enabled. Also, there is a Simulated Speed Timeout feature
that prevents an operator from “forgetting” to disable this test. The timeout can be configured from 0
to 30 minutes. When the test is enabled the timer starts, if it reaches the timeout value, the test is
automatically aborted. The operator can abort the test at any time.
Woodward 55
ProTechTPS Total Protection System Manual 26501V1
When the overspeed trip occurs, it is logged in the modules’ trip log and noted as a test.
To initiate the Auto Simulated Speed Test via Modbus, the Initiate Auto Speed Test command
(Modbus address 0:0102) must be followed by the Confirm Auto Speed Test (Modbus address
0:0101) within 10 seconds. The intent of the confirmation is to prevent an erroneous signal from
initiating a test. The test can be aborted from either the front panel or via Modbus.
This automated test is applied to all three modules. First, the test will be performed on the A module,
and when the overspeed trip occurs, it is logged in the modules trip log and noted as a test. Then, the
A module is automatically reset and the B module is tested. When the B module test is completed,
the C module is tested. In this way, periodic testing is performed automatically on a regular basis with
no operator intervention.
The operator can disable the periodic test from the front panel of the module. When the Periodic test
is Disabled, or if any module is in trip or test, the Time Remaining Until Next Test will be prevented
from counting below 1 hour. If the timer is already below 1 hour it will be increased to 1 hour. When
Enable Periodic Test is selected and no modules are tripped or in test, this function is removed.
Configuration and Management of the Periodic Overspeed Test can only be done through Module A
only.
User-defined Test
Each module supports three user-defined test latches in the configurable logic. These latches allow
the users to configure custom test routines as needed to test their system.
These user-defined tests are intended to support automated tests of such systems as trip manifolds,
parameter monitoring functions, or other user-specific systems. The associated logic may be simple
or complex depending on the nature of the system to be tested.
These tests may include tripping a single module and checking the performance of a single channel
in a trip manifold using the trip cycle time monitoring functions, and then resetting the module.
All the test logic must be programmed with the configurable logic. The User-defined Test latches are
intended to initiate the tests, to provide the handshaking between modules, and to signify and
manage the end of the test including an aborted test.
The logic behind the User-defined Test must be validated by the user
for all possible modes of operation including normal test, test
failure(s), or test abort.
These latches share some of the same properties as the implemented test routines. A test cannot be
initiated if any other module is tripped or any other test routine is active. User-defined tests can be
initiated from the front panel (with password), via Modbus (with confirmation), or through configurable
logic (which allows connection to any Boolean value including Discrete Inputs).
An alarm is associated with each test latch. Additionally, there is a Timeout feature associated with
each User-defined Test latch that prevents an operator from “forgetting” to disable this test. The
timeout can be configured from 0 to 30 minutes (1800 seconds) with 1 second resolution. When the
test is enabled, the timer starts—if it reaches the timeout value, the test latch is automatically reset.
The test latches can be reset from the configurable logic, or the front panel, or via Modbus.
56 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Reset Function
The Reset Function is associated with all of the following latches. A Reset can be generated by pressing
the reset key on the front panel, from the pre-defined reset contact input, via Modbus, or from the user-
defined “Configurable Reset Source”.
It is possible to configure one Discrete Input to function as a Resettable Trip input where the Reset
Function will clear the associated trip even if the contact is still open. This is used in cases where the
ProTechTPS trip must be cleared to reset a trip system which feeds back a trip status that trips the
ProTechTPS.
Alarm Latch
An "alarm" refers to an action of the ProTechTPS module to bring some condition to the attention to the
user. When any of the Alarm Latch inputs becomes true, the output of the alarm latch is set TRUE. The
yellow ALARM light is illuminated on the front panel. By default, the Configurable Relay #1 is connected
to the Alarm latch (but this can be changed with the Programming and Configuration Tool (PCT)
software). Each Alarm Input is individually latched, and those latched outputs are available on Modbus.
The individual latches are reset by the trip reset function if the input is false. The alarm latch output
remains TRUE until the reset function occurs and all inputs are false.
Note: The user can define the Name associated with each user-defined Alarm.
Trip Latch
In almost every case, the ProTechTPS and associated trip system will be designed such that two
modules must be issuing a trip command before the unit will be tripped. This is referred to a 2-out-of-3 (2-
o-o-3) trip scheme. In the “Independent Trip Relay” version of the ProTechTPS, the trip action of each
module may put part of the trip system into a tripped state and at least two modules must be tripped to
trip the unit. In the “Voted Trip Relay” version of the ProTechTPS, at least two modules would have to be
in the tripped state for the voter relay to go to its tripped state.
Woodward 57
ProTechTPS Total Protection System Manual 26501V1
A "trip" of the module refers to the action of the ProTechTPS module changing the state of its Trip
output. When any of the Trip Latch inputs becomes true, the output of the trip latch is set TRUE. The
red TRIPPED light is illuminated on the front panel. The module trip relays are put in the trip state
(which could be configured as energized or de-energized). Each Trip Input is individually latched, and
those latched outputs are available on Modbus. The individual latches are reset by the reset function if
the input is false. The first input to set the Trip latch, or First Out (FO), is also latched. This first out
indication is available in the trip log and on the Modbus. The Trip latch output remains TRUE and the
First Out indication remains unchanged until the reset function occurs and all inputs are false.
The user can reset a trip by pressing a button on the unit's front panel, or by activating a discrete
input that is dedicated to the reset function.
Event Latches
In each module, three Event Latches are provided. These are to be used in conjunction with the user-
defined software and can be used to log any desired event. The latch is structured like the Trip Latch.
For a given Event Latch, when any of the Event Latch inputs becomes true, the output of the Event
latch is set TRUE. Each Event Input is individually latched, and those latched outputs are available on
the Modbus. The individual latches are reset by the reset function if the input is false. The first input to
set the Event latch, or First Out (FO), is also latched. This First Out indication is available in the Event
log and on Modbus. The Event latch output remains TRUE and the First Out indication remains
constant until the reset function occurs and all inputs are false.
Each event latch provides 25 user-configurable Inputs. The user can define the Name associated with
each user-defined Event.
58 Woodward
Manual 26501V1 ProTechTPS Total Protection System
System Logs
Each Module in the ProTechTPS logs (saves to memory) all trips, alarms, events, trip cycle times, and
overspeed events. Peak speed and acceleration are also logged. The logs can be viewed from the front
panel of the ProTechTPS or from the PCT tool. With PCT tool, the Configuration Error Log can also be
viewed. The logs can be exported from the PCT tool.
The logs are stored in non-volatile memory so loss of power to the ProTechTPS will not affect this
information. The log functions use scrolling buffers that keep the most recent data. The individual log
sizes are described in the following descriptions. Logs can be cleared from the front panel with the
appropriate password. The Test Level Password is needed to Reset All Logs except of the Peak
Speed/Acceleration Log. The Config Level Password is required to Reset the Peak Speed/Acceleration
Log.
Overspeed/Acceleration Log
Any time an overspeed or over-acceleration event occurs, the date and time of the trip, the speed and
acceleration values at the trip time, and the maximum speed and acceleration will be recorded. If the trip
occurred during testing, this will also be noted in the log. The log will save the last 20 overspeed or over-
acceleration events.
Trip Log
The module logs the last 50 trips. The log holds the trip description, the date and time of the trip, whether
it was the “first out” trip, and whether the module was performing a test when the trip occurred.
Alarm Log
The Alarm Log stores the last 50 alarms. The log holds the alarm description, the date and time of the
alarm, and whether the module was performing a test when the alarm occurred.
The Maximum Cycle Time for each event can be specified as 1 to 60 000 ms. If this time is exceeded, an
alarm will be generated. If the event has not occurred in 10x this maximum cycle time (up to a maximum
of 60 seconds), then the trip cycle time will be set to 60 seconds.
Event Logs
Three event logs are provided. Each log records events seen by Event Latches 1, 2, and 3, respectively.
The last 50 events on each Event Latch are logged. Each Event Latch has 25 inputs. Event Latches
inputs can be configured to record any Boolean variable and associate a 24-character user-defined name
with that event.
No operator intervention via the operator interface is required for the logic unit to perform the safety
functions.
Note 1: See the following charts for measured response time. The response time specifications
are valid for measured frequencies of 2 kHz and higher. For this reason, it is highly
recommended that the user use speed wheel gearing that provides the ProTech with a
frequency of at least 3 kHz for the normal operating speed. The internal frequency is calculated
from rpm and number of gear teeth:
60 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Analog Output
The response time of the analog output is less than 10 ms measured from a change in speed to a
change in the output current.
Independent Trip Relay Response
Time
25.00
20.00
Response Time (ms)
15.00
Ind Trip Output
10.00
5.00
0.01 0.1 1 10
Freq (kHz)
Voted Trip Relay Repsonse Time
35.00
30.00
Response Time (mS)
25.00
20.00
Voted Trip Output
15.00
10.00
5.00
0.01 0.1 1 10
Freq (kHz)
Woodward 61
ProTechTPS Total Protection System Manual 26501V1
Chapter 4.
Modbus Communications
Modbus Communications
The ProTechTPS can communicate with plant distributed control systems and/or CRT based operator
control panels through three Modbus communication ports (one port per module). Each of the three
modules (A, B, & C) has a serial port for Modbus communications. These ports support RS-232 or
RS-485 communications using a standard Remote Terminal Unit (RTU) Modbus transmission
protocol. Modbus utilizes a master/slave protocol. This protocol determines how a communication
network’s master and slave devices establish and break contact, how a sender is identified, how
messages are exchanged, and how errors are detected.
Since each module has its own Modbus port, and since each module is fully isolated from the other
modules, each Modbus port provides its module’s sensed information only (speed, analog inputs,
etc.).
Number of Ports 1
Comm Type RS-232/RS-485, user selectable
Termination Resistor RS-485 on board, terminal block selectable
Isolation 500 Vac from output to chassis and output to
all other circuits
Signal Cable Length Must be limited to 1500 ft / 305 m (low
capacitance 16 AWG / 1.3 mm²)
Monitor Only
Each of the three Modbus communication ports is designed to continually output all Boolean and
analog read information, and can be configured to accept or ignore “write” commands, depending on
the specific application’s requirements. This allows the ProTechTPS to be monitored but not
controlled from any external device.
Once a Modbus port’s “Enable Write Commands” setting is configured “No”, the respective
ProTechTPS module will not accept “write” commands from an external master device (DCS, etc.).
For security purposes, the option to ignore “write” commands can only be enabled or disabled with a
configuration-level password.
To ensure that a Modbus based test command is valid, both “Initiate Test” and “Confirm Test”
commands must be received to initiate a test routine. A Confirm must be received within 10 seconds
or the sequence must be re-initiated. The ProTechTPS is designed to allow only one module to be
tested at a time. Thus a module will only accept an Initiate Test command and perform the requested
test if all three modules are healthy, not tripped, and not in a test mode.
62 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Modbus Communication
Each ProTechTPS Modbus communications port is designed to function as a slave device on a
Modbus network using the industry-standard Modbus RTU (remote terminal unit) transmission
protocol. For more information on Modbus networks and the RTU transmission protocol, refer to
Modbus Protocol Reference Guide PI–MBUS–300 Rev. J.
A Modbus function code tells the addressed slaves what function to perform. The Table 4-2 lists the
function codes supported by the ProTechTPS:
As a slave Modbus device, the ProTechTPS is not responsible to sense or annunciate Modbus link
communication errors. However, for troubleshooting purposes, the ProTechTPS will display a “Link
Error” message in its “Monitor Modbus” screen if a Modbus transaction request is not received within
its five-second time-out period. This error message is automatically cleared when Modbus
communications are re-established.
Port Adjustments
Before the ProTechTPS can communicate with the master device, the communication parameters
must be verified to match the master device’s protocol settings. For security purposes, these
parameters can only be set in the module’s Configuration mode.
Parameter Range
Mode: RS-232 or RS-485
Baud Rate: 19200 TO 115200
Comm Parity: NONE, ODD or EVEN
Slave Address: 1 - 247
Enable Write Commands: Yes or No
All values that can be addressed by Modbus are considered discrete and numeric. The discrete
values are a 1-bit binary on or off value, and the numeric values are 16 bit values. Discrete values are
sometimes referred to as coils or digitals, and numeric values are referred to as registers or analogs.
All read/write registers are interpreted by the ProTechTPS as signed 16-bit integer values.
Since Modbus can only handle integers, values that require a decimal point in the Modbus Master
Device are multiplied by a scaling constant before being sent by ProTechTPS. See the Modbus list
for the scaling used on each analog parameter.
Woodward 63
ProTechTPS Total Protection System Manual 26501V1
Once a Modbus port’s “Enable Write Commands” setting is configured “Yes”, the respective
ProTechTPS module will accept “write” commands from an external master device (DCS, etc.).
Speed/user tests must be requested by first setting the Initiate bit, followed by a setting the confirm
bit. If the Confirm bit is not set within 10 seconds after the initiate bit is set, then the test will not be
requested.
Note that the confirm-initiate addresses are in reverse order so that an initiate followed by a confirm
cannot be executed by a single write command. Both bits must be set to 0 before starting the initiate -
confirm sequence.
With the Modbus protocol, analog values are transmitted as 16-bit integer values ranging from –
32767 to +32767 (if signed) or 0 to 65535 (if unsigned). Since Modbus can only handle integers,
values that have a decimal point are multiplied by a constant before being sent by Modbus. For
example, these input registers may be listed as the Modbus value `x100’ within the listed parameter
table. Some values, like the Timer values, are sent using more than one register. The available
Analog read registers, units (scaling), and range are listed in Table 4-3.
64 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Table 4-3. Boolean Write Addresses (Code 05)
ADDRESS DESCRIPTION
0:0001 Reset
0:0101 Confirm Auto Speed Test
0:0102 Initiate Auto Speed Test
0:0103 Abort Auto Speed Test
0:0201 Confirm User Defined Test 1
0:0202 Initiate User Defined Test 1
0:0203 Abort User Test 1
0:0301 Confirm User Defined Test 2
0:0302 Initiate User Defined Test 2
0:0303 Abort User Test 2
0:0401 Confirm User Defined Test 3
0:0402 Initiate User Defined Test 3
0:0403 Abort User Test 3
Woodward 65
ProTechTPS Total Protection System Manual 26501V1
Table 4-4. Boolean Read Addresses (Code 02)
66 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Table 4-3 (continued). Boolean Read Addresses (Code 02)
Woodward 67
ProTechTPS Total Protection System Manual 26501V1
Table 4-4. Analog Read Addresses (Code 04)
68 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Chapter 5.
Troubleshooting
Many troubleshooting features are available from the front panel of each module. In general, the
following high level approach can be used to troubleshoot the ProTechTPS control.
The entry point for troubleshooting the ProTechTPS is the state of the three LEDs on lower part of the
front panel. The Trip Log and the Alarm Log can also be viewed from the front panel. The service tool
also provides more detailed information in the log pages.
TRIPPED LED
The TRIPPED LED indicates the state of the trip latch.
Unlit - Unit not tripped or the module is not powered.
Red – unit tripped, press VIEW button below the LED to see the trip log log or navigate to the
Monitor Trip Latch screen to see the active status on each trip input.
ALARM LED
The ALARM LED indicates the state of the alarm latch.
Unlit – no alarms or the module is not powered.
Yellow – active alarms, press VIEW button below LED to see the alarm log or navigate to the
Monitor Alarm Latch screen to see the active status on each alarm input.
Woodward 69
ProTechTPS Total Protection System Manual 26501V1
I/O Troubleshooting
Problem or diagnostic Possible Cause Suggested Actions
indication
Power Supply Inputs not Wiring fault, terminal block Verify wiring and terminal block
working properly. Power loose. connections.
supply input alarm present.
Power source breaker or fuse Verify breaker or fuse.
open.
Only one power supply is On the front panel, press the VIEW button
connected. under the ALARM LED and check for
Power Supply 1 or 2 Fault.
Power supply input out of Check input voltage level and verify it is
range or insufficient rating. within acceptable range per electrical
specifications. Also check that power
supply has appropriate rating to power the
ProTechTPS.
Speed Input not working Wiring fault, terminal block Verify wiring and terminal block
loose. connections.
Signal level. Verify that the input signal levels are within
the electrical specifications. Also verify
shield connections.
Signal source not working Check signal level and verify it is within
correctly or not within acceptable range per electrical
acceptable electrical specifications.
specifications.
70 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Problem or diagnostic Possible Cause Suggested Actions
indication
Configurable Input - Wiring fault, terminal block Verify wiring and terminal block
Discrete input not working loose. connections.
Signal source not working Check signal level and verify it is within
correctly or not within acceptable range per electrical
acceptable electrical specifications.
specifications.
Signal source not working Check signal level and verify it is within
correctly or not within acceptable range per electrical
acceptable electrical specifications. Verify shield connection.
specifications.
Trip relays not working Wiring fault, terminal block Verify wiring and terminal block
loose. connections.
Woodward 71
ProTechTPS Total Protection System Manual 26501V1
Problem or diagnostic Possible Cause Suggested Actions
indication
Programmable relay output Wiring fault, terminal block Verify wiring and terminal block
not working loose. connections.
72 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Trip Indications
Problem or diagnostic Description Possible Cause Suggested Actions
indication
Internal Fault trip The module tripped on Various. Connect the PCT and
an internal fault. view the Module Faults
Log. This log expands
the Internal Fault
annunciation.
In general, it is not
possible to fix internal
faults without returning
the unit to Woodward.
Power Up Trip The module has lost Power source Verify power source,
power and has been fault or breaker breaker, fuse and wiring
restored. reset. integrity. The Reset
function will reset the
module.
Configuration Trip Trip is issued internally The module is Wait for module to finish
to keep the module in actively saving a saving configuration.
tripped state while the configuration. Reset function will reset
module is actively the module.
saving a configuration.
Parameter Error An error has been Non-volatile Reload configuration
detected in the memory hardware settings using the PCT.
internally stored fault or internal Cycle input power.
parameters. Internally fault.
stored parameters are If Parameter Error
constantly checked for persists return unit to
data integrity. Woodward according to
the instructions in
Chapter 8 of this
manual.
Overspeed Trip The module tripped on Turbine Check trip system prior
an overspeed event. overspeed. to operating turbine,
including ProTechTPS
built-in simulated speed
tests to verify
ProTechTPS
functionality.
Woodward 73
ProTechTPS Total Protection System Manual 26501V1
Problem or diagnostic Description Possible Cause Suggested Actions
indication
Speed Probe Open Wire The module has Wiring fault or Check wiring continuity
detected an open wire probe fault. and probe integrity.
condition on the speed
probe (Passive, or
MPU probe only).
Speed Lost Trip Sudden Speed Loss is Wiring fault or Check wiring continuity
configured as Trip and probe fault. and probe integrity.
the module has
detected a sudden
speed loss.
Speed Fail Trip Start logic – Speed Wiring fault, Check wiring continuity
Fail Trip is enabled speed probe fault. and probe integrity.
and the module has
detected the Speed Speed Fail Check contact and
Fail Override contact Override contact wiring operation.
input is open while input operation
speed is below the not correct.
user configured Speed
Fail Setpoint. Incorrect speed See manual for
fail setpoint description of function.
configured. Use PCT to verify
proper configuration
settings.
Speed Fail Timeout Start logic - the Wiring fault, Check wiring continuity
module has not speed probe fault. and probe integrity.
detected speed within
the time set by the Incorrect speed See manual for
Speed Fail Timeout fail timeout time description of function.
setting. configured. Use PCT to verify
proper configuration
settings.
74 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Alarm Indications
Problem or Description Possible Cause Suggested Actions
diagnostic indication
Internal Fault Alarm The module has an Various. Connect the service tool
internal fault that is and view the Trip And
annunciated an alarm Alarm Log. This log
and not a trip. expands the Internal Fault
Alarm annunciation.
Configuration Configuration data Different settings loaded Copy configurations
Mismatch does not match than in one or both of between modules using
between modules. the other two modules. Configuration Management
in the Config Menu, or load
settings from service tool.
Power Supply 1 Fault The module has Power supply input 1 is Check the power source,
detected a fault on either faulted or the breaker, fuse and
Power Supply 1. power is disconnected. connections. Note the
module will continue to
operate normally on power
supply 2.
Power Supply 2 Fault The module has Power supply input 2 is Check the power source,
detected a fault on either faulted or the breaker, fuse and
Power Supply 2. power is disconnected. connections. Note the
module will continue to
operate normally on power
supply 1.
Speed Fail Alarm Start logic – Speed Wiring fault, speed Check wiring continuity and
Fail Alarm is enabled probe fault. probe integrity.
and the module has
detected the Speed Speed Fail Override Check contact and wiring
Fail Override contact contact input operation operation.
input is open while not correct.
speed is below the
user configured Speed Incorrect speed fail See manual for description
Fail Setpoint. setpoint configured. of function. Use PCT or
front panel to verify proper
configuration settings.
Speed Lost Alarm Sudden Speed Loss is Wiring fault or probe Check wiring continuity and
configured as Alarm fault. probe integrity.
and the module has
detected a sudden
speed loss.
Tmp Overspd Setpoint Indicates the User initiated temporary See manual for description
On temporary overspeed setpoint test. and limitations.
setpoint has been
activated. Use PCT or front panel to
verify settings.
Manual Sim. Speed Indicates the manual User initiated simulated See manual for description
Test simulated overspeed speed test. and limitations.
test has been
activated.
Auto Sim. Speed Test Indicates the User initiated simulated See manual for description
automated simulated speed test. and limitations.
overspeed test has
been activated.
Woodward 75
ProTechTPS Total Protection System Manual 26501V1
Problem or Description Possible Cause Suggested Actions
diagnostic indication
Periodic Overspd Test Indicates the User enabled the See manual for description
automated Periodic simulated speed test or and limitations.
Overspeed Test has test interval time expired
been activated. and test started. Use PCT or Module A front
panel to verify settings.
User Defined Test 1 Indicates the User User enabled the User Connect PCT and verify
Defined Test 1 has Defined Test or the settings. Check the set and
been activated. configured Set Input was reset functions are correct.
true. Note specifically the effect
of the timeout setting.
User Defined Test 2 Indicates the User User enabled the User Connect PCT and verify
Defined Test 2 has Defined Test or the settings. Check the set and
been activated. configured Set Input was reset functions are correct.
true. Note specifically the effect
of the timeout setting.
User Defined Test 3 Indicates the User User enabled the User Connect PCT and verify
Defined Test 3 has Defined Test or the settings. Check the set and
been activated. configured Set Input was reset functions are correct.
true. Note specifically the effect
of the timeout setting.
Trip Cycle Time Mon 1 Indicates the Trip Trip Cycle Monitor Time Check the Trip Cycle Time
Alarm Cycle Monitor Time 1 1 Alarm is set when the Monitor Menu and note the
Alarm has been set. maximum cycle time has trip cycle time to see if the
been exceeded during a cycle time indicator signal
trip cycle time test. is reaching the
ProTechTPS.
76 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Problem or Description Possible Cause Suggested Actions
diagnostic indication
Trip Cycle Time Mon 2 Indicates the Trip Trip Cycle Monitor Time Check the Trip Cycle Time
Alarm Cycle Monitor Time 2 2 Alarm is set when the Monitor Menu and note the
Alarm has been set. maximum cycle time has trip cycle time to see if the
been exceeded during a cycle time indicator signal
trip cycle time test. is reaching the
ProTechTPS.
Woodward 77
ProTechTPS Total Protection System Manual 26501V1
Chapter 6.
Safety Management
These products are certified for use in applications up to SIL3 according to IEC61508.
Safe State
The ProTechTPS is designed so that the safe state can be configured for either de-energize or
energize to trip. De-energize to trip will place trip relays into their unpowered, normally open state.
The de-energize-to-trip functionality is implemented such that a complete loss of power to the
module results in a trip of that module. The energize-to-trip functionality is implemented such that a
complete loss of power to the module does not result in a trip of that module.
When configured as de-energize-to-trip, the modules power up in the tripped state. When configured
as energize-to-trip, the modules power up such that they do not enter the tripped state unless a trip
condition is present.
SIL Specifications
PFD and PFH calculations have been performed on the ProTechTPS according
IEC61508. For SIL3, IEC states the following requirements.
PFH
7.8E-8 1/h
PFD
PFD Proof Test Interval
3.7E-5 6 month
5.6E-5 9 month
7.5E-5 1year
Safe Failure Fraction
SFF > 90%
Diagnostic Coverage
DC > 90%
78 Woodward
Manual 26501V1 ProTechTPS Total Protection System
MTTF
> 54 000 years
Because of the nature of the 2-o-o-3 voting structure, a single module trip does not shut down the
process.
Response Time
Independent Trip Relay Versions < 12 ms
Voted Trip Relay Versions < 20 ms
The response time of the ProTechTPS is the time from when a signal is received at the ProTechTPS
terminal blocks that is out of a range as defined by the programming (i.e. speed, analog input) to the
point where the trip relays have changed state.
Limitations
When proper installation, maintenance, proof testing, and environmental limitations are observed, the
product life of the ProTechTPS is 20 years.
Woodward 79
ProTechTPS Total Protection System Manual 26501V1
Table 6-6. Environmental Specifications:
Restrictions
The user must complete a full functional check of the ProTechTPS after initial installation, and after
any modification of the programming or configuration of the device. This functional check should
include as much of the safety system as possible, such as sensors, transmitters, actuators and trip
blocks. The ProTechTPS has programming capability to facilitate the automatic checkout and periodic
maintenance of the safety system. For help on programming, see the chapters on functionality,
configuration and the example applications.
The ProTechTPS must be used within the published specification in this manual.
Competence of Personnel
All persons involved in the initial design or modification of the programmable software, installation and
maintenance must have appropriate training. Training and guidance materials include this manual,
the ProTechTPS service tool, and training programs available at Woodward. See Chapter 8 (Service
Options) for more information.
80 Woodward
Manual 26501V1 ProTechTPS Total Protection System
With the procedure below, the user can expect 99% test coverage of the dangerous failures that are
not tested by online diagnostics.
1. Cycle Power on the module and verify there are no internal faults on the Alarm Latch page of the
monitor menu.
2. Remove power from one power supply input (power supply input 1 or 2) at a time and verify the
correct fault is read on the Alarm Latch page of the monitor menu.
3. Measure external 24 V EXT (terminals 80 – 81; 23 ±1 V).
4. Verify proper Discrete Input voltage (terminals 37 – 38; 23 ±1 V).
5. Measure SPEED PWR (terminals 69 – 71). Insure active probe mode is selected in Speed
Configuration Menu, make the measurement, and insure probe type is in original configuration
(23 ±1 V).
6. Test Speed input by using one of the internal speed test modes in the Test Menu. Resistance
measurement of each of the voter outputs is required. Verify as follows:
a. With module not tripped, resistance measurement from 1A – 1B, or
2A – 2B must be less than 100 .
b. With module tripped, resistance measurement from 1A – 1B, or
2A – 2B must be greater than 1 M.
7. Test any configurable inputs that are set to analog mode to make sure that all inputs are
operational. The analog signal must be varied from a steady state value. Verify the proper signal
by monitoring the respective input on the Monitor Menu\Configurable Input page of the front
panel.
8. Test any configurable inputs that are set to discrete mode to make sure that all inputs are
operational and not stuck in the ON or OFF state. Inputs must be cycled from ON to OFF and
OFF to ON. Verify the proper signal by monitoring the respective input on the Monitor
Menu\Configurable Input page of the front panel.
9. Test Programmable Outputs if used as part of the safety system.
10. Cycle dedicated inputs and verify the proper signal by monitoring the respective input on the
Monitor Menu/Dedicated Discrete Input page of the front panel.
Woodward 81
ProTechTPS Total Protection System Manual 26501V1
11. If possible, compare external speed with measured speed-reading on the ProTechTPS display.
12. If used as part of the safety system, verify the analog output. Measure this output by performing
an automated overspeed trip test as described in
step 6.
13. Chassis isolation checks using resistance measurement. Measure from terminals 39, 66, 67 to a
point on the ProTechTPS chassis (the grounding braid is a good place for this measurement): <
1 .
14. Perform a lamp test from front panel Test Menu.
82 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Chapter 7.
Asset Management
To ensure product shelf life, Woodward recommends that a stored ProTechTPS be powered up
(power source applied to each module) for 5 minutes every 24–36 months. This procedure re-
establishes an electrical charge into the product’s electrolytic capacitors, extending their shelf life.
(See the Unpacking section in the chapter on Installation for unpacking.)
Woodward 83
ProTechTPS Total Protection System Manual 26501V1
Chapter 8.
Service Options
OEM and Packager Support: Many Woodward controls and control devices are installed into the
equipment system and programmed by an Original Equipment Manufacturer (OEM) or Equipment
Packager at their factory. In some cases, the programming is password-protected by the OEM or
packager, and they are the best source for product service and support. Warranty service for Woodward
products shipped with an equipment system should also be handled through the OEM or Packager.
Please review your equipment system documentation for details.
Woodward Business Partner Support: Woodward works with and supports a global network of
independent business partners whose mission is to serve the users of Woodward controls, as
described here:
A Full Service Distributor has the primary responsibility for sales, service, system integration
solutions, technical desk support, and aftermarket marketing of standard Woodward products
within a specific geographic area and market segment.
An Authorized Independent Service Facility (AISF) provides authorized service that includes
repairs, repair parts, and warranty service on Woodward's behalf. Service (not new unit sales) is an
AISF's primary mission.
A Recognized Engine Retrofitter (RER) is an independent company that does retrofits and
upgrades on reciprocating gas engines and dual-fuel conversions, and can provide the full line of
Woodward systems and components for the retrofits and overhauls, emission compliance
upgrades, long term service contracts, emergency repairs, etc.
A Recognized Turbine Retrofitter (RTR) is an independent company that does both steam and
gas turbine control retrofits and upgrades globally, and can provide the full line of Woodward
systems and components for the retrofits and overhauls, long term service contracts, emergency
repairs, etc.
You can locate your nearest Woodward distributor, AISF, RER, or RTR on our website at:
www.woodward.com/directory
84 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Replacement/Exchange: Replacement/Exchange is a premium program designed for the user who
is in need of immediate service. It allows you to request and receive a like-new replacement unit in
minimum time (usually within 24 hours of the request), providing a suitable unit is available at the time
of the request, thereby minimizing costly downtime. This is a flat-rate program and includes the full
standard Woodward product warranty (Woodward Product and Service Warranty 5-01-1205).
This option allows you to call your Full-Service Distributor in the event of an unexpected outage, or in
advance of a scheduled outage, to request a replacement control unit. If the unit is available at the
time of the call, it can usually be shipped out within 24 hours. You replace your field control unit with
the like-new replacement and return the field unit to the Full-Service Distributor.
Charges for the Replacement/Exchange service are based on a flat rate plus shipping expenses. You
are invoiced the flat rate replacement/exchange charge plus a core charge at the time the
replacement unit is shipped. If the core (field unit) is returned within 60 days, a credit for the core
charge will be issued.
Flat Rate Repair: Flat Rate Repair is available for the majority of standard products in the field. This
program offers you repair service for your products with the advantage of knowing in advance what
the cost will be. All repair work carries the standard Woodward service warranty (Woodward Product
and Service Warranty 5-01-1205) on replaced parts and labor.
Flat Rate Remanufacture: Flat Rate Remanufacture is very similar to the Flat Rate Repair option
with the exception that the unit will be returned to you in “like-new” condition and carry with it the full
standard Woodward product warranty (Woodward Product and Service Warranty 5-01-1205). This
option is applicable to mechanical products only.
When shipping the item(s), attach a tag with the following information:
Return authorization number
Name and location where the control is installed
Name and phone number of contact person
Complete Woodward part number(s) and serial number(s)
Description of the problem
Instructions describing the desired type of repair
Packing a Control
Use the following materials when returning a complete control:
Protective caps on any connectors
Antistatic protective bags on all electronic modules
Packing materials that will not damage the surface of the unit
At least 100 mm (4 inches) of tightly packed, industry-approved packing material
A packing carton with double walls
A strong tape around the outside of the carton for increased strength
Woodward 85
ProTechTPS Total Protection System Manual 26501V1
Replacement Parts
When ordering replacement parts for controls, include the following information:
The part number(s) (XXXX-XXXX) that is on the enclosure nameplate
The unit serial number, which is also on the nameplate
Engineering Services
Woodward offers various Engineering Services for our products. For these services, you can contact us by
telephone, by email, or through the Woodward website.
Technical Support
Product Training
Field Service
Technical Support is available from your equipment system supplier, your local Full-Service Distributor,
or from many of Woodward’s worldwide locations, depending upon the product and application. This
service can assist you with technical questions or problem solving during the normal business hours of the
Woodward location you contact. Emergency assistance is also available during non-business hours by
phoning Woodward and stating the urgency of your problem.
Product Training is available as standard classes at many of our worldwide locations. We also offer
customized classes, which can be tailored to your needs and can be held at one of our locations or at
your site. This training, conducted by experienced personnel, will assure that you will be able to
maintain system reliability and availability.
Field Service engineering on-site support is available, depending on the product and location, from
many of our worldwide locations or from one of our Full-Service Distributors. The field engineers are
experienced both on Woodward products as well as on much of the non-Woodward equipment with
which our products interface.
For information on these services, please contact us via telephone, email us, or use our website:
www.woodward.com.
You can also locate your nearest Woodward distributor or service facility on our website at:
www.woodward.com/directory
86 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Technical Assistance
If you need to telephone for technical assistance, you will need to provide the following information. Please
write it down here before phoning:
Your Name
Site Location
Phone Number
Fax Number
Engine/Turbine Model Number
Manufacturer
Number of Cylinders (if applicable)
Type of Fuel (gas, gaseous, steam, etc)
Rating
Application
Control/Governor #1
Woodward Part Number & Rev. Letter
Control Description or Governor Type
Serial Number
Control/Governor #2
Woodward Part Number & Rev. Letter
Control Description or Governor Type
Serial Number
Control/Governor #3
Woodward Part Number & Rev. Letter
Control Description or Governor Type
Serial Number
If you have an electronic or programmable control, please have the adjustment setting positions or the
menu settings written down and with you at the time of the call.
Woodward 87
ProTechTPS Total Protection System Manual 26501V1
Appendix.
Modbus Ethernet Gateway Information
Introduction
For customers who want to use Modbus Ethernet communications or put the ProTech® on the plant
network, Woodward recommends the following Ethernet-to-Serial Gateways:
1. B&B Electronics –
Model: MESR901
Serial: RS-232, RS-485, or RS-422
Power Input: 10–48 Vdc
2. Lantronix –
Model: UDS100-Xpress DR IAP
Serial: RS-232, RS-485, or RS-422
Power Input: 9–30 Vdc, 9–24 Vac
Lantronix
15353 Barranca Parkway
Irvine, CA 92618
USA
Phone: 1-800-422-7055
Email: [email protected]
Web: www.lantronix.com
88 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Wiring
Note: The Serial DB9 connection is used for RS-232 communication only.
Configuration –
Configuration of the MESR901 is done through Vlinx Modbus Gateway Manager. The configuration
software is provided with the device.
90 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Note: For RS-485 communication, select RS-485 under Mode, and use the terminal
block connections. The DB9 port is for RS-232 communications only.
Lantronix Setup
Below you will find the wiring setup and software configuration for the UDS100-Xpress DR IAP.
Remember that the pictures below are for reference, you will need to setup the serial configuration to
match the settings you chose in the ProTech. When multi-dropping the 3 modules together using RS-
485/422, you will need to assign each module a unique node address, which can be found in the
Modbus configuration screen on the ProTech.
Woodward 91
ProTechTPS Total Protection System Manual 26501V1
Wiring
Verify that the dip switch on the front of the device is in the up position, indicating RS-232
communications.
92 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Verify that the dip switch on the front of the device is in the down position, indicating RS-485
communications. When configuring for RS-485, termination resistors (120 ) are needed at each end
of the network. Note the location of the resistor on the device. The ProTech has the termination
resistor built into the module, jumpers are necessary between terminals 14 – 15 and 18 – 19 to
activate the termination.
Configuration
Configuration of the UDS100-Xpress DR IAP is done through DeviceInstaller. The configuration
software is provided with the device.
Woodward 93
ProTechTPS Total Protection System Manual 26501V1
Note: For RS-485 communications, choose option 3 under interface type and do not forget to set the
dip switch on the front of the device.
94 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Woodward 95
ProTechTPS Total Protection System Manual 26501V1
Revision History
Changes in Revision F—
Changes to Regulatory and Compliance Section
Updated Declarations
Changes in Revision E—
Added new warning required by GOST R
Changes in Revision D—
Updated manual to reflect changes to MPU input threshold and impedance
Added GOST R information to Regulatory Compliance section
96 Woodward
Manual 26501V1 ProTechTPS Total Protection System
Declarations
Woodward 97
We appreciate your comments about the content of our publications.
Send comments to: [email protected]
ËB26501V1è:èF·¹´¸ ¹Î