Please refer to the file attachments located at the end of this article. We have provided several translations in pdf format.

PSA 2018-11-001

This article is a summary for your review. Please refer to the attached .PDF (found at the bottom of this article) for images and more detailed information.

This Product Safety Advisory informs you of a potential anomaly that exists with the Trusted T8111 TMR Processor Module. When used in a dual processor redundant configuration with a second T8111 processor module or a T8110 processor module, the Active processor may go into its shutdown state with the second Standby module not becoming Active. This is due to the Active / Standby link between the two processors becoming synchronized, causing interference with the diagnostics. This may result in a full system shutdown.

Important – Due to the potential for high impact on customer processes, this anomaly has been released as a Product Safety Advisory. This is not a safety issue. No potential harm to personnel has been identified.

PRODUCT IDENTIFICATION

The affected product is the Series B Trusted T8111 TMR Processor Module, Catalog Number T8111C, versions O10 and O11, when used in a dual processor redundant configuration with either a T8111 or a T8110 processor module.

Important – If you do not use or do not plan to use your Trusted T8111 TMR Processor in a dual processor redundant configuration you are not affected and no action is required on your part. However, Rockwell Automation recommends updating your system modules to the latest firmware release.

The product catalog number and version information can be found on the product nameplate, located on the side of the module. The catalog number is located in the top right corner and the version number is a combination of the HW Issue letter and the S/W Issue number.

In the example shown below, the catalog number is T8111C and the version is H/W Issue O and S/W Issue 10, or O10. This example matches the product identification information and is subject to this notification.

Product version information may also be obtained electronically over a network connection. Refer to Rockwell Automation Knowledgebase Article ID 61300, Analysis Tool for Trusted Systems, for additional information.

DESCRIPTION

In a dual processor redundant configuration where one of the two processors is a Trusted T8111 TMR Processor, the Active / Standby link is used to verify that the two processors are both healthy and actively communicating with each other. This makes certain the Standby processor module can take over in the event of a slice failure in the Active processor module (3-3-2-0 Degradation Mode), maintaining high availability. In the T8111 Series B version O10 and O11 releases, the Active / Standby handshaking may become synchronized, such that the two modules are no longer communicating with each other, interfering with diagnostics. The effect on the system depends on the configuration.

• If the Active module is a T8111 and the Standby module is a T8110 or a T8111, the Active T8111 module will shut down to prevent the two processors from both becoming Active, resulting in a full system shutdown.
• If the Active module is a T8110 and the Standby module is a T8111, the Standby T8111 module will shut down but the Active T8110 module will continue operating, resulting in a loss of high availability due to the loss of the Standby T8111 processor.

Dual processor configurations consisting of a T8111 processor with either a second T8111 processor module or a T8110 processor module are affected with this anomaly. Dual process configurations consisting of two T8110 processor modules are not affected.

This anomaly will be corrected in the O12 and future releases of T8111 processor firmware.

TEMPORARY WORKAROUNDS

Until your processor modules can be updated with corrected firmware, you are advised to remove the Standby processor module.

CORRECTION

Correction requires installation of corrected T8111 processor firmware to version O12 or later. Rockwell Automation is currently working on a correction and will release to the Rockwell Automation Product Compatibility and Download Center (PCDC) when completed.

This article will be updated when corrected firmware is available for download. If you would like an email notification when firmware correcting this anomaly is available for download and installation, a link has been provided at the end of this article.

Firmware can be field upgraded. If you are unable to upgrade your product firmware or require additional assistance, contact Rockwell Automation Technical Support or your system provider and reference this Product Safety Advisory 2018-11-001.

Important – Trusted T8111C hardware is not affected by this anomaly. Product hardware should not be returned on this notification.

REQUESTED CUSTOMER ACTION

Rockwell Automation requests you take the following actions:

• Check if you have a product affected by this Product Safety Advisory. Refer to the Product Identification and Description sections of this document for product identification assistance.
• Continue to check incoming shipments for potentially affected product. Product in transit or in non-Rockwell Automation inventory may continue to contain potentially affected product for a period of time after the publication of this document.
• If you need additional assistance, please contact your system provider or Rockwell Automation Technical Support. See Appendix A for local telephone numbers. Customers without TechConnect contracts should reference this Product Safety Advisory when calling.
• Customers with TechConnect contracts may be able to chat online with support representatives. Reference this Product Safety Advisory when connected to a support engineer.

Click here if you wish to receive an email notification when firmware correcting this anomaly is available for download and installation.