Trusted T8111 TMR Processor issue if used in redundant configuration Posted on December 1, 2018 by Brandy McNeil Trusted T8111 TMR processor used in dual processor redundant configuration may result in system shutown Product Safety Group 1201 South Second Street Milwaukee, WI USA 53204 firstname.lastname@example.org PRODUCT SAFETY ADVISORY Notice of Potential Unsafe Condition Rockwell Automation issues a Product Safety Advisory when it identifies a product(s) anomaly that may potentially cause harm to personnel, capital equipment loss or environmental damage. Immediate action is required as identified below. Trusted T8111 TMR Processor When Used in Dual Processor Redundant Configuration May Result in System Shutdown Reference: 2018-11-001 Date: Preliminary November 2018 Release December 2018 This Product Safety Advisory informs you of a potential anomaly that exists with the Trusted T8111 TMR Processor Module. When used in a dual processor redundant configuration with a second T8111 processor module or a T8110 processor module, the Active processor may go into its shutdown state with the second Standby module not becoming Active. This is due to the Active / Standby link between the two processors becoming synchronized, causing interference with the diagnostics. This may result in a full system shutdown. Important – Due to the potential for high impact on customer processes, this anomaly has been released as a Product Safety Advisory. This is not a safety issue. No potential harm to personnel has been identified. PRODUCT SAFETY ADVISORY Page 2 of 5 – Product Identification – The affected product is the Series B Trusted T8111 TMR Processor Module, Catalog Number T8111C, versions O10 and O11, when used in a dual processor redundant configuration with either a T8111 or a T8110 processor module. Important – If you do not use or do not plan to use your Trusted T8111 TMR Processor in a dual processor redundant configuration you are not affected and no action is required on your part. However, Rockwell Automation recommends updating your system modules to the latest firmware release. The product catalog number and version information can be found on the product nameplate, located on the side of the module. The catalog number is located in the top right corner and the version number is a combination of the HW Issue letter and the S/W Issue number. In the example shown to the left, the catalog number is T8111C and the version is H/W Issue O and S/W Issue 10, or O10. This example matches the product identification information and is subject to this notification. Product version information may also be obtained electronically over a network connection. Refer to Rockwell Automation Knowledgebase Article ID 61300, Analysis Tool for Trusted Systems, for additional information. – Description – In a dual processor redundant configuration where one of the two processors is a Trusted T8111 TMR Processor, the Active / Standby link is used to verify that the two processors are both healthy and actively communicating with each other. This makes certain the Standby processor module can take over in the event of a slice failure in the Active processor module (3-3-2-0 Degradation Mode), maintaining high availability. In the T8111 Series B version O10 and O11 releases, the Active / Standby handshaking may become synchronized, such that the two modules are no longer communicating with each other, interfering with diagnostics. The effect on the system depends on the configuration. If the Active module is a T8111 and the Standby module is a T8110 or a T8111, the Active T8111 module will shut down to prevent the two processors from both becoming Active, resulting in a full system shutdown. If the Active module is a T8110 and the Standby module is a T8111, the Standby T8111 module will shut down but the Active T8110 module will continue operating, resulting in a loss of high availability due to the loss of the Standby T8111 processor. PRODUCT SAFETY ADVISORY Page 3 of 5 Dual processor configurations consisting of a T8111 processor with either a second T8111 processor module or a T8110 processor module are affected with this anomaly. Dual process configurations consisting of two T8110 processor modules are not affected. This anomaly will be corrected in the O12 and future releases of T8111 processor firmware. – Temporary Workarounds – Until your processor modules can be updated with corrected firmware, you are advised to remove the Standby processor module. – Correction – Correction requires installation of corrected T8111 processor firmware to version O12 or later. Rockwell Automation is currently working on a correction and will release to the Rockwell Automation Product Compatibility and Download Center (PCDC) when completed. Rockwell Automation Knowledgebase Article ID 1082968 will be updated when corrected firmware is available for download. If you would like an email notification when firmware correcting this anomaly is available for download and installation, a link has been provided at the end of Article ID 1082968. Firmware can be field upgraded. If you are unable to upgrade your product firmware or require additional assistance, contact Rockwell Automation Technical Support or your system provider and reference this Product Safety Advisory 2018-11-001. Important – Trusted T8111C hardware is not affected by this anomaly. Product hardware should not be returned on this notification. – Requested Customer Action – Rockwell Automation requests you take the following actions: Check if you have a product affected by this Product Safety Advisory. Refer to the Product Identification and Description sections of this document for product identification assistance. Continue to check incoming shipments for potentially affected product. Product in transit or in non-Rockwell Automation inventory may continue to contain potentially affected product for a period of time after the publication of this document. If you need additional assistance, please contact your system provider or Rockwell Automation Technical Support. See Appendix A for local telephone numbers. Customers without TechConnect contracts should reference this Product Safety Advisory when calling. Customers with TechConnect contracts may be able to chat online with support representatives. Reference this Product Safety Advisory when connected to a support engineer. The most current version of this Product Safety Advisory is posted on the Rockwell Automation Support Center, http://www.rockwellautomation.com/knowledgebase, as ID number 1082968. Additional languages may also be available at the end of this article attached as downloadable PDF documents. PRODUCT SAFETY ADVISORY Page 4 of 5 If this Product Safety Advisory does not affect you because you do not have the products any longer, or if you are a Distributor, Rockwell Automation asks that you forward a copy of this notice, with any identifying documentation, immediately to the person or company that now has the product. We also ask that you contact Rockwell Automation Technical Support and provide the location of the affected units. We appreciate your immediate cooperation. If you have any questions, please contact us. Sincerely, ROCKWELL AUTOMATION You can register for Automatic Product Safety Advisories and Product Notices from Rockwell Automation by email. Go to the Support web page at http://www.rockwellautomation.com/support and click the Visit the Technical Support Center link. Sign in with your Tech Connect Account or free Rockwell Automation Member Account and you can subscribe to important product updates, including Product Safety Advisories and Product Notices. Trademarks not belonging to Rockwell Automation are property of their respective companies. PRODUCT SAFETY ADVISORY Page 5 of 5 Appendix A Regional Technical Support Information The following list can help you to contact the correct technical support center for your location. If your country is not listed, you can find a customer support number for your location on http://www.rockwellautomation.com/support/ by clicking Get Support Now, selecting your country, and clicking the Phone/OnSite Support tab. Region / Country Phone Number ( ) International Code Region / Country Phone Number ( ) International Code Asia/Pacific Europe Australia 1 800 762 593 Austria (49) 211 41553 664 China 400 620 6620 Belgium (32) 2 716 8411 Hong Kong +852 2887 4666 Czech Republic (420) 28401 5911 India 1 800 2000 121 Denmark (45) 43 466 006 Japan 03 3206 2785 Finland (358) 958 447 419 Korea (82) 2 2188 4400 France (33) 825303132 Malaysia 1 800 80 4851 Germany (49) 211 41553 664 New Zealand 0800 27 27 25 Hungary (420) 28401 5911 Taiwan 080 902 0908 Ireland (44) 01908 635245 Thailand (66) 2936 1500 Italy (Brescia, Milano e Padova) (39) 199 11 99 00 Caribbean Italy (Bologna,Firenze,Napoli, Roma e Torino) (39) 199 11 99 22 All Countries (English) (1) 440 646 3223 Morocco (33) 825303132 All Countries (Español) (1) 440 646 3650 Netherlands (31) 10 266 55 80 Central America Poland (48) 22 32 60 707 Argentina 800.666.0320 Portugal (1) 440 646 3223 Belize (1) 440 646 3650 Slovakia (420) 284015911 Bolivia (54) 800 10 0632 Spain (34) 902 30 93 30 Brazil (55) 11 5189 9500 Sweden (46) 46 19 93 91 Chile 800.53.0012 Switzerland (German) (41) 0844 84 84 11 Colombia 01.800.700.2107 Switzerland (French) (41) 0844 84 84 12 Costa Rica 0800.013.1215 Switzerland (Italian) (41) 0844 84 84 13 Ecuador 58.212.949.0611 United Kingdom (44) 01908 635245 El Salvador (52) 55 5246 2010 North America Guatemala 1.800.288.0108 Canada (1) 440-646-3223 Honduras (52) 55 5246 2010 United States (1) 440-646-3223 Mexico 001.888.365.8677 Nicaragua (52) 55 5246 2010 Panama 001.800.203.3475 Paraguay (54) 11 5554 4000 Peru 0800.535.36 Suriname (1) 440 646 3650 Uruguay (54) 11 5554 4000 Venezuela 800.1.00.3062 If you have a TechConnect Contract, please use the telephone number supplied to you with the contract.