The TRICONEX 3601E is a digital output module for the Tricon triple modular redundant (TMR) safety system. It provides 16 discrete output channels, each rated for 115 V AC at 2 A (resistive load). The module is designed to control solenoid valves, motor contactors, indicator lamps, and other AC-powered field devices in safety instrumented functions. It is certified for SIL 3 applications per IEC 61508/61511. The associated assembly part number 3000307-050 Rev D identifies the specific PCB revision with improved output protection.
Each output consists of a TRIAC (triode for alternating current) switching element, with zero-crossing turn-on to reduce electromagnetic interference. Output voltage range: 90–132 V AC, 47–63 Hz. Maximum continuous current per point: 2 A resistive, 1 A inductive (power factor 0.5). Inrush current capability: 20 A for one cycle (10 ms). Off-state leakage: < 1 mA. Surge suppression: built-in MOV across each output (clamping voltage 275 V). Outputs are fused individually (replaceable fuses, 2.5 A slow-blow, 5×20 mm) located on the module’s removable fuse carrier.
The module requires an external AC power source (115 V AC line) supplied to the field power terminals. The load is connected between the output terminal and the neutral (common). Do not exceed 132 V AC; applying 230 V AC will permanently damage the module.
Each output channel is implemented with three independent TRIAC drivers, each driven by a separate processor channel within the 3601E. The three drivers are wired in parallel with OR-ing diodes (or TRIAC series configuration) such that if one driver fails short, the other two can still turn off the output (fail-safe design). The module performs continuous diagnostics: it injects a small test current during the off state to verify the TRIACs can block voltage, and during the on state it checks for open circuits. Any internal fault causes the module to de-energize all outputs (default to off) and report a module failure to the processor.
The 3601E supports the following diagnostic features:
Output stuck-on detection: A test pulse (1 ms, 10% of load current) is applied during off periods; if current flows, a stuck-on fault is declared.
Output stuck-off detection: A test current is applied during the on state; if no current flows, an open circuit is assumed.
Overcurrent per channel: If the current exceeds 2.5 A for more than 1 second, the channel is shut off and a fuse blown indicator is given.
Thermal monitoring of the internal heatsink.
All diagnostics are reported via the backplane to the Tricon processor, which can generate system alarms. The module also has two status relay outputs (normally open) that indicate “module healthy” and “output power present”.
Each of the 16 channels has a replaceable fuse accessible from the front panel after removing a small cover. Use only specified fuses (2.5 A, 250 V, slow-blow, 5×20 mm). A blown fuse is indicated by a red LED next to the channel terminal. To replace a fuse, de-energize the module by disconnecting the AC field supply or removing the module from the chassis. The fuse holder is a pull-to-open type; insert a new fuse and reinstall the cover. Frequent fuse blowing indicates an overloaded output or a shorted field device; do not up-rate the fuse.
Field wiring connects to a removable 34-pin terminal block (part number 7400182-115). Each channel has two terminals: output (L) and neutral (N). The neutral terminals are internally commoned; however, it is recommended to bring a dedicated neutral from the AC source to the module. The terminal block accepts 0.5–2.5 mm² wire. Use 600 V insulated wire. Each output should be fused externally as well if required by local codes; however, the module’s internal fuses provide basic protection. For inductive loads (solenoids, relays), connect a flyback suppression device (e.g., MOV or RC snubber) across the load to prolong TRIAC life.
The module requires an external AC supply connected to the field power terminals (marked L and N on the terminal block). The supply must be capable of delivering the total load current (up to 32 A for all 16 channels at 2 A each). For SIL 3 applications, use a dedicated, monitored power supply.
Turn-on time: < 1 ms from processor command to output energization (plus zero-crossing delay up to 8.3 ms at 60 Hz). Turn-off time: < 2 ms. The module supports high-speed cycling up to 10 Hz (100 ms on, 100 ms off) for short durations, but continuous cycling above 1 Hz will cause overheating. The TRIACs are rated for 100,000 operations at full load; for longer life, use external relays for frequent switching.

Current draw: 0.4 A from 5 V backplane logic supply. The module does not draw from the 24 V field supply (only the AC supply). Logic power dissipation: 5 W. AC field power consumption is load-dependent. Operating temperature: 0°C to 60°C (derate 2% per °C above 50°C for output current). Storage: -25°C to 85°C. Humidity: 5–95% non-condensing. Vibration: 2 g (5–100 Hz). The module is TÜV certified for SIL 3, UL 508, and CE marked. It is approved for use in hazardous locations Class I Division 2 (non-incendive).
The 3601E is compatible with all Tricon chassis and processors (3005 through 3009). It can be mixed with digital input modules (3501E, etc.) and analog modules. The module occupies one I/O slot. For applications requiring 24 V DC outputs, use the 3603E module instead. The 3000307-050 Rev D revision includes enhanced creepage distances for higher pollution degree (PD3) environments.
Insert the 3601E into an I/O slot of the Tricon chassis. Secure with screws. Attach the termination block and field wiring before applying power. Configure the module via TriStation software: assign output mapping, set default states (on or off) for each channel upon processor fault, and configure diagnostic thresholds. Perform a loop test by commanding each output on/off from TriStation while monitoring the field device. Verify that the module’s PASS LED is green. If the FAULT LED is red, check for internal errors using the diagnostic display.
Regular maintenance includes checking fuses, cleaning dust from the module vents, and verifying that the external neutral connection is tight. The 3601E is a critical component for safe shutdown in oil and gas, chemical, and power generation facilities, directly controlling emergency shutdown valves and burner management actuators.



