ABB AC 800M Controller Selection, Redundancy Configuration, and Communication Interface Troubleshooting Guide

Overview and Selection Core Dimensions of AC 800M Series

ABB AC 800M is a modular controller family with rail mounting, widely used in process automation, hybrid applications, and safety related systems. Its core advantages lie in scalable processor performance, flexible communication interfaces, and support for high integrity (SIL3) security controllers. The correct selection should revolve around the following five dimensions: CPU computing power, memory capacity, redundancy support, I/O expansion capability, and communication protocol compatibility.

This article provides a systematic methodology for controller selection, redundant configuration, communication module troubleshooting, and shutdown module replacement based on official technical specifications and practical engineering experience. All data is sourced from the latest hardware manual to ensure complete correspondence with the on-site equipment.

Detailed comparison and selection suggestions for CPU modules

2.1 List of mainstream CPU models

The AC 800M includes a complete product line from economical to high-end redundant. The following key models are listed in ascending order of performance:

Model Clock Frequency RAM User Available RAM Redundancy Supports High Integrity (SIL3) Typical Application Scenarios

PM851A 24 MHz 8 MB 2.282 MB No No Small standalone device control

PM856A 24 MHz 8 MB 2.282 MB No No Small and Medium sized Logic Control

PM857 96 MHz 32 MB 22.184 MB is a safety related process (SIL3 required)

PM858 33 MHz 16 MB 7.147 MB Is it a medium redundant system

PM860A 48 MHz 8 MB 2.282 MB No No General Process Control

PM861A 48 MHz 16 MB 7.155 MB redundant system economic choice

PM862 67 MHz 32 MB 23.521 MB High Performance Non Safety Redundancy

PM863 96 MHz 32 MB 22.184 MB is a SIL3 secure application

PM864A 96 MHz 32 MB 23.522 MB High speed logic and data processing

PM865 96 MHz 32 MB 22.184 MB is a mixture of safety and process control

PM866A 133 MHz 64 MB 51.389 MB Is it high-end process automation

PM867 133 MHz 64 MB 46.559 MB is a high-performance security system

PM891 450 MHz 256 MB 208.985 MB Is it a large redundant control system with built-in advanced communication

2.2 Interpretation of Key Parameters for Selection

The available RAM directly affects the size of the application and the capacity of complex data structures such as arrays and PID loop tables. For example, PM857 provides 22.184 MB of user RAM, while PM891 has up to 208.985 MB, making it suitable for large-scale recipe management and historical data storage.

Boolean operation speed: PM851A requires 0.46 ms to perform 1000 Boolean operations, while PM891 only requires 0.043 ms, a difference of over 10 times. For high-speed logic (such as 1 ms cycle tasks), a CPU with a frequency of 96 MHz or higher must be selected.

Redundant switching time: Models that support redundancy (PM857/858/861A/862/863/864A/865/866A/867/891) have a switching time of ≤ 10 ms, meeting the interrupt time requirements of most continuous production processes.

High integrity controllers: PM857, PM863, PM865, PM867 have passed IEC 61508 SIL3 certification. Note that PM857 does not have Flash storage for applications and requires external backup; PM863/PM865/PM867 all come with Flash. If redundancy and security are required simultaneously, PM857, PM863, PM865, and PM867 can be selected.

2.3 Typical selection errors and corrections

Error 1: Choose PM860A (without redundancy support) in situations where redundancy is required.

Correction: Select PM858, PM862, or PM866A.

Error 2: The safety circuit uses a non safety grade CPU (such as PM862).

Correction: It is necessary to select a model with the "High Integrity Controller" logo and cooperate with the SM811/SM812 monitoring module.

Error 3: Ignoring application memory requirements, resulting in runtime memory overflow.

Correction: Estimate program code, DB block, and communication buffer size. PM851A/PM856A is only 2.3 MB available, suitable for simple logic; If it exceeds 10 MB, please select PM862 or above.

Detailed explanation of redundant system configuration and switching mechanism

3.1 Two levels of redundant support

AC 800M provides two dimensions of CPU redundancy and communication redundancy:

CPU redundancy: The primary and backup CPUs with the same status are synchronized through RCU Link cables (TB851/TB855/TB856). When there is a fault, the backup switching time is ≤ 10 ms.

CEX bus module redundancy: For example, CI854B (PROFIBUS DP-V1 main station) supports dual module redundancy, and the backup module seamlessly takes over when the main module fails.

3.2 CEX bus and Modulabus limitations for redundant systems

In redundant mode, the CEX bus can mount up to 12 communication modules, but only fiber I/O clusters are supported on the Modulabus and electrical I/O clusters are not allowed. Specifically:

Non redundant CPU: up to 1 electrical cluster+7 fiber optic clusters.

Redundant CPU: 0 electrical clusters+7 fiber clusters (applicable to PM857/PM858/PM861A/PM862/PM863/PM864A/PM865/PM866A/PM867/PM891).

This means that in redundant configurations, all local I/O must be connected through fiber optic modules (such as TB807 and fiber optic expansion modules), and the electrical Modulus terminals are not available.

3.3 Common Reasons for Redundant Switching Failure

RCU Link cable fault: Use a multimeter to measure the resistance between terminals TB852/TB853, which should be less than 0.5 Ω normally. If there is interruption, replace cable TK851V010.

The firmware versions of the primary and backup CPUs are inconsistent: they must be exactly the same, including patch levels. Compare online through Control Builder.

Synchronization data timeout: If the application contains a large number of asynchronous variables (such as local clock), it can cause the backup CPU to be unable to complete state synchronization within the specified time. Solution: Place key data in the synchronized global data area.

Power supply fluctuation: Redundant CPUs have extremely high requirements for 24V power supply, with ripple not exceeding 5% (i.e.<1.2V pp). Use an oscilloscope to measure the CPU power terminal. If the ripple exceeds the standard, install an SD831 power filter.

Comprehensive analysis of communication interface module (CEX bus)

The CEX bus of AC 800M supports up to 12 communication modules, covering mainstream industrial protocols. The following is a classification explanation by protocol type.

4.1 Serial Communication and MODBUS

CI853: Supports MODBUS RTU master, COM1 master/slave, Siemens 3964R, and user-defined protocols. 2 channels, speed range 75~19200 bps. Typical fault: Communication timeout. Troubleshooting steps:

Check the RJ-45 pin definitions (3: B, 4: A, 5: common terminal).

Use a serial monitoring tool (such as an RS-485 analyzer) to confirm the physical layer waveform.

Verify whether the slave address and CRC check settings are consistent with the control program.

CI854A/CI854B: ROFIBUS DP-V1 master station, supports redundancy (CI854B), with a maximum speed of 12 Mbit/s. Common problem: Bus failure causes CPU cycle extension. Solution:

Use PROFIBUS diagnostic tools (such as PB Tester) to scan the site and locate the address of the faulty station.

Check terminal resistance: The terminal should be enabled at both ends of the station and disabled in the middle.

Ensure that the GSD file versions of the primary and backup modules are completely consistent in CI854B redundancy mode.

4.2 Industrial Ethernet Protocol

CI868/CI868A: MODBUS TCP master/slave, dual channel (CI868A is a single channel), 10/100 Mbit/s. Suitable for connecting SCADA or third-party PLCs. Troubleshooting:

Use the ping command to test IP connectivity.

Check if port 502 is blocked by the firewall.

Enable the 'Keep Alive' feature in Control Builder to prevent TCP half open connections.

CI871/CI871A: ROFINET IO device (slave), single channel, 10/100 Mbit/s. Frequently communicate with Siemens S7-1500 main station. If there is a data exchange interruption:

Confirm that the device name of CI871 matches the name configured for the main station.

Analyze network topology using PROFINET diagnostic tools such as PRONETA.

Update the CI871 firmware to the latest version (3BSE092693R1 corresponds to CI871A).

CI873/CI873A: EtherNet/IP adapter (slave) that supports communication with Rockwell Logix controllers. The fault is mainly caused by mismatched I/O connection sizes. Solution: Accurately match the length of input/output instances in RSLogix 5000.

4.3 Dedicated and Legacy Protocol

CI855: ABB S100 I/O bus master station, used to expand old S100 modules. The speed is 10 Mbit/s, with a maximum of 200 datasets per second. If I/O data is garbled, check the cleanliness of the fiber optic connector.

CI857: DriveBus master station, connected to ABB drives (such as ACS800). Single channel, 4 Mbit/s, fiber optic interface. Common malfunction: Loss of drive communication. troubleshoot

Check the fiber optic transmission/reception power (using an optical power meter, normally above -15 dBm).

Confirm that the DriveBus terminal switch position is correct (start and end ON, middle OFF).

CI862: Genius bus master station, used for GE series I/O. Speed range of 38.4~153.6 kbit/s, 4-pin Phoenix terminal. If there are a large number of retry frames, reduce the bus rate to 76.8 kbit/s and increase the scanning time.

CI869: AF100 (Advant Fieldbus 100) master station, supporting cable redundancy (dual channel). Suitable for upgrading old Advant systems. Its redundant switching does not require CPU intervention, but "Cable Redundancy" needs to be enabled in the hardware configuration.

I/O Expansion and Modular Bus Capacity Planning

5.1 Modulabus (local I/O bus)

Each CPU is connected to the local I/O cluster through the TB807 module (Modulabus terminal) on the CEX bus. Key limitations:

Non redundant CPU: 1 electrical cluster (S800 I/O through electrical port)+up to 7 fiber optic clusters.

Redundant CPU: Only fiber clusters are allowed, up to a maximum of 7.

Each I/O cluster can contain up to 24 I/O modules (12 pairs of redundant modules in redundant CPU mode). Maximum number of total I/O modules:

Non redundant: 96 modules

Redundancy: 84 modules

Scanning cycle: Depending on the number of modules and bus load, it can be adjusted between 0 and 100 ms. Optimize the "Modulus Scan Time" parameter of Control Builder to a minimum of 10 ms. If an I/O communication timeout alarm occurs, gradually increase until stable.

5.2 PROFIBUS Remote I/O

Through the CI854 module, up to 99 I/O stations can be connected (including up to 62 redundant stations), with a maximum of 24 modules per station (12 redundant pairs). Unlike local Modulabus, the scanning cycle of PROFIBUS is greatly affected by the bus speed. In practical engineering, if there are more than 30 sites, it is recommended to set the speed to 500 kbit/s or lower and use active terminators.

Troubleshooting of power and environmental adaptability faults

6.1 Power Requirements and Common Power Supply Faults

All AC 800M CPUs require 24V DC (19.2-30V) with ripple ≤ 5%. Typical power consumption of each CPU:

PM851A/856A/860A：4.32 W

PM857/858：5.1 W

PM891：15.8 W

Fault phenomenon: CPU restarts frequently or the "Power Fail" indicator light flashes.

Troubleshooting steps:

Measure the voltage of the CPU power terminal, and if it is below 19V, check the voltage drop of the power supply circuit.

Measure the ripple using an oscilloscope. If the peak value exceeds 1.2V, parallel a 2200 μ F capacitor at the CPU terminal or replace the power module with SD831 (24V/5A).

Check the redundant power supply status input SA/SB: High level should be>15V, low level should be<8V. If the status detection is incorrect, it may be due to a damaged voltage divider resistor.

6.2 Temperature and Corrosion Protection

The working temperature of AC 800M is+5~55 ° C, and the storage temperature is -40~70 ° C. In high temperature environments (such as boiler rooms), it is necessary to ensure that the cabinet is ventilated and the IP20 protection level is not damaged. If a "Temp Over" alarm occurs, the following measures can be taken:

Add cabinet fans (recommended ebmpapst 4650N).

Install the CPU at intervals with high heat generating I/O modules (such as S800 analog output).

This series of controllers meets the G3 corrosion resistance level (ISA 71.04) and is suitable for light corrosive environments such as hydrogen sulfide and chlorine gas. If used in a chemical plant, check the coating for discoloration once a year and clean the gold fingers with anhydrous alcohol.

Shutdown module replacement strategy and hardware upgrade path

Although the document does not explicitly list discontinued models, according to the ABB product lifecycle, old models such as PM851A, PM856A, and PM858 have gradually been phased out of the market. The following are recommended replacement options:

7.1 Non redundant low-end replacement

Original PM851A → PM856A (same performance) or directly upgrade to PM861A (to obtain redundancy and higher memory).

Note: PM851A does not have Flash storage applications and requires battery backup; After replacement, the program needs to be ported to the new CPU and the I/O mapping needs to be recompiled.

7.2 Redundant System Replacement

Original PM858 (33 MHz, 16 MB RAM) → PM862 (67 MHz, 32 MB RAM) or PM866A (133 MHz, 64 MB RAM).

The performance improvement is significant, but it should be noted that PM858 uses MPC866, while PM862 is also MPC866, and the program can be directly ported. However, the UL 508 certification of PM858 is still valid on PM862, while PM866A does not have this certification. Caution should be exercised if used in the North American market.

Original PM860A → PM861A: Although PM860A does not support redundancy, if redundancy is required after replacement, a second PM861A can be purchased.

7.3 Replacement of Safety Controller

Original PM863 (96 MHz, 32 MB) → PM865 (same performance, but PM865 is a higher version) or PM867 (133 MHz, 64 MB).

All safety controllers must maintain SIL3 level and undergo safety verification again after replacement (such as FMEDA analysis). Note that PM863 does not have Flash storage, while PM865/PM867 have Flash, and the program loading method is different.

7.4 Communication module replacement

CI854A (Classic) → CI854B: CI854B supports module redundancy and adds diagnostic functionality. When replacing, it is necessary to update the GSD file and adjust the module types in the hardware configuration.

CI871 → CI871A: CI871A adds partial support for IRT (equal time synchronization) with lower power consumption (160 mA vs 190 mA). Replace directly without modifying the program.

Firmware upgrade and backup battery maintenance

8.1 Firmware upgrade steps

The firmware of AC 800M CPU is stored in Flash PROM (2 MB for PM851A/856A/860A/861A/864A; 4 MB for PM862/866A; 16 MB for PM891). Upgrading requires the use of Control Builder or CompactFlash Tool (PM891). Note:

Backup the application before upgrading (export as. apx or. xml).

For redundant systems, upgrade the backup CPU first, manually switch, and then upgrade the original main CPU.

During the upgrade process, it is absolutely forbidden to power off, otherwise the CPU may become bricked. If it occurs, it needs to be restored through the JTAG interface (TK212A tool cable).

8.2 Backup Battery Management

Except for models such as PM857, PM863, PM865, PM867 that do not have built-in batteries or do not require batteries, all other CPUs have built-in lithium batteries (3.6V, 0.95Ah, 1/2 AA, lithium content 0.3g). The battery is used to maintain the real-time clock and programs in RAM (if there is no Flash storage).

Replacement cycle: Every 3-5 years. When the 'Battery Low' LED flashes, it needs to be replaced within 2 weeks. Steps:

Ensure that the CPU is powered on (otherwise RAM data will be lost).

Open the front panel, remove the old battery, and install a new battery (model ER14250 or equivalent) within 30 seconds.

Reset battery alarm (via Control Builder's' Clear Battery Fault ').

Attention: The transportation of CPUs containing lithium batteries must comply with UN3091 regulations, and single cell batteries with lithium content<1g can be exempted.

Quick Reference Table for Common Fault Codes (Based on Practical Summary)

Possible causes and solutions for the fault phenomenon

The CPU is stuck in the Initiat state, and the application program is missing or the memory verification has failed. Download the program again through Control Builder; Check battery voltage

CEX bus module does not recognize that the module is not securely plugged in or there is a backplane address conflict. Power off and reinsert; Check addresses (1-12) in hardware configuration

Enable termination on TB807 if the communication timeout terminal resistance is not set or the cable is too long (>25m); Using fiber optic extension

Intermittent disconnection and poor grounding of PROFIBUS slave station or incorrect bus bias voltage inspection of shielding layer single point grounding; The measured A/B line to ground voltage should be 2.5~3.5V

Ethernet channel loss, switch aging or IP conflict, replacement of industrial switch; Using Wireshark packet capture analysis

CI873 failed to connect to CompactLogix due to instance ID or connection size mismatch. Modify the data length of the target device in Studio 5000