ABB S600 I/O Module Replacement and Troubleshooting Guide

Replacement Specification and Troubleshooting Practice of ABB Advant Controller 160 S600 I/O Module

The position of S600 I/O in Advant OCS system

Advant OCS (Open Control System) consists of a set of computerized units and a local area network for communication, where the controller is the computer unit that runs control applications and is connected to the process through process I/O hardware. S600 I/O refers to the process I/O hardware of the Advant Controller 100 series. The modules shared by Controller 110 and Controller 160 are described in the S600 general manual, while this I/O system (AX645, AX646, DI685, DP640, DX610, CI610/615, CI630/631, etc.) is only used for Advant Controller 160.

The system architecture is as follows: a Basic Station (including the PM64x processor module) can expand up to seven I/O Stations, which are interconnected through an I/O expansion bus. Each controller must be equipped with a CI630 (coaxial cable) or CI631 (twisted pair cable) communication interface in slot 2, responsible for internal data management tasks of the controller; The auxiliary communication interface (second AF 100) can be placed in slot 9/10. All S600 modules are installed in sub racks that comply with IEC 916 and communicate with processor modules through BIOB (Backplane I/O Bus). The front connector uses 50 pins (TF620 front connector, TK630/TK640 with shielded process cable).

Understanding this modular system is crucial for on-site maintenance: many in-service power plant boiler protection systems and turbine speed monitoring systems still operate on the Advant Controller 160 platform, and mastering their replacement and diagnostic methods is directly related to unit safety.

Product version identification: order information that must be checked before replacement

The release design format for each S600 I/O module is type+variant+version, for example DX610V00Rc: DX610 is the module type, V00 is the variant, Rc is the version. Variants indicate differences in firmware or hardware functionality of modules of the same type - for example, CI532V01 provides RCOM protocol functionality, while CI532V02 provides MODBUS I protocol functionality. Version information can be viewed through the Report Errors and Diagnosis Module functions of the Advant Station 100 series engineering station.

Key Reminder: Before replacing the basic software version of Advant Controller 160, it is necessary to refer to the module version matching list in the Release Note to confirm that the product version of the existing S600 I/O module is compatible with the target controller version. When replacing spare parts, the new module must be of the same type as the old module, which is one of the system self-test items.

Safety regulations and electrostatic protection

Replacement assignments must comply with two types of safety requirements:

Personnel and process safety (DANGER level): It is strictly prohibited to turn on the cabinet power during installation operations; Special caution should be taken when working with live systems, as the voltage inside the cabinet may be fatal; Ensure that all personnel are aware of the positions of the safety switch and main power switch; The inspection and trial operation of the process subsystem must have a responsible person confirm the interlocking link and report the trial operation plan to all assembly personnel; Process technicians must be present when testing and operating process objects; When the consequences of system initialization are unclear, it is strictly prohibited to press the Initialize button; The start stop and configuration of the control system may be remotely executed from other nodes through AF 100; AC 160 starts automatically when powered on, unless the START MODE selector has been set to the STOP position - this is a critical state that must be set during the maintenance phase.

Mechanical and ESD protection (CAUTION level): All electronic devices are sensitive to electrostatic discharge. Before handling circuit boards, it is necessary to ground oneself and tools, and use grounding wristbands (with built-in protective resistors) and folding work surfaces installed inside the cabinet; Circuit boards containing MOS devices are particularly vulnerable; Circuit boards that are not installed in the rack must be stored in conductive plastic bags; Before removing the card that cannot be plugged in or unplugged with power, the power must be turned off and the capacitor must be fully discharged; Before performing welding operations near the controller, the system power must be cut off and all boards must be pulled out by at least 20 mm.

Standard process for replacing I/O modules during operation

The Advant Controller 160 is designed with online module replacement support specifically for maintenance scenarios. The built-in protection mechanisms of the system include:

When unplugging the process connector, the system automatically registers this event, sets an error signal on the database element, and stops updating 'VALUES'; Module operation is prohibited (green RUN LED is off), output is turned off;

The bus connector adopts measures such as front grounding pins to ensure that the rest of the system is not disturbed when the module is inserted/removed;

Before putting the replaced module back into operation, the process connector must be inserted and all diagnostic checks must be qualified - self checking items include module type, slot position, module itself without defects, and process connector in place.

Before replacement, the impact range must be evaluated: replacing an I/O module affects all channels of the module; Replacing the bus extender (such as CI610) will affect the entire I/O station. Before replacing the analog or digital output module, it is recommended to isolate the output signal from the process.

Standard replacement steps (9 steps):

Reading personnel and process safety regulations;

Open the front door of the module and remove the signal name strip on the inside of the door for use with the new module;

Loosen the process connector fixing screw (about 15 turns) until it can rotate freely - if the module is running, it will register that the connector has been pulled out and stopped working (RUN LED off);

Pull out the process connector;

Loosen the module fixing screws (about 15 turns) and extract the module;

Verify that the new module is of the same type as the old module;

Insert the new module, ensuring it is fully seated at the back panel hinge, tighten the fixing screws - when the module is working properly, the red FAULT LED briefly lights up and then goes out;

Insert the process connector and tighten it, the new module will automatically start running and the green RUN LED will light up;

Replace the signal strip and close the front door.

AX646, DI685, DX610 and other modules are officially declared to support online replacement without the need for jumpers or adjustments.

Technical characteristics and maintenance points of core I/O modules

(1) AX645 Analog Input/Output Module. 16 channel hybrid type, each channel can be independently configured as 4-20 mA input or output, and the input and output can coexist in the same module. Output 14 bit resolution (accuracy 0.2%), input 16 bit resolution (accuracy 0.15%), all channels are electrically isolated by a set of 16 pairs of control systems (test voltage 500 V A.C.). The transmission delay increases with the number of activated channels: 2-4 ms for channels 1-4, 2-13 ms for channels 13-16; an additional 10 ms is required when the grid filter is enabled on the input side.

The core feature of AX645 is output signal read back supervision: the actual output current is read back and compared with the set value received by BIOB. When the deviation exceeds the configurable limit (SIG_deV, default 2%) and the duration exceeds FLT_SUR (default 1 ms, recorded in the DB table as 4 ms), a channel error is reported; Simultaneously monitoring the output voltage for short circuit detection - when the current is greater than 3 mA, there should be a configurable minimum output voltage (MIN_VAL, default 0.2 V, calculation rule MIN_VAL<(RL × 0.002)). The read back path is independent of the output path (dual reference voltage, dual shunt, dual converter), with extremely high fault coverage. The module also monitors the cyclic refresh of the communication memory, and outputs the "safe position" value (SP_VAL, default 0%, range -25%~+100%, switches to the set value when REACT=1, and maintains the last value when 0) upon timeout (CM-UPD, default 100 ms). Typical messages in the Engineering Station Error Report correspond to typical faults: Signal deviation=open circuit, Secondary signal value=short circuit, Refresh time out=processor module blockage, SETTIME>CM-UPD=configuration error; Input channel Live zero error=cable break (LZ_LIM defaults to 2 mA).

(2) AX646 Analog Input Module. 16 channels of single ended 4-20 mA input, with an additional 16 channels only used for internal self-test loop output of the module (the test mode is switched through the DO channel of BIOB and is not visible to the user, and the processor module cycle should not be less than 100 ms in test mode). The input resistance is 150 Ω, the maximum input current is 33 mA (5 minutes), the active zero alarm threshold can be adjusted by channel (default 3.5 mA), the measurement range is 0-23 mA (-25%~+118.75%), the comprehensive accuracy is 0.39%, the 16 bit resolution, and the total channel conversion time is 16 ms. The input is isolated from the system (560 Vrms), but there is no isolation between channels. Each channel provides a 24 V/23 mA sensor power supply with short-circuit protection. The 50/60 Hz digital grid filter can be switched on and off according to the channel, introducing a half cycle delay. When the value exceeds the allowable range, it is represented by "NAN" and the error bit is concatenated. Limit check supports four limit values of two highs and two lows plus one hysteresis, and the out of limit signal can be accessed by PC elements.

(3) DI685 digital input module. 32 channels, organized into 4 groups of 8 channels, supporting two sensor voltages of 24V/48V, with a maximum cable length of 1000m. Optocoupler isolation is grouped into 8 channels (500 Vrms). Two working modes: regular digital input and SOE event sequence recording (timestamp resolution of 1 ms, intermediate storage of 64 events). The anti shake filter is adjustable from 0-255 ms to the power of 2. Channel supervision (requires parallel connection of a 47 k Ω± 2% resistor at the 48 V contact) can detect wire breakage, sensor loss, and short circuit to ground, with independent switches for 8-channel groups. The internal 48V sensor power supply is provided in an 8-channel group with short-circuit protection, or an external 48V power supply can be used (at this time, the internal power supply must be turned off); The power supply voltage of each group of sensors is supervised by UP, and when the voltage is too low, it is indicated by the DB element. 32 yellow LEDs on the front panel: When channel supervision is enabled, ON indicates that the 48V contact has been connected, and OFF indicates channel failure; Display actual input value of 1/0 when not enabled. RUN green=normal, FAILT red=severe fault. In SOE mode, a shutter filter can be configured to prevent event storage overflow.

(4) DP640 speed measurement module. Two channel speed measurement, specifically designed for monitoring the rotational speed of steam turbines. The main channel has a sampling interval of 5 ms, a measurement time of up to one full revolution (such as 20 ms), a 14 bit resolution, an input pulse frequency of up to 50 kHz, and an output frequency lower limit of 0.03 Hz. It accepts three types of signals: 24V analog (such as eddy current probe), 5V TTL, and 5V differential (RS485). Two measurement modes: High Precision ON, measure with one full rotation of the gear disc (high precision), OFF, measure with the MEAs_PER set cycle (1-100 ms, fast mode).

The safety function system of DP640 is the most complete: the trip signal is generated by a dedicated fault safety output when the main channel overspeeds (HI_LIM2 defaults to 110%) or equipment fails (READYOP=0, ERR=1) - the transistor output (pins 7-8) changes to a high impedance of 24V, and the trip relay loses power (2-3 closed, 3-4 open). The tripping delay depends on the measurement cycle: up to 10 ms at 3000 rpm, HIGHPREC=1, H2=110%. Overspeed monitoring can be tested online: after setting the test position (ORD-VAL), DELTAVAL (default 20%) increment is added to the monitoring path, and the actual measurement value is not affected. Gradient supervision (MAX_GRAD default 1%/s) filters measurement glitches caused by EMI. If the disturbance persists for more than 5 measurement cycles, it is determined that the sensor is faulty and a trip signal is generated; If there is no pulse for 5 consecutive cycles (cable breakage), trip will be triggered. If there is no pulse for 30 seconds, the speed output will be 0 and trip will be reset. Sensor signal quality supervision includes minimum peak to peak value (1 Vpp for 24 V input, 0.66 Vpp for TTL, 0.33 Vpp for RS485), active zero point (UA379 transmitter), and upper and lower limits of eddy current probe distance (UT386: low level<-19 V, high level>-1.5 V alarm). The sensor power output+24/-24/12/5 V is monitored for open circuit (>5 mA considered OK) and overload (>50 mA error). Configuration restriction: DP640 can only be configured in one processor module (or two redundant processor modules), otherwise it will be periodically reconfigured and the tripping relay will repeatedly operate.

(5) DX610 relay output module. Mainly used as a trigger actuator for driving protection equipment in boiler protection systems (in conjunction with PM646 processor module). 6 identical functional units, each containing 3 isolation relay contacts (terminals USxF/USxX/ZPx/UVx/AxZ/AxA/AxX, x=1-6), supporting 2-out-3 disconnection operation; Each unit is equipped with an independent relay to form a second tripping circuit, which is triggered by PM646 through a dedicated hard wired input (KN/KP). The relay status can be read back through auxiliary contacts (RM1/RM2). The process voltage UP of each functional unit is independently monitored, and when the voltage is too low, it is indicated by the DB element. Contact rated 60 V DC/2 A fast action, contact rated power 120 W, isolation between output channels and system output is 560 Vrms/1500 Vrms respectively. Unlike 81AR01, this module does not have a built-in actuator power supply fuse, and the output is protected by a zero diode. There are 19 LEDs on the front panel, one for RUN/AULT, with the first 8 yellow lights indicating input status and the last 8 yellow lights indicating output status. The dedicated PC element (PC_SX610) is used for the operation and inspection of the boiler protection system, and the AX646 is also equipped with the PC_SX646 element.

Troubleshooting of Bus Expansion and Communication Module

CI615/CI610 expansion bus pair. CI615 is installed in the Basic Station, and CI610 is installed in the first two slots of each I/O Station (single unit must be in slot 1), interconnected through TK610 bus extension cables (2.5/5/10m three specifications), with a total cable length of no more than 20 meters. The topology must be point-to-point, and branching or radiating connections are not allowed; The terminal I/O station needs to be equipped with TC610 terminator - the extension bus cannot work without a terminator; CI615 contains a proximal end connector. The switching of redundant configuration (two CI615+two CI610 per station+two cables) is completed within 100 ms; The system software periodically switches between primary and backup to verify the effectiveness of redundancy.

The three state mechanism is the diagnostic basis: RESET (after power on or reset), PASSIVE (not communicating with other stations but the OSP watchdog is still active - even if both redundant CI610s are passive, the OSP signal can still be activated), and ACTION (normal transmission). The supervision function of CI610 covers: the module's own power supply (if it is too low, it will remain in a reset state and the FAILT red light will be on), the USA/USB power supply voltage (if it is below 17-15V, an error will be reported but the FAILT red light will not be on), and data transmission supervision (CI610 will stop running when there is a serious transmission error). I/O bus extension cable open circuit monitoring: DB element ERR is activated when the cable is interrupted or not terminated. The station address must be set to 1-7 and unique.

CI630/CI631 AF 100 communication interface. CI630 is used for coaxial AF 100 (up to 80 stations, BNC 75 Ω, TK518/TK516 cable), and CI631 is used for twisted pair (up to 32 stations). In the primary backup redundancy pairing, the AF 100 station address for backup is equal to the primary station address plus 80 offset. Therefore, the primary CI630/631 station address should not exceed 47 (otherwise, if the backup address exceeds 127, it cannot participate in the bus master control function - this is a necessary condition for achieving primary backup cycle switching in single controller redundancy configuration). The station address 1-79 is unique.

Fault response mechanism: When the main CI fails, it enters the passive state, and the processor module detects it and immediately instructs the backup to take over - because the backup is continuously updated, the switch is undisturbed; Backup failures are detected by the main CI and reported to the operation station through station status, and the switch to the faulty module is automatically prevented. Each one hour periodic forced switch verifies the availability of the two machines. During the switch, some DSPs may lose one transmission cycle (with no actual impact within the four cycle timeout mechanism), but the switch is delayed in the following situations: the main CI is serving as the bus master, managing bus configuration, and transmitting service data. RUN green light indicates complete configuration and can run; The FAULT red light indicates a fatal hardware error (at this time, the remaining LEDs are converted for diagnostic purposes); MASTER lights up only one CI in the entire network at the same time (token rotation); CONFIG OK indicates consistency with the current main CI dataset configuration cognition; NOGOBACK UP light indicates that the main module cannot be forcibly switched to backup. Mixed use restriction: Each AF 100 interface can only use one CI type (CI630 or CI626, CI631 or CI627), and only CI630/CI631 can be redundant.

Visual inspection and daily maintenance

The inspection cycle depends on environmental factors such as vibration, air pollution, and temperature, covering four aspects: safety inspection (all screw terminals are tightened, wiring/modules/electrical components are undamaged, with a focus on overheating marks, insulation damage, and wear); Cleaning (using compressed air or vacuum cleaner to remove dust, wiping stubborn dirt with a lint free cloth dipped in methanol); Air filter (clean with warm water and neutral detergent, replace after three washes, and use approved spare parts); Forced cooling (fan operation check).

Reference operating conditions for the module itself (taking AX645 as an example): operating temperature 0-55 ° C, temperature gradient ± 10 ° C/h, humidity 95% RH (3K4 non condensing), atmospheric pressure 106-70 kPa; Vibration 0.15 mm/10-58 Hz, 2 g/58-150 Hz; EMC has passed a complete set of tests including IEC 801-2 electrostatic discharge 8 kV air/6 kV contact, IEC 801-4 fast transient 2 kV (level 4), IEC 801-5 surge 2 kV CMV, etc. Environmental exceedance during on-site troubleshooting is a common hidden cause.

Engineering summary of replacement and troubleshooting

For on-site maintenance of the S600 I/O module, it is recommended to use the "six step diagnostic method":

Check LED: RUN green light=normal; Fault red light=serious fault (self-test failed or hardware defect detected); 32 channel yellow lights of DI685 and 16 I/O yellow lights of DX610 provide channel by channel status;

Check Error Report: The device specific messages in the engineering station error report directly point to the fault types - AX645 Signal deviation (open circuit), Secondary signal value (short circuit), Live zero error (cable disconnection), Refresh time out (processor blockage);

Core type and position: module type mismatch or slot position error will result in self-test failure and RUN not lighting up - this is the most common problem after replacement;

Verification process connector: If the connector is not securely plugged in, the module remains in a disabled state, RUN does not light up, and the output is turned off;

Testing redundant paths: The periodic primary backup switching failure of CI610/615 and CI630/631 exposes potential defects, and the NOGOBACK UP and BACK UP light states are intuitive indicators of redundancy health;

Review configuration constraints: Parameter mismatches such as DP640 single processor configuration, CM-UPD and processor write cycle matching (SETTIME<CM-UPD), and GRIDFREQ grid frequency setting (50/60 Hz, introducing an additional 10 ms delay) will be reported by the system as configuration errors.

When performing module hot replacement, strictly follow the sequence of 15 turns of loose nails, unplugging connectors, core type, inserting to the bottom, and tightening, and always remember that replacing the output module may cause short-term loss of critical signals and damage to process equipment. Fully evaluate the impact before starting. A standardized replacement process, combined with a thorough understanding of LED status, error reporting, and DB element ERR signal chain, can enable the Advant Controller 160 high availability I/O platform to maintain a predictable, diagnostic, and online maintainable operating state throughout the entire lifecycle of the unit.