Fault Tolerant Design

ProTech-GII uses a Triple Modular Redundancy (TMR) system with three independent, fault-isolated modules (A, B, C). Modules share data via a certified CAN network and support both Independent and Voted Trip Relay models.

The system ensures all modules run the same configuration and triggers an alarm if differences are detected. Modules can be safely hot-swapped while the system is online.

Users can customize redundancy logic using one, two, or all three modules for flexible sensor and trip/alarm configurations.

Security

The ProTech-GII utilizes two password levels, a Test Level Password and a Config Level Password. The same passwords are used by the Programming and Configuration Tool (PCT) and Front Panel.

The Test Level Password is required to:

• Initiate tests.

• Reset logs (except for the Peak Speed/Acceleration Log).

• Change the Test Level Password.

The Config Level Password provides access to any function that requires the Test Level Password. Additionally, the Config Level Password is required to:

• Change any program setting.

• Upload configuration settings file into a module using the PCT.

• Reset the Peak Speed/Acceleration Log.

• Change the Config Level Password.

Each of these passwords meets NERC (North American Electric Reliability Corporation) cyber security requirements.

The default password for Test and Config Level is “AAAAAA”.

Module-to-Module Communications

An isolated communications bus is used between modules to:

• Share module input signals and event latch status information.

• Copy configuration settings from one module to another module.

• Compare module configuration settings for differences.

• Verify the health and state of the other modules before allowing a module test to be performed.

• Pass a “module test token” between modules when performing an “Auto Sequence Test” routine.