Description The Trusted TMR analogue input module interfaces to 40 single-ended field input devices. A wide input range and programmable thresholds allow the module to be used in most voltage or current configurations. Comprehensive diagnostic tests are performed on each input channel, including tests for out of range values and stuck at failures. Fault tolerance is achieved through Triple Modular Redundancy (TMR) within the same module for each of the 40 input channels. The module can apply a digital filter to each input channel. Individual channels can be configured for high noise immunity (50Hz or 60Hz rejection), low noise immunity (fast response) or pass-through operation (no filtering). Each input channel has four configurable state thresholds, which may be assigned to SOE reporting. A change of state triggers an SOE entry. The on-board sequence of events (SOE) reporting has a resolution of 1ms. Each triplicated section of the module, referred to as a slice, conditions and measures each channel independently. Each slice is optically isolated up to 2500V dc. Each slice sends its data to a safety layer hardware voter that presents the information from all three slices to the Trusted TMR processor. When a fault is detected on a slice of the module, the Trusted TMR processor will flag the error, indicating the need to replace the module. The Trusted TMR processor will continue to use the information provided by the remaining two slices until a replacement module is available. Replacement modules can be located in a standby slot next to the module or in a designated SmartSlot with a temporary connection to the same Trusted termination assembly. Modules may be placed in any I/O module slot in a Trusted processor chassis or expander chassis. Once the I/O module configuration is set, mechanical keying is available on all I/O modules to prevent inserting a module into an incorrect slot. Configuration of the module is carried out using the Trusted Toolset running on an engineering workstation. Once configured and loaded into the Trusted controller, replacement modules are online educated by the TMR processor. Features 40 TMR input channels per module. Comprehensive diagnostics and self-test. 2500V dc optically isolation. Digital signal filtering on a per channel basis. Four user configurable thresholds per channel. On-board 1ms resolution sequence of events reporting. Hot replaceable. Front panel status LEDs for each channel. Module fault and status indicators. IEC 61508, SIL 3 safety applications.