Description
Product Core Brief
- Model: PM865K02 3BSE031150R1
- Brand: ABB
- Series: AC800M System 800xA High Integrity
- Core Function: Pre-assembled dual CPU kit for 1:1 hot standby redundant process control with <10ms bumpless failover.
- Product Type: Redundant DCS Processor Kit (2× PM865K01 CPUs + Redundancy Cable)
- Key Specs: 24 VDC input | 32MB total RAM | SIL3 capable with SM811 safety module
- Note: Active OEM production, factory new kits stocked as complete rack replacement hardware.
Key Technical Specifications
| Parameter | Value |
|---|---|
| Full Kit Contents | 2× PM865K01 CPU, TK850 redundancy sync cable, dual TP830 baseplates |
| Processor Chip | MPC862P 96MHz |
| Boolean Execution Speed | 0.17 ms per 1000 boolean operations |
| Application RAM | 22.184 MB usable per controller unit |
| Flash Firmware Storage | 4 MB per controller unit |
| Operating Supply | 24 VDC, 19.2–30 VDC tolerance |
| Max Power Draw (Full Kit) | 2.9 W total dissipation |
| Redundancy Switchover Latency | <10 ms bumpless primary/backup handoff |
| Onboard Interfaces | 2× RJ45 Ethernet, 2× RS232C serial per unit |
| Supported Protocols | Modbus TCP, Profibus DP, MMS, IAC, CNCP clock sync |
| Safety Certification | IEC 61508 SIL2 (SM810) / SIL3 (SM811) |
| Operating Temp Range | 0 °C to +55 °C rack-mounted |
| Protection Class | IP20 (EN60529) |
| Compliance Standards | IEC 61131-3, UL508, RoHS, Zone 2 hazardous location rated |
Product Introduction
This dual controller bundle delivers factory-matched redundant processing for AC800M DCS racks, eliminating manual pairing of separate single controllers during site expansions or breakdown repairs. Both units maintain continuous real-time state synchronization to avoid process upset on primary fault conditions.
The integrated high-integrity architecture supports co-located safety and standard control logic when paired with an SM811 module, removing the need for separate safety PLC hardware on critical oil, gas, and power plant loops.
QA & Testing SOP (Transparency Building)
- Incoming Inspection: Cross-reference full kit serial numbers against OEM part registry to flag counterfeit hardware; inspect PCB traces, Ethernet ports, and redundancy cable connectors for shipping damage; log all batch codes and unit serials for full traceability.
- Live Testing: Mount both controllers to matching AC800M backplanes, supply regulated 24VDC bench power, load site reference control logic, and run continuous 24-hour redundancy failover cycling to validate <10ms switchover performance.
- Electrical Testing: Use Fluke 115 multimeter and insulation tester to verify chassis grounding resistance below 0.5Ω and PCB insulation resistance above 10MΩ between power and signal circuits for both controllers in the kit.
- Firmware/Config Backup: Capture identical firmware revision across both controllers via Control Builder M, photograph DIP switch positions on each board, export project backup files to encrypted offline storage.
- Final QC & Packaging: Wipe PCB surfaces with anti-static cleaner, seal each controller in individual static shielding bags, bundle with original TK850 sync cable, attach printed QC test tag with timestamp and technician ID before carton packaging.
Installation Pitfalls & Guide (Engineer to Engineer)
❗ Firmware Rev Mismatch: Uneven firmware versions between the two controllers break redundancy sync; both units must run identical firmware builds or the rack will trigger permanent fault alarms.❗ Redundancy Cable Miswiring: Reversing the TK850 sync cable connectors disables hot standby; label cable ends before disassembly and match OEM pinout markings.❗ DIP Switch/Jumper Errors: Mismatched rack node addresses on the two controllers split control network communication; capture high-res photos of original switch settings prior to removal.❗ Power Draw Miscalculations: The full kit draws 2.9W peak; undersized rack power supplies trigger undervoltage trips during simultaneous primary/backup startup.❗ ESD Dangers: Unwristed technician contact with exposed CPU PCBs causes silent gate failure; field records show ungrounded handling destroyed paired controller kits exceeding $22,000 in replacement costs.
4-step redundant kit replacement guide:
- Pre-install: De-energize the full rack, ground anti-static wrist strap, photograph DIP switches, Ethernet cabling, and redundancy cable routing.
- Removal: Unlatch rack retaining clips, disconnect all fieldbus, serial, and sync wiring, slide both original controllers out of their backplane slots.
- Install: Seat both matching units from the kit into designated slots, replicate original DIP switch settings, terminate the TK850 sync cable between the two controllers, reconnect all field wiring.
- Power-on Test: Restore rack power, confirm equal firmware versions, force manual primary/backup failover three times to verify bumpless switchover without I/O timeout faults.
FAQ (Frequently Asked Questions)
Q: What differentiates this kit from sourcing two standalone single controllers?A: The factory bundle ships with pre-tested matched firmware, a calibrated TK850 redundancy cable, and dual baseplates; sourcing separate units requires bench pairing and manual firmware alignment, adding 4–8 hours of commission labor on-site.
Q: Can individual controllers from the kit be hot-swapped while the rack runs?A: Single unit hot-swap is supported in active redundant racks; the remaining controller holds primary control without process trip. Full rack shutdown is mandatory only if both controllers require replacement at once.
Q: What warranty coverage applies to factory new kits?A: New original OEM kits carry a 12-month factory warranty covering both CPUs and the included sync cable. Tested surplus kits ship with a 6-month functional warranty; physical damage from miswiring or ESD voids coverage.
Q: Has this unit received official ABB end-of-life designation?A: No formal EOL notice exists; OEM continues full production of the complete kit for existing System 800xA plant upgrades and emergency maintenance spares.
Q: Will existing control logic retain after installing the redundant kit?A: Logic does not store natively on the hardware. Back up the project from the old rack before removal, then re-download the full program to both controllers in the new kit to maintain sync state.
Q: Is SIL3 safety functionality active out of the box?A: SIL3 compliance requires adding an SM811 high integrity module to each controller slot; the base kit only delivers standard redundant process control without safety certification by default. Verify with OEM datasheet for full safety hardware pairing rules.
Q: What communication fieldbus modules pair with this redundant CPU kit?A: Compatible interface hardware includes CI854 Profibus DP, CI867 Modbus TCP, and CI871 Ethernet/IP adapters validated for dual redundant rack setups. Cross-check firmware compatibility matrices before ordering accessory modules.
