Description
I. Product Overview
Bently Nevada 3500/34 (Part No.125704-01) is a TMR triple modular redundant safety relay output module for the 3500 machinery protection system, complying with API 670 and SIL2 functional safety standards. Matched with RIM rack interface module and three groups of monitoring modules, it adopts 2-out-of-3 hardware voting logic to realize emergency trip interlock for critical rotating equipment such as steam turbines and compressors.
II. Hardware Structure and Composition
1. TMR 2-out-of-3 Hardware Voting Unit
The independent hardware voting circuit receives alarm signals from three redundant monitoring channels, only triggers relay trip output when at least two channels issue danger alarms. Single-channel hardware fault will not cause protection misoperation or failure to operate, and the system can run in degraded dual-channel voting mode to guarantee continuous safety protection capability.
2. Three-channel Isolated Sealed Relay Output Unit
Each SPDT relay adopts epoxy full sealing design with built-in RC arc suppression circuit to avoid contact ablation caused by inductive load arc. Three channels are electrically isolated from each other, supporting flexible configuration of safety action modes to meet the de-energized trip design specification of power plant ETS protection loops.
3. Redundant Backplane Bus Communication Unit
High-speed proprietary rack backplane bus realizes bidirectional transmission of voting results, relay status and fault diagnostic data. Hot-swap replacement is supported, and the TMR redundant protection loop will not be interrupted during on-site maintenance without unit shutdown.
4. Status Indication & Full-loop Self-diagnosis Unit
Front-panel LED indicators display module health, bus communication and channel alarm status. Real-time monitoring of relay coil open circuit, contact adhesion and communication abnormality realizes fast positioning of hidden faults in safety interlock loops.
5. Isolated Power & Industrial Protected Unit
Supplied by rack backplane with multi-level overvoltage, surge and reverse connection protection. The three-proof coated PCB and metal reinforced structure adapt to harsh cabinet environments with high temperature, dust and strong electromagnetic interference, effectively extending the electrical service life of sealed relays.
6. Standard Rack Plug-in Mounting Unit
Single-slot installation matched with rear I/O terminal module supports direct in-situ replacement of legacy TMR relay modules. Only voting logic and relay mode configuration are required for rapid commissioning after hardware replacement.

III. Technical Specifications
(1) Electrical Parameters
- Power Supply: Rack backplane DC power supply, typical power consumption 5.5W
- Relay Type: 3-channel epoxy-sealed SPDT with built-in RC arc suppression circuit
- Contact Rating: 30VDC/5A, 250VAC/2A; mechanical life ≥10 million cycles
- Safety Architecture: Hardware 2-out-of-3 TMR voting, SIL2 functional safety certified
- Configurable Function: Normally energized/de-energized, NO/NC contact programmable
- Diagnosis: Relay coil, contact adhesion and communication fault online self-test
- Communication: 3500 proprietary redundant backplane bus, hot-swap supported
(2) Environmental Parameters
- Operating Temperature: -30℃~+65℃; Storage Temperature: -40℃~+85℃
- Relative Humidity: 5%~95%RH, non-condensing, no corrosive gas or conductive dust
- Ingress Protection: IP20, installed only in indoor ventilated control cabinets
(3) Mechanical Parameters
- Mounting: Standard single-slot rack installation with matched rear I/O terminal module
- Net Weight: Approx. 0.42kg
- Protection Process: Metal reinforced housing, three-proof coated PCB, epoxy sealed anti-vibration relays
- System Matching: Must be configured with RIM module + three monitoring modules for TMR architecture
- Origin: United States
IV. Product Functions and Features
1. TMR Triple Redundant Voting Eliminates Single-point Safety Risks
The 2-out-of-3 hardware voting mechanism fundamentally avoids protection misoperation or failure caused by sensor, cable or single-module faults, fully meeting the strict safety design requirements of ETS emergency trip loops for critical power generation and petrochemical equipment.
2. Sealed Relay with Arc Suppression Ensures Long-term Reliable Trip
Epoxy sealing and built-in arc absorption design effectively prevent contact ablation and adhesion; the de-energized safety mode ensures automatic protection action under power failure or circuit disconnection, complying with industrial fail-safe design principles.
3. Flexible Programmable Logic Adapts to Complex Interlock Scenarios
Rich Boolean logic configuration supports multi-channel combined alarm triggering, three relays can be set independently for unit main trip, local audible and visual alarm and DCS remote signal feedback to realize integrated safety interlock management.
4. Full-loop Diagnostics Enables Predictive Maintenance of Safety Loops
Timestamped fault and action records are uploaded to the monitoring platform, helping maintenance personnel identify hidden defects such as contact aging and loose wiring in advance to prevent latent protection failure accidents.
5. Hot-swap Design Minimizes Unit Shutdown Risks
Faulty modules can be replaced online under degraded dual-channel protection mode without ETS interlock removal, greatly shortening maintenance downtime and reducing safety control risks of high-risk process devices.
6. Rugged Wide-temperature Design Realizes Long-term Unattended Operation
Fanless passive heat dissipation and industrial three-proof technology adapt to 24/7 continuous harsh industrial operation, with low failure rate and only regular contact inspection and terminal tightening required for routine maintenance.
V. Application Scenarios
- ETS emergency trip safety loop TMR redundant protection for turbine units in thermal, gas and hydropower plants.
- SIL2 high-level safety interlock renovation for large centrifugal and reciprocating compressors in petrochemical and LNG facilities.
- Safety protection upgrading of key rotating machinery complying with API 670 specification in metallurgy and air separation industries.
- Local alarm and remote status signal output for unit safety interlock systems connected to DCS and SCADA platforms.
- Spare part replacement and reliability upgrading of legacy TMR protection systems based on 3500 rack framework.

