Description

ABB PM867K02 3BSE076356R1

I. Basic Information

Model No.：3BSE076356R1 (Hardware Type PM867K02)

Brand：ABB

Product Line：High-performance redundant CPU controller for AC800M / System 800xA DCS. It is an expanded memory upgraded version compared with PM867K01 (3BSE076355R1), designed for high-reliability and SIL3 safety-critical process control.

Product Positioning

3BSE076356R1 PM867K02 is a high-integrity redundant process controller of AC800M series, equipped with enhanced processing core and expanded memory. It is fully compatible with S800 standard I/O and S900 SIL3 safety I/O stations, native supporting redundancy of CPU, communication bus and I/O link. It executes continuous process regulation, sequence logic, safety interlock, batch control and millisecond time-stamped SOE event recording. Certified IEC61508 SIL3 by TÜV when matched with SM812 safety module, it acts as the core arithmetic unit of large-scale distributed control systems for thermal power, chemical, oil & gas, metallurgy and water treatment industries.

Hardware Architecture

Compact rack plug-in integrated structure, composed of 5 core hardware units:

Main Processing Unit: 133MHz industrial MPC866 processor with floating-point core, only 0.09ms for 1000 Boolean operations; hardware watchdog monitors runtime status continuously.
Storage Unit: 64MB expandable running RAM, 4MB solidified firmware PROM, detachable CF card for project program, historical events and fault logs; built-in 3.6V backup lithium battery to retain RTC and critical variables after power loss.
Multi-port Communication Unit: Dual isolated RJ45 Ethernet (CN1/CN2 for redundant control network), COM3 RS232 debug port, COM4 isolated configuration serial port; all ports with independent electrical isolation to eliminate bus crosstalk.
Diagnostic Unit: Multi-group front-panel LED indicators for power, run, fault, redundancy sync, communication link and INIT status; hardware fault latch retains fault code even after power off.
CEX-Bus Backplane Bus Interface: High-speed parallel internal bus for high-speed data exchange with local I/O and communication expansion modules, supporting redundant bus switching.
The whole unit adopts full-metal shielding housing, multi-layer PCB with separated strong/weak current wiring layout, ESD and surge protection circuits on all ports, adapting to industrial workshops with strong electromagnetic interference.

Mounting Specification

Vertical plug-in installation for standard 19-inch DCS racks, supporting two layout modes: single CPU independent operation and dual CPU redundant pair installation.

It has passed IEC60068 anti-vibration, humidity cycling and wide-temperature aging tests. Snap-lock base enables tool-free installation and disassembly; separate wiring channels for front and rear panels separate strong and weak current cables to avoid cross interference.

Dimension (H×W×D): 186mm × 119mm × 135mm, net weight 0.82kg.

Compatible Systems

Engineering & Monitoring Software: ABB System 800xA, Control Builder M programming tool, Operator HMI station
I/O Substations: S800 standard I/O modules, S900 SIL3 safety I/O stations
Expansion Modules: SM812 safety integrity module, CI854/CI855 communication interface card, TB840 terminal base
Supported Buses: CEX-Bus internal bus, Modbus TCP, OPC UA, Profibus DP, IEC60870-5-104
Industrial Platforms: Thermal power boiler/turbine control, chemical distillation unit, long-distance oil & gas pipeline, metallurgical rolling line, water treatment automation system

Product Characteristics

Expanded memory version supports larger engineering programs, multi-loop PID regulation and mass SOE event storage, suitable for large complex process flows;
Complete SIL3 safety integrity architecture, TÜV IEC61508 certified with SM812 module, applicable to SIS safety interlock control;
Full-link redundancy (CPU, Ethernet, CEX-Bus, I/O link), seamless master-standby switching within 10ms without control interruption;
Parallel multi-standard industrial communication, dual physically isolated Ethernet for separate real-time control network and monitoring management network, improving system security;
Comprehensive local hardware self-diagnosis accurately locates CPU failure, memory abnormality, bus disconnection, communication port fault and CF card damage;
Modular hot-swappable matching I/O architecture allows controller replacement online without system shutdown, shortening maintenance downtime;
Industrial wide voltage & wide temperature adaptation, stable long-term operation in standard electrical rooms without cabinet air conditioning.

II. Technical Specifications

2.1 Electrical Power Parameters

Rated Input Power: 24VDC, tolerance 19.2VDC～30VDC
Typical Power Consumption: 5.1W, Max 8.6W
Rated Operating Current: Typical 210mA, Max 360mA
Backup Battery: Built-in 3.6V lithium battery, service life ≥1 year, maintains RTC clock and power-off variable cache
Port Withstand Voltage: 500VAC/1min to ground for communication ports, 1500V isolation voltage between bus channels
Protection Circuits: ±4kV ESD static protection and ±2kV EFT surge protection integrated on all ports

2.2 Calculation & Storage Parameters

Processor Frequency: 133MHz 32-bit MPC866 industrial processor
Running RAM: 64MB (Expanded version PM867K02)
Firmware PROM: 4MB
External Program Storage: Detachable CompactFlash card (Max 8GB)
Logic Calculation Speed: 1000 Boolean operations ≈0.09ms; single PID loop ＜0.1ms
SOE Event Capacity: Local cache ≥50,000 millisecond time-stamped fault & action records

2.3 Communication Interface Parameters

CN1/CN2: Dual 10/100M auto-adaptive RJ45 Ethernet for redundant control network, supports Modbus TCP, GOOSE
COM3: RS232C debug serial port with modem control signals, max baud rate 115200bps
COM4: Electrically isolated RS232 configuration serial port, dedicated to program download via Control Builder M
CEX-Bus: High-speed parallel backplane bus, 12Mbps transmission rate, connects local I/O and communication modules

2.4 Environmental Specifications

Operating Temperature: -25℃ ~ +60℃ (standard unventilated cabinet condition)
Storage & Transport Temperature: -40℃ ~ +85℃
Relative Humidity: 5%～95%RH, non-condensing, no corrosive gas or heavy dust
Vibration Standard: IEC60068-2-6, continuous 0.7g vibration (horizontal & vertical)
Protection Class: Bare board IP20, overall IP30 when installed in standard metal cabinet
EMC Compliance: IEC61000-6-2 industrial immunity standard

PM866K01 3BSE050198R1 (3).jpg

III. Key Features

3.1 Full-Process Industrial Logic Calculation & Control

Supports full set of IEC61131-3 programming languages of Control Builder M (ST, FBD, LD, SFC), realizing continuous flow/temperature/pressure PID regulation, equipment sequential start-stop, batch recipe management, load balancing and ratio control. The expanded memory supports hundreds of closed-loop regulation loops and synchronous processing of thousands of digital & analog signals with real-time lag-free response.

3.2 SIL3 High-Safety Interlock Control

Forms complete SIL3 safety control unit with SM812 safety module, physically isolated independent safety arithmetic core from normal control logic. It executes emergency shutdown, high pressure/temperature interlock, flame protection and leakage cut-off SIS safety functions with dual-channel voting verification to avoid safety misoperation caused by single hardware failure, complying with chemical & thermal power safety codes.

3.3 Four-Redundancy Seamless Hot-Standby Operation

Two 3BSE076356R1 deployed as redundant CPU pair, the primary controller synchronizes all programs, variables and regulation outputs to standby CPU in real time. When primary CPU fails, control network breaks or backplane bus malfunctions, standby CPU takes over control output within milliseconds without actuator jump, ensuring non-stop continuous production.

3.4 Multi-Network Layered Data Interaction

Physically isolated dual Ethernet networking: one dedicated to real-time field I/O control, the other connected to upper 800xA HMI and remote dispatching system; COM serial port for local program download and portable on-site debugging; high-speed CEX-Bus backplane bus collects local I/O data with parallel communication without bandwidth preemption, balancing real-time control and mass data upload.

3.5 Full-Range Self-Diagnosis & Event Traceability

Full-channel self-test of CPU, memory, CF card, all communication ports and CEX-Bus backplane upon power-on; real-time monitoring of undervoltage, communication packet loss, I/O station disconnection, program error and redundancy sync abnormality during operation. Faults lock millisecond time-stamped SOE records locally on CF card, accessible via front panel, upper HMI or USB export for archive, quickly locating root causes of system faults.

3.6 Local Program Storage & Offline Backup

Control logic, parameters and interlock programs are fully stored on detachable CF card supporting offline full project backup. After replacing the same model controller, insert the CF card to restore all control logic without re-downloading configuration from PC, greatly shortening on-site commissioning time.

IV. Working Principle

The 3BSE076356R1 PM867K02 controller operates based on the core logic of high-speed processor calculation + redundant bus interaction + dual-unit synchronous hot standby to complete full DCS process control arithmetic.

After 24VDC power supply startup, the unit executes automatic hardware self-test to verify processor, memory, CF card, four communication ports and CEX-Bus backplane bus. Passed self-test switches to run mode and loads control engineering programs stored in CF card.

Under single-unit independent operation, the controller cyclically collects analog and digital field signals from S800/S900 I/O stations via CEX-Bus, executes PID regulation, logic interlock and batch arithmetic in memory, and issues output commands to corresponding I/O modules to drive on-site valves, motors and actuators; dual Ethernet synchronously uploads real-time working conditions, parameters and events to upper monitoring system.

Under redundant paired operation, the primary CPU copies all intermediate variables, regulation outputs and event records to standby CPU memory every millisecond. If primary CPU hardware fails, control network interrupts or backplane bus malfunctions, the system immediately triggers switching logic, and standby CPU directly continues control output with synchronized data without re-collecting signals to realize seamless switchover.

The built-in diagnostic unit continuously monitors all channel status during operation. Any hardware or communication abnormality generates time-stamped SOE events stored locally, lights the corresponding fault LED on front panel and uploads fault code to HMI alarm window for rapid operator disposal.

V. Application Scenarios

Thermal Power Plants: Main control unit for boiler main steam, turbine auxiliary equipment, denitrification & desulfurization DCS, matched with SIL3 safety interlock;
Petrochemical Plants: Continuous process control and SIS safety interlock for distillation columns, reactors and oil & gas storage tank farms;
Long-Distance Oil & Gas Pipelines: Pump station pressure & flow regulation, shut-off valve interlock and remote dispatching data interaction;
Metallurgical Hot/Cold Rolling Lines: Closed-loop regulation of mill speed, temperature & tension, sequential start-stop control of equipment;
Municipal Large-Scale Water Treatment: Batch control of flow, liquid level and chemical dosing for sewage & clean water plants;
Legacy Industrial Automation Renovation: Replace low-memory old AC800M CPU, fully compatible with original I/O racks after memory expansion upgrade.