If the upgrade process is not performed properly, there can be serious negative effects on the specified controller. Only qualified personnel should attempt the upgrade process.
If you have any questions concerning the upgrade of your controller, contact your controller administrator before using this program.
Controllers are upgraded through the primary communications subsystems. Before upgrading controllers be sure that the controller's primary communications subsystem is functioning correctly. You cannot perform an upgrade if the primary communications subsystem is down even if the secondary communications subsystem is functioning correctly.
WARNING!The effects of this program cannot be reversed.
The potential danger of upgrading an active controller
If an active controller in a redundancy pair has a configuration that includes modules, it is controlling the process. If you interrupt an active controller through an upgrade, the controller software causes the current active controller to become unavailable for control and initiates a control switchover.
WARNING!Switching over an active controller must be done with caution. Instead of upgrading the active controller directly, we recommend that you perform a manual redundancy switchover using DeltaV Diagnostics and then upgrade the standby controller. If you do upgrade an active controller, use the following guidelines.
Before upgrading an active controller, you must verify that the standby controller is configured and ready to take over control. To establish whether the controller is ready, open DeltaV Diagnostics, select the controller, and click the Redundancy icon. The standby controller is ready to assume control if the following conditions are true:
|
Name |
Description |
Value |
|
PExist |
Partner Exists |
YES |
|
PAvail |
Partner Available |
YES |
|
RedEnb |
Redundancy Enabled |
YES |
In addition to the above parameters, check the I/O OInteg parameter. Click I/O under the Redundancy icon and be sure that OInteg is GOOD.
If any of the above items has a value of NO, the standby cannot perform a bumpless switchover.
A condition of PExist=YES and PAvail =NO indicates that the switchover will take place, but the standby controller has no configuration. If an unconfigured standby controller takes over for a configured active controller, disruption of the process will result.