Fault-Tolerant, Solid-State TMR Architecture:

Each output point on the TRICONEX 3604E​ consists of three independent, isolated solid-state switches, one for each of the three TMR channels. These switches are configured in a series-parallel voting arrangement. For an output to be energized, at least two of the three switches must be commanded closed by the TMR processors. This hardware-level 2-out-of-3 voting ensures that a single-point failure within the module (e.g., a shorted or open switch) cannot prevent a required safety action from occurring, nor can it cause an unsafe, spurious activation.

High-Performance Switching with Diagnostics:

The module utilizes high-speed, high-current-rated solid-state switches for fast and reliable load switching. It incorporates comprehensive continuous diagnostics for each output circuit, capable of detecting critical faults such as open load (wire break), output short-circuit to power or ground, and internal switch failures. Diagnostic status is reported in real-time to the main processor, enabling immediate operator awareness and facilitating predictive maintenance.

De-Energize-to-Trip Safety Philosophy:

The TRICONEX 3604E​ is designed according to the fail-safe principle. In its normal, non-activated state, the output switches are open, and the field load is de-energized. A safety action is initiated by closing the switches to energize the load. Therefore, any loss of system power, module failure, or confirmed fault results in the outputs defaulting to the de-energized (safe) state, ensuring a predictable and inherently safe failure mode.

Online Replacement for Maximum Availability:

The module supports online, hot-replacement maintenance without requiring a shutdown of the safety system or the controlled process. If a fault is detected, the TRICONEX 3604E​ can be removed and replaced while the Tricon system remains operational. The TMR architecture ensures the remaining two healthy channels for each output continue to perform the voting function, maintaining the integrity and availability of the safety function throughout the maintenance operation.

The TRICONEX 3604E​ is deployed to activate critical final elements in safety shutdown sequences. Its primary applications are in Emergency Shutdown (ESD) systems for oil & gas platforms and refineries to actuate shutdown valves, in Fire & Gas (F&G) systems to activate fire suppression deluge valves and alarm beacons, and in Burner Management Systems (BMS) to shut off fuel valves. It is also widely used in turbine and compressor protection systems to initiate emergency stops and in chemical process plants to engage emergency venting or quenching systems.

A high-density TMR digital input module. It provides the complementary input function, reading discrete signals from field devices (e.g., pressure switches, flame detectors) that trigger the safety logic. The TRICONEX 3604E​ executes the resulting output commands from that logic.

A TMR contact (relay) output module. While the TRICONEX 3604E​ uses solid-state switches, the 3625​ provides physical, dry contact relay outputs. The choice between them often depends on load characteristics, isolation requirements, and application preferences.

The Main Processor Module. The TRICONEX 3604E​ receives its independent command signals from the three channels of the TRICONEX 4351B. The main processor executes the safety application, and its outputs are voted on at the hardware level within the 3604E​ module itself.