ABB DO880

Product Brief:​ The DO880 is a SIL3-certified (IEC 61508), high-integrity digital output module in the S800 I/O family. It provides sixteen 24 V DC sourcing outputs with comprehensive loop supervision (short-circuit, open-load detection with configurable resistance thresholds), supports single or redundant (1oo2) configuration, and is intended for safety-instrumented final element control — e.g., ES&D solenoid valves, safety alarm beacons — in 800xA / Symphony Plus DCS.

Category: SKU: ABB DO880

Description

ABB DO880

  • Technical Specifications:
    • Output Voltage: 24 V DC (19.2–32 V DC)
    • Channels: 16, one isolated group (group isolated from backplane)
    • Output Type: High-side MOSFET, current sourcing (PNP)
    • Max Continuous Current: 0.5 A per channel; total 8 A max per module (thermal derating applies)
    • On-State Drop: <0.5 V typical
    • Short-Circuit Protection: Current-limited; fault-tolerant design (Fault Tolerance = 1 per IEC 61508)
    • Loop Supervision: Open-load and short-circuit detection; configurable loop resistance threshold (typ. 50 Ω – 2 kΩ depending on mode)
    • Redundancy: Supports 1oo2 redundant pairing with second DO880
    • Safety Integrity: SIL3 per IEC 61508; Category 4 per EN 954-1 / EN ISO 13849-1
    • OSP: Degraded mode for normally energized (ND) channels — can force safe state on error
    • Isolation: 500 V AC dielectric test, 50 V rated between field side and ModuleBus
    • Power Dissipation: Typ. 5.6 W (16 ch × 0.5 A × 24 V — actual lower due to drop; module heating accounted)
    • ModuleBus Current: +5 V typ. 45 mA; +24 V ext. typ. 10 mA (diag)
    • Max Field Cable Length: 600 m
    • Operating Temp.: 0 °C to +55 °C (compact MTU vertical: max +40 °C)
    • Compatible MTUs: TU810V1, TU812V1, TU814V1, TU830V1, TU833, TU842, TU843, TU852
    • Keying Code: FE
    • Certifications: CE, UL 61010, ATEX / IECEx Zone 2, cULus, SIL3, marine
  • Functional Features:
    • SIL3 certified for final element control in SIS (ESD solenoid, fire pump start, etc.)
    • Continuous loop monitoring detects broken wire or shorted solenoid coil
    • Supports redundant output pairing — if one module fails the other maintains safe control per voting architecture
    • Diagnostics readable via controller — channel error, module warning, process voltage loss
    • Can be configured for normally de-energized (ND) or normally energized (NE) safety logic
  • Application Scenarios:
    • SIL3 ESD solenoid valve actuation in process shutdown loops
    • Safety alarm horn / beacon activation in SIS
    • Turbine protective trip-valve control (redundant DO880 pair)
    • Any SIF requiring SIL3-rated digital output with diagnostics
  • Material & Structure / Working Principle:​ Same S800 transistor-output architecture as DO810 but with duplicated sensing paths, self-test routines, and loop supervision per IEC 61508.
  • Installation Requirements:
    • Insert into S800 MTU with key code FE; ensure tight seating
    • Connect 24 V DC process supply to module process voltage terminals; verify polarity
    • For redundant configuration, wire field device per ABB 1oo2 wiring diagram (typically parallel outputs with OR-ing diodes or series with test capability — follow SRS)
    • Configure loop supervision thresholds to match solenoid coil resistance (e.g., 20 Ω typical — set min/max acceptable loop R)
    • Download configuration from 800xA Engineering Workbench with SIL parameters
  • Precautions:
    • Safety Lifecycle:​ DO880 is part of SIS — must be specified, designed, installed, and maintained per SRS (Safety Requirements Specification) and IEC 61511.
    • Loop Resistance Setting:​ Incorrect open-load threshold may cause spurious faults — measure cold solenoid resistance and set limits with margin (e.g., ±30 %).
    • Redundancy Wiring:​ Improper diode / wiring in redundant pair invalidates SIL claim — use ABB-approved redundant wiring practice.
    • Proof Test:​ Include DO880 output function test (forced trip test) in SIS proof-test procedure at interval defined in SRS.
    • Do NOT bypass loop supervision​ — defeating diagnostics removes SIL capability.