A triplex system looses one channel, the system is now,
- fail redundant
- fail operational
- fail passive
Explanation
Losing one channel of a triplex system leaves two channels, which can detect a further disagreement and disconnect safely without a hazardous out-of-trim condition. That two-channel state is fail passive; it can no longer continue controlling through a second fault, so it is not fail operational.
Jordi asking:
shouldnt this be fail operational? it still has 2 channels
Community Comments (0)
No one has posted a comment here yet.
Please Sign In to post a comment.