The ABB August Systems TM117 is a critical safety component of the CS300 Triple Modular Redundant (TMR) control system. This 8-channel relay output module is engineered for maximum fault tolerance in high-integrity applications, such as Emergency Shutdown (ESD) and Fire and Gas (F&G) systems. By utilizing a “two-out-of-three” (2oo3) voting architecture across its triplicated circuitry, the TM117 ensures that no single hardware failure can lead to an unsafe state or a nuisance trip.
For availability and technical support on this legacy model, please contact our specialized safety systems team.
Product Specifications
| Feature | Details |
| Model Name | TM117 |
| System Compatibility | August Systems CS300 TMR |
| Channel Count | 8 Isolated Channels |
| Architecture | Triple Modular Redundant (TMR) |
| Voting Logic | Internal 2-out-of-3 (2oo3) Hardware Voting |
| Relay Type | High-Reliability Hermetically Sealed Relays |
| Dimensions (WxHxD) | Standard CS300 Chassis Module Size |
| Net Weight | 0.85 kg |
| Output Rating | Typically 2A @ 24V DC / 120V AC (Load Dependent) |
Operational Precautions
- Chassis Grounding: Ensure the CS300 rack is bonded to a low-impedance safety earth. Floating grounds in TMR systems can lead to “voter disagreement” errors and unnecessary diagnostic alarms.
- Hot-Swap Protocol: While the CS300 supports online replacement, always verify the “Active” status of the redundant partners before removing a TM117 module to ensure the safety loop remains closed.
- Contact Arc Suppression: When driving inductive loads (solenoids, large contactors), always install external flyback diodes or RC snubbers to prevent contact welding and extend the life of the internal relays.
- Diagnostic Monitoring: Regularly check the system console for “Fault” or “Discrepancy” LEDs on the module faceplate. A single fault in one of the three paths does not trip the load but must be addressed to maintain the 2oo3 safety integrity.
FAQ (Questions & Answers)
Q: What does “Triplicate” mean in the context of the TM117? A: It means the module contains three independent processing paths. Each output command is processed by all three paths, and the final physical relay state is determined by a hardware-based majority vote.
Q: Can I use the TM117 for non-safety critical tasks? A: While possible, the TM117 is specifically designed and priced for high-availability safety environments. Using it for standard I/O is typically inefficient compared to simplex or dual-redundant alternatives.
Q: Is the TM117 compatible with the newer ABB 800xA HI (High Integrity) systems? A: The TM117 is part of the legacy August Systems/ABB CS300 line. Migration to 800xA HI usually involves replacing the hardware with AC 800M HI modules (like the DO880), though some interface options may exist for phased upgrades.
Similar August Systems & Safety Models
- TM111: TMR Digital Input Module for CS300 systems.
- TM115: TMR Analog Input Module for high-precision safety sensing.
- TM118: High-current variant of the relay output module.
- CS300 Control Processor: The central TMR processing unit for the August series.
- DO880: Modern ABB Relion/800xA High Integrity digital output equivalent.



