Celebrating 100 million hours of error-free service.
The TRICON fault tolerant control system, our most trusted safety controller, was the first to be completely triple-redundant, industrially ruggedized and cost-effective.
The TRICON is a state-of -the-art fault tolerant controller based on a Triple-Modular Redundant (TMR) architecture. TMR employs three isolated, parallel control systems and extensive diagnostics integrated into one system. The system uses two-out-of-three voting to provide high integrity, error-free, uninterrupted process operation with no single point of failure.
Setting up applications is simplified with the TRICON, because the Triplicated TMR system operates as a single control system from the user's point of view. The extensive diagnostics are inherent and transparent to the programmer. All diagnostic information is stored in system variables and annuniciated with Light Emitting Diode (LED) indicators.

Benefits and features of the Triconex Triple Modular Redundant (TMR) Approach:
- No single point of failure – The failure of any single component will not affect the correct operation of the TRICON system.
- High Speed Processing – The Tricon V9.6 features two Motorola MPC860 reducing the scan time by more than half over previous versions.
- Design flexibility – Applications vary in their design requirements and the TRICON's strength is its ability to be configured according to the level of safety, availability and system cost required. Simplex and dual I/O modules allow you to choose between different levels of coverage ranging from simplex to TMR and reducing overall system cost.
- Very high safety integrity – With its TMR architecture and high diagnostic coverage, the TRICON system achieves Safety Integrity Level 3 as defined in the IEC 61508 Draft Standard on Functional Safety. TRICON systems are also certified by TUV for safety related operation in applications requiring the German Safety Requirement Class 5 and 6.
- High availability – The TRICON TMR system can operate with one, two or three functional Main Processors. Faulted modules can be replaced while the system is operational for continuous uninterrupted control. A typical system has an MTTFspurious of greater than 200 years using the MIL-STD failure rates defined in the IEC 61508 Draft Standard. Using actual failure rates based on 2003 Triconex field repair records, the MTTFspurious of a typical system exceeds 1,000 years.
- Simple programming – Triconex's IEC 1131-3 compatible Windows programming software provides the ability to program in function block, sequential function chart or ladder logic for quick and easy configuration and program emulation.
- Comprehensive diagnostics – An essential requirement of safety and critical control systems is the ability to provide complete on-line diagnostic coverage. TRICON TMR systems provide this capability without additional hardware or special applications programming.
- Low maintenance costs – Highly skilled technicians are not required because extensive built-in diagnostics automatically pinpoint faults to field replaceable modules.
- Online repair – The TRICON system is designed for continuous operation, providing online replacement of modules without system or process interruption.
- Transparent Triplication – The TRICON TMR system has three isolated, parallel control systems integrated into one set of hardware. Two out of three (2oo3) voting provides high integrity, error-free, uninterrupted process operation. The TRICON appears to be the user as one set of hardware, not three, allowing one control program for the application logic to be developed and downloaded to the three Main Processors.
Field sensors connect to input points on the field termination panels. These signals are then separated into three isolated paths on the input modules and the data is sent over separate communication paths to the three Main Processors.
After the control logic has been executed, output modules perform a 2oo3 vote of the output data received from the three Main Processors and send the result to the output termination panels and the final field elements.
- Certifications– The TRICON has numerous certifications covering a wide range of applications.
Each day the TRICON supplies increased safety, reliability and availability to a worldwide installed base. The following are a few typical applications:
Emergency Shutdown Systems (ESD)
Burner Management Systems (BMS)
Fire and Gas Systems (F&G)
Critical Turbomachinery Control
Railway Switching
Semiconductor Life Safety Systems (SEMI S2)
Nuclear 1E Safety Systems
Use of the TRICON continues to expand into new industries and applications as customers require increased safety and/or high availability in their systems. Today, Triconex has installed TRICON systems at customer sites in over 50 countries.
Tricon completes testing for Nuclear 1E Qualification– The Triconex TRICON has finalized all required testing for, and has been found to be compliant with, the EPRI TR-107330 document entitled "Generic Requirements Specification for Qualifying a Commercially Available PLC for Safety-Related Applications in Nuclear Power Plants". The TRICON, as tested, is the same "Commercial Off The Shelf" product successfully being used today for safety related and critical process control applications within the HPI market.
Triconex Quality Control procedures were found to be in compliance with 10CFR50 Appendix B and 10CFR21 as well as V&V Process Compliant under IEEE 7-4.3.2, IEEE 1021-1086, and EPRI TR-103291. In December 2001 the U.S. Nuclear Regulatory Commission (NRC) issued a Safety Evaluation Report (SER) approving TRICON Version 9 for use in 1E nuclear power plant Instrument and Control (I&C) systems.
See News Releases - Triconex Receives Certification from the Nuclear Regulatory Commission for TRICON.