Description
Product overview
In a safety-critical process plant, the controller must evaluate configured logic consistently, detect internal faults, and maintain the required safety response when a processor discrepancy occurs. The Honeywell FC-QPP-0002 performs the central processing role within the Safety Manager controller chassis. It reads I/O signals, executes the controller file created using Functional Logic Diagrams, and communicates the resulting commands to the output interfaces.
Despite the “Quad Processor Pack” name, Honeywell’s hardware reference describes two processors and two memory sets, with hardware comparators monitoring processor operations. The module includes self-diagnostic functions designed to support high diagnostic coverage. In redundant Safety Manager configurations, two QPP modules synchronize through a dedicated link. Compatibility depends on the installed firmware, chassis, module version, and system configuration; the full model number alone does not establish that every revision is interchangeable.
Key technical specifications
| Parameter | Specification |
|---|---|
| Product model | FC-QPP-0002 |
| Manufacturer | Honeywell |
| Product family | Safety Manager |
| Product type | Quad Processor Pack / control processor |
| Installation location | Safety Manager controller chassis |
| Processor architecture | Two processors with two memory sets |
| Fault detection | Hardware comparison and watchdog monitoring |
| Safety capability | SIL 3 applications within the specified system configuration |
| 24 V supply | 24 VDC, −15% to +30% |
| 24 V supply current | Maximum 25 mA |
| 5 V supply | 5 VDC, ±5% |
| 5 V supply current | Maximum 1.2 A |
| Internal operating temperature | −5°C to +70°C for the documented CC V1.0 variant |
| Storage temperature | −40°C to +85°C for the documented CC V1.0 variant |
| Relative humidity | 10–95%, non-condensing |
| Dimensions | Approximately 176 × 88.5 × 212 mm (H × W × D), for the documented conformal-coated variant |
| Weight | Approximately 1.3 kg |
| Replacement compatibility | QPP-0001 replacement supported in Safety Manager systems running R121 firmware or higher, subject to system documentation |
Specification note: Temperature, dimensional, and electrical details can vary by version. The figures above are tied to the cited documentation and should be checked against the exact module marking before installation.
FC-QPP-0002
Major features and advantages
1. Dual-processor monitoring
The module uses two processors and separate memory sets. Hardware comparators check processor read/write operations, and a discrepancy can trigger watchdog action. This design helps detect internal processing errors that could affect controller execution.
2. Built-in diagnostic coverage
Honeywell’s hardware reference describes extensive hardware self-testing and diagnostic coverage exceeding 99%. This supports the Safety Manager’s safety architecture, but it does not mean every possible system fault is automatically detected or that a standalone module independently guarantees a SIL rating. The complete application must meet the applicable safety requirements.
3. Redundant controller operation
For installations requiring controller redundancy, two QPP modules can synchronize their operations through a dedicated redundant communication link. Honeywell documents a 2oo4D voting architecture for redundant configurations. Correct operation depends on the complete controller configuration and approved system design.
4. Controller logic execution
The FC-QPP-0002 reads input signals and executes the configured controller file, then passes the results to the output interfaces. This makes its firmware, application configuration, and relationship to the installed I/O modules important during maintenance and replacement.
5. Legacy-system replacement support
Honeywell documents the QPP-0002 as a one-for-one spare for QPP-0001 in Safety Manager systems running firmware R121 or higher. This is a specific compatibility statement, not a universal approval for every chassis, firmware release, or application. Confirm the system’s upgrade history before changing the processor module.
Application scenarios and common pain points
- Process safety systems: Execution of safety-related controller logic in compatible Safety Manager installations.
- Redundant controller configurations: Coordinated processor operation where the approved design uses two QPP modules.
- Safety-system maintenance: Replacement of a failed processor while preserving the validated controller architecture.
- Legacy plant upgrades: Assessment of QPP-0001 to QPP-0002 migration where firmware and hardware requirements are satisfied.
Common service concerns include processor diagnostic faults, failure to reach the expected startup state, unexpected watchdog trips, incorrect date/time after power cycling, and firmware incompatibility. A reported Honeywell notification specifically addressed certain FC-QPP-0002 V2.1 units that could report error codes 140 or 97 after power-up under specified conditions. If the installed module is V2.1, check the applicable service notification and the presence of the specified corrective-action label before deciding on a repair.
Related products and modules
| Model | Function or relationship |
|---|---|
| QPP-0001 | Earlier Safety Manager Quad Processor Pack; replacement compatibility depends on firmware |
| CPCHAS-0001 | Safety Manager controller chassis variant |
| CPCHAS-0002 | Safety Manager controller chassis variant |
| CPCHAS-0003 | Safety Manager controller chassis variant |
| BKM-0001 | Battery and Key switch Module used in relevant Safety Manager configurations |
| FC-PSU-240516 | Related industrial automation power-supply module; not a processor substitute |
| FC-USI-0002 | Separate Safety Manager-related interface module; not a direct replacement |
Engineer’s guide: three checks before ordering
1. Verify the exact version. Record the full FC- designation, version or suffix code, and any corrective-action labels. Do not assume V1.x, V2.0, and V2.1 units have identical behavior.
2. Confirm firmware and chassis compatibility. Check the Safety Manager firmware release, controller chassis model, redundancy configuration, and applicable upgrade documentation. The QPP-0001 replacement statement specifically references R121 firmware or higher.
3. Follow the required removal procedure. Honeywell states that the may be safely removed or replaced only when its key switch is in STOP. Follow the full approved maintenance procedure, assess the effect on controller redundancy, and verify system diagnostics after commissioning.
Safety warning: This is a safety-system processor. Do not remove or replace it without an approved work procedure and an assessment of the effect on process protection. Confirm the required safe state and any compensating measures before maintenance.
Frequently asked questions
1. What is the Honeywell FC- used for?
It is the main processing module in the Safety Manager controller. It executes configured controller logic, processes I/O signals, and communicates calculated results to the output interfaces.
2. Does the FC- support SIL 3 applications?
Yes, within the specified Safety Manager architecture and properly engineered safety application. A processor module by itself does not establish that the complete installation meets SIL 3 requirements.
3. Can FC- replace QPP-0001?
Honeywell documents it as a one-for-one replacement for when the Safety Manager system runs R121 firmware or higher. Confirm the complete system configuration before substitution.
4. What power does the module require?
The cited hardware data specifies 24 VDC at −15% to +30%, with a maximum 25 mA on that supply, and 5 VDC ±5%, with a maximum 1.2 A. Verify the exact variant and chassis power requirements against its documentation.
5. What should be checked if error codes 140 or 97 appear?
If the module is version V2.1, consult Honeywell’s notification concerning the specific power-up condition, inspect the applicable version and corrective-action label, and follow the prescribed recovery procedure. Do not assume those codes always indicate the same fault.
6. What should buyers request when sourcing a replacement?
Request photographs of the actual module and its version label, confirmation of its condition, available diagnostic or functional-test records, and clear warranty terms. For a used or refurbished processor, establish whether its version and condition are suitable for the intended safety application.
7. What information is needed to confirm compatibility?
Provide the installed processor version, Safety Manager firmware release, chassis model, redundancy arrangement, and any active diagnostic codes. This information is more useful for compatibility assessment than the base part number alone.
