PD-T8015 Trusted

Trusted Toolset Application Validator Software

Package
Product Overview
The IEC 61131 TOOLSET Application Validators are a suit of four programs that enable the
applications developer to validate and verify application programs generated by the IEC 61131
TOOLSET. The Validators process various database files produced by the IEC 61131 TOOLSET to
identify dependencies between programs within an application, and the differences between
versions of an application.

Features:
• Windows applications.

• On screen and printed reports available.

• Results presented in ‘easy to use’ format.

Rockwell Automation Publication PD-T8015 Issue 8

Trusted PD-T8015

Page intentionally left blank

Rockwell Automation Publication PD-T8015 Issue 8

Trusted Toolset Application Validator Software Package PREFACE

PREFACE

In no event will Rockwell Automation be responsible or liable for indirect or consequential damages
resulting from the use or application of this equipment. The examples given in this manual are
included solely for illustrative purposes. Because of the many variables and requirements related to
any particular installation, Rockwell Automation does not assume responsibility or reliability for
actual use based on the examples and diagrams.

No patent liability is assumed by Rockwell Automation, with respect to use of information, circuits,
equipment, or software described in this manual.

All trademarks are acknowledged.

DISCLAIMER

It is not intended that the information in this publication covers every possible detail about the
construction, operation, or maintenance of a control system installation. You should also refer to
your own local (or supplied) system safety manual, installation and operator/maintenance manuals.

REVISION AND UPDATING POLICY

This document is based on information available at the time of its publication. The document
contents are subject to change from time to time. The latest versions of the manuals are available at
the Rockwell Automation Literature Library under "Product Information" information "Critical
Process Control & Safety Systems".

TRUSTED RELEASE

This technical manual applies to Trusted® Release: 3.6.1.

LATEST PRODUCT INFORMATION

For the latest information about this product review the Product Notifications and Technical Notes
issued by technical support. Product Notifications and product support are available at the Rockwell
Automation Support Centre at
http://rockwellautomation.custhelp.com

At the Search Knowledgebase tab select the option "By Product" then scroll down and select the
Trusted product.

Some of the Answer ID’s in the Knowledge Base require a TechConnect Support Contract. For more
information about TechConnect Support Contract Access Level and Features please click on the
following link:

https://rockwellautomation.custhelp.com/app/answers/detail/a_id/50871

This will get you to the login page where you must enter your login details.

Rockwell Automation Publication PD-T8015 Issue 8 i

PREFACE Trusted Toolset Application Validator Software Package

IMPORTANT A login is required to access the link. If you do not have an account then you can create one
using the "Sign Up" link at the top right of the web page.

DOCUMENTATION FEEDBACK

Your comments help us to write better user documentation. If you discover an error, or have a
suggestion on how to make this publication better, send your comment to our technical support
group at http://rockwellautomation.custhelp.com

ii Issue 8 Rockwell Automation Publication PD-T8015

Trusted Toolset Application Validator Software Package PREFACE

SCOPE

This manual specifies the maintenance requirements and describes the procedures to assist
troubleshooting and maintenance of a Trusted system.

WHO SHOULD USE THIS MANUAL

This manual is for plant maintenance personnel who are experienced in the operation and
maintenance of electronic equipment and are trained to work with safety systems.

SYMBOLS

In this manual we will use these notices to tell you about safety considerations.

SHOCK HAZARD: Identifies an electrical shock hazard. If a warning label is fitted, it

can be on or inside the equipment.

WARNING: Identifies information about practices or circumstances that can cause

an explosion in a hazardous environment, which can cause injury or death,
property damage or economic loss.

ATTENTION: Identifies information about practices or circumstances that can cause

injury or death.

CAUTION: Identifies information about practices or circumstances that can cause

property damage or economic loss.

BURN HAZARD: Identifies where a surface can reach dangerous temperatures. If a

warning label is fitted, it can be on or inside the equipment.

This symbol identifies items which must be thought about and put in place when
designing and assembling a Trusted controller for use in a Safety Instrumented
Function (SIF). It appears extensively in the Trusted Safety Manual.

IMPORTANT Identifies information that is critical for successful application and understanding of
the product.

NOTE Provides key information about the product or service.

TIP Tips give helpful information about using or setting up the equipment.

Rockwell Automation Publication PD-T8015 Issue 8 iii

PREFACE Trusted Toolset Application Validator Software Package

WARNINGS AND CAUTIONS

WARNING: EXPLOSION RISK

Do not connect or disconnect equipment while the circuit is live or unless the area is
known to be free of ignitable concentrations or equivalent

AVERTISSEMENT - RISQUE D’EXPLOSION

Ne pas connecter ou déconnecter l’équipement alors qu’il est sous tension, sauf si
l’environnement est exempt de concentrations inflammables ou équivalente

MAINTENANCE

Maintenance must be carried out only by qualified personnel. Failure to follow these
instructions may result in personal injury.

CAUTION: RADIO FREQUENCY INTERFERENCE

Most electronic equipment is influenced by Radio Frequency Interference. Caution

should be exercised with regard to the use of portable communications equipment
around such equipment. Signs should be posted in the vicinity of the equipment
cautioning against the use of portable communications equipment.

CAUTION:

The module PCBs contains static sensitive components. Static handling precautions
must be observed. DO NOT touch exposed connector pins or attempt to dismantle a
module.

iv Issue 8 Rockwell Automation Publication PD-T8015

Trusted Toolset Application Validator Software Package PREFACE

ISSUE RECORD

Issue Date Comments

7 Oct 05 Format

8 Jun 16 Rebranded and updated to incorporate IEEE standard references with

correction of typographical errors.

Rockwell Automation Publication PD-T8015 Issue 8 v

PREFACE Trusted Toolset Application Validator Software Package

Page intentionally left blank

vi Issue 8 Rockwell Automation Publication PD-T8015

Trusted Toolset Application Validator Software Package Table of Contents

Table of Contents

1. Validator #1 - Cross Reference Checker...................................................................... 3

1.1. Using Validator #1 ....................................................................................................................... 3

1.2. Generating a Cross Reference File .............................................................................................. 3

2. Validator #2 - TIC Code Cross Reference Checker ........................................................ 5

2.1. Using Validator #2 ....................................................................................................................... 5

3. Validator #3 - TIC Code Processor .............................................................................. 7

3.1. Using Validator #3 ....................................................................................................................... 7

4. Validator #4 - TIC Version Checker ............................................................................. 9

4.1. Using Validator #4 ....................................................................................................................... 9

5. Program Dependency Tree ..................................................................................... 11

6. Errors and Warnings .............................................................................................. 13

Rockwell Automation Publication PD-T8015 Issue 8 1

Table of Contents Trusted Toolset Application Validator Software Package

Page intentionally left blank

2 Issue 8 Rockwell Automation Publication PD-T8015

Trusted Toolset Application Validator Software Package 1. Validator #1 - Cross Reference Checker

1. Validator #1 - Cross Reference Checker

This Validator processes the cross reference file that is output as a result of using the
IEC 61131 TOOLSET 'Cross Reference' tool. The Validator processes this file then presents
the user with a graphical display of variable usage. This enables the user to easily identify
variables that are shared between programs within an application.
Programs that share one or more variables are dependent on each other, i.e. changes to one
program can affect the behaviour of its dependent. These dependencies must be checked
during the development of such an application if the target integrity for the application is to
be SIL 3 (AK6). The cross reference checker aids this task by identifying program
dependencies and thus enables the applications developer to perform adequate re-test of
affect programs.
The Validator can be run as a stand-alone application, or by selecting Cross Ref. Validator
from the IEC 61131 TOOLSET Tools menu. Before running the Validator, the cross reference
file must be generated. It is recommended that the file is given the same name as the
project with an '.xrf' extension, and is located in the application directory as the Validator
looks for this file by default when it is run from the IEC 61131 TOOLSET Tools menu. For
example, if the project name is 'projxyz' then enter the filename
'c:\isawin\apl\projxyz\prjxyz.xrf' when generating the cross reference file. Note that the
complete path name must be entered.

1.1. Using Validator #1

The Cross Reference Checker (Validator #1) can be run as a stand-alone application or by
selecting Cross Ref. Validator from the IEC 61131 TOOLSET Tools menu.

1.2. Generating a Cross Reference File

To generate the cross reference file for an application follow these steps:
1. Start the IEC 61131 TOOLSET Projects manager.
2. Select and double-click on the project containing the required application.
3. Select the Cross References item from the Tools menu.
4. Ensure that the Object type selection is set to (all) then select the Export (text file)
option from the 'File' menu.
5. Enter a filename for the cross reference file.

Rockwell Automation Publication PD-T8015 Issue 8 3

1. Validator #1 - Cross Reference Checker Trusted Toolset Application Validator Software Package

Page intentionally left blank

4 Issue 8 Rockwell Automation Publication PD-T8015

Trusted Toolset Application Validator Software Package 2. Validator #2 - TIC Code Cross Reference Checker

2. Validator #2 - TIC Code Cross Reference Checker

This Validator performs the same task as Validator #1 to produce a graphical display of
variable usage and program dependencies that the applications developer can use to aid
program verification and re-test. The Validator differs from Validator #1 in that it derives the
dependency information from the downloadable TIC code and application symbols database
files generated by the IEC 61131 TOOLSET when an application is successfully compiled. By
deriving the information from a different source, the applications developer is able to
perform an additional consistency check on the IEC 61131 TOOLSET and Validators
themselves by comparing the results of each.

2.1. Using Validator #2

The TIC Code Cross Reference Checker (Validator #2) can be run as a stand-alone application
or by selecting TIC Dependency Checker from the IEC 61131 TOOLSET Tools menu.

Rockwell Automation Publication PD-T8015 Issue 8 5

2. Validator #2 - TIC Code Cross Reference Checker Trusted Toolset Application Validator Software Package

Page intentionally left blank

6 Issue 8 Rockwell Automation Publication PD-T8015

Trusted Toolset Application Validator Software Package 3. Validator #3 - TIC Code Processor

3. Validator #3 - TIC Code Processor

This Validator is used to compare the compiled TIC code produced by the IEC 61131
TOOLSET compiler for two different application databases. Its intended use is to identify
differences between versions of the same application.
The output from the Validator enables the applications programmer to identify programs
that have changed as a result of amending an application, and to also identify any
unexpected changes to programs that may have been introduced by the IEC 61131 TOOLSET
itself.
To use this Validator it is recommended that the IEC 61131 TOOLSET Projects manager is
used to copy the project to be amended to a new project before any changes are applied to
it. The required changes can be then be applied to the existing project. Both the modified
and copied projects can then be compiled to produce the database files required by the
Validator.
Run the validator by either selecting the TIC Difference Checker option from the
IEC 61131 TOOLSET Tools menu, or as a stand-alone application. Select the copied and
modified application directories for comparison, if all the required database files are
available then programs from each application are compared.

3.1. Using Validator #3

The TIC Code Processor (Validator #3) can be run as a stand-alone application or by selecting
TIC Difference Checker from the IEC 61131 TOOLSET Tools menu.

Rockwell Automation Publication PD-T8015 Issue 8 7

3. Validator #3 - TIC Code Processor Trusted Toolset Application Validator Software Package

Page intentionally left blank

8 Issue 8 Rockwell Automation Publication PD-T8015

Trusted Toolset Application Validator Software Package 4. Validator #4 - TIC Version Checker

4. Validator #4 - TIC Version Checker

This Validator is used to compare the compiled TIC code produced by the
IEC 61131 TOOLSET compiler with the application loaded into the Trusted Main Processor.
The intended use of this validator is to confirm that the application being executed in a
Trusted system matches the toolset copy of the TIC code.
The output from the Validator enables the applications programmer to identify programs
that have changed either as a result of amending an application, or due to any unexpected
changes to programs that may have been introduced by the Toolset itself.

4.1. Using Validator #4

To use this Validator it is recommended that the IEC 61131 TOOLSET, Projects manager is
used to copy the project to be executed on the Trusted Main Processor as a comparison
copy. Any subsequent amendments to the project can result in a change to the compiled TIC
code.
Run the validator by either selecting the TIC Version Checker option from
IEC 61131 TOOLSET Tools menu, or as a stand-alone application. Select the application
directory for comparison, interrogate the Trusted Main processor for the run time
application and then compare the applications.

Rockwell Automation Publication PD-T8015 Issue 8 9

4. Validator #4 - TIC Version Checker Trusted Toolset Application Validator Software Package

Page intentionally left blank

10 Issue 8 Rockwell Automation Publication PD-T8015

Trusted Toolset Application Validator Software Package 5. Program Dependency Tree

5. Program Dependency Tree

The program dependency tree produced by Validators #1 and #2 shows program and
variable dependencies by displaying them in a tree hierarchy. The top level nodes in the tree
give the programs from the application. These expand to list the variables used by a
program, and these in turn expand to list the programs that use a variable. The icons are
used for the tree nodes are assigned unique colours and shapes, and have the following
meanings as detailed below.

Green Round Icon

This node represents a program that has no shared variables, and expands to display only
variables that are not shared.

Red Round Icon

This node represents a program that has one or more shared variables, and expands to
display both shared and non-shared variable node types.

Green Square Icon

The node represents a variable that is not shared and expands to display only one program
name.

Red Square Icon

The node represents a variable that is shared, and expands to display the names of the
programs that share it.

Rockwell Automation Publication PD-T8015 Issue 8 11

5. Program Dependency Tree Trusted Toolset Application Validator Software Package

Page intentionally left blank

12 Issue 8 Rockwell Automation Publication PD-T8015

Trusted Toolset Application Validator Software Package 6. Errors and Warnings

6. Errors and Warnings

The following Errors and Warnings by the Application Validators as they are detected.

'Abort, name too long!'

This message is displayed if a variable or program name read from the application symbols
file, or the cross reference, is too long. The maximum identifier length supported by
IEC 61131 TOOLSET version 3.23 is 16.

'Aborted, unknown block type header'

This message is displayed by Validator #1 if it encounters an unknown header type while

reading through the cross reference file. Check that the correct file has been selected, or try
regenerating it.

'Aborting, input file is not a valid cross reference file'

This message is displayed by Validator #1 if it detects a syntax or format error while reading
through the cross reference file. Check that the correct file has been selected, or try
regenerating it.

'Aborting, input file is not a valid symbols file'

This message is displayed if a Validator encounters a syntax or format error while it is

reading the application symbols file. Try recompiling the application to re-generate the
symbols file.

'Applications directory : <name> does not exist'

This message is displayed when a Validator cannot locate the specified Application
Directory.

'Cannot find application symbols file Appli.tst for application <name>'

This message is displayed if a Validator cannot locate the application symbols file for an
application. Check that the application has been compiled successfully.

'Cannot find TIC code file Appli.x6m for application <name>'

This message is displayed if a Validator cannot locate the download data base file for the
application. Check that the application has been compiled successfully, and that the
compiler options have been set to generate code for a Motorola target (ISA68M).

Rockwell Automation Publication PD-T8015 Issue 8 13

6. Errors and Warnings Trusted Toolset Application Validator Software Package

'Cannot produce report, printer fault'

This message is displayed if a printer fault occurs while a Validator is attempting to output a
report to the printer.

'Download database not in Motorola format'

The applications download database file is not in the correct format. Ensure that the
compiler options are set to generate code for a Motorola target (ISA68M) and re-compile
the application.

'Error accessing application history file !'

This message is displayed when a file Input/Output (I/O) error occurs when accessing the
application history file.
'Error reading Uchar'
'Error accessing download database file'
'Error reading uint16'
'Error reading uint32'
'Error reading in ReadChars'
'Error reading in ReadCharsFrom'
'Error Loading CODEPROG'
These messages are displayed when an error occurs while reading from the download
database file. Try recompiling the application to regenerate the database file.
'Error reading from formatted file!'
'Error accessing file <file>'
These messages are displayed when a file I/O error occurs while reading from a formatted
text file, i.e. the cross reference file, or the application symbols, files which are text.

'Program count mis-match in application directory <name> database files in-compatible'

This message is output when the download database file and application symbols file are
found to contain different numbers of programs. Try recompiling the application.

'Not all dependency information has been examined'

This warning is displayed if an attempt is made to exit the program, or print a dependency
report, before all the dependency information has been viewed. The dependency
information is considered viewed when all the top level program nodes in the view tree
have been expanded. These can be expanded individually, or all at once by clicking on the
Expand All button. Note that the dependency information is still considered viewed if the
nodes are collapsed again.

14 Issue 8 Rockwell Automation Publication PD-T8015

Trusted Toolset Application Validator Software Package 6. Errors and Warnings

'Project name mis-match in application directory <name> database files in-compatible'

This message is output when the download database file and application symbols file are
found to be in-compatible because they contain different project names. Try recompiling
the application.

'Project symbols CRC mis-match in application directory <name> database files in-compatible'

This message is output when the download database file and application symbols file are
found to be in-compatible because the application symbols CRCs do not match. Try
recompiling the application.

'Unable to produce report file'

This message is displayed if a file I/O error occurs while a Validator is attempting to output a
report to a text file.

Rockwell Automation Publication PD-T8015 Issue 8 15