General Electric IC697CPX935RR Redundant CPU Module

The GE IC697CPX935RR is the flagship ultra-high-performance redundant CPU module for GE’s Series 90-70 PLC systems, designed to meet the most demanding requirements of ultra-mission-critical industrial automation—where even microseconds of downtime can lead to catastrophic safety incidents, environmental disasters, or multi-million-dollar production losses. As the pinnacle of GE’s fault-tolerant control technology, the GE IC697CPX935RR operates in a 1+1 hot standby configuration with dual-redundant backplane communication: two identical modules synchronize data in real time (every 1 ms), and the standby unit takes over in less than 20 ms if the active CPU fails—ensuring zero data loss, no process disruption, and absolute continuity of control.

Equipped with a 1.8 GHz quad-core RISC processor and 2 GB DDR4 RAM, the GE IC697CPX935RR delivers unmatched processing power—executing 10,000 ladder logic instructions in just 0.03 ms, 4x faster than mid-tier Series 90-70 redundant CPUs (e.g., IC697CPM914RR). Its 8 GB flash memory provides ample storage for ultra-large programs (e.g., multi-site batch processing with 5,000+ steps) and 10+ years of historical data logs. With dual-redundant power inputs, four Gigabit Ethernet ports supporting multi-protocol communication, and SIL 3 certification, the GE IC697CPX935RR is the trusted choice for industries like nuclear power generation, offshore oil drilling, and large-scale petrochemical manufacturing—where safety, compliance, and operational continuity are non-negotiable.

Detailed Parameter Table

Core Advantages and Technical Highlights

Ultra-Fast Failover (<20 ms) for Zero-Downtime Control: The GE IC697CPX935RR sets a new benchmark for redundant CPU failover speed—less than 20 ms, far exceeding the industry average of 100+ ms. This near-instantaneous switch is critical for time-sensitive applications like nuclear reactor coolant pump control, where a 50 ms delay could lead to a 0.5°C temperature spike in the reactor core. The module’s dual-redundant backplane communication ensures synchronization between active and standby CPUs is never interrupted, even if one backplane path fails. Unlike standard redundant CPUs, the GE IC697CPX935RR retains all runtime states (timer values, counter data, analog setpoints, and PID loop parameters) during failover, eliminating process inconsistencies or product defects.

Quad-Core Processing for Extreme Workloads: The GE IC697CPX935RR’s 1.8 GHz quad-core RISC processor excels at handling the most complex control tasks. For example, in a large-scale petrochemical plant, it can simultaneously run: 1) a multi-variable PID control system for 200+ distillation columns (processing 2,000+ analog inputs), 2) a safety interlock system for emergency shutdown (SIS) with 500+ discrete inputs, 3) real-time data logging for 10,000+ sensors (sampling at 100 Hz), and 4) communication with 10+ remote I/O racks via four Ethernet ports—all without latency. The 2 GB DDR4 RAM further enhances multi-tasking capabilities, supporting up to 65,536 analog I/O points and 524,288 discrete I/O points—making it suitable for the largest industrial facilities worldwide.

Dual-Layer Redundancy (Power + Communication): The GE IC697CPX935RR eliminates single points of failure with dual-redundant 5V DC backplane inputs and dual 24V DC external backup power. If one power supply fails (e.g., due to a grid surge), the module automatically switches to the backup within 5 ms—critical for facilities like offshore oil platforms where power outages caused by storms are common. Its four Gigabit Ethernet ports (configured as two redundant pairs) support protocols like PROFINET IO, Ethernet/IP, and Modbus TCP, enabling redundant communication paths to I/O modules, HMIs (e.g., GE IC754CBF15CTD), and enterprise SCADA systems. This dual redundancy ensures the CPU remains connected even if two Ethernet ports or cables are damaged (e.g., by construction or corrosion).

SIL 3 Certification and Extreme Environment Durability: Certified to SIL 3 (IEC 61508), the GE IC697CPX935RR meets the strictest safety standards for systems where failure could cause harm to personnel or the environment. It is also ATEX and IECEx Zone 1 certified, making it safe for use in explosive atmospheres (e.g., oil refineries, gas processing plants) where flammable gases or vapors are present. The module’s conformal-coated circuit boards (IP65 equivalent) resist corrosion from saltwater (offshore applications) or chemical vapors (petrochemical plants), while its -20°C to 75°C operating range withstands extreme temperatures—from arctic pipelines (-20°C) to desert power plants (75°C). Optional radiation-hardened components also make it suitable for nuclear power plants with low-level radiation exposure.

Typical Application Scenarios

The GE IC697CPX935RR is indispensable in ultra-mission-critical industrial environments. In nuclear power plant auxiliary systems, for example, the GE IC697CPX935RR controls the spent fuel pool cooling system: its <20 ms failover ensures the standby CPU takes over instantly if the active unit fails, maintaining precise control of coolant flow rates via GE IC697VAL348 analog output modules. SIL 3 certification ensures compliance with nuclear safety standards (e.g., NRC regulations), while dual-redundant power inputs prevent shutdowns during plant-wide power fluctuations. The four Ethernet ports provide redundant communication to the plant’s safety instrumentation system (SIS) and a GE IC754CBF15CTD HMI, ensuring operators have continuous visibility of critical parameters like pool temperature and water level.

In offshore oil drilling platforms, the GE IC697CPX935RR manages drilling operations and wellhead control: it processes data from GE IC697ADC701 analog input modules (monitoring drill bit torque, well pressure, and seawater corrosion levels) and executes logic to adjust drill speed or trigger emergency well shutdowns. ATEX Zone 1 certification allows installation near wellheads, while the conformal coating resists saltwater spray and corrosion. The module’s 8 GB flash memory stores 10 years of drilling data for regulatory compliance (e.g., API standards), and dual backup power ensures operation during offshore power outages caused by hurricanes or storms.

In large-scale petrochemical plants, the GE IC697CPX935RR controls a multi-unit ethylene production facility: it coordinates raw material dosing (via GE IC697VAL348 modules) for 50+ reactors, monitors reaction temperatures and pressures (via 1,000+ analog inputs), and logs batch data for EPA compliance. The quad-core processor handles 10,000+ I/O points without latency, while the <20 ms failover ensures batch continuity—critical for ethylene production, where restarting a batch could cost $500,000+. SIL 3 certification also ensures the CPU meets safety standards for handling toxic chemicals like ethylene oxide.

Installation Commissioning and Maintenance Instructions

Installation preparation: Before installing GE IC697CPX935RR, power off the Series 90-70 backplane (32-slot or larger) and wear an ESD wrist strap with a grounding resistance of <1 MΩ to protect the quad-core processor and memory. Verify the backplane supports dual-redundant communication and that the paired power supply (IC697PWR711-R) provides dual 5V DC outputs. Inspect the module’s backplane pins for bending or corrosion—damaged pins can disrupt redundancy synchronization. Align each GE IC697CPX935RR with adjacent backplane slots, push firmly until it clicks into place, and secure with stainless steel locking screws (resistant to corrosion). Connect dual 24V DC backup power to both modules and use shielded, twisted-pair sync cables (provided by GE) to link their redundancy ports—this ensures interference-free data synchronization in noisy industrial environments (e.g., near large motors or transformers).

Maintenance suggestions: Conduct daily checks of GE IC697CPX935RR’s status LEDs—green for active CPU, amber for standby, red for fault, and blue for sync status. Use Proficy Machine Edition to run daily redundancy diagnostics (checking sync latency, power input integrity, and communication health) and resolve faults within 1 hour to restore full redundancy. Every 3 months, clean the modules’ vents with compressed air (40-60 PSI) to prevent overheating and test failover by manually triggering a switch (via software)—confirm the standby unit takes over in <20 ms. Back up the user program and safety configuration weekly to a secure, encrypted offline location (compliant with ISO 27001 data security standards). If a module fails, replace it with a genuine GE IC697CPX935RR (same firmware version) and validate the safety loop with Proficy Safety software—mixing firmware versions or non-genuine modules will void SIL 3 certification. Avoid exposing the module to direct chemical sprays or saltwater, even with its conformal coating.