Skip to main content
  Subscribe to our Blogs  |  Email Signup  |  Share: 


The Tricon is a state-of -the-art fault tolerant controller based on a Triple-Modular Redundant (TMR) architecture. It was the first completely triple-redundant, industrially ruggedized and cost-effective system in the industry and our most trusted safety controller.

TMR employs three isolated, parallel control systems and extensive diagnostics integrated into one system. The system uses two-out-of-three voting to provide high integrity, error-free, uninterrupted process operation with no single point of failure. Setting up applications is simplified with the Tricon, because the Triplicated TMR system operates as a single control system from the user's point of view. The extensive diagnostics are inherent and transparent to the programmer. All diagnostic information is stored in system variables and available to the user.

Use of the Tricon continues to expand into new industries and applications as customers require increased system safety and/or high availability. Today, Triconex has installed Tricon safety systems in over 50 countries, providing increased safety, reliability and availability to a worldwide installed base. The following are a few typical applications:

  • Emergency Shutdown Systems (ESD)
  • Burner Management Systems (BMS)
  • Fire and Gas Systems (F&G)
  • Turbomachinery Control
  • Nuclear 1E Safety Systems

Key Benefits

Benefits and features of the Triconex Triple Modular Redundant (TMR) Approach:

  • Very high safety integrity: The Tricon system is designed for use in emergency safety shutdown or other critical application requiring Safety Integrity Level 1, 2 or 3 as defined in the IEC 61508 Standard on Functional Safety.
  • High availability: The Tricon TMR system can operate with one, two or three functional Main Processors. Faulted modules can be replaced while the system is operational for continuous uninterrupted control.
  • Low maintenance costs: Extensive built-in diagnostics automatically pinpoint faults to field replaceable modules so clients can save valuable time and resources.

Key Capabilities

  • No single point of failure – The failure of any single component will not affect the correct operation of the Tricon system.
  • Comprehensive diagnostics – Tricon systems have the ability to provide complete on-line diagnostic coverage without additional hardware or special applications programming.
  • Online repair – Designed for continuous operation, providing online replacement of modules without system or process interruption.
  • Simple programming – Triconex's IEC 1131-3 compliant programming software provides the ability to program in function block, structured text or ladder logic for quick and easy configuration and program emulation.
Fault Tolerant Controller with Triple Modular Redundancy 

Related Success Stories

Duke Power

Duke Power upgrades its obsolescent analog control system to an Invensys digital system to help eliminate system trips.

Read the success story (pdf)