Test Plan Site

Requested by:

LSST

Code / Version:

7186_GIS_0009 / 2.0

Editor:

F. Javier López

Approved by:

Franco Colleoni

Date:

02/09/2022

Document history

VERSION DATE EDITOR COMMENTS
1.0 2022/05/02 F. Javier López

Initial release

2.0 2022/05/10 F. Javier López

Added Franco Colleoni’s comments

Acronyms Definition

AFE / AcFiEa

ETPB

Access Fire Earthquake

Emergency trip pushbutton

GIS Global Interlock System
HMI Human Machine Interface

IS

LAS

Interlock System

LASER

LSST

UI

Large Synoptic Survey Telescope

User Interface

Introduction

This document collects the procedures performed to verify the correct function of the Global Interlock System (GIS), which ensures the protection of the different systems of the telescope.

It includes the steps followed to complete GIS tests. Passing the tests confirms the correct communication, reception and emission of signals, between the different safety systems and, summarizing, the correct actuation of the system.

Reference document list

No. DOCUMENT CODE VERSION
1

GLOBAL INTERLOCK SYSTEM (GIS) ANALYSIS

092-308-E-Z-00004 04
2

Updated LTS-99

092-308-F-I-00003 01
3

Electric schemes – 7186 Test System for GISS_LSST Cabinets

7186_GIS_0003 1.0
4

Electricl schemes - 7186 LSST Global Safety Interlock System Design

7186_GIS_0001 1.0
5

GIS User Interface Manual

7186_GIS_0005 1.0
6

Testing Global Interlock System

7186_GIS_0007 2.0

Technical description

Architecture:

The safety interlock system of the telescope, named Global Interlock System (GIS) hereafter, is a distributed arrangement where a central safety controller is connected to all subsystem controllers (M1M3, TMA, Dome, etc.), by means of safety networks.

LASER, M2, PFLOW and AcFiEa subsystem controllers are directly connected to the central safety controller. Those subsystems compose the central controller’s periphery.

Testing architecture:

The architecture described below is the structure where the actuation of the Global Interlock System (GIS) is tested.

LASER, M2, PFLOW and AcFiEa subsystem controllers are hardwired to distributed I/O modules. Those modules are connected to the central controller by means of safety networks.

Hence, GIS and GIS’s periphery are tested in a real architecture situation.

M1M3, TMA, AUX_Tel and DOME are systems with a dedicated safety controller. Those systems are connected to the central controller M1M3 and TMA, but AUX_TEL and DOME are not ready, in any case are not the subject of these tests at the level of inputs and outputs, but yes at the level of causes and effects. When they are all installed and with their operating program, additional tests will be carried out to check that the communication between them is correct. For the moment these signals will be forced from the PAS4000 to verify the security matrix.

Detections, relays and signals related with LASER, M2, PFLOW and AcFiEa systems are reproduced physically with ETPBs and LEDs, as it is shown in Fig. 1.

In some cases, they are already connected to the corresponding I/Os, so they have been disconnected from the keypad, eliminating their function.

Test interface

Fig. 1 Testing architecture.

Testing procedure

Tests are performed in the installations of the Rubin Observatory, for Franco Colleoni y Francisco Javier López, with the procedure described in the document 7186-GIS_TestSystem.pdf.

Detections and relays will be checked individually, one by one. Also, the Detection that can be delayed will be check independently.

First, detections will be tested one by one, afterwards, relays and, finally, the delays. Detailed procedure with every step is presented in the following sections.

Detections and relay forcing method depends on the system to which belong:

  • Signals from the external controller, M1M3, TMA, AUX_Tel and DOME systems, are forced via software.

  • The rest of the signals, from LASER, M2, PFLOW and AcFiEa, are forced by pressing the corresponding ETPB or I/O if it is connected to the sensors/actuators.

Detection’ signals are check in UI and via software.

Relay signals are check in the UI. Relay signals can activate Detections, hence, the corresponding Actions are activated.

The Actions associated with those inputs will be checked observing signals (in HMI or in the software) and, in case there is a LED associated with the signal involved, observing the state of that LED.

  • Action signals to the external controller, “testing controller”, are checked in HMI and via software.

  • Action signals to the Central Controller are checked in HMI and in the corresponding LEDs.

ITEM FORCING METHOD CHECKING METHOD
Detection

-M1M3, TMA, AUX_TEL and DOME systems: Forcing signal in test Controller.

-Other systems: Pressing ETPB when is not connected.

UI and software.
Relay

-M1M3, TMA, AUX_TEL and DOME systems: Forcing signal in test Controller.

-Other systems: Pressing ETPB when is not connected.

Relay state in UI.

Detection (and corresponding Actions) originated by the relay in UI and software.

Action

Cannot be forced by itself.

When a detection that originates the release of the action is active, the action signal is activated.

-M1M3, TMA, AUX_TEL and DOME systems: LED, UI and software.

-Other systems: UI and software.

Reset By pressing RESET button in the UI.

-M1M3, TMA, AUX_TEL and DOME systems: LED, UI and software.

-Other systems: UI and software.

Table 1 Signals forcing and checking method.

AUX wasn’t tested, as AuxTel IS is not installed yet. Anyway, GIS will only send the Earthquake signal.

Detections testing

This part will be performed with a user logged in with administrator permissions, Level 4 of user management. User levels is described in the document GIS User Interface Manual, (Ref: 5).

D-1 GIS Fire Interlock

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event GIS Fire Interlock (D-1) is detected.

This test is performed by activating the corresponding interlock using test box and software, because the sensor for Fire detection is not connected

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with D-1.
Franco Colleoni
Check that GIS activates D-1 signal.
Franco Colleoni
Check Detection alarm is actived.
Franco Colleoni
Check GIS activates A-1 indication and sends actuation signals.
Franco Colleoni
Bypass the interlock.
Franco Colleoni
Check bypass warning message is actived. Detection alarm is cleared.
Franco Colleoni
Check all signals are cleared.
Franco Colleoni
Relese bypassed interlock.
Franco Colleoni
Check all the above signals remain active.
Franco Colleoni
Bypass warning message is cleared. Detection error message is actived.
Franco Colleoni
Check interlocks cannot be reset. Check all the signals remain active.
Franco Colleoni
Release by turning the interlock that was actuated.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Check Detection alarm is cleared.
Franco Colleoni
Write down the date of the test: 28/04/2022

D-2 Catastrophic Earthquake Interlock

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event Catastrophic Earthquake Interlock (D-2) is detected.

This test is performed by activating the corresponding interlock using test box and software, because the sensor for Earthquake is not connected.

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with D-2.
Franco Colleoni
Check GIS activates D-2 indication.
Franco Colleoni
Check Detection alarm is actived.
Franco Colleoni
Check GIS activates A-3 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-4 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-5 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-6 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-7 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-9 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-10 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-11 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-12 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-13 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-14 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-15 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-16 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-18 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-20 indication and sends actuation signal.
Franco Colleoni
Bypass the interlock.
Franco Colleoni
Check bypass warning message is actived. Detection alarm is cleared.
Franco Colleoni
Check all signals are cleared.
Franco Colleoni
Relese bypassed interlock.
Franco Colleoni
Check all the above signals remain active.
Franco Colleoni
Bypass warning message is cleared. Detection error message is actived.
Franco Colleoni
Check interlocks cannot be reset. Check all the signals remain active.
Franco Colleoni
Release by turning the interlock that was actuated.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Check Detection alarm is cleared.
Franco Colleoni
Write down the date of the test: 28/04/2022

D-3 GIS Internal Failure

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event GIS Internal Failure (D-3) is detected.

This test is performed by disconnecting an input module on the GIS CPU.

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with D-3.
Franco Colleoni
Check that GIS activates D-3 indication.
Franco Colleoni
Check Detection alarm is actived.
Franco Colleoni
Check GIS activates A-4 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-5 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-6 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-7 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-9 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-10 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-11 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-12 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-13 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-14 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-15 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-17 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-19 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-20 indication and sends actuation signal.
Franco Colleoni
Bypass the interlock.
Franco Colleoni
Check bypass warning message is actived. Detection alarm is cleared.
Franco Colleoni
Check all signals are cleared.
Franco Colleoni
Relese bypassed interlock.
Franco Colleoni
Check all the above signals remain active.
Franco Colleoni
Bypass warning message is cleared. Detection error message is actived.
Franco Colleoni
Check interlocks cannot be reset. Check all the signals remain active.
Franco Colleoni
Release by turning the interlock that was actuated.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Check Detection alarm is cleared.
Franco Colleoni
Write down the date of the test: 28/04/2022

D-4 GIS ETPBs

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event GIS ETPBs (D-4) is detected.

This test is performed by pressing all E-stops on test boxes and safety gates.

Detection D-4 is activated when a ETPB of its system is activated. In the test, the ETPB pressed to actívate D-4 is: Wireless1. This event, Wireless1, must be reset.

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with D-4.
Franco Colleoni
Check Detection alarm is actived.
Franco Colleoni
Check that GIS activates D-4 indication.
Franco Colleoni
Check GIS activates A-4 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-5 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-6 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-7 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-8 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-9 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-10 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-11 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-12 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-13 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-14 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-15 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-17 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-19 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-20 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-21 indication and sends actuation signal.
Franco Colleoni
Bypass the interlock.
Franco Colleoni
Check bypass warning message is activated. Detection alarm is cleared.
Franco Colleoni
Check all signals are cleared.
Franco Colleoni
Relese bypassed interlock.
Franco Colleoni
Check all the above signals remain active.
Franco Colleoni
Bypass warning message is cleared. Detection error message is activated.
Franco Colleoni
Reset interlock by pressing RESET button.
Franco Colleoni
Check all the signals remain active.
Franco Colleoni
Release by turning the interlock that was actuated.
Franco Colleoni
Reset interlock by pressing RESET button.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Check Detection alarm is cleared.
Franco Colleoni
Write down the date of the test: 28/04/2022

D-5 Unauthorized Pier access

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event Unathorized Pier Access (D-5) is detected.

This test is performed by activating the corresponding interlock with safety gate on level 6th

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with D-5.
Franco Colleoni
Check Detection alarm is actived.
Franco Colleoni
Check that GIS activates D-5 signal.
Franco Colleoni
Check Detection alarm is active.
Franco Colleoni
Check GIS activates A-5 indication and sends actuation signal.
Franco Colleoni
Bypass the interlock.
Franco Colleoni
Check bypass warning message is actived. Detection alarm is cleared.
Franco Colleoni
Check all signals are cleared.
Franco Colleoni
Relese bypassed interlock.
Franco Colleoni
Check all the above signals remain active.
Franco Colleoni
Bypass warning message is cleared. Detection error message is actived.
Franco Colleoni
Check interlocks cannot be reset. Check all the signals remain active.
Franco Colleoni
Release by turning the interlock that was actuated.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Check Detection alarm is cleared.
Franco Colleoni
Write down the date of the test: 28/04/2022

D-6 Unauthorized Dome access

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event Unathorized Dome access (D-6) is detected.

This test is performed by activating the corresponding interlock with safety gate on level 7th

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with D-6.
Franco Colleoni
Check Detection alarm is actived.
Franco Colleoni
Check that GIS activates D-6 indication.
Franco Colleoni
Check GIS activates A-5 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-11 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-20 indication and sends actuation signal.
Franco Colleoni
Bypass the interlock.
Franco Colleoni
Check bypass warning message is actived. Detection alarm is cleared.
Franco Colleoni
Check all signals are cleared.
Franco Colleoni
Relese bypassed interlock.
Franco Colleoni
Check all the above signals remain active.
Franco Colleoni
Bypass warning message is cleared. Detection error message is actived.
Franco Colleoni
Check interlocks cannot be reset. Check all the signals remain active.
Franco Colleoni
Release by turning the interlock that was actuated.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Check Detection alarm is cleared.
Franco Colleoni
Write down the date of the test: 28/04/2022

D-7 TMA Brakes NOT engaged

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event TMA Brakes NOT engaged (D-7) is detected.

This test is performed by forcing the signal in the TMA-IS controller by the PAS4000 program.

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with D-7.
Franco Colleoni
Check Detection alarm is actived.
Franco Colleoni
Check that GIS activates D-7 indication.
Franco Colleoni
Check GIS activates A-8 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-21 indication and sends actuation signal.
Franco Colleoni
Bypass the interlock.
Franco Colleoni
Check bypass warning message is actived. Detection alarm is cleared.
Franco Colleoni
Check all signals are cleared.
Franco Colleoni
Relese bypassed interlock.
Franco Colleoni
Check all the above signals remain active.
Franco Colleoni
Bypass warning message is cleared. Detection error message is actived.
Franco Colleoni
Check interlocks cannot be reset. Check all the signals remain active.
Franco Colleoni
Release by turning the interlock that was actuated.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Check Detection alarm is cleared.
Franco Colleoni
Write down the date of the test: 28/04/2022

D-8 Camera Cable Wrap Safety Device Actuated

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event Camera Cable Wrap Safety Device Actuated (D-8) is detected.

This test is performed by forcing the signal in the TMA-IS controller by the PAS4000 program.

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with D-8.
Franco Colleoni
Check Detection alarm is actived.
Franco Colleoni
Check that GIS activates D-8 indication.
Franco Colleoni
Check GIS activates A-6 indication and sends actuation signal.
Franco Colleoni
Bypass the interlock.
Franco Colleoni
Check bypass warning message is actived. Detection alarm is cleared.
Franco Colleoni
Check all signals are cleared.
Franco Colleoni
Relese bypassed interlock.
Franco Colleoni
Check all the above signals remain active.
Franco Colleoni
Bypass warning message is cleared. Detection error message is actived.
Franco Colleoni
Check interlocks cannot be reset. Check all the signals remain active.
Franco Colleoni
Release by turning the interlock that was actuated.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Check Detection alarm is cleared.
Franco Colleoni
Write down the date of the test: 28/04/2022

D-9 TMA ETPBs

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event TMA ETPBs (D-9) is detected.

This test is performed by forcing the signal in the TMA-IS controller by the PAS4000 program.

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with D-9.
Franco Colleoni
Check Detection alarm is actived.
Franco Colleoni
Check that GIS activates D-9 indication.
Franco Colleoni
Check GIS activates A-7 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-8 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-9 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-10 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-11 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-12 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-13 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-14 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-15 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-17 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-19 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-20 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-21 indication and sends actuation signal.
Franco Colleoni
Bypass the interlock.
Franco Colleoni
Check bypass warning message is actived. Detection alarm is cleared.
Franco Colleoni
Check all signals are cleared.
Franco Colleoni
Relese bypassed interlock.
Franco Colleoni
Check all the above signals remain active.
Franco Colleoni
Bypass warning message is cleared. Detection error message is actived.
Franco Colleoni
Check interlocks cannot be reset. Check all the signals remain active.
Franco Colleoni
Release by turning the interlock that was actuated.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Check Detection alarm is cleared.
Franco Colleoni
Write down the date of the test: 28/04/2022

D-10 Dome Locking pin retracted or Dome Rear Door Louvers NOT closed

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event Dome Locking pin retracted or Dome Rear Door Louvers NOT closed (D-10) is detected.

This test is performed by forcing the signal in the GIS controller by the PAS4000 program.

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with D-10.
Franco Colleoni
Check Detection alarm is actived.
Franco Colleoni
Check that GIS activates D-10 indication.
Franco Colleoni
Check GIS activates A-17 indication and sends actuation signal.
Franco Colleoni
Bypass the interlock.
Franco Colleoni
Check bypass warning message is actived. Detection alarm is cleared.
Franco Colleoni
Check all signals are cleared.
Franco Colleoni
Relese bypassed interlock.
Franco Colleoni
Check all the above signals remain active.
Franco Colleoni
Bypass warning message is cleared. Detection error message is actived.
Franco Colleoni
Check interlocks cannot be reset. Check all the signals remain active.
Franco Colleoni
Release by turning the interlock that was actuated.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Check Detection alarm is cleared.
Franco Colleoni
Write down the date of the test: 2019/06/03 28/04/2022

D-11 Dome Rear doors are NOT closed

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event Dome Rear doors are NOT closed (D-11) is detected.

This test is performed by forcing the signal in the GIS controller by the PAS4000 program.

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with D-11.
Franco Colleoni
Check Detection alarm is actived.
Franco Colleoni
Check that GIS activates D-11 indication.
Franco Colleoni
Check GIS activates A-16 indication and sends actuation signal.
Franco Colleoni
Bypass the interlock.
Franco Colleoni
Check bypass warning message is actived. Detection alarm is cleared.
Franco Colleoni
Check all signals are cleared.
Franco Colleoni
Relese bypassed interlock.
Franco Colleoni
Check all the above signals remain active.
Franco Colleoni
Bypass warning message is cleared. Detection error message is actived.
Franco Colleoni
Check interlocks cannot be reset. Check all the signals remain active.
Franco Colleoni
Release by turning the interlock that was actuated.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Check Detection alarm is cleared.
Franco Colleoni
Write down the date of the test: 28/04/2022

D-12 Dome ETPBs

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event Dome ETPBs (D-12) is detected.

This test is performed by forcing the signal in the GIS controller by the PAS4000 program.

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with D-12.
Franco Colleoni
Check Detection alarm is actived.
Franco Colleoni
Check that GIS activates D-12 indication.
Franco Colleoni
Check GIS activates A-4 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-5 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-6 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-12 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-13 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-14 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-15 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-17 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-19 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-20 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-21 indication and sends actuation signal.
Franco Colleoni
Bypass the interlock.
Franco Colleoni
Check bypass warning message is actived. Detection alarm is cleared.
Franco Colleoni
Check all signals are cleared.
Franco Colleoni
Relese bypassed interlock.
Franco Colleoni
Check all the above signals remain active.
Franco Colleoni
Bypass warning message is cleared. Detection error message is actived.
Franco Colleoni
Check interlocks cannot be reset. Check all the signals remain active.
Franco Colleoni
Release by turning the interlock that was actuated.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Check Detection alarm is cleared.
Franco Colleoni
Write down the date of the test: 28/04/2022

D-13 Dome Crane not parked

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event Dome Crane not parked (D-13) is detected.

This test is performed by forcing the signal in the GIS controller by the PAS4000 program.

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with D-13.
Franco Colleoni
Check Detection alarm is actived.
Franco Colleoni
Check that GIS activates D-13 indication.
Franco Colleoni
Check GIS activates A-5 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-21 indication and sends actuation signal.
Franco Colleoni
Bypass the interlock.
Franco Colleoni
Check bypass warning message is actived. Detection alarm is cleared.
Franco Colleoni
Check all signals are cleared.
Franco Colleoni
Relese bypassed interlock.
Franco Colleoni
Check all the above signals remain active.
Franco Colleoni
Bypass warning message is cleared. Detection error message is actived.
Franco Colleoni
Check interlocks cannot be reset. Check all the signals remain active.
Franco Colleoni
Release by turning the interlock that was actuated.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Check Detection alarm is cleared.
Franco Colleoni
Write down the date of the test: 28/04/2022

D-14 Camera Rotator Pin Inserted

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event Camera Rotator Pin Inserted (D-14) is detected.

Intended to be tested with actual rotator pin, but Comcam was installed. We could test the pin signal was active, and then the interlock triggering was simulated by software.

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with D-14.
Franco Colleoni
Check Detection alarm is actived.
Franco Colleoni
Check that GIS activates D-14 indication.
Franco Colleoni
Check GIS activates A-2 indication and sends actuation signal.
Franco Colleoni
Bypass the interlock.
Franco Colleoni
Check bypass warning message is actived. Detection alarm is cleared.
Franco Colleoni
Check all signals are cleared.
Franco Colleoni
Relese bypassed interlock.
Franco Colleoni
Check all the above signals remain active.
Franco Colleoni
Bypass warning message is cleared. Detection error message is actived.
Franco Colleoni
Check interlocks cannot be reset. Check all the signals remain active.
Franco Colleoni
Release by turning the interlock that was actuated.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Check Detection alarm is cleared.
Franco Colleoni
Write down the date of the test: 28/04/2022

D-15 Platform Lift above Enclosure Lower Level

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event Platform Lift above Enclosure Lower Level (D-15) is detected.

Intended to be tested with Pflow electronics, but not energized at the time. We could see the signal active, and the interlocks was triggered by software

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with D-15.
Franco Colleoni
Check Detection alarm is actived.
Franco Colleoni
Check that GIS activates D-15 indication.
Franco Colleoni
Check GIS activates A-9 indication and sends actuation signal.
Franco Colleoni
Bypass the interlock.
Franco Colleoni
Check bypass warning message is actived. Detection alarm is cleared.
Franco Colleoni
Check all signals are cleared.
Franco Colleoni
Relese bypassed interlock.
Franco Colleoni
Check all the above signals remain active.
Franco Colleoni
Bypass warning message is cleared. Detection error message is actived.
Franco Colleoni
Check interlocks cannot be reset. Check all the signals remain active.
Franco Colleoni
Release by turning the interlock that was actuated.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Check Detection alarm is cleared.
Franco Colleoni
Write down the date of the test: 28/04/2022

D-16 Platform Lift NOT parked at the Telescope Level

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event Platform Lift NOT parked at the Telescope Level (D-16) is detected.

Intended to be tested with Pflow electronics, but not energized at the time. We could see the signal active, and the interlocks was triggered by software

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with D-16.
Franco Colleoni
Check Detection alarm is actived.
Franco Colleoni
Check that GIS activates D-16 indication.
Franco Colleoni
Check GIS activates A-10 indication and sends actuation signal.
Franco Colleoni
Bypass the interlock.
Franco Colleoni
Check bypass warning message is actived. Detection alarm is cleared.
Franco Colleoni
Check all signals are cleared.
Franco Colleoni
Relese bypassed interlock.
Franco Colleoni
Check all the above signals remain active.
Franco Colleoni
Bypass warning message is cleared. Detection error message is actived.
Franco Colleoni
Check interlocks cannot be reset. Check all the signals remain active.
Franco Colleoni
Release by turning the interlock that was actuated.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Check Detection alarm is cleared.
Franco Colleoni
Write down the date of the test: 28/04/2022

D-17 Failed MCS Watchdog or MCS Loss of Communication

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event GIS Failed MCS Wachtdog or MCS loss communications (D-17) is detected.

This test is performed by forcing the signal in the GIS controller by the PAS4000 program.

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with D-17.
Franco Colleoni
Check Detection alarm is actived.
Franco Colleoni
Check that GIS activates D-17 indication.
Franco Colleoni
Check GIS activates A-14 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-15 indication and sends actuation signal.
Franco Colleoni
Bypass the interlock.
Franco Colleoni
Check bypass warning message is actived. Detection alarm is cleared.
Franco Colleoni
Check all signals are cleared.
Franco Colleoni
Relese bypassed interlock.
Franco Colleoni
Check all the above signals remain active.
Franco Colleoni
Bypass warning message is cleared. Detection error message is actived.
Franco Colleoni
Check interlocks cannot be reset. Check all the signals remain active.
Franco Colleoni
Release by turning the interlock that was actuated.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Check Detection alarm is cleared.
Franco Colleoni
Write down the date of the test: 2019/06/03 28/04/2022

D-18 M1M3 Interlock

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event M1M3 Interlock (D-18) is detected.

This test is performed by activating the corresponding interlock in the M1M3-IS with the specific HMI.

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with D-18.
Franco Colleoni
Check Detection alarm is actived.
Franco Colleoni
Check that GIS activates D-18 indication.
Franco Colleoni
Check GIS activates A-5 indication and sends actuation signal.
Franco Colleoni
Bypass the interlock.
Franco Colleoni
Check bypass warning message is actived. Detection alarm is cleared.
Franco Colleoni
Check all signals are cleared.
Franco Colleoni
Relese bypassed interlock.
Franco Colleoni
Check all the above signals remain active.
Franco Colleoni
Bypass warning message is cleared. Detection error message is actived.
Franco Colleoni
Check interlocks cannot be reset. Check all the signals remain active.
Franco Colleoni
Release by turning the interlock that was actuated.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Check Detection alarm is cleared.
Franco Colleoni
Write down the date of the test: 28/04/2022

D-19 Man-Lift not parked

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event Man-Lift not parked (D-19) is detected.

This test is performed by forcing the signal in the GIS controller by the PAS4000 program.

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with D-19.
Franco Colleoni
Check Detection alarm is actived.
Franco Colleoni
Check that GIS activates D-19 indication.
Franco Colleoni
Check GIS activates A-5 indication and sends actuation signal.
Franco Colleoni
Check GIS activates A-8 indication and sends actuation signal.
Franco Colleoni
Bypass the interlock.
Franco Colleoni
Check bypass warning message is actived. Detection alarm is cleared.
Franco Colleoni
Check all signals are cleared.
Franco Colleoni
Relese bypassed interlock.
Franco Colleoni
Check all the above signals remain active.
Franco Colleoni
Bypass warning message is cleared. Detection error message is actived.
Franco Colleoni
Check interlocks cannot be reset. Check all the signals remain active.
Franco Colleoni
Release by turning the interlock that was actuated.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Check Detection alarm is cleared.
Franco Colleoni
Write down the date of the test: 28/04/2022

Relay interlocks testing

This part will be performed with a user logged in with administrator permissions, Level 4 of user management, because it is necessary to bypass the signals, only allowed at this level. User levels is described in the document GIS User Interface Manual, (Ref: 5).

Almost all interlocks are tested with pushbutton panels, because most of them are not connected yet.

GIS

Wireless 1

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with GIS Wireless 1 relay.
Franco Colleoni
Check relay alarm is actived.
Franco Colleoni
Check that GIS activates Wireless 1 indication.
Franco Colleoni
Check GIS sends actuation signal and activates D-4.
Franco Colleoni
Check all the interlocks remain active.
Franco Colleoni
Reset interlock by pressing RESET button.
Franco Colleoni
All the above interlocks remain active.
Franco Colleoni
Release by turning the ETPB that was actuated.
Franco Colleoni
Reset interlock by pressing RESET button.
Franco Colleoni
Check relay alarm is cleared.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Write down the date of the test: 20/04/2022

Wireless 2

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with GIS Wireless 2 relay.
Franco Colleoni
Check relay alarm is actived.
Franco Colleoni
Check that GIS activates Wireless 2 indication.
Franco Colleoni
Check GIS sends actuation signal and activates D-4.
Franco Colleoni
Check all the interlocks remain active.
Franco Colleoni
Reset interlock by pressing RESET button.
Franco Colleoni
All the above interlocks remain active.
Franco Colleoni
Release by turning the ETPB that was actuated.
Franco Colleoni
Reset interlock by pressing RESET button.
Franco Colleoni
Check relay alarm is cleared.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Write down the date of the test: 20/04/2022

LASER

Laser controller

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with Laser Controller relay.
Franco Colleoni
Check relay alarm is actived.
Franco Colleoni
Check that GIS activates Laser Controller indication.
Franco Colleoni
Check GIS sends actuation signal and activates D-4.
Franco Colleoni
Check all the interlocks remain active.
Franco Colleoni
Reset interlock by pressing RESET button.
Franco Colleoni
All the above interlocks remain active.
Franco Colleoni
Release by turning the ETPB that was actuated.
Franco Colleoni
Reset interlock by pressing RESET button.
Franco Colleoni
Check relay alarm is cleared.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Write down the date of the test: 20/04/2022

PFLOW

PFlow

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with PFLOW relay.
Franco Colleoni
Check relay alarm is actived.
Franco Colleoni
Check that GIS activates PFLOW indication.
Franco Colleoni
Check GIS sends actuation signal and activates D-4.
Franco Colleoni
Check all the interlocks remain active.
Franco Colleoni
Reset interlock by pressing RESET button.
Franco Colleoni
All the above interlocks remain active.
Franco Colleoni
Release by turning the ETPB that was actuated.
Franco Colleoni
Reset interlock by pressing RESET button.
Franco Colleoni
Check relay alarm is cleared.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Write down the date of the test: 20/04/2022

M2 CAMERA

M2 Actuator

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with M2 Actuator relay.
Franco Colleoni
Check relay alarm is actived.
Franco Colleoni
Check that GIS activates M2 Actuator indication.
Franco Colleoni
Check GIS sends actuation signal and activates D-4.
Franco Colleoni
Check all the interlocks remain active.
Franco Colleoni
Reset interlock by pressing RESET button.
Franco Colleoni
All the above interlocks remain active.
Franco Colleoni
Release by turning the ETPB that was actuated.
Franco Colleoni
Reset interlock by pressing RESET button.
Franco Colleoni
Check relay alarm is cleared.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Write down the date of the test: 20/04/2022

M2 Hexapod

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with M2 Hexapod relay.
Franco Colleoni
Check relay alarm is actived.
Franco Colleoni
Check that GIS activates M2 Hexapod indication.
Franco Colleoni
Check GIS sends actuation signal and activates D-4.
Franco Colleoni
Check all the interlocks remain active.
Franco Colleoni
Reset interlock by pressing RESET button.
Franco Colleoni
All the above interlocks remain active.
Franco Colleoni
Release by turning the ETPB that was actuated.
Franco Colleoni
Reset interlock by pressing RESET button.
Franco Colleoni
Check relay alarm is cleared.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Write down the date of the test: 20/04/2022

Camera Rotator

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with Camera Rotator relay.
Franco Colleoni
Check relay alarm is actived.
Franco Colleoni
Check that GIS activates Camera Rotator indication.
Franco Colleoni
Check GIS sends actuation signal and activates D-4.
Franco Colleoni
Check all the interlocks remain active.
Franco Colleoni
Reset interlock by pressing RESET button.
Franco Colleoni
All the above interlocks remain active.
Franco Colleoni
Release by turning the ETPB that was actuated.
Franco Colleoni
Reset interlock by pressing RESET button.
Franco Colleoni
Check relay alarm is cleared.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Write down the date of the test: 20/04/2022

Camera Hexapod

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with Camera Hexapod relay.
Franco Colleoni
Check relay alarm is actived.
Franco Colleoni
Check that GIS activates Camera Hexapod indication.
Franco Colleoni
Check GIS sends actuation signal and activates D-4.
Franco Colleoni
Check all the interlocks remain active.
Franco Colleoni
Reset interlock by pressing RESET button.
Franco Colleoni
All the above interlocks remain active.
Franco Colleoni
Release by turning the ETPB that was actuated.
Franco Colleoni
Reset interlock by pressing RESET button.
Franco Colleoni
Check relay alarm is cleared.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Write down the date of the test: 20/04/2022

ACCESS / FIRE / EARTHQUAKE

Access

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with Access Control relay.
Franco Colleoni
Check relay alarm is actived.
Franco Colleoni
Check that GIS activates Access Control indication.
Franco Colleoni
Check GIS sends actuation signal and activates D-4.
Franco Colleoni
Check all the interlocks remain active.
Franco Colleoni
Reset interlock by pressing RESET button.
Franco Colleoni
All the above interlocks remain active.
Franco Colleoni
Release by turning the ETPB that was actuated.
Franco Colleoni
Reset interlock by pressing RESET button.
Franco Colleoni
Check relay alarm is cleared.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Write down the date of the test: 2019/05/28 20/04/2022

Fire

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with Fire Control relay.
Franco Colleoni
Check relay alarm is actived.
Franco Colleoni
Check that GIS activates Fire Control indication.
Franco Colleoni
Check GIS sends actuation signal and activates D-4.
Franco Colleoni
Check all the interlocks remain active.
Franco Colleoni
Reset interlock by pressing RESET button.
Franco Colleoni
All the above interlocks remain active.
Franco Colleoni
Release by turning the ETPB that was actuated.
Franco Colleoni
Reset interlock by pressing RESET button.
Franco Colleoni
Check relay alarm is cleared.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Write down the date of the test: 20/04/2022

Earthquake

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Press the interlock related with Earthquake Control relay.
Franco Colleoni
Check relay alarm is actived.
Franco Colleoni
Check that GIS activates Earthquake Control indication.
Franco Colleoni
Check GIS sends actuation signal and activates D-2.
Franco Colleoni
Check all the interlocks remain active.
Franco Colleoni
Reset interlock by pressing RESET button.
Franco Colleoni
All the above interlocks remain active.
Franco Colleoni
Release by turning the ETPB that was actuated.
Franco Colleoni
Reset interlock by pressing RESET button.
Franco Colleoni
Check relay alarm is cleared.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Write down the date of the test: 20/04/2022

Delays testing

Delays postpone a certain time (configurable) the actuations related with a specific event.

This part will be performed with a user logged in with administrator permissions, Level 4 of user management. User levels is described in the document GIS User Interface Manual, (Ref: 5).

Earthquake delay

Earthquake delay postpones a configurable time the actions related with the event D-2 Catastrophic Earthquake Interlock.

D-2 event activates the following actuation signals:

  • A-3 TMA Discharge Capacitor Banks

  • A-4 TMA Disables other equipment

  • A-5 TMA main drives- STO and engage the brakes

  • A-6 Camera cable wrap drives STO

  • A-7 Dome shutter doors and Windscreen Drives -Disable

  • A-9 Dome Louvers and Dome Locking Pin – Disable

  • A-10 Dome Rear Doors Drives – Disable

  • A-11 Dome Azimuth Drives – Disable

  • A-12 STO M2 Hexapod

  • A-13 STO M2 Actuators

  • A-14 STO Camera Rotator

  • A-15 STO Camera Hexapod

  • A-16 Pflow Platform Lift – Disable

  • A-18 M1M3 Support System (Earthquake stop)

  • A-20 Laser Cut-off

Testing procedure to verify the correct function of the delay time related with D-2 is described below.

Identification to be tested: Checked Responsible
None signal is activated.
Franco Colleoni
Write down delay time configured: 5.0[s]
Franco Colleoni
Press the interlock related with Earthquake Control relay and start the chronometer.
Franco Colleoni
Check in the chronometer that after the delay time configured GIS activates Earthquake Control indication.
Franco Colleoni
Check GIS sends actuation signal and activates D-2.
Franco Colleoni
Check detection alarm is actived.
Franco Colleoni
Release by turning the ETPB that was actuated.
Franco Colleoni
Check relay alarm is cleared.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Change delay time. Time configured: 10.0, 20.0 [s]
Franco Colleoni
Check delay time shown has changed.
Franco Colleoni
Press the interlock related with Earthquake Control relay and start the chronometer.
Franco Colleoni
Check in the chronometer that after the delay time configured GIS activates Earthquake Control indication.
Franco Colleoni
Check GIS sends actuation signal and activates D-2.
Franco Colleoni
Check detection alarm is actived.
Franco Colleoni
Release by turning the ETPB that was actuated.
Franco Colleoni
Check relay alarm is cleared.
Franco Colleoni
Check all interlocks are cleared.
Franco Colleoni
Write down the date of the test: 28/04/2022

User permissions check

Tests described below (in sections [5]{.underline}, [6]{.underline} and [7]{.underline}) are performed with a user logged in with administrator permissions. Now, the following tests are performed in order to verify that each user has access to the defined actions in the document GIS User Interface Manual, (Ref: 5).

Level 3 permissions check

Identification to be tested: Checked Responsible
No user is logged in.
Franco Colleoni
Log in with a user with Level 3 permissions.
Franco Colleoni
Name of the user logged in is shown in the screen.
Franco Colleoni
Check that button “RESET” appears on the screens that correspond.
Franco Colleoni
Log out.
Franco Colleoni
Write down the date of the test: 28/04/2022

Level 2 permissions check

Identification to be tested: Checked Responsible
No user is logged in.
Franco Colleoni
Log in with a user with Level 2 permissions.
Franco Colleoni
Name of the user logged in is shown in the screen.
Franco Colleoni
Check that button “BYPASS” does NOT appear in any screen.
Franco Colleoni
Check the delay time can NOT be modified.
Franco Colleoni
Check the button “Administration” in HOME page is NOT accesible and the user can NOT access to user management.
Franco Colleoni
Log out.
Franco Colleoni
Write down the date of the test: 28/04/2022

User Interface

During the tests, the user interface was being handled and some problems were detected, such as:

  • For the Dome page, in the Detections the label for D11 and D12 are swapped.

  • The date and time of the UI are not correct

  • Sometimes the HMI stops working properly, freezes or resets, displaying a low memory message. This does not affect the actual interlocks, only their representation on the screen.

The first two problems have been solved after the completion of the tests. But the third one has not been solved and the consultation has been transferred to the team’s supplier, Pilz, so this last point is still pending.

francoSignature

franciscoSignature

Franco Colleoni Francisco Javier López, CMSE®

Electronics Engineer, Rubin Observatory Certified Machinery Safety Expert

Electrical Engineer, TEKNIKER