Test Plan

Requested by:

LSST

Doc. Code / Version nº:

7186_GIS_0007 / 2.0

Editor:

A. Martin / F. Javier López

Approved by:

F. Javier López

Date:

2022/08/30

Document history

Version Date Author Comments
1.0 2019/05/16

A. Martín

Initial release

2.0 2019/06/03

A. Martín

Actualization with the tests performed

3.0 2022/08/30

F. Javier López

After review by Empresarios Agrupados

Acronyms Definition

AFE / AcFiEa

ETPB

Access Fire Earthquake

Emergency trip pushbutton

GIS Global Interlock System
HMI Human Machine Interface

IS

LAS

Interlock System

LASER

LSST

UI

Large Synoptic Survey Telescope

User Interface

Introduction

This document collects the procedures performed to verify the correct function of the Global Interlock System (GIS), which ensures the protection of the different systems of the telescope.

It includes the steps followed to complete GIS tests. Passing the tests confirms the correct communication, reception and emission of signals, between the different safety systems and, summarizing, the correct actuation of the system.

Reference documents

Document

Code

Version

1

GLOBAL INTERLOCK SYSTEM (GIS) ANALYSIS

092-308-E-Z-00004

04

2

Updated LTS-99

092-308-F-I-00003_01

01

3

Electric schemes – 7186 Test System for GISS_LSST Cabinets

7186_GIS_0003

1.0

4

Electric schemes - 7186 LSST Global Safety Interlock System Design

7186_GIS_0001

1.0

5

GIS User Interface Manual

7186_GIS_0005

1.0

Technical description

Architecture:

The safety interlock system of the telescope, named Global Interlock System (GIS) hereafter, is a distributed arrangement where a central safety controller is connected to all subsystem controllers (M2, TMA, Dome, etc.), by means of safety networks.

LASER, M2, PFLOW and AcFiEa subsystem controllers are directly connected to the central safety controller. Those subsystems compose the central controller’s periphery.

Testing architecture:

The architecture described below is the structure where the actuation of the Global Interlock System (GIS) is tested.

LASER, M2, PFLOW and AcFiEa subsystem controllers are hardwired to distributed I/O modules. Those modules are connected to the central controller by means of safety networks.

Hence, GIS and GIS’s periphery are tested in a real architecture situation.

M1M3, TMA, AUX and DOME are systems with a dedicated safety controller. Those systems are connected to the central controller by means of safety networks. However, for testing architecture there is only one controller (apart from the central controller), hence, the connection of M1M3, TMA, AUX AND DOME systems with central controller will be tested one by one.

Fig. 1 Testing architecture overview.

Testing architecture sends the input signals to the Central Controller and receives the output signals from the Central Controller. This communication is programmed with PASconnect, in PAS4000.

Detections, relays and signals related with LASER, M2, PFLOW and AcFiEa systems are reproduced physically with ETPBs and LEDs, as it is shown in Fig. 2.

Fig. 2 Testing architecture.

Testing procedure

Tests are performed in the installations of IK4-TEKNIKER, with the architecture described in the document 7186-GIS_TestSystem.pdf (referenced in section [2 Reference documents]{.underline}).

Detections and relays will be checked individually, one by one. Also, the Detection that can be delayed will be check independently.

First, detections will be tested one by one, afterwards, relays and, finally, the delays. Detailed procedure with every step is presented in the following sections.

Detections and relay forcing method depends on the system to which belong:

  • Signals from the external controller, “testing controller”, are forced via software.

  • The rest of the signals, from M1M3, TMA, AUX and DOME systems, are forced by pressing the corresponding ETPB.

Detection’ signals are check in UI and via software.

Relay signals are check in the UI. Relay signals can activate Detections, hence, the corresponding Actions are activated.

The Actions associated with those inputs will be checked observing signals (in HMI or in the software) and, in case there is a LED associated with the signal involved, observing the state of that LED.

  • Action signals to the external controller, “testing controller”, are checked in HMI and via software.

  • Action signals to the Central Controller are checked in HMI and in the corresponding LEDs.

ITEM FORCING METHOD CHECKING METHOD
Detection

-M1M3, TMA, AUX and DOME systems: Pressing ETPB.

-Other systems: software.

UI and software.
Relay -M1M3, TMA, AUX and DOME systems: Pressing ETPB.

Relay state in UI.

Detection (and corresponding Actions) originated by the relay in UI and software.

Action

Cannot be forced by itself.

When a detection that originates the release of the action is active, the action signal is activated.

-M1M3, TMA, AUX and DOME systems: LED, UI and software.

-Other systems: UI and software.

Reset By pressing RESET button in the UI.

-M1M3, TMA, AUX and DOME systems: LED, UI and software.

-Other systems: UI and software.

Table 1 Signals forcing and checking method.

Detections testing

This part will be performed with a user logged in with administrator permissions, Level 4 of user management, because it is necessary to bypass the signals, only allowed at this level. User levels is described in the document GIS User Interface Manual, (Ref: 5).

D-1 GIS Fire Interlock

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event GIS Fire Interlock (D-1) is detected.

This test is performed by activating the corresponding interlock (in testing architecture is reproduced by a emergency trip pushbutton (ETPB) ).

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with D-1.
F.J.Lopez
Check that GIS activates D-1 signal.
F.J.Lopez
Check Detection alarm is actived.
F.J.Lopez
Check GIS activates A-1 indication and sends actuation signals.
F.J.Lopez
Bypass the interlock.
F.J.Lopez
Check bypass warning message is actived. Detection alarm is cleared.
F.J.Lopez
Check all signals are cleared.
F.J.Lopez
Relese bypassed interlock.
F.J.Lopez
Check all the above signals remain active.
F.J.Lopez
Bypass warning message is cleared. Detection error message is actived.
F.J.Lopez
Check interlocks cannot be reset. Check all the signals remain active.
F.J.Lopez
Release by turning the interlock that was actuated.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Check Detection alarm is cleared.
F.J.Lopez
Write down the date of the test: 2019/05/27
F.J.Lopez

D-2 Catastrophic Earthquake Interlock

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event Catastrophic Earthquake Interlock (D-2) is detected.

This test is performed by activating the corresponding interlock (in testing architecture is reproduced by a emergency trip pushbutton (ETPB).

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with D-2.
F.J.Lopez
Check GIS activates D-2 indication.
F.J.Lopez
Check Detection alarm is actived.
F.J.Lopez
Check GIS activates A-3 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-4 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-5 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-6 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-7 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-9 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-10 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-11 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-12 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-13 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-14 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-15 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-16 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-18 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-20 indication and sends actuation signal.
F.J.Lopez
Bypass the interlock.
F.J.Lopez
Check bypass warning message is actived. Detection alarm is cleared.
F.J.Lopez
Check all signals are cleared.
F.J.Lopez
Relese bypassed interlock.
F.J.Lopez
Check all the above signals remain active.
F.J.Lopez
Bypass warning message is cleared. Detection error message is actived.
F.J.Lopez
Check interlocks cannot be reset. Check all the signals remain active.
F.J.Lopez
Release by turning the interlock that was actuated.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Check Detection alarm is cleared.
F.J.Lopez
Write down the date of the test: 2019/05/27
F.J.Lopez

D-3 GIS Internal Failure

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event GIS Internal Failure (D-3) is detected.

This test is performed by activating the corresponding interlock (in testing architecture is reproduced by a signal from Testing Controller).

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with D-3.
F.J.Lopez
Check that GIS activates D-3 indication.
F.J.Lopez
Check Detection alarm is actived.
F.J.Lopez
Check GIS activates A-4 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-5 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-6 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-7 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-9 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-10 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-11 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-12 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-13 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-14 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-15 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-17 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-19 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-20 indication and sends actuation signal.
F.J.Lopez
Bypass the interlock.
F.J.Lopez
Check bypass warning message is actived. Detection alarm is cleared.
F.J.Lopez
Check all signals are cleared.
F.J.Lopez
Relese bypassed interlock.
F.J.Lopez
Check all the above signals remain active.
F.J.Lopez
Bypass warning message is cleared. Detection error message is actived.
F.J.Lopez
Check interlocks cannot be reset. Check all the signals remain active.
F.J.Lopez
Release by turning the interlock that was actuated.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Check Detection alarm is cleared.
F.J.Lopez
Write down the date of the test: 2019/06/03
F.J.Lopez

D-4 GIS ETPBs

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event GIS ETPBs (D-4) is detected.

This test is performed by activating the corresponding interlock (in testing architecture is reproduced by a emergency trip pushbutton (ETPB)).

Detection D-4 is activated when a ETPB of its system is activated. In the test, the ETPB pressed to actívate D-4 is: Wireless1. This event, Wireless1, must be reset.

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with D-4.
F.J.Lopez
Check Detection alarm is actived.
F.J.Lopez
Check that GIS activates D-4 indication.
F.J.Lopez
Check GIS activates A-4 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-5 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-6 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-7 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-8 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-9 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-10 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-11 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-12 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-13 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-14 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-15 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-17 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-19 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-20 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-21 indication and sends actuation signal.
F.J.Lopez
Bypass the interlock.
F.J.Lopez
Check bypass warning message is activated. Detection alarm is cleared.
F.J.Lopez
Check all signals are cleared.
F.J.Lopez
Relese bypassed interlock.
F.J.Lopez
Check all the above signals remain active.
F.J.Lopez
Bypass warning message is cleared. Detection error message is activated.
F.J.Lopez
Reset interlock by pressing RESET button.
F.J.Lopez
Check all the signals remain active.
F.J.Lopez
Release by turning the interlock that was actuated.
F.J.Lopez
Reset interlock by pressing RESET button.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Check Detection alarm is cleared.
F.J.Lopez
Write down the date of the test: 2019/05/27
F.J.Lopez

D-5 Unauthorized Pier access

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event Unathorized Pier Access (D-5) is detected.

This test is performed by activating the corresponding interlock (in testing architecture is reproduced by a emergency trip pushbutton (ETPB).

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with D-5.
F.J.Lopez
Check Detection alarm is actived.
F.J.Lopez
Check that GIS activates D-5 signal.
F.J.Lopez
Check Detection alarm is active.
F.J.Lopez
Check GIS activates A-5 indication and sends actuation signal.
F.J.Lopez
Bypass the interlock.
F.J.Lopez
Check bypass warning message is actived. Detection alarm is cleared.
F.J.Lopez
Check all signals are cleared.
F.J.Lopez
Relese bypassed interlock.
F.J.Lopez
Check all the above signals remain active.
F.J.Lopez
Bypass warning message is cleared. Detection error message is actived.
F.J.Lopez
Check interlocks cannot be reset. Check all the signals remain active.
F.J.Lopez
Release by turning the interlock that was actuated.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Check Detection alarm is cleared.
F.J.Lopez
Write down the date of the test: 2019/05/27
F.J.Lopez

D-6 Unauthorized Dome access

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event Unathorized Dome access (D-6) is detected.

This test is performed by activating the corresponding interlock (in testing architecture is reproduced by a emergency trip pushbutton (ETPB).

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with D-6.
F.J.Lopez
Check Detection alarm is actived.
F.J.Lopez
Check that GIS activates D-6 indication.
F.J.Lopez
Check GIS activates A-5 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-11 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-20 indication and sends actuation signal.
F.J.Lopez
Bypass the interlock.
F.J.Lopez
Check bypass warning message is actived. Detection alarm is cleared.
F.J.Lopez
Check all signals are cleared.
F.J.Lopez
Relese bypassed interlock.
F.J.Lopez
Check all the above signals remain active.
F.J.Lopez
Bypass warning message is cleared. Detection error message is actived.
F.J.Lopez
Check interlocks cannot be reset. Check all the signals remain active.
F.J.Lopez
Release by turning the interlock that was actuated.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Check Detection alarm is cleared.
F.J.Lopez
Write down the date of the test: 2019/05/27
F.J.Lopez

D-7 TMA Brakes NOT engaged

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event TMA Brakes NOT engaged (D-7) is detected.

This test is performed by activating the corresponding interlock (in testing architecture is reproduced by a signal from Testing Controller).

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with D-7.
F.J.Lopez
Check Detection alarm is actived.
F.J.Lopez
Check that GIS activates D-7 indication.
F.J.Lopez
Check GIS activates A-8 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-21 indication and sends actuation signal.
F.J.Lopez
Bypass the interlock.
F.J.Lopez
Check bypass warning message is actived. Detection alarm is cleared.
F.J.Lopez
Check all signals are cleared.
F.J.Lopez
Relese bypassed interlock.
F.J.Lopez
Check all the above signals remain active.
F.J.Lopez
Bypass warning message is cleared. Detection error message is actived.
F.J.Lopez
Check interlocks cannot be reset. Check all the signals remain active.
F.J.Lopez
Release by turning the interlock that was actuated.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Check Detection alarm is cleared.
F.J.Lopez
Write down the date of the test: 2019/06/03
F.J.Lopez

D-8 Camera Cable Wrap Safety Device Actuated

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event Camera Cable Wrap Safety Device Actuated (D-8) is detected.

This test is performed by activating the corresponding interlock (in testing architecture is reproduced by a emergency trip pushbutton (ETPB).

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with D-8.
F.J.Lopez
Check Detection alarm is actived.
F.J.Lopez
Check that GIS activates D-8 indication.
F.J.Lopez
Check GIS activates A-6 indication and sends actuation signal.
F.J.Lopez
Bypass the interlock.
F.J.Lopez
Check bypass warning message is actived. Detection alarm is cleared.
F.J.Lopez
Check all signals are cleared.
F.J.Lopez
Relese bypassed interlock.
F.J.Lopez
Check all the above signals remain active.
F.J.Lopez
Bypass warning message is cleared. Detection error message is actived.
F.J.Lopez
Check interlocks cannot be reset. Check all the signals remain active.
F.J.Lopez
Release by turning the interlock that was actuated.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Check Detection alarm is cleared.
F.J.Lopez
Write down the date of the test: 2019/06/03
F.J.Lopez

D-9 TMA ETPBs

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event TMA ETPBs (D-9) is detected.

This test is performed by activating the corresponding interlock (in testing architecture is reproduced by a emergency trip pushbutton (ETPB).

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with D-9.
F.J.Lopez
Check Detection alarm is actived.
F.J.Lopez
Check that GIS activates D-9 indication.
F.J.Lopez
Check GIS activates A-7 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-8 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-9 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-10 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-11 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-12 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-13 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-14 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-15 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-17 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-19 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-20 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-21 indication and sends actuation signal.
F.J.Lopez
Bypass the interlock.
F.J.Lopez
Check bypass warning message is actived. Detection alarm is cleared.
F.J.Lopez
Check all signals are cleared.
F.J.Lopez
Relese bypassed interlock.
F.J.Lopez
Check all the above signals remain active.
F.J.Lopez
Bypass warning message is cleared. Detection error message is actived.
F.J.Lopez
Check interlocks cannot be reset. Check all the signals remain active.
F.J.Lopez
Release by turning the interlock that was actuated.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Check Detection alarm is cleared.
F.J.Lopez
Write down the date of the test: 2019/06/03
F.J.Lopez

D-10 Dome Locking pin retracted or Dome Rear Door Louvers NOT closed

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event Dome Locking pin retracted or Dome Rear Door Louvers NOT closed (D-10) is detected.

This test is performed by activating the corresponding interlock (in testing architecture is reproduced by a emergency trip pushbutton (ETPB) ).

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with D-10.
F.J.Lopez
Check Detection alarm is actived.
F.J.Lopez
Check that GIS activates D-10 indication.
F.J.Lopez
Check GIS activates A-17 indication and sends actuation signal.
F.J.Lopez
Bypass the interlock.
F.J.Lopez
Check bypass warning message is actived. Detection alarm is cleared.
F.J.Lopez
Check all signals are cleared.
F.J.Lopez
Relese bypassed interlock.
F.J.Lopez
Check all the above signals remain active.
F.J.Lopez
Bypass warning message is cleared. Detection error message is actived.
F.J.Lopez
Check interlocks cannot be reset. Check all the signals remain active.
F.J.Lopez
Release by turning the interlock that was actuated.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Check Detection alarm is cleared.
F.J.Lopez
Write down the date of the test: 2019/06/03
F.J.Lopez

D-11 Dome Rear doors are NOT closed

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event Dome Rear doors are NOT closed (D-11) is detected.

This test is performed by activating the corresponding interlock (in testing architecture is reproduced by a emergency trip pushbutton (ETPB).

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with D-11.
F.J.Lopez
Check Detection alarm is actived.
F.J.Lopez
Check that GIS activates D-11 indication.
F.J.Lopez
Check GIS activates A-16 indication and sends actuation signal.
F.J.Lopez
Bypass the interlock.
F.J.Lopez
Check bypass warning message is actived. Detection alarm is cleared.
F.J.Lopez
Check all signals are cleared.
F.J.Lopez
Relese bypassed interlock.
F.J.Lopez
Check all the above signals remain active.
F.J.Lopez
Bypass warning message is cleared. Detection error message is actived.
F.J.Lopez
Check interlocks cannot be reset. Check all the signals remain active.
F.J.Lopez
Release by turning the interlock that was actuated.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Check Detection alarm is cleared.
F.J.Lopez
Write down the date of the test: 2019/06/03
F.J.Lopez

D-12 Dome ETPBs

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event Dome ETPBs (D-12) is detected.

This test is performed by activating the corresponding interlock (in testing architecture is reproduced by a emergency trip pushbutton (ETPB).

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with D-12.
F.J.Lopez
Check Detection alarm is actived.
F.J.Lopez
Check that GIS activates D-12 indication.
F.J.Lopez
Check GIS activates A-4 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-5 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-6 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-12 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-13 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-14 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-15 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-17 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-19 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-20 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-21 indication and sends actuation signal.
F.J.Lopez
Bypass the interlock.
F.J.Lopez
Check bypass warning message is actived. Detection alarm is cleared.
F.J.Lopez
Check all signals are cleared.
F.J.Lopez
Relese bypassed interlock.
F.J.Lopez
Check all the above signals remain active.
F.J.Lopez
Bypass warning message is cleared. Detection error message is actived.
F.J.Lopez
Check interlocks cannot be reset. Check all the signals remain active.
F.J.Lopez
Release by turning the interlock that was actuated.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Check Detection alarm is cleared.
F.J.Lopez
Write down the date of the test: 2019/06/03
F.J.Lopez

D-13 Dome Crane not parked

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event Dome Crane not parked (D-13) is detected.

This test is performed by activating the corresponding interlock (in testing architecture is reproduced by a emergency trip pushbutton (ETPB).

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with D-13.
F.J.Lopez
Check Detection alarm is actived.
F.J.Lopez
Check that GIS activates D-13 indication.
F.J.Lopez
Check GIS activates A-5 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-21 indication and sends actuation signal.
F.J.Lopez
Bypass the interlock.
F.J.Lopez
Check bypass warning message is actived. Detection alarm is cleared.
F.J.Lopez
Check all signals are cleared.
F.J.Lopez
Relese bypassed interlock.
F.J.Lopez
Check all the above signals remain active.
F.J.Lopez
Bypass warning message is cleared. Detection error message is actived.
F.J.Lopez
Check interlocks cannot be reset. Check all the signals remain active.
F.J.Lopez
Release by turning the interlock that was actuated.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Check Detection alarm is cleared.
F.J.Lopez
Write down the date of the test: 2019/06/03
F.J.Lopez

D-14 Camera Rotator Pin Inserted

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event Camera Rotator Pin Inserted (D-14) is detected.

This test is performed by activating the corresponding interlock (in testing architecture is reproduced by a emergency trip pushbutton (ETPB).

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with D-14.
F.J.Lopez
Check Detection alarm is actived.
F.J.Lopez
Check that GIS activates D-14 indication.
F.J.Lopez
Check GIS activates A-2 indication and sends actuation signal.
F.J.Lopez
Bypass the interlock.
F.J.Lopez
Check bypass warning message is actived. Detection alarm is cleared.
F.J.Lopez
Check all signals are cleared.
F.J.Lopez
Relese bypassed interlock.
F.J.Lopez
Check all the above signals remain active.
F.J.Lopez
Bypass warning message is cleared. Detection error message is actived.
F.J.Lopez
Check interlocks cannot be reset. Check all the signals remain active.
F.J.Lopez
Release by turning the interlock that was actuated.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Check Detection alarm is cleared.
F.J.Lopez
Write down the date of the test: 2019/05/28
F.J.Lopez

D-15 Platform Lift above Enclosure Lower Level

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event Platform Lift above Enclosure Lower Level (D-15) is detected.

This test is performed by activating the corresponding interlock (in testing architecture is reproduced by a emergency trip pushbutton (ETPB).

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with D-15.
F.J.Lopez
Check Detection alarm is actived.
F.J.Lopez
Check that GIS activates D-15 indication.
F.J.Lopez
Check GIS activates A-9 indication and sends actuation signal.
F.J.Lopez
Bypass the interlock.
F.J.Lopez
Check bypass warning message is actived. Detection alarm is cleared.
F.J.Lopez
Check all signals are cleared.
F.J.Lopez
Relese bypassed interlock.
F.J.Lopez
Check all the above signals remain active.
F.J.Lopez
Bypass warning message is cleared. Detection error message is actived.
F.J.Lopez
Check interlocks cannot be reset. Check all the signals remain active.
F.J.Lopez
Release by turning the interlock that was actuated.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Check Detection alarm is cleared.
F.J.Lopez
Write down the date of the test: 2019/05/28
F.J.Lopez

D-16 Platform Lift NOT parked at the Telescope Level

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event Platform Lift NOT parked at the Telescope Level (D-16) is detected.

This test is performed by activating the corresponding interlock (in testing architecture is reproduced by a emergency trip pushbutton (ETPB).

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with D-16.
F.J.Lopez
Check Detection alarm is actived.
F.J.Lopez
Check that GIS activates D-16 indication.
F.J.Lopez
Check GIS activates A-10 indication and sends actuation signal.
F.J.Lopez
Bypass the interlock.
F.J.Lopez
Check bypass warning message is actived. Detection alarm is cleared.
F.J.Lopez
Check all signals are cleared.
F.J.Lopez
Relese bypassed interlock.
F.J.Lopez
Check all the above signals remain active.
F.J.Lopez
Bypass warning message is cleared. Detection error message is actived.
F.J.Lopez
Check interlocks cannot be reset. Check all the signals remain active.
F.J.Lopez
Release by turning the interlock that was actuated.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Check Detection alarm is cleared.
F.J.Lopez
Write down the date of the test: 2019/05/27
F.J.Lopez

D-17 Failed MCS Watchdog or MCS Loss of Communication

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event GIS Fire Interlock (D-17) is detected.

This test is performed by activating the corresponding interlock (in testing architecture is reproduced by a emergency trip pushbutton (ETPB).

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with D-17.
F.J.Lopez
Check Detection alarm is actived.
F.J.Lopez
Check that GIS activates D-17 indication.
F.J.Lopez
Check GIS activates A-14 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-15 indication and sends actuation signal.
F.J.Lopez
Bypass the interlock.
F.J.Lopez
Check bypass warning message is actived. Detection alarm is cleared.
F.J.Lopez
Check all signals are cleared.
F.J.Lopez
Relese bypassed interlock.
F.J.Lopez
Check all the above signals remain active.
F.J.Lopez
Bypass warning message is cleared. Detection error message is actived.
F.J.Lopez
Check interlocks cannot be reset. Check all the signals remain active.
F.J.Lopez
Release by turning the interlock that was actuated.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Check Detection alarm is cleared.
F.J.Lopez
Write down the date of the test: 2019/06/03
F.J.Lopez

D-18 Man-Lift not parked

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event Man-Lift not parked (D-18) is detected.

This test is performed by activating the corresponding interlock (in testing architecture is reproduced by a emergency trip pushbutton (ETPB).

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with D-18.
F.J.Lopez
Check Detection alarm is actived.
F.J.Lopez
Check that GIS activates D-18 indication.
F.J.Lopez
Check GIS activates A-5 indication and sends actuation signal.
F.J.Lopez
Bypass the interlock.
F.J.Lopez
Check bypass warning message is actived. Detection alarm is cleared.
F.J.Lopez
Check all signals are cleared.
F.J.Lopez
Relese bypassed interlock.
F.J.Lopez
Check all the above signals remain active.
F.J.Lopez
Bypass warning message is cleared. Detection error message is actived.
F.J.Lopez
Check interlocks cannot be reset. Check all the signals remain active.
F.J.Lopez
Release by turning the interlock that was actuated.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Check Detection alarm is cleared.
F.J.Lopez
Write down the date of the test: 2019/05/27
F.J.Lopez

D-19 Man-Lift not parked

The aim of this test is to verify the right actuation of Global Interlock System (GIS) when the event Man-Lift not parked (D-19) is detected.

This test is performed by activating the corresponding interlock (in testing architecture is reproduced by a emergency trip pushbutton (ETPB).

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with D-19.
F.J.Lopez
Check Detection alarm is actived.
F.J.Lopez
Check that GIS activates D-19 indication.
F.J.Lopez
Check GIS activates A-5 indication and sends actuation signal.
F.J.Lopez
Check GIS activates A-8 indication and sends actuation signal.
F.J.Lopez
Bypass the interlock.
F.J.Lopez
Check bypass warning message is actived. Detection alarm is cleared.
F.J.Lopez
Check all signals are cleared.
F.J.Lopez
Relese bypassed interlock.
F.J.Lopez
Check all the above signals remain active.
F.J.Lopez
Bypass warning message is cleared. Detection error message is actived.
F.J.Lopez
Check interlocks cannot be reset. Check all the signals remain active.
F.J.Lopez
Release by turning the interlock that was actuated.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Check Detection alarm is cleared.
F.J.Lopez
Write down the date of the test: 2019/05/28
F.J.Lopez

Relay interlocks testing

This part will be performed with a user logged in with administrator permissions, Level 4 of user management, because it is necessary to bypass the signals, only allowed at this level. User levels is described in the document GIS User Interface Manual, (Ref: 5).

In this case, all the interlocks managed by the GIS, of each of its subsystems, are checked, in which a response identical to that of pressing an emergency button is expected and therefore the D-4 is always activated with any of them.

GIS

Wireless 1

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with GIS Wireless 1 relay.
F.J.Lopez
Check relay alarm is actived.
F.J.Lopez
Check that GIS activates Wireless 1 indication.
F.J.Lopez
Check GIS sends actuation signal and activates D-4.
F.J.Lopez
Check relay cannot be bypassed.
F.J.Lopez
Check all the interlocks remain active.
F.J.Lopez
Reset interlock by pressing RESET button.
F.J.Lopez
All the above interlocks remain active.
F.J.Lopez
Release by turning the ETPB that was actuated.
F.J.Lopez
Reset interlock by pressing RESET button.
F.J.Lopez
Check relay alarm is cleared.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Write down the date of the test: 2019/05/28
F.J.Lopez

Wireless 2

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with GIS Wireless 2 relay.
F.J.Lopez
Check relay alarm is actived.
F.J.Lopez
Check that GIS activates Wireless 2 indication.
F.J.Lopez
Check GIS sends actuation signal and activates D-4.
F.J.Lopez
Check relay cannot be bypassed.
F.J.Lopez
Check all the interlocks remain active.
F.J.Lopez
Reset interlock by pressing RESET button.
F.J.Lopez
All the above interlocks remain active.
F.J.Lopez
Release by turning the ETPB that was actuated.
F.J.Lopez
Reset interlock by pressing RESET button.
F.J.Lopez
Check relay alarm is cleared.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Write down the date of the test: 2019/05/28
F.J.Lopez

LASER

Laser controller

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with Laser Controller relay.
F.J.Lopez
Check relay alarm is actived.
F.J.Lopez
Check that GIS activates Laser Controller indication.
F.J.Lopez
Check GIS sends actuation signal and activates D-4.
F.J.Lopez
Check relay cannot be bypassed.
F.J.Lopez
Check all the interlocks remain active.
F.J.Lopez
Reset interlock by pressing RESET button.
F.J.Lopez
All the above interlocks remain active.
F.J.Lopez
Release by turning the ETPB that was actuated.
F.J.Lopez
Reset interlock by pressing RESET button.
F.J.Lopez
Check relay alarm is cleared.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Write down the date of the test: 2019/05/28
F.J.Lopez

PFLOW

PFlow

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with PFLOW relay.
F.J.Lopez
Check relay alarm is actived.
F.J.Lopez
Check that GIS activates PFLOW indication.
F.J.Lopez
Check GIS sends actuation signal and activates D-4.
F.J.Lopez
Check relay cannot be bypassed.
F.J.Lopez
Check all the interlocks remain active.
F.J.Lopez
Reset interlock by pressing RESET button.
F.J.Lopez
All the above interlocks remain active.
F.J.Lopez
Release by turning the ETPB that was actuated.
F.J.Lopez
Reset interlock by pressing RESET button.
F.J.Lopez
Check relay alarm is cleared.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Write down the date of the test: 2019/05/28
F.J.Lopez

M2 CAMERA

M2 Actuator

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with M2 Actuator relay.
F.J.Lopez
Check relay alarm is actived.
F.J.Lopez
Check that GIS activates M2 Actuator indication.
F.J.Lopez
Check GIS sends actuation signal and activates D-4.
F.J.Lopez
Check relay cannot be bypassed.
F.J.Lopez
Check all the interlocks remain active.
F.J.Lopez
Reset interlock by pressing RESET button.
F.J.Lopez
All the above interlocks remain active.
F.J.Lopez
Release by turning the ETPB that was actuated.
F.J.Lopez
Reset interlock by pressing RESET button.
F.J.Lopez
Check relay alarm is cleared.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Write down the date of the test: 2019/05/28
F.J.Lopez

M2 Hexapod

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with M2 Hexapod relay.
F.J.Lopez
Check relay alarm is actived.
F.J.Lopez
Check that GIS activates M2 Hexapod indication.
F.J.Lopez
Check GIS sends actuation signal and activates D-4.
F.J.Lopez
Check relay cannot be bypassed.
F.J.Lopez
Check all the interlocks remain active.
F.J.Lopez
Reset interlock by pressing RESET button.
F.J.Lopez
All the above interlocks remain active.
F.J.Lopez
Release by turning the ETPB that was actuated.
F.J.Lopez
Reset interlock by pressing RESET button.
F.J.Lopez
Check relay alarm is cleared.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Write down the date of the test: 2019/05/28
F.J.Lopez

Camera Rotator

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with Camera Rotator relay.
F.J.Lopez
Check relay alarm is actived.
F.J.Lopez
Check that GIS activates Camera Rotator indication.
F.J.Lopez
Check GIS sends actuation signal and activates D-4.
F.J.Lopez
Check relay cannot be bypassed.
F.J.Lopez
Check all the interlocks remain active.
F.J.Lopez
Reset interlock by pressing RESET button.
F.J.Lopez
All the above interlocks remain active.
F.J.Lopez
Release by turning the ETPB that was actuated.
F.J.Lopez
Reset interlock by pressing RESET button.
F.J.Lopez
Check relay alarm is cleared.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Write down the date of the test: 2019/05/28
F.J.Lopez

Camera Hexapod

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with Camera Hexapod relay.
F.J.Lopez
Check relay alarm is actived.
F.J.Lopez
Check that GIS activates Camera Hexapod indication.
F.J.Lopez
Check GIS sends actuation signal and activates D-4.
F.J.Lopez
Check relay cannot be bypassed.
F.J.Lopez
Check all the interlocks remain active.
F.J.Lopez
Reset interlock by pressing RESET button.
F.J.Lopez
All the above interlocks remain active.
F.J.Lopez
Release by turning the ETPB that was actuated.
F.J.Lopez
Reset interlock by pressing RESET button.
F.J.Lopez
Check relay alarm is cleared.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Write down the date of the test: 2019/05/28
F.J.Lopez

ACCESS / FIRE / EARTHQUAKE

Access

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with Access Control relay.
F.J.Lopez
Check relay alarm is actived.
F.J.Lopez
Check that GIS activates Access Control indication.
F.J.Lopez
Check GIS sends actuation signal and activates D-4.
F.J.Lopez
Check relay cannot be bypassed.
F.J.Lopez
Check all the interlocks remain active.
F.J.Lopez
Reset interlock by pressing RESET button.
F.J.Lopez
All the above interlocks remain active.
F.J.Lopez
Release by turning the ETPB that was actuated.
F.J.Lopez
Reset interlock by pressing RESET button.
F.J.Lopez
Check relay alarm is cleared.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Write down the date of the test: 2019/05/28
F.J.Lopez

Fire

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with Fire Control relay.
F.J.Lopez
Check relay alarm is actived.
F.J.Lopez
Check that GIS activates Fire Control indication.
F.J.Lopez
Check GIS sends actuation signal and activates D-4.
F.J.Lopez
Check relay cannot be bypassed.
F.J.Lopez
Check all the interlocks remain active.
F.J.Lopez
Reset interlock by pressing RESET button.
F.J.Lopez
All the above interlocks remain active.
F.J.Lopez
Release by turning the ETPB that was actuated.
F.J.Lopez
Reset interlock by pressing RESET button.
F.J.Lopez
Check relay alarm is cleared.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Write down the date of the test: 2019/05/28
F.J.Lopez

Earthquake

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Press the interlock related with Earthquake Control relay.
F.J.Lopez
Check relay alarm is actived.
F.J.Lopez
Check that GIS activates Earthquake Control indication.
F.J.Lopez
Check GIS sends actuation signal and activates D-2.
F.J.Lopez
Check relay cannot be bypassed.
F.J.Lopez
Check all the interlocks remain active.
F.J.Lopez
Reset interlock by pressing RESET button.
F.J.Lopez
All the above interlocks remain active.
F.J.Lopez
Release by turning the ETPB that was actuated.
F.J.Lopez
Reset interlock by pressing RESET button.
F.J.Lopez
Check relay alarm is cleared.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Write down the date of the test: 2019/05/28
F.J.Lopez

Delays testing

Delays postpone a certain time (configurable) the actuations related with a specific event.

This part will be performed with a user logged in with administrator permissions, Level 4 of user management. User levels is described in the document GIS User Interface Manual, (Ref: 5).

Earthquake delay

Earthquake delay postpones a configurable time the actions related with the event D-2 Catastrophic Earthquake Interlock.

D-2 event activates the following actuation signals:

  • A-3 TMA Discharge Capacitor Banks

  • A-4 TMA Disables other equipment

  • A-5 TMA main drives- STO and engage the brakes

  • A-6 Camera cable wrap drives STO

  • A-7 Dome shutter doors and Windscreen Drives -Disable

  • A-9 Dome Louvers and Dome Locking Pin – Disable

  • A-10 Dome Rear Doors Drives – Disable

  • A-11 Dome Azimuth Drives – Disable

  • A-12 STO M2 Hexapod

  • A-13 STO M2 Actuators

  • A-14 STO Camera Rotator

  • A-15 STO Camera Hexapod

  • A-16 Pflow Platform Lift – Disable

  • A-18 M1M3 Support System (Earthquake stop)

  • A-20 Laser Cut-off

Testing procedure to verify the correct function of the delay time related with D-2 is described below.

Identification to be tested: Checked Responsible
None signal is activated.
F.J.Lopez
Write down delay time configured: 12,0 [s]
F.J.Lopez
Press the interlock related with Earthquake Control relay and start the chronometer.
F.J.Lopez
Check in the chronometer that after the delay time configured GIS activates Earthquake Control indication.
F.J.Lopez
Check GIS sends actuation signal and activates D-2.
F.J.Lopez
Check detection alarm is actived.
F.J.Lopez
Release by turning the ETPB that was actuated.
F.J.Lopez
Check relay alarm is cleared.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Change delay time. Time configured: 17,0 [s]
F.J.Lopez
Check delay time shown has changed.
F.J.Lopez
Press the interlock related with Earthquake Control relay and start the chronometer.
F.J.Lopez
Check in the chronometer that after the delay time configured GIS activates Earthquake Control indication.
F.J.Lopez
Check GIS sends actuation signal and activates D-2.
F.J.Lopez
Check detection alarm is actived.
F.J.Lopez
Release by turning the ETPB that was actuated.
F.J.Lopez
Check relay alarm is cleared.
F.J.Lopez
Check all interlocks are cleared.
F.J.Lopez
Write down the date of the test: 2019/05/28
F.J.Lopez

User permissions check

Tests described below (in sections [5]{.underline}, [6]{.underline} and [7]{.underline}) are performed with a user logged in with administrator permissions. Now, the following tests are performed in order to verify that each user has access to the defined actions in the document GIS User Interface Manual, (Ref: 5).

Level 3 permissions check

Identification to be tested: Checked Responsible
No user is logged in.
F.J.Lopez
Log in with a user with Level 3 permissions.
F.J.Lopez
Name of the user logged in is shown in the screen.
F.J.Lopez
Check that button “BYPASS” does NOT appear in any screen.
F.J.Lopez
Check the delay time can NOT be modified.
F.J.Lopez
Check the button “Administration” in HOME page is NOT accesible and the user can NOT access to user management.
F.J.Lopez
Check that button “RESET” appears on the screens that correspond.
F.J.Lopez
Log out.
F.J.Lopez
Write down the date of the test: 2019/06/03
F.J.Lopez

Level 2 permissions check

Identification to be tested: Checked Responsible
No user is logged in.
F.J.Lopez
Log in with a user with Level 2 permissions.
F.J.Lopez
Name of the user logged in is shown in the screen.
F.J.Lopez
Check that button “BYPASS” does NOT appear in any screen.
F.J.Lopez
Check the delay time can NOT be modified.
F.J.Lopez
Check the button “Administration” in HOME page is NOT accesible and the user can NOT access to user management.
F.J.Lopez
Check that button “RESET” does NOT appear on any screen.
F.J.Lopez
Log out.
F.J.Lopez
Write down the date of the test: 2019/06/03
F.J.Lopez