Titania provides two independent, programmable output behaviours: a power-up state applied after reset and a communications-loss safe state applied when watchdog supervision detects loss of the Modbus RTU master. For machine builders and control engineers, the practical job is to decide the required state of each load, program both profiles, and test power loss and network loss separately before automatic operation.
Short answer: Titania’s Modbus RTU remote I/O safe states can de-energise, energise or preserve an application-specific output pattern when communications are lost. The correct pattern depends on the machine and load. It must not be assumed that “all outputs OFF” is always safe.
How Titania Modbus RTU remote I/O safe states work
Titania Super I/O is an 8DI/8DO industrial module with isolated field I/O, two-wire half-duplex RS-485 and Modbus RTU. Its eight digital outputs are protected high-side sourcing outputs for suitable 24 VDC loads. Each channel has a commanded state, a programmable power-startup value and a programmable communications-loss safe value.
The distinction matters:
| Operating event | Titania feature | Engineering question | Required acceptance test |
|---|---|---|---|
| Power is applied or the module resets | Per-channel power-up state | What may each load do before the controller has established valid control? | Cycle module and field power under controlled conditions and observe every output. |
| Valid master communications stop | Watchdog plus per-channel communications-loss safe state | What should each load do after the configured timeout? | Stop Modbus polling, measure the timeout and verify the resulting output pattern. |
| Communications return | Firmware-specific recovery behaviour | Should control resume immediately, require acknowledgement or follow a local sequence? | Restore traffic and verify recovery against the machine’s functional specification. |
| Output driver reports a fault | Per-channel driver-fault information where supported | Should the master alarm, retry, latch off or require maintenance? | Use a controlled fault test appropriate to the delivered hardware and firmware. |
A commissioning plan must cover all four events. Testing only the normal ON/OFF commands leaves the failure behaviour unverified.
Why “safe state” is an application decision
“Safe state” does not automatically mean OFF. De-energising a solenoid may close one valve, open another through spring return, remove a holding force or stop cooling. An indicator may need to remain energised, while a motion command should normally be removed. The correct output pattern comes from the machine risk assessment and functional design—not from the I/O module alone.
For each connected load, document:
- the normal commanded state;
- the required state during module power-up;
- the required state after communication loss;
- the watchdog interval and maximum acceptable detection time;
- the behaviour when communication returns;
- whether an operator acknowledgement or controller reset is required; and
- the independent safety function, if the hazard assessment requires one.
Important limit: Titania’s local logic, watchdog and programmable output states are standard-control conveniences. They are not certified safety functions. Safety-related interlocks and protective actions require a separately designed and validated safety system.
Configuration path over Modbus RTU
Titania separates direct output commands, startup values, safe values and common management settings into different Modbus data groups. In datasheet TTN-DS-2026-001 Rev 08, the first eight entries of the output-status coil range control the eight outputs; the first eight safe-value coils define the communications-loss pattern; and the first eight power-startup coils define the reset pattern. Common management registers include the communications watchdog and system commands.
The published reference groups are:
- 00033-00544: direct output command coils, first eight entries used;
- 00545-01056: communications-loss safe-value coils, first eight entries used;
- 01057-01568: power-startup coils, first eight entries used; and
- 400001-400007: address, serial format, response delay, watchdog and system management.
These are workbook-aligned decimal references, not a substitute for the firmware-specific register map. Modbus tools differ in whether they display zero-based offsets or one-based references. Confirm the address convention, units, data type, supported function and firmware revision before writing production settings.
Serial settings that affect watchdog commissioning
The module supports slave addresses 1 to 247, automatic baud detection or fixed 9600, 19200, 38400 and 115200 bps, and 8E1, 8O1, 8N1 or 8N2 serial formats. Its configurable response delay is 0 to 50 ms. These settings influence polling-cycle design on a multi-drop network.
Set the watchdog longer than the worst credible healthy polling interval, including normal master workload and retries, but short enough for the application’s required failure response. Do not choose the timeout by copying another machine: calculate it from the actual network and process requirement, then measure it during acceptance testing.
Output limits still apply during a safe-state transition
A programmed state is only useful when the output and load are electrically compatible. Titania’s eight outputs are isolated high-side sourcing (PNP) channels. The controlled datasheet states 0.7 A continuous current per channel with all eight channels active, subject to ambient and thermal conditions, and approximately 1.1 A short-duration surge and overload limiting. The ON-state drop is up to 1 V; OFF-state leakage is specified at 10 µA maximum.
For solenoids, relays, sirens and other inductive loads, check steady-state current, measured inrush, switching frequency and stored inductive energy together. Titania includes an internal active clamp, but that clamp has finite energy capability. Use external suppression or an interposing relay/contactor where the load or isolation requirement exceeds the output-channel capability. Provide external branch protection sized for the conductors, supply and connected loads.
The module operates from 19.2 to 28.8 VDC around a 24 VDC nominal supply. Its stated 2 to 3 W maximum system consumption excludes external output-load current, so the panel power supply must be sized for the module and simultaneous load demand.
Commissioning checklist for Titania safe states
- Freeze the I/O schedule. Record each load, polarity, normal state, power-up state, communications-loss state and recovery rule.
- Verify the delivered release. Match the hardware label, firmware revision, terminal drawing and Modbus register map.
- Commission as conventional remote I/O first. Prove supply, commons, RS-485 polarity, slave address, serial format and direct output commands.
- Program the power-up profile. Keep automatic loads isolated or otherwise controlled while changing settings.
- Program the watchdog and safe-value profile. Confirm the time base and save behaviour against the matching register map.
- Test power-up. Cycle power and verify all eight physical outputs—not only the command values displayed by the master.
- Test communications loss. Stop valid polling, measure the transfer time and confirm every load reaches its specified state.
- Test recovery. Restore communication and verify whether output control resumes as the functional design requires.
- Record the baseline. Retain settings, firmware revision, test results and approved deviations with the machine documentation.
RS-485 design can determine whether the watchdog trips correctly
Titania uses a two-wire half-duplex RS-485 interface. Use a daisy-chain trunk, terminate only at the two physical ends, keep stubs short, assign unique slave IDs and document the bias, shield and common-reference strategy. Avoid star wiring and undocumented bias networks.
A noisy or poorly terminated network can produce intermittent retries or missed frames. The watchdog should detect genuine loss of valid communications, but it cannot correct the underlying wiring. During commissioning, monitor the communications LED and master error counters while testing the longest cable route and the expected operating environment.
Who should consider this feature?
Titania’s programmable power-up and communications-loss states are relevant to machine builders, system integrators, panel builders and plant engineers who need distributed 24 VDC I/O with deliberately defined behaviour when the controller or RS-485 link is unavailable. Typical non-safety loads include suitable solenoids, relays, sirens, indicators and tower lights.
Use the Tachyonic product selector to compare published options, review the industrial automation solutions context, or send the application details below for an engineering review.
Request a Titania application assessment
Send the machine or equipment function, controller and protocol, signal types and I/O count, each output load’s voltage, steady current, inrush and inductive behaviour, installation environment, required power-up and communications-loss states, quantity and target date.
Source and technical fact-check
- Titania 8DI/8DO Industrial Super I/O Datasheet, TTN-DS-2026-001 Rev 08, issued 22 July 2026.
- Titania Super I/O product page, checked 4 September 2026.
Fact-check note: All product claims above are limited to the controlled Rev 08 datasheet. Exact register offsets, time bases, fault recovery and supported function profiles must be confirmed against the register map and firmware supplied with the delivered unit. No safety certification, universal fail-safe behaviour or guaranteed suitability for a specific load is claimed.
