West Basin Municipal Water District 17140 Avalon Blvd Carson, CA 90746 Phone: (310) 217-2411 www.WestBasinCA.gov

PCS Standards

Operating Guide v.0.1.0

West Basin Municipal Water District

Document Standards Operating Guide

Revision Number 0.1.0

Effective Date 8/11/2026

Author Adrian Leon

Reviewed by Kaylee Halliday, Alex Coker

Prepared By:

9050 Irvine Center Drive Irvine, CA 92618

(949) 769-6000 www.eaintegrator.com

Standards Operating Guide v0.1.0 EA Project Number: EA25WBM048

17140 Avalon Blvd, Carson, CA 90746 Revision: 0.1.0 Tel 310-217-2411 Effective Date: 8/11/2026 www.WestBasinCA.Gov Page Number: 2 of 119

History Revision Date Description of Change Author Reviewed

0.1.0 8/11/2026 Draft release for client review AL KH/AC

Table of Contents 1 Overview

1.1 Purpose

1.2 Acronyms and Terms

1.3 Supplemental Documents

1.3.1 HMI Style Guide

1.3.2 PLC Style Guide

1.3.3 Standards Implementation Guide

2 Standard Operating Modes

2.1 Remote Operation

2.1.1 PCS Auto

2.1.2 PCS Manual

2.2 Local Operation

3 Communication Status Indications 4 Common Indications

4.1 Alarms

4.2 Contextual Information for Analog Displays

4.2.1 Alarm Ranges

4.2.2 Targets

4.3 Equipment States

4.3.1 Colors

4.3.2 Out-of-Service

4.3.3 Override

4.3.4 Interlock

4.4 Interactivity Indications

4.4.1 Navigation Links

4.4.2 Buttons and Setpoints

5 Common Features

5.1 My Home

6 Device Standards

6.1 Analog Input

6.1.1 Page Graphic

6.1.2 Faceplate Graphic - Main Content

6.1.3 Faceplate Graphic - Status Tab

6.1.4 Faceplate Graphic - Alarms Tab

6.1.5 Faceplate Graphic - Limit SP Tab

6.1.6 Faceplate Graphic - Dev SP Tab

www.WestBasinCA.Gov Page Number: 3 of 119

6.1.7 Faceplate Graphic - Control Tab

6.2 Analog Module

6.2.1 Page Graphic

6.3 Analog Output

6.3.1 Page Graphic

6.3.2 Faceplate Graphic - Main Content

6.3.3 Faceplate Graphic - Status Tab

6.3.4 Faceplate Graphic - Alarms Tab

6.3.5 Faceplate Graphic - Control Tab

6.4 Analog Valve

6.4.1 Page Graphic

6.4.2 Faceplate Graphic - Main Content

6.4.3 Faceplate Graphic - Status Tab

6.4.4 Faceplate Graphic - Alarms Tab

6.4.5 Faceplate Graphic - SPs Tab

6.4.6 Faceplate Graphic - Control Tab

6.5 Clock Sync

6.5.1 Page Graphic

6.5.2 Faceplate Graphic

6.6 Chemical Pacing

6.6.1 Page Graphic

6.6.2 Faceplate Graphic – Main Content

6.6.3 Faceplate Graphic - Trend Tab

6.6.4 Faceplate Graphic – Dosing Tab

6.6.5 Faceplate Graphic – Trim Tab

6.7 Conditions

6.7.1 Page Graphic

6.7.2 Faceplate Graphic

6.8 Digital Module

6.8.1 Page Graphic

6.9 Discrete Input

6.9.1 Page Graphic

6.9.2 Faceplate Graphic - Main Content

6.9.3 Faceplate Graphic - Alarms Tab

6.9.4 Faceplate Graphic - SPs Tab

6.9.5 Faceplate Graphic - Control Tab

6.10 Discrete Output

6.10.1 Page Graphic

6.10.2 Faceplate Graphic - Main Content

6.10.3 Faceplate Graphic - Alarms Tab

6.10.4 Faceplate Graphic - Control Tab

6.11 Discrete Valve

6.11.1 Page Graphic

6.11.2 Faceplate Graphic - Main Content

6.11.3 Faceplate Graphic - Status Tab

6.11.4 Faceplate Graphic - Alarms Tab

6.11.5 Faceplate Graphic - SPs Tab

www.WestBasinCA.Gov Page Number: 4 of 119

6.11.6 Faceplate Graphic - Control Tab

6.11.7 Faceplate Graphic - Confirm Tab

6.12 Discrete Position Valve

6.12.1 Page Graphic

6.12.2 Faceplate Graphic - Main Content

6.12.3 Faceplate Graphic - Status Tab

6.12.4 Faceplate Graphic - Alarms Tab

6.12.5 Faceplate Graphic - SPs Tab

6.12.6 Faceplate Graphic - Control Tab

6.13 Fixed Motor

6.13.1 Page Graphic

6.13.2 Faceplate Graphic - Main Content

6.13.3 Faceplate Graphic - Status Tab

6.13.4 Faceplate Graphic - Alarms Tab

6.13.5 Faceplate Graphic - SPs Tab

6.13.6 Faceplate Graphic - Control Tab

6.13.7 Supplemental Graphic – Runtime Totalizers

6.13.8 Supplemental Graphic – Start Counts Totalizers

6.14 Lead Lag Controller

6.14.1 Page Graphic

6.14.2 Faceplate Graphic – Main Content

6.15 PID Controller

6.15.1 Page Graphic

6.15.2 Faceplate Graphic - Main Content

6.15.3 Faceplate Graphic - Trend Tab

6.15.4 Faceplate Graphic - Alarms Tab

6.15.5 Faceplate Graphic - Tuning Tab

6.15.6 Faceplate Graphic - Control Tab

6.16 PLC Status

6.16.1 Page Graphic

6.16.2 Faceplate Graphic – Main Content

6.16.3 Faceplate Graphic – Alarms Tab

6.16.4 Faceplate Graphic – SPs Tab

6.17 PWM Controller

6.17.1 Page Graphic

6.17.2 Faceplate Graphic - Main Content

6.17.3 Faceplate Graphic - Trend Tab

6.17.4 Faceplate Graphic - Alarms Tab

6.17.5 Faceplate Graphic - Tuning Tab

6.17.6 Faceplate Graphic - Control Tab

6.18 Redundant Transmitter

6.18.1 Page Graphic

6.18.2 Faceplate Graphic – Main Content

6.18.3 Faceplate Graphic – Alarms Tab

6.18.4 Faceplate Graphic – Dev SP Tab

6.18.5 Faceplate Graphic – Control Tab

6.19 Sequence

www.WestBasinCA.Gov Page Number: 5 of 119

6.19.1 Page Graphic

6.19.2 Faceplate Graphic – Main Content

6.19.3 Faceplate Graphic – Status Tab

6.19.4 Faceplate Graphic – Alarms Tab

6.19.5 Faceplate Graphic – Control Tab

6.20 VFD Motor

6.20.1 Page Graphic

6.20.2 Faceplate Graphic - Main Content

6.20.3 Faceplate Graphic - Status Tab

6.20.4 Faceplate Graphic - Alarms Tab

6.20.5 Faceplate Graphic - SPs Tab

6.20.6 Faceplate Graphic - Control Tab

6.20.7 Supplemental Graphic – Runtime Totalizers

6.20.8 Supplemental Graphic – Start Counts Totalizers

6.21 View-Only Motor

6.21.1 Page Graphic

6.21.2 Faceplate Graphic - Main Content

6.21.3 Faceplate Graphic - Status Tab

6.21.4 Faceplate Graphic - Alarms Tab

6.21.5 Supplemental Graphic – Runtime Totalizers

6.21.6 Supplemental Graphic – Start Counts Totalizers

6.22 View-Only Valve

6.22.1 Page Graphic

6.22.2 Faceplate Graphic - Main Content

6.22.3 Faceplate Graphic - Status Tab

6.22.4 Faceplate Graphic - Alarms Tab

www.WestBasinCA.Gov Page Number: 6 of 119

1 Overview

1.1 Purpose

This specification explains how to operate and interact with the PCS device standards developed for West Basin Municipal Water District (the District) by Enterprise Automation. This document will not cover the backend implementation of these standards (see Standards Implementation Guide).

Instead, this document details how a user can interact with the standards at runtime, how a user can input commands or setpoints, and how a user should interpret indications on the screen.

1.2 Acronyms and Terms

For the remainder of the document the following acronyms will be used.

Term Description

WBMWD, the District “West Basin Municipal Water District”

EA “Enterprise Automation” (Integrator)

HMI “Human Machine Interface”: The screens and graphics that Operators use to monitor and control an automated process

PLC

“Programmable Logic Controller”: The industrially hardened controllers that interface with the instrumentation, valves, pumps, etc., and control the automated processes (or simply collect information from any non-automated systems).

PCS Process Control System

Device A term encompassing both the repeatable PLC code and the PCS integration (graphics, tags, historization, etc.) that represent a standardized unit of the system, i.e., “the Analog Valve device”

1.3 Supplemental Documents

1.3.1 HMI Style Guide

SPEC HMI Style Guide 1.0.0

1.3.2 PLC Style Guide

SPEC PLC Style Guide 1.0.0

1.3.3 Standards Implementation Guide

SPEC Standards Implementation Guide 1.0.0 www.WestBasinCA.Gov Page Number: 7 of 119

2 Standard Operating Modes

2.1 Remote Operation

A device in “Remote” mode refers to equipment that is acting on the commands from the PLC/HMI.

The physical equipment may be equipped with a Hand-Off-Auto (HOA) switch or a Local-Off-Remote (LOR) switch. When the switches are positioned for “Auto” and “Remote”, the device is considered in Remote mode since the equipment will respond to signals from the PCS and Operate as programmed.

2.1.1 PCS Auto

PCS Auto mode is the normal mode of Operation for devices controlled by PLC/HMI. PCS Auto allows the equipment to be controlled automatically by the PLC at any time. Commands are determined solely by the logic of the PLC and therefore will update whenever the PLC logic dictates.

2.1.2 PCS Manual

PCS Manual mode allows the equipment to be controlled by manual commands input from the HMI.

These manual commands entered by an HMI user are followed regardless of the automatic Operation of the PLC. Since the PLC will not be able to update the commands to respond to process changes (such as alarms), this mode is not intended as a typical mode of Operation.

2.2 Local Operation

A device in “Local” mode refers to any equipment that is not in “Remote”. Local equipment may be configured for manual Operation (i.e. hand valves), Operation by any system that is not connected to the PCS (i.e. local control switches), or for no Operation (i.e. locked out).

If the HOA switch or the LOR switch is positioned for “Off”, “Local”, or “Hand”, the device is considered in Local mode since the equipment will not respond to signals from the PCS. It cannot be expected that the equipment will follow the programmed behavior. Equipment may have physical or electrical interlocks that prevent the mechanism to Operate under certain conditions. When these interlocks are active, the device is considered in Local mode since the equipment will not respond to signals from the PCS.

Many devices that are configured for Local Operation will still provide feedback to the PLC/HMI, such as position feedback. As such, Local mode will not disable screen animations or state historization.

www.WestBasinCA.Gov Page Number: 8 of 119

3 Communication Status Indications Each device graphic comes equipped with status indicators that will convey the quality of the data being displayed. If these icons appear, the data in the display may not be current and reliable. Refer to the table below for the meaning of each.

Icon Description MX Status or OPC Quality

Communication Error (highest priority) Message Exchange Status

Configuration Error Message Exchange Status

Pending Message Exchange Status

Operational Error Message Exchange Status

Software Error Message Exchange Status

Security Error Message Exchange Status

Warning Message Exchange Status

Out Of Service OPC Data Quality

Device Failure OPC Data Quality

Bad OPC Data Quality

Uncertain OPC Data Quality

Initializing (lowest priority) OPC Data Quality

Note: The initializing state is not an error state. This is an indication that the graphic is waiting for a value to be read or written. This condition should resolve to either a good or error status as soon as it is read or set.

www.WestBasinCA.Gov Page Number: 9 of 119

4 Common Indications

4.1 Alarms

The following colors and icons are reserved exclusively for alarms:

Red, diamond icon: Priority 1 Alarms

Orange, square icon: Priority 2 Alarms

Yellow, inverted triangle icon: Priority 3 Alarms

Cyan, triangle icon: Priority 4 Alarms

Purple, timer icon: Shevled Alarms

The animation on the alarm border indicates the state of the alarm. If a device has multiple alarms, the highest priority alarm is shown.

Blinking: ACTIVE, UNACKNOWLEDGED

Solid: ACTIVE, ACKNOWLEDGED

Blinking, Striped: INACTIVE, UNACKNOWLEDGED

No Alarm Border: INACTIVE, ACKNOWLEDGED www.WestBasinCA.Gov Page Number: 10 of 119

4.2 Contextual Information for Analog Displays

4.2.1 Alarm Ranges

Alarm ranges are displayed between alarm setpoints. The minor range is shown as a light gray box between the optimal range and the high high/low low setpoints. The major range is shown as a dark gray box beyond the high high/low low setpoints (all the way to the min/max trend values).

Meter:

Trend:

4.2.2 Targets

Targets are displayed using a dark grey line. Typically, the target line represents the value that the control logic is trying to achieve. If deviation alarms are configured, then a value that strays to far from this target may cause a deviation alarm.

Meter:

Trend:

www.WestBasinCA.Gov Page Number: 11 of 119

4.3 Equipment States

4.3.1 Colors

The standard Operating colors for equipment are grey, light blue, and white.

Grey (RGB: 132, 132, 132): Equipment is passive (Stopped, Closed, etc.)

Light Blue (RGB: 147, 194, 228): Equipment is transitioning between states

White (RGB: 255, 255, 255): Equipment is active (Running, Open, etc.)

4.3.2 Out-of-Service

Equipment and values that have been placed out-of-service will have a gray hatched background or border. This indicates that the equipment or value is unavailable to the automatic system (e.g., locked out, under maintenance, etc.) and should not be used.

Halliday, Kaylee To West Basin: Would you prefer light blue as the transition color, or the ‘loading’ icon on the normal gray/white equipment colors?

Halliday, Kaylee To West Basin: Which icon would you prefer to represent Out-of-Service equipment?

John Venner West Basin Municipal Water District I like the arrow-circle symbol with the icon in its last confirmed state www.WestBasinCA.Gov Page Number: 12 of 119

4.3.3 Override

Values that have been overridden will have a periwinkle background. This indicates that the value being shown is not the actual measurement from the field. Instead, someone has overridden the measurement with a value of their own. Overrides are typically put in place for purposes of maintenance and should not be left in place for long periods of time.

4.3.4 Interlock

Devices that have interlock conditions will display the letter I next to the device.

My preference is hatched with wrench icon

Use lock symbol from 4.3.2 above www.WestBasinCA.Gov Page Number: 13 of 119

4.4 Interactivity Indications

All elements that can be clicked/interacted with will be indicated by a few standard symbols, described below.

Generally, interactable elements will be shown using the contrast of dark grey and white. Non-interactable elements (such as disabled buttons) will decrease in contrast to show that they cannot be clicked.

A triangle in the top-right corner of a graphic can also be used to indicate that that graphic will do something when clicked.

4.4.1 Navigation Links

Navigation links have a dark gray icon with a white background to indicate that they are interactable

4.4.1.1 Link to Another Screen

Links that use the screen icon will navigate to another screen.

Links that use the process arrow graphic will also navigate to another screen and typically allow the user to follow a process line to an adjacent area of the process.

In some cases, a region of the screen may navigate to another screen when clicked (click-through navigation). This navigation will be indicated by a dark grey triangle in the right-hand corner.

4.4.1.2 Link to a Faceplate

Links that use the right-facing arrow icon will open a faceplate to the right of the current screen. This will not hide the screen currently being shown.

Any equipment graphics that have a dark grey triangle in the right-hand corner will also open a faceplate to the right when they are clicked

I don't like this screen symbol but I'm not sure when it would be used in our system that the below two symbols wouldn't be more appropriate

Add a dark grey triangle to the top right of this graphic for consistency www.WestBasinCA.Gov Page Number: 14 of 119

4.4.2 Buttons and Setpoints

4.4.2.1 Enabled

When a button or a setpoint can be clicked, it will appear with contrasting black on white colors

4.4.2.2 Disabled

When a button or a setpoint can not be clicked (either due to insufficient credentials, or due to some logic that requires the input to be blocked), it will appear with lower contrast dark grey on grey colors.

If the object is disabled due to insufficient credentials, a key icon will be present.

To West Basin: Which icon would you prefer for a disabled setpoint/button due to insufficient privilege?

Key icon is good www.WestBasinCA.Gov Page Number: 15 of 119

5 Common Features

5.1 My Home

The home screen has a dedicated navigation button in the top banner. The My Home feature allows each user to define any screen as their home screen.

www.WestBasinCA.Gov Page Number: 16 of 119

6 Device Standards

6.1 Analog Input

The analog input device is responsible for scaling and monitoring the signal from analog transmitters within the process.

This device reports both the scaled value of the transmitter and the fault status of the transmitter. It can also be optionally configured to report limit alarms (High High, High, Low, Low Low) and/or deviation alarms for the sake of process awareness and response.

This device allows for Operator override for the sake of maintenance. When the override is active, the analog input value will follow an Operator setpoint while ignoring signals from the transmitter. This device also allows for an Out-of-Service mode. When OOS is active, all alarms for the device are suppressed.

Some analog inputs (e.g. process flows) may optionally be configured with a totalizer. Up to four totalizers may be configured: Total, Daily, Monthly, and Cycle.

The “Daily” total reflects the total since the start of the day. It is reset at a defined start-of-day time. The total value of the previous day is saved and available within the device.

The “Monthly” total reflects the total since the start of the month. It is reset at a defined start-of-day time on the first day of each calendar month. The total value of the previous month is saved and available within the device.

The “Total” total reflects an ongoing total that is not automatically reset. This total can be reset by the user. The total value before the last user-reset is saved and available within the device.

The “Cycle” total reflects a total since the start of the relevant process state. The meaning of this total will depend on process context. For example, a waste flow total may reset each time a new flow-to-waste command is initiated. The total value of the previous cycle is saved and available within the device.

6.1.1 Page Graphic

Analog Input has three graphical displays: Meter, Trend, and Value. If the display has a triangle in the top right corner, then the display can be clicked to open a faceplate with more information about the variable.

6.1.1.1 Meter

The meter has several optional graphics including alarm ranges and target.

See section 4.2.1 for more information on targets and alarm ranges.

www.WestBasinCA.Gov Page Number: 17 of 119

6.1.1.2 Trend

The trend has several optional graphics including target and alarm ranges.

See section 4.2.1 for more information on targets and alarm ranges.

6.1.1.3 Value

The value display is a numerical display of the Analog Input variable and includes units.

6.1.2 Faceplate Graphic - Main Content

The main content box contains the value of the variable, its status, and any alarms that are active.

The status will display “Normal”, “OOS”, or “Override”.

The alarm will display the type of alarm active (ex., “Fault”, “HiHi Lim”, LoLo Dev”).

The meter will display any alarm ranges and targets that are applicable (see section 4.2.1 for more information).

If the analog input is configured with deviation alarms, then a target value display will appear in the main content box.

If any of the alarms for the input are configured to latch, a button will be available in the main content box.

www.WestBasinCA.Gov Page Number: 18 of 119

6.1.3 Faceplate Graphic - Status Tab

The status tab contains a trend of the variable, as well as the status of the out-of-service and override states.

If the analog input has a totalizer, then an extra “Totalizer Details” navigation link will appear which opens a supplemental faceplate with the device’s totalizer.

6.1.4 Faceplate Graphic - Alarms Tab

The alarms tab contains the status of the transmitter fault and override timeout alarms, as well as all limit and deviation alarms configured for this transmitter.

When active, these alarms can be acknowledged from the faceplate using the acknowledge button to the right of the alarm status.

Does the "Ack" symbol disappear/change color/other signal when acknowledged?

www.WestBasinCA.Gov Page Number: 19 of 119

6.1.4.1 Transmitter Fault Alarm

Category: System

Default Priority: Priority 3

This alarm is active when any of the following conditions are met for longer than a hardcoded delay:

1. Any of the following conditions are active:

A. I/O channel is faulted

B. I/O module is faulted

C. Remote rack has lost communication to PLC

D. Input value is out of range

2. Out-of-Service is not active

6.1.4.2 Override Timeout Alarm

Category: Discrete

Default Priority: Priority 4

This alarm is active when all of the following conditions are met for longer than Override Timeout:

1. Override has been active

2. Out-of-Service is not active

6.1.4.3 Limit High High Alarm

Category: Value HiHi

This alarm is set when all of the following conditions are met for longer than the Limit Alarm Delay:

1. Analog value is greater than Limit High High Setpoint

2. Limit High High Alarm is not disabled by PLC logic

3. Out-of-Service is not active

This alarm is reset when any of the following conditions are met:

A. Analog value is less than Limit High High Setpoint minus the Limit Alarm Deadband

B. Limit High High Alarm is disabled by PLC logic

C. Out-of-Service is active

Where can the operator see which condition triggered the alarm?

www.WestBasinCA.Gov Page Number: 20 of 119

6.1.4.4 Limit High Alarm

Category: Value Hi

This alarm is set when all of the following conditions are met for longer than the Limit Alarm Delay:

1. Analog value is greater than Limit High Setpoint

2. Limit High Alarm is not disabled by PLC logic

3. Limit High High Alarm is not active

4. Out-of-Service is not active

A. Analog value is less than Limit High Setpoint minus the Limit Alarm Deadband

B. Limit High Alarm is disabled by PLC logic

C. Limit High High Alarm is active

D. Out-of-Service is active

6.1.4.5 Limit Low Alarm

Category: Value Lo

This alarm is set when all of the following conditions are met for longer than the Limit Alarm Delay:

1. Analog value is less than Limit Low Setpoint

2. Limit Low Alarm is not disabled by PLC logic

3. Limit Low Low Alarm is not active

A. Analog value is greater than Limit Low Setpoint plus the Limit Alarm Deadband

B. Limit Low Alarm is disabled by PLC logic

C. Limit Low Low Alarm is active

D. Out-of-Service is active www.WestBasinCA.Gov Page Number: 21 of 119

6.1.4.6 Limit Low Low Alarm

Category: Value LoLo

This alarm is set when all of the following conditions are met for longer than the Limit Alarm Delay:

1. Analog value is less than Limit Low Low Setpoint

2. Limit Low Low Alarm is not disabled by PLC logic

A. Analog value is greater than Limit Low Low Setpoint minus the Limit Alarm Deadband

B. Limit Low Low Alarm is disabled by PLC logic

C. Out-of-Service is active

6.1.4.7 Deviation High High Alarm

Category: Deviation Major

This alarm is set when all of the following conditions are met for longer than the Deviation Alarm Delay:

1. Analog value is above the target (defined in PLC) by more than Deviation High High Setpoint

2. Deviation High High Alarm is not disabled by PLC logic

A. Analog value is above the target by less than Deviation High High Setpoint minus Deviation Alarm Deadband

B. Deviation High High Alarm is disabled by PLC logic www.WestBasinCA.Gov Page Number: 22 of 119

6.1.4.8 Deviation High Alarm

Category: Deviation Minor

1. Analog value is above the target (defined in PLC) by more than Deviation High Setpoint

2. Deviation High Alarm is not disabled by PLC logic

3. Deviation High High Alarm is not active

A. Analog value is above the target by less than Deviation High Setpoint minus Deviation Alarm Deadband

B. Deviation High Alarm is disabled by PLC logic

C. Deviation High High Alarm is active

D. Out-of-Service is active www.WestBasinCA.Gov Page Number: 23 of 119

6.1.4.9 Deviation Low Alarm

1. Analog value is below the target (defined in PLC) by more than Deviation Low Setpoint

2. Deviation Low Alarm is not disabled by PLC logic

3. Deviation Low Low Alarm is not active

A. Analog value is below the target by less than Deviation Low Setpoint minus Deviation Alarm Deadband

B. Deviation Low Alarm is disabled by PLC logic

C. Deviation Low Low Alarm is active

D. Out-of-Service is active

6.1.4.10 Deviation Low Low Alarm

Category: Deviation Major

1. Analog value is below the target (defined in PLC) by more than Deviation Low Low Setpoint

2. Deviation Low Low Alarm is not disabled by PLC logic

A. Analog value is below the target by less than Deviation Low Low Setpoint minus Deviation Alarm Deadband

B. Deviation Low Low Alarm is disabled by PLC logic www.WestBasinCA.Gov Page Number: 24 of 119

6.1.5 Faceplate Graphic - Limit SP Tab

The limit setpoint tab contains setpoints for high high, high, low, low low limit alarms, as well as limit alarm deadband and delay setpoints.

6.1.5.1 Limit Alarm Delay

Default Security Level: Engineer

Disable Condition: None

Visibility Condition: At least one limit alarm is configured

Minimum Input: 0.0 sec

Maximum Input: 600.0 sec

6.1.5.2 Limit Alarm Deadband

Default Security Level: Engineer

Disable Condition: None

Visibility Condition: At least one limit alarm is configured

Minimum Input: 0.0 E.U.

Maximum Input: E.U. Maximum – E.U. Minimum www.WestBasinCA.Gov Page Number: 25 of 119

6.1.5.3 Limit High High Setpoint

Default Security Level: Supervisor

Disable Condition: None

Visibility Condition: Limit High High Alarm is configured

Minimum Input: Limit High Setpoint

Maximum Input: E.U. Maximum

6.1.5.4 Limit High Setpoint

Default Security Level: Operator

Disable Condition: None

Visibility Condition: Limit High Alarm is configured

Minimum Input: Limit Low Setpoint

Maximum Input: Limit High High Setpoint

6.1.5.5 Limit Low Setpoint

Default Security Level: Operator

Disable Condition: None

Visibility Condition: Limit Low Alarm is configured

Minimum Input: Limit Low Low Setpoint

Maximum Input: Limit High Setpoint

6.1.5.6 Limit High High Setpoint

Default Security Level: Supervisor

Disable Condition: None

Visibility Condition: Limit Low Low Alarm is configured

Minimum Input: E.U. Minimum

Maximum Input: Limit Low Setpoint www.WestBasinCA.Gov Page Number: 26 of 119

6.1.6 Faceplate Graphic - Dev SP Tab

The deviation setpoint tab contains setpoints for high high, high, low, low low deviation alarms, as well as deviation alarm deadband and delay setpoints.

6.1.6.1 Deviation Delay

Disable Condition: None

Visibility Condition: At least one deviation alarm is configured

Minimum Input: 0.0 sec

Maximum Input: 600.0 sec

6.1.6.2 Deviation Alarm Deadband

Default Security Level: Engineer

Disable Condition: None

Visibility Condition: At least one deviation alarm is configured

Minimum Input: 0.0 %

Maximum Input: 200.0 % www.WestBasinCA.Gov Page Number: 27 of 119

6.1.6.3 Deviation High High Setpoint

Disable Condition: None

Visibility Condition: Deviation High High alarm is configured

Minimum Input: Deviation High Setpoint

Maximum Input: 100.0 %

6.1.6.4 Deviation High Setpoint

Default Security Level: Operator

Disable Condition: None

Visibility Condition: Deviation High alarm is configured

Minimum Input: 0.0 %

Maximum Input: Deviation High High Setpoint

6.1.6.5 Deviation Low Setpoint

Default Security Level: Operator

Disable Condition: None

Visibility Condition: Deviation Low alarm is configured

Minimum Input: Deviation Low Low Setpoint

Maximum Input: 0.0 %

6.1.6.6 Deviation High High Setpoint

Default Security Level: Supervisor

Disable Condition: None

Visibility Condition: Deviation Low Low alarm is configured

Minimum Input: -100.0 %

Maximum Input: Deviation Low Setpoint www.WestBasinCA.Gov Page Number: 28 of 119

6.1.7 Faceplate Graphic - Control Tab

The control tab allows a user to set or clear out-of-service and override status, as well as edit the override value and override timeout setpoints.

6.1.7.1 Out-of-Service

Disable Condition: None

Visibility Condition: Always visible

Behavior: Toggle

When “Out-of-Service” is first set, the name of the user who enabled “Out-of-Service” and the current time are logged to the historian.

While “Out-of-Service” is active, all alarms associated with the device are inhibited.

This should be Supervisor level and above www.WestBasinCA.Gov Page Number: 29 of 119

6.1.7.2 Override

Disable Condition: None

When “Override” is first set, the analog input will write the current analog value into the instrument override value (bumpless transfer). The name of the user who enabled “Override” and the current time are logged to the historian.

While “Override” is active, the raw input from the I/O card is ignored and the value of the analog input is set to the instrument override value. The instrument’s override value can only be changed by the Operator when override is active.

6.1.7.3 Override Value

Default Security Level: Engineer

Disable Condition: None

Visibility Condition: Override is active

Minimum Input: E.U. Minimum

Maximum Input: E.U. Maximum

6.1.7.4 Override Timeout

Default Security Level: Engineer

Disable Condition: Override is active

Visibility Condition: Always visible

Minimum Input: 0.0 hrs

Maximum Input: 24.0 hrs

This should be Supervisor level and above

John Venner West Basin Municipal Water District Correct to "Supervisor"

John Venner West Basin Municipal Water District www.WestBasinCA.Gov Page Number: 30 of 119

6.2 Analog Module

The analog module device is responsible for monitoring the health of each channel in an analog module and its communication with HMI. When configured, this device will report the status of channel faults and values of analog tags within the PLC. The device will also monitor module status to determine if the module communication has failed.

6.2.1 Page Graphic

The page graphic contains the channel labels and values in the analog input/output module. Each channel is also highlighted red when the fault alarm on it is active. The wizard options in the analog module object allow configuration for the number of total channels in the module as well.

The top banner contains the analog module name in the PLC as well as the module caption (Analog Input/Output). This banner highlights red when there is an active module fault.

www.WestBasinCA.Gov Page Number: 31 of 119

6.3 Analog Output

The analog output device is responsible for scaling and monitoring the analog commands used to control the process equipment.

This device reports both the scaled value of the command and the fault status of the transmitter. This device also allows for an Out-of-Service mode. When OOS is active, all alarms for the device are suppressed.

6.3.1 Page Graphic

6.3.1.1 Meter

The value display is a graphical display of the Analog Output variable.

6.3.1.2 Value

The value display is a numerical display of the Analog Output variable and includes units.

6.3.2 Faceplate Graphic - Main Content

The main content box contains the command value, value status, and alarm status.

www.WestBasinCA.Gov Page Number: 32 of 119

6.3.3 Faceplate Graphic - Status Tab

The status tab contains a trend of the command value, and the out-of-service status.

6.3.4 Faceplate Graphic - Alarms Tab

The alarms tab contains the status of the transmitter fault alarm. When active, this alarm can be acknowledged from the faceplate using the acknowledge button to the right of the status.

www.WestBasinCA.Gov Page Number: 33 of 119

6.3.4.1 Transmitter Fault Alarm

This alarm is active when all of the following conditions are met for longer than a hardcoded delay:

A. I/O channel is faulted

B. I/O module is faulted

C. Remote rack has lost communication to PLC

2. Out-of-Service is not active

6.3.5 Faceplate Graphic - Control Tab

The control tab allows a user to set and clear out-of-service status.

6.3.5.1 Out-of-Service

Disable Condition: None

When “Out-of-Service” is first set, the name of the user who enabled “Out-of-Service” and the current

Change to Supervisor www.WestBasinCA.Gov Page Number: 34 of 119

6.4 Analog Valve

The analog valve device is responsible for handling all remote control and monitoring of any valve configured with analog position commands (rather than discrete open/close commands).

This device reports the current state of the valve as well as latching alarms for Unexpected Open/Close and Fail-To-Open/Close. Additionally, a non-latching warning alarm will alert if the valve position deviates too far from the command.

This device allows for an Out-of-Service mode. When OOS is active, all alarms for the device are suppressed.

Since each valve is associated with I/O points, this device contains multiple other devices for I/O handling:

Open – Open Limit Switch feedback (Discrete Input)

Closed – Closed Limit Switch feedback (Discrete Input)

Remote – Remote/Local Switch feedback (Discrete Input)

Posn – Position feedback (Analog Input)

PosnCmd – Position command (Analog Output)

Open, Closed, and Remote feedback may be disabled to match the physical I/O layout of the valve. If the I/O point does not physically exist, the value will be simulated based on the state of the valve.

6.4.1 Page Graphic

The page graphic provides the object’s tag name and navigation to the faceplate, as well as general status indicators for command, feedback, local/auto/manual, out-of-service, and interlock statuses.

6.4.1.1 Position Indications

The position can be displayed as Text, Meter, or Both.

Text

This mode displays the position feedback as text.

Text preferred as standard

John Venner West Basin Municipal Water District Prefer use of "Open", "Local" etc. instead of letters - open to discussion if it makes graphics too crowded

Use lock symbol for interlock - 4.3.4 www.WestBasinCA.Gov Page Number: 35 of 119

Meter

This mode displays the position feedback and commands on a graph. The feedback is shown as a triangle and the command is a vertical line.

Both

This mode displays the meter, the position feedback, and position command. The position feedback is bolded on the left while the command is gray with paranthesis around it.

6.4.2 Faceplate Graphic - Main Content

The main content box contains the command and feedback values, as well as general displays for the overall status and alarm state of the device. A button is available to reset all latching alarms active on the valve.

6.4.2.1 Alarm Reset Request

Default Security Level: Operator

Disable Condition: No latching alarms active

Visibility Condition: Unexpected Open, Unexpected Close, Failed to Open, or Failed to Close alarms are active

Behavior: Trigger

This command resets all latched alarms associated with the device. That this will not reset any alarms whose conditions are still active. The alarm must be resolved before it can be reset.

www.WestBasinCA.Gov Page Number: 36 of 119

6.4.3 Faceplate Graphic - Status Tab

The status tab contains the position command output, position feedback input, open limit switch input, closed limit switch input, and remote input device graphics, as well as the statuses for control mode, interlock, and out-of-service.

6.4.4 Faceplate Graphic - Alarms Tab

The alarms tab contains the alarm displays for external warning, external fault, failed to open, failed to close, unexpected open, unexpected close, and position deviation alarms.

Screenshot will be updated after config is done www.WestBasinCA.Gov Page Number: 37 of 119

6.4.4.1 External Warning

Category: Process

This alarm is active when an external warning indication for the valve is active.

6.4.4.2 External Fault

Default Priority: Priority 2

This alarm is active when an external fault indication for the valve is active.

6.4.4.3 Failed to Open Alarm

This alarm is active when all of the following conditions are met for longer than Fail to Move Time:

1. The valve is in Remote mode

2. The valve is not Out-of-Service

3. Any of the following conditions are met:

A. All of the following conditions are met:

1. The valve was previously confirmed as closed

2. The valve is commanded to a value greater than closed limit switch tolerance (> 0.0%)

3. The valve is still receiving closed feedback

B. All of the following conditions are met:

1. The valve was not previously confirmed as open

2. The valve is commanded fully open (100.0%)

3. The valve has not received open feedback www.WestBasinCA.Gov Page Number: 38 of 119

6.4.4.4 Failed to Close Alarm

This alarm is active when all of the following conditions are met for longer than Fail to Move Time:

2. The valve is not Out-of-Service

3. Any of the following conditions are met:

A. All of the following conditions are met:

1. The valve was not previously confirmed as closed

2. The valve is commanded fully closed (0.0%)

3. The valve has not received open feedback

B. All of the following conditions are met:

1. The valve was previously confirmed as open

2. The valve is commanded to a value less than open limit switch tolerance (< 100.0%)

3. The valve is still receiving open feedback www.WestBasinCA.Gov Page Number: 39 of 119

6.4.4.5 Unexpected Open Alarm

This alarm is active when all of the following conditions are met for longer than the Unexpected Move Time:

1. The valve is in Remote mode

2. The valve is not Out-of-Service

3. Any of the following conditions are met:

A. All of the following conditions are met:

1. The valve was previously confirmed as closed

2. The valve is commanded fully closed (0.0%)

3. The valve loses closed feedback

B. All of the following conditions are met:

1. The valve was not previously confirmed as open

2. The valve is commanded to a value less than open limit switch tolerance (< 100.0%)

3. The valve receives open feedback www.WestBasinCA.Gov Page Number: 40 of 119

6.4.4.6 Unexpected Close Alarm

This alarm is active when all of the following conditions are met for longer than the Unexpected Move

1. The valve is in Remote mode

2. The valve is not Out-of-Service

3. Any of the following conditions are met:

A. All of the following conditions are met:

1. The valve was previously confirmed as open

2. The valve is commanded fully open (100.0%)

3. The valve loses open feedback

B. All of the following conditions are met:

1. The valve was not previously confirmed as closed

2. The valve is commanded to a value greater than closed limit switch tolerance (> 0.0%)

3. The valve receives closed feedback www.WestBasinCA.Gov Page Number: 41 of 119

6.4.4.7 Position Deviation Alarm

This alarm is active when all of the following conditions are met for longer than Position Alarm Delay:

2. The valve is not Out-of-Service

3. The position feedback has deviated from the position command by more than Position Deviation Setpoint

6.4.5 Faceplate Graphic - SPs Tab

The setpoints tab contains the unexpected move delay, failed to move delay, position deviation, and position deviation delay setpoints.

6.4.5.1 Unexpected Move Alarm Delay

Disable Condition: None

Visibility Condition: Always visible

Minimum Input: 0.0 sec

Maximum Input: 3600.0 sec

I like these but we need to discuss which of these (if any) would cause control loops to stop. Is it just a certain level of alarm? Or is it any deviation? etc.

www.WestBasinCA.Gov Page Number: 42 of 119

6.4.5.2 Failed to Move Alarm Delay

Disable Condition: None

Visibility Condition: Always visible

Minimum Input: 0.0 sec

Maximum Input: 3600.0 sec

6.4.5.3 Position Deviation Setpoint

Default Security Level: Supervisor

Disable Condition: None

Visibility Condition: Always visible

Minimum Input: 0.0 %

Maximum Input: 100.0 %

6.4.5.4 Position Alarm Delay

Default Security Level: Supervisor

Disable Condition: None

Visibility Condition: Always visible www.WestBasinCA.Gov Page Number: 43 of 119

6.4.6 Faceplate Graphic - Control Tab

The Control tab allows a user to change the control mode of the device between automatic and manual, as well as to set the manual position command of the device, set or clear the out-of-service status, and set the out-of-service position.

6.4.6.1 PCS Auto Mode Request

Disable Condition: Local Mode or Auto mode or Out-of-service is active

When placing this device in PCS Auto (see section 2), the equipment commands may immediately change without further Operator input. This may cause equipment to move unexpectedly.

6.4.6.2 PCS Manual Mode Request

Default Security Level: Operator

Disable Condition: Local Mode or Manual mode or Out-of-service is active

When placing this device in PCS Manual (see section 2), automatic logic for this device will fail to function properly. This may include safety and process responses. Placing a device in PCS Manual may also result in a loss of permissives for certain actions and states.

www.WestBasinCA.Gov Page Number: 44 of 119

6.4.6.3 PCS Manual Position Command

Disable Condition: Local Mode or Auto mode or Out-of-service or Interlock is active

Visibility Condition: Always visible

Minimum Input: 0.0 %

Maximum Input: 100.0 %

6.4.6.4 Out-of-Service

Default Security Level: Operator

Disable Condition: None

When “Out-of-Service” is first set, the name of the user who enabled “Out-of-Service” and the current

While “Out-of-Service” is active, all alarms associated with the device are inhibited.

6.4.6.5 Out-of-Service Position

Default Security Level: Operator

Disable Condition: None

Visibility Condition: Always visible

Minimum Input: 0.0 %

Maximum Input: 100.0 %

6.4.6.6 Simulate Position

Default Security Level: Engineer

Disable Condition: None

When this is active, the position feedback will be simulated. This allows the device to continue to operate if the feedback is broken without generating related alarms. This doesn’t suppress the analog input alarms for the position feedback.

This should be consistent with the other OOS - set to Supervisor

John Venner West Basin Municipal Water District This should be consistent with the other OOS - set to Supervisor

This should be consistent with the other Override functions - set to Supervisor www.WestBasinCA.Gov Page Number: 45 of 119

6.4.6.7 Simulate Open

Disable Condition: None

When this is active, the open limit switch will be simulated. This allows the device to continue to operate if the limit switch is broken without generating related alarms. This doesn’t suppress the digital input alarms for the open limit switch.

6.4.6.8 Simulate Closed

Default Security Level: Engineer

Disable Condition: None

When this is active, the closed limit switch will be simulated. This allows the device to continue to operate if the limit switch is broken without generating related alarms. This doesn’t suppress the digital input alarms for the closed limit switch.

This should be consistent with the other Override functions - set to Supervisor

John Venner West Basin Municipal Water District This should be consistent with the other Override functions - set to Supervisor

How is "Simulate" different to "Override"?

www.WestBasinCA.Gov Page Number: 46 of 119

6.5 Clock Sync

The clock sync device is responsible updating the internal PLC clock to the correct time. The device will automatically synchronize the PLC clock to HMI at a specified time each day, but it also allows the user to manually sync clocks if necessary.

This device is not designed for precision timekeeping or synchronization. With communication delays between PLC and HMI, this device is intended to keep all PLCs within a few seconds of each other to ensure that there is no significant drift in time-triggered events (e.g. daily resets). If millisecond precision is required, other solutions should be considered.

6.5.1 Page Graphic

The page graphic includes a navigation link to open the device’s faceplate, as well as an optional descriptor text.

6.5.2 Faceplate Graphic

The faceplate shows the HMI and PLC clock times. The Synchronize button can be used to synchronize the times.

6.5.2.1 Synchronize

Disable Condition: None

This command triggers the PLC time to update to the current local time of the HMI system. Due to input lag and communication delays, the PLC clock time may remain out-of-sync with the HMI time by up to several seconds. Small discrepancies should not cause any system issues.

In addition to this manual command, there is an automatic script in the device standard that will re-synchronize the PLCs once every 24 hours. This script does not require any user input to function.

www.WestBasinCA.Gov Page Number: 47 of 119

6.6 Chemical Pacing

The chemical pacing controller device outputs open and closed loop calculations. For the open loop output, the device will calculate the pumps required flow to meet the dose setpoint. For the closed loop output, the device will calculate the required flow rate required to meet the dose setpoint that can then be used with a controller block such as the PID controller.

This block also has the ability to trim the calculation based on an analyzer value. This option allows the PLC to fine-tune the pacing based on feedback values.

6.6.1 Page Graphic

The page graphic contains the speed command, calculated flow, trim value, and trim enabled status for the chemical pacing controller.

6.6.2 Faceplate Graphic – Main Content

The main content box contains the trim enabled status, speed output, effective dose, trim value, and analyzer value for the chemical pacing controller.

www.WestBasinCA.Gov Page Number: 48 of 119

6.6.3 Faceplate Graphic - Trend Tab

The trend tab contains a trend of the dose setpoint, effective dose, analyzer value, and trim value, as well as the status of the out-of-service and override states.

6.6.4 Faceplate Graphic – Dosing Tab

The dosing tab contains all setpoints related to the calculation of the flow command done by the chemical pacing controller.

6.6.4.1 Dose

Disable Condition: None

Visibility Condition: Always visible

Minimum Input: 0.0 mg/L

Maximum Input: 5.0 mg/L

This setpoint defines the target dose for the chemical pacing calculation.

www.WestBasinCA.Gov Page Number: 49 of 119

6.6.4.2 Background Concentration

Disable Condition: None

Visibility Condition: Always visible

This setpoint defines the concentration of the background chemical present in the pacing flow. If background is not being used, set this setpoint to 0 to effectively disable it within the calculation.

6.6.4.3 Demand

Default Security Level: Operator

Disable Condition: None

Visibility Condition: Always visible

This setpoint defines the concentration of the background chemical present in the pacing flow. If demand is not being used, set this setpoint to 0 to effectively disable it within the calculation.

6.6.4.4 Concentration

Default Security Level: Operator

Disable Condition: None

Visibility Condition: Always visible

Minimum Input: 0.0 %

Maximum Input: 100.0 %

This setpoint defines the concentration of the chemical being used for dosing.

www.WestBasinCA.Gov Page Number: 50 of 119

6.6.4.5 Specific Gravity

Disable Condition: None

Visibility Condition: Always visible

Minimum Input: 0.0

Maximum Input: 2.0

This setpoint defines the specific gravity of the chemical being used for dosing.

6.6.5 Faceplate Graphic – Trim Tab

The Trim tab is only present for chemical pacing controllers that are configured with trim capabilities.

The tab contains all the setpoints associated with the trim calculation done by the chemical pacing controller.

6.6.5.1 Trim Enable On Request

Disable Condition: None

Visibility Condition: Trim Enabled is not active

This command enables the trim calculation in the chemical pacing controller.

www.WestBasinCA.Gov Page Number: 51 of 119

6.6.5.2 Trim Enable Off Request

Disable Condition: None

Visibility Condition: Trim Enabled is active

This command disables the trim calculation in the chemical pacing controller.

6.6.5.3 Trim SP

Default Security Level: Operator

Disable Condition: None

Visibility Condition: Always visible

Maximum Input: 100.0 E.U.

This setpoint defines the target concentration measured by the analyzer for the trim calculation. This setpoint is separate from the Dose setpoint to allow for use of an analyzer measuring concentration in units other than mg/L.

6.6.5.4 Trim Bump

Default Security Level: Operator

Disable Condition: None

Visibility Condition: Always visible

Minimum Input: 0.0 ppm

Maximum Input: 0.5 ppm

This setpoint defines the trim bump value for the trim calculation.

www.WestBasinCA.Gov Page Number: 52 of 119

6.6.5.5 Maximum Trim

Disable Condition: None

Visibility Condition: Always visible

Minimum Input: 0.0 ppm

Maximum Input: 2.00 ppm

This setpoint defines the maximum trim value for the trim calculation.

6.6.5.6 Trim Deadband

Default Security Level: Operator

Disable Condition: None

Visibility Condition: Always visible

Maximum Input: 100.0 E.U.

This setpoint defines the trim deadband for the trim calculation.

6.6.5.7 Trim Bump Delay

Default Security Level: Operator

Disable Condition: None

Visibility Condition: Always visible

Minimum Input: 0.0 mins

Maximum Input: 10.0 mins

This setpoint defines the trim bump delay for the trim calculation.

www.WestBasinCA.Gov Page Number: 53 of 119

6.7 Conditions

The conditions device is responsible for monitoring interlock and permissive conditions. Bypassing conditions can be optionally disabled or enabled. While enabled, each condition can be individually bypassed.

6.7.1 Page Graphic

The page graphic contains the status of whether the conditions are met or not met.

6.7.2 Faceplate Graphic

The faceplate shows each condition’s description as well as its status. The Bypass Enable/Disable button can be used to toggle if bypasses for conditions are enabled or not. The Bypass button for each condition can be used to bypass the respective condition.

Screenshots to be added during configuration

Provide examples www.WestBasinCA.Gov Page Number: 54 of 119

6.8 Digital Module

The digital module device is responsible for monitoring the health of each channel in a digital module and its communication with HMI. When configured, this device will report the status of channel faults and values of discrete tags within the PLC. The device will also monitor module status to determine if the module communication has failed.

6.8.1 Page Graphic

The page graphic contains the channel labels and values in the digital input/output module. Each channel is also highlighted red when the fault alarm on it is active. The wizard options in the digital module object allow configuration for the number of total channels in the module as well.

The top banner contains the digital module name in the PLC as well as the module caption (Digital Input/Output). This banner highlights red when there is an active module fault.

www.WestBasinCA.Gov Page Number: 55 of 119

6.9 Discrete Input

The discrete input device is responsible for monitoring discrete feedback from the process. It will report both the input value and the fault status of the discrete transmitter.

This device can optionally be configured with an alarm that will trigger when the input is active. When the alarm is configured, the device may be placed in Out-of-Service. When OOS is active, the alarm is suppressed regardless of the input.

6.9.1 Page Graphic

The page graphic has distinct text and styles to display whether the input is active or inactive, and it includes a navigation link to open the device’s faceplate.

6.9.2 Faceplate Graphic - Main Content

The main content box contains the input and status. If alarms can be reset, a reset button will also be available.

6.9.3 Faceplate Graphic - Alarms Tab

The alarms tab contains the alarm statuses.