Overview: TI545 I/O Subsystem and Base Operations
The TI545 controller belongs to the TI Series 505 programmable logic controller (PLC) family, originally designed and manufactured by Texas Instruments' Industrial Controls division in the late 1980s and early 1990s. After the 1994 transfer of the Series 505 product line to Siemens Industry, the TI545 continued in production as the Siemens 545 (S545) with backward-compatible hardware, programming tools, and I/O. Despite its mature age, thousands of TI545 controllers remain in service in utility substation RTUs, water and wastewater SCADA systems, conveyor lines, paper mills, and machine tools where migration cost outweighs the operational benefit of replacement.
One of the most common commissioning and troubleshooting operations on a TI545 is the Read Base and Write Base command pair in TISOFT programming software. Engineers new to the platform frequently encounter the "I/O module fault" and "IO data table does not match PLC" errors after a firmware swap, program reload, or retrofit where I/O cards were physically added or removed. Understanding the relationship between the physical I/O rack configuration and the controller's internal I/O data table is essential for resolving these faults without replacing hardware.
TI545 I/O Architecture: Bases, Slots, and Words
The TI545 supports a deterministic, word-addressed I/O model. Every I/O point in the system is mapped to a 16-bit word in the controller's I/O data table, with each word corresponding to 16 discrete points or to a single analog channel value (12-bit plus sign in the standard analog modules).
Base (Rack) Definition
A "base" is the physical chassis that holds the CPU, power supply, and I/O modules. The TI545 supports multiple bases connected via an I/O local expansion or remote I/O chain:
- Local base — The rack containing the CPU (model designations include the 545-1101, 545-1102, and 545-1103 CPUs with varying memory and instruction-set capabilities).
- Remote bases — Connected through a Remote I/O (RIO) Scanner module in the local base and a corresponding RIO Adapter in the remote base, typically over twinaxial or fiber cable at the platform's RIO bit rate.
- Expansion bases — Locally expanded using an Expansion Receiver/Transmitter pair, sharing the CPU backplane but in a separate chassis.
I/O Addressing Convention
| Address Prefix | Function | Width |
|---|---|---|
| X | Discrete input | 1 word = 16 points |
| Y | Discrete output | 1 word = 16 points |
| WX | Word input (analog, HSC) | 1 word = 16 bits |
| WY | Word output (analog) | 1 word = 16 bits |
| C | Control relays (internal) | 1 word = 16 points |
| STW | Status word | 1 word |
| V-Memory | Variable memory (registers) | 16-bit words |
The TISOFT software's I/O Configuration utility stores, for each base, the slot count, slot type, and address range allocated. This stored map is what the CPU compares against the actual hardware on power-up and on each I/O scan.
Read Base and Write Base: Command Semantics
The Read Base and Write Base commands are issued from TISOFT (or WinTISOFT for Windows) under the I/O Configuration menu. They interact with the TI545's non-volatile base image stored in EEPROM or battery-backed RAM depending on the CPU variant. The platform convention treats the base image as a separate artifact from the application program; both must agree for the controller to enter Run mode without an I/O fault.
Write Base (Configuration-to-Program direction, to CPU)
Write Base pushes the I/O configuration currently in the offline program into the PLC's online configuration memory. The operation writes the slot-by-slot module map (module type, slot position, addressing) into the controller. Use Write Base whenever:
- You have just edited the I/O configuration offline and want the PLC to recognize the new map.
- You have added a new I/O module to an existing base.
- You have replaced a faulty module with one of a different catalog number.
Read Base (Hardware-to-Program direction, from CPU)
Read Base performs the inverse operation: it interrogates the I/O backplane to read what is actually physically present and pulls the discovered configuration into the offline program. Use Read Base whenever:
- You suspect the offline program does not match the installed hardware — the symptom in the field report.
- You are commissioning a machine with unknown field wiring.
- You are documenting an existing system for backup before any change.
Conceptual Workflow
+--------+ Write Base +---------+ Read Base +--------+
| Offline| -----------> | TI545 | -----------> | Offline|
| Prog | | CPU | | Prog |
| Map | <----------- | Memory | <----------- | Map |
+--------+ Read Base +---------+ Write Base +--------+
(from PLC) (from disk)
Problem Details: I/O Module Fault and Data Table Mismatch
The scenario presented involves a retrofitted machine with new servos and a freshly downloaded program. The reported symptoms are:
- "I/O module fault" — A fault LED or fault bit indicating the CPU has detected a discrepancy between expected and actual I/O hardware.
- "IO data table does not match PLC" — The internal I/O data table address ranges do not align with the slot map the CPU holds.
- Persists even after reloading the original (pre-retrofit) program.
Symptom (3) is the most diagnostic: if the fault survives both the new program and the old program, the root cause is in the hardware/configuration layer, not in application logic. The PLC's I/O backplane state is independent of which application program is currently in CPU memory. A program reload alone cannot clear a backplane mismatch; only a fresh Write Base followed by a cold start will reconcile the two.
Root Cause Analysis
Three root causes account for the overwhelming majority of "I/O module fault / IO data table does not match PLC" reports on TI545 platforms. Each has a distinct diagnostic signature.
Cause 1: Base Configuration Was Never Written After Hardware Change
Adding a high-speed counter, servo interface module, or analog card to an existing base expands the address map. If the program was simply downloaded without a follow-up Write Base, the CPU retains the old slot map and reports a mismatch the moment it scans the backplane. This is the single most common cause after a servo retrofit.
Cause 2: Read Base Pulled Slots Without Reassigning Addresses
Executing Read Base after a hardware swap can leave the ladder logic referencing slot addresses that no longer exist. The CPU then flags the data table mismatch during the I/O scan. This is the exact failure mode described in the field report: the engineer observed Read Base, lost the original address map, and now the program no longer aligns with the rack.
Cause 3: Module Catalog Number Substitution
If a replacement module has a different catalog number than the original (for example, swapping a 24 VDC input module for an equivalent 110 VAC input module of the same family), the CPU's base image no longer matches the slot identifier returned by the backplane. The backplane only knows the module's identity reply, not its electrical compatibility.
| Cause | Trigger | Diagnostic |
|---|---|---|
| Unwritten config | Hardware added or removed | Fault LED on; Read Base shows new module; Write Base not yet executed |
| Address drift | Read Base done in TISOFT | Ladder references X/Y words that don't appear in I/O Map |
| Catalog mismatch | Replacement with different type | Slot returns "unknown module" or "wrong module type" |
Step-by-Step Resolution Procedure
The following procedure resolves the majority of field-reported TI545 I/O module faults. Allow 30 to 60 minutes for a typical retrofit with one or two bases.
Prerequisites
- TISOFT (DOS) or WinTISOFT (Windows) programming software installed on the engineering workstation.
- Serial programming cable (USB-to-RS-232 adapter accepted on newer laptops) wired to the CPU's programming port.
- Ethernet connection if the PLC is equipped with an EBC (Ethernet Base Controller) module.
- Verified backup copy of the existing program on portable media before making any change.
-
Backup the offline program. From TISOFT, select
File > Backupor useSAVE PROGfrom the Program menu. Confirm the backup file size matches a known-good reference before continuing. -
Connect to the PLC. Establish serial or Ethernet communication via
Setup > Communications. Use the documented NCP protocol parameters (typically 19200 baud, 8 data bits, even parity, 1 stop bit). Confirm against the TISOFT user guide for your specific software revision. -
Go online. Use
Alt-GorProgram > Online. Verify the PLC reports its catalog number, firmware revision, and program name on the connection banner. -
Read Base. From the I/O Configuration menu, select
Read Base. TISOFT will scan each base and read the actual slot map. Note which modules are returned and compare against the offline program. - Reassign addresses. For each module that Read Base changed, manually reassign the slot's start address to match what the application logic expects. Document every change in the project notebook.
-
Compile the program. Use
Compile ProgramorF9. Resolve any "undefined symbol" errors caused by the read operation. -
Write Base. Push the corrected configuration to the PLC:
I/O Configuration > Write Base. The CPU will acknowledge with a confirmation message. -
Download the corrected program. Use
Program > Downloadwith the corrected offline program. - Cycle power. Power down the CPU base for 10 seconds and power up. A cold start forces the CPU to re-scan the backplane and reconcile with the freshly written base image.
-
Verify fault cleared. Check the CPU's fault LED, the fault word in the status table (commonly STW 1 or STW 2 depending on CPU variant), and any
FALTinstruction diagnostic output.
Hardware Verification Procedure
Before declaring the configuration mismatch resolved, perform the following hardware checks to rule out physical faults that masquerade as configuration errors.
| Step | Action | Pass Criterion |
|---|---|---|
| 1. Seating | Power down, remove and reseat each I/O module in the suspect base. | Modules lock positively in backplane connector. |
| 2. Backplane voltage | With PLC powered, measure +5 VDC and ±15 VDC at the backplane test points (where available). | +5.00 VDC ±2%, ±15 VDC ±5%. |
| 3. Power supply load | Calculate sum of module current draws versus PSU rating. | Total load ≤ 80% of PSU rated current. |
| 4. Module swap test | Swap a suspect module with a known-good module of the same catalog. | Fault follows the module. |
| 5. Cable integrity | For remote bases, inspect twinaxial/fiber RIO cable continuity and shield grounding. | Continuity end-to-end; shield grounded at one end only. |
| 6. Base addressing DIP | Verify each base's DIP switches match its configured base number. | DIP setting equals configured base number. |
Programmatic Verification with TISOFT
After the configuration is corrected, use the following TISOFT commands to verify the runtime state:
-
AUDIT— Reports undefined coil references and address gaps. -
SEARCH X/SEARCH Y— Lists every discrete reference for cross-checking. -
IOCONFIG PRINT— Dumps the active base image to a file for archival. -
TRACE— A real-time logic trace that captures I/O transitions for 1024 scan cycles.
For servo retrofits specifically, also verify:
- The high-speed counter (HSC) module's input word reflects encoder pulses within ±1 count.
- The servo command word updates every scan (use
TRACE WYon the servo command address). - The servo fault input is wired to a discrete input mapped to a defined address.
Servo Retrofit-Specific Considerations
When retrofitting a machine with new servos, several TI545-specific issues commonly cause I/O faults during commissioning.
Encoder Input Resolution
Modern servo drives may use 17-bit or higher encoders that require HSC modules with high count rates. The TI545 HSC module line includes 100 kHz and 500 kHz variants; if the encoder input is multiplexed into a standard discrete input, the I/O scan will miss pulses and the data table will appear inconsistent.
Servo Drive Communication vs. Hardwired I/O
If the servo drives use a fieldbus (EtherCAT, Profinet, or analog ±10 V command), the analog/word output module must be sized correctly. A 12-bit analog output module has 4096 counts full scale; a 16-bit module has 65536 counts. Mismatched resolution causes position commands to quantize incorrectly and may surface as a data table mismatch on the first scan.
Linking TI545 to a GE RTU via DNP 3.0
The field report also asks about connecting a TI545 to a GE RTU (e.g., a GE Universal Relay or GE Fanuc D25 DNP 3.0 master) using Protocol Config Pro v4. This configuration is common in utility substations where the TI545 acts as an IED and the GE RTU as the master.
Required Hardware
- CCM2 communications module installed in the TI545 local base. The CCM2 supports both Modbus RTU and DNP 3.0 slave protocols selectable by the firmware switch.
- RS-485 multi-drop trunk between the CCM2 port and the GE RTU serial port. Termination: 120 ohm at each end of the trunk.
- Configuration cable to program the CCM2 via WinTISOFT or the legacy CCM Configuration Utility.
Protocol Configuration with Protocol Config Pro v4
- Launch Protocol Config Pro v4 and connect to the CCM2.
- Select protocol: DNP 3.0 slave.
- Configure the DNP link layer: baud rate, data bits, parity, stop bits, and link confirm timeout (typical values for utility RTU applications are 9600 baud, 8/N/1, 2000 ms confirm timeout).
- Configure the DNP application layer:
- Master address: 1 (matches GE RTU default)
- Slave address: 4 (TI545 default; configurable 0–65519)
- Object 1 (binary input) — Map from TI545 X/C words
- Object 10 (binary output) — Map to TI545 Y/C words
- Object 30 (analog input) — Map from WX words (scaled to 16-bit signed integer)
- Object 40 (analog output) — Map to WY words
- Save the configuration to the CCM2's non-volatile memory and cycle power.
- Verify the GE RTU polls the TI545 successfully using the RTU's DNP diagnostics screen. Class 0 (static), Class 1 (event), and Class 2 (event) reads should all return without error.
DNP Data Scaling
DNP 3.0 analog objects are 16-bit signed integers scaled to the engineering range. For a 4–20 mA input scaled to 0–100 °C:
DNP_value = (process_units - EU_low) * (DNP_high - DNP_low) / (EU_high - EU_low) + DNP_low
= (process_units - 0) * (32767 - -32768) / (100 - 0) + (-32768)
= process_units * 65535 / 100 - 32768
Configure this scaling identically on the GE RTU master side, or the displayed values will not match the field instrument. Inconsistent scaling can also surface as a master-side data integrity alarm rather than a TI545 fault, complicating diagnosis.
Indicator LED Diagnostics
| LED | Color | State Meaning | Action |
|---|---|---|---|
| RUN | Green | CPU executing logic | None; normal operation. |
| FAULT | Red | Fatal fault, CPU halted | Read fault word; investigate cause. |
| I/O | Red | I/O module fault or base mismatch | Execute Read Base; reconcile addresses. |
| BATT | Red | Battery low — RAM memory at risk | Replace lithium battery within 30 days. |
| FORCE | Yellow | Forces enabled in online program | Remove forces before commissioning handover. |
| COMM | Green/Yellow | Port activity | Flickering = normal traffic. |
Cold Start vs. Warm Start
The TI545 distinguishes between cold and warm start behavior. After a Write Base, a cold start is required to force the I/O scan to reread the backplane image from non-volatile storage. A warm start (operator-initiated or scan-recovery restart) does not reload the base image; it only reinitializes volatile memory. If the Write Base is followed only by a warm start, the fault can persist until power is cycled.
| Start Type | Reloads Program? | Reloads Base Image? | Use Case |
|---|---|---|---|
| Cold start | Yes (from EEPROM) | Yes | After Write Base, firmware update, or first commissioning. |
| Warm start | No | No | Scan-recovery from a transient fault. |
| Restart | Yes (from RAM) | No | Resume after operator-initiated stop. |
ESD and Handling Precautions
TI545 I/O modules contain CMOS devices sensitive to electrostatic discharge. Standard ESD handling protocol applies:
- Wear a wrist strap bonded to the chassis ground stud when handling modules.
- Transport modules in anti-static bags; do not stack modules on a bench.
- Do not insert or remove modules with power applied unless the module is hot-swap-rated.
- Store spare modules at 15 to 30 °C with < 80% non-condensing humidity.
Common I/O Module Reference
The following categories are typical of TI Series 505 / Siemens 505 module families. Always confirm specific catalog numbers and slot widths against the current Siemens Industry spare parts database before ordering.
| Module Category | Function | Slot Width |
|---|---|---|
| Discrete input, 24 VDC sink, 16 pt | Field inputs from sensors | 1 slot |
| Discrete input, 110 VAC, 8 pt | Field inputs from line-voltage devices | 1 slot |
| Discrete output, relay, 8 pt | Dry contact outputs | 1 slot |
| Discrete output, 24 VDC source, 16 pt | Low-side DC loads | 1 slot |
| Discrete output, triac, 8 pt | AC loads | 1 slot |
| Analog input, 8 ch, ±10 V / 4–20 mA, 12-bit | Process variable acquisition | 1 slot |
| Analog output, 4 ch, ±10 V / 4–20 mA, 12-bit | Process variable drive | 1 slot |
| High-speed counter, 100 kHz | Encoder feedback | 1 slot |
| High-speed counter, 500 kHz | High-resolution encoder feedback | 1 slot |
| CCM2 communications module | Modbus / DNP 3.0 serial | 1 slot |
Long-Term Migration Considerations
The TI545 has been out of active production for many years. Migration paths include:
- Siemens SIMATIC S7-1200 / S7-1500 with the TI545-to-S7 conversion guide. Siemens offers program conversion tools and SIMATIC migration services for legacy TI505.
- Direct bridge replacement using a SoftPLC or third-party rack-compatible CPU that emulates the TI545 backplane while running modern control software.
For utility RTU applications with DNP 3.0, the Siemens SICAM RTU or SEL RTAC platform offers a modern replacement with native DNP 3.0 and IEC 61850 support.
Field Commissioning Checklist
| Item | Action | Acceptance |
|---|---|---|
| 1 | Verify all base addresses match DIP switch settings. | DIP = Base# |
| 2 | Read Base in TISOFT; verify all expected modules appear. | Module list matches field inventory. |
| 3 | Write Base to PLC after any change. | CPU acknowledges without error. |
| 4 | Compile and download program. | No undefined symbols. |
| 5 | Cycle power for cold start. | No fault LED after I/O scan. |
| 6 | Verify fault words STW 1 and STW 2 are clear. | All status bits = 0. |
| 7 | Test each I/O point end-to-end. | Forcing input reflects in output. |
| 8 | Document base configuration with IOCONFIG PRINT output. | Printout filed with program backup. |
| 9 | Save final program to removable media. | Two copies in geographically separate locations. |
| 10 | For DNP 3.0: verify master/slave poll success. | RTU diagnostic shows successful polls. |
Troubleshooting Matrix
| Symptom | First Check | Second Check | Resolution |
|---|---|---|---|
| FAULT LED steady, I/O LED steady | Base address mismatch | DIP switch on remote base | Read Base, correct DIP, Write Base, cold start. |
| FAULT LED blinking | Watchdog timeout | Scan time exceeded | Reduce scan load; investigate HSC overflow. |
| BATT LED on | Battery voltage | Battery age | Replace lithium battery; verify program retention. |
| Single module not responding | Module seating | Module swap test | Reseat or replace module; verify catalog number. |
| Whole base not visible | RIO/Expansion cable | Adapter module status | Inspect cable continuity; replace adapter if faulty. |
| Analog readings noisy | Shield grounding | Module calibration | Ground shield at PLC end only; recalibrate analog module. |
| DNP master reports comm loss | RS-485 termination | CCM2 protocol configuration | Verify 120 ohm terminators; reload CCM2 config. |
FAQ
What is the difference between Read Base and Write Base on a TI545?
Read Base copies the actual I/O configuration from the physical racks into the offline program; Write Base copies the offline program I/O configuration into the PLC's online configuration memory. Use Read Base to discover what is installed; use Write Base to make the PLC recognize a configuration change.
Why does "IO data table does not match PLC" persist after reloading the program?
The fault is in the I/O base image stored in CPU non-volatile memory, not in the application program. A program reload does not overwrite the base image. Issue I/O Configuration > Write Base in TISOFT after any I/O hardware change, then perform a cold start.
Can I edit the I/O configuration directly in EEPROM to avoid Read and Write Base?
No. Always use Read Base and Write Base through TISOFT. Direct EEPROM editing risks corrupting the CPU firmware loader and voids any remaining manufacturer support.
What module do I need to add DNP 3.0 slave communication to a TI545?
Install a CCM2 communications module in the local base and configure it with Protocol Config Pro v4 or the equivalent TISOFT CCM utility. The CCM2 supports both Modbus RTU and DNP 3.0 slave firmware selectable by configuration.
Is the TI545 still supported by a manufacturer?
The TI Series 505 line was transferred from Texas Instruments Industrial Controls to Siemens Industry in 1994. Hardware spare parts and legacy documentation are handled today through Siemens Industry Online Support. Active firmware development has been discontinued; consider migration to a current SIMATIC platform for new installations.