If any Rolls-Royce product design related features which could create risks to persons,
the product and/or its components are identified, Rolls-Royce should be contacted
immediately.
It is the user's responsibility to make all relevant hazard identifications and risk
assessments of all the activities associated with the use of this document.
It is the user's responsibility to design and implement safe systems of work and to supply
safe equipment (including, without limitation, safety equipment) and training
(including, without limitation, health and safety training) to anyone using this document
to work on products to which it relates.
A user without relevant experience of working in accordance with this document, or
with products to which it relates, should seek appropriate advice to identify the health
and safety controls and precautions that need to be taken while working.
Technical assistance can be sought from Rolls-Royce and will be subject to RollsRoyce's terms and conditions.
3 Safety Instructions
This Rolls-Royce system is a remote control system that is controlling propulsion units
on the vessel. By operating the system, the thrusts direction and pitch/speed
performance can be controlled.
The operator must at all times be aware of:
• Consequences of operating the system to prevent injury to people, damage of
equipment, damage to the vessel operated and damage to the surroundings.
3.1 Safety Functions
A number of safety functions are included in the system. These functions will become
operative if a failure should occur in the propeller control system itself, or in external
systems connected to the propeller control system.
Note: The backup control system has only interface to the control levers. The
backup control system does not have interface to external control
systems like Dynpos, Joystick or Autopilot
Note: No azimuth restrictions or load control functions are included in the
backup system. When operating using the backup system, the operator
must be careful not to overload the engine or the propeller system. If a
load control system is included in the Rpm Drive, this will still be in
operation.
Note: The safety functions described underneath will only be available if the
thruster(s)/gear(s) have got the described function in the first place.
3.1.1 Pitch Control
The pitch control is one of the redundant functions in the control system. The backup
control system will automatically be engaged if a serious failure occurs in the normal
control system. This includes loss of power supply to the normal control system, halt in
the normal control cpu, failure on the normal control order potentiometer in the lever on
the manoeuvre station currently in command, failure on the normal control field bus and
failure on the normal control feedback potentiometer. Alarm will be given in the control
system and in the ship's alarm system.
3.1.2 RPM Control Electric Engine
The RPM control is a redundant function in the control system. The backup control
system will automatically be engaged if a serious failure occurs in the normal control
system. This includes loss of power supply to the normal control system, halt in the
normal control cpu, failure on the normal control order potentiometer in the lever on the
manoeuvre station currently in command and failure on the normal control field bus.
Alarm will be given in the control system and in the ship's alarm system.
3.1.3 Azimuth Control
The azimuth control is a redundant function in the control system. The backup control
system will automatically be engaged if a serious failure occurs in the normal control
system. This includes loss of power supply to the normal control system, halt in the
normal control cpu, failure on the normal control order potentiometer in the lever on the
manoeuvre station currently in command, failure on the normal control field bus and
failure on the normal control feedback potentiometer. Alarm will be given in the control
system and in the ship's alarm system.
3.1.4 Dynpos and Joystick
If operating using an external Dynpos or Joystick system and a failure occurs either on
the pitch order, the rpm order or the azimuth order signal from the external system, the
external system is disengaged and the propeller responds to the control lever order on
the manoeuvre station in command. Alarm will be given in the control system and in the
ship's alarm system.
3.1.5 Autopilot
If operating using an external autopilot system and the azimuth lever order on the
manoeuvre station in command is changed more than the adjustable limit, normally 20
degrees, the autopilot is disengaged and the thruster will respond to the control lever.
This is indicated by blinking the Autopilot button, and the buzzer will sound until the
Autopilot button is pressed to acknowledge the mode change back to lever control.
Safety Messages
Safety messages in this manual are always accompanied by a safety alert symbol and a