Bently Nevada 3500 Machinery Protection System: Complete Guide

TL;DR: The Bently Nevada 3500 is a rack-based machinery protection system: monitors measure, relay modules trip, an interface module carries configuration and data, and power supplies keep it all alive – usually two of them, because redundancy is a design assumption rather than an optional extra. A rack needs exactly five things to exist: a 3500/05 rack, at least one 3500/15 power supply, a 3500/22M TDI (or a legacy 3500/20 RIM), at least one monitor module, and the matching rear I/O modules – plus 3500 System Configuration Software to commission it. It is designed to meet API 670, is third-party certified for SIL 1 and SIL 2 from sensor to relay, and remains in current production and support. This page is the hub: module index, slot arithmetic, the protection chain, and the decisions that actually cost money.

How the 3500 is put together

Every 3500 rack is built from pairs: a main module in the front that does the thinking, and an I/O module in the rear that the field wiring actually touches. The main module plugs into the 19-inch EIA backplane of a 3500/05 rack and the I/O module sits behind it in the matching rear position. This is why two identical-looking front modules can be completely different purchases – the I/O variant behind them decides whether field cable lands on the rack or on a remote termination panel.

The backplane is the nervous system. Power, configuration, alarm states and Keyphasor timing all travel on it, which is what lets a relay module trip on a condition computed three slots away, and what makes the interface module so critical: it holds the rack’s configuration file, so a rack with a dead interface module is a rack you can run but not see.

Required and optional components

Module index with official datasheet numbers

Where a datasheet exists, we list its number, because that is the fastest way to check a supplier’s claim. Modules marked no public datasheet are legacy or niche items whose specifications cannot be verified from current public documents.

Be careful with bare numbers that skip the M: 3500/40, 3500/42, 3500/22, 3500/50, 3500/72 and 3500/94 as such are not in the current official range – the “M” generations are. Legacy 3500/42 parts do appear in circulation, and 143694 still shows “Additional I/O Modules for Legacy 3500/42M”, so treat a non-M listing as a legacy item to be verified against a label rather than a live catalogue entry.

Rack sizing: the slot arithmetic

The left-hand end of every rack is reserved: two half-height power supply positions stacked, then the interface module. That leaves 14 module slots in a full-size rack and 7 in a mini rack, and they take any combination of monitor, relay, Keyphasor, display and gateway modules.

Depth is where projects lose time. A standard rack is 349 mm deep, a bulkhead-mounted rack 267 mm, and I/O modules carrying internal barriers add a further 74 mm. Racks with 19-inch EIA rails, panel cut-out and bulkhead mounting are all offered, but the mini rack cannot be bulkhead mounted. If you are fitting barriers, note that a 3500/04-01 module needing intrinsic-safety grounding takes a dedicated position, which reduces a 19-inch rack to 13 monitor positions.

Channel density follows the module: a four-channel monitor in each of 14 slots gives 56 channels per rack. Two half-height Keyphasor cards can share one slot, so Keyphasor is the exception that buys you density.

The protection chain, and what is not allowed in it

Understanding the signal path explains most specification arguments. A transducer is powered and monitored by its I/O module, which supplies transducer power through short-circuit-protected terminals and continuously checks the sensor and the field wiring as part of its OK routine. The signal passes to the monitor module, which compares the measurement against Alert and Danger setpoints – software-adjustable across 0-100% of full scale to 0.13% accuracy, with Alert delays of 1-60 s in 1 s steps and Danger delays from 0.1 s or 1-60 s in 0.5 s steps, latchable or not. The resulting states travel on the backplane to a relay module, whose Alarm Drive Logic applies AND/OR voting across Not-OK, Alert and Danger conditions and closes the contacts that reach the DCS or ESD system.

The rule that falls out of that chain, and that Baker Hughes states directly: 4-20 mA record outputs and Modbus registers are “intended for operator annunciation and trending purposes only” and “do not provide the fault tolerance or integrity necessary for machinery protection or shutdown”. So a trip must end in relay contacts. The same applies to the Rack OK relay, which sits in the TDI’s I/O module, is single-pole double-throw and normally energised – so it also operates when the rack loses power – and which the documentation says should not be used in an automatic shutdown circuit.

Design-level fault tolerance comes from the rest: configuration is stored twice in non-volatile memory and compared, channels are automatically suppressed rather than mis-reported when a fault is detected, and remote dry-contact inputs for Trip Multiply, Alarm Inhibit and Rack Reset give the control system control over behaviour.

Power, redundancy and hot swap

The 3500/15 accepts Universal AC at 85-264 Vac rms (85-250 Vac rms in hazardous areas), high-voltage DC at 88-140 Vdc or low-voltage DC at 20-30 Vdc, and any AC/DC combination can be paired. The lower module runs as primary and the upper as backup; either one can carry a fully populated rack, and no minimum rack load is required. Hot swap works – “removing or inserting either power supply module does not disrupt operation of the rack as long as a second power supply is installed”.

Rear I/O modules, by contrast, are not hot-swappable. Any job that touches the back of the rack is a planned outage, and the most common field injury in this range is a technician pulling an I/O module to “just check it” on a live rack.

Configuration, data and diagnostics

Configuration is written in 3500 System Configuration Software and stored as a RAK file in the interface module – reachable through the TDI’s front USB port or over the plant network, protected by a keylock and a two-level password scheme. Access control is real, not cosmetic: some modules require a minimum configuration-software and firmware level before they will operate, for example the 3500/32M needing software 4.5 or later with TDI firmware 1.71 or later.

On the data side the system separates static from dynamic. Static values cover the measured parameters and their eight derived quantities per channel – Direct, Gap, 1X, 2X, Not1X, Smax and the rest. Transient waveform capture needs the Channel Enabling Disk option. Event history holds 2000 alarm events and 1000 system events with time stamps, time-synced through the gateway or software, which removes the need for a separate sequence-of-events recorder on most machines.

Off-rack, the usual destinations are OPC DA to a DCS or PLC, and System 1 for condition monitoring and diagnostics. Externally, the TDI speaks its proprietary protocol plus Ethernet TCP/IP at 10/100Base-TX and 100Base-FX; the 3500/92 adds Modicon Modbus and Modbus/TCP over RS-232/422/485 with a configurable register map; the 3500/91M provides Ethernet Global Data for GE Mark VIe. Multiple gateways can be fitted for communication redundancy.

Standards, certifications and area classification

One caution on the marketing numbers: the current product page states “over 85,000 installed worldwide” while the brochure says “more than 100,000 racks installed globally”. Quote either, not both.

Which modules for which machine

Baker Hughes does not publish an official bill of materials per machine type, so treat the rows above as the documented module-to-application mapping rather than as a template design.

3500 versus Orbit 60, and what “legacy” actually means here

The question every site asks eventually. The documented position is that the 3500 is not discontinued: Baker Hughes published a commitment statement saying the 3500 product line “remains fully supported, even as it passes its 24th birthday” and that it would not institute a forced obsolescence programme, having refreshed the electronics in 2016 and 2017 to meet RoHS. Orbit 60 is described as “the next generation of machinery protection” and is recommended for new installations post-2020 where it suits, with retrofit explicitly positioned as straightforward.

Practical translation: keep repairing a 3500 while parts are documented and available, and plan Orbit 60 on machines that are being rewired anyway. Sensor investment travels either way – the 3500’s dynamic inputs still accept 3300 XL Proximitor signals, and the sensor catalogue lists them as current, commonly stocked lines.

Frequently asked questions

What modules does a Bently Nevada 3500 rack need to work?

Five things: a 3500/05 rack, at least one 3500/15 power supply with its Power Input Module, one interface module in slot 1 (a 3500/22M TDI, or a legacy 3500/20 RIM), at least one monitor module, and the matching rear I/O module for every main module. Configuration software is needed to commission it. Relay modules, Keyphasor cards, gateways and displays are all optional.

How many modules fit in a 3500 rack?

Fourteen general-purpose slots in a full-size 19-inch rack, seven in a mini rack. The left-hand end is reserved for two half-height power supplies plus the interface module. With four-channel monitors throughout, that works out at 56 channels per rack. Internal barrier I/O adds 74 mm of depth, and a rack using the 3500/04-01 barrier module with dedicated IS grounding drops to 13 monitor positions.

Is the Bently Nevada 3500 discontinued?

No. Baker Hughes states that the 3500 product line remains fully supported and that it has no forced obsolescence programme, having refreshed the electronics in 2016 and 2017 for RoHS compliance. Orbit 60 is positioned as the next generation and recommended for suitable new installations after 2020, but 3500 modules are current, documented and available.

Can I use a 4-20 mA output or Modbus to trip a machine?

You should not, and API 670-compliant designs do not. Baker Hughes specifies that 4-20 mA record outputs and Modbus registers are for operator annunciation and trending only and do not provide the fault tolerance or integrity needed for protection or shutdown. Trip paths end in relay module contacts – a 3500/32M or 3500/33 – driven by the monitors’ alarm logic. The Rack OK relay is likewise indication only, despite being normally energised.

What is the difference between a 3500/42 and a 3500/42M?

The M generations are the current, documented ones – the 3500/42M Proximitor/Seismic Monitor is datasheet 143694. Non-M designations such as 3500/42, 3500/40, 3500/22 and 3500/50 are not in the current official range, although legacy parts circulate widely and 143694 still references I/O modules for legacy 3500/42M hardware. Buy a non-M part only against a label you can photograph.

Is a 3500 system SIL rated?

SIL 1 and SIL 2, third-party certified, and the certification covers components from the sensor through to the relay output. The system is offered as a SIL 2-rated design, and individual modules such as the 3500/60 temperature monitor state SIL 2 in their own datasheets. SIL 3 is not a 3500 claim – over-speed protection at that level sits in the 3701/55 ADAPT family.

Can I mix AC and DC power supplies in one 3500 rack?

Yes, and it is standard practice. Any combination of AC and DC 3500/15 supplies is allowed, so a typical TSI cabinet runs an AC supply in the lower position as primary with a battery-backed 24 Vdc supply above it as backup. Each supply can power a full rack on its own, and no minimum rack load is required.

What documentation should I ask a supplier for?

Start with the 3500 System Datasheet, 162096, which answers most rack questions in one place, then the individual module datasheet from the index above, then rack installation manual 129766 for mechanical and torque detail. Anything a supplier cannot tie back to a document number and revision should be treated as unverified – some legacy parts, including 3500/20 RIMs and legacy 3300 series modules, have no public datasheet at all.

Modules we keep in stock

Part number

Sourcing a 3500 system or keeping one alive

We supply new, and verified legacy, 3500 hardware: monitors, relay and Keyphasor modules, TDIs and RIMs, power supplies and PIMs, I/O modules, termination hardware and 3300 XL sensors and housings. Tell us what the rack is doing and what is missing – a photo of the module list with the labels works better than a part number you are not sure about – and we will quote with the datasheet revision each item was checked against. Prices are provided on enquiry and are not published on this site.

Module pages: 3500/15 power supply · 3500/20 RIM · 3500/22M TDI · 3500/25 Keyphasor · 3500/42M monitor · 3500/60 temperature · 32000 probe housings · legacy 3300/12