On-process migration of non-redundant input/output (I/O) firmware

An apparatus configured for use with a first processing device of an input/output module (IOM), the apparatus comprising:

• a second processing device configured to:
• receive an output hold command from the first processing device after the first processing device receives new firmware data for the IOM from a process controller of a process control and automation system;
• in response to the output hold command and during an upgrade of firmware in the IOM by the first processing device and during rebooting of the first processing device, cause a field circuit of the IOM to hold at least one previous output signal for one or more external devices;
• and
• in response to not receiving a new command from the first processing device after causing the field circuit to hold the at least one previous output signal, cause the field circuit to output at least one failsafe output signal for the one or more external devices,
• wherein the second processing device is part of the IOM, and the IOM and the process controller are separate devices, and wherein the IOM is configured as a non-redundant unit.

A system comprising:

• an input/output module (IOM) configured as a non-redundant unit comprising a first processing device, a second processing device, and a field circuit;
• wherein the field circuit is configured to at least one of:
• receive one or more input signals and provide one or more output signals;
• wherein the first processing device is configured to receive, from a process controller of a process control and automation system, new firmware data for the IOM, send an output hold command to the second processing device, upgrade firmware of the IOM with the new firmware data, and attempt a reboot;
• wherein the second processing device is configured, in response to the output hold command and during the upgrading of the firmware and the rebooting of the first processing device, to cause the field circuit to hold at least one previous output signal for at least one external device;
• wherein the second processing device is further configured, in response to not receiving a new command from the first processing device after causing the field circuit to hold the at least one previous output signal, to cause the field circuit to output at least one failsafe output signal for the at least one external device;
• and
• wherein the IOM and the process controller are separate devices.

A non-transitory computer readable medium containing instructions for use in conjunction with a first processing device of an input/output module (IOM) configured as a non-redundant unit, the instructions when executed by a second processing device of the IOM configured to cause the second processing device to:

• receive an output hold command from the first processing device after the first processing device receives new firmware data for the IOM from a process controller of a process control and automation system;
• early
• in response to the output hold command and during an upgrade of firmware in the IOM by the first processing device and during rebooting of the first processing device, cause a field circuit of the IOM to hold at least one previous output signal for one or more external devices;
• and
• in response to not receiving a new command from the first processing device after causing the field circuit to hold the at least one previous output signal, cause the field circuit to output at least one failsafe output signal for the one or more external devices,
• wherein the second processing device is part of the IOM, and the IOM and the process controller are separate devices.