Railway Computer System For Safety-Critical On-Board and Trackside Applications
menTCS is an open and modular railway computer platform, and is the first-ever railway system to be based exclusively on defined open standards for hardware, software and communication.
Product Overview Chart
The following comparison charts list the main functions and features in the system and board level products.
menTCS is well suited for control of all safety-related functions in new train models as well as for refurbishment of trains. Thanks to its modularity, it is easy to install and retrofit automation functions in combination of menTCS with other parts of already existing train control equipment as well:
- Installation as the heart of the CBTC (Communication Based Train Control) or PTC (Positive Train Control) system or the TCMS (Train Control Management System) for new trains
- Increase in efficiency of already existing ATO, ATP and ATS functions as the central computer
- Step-by-step replacement of older equipment, resulting in one standardized general-purpose platform for all safe applications
- Can be combined with additional remote control components sitting directly at the door, at the wheel, at the gear
- All-in-one safe control system and non-vital communication system – safely separated through strict partitioning
- Interfacing to all existing train communication with Ethernet and MVB, CAN bus etc
- Interfacing to the driver cab display
- Interfacing to wireless communication with the outside world through GSM-R, GPS, Wi-Fi etc
- Decrease in life cycle cost through easy maintenance of standard components
- Longer operating life by using standardized technologies
Consisting of the safe controller, the safe I/O functions, and the communication interfaces to the "outside" world, menTCS is certifiable up to SIL 4 in its single parts and complies with the EN 50126 (RAMS), EN 50128 (software) and EN 50129 (hardware) railway development standards for functional safety.
The robust and rail-ready menTCS components comply with the railway standards for environmental and EMC conditions EN 50155 (rolling-stock) and EN 50125-3 / EN 50121-4 (signalling/wayside).
For a quick overview watch the slideshow: 5 Things About menTCS Train Control System
menTCS supports vital safety-critical railway application requirements. For all non-vital train IT applications, please visit the menRDC information page.
menTCS Controller Components


- For Applications up to SIL4 (EN5012x) or SIL3 (IEC61508)
- Certified safe CPU board with 3 CPUs
- Safe I/O boards
- QNX safe operating system available
- Certification packages available
- Extensible by distributed safe I/O boxes connected via real-time Ethernet
- Optional MVB, RS232, RS422, RS485, CAN, GPS
- Compact 40 HP application-ready system
- Rack-mounted or wall-mounted

- SIL 4 modular Train Control System menTCS
- Certified safe CPU board with 3 CPUs
- Safe I/O boards (currently in certification process)
- QNX safe operating system available
- Certification packages available
- Optional MVB, RS232, RS422, RS485, CAN, GPS
- IP65 / NEMA-4 protected housing
- For rolling stock and wayside applications
- AAR S-9401 compliant housing concept - functional product only available in project context

- For Applications up to SIL4 (EN5012x) or SIL3 (IEC61508)
- Safe I/O boards
- Certification packages available
- Distributed safe I/O and controller boxes connected via real-time Ethernet
- Support for QNX safe operating system
- Compact 40 HP housing for remote locations
- Full EN 50155 compliance
- Rack-mounted or wall-mounted

- 2x Intel Atom E6xx, 512 MB DDR2 RAM (each) for onboard dual redundancy
- 1x Intel Atom E6xx, 1 GB DDR2 for I/O
- Independent supervisors for each block
- Fail-safe board architecture
- Event logging
- SIL 4 certification packages available for hardware and software (QNX)
- TÜV Süd certified according to EN 50129 (SIL 4), EN 50128 (SIL 4) and IEC 61508 (SIL3)
- Full EN 50155 compliance
- -40 °C to +70 °C (+85 °C)

- 8 digital outputs, 24 V, 48 V, 72 V, 96 V, 110 V
- 300 mA per channel, 1200 mA total
- High-side switch outputs (load to ground)
- Optical isolation from other cards
- Fail-safe board architecture
- Certified to EN 5012x (SIL 2/4), EN 50159, IEC 61508 (SIL 2/3)
- Developed acc. to EN 50129, EN 50128, IEC 61508
- Extensive supervision functions
- EN 50155 fully compliant

- 16 digital inputs, 24 V, 48 V, 72 V, 96 V, 110 V
- 1 to 10 mA, pulsed
- Optical isolation from other cards
- Fail-safe board architecture
- Certified to EN 5012x (SIL 2/4), EN 50159, IEC 61508 (SIL 2/3)
- Developed acc. to EN 50129, EN 50128, IEC 61508
- Extensive supervision functions
- EN 50155 fully compliant
- -40°C to +85°C

- 8 digital outputs, 24 V, 48 V, 72 V, 96 V, 110 V
- 300 mA per channel, 1200 mA total
- Low-side switch outputs (load to supply voltage)
- Optical isolation from other cards
- Fail-safe board architecture
- Certified to EN 5012x (SIL 2/4), EN 50159, IEC 61508 (SIL 2/3)
- Developed acc. to EN 50129, EN 50128, IEC 61508
- Extensive supervision functions
- EN 50155 fully compliant
The menTCS Modular System
General Information
menTCS is an open and modular railway computer platform based exclusively on standard hardware and software. It is certifiable up to SIL 4 in its single parts and complies with the EN 50155 and EN 50125-3 / EN 50121-4 railway standards.
The train control system is designed to operate in rolling-stock applications such as Automatic Train Control (ATO) and Automatic Train Protection (ATP) as well as in wayside applications like interlocking systems. The modular Train Control System from MEN consists of the safe controller, the safe I/O functions and the communication interfaces to the "outside" world.
Its modular configuration enables the menTCS system to communicate with other train systems like service or diagnosis units via any type of wired or wireless interface. Additionally, fieldbus interfaces can be implemented to connect into other networks like MVB, CAN, Profinet etc. This makes it easy to integrate into a TCN network as well as into regionally different Train Control Systems like PTC, ETCS, CTCS, ATCS or Klub-U.
Let MEN design your individual safe computer system based on our long-standing experience in the realization of mission-critical electronics.
Systems with Single Building Blocks
The heart of the modular MEN Train Control System is the menTCS controller which delivers state-of-the art computing performance based on x86 PC technology. The menTCS controller consists of a safe part and what is called an “unsafe” (general purpose) part. The menTCS controller can be used as a standalone device and in combination with up to 63 remote I/O boxes.
MH50C - menTCS Safe System Controller SIL 2 to SIL 4
KT8 - menTCS Safe Remote I/O Box SIL 2 to SIL 4
K1 - 8 Safe Digital Outputs, High-Side Switching
Downloads & Media
Downloads (PDF)
Brochure: menTCS – MEN Train Control System
Brochure: Solutions for Rail and Public Transport
Presentation: menTCS Family Overview
Product Comparison: menTCS Control System - System Level
Product Comparison: menTCS Train Control System - Safe I/O Boards
Case Study: MEN and QNX Software Systems (Log in)
menTCS MEN Train Control System - Frequently Asked Questions (log in)
menTCS MEN Train Control System - Detailed Questions & Answers (on request)
White Paper: Smart Railway Solutions with SIL-Level COTS Components