Availability of a Redundant System