ABB ACS880-07 User manual

—
OPTIONS FOR ABB DRIVES
Emergency stop, configurable stop category
0 or 1 (option +Q979) for
ACS880-07/07LC/17/17LC/37/37LC drives
User's manual

Emergency stop, configurable stop
category 0 or 1 (option +Q979) for
ACS880-07/07LC/17/17LC/37/37LC
drives
User's manual Table of contents
1. Safety instructions
4. Electrical installation
7. Start-up and validation test
3AUA0000145921 Rev H
EN
EFFECTIVE: 2020-09-30

Table of contents
1 Safety instructions
7Contents of this chapter ...........................................................................
7Use of warnings and notes .......................................................................
8Instructions for functional safety circuits ........................................................
9Electrical safety precautions .....................................................................
2 Introduction to the manual
11Contents of this chapter ...........................................................................
11Applicability .........................................................................................
11Target audience ....................................................................................
12Exclusion of liability ................................................................................
12Quick reference guide for taking a safety function into use ..................................
12Related manuals ...................................................................................
14Terms and abbreviations ..........................................................................
3 Option description
15Contents of this chapter ...........................................................................
15Overview ............................................................................................
16Summary of wirings and settings ............................................................
17Operation principle .................................................................................
18Time schemes with a speed estimate (no safety encoder) ...............................
18Emergency stop, stop category 0 ........................................................
19Emergency stop, stop category 1 with time monitoring ...............................
21Emergency stop, stop category 1 with ramp monitoring ..............................
23Time schemes with a safety encoder ........................................................
23Emergency stop, stop category 0 ........................................................
24Emergency stop, stop category 1 with time monitoring ...............................
26Emergency stop, stop category 1 with ramp monitoring ..............................
28Operation principle diagrams .................................................................
29Fault reaction function .............................................................................
29FSO module .....................................................................................
30Resetting the FSO module ................................................................
30FSE-31 module and safety encoder .........................................................
30Drive STO function .............................................................................
4 Electrical installation
31Contents of this chapter ...........................................................................
31Wiring ................................................................................................
5 Parameter settings
33Contents of this chapter ...........................................................................
33Competence ........................................................................................
33FSO module parameter settings .................................................................
34General parameters ............................................................................
Table of contents 5

36Parameters for the STO function .............................................................
38Parameters for the SSE function .............................................................
38I/O parameters ..................................................................................
39Parameters for Emergency stop, stop category 0 .........................................
39Parameters for Emergency stop, stop category 1 .........................................
41Changing the stop category from 0 to 1 .....................................................
42FSE-31 module and safety pulse encoder related parameters ..........................
44Drive parameter settings ..........................................................................
6 Use of the safety function
45Contents of this chapter ...........................................................................
45Activating the safety function .....................................................................
46Resetting the safety function .....................................................................
7 Start-up and validation test
47Contents of this chapter ...........................................................................
47Validation of the safety functions ................................................................
47Competence .....................................................................................
47Validation procedure ...........................................................................
48Validation test reports ..........................................................................
48Start-up and validation test .......................................................................
8 Maintenance
51Contents of this chapter ...........................................................................
51Safety circuit maintenance .......................................................................
51Proof test interval ..................................................................................
52Competence ........................................................................................
52Residual risk ........................................................................................
52Intentional misuse ..................................................................................
52Decommissioning ..................................................................................
9 Technical data
53Contents of this chapter ...........................................................................
53Safety data ..........................................................................................
53Safety data values ..............................................................................
53ACS880-07/07LC/17/17LC/37/37LC drives without the FSE-31 module ...........
54ACS880-07/07LC/17/17LC/37/37LC drives with the FSE-31 module ...............
54Safety component types .......................................................................
55Safety block diagrams .........................................................................
55Relevant failure modes ........................................................................
55Fault exclusions ................................................................................
55Operation delays ...............................................................................
56Ambient conditions ................................................................................
56Related standards and directives ................................................................
56Compliance with the European Machinery Directive .........................................
Further information
6 Table of contents

Safety instructions
Contents of this chapter
This chapter contains the safety instructions which you must obey when you install, operate
and do maintenance on the safety functions of a drive.
Use of warnings and notes
Warnings tell you about conditions which can cause injury or death, or damage to the
equipment. They also tell you how to prevent the danger. Notes draw attention to a particular
condition or fact, or give information on a subject.
The manual uses these warning symbols:
WARNING!
Electricity warning tells about hazards from electricity which can cause injury or
death, or damage to the equipment.
WARNING!
General warning tells about conditions, other than those caused by electricity,
which can cause injury or death, or damage to the equipment.
WARNING!
Electrostatic sensitive devices warning tells you about the risk of electrostatic
discharge which can cause damage to the equipment.
1
Safety instructions 7

Instructions for functional safety circuits
This manual does not contain the complete safety instructions of the drive. It only includes
the instructions related to the scope of this manual.
Only a qualified electrical professional who has sufficient knowledge about functional,
machine, and process safety is permitted to install, start up and maintain the safety circuit.
All user-made changes are on the user's responsibility.
WARNING!
The safety function described in this manual does not isolate the main circuit or
auxiliary circuit from the power supply. Do not do work on the drive, motor cable
or motor before you have isolated the drive system from all power supplies and
measured that there are no dangerous voltages. Before you start the work, do the
steps in section Electrical safety precautions (page 9).
WARNING!
(With permanent magnet or synchronous reluctance [SynRM] motors only)
In case of a multiple IGBT power semiconductor failure, the drive system can
produce an alignment torque which maximally rotates the motor shaft by 180/p
(with permanent magnet motors) or 180/2p(with synchronous reluctance [SynRM]
motors) degrees regardless of the activation of the Safe torque off function. p
denotes the number of pole pairs.
WARNING!
Do the validation test of the safety function at the start-up and also after you make
changes to the safety circuit.
WARNING!
Make sure that the functional safety of the machine is maintained in situations
where the safety option does not provide protection, for example, during
commissioning, system maintenance, fault tracing, or decommissioning.
WARNING!
Obey the safety instructions of the drive. If you ignore them, injury or death,
or damage to the equipment can occur. If you are not a qualified electrical
professional, do not do installation or maintenance work.
8 Safety instructions
3

Electrical safety precautions
These electrical safety precautions are for all personnel who do work on the drive, motor
cable or motor.
WARNING!
Obey these instructions. If you ignore them, injury or death, or damage to the
equipment can occur.
If you are not a qualified electrical professional, do not do installation or
maintenance work.
Go through these steps before you begin any installation or maintenance work.
1. Clearly identify the work location and equipment.
2. Disconnect all possible voltage sources. Make sure that re-connection is not possible.
Lock out and tag out.
• Open the main disconnecting device of the drive.
• If you have a permanent magnet motor connected to the drive, disconnect the motor
from the drive with a safety switch or by other means.
• Disconnect all dangerous external voltages from the control circuits.
•After you disconnect power from the drive, always wait 5 minutes to let the intermediate
circuit capacitors discharge before you continue.
3. Protect any other energized parts in the work location against contact.
4. Take special precautions when close to bare conductors.
5. Measure that the installation is de-energized.
• Before and after measuring the installation, verify the operation of the voltage tester
on a known voltage source.
• Make sure that the voltage between the drive input power terminals (L1, L2, L3) and
the grounding (PE) busbar is zero.
• Make sure that the voltage between the drive output terminals (T1/U, T2/V, T3/W)
and the grounding (PE) busbar is zero.
• Make sure that the voltage between the drive DC terminals (UDC+ and UDC-) and
the grounding (PE) terminal is zero. In cabinet-built drives, measure between the drive
DC busbars (+ and -) and the grounding (PE) busbar.
6. Install temporary grounding as required by the local regulations.
7. Ask the person in control of the electrical installation work for a permit to work.
Safety instructions 9

10

Introduction to the manual
Contents of this chapter
This chapter describes the manual in short and gives some general information for the
reader. This chapter also contains a quick reference guide for implementing a safety system.
Applicability
This manual is applicable to ACS880-07/07LC/17/17LC/37/37LC drives which have the
option +Q979: Emergency stop, configurable stop category 0 or 1 with STO, with FSO.
Required versions with the FSO-12 module:
• ACS880 primary control program: 1.80 or later
• FSO-12 safety functions module: revision C or later
• Drive composer pro: 1.6 or later.
Required versions with the FSO-21 module:
• ACS880 primary control program: 2.2 or later
• FSO-21 safety functions module: revision D or later
• FSE-31 pulse encoder interface module: revision D or later (if used)
• Drive composer pro: 1.8 or later.
This manual shows the default design of the safety circuit ordered with option code +Q979.
The actual design can be different from the default design because of customer-defined
modifications. Always refer to the documentation delivered with the drive.
Target audience
This manual is intended for people who install, commission, use and service the safety
function. Read the manual before working on the unit. You are expected to know the
2
Introduction to the manual 11

fundamentals of electricity, wiring, electrical components, electrical schematic symbols, and
functional safety.
Exclusion of liability
ABB is not responsible for the implementation, verification and validation of the overall safety
system. It is the responsibility of the system integrator (or other party) who is responsible
for the overall system and system safety.
The system integrator (or other responsible party) must make sure that the entire
implementation complies with the instructions in this manual, all relevant standards, directives
and local electrical code, and that the system is tested, verified and validated correctly.
Quick reference guide for taking a safety function into use
Task
Connect the user-defined wiring (if any). See the wiring instructions in this manual and the circuit dia-
grams delivered with the drive.
Check and/or set the safety function related parameters (as listed in this manual).
Do the validation test to make sure that the implemented system meets the safety requirements. You
can find the instructions for the validation test in this manual and in the FSO module user's manual.
Document the validation test procedure. You can find the guidelines for the validation test report in this
manual and in the FSO module user's manual.
Related manuals
CodeManual
Drive hardware
3AUA0000143261ACS880-07 drives (560 to 2800 kW) hardware manual
3AUA0000105718ACS880-07 drives (45 to 710 kW, 50 to 700 hp) hardware manual
3AXD50000569786ACS880-07LC drives hardware manual
3AXD50000020436ACS880-17 drives (160 to 3200 kW) hardware manual
3AXD50000035158ACS880-17 drives (45 to 400 kW) hardware manual
3AXD50000250295ACS880-17LC drives hardware manual
3AXD50000020437ACS880-37 drives (160 to 3200 kW) hardware manual
3AXD50000035159ACS880-37 drives (45 to 400 kW) hardware manual
3AXD50000251407ACS880-37LC drives hardware manual
Drive firmware
3AUA0000085967ACS880 primary control program firmware manual
3AUA0000098062ACS880 primary control program quick start-up guide
3AUA0000103295ACS880 diode supply control program firmware manual
3AUA0000131562ACS880 IGBT supply control program firmware manual
PC tools
3AUA0000094606Drive composer start-up and maintenance PC tool user's manual
TT201312111015Functional safety design tool user’s manual
Safety
3AUA0000048753Functional safety; Technical guide No. 10
12 Introduction to the manual

CodeManual
www.abb.com/safetyABB Safety information and solutions
Options
3AUA0000085685ACX-AP-x assistant control panels user’s manual
3AXD50000015612FSO-12 safety functions module user’s manual
3AXD50000015614FSO-21 safety functions module user’s manual
3AXD50000016597FSE-31 pulse encoder interface module user’s manual
Other documents
Delivered with the driveCircuit diagrams
Delivered with the drivePart lists
Safety data report (if the safety circuit is different from the default design)
See www.abb.com/drives/documents for all manuals on the Internet.
ACS880-07LC manualsACS880-07 (560 to 2800 kW)
manuals
ACS880-07 (45 to 710 kW) manuals
ACS880-17LC manualsACS880-17 (160 to 3200 kW)
manuals
ACS880-17 (45 to 400 kW) manuals
ACS880-37LC manualsACS880-37 (160 to 3200 kW)
manuals
ACS880-37 (45 to 400 kW) manuals
Introduction to the manual 13

Terms and abbreviations
DescriptionTerm
Classification of the safety-related parts of a control system in respect of their resistance
to faults and their subsequent behavior in the fault condition, and which is achieved
by the structural arrangement of the parts, fault detection and/or by their reliability.
The categories are: B, 1, 2, 3 and 4. (EN ISO 13849-1)
Cat.
Common cause failure (%) (EN ISO 13849-1)CCF
Diagnostic coverage (EN ISO 13849-1)DC
Emergency stopE-stop
Physical size of the drive or power moduleFrame, frame size
Optional pulse encoder interface module for safety encoderFSE-31
Optional functional safety modulesFSO-12, FSO-21
Hardware fault tolerance (IEC 61508)HFT
Insulated gate bipolar transistorIGBT
No modulationmodoff
Normally closedNC
Average probability of dangerous failure on demand (IEC 61508)PFDavg
Average frequency of dangerous failures per hour (IEC 61508)PFH
Performance level. Levels a...e correspond to SIL (EN ISO 13849-1)PL
Prevention of unexpected start-upPOUS
Safe acceleration rangeSAR
Systematic capability (IEC 61508)SC
Safety integrity level (1...3) (IEC 61508)SIL
Maximum SIL (level 1...3) that can be claimed for a safety function or subsystem
(IEC/EN 62061)
SILCL
Safe stop 1 (IEC/EN 61800-5-2)SS1
Safe stop emergencySSE
Safe torque off (IEC/EN 61800-5-2)STO
Proof test interval. Defines the probabilistic failure rate (PFH or PFDavg) for the safety
function or subsystem. Performing a proof test at a maximum interval of T1is required
to keep the SIL capability valid. The same interval must be followed to keep the PL
capability (EN ISO 13849) valid. Note that any T1values given cannot be regarded
as a guarantee or warranty.
T1
Test pulseTP
For safety functions, the zero speed limit indicates the completion of the safe stopping
function.
Zero speed
14 Introduction to the manual

Option description
Contents of this chapter
This chapter describes the operation and settings of the option +Q979: Emergency stop,
configurable stop category 0 or 1 with STO, with FSO.
Overview
Option +Q979 uses the FSO-12 safety functions module (option +Q973) or the FSO-21
safety functions module (option +Q972) for the emergency stop safety function. In this
emergency stop option, the drive STO function is activated. The main contactor/breaker of
the drive is not opened.
ABB installs the FSO module, and the emergency stop circuit to the drive. ABB sets default
parameter values for the option at the factory. The user adjusts the operation of the
emergency stop function with the safety parameters at the start-up, for example, sets the
stop category (0 or 1). ABB sets stop category 0 at the factory.
If option +L521 is selected, ABB installs the FSO-21 safety functions module and FSE-31
pulse encoder interface module to the drive. With this option, you can use a safety encoder
in the application.
Note: The FSO-12 module is not compatible with the FSE-31 module or safety encoders.
3
Option description 15

The option +Q979 supports the following emergency stop functions:
• Emergency stop, stop category 0
This is an uncontrolled stop (IEC/EN 60204-1). When the user pushes the emergency
stop button, the Safe torque off (STO) function of the FSO module is activated. This
activates the drive STO function. The motor coasts to a stop.
• Emergency stop, stop category 1
This is a controlled stop (IEC/EN 60204-1). When the user pushes the emergency stop
button, the Safe stop 1 function (SS1) of the FSO module is activated. After the drive
decelerates the motor speed to a user-defined zero speed limit, the FSO module activates
the drive STO function.
The SS1 function can operate in time monitoring or in ramp monitoring mode. In time
monitoring mode, the FSO module monitors that a user-defined deceleration time limit
is not exceeded. In ramp monitoring mode, the FSO module monitors that the motor
decelerates along a user-defined stop ramp.
Note: The safety function request to the FSO module must be active for a minimum of
20 ms.
To start the drive, the user must release the emergency stop button and then push the
emergency stop reset button for 0.3 … 3 s. This resets the emergency stop circuit and
deactivates the drive STO.
Note: ACS880-07/07LC drives, frames n×DXT + n×R8i with a main contactor/breaker (option
+F250/+F255), ACS880-17/17LC/37/37LC drives, frames n×R8i + n×R8i, and ACS880-17/37
drives, frames R8 and R11: When the inverter unit STO is activated, the main
contactor/breaker is opened after a user-defined delay (defined with parameter 94.11, the
default value is 600 s). See the hardware and firmware manuals for more information.
For a detailed description of the drive Safe torque off function, see the hardware manual of
your drive. For more information on the safety functions of the FSO module, see FSO-12
safety functions module user’s manual (3AXD50000015612 [English]) or FSO-21 safety
functions module user’s manual (3AXD50000015614 [English]). For more information on
the FSE-31 module, see FSE-31 pulse encoder interface module user’s manual
(3AXD50000016597 [English]).
The design principles of the option +Q979 comply with EN ISO 13850.
The STO and SS1 functions comply with IEC/EN 61800-5-2. For a complete list of related
standards and European directives, see section Related standards and directives (page 56).
￭Summary of wirings and settings
The wirings and settings of the emergency stop function are:
• The drive is equipped with the FSO safety functions module (option +Q973 or +Q972).
ABB installs the module at the factory.
•One emergency stop button is installed on the cabinet door and wired to the FSO module.
ABB wires the button at the factory. The user can add buttons to the emergency stop
circuit.
16 Option description

• One emergency stop reset button is installed on the cabinet door and wired to the FSO
module. The reset button also includes an emergency stop indication lamp. ABB wires
the button and the indication lamp at the factory. The user can add reset buttons to the
reset circuit.
• The digital output of the FSO module to which the emergency stop indication lamp is
connected, is selected as the output for the Stop completed signal. This is an FSO module
parameter that ABB sets at the factory by default and the user must check at the start-up.
Emergency stop, stop category 0:
• The digital inputs of the FSO module to which the emergency stop button is connected,
are selected as the inputs for the STO request. This is an FSO module parameter that
ABB sets at the factory by default and the user must check at the start-up.
Emergency stop, stop category 1:
The user must set these FSO module parameters at start-up:
• The digital inputs of the FSO module to which the emergency stop button is connected,
are selected as the inputs for the SS1 request.
• The SS1 function is set to use either the time monitoring or ramp monitoring mode.
• The stop ramp that is used to decelerate the motor(s) and the monitoring limits (stop
ramp time or ramp monitoring limits) are set according to the application requirements.
Additional requirements when a safety encoder is used:
• The drive is equipped with a FSO-21 safety functions module and FSE-31 pulse encoder
interface module. If option +L521 is selected, ABB installs the modules at the factory.
• The motor must be equipped with a safety encoder. The user installs and connects the
safety encoder to the FSE-31 module. The user must make sure that the required safety
integrity (SIL/PL) can be achieved with the used safety encoder.
Operation principle
The operation and configuration of the emergency stop function is slightly different with and
without a safety encoder. Only the FSO-21 module supports the safety encoder interface,
and you can also use it without a safety encoder.
Note: The Emergency stop, stop category 1 function uses the SS1 function of the FSO
module. The SS1 function uses SAR1 parameters to define the stop ramp. In some situations
(for example, in internal fault situations or due to another safety function) the FSO module
can activate the Safe stop emergency (SSE) function. The SSE function uses SAR0
parameters to define the stop ramp.
Note: If the FSO module activates the SSE function while the SS1 function is active, the
SSE function overrides the SS1 function. Therefore, SAR0 parameters are used instead of
SAR1 parameters to define the stop ramp. You must take this into account when you use
the SS1 function to implement an emergency stop (stop category 1).
Option description 17

￭Time schemes with a speed estimate (no safety encoder)
Emergency stop, stop category 0
This time scheme diagram illustrates the operation of the Emergency stop, stop category
0 safety function. This option uses the Safe torque off (STO) function of the FSO module.
Time
Motor speed
145
E-stop button
(STO request)
Drive STO
status
Reset button
A
Indication lamp
STO.13
6
B
STO.14
23
Time to zero speed: Time from the activation of the STO function to the moment when the
STO function is completed. The indication lamp comes on. The user must set this to the time
that it takes for the motor to coast from the maximum speed to zero speed (parameter STO.14
Time to zero speed with STO and modoff).
A
Restart delay: Delay from pushing the emergency stop button (and activation of the STO
function) to the moment when acknowledgement of the safety function is permitted at the
earliest. With this parameter, it is possible to let the drive restart while the motor is still running
(fly-start) (parameter STO.13 Restart delay after STO).
B
1. The user pushes the emergency stop button. The FSO module activates the FSO and
drive STO functions. The FSO module starts timers for delays A and B.
2. The user releases the emergency stop button.
3. Time B has elapsed. Acknowledgement of the STO function is possible even though the
motor is still running. (In this example, the user pushes the reset button in step 5.)
4. Time A has elapsed. The motor has stopped and the emergency stop indication lamp
comes on.
5. The user pushes the reset button (this resets the emergency stop circuit and
acknowledges the STO function).
6. The FSO module deactivates the STO function in the drive. The emergency stop indication
lamp goes off. The drive is ready for a restart.
18 Option description

Emergency stop, stop category 1 with time monitoring
This time scheme diagram illustrates the operation of the Emergency stop, stop category
1 safety function with time monitoring. This option uses the Safe stop 1 (SS1) function of
the FSO module.
Case A: The motor speed reaches the zero speed limit within the user-defined time
Time
Motor speed
1 2 6a 7a
E-stop button
(SS1 request)
Drive STO
status
Reset button
B
5a
C
4a
A
Indication lamp
3a
SS1.14
SS1-t monitoring time: When time A has elapsed, the FSO module activates STO function.A
Zero speed limit: Speed limit for activating the drive STO function. This is a user-defined value
(parameter FSOGEN.51 Zero speed without encoder).
B
Safety function response time.C
1. The user pushes the emergency stop button (this activates the SS1 function of the FSO
module). The FSO module starts a timer for delay A.
2. The drive starts to decelerate the motor along the user-defined stop ramp (SAR1
parameter 200.112 SAR1 ramp time to zero).
3. a) The motor speed goes below the zero speed limit (B). The FSO module activates the
drive STO function. The emergency stop indication lamp comes on.
Note: You can set an additional delay for the STO activation (parameter SS1.15 SS1-r
ramp zero speed delay for STO).
4. a) Time A has elapsed. The STO function is already active. In this case, this time has
no effect.
5. a) The user releases the emergency stop button.
6. a) The user pushes the reset button (this resets the emergency stop circuit and
acknowledges the STO function).
7. a) The FSO module deactivates the STO function in the drive. The emergency stop
indication lamp goes off. The drive is ready for a restart.
Option description 19

Case B: The motor speed does not reach the zero speed limit within the user-defined time
Time A has elapsed from the emergency stop command (step 1) but the motor speed still
exceeds the zero speed limit.
Time
Motor speed
1 2
E-stop button
(SS1 request)
Drive STO
status
Reset button
A
B
4b
C
D
Indication lamp
3b 7b6b 5b
SS1.14
STO.14
SS1-t monitoring time: When time A has elapsed from the start of the counter (step 1), the
FSO module activates FSO and the drive STO functions (case B). In case A, the FSO module
has already activated the STO function. This is a user-defined value (parameter SS1.14 SS1-
t delay for STO).
A
Zero speed limit: Speed limit for activating the drive STO function. This is a user-defined value
(parameter FSOGEN.51 Zero speed without encoder).
B
Safety function response time.C
Time to zero speed: When time D has elapsed from the start of the counter (step 3b, activation
of the STO function), acknowledgement of the STO function is possible. The user must set
this to the time it takes for the motor to coast from the maximum speed to zero speed (para-
meter STO.14 Time to zero speed with STO and modoff).
D
1. The user pushes the emergency stop button (this activates the SS1 function of the FSO
module). The FSO module starts a timer for delay A.
2. The drive starts to decelerate the motor along the user-defined stop ramp (SAR1
parameter 200.112 SAR1 ramp time to zero).
3. b) The FSO module activates the FSO and drive STO functions (case B) and starts a
counter for time D. The motor coasts to a stop.
4. b) The user releases the emergency stop button.
5. b) Time D has elapsed. The motor has stopped and the emergency stop indication lamp
comes on. Acknowledgement of the STO function is possible.
20 Option description