ABB +Q951 Product information sheet

—
Options for ABB drives
Original user’s manual
Emergency stop, stop category 1 without opening mains contactor
(option +Q964) for DCS8x0-A cabinet drives
equipped with DCS880 modules
Individual E-Stop
E-Stop
cat.0
E-Stop
cat.1
POUS
forced MC
opening
+Q951
x
x
+Q952
x
x
+Q963
x
+Q964
x
+Q957
x

List of related manuals
All the documents available for the drive system DCS880 are listed below:
General
Publication number
EN
DE
IT
ES
FR
PL
ZH
RU
DCS880 Quick guide
3ADW000545
EN
DE
IT
ES
FR
Safety instructions all languages
3ADW000481
EN
DE
IT
ES
FR
PL
ZH
RU
DCS880 Manual set
DCS880
Manual set
EN
DCS880 Units
DCS880 Flyer
3ADW000475
EN
DE
IT
ES
FR
ZH
RU
DCS880 Technical catalog
3ADW000465
EN
DE
IT
ES
FR
PL
ZH
RU
DCS880 Hardware manual
3ADW000462
EN
DE
IT
ES
FR
PL
RU
DCS880 Firmware manual
3ADW000474
EN
IT
ES
FR
PL
RU
DCS880 Service manual
3ADW000488
EN
DCS880 Hardparallel manual
3ADW000530
EN
DCS880 12-pulse manual
3ADW000533
EN
Instructions for mounting the SDCS-CMA-2
3ADW000396
EN
ACS-AP-x assistant control panels user’s manual
3AUA0000085685
EN
DCS Thyristor power converter – Technical guide
3ADW000163
EN
Functional safety
Supplement for functional safety
3ADW000452
EN
IT
ES
FR
PL
RU
Functional safety for enclosed converter
+Q957 Prevention of unexpected Start Up
3ADW000504
EN
+Q951 Emergency stop, category 0 with MC opening
3ADW000505
EN
+Q952 Emergency stop, category 1 with MC opening
3ADW000506
EN
+Q963 Emergency stop, category 0 without MC opening
3ADW000507
EN
+Q964 Emergency stop, category 1 without MC opening
3ADW000508
EN
Enclosed converter
DCS800-A Installation manual
3ADW000352
EN
DE
DCS800-A +S880 Enclosed converters, flyer
3ADW000523
EN
Door mounting kits
DPMP-01 mounting platform for ACS-AP control panel
3AUA0000100140
EN
DPMP-02 mounting platform for ACS-AP control panel
3AUA0000136205
EN
Serial communication
FCAN-01 CANopen adapter module
3AFE68615500
EN
DE
FDNA-01 DeviceNet™ adapter module
3AFE68573360
EN
FECA-01 EtherCAT adapter module
3AUA0000068940
EN
DE
ES
FENA-11/-21 Ethernet adapter module
3AUA0000093568
EN
ZH
FEPL-02 Ethernet POWERLINK adapter module
3AUA0000123527
EN
DE
FPBA-01 PROFIBUS DP adapter module
3AFE68573271
EN
DE
PL
ZH
FSCA-01 RS-485 adapter module
3AUA0000109533
EN
ZH
FDCO-01/02 DDCS communication modules
3AUA0000114058
EN
Tool and maintenance manuals and guides
Drive composer PC tool
3AUA0000094606
EN
Drive application programming (IEC61131-3) manual
3AUA0000127808
EN
Adaptive programming, Application guide
3AXD50000028574
EN
NETA-21 remote monitoring tool
3AUA0000096939
EN
NETA-21 remote monitoring tool guide
3AUA0000096881
EN
DDCS branching unit NDBU-95 user’s manual
3BFE64285513
EN
Extension modules
FIO-11 Analog extension module
3AFE68784930
EN
DE
IT
FIO-01 Digital extension module
3AFE68784921
EN
DE
IT
FAIO-01 Analog extension module
3AUA0000124968
EN
DE
FDIO-01 Digital extension module
3AUA0000124966
EN
FEN-01 TTL encoder interface
3AFE68784603
EN
DE
IT
ZH
FEN-31 HTL encoder interface
3AUA0000031044
EN
ZH
FEA-03 F series extension adapter
3AUA0000115811
EN
Ethernet tool network for ACS880 drives appl. guide
3AUA0000125635
EN
Status 01.2020 DCS880 Manuals list m en.docx

3
Safety Instructions
3ADW000508R0201+Q964 E-Stop cat.1 without opening mains contactor en b
Table of contents
List of related manuals 2
Safety Instructions 4
Introduction to the manual 5
Contents of this chapter .............................................................................................................................................5
Applicability ....................................................................................................................................................................5
Target audience.............................................................................................................................................................5
Contents..........................................................................................................................................................................5
Related documents.......................................................................................................................................................5
Abbreviations .................................................................................................................................................................6
Exclusion of liability ......................................................................................................................................................6
Quick reference guide for implementing a safety system .................................................................................. 7
Option description and instructions 8
Contents this chapter ..................................................................................................................................................8
Overview..........................................................................................................................................................................8
Operation principle.......................................................................................................................................................9
+Q964 Detailed timing chart.................................................................................................................................... 11
+Q964 Fault reaction function................................................................................................................................. 11
Parameter settings..................................................................................................................................................... 12
Hardware settings ...................................................................................................................................................... 13
Wiring .............................................................................................................................................................................14
+Q964 Start-up and acceptance test..................................................................................................................... 15
Use of the safety function......................................................................................................................................... 16
Activating.................................................................................................................................................................. 16
Resetting................................................................................................................................................................... 16
Emergency stop indications..................................................................................................................................... 16
+Q964 Fault tracing.................................................................................................................................................... 17
+Q964 Maintenance....................................................................................................................................................19
Proof test interval...................................................................................................................................................19
Diagnostic test interval.........................................................................................................................................19
Competence ............................................................................................................................................................. 19
Residual risk .............................................................................................................................................................19
Intentional misuse ..................................................................................................................................................20
Decommissioning...................................................................................................................................................20
Safety data....................................................................................................................................................................20
Safety data values...................................................................................................................................................20
Safety component types.......................................................................................................................................20
Safety block diagram .............................................................................................................................................20
Relevant failure modes ..........................................................................................................................................20
Fault exclusions....................................................................................................................................................... 21
Operation delays..................................................................................................................................................... 21
General rules, notes and definitions....................................................................................................................... 21
Validation of the safety functions ...................................................................................................................... 21
Ambient conditions................................................................................................................................................ 21
Reporting problems and failures related to safety functions...................................................................... 21
Related standards and directives............................................................................................................................22
Compliance with the European Machinery Directive .....................................................................................22
Further information 23

4
Safety Instructions
3ADW000508R0201+Q964 E-Stop cat.1 without opening mains contactor en b
Safety Instructions
Only a qualified electrician who has appropriate knowledge on functional/machine/process safety is
allowed to install, start up and maintain the safety circuit.
WARNING!
This safety function does not disconnect the voltage of the main and auxiliary
circuits from the drive. You must not work on the electrical parts of the drive or the
motor before you have also disconnected the drive system from the electric supply
and ensured by measuring that there is no dangerous voltage present.
WARNING!
After making additions to the drive safety circuit or modifying it, or changing circuit
boards inside the drive, always test the functioning of the safety circuit according to
the acceptance test procedure. Any changes in the electrical installations of th
e drive
may affect the safety performance or operation of the drive unexpectedly. All
customer-made changes are on the customer’s responsibility.
WARNING!
Read and obey all safety instructions given for the drive in its hardware manual. If
you ignore them, injury or death, or damage to the equipment can occur.
This manual does not repeat the complete safety instructions of the drive but it only includes the
instructions related to the scope of this manual.

5
Introduction to the manual
3ADW000508R0201+Q964 E-Stop cat.1 without opening mains contactor en b
Introduction to the manual
Contents of this chapter
This chapter describes the manual in short and gives some general information for the reader. The
chapter also contains a quick reference for implementing a safety system.
Applicability
The manual applies only to DCS880-A cabinet drives and to DCS800-A cabinet drives with plus code
+S880 (exchange of DCS800 with DCS880 drives modules) which have the option: Emergency stop,
stop category 1 with STO, with safety relays (option +Q964). In this emergency stop option, the mains
contactor/breaker of the drive is opened.
Target audience
The manual is intended for people who install, start up, use and service the safety option of the drive.
Read the manual before working on the drive. You are expected to know the fundamentals of electricity,
wiring, electrical components, electrical schematic symbols, and functional safety.
Contents
The chapters of this manual are briefly described below.
Introduction to the manual (this chapter) introduces this manual.
Option description and instructions describes the safety option and instructs how to wire, start up,
test, validate, use and maintain it. The chapter also contains the safety data.
Related documents
−Product manuals (see the inside of the front cover)
−Circuit diagrams delivered with the drive
−Safety data (if the safety circuit is application engineered)

6
Introduction to the manual
3ADW000508R0201+Q964 E-Stop cat.1 without opening mains contactor en b
Abbreviations
Abbreviations used in this manual are listed below.
Abbreviation Description Reference
Cat. Category
1. Stop category according to EN/IEC 60204-1
The stop categories are: 0 (uncontrolled stop) and 1 (controlled
stop)
2. Classification of the safety-related parts of a control system in
respect of their resistance to faults and their subsequent
behavior in the fault condition, and which is achieved by the
structural arrangement of the parts, fault detection and/or by
their reliability.
The categories are: B, 1, 2, 3 and 4.
EN/IEC 60204-1
EN ISO 13849-1
CCF
Common cause failure (%)
EN ISO 13849-1
DC Diagnostic coverage EN ISO 13849-1
DI
Digital input
E-stop Emergency stop
Frame (size) Relates to the construction type of the drive in question. For
example, several drive types with different power ratings can
have the same basic construction, and a frame size is used in
reference to all those drive types.
HFT Hardware fault tolerance IEC 61508,
EN/IEC 62061
PFH Probability of dangerous failures per hour IEC 61508,
EN ISO 13849-1,
EN/IEC 62061,
EN/IEC 61800-5-2
PL
Performance level (levels are: a, b, c, d and e). Corresponds to SIL.
EN ISO 13849-1
RO Relay output
SC
Systematic capability
IEC 61508
SIL
Safety integrity level
IEC 61508,
IEC 61511,
EN/IEC 62061,
EN/IEC 61800-5-2
SILCL
Maximum SIL that can be claimed for a safety function or
subsystem
EN/IEC 62061
SS1
Safe stop 1
EN/IEC 61800-5-2
STO
Safe torque off
EN/IEC 61800-5-2
T1 Proof test interval or lifetime (the smaller one) IEC 61508,
EN/IEC 62061
Off3 Function in Drive: Emergency stop with configurable
deceleration time according to Cat. 1.
Profibus standard
Exclusion of liability
ABB is not responsible for the implementation, verification and validation of the overall safety system.
It is the responsibility of the system integrator (or other party) who is responsible for the overall system
and system safety. The system integrator (or other responsible party) must make sure that the entire
implementation complies with all relevant standards, directives and local electrical code, and that the
system is tested, verified and validated correctly.

7
Introduction to the manual
3ADW000508R0201+Q964 E-Stop cat.1 without opening mains contactor en b
Quick reference guide for implementing a safety system
Task

Select the appropriate functional safety standard for the implementation: EN ISO 13849-1,
EN/IEC 62061, IEC 61511 or other

If you select EN/IEC 62061 or IEC 61511, make a safety plan. See EN/IEC 62061.

Assess safety: analyze and evaluate risks (estimate SIL/PL) and define risk reduction
strategies.
Define the safety requirements

Design the safety system. The part of the design made by ABB is described in chapter
Option description and instructions on page 8.

If you made any changes to the delivered safety system, verify the achieved SIL/PL with, for
example, FSDT-01 Functional safety design tool or similar. See
Functional safety design tool
user’s manual (3AXD10000102417 [English]).

Connect the wiring. See section Wiring on page 14.

Set the parameters. See section Parameter settings on page 11.

Validate that the implemented system meets the safety requirements:
−
Do the acceptance test. See section Start-up and acceptance test on page 15

Write the necessary documentation.

8
Option description and instructions
3ADW000508R0201+Q964 E-Stop cat.1 without opening mains contactor en b
Option description and instructions
Contents this chapter
This chapter describes the +Q964 emergency stop option and instructs how to wire, start
up, test, validate, use and maintain it. The safety data is also given.
Overview
Option +Q964 corresponds to a controlled stop in accordance with stop category 1 (EN/IEC 60204-1).
The option corresponds to the Safe Stop 1 (SS1) function. After the emergency stop command has been
given, the drive first decelerates the motor(s) to zero speed according to a preset ramp time. Then, the
option activates the Safe torque off (STO), this prevents the drive from generating the torque required
to rotate the motor(s). The mains contactor/breaker of the drive is not opened.
For a detailed description of the Safe torque off function, see the appropriate hardware manual.
The SS1 and STO functions comply with EN/IEC 61800-5-2:2016. Option +Q964 has been designed
according to the principles of EN ISO13850.
For a complete list of related standards and European directives, see section
Related standards and
directives
on page 22 .
Note: Drives with the Prevention of unexpected start-up (POUS) option (+Q957):
If the user activates the POUS function during the emergency stop deceleration ramp, it overrides the
emergency stop function. POUS activates the Safe torque off (STO) function of the drive immediately
and the motor coasts to a stop. For more information on the POUS safety function, see Prevention of
unexpected start-up (option +Q957) for DCS8x0-A cabinet drives (3ADW000504).
Basic timing diagram
Running STO
Inactive
Speed
E-Stop
Drive Status Ramp down
Active

9
Option description and instructions
3ADW000508R0201+Q964 E-Stop cat.1 without opening mains contactor en b
Operation principle +Q964 E-Stop cat.1 without opening mains contactor
A41 Drive Control board P62 Emergency stop indication lamp
A61 Emergency stop safety relay S61 Emergency stop button
K61 Timer relay (OFF3 ACK) S62 Emergency stop reset button
K63 Relay for indication lamp T22 24 V power supply
U1 DCS880 Converter Q1/Q2 AC / DC switching device
CO 24 V from T22 or functional KSTOreset Reset indication for safety relay
control from any source

10
Option description and instructions
3ADW000508R0201+Q964 E-Stop cat.1 without opening mains contactor en b
Initial status: The drive is in operation and the motor(s) is running
Step
Operation
1.
The user activates the emergency stop with the emergency stop button [S61].
2.
The emergency stop safety relay [A61] switches off the digital input (Off3) on the
drive control board (A41) giving the emergency stop command.
The emergency stop safety relay [A61] switches off the power supply for the timer
relay [K61].
The E-Stop time counter of the emergency stop safety relay [A61] starts (user-
adjustable delay).
The break delay counter of the timer relay [K61] starts (non-user-adjustable delay).
3. The drive acknowledges the emergency stop command by energizing the relay
output RO2.
The relay output RO2 bridges relay contacts of [K61] keeping the power supply for
the delayed contacts of the safety relay powered.
Note: If the drive fails to acknowledge the receivable of the emergency stop
command in 2 seconds, the STO cuts off the drive control pulses preventing motor
control and torque generation.
4. The drive decelerates the motor to zero speed in emergency stop deceleration time
(parameter setting).
5.
The E-Stop time counter of the emergency stop safety relay [A61] trips and the relay
switches off the Safe torque off (STO) control signals on the drive control board
[A41]. The STO cuts off the drive control pulses preventing motor control and torque
generation.
6. At the same time, the power is taken away from relay K63. This energizes the
emergency stop indication lamp [P62].
7.
Normal operation resumes after the user:
−releases the emergency stop button [S61] to normal (up) position
−resets the emergency stop circuit with the emergency stop reset button [S62]
(the user must push the button for 0.1 to 3 seconds)
−resets the drive (if the STO indication parameter 31.22 has been set so that a
fault is generated)
−makes sure that the drive has received the start signal (depends on the
configuration, see the firmware manual)

11
Option description and instructions
3ADW000508R0201+Q964 E-Stop cat.1 without opening mains contactor en b
+Q964 Detailed timing chart
+Q964 Fault reaction function
Definition: A safety function requires a ‘fault reaction function’ that attempts to initiate a safe state if
the safety function's diagnostics detect a fault within the hardware/software that performs the safety
function.
The fault reaction function of the emergency stop safety relay [A61] trips if it detects a failure (short
circuit between signals, open circuits, redundancy fault when the emergency stop button is pushed) in
the safety circuit. The fault reaction function shifts the drive immediately into the safe state by
activating the Safe torque off (STO) function, switching on the drive emergency stop command, and
keeping it on until the detected fault has been repaired. The emergency stop indication lamp is on until
the fault has been repaired.
The emergency stop reset circuit must be open when the user releases the emergency stop button. The
emergency stop safety relay [A61] detects if the reset circuit is closed and the relay does not close. The
user must reset the safety relay, see section
Fault tracing on page 17. For a detailed description of the
emergency stop safety relay [A61], see section
Hardware settings on page 13.
The DCS880 STO function has its own internal fault diagnostics and fault reaction function.

12
Option description and instructions
3ADW000508R0201+Q964 E-Stop cat.1 without opening mains contactor en b
Parameter settings
This table lists the drive parameters settings for the +Q964 option. For more information, see the
firmware manual.
No.
Name
Value
Description
10.24 RO1 source P.31.98b11 Selects a drive signal to be connected to relay
output RO1. In this case, the RO1 is energized if
the Drive is in STO state and no STO related fault
is active.
10.27 RO2 source P.06.16b9 Selects a drive signal to be connected to relay
output RO2. In this case, the RO2 is energized if
the Drive is acknowledging Off3.
21.03
Emergency stop
mode
8: Emergency
ramp stop (Off3)
MC On /
9: Torque limit
MC on
Selects the way the motor is stopped when an
emergency stop command is received.
20.05
Emergency stop
source
DI1
Selects the source of the emergency stop signal.
In this case, the source is DI1.
23.23 Emergency stop
time
User-defined Select a suitable value. See the firmware manual
and section Hardware settings on page 13.
31.22 STO indication run/
stop
Fault/
Warning
Selects which indications are given when one or
both Safe torque off (STO) signals are switched
off or lost, depending on whether the drive is
Running / Stopped, when they occur.
Fault/Warning is the recommended setting.
When a fault occurs in the drive, the mains
contactor AC-B or DC-B is opened by the relay
XSMC:1/2.
46.01
Speed scaling to
zero
User-defined
Selects the maximum speed value used to define
the initial speed value used to define the
deceleration ramp rate. Select a suitable value.
See the firmware manual and section
Hardware settings on page 13.

13
Option description and instructions
3ADW000508R0201+Q964 E-Stop cat.1 without opening mains contactor en b
Hardware settings
Set the time delay of the emergency stop safety relay [A61] according to the application needs on the
safety relay.
Instructions:
1. Push and hold the Select button when "CUS" appears on the display to start with the custom
settings.
2. Push the Increment button to select the type of input configuration, [c.xx].
3. Push the Select button to confirm the selection and move to the selection of the reset mode. [r.xx]
4. Push the Increment button to select manual or automatic reset.
5. Push the Select button to confirm the selection and move to the timer functions, [d.xx].
6. Select the timer function type and set the time for the delay:
a. Push the Increment button to step between the timer functions.
b. Push and hold the Select button to confirm and enter the time value setting.
c. Push the Increment button to change the flashing segment.
d. Push the Select button to change what segment (or decimal point) of the display is flashing
e. Push and hold the Select button to confirm the time value.
7. Push the Select button to confirm the timer settings and move to the password settings.
8. Set password. (optional, PW=000 as default).
a. Push and hold the Select button to enter the password selection.
b. Push the Increment button to change the flashing digit.
c. Push the Select button to change what segment of the display is flashing
d. Push and hold the Select button to confirm the password.
9. Push the Select button to change to the store stage, [STO].
10. Push and hold the Select button to store and confirm the configuration.
11. Power cycle (power off and on) the safety relay.
12. The safety relay is in operation mode with a customized configuration.
For more information refer to original manual 2TLC010002M0201
Tune the delay for the emergency stop safety relay [A61] a little longer than the emergency stop
deceleration time defined by drive parameters 23.23 and 46.01 (see section
Parameter settings on
page 12).

14
Option description and instructions
3ADW000508R0201+Q964 E-Stop cat.1 without opening mains contactor en b
Wiring
At least one emergency stop button and one reset button need to be installed at a suitable place near
the machine. There must be double contacts in the emergency stop button and double wiring (two-
channel connection) between the button and the emergency stop safety relay [A61]. The safety relay
detects cross faults and faults across one contact from the emergency stop button.
If needed, install additional emergency stop buttons on site and wire them to the appropriate terminal
block inside the drive cabinet. See the circuit diagrams delivered with the drive. Follow the rules below:
1. Use only double-contact buttons approved for the emergency stop circuits.
2. Connect the emergency stop buttons with two conductors (two-channel connection).
Note: Keep the channels separate. If you use only one channel, or if the first and second channels are
connected together (for example, in a chain), the cross fault detection of the emergency stop safety
relay trips and activates the emergency stop command of the drive as it detects a redundancy fault.
3. Use shielded, twisted pair cable. We recommend a double-shielded cable and goldplated contacts in
the emergency stop button.
4. Ensure that the sum resistance for one channel (loop resistance) does not exceed 1 kOhm.
5. Follow the general control cable installation instructions given in the drive hardware manual.
You can also install additional reset buttons and indication lamps for the emergency stop circuit on
site. We recommend gold-plated contacts in the reset button. Wire the buttons to the appropriate
terminal block inside the drive cabinet. See the circuit diagrams delivered with the drive. Follow the
rules below:
1. Sum resistance of the external reset circuit may not exceed 1 kOhm.
2. Follow the general control cable installation instructions given in the drive hardware manual.

15
Option description and instructions
3ADW000508R0201+Q964 E-Stop cat.1 without opening mains contactor en b
+Q964 Start-up and acceptance test
You need the Drive composer PC tool or a control panel to perform the start-up and acceptance test.
Initial status: Make sure that the drive is ready for use, that is, you have done the tasks of the drive
start-up procedure. See the hardware manual.
Action
WARNING!
Follow the
Safety Instructions , page 4 . If you ignore them, injury or
death, or damage to the equipment can occur.
Checks and settings with no voltage connected
If any connections of the emergency stop circuit have been changed on site (such as
wiring of additional emergency stop buttons, connection of shipping splits of large
drives, etc.), verify that the connections are correct with the appropriate circuit
diagrams.

Check that the hardware settings relevant to the safety function are set as defined in
section Hardware settings on page 13
OK
Settings with voltage connected
Check that the parameters relevant to the safety function are set as defined in section
Parameter settings
on page 12 .

Ensure that the motor can run and be stopped freely during the test.

Start the drive and ensure that the motor is running. If possible, use a motor speed close
to the maximum speed of the application.

Push the emergency stop button [S61] (if installed).

Ensure that the drive stops the motor by decelerating and displays a warning. For a
description of the messages, see the firmware manual of the drive.

Ensure that the indication lamp [P62] switches on (if installed).

Ensure that you cannot restart the drive and motor from any control location: Ensure
that the motor does not start even if you switch the start signal off and on or push the
start key of the panel.

Turn the emergency stop button [S61] until it releases and returns to the up position

Push the emergency stop reset button [S62]. Ensure that the emergency stop reset
indication lamp [P62] switches off (if installed).

Switch off the drive start signal. If a fault message is generated, reset the drive. See
section Parameter settings on page 12 .

Restart the drive and motor and check that they operate normally.

Repeat the test from each operating location (each emergency stop button and reset
button).

Fill in and sign the acceptance test report which verifies that the safety function is safe
and approved for operation.


16
Option description and instructions
3ADW000508R0201+Q964 E-Stop cat.1 without opening mains contactor en b
Use of the safety function
Activating
6. Push the emergency stop button [S61]. The emergency stop activates and the button locks in “ON”
(open) position.
Resetting
1. Turn the emergency stop button [S61] until it releases.
2. Push the emergency stop reset button [S62]. The emergency stop indication lamp [P62] goes out,
the emergency stop deactivates.
Note: You must push the reset button [S62] for 0.1 to 3 seconds.
3. Reset the drive if necessary.
4. Make sure that the drive has received the start signal (depends on the configuration, see the
firmware manual).
5. You can now restart the drive.
Note: You have to reset the emergency stop circuit with the reset button [S62] also after you have
powered up the drive.
Emergency stop indications
When the emergency stop is on:
−the drive control program has the warning Safe torque off and warning Emergency stop
(Off1 or Off3) active.
−the emergency stop indication lamp [P62] is illuminated after the emergency stop deceleration ramp
time has passed.
−the mode LED of the emergency stop safety relay [A61] is flashing blue (during ramp) or steady blue
(STO state).

17
Option description and instructions
3ADW000508R0201+Q964 E-Stop cat.1 without opening mains contactor en b
+Q964 Fault tracing
This table describes the status LEDs of the emergency stop safety relay [A61].
Error code
Error type
Procedure for correction
E.10 – E.14
Internal error
1. Power cycle the safety relay.
2. If the error code remains, contact your
ABB Jokab Safety representative.
E.15
Relay hardware error
1. Power cycle the safety relay.
2. If the error code remains, contact your
ABB Jokab Safety representative.
E.16
+24 V power error
Check the supply voltage.
E.17
Temperature error
Check the ambient temperature.
E.20 – E.26 Input/Output (I/O) error 1. Power cycle the safety relay.
2. If the error code remains, contact your
ABB Jokab Safety representative.
E.30 – E.34
System error
1. Power cycle the safety relay.
2. If the error code remains, contact your
ABB Jokab Safety representative.
E.50 Internal error 1. Power cycle the safety relay.
2. If the error code remains, contact your
ABB Jokab Safety representative.
E.51
External error. Signal short on T1.
Examine T1 for short circuits.
E.52
External error. Signal short on T2.
Examine T2 for short circuits.
E.53 – E.58
Internal error
1. Power cycle the safety relay.
2. If the error code remains, contact your
ABB Jokab Safety representative

18
Option description and instructions
3ADW000508R0201+Q964 E-Stop cat.1 without opening mains contactor en b
This table describes the status LEDs of the safety relay [A61].
CH1
Mode
CH2
Comment
Action
off
off
off
The safety relay is not powered.
Check A1–A2 voltage and
connections.
green green green CH1 and CH2 accepted.
Reset done and outputs activated.
off flash
green
off CH1 and CH2 unaccepted. A timer
function is counting down while the
safety relay remains activated.
off
flash
green
green
CH1 unaccepted and CH2 accepted. A
timer function is counting down while
the safety relay remains activated.
green
flash
green
off
CH1 accepted and CH2 unaccepted. A
timer function is counting down while
the safety relay remains activated.
off
blue
off
No channels accepted.
Check CH1 and CH2
off
blue
green
CH1 unaccepted, CH2 accepted
Check CH1
green
blue
off
CH1 accepted, CH2 unaccepted
Check CH2
green
blue
green
CH1 and CH2 accepted, the safety
relay wait for reset.
Check reset settings, wiring
and reset circuit.
green
blue
fast flash
green
Two-channels error: CH2 has been
unaccepted and then accepted again
while CH1 remained accepted.
Check installation. Restore
by opening and closing
both CH:s at the same time.
fast flash
green
blue green Two-channels error: CH1 has been
unaccepted and then accepted again
while CH2 remained accepted.
Check installation. Restore
by opening and closing
both CH:s at the same time.
fast flash
green
blue
fast flash
green
Reading error on R1 and R2.
Check installation. Restore
by opening and closing
both CH:s at the same time.
off
flash blue
off
CH1 and CH2 unaccepted, a timer
function is counting down while
remaining deactivated.
off flash blue green CH1 unaccepted and CH2 accepted, a
timer function is counting down while
remaining deactivated.
green
flash blue
off
CH1 accepted and CH2 unaccepted, a
timer function is counting down while
remaining deactivated.
red fast flash
blue
red Failsafe mode, a new setting has
been stored.
Power cycle the unit to use
the stored setting.
red flash red red Failsafe mode, the system is waiting
for a new setting.
Enter and store a new
setting.
red fast flash
red
red The safety relay is in failsafe mode. Check error codes and
installation.
red fast flash
red
fast flash
red
Failsafe mode due to short circuit
between CH2 and 24 VDC or T1
Check error code.
Check and remove the short
circuit.
fast flash
red
fast flash
red
red
Failsafe mode due to short circuit
between CH1 and 24 VDC or T2
Check error code.
Check and remove the short
circuit.
For more information see 2TLC010002M0201

19
Option description and instructions
3ADW000508R0201+Q964 E-Stop cat.1 without opening mains contactor en b
+Q964 Maintenance
After the operation of the circuit is tested at start-up, it does need scheduled maintenance testing
during its specified lifetime depending on its usage.
In addition to proof testing, it is a good practice to check the operation of the function when other
maintenance routines of the machinery are carried out.
If you change any wiring or component after the start up, or restore parameters to their default values:
−Use only ABB approved spare parts.
−Register the change to the change log for the safety circuit.
−Test the safety function again after the change.
Follow the rules given in section
+Q964 Startup and acceptance test on page 15.
−Document the tests and store the report into the logbook of the machine.
Proof test interval
After the operation of the safety function is validated at start-up, the safety function must be
maintained by periodic proof testing. In high demand mode of operation, the maximum proof test
interval is 20 years. In low demand mode of operation, the maximum proof test interval is one year (high
or low demand as defined in IEC 61508, EN/IEC 62061 and EN ISO 13849-1).
Diagnostic test interval
Regardless of the mode of operation, it is a good practice to check the operation of the safety function
at least once a year. Do the test as described in section +Q952 Start-up and acceptance test on page 15.
The person responsible for the design of the complete safety function should also note the
Requirements from IEC61800-5-2:2016 / EN61800-5-2:2017 for the drives STO circuit:
6.2.2.1.4: Diagnostic test interval when the hardware fault tolerance is greater than zero
The diagnostic test interval of any subsystem of the PDS (SR) shall be appropriate to meet the
required PFH (see 6.2.2.1.1).
NOTE 2: For redundant parts of a PDS (SR) which cannot be tested without disrupting the
application in which the PDS (SR) is used (machine or plant) and where no justifiable technical
solution can be implemented, the following maximum diagnostic test intervals can be considered
as acceptable:
−one test per year for SIL 2, PL d / category;
−one test per three months for SIL 3, PL e / category 3;
−one test per day for SIL 3, PL e / category 4 (not applicable).
PL and category according to ISO 13849-1.
The noted DC Values are taken from SS-EN ISO 13849-1:2016 (E) chapter 4.5.3.
Regardless of the mode of operation, it is a good practice to check the operation of the safety function
at least once a year. Do the test as described in section +Q952 Start-up and acceptance test on page 15.
Competence
The maintenance and proof test activities of the safety function must be carried out by a competent
person with adequate expertise and knowledge of the safety function as well as functional safety, as
required by IEC 61508-1 clause 6.
Residual risk
The safety functions are used to reduce the recognized hazardous conditions. In spite of this, it is not
always possible to eliminate all potential hazards. Therefore the warnings for the residual risks must be
given to the operators.

20
Option description and instructions
3ADW000508R0201+Q964 E-Stop cat.1 without opening mains contactor en b
Intentional misuse
The safety circuit is not designed to protect a machine against intentional misuse
Decommissioning
When you decommission an emergency stop circuit or a drive, make sure that the safety of the machine
is maintained until the decommissioning is complete.
Safety data
The safety data given below is valid for the default design of the safety circuit. In case the final design
differs from the default, it is obligation of the changing person to calculate new safety data and deliver
it separately to the customer.
Safety data values
Drive module
frame size
SIL /
SILCL
SC
PL
PFH1) [1/h]
DC2)
[%]
Cat.
HFT
CCF
Lifetime
[a]
T13)4) [a]
H1 … H8
3
3
e
5.4 E-8
>90
3
1
80
20
20/1
1) PFH values are according to EN ISO 13849.
2) DC depends on the used STO mode and directly reflects to needed test interval.
3) See the recommendation of use CNB/M/11.050 published by the European coordination of notified
bodies for lower T1 requirement and also IEC61800-5-2:2016 / EN61800-5-2:2017 6.2.2.1.4 Note 2 for
guidance.
4) T1 = 20a is used with high demand mode of operation. See also section
Proof test interval on page 19.
Safety component types
Safety component types as defined in IEC 61508-2:
−emergency stop button: type A
−safety relays: type A
−drive STO circuit:
−frame sizes H1 ... H5: type A
Safety block diagram
The components that are included in the safety circuit are shown in the safety block diagram below.
E-Stop
Button
E-Stop
Safety
Relay
Drive
module
(STO)
Relevant failure modes
Internal failures of safety relays, the emergency stop button and STO. These failures are included in the
PFH value of the function.