B&R X20cSC2212 User manual

X20(c)SC2212
Data sheet V1.141 X20(c)SC2212 Translation of the original documentation 1
X20(c)SC2212
Information:
B&R makes every effort to keep data sheets as current as possible. From a safety point of view, how-
ever, the current version of the data sheet must always be used.
The certified, currently valid data sheet can be downloaded from the B&R website www.br-automa-
tion.com.
Organization of notices
Safety notices
Contain only information that warns of dangerous functions or situations.
Signal word Description
Danger! Failure to observe these safety guidelines and notices will result in death, severe injury or substantial damage to property.
Warning! Failure to observe these safety guidelines and notices can result in death, severe injury or substantial damage to property.
Caution! Failure to observe these safety guidelines and notices can result in minor injury or damage to property.
Notice! Failure to observe these safety guidelines and notices can result in damage to property.
Table 1: Organization of safety notices
General notices
Contain useful information for users and instructions for avoiding malfunctions.
Signal word Description
Information: Useful information, application tips and instructions for avoiding malfunctions.
Table 2: Organization of general notices
1 General information
The modules are equipped with 6 safe digital inputs and 2 safe digital outputs. They are designed for a nominal
voltage of 24 VDC.
The modules can be used to read in digital signals and control actuators in safety-related applications up to PL
e or SIL 3.
The modules are equipped with filters that are individually configurable for switch-on and switch-off behavior. The
modules also provide pulse signals for diagnosing the sensor line.
The outputs are designed using semiconductor technology so that the safety-related characteristics do not depend
on the number of switching cycles. The "high-side high-side" variant (output type B) is required for actuators with
reference potential (e.g. enable inputs on frequency inverters). It is important to observe the special notices for
the wiring in this case. Safe digital output modules are equipped with protection against automatic restart in the
event of network errors.
These modules are designed for X20 16-pin terminal blocks.
•6 safe digital inputs, sink circuit
•6 pulse outputs
•Software input filter configurable for each channel
•2 safe digital outputs, output type B with 0.5 A, source circuit
•Integrated output protection

X20(c)SC2212
2 Data sheet V1.141 X20(c)SC2212 Translation of the original documentation
1.1 Function
Safe digital inputs
The module is equipped with safe digital input channels. It can be flexibly used for a wide range of tasks involving
the reading of digital signals in safety-related applications up to PL e or SIL 3.
The module is equipped with filters that are individually configurable for switch-on and switch-off behavior. Switch-
on filters are used to filter out signal disturbances. Switch-off filters are used to smooth testing gaps in external
signal sources – i.e. OSSD signals – so that unintended cutoffs can be avoided.
The input signals of signal pairs (channels 1 and 2, 3 and 4, etc.) are monitored in the module for simultaneity.
The maximum permitted discrepancy of inputs of a signal pair is configurable. Here, the signals of dual-channel
evaluation directly represent the safe signal of a 2-channel sensor, such as from an E-stop button or safety light
curtain.
The module provides pulse signals for diagnosing the sensor line. By default, each pulse signal provides a unique
pulse pattern derived from the module's serial number and pulse channel number. This allows any pulse signals
to be combined in one signal cable and still cover any cross fault combinations in the cable. The pulse check can
also be disabled to connect electronic sensors with separate line monitoring (OSSD signals).
Safe digital outputs
The module is equipped with safe digital output channels. It can be flexibly used for controlling actuators in safe-
ty-related applications up to PL e or SIL 3.
The outputs are designed using semiconductor technology so that the safety-related characteristics do not depend
on the number of operating cycles. In order to handle all situations involving actuators, there are basically 2 dif-
ferent types of outputs: the high-side - low-side variant (type A) and the high-side - high-side variant (type B).
Type A outputs have safety-related advantages since the actuator can be cut off in its connection cable in all error
scenarios. Type A outputs are limited to actuators without ground potential (e.g. relays, valves). For actuators with
ground potential (e.g. enable inputs on frequency inverters), type B outputs are required. It is important to observe
the special notices for the cabling in this case.
Safe digital output channels provide protection against automatic restart when network errors occur. Function
blocks needed to fulfill additional requirements regarding protection against automatic restart are available in
SafeDESIGNER. The outputs can also be controlled by the standard application. The combination of safety-related
control and standard control is arranged such that the execution of a cutoff request always has top priority. For
diagnostic purposes, the outputs are designed to be read back.
Depending on the product, the safe digital output channels are equipped with current measurement for detecting
open circuits. This function can also be used to monitor muting lamps, for example.
The testing of the semiconductors that is necessary from a safety point of view results in what are known as
OSSD low phases in many products. The effect of this is that when an output is active (high state), a switch-off
situation (low state) occurs for a very brief amount of time. The test can be cut off if this behavior leads to problems
in the application. Observe the associated safety-related notices!
openSAFETY
This module uses the protective mechanisms of openSAFETY when transferring data to the various bus systems.
Because the data is encapsulated in the openSAFETY container in a fail-safe manner, the components on the
network that are involved in the transfer do not require any additional safety-related features. At this point, only
the safety-related characteristic values specified for openSAFETY in the technical data are to be consulted. The
data in the openSAFETY container undergoes safety-related processing only when received by the remote sta-
tion; for this reason, only this component is involved from a safety point of view. Read access to the data in the
openSAFETY container for applications without safety-related characteristics is permitted at any point in the net-
work without affecting the safety-related characteristics of openSAFETY.

X20(c)SC2212
Data sheet V1.141 X20(c)SC2212 Translation of the original documentation 3
1.2 Coated modules
Coated modules are X20 modules with a protective coating for the electronics component. This coating protects
X20c modules from condensation.
The modules' electronics are fully compatible with the corresponding X20 modules.
Information:
For simplification purposes, only images and module IDs of uncoated modules are used in this data
sheet.
The coating has been certified according to the following standards:
•Condensation: BMW GS 95011-4, 2x 1 cycle
•Corrosive gas: EN 60068-2-60, Method 4, exposure 21 days
Contrary to the specifications for X20 system modules without safety certification and despite the tests performed,
X20 safety modules are NOT suited for applications with corrosive gases (EN 60068-2-60)!
2 Overview
Module X20SC2212
Safe digital inputs
Number of inputs 6
Nominal voltage 24 VDC
Input filter
Hardware
Software
≤150 µs
Configurable between 0 and 500 ms
Input circuit Sink
Pulse outputs
Design Push-Pull
Switching voltage I/O power supply minus residual voltage
Safe digital outputs
Number of outputs 2
Nominal voltage 24 VDC
Nominal output current 0.5 A
Total nominal current 1 A
Output protection Thermal short circuit shutdown, integrated protection for switching inductive loads
Table 3: Digital mixed modules
3 Order data
Model number Short description Figure
Digital mixed modules
X20SC2212 X20 safe digital mixed module, 6 safe digital inputs, configurable
input filter, 6 pulse outputs, 24 VDC, 2 safe type B1 digital out-
puts, 24 VDC, 0.5 A, OSSD <500 µs
X20cSC2212 X20 safe digital mixed module, coated, 6 safe digital inputs, con-
figurable input filter, 6 pulse outputs, 24 VDC, 2 safe type B1
digital outputs, 24 VDC, 0.5 A, OSSD <500 µs
Required accessories
Bus modules
X20BM33 X20 bus module, for X20 SafeIO modules, internal I/O power
supply continuous
X20BM36 X20 bus module, for X20 SafeIO modules, with node number
switch, internal I/O power supply continuous
X20cBM33 X20 bus module, coated, for X20 SafeIO modules, internal I/O
power supply continuous
Terminal blocks
X20TB5F X20 terminal block, 16-pin, safety-keyed
Table 4: X20SC2212, X20cSC2212 - Order data

X20(c)SC2212
4 Data sheet V1.141 X20(c)SC2212 Translation of the original documentation
4 Technical data
Model number X20SC2212 X20cSC2212
Short description
I/O module 6 safe digital inputs, 6 pulse outputs, 24 VDC, 2 safe
type B1 digital outputs, 24 VDC, 0.5 A, OSSD <500 µs
General information
B&R ID code 0xBDA5 0xDD9D
System requirements
Automation Studio 3.0.81.15 or later 4.0.16 or later
Automation Runtime 3.00 or later V3.08 or later
SafeDESIGNER 2.70 or later 3.1.0 or later
Safety Release 1.2 or later 1.7 or later
Status indicators I/O function per channel, operating state, module status
Diagnostics
Module run/error Yes, using status LED and software
Outputs Yes, using status LED and software
Inputs Yes, using status LED and software
Blackout mode
Scope Module
Function Module function
Standalone mode No
Max. I/O cycle time 1 ms
Power consumption
Bus 0.25 W
Internal I/O 1.4 W
Electrical isolation
Channel - Bus Yes
Channel - Channel No
Certifications
CE Yes
KC Yes -
EAC Yes
UL cULus E115267
Industrial control equipment
HazLoc cCSAus 244665
Process control equipment
for hazardous locations
Class I, Division 2, Groups ABCD, T5
ATEX Zone 2, II 3G Ex nA nC IIA T5 Gc
IP20, Ta (see X20 user's manual)
FTZÚ 09 ATEX 0083X
DNV GL Temperature: A (0 - 45°C)
Humidity: B (up to 100%)
Vibration: A (0.7 g)
EMC: B (bridge and open deck)
Functional safety cULus FSPC E361559
Energy and industrial systems
Certified for functional safety
ANSI UL 1998:2013
Functional safety IEC 61508:2010, SIL 3
EN 62061:2013, SIL 3
EN ISO 13849-1:2015, Cat. 4 / PL e
IEC 61511:2004, SIL 3
Functional safety EN 50156-1:2004
Safety characteristics
EN ISO 13849-1:2015
MTTFD 2500 years
Mission time Max. 20 years
IEC 61508:2010,
IEC 61511:2004,
EN 62061:2013
PFH / PFHd
Module <1*10-10
openSAFETY wired Negligible
openSAFETY wireless <1*10-14 * Number of openSAFETY packets per hour
PFD <2*10-5
Proof test interval (PT) 20 years
Table 5: X20SC2212, X20cSC2212 - Technical data

X20(c)SC2212
Data sheet V1.141 X20(c)SC2212 Translation of the original documentation 5
Model number X20SC2212 X20cSC2212
Safe digital inputs
EN ISO 13849-1:2015
Category Cat. 3 when using individual input channels,
Cat. 4 when using input channel pairs (e.g. SI1 and SI2) or more than 2 input channels 1)
PL PL e
DC >94%
IEC 61508:2010,
IEC 61511:2004,
EN 62061:2013
SIL CL SIL 3
SFF >90%
Safe digital outputs
EN ISO 13849-1:2015
Category Cat. 3 if parameter "Disable OSSD = Yes-ATTENTION",
Cat. 4 if parameter "Disable OSSD = No" 1)
PL PL d if parameter "Disable OSSD = Yes-ATTENTION",
PL e if parameter "Disable OSSD = No" 1)
DC >60% if parameter "Disable OSSD = Yes-ATTENTION",
>94% if parameter "Disable OSSD = No" 1)
IEC 61508:2010,
IEC 61511:2004,
EN 62061:2013
SIL CL SIL 2 if parameter "Disable OSSD = Yes-ATTENTION",
SIL 3 if parameter "Disable OSSD = No" 1)
SFF >60% if parameter "Disable OSSD = Yes-ATTENTION",
>90% if parameter "Disable OSSD = No" 1)
I/O power supply
Nominal voltage 24 VDC
Voltage range 24 VDC -15% / +20%
Integrated protection Reverse polarity protection
Safe digital inputs
Nominal voltage 24 VDC
Input characteristics per EN 61131-2 Type 1
Input filter
Hardware ≤150 μs
Software Configurable between 0 and 500 ms
Input circuit Sink
Input voltage 24 VDC -15% / +20%
Input current at 24 VDC Max. 3.28 mA
Input resistance Min. 7.33 kΩ
Error detection time 100 ms
Isolation voltage between channel and bus 500 Veff
Switching threshold
Low <5 VDC
High >15 VDC
Line length between pulse output and input Max. 60 m with unshielded line
Max. 400 m with shielded line
Safe digital outputs
Variant FET, 2x positive switching, type B1, output level readable
Nominal voltage 24 VDC
Nominal output current 0.5 A
Total nominal current 1 A
Output protection Thermal short-circuit shutdown, integrated protection for switching inductive loads 2)
Braking voltage when switching off inductive loads Max. 45 VDC
Error detection time 1 s
Isolation voltage between channel and bus 500 Veff
Peak short-circuit current Max. 12 A
Leakage current when switched off <500 µA
Residual voltage ≤300 mVDC at nominal current
Switching voltage I/O power supply minus residual voltage
Max. switching frequency 1000 Hz
Test pulse length Max. 500 µs
Max. capacitive load 100 nF
Current on loss of ground
IOUT <1 mA
IGND <180 mA
Pulse outputs
Variant Push-Pull
Nominal output current 20 mA
Output protection Shutdown of individual channels in the event of overload or short circuit 2)
Peak short-circuit current 25 A for 15 µs
Short-circuit current 100 mAeff
Leakage current when switched off 0.1 mA
Residual voltage 3 VDC
Table 5: X20SC2212, X20cSC2212 - Technical data

X20(c)SC2212
6 Data sheet V1.141 X20(c)SC2212 Translation of the original documentation
Model number X20SC2212 X20cSC2212
Switching voltage I/O power supply minus residual voltage
Total nominal current 120 mA
Operating conditions
Mounting orientation
Horizontal Yes
Vertical Yes
Installation elevation above sea level 0 to 2000 m, no limitation
Degree of protection per EN 60529 IP20
Ambient conditions
Temperature
Operation
Horizontal mounting orientation 0 to 60°C -40 to 60°C 3)
Vertical mounting orientation 0 to 50°C -40 to 50°C 4)
Derating See section "Derating".
Storage -40 to 85°C
Transport -40 to 85°C
Relative humidity
Operation 5 to 95%, non-condensing Up to 100%, condensing
Storage 5 to 95%, non-condensing
Transport 5 to 95%, non-condensing
Mechanical properties
Note Order 1x safety-keyed terminal block separately.
Order 1x safety-keyed bus module separately.
Spacing 25+0.2 mm
Table 5: X20SC2212, X20cSC2212 - Technical data
1) The related danger warnings in the technical data sheet must also be observed.
2) The protective function is provided for max. 30 minutes for a continuous short circuit.
3) Up to hardware upgrade <1.10.1.0 and hardware revision <E0: -25 to 60°C
4) Up to hardware upgrade <1.10.1.0 and hardware revision <E0: -25 to 50°C
Danger!
Operation outside the technical data is not permitted and can result in dangerous states.
Information:
For detailed information about installation, see chapter "Installation notes for X20 modules" on page
50.
Derating
The derating curve refers to standard operation and can be shifted to the right by the specified derating bonus if
in a horizontal mounting orientation.
Module X20SC2212
Derating bonus
At 24 VDC +5°C
Dummy module on the left +2.5°C
Dummy module on the right +0°C
Dummy module on the left and right +5°C
With double PFH / PFHd+0°C
Table 6: Derating bonus

X20(c)SC2212
Data sheet V1.141 X20(c)SC2212 Translation of the original documentation 7
Inputs
The number of inputs that should be used at the same time depends on the operating temperature and the mounting
orientation. The resulting amount can be looked up in the following table.
Horizontal (0 to 60°C, coated: -40 to 60°C) Vertical (0 to 50°C, coated: -40 to 50°C)
Table 7: Derating in relation to operating temperature and mounting orientation
Outputs
The maximum total nominal current depends on the operating temperature and the mounting orientation. The
resulting total nominal current can be found in the following table.
Horizontal (0 to 60°C, coated: -40 to 60°C) Vertical (0 to 50°C, coated: -40 to 50°C)
Table 8: Derating in relation to operating temperature and mounting orientation
Information:
Regardless of the values specified in the derating curve, the module cannot be operated above the
values specified in the technical data.

X20(c)SC2212
8 Data sheet V1.141 X20(c)SC2212 Translation of the original documentation
5 LED status indicators
Figure LED Color Status Description
Off No power to module
Single flash Reset mode
Double flash Updating firmware
Blinking PREOPERATIONAL mode
r Green
On RUN mode
Off No power to module or everything OK
Pulsating Boot loader mode
Triple flash Updating safety-related firmware
e Red
On Error or I/O component not provided with voltage
e + r Red on / green single flash Invalid firmware
Input state of the corresponding digital input
On Warning/Error on an input channel
Blinking Error in dual-channel evaluation (synchronous blinking of 2 af-
fected channels)
Red
All on Error on all channels, connection to the SafeLOGIC controller
not OK or booting not yet completed
1 to 6
Green On Input set
Output status of the corresponding digital output
On Warning/Error on an output channelRed
All on Error on all channels, connection to the SafeLOGIC controller
not OK or booting not yet completed
1 to 2
Orange On Output set
Off RUN mode or I/O component not provided with voltage
1 s
Boot phase, missing X2X Link or defective processor
1 s
Safety PREOPERATIONAL state
Modules that are not used in the SafeDESIGNER application
remain in the PREOPERATIONAL state.
1 s
Safe communication channel not OK
1 s
The firmware for this module is a non-certified pilot customer
version.
1 s
Boot phase, faulty firmware
Red
On Safety state active for the entire module (= "FailSafe" state)
SE
The "SE" LEDs separately indicate the status of safety processor 1 ("S" LED) and safety processor 2
("E" LED).
Table 9: Status display
Danger!
Constantly lit "SE" LEDs indicate a defective module that must be replaced immediately.
It is your responsibility to ensure that all necessary repair measures are initiated after an error occurs
since subsequent errors can result in a hazard!

X20(c)SC2212
Data sheet V1.141 X20(c)SC2212 Translation of the original documentation 9
6 Pinout
Pulse 1
SI 1
Pulse 3
Pulse 2
SI 2
Pulse 4
SI 5
SO 1
SI 6
SO 2
GND GND
SE
SI6
SI2
e
SO1
SI5
SI3
SI1
r
X20 SC 2212
SI 4
Pulse 6
SI 3
Pulse 5
SI4
SO2
Figure 1: X20SC2212 - Pinout

X20(c)SC2212
10 Data sheet V1.141 X20(c)SC2212 Translation of the original documentation
7 Connection examples
The typical connection examples in this section only represent a selection of the different wiring methods. The user
must take error detection into account in each case.
Information:
For details about connection examples (such as circuit examples, compatibility class, max. number of
supported channels, terminal assignments, etc.), see chapter Connection examples of the "Integrated
safety technology" user's manual (MASAFETY-ENG).
7.1 Module behavior when GND connection is lost
In this section and all of its subsections, the term "connection element" is to be understood as follows for the
respective system (X20, X67):
•X20: e.g. terminal block
•X67: e.g. M12, M8
A loss of GND on the module may cause current to flow from the module via the output or the GND connection
of the connection element.
If power supplies, actuators or GND connections are grounded, the user must ensure that no grounding wires or
any associated potential short circuits or open circuits will cause any additional impermissible GND connections.
The two currents IOUT and IGND are module-specific and must be taken from the technical data.
Type B output
Protection
A
A
24 V
GND
1
Logic
SELV
IOUT
IGND
SOx
GND
Figure 2: Module behavior when GND connection is lost
Danger!
The user is responsible for preventing any safety problems that could occur as a result of the IOUT and
IGND currents specified in the technical data and the selected method of installation.

X20(c)SC2212
Data sheet V1.141 X20(c)SC2212 Translation of the original documentation 11
7.1.1 GND feedback to connection element, no external GND
If the module is used in the following wiring mode, then a loss of GND will not cause any problems because current
is not able to flow via IOUT or IGND.
Type B output
Actuator
Protection
1
24 V
GND
Logic
IOUT
IGND
SELV
SOx
GND
Figure 3: GND feedback to connection element
Danger!
Other wiring methods
If another wiring method is used, the user must ensure that a safety-critical state cannot occur if there
are 2 external faults (open circuit, etc.). In addition, the current specifications for IOUT and IGND must be
taken into consideration in the event that the GND connection is lost.

X20(c)SC2212
12 Data sheet V1.141 X20(c)SC2212 Translation of the original documentation
7.1.2 Using external GND without GND from connection element
Type B output
Actuator
Protection
1
2
24 V
GND
Logic
IOUT
IGND
SELV
SOx
GND
Figure 4: External GND only
Fault sequence:
•Fault ① (defective protective component):
A component connected to GND on the output short circuits or behaves like an ohmic resistor. This fault
is not always detected.
•Fault ② (open circuit on module GND):
The module loses its direct connection to GND and current begins to flow through the defective protective
component → IOUT → actuator.
As a result, current above the maximum value permitted by the module is supplied to the actuator.
Danger!
This type of installation can cause hazardous situations and is therefore NOT permitted.

X20(c)SC2212
Data sheet V1.141 X20(c)SC2212 Translation of the original documentation 13
7.1.3 Using external GND and GND from connection element
A2
Actuator
Type B output
Logic
SELV
24 V
GND
1
Protection
IOUT
IGND
SOx
GND
Figure 5: Possible connection error
Fault sequence:
•Fault ① (open circuit on module GND):
No error is detected and the module continues to operate normally due to the additional external GND
connection.
•Fault ② (open circuit on actuator's protective circuit):
The module loses its direct connection to GND and current begins to flow through IGND → damping diode
→ actuator.
As a result, current above the maximum value permitted by the module is supplied to the actuator.
Danger!
This type of installation can cause hazardous situations and is therefore NOT permitted.
Possible remedies
This wiring method could be made possible, for example, by using two wires to complete the connection that
experienced the open circuit fault in ② → see connection Ⓐ.
Information:
The diode in the actuator shown in the "Possible connection error" image is intended only to illustrate
the error and is not mandatory.

X20(c)SC2212
14 Data sheet V1.141 X20(c)SC2212 Translation of the original documentation
7.2 Connecting single-channel sensors with contacts
Input 2
Pulse 2
Pulse 1
Input 1
Input 2
Pulse 2
Pulse 1
Input 1
Figure 6: Connecting single-channel sensors with contacts
Single-channel sensors with contacts are the simplest connection.
With this connection, the module satisfies Category 3 requirements in accordance with EN ISO 13849-1:2015. Be
aware that this statement applies only to the module and not to the wiring shown. You are responsible for wiring
the sensor according to the required category.
7.3 Connecting two-channel sensors with contacts
Input 2
Pulse 2
Pulse 1
Input 1
Input 2
Pulse 2
Pulse 1
Input 1
Input 2
Pulse 2
Pulse 1
Input 1
Figure 7: Connecting two-channel sensors with contacts
Sensors with contacts can be connected directly to a safe digital input module via two channels. Dual-channel
evaluation is handled directly by the module.
With this connection, the module satisfies Category 4 requirements in accordance with EN ISO 13849-1:2015. Be
aware that this statement applies only to the module and not to the wiring shown. You are responsible for wiring
the sensor according to the required category.

X20(c)SC2212
Data sheet V1.141 X20(c)SC2212 Translation of the original documentation 15
7.4 Connecting multi-channel sensors with contacts
Input 2
Pulse 2
Pulse 1
Input 1
Input n
Pulse m
Input 2
Pulse 2
Pulse 1
Input 1
Input n
Pulse m
Input 2
Pulse 2
Pulse 1
Input 1
Input n
Pulse m
Figure 8: Connecting multi-channel sensors with contacts
Multi-channel switches (mode selector switches, switching devices with "shift key" capability) can be connected
to multiple safe digital input modules.
If signals are evaluated internally in the module (see image to the left), the same pulse must be configured for all
of the inputs being used. If signals are evaluated across all modules (see image to the right), all of the inputs must
be configured to use an external pulse. In this type of application, pulse evaluation with the "default" pulse is not
suitable; therefore, a separate pulse signal with approx. 4 ms low-phase is available.
In this case, multi-channel evaluation must be handled in the safety application (PLCopen function block
"SF_ModeSelector"). The category achieved per EN ISO 13849-1:2015 in this way depends on the error models
of the switching element (e.g. mode selector switch) and must be examined in combination with the error detection
present in the PLCopen function block.
7.5 Connecting electronic sensors
OSSD2
OSSD1
24 VDC
OSSD
24 VDC
Input 2
Pulse 2
Pulse 1
Input 1
Input 2
Pulse 2
Pulse 1
Input 1
Figure 9: Connecting electronic sensors
Electronic sensors (light curtains, laser scanners, inductive sensors, etc.) can be connected directly to safe digi-
tal input modules. The switching thresholds of the input channels must be taken into account for these types of
applications.
With single-channel wiring (see image on the left), the module satisfies Category 3 requirements in accordance
with EN ISO 13849-1:2015. With two-channel wiring (see image on the right), the module satisfies Category 4
requirements in accordance with EN ISO 13849-1:2015. Be aware that this statement applies only to the module
and not the wiring or connected electronic sensor. You are responsible for wiring the sensor in accordance with
the required category and within the specifications set forth by the manufacturer of the electronic sensor.

X20(c)SC2212
16 Data sheet V1.141 X20(c)SC2212 Translation of the original documentation
7.6 Using the same pulse signals
Input 2
Input 1
Pulse 1
Pulse 2
Input n
Input 3
Input 2
Input 1
Pulse 1
Pulse 2
Input n
Input 3
Figure 10: Using the same pulse signals
When using the same pulse signals for different inputs, they must be isolated from one another. Otherwise, damage
to the cables may cause errors that are not detected by the module.
Danger!
If the same pulse signals are routed in the same cable, damage to the cable can cause cross faults be-
tween the signals to occur that are not detected by the module. This can result in dangerous situations.
For this reason, signal lines with the same pulse signal should be routed in different cables, or you
should implement other error prevention measures in accordance with EN ISO 13849-2:2012.
Danger!
It is especially important to check the wiring when using the same pulse signal for two inputs that are
located next to each other on the terminal. Pay special attention to ensure that poor wiring has not
resulted in the two inputs being connected together.
7.7 Connecting safety-oriented actuators for Type B outputs
SO n +
GND GND
SO n + SO n +
GND GND
SO n +
M
Figure 11: Connecting safety-oriented actuators for Type B outputs
Safety actuators (contactors, motors, muting lamps, valves) that are compatible with module performance data
can be connected directly.
With this connection, the module satisfies Category 4 requirements in accordance with EN ISO 13849-1:2015. Be
aware that this statement applies only to the module and not to the wiring shown. You are responsible for wiring
the actuator in accordance with the required category and the characteristics of actuator.
If the actuators contain an inverse diode or electronic components, then the special instructions in section "Module
behavior when GND connection is lost" must be followed.

X20(c)SC2212
Data sheet V1.141 X20(c)SC2212 Translation of the original documentation 17
8 Error detection
8.1 Internal module errors
The red "SE" LED makes it possible to evaluate the following error states:
•Module error, e.g. defective RAM, defective CPU, etc.
•Overtemperature/Undertemperature
•Overvoltage/Undervoltage
•Incompatible firmware version
Errors that occur within the module are detected according to the requirements of the standards listed in the
certificate and within the minimum safety response time specified in the technical data. After this occurs, the module
enters a safe state.
The internal module tests needed for this are only performed, however, if the module's firmware has been booted
and the module is in either the PREOPERATIONAL state or the OPERATIONAL state. If this state is not achieved
(for example, because the module has not been configured in the application), then the module will remain in the
boot state.
BOOT mode on a module is clearly indicated by a slowly blinking SE LED (2 Hz or 1 Hz).
The error detection time specified in the technical data is relevant only for detecting external errors (i.e. wiring
errors) in single-channel structures.
Danger!
Operating the safety module in BOOT mode is not permitted.
Danger!
A safety-related output channel is only permitted to be switched off for a maximum of 24 hours. The
channel must be switched on by the end of this period so that the module's internal channel test can
be performed.

X20(c)SC2212
18 Data sheet V1.141 X20(c)SC2212 Translation of the original documentation
8.2 Wiring errors
The wiring errors described in section "Error detection" are indicated by the red channel LED according to the
application.
If a module detects an error, then:
•The channel LED is lit constantly red.
•Status signal (e.g. (Safe)ChannelOK, (Safe)InputOK, (Safe)OutputOK, etc.) is set to (SAFE)FALSE.
•Signal "SafeDigitalInputxx" or "SafeDigitalOutputxx" is set to SAFEFALSE.
•An entry is generated in the logbook.
Danger!
Recognizable errors (see the following chapters) are detected by the module within the error detection
time. Errors not recognized by the module (or not recognized on time) that can lead to safety-critical
states must be detected using additional measures.
Danger!
It is your responsibility to ensure that all necessary repair measures are initiated after an error occurs
since subsequent errors can result in a hazard!
8.2.1 Type B output channels
Danger!
As illustrated in the following circuit examples, the connected actuators can be connected to GND on
the load side. Connecting actuators on just one side without a GND supply is not permitted, however.
This would cause a series connection of the actuators in the event of an open circuit, which could then
cause a hazardous module error.
GND
SO n +
GND
SO m +
GND
SO n +
GND
SO m +
Correct:
With external GND
Correct:
Without external GND Incorrect
GND
SO n +
GND
SO m +
Figure 12: Invalid wiring

X20(c)SC2212
Data sheet V1.141 X20(c)SC2212 Translation of the original documentation 19
8.2.2 Connecting single-channel sensors with contacts
By default, every input channel is assigned a dedicated pulse output. This pulse output issues a specific signal
that helps detect wiring problems, such as a short circuit to 24 VDC, GND or other signal channels. The status
of the connected switches is indicated by channel-specific LEDs. The LEDs "OO" and "OC" have no significance
with this type of connection.
With this type of connection in combination with the configuration "Pulse Mode = Internal", the modules can detect
the following errors:
Error on contactError
Open Closed
Ground fault on the pulse output Detected Detected
Pulse output shorted to 24 VDC Detected Detected
Cross fault between the pulse output and the other pulse signal Detected Detected
Ground fault on signal input Not detected Detected
Signal input shorted to 24 VDC Detected Detected
Cross fault between the signal input and the other pulse signal Detected Detected
Cross fault between the pulse output and the signal input Not detected Not detected
Open circuit Not detected Not detected
Table 10: SI error detection when "Pulse mode = Internal"
8.2.3 Connecting two-channel sensors with contacts
By default, every input channel is assigned a dedicated pulse output. This pulse output issues a specific signal that
helps detect wiring problems, such as a short circuit to 24 VDC, GND or other signal channels.
The status of the connected switches is signaled via channel-specific LEDs, and the status of the dual-channel
evaluation is signaled via the "OO" (for combinations with N.C./N.C. contacts) or "OC" LED (for combinations with
N.C./N.O. contacts). On module types that do not have these LEDs, errors detected in the dual-channel evaluation
are indicated by the respective channel LED blinking red.
With this type of connection in combination with the configuration "Pulse Mode = Internal" and combined with dual-
channel evaluation in the module or in SafeDESIGNER, the modules can detect the following errors:
Error on contactError
Open Closed
Ground fault on the pulse output Detected Detected
Pulse output shorted to 24 VDC Detected Detected
Cross fault between the pulse output and the other pulse signal Detected Detected
Ground fault on signal input Not detected Detected
Signal input shorted to 24 VDC Detected Detected
Cross fault between the signal input and the other pulse signal Detected Detected
Cross fault between the pulse output and the signal input Detected1) Not detected
Open circuit Not detected Detected1)
Table 11: SI error detection with "Pulse Mode = Internal" combined
with dual-channel evaluation in the module or in SafeDESIGNER
1) Dual-channel evaluation of the module.

X20(c)SC2212
20 Data sheet V1.141 X20(c)SC2212 Translation of the original documentation
8.2.4 Connecting multi-channel sensors with contacts
The status of the connected switches is indicated by channel-specific LEDs. The LEDs "OO" and "OC" have no
significance with this type of connection.
With this wiring, the following errors can be detected:
Error
Ground fault on the pulse output Detected
Pulse output shorted to 24 VDC Detected
Cross fault between the pulse output and the other pulse signal Detected1)
Ground fault on signal input (active signal) Detected1)
Ground fault on signal input (inactive signal) Not detected
Signal input shorted to 24 VDC Detected
Cross fault between the signal input and the other pulse signal Detected1)
Cross fault between the pulse output and the signal input (active signal) Not detected
Open circuit (active signal) Detected1)
Cross fault between the pulse output and the signal input (inactive signal) Detected1)
Open circuit (inactive signal) Not detected
Table 12: SI error detection when "Pulse Mode = External"
1) Detected by PLCopen function block "SF_ModeSelector" in the application.
Danger!
If "Pulse Mode = External" is used in the channel configuration, then an additional TOFF filter with
5 ms is enabled in the module. The corresponding information regarding the TOFF filter must also be
considered when using the "Pulse Mode = External" setting.
Information:
With the configuration "Pulse Mode = Internal", the pulses have a low phase of approximately 300 µs.
This low phase is designed such that no additional degradation of the total response time can occur in
the system. If line lengths exceed the max. line length (see technical data), problems may occur with
this configuration. In these cases, configuration "Pulse Mode = External" can also be useful for normal
sensors with contacts. The reduced error detection and extension of the total response time must be
taken into account, however.
8.2.5 Connecting electronic sensors
A pulse pattern cannot be used with electronic sensors. The input channels must therefore be configured to
"Pulse Mode = No Pulse".
Any gaps when testing the connected OSSD outputs must be masked out with the module's cutoff filter in order
to avoid an unintended shutdown.
Danger!
With the configuration "Pulse Mode = No Pulse", the module itself is not able to detect wiring errors.
Internal errors are still detected, however. All errors resulting from incorrect or faulty wiring must be
handled through supplementary measures per EN ISO 13849-2:2012 or by the connected device.
Danger!
Configuring a switch-off filter lengthens the safety response time. The configured filter value must be
added to the total response time.