Beckhoff TwinSAFE EJ19 Series User manual

Operating Instructions | EN
EJ19xx and EJ29xx
TwinSAFE EJ Modules with digital fail-safe inputs and outputs
2023-03-10 | Version: 2.0.0

Table of contents
EJ19xx and EJ29xx 3Version: 2.0.0
Table of contents
1 Notes on the documentation....................................................................................................................5
1.1 Disclaimer..........................................................................................................................................5
1.1.1 Trademarks........................................................................................................................5
1.1.2 Patents...............................................................................................................................5
1.1.3 Limitation of liability............................................................................................................6
1.1.4 Copyright............................................................................................................................6
1.2 Documentation issue status ..............................................................................................................7
1.3 References........................................................................................................................................8
1.4 Staff qualification...............................................................................................................................8
1.5 Safety and instruction........................................................................................................................9
1.5.1 Explanation of symbols ......................................................................................................9
1.6 Beckhoff Support and Service.........................................................................................................10
2 For your safety ........................................................................................................................................11
2.1 Duty of care.....................................................................................................................................11
2.2 Safety image signs..........................................................................................................................12
2.3 General safety instructions..............................................................................................................13
2.3.1 Before operation...............................................................................................................13
2.3.2 In operation ......................................................................................................................13
2.3.3 After operation..................................................................................................................14
3 System description TwinSAFE ..............................................................................................................15
3.1 Extension of the Beckhoff I/O system with safety functions............................................................15
3.2 Safety concept ................................................................................................................................15
3.3 EtherCAT plug-in module system (EJ)............................................................................................16
4 Intended use ............................................................................................................................................17
5 General operation / function ..................................................................................................................18
5.1 Environmental conditions ................................................................................................................18
5.1.1 EJ backplane....................................................................................................................18
5.2 Installation ......................................................................................................................................19
5.2.1 Safety instructions............................................................................................................19
5.2.2 Transport / storage...........................................................................................................19
5.2.3 Mechanical installation.....................................................................................................19
5.2.4 Electrical installation.........................................................................................................21
5.3 Digital input .....................................................................................................................................22
5.3.1 Parameterization..............................................................................................................22
5.3.2 Characteristic curve of the inputs.....................................................................................23
5.4 Digital output ...................................................................................................................................23
5.4.1 Parameterization..............................................................................................................24
5.4.2 Actuators..........................................................................................................................25
5.5 General technical data ....................................................................................................................26
5.6 Dimensions .....................................................................................................................................28
5.7 Status LEDs ....................................................................................................................................29
5.8 Diagnostic LEDs..............................................................................................................................29
5.8.1 Flashing codes.................................................................................................................29

Table of contents
EJ19xx and EJ29xx4 Version: 2.0.0
5.8.2 Flash code display ...........................................................................................................30
6 EJ1914......................................................................................................................................................31
6.1 Overview .........................................................................................................................................31
6.1.1 Version history .................................................................................................................31
6.2 Inserting the EJ module ..................................................................................................................32
6.3 Specific technical data ....................................................................................................................32
6.4 Safety parameters...........................................................................................................................33
7 EJ1918......................................................................................................................................................34
7.1 Overview .........................................................................................................................................34
7.1.1 Version history .................................................................................................................34
7.2 Inserting the EJ module ..................................................................................................................35
7.3 Specific technical data ....................................................................................................................35
7.4 Safety parameters...........................................................................................................................36
8 EJ1957......................................................................................................................................................37
8.1 Overview .........................................................................................................................................37
8.1.1 Version history .................................................................................................................37
8.2 Inserting the EJ module ..................................................................................................................37
8.3 Specific technical data ....................................................................................................................38
8.4 Safety parameters...........................................................................................................................38
9 EJ2914......................................................................................................................................................40
9.1 Overview .........................................................................................................................................40
9.1.1 Version history .................................................................................................................40
9.2 Inserting the EJ module ..................................................................................................................41
9.3 Specific technical data ....................................................................................................................41
9.4 Safety parameters...........................................................................................................................42
10 EJ2918......................................................................................................................................................43
10.1 Overview .........................................................................................................................................43
10.1.1 Version history .................................................................................................................43
10.2 Inserting the EJ module ..................................................................................................................44
10.3 Specific technical data ....................................................................................................................44
10.4 Safety parameters...........................................................................................................................45
11 Service life ...............................................................................................................................................46
12 Maintenance and cleaning .....................................................................................................................47
13 Decommissioning ...................................................................................................................................48
13.1 Disposal ..........................................................................................................................................48
13.1.1 Returning to the vendor....................................................................................................48
14 Appendix..................................................................................................................................................49
14.1 Volatility...........................................................................................................................................49
14.2 Focus of certificates ........................................................................................................................50
14.3 Certificate ........................................................................................................................................51

Notes on the documentation
EJ19xx and EJ29xx 5Version: 2.0.0
1 Notes on the documentation
1.1 Disclaimer
Beckhoff products are subject to continuous further development. We reserve the right to revise the
operating instructions at any time and without prior announcement. No claims for the modification of products
that have already been supplied may be made on the basis of the data, diagrams and descriptions in these
operating instructions.
In these operating instructions we define all permissible use cases whose properties and operating
conditions we can guarantee. The use cases we define are fully tested and certified. Use cases beyond this,
which are not described in these operating instructions, require the approval of Beckhoff Automation GmbH
& Co KG.
1.1.1 Trademarks
Beckhoff®, TwinCAT®, EtherCAT®, EtherCAT G®, EtherCAT G10®, EtherCAT P®, Safety over EtherCAT®,
TwinSAFE®, XFC®, XTS® and XPlanar® are registered and licensed trademarks of Beckhoff Automation
GmbH.
The use of other brand names or designations by third parties may lead to an infringement of the rights of
the owners of the corresponding designations.
1.1.2 Patents
The EtherCAT technology is protected by patent rights through the following registrations and patents with
corresponding applications and registrations in various other countries:
• EP1590927
• EP1789857
• EP1456722
• EP2137893
• DE102015105702
EtherCAT® is a registered trademark and patented technology,
licensed by Beckhoff Automation GmbH.
Safety over EtherCAT® is a registered trademark and patented
technology, licensed by Beckhoff Automation GmbH.

Notes on the documentation
EJ19xx and EJ29xx6 Version: 2.0.0
1.1.3 Limitation of liability
All components in this product as described in the operating instructions are delivered in a specific
configuration of hardware and software, depending on the application regulations. Modifications and
changes to the hardware and/or software configuration that go beyond the documented options are
prohibited and nullify the liability of Beckhoff Automation GmbH & Co. KG.
The following is excluded from the liability:
• Failure to observe these operating instructions
• Improper use
• Use of untrained personnel
• Use of unauthorized spare parts
1.1.4 Copyright
© Beckhoff Automation GmbH & Co. KG, Germany.
The distribution and reproduction of this document as well as the use and communication of its contents
without express authorization are prohibited.
Offenders will be held liable for the payment of damages. All rights reserved in the event of the grant of a
patent, utility model or design.

Notes on the documentation
EJ19xx and EJ29xx 7Version: 2.0.0
1.2 Documentation issue status
Version Comment
2.0.0 • Foreword changed to Notes on the documentation [}5] and For your safety [}11]
•Service life [}46] moved
•Maintenance and cleaning [}47] and Decommissioning [}48] added
• Appendix adapted and extended
1.4.0 • In chapter General technical data [}26] link to download page of certificates added
• Version histories added
• Updated software versions added
• The chapters "Inserting an EJ module" revised
•Beckhoff Support and Service [}10] updated
1.3.0 • Maximum permissible operating temperature changed
• Added warning in chapter General technical data [}26]
• New layout
1.2.0 • Description temperature measurement updated
1.1.0 • Description of the test pulses of the outputs updated
1.0.0 • Certificate added
• Technical data updated
• Description Digital input updated
0.0.2 • LED description adapted
0.0.1 • First preliminary version
Currentness
Please check whether you are using the current and valid version of this document. The current version can
be downloaded from the Beckhoff homepage at http://www.beckhoff.de/twinsafe. In case of doubt, please
contact Technical Support (see Beckhoff Support and Service [}10]).
Origin of the document
The original documentation is written in German. All other languages are derived from the German original.
Product features
Only the product properties specified in the current operating instructions are valid. Further information given
on the product pages of the Beckhoff homepage, in emails or in other publications is not authoritative.

Notes on the documentation
EJ19xx and EJ29xx8 Version: 2.0.0
1.3 References
No Version Title / description
[1] 1.3.0 or newer Design guide for EJ backplane for TwinSAFE modules
The design guide contains specifications for the development of an EJ
backplane when EJ modules are to be used
[2] 1.5.1 or newer Operating instructions for EJ6910 TwinSAFE Logic module
The document contains a description of the logic functions of the EJ6910
and their programming
[3] 3.1.0 or newer Documentation TwinSAFE-Logic-FB
The document describes the safety function blocks that are available in the
EJ6910 and form the safety application.
[4] 4.7 or newer EJxxxx|EtherCATplug-inmodules-designguide
The design guide contains general specifications for the development of an
EJ backplane.
1.4 Staff qualification
These operating instructions are intended exclusively for trained specialists in control technology and
automation with the relevant knowledge.
The trained specialist personnel must ensure that the applications and use of the described product meet all
safety requirements. This includes all applicable and valid laws, regulations, provisions and standards.
Trained specialists
Trained specialists have extensive technical knowledge from studies, apprenticeships or technical training.
Understanding of control technology and automation is available. Trained specialists can:
• Independently identify, avoid and eliminate sources of hazard.
• Apply relevant standards and directives.
• Implement specifications from accident prevention regulations.
• Evaluate, prepare and set up the workplaces.
• Evaluate, optimize and execute work independently.

Notes on the documentation
EJ19xx and EJ29xx 9Version: 2.0.0
1.5 Safety and instruction
Read the contents that refer to the activities you have to perform with the product. Always read the chapter
For your safety [}11] in the operating instructions.
Observe the warnings in the chapters so that you can handle and work with the product as intended and
safely.
1.5.1 Explanation of symbols
Various symbols are used for a clear arrangement:
1. The numbering indicates an action that should be taken.
• The bullet point indicates an enumeration.
[…] The square brackets indicate cross-references to other text passages in the document.
[1] The number in square brackets indicates the numbering of a referenced document.
1.5.1.1 Pictograms
In order to make it easier for you to find text passages, pictograms and signal words are used in warning
notices:
DANGER
Failure to observe will result in serious or fatal injuries.
WARNING
Failure to observe may result in serious or fatal injuries.
CAUTION
Failure to observe may result in minor or moderate injuries.
NOTE
Notes
Notes are used for important information on the product. The possible consequences of failure to observe
these include:
• Malfunctions of the product
• Damage to the product
• Damage to the environment
Information
This sign indicates information, tips and notes for dealing with the product or the software.

Notes on the documentation
EJ19xx and EJ29xx10 Version: 2.0.0
1.6 Beckhoff Support and Service
Support
Beckhoff Support offers technical advice on the use of individual Beckhoff products and system planning.
The employees support you in the programming and commissioning of sophisticated automation systems.
Hotline: [phone]
E-mail: [email protected]
Web: www.beckhoff.com/support
Training
Training in Germany takes place in our training center at the Beckhoff headquarters in Verl, at subsidiaries
or, by arrangement, at the customer's premises.
Hotline: [phone]
E-mail: [email protected]
Web: www.beckhoff.com/training
Service
The Beckhoff Service Center supports you with after-sales services such as on-site service, repair service or
spare parts service.
Hotline: [phone]
E-mail: [email protected]
Web: www.beckhoff.com/service
Download area
In the download area you can obtain product information, software updates, the TwinCAT automation
software, documentation and much more.
Web: www.beckhoff.com/download
Headquarters
Beckhoff Automation GmbH & Co. KG
Hülshorstweg 20
33415 Verl
Germany
Phone: [phone]
E-mail: [email protected]
Web: www.beckhoff.com
For the addresses of our worldwide locations, please visit our website at Global Presence.

For your safety
EJ19xx and EJ29xx 11Version: 2.0.0
2 For your safety
Read this chapter containing general safety information. In addition, always observe the safety instructions
and warnings in these operating instructions for your own safety, the safety of other persons and the safety
of the product.
When working with control and automation products, many dangers can result from careless or incorrect use.
Work particularly thoroughly, not under time pressure and responsibly towards other people.
2.1 Duty of care
Read entire documentation for TwinSAFE component
• TwinSAFE application manual
• EL6910 TwinSAFE logic terminal operating manual
• TwinSAFE Logic FB documentation manual
The operator must comply with all the requirements and notes specified in these operating instructions in
order to fulfill his duty of care. This includes in particular that you
• comply with the provisions defined in the chapter Limitation of liability [}6].
• only operate the TwinSAFE component when it is in perfect working order.
• provide the operating instructions in a legible condition and complete at the place of use of the
TwinSAFE component.
• do not remove the safety markings attached to the TwinSAFE component and maintain their legibility.
No disposal in domestic waste
Products marked with a crossed-out waste bin must not be disposed of with domestic
waste. The device is considered waste electrical and electronic equipment when it is
disposed of. Observe the national regulations for the disposal of waste electrical and
electronic equipment.

For your safety
EJ19xx and EJ29xx12 Version: 2.0.0
2.2 Safety image signs
On Beckhoff products you will find attached or lasered safety pictograms, which vary depending on the
product. They serve to serve to ensure safety for people and to prevent damage to the products. Safety
pictograms must not be removed and must be legible for the user.
Read and observe the operating instructions
Commissioning is only permitted if the operating instructions have been read and understood
beforehand. This applies in particular to the safety instructions and warnings.
Electrostatic sensitive components
Work with and on the TwinSAFE component is only permitted in protected workplaces.

For your safety
EJ19xx and EJ29xx 13Version: 2.0.0
2.3 General safety instructions
2.3.1 Before operation
Use in machines according to the Machinery Directive
Only use the TwinSAFE component in machines that comply with the Machinery Directive. This is how you
ensure safe operation.
Ensure traceability
Ensure the traceability of the TwinSAFE component via the serial number.
Use SELV/PELV power supply
Use a SELV/PELV power supply unit with an output-side voltage limit of Umax = 36VDC to supply the
TwinSAFE component with 24VDC.
Failure to observe this will endanger the safety function of the product. Depending on the machine, death
and danger to life, serious physical injury and damage to the machine may result.
Carry out commissioning test
Before commissioning, wiring faults to the sensors must be excluded. Before commissioning, carry out a
commissioning test. After a successful commissioning test, you can use the TwinSAFE component for the
intended safety-related task.
In case of wiring errors, the safety function of the product is at risk. Depending on the machine, death and
danger to life, serious bodily injury and damage to the machine may result.
Use permissible engineering tools and procedures
The TÜV SÜD certificate applies to the TwinSAFE component, the function blocks available in it, the
documentation and the engineering tool. Approved engineering tools are TwinCAT 3.1, the TwinSAFE
Loader and CODESYS Safety for EtherCAT Safety Module.
Procedures or engineering tools that deviate from this are not covered by the certificate. This is especially
true for externally generated xml files for the TwinSAFE import or externally generated automatic project
creation procedures.
2.3.2 In operation
Interference due to emitted interference
Do not operate the following devices in the vicinity of the TwinSAFE component: for example, radio
telephones, radios, transmitters or high-frequency systems.
TwinSAFE components comply with the requirements of the applicable electromagnetic compatibility
standards with regard to interference emission and immunity. If you exceed the limits for emitted interference
specified in the standards, the function of the TwinSAFE component may be impaired.

For your safety
EJ19xx and EJ29xx14 Version: 2.0.0
2.3.3 After operation
De-energize and switch off components before working on them
Check all safety-relevant equipment for functionality before working on the TwinSAFE component. Secure
the working environment. Secure the machine or plant against being inadvertently started up. Observe the
chapter Decommissioning [}48].

System description TwinSAFE
EJ19xx and EJ29xx 15Version: 2.0.0
3 System description TwinSAFE
3.1 Extension of the Beckhoff I/O system with safety
functions
The TwinSAFE products from Beckhoff enable convenient expansion of the Beckhoff I/O system with safety
components, and integration of all the cabling for the safety circuit within the existing fieldbus cable. Safe
signals can be mixed with standard signals as required. The transfer of safety-related TwinSAFE telegrams
is handled by the standard controller. Maintenance is simplified significantly thanks to faster diagnosis and
simple replacement of components.
The following basic functionalities are included in the TwinSAFE components:
digital inputs (e.g. EL19xx, EP1908), digital outputs (e.g. EL29xx), drive components (e.g. AX5805) and logic
units (e.g. EL6900, EL6910). For a large number of applications, the complete safety sensor and actuator
technology can be wired on these components. The required logical link of the inputs and the outputs is
handled by the EL69xx. In addition to Boolean operations, the EL6910 now also enables analog operations.
3.2 Safety concept
TwinSAFE: Safety and I/O technology in one system
• Extension of the familiar Beckhoff EJ system with TwinSAFE components
• Safe and non-safe EJ components can be combined as required
• Logical link of the I/Os in the EJ69xx TwinSAFE logic terminal
• Suitable for applications up to SIL3 according to EN61508:2010 and Cat4, PLe according to
ENISO13849-1:2015
• Safety-relevant networking of machines via bus systems
• In the event of an error, all TwinSAFE components always switch to the wattless and therefore safe
state
• No safety requirements for the higher-level standard TwinCAT system
Safety over EtherCAT protocol (FSoE)
• Transfer of safety-relevant data via any media (“genuine black channel”)
• TwinSAFE communication via fieldbus systems such as EtherCAT, Lightbus, PROFIBUS, PROFINET
or Ethernet
• IEC 61508:2010 SIL 3 compliant
• FSoE is IEC standard (IEC 61784-3-12) and ETG standard (ETG.5100)
Fail-safe principle (fail stop)
The basic rule for a safety system such as TwinSAFE is that failure of a part, a system component or the
overall system must never lead to a dangerous condition. The safe state is always the switched off and
wattless state.
CAUTION
Safe state
For all TwinSAFE components the safe state is always the switched-off, wattless state.

System description TwinSAFE
EJ19xx and EJ29xx16 Version: 2.0.0
3.3 EtherCAT plug-in module system (EJ)
Similar to the EtherCAT terminal system, a module strand consists of a Bus Coupler and any desired I/O
modules. In contrast to the EtherCAT Terminals, however, the EtherCAT plug-in modules have no spring-
loaded contacts, since the wiring level is outsourced: communication, signal distribution and the supply of
power to the modules takes place via plug connectors on the back side of the modules and the conductive
tracks of the signal distribution board.
The EtherCAT plug-in modules and the plug level for sensors and actuators can be placed flexibly on the
signal distribution board. Signal distribution boards can be user-developed or provided as custom solutions
by Beckhoff Automation GmbH & Co. KG.
Fig.1: EtherCAT plug-in module system (EJ)

Intended use
EJ19xx and EJ29xx 17Version: 2.0.0
4 Intended use
WARNING
Caution - Risk of injury!
TwinSAFE EJ modules may only be used for the purposes described below!
The TwinSAFE EJ modules expand the application range of the Beckhoff EtherCAT system by functions that
enable it to be used in the field of machine safety as well. The TwinSAFE EJ modules are designed for
machine safety functions and directly associated to industrial automation tasks. It is therefore approved only
for applications with a defined fail-safe state. This safe state is the wattless state.
The TwinSAFE EJ modules are suitable for operation on an EJ distribution board.
WARNING
System limits
The TÜV-SÜD certificate applies to the TwinSAFE EJ modules, the function blocks available in it, the
documentation and the engineering tool. Approved engineering tools are TwinCAT 3.1, TwinSAFE Loader
and CODESYS Safety for EtherCAT Safety Module. Any deviations from these procedures or tools,
particularly externally generated xml files for TwinSAFE import or externally generated automatic project
creation procedures, are not covered by the certificate.
WARNING
Power supply
An SELV/PELV power supply unit with a voltage limit of Umax= 36VDC on the output side must be used to
supply power for the TwinSAFE EJ modules with 24VDC. Failure to observe this can result in a loss of
safety.
WARNING
Commissioning test
Before the TwinSAFE EJ modules can be used for the safety task, the user must carry out a commissioning
test so that sensor and actuator wiring errors can be ruled out.
CAUTION
Note the Machinery Directive
The TwinSAFE EJ modules may only be used in machines according to the machinery directive.
CAUTION
Ensure traceability
The buyer has to ensure the traceability of the device via the serial number.

General operation / function
EJ19xx and EJ29xx18 Version: 2.0.0
5 General operation / function
5.1 Environmental conditions
Please ensure that the TwinSAFE components are only transported, stored and operated under the specified
conditions (see technical data)!
WARNING
Risk of injury!
The TwinSAFE components must not be used under the following operating conditions.
• under the influence of ionizing radiation (that exceeds the level of the natural environmental radiation)
• in corrosive environments
• in an environment that leads to unacceptable soiling of the TwinSAFE component
NOTE
Electromagnetic compatibility
The TwinSAFE components comply with the current standards on electromagnetic compatibility with regard
to spurious radiation and immunity to interference in particular.
However, in cases where devices such as mobile phones, radio equipment, transmitters or high-frequency
systems that exceed the interference emissions limits specified in the standards are operated near
TwinSAFE components, the function of the TwinSAFE components may be impaired.
5.1.1 EJ backplane
CAUTION
EJ backplane
Make sure that the TwinSAFE EJ modules are used only on an EJ backplane that has been developed and
manufactured in accordance with the Design guide for EJ backplanes for TwinSAFE modules (see
References [}8]).
Pin-out and coding of the TwinSAFE EJ modules
The pin-out and description of the coding via the coding pins of the TwinSAFE EJ modules are
listed in the document Design guide for EJ backplanes for TwinSAFE modules (see References
[}8]).

General operation / function
EJ19xx and EJ29xx 19Version: 2.0.0
5.2 Installation
5.2.1 Safety instructions
Before installing and commissioning the TwinSAFE components please read the safety instructions in the
foreword of this documentation.
5.2.2 Transport / storage
Use the original packaging in which the components were delivered for transporting and storing the
TwinSAFE components.
CAUTION
Note the specified environmental conditions
Please ensure that the digital TwinSAFE components are only transported and stored under the specified
environmental conditions (see technical data).
5.2.3 Mechanical installation
WARNING
Risk of injury!
Bring the bus system into a safe, de-energized state before starting installation, disassembly or wiring of
the devices!
5.2.3.1 Control cabinet / terminal box
The TwinSAFE EJ modules must be installed in a control cabinet or terminal box with IP54 protection class
according to IEC60529 as a minimum.

General operation / function
EJ19xx and EJ29xx20 Version: 2.0.0
5.2.3.2 Installation position and minimum distances
For the prescribed installation position the backplane is mounted horizontally (EJ plug connector vertical),
and the connection surfaces of the EJ modules face forward (see diagram below). The EJ modules are
ventilated from below, which enables optimum cooling of the electronics through convection. The direction
indication “down” corresponds to the direction of positive acceleration due to gravity.
Fig.2: Installation position and minimum distances
In order to ensure optimum convection cooling, the distances to neighboring devices and to control cabinet
walls must not be smaller than those shown in the diagram.
5.2.3.3 Temperature measurement
The temperature measurement consists of an EJ1100 EtherCAT coupler, to which EJ modules are attached,
based on the typical distribution of digital and analog signal types at a machine. On the EJ6910 a safety
project is active, which reads safe inputs and enables safe outputs during the measurement.
External heat sources / radiant heat / impaired convection
The maximum permissible ambient temperature of 45°C was checked with the example
configuration described above. Impaired convection; an unfavorable location near heat sources or
an unfavorable configuration of the EtherCAT EJ modules may result in overheating of the modules.
The key parameter is always the maximum permitted internally measured temperature of 110°C,
above which the TwinSAFE components switch to safe state and report an error. The internal
temperature can be read from the TwinSAFE components via CoE.