CARLO GAVAZZI Certus CM22D0A User manual

Certus Multifunction
safety module
Carlo Gavazzi Automation Via Milano 13, 20020 Lainate (Milano) Italy
ENITDEFRESDAZH
Instruction manual
Betriebsanleitung
Manual de instrucciones
Manuale d’istruzione
Manuel d’instructions
Brugervejledning
使用手册

3
EN
Rev.01 | CERTUS Multifunction Safety Module | © 2017 | CARLO GAVAZZI Automation
Table of contents
1. Introduction................................................................................................... 5
2. Safety ........................................................................................................... 6
2.1 Functional safety .....................................................................................................6
2.2 Lift safety standards .................................................................................................6
2.3 Assistant system software .........................................................................................6
3. Features ....................................................................................................... 7
4. Function block diagram ................................................................................ 8
5. Function description ...................................................................................... 8
6. Devices......................................................................................................... 9
6.1 Device ...................................................................................................................9
6.2 Device with HEX-switch ............................................................................................9
6.3 Device without HEX-switch........................................................................................9
6.4 Lift levelling device ..................................................................................................9
7. Terminal layout............................................................................................. 10
8. Installation and environmental conditions..................................................... 10
9. Wiring .......................................................................................................... 11
9.1 Power supply..........................................................................................................11
9.2 Wiring advice ........................................................................................................11
10. Function description ...................................................................................... 12
10.1 Normally open (NO) outputs ..................................................................................12
10.2 Normally closed (NC) outputs.................................................................................12
10.3 Delayed NO outputs..............................................................................................12
11. Available output configuration (CM22D0A only) ............................................ 13
11.1 Changing the output configuration via HEX-Switch.....................................................13
11.2 Output configuration..............................................................................................14
12. Operation configuration................................................................................ 15
12.1 Recognizing the operational configuration ...............................................................15
12.1.1 E-STOP / E-GATE 4 wire...................................................................................16
12.1.2 E-STOP / E-GATE 3 wire...................................................................................17
12.1.3 E-STOP / E-GATE 2 wire...................................................................................18
12.1.4 ESPD / (Type 4 / Type 2) two channels ..............................................................19
12.1.5 Testable ESPD (Type 2 / Type 4) ........................................................................20
12.1.6 Safety mat.......................................................................................................21
12.2 Lift application (CL20D2A only) .............................................................................22
12.3 Lift levelling example ............................................................................................23
13. Start behaviour............................................................................................. 24
13.1 Manual start .........................................................................................................24
13.2 Automatic start......................................................................................................24
14. Operation..................................................................................................... 25
14.1 Status indicator .....................................................................................................25
14.2 Blink code ............................................................................................................26
14.3 Error code............................................................................................................26
15. Technical data............................................................................................... 27
16. Dimensions................................................................................................... 28
17. Inspection and maintenance.......................................................................... 29
18. EU/EC Declaration of conformity ................................................................... 30

4Rev.01 | CERTUS Multifunction Safety Module | © 2017 | CARLO GAVAZZI Automation
EN
CERTUS - Instruction manual
Multifunction safety module
Ownership
Copyright © 2017, CARLO GAVAZZI Automation SpA All rights reserved in all countries.
CARLO GAVAZZI Automation SpA reserves the right to modify or make improvements to this document
without advance notice.
Safety messages
The following symbols are used in this document to indicate warning concerning the user and/or the
safety device:
Danger!a potentially risky situation which could lead to death or serious physical injury.
Warning: indicates actions that if not observed may lead to damage to the device.
Attention: Only CARLO GAVAZZI technical service personnel are authorized to open the safety
device.
General information
Information: This manual should be consulted for all situations related to installation and use.
It must be kept in good condition and in a clean location accessible to all operators.
Service and warranty
In the event of malfunction or requests for information please contact the CARLO GAVAZZI branch or
distributor in your country.

5
EN
Rev.01 | CERTUS Multifunction Safety Module | © 2017 | CARLO GAVAZZI Automation
CERTUS
Description
Certus offers a range of safety modules, compliant with international standards, designed to provide the
most comprehensive protection for equipment and personnel. They enable safety functions, accepting
different types of input using the same product. This means cost saving and fewer product codes to
manage.
1. Introduction
All rights to this document are reserved by Carlo Gavazzi Automation S.p.A. Copies may be made
for internal use only.
Please do not hesitate to make any suggestions for improving this document.
Validity of documentation
This documentation is valid only for Certus Family products and until new documentation is published.
This instruction manual describes the function, operation and installation of the product.
It is the user responsibility to decide if the safety module is correctly suited to the application
How to use the documentation
This user manual must be read and completely understood by personnel dealing with all the uses of
the safety modules prior to carrying out any operation involving the module.
Please keep this document for future reference.
All the operations described in this manual must be carried out exclusively by specialized personnel,
carefully following all the instructions given.
Use of the product
These safety modules are able to monitor multiple safety functions of industrial machinery, protecting
operators from dangerous moving parts of the machine.
The CERTUS modules provide a safety-related interruption of a safety circuit.
The safety modules are compliant with the requirements of EN ISO 13849-1, EN 61508, EN 62061
and EN 81-20 and -50 (only CL20D2A) and may be used in applications with:
Device
CM22D0A / CM40D0A
/ CM30D1A CL20D2A
1 E-stop •
2 E-gate •
3 Limit switch •
4 Non-contact switch •
5 Safety light curtains (ESPE Type 4, Type 2) •
6 Safety light beam (single beam) •
7 Safety mat •
8 Lift levelling •

6Rev.01 | CERTUS Multifunction Safety Module | © 2017 | CARLO GAVAZZI Automation
EN
2. Safety
2.1. Functional safety
The EC machinery directive stipulates that machinery should not pose a danger (risk assessment in
accordance with EN ISO 12100). Given that there is no such thing as zero risk in technology, the aim
is to achieve an acceptably low level of risk. If safety is dependent on control systems, these must be
designed so that the probability of functional faults is sufficiently low.
To meet this requirement, it makes sense to use harmonized standards like EN ISO 13849-1 and/or
EN 62061.
Before using a Certus multifunction module it is necessary to perform a safety assessment in accordance
with the Machinery Directive.
Functional safety is guaranteed for the product as a single component. However, this does not
guarantee the functional safety of the overall system. In order to achieve the required safety level for
the overall system, the safety requirements for the plant/machine must be defined, and then how these
requirements must be implemented from a technical standpoint.
Certus modules are built to the following safety levels: SIL 3, SILCL 3, PL e, Cat. 4, in accordance with
the applicable standards. However, the definitive SIL and PL of the application will depend on the
number of safety components, their parameters and the connections that are made, as per the risk
analysis.
An in-depth risk analysis must be performed to determine the appropriate safety level for each specific
application, on the basis of all the applicable standards.
Installation/configuration of the Certus module is the sole responsibility of the installer or the user.
The device must be installed/configured in accordance with the specific risk analysis of the application
and all the applicable standards.
Carlo Gavazzi is not responsible for these operations or for any risks in connection with them.
Reference should be made to the manual and to the relative product and/or application standards
to ensure correct use of any devices connected to the Certus module within the specific application.
The ambient temperature where the system is installed must be compatible with the operating
temperature parameters stated on the product label and in the specifications.
For all matters concerning safety, if necessary contact your country’s official safety authority or trade
association.
2.2 Lift Safety Standars
In 2014 The European Committee for Standardization released two new safety standards for the
construction of lifts and for the testing of lift components. Both new standards applied to both passenger
and goods lifts.
EN 81-20 defines the technical requirements for the construction of lifts.
EN 81-50 defines design rules, calculations and tests for lift components.
The Certus CL20D2A module is compliant with these Standards (EN 81-20 and EN 81-50).
2.3 Assistant system Software
http://www.gavazzi-automation.com/nsc/HQ/EN/safety_modules
http://www.dguv.de/webcode/e34183

7
EN
Rev.01 | CERTUS Multifunction Safety Module | © 2017 | CARLO GAVAZZI Automation
3. Features
Certus offers a range of safety modules, compliant with international standards, designed to provide
the most comprehensive protection for equipment and personnel. They enable safety functions,
accepting different types of input. This means cost saving and fewer product codes.
Features Description
4 OSSD safety outputs Certus provides up to 4 Output Signal Switching Devices. The correct opening and closing of the safety function OSSDs is tested
automatically
Selectable delay time Can be easily set via the hex-switch, selected from a choice of 15 pre-defined configurations, from 0 to 30 sec. The main model
CM22D0A can include 2 delayed digital outputs
2 auxiliary outputs All the modules provide at least 1 auxiliary output.
Up to 2 auxiliary outputs for CL20D2A
4 LEDs on the front panel This indicate the status and any possible errors during operation
Manual or automatic start
selectable
Certus modules can be connected using different types of input: E-stop, E-gate, limit switch, non-
contact switch, safety light curtains (ESPE Type 4, Type2), safety light beam (single beam), safety mat,
lift levelling.
Information:
See Paragraph 6 (Devices) for types of unit
Note: The values for PL, SIL, Cat. are maximum values and may differ according to the chosen
application and/or the chosen trigger elements
Safety parameters
55°C (CMxxxx) 65°C (CL20D2A)
ISO 13849-1 Cat. Cat. 4
ISO 13849-1 Performance Level PL e
IEC 61508 Safety Integrity Level SILCL 3
IEC 62061 Safety Integrity Level SIL 3
DIN EN 81-20:2014-11 No Yes
DIN EN 81-50:2015-02 No Yes
MTTFd 2403 a 1268 a
PFH 1,89 E-09 3,58 E-09
SFF 99% 99%
DCavg 99% 99%
ß2,00 E-02 2,00 E-02
ßD1,00 E-02 1,00 E-02
MTTR 8h 8h
MRT 8h 8h
Information:
Safety functions were not evaluated by UL

8Rev.01 | CERTUS Multifunction Safety Module | © 2017 | CARLO GAVAZZI Automation
EN
5. Function description
Function description
Release Outputs (Safety) A The release circuits are provided by the outputs
O1,O2,O3,O4
BTheir correct functionality is permanently monitored
Trigger Inputs A The trigger outputs are provided by the outputs S11
S21
BTheir correct functionality is permanently monitored
Failure A A faulty device must be exchanged immediately, means the machine must never be driven by a
faulty device
BThe Mean Time To Repair is assumed to be 8 hours
CThe error code shown should be reported
DA list of error codes is shown in paragraph 14.3
Safe Condition ACERTUS switches into safe condition when an error
occurs repeatedly (software filter)
BAll release outputs (NOs AND NCs) and the trigger
outputs are LOW
CThe safe condition can only be reversed by a power-
on- reset (switch CERTUS off and on)
Fail-Safe A In case of a Fail-Safe all outputs (S11, S21,
O1,O2,O3,O4) are switched off
Software A In a fail safe mode, the software remains in a special
state which can only be reverse by a power-on reset
BA blinkcode indicating the error condition is given on the LED CHANNEL. The LED POWER will also be
blinking (see paragraph 14.2)
4. Functional block diagram
Power StartInput
A2 S12 S22 S11 S21 S35 S36A1
01
02
03
04
MCU1
Controller1
MCU2
Controller2
Safety
Output
circuit

9
EN
Rev.01 | CERTUS Multifunction Safety Module | © 2017 | CARLO GAVAZZI Automation
6. Devices
6.1 Device
CM22D0A CM40D0A CM30D1A CL20D2A
Output
NO 2 4 3 2
NO delayed 2 0 0 0
Aux NC 0 0 1 1
Aux NO 0 0 0 1
Assembly with
hex-switch ✓- - -
Comment Lift
6.2 Device with HEX-Switch
CM22D0A A Includes 4NO or...
BIncludes 3NO 1NC or...
C2NO undelayed + 2NO delayed
DThe delay can easily be selected via the hex switch on the front panel by using a screwdriver.
(See paragraph 11.1)
6.3 Device without HEX-Switch
CM40D0A A Provides 4 semiconductor safety outputs (OSSD) not
delayed
CM30D1A A Provides 3 semiconductor safety outputs (OSSD) not
delayed
B1 auxiliary output (NC) not delayed
6.4 Lift levelling device
CL2OD2A A Made especially for lift applications
BProvides 2 semiconductor safety outputs (OSSD) not
delayed
C2 auxiliary output (1 NC and 1 NO) not delayed
DThis CERTUS module is compliant with standards EN
81-20 and 81-50
Warning:
EN 81-20 defines the technical requirements for lift construction.
EN 81-50 provides the framework for design and testing of lift components

10 Rev.01 | CERTUS Multifunction Safety Module | © 2017 | CARLO GAVAZZI Automation
EN
S21
S12 S22 35S11A1
A2 O1 O2 O3 O4 36
24VCC (+)
Entrada digital
Entrada digital
Arranque man/auto
Entrada digital
Entrada digital
24VCC (-)
Salida OSSD
Salida OSSD
Salida OSSD
Salida OSSD
Modo de funcionamiento
24VDC (-)
OSSD 输出
操作模式
OSSD 输出
OSSD 输出
OSSD 输出
24VDC (+)
数字量输入
数字量输入
数字量输入
数字量输入
手动/自动启动
24VCC (+)
Entrée TOR
Entrée TOR
Dém. man. / auto.
Entrée TOR
Entrée TOR
24VCC (-)
Sortie sécurité OSSD
Sortie sécurité OSSD
Sortie sécurité OSSD
Sortie sécurité OSSD
Mode opération
24VDC (+)
Digitaler Eingang
Man / aut start
24VDC (-)
OSSD Ausgang
OSSD Ausgang
OSSD Ausgang
OSSD Ausgang
Betriebsart
Digitaler Eingang
Digitaler Eingang
Digitaler Eingang
S21
S12 S22 35S11A1
A2 O1 O2 O3 O4 36
24VCC (+)
Entrada digital
Entrada digital
Arranque man/auto
Entrada digital
Entrada digital
24VCC (-)
Salida OSSD
Salida OSSD
Salida OSSD
Salida OSSD
Modo de funcionamiento
24VDC (-)
OSSD 输出
操作模式
OSSD 输出
OSSD 输出
OSSD 输出
24VDC (+)
数字量输入
数字量输入
数字量输入
数字量输入
手动/自动启动
24VCC (+)
Entrée TOR
Entrée TOR
Dém. man. / auto.
Entrée TOR
Entrée TOR
24VCC (-)
Sortie sécurité OSSD
Sortie sécurité OSSD
Sortie sécurité OSSD
Sortie sécurité OSSD
Mode opération
24VDC (+)
Digitaler Eingang
Man / aut start
24VDC (-)
OSSD Ausgang
OSSD Ausgang
OSSD Ausgang
OSSD Ausgang
Betriebsart
Digitaler Eingang
Digitaler Eingang
Digitaler Eingang
Made in Germany
EC type examined by TÜV
8. Installation and environmental conditions
Warning:
CERTUS must be installed in a control cabinet with a protection grade of at least IP5X,
otherwise dampness or dust may lead to malfunction.
Warning:
Avoid installation during storms.
Danger!
If the safety module is tampered with, it can no longer ensure the safety of the operator
and the warranty is void.
Information:
Use the notch on the rear of the unit to attach it to a DIN rail.
Ensure the unit is mounted securely on a vertical DIN rail (35 mm) by using a fixing
element (e.g. retaining bracket or an end angle).
Information:
Do not dispose of the packaging in the environment.
Information:
CERTUS must only be used within an ambient temperature range of 0 - 55°C, away
from any condensation or conducting fluids. To avoid possible interference, keep the
connecting conductors separate from the power conductors.
7. Terminal layout

11
EN
Rev.01 | CERTUS Multifunction Safety Module | © 2017 | CARLO GAVAZZI Automation
9.1 Power supply
9.2 Wiring milestones
9. Wiring
The supply voltage is 24VDC ± 20%.
The external power supply fulfills the supply voltage requirements of EN 61496-1.
1Warning:
Failure to comply may result in high risk for operating personnel.
2Warning:
Max. terminal tightening torque: 0.4Nm (for all connections)
3Danger! To prevent contact welding, a fuse should be connected before the output
contacts.
4Danger! Sufficient fuse protection must be provided on all output contacts with capacitive
and inductive loads.
5Danger!
Ensure the wiring and EMC requirements of IEC 60204-1 are met.
6Information:
Information given in 15. Technical data must be understood.
7
Information:
It is good practice to separate the power supply of the control unit from that of
other electrical appliances (electrical motors, inverters, frequency variators) or
other sources of disturbance.
8
Information:
It is recommended to use conductors with section and length adequate for the
terminals, currents and distances involved, ensuring that the conductors are not
excessively tight, that their positioning avoids potential damage and that they
are not in the way of people or things.
9Do not exceed the electrical ratings.

12 Rev.01 | CERTUS Multifunction Safety Module | © 2017 | CARLO GAVAZZI Automation
EN
10. Function description
OSSD - Output Signal Switching Device
Not only must the output be safe, but also the complete wiring and surroundings. In order to reach
cat. 4 of functional safety, two outputs must be wired as a pairs, so that a defect of one output cannot
cause a total loss of safety, as the other one of the pair is still able to switch off the dangerous parts
of the plant (or machine). So wiring similar to the following has to be carried out:
OSSD - Output signal switching device
10.1 Normally Open (NO) Outputs AThe NO outputs react by closing their respective NO
relays. At Startup are switched off.
BThey switch on when the safety sensors are active
and the application has been started.
CIn case of a Fail-Safe the NOs are switched off.
DIf the power supply fails, the NOs are switched off.
10.2 Normally Closed (NC) Output AIn most cases the NC types react alternately to the NO types, if the NOs are switched on, the NCs are
switched off and vice versa
BDuring the configuration the NCs are switched off
CIn case of a Fail-Safe the NCs are switched off
DIf the power supply fails, the NCs are switched off
EThe NC is not a safety output
10.3 Delayed NO Outputs A There are 2 NOs delayed
Input sensors
incl. Start active
inactive
Direct
Outputs ON
OFF
Delayed
Outputs ON
OFF T delay T delay
BThe behaviour is off-delayed and retriggerable
24V
S21
S12
S22
35
S11
A1
A2
03
04
36
M1
K1
K2
01 02
3~
M
Lorem ipsum

13
EN
Rev.01 | CERTUS Multifunction Safety Module | © 2017 | CARLO GAVAZZI Automation
11. Available output configuration (CM22D0A only)
0
1
23456
7
8
9
A
B
C
D
E
F
2 NO + 2 NO
delayed 0.5”
2 NO + 2 NO
delayed 1” 2 NO + 2 NO
delayed 1.5”
2 NO + 2 NO
delayed 2”
2 NO + 2 NO
delayed 3”
2 NO + 2 NO
delayed 4”
2 NO + 2 NO
delayed 5”
2 NO + 2 NO
delayed 10”
2 NO + 2 NO
delayed 15”
2 NO + 2 NO
delayed 0.1”
3 NO + 1 NO
no delay 0”
2 NO + 2 NO
delayed 3”
2 NO + 2 NO
delayed 25” 2 NO + 2 NO
delayed 20”
Prog
4 NO-
no delay
0.1”
3 NO +
1 NC
30”
25” 20” 15”
10”
5”
4”
3”
2”
1.5”
1”
0.5”
4 NO
PROG
0
1
23456
7
8
9
A
B
C
D
E
F
2 NO +
2 NO
delayed 0.1”
3 NO +
1 NC
delayed 0”
2 NO +
2 NO
delayed 30”
2 NO +
2 NO
delayed 25” 2 NO +
2 NO
delayed 20”
2 NO +
2 NO
delayed 15”
2 NO +
2 NO
delayed 10”
2 NO +
2 NO
delayed 5”
2 NO +
2 NO
delayed 4”
2 NO +
2 NO
delayed 3”
2 NO +
2 NO
delayed 2”
2 NO +
2 NO
delayed 1.5”
2 NO +
2 NO
delayed 1”
2 NO +
2 NO
delayed 0.5”
4 NO -
no delay
PROG
0
1
23456
7
8
9
A
B
C
D
E
F
2 NO +
2 NO
delayed 0.1”
3 NO +
1 NC
delayed 0”
2 NO +
2 NO
delayed 30”
2 NO +
2 NO
delayed 25” 2 NO +
2 NO
delayed 20”
2 NO +
2 NO
delayed 15”
2 NO +
2 NO
delayed 10”
2 NO +
2 NO
delayed 5”
2 NO +
2 NO
delayed 4”
2 NO +
2 NO
delayed 3”
2 NO +
2 NO
delayed 2”
2 NO +
2 NO
delayed 1.5”
2 NO +
2 NO
delayed 1”
2 NO +
2 NO
delayed 0.5”
4 NO -
no delay
PROG
0
1
23456
7
8
9
A
B
C
D
E
F
11.1 Changing the output configuration via Hex-Switch
•The hex-switch should be moved only during the changing of the output configuration.
• This is the only possibility to test the hex-switch.
• From position “2” to position “E” means 2 NO OSSD output + 2 NO delayed OSSD outputs.
• The delay time is shown above.
Warning:
The Hex-switch must only be rotated clockwise.
Any move in a counter-clock direction will leads to a fail-safe situation.
The Default setting is “O” (3NO + 1NC)
Configuration Hex-position Delay [s]
3 NO + 1 NC 00
4 NO 10
2 NO direct + 2 NO delayed 20,1
2 NO direct + 2 NO delayed 30,5
2 NO direct + 2 NO delayed 41
2 NO direct + 2 NO delayed 51,5
2 NO direct + 2 NO delayed 62
2 NO direct + 2 NO delayed 73
2 NO direct + 2 NO delayed 84
2 NO direct + 2 NO delayed 95
2 NO direct + 2 NO delayed A10
2 NO direct + 2 NO delayed B15
2 NO direct + 2 NO delayed C20
2 NO direct + 2 NO delayed D25
2 NO direct + 2 NO delayed E30
PROGRAMMING F-

14 Rev.01 | CERTUS Multifunction Safety Module | © 2017 | CARLO GAVAZZI Automation
EN
11.2 Output configuration
1 Hex-switch position
Action A Switch off the power supply
BRotate the switch until reaching position “F”
CSwitch ON the power supply
D Power and channel LED’s will blink alternately and slowly
2 Hex-switch position
Action A Rotate clockwise until the required position is reached
(e.g. A, 2NO + 2NO delay 10”)
BWait app. 2.5 secs without moving the switch power
and channel LED’s will now blink fast
CConfiguration accepted
3 Hex-switch position
Action A Switch the module off and on again
BCertus wil start with a configuration
CIf the required position is missed the switch must be
turned a full rotation (only clockwise).
DRepeat the procedure from point 1 A if necessary
Attention:
While power is OFF you can rotate in either direction.
Attention:
Full rotations in a clockwise direction can be made several times if the right position is
passed.

15
EN
Rev.01 | CERTUS Multifunction Safety Module | © 2017 | CARLO GAVAZZI Automation
12. Operation configuration
The applications below show the correct wiring for the CERTUS devices.
N° configuration SC1 SC2 SC3 SC4 SC5 SC6
Input type E-stop
E-gate
E-stop
E-gate
E-stop
E-gate
ESPE
type 4
ESPE
type 2
Safety
mat
Channel 22121
N° wires 432 24
Wiring
S21
S12 S22
S11
S21
S12 S22
S11
S21
S12
S12 S22A2
S36
S11 S12 S21 S22
A2 S36
RT
S11 S12 S21 S22
A2 S36
Safety category Cat. 4 Cat. 3 Cat. 2 Cat. 4 Cat. 2 Cat. 3
Performance level PL e PL d PL c PL e PL c PL e
Safety integrity level SIL 3 SIL 2 SIL 1 SIL 3 SIL 1 SIL 2
Response time 20 msec 20 msec 20 msec 20 msec 25 msec 20 msec
Paragraph 12.1.1 12.1.2 12.1.3 12.1.4 12.1.5 12.1.6
12.1 Recognizing the Operational configuration
During the start (all outputs are switched off, also the NC-output) the connections of outputs S11 and
S12 are checked. If a valid configuration is detected, the software moves into its normal operational
mode and the outputs are enabled depending on the configuration. If there are mechanical trigger
elements electrically open, there will be a wait until the trigger elements are closed, so their wiring can
be recognized (SC1, SC2, SC3, SC6). The same happens with the electrical ESPEs (SC4, SC5).
Information:
SC4 and SC5 will be recognized indipendently of the status of the ESPE.
Information:
For the delayed outputs (O3, O4) the delay has to be added.

16 Rev.01 | CERTUS Multifunction Safety Module | © 2017 | CARLO GAVAZZI Automation
EN
12.1.1 E-Stop / E-Gate 4 wire
Cat 4; PLe, SIL3 possible (also depending on the output wiring and the chosen trigger elements).
24V
M1
K1
K2
S21
S12 S22 S35
S11A1
A2 O1 O2 O3 O4 36
3~
M
Manual
start
E-stop and e-gate application A
A cross circuit between the two channels will be
recognized (fail-safe)
B A short circuit of VDC will be recognized
C A short circuit against Ground will not be recognized
D
In case of a fault the status of the release outputs will
not become HIGH
Attention:
Check correct functioning of the entire safety system (module + input device) following
each re-installation. In particular, if the original operating mode was Manual, check that
the unit has been reconfigured in this mode.
Information:
Please note that on e-stop applications an automatic start is not possible.

17
EN
Rev.01 | CERTUS Multifunction Safety Module | © 2017 | CARLO GAVAZZI Automation
12.1.2 E-Stop / E-Gate 3 wire
Cat 3; PLd; SIL2 possible (also depending on the output wiring and the chosen trigger elements).
E-stop and e-gate application A
A cross circuit between the two channels will not be
recognized
B A short circuit of VDC will be recognized
C
A short circuit against Ground will not be recognized
but the status of the release outputs will not become HIGH
D 3 wires are needed
24V
M1
K1
K2
S21
S12 S22 S35
S11A1
A2 O1 O2 O3 O4 36
3~
M
Manual
start
Attention:
Check correct functioning of the entire safety system (module + input device) following
each re-installation. In particular, if the original operating mode was Manual, check that
the unit has been reconfigured in this mode.
Information:
Please note that on e-stop applications an automatic start is not possible.

18 Rev.01 | CERTUS Multifunction Safety Module | © 2017 | CARLO GAVAZZI Automation
EN
12.1.3 E-stop / E-Gate 2 wire
Cat 2; PLc, SIL1 possible (also depending on the output wiring and the chosen trigger elements).
E-stop and e-gate applications A
This is an e-stop and e-gate application with only one
channel and a one-channel trigger element
B A short circuit against VDC will be recognized
C
A short circuit against Ground will not be recognized
but the status of the outputs will not become HIGH
24V
M1
K1
K2
S21
S12 S22 S35
S11A1
O1 O3 O4 36A2 O2
3~
M
Manual
start
Attention:
Check correct functioning of the entire safety system (module + input device) following
each re-installation. In particular, if the original operating mode was Manual, check that
the unit has been reconfigured in this mode.
Information:
Please note that on e-stop applications an automatic start is not possible.
Information:
With single-channel wiring the safety level of the machine/plant may be lower than the
safety level of the unit.

19
EN
Rev.01 | CERTUS Multifunction Safety Module | © 2017 | CARLO GAVAZZI Automation
12.1.4 ESPD – (type 4 / type 2) two channels
ESPE applications
(ElectroSensitive Protective Element)
A
A cross circuit between the two channels will not be
recognized
B A short circuit of VDC will not be recognized
C
A short circuit against Ground will not be recognized, but
the status of the release output will not become HIGH
D The ESPD devices should recognize the above faults
E 3 wires are needed
Cat 4; PLe; SIL3 possible (depending on the ESPE)
24V
S11 S12 S21 S22 S35
A2 O1 O2 O3 O4 36
M1
K1
K2
IN
PLC
A1
3~
M
Manual
start
Attention:
Check correct functioning of the entire safety system (module + input device) following
each re-installation. In particular, if the original operating mode was Manual, check that
the unit has been reconfigured in this mode.

20 Rev.01 | CERTUS Multifunction Safety Module | © 2017 | CARLO GAVAZZI Automation
EN
Testable ESPE type 2 applications
(ElectroSensitive Protective Element)
A A short circuit of VDC will be recognized
B A short circuit against Ground will not be recognized
C The status of the release output will not become HIGH
D The testing is initiated by CERTUS
E Up to 4 pairs of single beam
Cat 2; PLc; SIL1 possible (depending on the ESPE)
12.1.5 Testable ESPD (type 2 / type 4 )
24V
S11 S12 S21 S22
A2
M1
K1
K2
IN
PLC
A1
3~
M
S35
O1 O2 O3 O4 S36
TR
Attention:
Check correct functioning of the entire safety system (module + input device) following
each re-installation. In particular, if the original operating mode was Manual, check that
the unit has been reconfigured in this mode.
Information:
With single-channel wiring the safety level of the machine/plant may be lower than the
safety level of the unit.
Attention:
Press the START button for 2 seconds to runs a test of the safety light beams.