Festo EMCA-EC-67 CO Series User manual

EMCA-EC-67-...
Integrated drive
Operating instruc-
tions |
Safe torque off (STO)
8157970
2022-02b
[8157972]

Translation of the original instructions

Festo — EMCA-EC-67-... — 2022-02b
3
Table of contents
1 Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
1.1 Target group. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
1.2 Service. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
1.3 Documentation on the product. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
1.4 Version . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
2Safety and requirements for product use. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
2.1 Safety. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
2.1.1 Safety instructions for the STO (Safe torque off) safety function. . . . . . . . . . . . 5
2.1.2 Intended use of the STO function. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
2.1.3 Safety characteristics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
2.1.4 Foreseeable misuse of the STO function. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
2.1.5 Diagnostic coverage (Diagnostic coverage/DC). . . . . . . . . . . . . . . . . . . . . . . . . . 6
2.2 Requirements for product use. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
2.2.1 Training of qualified personnel. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
2.2.2 Range of application. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
2.2.3 Specified standards. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
3 Function and application. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
3.1 Circuitry of the control inputs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
3.2 Functional description. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
3.3 [X6] STO interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
3.3.1 Switching statuses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
3.3.2 Switching times. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
3.3.3 Reaction to test pulses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
3.3.4 +24 V LOGIC OUT auxiliary power supply. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
4Installation and commissioning. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
4.1 Safety. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
4.2 Installation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
4.3 Notes on commissioning. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
4.4 Diagnostics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
4.5 Obligations of the machine operator. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
5 Technical data. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
5.1 Safety engineering. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
5.2 Electrical data. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
5.3 Product conformity and approvals. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

4
Festo — EMCA-EC-67-... — 2022-02b
Information
1 Information
1.1 Target group
This documentation is intended exclusively for technicians trained in control and automation tech-
nology who have experience in installation, commissioning, parameterisation, programming and diag-
nostics of electrical drive systems.
1.2 Service
Contact the regional Festo contact if you have any technical problems.
1.3 Documentation on the product
All available documents for the product è www.festo.com/sp
This document exclusively describes the use of the "Safe torque off" (Safe torque off/STO) safety
function in accordance with EN 61800-5-2, which is implemented in the EMCA. The complete descrip-
tion of the product includes the following documents:
Description Contents
Short documentation EMCA-… Brief device and functional description for initial information
Manual
EMCA-EC-SY-…1)
EMCA-EC-DIO-…2)
Device and functional description
–Mounting
–Installation (pin allocations)
–Drive functions
–Commissioning information
–Error messages
–Technical data
Manual EMCA-EC-S1-... Description of the “safe torque off” safety function (Safe torque
off/STO)
Manual
EMCA-EC-C-HP-…1)
Description of device profile FHPP (Festo Handling and Positioning
Profile)
Manual
EMCA-EC-C-CO-…1)
Description of the device profile CiA 402
Help system for the FCT soft-
ware
(Help for the EMCA plug-in)
Online help for the Festo Configuration Tool (FCT) for commis-
sioning and parameterisation
Special documentation
EMCA-EC_UL-…
Requirements for operating the product in the USA and Canada
in accordance with certification by Underwriters Laboratories Inc.
(UL)
1) Only relevant for product variants with bus interface
2) Only relevant for product variants with I/O interface
Tab. 1: Documentation on the product

Festo — EMCA-EC-67-... — 2022-02b
Safety and requirements for product use
5
More information on the product is available on the Festo Support Portal è www.festo.com/sp
• Operating instructions for Festo configurable electromechanical drives
• Function blocks for CoDeSys
• Certificates, declaration of conformity
Overview of accessories (catalogue) è www.festo.com/catalogue
1.4 Version
This documentation refers to the following version of the device:
–Revision 1.0.0
The version of the device can be determined using the product key. The Product Key is an 11-character
alphanumeric code on the rating plate that uniquely identifies the product. The Product Key can be
input into the Festo Support Portal as a search term (è www.festo.com/sp). After the search has
taken place, the Support Portal displays the version together with additional product data.
2 Safety and requirements for product use
2.1 Safety
When commissioning electrical drives:
–Observe the safety instructions and warnings in the documentation for the product (è Tab. 1
Documentation on the product) and the documentation of the installed products at all times.
–Before mounting and installation work, switch off the supply voltage and secure it against being
switched on again. Do not switch on the supply voltage again until all mounting and installation
work has been completed.
–Never remove or insert a plug when the motor controller is powered.
–Observe the handling specifications for electrostatically sensitive devices.
–Do not enable the closed-loop controller until the drive has been professionally installed and fully
parameterised.
–Do not carry out repairs on the device. If it is defective, replace the device.
2.1.1 Safety instructions for the STO (Safe torque off) safety function
NOTICE
To achieve the safety characteristic values in accordance with EN ISO 13849-1:
• Carry out a risk assessment of the application.
• Select the components and their wiring in accordance with the required category in accordance with
EN ISO 13849-1.
CAUTION
Loss of the safety function may result in serious, irreversible injury, e.g. by unexpected movements of
the actuator technology.
• Do not bypass the connections for safety equipment.
• Observe the input voltage ranges of the device è 5 Technical data
• Only use the STO function when all of the necessary safeguards have been set up and are func-
tional.
•Validate the STO function to complete commissioning.

6
Festo — EMCA-EC-67-... — 2022-02b
Safety and requirements for product use
CAUTION
Serious injuries as a result of uncontrolled movement of the driveless actuator technology when
switching off the power output stage. The STO function is not sufficient as the only safety function for
drives subject to a continuous torque (e.g. by suspended loads).
• Stop driveless actuator technology mechanically if necessary, e.g. with a brake. This especially
applies to vertical axes without automatic locking mechanisms, clamping units or counterbalancing.
• Safely prevent movements of actuator technology with suspended loads or other external forces,
e.g. with a mechanical holding brake.
2.1.2 Intended use of the STO function
The EMCA supports the "Safe torque off " (Safe torque off/STO) safety function in accordance with
EN 61800-5-2. The STO function is intended to switch off the torque from the integrated motor and
prevents the unexpected restart of the motor. The STO function should only be used for applications
for which the stated safety characteristics are sufficient.
2.1.3 Safety characteristics
The STO function of the integrated drive EMCA satisfies the requirements for the following safety
characteristic values:
–PL d/cat. 3 in accordance with EN ISO 13849-1 (Performance Level/PL)
–SIL 2 in accordance with EN 61800-5-2 (Safety Integrity Level/SIL)
–SILCL 2 in accordance with EN 62061 (Claim Limit/CL)
The achievable safety level depends on the other components that are used to implement the safety
function. The device must be controlled via the connection [X6] with the category in accordance with
EN ISO 13849-1 required for the application, e.g. via an external safety relay unit.
2.1.4 Foreseeable misuse of the STO function
The following incorrect applications are classified as non-intended use:
–Bypassing the safety function
–Use in applications where switching off can result in hazardous movements or conditions
The STO function does not provide protection against electric shock, only against dangerous move-
ments!
2.1.5 Diagnostic coverage (Diagnostic coverage/DC)
The diagnostic coverage (è 5 Technical data) is determined by the integration of the device into the
control chain and the measures implemented for diagnostics.
In order to achieve the specified diagnostic coverage, the status of the feedback contact must be
evaluated by the control system every time the STO function is requested.
If the signal of the acknowledgment contact does not have the expected value, a potentially dan-
gerous malfunction may exist. In this case, appropriate measures must be implemented to maintain
the safety level.
NOTICE
The EMCA cannot detect a cross circuit in the input circuit by itself.
• Find out if cross-circuit detection is needed for the input circuit and wiring in your application.
• If required, use a safety relay unit with detection of shorts across contacts.

Festo — EMCA-EC-67-... — 2022-02b
Safety and requirements for product use
7
2.2 Requirements for product use
For correct and safe use of the product in a machine or system:
–Provide the complete product documentation of the product to the following specialists
–the design engineer and the installer of the machine or system
–the personnel responsible for commissioning
–Keep the documentation available throughout the entire product lifecycle.
–Ensure the compliance of all the specifications of the documentation for the device è Tab. 1
Documentation on the product.
–Take into account the documentation for additional components (e.g. cables).
–Observe all of the legal regulations applicable for the installation site and the following documents:
–instructions and standards
–regulations of the testing organisations and insurers
–national specifications
For correct and safe use of the STO function:
–Carry out a risk assessment for your machine or system.
–Comply with the specified safety characteristics è 5 Technical data.
–Comply with the connection and environmental conditions, in particular the voltage ranges of the
product and all connected components. Only compliance with the limit values and load limits will
enable operation of the product in compliance with the specified safety regulations.
2.2.1 Training of qualified personnel
The function should only be integrated into the machine by a qualified electrical technician of the
machine manufacturer. The qualified technician must be familiar with:
–Installation and operation of electrical control systems
–Applicable regulations for operating safety-related systems
–Applicable regulations for accident prevention and occupational safety
–Documentation for the product
2.2.2 Range of application
The device has the CE marking. The product-relevant EC directives are listed in the declaration of con-
formity. Specific configurations of the product have a Underwriters Laboratories Inc. (UL) certification
for the USA and Canada (documentation è Tab. 1 Documentation on the product).
Additional information:
–Certificates and declaration of conformity è www.festo.com/sp
–Standards and test values è 5 Technical data
Product conformity
The directives and standards applicable for the product are listed in the declaration of conformity
è www.festo.com/sp.

8
Festo — EMCA-EC-67-... — 2022-02b
Function and application
Product conformity
in accordance with EU EMC Directive
in accordance with EU Machinery Directive
in accordance with EU RoHS Directive
to UK EMC Regulations
to UK Supply of Machinery Regulations
to UK RoHS Regulations
Tab. 2: Product conformity
2.2.3 Specified standards
Version
EN ISO 13849-1:2015
EN 61508 Parts 1-7:2010
EN 61800-5-2:2007, EN 61800-5-2:2017
EN 62061:2005 + AC:2010 + A1:2013 + A2:2015
Tab. 3: Standards specified in the document
3 Function and application
The "Safe torque off" (STO) safety function enables the 2-channel, safe switch off of the integrated
motor.
The safety function is requested solely via the control ports of the STO connection [X6] of the device.
Safety-oriented circuitry for additional interfaces of the device is not required.
Fig. 1: Connection [X6] “Safe Torque off/STO” under the cover
3.1 Circuitry of the control inputs
To protect against unintended start-up, the device must be powered via the connection [X6] with the
category required for the application in accordance with EN ISO 13849-1. Achievable safety level of the
STO function è 2.1.3 Safety characteristics.

Festo — EMCA-EC-67-... — 2022-02b
Function and application
9
The following components for requesting the STO function can be connected to the control inputs
(è Tab. 9 STO interface pin allocation (Safe torque off ) [X6] on the EMCA):
–safe semiconductor outputs (electronic safety relay units, active safety sensors, e.g. light curtains
with OSSD signals (Output Signal Switching Device/OSSD)
–switch contacts (safety relay units with relay outputs, passive safety sensors, e.g. forced position
switches)
1
2
3
4
5
Fig. 2: Sample circuit (without detection of shorts across contacts)
1EMCA with STO interface
(only relevant connections shown)
2Emergency stop switch
3Safety door (alternative to 2)
4Light curtain (alternative to 2)
5Safety relay unit (alternative to 2)
3.2 Functional description
The STO function is requested over 2 channels with switch S1, with which the control voltage
(+24 V DC, logic è Fig. 2) is switched off at both STO 1 and STO 2 control inputs.
The control inputs should be switched simultaneously. The discrepancy time between the two inputs
is monitored (max. 50 ms). If the permissible discrepancy time is exceeded, a diagnostic message is
generated. Monitoring of the discrepancy time is only informative. Monitoring of the discrepancy time
is not a part of the safety function.

10
Festo — EMCA-EC-67-... — 2022-02b
Function and application
The EMCA monitors the status of the control inputs. The control inputs are of equal value. As soon as
logic 0 (0 V) is pending at one of the control inputs, the EMCA responds as follows:
–Channel 1 (STO 1): the power stage is not supplied with voltage while logic 0 is pending at the
STO 1 input. The motor will not generate torque.
–Channel 2 (STO 2): a PWM signal will not be sent to the driver module while logic 0 is pending at the
STO 2 input. The motor will not generate torque.
Behaviour of the drive when the STO function is requested
–Behaviour of the drive with a running motor: the movement of the drive is not decelerated via a
braking ramp. The drive continues to move uncontrolled due to inertia or external forces until it
comes to a standstill by itself.
–Behaviour of the drive with a stopped motor: the drive is uncontrolled and can be moved by external
forces.
The 2-channel switch off of the motor is indicated by the NC1/NC2 acknowledgment contact (semi-
conductor relay) (è Tab. 9 STO interface pin allocation (Safe torque off ) [X6] on the EMCA). The
status of the STO function can be sent for diagnostics, e.g., to an external safety relay unit by the
acknowledgment contact. The acknowledgment contact is not evaluated for safety purposes.
1
4
2 3
Fig. 3: "Safe torque off" (Safe torque off/STO) – functional principle
1Input circuit (e.g. safety relay unit)
2Bus transmitter supply voltage for the
pulse-width modulation signals
3Driver power supply
4Mosfet power stage
CAUTION
Serious injuries as a result of uncontrolled movement of the driveless actuator technology when
switching off the power output stage. The STO function is not sufficient as the only safety function for
drives subject to a continuous torque (e.g. by suspended loads).
• Stop driveless actuator technology mechanically if necessary, e.g. with a brake. This especially
applies to vertical axes without automatic locking mechanisms, clamping units or counterbalancing.
• Safely prevent movements of actuator technology with suspended loads or other external forces,
e.g. with a mechanical holding brake.

Festo — EMCA-EC-67-... — 2022-02b
Function and application
11
NOTICE
Control of motors wit integrated holding brake (only EMCA-EC-…-…-B).
The holding brake is controlled by the non-safety-related firmware of the device. When the power
stage is switched off, the drive is not slowed down via a braking ramp. The holding brake is closed
immediately.
•Check whether the integrated holding brake can stop the actuator technology.
•Note the mechanical inertia of the holding brake.
• Take into consideration the higher wear of the holding brake in comparison to automatic brake
control in normal operation.
NOTICE
Failure of the power stage.
If the power stage of the device fails while the STO function is active, the drive can jerk due to a limited
detent movement of the rotor. The maximum rotation angle/travel corresponds to the pole pitch of the
motor used.
3.3 [X6] STO interface
3.3.1 Switching statuses
STO control inputs
The motor can be operated so long as logic 1 (+24 V DC) is pending at both control inputs (STO
function is inactive). As soon as logic 0 (0 V DC) is pending at one or both control inputs, the power
supply to the motor is disconnected. If both STO inputs receive logic 1, the controller enable must be
issued again.
Acknowledgment contact (NC1/NC2)
The acknowledgment contact is closed when the STO function is active.
The acknowledgment contact is open:
–if the supply voltage fails
–if the STO function is inactive
STO 1 STO 2 NC1/NC2 Status
1 1 High impedance
(open)
Normal operation
–Power stage is switched on.
–STO function is inactive.
1 0 High impedance
(open)
The STO function has been requested on a single
channel, e.g. on failure of a channel:
–Output stage is switched off on a single channel.
–The motor can no longer be operated.
–STO function is inactive.

12
Festo — EMCA-EC-67-... — 2022-02b
Function and application
STO 1 STO 2 NC1/NC2 Status
0 1 High impedance
(open)
The STO function has been requested on a single
channel, e.g. on failure of a channel:
–Output stage is switched off on a single channel.
–The motor can no longer be operated.
–STO function is inactive.
0 0 low impedance
(closed)
The STO function has been requested on 2 channels:
–Output stage is switched off on 2 channels.
–The motor can no longer be operated.
–The STO function is active.
Tab. 4: Switching logic of the STO 1/STO 2 control inputs
Switching statuses [X6]
STO 1/STO 2 control inputs1)
Deactivate STO [V DC] > 18
Activate STO [V DC] < 5
NC1/NC2 acknowledgment contact
closed: max. internal resistance [Ω] £ 40
open: off-state current [µA] £ 2
1) Intermediate range is undefined.
Tab. 5: Electrical data of switching statuses [X6]
The control inputs are also protected against polarity reversal, but are not equipped with voltage
monitoring. If required, voltage must be monitored by other measures.
3.3.2 Switching times
The amount of energy stored in the components of the STO function (e.g. capacitors) depends on the
input voltage. These amounts of energy must be charged or discharged depending on the switching
operation. Depending on the input voltage, this results in different values for the transition to the safe
status (STO) and the tolerance time (buffer time) regarding OSSD signals.
Signal1) Switching time1)
STO 1/STO 2 Activate STO [ms] £ 5
Deactivate STO [ms] > 4
NC Close acknowledgment contact [ms] £ 10
Open acknowledgment contact [ms] £ 60
1) Additional electrical data è Technical data
Tab. 6: Switching times

Festo — EMCA-EC-67-... — 2022-02b
Installation and commissioning
13
3.3.3 Reaction to test pulses
Short test pulses from a safety control are tolerated and thus do not trigger the STO function. The
permissible pulse width depends on the control voltage at the STO 1 and STO 2 inputs.
STO 1/STO 2 [X6] control inputs1)
Maximum permissible pulse width
for 0 V test pulse with 24 V signal [ms] 0.6
for 24 V test pulse with 0 V signal [ms] 10
Min. time between test pulses
for 0 V test pulse with 24 V signal [ms] 60
for 24 V test pulse with 0 V signal [ms] 4
1) Additional electrical data è Technical data
Tab. 7: Test pulses of the STO 1 and STO 2 inputs
3.3.4 +24 V LOGIC OUT auxiliary power supply
A 24 V auxiliary supply is available at [X6.3]. Reference potential (0 V) is pin 2 on the power supply
connection [X4] (internally bridged with [X6.6]). The auxiliary supply can be optionally used to power
external, active sensors. Additional electrical data è 5.2 Electrical data.
4Installation and commissioning
4.1 Safety
WARNING
Danger of electric shock from voltage sources without protective measures.
• Use exclusively PELV electrical circuits (protective extra low voltage/PELV) in accordance with
EN 602041 for the electrical power supply.
• Also take into account the general requirements for PELV electrical circuits in accordance with EN
60204-1.
• Use only voltage sources which guarantee reliable electrical isolation of the operating and load
voltage in accordance with IEC 60204-1.
4.2 Installation
CAUTION
Unexpected and unintended movement of the drive during mounting, installation and maintenance
work.
• Before starting work: switch off power supplies. Removal of the enable signal at the EMCA is not
sufficient.
• Lock the power supplies to prevent accidental reactivation.
Installation instructions:
Observe the complete information for the electrical installation of the device è Tab. 1 Documentation
on the product.
Comply with the handling specifications for electrostatically sensitive components.
Connect the control ports in 2 channels with parallel wiring.

14
Festo — EMCA-EC-67-... — 2022-02b
Installation and commissioning
For the connection [X6], use the mating connector from the Festo NEKM-C assortment of plugs
(accessories è www.festo.com/catalogue).
Connection [X6] Design
Plug connector at the EMCA 3-794636-6 (manufacturer: Tyco Electronics AMP), pin header, 6-
pin
Mating plug 794617-6 (manufacturer: Tyco Electronics AMP), crimp contacts
(manufacturer: Tyco Electronics AMP):
–AWG24 ... AWG20: 794606-1 (strips); 794610-1 (loose)
–AWG30 ... AWG26: 794607-1 (strips); 794611-1 (loose)
Tab. 8: Connection STO interface [X6]
[X6] - black Pin Designation Description
1 NC1 Acknowledgement contact:
–potential-free
–low impedance if the STO function has been
requested and activated via 2 channels.
2 NC2
3 +24 V DC
LOGIC OUT
Logic voltage output (from [X4]), reference
potential (0 V) is pin [X6.6] or [X4.2] (internally
bridged)
Not overload-proof! Max. 100 mA permissible.
4 STO 1 Control inputs for STO function
5 STO 2
6 GND Reference potential 0 V
Tab. 9: STO interface pin allocation (Safe torque off ) [X6] on the EMCA
NOTICE
Damage to the device in the event of an overload.
Pin [X6.3] (+24 V DC LOGIC Out) is not overload-proof! Maximum 100 mA permissible.
NOTICE
The STO function must never be bridged.
• Make sure that no jumpers etc. can be used parallel to the safety wiring.
4.3 Notes on commissioning
The complete commissioning of the device by the machine manufacturer is described in the EMCA-
EC-... documentation and in the online help for the zum EMCA plug-in of the FCT software.
Recommendation for initial commissioning without complete safety engineering:
• Minimum circuitry with emergency stop switching device and 2-channel switch off with STO 1 [X6.4]
and STO 2 [X6.5] control inputs
• Design the circuitry in such a way that it must be removed when the final safety circuitry is installed.

Festo — EMCA-EC-67-... — 2022-02b
Installation and commissioning
15
NOTICE
Incorrect wiring or the use of unsuitable components will result in loss of the STO function or non-com-
pliance with the requirements of EN ISO 138491 (category).
Prior to commissioning:
• Make sure that the components and their wiring comply with the category required in accordance
with EN ISO 13849-1.
• Check the electrical installation (connecting cable, contact assignment).
•Validate the STO function after the installation process and after every modification to the installa-
tion.
• Only use the STO function when all of the necessary protective measures have been set up and are
functional.
For a function test of the STO function:
1. Switch off each channel individually and check the reaction of the motor and the acknowledgment
contact.
2. Switch off both channels and check the reactions.
4.4 Diagnostics
Diagnostics Description
Acknowledgement con-
tact1)
The acknowledgment contact of the STO function (NC1/NC2) can be eval-
uated by a higher-order controller. The closed acknowledgment contact
indicates that the STO function is active.
Fault message
0x34
When the STO function is requested, the “Safe torque off” (0x34) fault
message is generated. The message can be configured as an error, a
warning or as information. An entry in the diagnostic memory is optional.
1) The diagnostics are not evaluated for safety engineering.
Tab. 10: Diagnostics options of the STO function
Additional information and complete list of messages è Description of the installed EMCA.(è Tab. 1
Documentation on the product).
4.5 Obligations of the machine operator
The implemented safety function must be subjected to a regular and documented performance test by
a specialist during the period of use of the machine. The frequency of these tests must be determined
by the machine operator based on the specifications of the machine manufacturer.
•Check the EMCA at least once a year.

16
Festo — EMCA-EC-67-... — 2022-02b
Technical data
5 Technical data
The general technical data, operating and environmental conditions, the technical data of the drive
and additional connection data can be found in the description of the integrated drive EMCA è EMCA-
EC-... manual
Additional information è www.festo.com/sp.
5.1 Safety engineering
Technical data, safety engineering
Approval information, safety engineering
CE
Type-examination The functional safety engineering of the product has been certi-
fied by an independent testing body, see EC-type examination
certificate è www.festo.com/sp
Certificate issuing authority TÜV Rheinland, Certification Body of Machinery, NB 0035
Certificate no. 01/205/5514.01/21
UKCA
Type-examination The functional safety engineering of the product has been certi-
fied by an independent body, see UK-type examination certificate
è www.festo.com/sp
Certificate issuing authority TUV Rheinland UK Ltd, UK Approved Body No. 2571
Certificate no. 01/205U/5514.00/22
Tab. 11: Approval information, safety engineering

Festo — EMCA-EC-67-... — 2022-02b
Technical data
17
Safety reference data and safety specifications
Safety function STO Safe Torque Off
(safe torque off)
Category 3 in accordance with EN ISO 13849-1
Performance Level up to PL d in accordance with EN ISO 13849-1
Safety Integrity Level up to SIL 2 in accordance with EN 61800-5-2
(safety integrity level)
SIL Claim Limit SILCL 2 in accordance with EN 62061
(SIL Claim Limit)
DCavg [%] 90 Average Diagnostic Coverage
(average diagnostic coverage)
è 2.1.3 Safety characteristics
HFT 1 Hardware Failure Tolerance
(hardware fault tolerance)
SFF [%] > 90 Safe Failure Fraction in accordance
with EN 61508
(safe failure fraction)
PFHD[1/h] 1 x 10-9 Probability of dangerous failure per
hour
(probability of dangerous failure per
hour)
T
Proof Test Interval [years] 20 Test interval
Service life [years] 20 in accordance with EN ISO 13849-1
Type test The STO function has been certified by an
independent testing body. EMCA certificate
è www.festo.com/sp
Component/function Suitable for operation in systems from category 1 in
accordance with EN ISO 13849-1.
Tab. 12: Technical data: safety reference data and safety specifications
5.2 Electrical data
STO 1/STO 2 [X6] control inputs
Nominal voltage [V DC] 24 (based on 0 V at [X4] )
Voltage range [V DC] 19.2 … 28.8
Permitted residual ripple [%] 5 (based on nominal voltage 24 V)
Surge protection up to [V] 60

18
Festo — EMCA-EC-67-... — 2022-02b
Technical data
STO 1/STO 2 [X6] control inputs
Nominal current [mA] 15
Starting current [mA] 200
Input voltage thresholds (intermediate range is undefined.)
Deactivate STO [V DC] > 18
Activate STO [V DC] < 5
Activate STO function switching time [ms] £ 5
Deactivate STO function switching time [ms] > 4
Max. permissible pulse width
for 0 V test pulse with 24 V signal [ms] 0.61)2)
for 24 V test pulse with 0 V signal [ms] 10
Min. time between test pulses
for 0 V test pulse with 24 V signal [ms] 60
for 24 V test pulse with 0 V signal [ms] 4
Protective function Protection against polarity reversal
1) This value refers to a single pulse. Double or multiple pulses can require other values.
2) Longer 0-V test pulses or double/multiple pulses of the safety relay unit require an increase of the voltage level up to the upper limit
of the permissible voltage range of the EMCA.
Tab. 13: Technical data: electrical data of the STO 1 and STO 2 inputs
Acknowledgment contact NC [X6]
Design Solid state relay
Max. voltage [V DC] £ 30
Overvoltage strength [V] 60
Nominal current [mA] £ 100
Max. internal resistance
(contact closed)
[Ω] £ 40
Off-state current (contact open) [µA] £ 2
Switching time for closing [ms] £ 10
Switching time for opening [ms] £ 60
Galvanic isolation via optocoupler
Tab. 14: Technical data: electrical data of the acknowledgment contact

Festo — EMCA-EC-67-... — 2022-02b
Technical data
19
Auxiliary power supply +24 V DC, pin 3 on [X6]
Nominal voltage
–Voltage taken from the drive (supplied at [X4] )
[V DC] 24
Nominal current [mA] 100 (max.)
not overload-proof
Tab. 15: Technical data: electrical data of the auxiliary supply output
Signal lines
Max. cable length [m] 30
Conductor cross section [mm²] 0.05 … 0.36
Tab. 16: Technical data: cabling at [X6]
5.3 Product conformity and approvals
Product conformity and approvals
CE marking (declaration of conformity
è www.festo.com/sp
in accordance with EU Machinery Directive
in accordance with EU EMC Directive1)
Approvals2) RCM (Regulatory Compliance Mark)
c UL us – Recognized (OL)
1) The component is intended for operation in the industrial sector. Outside industrial environments, e.g. in commercial and residential
mixed-use areas, measures to suppress interference may be required.
2) only valid for product variants with corresponding identification
Tab. 17: Product conformity and approvals
Requirements for observing the UL certified conditions if the product is operated in the USA or Canada
can be found in the separate UL documentation.

© 2022 all rights reserved to Festo SE & Co. KG
Copyright:
Festo SE & Co. KG
73734 Esslingen
Ruiter Straße 82
Deutschland
Phone:
[phone]
Internet:
www.festo.com