GE VersaSafe VersaPoint Series User manual

GE
Intelligent Platforms
September 2011
VersaSafe
VersaPoint* Module: IC220SDL953
SAFETY LOGIC MODUL , SAFE OUTPUT 24VDC, 8PT
User‘s Manual, GFK-2731
Programmable Control Products
E

This page left blank intentionally

2011-09-29
VersaPoint module with integrated safety logic and safe digital outputs
GFK-2731
03
Catalog No. Revision
IC220SDL953 HW/FW/FW: 00/100/100
HW/FW/FW: 00/101/100
User‘s manual
Catalog No.:
Revision:
This user manual is valid for:

User manual IC220SDL953 - September 2011 GFK-2731
Please observe the following notes
In order to ensure the safe use of the product described, you have to read and understand
this manual. The following notes provide information on how to use this user manual.
User group of this manual
The use of products described in this manual is oriented exclusively to qualified electricians
or persons instructed by them, who are familiar with applicable national standards and
other regulations regarding electrical engineering and, in particular, the relevant safety
concepts.
GE Intelligent Platforms accepts no liability for erroneous handling or damage to products
from GE Intelligent Platforms or third-party products resulting from disregard of information
contained in this user manual.
Explanation of symbols used and signal words
The following types of message provide information about possible property damage and
general information concerning proper operation and ease of use.
This is the safety alert symbol. It is used to alert you to potential personal
injury hazards. Obey all safety measures that follow this symbol to avoid
possible injury or death.
DANGER
This indicates a hazardous situation which, if not avoided, will result in death or serious
injury.
WARNING
This indicates a hazardous situation which, if not avoided, could result in death or serious
injury.
CAUTION
This indicates a hazardous situation which, if not avoided, could result in minor or
moderate injury.
NOTE
This symbol and the accompanying text alert the reader to a situation which may cause
damage or malfunction to the device, hardware or software, or surrounding property.
This symbol and the accompanying text provide the reader with additional information,
such as tips and advice on the efficient use of hardware and on software optimization. It
is also used as a reference to other sources of information (manuals, data sheets) on the
subject matter, product, etc.

GFK-2731
General terms and conditions of use for technical documentation
This document is based on information available at the time of its publication. While efforts
have been made to be accurate, the information contained herein does not purport to cover
all details or variations in hardware or software, nor to provide for every possible
contingency in connection with installation, operation, or maintenance. Features may be
described herein which are not present in all hardware and software systems. GE
Intelligent Platforms assumes no obligation of notice to holders of this document with
respect to changes subsequently made.
Statement of legal authority
GE Intelligent Platforms makes no representation or warranty, expressed, implied, or
statutory with respect to, and assumes no responsibility for the accuracy, completeness,
sufficiency, or usefulness of the information contained herein. No warranties of
merchantability or fitness for purpose shall apply.
How to contact us
Internet Up-to-date information on GE Intelligent Platforms products and our Terms and Conditions
can be found on the Internet at:
www.ge-ip.com.
Make sure you always use the latest documentation.
It can be downloaded at:
http://support.ge-ip.com.
Subsidiaries If there are any problems that cannot be solved using the documentation, please contact
your GE Intelligent Platforms subsidiary.
Subsidiary contact information is available at www.ge-ip.com.
Published by
Should you have any suggestions or recommendations for improvement of the contents
and layout of our manuals, please send your comments to:
[email protected]
* VersaPoint is a trademark of GE Intelligent Platforms, Inc. and/or its affiliates.
All other trademarks are the property of their respective owners.
© Copyright 2011 GE Intelligent Platforms, Inc. All Rights Reserved
GE Intelligent Platforms. Inc
2500 Austin Dr.
Charlottesville
Virginia
Phone [phone]
Fax [phone]

User manual IC220SDL953 - September 2011 GFK-2731
This page left blank intentionally

GFK-2731 Table of contents i
Table of contents
1 For your safety..........................................................................................................................1-1
1.1 General safety notes ..........................................................................................1-1
1.2 Electrical safety ..................................................................................................1-2
1.3 Safety of the machine or system........................................................................1-3
1.4 Safety for starting applications ...........................................................................1-4
1.5 Directives and standards....................................................................................1-4
1.6 Correct usage.....................................................................................................1-4
1.7 Documentation ...................................................................................................1-5
1.8 Abbreviations used ...........................................................................................1-5
2 Product description...................................................................................................................2-1
2.1 Note about the system description.....................................................................2-1
2.2 Brief description of the safety module ................................................................2-1
2.3 Structure of the safety module ...........................................................................2-2
2.4 Housing dimensions...........................................................................................2-2
2.5 Safe digital outputs.............................................................................................2-3
2.6 Connection options for actuators depending on the parameterization ............... 2-5
2.7 Local diagnostic and status indicators ...............................................................2-6
2.8 Safe state ...........................................................................................................2-8
2.8.1 Operating state ...................................................................................2-8
2.8.2 Error detection in I/O devices .............................................................2-8
2.8.3 Device errors ......................................................................................2-9
2.8.4 Parameterization errors ......................................................................2-9
2.9 Process data words..........................................................................................2-10
2.10 Programming data/configuration data ..............................................................2-10
2.10.1 Local bus ..........................................................................................2-10
2.10.2 Other bus systems or networks .......................................................2-10
3 VersaPoint potential and data routing, and VersaPoint connectors .........................................3-1
3.1 VersaPoint potential and data routing ................................................................3-1
3.2 Supply voltage UL..............................................................................................3-1
3.3 Supply voltage UM..............................................................................................3-2
3.4 Terminal point assignment .................................................................................3-3
4 Assembly, removal, and electrical installation..........................................................................4-1
4.1 Assembly and removal.......................................................................................4-1
4.1.1 Unpacking the module ........................................................................4-1
4.1.2 General ...............................................................................................4-1
4.1.3 Setting the DIP switches .....................................................................4-2
4.1.4 Assembly and removal of the safety module ......................................4-4

ii User manual IC220SDL953 - September 2011 GFK-2731
4.2 Electrical installation...........................................................................................4-6
4.2.1 Electrical installation of the VersaPoint station ...................................4-6
4.2.2 Electrical installation of the safety module ..........................................4-6
5 Parameterization of the safety module.....................................................................................5-1
5.1 Parameterization of the safety module in a VersaSafe system..........................5-1
5.2 Parameterization of the safe outputs .................................................................5-2
5.3 Behavior of the outputs in the event of enabled switch-off delay for
stop category 1...................................................................................................5-4
6 Connection examples for safe outputs .....................................................................................6-1
6.1 Explanation of the examples ..............................................................................6-1
6.2 Notes on the protective circuit for external relays/contactors
(free running circuit) ...........................................................................................6-2
6.3 Measures required to achieve a specific safety integrity level ...........................6-3
6.4 Single-channel assignment of safe outputs .......................................................6-5
6.5 Two-channel assignment of safe outputs...........................................................6-8
7 Startup and validation...............................................................................................................7-1
7.1 Initial startup.......................................................................................................7-1
7.2 Restart after replacing a safety module .............................................................7-3
7.2.1 Replacing a safety module .................................................................7-3
7.2.2 Restart ................................................................................................7-3
7.3 Validation ...........................................................................................................7-3
8 Errors: Messages and removal.................................................................................................8-1
8.1 Safe digital output errors ....................................................................................8-4
8.2 Supply voltage errors .........................................................................................8-5
8.3 General errors ....................................................................................................8-5
8.4 Parameterization errors......................................................................................8-6
8.5 Connection errors to satellites ..........................................................................8-7
8.6 Acknowledging an error .....................................................................................8-8
9 Maintenance, repair, decommissioning, and disposal..............................................................9-1
9.1 Maintenance.......................................................................................................9-1
9.2 Repair.................................................................................................................9-1
9.3 Decommissioning and disposal..........................................................................9-1

GFK-2731 Table of contents iii
10 Technical data and ordering data...........................................................................................10-1
10.1 System data .....................................................................................................10-1
10.1.1 VersaPoint ........................................................................................10-1
10.1.2 VersaSafe system ............................................................................10-1
10.2 IC220SDL953...................................................................................................10-1
10.3 Conformance with EMC Directive ....................................................................10-6
10.4 Ordering data ...................................................................................................10-7
10.4.1 Ordering data: Safety module ...........................................................10-7
10.4.2 Ordering data: Accessories ..............................................................10-7
10.4.3 Ordering data: Software ...................................................................10-7
10.4.4 Ordering data: Documentation .........................................................10-7
A Appendix: VersaSafe system .................................................................................................. A-1
A 1 The VersaSafe system..................................................................................... A-1
A 1.1 VersaSafe technology – Maximum flexibility and safety .................... A-1
A 1.2 Overview of VersaSafe system features ........................................... A-2
A 1.3 Differences in VersaSafe systems dependent upon which module
with integrated safety logic is used .................................................... A-2
A 2 System topology............................................................................................... A-4
A 2.1 General topology ............................................................................... A-4
A 2.2 Network and controller requirements ................................................. A-5
A 2.3 Safe input and output devices ........................................................... A-5
A 3 VersaSafe address assignment ...................................................................... A-6
A 4 Operating modes and setting the DIP switches in the VersaSafe system ..... A-10
A 4.1 Module switch positions .................................................................. A-10
A 4.2 VersaSafe multiplexer mode ........................................................... A-11
A 5 Process image ............................................................................................... A-13
A 5.1 Structure of the process image ........................................................ A-13
A 5.2 Description of the registers .............................................................. A-17
A 6 Implementation of data flow between the standard controller and the
safety modules ............................................................................................... A-22
A 6.1 Implementation of data flow with a function block ........................... A-22
A 6.2 Implementation of data flow without a function block ...................... A-22
A 7 Enable principle.............................................................................................. A-22
A 8 Diagnostics..................................................................................................... A-24
A 8.1 Error detection in I/O devices .......................................................... A-24
A 8.2 Detection of device errors ................................................................ A-25
A 8.3 Acknowledgment of error messages for satellites ........................... A-25
A 9 Configuration, parameterization, and download ............................................ A-26
A 9.1 Configuration and parameterization using the VersaConf Safety
tool ................................................................................................... A-26
A 9.2 Downloading the configuration and parameter data record
following power up ........................................................................... A-27

iv User manual IC220SDL953 - September 2011 GFK-2731
A 10 Safe state ....................................................................................................... A-27
A 11 Time response in the VersaSafe system........................................................ A-28
A 11.1 Typical response time ...................................................................... A-28
A 11.2 Shutdown times ............................................................................... A-29
A 12 Achievable safety depending on the modules used....................................... A-30
A 13 Behavior in the event of an error.................................................................... A-31
A 13.1 Critical system or device errors ....................................................... A-31
A 13.2 Parameterization or configuration errors ......................................... A-32
A 13.3 Communication errors ..................................................................... A-32
A 13.4 I/O errors ......................................................................................... A-32
A 14 Startup and restart ......................................................................................... A-33
A 14.1 Startup/restart following power up ................................................... A-33
A 14.2 Restart after triggering a safety function .......................................... A-33
A 15 Memory sizes for the safety logic................................................................... A-33
B Appendix: Checklists ............................................................................................................... B-1
B 1 Checklists for the VersaSafe system................................................................ B-2
B 1.1 Planning .................................................................................... B-2
B 1.2 Configuration and parameterization ......................................... B-4
B 1.3 Startup ...................................................................................... B-5
B 1.4 Safety functions ................................................................................. B-6
B 1.5 Validation .................................................................................. B-7
B 2 Checklists for the
IC220SDL953 module ...................................................................................... B-8
B 2.1 Planning ..................................................................................... B-8
B 2.2 Assembly and electrical installation ............................................. B-9
B 2.3 Startup ........................................................................................ B-10
B 2.4 Validation ....................................................................................... B-11
C Index........................................................................................................................................ C-1

1
GFK-2731 Chapter 1 For your safety 1-1
1 For your safety
Purpose of this manual
The information in this document is designed to familiarize you with how the IC220SDL953
safety module works, its operating and connection elements, and its parameter settings.
This information will enable you to use the module within a VersaSafe system according to
your requirements.
Validity of the user manual
This manual is only valid for the IC220SDL953 module in the version indicated on the inner
cover page.
1.1 General safety notes
Requirements Knowledge of the following is required:
– The target system (e.g., PROFIBUS, PROFINET)
– The standard control system
– The VersaSafe system (see Appendix A)
– The components used in your application
– The VersaPoint product range
– Operation of the software tools used
– Safety regulations in the field of application
Qualified personnel In the context of the use of the VersaSafe system, the following operations may only be
carried out by qualified personnel:
– Planning
– Configuration of the safety logic and parameterization
– Installation, startup, servicing
– Maintenance, decommissioning
This user manual is, therefore, aimed at:
– Qualified personnel who plan and design safety equipment for machines and systems
and are familiar with regulations governing safety in the workplace and accident
prevention
– Qualified personnel who install and operate safety equipment in machines and
systems
In terms of the safety notes in this manual, qualified personnel are persons who, because
of their education, experience and instruction, and their knowledge of relevant standards,
regulations, accident prevention, and service conditions, have been authorized to carry out
any required operations, and who are able to recognize and avoid any possible dangers.
WARNING: Depending on the application, incorrect handling of the safety module
can pose serious risks for the user
When working with the safety module within the VersaSafesystem, please observe all
the safety notes included in this section.

1
1-2 User manual IC220SDL953 - September 2011 GFK-2731
Documentation You must observe all information in this manual as well as in the documents listed in
"Documentation" on page 1-5.
Safety of personnel and
equipment
The safety of personnel and equipment can only be assured if the safety module is used
correctly (see "Correct usage" on page 1-4).
Error detection Depending on the wiring and the corresponding setting of the safe output module
parameters, the VersaSafe system can detect various errors within the safety equipment.
Do not carry out any
repairs
Repair work may not be carried out on the safety module.
In the event that an error cannot be removed, please contact GE Intelligent Platforms
immediately, engage a service engineer, or send the faulty module directly to GE Intelligent
Platforms.
Do not open the
housing/security seal
It is strictly prohibited to open the safety module housing. In order to prevent the
manipulation of the safety module and to detect the unauthorized opening of the safety
module, a security seal is applied to the module. This security seal is damaged in the event
of unauthorized opening. In this case, the correct operation of the safety module can no
longer be ensured.
Measures to prevent
incorrect connection and
polarity reversal
Take measures to prevent the incorrect connection, polarity reversal, and manipulation of
connections.
1.2 Electrical safety
Direct/indirect contact Ensure that all components connected to the system are protected against direct and
indirect contact according to VDE 0100 Part 410. In the event of an error, parasitic voltages
must not occur (single-fault tolerance).
This can be achieved by:
– Using power supply units with safe isolation (PELV).
– Decoupling circuits, which are not SELV or PELV systems, using optocouplers, relays,
and other components meeting the requirements of safe isolation.
Power supply unit for 24 V
supply
Only use power supply units with safe isolation and PELV according to
EN 50178/VDE 0160 (PELV). This prevents short circuits between primary and secondary
sides.
Make sure that the output voltage of the power supply does not exceed 32 V even in the
event of an error.
WARNING: Hazardous body currents and the loss of functional safety
Disregarding instructions for electrical safety may result in hazardous body currents and
the loss of functional safety.
In order to ensure electrical safety, please observe the following points.

1
GFK-2731 Chapter 1 For your safety 1-3
Insulation rating When selecting the operating equipment, please take into consideration the contamination
and surge voltages, which may occur during operation.
The IC220SDL953 module is designed for surge voltage category II (according to
DIN EN 60664-1). If you expect surge voltages in the system, which exceed the values de-
fined in surge voltage category II, take into consideration additional measures for voltage
limitation.
Installation and
configuration
Please observe the instructions for installing and configuring the system (see
"Documentation" on page 1-5).
1.3 Safety of the machine or system
The machine/system manufacturer and the operator are solely responsible for the safety
of the machine or system and the implemented application, in which the machine or system
is used. The Machinery Directive must be observed.
Draw up and implement a
safety concept
In order to use the safety module described in this document, you must have drawn up an
appropriate safety concept for your machine or system. This includes a hazard and risk
analysis according to the directives and standards specified in "Directives and standards"
on page 1-4, as well as a test report (checklist) for validating the safety function (see
"Appendix: Checklists" on page B-1).
The target safety integrity level (SIL according to EN 61508, SIL CL according to EN 62061
or performance level and category according to EN ISO 13849-1) is ascertained on the
basis of the risk analysis. The safety integrity level ascertained determines how to connect
and parameterize the safety module within the overall safety function.
Within a VersaSafe system, the IC220SDL953 safety module can be used to achieve
safety functions with the following requirements depending on the conditions of use:
– Up to SIL 3 according to standard EN 61508
– Up to SIL CL 3 according to standard EN 62061
– Up to Cat. 4/PL e according to standard EN ISO 13849-1
Check hardware and
parameterization
Carry out a validation every time you make a safety-related modification to your overall
system.
Use your test report to ensure that:
– The safe devices are connected to the correct safe sensors and actuators
– The safe input and output devices have been parameterized correctly
– The safety functions have been wired correctly
WARNING: Depending on the application, incorrect installation and upgrades can
pose serious risks for the user
The user is obliged to design the devices used and their installation in the system
according to these requirements. This also means that existing plants and systems
retrofitted with the VersaSafe system must be checked and tested again in this respect.
Please also refer to "Achievable safety depending on the modules used" on page A-30.

1
1-4 User manual IC220SDL953 - September 2011 GFK-2731
1.4 Safety for starting applications
Consider your machine or system when determining the start conditions:
– Starting the machine or system may only take place when no persons are within the
danger zone.
– Comply with the requirements of EN ISO 13849-1 with respect to manual resetting
functions.
This applies to:
– Switching on of safe devices.
– Acknowledgment of device error messages.
– Acknowledgment of communication errors.
– Acknowledgment of block error messages in the application.
– Removing safeguards for safety functions.
Observe your safety logic during programming/configuring:
– The change from a safe state (replacement value = 0) to the operating state can cause
an edge change (zero-one-edge).
– Include measures in your safety logic that prevent this edge from starting or restarting
of the machine/system unexpectedly.
1.5 Directives and standards
The manufacturers and operators of machines and systems, in which the IC220SDL953
module is used, are responsible for adhering to all applicable directives and legislation.
For the standards observed by the module, please refer to the certificate issued by the
approval body and the EC declaration of conformity. These documents are available on the
Internet at www.ge-ip.com.
1.6 Correct usage
Only use the VersaSafe system in accordance with the instructions in this section.
The IC220SDL953 safety module is designed exclusively for use in a VersaSafe system.
It can only perform its safety-related tasks within the system if it has been integrated into
the execution process correctly and in such a way as to avoid errors.
You must observe all information in this manual as well as in the documents listed in
"Documentation" on page 1-5. In particular, only use the module according to the technical
data and ambient conditions specified in Section 10, "Technical data and ordering data" on
page 10-1 and onwards.
Within a VersaSafe system, the safety module can be used to achieve safety functions with
the following requirements depending on the conditions of use:
– Up to SIL 3 according to standard EN 61508
– Up to SIL CL 3 according to standard EN 62061
– Up to Cat. 4/PL e according to standard EN ISO 13849-1
Please also refer to "Achievable safety depending on the modules used" on page A-30.

1
GFK-2731 Chapter 1 For your safety 1-5
The safety module is designed for connecting single-channel or two-channel actuators,
which can be used in association with safety technology.
For example, the module can be used in the following applications:
– Safety circuits according to EN 60204 Part 1
– Safe shutdown of contactors, motors (24 V DC), valves, ohmic, inductive, and
capacitive loads
The module is not suitable for applications in which stop category 1 also has to be
observed in the event of an error (see also "Behavior of the outputs in the event of enabled
switch-off delay for stop category 1" on page 5-4).
1.7 Documentation
Latest documentation Make sure you always use the latest documentation. Changes or additions to this
document can be found on the Internet at http://support.ge-ip.com.
VersaSafe system When working on the VersaSafe system and its components, you must always keep this
user manual and other items of product documentation to hand and observe the
information therein.
User manuals:
– For the controller used
– For VersaSafe system I/O modules
– For VersaSafe system function blocks
Please also observe the relevant information about the bus system used.
VersaPoint product range GFK-2736
Automation terminals of the VersaPoint product range (configuration and installation)
Documentation for the Network Interface Unit (NIU) used
1.8 Abbreviations used
Table 1-1 Abbreviations used
Abbrevia-
tion
Meaning Standard Example
SIL Safety integrity level EN 61508 SIL 2, SIL 3
SIL CL SIL claim limit EN 62061 SIL CL 3
Cat. Category EN ISO 13849-1 Cat. 2, Cat. 4
PL Performance level EN ISO 13849-1 PL e, PL d

1
1-6 User manual IC220SDL953 - September 2011 GFK-2731
Table 1-2 Abbreviations used
Abbrevia-
tion
Meaning
PELV Protective extra-low voltage
A circuit in which the voltage does not exceed 30 V AC, 42.4 V peak
value or 60 V DC under normal conditions or single-fault conditions, ex-
cept in the event of grounding errors in other circuits.
A PELV circuit is like a SELV circuit, but is connected to protective earth
ground.
(According to EN 61131-2)
EUC Equipment under control

2
GFK-2731 Chapter 2 Product description 2-1
2 Product description
2.1 Note about the system description
The VersaSafe system is described in "Appendix: VersaSafe system" on page A-1.
In the description of the IC220SDL953 safety module, it is assumed that you are familiar
with the VersaSafe system. If this is not the case, please refer to "Appendix: VersaSafe
system" on page A-1 first for information about the system.
2.2 Brief description of the safety module
The IC220SDL953 module is designed for use within a VersaPoint station. The module
features integrated configurable safety logic and safe digital outputs.
The IC220SDL953 safety module can be used as part of a VersaPoint station at any point
within a VersaSafe system.
The transmission speed of the VersaPoint local bus can be set to 500 kbaud or 2 Mbaud
on the safety module using switches.
Use the same transmission speed throughout a VersaPoint station.
The module has a 10-pos. DIP switch, which is used to set the island number and
operating mode.
The module has four safe positive switching digital outputs for two-channel assignment or
eight safe positive switching digital outputs for single-channel assignment.
The outputs can be parameterized according to the application. The outputs enable
actuators to be integrated into the VersaSafe system.
Within a VersaSafe system, the IC220SDL953 safety module can be used to achieve
safety functions with the following requirements:
– Up to SIL 3 according to standard EN 61508
– Up to SIL CL 3 according to standard EN 62061
– Up to Cat. 4/PL e according to standard EN ISO 13849-1
Please also refer to "Achievable safety depending on the modules used" on page A-30.

2
2-2 User manual IC220SDL953 - September 2011 GFK-2731
2.3 Structure of the safety module
Figure 2-1 Structure of the safety module
1Data jumpers (local bus)
2Electronics base with labeling including version designation
hardware/firmware/firmware (not shown)
3Switch for setting the transmission speed and operating mode
4Switch for setting the address
5Potential jumper
6Diagnostic and status indicators; for assignment and meaning see "Local diagnostic
and status indicators" on page 2-6
7VersaPoint connector; for assignment see "Terminal point assignment" on page 3-3
8Terminal points
9Labeling field
2.4 Housing dimensions
Figure 2-2 Housing dimensions (in mm)
4x
4x
1
2
3
78
9
1
2
0
1
2
1
1
2
2
1
2
3
D
6
79690002
FS
UM
987654
3
210
4
5
P
79690008
48,8
71,5
119,8
9876543210
off
on

2
GFK-2731 Chapter 2 Product description 2-3
2.5 Safe digital outputs
The safety module has safe positive switching digital outputs, which can be used as fol-
lows:
– For two-channel assignment:
– For single-channel assignment:
Technical data For the technical data for the safe outputs, please refer to page 10-4.
Parameterization The individual safe digital outputs of a safety module can be parameterized differently. This
means that the outputs can be adapted to various operating conditions and different safety
integrity levels (SIL, SIL CL, Cat., PL) can be implemented.
In order to achieve a high level of error detection, the test pulses must be enabled. If this
is not possible for the connected loads, the test pulses can be disabled. However, in this
case error detection is reduced.
For information about parameterization, please refer to "Parameterization of the safe
outputs" on page 5-2.
Diagnostics Diagnostics are provided via both the local diagnostic indicators and the diagnostic
messages, which are transmitted to the controller.
For information about the diagnostic messages of the outputs, please refer to "Safe digital
output errors" on page 8-4.
– Four two-channel outputs
– Eight single-channel outputs
The safety integrity level (SIL, SIL CL, Cat., PL) and error detection that can be achieved
depend on the parameterization, the structure of the actuator, and the cable installation
(see "Connection examples for safe outputs" on page 6-1).
CAUTION: Diagnostic data is not safety-related
The diagnostic data is not safety-related. This data must not be used to execute safety-
related functions or actions.

2
2-4 User manual IC220SDL953 - September 2011 GFK-2731
Requirements for con-
trolled devices/actuators
The error detection of the module varies depending on the parameterization. This results
in specific requirements for the actuators.
– If the outputs are parameterized with test pulses, the output circuits are tested by test
pulses at regular intervals. These test pulses are visible at the output and can trigger
undesirable reactions with quick responding actuators.
Switching off the test pulses affects the error detection of the module. Please observe
the achievable safety integrity level, which is specified in "Connection examples for
safe outputs" on page 6-1.
The failure detection time is 20 ms.
– Only use appropriately qualified actuators.
– Use reliable components. These include, for example:
– Use relays or contactors with positively driven N/C contacts to safely monitor the state
(pick-up, drop-out).
– Please observe any special environmental requirements in your application when
selecting the controlled devices.
– Please note applicable C standards in your application (e.g., EN 1010), in which, for
example, the number of controlled devices required to achieve a particular category is
specified.
WARNING: Unintentional machine startup
If the process does not tolerate this behavior, actuators with sufficient inertia must
be used.
In general, the load must not be so dynamic that it causes dangerous states within
1ms.
Quick actuators, which offer a safety-related response to pulses in under 1 ms, may
not generally be used.
Please refer to "Single-channel assignment of safe outputs" on page 6-5 and "Two-
channel assignment of safe outputs" on page 6-8 for additional information.
– Control contactors according to EN 60947-4-1
– Power contactors
– Relays with positively driven contacts according to DIN EN 50205