Lenze SM302 User manual

EDS94AYAF
.UBo
Ä.UBoä
Manual
9400

E94AYAF − SM302
Safety module
L−force Drives
Translation

Please read these instructions and the documentation of the standard device before you
start working!
Observe the safety instructions given therein!
0Fig. 0Tab. 0

Safety engineering
Contents
1
3
EDS94AYAF EN 1.0
1 Safety engineering
Contents
1.1 Basics 5. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.1.1 Introduction 5. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.1.2 Drive−based safety with L−force | 9400 5. . . . . . . . . . . . . . . . . . . . . . . . . . .
1.1.3 Terms and abbreviations of the safety engineering 6. . . . . . . . . . . . . . . . .
1.1.4 Registered trademarks 7. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.1.5 Important notes 8. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.1.6 Safety instructions 9. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.1.7 Hazard and risk analysis 11. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.1.8 Standards 11. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.1.9 Safety instructions for the installation according to UL/CSA 11. . . . . . . . .
1.1.10 Overview of sensors 13. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.2 Device modules 14. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.2.1 Slot 14. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.2.2 Function mode of the safety modules 16. . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.2.3 SM302 safety module 17. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.2.4 Mission time 24. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.2.5 Safe inputs 29. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.2.6 Safe output 34. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.2.7 Further inputs 35. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.2.8 Safe speed measurement and position detection 36. . . . . . . . . . . . . . . . . .

Safety engineering
Contents
1
4 EDS94AYAF EN 1.0
1.3 Safety functions 40. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.3.1 General information 40. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.3.2 Integration into the application of the controller 42. . . . . . . . . . . . . . . . . . .
1.3.3 Safe torque off 43. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.3.4 Safe stop 1 43. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.3.5 Safe stop 2 44. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.3.6 Ramp monitoring SS1/SS2 45. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.3.7 Emergency stop 45. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.3.8 Safe maximum speed 46. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.3.9 Safely limited speed 48. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.3.10 Safe direction 49. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.3.11 Safely limited position 50. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.3.12 Position−dependent safe speed 50. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.3.13 Safe cam 51. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.3.14 Safe referencing 51. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.3.15 Repair mode select 52. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.3.16 Safe operation mode selector 53. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.3.17 Safe enable switch 56. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.3.18 Cascading 57. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.4 Safety address 59. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.5 Safe bus interfaces 60. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.5.1 PROFIsafe connection 60. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.5.2 FSoE connection 62. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.6 Safe parameter setting 63. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.6.1 Parameter setting 63. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.6.2 Parameter sets and axes 65. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.7 Error management 66. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.7.1 Error states 66. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.7.2 Logbook function in the controller 67. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.7.3 Logbook function in the SM302 67. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.8 Response times 68. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.8.1 Response times of the inputs 69. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.8.2 Response time of the safe output 69. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.8.3 Response times of the safety bus 69. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.8.4 Response time of encoder monitoring 70. . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.9 Acceptance 71. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.9.1 Description 71. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.9.2 Periodic inspections 72. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.10 Appendix 73. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.10.1 Module error messages 73. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
1.11 Total index 74. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Safety engineering
Basics
Introduction
1
5
EDS94AYAF EN 1.0
1.1 Basics
1.1.1 Introduction
With increasing automation, protection of persons against hazardous movements is
becoming more important. Functional safety describes the measures needed by means of
electrical or electronic equipment to reduce or remove danger caused by failures.
During normal operation, safety equipment prevents people accessing hazardous areas. In
certain operating modes, e.g. set−up mode, work needs to be carried out in hazardous
areas. In these situations the machine operator must be protected by integrated drive and
control measures.
Drive−based safety provides the conditions in the controls and drives to optimise the safety
functions. Planning and installation expenditure is reduced. In comparison to the use of
standard safety engineering, drive−based safety increases machine functionality and
availability.
1.1.2 Drive−based safety with L−force | 9400
The controllers of the L−force|9400 range can be equipped with a safety module. The
functional range of the safety module types varies in order to optimally implement
different applications.
"Drive−based safety" stands for applied safety functions, which can be used for the
protection of persons working on machines.
The motion functions are continued to be executed by the controller. The safety modules
monitor the safe compliance with the limit values and provide the safe inputs and outputs.
When the limit values are exceeded the safety modules start the control functions
according to EN 60204−1 directly in the controller.
The safety functions are suitable for applications according to IEC 61508 to SIL 3 or 4 and
meet, depending on the module, the requirements of Performance Level e (PL e) and
control category 4 according to EN ISO 13849−1.

Safety engineering
Basics
Terms and abbreviations of the safety engineering
1

6 EDS94AYAF EN 1.0
1.1.3 Terms and abbreviations of the safety engineering
Abbreviation Meaning
9400 Lenze servo controller
Cat. Category according to EN ISO 13849−1 (formerly EN 954−1)
OSSD Output Signal Switching Device, tested signal output
PS PROFIsafe
PWM Pulse width modulation
SD−In Safe input (Safe Digital Input)
SD−Out Safe output (Safe Digital Output)
SIL Safety Integrity Level according to IEC 61508
SM Safety module
Optocoupler
supply
Optocoupler supply for the driver control
PELV Protective extra low voltage
SELV Safety extra low voltage
OFF state Signal status of the safety sensor technology when it is released or responding
ON state Signal status of the safety sensor technology in normal operation
PM PN−switched signal paths
PP PP−switched signal paths
GSE File containing device−specific data to establish PROFIBUS communication
GSDML File containing device−specific data to establish PROFINET communication
S−Bus Safety bus
Abbreviation Safety function
SLS Safely limited speed
SLI Safely limited increment
SOS Safe operating stop
SS1 Safe stop 1
SS2 Safe stop 2
STO Safe torque off
Formerly: safe standstill
SMS Safe maximum speed
SDI Safe direction
SSE Safe stop emergency
ES Safe enable switch
OMS Operation mode selector
AIE Error acknowledgement (Acknowledge In Error)
AIS Restart acknowledgement (Acknowledge In Stop)
SLP Safely Limited Position
SCA Safe Cam
PDSS Position−dependent Safe Speed
FSoE Fail Safe over EtherCAT
RMS Repair Mode Select

Safety engineering
Basics
Registered trademarks
1
7
EDS94AYAF EN 1.0
1.1.4 Registered trademarks
Term / logo Information
PROFINET® (Process Field Network) is a real−time capable fieldbus system
based on Ethernet.
PROFINET® is a registered trademark and patented technology, licensed by the
PROFIBUS & PROFINET International (PI) user organisation.
The certified safety protocol for transmitting safety−oriented data via
PROFINET®.
EtherCAT® (Ethernet for Controller and Automation Technology) is an
Ethernet−based fieldbus system meeting the application profile for industrial
realtime systems.
EtherCAT® is a registered trademark and patented technology, licensed by
Beckhoff Automation GmbH, Germany.
Safety over EtherCAT® is a registered trademark and patented technology,
licensed by Beckhoff Automation GmbH, Germany.

Safety engineering
Basics
Important notes
1

8 EDS94AYAF EN 1.0
1.1.5 Important notes
The following pictographs and signal words are used in this documentation to indicate
dangers and important information:
Safety instructions
Structure of safety instructions:
Danger!
(characterises the type and severity of danger)
Note
(describes the danger and gives information about how to prevent dangerous
situations)
Pictograph and signal word Meaning
Danger!
Danger of personal injury through dangerous electrical voltage.
Reference to an imminent danger that may result in death or
serious personal injury if the corresponding measures are not
taken.
Danger!
Danger of personal injury through a general source of danger.
Reference to an imminent danger that may result in death or
serious personal injury if the corresponding measures are not
taken.
Stop!
Danger of property damage.
Reference to a possible danger that may result in property
damage if the corresponding measures are not taken.
Application notes
Pictograph and signal word Meaning
Note! Important note to ensure troublefree operation
Tip! Useful tip for simple handling
Reference to another documentation
Special safety instructions and application notes
Pictograph and signal word Meaning
Warnings! Safety note or application note for the operation according to
UL or CSA requirements.
The measures are required to meet the requirements according
to UL or CSA.
Warnings!

Safety engineering
Basics
Safety instructions
1
9
EDS94AYAF EN 1.0
1.1.6 Safety instructions
Application as directed
The safety modules SMx (E94AYAx) may only be used together with Lenze drive controllers
of the L−force | 9400 (E94A... / E94B...) series.
Any other use shall be deemed inappropriate!
Installation/commissioning
Danger!
Danger to life through improper installation
Improper installation of safety engineering systems can cause an uncontrolled
starting action of the drives.
Possible consequences:
ƒDeath or severe injuries
Protective measures:
ƒSafety engineering systems may only be installed and commissioned by
qualified and skilled personnel.
ƒAll control components (switches, relays, PLC, ...) and the control
cabinetmust comply with the requirements of EN ISO 13849−1 and EN ISO
138492. Thisincludes i.a.:
– Switches, relays with at least IP54 enclosure.
– Control cabinet with at least IP54 enclosure.
– Please refer to EN ISO 13849−1 and EN ISO 138492 for all further
requirements.
ƒIt is essential to use insulated wire end ferrules for wiring.
ƒAll safety relevant cables outside the control cabinet must be protected, e.g.
by means of a cable duct:
– Ensure that no short circuits can occur.
– For further measures see EN ISO 138492.
ƒIf an external force acts upon the drive axes, additional brakes are required.
Please observe that hanging loads are subject to the force of gravity!

Safety engineering
Basics
Safety instructions
1

10 EDS94AYAF EN 1.0
Danger!
When the request for the safety function is deactivated, the drive can restart
automatically. The behaviour can be set via the parameter "Restart behaviour"
(C15300/1/2).
In the case of an automatic restart, you must provide external measures which
ensure that the drive only restarts after an acknowledgement (EN 60204).
Danger!
When the "safe torque off" (STO) function is used, an "emergency
switching−off" according to EN 60204 is not possible without additional
measures. There is no electrical isolation, no service switch or repair switch
between motor and controller!
Emergency switching−off" requires an electrical isolation, e.g. by a central
mains contactor!
During operation
After the installation is completed, the operator must check the wiring of the safety
function.
The functional test must be repeated at regular intervals. The time intervals to be selected
depend on the application, the entire system and the corresponding risk analysis. The
inspection interval should not exceed one year.
Residual hazards
In case of a short−circuit of two power transistors a residual movement of the motor of up
to 180 °/number of pole pairs may occur! (Example: 4−pole motor Þresidual movement
max. 180 °/2 = 90 °)
This residual movement must be considered in the risk analysis, e.g. safe torque off for
main spindle drives.

Safety engineering
Basics
Hazard and risk analysis
1
11
EDS94AYAF EN 1.0
1.1.7 Hazard and risk analysis
This documentation can only accentuate the need for hazard analysis. The user of the
integrated safety system must read up on standards and the legal situation:
Before the launch of a machine, the manufacturer of the machine must conduct a hazard
analysis according to Machinery Directive 2006/42/EC to determine the hazards
associated with the application of the machine. The Machinery Directive refers to three
basic principles for the highest possible level of safety:
ƒHazard elimination / minimisation by the construction itself.
ƒRequired protective measures must be taken against hazards which cannot be
eliminated.
ƒExisting residual hazards must be documented and the user must be informed of
them.
Detailed information on the hazard analysis procedure is provided in the
DIN EN ISO 12100:2013−08 − ""Safety of machinery − General principles for design, risk
assessment and risk reduction". The results of the hazard analysis determine the category
for safety−related control systems according to EN ISO 13849−1. Safety−oriented parts of
the machine control must be compliant.
1.1.8 Standards
Safety regulations are confirmed by laws and other governmental guidelines and
measures and the prevailing opinion among experts, e.g. by technical regulations.
The regulations and rules to be applied must be observed in accordance with the
application.
1.1.9 Safety instructions for the installation according to UL/CSA
Original − English
Warnings!
ƒSecondary circuit shall supplied from an external isolating source.
ƒMaximum surrounding air temperature: 55 °C.

Safety engineering1

12 EDS94AYAF EN 1.0
Original − French
Warnings!
ƒSecondary circuit shall supplied from an external isolating source.
ƒMaximum surrounding air temperature: 55 °C.

Safety engineering
Overview of sensors
1
13
EDS94AYAF EN 1.0
1.1.10 Overview of sensors
Passive sensors
Passive sensors are two−channel switching elements with contacts. The connecting cables
and the sensor function must be monitored.
The contacts must switch simultaneously (equivalently). Nevertheless, safety functions
will be activated as soon as at least one channel is switched.
The switches must be wired according to the closed−circuit principle.
Examples of passive sensors:
ƒDoor contact switch
ƒEmergency stop control units
Active sensors
Active sensors are units with 2−channel semiconductor outputs (OSSD outputs). With the
integrated safety system of this device series, test pulses < 1 ms for monitoring the
outputs and cables are permissible. The maximally permissible connection capacity of the
outputs is to be observed. Active sensors are wired directly to the terminals of the
integrated safety system. Monitoring for cross or short circuits must be carried out by the
active sensor.
P/M−switching sensors switch the positive and negative cable or the signal and ground
wire of a sensor signal.
The outputs must switch simultaneously (equivalently). Nevertheless, safety functions
will be activated as soon as at least one channel is switched. Active triggering of only one
channel indicates faulty sensors or impermissible wiring.
Examples of active sensors:
ƒLightgrid
ƒLaser scanner
ƒControl systems
Sensor inputs
For unused sensor inputs, "Input deactivated" must be parameterised.
Connected deactivated sensors can create the false impression of safety technology being
provided. For this reason, a deactivation of sensors by parameter setting only is not
permissible and not possible. It is monitored that no sensor signal is pending.

Safety engineering
Device modules
Slot
1

14 EDS94AYAF EN 1.0
1.2 Device modules
1.2.1 Slot
The slot for the safety modules is marked in the documentation with M4. It is the lowest
slot in the controller (see overview in the documentation of the controller).
1.2.1.1 Mounting
E94AYAX001
1.2.1.2 Dismounting
E94AYCXX001H

Safety engineering
Device modules
Slot
1
15
EDS94AYAF EN 1.0
1.2.1.3 Module exchange
Stop!
Before mounting/dismounting, switch off the supply voltage to prevent
electronic modules from damage.
Every module exchange is detected by the standard device and documented in a logbook.
When a module is replaced by the same type, no restrictions arise. Depending on the
module type it may be necessary to take further measures (e.g. address setting, safe
parameter setting, ...).
When the module is replaced by a different type, the drive is inhibited by the controller. The
inhibit can only be deactivated when the parameter setting of the required safety module
complies with the plugged safety module.
Note!
In case you exchange the module, the address switch must be set identically
to the module to be replaced. Only then the corresponding safe parameter set
can be transferred to the module.

Safety engineering
Device modules
Function mode of the safety modules
1

16 EDS94AYAF EN 1.0
1.2.2 Function mode of the safety modules
Disconnecting paths
The transmission of the pulse width modulation is safely disconnected by the safety
module. Hence the drivers do not create a rotating field. The motor is safely switched to
torqueless operation (STO).
M
SMx
PWM
µC
PC
3x
3x
Xx
SSP94SM320
Fig. 1−1 Disconnecting paths of the safety modules
SMx Safety module
xx Input / output terminal
C Control section
mC Microcontroller
PWM Pulse width modulation
P Power section
M Motor
Safety status
When the controller is switched off by the safety module, the controller switches to the
"Safe torque off"device state.
ƒ"Controller in STO state" is entered into the logbook (0x00750003).
ƒ"Safe torque off active" is displayed in C00183.
Fail−safe status
Note!
If internal errors of the safety modules are detected, the motor is safely
switched to torque−free operation (fail−safe status).

Safety engineering
Device modules
SM302 safety module
1
17
EDS94AYAF EN 1.0
1.2.3 SM302 safety module
Validity information
This documentation is valid for:
SM302 safety module
Type HW SW
E94AYAF from VA As of 1.0
Identification
L
Type
 

E94YCEI003C E94AYXX001
  
E94 A Y A x xx xx nn
Product series
Version
Module identification: Device module
Module type: Safety module
Design
A = SM0
B = SM100
E = SM301
F = SM302
Hardware version
Software version (SM30x only)
Serial number

Safety engineering
Device modules
SM302 safety module
1

18 EDS94AYAF EN 1.0
Application range
The use of this module is permissible with standard devices of the 9400 product series from
nameplate designation
Type HW SW
E94AxHExxxx 2A 13.xx
E94BSHExxxx PA −
E94AxPExxxx 2A 07.xx
E94BSPExxxx PA −
The use of this module is permissible with the PROFINET® communication module from
nameplate designation
Type HW SW
E94AYCER VF 03.xx
The use of this module is permissible with the EtherCAT® communication module from the
nameplate designation
Type HW SW
E94AYCET VF 04.xx
Note!
A safety bus system can only be operated via the upper module slot (MXI1) of
the Servo Drive 9400.

Safety engineering
Device modules
SM302 safety module
1
19
EDS94AYAF EN 1.0
1.2.3.1 Overview
Functions from SM302 V1.0 onwards
ƒSafe torque off (STO)
(formerly: safe standstill, protection against unexpected start−up)
ƒSafe stop 1 (SS1)
ƒSafe stop 2 (SS2) − see SOS
ƒSafe stop emergency (SSE)
ƒSafe operational stop (SOS)
ƒSafe maximum speed (SMS)
ƒSafely limited speed 1 ... 4 (SLS1 ... SLS4)
ƒSafe direction (SDI)
ƒSafely limited increment (SLI)
ƒSafely limited position (SLP)
ƒSafe cam (SCA)
ƒSafe referencing (SREF)
ƒSafe speed and position monitoring
– with resolver and encoder as motor encoder
– or optionally with additional position encoder (2−encoder concept)
ƒPosition−dependent safe speed (PDSS)
ƒSafe cascading (CAS) via SD−In4/SD−Out1
ƒSafety bus connection (PROFIsafe V2)
ƒFail Safe over EtherCAT − Slave (FSoE))
ƒSafe operation mode selector (OMS)
ƒRepair mode select (RMS)
ƒSafe enable switch (ES)
ƒSafe monitor (safe output)
ƒConnection of safety sensors (safe inputs)
ƒSafe parameter setting
ƒParameterisable response time of encoder monitoring

Safety engineering
Device modules
SM302 safety module
1

20 EDS94AYAF EN 1.0
Compatibility
Compatibility of different SM302 versions
Replacement of an SM302 by an SM302 with a higher firmware version (SW):
ƒEvery SM302 can be used with a safe parameter set of an elder firmware version
without any changes.
ƒThe safe parameter set including CRC in the memory module of the drive is not
changed by the SM302 when the parameter set from the memory module is
accepted.
ƒThe CE Declaration of Conformity remains valid.
ƒSafe parameter sets of the "SM302 safety module" component can be loaded into
an SM302 with a higher firmware version without any changes.
– Extended functionalities of the newer firmware version cannot be selected and
executed.
The safe parameter set of an SM302 with a newer firmware version cannot be loaded into
an SM302 with an elder firmware version.
1.2.3.2 Elements of the module
SSP94SM321b
Fig. 1−2 Module view
Pos. Description
Safety address switch (in the left part of the housing)
S82 Module switch for parameter set adoption from the memory module
X82.1
Plug−in terminal strips for input and output signals
X82.2
X82.3
X82.4