Lenze c250-S User manual

.[.I Ä.[.Iä
Operating Instructions
Translation
EN
c250−S C25BAYA42, C25BAYA82,
C25BAYA160, C25BAYA164
c250−S Safety I/O−module
l

Safety I/O-module
EDBC250SIO | 2.0 2
Information Safety I/O-module C25BAYA42
The operatin instructions be in on pa e 3.
Information Safety-I/O-Module C25BAYA82, C25BAYA16 ,
C25BAYA164
The operatin instructions be in on pa e 113.
ATTENTION: There are si nificant deviations from the Safety I/O Module
C25BAYA42 in some Technical Data.
I
I

Safety I/O-module
EDBC250SIO | 2.0 3
1 Version Details ........................................................................................................... 7
1.1 Revision .............................................................................................................. 7
1.1.1 Manual .............................................................................................. 7
1.1.2 Safety I/O-module (C25BAYA42) .......................................................... 7
2 Preface ...................................................................................................................... 8
2.1 About this Operatin Instructions ....................................................................... 8
2.1.1 Limitation of Liability ............................................................................ 8
2.1.2 Terms of Delivery ................................................................................. 8
2.1.3 Copyri ht .............................................................................................. 8
2.1.4 Warranty .............................................................................................. 9
2.2 Reliability, Safety ................................................................................................. 9
2.2.1 Applicability .......................................................................................... 9
2.2.2 Tar et Group ........................................................................................ 9
2.2.3 Reliability .............................................................................................. 9
2.2.4 Hazard and Other Warnin s ............................................................... 10
2.2.5 Other Notices ..................................................................................... 10
2.2.6 Safety ............................................................................................ 11
2.2.7 Project Plannin and Installation ....................................................... 11
2.2.8 Maintenance and Servicin ................................................................ 11
2.2.9 General Notes on Installation ............................................................ 12
3 System Description .................................................................................................. 14
3.1 EtherCAT® – Ethernet Control ........................................................................... 14
3.2 c250-S Safety System ......................................................................................... 14
3.2.1 Safety over EtherCAT (FSoE) .............................................................. 15
3.2.2 Safety controller c250-S ..................................................................... 15
3.2.3 Safety I/O-module .............................................................................. 15
3.2.4 PLCDesi ner Safety............................................................................. 15
3.2.5 PLCDesi ner SafetyPLCopen Library .................................................. 16
4 Product Description ................................................................................................. 17
4.1 General Description ........................................................................................... 17
4.2 Application ......................................................................................................... 18
4.2.1 Intended Use ...................................................................................... 18
4.2.2 Qualified Persons ............................................................................... 18
4.2.3 Disclaimer of Liability ......................................................................... 19
4.3 Safe State ........................................................................................................... 20
4.3.1 Safe Functional State ......................................................................... 20
4.3.2 Fail-Safe State – External Fault........................................................... 20
4.3.3 Fail-Safe State – Internal Fault ........................................................... 20
4.3.4 Traceability ......................................................................................... 21

Safety I/O-module
EDBC250SIO | 2.0 4
4.4 Useful Lifetime ................................................................................................... 21
4.5 Technical Data ................................................................................................... 21
4.5.1 General Specifications ........................................................................ 21
4.5.2 Safe Di ital Inputs .............................................................................. 23
4.5.3 Safe Di ital Test Pulse Outputs .......................................................... 23
4.5.4 Safe Di ital Outputs ........................................................................... 24
4.6 Safety-related Input Ratin s .............................................................................. 25
4.6.1 Safety-related Ratin s of a Sin le-channel Application ..................... 25
4.6.2 Safety-related Ratin s of a Two-channel Application ........................ 26
4.7 Safety-related Output Ratin s ........................................................................... 27
4.7.1 Safety-related Ratin s of a Sin le-channel Application ..................... 27
4.7.2 Safety-related Ratin s of a Two-channel Application ........................ 28
4.8 Response Time................................................................................................... 29
4.9 Dimensions ........................................................................................................ 31
4.10 Transport and Stora e ....................................................................................... 31
5 Construction and Functionality ................................................................................. 32
5.1 Labellin and Identification ............................................................................... 32
5.1.1 Imprinted Texts and Symbols ............................................................. 32
5.1.2 Serial Number .................................................................................... 32
5.2 Contents of Packa e .......................................................................................... 33
5.3 Connectors......................................................................................................... 34
5.3.1 E-bus and Module Lock ...................................................................... 34
5.3.2 Sprin -assisted Combi Plu X1 ........................................................... 35
5.3.3 Wirin Example .................................................................................. 37
5.3.4 Safety I/O-module Supply .................................................................. 38
5.4 Indicators and Controls ..................................................................................... 40
5.4.1 LED "EtherCAT Run" ........................................................................... 40
5.4.2 LED "Safe Status"................................................................................ 40
5.4.3 LED "Power" ....................................................................................... 40
5.4.4 LEDs "Channel" ................................................................................... 41
5.5 Operatin Software ........................................................................................... 42
Installation and Operation ........................................................................................ 43
6.1 Mechanical Installation ..................................................................................... 43
6.1.1 Mountin Position .............................................................................. 44
6.1.2 To Snap on a Sin le Module ............................................................... 45
6.1.3 To Interconnect Two Modules ........................................................... 45
6.1.4 To Disconnect Two Modules .............................................................. 46
6.1.5 To Take Down a Sin le Module .......................................................... 46

Safety I/O-module
EDBC250SIO | 2.0 5
6.2 Electrical Installation ......................................................................................... 47
6.2.1 Earth ............................................................................................ 47
6.2.2 Module Interconnection .................................................................... 48
6.2.3 System Power Supply ......................................................................... 48
6.2.4 Safety I/O-module Supply .................................................................. 49
6.2.5 Sensor and Actuator Power Supply .................................................... 50
6.2.6 Power Supply Wirin Example ........................................................... 51
6.2.7 Sensor Connection ............................................................................. 52
6.2.8 Actuator Connection .......................................................................... 58
6.2.9 Multiple socket connector (MSC)....................................................... 62
6.3 Confi uration ..................................................................................................... 63
6.3.1 Address Setup .................................................................................... 63
6.3.2 FSoE Parameters ................................................................................ 65
6.3.3 Input Parameters ............................................................................... 71
6.3.4 Output Parameters ............................................................................ 72
6.4 Puttin into Service ........................................................................................... 74
6.5 Dia nosis ............................................................................................................ 75
6.5.1 Self-test ............................................................................................ 75
6.5.2 Safety I/O-module Module Faults ...................................................... 75
6.5.3 Wron Wirin ..................................................................................... 75
6.5.4 Temperature Faults ............................................................................ 76
6.5.5 Wron Supply Volta e ........................................................................ 76
6.5.6 Table of Faults .................................................................................... 76
6.5.7 Error Codes ......................................................................................... 77
6.5.8 EtherCAT Link Lost.............................................................................. 78
6.5.9 Wron FSoE Address .......................................................................... 79
6.5.10 Wron Confi uration of the Safety I/O-Module ................................ 79
6.6 Reset / Acknowled e Error ................................................................................ 80
6.7 Maintenance / Servicin .................................................................................... 81
6.7.1 General ............................................................................................ 81
6.7.2 Servicin ............................................................................................ 81
6.7.3 Preventive Maintenance .................................................................... 81
6.8 Replacin a Safety I/O-module .......................................................................... 82
6.9 Durability ........................................................................................................... 83
6.9.1 Repairs / Customer Service ................................................................ 83
6.9.2 Warranty ............................................................................................ 83
6.9.3 Takin out of Service .......................................................................... 84
6.9.4 Disposal ............................................................................................ 84

Safety I/O-module
EDBC250SIO | 2.0 6
7 Connection Examples ............................................................................................... 85
7.1 Safety Function with Sin le-channel Input ........................................................ 86
7.2 Safety Function with Two-channel Input .......................................................... 87
7.3 Two-hand Actuation .......................................................................................... 88
7.4 Mode Selector, Rotary Table ............................................................................. 90
7.5 Safety Mats, Connectin Blocks and Bumpers .................................................. 92
7.6 Connectin Two Actuators with Internal GND Reference ................................. 94
7.7 Connectin Two Parallel Actuators to One Safe Output ................................... 95
8 Appendix ................................................................................................................. 97
8.1 Object Dictionary ............................................................................................... 97
8.1.1 Type 1000
h
......................................................................................... 97
8.1.2 Error Re ister 1001
h
........................................................................... 97
8.1.3 Name 1008
h
........................................................................................ 98
8.1.4 Hardware Version 1009
h
.................................................................... 98
8.1.5 Software Version 100A
h
..................................................................... 98
8.1.6 Identification 1018
h
............................................................................ 99
8.1.7 24V Volta e CPU 1: 2001
h
and CPU 2: 2011
h
................................... 100
8.1.8 Output 0/1 Current CPU 1: 2005
h
and CPU 2: 2015
h
....................... 100
8.1.9 CPU 1: External Temperature Sensor 2006
h
.................................... 101
8.1.10 Errorcode CPU 1: 2007
h
and CPU 2: 2017
h
....................................... 102
8.1.11 Errorline CPU 1: 2008
h
and CPU 2: 2018
h
......................................... 107
8.1.12 Errormodule CPU 1: 2009
h
and CPU 2: 2019
h
.................................. 107
8.1.13 Errorclass CPU 1: 200A
h
and CPU 2: 201A
h
...................................... 109
8.1.14 System Uptime [s] 200C
h
.................................................................. 109
8.1.15 Temperature Warnin 2016
h
........................................................... 109
8.1.16 Objects - For Internal Use Only ........................................................ 110
8.2 Standards Complied With ................................................................................ 111
8.2.1 Product Standard Applied ................................................................ 111
8.2.2 Safety Standards and Directives ...................................................... 111
8.2.3 EMC Standards ................................................................................. 111
8.3 Re ulations and Declarations .......................................................................... 111
8.3.1 Mark of Conformity .......................................................................... 111
8.4 Permits .......................................................................................................... 112
8.5 Order Specifications ........................................................................................ 112
8.5.1 Basic Units ........................................................................................ 112
8.5.2 Accessories ....................................................................................... 112
8.5.3 Spare Parts ....................................................................................... 112

1 Version Details
EDBC250SIO | 2.0 7
1Version Details
1.1 Revision
1.1.1 Manual
Manual History
Version
Date
Comments / modification
1.0
0
1/
3
1/2017
C
reation
1.1
0
4
/0
5
/
2017
R
elease
1.2
0
8
/
0
2
/2017
C
orrections
1.
3
0
8
/
2
9
/
2017
C
orrections
2.0
0
9
/
2
7
/2019
C
orrections
1.1.2 Safety I/O-module (C25BAYA42)
The table below summarises the module releases, manual versions, production dates and the
chan es to the functionality.
Modul release
Version
Manual
Date
Comments / modifications
V1.0 1.0 01/31/2017
Applies to module release
V1.0
(Softwareversion V1.0x, Hardwareversion V2.1)
V1.0 1.1 04/05/2017
A
pplies to module release
V1.0
(Softwareversion V1.0x, Hardwareversion V2.1)
V1.0 1.2 08/02/2017
A
pplies to module release V1.0
(Softwareversion V1.0x, Hardwareversion V2.1)
V1.0 1.3 08/29/2017
A
pplies to module release
V1.0
(Softwareversion V1.0x, Hardwareversion V2.1)
V1.0 2.0 09/27/2019
A
pplies
to module release V1.0
(Softwareversion V1.0x, Hardwareversion V2.1)

Safety I/O-module
EDBC250SIO | 2.0 8
2Preface
2.1 About this Operating Instructions
This document is the ori inal Operatin Instructions to Safety I/O-module, order number
C25BAYA42. Your module work should always be based on the correct Operatin Instructions
version ► 1.1.1 Manual.
This document is primarily directed to system desi ners and project en ineers. It does not
contain any availability information. We reserve the ri hts for errors, omissions and
modifications. Pictures are similar.
Information
Always
use
the current version of the manual.
Information and Tools about the Lenze Products can be found in the Internet
httP://www.lenze.com
►
Download
2.1.1 Limitation of Liability
Specifications are for description only and are not to be understood as uaranteed product
properties in a le al sense. Exact properties and characteristics shall be a reed in the specific
contract. Claims for dama es a ainst us - on whatever rounds - are excluded, except in
instances of deliberate intent or ross ne li ence on our part.
2.1.2 Terms of Delivery
The eneral conditions of sales and service of Lenze Automation GmbH shall apply.
2.1.3 Copyri ht
Microsoft®, Windows® and the Windows® lo o are re istered trademarks of Microsoft Corp. in
the USA and other countries.
EtherCAT® is a re istered brand and patented technolo y, licenced by Beckhoff Automation
GmbH, Germany.
Safety over EtherCAT is a re istered trademark and patented technolo y, licenced by Beckhoff
Automation GmbH, Germany
Further information about the PLCopen or anisation is available at www.plcopen.or . CiA® and
CANopen® are re istered joint brands of CAN in Automation e.V. Title to all companies and
company names mentioned herein as well as to products and product names is held by the
respective enterprises.
I

2 Preface
EDBC250SIO | 2.0 9
2.1.4 Warranty
Warranty is subject to the provisions of the conditions of sale of Lenze or any contractual
a reements between the parties.
The warranty will be voided by:
•improper assembly and use
•repairs or inadmissible servicin
•modifications or renderin the serial number ille ible or removin it
2.2 Reliability, Safety
2.2.1 Applicability
This Operatin Instructions contains all information necessary for the use of the described
product (control device, control terminal, software, etc.) accordin to instructions.
2.2.2 Tar et Group
The Operatin Instructions is written for desi n, project plannin , servicin and commissionin
experts. For proper understandin and error-free application of technical descriptions,
instructions for use and particularly of notes of dan er and warnin , extensive knowled e of
automation technolo y and functional safety is compulsory.
2.2.3 Reliability
Reliability of Lenze products is brou ht to the hi hest possible standards by extensive and cost-
effective means in their desi n and manufacture.
These include:
•selectin hi h-quality components,
•quality a reements with our suppliers,
•actions to avoid static char es when handlin MOS circuits,
•worst case plannin and desi n of all circuits,
•visual inspections at various sta es of fabrication,
•computer-aided tests of all assemblies and their interaction in the circuit,
•statistical assessment of the quality of fabrication and of all returned oods for the
immediate takin of appropriate corrective actions.
•standardised returns handlin process
•ISO 9001:2015 certification

2 Preface
EDBC250SIO | 2.0 10
2.2.4 Hazard and Other Warnin s
Despite the actions described in section 2.2.3 Reliability , the occurrence of faults or errors in
electronic control units - even if most hi hly improbable - must be taken into consideration.
Please pay particular attention to the additional notices which we have marked by symbols
throu hout this Operatin Instructions. While some of these notices make you aware of
possible dan ers, others are intended as a means of orientation. They are described further
down below in descendin order of importance.
Every alert and hazard warnin is made up as follows:
•Type and source of risk
•Potential consequences of non-observance
•Preventive measures
DANGER
A DANGER warnin makes you aware of an immediately hazardous situation
which WILL cause a serious or fatal accident if not observed.
WARNING
A WARNING makes you aware of a potentially hazardous situation which MAY
cause a serious or fatal accident or dama e to this or other devices if not
observed.
CAUTION
A CAUTION alert makes you aware of a potentially hazardous situation which
MAY cause an accident or dama e to this or other devices if not observed.
ATTENTION
An ATTENTION notice makes
you aware of a potentially hazardous situation
which MAY cause dama e to this or other devices if not observed.
2.2.5 Other Notices
Note, information
This symbol draws your attention to additional information concernin the use
of the described product. This may include cross references to information
found elsewhere (e. . in other manuals).
I

2 Preface
EDBC250SIO | 2.0 11
2.2.6 Safety
Our products normally become part of lar er systems or installations. The information below is
intended to help you inte rate the product into its environment without dan ers to humans or
material/equipment.
DANGER
Non
-
compliance with the
Operating Instructions
Measures for the prevention of dan erous faults or errors may be rendered
ineffective or new hazard sources created.
Carefully read the Operatin Instructions
Take particular heed of the hazard warnin s
Information
To
achieve a hi h de ree of conceptual safety in plannin and installin an
electronic controller, it is essential to exactly follow the instructions iven in the
Operatin Instructions because wron handlin could lead to renderin
measures a ainst dan ers ineffective or to creatin additional dan ers.
2.2.7 Project Plannin and Installation
•Emer ency-off installations must comply with EN 60204/IEC 204 (VDE 0113). They must be
operative at any time.
•Safety and precautions re ulations for qualified applications have to be complied with.
•Please pay particular attention to the notices of warnin which, at relevant places, will
make you aware of possible sources of dan erous mistakes or faults.
•Relevant standards and VDE re ulations are to be complied with in every case.
•Control elements are to be installed in such a way as to exclude unintended operation.
•Lay control cables such that interference (inductive or capacitive) is excluded if this
interference could influence controller operation or its functionality.
2.2.8 Maintenance and Servicin
•You are not allowed to repair Safety I/O-module. Please return the module to Lenze if
defective.
•Spare parts:
Only use parts approved of by Lenze. Only enuine Lenze modules may be used in modular
controllers.
•Modular systems: always plu or unplu modules in a power-down state. You may
otherwise dama e the modules or (possibly not immediately reco nisably!) inhibit their
functionality.
•Always dispose of (rechar eable) batteries as hazardous waste.
I

2 Preface
EDBC250SIO | 2.0 12
2.2.9 General Notes on Installation
As component parts of machines, facilities and systems, electronic control systems must
comply with valid rules and re ulations, dependin on their field of application.
General requirements concernin the electrical equipment of machines and aimin at the
safety of these machines are contained in Part 1 of European Standard EN 60204 (corresponds
to VDE 0113).
Information
In or
der to safely install
c250
-
S
Safety System, please read section
►
2.2.7
Project Plannin and Installation and followin .
Interference emission
Interferin emission of electroma netic fields, HF compliant to EN 55011, limitin value class A,
Group 1
Information
If the controller is desi ned
for use in residential areas, hi h
-
frequency
emissions must comply with limitin value class B as described in EN 55011.
Fittin the controller into earthed metal cabinets and installin filters in the
supply lines may produce a shieldin compliant to the above standard.
The desi n and immunity to interference of pro rammable lo ic controllers are internationally
overned by standard IEC 61131-2:2007 which, in Europe, has been the basis for European
Standard EN 61131-2:2007 .
Note
Refer to IEC 61131
-
4, User's Guideline, for eneral installation instructions to be
complied with to ensure that hardware interface factors and the ensuin noise
volta es are limited to tolerable levels.
Electrical immission safeguard
To eliminate electroma netic interference, connect the control system to the protective earth
conductor. Practice best cable routin .
Cable routing and wiring
Keep power circuits separate from control circuits:
•DC volta es 60 V ... 400 V
•AC volta es 25 V ... 400 V
Joint laying of control circuits is allowed for:
•shielded data si nals
•shielded analo ue si nals
•unshielded di ital I/O lines
•unshielded DC volta es < 60 V
•unshielded AC volta es < 25 V
I
I
I

2 Preface
EDBC250SIO | 2.0 13
Location of installation
Ensure that temperatures, contaminations, impact, vibration or electroma netic interference
are no impediment to the installation.
Temperature
Consider heat sources such as eneral heatin of rooms, sunli ht, heat accumulation in
assembly rooms or control cabinets.
Contamination
Use suitable casin s to avoid possible ne ative influences due to humidity, corrosive as, liquid
or conductin dust.
Impact and vibration
Consider possible influences caused by motors, compressors, transfer lines, presses, rammin
machines and vehicles.
Electromagnetic interference
Consider electroma netic interference from various local sources: motors, switchin devices,
switchin thyristors, radio-controlled devices, weldin equipment, arcin , switched-mode
power supplies, converters / inverters.
Particular sources of interference: inductive actuators
Switchin off inductances (such as from relays, contactors, solenoids or switchin ma nets)
produces sur e volta es. It is necessary to reduce these extra volta es to a minimum.
Throttlin elements could be diodes, Z-diodes, varistors or RC elements. Their ratin should
conform to the specifications provided by the manufacturer or supplier of the actuators.

3 System Description
EDBC250SIO | 2.0 14
3System Description
3.1 EtherCAT® – Ethernet Control
EtherCAT® is the most powerful Ethernet-based fieldbus system currently available on the
market. EtherCAT puts up the top speed mark, and its flexible topolo y and simple
confi uration make it the perfect means of controllin extremely fast processes. To ive you a
clue: 1000 I/Os can be addressed in 30 μs.
Because of its hi h performance, the simple wirin and its open protocol support, EtherCAT is
often used as a fast motion control and I/O bus driven by an industrial PC or in conjunction
with control technolo y on a smaller scale.
Its interconnections between the controller at one end and both the I/O modules and drives at
the other are as fast as those of a backplane bus. EtherCAT controllers thus nearly act like
centralised control systems, overcomin the issue of bus transfer times that conventional
fieldbus systems are burdened with.
3.2 c250-S Safety System
The c250-S System consists of the Safety bus coupler, the Safety controller and a ran e of
Lenze Safety I/O-modules.
The Safety bus coupler converts the physical transfer technolo y (twisted pair) to LVDS (E-bus)
and enerates the system volta es required by the LVDS modules. The standard 100 Base Tx
lines used for office network communications connect to the one side, the Safety I/O-modules
for the process si nals connect to the other. This is how the Ethernet EtherCAT protocol is
retained ri ht throu h to the last Safety I/O-module.
The c250-S Safety System allows users to add Safety I/O-modules with safe si nals to the
EtherCAT control unit, makin the separate wirin of safety circuits a thin of the past. The
EtherCAT protocol is used to transfer both safe and standard si nals to the Safety controller
c250-S. This inte rated transfer process is based on FSoE (Fail Safe over EtherCAT), the safety
protocol certified by TÜV, the German Technical Testin & Inspection Association.

3 System Description
EDBC250SIO | 2.0 15
3.2.1 Safety over EtherCAT (FSoE)
Alon with EtherCAT, a safety protocol was developed and made
available for EtherCAT as "Safety over EtherCAT" (FSoE = Fail Safe
over EtherCAT). It is the backbone of providin functional safety over
EtherCAT. TÜV has since certified both the protocol and its
implementation to comply with Safety Inte rity Level 3 (SIL 3) to IEC
61508. In 2010, IEC 61784-3-12 was published as the international
reference standard for Safety over EtherCAT.
Since EtherCAT is used as a sin le-channel medium of communication, Safety over EtherCAT
does not impose any constraints re ardin the transfer rate and cycle time. The transport
medium is considered a "black channel" which is left out of the safety assessment.
3.2.2 Safety controller c250-S
Safety controller c250-S links up the inputs and outputs of Safety I/O-module and other FSoE
system devices. At the basic level, certified function blocks are raphically "wired up" to
establish the system's safety pro ramme. In case a project demands more than the technolo y
of the certified blocks can provide, the extra instructions available at the extended level can be
used to expand the safety pro ramme.
Safety controller c250-Shas been desi ned as an add-on to a normal PLCDesi ner control unit.
This is a two-channel system which uses the normal control unit to communicate with the
PLCDesi ner Development System and all non-safe I/Os. Pro rammin is based on a certified
plu -in that is fully inte rated in the PLCDesi ner Development System.
3.2.3 Safety I/O-module
Safety I/O-module provides connections for standard security appliances. It installs at any
place of the c250-S block. Its si nals are transferred by the EtherCAT bus of Safety controller
c250-S and processed in a safe manner. The module outputs safely switch actuators such as
contactors, si nal lamps or servo converters.
3.2.4 PLCDesi ner Safety
Pro rammin of Safety controller c250-S is based on a certified plu -in that is fully inte rated
in the PLCDesi ner Development System.
Safety controller c250-S is a sub-node of the standard control unit and provides an application,
task, lists of lobal variables, POEs and lo ical I/Os.
The inte rated function dia ram (FD) safety editor (to IEC 61131-3, certified for use with IEC
61508 SIL3 applications) is used for basic or extended-level pro rammin by means of certified
function blocks (IEC 61131-3 or PLCopen Safety) as specified in the user manual. Further
software functions are available for safe uardin the safety functions by chan e trackin , safe
flow of si nals, safe version control (pinnin ), separatin safe operation, debu in mode, etc..

3 System Description
EDBC250SIO | 2.0 16
3.2.5 PLCDesi ner SafetyPLCopen Library
The PLCopen components have been defined by the PLCopen
or anisation, its members and external or anisations specialisin in all
safety-related aspects. Since these are certified components, they
reduce the time and costs involved in developin , verifyin and testin a
safety application for acceptance. They interlink by lo ical operations
which behave like lo ical wirin and therefore minimise the time and
pro rammin efforts needed to create major parts of safety
applications.

4 Safety−I/O-Modul
EDBC250SIO | 1.2 17
4Product Description
4.1 General Description
Safety-I/O module features 4 safe inputs and 2 safe outputs for distributed installation.
Fi ure 1: Module layout shows the basic layout of c250-S Safety.
The housin mount consists of an aluminium profile with an inte rated clampin fixture used
to attach the module to a 35 mm DIN rail. The housin trou h includin the optical fibres for
the status indicators, the side faces and the front are made of plastic and contain the module.
The optical fibres for the si nal state indicators (LEDs) are located next to the sprin -assisted
combi plu . They sli htly protrude from the housin and allow a clear dia nosis at a lance.
Unlock button
Status LEDs
Shield-to-housin mount
connector
Module lock and E-bus
DIN rail mount and
functional earth
Ventilation slots
Si nal state indicators (LEDs)
Grip
Labellin clip
Sprin -assisted combi plu X1
Fi ure 1: Module layout

4 Product Description
EDBC250SIO | 2.0 18
4.2 Application
4.2.1 Intended Use
The c250-S Safety System comprisin Safety controller c250-S, Safety I/O-module and
PLCDesi ner Safety Software make the Safety I/O-module fit for the functional safety of
machinery.
The intended applications of the c250-S Safety System include safety functions of machines
and all industrial automation tasks immediately associated with them. Thus, the system may
only be used for applications providin a defined fail-safe state which, in case of the c250-S
Safety System, is a wattless state.
Runnin any of the safety-related control components is subject to the safety precautions
applicable to industrial control units, i.e. uardin by emer ency stop and similar safety
equipment as specified by the relevant national and/or international re ulations. The same
applies to connected equipment such as drives or li ht rids. Before installin and puttin the
system into operation, the safety instructions, connection specifications (nameplate and
documentation) and the limitin values listed in this Operatin Instruction's Technical Data
section must be read carefully and obeyed at any time.
The c250-S Safety System is not desi ned for applications causin potentially fatal risks or
dan ers to the life and health of many persons or disastrous ecolo ical hazards unless
exceptionally strict safety precautions are taken. Such applications specifically include the
monitorin of nuclear reactions in nuclear power stations as well as the control of fli ht or air
traffic control systems, means of mass transit, medical life support systems and weapon
systems.
4.2.2 Qualified Persons
The safety-related products may be used by the followin persons only:
•Qualified persons who know the applicable concepts of functional safety as well as the
relevant standards and re ulations.
•Qualified persons who plan, desi n, install and put machine and system safety equipment
into operation.
This manual's safety instructions construe qualified persons as persons whose trainin ,
experience, instructions and knowled e of the applicable standards, codes, accident
prevention re ulations and operatin conditions authorise them to perform the required work
and enable them to reco nise and avoid potential hazards associated with that work. Lan ua e
skills sufficient to understand this manual are therefore part of this qualification.

4 Product Description
EDBC250SIO | 2.0 19
4.2.3 Disclaimer of Liability
The operator is responsible for self-reliantly runnin the safety-related control components in
conformity with the requirements set by the competent authority.
The manufacturer shall neither be held liable nor accept any warranty for dama es caused by:
•inappropriate use
•non-compliance with standard and directives
•unauthorised modifications of devices, connections or settin s
•use of unapproved or unsuitable equipment or equipment roups
•non-observance of the safety instructions contained in this manual

4 Product Description
EDBC250SIO | 2.0 20
4.3 Safe State
There are two different types of "safe states".
The first one is functional and depends on the machine's application, operation and software.
It is the aimed-for safe functional state at which the system works without problems.
The second one is the fail-safe state and applies whenever a fault or error occurs in any of the
monitored components.
4.3.1 Safe Functional State
The system is in a safe functional state when the safe process map shows that all inputs are
"null" and when the outputs reflect this "null" state by bein deener ised at the output. The
data frame a ain reflects this state by "null" in the process map.
4.3.2 Fail-Safe State – External Fault
In case an external fault occurs (short circuit, cross-fault etc.), all outputs are deener ised
(outputs "null") and the inputs return "null" to the safe control unit. FSoE communication is
not stopped.
A fail-safe state is wattless.
The safety PLC is able to reset this state.
4.3.3 Fail-Safe State – Internal Fault
In case of an internal module fault, all outputs are deener ised (output "null"). Both FSoE
communication and the transfer of input information stops.
A fail-safe state is wattless.
Recoverin from this state requires a reset by turnin the supply volta e off. This involves a
complete self-test as part of the initialisation phase.
CAUTION
Uncontrolled movement of suspended loads, for example
Injury caused by movin or non-braked machine parts
Additional external safety measures such as a mechanical brake of
suspended loads should be provided for applications whose safe state
requires an actuator to be actively turned on.