Mitsubishi Electric MELSEC-QS Series User guide

Safety Application Guide

A- 1
SAFETY PRECAUTIONS
(Read these precautions before using this product.)
Before using the product, please read this manual, the relevant manuals introduced in this manual,
standard programmable controller manuals, and the safety standards carefully and pay full attention to
safety to handle the product correctly.
In this manual, the safety precautions are classified into two levels: " WARNING" and " CAUTION".
Under some circumstances, failure to observe the precautions given under " CAUTION" may lead to
serious consequences.
Observe the precautions of both levels because they are important for personal and system safety.
Make sure that the end users read this manual and then keep the manual in a safe place for future
reference.
WARNING
CAUTION
Indicates that incorrect handling may cause hazardous conditions,
resulting in death or severe injury.
Indicates that incorrect handling may cause hazardous conditions,
resulting in minor or moderate injury or property damage.

A- 2
[Design Precautions]
WARNING
When a safety programmable controller detects an error in an external power supply or a failure in
programmable controller main module, it turns off all the outputs.
Create an external circuit to securely stop the power of hazard by turning off the outputs.
Incorrect configuration may result in an accident.
Create short current protection for a safety relay, and a protection circuit such as a fuse, and breaker,
outside a safety programmable controller.
If load current more than the rating or overcurrent due to a short circuit in the load has flowed in the
CC-Link Safety remote I/O module, the module defines it as a fault and turns off all the outputs.
However, if overcurrent flows in the CC-Link Safety remote I/O module for a long time, it may cause
smoke or a fire. To prevent it, create a safety circuit such as a fuse outside the module.
When data/program change, or status control is performed from a PC to a running safety
programmable controller, create an interlock circuit outside the sequence program and safety
programmable controller to ensure that the whole system always operates safely.
For the operations to a safety programmable controller, pay full attention to safety by reading the
relevant manuals carefully, and establishing the operating procedure.
Furthermore, for the online operations performed from a PC to a safety CPU module, the corrective
actions against a communication error due to a cable connection fault, etc. should be predetermined
as a system.
All output signals from a safety CPU module to the CC-Link Safety master modules are prohibited to
use.
These signals can be found in the CC-Link Safety System Master Module User's Manual.
Do not turn ON or OFF these signals by sequence program, since turning ON/OFF these output
signals of the programmable controller system may cause malfunctions and safety operation cannot
be guaranteed.
All output signals from a safety CPU module to the CC-Link IE Field Network master/local modules
(with safety functions) are prohibited to use.
These signals can be found in the MELSEC-QS CC-Link IE Field Network Master/Local Module
User's Manual.
Do not turn ON or OFF these signals by sequence program, since turning ON/OFF these output
signals of the programmable controller system may cause malfunctions and safety operation cannot
be guaranteed.

A- 3
[Design Precautions]
[Design Precautions]
WARNING
When a CC-Link Safety remote I/O module has detected CC-Link Safety error, it turns off all the
outputs.
Note that the outputs in a sequence program are not automatically turned off.
If CC-Link Safety or CC-Link IE Field Network error has been detected, create a sequence program
that turns off the outputs in the program.
If the CC-Link Safety or CC-Link IE Field Network is restored with the outputs on, it may suddenly
operate and result in an accident.
To inhibit restart without manual operation after safety functions was performed and outputs were
turned OFF, create an interlock program which uses a reset button for restart.
CAUTION
Do not bunch the wires of external devices or communication cables together with the main circuit or
power lines, or install them close to each other.
They should be installed 100mm or more from each other.
Not doing so could result in noise that would cause malfunctions.
Select the external devices to be connected to the CC-Link Safety remote I/O module, considering
the maximum inrush current with reference to the CC-Link Safety System Remote I/O Module User's
Manual.

A- 4
[Installation Precautions]
[Wiring Precautions]
CAUTION
Use a safety programmable controller in the environment that meets the general specifications
described in the QSCPU User's Manual (Hardware Design, Maintenance and Inspection).
Using this programmable controller in an environment outside the range of the general specifications
could result in electric shock, fire, erroneous operation, and damage to or deterioration of the
product.
While pressing the installation lever located at the bottom of module, insert the module fixing tab into
the fixing hole in the base unit until it stops. Then, securely mount the module with the fixing hole as
a supporting point.
Incorrect loading of the module can cause a failure or drop.
Secure the module to the base unit with screws.
Tighten the screw in the specified torque range.
If the screws are too loose, it may cause a drop of the screw or module.
Overtightening may cause a drop due to the damage of the screw or module.
Make sure to fix the CC-Link Safety remote I/O module with a DIN rail or fixing screws and tighten
the screws with the specified torque.
If the screws are too loose, it may cause a drop of the screw or module.
Overtightening may cause a drop due to the damage of the screw or module.
Completely turn off the external supply power used in the system before mounting or removing the
module.
Not doing so could result in damage to the product.
Do not directly touch the module's conductive parts or electronic components.
Doing so may cause malfunctions or a failure.
WARNING
Be sure to shut off all phases of the external supply power used by the system before wiring.
Not completely turning off all power could result in electric shock or damage to the product.
When energizing or operating the module after installation or wiring, be sure to close the attached
terminal cover.
Not doing so may result in electric shock.

A- 5
[Wiring Precautions]
CAUTION
Ground the FG and LG terminals correctly.
Not doing so could result in electric shock or malfunctions.
Use a solderless terminal with insulation sleeve for wiring of a terminal block.
Use up to two solderless terminals for a single terminal.
Use applicable solderless terminals and tighten them with the specified torque. If any solderless
spade terminal is used, it may be disconnected when the terminal screw comes loose, resulting in a
failure.
Wire the module correctly after confirming the rated voltage and terminal layout.
Connecting a power supply of a different rated voltage or incorrect wiring may cause a fire or failure.
Tighten a terminal block mounting screw, terminal screw, and module fixing screw within the
specified torque range.
If the terminal block mounting screw or terminal screw is too loose, it may cause a short circuit, fire,
or malfunctions.
If too tight, it may damage the screw and/or the module, resulting in a drop of the screw or module, a
short circuit or malfunctions.
If the module fixing screw is too loose, it may cause a drop of the screw or module.
Overtightening the screw may cause a drop due to the damage of the screw or module.
Be sure there are no foreign substances such as sawdust or wiring debris inside the module.
Such debris could cause a fire, failure, or malfunctions.
The module has an ingress prevention label on its top to prevent foreign matter, such as wire offcuts,
from entering the module during wiring.
Do not peel this label during wiring.
Before starting system operation, be sure to peel this label because of heat dissipation.

A- 6
[Wiring Precautions]
CAUTION
Be sure to fix the communication cables or power cables by ducts or clamps when connecting them
to the module.
Failure to do so may cause damage of the module or cables due to a wobble, unintentional shifting,
or accidental pull of the cables, or malfunctions due to poor contact of the cable.
When removing the connected communication cables or power cables, do not pull the cable with
grasping the cable part.
Remove the cable connected to the terminal block after loosening the terminal block screws.
Pulling the cable connected to a module may result in malfunctions or damage of the module or
cable.
For the cables to be used in the CC-Link Safety, use the ones specified by the manufacturer.
Otherwise, the performance of the CC-Link Safety is not guaranteed.
As to the maximum overall cable length and station - to station cable length, follow the specifications
described in the CC-Link Safety System Master Module User's Manual.
If not following the specification, the normal data transmission is not guaranteed.
For the cables to be used in CC-Link IE Field Network, use the ones specified by the manufacturer.
Otherwise, the performance of CC-Link IE Field Network is not guaranteed.
As to the maximum overall cable length and station - to station cable length, follow the specifications
described in the MELSEC-QS CC-Link IE Field Network Master/Local Module User's Manual.
If not following the specification, the normal data transmission is not guaranteed.
Install our programmable controller in a control panel for use.
Wire the main power supply to the power supply module installed in a control panel through a
distribution terminal block.
Furthermore, the wiring and replacement of a power supply module have to be performed by a
maintenance worker who acquainted with shock protection.
For the wiring methods, refer to the QSCPU User's Manual (Hardware Design, Maintenance and
Inspection).

A- 7
[Startup and Maintenance precautions]
[Startup and Maintenance precautions]
WARNING
Do not touch the terminals while power is on.
Doing so could result in electric shock.
Correctly connect the battery connector.
Also, do not charge, disassemble, heat, place in fire, short circuit, or solder the battery.
Mishandling of battery can cause overheating, cracks, or ignition which could result in injury and
fires.
Turn off all phases of the external supply power used in the system when cleaning the module or
retightening the terminal block mounting screws, terminal screws, or module fixing screws.
Not doing so could result in electric shock.
Tighten a terminal block mounting screw, terminal screw, and module fixing screw within the
specified torque range.
If the terminal block mounting screw or terminal screw is too loose, it may cause a short circuit, fire,
or malfunctions.
If too tight, it may damage the screw and/or the module, resulting in a drop of the screw or module, a
short circuit or malfunctions.
If the module fixing screw is too loose, it may cause a drop of the screw or module.
Overtightening the screw may cause a drop due to the damage of the screw or module.
CAUTION
The online operations performed from a PC to a running safety programmable controller (Program
change when a safety CPU module is RUN, device test, and operating status change such as
RUN-STOP switching) have to be executed after the manual has been carefully read and the safety
has been ensured.
Following the operating procedure predetermined at designing, the operation has to be performed by
an instructed person.
When changing a program while a safety CPU module is RUN (Write during RUN), it may cause a
program breakdown in some operating conditions.
Fully understand the precautions described in the GX Developer's manual before use.
Do not disassemble or modify the modules.
Doing so could cause a failure, malfunctions, injury, or fire.
If the product is repaired or remodeled by other than the specified FA centers or us, the warranty is
not covered.
Use any radio communication device such as a cellular phone or a PHS phone more than 25cm
away in all directions of safety programmable controller.
Not doing so can cause malfunctions.

A- 8
[Startup and Maintenance precautions]
[Disposal Precautions]
[Transportation Precautions]
CAUTION
Completely turn off the external supply power used in the system before mounting or removing the
module.
Not doing so may result in a failure or malfunctions of the module.
Restrict the mounting/removal of a module, base unit, and terminal block up to 50 times (IEC
61131-2 compliant), after the first use of the product.
Failure to do so may cause the module to malfunction due to poor contact of connector.
Do not drop or give an impact to the battery mounted to the module.
Doing so may damage the battery, causing the battery fluid to leak inside the battery.
If the battery is dropped or given an impact, dispose of it without using.
Before touching the module, always touch grounded metal, etc. to discharge static electricity from
human body, etc.
Not doing so may result in a failure or malfunctions of the module.
Since the module case is made of resin, do not drop or apply any strong impact to the module.
Doing so may damage the module.
Shut off the external power supply (all phases) used in the system before installing or removing a
module to/from a control panel.
Not doing so may result in a failure or malfunctions of the module.
CAUTION
When disposing of this product, treat it as industrial waste.
When disposing of batteries, separate them from other wastes according to the local regulations.
(For details of the Battery Directive in EU member states, refer to the QSCPU User's Manual
(Hardware Design, Maintenance and Inspection).)
CAUTION
When transporting lithium batteries, make sure to treat them based on the transport regulations.
(For details of the controlled models, refer to the QSCPU User's Manual (Hardware Design,
Maintenance and Inspection).)

A- 9
CONDITIONS OF USE FOR THE PRODUCT
(1) Although MELCO has obtained the certification for Product's compliance to the international safety
standards IEC61508, ISO13849-1 from TUV Rheinland, this fact does not guarantee that Product
will be free from any malfunction or failure. The user of this Product shall comply with any and all
applicable safety standard, regulation or law and take appropriate safety measures for the system
in which the Product is installed or used and shall take the second or third safety measures other
than the Product. MELCO is not liable for damages that could have been prevented by compliance
with any applicable safety standard, regulation or law.
(2) MELCO prohibits the use of Products with or in any application involving, and MELCO shall not be
liable for a default, a liability for defect warranty, a quality assurance, negligence or other tort and a
product liability in these applications.
(a) power plants,
(b) trains, railway systems, airplanes, airline operations, other transportation systems,
(c) hospitals, medical care, dialysis and life support facilities or equipment,
(d) amusement equipments,
(e) incineration and fuel devices,
(f) handling of nuclear or hazardous materials or chemicals,
(g) mining and drilling,
(h) and other applications where the level of risk to human life, health or property are elevated.

A- 10
REVISIONS
The manual number is given on the bottom left of the back cover.
Japanese Manual Version SH-080611-H
©2006 MITSUBISHI ELECTRIC CORPORATION
Print date Manual number Revision
Sep., 2006 SH(NA)-080613ENG-A First edition
Mar., 2007 SH(NA)-080613ENG-B
CHAPTER1, Section 4.2, 5.5, 5.6.3, 5.6.4
Apr., 2008 SH(NA)-080613ENG-C
Section 4.1, Appendix 1
Apr., 2009 SH(NA)-080613ENG-D
"PLC" was changed to "programmable controller" .
SAFETY PRECAUTIONS, ABOUT MANUALS,
HOW THIS MANUAL IS ORGANIZED, Section 5.1, 5.2.4, 5.3 to 5.6,
5.6.1 to 5.6.4, INDEX
Section 5.6.6 to 5.6.8
Section 5.6.2 5.6.5
Jul., 2010 SH(NA)-080613ENG-E
SAFETY PRECAUTIONS, Section 4.1
CONDITIONS OF USE FOR THE PRODUCT
May, 2011 SH(NA)-080613ENG-F Full revision
Dec., 2016 SH(NA)-080613ENG-G
TERMINOLOGY
Nov., 2018 SH(NA)-080613ENG-H
Section 4.1
This manual confers no industrial property rights or any rights of any other kind, nor does it confer any patent licenses.
Mitsubishi Electric Corporation cannot be held responsible for any problems involving industrial property rights which may
occur as a result of using the contents noted in this manual.
Partial correction
Partial correction
Change of a term
Partial correction
Addition
Section number changed
Partial correction
Addition
Partial correction
Partial correction

A- 11
SAFETY PRECAUTIONS ................................................................................................................................ A - 1
CONDITIONS OF USE FOR THE PRODUCT..................................................................................................A - 9
REVISIONS.....................................................................................................................................................A - 10
INTRODUCTION.............................................................................................................................................A - 11
CONTENTS ....................................................................................................................................................A - 11
MANUAL .........................................................................................................................................................A - 13
HOW THIS MANUAL IS ORGANIZED ...........................................................................................................A - 15
HOW TO USE THIS MANUAL........................................................................................................................A - 15
GENERIC TERMS AND ABBREVIATIONS....................................................................................................A - 16
TERMINOLOGY..............................................................................................................................................A - 17
CHAPTER 1 OVERVIEW 1 - 1 to 1 - 2
CHAPTER 2 APPLICATION EXAMPLE 2 - 1 to 2 - 2
CHAPTER 3 RISK ASSESSMENT AND SAFETY LEVEL 3 - 1 to 3 - 7
3.1 Risk Assessment ............................................................................................................................. 3 - 1
3.1.1 Risk reduction........................................................................................................................... 3 - 2
3.2 Safety Category ............................................................................................................................... 3 - 3
3.3 PL .................................................................................................................................................... 3 - 5
3.4 SIL ................................................................................................................................................... 3 - 7
CHAPTER 4 PRECAUTIONS FOR USE OF SAFETY PROGRAMMABLE CONTROLLER
4 - 1 to 4 - 19
4.1 Precautions for Designing Safety Application.................................................................................. 4 - 1
4.2 Precautions for Programming .......................................................................................................... 4 - 9
4.3 Precautions for Startup .................................................................................................................. 4 - 18
4.4 Precautions for Safety Functions Maintenance ............................................................................. 4 - 19
CHAPTER 5 SAFETY APPLICATION CONFIGURATION EXAMPLE
(USING A SINGLE SAFETY PROGRAMMABLE CONTROLLER) 5 - 1 to 5 - 85
5.1 System Configuration ...................................................................................................................... 5 - 1
INTRODUCTION
Thank you for purchasing the Mitsubishi Electric safety programmable controller MELSEC-QS series.
Before using the equipment, please read this manual carefully to develop full familiarity with the functions
and performance of the QS series programmable controller you have purchased, so as to ensure correct
use.
When applying the program examples introduced in this manual to the actual system, ensure the
applicability and confirm that it will not cause system control problems.
CONTENTS

A- 12
5.2 Network-Related Switch Settings of Module....................................................................................5-2
5.2.1 Safety power supply module..................................................................................................... 5 - 2
5.2.2 Safety CPU module .................................................................................................................. 5 - 2
5.2.3 CC-Link Safety master module................................................................................................. 5 - 2
5.2.4 CC-Link Safety remote I/O module...........................................................................................5- 3
5.3 Parameter Settings of CC-Link Safety ............................................................................................. 5 - 4
5.3.1 Station information setting ........................................................................................................ 5 - 5
5.3.2 Safety remote station settings .................................................................................................. 5 - 5
5.4 Relationship Between Safety CPU Module Devices and Remote Inputs/Outputs........................... 5 - 6
5.5 Wiring Diagram and Parameter Setting of Standard Input .............................................................. 5 - 7
5.6 Case Examples.............................................................................................................................. 5 - 10
5.6.1 Emergency stop circuit ........................................................................................................... 5 - 10
5.6.2 Door monitor circuit................................................................................................................. 5 - 18
5.6.3 Entering detection and existence detection circuit 1............................................................... 5 - 28
5.6.4 Entering detection and existence detection circuit 2............................................................... 5 - 39
5.6.5 Door lock circuit ...................................................................................................................... 5 - 48
5.6.6 3-position enable switch ......................................................................................................... 5 - 58
5.6.7 Sequential muting ................................................................................................................... 5 - 68
5.6.8 Two-hand operation switch..................................................................................................... 5 - 76
CHAPTER 6 SAFETY APPLICATION CONFIGURATION EXAMPLE
(USING SEVERAL SAFETY PROGRAMMABLE CONTROLLERS) 6 - 1 to 6 - 22
6.1 System Configuration ...................................................................................................................... 6 - 1
6.2 Network-Related Switch Settings of Module....................................................................................6-2
6.2.1 Safety power supply module..................................................................................................... 6 - 2
6.2.2 Safety CPU module .................................................................................................................. 6 - 2
6.2.3 CC-Link Safety master module................................................................................................. 6 - 2
6.2.4 CC-Link Safety remote I/O module...........................................................................................6- 3
6.2.5 CC-Link IE Field Network master/local module (with safety functions) .................................... 6 - 3
6.3 Parameter Settings .......................................................................................................................... 6 - 4
6.3.1 Parameter settings of CC-Link Safety ...................................................................................... 6 - 4
6.3.2 Parameter settings of CC-Link IE Field Network ...................................................................... 6 - 6
6.4 Case Example ................................................................................................................................. 6 - 8
6.4.1 Emergency stop circuit (stop of all equipment)......................................................................... 6 - 8
APPENDICES APPX - 1 to APPX - 21
Appendix 1 Calculating Safety Response Time of CC-Link Safety .....................................................APPX - 1
Appendix 2 Calculating Safety Response Time When CC-Link Safety and CC-Link IE Field Network
are Used ...................................................................................................................................APPX - 9
Appendix 3 Checklist .........................................................................................................................APPX - 20
INDEX IND - 1 to IND - 2

A- 13
MANUAL
The manual related to this product is shown below. Please place an order as needed.
Related manuals
Manual name Manual number
(Model code)
Safety Guidelines
Explains the specifications of the QSCPU, safety power supply module and safety base unit, etc.
(Supplied with the product)
IB-0800424
(13JY84)
QSCPU User's Manual (Hardware Design, Maintenance and Inspection)
Explains the specifications of the QSCPU, safety power supply module, safety base unit, etc.
(Sold separately)
SH-080626ENG
(13JR92)
QSCPU User's Manual (Function Explanation, Program Fundamentals)
Explains the functions, programming methods, devices, etc. that are necessary to create programs
with the QSCPU.
(Sold separately)
SH-080627ENG
(13JR93)
QSCPU Programming Manual (Common Instructions)
Explains how to use the sequence instructions, basic instructions, application instructions, and
QSCPU dedicated instructions.
(Sold separately)
SH-080628ENG
(13JW01)
QSCPU Programming Manual (Safety FB)
Explains how to use safety function blocks.
(Sold separately)
SH-080744ENG
(13JW05)
CC-Link Safety System Master Module User's Manual
Explains the specifications, procedures and settings up to operation, parameter settings and trouble
shootings of the QS0J61BT12 type CC-Link Safety system master module.
(Sold separately)
SH-080600ENG
(13JP88)
CC-Link Safety System Remote I/O Module User's Manual
Explains the specifications, procedures and settings up to operation, parameter settings and
trouble shootings of the CC-Link Safety remote I/O module.
(Sold separately)
SH-080612ENG
(13JR89)
MELSEC-QS CC-Link IE Field Network Master/Local Module User's Manual
Explains the overview of CC-Link IE Field Network, and specifications, procedures before operation,
system configuration, installation, wiring, settings, functions, programming, and troubleshooting of the
CC-Link IE Field Network master/local module (with safety functions).
(Sold separately)
SH-080969ENG
(13JZ53)
MELSEC-Q CC-Link IE Controller Network Reference Manual
Explains the system configuration, performance specifications, functions, handling, wiring, and
troubleshooting of the CC-Link IE Controller Network.
(Sold separately)
SH-080668ENG
(13JV16)
Q Corresponding MELSECNET/H Network System Reference Manual (PLC to PLC network)
Explains the specifications for a MELSECNET/H network system for PLC to PLC network, the
procedures and settings up to operation, parameter settings, programming and troubleshooting.
(Sold separately)
SH-080049
(13JF92)
Q Corresponding Ethernet Interface Module User's Manual (Basic)
Explains the specifications, procedures for data communication with external devices, line connection
(open/close), fixed buffer communication, random access buffer communication, and troubleshooting
of the Ethernet module.
(Sold separately)
SH-080009
(13JL88)

A- 14
Remark
If you would like to obtain a manual individually, printed materials are available
separately. Order the manual by quoting the manual number on the table above
(model code).

A- 15
HOW THIS MANUAL IS ORGANIZED
The section in this manual or another relevant manual that can be referred to is shown as
follows:
In addition, this manual provides the following explanations.
POINT
In addition to description of the page, notes or functions that require special
attention are described here.
Remark
The reference related to the page or useful information are described here.
HOW TO USE THIS MANUAL
This manual describes the points to be concerned when configuring safety application that
meets the safety standards using the safety programmable controller.
Although the safety application configuration example is shown in CHAPTER 5 and
CHAPTER 6 of this manual, authentication is not obtained. The safety standards confor-
mance approval must be obtained for the user with the entire safety-related system.
This manual is classified roughly into five chapters as shown below.
For the detailed specifications and functions of each module, refer to the related manuals.
( Section 3.5)
CHAPTER 1 Describes the outline of the safety programmable controller.
CHAPTER 2 Describes the safety application that is configured using the safety
programmable controller.
CHAPTER 3 Describes the risk assessment, Category, and SIL.
CHAPTER 4 Describes the cautions for use of the safety programmable controller.
CHAPTER 5 Describes a safety application example (when a single safety
programmable controller is used).
CHAPTER 6 Describes a safety application example (when several safety
programmable controllers are used).

A- 16
GENERIC TERMS AND ABBREVIATIONS
Unless otherwise specified, this manual uses the following generic terms and abbrevia-
tions. When a clear indication of target model name is required, the module name is indi-
cated.
Generic term/
abbreviation Description
GX Developer Generic product name for models SWnD5C-GPPW, SWnD5C-GPPW-A, SWnD5C-GPPW-V,
and SWnD5C-GPPW-VA
RWr Remote register (Read area for CC-Link Safety and CC-Link IE Field Network)
RWw Remote register (Write area for CC-Link Safety and CC-Link IE Field Network)
RX Remote input (for CC-Link Safety and CC-Link IE Field Network)
RY Remote output (for CC-Link Safety and CC-Link IE Field Network)
SB Link special relay (for CC-Link Safety and CC-Link IE Field Network)
SW Link special register (for CC-Link Safety and CC-Link IE Field Network)
Safety master station on
CC-Link Safety
Station that controls CC-Link Safety.
One station is required in a system.
Remote station on
CC-Link Safety
Generic term for a safety remote I/O station, a standard remote I/O station, and a remote device
station on CC-Link Safety. This station is controlled by the safety master station on CC-Link
Safety.
Safety remote I/O station
on CC-Link Safety
Remote station on CC-Link Safety, which exchanges only bit data.
Compatible with the safety-related system.
Standard remote I/O
station on CC-Link Safety
Remote station on CC-Link Safety, which exchanges only bit data.
Not compatible with the safety-related system.
Remote I/O station on
CC-Link Safety
Generic term for a safety remote I/O station and a standard remote I/O station on CC-Link
Safety
Remote device station on
CC-Link Safety
Remote station on CC-Link Safety, which exchanges bit data and word data.
Not compatible with the safety-related system.
Safety station on CC-Link
Safety Generic term for stations on CC-Link Safety, which perform safety communication
Master station (safety
station) on CC-Link IE
Field Network
Station that controls the entire CC-Link IE Field Network. Only one station can be used in a
network.
This station can perform cyclic transmission and transient transmission with all stations on
CC-Link IE Field Network. The station can also perform safety communication with another
safety station on the same network.
Local station (safety
station) on CC-Link IE
Field Network
This station can perform cyclic transmission and transient transmission with the master station
and other local stations on CC-Link IE Field Network. The station can also perform safety
communication with another safety station on the same network. The station is controlled by
programs in the CPU module or other equivalent modules on the station.
Slave station on CC-Link
IE Field Network
Generic term for stations other than a master station on CC-Link IE Field Network: local station,
remote I/O station, remote device station, and intelligent device station
Safety station on CC-Link
IE Field Network
Generic term for stations on CC-Link IE Field Network, which perform safety communication
and standard communication
CC-Link Safety master
module Abbreviation for the QS0J61BT12 CC-link Safety system master module
CC-Link Safety remote I/O
module
Abbreviation for the QS0J65BTS2-8D, QS0J65BTS2-4T and QS0J65BTB2-12DT CC-Link
Safety system remote I/O module
CC-Link IE Field Network
master/local module (with
safety functions)
Abbreviation for the QS0J71GF11-T2 CC-Link IE Field Network master/local module
Safety main base unit Abbreviation for the QS034B(-E) type safety main base unit

A- 17
TERMINOLOGY
Generic term/
abbreviation Description
Safety CPU module Abbreviation for the QS001CPU type safety CPU module
Safety power supply
module Abbreviation for the QS061P-A1 and QS061P-A2 type safety power supply modules
Safety programmable
controller
Generic term for a safety CPU module, a safety power supply module, a safety main base unit,
a CC-Link Safety master module, CC-Link Safety remote I/O modules, and a CC-Link IE Field
Network master/local module (with safety functions)
Standard programmable
controller
Generic term for MELSEC-Q series, MELSEC-L series, MELSEC-QnA series, MELSEC-A
series, and MELSEC-FX series modules (This term is used to distinguish a programmable
controller that uses these modules from a safety programmable controller.)
Safety input Generic term for the signals that are input to the safety programmable controller for realizing the
safety functions
Safety output Generic term for the signals that are output from the safety programmable controller for realizing
the safety functions
Safety communication Function to exchange safety data between safety stations on the same network
Safety application Generic term for the applications that are operated using the safety programmable controller for
realizing the safety functions
Term Description
Safety component Equipment such as the safety compatible sensor and actuator
Safety-related system System executing a safety functions to be required
Safety functions Functions to be realized for protecting a human from machinery hazards
Safety measure Measure for reducing the risk
Category Safety level standardized in EN954-1. The safety level is classified into 5 levels of B and 1 to 4.
PL (performance level) Safety level specified in ISO13849-1:2015. The safety level is classified into five levels of "a" to
"e".
SIL Safety level which is standardized in IEC61508. The safety level is classified into 4 levels of SIL1
to SIL4.
Risk Degree of hazards, which is the combination of the occurrence probability and degree of an injury
and a health problem
Risk assessment To clarify hazards in machinery and assess the degree of the hazards
Link ID Unique network identifier which is given to each network of the CC-Link Safety
Target failure measure Target value of reliability for each SIL level standardized in IEC61508. There are PFD and PFH
depending on the operation frequency of the safety functions.
NC Abbreviation for normal close contact which is normally closed, but opened when a switch or other
function is operated
NO Abbreviation for normal open contact which is normally opened, but closed when a switch or other
function is operated
Close contact Same as NC
Open contact Same as NO
Dark test Outputs a pulse to turn off the input/output when it is on, and performs the failure diagnostics to
contacts including external equipment

1- 1
1OVERVIEW
CHAPTER 1 OVERVIEW
This chapter describes the overview of the safety programmable controller.
The safety programmable controller has acquired certification of the highest safety level
(SIL3 of IEC 61508, Category 4 of EN 654-1, and Category 4 performance level "e" of EN
ISO 13849-1) applicable to programmable controllers.
The safety programmable controller can be used to construct a safety system meeting
requirements of these safety standards.
The system configuration diagram of the safety programmable controller is shown in
Figure 1.1.
• Mount a safety power supply module, a safety CPU module, and a CC-Link Safety
master module on the safety main base unit.
• Connect the CC-Link Safety master module and a CC-Link Safety remote I/O module to
a network.
• When performing safety communication, mount a CC-Link IE Field Network master/
local module (with safety functions) on the safety main base unit, and connect it to a
network.
• Connect a personal computer with GX Developer installed to the safety CPU module via
USB when setting programs and parameters.