Nord Drivesystems BU 0830 Instructions for use

BU 0830 – en
Functional Safety
Supplemental manual for series SK 300P

Functional Safety – Supplemental manual for series SK 300P
2 BU 0830 en-4121

Table of Contents
BU 0830 en-4121 3

Functional Safety – Supplemental manual for series SK 300P
4 BU 0830 en-4121
Pos: 3/ A ll gem ei n/ S t euer m od ul e/ In h alts v er zei c h nis @ 0\mod_1317978518480_388.docx@ 4078@ @ 1
Table of Contents
=== En de d er List e f ür T ex tm ar ke Inh alts v er z eic h nis = ==
1Introduction .................................................................................................................................................6
1.1 General ..............................................................................................................................................6
1.1.1 Documentation .....................................................................................................................6
1.1.2 Document history..................................................................................................................6
1.1.3 About this manual.................................................................................................................7
1.2 Other applicable documents ..............................................................................................................7
1.3 Presentation conventions...................................................................................................................7
1.3.1 Warning information .............................................................................................................7
1.3.2 Other information..................................................................................................................7
1.3.3 Text markings.......................................................................................................................8
1.4 Safety, installation and application information ..................................................................................8
2Function description.................................................................................................................................12
2.1 Design of the safe shut-down method..............................................................................................12
2.1.1 Safe Pulse Block ................................................................................................................13
2.1.2 Safety Digital Input .............................................................................................................13
2.2 Safety functions ...............................................................................................................................14
2.2.1 Safe Torque Off, STO.........................................................................................................14
2.2.2 Safe Stop 1 time-controlled, SS1-t .....................................................................................14
2.2.3 Priorities and response to faults .........................................................................................14
2.3 Examples / Implementation..............................................................................................................16
2.3.1 STO function.......................................................................................................................16
2.3.2 SS1-t function.....................................................................................................................18
2.3.3 Simple re-start block...........................................................................................................19
2.3.4 Example without Safe Pulse Block .....................................................................................20
2.3.5 Exclusion of wiring faults ....................................................................................................21
3Assembly and installation ........................................................................................................................22
3.1 Installation and assembly.................................................................................................................22
3.2 Electrical connection ........................................................................................................................22
3.2.1 Mains connection................................................................................................................22
3.2.2 Control cable connections ..................................................................................................23
3.2.3 Details on control terminals ................................................................................................23
3.3 Details of the safe shut-down method..............................................................................................24
3.3.1 Wiring and shielding ...........................................................................................................24
3.3.2 Operation with OSSD .........................................................................................................24
3.3.2.1 Individual operation 24
3.3.2.2 Multiple device operation 26
3.3.3 EMC ...................................................................................................................................27
4commissioning..........................................................................................................................................28
4.1 Commissioning steps for STO .........................................................................................................28
4.2 SS1-t commissioning steps..............................................................................................................28
4.3 Validation .........................................................................................................................................31
5Parameters.................................................................................................................................................32
5.1 Parameterisation..............................................................................................................................32
5.2 Description of parameters................................................................................................................33
5.2.1 Explanation of parameter description .................................................................................33
5.2.2 Control terminals ................................................................................................................34
5.2.3 Additional parameters.........................................................................................................38
6Operating status messages .....................................................................................................................39
7Additional information ..............................................................................................................................42
7.1 Protective switching devices ............................................................................................................42
7.1.1 Output voltage of the protective switching devices.............................................................42
7.1.2 Switching capacity and current load ...................................................................................42
7.1.3 OSSD outputs, test pulses .................................................................................................43
7.2 Safety categories .............................................................................................................................44
7.2.1 IEC 60204-1:2016 ..............................................................................................................44
7.2.2 IEC 61800-5-2:2016 ...........................................................................................................44

Table of Contents
BU 0830 en-4121 5
7.2.3 IEC 61508:2010..................................................................................................................45
7.2.4 ISO 13849-1:2015 ..............................................................................................................45
8Technical Data...........................................................................................................................................46
8.1 Safe Pulse Block and Safety Digital Input........................................................................................46
9Appendix....................................................................................................................................................48
9.1 Maintenance information..................................................................................................................48
9.2 Repair information............................................................................................................................48
9.3 Service and commissioning information...........................................................................................49
9.4 Documents and software .................................................................................................................49
9.5 Abbreviations ...................................................................................................................................50
Pos: 8/ A nl eit ung en /El ek tr oni k /B us sys tem e/ Al le Baur ei h en/ 1. ( 1 .)Ei nlei t ung / !K a pitel Ei nlei t ung @ 8\mod_1441625462919_388.docx @2235978@ 1 @ 1

Functional Safety – Supplemental manual for series SK 300P
6 BU 0830 en-4121
1 Introduction
Pos: 9/ A nl eit ung en /El ek tr oni k /B us sys tem e/ Al le Baur ei h en/ 1. ( 1 .)Ei nlei t ung / !A bsc h ni tt Al lg em ei n es @ 8\mod_1441352725095_388.docx@ 2235719@ 2 @1
1.1 General
Pos: 14 /A nl eitu ng e n/ Elek tro ni k/ Sa fe ty / 1. Ei nl ei t ung/ D ok um e nt ati on ( sa fet y ) [ SK 3x x P] @ 58\m od_1606141399069_388.docx@ 2695090@ 3 @ 1
1.1.1 Documentation
Designation: BU 0830
Part number: 6078302
Series:
Functional safety for frequency inverters from the
series
NORDAC ON
NORDAC ON+
SK 301P
SK 311P
Scope of application: • Frequency inverters with integrated safety inputs:
SK 301P, SK 311P
• From NORDAC ON software version V1.2R5
Pos: 19 /A nl eitu ng e n/ Elek tro ni k/ Sa fe ty / 1. Ei nl ei t ung/ D ok um e nt hist or i e [S af ety : SK 3xx P] @ 7 3\mod_1620751977543_388.docx@ 2778950@ 3 @ 1
1.1.2 Document history
Edition Series Software version Remarks
Order number
BU 0830,
October 2021
SK 300P
V1.2R5
First edition
6078302/ 4121
Pos: 20 /Al lg em ein/ Allg em eing ül tig e M od ul e/---------Seite num br uc h k om pak t --------- @ 13 \mod_1476369695906_0.docx@ 2265495@ @ 1

1 Introduction
BU 0830 en-4121 7
Pos: 21 /A nl eitu ng e n/ Elek tro ni k/ Sa fe ty / 1. Ei nl ei t ung/ Z u di e sem Hand b uch [Sa fe ty ] @ 69\mod_1617698914848_388.docx@ 2754570@ 3 @ 1
1.1.3 About this manual
This manual is intended to help you with the commissioning of the Safe Stop functions (STO or SS1-t)
with a frequency inverter from Getriebebau NORD GmbH & Co. KG (NORD). It is intended for all
qualified electricians who plan, install and set up corresponding drive solutions 1.4 "Safety,
installation and application information". The information in this manual assumes that the qualified
electricians who are entrusted with this work are familiar with the handling of electronic drive
technology, in particular with NORD devices.
This manual only contains information and descriptions of the functional safety and additional
information which is relevant for the functional safety of frequency inverters manufactured by
Getriebebau NORD GmbH & Co. KG.
Pos: 25 /A nl eitu ng e n/ Elek tro ni k/ PO SIC ON/ 1. Einl ei tu ng /Mi tg el te n de D ok um ente [POS IC ON , P LC , S af ety ] @ 14\mod_1479993719061_388.docx@ 2308206@ 2 @ 1
1.2 Other applicable documents
This document is only valid in combination with the operating instructions for the frequency inverter
which is used. Safe commissioning of the drive application depends on the availability of the
information contained in this document.. A list of the documents can be found in Section 9.4
"Documents and software".
The necessary documents can be found under www.nord.com.
Pos: 26 /A nl eitu ng e n/ Elek tro ni k/ Bus s yst em e/Al l e Ba ur ei he n/ 1. (1.) Ei nl ei tu ng/ ! A bsc hni t t D ars t ell ung sk o nv enti one n @ 8\mod_1441373607811_388.docx@ 2235851@ 2 @ 1
1.3 Presentation conventions
Pos: 27 /A nl eitu ng en/ Elek tr oni k/ Bus sys tem e/ All e Ba urei he n/ 1. ( 1.) Einl ei tung /W ar nhi nw eise (202 1-11-09 0 8: 42 :1 6) @ 8\mod_1441373791790_388.docx@ 2235882@ 33@ 1
1.3.1 Warning information
Warning information for the safety of the user and the bus interfaces are indicated as follows:
DANGER
This warning information warns against personal risks, which may cause severe injury or death.
WARNING
This warning information warns against personal risks, which may cause severe injury or death.
CAUTION
This warning information warns against personal risks, which may cause slight or moderate injuries.
NOTICE
This warning warns against damage to material.
1.3.2 Other information
Information
This information shows hints and important information.
Pos: 28 /A nl eitu ng e n/ Elek tro ni k/ Bus s yst em e/Al l e Ba ur ei he n/ 1. (1.) Ei nl ei tu ng/ X U5-ETH [ BU 062 0]/D ar st el lu ngs k onv ent io nen _ 03 - Textauszeichnungen@32\mod_1554120404209_388.docx@ 2524734@ 3 @ 1

Functional Safety – Supplemental manual for series SK 300P
8 BU 0830 en-4121
1.3.3 Text markings
The following markings are used to differentiate between various types of information:
Text
Type of information Example Marking
Instructions
1.
2.
Instructions for actions whose sequence must be
complied with are numbered sequentially.
Bullet points
•
Bullet points are marked with a dot.
Parameters
P850
Parameters are indicated by the prefix "P", a three-
digit number and bold type.
Arrays
[-01]
Elements of arrays are indicated by square brackets.
Factory settings
{ 0.0 }
Factory settings are indicated by curly brackets.
Software descriptions
"Cancel"
Menus, fields, buttons and tabs are indicated by
quotation marks and bold type.
Numbers
Type of information Example Marking
Binary numbers
100001b
Binary numbers are indicated by the suffix "b"
Hexadecimal numbers 0000h Hexadecimal numbers are indicated by the suffix "h"
Symbols used
Type of information Example Marking
Cross-reference

Section 2 "Function
description"
Internal cross-reference A mouse click on the text
calls up the stated point in the document.
Supplementary manual External cross-reference
Hyperlink
http://www.nord.com/
References to external websites are indicated in
blue and underlined. A mouse click calls up the
website.
Pos: 31 /A nl eitu ng e n/ Elek tro ni k/F U und S tar t er/ 1. Allg em ei n es/ Si ch er h eits - u nd Instal lati onshi nweis e und War n- Gef ahr en hinw eis e/ ne u/ Si c her heit s-, I nst al la ti o ns- un d Anwe ndung shinw eise _01 [alle G erät e -für Handbuecher BU....]@ 17\mod_1488973491253_388.docx@ 2333815@2 @ 1
1.4 Safety, installation and application information
Pos: 32 /A nl eitu ng e n/ Elek tro ni k/F U und S tar t er/ 1. Allg em ei n es/ Si ch er h eits - u nd Instal lati onshi nweis e und War n- Gef ahr en hinw eis e/ ne u/ Si c her heit s-, I nst al la ti o ns- un d Anw end u ng shi nwei s e _02 [ al le G er ä te ] @ 1 2\mod_1466690028867_388.docx @ 332586@ @ 1
Before working on or with the device, please read the following safety instructions extremely carefully.
Please pay attention to all other information from the device manual.
Non-compliance can result in serious or fatal injuries and damage to the device or its surroundings.
These safety instructions must be kept in a safe place!
Pos: 33 /A nl eitu ng e n/ Elek tro ni k/F U und S tar t er/ 1. Allg em ei n es/ Si ch er h eits - u nd Instal lati onshi nweis e und War n- Gef ahr en hinw eis e/ ne u/ Si c her heit s- u n d Ins t all a tio ns hi nw ei se - Einz el p unk te/ 1. Allg emei n ( Sic h erh ei ts hinw ei se) [SK 2xx E, SK 1xxE , S K 3x 1P ] @ 62\mod_1611228391214_388.docx@ 2717990@ @ 1
1. General
Do not use defective devices or devices with defective or damaged housings or missing covers (e.g.
blind plugs for cable glands). Otherwise, there is a risk of serious injury or death from electric shock or
rupture of electrical components, e.g. high power capacitors.
Unauthorised removal of covers, improper use, incorrect installation or operation causes a risk of
serious personal injury or material damage.
Depending on its protection class, the devices may have live, bare, moving or rotating parts or hot
surfaces during operation.
The device is operated with hazardous voltage. Dangerous voltage may be present at the supply lines,
contact strips and PCBs of all connecting terminals (e.g. mains input, motor connection), even if the

1 Introduction
BU 0830 en-4121 9
device is not working or the motor is not rotating (e.g. caused by electronic disabling, jamming of the
drive or a short circuit at the output terminals).
The device is not equipped with a master mains switch and is thus always live when connected to
mains voltage. Voltages may therefore be connected to a connected motor at standstill.
A connected motor may also rotate if the drive is disconnected from the mains and possibly generate
hazardous voltage.
If persons come into contact with dangerous voltage such as this, there is a risk of an electric shock,
which can lead to serious or fatal injuries.
The device and any power plug connectors must not be disconnected while a voltage is applied to the
device. Failure to comply with this may cause arcing, which in addition to the risk of injury, also may
result in a risk of damage or destruction of the device.
The fact that the status LED or other indicators are not illuminated does not safely indicate that the
device has been disconnected from the mains and is without voltage.
The heat sink and all other metal components can heat up to temperatures above 70°C.
Touching these parts can result in local burns to the body parts concerned (cooling times and
clearance from neighbouring components must be complied with).
All work on the device, e.g. transportation, installation, commissioning and maintenance work must be
carried out by qualified personnel (observe IEC 364 or CENELEC HD 384 or DIN VDE 0100 and
IEC 664 or DIN VDE 0110 and national accident prevention regulations). In particular, the general and
regional installation and safety regulations for work on low-voltage systems (e.g. VDE) must be
complied with, as must the regulations concerning correct use of tools and the use of personal
protection equipment.
During all work on the device, take care that no foreign bodies, loose parts, moisture or dust enter or
remain in the device (risk of short circuit, fire and corrosion).
Further information can be found in this documentation.
Pos: 35 /A nl eitu ng e n/ Elek tro ni k/F U und S tar t er/ 1. Allg em ei n es/ Si ch er h eits - u nd Instal lati onshi nweis e und War n- Gef ahr en hinw eis e/ ne u/ Si c her heit s- u n d Ins t all a tio ns hi nw ei se - Einz el p unk te/ 2. Q ual if izi ert es Fac hper s on al ( Sic her h eits hi nw eis e) @ 6 2\mod_1611229839879_388.docx @ 2718175@ @ 1
2. Qualified specialist personnel
Within the meaning of this basic safety information, qualified specialist personnel are persons who are
familiar with the installation, assembly, commissioning and operation of the product and who have the
qualifications appropriate to their work.
In addition, the device and the accessories associated with it must only be installed and commissioned
by a qualified electrician. A qualified electrician is a person who, because of his/her technical training
and experience, has sufficient knowledge with regard to
• switching on, switching off, disconnection, earthing and labelling of electric circuits and devices,
• correct maintenance and use of protective devices according to specified safety standards.
Pos: 37 /A nl eitu ng e n/ Elek tro ni k/F U und S tar t er/ 1. Allg em ei n es/ Si ch er h eits - u nd Instal lati onshi nweis e und War n-G ef ahr enhi nw ei s e/ ne u/ Sic her hei t s- u n d I ns t all at io nshi nw eis e - Ei nz el p unk te/ 3. Besti m mu ngs gem äß e V er we ndu ng – al lg em ei n ( Si ch erh ei ts hi nwei s e) [ all e FU - auß er SK 5xx E , S K 5xx P] @ 62\mod_1611230822610_388.docx@ 2718619@ @ 1
3. Correct purpose of use – general
The frequency inverters are devices for industrial and commercial systems used for the operation of
three-phase asynchronous motors with squirrel-cage rotors and Permanent Magnet Synchronous
Motors – PMSM. These motors must be suitable for operation with frequency inverters, other loads
must not be connected to the devices.
The devices are components intended for installation in electrical systems or machines.
Technical data and information for connection conditions can be found on the rating plate and in the
documentation, and must be complied with.
The devices may only be used for safety functions which are described and explicitly approved.
CE-labelled devices fulfil the requirements of the Low Voltage Directive 2014/35/EU. The stated
harmonized standards for the devices are used in the declaration of conformity.

Functional Safety – Supplemental manual for series SK 300P
10 BU 0830 en-4121
a. Supplement: Correct purpose of use within the European Union
When installed in machines, the devices must not be commissioned (i.e. commencement of
proper use) until it has been ensured that the machine fulfils the provisions of EC Directive
2006/42/EC (Machinery Directive); EN 60204-1 must also be complied with.
Commissioning (i.e. start-up of proper use) is only permitted if the EMC directive (2014/30/EU)
has been complied with.
b. Supplement: Correct purpose of use outside the European Union
The local conditions of the operator for the installation and commissioning of the device must be
complied with at the usage location (see also "a. Supplement: Correct purpose of use within the
European Union").
Pos: 39 /A nl eitu ng e n/ Elek tro ni k/F U und S tar t er/ 1. Allg em ei n es/ Si ch er h eits - u nd Instal lati onshi nweis e und War n- Gef ahr en hinw eis e/ ne u/ Si c her heit s- u n d Ins t all a tio ns hi nw ei se - Einz el p unk te/ 4_ a. T r an sp ort, Ei nlag er ung ( Sic her h eits hi nw eis e) @ 74\mod_1621427307543_388.docx@ 2780002@ @ 1
Transport, storage
The information in the manual regarding transport, storage and correct handling must be complied
with.
The permissible mechanical and climatic ambient conditions (see technical data in the manual for the
device) must be complied with.
If necessary, suitable, adequately dimensioned means of transport (e.g. lifting gear, rope guides) must
be used.
Pos: 40 /A nl eitu ng e n/ Elek tro ni k/F U und S tar t er/ 1. Allg em ei n es/ Si ch er h eits - u nd Instal lati onshi nweis e und War n- Gef ahr en hinw eis e/ ne u/ Si c her heit s- u n d Ins t all a tio ns hi nw ei se - Einz el punk te /4 _b. Aufst ell ung un d M on tage ( Sic her hei ts hi nw eise) @ 74\mod_1621427371714_388.docx@ 2780446@ @ 1
Installation and assembly
The installation and cooling of the device must be implemented according to the regulations in the
corresponding documentation. The permissible mechanical and climatic ambient conditions (see
technical data in the manual for the device) must be complied with.
The device must be protected against impermissible loads. In particular, components must not be
deformed and/or insulation distances must not be changed. Touching of electronic components and
contacts must be avoided.
The device and its optional modules contain electrostatically sensitive components, which can be
easily damaged by incorrect handling. Electrical components must not be mechanically damaged or
destroyed.
Pos: 41 /A nl eitu ng e n/ Elek t ro ni k/F U und S tar t er/ 1. Allg em ei n es/ Si ch er h eits - und I nstal lati onshi nweise u nd War n- Gef ahr en hinw eis e/ ne u/ Si c her hei t s- u n d I nst all a ti ons hi nw ei se - Einz el p unk te/ 4_c . El ek tri sc h er A nsc hlus s ( Sic h er hei ts hinw eise) [d ez ent ral e G er äte ] @ 74\mod_1621427444239_388.docx@ 2780890@ @ 1
Electrical connection
Ensure that the device and the motor are specified for the correct supply voltage.
Installation, maintenance and repair work must not be carried out unless the device has been
disconnected from the voltage and at least 5 minutes have elapsed since the mains was switched off!
(Due to charged capacitors, hazardous voltages may be present on the device for up to 5 minutes
after being switched off from the mains). Before starting work it is essential to check by measurement
that all contacts of the power plug connections or the connection terminals are voltage-free.
The electrical installation must be implemented according to the applicable regulations (e.g. cable
cross-section, fuses, earth lead connections). Further instructions can be found in the documentation
or manual for the device.
Information regarding EMC-compliant installations such as shielding, earthing, location of filters and
routing of cables can be found in the documentation for the devices and in the technical information
manual TI 80-0011. This information must always be observed even with devices with a CE label.
Compliance with the limit values specified in the EMC regulations is the responsibility of the
manufacturer of the system or machine.
In case of a fault, inadequate earthing may result in electric shock, possibly with fatal consequences.

1 Introduction
BU 0830 en-4121 11
The device may only be operated with effective earth connections which comply with local regulations
for large leakage currents (> 3.5 mA). Detailed information regarding connections and operating
conditions can be obtained from the technical Information manual TI 80-0019.
Connection of the supply voltage may directly or indirectly set the device into operation. Contact with
electrically live components may result in electric shock, possibly with fatal consequences.
All poles of cable connections (e.g. power supply) must always be disconnected.
Pos: 43 /A nl eitu ng e n/ Elek tro ni k/F U und S tar t er/ 1. Allg em ei n es/ Si ch er h eits - u nd Instal lati onshi nweis e und War n- Gef ahr en hinw eis e/ ne u/ Si c her heit s- u n d Ins t all a tio ns hi nw ei se - Einz el p unk te/ 4_ e. Be tr ie b ( Sic h er hei ts hinw eis e) @ 74\mod_1621427644051_388.docx@ 278 2111 @ @ 1
Operation
Where necessary, systems in which the devices are installed must be equipped with additional
monitoring and protective equipment according to the applicable safety requirements (e.g. legislation
concerning technical equipment, accident prevention regulations, etc.).
All covers must be kept closed during operation.
With certain setting conditions, the device or the motor which is connected to it may start automatically
when the mains are switched on. The machinery which it drives (press / chain hoist / roller / fan etc.)
may then make an unexpected movement. This may cause various injuries, including to third parties.
Before switching on the mains, secure the danger area by warning and removing all persons from the
danger area.
Pos: 44 /A nl eitu ng e n/ Elek tro ni k/ Sa fe ty / 2. Si c her hei t /Si c h erh ei ts hi nw ei se [ Sa fet y ] - StörungdurchHandfunkgeräte@ 39\mod_1571297002057_388.docx@ 2565250@ @ 1
The PDS (SR) may suffer interference if mobile radio devices are used within a distance of less than
20 cm from the PDS (SR).
Pos: 45 /A nl eitu ng e n/ Elek tro ni k/F U und S tar t er/ 1. Allg em ei n es/ Si ch er h eits - u nd Instal lati onshi nweis e und War n- Gef ahr en hinw eis e/ ne u/ Si c her heit s- u n d Ins t all a tio ns hi nw ei se - Einz el p unk te/ 4_f . War tu ng, I ns ta nd hal tu ng un d A uß er be tri ebn ahm e ( Si ch erh eits hi nw ei s e) @ 74\m od_1621427698010_388.docx@ 2782592@ @ 1
Maintenance, repair and decommissioning
Installation, maintenance and repair work must not be carried out unless the device has been
disconnected from the voltage and at least 5 minutes have elapsed since the mains was switched off!
(Due to charged capacitors, hazardous voltages may be present on the device for up to 5 minutes
after being switched off from the mains). Before starting the work, it is essential to check by
measurement that all contacts of the power plug connectors or the connection terminals are voltage-
free.
Pos: 48 /A nl eitu ng e n/ Elek tro ni k/F U und S tar t er/ 1. Allg em ei n es/ Si ch er h eits - u nd Instal lati onshi nweis e und War n- Gef ahr en hinw eis e/ ne u/ Si c her heit s- u n d Ins t all at io nshi nw eise - Ei nz elp unk te /5. Expl osi ons g ef ähr de te U mg eb ung (AT EX) [ S K xx x E-FD S, SK 5xxE, S K 5xxP] @ 12\m od_1466688226647_388.docx@ 332517@ @ 1
4. Potentially explosive environment (ATEX)
The device is not approved for operation or maintenance work in potentially explosive environments
(ATEX).
Pos: 50 /A nl ei tu nge n/ Elek tr o nik/ Sa fe ty/ 3. F u nkti ons b esc hr ei bu ng/ F unk tio ns bes chr eib ung _0 1 [Ü b ersc hr if t] @ 15\mod_1484812699011_388.docx@ 2312909@ 1 @ 1

Functional Safety – Supplemental manual for series SK 300P
12 BU 0830 en-4121
2 Function description
Pos: 51 /A nl ei tu nge n/ Elek tr o nik/ Sa fe ty/ 3. F u nkti ons b esc hr ei bu ng/ F unk tio ns bes chr eib ung _0 2 @ 63\mod_1611238209177_388.docx@ 2719977@ @1
To prevent danger to people and material it is necessary to be able to safely switch off machines. The
frequency inverters stated in this document provide safe shut-down methods.
The following basic explanation of the function of a frequency inverter serves to provide better
understanding of the function of safe shut-down methods:
The mains voltages are rectified and the resulting DC links circuit voltage is reconverted to AC
according to the requirements of the operating status of the motor (frequency and voltage).
The inverter's semiconductor switches (T1 to T6) are controlled by a complex pulse pattern. This pulse
pattern is generated by the micro-controller (µC) and amplified by the driver. The driver takes over the
conversion of the logic signals to the control voltages of the semiconductor switches. The
semiconductor switches are switched via the control voltage and the pulse pattern is amplified and
applied to the motor terminals. Due to the low-pass effect of the motor, a three-phase pulse width
modulated sine wave voltage, a three-phase system, results from the pulsed voltage. The motor
generates a torque.
Pos: 56 / A nl ei tu ng en/ El ek tro ni k/ Saf ety / 3. F u nkti ons bes c hrei bu ng /F unk ti ons bes c hr eib ung _0 3 [ SK 3xx P] @ 69\mod_1617699313249_388.docx@ 2754608@ 2@ 1
2.1 Design of the safe shut-down method
Structure of Safe Pulse Block
1
Safety Digital Input
2
Micro-controller
3
Driver
4
Safe Pulse Block
The SK 3xxP series frequency inverter can be ordered as SK 301P and SK 311P versions from size 2
onwards.
With these versions, the STO (safe torque off) and SS1-t (safe stop1 time controlled) stop functions
can be implemented. The stop functions reach different maximum safety and performance levels
(SIL/PL levels). A simple re-start block can also be implemented.
Pos: 67 /A nl eitu ng e n/ Elek tro ni k/ Sa fe ty / 3. F u nkt i ons bes c hrei bu ng /Si c her e P uls sp err e_ 01 [S K 300P ] @ 59 \mod_1606416420899_388.docx@ 2699389@ 3 @ 1

2 Function description
BU 0830 en-4121 13
2.1.1 Safe Pulse Block
With the aid of an additional DC/DC converter, the Safe Pulse Block generates the supply voltage for
the drivers. For this, the “Safe Pulse Block” must be provided with two 24 V voltages. This must be
provided as follows:
• 2 x 24 V via contacts VIS1_24V and VIS2_24V with common reference potential VIS12_0V
Pos: 70 /A nl eitu ng e n/ Elek tro ni k/ Sa fe ty/ 3. F u nkti ons b esc hr ei bu ng/ Sic h ere Puls sp err e_ 02 [ SK 300 P] @ 59\mod_1606416857051_388.docx@ 2699427@ @ 1
If these 24 V voltages are switched off, the DC/DC converter does not transmit any power to the
drivers. As the drivers are now no longer supplied with power, no pulses reach the semiconductor
switches (T1 to T6) of the inverter. The flow of current in the semiconductor switches and in the motor
is interrupted. I.e. after a certain response time of the electronics and the reduction of the motor
current, the motor does not develop a driving torque.
Switch-off of the 24 V voltages must be performed by a fail-safe switching device.
Contacts VIS1_24V and VIS2_24V have a common reference potential VIS12_0V. This reference
potential must not be disconnected if a dual-channel Safe Pulse Block is used.
The Safe Pulse Block can be used with a single channel. I.e. the two contacts VIS1_24V and
VIS2_24V are connected in parallel.
In this case, both the 24 V voltage as well as the reference potential VIS12_0V can be disconnected.
Preferably, the parallel contacts VIS1_24V and VIS2_24V are separated.
Pos: 72 /A nl eitu ng e n/ Elek tro ni k/ Sa fe ty / 3. F unk ti ons b es c hrei bung /S af et y D ig i tal ei ng ang [SK 300P ] @ 69\mod_1617701589214_388.docx@ 2754646@ 3 @ 1
2.1.2 Safety Digital Input
The Safety Digital Input is explicitly intended for implementing a safety function. This means that the
standard digital inputs must not be used to implement a safety function.
With the Safety Digital Input, safe triggering is carried out using the micro-controller. It interrupts the
control signals to the driver or provides a pulse pattern which shuts down the connected motor in a
controlled manner.
The Safety Digital Input can be parameterised with the following functions:
• Voltage disable
The micro-controller interrupts the control signals to the driver. No control pulses are provided to the
semiconductor switches (T1 to T6) of the inverter. I.e. the current in the semiconductor switches and in
the motor is interrupted and the motor runs down to a standstill.
• Quick Stop
The micro-controller shuts down the motor with control pulses according to a pre-set quick stop time.
The Safety Digital Input has a separate reference potential VISD_0V. I.e. in this case this reference
potential can be disconnected to trigger the Safety Digital Input. Preferably, the VISD_24V contact is
disconnected.
Pos: 80 /A nl ei tu nge n/ Elek tr o nik/ Sa fe ty/ 3. F u nkti ons b esc hr ei bu ng/ Sic h erh ei tsf u nkti on e n @ 1 5\mod_1485168492973_388.docx @2314154@ 2 @ 1

Functional Safety – Supplemental manual for series SK 300P
14 BU 0830 en-4121
2.2 Safety functions
Pos: 81 /A nl ei tu nge n/ Elek tr o nik/ Sa fe ty/ 3. F u nkti ons b esc hr ei bu ng/ WAR NU N G - Ver s ag en einer Brem s e @ 3 9\mod_1570798924238_388.docx@ 2563904@ @ 1
WARNING
Mechanical brake failure
Control of a mechanical brake by means of the frequency inverter is not fail-safe. Triggering of the
STO and the fault response function causes the application of a mechanical brake which is controlled
by the frequency inverter. The brake takes the entire load of the drive units and all of its rotating
masses and attempts to stop it.
A brake which is not designed to take the full load (e.g. a holding brake) may be damaged and may
fail. This can cause severe or fatal injuries or damage to the equipment, e.g. due to falling loads.
• Design the brake as an operating brake
• Ensure that the drive unit is stopped before the STO function is activated.
Pos: 84 /A nl eitu ng e n/ Elek tro ni k/ Sa fe ty / 3. F u nkt i ons bes c hrei bu ng /Si c her hei tsf u nkti one n_ Sic her abg esc hal t et es M om en t, ST O @ 15\mod_1485168854901_388.docx@ 2314190@ 3 @ 1
2.2.1 Safe Torque Off, STO
The STO function prevents the supply of motive power to the motor. According to ISO 1411, this
function can be used to prevent unexpected starting and/or switch off the driving torque as quickly as
possible (see technical data response time) and allow the drive run down to a standstill (motor with
work machine).
This behaviour corresponds to stop category 0 (uncontrolled stopping) according to EN 60204-1.
Depending on the application the movement while running down to a standstill can cause a hazard for
an undefined time. Detection of whether or when the drive unit has achieved a safe state is not
integrated into the frequency inverter.
Depending on the switching equipment and use of a safe shut-down method, an STO function with
safety category 4 as per DIN EN ISO 13849-1 can be implemented.
Pos: 85 /A nl ei tu nge n/ Elek tr o nik/ Sa fe ty/ 3. F u nkti ons b esc hr ei bu ng/ Sic h erh ei tsf u nkti on e n_Si ch er abg esc halt et es M om en t Erg ä nz ung , ST O [SK 50 0P ] @ 44\mod_1593153101665_388.docx @ 2638250@ @ 1
Bei einer Synchronmaschine kann es beim Versagen des Leistungsteils des Frequenzumrichters trotz
aktivierter STO-Funktion zu einer Ausrichtbewegung um eine Polteilung kommen.
Pos: 89 /A nl eitu ng e n/ Elek tro ni k/ Sa fe ty / 3. F unk ti ons b es c hrei bung /S ic h er h eits f unk ti on e n_ Sic h erer St opp mit Z ei tst e uer ung, SS1-t [SK 300P]@ 59\mod_1606471551487_388.docx@ 2699620 @ 3@ 1
2.2.2 Safe Stop 1 time-controlled, SS1-t
The SK 3x1P series frequency inverter supports the implementation of the SS1 function in the SS1-t
(Safe Stop 1 time-controlled) version.
To stop the motor, the frequency inverter triggers a quick stop. After an application-specific time, the
STO function is switched on. This behaviour corresponds to stop category 1 (controlled stopping)
according to IEC 60204-1. The changeover to the STO function is time-controlled via an external, fail-
safe time relay (delayed output of an external safety device).
Information
Controlled stopping
Controlled stopping is triggered via the Safety Digital Input and meets lower safety requirements than
the STO function, which is triggered via the Safe Pulse Block.
Controlled stopping with SS1-t can fail without detection and must not be used if this failure can cause
a hazardous situation in the application.
Pos: 90 /A nl eitu ng e n/ Elek t ro ni k/ Sa fe ty/ 3. F u nk ti ons b es c hrei bung /Pr i or i tä te n un d F ehl er re ak ti o n [ S K 5 0 0P] @ 44\mod_1594730066229_388.docx@ 2645512@ 3 @ 1
2.2.3 Priorities and response to faults
As the Safe Pulse Block is based on switching off the supply voltage to the drivers of the inverter’s
semiconductor switches (T1 to T6), this shut-down method has the highest priority. I.e. if the safety
function STO is implemented with the Safe Pulse Block, the safety function STO also has the highest
priority. If the safety functions STO and SS1-t are implemented in parallel, it must be noted that

2 Function description
BU 0830 en-4121 15
controlled stopping of the motor via the Safety Digital Input is interrupted by triggering the Safe Pulse
Block.
The Safety Digital Input has an internal fault diagnosis. If this diagnosis detects a fault, the control
signals to the drivers of the semiconductor switches (T1 to T6) of the inverter are switched off. This
fault response corresponds to the behaviour of the safety function STO with the special feature that
this fault state can only be acknowledged by resetting the mains voltage of the frequency inverter.
Acknowledgement via a bus system or the digital inputs is not possible.
NOTE: The SS1-t function must not be used if a hazardous situation can result in the application due
to the fault response.
Pos: 93 /Al lg em ein/ Allg em eing ül tig e M od ul e/---------Seite num br uc h k om pak t --------- @ 13 \mod_1476369695906_0.docx@ 2265495@ @ 1

Functional Safety – Supplemental manual for series SK 300P
16 BU 0830 en-4121
Pos: 95 /A nl ei tu nge n/ Elek tr o nik/ Sa fe ty/ 3. F u nkti ons b esc hr ei bu ng/ Bei s piel e / R e ali sier ung / Beis pi ele / R eali si eru ng [ SK 5 00P ] @ 40\mod_1580802975694_388.docx@ 2588400@ 2 @ 1
2.3 Examples / Implementation
The following shows some examples of solutions for the safety functions STO and SS1-t.
Pos: 96 /A nl eit ung en/ El ekt ro nik/ Sa fet y/ 3. F unk ti ons bes chr ei bung /B eis pi el e / R eal isi er ung/F u nkti on STO_ 0 1 @ 1 5\mod_1485263814224_388.docx@ 2314825@ 3 @ 1
2.3.1 STO function
Implementation of a safety function usually requires the use of a protective switching device. The
category of the function is determined by the component with the lowest category.
Pos: 101 /A nlei t ung e n/El ek tr onik / Saf ety /3 . F un kti ons be sc hr eib u ng/ Bei spi el e / R e alis ier ung /F unk t io n STO _ 02 [S K 3x x P] @ 59\mod_1606473241375_388.docx@ 2699738@ @ 1
Safe Pulse Block
Emergency stop button
Protective switching device
Reset key
Shielded cable
Frequency inverter
1
Supply voltage
2
Reset circuit
3
Input circuit with cross-circuit detection
4
2 x safety output with a common reference (GND)
If the Safe Pulse Block is triggered for an enabled frequency inverter, this results in the error E018
(18.0 “Safety circuit”). To prevent this, the Safety Digital Input can additionally be used with the
Voltage Disable function (P424 = 1).
The typical response time can be reduced by additional use of the Safety Digital Input. A second
safety output is required to control this.
This solution is preferable, especially in cases where the switching device only checks its safety
outputs in the course of an enabling cycle, as is the case with some electro-mechanical switching
devices. A suitable inspection interval must be specified according to the safety requirements.

2 Function description
BU 0830 en-4121 17
Safe Pulse Block with Safety Digital Input
Emergency stop
button
Protective switching device
Reset key
Shielded cable Frequency inverter
1
Supply voltage
2
Reset circuit
3
Input circuit with cross-circuit detection
4
Safety output
5
2 x safety output with a common reference (GND)
The Safe Pulse Block and the Safety Digital Input are connected via an M12 socket. A fault exclusion
may need to be performed, 2.3.5 "Exclusion of wiring faults".
The requirements for category 4 and PL e (Performance level e) are only fulfilled by the Safe Pulse
Block. The Safety Digital Input only achieves category 2 and PL d (Performance Level d).
During the period between activation of the safety function via the Safety Digital Input and activation of
the STO via the Safe Pulse Block, the frequency inverter can also only fulfil category 2 and PL d.
Pos: 112 /Al lg em ein/ All gem eing ült igeModule/---------Seitenum br uc h k om p akt --------- @ 13\m od_1476369695906_0.docx@ 2265495@ @ 1

Functional Safety – Supplemental manual for series SK 300P
18 BU 0830 en-4121
Pos: 115 /A nlei t ung e n/El ek tr onik / Saf ety /3 . F un kti ons be sc hr eib u ng/ Bei spi el e / R e alis ier ung /F unk t io n SS 1-t [SK 30 0P] @ 69\mod_1617702606916_388.docx@ 2754684@3 @ 1
2.3.2 SS1-t function
The Safety Digital Input with the Quick Stop function (P424 = 2) is always required to implement the
function SS1-t.
Emergency stop button Safety switching device Shielded cable Frequency inverter
1
Supply voltage
2
Reset circuit
3
Input circuit with cross-circuit detection
4
Safety output
5
2 x safety output with a common reference (GND), delayed by a safety timing element
Actuation of the emergency stop button (call-up of the safety function) initially triggers a controlled
stopping action via the Safety Digital Input. In this case, it must be ensured that the drive is brought to
standstill within the parameterised “Quick stop time” (P426). After the elapse of a delay time which is
controlled by the protective switching device, the STO function is triggered via the Safe Pulse Block.
The delay time must be dimensioned so that the delay is longer than the quick stop time plus the “DC
Run-on time” (P559). The delay time must be selected so as to be fail-safe.
After the delay time which is set in the protective switching device has elapsed, the frequency inverter
always switches to the STO function. This also applies in the case of failure of the controlled stopping
action.
SK 300P series frequency inverters are equipped with additional control which is set via the “Safety
SS1 max. time” parameter (P423). If the motor is not stopped within the “Safety SS1 max time”
(P423), the frequency inverter performs the fault response action and generates an error message.
I.e. in this case the motor also runs down to a standstill.
The Safe Pulse Block and the Safety Digital Input are connected via an M12 socket. A fault exclusion
may need to be performed 2.3.5 "Exclusion of wiring faults".
The requirements for category 4 and PL e are only fulfilled by the Safe Pulse Block. The Safety Digital
Input only achieves category 2 and PL d (Performance Level d).
During the period between activation of the SS1-t safety function via the Safety Digital Input and
activation of the STO function via the Safe Pulse Block, the frequency inverter can also only fulfil the
requirements of category 2 and PL d.
Pos: 123 /A nlei t ung e n/El ek tr onik / Saf ety /3 . F un kti ons be sc hr eib u ng/ Bei spi el e / R e alis ier ung /Ei nf ac he Wi e der anl au fs perr e _01 @ 4 4\mod_1594730617062_388.docx@ 2645587@ 3 @ 1

2 Function description
BU 0830 en-4121 19
2.3.3 Simple re-start block
Category 4 as per DIN EN ISO 13849-1 can be achieved with direct dual-channel triggering of the
Safe Pulse Block using a safe switching element. The following illustrations show typical examples
with an emergency stop button (positively driven contacts, category 4).
Pos: 126 /A nlei t ung e n/El ek tr onik / Saf ety /3 . F un kti ons be sc hr eib u ng/ Bei spi el e / R e alis ier ung /Ei nf ac he Wi e der anl au fs perr e _02 [SK 3 00P] @ 59\mod_1606478702243_388.docx@ 2699890@ @ 1
Emergency stop button Shielded cables 1) Frequency inverter
1) Shielded cables to exclude faults as per DIN EN ISO 13849-2
or
Emergency stop button Shielded cables 1) Frequency inverter
1)
Shielded cables to exclude faults as per DIN EN ISO 13849-2
Pos: 127 /A nlei t ung e n/El ek tr onik / Saf ety /3 . F un kti ons be sc hr eib u ng/ Bei spi el e / R e alis ier ung /Ei nf ac he Wi e der anl au fs perr e _03 @ 7 3\mod_1620752337055_388.docx@ 2778988@ @ 1
To achieve safety category 4, fault exclusion as per DIN EN ISO 13849-2 Section D.5 must be
possible for the upstream components (hard-wiring and dual-channel button with independent,
positive-opening contacts). I.e., in this example, the emergency-stop button and the wiring must be
designed so that short-circuiting at the emergency-stop button and short-circuits to other live systems
can be ruled out.
In this example, there is no reset circuit as is the case with the protective switching devices. If the
result of risk analysis shows that cancellation of the stop command must be acknowledged by a
deliberate manual action, the resetting requirements can be fulfilled organisationally (e.g. by an
emergency-stop button with key release and storage of the key away from the machine).
If the Safe Pulse Block is triggered for an enabled frequency inverter, this results in the error E018
(18.0 “Safety circuit”).
Information
With the Automatic Fault Acknowledgement (P506) and Automatic Starting (P428) functions (see BU
0800), the drive starts immediately after the emergency stop button is released. For this reason, it is
urgently recommended that these functions are not used in combination and especially not for safety-
relevant applications.
Pos: 128 /Al lg em ein/ All gem eing ült ig e M od ule /---------Seiten um br uc h k om pak t --------- @ 13\mod_1476369695906_0.docx@ 2265495@ @ 1

Functional Safety – Supplemental manual for series SK 300P
20 BU 0830 en-4121
Pos: 131 /A nl eit u ng e n/El ektr onik / S af ety /3 . F un k tio ns bes chr eib u ng /B eis pi el e / R e al i si eru ng /B ei s pi el ohn e s ic her e P ul ss p err e [ S K 300 P] @ 69\mod_1617790257031_388.docx@ 2755510@ 3@ 1
2.3.4 Example without Safe Pulse Block
WARNING
Hazardous movement
If the safety functions STO/SS1-t are exclusively implemented via the Safety Digital Input, the drive
can be unexpectedly supplied with power at any time, even after it has been stopped. Under some
circumstances this may cause hazardous movement. In this c
ase, the fault response action is
performed at the latest after the maximum fault response time (see technical data 35 ms).
• Implement the safety function with the Safe Pulse Block.
It is possible to implement the safety function STO or SS1 with the Safety Digital Input and a
protective switching device only. However, according to DIN EN ISO 13849-1, with this switching
variant, the maximum safety category that can be achieved is category 2. However, the condition for
this is that in addition to the Safety Digital Input, all other components (protective switching device,
emergency stop button, wiring) also fulfil the requirements for category 2.
Emergency stop button Safety switching device Shielded cable 1) Frequency inverter
1) Shielded cable to exclude faults as per DIN EN ISO 13849-2
1
Supply voltage
2
Reset circuit
3
Input circuit with cross-circuit detection
4
Safety output
To implement the STO safety function, the Safety Digital Input is parameterised to the Voltage Disable
function (P424 = 1).
The Safety Digital Input with the Quick Stop function (P424 = 2) is parameterised for implementation of
the SS1-t function. The quick stop time is set via parameter P426. It must be ensured that the drive is
actually brought to standstill within the parameterised quick stop time.