Pilz PIT m3.3p User manual

PIT m3.3p
Operating Manual-1003190-EN-08
}Control and signal devices

Preface
This document is a translation of the original document.
All rights to this documentation are reserved by Pilz GmbH & Co. KG. Copies may be made
for internal purposes. Suggestions and comments for improving this documentation will be
gratefully received.
Source code from third-party manufacturers or open source software has been used for
some components. The relevant licence information is available on the Internet on the Pilz
homepage.
Pilz®, PIT®, PMI®, PNOZ®, Primo®, PSEN®, PSS®, PVIS®, SafetyBUS p®,
SafetyEYE®, SafetyNET p®, the spirit of safety® are registered and protected trademarks
of Pilz GmbH & Co. KG in some countries.
SD means Secure Digital

Contents
Operating Manual PIT m3.3p
1003190-EN-08 3
Section 1 Introduction 5
1.1 Validity of documentation 5
1.1.1 Retaining the documentation 5
1.2 Definition of symbols 5
Section 2 Overview 7
2.1 Features of the operating mode selector switch 7
2.2 Features of the transponder key 8
2.3 Control elements 9
2.3.1 Explanation of front membrane 10
Section 3 Safety 12
3.1 Intended use 12
3.2 Safety regulations 13
3.2.1 Use of qualified personnel 13
3.2.2 Warranty and liability 13
3.2.3 Disposal 13
Section 4 Function description 14
4.1 Configuration of functions 16
4.2 Operating mode interface 20
4.2.1 Switch behaviour after a transponder key is removed 20
4.2.2 Control program requirements 20
4.3 Interface for status information 20
4.3.1 Timing diagrams 23
4.3.1.1 Operator actions 23
4.3.1.2 Device error 25
4.3.1.3 Application error: "No authorisation" 25
4.3.1.4 Application error: "Pushbutton operated incorrectly" 27
4.4 Key ID interface 29
4.4.1 Key ID number of the transponder key 29
4.4.2 Communication mode for downloading the Key ID number 31
4.4.2.1 Transmitter-controlled communication mode 31
4.4.2.2 Handshake-controlled communication mode 32
4.4.2.3 Advanced communication mode 33
4.4.3 Evaluation by a control system 34
4.4.3.1 Evaluation of the Key ID number with transmitter-controlled communication34
4.4.3.2 Evaluation of the Key ID number with handshake-controlled communica-
tion
37
4.4.3.3 Evaluation of the Key ID number with advanced communication 41
4.5 Operating mode lock and operating mode preselection 41
4.5.1 Operating mode lock 41
4.5.2 Operating mode pre-selection 43
Section 5 Installation 46
5.1 General installation guidelines 46
5.2 Dimensions 46

Contents
Operating Manual PIT m3.3p
1003190-EN-08 4
5.3 Mounting cutout 47
Section 6 Wiring 48
6.1 Terminal configuration 48
6.2 Connecting the unit 49
6.3 Connection to a control system 50
Section 7 Operation 54
7.1 Select operating modes OM1/OM2 55
7.2 Select special mode (service) 56
7.3 Monitoring of operating time 56
7.4 Switchover delay t1 57
7.5 Troubleshooting 57
7.5.1 Delete error 58
7.6 Diagnostics 59
7.6.1 Status information about the interface for status information 59
7.6.2 Status information about button backlighting 60
7.6.3 Status information about authorisation display 61
Section 8 Technical details 62
8.1 Safety characteristic data 64
Section 9 Supplementary data 65
9.1 Radio approval 65
9.2 Chemical resistance 66
9.2.1 Front membrane 66
9.2.2 Plastic frame 68
Section 10 Order reference 70
10.1 Product 70
10.2 Accessories 70
Section 11 EC declaration of conformity 72

Introduction
Operating Manual PIT m3.3p
1003190-EN-08 5
1 Introduction
1.1 Validity of documentation
This operating manual explains the function and operation, describes the installation and
provides guidelines on how to connect the product.
This documentation is valid for the product PIT m3.3p. It is valid until new documentation is
published.
1.1.1 Retaining the documentation
This documentation is intended for instruction and should be retained for future reference.
1.2 Definition of symbols
Information that is particularly important is identified as follows:
DANGER!
This warning must be heeded! It warns of a hazardous situation that poses
an immediate threat of serious injury and death and indicates preventive
measures that can be taken.
WARNING!
This warning must be heeded! It warns of a hazardous situation that could
lead to serious injury and death and indicates preventive measures that can
be taken.
CAUTION!
This refers to a hazard that can lead to a less serious or minor injury plus
material damage, and also provides information on preventive measures
that can be taken.
NOTICE
This describes a situation in which the product or devices could be dam-
aged and also provides information on preventive measures that can be
taken. It also highlights areas within the text that are of particular import-
ance.

Introduction
Operating Manual PIT m3.3p
1003190-EN-08 6
INFORMATION
This gives advice on applications and provides information on special fea-
tures.

Overview
Operating Manual PIT m3.3p
1003190-EN-08 7
2 Overview
The operating mode selector switch may only be operated in conjunction with a transpon-
der key. 3 transponder keys are available, each with different authorisations.
24 V DC
SOM1
SOM2
SOM5
Service
In n
In n+1
In n+4
A1 A2
IDo0 ... IDo3,
IDi0, IDi1
SIo0 ... SIo3
6
4
6
4
Higher-level process
controller
Analysis unit
Transponder key
(e.g. PNOZ m1p) with
"1 from n" evaluation
Safety control system
Fig.: Operating mode selector switch in an application (principle)
2.1 Features of the operating mode selector switch
The product has the following features:
}Supply voltage 24 VDC
}2 buttons for switching the operating mode
}Selected operating mode is displayed through button backlighting
}2 operating modes OM1 and OM2
}1 special mode OM5 (Service)
}3 monitored semiconductor outputs (24 V) in accordance with EN61496-1;
1 semiconductor output per operating mode
}Interface for status information, consisting of 4 signal outputs (24 V)
}Status information is divided into information classes:
– Operator actions
- Insert transponder key
- Remove transponder key
- Select operating mode

Overview
Operating Manual PIT m3.3p
1003190-EN-08 8
– Messages (e.g. user error, malfunction)
}Interface (Key ID interface) for downloading the Key ID number of the transponder key
you are using, consisting of
– 3 semiconductor outputs (24 V)
– 2 inputs
– 1 configurable input/output
can be configured as
- input (see Transmitter-controlled [ 31] and Handshake-controlled communica-
tion mode [ 32])
- output (see Advanced communication mode [ 33])
}Configurable communication mode for downloading the Key ID number
– Transmitter-controlled communication mode
– Handshake-controlled communication mode
– Advanced communication mode
}Authorisations of a transponder key are displayed via LEDs
2.2 Features of the transponder key
A transponder key contains a Key ID number and the authorisations to which you can
switch with that transponder key.
Features:
}Replaces the mechanical key
}Different authorisations
}Authorisations are identified via printed "Key Mode".
}Unique identification of a certain transponder key via Key-ID number

Overview
Operating Manual PIT m3.3p
1003190-EN-08 9
2.3 Control elements
[1]
[2] [3] [4]
Fig.: Front view
Legend
[1] Pushbutton to select an operating mode
1 Pushbutton for OM1/OM5
2 Pushbutton for OM2
[2] Authorisation display – LEDs to display the authorisations for the relevant transpon-
der key
1 Authorisation for OM1
2 Authorisation for OM2
3No function
4No function
5 Authorisation for OM5
[3] Slot for inserting the transponder key
[4] Transponder key

Overview
Operating Manual PIT m3.3p
1003190-EN-08 10
4 3 2 1
On
Off
SOM1 SOM2 SOM3 SOM4 SOM5 IDo0 IDo1 IDo2 IDo3 IDi0 IDi1 Slo0 Slo1 Slo2 Slo3 A1 A2
[1]
Fig.: View from above
Legend
[1] DIP switch for configuration of the switching behaviour after the transponder key is
removed and for configuration of the communication mode for downloading the Key
ID number
2.3.1 Explanation of front membrane
There is a version of the operating mode selector switch with front membrane, for use with
moulding machines. The front membrane contains symbols of the various operating modes.
Fig.: PITm3.3p with front membrane

Overview
Operating Manual PIT m3.3p
1003190-EN-08 11
The table below explains what the symbols mean:
Operating
mode Display Explanation
Automatic mode (EN ISO 16090-1:2014)
Set-up (EN ISO 16090-1:2014)

Safety
Operating Manual PIT m3.3p
1003190-EN-08 12
3 Safety
3.1 Intended use
The operating mode selector switch is suitable for machines that can be operated in mul-
tiple operating modes with different safety functions and/or work procedures. It enables you
to switch between defined operating modes, such as:
}Set-up mode
}Automatic mode
}Service
The operating mode selector switch meets the following safety requirements:
}Interlock to protect against unauthorised switching
To switch to an operating mode with the (selection) pushbutton, contact with a
transponder key is required.
}Access authorisations are restricted to certain groups
A transponder key with the relevant authorisation is required in order to switch to a cer-
tain operating mode.
}Prevents unintentional switching
The switch to a different operating mode is only recognised once the corresponding
(selection) pushbutton has been operated for a defined period ("deliberate operator ac-
tion"). Multiple operation of (selection) pushbuttons is detected.
}Safe "1 from n" circuit of the operating mode outputs
The operating mode selector switch only ever leads to one operating mode output "1"
signal.
When restarting, the device is in BA1 or in the last selected operating mode, depending on
the device configuration.
Depending on the application area and its respective regulations, the operating mode se-
lector switch can be used up to SILCL2 (ENIEC62061) and up to PLd
(ENISO13849-1), if the operating modes are evaluated by a safety control system with
safe "1oon" evaluation.
NOTICE
Faulty operation of PITmode can lead to hazardous situations. Switching to
an operating mode must not initiate a hazardous movement, nor can it can-
cel an existing control command.

Safety
Operating Manual PIT m3.3p
1003190-EN-08 13
3.2 Safety regulations
3.2.1 Use of qualified personnel
The products may only be assembled, installed, programmed, commissioned, operated,
maintained and decommissioned by competent persons.
A competent person is a qualified and knowledgeable person who, because of their train-
ing, experience and current professional activity, has the specialist knowledge required. To
be able to inspect, assess and operate devices, systems and machines, the person has to
be informed of the state of the art and the applicable national, European and international
laws, directives and standards.
It is the company’s responsibility only to employ personnel who
}Are familiar with the basic regulations concerning health and safety / accident preven-
tion,
}Have read and understood the information provided in this description under "Safety"
}Have a good knowledge of the generic and specialist standards applicable to the spe-
cific application.
3.2.2 Warranty and liability
All claims to warranty and liability will be rendered invalid if
}The product was used contrary to the purpose for which it is intended
}Damage can be attributed to not having followed the guidelines in the manual
}Operating personnel are not suitably qualified
}Any type of modification has been made (e.g. exchanging components on the PCB
boards, soldering work etc.).
3.2.3 Disposal
}In safety-related applications, please comply with the mission time TM in the safety-re-
lated characteristic data.
}When decommissioning, please comply with local regulations regarding the disposal of
electronic devices (e.g. Electrical and Electronic Equipment Act).

Function description
Operating Manual PIT m3.3p
1003190-EN-08 14
4 Function description
The operating mode selector switch enables you to switch between 3 different operating
modes (operating modes OM1, OM2 and special operating mode OM5 (Service)).
One pushbutton each is available for OM1 and OM2. For special operating mode (Service),
pushbutton OM1 must be operated for a certain period (see Monitoring of operating
time [ 56]). Each pushbutton is assigned a monitored semiconductor output (see Oper-
ating mode interface [ 20]). Operating the pushbutton changes the semiconductor out-
put from a "0" signal to a "1" signal. The operating mode selector switch guarantees that
only one of the semiconductor outputs has a "1" signal at any one time.
INFORMATION
OM storage of operating mode
When configured with OM storage (see Configuration of
functions [ 16]), after a restart the unit will start with the last selected
operating mode.
If OM storage is not configured, the unit always starts with OM1. For this
reason you should make sure that OM1 represents the safest operating
mode.

Function description
Operating Manual PIT m3.3p
1003190-EN-08 15
RFID
Receiver
Power
User Interface
A1
A2
SOM1
SOM2
IDo0
IDo1
IDo2
IDo3
SOM3
SOM4
SOM5
SIo0
SIo1
SIo2
SIo3
IDi0
IDi1
Terminals
(Safe) Operating Modes
Interface
Key ID Interface
Status Information
Interface
Transponder Key
Inputs
Configurable
Input/Output
Fig.: Block diagram
Legend
Transponder Key Electronic key to enable a change of operating mode
User Interface }Pushbutton to select the operating mode
}Authorisation display (LEDs to display the authorisations for
the relevant transponder key)
A1, A2 Supply voltage
SOM1 … SOM5 Operating mode interface
Interface for displaying the selected operating mode
SOM1 Monitored output for OM1
SOM2 Monitored output for OM2
SOM3 No function
SOM4 No function
SOM5 Monitored output for OM5 (Service)

Function description
Operating Manual PIT m3.3p
1003190-EN-08 16
IDo0 … IDo3 and
IDi0 … IDi1
Key ID interface
Interface to download the Key ID number to a control system,
consisting of 4 outputs, 2 inputs and 1 configurable input/output
SIo0 … SIo3 Interface for status information
Interface to signal status information,
consisting of 4 signal outputs
The operating mode selector switch is protected against unauthorised operation. A switch
between operating modes must be enabled via a transponder key.
Authorisations of a transponder key
A total of 3 transponder keys are available for an operating mode selector switch. Each
transponder key provides authorisation to switch up to 3 operating modes, including special
authorisations. A transponder key can be identified via the printed key mode.
Assignment of key modes to authorisations
Designation Marking on transponder key Authorisation for operating mode
Key Mode 01 1OM1
Key Mode 02 2OM1+ OM2
Key Service Service OM1+ OM2 + OM5 (Service)
4.1 Configuration of functions
The operating mode selector switch has a DIP switch, which you can use to set the re-
quired communication mode for downloading the Key ID number and the unit's behaviour
}after the transponder key is removed.
}after the voltage reset.
The communication modes have different functions. These functions are described in the
following subsections:
}Transmitter-controlled communication mode [ 31]
}Handshake-controlled communication mode [ 32]
}Advanced communication mode [ 33]

Function description
Operating Manual PIT m3.3p
1003190-EN-08 17
NOTICE
It is essential to note:
– The configuration may only be performed by a competent person.
– The configuration must be performed when the supply voltage is
switched off.
– The configuration is adopted as the device is started up, provided the
switch setting is valid. If not, the device switches to a "Device error"
fault condition.
– During operation, the DIP switch setting is monitored for any change.
If the switch setting is changed during operation, the device switches
to a "Device error" fault condition, remedy: Delete error [ 58].
– The communication mode changes when you change the DIP switch
setting from Pos. [1]-[4] to Pos. [5]-[8]. In this case you automatically
switch to advanced communication mode.
Legend
1
On
Off
DIP switch in ON position
1
On
Off
DIP switch in OFF position
DIP switch setting
Switch behaviour of
operating mode (OM)
Communication
modes
Operating
mode lock
and operat-
ing mode
preselec-
tion
[1]: Default setting
4 3 2 1
On
Off
OM1/OM2:
OM hold
Sender or handshake-
controlled communica-
tion mode
OM5:
Service fallback
[2]
4 3 2 1
On
Off
OM hold Sender or handshake-
controlled communica-
tion mode
[3]
4 3 2 1
On
Off
OM fallback Sender or handshake-
controlled communica-
tion mode
[4]
4 3 2 1
On
Off
OM storage Sender or handshake-
controlled communica-
tion mode

Function description
Operating Manual PIT m3.3p
1003190-EN-08 18
DIP switch setting
Switch behaviour of
operating mode (OM)
Communication
modes
Operating
mode lock
and operat-
ing mode
preselec-
tion
[5]
4 3 2 1
On
Off
OM1/OM2:
OM hold
Advanced communica-
tion mode
x
OM5:
Service fallback
[6]
4 3 2 1
On
Off
OM hold Advanced communica-
tion mode
x
[7]
4 3 2 1
On
Off
OM fallback Advanced communica-
tion mode
x
[8]
4 3 2 1
On
Off
OM storage Advanced communica-
tion mode
x
DIP configuration
NOTICE
It is essential to note that only the DIP switch settings described above will
be assessed as valid. With all other DIP switch settings, the device switches
to a "Device error" fault condition.

Function description
Operating Manual PIT m3.3p
1003190-EN-08 19
When the transponder key is re-
moved After a voltage reset
OM hold }the operating mode currently
selected is maintained,
}the assigned pushbutton is
back-lit or all pushbuttons
flash (BA5),
}the assigned semiconductor
output has a "1" signal.
}the operating mode BA1 is activ-
ated,
}pushbutton 1 is back-lit,
}SOM1 has a "1" signal.
OM fallback }the operating mode switches
to OM1,
}pushbutton 1 is back-lit,
}SOM1 has a "1" signal.
}the operating mode BA1 is activ-
ated,
}pushbutton 1 is back-lit,
}SOM1 has a "1" signal.
Service fall-
back (BA5
must be act-
ive)
}the operating mode switches
to OM1,
}pushbutton 1 is back-lit,
}SOM1 has a "1" signal.
}the operating mode BA1 is activ-
ated,
}pushbutton 1 is back-lit,
}SOM1 has a "1" signal.
OM storage }the operating mode currently
selected is maintained,
}the assigned pushbutton is
back-lit or all pushbuttons
flash (BA5),
}the assigned semiconductor
output has a "1" signal.
}the operating mode selected most
recently is activated,
}the assigned pushbutton is back-
lit or all pushbuttons flash (BA5),
}the assigned semiconductor out-
put has a "1" signal.
NOTICE
Switching of the operating mode to OM1 by removing the transponder key is
not a safety-related function. Switching of the operating mode has to be val-
idated in accordance with the requirements.

Function description
Operating Manual PIT m3.3p
1003190-EN-08 20
4.2 Operating mode interface
The operating mode interface consists of the monitored outputs SOM1, SOM2 and SOM5
(see Block diagram [ 14]). "SOM" stands for "Safe Operating Mode". The outputs are as-
signed to buttons, which can be used to select an operating mode if they have the relevant
authorisation (transponder key):
Button Output Operating mode
1 SOM1 OM1 The operating mode OM1/OM5 is selected
based on the operating time of button 1 (see
Monitoring of operating time [ 56]
SOM5 OM5
2 SOM2 OM2
4.2.1 Switch behaviour after a transponder key is removed
If the transponder key is removed after changing to a different operating mode, it is possible
to configure the subsequent switch behaviour of SOM1, SOM2 and SOM5. A DIP switch is
available for this purpose (see Control elements [ 9]).
The individual switch settings and the resulting switch behaviour are described in the
chapter entitled Configuration of functions [ 16].
4.2.2 Control program requirements
In order to achieve SIL CL 2 (EN IEC 62061)/PL d (EN ISO 13849-1) in an application, the
evaluation must be carried out by a safety-related function block. The safety-related func-
tion block must meet the following requirements:
}The function block must enable safe "1oon" evaluation of the output signals at SOM1 ...
SOM5.
}If two or more operating modes are present at the same time, this must be detected as
an error.
INFORMATION
The function block must bridge the t1 switchover delay (see Switchover
delay t1 [ 57]).
If a PNOZmulti (e.g. PNOZ m1p) is used as the safety control system in
conjunction with an "operating mode selector switch" function element, then
this requirement is met automatically.
4.3 Interface for status information
Various status information can be signalled via the interface for status information (see
Block diagram [ 14]). The status information can be evaluated through a control system.
The status information is subdivided into the following information classes:
}Operator actions
– Transponder key inserted
– Remove transponder key