Pilz PITmode flex visu User manual

PITmode flex visu
System Description-1005364-EN-01
}Control and signal devices

Preface
This document is the original document.
All rights to this documentation are reserved by Pilz GmbH & Co. KG. Copies may be made
for the user's internal purposes. Suggestions and comments for improving this documenta-
tion will be gratefully received.
Source code from third-party manufacturers or open source software has been used for
some components. The relevant licence information is available on the Internet on the Pilz
homepage.
Pilz®, PIT®, PMI®, PNOZ®, Primo®, PSEN®, PSS®, PVIS®, SafetyBUS p®,
SafetyEYE®, SafetyNET p®, the spirit of safety® are registered and protected trademarks
of Pilz GmbH & Co. KG in some countries.
SD means Secure Digital

Contents
System Description PITmode flex visu
1005364-EN-01 | 3
1 Introduction ............................................................................................................................ 5
1.1 Definition of symbols................................................................................................................. 5
2 Overview of systems for safety-related operating mode selection .................................. 6
3 Safety ...................................................................................................................................... 8
3.1 Intended use ............................................................................................................................. 8
3.2 Safety regulations ..................................................................................................................... 8
3.2.1 Additional documents that apply............................................................................................... 8
3.2.2 Use of qualified personnel ........................................................................................................ 8
3.2.3 Warranty and liability ................................................................................................................ 9
3.2.4 Disposal .................................................................................................................................... 9
3.3 Application conditions ............................................................................................................... 9
4 Security ................................................................................................................................... 12
4.1 Required security measures ..................................................................................................... 12
5 PITmode flex visu with PNOZmulti ...................................................................................... 13
5.1 Description................................................................................................................................ 13
5.1.1 System overview....................................................................................................................... 13
5.1.2 Safety features.......................................................................................................................... 14
5.1.3 Working areas........................................................................................................................... 15
5.1.4 Behaviour when the transponder key is removed..................................................................... 15
5.1.5 Acknowledge ............................................................................................................................ 16
5.1.6 Lock input ................................................................................................................................. 16
5.1.7 Service mode............................................................................................................................ 16
5.1.8 Audit trail................................................................................................................................... 16
5.2 System expansion .................................................................................................................... 16
5.3 Installation................................................................................................................................. 17
5.3.1 Connect PITreader ................................................................................................................... 17
5.3.2 Connect display unit ................................................................................................................. 17
5.4 Configuration ............................................................................................................................ 17
5.4.1 Configure PASvisu display unit................................................................................................. 17
5.4.2 Configure PITreader ................................................................................................................. 19
5.4.3 Configure PNOZmulti................................................................................................................ 19
5.4.3.1 Configure hardware .................................................................................................................. 19
5.4.3.2 Configure connection to the PITreader..................................................................................... 19
5.4.3.3 Configure connection to the Visu display unit........................................................................... 19
5.4.3.4 Configure MSO flex visu element ............................................................................................. 19
5.4.3.5 Configure safety function .......................................................................................................... 20
5.5 Operation .................................................................................................................................. 20
5.5.1 Select safe mode of operation MSO1 ... MSO8........................................................................ 20
5.5.2 Button status indicators ............................................................................................................ 22
5.5.3 Status and error messages through the PNOZmulti................................................................. 23
5.6 Examples for PITmode flex visu with PNOZ m B1 ................................................................... 26
5.6.1 Example 1................................................................................................................................. 26
5.6.2 Example 2................................................................................................................................. 26
5.6.3 Example 3................................................................................................................................. 27

Contents
System Description PITmode flex visu
1005364-EN-01 | 4
6 Calculating the safety-related characteristic data .............................................................. 28

Introduction
System Description PITmode flex visu
1005364-EN-01 | 5
1 Introduction
1.1 Definition of symbols
Information that is particularly important is identified as follows:
DANGER!
This warning must be heeded! It warns of a hazardous situation that poses
an immediate threat of serious injury and death and indicates preventive
measures that can be taken.
WARNING!
This warning must be heeded! It warns of a hazardous situation that could
lead to serious injury and death and indicates preventive measures that can
be taken.
CAUTION!
This refers to a hazard that can lead to a less serious or minor injury plus
material damage, and also provides information on preventive measures
that can be taken.
NOTICE
This describes a situation in which the product or devices could be dam-
aged and also provides information on preventive measures that can be
taken. It also highlights areas within the text that are of particular import-
ance.
INFORMATION
This gives advice on applications and provides information on special fea-
tures.

Overview of systems for safety-related operating mode selection
System Description PITmode flex visu
1005364-EN-01 | 6
2 Overview of systems for safety-related operating
mode selection
…
1 4
…
1 8
PITreader
PIT m4SEU
FS-PLC
Pushbutton/display elements
PITreader
FS-PLC
PITreader
FS-PLC
Display unit
Pushbutton/display elements
PITmode fusion PITmode flex PITmode flex visu
Fig.: Overview of systems for safety-related operating mode selection
PITmode fusion, PITmode flex and PITmode flex visu are systems for the safety-related se-
lection of modes of safe operation (MSO). For example these include operating modes
such as automatic, setting, test run, process monitoring and service. In all systems, access
restrictions are guaranteed by the authentication system PITreader. Various devices are
used to select and evaluate operating modes.
}PITmode fusion
comprises:
– Authentication system PITreader
– Safe evaluation unit PIT m4SEU
– Pushbuttons for selecting the operating mode (e.g. PIT oe 4S)
– Display elements for displaying the selected operating mode (as integrated in
PIToe4S)
– Safety controller to evaluate and activate the selected operating mode
}PITmode flex
comprises:
– Authentication system PITreader
– Pushbuttons for selecting the operating mode (e.g. PIT oe 4S)
– Display elements for displaying the selected operating mode (as integrated in
PIToe4S)
– Safety controller to evaluate and activate the selected operating mode e.g.
PNOZmulti or the safety controller from the automation system PSS 4000
– Elements/components from Pilz
}PITmode flex visu
comprises:
– Authentication system PITreader
– Display unit for selecting and displaying the operating mode
A PASvisu project with the “MSO flex visu” tile is used on the display unit.
– Safety controller to evaluate and activate the selected operating mode e.g.
PNOZmulti or the safety controller from the automation system PSS 4000

Overview of systems for safety-related operating mode selection
System Description PITmode flex visu
1005364-EN-01 | 7
– Elements/components from Pilz
The chapters that follow describe the system PITmode flex visu. There are separate docu-
ments for the other systems.

Safety
System Description PITmode flex visu
1005364-EN-01 | 8
3 Safety
3.1 Intended use
PITmode flex visu is a system for the safety-related selection of modes of safe operation
(MSO). For example these include operating modes such as automatic, setting, test run,
process monitoring and service. Up to 8 modes of safe operation can be selected on PIT-
modeflexvisu.
With this safety-related selection system, an operating mode is selected safely using a se-
lection device in conjunction with an access device. The access device itself does not fulfil
any safety functions.
Only the following display units from Pilz may be used for safety-related operating mode se-
lection:
}PMI v704e, order number 266704
}PMI v707e, order number 266707
The system can be used for applications in accordance with
}EN ISO 13849-1:2015 up to Cat 3, PL d
}IEC/EN 61508-3:2010 up to SIL 2
}IEC/EN 62061:2005 + A1:2012 + A2:2015 up to SIL CL 2
3.2 Safety regulations
3.2.1 Additional documents that apply
Read and observe the following documents for the system PITmode flex visu with
PNOZmulti:
}Operating manual PITreader
}Operating manual PMI v704e/707e
}Operating manuals for the PNOZmulti devices that are used
}Online Help PNOZmulti Configurator
}Online Help PASvisu Builder
3.2.2 Use of qualified personnel
The products may only be assembled, installed, programmed, commissioned, operated,
maintained and decommissioned by competent persons.
A competent person is a qualified and knowledgeable person who, because of their train-
ing, experience and current professional activity, has the specialist knowledge required. To
be able to inspect, assess and operate devices, systems and machines, the person has to
be informed of the state of the art and the applicable national, European and international
laws, directives and standards.
It is the company’s responsibility only to employ personnel who
}Are familiar with the basic regulations concerning health and safety / accident prevention,
}Have read and understood the information provided in the section entitled Safety

Safety
System Description PITmode flex visu
1005364-EN-01 | 9
}Have a good knowledge of the generic and specialist standards applicable to the specific
application.
3.2.3 Warranty and liability
All claims to warranty and liability will be rendered invalid if
}The product was used contrary to the purpose for which it is intended,
}Damage can be attributed to not having followed the guidelines in the manual,
}Operating personnel are not suitably qualified,
}Any type of modification has been made (e.g. exchanging components on the PCB
boards, soldering work etc.).
3.2.4 Disposal
}When decommissioning, please comply with local regulations regarding the disposal of
electronic devices (e.g. Electrical and Electronic Equipment Act).
3.3 Application conditions
NOTICE
With safety-related operating mode selection, only the Pilz display units lis-
ted in the section entitled Intended use [ 8] may be used for visualisation.
NOTICE
Note the provisions of the type C standards (machinery safety standards)
for the respective application with regard to operating mode selection, such
as section 5.2.4 of ENISO16090-1 for example.
NOTICE
Design your system so that MSO1 is the safest mode of operation.
NOTICE
The plant should undergo a complete function test after installation and
each time the configuration is changed. This inspection may only be carried
out by qualified personnel.

Safety
System Description PITmode flex visu
1005364-EN-01 | 10
NOTICE
Please note:
– The active operating mode must always be visible to the operator.
– The operator must always ensure that the required operating mode is
the one that is actually selected.
If the operating mode selected is not the one that is required, the sys-
tem must be shut down immediately.
– You must check that the required operating mode is selected each
time before starting the machine.
NOTICE
Check the following:
– The operator must have sufficient training for the selected operating
mode.
– The operating mode displayed after the selection is made must
match the operating mode that the operator selected.
NOTICE
The system does not check any interdependencies between the individual
working areas.
If you are using more than one working area, check the interdependencies
between the working areas and consider these in your customer application
before activating the selected MSOs.
CAUTION!
It is essential to note:
– The operating mode may only ever be selected from outside the
danger zone
– The selected operating mode itself must not cause the machine to
start.
– The operating mode may not be selected while the machine is run-
ning.
Please note also:
}The user must provide evidence of the achieved/required PL in accordance with EN ISO
13849.
}The PASvisu Server must be on the display unit and not on an external device.

Safety
System Description PITmode flex visu
1005364-EN-01 | 11
}A separate MSO flex visu element must be configured in the PNOZmulti project for each
working area. Just one MSO flex visu tile must be available for this element in the PAS-
visu project. The PASvisu project may be run on just one display unit. The PASvisu pro-
ject may contain tiles for several working areas. However, all working areas must be vis-
ible from the display unit.
}The working area must be unique within a Modbus/TCP network and may not be as-
signed twice.
}If you need more than 10 working areas, the connected Modbus/TCP network must be
segmented (e.g. using firewalls).
}You will need to ensure that the PASvisu visualisation project corresponds to that of the
PNOZmulti project. Changes must be made on both sides.

Security
System Description PITmode flex visu
1005364-EN-01 | 12
4 Security
4.1 Required security measures
}Modbus/TCP has no security mechanisms. Use a firewall to protect the product from un-
authorised access.
}The products’ communication interfaces should be protected against physical manipula-
tion.
}Protect the 24 V inputs and outputs on the safety controller against physical manipulation
through protected wiring, e.g. by installing the safety controller in a lockable control cab-
inet.

PITmode flex visu with PNOZmulti
System Description PITmode flex visu
1005364-EN-01 | 13
5 PITmode flex visu with PNOZmulti
5.1 Description
5.1.1 System overview
…
1 n
PITreader
Modbus/TCP
Base unit PNOZ m B1
from the small controllers
PNOZmulti 2
FS inputs
FS outputs
Access and operating
mode selection
Safety function via the
MSO outputs
Visu display unit
with
PASvisu project
Sensor
technology
Actuator
technology
(e.g. safety gate)
User program
Activation of operating
mode selection
Application-dependent safeguards:
MSO flex visu
element
Modbus/TCP
Access device Selection device
PITmode flex visu is a system for the safety-related selection of modes of safe operation
(MSO). For example these include operating modes such as automatic, setting, test run,
process monitoring and service. Up to 8 modes of safe operation can be selected on PIT-
modeflexvisu.
With this safety-related selection system, an operating mode is selected safely using a se-
lection device in conjunction with an access device. The access device itself does not fulfil
any safety functions.
Hardware and software components for the overall system:
}Access device
The access device consists of the authentication system PITreader with transponder key
for restricting access. A user can authenticate himself on the PNOZmulti by inserting a
transponder key into the PITreader; the user is then authorised for specific actions. The
permission on the transponder key must be greater than or equal to the selection on the
operating mode selector switch (MSO number).
Several PITreader units can be connected to a base unit PNOZ m B1 (see System
expansion [ 16]).

PITmode flex visu with PNOZmulti
System Description PITmode flex visu
1005364-EN-01 | 14
}Selection device
Operating modes are selected using a Visu display unit (Visu panel).
Only the display units stated in the section entitled Intended use may be used for safety-
related operating mode selection.
A project from the visualisation system PASvisu is operated on the display unit.
The MSO flex visu tile is used in the process.
A tile must be created for each working area (e.g. infeed, machining, outfeed).
The operating mode is selected on the tile; the status of the operating mode selection is
also displayed.
The selection device must be evaluated on the safety controller.
Several Visu units can be connected to a base unit PNOZ m B1 (see System
expansion [ 16]).
}Base unit PNOZ m B1 from the system PNOZmulti 2
The PNOZmulti is used to evaluate and monitor the access device and selection device
and also for safety-related control of the overall system safety function, depending on the
application. A user program must be created in the PNOZmulti Configurator for this pur-
pose.
The plant can be divided into working areas, e.g. infeed, machining, outfeed. A maximum
of 8 working areas can be created for one base unit. One MSO flex visu element is cre-
ated for each working area.
The MSO flex visu function element performs the following tasks:
– Reads the checked permission from the PITreader
– Evaluates the selection confirmation from the Visu display unit and acknowledgement
– Outputs display information via the diagnostic bits
– Generates and outputs diagnostic messages
– Outputs the mode of safe operation (MSO)
For the actual activation, the safety functions required for the selected operating mode
are subsequently activated, depending on the application and the selected operating
mode (e.g. light curtains or safety gates).
5.1.2 Safety features
}If no data or invalid data is received from the PITreader, the behaviour is the same as if
no transponder key is present or the transponder key has been removed.
}Operating mode selection is only possible when, besides a Visu display unit a PITreader
is connected, a transponder key is inserted and the transponder key contains the relevant
permission.
}An operating mode can only be selected with the required permission from the assigned
PITreader. The permission on the transponder key must be greater than or equal to the
selection on the operating mode selector button (MSO number).
}Operating mode selection will only be carried out if a button is operated for a certain time
and several buttons are not operated simultaneously.
}Operating mode 1 is always selected after a restart.
}While operating the operating mode selector button, there must be a LOW signal at the
input "Lock Input".

PITmode flex visu with PNOZmulti
System Description PITmode flex visu
1005364-EN-01 | 15
5.1.3 Working areas
A plant can be divided into different working areas. Working areas may be “infeed”, "ma-
chining” and “outfeed” for example.
Separate operating modes may be assigned to each working area.
In the PNOZmulti Configurator, one working area is assigned to each MSO flex visu ele-
ment. A working area may only be assigned once. Up to 8 working areas can be created for
one base unit PNOZ m B1.
In the PASvisu Builder, one MSO flex visu tile is used for each working area.
infeed
machining
outfeed
Working area 1
Working area 2
Working area 3
5.1.4 Behaviour when the transponder key is removed
In the PNOZmulti Configurator there are various options to configure the reaction that
should occur when the transponder key has been removed:
}Hold mode
The operating mode currently selected is retained
}Fall back to mode 1
After the fall back delay (configurable) has elapsed, operating mode 1 will be selected in-
stead of the operating mode currently selected.
If Acknowledge is configured, the operating mode must also be acknowledged during fall
back.
Fall back is prevented while the lock input is active.
}Fall back to mode 1 on service mode
After the fall back delay (configurable) has elapsed, operating mode 1 will only be selec-
ted if a service mode is currently selected. Otherwise, the operating mode that is currently
selected will be retained.
If Acknowledge is configured, the operating mode must also be acknowledged during fall
back.
Fall back is prevented while the lock input is active.
The fall back delay time is started when the transponder key is removed. If a transponder
key with appropriate permission is inserted before the fall back delay time elapses, then fall
back is prevented.

PITmode flex visu with PNOZmulti
System Description PITmode flex visu
1005364-EN-01 | 16
5.1.5 Acknowledge
As an option, an input can be configured to confirm the operating mode selection via the
controller.
The selected operating mode is adopted only when confirmation has been received via the
PNOZmulti input that is configured for the acknowledgement.
5.1.6 Lock input
As an option, an input can be configured to lock operating mode selection via the controller.
If there is a high signal at the PNOZmulti input that is configured as the lock input, it will not
be possible to change the operating mode.
5.1.7 Service mode
A maximum of 7 of the 8 operating modes can be configured as service mode. The number
of the first service mode is stated; all subsequent operating modes are then automatically
service modes.
Operating modes 5 to 8 are configured as service modes in the default setting.
If service modes are configured, the option Fall back to mode 1 on service mode should
also be selected.
5.1.8 Audit trail
The tile MSO flex visu logs the following events:
}A user changing the operating mode
}The controller acknowledging an operating mode
}Reverting to operating mode MSO1
In the tile properties it is possible to configure whether the log should contain personal data
(currently only the transponder key’s SID). The personal data is used to identify the person
who performed the action.
5.2 System expansion
Maximum system expansion for a base unit PNOZ m B1:
}8 working areas can be configured
}8 MSO flex visu elements can be configured.
}4 PITreaders can be connected
}4 Visu display units can be connected (however, the tile for one working area may only
be displayed on one display unit)
Maximum 10 working areas for one Visu display unit PMI v7

PITmode flex visu with PNOZmulti
System Description PITmode flex visu
1005364-EN-01 | 17
5.3 Installation
5.3.1 Connect PITreader
The PITreader is connected to the base unit PNOZ m B1 via an Ethernet cable (for the
number of PITreaders that can be connected see System expansion [ 16]). Please refer
to the information and requirements in the operating manual for the PITreader.
5.3.2 Connect display unit
The display unit (Visu Panel) is connected to the base unit PNOZ m B1 via an Ethernet
cable (for details of the display units that can be connected see Intended use [ 8], for the
number of display units see System expansion [ 16]).
5.4 Configuration
5.4.1 Configure PASvisu display unit
The display on the display unit is configured using the software tool PASvisu Builder.
A PASvisu project is created and an MSO flex visu tile is added for each working area. The
tile contains the buttons for selecting operating modes.
Fig.: Example for an MSO flex visu tile
A tile contains a maximum of 8 buttons. In the default configuration the buttons have the fol-
lowing labels:
MSO1 = Automatic mode
MSO2 = Setting mode
MSO3 = Manual intervention
MSO4 = Process monitoring
MSO5 = Service
MSO6 = Service 2
MSO7 = Service 3

PITmode flex visu with PNOZmulti
System Description PITmode flex visu
1005364-EN-01 | 18
MSO8 = Service 4
The labels on the buttons and icons can be changed. You can configure which buttons you
use.
The buttons for the service modes are only visible on the display unit if a transponder key
with permission for the service modes is inserted and the selection lock is not activated.
The button with the active operating mode is always visible.
Procedure
1. Create PASvisu project
Create a project in the PASvisu Builder.
2. Select data source
The operating mode selection configured on the connected PNOZmulti base unit and in
the PASvisu project must match. This is guaranteed if the PNOZmulti project is used as
the data source.
Select the PNOZmulti project as data source.
3. Insert tiles
Insert an MSO flex visu tile in the PASvisu project for each working area.
4. Configure tiles
Configure the tiles. For details of the configuration please refer to the Online Help for
the PASvisu Builder.
5. Perform download
Download the PASvisu project to the display unit.
Notes
}Positioning of tiles
Ensure that an MSO flex visu tile is not covered by any other tiles. The operator must be
able to see the whole tile.
}Consistent configuration of operating mode selection
The operating mode selection configured in the controller and PASvisu project must
match. This is checked at the PASvisu project’s runtime. If the configurations do not
match, the tile is marked as faulty and no operating mode can be selected.
The best method for guaranteeing that the configurations in the controller and PASvisu
project match is as follows: in the tile properties in the PASvisu project, select the corres-
ponding element from the PNOZmulti project. That way the configuration will be copied
from the PNOZmulti project and cannot be edited.
}One tile per working area
It is the user’s responsibility to ensure that there is no more than one MSO flex visu tile
per working area and that this tile is displayed on just one display unit.
Note: If the following error message is displayed: “Button was not pressed for long
enough”, even though the button was pressed for a sufficient amount of time, this may in-
dicate that more than one tile is present for the working area.
}Labels for the buttons and icons
Adapt the label on the buttons and icons to suit your own application. Clear labelling and
good icons help the operator to select the required button.

PITmode flex visu with PNOZmulti
System Description PITmode flex visu
1005364-EN-01 | 19
5.4.2 Configure PITreader
The PITreader is configured using a web application, see PITreader operating manual.
5.4.3 Configure PNOZmulti
5.4.3.1 Configure hardware
Add the following devices to the hardware configuration:
}Base unit PNOZ m B1
}Input and output modules
}Connected device PITreader
}Connected device Visu display unit
5.4.3.2 Configure connection to the PITreader
}The connection to the PITreader is established via Modbus/TCP
The Modbus/TCP Client connection between PNOZmulti and PITreader must be configured
in the PNOZmulti Configurator.
Prerequisite
}PITreader and base unit PNOZ m B1 are connected via an Ethernet cable.
}A connected PITreader device has been added to the hardware configuration.
Procedure
}Configure the following network settings for the connection.
To do this, go to the hardware configuration and double-click on the PITreader you wish
to configure under Configured hardware.
–IP address: Enter the PITreader's IP address. The factory default setting is
192.168.0.12.
–Port: 502
5.4.3.3 Configure connection to the Visu display unit
The connection to the Visu display unit is established via Modbus/TCP.
The connection is established automatically and does not need to be configured.
5.4.3.4 Configure MSO flex visu element
This element is used to evaluate the information from the access device and to evaluate,
monitor and acknowledge the operating mode selection.
Add the MSO flex visu element to the user program and configure:
}Operating mode 1 … 8
}Acknowledge input (optional)
}Lock input (optional)
}Service modes
}Behaviour once the transponder key is removed (potentially with fall back delay).

PITmode flex visu with PNOZmulti
System Description PITmode flex visu
1005364-EN-01 | 20
5.4.3.5 Configure safety function
The actual activation of the safety functions required for the selected operating mode may
depend on the application (e.g. light curtain or safety gates).
Assign the safety functions required for the various modes of safe operation using outputs
MSO1 ... MSO8.
5.5 Operation
5.5.1 Select safe mode of operation MSO1 ... MSO8
Operating modes are selected using a Visu display unit (Visu panel), which is operating a
project from the visualisation system PASvisu. The MSO flex visu tile is used in the pro-
cess. The tile contains the buttons for selecting operating modes.
The buttons for the service modes are only visible on the display unit if a transponder key
with permission for the service modes is inserted and the selection lock is not activated.
The button with the active operating mode is always visible.
Prerequisites
}A transponder key with the corresponding permission must be inserted on the PITreader.
}The PITreader must recognise the transponder key as valid.
}The transponder key must be inserted on the PITreader for the whole time the button is
operated.
}The Visu display unit must be connected.
}Several buttons may not be operated simultaneously when selecting an operating mode.
Procedure
1. Select safe mode of operation
Select the required operating mode by pressing the relevant button on the tile. The but-
ton must be pressed for between 500 ms and 5000 ms.
The button flashes yellow.