Pilz PITreader User manual

PITreader
PITreader Firmware V1.5.x
Operating Manual-1004806-EN-08
}Control and signal devices

Preface
This document is the original document.
All rights to this documentation are reserved by Pilz GmbH & Co. KG. Copies may be made
for the user's internal purposes. Suggestions and comments for improving this documenta-
tion will be gratefully received.
Pilz®, PIT®, PMI®, PNOZ®, Primo®, PSEN®, PSS®, PVIS®, SafetyBUS p®,
SafetyEYE®, SafetyNET p®, the spirit of safety® are registered and protected trademarks
of Pilz GmbH & Co. KG in some countries.
SD means Secure Digital

Contents
Operating Manual PITreader, PITreader Firmware V1.5.x
1004806-EN-08 | 3
1 Introduction ............................................................................................................................ 6
1.1 Validity of documentation.......................................................................................................... 6
1.2 Using the documentation .......................................................................................................... 6
1.3 Definition of symbols................................................................................................................. 6
1.4 Third-party manufacturer licence information ........................................................................... 7
2 Overview ................................................................................................................................. 8
2.1 Device features......................................................................................................................... 8
2.2 PITreader device view with base unit ....................................................................................... 9
3 Safety ...................................................................................................................................... 10
3.1 Intended use ............................................................................................................................. 10
3.2 Safety regulations ..................................................................................................................... 10
3.2.1 Additional documents that apply............................................................................................... 10
3.2.2 Use of qualified personnel ........................................................................................................ 10
3.2.3 Warranty and liability ................................................................................................................ 11
3.2.4 Disposal .................................................................................................................................... 11
4 Security ................................................................................................................................... 12
4.1 Implemented security measures............................................................................................... 12
4.2 Required security measures ..................................................................................................... 12
5 Function description ............................................................................................................. 14
5.1 Authentication procedure.......................................................................................................... 14
5.2 Authentication modes ............................................................................................................... 14
5.2.1 Transponder data ..................................................................................................................... 15
5.2.1.1 Device groups........................................................................................................................... 15
5.2.2 External..................................................................................................................................... 16
5.3 Authentication types ................................................................................................................. 18
5.3.1 "Basic" authentication type ....................................................................................................... 18
5.3.2 "Single authentication" authentication type............................................................................... 18
5.3.3 "2-person rule" authentication type........................................................................................... 18
5.4 Transponder key....................................................................................................................... 20
5.4.1 Serial number of the transponder key....................................................................................... 21
5.4.2 Transponder key's security ID (SID) ......................................................................................... 21
5.5 User data .................................................................................................................................. 21
5.5.1 System parameters................................................................................................................... 23
5.6 Coding ...................................................................................................................................... 24
5.6.1 Basic coding ............................................................................................................................. 25
5.6.2 OEM coding .............................................................................................................................. 25
5.7 Block list.................................................................................................................................... 26
5.8 Real-time clock and operating hours counter ........................................................................... 26
5.9 Modbus/TCP............................................................................................................................. 26
5.9.1 LED control ............................................................................................................................... 26
5.9.2 Function codes (Client connections)......................................................................................... 27
5.9.3 Modbus/TCP data areas........................................................................................................... 27
5.9.3.1 Data transfer limits.................................................................................................................... 30
5.10 HTTP(S) connection ................................................................................................................. 30

Contents
Operating Manual PITreader, PITreader Firmware V1.5.x
1004806-EN-08 | 4
5.11 24V I/O port ............................................................................................................................. 31
5.12 Connect the base unit to a safe evaluation unit........................................................................ 31
6 Install the base unit ............................................................................................................... 32
6.1 General installation guidelines.................................................................................................. 32
6.2 Dimensions in mm .................................................................................................................... 33
7 Wiring ...................................................................................................................................... 34
7.1 Standalone................................................................................................................................ 34
7.2 Base unit with safe evaluation unit ........................................................................................... 34
8 Configuration ......................................................................................................................... 35
8.1 Web application ........................................................................................................................ 35
8.2 Connect to PITreader ............................................................................................................... 35
8.3 Manage certificates................................................................................................................... 36
8.3.1 Managing certificates................................................................................................................ 36
8.3.2 Incorporate certificate into a public key infrastructure (PKI) ..................................................... 37
8.4 Configure authentication mode................................................................................................. 37
8.5 Configure authentication type ................................................................................................... 37
8.6 Location description.................................................................................................................. 37
8.7 Data logging with personal data ............................................................................................... 37
8.8 Set device group....................................................................................................................... 37
8.9 Write/program transponder key ................................................................................................ 38
8.9.1 Program permissions................................................................................................................ 38
8.9.2 Configure the validity of the transponder key ........................................................................... 38
8.9.3 Teach in transponder key to basic coding ................................................................................ 38
8.9.4 Teach in transponder key to OEM coding ................................................................................ 39
8.9.5 Limit transponder key to identically coded PITreader............................................................... 40
8.9.6 Edit user data values ................................................................................................................ 40
8.10 Set basic coding ....................................................................................................................... 41
8.11 Set OEM coding........................................................................................................................ 41
8.12 Use block list............................................................................................................................. 41
8.13 Configure user data .................................................................................................................. 42
8.14 API Clients ................................................................................................................................ 43
8.15 Save and restore configuration................................................................................................. 43
8.16 Reset to default settings ........................................................................................................... 44
9 Firmware update .................................................................................................................... 45
10 Operation ................................................................................................................................ 46
10.1 LED indicator ............................................................................................................................ 46
10.2 Safely decommission PITreader............................................................................................... 47
10.3 Diagnostics ............................................................................................................................... 48
10.3.1 Statistics ................................................................................................................................... 48

Contents
Operating Manual PITreader, PITreader Firmware V1.5.x
1004806-EN-08 | 5
11 Technical details .................................................................................................................... 51
12 Supplementary data .............................................................................................................. 53
12.1 Radio approval.......................................................................................................................... 53
12.2 Network data............................................................................................................................. 53
12.3 Overview of permissions........................................................................................................... 54
13 Order reference ...................................................................................................................... 56
13.1 Authentication system............................................................................................................... 56
13.2 Transponder key....................................................................................................................... 56
13.3 Accessories .............................................................................................................................. 56
14 EC declaration of conformity ................................................................................................ 57

Introduction
Operating Manual PITreader, PITreader Firmware V1.5.x
1004806-EN-08 | 6
1 Introduction
1.1 Validity of documentation
This documentation is valid for the product PITreader. It is valid until new documentation is
published.
This operating manual explains the function and operation, describes the installation and
provides guidelines on how to connect the product.
1.2 Using the documentation
This document is intended for instruction. Only install and commission the product if you
have read and understood this document. The document should be retained for future ref-
erence.
1.3 Definition of symbols
Information that is particularly important is identified as follows:
DANGER!
This warning must be heeded! It warns of a hazardous situation that poses
an immediate threat of serious injury and death and indicates preventive
measures that can be taken.
WARNING!
This warning must be heeded! It warns of a hazardous situation that could
lead to serious injury and death and indicates preventive measures that can
be taken.
CAUTION!
This refers to a hazard that can lead to a less serious or minor injury plus
material damage, and also provides information on preventive measures
that can be taken.
NOTICE
This describes a situation in which the product or devices could be dam-
aged and also provides information on preventive measures that can be
taken. It also highlights areas within the text that are of particular import-
ance.

Introduction
Operating Manual PITreader, PITreader Firmware V1.5.x
1004806-EN-08 | 7
INFORMATION
This gives advice on applications and provides information on special fea-
tures.
1.4 Third-party manufacturer licence information
This product includes Open Source software with various licences.
More detailed information is available in the web application of the PITreader by calling up
the menu Support -> Show legal information.
The relevant source codes can be requested via [email protected].
Your request should include the following: (a) the firmware name, (b) the firmware version,
(c) your name, (d) your company name (if applicable), (e) your reply address and (f) your E-
mail address (if possible).
Pilz can charge a fee for the data medium and for sending.
The request for the source code must be received 3 years at the latest after the receipt of
the relevant MPL. Irrespective of this period we will send you a complete, machine-read-
able copy of the source code as long as Pilz offers spares or technical support for this
device.

Overview
Operating Manual PITreader, PITreader Firmware V1.5.x
1004806-EN-08 | 8
2 Overview
The product can be used with the following external components/systems:
}Transponder key (PITreader key) for authentication
}Web application on a PC for configuration
}Operator terminal (HMI) for authentication
}Safety controller (FS-PLC) for safe operating mode selection or authentication
}Safe evaluation unit (e.g. PIT m4SEU, order no. 402 250) for safe operating mode selec-
tion (only on PITreader base unit)
2.1 Device features
}System for authentication and authorisation on control systems
}Authentication is via transponder key
}Configurable via a web application
}Ethernet interface for Modbus/TCP
}LED to display device status
Only on PITreader base unit:
}Interface for connecting a safe evaluation unit (SEU) for operating mode selection
}For mounting cutouts D22 (diameter 22.3mm +0.4mm/-0.0mm) in accordance with
EN60947-5-1 with anti-rotation device
Only PITreader S base unit type devices and versions of the PITgb with PITreader (e.g.
PIT gb RLLE y up ETH, PIT gb RLLE y down ETH):
}Integrated OPC Server UA

Overview
Operating Manual PITreader, PITreader Firmware V1.5.x
1004806-EN-08 | 9
2.2 PITreader device view with base unit
[1]
[2] [3]
[4]
[5]
[6]
Legend
X1 Voltage supply, 24 V input/output and connection of a safe evaluation unit (PIT
m4SEU)
X2 Ethernet interface
[1] Device description
[2] Order number
[3] Serial number
[4] PITreader base unit, including spring-loaded terminal (order no. 402 255)
[5] PITreader key adapter h (order no. 402 308)
[6] PITreader key (see also Transponder key [ 20])

Safety
Operating Manual PITreader, PITreader Firmware V1.5.x
1004806-EN-08 | 10
3 Safety
3.1 Intended use
The PITreader is a system for authentication and authorisation on control systems. Authen-
tication is via transponder key.
The following is deemed improper use in particular
}Any component, technical or electrical modification to the product,
}Use of the product outside the areas described in this operating manual,
}Use of the product outside the technical details (see Technical details [ 51]).
NOTICE
EMC-compliant electrical installation
The product is designed for use in an industrial environment. The product
may cause interference if installed in other environments. If installed in other
environments, measures should be taken to comply with the applicable
standards and directives for the respective installation site with regard to in-
terference.
3.2 Safety regulations
3.2.1 Additional documents that apply
You should also read and take note of the following documents:
}Operating manual of the PITreader you are using
(e.g. PITgbRLLEyupETH, PITgbRLLEydownETH)
}Operating manual PITreader REST API
}Operating manual PITreader OPC Server UA
3.2.2 Use of qualified personnel
The products may only be assembled, installed, programmed, commissioned, operated,
maintained and decommissioned by persons who are competent to do so.
A competent person is a qualified and knowledgeable person who, because of their train-
ing, experience and current professional activity, has the specialist knowledge required. To
be able to inspect, assess and operate devices, systems and machines, the person has to
be informed of the state of the art and the applicable national, European and international
laws, directives and standards.
It is the company’s responsibility only to employ personnel who
}Are familiar with the basic regulations concerning health and safety / accident prevention,
}Have read and understood the information provided in the section entitled Safety
}Have a good knowledge of the generic and specialist standards applicable to the specific
application.