Pilz PIT m4SEU User manual

PIT m4SEU
Operating Manual-1004648-EN-02
}Control and signal devices

Preface
This document is the original document.
All rights to this documentation are reserved by Pilz GmbH & Co. KG. Copies may be made
for the user's internal purposes. Suggestions and comments for improving this documenta-
tion will be gratefully received.
Source code from third-party manufacturers or open source software has been used for
some components. The relevant licence information is available on the Internet on the Pilz
homepage.
Pilz®, PIT®, PMI®, PNOZ®, Primo®, PSEN®, PSS®, PVIS®, SafetyBUS p®,
SafetyEYE®, SafetyNET p®, the spirit of safety® are registered and protected trademarks
of Pilz GmbH & Co. KG in some countries.
SD means Secure Digital

Contents
Operating Manual PIT m4SEU
1004648-EN-02 | 3
1 Introduction ............................................................................................................................5
1.1 Validity of documentation.......................................................................................................... 5
1.2 Using the documentation .......................................................................................................... 5
1.3 Definition of symbols................................................................................................................. 5
2 Overview .................................................................................................................................7
2.1 Device features......................................................................................................................... 8
2.2 Device view............................................................................................................................... 9
3 Safety ...................................................................................................................................... 11
3.1 Intended use ............................................................................................................................. 11
3.2 Safety regulations ..................................................................................................................... 12
3.2.1 Use of qualified personnel ........................................................................................................ 12
3.2.2 Warranty and liability ................................................................................................................ 13
3.2.3 Disposal .................................................................................................................................... 13
4 Security ...................................................................................................................................14
5 Function description ............................................................................................................. 16
5.1 Permissions .............................................................................................................................. 18
5.2 Inputs and signal outputs for operating mode selection or operating mode interface .............. 18
5.3 Configuration of functions ......................................................................................................... 19
5.4 Operating mode interface ......................................................................................................... 22
5.4.1 Switching behaviour after permission is removed .................................................................... 22
5.4.2 Control program requirements.................................................................................................. 22
5.5 Interface for status information ................................................................................................. 23
5.5.1 Timing diagrams ....................................................................................................................... 25
5.5.1.1 Operator actions ....................................................................................................................... 25
5.5.1.2 Device error .............................................................................................................................. 27
5.5.1.3 Application error: "No authorisation"......................................................................................... 27
5.5.1.4 Application error: "Pushbutton operated incorrectly" ................................................................ 29
5.6 Key ID interface ........................................................................................................................ 31
5.6.1 Key ID number (serial number) of the transponder key............................................................ 31
5.6.2 Communication mode for downloading the Key ID number ..................................................... 32
5.6.2.1 Transmitter-controlled communication mode............................................................................ 33
5.6.2.2 Handshake-controlled communication mode............................................................................ 33
5.6.2.3 Advanced communication mode............................................................................................... 34
5.6.3 Evaluation by a controller ......................................................................................................... 35
5.6.3.1 Evaluation of the Key ID number with transmitter-controlled communication........................... 35
5.6.3.2 Evaluation of the Key ID number with handshake-controlled communication .......................... 38
5.6.3.3 Evaluation of the Key ID number with advanced communication............................................. 42
5.7 PITreader interface ................................................................................................................... 42
5.8 Operating mode lock and operating mode preselection ........................................................... 42
5.8.1 Operating mode lock................................................................................................................. 42
5.8.2 Operating mode preselection.................................................................................................... 44
6 Installation ..............................................................................................................................47
6.1 General installation guidelines.................................................................................................. 47

Contents
Operating Manual PIT m4SEU
1004648-EN-02 | 4
6.2 Dimensions in mm .................................................................................................................... 47
7 Wiring ......................................................................................................................................49
7.1 Terminal configuration .............................................................................................................. 49
7.2 Connecting the unit................................................................................................................... 50
7.3 Connection to a controller......................................................................................................... 51
8 Operation ................................................................................................................................55
8.1 Select operating modes OM1 ... OM4 ...................................................................................... 56
8.2 Select special mode (service)................................................................................................... 57
8.3 Monitoring of operating time ..................................................................................................... 58
8.4 Switchover time ........................................................................................................................ 58
8.5 Device status display ................................................................................................................ 58
8.6 Troubleshooting ........................................................................................................................ 59
8.6.1 Delete error............................................................................................................................... 59
8.7 Diagnostics ............................................................................................................................... 59
8.7.1 Status information about the interface for status information ................................................... 59
8.7.2 Status information about the signal outputs O1 ... O4 .............................................................. 60
9 Technical details ....................................................................................................................62
9.1 Safety characteristic data ......................................................................................................... 64
10 Order reference ......................................................................................................................67
10.1 Product ..................................................................................................................................... 67
10.2 Accessories .............................................................................................................................. 67
11 EC declaration of conformity ................................................................................................ 68

Introduction
Operating Manual PIT m4SEU
1004648-EN-02 | 5
1 Introduction
1.1 Validity of documentation
This documentation is valid for the product PIT m4SEU. It is valid until new documentation
is published.
This operating manual explains the function and operation, describes the installation and
provides guidelines on how to connect the product.
1.2 Using the documentation
This document is intended for instruction. Only install and commission the product if you
have read and understood this document. The document should be retained for future ref-
erence.
1.3 Definition of symbols
Information that is particularly important is identified as follows:
DANGER!
This warning must be heeded! It warns of a hazardous situation that poses
an immediate threat of serious injury and death and indicates preventive
measures that can be taken.
WARNING!
This warning must be heeded! It warns of a hazardous situation that could
lead to serious injury and death and indicates preventive measures that can
be taken.
CAUTION!
This refers to a hazard that can lead to a less serious or minor injury plus
material damage, and also provides information on preventive measures
that can be taken.
NOTICE
This describes a situation in which the product or devices could be dam-
aged and also provides information on preventive measures that can be
taken. It also highlights areas within the text that are of particular import-
ance.

Introduction
Operating Manual PIT m4SEU
1004648-EN-02 | 6
INFORMATION
This gives advice on applications and provides information on special fea-
tures.

Overview
Operating Manual PIT m4SEU
1004648-EN-02 | 7
2 Overview
The product may only be used in conjunction with the following external components:
}24 VDC power supply for the supply voltage
}Authentication system PITreader (see Order reference [ 67]) to restrict access for op-
erating mode selection
}Pushbutton for selecting the operating mode (one pushbutton per operating mode)
}Display elements for the operating mode (one display element per operating mode)
}Safety controller to activate the selected operating mode
In n In n+1 In n+2 In n+3 In n+4
24 V DC
Higher-level process
controller
PITreader Display
elements
Pushbutton
Safety controller
(e.g. PNOZ m B0)
with "1oon" evaluation
Fig.: PIT m4SEU in an application (principle)

Overview
Operating Manual PIT m4SEU
1004648-EN-02 | 8
2.1 Device features
The product has the following features:
}Supply voltage 24 VDC
}4 operating modes OM1 ... OM4
}1 special mode OM5 (Service)
}5 monitored semiconductor outputs (24 V) in accordance with EN 61496-1;
1 semiconductor output per operating mode
}4 digital inputs (I1 … I4) in accordance with EN61131-2 type 3 for connecting external
pushbuttons
}4 outputs (O1 … O4) for connecting external display elements
}Access restriction for operating mode selection via the authentication system PITreader
}Interface for status information, consisting of 4 signal outputs (24V)
}Status information is divided into information classes:
– Operator actions
- Insert transponder key
- Remove transponder key
- Select operating mode
– Messages (e.g. application error, malfunction)
}Interface (Key ID interface) for downloading the Key ID number of the transponder key
you are using, consisting of
– 3 semiconductor outputs (24 V)
– 2 inputs
– 1 configurable input/output
can be configured as
- input (see Transmitter-controlled [ 33] and Handshake-controlled communica-
tion mode [ 33])
- output (see Advanced communication mode [ 34])
}Configurable communication mode for downloading the Key ID number
– Transmitter-controlled communication mode
– Handshake-controlled communication mode
– Advanced communication mode

Overview
Operating Manual PIT m4SEU
1004648-EN-02 | 9
2.2 Device view
[1]
[3]
[4]
[2]
Fig.: Front view
Legend
X1 Operating mode interface MS01 ... MS05
X2 Supply voltage A1, A2
Interface for status information SIo0 ... SIo3
Key ID interface IDo0 ... IDo3 and IDi0 ... IDi1
X3 Inputs I1 ... I4
Outputs O1 ... O4
X4 PITreader interface
[1] Device name and order number
[2] Serial number
[3] LEDs
[4] DIP switch for configuring the switching behaviour and configuring the communica-
tion mode for downloading the Key ID number

Overview
Operating Manual PIT m4SEU
1004648-EN-02 | 10
[4]
Fig.: Side view
Legend
[4] DIP switch for configuring the switching behaviour and configuring the communica-
tion mode for downloading the Key ID number

Safety
Operating Manual PIT m4SEU
1004648-EN-02 | 11
3 Safety
3.1 Intended use
The PIT m4SEU is suitable for machines that can be operated in multiple operating modes
with different safety functions and/or work procedures. It enables you to switch between
defined operating modes, such as:
}Set-up mode
}Manual mode
}Automatic mode
}Service
The PIT m4SEU meets the following safety requirements:
1. Safety-related selection and switching of an operating mode
– Prevents unintentional switching
The switch to a different operating mode is only recognised once the corresponding
(selection) pushbutton has been operated for a defined period ("deliberate operator
action"). Multiple operation of (selection) pushbuttons is detected.
– Safe "1oon" circuit for the operating mode outputs
The PIT m4SEU only ever leads to one operating mode output "1" signal.
2. Safety-related switching-on of the operating mode after power-on
In the event of a cold start, the device will either be in OM1 or in the most recently se-
lected operating mode, depending on the device configuration (see also Configuration
of functions [ 19]).
The following access restriction requirements (security functions) for operating mode selec-
tion are met with the accessory device PITreader:
}Interlock to protect against unauthorised switching
To use the (selection) pushbutton to switch to an operating mode, contact with a
transponder key is required on the PITreader.
}Access permissions are restricted to certain groups
A transponder key with the relevant permission is required in order to switch to a certain
operating mode.
Depending on the application area and its respective regulations, the device can be used
up to SILCL2 (ENIEC62061) and up to PLd (ENISO13849-1), if the operating modes
are evaluated by a safety controller with safe "1oon" evaluation. The operating mode is ac-
tivated (machine operation changed) via the control program on a safety controller.
NOTICE
The provisions of the type C standards (machinery safety standards) for the
respective application must be observed with regard to operating mode se-
lection, as described in section 5.2.4 of ENISO16090-1 for example.

Safety
Operating Manual PIT m4SEU
1004648-EN-02 | 12
NOTICE
Faulty operation of the PIT m4SEU can lead to hazardous situations.
Switching to an operating mode must not initiate a hazardous movement,
nor may it cancel an existing control command.
In the event of an error that can lead to the loss of one of the safety functions, the PIT
m4SEU switches to a safe state and the operating mode that is currently selected is main-
tained. The only way to return from the safe state is to switch the PIT m4SEU off and then
on again.
The following is deemed improper use in particular
}Any component, technical or electrical modification to the product,
}Use of the product outside the areas described in this manual,
}Use of the product outside the technical details (see Technical details).
NOTICE
EMC-compliant electrical installation
The product is designed for use in an industrial environment. The product
may cause interference if installed in other environments. If installed in other
environments, measures should be taken to comply with the applicable
standards and directives for the respective installation site with regard to in-
terference.
3.2 Safety regulations
3.2.1 Use of qualified personnel
The products may only be assembled, installed, programmed, commissioned, operated,
maintained and decommissioned by competent persons.
A competent person is a qualified and knowledgeable person who, because of their train-
ing, experience and current professional activity, has the specialist knowledge required. To
be able to inspect, assess and operate devices, systems and machines, the person has to
be informed of the state of the art and the applicable national, European and international
laws, directives and standards.
It is the company’s responsibility only to employ personnel who
}Are familiar with the basic regulations concerning health and safety / accident prevention,
}Have read and understood the information provided in the section entitled Safety
}Have a good knowledge of the generic and specialist standards applicable to the specific
application.

Safety
Operating Manual PIT m4SEU
1004648-EN-02 | 13
3.2.2 Warranty and liability
All claims to warranty and liability will be rendered invalid if
}The product was used contrary to the purpose for which it is intended,
}Damage can be attributed to not having followed the guidelines in the manual,
}Operating personnel are not suitably qualified,
}Any type of modification has been made (e.g. exchanging components on the PCB
boards, soldering work etc.).
3.2.3 Disposal
}In safety-related applications, please comply with the mission time TM in the safety-related
characteristic data.
}When decommissioning, please comply with local regulations regarding the disposal of
electronic devices (e.g. Electrical and Electronic Equipment Act).

Security
Operating Manual PIT m4SEU
1004648-EN-02 | 14
4 Security
To secure plants, systems, machines and networks against cyberthreats it is necessary to
implement (and continuously maintain) an overall industrial security concept that is state of
the art.
Perform a risk assessment in accordance with VDI/VDE 2182 or IEC 62443-3-2 and plan
the security measures with care. If necessary, seek advice from Pilz Customer Support.
}The product is not protected against physical manipulation. For this reason, both the
product and the authentication system PITreader, including the cable between the two
devices, should be installed in a lockable control cabinet.
}The computer that accesses the product has to be protected from attacks by a firewall or
other suitable measures. We recommend that a virus scanner is used on this computer
and updated regularly.
}If necessary, protect the computer and the product from unauthorised use by assigning
passwords and taking further measures if required. We also recommend that the logged
in user does not have administrator rights.
}Assign only safe passwords. When assigning passwords, please note:
– The password should have at least 8 characters.
– The password should contain upper and lower case characters, as well as special
characters and numbers.
– If possible, the password should not be available in dictionaries.
– The password should not be made up of standard variants and repetitions or key-
board patterns (so not: 1234abcd).
– Use a password manager for optimum management of complex passwords.
– Language-independent characters are not available in every keyboard language.
– Make sure you regularly change the passwords of the user accounts on the system
and/or ask the users to change their passwords themselves.
– Make the users aware of the responsible use of their access data.
}Assign different permissions for the various user groups (e.g. diagnostics - configuration).
}As soon as possible, install firmware updates that Pilz provides for the product.
}Check the log of the product for security-relevant entries on a regular basis.
}Before disposal, the product must be safely decommissioned. To do this, all the data
must be deleted from the device.
– Set the configuration back to its default settings or delete the configuration.
– Switch off the product.
– If the product includes a removable data medium, remove it and format it at the com-
puter. Do not carry out a quick formatting. Alternatively, you can use a program to
safely delete data or destroy the memory mechanically.

Security
Operating Manual PIT m4SEU
1004648-EN-02 | 15
Company firewall Machine firewall
Company network Machine network
Internet
Configuration computer
Product
Fig.: Example network topology

Function description
Operating Manual PIT m4SEU
1004648-EN-02 | 16
5 Function description
The device enables you to switch between 5 different operating modes (operating modes
OM1 … OM4 and special operating mode OM5 (Service)) and enables access restriction
via the authentication system PITreader.
4 inputs are available for OM1 … OM4, for connecting external pushbuttons. For the spe-
cial operating mode OM5 (Service), the pushbutton for OM1 must be operated for a certain
period (see Monitoring of operating time [ 58]). Each input (pushbutton) is assigned a
monitored semiconductor output (see Operating mode interface [ 22]). Operating the
pushbutton switches the semiconductor output from a "0" signal to a "1" signal. The device
guarantees that only one of the semiconductor outputs has a "1" signal at any one time.
INFORMATION
OM storage of operating mode
When configured with OM storage (see Configuration of
functions [ 19]), after a restart the unit will start with the last selected
operating mode.
If OM storage is not configured, the unit always starts with OM1. For this
reason you should make sure that OM1 represents the safest operating
mode.

Function description
Operating Manual PIT m4SEU
1004648-EN-02 | 17
PITreader
Power A2
A1
IDo3
IDo2
IDo0
IDi1
IDi0
Inputs
Terminals
MSO5
MSO4
MSO3
MSO2
MSO1
(Safe) Operating Modes
Interface
Key ID Interface
SIo3
SIo2
SIo1
SIo0
Status Information
Interface
Transponder Key
IDo1
Configurable
Input/Output
Outputs
Inputs
I4
I3
I2
I1
O4
O3
O2
O1
PITreader
Interface
24V
0V
TxD
RxD
Fig.: Block diagram
Legend
Transponder Key Transponder key to enable a change of operating
mode
PITreader Authentication system
PITreader Interface
0V, 24V, TxD, RxD
Interface for connecting the PITreader, for permission
to select the operating mode
I1 ... I4 Inputs for connecting external pushbuttons to select
the operating mode
O1 ... O4 Operating mode outputs for connecting external dis-
play elements
A1, A2 Supply voltage
MSO1 ... MSO5 Operating mode interface
Interface for displaying the operating mode that is cur-
rently selected, consisting of 5 monitored outputs

Function description
Operating Manual PIT m4SEU
1004648-EN-02 | 18
IDo0 ... IDo3 and IDi0 ... IDi1 Key ID interface
Interface for downloading the Key ID number to a con-
troller, consisting of 3 outputs, 2 inputs and 1 configur-
able input/output
SIo0 ... SIo3 Interface for status information
Interface for signalling status information, consisting
of 4 signal outputs
The PIT m4SEU is protected against unauthorised operation. A switch between operating
modes must be enabled via a transponder key on the PITreader.
5.1 Permissions
Permission Permission for operating mode
1 OM1
2 OM1 + OM2
3 OM1 + OM2 + OM3
4 OM1 + OM2 + OM3 + OM4
5 OM1 + OM2 + OM3 + OM4 + OM5 (Service)
Further information on permissions and transponder keys is available in the PITreader op-
erating manual.
INFORMATION
Only the transponder key permissions 1-5, which are detected by the au-
thentication system PITreader, enable operating mode selection on the PIT
m4SEU. All other permissions are locked on the PIT m4SEU.
5.2 Inputs and signal outputs for operating mode selection or
operating mode interface
}4 digital inputs type 3 in accordance with EN61131-2 are available for connecting ex-
ternal pushbuttons.
Features:
– Safe inputs with "1oon" evaluation and time monitoring. Faulty operations are detec-
ted and rejected without error message.
– For further features see Technical details [ 62].
}4 signal outputs (O1 … O4) are available for connecting display elements. The selected
operating mode is displayed via a 1-signal at the signal output.
Features:
– No bridging of supply interruptions.
– For further features see Technical details [ 62].

Function description
Operating Manual PIT m4SEU
1004648-EN-02 | 19
}Allocation of signal outputs to inputs:
Pushbutton Input Signal output
Operating mode 1/5 I1 O1
Operating mode 2 I2 O2
Operating mode 3 I3 O3
Operating mode 4 I4 O4
5.3 Configuration of functions
The PIT m4SEU has a DIP switch, which you can use to set the required communication
mode for downloading the Key ID number and the device's switching behaviour
}after the transponder key is removed and
}after the voltage reset
.
The communication modes have different functions. These functions are described in the
following subsections:
}Transmitter-controlled communication mode [ 33]
}Handshake-controlled communication mode [ 33]
}Advanced communication mode [ 34]
NOTICE
It is essential to note:
– The configuration may only be performed by a competent person.
– The configuration must be performed when the supply voltage is
switched off.
– The configuration is adopted as the device is started up, provided the
switch setting is valid. If not, the device switches to a "Device error"
fault condition.
– During operation, the DIP switch setting is monitored for any change.
If the switch setting is changed during operation, the device switches
to a "Device error" fault condition, remedy: Delete error [ 59].
– The communication mode changes when you change the DIP switch
setting from Pos. [D1]-[D4] to Pos. [D5]-[D8]. In this case you auto-
matically switch to advanced communication mode.
Legend
1
Off
On
DIP switch in OFF position
1
Off
On
DIP switch in ON position
The sliders of the DIP switches are shown in black in the table.

Function description
Operating Manual PIT m4SEU
1004648-EN-02 | 20
DIP switch setting Switching behaviour
of operating mode
(OM)
Communication
modes
Operating
mode lock
and operat-
ing mode
preselec-
tion
[D1]: Default setting
4 3 2 1
Off
On
OM1-OM4:
OM retention
Transmitter or hand-
shake-controlled com-
munication mode
OM5:
Service fallback
[D2]
4 3 2 1
Off
On
OM retention Transmitter or hand-
shake-controlled com-
munication mode
[D3]
4 3 2 1
Off
On
OM fallback Transmitter or hand-
shake-controlled com-
munication mode
[D4]
4 3 2 1
Off
On
OM storage Transmitter or hand-
shake-controlled com-
munication mode
[D5]
4 3 2 1
Off
On
OM1-OM4:
OM retention
Advanced communica-
tion mode
x
OM5:
Service fallback
[D6]
4 3 2 1
Off
On
OM retention Advanced communica-
tion mode
x
[D7]
4 3 2 1
Off
On
OM fallback Advanced communica-
tion mode
x
[D8]
4 3 2 1
Off
On
OM storage Advanced communica-
tion mode
x
DIP configuration
NOTICE
It is essential to note that only the DIP switch settings described above will
be assessed as valid. With all other DIP switch settings, the device switches
to a "Device error" fault condition.