Rockwell Automation Allen-Bradley Guardmaster CIP User manual

CIP Safety Encoder
Bulletin Number 843ES
User Manual
Original Instructions

Important User Information
Read this document and the documents listed in the additional resources section about installation, configuration, and
operation of this equipment before you install, configure, operate, or maintain this product. Users are required to
familiarize themselves with installation and wiring instructions in addition to requirements of all applicable codes, laws,
and standards.
Activities including installation, adjustments, putting into service, use, assembly, disassembly, and maintenance are
required to be carried out by suitably trained personnel in accordance with applicable code of practice.
If this equipment is used in a manner not specified by the manufacturer, the protection provided by the equipment may
be impaired.
In no event will Rockwell Automation, Inc. be responsible or liable for indirect or consequential damages resulting from
the use or application of this equipment.
The examples and diagrams in this manual are included solely for illustrative purposes. Because of the many variables and
requirements associated with any particular installation, Rockwell Automation, Inc. cannot assume responsibility or
liability for actual use based on the examples and diagrams.
No patent liability is assumed by Rockwell Automation, Inc. with respect to use of information, circuits, equipment, or
software described in this manual.
Reproduction of the contents of this manual, in whole or in part, without written permission of Rockwell Automation,
Inc., is prohibited.
Throughout this manual, when necessary, we use notes to make you aware of safety considerations.
Labels may also be on or inside the equipment to provide specific precautions.
WARNING: Identifies information about practices or circumstances that can cause an explosion in a hazardous
environment, which may lead to personal injury or death, property damage, or economic loss.
ATTENTION: Identifies information about practices or circumstances that can lead to personal injury or death, property
damage, or economic loss. Attentions help you identify a hazard, avoid a hazard, and recognize the consequence.
IMPORTANT Identifies information that is critical for successful application and understanding of the product.
SHOCK HAZARD: Labels may be on or inside the equipment, for example, a drive or motor, to alert people that dangerous
voltage may be present.
BURN HAZARD: Labels may be on or inside the equipment, for example, a drive or motor, to alert people that surfaces may
reach dangerous temperatures.
ARC FLASH HAZARD: Labels may be on or inside the equipment, for example, a motor control center, to alert people to
potential Arc Flash. Arc Flash will cause severe injury or death.Wear proper Personal Protective Equipment (PPE). Follow ALL
Regulatory requirements for safe work practices and for Personal Protective Equipment (PPE).

Rockwell Automation Publication 843ES-UM001A-EN-P - February 2020 3
Table of Contents
Preface
Who Should Use This Manual? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Conventions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Terminology. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Additional Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Chapter 1
Product Overview Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Encoder Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Single-turn vs. Multi-turn Encoders . . . . . . . . . . . . . . . . . . . . . . . . . 12
Operating Principle of the Encoder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Intended Use. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Foreseeable Misuse . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Scalable Resolution . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Product Label. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Product Selection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Recommended Patchcords and Cordsets . . . . . . . . . . . . . . . . . . . . 14
Chapter 2
Safety Concept Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Safety Certification. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Determine Conformity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Average Frequency of a Dangerous Failure. . . . . . . . . . . . . . . . . . . . . . . 20
Mount the Encoder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Firmware Revision . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Safety Function During Firmware Update . . . . . . . . . . . . . . . . . . . 21
Safety Precautions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Install and Replace Encoders . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Safety Application Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Controller-based Safety Functions . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Important Safety Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Performance Level (PL) and Safety Integrity Level (SIL). . . . . . . . . . 23
Compatible Safety Controllers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Safety Task . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Configuration Signature and Ownership . . . . . . . . . . . . . . . . . . . . 25
Reset an 843ES CIP Safety Encoder to Out-of-Box State. . . . . . 26
Safety Connection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Protected Operations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

4Rockwell Automation Publication 843ES-UM001A-EN-P - February 2020
Table of Contents
Chapter 3
Installation Mechanical . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Before You Begin. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Couplings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Screws and Screwed Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Shaft Rotation Direction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Mount with a Solid Shaft. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Mount with a Hollow Shaft . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Mechanical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Temperature Measurement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Disassembly . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Reassembly . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Electrical . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
General Safety Instructions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Cabling. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
Electrical Wiring Instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
Pin Assignments. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Electrical Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Chapter 4
Add Device to an EtherNet/IP
Network
Set the IP Address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
Assign the Last Octet in an IP Address Scheme
of 192.168.1.xxx with the Network Address Switches. . . . . . . . . 41
Duplicate IP Address Detection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
Reset the IP Address to Factory Default . . . . . . . . . . . . . . . . . . . . . . . . . 42
Network Topologies. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Protected Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Implicit Protected Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Explicit Protected Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
Chapter 5
Configure the Encoder with
Studio 5000 Environment
Before You Begin. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47
Studio 5000 Configuration Software . . . . . . . . . . . . . . . . . . . . . . . . 48
Check the Integration in EtherNet/IP Via RSLinx Classic . . . . 48
Connections with the 843ES CIP Safety Encoder. . . . . . . . . . . . . . . . 48
Requested Packet Interval. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
Connection Reaction Time Limit With
843ES CIP Safety Encoders . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
Module Data Quality Reporting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
Inhibit a Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
Electronic Keying . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
Add the Device to the Controller Organizer. . . . . . . . . . . . . . . . . . . . . 52

Rockwell Automation Publication 843ES-UM001A-EN-P - February 2020 5
Table of Contents
Edit the Module Configuration Common Categories . . . . . . . . . . . . 54
General. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54
Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
Safety. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Module Info . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
Internet Protocol . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
Port Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
Network. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
Edit 843ES CIP Safety Encoder Configuration Categories. . . . . . . . 65
Encoder Safety Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
Encoder Standard Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
Alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
Controller Tags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70
Chapter 6
Diagnostics and
Troubleshooting
Status Indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
Warnings, Alarms, and Errors Via EtherNet/IP. . . . . . . . . . . . . . . . . . 74
Warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
Alarms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76
Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
Appendix A
Specifications General. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
Safety . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
Electrical . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
Mechanical . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
Environmental. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
Performance Capabilities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
Appendix B
Install an Add-on Profile Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
Appendix C
Safety Statements for Use of
CIP Safety Devices
Safety Statements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
Appendix D
Use of Controller-based Safety
Functions with the 843ES CIP
Safety Encoder
SFX Instruction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
SFX Instruction Example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93

6Rockwell Automation Publication 843ES-UM001A-EN-P - February 2020
Table of Contents
Notes:

Rockwell Automation Publication 843ES-UM001A-EN-P - February 2020 7
Preface
This manual is a reference guide for the Bulletin 843ES CIP Safety™ over
EtherNet/IP™ encoder. The manual explains:
• How to install the encoder to maintain encoder safety rating
• Provide an overview of the encoder
• How to integrate the encoder with EtherNet/IP communication modules
• How to configure the encoder with the Studio 5000 Logix Designer®
application to integrate the encoder with a Logix 5000™ controller-based
system.
Who Should Use This
Manual?
Use this manual if you are responsible for the design, installation, programming,
or troubleshooting of systems that use the 843ES CIP Safety over EtherNet/IP
encoder.
Make sure that you are familiar with the following:
• Use of a safety controller in a Logix 5000 control system.
• Use of safety systems.
• Use Studio 5000 Logix Designer application environment.
Conventions These conventions are used throughout this publication:
• Bulleted lists such as this one provide information, not procedural steps.
• Numbered lists provide steps or hierarchical information.
• When the phrase GuardLogix® controller is used in this publication, it
refers to either of the following controller families:
– GuardLogix 5580
– Compact GuardLogix 5380
• When the phrase Logix 5000 controller is used in this publication, it refers
to any of the following controller families:
– ControlLogix® 5580 or GuardLogix 5580
– CompactLogix™ 5380 or Compact GuardLogix 5380
IMPORTANT Read and thoroughly understand the manual before installing or operating a
system that contains this device.
ATTENTION: Personnel responsible for the application of safety-related
programmable electronic systems (PES) must be aware of the safety
requirements in the application of the system and be trained in the use of the
system.

8Rockwell Automation Publication 843ES-UM001A-EN-P - February 2020
Preface
Terminology This table defines common safety terms that are used throughout this
publication.
Abbreviation Full Term Definition
— Control application Program that is designed using Studio 5000 Logix Designer and downloaded to the controller.
— Safety control application Safety program that is designed using Studio 5000 Logix Designer and downloaded to the
GuardLogix controller for functional safety.
— Safe motion monitoring drive A drive that supports safety feedback and communicates safety function status or control over the
EtherNet/IP network.
—Standard Automation devices, logic, or functions that do not participate in safety-related functions. Other
commonly used terms are “not safety-related,”“non-safe,”“unsafe,”and “normal integrity.”
1oo2 One out of two Refers to the behavioral design of a dual-channel safety system.
CAT.xCategory ISO 13849-1 safety category. Categories define the structure, either single or dual.
(CAT.1 and CAT.2 = single, CAT.3 and CAT.4 = dual).
CIP™ Common Industrial Protocol Protocol for industrial automation applications and trademarked by ODVA, Inc.
DC Diagnostic Coverage The ratio of the detected failure rate to the total failure rate.
EN European Norm European Standards (EN specifications) developedby the European Committee for Standardization
for the European Union.
FMEA Failure Mode and Effects Analysis Analysis of potential failure modes to determine the effect upon the system and identify ways to
mitigate those effects.
HFT Hardware FaultTolerance The HFT equals n, where n+1 faults could cause the loss of the safety function. An HFT of 1 means
that 2 faults are required before safety is lost.
IEC International Electrotechnical Commission Non-profit, non-governmentalinternational standards organization that prepares and publishes international standards for all electrical, electronic, and related technologies, collectively known as
electrotechnology.
ISO International Organization for Standardization Voluntary organization whose members are recognized authorities on standards, each one represents
a different country.
PES Programmable Electronic Systems System forcontrol, protection, or monitoring based on one or more programmable electronic devices, including all elements of the system such as power supplies, sensors and other input devices, data
highways and other communication paths, and actuators and other output devices.
PFD Probability of a dangerous failure on demand The average probability of a system to fail to perform its design function on demand.
PFH Average Frequency of a Dangerous Failure The average frequency of a systemto have a dangerous undetected failure occur per hour.
PLxPerformance Level ISO 13849-1 safety category. Replace the xwith an a, b, c, d, or e (e is the highest level of safety
performance).
RPI Requested Packet Interval The update rate specified for a particular piece of data on the network.
SFF Safe Failure Fraction The sum of safe failures plus the sum of dangerous detected failures dividedby the sum of all failures.
SILxSafety Integrity Level A measure of a products ability to lower the risk thata dangerous failure could occur. Replace the x
with a 1, 2, or 3 (4 is not applicable to automation).
SNN Safety Network Number Safety network number, which uniquely identifies a network across all networks in the safety system. You are responsible for assigning a unique number for each safety network or safety subnet within a
system.

Rockwell Automation Publication 843ES-UM001A-EN-P - February 2020 9
Preface
Additional Resources These documents contain additional information concerning related products
from Rockwell Automation.
You can view or download publications at rok.auto/literature.
Resource Description
Cordsets and Field AttachablesTechnical Data, publication 889-TD002 Provides technical specifications for power cables and attachables.
Ethernet Media SpecificationsTechnical Data, publication 1585-TD001 Provides technical specifications for Ethernet media cables and accessories
High-Resolution Incremental Optical EncodersTech Data, publication 847-TD001 This publication includes descriptions of Allen-Bradley® encoder accessories.
Kinetix® 5700 Safe Monitor Functions, publication 2198-RM001 Provides information on how to use the Safety Functions in Studio 5000 environment for
installing a Rockwell Automation® industrial system.
843ES CIP Safety Encoder Installation Instructions, publication 843ES-IN001 Information on how to install the CIP Safety Encoder.
EtherNet/IP Modules in Logix5000 Control Systems User Manual,
publication ENET-UM006 Information on how to use EtherNet/IP communication modules in Logix 5000 control systems.
Guidance for Selecting Cables for EtherNet/IP Networks,
publication ENET-WP007 Provides guidance on selection of cables based on the application, environmental conditions, and mechanical requirements.
System Design for Control of Electrical Noise Reference Manual,
publication GMC-RM001 Information, examples, and techniques that are designed to minimize system failures caused by electrical noise.
Integrated Motion on the EtherNet/IP Network Configuration and Startup User
Manual, publication MOTION-UM003 Information on configuration and troubleshooting your ControlLogix and CompactLogix
EtherNet/IP network modules.
ControlFLASH Firmware Upgrade Kit User Manual, publication1756-UM105 Provides information on how to upgrade your module firmware by using ControlFLASH™
software.
GuardLogix 5580 and Compact GuardLogix 5380 Controller Systems Safety
Reference Manual, publication 1756-RM012 Provides information for development, operation, and/or maintenance of a GuardLogix or Compact GuardLogix controller-based safety system that uses the Studio 5000 Logix Designer
application.
GuardLogix Safety Application Instruction Set Reference Manual,
publication 1756-RM095 Provides information that describes the GuardLogix Safety Application Instruction Set.
Safety Automation Builder and SISTEMA Library: rok.auto/sistema Download Safety Automation Builder® software to help simplify machine safety design and
validation, and reduce time and costs. Integration with our risk assessment software provides
you with consistent, reliable, and documented management of the Functional Safety Lifecycle.
The SISTEMA tool, also available for download from the Safety Automation Builder page,
automates calculation of the attained Performance Level from the safety-related parts of a
machine’s control system to (EN) ISO 13849-1.
Open DeviceNet Vendors Association (ODVA) Media Planning and Installation
Manual, publication PUB00148R0 Provides information on Equipotential grounding and bonding.
Safety of Machinery – Safe Related Parts of Control Systems,standard ISO 13849 Provides safety requirements and guidance on the principles for the design of safety-related
parts of control systems.
Functional safety of Electrical/Electronic/Programmable Electronic safety-
related systems, standard IEC 61508 Provides considerations when electrical/electronic/programmable electronic systems are used to conduct safety functions.
Rockwell Automation Industrial Automation Glossary, publication AG-7.1 A glossary of industrial automation terms and abbreviations.
Industrial AutomationWiring and Grounding Guidelines, publication 1770-4.1 Provides general guidelines for installing a Rockwell Automation industrial system.
Product Certifications website: rok.auto/certifications Provides declarations of conformity, certificates, and other certification details.

10 Rockwell Automation Publication 843ES-UM001A-EN-P - February 2020
Preface
Notes:

Rockwell Automation Publication 843ES-UM001A-EN-P - February 2020 11
Chapter 1
Product Overview
Encoders electronically monitor the position of a rotating shaft to measure
information such as speed, position, and acceleration.
Features The features of the 843ES CIP Safety encoder over EtherNet/IP include:
• PLe capable according to ISO 13849-1 and 13849-2, and SIL 3 capable
according to IEC 61800-5-2, IEC 62061, and IEC 61508
• Compatibility with star, linear, and Device Level Ring topology
• Configurable resolution per revolution: 1…32,768 for the safety
connection and 1…262,144 for the standard connection
• Solid shaft with clamping, synchro, and square flanges available
• Safety-related communication performed via CIP Safety connections over
EtherNet/IP
• Blind-hollow shaft available with stator coupling
• 15-bit single-turn resolution for safety connection, 18-bit single-turn
resolution for standard connection
• 12-bit multi-turn resolution + single-turn resolution
•ControlFLASH update compatible
• Add-on Profile for configuration in Studio 5000 Logix Designer®
Encoder Overview The 843ES CIP Safety encoder is an absolute encoder. An absolute encoder has a
unique digital output for each shaft position. The use of absolute encoders
verifies that true position is always available, regardless of power interruptions to
the system. Absolute encoders can be single-turn or multi-turn.
Multi-turn units assign a unique digital output for each shaft position across
multiple shaft rotations and have high-resolution capability. Applications include
steel mills, overhead cranes, punch presses, transfer lines, oil rigs, wind mills,
machine tools, and packaging.

12 Rockwell Automation Publication 843ES-UM001A-EN-P - February 2020
Chapter 1 Product Overview
Single-turn vs. Multi-turn Encoders
Absolute encoders are either single-turn or multi-turn. Single-turn encoders are
used if the absolute position of the shaft for one revolution is required. Multiturn
encoders are used if the absolute position is required for multiple shaft
revolutions. Compared to single-turn encoders, multi-turn encoders feature an
additional gear to allow measuring absolute positions larger than 360°.
Operating Principle of the
Encoder
The 843ES CIP Safety encoder acquires the position of rotating axes and outputs
the position in the form of a unique digital numeric value. Optical acquisition of
the rotary position value is from an internal coded disk.
Intended Use
The 843ES CIP Safety encoder can be used as a rotation angle, position, or speed
sensor. It supports functions that are based on speed and rotation direction
information (for example, in industrial processes or controls).
As a sensor, the 843ES CIP Safety encoder supports safety functions regarding
speed and rotation direction. It is not able to achieve a safe state in the safety
function on its own.
A superordinate evaluation device must detect rotational speed, rotation
direction, and standstill, as well as failures that may represent a danger.
The 843ES CIP Safety encoder and the encoder evaluation device must meet the
requirements that are stated in Specifications on page 79.
Foreseeable Misuse
The encoder is not suitable for the following uses:
•Underwater
• In publicly accessible areas
• Outside of the specifications stated in Specifications on page 79.
• Areas where more serious EMC events may occur than those areas defined
in IEC 61326-1.
Scalable Resolution
The steps per revolution can be scaled in integers from 1…262,144 for the
standard connection, and 1…32,768 for the safety connection. The total
resolution of the 843ES CIP Safety multi-turn encoder must be 2n times the
steps per revolution.

Rockwell Automation Publication 843ES-UM001A-EN-P - February 2020 13
Product Overview Chapter 1
Product Label
Item Description
1 Manufacturer and address
2 Catalog number and part number
3 CE, China RoHS, and Morocco markings
4Barcode
5KCCmarking
6 Date of manufacture
7TÜVmarking
8 ODVA conformance and EtherNet I/P marking
9 Operating temperature, supply voltage, current consumption, and washdown rating
10 CIP serial number
11 MAC ID
12 UL marking
13 RCM marking
14 WEEE marking
1
2
3
4
5 76 8
9
10
11121314

14 Rockwell Automation Publication 843ES-UM001A-EN-P - February 2020
Chapter 1 Product Overview
Product Selection Table 1 - Encoder Catalog Number Explanation
Recommended Patchcords and Cordsets
We recommend the following power and Ethernet patchcords and cordsets.
Power
843ES - M IP 7 BA 6
abc
ab c
Number of Turns Shaft Flange
Code Description Code Description Code Description
M Multi-turn (4096 turns) 7 Hollow shaft 9.52 mm (3/8 in.) 1 Clamping flange 58 mm (2.28 in.) (1) (2)
(1) See Figure 4 on page 32.
(2) Only available for solid shaft encoders.
S Single-turn (1 turn) 8 Hollow shaft 10 mm (0.39 in.) 4 Synchro flange 58 mm (2.28 in.) (2) (3)
(3) See Figure 5 on page 33.
9 Hollow shaft 12 mm (0.47 in.) 6 Diameter flange 63 mm (2.48 in.) (4) (5)
(4) See Figure 7 on page 35.
(5) Only available for hollow shaft encoders.
10 Hollow shaft 12.7 mm (1/2 in.) 7 Square flange 63.5 mm (2.5 in.) (2) (6)
(6) See Figure 6 on page 33.
11 Hollow shaft 14 mm (0.55 in.)
12 Hollow shaft 15 mm (0.59 in.)
14 Solid shaft 10 mm (0.39 in.) with key
15 Solid shaft 12 mm (0.47 in.) with key
16 Solid shaft 9.52 mm (3/8 in.) with key
Table 2 - Pinout and Color Code
Color Code
Face View Pinout
4-pin 5-pin
A
1 Brown
2White
3 Blue
4 Black
5 NA
1 Brown
2White
3 Blue
4 Black
5 Gray
B
1 Brown
2White
3 Blue
4 Black
5 Drain wire —
5
4
3
1
2
5
43
1
2
MaleFemale

Rockwell Automation Publication 843ES-UM001A-EN-P - February 2020 15
Product Overview Chapter 1
Ethernet
Table 3 - Cordsets — DC Micro (22 AWG, Yellow PVC Shielded)
No. of
Pins
Color
Code Shield
Wire
Size
[AWG]
Cat. No. (1) (2)
(1) The 2 at the end of the cat. no. is for 2 m (6.6 ft) cable length. Replace the 2 with 5 (5 m [16.4 ft]) or 10 (10 m [32.8 ft]) for standard
cable lengths.
(2) Stainless steel connectors can be ordered by adding an S to the bulletinnumber (for example, 889DS-F4EC-2).
Straight
Female
Right Angle
Female
Straight
Male
Right Angle
Male
4-pin
ABraided
shield
22
889D-F4EC-2 889D-R4EC-2 889D-M4EC-2 889D-E4EC-2
AFoil shield 889D-F4FC-2 889D-R4FC-2 889D-M4FC-2 889D-E4FC-2
B889D-F5FC-J2 889D-R5FC-J2 889D-M5FC-J2 889D-E5FC-J2
Table 4 - Cordsets — DC Micro (22 AWG, Yellow PVC Shielded)
No. of
Pins
Color
Code Shield
Wire
Size
[AWG]
Cat. No. (1) (2)
(1) The 2 at the end of the cat. no. is for 2 m (6.6 ft) cable length. Replace the 2 with OM3 (0.3 m [1 ft]), 1 (1 m [3.3 ft]), 5 (5 m [16.4 ft])
or 10 (10 m [32.8 ft]) for standard cablelengths.
(2) Stainless steel connectors can be ordered by adding an S to the bulletin number (for example, 889DS-F4ECDM-2).
Straight
Female
Straight Male
Straight
Female Right
Angle Male
Right Angle
Female
Straight Male
Right Angle
Female Right
Angle Male
4-pin
ABraided
shield
22
889D-F4ECDM-2 889D-F4ECDE-2 889D-R4ECDM-2 889D-R4ECDE-2
AFoil
shield
889D-F4FCDM-2 889D-F4FCDE-2 889D-R4FCDM-2 889D-R4FCDE-2
B889D-F5FCDM-J2 889D-F5FCDE-J2 889D-R5FCDM-J2 889D-R5FCDE-J2
Table 5 - Pinout
Color Code
Face View Pinout
4-pin 8-pin
A1White-Orange
2White-Green
3 Orange
4 Green
4-pin
1White/Orange
2 Orange
3White/Green
4 NA
5 NA
6 Green
7 NA
8 NA
Transmit Data +
Transmit Data -
Receive Data +
—
—
Receive Data -
—
—
3
2
1
4
3
21
4
12345678

16 Rockwell Automation Publication 843ES-UM001A-EN-P - February 2020
Chapter 1 Product Overview
Table 6 - Cordset — M12 Flex-rated
First End Connector Second End Connector Cable Type Cat. No. (1)
(1) The 2 at the end of the cat. no. is for 2 m (6.6 ft) cable length. Replace the 2 with 1 (1 m [3.3 ft]), 5 (5 m [16.4 ft]) or 10 (10 m
[32.8 ft]) for standard cable lengths.
Male M12 D-Code, straight Flying leads Foil and braided shield, 4 conductor, teal PUR, flex
rated, halogen-free 1585D-M4UB-2
Table 7 - Patchcord — M12 Flex-rated
First End Connector Second End Connector Cable Type Cat. No. (1)
(1) The 2 at the end of the cat. no. is for 2 m (6.6 ft) cable length. Replace the 2 with 1 (1 m [3.3 ft]), 5 (5 m [16.4 ft]) or 10 (10 m
[32.8 ft]) for standard cable lengths.
Male M12 D-Code, Straight Male M12 D-Code, Straight
Foil and braided
shield, 4 conductor,
teal PUR, flex rated,
halogen-free
1585D-M4UBDM-2
Male M12 D-Code, Right Angle Male M12 D-Code, Right Angle 1585D-E4UBDE-2
Male M12 D-Code, Straight Male M12 D-Code, Right Angle 1585D-M4UBDE-2
Male M12 D-Code, Straight Female M12 D-Code, Straight 1585D-M4UBDF-2
Table 8 - Patchcord — M12 to RJ45 Flex-rated
First End Connector Second End Connector Cable Type Cat. No. (1)
(1) The 2 at the end of the cat. no. is for 2 m (6.6 ft) cable length. Replace the 2 with 1 (1 m [3.3 ft]), 5 (5 m [16.4 ft]) or 10 (10 m
[32.8 ft]) for standard cable lengths.
Male M12 D-Code RJ45 Foil and braided shield, 4 conductor, teal PUR, flex
rated, halogen-free 1585D-M4UBJM-2

Rockwell Automation Publication 843ES-UM001A-EN-P - February 2020 17
Chapter 2
Safety Concept
Introduction This section introduces you to the functional safety specifications and how the
843ES CIP Safety encoder meets those requirements.
The 843ES CIP Safety encoder supports controller-based safety functions that
are based on the speed and rotation direction information. The internal
diagnostics do not allow the encoder to trigger on its own actions such as
initiating a safe state. Therefore, the 843ES CIP Safety encoder is considered an
input device, which a safety logic controller monitors as part of the overall safety
system. The 843ES CIP Safety encoder is considered a component in the sensor
subsystem (see Figure 1).
Figure 1 - Example Functional Safety Chain
Safety Certification TÜV Rheinland has certified the Bulletin 843ES CIP Safety Encoder for use in
safety applications up to and including Performance Level e (PLe) and Category
3 in compliance with ISO 13849-1, and up to and including System Integrity
Level (SIL) CL 3 per IEC 61508, IEC 61800-5-2, and IEC 62061, for
integration in safety-related functions regarding rotational speed, direction, and
position.
The encoder must be installed in accordance with the applicable regulation and
standards.
For product certifications currently available from Rockwell Automation, see the
Product Certifications website link in Additional Resources on page 9.
Input
Subsystem
(Sensors)
Output
Subsystem
(Sensors)
Logic Solving
Subsystem
Subsystem
Elements
LogicInput
Guard Input
Device
GuardLogix
IMPORTANT Requirements are based on the standards current at the time of certification.

18 Rockwell Automation Publication 843ES-UM001A-EN-P - February 2020
Chapter 2 Safety Concept
Determine Conformity
The installed system, including the safety control system and the means by which
the machine stops, must achieve the needed safety performance. The encoder is
one element in the safety system.
Before safety components are used, a risk assessment must be performed on the
machine in accordance with:
• ISO 12100, Safety of machinery – Basic concepts - General principles for
design - Risk assessment and risk reduction.
• ISO 13849-1, Safety of machinery. Safety-related parts of control systems.
General principles for design, Annex B
• IEC 62061, Safety of Machinery – Functional safety of safety-related
electrical, electronic, and programmable electronic control systems.
Correct use includes compliance with the relevant requirements for installation
and operation, in particular:
• ISO 13849-1, Safety of machinery. Safety-related parts of control systems.
General principles for design
IMPORTANT Functional safety certification and performance of the 843ES CIP Safety
encoder requires that the encoder operates in conditions at or below the
ambient operating temperature specification.
The probability of a dangerous failure on demand (PFD) and averagefrequency
of a dangerous failure per hour (PFH) calculations for these modules are based
on the module operating conditions adhering to the ambient operating
temperature specification.
For more information on the maximum ambient operating temperature
specification, see Specifications on page 79.
ATTENTION: Use only appropriate components or devices that comply with the
relevant safety standards and meet the required safety integrity level or
Performance Level and safety category.
• Conformity to the requirements of the relevant safety standards must be
determined for the entire system by conducting a risk assessment.
• Use devices properly according to the installation environment, performance
rating, and functions of the machine.
• Use devices within their specified ratings.
• We recommend that you consult a certification body regarding assessment of
conformity to the required safety integrity level or Performance Level.
You are responsible for confirming compliance with the applicable standards for
the entire system.You must read, understand, and fulfill the functional safety
requirements of the standard applicable to your safety application.

Rockwell Automation Publication 843ES-UM001A-EN-P - February 2020 19
Safety Concept Chapter 2
• IEC 60204-1, Safety of machinery. Electrical equipment of machines.
General requirements.
The 843ES CIP Safety encoder can be applied using the following GuardLogix
controller-based safety instructions, according to IEC 61800-5-2:
• SS1 – Safe Stop 1
• SS2 – Safe Stop 2
• SOS – Safe Operating Stop
• SLS – Safely-limited Speed
•SDI – Safe Direction
•SLP – Safe-limited Position
Encoders that are used for speed or position monitoring safety functions are
likely used with other safety functions such as: enabling, guard locking, and
guard interlocking. Additional guidance for those safety functions can be found
in the following:
• ISO 12100 Safety of machinery—General principles for design— Risk
assessment and risk reduction
• ISO 13855 Safety of machinery—Positioning of safeguards concerning
the approach speeds of parts of the human body
The type approval, certification, and suitability levels for the 843ES CIP Safety
encoder describe a system with an overall system safety function of SIL 3.
However, you are not required to use 843ES CIP Safety encoders only in safety
applications with an overall system safety function of SIL 3.
For example, a GuardLogix 5580 controller without a 1756-L8SP safety partner
is suitable for use in safety applications that are rated up to, and including, SIL
CL2, PLd, Cat. 3 as defined in IEC 61508, IEC 61511, IEC 62061, and
ISO 13849-1. You can use 843ES CIP Safety encoders in such an application.
GuardLogix 5580 controllers, when used with a 1756-L8SP safety partner are
suitable for use in safety applications that are rated up to, and including SIL 3,
and PLe, cat. 4 as defined in IEC 61508, IEC 61511, IEC 62061, and
ISO 13849-1. You can use 843ES CIP Safety encoders in such an application to
achieve SIL 3 and PLe, Cat. 3.
For more information on the suitability level of Logix 5000™ safety controllers,
see publication 1756-RM012.

20 Rockwell Automation Publication 843ES-UM001A-EN-P - February 2020
Chapter 2 Safety Concept
Average Frequency of a
Dangerous Failure
Safety-related systems are classified as operating in a high-demand/continuous
mode. The SIL value for a high-demand/continuous mode safety-related system
is directly related to the average frequency of a dangerous undetected failure per
hour (PFH). PFH calculation is based on the equations from IEC 61508 and
shows worst-case values.
For safety data, see Appendix A on page 79.
Mount the Encoder The connection of the encoder and the drive unit must be assessed from a safety-
related point of view. This assessment applies to both to the connection with the
rotary element (shafts connection) and to the stationary section (stator
connection).
The following are the mechanical designs of the shaft connections available in the
843ES CIP Safety encoders:
•Solid shaft with key
• Hollow shaft with clamping ring
For the stator connection, the provided tether arms, stator couplings, and torque
stops are assessed from a safety-related point of view.
The mechanical connections have been designed so that a fault exclusion can be
claimed due to over-dimensioning and/or diagnostics. Reference and comply
with the mechanical limits that are specified in the proper assembly that is
described in Chapter 3, and publication 843ES-IN001.
Firmware Revision The 843ES CIP Safety encoders are manufactured with module firmware
installed. If updated module firmware revisions are available in the future, you
can update the firmware.
If the module is configured for Exact Match, the controller checks to make sure
that the module has the correct firmware revision.
Updated firmware revisions are made available for various reasons, for example,
to correct an anomaly that existed in previous module firmware revisions.
IMPORTANT Determination of safety parameters is based on the assumption that the
system operates in high-demand mode and that the safety function is
requested at least once every three months.
IMPORTANT Verify that the firmware revision of the device is correct before commissioning
the system. Firmware information for safety I/O devices is available with the
safety certificates at rok.auto/certifications.