Siemens PM-E F pm DC24V PROFIsafe User manual

SIMATIC Distributed I/O System Fail-Safe Engineering ET 200S Distributed I/O System - Fail-Safe Modules
_
_____________
_
_____________
_
_____________
_
_____________
_
_____________
_
_____________
_
_____________
_
_____________
_
_____________
_
_____________
_
_____________
_
_____________
Preface
Product Overview
1
Configuring
2
Address Assignment and
Installation
3
Wiring and Fitting Modules
4
Diagnostics
5
General Technical
Specifications
6
Fail-Safe Modules
7
Diagnostic Data of Fail-Safe
Modules
A
Dimension drawings
B
Accessories and Order
Numbers
C
Response times
D
Connecting Loads
E
SIMATIC
Distributed I/O System Fail-Safe
Engineering
ET 200S Distributed I/O System -
Fail-Safe Modules
Installation and Operating Manual
08/2008
A5E00103686-07

Legal information
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
with a safety alert symbol, indicates that minor personal injury can result if proper precautions are not taken.
CAUTION
without a safety alert symbol, indicates that property damage can result if proper precautions are not taken.
NOTICE
indicates that an unintended result or situation can occur if the corresponding information is not taken into
account.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will
be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to
property damage.
Qualified Personnel
The device/system may only be set up and used in conjunction with this documentation. Commissioning and
operation of a device/system may only be performed by qualified personnel. Within the context of the safety notes
in this documentation qualified persons are defined as persons who are authorized to commission, ground and
label devices, systems and circuits in accordance with established safety practices and standards.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended
or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and
maintenance are required to ensure that the products operate safely and without any problems. The permissible
ambient conditions must be adhered to. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of the Siemens AG. The remaining trademarks in this
publication may be trademarks whose use by third parties for their own purposes could violate the rights of the
owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software
described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the
information in this publication is reviewed regularly and any necessary corrections are included in subsequent
editions.
Siemens AG
Industry Sector
Postfach 48 48
90026 NÜRNBERG
GERMANY
A5E00103686-07
Ⓟ 12/2008
Copyright © Siemens AG 2008.
Technical data subject to change

ET 200S Distributed I/O System - Fail-Safe Modules
Installation and Operating Manual, 08/2008, A5E00103686-07 3
Preface
Purpose of this Manual
The information in this manual is a reference source for operations, function descriptions,
and technical specifications of the fail-safe modules of the ET 200S distributed I/O system.
Basic Knowledge Requirements
This manual is a supplement to the ET 200S Distributed I/O System manual. Working with
this manual requires general knowledge of automation engineering. You also require
experience of using the
STEP 7 basic software and the ET 200S distributed I/O system.
Scope of this Manual
Module Order Number Release Number
and Higher
Power module PM-E F pm DC24V PROFIsafe 6ES7138-4CF03-0AB0 01
Power module PM-E F pp DC24V PROFIsafe 6ES7138-4CF42-0AB0 01
Power module PM-D F DC24V PROFIsafe 3RK1903-3BA02 01
Digital electronic module 4/8 F-DI DC24V
PROFIsafe
6ES7138-4FA04-0AB0 01
Digital electronic module 4 F-DI/3 F-DO DC24V
PROFIsafe
6ES7138-4FC01-0AB0 01
Digital electronic module 4 F-DO DC24V/2A
PROFIsafe
6ES7138-4FB03-0AB0 01
Digital electronic module
1 F-RO DC24V/AC24..230V/5A
6ES7138-4FR00-0AA0 01
What's New
Compared with the previous version, this manual includes the following major
changes/additions:
● Simplified configuration rules
● Revised behavior of the electronic outputs in the event of a short-circuit
● Revised behavior in the event of a voltage dip

Preface
ET 200S Distributed I/O System - Fail-Safe Modules
4 Installation and Operating Manual, 08/2008, A5E00103686-07
Approvals
See Section "Standards and Approvals"
In addition, ET 200S fail-safe modules are certified for use in safety mode up to the following
levels:
● Safety class SIL3 (Safety Integrity Level) in compliance with IEC 61508
● Category 4 in accordance with EN 954-1
● Performance Level (PL) e in accordance with ISO 13849
CE Approval
See Section "Standards and Approvals"
Certification Mark for Australia (C-Tick Mark)
See Section "Standards and Approvals"
Standards
See Section "Standards and Approvals"
Position in the Information Landscape
When working with ET 200S fail-safe modules and depending on your particular application,
you will need to consult the additional documentation listed below.
References to this additional documentation are included in the manual where appropriate.
Documentation Brief Description of Relevant Contents
ET 200S Distributed
I/O System operating
instructions and manuals
describes all generally applicable topics related to the ET 200S hardware (including
configuration, installation and wiring of the ET 200S) and the IM 151 interface module.
Safety Engineering in
SIMATIC S7
system
description
•Provides an overview of the implementation, configuration, and method of operation of
S7 Distributed Safety and S7 F/FH fail-safe automation systems
•Contains a summary of detailed technical information concerning fail-safe engineering
in S7-300 and S7-400
•Includes monitoring and response time calculations for S7 Distributed Safety and S7
F/FH F-systems
The S7 F/FH Systems, Configuring and Programming manual describes the tasks that
must be performed to create and commission an S7 F/FH F-system.
For integration in the S7 F/FH
F-systems
•The
S7-400, M7-400 Programmable Controllers Hardware and Installation manual
describes the installation and assembly of S7-400 systems
•The
S7-400 Programmable Controllers, Fault-Tolerant Systems manual describes the
CPU 41x-H central modules and the tasks involved in setting up and commissioning an
S7-400H fault-tolerant system
•The
CFC for S7 Continuous Function Chart manual/online help provides a description
of programming with CFC

Preface
ET 200S Distributed I/O System - Fail-Safe Modules
Installation and Operating Manual, 08/2008, A5E00103686-07 5
Documentation Brief Description of Relevant Contents
The S7 Distributed Safety, Configuring and Programming manual and online help describe
the following:
•Configuration of the fail-safe CPU and the fail-safe I/O
•Programming of the fail-safe CPU in fail-safe FBD or LAD
For integration in the S7
Distributed Safety F-system
Depending on which F-CPU you use, you will need the following documentation:
•The operating instructions S7-300, CPU 31xC and CPU 31x: Configuration describes
the configuration, installation, addressing and commissioning of S7-300 systems.
•The CPU 31xC and CPU 31x, Technical Data manual describes the standard functions
of the CPU 315F-2 DP and PN/DP and the CPU 317F-2 DP and PN/DP and the CPU
319F-3 PN/DP.
•The
Automation System S7-400 CPU Specifications manual describes the standard
functions of the CPU 416F-2 and CPU 416F-3 PN/DP.
•The
ET 200S IM 151-7 CPU Interface Module manual describes the standard IM 151-
7 CPU.
•The
ET 200S IM 151-8 PN/DP CPU Interface Module manual describes the standard
IM 151-7
PN/DP CPU.
•A separate product information bulletin is available for each applicable F-CPU. The
product information bulletins describe only the deviations from the corresponding
standard CPUs.
STEP 7 manuals •The
Configuring Hardware and Communication Connections with STEP 7 V5.x manual
describes the operation of the relevant standard tools of
STEP 7 .
•The
System Software for S7-300/400 System and Standard Functions reference
manual describes functions for distributed I/O access and diagnostics.
STEP 7 online help •Describes the operation of
STEP 7 standard tools
•Contains information about how to configure and assign parameters for modules and
intelligent slaves with HW Config
•Contains a description of the programming languages FBD and LAD
PCS 7 manuals •Describe how to operate the
PCS 7 process control system (required when ET 200S
with fail-safe modules is integrated in a higher-level control system)
The entire SIMATIC S7 documentation is available on CD-ROM.
Guide
This manual describes the fail-safe modules of the ET 200S distributed I/O system. It
consists of instructive sections and reference sections (technical specifications and
appendices).
This manual presents the following basic aspects of fail-safe modules:
● Design and use
● Configuration and parameter assignment
● Addressing, assembly and wiring
● Diagnostic evaluation
● Technical specifications
● Order numbers

Preface
ET 200S Distributed I/O System - Fail-Safe Modules
6 Installation and Operating Manual, 08/2008, A5E00103686-07
Conventions
In this manual, the terms "safety engineering" and "fail-safe engineering" are used
synonymously. The same applies to the terms "fail-safe" and "F-."
"
S7 Distributed Safety " and " S7 F Systems " in italics refer to the optional packages for the
two F-systems: "S7 Distributed Safety" and "S7 F/FH Systems".
Recycling and Disposal
Due to the low levels of pollutants in the fail-safe modules of the ET 200S, the modules can
be recycled. For proper recycling and disposal of your old module (device), consult a
certified disposal facility for electronic scrap.
Additional Support
If you have any further questions about the use of products described in this manual, and do
not find the right answers there, contact your local Siemens representative
(http://www.siemens.com/automation/partner).
Training center
We offer courses to help you get started with the S7 automation system. Contact your
regional training center or the central training center in Nuremberg (90327), Federal Republic
of Germany.
Telephone: [phone]
On the Internet (http://www.sitrain.com)
H/F Competence Center
The H/F Competence Center in Nuremberg offers special workshops on SIMATIC S7 fail-
safe and redundant automation systems. The H/F Competence Center can also provide
assistance with onsite configuration, commissioning and troubleshooting.
Telephone: [phone]
Fax: [phone]
[email protected]
For questions about workshops / training: [e-mail]
Technical Support
You can contact Technical Support for all IA products as follows:
● By completing a Support Request (http://www.siemens.de/automation/support-request)
on the Internet
● Telephone: [phone]
● Fax: [phone]
For additional information about Siemens Technical Support, refer to Internet
(http://www.siemens.de/automation/service).

Preface
ET 200S Distributed I/O System - Fail-Safe Modules
Installation and Operating Manual, 08/2008, A5E00103686-07 7
Service & Support on the Internet
In addition to the information in our documentation, you can also access our knowledge base
online at Internet (http://www.siemens.com/automation/service&support).
Here you will find the following information:
● Newsletter providing the latest information on your products
● Exactly the right documentation for your needs, which you can access by performing an
online search in Service & Support
● Worldwide forum in which users and experts exchange ideas
● Your local contact for Automation & Drives
● Information about local service, repairs and replacement parts. Even more information
can be found under "Services".
Important Note for Maintaining Operational Safety of Your System
Note
The operators of systems with safety-related characteristics must adhere to operational
safety requirements. The supplier is also obliged to comply with special product monitoring
measures. To keep you informed, a special newsletter is therefore available containing
information on product developments and properties that are important (or potentially
important) for operating systems where safety is an issue. By subscribing to the appropriate
newsletter, you will ensure that you are always up-to-date and able to make changes to your
system, when necessary. Point your browser to Internet
(https://www.automation.siemens.com/WW/newsletter/guiThemes.aspx?parlasw=1) and
register for the following newsletters:
•SIMATIC S7-300
•SIMATIC S7-400
•Distributed I/O
•SIMATIC Industrial Software
Select the "Updates" check box for this newsletter.
See also
Standards and Approvals (Page 49)

Preface
ET 200S Distributed I/O System - Fail-Safe Modules
8 Installation and Operating Manual, 08/2008, A5E00103686-07

ET 200S Distributed I/O System - Fail-Safe Modules
Installation and Operating Manual, 08/2008, A5E00103686-07 9
Table of contents
Preface ...................................................................................................................................................... 3
1 Product Overview .................................................................................................................................... 13
1.1 Introduction ..................................................................................................................................13
1.2 ET 200S fail-safe modules...........................................................................................................13
1.3 Using ET 200S Fail-Safe Modules...............................................................................................14
1.4 Guide for Commissioning of ET 200S with Fail-Safe Modules....................................................18
2 Configuring .............................................................................................................................................. 19
2.1 Configuring ET 200S with Fail-Safe Modules ..............................................................................19
2.2 Assigning Modules of an ET 200S...............................................................................................22
2.3 Maximum Number of Connectable Modules/Maximum Configuration ........................................24
2.4 Configuration and Parameter Assignment...................................................................................26
3 Address Assignment and Installation....................................................................................................... 27
3.1 Address assignments in the F-CPU.............................................................................................27
3.2 Assignment of the PROFIsafe address .......................................................................................29
3.3 Installing.......................................................................................................................................31
4 Wiring and Fitting Modules ...................................................................................................................... 33
4.1 Introduction ..................................................................................................................................33
4.2 Safe Functional Extra Low Voltage for Fail-Safe Modules ..........................................................33
4.3 Wiring fail-safe modules...............................................................................................................34
4.4 Insertion and removal of fail-safe modules..................................................................................36
4.5 Requirements for Sensors and Actuators....................................................................................37
5 Diagnostics.............................................................................................................................................. 41
5.1 Reactions to Faults ......................................................................................................................41
5.2 Fault Diagnostics .........................................................................................................................43
6 General Technical Specifications............................................................................................................. 49
6.1 Introduction ..................................................................................................................................49
6.2 Standards and Approvals.............................................................................................................49
6.3 Electromagnetic Compatibility......................................................................................................53
6.4 Shipping and Storage Conditions ................................................................................................57
6.5 Mechanical and Climatic Environmental Conditions....................................................................57
6.6 Specifications for Nominal Line Voltages, Isolation Tests, Protection Class, and Type of
Protection.....................................................................................................................................60

Table of contents
ET 200S Distributed I/O System - Fail-Safe Modules
10 Installation and Operating Manual, 08/2008, A5E00103686-07
7 Fail-Safe Modules.................................................................................................................................... 61
7.1 Introduction ................................................................................................................................. 61
7.2 PM-E F pm DC24V PROFIsafe Power Module .......................................................................... 62
7.2.1 Properties of the PM-E F pm DC24V PROFIsafe Power Module............................................... 62
7.2.2 Terminal assignment of the PM-E F pm DC24V PROFIsafe...................................................... 67
7.2.3 Wiring of the PM-E F pm DC24V PROFIsafe ............................................................................. 70
7.2.4 Parameters of the PM-E F pm DC24V PROFIsafe..................................................................... 74
7.2.5 Diagnostic functions of the PM-E F pm DC24V PROFIsafe ....................................................... 75
7.2.6 Technical Specifications for PM-E F pm 24 VDC PROFIsafe .................................................... 78
7.3 PM-E F pp DC24V PROFIsafe power module............................................................................ 83
7.3.1 Properties of the PM-E F pp DC24V PROFIsafe Power Module................................................ 83
7.3.2 Terminal assignment of the PM-E F pp DC24V PROFIsafe....................................................... 86
7.3.3 Wiring of the PM-E F pp DC24V PROFIsafe .............................................................................. 88
7.3.4 Parameters of the PM-E F pp DC24V PROFIsafe...................................................................... 90
7.3.5 Diagnostic functions of the PM-E F pp DC24V PROFIsafe ........................................................ 90
7.3.6 Technical Specifications for the PM-E F pp 24 VDC PROFIsafe ............................................... 93
7.4 PM-D F DC24V PROFIsafe Power Module ................................................................................ 96
7.4.1 Properties of the PM-D F DC24V PROFIsafe Power Module..................................................... 96
7.4.2 Terminal Assignment of the PM-D F DC24V PROFIsafe ........................................................... 98
7.4.3 Wiring of the PM-D F DC24V PROFIsafe ................................................................................. 100
7.4.4 Parameters of the PM-D F DC24V PROFIsafe......................................................................... 100
7.4.5 Diagnostic Functions of PM-D F DC24V PROFIsafe................................................................ 101
7.4.6 Technical Specifications of the PM-D F DC24V PROFIsafe .................................................... 103
7.5 4/8 F-DI DC24V PROFIsafe Digital Electronic Module............................................................. 105
7.5.1 Properties of the 4/8 F-DI 24 VDC PROFIsafe Digital Electronic Module ................................ 105
7.5.2 Terminal assignment of the EM 4/8 F-DI DC24V PROFIsafe................................................... 106
7.5.3 Wiring of the EM 4/8 F-DI DC24V PROFIsafe.......................................................................... 108
7.5.4 Parameters of the EM 4/8 F-DI DC24V PROFIsafe ................................................................. 108
7.5.5 Applications for the 4/8 F-DI DC24V PROFIsafe Electronic Module ........................................ 113
7.5.6 Application 1: SIL2/Category 3/PLd safety mode ..................................................................... 115
7.5.7 Application 2: Safety mode SIL3/Category 3/PLe..................................................................... 117
7.5.8 Application 3: Safety mode SIL3/Category 4/PLe..................................................................... 125
7.5.9 Diagnostic Functions of the EM 4/8 F-DI DC24V PROFIsafe................................................... 130
7.5.10 Technical Specifications of the EM 4/8 F-DI DC24V PROFIsafe ............................................. 133
7.6 EM 4 F-DI/3 F-DO DC24V PROFIsafe digital electronic module.............................................. 136
7.6.1 Properties of the 4 F-DI/3 F-DO DC24V PROFIsafe Digital Electronic Module ....................... 136
7.6.2 Terminal assignment of the EM 4 F-DI/3 F-DO DC24V PROFIsafe......................................... 139
7.6.3 Wiring of EM 4 F-DI/3 F-DO DC24V PROFIsafe ...................................................................... 141
7.6.4 EM 4 F-DI/3 F-DO DC24V PROFIsafe parameters .................................................................. 142
7.6.5 Input applications of EM 4 F-DI/3 F-DO DC24V PROFIsafe .................................................... 145
7.6.6 Output applications of EM 4 F-DI/3 F-DO DC24V PROFIsafe ................................................. 155
7.6.7 Diagnostic functions of EM 4 F-DI/3 F-DO DC24V PROFIsafe................................................ 156
7.6.8 Technical specifications of the EM 4 F-DI/3 F-DO DC24V PROFIsafe .................................... 159
7.7 4 F-DO DC24V/2A PROFIsafe digital electronic module.......................................................... 163
7.7.1 Properties of the 4 F-DO DC24V/2A PROFIsafe digital electronic module.............................. 163
7.7.2 Terminal assignment of the EM 4 F-DO DC24V/2A PROFIsafe .............................................. 165
7.7.3 Wiring diagram of the EM 4 F-DO DC24V/2A PROFIsafe........................................................ 167
7.7.4 Parameters for the EM 4 F-DO DC24V/2A PROFIsafe ............................................................ 171
7.7.5 Diagnostic Functions of the EM 4 F-DO DC24V/2 A PROFIsafe ............................................. 172
7.7.6 Technical Specifications of the EM 4 F-DO DC24V/2A PROFIsafe ......................................... 174

Table of contents
ET 200S Distributed I/O System - Fail-Safe Modules
Installation and Operating Manual, 08/2008, A5E00103686-07 11
7.8 1 F-RO DC24V/AC24..230V/5A Digital Electronic Module........................................................177
7.8.1 Properties of the EM 1 F-RO DC24V/AC24..230V/5A...............................................................177
7.8.2 Terminal assignment of EM 1F-RO DC24V/AC24..230V/5A.....................................................178
7.8.3 Wiring of EM 1 F-RO DC24V/AC24..230V/5A...........................................................................181
7.8.4 Diagnostic functions of EM 1 F-RO DC24V/AC24..230V/5A.....................................................184
7.8.5 Technical specifications of the EM 1 F-RO DC24V/AC24..230V/5A.........................................184
A Diagnostic Data of Fail-Safe Modules.................................................................................................... 189
A.1 Einleitung ...................................................................................................................................189
A.2 Structure and Content of Diagnostic Data .................................................................................189
B Dimension drawings .............................................................................................................................. 197
C Accessories and Order Numbers........................................................................................................... 199
D Response times..................................................................................................................................... 201
E Connecting Loads.................................................................................................................................. 205
E.1 Connecting capacitive loads ......................................................................................................205
E.2 Switching inductive loads...........................................................................................................207
Glossary ................................................................................................................................................ 209
Index...................................................................................................................................................... 219

Table of contents
ET 200S Distributed I/O System - Fail-Safe Modules
12 Installation and Operating Manual, 08/2008, A5E00103686-07

ET 200S Distributed I/O System - Fail-Safe Modules
Installation and Operating Manual, 08/2008, A5E00103686-07 13
Product Overview 1
1.1 Introduction
Overview
This chapter provides information about the following topics:
● ET 200S distributed I/O system with fail-safe modules and its place in SIMATIC S7 fail-
safe automation systems
● Components comprising the ET 200S distributed I/O system with fail-safe modules
● The steps you must perform, ranging from selection of the F-modules to commissioning
of ET 200S on PROFIBUS DP/PROFINET IO
1.2 ET 200S fail-safe modules
Fail-safe automation system
Fail-safe automation systems (F-systems) are used in systems with higher-level safety
requirements. F-systems are used to control processes having a safe state immediately after
shutdown. In other words, F-systems control processes in which an immediate shutdown
does not endanger humans or the environment.
ET 200S Distributed I/O System
The ET 200S distributed I/O system is a DP slave/IO device on PROFIBUS DP/PROFINET
IO that can contain fail-safe modules in addition to ET 200S standard modules.
You can use copper cables, fiber-optic cables or WLAN (
S7 Distributed Safety as of V5.4) to
assemble the PROFIBUS DP/PROFINET IO lines.
Fail-safe modules
The major difference between fail-safe modules and standard ET 200S modules is that fail-
safe modules have a two-channel internal design. Both integrated processors monitor each
other, automatically test the I/O circuits, and set the F-module to safe state in the event of a
fault. The F-CPU communicates with the fail-safe module using the PROFIsafe safety-
related bus profile.
Fail-safe power modules are used to supply load voltage to the potential group and to safely
shut down the load voltage for standard output modules.
Fail-safe digital input modules record the signal states of safety-related sensors and send
corresponding safety message frames to the F-CPU.
Fail-safe digital output modules are suitable for shutdown procedures with short-circuit and
cross-circuit protection up to the actuator.

Product Overview
1.3 Using ET 200S Fail-Safe Modules
ET 200S Distributed I/O System - Fail-Safe Modules
14 Installation and Operating Manual, 08/2008, A5E00103686-07
1.3 Using ET 200S Fail-Safe Modules
Possible Uses of ET 200S with Fail-Safe Modules
The use of ET 200S with fail-safe modules enables conventional safety engineering designs
to be replaced with PROFIBUS DP/PROFINET IO components. This includes the
replacement of switching devices for emergency STOP, protective door monitors, two-hand
operation, etc.
Use in F-Systems
Fail-safe ET 200S modules can be used:
● In the S7 Distributed Safety F-system with the
S7 Distributed Safety optional package
V5.2 or higher
● In the S7 F/FH Systems with the
S7 F Systems optional package version V5.2 SP 3 or
higher
● To interface ET 200S fail-safe modules to PROFIBUS DP with Distributed Safety or S7
F/FH systems, you need:
– ET 200S fail-safe modules
– F-CPU
–
STEP 7 V5.3 SP3 or higher
– IM151-1 DP HIGH FEATURE interface module
–
S7 Distributed Safety V5.2 or higher (for the order numbers specified in the "Preface":
F Configuration Pack
Version V5.5 SP5 or higher)
The
F Configuration Pack can be obtained on the Internet
(http://support.automation.siemens.com/WW/view/en/15208817).
–
S7 F Systems V5.2 SP3 or higher
You should also observe the readme file for the
F Configuration Pack and the operating
instructions for your F system.
● To connect ET 200S fail-safe modules to PROFINET IO modules with Distributed Safety,
you need:
– ET 200S fail-safe modules
– F-CPU
–
STEP 7 V5.3 SP3 or higher
– IM 151-3 PN HIGH FEATURE interface module
–
S7 Distributed Safety V5.4 or higher (for the order numbers specified in the "Preface":
F Configuration Pack
Version V5.5 SP5 or higher)
The current
F Configuration Pack can be obtained on the Internet
(http://support.automation.siemens.com/WW/view/en/15208817).
You should also observe the readme file for the
F Configuration Pack and the operating
instructions for your F system.

Product Overview
1.3 Using ET 200S Fail-Safe Modules
ET 200S Distributed I/O System - Fail-Safe Modules
Installation and Operating Manual, 08/2008, A5E00103686-07 15
● For the central use of the fail-safe ET 200S modules with distributed safety, you require
an IM 151-7 F-CPU or IM 151-8 PN/DP F-CPU.
When using fail-safe ET 200S I/O modules in F-systems, the information contained in the
following manuals applies:
●
ET 200S distributed I/O system
●
Safety Engineering in SIMATIC S7
●
S7 Distributed Safety, Configuring and Programming or S7 F/FH Systems, Configuring
and Programming
F-System with ET 200S
The following figure presents an example configuration for an S7 Distributed Safety F-
system including an ET 200S on PROFIBUS DP/PROFINET IO.
The fail-safe DP master/IO controller exchanges safety-related and non-safety-related data
with the fail-safe and standard ET 200S modules, etc.
(7SUR
(76
(76 
352),%86'3
352),1(7,2
6)6)(76)&38
HJ&38'3
)DLOVDIH
PRGXOHV
)DLOVDIH
PRGXOHV
)DLOVDIH
PRGXOHV
Figure 1-1 S7 Distributed Safety Fail-Safe Automation System (Example Configuration)

Product Overview
1.3 Using ET 200S Fail-Safe Modules
ET 200S Distributed I/O System - Fail-Safe Modules
16 Installation and Operating Manual, 08/2008, A5E00103686-07
Availability of Fail-Safe Electronic Modules
The following fail-safe electronic modules are available for ET 200S:
● Power module PM-E F pm DC24V PROFIsafe; switching to P/M potential, with 2
additional, fail-safe digital outputs
● Power module PM-E F pp DC24V PROFIsafe; switching to P/P potential
● Power module PM-D F DC24V PROFIsafe; switching to P/P potential
● Digital electronic module 4/8 F-DI DC24V PROFIsafe
● Digital electronic module 4 F-DI/3 F-DO DC24V PROFIsafe
● Digital electronic module 4 F-DO DC24V/2A PROFIsafe; switching to P/M potential
● Digital electronic module 1 F-RO DC24V/AC24..230V/5A
The PM-D F DC24V PROFIsafe is used for selective shutdowns of fail-safe motor starters
via six fail-safe shutdown groups.
A range of terminal modules is available for fail-safe power and electronic modules. You will
find a detailed list in this manual.
Using Interface Modules in ET 200S with Fail-Safe Modules
Depending on the F system, select the interface module for ET 200S as follows:
Table 1- 1 Using Interface Modules in ET 200S with Fail-Safe Modules
Interface module As of order number Can be used in ET 200S
with optional package
As of version
S7 Distributed Safety V5.2 IM 151-1 HIGH FEATURE
for PROFIBUS DP interface
6ES7151-1BA01-0AB0
S7 F Systems V5.2
IM 151-7 F-CPU for
PROFIBUS DP interface
6ES7151-7FA01-0AB0 S7 Distributed Safety V5.2
IM 151-8 DP/PN F-CPU for
PROFINET IO interface
6ES7151-8FB00-0AB0 S7 F Configuration Pack V5.5 SP5
IM 151-3 PN HIGH
FEATURE for PROFINET IO
interface
6ES7151-3BA00-0AB0
6ES7151-3BA20-0AB0
6ES7151-3BB20-0AB0
S7 Distributed Safety V5.4
The IM 151-1 HIGH FEATURE and the IM 151-3 PN HIGH FEATURE are described in the
respective manuals
ET 200S Distributed I/O System . The IM 151-7 F-CPU and IM 151-8
PN/DP F-CPU are described in a separate product information.
Restrictions with EM 4 F-DI/3 F-DO DC24V PROFIsafe
The EM 4 F-DI/3 F-DO DC24V PROFIsafe only supports operation in distributed systems
with the following interface modules:
● 6ES7151-1BA01-0AB0 V2.0.0 or higher
● 6ES7151-3BA20-0AB0 V3.0.0 or higher
● 6ES7151-3BB21-0AB0 V3.0.0 or higher
The EM 4 F-DI/3 F-DO DC24V PROFIsafe can be used centrally with IM 151-7 F-CPU
6ES7151-7FA20-0AB0 V2.6 or higher or IM 151-8 F-CPU 6ES7151-8FB00-0AB0.

Product Overview
1.3 Using ET 200S Fail-Safe Modules
ET 200S Distributed I/O System - Fail-Safe Modules
Installation and Operating Manual, 08/2008, A5E00103686-07 17
Using the fail-safe power module PM E F pp DC24V PROFIsafe
Using the fail-safe power module PM E F pp DC24V PROFIsafe is only possible:
● As of order number 6ES7151-1BA01-0AB0, Firmware version V1.1.1 or higher
● As of order number 6ES7151-7FA01-0AB0, Firmware version V2.1.4 or higher
Use in Safety Mode Only
Fail-safe modules can only be used in safety mode. They cannot be used in standard mode.
Achievable Safety Classes
Fail-safe modules are equipped with integrated safety functions for safety mode.
The following safety classes can be achieved in safety mode by assigning appropriate
parameters to the safety functions in
STEP 7 with the S7 Distributed Safety or S7 F Systems
optional package, by combining certain standard and F-modules and by arranging the wiring
of the sensors and actuators in a specific way:
Table 1- 2 Achievable Safety Classes in Safety Mode
In accordance with IEC
61508
In accordance with EN 954-1 In accordance with ISO 13849
SIL2 Category 3 Performance Level (PL) d
SIL3 Category 3 Performance Level (PL) e
SIL3 Category 4 Performance Level (PL) e
See also
Configuring ET 200S with Fail-Safe Modules (Page 19)
Requirements for Sensors and Actuators (Page 37)
Applications for the 4/8 F-DI DC24V PROFIsafe Electronic Module (Page 113)
Input applications of EM 4 F-DI/3 F-DO DC24V PROFIsafe (Page 145)

Product Overview
1.4 Guide for Commissioning of ET 200S with Fail-Safe Modules
ET 200S Distributed I/O System - Fail-Safe Modules
18 Installation and Operating Manual, 08/2008, A5E00103686-07
1.4 Guide for Commissioning of ET 200S with Fail-Safe Modules
Introduction
The following table lists all the important steps required for commissioning ET 200S
distributed I/O systems with fail-safe modules as DP slaves/IO devices on
PROFIBUS DP/PROFINET IO.
Steps from Selecting the F-Modules to Commissioning the ET 200S
Table 1- 3 Steps from Selecting the F-Modules to Commissioning the ET 200S
Step Procedure See ...
1. Select F-modules for ET 200S configuration "Configuring" chapter
2. Configure and assign parameters to F-
modules in STEP 7
"Configuration and Parameter Assignment"
and "Fail-Safe Modules" chapters
3. Set PROFIsafe addresses on F-modules "Address Assignment and Installation"
chapter
4. Install ET 200S "Address Assignment and Installation"
chapter
5. Wire the ET 200S "Wiring and Fitting Modules" chapter
6. Commission ET 200S on
PROFIBUS DP/PROFINET IO
ET 200S Distributed I/O System operating
instructions
7. Run diagnostics on ET 200S if
commissioning failed
"Diagnostics" chapter, "Fail-Safe Modules"
chapter and ET 200S Distributed I/O System
operating instructions
Note
You must configure and assign parameters to the F-modules in
STEP 7 before you start
commissioning.
Reason:
STEP 7 automatically assigns the PROFIsafe addresses to the F-modules. You
must set these PROFIsafe addresses by means of switches on all F-modules prior to their
installation.

ET 200S Distributed I/O System - Fail-Safe Modules
Installation and Operating Manual, 08/2008, A5E00103686-07 19
Configuring 2
2.1 Configuring ET 200S with Fail-Safe Modules
Introduction
The ET 200S distributed I/O systems support configurations with standard and fail-safe
modules. This chapter presents an example configuration.
Configuration example of ET 200S with Fail-Safe Modules
In the following figure you will find a configuration example using standard and fail-safe
modules in an ET 200S. You
can divide and install the modules in fail-safe and standard
potential groups. A new potential group always begins with a power module.
30
()


(76
,0
+)
30 )', )'2 ', $2 $, ',
', '2'2'2 0630
'
'2
'2)0
)DLOVDIHPRGXOH
7HUPLQDWLQJPRGXOH
1 2 3
① Fail-safe and standard potential groups mixed
② Fail-safe potential group
③ Standard potential group
Figure 2-1 ET 200S Configuration Example with Fail-Safe Modules
WARNING
If the implemented standard module has electrical isolation of ≥ 60 VAC / 75 VDC and test
voltage of 500 VDC, it is possible to mix F-DI-/F-DO modules and standard DI-/DO-/FM
modules within one potential group as of the following MLFBs for the SIL3/Category 4/PLe:
•6ES7138-4CF03-0AB0
•6ES7138-4CF42-0AB0
•3RK1903-3BA02
•6ES7138-4FA04-0AB0
•6ES7138-4FC01-0AB0
•6ES7138-4FB03-0AB0
•6ES7 138-4FR00-0AA0
For the predecessor modules, you can achieve SIL2/Category 3/PLd with a mix of F-DI-/F-
DO modules and standard DI-DO modules.

Configuring
2.1 Configuring ET 200S with Fail-Safe Modules
ET 200S Distributed I/O System - Fail-Safe Modules
20 Installation and Operating Manual, 08/2008, A5E00103686-07
Configuration Rules for Fail-Safe Potential Groups
The "Assigning Power Modules to Electronic Modules/Motor Starters and Safety Class" table
lists all the fail-safe and standard power modules and electronic modules you can implement
in a potential group.
Configuration with Fail-Safe Motor Starters and Frequency Converters
Use a PM-D F DC24V PROFIsafe for the selective shutdown of:
● Fail-safe motor starters (F-MS) F-DS1e-x, F-RS1e-x
● SINAMICS fail-safe frequency converters (F-FU) with ICU24(F)
● Fail-safe F-CM connection multipliers
● PM-D F X1 fail-safe power/expansion modules.
The PM-D F DC24V PROFIsafe cannot supply other motor starters (such as DS1-x/RS1-x,
DS1e-x/RS1e-x, DSS1e-x)!
The fail-safe motor starters can be expanded:
● Up to safety class SIL3/Category 4/PLe with the Brake Control xB1, xB2 expansion
modules
● Up to safety class SIL2/Category 3/PLd with the Brake Control xB3, xB4 expansion
modules
Example of a Configuration with Fail-safe Motor Starters
The figure below shows an example of an ET 200S configuration with two fail-safe potential
groups. The first potential group contains fail-safe motor starters and a connection multiplier.
This configuration achieves safety class SIL3/Category 4/PLe.
a



,0+,*+ )($785(

0

a



)'6H[

0

a



)56H[

)&0


 
    
30('&9 
)','&9 
)','&9 
)'2'&9 


30')'&9 352),VDIH

6ORW
7HUPLQDO
Figure 2-2 Configuration Example of ET 200S with Fail-Safe Motor Starters and Connection
Multiplier