Siemens SIMATIC ET 200S User manual

SIMATIC ET 200S Distributed I/O System - Fail-Safe Modules
_
_____________
_
_____________
_
_____________
_
_____________
_
_____________
_
_____________
_
_____________
_
_____________
_
_____________
_
_____________
_
_____________
Preface
Product Overview
1
Configuring
2
Address Assignment and
Installation
3
Wiring and Fitting Modules
4
Diagnostics
5
General technical
specifications
6
Fail-Safe Modules
7
Diagnostic Data of Fail-Safe
Modules
A
Dimension Drawings
B
Accessories and Order
Numbers
C
Response Times
D
SIMATIC
ET 200S Distributed I/O System -
Fail-Safe Modules
Hardware Installation and Operating Manual
07/2005
A5E00103686-04
The following supplement is part of this documentation:
No. Designation Drawing number Edition
1 Product information A5E00825271-01 07/2006

Safety Guidelines
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
Danger
indicates that death or severe personal injury will result if proper precautions are not taken.
Warning
indicates that death or severe personal injury may result if proper precautions are not taken.
Caution
with a safety alert symbol, indicates that minor personal injury can result if proper precautions are not taken.
Caution
without a safety alert symbol, indicates that property damage can result if proper precautions are not taken.
Notice
indicates that an unintended result or situation can occur if the corresponding information is not taken into
account.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will
be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to
property damage.
Qualified Personnel
The device/system may only be set up and used in conjunction with this documentation. Commissioning and
operation of a device/system may only be performed by qualified personnel. Within the context of the safety notes
in this documentation qualified persons are defined as persons who are authorized to commission, ground and
label devices, systems and circuits in accordance with established safety practices and standards.
Prescribed Usage
Note the following:
Warning
This device may only be used for the applications described in the catalog or the technical description and only in
connection with devices or components from other manufacturers which have been approved or recommended by
Siemens. Correct, reliable operation of the product requires proper transport, storage, positioning and assembly
as well as careful operation and maintenance.
Trademarks
All names identified by ® are registered trademarks of the Siemens AG. The remaining trademarks in this
publication may be trademarks whose use by third parties for their own purposes could violate the rights of the
owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software
described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the
information in this publication is reviewed regularly and any necessary corrections are included in subsequent
editions.
Siemens AG
Automation and Drives
Postfach 48 48
90437 NÜRNBERG
GERMANY
Order No.: A5E00103686-04
Edition 07/2005
Copyright © Siemens AG 2005.
Technical data subject to change.

ET 200S Distributed I/O System - Fail-Safe Modules
Hardware Installation and Operating Manual, 07/2005, A5E00103686-04 iii
Preface
Purpose of this Manual
The information in this manual is a reference source for operations, function descriptions,
and technical specifications of the fail-safe modules of the ET 200S distributed I/O system.
Basic Knowledge Requirements
This manual is a supplement to the ET 200S Distributed I/O System manual. Working with
this manual requires general knowledge of automation engineering. You also require
experience of using the
STEP 7 basic software and the ET 200S distributed I/O system.
Scope of this Manual
Module Order Number Release Number
and Higher
PM-E F pm DC24V PROFIsafe Power Module 6ES7 138-4CF02-0AB0 01
PM-E F pp DC24V PROFIsafe power module 6ES7 138-4CF41-0AB0 01
PM-D F DC24V PROFIsafe power module 3RK1 903-3BA01 01
4/8 F-DI DC24 V PROFIsafe Digital Electronic
Module
6ES7 138-4FA02-0AB0 01
4 F-DO DC24V/2A PROFIsafe digital electronic
module
6ES7 138-4FB02-0AB0 01
What's New
Compared with the previous version, this manual includes the following major
changes/additions:
•Ability to connect ET 200S to PROFINET I/O (with modules as of order numbers above)
•New parameter "Behavior after channel faults"

Preface
ET 200S Distributed I/O System - Fail-Safe Modules
iv Hardware Installation and Operating Manual, 07/2005, A5E00103686-04
Approvals
See Chapter "Standards and Approvals"
In addition, ET 200S fail-safe modules are certified for use in safety mode up to the following
levels:
•Safety class SIL3 (Safety Integrity Level) in compliance with IEC 61508
•Requirement class 6 in accordance with DIN V 19250 (DIN V VDE 0801)
•Category 4 in accordance with EN 954-1
CE Approval
See Chapter "Standards and Approvals"
Certification Mark for Australia (C-Tick Mark)
See Chapter "Standards and Approvals"
Standards
See Chapter "Standards and Approvals"

Preface
ET 200S Distributed I/O System - Fail-Safe Modules
Hardware Installation and Operating Manual, 07/2005, A5E00103686-04 v
Position in the Information Landscape
When working with ET 200S fail-safe modules and depending on your particular application,
you will need to consult the additional documentation listed below.
References to additional documentation are included in this manual where appropriate.
Documentation Brief Description of Relevant Contents
ET 200S Distributed
I/O system
manual
Describes all generally applicable topics related to the ET 200S hardware (including
configuration, installing, and wiring of the ET 200S) and the IM 151 interface module.
Safety Engineering in
SIMATIC S7 system
description
•Provides an overview of the implementation, configuration, and method of operation of
S7 Distributed Safety and S7 F/FH fail-safe automation systems
•Contains a summary of detailed technical information concerning fail-safe engineering
in S7-300 and S7-400
•Includes monitoring and response time calculations for S7 Distributed Safety and
S7 F/FH F-systems
The S7 F/FH Automation Systems manual describes the tasks that must be performed to
commission an S7 F/FH F-system.
For integration in the
S7 F/FH F-systems
•The
S7-400, M7-400 Programmable Controllers Hardware and Installation manual
describes the installation and assembly of S7-400 systems.
•The S7-400H Programmable Controllers, Fault-Tolerant Systems manual describes
the CPU 41x-H central modules and the tasks involved in setting up and
commissioning an S7-400H fault-tolerant system.
•The
CFC for S7 Continuous Function Chart manual/online help provides a description
of programming with CFC.
The following elements are described in the S7 Distributed Safety, Configuring and
Programming
manual and online help:
•Configuration of the fail-safe CPU and the fail-safe I/O
•Programming of the fail-safe CPU in fail-safe FBD or LAD
For integration in the
S7 Distributed Safety
F-system
Depending on which F-CPU you use, you will need the following documentation:
•The operating manual
S7-300, CPU 31xC and CPU 31x: Configuration describes the
configuration, installation, addressing and commissioning of S7-300 systems.
•The CPU 31xC and CPU 31x, Technical Data product manual describes the standard
functions of the CPU 315F-2 DP and PN/DP and the CPU 317F-2 DP and PN/DP.
•The
Automation System S7-400 CPU Specifications manual describes the standard
functions of the CPU 416F-2.
•The
ET 200S IM 151-7 CPU Interface Module manual describes the standard
IM 151-7 CPU.
•A separate product information bulletin is available for each applicable F-CPU. The
product information bulletins describe only the deviations from the corresponding
standard CPUs.
STEP 7 manuals •The
Configuring Hardware and Communication Connections with STEP 7 V5.x manual
describes the operation of the standard tools of STEP 7.
•The System Software for S7-300/400 System and Standard Functions reference
manual describes functions for distributed I/O access and diagnostics.
STEP 7 online help •Describes the operation of
STEP 7 standard tools
•Contains information about how to configure and assign parameters for modules and
intelligent slaves with
HW Config
•Contains a description of the programming languages FBD and LAD
PCS 7 manuals •Describe how to operate the
PCS 7 process control system (required when ET 200S
with fail-safe modules is integrated in a higher-level control system).
The entire SIMATIC S7 documentation is available on CD-ROM.

Preface
ET 200S Distributed I/O System - Fail-Safe Modules
vi Hardware Installation and Operating Manual, 07/2005, A5E00103686-04
Guide
This manual describes the fail-safe modules of the ET 200S distributed I/O system. It
consists of instructive sections and reference sections (technical specifications and
appendices).
This manual presents the following basic aspects of fail-safe modules:
•Design and use
•Configuration and Parameter Assignment
•Addressing, assembly, and wiring
•Diagnostic assessment
•Technical Specifications
•Order numbers
Conventions
In this manual, the terms "safety engineering" and "fail-safe engineering" are used
synonymously. The same applies to the terms "fail-safe" and "F-."
"
S7 Distributed Safety " and " S7 F Systems " in italics refer to the optional packages for the
two F-systems: "S7 Distributed Safety" and "S7 F/FH Systems".
Recycling and Disposal
Due to the low levels of pollutants in the fail-safe modules of the ET 200S, the modules can
be recycled. For proper recycling and disposal of your old module (device), consult a
certified disposal facility for electronic scrap.
Additional Support
If you have any additional questions about the use of products presented in this manual,
contact your local Siemens representative:
http://www.siemens.com/automation/partner
Training center
We offer courses to help you get started with the S7 automation system. Contact your
regional training center or the central training center in Nuremberg (90327), Federal Republic
of Germany.
Telephone: [phone]
Internet: http://www.sitrain.com
H/F Competence Center
The H/F Competence Center in Nuremberg offers special workshops on SIMATIC S7 fail-
safe and redundant automation systems. The H/F Competence Center can also provide
assistance with onsite configuration, commissioning, and troubleshooting.
Telephone: [phone]
Fax: [phone]
For questions about workshops, etc., contact: hf-[email protected]s.com

Preface
ET 200S Distributed I/O System - Fail-Safe Modules
Hardware Installation and Operating Manual, 07/2005, A5E00103686-04 vii
Technical Support
You can reach the Technical Support for all A&D products
•Via the Web formula for the Support Request
http://www.siemens.com/automation/support-request
•Phone: + 49 180 5050 222
•Fax: + 49 180 5050 223
Additional information about our Technical Support can be found on the Internet pages
http://www.siemens.com/automation/service
Service & Support on the Internet
In addition to our paper documentation, we also provide all of our technical information on
the Internet at:
http://www.siemens.com/automation/service&support
Here, you will find the following information:
•Newsletter providing the latest information on your products
•Exactly the right documents for your needs, which you can access by performing an
online search in Service & Support
•Worldwide forum in which users and experts exchange ideas
•Your local contact for Automation & Drives.
•Information about local service, repair, and replacement parts. Much more information
can be found under "Services" .

Preface
ET 200S Distributed I/O System - Fail-Safe Modules
viii Hardware Installation and Operating Manual, 07/2005, A5E00103686-04
Important Note for Maintaining Operational Safety of Your System
Note
The operators of systems with safety-related characteristics must adhere to operational
safety requirements. The supplier is also obliged to comply with special product monitoring
measures. To keep you informed, a special newsletter is therefore available containing
information on product developments and properties that are important (or potentially
important) for operating systems where safety is an issue. By subscribing to the appropriate
newsletter, you will ensure that you are always up-to-date and able to make changes to your
system, when necessary. Point your browser to
http://my.ad.siemens.de/myAnD/guiThemes2Select.asp?subjectID=2&lang=de
There, you can register for the following newsletters:
•SIMATIC S7-300
•SIMATIC S7-400
•Distributed I/O
•SIMATIC Industrial Software
To receive these newsletters, select the "Updates" check box.
See also
Standards and Approvals (Page 6-2)

ET 200S Distributed I/O System - Fail-Safe Modules
Hardware Installation and Operating Manual, 07/2005, A5E00103686-04 ix
Table of contents
Preface ...................................................................................................................................................... iii
1 Product Overview ................................................................................................................................... 1-1
1.1 Introduction ................................................................................................................................ 1-1
1.2 ET 200S fail-safe modules......................................................................................................... 1-1
1.3 Using ET 200S Fail-Safe Modules............................................................................................. 1-2
1.4 Guide for Commissioning of ET 200S with Fail-Safe Modules.................................................. 1-5
2 Configuring ............................................................................................................................................. 2-1
2.1 Configuring ET 200S with Fail-Safe Modules ............................................................................ 2-1
2.2 Assigning Modules of an ET 200S............................................................................................. 2-4
2.3 Maximum Number of Connectable Modules/Maximum Configuration ...................................... 2-6
2.4 Configuration and Parameter Assignment................................................................................. 2-8
3 Address Assignment and Installation...................................................................................................... 3-1
3.1 Address assignments in the F-CPU...........................................................................................3-1
3.2 Assignment of the PROFIsafe address ..................................................................................... 3-3
3.3 Installing..................................................................................................................................... 3-4
4 Wiring and Fitting Modules ..................................................................................................................... 4-1
4.1 Introduction ................................................................................................................................ 4-1
4.2 Safe Functional Extra Low Voltage for Fail-Safe Modules ........................................................ 4-2
4.3 Wiring fail-safe modules............................................................................................................. 4-3
4.4 Insertion and removal of fail-safe modules................................................................................ 4-4
4.5 Requirements for Sensors and Actuators.................................................................................. 4-6
5 Diagnostics............................................................................................................................................. 5-1
5.1 Reactions to Faults .................................................................................................................... 5-1
5.2 Fault Diagnostics ....................................................................................................................... 5-3
6 General technical specifications ............................................................................................................. 6-1
6.1 Introduction ................................................................................................................................ 6-1
6.2 Standards and Approvals........................................................................................................... 6-2
6.3 Electromagnetic Compatibility.................................................................................................... 6-7
6.4 Transport and storage conditions ............................................................................................ 6-11
6.5 Mechanical and Climatic Environmental Conditions................................................................ 6-12
6.6 Specifications for Nominal Line Voltages, Isolation Tests, Protection Class, and Type of
Protection................................................................................................................................. 6-14

Table of contents
ET 200S Distributed I/O System - Fail-Safe Modules
x Hardware Installation and Operating Manual, 07/2005, A5E00103686-04
7 Fail-Safe Modules................................................................................................................................... 7-1
7.1 Introduction ................................................................................................................................ 7-1
7.2 PM-E F pm DC24V PROFIsafe Power Module ......................................................................... 7-2
7.2.1 Properties of the PM-E F pm DC24V PROFIsafe Power Module.............................................. 7-2
7.2.2 Terminal assignment of the PM-E F pm DC24V PROFIsafe..................................................... 7-8
7.2.3 Wiring of the PM-E F pm DC24V PROFIsafe .......................................................................... 7-11
7.2.4 Parameters of the PM-E F pm DC24V PROFIsafe.................................................................. 7-15
7.2.5 Diagnostic functions of the PM-E F pm DC24V PROFIsafe .................................................... 7-17
7.2.6 Technical Specifications for PM-E F pm 24 VDC PROFIsafe ................................................. 7-20
7.3 PM-E F pp DC24V PROFIsafe power module......................................................................... 7-24
7.3.1 Properties of the PM-E F pp DC24V PROFIsafe Power Module............................................. 7-24
7.3.2 Terminal assignment of the PM-E F pp DC24V PROFIsafe.................................................... 7-27
7.3.3 Wiring of the PM-E F pp DC24V PROFIsafe ........................................................................... 7-29
7.3.4 Parameters of the PM-E F pp DC24V PROFIsafe................................................................... 7-31
7.3.5 Diagnostic functions of the PM-E F pp DC24V PROFIsafe ..................................................... 7-32
7.3.6 Technical Specifications for the PM-E F pp 24 VDC PROFIsafe ............................................ 7-34
7.4 PM-D F DC24V PROFIsafe power module.............................................................................. 7-37
7.4.1 Properties of the PM-D F DC24V PROFIsafe Power Module.................................................. 7-37
7.4.2 Terminal assignment of the PM-D F DC24V PROFIsafe......................................................... 7-39
7.4.3 Wiring of the PM-D F DC24V PROFIsafe ................................................................................ 7-41
7.4.4 Parameters of the PM-D F DC24V PROFIsafe........................................................................ 7-42
7.4.5 Diagnostic Functions of PM-D F DC24V PROFIsafe............................................................... 7-42
7.4.6 Technical Specifications of the PM-D F DC24V PROFIsafe ................................................... 7-45
7.5 4/8 F-DI VDC24V PROFIsafe Digital Electronic Module ......................................................... 7-47
7.5.1 Properties of the 4/8 F-DI 24 VDC PROFIsafe Digital Electronic Module ............................... 7-47
7.5.2 Terminal assignment of the EM 4/8 F-DI DC24V PROFIsafe.................................................. 7-48
7.5.3 Wiring of the EM 4/8 F-DI 24 VDC PROFIsafe........................................................................ 7-50
7.5.4 Parameters of the EM 4/8 F-DI DC24V PROFIsafe ................................................................ 7-51
7.5.5 Applications for 4/8 F-DI 24 VDC PROFIsafe Digital Electronic Module ................................. 7-54
7.5.6 Application 1: Safety Mode AK4/SIL2/Category 3 ................................................................... 7-56
7.5.7 Application 2: Safety Mode AK6/SIL3/Category 3 ................................................................... 7-58
7.5.8 Application 3: Safety Mode AK6/SIL3/Category 4 ................................................................... 7-69
7.5.9 Diagnostic Functions of the EM 4/8 F-DI 24 VDC PROFIsafe................................................. 7-74
7.5.10 Technical Specifications for the EM 4/8 F-DI 24 VDC PROFIsafe .......................................... 7-77
7.6 4 F-DO DC24V/2A PROFIsafe digital electronic module......................................................... 7-80
7.6.1 Properties of the 4 F-DO DC24V/2A PROFIsafe digital electronic module............................. 7-80
7.6.2 Terminal assignment for EM 4 F-DO DC24V/2A PROFIsafe .................................................. 7-82
7.6.3 Wiring diagram of the EM 4 F-DO DC24V/2A PROFIsafe....................................................... 7-84
7.6.4 Parameters for the EM 4 F-DO DC24V/2A PROFIsafe ........................................................... 7-88
7.6.5 Diagnostic Functions of the EM 4 F-DO 24 VDC/2 A PROFIsafe ........................................... 7-90
7.6.6 Technical Specifications of the EM 4 F-DO DC24V/2A PROFIsafe ........................................ 7-93
A Diagnostic Data of Fail-Safe Modules.....................................................................................................A-1
A.1 Introduction ................................................................................................................................A-1
A.2 Structure and Content of Diagnostic Data .................................................................................A-2
B Dimension Drawings...............................................................................................................................B-1
C Accessories and Order Numbers............................................................................................................C-1
D Response Times.....................................................................................................................................D-1
Glossary ..................................................................................................................................... Glossary-1
Index................................................................................................................................................ Index-1

Table of contents
ET 200S Distributed I/O System - Fail-Safe Modules
Hardware Installation and Operating Manual, 07/2005, A5E00103686-04 xi
Tables
Table 1-1 Using Interface Modules in ET 200S with Fail-Safe Modules.................................................... 1-4
Table 1-2 Achievable Safety Classes in Safety Mode ............................................................................... 1-4
Table 1-3 Steps from Selecting the F-Modules to Commissioning ET 200S............................................. 1-5
Table 2-1 Assigning F-Power Modules to Terminal Modules .................................................................... 2-4
Table 2-2 Assigning F-Electronic Modules to Terminal Modules............................................................... 2-4
Table 2-3 Assigning Power Modules to Electronic Modules/Motor Starters and Safety Class (Safety
Integrity Level) ........................................................................................................................... 2-5
Table 2-4 Parameter Length of F-Modules in Bytes .................................................................................. 2-6
Table 2-5 Maximum Configuration per Voltage Group ..............................................................................2-7
Table 3-1 Address assignment in the F-CPU............................................................................................. 3-1
Table 3-2 Addresses Occupied by Useful Data ......................................................................................... 3-2
Table 4-1 Conditions for Inserting and Removing Fail-Safe Modules During Operation........................... 4-5
Table 4-2 Minimum Duration of the Sensor Signals to Allow Correct Acquisition by the F-DI Module ..... 4-7
Table 5-1 Channel-Specific Diagnostics: Fault Types of Fail-Safe Modules............................................. 5-6
Table 7-1 Overview of Achievable Safety Classes (Safety Integrity Levels) with PM-E F pm DC24V
PROFIsafe ................................................................................................................................. 7-2
Table 7-2 PM-E F pm DC24V PROFIsafe: Conditions for AK/SIL/Category ............................................. 7-3
Table 7-3 Table-Terminal Assignment of the TM-P30S44-A0 or TM-P30C44-A0................................... 7-10
Table 7-4 Parameters of the PM-E F pm DC24V PROFIsafe.................................................................. 7-15
Table 7-5 Diagnostic functions of the PM-E F pm DC24V PROFIsafe.................................................... 7-17
Table 7-6 Causes of Errors and Corrective Measures for Diagnostic Messages of the
PM-E F pm 24 VDC PROFIsafe .............................................................................................. 7-18
Table 7-7 Overview of Achievable Safety Classes (Safety Integrity Levels) with PM-E F pp DC24V
PROFIsafe ............................................................................................................................... 7-24
Table 7-8 PM-E F pp DC24V PROFIsafe: Conditions for AK/SIL/Category ............................................ 7-25
Table 7-9 Table-Terminal Assignment of the TM-P30S44-A0 or TM-P30C44-A0................................... 7-28
Table 7-10 Parameters of the PM-E F pp DC24V PROFIsafe................................................................... 7-31
Table 7-11 Diagnostic functions of the PM-E F pp DC24V PROFIsafe..................................................... 7-32
Table 7-12 Causes of Faults and Corrective Measures for Diagnostic Messages of the
PM-E F pp 24 VDC PROFIsafe ............................................................................................... 7-33
Table 7-13 PM-D F DC24V PROFIsafe: Conditions for AK/SIL/Category................................................. 7-38
Table 7-14 Terminal Assignment of the TM-PF30S47-F1 ......................................................................... 7-40
Table 7-15 Parameters of the PM-D F DC24V PROFIsafe ....................................................................... 7-42
Table 7-16 Diagnostic Functions of PM-D F DC24V PROFIsafe............................................................... 7-43
Table 7-17 Causes of Faults and Corrective Measures for Diagnostic Messages of the
PM-D F DC24V PROFIsafe ..................................................................................................... 7-44
Table 7-18 EM 4/8 F-DI DC24V PROFIsafe: Power Modules for AK/SIL/Category.................................. 7-47
Table 7-19 Parameters of the EM 4/8 F-DI DC24V PROFIsafe ................................................................ 7-51

Table of contents
ET 200S Distributed I/O System - Fail-Safe Modules
xii Hardware Installation and Operating Manual, 07/2005, A5E00103686-04
Table 7-20 EM 4/8 F-DI DC24V PROFIsafe: Conditions for Achieving AK/SIL/Category ......................... 7-55
Table 7-21 EM 4/8 F-DI DC24V PROFIsafe: Fault Detection (Application 1)............................................ 7-57
Table 7-22 EM 4/8 F-DI DC24V PROFIsafe: Fault Detection (Application 2.1)......................................... 7-61
Table 7-23 EM 4/8 F-DI DC24V PROFIsafe: Fault Detection (Application 2.2)......................................... 7-64
Table 7-24 EM 4/8 F-DI DC24V PROFIsafe: Fault Detection (Application 2.3)......................................... 7-68
Table 7-25 EM 4/8 F-DI DC24V PROFIsafe: Fault detection (use cases 3.1 and 3.2).............................. 7-73
Table 7-26 Diagnostic Functions of the EM 4/8 F-DI 24 VDC PROFIsafe................................................. 7-74
Table 7-27 Diagnostic Messages of the EM 4/8 F-DI DC24V PROFIsafe, Causes of Faults
and Corrective Measures......................................................................................................... 7-75
Table 7-28 EM 4 F-DO DC24V/2A PROFIsafe: Power Modules for AK/SIL/Category.............................. 7-80
Table 7-29 Parameters of the F-DO module.............................................................................................. 7-88
Table 7-30 Diagnostic Functions of the EM 4 F-DO 24 VDC/2 A PROFIsafe ........................................... 7-90
Table 7-31 Diagnostic Messages of the EM 4 F-DO DC24V/2A PROFIsafe, Causes of Errors and
Corrective Measures................................................................................................................ 7-91
Table A-1 SFCs for Reading out Diagnostic Data ......................................................................................A-2
Table D-1 PM-E F pm DC24V PROFIsafe: Internal processing times of the electronic PM channel.........D-1
Table D-2 PM-E F pm DC24V PROFIsafe: Internal processing times of the P1/2 channel.......................D-2
Table D-3 PM-E F pp DC24V PROFIsafe: Internal preparation times .......................................................D-2
Table D-4 PM-D F DC24V PROFIsafe: Internal preparation times ............................................................D-2
Table D-5 EM 4/8 F-DI DC24V PROFIsafe: Internal preparation times .....................................................D-3
Table D-6 EM 4/8 F-DI DC24V PROFIsafe: Maximum Response Time if a Fault Occurs:........................D-3
Table D-7 EM 4 F-DO DC24V/2A PROFIsafe: Internal preparation times.................................................D-4

ET 200S Distributed I/O System - Fail-Safe Modules
Hardware Installation and Operating Manual, 07/2005, A5E00103686-04 1-1
Product Overview 1
1.1 1.1 Introduction
Overview
This chapter provides information about the following topics:
•ET 200S distributed I/O system with fail-safe modules and its place in SIMATIC S7
fail-safe automation systems
•Components comprising the ET 200S distributed I/O system with fail-safe modules
•The steps you must perform, ranging from selection of the F-modules to commissioning
of ET 200S on PROFIBUS DP/PROFINET IO
1.2 1.2 ET 200S fail-safe modules
Fail-safe automation system
Fail-safe automation systems (F-systems) are used in systems with higher-level safety
requirements. F-systems are used to control systems having a safe state immediately after
shutdown. That is, F-systems control processes in which an immediate shutdown does not
endanger humans or the environment.
ET 200S distributed I/O system
The ET 200S distributed I/O system is a DP slave/IO device on PROFIBUS DP/PROFINET
IO that can contain fail-safe modules in addition to ET 200S standard modules.
You can use copper cable or fiber-optic cable to assemble the PROFIBUS DP/PROFINET
IO lines.

Product Overview
1.3 Using ET 200S Fail-Safe Modules
ET 200S Distributed I/O System - Fail-Safe Modules
1-2 Hardware Installation and Operating Manual, 07/2005, A5E00103686-04
Fail-Safe Modules
The major difference between fail-safe modules and standard ET 200S modules is that fail-
safe modules have a two-channel internal design. Both integrated processors monitor each
other, automatically test the input and output wiring, and place the F-module in a safe state
in the event of a fault. The F-CPU communicates with the fail-safe module using the
PROFIsafe safety-related bus profile.
Fail-safe power modules supply load voltage to the potential group and safely shut down the
load voltage for output modules.
Fail-safe digital input modules record the signal states of safety-related sensors and send
corresponding safety message frames to the F-CPU.
Fail-safe digital output module are suitable for shutdown procedures with short-circuit and
cross-circuit protection up to the actuator.
1.3 1.3 Using ET 200S Fail-Safe Modules
Possible Uses of ET 200S with Fail-Safe Modules
The use of ET 200S with fail-safe modules enables conventional safety engineering designs
to be replaced with PROFIBUS DP/PROFINET IO components. This includes replacement
of switching devices for emergency stop, protective door monitors, two-hand operation, etc.
Use in F-systems
Fail-safe ET 200S modules can be used:
•In the S7 Distributed Safety F-system with
S7 Distributed Safety optional package V5.4 or
higher
•In S7 F/FH Systems with the
S7 F Systems optional package as of version V5.2 SP 2
•To connect ET 200S fail-safe modules to PROFINET IO modules with Distributed Safety,
you need:
–ET 200S fail-safe modules as of the order numbers specified in "Preface"
–CPU 315F-2 PN/DP or CPU 317F-2 PN/DP
–
STEP 7 V5.3 SP 3 or higher
–IM 151-3 PN HIGH FEATURE interface module
–
S7 Distributed Safety V5.4 or higher ( F Configuration Pack V5.4 or higher)
When using fail-safe ET 200S I/O modules in F-systems, the information in the following
manuals applies:
•
ET 200S distributed I/O system
•
Safety Engineering in SIMATIC S7
•
S7 Distributed Safety, Configuration and Programming or Programmable Controllers
S7 F/FH Systems

Product Overview
1.3 Using ET 200S Fail-Safe Modules
ET 200S Distributed I/O System - Fail-Safe Modules
Hardware Installation and Operating Manual, 07/2005, A5E00103686-04 1-3
F-System with ET 200S
The following figure presents an example configuration for an S7 Distributed Safety
F-system including an ET 200S on PROFIBUS DP/PROFINET IO.
The fail-safe DP master/IO controller exchanges safety-relevant and non-safety-relevant
data with the fail-safe and standard ET 200S modules, etc.
(70 
(7 6 
(76 
352),%86'3
352),1(7,2
6ZLWK
&38)'3RU
&38)31'3
)DLOVDIHVLJQDO
PRGXOHV
)DLO6DIH
0RGXOHV
)DLO6DIH
0RGXOHV
Figure 1-1 S7 Distributed Safety Fail-Safe Automation System (Example Configuration)
Availability of Fail-Safe Electronic Modules
The following fail-safe electronic modules are available for ET 200S:
•PM-E F pm DC24V PROFIsafe power module; P/M switching (current sourcing/sinking),
with 2 additional, fail-safe digital outputs
•PM-E F pp DC24V PROFIsafe power module; P/P switching (current sourcing)
•PM-D F DC24V PROFIsafe power module; P/P switching (current sourcing)
•4/8 F-DI VDC24V PROFIsafe Digital Electronic Module
•4 F-DO DC24V/2A PROFIsafe digital electronic module; P/M switching (current
sourcing/sinking)
The PM-D F DC24V PROFIsafe is used for partial shutdowns of fail-safe motor starters via
six fail-safe shutdown groups.
A range of terminal modules is available for fail-safe power and electronic modules. You will
find a detailed list in this manual.

Product Overview
1.3 Using ET 200S Fail-Safe Modules
ET 200S Distributed I/O System - Fail-Safe Modules
1-4 Hardware Installation and Operating Manual, 07/2005, A5E00103686-04
Using Interface Modules in ET 200S with Fail-Safe Modules
Depending on the F system, select the interface module for ET 200S as follows:
Table 1-1 Using Interface Modules in ET 200S with Fail-Safe Modules
Interface module As of order number Can be used in ET 200S
with optional package
As of version
S7 Distributed Safety V 5.1 IM151-1 HIGH FEATURE *
for PROFIBUS DP
connection
6ES7 151-1BA00-0AB0
S7 F Systems V 5.2
IM 151-7 F-CPU ** for
PROFIBUS DP connection
6ES7 151-7FA00-0AB0 S7 Distributed Safety V 5.2
IM 151-3 PN HIGH
FEATURE for
PROFINET IO connection
6ES7 151-3AB00-0AB0 S7 Distributed Safety V5.4
*: V1.1.1 or higher for use with PM-E F pp DC24V PROFIsafe power module
**: V2.0.6 or higher for use with PM-E F pp DC24V PROFIsafe power module
The IM151-1 HIGH FEATURE and the IM 151-3 PN HIGH FEATURE are described in the
ET 200S Distributed I/O System manual; the IM 151-7 F-CPU is described in a separate
product information bulletin.
Use in Safety Mode Only
Fail-safe modules can only be used in safety mode. They cannot be used in standard mode.
Achievable Safety Classes
Fail-safe modules are equipped with integrated safety functions for safety mode.
The following safety classes can be achieved in safety mode by assigning appropriate
parameters to the safety functions in
STEP 7 with the S7 Distributed Safety or S7 F Systems
optional package, by combining certain standard and F-modules and by arranging the wiring
of the sensors and actuators in a specific way:
Table 1-2 Achievable Safety Classes in Safety Mode
Safety Class in Safety Mode
In accordance with IEC 61508 In accordance with DIN V 19250 In Accordance with EN 954-1
SIL2 AK4 Category 3
SIL3 AK6 Category 3
SIL3 AK6 Category 4
See also
Configuring ET 200S with Fail-Safe Modules (Page 2-1)

Product Overview
1.4 Guide for Commissioning of ET 200S with Fail-Safe Modules
ET 200S Distributed I/O System - Fail-Safe Modules
Hardware Installation and Operating Manual, 07/2005, A5E00103686-04 1-5
1.4 1.4 Guide for Commissioning of ET 200S with Fail-Safe Modules
Introduction
The following table lists all important steps required for commissioning ET 200S distributed
I/O systems with fail-safe modules as DP slaves/IO devices on PROFIBUS DP/
PROFINET IO.
Steps from Selecting the F-Modules to Commissioning ET 200S
Table 1-3 Steps from Selecting the F-Modules to Commissioning ET 200S
Step Procedure See ...
1. Select F-modules for ET 200S configuration "Configuration Options" chapter
2. Configure and assign parameters to
F-modules in
STEP 7
"Configuration and Parameter Assignment"
and "Fail-Safe Modules" chapters
3. Set PROFIsafe addresses on F-modules "Address Assignment and Installation"
chapter
4. Mount ET 200S "Address Assignment and Installation"
chapter
5. Wire ET 200S "Wiring and Fitting Modules" chapter
6. Commission ET 200S on
PROFIBUS DP/PROFINET IO
ET 200S Distributed I/O system manual
7. If commissioning was not successful,
perform diagnostics on ET 200S
"Diagnostics" chapter, "Fail-Safe Modules"
chapter and ET 200S Distributed I/O System
manual
Note
You must configure and assign parameters to the F-modules in
STEP 7 before
commissioning.
This is required because the PROFIsafe addresses of F-modules are assigned automatically
by
STEP 7 . You must set these PROFIsafe addresses on each F-module by means of
switches before mounting the module.

Product Overview
1.4 Guide for Commissioning of ET 200S with Fail-Safe Modules
ET 200S Distributed I/O System - Fail-Safe Modules
1-6 Hardware Installation and Operating Manual, 07/2005, A5E00103686-04

ET 200S Distributed I/O System - Fail-Safe Modules
Hardware Installation and Operating Manual, 07/2005, A5E00103686-04 2-1
Configuring 2
2.1 2.1 Configuring ET 200S with Fail-Safe Modules
Introduction
You can configure ET 200S distributed I/O systems with standard and fail-safe modules.
This chapter present an example configuration.
Configuration Example of ET 200S with Fail-Safe Modules
In the following figure you will find a configuration example using standard and fail-safe
modules in an ET 200S. You must divide and mount the modules in fail-safe voltage groups
and standard voltage groups. A new voltage group always begins with a power module.
(76
)' ,303030
()
30
'
,0

+,*+
)($785(

06
)' 2$,
$2 ', '2)03]  '2'2'2'2
)DLOVDIH
)DLO6DIH0RGXOHV
6WDQGDUG )DLOVDIH 6WDQGDUG
7HUPLQDOPRGXOH
Figure 2-1 Configuration Example of ET 200S with Fail-Safe Modules
Warning
Please note that for AK6/SIL3/Category 4, mixing F-DI-/F-DO modules and standard
DI-/DO-/FM modules within a voltage group is not permitted.
For AK4/SIL2/Category 3, mixing F-DI-/F-DO modules and standard DI-/ DO-/FM modules
within a voltage group is permitted.

Configuring
2.1 Configuring ET 200S with Fail-Safe Modules
ET 200S Distributed I/O System - Fail-Safe Modules
2-2 Hardware Installation and Operating Manual, 07/2005, A5E00103686-04
Configuration Rules for Fail-Safe Voltage Groups
The "Assignment of Power Modules to Electronic Modules/Motor Starters and Safety Class"
table presents all of the fail-safe and standard power and electronic modules that you can
use in a voltage group.
Configuration with Fail-Safe Motor Starters and Frequency Converters
Use a PM-D F DC24V PROFIsafe for the selective shutdown of:
•fail-safe motor starters (F-MS) F-DS1e-x, F-RS1e-x
•SINAMICS fail-safe frequency converters (F-FU) with ICU24(F)
•fail-safe F-CM connection multipliers
•PM-D F X1 fail-safe power/expansion modules.
The PM-D F DC24V PROFIsafe cannot supply other motor starters (for example
DS1-x/RS1-x, DS1e-x/RS1e-x, DSS1e-x).
The fail-safe motor starters can be expanded:
•up to safety class (safety integrity level) AK6/SIL3/Category 4 with the Brake Control xB1,
xB2 expansion modules
•up to safety class (safety integrity level) AK4/SIL2/Category 3 with the Brake Control xB3,
xB4 expansion modules
Example of a Configuration with Fail-Safe Motor Starters
The following figure shows an example of an ET 200S configuration with two fail-safe voltage
groups. The first voltage group contains fail-safe motor starters and a connection multiplier.
This configuration achieves safety class (safety integrity level) AK6/SIL3/Category 4.
a


,0+,*+ )($785(
0

a


)'6H [
0

a


)56H [
)&0

30 ('&9 
)','&9  )','&9  )'2'&9 

30')'&9 352),VDIH
6ORW
7HUPLQDO
Figure 2-2 Example of an ET 200S Configuration with Fail-Safe Motor Starters and Connection
Multiplier