Documente Academic
Documente Profesional
Documente Cultură
Contents Preface
1 2 3 4 5 6 7 8 9 10 11 12 13 14
Product Overview Configuration Options Configuring and Assigning Parameters Address Assignment and Installation Wiring and Fitting Modules Diagnostics General Technical Specifications Fail-Safe Modules Appendices Diagnostic Data of Fail-Safe Modules Dimension Drawings Accessories and Order Numbers Response Times Glossary Index
Edition 10/2004
A5E00103686-03
Safety Guidelines
This manual contains notices intended to ensure personal safety, as well as to protect the products and connected equipment against damage. These notices are highlighted by the symbols shown below and graded according to severity by the following texts:
! ! !
Danger
indicates that death, severe personal injury or substantial property damage will result if proper precautions are not taken.
Warning
indicates that death, severe personal injury or substantial property damage can result if proper precautions are not taken.
Caution
indicates that minor personal injury can result if proper precautions are not taken.
Caution
indicates that property damage can result if proper precautions are not taken.
Notice
draws your attention to particularly important information on the product, handling the product, or to a particular part of the documentation.
Qualified Personnel
Only qualified personnel should be allowed to install and work on this equipment. Qualified persons are defined as persons who are authorized to commission, to ground and to tag circuits, equipment, and systems in accordance with established safety practices and standards.
Correct Usage
Note the following:
Warning
This device and its components may only be used for the applications described in the catalog or the technical description, and only in connection with devices or components from other manufacturers which have been approved or recommended by Siemens. This product can only function correctly and safely if it is transported, stored, set up, and installed correctly, and operated and maintained as recommended.
Trademarks
SIMATIC, SIMATIC HMI and SIMATIC NET are registered trademarks of SIEMENS AG. Third parties using for their own purposes any other names in this document which refer to trademarks might infringe upon the rights of the trademark owners. Copyright Siemens AG 2004 All rights reserved
The reproduction, transmission or use of this document or its contents is not permitted without express written authority. Offenders will be liable for damages. All rights, including rights created by patent grant or registration of a utility model or design, are reserved.
Disclaimer of Liability
We have checked the contents of this manual for agreement with the hardware and software described. Since deviations cannot be precluded entirely, we cannot guarantee full agreement. However, the data in this manual are reviewed regularly and any necessary corrections included in subsequent editions. Suggestions for improvement are welcomed. Siemens AG 2004 Technical data subject to change.
Siemens AG
Bereich Automation and Drives Geschaeftsgebiet Industrial Automation Systems Postfach 4848, D- 90327 Nuernberg
Siemens Aktiengesellschaft
A5E00103686-03
Contents
1 2 Preface .............................................................................................................................. iii Product Overview........................................................................................................... 2-1 2.1 Introduction ....................................................................................................... 2-1 2.2 Using ET 200S Fail-Safe Modules ................................................................... 2-2 2.3 Step-by-Step Guide to Commissioning ET 200S with Fail-Safe Modules on PROFIBUS DP ............................................................................................ 2-6 Configuration Options ................................................................................................... 3-1 3.1 Introduction ....................................................................................................... 3-1 3.2 Configuring ET 200S with Fail-Safe Modules................................................... 3-2 3.3 Assigning Modules of an ET 200S ................................................................... 3-5 3.4 Maximum Number of Connectable Modules/Maximum Configuration ............. 3-7 Configuration and Parameter Assignment.................................................................. 4-1 Address Assignment and Installation.......................................................................... 5-1 5.1 Introduction ....................................................................................................... 5-1 5.2 Address Assignments in the F-CPU ................................................................. 5-1 5.3 Assigning PROFIsafe Address ......................................................................... 5-3 5.4 Installation......................................................................................................... 5-5 Wiring and Fitting Modules ........................................................................................... 6-1 6.1 Introduction ....................................................................................................... 6-1 6.2 Safe Functional Extra Low Voltage for Fail-Safe Modules ............................... 6-2 6.3 Wiring Fail-Safe Modules.................................................................................. 6-4 6.4 Inserting and Removing Fail-Safe Modules...................................................... 6-5 6.5 Requirements for Sensors and Actuators......................................................... 6-6 Diagnostics..................................................................................................................... 7-1 7.1 Introduction ....................................................................................................... 7-1 7.2 Reactions to Faults ........................................................................................... 7-2 7.3 Fault Diagnostics .............................................................................................. 7-4 General Technical Specifications................................................................................. 8-1 8.1 Introduction ....................................................................................................... 8-1 8.2 Standards and Approvals ................................................................................. 8-2 8.3 Electromagnetic Compatibility .......................................................................... 8-7 8.4 Transport and Storage Conditions.................................................................. 8-11 8.5 Mechanical and Climatic Environmental Conditions ...................................... 8-12 8.6 Specifications for Nominal Line Voltages, Isolation Tests, Protection Class, and Type of Protection ........................................................................ 8-14
4 5
iii
Contents
8.7 8.7.1 8.7.2 8.7.3 8.7.4 8.7.5 8.7.6 8.7.7 8.7.8 8.7.9 8.7.10 8.7.11 9
Use of Fail-Safe Signal Modules in Zone 2 Potentially Explosive Atmosphere .................................................................................................... 8-15 Einsatz der fehlersicheren Module im explosionsgefhrdeten Bereich Zone 2............................................................................................................. 8-15 Use of Fail-Safe Modules in a Zone 2 Hazardous Area ................................. 8-17 Utilisation des modules de scurit dans un environnement risque d'explosion en zone 2 ..................................................................................... 8-19 Aplicacin de mdulos de alta disponibilidad en reas con peligro de explosin, zona 2............................................................................................ 8-21 Impiego delle unit ad elevata sicurezza nell'area a pericolo di esplosione zona 2 ............................................................................................................. 8-23 Gebruik van de foutbestendige modulen het explosieve gebied zone 2........ 8-25 Brug af fejlsikre moduler i det eksplosions-farlige omrde zone 2................. 8-27 Virheilt suojattujen rakenneryhmien kytt rjhdysvaarannetuilla alueilla, vyhyke 2 .......................................................................................... 8-29 Anvndning av felskrade komponentgrupper i explosions-riskomrde zon 2 ............................................................................................................... 8-31 Uso de mdulos protegidos contra erro em rea exposta ao perigo de exploso, zona 2............................................................................................. 8-33 , 2 ..................................... 8-35
Fail-Safe Modules........................................................................................................... 9-1 9.1 Introduction ....................................................................................................... 9-1 9.2 PM-E F pm DC 24V PROFIsafe Power Module............................................... 9-2 9.2.1 Diagnostic Functions of PM-E F pm DC 24V PROFIsafe .............................. 9-15 9.2.2 Technical Specifications for PM-E F pm DC 24V PROFIsafe Power Module ............................................................................................................ 9-18 9.3 PM-E F pp DC 24V PROFIsafe Power Module.............................................. 9-23 9.3.1 Diagnostic Functions of PM-E F pp DC 24V PROFIsafe ............................... 9-30 9.3.2 Technical Specifications for the PM-E F pp DC 24V PROFIsafe Power Module ............................................................................................................ 9-32 9.4 PM-D F DC 24V PROFIsafe Power Module................................................... 9-36 9.4.1 Diagnostic Functions of PM-D F DC 24V PROFIsafe .................................... 9-40 9.4.2 Technical Specifications of the PM-D F DC 24V PROFIsafe ......................... 9-42 9.5 Digital Electronic Module 4/8 F-DI DC 24V PROFIsafe ................................. 9-45 9.5.1 Applications for the 4/8 F-DI DC 24V PROFIsafe Electronic Module............. 9-52 9.5.2 Application 1: Safety Mode AK4/SIL2/Category 3.......................................... 9-54 9.5.3 Application 2: Safety Mode AK6/SIL3/Category 3.......................................... 9-56 9.5.4 Application 3: Safety Mode AK6/SIL3/Category 4.......................................... 9-65 9.5.5 Diagnostic Functions of the EM 4/8 F-DI DC 24V PROFIsafe ....................... 9-69 9.5.6 Technical Specifications for the EM 4/8 F-DI DC 24V PROFIsafe................. 9-71 9.6 4 F-DO DC 24V/2A PROFIsafe Digital Electronic Module ............................. 9-75 9.6.1 Diagnostic Functions of the EM 4 F-DO DC 24V/2A PROFIsafe ................... 9-85 9.6.2 Technical Specifications of the EM 4 F-DO DC 24V/2A PROFIsafe.............. 9-87 Diagnostic Data of Fail-Safe Modules........................................................................ 10-1 Dimension Drawings.................................................................................................... 11-1 Accessories and Order Numbers ............................................................................... 12-1 Response Times........................................................................................................... 13-1 Glossary........................................................................................................................ 14-1 Index .........................................................................................................................Index-1
10 11 12 13 14
iv
Preface
1-1
Preface
What's New
Compared with the previous version, this manual includes the following major changes/additions: New PM-E F pp DC24V PROFIsafe power module PM-D F DC24V PROFIsafe power module has been added Change in the name of the PM-E F DC24V PROFIsafe power module: new PM-E F pm DC24V PROFIsafe PM-E F pm DC24V PROFIsafe power module and 4 F-DO DC24V/2A PROFIsafe electronic module with selectable "readback time 4/8 F-DI DC24V PROFIsafe electronic module with selectable "discrepancy behavior
Approvals
See Section 8.2 Standards and Approvals In addition, ET 200S fail-safe modules are certified for use in safety mode up to the following levels: Safety class SIL3 (Safety Integrity Level) in compliance with IEC 61508 Requirements class (AK) 6 in accordance with DIN V 19250 (DIN V VDE 0801) Category 4 in accordance with EN 954-1
CE Certification
See Section 8.2 Standards and Approvals
Standards
See Section 8.2 Standards and Approvals
1-2
Preface
The Programmable Controllers S7 F/FH Systems manual describes the tasks involved in commissioning an S7 F/FH failsafe system. The S7-400, M7-400 Programmable Controllers Hardware and Installation manual describes the installation and assembly of S7-400 systems. The S7-400H Programmable Controllers, Fault-Tolerant Systems manual describes the CPU 41x-H central modules and the tasks involved in setting up and commissioning an S7-400H fault-tolerant system. The CFC for SIMATIC S7 manual/online help provides a description of programming with CFC.
1-3
Preface
Brief Description of Relevant Contents The S7 Distributed Safety, Configuration and Programming manual and online help describes: Configuration of the fail-safe CPU and the fail-safe I/O Programming of the fail-safe CPU in fail-safe FBD or LAD
Depending on which F-CPU you use, you will need the following documentation: The S7-300, CPU 31xC and CPU 31x: Hardware and Installation operating instructions describes the configuration, installation, addressing, and commissioning of S7-300 systems. The CPU Specifications: CPU 31xC and CPU 31x reference manual describes the standard functions of the CPU 315F-2 DP and the CPU 317F-2 DP. The product information for CPU 315F-2 DP describes only the deviations from the standard CPU 315-2 DP. (Included in the S7 Distributed Safety documentation package) The product information for CPU 317F-2 DP describes only the deviations from the standard CPU 317-2 DP. (Included in the S7 Distributed Safety documentation package) TheS7-400, CPU Data reference manual describes the standard functions of the CPU 416F-2. The product information for CPU 416F-2 DP describes only the deviations from the standard CPU 416-2 DP. (Included in the S7 Distributed Safety documentation package) The ET 200S, Interface Module IM 151-7 CPU manual describes the standard IM 151-7 CPU. The product information for the IM 151-7 F-CPU describes only the deviations from the standard IM 151-7 CPU. The Configuring Hardware and Communication Connections with STEP 7 V5.x manual describes operation of the standard tools of STEP 7. The System and Standard Functions reference manual describes functions for distributed I/O access and diagnostics. Describes how to operate the standard tools in STEP 7 Contains information about how to configure and assign parameters to modules and intelligent slaves with HW Config Contains a description of the programming languages FBD and LAD Describe how to operate the PCS 7 process control system (required when ET 200S is connected to fail-safe modules in a master control system)
STEP 7 manuals
1-4
Preface
Conventions
In this manual, the terms "safety engineering" and "fail-safe engineering" are used synonymously. The same applies to the terms "fail-safe" and "F-." "S7 Distributed Safety" and "S7 F Systems" in italics refer to the optional packages for the two fail-safe systems: "S7 Distributed Safety" and "Programmable Controllers S7 F/FH Systems".
Additional Support
If you have any additional questions about the use of products presented in this manual, contact your local Siemens representative: http://www.siemens.com/automation/partner
1-5
Preface
Training Center
We offer courses to help you get started with the S7 automation system. Contact your regional training center or the central training center in Nuremberg (90327), Federal Republic of Germany. Telephone +49 (911) 8953200 Internet: http://www.sitrain.com H/F Competence Center The H/F Competence Center in Nuremberg offers special workshops on SIMATIC S7 fail-safe and redundant automation systems. The H/F Competence Center can also provide assistance with onsite configuration, commissioning, and troubleshooting. Telephone: +49 (911) 895-4759 Fax: +49 (911) 895-5193 For questions about workshops, etc.: hf-cc@nbgm.siemens.de
1-6
Preface
mailto:adsupport@siemens.com
mailto:adsupport@siemens.com
mailto:simatic.hotline@sea.siemens.com mailto:adsupport.asia@siemens.com
The languages of the SIMATIC Hotlines and the authorization hotline are generally German and English.
1-7
Preface
1-8
2
2.1
Overview
Product Overview
Introduction
This chapter provides information about the following topics: ET 200S distributed I/O system with fail-safe modules and its place in SIMATIC S7 fail-safe automation systems Components comprising the ET 200S distributed I/O system with fail-safe modules The steps required from selecting F-modules to commissioning ET 200S on PROFIBUS-DP
2-1
Product Overview
2.2
2-2
Product Overview
Use in F-Systems
Fail-safe ET 200S modules can be used: In the S7 Distributed Safety F-system with the S7 Distributed Safety optional package as of version V 5.1 In S7 F/FH Systems with the S7 F Systems optional package as of version V 5.2 When using fail-safe ET 200S I/O modules in F-systems, the information in the following manuals applies: ET 200S Distributed I/O System Safety Engineering in SIMATIC S7 S7 Distributed Safety, Configuration and Programming or Programmable Controllers S7 F/FH Systems
Fail-Safe Modules
PROFIBUS DP ET 200S
ET 200S
2-3
Product Overview
The IM151-1 HIGH FEATURE is described in the ET 200S Distributed I/O System manual; the IM 151-7 F-CPU is described in a separate product information bulletin.
2-4
Product Overview
Safety Class in Safety Mode In Accordance with IEC 61508 SIL2 SIL3 SIL3 In Accordance with DIN V 19250 AK4 AK6 AK6 In Accordance with EN 954-1 Category 3 Category 3 Category 4
2-5
Product Overview
2.3
Introduction
In the following table, you will find all the important steps you must perform to commission ET 200S distributed I/O systems with fail-safe modules as DP slaves on PROFIBUS DP.
Note You must configure and assign parameters to the F-modules in STEP 7 before commissioning them. Reason: The PROFIsafe addresses of F-modules are assigned automatically by STEP 7. You must set these PROFIsafe addresses on each F-module by means of switches before mounting the module.
2-6
3
3.1
Overview
Configuration Options
Introduction
This chapter provides information about the following topics: Fail-safe modules that can be used to configure an ET 200S distributed I/O system Terminal, F-power and F-electronic modules that can be used together Number of fail-safe modules that can be used per ET 200S Maximum configuration per voltage group
3-1
Configuration Options
3.2
Introduction
You can configure ET 200S distributed I/O systems with standard and fail-safe modules. This chapter present an example configuration.
ET 200S
IM151-1
HIGH FEATURE
Fail-safe
PM F-DI F-DO
Standard
Fail-safe
Standard
ms Terminal module
PM AO AI DI DO FM PzPPM-E F AO AI DI DO FM PzPPM -D
Fail-Safe Modules
Figure 3-1
Warning Please note that for AK6/SIL3/Category 4, mixing F-DI-/F-DO modules and standard DI-/DO-/FM modules within a voltage group is not permitted. For AK4/SIL2/Category 3, mixing F-DI-/F-DO modules and standard DI-/ DO-/FM modules within a voltage group is permitted.
3-2
Configuration Options
Slot
PM-E DC24..48V
4 F-DO DC24V
3~
M 3~
M 3~
Figure 3-2 Example of an ET 200S Configuration with Fail-Safe Motor Starters and Connection Multiplier
F-CM
Terminal d l
F-DS1 e-x
F-RS1 e-x
3-3
Configuration Options
3-4
Configuration Options
3.3
Introduction
This section presents the following module assignments for ET 200S: F-power modules to terminal modules F-electronic modules to terminal modules Power modules to electronic modules/motor starters
F-Power Modules
PM-E F pm DC24V TM-P30S44-A0 (screw-in type) PROFIsafe and PM-E F pp DC24V PROFIsafe PM-D F DC24V PROFIsafe TM-P30C44-A0 (snap-in type) TM-PF30S47-F1 (screw-in type)
F-Electronic Modules 4/8 F-DI DC24V PROFIsafe and 4 F-DO DC24V/2A PROFIsafe
3-5
Configuration Options
Power Module PM-E F pm DC24V PROFIsafe PM-E F pp DC24V PROFIsafe PM-D F DC24V PROFIsafe
Can be used with all Safe shutdown of standard electronic modules DO modules from the ET 200S range
Chapter 9.3
Chapter 9.4
Can only be used for: fail-safe motor starters (F-MS) F-DS1e-x, F-RS1e-x connection multiplier F-CM power/ expansion module PM-D F X1
Expansion modules Brake Control xB1 and xB2 Can be used with the F-motor starters listed above: Expansion modules Brake Control xB3 and xB4 PM-E DC24V ET 200S manual Can be used with all standard and fail-safe electronic modules Can be used with all standard and fail-safe electronic modules Supply of F-DI- and F-DO modules Safe shutdown of motor starters AK4/ SIL2/ Category 3 AK4/ SIL2/ Category 3 AK6/ SIL3/ Category 4
ET 200S manual
3-6
Configuration Options
3.4
Fail-Safe Module PM-E F pm DC24V PROFIsafe PM-E F pp DC24V PROFIsafe PM-D F DC24V PROFIsafe 4/8 F-DI DC24V PROFIsafe 4 F-DO DC24V/2A PROFIsafe
Example
In the following example, modules with a total parameter length of 224 bytes have been used in an ET 200S. This means that 20 bytes are still available for inserting additional modules.
Number of 1x Modules/Mo IM151-1 dule Type HIGH FEATURE Parameter Length * 27 bytes** +1x PM-E DC24..48V/ AC24..230V + 3 bytes +5 F-DI modules* + 150 bytes +2 F-DO modules* + 44 bytes = 9 modules
= 224 bytes
5 F-DI moduIes provide: 20 SIL3 or 40 SIL2 inputs 2 F-DO modules provide: 8 SIL2/SIL3 outputs
3-7
Configuration Options
Power Modules
PM-E F pm DC24V 10 A PROFIsafe PM-E F pp DC24V PROFIsafe PM-D F DC24V PROFIsafe 10 A briefly* 5 A permanent*
Reason:
3-8
Requirements
One of the following optional packages must be installed in STEP 7 to configure and assign parameters to ET 200S fail-safe modules: S7 Distributed Safety, Version V 5.1 or higher S7 F Systems, Version V 5.2 or higher For the power module PM-E F pp DC24V PROFIsafe, the following are required: STEP 7 V 5.2 and higher F Configuration Pack, V 5.3 Service Pack 2 and higher The F Configuration Pack can be downloaded from the Internet at: http://www.siemens.com/automation/service&support.
Configuration
Follow the usual procedure with STEP 7 HW Config to configure fail-safe modules (in the same way as standard ET 200S modules).
4-1
4-2
5
5.1
Overview
This chapter provides information about the following topics: Addresses of the fail-safe modules in the F-CPU Assigning the PROFIsafe address for fail-safe modules Installing Fail-Safe Modules
5.2
Address Assignment
The fail-safe modules occupy the following address ranges in the F-CPU: For S7 Distributed Safety: in the process image range For S7 F/FH systems: in the entire I/O range (inside and outside the process image)
Table 5-1 F-Module PM-E F pm DC24V PROFIsafe PM-E F pp DC24V PROFIsafe PM-D F DC24V PROFIsafe 4/8 F-DI DC24V PROFIsafe 4 F-DO DC24V/2A PROFIsafe x = Module start address Address Assignment in the F-CPU Occupied Bytes in the F-CPU: In Input Range x + 0 to x + 4 x + 0 to x + 4 x + 0 to x + 4 x + 0 to x + 5 x + 0 to x + 4 In Output Range x + 0 to x + 4 x + 0 to x + 4 x + 0 to x + 4 x + 0 to x + 3 x + 0 to x + 4
5-1
PM-D F DC24V PROFIsafe: x+0 Channel 5 Channel 5 Channel 4 Channel 4 Channel 3 Channel 3 Channel 3 Channel 2 Channel 2 Channel 2 Channel 1 Channel 1 Channel 1
Warning You must only access the addresses occupied by useful data. The other address ranges occupied by the F-modules are assigned for functions including safetyrelated communication between the F-modules and F-CPU in accordance with PROFIsafe. In 1oo2 evaluation of sensors, only the less significant channel of the channels that are grouped as a result of the 1oo2 sensor evaluation can be accessed in the safety program.
Additional Information
Detailed information on F-I/O access can be found in the S7 Distributed Safety, Configuring and Programming manual or the Programmable Controllers S7 F/FH Systems manual.
5-2
5.3
PROFIsafe Address
Each fail-safe module has its own PROFIsafe address in addition to the PROFIBUS address. Before installing fail-safe modules, you must set the PROFIsafe address on each F-module.
5-3
Example:Address 1018
9 8 7 6 54 3 2 1 0 ON OFF
512 256 128 64 32 16 8 4 2 1
Figure 5-1 Example for Setting the Address Switch (DIP Switch)
Warning Make sure that the address switch setting on the module matches the PROFIsafe address in STEP 7 HW Config.
The switch setting on the address switch of the F-I/O, in other words, its PROFIsafe destination address must be unique within the network* and station** (throughout the system). A maximum of 1,022 PROFIsafe destination addresses can be assigned in one system. That is, a maximum of 1,022 F-modules can be addressed using PROFIsafe. Exception: In different I-slaves, F I/Os can have the same PROFIsafe target address since they are only addresses within the station, in other words by the F-CPU in the I-slave. The following restriction applies only to F-modules of the ET 200S, whose preset PROFIsafe addresses cannot be modified in HW Config: If you use F-modules of the ET 200S in a PROFIBUS network, whose PROFIsafe addresses cannot be modified in HW Config, you can only operate one DP master with an F-CPU in this network, otherwise the network-wide uniqueness of the PROFIsafe addresses is not guaranteed.
A network consists of one or more subnets. "Network-wide" means across PROFIBUS subnet boundaries.
5-4
5.4
Installation
Mounting Dimensions
Note that fail-safe modules are 30 mm wide (twice as wide as standard ET 200S modules). Otherwise, information provided in the ET 200S Distributed I/O System manual is applicable.
5-5
5-6
6
6.1
Overview
This chapter presents special features involved in wiring and fitting fail-safe modules. Information on this subject that applies to both ET 200S with fail-safe modules and ET 200S with standard modules can be found in the ET 200S Distributed I/O System manual.
6-1
6.2
Warning Fail-safe modules must be operated with safe functional extra low voltage. This means that these modules, even in the event of a fault, can only have a maximum voltage of Um. The following applies for all fail-safe modules: Um < 60.0 V You can find additional information about safe functional extra low voltage, for example, in the data sheets of the applicable power supplies.
All components of the system that are capable of supplying electrical energy in any form must satisfy this requirement. Each additional circuit (24 VDC) implemented must have a safe functional extra low voltage. Refer to the relevant data sheets or contact the manufacturer for this information. Note, too, that sensors and actuators having an external power supply can be connected to F-modules. Once again, make sure that the supply voltage is safe functional extra-low voltage. The process signal of a 24 VDC digital module must not exceed a fault voltage of Um in the event of a fault. Warning All power sources, for example internal 24 V DC load voltage power supplies, external 24 V DC load voltage power supplies, 5 V DC bus voltage must be electrically connected externally. This prevents voltage additions in the individual voltage sources that would cause the fault voltage Um to be exceeded even if there are voltage differences. Ensure that there is sufficient line cross section for the electrical connection, in accordance with the ET 200S configuration guidelines (see ET 200S Distributed I/O System manual).
6-2
S7-300 (fixed to standard mounting rail with installation adapter (6ES7 390-6BA00-0AA0)):
6ES7 307-1BA00-0AA0 for 2 A 6ES7 307-1EA00-0AA0 for 5 A 6ES7 307-1KA00-0AA0 for 10 A, 6ES7 138-4JC00-0AA0 for 5 A.
ET 200S:
These requirements also apply, of course, to power packs and power supplies with a construction different from that of the ET 200 S or S7-300/440.
6-3
6.3
A short circuit in the signals does not conceal a serious safety risk Signals are supplied by different sensor supplies of this F-DI module
Mounting Rails
Only 35 x 15 mm zinc-plated mounting rails in accordance with EN 50022 can be used for installing ET 200S with fail-safe modules. Mounting rails with the following order numbers, for example, comply with this requirement: 6ES5 710-8MA11 6ES5 710-8MA21 6ES5 710-8MA31 6ES5 710-8MA41
6-4
6.4
Interface module Fail-safe power module (PM E-F pm) Fail-safe power module (PM E-F pp) Fail-safe power module (PM D-F) Fail-safe electronic module (F-DI) Fail-safe electronic module (F-DO)
6-5
6.5
Warning In order to guarantee accurate detection of the sensor signal by the F-DI module, you must ensure that the sensor signals have a particular minimum duration. For pulses to be detected with certainty, the time between two signal changes (pulse duration) must be greater than the PROFIsafe monitoring time.
6-6
Reliable acquisition by the F-DI module The following table lists the minimum duration of the sensor signals for the F-DI module. This depends on the parameter settings for the short-circuit test and the input delay in STEP 7 (see Section 9.5).
Table 6-2 Minimum Duration of the Sensor Signals to Allow Correct Acquisition by the F-DI Module Assigned Input Delay 0.5 ms Deactivated Activated 7 ms 7 ms 3 ms 9 ms 12 ms 15 ms 23 ms 37 ms
Reliable acquisition by the safety program on the F-CPU You will find information on the times necessary for correct acquisition of the sensor signals in the safety program in Chapter 9 of the system description Safety Engineering in SIMATIC S7.
6-7
6-8
7
7.1
Overview
Diagnostics
Introduction
This chapter provides information about the following topics: Reactions to faults in F-modules Diagnostics for F-modules in the event of a fault
7-1
Diagnostics
7.2
Reactions to Faults
7-2
Diagnostics
7-3
Diagnostics
7.3
Definition
Fault Diagnostics
Diagnostics are used to determine whether fail-safe module signal acquisition is taking place without errors. Diagnostic information is assigned either to one channel or to the entire F-module.
7-4
Diagnostics
Slave Diagnostics
Slave diagnostics complies with the IEC 61784-1:2002 ED1 CP 3/1 standard. The fail-safe electronic and power modules support slave diagnostics in exactly the same way as the standard ET 200S modules. You will find a description of the general configuration of slave diagnostics for ET 200S and the fail-safe modules in the ET 200S Distributed I/O System manual. A supplementary description of channel-related diagnostics for fail-safe modules is presented below.
7-5
Diagnostics
Channel-Related Diagnostics
As with the ET 200S, there are three bytes available for channel-related diagnostics starting at byte 35 for each F-module. A maximum of 9 channel-related diagnostic messages are possible per station. Channel-related diagnostics for failsafe modules are configured as follows:
7 6 5 4 3 2 1 0 1 0 Bit no.
Byte35
000000B throughs 111111B: Slot of the module that supplies the channel-related diagnostic Code for channel-related diagnostics 7 6 5 4 3 2 1 0 Byte36 Bit no.
000000B through 000011B: Number of the channel that supplies 01B: Input channel (F-DI module) 10B: Output channel (F-DO module, PM-E F pm, PM-E F pp or PM-D F) 11B: Input/output channel 7 6 5 4 3 2 1 0 Byte37 Bit no.
Fault type (see Table 7-1) Channel 001B: 1 bit 010B: 2 bits (F-DO module, PM-E F pm or PM-E F pp) 011B: 4 bits 100B: 1 byte (F-DI module or PM-D F) 101B: 1 word 110B: 2 words
Note In byte 35, bit 0 to 5, the module slot is encoded. The following applies: Displayed number +1 = slot of the module (0 = slot 1; 1 = slot 2 etc.)
Note Channel-related diagnostics are always updated to the current diagnostic function in the diagnostic message frame. Subsequent, older diagnostic functions are not deleted. Remedy: Evaluate the valid current length of the diagnostic message frame in STEP 7 using the RET_VAL parameter of SFC13.
7-6
Diagnostics
All F-modules
7-7
Diagnostics
7-8
8
8.1
Overview
This chapter presents the following information about fail-safe modules: Information about the most important standards and approvals Information about the general technical specifications
8-1
8.2
CE Certification
The fail-safe modules of the ET 200S satisfy the requirements and safety objectives of the following European Community directives and comply with the harmonized European standards (EN) for programmable logic controllers published in the Gazette of the European Community:
73/23/EEC Electrical Equipment Designed for Use within Certain Voltage Limits (low voltage directive) 89/336/EWG Electromagnetic Compatibility (EMC Guideline) 94/9/EC "Equipment and Protective Systems Intended for Use in Potentially Explosive Atmospheres" (Explosion Protection Guideline):
The EC declarations of conformity are available to the competent authorities at: Siemens Aktiengesellschaft Bereich Automatisierungstechnik A&D AS RD ST Postfach 1963 D-92209 Amberg
8-2
UL approval
Underwriters Laboratories Inc., in accordance with
CSA approval
Canadian Standard Association (CSA) in accordance with
or
Underwriters Laboratories Inc., in accordance with
UL 508 (Industrial Control Equipment) CSA C22.2 No. 142 (Process Control Equipment)
or
Underwriters Laboratories Inc., in accordance with
UL 508 (Industrial Control Equipment) CSA C22.2 No. 142 (Process Control Equipment) UL 1604 (Hazardous Location) CSA-213 (Hazardous Location)
APPROVED for use in Class I, Division 2, Group A, B, C, D Tx; Class I, Zone 2, Group IIC Tx
Note The nameplate of the specific module indicates the currently valid approvals.
8-3
FM approval
Factory Mutual Research (FM) to
APPROVED for use in Class I, Division 2, Group A, B, C, D Tx; Class I, Zone 2, Group IIC Tx In accordance with EN 50021 (Electrical Apparatus for Potentially Explosive Atmospheres; Type of Protection "n") II 3 G EEx nA II T4..T5
Warning There is a risk of personal injury or property damage. In areas exposed to explosion hazard, personal injury or property damage can occur if plug-in connections are disconnected during operation. Before disconnecting plug-in connections in areas exposed to explosion hazard, always deenergize the distributed I/O.
IEC 61131
The fail-safe modules of the ET 200S satisfy the requirements and criteria of IEC 61131-2 (Programmable Controllers - Part 2: Equipment Requirements and Tests).
PROFIBUS Standard
The ET 200S distributed I/O system is based on the IEC 61784-1:2002 Ed1 CP 3/1 standard.
8-4
Shipbuilding Approval
Submitted to the following classification bodies: (Exception: PM-D F DC24V PROFIsafe submitted only to GL (German Lloyd) ) ABS (American Bureau of Shipping) BV (Bureau Veritas) DNV (Det Norske Veritas) GL (Germanischer Lloyd) LRS (Lloyds Register of Shipping) Class NK (Nippon Kaiji Kyokai)
Use in Industry
SIMATIC products are designed for use in industrial environments.
Field of Application Industry Requirement Relating to Emitted Interference EN 50081-2 :1993 Immunity to Interference EN 50082-2 :1995
8-5
Requesting TV Certificate
You can request copies of the TV certificate and the accompanying report at the following address: Siemens Aktiengesellschaft Bereich Automatisierungstechnik A&D AS RD4 ST Postfach 1963 D-92209 Amberg
8-6
8.3
Electromagnetic Compatibility
Introduction
This chapter presents information about immunity to interference of fail-safe modules and about EMC conformity.
Definition of EMC
Electromagnetic compatibility is the ability of an electrical device to function in its electromagnetic environment in a satisfactory manner without affecting this environment. Fail-safe modules also comply with the requirements of the EMC law for the European internal market. As a requirement, the ET 200S distributed I/O system must comply with the specifications and guidelines for electrical configuration.
Pulse-Shaped Interference
The following table presents the electromagnetic compatibility of fail-safe modules with regard to pulse-shaped interference.
Pulse-Shaped Interference Electrostatic discharge in accordance with IEC 61000-4-2 (DIN VDE 0843 Part 2) Burst pulse (rapid transient interference) in accordance with IEC 61000-4-4 (DIN VDE 0843 Part 4) Tested With 8 kV 6 kV (cabinet installation mandatory) 4 kV (no cabinet installation) 2 kV (supply line) 2 kV (signal line) 3 4 Degree of Severity 3 (air discharge) 3 (contact discharge)
Surge in accordance with IEC 61000-4-5 (DIN VDE 0839 Part 10) Degrees of severity 2 and 3 require an external protective circuit (see paragraph on next page) Asymmetrical connection 1 kV (supply line) 1 kV (signal lead/data lead) 2 kV (supply line) Symmetrical connection 0.5 kV (supply line) 0.5 kV (signal lead/data lead) 1 kV (supply line) 1 kV (signal lead/data lead) 3 3 2 2
8-7
The following figure illustrates an example of a configuration with F-modules, standard modules, and the power modules PM-E DC24..48V/AC24..230V and PM-E F pm DC24V PROFIsafe. Voltage is supplied over four power supplies. You can also use fewer power supplies. However, you must ensure that the total current of the modules fed by one power supply does not exceed the permissible limits. You can also use PM-E DC24V power modules; the protective circuit corresponds to that of the PM-E DC24..48V/AC24..230V + miniature circuit breaker (as for PM-E F pm DC24V PROFIsafe). For additional information about surge protection for standard modules, see the ET 200S Distributed I/O System manual.
8-8
8-9
Sinusoidal Interference
HF radiation of the device in accordance with IEC 61000-4-3: Electromagnetic HF field, amplitude modulated: from 80 through 2000 MHz; 10 V/m; 80 % AM (1 kHz) Electromagnetic HF field, pulse modulated: 900 5 MHz; 10 V/m; 50 % ESD; 200 Hz repetition frequency GSM/ISM field interferences of different frequencies (EN 298: 1998):
System GSM GSM GSM ISM ISM ISM ISM Frequency 890-915 MHz 1710-1785 MHz 1890 MHz 433.05-434.79 MHz 83,996-84,004 MHz 167,992-168,008 MHz 886,000-906,000 MHz Test Level 20 V/m 20 V/m 20 V/m 20 V/m 20 V/m 20 V/m 20 V/m Modulation Pulse modulation 200Hz Pulse modulation 200Hz Pulse modulation 200Hz AM, 80 %, 1 kHz AM, 80 %, 1 kHz AM, 80 %, 1 kHz AM, 80 %, 1 kHz
HF coupling with signal lines and data lines, etc. complying with IEC 61000-4-6, high frequency, asymmetric, amplitude-modulated: from 0.15 through 80 MHz; 10 V R. M. S value, unmodulated; 80 % AM (1 kHz); 150 source impedance ISM field interferences of different frequencies (EN 298: standard 1998):
System ISM ISM ISM ISM ISM ISM ISM Frequency 6,765-6,795 MHz 13,553-13,567 MHz 26,957-27,283 MHz 40.66-40.70 MHz 3,370-3,410 MHz 13,533-13,533 MHz 13,567-13,587 MHz Test Level 20 V 20 V 20 V 20 V 20 V 20 V 20 V Modulation AM, 80 %, 1 kHz AM, 80 %, 1 kHz AM, 80 %, 1 kHz AM, 80 %, 1 kHz AM, 80 %, 1 kHz AM, 80 %, 1 kHz AM, 80 %, 1 kHz
8-10
Emitted interference over network AC power supply in accordance with EN 55011: Limit class A, Group 1.
Frequency Between 0.15 MHz and 0.5 MHz; Between 0.5 MHz and 5 MHz Between 5 MHz and 30 MHz Emitted Interference < 79 dB (V)Q, < 66 dB (V)M < 73 dB (V)Q, < 60 dB (V)M < 73 dB (V)Q, < 60 dB (V)M
8.4
Relative humidity
8-11
8.5
Conditions of Use
Fail-safe modules are intended for use as permanently installed modules protected from the elements. The conditions of use exceed the requirements of IEC 61131-2. Fail-safe modules comply with the conditions of use of Class 3C3 in accordance with DIN EN 60721 3-3 (use in locations with heavy traffic and in the immediate vicinity of industrial systems with chemical emissions).
Restrictions
Fail-safe modules cannot be implemented in the following locations without additional measures being taken: Locations with a high level of ionizing radiation Locations with severe operating conditions; for example, due to Dust Corrosive vapors or gases Electrical systems in particularly hazardous areas
Systems that require special monitoring, such as: An additional measure for implementing fail-safe modules can be, for example, installing the ET 200S in cabinets.
Reduction of Oscillation
If fail-safe modules are subjected to sizable shock pulses or oscillation, you must take appropriate measures to reduce acceleration and amplitude. We recommend that you mount the ET 200S on cushioning material (for example, on a rubber-metal vibration damper).
8-12
Oscillation test in Vibration method: frequency sweeps with a rate of accordance with change velocity of 1 octave per minute. IEC 60068-2-6 (sine) 10 Hz f 58 Hz, constant amplitude 0.35 mm 58 Hz f 150 Hz, constant acceleration 5 g Vibration duration: 10 frequency sweeps per axis in each of three perpendicular axes
Shock
Shock method: half sine Shock intensity: 15 g peak value, 11 ms duration Shock direction: 3 shocks each in +/- direction in each of three perpendicular axes
Shock method: half sine Shock intensity: 25 g peak value, 6 ms duration Shock direction: 1000 shocks each in +/- direction in each of three perpendicular axes
1 ppm; 4 days
8-13
8.6
Specifications for Nominal Line Voltages, Isolation Tests, Protection Class, and Type of Protection
Test Voltages
Isolation stability is proven in routine testing with the following test voltages in accordance with IEC 61131 Part 2:
Circuits with Nominal Line Voltage Ue against Other Circuits and against the Ground 0 V < Ue 50 V Test Voltage
500 VDC
Protection Class
Protection class I in accordance with IEC 60536 (VDE 0106, Part 1), i.e., ground terminal required on DIN rail!
Type of Protection
Type of protection IP20 according to EN 60529 for all fail-safe modules, in other words: Protection from contact with standard probes. Protection from foreign bodies larger than 12.5 mm in diameter is applicable. No special protection against water.
8-14
8.7
8.7.1
Zone 2
Explosionsgefhrdete Bereiche werden in Zonen eingeteilt. Die Zonen werden nach der Wahrscheinlichkeit des Vorhandenseins einer explosionsfhigen Atmosphre unterschieden.
Zone 2 Explosionsgefahr Beispiel
explosive Gasatmosphre tritt Bereiche um Flanschverbindungen mit Flachnur selten und kurzzeitig auf dichtungen bei Rohrleitungen in geschlossenen Rumen nein auerhalb der Zone 2 Standardanwendungen von dezentraler Peripherie
sicherer Bereich
Nachfolgend finden Sie wichtige Hinweise fr die Installation der fehlersicheren Module im explosionsgefhrdeten Bereich.
Fertigungsort
Siemens AG, Bereich A&D Werner-von-Siemens-Strae 50 92224 Amberg Germany
Hinweis Module mit der Zulassung II 3 G EEx nA II T4 .. T5 drfen nur in Dezentrale Peripheriesysteme ET 200S der Gertekategorie 3 eingesetzt werden.
8-15
Instandhaltung
Fr eine Reparatur muss die betroffene Komponente an den Fertigungsort geschickt werden. Nur dort darf die Reparatur durchgefhrt werden.
Besondere Bedingungen
Die fehlersicheren Module mssen in einen Schaltschrank oder ein metallisches Gehuse eingebaut werden. Diese mssen mindestens die Schutzart IP54 (nach EN 60529) gewhrleisten. Dabei sind die Umgebungsbedingungen zu bercksichtigen, in denen das Gert installiert wird. Fr das Gehuse muss eine Herstellererklrung fr Zone 2 vorliegen (gem EN 50021). Wenn am Kabel bzw. an der Kabeleinfhrung dieses Gehuses unter Betriebsbedingungen eine Temperatur > 70 C erreicht wird oder wenn unter Betriebsbedingungen die Temperatur an der Aderverzweigung > 80 C sein kann, mssen die Temperatureigenschaften der Kabel mit den tatschlich gemessenen Temperaturen bereinstimmen. Die eingesetzten Kabeleinfhrungen mssen der geforderten IP-Schutzart und dem Abschnitt 7.2 (gem EN 50021) entsprechen. Alle Gerte, einschlielich Schalter etc., die an den Ein- und Ausgngen von fehlersicheren Modulen angeschlossen werden, mssen fr den Explosionsschutz Typ EEx nA oder EEx nC genehmigt sein. Es mssen Manahmen getroffen werden, dass die Nennspannung durch Transienten um nicht mehr als 40 % berschritten werden kann. Umgebungstemperaturbereich: 0 C bis 60 C Innerhalb des Gehuses ist an einem nach dem ffnen gut sichtbaren Platz ein Schild mit folgender Warnung anzubringen: Warnung Das Gehuse darf nur kurze Zeit geffnet werden, z. B. fr visuelle Diagnose. Bettigen Sie dabei keine Schalter, ziehen oder stecken keine Baugruppen und trennen keine elektrischen Leitungen (Steckverbindungen). Diese Warnung kann unbercksichtigt bleiben, wenn bekannt ist, dass keine explosionsgefhrdete Atmosphre herrscht.
8-16
8.7.2
Zone 2
Hazardous areas are divided up into zones. The zones are distinguished according to the probability of the existence of an explosive atmosphere.
Zone 2 Explosion Hazard Explosive gas atmosphere occurs only seldom and for a short time No Example Areas around flange joints with flat gaskets in pipes in enclosed spaces Outside zone 2 Standard distributed I/O applications
Safe area
Below you will find important information on the installation of fail-safe modules in a hazardous area.
Production Location
Siemens AG, Bereich A&D Werner-von-Siemens-Strae 50 92224 Amberg Germany
Note Modules with II 3 G EEx nA II T4 .. T5 certification can only be installed in ET 200S distributed I/O devices belonging to equipment category 3.
Maintenance
If repair is necessary, the affected component must be sent to the production location. Repairs can only be carried there.
8-17
Special Conditions
The fail-safe modules must be installed in a switch cabinet or a metal housing. These must comply with the IP54 degree of protection as a minimum. The environmental conditions under which the equipment is installed must be taken into account. There must be a manufacturer's declaration for zone 2 available for the housing (in accordance with EN 50021). If a temperature of > 70 C is reached in the cable or at the cable entry of this housing under operating conditions, or if a temperature of > 80 C can be reached at the junction of the conductors under operating conditions, the temperature-related properties of the cables must correspond to the temperatures actually measured. The cable entries used must comply with the required IP degree of protection and Section 7.2 (in accordance with EN 50021). All devices (including switches, etc.) that are connected to the inputs and outputs of fail-safe modules must be approved for EEx nA or EEx nC explosion protection. Steps must be taken to ensure that the rated voltage through transients cannot be exceeded by more than 40 %. Ambient temperature range: 0 C to 60 C A sign containing the following warning must be put up inside the housing in an easily visible position when the housing is opened: Warning The housing can only be opened for a short time (e.g. for visual diagnostics). If you do this, do not operate any switches, remove or install any modules or disconnect any electrical cables (plug-in connections). You can disregard this warning if you know that the atmosphere is not hazardous (i.e. there is no risk of explosion).
8-18
8.7.3
Zone 2
Les environnements risque d'explosion sont rpartis en zones. Les zones se distinguent par la probabilit de prsence d'une atmosphre explosive.
Zone 2 Risque d'explosion Formation rare et brve d'une atmosphre gazeuse explosive Non Exemple Environnement de raccords joints plats dans le cas de conduites dans des locaux ferms A l'extrieur de la zone 2 Utilisation standard de priphrie dcentralise
Zone sre
Vous trouverez ci-aprs des remarques importantes pour l'installation des modules de scurit dans un environnement risque d'explosion.
Lieu de production
Siemens AG, Bereich A&D Werner-von-Siemens-Strae 50 92224 Amberg Germany
Numro de contrle :
KEMA 01ATEX1238 X
Nota Les modules homologus II 3 G EEx nA II T4 .. T5 ne peuvent tre utiliss que dans des stations de priphrie dcentralise ET 200S de catgorie 3.
Entretien
Si une rparation est ncessaire, la composante concerne doit tre expdie au lieu de production. La rparation ne doit tre effectue qu'en ce lieu.
8-19
Conditions particulires
Les modules scurit intrinsque doivent tre logs dans une armoire de commande ou un botier mtallique. Ceux-ci doivent assurer au moins l'indice de protection IP54. Il faut alors tenir compte des conditions d'environnement dans lesquelles l'appareil est install. Le botier doit faire lobjet dune dclaration de conformit du fabricant pour la zone 2 (selon EN 50021). Si dans les conditions dexploitation, une temprature > 70 C est atteinte au niveau du cble ou de lentre du cble dans ce botier, ou bien si la temprature au niveau de la drivation des conducteurs peut tre > 80 C, les capacits de rsistance thermique des cbles doivent corespondre aux tempratures effectivement mesures. Les entres de cbles utilises doivent avoir le niveau de protection IP exig et tre conformes au paragraphe 7.2 (selon EN 50021). Tous les appareillages (y compris les interrupteurs, etc.) raccords aux entres et sorties de modules scurit intrinsque doivent tre homologus pour la protection antidflagrante type EEx nA ou EEx nC. Il faut prendre des mesures pour que la tension nominale ne puisse pas tre dpasse de plus de 40% sous linfluence de transitoires. Plage de temprature ambiante : 0 C 60 C A lintrieur du botier, il faut placer, un endroit bien visible aprs ouverture, une plaquette comportant lavertissement suivant : Avertissement Ouvir le botier le moins longtemps possible, par exemple pour effectuer un diagnostic visuel. Ce faisant, nactionnez aucun commutateur, ne dconnectez aucun module et ne dbanchez pas de cbles lectriques (connexions). Le respect de cet avertissement nest pas impratif sil est certain que lenvironnement ne prsente pas de risque dexplosion.
8-20
8.7.4
Zona 2
Las reas con peligro de explosin se clasifican en zonas. Las zonas se diferencian segn la probabilidad de la existencia de una atmsfera capaz de sufrir una explosin.
Zona 2 Peligro de explosin La atmsfera explosiva de gas slo se presenta rara vez y muy brevemente no Ejemplo reas alrededor de uniones abridadas con juntas planas en tuberas en locales cerrados fuera de la zona 2 Aplicaciones estndar de la periferia descentralizada
rea segura
A continuacin encontrar importantes informaciones para la instalacin de los mdulos de alta disponibilidad en reas con peligro de explosin.
Lugar de fabricacin
Siemens AG, Bereich A&D Werner-von-Siemens-Strae 50 92224 Amberg Germany
KEMA 01ATEX1238 X
II 3 G EEx nA II T4 .. T5 pueden Los mdulos con la homologacin utilizarse nicamente en unidades perifricas descentralizadas ET 200S de la categora de equipo 3.
Mantenimiento
Para una reparacin se ha de remitir el componente afectado al lugar de fabricacin. Slo all se puede realizar la reparacin.
8-21
Condiciones especiales
Los mdulos de seguridad deben ir montados en un armario de distribucin o una caja metlica. stos deben garantizar como mnimo el grado de proteccin IP54. Para ello se han de tener en cuenta las condiciones ambientales, en las cuales se instala el equipo. La caja deber contar con una declaracin del fabricante para la zona 2 (conforme a EN 50021). Si durante la operacin se alcanzara una temperatura > 70 C en el cable o la entrada de cables de esta caja o bien una temperatura > 80 C en la bifurcacin de hilos, debern adaptarse las propiedades trmicas de los cables a las temperaturas medidas efectivamente. Las entradas de cable utilizadas deben cumplir el grado de proteccin IP exigido y lo expuesto en el apartado 7.2 (conforme a EN 50021). Todos los dispositivos inclusive interruptores, etc. conectados a las entradas y salidas de mdulos de alta disponibilidad deben estar homologados para la proteccin contra explosiones del tipo EEx nA o EEx nC. Es necesario adoptar las medidas necesarias para evitar que la tensin nominal pueda rebasar en ms del 40 % debido a efectos transitorios. Margen de temperatura ambiente: 0 C hasta 60 C Dentro de la caja deber colocarse en un lugar perfectamente visible tras su apertura un rtulo con la siguiente advertencia: Precaucin Abrir la caja slo brevemente, p.ej. para el diagnstico visual. Durante este tiempo Ud. no deber activar ningn interruptor, desenchufar o enchufar mdulos ni separar conductores elctricos (conexiones enchufables). Esta advertencia puede ignorarse si Ud. sabe que en la atmsfera existente no hay peligro de explosin.
8-22
8.7.5
Zona 2
Le aree a pericolo di esplosione vengono suddivise in zone. Le zone vengono distinte secondo la probabilit della presenza di un'atmosfera esplosiva.
Zona 2 Pericolo di esplosione L'atmosfera esplosiva si presente solo raramente e brevemente No Esempio Aree intorno a collegamenti a flange con guarnizioni piatte nelle condotte in ambienti chiusi Al di fuori della zona 2 Applicazioni standard di periferia decentrata
Area sicura
Qui di seguito sono riportate delle avvertenze importanti per l'installazione delle unit ad elevata sicurezza nell'area a pericolo di esplosione.
Luogo di produzione
Siemens AG, Bereich A&D Werner-von-Siemens-Strae 50 92224 Amberg Germany
KEMA 01ATEX1238 X
II 3 G EEx nA II T4 .. T5 possono essere Le unit con l'autorizzazione impiegate solo nelle apparecchiature di periferia decentrata ET 200S della categoria di apparecchiature 3.
Manutenzione
Per una riparazione, il componente interessato deve essere inviato al luogo di produzione. La riparazione pu essere effettuata solo l.
8-23
Condizioni particolari
Le unit ad elevata sicurezza devono essere montati in un armadio elettrico o in un contenitore metallico. Questi devono assicurare almeno il tipo di protezione IP54. In questo caso bisogna tenere conto delle condizioni ambientali nelle quali l'apparecchiatura viene installata. Per il contenitore deve essere presente una dichiarazione del costruttore per la zona 2 (secondo EN 50021). Se nei cavi o nel loro punto di ingresso in questo contenitore viene raggiunta in condizioni di esercizio una temperatura > 70 C o se in condizioni di esercizio la temperatura nella derivazione dei fili pu essere > 80 C, le caratteristiche di temperatura dei cavi devono essere conformi alla temperatura effettivamente misurata. Gli ingressi dei cavi usati devono essere conformi al tipo di protezione richiesto e alla sezione 7.2 (secondo EN 50021). Tutte le apparecchiature, inclusi interruttori, ecc. che vengono collegati agli ingressi/uscite di unit ad elevata sicurezza, devono essere stati omologati per la protezione da esplosione tipo EEx nA o EEx nC. Devono essere prese delle misure per evitare che la tensione nominale possa essere superata per pi del 40% da parte di transienti. Campo termico ambientale: da 0 C a 60 C Allinterno del contenitore va apportata, in un luogo ben visibile dopo lapertura, una targhetta con il seguente avvertimento: Attenzione Il contenitore pu rimanere aperto solo per breve tempo, ad esempio per una diagnostica a vista. In tal caso non azionare alcun interruttore, non disinnestare o innestare unit e non staccare connessioni elettriche (connettori). Non necessario tenere conto di questo avvertimento se noto che non c unatmosfera a rischio di esplosione.
8-24
8.7.6
Zone 2
Explosieve gebieden worden ingedeeld in zones. Bij de zones wordt onderscheiden volgens de waarschijnlijkheid van de aanwezigheid van een explosieve atmosfeer.
Zone 2 Explosiegevaar Voorbeeld
Een explosieve gasatmosfeer Gebieden rond flensverbindingen met treedt maar zelden op en voor pakkingen bij buisleidingen in gesloten korte duur vertrekken neen Buiten de zone 2 Standaardtoepassingen van decentrale periferie
Veilig gebied
Hierna vindt u belangrijke aanwijzingen voor de installatie van de foutbestendige modulen in een explosief gebied.
Productieplaats
Siemens AG, Bereich A&D Werner-von-Siemens-Strae 50 92224 Amberg Germany
KEMA 01ATEX1238 X
Instandhouding
De te herstellen component moet voor reparatie naar de plaats van vervaardiging worden gestuurd. Alleen daar mag de reparatie worden uitgevoerd.
8-25
Speciale voorwaarden
De tegen fouten beveiligde modulen moeten worden ingebouwd in een schakelkast of in een behuizing van metaal. Deze moeten minstens de veiligheidsgraad IP54 waarborgen. Hierbij dient rekening te worden gehouden met de omgevingsvoorwaarden waarin het apparaat wordt genstalleerd. Voor de behuizing dient een verklaring van de fabrikant voor zone 2 te worden ingediend (volgens EN 50021). Als aan de kabel of aan de kabelinvoering van deze behuizing onder bedrijfsomstandigheden een temperatuur wordt bereikt > 70 C of als onder bedrijfsomstandigheden de temperatuur aan de adervertakking > 80 C kan zijn, moeten de temperatuureigenschappen van de kabel overeenstemmen met de werkelijk gemeten temperaturen. De aangebrachte kabelinvoeringen moeten de vereiste IP-veiligheidsgraad hebben en in overeenstemming zijn met alinea 7.2 (volgens EN 50021). Alle apparaten, schakelaars enz. inbegrepen, die worden aangesloten op de inen uitgangen van tegen fouten beveiligde modulen, moeten zijn goedgekeurd voor de explosiebeveiliging type EEx nA of EEx nC. Er dienen maatregelen te worden getroffen, zodat de nominale spanning door transinten met niet meer dan 40 % kan worden overschreden. Omgevingstemperatuurbereik: 0 C tot 60 C Binnen de behuizing dient op een na het openen goed zichtbare plaats een bord te worden aangebracht met de volgende waarschuwing: Waarschuwing De behuizing mag slechts voor korte tijd worden geopend, bijv. voor een visuele diagnose. Bedien hierbij geen schakelaar, trek of steek geen modulen en ontkoppel geen elektrische leidingen (steekverbindingen). Deze waarschuwing kan buiten beschouwing blijven, indien bekend is dat er geen explosieve atmosfeer heerst.
8-26
8.7.7
Zone 2
Eksplosionsfarlige omrder inddeles i zoner. Zonerne adskiller sig indbyrdes efter hvor sandsynligt det er, at der er en eksplosiv atmosfre.
Zone 2 Eksplosionsfare Eksplosiv gasatmosfre optrder kun sjldent og varer kort Nej Eksempel Omrder rundt om flangeforbindelser med flade pakninger ved rrledninger i lukkede rum Uden for zone 2 Standardanvendelser decentral periferi
Sikkert omrde
I det flgende findes vigtige henvisninger vedr. installation af de fejlsikre moduler i det eksplosionsfarlige omrde.
Produktionssted
Siemens AG, Bereich A&D Werner-von-Siemens-Strae 50 92224 Amberg Germany
KEMA 01ATEX1238 X
Vedligeholdelse
Skal den pgldende komponent repareres, bedes De sende den til produktionsstedet. Reparation m kun udfres der.
8-27
Srlige betingelser
De fejlsikre moduler skal monteres i et kontaktskab eller et metalbelagt kabinet. Disse skal mindst kunne sikre beskyttelsesklasse IP54. I denne forbindelse skal der tages hjde for de omgivelsestemperaturer, i hvilke udstyret er installeret. Der skal vre udarbejdet en erklring fra fabrikanten for kabinettet for zone 2 (iht. EN 50021). Hvis kablet eller kabelindfringen p dette hus nr op p en temperatur p > 70 C under driftsbetingelser eller hvis temperaturen p reforegreningen kan vre > 80 C under driftsbetingelser, skal kablernes temperaturegenskaber stemme overens med de temperaturer, der rent faktisk mles. De benyttede kabelindfringer skal vre i overensstemmelse med den krvede IP-beskyttelsestype og afsnittet 7.2 (iht. EN 50021). Alle apparater, inkl. kontakter osv., der forbindes med ind- og udgangene til fejlsikre moduler, skal vre godkendt til eksplosionsbeskyttelse af type EEx nA eller EEx nC. Der skal trffes foranstaltninger, der srger for, at den nominelle spnding via transienter ikke kan overskrides mere end 40 %. Omgivelsestemperaturomrde: 0 C til 60 C I kabinettet skal der anbringes et skilt, der skal kunne ses, nr kabinettet bnes. Dette skilt skal have flgende advarsel: Advarsel Kabinettet m kun bnes i kort tid, f.eks. til visuel diagnose. Tryk i denne forbindelse ikke p kontakter, trk eller ist ikke komponenter og afbryd ikke elektriske ledninger (stikforbindelser). Denne advarsel skal der ikke tages hjde for, hvis man ved, at der ikke er nogen eksplosionsfarlig atmosfre.
8-28
8.7.8
Vyhyke 2
Rjhdysvaarannetut alueet jaetaan vyhykkeisiin. Vyhykkeet erotellaan rjhdyskelpoisen ilmakehn olemassa olon todennkisyyden mukaan.
Vyhyke 2 Rjhdysvaara Rjhtv kaasuilmakeh ilmaantuu vain harvoin ja lyhytaikaisesti Esimerkki Alueet putkistojen lattatiivisteill varustuilla laippaliitoksilla suljetuissa tiloissa vyhykkeen 2 ulkopuolella hajautetun ulkopiirin vakiosovellukset
turvallinen ei alue
Seuraavasta lydtte trkeit ohjeita virheilt suojattujen rakenneryhmien asennukseen rjhdysvaarannetuilla alueilla.
Valmistuspaikka
Siemens AG, Bereich A&D Werner-von-Siemens-Strae 50 92224 Amberg Germany
KEMA 01ATEX1238 X
Kunnossapito
Korjausta varten tytyy kyseinen komponentti lhett valmistuspaikkaan. Korjaus voidaan suorittaa ainoastaan siell.
8-29
Erityiset vaatimukset
Virhevarmat moduulit tytyy asentaa kytkentkaappiin tai metalliseen koteloon.. Niden tytyy olla vhintn kotelointiluokan IP54 mukaisia. Tllin on huomioitava ympristolosuhteet, johon laite asennetaan. Kotelolle tytyy olla valmistajaselvitys vyhykett 2 varten (EN 50021 mukaan). Kun johdolla tai tmn kotelon johdon sisnviennill saavutetaan > 70 C lmptila tai kun kyttolosuhteissa lmptila voi piuhajaotuksella olla > 80 C, tytyy johdon lmptilaominaisuuksien vastata todellisesti mitattuja lmptiloja. Kytettyjen johtojen sisnohjauksien tytyy olla vaaditun IP-kotelointiluokan ja kohdan 7.2 (EN 50021 mukaan) mukaisia. Kaikkien laitteiden, kytkimet jne. mukaan lukien, jotka liitetn virheilt suojattujen rakenneryhmien tuloille ja lhdille, tytyy olla hyvksyttyj tyypin EEx nA tai EEx nC rjhdyssuojausta varten. Toimenpiteet tytyy suorittaa, ettei nimellisjnnite voi transienttien kautta ylitty enemmn kuin 40 %. Ympristlmptila-alue: 0 C ... 60 C Kotelon sislle, avauksen jlkeen nkyvlle paikalle, on kiinnitettv kilpi, jossa on seuraava varoitus: Varoitus Kotelo saadaan avata ainoastaan lyhyeksi ajaksi, esim. visuaalista diagnoosia varten. l tllin kyt mitn kytkimi, ved tai liit mitn rakenneryhmi, lk erota mitn shkjohtoja (pistoliittimi). Tt varoitusta ei tarvitse huomioida, kun on tiedossa, ett minknlaista rjhdysvaarannettua ilmakeh ei ole olemassa.
8-30
8.7.9
Zon 2
Explosionsriskomrden delas in i zoner. Zonerna delas in enligt sannolikheten att en atmosfr med explosionsfara freligger.
Zon 2 Skert omrde Explosionsfara Explosiv gasatmosfr uppstr endast sllan eller kortvarigt Nej Exempel Omrden kring flnsfrbindelser med packningar vid rrledningar i slutna utrymmen Utanfr zon 2 Standardanvndning av decentral periferi
Tillverkningsort
Siemens AG, Bereich A&D Werner-von-Siemens-Strae 50 92224 Amberg Germany
KEMA 01ATEX1238 X
Underhll
Vid reparation mste den aktuella komponenten insndas till tillverkaren. Reparationer fr endast genomfras dr.
8-31
Srskilda villkor
De felskrade modulerna mste monteras i ett kopplingsskp eller metallhus. Dessa mste minst vara av skyddsklass IP54. Drvid ska omgivningsvillkoren dr enheten installeras beaktas. Fr kpan mste en tillverkardeklaration fr zon 2 freligga (enligt EN 50021). Om en temperatur p > 70C uppns vid husets kabel resp kabelinfring under driftvillkor eller om temperaturen vid trdfrgreningen kan vara > 80C under driftvillkor, mste kabelns temperaturegenskaper verensstmma med den verkligen uppmtta temperaturen. De anvnda kabelinfringarna mste uppfylla kraven i det krvda IPskyddsutfrandet och i avsnitt 7.2 (enligt EN 50021). Alla apparater, inklusive brytare osv, som ansluts till felskrade modulers inoch utgngar, mste vara godknda fr explosionsskydd av typ EEx nA eller EEx nC. tgrder mste vidtas s, att mrkspnningen ej kan verskridas med mer n 40% genom transienter. Omgivningstemperatur: 0 C till 60 C Nr huset ppnats ska en skylt med fljande varning monteras p ett tydligt synligt stlle huset: Varning Huset fr endast ppnas under kort tid, t ex fr visuell diagnos. Anvnd drvid inga brytare, lossa eller anslut inga enheter och frnskilj inga elektriska ledningar (insticksanslutningar). Ingen hnsyn mste tas till denna varning om det r skert att det inte rder ngon explosionsfarlig atmosfr.
8-32
8.7.10
Uso de mdulos protegidos contra erro em rea exposta ao perigo de exploso, zona 2
Zona 2
As reas expostas ao perigo de exploso so divididas em zonas. As zonas so diferenciadas de acordo com a probabilidade da existncia de uma atmosfera explosiva.
Zona 2 Perigo de exploso S raramente e por um breve perodo de tempo surgem atmosferas explosivas no Exemplo reas em torno de ligaes flangeadas com vedaes chatas em tubulaes em recintos fechados fora da zona 2 Aplicaes descentralizadas de periferia descentralizada
rea segura
A seguir, o Sr. encontrar avisos importantes para a instalao dos mdulos protegidos contra erro em rea exposta ao perigo de exploso.
Local de produo
Siemens AG, Bereich A&D Werner-von-Siemens-Strae 50 92224 Amberg Germany
KEMA 01ATEX1238 X
Reparo
Os componentes em questo devem ser remetidos para o local de produo a fim de que seja realizado o reparo. Apenas l deve ser efetuado o reparo.
8-33
Condies especiais
Os mdulos sem defeito devem ser montados dentro de um armrio do quadro de comandos ou de uma caixa metlica. Estes devem garantir no mnimo o tipo de proteo IP54. Durante este trabalho devero ser levados em considerao as condies locais, nas quais o aparelho ser instalado. Para a caixa dever ser apresentada uma declarao do fabricante para a zona 2 (de acordo com EN 50021). Caso no cabo ou na entrada do cabo desta carcaa sob as condies operacionais seja atingida uma temperatura de > 70 C, ou caso sob condies operacionais a temperatura na ramificao do fio poder atingir > 80 C, as caratersticas de temperatura devero corresponder s temperaturas realmente medidas. As entradas de cabo utilizadas devem corresponder ao tipo exigido de proteo IP e seo 7.2 (de acordo com o EN 50021). Todos os aparelhos, inclusive as chaves, etc., que estejam conectadas em entradas e sadas de mdulos protegidos contra erro, devem possuir a licena para a proteo de exploso do tipo EEx nA ou EEx nC. Precisam ser tomadas medidas para que a tenso nominal atravs de transitrios no possa ser ultrapassada em mais que 40 %. rea de temperatura ambiente: 0 C at 60 C No mbito da carcaa deve ser colocada, aps a abertura, em um ponto bem visvel uma placa com a seguinte advertncia: Advertncia A carcaa deve ser aberta apenas por um breve perodo de tempo, por ex. para diagnstico visual. No acione nenhum interruptor, no retire ou conecte nenhum mdulo e no separe nenhum fio eltrico (ligaes de tomada). Esta advertncia poder ser ignorada caso se saiba que no h nenhuma atmosfera sujeita ao perigo de exploso.
8-34
8.7.11
, 2
2
. .
2 2
Siemens AG, Bereich A&D Werner-von-Siemens-Strae 50 92224 Amberg Germany
ET 200S
II 3 G : II 3 G EEx nA II T4 .. T5 ET 200S 3. EEx nA II T4 .. T5 EN 50021 : 1999
KEMA 01ATEX1238 X
. .
8-35
/ . IP54. , . 2 ( EN 50021). 70 C 80 C, . IP 54 7.2 ( EN 50021). , .., , EEx nA EEx nC. , 40 %. : 0 C 60 C : , .. . , ( ). , .
: http://www4.ad.siemens.de/ww/view/en/ 13702947.
8-36
9
9.1
Overview
Fail-Safe Modules
Introduction
Fail-safe power modules and fail-safe digital modules are available for connecting digital sensors or encoders and actuators or loads to ET 200S. This chapter provides the following information for each fail-safe module: Properties and special features Front view, terminal assignment for terminal modules, and block diagram Wiring diagram and programmable parameters Diagnostic functions, including corrective measures Technical specifications Warning The safety characteristics in the Technical Specifications apply for a proof-test interval of 10 years and a repair time of 100 hours.
9-1
Fail-Safe Modules
9.2
Order Number
6ES7 138-4CF01-0AB0
Properties
The PM-E F pm DC 24V PROFIsafe power module has the following properties: Two relays for connecting voltage buses P1 and P2, 10 A output current Two fail-safe digital outputs, P/M switching (current sourcing/sinking), 2 A output current 24 VDC rated load voltage Suitable for solenoid valves, DC contactors, and indicator lamps Group fault display (SF; red LED) Status display for each output (green LED) Status display for load current power supply (PWR; green LED) Selectable diagnostics For achievable safety classes (safety integrity level), see following table
Table 9-1 Overview of Achievable Safety Classes (Safety Integrity Levels) with PM-E F pm DC 24V PROFIsafe Maximum Safety Level That Can Be Achieved Signal changes at least once a day Signal changes less frequently than once a day With standard DO modules Electronic outputs DO 0 and DO 1 Without standard DO modules on P1 and P2 With standard DO modules on P1 and P2 AK6/SIL3/Category 4
AK4/SIL2/Category 3
9-2
Fail-Safe Modules
Warning Always connect the 24 VDC supply for the standard ET 200S modules on the PM-E F pm DC 24V PROFIsafe. Otherwise, the outputs of DO modules may exhibit safety-critical behavior.
Warning When supplying standard DO modules, always use the terminal modules to supply the sensors or actuators (actuator feedback on the DO module). Otherwise, the power module signals a short circuit and the load voltage of this voltage group is interrupted.
9-3
Fail-Safe Modules
Warning Fail-safe activation of outputs of standard DO modules is not possible, but only fail-safe deactivation . You must therefore take the following effects into account: In the worst case situation, you must expect every possible fault/error that can occur with the standard DO modules and the program controlling them for which there is no direct error detection. For example, the PM-E F pm DC 24V PROFIsafe power module does not detect external short circuits after L+ on the outputs of standard DO modules. All errors of the standard DO modules influence the process via final control elements. The process must be made known to the F-CPU via sensors and a suitable safety program. The safety program must react in a safety-related and logically suitable fashion to unwanted or potentially dangerous states in the process via the PM-E F pm DC 24V PROFIsafe and fail-safe output modules.
If you want to avoid the problems described above completely, we recommend that you use P/M switching fail-safe electronic modules 4 F-DO DC 24V/2A PROFIsafe with standard ET 200S power modules (see Section 9.6 and Table 3-3) instead of standard DO modules. Property of the safety-related shutdown of standard DO modules by the PM-E F pm DC 24V PROFIsafe: With this cost-effective solution, when a fault is discovered in the process or on the PM-E F pm DC 24V PROFIsafe, there is a comprehensive and simultaneous shutdown of all outputs involved. Property of individual shutdown of F-modules with fail-safe outputs: If a fault is discovered, the extent of the shutdown is kept to a minimum. It is also possible to react to critical process states staggered over time or outputs can be shut down individually and safety-related. This solution is expensive compared with the safety-related shutdown by the PM-E F pm DC 24V PROFIsafe.
9-4
Fail-Safe Modules
Output driver
P1 1P5
Loa
Readback M bus
Figure 9-1 Connecting Non-Floating Loads (resistance exists between chassis and ground)
9-5
Fail-Safe Modules
Incoming Supply of the 24 VDC Supply for Electronic Modules with ProcessRelated Functions
Depending on whether the electronic and load current supplies are electrically isolated in the electronic modules with process-related functions (positioning, counting), you must adhere to the following wiring instructions: If electrically isolated, provide an external 24 VDC feed for the electronic module. If electrical isolation is not implemented, you must supply the electronic module from the voltage bus P1 of the PM-E F pm DC 24V PROFIsafe power module. AK4/SIL2/Category 3 is attainable in both cases.
9-6
Fail-Safe Modules
Front View
PM-E F pm DC24V
Warning The SF LED and the status displays of the outputs must not be evaluated for failsafe activities.
Terminal Assignment
The terminal assignment of the PM-E F pm DC 24V PROFIsafe power module for the usable terminal modules TM-P30S44-A0 and TM-P30C44-A0 is shown in the following figure and table.
AUX1
A 4 A 8
13
DO0 DO1 P P
10
14
3 A 4
7 A 8
11
15
12
16
DO2 DO2 M M
Figure 9-3 Terminal Assignment of the TM-P30S44-A0 or TM-P30C44-A0 for PM-E F pm DC 24V PROFIsafe
9-7
Fail-Safe Modules
Table 9-3
Terminal
2 24 VDC
Designation
24 VDC rated load voltage for:
Inserted power module, Corresponding voltage group, DO 0 and DO 1 and Voltage buses P1 and P2
3 A 4 6
M AUX 1 24 VDC
Ground Any terminal for PE or voltage bus up to the maximum rated load voltage of the module 24 VDC rated load voltage for:
Inserted power module, Corresponding voltage group, DO 0 and DO 1 and voltage buses P1 and P2
7 A 8 9 10 11 12 13 14 15 16
M AUX 1 DO 0 P DO 0 M DO 2 P DO 2 M DO 1 P DO 1 M DO 2 P DO 2 M
Ground Any terminal for PE or voltage bus up to the maximum rated load voltage of the module Terminals for fail-safe digital output 0 (P/M switching) Terminals (relay contacts) for fail-safe connection of voltage buses P1 and P2 P1 and P2 can also be used as DO 2 M and DO 2 P Terminals for fail-safe digital output 1 (P/M switching) Terminals (relay contacts) for fail-safe connection of voltage buses P1 and P2 P1 and P2 can also be used as DO 2 M and DO 2 P
Caution If high currents can occur on DO 2 P and DO 2 M, both terminals 11 and 15 (DO 2 P) and terminals 12 and 16 (DO 2 M) must be wired in parallel. Otherwise, the current loading could cause the terminals to heat up.
9-8
Fail-Safe Modules
Block Diagram
P-switch 9
Processing logic
Readback
13 10
SF M
14
12,16 P1 P2 11,15
Relay
5V 24
M24 3,7
P24 2,6
9-9
Fail-Safe Modules
Wiring Diagram
The three digital outputs each consist of one P-switch (current sourcing) DOx P and one M-switch (current sinking) DOx M. They connect the load between the P and M-switches. Both switches are always set so that voltage is applied to the load. The power module is wired on the special terminal module.
PM-E F pm DC24V
P1 (M) P2 (P) DO3 M DO4 M DO5 M
L+ M
K0
K1
K2
K3
K4
K5
L+ M
Figure 9-5
Warning To protect the relay contacts from overload, please use an external circuit breaker for L+ on the PM-E F pm with the following properties: Circuit breaker with characteristic B according to IEC 947-5-1, 10 A.
Relay Output DO 2
The relay output DO 2 connects the voltage L+ and M using one relay contact for each. The voltage is fed outwards to the terminal module and to the internal voltage buses P1 and P2. This results in two connection options that can be used at the same time: A load can be connected directly to the terminal module (K2 in Figure 9-5). Electronic modules can be supplied by means of the internal voltage buses P1 and P2. In turn, loads can be connected to these modules (K3, K4, K5 in Figure 9-5).
9-10
Fail-Safe Modules
L+ M
DO0 (P)
DO0 (M)
DO1 (P)
DO1 (M)
K1
K2
K3
K4 K1 K2 M M K3 K4
L+ M
Figure 9-6
Wiring Diagram for Each of Two Relays on DO 0 and DO 1 of the PM-E F pm DC 24V PROFIsafe
Warning When connecting two relays on one digital output, (as shown in the figure above), the errors "wire break and "overload are detected only at the P-switch (not at the M-switch). The controlled actuator can no longer be switched off when there is a cross circuit between the P and M-switches of the output.
Warning To avoid cross circuits between P and M-switches of a fail-safe digital output, you should connect the relay on the between P and M-switches to protect against cross circuits (for example with cables separately sheathed or in a separate cable duct).
9-11
Fail-Safe Modules
Avoiding/Dealing with Cross Circuits To protect against cross circuits between P and M-switches of a fail-safe digital output, we recommend the following wiring schemes:
PM-E F pm DC24V
P1 (M) P2 (P) DO3 M DO4 M DO5 M
L+ M
DO0 (P) K1
DO0 (M)
DO1 (P) K3
DO1 (M)
K1 K2 K4 K2 M L+ M M
K3 K4
Figure 9-7
Wiring Diagram for Each of Two Relays on DO 0 and DO 1 of the PM-E F pm DC 24V PROFIsafe
Note If two relays are connected in parallel to one digital output (as shown in the figure above), "wire break is detected only if the wire break disconnects both relays from P or M. This diagnostics is not relevant to safety.
9-12
Fail-Safe Modules
Parameters in STEP 7
The following table presents the parameters that can be assigned for the PM-E F pm DC 24V PROFIsafe power module (see also Chapter 4).
Table 9-4 Parameters of the PM-E F pm DC 24V PROFIsafe
Parameter F-Parameter:
F_destination_address
Range
Default Setting
Assigned by STEP 7 150 ms, typical Activated 1 ms, typical Deactivated Activated 1 ms, typical Deactivated
Type of Parameter
Static
Effective Range
Module
1 to 1022
F-monitoring time
10 to 10,000 ms
Static
Module
Module Parameters:
DO channel 0 Readback time Diagnostics: Wire break DO channel 1 Readback time Diagnostics: Wire break Activated/ deactivated 1 to 400 ms Activated/ deactivated Activated/ deactivated 1 to 400 ms Activated/ deactivated Static Static Static Static Static Static Channel Channel Channel Channel Channel Channel
Readback Time
Each output channel has its own selectable readback time. This time specifies the maximum duration of the turn off test for the corresponding channel and therefore also the readback time for turning off the channel. You can set the following readback times: 1 ms, 5 ms, 10 ms, 50 ms, 100 ms, 200 ms and 400 ms. You should set an adequately high readback time if the channel involved switches high capacitive loads. If the readback time for a controlled capacitive load is set too low, the output channel is passivated because the discharge of the capacitance does not take place within the turn off test. If the readback signals are incorrect, the "short circuit" error causes the passivation of the output channel after the readback time elapses. Connecting capacitive loads If the electronic outputs of the PM-E F pm DC 24V PROFIsafe are connected to loads that require little current and have capacitance, this can lead to the "short circuit" error message. Reason: Capacitance cannot be sufficiently discharged during the set self-test readback time. The following figure shows the typical curves of the selectable readback times indicating the relationship between load resistance and connectable load capacitance.
ET 200S Distributed I/O System Fail-Safe Modules A5E00103686-03
9-13
Fail-Safe Modules
10.000,0
1.000,0
Capacitive load in F
100,0
10,0
1,0
0,1 9 20 50 100 200 500 750 1000 1250 1500 1750 2000
Load current in m A
with readback tim e set to 1 m s
Figure 9-8
Relationship between Load Resistance and Connectable Load Capacitance for PM-E F pm DC 24V PROFIsafe
Remedy: 1. Determine the load current and capacitance of the load. 2. Determine the operating point in the figure above. 3. If the operating point is above the curve, you must increase the load current until the new operating point is below the curve by connecting a resistor in parallel.
9-14
Fail-Safe Modules
9.2.1
Diagnostic Functions
The following table presents an overview of the diagnostic functions of the PM-E F pm DC 24V PROFIsafe power module. The diagnostic functions are assigned either to one channel or the entire module.
Table 9-5 Diagnostic Functions of the PM-E F pm DC 24V PROFIsafe
Diagnostic Function*
Short circuit Overload Overtemperature Wire break Internal error Parameter assignment error Missing external auxiliary supply Communication error Safety-related deactivation
*
Fault Number
1H 4H 5H 6H 9H 10H 11H 13H 19H
LED
SF SF SF SF SF SF PWR SF SF
Configur able
No No No Yes No No No No No
9-15
Fail-Safe Modules
Diagnostic Message
Short circuit
Error Detection
Always
Possible Causes
Short circuit in the actuator Cross-circuit in the actuator Internal error Wire break, if wire break diagnostic has been deactivated
Corrective Measures
Eliminate short circuit/cross circuit Once the error is eliminated, the module must be removed and reinserted or powered off and on Replace module Eliminate broken wire Ensure specified minimum load (see Section 9.2.2) Once the error is eliminated, the module must be removed and reinserted or powered off and on
Short circuit in P1 and P2, because actuators connected to standard DO modules are not supplied by means of the terminal modules of the standard DO modules Overload For "1" output signal only Always Output stage is overloaded and becomes too hot Temperature limit in the module housing is exceeded causing module to be switched off
Supply actuators connected to standard DO modules over the terminal modules of the standard DO modules Once the error is eliminated, the module must be removed and reinserted or powered off and on
Eliminate overload Once the error is eliminated, the module must be removed and reinserted or powered off and on Check load wiring, check ambient temperature, and check whether permissible output current for the ambient temperature is exceeded Once the error is eliminated, the module must be removed and reinserted or powered off and on
Overtemperature
9-16
Fail-Safe Modules
Diagnostic Message
Wire break
Error Detection
For "1" output signal only Always Always
Possible Causes
Line break
Corrective Measures
Correct the process wiring, and check whether the output current is less than the minimum permissible output current of 20 mA Replace module Correct the configuration (compare actual and preset configuration), and check communication paths Correct the parameter assignment Check whether the PROFIsafe address on the module matches the configuration in STEP 7 HW Config Check module for correct contact Once the error is eliminated, the module must be removed and reinserted or powered off and on
Internal module fault has occurred Inserted module does not match configuration Faulty parameter assignment PROFIsafe address set incorrectly in the F-module
Always
No supply voltage or supply voltage is too low (e.g. load voltage drop at F module)
Always
Error in Check the PROFIBUS connection communication Eliminate the interference between F-CPU and module due to defective PROFIBUS connection or higher than permissible EMI, for example PROFIsafe monitoring time set too low Configuration of the F-module does not agree with fail-safe program Set a higher value for the "F-monitoring time parameter for the module in STEP 7 HW Config Recompile the safety program; then download the configuration and safety program to the F-CPU again Reduce the switching frequency or use a semiconductor output
Safety-related shutdown
Always
9-17
Fail-Safe Modules
9.2.2
Module-Specific Data
Number of outputs
Semiconductor outputs (P/M switching) Relay outputs (P-M switching) In the I/O area for inputs In the I/O area for outputs Unshielded Shielded Complying with IEC 1508, DIN VDE 0801 and EN 954
2 1 5 bytes 5 bytes 200 m, maximum 200 m, maximum max. SIL3, AK6, Category 4: Contrains see Chapter 4 SIL3
Length of cable
Low demand mode (average probability << 1.00 E-05 of failure on demand) High demand/continuous mode (probability of a dangerous failure per hour) << 1.00 E-10
Permissible range Power loss ride-through of L+ Power loss ride-through of internal P5 Reverse polarity protection
9-18
Fail-Safe Modules
Technical Specifications
Aggregate current
Horizontal installation
-
10 A 7A 6A 6A Yes No No Yes
Vertical installation
-
Electrical isolation
Between channels and backplane bus Between channels and power supply Between channels Between channels/power supply and shield Shield and ET 200S bus connection Shield and I/O (DOs, P1/P2 buses) ET 200S bus connection and I/O (DOs, P1/P2 buses) Shield and ET 200S bus connection Shield and I/O (DOs, P1/P2 buses) ET 200S bus connection and I/O (DOs, P1/P2 buses) Shield and ET 200S bus connection Shield and I/O (DOs, P1/P2 buses) ET 200S bus connection and I/O (DOs, P1/P2 buses) Impulse current test between ET 200S bus connection and I/O (DOs, P1/P2 buses) From backplane bus From load voltage L+ (without load)
500 VDC/1 min or 600 VDC/1 s 500 VDC/1 min or 600 VDC/1 s 1500 VAC/1 min or 2545 VDC/1 s
350 VAC/1 min 350 VAC/1 min 2830 VAC/1 min 6000 VDC/5 positive and 5 negative pulses
Current consumption
Green LED per channel Green LED for the load voltage
9-19
Fail-Safe Modules
Technical Specifications Data for Selecting an Actuator for the Semiconductor Outputs*
Output voltage
Minimum L+ (-2.0 V) P-switch: min. L+ (-1,5 V), voltage drop at M-switch: max. 0.5 V
For "0 signal (residual current) Indirect control of load by means of interface relay: Residual current for "0 signal
P-switch M-switch
Load resistance range Lamp load Wire break monitoring (open load detection) and overload monitoring
I < 4 to 19 mA Depending on the selected readback time (see Chapter 13) Not possible Not possible 30 Hz, maximum 0.1 Hz, maximum 10 Hz, maximum
With resistive load With inductive load in accordance with IEC 947-5-1, DC13 With lamp load
Response threshold of short circuit Response threshold ext. M short circuit Response threshold ext. P short circuit
Response threshold
9-20
Fail-Safe Modules
Technical Specifications Data for Selecting an Actuator for the Relay Outputs*
Switching capacity and service life of the contacts (at 24 VDC)
Current 0A
No. of switching cycles (typical) 10 million No. of switching cycles (typical) 0.23 million 0.3 million 0.38 million 0.5 million 1.0 million 2.0 million No. of switching cycles (typical) 0.1 million 0.15 million 0.2 million 0.3 million 0.5 million 1.0 million No. of switching cycles (typical) 0.12 million
Current 10 A 8A 6A 4A 2A 1A
Current 10 A 8A 6A 4A 2A 1A
Power 100 W
Wire break monitoring Parallel connection of 2 outputs Control of a digital input Switching frequency
With resistive load With inductive load in accordance with IEC 947-5-1, DC13 With lamp load
2 Hz, maximum 0.1 Hz, maximum 2 Hz, maximum No, external miniature circuit breaker, "B" characteristic (in accordance with IEC 947-5-1), 10 A required See Chapter 13 4 ms minimum/8 ms maximum
Time, Frequency
Internal preparation times Acknowledgment time in safety mode
9-21
Fail-Safe Modules
Protection of outputs from surge in accordance with IEC 61000-4-5 with external protection elements only
*
9-22
Fail-Safe Modules
9.3
Order Number
6ES7 138-4CF40-0AB0
Properties
The PM-E F pp DC 24V PROFIsafe power module has the following properties:
Two relays for connecting voltage bus P2, 10 A output current Relay contacts must be fused externally 24 VDC rated load voltage Suitable for solenoid valves, DC contactors, and indicator lamps Suitable for applications for which a grounded configuration is necessary or in which a floating configuration cannot be guaranteed Group fault display (SF; red LED) Status display for voltage bus P2 (green LED) Status display for load current power supply (PWR; green LED) Selectable diagnostics For achievable safety classes (safety integrity level), see following table
Table 9-7 Overview of Achievable Safety Classes (Safety Integrity Levels) with the PM-E F pp DC 24V PROFIsafe
AK4/SIL2/Category 3
AK4/SIL2/Category 3
9-23
Fail-Safe Modules
Condition
ET 200S standard modules supplied by means of P2 The relays are switched at least once in the second error entry time; no supply of ET 200S standard modules via P2
Achievable AK/SIL/Category
AK4/SIL2/Category 3 on P2 AK6/SIL3/Category 4 on P2
Warning Always connect the 24 VDC supply for the standard ET 200S modules on the PM-E F pp DC 24V PROFIsafe. Otherwise, the outputs of DO modules may exhibit safety-critical behavior.
Warning When supplying standard DO modules, always use the terminal modules to supply the sensors or actuators (actuator feedback on the DO module). Otherwise, the power module signals a short circuit and the load voltage of this voltage group is interrupted.
9-24
Fail-Safe Modules
Warning Fail-safe activation of outputs of standard DO modules is not possible, but only fail-safe deactivation. You must therefore take the following effects into account:
In the worst case situation, you must expect every possible fault/error that can occur with the standard DO modules and the program controlling them for which there is no direct error detection. For example, the PM-E F pp DC 24V PROFIsafe power module does not detect external short circuits after L+ on the outputs of standard DO modules. All errors of the standard DO modules influence the process via final control elements. The process must be made known to the F-CPU via sensors and a suitable safety program. The safety program must react in a safety-related and logically suitable fashion to unwanted or potentially dangerous states in the process via the PM-E F pp DC 24V PROFIsafe and fail-safe output modules.
If you want to avoid the problems described above completely, we recommend that you use P/M switching fail-safe electronic modules 4 F-DO DC 24V/2A PROFIsafe with standard ET 200S power modules (see Section 9.6 and Table 3-3) instead of standard DO modules.
Property of the safety-related shutdown of standard DO modules by the PM-E F pp DC 24V PROFIsafe:
With this cost-effective solution, when a fault is discovered in the process or on the PM-E F pp DC 24V PROFIsafe, there is a comprehensive and simultaneous shutdown of all outputs involved.
Property of individual shutdown of F-modules with fail-safe outputs:
If a fault is discovered, the extent of the shutdown is kept to a minimum. It is also possible to react to critical process states staggered over time or outputs can be shut down individually and safety-related. This solution is expensive compared with the safety-related shutdown by the PM-E F pp DC 24V PROFIsafe.
Incoming Supply of the 24 VDC Supply for Electronic Modules with ProcessRelated Functions
Depending on whether the electronic and load current supplies are electrically isolated in the electronic modules with process-related functions (positioning, counting), you must adhere to the following wiring instructions:
If electrically isolated, provide an external 24 VDC feed for the electronic module. If electrical isolation is not implemented, you must supply the electronic module from the voltage bus P2 of the PM-E F pp DC 24V PROFIsafe power module.
9-25
Fail-Safe Modules
Front View
Group error display - red
PM-E F pp DC24V
Warning The SF LED and the status displays of the outputs must not be evaluated for failsafe activities.
Terminal Assignment
The terminal assignment of the PM-E F pp DC 24V PROFIsafe power module for the usable terminal modules TM-P30S44-A0 and TM-P30C44-A0 is shown in the following figure and table.
AUX1
A 4 A 8
13
10
14
3 A 4
7 A 8
11
15
12
16
Figure 9-10 Terminal Assignment of the TM-P30S44-A0 or TM-P30C44-A0 for PM-E F pp DC 24V PROFIsafe
9-26
Fail-Safe Modules
Table 9-9
Terminal
2 24 VDC
Designation
24 VDC rated load voltage for:
3 A 4 6
M AUX 1 24 VDC
Ground Any terminal for PE or voltage bus up to the maximum rated load voltage of the module 24 VDC rated load voltage for:
7 A 8 11 12 15 16
M AUX 1 P M P M
Ground Any terminal for PE or voltage bus up to the maximum rated load voltage of the module Terminals (relay contacts) for fail-safe connection of voltage bus P2 Terminals (relay contacts) for fail-safe connection of voltage bus P2
Caution If high currents can occur on DO 2 P and DO 2 M, both terminals 11 and 15 (P) and terminals 12 and 16 (M) must be wired in parallel.
Otherwise, the current loading could cause the terminals to heat up.
9-27
Fail-Safe Modules
Block Diagram
SF M Readback
Processing logic
P24 2,6
Figure 9-11
9-28
Fail-Safe Modules
Wiring Diagram
The power module is wired on the special terminal module.
PM-E F pp DC24V
P1 (M) P2 (P) DO3 M DO4 M DO5 M
P2 (P) L+ M
P1 (M)
K1
K2
K3
K4
L+ M
Figure 9-12
Warning To protect the relay contacts from overload, please use an external circuit breaker for L+ on the PM-E F pp with the following properties: Circuit breaker with characteristic B according to IEC 947-5-1, 10 A.
Relay output
The relay output connects the L+ voltage over two relay contacts. The connected voltage is fed outwards to the terminal module and to the internal voltage buses P1 and P2. This results in two connection options that can be used at the same time:
A load can be connected directly to the terminal module (K1 in Figure 9-12). Electronic modules can be supplied by means of the internal voltage buses P1 and P2. In turn, loads can be connected to these modules (K2, K3, K4 in Figure 9-12).
9-29
Fail-Safe Modules
Parameters in STEP 7
The following table lists the parameters that can be assigned for the PM-E F pp DC 24V PROFIsafe power module (see also Chapter 4).
Table 9-10 Parameters of the PM-E F pp DC 24V PROFIsafe
Parameter F-Parameter:
F_destination_address
Range
Default Setting
Assigned by STEP 7 150 ms, typical
Type of Parameter
Static
Effective Range
Module
1 to 1022
F-monitoring time
10 to 10,000 ms
Static
Module
9.3.1
Diagnostic Functions
The following table presents an overview of the diagnostic functions of the PM-E F pp DC 24V PROFIsafe power module. The diagnostic functions are assigned either to one channel or the entire module.
Table 9-11 Diagnostic Functions of the PM-E F pp DC 24V PROFIsafe
Diagnostic Function*
Short circuit Overtemperature Internal error Parameter assignment error Missing external auxiliary supply Communication error Safety-related deactivation
*
Fault Number
1H 5H 9H 10H 11H 13H 19H
LED
SF SF SF SF PWR SF SF
Configur able
No No No No No No No
9-30
Fail-Safe Modules
Diagnostic Message
Short circuit
Error Detection
Always
Possible Causes
Corrective Measures
Short circuit between Eliminate short circuit/cross circuit P1 and L+ Once the error is eliminated, the module must be removed and reinserted or powered off and on Temperature limit in the module housing is exceeded causing module to be switched off Check load wiring, check ambient temperature, and check whether permissible output current for the ambient temperature is exceeded Once the error is eliminated, the module must be removed and reinserted or powered off and on
Overtemperature
Always
Always Always
Internal module fault has occurred Inserted module does not match configuration Faulty parameter assignment PROFIsafe address set incorrectly in the F-module
Replace module Correct the configuration (compare actual and preset configuration), and check communication paths Correct the parameter assignment Check whether the PROFIsafe address on the module matches the configuration in STEP 7 HW Config Check module for correct contact Once the error is eliminated, the module must be removed and reinserted or powered off and on
Always
No supply voltage or supply voltage is too low (e.g. load voltage drop at F module)
9-31
Fail-Safe Modules
Diagnostic Message
Communication error
Error Detection
Always
Possible Causes
Error in communication between F-CPU and module due to defective PROFIBUS connection or higher than permissible EMI, for example PROFIsafe monitoring time set too low Configuration of the F-module does not agree with fail-safe program
Corrective Measures
Check the PROFIBUS connection Eliminate the interference
Set a higher value for the "F-monitoring time parameter for the module in STEP 7 HW Config Recompile the safety program; then download the configuration and safety program to the F-CPU again Reduce the switching frequency
Safety-related shutdown
Always
9.3.2
Module-Specific Data
Number of outputs
Relay outputs (PP switching) In the I/O area for inputs In the I/O area for outputs Unshielded Shielded
Length of cable
9-32
Fail-Safe Modules
Technical Specifications
Maximum achievable safety class
Low demand mode (average probability << 1.00 E-05 of failure on demand) High demand/continuous mode (probability of a dangerous failure per hour) << 1.00 E-10
Permissible range Power loss ride-through of L+ Power loss ride-through of internal P5 Reverse polarity protection Horizontal installation
-
Total current of the relay output Up to 40C Up to 55C Up to 60C Up to 40C 10 A 8A 7A 8A Yes No Yes
Vertical installation
-
Electrical isolation
Between output and backplane bus Between output and power supply Between output/power supply and shield Shield and ET 200S bus connection Shield and I/O (DOs, P1/P2 buses) ET 200S bus connection and I/O (DOs, P1/P2 buses)
9-33
Fail-Safe Modules
Technical Specifications
Isolation in the series tested with
Shield and ET 200S bus connection Shield and I/O (DOs, P1/P2 buses) ET 200S bus connection and I/O (DOs, P1/P2 buses) Shield and ET 200S bus connection Shield and I/O (DOs, P1/P2 buses) ET 200S bus connection and I/O (DOs, P1/P2 buses) Impulse current test between ET 200S bus connection and I/O (DOs, P1/P2 buses) From backplane bus From load voltage L+ (without load)
500 VDC/1 min or 600 VDC/1 s 500 VDC/1 min or 600 VDC/1 s 1500 VAC/1 min or 2545 VDC/1 s
350 VAC/1 min 350 VAC/1 min 2830 VAC/1 min 6000 VDC/5 positive and 5 negative pulses
Current consumption
Green LED per channel Green LED for the load voltage
Current 0A
No. of switching cycles (typical) 10 million No. of switching cycles (typical) 0.23 million 0.3 million 0.38 million 0.5 million 1.0 million 2.0 million
Current 10 A 8A 6A 4A 2A 1A
9-34
Fail-Safe Modules
Technical Specifications
Current 10 A 8A 6A 4A 2A 1A
No. of switching cycles (typical) 0.1 million 0.15 million 0.2 million 0.3 million 0.5 million 1.0 million No. of switching cycles (typical) 0.12 million
Power 100 W
Internal readback circuit 39 V suppressor diode No Not possible Possible 2 Hz, maximum 0.1 Hz, maximum 2 Hz, maximum No, external miniature circuit breaker, "B" characteristic (in accordance with IEC 947-5-1), 10 A required See Chapter 13 4 ms minimum/8 ms maximum
Wire break monitoring Parallel connection of 2 outputs Control of a digital input Switching frequency
With resistive load With inductive load in accordance with IEC 947-5-1, DC13 With lamp load
Time, Frequency
Internal preparation times Acknowledgment time in safety mode
Protection of outputs from surge in accordance with IEC 61000-4-5 with external protection elements only
*
9-35
Fail-Safe Modules
9.4
Order Number
3RK1 903-3BA00
Properties
The PM-D F DC 24V PROFIsafe power module has the following properties:
6 safety groups SG 1 through SG 6 Output current of SG 1 through SG 6, each 3 A (total current 5 A) Rated load voltage DC 24 V per safety group Suitable for the supply of: -
Fail-safe motor starters F-DS1e-x, F-RS1e-x, Fail-safe connection multipliers F-CM, Fail-safe power/expansion modules PM-D F X1. Brake Control expansion modules xB1, xB2, xB3 and xB4
Group fault display (SF; red LED) Status display per safety group (SG 1 through SG 6; green LED) Status display for load current power supply (PWR; green LED) Status display for electronic power supply (U1; green LED) Achievable safety class (safety integrity level) AK6/SIL3/Category 4
9-36
Fail-Safe Modules
Condition
Fail-safe motor starters are expanded with the expansion modules:
Achievable AK/SIL/Category
AK4/SIL2/Category 3
Brake Control xB3 and xB4 AK6/SIL3/Category 4 Fail-safe motor starters F-DS1e-x and F-RS1e-x only, Fail-safe connection multipliers F-CM Fail-safe power/expansion modules PM-D F X1.
Fail-safe motor starters are expanded with the expansion modules: Brake Control xB1 and xB2
Note The safety classes (safety integrity levels) AK4/SIL2/Category 3 or AK6/SIL3/Category 4 can only be achieved with the modules specified in the "Condition" column. Configurations with other modules (for example motor starter DS1-x/RS1x, DS1e-x/RS1e-x, DSS1e-x) are not permitted for safety-related applications.
9-37
Fail-Safe Modules
Front View
PM-D F PROFIsafe
Status display for load current supply - green Status display for electronics supply of the motor starters - green
DC24V DC24V (supply) M (supply) Figure 9-13 Front View of the PM-D F DC 24V PROFIsafe M
Warning The SF LED and the status displays of the outputs must not be evaluated for failsafe activities.
9-38
Fail-Safe Modules
Terminal Assignment
On the PM-D F DC 24V PROFIsafe, you connect only the 24 V DC load voltage power supply and chassis. The power module is wired on the special terminal module. The following table shows the terminal assignment of the PM-D F DC 24V PROFIsafe for the permitted terminal module TM-PF30S47-F1 (order number 3RK1 903-3AA00).
Table 9-14 Terminal Assignment of the TM-PF30S47-F1
Terminal
20 24 VDC
Designation
24 VDC rated load voltage for:
21 27
M 24 VDC
28
Ground
Block Diagram
Address switch P-switch PWR RL ...SG1 ...SG2 ...SG3 ...SG4 ...SG5 ...SG6
Processing logic
M SG_1...6
RL U1
5V 24 V
20.27
SF U1 M
P24 M24
21.28
RL
9-39
Fail-Safe Modules
Parameters in STEP 7
The following table presents the parameters that can be assigned for the PM-D F DC 24V PROFIsafe power module (see also Chapter 4).
Table 9-15 Parameters of the PM-D F DC 24V PROFIsafe
Parameter F-Parameter:
F_destination_address
Range
Default Setting
Assigned by STEP 7 150 ms, typical
Type of Parameter
Static
Effective Range
Module
1 to 1022
F-monitoring time
10 to 10,000 ms
Static
Module
9.4.1
Diagnostic Functions
The following table shows an overview of the diagnostic functions of the PMD F DC 24V PROFIsafe power module. The diagnostic functions are assigned either to one channel or the entire module.
Table 9-16 Diagnostic Functions of the PM-D F DC 24V PROFIsafe
Diagnostic Function*
Short circuit Overtemperature Internal error Parameter assignment error Missing external auxiliary supply Communication error
*
Fault Number
1H 5H 9H 10H 11H 13H
LED
SF SF SF SF PWR SF
Configur able
No No No No No No
9-40
Fail-Safe Modules
Diagnostic Message
Short circuit
Error Detection
Always
Possible Causes
Short circuit in the actuator Cross-circuit in the actuator Internal error
Corrective Measures
Eliminate short circuit/cross circuit Once the error is eliminated, the module must be removed and reinserted or powered off and on Replace module Check load wiring, check ambient temperature Once the error is eliminated, the module must be removed and reinserted or powered off and on Replace module Correct the configuration (compare actual and preset configuration), and check communication paths Correct the parameter assignment Check whether the PROFIsafe address on the module matches the configuration in STEP 7 HW Config Check module for correct contact Once the error is eliminated, the module must be removed and reinserted or powered off and on
Overtemperature
Always
Temperature limit in the module housing is exceeded causing module to be switched off Internal module fault has occurred Inserted module does not match configuration Faulty parameter assignment PROFIsafe address set incorrectly in the F-module
Always Always
Always
Always
Error in Check the PROFIBUS connection communication Eliminate the interference between F-CPU and module due to defective PROFIBUS connection or higher than permissible EMI, for example PROFIsafe monitoring time set too low Set a higher value for the "Fmonitoring time parameter for the module in STEP 7 HW Config
9-41
Fail-Safe Modules
9.4.2
Module-Specific Data
Number of outputs (P/P switching) Internal power supply for bus Assigned address area
In the I/O area for inputs In the I/O area for outputs Complying with IEC 1508, DIN VDE 0801 and EN 954
Low demand mode (average probability << 1.00 E-05 of failure on demand) High demand/continuous mode (probability of a dangerous failure per hour) << 1.00 E-10
9-42
Fail-Safe Modules
24 VDC 21.6 V to 26.4 V None 5 ms No Brief/permanent 10 A/5 A 10 A/4 A Brief/permanent 10 A/4 A Yes No No Yes
Permissible range Power loss ride-through of L+ Power loss ride-through of internal P5 Reverse polarity protection Horizontal installation
-
Vertical installation
-
Electrical isolation
Between channels and backplane bus Between channels and power supply Between channels Between channels/power supply and shield Shield and ET 200S bus connection Shield and I/O (SGs, U 1 bus) ET 200S bus attachment and I/O (SGs, U 1 bus) Shield and ET 200S bus connection Shield and I/O (SGs, U 1 bus) ET 200S bus attachment and I/O (SGs, U 1 bus) Shield and ET 200S bus terminal Shield and I/O (SGs, U 1 bus) ET 200S bus terminal and I/O (SGs, U 1 bus) Surge test between ET 200S bus terminal and I/O (SGs, U 1 bus) From backplane bus From load voltage L+ (without load)
500 VDC/1 min or 600 VDC/1 s 500 VDC/1 min or 600 VDC/1 s 1500 VAC/1 min or 2545 VDC/1 s
350 VAC/1 min 350 VAC/1 min 2830 VAC/1 min 6000 VDC/5 positive and 5 negative pulses
Current consumption
9-43
Fail-Safe Modules
Technical Specifications
Diagnostic functions
Time, Frequency
Internal preparation times Acknowledgment time in safety mode
9-44
Fail-Safe Modules
9.5
Order Number
6ES7 138-4FA01-0AB0
Properties
The 4/8 F-DI DC 24V PROFIsafe digital electronic module has the following properties:
Eight inputs (AK4/SIL2/Category 3) or four inputs (AK6/SIL3/Category 3 or 4) 24 VDC rated input voltage Suitable for switches and 3 or 4-wire proximity switches (BEROs) Two short-circuit-proof sensor supplies for each of the four inputs External sensor supply possible Group fault display (SF; red LED) Status display for each input (green LED) One error display for each sensor supply (1VsF and 2VsF; red LED) Selectable diagnostics
Power module
Supply using PM-E DC24V Power supply from PM-E DC 24..48V/AC24..230V
Achievable AK/SIL/Category
With 1oo1 evaluation of the sensors (8 F-DI) AK4/SIL2/Category 3 With 1oo1 evaluation of the sensors (8 F-DI) AK4/SIL2/Category 3 With 1oo2 evaluation of the sensors (4 F-DI) AK6/SIL3/Category 4
With 1oo1 evaluation of the sensors (8 F-DI) AK4/SIL2/Category 3 With 1oo2 evaluation of the sensors (4 F-DI) AK6/SIL3/Category 4
9-45
Fail-Safe Modules
Front View
Error display per sensor power supply red (Voltage supply Fault)
Figure 9-15
9-46
Fail-Safe Modules
Terminal Assignment
The terminal assignment of the EM 4/8 F-DI DC 24V PROFIsafe for the usable terminal modules TM-E30S44-01, TM-E30C44-01, TM-E30S46-A1, and TM-E30C46-A1 is shown in the following figure.
DI0 DI1
13
DI4 DI5
1
Vs1 Vs1
2 6 10 14
Vs2 Vs2
DI2 DI3
11
15
DI6 DI7
Vs1 Vs1
Following terminals available only on TM-E...46-A1!
12
16
Vs2 Vs2
Following terminals available only on TM-E...46-A1!
A16 A4 A8 A12
A3
A7 A11
DI: Fail-safe digital input Vs1: Internal sensor power supply 1 for DI 0 to DI 3 Vs2: Internal sensor power supply 2 for DI 4 to DI 7 at TM-E...46-A1: AUX 1 bus implemented. Connection to terminals A3 through A16 for any connection of PE (individual grouping of sensor power supplies possible)
Figure 9-16
9-47
Fail-Safe Modules
Block Diagram
Address switch 1Vs M Vs1 2,6,4,8 1 5 3 7 2VsF M 10,14,12,16 9 13 11 15 Vs2
Processing logic
M Test
Filter logic
Status M SF M
5
24 V
P1 P2
The representation of the NO contacts is as printed on the module. Generally, however, the sensor contacts must be NC contacts (due to safe state of the process variables).
Figure 9-17
9-48
Fail-Safe Modules
Parameters in STEP 7
The following table shows the parameters that can be assigned for the EM 4/8 F-DI DC 24V PROFIsafe (see also Chapter 4).
Table 9-19
Parameter F-Parameter:
1 to 1022 10 to 10,000 ms
Assigned by Static STEP 7 150 ms, typical 3 ms Cyclic Activated 1oo2 Evaluation 2-channel equivalent Static
Module Module
0.5; 3; 15 ms Cyclic/blocked Activated/ deactivated 1oo2 evaluation/1oo1 evaluation 1-channel; 2-channel equivalent; 2-channel nonequivalent Provide last valid value; provide value 0 10 to 30,000 ms
Static
Discrepancy behavior
"Provide 0 value" 10 ms
Static
Discrepancy time
Static
Input Delay of 3 ms
Note If there is a danger of overvoltage on the signal lines (see chapter 8.3), with a 3 ms input delay, you have to use shielded cables to avoid possibly passivating fail-safe digital inputs and a shutdown of the sensor supply.
When using unshielded signal lines safe bahavior of process variables is ensured.
9-49
Fail-Safe Modules
The last valid value (old value) before discrepancy occurs is made available in the safety program in F-CPU as soon as a discrepancy is determined between the signals of the affected input channels. This value remains available until the discrepancy disappears or until the discrepancy time expires and a discrepancy error is detected. The sensor-actuator response time is extended according to the this time. As a result, the discrepancy time of sensors connected over two channels must be set for fast responses to short response times. It makes no sense, for example, if sensors connected over two channels with a discrepancy time of 500 ms trigger a time-critical shutdown. In the worst case, the sensor-actuator response time is extended by an amount approximately equal to the discrepancy time:
For this reason, position the sensor in the process in such a way as to minimize discrepancy. Then select the shortest possible discrepancy time that also has sufficient reserve to avoid false triggereing of discrepancy errors. "Provide 0 Value"
The value "0" is immediately made available to the safety program in the F-CPU as soon as a discrepancy is detected between the signals of the two affected input channels. If you assigned the parameter "Provide 0 value", the sensor-actuator response time will not be affected by the discrepancy time.
9-50
Fail-Safe Modules
Discrepancy Time
Here, you can specify the discrepancy time for each pair of channels. The value entered is rounded to multiples of 10 ms.
Requirements
If you use a 2-channel, a non-equivalent, or two 1-channel sensors, that measure the same physical process variable, the sensors will respond with a slight time delay compared with each other due to the limited accuracy of the arrangement. Discrepancy analysis for equivalence or nonequivalence is used for fail-safe inputs to determine faults based on the time characteristic of two signals with the same functionality. Discrepancy analysis is initiated when different levels are detected for two associated input signals (for nonequivalence testing, when the same levels are detected). The signals are checked to establish whether the difference (when checking for non-quality: the match) has disappeared following a selectable time known as the discrepancy time. If not, this means that a discrepancy error exists. In most cases, the discrepancy time is started but does not elapse fully since the signal differences disappear after a short time. Select a discrepancy time that is long enough so that when no error has occurred, the difference between two signals (the match between two signals when checking for non-equality) disappears before the discrepancy time elapses.
Response While the Discrepancy Time Is Running
While the discrepancy time is running internally on the module, either the last valid value or "0" is provided for the safety program on the F-CPU by the input channels involved depending on the parameter settings for the response to discrepancy.
Response after the Discrepancy Time Elapses
If the input signals do not match after the selected discrepancy time has elapsed (when checking for non-equivalence) for example due to a break in the sensor wire, a discrepancy error is detected and the "discrepancy error" diagnostic message is generated in the diagnostic buffer of the F-I/O module indicating the faulty channels.
9-51
Fail-Safe Modules
9.5.1
AK4/SIL 2/Category 3
AK 6/SIL3/Category 3 AK6/SIL3/Category 4
Use Cases 1 to 3
1
See Section 9.5.2
2
See Section 9.5.3
3
See Section 9.5.4
Figure 9-18
Warning The achievable safety class is dependent on the quality of the sensor and the magnitude of the proof-test interval in accordance with IEC 61508 (interval for external function test). If the quality of the sensor is lower than the quality stipulated in the required safety class, the sensor must be applied redundantly with a two-channel connection.
9-52
Fail-Safe Modules
Application
1-channel
1oo1
4/2/3
2.1
1-channel
1oo2
6/3/3
2.2
1oo2
Internal, without short-circuit test External Internal, without short-circuit test External Internal, with shortcircuit test 6/3/4
2.3
1oo2
3.1 3.2
1oo2
Note You can operate the various inputs of an F-DI module simultaneously in AK4/SIL2/Category 3 and in AK6/SIL3/Category 3 or 4. You only need to interconnect and assign parameters for the inputs as shown in the following sections.
Sensor Requirements
When using sensors for safety-related applications, please note the information in Section 6.5 "Requirements for Sensors and Actuators.
9-53
Fail-Safe Modules
9.5.2
Sensor Supply
The EM 4/8 F-DI DC 24V PROFIsafe provides sensor supply Vs1 for inputs 0 to 3 and sensor supply Vs2 for inputs 4 to 7. The sensor supply can be provided internally or externally.
8 F-DI
L+ M Vs1 DI0 DI1 DI2 DI3 Vs2 DI4 DI5 DI6 DI7
S0
S1
S2
S3
S4
S5
S6
S7
L+ M Figure 9-19 internal Wiring Diagram EM 4/8 F-DI DC 24V PROFIsafe One sensor 1-channel connected, sensor power supply
PM-E
8 F-DI
L+ M Vs1 DI0 DI1 DI2 DI3 Vs2 DI4 DI5 DI6 DI7
S0
S1
S2
S3
S4
S5
S6
S7
L+
M Wiring Diagram EM 4/8 F-DI DC 24V PROFIsafe One sensor 1-channel connected, external sensor power supply
Figure 9-20
9-54
Fail-Safe Modules
Example of fault
Short circuit in DI 0 with DI 1 Short circuit in DI 0 with DI 4 P-short circuit in DI 0 M-short circuit in DI 0 Discrepancy error P-short current in sensor supply 1 M-short circuit in sensor supply 1, or sensor supply 2 defective Short circuit in sensor supply 1 with sensor supply 2 Error in read/test circuit Supply voltage fault
*
No No No Yes* No Yes
No No No No No Yes
Yes
No
No
Yes Yes
Yes Yes
Yes Yes
Fault is detected only in case of signal corruption. In other words, the signal read differs from the sensor signal. If there is no signal corruption compared with the sensor signal, fault detection is not possible and is not required from a safety standpoint.
9-55
Fail-Safe Modules
9.5.3
Wiring Diagram for Application 2.1 Connecting one channel of one sensor to two inputs
One channel of a sensor is connected to two inputs of the F-module for each process signal (1oo2 evaluation).
Note If the voltage is supplied to the sensor by the F-DI module, you must use the internal sensor power supply Vs1. Connection to Vs2 is not possible.
9-56
Fail-Safe Modules
PM-E
4 F-DI
L+ M Vs1 DI0 DI1 DI2 DI3 Vs2 DI4 DI5 DI6 DI7
S0 S1 S2 S3
L+
Figure 9-21 Wiring Diagram EM 4/8 F-DI DC 24V One channel of a sensor connected to two inputs, internal power supply
PM-E
4 F-DI
L+ M Vs1 DI0 DI1 DI2 DI3 Vs2 DI4 DI5 DI6 DI7
S0 S1 S2 S3
L+
M Wiring diagram EM 4/8 F-DI DC 24V one channel of a sensor connected to two inputs, external power supply
Figure 9-22
9-57
Fail-Safe Modules
Warning To achieve AK6/SIL3/Category 3 using this wiring, you must use a sensor qualified for this class.
Example of fault
Short circuit in DI 0 with DI 1 Short circuit in DI 0 with DI 5 P-short circuit in DI 0 M-short circuit in DI 0 Discrepancy error P-short current in sensor supply 1 M-short circuit in sensor supply 1, or sensor supply 2 defective Short circuit in sensor supply 1 with sensor supply 2 Error in read/test circuit Supply voltage fault
*
No No No No Yes No Yes
Yes
No
No
Yes Yes
Yes Yes
Yes Yes
Fault is detected only in case of signal corruption. In other words, the signal read differs from the sensor signal (discrepancy error). If there is no signal corruption compared with the sensor signal, fault detection is not possible and is not required from a safety standpoint.
9-58
Fail-Safe Modules
Wiring Diagram for Application 2.2 Connecting a two-channel sensor to two channels
Two channels of a 2-channel sensor are connected to two inputs of the F-module for each process signal (1oo2 evaluation). The wiring is carried out on the appropriate terminal module.
PM-E EM 4/8 F-DI
4 F-DI
L+ M Vs1 DI0 DI1 DI2 DI3 Vs2 DI4 DI5 DI6 DI7
S0 S1 S2 S3 Sensor contacts are mechanically coupled. Wiring Diagram EM 4/8 F-DI DC 24V PROFIsafe Two channels of a 2-channel sensor connected, internal sensor power supply
L+ M Figure 9-23
PM-E
4 F-DI
L+ M Vs1 DI0 DI1 DI2 DI3 Vs2 DI4 DI5 DI6 DI7
S0 S1 S2 S3
L+ M Figure 9-24
Sensor contacts are mechanically coupled. Wiring Diagram EM 4/8 F-DI DC 24V PROFIsafe Two channels of a 2-channel sensor connected, external sensor power supply
9-59
Fail-Safe Modules
Wiring Diagram for Application 2.2 Connecting two channels of two 1-channel sensors
Two channels of two 1-channel sensors are connected to two inputs of the F-module for each process signal (1oo2 evaluation). The sensors can also be supplied via an external sensor supply.
PM-E
4 F-DI
L+ M Vs1 DI0 DI1 DI2 DI3 Vs2 DI4 DI5 DI6 DI7
S0 S1 S2 S3
L+
Acquisition of the same process variable with mechanically separate sensors. Wiring Diagram EM 4/8 F-DI DC 24V Two channels of two 1-channel sensors connected, internal sensor power supply
Figure 9-25
Warning To achieve AK6/SIL3/Category 3 using this wiring, you must use a sensor qualified for this class.
9-60
Fail-Safe Modules
Example of Error
Short circuit in DI 0 with DI 1 Short circuit in DI 0 with DI 4 Short circuit in DI 0 with DI 5 P-short circuit in DI 0 M-short circuit in DI 0 Discrepancy error P-short current in sensor supply 1 M-short circuit in sensor supply 1, or sensor supply 2 defective Short circuit in sensor supply 1 with sensor supply 2 Error in read/test circuit Supply voltage fault
*
Fault is detected only in case of signal corruption. In other words, the signal read differs from the sensor signal (discrepancy error). If there is no signal corruption compared with the sensor signal, fault detection is not possible and is not required from a safety standpoint.
Wiring Diagram for Application 2.3 Connecting a non-equivalent sensor to two non-equivalent channels
Two channels of a non-equivalent sensor are connected to two inputs of the F-module for each process signal (1oo2 evaluation). The left-hand channels on the F-module (DI0 through DI3) supply the useful signals. If no faults are detected, these signals will be available in the I/O area for inputs on the F-CPU.
Note If the voltage is supplied to the sensor by the F-DI module, you must use the internal sensor supply Vs1. Connection to Vs2 is not possible.
9-61
Fail-Safe Modules
PM-E
4 F-DI
L+ M Vs1 DI0 * DI1 * DI2 * DI3 * Vs2 DI4 DI5 DI6 DI7
S0 S1 S2 S3
L+
* The left channels on the F module provide the useful signals. Wiring Diagram EM 4/8 F-DI DC 24V Two channels of a non-equivalent sensor connected, internal sensor power supply
Figure 9-26
PM-E
4 F-DI
L+ M Vs1 DI0 * DI1 * DI2 * DI3 * Vs2 DI4 DI5 DI6 DI7
S0 S1 S2 S3
L+
* The left channels on the F module provide the useful signals. Wiring Diagram EM 4/8 F-DI DC 24V Two channels of a non-equivalent sensor connected, external sensor power supply
Figure 9-27
9-62
Fail-Safe Modules
Wiring Diagram for Application 2.3 Connecting two one-channel sensors to two non-equivalent channels
Two channels of two 1-channel sensors are connected non-equivalent to two inputs of the F-I/O module for each process signal (1oo2 evaluation). The left-hand channels on the F-module (DI0 through DI3) supply the useful signals. If no faults are detected, these signals will be available in the I/O area for inputs on the F-CPU. The sensors can also be supplied via an external sensor supply.
PM-E EM 4/8 F-DI DC24V
4 F-DI
L+ M Vs1 DI0 * DI1 * DI2 * DI3 * Vs2 DI4 DI5 DI6 DI7
S0 S1 S2 S3
L+ M Figure 9-28
* The left channels on the F module provide the useful signals. Wiring Diagram EM 4/8 F-DI DC 24V Two channels of two 1-channel sensors connected non-equivalent, internal sensor power supply
Warning To achieve AK6/SIL3/Category 3 using this wiring, you must use a sensor qualified for this class.
9-63
Fail-Safe Modules
Example of fault
Short circuit in DI 0 with DI 1 Short circuit in DI 0 with DI 4 Short circuit in DI 0 with DI 5 P-short circuit in DI 0 M-short circuit in DI 0 Discrepancy error P-short current in sensor supply 1 M-short circuit in sensor supply 1, or sensor supply 2 defective Short circuit in sensor supply 1 with sensor supply 2 Error in read/test circuit Supply voltage fault
*
Fault is detected only in case of signal corruption. In other words, the signal read differs from the sensor signal (discrepancy error). If there is no signal corruption compared with the sensor signal, fault detection is not possible and is not required from a safety standpoint.
9-64
Fail-Safe Modules
9.5.4
Sensor Supply
The EM 4/8 F-DI DC 24V PROFIsafe provides sensor supply Vs1 for inputs 0 to 3 and sensor supply Vs2 for inputs 4 to 7. The sensor must be supplied internally.
Wiring Diagram for Application 3.1 Connecting a two-channel sensor to two channels
Two channels of a 2-channel sensor are connected to two inputs of the F-module for each process signal (1oo2 evaluation). The wiring is carried out on the appropriate terminal module.
PM-E EM 4/8 F-DI DC24V
4 F-DI
L+ M Vs1 DI0 DI1 DI2 DI3 Vs2 DI4 DI5 DI6 DI7
S0 S1 S2 S3
L+ M Figure 9-29
Sensor contacts are mechanically coupled. Wiring Diagram EM 4/8 F-DI DC 24V PROFIsafe Two channels of a 2-channel sensor connected, internal sensor power supply
As an alternative, you can connect two 1-channel sensors (see Figure 9-25). In this case, the same process variable is acquired with two mechanically separate sensors.
9-65
Fail-Safe Modules
Warning To achieve AK6/SIL3/Category 4 using this wiring, you must use a sensor qualified for this class.
Wiring Diagram for Application 3.2 Connecting a non-equivalent sensor to two non-equivalent channels
Four process signals can be connected to an EM 4/8 F-DI DC 24V PROFIsafe. Two channels of a sensor are connected non-equivalent to two inputs of the Fmodule for each process signal (1oo2 evaluation). The left-hand channels on the F-module (DI0 through DI3) supply the useful signals. If no faults are detected, these signals will be available in the I/O area for inputs on the F-CPU.
Note You must use the internal sensor supply Vs1 to supply voltage to the sensor. Connection to Vs2 is not possible.
The wiring is carried out on the appropriate terminal module.
9-66
Fail-Safe Modules
PM-E
4 F-DI
L+ M Vs1 DI0 * DI1 * DI2 * DI3 * Vs2 DI4 DI5 DI6 DI7
S0 S1 S2 S3
L+
* The left channels on the F module provide the useful signals. Wiring Diagram EM 4/8 F-DI DC 24V Two channels of a non-equivalent sensor connected, internal sensor power supply
Figure 9-30
As an alternative, you can connect two 1-channel sensors non-equivalent (see Figure 9-28). In this case, the same process variable is acquired with two mechanically separate sensors.
Warning To achieve AK6/SIL3/Category 4 using this wiring, you must use a sensor qualified for this class.
9-67
Fail-Safe Modules
Example of fault
Fault detection with internal sensor power supply and activated short-circuit test for... Sensor 2-channel equivalent Sensor 2-channel non-equivalent
Yes* Yes Yes* Yes Yes* Yes Yes Yes Yes Yes Yes
Short circuit in DI 0 with DI 1 Short circuit in DI 0 with DI 4 Short circuit in DI 0 with DI 5 P-short circuit in DI 0 M-short circuit in DI 0 Discrepancy error P-short current in sensor supply 1 M-short circuit in sensor supply 1, or sensor supply 2 defective Short circuit in sensor supply 1 with sensor supply 2 Error in read/test circuit Supply voltage fault
*
Yes* Yes* Yes* Yes Yes* Yes Yes Yes Yes Yes Yes
Fault is detected only in case of signal corruption. In other words, the signal read differs from the sensor signal (discrepancy error). If there is no signal corruption compared with the sensor signal, fault detection is not possible and is not required from a safety standpoint.
Methods for detecting all short circuits are permissible even if no individual short circuits are detected, provided they do one of the following:
Do not cause corruption of read signals compared to sensor signals Cause corruption of read signals compared to sensor signals, but in the direction that ensures safety
9-68
Fail-Safe Modules
9.5.5
Diagnostic Functions
The following table shows an overview of the diagnostic functions of the EM 4/8 F-DI DC 24V PROFIsafe. The diagnostic functions are assigned either to one channel or the entire module.
Table 9-26 Diagnostic Functions of the EM 4/8 F-DI DC 24V PROFIsafe
Diagnostic Function*
Fault Number
1H 5H 9H 10H 11H 13H 19H
LED
Configur able
Yes No No No No No No
Short circuit Overtemperature Internal error Parameter assignment error Missing external auxiliary supply Communication error Discrepancy error (1oo2 evaluation)
*
SF SF SF SF 1VsF 2VsF SF SF
Note If you have activated the short-circuit test for the F-DI module in STEP 7 and are using only one of the two internal sensor supplies of the module (Vs1 or Vs2), a channel M-short circuit is then detected for each of the four channels with a sensor supply that is not used. Four "short-circuit" diagnostic functions are generated in the diagnostic buffer of the F-module.
9-69
Fail-Safe Modules
Diagnostic Message
Short circuit
Possible Causes
Short circuit in the sensor Cross circuit in the sensor Internal error
Corrective Measures
Eliminate short circuit/cross circuit Replace module Check ambient temperature, and check whether permissible output current of the sensor supply is exceeded for the ambient temperature Once the error is eliminated, the module must be removed and reinserted or powered off and on
Overtemperature
Internal module fault has occurred Inserted module does not match configuration Faulty parameter assignment PROFIsafe address set incorrectly in the F-module
Replace module Correct the configuration (compare actual and preset configuration), and check communication paths Correct the parameter assignment Check whether the PROFIsafe address on the module matches the configuration in STEP 7 HW Config Check interconnected PM, Check module for correct contact Once the error is eliminated, the module must be removed and reinserted or powered off and on
Check the PROFIBUS connection Error in communication between F-CPU and module due to Eliminate the interference defective PROFIBUS connection or higher than permissible EMI, for example PROFIsafe monitoring time set too low Set a higher value for the "F-monitoring time parameter for the module in STEP 7 HW Config
Configuration of the F-module does Recompile the safety program; not match fail-safe program then download the configuration and safety program to the F-CPU again
9-70
Fail-Safe Modules
Diagnostic Message
Discrepancy error (1oo2 evaluation)
Possible Causes
Faulty process signal Defective sensor
Corrective Measures
Check process signal, replace sensor if necessary
Short circuit between unconnected Eliminate short circuit sensor cable and the sensor supply cable Wire break in connected sensor cable or the sensor supply cable Assigned discrepancy time too short Eliminate broken wire Check the assigned discrepancy time After eliminating the problem, the F-module must be re-integrated in the safety program.
For more detailed information on passivation and reintegration of F-I/O, refer to Chapter 7 and the S7 Distributed Safety, Configuration and Programming manual or Programmable Controllers S7 F/FH.
9.5.6
Module-Specific Data
Number of inputs
1-channel 2-channel I/O area for inputs I/O area for outputs Unshielded * Shielded *
8, maximum 4, maximum 6 Byte 4 Byte max. 200 m (at input delay 3 ms * and 15 ms) max. 200 m (at input delay 0.5 ms, 3 ms and 15 ms)
Length of cable
9-71
Fail-Safe Modules
Technical Specifications
Maximum achievable safety class
2-channel SIL3 AK6 Category 4 SIL3 << 1.00 E-05 << 1.00 E-10
In accordance with IEC 61508 In accordance with DIN VDE 0801 In accordance with EN 954
Low demand mode (average probability << 1.00 E-03 of failure on demand) High demand/continuous mode (probability of a dangerous failure per hour) << 1.00 E-08
Permissible range Power loss ride-through of L+ Power loss ride-through of internal P5 Reverse polarity protection
Horizontal installation
Vertical installation
Electrical isolation Between channels and backplane bus Between channels and power supply Between channels Between channels/power supply and shield Shield and ET 200S bus connection Shield and I/O (DIs, P1/P2 buses) ET 200S bus connection and I/O (DIs, P1/P2 buses) Shield and ET 200S bus connection Shield and I/O (DIs, P1/P2 buses) ET 200S bus connection and I/O (DIs, P1/P2 buses)
500 VDC/1 min or 600 VDC/1 s 500 VDC/1 min or 600 VDC/1 s 1500 VAC/1 min or 2545 VDC/1 s
9-72
Fail-Safe Modules
Technical Specifications
Isolation in the type test tested with
Shield and ET 200S bus connection Shield and I/O (DIs, P1/P2 buses) ET 200S bus connection and I/O (DIs, P1/P2 buses) Impulse current test between ET 200S bus connection and I/O (DIs, P1/P2 buses) From backplane bus From load voltage L+ (without load)
350 VAC/1 min 350 VAC/1 min 2830 VAC/1 min 6000 VDC/5 positive and 5 negative pulses
Current consumption
Green LED per channel Red LED per channel Red LED (SF)
Diagnostic information can be displayed Possible 2 Minimum L+ (-1.5 V) 300 mA 0 mA to 300 mA 600 mA Yes, electronic 0.7 A to 1.8 A
Output current
Operating value
Rated value For "1 signal For "0 signal For "1 signal
Input current
9-73
Fail-Safe Modules
Technical Specifications
Input delay*
Assignable (for all inputs together) Typically 0.5 ms Typically 3 ms Typically 15 ms (0.3 ms to 0.7 ms) (2.6 ms to 3.4 ms) (13 ms to 17 ms) (0.3 ms to 0.7 ms) (2.6 ms to 3.4 ms) (13 ms to 17 ms)
In accordance with IEC 1131, Type 1 Not possible 0.6 mA, maximum See Chapter 13
Time, Frequency
Internal preparation times Acknowledgment time in safety mode
Short-circuit test activated at input delay of 0.5 ms: at input delay of 3 ms: at input delay of 15 ms: Short-circuit test deactivated
min. 4 ms / max. 7 ms min. 4 ms / max. 12 ms min. 4 ms / max. 9 ms 4 ms minimum/6 ms maximum See Table 6-2
Protection of inputs and outputs from surge stressing in accordance with IEC 61000-4-5 with external protection elements only
*
With an input delay of 0.5 ms, shielded cable must be used for the digital inputs and the sensor supply. If there is a danger of overvoltage on the signal lines (see chapter 8.3), with a 3 ms input delay, you have to use shielded cables to avoid possibly passivating fail-safe digital inputs and a shutdown of the sensor supply. When using unshielded signal lines safe bahavior of process variables is ensured.
9-74
Fail-Safe Modules
9.6
Order Number
6ES7 138-4FB01-0AB0
Properties
The 4 F-DO DC 24V/2 A PROFIsafe digital electronic module has the following properties:
Four outputs, P/M switching 2 A output current 24 VDC rated load voltage Suitable for solenoid valves, DC contactors, and indicator lamps Group fault display (SF; red LED) Status display for each output (green LED) Selectable diagnostics Safety class SIL3 achievable
Power module
Supply using PM-E DC 24V Supply using PM-E DC 24V/120/230 VAC Power supply from PM-E DC 24..48V
Achievable AK/SIL/Category
AK4/SIL2/Category 3 AK6/SIL3/Category 4 AK6/SIL3/Category 4
9-75
Fail-Safe Modules
Remedy:
Output -
Use the PM-E F pp DC 24V PROFIsafe The value of the resistance between chassis and ground at the load end must be greater than 100 k
P24
P-switch
Readback M output
Figure 9-31
9-76
Fail-Safe Modules
Front View
Figure 9-32
Warning The SF LED and the status displays of the outputs must not be evaluated for failsafe activities.
9-77
Fail-Safe Modules
Terminal Assignment
The terminal assignment of the EM 4 F-DO DC 24V/2 A PROFIsafe for the usable terminal modules TM-E30S44-01, TM-E30C44-01, TM-E30S46-A1, and TME30C46-A1 is shown in the following figure.
13
1
2 6 10 14
11
15
12
16
A16 A4 A8 A12
A3
A7 A11
DOx P and DOx M: Connection for fail-safe digital output (P/M switching) at TM-E...46-A1: AUX 1 bus implemented. Connection to terminals A3 to A16 for any connection of PE (individual grouping of load current power supplies possible)
Figure 9-33
9-78
Fail-Safe Modules
Block Diagram
Processing logic
14
5
24 V
P1 P2
Figure 9-34
9-79
Fail-Safe Modules
Wiring Diagram
The four fail-safe digital outputs each consist of one P-switch (current sourcing) DOx P and one M-switch (current sinking) DOx M. They connect the load between the P and M-switches. Both switches are always set so that voltage is applied to the load. The wiring is carried out on an appropriate terminal module.
PM-E
EM 4 F-DO DC24V/2 A
4 F-DO
L+ M DO0 (P) DO0 (M) DO1 (P) DO1 (M) DO2 (P) DO2 (M) DO3 (P) DO3 (M)
K0
K1
K2
K3
L+ Figure 9-35
9-80
Fail-Safe Modules
A connection to each of the four digital outputs is possible. For example, the connection to DO 0 is shown in the following figure. This connection enables AK6/SIL3/Category 4 to be achieved.
PM-E
EM 4 F-DO DC24V/2 A
4 F-DO
L+ M DO0 (P) DO0 (M) DO1 (P) DO1 (M) DO2 (P) DO2 (M) DO3 (P) DO3 (M)
K1
K2 K1 K2
L+ M Figure 9-36
Warning When connecting two relays on one digital output, (as shown in the figure above), the errors "wire break and "overload are detected only at the P-switch (not at the M-switch). The controlled actuator can no longer be switched off when there is a cross circuit between the P and M-switches of the output.
Warning To avoid cross circuits between P and M-switches of a fail-safe digital output, you should connect the relay on the between P and M-switches to protect against cross circuits (for example with cables separately sheathed or in a separate cable duct).
9-81
Fail-Safe Modules
PM-E
EM 4 F-DO DC24V/2 A
4 F-DO
L+ M DO0 (P)
K1
DO0 (M)
DO1 (P)
DO1 (M)
K3
DO2 (P)
DO2 (M)
DO3 (P)
DO3 (M)
K1 K2 K4 K2
K3 K4
Note If two relays are connected in parallel to one digital output (as shown in the figure above), "wire break is detected only if the wire break disconnects both relays from P or M. This diagnostics is not relevant to safety.
9-82
Fail-Safe Modules
Parameters in STEP 7
The following table shows the parameters that can be assigned for the F-DO module (see also Chapter 4).
Table 9-29 Parameters of the F-DO Module
Parameter F-Parameter:
F_destination_address
Range
Default Setting
Assigned by STEP 7 150 ms, typical Activated 1 ms, typical Deactivated
Type of Parameter
Static
Effective Range
Module
1 to 1022
F-monitoring time
10 to 10,000 ms
Static
Module
Module Parameters:
DO channel n Readback time Diagnostics: Wire break Activated/ deactivated 1 to 400 ms Activated/ deactivated Static Static Static Channel Channel Channel
Readback Time
Each output channel has its own selectable readback time. This time specifies the maximum duration of the turn off test for the corresponding channel and therefore also the readback time for turning off the channel. You can set the following readback times: 1 ms, 5 ms, 10 ms, 50 ms, 100 ms, 200 ms and 400 ms. You should set an adequately high readback time if the channel involved switches high capacitive loads. If the readback time for a controlled capacitive load is set too low, the output channel is passivated because the discharge of the capacitance does not take place within the turn off test. If the readback signals are incorrect, the "short circuit" error causes the passivation of the output channel after the readback time elapses. Connecting capacitive loads If the electronic outputs of the EM 4 F-DO DC 24V/2A PROFIsafe are connected to loads that require little current and have capacitance, this can lead to the "short circuit" error message. Reason: Capacitance cannot be sufficiently discharged during the set self-test readback time. The following figure shows the typical curves of the selectable readback times indicating the relationship between load resistance and connectable load capacitance.
9-83
Fail-Safe Modules
10.000,0
1.000,0
Capacitive load in F
100,0
10,0
1,0
0,1 9 20 50 100 200 500 750 1000 1250 1500 1750 2000
Load current in m A
with readback tim e set to 1 m s
Figure 9-38
Relationship between Load Resistance and Switchable Load Capacitance for EM 4 F-DO DC 24V/2A PROFIsafe
Remedy: 1. Determine the load current and capacitance of the load. 2. Determine the operating point in the figure above. 3. If the operating point is above the curve, you must increase the load current until the new operating point is below the curve by connecting a resistor in parallel.
9-84
Fail-Safe Modules
9.6.1
Diagnostic Functions
The following table presents an overview of the diagnostic functions of the EM 4 F-DO DC 24V/2 A PROFIsafe digital electronic module. The diagnostic functions are assigned either to one channel or the entire module.
Table 9-30 Diagnostic Functions of the EM 4 F-DO DC 24V/2A PROFIsafe
Diagnostic Function*
Short circuit Overload Overtemperature Wire break Internal error Parameter assignment error Missing external auxiliary supply Communication error Safety-related deactivation
*
Fault Number
1H 4H 5H 6H 9H 10H 11H 13H 19H
LED
SF SF SF SF SF SF SF SF SF
Configur able
No No No Yes No No No No No
Diagnostic Message
Short circuit
Error Detection
Always
Possible Causes
Short circuit in the actuator Cross-circuit in the actuator Internal error Wire break, if wire break diagnostic has been deactivated
Corrective Measures
Eliminate short circuit/cross circuit Once the error is eliminated, the module must be removed and reinserted or powered off and on Replace module Eliminate broken wire Ensure specified minimum load (see Section 9.6.2) Once the error is eliminated, the module must be removed and reinserted or powered off and on
Overload
Eliminate overload Once the error is eliminated, the module must be removed and reinserted or powered off and on
9-85
Fail-Safe Modules
Diagnostic Message
Overtemperature
Error Detection
Always
Possible Causes
Temperature limit in the module housing is exceeded causing module to be deactivated
Corrective Measures
Check load wiring, check ambient temperature, and check whether permissible output current (aggregate current) for the ambient temperature is exceeded Once the error is eliminated, the module must be removed and reinserted or powered off and on
Wire break
Line break
Internal module fault has Replace module occurred Inserted module does not match configuration Faulty parameter assignment PROFIsafe address set incorrectly in the F-module Correct the configuration (compare actual and preset configuration), and check communication paths Correct the parameter assignment Check whether the PROFIsafe address on the module matches the configuration in STEP 7 HW Config
No supply voltage or Check interconnected PM, supply voltage is too low Check module for correct contact Once the error is eliminated, the module must be removed and reinserted or powered off and on Error in communication between F-CPU and module due to defective PROFIBUS connection or higher than permissible EMI, for example PROFIsafe monitoring time set too low Configuration of the F-module does not match fail-safe program Check the PROFIBUS connection Eliminate the interference
Set a higher value for the "Fmonitoring time parameter for the module in STEP 7 HW Config Recompile the safety program; then download the configuration and safety program to the F-CPU again Reduce the switching frequency
Safetyrelated shutdown
Always
9-86
Fail-Safe Modules
9.6.2
Module-Specific Data
Number of outputs (P-M switching) Assigned address area
I/O area for inputs I/O area for outputs Unshielded Shielded In accordance with IEC 61508 In accordance with DIN VDE 0801 In accordance with EN 954
Length of cable
Low demand mode (average probability << 1.00 E-05 of failure on demand) High demand/continuous mode (probability of a dangerous failure per hour) << 1.00 E-10
Permissible range Power loss ride-through of L+ Power loss ride-through of internal P5 Reverse polarity protection Horizontal installation
-
Vertical installation
-
9-87
Fail-Safe Modules
Technical Specifications
Electrical isolation
Between channels and backplane bus Between channels and power supply Between channels Between channels/power supply and shield Shield and ET 200S bus connection Shield and I/O (DOs, P1/P2 buses) ET 200S bus connection and I/O (DOs, P1/P2 buses) Shield and ET 200S bus connection Shield and I/O (DOs, P1/P2 buses) ET 200S bus connection and I/O (DOs, P1/P2 buses) Shield and ET 200S bus connection Shield and I/O (DOs, P1/P2 buses) ET 200S bus connection and I/O (DOs, P1/P2 buses) Impulse current test between ET 200S bus connection and I/O (DOs, P1/P2 buses) From backplane bus From load voltage L+ (without load)
Yes No No Yes
500 VDC/1 min or 600 VDC/1 s 500 VDC/1 min or 600 VDC/1 s 1500 VAC/1 min or 2545 VDC/1 s
350 VAC/1 min 350 VAC/1 min 2830 VAC/1 min 6000 VDC/5 positive and 5 negative pulses
Current consumption
Minimum L+ (-2.0 V) P-switch: min. L+ (-1.5 V), voltage drop at M-switch: max. 0.5 V
9-88
Fail-Safe Modules
Technical Specifications
Output current for "1 signal
For "0 signal (residual current) Indirect control of load by means of interface relay: For "0 signal (residual current)
P-switch M-switch
Load resistance range Lamp load Wire break monitoring (open load detection) and overload monitoring
I < 4 to 19 mA
Depending on the selected readback time (see Chapter 13)
Not possible Not possible 30 Hz, maximum 0.1 Hz, maximum 10 Hz, maximum Typically L+ (-47 V) Yes, electronic 5 A to 12 A 5 A to 12 A 25 A to 45 A Yes I >2.6 A to 2.8 A See Chapter 13 4 ms minimum/8 ms maximum
With resistive load With inductive load in accordance with IEC 947-5-1, DC13 With lamp load
Response threshold (short circuit) Response threshold (external M-short circuit) Response threshold (external P-short circuit) Response threshold
Overload protection
Time, Frequency
Internal preparation times Acknowledgment time in safety mode
9-89
Fail-Safe Modules
Protection of inputs and outputs from surge stressing in accordance with IEC 61000-4-5 with external protection elements only
*
9-90
10
Introduction
This appendix describes the structure of diagnostic data in the system data. You need to know this structure if you want to evaluate diagnostic data of fail-safe modules in the standard user program.
Further Reading
The System and Standard Functions reference manual describes in detail the principles of evaluating diagnostic data of F-modules in the standard user program and describes the SFCs used for this.
10-1
Bytes 0 and 1
The following figure shows the content of bytes 0 and 1 of the diagnostic data.
7 6 5 4 3 2 1 0 0 0 0 0 0 Module fault 0: F-module ok 1: F-module fault; bits 2 and 3 are then also set External fault Channel fault exists 7 6 5 4 3 2 1 0 Byte1 0 0 0 1
Byte0
Module class: 1000B for F-modules Channel information exists Figure 10-1 Bytes 0 and 1 of diagnostic data
10-2
Bytes 2 and 3
The following figure shows the content of bytes 2 and 3 of the diagnostic data.
Always "0"
Bytes 4 to 6
The following figure shows the content of bytes 4 to 6 of the diagnostic data.
7 6 5 4 3 2 1 0 Byte4 0
Channel type
B#16#7B: Fail-safe DI module B#16#7C: Fail-safe DO module B#16#7C: Fail-safe power module Always "20Hex"
7 Byte5
0 0 1 0 0 0 0 0 7 0
Byte6 Number of channels 8: EM 4/8 F-DI 4: EM 4 F-DO 3: PM-E F 1: PM-E F PP 6: PM-D F Figure 10-3 Bytes 4 to 6 of the Diagnostic Data
10-3
Byte7
Figure 10-5 Byte 7 of the Diagnostic Data for EM 4 F-DO DC24V/2A PROFIsafe
10-4
Byte7
Byte7
Figure 10-7 Byte 7 of the Diagnostic Data for PM-E F pp DC24V PROFIsafe
10-5
Byte8
Byte9
Byte10
Byte11
Due to the different numbers of channels of the F-modules, data record 1 has differing lengths: EM 4/8 F-DI DC24V PROFIsafe EM 4 F-DO DC24V/2A PROFIsafe PM-E F pm DC24V PROFIsafe PM-E F pp DC24V PROFIsafe PM-D F DC24V PROFIsafe 40 bytes 24 bytes 20 bytes 12 bytes 32 bytes
10-6
11
Dimension Drawings
11-1
Dimension Drawings
66,5
90,5
30 3
67
66,5
65,5
30
67
Figure 11-1
Dimension Drawing of Terminal Modules with PM-E F pm, PM-E F pp, F-DI or F-DO Module Inserted
11-2
132
157
Figure 11-2 Dimension Drawing of Terminal Module with PM-D F DC24V PROFIsafe inserted
11-3
Dimension Drawings
11-4
12
Terminal modules for PM-E F pm DC24V PROFIsafe and PM-E F pp DC24V PROFIsafe:
12-1
12-2
13
Response Times
Introduction
The response times of ET 200S fail-safe modules are presented below. The response times of fail-safe modules are included in the calculation of F-system response time. You will find information about the calculation of F-system response times in the Safety Engineering in SIMATIC S7 system description.
PM-E F pm DC24V PROFIsafe (electronic PM channel) Set Readback Time 1 ms, 5 ms 10 ms 50 ms 100 ms 200 ms 400 ms Limit Frequency 32.3 Hz 28.6 Hz 25.0 Hz 12.5 Hz 7.7 Hz 4.3 Hz 2.3 Hz Minimum Internal Conditioning Time Tmin 4 ms 4 ms 4 ms 4 ms 4 ms 4 ms 4 ms Maximum Internal Conditioning Time Tmax 16 ms 20 ms 25 ms 55 ms 90 ms 150 ms 300 ms
13-1
Response Times
Table 13-2
PM-E F pm DC24V PROFIsafe: Internal Conditioning Times of the P1/2 Channel Minimum Internal Conditioning Time Tmin 4 ms 6 ms Maximum Internal Conditioning Time Tmax 8 ms 14 ms
Measuring Channel PM-E F pm DC24V PROFIsafe (P1/2 channel; relay; turn on) PM-E F pm DC24V PROFIsafe (P1/2 channel; relay; turn off)
Measuring Channel PM-E F pp DC24V PROFIsafe (P1/2 channel; relay; turn on) PM-E F pp DC24V PROFIsafe (P1/2 channel; relay; turn off)
13-2
Response Times
You set the input delay and the short circuit test in STEP 7 (see Section 9.5).
Table 13-5 EM 4/8 F-DI DC24V PROFIsafe: Internal Conditioning times Minimum Internal Conditioning Time Tmin 5 ms Maximum Internal Conditioning Time Tmax 11 ms
Maximum Response Time if a Fault Occurs: The following table shows the maximum response times of the F-DI module when an error/fault is present, depending on the parameter assignment in STEP 7 and the evaluation of the sensors.
Table 13-6 EM 4/8 F-DI DC24V PROFIsafe: Maximum Response Time if a Fault Occurs 1oo1 Evaluation Input delay Short-circuit test deactivated Short-circuit test activated 0.5 ms 18 ms 29 ms 3 ms 20 ms 40 ms 15 ms 32 ms 91 ms 1oo2 evaluation** 0.5 ms 12 ms 13 ms 3 ms 14 ms 20 ms 15 ms 26 ms 56 ms
**
in 1oo2 evaluation, the response times also depend on the set discrepancy times: Provide value 0: The times in the table above apply. Provide last valid value: The times in the table above are extended by the set discrepancy time.
Note The MS Excel files for calculating maximum response times (s7fcotib.xls or s7ftimeb.xls) provided with the S7 Distributed Safety and S7 F/FH Systems optional packages support calculation of the maximum response time when a fault is present by increasing the response time by the amount of the parameterized discrepancy time.
13-3
Response Times
EM 4 F-DO DC24V/2A PROFIsafe (electronic PM channel) Set Readback Time 1 ms 5 ms 10 ms 50 ms 100 ms 200 ms 400 ms Limit Frequency 32.3 Hz 28.6 Hz 25.0 Hz 12.5 Hz 7.7 Hz 4.3 Hz 2.3 Hz Minimum Internal Conditioning Time Tmin 4 ms 4 ms 4 ms 4 ms 4 ms 4 ms 4 ms Maximum Internal Conditioning Time Tmax 16 ms 20 ms 25 ms 55 ms 90 ms 150 ms 300 ms
13-4
14
Glossary
1oo1 Evaluation
1oo1 evaluation is a type of sensor evaluation in which one -> sensor is connected to the F-module by means of a single channel. -> Sensor evaluation method - In 1oo2 evaluation, two input channels are occupied, either by one 2-channel sensor or two single-channel sensors. The input signals are compared internally for equivalence or non-equivalence.
1oo2 Evaluation
A Acknowledgment Time During the acknowledgement time, the -> F-I/O acknowledge the sign of life specified by the -> F-CPU. The acknowledgement time enters into the calculation of the -> monitoring time and -> response time for the F-system as a whole. Actuators can be power relays or contactors for switching on consumers, or they can be consumers themselves (for example, directly controlled solenoid valves). Power modules allow the additional connection of a voltage (24 V DC) that you can apply over the AUX(iliary) bus. AUX(iliary) buses can be used individually as a protective conductor bus or they can be used to supply additional voltage. Availability is the probability that a system is functional at a specific point in time. It can be increased by redundancy, for example, by using multiple -> sensors at the same measuring point.
Actuator
AUX1 Bus
Availability
B Backplane Bus The backplane bus is a serial data bus used by the interface module IM 151 to communicate with the electronic modules and motor starters and to supply them with the required voltage. The connection between individual modules is established by means of the terminal modules.
C Category Category in accordance with EN 954-01: -> Fail-safe modules can be used in safety mode up to Category 4.
14-1
Glossary
Channel fault
This is a channel-specific error, such as a wire break or a short circuit. In channel-specific passivation, the affected channel is either automatically reintegrated or the F-module must be removed and reinserted after the error has been eliminated. The channels of a module are grouped together in a channel group. Certain parameters in STEP 7 can only be assigned to channel groups, rather than to individual channels. Channel numbers are used to uniquely identify the inputs and outputs of a module and to assign channel-specific diagnostic messages. In this passivation method, when a -> channel fault occurs, only the channel involved is passivated (method available in S7 F/FH systems only). In the event of a -> module fault, all channels of the -> fail-safe module are passivated. A configuration is a systematic arrangement of the individual modules of ET 200S. Connection to common potential refers to the opening of a new potential group by a power module. This enables individual connection of encoder and load current power supplies. Cyclic Redundancy Check The validity of the process values in the safety message frame, the accuracy of the assigned address references, and the safety-related parameters are ensured by means of a CRC signature contained in the safety message frame.
Channel group
Channel Number
Channel-Specific Passivation
Configuration
D Dark period Dark periods occur during switch-off tests and during complete bit pattern tests. This involves test-related 0 signals being switched to the output by the fail-safe output module while the output is active. The output is then switched off briefly (dark period). A sufficiently slow -> actuator does not respond and remains switched on.
14-2
Glossary
Discrepancy Analysis
Discrepancy analysis for equivalence or non-equivalence is used for fail-safe inputs to determine faults based on the time characteristic of two signals with the same functionality. Discrepancy analysis is initiated when different levels are detected for two associated input signals (for nonequivalence testing, when the same levels are detected). The signals are checked to establish whether the difference (when checking for non-quality: the match) has disappeared following a selectable time known as the -> discrepancy time. If not, this means that a discrepancy error exists. A discrepancy analysis is carried out between the two input signals of the 1oo2 evaluation in the fail-safe input module.
Discrepancy Time
Discrepancy time is a period of time configured for the -> discrepancy analysis. If the discrepancy time is set too high, the times for fault detection and -> fault reaction are extended unnecessarily. If the discrepancy time is set too low, availability is decreased unnecessarily because a discrepancy error is detected when, in reality, no error exists. A master that behaves in compliance with the IEC 617841:2002 Ed1 CP 3/1 standard is known as a DP master. A DP slave is a slave operated on PROFIBUS with the PROFIBUS-DP protocol that behaves in compliance with the IEC 617841:2002 Ed1 CP 3/1 standard.
DP Master
DP Slave
F Fail-Safe Modules ET 200S modules that can be used for safety-related operation (-> safety mode) in the ET 200S distributed I/O system. These modules are equipped with integrated -> safety functions. Fail-safe systems (F-systems) are systems that remain in a safe state or immediately switch to another safe state as soon as particular failures occur. The maximum fault response time for an F-system is the time between the occurrence of any fault and a safe response at all affected fail-safe outputs. For -> F-System in total: The maximum fault response time is the time between occurrence of any fault in any -> F-I/O and a safe response at the relevant fail-safe output. For digital inputs: The maximum fault response time is the time between the occurrence of a fault and a safe response at the backplane bus. For digital outputs: The maximum fault response time is the time between the occurrence of a fault and a safe response at the digital output.
Fail-Safe Systems
14-3
Glossary
F-CPU
An F-CPU is a central processing unit with fail-safe capability that is permitted for use in S7 Distributed Safety/S7 F/FH systems. For S7 F/FH systems, the F-copy license allows the central processing unit to be used as an F-CPU. In other words, it can execute a -> safety program. For S7 Distributed Safety, an F-copy license is not required. A -> standard user program can also be run on the F-CPU.
F-I/O
F-I/O is a group designation for fail-safe inputs and outputs available in SIMATIC S7 for integration in S7 Distributed Safety and S7 F/FH systems. The following F-I/O modules are available: Fail-safe I/O module for ET 200eco
S7-300 fail-safe signal modules (F-SMs) Fail-safe modules for ET 200S Fail-safe DP standard slaves (for S7 Distributed Safety only)
Module faults can be external faults (for example, missing load voltage) or internal faults (for example, processor failure). An internal fault always requires module replacement. -> PROFIsafe monitoring time Motor starter is a general term referring to direct starters and reversing starters. Motor starters are used to specify motor startup and direction of rotation. In the ET 200S fail-safe modules, every fail-safe digital output consists of a P-switch DOx P (current sourcing) and an M-switch DOx M (current sinking). The load is connected between the P and M-switches. Both switches are always set so that voltage is applied to the load.
M-Switch
N Non-equivalent sensor A nonequivalent -> sensor is a reversing switch that is connected to two inputs of an -> F-I/O (via 2 channels) in -> fail-safe systems (for -> 1oo2 evaluation of sensor signals).
14-4
Glossary
P Parameter Assignment Parameter assignment over PROFIBUS DP: Transfer of slave parameters from the DP master to the DP slave Parameter assignment of modules: Setting the module behavior using the STEP 7 configuration software Passivation If an -> F-I/O module detects a fault, it switches either the affected channel or all channels to a -> safe state; that is, the channels of the F-I/O module are passivated. The F-I/O signals the detected faults to the -> F-CPU. For an F-I/O with inputs, if passivation occurs, the F-system provides fail-safe values for the safety program instead of the process values pending at the fail-safe inputs. For an I/O module with outputs, if passivation occurs, the F-system transfers fail-safe values (0) to the fail-safe outputs instead of the output values provided by the safety program. PG Programming devices (PGs) are compactly designed personal computers made especially for use in an industrial setting. A programming device (PG) is entirely equipped for programming SIMATIC automation systems. Prewiring means wiring the terminal modules before inserting the electronic modules. The process image is a component of the system memory of the CPU. At the beginning of the cyclic program, the signal states of the input modules are transferred to the process image of the inputs. At the end of the cyclic program, the process image of the outputs are transferred as a signal state to the DP slave. The process safety time of a process is a time interval during which the process can be left on its own without risk to life and limb of the operating personnel or damage to the environment. Within the fault tolerance time, any type of F-system process control is tolerated. That is, during this time, the -> F-system can control its process incorrectly or it can even exercise no control at all. The fault tolerance time depends on the process type and must be determined on a case-by-case basis.
Prewiring
Process Image
14-5
Glossary
PROFIBUS
PROcess FIeld BUS, process and fieldbus standard specified in IEC 61784-1:2002 Ed1 CP 3/1. This standard specifies functional, electric, and mechanical properties for a bit-serial field bus system. PROFIBUS is available with the following protocols: DP (= distributed I/O), FMS (= Fieldbus Message Specification), PA (= Process automation), or TF (= Technological functions).
PROFIsafe
Safety-related PROFIBUS DP/PA bus profile for communication between the -> safety program and the -> F-I/O in an -> F-system. Every -> fail-safe module has a PROFIsafe address You must configure the PROFIsafe address in STEP 7 HW Config and set it on the F-I/O using a switch. Monitoring time for safety-related communication between the F-CPU and F-I/O A component must be set in the fail-safe state following the proof-test interval. That is, it is replaced by an unused component or it is proven to be completely error-free. -> See M-Switch.
PROFIsafe Address
Availability-enhancing redundancy means multiple availability of components to ensure that components continue to function even in the event of hardware faults. Multiple availability of components with the aim of exposing hardware faults based on comparison (for example, -> 1oo2 evaluation in -> failsafe modules. Once a fault has been eliminated, the -> F-I/O must be reintegrated (depassivated). The reintegration (switchover from fail-safe values to process values) occurs either automatically or only after user acknowledgement in the safety program. For an F-I/O module with inputs, the process values pending at the failsafe inputs are provided again for the -> safety program after reintegration. For an F-I/O module with outputs, the -> F-system again transfers the output values provided in the safety program to the failsafe outputs.
Reintegration
14-6
Glossary
Response time
Response time starts with the detection of an input signal and ends with the modification of a gated output signal. The actual response time is between the shortest and the longest response time. The longest response time must be used as a reference for configuring a system. For fail-safe digital inputs, the response time begins with a signal change at the digital input and ends when the safety message frame is safely prepared at the backplane bus. For failsafe digital outputs, the response time begins with an incoming safety message frame from the backplane bus and ends with a signal change at the digital output. For fail-safe digital inputs: the response time represents the time between a signal change at the digital input and safe delivery of the safety message frame on the backplane bus. For fail-safe digital outputs: the response time represents the time between an arriving safety message frame from the backplane bus and the signal change at the digital output.
A reversing starter is a -> motor starter that determines the rotational direction of a motor. It comprises a circuit-breaker and two contactors.
The basic principle of the safety concept in F-systems is the existence of a safe state for all process variables. For the digital F-I/O, the safe state is, for example, the value "0". Safety level (AK) in accordance with DIN V 19250 (DIN V VDE 0801): Safety classes are a way to categorize safety requirements for preventing and remedying faults. With -> fail-safe modules, safety requirement classes up to A6 can be used in -> safety mode.
Safety Function
Safety function is a mechanism built into the -> F-CPU and -> F-I/O that allows them to be used in -> S7 Distributed Safety or S7 F/FH systems. IEC 61508: Function implemented by a safety system to ensure that the system is kept in a safe state or brought to a safe state in the event of a particular fault.
The safety integrity level (SIL) is a safety class in accordance with IEC 61508 and prEN 50129. The higher the safety integrity level, the stricter the measures must be to prevent and eliminate systematic faults and to remedy hardware failures. Safety modules can be used in safety mode up to SIL3.
In safety mode, data is transferred between the -> F-CPU and the -> F-I/O in a safety message frame.
14-7
Glossary
Safety Mode
Safety mode is the operating mode of the -> F-I/O that allows -> safetyrelated communication by means of -> safety message frames. ET 200S -> fail-safe modules are designed for operation only in safety mode.
The safety program is a safety-related user program. Safety-related communication is used to exchange fail-safe data.
-> 1oo1 evaluation Sensor signal is read out once -> 1oo2 evaluation: To increase availability, the sensor signal is read in twice by the same module and compared internally.
Sensors
Sensors permit exact acquisition of digital and analog signals and exact measurement of routes, positions, velocities, rotational speeds, weights, etc. Operating mode of F-I/O, in which standard communication is possible but not -> safety-related communication by means of -> safety message frames. Fail-safe signal modules of S7-300 can be used in standard mode or -> safety mode. Fail-safe modules of ET 200S are designed for safety mode only.
Standard Operation
Static parameters
Static parameters can only be set when the CPU is in STOP mode and cannot be changed by means of SFC (system function) while the user program is running.
T Terminal Module The ET 200S distributed I/O system is terminated with the terminal module. If a terminal module is not inserted, the ET 200S is not ready for operation.
V Voltage Bus (P1/P2) Voltage buses (P1 and P2) are two internal buses that supply the electronic modules with voltage. The voltage buses are fed by the power module and are connected by means of the terminal module. A voltage group is a group of electronic modules supplied by a power module.
Voltage Group
14-8
Index
1
1 VsF LED ..................................................... 7-5 EM 4/8 F-DI DC 24V ................................ 9-69 1oo1 evaluation............................................ 14-1 EM 4/8 F-DI DC 24V ................................ 9-54 1oo2 evaluation............................................ 14-1 EM 4/8 F-DI DC 24V 9-56, 9-59, 9-61, 9-65, 966 block diagram EM 4 F-DO DC 24V/2 A ...........................9-79 EM 4/8 F-DI DC 24V.................................9-48 PM-D F DC 24V .......................................9-39 PM-E F pm DC 24V....................................9-9 PM-E F pp DC 24V...................................9-28 Bus profile PROFIsafe................................................14-6
C
Cables shielded ....................................................9-49 Capacitive crosstalk input signals ...............................................9-6 output signals .............................................9-6 Capacitive loads connecting .......................................9-13, 9-83 Cat..................................................See category Category (Cat.).............................................14-1 achievable ..................................................2-5 Causes of errors EM 4 F-DO DC 24V/2 A ...........................9-85 EM 4/8 F-DI DC 24V.................................9-70 PM-D F DC 24V .......................................9-41 PM-E F pm DC 24V..................................9-16 PM-E F pp DC 24V...................................9-31 CE Certification .......................................1-2, 8-2 Central processing unit F-capable ......................................See F-CPU Changes in this manual .............................................1-2 Channel deactivated .................................................7-2 Channel fault .........................................7-2, 14-2 Channel group..............................................14-2 Channel group error .......................................7-2 Channel number ...........................................14-2 Channel-related diagnostics of F-modules ..............................................7-6 Commissioning of ET 200S .................................................2-6 Communication safety-related............................................14-8 Communication error ....................... 6-5, 7-3, 7-7 EM 4 F-DO DC 24V/2 A ...........................9-85 EM 4/8 F-DI DC 24V.................................9-69 PM-D F DC 24V .......................................9-40 PM-E F pm DC 24V..................................9-15 PM-E F pp DC 24V...................................9-30 Conditioning time internal......................................................13-1 Conditions of use..........................................8-12
2
2 VsF LED ..................................................... 7-5 EM 4/8 F-DI DC 24V ................................ 9-69
A
Accessories.................................................. 12-1 Acknowledgment time.................................. 14-1 EM 4 F-DO DC 24V/2 A........................... 9-89 EM 4/8 F-DI DC 24V ................................ 9-74 PM-E F DC 24V ....................................... 9-44 PM-E F pm DC 24V ................................. 9-21 PM-E F pp DC 24V .................................. 9-35 Actuators...................................................... 14-1 externally supplied ..................................... 6-2 requirements .............................................. 6-6 Address PROFIsafe ................................................. 5-3 Address assignment in the F-CPU F-Module.................................................... 5-1 Address switch for PROFIsafe addresses .......................... 5-3 setting ........................................................ 5-4 Addresses Occupied by Useful Data ............. 5-2 AK .............................................See Safety class Applications EM 4/8 F-DI DC 24V ................................ 9-52 Approvals ....................................................... 1-2 CE, FM, UL, CSA, cULus, KEMA. 8-2, 8-3, 8-4 Shipbuilding ............................................... 8-5 AUX1 bus.............................................. 3-4, 14-1 Availability .................................................... 14-1
B
Backplane bus ............................................. 14-1 Basic knowledge Requirements............................................. 1-1
Index-1
Index
Configuration................................................ 14-2 ET 200S with F-modules............................ 3-2 ET 200S with F-motor starters ................... 3-3 of F-modules .............................................. 4-1 Connecting capacitive loads ............... 9-13, 9-83 Connecting non-floating loads with EM 4 F-DO DC 24V/2A..................... 9-76 with PM-E F pm DC 24V PROFIsafe ......... 9-5 Connection to Common Potential ................ 14-2 power modules........................................... 3-4 Conventions in this manual............................................. 1-5 Corrective Measures EM 4 F-DO DC 24V/2 A........................... 9-85 EM 4/8 F-DI DC 24V ................................ 9-70 PM-D F DC 24V ....................................... 9-41 PM-E F pm DC 24V ................................. 9-16 PM-E F pp DC 24V .................................. 9-31 CRC ............................................................. 14-2 CRC signature ..................................... See CRC Cross circuit EM 4 F-DO DC 24V/2 A........................... 9-81 PM-E F pm DC 24V ................................. 9-11 CSA Approval ................................................ 8-3 C-Tick Mark.................................................... 1-2 cULus approval .............................................. 8-3 Current carrying capacity maximum ................................................... 3-8
Documentation additional ....................................................1-3 DP master ....................................................14-3 DP slave .......................................................14-3 Duration of sensor signals Requirement Relating to.............................6-6
E
Electrical connection.......................................6-2 Electromagnetic compatibility .........................8-7 Electronic module ...........................................3-6 fail-safe.......................................................3-5 Electronics power supply, failure of PM-D F DC 24V .......................................9-40 EM 4 F-DO DC 24V/2 A acknowledgment time...............................9-89 block diagram ...........................................9-79 causes of errors and corrective measures..............................................9-85 Diagnostic functions .................................9-85 fail-safe performance characteristics ........9-87 front view ..................................................9-77 Order Number ..........................................9-75 parameters in STEP 7 ..............................9-83 Readback Time ........................................9-83 Technical specifications............................9-87 Terminal assignment ................................9-78 Wiring diagram .........................................9-80 EM 4 F-DO DC 24V/2A Fault/Error types .........................................7-7 EM 4/8 F-DI DC 24V acknowledgment time...............................9-74 Applications ..............................................9-52 block diagram ...........................................9-48 causes of errors and corrective measures..............................................9-70 Diagnostic functions .................................9-69 Discrepancy time ......................................9-51 fail-safe performance characteristics ........9-72 Fault/Error types .........................................7-7 front view ..................................................9-46 Order Number ..........................................9-45 parameters in STEP 7 ..............................9-49 Sensor power supply .......................9-56, 9-65 Sensor Supply ..........................................9-54 Special features of fault detection ..9-55, 9-58, 9-61, 9-64, 9-68 Technical specifications............................9-71 Terminal assignment ................................9-47 Wiring diagram ... 9-54, 9-56, 9-59, 9-61, 9-65, 9-66 EMC ...............................................................8-7 Environment-related requirements ...............8-12 climatic .....................................................8-13 mechanical ...............................................8-12 Error detection EM 4/8 F-DI DC 24V.................................9-55 ET 200S .........................................................2-2 External protective circuit ...........................8-8 Parameter Length.......................................3-7 protection from overvoltage ........................8-8 ET 200S distributed I/O system......................2-2
ET 200S Distributed I/O System Fail-Safe Modules A5E00103686-03
D
Dark period .................................................. 14-2 Data records 0 and 1 diagnostic data......................................... 10-1 Deactivated channel ...................................... 7-2 diagnostic data............................................. 10-1 Diagnostic functions....................................... 7-4 can be activated by user ............................ 7-5 cannot be activated by user ....................... 7-4 EM 4 F-DO DC 24V/2 A........................... 9-85 EM 4/8 F-DI DC 24V ................................ 9-69 PM-D F DC 24V ....................................... 9-40 PM-E F pm DC 24V ................................. 9-15 PM-E F pp DC 24V .................................. 9-30 Reading out................................................ 7-8 Diagnostics channel-related .......................................... 7-6 Definition .................................................... 7-4 Digital module fail-safe ...................................................... 2-2 Dimension Drawings F modules ................................................ 11-1 Direct starter ................................................ 14-4 Directives ....................................................... 8-6 Discrepancy analysis .......................... 9-51, 14-3 Discrepancy behavior .................................. 9-50 EM 4/8 F-DI DC 24V ................................ 9-49 Discrepancy error EM 4/8 F-DI DC 24V ................................ 9-69 Discrepancy time ................................ 9-51, 14-3 EM 4/8 F-DI DC 24V ................................ 9-49 Disposal ......................................................... 1-5
Index-2
Index
F
F Configuration Pack ..................................... 4-1 F modules ............................................. 2-2, 14-3 Address assignment in the F-CPU............. 5-1 available..................................................... 2-4 Configuration.............................................. 4-1 Dimension Drawings ................................ 11-1 Fault reaction ............................................. 7-2 inserting and removing............................... 6-5 installing ..................................................... 5-5 Mounting Dimensions ................................ 5-5 Order Number ............................................ 1-1 Parameter assignment............................... 4-1 Parameter Length ...................................... 3-7 possible uses ............................................. 2-2 Response time ......................................... 13-1 Use in F-systems ....................................... 2-3 wiring ......................................................... 6-4 F_destination_address................................... 5-3 EM 4 F-DO DC 24V/2 A........................... 9-83 EM 4/8 F-DI DC 24V ................................ 9-49 PM-D F DC 24V ....................................... 9-40 PM-E F pm DC 24V ................................. 9-13 PM-E F pp DC 24V .................................. 9-30 F_Source_Address ........................................ 5-3 Fail-safe automation system .......................... 2-2 Fail-Safe Modules ....................... See F-modules fail-safe performance characteristics ............. 9-1 EM 4 F-DO DC 24V/2 A........................... 9-87 EM 4/8 F-DI DC 24V ................................ 9-72 PM-D F DC 24V ....................................... 9-42 PM-E F pm DC 24V ................................. 9-18 PM-E F pp DC 24V .................................. 9-33 Fail-safe system............................ See F-system Fail-safe value output..................................... 7-2 Fault detection EM 4/8 F-DI DC 24V .....9-58, 9-61, 9-64, 9-68 Fault reaction of F-modules .............................................. 7-2 Fault response time ..................................... 14-3 Fault/Error types of F-modules .............................................. 7-7 F-copy license.............................................. 14-4 F-CPU.......................................................... 14-4 Addresses Occupied by Useful Data ......... 5-2 F-I/O............................................................. 14-4 FM approval ................................................... 8-4 F-monitoring time ......................................... 14-4 EM 4 F-DO DC 24V/2 A........................... 9-83 EM 4/8 F-DI DC 24V ................................ 9-49 PM-D F DC 24V ....................................... 9-40 PM-E F pm DC 24V ................................. 9-13 PM-E F pp DC 24V .................................. 9-30 F-system ............................................... 2-2, 14-3 example configuration................................ 2-3 F-Systems............................................. 2-3, 14-4 Functional extra low voltage safe ............................................................ 6-2 Fuse, external PM-E F pm DC 24V ................................. 9-10 PM-E F pp DC 24V .................................. 9-29
G
General technical specifications .....................8-1 Guide to the manual To manual ..................................................1-5
H
H/F Competence Center.................................1-6
I
IEC 61131 ......................................................8-4 IM 151-7 F-CPU .............................................2-4 IM151-1 HIGH FEATURE...............................2-4 Input delay.............................................6-6, 13-3 EM 4/8 F-DI DC 24V.................................9-49 input signals Capacitive crosstalk....................................9-6 Inserting F-Module ....................................................6-5 Installing F-modules ..................................................5-5 Installing the chassis cable...........................9-24 Interface module applicable ...................................................2-4 Interference pulse-shaped..............................................8-7 sinusoidal .................................................8-10 Internal conditioning time..............................13-1 Internal error EM 4 F-DO DC 24V/2 A ...........................9-85 EM 4/8 F-DI DC 24V.................................9-69 PM-D F DC 24V .......................................9-40 PM-E F pm DC 24V..................................9-15 PM-E F pp DC 24V...................................9-30 react to .......................................................7-7 IP20 ..............................................................8-14 Isolation test .................................................8-14
L
LED display of faults.......................................................7-5 Line break.......................................................7-7 Line cross section...........................................6-2 Load current power supply, dip PM-D F DC 24V .......................................9-40 Load current power supply, failure of PM-D F DC 24V .......................................9-40 Load voltage missing......................................7-7 Loads, capacitive connecting .......................................9-13, 9-83
M
Machine protection applications in.............................................7-5 Manual Contents .....................................................1-5 Manual Collection ...........................................1-4 Marking for Australia.......................................1-2
Index-3
Index
Maximum configuration ET 200S with F-modules............................ 3-7 per voltage group ....................................... 3-8 Missing external auxiliary supply EM 4 F-DO DC 24V/2 A........................... 9-85 EM 4/8 F-DI DC 24V ................................ 9-69 PM-D F DC 24V ....................................... 9-40 PM-E F pm DC 24V ................................. 9-15 PM-E F pp DC 24V .................................. 9-30 Module diagnostics ........................................ 7-8 Module failure reaction to .................................................. 7-7 Module fault ................................................. 14-4 diagnostic message ................................... 7-7 Module replacement .................................... 14-4 Modules fail-safe ...................................................... 2-2 Monitoring time ............................................ 14-4 EM 4 F-DO DC 24V/2 A........................... 9-83 EM 4/8 F-DI DC 24V ................................ 9-49 PM-D F DC 24V ....................................... 9-40 PM-E F pm DC 24V ................................. 9-13 PM-E F pp DC 24V .................................. 9-30 Motor starter................................................. 14-4 Mounting dimensions F-modules .................................................. 5-5 Mounting rails applicable................................................... 6-4 M-Switch .................................... 9-10, 9-80, 14-4
P
Parameter EM 4 F-DO DC 24V/2 A ...........................9-83 EM 4/8 F-DI DC 24V.................................9-49 PM-D F DC 24V .......................................9-40 PM-E F pm DC 24V..................................9-13 PM-E F pp DC 24V...................................9-30 Parameter assignment .................................14-5 of F-modules ..............................................4-1 Parameter assignment error...........................7-7 EM 4 F-DO DC 24V/2 A ...........................9-85 EM 4/8 F-DI DC 24V.................................9-69 PM-D F DC 24V .......................................9-40 PM-E F pm DC 24V..................................9-15 PM-E F pp DC 24V...................................9-30 Parameter Length of F-modules ..............................................3-7 Parameters static .........................................................14-8 Passivation ............................................7-2, 14-5 channel-specific........................................14-2 PG ...............................See Programming device PM-D F DC 24V block diagram ...........................................9-39 causes of errors and corrective measures..............................................9-41 Diagnostic functions .................................9-40 fail-safe performance characteristics ........9-42 Fault/Error types .........................................7-7 front view ..................................................9-38 Order Number ..........................................9-36 parameters in STEP 7 ..............................9-40 Technical specifications............................9-42 Terminal assignment ................................9-39 PM-D F DC24V ..............................................3-6 PM-E 24 VDC.................................................3-6 PM-E DC24..48V ............................................3-6 PM-E DC24..48V/AC24..230V........................3-6 PM-E F DC 24V acknowledgment time...............................9-44 PM-E F pm DC 24V acknowledgment time...............................9-21 block diagram .............................................9-9 causes of errors and corrective measures9-16 Diagnostic functions .................................9-15 fail-safe performance characteristics ........9-18 Fault/Error types .........................................7-7 front view ................................................. 9-7 Order Number ............................................9-2 parameters in STEP 7 ..............................9-13 Readback Time ........................................9-13 Relay output .............................................9-10 Technical specifications............................9-18 Terminal assignment ..................................9-7 Wiring diagram .........................................9-10 PM-E F pm DC24V.........................................3-6
N
NAMUR recommendations requirements for power supply................... 6-3 Nominal line voltages................................... 8-14 Nonequivalence ........................................... 14-1 Non-equivalent sensor ................................. 14-4 Number of modules per ET 200S with F-modules...................... 3-7
O
Operation safety of system ................................................... 2-1 Optional package S7 distributed safety .................................. 4-1 S7 F Systems............................................. 4-1 Order numbers F modules .................................................. 1-1 of accessories .......................................... 12-1 output signals Capacitive crosstalk ................................... 9-6 Overload ........................................................ 7-7 EM 4 F-DO DC 24V/2 A......... 9-81, 9-82, 9-85 PM-E F pm DC 24V ................................. 9-11 Overtemperature............................................ 7-7 EM 4 F-DO DC 24V/2 A........................... 9-85 EM 4/8 F-DI DC 24V ................................ 9-69 PM-D F DC 24V ....................................... 9-40 PM-E F pm DC 24V ................................. 9-15 PM-E F pp DC 24V .................................. 9-30
Index-4
Index
PM-E F pp DC24V acknowledgment time .............................. 9-35 block diagram........................................... 9-28 causes of errors and corrective measures ............................................. 9-31 Diagnostic functions................................. 9-30 fail-safe performance characteristics ....... 9-33 Fault/Error types ........................................ 7-7 front view ................................................. 9-26 Order Number .......................................... 9-23 parameters in STEP 7.............................. 9-30 Relay output............................................. 9-29 Technical specifications ........................... 9-32 Terminal assignment................................ 9-26 Wiring diagram......................................... 9-29 PM-E F pp DC24V ......................................... 3-6 possible uses F modules .................................................. 2-2 Power failure ride-through.............................. 6-3 Power module ................................................ 3-6 fail-safe ............................................... 2-2, 3-5 positioning and connecting ........................ 3-4 Power supply requirements .............................................. 6-3 Prewiring ...................................................... 14-5 Probability hazardous errors........................................ 6-6 Process image ............................................. 14-5 Process safety time...................................... 14-5 Processor failure .......................................... 14-4 Process-related functions electronic modules with..................... 9-6, 9-25 PROFIBUS .................................................. 14-6 PROFIBUS standard...................................... 8-4 PROFIsafe ................................................... 14-6 address ............................................. 5-3, 14-6 Address...................................................... 6-5 Address assignment .................................. 5-3 -Monitoring time ....................................... 14-6 PROFIsafe Address Assignment rules ........................................................... 5-4 Programming device .................................... 14-5 Proof-test interval..................6-6, 9-1, 9-52, 14-6 Protection class............................................ 8-14 Protective conductor bus ............................... 3-4 P-Switch............. 9-10, 9-29, 9-80 See M-Switch Pulse-shaped interference ............................. 8-7 Purpose of this Manual .................................. 1-1 PWR LED ...................................................... 7-5 PM-D F DC 24V ....................................... 9-40 PM-E F pm DC 24V ................................. 9-15 PM-E F pp DC 24V .................................. 9-30
Redundancy .................................................14-6 References additional ....................................................1-3 Reintegration .........................................7-3, 14-6 Relay output PM-E F pm DC 24V..................................9-10 PM-E F pp DC 24V...................................9-29 Relays, two on one digital output ........................9-11, 9-81 Removing F-Module ....................................................6-5 Requirement class (AK) achievable ..................................................2-5 Requirements sensors and actuators ................................6-6 Response time .............................................14-7 of F-modules ............................................13-1 Reversing starter .................................14-4, 14-7
S
S7 distributed safety example configuration ................................2-3 optional package ........................................2-5 Optional package .......................................4-1 S7 F Systems Optional package .......................................4-1 Safe functional extra low voltage....................6-2 Safe shutdown................................................3-6 Safe state ...................................... 2-2, 7-2, 14-7 Safety class conditions for achieving with EM 4 F-DO DC 24V/2 A .......................9-75 conditions for achieving with EM 4/8 F-DI DC 24V....................9-45, 9-53 conditions for achieving with PM-D F DC 24V....................................9-37 conditions for achieving with PM-E F pm DC 24V................................9-3 conditions for achieving with PM-E F pp DC 24V...............................9-24 Safety class (AK) ..........................................14-7 Safety classes achievable ..................................................2-5 Safety function.......................................2-5, 14-7 Safety Integrity Level ...........................9-52, 14-7 achievable ..................................................3-6 Safety message frame..................................14-7 Safety mode .................................. 2-4, 5-3, 14-8 Safety program.............................................14-8 Safety-related communication ......................14-8 Safety-related deactivation ............ 7-7, 9-4, 9-24 EM 4 F-DO DC 24V/2 A ...........................9-85 PM-E F pm DC 24V..................................9-15 PM-E F pp DC 24V...................................9-30 Saving errors ..................................................7-2 Scope of this manual .............................................1-1 Sensor ..........................................................14-8 externally supplied......................................6-2 non-equivalent ..........................................14-4 requirements ..............................................6-6
R
Radio interference emission of............................................... 8-11 Readback Time EM 4 F-DO DC 24V/2 A........................... 9-83 PM-E F pm DC 24V ................................. 9-13 Reading out diagnostic function ..................................... 7-8 Recycling ....................................................... 1-5
ET 200S Distributed I/O System Fail-Safe Modules A5E00103686-03
Index-5
Index
Sensor evaluation ............................... 14-1, 14-8 EM 4/8 F-DI DC 24V ....9-49, 9-55, 9-58, 9-60, 9-63, 9-66, 9-67 Sensor interconnection 1-channel ................................................. 9-49 2-channel equivalent................................ 9-49 2-channel, non-equivalent............... 9-49, 9-66 EM 4/8 F-DI DC 24V .....9-49, 9-60, 9-63, 9-67 Sensor power supply EM 4/8 F-DI DC 24V .............. 9-55, 9-56, 9-65 Sensor signal requirement for duration............................. 6-6 Sensor Supply EM 4/8 F-DI DC 24V ....................... 9-54, 9-58 internal ..................................................... 9-49 Sensor voltage missing.................................. 7-7 Sensors requirements .............................................. 6-6 Service........................................................... 1-7 SF LED .......................................................... 7-5 EM 4 F-DO DC 24V/2 A........................... 9-77 PM-D F DC 24V ....................................... 9-38 PM-E F pm DC 24V ................................... 9-7 PM-E F pp DC 24V .................................. 9-26 SFC 13........................................................... 7-8 Shipbuilding approval..................................... 8-5 Short circuit .................................................... 7-7 EM 4 F-DO DC 24V/2 A........................... 9-85 EM 4/8 F-DI DC 24V .............. 9-55, 9-58, 9-69 on outputs of standard DO modules . 9-4, 9-25 PM-D F DC 24V ....................................... 9-40 PM-E F pm DC 24V ................................. 9-15 PM-E F pp DC 24V .................................. 9-30 Short-circuit test ............................. 6-6, 7-5, 13-3 EM 4/8 F-DI DC 24V ....9-49, 9-55, 9-58, 9-60, 9-63, 9-66, 9-67, 9-69 Shutdown safe ............................................................ 3-6 SIL ............................... See Safety integrity level Sinusoidal interference ................................ 8-10 Slave Diagnostics .......................................... 7-5 Reading out................................................ 7-8 Standard DO modules Safety-related deactivation................ 9-4, 9-24 Standard operation ............................... 2-4, 14-8 Standards ............................................... 1-2, 8-6 Static parameters......................................... 14-8 Storage conditions ....................................... 8-11 Supply voltage EM 4 F-DO DC 24V/2 A........................... 9-80 Supply voltage, failure of EM 4/8 F-DI DC 24V ................................ 9-69 PM-D F DC 24V ....................................... 9-40 PM-E F pm DC 24V ................................. 9-15 PM-E F pp DC 24V .................................. 9-30 Support .......................................................... 1-7 additional ................................................... 1-5 Surge filter ..................................................... 8-8
T
Technical specifications EM 4 F-DO DC 24V/2 A ...........................9-87 EM 4/8 F-DI DC 24V.................................9-71 general .......................................................8-1 PM-D F DC 24V .......................................9-42 PM-E F pm DC 24V..................................9-18 PM-E F pp DC 24V...................................9-32 Terminal assignment EM 4 F-DO DC 24V/2 A ...........................9-78 EM 4/8 F-DI DC 24V.................................9-47 PM-D F DC 24V .......................................9-39 PM-E F pm DC 24V....................................9-7 PM-E F pp DC 24V...................................9-26 Terminal module.. 3-4, 3-5, 9-7, 9-26, 9-39, 9-47, 9-78, 14-8 Test voltages ................................................8-14 TM-E30C44-01....................................9-47, 9-78 TM-E30C46-A1 ...................................9-47, 9-78 TM-E30S44-01 ....................................9-47, 9-78 TM-E30S46-A1....................................9-47, 9-78 TM-P30C44-A0 .....................................9-7, 9-26 TM-P30S44-A0......................................9-7, 9-26 TM-PF30S47-F1...........................................9-39 Total voltage per voltage group .......................................3-8 Total width ET 200S .....................................................3-7 Training center ...............................................1-6 Transport and storage conditions .................8-11 TV certificate................................................8-6 Type of protection IP20 ................................8-14
U
UL approval ....................................................8-3
V
Vibration .......................................................8-12 Voltage bus ...........................................3-4, 14-8 Voltage buses.............................. 9-2, 9-23, 9-37 Voltage group .................. 3-2, 3-3, 3-4, 3-6, 14-8 Maximum configuration ..............................3-8 Voltages nominal line ..............................................8-14
W
Wire break EM 4 F-DO DC 24V/2 A 9-81, 9-82, 9-83, 9-85 PM-E F pm DC 24V............... 9-11, 9-13, 9-15 Wiring F-modules ..................................................6-4 Wiring diagram EM 4 F-DO DC 24V/2 A ...........................9-80 EM 4/8 F-DI DC 24V.... 9-54, 9-56, 9-59, 9-61, 9-65, 9-66 PM-E F pm DC 24V..................................9-10 PM-E F pp DC 24V...................................9-29
Index-6
Your Address: Name: Siemens AG A&D AS SM ID Postfach 1963 D-92209 Amberg Telefax: +49(9621)80-3103 mailto:doku@ad.siemens.de Company: Position: Street: Postal code / Place: Email: Phone: Fax:
General Questions
1.
3.
no
2.
4.
yes
no
Please specify the documents, for which you want to answer the questions below: A: Manual S7 Distributed Safety, Configuring and Programming B: Manual S7-300, Fail-Safe Signal Modules D: Manual ET 200eco, Distributed I/O Fail-Safe I/O Module E: System Description Safety Engineering in SIMATIC S7 F: Getting Started S7 Distributed Safety
1.
In which project phase do you use this document frequently? Information Planning Configuration Assembly
Were able to find the required information? yes which was not: no
4.
What is the scope of the information? Just right Not enough - which topic:
Programming
2.
Finding the required information in the document: Too detailed which topic: How quickly can you find the desired information in the document? immediately after a brief search not at all after a long search if no, which was not: 5. Is the information easy to understand (texts, figures, tables)? yes no
Which search method do you prefer? Table of contents Full-text search Index others: 6. Are examples important to you? no, of less importance
Which supplements/improvements would you like in order to help you find the required information quickly?
yes, important were the examples enough? yes if no, on which topic: no
3.
Your judgement of the document as regards content. How satisfied are you with this document Totally satisfied Very satisfied Satisfied not very satisfied not satisfied 7. What are your suggestions as regards the contents of the document?