Documente Academic
Documente Profesional
Documente Cultură
GuardLogix
SAFETY FUNCTION
DOCUMENTS
Enabling Pendant
Safety Function Documents
Enabling Pendant
Products: 440J Enabling Switch / GuardLogix® /
Point Guard Safety I/O™ Modules
Safety Rating: PLe, Cat. 4 to EN ISO 13849.1 2008
Table of Contents:
Introduction 6-53
Configuration 6-57
NHP Safety Reference Guide > Safety Function Documents: GSR 6A-85
Safety Function Documents
Enabling Pendant
Products: 440J Enabling Switch / GuardLogix® /
Point Guard Safety I/O™ Modules
Safety Rating: PLe, Cat. 4 to EN ISO 13849.1 2008
NHP Safety Reference Guide > Safety Function Documents: GSR 6A-86
Safety Function Documents
Enabling Pendant
Products: 440J Enabling Switch / GuardLogix® /
Point Guard Safety I/O™ Modules
Safety Rating: PLe, Cat. 4 to EN ISO 13849.1 2008
Safety Function Realization: Risk Assessment Throughout this manual, when necessary, we use notes to make
you aware of safety considerations.
The required performance level is the result of a risk assessment
and refers to the amount of the risk reduction to be carried out
by the safety-related parts of the control system. Part of the
risk reduction process is to determine the safety functions of
the machine. For the purposes of this document the assumed
required performance level is Category 4, PLe.
NHP Safety Reference Guide > Safety Function Documents: GSR 6A-87
Safety Function Documents
Enabling Pendant
Products: 440J Enabling Switch / GuardLogix® /
Point Guard Safety I/O™ Modules
Safety Rating: PLe, Cat. 4 to EN ISO 13849.1 2008
NHP Safety Reference Guide > Safety Function Documents: GSR 6A-88
Safety Function Documents
Enabling Pendant
Products: 440J Enabling Switch / GuardLogix® /
Point Guard Safety I/O™ Modules
Safety Rating: PLe, Cat. 4 to EN ISO 13849.1 2008
Electrical Schematic
NHP Safety Reference Guide > Safety Function Documents: GSR 6A-89
Safety Function Documents
Enabling Pendant
Products: 440J Enabling Switch / GuardLogix® /
Point Guard Safety I/O™ Modules
Safety Rating: PLe, Cat. 4 to EN ISO 13849.1 2008
NHP Safety Reference Guide > Safety Function Documents: GSR 6A-90
Safety Function Documents
Enabling Pendant
Products: 440J Enabling Switch / GuardLogix® /
Point Guard Safety I/O™ Modules
Safety Rating: PLe, Cat. 4 to EN ISO 13849.1 2008
Configure the Controller and Add I/O Modules cont. 7. Name the module, type its IP address, and click OK.
We used 192.168.1.11 for this application example. Yours
5. Add the 1734-AENT adapter by right-clicking the 1768-ENBT may be different.
module in the Controller Organizer and choosing New
Module. 8. Click Change.
NHP Safety Reference Guide > Safety Function Documents: GSR 6A-91
Safety Function Documents
Enabling Pendant
Products: 440J Enabling Switch / GuardLogix® /
Point Guard Safety I/O™ Modules
Safety Rating: PLe, Cat. 4 to EN ISO 13849.1 2008
Configure the Controller and Add I/O Modules cont. 12. In the New Module dialog box, name the device ‘IB8S’ and
click Change.
10. In the Controller Organizer, right-click the 1734-AENT
adapter and choose New Module.
11. Expand Safety, select the 1734-IB8S module, and click OK.
13. When the Module Definition dialog box opens, change
the Output Data to ‘None’ and verify the Input Status is
Combined Status-Power’, and click OK. Setting the output
data to ‘None’ means that you cannot use the Test Outputs
as standard outputs, and we are not doing that in this
example. Note this saves one (1) controller connection
because we are only using the input connection.
NHP Safety Reference Guide > Safety Function Documents: GSR 6A-92
Safety Function Documents
Enabling Pendant
Products: 440J Enabling Switch / GuardLogix® /
Point Guard Safety I/O™ Modules
Safety Rating: PLe, Cat. 4 to EN ISO 13849.1 2008
NHP Safety Reference Guide > Safety Function Documents: GSR 6A-93
Safety Function Documents
Enabling Pendant
Products: 440J Enabling Switch / GuardLogix® /
Point Guard Safety I/O™ Modules
Safety Rating: PLe, Cat. 4 to EN ISO 13849.1 2008
3. Click Input Configuration and configure the module as shown. Inputs 0/1 are the Trojan 5 door
switch. Inputs 2/3 are the enabling switch. Test sources 0/1 are sourcing these devices. Inputs 4/5
are the reset buttons. Input 6 is the jog button that is actually located on the 440J enabling switch
in this example. Input 7 is the contactor monitoring circuit. Recall that input 7 is being sourced from
Test Output 2. Note that there really is no difference when an input channel is configured for safety
or standard. It is used more for documentation. The channels are configured for single because the
safety instructions within the GuardLogix system will detect discrepancy faults.
NHP Safety Reference Guide > Safety Function Documents: GSR 6A-94
Safety Function Documents
Enabling Pendant
Products: 440J Enabling Switch / GuardLogix® /
Point Guard Safety I/O™ Modules
Safety Rating: PLe, Cat. 4 to EN ISO 13849.1 2008
7. Click OK.
NHP Safety Reference Guide > Safety Function Documents: GSR 6A-95
Safety Function Documents
Enabling Pendant
Products: 440J Enabling Switch / GuardLogix® /
Point Guard Safety I/O™ Modules
Safety Rating: PLe, Cat. 4 to EN ISO 13849.1 2008
NHP Safety Reference Guide > Safety Function Documents: GSR 6A-96
Safety Function Documents
Enabling Pendant
Products: 440J Enabling Switch / GuardLogix® /
Point Guard Safety I/O™ Modules
Safety Rating: PLe, Cat. 4 to EN ISO 13849.1 2008
Programming cont.
NHP Safety Reference Guide > Safety Function Documents: GSR 6A-97
Safety Function Documents
Enabling Pendant
Products: 440J Enabling Switch / GuardLogix® /
Point Guard Safety I/O™ Modules
Safety Rating: PLe, Cat. 4 to EN ISO 13849.1 2008
NHP Safety Reference Guide > Safety Function Documents: GSR 6A-98
Safety Function Documents
Enabling Pendant
Products: 440J Enabling Switch / GuardLogix® /
Point Guard Safety I/O™ Modules
Safety Rating: PLe, Cat. 4 to EN ISO 13849.1 2008
Enable Pendant and contactor calculations are based on 1 operation of the enable pendant per shift; 3 per day;
therefore 1095 operations of pendant and contactors per year.
The measures against Common Cause Failure (CCF) are quantified using the scoring process outlined in Annex F
of ISO 13849-1. For the purposes of the PL calculation, the required score of 65 needed to fulfill the CCF requirement
is considered to be met. The complete CCF scoring process must be done when implementing this example.
NHP Safety Reference Guide > Safety Function Documents: GSR 6A-99
Safety Function Documents
Enabling Pendant
Products: 440J Enabling Switch / GuardLogix® /
Point Guard Safety I/O™ Modules
Safety Rating: PLe, Cat. 4 to EN ISO 13849.1 2008
NHP Safety Reference Guide > Safety Function Documents: GSR 6A-100
Safety Function Documents
Enabling Pendant
Products: 440J Enabling Switch / GuardLogix® /
Point Guard Safety I/O™ Modules
Safety Rating: PLe, Cat. 4 to EN ISO 13849.1 2008
Visually inspect the RSLogix 5000 application program to verify suitable safety certified instructions are utilized. The logic is readable,
5
understandable and testable with the aid of clear comments.
6 All input devices are qualified by cycling their respective actuators. Monitor the status in the RSLogix 5000 Controller Tags window.
7 All output devices are qualified by cycling their respective actuators. Monitor the status in the RSLogix 5000 Controller Tags window.
Normal Operation Verification - The GuardLogix safety system properly responds to all normal Start, Stop, Enabling and Reset Commands
Test Step Verification Pass/Fail Changes/Modifications
Initiate a Start Command. Both contactors should energize for a normal machine run condition.
1
Verify proper machine status indication and RSLogix 5000 safety application program indication.
Initiate a Stop Command. Both contactors should de-energize for a normal machine Stop condition.
2
Verify proper machine status indication and RSLogix 5000 safety application program indication.
While Stopped, and with the door interlock switch open, remove the enabling switch from the interlocked storage station. Both contactors
3 should remain de-energized and open for a normal safe condition. Verify proper machine status indication and RSLogix 5000 safety
application program indication.
While Stopped, engage the enabling switch. Both contactors should remain de-energized and open for a normal safe condition until the
4
Jog button is pressed. Verify proper machine status indication and RSLogix 5000 safety application program indication.
While Stopped, engage the enabling switch to the mid-position and repeatedly press the Jog pushbutton. Both contactors should energize
5 when the Jog button is pressed and de-energize when it is released. Verify proper machine status indication and RSLogix 5000 safety
application program indication.
While Jogging, fully release the enabling switch. Both contactors should de-energize and open for a normal safe condition. Verify proper
6
machine status indication and RSLogix 5000 safety application program indication. Repeat for the fully engaged position.
Initiate Reset Command. Both contactors should remain de-energized. Verify proper machine status indication and RSLogix 5000 safety
7
application program indication.
NHP Safety Reference Guide > Safety Function Documents: GSR 6A-101
Safety Function Documents
Enabling Pendant
Products: 440J Enabling Switch / GuardLogix® /
Point Guard Safety I/O™ Modules
Safety Rating: PLe, Cat. 4 to EN ISO 13849.1 2008
GuardLogix Enabling Switch Safety Function Verification and Validation Checklist cont.
Abnormal Operation Verification - The GuardLogix safety system properly responds to all foreseeable faults with corresponding diagnostics.
Enabling Switch and Interlock Input Tests
Test Step Validation Pass/Fail Changes/Modifications
While Jogging, remove the enabling interlock Channel 1 wire from the Safety I/O. Both contactors should de-energize.
1 Verify proper machine status indication and RSLogix 5000 safety application program indication.
Verify unable to reset and restart with fault. Restore Channel 1 and repeat for Channel 2.
While Jogging, short the enabling interlock Channel 1 of the Safety I/O to +24VDC. Both contactors should de-energize.
2 Verify proper machine status indication and RSLogix 5000 safety application program indication. Verify unable to reset and restart
with fault. Restore Channel 1 and repeat for Channel 2.
While Jogging, short the enabling interlock Channel 1 of the Safety I/O to (-) 0VDC. Both contactors should de-energize.
3 Verify proper machine status indication and RSLogix 5000 safety application program indication.
Verify unable to reset and restart with fault. Restore Channel 1 and repeat for Channel 2.
While Jogging, short the enabling interlock Channels 1 & 2 of the Safety I/O. Both contactors should de-energize.
4 Verify proper machine status indication and RSLogix 5000 safety application program indication.
Verify unable to reset and restart with fault. Restore Channel 1 & 2 wiring.
While Jogging, remove the enabling switch Channel 1 wire from the Safety I/O. Both contactors should de-energize.
5 Verify proper machine status indication and RSLogix 5000 safety application program indication.
Verify unable to reset and restart with fault. Restore Channel 1 and repeat for Channel 2.
While Jogging, short the enabling switch Channel 1 of the Safety I/O to +24VDC. Both contactors should de-energize.
6 Verify proper machine status indication and RSLogix 5000 safety application program indication.
Verify unable to reset and restart with fault. Restore Channel 1 & 2 wiring.
While Jogging, short the enabling switch Channel 1 of the Safety I/O to (-) 0VDC. Both contactors should de-energize.
7 Verify proper machine status indication and RSLogix 5000 safety application program indication.
Verify unable to reset and restart with fault. Repeat for Channel.
While Jogging, short the enabling switch Channels 1 & 2 of the Safety I/O. Both contactors should de-energize.
8 Verify proper machine status indication and RSLogix 5000 safety application program indication.
Verify unable to reset and restart with fault.
While Running, short Channel 1 to Test Source 1 of the Safety I/O. Press the enabling switch. Both contactors should de-energize.
9 Verify proper machine status indication and RSLogix 5000 safety application program indication.
Verify unable to reset and restart with fault.
GuardLogix Controller and Network Tests
Test Step Validation Pass/Fail Changes/Modifications
While Running, remove the Ethernet network connection between the Safety I/O and the controller. All contactors should de-
1 energize. Verify proper machine status indication and I/O Connection Status in the RSLogix 5000 safety application program.
Restore the Safety I/O module network connection and allow time to reestablish communication.
2 Verify the Connection Status Bit in the RSLogix 5000 safety application program. Repeat for all Safety I/O connections.
While Running, switch the controller out of Run Mode. All contactors should de-energize. Return key switch back to Run Mode,
3 all contactors should remain de-energized. Verify proper machine status indication and RSLogix 5000 safety application program
indication.
Safety Contactor Output Tests
Test Step Validation Pass/Fail Changes/Modifications
Initiate a Start Command. Both contactors should energize for a normal machine run condition.
1 Verify proper machine status indication and RSLogix 5000 safety application program indication.
While Running, remove the contactor feedback from the Safety I/O. All contactors should remain energized.
2 Initiate a Stop command and attempt a Reset command. The system should not Restart or Reset.
Verify proper machine status indication and RSLogix 5000 safety application program indication.
While Running, short the contactor feedback to the Safety I/O. All contactors should remain energized. Initiate a Stop command
3 and attempt a Reset command. The system should not Restart or Reset. Verify proper machine status indication and RSLogix 5000
safety application program indication.
NHP Safety Reference Guide > Safety Function Documents: GSR 6A-102
Safety Function Documents
Enabling Pendant
Products: 440J Enabling Switch / GuardLogix® /
Point Guard Safety I/O™ Modules
Safety Rating: PLe, Cat. 4 to EN ISO 13849.1 2008
Additional Resources
Resource Description
POINT Guard I/O Safety Modules Installation Provides information on installing, configuring,
and User Manual, Publication 1734-UM013 and operating POINT Guard I/O Modules.
NHP Safety Reference Guide > Safety Function Documents: GSR 6A-103
Safety Function Document
Disclaimer
NHP Safety Reference Guide > Safety Function Documents: GSR 6A-104