Safety Concept; Acceptance Of The Safety Functions - Siemens SIMATIC ET 200SP F-TM Equipment Manual

Safety functions integrated in the drive

5.2 Acceptance of the safety functions

5.1.8

Safety concept

The safety concept of the drive controller is based on a 2-channel system structure. Each
channel has the possibility of bringing about the safe state, and the two channels monitor
each other through a corresponding cross-comparison and cyclic diagnostics.
Safe state
The safe state of the system exists when the motor bridge is de-energized.
The safe state is reached in the following cases:
● Switch-off or failure of the external power supply to L+/M
● Missing enable signal at STO+ and STO-
● Detection of an internal HW fault
Safe state of Safety Integrated functions
The safe state of the STO input terminal is reached when at least one of the two STO supply
terminals is disconnected from the energy supply.
For a three-phase motor, the safe state is when at least two phases of the motor are no
longer supplied with voltage.
Note
The safe state means the absence of torque in the sense of functional safety, but not
necessarily the absence of voltage in the sense of electrical safety.
5.2 Acceptance of the safety functions
Responsibilities
The machine manufacturer is responsible for the performance and documentation of the
acceptance test. In this section, you will find a recommendation for how to perform and
document the acceptance tests for the individual safety functions.
Note
The performance and documentation of the acceptance tests are plant-specific and must be
adapted appropriately and performed.
40
Equipment Manual, 02/2020, A5E47579503-AA
F-TM ServoDrive