Mounting, Dimensions And Electrical Connection - ABB AC500-S Safety User Manual

NOTICE!
The boot project update on SM560-S is possible only if no boot project is loaded on SM560-S. It is
done to avoid any occasional overwriting of existing valid boot project on SM560-S. To delete the boot
project from SM560-S Safety CPU, one can use, for example, the switch address value 0xFE during
the start of SM560-S, which allows deleting the boot project from the Flash memory of SM560-S. The
boot project is finally deleted after SM560-S powering off/on is executed.
NOTICE!
FunctionOfCard=3 (combined boot project and firmware/boot code update) is not supported by
SM560-S Safety CPU. The execution of boot project and firmware/boot code update shall be done in
two steps:
– FunctionOfCard=1 with a proper boot project update shall be executed, followed by SM560-S
restart.
– FunctionOfCard=2 with a proper firmware / boot code update shall be executed followed by
SM560-S restart.
It means that one may need two SD cards to perform both boot project and firmware/boot code
updates. One SD card with firmware/boot code update and the other SD card with boot project update.
When firmware and/or boot code update is started, SM560-S Safety CPU goes to a DEBUG STOP state and
I-ERR and RUN LEDs are alternately blinking. After firmware and/or boot code update is done, no blinking of
I-ERR and RUN LEDs can be observed. Do not cut power supply during firmware and/or boot code update
because it can lead to an unrecoverable damage of SM560-S which would require the replacement of this
device. At the end of boot code and/or firmware update, SM560-S stays in DEBUG STOP state. The updated
firmware and/or boot code can be started only after powering off/on of SM560-S.
If firmware and/or boot code update was not successful, SM560-S goes to a SAFE STOP state with an I-
ERR LED = ON. Restart Safety CPU and, if this error persists, replace Safety CPU.
During boot project update, only RUN LED is flashing. At the end of the boot project update, SM560-S goes
to SAFE STOP state. A complete SM560-S restart, e.g., through powering off/on, is needed to activate a
new boot project.
DANGER!
Since firmware, boot code and boot project update is done from PM5xx CPU, it is important that
special organisational procedures (e.g., limited access to the cabinet where Safety CPU is
located) on the end-customer site are defined to avoid unintended firmware, boot code and boot
project update on SM560-S Safety CPU using SD card.
It is possible to read the actual firmware version of SM560-S Safety CPU using POU SF_RTS_INFO
Ä Chapter 4.6 "AC500-S Libraries" on page 224 for further details) and, thus, limit safety program
(
execution only to the pre-defined firmware versions.
Each firmware and boot project update has to be followed by a complete functional safety validation
procedure for a given safety process control application.

3.1.3 Mounting, dimensions and electrical connection

The Safety CPU is mounted on the left side of the CPU on the same Terminal Base. The electrical connec-
tion is established automatically when mounting the Safety CPU.
30.03.2017
SM560-S Safety CPU > Mounting, dimensions and electrical connection
AC500-S
AC500-S Safety Modules
37