ABB AC500-S Safety User Manual page 52

AC500-S Safety Modules
SM560-S Safety CPU > SM560-S and PM5xx interaction
Valid
safety
telegram
Fig. 12: Overview on how PM5xx system parameter setting influences SM560-S safety telegram flow
"Behaviour of Outputs in Stop" parameter setting of PM5xx Non-safety CPU has the following influence on
the SM560-S safety telegrams:
n "Off in hardware and online" (Default)
The application program execution on SM560-S Safety CPU is stopped. PM5xx Non-Safety CPU is
stopped. All SM560-S output values in safety telegrams will be nulled by PM5xx. No valid safety tele-
grams can reach Safety I/O modules and they go to a passivation state after the watchdog time runs out.
n "Off in hardware and actual state online"
If PM5xx is stopped then all SM560-S output values in safety telegrams will be nulled. The hardware
status of SM560-S communication interface becomes "0", but online display shows the last valid values
from the last safety application program cycle. As a result of "0" values in the SM560-S communication
interface, no valid safety telegrams can reach Safety I/O modules and they go to a passivation state after
the watchdog time runs out.
n "Actual state hardware and online"
If PM5xx is stopped, SM560-S continues running. SM560-S output values in safety telegrams will not be
nulled by PM5xx. Both hardware status of SM560-S communication interface and online display values
remain intact. As a result, Safety I/Os can receive safety telegrams from SM560-S Safety CPU and the
operation of safety part is not influenced by the stop of PM5xx Non-safety CPU.
"Stop on error class" parameter setting of PM5xx Non-safety CPU has the following influence on the SM560-
S:
n "No effect" (Default)
In case of fatal error (E1) or severe error (E2), PM5xx and all its communication modules, including
SM560-S Safety CPU, will be stopped. PROFIsafe F-Host stack continues running on SM560-S in a fail-
safe mode.
n "E3"
In case of fatal error (E1), severe error (E2) or light error (E3), PM5xx and all its communication modules,
including SM560-S Safety CPU, will be stopped. PROFIsafe F-Host stack continues running on SM560-S
in a fail-safe mode.
n "E4"
In case of fatal error (E1), severe error (E2), light error (E3) or warning (E4), PM5xx and all its communi-
cation modules, including SM560-S Safety CPU, will be stopped. PROFIsafe F-Host stack continues run-
ning on SM560-S in a fail-safe mode.
52
SM560-S PM5xx
Telegram with
"0" values
PM5xx system configuration parameters
1. "Behaviour of Outputs in Stop"
2. "Stop on Error Class"
3. "Warmstart on E2 failure"
Safety I/O Module 1
0
or
SM560-S safety telegrams with output values
AC500-S
Safety I/O Module 2
0
or
30.03.2017