Competence - ABB ACS880-07 Hardware Manual

248 Safe torque off function
Note: See also the Recommendation of Use CNB/M/11.050 (published by the European
co-ordination of Notified Bodies) concerning dual-channel safety-related systems with
electromechanical outputs:
•
When the safety integrity requirement for the safety function is SIL 3 or PL e (cat. 3 or
4), the proof test for the function must be performed at least every month.
•
When the safety integrity requirement for the safety function is SIL 2 (HFT = 1) or PL d
(cat. 3), the proof test for the function must be performed at least every 12 months.
The STO function does not contain any electromechanical components.
In addition to proof testing, it is a good practice to check the operation of the function when
other maintenance procedures are carried out on the machinery.
Include the Safe torque off operation test described above in the routine maintenance
program of the machinery that the drive runs.
If any wiring or component change is needed after start up, or the parameters are restored,
follow the test given in section
Use only ABB approved spare parts.
Record all maintenance and proof test activities in the machine logbook.

Competence


The maintenance and proof test activities of the safety function must be carried out by a
competent person with adequate expertise and knowledge of the safety function as well as
functional safety, as required by IEC 61508-1 clause 6.
Fault tracing
The indications given during the normal operation of the Safe torque off function are
selected by drive control program parameter 31.22.
The diagnostics of the Safe torque off function cross-compare the status of the two STO
channels. In case the channels are not in the same state, a fault reaction function is
performed and the drive trips on an "STO hardware failure" fault. An attempt to use the
STO in a non-redundant manner, for example activating only one channel, will trigger the
same reaction.
See the drive firmware manual for the indications generated by the drive, and for details on
directing fault and warning indications to an output on the control unit for external
diagnostics.
Any failures of the Safe torque off function must be reported to ABB.
Safety data (SIL, PL)
The safety data for the Safe torque off function is given below.
Note: The safety data is calculated for redundant use, and does not apply if both STO
channels are not used.
Frame SIL/ SC PL
size SILCL
U = 380...500 V
1
R6 3 3 e
R7 3 3 e
Acceptance test procedure
SFF PFH PFD
avg
(T = 20 a)
(T = 2 a)
(%)
1
1
(1/h)
> 99 2.89E-09 2.41E-05 6.02E-05
> 99 2.89E-09 2.41E-09 6.02E-05
page 245.
PFD MTTF DC*
avg d
(T = 5 a)
(%)
(a)
1
10340 > 90
10340 > 90
Cat. HFT CCF Lifetime
(%) (a)
3 1 80 20
3 1 80 20