Circuitry Of The Safety Module [X40] - Festo CAMC-G-S3 Manual

2 Product description of safety module CAMC-G-S3
– A potential-free signal contact is available for diagnostic purposes
– The operating status of the safety module is displayed by a status LED and the 7-segment display of
the basic unit
Data is exchanged between the safety module and the basic unit via an internal communication interface.
– This means that the basic unit is always aware of the current operating status of the safety module,
e.g. whether a safety function is requested and executed, or whether a violation of a safety condi­
tion is detected.
– This means that the operating status of the safety design can be signalled to the functional control­
ler via the different fieldbus interfaces.
– The safety module can actively manipulate the controller of the basic unit, without having to go
through the function controller. For example, the drive can actively be decelerated to the zero speed
when the safety function SS2 is requested
Important: This function is primarily beneficial when individual axles are moved. By con­
trast, if the axle is moved in an interpolating operating mode (e.g. CAN interpolated posi­
tion mode), then this function makes less sense.
Additional functions of the firmware in the safety module:
– safe switch-off of the motor controller in case of error, variable reaction to various errors.
– analysis of the signals of the safe inputs, monitoring of the correct function of the hardware (test
pulses).
– control of the safe outputs, monitoring of the correct function of the hardware.
– safe monitoring of the correct function of the microcontrollers: Cyclical test of the memory (RAM,
Flash) and the CPU.
– Monitoring of the supply voltages.
– Cross-monitoring of the two involved microcontrollers.
– Management of the parameter sets, implementation of a safe parameterisation, secured with check
sums and a password.
2.2.2

Circuitry of the safety module [X40]

To connect the safety functions, the safety module has a 24-pin interface [X40A/B] with the following
connections:
– 4 digital, two-channel sensor inputs with configurable allocation (SIL3 inputs),
– 6 digital, single-channel inputs with configurable allocation (max. SIL2 inputs), e.g. as
– 1 digital, 3-pole mode selector switch
– 1 input for error acknowledgment
– 1 input to control the restart after a safety function was requested
– 1 input for a feedback signal of an external clamping unit
– 3 digital, two-channel outputs (SIL3) with configurable allocation, optionally useable as clock output,
– 1 acknowledgment contact (relay contact) for diagnostic purposes,
– reference potential for all inputs and outputs,
– a 24 V auxiliary current supply for connected sensors.
Festo – GDCP-CAMC-G-S3-EN – 1406NH – English 23