Connecting Devices - Leuze electronic MSI 400 Operating Instructions Manual

4

Connecting devices

This section describes the connection of safety sensors and actuators to the MSI 400 system and provides
setup information for selected functions.
The MSI 400 system supports applications up to Performance Level PL e (as per EN ISO 13849-1) and up
to Safety Integrity Level SIL CL3 (as per EN 62061).
The level of safety actually achieved depends on the external wiring, the implementation of the wiring, the
parameterization, the selection of the safety sensors, and their arrangement on the machine. To this end,
consider all of the required boundary conditions and evaluate them, for example, in a Failure Modes and
Effects Analysis (FMEA).
You can find additional information to be noted during the electrical installation here: Electrical installation
[chapter 7]
Important information
Loss of safety function due to incorrect configuration!
Carefully plan and implement configuration!
The configuration of the safety application must be precisely adapted to the circum-
stances of the system or machine to be monitored.
Ä Check to ensure that the configured safety application monitors the machine or system as
you have planned and whether the safety of a configured application is being ensured at all
times. This must be ensured in all operating modes and for all sub-applications. Document
the results of this test!
Ä Be sure to note the instructions for commissioning and daily testing in the operating instruc-
tions for the safety equipment integrated into the safety application.
Ä Note the warning information and function descriptions for the safety equipment connected
to the safety control. When in doubt, contact the respective manufacturer of the safety
equipment.
Ä Note that the minimum switch-off time of the connected sensors must be longer than the ex-
ecution time of the logic function (see software manual, Time values and logic execution
time).
In this way, you will ensure that the MSI 400 system can detect the switching of sensors.
The minimum switch-off time of sensors is typically listed in the technical data for the
sensors.
Protect single-channel inputs against short-circuits and cross-connections!
When a short-circuit to high occurs at a single-channel input with test pulses that were previ-
ously low, this signal can then look like a pulse for the logic. A short-circuit to high means that
the signal is first to high and then is back to low after the error detection time. A pulse can be
generated due to the error detection.
Because of this, note the following specifications for single-channel signals with test pulses:
• If the short-circuit to high occurs at a single-channel input with test pulses that was previously high, this
signal for the logic then looks like a delayed falling edge (transition from high to low).
• When a single-channel input is used and an unexpected pulse or a delayed falling edge (high to low) at
this input can lead to a state causing a risk, then you must undertake the following measures:
• Protected cabling for the signal in question (in order to prevent cross-connections with other sig-
nals)
• No cross-connection detection, i.e. no connection with a test output
This must be noted in particular for the following inputs:
• Input reset at the function block reset
• Input restart at the function block restart
• Input restart at the function blocks for press applications (eccentric press contact monitor,
Leuze electronic
WARNING
WARNING
MSI 400
Connecting devices
38