XS/SC26-2 and SC10-2 Safety Controllers Contents 1 About This Document ..............................5 1.1 Important . . . Read This Before Proceeding! ..........................5 1.2 Use of Warnings and Cautions ................................ 5 1.3 EU Declaration of Conformity (DoC) ............................... 5 2 Product Description .................................6 2.1 Terms Used in this Manual ................................
Page 3
XS/SC26-2 and SC10-2 Safety Controllers 7.7.2 Virtual ON/OFF and Mute Enable ............................46 7.8 Safety Outputs ....................................46 7.8.1 XS/SC26-2 Solid-State Safety Outputs ..........................49 7.8.2 Safety Relay Outputs ................................52 7.8.3 EDM and FSD Hookup ................................53 7.9 Status Outputs ....................................59 7.9.1 Status Output Signal Conventions ............................
Page 4
15.2 Repairs and Warranty Service ..............................155 15.3 Contact Us ....................................155 15.4 Banner Engineering Corp. Limited Warranty ..........................155 15.5 Banner Engineering Corp. Software Copyright Notice ......................156 16 Standards and Regulations ............................157 16.1 Applicable U.S. Standards .................................157 16.2 Applicable OSHA Regulations ..............................
The precautions and statements used throughout this document are indicated by alert symbols and must be followed for the safe use of the Banner Safety Controllers. Failure to follow all precautions and alerts may result in unsafe use or operation. The following signal words and alert symbols are defined as follows:...
Output Modules, XS8si and XS16si Safety Input Modules, XS1ro and XS2ro Safety Relay Modules—formal name of the XS/SC26-2 product line 2.2 Software The Banner Safety Controller Software is an application with real-time display and diagnostic tools that are used to: • Design and edit configurations •...
The Safety Controller’s internal logic is designed so that a Safety Output can turn On only if all the controlling safety input device signals and the Safety Controller’s self-check signals are in the Run state and report that there is no fault condition. The Banner Safety Controller Software uses both Logic and Safety Function blocks for simple and more advanced applications.
XS/SC26-2 and SC10-2 Safety Controllers 3 XS/SC26-2 Overview With the option to add up to eight I/O expansion modules, the XS26-2 Expandable Safety Controller has the capacity to adapt to a variety of machines, including large scale machines with multiple processes. •...
3.3 XS/SC26-2 Using FID 1 and FID 2 Safety Controllers Over time, Banner adds new features to some devices. The Feature ID (FID) identifies the set of features and functions included in a particular model. Generally, an increasing FID number corresponds to an increasing feature set. A configuration using a higher numbered FID feature is not supported by a Safety Controller of a lower FID.
XS/SC26-2 and SC10-2 Safety Controllers Contact Banner Engineering for additional information about connecting other devices not described in this manual. 3.4.2 XS/SC26-2 Safety Outputs The Safety Outputs are designed to control Final Switching Devices (FSDs) and Machine Primary Control Elements (MPCEs) that are the last elements (in time) to control the dangerous motion.
XS/SC26-2 and SC10-2 Safety Controllers status outputs, the safety test pulses stay enabled even when designated as a status output. The Status Output signal Status Output Signal Conventions convention can be configured to be 24 V dc or 0 V dc. See on page 59 for information on the specific functions of a Status Output.
It replaces the functionality and capability of two independent safety relay modules while offering the configurability, simplicity, and advanced diagnostics capabilities offered by the rest of the Banner Safety Controller line-up. • Intuitive, icon-based programming with drag-and-drop PC configuration simplifies device setup and management •...
4.3 SC10-2 FID Over time, Banner adds new features to some devices. The Feature ID (FID) identifies the set of features and functions included in a particular model. Generally, an increasing FID number corresponds to an increasing feature set. A configuration using a higher numbered FID feature is not supported by a Safety Controller of a lower FID.
XS/SC26-2 and SC10-2 Safety Controllers 4.4.3 SC10-2 Status Outputs and Virtual Status Outputs Using the Software, the SC10-2 can be configured for up to 256 virtual status outputs to communicate information over the network. These outputs have the capability to send non-safety status signals to devices such as programmable logic Virtual Status Outputs controllers (PLCs) or human machine interfaces (HMIs).
XS/SC26-2 and SC10-2 Safety Controllers 5 Specifications and Requirements 5.1 XS/SC26-2 Specifications Base Controller and Expansion Modules Mechanical Stress Operating Conditions Shock: 15 g for 11 ms, half sine, 18 shocks total (per IEC Temperature: 0 °C to +55 °C (+32 °F to +131 °F) 61131-2) Storage Temperature: –30 °C to +65 °C (–22 °F to +149 °F) Vibration: 3.5 mm occasional / 1.75 mm continuous at 5 Hz to 9...
Page 17
XS/SC26-2 and SC10-2 Safety Controllers XS2so and XS4so Solid-State Safety Output Modules Solid State Safety Outputs External Power XS2so: 0.75 A max. at 24 V dc (1.0 V dc max drop) XS2so: 24 V dc ± 20% (including ripple); 0.075 A no load, 3.075 A max. load XS4so: 0.5 A max.
XS/SC26-2 and SC10-2 Safety Controllers XS1ro and XS2ro Safety Relay Modules Bus Power Contact Rating XS1ro 0.125 A (outputs On) UL/NEMA: XS2ro: 0.15 A (outputs On) • N.O. Contacts: 6 A 250 V ac/24 V dc resistive; B300/Q300 pilot duty •...
Page 19
XS/SC26-2 and SC10-2 Safety Controllers Response and Recovery Times Operating Conditions Input to Output Response Time (Input Stop to Output Off): see the Temperature: 0 °C to +55 °C (+32 °F to +131 °F) (see Temperature Configuration Summary in the Software, as it can vary Derating graph) Input Recovery Time (Stop to Run): 250 ms typical, 400 ms maximum Storage Temperature: –30 °C to +65 °C (–22 °F to +149 °F)
Page 20
XS/SC26-2 and SC10-2 Safety Controllers Required Overcurrent Protection Meets or exceeds all EMC requirements for immunity per IEC 61326-3-1:2012 and emissions per CISPR 11:2004 for Group 1, Class A WARNING: Electrical connections must be equipment made by qualified personnel in accordance with local and national electrical codes and regulations.
XS/SC26-2 and SC10-2 Safety Controllers Example Temperature Derating Calculations Single Unit, Free Standing Three Modules = 4 A (normally open output RO2 channel 5) = 4 A = 4 A (normally open output RO2 channel 6) = 4 A ∑I = 96 A ∑I = 96 A...
XS/SC26-2 and SC10-2 Safety Controllers 5.4 PC Requirements Important: Administrative rights are required to install the Safety Controller drivers (needed for communication with the controller). Microsoft Windows 7, Windows 8 (except Windows RT), or Windows 10 2 Operating system: System type: 32-bit, 64-bit Hard drive space: 80 MB (plus up to 280 MB for Microsoft .NET 4.0, if not already installed)
4. Confirm the software destination and availability for users and click Next. 5. Click Next to install the software. 6. Depending on your system settings, a popup window may appear prompting to allow Banner Safety Controller to make changes to your computer. Click Yes.
WARNING: Read this Section Carefully Before Installing the System The Banner Safety Controller is a control device that is intended to be used in conjunction with a machine safeguarding device. Its ability to perform this function depends upon the appropriateness of the application and upon the Safety Controller's proper mechanical and electrical installation and interfacing to the machine to be guarded.
Note: Follow the device manufacturer's installation, operation, and maintenance instructions and all relevant regulations. If there are any questions about the device(s) that are connected to the Safety Controller, contact Banner Engineering for assistance. www.bannerengineering.com - Tel: + 1 888 373 6767...
XS/SC26-2 and SC10-2 Safety Controllers Figure 13. XS/SC26-2 Input and output terminal locations Figure 14. SC10-2 Input and output terminal locations WARNING: Input Device and Safety Integrity The Safety Controller can monitor many different safety input devices. The user must conduct a Risk Assessment of the guarding application to determine what Safety Integrity Level needs to be reached in order to know how to properly connect the input devices to the Safety Controller.
Requirements vary widely for the level of safety circuit integrity in safety applications (that is, Control Reliability or Category/ Performance Level) per ISO 13849-1. Although Banner Engineering always recommends the highest level of safety in any application, it is the responsibility of the user to safely install, operate, and maintain each safety system and comply with all relevant laws and regulations.
Page 28
XS/SC26-2 and SC10-2 Safety Controllers Input Signal COS Timing Rules Input Circuit Stop State—SO turns Off when 3 : Run State—SO turns On when 4 : Dual-Channel A and B Complementary 2 Terminals 3 Terminals 2 Terminals, PNP Simultaneous: A and B are both in the Stop state and then both switch to the Run state within 3 seconds before outputs turn At least 1 channel (A or B) input is in the...
XS/SC26-2 and SC10-2 Safety Controllers impact shock, or switch noise conditions result in a need for longer signal transition times. If the debounce time is set too short under these harsh conditions, the system may detect a signal disparity fault and lock out. The default setting is 50 ms. 7.5 Safety Input Device Options Circuits shown in Run State Circuits shown in Stop State...
The application requirements for safeguarding devices vary for the level of control reliability or safety category per ISO 13849-1. While Banner Engineering always recommends the highest level of safety in any application, the user is responsible to safely install, operate, and maintain each safety system and comply with all relevant laws and regulations.
XS/SC26-2 and SC10-2 Safety Controllers Note: Some applications may have additional requirements; the user is responsible to comply with all relevant regulations. 7.5.3 Rope (Cable) Pull Rope (cable) pull emergency stop switches use steel wire rope; they provide emergency stop actuation continuously over a distance, such as along a conveyor.
XS/SC26-2 and SC10-2 Safety Controllers 7.5.5 Protective (Safety) Stop A Protective (Safety) Stop is designed for the connection of miscellaneous devices that could include safeguarding (protective) devices and complementary equipment. This stop function is a type of interruption of operation that allows an orderly cessation of motion for safeguarding purposes.
XS/SC26-2 and SC10-2 Safety Controllers Optical Sensor Requirements When used as safeguarding devices, optical sensors are described by IEC61496-1/-2/-3 as Active Opto-electronic Protective Devices (AOPD) and Active Opto-electronic Protective Devices responsive to Diffuse Reflection (AOPDDR). AOPDs include safety light screens (curtains) and safety grids and points (multiple-/single-beam devices). These devices generally meet Type 2 or Type 4 design requirements.
Page 34
T h is usually insignificant for purely mechanical switches. However, T h should be considered for safety distance calculation when using electronic or electromechanical (powered) hand controls. For Banner Self-checking Touch Buttons (STBs) the response time is 0.02 seconds the maximum time (in seconds) the machine takes to cease all motion after it has been tripped. For full revolution clutch presses with only one engaging point, T m is equal to the time necessary for one and one-half revolutions of the crankshaft.
Application of Safety Mats — Safety Mat application requirements vary for the level of control reliability or category and performance level as described by ISO 13849-1 and ISO 13856. Although Banner Engineering always recommends the highest level of safety in any application, the user is responsible to safely install, operate, and maintain each safety system per the manufacturer's recommendations and comply with all relevant laws and regulations.
Page 36
XS/SC26-2 and SC10-2 Safety Controllers Safety Mat Requirements The following are minimum requirements for the design, construction, and installation of four-wire safety mat sensor(s) to be interfaced with the Safety Controller. These requirements are a summary of standards ISO 13856-1, ANSI/RIA R15.06 and ANSI B11.19.
Page 37
XS/SC26-2 and SC10-2 Safety Controllers relevant standard. The possibility of stepping on machine supports or other physical objects to bypass or climb over the sensor also must be prevented. Safety Mat Safety Distance (Minimum Distance) K(T s + T r ) D pf As a stand-alone safeguard, the safety mat must be installed at a safety distance (minimum distance) so that the exterior edge of the...
XS/SC26-2 and SC10-2 Safety Controllers European Applications the EN 13855 recommended hand-speed constant (in millimeters per second), in most cases is calculated at 1600 mm/sec, but may vary between 1600 to 2500 mm/sec based on the application circumstances; not a conclusive determination; consider all factors, including the physical ability of the operator, when determining the value of K to be used. the overall machine stopping response time (in seconds), from the physical initiation of the safety device to the final ceasing of all motion the added distance due to the depth penetration factor equals 1200 mm, per EN 13855 Safety Mat Hookup Options...
XS/SC26-2 and SC10-2 Safety Controllers Photoelectric Sensors (Polarized Retroreflective Mode) The user must ensure that false proxying (activation due to shiny or reflective surfaces) is not possible. Banner low profile sensors with linear polarization can greatly reduce or eliminate this effect.
XS/SC26-2 and SC10-2 Safety Controllers • Supplemental safeguarding must be provided. Personnel must not be exposed to hazards • The means of bypassing must be within full view of the safeguard to be bypassed • Initiation of motion should only be through a hold-to-run type of control •...
XS/SC26-2 and SC10-2 Safety Controllers The Adjustable Valve (Device) Monitoring function is useful for dynamically monitoring devices under the control of the safety output that may become slow, stick, or fail in an energized state or position, and whose operation needs to be verified after a Stop signal occurs.
XS/SC26-2 and SC10-2 Safety Controllers Cancel Off-Delay Timing Safety Inputs Cancel Delay Input Safety Inputs Off Delay Time Limit SO1 or Cancel Delay Input Delay Block Output Off Delay Time Limit SO1 or Delay Block Output Note 1 - If “turn output off” function is selected 0.5 sec.
Page 43
XS/SC26-2 and SC10-2 Safety Controllers Manual Reset on Power-Up Allows various Latch Reset Blocks and/or Output Blocks to be controlled by a single reset input after the power up. Enable Mode Exit A reset is required to exit the Enable Mode. Track Input Group Reset Resets the Status Output function Track Input Group and the Virtual Status Output function Track Input Group.
Banner has created a virtual reset solution that requires deliberate action. For example, in place of the mechanical switch, an HMI may be used. In place of the wires, a unique Actuation Code is used for each Safety Controller on a network. Also, each virtual reset within a Safety Controller is associated with a specific bit in a register.
Page 45
XS/SC26-2 and SC10-2 Safety Controllers Virtual Reset or Cancel Delay (RCD) Sequence—Feedback Method RCD Register Bit X RCD Enable Register Actuation Code RCD Enable Feedback Register Actuation Code RCD Feedback Register Bit X Ignore RCD success Logical 1 if this was the last RCD Logical 0 after power-up or after successfully performed other RCD activity has occurred...
XS/SC26-2 and SC10-2 Safety Controllers • When Cancel Type is set to "Control Input", the safety output or delay block output stays on if the input turns On again before the end of the delay A status output function (Output Delay in Progress) indicates when a Cancel Delay Input can be activated in order to keep the Off-delayed safety output On.
Page 47
XS/SC26-2 and SC10-2 Safety Controllers Additional Safety Outputs can be added to expandable models of the Base Controller by incorporating I/O modules. These additional safety outputs can be isolated relay outputs that can be used to control/switch a wide range of power XS/SC26-2 Specifications characteristics (see on page 16).
Page 48
XS/SC26-2 and SC10-2 Safety Controllers On-Delays and Off-Delays Figure 28 Each safety output can be configured to function with either an On-Delay or an Off-Delay (see on page 48), where the output turns On or Off only after the time limit has elapsed. An output cannot have both On- and Off-Delays.
XS/SC26-2 and SC10-2 Safety Controllers Figure 30. Example Link to Safety Output Selection Note: The same input(s) need to be connected to both Safety Outputs in order for outputs to show up as available for linking. 7. Click OK. The linked Safety Output will have a link icon indicator. Figure 31.
Page 50
XS/SC26-2 and SC10-2 Safety Controllers Important: When Solid-State Safety Output modules (XS2so or XS4so) are used, the power to those modules must be applied either prior to or within 5 seconds after applying the power to the Base Controller, if using separate power supplies. WARNING: Single Channel (Split) Outputs use in Safety Critical Applications If a single channel output is used in a safety critical application then fault exclusion principles must be incorporated to ensure Category 3 safety operation.
Page 51
XS/SC26-2 and SC10-2 Safety Controllers Common Wire Installation Consider the wire resistance of the 0 V common wire and the currents flowing in that wire to avoid nuisance lockouts. Notice the location of the resistance symbol in the diagram below representing 0 V common wire resistance (RL). Methods to prevent this situation include: •...
XS/SC26-2 and SC10-2 Safety Controllers Preferred 0V routing plan when a single power supply is used Power 24V 0V * Supply XS2so XS26-2 Solid State Safety Base Controller Output Module 0V 24V Functional Earth (optional) The voltage for all safety input devices (including all Input Expansion Modules) should be measured in reference to the 0V terminal of the Base Controller Preferred 0V routing plan when separate power supplies are used Power...
XS/SC26-2 and SC10-2 Safety Controllers Whenever possible, incorporating External Device Monitoring (EDM) and/or Adjustable Valve Monitoring (AVM) is highly External Device Monitoring recommended to monitor devices under control (FSDs and MPCEs) for unsafe failures. See (EDM) on page 53 for more information. Output Connections—The Safety Relay Outputs must be connected to the machine control such that the machine's safety related control system interrupts the circuit or power to the machine primary control element(s) (MPCE), resulting in a non- hazardous condition.
Page 54
XS/SC26-2 and SC10-2 Safety Controllers contacts must be closed within 250 milliseconds of the safety outputs changing from On to Off. See Figure 36 page 55. • Two-Channel Monitoring—An independent connection of closed monitor contacts that are forced-guided (mechanically linked) from each device controlled by the Safety Controller. Both EDM inputs must be closed before the Safety Controller can be reset and the OSSDs can turn On.
Page 55
XS/SC26-2 and SC10-2 Safety Controllers External Device Monitoring Closed Don’t Care Don’t Care Open 250 ms 250 ms External Device Monitoring EDM is a way to check the operation of dual channel final switching devices or machine primary control elements. The force guided N.C. monitoring contacts of the FSD or MPCE are used as an input to detect a “stuck on”...
Page 56
WARNING: Safety Output Interfacing To ensure proper operation, the Banner product output parameters and machine input parameters must be considered when interfacing the solid state safety outputs to the machine inputs. Machine control circuitry must be designed so that: •...
Page 57
XS/SC26-2 and SC10-2 Safety Controllers WARNING: Shock Hazard and Hazardous Energy Always disconnect power from the safety system (for example, device, module, interfacing, etc.) and the machine being controlled before making any connections or replacing any component. Electrical installation and wiring must be made by Qualified Personnel and must comply with the relevant electrical standards and wiring codes, such as the NEC (National Electrical Code), ANSI NFPA79, or IEC/EN 60204-1, and all applicable local standards and codes.
Page 58
XS/SC26-2 and SC10-2 Safety Controllers +24Vdc 0Vdc XS26-2xx Safety Relay Outputs 43/44, 53/54 and 61/62 can be +24Vdc wired similarly, but require a separate EDM or AVM input 0Vdc for monitoring. L2/-V L1/+V XS1ro or XS2ro MPCE1 Machine Control MPCE2 Circuit Arc Suppressors Feedback Loop (optional)
XS/SC26-2 and SC10-2 Safety Controllers Generic SC10-2 Hookup: Safety Output with EDM +24Vdc 0Vdc SC10 Safety Relay Outputs 43/44, 53/54 and 63/64 can be wired similarly, but require a +24Vdc separate EDM or AVM input 0Vdc for monitoring. L1/+V L2/-V MPCE1 Machine Control...
XS/SC26-2 and SC10-2 Safety Controllers Signal Conventions Active = PNP On Active = PNP Off Function Status Output State Status Output State +24 V dc 24 V dc Track Output Logical State Logically On Logically Off Logically On Logically Off Track Function Block State (XS/ Stop Stop...
XS/SC26-2 and SC10-2 Safety Controllers System Lockout Indicates a Non-Operating Lockout Condition, for example unmapped input connected to 24 V. 7.10 Virtual Status Outputs Up to 64 Virtual Status Outputs can be added for any configuration using Modbus/TCP, EtherNet/IP Input Assemblies, EtherNet/IP Explicit Messages, and PCCC protocols on FID 1 Base Controllers and up to 256 virtual Status Outputs can be added on FID 2 Base Controllers and SC10-2 Safety Controllers.
1. Define the safeguarding application (risk assessment). • Determine the required devices • Determine the required level of safety 2. Install the Banner Safety Controller software. See Installing the Software on page 23. Software Overview 3. Become familiar with the Software options. See on page 73.
Page 63
XS/SC26-2 and SC10-2 Safety Controllers 2. Click Safety Input or Non-Safety Input to add input devices: Figure 43. Safety Inputs (Virtual Non-Safety Inputs available only from the Functional View Tab) Figure 44. Non-Safety Inputs (Virtual Non-Safety Inputs available only from the Functional View Tab) www.bannerengineering.com - Tel: + 1 888 373 6767...
XS/SC26-2 and SC10-2 Safety Controllers 3. Select appropriate device settings: Basic settings: Figure 45. Basic Safety Input Settings Name —input device name; generated automatically and can be changed by the user • • Circuit Type —the circuit and signal convention options appropriate for the selected input device Module —the module to which the input device is connected •...
XS/SC26-2 and SC10-2 Safety Controllers 2. Click Status Outputs to add status monitoring Figure 47. Status Outputs 3. Select appropriate Status Output settings: Figure 48. Status Output Properties • Name Module • I/O (where applicable) • Terminal • Input or Output (where applicable) •...
XS/SC26-2 and SC10-2 Safety Controllers Note: The response time of the Safety Outputs can increase if a large number of blocks are added to the configuration. Use the function and logic blocks efficiently to achieve the optimum response time. 3. Create the appropriate connections between added inputs, Function and Logic Blocks, and Safety Outputs. Note: The Check List on the left displays connections that are required for a valid configuration and all items must be completed.
XS/SC26-2 and SC10-2 Safety Controllers Note: Saving the now confirmed configuration is recommended. Confirmed configurations are a different file format (.xcc) than an unconfirmed file (.xsc). Confirmed configurations are required for loading into an SC-XM2/3 drive. Click Save As to save. 8.4.1 Notes on Confirming or Writing a Configuration to a Configured SC10-2 User settings and passwords affect how the system responds when confirming a configuration or writing a confirmed...
Page 69
XS/SC26-2 and SC10-2 Safety Controllers Input Quantity Type Module Terminals Circuit IN3, IN4 Optical Sensor Safety Input Base IN5, IN6 Dual-Channel PNP IN7, IN8 6. Go to the Functional View tab. Tip: You may notice that not all inputs are placed on Page 1. There are two solutions to keep the configuration on one page.
XS/SC26-2 and SC10-2 Safety Controllers 9 Software The Banner Safety Controller Software is an application with real-time display and diagnostic tools that are used to: • Design and edit configurations • Test a configuration in Simulation Mode • Write a configuration to the Safety Controller •...
Page 72
XS/SC26-2 and SC10-2 Safety Controllers Abbreviation 8 Description Manual Reset input MSPx Muting Sensor Pair input On-Off input Optical Sensor input Protective Stop input Reset Enable input node of the Latch Reset Blocks and the Safety Outputs Relay Output Requested Packet Interval Rope Pull input Reset node of the SR-Flip-Flop, RS-Flip-Flop, Latch Reset Blocks, and Enabling Device Blocks Set node of the SR- and RS-Flip-Flop Blocks...
XS/SC26-2 and SC10-2 Safety Controllers 9.2 Software Overview Note: The following sections use the XS/SC26-2 as an example. The SC10-2 interface is similar. Figure 51. Banner Safety Controller Software www.bannerengineering.com - Tel: + 1 888 373 6767...
Page 74
• Icons—Switches between US- and European- Displays Project Settings style icons • Support Information—Describes how to request help from the Banner Advanced Technical Support Group Opens Password Manager • Language—Selects the Software language options (2) Tabs for Worksheets and Diagrams Equipment—Displays an editable view of all connected equipment...
XS/SC26-2 and SC10-2 Safety Controllers Project Settings Figure 52. Project Settings Each configuration has an option to include additional project information for easier differentiation between multiple configurations. To enter this information click Project Settings. Configuration Name Name of the configuration; displayed on the Safety Controller (models with display); different from file name. Project Project name;...
XS/SC26-2 and SC10-2 Safety Controllers 9.4 Equipment Tab Figure 53. Example XS/SC26-2 Equipment Tab XS/SC26-2: The Equipment tab is used to select the base model, add the expansion modules (input and output), and add input devices and status outputs. Add the expansion modules by clicking to the right of the Base Controller module.
Important: The Banner Safety Controller Software is designed to assist in creating a valid configuration, however, the user is responsible for verifying the integrity, safety, and functionality of the configuration by...
XS/SC26-2 and SC10-2 Safety Controllers • Modify properties of all blocks by either double-clicking a block or by selecting a block and clicking Edit under the Properties table • Delete any block or connection by selecting the item and then either pressing the Delete key on your keyboard or clicking Delete under the Properties table Note: There is no confirmation of the object deletion.
Page 79
XS/SC26-2 and SC10-2 Safety Controllers NAND Input 1 Input 2 Output (US) (EU) The output value is based on inverting the logical AND of 2 to 5 inputs. Output is Off when all inputs are On. Input 1 Input 2 Output (US) (EU)
XS/SC26-2 and SC10-2 Safety Controllers SR Flip-Flop Input 1 (Set) Input 2 (Reset) Output Value remains the same 0 (Reset) 1 (Set) This block is Set Dominant (Set has priority if both inputs are On). 1 (Set has priority) 9.5.2 Function Blocks Function Blocks provide built-in functionality for most common applications in one block.
Page 81
XS/SC26-2 and SC10-2 Safety Controllers Lockout/Tagout Hazardous energy (lockout/tagout) must be controlled in machine maintenance and servicing situations in which the unexpected energization, start up, or release of stored energy could cause injury. Refer to OSHA 29CFR 1910.147, ANSI 2244.1, ISO 14118 , ISO 12100 or other relevant standards to ensure that bypassing a safeguarding device does not conflict with the requirements that are contained within the standards.
Page 82
XS/SC26-2 and SC10-2 Safety Controllers Figure 60. Delay Block Properties The Delay Block Properties window allows the user to configure the following: Name The input designation. Safety Output Delay • None • Off Delay • On Delay Output Delay Available when the Safety Output Delay is set to either Off Delay or On Delay Delay time: 1 ms to 5 minutes, in 1 ms increments.
Page 83
XS/SC26-2 and SC10-2 Safety Controllers Enabling Device Block Default Nodes Additional Nodes Notes An Enabling Device Block must be connected directly to an Output Block. This method assures that the final control of the outputs is given to the operator holding the Enabling Device. Use the ES node for safety signals that should not be bypassed by the ED node.
Page 84
XS/SC26-2 and SC10-2 Safety Controllers To exit the Enable mode, the enabling device must be in the Off state, and an Enabling Device Block reset must be performed. The enabling device time limit may be adjusted between 1 second (default) and 30 minutes and cannot be disabled. When the time limit expires, the associated safety outputs turn Off.
Page 85
XS/SC26-2 and SC10-2 Safety Controllers Manual Reset Input M0:ES1 Monitored Reset >.5s time < 2s M0:MR1 Monitored M0:SO1 Monitored Reset M0:ES1 Non-Monitored Reset M0:MR1 Non-Monitored M0:SO1 Non-Monitored Reset The Manual Reset input device can be configured for one of two types of reset signals: Monitored &...
Page 86
XS/SC26-2 and SC10-2 Safety Controllers A Reference Signal is used to: ▪ Control an output based on the state of another output ▪ Represent the state of an output, input, safety function or logic block on another page. Reference Signals M0:ES1 M0:MR1 M0:SO2...
Page 87
XS/SC26-2 and SC10-2 Safety Controllers In the figure below, reference signal A3 is on page 1 of the function block diagram and the A3 AND block is on page 2. The output node on the A3 AND block can also be used on page 2 for other safety control logic.
Page 88
XS/SC26-2 and SC10-2 Safety Controllers Muting Block Default Nodes Additional Nodes Notes Muting Sensor Pair input blocks must be connected directly to the Muting function block. There are five Mute Function types listed below. The following timing diagrams show the function detail and sensor/safeguarding state change order for each mute function type.
Page 89
XS/SC26-2 and SC10-2 Safety Controllers Mute Dependent Override M0:OS1 M0:MSP1-1 On or Off M0:MSP1-2 M0:ME1 M0:BP1 M0:SO1 Figure 70. Mute-Dependent Override Mute Bypass M0:OS1 M0:MSP1-1 M0:MSP1-2 On or Off M0:BP1 BypassTime BypassTime Expired Expired M0:SO1 Figure 71. Mute Bypass www.bannerengineering.com - Tel: + 1 888 373 6767...
Page 90
XS/SC26-2 and SC10-2 Safety Controllers Mute Function One Way - 1 Sensor Pair M0:OS1 M0:ME1 On or Off On or Off M0:MSP1-1 < 3s < 3s < 3s < 3s M0:MSP1-2 Mute Max. Max. End Delay Timer Max. Max. Time Time Time Time M0:SO1 Mute ends due to Mute ends due to Mute ends due to...
Page 91
XS/SC26-2 and SC10-2 Safety Controllers Mute Function Two Way - 1 Sensor Pair M0:OS1 M0:MSP1 M0:ME1 On or Off M0:SO1 Figure 74. Timing Diagram—Two-Way Muting Block, One Muting Sensor Pair Mute Function Two Way - 2 Sensor Pair M0:OS1 M0:ME1 On or Off On or Off M0:MSP1-1...
Page 92
XS/SC26-2 and SC10-2 Safety Controllers WARNING E-Stop Button control authority when using the Mute function Improper E-Stop Control NOT RECOMMENDED The configuration top right shows OS1 and E-Stop button ES1 with a Latch Reset LR1 connected to a mute function via the AND function.
Page 93
XS/SC26-2 and SC10-2 Safety Controllers WARNING: Muting Limitations Muting is allowed only during the non-hazardous portion of the machine cycle. A muting application must be designed so that no single component failure can prevent the stop command or allow subsequent machine cycles until the failure is corrected. WARNING: Mute Inputs Must Be Redundant It is not acceptable to use a single switch, device, or relay with two N.O.
Page 94
XS/SC26-2 and SC10-2 Safety Controllers Mute Lamp Output (ML) Depending on a risk assessment and relevant standards, some applications require that a lamp (or other means) be used to indicate when the safety device, such as a light screen, is muted. The Safety Controller provides a signal that the protective function is suspended through the Mute status output.
Page 95
XS/SC26-2 and SC10-2 Safety Controllers The Safety Controller monitors the mute devices to verify that their outputs turn ON within 3 seconds of each other. If the inputs do not meet this simultaneity requirement, a mute condition cannot occur. Several types and combinations of mute devices can be used, including, but not limited to photoelectric sensors, inductive proximity sensors, limit switches, positive-driven safety switches, and whisker switches.
Page 96
XS/SC26-2 and SC10-2 Safety Controllers Two-Hand Control & Bypass Function Blocks M0:TC1 M0:BP1 M0:TC2 M0:OS1 M0:SO1 The Two-Hand Control actuators TC2 and the Bypass Switch BP1 need to be in the Run state and need to be the last devices in time to transition to the Run state for the TC1 function block to turn Figure 79.
Page 97
XS/SC26-2 and SC10-2 Safety Controllers Two-Hand Control & Bypass Function Blocks M0:TC1 M0:BP1 M0:TC2 M0:SO1 The Bypass function can be used with the TC2 actuators to turn the Safety Output On. When the TC1 actuators are not bypassed they must be used along with the TC2 actuators to turn the Safety Output On.
Page 98
XS/SC26-2 and SC10-2 Safety Controllers Two Hand Control with Muting M0:TC1 M0:TC2 A1 Output M0:MSP1 M0:ME1 M0:SO1 Actuators TC1 and TC2 can initiate a two-hand cycle if the mute enable ME1 is not active. ME1 must be active for the MSP1 mute sensors to keep the SO On after the TC1 and TC2 actua- tors are in the Stop state.
XS/SC26-2 and SC10-2 Safety Controllers 9.6 Wiring Diagram Tab Figure 84. Wiring Diagram Tab—XS26-2 The Wiring Diagram tab shows the terminal assignments and the electrical circuits for the safety and non-safety inputs, Safety Outputs, and status outputs, and any terminals that are still available for the selected module. Use the wiring diagram as a guide to physically connect the devices.
XS/SC26-2 and SC10-2 Safety Controllers 9.8 Industrial Ethernet Tab Figure 87. Industrial Ethernet Tab The Industrial Ethernet tab of the Software allows configuration of the Virtual Status Outputs, which offer the same Status Output Signal Conventions functionality as Status Outputs (added on the Equipment tab) over the network (see Status Output Functionality page 59 and on page 60 for detailed information).
XS/SC26-2 and SC10-2 Safety Controllers 9.8.1 Network Settings Network Settings: Modbus/TCP, Ethernet/IP, PCCC Figure 88. Network Settings Click Network Settings on the Software to open the Network Settings window. In the case of a Modbus/TCP connection, the default TCP port used is 502, by specification. This value is not shown in the Network Settings window. Table 5: Default Network Settings Setting Name Factory Default Value...
XS/SC26-2 and SC10-2 Safety Controllers Network Settings: PROFINET (XS/SC26-2 FID 2 Only and SC10-2) After selecting the PROFINET protocol on the Industrial Ethernet tab, click Network Settings on the Software to open the Network Settings window. Figure 89. Network Settings—PROFINET Click Send to write the network settings to the Safety Controller.
XS/SC26-2 and SC10-2 Safety Controllers 9.8.3 Industrial Ethernet: Table Row and Column Descriptions The following are table row and column descriptions (listed in alphanumeric order) for the register maps found in the Industrial Ethernet tab of the Software and the Fault Log Support Tables on page 106.
XS/SC26-2 and SC10-2 Safety Controllers String (Modbus/TCP Protocol) The string format is packed ASCII (2 characters per word). In some systems, the character order may appear reversed or out of order. For example, the word “System” may read out as “yStsme”. Use " Swap character bytes "...
Page 108
XS/SC26-2 and SC10-2 Safety Controllers Fault Log Entry Type Length System Information Type Length Class 0x72 Instance 1 Attribute (Words) (Words) Timestamp UDINT Seconds since boot UDINT Name Length DWORD Operating mode WORD Name String String LengthOfConfigName DWORD Error Code WORD ConfigName String...
XS/SC26-2 and SC10-2 Safety Controllers 9.9 Configuration Summary Tab Figure 90. Configuration Summary Tab The Configuration Summary tab displays the detailed information about all configured inputs, Function and Logic Blocks, Safety Outputs, Status Outputs, and the related Response Times in a text format. www.bannerengineering.com - Tel: + 1 888 373 6767...
XS/SC26-2 and SC10-2 Safety Controllers 9.10 Print Options Figure 91. Print Options The Software provides several options to print the configuration. Click Print on the toolbar to access the Print Options window. The following print choices are available: • All—Prints all views, including Network Settings (in Ethernet-enabled versions) •...
XS/SC26-2 and SC10-2 Safety Controllers 9.11 XS26-2 Password Manager Password Manager is available when a Safety Controller is connected to the PC via USB. The information shown in Password Manager comes from the Safety Controller. Figure 92. XS/SC26-2 Password Manager Click Password Manager on the Software toolbar to edit the configuration access rights.
9.13 Viewing and Importing Controller Data The Banner Safety Controller Software allows viewing or copying current Safety Controller data, such as model number and firmware version, configuration and network settings, and the wiring diagram. Read from Controller is available when a Safety Controller is connected to the PC via USB.
Page 114
XS/SC26-2 and SC10-2 Safety Controllers Figure 94. Viewing System and Network Settings Snapshot Viewing and Importing Controller Data Click Read from Controller to view: • Wiring Diagram—Removes all other tabs and worksheets from the Software and displays only Wiring Diagram and Equipment tabs •...
XS/SC26-2 and SC10-2 Safety Controllers 9.14 Live Mode Live Mode is available when a Safety Controller is connected to the PC via USB. Figure 95. Run Time—Live Mode Tab The Live Mode tab becomes accessible when Live Mode is clicked on the toolbar. Enabling Live Mode disables configuration modification on all other tabs.
Page 116
XS/SC26-2 and SC10-2 Safety Controllers Figure 96. Run Time—Equipment Tab Figure 97. Run Time—Functional View Tab www.bannerengineering.com - Tel: + 1 888 373 6767...
XS/SC26-2 and SC10-2 Safety Controllers 9.15 Simulation Mode Figure 99. Simulation Mode The Simulation Mode tab becomes accessible when Simulation Mode is clicked on the toolbar. Simulation Mode options become available on the left side of the screen. The Simulation Mode tab contains view only information; you cannot click on the output or input items in this view.
Page 119
XS/SC26-2 and SC10-2 Safety Controllers Step Interval—Sets the amount of time that the Single Step button advances when pressed. The amount of time is based on the size of the configuration. Press Play to begin the simulation. The timer runs and gears spin to indicate that the simulation is running. The Functional, Equipment, and Wiring Diagram tabs update, providing visual representation of the simulated device states as well as allowing testing of the configuration.
XS/SC26-2 and SC10-2 Safety Controllers Figure 102. Simulation Mode—Functional View Tab 9.15.1 Timed Action Mode While in Simulation Mode and on the Functional View tab, certain elements which are in delay action modes are indicated in purple. The progress bar shows the countdown of the associated timer for that element. The following figures show the different element states: Figure 104.
XS/SC26-2 and SC10-2 Safety Controllers 9.16 Reference Signals Important: The configuration software incorporates Reference Signals that represent the state of Safety Controller outputs, input devices and both Function and Logic Blocks. A Safety Output reference signal can be used to control another Safety Output. In this type of configuration, the physical On state of the controlling Safety Output is not known.
XS/SC26-2 and SC10-2 Safety Controllers 10 XS/SC26-2 Onboard Interface Use the XS/SC26-2 Safety Controller's onboard interface to access the following: • System Status—displays the current status of Safety Outputs, and, when selected, inputs connected to that output • Fault Diagnostics—displays the current faults, fault log, and an option to clear the fault log (see Finding and Fixing Faults on page 147)
Page 124
XS/SC26-2 and SC10-2 Safety Controllers 6. Wait for the write process to complete. 7. Reset the System. import data from an SC-XM2/3 drive: 1. Insert the SC-XM2/3 drive into the Safety Controller. 2. From the System Menu, select Configuration Mode. 3.
WARNING: Do Not Use Machine Until System Is Working Properly If all of these checks cannot be verified, do not attempt to use the safety system that includes the Banner device and the guarded machine until the defect or problem has been corrected. Attempts to use the guarded machine under such conditions could result in serious injury or death.
XS/SC26-2 and SC10-2 Safety Controllers 1. When the Safety Controller is first installed, to ensure proper installation. 2. Whenever any maintenance or modification is performed on the System or on the machine being guarded by the Schedule of Required Checkouts System, to ensure continued proper Safety Controller function (see on page 125).
Page 127
XS/SC26-2 and SC10-2 Safety Controllers Safety Input Device Operation (E-stop, Rope Pull, Optical Sensor, Safety Mat, Protective Stop) 1. While the associated Safety Outputs are On, actuate each safety input device, one at a time. 2. Verify that each associated Safety Output turns Off with the proper Off-Delay, where applicable. 3.
Page 128
XS/SC26-2 and SC10-2 Safety Controllers 2. Generate a stop command from the muted safeguarding device: a) Verify that the associated Safety Outputs remain On. b) If a mute time limit has been configured, verify that the associated Safety Outputs turn Off when the mute timer expires.
Page 129
XS/SC26-2 and SC10-2 Safety Controllers 3. Change the Bypass Switch to the Run state and verify that the associated Safety Outputs turn On. 4. Switch the associated non-bypassed input devices to their Stop state (one at a time) and verify that associated Safety Outputs turn Off while the Bypass Switch is in the Run state.
Page 130
XS/SC26-2 and SC10-2 Safety Controllers 1. With the associated inputs in the Run state and the Enabling Device in the Stop state, verify that the Safety Output is On. 2. With the Enabling Device still in the Run state and the associated Safety Output On, verify that the Safety Output turns Off when the Enabling Device timer expires.
Page 131
XS/SC26-2 and SC10-2 Safety Controllers 4. Verify that the secondary Output turns: a) On when the Enabling Device and the jog button are in the Run state. b) Off when the either the Enabling Device or the job button are in the Stop state. www.bannerengineering.com - Tel: + 1 888 373 6767...
Description 5 flashes followed by several rapid flashes Normal power up 1 flash every 3 seconds Contact Banner Engineering 2 flash repeating sequence In the past 60 seconds, a cable was unplugged while active 3 flash repeating sequence A cable is unplugged...
Description 4 flash repeating sequence Network not enabled in the configuration 5+ flash repeating sequence Contact Banner Engineering PROFINET Flash Command Meaning The base module LEDs flash at a The flashing LEDs indicate that the base module is connected. It is the result of the "Flash LED" command from rate of twice per second for 4 the PROFINET network.
Description 5 flashes followed by several rapid flashes Normal power up 1 flash every 3 seconds Contact Banner Engineering 2 flash repeating sequence In the past 60 seconds, a cable was unplugged while active 3 flash repeating sequence A cable is unplugged...
• Cycle the power and perform a system reset, if needed Repairs and Warranty Service If these steps do not remedy the lockout condition, contact Banner Engineering (see on page 155). System Status is the first screen that displays when the Safety Controller turns On after a reset. Click ESC to view the System Menu.
XS/SC26-2 and SC10-2 Safety Controllers 12.7 SC10-2 Using Automatic Terminal Optimization Follow these steps for an example configuration that uses the Automatic Terminal Optimization (ATO) feature. Note: This procedure is an example only. 1. Click New Project to start a new project. 2.
XS/SC26-2 and SC10-2 Safety Controllers 13. Go to the Wiring Diagram tab, and notice that external terminal blocks (ETB) have been added to accommodate the second Gate Switch. Note: External terminal blocks are user-provided. Figure 110. Wiring Diagram Tab with Three E-stop Buttons and ETBs 12.8 SC10-2 Example Configuration without Automatic Terminal Optimization Follow these steps for an example configuration where the Automatic Terminal Optimization (ATO) feature is disabled.
Page 138
XS/SC26-2 and SC10-2 Safety Controllers 3. Define the project settings, select the Disable Automatic Terminal Optimization Feature checkbox, and click OK. Note: Make sure that Disable Automatic Terminal Optimization Feature checkbox is selected. Figure 111. Disable Automatic Terminal Optimization Feature Selected The project is created.
Page 139
XS/SC26-2 and SC10-2 Safety Controllers 10. Go to the Wiring Diagram tab, and notice the terminals that are used. Figure 112. Wiring Diagram tab with an E-stop button, optical sensor, and gate switch 11. Go to the Equipment tab and and try to add another Gate Switch. No other equipment can be added ( does not appear) because the ATO feature is disabled and there are not enough terminals to support more equipment.
Page 140
XS/SC26-2 and SC10-2 Safety Controllers 15. Go to the Wiring Diagram tab and notice that external terminal blocks (ETB) have been added to accommodate the change in terminal assignments of the Gate Switch. Note: External terminal blocks are user-provided. Figure 114. Wiring Diagram tab with an E-stop button, optical sensor, gate switch, and ETBs 16.
Replace one SC10-2 Safety Controller with another using the SC-XM3 from the old Safety Controller Note: The Banner Engineering programming tool (SC-XMP2) and Software are required to write a confirmed configuration to an SC-XM3. This limits access to authorized personnel.
XS/SC26-2 and SC10-2 Safety Controllers 7. Insert the SC-XM3 into the micro USB port on the SC10-2. Factory Default Safety Controller • The USB LED fast flashes for 3 seconds, then stays on, and the configuration, network settings, and passwords automatically download to the Safety Controller. Then, the power/fault LED flashes green to indicate that the Safety Controller is waiting for a power cycle.
Page 143
XS/SC26-2 and SC10-2 Safety Controllers Setting Factory Default Applicable Product Industrical Ethernet: String (EtherNet/IP and PCCC Protocol) 32 bit XS/SC26-2, SC10-2 Network Settings: Gateway Address 0.0.0.0 XS/SC26-2, SC10-2 Network Settings: IP Address 192.168.0.128 XS/SC26-2, SC10-2 Network Settings: Link Speed and Duplex Mode Auto Negotiate XS/SC26-2, SC10-2 Network Settings: Subnet Mask...
1. Make sure the SC-USB2 cable is plugged into both the computer and the Safety Controller. Note: Use of the Banner SC-USB2 cable is preferred. If other USB cables are used, make sure that the cable includes a communication line. Many cell phone charging cables do not have a communication line.
XS/SC26-2 and SC10-2 Safety Controllers Note: Contact a Banner Applications Engineer if you require further assistance. 13.2 Software: Error Codes The following table lists error codes that are encountered when attempting to make an invalid connection between blocks on the Functional View tab.
XS/SC26-2 and SC10-2 Safety Controllers Software Code Error A Two-Hand Control Block can be connected only to an Enabling Device Block (IN node) or a Safety Output (IN node). Only Two-Hand Control inputs or Bypass Blocks with Two-Hand Control inputs connected to them can be connected to the TC node of a Two-Hand Control Block.
5. Uninstall and re-install the software from Add/Remove Programs or Programs and Features located in the Control Panel. If this does not remove the indicator, continue to the next step. 6. Contact a Banner Applications Engineer. 13.4 Finding and Fixing Faults...
Common Wire Installation common return path with other devices (see on page 51) Relay Module • Replace Relay module Internal failure—Contact Banner Engineering (see Repairs and Warranty Service 1.3 – 1.8 Internal Fault on page 155) Output Fault Internal Relay Failure •...
Page 149
Simultaneity Fault Cycle Input • Check the wiring • Check the input signal timing Repairs and Warranty Service Internal failure—Contact Banner Engineering (see Internal Fault on page 155) Input stuck high: 2.8 – 2.9 Input Fault Check Terminal xx •...
Page 150
Input Fault Output Turned On • The AVM may be disconnected. Check the wiring to the AVM Repairs and Warranty Service Internal failure—Contact Banner Engineering (see 3.10 Internal Fault on page 155) See the following table. Internal failure—Contact Banner Engineering (see Repairs and Warranty Service 5.1 –...
4.43 Check module power An expansion module lost contact with the Base Controller. Communication Failure Repairs and Warranty Service Internal failure—Contact Banner Engineering (see 4.44 – 4.45 Internal Fault on page 155). Repairs and Warranty Service Internal failure—Contact Banner Engineering (see 4.46 –...
Page 152
Check the wiring to the AVM • Check the timing setting; increase the setting if necessary • Contact Banner Engineering The AVM input was open, but should have been closed, when the associated Safety Output was commanded On: 2.26 Input Fault •...
Page 153
The AVM may be disconnected. Check the wiring to the AVM Repairs and Warranty Service 3.10 Internal Fault Internal failure—Contact Banner Engineering (see on page 155) The supply voltage dropped below the rated voltage for longer than 6 ms: •...
XS/SC26-2 and SC10-2 Safety Controllers 14 Components and Accessories 14.1 Replacement Parts and Accessories Model Description Applicable Product SC-USB2 USB cable XS/SC26-2, SC10-2 SC-XMP2 Programming tool for SC-XM2/3 XS/SC26-2, SC10-2 DIN-SC DIN End Clamp XS/SC26-2, SC10-2 SC-XM2 External memory drive for the XS/SC26-2 XS/SC26-2 SC-XM3 External memory drive for the SC10-2...
15.4 Banner Engineering Corp. Limited Warranty Banner Engineering Corp. warrants its products to be free from defects in material and workmanship for one year following the date of shipment. Banner Engineering Corp. will repair or replace, free of charge, any product of its manufacture which, at the time it is returned to the factory, is found to have been defective during the warranty period. This warranty does not cover damage or liability for misuse, abuse, or the improper application or installation of the Banner product.
Banner and its affiliates and channel partners do not warrant that the services are secure, free from bugs, viruses, interruption, errors, theft or destruction.
16 Standards and Regulations The list of standards below is included as a convenience for users of this Banner device. Inclusion of the standards below does not imply that the device complies specifically with any standard, other than those specified in the Specifications section of this manual.
XS/SC26-2 and SC10-2 Safety Controllers 16.3 Applicable European and International Standards EN ISO 12100 Safety of Machinery – General Principles for Design — Risk Assessment and Risk Reduction ISO 13857 Safety Distances . . . Upper and Lower Limbs ISO 13850 (EN 418) Emergency Stop Devices, Functional Aspects – Principles for Design EN 574 Two-Hand Control Devices –...
XS/SC26-2 and SC10-2 Safety Controllers 17 Glossary Automatic Reset The safety input device control operation setting where the assigned safety output will automatically turn on when all of its associated input devices are in the Run state. Change of State (COS) Complementary Contacts The change of an input signal when it switches from Run-to-Stop Two sets of contacts which are always in opposite states.
Page 160
XS/SC26-2 and SC10-2 Safety Controllers Pass-Through Hazard PELV A pass-through hazard is associated with applications where Protected extra-low voltage power supply, for circuits with earth personnel may pass through a safeguard (which issues a stop ground. Per IEC 61140: "A PELV system is an electrical system in command to remove the hazard), and then continues into the which the voltage cannot exceed ELV (25 V ac rms or 60 V ripple guarded area, such as in perimeter guarding.