Firmware Update Of Twinsafe Products - Beckhoff TwinSAFE EL6910 Operation Manual

Operation
4.23

Firmware update of TwinSAFE products

For TwinSAFE products there is the option of performing a firmware update via the EtherCAT interface. The
complete firmware of the TwinSAFE component is deleted and replaced by a new version.
The latest firmware can be downloaded from the Beckhoff website or requested from Beckhoff Support. The
versions are available in an encrypted form and can only be loaded onto the matching TwinSAFE product.
An incorrect firmware file is rejected by the respective TwinSAFE product.
Prerequisite for a firmware update
Put the machine into a safe state!
A firmware update stops the current processing of the firmware of the TwinSAFE product. It is essential that
you switch the TwinSAFE system to the safe state before you start an update.
All safe outputs must be in a safe, de-energized state. If hanging or pulling loads are present on the ma-
chine or the TwinSAFE system, these must also be brought into a safe state through external safety mea-
sures if necessary.
Monitor the machine state!
It is necessary that you have control over the machine, i.e. you can see it and thus ensure that it is in a safe
state and that a firmware update can be carried out without endangering the operators or other personnel.
Avoid communication interruptions during the download
Please avoid disconnecting the EtherCAT connection while downloading the firmware under any circum-
stances. If a communication error does occur, the TwinSAFE product may subsequently be unusable and
must be sent to the Beckhoff Service.
Default project for TwinSAFE I/O components with local logic function!
After a firmware update, any implemented default project starts automatically. An EK1960, for example,
would start up as a TwinSAFE I/O slave after a firmware update.
Firmware update of TwinSAFE logics
If a firmware update is performed for a TwinSAFE logic component, e.g. on a TwinSAFE logic EL6910, the
safety-related user program must be reloaded to the TwinSAFE logic after the update. After the update the
user administration is set to the default settings.
EtherCAT communication
When an EtherCAT component is updated, it is switched to BOOTSTRAP mode. This can have an
effect on the EtherCAT communication with other EtherCAT devices.
132
DANGER
DANGER
NOTE
WARNING
NOTE
Version: 1.8.0 EL6910