Siemens SINUMERIK 828D Function Manual page 82

System Features
8.3 Safety instructions
• For a 1-encoder system, encoder faults are detected using different hardware and
• The category 0 stop function to EN 60204-1 (STO or STOP A to Safety Integrated)
• Safety Integrated functions cannot detect parameterization errors made by the machine
• Motor Modules or the motor must be replaced with a device of the same type, as the
If an internal or external fault occurs, none or only some of the parameterized safety
functions are available during the STOP-F response triggered by the fault. This must be
taken into account when a delay time between STOP F and STOP B is parameterized. This
applies in particular to vertical axes.
Note
Changing the EDS with safe motion monitoring
An encoder which is used for Safety functions must not be switched over when a data set is
switched over.
The Safety functions check the safety-relevant encoder data for changes when data sets are
switched over. If a change is detected, fault F01670 is displayed with a fault value of 10,
which results in a non-acknowledgeable STOP A. The safety-relevant encoder data in the
various data sets must therefore be identical.
82
WARNING
software monitoring functions. It is not permissible to disable these monitoring functions
and they must be parameterized carefully. Depending on the fault type and the
responding monitoring function, stop function category 0 or 1 to EN 60204-1 (fault
response functions STOP A or STOP B to Safety Integrated) is selected (see table
"Overview of stop responses" in Chapter "Safety Integrated Extended Functions", in the
section "Safety faults").
means that the drives are not decelerated but instead coast to standstill (the time
required to coast to standstill depends on the kinetic energy). This must be included in
the logic of the protective door lock, for example, by means of logic operation of "SSM
with encoder (n<nx)". For Safety without encoder, you need to use other measures to
ensure that the protective door remains locked until the drive has come to a standstill.
manufacturer. The required safety level can only be reached by by means of an
elaborate acceptance test.
parameter settings will otherwise lead to an incorrect response of the Safety Integrated
functions. The corresponding drive must be re-calibrated after an encoder is replaced.
WARNING
Function Manual, 07/2012, 6FC5397-3EP40-3BA0
Safety Integrated