Layout of the product ..................12 Installation ......................13 5.1. Mechanical fastening ........................13 5.2. Calculation of the safety distance for an item of ESPE connected to the MSC system ......14 5.3. Electrical connections ........................14 5.3.1. Information in relation to connecting cables ...............15 5.3.1.1.
Page 4
9.1.10.1. Project validation ....................73 9.1.10.2. Printing project report ..................74 9.1.10.3. Connecting to MSC .....................75 9.1.10.4. Sending the configuration to the MSC system ............75 9.1.10.5. Downloading a configuration file (project) from MSC-CB ..........75 9.1.10.6. Configuration log ....................75 9.1.10.7. System layout .....................76 9.1.10.8.
Page 5
Operating Instructions Modular Safety Control System MSC 9.3.1. Speed monitoring (SPEED CONTROL) ................118 9.3.2. Speed range monitoring (WINDOW SPEED CONTROL) ............121 9.3.3. Standstill monitoring (STAND STILL) ................123 9.3.4. Speed/standstill monitoring (STAND STILL AND SPEED CONTROL) ........125 9.4. Function blocks in the "OPERATOR" window ...................128 9.4.1.
Page 6
Operating Instructions Modular Safety Control System MSC Ordering information and accessories ............... 170 Inspection and service ..................170 Service ......................170 Declaration of conformity ................. 170 (Translation of the original operating instructions) 2121331-04-04/19...
Modular Safety Control System MSC 1. About this document 1.1. Scope These operating instructions are valid for the Modular Safety Control System MSC. These operating instructions and any brief instructions enclosed form the complete user information for your device. 1.2. Target group Design engineers and installation planners for safety devices on machines, as well as setup and servicing staff possessing special expertise in handling safety components.
WARNING Ì MSC achieves the following safety levels: SIL 3, SILCL 3, PL e, cat. 4, type 4 as per the applicable standards. However the final SIL and PL safety categories for the application are dependent on the number of safety components, their parameters and the connections made, as per the risk analysis.
Probability of Dangerous Failure per Hour Safety Integrity Level (according to EN 61508) SILCL Safety Integrity Level Claim Limit (according to EN 62061) Software 2.4. Applicable standards MSC complies with the following European directives: Ì 2006/42/EC "Machinery Directive" Ì 2014/30/EU "EMC Directive"...
In addition, 8 inputs and 16 outputs are available and can be controlled using sensors (via the fieldbus). The number of inputs in the system can be increased using the MSC extension modules FI8, FI16 and FM4 such that more external devices can be connected.
Page 11
All this is achieved using a straightforward, intuitive graphic user interface. The configuration undertaken on the PC is transferred to the MSC-CB via a USB connection. The file is saved in the MSC-CB and can also be saved on the proprietary M-A1 memory card (accessory). In this way it is possible to copy the configuration to a different MSC-CB module quickly.
Ì The MSCB plug connector supplied and a further MSCB plug connector for the connection to the MSC-CB are required to install an extension module. This can be ordered separately as an acces- sory. (Translation of the original operating instructions) 2121331-04-04/19...
5. Installation 5.1. Mechanical fastening Fasten the modules of the MSC system to a 35-mm DIN rail as follows: 1. Connect together a number of rear 5-pin MSCB plug connectors to suit the number of modules to be installed. 2. Fasten the row of plug connectors assembled in this manner to the DIN rail (first hook on at the top).
5.2. Calculation of the safety distance for an item of ESPE connected to the MSC system All electro-sensitive protective equipment that is connected to the MSC system must be arranged at a distance that is at least the minimum safety distance S such that the danger zone can only be reached after the machine's hazardous move- ment has stopped.
Cables for connections with a length of more than 50 m must have a cross-section of at least 1 mm (AWG16). 5.3.1.1. Base unit MSC-CB The connections for each module in the MSC system are listed in the table below: TERMINAL SIGNAL TYPE...
5.3.3.1. MULTIPLE LOAD function To configure several MSC-CB modules without using a PC and the USB port, the required configuration can be saved on one M-A1 memory card and then downloaded from there to the MSC-CB modules to be configured.
5.3.3.2. RESTORE function If the module MSC-CB is faulty, it can be replaced with a new module. As the entire configuration is saved on the M-A1 memory card, it is only necessary to insert this card in the new module and switch on the MSC system, the backed up configuration will then be loaded immediately.
Operating Instructions Modular Safety Control System MSC 5.3.3.4. Module FI8 TERMINAL SIGNAL TYPE DESCRIPTION VERSION 24 VDC Power supply 24 VDC NODE_SEL0 Input Input ("type B" as per EN 61131-2) Node selection Input ("type B" as per EN 61131-2) NODE_SEL1...
Operating Instructions Modular Safety Control System MSC 5.3.3.6. Module FI16 TERMINAL SIGNAL TYPE DESCRIPTION VERSION 24 VDC Power supply 24 VDC NODE_SEL0 Input Input ("type B" as per EN 61131-2) Node selection NODE_SEL1 Input Input ("type B" as per EN 61131-2)
Operating Instructions Modular Safety Control System MSC 5.3.3.7. Module AC-FO4 TERMINAL SIGNAL TYPE DESCRIPTION VERSION 24 VDC Power supply 24 VDC NODE_SEL0 Input Input ("type B" as per EN 61131-2) Node selection Input ("type B" as per EN 61131-2) NODE_SEL1...
Operating Instructions Modular Safety Control System MSC 5.3.3.9. Modules SPM0 – SPM1 – SPM2 TERMINAL SIGNAL TYPE DESCRIPTION VERSION 24 VDC Power supply 24 VDC NODE_SEL0 Input Node selection Input ("type B" as per EN 61131-2) NODE_SEL1 Input Power supply 0 VDC...
Page 22
Operating Instructions Modular Safety Control System MSC POWER SUPPLY 5VDC/ 24VDC EXT_0V ENCODER TTLB BROWN 5VDC/24VDC WHITE EXT_0V EXT_0V N.C. N.C. GREEN YELLOW N.C. N.C. GREY PINK POWER SUPPLY POWER SUPPLY 5VDC/ ENCODER HTL EXT_0V ENCODER SIN/COS EXT_0V 24VDC 24VDC...
Operating Instructions Modular Safety Control System MSC 5.3.4.1. Module AZ-FO4 TERMINAL SIGNAL TYPE DESCRIPTION VERSION 24 VDC Power supply 24 VDC NODE_SEL0 Input Input ("type B" as per EN 61131-2) Node selection NODE_SEL1 Input Input ("type B" as per EN 61131-2)
Operating Instructions Modular Safety Control System MSC 5.3.4.3. Module O8 SIGNAL TYPE DESCRIPTION VERSION 24 VDC Power supply 24 VDC NODE_SEL0 Input Input ("type B" as per EN 61131-2) Node selection Input ("type B" as per EN 61131-2) NODE_SEL1 Input...
Programmable digital output 8 PNP active high Table 15: Module AH-FO4SO8 5.3.5. Example for the connection of the MSC system to the machine control Figure 6: Example for the connection of the MSC system to the machine control 2121331-04-04/19 (Translation of the original operating instructions)
5.4. Check list after installation With the MSC system, faults can be detected in the individual modules. To ensure the trouble-free operation of the system, the following checks are to be undertaken during setup and at least once a year: 1.
Operating Instructions Modular Safety Control System MSC 6. Flow chart Mechanical mounting Electrical connections between the MSC modules and external sensors Preparation of the diagram Validation software OK? Connection via USB to MSC-CB Download the diagram to MSC-CB Con guration check (incl.
The base unit MSC-CB has two inputs: MASTER_ENABLE1 and MASTER_ENABLE2. NOTICE These signals must both be set permanently to logic level 1 (24 VDC) so that the MSC system functions correctly. If you want to deactivate the MSC system, these inputs can be simply set to logic level 0 (0 VDC).
Operating Instructions Modular Safety Control System MSC 7.1.3. Proximity switch input on speed monitoring modules SPM Configuration with combined proximity switches on one axis (Figure 8) The SPM module can be configured in the "Combined proximity switch" mode for a measurement using two proximity switches on one axis.
7.1.4. RESTART_FBK Using the RESTART_FBK signal, MSC can monitor a feedback loop signal (External Device Monitoring – EDM) from external contactors; both manual and automatic forms of starting can be programmed (see list of the possible connections in Table 17).
Ì An output Ì A node on the logic diagram designed with the aid of EUCHNER Safety Designer. 7.2.2. OUT_TEST The inputs and the cables can be monitored for short circuits or overload states using the OUT_TEST signals (Figure 9).
EUCHNER Safety Designer. Each OSSD output can be configured as shown in Table 18: The output is only activated, as per the configuration defined by the software EUCHNER Safety Designer, if 24 VDC are applied to the related Automatic input RESTART_FBK.
7.2.5. OSSD (AH-FO4SO8) The module AH-FO4SO8 has 4 high-current safety outputs (max. 2 A per channel). Two settings are available for the outputs (configuration via the software EUCHNER Safety Designer): Ì 4 single-channel outputs (1 safety output per channel with corresponding RESTART_FBK input).
The modules AZ-FO4/ AZ-FO4O8 contain 4 safety relays. Important! You will find the possible operating modes for the modules AZ-FO4/AZ-FO4O8 that can be configured ¨ using the software EUCHNER SAFETY DESIGNER in the section "Relay [RELAY]". Excitation voltage 17 – 31 VDC Switching voltage, min.
Digital INPUTS (no./description) PNP active high as per EN 61131-2 Test OUTPUT (no./description) 4/ for checking for short circuits, overload states Connection to MSC-CB Via proprietary 5-way bus MSC from EUCHNER 8.1.7. Module FM4 (EN IEC 61508:2010) 5.56 E-9 Operating voltage 24 VDC ±20 %...
* On the use of the module AH-FO4SO8 with output current > 500 mA, the module must be separated from the neigh- ¨ boring modules by fitting an MSC plug connector in between. 2121331-04-04/19 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.2. Mechanical dimensions 99 mm 22,5 mm 108 mm Figure 13: Module dimensions 2121331-04-04/19 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.3. Signals 8.3.1. Base unit MSC-CB (Figure 14) (Translation of the original operating instructions) 2121331-04-04/19...
Operating Instructions Modular Safety Control System MSC 8.3.2. Module FI8FO2 (Figure 15) 2121331-04-04/19 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.3.3. Module FI8 (Figure 16) (Translation of the original operating instructions) 2121331-04-04/19...
Operating Instructions Modular Safety Control System MSC 8.3.4. Module FM4 (Figure 17) 2121331-04-04/19 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.3.5. Module FI16 (Figure 18) (Translation of the original operating instructions) 2121331-04-04/19...
Operating Instructions Modular Safety Control System MSC 8.3.6. Module AC-FO2 (Figure 19) 2121331-04-04/19 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.3.7. Module AC-FO4 (Figure 20) (Translation of the original operating instructions) 2121331-04-04/19...
Operating Instructions Modular Safety Control System MSC 8.3.8. Module AZ-FO4 (Figure 21) 2121331-04-04/19 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.3.9. Module AZ-FO4F08 (Figure 22) (Translation of the original operating instructions) 2121331-04-04/19...
Operating Instructions Modular Safety Control System MSC 8.3.10. Module O8 (Figure 23) 2121331-04-04/19 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.3.11. Module O16 (Figure 24) (Translation of the original operating instructions) 2121331-04-04/19...
Operating Instructions Modular Safety Control System MSC 8.3.12. Modules SPM0, SPM1, SPM2 (Figure 25) 2121331-04-04/19 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.3.13. Module AH-FO4SO8 (Figure 26) (Translation of the original operating instructions) 2121331-04-04/19...
Operating Instructions Modular Safety Control System MSC 8.4. Fault diagnostics 8.4.1. Base unit MSC-CB (Figure 27) 2121331-04-04/19 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.4.2. Module FI8FO2 (Figure 28) (Translation of the original operating instructions) 2121331-04-04/19...
Operating Instructions Modular Safety Control System MSC 8.4.3. Module FI8 (Figure 29) 2121331-04-04/19 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.4.4. Module FM4 (Figure 30) (Translation of the original operating instructions) 2121331-04-04/19...
Operating Instructions Modular Safety Control System MSC 8.4.5. Module FI16 (Figure 31) 2121331-04-04/19 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.4.6. Modules AC-FO2/AC-FO4 (Figure 32) (Translation of the original operating instructions) 2121331-04-04/19...
Operating Instructions Modular Safety Control System MSC 8.4.7. Module AZ-FO4 (Figure 33) 2121331-04-04/19 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.4.8. Module AZ-FO4O8 (Figure 34) (Translation of the original operating instructions) 2121331-04-04/19...
Operating Instructions Modular Safety Control System MSC 8.4.9. Module O8 (Figure 35) 2121331-04-04/19 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.4.10. Module O16 (Figure 36) (Translation of the original operating instructions) 2121331-04-04/19...
Operating Instructions Modular Safety Control System MSC 8.4.11. Modules SPM0, SPM1, SPM2 (Figure 37) 2121331-04-04/19 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.4.12. Module AH-FO4SO8 (Figure 38) (Translation of the original operating instructions) 2121331-04-04/19...
The MSC system and the related extension modules monitor and control the safety components connected. EUCHNER Safety Designer is based on a graphical user interface using which the connections between the various compo- nents can be defined. They are described in the following: 9.1.
Operating Instructions Modular Safety Control System MSC 9.1.4. General If EUCHNER Safety Designer has been installed correctly, an icon is added to the desktop. To start the program: double-click this icon. The following start screen is displayed: Figure 39: EUCHNER Safety Designer You can now start to create projects.
EUCHNER Safety Designer, Project information Then a window appears in EUCHNER Safety Designer in which only the module MSC-CB is shown. You can add the modules necessary for the system using the list boxes at the top of the screen (Select extension module).
Operating Instructions Modular Safety Control System MSC 9.1.7.1. Changing configuration (layout of the various modules) You can change the system configuration by selecting the button. The Configuration window is displayed again (Figure 44). 9.1.7.2. Editing user parameters You can edit the project information by selecting the button.
Operating Instructions Modular Safety Control System MSC 2. "OPERATOR" tool window This window contains the various function blocks for linking the items in point 1. These blocks are divided into seven different categories: Ì Logic Ì Memories Ì Safety Guard Lock Ì...
Operating Instructions Modular Safety Control System MSC 9.1.9.1. Using the right mouse button Ì On input/output blocks - Copy/paste - Delete - Delete all assigned connections - Alignment with other function blocks (with multiple selection) - Help - Monitor mode: show/hide the property window - Status block: activate/deactivate the logical negation on the input pin Ì...
The inputs (1, 2, 3) on the module MSC-CB for connecting the contacts on the safety components are highlighted in yellow on the left. The MSC outputs (from 1 to 4) are activated as per the conditions that are specified in the interlock (INTERLOCK) and emergency stop (E-STOP) (see page 81 Emergency stop (E-STOP) and page 83 Interlock (INTERLOCK)).
If the validation is successful, a sequential number is assigned to the INPUT and OUTPUT on the diagram. This number then appears also in the REPORT and in the monitor in EUCHNER Safety Designer. The configuration can only be transferred after successful validation.
This definition of the PL and the other related parameters as per EN ISO 13849-1 relate only to the functions that have been implemented by EUCHNER Safety Designer in the MSC system; here it is assumed that the configuration has been undertaken correctly.
PC to the MSC-CB after the related command is executed. In the MSC-CB, the project is saved in the internal memory and (if fitted) on the M-A1 memory card (password required: level 2).
9.1.10.8. Disconnecting the system Click the button to disconnect the PC from the MSC-CB. After the disconnection of the system, then system is reset and restarted with the project transferred. NOTICE If the system does not comprise all the modules foreseen in the configuration, this incompatibility is indicated on the module MSC-CB and the module is not started (see SIGNALS).
(password required: level 1). A pop-up window with the following content appears (in real time): Ì Status of the inputs (if the item has two or more input connections to MSC, only the first is indicated in the monitor as active; see example shown) Ì...
Operating Instructions Modular Safety Control System MSC 9.1.10.10. Monitor (real-time I/O status – text – graphic) Click the button to activate/deactivate the monitor (password required: level 1). Based on the color of the links (Figure 56) the diagnostics can be read (in real time) as follows: RED = OFF Ì...
System planners who know the level 2 password can assign a new password for level 2 (alphanumeric, max. 8 characters). NOTICE Using this password the project can be uploaded (from PC to MSC-CB), edited and saved. In other Ì words, complete control of the PC => MSC system is possible using this password.
After the project has been validated, uploaded to the module MSC-CB and all safety components have been connected, the system must be checked for correct operation. This check is made by forcing a status change for each safety component connected to MSC to check whether the status of the outputs also actually changes.
If the OUTPUT is at logic level "high" (TRUE), the FBK signal must be at the logic level "low" (FALSE) within the time set and vice versa. Otherwise the OUTPUT output changes to the low level (FALSE) and the error is signaled on the base unit MSC-CB by the flashing of the CLEAR LED for the OSSD in the error mode.
Modular Safety Control System MSC The Error OUT signal is reset if one of the following events occurs: 1. The system is switched off and on again. 2. The RESET MSC-CB operator is activated. Figure 62: Example for OSSD with correct...
Page 83
Operating Instructions Modular Safety Control System MSC Figure 65: Example for a project: 2 blocks with single output + 1 block with dual-channel output The possible configurations of AH-FO4SO8 (2 or 4 OSSD) are shown on the following: Figure 66:...
If the OUTPUT is at logic level "high" (TRUE), the FBK signal must be at the logic level "low" (FALSE) within the time set and vice versa. Otherwise the OUTPUT output changes to the low level (FALSE) and the error is signaled on the base unit MSC-CB by the flashing of the CLEAR LED for the OSSD in the error mode.
Operating Instructions Modular Safety Control System MSC 9.2.1.4. Fieldbus sensor (FIELDBUS PROBE) Using this element, the status of any point on the diagram can be indicated on the fieldbus. Up to 16 sensors can be used; the bit used to indicate the state must be entered for each sensor.
Page 86
Operating Instructions Modular Safety Control System MSC Example of usage with an external relay Example of usage with only an internal relay Figure 74: Examples of usage Category 2. Outputs with a category 2 relay with OTE (Output Test Equipment) outputs. Each module AZ-FO4 / AZFO4O8 can have up to four of these outputs.
Operating Instructions Modular Safety Control System MSC 9.2.1.6. Usage of the automatic start (A) or manual start (B) (category 2) Figure 76: Usage of the automatic or manual start Category 4. Outputs with a two category 4 relays. Each module AZ-FO4 / AZ-FO4O8 can have up to two outputs of this type.
Page 88
"high" (TRUE). The Error OUT signal is reset if one of the following events occurs: 1. The system is switched off and on again. 2. The RESET MSC-CB operator is activated. Figure 79: Example for RELAY with correct feedback...
Operating Instructions Modular Safety Control System MSC 9.2.2. Input items 9.2.2.1. Emergency stop (E-STOP) Using the E-STOP function block the input status of an emergency stop device can be checked. If the emergency stop button is pressed, the OUTPUT output is "0" (FALSE), otherwise the OUTPUT output is "1" (TRUE).
Page 90
Operating Instructions Modular Safety Control System MSC Important! If Manual Reset is selected, the next input must be used. Example: If Input1 and Input2 are used for the function block, Input3 must be used for the reset input. Output Test: Using this option you can select which test output signals are to be sent to the emergency stop device. Short circuits between the wires can be detected and rectified by means of this additional check.
Operating Instructions Modular Safety Control System MSC 9.2.2.2. Interlock (INTERLOCK) The input status of a movable guard or a safety door is checked by the INTERLOCK function block. If the movable guard or the safety door is opened, the OUTPUT output is "0" (FALSE), otherwise the OUTPUT output is "1" (TRUE).
Page 92
Operating Instructions Modular Safety Control System MSC Important! If manual reset is selected, the next input after the inputs used by the function block must be used. Example: If Input1 and Input2 are used for the function block, Input3 must be used for the reset input.
Operating Instructions Modular Safety Control System MSC 9.2.2.3. Single-channel interlock (SINGLE INTERLOCK) The input status of a movable guard or a safety door is checked by the SINGLE INTERLOCK function block. If the movable guard or the safety door is opened, the OUTPUT output is "0" (FALSE), otherwise the OUTPUT output is "1" (TRUE).
Operating Instructions Modular Safety Control System MSC 9.2.2.4. Guard locking monitoring (LOCK FEEDBACK) Using the LOCK FEEDBACK function block the state of the guard locking monitoring inputs for a movable guard or a safety door is checked. If the inputs signal that the guard locking is locked, the OUTPUT output is "0" (FALSE), otherwise the OUT- PUT output is "1"...
Operating Instructions Modular Safety Control System MSC 9.2.2.5. Key-operated switch (KEY LOCK SWITCH) Using the KEY LOCK SWITCH function block the input status of a manual key-operated switch is checked. If the key is not turned, the OUTPUT output is "0" (FALSE), otherwise the OUTPUT output is "1" (TRUE).
Page 96
Operating Instructions Modular Safety Control System MSC Output Test: Using this option you can select which test output signals are to be sent to the component contacts. Short circuits between the wires can be detected and rectified by means of this additional check. For this purpose it is necessary to configure the test output signals (from the test output signals available).
Operating Instructions Modular Safety Control System MSC 9.2.2.6. Optoelectronic safety light grid or safety laser scanner (ESPE) Using the ESPE function block the input status of an optoelectronic safety light grid (or safety light scanner) is checked. If the area protected by the light curtain is interrupted (outputs on the light grid FALSE), the OUTPUT output is "0" (FALSE).
Page 98
Operating Instructions Modular Safety Control System MSC Enable Error Out: If selected, an error detected by the function block is displayed. Item Description: Here you can enter a functional description for the component. This text is displayed in the upper part of the symbol.
Operating Instructions Modular Safety Control System MSC 9.2.2.7. Safety footswitch (FOOTSWITCH) Using the FOOTSWITCH function block the input status of a safety footswitch is checked. If the footswitch is not pressed, the OUTPUT output is "0" (FALSE), otherwise the OUTPUT output is "1" (TRUE).
Page 100
Operating Instructions Modular Safety Control System MSC Manual Monitored Figure 97: Safety footswitch manual/monitored reset Figure 98: Connection examples, safety footswitch Important! If manual reset is selected, the next input after the inputs used by the function block must be used.
Operating Instructions Modular Safety Control System MSC 9.2.2.8. Operating mode selection (MOD-SEL) Using the MOD-SEL function block the input status of an operating mode selector switch (up to 4 inputs) is checked. If only one of the IN inputs is "1" (TRUE), the corresponding OUTPUT output is also "1" (TRUE). In other cases, i.e. if all IN inputs are "0"...
Operating Instructions Modular Safety Control System MSC 9.2.2.9. Light barrier (PHOTOCELL) Using the PHOTOCELL function block the input status of an optoelectronic safety light barrier is checked. If the beam from the light barrier is obscured (output on the light barrier FALSE), the OUTPUT output is "0" (FALSE). If, con- versely, the beam is not obscured (output on the light barrier TRUE), the OUTPUT output is "1"...
Page 103
Operating Instructions Modular Safety Control System MSC Enable Error Out: If selected, an error detected by the function block is displayed. Item Description: Here you can enter a functional description for the component. This text is displayed in the upper part of the symbol.
Operating Instructions Modular Safety Control System MSC 9.2.2.10. Two-hand control (TWO-HAND) Using the TWO-HAND function block the input status of a two-hand control switch is checked. If both pushbuttons are pressed at the same time (within max. 500 ms), the OUTPUT output is "1" (TRUE); this status is retained on releasing the pushbutton.
This input can only be assigned to the base unit MSC-CB. ¨ It must be used if the OSSD outputs on an MSC system are connected to the inputs on a down- ¨ stream MSC system or together with the NETWORK operator.
Operating Instructions Modular Safety Control System MSC 9.2.2.12. SENSOR Using the SENSOR function block the input status of a sensor (not a safety sensor) is checked. If the beam from the sensor is obscured (output on the light barrier FALSE), the OUTPUT output is "0" (FALSE). Conversely, if this beam is not occupied and the output on the sensor is "1"...
Page 107
Operating Instructions Modular Safety Control System MSC Output Test: Using this option you can select which test output signals are to be sent to the sensor. Short circuits between the wires can be detected and rectified by means of this additional check. For this purpose it is necessary to configure the test output signals (from the test output signals available).
Operating Instructions Modular Safety Control System MSC 9.2.2.13. Pressure sensitive mat (S-MAT) Using the pressure sensitive mat function block the input status of a pressure sensitive mat is checked. If there is a person on the footmat, the OUTPUT output is "0" (FALSE), otherwise, i.e. if the footmat is clear, the OUTPUT output is "1" (TRUE).
Page 109
Operating Instructions Modular Safety Control System MSC Output Test: Using this option you can select which test output signals are to be sent to the pressure sensitive mat contacts. Short circuits between the wires can be detected and rectified by means of this check. For this purpose it is necessary to configure the test output signals (from the test output signals available).
Operating Instructions Modular Safety Control System MSC 9.2.2.14. Switch (SWITCH) Using the SWITCH function block the input status of a pushbutton or switch (NOT A SAFETY SWITCH) is checked. If the pushbutton is pressed, the OUTPUT output is "1" (TRUE), otherwise the OUTPUT output is "0" (FALSE).
Operating Instructions Modular Safety Control System MSC 9.2.2.15. Enabling switch (ENABLING SWITCH) Using the ENABLING SWITCH function block the input status of a 3-stage enabling switch is checked. If this switch is not pressed (position 1) or is fully pressed (position 3), the OUTPUT output is "0" (FALSE). In the middle position (position 2) the OUTPUT output is "1"...
Operating Instructions Modular Safety Control System MSC Simultaneity (ms): Is always selected. Defines the maximum permissible time (ms) between the switching of the different signals received from the external contacts on the device. Filter (ms): This parameter makes it possible to filter the signals from the device. This filter can be set to between 3 and 250 ms and removes any contact bounce.
Operating Instructions Modular Safety Control System MSC 9.2.2.18. Testable safety device (TESTABLE SAFETY DEVICE) Using the TESTABLE SAFETY DEVICE function block the input status of a single-channel or a dual-channel safety sensor (both normally closed contacts and normally open contacts) is checked. Refer to the following tables for the sensor type...
Page 114
Operating Instructions Modular Safety Control System MSC Parameter Manual Reset: If selected, a reset can be requested on every activation of the device. Otherwise the activation of the output will correspond directly to the input conditions. There are two types of reset: "Manual" and "Monitored". On the selection of the manual reset, the system only checks the signal transition from 0 to 1.
Operating Instructions Modular Safety Control System MSC 9.2.2.19. Semiconductor output (SOLID STATE DEVICE) Using the semiconductor output function block the input status is checked. If 24 VDC are present on the inputs, the OUTPUT output switches to "1" (TRUE), otherwise the OUTPUT output is "0" (FALSE).
The states are depicted on the fieldbus using one byte. (You will find more detailed information in the fieldbus manual on the CD ROM "EUCHNER Safety Designer".) Figure 120: Fieldbus input DANGER The FIELDBUS INPUT is NOT a safety input.
Operating Instructions Modular Safety Control System MSC 9.3. Function blocks for speed monitoring Important! Ì An external fault or a malfunction on the encoder/proximity switch or on its connections does not necessarily result in a change in the safety status on the normal output of the function block (e.g.
Operating Instructions Modular Safety Control System MSC 9.3.1. Speed monitoring (SPEED CONTROL) The speed monitoring function block checks the speed of a device. The OVER output is "0" (FALSE) if the speed measured exceeds a limit set previously. If the speed is below this previously set limit, the OVER output is "1" (TRUE).
Page 119
Operating Instructions Modular Safety Control System MSC Enable Direction: Select this parameter to activate the DIR output on the function block. This output is "1" (TRUE) if the axis is rotating counter clockwise and "0" (FALSE) if the axis is rotating clockwise (see adjacent figure).
Page 120
Operating Instructions Modular Safety Control System MSC Hysteresis (%): Corresponds to the hysteresis (in percent) below which a speed change is filtered out. Here a value other than 1 is to be entered to prevent continuous switching of the input.
Operating Instructions Modular Safety Control System MSC 9.3.2. Speed range monitoring (WINDOW SPEED CONTROL) The speed range monitoring function block checks the speed of a device; the WINDOW output is "1" (TRUE) if the speed measured is within the previously defined speed window.
Page 122
Operating Instructions Modular Safety Control System MSC Proximity choice: Selecting the proximity switch enables you to select between PNP, NPN, NO contact, NC contact, 3-wire or 4-wire. To ensure Performance Level = Pl e, PNP NO must be used (see “Prox- imity switch input on speed monitoring modules SPM”...
Operating Instructions Modular Safety Control System MSC 9.3.3. Standstill monitoring (STAND STILL) The standstill monitoring function block checks the speed of a device; the ZERO output is "1" (TRUE) if the speed is 0. If the speed is not 0, the ZERO output is "0" (FALSE).
Page 124
Operating Instructions Modular Safety Control System MSC Proximity choice: Selecting the proximity switch enables you to select between PNP, NPN, NO contact, NC contact, 3-wire or 4-wire. (To ensure Performance Level = Pl e, PNP NO must be used (see “Proximity switch input on speed monitoring modules SPM”...
Operating Instructions Modular Safety Control System MSC 9.3.4. Speed/standstill monitoring (STAND STILL AND SPEED CONTROL) The speed/standstill monitoring function block checks the speed of a device; the ZERO output is "1" if the speed is 0. In addition, the OVER output is "0" (FALSE) if the speed measured exceeds a previously defined limit.
Page 126
Operating Instructions Modular Safety Control System MSC Enable Direction: Select this parameter to activate the DIR output on the function block. This output is "1" (TRUE) if the axis is rotating counter clockwise and "0" (FALSE) if the axis is rotating clockwise (see adjacent figure).
Page 127
Operating Instructions Modular Safety Control System MSC Encoder Resolution: Entry for the number of pulses/revolution (for a rotary sensor) or μm/pulse (for a linear sensor) in relation to the 1st measuring device. Verification: In this field you can enter the number of pulses/revolution (for a rotary sensor) or µm/pulse (for a linear sensor) in relation to the 2nd measuring device.
Operating Instructions Modular Safety Control System MSC 9.4. Function blocks in the "OPERATOR" window All inputs on these operators can be inverted (logical NOT). To invert, click the input that is to be inverted using the right mouse button. A small circle then appears on the inverted input. To clear the inversion, simply click the same input again.
Operating Instructions Modular Safety Control System MSC 9.4.1.4. OR The OR logical operator produces an output of "1" (TRUE) if at least one of the inputs is "1" (TRUE). Figure 142: OR Parameter Inputs number: You can set 2 to 8 inputs using this option.
Operating Instructions Modular Safety Control System MSC 9.4.1.7. XNOR A logical XNOR produces an output of “1” (TRUE) if the number of inputs that are “1” (TRUE) is even or if all inputs are “0” (FALSE). Figure 145: XNOR Parameter Inputs number: You can set 2 to 8 inputs using this option.
Operating Instructions Modular Safety Control System MSC 9.4.1.9. MULTIPLEXER Using the MULTIPLEXER logical operator, the input signal sent to the output depends on the SEL selection. If only one bit is set for Sel1– Sel4, the selected input is connected to the output. If: Ì...
Operating Instructions Modular Safety Control System MSC 9.4.2. Memory operators Operators of the type MEMORY make it possible to save data (TRUE or FALSE) that come from other project components. Status changes are undertaken according to the truth tables given for each operator.
Operating Instructions Modular Safety Control System MSC 9.4.2.4. Manual restart (USER RESTART MANUAL) (max. number = 16, including other RESTART operators) Using the USER RESTART MANUAL operator the restart signal is saved as per the following truth table. Clear Restart...
Operating Instructions Modular Safety Control System MSC 9.4.2.7. Macro monitored restart (MACRO RESTART MONITORED) (max. number = 16, including other RESTART operators) Using the MACRO RESTART MONITORED operator, a logic block select- ed by the user can be combined with the monitored restart function block ("USER RESTART MONITORED") as per the following truth table:...
Operating Instructions Modular Safety Control System MSC 9.4.3. Guard lock logic (GUARD LOCK) (max. number = 4) 9.4.3.1. GUARD LOCK Using the GUARD LOCK operator the locking/release of an ELEC- TROMECHANICAL GUARD LOCK is monitored. For this purpose it is checked whether the locking command and the status of an INTER- LOCK and FEEDBACK match.
Page 136
Operating Instructions Modular Safety Control System MSC Unlock Time (s): The time that elapses between the activation of the Unlock_cmd input and the actual release of the locking. Ì 0 ms to 1 s – 100 ms step Ì 1.5 s to 10 s – 0.5 s step Ì...
Operating Instructions Modular Safety Control System MSC 9.4.4. COUNTER operators The operators of type COUNTER enable the user to generate a signal (TRUE) as soon as the count entered is reached. 9.4.4.1. Counter (COUNTER) (max. number = 16) The COUNTER operator is a pulse counter.
Page 138
Operating Instructions Modular Safety Control System MSC 3. The counter generates a pulse length that corresponds to the reaction time as soon as the count entered is reached. If the CLEAR signal is activated, the internal counter returns to 0.
Operating Instructions Modular Safety Control System MSC 9.4.5. TIMER operators (max. number = 32) Using the operators of type TIMER a signal (TRUE or FALSE) can be generated for a user-defined time. 9.4.5.1. MONOSTABLE Using the MONOSTABLE operator an output of "1" (TRUE) is generated by the rising/falling edge on the input.
Operating Instructions Modular Safety Control System MSC 9.4.5.2. MONOSTABLE_B Using this operator an output of "1" (TRUE) is generated by the rising/ falling edge on the input. This state is retained for the time t set. Parameter Time: The delay can be set to a value between 10 ms and 1098.3 s.
Operating Instructions Modular Safety Control System MSC 9.4.5.3. Passing make contact (PASSING MAKE CONTACT) The PASSING MAKE CONTACT operator provides the signal present on the input as a pulse on the output. If this signal is "1" (TRUE) longer than the time set, the pulse is limited to the time set. The pulse is truncated with a falling edge.
Operating Instructions Modular Safety Control System MSC 9.4.5.4. Delay (DELAY) The DELAY operator makes it possible to use a signal delay and switches the output to "1" (TRUE) after the time set if the status of the signal on the input changes.
Operating Instructions Modular Safety Control System MSC 9.4.5.5. Delay line (DELAY LINE) This operator makes it possible to apply a signal delay and switches the output to "0" after the time set if there is no signal on the input.
Operating Instructions Modular Safety Control System MSC 9.4.5.6. Clock generation (CLOCKING) Using the CLOCKING operator a clock signal output with the required duration is generated if the input is "1" (TRUE). Up to 7 inputs are available on the Clocking operator to control the duty cycle on the output.
Operating Instructions Modular Safety Control System MSC 9.4.6. The MUTING function The muting function provides a temporary, automatic interruption of a safety device to make possible a normal material flow through a protected opening. In other words, when the system detects the material and differentiates it from a person (in a potentially hazardous situation), it bypasses the safety device temporarily to permit the material to pass through the opening.
Page 146
Operating Instructions Modular Safety Control System MSC CURTAIN selected Input Muting Muting activated Table 70: Status table simultaneous muting with CURTAIN selected SENSOR selected Input Muting Muting activated Table 71: Status table simultaneous muting with SENSOR selected Blind Time: Only with "Muting Closing = Curtain": Should be selected if, for instance, it is known that after the end of the muting, objects may protrude beyond the pallet and may occupy the light grid, as a result the INPUT input is set to "0"...
Operating Instructions Modular Safety Control System MSC 9.4.7.2. MUTING "L" The muting function is activated after the interruption of the sensors S1 and S2 (the sequence is irrelevant) within the period defined by the operator of between 2 s and 5 s.
Operating Instructions Modular Safety Control System MSC 9.4.7.3. "Sequential" MUTING The muting function is activated after the sequential interruption of the sensors S1 and S2, followed by sensors S3 and S4 (without any time limit). If the pallet moves in the opposite direction, the correct sequence is: S4, S3, S2, S1.
Page 149
Operating Instructions Modular Safety Control System MSC CURTAIN selected Input Muting Muting activated Table 72: Status table sequential muting with CURTAIN selected SENSOR selected Input Muting Muting activated Table 73: Status table sequential muting with SENSOR selected Blind Time: Only with "Muting Closing = Curtain": Should be selected if, for instance, it is known that after the end of the muting, objects may protrude beyond the pallet and may occupy the light grid, as a result the INPUT input is set to "0"...
Operating Instructions Modular Safety Control System MSC 9.4.7.4. MUTING "T" The muting function is activated after the interruption of the sensors S1 and S2 (the sequence is irrelevant) within the period defined by the operator of between 2 s and 5 s.
Operating Instructions Modular Safety Control System MSC 9.4.7.5. MUTING OVERRIDE The OVERRIDE function is necessary if the machine stops after erro- neous sequences of the muting activation and material is occupying the hazardous opening. This process activates the OUTPUT output and in this way makes it possible to remove the material that is blocking the opening.
Page 152
Operating Instructions Modular Safety Control System MSC Timeout (s): Permits the setting of the time within which the override function must be ended from 10 s to infinite. Override Mode: Makes it possible to configure the start of the override function (pulsed or state triggered).
Operating Instructions Modular Safety Control System MSC 9.5. Other function blocks 9.5.1. Serial output (SERIAL OUTPUT) (max. number = 4) Using the SERIAL OUTPUT operator the status of up to 8 sensors is output; the data are output in series.
Principle of operation Using this operator you can straightforwardly distribute STOP and RESET commands via a local MSC network. Figure 187: Network The following conditions must be met for the "Network" operator: 1. The input connected to a single or double Network_In input must be connected to the Network_OUT output on the previous module in the network.
Page 155
Operating Instructions Modular Safety Control System MSC WARNING The RESET command switches must be installed outside the danger zones for the network in places at which there is a clear view of the entire work areas affected. NOTICE Ì A maximum of 10 base units can be connected in the network configuration.
Page 156
Operating Instructions Modular Safety Control System MSC Base 12,6 ms unit Base Base 488 ms unit 164 ms unit Base unit 376 ms Figure 189: Response time of the network Condition 3: If the IN input on the network function block on one of the 4 nodes switches to the state "0" (FALSE), see Figure 188 1.
Page 157
Operating Instructions Modular Safety Control System MSC Figure 190: Application example for the NETWORK function block (category 2) Figure 191: Application example for the NETWORK function block (category 4) 2121331-04-04/19 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 9.5.1.2. Reset (RESET) This operator generates a system reset if there is an OFF-ON-OFF transition with a duration of less than 5 s on the corresponding input. t < 5 s Figure 192: Reset duration Figure 193: Reset If the duration is >...
Operating Instructions Modular Safety Control System MSC 9.5.2. Special applications 9.5.2.1. Output delay with manual operating mode If two OSSD outputs are required and one output is to be delayed (in the MANUAL operating mode), the following diagram is to be used:...
You will find the safety parameters for the MSC configuration in the report from the software EUCHNER SAFETY DESIGNER. In the toolbar at the top there are two new green buttons (from firmware MSC-CB version 3.0 or higher): Figure 196: The buttons for the simulator function These buttons relate to the new simulator function.
Operating Instructions Modular Safety Control System MSC 9.6.1. Schematic simulation Activate the schematic simulation by clicking the button. The schematic simulation permits the checking/controlling of the signal on the output from the various function blocks in real time, i.e. during the actual simulation. The user can select as required which outputs on the blocks are to be operated and check the reaction of the different elements of the schematic diagram based on the color of the different lines.
Page 162
Operating Instructions Modular Safety Control System MSC Figure 198: The buttons for activating the block outputs are at the top; there is a pop-up example below. In this case it is necessary to enter the frequency for the "Speed control" function block.
Operating Instructions Modular Safety Control System MSC 9.6.2. Administration of the graphic simulation Activate the graphic simulation by clicking the button. The graphic simulation makes it possible to show the change in the signals graphically. The user must first specify in a text file the stimuli, i.e.
Page 164
Operating Instructions Modular Safety Control System MSC After you click the button, the following screen appears: Figure 200: Selection menu for the graphic simulation mode The individual buttons on the menu are described in detail in the following (see Figure 42): Template stimuli button: Makes it possible to save the template file with the required name in the required storage location on the hard disk.
Page 165
Operating Instructions Modular Safety Control System MSC Simulation with stimuli button: Makes it possible to upload a (completed) template file. The simulation can be started immediately after uploading. A diagram with the resulting signals is displayed at the end of the simulation.
Operating Instructions Modular Safety Control System MSC 9.6.2.1. Application example for the graphic simulation The following example relates to the use of a press that has been installed inside a safety zone. The motor on the press can only be operated if two conditions are present at the same time: the gate for the safe area is closed and the command to activate the motor has been issued.
Page 167
Operating Instructions Modular Safety Control System MSC Result of the simulation The signals from the simulation are shown in the diagram. In this case: Ì At 2000 ms the "Safe Zone" signal changes to logic level 1. It indicates the closing of the gate.
Modular Safety Control System MSC 9.6.3. MSC error codes If there is a malfunction, the MSC system sends a code, corresponding to the error detected by the base unit MSC-CB, to the software EUCHNER Safety Designer. The code can be read as follows: Ì...
(password required: level 1) A table is displayed with the last 5 errors that have occurred since the scheme was last sent to the MSC or the last time the error log was deleted (button:...
WARNING Danger of severe injuries due to the loss of the safety function. Ì If damage or wear is found, the corresponding MSC module must be replaced completely. Replacement of individual parts or assemblies is not permitted. Ì Check the device for proper function at regular intervals and after every fault. For information about possible time intervals, refer to EN ISO 14119:2013, section 8.2.
Page 172
Operating Instructions Modular Safety Control System MSC (Translation of the original operating instructions) 2121331-04-04/19...
Need help?
Do you have a question about the MSC and is the answer not in the manual?
Questions and answers