Safety Function Sto Without A Safety Card - Pilz PMCprotego D.48 Operating Manual

Function Description
4.3.3.3

Safety function STO without a safety card

Activation of the safety function STO on the servo amplifier can be single or dual-channel.
STO single-channel, without feedback (SIL 2, PL d)
With single-channel activation of the safety function STO, both shutdown routes are
switched through one output on a safety relay or safety control system.
24 V
STO dual-channel, with feedback (SIL CL 3, PL e)
With dual-channel activation, both shutdown routes are switched separately. To achieve
PL e or SIL CL 3, the safe pulse disabler must be tested periodically to ensure it switches
safely, by evaluating the two feedback signals STO1-STATUS and STO2-STATUS from a
safety control system.
}
When a plant is started up.
} On restart after a protection device has been triggered.
}
At least every 8 hours by the operator.
The inputs STO1-ENABLE and STO2-ENABLE are switched alternately. The switch states
of both shutdown routes on the pulse disabler are available on the digital outputs STO1-
STATUS and STO2-STATUS of the PMCprotego D. They are evaluated by a safety control
system.
STO1-Feedback
STO2-Feedback
24 V
24 V
Operating Manual PMCprotego D.48, PMCprotego D.72
1001735-EN-04
PMCprotego D.x
X4
STO
7
STO1-ENABLE
POWER
5
STO2-ENABLE
PMCprotego D.x
X4
8
STO1-STATUS
6
STO2-STATUS
7
STO
STO1-ENABLE
POWER
5
STO
STO2-ENABLE
STO single-channel
Safety function is activated via the
input STO1-ENABLE
Input STO2-ENABLE must be con-
nected to the input STO1-ENABLE
3
STO dual-channel
The signals STO1-STATUS and
STO2-STATUS must be evaluated.
3
46