Siemens SIMATIC S7-1500 System Manual page 257

Maintenance
13.6 Fault reactions with failsafe components
Fail-safe value output for F-modules
In the case of F-modules with inputs, if there is passivation, the F-system provides substitute
values (0) for the safety program instead of the process data pending at the failsafe inputs.
In the case of F-modules with outputs, if there is passivation, the F-system transfers
substitute values (0) to the failsafe outputs instead of the output values provided by the
safety program. The output channels are de-energized. This also applies when the F-CPU
goes into STOP mode. The parameter assignment of fail-safe values is not possible.
Substitute values are used either for the relevant channel only or for all channels of the
relevant failsafe module depending on:
● The F-system used
● The type of error that occurred (F-I/O, channel or communication error)
● The F-module parameter assignment
Reintegration of a fail-safe module
The system changes from fail-safe to process values (reintegration of an F-module) either
automatically or only after user acknowledgment in the safety program. If channel errors
occur, it may be necessary to remove and reinsert the F-module. A detailed listing of faults
requiring removal and insertion of the F-module can be found in the section Diagnostic
messages of the respective F-module.
After reintegration, the following occurs:
● In the case of an F-module with inputs, the process data pending at the failsafe inputs is
made available to the safety program again
● In the case of an F-module with outputs, the output values provided in the safety program
are transferred to the failsafe outputs again
Additional information on passivation and reintegration
For additional information on passivation and reintegration of F-I/O, refer to the SIMATIC
Safety, Configuring and Programming
(https://support.industry.siemens.com/cs/ww/en/view/54110126) manual.
Reaction of the F-module with inputs to communication errors
F-modules with inputs respond differently to communication errors compared to other errors.
If a communication error is detected, the current process values remain set at the inputs of
the F-module. The channels are not passivated. The current process values are passivated
in the F-CPU.
256
SIMATIC Drive Controller
System Manual, 11/2019, A5E46600094-AA