(FR-PA07) Parameter unit Parameter unit (FR-PU07), LCD operation panel (FR-LU08) and enclosure surface operation panel (FR-PA07) Inverter Mitsubishi Electric inverter FR-E800 series E800 Standard model (RS-485 + SIL2/PLd functional safety) E800-E Ethernet model (Ethernet + SIL2/PLd functional safety)
Compliance with the EU Machinery Directive - Safety sub-functions Mitsubishi Electric FR-E800-SCE series general-purpose inverters have met the SIL 3 requirements of the international standard IEC 61508:2010 for functional safety. FR-E800-SCE Safety performance ISO 13849-1:2015 Category 3/PLe (Standards certified by a third-party...
Page 6
Specifications Function Description Safety sub-function Shut-off response time 140 ms or less (IEC/EN 61800-5-2) (Safe torque off) Deceleration delay time 0 to 3600 s (parameter setting) (Safe stop 1) Monitoring speed 0 to 60 Hz (parameter setting) (Safely-limited speed) Monitoring speed 0 to 60 Hz (parameter setting) (Safe speed monitor)
Page 7
Motor speed estimation Motor speed estimation is performed during operation of the SLS, SSM, and SBC functions (when Pr.S023 SBC brake operation frequency ≠ "0"). Specifications Item Description Applicable control method V/F control Advanced magnetic flux vector control Real sensorless vector control Vector control Applicable motor...
Page 8
Risk assessments To ensure safety, users should conduct all risk assessments and determine residual risks for the entire machine equipment. The company or individual who constructed the safety system must take full responsibility for installation and commissioning of the system. To comply with the EU Machinery Directive, the system as a whole must be certified as compliant with applicable safety standards.
• Ensure the safety programmable controller and the inverter are mounted closely in an enclosure meeting IP54 and all interconnection wiring is short and protected against open and short circuit faults. For details, refer to ISO/IEC 13849-2. Installation Safety sub-functions of the Mitsubishi Electric FR-E800-SCE inverter should be used under the following conditions and environment. Item...
Page 11
Wiring The following describes terminals related to safety sub-functions. Terminal Terminal name Terminal function description Rated specification symbol Safety input (channel 1) Terminal functions can be selected using Pr.S051 SX1/SX2 Input resistance: 4.7 kΩ, terminal function selection. (Refer to page 19.) voltage when contacts are open:...
Page 12
Configuration example FR-E800-SCE R/L1 S/L2 T/L3 Ethernet Ethernet connector connector IGBTs Gate Driver Emergency stop button +24V Gate Driver Safety programmable Fuse controller U V W Power supply Brake To avoid an electric shock hazard during wiring or inspection, install a magnetic contactor (MC) at the input side of the inverter. 2.
Page 13
Multiple inverter configuration example FR-E800-SCE R/L1 S/L2 T/L3 Ethernet Ethernet connector connector IGBTs Gate Driver Emergency stop button +24V Gate Driver Safety programmable Fuse controller U V W Power supply Brake FR-E800-SCE R/L1 S/L2 T/L3 Ethernet connector IGBTs Gate Driver +24V Gate...
Safety Parameters Safety parameter setting method Use FR Configurator2 to set safety parameters. For details, refer to the FR Configurator2 Instruction Manual. The operation panel and the parameter unit are not available for reading or writing safety parameters. Inverter setup software Use FR Configurator2 to set safety parameters.
List of safety parameters The following parameters are parameters used for safety sub-functions. Set the parameters according to the application. Notation Mark Description Safety communication function [E800-SCEPA] Available for the Protocol group A. CC-Link IE TSN safety communication function, CIP Safety [E800-SCEPB] Available for the Protocol group B.
Page 16
Parameters for CC-Link IE TSN safety communication functions Name Setting range Minimum setting Initial Refer to Customer increments value page setting S030 CC-Link IE TSN safety communication 128 to 1000 ms 1 ms 128 ms function - Transmission interval monitoring time S031 CC-Link IE TSN safety communication...
I/O Signals for Safety Sub-Functions I/O signal list Signals are input or output by using physical terminals (for the SBC function only) or via safety communication. Input/output by using physical terminals • Input signal Signal Function Description Refer to name page SBCFB...
Page 18
Signal Function Description Refer to name page SLS4S SLS4 output OFF (1): SLS4 function enabled. ON (0): SLS4 function disabled. SSMS SSM output OFF (0): The motor speed (output frequency) is higher than the SSM frequency. ON (1): The motor speed (output frequency) is equal to or lower than the SSM frequency.
Input terminals Use the following safety parameters to select or change functions of terminals SX1 and SX2. Name Initial Setting Description value range S051 SX1/SX2 terminal function 0, 6 0: No function selection 6: Brake feedback (SBCFB) signal S061 SX1/SX2 terminal filtering 0.01 s 0.01 to 0.1 s Set the time from when the signal is input until the inverter starts time...
Page 20
Input terminal response time • The input terminal response time changes according to the filtering time. ON→OFF: Filtering time + 30 ms or less OFF→ON: Filtering time + 50 ms or less 4. I/O Signals for Safety Sub-Functions 4.2 Input terminals...
Output terminals Use the following safety parameters to select or change functions of terminals SY1 and SY2. When functions are assigned to terminals SY1 and SY2, set Pr.S070 SY1/SY2 terminal test pulse diagnosis execution selection and Pr.S071 SY1/SY2 terminal test pulse off time to perform fault diagnosis with test pulse signals. Name Initial value Setting range...
Safety Sub-Functions STO function The inverter output is shut off when the command signal is input from an external device or when the protective function (E.SAF) is activated. Basic operation • The STO function is activated when the STO command (STOC) signal is turned OFF during operation or at a stop. •...
SS1 function This function is used to activate the STO function after a specified time. Name Initial value Setting range Description S004 SS1 deceleration 0 to 3600 s Set the time from when the SS1 function is monitoring time activated until the STO function is activated. ...
SLS function This function is used to activate the STO function after a specified time when the motor speed (output frequency) exceeds a specified limit. Four operation patterns can be selected by setting different limits using SLS1 to SLS4 functions. To use this function, specifications and operating conditions of motor speed estimation must be satisfied.
Page 25
Pr.S010 Actual motor speed Output frequency Pr.S006 Time Pr.S018 Overspeed time counter SLS1 command (SLS1C) SLS1 output (SLS1S) STO output (STOS) Speed monitoring STO state Changing the frequency command automatically when the SLS function is activated (Pr.S005 = "1") The following shows the operation example when only the SLS1 function is activated (Pr.S005 = "1").
Page 26
Activating more than one SLS function The following shows the operation example when the SLS1 function and the SLS2 function are activated (Pr.S005 = "1"). • When multiple SLS command signals are used, corresponding SLS functions are activated by turning OFF the command signals.
SSM function This function is used to determine that the motor speed (output frequency) has exceeded the specified value. To use this function, specifications and operating conditions of motor speed estimation must be satisfied. (Refer to page Name Initial Setting range Description value Monitoring speed...
Page 28
SSM output retention time (Pr.S021) • The SSMS signal status immediately before the STO function is activated is retained for the time period set in Pr.S021. Actual motor speed Output frequency Pr.S019 Pr.S020 Time SSM output (SSMS) STO output (STOS) Pr.S021 STO state...
SBC function This function controls activation or release of the mechanical brake in conjunction with the STO function operation activated by the STO or SS1 command input. (For details of the STO and SS1 functions, refer to page 22 page 23.) When Pr.S023 SBC brake operation frequency ≠...
Page 30
Brake operating Pr.S004 Output frequency Time Start command (STF)*1 SS1 command (SS1C) STO output (STOS) SBC output (SBC) Normal operation STO state Normal operation The start command is not automatically changed by the safety sub-function. NOTE • Use a non-excitation type brake since the brake is activated when the SBC signal is turned OFF. •...
Page 31
SBC output shutoff delay time (Pr.S024) The following shows the operation example when the STO function is activated by the SS1 command input. • Pr.S024 can be used to set a delay for the time from when the brake is activated until the STO function is activated. •...
Page 32
Operation when the SBC output shutoff delay time (Pr.S024) and SBC brake release delay time (Pr.S025) are set Activating the STO function before the time set in Pr.S025 elapses The following shows the operation example when the STO function is activated by the STO command input. •...
Page 33
Diagnosis using the Brake feedback (SBCFB) signal • The brake status can be checked by the Brake feedback (SBCFB) signal. This function is always active while the SBC function is enabled. • The status of the SBC signal and the SBCFB signal are monitored, and "E.SAF" (fault detail code 76) is displayed when the signal status is different from the one shown in the following table for the time longer than the time set in Pr.S027.
Safety Communication Functions CC-Link IE TSN safety communication functions 6.1.1 Overview The FR-E800-SCE inverters support CC-Link IE TSN safety communication functions as the CC-Link IE TSN application. Input and output signals for safety sub-functions can be controlled using CC-Link IE TSN safety communication functions. ...
Communication status LEDs The FR-E800-SCE inverter has the network status LEDs equivalent to CC-Link IE TSN. Refer to the FR-E800 Instruction Manual (Communication). Precautions for status LEDs Communication status LEDs are not provided as included in the safety system. LED status may not be always correct. Do not use them as operation indicators.
Page 36
On GX Works3, select "Basic Settings">"Safety Communication Setting" and enable the use of safety communication. Click the detailed setting field for "Safety Communication Setting". Selecting "Local Network" as "Communication Destination" in the "Safety Communication Setting" window displays "Select the target module for the Safety Communication Setting" window. Click on the checkbox of the inverter and click the [Add] button.
Page 37
Set each item on the "Safety Communication Setting" window and click the [OK] button. Set the Pr.S031 and Pr.S032 setting values as the safety certification code in hexadecimal. Safety certification code setting example Set the same value in FR Configurator2 and GX Works3. When the values are inconsistent, connection using safety communication is not enabled.
6.1.3 Safety remote I/O The FR-E800-SCE inverter supports the following safety remote input and output devices. Safety remote output (from the master module to the inverter) Output signals from the master module are as follows. (Input signals to the inverter) Device No.
PROFIsafe 6.2.1 Overview The FR-E800-SCE inverters support PROFIsafe as the PROFINET application. Input and output signals for safety sub-functions can be controlled using PROFIsafe. Communication specifications The communication specifications are shown in the following table. Item Description PROFIsafe communication F-Device specifications PROFIsafe_V2 functionality XP on PROFINET IO...
6.2.2 Setting procedure for PROFIsafe The following section describes settings for FR-E800-SCE PROFIsafe. Settings for PROFINET Refer to the FR-E800 Instruction Manual (Communication). Enabling PROFIsafe Set "3" in Pr.S002 Safety communication function selection to enable PROFIsafe. Refer to details of safety parameters (page 14).
6.2.3 Data Exchange The following section describes Data Exchange types added for FR-E800-SCE in addition to those supported by FR-E800-E. For details of Data Exchange types supported by FR-E800-E, refer to the FR-E800 Instruction Manual (Communication). Process Data (Cyclic Data Exchange) Input and output signals for safety sub-functions can be controlled using PROFIsafe Telegram for FR-E800-SCE.
Page 42
Byte Definition of bit Inverter operation SLS_LIMIT_BIT0_ACTIVE The selected SLS function is shown by the bit value Bit 0 of selected SLS speed limit value combination. [Bit1, Bit0] [0, 0]: SLS1 SLS_LIMIT_BIT1_ACTIVE [0, 1]: SLS2 Bit 1 of selected SLS speed limit value [1, 0]: SLS3 [1, 1]: SLS4 OFF (0): The motor speed (output frequency) is...
Page 43
• Safety fault buffer Used to transmit fault detail codes from a device to the master. The inverter status is stored as a fault detail code in the safety fault buffer. Up to eight E.SAF fault detail codes which occurred after the power is turned ON are stored. When the ninth fault occurs, the eighth fault is overwritten by the new data.
CIP Safety 6.3.1 Overview The FR-E800-SCE inverters support CIP Safety as the EtherNet/IP application. Input and output signals for safety sub-functions can be controlled using CIP Safety. Term The following table describes terms used in this Instruction Manual related to the safety communication and the CIP Safety standard.
Page 45
Safety objects In addition to the objects supported by EtherNet/IP, the following objects are supported for CIP Safety. These objects are accessed with Explicit message communication. Class Object name Safety Supervisor Object Safety Validator Object Operation when a safety-related error occurs When the E.SAF fault occurs (except when the fault detail code is 69), all Safety I/O communications stops.
6.3.2 Setting procedure of CIP Safety The following section describes settings for FR-E800-SCE CIP Safety. Settings for EtherNet/IP Refer to the FR-E800 Instruction Manual (Communication). Enabling CIP Safety Set "2" in Pr.S002 Safety communication function selection to enable CIP Safety. Refer to details of safety parameters (page 14).
6.3.3 Object map The following section describes objects added for CIP Safety in addition to those supported by EtherNet/IP. For details of objects supported by EtherNet/IP, refer to the FR-E800 Instruction Manual (Communication). Object Class ID Object name Safety Supervisor Object Safety Validator Object Instance, attribute Object name...
Page 49
Output assembly (from the master to the inverter) • Instance 140 (8Ch): Safety Output Byte bit 7 bit 6 bit 5 bit 4 bit 3 bit 2 bit 1 bit 0 SSMC SS1C STOC SLS4C SLS3C SLS2C SLS1C Values input in the empty bits are invalid. •...
Page 50
Safety Supervisor Object (39h) Service Class Instance Get Attribute Single Get Attribute Single Set Attribute Single Class attribute Name Access Type Value Remarks Revision UINT 0001h Revision of the object Instance attribute Name Access Type Value Remarks Device Status USINT...
Page 51
Safety Validator Object (3Ah) The instance is generated when Safety I/O connection is established. Service Class Instance Get Attribute Single Get Attribute Single Reset all error counters Set Attribute Single Class attribute Name Access Type Value Remarks Revision UINT 0001h...
6.3.4 Restrictions and precautions • The transmission interval of Explicit message during Safety I/O communication must be equal to or more than the RPI of the Safety I/O communication. • To replace the inverter, clear the setting information of the existing inverter in the safety network configuration beforehand. After replacement, check that the devices are set correctly and operate properly.
Protective Functions Inverter fault and alarm indications • When a fault of safety related parts occurs, the inverter output is shut off by the protective function. The Fault (ALM) signal is output, and "E.SAF" (safety circuit fault) is displayed on the operation panel. •...
Page 54
Reset method for the protective functions Reset the inverter by performing any of the following operations. Note that the accumulated heat value of the electronic thermal relay function and the number of retries are cleared (erased) by resetting the inverter. •...
Page 55
Name Description Corrective action SY1/SY2 terminal read-back fault A fault is detected by the output • Check that the power supply of output read-back diagnosis. terminals is normal. • Take measures against noises. If the problem still persists after taking the above measure, contact your sales representative.
Page 56
Name Description Corrective action SBC feedback signal fault The status of the SBC output • Check for brake operation faults. (SBC) signal and the Brake • Check the wiring for terminals SX1 feedback (SBCFB) signal is and SX2. inconsistent with the Pr.S026 SBC •...
Safety Specifications of FR-E800-SCE The safety specifications of the FR-E800-SCE inverters are shown in the following table. Item Value Safety Integrity Level (SIL) 3 4.5 × 10 7.5 × 10 MTTF 100 years 8. Safety Specifications of FR-E800-SCE...
Page 58
(1) Damages caused by any cause found not to be the responsibility of Mitsubishi Electric. (2) Loss in opportunity, lost profits incurred to the user by Failures of Mitsubishi Electric products. (3) Special damages and secondary damages whether foreseeable or not, compensation for accidents, and compensation for damages to products other than Mitsubishi Electric products.
Page 59
Revisions *The manual number is given on the bottom left of the back cover. Revision date * Manual number Revision Apr. 2020 BCN-A23488-004-A(E) First edition Jun. 2020 BCN-A23488-004-B(E) Edited • Operating conditions for motor speed estimation • Protective Functions BCN-A23488-004-B(E)
Page 60
HEAD OFFICE: TOKYO BUILDING 2-7-3, MARUNOUCHI, CHIYODA-KU, TOKYO 100-8310, JAPAN BCN-A23488-004-B(E)(2006)MEE Printed in Japan Specifications subject to change without notice.