Festo CDSA-D3-RV Brief Instruction, Safety Manual page 3

Fig. 4 Connection diagram: handheld terminal CDSA­D3­RV on interface housing
CAMI­C
5.1.2.2 Emergency stop device
The handheld terminal CDSA­D3­RV has an emergency stop device. The emer­
gency stop device is wired in 2 circuits and the contacts are designed as normally
closed contacts.
The red­yellow emergency stop device on the handheld terminal CDSA­D3­RV
meets the requirements of EN ISO 13850.
Its mode of operation must be designed as a category 0 or category 1 stop based
on the risk assessment for the machine è EN 60204­1. The interconnection of
the forced­opening switch contacts must fulfil the category (in accordance with
EN ISO 13849­1) that is defined based on the risk analysis (in accordance with
EN ISO 12100:2010) of the machine.
WARNING!
Impairment of the function of emergency stop devices.
Impairment of the function of emergency stop devices can result in serious injur­
ies or death of persons involved.
• Red­yellow marked emergency stop devices must be effective at all times and
in all operating modes of a machine or system.
• Handheld terminals that are not connected to the machine and have a red­yel­
low emergency stop device, must be kept out of sight so they cannot be con­
fused with functioning devices in an emergency.
• When unlocking the emergency stop device, do not cause an uncontrolled
restart.
• Do not use the emergency stop device as a substitute for other safety
devices.
• Do not use the emergency stop device on the handheld terminal as a replace­
ment for the emergency stop switches to be attached directly to the machine.
• After violent impact with the handheld terminal (e.g. if it is dropped), check
the function of the emergency stop device.
• Check the correct mode of operation of the emergency stop device every 6
months by actuating it.
• For additional information on the emergency stop device and the emergency
stop function, observe the corresponding directives and standards.
5.1.2.3 3-position enabling switch
The handheld terminal CDSA­D3­RV has a 3­position enabling switch. An essential
feature is the 2­circuit design and the forced opening in accordance with
EN 60947­1 and EN 60947­5­8 to the third switch position.
WARNING!
Danger to persons not recognised in time if the 3-position enabling switch is
used as a safety function.
The 3­position enabling switch is only suitable for use in a safety function if the
person actuating the 3­position enabling switch detects a hazard to people in
good time and can immediately take measures to avoid hazards. A hazard to per­
sons that is not recognised in good time can result in injuries or death to the per­
sons involved.
• As an additional measure, reduce the speed of the movement. Determine the
permissible speed based on a risk assessment.
• Do not initiate commands for hazardous statuses with a 3­position enabling
switch alone. A second, deliberate start command is required for this, such as
a key on the handheld terminal.
• Only the person who actuates the 3­position enabling switch may be in the
danger zone.
• Check the correct mode of operation of the safety function every 6 months by
actuating all positions of the 3­position enabling switch.
• For additional information on the 3­position enabling switch, observe the cor­
responding directives and standards.
Mode of operation
The 3­position enabling switch can be in one of three different switch positions:
Switch setting Function
1 Neutral position
2 Enabling
3 Panic
Tab. 6 Mode of operation of the 3­position enabling switch
Normal actuation
Fig. 5 Switching path diagram for normal actuation
Panic actuation
When the actuating elements are pressed to the panic position, the switching ele­
ment is mechanically designed so that the enabling position is skipped when it is
released:
Fig. 6 Switching path diagram for panic actuation
Category 4 PL e in accordance with EN ISO 13849­1 for the relevant safety func­
tion can be reached with the use of the 3­position enabling switch on two electric­
al circuits and a suitable dynamic monitoring with the actuation cycles with refer­
ence to the B value of the safety devices.
10D
In accordance with EN 60204­1, the 3­position enabling switch must be imple­
mented in such a way that in position 1 (switch off function ­ the control element
is not actuated) and position 3 (Off function ­ the control element is pressed down
to the "panic position") at least one of the stop categories 0, 1 or 2 is initiated.
For the calculation of the PL of the enable safety function, the safety engineering
characteristic values (PL, PFH and B
D
be included. Details on calculating the PL for the entire safety function
è EN ISO 13849­1 (chapter 6.3, appendix H and appendix I.)
Simultaneity monitoring is required if it is not possible to exclude faults with
regard to short circuits in the enabling circuit, as otherwise an unrecognised accu­
mulation of faults could result, which in turn leads to a loss of safety. For
example, the simultaneity monitoring can be achieved by connection to a safety
controller or to the monitoring device PilzPNOZ s6.1.
3-position Switch contact
enabling switch
not actuated Off (opened)
is actuated On (closed)
is pressed Off (opened)
values) of the involved components must
10D