Page 2
Please read these instructions and the documentation of the standard device before you start working! Observe the safety instructions given therein! 0Fig. 0Tab. 0...
This manual is intended for all persons who design, install, commission, and adjust controllers of the 8400 protec series with drive−based safety. Tip! Information and auxiliary devices around the Lenze products can be found in the download area at http://www.Lenze.com...
About this documentation Conventions used Conventions used This documentation uses the following conventions to distinguish between different types of information: Type of information Identification Examples/notes Spelling of numbers Decimal separator Point In general, the decimal point is used. For instance: 1234.56 Warnings UL warnings Are only given in English.
About this documentation Terms and abbreviations used Terms and abbreviations used Abbreviation Meaning 24 V voltage supply for non−safe monitoring Cat. Category according to EN 954−1 (valid until 30 November 2009) Non−safe feedback output F−PLC Safety PLC GSDML File containing device−specific data to establish PROFINET communication File containing device−specific data to establish PROFIBUS communication OFF state Signal status of the safety sensors when they are activated or respond...
About this documentation Notes used Notes used The following pictographs and signal words are used in this documentation to indicate dangers and important information: Safety instructions Structure of safety instructions: Danger! (characterises the type and severity of danger) Note (describes the danger and gives information about how to prevent dangerous situations) Pictograph and signal word Meaning...
Safety engineering Introduction Safety engineering Introduction With increasing automation, protection of persons against hazardous movements is becoming more important. Functional safety describes the measures needed by means of electrical or electronic equipment to reduce or remove danger caused by failures. During normal operation, safety equipment prevents people accessing hazardous areas.
Safety engineering Important notes Important notes Application as directed The controllers that are equipped with safety engineering must not be modified by the user. This concerns the unauthorised exchange or removal of the safety engineering. Danger! Danger to life through improper installation Improper installation of safety engineering systems can cause an uncontrolled starting action of the drives.
Safety engineering Important notes Hazard and risk analysis During operation After the installation is completed, the operator must check the wiring of the safety function. The functional test must be repeated at regular intervals. The time intervals to be selected depend on the application, the entire system and the corresponding risk analysis.
Safety engineering Acceptance Description Acceptance 2.3.1 Description The machine manufacturer must check and prove the operability of the safety functions used. Inspector The machine manufacturer must authorise a person with expertise and knowledge of the safety functions to carry out the test. Test report The test result of every safety function must be documented and signed by the inspector.
Safety engineering Basics for safety sensors Basics for safety sensors Passive sensors Passive sensors are two−channel switching elements with contacts. The connecting cables and the sensor function must be monitored. The contacts must switch simultaneously (equivalently). Nevertheless, safety functions will be activated as soon as at least one channel is switched. The switches must be wired according to the closed−circuit principle.
Safety option 10 Operating mode Introduction Safety option 10 Operating mode 3.1.1 Introduction Due to safety option 10, the following safety functions can be used: Safe torque off (STO), ƒ formerly: safe standstill If requested, the safe disconnection of the drive is achieved through: Directly connected active sensors ƒ...
Safety option 10 Operating mode Safety status 3.1.3 Safety status When the controller is disconnected from the safety unit, the "Safe torque off" (STO) status is set (C00155 bit 10 = 1). 3.1.4 Fail−safe status When internal errors of the safety unit are detected, the motor is safely switched to torqueless operation (fail−safe status).
Safety option 10 Status display Status display The operating status of the "STO" safety function is displayed using an LED on the front of the controller. E84DPSO06 SO10 Fig. 3−2 Position of the LED for the drive−based safety on the device Pos.
Safety option 10 Technical data Technical data Supply The safe input and the output are isolated and designed for a low−voltage supply through a safely separated power supply unit (SELV/PELV) of 24 V DC. P/N switching input signals and test pulses £ 1 ms are permissible. Active sensors are directly connected to the X61 circular connector.
Safety option 10 Certification Certification Tip! The "TÜV Rheinland Group" certificate is available on the Internet under: http://www. Lenze.com EDS84DPSO01 EN 2.1...
Safety option 20 Operating mode Disconnecting paths 4.1.2 Disconnecting paths The transmission of the pulse width modulation is safely switched (off) by the safety unit. After this, the power drivers do not generate a rotating field. The motor is safely switched to torqueless operation (STO).
Safety option 20 Status display Status display Light−emitting diodes (LED) on the front of the controller display the operating status of the safety engineering system. E84DPSO06 SO20 Pos. Colour State Description Communication between standard device and safety system is running blinking Drive−based safety is in service status S−State...
Safety option 20 Technical data Technical data Safety option 20 is exclusively controlled via the safety bus. Supply voltages, signal levels etc. of the used safety bus system are relevant. Since there are no inputs or outputs at the application end, connection data need not be specified.
Safety option 20 Electrical installation Electrical installation Safety option 20 does not require external wiring because the safety functions are exclusively controlled via the used safety bus. EDS84DPSO01 EN 2.1...
Safety option 20 Certification Certification Tip! The "TÜV Rheinland Group" certificate is available on the Internet under: http://www. Lenze.com EDS84DPSO01 EN 2.1...
Safety option 20 Safety functions Safety functions The available safety functions comply with the safety functions of safety option 30 (¶ 45). However, the safety engineering system is exclusively controlled via the safety bus. Therefore, the controller with safety option 20 is not provided with connections for safety sensors.
The communication via the safety bus is active but passivated. ƒ About the service status: It can be activated by the Lenze »Engineer« PC software. ƒ It can be quit by reinitialising the drive−based safety, i.e. the communication via the ƒ...
Page 28
In addition, the software provides comprehensive online help. Password To store a safe parameter set, a password is required. The standard password is: "Lenze SM301". The password can be changed and must have at least six characters. Use "General reset" to delete the safe parameter set in the memory module and the drive−based safety.
Page 29
The safe parameter set transfer is supported by a safe parameter set saved to the memory module, e.g. when replacing the standard device or parameterising the drive−based safety, without the Lenze »Engineer« PC software via the memory module. A valid parameter set with a corresponding module ID must be stored.
The clear assignment of the safety address must be configured in the safety PLC. In drive systems without activated safety bus, unambiguousness and correct assignment of the safety address must be checked. For this purpose, use the Lenze »Engineer« PC software or an EZAEBK200x diagnosis terminal. EDS84DPSO01 EN 2.1...
Safety option 20 Error management Error states Error management 4.8.1 Error states Detected errors or maloperation of the drive are assigned to error states with definite reactions. The reaction can be co−ordinated with the complete drive via the error states. Features Error status System error...
Safety option 20 Response times Response times In order to detect the response time to a safety function the entire system must be considered. The following is relevant: Response time of the connected sensors. ƒ Input delay of the safety inputs. ƒ...
Safety option 20 Response times Response times of the inputs 4.9.1 Response times of the inputs Response time to an event in the sensors Time interval (Fig. 4−3) [ms] Response time of the sensors according to manufacturer information Input delay of the safe inputs C15034: 0 ...
Safety option 20 Response times Response times of the safety bus 4.9.2 Response times of the safety bus PROFIsafe Response time to an event in the safety sensors (PROFIsafe input data) Time interval (Fig. 4−3) [ms] Response time of the sensors according to manufacturer information Input delay of the safe inputs...
Safety option 30 Operating mode Disconnecting paths 5.1.2 Disconnecting paths The transmission of the pulse width modulation is safely switched (off) by the safety unit. After this, the power drivers do not generate a rotating field. The motor is safely switched to torqueless operation (STO).
Safety option 30 Operating mode Safe inputs 5.1.5 Safe inputs Contact function test Note! Make sure that an internal contact function test is carried out at the safe inputs: Safe input in the ON state A LOW level at one channel puts the input in the OFF state. The discrepancy ƒ...
Page 38
Safety option 30 Operating mode Safe inputs SSP94SM358_1 Fig. 5−3 Contact function test − error−free input signals SSP94SM358_2 Fig. 5−4 Contact function test − faulty input signals A, B Safe input, channel A and channel B Internal valuation of the safe input Discrepancy monitoring Fault acknowledgement...
Safety option 30 Status display Status display Light−emitting diodes (LED) on the front of the controller display the operating status of the safety engineering system. E84DPSO06 SO30 Pos. Colour State Description Communication between standard device and safety system is running blinking Drive−based safety is in service status S−State...
Safety option 30 Technical data Technical data 24 V supply The safety option 30 component does not require an external supply voltage. Inputs and outputs The inputs are isolated and designed for a low−voltage supply of 24 V DC. Detailed features of the safe inputs Terminal Specification [Unit]...
Safety option 30 Electrical installation Electrical installation Principle circuit diagram 24_ACK GND-SM GND-SM E84Dx...-x xxS GND-CLK GND-I1 GND-CLK GND-I1 GND-CLK GND-I2 GND-CLK GND-I2 84DPSSO031 E84DxWT... 8400 protec controller with safety option 30 Passive sensor with channel A and B (at X64 in our example) Higher−level safety control (active sensor) Lightgrid (active sensor) (at X63 in our example) EDS84DPSO01 EN 2.1...
Page 42
Safety option 30 Electrical installation Terminal assignment Danger! Danger to life through improper installation Improper installation of the safety engineering systems can cause anuncontrolled starting action of the drives. Possible consequences: Death or severe injuries ƒ Protective measures: The installation of the cables between X62, X63, and X64 and the connected ƒ...
Page 43
Safety option 30 Electrical installation X63 − connection of the "Safety Option 30" safety engineering system Connection Description Data M12, sockets 8−pole, A−coded 84DSO05_8 Clock output, channel A Clock output, channel B GND_CLK GND potential − clock output, channel A Safe input 1, channel A GND_I1 GND potential −...
Safety option 30 Certification Certification Tip! The "TÜV Rheinland Group" certificate is available on the Internet under: http://www. Lenze.com EDS84DPSO01 EN 2.1...
Safety option 30 Safety functions Safe torque off Safety functions 5.6.1 Safe torque off Safe Torque Off/STO This function corresponds to a "Stop 0" according to EN 60204. When this function is used, the power supply of the motor is immediately (t1) safely interrupted.
Page 46
Safety option 30 Safety functions Safe torque off Activation How to activate the function: "OFF state" at a safe input, the function of which has been assigned by parameter ƒ setting. Via a safety bus data telegram with corresponding content. ƒ...
Safety option 30 Safety functions Safe stop 1 5.6.2 Safe stop 1 Safe Stop 1 / SS1 This function corresponds to a "Stop 1" according to EN 60204. The function monitors the reaching of the speed n = 0 (C15310) within an adjustable stopping time (C15305).
Page 48
Safety option 30 Safety functions Safe stop 1 Activation How to activate the function: "OFF state" at a safe input, the function of which has been assigned by parameter ƒ setting. Via a safety bus data telegram with corresponding content. ƒ...
Safety option 30 Safety functions Emergency stop 5.6.3 Emergency stop Safe Stop Emergency/SSE The emergency stop function activates STO or SS1. The function to be executed can be adjusted (C15205). In special operation, the emergency stop cannot be avoided. Note! Connect the emergency stop buttons which must not be overruled by a special operation to the emergency stop function.
Safety option 30 Safety functions Safe operation mode selector 5.6.4 Safe operation mode selector Operation Mode Selector / OMS The function provides a special operation of the drive. In the special operation the drive is stopped (status 2). The drive can be traversed in the special operation via an enable switch (status 3).
Page 51
Safety option 30 Safety functions Safe operation mode selector Preconditions A safe input must be parameterised and interconnected as operation mode selector. You can only connect and parameterise an operation mode selector. The OMS bit of the safety bus must be deactivated (C15113). The special operation can also be selected via the safety bus with the OMS bit, unless a safe input is set as operation mode selector.
Safety option 30 Safety functions Safe enable switch 5.6.5 Safe enable switch Enable Switch / ES The drive can be traversed in special operation using an enable switch (see operation mode selector). SM301OMS01 Operating mode Normal Special Event Impact Impact Status ...
Page 53
Safety option 30 Safety functions Safe enable switch Preconditions A safe input must be parameterised and interconnected as enable switch. You can only connect and parameterise one enable switch. The ES bit of the safety bus must be deactivated (C15113). The enable switch function can also be selected via the safety bus with the ES bit, unless a safe input is parameterised as enable switch.
The communication via the safety bus is active but passivated. ƒ About the service status: It can be activated by the Lenze »Engineer« PC software. ƒ It can be quit by reinitialising the drive−based safety, i.e. the communication via the ƒ...
Page 55
In addition, the software provides comprehensive online help. Password To store a safe parameter set, a password is required. The standard password is: "Lenze SM301". The password can be changed and must have at least six characters. Use "General reset" to delete the safe parameter set in the memory module and the drive−based safety.
Page 56
The safe parameter set transfer is supported by a safe parameter set saved to the memory module, e.g. when replacing the standard device or parameterising the drive−based safety, without the Lenze »Engineer« PC software via the memory module. A valid parameter set with a corresponding module ID must be stored.
The clear assignment of the safety address must be configured in the safety PLC. In drive systems without activated safety bus, unambiguousness and correct assignment of the safety address must be checked. For this purpose, use the Lenze »Engineer« PC software or an EZAEBK200x diagnosis terminal. EDS84DPSO01 EN 2.1...
Safety option 30 Error management Error states Error management 5.8.1 Error states Detected errors or maloperation of the drive are assigned to error states with definite reactions. The reaction can be co−ordinated with the complete drive via the error states. Features Error status System error...
Safety option 30 Error management Module error messages 5.8.3 Module error messages Entries Range Description Error type/response/ Note Error number Communication − standard device 16 0x10 Communication error − standard device Warning/STO (communication between standard device and SM301 cancelled) 17 0x11 Synchronisation error −...
Page 60
Safety option 30 Error management Module error messages Range Description Description Error type/response/ Error type/response/ Note Note Error number Test functions − inputs 144 0x90 Stuck at High SD−In1, channel A Trouble/− (Short circuit (High) SD−In1: OFF state 145 0x91 Stuck at High SD−In1, channel B 146 0x92 Stuck at High SD−In2, channel A...
Safety option 30 Response times Response times In order to detect the response time to a safety function the entire system must be considered. The following is relevant: Response time of the connected sensors. ƒ Input delay of the safety inputs. ƒ...
Safety option 30 Response times Response times of the inputs 5.9.1 Response times of the inputs Response time to an event in the sensors Time interval (Fig. 5−6) [ms] Response time of the sensors according to manufacturer information Input delay of the safe inputs C15034: 0 ...
Safety option 30 Response times Response times of the safety bus 5.9.2 Response times of the safety bus PROFIsafe Response time to an event in the safety sensors (PROFIsafe input data) Time interval (Fig. 5−6) [ms] Response time of the sensors according to manufacturer information Input delay of the safe inputs...
Need help?
Do you have a question about the 8400 protec StateLine mit SO10 and is the answer not in the manual?
Questions and answers