Siemens Simatic ET 200SP Equipment Manual page 72

Interrupts/diagnostic messages
6.1 Reactions to faults
Safety repair time
The fail-safe performance characteristics in the technical specifications apply for a
mission time life of 20 years and a repair time of 100 hours.
If a repair within 100 hours is not possible, remove the respective module from the BaseUnit
or switch off its supply voltage before 100 hours expires. The module switches off
independently after the 100 hours have expired.
Follow the repair procedure described in section Diagnostic messages (Page 75).
The repair time used for probability of dangerous failure per hour (PFH) and probability of
dangerous failure on demand (PFD) calculations is 100 hours.
Passivation is designed to provide the safe state of the safety function in the event of a single
fault. While a channel is passivated and energy is still available to the channel, there is a
possibility that additional faults can cause a dangerous failure of the safety function. You
should respond to passivations by repairing the fault or taking the passivated channel out of
service in less than 100 hours to preserve the safety integrity level of your system.
If module or channel passivation persists for 100 hours, the module is taken to a fatal error
state and the module's defective buffer diagnostic message is issued. The module is
recovered through a power cycle.
If a repair within 100 hours is not possible, passivated fail-safe outputs should be taken out of
service by physically disconnecting or opening circuits so that faults in the fail-safe module
cannot apply energy to the load. To remove input channels from service in an operating PLC
system, references to any passivated fail-safe inputs must be removed from any operating
F-CPU Safety program logic that can result in activation of a safety function output.
Do not depend on channel or module passivation to maintain safe state for more than 100
hours.
Additional information on passivation and reintegration
For further information about fail-safe module access, refer to the SIMATIC Safety -
Configuring and Programming manual
(https://support.industry.siemens.com/cs/ww/en/view/54110126).
70
WARNING
ET 200SP F-TM Count 1x1Vpp sin/cos HF (6ES7136-6CB00-0CA0)
Equipment Manual, V1.0, 01/2021, A5E47073911-AA