ABB AC500-S Safety User Manual page 36

AC500-S safety modules
Safety CPU - SM560-S / SM560-S-FD-1 / SM560-S-FD-4 > Functionality
● Switch address value 0xFD during the start of the safety CPU allows deleting user data from
its flash memory. The user data are finally deleted after safety CPU powering off/on is exe-
cuted. This can be needed if user data are corrupt and could lead to a SAFE STOP state of
the safety CPU. The safety CPU goes to SAFE STOP state after start-up and 0xFD com-
mand execution.
● Switch address value 0xFC during the start of the safety CPU allows deleting all safety CPU
data, which includes, in addition to boot project and user data, also safety CPU password
and defined power dip value from the flash memory. This means that the safety CPU will be
brought to its original state. The data is finally deleted after safety CPU powering off/on is
executed. The safety CPU goes to SAFE STOP state after start-up and 0xFC command
execution.
The switch address value range 0xF0 ... 0xFB is reserved for future internal system functions.
36
NOTICE!
Usage of switch address values from the system range 0xF0 ... 0xFF can lead
to the loss of important user information in the flash memory of the safety CPU,
e.g., boot project, user data, password or power dip value can be lost. There-
fore, it is important that users pay a special attention during the change of
switch address position on the safety CPU.
DANGER!
Despite the fact that SF_SM5XX_OWN_ADR function is a safety POU, the
hardware switch address value is a non-safety value and needs additional
measures to satisfy functional safety requirements.
PROFIsafe F_Dest_Add addresses for F-Devices on SM560-S-FD-1 /
SM560-S-FD-4 safety CPUs are defined using the rotary address switch. It
means that the rotary address switch on safety CPUs can have more than one
function behind. This shall be carefully considered during the safety application
design, for example, if system functions (0xFF, 0xFE, 0xFD and 0xFC values on
the rotary address switch) have to be used on SM560-S-FD-1 / SM560-S-FD-4
safety CPUs. In the latter case, the previously defined rotary address switch
value for F_Dest_Add addresses shall be properly documented and set back to
its original documented value after system functions on the safety CPU were
successfully performed.
Usage of the rotary address switch for F_Dest_Add setting allows using the
same safety CPU boot project for different machines provided that each
machine will have a unique pre-set F_Dest_Add address defined with the rotary
address switch and properly engineered in Automation Builder project.
The allowed range of the rotary address switch value for F_Dest_Add setting is
1 to 239 (0 would indicate no usage of F-Devices on SM560-S-FD-1 /
SM560-S-FD-4). One rotary address switch represents F_Dest_Add for all pos-
sible F-Device instances (maximum 32 F-Device instances each with 12 bytes
of safety data) on SM560-S-FD-1 / SM560-S-FD-4 safety CPUs.
The following rule applies for F_Dest_Add assignment to F-Devices:
– F_Dest_Add for F-Device = Rotary address switch value * 100 + F-Device
instance number (0..31, which is the consecutive number as F-Devices are
instantiated in Automation Builder module/device tree).
– To properly configure F-Device on SM560-S-FD-1 and SM560-S-FD-4
safety CPUs, one has to provide the correct configuration of F_Dest_Add
using the rotary address switch value and F- Parameter configuration pro-
vided from F-Host and its controller.
3ADR025091M0208, 12, en_US 2020/06/19