ABB AC500-S Safety User Manual page 375

B.3 V2 CPU parameters configuration
The following parameters of non-safety CPU configuraton influence the overall system behavior
of safety and non-safety CPU.
● "Behavior of outputs in stop"
● "Stop on error class"
● "Warmstart" after error of severity level 2
The settings for these parameters do not compromise on system safety.
"Behavior of Value "Off in hardware and online" (default)
outputs in stop"
If non-safety CPU is stopped, the application program execution on the safety CPU is stopped.
Transferring safety CPU output values by non-safety CPU in safety telegrams will be stopped,
too. No valid safety telegrams can reach safety I/O modules and other F-Devices. They go to a
passivation state after the watchdog time runs out.
Value "Off in hardware and actual state online"
If non-safety CPU is stopped, transferring safety CPU output values in safety telegrams will be
stopped, too. The hardware status of safety CPU communication interface becomes "0". Online
display shows the last valid values from the last safety application program cycle. As a result of
stopped value transfer to the safety CPU communication interface, no valid safety telegrams
can reach safety I/O modules and other F-Devices. They go to a passivation state after the
watchdog time runs out.
Value "Actual state in hardware and online"
If non-safety CPU is stopped, safety CPU continues running. Safety CPU output values in
safety telegrams will continue to be transferred by non-safety CPU. Hardware status of the
safety CPU communication interface and online display values remain intact. Safety I/O mod-
ules and other F-Devices can receive safety telegrams from the safety CPU. Operation of safety
part is not influenced by the stop of non-safety CPU.
"Stop on error Value "E2" (default)
class"
If an error of severity level 1 or 2 occurs, non-safety CPU, all its communication modules and
safety CPU will be stopped. PROFIsafe F-Host and F-Devices stacks continue running on the
safety CPU with fail-safe values.
Value "E3"
If an error of severity level 1, 2 or 3 occurs, non-safety CPU, all its communication modules and
safety CPU will be stopped. PROFIsafe F-Host and F-Devices stacks continue running on
safety CPU with fail-safe values.
Value "E4"
If an error of severity level 1, 2, 3 or 4 occurs, non-safety CPU, all its communication modules
and safety CPU will be stopped. PROFIsafe F-Host and F-Devices stacks continue running on
safety CPU with fail-safe values.
"Warmstart" Value "Off" (default)
If an error of severity level 2 occurs, no warm restart of non-safety CPU, all its communication
modules and safety CPU will be done.
Values "On after E2 error" , "On after short voltage dip" , "On after E2 or short voltage
dip"
If an error of severity level 2 occurs or after short voltage dip, a warm restart of non-safety CPU,
all its communication modules and safety CPU will be done. After restart of safety CPU, remote
safety I/O modules can be reintegrated, e.g., using PROFIsafe F-Device reintegration scheme
Ä [3].
2020/06/19 3ADR025091M0208, 12, en_US
Usage of safety CPU with V2 non-safety CPU PM5xx
375