Layout of the product ..................12 Installation ......................13 5.1. Mechanical mounting ........................13 5.2. Calculation of the safety distance for an item of ESPE connected to the MSC system ......14 5.3. Electrical connections ........................15 5.3.1. Notes in relation to connecting cables ................15 5.3.2.
Page 3
Outputs ............................34 7.2.1. OUT_STATUS ........................34 7.2.2. OUT_TEST ........................34 7.2.3. OSSD ..........................34 7.2.3.1. Single-channel OSSDs (MSC-CB-S, FI8FO4S, AH-FO4SO8) ........34 7.2.3.2. High current OSSD (AH-FO4SO8) ................36 7.2.4. Safety relays (AZ-FO4, AZ-FO4O8) ..................36 Technical data ....................37 8.1. General system settings ........................37 8.1.1.
Page 4
9.1.10.2. Resources allocation ...................81 9.1.10.3. Print report ......................81 9.1.10.4. Connecting to MSC .....................83 9.1.10.5. Sending the configuration to the MSC system ............83 9.1.10.6. Downloading a configuration file (project) from the base unit ........84 9.1.10.7. Configuration log ....................84 9.1.10.8. System layout .....................85 9.1.10.9.
Page 5
9.4.1.10. Digital comparator (DIGITAL COMPARATOR) (only with MSC-CB-S) ......139 9.4.2. Memory operators ......................141 9.4.2.1. D FLIP FLOP (max. number = 16 with MSC-CB, max. number = 32 with MSC-CB-S) 141 9.4.2.2. T FLIP FLOP (max. number = 16 with MSC-CB, max. number = 32 with MSC-CB-S) 141 9.4.2.3.
Page 6
Operating Instructions Modular Safety Control System MSC 9.4.7. MUTING operators (max. number = 4 with MSC-CB, max. number = 8 with MSC-CB-S) ..159 9.4.7.1. Simultaneous muting (MUTING “Con”) ..............159 9.4.7.2. MUTING “L” ......................161 9.4.7.3. “Sequential” MUTING ..................162 9.4.7.4. MUTING “T” ......................164 9.4.7.5.
Modular Safety Control System MSC 1. About this document 1.1. Scope These operating instructions are valid for the Modular Safety Control System MSC. These operating instructions and any brief instructions enclosed form the complete user information for your device. 1.2. Target group Design engineers and installation planners for safety devices on machines, as well as setup and servicing staff possessing special expertise in handling safety components.
WARNING Ì MSC achieves the following safety levels: SIL 3, SILCL 3, PL e, cat. 4, type 4 as per the applicable standards. However, the final SIL and PL safety categories for the application are dependent on the number of safety components, their parameters and the connections made, as per the risk analysis.
Probability of Dangerous Failure per Hour Safety Integrity Level (according to EN 61508) SILCL Safety Integrity Level Claim Limit (according to EN 62061) Software 2.4. Applicable standards MSC complies with the following European directives: Ì 2006/42/EC “Machinery Directive” Ì 2014/30/EU “EMC Directive”...
EUCHNER) on the rear side of every module. The number of inputs in the system can be increased using the MSC extension modules FI8, FI16 and FM4 such that more external devices can be connected. FM4 also provides 8 outputs of type OUT_TEST.
Page 11
All this is achieved using a straightforward, intuitive graphic user interface. The configuration on the PC is sent via a USB connection to base unit MSC-CB or MSC-CB-S. The file is saved in MSC-CB/ MSC-CB-S and can also be saved on the proprietary M-A1 memory card (accessory). In this way, it is possible to copy the configuration to a different base unit quickly.
Important! The supplied MSCB plug connector and a further MSCB plug connector are required for the connection to the MSC-CB/MSC-CB-S to install an extension module. This can be ordered separately as an accessory. (Translation of the original operating instructions) 2121331-08-07/22...
3. Mount the row of expansion plugs on the DIN rail. Hook on from top to bottom. 4. Mount the MSC module on the DIN rail. Hook on from top to bottom. Push module into place until it noticeably engages.
5.2. Calculation of the safety distance for an item of ESPE connected to the MSC system All electro-sensitive protective equipment that is connected to the MSC system must be arranged at a distance that is at least the minimum safety distance S such that the danger zone can be reached only after the machine’s hazardous move- ment has stopped.
Modular Safety Control System MSC 5.3. Electrical connections The modules of the MSC system are equipped with terminal blocks for the electrical connections. Each module can have 8, 16 or 24 connections. Each module also has an MSCB plug connector on the rear (for the commu- nication with the base unit and the other extension modules).
1) Note on the scope of the UL approval: the devices have been tested as per the requirements of UL508 and CSA/ C22.2 no. 14 (protection against electric shock and fire). The connections for each module in the MSC system are listed in the tables below: 5.3.2.1.
In order to be able to use the STATUS1 output (terminal 7), automatic restart without feedback loop monitoring must be set for OSSD1 in EUCHNER Safety Designer. 2121331-08-07/22 (Translation of the original operating instructions)
NOTICE If the file on the memory card is not identical to the file in the MSC-CB/MSC-CB-S, the configuration data in the MSC-CB/MSC-CB-S will be overwritten and therefore permanently deleted.
If the MSC-CB/MSC-CB-S module is faulty, it can be replaced with a new module. As the entire configuration is saved on the M-A1 memory card, all that is necessary is to insert this card in the new module and switch on the MSC system; the backed up configuration will then be loaded immediately.
In order to be able to use the STATUS1 output (terminal 7), automatic restart without feedback loop monitoring must be set for OSSD1 in EUCHNER Safety Designer. (Translation of the original operating instructions) 2121331-08-07/22...
Operating Instructions Modular Safety Control System MSC 5.3.7. Module FI8 TERMINAL SIGNAL TYPE DESCRIPTION VERSION 24 VDC Power supply 24 VDC NODE_SEL0 Input Input (“type B” as per EN 61131-2) Node selection NODE_SEL1 Input Input (“type B” as per EN 61131-2)
Operating Instructions Modular Safety Control System MSC 5.3.9. Module FI16 TERMINAL SIGNAL TYPE DESCRIPTION VERSION 24 VDC Power supply 24 VDC NODE_SEL0 Input Input (“type B” as per EN 61131-2) Node selection Input (“type B” as per EN 61131-2) NODE_SEL1...
Operating Instructions Modular Safety Control System MSC 5.3.10. Module AC-FO4 TERMINAL SIGNAL TYPE DESCRIPTION VERSION 24 VDC Power supply 24 VDC NODE_SEL0 Input Input (“type B” as per EN 61131-2) Node selection NODE_SEL1 Input Input (“type B” as per EN 61131-2)
Operating Instructions Modular Safety Control System MSC 5.3.12. Modules SPM0 – SPM1 – SPM2 TERMINAL SIGNAL TYPE DESCRIPTION VERSION 24 VDC Power supply 24 VDC NODE_SEL0 Input Node selection Input (“type B” as per EN 61131-2) NODE_SEL1 Input Power supply 0 VDC...
Page 25
Operating Instructions Modular Safety Control System MSC POWER SUPPLY 5VDC/ 24VDC EXT_0V ENCODER TTLB BROWN 5VDC/24VDC WHITE EXT_0V EXT_0V N.C. N.C. GREEN YELLOW N.C. N.C. GREY PINK POWER SUPPLY POWER SUPPLY 5VDC/ ENCODER HTL 24VDC EXT_0V ENCODER SIN/COS 24VDC EXT_0V...
Operating Instructions Modular Safety Control System MSC 5.3.13. Module AZ-FO4 TERMINAL SIGNAL TYPE DESCRIPTION VERSION 24 VDC Power supply 24 VDC NODE_SEL0 Input Input (“type B” as per EN 61131-2) Node selection Input (“type B” as per EN 61131-2) NODE_SEL1...
Operating Instructions Modular Safety Control System MSC 5.3.15. Module O8 SIGNAL TYPE DESCRIPTION VERSION 24 VDC Power supply 24 VDC NODE_SEL0 Input Input (“type B” as per EN 61131-2) Node selection NODE_SEL1 Input Input (“type B” as per EN 61131-2)
Programmable digital output PNP Active High Table 16: Module AH-FO4SO8 5.3.18. Example for the connection of the MSC system to the machine control Figure 6: Example for the connection of the MSC system to the machine control (Translation of the original operating instructions) 2121331-08-07/22...
Modular Safety Control System MSC 5.4. Checklist after installation With the MSC system, faults can be detected in the individual modules. To ensure trouble-free operation of the system, the following checks are to be performed during setup and at least once a year: 1.
Operating Instructions Modular Safety Control System MSC 6. Flow chart Mechanical mounting Electrical connections between the MSC modules and external sensors Preparation of the diagram Validation software OK? Connection via USB to base unit Download the diagram to base unit Con guration check (incl.
NOTICE Ì These signals must both be set permanently to logic level 1 (24 VDC) so that the MSC system functions correctly. If you want to deactivate the MSC system, these inputs can be simply set to logic level 0 (0 VDC).
The SPM module must be capable of detecting the expected speed in any state. Perform a com- plete system test during installation and periodically during operation. Ì Using the MSC software and the sensor LEDs, ensure that the module never detects anomalies. NOTICE Ì...
7.1.4. RESTART_FBK Using the RESTART_FBK signal, MSC can monitor a feedback loop signal (External Device Monitoring – EDM) from external contactors; both manual and automatic forms of starting can be programmed (see list of the possible connections in Table 18).
In this test, each OSSD output is periodically (every 20 ms for MSC-CB, every 600 ms for MSC-CB-S) short-circuited to 0 V for a very short time (<120 μs). The control system can put the system into a safe state if the test results are inconsistent.
Page 35
Modular Safety Control System MSC Each OSSD output can be configured as shown in Table 19: The output is activated, as per the configuration defined by the EUCHNER Safety Designer software, only if 24 VDC is applied to the related Automatic input RESTART_FBK.
Modular Safety Control System MSC 7.2.3.1. Single-channel OSSDs (MSC-CB-S, FI8FO4S, AH-FO4SO8) The modules MSC-CB-S, FI8FO4S and AH-FO4SO8 have single-channel instead of dual-channel OSSD outputs. Three settings are available for the outputs (configuration via the EUCHNER Safety Designer software): Ì 4 single-channel outputs (1 safety output per channel with corresponding RESTART_FBK input) Ì...
On the use of the module AH-FO4SO8 with output current > 5 A, the module must be separated from the neighboring ¨ modules by the connection of an MSC plug connector in between. 7.2.4. Safety relays (AZ-FO4, AZ-FO4O8) The modules AZ-FO4/AZ-FO4O8 have safety relays with positively driven contacts with 1 normally open contact and 1 nor- mally closed feedback loop contact.
Operating Instructions Modular Safety Control System MSC 8.1.5. Module MSC-CB-S (EN IEC 61508:2010) 1.35 E-8 99.7% Operating voltage 24 VDC ±20% Power dissipation 3 W max. Digital INPUTS (no./description) 8/ PNP Active High as per EN 61131-2 ≤ 4/ EDM control system/automatic or manual mode possible using RESTART INPUT_FBK/RESTART (no./description)
Digital INPUTS (no./description) 12/ PNP Active High as per EN 61131-2 Test OUTPUT (no./description) 8/ for checking for short circuits, overload states Connection to MSC-CB and MSC-CB-S Via proprietary 5-way bus MSCB from EUCHNER 8.1.10. Modules AC-FO2 – AC-FO4 Module AC-FO2 AC-FO4 (EN IEC 61508:2010) 4.08 E-9...
Operating Instructions Modular Safety Control System MSC 8.2. Mechanical dimensions 99 mm 22,5 mm 108 mm Figure 12: Module dimensions 2121331-08-07/22 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.3. Signals 8.3.1. Base unit MSC-CB (Figure 13) (Translation of the original operating instructions) 2121331-08-07/22...
Operating Instructions Modular Safety Control System MSC 8.3.2. Base unit MSC-CB-S (Figure 14) 2121331-08-07/22 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.3.3. Module FI8FO2 (Figure 15) (Translation of the original operating instructions) 2121331-08-07/22...
Operating Instructions Modular Safety Control System MSC 8.3.4. Module FI8FO4S (Figure 16) 2121331-08-07/22 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.3.5. Module FI8 (Figure 17) (Translation of the original operating instructions) 2121331-08-07/22...
Operating Instructions Modular Safety Control System MSC 8.3.6. Module FM4 (Figure 18) 2121331-08-07/22 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.3.7. Module FI16 (Figure 19) (Translation of the original operating instructions) 2121331-08-07/22...
Operating Instructions Modular Safety Control System MSC 8.3.8. Module AC-FO2 (Figure 20) 2121331-08-07/22 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.3.9. Module AC-FO4 (Figure 21) (Translation of the original operating instructions) 2121331-08-07/22...
Operating Instructions Modular Safety Control System MSC 8.3.10. Module AZ-FO4 (Figure 22) 2121331-08-07/22 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.3.11. Module AZ-FO4F08 (Figure 23) (Translation of the original operating instructions) 2121331-08-07/22...
Operating Instructions Modular Safety Control System MSC 8.3.12. Module O8 (Figure 24) 2121331-08-07/22 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.3.13. Module O16 (Figure 25) (Translation of the original operating instructions) 2121331-08-07/22...
Operating Instructions Modular Safety Control System MSC 8.3.14. Modules SPM0 – SPM1 – SPM2 (Figure 26) 2121331-08-07/22 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.3.15. Module AH-FO4SO8 (Figure 27) (Translation of the original operating instructions) 2121331-08-07/22...
Operating Instructions Modular Safety Control System MSC 8.4. Fault diagnostics 8.4.1. Base unit MSC-CB (Figure 28) 2121331-08-07/22 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.4.2. Base unit MSC-CB-S (Figure 29) (Translation of the original operating instructions) 2121331-08-07/22...
Operating Instructions Modular Safety Control System MSC 8.4.3. Module FI8FO2 (Figure 30) 2121331-08-07/22 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.4.4. Module FI8FO4S (Figure 31) (Translation of the original operating instructions) 2121331-08-07/22...
Operating Instructions Modular Safety Control System MSC 8.4.5. Module FI8 (Figure 32) 2121331-08-07/22 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.4.6. Module FM4 (Figure 33) (Translation of the original operating instructions) 2121331-08-07/22...
Operating Instructions Modular Safety Control System MSC 8.4.7. Module FI16 (Figure 34) 2121331-08-07/22 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.4.8. Modules AC-FO2/AC-FO4 (Figure 35) (Translation of the original operating instructions) 2121331-08-07/22...
Operating Instructions Modular Safety Control System MSC 8.4.9. Module AZ-FO4 (Figure 36) 2121331-08-07/22 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.4.10. Module AZ-FO4O8 (Figure 37) (Translation of the original operating instructions) 2121331-08-07/22...
Operating Instructions Modular Safety Control System MSC 8.4.11. Module O8 (Figure 38) 2121331-08-07/22 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.4.12. Module O16 (Figure 39) (Translation of the original operating instructions) 2121331-08-07/22...
Operating Instructions Modular Safety Control System MSC 8.4.13. Modules SPM0, SPM1, SPM2 (Figure 40) 2121331-08-07/22 (Translation of the original operating instructions)
Operating Instructions Modular Safety Control System MSC 8.4.14. Module AH-FO4SO8 (Figure 41) (Translation of the original operating instructions) 2121331-08-07/22...
Modular Safety Control System MSC 9. EUCHNER Safety Designer software Using the “EUCHNER Safety Designer” (SWSD) application software, it is possible to design the logic for the safety com- ponents connected to the control system and the MSC system extensions.
Operating Instructions Modular Safety Control System MSC 9.1.4. General If EUCHNER Safety Designer has been installed correctly, an icon is added to the desktop. To start the program: double-click this icon. The following start screen is displayed: Figure 42: EUCHNER Safety Designer You can now start to create projects.
Figure 46: EUCHNER Safety Designer, Project information After opening, the MSC-CB-S module is shown. The base unit MSC-CB and the firmware versions of both base units can be selected from the drop-down menu. You can add the modules necessary for the system using the list boxes at the top of the screen (Select extension module).
Operating Instructions Modular Safety Control System MSC 9.1.7.1. Changing configuration (layout of the various modules) You can change the system configuration by selecting the icon. The Configuration window is displayed again (Figure 47). 9.1.7.2. Editing user parameters You can edit the project information by selecting the icon.
Operating Instructions Modular Safety Control System MSC 2. “OPERATOR” tool window This window contains the various function blocks for linking the items in point 1. These blocks are divided into seven different categories: Ì Logic Ì Memories Ì Safety Guard Lock Ì...
Operating Instructions Modular Safety Control System MSC 9.1.9.1. Using the right mouse button Ì On input/output blocks - Copy/paste - Delete - Delete all assigned connections - Alignment with other function blocks (with multiple selection) - Help - Monitor mode: show/hide the property window - Status block: activate/deactivate the logical negation on the input pin Ì...
The inputs (1, 2, 3) on the module MSC-CB for connecting the contacts on the safety components are highlighted in yellow on the left. The MSC outputs (from 1 to 4) are activated as per the conditions that are specified in the interlock (INTERLOCK) and emergency stop (E-STOP) (see Page 100 Emergency stop (E-STOP) and Page 101 Interlock (INTERLOCK)).
If the validation is successful, a sequential number is assigned to the INPUT and OUTPUT on the diagram. This number then appears also in the REPORT and in the monitor in EUCHNER Safety Designer. The configuration can be transferred only after successful validation.
Operating Instructions Modular Safety Control System MSC 9.1.10.2. Resources allocation The resources allocation can be shown by selecting the icon. All elements used, such as inputs, outputs, status, fieldbus inputs and fieldbus outputs, are shown in the resources allocation. Figure 53: EUCHNER Safety Designer, resources allocation 9.1.10.3.
Page 83
Operating Instructions Modular Safety Control System MSC 2121331-08-07/22 (Translation of the original operating instructions)
PC to MSC-CB/MSC-CB-S after the related command is executed. In the MSC-CB/MSC-CB-S, the project is saved in the internal memory and (if fitted) on the M-A1 memory card (password required: level 2).
9.1.10.6. Downloading a configuration file (project) from the base unit Click the icon on the default toolbar to download a project from the base unit MSC-CB/MSC-CB-S to the EUCHNER Safety Designer configuration software. EUCHNER Safety Designer displays the project saved in MSC-CB/MSC-CB-S (required password: level 1).
NOTICE If the system does not comprise all the modules designated in the configuration, this discrepancy is indicated on the MSC-CB/MSC-CB-S module and the module is not started (see SIGNALS). (Translation of the original operating instructions) 2121331-08-07/22...
(password required: level 1). A pop-up window with the following content appears (in real time): Ì Status of the inputs (if the item has two or more input connections to MSC, only the first is indicated in the monitor as active; see example shown) Ì...
Operating Instructions Modular Safety Control System MSC 9.1.10.11. Monitor (real-time I/O status – text – graphic) Click the icon to activate/deactivate the monitor (password required: level 1). Based on the color of the links (Figure 60) the diagnostics can be read (in real time) as follows: RED = OFF Ì...
NOTICE Ì Using this password, the project can be uploaded (from PC to MSC-CB/MSC-CB-S), edited and saved. In other words, complete control of the PC => MSC system is possible using this pass- word. Ì On UPLOADING a new project, you can change the level 2 password.
The system must be checked for correct operation after the project has been validated and uploaded to the MSC-CB/MSC-CB-S module and all safety components have been connected. This check is made by forcing a status change for each safety component connected to MSC to check whether the status of the outputs also actually changes.
If the OUTPUT is at logic level “High” (TRUE), the FBK signal must be at the logic level “Low” (FALSE) within the time set and vice versa. Otherwise, the OUTPUT output changes to the Low level (FALSE) and the error is signaled on the base unit MSC-CB/MSC- CB-S by the flashing of the CLEAR LED for the OSSD in the error mode.
Each SINGLE_OSSD output has a corresponding RESTART_FBK input. The RESTART_FBK input appears for OSSD outputs ¨ of the MSC-CB-S and FI8FO4S modules only if manual reset or feedback loop monitoring is activated. The RESTART_FBK input is mandatory on the AH-FO4SO8 module and must be connected as described in the RESTART_FBK section.
Page 93
(i.e. separate cable paths). Figure 69: Example for a project: 2 blocks with single output + 1 block with double output The possible configurations of the MSC-CB-S, FI8FO4S, AH-F04S08 (2 or 4 OSSD) modules are shown below: Figure 70: Configuration of 2-channel outputs...
Page 94
If the OUTPUT is at logic level “High” (TRUE), the FBK signal must be at the logic level “Low” (FALSE) within the time set and vice versa. Otherwise, the OUTPUT output changes to the Low level (FALSE) and the error is signaled on the base unit MSC-CB by the flashing of the CLEAR LED for the OSSD in the error mode.
Operating Instructions Modular Safety Control System MSC 9.2.1.3. Signal output (STATUS) Using the STATUS output, every point in the diagram can be monitored by connecting it to the In input. The output supplies 24 VDC with an input of “1” (TRUE) or 0 VDC with an input of “0” (FALSE).
Operating Instructions Modular Safety Control System MSC 9.2.1.5. Relay [RELAY] The output relay is a relay output with a normally open contact. The relay outputs are closed if the IN input is “1” (TRUE), otherwise the contacts are open (FALSE).
Page 97
Operating Instructions Modular Safety Control System MSC Figure 79: Relay output cat. 2 Output for the OTE (Output Test Equipment) Ì Activation: This is necessary for category 2 configurations for signaling dangerous failures as per EN 13849-1: 2006/ DAM1 (in preparation).
Page 98
Operating Instructions Modular Safety Control System MSC Category 4. Outputs with two category 4 relays. Each AZ-FO4/AZ-FO4O8 module can have up to two outputs of this type. The relays are operated in pairs for this output. Properties: Ì 2 dual-channel outputs.
Page 99
“High” (TRUE). The Error OUT signal is reset if one of the following events occurs: 1. The system is switched off and on again. 2. Activation of the RESET MSC-CB operator. Figure 83: Example for RELAY with correct feed-...
Operating Instructions Modular Safety Control System MSC 9.2.2. Input items 9.2.2.1. Emergency stop (E-STOP) Using the E-STOP function block, the input status of an emergency stop device can be checked. If the emergency stop button is pressed, the OUTPUT output is “0” (FALSE), otherwise the OUTPUT output is “1” (TRUE).
Operating Instructions Modular Safety Control System MSC Important! If Manual Reset is selected, the next input must be used. Example: If Input1 and Input2 are used for the function block, Input3 must be used for the reset input. Output Test: This option can be used to select which test output signals are to be sent to the emergency stop device. Short circuits between the cables can be detected and rectified by means of this additional check.
Page 102
Operating Instructions Modular Safety Control System MSC Parameters Input Type: Ì Double NC – makes it possible to connect components with two normally closed contacts. Ì Double NC/NO – makes it possible to connect components with one normally closed contact and one normally open contact.
Operating Instructions Modular Safety Control System MSC 9.2.2.3. Single-channel interlock (SINGLE INTERLOCK) The input status of a movable guard or a safety door is checked by the SINGLE INTERLOCK function block. If the movable guard or the safety door is open, the OUTPUT output is “0” (FALSE), otherwise the OUTPUT output is “1” (TRUE).
Operating Instructions Modular Safety Control System MSC 9.2.2.4. Guard locking monitoring (LOCK FEEDBACK) Using the LOCK FEEDBACK function block the state of the guard locking monitoring inputs for a movable guard or a safety door is checked. If the inputs signal that the guard locking is locked, the OUTPUT output is “0” (FALSE), otherwise the OUTPUT output is “1”...
Operating Instructions Modular Safety Control System MSC 9.2.2.5. Key-operated rotary switch (KEY LOCK SWITCH) Using the KEY LOCK SWITCH function block, the input status of a manual key-operated rotary switch is checked. If the key is not turned, the OUTPUT output is “0” (FALSE), otherwise the OUTPUT output is “1” (TRUE).
Page 106
Operating Instructions Modular Safety Control System MSC Output Test: This option can be used to select which test output signals are to be sent to the component contacts. Short circuits between the cables can be detected and rectified by means of this additional check. For this purpose it is necessary to configure the test output signals (from the test output signals available).
Operating Instructions Modular Safety Control System MSC 9.2.2.6. Optoelectronic safety light grid or safety laser scanner (ESPE) Using the ESPE function block the input status of an optoelectronic safety light grid (or safety light scanner) is checked. If the area protected by the light curtain is interrupted (outputs on the light grid FALSE), the OUTPUT output is “0” (FALSE).
Operating Instructions Modular Safety Control System MSC Enable Out Error: If activated, an error detected by the function block is displayed. Item Description: A functional description for the component can be entered here. This text is displayed in the upper part of the symbol.
Page 109
Operating Instructions Modular Safety Control System MSC There are two types of reset: “Manual” and “Monitored.” On the selection of manual reset, the system checks only the signal transition from 0 to 1. With monitored reset, the double transition from 0 to 1 and then back to 0 is checked.
Operating Instructions Modular Safety Control System MSC 9.2.2.8. Operating mode selection (MOD-SEL) Using the MOD-SEL function block the input status of an operating mode selector switch (up to 4 inputs) is checked. If only one of the IN inputs is “1” (TRUE), the corresponding OUTPUT output is also “1” (TRUE). In all other cases, i.e. if all IN inputs are “0”...
Operating Instructions Modular Safety Control System MSC 9.2.2.9. Light barrier (PHOTOCELL) Using the PHOTOCELL function block the input status of an optoelectronic safety light barrier is checked. If the beam from the light barrier is obscured (output on the light barrier FALSE), the OUTPUT output is “0” (FALSE). If, con- versely, the beam is not obscured (output on the light barrier TRUE), the OUTPUT output is “1”...
Page 112
Operating Instructions Modular Safety Control System MSC Filter (ms): This makes it possible to filter the signals that are received from the external contactors. This filter can be set to between 3 and 250 ms and removes any contact bouncing. The time set for the filter affects the calculation of the total response time of the module.
Operating Instructions Modular Safety Control System MSC 9.2.2.10. Two-hand control (TWO-HAND) Using the TWO-HAND function block the input status of a two-hand control switch is checked. If both pushbuttons are pressed at the same time (within max. 500 ms), the OUTPUT output is “1” (TRUE); this status is retained until the pushbuttons are released.
This input can be assigned only to the base unit MSC-CB. ¨ It must be used if the OSSD outputs on an MSC system are connected to the inputs on a down- ¨ stream MSC system or together with the NETWORK operator.
Operating Instructions Modular Safety Control System MSC 9.2.2.12. SENSOR Using the SENSOR function block the input status of a sensor (not a safety sensor) is checked. If the beam from the sensor is obscured (output on the light barrier FALSE), the OUTPUT output is “0” (FALSE). Conversely, if this beam is not occupied and the output on the sensor is “1”...
Page 116
Operating Instructions Modular Safety Control System MSC Output Test: This option can be used to select which test output signals are to be sent to the sensor. Short circuits between the cables can be detected and rectified by means of this additional check. For this purpose it is necessary to configure the test output signals (from the test output signals available).
Operating Instructions Modular Safety Control System MSC 9.2.2.13. Pressure sensitive mat (S-MAT) Using the pressure sensitive mat function block the input status of a pressure sensitive mat is checked. If there is a person on the footmat, the OUTPUT output is “0” (FALSE), otherwise, i.e. if the footmat is clear, the OUTPUT output is “1” (TRUE).
Page 118
Operating Instructions Modular Safety Control System MSC Output Test: This option can be used to select which test output signals are to be sent to the pressure sensitive mat contacts. Short circuits between the wires can be detected and rectified by means of this check. For this purpose it is necessary to configure the test output signals (from the test output signals available).
Operating Instructions Modular Safety Control System MSC 9.2.2.14. Switch (SWITCH) Using the SWITCH function block the input status of a pushbutton or switch (NOT A SAFETY SWITCH) is checked. If the pushbutton is pressed, the OUTPUT output is “1” (TRUE), otherwise the OUTPUT output is “0” (FALSE).
Operating Instructions Modular Safety Control System MSC 9.2.2.15. Enabling switch (ENABLING SWITCH) Using the ENABLING SWITCH function block the input status of a 3-stage enabling switch is checked. If this switch is not pressed (position 1) or is fully pressed (position 3), the OUTPUT output is “0” (FALSE). In the middle position (position 2), the OUTPUT output is “1”...
Page 121
Operating Instructions Modular Safety Control System MSC Filter (ms): This parameter makes it possible to filter the signals from the device control system. This filter can be set to between 3 and 250 ms and removes any contact bouncing. The time set for the filter affects the calculation of the total response time of the module.
Operating Instructions Modular Safety Control System MSC 9.2.2.16. Testable safety device (TESTABLE SAFETY DEVICE) Using the TESTABLE SAFETY DEVICE function block the input status of a single-channel or a dual-channel safety sensor (both normally closed contacts and normally open contacts) is checked. Refer to the following tables for the sensor type...
Page 123
Operating Instructions Modular Safety Control System MSC Parameters Manual Reset: If activated, a reset can be requested on every activation of the device. Otherwise, activation of the output will correspond directly to the input conditions. There are two types of reset: “Manual” and “Monitored.” On the selection of manual reset, the system checks only the signal transition from 0 to 1.
Operating Instructions Modular Safety Control System MSC 9.2.2.17. Semiconductor output (SOLID STATE DEVICE) Using the semiconductor output function block the input status is checked. If 24 VDC is present on the inputs, the OUTPUT output switches to “1” (TRUE), otherwise the OUTPUT output is “0” (FALSE).
Operating Instructions Modular Safety Control System MSC 9.2.2.18. Fieldbus input (FIELDBUS INPUT) A conventional input can be provided using this element; the status of the input can be changed via the fieldbus. The respective bit must be selected to perform changes on the input. The following table shows the max. number of virtual inputs.
Operating Instructions Modular Safety Control System MSC 9.2.2.19. LL0 – LL1 A logic level can be supplied to the input of a component using these elements. Logic level 0 Logic level 1 Figure 125: Logic level Important! LL0 and LL1 cannot be used to deactivate the logic connections in the program.
Operating Instructions Modular Safety Control System MSC 9.3. Function blocks for speed control Important! Ì An external error or a malfunction on the encoder/proximity switch or on its connections does not necessarily result in a change in the safety status on the normal output of the function block (e.g.
Operating Instructions Modular Safety Control System MSC 9.3.1. Speed monitoring (SPEED CONTROL) The speed monitoring function block checks the speed of a device. If the measured speed exceeds a previously set limit, the OVER output switches to “0” (FALSE). If the speed is below the previously set limit, the OVER output is “1” (TRUE).
Page 129
Operating Instructions Modular Safety Control System MSC Enable Direction: Select this parameter to activate the DIR output of the function block. This output is “1” (TRUE) if the axis is rotating counterclockwise and “0” (FALSE) if the axis is rotating clockwise (see adjacent figure).
Page 130
Operating Instructions Modular Safety Control System MSC Hysteresis (%): Corresponds to the hysteresis (in percent) below which a speed change is filtered out. A value other than 1 must be entered here to prevent constant switching when the input is changed.
Operating Instructions Modular Safety Control System MSC 9.3.2. Speed range monitoring (WINDOW SPEED CONTROL) The speed range monitoring function block checks the speed of a device; the WINDOW output is “1” (TRUE) if the measured speed is within the previously defined speed window.
Page 132
Operating Instructions Modular Safety Control System MSC Proximity choice: Selecting the proximity switch enables you to select between PNP, NPN, NO contact, NC contact, 3-wire or 4-wire. To ensure Performance Level = Pl e, a PNP NO must be used (see “Proximity switch input on speed monitoring modules SPM”...
Operating Instructions Modular Safety Control System MSC 9.3.3. Standstill monitoring (STAND STILL) The standstill monitoring function block checks the speed of a device; the ZERO output is “1” (TRUE) if the speed is 0. If the speed is not 0, the ZERO output is “0” (FALSE).
Page 134
Operating Instructions Modular Safety Control System MSC Proximity choice: Selecting the proximity switch enables you to select between PNP, NPN, NO contact, NC contact, 3-wire or 4-wire. (To ensure Performance Level = Pl e, a PNP NO must be used (see “Proximity switch input on speed monitoring modules SPM”...
Operating Instructions Modular Safety Control System MSC 9.3.4. Speed/standstill monitoring (STAND STILL AND SPEED CONTROL) The speed/standstill monitoring function block checks the speed of a device by the ZERO output becoming “1” when the speed is 0. In addition, the OVER output is “0” (FALSE) if the measured speed exceeds a previously defined limit.
Page 136
Operating Instructions Modular Safety Control System MSC Enable Direction: Select this parameter to activate the DIR output of the function block. This output is “1” (TRUE) if the axis is rotating counterclockwise and “0” (FALSE) if the axis is rotating clockwise (see adjacent figure).
Page 137
Operating Instructions Modular Safety Control System MSC Encoder Resolution: Entry for the number of pulses/revolution (for a rotary sensor) or μm/pulse (for a linear sensor) in relation to the 1st measuring device. Verification: In this field, you can enter the number of pulses/revolution (for a rotary sensor) or µm/pulse (for a linear sensor) in relation to the 2nd measuring device.
A small circle then appears on the inverted input. To clear the inversion, simply click the same input again. Important! The maximum permissible number of function blocks is 64 with MSC-CB or 128 with MSC-CB-S. 9.4.1. Logical operators 9.4.1.1.
Operating Instructions Modular Safety Control System MSC 9.4.1.4. The logical operator OR produces an output of “1” (TRUE) if at least one of the inputs is “1” (TRUE). Figure 146: OR Parameters Inputs number: Use this option to set 2 to 8 inputs.
Operating Instructions Modular Safety Control System MSC 9.4.1.7. XNOR The logical operator XNOR produces an output of “0” (FALSE) if the number of inputs that are “1” (TRUE) is even or if all inputs are “0” (FALSE). Figure 149: XNOR Parameters Inputs number: Use this option to set 2 to 8 inputs.
Parameters Inputs number: Use this option to set 2 to 4 inputs. 9.4.1.10. Digital comparator (DIGITAL COMPARATOR) (only with MSC-CB-S) The DIGITAL COMPARATOR operator can compare a signal group in binary format with a constant or with a second signal group.
Page 142
Operating Instructions Modular Safety Control System MSC Operator Description The OUTPUT output is “1” (TRUE) if the value combined from the inputs is equal to the constant. Equal to (=) If the two values are not equal, the OUTPUT output = “0” (FALSE).
Status changes are performed according to the truth tables given for each operator. 9.4.2.1. D FLIP FLOP (max. number = 16 with MSC-CB, max. number = 32 with MSC-CB-S) Using the D FLIP-FLOP operator the status set previously on the Q output is saved according to the following truth table.
Save output status: If this is selected, the output status of the flip-flop is saved in the non-volatile memory on every change. The most recently saved value is restored with the MSC system is switched on. Up to 8 flip-flops with storage of the output status are possible.
Page 145
Operating Instructions Modular Safety Control System MSC 9.4.2.5. Monitored restart (USER RESTART MONITORED) (max. number = 16 with MSC-CB, max. number = 32 with MSC-CB-S including other RESTART operators) Using the USER RESTART MONITORED operator the restart signal is saved as per the following truth table.
Operating Instructions Modular Safety Control System MSC 9.4.2.6. Manual restart macro (MACRO RESTART MANUAL) (max. number = 16 with MSC-CB, max. num- ber = 32 with MSC-CB-S including other RESTART operators) Using the MACRO RESTART MANUAL operator, a logic block selected by the user can be combined with the manual restart function block (“USER RESTART MANUAL”) as per the following truth table:...
Operating Instructions Modular Safety Control System MSC 9.4.2.7. Macro monitored restart (MACRO RESTART MONITORED) (max. number = 16 with MSC-CB, max. number = 32 with MSC-CB-S including other RESTART operators) Using the MACRO RESTART MONITORED operator, a logic block select- ed by the user can be combined with the monitored restart function block (“USER RESTART MONITORED”) as per the following truth table:...
Modular Safety Control System MSC 9.4.2.8. PRE-RESET (only MSC-CB-S, max. number = 32 including other restart operators) The PRE-RESET operator can be used if several reset buttons must be used. For example, it may be necessary to locate a restart switch (pre-reset) in the danger zone (at a point from which the entire zone is visible) and a restart switch (reset) outside the danger zone.
Modular Safety Control System MSC 9.4.3. Guard locking operators 9.4.3.1. Guard locking logic (GUARD LOCK) (max. number with MSC-CB = 4, max. number with MSC-CB-S = 8) Using the GUARD LOCK operator the locking/release of an ELEC- TROMECHANICAL GUARD LOCK is monitored. For this purpose it is checked whether the locking command and the status of an INTER- LOCK and FEEDBACK match.
Page 150
Operating Instructions Modular Safety Control System MSC Unlock Time (s): The time that elapses between the activation of the Unlock_cmd input and the actual release of the locking. Ì 0 ms to 1 s – 100 ms step Ì 1.5 s to 10 s – 0.5 s step Ì...
Operating Instructions Modular Safety Control System MSC 9.4.4. COUNTER operators The operators of type COUNTER enable the user to generate a signal (TRUE) as soon as the count entered is reached. 9.4.4.1. Counter (COUNTER) (max. number = 16) The COUNTER operator is a pulse counter.
Counter status: If selected, the current counter value can be forwarded via the COUNTER output to the COUNTER COMPAR- ATOR block. 9.4.4.2. Timer value comparison (COUNTER COMPARATOR) (only MSC-CB-S and MSC-CB ≥ 4.0) The COUNTER COMPARATOR operator enables the Counter output of the COUNTER operator to be compared with a threshold.
Operating Instructions Modular Safety Control System MSC 9.4.5. TIMER operators (max. number = 32 with MSC-CB, max. number = 48 with MSC-CB-S) Using the operators of type TIMER a signal (TRUE or FALSE) can be generated for a user-defined time.
Operating Instructions Modular Safety Control System MSC 9.4.5.2. MONOSTABLE_B Using this operator, an output of “1” (TRUE) is generated by the ris- ing/falling edge of the input. This state is retained for the time t set. Parameters Time: The delay can be set to a value between 10 ms and 1,098.3 s.
Operating Instructions Modular Safety Control System MSC 9.4.5.3. Passing make contact (PASSING MAKE CONTACT) The PASSING MAKE CONTACT operator provides the signal present on the input as a pulse on the output. If this signal is “1” (TRUE) longer than the set time, the pulse is limited to the set time. The pulse is truncated with a falling edge.
Operating Instructions Modular Safety Control System MSC 9.4.5.4. Delay (DELAY) The DELAY operator makes it possible to use a signal delay and switches the output to “1” (TRUE) after the time set if the status of the signal on the input changes.
Modular Safety Control System MSC 9.4.5.5. Long-term delay (LONG DELAY) (only MSC-CB-S and MSC-CB ≥ 4.0) The LONG DELAY operator makes it possible to use a signal delay of up to 15 hours and switches the output to “1” (TRUE) after the time set if the status of the signal at the input changes.
Operating Instructions Modular Safety Control System MSC 9.4.5.6. Timer value comparison (DELAY COMPARATOR) (only MSC-CB-S and MSC-CB ≥ 4.0) The DELAY COMPARATOR operator enables the Timer output of the Timer operators to be compared with a threshold. If the timer value of the Timer operator is less than the threshold, the output is “0”...
¨ 9.4.5.8. Long-term delay line (LONG DELAY LINE) (only MSC-CB-S and MSC-CB ≥ 4.0) The operator makes it possible to use a signal delay and switches the output to “0” (FALSE) after a time set (up to 15 hours) if there is no signal at the input.
Operating Instructions Modular Safety Control System MSC 9.4.5.9. Clock generation (CLOCKING) Using the CLOCKING operator a clock signal output with the required duration is generated if the input is “1” (TRUE). Up to 7 inputs are available on the Clocking operator to control the duty cycle on the output.
In other words, when the system detects the material and differentiates it from a person (in a potentially hazardous situation), it bypasses the safety device temporarily to permit the material to pass through the opening. 9.4.7. MUTING operators (max. number = 4 with MSC-CB, max. number = 8 with MSC-CB-S) 9.4.7.1.
Page 162
Operating Instructions Modular Safety Control System MSC CURTAIN selected Input Muting Muting activated Table 79: Status table simultaneous muting with CURTAIN selected SENSOR selected Input Muting Muting activated Table 80: Status table simultaneous muting with SENSOR selected Blind Time: Only with “Muting Closing = Curtain”: Should be selected if, for instance, it is known that after the end of the muting, objects may protrude beyond the pallet and may occupy the light grid, as a result the INPUT input is set to “0”...
Operating Instructions Modular Safety Control System MSC 9.4.7.2. MUTING “L” The muting function is activated after the interruption of the sensors S1 and S2 (the sequence is irrelevant) within the period defined by the operator of between 2 s and 5 s.
Operating Instructions Modular Safety Control System MSC 9.4.7.3. “Sequential” MUTING The muting function is activated after the sequential interruption of the sensors S1 and S2, followed by sensors S3 and S4 (without any time limit). If the pallet moves in the opposite direction, the correct sequence is: S4, S3, S2, S1.
Page 165
Operating Instructions Modular Safety Control System MSC CURTAIN selected Input Muting Muting activated Table 81: Status table sequential muting with CURTAIN selected SENSOR selected Input Muting Muting activated Table 82: Status table sequential muting with SENSOR selected Blind Time: Only with “Muting Closing = Curtain”: Should be selected if, for instance, it is known that after the end of the muting, objects may protrude beyond the pallet and may occupy the light grid, as a result the INPUT input is set to “0”...
Operating Instructions Modular Safety Control System MSC 9.4.7.4. MUTING “T” The muting function is activated after the interruption of the sensors S1 and S2 (the sequence is irrelevant) within the period defined by the operator of between 2 s and 5 s.
Operating Instructions Modular Safety Control System MSC 9.4.7.5. MUTING OVERRIDE The OVERRIDE function is necessary if the machine stops after erro- neous sequences of the muting activation and material is occupying the hazardous opening. This process activates the OUTPUT output and in this way makes it possible to remove the material that is blocking the opening.
Page 168
Operating Instructions Modular Safety Control System MSC Timeout (s): Permits the setting of the time within which the override function must be ended from 10 s to infinite. Override Mode: Makes it possible to configure the start of the override function (pulsed or state triggered).
Operating Instructions Modular Safety Control System MSC 9.5. Other function blocks 9.5.1. Serial output (SERIAL OUTPUT) (max. number = 4) Using the SERIAL OUTPUT operator the status of up to 8 sensors is output; the data are output in series.
Parameters External K delay (ms): Time window for monitoring the external feedback signal (on the state of the output). Enable Clear: If activated, the error can be cleared without having to restart the MSC. 9.5.3. TERMINATOR The TERMINATOR operator makes it possible to add an input that is not used in the program.
Principle of operation Using this operator you can straightforwardly distribute STOP and RESET commands via a local MSC network. Figure 206: Network The following conditions must be met for the “Network” operator: 1. The input connected to a single or double Network_In input must be connected to the Network_OUT output on the previous module in the network.
Page 172
Operating Instructions Modular Safety Control System MSC Application example: Figure 207: Application example, network Condition 1: During switch-on, see Figure 207: The OUTPUTS on the various nodes are in the state “0” (FALSE). 2. The STOP signal is sent via the Network_OUT cable.
Page 173
Operating Instructions Modular Safety Control System MSC Response time: The maximum response time of the network starting with the triggering of the emergency stop is determined using the following formula: = 212 ms*n°Master – 260 ms The maximum number of base units connected must not be more than 10.
Page 174
Operating Instructions Modular Safety Control System MSC Figure 209: Application example for the NETWORK function block (category 2) Figure 210: Application example for the NETWORK function block (category 4) (Translation of the original operating instructions) 2121331-08-07/22...
Operating Instructions Modular Safety Control System MSC 9.5.5. Reset (RESET) This operator generates a system reset if there is an OFF-ON-OFF transition with a duration of less than 5 s on the corresponding input. t < 5 s Figure 211: Reset duration...
Modular Safety Control System MSC 9.5.7. Input/output for internal feedback (max. number = 8, only MSC-CB-S ≥ 6.0) The IntFbk In/Out operators can be used to create logical loops or to connect the output of a function block with the input of another function block.
Operating Instructions Modular Safety Control System MSC 9.6. Special applications 9.6.1. Output delay with manual operating mode If two OSSD outputs are required and one output is to be delayed (in the MANUAL operating mode), the following diagram is to be used:...
You will find the safety parameters for MSC configuration in the report from the EUCHNER SAFETY DESIGNER software. In the toolbar at the top there are two new green icons (from firmware MSC-CB version 3.0 or higher): Figure 217: The icons for the simulator function These icons relate to the new simulator function.
Operating Instructions Modular Safety Control System MSC 9.7.1. Schematic simulation Activate the schematic simulation by clicking the icon. The schematic simulation permits the checking/controlling of the signal on the output from the various function blocks in real time, i.e. during the actual simulation. The user can select as required which outputs on the blocks are to be operated and check the reaction of the different elements of the schematic diagram based on the color of the different lines.
Page 180
Operating Instructions Modular Safety Control System MSC By clicking the button at the bottom right corner of each input block, the related output status can be activated (also if the simulation is interrupted, i.e. if the time is not running – the simulation is then “static”). If the button is red after clicking it, the output is “0”...
Operating Instructions Modular Safety Control System MSC 9.7.2. Administration of the graphic simulation Activate the graphic simulation by clicking the icon. The graphic simulation makes it possible to show the change in the signals graphically. The user must first specify in a text file the stimuli, i.e.
Page 182
Operating Instructions Modular Safety Control System MSC After you click the icon, the following screen appears: Figure 221: Selection menu for the graphic simulation mode The individual buttons on the menu are described in detail in the following (see Figure 45): Template Stimuli button: Makes it possible to save the template file with the required name in the required storage location on the hard disk.
Page 183
Operating Instructions Modular Safety Control System MSC Simulation with stimuli button: Makes it possible to upload a (completed) template file. The simulation can be started immediately after uploading. A diagram with the resulting signals is displayed at the end of the simulation.
Operating Instructions Modular Safety Control System MSC 9.7.2.1. Application example for the graphic simulation The following example relates to the use of a press that has been installed inside a safety zone. The motor of the press can be operated only if two conditions are met at the same time: the gate of the safe area is closed and the motor activation command has been issued.
Page 185
Operating Instructions Modular Safety Control System MSC Result of the simulation The signals from the simulation are shown in the diagram. In this case: Ì At 2,000 ms, the “Safe Zone” signal changes to logic level 1. It indicates the closing of the gate.
Modular Safety Control System MSC 9.7.3. MSC error codes If there is a malfunction, the MSC system sends a code that corresponds to the error detected by the base unit to the EUCHNER Safety Designer software. The code can be read as follows: Ì...
(required password: level 1) A table is displayed with the last 5 errors that have occurred since the scheme was last sent to the MSC or the last time the error log was deleted (icon:...
WARNING Danger of severe injuries due to the loss of the safety function. Ì If damage or wear is found, the respective MSC module must be completely replaced. Replace- ment of individual parts or assemblies is not permitted. Ì Check the device for proper function at regular intervals and after every fault. For information about possible time intervals, refer to EN ISO 14119:2013, section 8.2.
Need help?
Do you have a question about the MSC and is the answer not in the manual?
Questions and answers