User Manual Contents GFK-2734A Dec 2019 Contents Chapter 1: For your safety ............1 General safety notes .................... 1 Electrical safety ....................2 Safety of the machine or system ................4 Directives and standards..................5 Correct usage ...................... 5 Documentation ....................6 Abbreviations used ....................
Page 3
User Manual Contents GFK-2734A Dec 2019 Supply voltage UM..................... 25 Supply voltage U ....................26 Terminal point assignment ................27 Internal basic circuit diagram ................29 Chapter 4: Assembly, removal, and electrical installation ..31 Assembly and removal ..................31 4.1.1 Unpacking the module ................
Page 4
User Manual Contents GFK-2734A Dec 2019 Single-channel operation ................... 75 7.1.1 Determining PFD for single-channel operation ........75 7.1.2 Determining PFH for single-channel operation ........75 Two-channel operation ..................76 7.2.1 Determining PFD for two-channel operation ........... 76 7.2.2 Determining PFH for two-channel operation ........... 77 7.2.3 Determining MTTF d for two-channel operation ........
Page 5
User Manual Contents GFK-2734A Dec 2019 11.4.1 Ordering data: Safety module ............... 101 11.4.2 Ordering data: Accessories ..............101 11.4.3 Ordering data: Documentation ............. 101 Appendix A: PROFIsafe terms used in the manual ....103 Appendix B: F-Parameters and iParameters ......105 F-Parameters ....................
Page 6
Changes, modifications, and/or improvements to equipment and specifications are made periodically and these changes may or may not be reflected herein. It is understood that Emerson may make changes, modifications, or improvements to the equipment referenced herein or to the document itself at any time.
User Manual Chapter 1 GFK-2734A Dec 2019 Chapter 1: For your safety Purpose of this manual The information in this document is designed to familiarize you with how the IC220SDL840 safety module works, its operating and connection elements, and its parameter settings. This information will enable you to use the module within a VersaSafe or PROFIsafe system according to your requirements.
Do not carry out any Repair work may not be carried out on the safety module. repairs In the event that an error cannot be removed, please contact Emerson immediately, engage a service engineer or send the faulty module directly to Emerson Do not open the It is strictly prohibited to open the safety module housing.
Page 9
User Manual Chapter 1 GFK-2734A Dec 2019 WARNING Dangerous contact voltage Hazardous voltages may occur at the relay contacts of the safety module. Failure to observe these instructions can lead to damage to health or even life-threatening injury. − Work on the safety module may only be carried out by qualified personnel who are familiar with the necessary safety precautions.
User Manual Chapter 1 GFK-2734A Dec 2019 WARNING Depending on the application, incorrect installation and upgrades can pose serious risks for the user. The user is obliged to design the devices used and their installation in the system according to these requirements.
EC declaration of conformity. These documents are available on the Internet at https://www.emerson.com/Industrial-Automation-Controls/support Correct usage Only use the VersaSafe or PROFIsafe system in accordance with the instructions in this section.
Documentation Latest documentation Make sure you always use the latest documentation. Changes or additions to this document can be found on the Internet at https://www.emerson.com/Industrial-Automation- Controls/support VersaSafe When working on the VersaSafe system and its components, you must always keep this user manual and other items of product documentation to hand and observe the information therein.
Page 13
User Manual Chapter 1 GFK-2734A Dec 2019 Abbreviation Meaning PELV Protective extra-low voltage A circuit in which the voltage does not exceed 30 V AC, 42.4 V peak value or 60 V DC under normal conditions or single-fault conditions, except in the event of grounding errors in other circuits.
User Manual Chapter 2 GFK-2734A Dec 2019 Chapter 2: Product description Brief description of the safety module The IC220SDL840 module is an output module, which is designed for use within a VersaPoint station. The IC220SDL840 safety module can be used as part of a VersaPoint station at any point within a VersaSafe or PROFIsafe system.
User Manual Chapter 2 GFK-2734A Dec 2019 Structure of the safety module Figure 1 Structure of the safety module 1. Data jumpers (local bus) 2. Electronics base with labeling including hardware/firmware/firmware version designation (not shown) 3. Switch for setting the transmission speed and mode 4.
User Manual Chapter 2 GFK-2734A Dec 2019 Housing dimensions Figure 2 Housing dimensions (in mm) Safe digital relay outputs (floating contacts) The safety module has four safety relays each with two floating relay contacts (relay outputs), which can be used as follows: For two-channel assignment: Two two-channel relay outputs —...
Page 17
User Manual Chapter 2 GFK-2734A Dec 2019 Terminal point assignment (For connections, see " " on page 27) Technical data Technical For the technical data for the safe relay outputs, please refer to data and ordering data page 91. Fuse protection Protect the relay outputs against overcurrent with a suitable fuse.
Observe the specifications for the safety-related segment circuit in the "Safety-related segment Ordering data: Documentation circuit" application note (see Section " " on page 101). The application note includes lists of approved terminals, requirements for wiring, and safety notes. The document is available on the Internet at https://www.emerson.com/Industrial-Automation- Controls/support Product description...
User Manual Chapter 2 GFK-2734A Dec 2019 Clock outputs UT1 and UT2 The module has two clock outputs, UT1 and UT2, which only operate together with the assigned alarm inputs, IN1 and IN2. The clock outputs provide the input voltage for the alarm inputs. Each of these clock outputs provides a pulse pattern for monitoring the external wiring and the connected loads.
Page 20
User Manual Chapter 2 GFK-2734A Dec 2019 Important Alarm inputs IN1 and IN2 can only be assigned to an output once. Parallel connection of the alarm contacts is not permitted. Technical data For the technical data for the alarm inputs, please refer to page Error detection and The status of the alarm inputs is constantly compared with the behavior in the...
User Manual Chapter 2 GFK-2734A Dec 2019 Connection options for actuators depending on the parameterization Actuators that meet various safety requirements depending on the parameterization can be connected to the relay outputs and the output modules in the safety-related segment circuit.
User Manual Chapter 2 GFK-2734A Dec 2019 Local diagnostic and status indicators Figure 4 Local diagnostic and status indicators on the IC220SDL840 module Function identification: Dark red Table 2 Local diagnostic and status indicators Green LED Diagnostics OFF: Communications power not present Flashing at 0.5 Hz: Communications power present, local bus not active Flashing at 4 Hz: Communications power present, error at the interface...
User Manual Chapter 2 GFK-2734A Dec 2019 Table 3 Local diagnostic and status indicators [...] Green/red LED Status of each relay output (see "Terminal point assignment" on page 27) 0.1, 0.2 0.1 Relay output 0, channel 1; 0.2 Relay output 0, channel 2 1.1, 1.2 1.1 Relay output 1, channel 1;...
User Manual Chapter 2 GFK-2734A Dec 2019 Important PROFIsafe: The safe state for the F-Output data is "0". The safe state is entered by means of passivation (see "Passivation on page 104). The safe state can be entered in the following cases: 1.
User Manual Chapter 2 GFK-2734A Dec 2019 2.10.3 Device errors Relay outputs If a hardware fault in the internal circuit is detected at a relay output, all module relay outputs are disabled ("0" = OFF = safe state). The relevant diagnostic message is transmitted to the safe controller (see Section "Safe digital relay output errors"...
User Manual Chapter 2 GFK-2734A Dec 2019 2.10.4 Parameterization errors Parameterization errors are indicated: As long as the module is not parameterized — In the event of faulty parameterization — Parameterization errors cause the entire module to enter the safe state. The FS LED on the safety module flashes.
Page 27
User Manual Chapter 2 GFK-2734A Dec 2019 Feedback data The bits in this register mirror the states of the digital outputs as diagnostic data. This data can be used if an output has been parameterized with a switch-off delay. In this case, the feedback data can be used to determine the actual state of the output and derive information for the standard control process from this.
User Manual Chapter 2 GFK-2734A Dec 2019 Important The enable function is not graphically represented in VersaConf Safety in the safety logic editor. Parameterize the enable function when parameterizing the channels The following figure illustrates the enable principle. Figure 5 Enable principle (example) PSDO_OUT_Data Output data from the configurable logic module to the IC220SDL840...
User Manual Chapter 2 GFK-2734A Dec 2019 2.13 Programming data/configuration data 2.13.1 Local bus VersaSafe PROFIsafe Mode switch Mode 2 Mode 1 ID code (167 (203 Length code Input address area Controller-specific Controller-specific Output address area Controller-specific Controller-specific Parameter channel (PCP) 0 words 1 word Register length...
User Manual Chapter 3 GFK-2734A Dec 2019 Chapter 3: VersaPoint potential and data routing, and VersaPoint connectors VersaPoint potential and data routing In order to operate the safety module it must be integrated in a VersaPoint station within the VersaSafe or PROFIsafe system. The bus signals are transmitted via the VersaPoint data jumpers.
User Manual Chapter 3 GFK-2734A Dec 2019 The supply voltage U is used to supply the communications power and the relays. For the technical data for the supply voltage U , please refer to Chapter "Supply voltage UM (clock outputs)" on page 95. The maximum current carrying capacity for the supply voltage U is 2 A.
User Manual Chapter 3 GFK-2734A Dec 2019 Figure 6 Supply UM with connection to functional earth ground according to EN 60204-1 WARNING Loss of functional safety due to parasitic voltages Supply the supply voltages U and U at a bus coupler and/or a power terminal from the same power supply unit, so that the loads of IC220SDL840 are not affected by parasitic voltages in the event of an error.
User Manual Chapter 3 GFK-2734A Dec 2019 In order to use the interrupted segment circuit, the segment voltage must be supplied again. The following options are available: Insert a jumper between terminal points 3.1 (U ) and 4.1 (U — Insert a segment or power terminal after the safety module —...
Page 34
User Manual Chapter 3 GFK-2734A Dec 2019 WARNING Loss of electrical and functional safety if potential areas are not observed There is no safe isolation between the contacts of a COMBICON connector. Only connect one voltage range to a COMBICON connector. See also Figure 3 "Basic representation of the relay outputs".
User Manual Chapter 3 GFK-2734A Dec 2019 Table 9 Terminal point assignment for COMBICON connector X3 Terminal Signal Channel assignment Remark point OUT0_Ch1_23 Relay output 0, channel 1, contact 23 24 V or 250 V OUT0_Ch1_24 Relay output 0, channel 1, contact 24 24 V or 250 V OUT0_Ch2_23 Relay output 0, channel 2, contact 23 24 V or 250 V...
Page 36
User Manual Chapter 3 GFK-2734A Dec 2019 Optocoupler Cable(s); x indicates the number of cables COMBICON connection Forcibly guided N/O contact VersaPoint potential and data routing, and VersaPoint connectors...
User Manual Chapter 4 GFK-2734A Dec 2019 Chapter 4: Assembly, removal, and electrical installation Assembly and removal 4.1.1 Unpacking the module The module is supplied in an ESD box together with a package slip with installation instructions. Please read the complete package slip carefully. The module may only be installed and removed by qualified personnel.
User Manual Chapter 4 GFK-2734A Dec 2019 4.1.3 Setting the DIP switches The module has a 2-pos. and a 10-pos. DIP switch. The DIP switches are located on the left-hand side of the safety module. Figure 9 DIP switches Switch for setting the transmission speed and the mode Switch for setting the protocol or the address (for PROFIsafe, VersaSafe) 2-pos.
User Manual Chapter 4 GFK-2734A Dec 2019 The DIP switch is set to 3FF by default. This address is not valid for a VersaSafe or PROFIsafe system, therefore a valid address must be set. Overview of the switch Table 11 Switch position for VersaSafe positions VersaSafe Mode switch Address switch...
Page 40
User Manual Chapter 4 GFK-2734A Dec 2019 Mounting Important – Set the DIP switches prior to assembly (see Section "Setting the DIP switches" on page 32). The DIP switches cannot be accessed when the safety module is installed in the VersaPoint station.
Page 41
User Manual Chapter 4 GFK-2734A Dec 2019 Insert — Important connectors Only use the connectors supplied with the module or connectors that are approved as replacement items (see "Ordering data: Accessories on page 101). • Insert the connectors in the specified order (A, B). Inserting the —...
Page 42
User Manual Chapter 4 GFK-2734A Dec 2019 Removing the • Remove the connectors by pressing the back shaft latching — (A) and levering off the connector (B). VersaPoint connectors Figure 12 Removing the connector Removing the — Important COMBICON connectors The module can be removed without removing the COMBICON connectors.
User Manual Chapter 4 GFK-2734A Dec 2019 Electrical installation WARNING Electric shock/unintentional machine startup Prior to electrical installation, disconnect the power to the system and make sure that it cannot be switched on again unintentionally. Make sure installation has been completed before switching the power back on. The system may only be started provided the system does not pose a hazard.
Page 44
Push a screwdriver into the slot of the appropriate terminal point (Figure 14 detail 1), so that you can insert the wire into the spring opening. Emerson recommends using a SZF 1 - 0.6X3.5 screwdriver. • Insert the cable in the corresponding terminal point of the connector (Figure 14, detail 2).
Page 45
User Manual Chapter 4 GFK-2734A Dec 2019 WARNING A short circuit between adjacent terminal points can lead to the loss of the safety function Ensure that the wires are connected properly. This is essential to prevent the error "short circuit between adjacent terminal points/cables".
User Manual Chapter 5 GFK-2734A Dec 2019 Chapter 5: Parameterization of the safety module Parameterization in a VersaSafe system Parameterization includes the following: Specifying the VersaSafe address for the corresponding configurable logic — module Parameterization of outputs — VersaSafe address The VersaSafe address is a unique ID for the safety module in the VersaSafe structure.
User Manual Chapter 5 GFK-2734A Dec 2019 Parameterization in a PROFIsafe system Parameterization includes the following: Assigning the PROFIsafe address via the configuration software of the control — system manufacturer Parameterization of outputs — Specifying the parameterizable F-Parameters and iParameters —...
User Manual Chapter 5 GFK-2734A Dec 2019 Parameterization of the safe relay outputs The individual outputs of a safety module can be parameterized differently and thus achieve different safety integrity levels (SIL, SIL CL, Cat., PL). Two-channel If the relay outputs are operated via two channels, the following fixed assignment applies: OUT0_Ch1 to OUT0_Ch2 —...
Page 49
User Manual Chapter 5 GFK-2734A Dec 2019 Parameterization Value range Remark OUT0 - OUT1 Do not evaluate Assignment to alarm input IN2 for monitoring the external wiring and external power gain (e.g., Evaluate contactors). If IN2 is activated, both the internal alarm contacts of the safety relay and the status of input IN2 are detected.
User Manual Chapter 5 GFK-2734A Dec 2019 Two-channel Please note the following for two-channel parameterization: parameterization Ensure that the values for the switch-off delay for stop category 1 are the same for both channels. This means that the time must have the same value and the same value range.
User Manual Chapter 5 GFK-2734A Dec 2019 WARNING Incorrect design of safety distances due to incorrect values of the parameterized switch- off delay When designing the safety distances, please take into consideration the following: The shutdown time of the outputs is the parameterized switch-off delay time. For the switch-off operation, please take into consideration the following: The switch-off operation can be interrupted by switching the output on again.
The following examples only describe the options for the electrical connection of controlled devices/actuators to the safe relay outputs. Should you have any questions regarding applications to be implemented, please contact Emerson. The following are specified for each example: Basic specifications —...
Page 53
User Manual Chapter 7 GFK-2734A Dec 2019 Table 14 Parameterization tables Representation Meaning Bold Mandatory setting Normal Typical setting, another setting is possible depending on the application – Not evaluated Errors (cross circuits, short circuits), which can be prevented by correct installation (e.g., protected cable installation, isolated cable installation, double insulation, use of ferrules) are not described in the following tables.
User Manual Chapter 7 GFK-2734A Dec 2019 Notes on the protective circuit for external relays/contactors (free running circuit) Figure 15 Example of the free running circuit for an external relay A protective circuit via the relay contacts is not permitted. Measures required to achieve a specific safety integrity level The safety integrity level (SIL, SIL CL, performance level, and category) that can be...
Page 55
User Manual Chapter 7 GFK-2734A Dec 2019 Please note that a single error can result in the loss of the — safety function between tests. Ensure that the external wiring is tested by the machine — control system on machine startup and at suitable intervals. This test must detect the loss of the safety function.
User Manual Chapter 7 GFK-2734A Dec 2019 All errors (e.g., cross circuits) that cannot be detected can — result in the loss of the safety function. Take appropriate measures to prevent such errors. Suitable measures include, for example, protected cable installation or double insulation.
Page 57
User Manual Chapter 7 GFK-2734A Dec 2019 The illustrated 24 V voltage is not provided by the VersaPoint station. Important The illustrated 24 V voltage is not provided by the VersaPoint station. Basic specifications Actuator Single-channel Achievable SIL 2/SIL CL 2/Cat. 2/PL c SIL/SIL CL/Cat./PL External errors that If alarm inputs IN1 or IN2 are used:...
Page 58
User Manual Chapter 7 GFK-2734A Dec 2019 Device diagnostics and behavior of the module in the event of an error Table 15 Single-channel: Alarm input assigned Error type Detection Diagnostics Loss of SF Remark Error in the actuator Despite being Please take into consideration disabled, the all the possible errors for the...
Page 59
User Manual Chapter 7 GFK-2734A Dec 2019 Error type Detection Diagnostics Loss of SF Remark Short Circuit Output to 24 V The error is detected in the OFF state of the output. Prevent this error. Output to ground The error is detected in the ON state of the output.
Page 60
User Manual Chapter 7 GFK-2734A Dec 2019 Device diagnostics and behavior of the module in the event of an error Table 17 Single-channel: Alarm input assigned Error type Detection Diagnostics Loss of SF Remark Error in the actuator Despite being None Detect errors using external disabled, the actuator...
User Manual Chapter 7 GFK-2734A Dec 2019 Typical parameterization Table 18 Single-channel: No alarm input assigned; typical parameterization Parameterization Parameterized as Remark Assignment Used Output Single-channel Alarm input IN1 Evaluate Or do not evaluate Alarm input IN2 Do not evaluate Or evaluate Switch-off delay for stop Enabled...
Page 62
User Manual Chapter 7 GFK-2734A Dec 2019 Figure 17 Two-channel assignment of floating contacts with common readback WARNING Failure of the safety relay contacts due to overload Protect all safety relay contacts against overload with suitable fuses (see "Safe digital relay outputs"...
Page 63
User Manual Chapter 7 GFK-2734A Dec 2019 These contacts can also be read via safe digital inputs. In this case, evaluate the readback and thus the state of the switching elements in your safe application program. When calculating the SIL values for both alternatives, take the different failure rates into consideration.
Page 64
User Manual Chapter 7 GFK-2734A Dec 2019 WARNING Loss of electrical and functional safety – To achieve the specified safety integrity level, please refer to Section "Measures required to achieve a specific safety integrity level" on page 48. – Please note that in order to achieve the specified PL, the actuator must have a medium level of diagnostic coverage (90% to 99%) and medium MTTF .
Page 65
User Manual Chapter 7 GFK-2734A Dec 2019 Error type Detectio Diagnostic Loss of SF Remark Other errors (depending on Please take into consideration the actuator) all possible errors that can occur in the actuator. Error in the wiring Interrupt Cable interrupt between Ensure that this error does not output and actuator or result in delayed system...
User Manual Chapter 7 GFK-2734A Dec 2019 Parameterization Parameterized as Remark Channel 1 Channel 2 Switch-off delay for stop category 1 Application- specific Value range of switch-off delay for stop Value in s Value in s Application- category 1 specific Enable (VersaSafe only) Enabled Enabled...
Page 67
User Manual Chapter 7 GFK-2734A Dec 2019 Key: Alternative A B Alternative OUT0_Ch1_13 Output 0, channel 1, contact 13 OUT0_Ch1_14 Output 0, channel 1, contact 14 OUT0_Ch2_13 Output 0, channel 2, contact 13 OUT0_Ch2_14 Output 0, channel 2, contact 14 UT1 (UT2) Clock output UT1 or UT2 IN1 (IN2)
Page 68
User Manual Chapter 7 GFK-2734A Dec 2019 External wiring The user is responsible for error analysis for the connected loads and for the external wiring. requirements WARNING Loss of electrical and functional safety – To achieve the specified safety integrity level, please refer to Section "Measures required to achieve a specific safety integrity level"...
Page 69
User Manual Chapter 7 GFK-2734A Dec 2019 Error type Detection Diagnostics Loss of SF Remark Short circuit of an The error is detected in the ON N/C contact state of the outputs. The outputs are disabled. Other errors Please take into consideration all possible errors that can occur (depending on the in the actuator.
User Manual Chapter 7 GFK-2734A Dec 2019 Typical parameterization Table 21 Two-channel with monitoring by two alarm inputs; typical parameterization Parameterization Parameterized as Remark Channel 1 Channel 2 Assignment Used Used Output Two-channel Two-channel Alarm input IN1 Evaluate Do not Or do not evaluate evaluate/evaluate...
Page 71
User Manual Chapter 7 GFK-2734A Dec 2019 Figure 19 Internal and external wiring of the IC220SDL840 for the use of the safetyrelated segment circuit Key: Standard VersaPoint IL SAFE Safety-related segment circuit Power terminal with fuse or power terminal with fuse and diagnostics (see "Ordering data: Documentation"...
User Manual Chapter 7 GFK-2734A Dec 2019 Red (bold) External wiring to the safety terminal (by the user) GND* Separate cable ≥ 0.75 mm to power supply unit GND Notes on wiring: Additional ground cable Connect an additional separate ground cable between the ground of the power supply unit and terminal point 1.1 or 2.1 (GND) of the safety terminal.
Page 73
User Manual Chapter 7 GFK-2734A Dec 2019 Figure 20 Single-channel actuators in the safety-related segment circuit Key: IL SAFE: Safety-related segment circuit K11 (R) represents the forcibly guided N/C contact of the relay. Connect this contact via a safe digital input. Evaluate the readback and thus the state of the switching element in your safe application.
Page 74
User Manual Chapter 7 GFK-2734A Dec 2019 Important To achieve the specified category, please refer to Section "Measures required to achieve a specific safety integrity level" on page 48. Device diagnostics and behavior of the module in the event of an error Table 22 Safety-related segment circuit: Assignment with single-channel actuators Error type Detection Diagnostics...
Page 75
User Manual Chapter 7 GFK-2734A Dec 2019 Error type Detection Diagnostics Loss of Remark Output to output (only None A cross circuit between the safety-related segment outputs cannot be detected. circuit outputs) This is not critical since in the event of a safety demand, all actuators connected to the safety-related segment circuit are switched...
User Manual Chapter 7 GFK-2734A Dec 2019 Typical parameterization Table 23 Safety-related segment circuit: Assignment with single-channel actuators; typical parameterization Parameterization Parameterized as Remark Channel 1 Channel 2 Assignment Used Used Output Two-channel Two-channel Alarm input IN1 Do not evaluate Do not evaluate Alarm input IN2 Do not evaluate Do not evaluate Switch-off delay for stop...
Page 77
User Manual Chapter 7 GFK-2734A Dec 2019 Figure 21 Two-channel actuators in the safety-related segment circuit K11 (R) and K12 (R) represent the forcibly guided N/C contacts of the relay. Connect these contacts via safe digital inputs. Evaluate the readback and thus the state of the switching elements in your safe application.
Page 78
User Manual Chapter 7 GFK-2734A Dec 2019 Important – To achieve the specified category, please refer to Section "Measures required to achieve a specific safety integrity level" on page 48. – Evaluate the readback contacts to achieve Cat. 3 or Cat. 4.The loads can also be connected in parallel to one standard output Device diagnostics and behavior of the module in the event of an error Error type...
Page 79
User Manual Chapter 7 GFK-2734A Dec 2019 Error type Detection Diagnostics Loss of SF Remark Output to output None A cross circuit between the outputs (only safety- cannot be detected. This is related segment not critical since in the event of a circuit outputs) safety demand, all actuators connected to the safety-related...
Page 80
User Manual Chapter 7 GFK-2734A Dec 2019 Parameterization Parameterized as Remark Channel 1 Channel 2 Switch-off delay for stop Enabled Enabled Or disabled category 1 Switch-off delay for stop Application-specific category 1 Value range of switch-off Value in s Value in s Application-specific delay for stop category 1 Enable (VersaSafe only)
User Manual Chapter 7 GFK-2734A Dec 2019 Chapter 7: Determining PFH, PFD, and MTTF Probability of Failure per Hour Probability of Failure on Demand MTTF Mean time to dangerous failure Single-channel operation 7.1.1 Determining PFD for single-channel operation The value always refers to one internal safety relay (see assignment of outputs to the safety relay in Section "Terminal point assignment"...
User Manual Chapter 7 GFK-2734A Dec 2019 Figure 22 PFH values depending on switching frequency c 7.1.3 Determining MTTFd for single-channel operation The value for MTTFd depends on the load for the contacts and the switching frequency. In this section, the values are given for single-channel assignment, and these values only refer to one internal safety relay.
User Manual Chapter 7 GFK-2734A Dec 2019 7.2.2 Determining PFH for two-channel operation The value for PFH depends on the load for the contacts and the switching frequency. In this section, the values are given for two-channel assignment, and these values refer to two internal safety relays.
User Manual Chapter 7 GFK-2734A Dec 2019 7.2.3 Determining MTTF for two-channel operation The value for MTTF depends on the load for the contacts and the switching frequency. In this section, the values are given for two-channel assignment, and these values refer to two internal safety relays.
User Manual Chapter 8 GFK-2734A Dec 2019 Chapter 8: Startup and validation Initial startup To start up, proceed as described in Table 28 Table 28 Steps for startup Step Relevant section and literature Set the transmission speed and the mode. Section "Setting the DIP switches"...
User Manual Chapter 8 GFK-2734A Dec 2019 Step Relevant section and literature Check the assembly and installation. Checklist "Assembly, removal, and electrical installation" on page 31 Carry out the necessary parameterization. Section "Parameterization of the safety module" on page 40 Documentation for SafetyProg software Documentation for the configurable logic module used (VersaSafe)
User Manual Chapter 8 GFK-2734A Dec 2019 If replacing a module, proceed as described for assembly and removal (see Section "Assembly, removal, and electrical installation" on page 31). Ensure that the new safe safety module is mounted at the correct position in the local bus. The new module must meet the following requirements: Same device type —...
"Acknowledgment" column in the tables below. Important If error codes are indicated by the system, which do not appear in the tables below, please contact Emerson. Error removal To remove the cause of an error, please proceed as described in the "Remedy"...
Page 89
User Manual Chapter 9 GFK-2734A Dec 2019 Notes on the tables below Diagnostic code The diagnostic register of the module includes both the diagnostic selector and the diagnostic code. This diagnostic code, which is represented in bits 11 to 0 of the register, is specified in Table 31 and onwards.
User Manual Chapter 9 GFK-2734A Dec 2019 X0Bn Error location This means, for example: X0B0 Signal error at alarm input at OUT0_Ch1 (relay output 0 channel X0B8 Signal error at alarm input at OUT1_Ch2 (relay output 1 channel The "LED" column specifies which local diagnostic LEDs indicate the error.
User Manual Chapter 9 GFK-2734A Dec 2019 Acknowledge all errors that are present. Only then can the outputs be re-enabled Acknowledgment: Acknowledging the diagnostic message deletes the message. The Yes (1) module can only be restarted following power up and error-free selftest.
Page 92
User Manual Chapter 9 GFK-2734A Dec 2019 Error due to X1F3 Error due to Check and Yes (1) receipt of acknowledgmen adapt the receipt of an t process, during assignment of unexpected unexpected which an the diagnostic message message unexpected while message was confirmation...
User Manual Chapter 9 GFK-2734A Dec 2019 Parameterization errors Table 33 Parameterization errors Error cause Error Remark Effect Remedy Acknowledgment code (hex) Incorrect FS LED – Each Module Check (flashing) output is is in the parameterization Table 9-6 parameteri safe correct state paramete...
User Manual Chapter 9 GFK-2734A Dec 2019 Error code Short description Remedy (hex) (dec) X2F2 At least one output with Wait until the switch- parameterized switch-off off operation is delay is still performing a complete and resend switch-off operation. parameter data to the module.
Page 95
User Manual Chapter 9 GFK-2734A Dec 2019 If in the event of failure the safety module is replaced, please proceed as described in Section 4, "Assembly, removal, and electrical installation" and Section "Restart after replacing a safety module" on page 80. Errors: Messages and removal...
Repair Repair work may not be carried out on the safety module. In the event of an error, send the module to Emerson. It is strictly prohibited to open the safety module. In order to prevent the manipulation of the module and to detect the unauthorized opening of the module, a security seal is applied to the module.
User Manual Chapter 11 GFK-2734A Dec 2019 Chapter 11: Technical data and ordering data 11.1 System data 11.1.1 VersaPoint For system data, please refer to the following user manuals: VersaPoint Automation terminals of the VersaPoint product range GFK-2736 11.1.2 VersaSafe VersaSafe Processing time of the module Single-channel...
Page 98
User Manual Chapter 11 GFK-2734A Dec 2019 General Data Storage/transport -25°C to +70°C Humidity 75% on average, 85% occasionally (no condensation) Operation Important In the range from -25°C to +55°C appropriate measures against increased humidity must be taken. Storage/transport 75% (no condensation) Important For a short period, slight condensation may appear on the outside of the housing Air pressure...
Page 99
User Manual Chapter 11 GFK-2734A Dec 2019 General Data Connection data for VersaPoint Connectors Connection method Spring-cage terminals Conductor cross section 0.2 mm to 1.5 mm (solid or stranded), 24 - 16 AWG Permissible current 4 A, maximum Fuse protection 4 A, maximum Connection data for COMBICON connectors Connection method...
Page 100
User Manual Chapter 11 GFK-2734A Dec 2019 Safety characteristic data according to IEC 61508/EN 61508 Depends on the parameterization SIL CL 2: 1% of 10 , maximum (corresponds to 1 x 10 and wiring (see Section "Connection SIL CL 3: 1% of 10 , maximum (corresponds to 1 x 10 Depends on the load, switching frequency, parameterization, and wiring (see Section "Determining...
Page 101
User Manual Chapter 11 GFK-2734A Dec 2019 Safety characteristic data according to EN ISO 13849-1 Diagnostic coverage (DC) Mean time to dangerous failure For single-channel assignment: 100 years (MTTF For two-channel assignment: 100 years Depends on the load, switching frequency, parameterization, and wiring (see Section "Determining PFH, PFD, and MTTFd"...
Page 102
User Manual Chapter 11 GFK-2734A Dec 2019 in the supply voltage can switch off the safety relay and result in a diagnostic message. Surge protection Yes (in the bus coupler/power terminal); Additional internal surge protection (suppressor diode between U and GND) Yes (in the bus coupler/power terminal) Protection against polarity reversal...
Page 103
User Manual Chapter 11 GFK-2734A Dec 2019 Safe digital relay outputs Derating See "Derating" on page 97) Shutdown time (t Can be parameterized: Single-channel: 25 ms to 6.3 s; two-channel: 35 ms to 6.3 s; see Section "Parameterization of the safe relay outputs" on page 42 Accuracy: Single-channel: - (10 ms + 6% of parameterized value)/+0 ms;...
Page 104
User Manual Chapter 11 GFK-2734A Dec 2019 Derating Figure 26 Contact data for the safety relay used Contact material AgCUNi + 0.2-0.4 µm Au Type of contact Single contact Nominal switching power 250 V AC 6 A AC1 1500 VA Electrical service life 100,000 AC1 (360 switching operations/h), approximately...
Page 105
User Manual Chapter 11 GFK-2734A Dec 2019 Contact data for the safety relay used 250 V AC 1500 VA Maximum interrupting rating for inductive load ( = 40 ms) 24 V DC 35 W 48 V DC 35 W 110 V DC 35 W 250 V DC 35 W...
VersaPoint connector relay outputs, 7.5 V supply (bus logic), 24 V min. supply UM, 24 V supply US, GND, clock outputs, FE Approvals For the latest approvals, please visit https://www.emerson.com/Industrial-Automation- Controls/support. 11.3 Conformance with EMC Directive Conformance with EMC Directive 2004/108/EC Noise immunity test according to DIN EN 61000-6-2.
User Manual Chapter 11 GFK-2734A Dec 2019 Conformance with EMC Directive 2004/108/EC Conducted EN 61000-4-6 Criterion A, test voltage 10 V interference (IEC 61000-4-6) Noise emission test according to DIN EN 61000-6-4 See terminal-specific data sheets. EN 55011 Class A, industrial applications 11.4 Ordering data 11.4.1...
Page 108
Chapter 11 GFK-2734A Dec 2019 Important Make sure you always use the latest documentation. It can be downloaded at http://www.Emerson.com/Industrial-Automation-Controls. Important Documentation for PROFIsafe, PROFIBUS, and PROFINET is available on the Internet at . www.profibus.com/pall/meta/downloads. Technical data and ordering data...
User Manual Appendix A GFK-2734A Dec 2019 Appendix A: PROFIsafe terms used in the manual Some of the terms that are used in connection with PROFIsafe in this manual are described below. A definition of PROFIsafe terms is also provided in the PROFIsafe profile.
Page 110
User Manual Appendix A GFK-2734A Dec 2019 F_iPar_CRC A checksum that is calculated from all iParameters of the technology-specific part of the F-Device. F_Par_CRC A CRC signature, which is created via all F- Parameters and ensures error-free transmission of the F- Parameters.
User Manual Appendix B GFK-2734A Dec 2019 Appendix B: F-Parameters and iParameters F-Parameters Important The values indicated in italics in Table 35 are preset by the system and cannot be modified manually. Table 35 Overview of the F-Parameters for the module F-Parameter Default Description...
User Manual Appendix B GFK-2734A Dec 2019 F-Parameter Default Description value F_CRC_Length 3-byte CRC This parameter transmits the length of the CRC2 code to be expected in the safety telegram to the safe controller. F_Block_ID Parameter block type identification 1: The parameter block of the F-Parameters contains the F_iPar_CRC parameter.
Page 113
User Manual Appendix B GFK-2734A Dec 2019 Error code Error cause Remedy dec hex Invalid parameterization of Correct value. F_Destination_Address. Addresses 0000 and FFFF are not permitted. Invalid parameterization of Correct value. F_Source_Address. Addresses 0000 FFFF are not permitted. Invalid parameterization of F_WD_Time. Correct value.
Table 38 F-Parameter parameter errors Error code Error cause Remedy 1088 The parameterized VersaSafe address Make sure that the addresses are the does not match the address set on the same. 1089 Internal failure Please contact Emerson safety module. 1094 F-Parameters and iParameters...
User Manual Appendix C GFK-2734A Dec 2019 Appendix C: Checklists The checklists listed in this section provide support during the planning, assembly and electrical installation, startup, parameterization, and validation of the IC220SDL840 module. Important These checklists may be used as planning documentation and/or as verification to en- sure the steps in the specified phases are carried out carefully.
User Manual Appendix C GFK-2734A Dec 2019 Planning Checklist for planning the use of the Safety module Device type/equipment identification Version: HW/FW/FW Date Author Test engineer Remark Requirement (mandatory) Remark Has the current module user manual been used as Revision: the basis for planning? Are the actuators approved for connection to the module (according to the technical data and...
Page 117
User Manual Appendix C GFK-2734A Dec 2019 Checklist for planning the use of the Safety module Does the planned use correspond to the intended use? Are the ambient conditions observed according to the technical data? Have test intervals been defined? Has the switch-off delay for stop category 1 been observed in the calculation of the total response time for the machine/system?
User Manual Appendix C GFK-2734A Dec 2019 Assembly and electrical installation Checklist for assembly and electrical installation of the Safety module Device type/equipment identification Version: HW/FW/FW Date Author Test engineer Remark No. Requirement (mandatory) Remark Was assembly completed according to the specifications (specifica-tions from the planning phase or according to the user manual)?
User Manual Appendix C GFK-2734A Dec 2019 Startup and parameterization Checklist for startup and parameterization of the Safety module Device type/equipment identification Version: HW/FW/FW Date Author Test engineer Remark No. Requirement (mandatory) Remark Was startup completed according to the specifications (specifications from the planning phase or according to the user manual)? During startup, is it ensured that any person starting hazardous movements intentionally can...
User Manual Appendix C GFK-2734A Dec 2019 Validation Checklist for validating the Safety module Device type/equipment identification Version: HW/FW/FW Date Author Test engineer Remark No. Requirement (mandatory) Remark Have all the mandatory requirements for the "Planning" checklist been met? Have all the mandatory requirements for the "Assembly and electrical installation"...
Page 121
User Manual Appendix C GFK-2734A Dec 2019 Checklist for validating the Safety module Have measures been taken to prevent connectors being mixed up? Are the requirements for the actuators and cable installation observed according to the SIL/SIL CL/Cat./PL to be achieved? Are the specifications for the parameterization for each channel implemented? Are test intervals specified for testing the shutdown...
Page 122
Note: If the product is purchased through an Authorized Channel Partner, please contact the seller directly for any support. Emerson reserves the right to modify or improve the designs or specifications of the products mentioned in this manual at any time without notice.
Need help?
Do you have a question about the PACSystems VersaPoint IC220SDL840 and is the answer not in the manual?
Questions and answers