Pro-face GP3000 Series Hardware Manual page 4

Design a circuit that will supply power to the GP unit's I/O before starting up the GP. If the GP unit's inter-
nal program enters RUN mode prior to the I/O unit's load control power turning ON, an incorrect output
(signal) or malfunction could cause an accident.
Design a user program that ensures the safety of the user's system, in the event of a GP display or control
error, or either a data transmission error or power failure between the GP and a connected unit. These
types of problems can lead to an incorrect output (signal) or malfunction, resulting in an accident.
Do not make switches using the switches on the touch panels which may cause operator injury and
machine damage. An output may remain either ON or OFF and a major accident can occur. To prevent
this, set up circuits such as limiters that will monitor vital output signals. Design switches for important
operations to be performed by separate devices. An incorrect output or malfunction can occur and thereby
cause an accident.
Do not create GP touch panel switches to control machine safety operations, such as an emergency stop
switch. Install these switches as separate hardware switches, otherwise severe bodily injury or equipment
damage can occur.
Be sure to design your system so that a communication fault between the GP and its host controller will
not cause equipment to malfunction. This is to prevent any possibility of bodily injury or equipment dam-
age.
Do not use the GP as a warning device for critical alarms that can cause serious operator injury, machine
damage or can halt system operation. Critical alarm indicators and their control/activator units must be
designed using stand-alone hardware and/or mechanical interlocks.
Do not use the GP with aircraft control devices, aerospace equipment, central trunk data transmission
(communication) devices, nuclear power control devices, or medical life support equipment, due to these
devices' inherent requirements of extremely high levels of safety and reliability.
When using the GP with transportation vehicles (trains, cars, and ships), disaster and crime prevention
devices, various types of safety equipment, and medical devices that are not life-support related, use
redundant and/or failsafe system designs to ensure proper reliability and safety.
3