Emergency Stop with a Configurable Safety Relay
Contents
1. Products Emergency Stop Guardmaster 440C CR30 Configurable Safety Relay 100S C Safety Contactors Safety Rating CAT 4 PLe to ISO 13849 1 2008 Functional Safety Description Hazardous motion is interrupted or prevented by actuation of the emergency stop button Each E stop is considered a separate safety function The E stop button is connected to a pair of safety inputs on the 440C CR30 relay The safety contactors K1 and K2 are connected to a pair of safety outputs The safety code in the 440C CR30 relay monitors the status of the E stop button by using a predefined function block named Safety Monitoring Function SMF When all conditions are satisfied no faults are detected on the inputs and the reset push button is pressed a second predefined function block called Safety Output Function SOF checks the status of the final control devices a pair of 100S C redundant contactors The 440C CR30 relay then issues an output signal to switch ON a pair of outputs to energize the safety contactors Bill of Material Catalog Number Description power supply 24 28V DC 1606 XLP72E 72 W 120 240V AC 85 375V DC input voltage 800F 1 hole enclosure E stop station 800F 1YP3 plastic PG twist to release 40 mm non illuminated 2 N C 1761 CBL PM02 Cable MicroLogix 1000 controller to personal computer 440CCR30 22BBB 800FP R611PQ10V 100S C12EJ23BC Guardmaster 440CCR30 software 800F reset rou2. SISTEMA is shown below Jire Air Fi r ee j G6 Bae pin IPH pe CP core Silage g hl Littl Ce 9 Poets oe Fa eee ne sa DE Ta Li De BP ENT ee E aa wF ah EnEn T Sree Gd re ae a qes arer merria z woo 56 a l it i ia ial z zi 123 Teh hi Dic pa ing bared NHP Safety Reference Guide gt Safety Function Documents 440C 6A 18 Safety Function Documents 440C Emergency Stop with a Configurable Safety Relay Products Emergency Stop Guardmaster 440C CR30 Configurable Safety Relay 100S C Safety Contactors Safety Rating CAT 4 PLe to ISO 13849 1 2008 Calculation of the Performance Level cont The emergency stop safety function can be modeled as follows FAULT EXCLUSION OUTPUT 440C CR30 Relay Fault Exclusion Subsystem 1 i Subsystem 2 i Subsystem 3 i Subsystem 4 Because these are electro mechanical devices the safety contactors data includes the following Mean Time to Failure dangerous MTTFd e Diagnostic Coverage DCavg Common Cause Failure CCF e Electro mechanical devices functional safety evaluations include the following How frequently they are operated Whether they are effectively monitored for faults Whether they are properly specified and installed SISTEMA calculates the MTTFd by using B10d data provided for the contactors along with the estimated frequency of use entered during the creation of the SISTEMA project The DCavg 99
3. To order paper copies of technical documentation contact your local Allen Bradley distributor or Rockwell Automation sales representative Provides details on how to model safety functions in the SISTEMA tool NHP Safety Reference Guide gt Safety Function Documents 440C 6A 23
4. for the contactors is selected from the Output Device table of ISO 13849 1 Annex E Direct Monitoring The DCavg 99 for the E stop is selected from the Input Device table of ISO 13849 1 Annex E Cross Monitoring The CCF value is generated by using the scoring process outlined in Annex F of ISO 13849 1 The complete CCF scoring process must be performed when actually implementing an application A minimum score of 65 must be achieved The emergency stop function is a complementary protective measure which is intended to be used in conjunction with other safeguarding measures and protective devices to sufficiently reduce risk The emergency stop function is designed not to impair the effectiveness of the other protective devices or safety functions For emergency stop devices in accordance with IEC 60947 5 5 a fault exclusion for mechanical aspects is allowed up to PLd if the maximum number of operations is considered However the actual number of operations NOP is used for the purposes of the MTTFd calculation in this document NHP Safety Reference Guide gt Safety Function Documents 440C 6A 19 Safety Function Documents 440C Emergency Stop with a Configurable Safety Relay Products Emergency Stop Guardmaster 440C CR30 Configurable Safety Relay 100S C Safety Contactors Safety Rating CAT 4 PLe to ISO 13849 1 2008 Verification and Validation Plan Verification and validation play important roles in the avoidance of faults throug
5. safety application program indication While the system is running short the contactor feedback to the safety 1 0 module All contactors should remain energized Initiate a Stop 3 command and attempt a Reset command The system should not restart or reset Verify proper machine status indication and Connected Components Workbench safety application program indication NHP Safety Reference Guide gt Safety Function Documents 440C 6A 21 Safety Function Documents 440C Emergency Stop with a Configurable Safety Relay Products Emergency Stop Guardmaster 440C CR30 Configurable Safety Relay 100S C Safety Contactors Safety Rating CAT 4 PLe to ISO 13849 1 2008 Verification of the Configuration The system must verify the configuration of each individual application by using the Verify command If the 440C CR30 configuration safety relay is not verified it will fault after 24 hours of operation ATTENTION The verification process should be documented in the safety system s technical file Follow these steps to download and verify the configuration 1 Make sure the 440C CR30 relay is powered up and connected to your workstation via the USB cable 2 Confirm that the upper right hand corner of the Connected Components Workbench Project tab shows that the 440C CR30 relay is connected If it is not click Connect to Device to establish the software connection Suardmaster 440 CRIO i master 440c CR30 ot C
6. 1 wire Both contactors should deenergize Verify proper machine status indication and Connected Components Workbench safety application program indication Restore channel 1 and repeat for channel 2 J While the system is running short channel 1 to 24V DC Both contactors should deenergize Verify proper machine status indication and Connected Components Workbench safety application program indication Restore channel 1 and repeat for channel 2 3 While the system is running short channel 1 to OV DC Both contactors should deenergize Verify proper machine status indication and Connected Components Workbench safety application program indication Restore channel 1 and repeat for channel 2 While the system is running short channels 1 and 2 Both contactors should de energize Verify proper machine status indication and Connected Components Workbench safety application program indication Restore channel 1 and 2 wiring Safety Contactor Output Tests Initiate a Start command Both contactors should energize for a normal machine run condition Verify proper machine status indication and Connected Components Workbench safety application program indication While the system is running remove the contactor feedback from the safety 1 0 module All contactors should remain energized Initiate a 2 Stop command and attempt a Reset command The system should not restart or reset Verify proper machine status indication and Connected Components Workbench
7. 440C SAFETY FUNCTION DOCUMENTS Emergency Stop with a Configurable Safety Relay NHP SAFETY REFERENCE GUIDE Authorised Distributor AB uy Authorised Distributor Safety Function Documents 440C Emergency Stop with a Configurable Safety Relay Products Emergency Stop Guardmaster 440C CR30 Configurable Safety Relay 100S C Safety Contactors Safety Rating CAT 4 PLe to ISO 13849 1 2008 Table of Contents Introduction NHP Safety Reference Guide gt Safety Function Documents 440C Safety Function Documents 440C Emergency Stop with a Configurable Safety Relay Products Emergency Stop Guardmaster 440C CR30 Configurable Safety Relay 100S C Safety Contactors Safety Rating CAT 4 PLe to ISO 13849 1 2008 Introduction This safety function application example explains how to wire and configure a Guardmaster 440C CR30 configurable safety relay to monitor a dual channel emergency stop E stop device If the E stop is actuated or a fault is detected in the monitoring circuit the 440C CR30 relay de energizes the final control device in this case a redundant pair of 100S C contactors Important User Information Read this document and the documents listed in the additional resources section about installation configuration and operation of this equipment before you install configure operate or maintain this product Users are required to familiarize themselv
8. C CR30 Configurable Safety Relay 100S C Safety Contactors Safety Rating CAT 4 PLe to ISO 13849 1 2008 Electrical Schematic 24V DC 440C CR30 22BBB El_00 440 CR30 Configurable Safety El_01 Relay 2080 1Q40B4 P1_00 P1_00 P1_01 P1_01 Plug In 1 0 P1_02 DC COM 100S C23EJ23BC 100S C23EJ23BC L1 L2 L3 BE ISO 13849 2 requires transient suppression across the load as a Basic Safety Principal The EJ electronic coil provides suitable suppression NHP Safety Reference Guide gt Safety Function Documents 440C 6A 9 Safety Function Documents 440C Emergency Stop with a Configurable Safety Relay Products Emergency Stop Guardmaster 440C CR30 Configurable Safety Relay 100S C Safety Contactors Safety Rating CAT 4 PLe to ISO 13849 1 2008 Configuration The 440C CR30 relay is configured by using Connected Components Workbench software release 6 01 or later A detailed description of each step is beyond the scope of this document Knowledge of the Connected Components Workbench software is assumed Configure the 440C CR30 Relay Follow these steps to configure the Guardmaster 440C CR30 relay by using the Connected Components Workbench software 1 In Connected Components Workbench software choose View and then Device Toolbox i Project32 Connected Eee vents Workb ench Standard Edition Administrator ate a he File Edit View Debug Tools Communications Wind
9. KH Le USE Pari LED Configuration Faults liru mplsern Paice Bue Mpp Fagin Miduha Ernply Vondor Alen Best Eropty Cabala ID W400 CR30 77088 hen pie Di 4 To add the plug in I O module called for in the schematic right click the left plug in module space and choose the 2080 IQ40B4 module TIP The I O module is shown in standard gray because it is not a safety I O module That is permissible in this application because the standard I O module is not used to connect safety signals Inputs such as Feedback and Reset button are not considered strict safety signals Using the standard I O module for these non safety signals can reserve the limited number of safety inputs and outputs for true safety signals NHP Safety Reference Guide gt Safety Function Documents 440C 6A 11 Safety Function Documents 440C Emergency Stop with a Configurable Safety Relay Products Emergency Stop Guardmaster 440C CR30 Configurable Safety Relay 100S C Safety Contactors Safety Rating CAT 4 PLe to ISO 13849 1 2008 Configure the Inputs Follow these steps to configure the inputs 1 Select Emergency Stop T Pm mi i TELL ko Poma Feedback flanitceneg Gate Sater Light Curmi Puig Hesg Restart Sadi hlas Salety Moniboring d lzi 2 Drag itto the green rectangle under Safety Monitoring and release it FE oo r f Frenne Shop H i z Ten Source A 1 Tet Seurc
10. R T an Ymiho A A a a ee 4 Answer all the questions and check each box if completed prea Prices Gels Len aed pT ie bi dea Let acl Hie pra eer Perel Ral the ad eee of tht erat eel oe et Cele Vio ea ee Pe fil tee eel ee ee ee ee are Pe ee ey ee F IMPORTANT All of the boxes must be marked in order to Generate the Verification ID 5 Click Generate 6 Click Yes to proceed with the verification Conceited Componenti Werkderrefy A Pertccreng a ip arip eel Chae en ater ely is Prope HiH Prometi eth U arity Yiri PAA e ons 7 Click Yes to change to Run mode NHP Safety Reference Guide gt Safety Function Documents 440C 6A 22 Safety Function Documents 440C Emergency Stop with a Configurable Safety Relay Products Emergency Stop Guardmaster 440C CR30 Configurable Safety Relay 100S C Safety Contactors Safety Rating CAT 4 PLe to ISO 13849 1 2008 Verification of the Configuration 8 Record the Safety Verification ID in the machine s documentation i a i z A Coed Corpre Wnesberch m This process is the feedback to the 440C CR30 relay that the system verification and functional tests have been completed The unique verification ID can be used to check if changes have been made to a configuration file Any change to the configuration removes the Safety Verification ID Subsequent Verify actions generate a different verification ID The Safety Verification ID is displayed
11. ation and understanding of the product Labels may also be on or inside the equipment to provide specific precautions SHOCK HAZARD Labels may be on or inside the equipment for example a drive or motor to alert people that dangerous voltage may be present BURN HAZARD Labels may be on or inside the equipment for example a drive or motor to alert people that surfaces may reach dangerous temperatures ARC FLASH HAZARD Labels may be on or inside the equipment for example a motor control center to alert people to potential Arc Flash Arc Flash will cause severe injury or death Wear proper Personal Protective Equipment PPE Follow ALL Regulatory requirements for safe work practices and for Personal Protective Equipment PPE gt gt gt Contact NHP to find out more about our safety risk assessment services IMPORTANT This application example is for advanced users and assumes that you are trained and experienced in safety system requirements assessment can require additional circuitry to reduce the risk to a tolerable level Safety circuits must take into consideration safety ATTENTION Perform a risk assessment to make sure all task and hazard combinations have been identified and addressed The risk distance calculations which are not part of the scope of this document NHP Safety Reference Guide gt Safety Function Documents 440C 6A 5 Safety Function Documents 440C Emergency Stop with a Configurable Safety Relay
12. connect the blocks The software automatically adds the Pass Through blocks because no additional Logic Functions are being used beet Bert oe mart in E a 1 Ferg top 7 a al Da piana dy ee la See Ge LI r The complete logic appears as follows Leet Gert ae ELN 1 TE a i E 1 ere ep 7 a Lan himah 1 bea ieee E r 2 _ a z im a ET H m i a ren 2 re od 1m haa F a Paik i iad Thra ggh Thiar get reri A Dunet liner E INI haa n a Paik a aad Thay Tht Bimi Tippee Baa beara it ae Bnet Typa Baa bg BEJ saree Lapu ei za hirea CPP B EDIE FI iii if Fhe RE F kise sair Lanp ae i mi iraia COP EEDE BT Eii Fi Prechecic AF Liaw NHP Safety Reference Guide gt Safety Function Documents 440C 6A 14 Safety Function Documents 440C Emergency Stop with a Configurable Safety Relay Products Emergency Stop Guardmaster 440C CR30 Configurable Safety Relay 100S C Safety Contactors Safety Rating CAT 4 PLe to ISO 13849 1 2008 Configure the Status Indicators Select Terminal 00 as the Value for LED 0 S The 440C CR30 relay lets you configure ten input status indicators and six output status indicators These status Safety Rely LED Configas indicators can be very helpful while testing the system during Irgast LED installation and commissioning They are also useful for monitoring the system during operation To conf
13. displayed which details the error so that it may be corrected After you correct the error you need to perform the build again Save and Download the Project Follow these steps to save and download the project 1 From the File menu choose Save as to save the project IMPORTANT Saving the project with anew name closes the workspace window s 2 Inthe Project Organizer window double click Guardmaster_440C_CR30 to open the workspace 3 Power up the 440C CR30 safety relay 4 Connect the USB cable to the 440C CR30 relay 5 Click Download Guardmaster 440C CR30 6 In the Connection Browser expand the AB_VBP 1 Virtual Chassis and select the Guardmaster 440C CR30 22BBB Casati Bence F anes E Wesbrishon MAEHE TAT i v ey Lar Gapa ered ce AD ITHE barred AR VER URAL A Wet Choe EJ 0 Ariran dew Serge Mii diaais E 2000 E 7a Click OK Click Yes to change from Run to Program mode Lente Corponenc Wita bes J Sakei relay rin Pan mide Dp you mend Be harps in prem reha NHP Safety Reference Guide gt Safety Function Documents 440C 6A 16 Safety Function Documents 440C Emergency Stop with a Configurable Safety Relay Products Emergency Stop Guardmaster 440C CR30 Configurable Safety Relay 100S C Safety Contactors Safety Rating CAT 4 PLe to ISO 13849 1 2008 Save and Download the Project cont 9 When the download is complete click Yes to change from Program to R
14. e amp 1 mthanged Sbri Connected Components Workbench software has assigned input terminals El_00 and El_01 on the left side of the block The software automatically assigns the next unused terminal for a newly added device The terminals can be changed to any unused input terminal but in this case leave the default Because an E stop is an electro mechanical device the software has automatically added terminals 12 and 13 as test sources Numbers 12 and 13 refer to multipurpose terminals 12 and 13 MP_12 and MP_13 3 Adda Feedback Monitoring input Gate Sentch H Lgi Curia Notice that the software assigns it to the next available input terminal which in this case is El_ 02 4 Change the number of inputs to 2 and use the Input pull down menu to select plug in inputs 00 and 01 instead SAFI Fl 06 E 2 Feedisack Ho Inputs Zl t GTH EH Songs 5 Adda Reset 6 Change the Reset input to Plug In input 02 to complete the configuration of the inputs Lh 3 fox Q Siham Seli NHP Safety Reference Guide gt Safety Function Documents 440C 6A 12 Safety Function Documents 440C Emergency Stop with a Configurable Safety Relay Products Emergency Stop Guardmaster 440C CR30 Configurable Safety Relay 100S C Safety Contactors Safety Rating CAT 4 PLe to ISO 13849 1 2008 Configure the Outputs 3 Change the Reset Input to SMF 3 Follow these steps to configu
15. es with installation and wiring instructions in addition to requirements of all applicable codes laws and standards Activities including installation adjustments putting into service use assembly disassembly and maintenance are required to be carried out by suitably trained personnel in accordance with applicable code of practice If this equipment is used in a manner not specified by the manufacturer the protection provided by the equipment may be impaired In no event will Rockwell Automation Inc be responsible or liable for indirect or consequential damages resulting from the use or application of this equipment The examples and diagrams in this manual are included solely for illustrative purposes Because of the many variables and requirements associated with any particular installation Rockwell Automation Inc cannot assume responsibility or liability for actual use based on the examples and diagrams No patent liability is assumed by Rockwell Automation Inc with respect to use of information circuits equipment or software described in this manual Reproduction of the contents of this manual in whole or in part without written permission of NHP is prohibited NHP Safety Reference Guide gt Safety Function Documents 440C 6A 3 Safety Function Documents 440C Emergency Stop with a Configurable Safety Relay Products Emergency Stop Guardmaster 440C CR30 Configurable Safety Relay 100S C Safety Co
16. hout the safety system design and development process ISO 13849 2 sets the requirements for verification and validation The standard calls for a documented plan to confirm all of the safety functional requirements have been met Verification is an analysis of the resulting safety control system The Performance Level PL of the safety control system is calculated to confirm that the system meets the required Performance Level PLr specified The SISTEMA software is typically used to perform the calculations and assist with satisfying the requirements of ISO 13849 1 Validation is a functional test of the safety control system to demonstrate that the system meets the specified requirements of the safety function The safety control system is tested to confirm that all of the safety related outputs respond appropriately to their corresponding safety related inputs The functional test includes normal operating conditions in addition to potential fault injection of failure modes A checklist is typically used to document the validation of the safety control system Before validating the system confirm that the Guardmaster 440C CR30 configurable safety relay is wired and configured in accordance with the installation instructions NHP Safety Reference Guide gt Safety Function Documents 440C 6A 20 Safety Function Documents 440C Emergency Stop with a Configurable Safety Relay Products Emergency Stop Guardmaster 440C CR30 Configu
17. ically dropping the 24V DC to OV DC it is possible to detect cross channel faults and shorts to an external 24V DC Shorts to OV DC are seen as an open circuit by the input and are detected by the appropriate safety function block in the application code The final control device in this case is a pair of 100S C safety contactors K1 and K2 The contactors are wired in a redundant configuration and are tested on startup for faults The start up test is accomplished by using a Safety Output Function SOF function block to monitor the feedback circuit wired into standard inputs P1_00 and P1_01 before the contactors are energized The system is reset by means of the momentary push button PB1 NHP Safety Reference Guide gt Safety Function Documents 440C 6A 7 Safety Function Documents 440C Emergency Stop with a Configurable Safety Relay Products Emergency Stop Guardmaster 440C CR30 Configurable Safety Relay 100S C Safety Contactors Safety Rating CAT 4 PLe to ISO 13849 1 2008 Electrical Schematic 24V DC DC COM 440C CR30 22BBB MP_12 MP_13 440 CR30 Configurable Safety r Relay EIO El_01 800F 1YP3 2080 1Q40B4 K1 Feedback K2 Feedback P101 P1_01 Plug In 1 0 P1_02 P1_02 800FP R611PQ10V P1_03 A3 B3 NHP Safety Reference Guide gt Safety Function Documents 440C 6A 8 Safety Function Documents 440C Emergency Stop with a Configurable Safety Relay Products Emergency Stop Guardmaster 440
18. igure LED status indicators to show the status of the E stop Terminals 00 and 01 follow these steps 1 Click Guardmaster_440C_CR30 5 Configure the remaining Input LED status indicators as shown Safety Relay LED Comfaqurhen Input LED LED Type Filler Valu ij E Stop Channel 1 E Stop Channel 2 E Stop Status 6 Configure the Output LED status indicators as shown igp Typa Tatas Fa 3 Choose Terminal Status as the Type Filter for LED 0 Sakity Arday LFD Confiqueatinn Input LED Len Tips Fit Vake soley Menkoneg Funcien Saris NHP Safety Reference Guide gt Safety Function Documents 440C 6A 15 Safety Function Documents 440C Emergency Stop with a Configurable Safety Relay Products Emergency Stop Guardmaster 440C CR30 Configurable Safety Relay 100S C Safety Contactors Safety Rating CAT 4 PLe to ISO 13849 1 2008 Confirm the Validity of the Build Follow these steps to confirm the validity of the logic by using the Build feature in Connected Components Workbench software 1 Click Guardmaster_440C_CR30 in the bar above the Workspace 2 Click Build Build Succeeded message confirms that the configuration is valid Shape papan Barme idr rh EE E na alig ptarted Foeiert za Badia i Barapa s Majlo Wa empa mereamur Safety Aglay If an error or omission is discovered during a build a message is
19. in Connected Components Workbench software only when you are connected to the 440C CR30 relay Additional Resources These documents contain additional information concerning related products from Rockwell Automation Resource Description Guardmaster 440CCR30 Provides detailed information on how to Configurable Safety Relay install configure operate and troubleshoot User Manual publication a Guardmaster 440CCR30 configurable 440C UM001 safety relay Provides information on how to configure Guardmaster 440C CR30 a Guardmaster 440C CR30 configurable SOWAAR safety relay to communicate with a Relay Quick Start Guide A Panelview Component terminal via Modbus publication 440 0S001 communication protocol Industrial Automation Wiring and Grounding Guidelines publication 1770 4 1 Provides general guidelines for installing a Rockwell Automation industrial system Rockwell Automation Safety Products Catalog available Provides information on safety products from the Product Catalogs available from Rockwell Automation link at http www ab com Product Certifications webdite httofwww Provides declarations of conformity AUP WWW certificates and other certification details ab com The SISTEMA Cookbook 4 available at http www dguv de ifa Praxishilfen Software SISTEMA SISTEMA Kochb C3 BCcher index 2 jsp You can view or download publications at http www rockwellautomation com literature
20. nd plastic type 4 4X 13 IP66 blue R plastic latch mount 1 N O contact 0 N C contact low voltage standard pack Qty 1 MCS 100S C safety contactor 12 A 24V DC with electric coil bifurcated contact 2080 1040B4 4 channel digital input output combination module NHP Safety Reference Guide gt Safety Function Documents 440C configured safety relay PLe SIL 3 22 safety 1 0 embedded serial port USB 1 programming port 2 plug in slots 24V DC Quantity 6A 6 Safety Function Documents 440C Emergency Stop with a Configurable Safety Relay Products Emergency Stop Guardmaster 440C CR30 Configurable Safety Relay 100S C Safety Contactors Safety Rating CAT 4 PLe to ISO 13849 1 2008 Setup and Wiring For detailed information on installing and wiring refer to the publications listed in the Additional Resources on the back cover System Overview The 440C CR30 relay monitors the inputs from the E stop Typically E stops are not operated as often as a safety gate and are considered to be a complementary safety device EN 12100 2 5 5 1 provides details on complementary protective measures These are measures which are neither inherently safe design nor safeguarding but are required due to intended use or reasonably foreseeable misuse of the machine The circuit is tested by using test pulses MP_12 and MP_13 on the inputs El_00 and El_01 These test pulses source the 24V DC for the circuit By period
21. ntactors Safety Rating CAT 4 PLe to ISO 13849 1 2008 Safety Function Realization Risk Assessment The required performance level is the result of a risk assessment and refers to the amount of the risk reduction to be carried out by the safety related parts of the control system Part of the risk reduction process is to determine the safety functions of the machine In this application the performance level required PLr by the risk assessment is Category 3 Performance Level d CAT 3 PLd for each safety function A safety system that achieves CAT 3 PLd or higher can be considered control reliable Each safety product has its own rating and can be combined to create a safety function that meets or exceeds the P Lr From Risk Assessment ISO 12100 1 Identification of safety functions 2 Specification of characteristics of each function 3 Determination of required PL PLr for each safety function To Realization and PL Evaluation Emergency Stop Safety Function This application includes the safety function Emergency stop by actuation of an emergency stop push button Safety Function Requirements Pressing the emergency stop E stop stops and prevents hazardous motion by removal of power to the motor When the Estop button is reset hazardous motion and power to the motor do not resume until a secondary action start button depressed occurs Faults at the E stop button wiring terminals or 440C CR30 relay a
22. ow Help Ey ee YO Project Organizer Ctrl Alt P i E Le A Device Toolbox _GtrlvAlteD E Application i i 3 Toolbox Ctrl Alt EES Tal Barer List Ctrl Alt E Z Output Ctrl At O z aA H Quick Tips Ctrl Alt Q A i j using Dit E Cross Reference Browser CERA Ctrl C 5 ae E Document Overview Buc Parameters pos 3 ETS WE r Toolbars F E Full Screen Shift Alt Enter Properties Window F4 ri fe Le semud 1 r i U Manan Hiin SeHinns ChleslteFl 2 Select 440C CR30 22BBB 2 Be h MISR57 H Motor Control NHP Safety Reference Guide gt Safety Function Documents 440C 6A 10 Safety Function Documents 440C Emergency Stop with a Configurable Safety Relay Products Emergency Stop Guardmaster 440C CR30 Configurable Safety Relay 100S C Safety Contactors Safety Rating CAT 4 PLe to ISO 13849 1 2008 Configure the 440C CR30 Relay cont 3 Inthe Project Organizer double click the Guardmaster_440C_ CR30 relay 5 Click the Edit Logic button to open the Connected Components Workbench Workspace 6 From the View pull down menu choose Toolbox e E i oma Guardmaster 440C CR30 Guardmaster 440C CR30 Suardmaster 4400 CAIU Guardaatter 4400 CREO 4 SE E AMERI ARAR 5 Verifecstion Ie ee Wir Wy apa z a if Ta afi Pdr ine ee Hihi Pie 2 Layee Peters Fii k Peer hte a Ain 4 Safety Relay Safety Relay Tanal Pet hiara Guardie H
23. rable Safety Relay 100S C Safety Contactors Safety Rating CAT 4 PLe to ISO 13849 1 2008 Verification and Validation Checklist GENERAL MACHINERY INFORMATION Machine Name Model Number Machine Serial Number Customer Name Test Date Tester Name s Schematic Drawing Number Configurable Relay Name Safety Verification ID Guardmaster 440C CR30 Safety System Configuration and Wiring Verification i Verify that the safety system has been designed in accordance with the Guardmaster 440C CR30 User Manual Refer to Additional Resources on page 24 2 Visually inspect the safety system connection and 1 0 module to make sure they are wired as documented in the schematics i Visually inspect the Connected Components Workbench program to verify that the safety system connection and 1 0 module are configured as documented 4 Visually inspect the Connected Components Workbench application program to verify that suitable safety instructions are used All input devices are qualified by cycling their respective actuators Monitor their status in the Connected Components Workbench software 0s 6 All output devices are qualified by cycling their respective actuators Monitor their status in the Connected Components Workbench software wm Normal Operation Verification The Guardmaster 440C CR30 safety system properly responds to all normal Start Stop E stop and Reset commands E stop Input Tests While the system is running remove the channel
24. re detected before the next safety demand This emergency stop function is complementary to any other safeguards on the machine and does not reduce the performance of other safety related functions The safety function in this example is capable of connecting and interrupting power to motors rated up to 12 A 600V AC The safety function in this application technique meets or exceeds the requirements for Category 3 Performance Level d CAT 3 PLd per ISO 13849 1 and control reliable operation per ANSI B11 19 NHP Safety Reference Guide gt Safety Function Documents 440C 6A 4 Safety Function Documents 440C Emergency Stop with a Configurable Safety Relay Products Emergency Stop Guardmaster 440C CR30 Configurable Safety Relay 100S C Safety Contactors Safety Rating CAT 4 PLe to ISO 13849 1 2008 General Safety Information Throughout this manual when necessary we use notes to make you aware of safety considerations WARNING Identifies information about practices or circumstances that can cause an explosion in a hazardous environment which may lead to personal injury or death property damage or economic loss ATTENTION Identifies information about practices or circumstances that can lead to personal injury or death property damage or economic loss Attentions help you identify a hazard avoid a hazard and recognize the consequence gt gt IMPORTANT Identifies information that is critical for successful applic
25. re the safety and diagnostic outputs ee 1 Select and drag the Immediate OFF Safety Output function n aes ior block to the top position in the Safety Output column of the ile Y 3 Workspace 2p PT E Feriak Hort Reset Type Manual d Satety Owiput Functii Blocks k Pemi BB edite OFF on Delay OF Dals Hey Mutina Lamp ee a Sarl efy Dukpa Configuration of the safety outputs is complete Feedback Rint Type Flr Heret Input The software automatically assigns two outputs to the next available safety outputs which in this case are E0_00 and E0_01 and leaves one blank unassigned output One two or three outputs may be configured Because we are using E0_00 and E0_01 as our outputs no I O changes are required 2 Change the Feedback input to SMF 2 Safety Qudput UFI bal aero J FIOM PT ar Eog pT NHP Safety Reference Guide gt Safety Function Documents 440C 6A 13 Safety Function Documents 440C Emergency Stop with a Configurable Safety Relay Products Emergency Stop Guardmaster 440C CR30 Configurable Safety Relay 100S C Safety Contactors Safety Rating CAT 4 PLe to ISO 13849 1 2008 Configure the Logic The logic ties the inputs to the outputs making the outputs respond to the inputs in the manner required 1 Click the blue dot on the E stop input block and notice that it turns gray 2 Click the blue dot on the Immediate OFF output block to
26. un mode Connected Lammenin Viwiarti Decal mpa To you wand fo charge tie uriety ralig bask So Bam reac Green indicates that a block is True or that an input or output terminal is ON Flashing green indicates that a Safety Output Function is ready to be Reset The online diagnostics mode of the 440C CR30 relay can be very helpful during the verification process 11 Review the information in Calculation of the Performance Level on page 18 and Verification and Validation Plan on page 20 before proceeding with Verification of the Configuration on page 22 NHP Safety Reference Guide gt Safety Function Documents 440C 6A 17 Safety Function Documents 440C Emergency Stop with a Configurable Safety Relay Products Emergency Stop Guardmaster 440C CR30 Configurable Safety Relay 100S C Safety Contactors Safety Rating CAT 4 PLe to ISO 13849 1 2008 Calculation of the Performance Level When properly implemented the emergency stop safety function can achieve a safety rating of Category 4 Performance Level e CAT 4 PLe according to ISO 13849 1 2008 as calculated by using the SISTEMA software PL calculation tool The Performance Level required PLr from the risk assessment for the emergency stop safety function in this application is PLd Project IFA a 79 j a L ibp eee ee ee Lt i The Performance Level and Category achieved by each subsystem of the emergency stop safety function as calculated by
Download Pdf Manuals
Related Search