background image

 

 

 

Printed in the Federal Republic of Germany 

 TR-Electronic GmbH 2022, All Rights Reserved 

04/20/2022 

TR-EMO-BA-GB-0023 v00 

Page 27 of 35 

7 Validation of the encoTRive safety functions 

This chapter describes the validation of the encoTRive specific safety functions. When this has been 
done, a validation of the entire system or machine must take place. 
 
The procedure described below should be regarded as an example and is not meaningful for all appli-
cations.  The system or machine  manufacturer must  ensure the appropriate functions  for  his  applica-
tion. 
 
 

Prerequisites: 

 

 

 

 

  All specifications in this document and the associated documents have 

been implemented. 

  In  particular,  appropriate  precautions  have  been  taken  based  on  the 

risk analysis, to ensure that no hazards can arise during execution of 
the safety functions, and that damage to property and physical injuries 
can be excluded. 

 
 
●  The encoTRive drive system has been put into operation and there is communication with the 

control. 

 
●  The drive is in a non-safe state, i.e. the safety circuit is closed via inputs I11/I12 or I11/I21 (with or 

without cross-circuit monitoring) and the drive controller is enabled. 

 

7.1 STO function 

The  safety  function  is  triggered,  when  the  safety  circuit  is  interrupted  e.g.  by  an  emergency  stop 
switch. It must then be checked whether the motor torque has been switched off and whether the en-
coTRive motor control outputs error “400” in PNU 947 via the PROFINET interface, denoting the safe 
state.  The  safe  state  is  displayed  directly  on  the  encoTRive  drive  system  via  the  message  output 
C1 = 24 VDC. 
 

When validating the STO function, the required time until complete standstill of the system or 
machine  must  be  taken  into  account,  depending  on  the  application.  This  depends  on  the 
masses present in the system! 

 
In order to restart the drive after the STO function has triggered, at least 1 s must pass, then the safety 
circuit must be closed again via the inputs used, the error must be acknowledged via the PROFINET 
interface and after this the drive controller must be activated again. 
 

Summary of Contents for encoTRive MP Series

Page 1: ...IL CL2 DIN EN ISO 13849 PL d DIN EN 61800 5 2 Safe Torque Off STO Safe Stop 1 SS1 Original Decentralized Positioning Drives MP Series Safety Manual _Basic safety instructions _Purpose _General functio...

Page 2: ...cation require the written consent of the manufacturer Violations shall be subject to claims for damages Subject to amendments The right to make any changes in the interest of technical progress is re...

Page 3: ...rated safety functions 12 2 7 1 Mode of operation 12 2 7 2 STO Safe Torque Off 13 2 7 3 SS1 Safe Stop 1 14 2 8 Warranty and liability 15 2 9 Organizational measures 15 2 10 Choice and qualifications o...

Page 4: ...GB 0023 v00 04 20 2022 8 Safety oriented error causes and solutions 29 8 1 Optical LED display 29 8 2 Error and warning messages via the fieldbus interface 30 9 Replacing the drive 31 10 Checklists 32...

Page 5: ...Printed in the Federal Republic of Germany TR Electronic GmbH 2022 All Rights Reserved 04 20 2022 TR EMO BA GB 0023 v00 Page 5 of 35 Revision index Modification Date Index First release 04 20 2022 00...

Page 6: ...and solutions As the documentation is arranged in a modular structure this Manual is supplementary to other doc umentation such as product data sheets dimensional drawings leaflets and interface spec...

Page 7: ...ational Electrotechnical Commission ISO International Standard Organization MTTFd Mean Time To Failure dangerous Mean time until a dangerous error occurs PFD Probability of Failure on Demand Probabili...

Page 8: ...afety of safety related electrical electronic and programmable electronic control systems and PL d Cat 3 in accordance with EN ISO13849 1 Safety of machinery Safe ty related parts of control systems P...

Page 9: ...cautions are not met means that death or serious injury can occur if the required precautions are not met means that minor injuries can occur if the required precautions are not met means that damage...

Page 10: ...further procedure must be agreed with TR Electronic if necessary 2 3 Residual risk According to EN ISO 12100 1 Safety of machinery Basic concepts general principles for design the residual risk is def...

Page 11: ...safety standard The system manufacturer must check that the characteristics of the encoTRive satisfy his application specific safety requirements The responsibility or decision regarding the use of t...

Page 12: ...must be validated by the manufacturer in respect of the safety func tions All requirements on installation commissioning and operation must be fulfilled for correct fitting of the drive in the system...

Page 13: ...ping back no safe braking but only active torque generation The motor shaft can be set in motion by external forces tensioned spring suspended load The system risk analysis must take account of all ac...

Page 14: ...alysis must take into account that the drive is only in the safe state after activation of the STO function The behavior of the drive before this point must be viewed as undefined in the worst case sc...

Page 15: ...2 9 Organizational measures The associated documentation must always be kept accessible at the place of operation of the encoTRive In addition to the associated documentation the generally valid lega...

Page 16: ...ir knowledge of the relevant standards provisions accident prevention regulations and operating conditions have been authorized to carry out the required work by the persons respon sible for the safet...

Page 17: ...heat losses can be ade quately dissipated Protective devices must never be rendered inoperative even during test ing Check the direction of rotation of the encoTRive in the uncoupled state before comm...

Page 18: ...shaft outlet and housing transitions MP 060 180 with gear Alternatively the MP 200 version with gear can be used The information on the IP protection class in the respective product data sheet must b...

Page 19: ...Rights Reserved 04 20 2022 TR EMO BA GB 0023 v00 Page 19 of 35 3 Transport Storage Shipping information Use only the original packaging Inappropriate packaging material may cause damage to the unit i...

Page 20: ...cceptance conditions for the complete system must be taken into account for mounting and the safety information on page 17 must also be observed The encoTRive must be checked for externally visible da...

Page 21: ...SIL level SIL2 SIL CL2 PL standardization DIN EN ISO 13849 1 Performance Level PL PLd Cat 3 MTTFd high 955 a DCavg high 91 84 PFD 3 07 10 5 PFH 3 55 10 10 PFH in of SIL2 requirement 1 T1 repeat test p...

Page 22: ...with the requirements of IEC 61558 2 6 An additional fuse of 500 mA fast is recommended in the supply line to the logic unit A 16 A fuse should be provided in the supply line to the power unit note a...

Page 23: ...e range 35 V DC Input impedance 4 8 kOhm Low level 0 4 VDC High level 18 35 VDC Galvanic isolation no Pulse suppression time for test pulses of an OSSD signal 0 15 ms 5 5 Message outputs Risk of damag...

Page 24: ...isk of damage to the encoTRive drive system due to incorrect instal lation work Make sure that the plug connectors are not damaged during installa tion Bent pins can destroy the drive due to short cir...

Page 25: ...used during installation Please note that an electrical connection exists between the shielding braid of the connecting cables used and the housing of the drive The shielding braid of the connecting c...

Page 26: ...below correspond to the not safe state i e the drive is not switched torque free Example 1 Two channel emergency stop control without cross circuit monitoring I11 I12 Example 2 Two channel emergency s...

Page 27: ...peration and there is communication with the control The drive is in a non safe state i e the safety circuit is closed via inputs I11 I12 or I11 I21 with or without cross circuit monitoring and the dr...

Page 28: ...r with an appropriate braking ramp For more accurate assessment on triggering of the SS1 function the WARNING 4096 must be out put in PNU 953 via the PROFINET interface During validation the behavior...

Page 29: ...lay The assignment of LEDs can be found in the customer specific pin assignment Safe State orange Error red Cause Solution ON OFF Unsafe state the drive can be moved The inputs I11 I12 and I21 are con...

Page 30: ...ety module Subindex 1 1 The synchronization time of 1 s between inputs I11 and I12 or I11 and I21 has been exceeded A short circuit was detected between in puts I11 and I12 or I11 and I21 cross circui...

Page 31: ...dance with the specifications in the chapter General technical data and installation instructions on page 21 and the interface specific user manual As the configuration of the safety oriented paramete...

Page 32: ...Chapter General technical data and in stallation instructions page 21 Supply voltage The power supply used must satisfy the specified require ments Chapter Supply page 22 Correct electrical installati...

Page 33: ...urer must ensure the appropriate functions for his application Also see the chapter Validation of the encoTRive safety functions on page 27 Test Process Result Step 1 STO Depending on the control of t...

Page 34: ...st also be reduced depending on the applica tion During the inspection the parameterization and wiring must be assessed for signs of manipulation In addition the safety functions must be tested as des...

Page 35: ...www tr electronic de f TR EMO BA GB 0023 Interface specific user manuals Designation Link PROFINET www tr electronic de f TR EMO BA DGB 0019 Pin assignments noted in the product data sheet Link www t...

Reviews: