Safety Integrated - Industry - Siemens

Behavior when Emergency Stop is issued
Emergency Stop is initiated using button S3 ("Emergency
Stop"). This initiates that the drive is shut down according to
stop Category 1 in compliance with EN 60204-1.
■ A 0 signal is entered at contact 65 (controller enable) of the
drive via the enable contacts of safety combination A1. The
drive is immediately braked down to 0 speed and the pulses
are cancelled.
■ If the drive is stationary (speed = 0), then PLC output DO2
to the internal safety relay of the drive is reset. The internal
safety relay of the drive drops-out and its checkback signal
contacts AS1/2 close (1st shutdown path!).
Behavior when the protective doors are opened
When the protective doors are opened, it is initiated that the
drive is shut down according to stop Category 1 in compliance
with EN 60204-1. It must be ensured that potentially hazardous
motion must have come to a standstill before a person can
reach the potentially hazardous area!
■ A 0 signal is entered at contact 65 (controller enable) of the
drive via the enable contacts of safety combination A2. The
drive is immediately braked down to 0 speed and the pulses
are cancelled. At the same time, the state of the safety
combination is signaled to the control.
■ Before the selected delay time of safety combination A2
expires, the internal safety relay of the drive must have
already dropped-out and its checkback signal contacts
AS1/2 indicate that the drive is in a safe condition.
Powering-up and powering-down the drive
The drive can be started when the protective doors are closed
and Emergency Stop button S3 is released.
■ When pressing button S2 ("On"), safety combination A1 is
brought into the operational state. Safety combination A2
is again in an operational state. The internal line contactor
of the rectifier unit is energized.
■ The internal safety relay is energized (PLC output DO2), a 1
signal is entered (PLC output DO3) at contact 65 (controller
enable) of the drive. The drive restarts.
■ Before the selected delay time of safety combination A1
expires, the internal safety relay of the drive must have
already dropped-out and its checkback signal contacts AS
1/2 indicate that the drive is in a safe condition.
■ The safely delayed enable contacts of safety combination
A1 open after the selected delay time has expired. This
means that the internal line contactor of the rectifier unit is
no longer energized and the drive is electrically isolated
from the line supply.
■ The checkback signal of the internal line contactor of the
rectifier unit is monitored. If the contactor does not dropout
due to an incorrect function, then the drive is prevented
from restarting after an Emergency Stop.
■ If the drive is stationary (speed = 0), then PLC output DO2
to the internal safety relay of the drive is reset. The internal
safety relay of the drive drops-out and its checkback signal
contacts close (1st shutdown path!)
■ The safely delayed enable contacts of safety combination
A2 open after the selected delay time has expired. This
delay time must be set so that the checkback signal of the
internal safety relay already indicates that the drive is in a
safe condition.
■ If the delay time of the contactor combination A2 has been
correctly set and the function of the internal drive safety
relay is correct, the internal line contactor of the rectifier
unit does not drop-out. If the delay time is set too short or
if the internal safety relay does not function correctly, the
internal line contactor of the rectifier unit drops-out and
isolates the drive from the line supply (2nd shutdown
path!).
■ When button S2 is pressed ("Off"), PLC output DO3 is reset
and a 0 signal is entered at contact 65 (controller enable)
of the drive. The drive is immediately braked down to 0
speed and the pulses are cancelled. If the drive is stationary
(speed = 0), then the PLC output DO2 to the internal safety
relay of the drive is reset. If the protective doors are
opened, the safely delayed enable contacts of safety combination
A2 open after the selected delay time has expired
(1st shutdown path!). If the internal safety relay of the
drive has still not dropped-out as a result of an incorrect
function or a fault (PLC), the internal line contactor of the
rectifier unit drops-out and isolates the drive from the line
supply (2nd shutdown path!).
Functional Example No. MC-FE-I-002-V11-EN 423
Ex. No.
2.6