ID*
From
To
Description
(14)
RUN (channel
passivation &
reintegration)
INIT
Powering off/on
(15)
INIT
INIT
Powering off/on
(16)
RUN (user
acknowledge-
ment request)
SAFE STOP
Fatal error(s) (CPU test, RAM test, etc. failed)
took place
(17)
RUN (user
acknowledge-
ment request)
INIT
Powering off/on
(18)
RUN (module
passivation with
a command)
RUN (module
passivation)
PROFIsafe watchdog, PROFIsafe communication
error or undervoltage/overvoltage was identified.
Note:
In this transition, it is possible that
WD_timeout bit of PROFIsafe F-Host instance
toggles if watchdog timeout is periodically recog-
nized by the Safety I/O module.
(19)
RUN (module
passivation)
RUN (module
passivation with
a command)
If the threshold shut-down value was not reached
during process undervoltage or overvoltage
phase and the process voltage is back in the
normal range, the Safety I/O module reintegrates
and would go to RUN (ok) state automatically, but
short time before the “activate_FV_C = 1” com-
mand was sent from the PROFIsafe F-Host
stack, which leads the Safety I/O module to RUN
(module passivation with a command) state.
(20)
RUN (user
acknowledge-
ment request)
RUN (module
passivation)
Process undervoltage/overvoltage was identified.
(21)
RUN (module
passivation)
RUN (user
acknowledge-
ment request)
n
Module error (watchdog or communication
error (CRC)) is gone.
and
n
Command activate_FV_C = 0
then
n
Safety I/O module sets OA_Req_S = 1
(22)
RUN (user
acknowledge-
ment request)
RUN (ok)
n
OA_Req_S = 1 was set by the Safety I/O
module after the module error is gone.
n
OA_C (positive edge) was set by the PROFI-
safe F-Host for the given Safety I/O module
(23)
RUN (user
acknowledge-
ment request)
RUN (module
passivation with
a command)
“activate_FV_C = 1” command was sent from the
PROFIsafe F-Host
(24)
RUN (module
passivation with
a command)
SAFE STOP
Fatal error(s) (CPU test, RAM test, etc. failed)
took place
AC500-S Safety Modules
Generic Safety I/O module behaviour > Safety I/O module states
30.03.2017
AC500-S
68
