6.4.1 Safety Circuit Integrity Levels
The application requirements for safeguarding devices vary for the level of control reliability or safety category per ISO
13849-1 (EN954-1). While Banner Engineering always recommends the highest level of safety in any application, the user
is responsible to safely install, operate, and maintain each safety system and comply with all relevant laws and
regulations.
The safety performance (integrity) must reduce the risk from identified hazards as determined by the machine’s risk
assessment. See
Safety Circuit Integrity and ISO 13849-1 Safety Circuit Principles
on page 68 for guidance if the
requirements as described by ISO 13849-1 need to be implemented.
6.4.2 Emergency Stop Push Buttons
The Safety Controller safety inputs may be used to monitor emergency stop push buttons.
WARNING: Emergency Stop Functions
Do not mute or bypass any Emergency Stop device. ANSI NFPA79 and IEC/EN 60204-1 require
that the Emergency Stop function remain active at all times. Muting or bypassing the safety
outputs will render the emergency stop function ineffective.
The Safety Controller Emergency Stop configuration prevents muting or bypassing of the E-
Stop input(s). However, the user still must ensure that the E-Stop device remains active at
all times.
WARNING: Reset Routine Required
U.S. and international standards require that a reset routine be performed after clearing the cause of a
stop condition (for example, arming an E-stop button, closing an interlocked guard, etc.). Allowing the
machine to restart without actuating the normal start command/device can create an unsafe
condition which may result in serious injury or death.
In addition to the requirements stated in this section, the design and installation of the Emergency Stop device must
comply with ANSI NFPA 79 or ISO 13850. The stop function must be either a functional stop Category 0 or a Category 1
(see ANSI NFPA79).
Emergency Stop Push Button Requirements
E-stop switch must provide one or two contacts for safety which are closed when the switch is armed. When activated, the
E-stop switch must open all its safety-rated contacts, and must require a deliberate action (such as twisting, pulling, or
unlocking) to return to the closed-contact, armed position. The switch must be a positive-opening (or direct-opening) type,
as described by IEC 60947-5-1. A mechanical force applied to such a button (or switch) is transmitted directly to the
contacts, forcing them to open. This ensures that the switch contacts open whenever the switch is activated.
Standards ANSI NFPA 79, ANSI B11.19, IEC/EN 60204-1, and ISO 13850 specify additional Emergency Stop switch device
requirements, including the following:
•
Emergency stop push buttons must be located at each operator control station and at other operating stations
where emergency shutdown is required
•
Stop and Emergency stop push buttons must be continuously operable and readily accessible from all control and
operating stations where located. Do not mute or bypass any E-stop button
•
Actuators of emergency stop devices must be colored red. The background immediately around the device actuator
must be colored yellow. The actuator of a push-button-operated device must be of the palm or mushroom-head
type
•
The Emergency stop actuator must be a self-latching type
NOTE: Some applications may have additional requirements; the user is responsible to comply with all
relevant regulations.
6.4.3 Rope (Cable) Pull
Rope (cable) pull emergency stop switches use steel wire rope; they provide emergency stop actuation continuously
over a distance, such as along a conveyor.
XS/SC26-2 Safety Controller
72