Baumuller BM5-O-SAF-002, Operation Manual, Page: 35 / 182

DANGER!
The encoder must be checked if it is applicable to be used for all monitoring functions.
DANGER!
The monitored controlled standstill (SOS) without dynamic sampling is permitted for
a 12-hours period at the maximum.
If the SAF-002/-003 does not detect a movement at the encoder within the diagnosis
test interval of 12 hours it automatically changes into the safe STO status (Safe
Torque Off) and generates an accordant error message (error 108).
Description of the Safety Module
Operation Manual Safety Module for b maXX 5000 BM5-O-SAF-002/3
Document no.: 5.11016.03
35
of 180
7
The SAF-002/-003 module must be switched off and on again. This means that the entire
drive is switched off and on again or the voltage supply of the drive is interrupted for a
short time:
Figure 3: Encoder monitoring

Diagnosis time of 12 h expired -> Fail safe -> Switch off voltage supply
Instead of that, in the module version "Software extension" (refer to
Z
Identification of the
Safety Module - Type Key
–
from page 46 for the definition) the "Encoder Fail" is reported
after 12 hours, which can be acknowledged by the user as long as it is not a permanent
issue (refer to chapter
Z
Acknowledgment encoder fail status
–
on page 40).
This way the switch-off of the module is avoided.
7.5.1 Standstill monitoring of the encoder at the SAF-002/-003 module in the "Software Extension"
version
The encoder monitoring in the SAF-002/3 module in the "Software Extension"
differentiates between the following cases:
n
Used encoder type (resolver or SINCOS-based encoders, such as the
HIPERFACE®)