E16521D-Manual_EN_Rev12 2021_JAN_14
Page 22 of 26
5.2
Safety Notes for SIL2 Speed applications
5.2.1
Monitoring the Speed Signal
For full protection against overspeed, the speed signal must be monitored for its plausibility. This
can be done via the speed setpoint SP2 (checking for low-speed) or via the analog output.
This covers each possible signal fault (fault within the sensor, cable break or short circuit, in-
correctly mounted sensor, fault in the barrier D461).
If SP2 is used for plausibility check:
Parameter P04.04 must be set to 1 .
Setpoint SP2 must be set to a speed > 0 .
With machine in operation the measured speed must be above SP2.
If analog output is used for plausibility check:
With machine in operation the value of the analog output must be checked by a system capable
of diagnosis and the machine must be set to safe state in case of detected fault.
5.2.2
Use of the Safety Output OR1
OR1 must be used for the safety function.
With a single channel application (one E16521D only), the two contact sets of OR1 must be
wired in series.
With triple channel application (three E16521D), the contact sets of the three OR1 may be wired
to a 2oo3 circuit.
If the three OR1 outputs are wired to a system capable of diagnosis, it is sufficient to use one
contact set only of each OR1.
5.3
Safety Data of E16521D
See document: E16521D-SIL2-SafetyData (B170046_V10_SIL-Datasheet_Braun_E16521D)
