Harmony eXLhoist, User Manual

Page: 64 / 228

Safety
64
EIO0000001505 12/2014
E-STOP
Overview
For general descriptions, refer to E-STOP function ( see page 121 ) .
The E-STOP is not configurable.
The undesired event of the E-STOP function is masking of E-STOP activation.
The safe state of the E-STOP function is to open safety relays.
For a SIL3 PLe E-STOP, auxiliary contact of contactors must be mechanically linked. Contactors
shall be compliant with:

EN 60947-4-1:2010 Annex F (preferred) - Requirements for auxiliary contact linked to power
contact (mirror contact), or

EN 60947-5-1:2004 Annex L - Special prescription for elements with contact mechanically
linked.
In order to be compliant with the Common Cause of Failure (CCF), wiring of redundant contactors
or drives must be by different path.
The standard E-STOP function of eXLhoist is limited to a stop category 0 according to IEC 60204-
32. If some applications require an E-STOP function with a stop category 1, then a safety relay type
Preventa XPS ATE or XPS AV or similar must be used.
In order to justify of the safety category 4 according to ISO13849-1, an automatic diagnostic is
realized on IN0 terminal thanks to the S2_S3 terminal (Pulsed 12 V). An external supply of IN0
input cannot be used.
E-STOP function is a passive stop (function activated when an invalid frame is detected).
Function Installation IEC 60204-32 IEC 61508 IEC 62061 ISO 13849
STOP
category SIL SIL CL Safety
category PL
E-STOP With auxiliary
contact loop
between S2_S3
and IN0 Category SIL3 SIL3 CL Safety
category PL e
Without auxiliary
contact loop
between S2_S3
and IN0 SIL2 SIL2 CL Safety
category PL d