Note
Check whether cross-circuit detection of the input circle and the connection
wiring is required.
If needed, use a safety switch device with horizontal cross-circuit detection for
triggering of the safety module.
2.4 Areas of application and certification
The motor controller with build-in safety module is a safety component according
to the EC machinery directive; the motor controller is equipped with the CE mark.
Standards and test values which the product must comply with and fulfil can be
found in the section “Technical data” (
Appendix 12). The product-relevant EU
directives can be found in the declaration of conformity.
Certificates and declarations of conformity for this product can be found at
www.festo.com.
3
Product description
3.1 Supported devices
The safety module CAMC-G-S1 can only be used in motor controllers in conformity
with section 1.2. The motor controllers CMMP-AS-…-M3 are delivered without a
safety module in the Ext3 slot.
3.2 Control sections and connections
The safety module CAMC-G-S1 has the following control sections, connections and
display components:
2
3
4
1
0V
24V
C2
C1
0V-B
STO-B
0V-A
STO-A
5
1
Motor controller CMMP-AS-…-M3
with Ext3 slot for safety modules
2
Digital I/O-interface [X40] for
control of the STO function
3
Pin 1 of the interface [X40]
4
LED for display of the operating
status (status of functional safety)
5
DIP-switch
(activation/configuration of the
fieldbus-communication in the
motor controller)
Fig. 1
Control section and connections CAMC-G-S1
4
Function and application
The safety module CAMC-G-S1 has the following performance characteristics:
– “Safe Torque Off ” (STO) function
– Potential-free acknowledgement contact,
– Designed as a plug-in module that can be plugged in from the outside,
– To be used solely with motor controllers of the series CMMP-AS-…-M3.
4.1 Description of the safety function
The power supply to the drive is safely disconnected with the active safety function
STO “Safe Torque Off ”. The drive cannot generate torque and so cannot make any
dangerous movements. There is no monitoring of the standstill position.
The machine must be stopped in a safety-oriented manner, e.g. through a safety
switch device.
Note
There is a danger that the drive will advance in case of multiple errors in the
CMMP-AS-…-M3.
If the output stage of the motor controller fails while in the STO status (simultan-
eous short circuit of 2 power semiconductors in different phases), a limited
dwell movement of the rotor may result. The rotation angle / path corresponds
to a pole pitch. Examples:
– Rotary axis, synchronous machine, 8-pin
Movement
<
45° at the motor
shaft.
– Linear motor, pole pitch 20 mm
Movement
<
20 mm at the moving part.
4.2 Control ports STO-A, 0V_A / STO-B, 0V_B [X40]
The safety function STO is requested solely through switching off of the control
voltage (0 V) at the two digital control ports STO-A and STO-B. Safety-oriented
circuitry for additional interfaces at the CMMP-AS...-M3 basic unit is not necessary
or intended.
Cross-circuit detection in the input circuit is not carried out by the safety
module.
According to the specification of the safety function, both levels must be identical
at STO-A/B, otherwise an error message will be generated. The finite state
machine in the motor controller internally monitors the driver supply voltage as a
result of activation of the control ports. The level change for both inputs must take
place within the discrepancy time (preset: 100 ms), otherwise an error message
will be generated.
Recommendation: Always switch STO-A and STO-B simultaneously.
Temporary test impulses from safety controls are tolerated and thus do not trigger
the STO function.
4.3 Acknowledgement contact C1, C2 [X40]
The status of the motor controller is reported back to an external safety switch
device through a floating feedback contact (normally open).
The acknowledgement contact is designed as a single channel and may be used
for diagnostic purposes, but not in the safety circuit.
5
Mounting/Dismounting
The safety module CAMC-G-S1 is suitable only for integration into the motor
controller CMMP-AS-…-M3. It cannot be operated outside the motor controller.
The motor controller must be disconnected from all current carrying cables before
mounting and dismounting the safety module.
Warning
Danger of electric shock if the safety module is not mounted.
Contact with conducting parts will cause severe injuries and may result in death.
Before touching conducting parts during maintenance, repair and cleaning work
and during long service interruptions:
1. Switch off the power to the electrical equipment and secure it against being
switched on again.
2. After switching it off, wait at least 5 minutes of discharge time and check that
it is voltage-free before accessing the controller.
Note
Incorrect handling can damage the safety module or motor controller.
• Before mounting and installation work, switch off the supply voltage. Switch
on the supply voltage only when the mounting and installation work have
been completely finished.
• Never unplug a module from, or plug a module into the motor controller when
it is powered!
• Observe the handling specifications for electrostatically sensitive devices. Do
not touch the components or the conductive tracks of the printed circuit
board nor the pins of the terminal strip in the motor controller. Hold the safety
module only by the front plate or the edge of the board.
Mounting safety module
1. Slide safety module into the guides.
2. Tighten screws. Observe tightening
torque 0.4 Nm ± 20 %.
Result: Front plate has conducting contact
with the housing.
Dismantling safety module
1. Unscrew screws.
2. Loosen the safety module by gently
levering the front cover or by pulling on
the counter-plug by a few millimetres
and pull it out of the slot.
Fig. 2
Mounting / Dismounting
