
Parker Hannifin Corporation
Cylinder Division
Des Plaines, Illinois
www.parker.com
/cylinder
Hydraulic and Electrohydraulic Actuators
HAS Series Analog Drives Manual
Catalog HY08-4005-M3
52
WARNING:
This product can expose you to chemicals including
Lead and Lead Compounds
which are known to the State of
California to cause cancer and birth defects or other reproductive harm. For more information go to www.P65Warnings.ca.gov
PROP 65 WARNING
Safe Torque Off
TTH
HIISS EEQ
QU
UIIPPM
MEEN
NTT IIFF U
USSEED
D IIN
NC
CO
OR
RR
REEC
CTTLLYY IISS PPO
OTTEEN
NTTIIAALLLLYY D
DAAN
NG
GEER
RO
OU
USS.. TTH
HEER
REEFFO
OR
REE
U
UN
ND
DEER
R N
NO
O C
CIIR
RC
CU
UM
MSSTTAAN
NC
CEESS SSH
HO
OU
ULLD
D IITT B
BEE U
USSEED
D B
BEEFFO
OR
REE TTH
HEESSEE IIN
NSSTTR
RU
UC
CTTIIO
ON
NSS H
HAAVVEE
B
BEEEEN
N R
REEAAD
D AAN
ND
D U
UN
ND
DEER
RSSTTO
OO
OD
D B
BYY TTH
HEE EEN
ND
D U
USSEER
R W
WH
HO
O SSH
HO
OU
ULLD
D B
BEE AAPPPPR
RO
OPPR
RIIAATTEELLYY
Q
QU
UAALLIIFFIIEED
D TTO
O O
OPPEER
RAATTEE TTH
HEE EEQ
QU
UIIPPM
MEEN
NTT..
This section provides general information about STO.
Two safety functions can be implemented with the 890: Safe Torque Off (STO) and Safe Stop
1 (SS1). In order to meet all aspects of STO and SS1, an external safety control unit should
be used.
To implement Safe Stop 1 (SS1), the external safety control unit causes the drive to
decelerate to rest. Once at rest, it invokes STO in the 890. Please refer to
EN61800-5-2:2007 para 4.2.2.3 for the formal definitions.
It is the user’s responsibility to:
1) Risk assess the machine.
2) Design, implement and assess an appropriate solution for each application to meet all
relevant safety requirements.
Note: STO is an electronic inhibit intended for use during normal operation of the machine. It is
not intended for use during machine maintenance, repair, replacement or other similar
activities. For these activities recogni
z
ed electrical power isolation devices and lock-off
procedures should be used.
The 890 STO function is a factory-fitted and factory-tested feature. It is only compatible with
firmware versions 3.5 and onwards. See the section “SSaaffeettyy W
Waarrnniinnggss aanndd LLiim
miittaattiioonnss” on
page 6-21.
SSTTO
O FFuunnccttiioonnaall D
Deessccrriippttiioonn
STO is a means of preventing an 890 drive from delivering power to its connected electric
motor. Please refer to EN61800-5-2:2007 para 4.2.2.2 for the formal definition.
To ensure a high degree of safety, two independent STO control channels are implemented in
hardware. The STO circuit in the 890 is designed such that a fault in one control channel will
not affect the other channel’s ability to prevent the drive from starting, i.e. the STO function of
the 890 drive is tolerant to any single fault. It may not be tolerant to an accumulation of faults.
This is in keeping with its declared safety ratings.
STO always overrides any attempt to start the drive. If one or both STO control inputs is
requesting the STO function, the drive will not start, even if for example, the drive’s software
malfunctions and tries to cause the motor to turn.
The STO function is implemented in hardware; it overrides all software activities. The only
software involvement is to report STO status to the user via an MMI, serial communications link
or user terminal on the 890 control board as defined by the drive configuration.
W
WAAR
RN
NIIN
NG
G
THE DECLARED SIL/PL CAPABILITY OF THIS STO PRODUCT CAN BE ACHIEVED ONLY WHEN
THE TWO STO USER INPUTS ARE DRIVEN INDEPENDENTLY. THEY MUST NOT BOTH BE
DRIVEN FROM A COMMON SOURCE; OTHERWISE THE SINGLE FAULT DETECTION WILL BE
COMPLETELY INOPERATIVE.
USE OF THE PRODUCT IN THIS “COMMON SOURCE” CONDITION INVALIDATES THE
STO PRODUCT SPECIFICATION AND IS ENTIRELY AT THE USER’S OWN RISK.
PPaarrkkeerr H
Haannnniiffiinn C
Coorrppoorraattiioonn
Cylinder Division
Des Plaines, Illinois
49
w
ww
ww
w..ppaarrkkeerr..ccoom
m/
cylinder
General Information
TTH
HIISS EEQ
QU
UIIPPM
MEEN
NTT IIFF U
USSEED
D IIN
NC
CO
OR
RR
REEC
CTTLLYY IISS PPO
OTTEEN
NTTIIAALLLLYY D
DAAN
NG
GEER
RO
OU
USS.. TTH
HEER
REEFFO
OR
REE
U
UN
ND
DEER
R N
NO
O C
CIIR
RC
CU
UM
MSSTTAAN
NC
CEESS SSH
HO
OU
ULLD
D IITT B
BEE U
USSEED
D B
BEEFFO
OR
REE TTH
HEESSEE IIN
NSSTTR
RU
UC
CTTIIO
ON
NSS H
HAAVVEE
B
BEEEEN
N R
REEAAD
D AAN
ND
D U
UN
ND
DEER
RSSTTO
OO
OD
D B
BYY TTH
HEE EEN
ND
D U
USSEER
R W
WH
HO
O SSH
HO
OU
ULLD
D B
BEE AAPPPPR
RO
OPPR
RIIAATTEELLYY
Q
QU
UAALLIIFFIIEED
D TTO
O O
OPPEER
RAATTEE TTH
HEE EEQ
QU
UIIPPM
MEEN
NTT..
This section provides general information about STO.
Two safety functions can be implemented with the 890: Safe Torque Off (STO) and Safe Stop
1 (SS1). In order to meet all aspects of STO and SS1, an external safety control unit should
be used.
To implement Safe Stop 1 (SS1), the external safety control unit causes the drive to
decelerate to rest. Once at rest, it invokes STO in the 890. Please refer to
EN61800-5-2:2007 para 4.2.2.3 for the formal definitions.
It is the user’s responsibility to:
1) Risk assess the machine.
2) Design, implement and assess an appropriate solution for each application to meet all
relevant safety requirements.
Note: STO is an electronic inhibit intended for use during normal operation of the machine. It is
not intended for use during machine maintenance, repair, replacement or other similar
activities. For these activities recognised electrical power isolation devices and lock-off
procedures should be used.
The 890 STO function is a factory-fitted and factory-tested feature. It is only compatible with
firmware versions 3.5 and onwards. See the section “SSaaffeettyy W
Waarrnniinnggss aanndd LLiim
miittaattiioonnss” on
page 6-21.
SSTTO
O FFuunnccttiioonnaall D
Deessccrriippttiioonn
STO is a means of preventing an 890 drive from delivering power to its connected electric
motor. Please refer to EN61800-5-2:2007 para 4.2.2.2 for the formal definition.
To ensure a high degree of safety, two independent STO control channels are implemented in
hardware. The STO circuit in the 890 is designed such that a fault in one control channel will
not affect the other channel’s ability to prevent the drive from starting, i.e. the STO function of
the 890 drive is tolerant to any single fault. It may not be tolerant to an accumulation of faults.
This is in keeping with its declared safety ratings.
STO always overrides any attempt to start the drive. If one or both STO control inputs is
requesting the STO function, the drive will not start, even if for example, the drive’s software
malfunctions and tries to cause the motor to turn.
The STO function is implemented in hardware; it overrides all software activities. The only
software involvement is to report STO status to the user via an MMI, serial communications link
or user terminal on the 890 control board as defined by the drive configuration.
W
WAAR
RN
NIIN
NG
G
THE DECLARED SIL/PL CAPABILITY OF THIS STO PRODUCT CAN BE ACHIEVED ONLY WHEN
THE TWO STO USER INPUTS ARE DRIVEN INDEPENDENTLY. THEY MUST NOT BOTH BE
DRIVEN FROM A COMMON SOURCE; OTHERWISE THE SINGLE FAULT DETECTION WILL BE
COMPLETELY INOPERATIVE.
USE OF THE PRODUCT IN THIS “COMMON SOURCE” CONDITION INVALIDATES THE
STO PRODUCT SPECIFICATION AND IS ENTIRELY AT THE USER’S OWN RISK.
PPaarrkkeerr H
Haannnniiffiinn C
Coorrppoorraattiioonn
Cylinder Division
Des Plaines, Illinois
49
w
ww
ww
w..ppaarrkkeerr..ccoom
m/
cylinder
STO Functional Description