7
3
Safety function
The FORTiS-S FS encoder system shall provide a safe position when requested by the
evaluation unit.
The following restrictions apply to this claim:
•
The system installer must perform a verified commissioning test during installation.
•
The system repairer must perform a verified commissioning test following replacement of a
system part.
•
The maximum request rate supported is 32 kHz and 16 kHz for DRIVE-CLiQ.
• Electrical errors for the BiSS Safety serial interface are detected by the evaluation unit
comparing CPW and SPW content. See the data sheet
BiSS Safety for RESOLUTE and
FORTiS encoders
(Renishaw part no. L-9517-9884) for more information.
• Electrical errors for the Siemens DRIVE-CLiQ serial interface are detected by the evaluation
unit comparing POS1 and POS2 content. See the relevant Siemens AG evaluation unit manual
for more information.
• When installed correctly, the FORTiS-S FS encoder system has a mechanical safe position of
±1 mm.
3.1 Fault exclusions
The following will invalidate the Functional Safety certification of the FORTiS-S FS encoder system:
• Faults caused by cutting and reconnecting the cable or the use of a non-Renishaw cable that is
not approved.
• Incorrect installation.
• Dismantling.
•
Operating the system outside the limits specified in this installation guide.
3.2 Failure modes effects and diagnostics analysis
All diagnosed failure modes are detected immediately except for a position discrepancy between
the two measurement methods which is detected within 375 μs.
See
for a summary of the FMEDA.
NOTE:
For the purposes of the FMEDA calculation the following conditions have been assumed:
3.3 Installation
For the safety function to be valid the instructions detailed in this installation guide must be
followed.
3.4 Commissioning test
The following test MUST be performed when commissioning the FORTiS-S FS encoder system
and after any repair or maintenance of the system.
Resolution check
Move each readhead by a known distance and confirm that the
position changes as expected. The tolerance for raising a fault
condition is relative to the safe position determined by the system
manufacturer.
Method:
SN29500-2005-1
Environment:
Ground mobile
Temperature:
60 °C