SEW-Eurodrive MOVIMOT flexible MMF3 C/DBC Series, Руководство по эксплуатации

Страница: 416 / 432

12
Functional safety
Safety conditions
Operating Instructions – MOVIMOT
®
flexible
416
12.3.4 Requirements on startup
• To validate the implemented drive safety functions, they must be documented and
checked after successful startup.
• Observe the restrictions for drive safety functions in chapter "Restrictions" for the
validation of the safety functions. Non-safety-related parts and components that af-
fect the result of the test (e.g. motor brake) must be deactivated, if necessary.
• For using the drive unit in safety-relevant applications, it is essential that you per-
form and record startup checks for the disconnecting device and correct wiring.
12.3.5 Requirements on operation
• Operation is only allowed within the limits specified in the data sheets. This prin-
ciple applies to the external safety controller as well as to the drive unit.
• The built-in diagnostic function is limited in case of a permanently enabled or per-
manently disabled STO input. Only with a level change of the STO signal, exten-
ded diagnostic functions are performed. This is why the drive safety function via
STO input must be triggered with connected line voltage at least once every 12
months for PL d according to EN ISO 13849‑1 and SIL 2 according to
EN 61800‑5‑2, and at least once every 3 months for PL e according to
EN ISO 13849‑1 and SIL 3 according to EN 61800‑5‑2 to achieve a complete test
coverage. Adhere to the following test procedure.
[1]
> 700 ms
> 700 ms
[3]
t
[2] [2] [2]
[4]
15205932683
[1] Maximum 12 months with PL d/SIL 2
Maximum 3 months with PL e/SIL 3
[2] Internal diagnostics
[3] High: No STO
[4] Low: STO active
• To achieve complete test coverage after a device reset (e.g. after connecting the
line voltage), the test transition (STO active → not active) can only be started >
700 ms later. The device signals "ready for operation" or "STO – Safe Torque Off"
if it is not in fault state.
• A detected hardware fault in the internal switch-off channels for STO will lead to a
locking fault state of the drive unit. If the fault is reset (e.g. by switching the line
voltage on/off or by a low level at the STO input for at least 30 ms), a complete test
with internal diagnostics according to the above mentions test procedure must be
performed. If the fault occurs again, replace the device or contact the
SEW‑EURODRIVE Service.
29128668/EN – 12/2019