SF_EDM

This is the web edition of the original ‎⮫ AC500-S safety user manual, version 1.3.2. This web edition is provided for quick reference only. The original safety user manual must be used to meet functional safety application requirements.

Standards	Requirements
IEC 60204-1:2016	9.2.2: Stop function categories; category 0
ISO 13849-1:2015	5.2.1 Safety-related stop function A safety-related stop function (e.g., initiated by a safeguard) shall, as soon as necessary after actuation, put the machine in a safe state. 6.2 Specifications of categories Fault detection (of the actuator, e.g., open circuits)
ISO 12100:2010	6.2.11.2 Starting of an internal power source/switching on an external power supply 6.2.11.4 Restart after power interruption
ISO 13849-1:2015	5.2.2 Manual reset function

External device monitoring (EDM): The FB controls a safety output and monitors controlled actuators, e.g., subsequent contactors.

General:

The SF_EDM FB controls a safety output and monitors controlled actuators.

This function block monitors the initial state of the actuators via the feedback signals (EDM1 and EDM2) before the actuators are enabled by the FB.

The function block monitors the switching state of the actuators (MonitoringTime) after the actuators have been enabled by the FB.

Two single feedback signals must be used for an exact diagnosis of the connected actuators. A common feedback signal from the two connected actuators must be used for a restricted yet simple diagnostic function of the connected actuators. When doing so, the user must connect this common signal to both parameter EDM1 and parameter EDM2. EDM1 and EDM2 are then controlled by the same signal.

The switching devices used in the safety function should be selected from the category specified in the risk analysis (ISO 13849-1).

Optional startup inhibits:

Startup inhibit in the event of block activation.

Table 1089: FB name: SF_EDM
Name	Data type	Initial value	Description, parameter values
VAR_INPUT
Activate	BOOL	FALSE	⮫ Table 1021 “General input parameters”
S_OutControl	BOOL	FALSE	Variable. Control signal of the preceding safety FBs. Typical function block signals from the library (e.g., SF_OutControl, SF_TwoHandControlTypeII, and/or others). FALSE: Disable safety output (S_EDM_Out). TRUE: Enable safety output (S_EDM_Out).
EDM1	BOOL	FALSE	Variable. Feedback signal of the first connected actuator. FALSE: Switching state of the first connected actuator. TRUE: Initial state of the first connected actuator.
EDM2	BOOL	FALSE	Variable. Feedback signal of the second connected actuator. Depending on the actuators installed and the targeted safety level, it may be that only combined inputs are allowed for wiring the feedback signals. In that case the user must use a graphic connection to jumper the EDM1 and EDM2 parameters. EDM1 and EDM2 are then controlled by the same signal. FALSE: Switching state of the second connected actuator. TRUE: Initial state of the second connected actuator.
Reset	BOOL	FALSE	⮫ Table 1021 “General input parameters”
MonitoringTime	TIME	#0ms	Constant. Maximum response time of the connected and monitored actuators.
VAR_OUTPUT
Ready	BOOL	FALSE	⮫ Table 1022 “General output parameters”
S_EDM_Out	BOOL	FALSE	Controls the actuator. The result is monitored by the feedback signal EDMx. FALSE: Disable connected actuators. TRUE: Enable connected actuators.
SafetyDemand	BOOL	FALSE	Optional. ⮫ Table 1022 “General output parameters”
ResetRequest	BOOL	FALSE	Optional. ⮫ Table 1022 “General output parameters”
Error	BOOL	FALSE	⮫ Table 1022 “General output parameters”
DiagCode	WORD	16#0000	⮫ Table 1022 “General output parameters”

Typical timing diagram

SF_EDM_TimingDiagram — Fig. 558: Typical timing diagram for SF_EDM

Function block-specific error and status codes

Table 1090: FB-specific error codes
DiagCode	State name	State description and output setting
C001	Reset Error 1	Static Reset signal in state 8401. Ready = TRUE S_EDM_Out = FALSE SafetyDemand = FALSE ResetRequest = FALSE Error = TRUE
C011	Reset Error 21	Static Reset signal or same signals at EDM1 and Reset (rising trigger at Reset and EDM1 at the same time) in state C010. Ready = TRUE S_EDM_Out = FALSE SafetyDemand = FALSE ResetRequest = FALSE Error = TRUE
C021	Reset Error 22	Static Reset signal or same signals at EDM2 and Reset (rising trigger at Reset and EDM2 at the same time) in state C020. Ready = TRUE S_EDM_Out = FALSE SafetyDemand = FALSE ResetRequest = FALSE Error = TRUE
C031	Reset Error 23	Static Reset signal or same signals at EDM1, EDM2, and Reset (rising trigger at Reset, EDM1, and EDM2 at the same time) in state C030. Ready = TRUE S_EDM_Out = FALSE SafetyDemand = FALSE ResetRequest = FALSE Error = TRUE
C041	Reset Error 31	Static Reset signal or same signals at EDM1 and Reset (rising trigger at Reset and EDM1 at the same time) in state C040. Ready = TRUE S_EDM_Out = FALSE SafetyDemand = FALSE ResetRequest = FALSE Error = TRUE
C051	Reset Error 32	Static Reset signal or same signals at EDM2 and Reset (rising trigger at Reset and EDM2 at the same time) in state C050. Ready = TRUE S_EDM_Out = FALSE SafetyDemand = FALSE ResetRequest = FALSE Error = TRUE
C061	Reset Error 33	Static Reset signal or same signals at EDM1, EDM2, and Reset (rising trigger at Reset, EDM1, and EDM2 at the same time) in state C060. Ready = TRUE S_EDM_Out = FALSE SafetyDemand = FALSE ResetRequest = FALSE Error = TRUE
C071	Reset Error 41	Static Reset signal in state C070. Ready = TRUE S_EDM_Out = FALSE SafetyDemand = FALSE ResetRequest = FALSE Error = TRUE
C081	Reset Error 42	Static Reset signal in state C080. Ready = TRUE S_EDM_Out = FALSE SafetyDemand = FALSE ResetRequest = FALSE Error = TRUE
C091	Reset Error 43	Static Reset signal in state C090. Ready = TRUE S_EDM_Out = FALSE SafetyDemand = FALSE ResetRequest = FALSE Error = TRUE
C010	EDM Error 11	The signal at EDM1 is not valid in the initial actuator state. In state 8810 the EDM1 signal is FALSE when enabling S_OutControl. Ready = TRUE S_EDM_Out = FALSE SafetyDemand = FALSE ResetRequest = R¹ Error = TRUE
C020	EDM Error 12	The signal at EDM2 is not valid in the initial actuator state. In state 8810 the EDM2 signal is FALSE when enabling S_OutControl. Ready = TRUE S_EDM_Out = FALSE SafetyDemand = FALSE ResetRequest = R¹ Error = TRUE
C030	EDM Error 13	The signals at EDM1 and EDM2 are not valid in the initial actuator states. In state 8810, the EDM1 and EDM2 signals are FALSE when enabling S_OutControl. Ready = TRUE S_EDM_Out = FALSE SafetyDemand = FALSE ResetRequest = FALSE Error = TRUE
C040	EDM Error 21	The signal at EDM1 is not valid in the initial actuator state. In state 8810, the EDM1 signal is FALSE and the monitoring time has elapsed. Ready = TRUE S_EDM_Out = FALSE SafetyDemand = FALSE ResetRequest = R¹ Error = TRUE
C050	EDM Error 22	The signal at EDM2 is not valid in the initial actuator state. In state 8810, the EDM2 signal is FALSE and the monitoring time has elapsed. Ready = TRUE S_EDM_Out = FALSE SafetyDemand = FALSE ResetRequest = R¹ Error = TRUE
C060	EDM Error 23	The signals at EDM1 and EDM2 are not valid in the initial actuator states. In state 8810, the EDM1 and EDM2 signals are FALSE and the monitoring time has elapsed. Ready = TRUE S_EDM_Out = FALSE SafetyDemand = FALSE ResetRequest = R¹ Error = TRUE
C070	EDM Error 31	The signal at EDM1 is not valid in the actuator switching state. In state 8000, the EDM1 signal is TRUE and the monitoring time has elapsed. Ready = TRUE S_EDM_Out = FALSE SafetyDemand = FALSE ResetRequest = TRUE Error = TRUE
C080	EDM Error 32	The signal at EDM2 is not valid in the actuator switching state. In state 8000, the EDM2 signal is TRUE and the monitoring time has elapsed. Ready = TRUE S_EDM_Out = FALSE SafetyDemand = FALSE ResetRequest = TRUE Error = TRUE
C090	EDM Error 33	The signals at EDM1 and EDM2 are not valid in the actuator switching state. In state 8000, the EDM1 and EDM2 signals are TRUE and the monitoring time has elapsed. Ready = TRUE S_EDM_Out = FALSE SafetyDemand = FALSE ResetRequest = TRUE Error = TRUE
C100	Init Error	Similar signals at S_OutControl and Reset (R_TRIG at same cycle) detected (may be a programming error). Ready = TRUE S_EDM_Out = FALSE SafetyDemand = FALSE ResetRequest = FALSE Error = TRUE

Definition for R¹:

IF EDM_1 = TRUE AND EDM_2 = TRUE THEN R = TRUE ELSE R = FALSE

Table 1091: FB-specific status codes (no error):
DiagCode	State name	State description and output setting
0000	Idle	The function block is not active (initial state). Ready = FALSE S_EDM_Out = FALSE SafetyDemand = FALSE ResetRequest = FALSE Error = FALSE
8401	Init	Block activation startup inhibit is active. Reset required. Ready = TRUE S_EDM_Out = FALSE SafetyDemand = FALSE ResetRequest = TRUE Error = FALSE
8810	Output Disable	EDM control is not active. Timer starts when state is entered. Ready = TRUE S_EDM_Out = FALSE SafetyDemand = TRUE ResetRequest = FALSE Error = FALSE
8000	Output Enable	EDM control is active. Timer starts when state is entered. Ready = TRUE S_EDM_Out = TRUE SafetyDemand = FALSE ResetRequest = FALSE Error = FALSE