Transitions between safety CPU states

This is the web edition of the original ‎⮫ AC500-S safety user manual, version 1.3.2. This web edition is provided for quick reference only. The original safety user manual must be used to meet functional safety application requirements.

Transition (Fig.439)	From	To	Description
(1)	INIT	RUN	Initialization was successful. Boot project is available and there is no configuration error or any other error of severity level 1 or 2.
(2)	RUN	INIT	Power cycle or “reboot” PLC browser/shell command from non-safety CPU.
(3)	INIT	DEBUG STOP	Initialization was successful. No boot project is available or error of severity level 3. Switch address 0xFF was set on the safety CPU.
(4)	DEBUG STOP	INIT	Power cycle or “reboot” PLC browser/shell command from non-safety CPU.
(5)	INIT	SAFE STOP	An error of severity level 1 or 2 was identified during the initialization. Unsuccessful firmware or boot code update.
(6)	SAFE STOP	INIT	Power cycle or “reboot” PLC browser/shell command from non-safety CPU.
(7)	RUN	DEBUG RUN	In AC500-S Programming Tool, online service “Toggle breakpoint”, “Write values”, “Force values” or “Single cycle” was used.
(8)	DEBUG STOP	SAFE STOP	An error of severity level 1 or 2 was identified.
(9)	RUN	SAFE STOP	An error of severity level 1 or 2 was identified.
(10)	RUN	DEBUG STOP	In AC500-S Programming Tool, online service “Stop”, “Sourcecode download” or “Reset” (various) was used. [Run] button on non-safety CPU was pressed (non-safety CPU was in "Run" state) . Online service “Stop” or “Reset” (various) on non-safety CPU was used. New safety boot project is loaded.
(11)	DEBUG RUN	INIT	Power cycle or “reboot” PLC browser/shell command from non-safety CPU.
(12)	DEBUG RUN	SAFE STOP	An error of severity level 1 or 2 was identified.
(13)	DEBUG RUN	DEBUG STOP	In AC500-S Programming Tool, online service “Stop” or “Reset” (various) was used. [Run] button on non-safety CPU was pressed (non-safety CPU was in "Run" state). Online service “Stop” or “Reset” (various) on non-safety CPU was used. Breakpoint was reached during debugging. At the end of the safety CPU cycle in "Single cycle" debugging mode. New safety boot project is loaded.
(14)	DEBUG STOP	DEBUG RUN	In AC500-S Programming Tool, online service “Step over”, “Step in” or “Run” was used. Online service “Run” on non-safety CPU was used. [Run] button on non-safety CPU was pressed (non-safety CPU was in "Stop" state).
(15)	INIT	INIT	Power cycle or “reboot” PLC browser/shell command from non-safety CPU.
(16)	INIT	SAFE STOP	Switch address 0xFE, 0xFD or 0xFC was set on the safety CPU.