Manual Safety Relays 3SK2 en-US
Manual Safety Relays 3SK2 en-US
Manual Safety Relays 3SK2 en-US
Safety Systems
SIRIUS 3SK2 Safety Relays
Manual
Gertehandbuch
Edition
05/2015
1
___________________
Introduction
2
___________________
Safety information
Industrial Controls
Safety systems
SIRIUS 3SK2 Safety Relays
Manual
3
___________________
Description
4
___________________
Mounting
5
___________________
Connection
6
___________________
Operation
7
___________________
Planning/configuring
___________________
8
Maintenance and service
___________________
9
Diagnostics
___________________
10
Technical data
___________________
11
Dimension drawings
___________________
12
Circuit diagrams
___________________
13
Spare parts/Accessories
___________________
14
Examples/applications
___________________
A
Appendix
05/2015
A5E32639619002A/RS-AB/002
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will
be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to
property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific
task in accordance with the relevant documentation, in particular its warning notices and safety instructions.
Qualified personnel are those who, based on their training and experience, are capable of identifying risks and
avoiding potential hazards when working with these products/systems.
Trademarks
All names identified by are registered trademarks of Siemens AG. The remaining trademarks in this publication
may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software
described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the
information in this publication is reviewed regularly and any necessary corrections are included in subsequent
editions.
Siemens AG
Division Digital Factory
Postfach 48 48
90026 NRNBERG
GERMANY
3ZX1012-0SK21-1AC1
05/2015 Subject to change
Table of contents
1
Introduction ........................................................................................................................................... 11
1.1
1.2
1.3
1.4
1.5
1.6
1.7
1.8
1.9
1.10
1.11
1.12
History .....................................................................................................................................19
2.2
2.3
2.4
2.5
Description ............................................................................................................................................ 29
3.1
3.2
3.3
3.4
3.5
3.6
3.7
3.8
3.9
3.9.1
3.9.2
3.9.3
Table of contents
3.9.3.1
3.9.3.2
3.9.3.3
3.9.3.4
3.9.3.5
3.9.3.6
3.9.3.7
3.9.3.8
3.9.3.9
3.9.3.10
3.9.3.11
3.9.4
4
Mounting ............................................................................................................................................... 65
4.1
4.2
4.2.1
4.2.2
4.2.3
4.2.4
4.2.5
4.2.6
4.2.7
4.2.8
4.3
4.3.1
4.3.2
4.4
4.4.1
4.4.2
4.4.3
4.4.4
Connection ........................................................................................................................................... 87
5.1
5.2
Power supply.......................................................................................................................... 88
5.3
Grounding .............................................................................................................................. 89
5.4
5.4.1
5.4.2
5.4.3
5.4.4
5.4.5
5.4.6
5.4.7
5.4.8
5.4.9
5.5
5.5.1
Table of contents
5.5.2
5.5.3
5.5.4
5.5.5
5.6
5.6.1
5.6.2
6.2
6.2.1
6.3
6.3.1
6.3.2
6.3.3
6.3.4
6.3.5
Planning/configuring............................................................................................................................ 125
7.1
7.1.1
7.1.2
7.1.3
7.1.3.1
7.1.3.2
7.1.4
7.1.5
7.1.6
7.2
7.2.1
7.2.2
7.2.3
7.2.4
7.2.5
7.2.6
7.2.7
7.2.7.1
7.2.7.2
7.2.7.3
7.2.7.4
7.3
7.3.1
7.3.2
7.3.3
7.3.4
7.3.5
7.3.6
7.3.7
Table of contents
7.4
7.4.1
7.4.2
7.4.2.1
7.4.2.2
7.4.2.3
7.4.2.4
7.5
7.5.1
Commissioning..................................................................................................................... 180
Modes .................................................................................................................................. 180
7.6
7.6.1
7.6.2
7.6.3
8.2
Diagnostics ..........................................................................................................................................193
9.1
9.2
9.2.1
9.2.2
9.3
9.3.1
9.3.2
9.3.3
9.4
Diagnostics via device display (3SK2 safety relay with width 45 mm) ................................ 203
9.5
9.5.1
9.5.2
9.5.3
9.5.3.1
9.5.3.2
9.5.3.3
9.5.3.4
9.6
9.6.1
9.6.2
9.6.3
9.6.3.1
9.6.3.2
9.6.3.3
9.6.4
9.6.4.1
9.6.4.2
9.6.5
Table of contents
10
11
12
10.2
10.3
10.3.1
10.3.2
11.2
DP interface ..........................................................................................................................258
12.2
12.3
12.4
DP interface ..........................................................................................................................262
13
14
14.2
14.3
14.3.1
14.3.2
14.3.3
14.3.4
14.3.5
14.3.6
14.3.7
14.3.8
14.3.9
14.3.10
14.3.10.1
14.3.10.2
14.4
14.4.1
14.4.2
14.4.2.1
14.4.2.2
14.4.3
14.4.4
14.4.5
Table of contents
14.4.5.1
14.4.6
Operational and safety-related switching via 3SK2 safety relay (3ZY12 device
connectors) .......................................................................................................................... 307
Operational and safety-related switching via 3SK2 safety relay (conventional wiring) ....... 309
Safety-related switching via the 3SK2 safety relay (3ZY12 device connector) and
operational switching via PLC .............................................................................................. 311
Control of frequency converters up to SILCL 2 and/or PL d / Cat. 3 ................................... 313
14.5
14.5.1
14.5.2
14.5.3
14.5.3.1
14.5.3.2
14.5.3.3
14.4.5.2
14.4.5.3
Appendix .............................................................................................................................................331
A.1
Glossary ..............................................................................................................................................333
Index ...................................................................................................................................................347
10
Introduction
1.1
1.2
11
Introduction
1.3 Validity range
1.3
Validity range
This manual is valid for the 3SK2 safety relays listed below:
Compact basic units
Article number
3SK2112-xAA10
3SK2122-xAA10
3RK3611-3AA00
3RK3511-xBA10
3ZS1316-*
x = 1: Screw terminals
x = 2: Spring-loaded terminals
Note
Additional information on system components
The following devices can be combined with 3SK2 safety relays using 3ZY12 device
connectors:
3SK1 output expansions with 24 V DC supply voltage
3RM1 Failsafe motor starters with 24 V DC supply voltage
You will find detailed information on these devices in the relevant product information. See
Section Additional documentation (Page 14).
This manual contains additional information about these devices that must be observed
when using them with 3SK2 safety relays.
SIEMENS reserves the right of including a Product Information for each new component,
and for each component of a later version.
12
Introduction
1.4 Topics dealt with
1.4
Chapter
Contents
Introduction
Safety information
Description
Assembly/Installation
Connection
Operation
Planning/configuring
Safety information
Grounding
Operator controls
Operating options
Response times
Commissioning
Factory setting
Device replacement
Diagnostics options
Diagnostics concept
Technical data
Technical data
Dimension drawings
Dimension drawings
Drilling plans
Circuit diagrams
Circuit diagrams
Spare parts/accessories
Spare parts
Accessories
Examples/applications
13
Introduction
1.5 Additional documentation
1.5
Additional documentation
Manuals
You will find further manuals in the table that may be of interest for your project planning.
They are available to download from the Internet free of charge. You can create your own
individual system documentation in mySupport.
Title
Document number
3ZX1012-0CS13-1AB1
3ZX1012-0SK11-0AB0
3ZX1012-0RM10-2AB1
3ZX1012-0SK11-1AB1
C79000-G8900-C124-03
Interesting links
Manuals in Siemens Industry Online Support
(https://support.industry.siemens.com/cs/ww/en/ps/man)
FAQs about safety engineering
(http://support.automation.siemens.com/WW/view/en/60763768/133000)
Safety Evaluation Tool (http://www.siemens.com/safety-evaluation-tool/)
Systematic industrial safety engineering: Safety Integrated
(http://www.siemens.com/safety-integrated)
14
Introduction
1.6 Siemens Industry Online Support
1.6
Product support
Here you will find all the information and comprehensive know-how for your product:
FAQs
Our replies to frequently asked questions.
Manuals/operating instructions
Read online or download, available as PDF or individually configurable.
Certificates
Clearly sorted according to approving authority, type and country.
Characteristics
For support in planning and configuring your system.
Product announcements
The latest information and news concerning our products.
Downloads
Here you will find updates, service packs, HSPs and much more for your product.
Application examples
Function blocks, background and system descriptions, performance statements,
demonstration systems, and application examples, clearly explained and represented.
Technical data
Technical product data for support in planning and implementing your project.
Link: Product support (https://support.industry.siemens.com/cs/ww/en/ps)
15
Introduction
1.6 Siemens Industry Online Support
mySupport
With "mySupport", your personal work area, you get the very best out of your Industry Online
Support experience. Everything enables you to find the right information - every time.
The following functions are now available:
Personal messages
Your personal mailbox for exchanging information and managing your contacts
Requests
Use our online form for specific solution suggestions, or send your technical request
direct to a specialist in Technical Support
Notifications
Make sure you always have the latest information - individually tailored to your needs
Filter
Simple management and re-use of your filter settings from Product Support and the
Technical Forum
Favorites / Tags
Create your own "knowledge base" by assigning "Favorites" and "Tags" to documents
simple and efficient
Entries last viewed
Clear history of the entries you have most recently viewed
Documentation
Configure and compile individual documentation concepts from different manuals
quickly and without complications
Personal data
Change personal data and contact information here
CAx data
Simple access to thousands of items of CAx data such as 3D models, 2D dimension
drawings, EPLAN macros and much more
16
Introduction
1.7 DataMatrix code and Siemens Industry app
1.7
DataMatrix code
A DataMatrix code is lasered onto the lower terminal cover of all 3SK2 safety relays.
DataMatrix codes are standardized in ISO/IEC 16022. The DataMatrix codes on Siemens
devices use ECC200 coding for powerful error correction.
The following device information is encoded in the DataMatrix codes as a bit stream:
Article number
Serial number
MAC address, if applicable
This information is stored in the following format in the DataMatrix code:
1P
Article number
S serial number
(+ 23S MAC address)
Data identifier
Net content
Separator
Note
The information content is displayed without spaces.
This machine-readable information simplifies and accelerates handling of the respective
devices.
As well as fast access to the serial numbers of the respective devices for unique
identification, the DataMatrix codes simplify communication with Siemens Technical Support.
17
Introduction
1.8 Configurator for safety relays
1.8
Configurator
Various configurators are available online to assist you during the configuration process.
The configurator for safety relays with accessories is a selection and configuration tool. You
can select the individual components and plan your system in accordance with your specific
requirements. You can save your selection, export it as a text file or you can order it directly.
The configurator automatically compiles a document list of the information available in
Service & Support for every component. You can use it as the basis for putting together your
system documentation.
Link: Configurator (http://www.siemens.com/industrial-controls/configurators)
1.9
Safety Integrated
Just like the safety relay, the Safety Evaluation Tool is part of Safety Integrated, the
intelligent safety solution from Siemens that features a complete product portfolio. Our
certified safety technology complies with all relevant standards and is already contained in
the Safety Evaluation Tool.
Link: Safety Integrated (http://www.siemens.com/safety-integrated)
18
Introduction
1.10 User responsibility for system design and function
1.10
1.11
Correction sheet
The appendix to this manual contains a correction sheet for evaluation and feedback. Please
use it to record your suggestions for improvements, additions and corrections, and return the
sheet to us. This will help us to improve the next edition of the manual.
Thank you.
1.12
History
Release number
New features
05/2015
Initial release
19
Introduction
1.12 History
20
Safety information
2.1
21
Safety information
2.1 General safety notes
WARNING
Failure of the Safety Function in the Event of Adjustment of the Slide Switch on 3SK1
Output Expansions
Can Cause Death, Serious Injury, or Property Damage.
Parameterization of the logic of the 3SK2 safety relay in Safety ES must correspond to the
slide switch setting on the 3SK1 output expansion in order for the safety function not to be
rendered inactive.
Make sure that the setting of the slide switch on the 3SK1 output expansion
corresponds to your logic parameterized in Safety ES.
Use a cover seal to protect the slide switch of the 3SK1 output expansion against
unauthorized and unintentional adjustment.
WARNING
Safe functional extra-low voltage
The 3SK2 safety relays with a supply voltage of 24 V DC must be operated by means of a
single-fault-secure power supply with safe functional extra-low voltage (SELV, PELV). This
means these modules may only be subjected to a voltage of Um even in the event of a
fault.
The following applies for the 3SK2 safety relays: Around < 60.0 V.
You can find more detailed information about safe functional extra-low voltage in the data
sheets of the power supplies to be used.
WARNING
Risk from Conductive Contamination
Can Cause Death, Serious Injury, or Property Damage.
The devices must be protected against conductive contamination while taking account of
the ambient conditions. One way you can do this is to install the devices in a control cabinet
with the appropriate degree of protection.
You will find further information in the IEC 60529 standard, "Degrees of protection provided
by enclosures (IP Code) " and in Section "Technical data (Page 243)".
NOTICE
Noise immunity/grounding
The following must be grounded in accordance with the regulations to ensure noise
immunity of the system components:
All system components
PELV / SELV power supply units (also note the documentation for the respective power
supply unit in this regard).
The PROFIBUS must be grounded in accordance with the installation guidelines for
PROFIBUS networks (see the PROFIBUS manual).
22
Safety information
2.1 General safety notes
NOTICE
Protection against electrostatic charge
When handling and installing the system components, ensure that the components are
protected from electrostatic charge. Changes to the system configuration and wiring are
only permissible while the supply voltage is switched off.
Connection of 3SK2 safety relays is only permissible when the power supply is switched
off.
Note
Operational faults and malfunctions in communication
If the EMC Directive 2004/108/EC is not complied with when plants and devices are
installed, communication breaks may occur.
Note
Simultaneity of signals
Depending on when a signal change takes place within the cycle, the signal change is
detected either in the same cycle or not until the following cycle time.
This means it is possible for supposedly simultaneous signal changes to be detected at two
different inputs by the logic, but not simultaneously.
Take this behavior into account when creating your configuration.
Note
Cover all unused system interfaces.
Note
Recycling and disposal
Dispose of existing packing material in accordance with applicable regulations or recycle it.
3SK2 safety relays are able to be recycled thanks to a low-pollutant manufacturing process.
For environmentally-friendly recycling and disposal of your electronic waste, please contact a
company certified for the disposal of electronic waste.
23
Safety information
2.2 Intended use
2.2
Intended use
WARNING
Hazardous Voltage
Can Cause Death, Serious Injury, or Property Damage.
Intended Use of Hardware Products
This equipment is only allowed to be used for the applications described in the catalog and
in the technical description, and only in conjunction with non-Siemens equipment and
components recommended by Siemens.
Correct transport, storage, installation and assembly, as well as careful operation and
maintenance, are required to ensure that the product operates safely and without faults.
Before you run any sample programs or programs you have written yourself, make sure
that running the plant cannot cause injury to anyone else or damage to the machine itself.
EU note regarding machine safety: Commissioning is absolutely prohibited until it has been
ensured that the machine in which the component described here is to be installed
complies with the stipulations of the Directive 2006/42/EC.
WARNING
Hazardous Voltage
Can Cause Death, Serious Injury, or Property Damage.
Intended Use of Software Products
The software may be used only for the applications described in the catalog or the technical
description, and only in combination with the software products, components and devices of
other manufacturers where recommended or permitted by Siemens.
Before you run any sample programs or programs you have written yourself, make sure
that running the plant cannot cause injury to anyone else or damage to the machine itself.
WARNING
Hazardous Voltage
Can Cause Death, Serious Injury, or Property Damage.
Safe State (Safety Concept)
The basis of the safety concept is that a safe state exists for all process variables. With the
3SK2 safety relay, this is the value "0". This applies to sensors and actuators.
Note that the use of inverting functions either in the logic diagram or in the wiring outside
the system may prevent the safe state from being reached.
24
Safety information
2.2 Intended use
WARNING
Hazardous Voltage
Can Cause Death, Serious Injury, or Property Damage.
Carry out function test of the system after changes
To ensure the safety of the system, any changes to it or any replacement of defective
components must be followed by a thorough and successfully completed function test of
the system.
A complete function test consists of the following tests:
Configuration test (test of the configuration)
System test (wiring test of the connected sensors and actuators)
WARNING
Hazardous Voltage
Can Cause Death, Serious Injury, or Property Damage
Test Interval for Electromechanical Actuators, e.g. 3SK1 Output Expansions, Contactors or
Relays
When using actuators such as 3SK1 output expansions, contactors or relays, a function
test interval (shutdown test) 1 year for SILCL 2 or 1 month for SILCL 3 is required. Only
then do the safety values apply.
Function test procedure for actuators with contacts:
Actuate the connected sensors.
Check their effect on the safety relay and the downstream actuators*.
Activate the safety relay via the connected sensors.
Check their effect on the safety relay and the downstream actuators*.
Defective devices must be replaced.
*Since the read-back time of the delayable output functions is retriggerable, the actuation
duration for switching on and off for the regular function test must be longer than the time
set in the "Switching time" parameter. Only in this way can it be ensured that the expected
switching state has also been set on the connected actuator.
WARNING
Unauthorized access to the 3SK2 safety relay
To prevent unauthorized access to the 3SK2 safety relay, assign a password for device
access in Safety ES.
In the case of several 3SK2 safety relays, you must assign a separate password for each
device.
25
Safety information
2.3 Safety information for hazardous areas
2.3
2.4
26
Safety information
2.5 Security information
2.5
Security information
Siemens provides products and solutions with industrial security functions that support the
secure operation of plants, solutions, machines, equipment and/or networks. They are
important components in a holistic industrial security concept. With this in mind, Siemens
products and solutions undergo continuous development. Siemens recommends strongly
that you regularly check for product updates.
For the secure operation of Siemens products and solutions, it is necessary to take suitable
preventive action (e.g. cell protection concept) and integrate each component into a holistic,
state-of-the-art industrial security concept. Third-party products that may be in use should
also be considered. For more information about industrial security, visit
http://www.siemens.com/industrialsecurity.
To stay informed about product updates as they occur, sign up for a product-specific
newsletter. For more information, visit http://support.automation.siemens.com.
27
Safety information
2.5 Security information
28
Description
3.1
Safety systems
Safety systems are part of machines and plants. Their task is to minimize possible hazards
for humans, machines and the environment. To this end, they monitor safety functions such
as Emergency Stop and switch off the plant or system in a safety-related fashion. A safety
system consists of sensors for sensing signals of the protective equipment (e.g. protective
doors) from safety relays (e.g. 3SK2 safety relays) that evaluate these signals, and of
actuators (e.g. 3RM1 Failsafe motor starters; 3RT contactors) that are controlled by the
safety system and respond accordingly.
In most countries in the world there are binding regulations on the safeguarding of machines
and plants. For Europe, the European Machinery Directive (2006/42/EC) defines the basic
requirements for machine safety. The technical details of these requirements are specified in
"harmonized" standards such as EN 62061 or EN ISO 13849-1 with the highest classification
SILCL 3 or PL e/Cat. 4 for production automation.
29
Description
3.1 Application areas for safety systems
Interface modules for communication via bus systems and integration in TIA
The 3SK2 safety relays communicate with higher-level controllers via an optional interface
module. Thus, the basic unit can be interfaced to a PLC via PROFIBUS, for example, and
therefore also be integrated in TIA. Fault diagnostics and status information can be passed
on cyclically and acyclically.
Via the DP interface, the 3SK2 safety relays offer the option of exchanging process signals
with a higher-level controller. This is possible in both directions. Up to 64 bits are available
for this purpose in each direction. The individual signals are manually interconnected in the
user program. This makes it possible to generate individual diagnostics messages, for
example. Operational switching signals (such as unlocking commands for protective doors
with tumblers) as well as fault acknowledgement and starting commands can be sent from
the PLC to 3SK2 safety relays.
Diagnostics display
Pending messages with detailed information shown as text are displayed on the optional
diagnostics display. The diagnostics display enables time-saving troubleshooting without
connection to a PG / PC with Safety ES. The cause of a fault can be located quickly and
easily and you can respond directly to it. The diagnostics display can be installed in the
control cabinet door and is operable from the outside. Programming or parameterization of
the diagnostics display is not necessary.
Diagnostics
The 3SK2 safety relays possess multiple diagnostics options:
Diagnostics via displays on the device/LEDs
Diagnostics with Safety ES
Diagnostics with diagnostics display (if a diagnostics display is available)
Diagnostics via PROFIBUS (if DP interface is available)
30
Description
3.1 Application areas for safety systems
Interfaces
The safety relay can be accessed by Safety ES via an RS232, USB or PROFIBUS interface.
Communication via the PROFIBUS interface is implemented with the optional DP interface.
WARNING
Hazardous system state due to unauthorized access via PROFIBUS
Can result in death, serious injury, or property damage.
Unauthorized access to the safety relay via PROFIBUS can enable configuration changes
and overriding of safety functions.
To prevent unauthorized access to the safety relay via the PROFIBUS network, assign a
password for accessing the device in Safety ES. If you operate several safety relays in one
PROFIBUS network, you must assign a separate password for each safety relay to prevent
confusion when accessing via PROFIBUS. In other words, the passwords must not be
identical.
31
Description
3.2 Features and functions
3.2
45 mm
Low wiring effort and high connection depth using function combinations
in the software
10
20
2 terminals
4 terminals;
of which 2 have a
decoupled test signal
General characteristics
Certified acc. to
32/64 bits
32/64 bits
Communication
Data exchange via PROFIBUS with optional DP interface
Diagnostics
1)
1)
1)
Product version E04 or FW version V1.2.x and higher of the diagnostics display
32
Description
3.2 Features and functions
45 mm
Cell functions
Input cell
Output cell
Monitoring functions
Universal monitoring
EMERGENCY STOP
Protective door
Acknowledgment button
Two-hand operation
Muting functions
Muting (2-sensor-parallel)
Muting (4-sensor-parallel)
Muting (4-sensor-sequential)
Status functions
Device status
Element status
Control functions
Device command
Logic functions
AND
OR
XOR
NAND
NOR
NEGATION (NEG)
33
Description
3.2 Features and functions
45 mm
Flip-flop
FF-SR
Counter functions
Counter (0 -> 1)
Counter (1 -> 0)
Timer functions
With ON delay
Clocking
Start functions
Monitored start
Manual start
Output functions
Standard output
F output
F output delayed
AS-i 1..4F-DO
34
Description
3.3 3SK2 safety relay with width 22.5 mm
3.3
Figure 3-1
Properties
The 3SK2 safety relay with width 22.5 mm for safety-related control functions can be used
up to SILCL 3 as per EN 62061 and PL e / Cat. 4 as per EN ISO 13849-1.
The 3SK2 safety relay can be parameterized using Safety ES.
3SK1 output expansions (24 V DC) can be connected as actuators with little wiring via
3ZY12 device connectors.
Safety-related 3RM1 Failsafe motor starters (24 V DC) can be connected as actuators
with little wiring via 3ZY12 device connectors.
3SK2 safety relays have an integrated memory.
Connection of a diagnostics display is possible as an option for time-saving diagnostics.
An additional interface module (e.g., DP interface) can be used to exchange process data
with a PLC. Diagnostics data of 3SK2 safety relays are also transmitted to the PLC.
35
Description
3.3 3SK2 safety relay with width 22.5 mm
36
Description
3.3 3SK2 safety relay with width 22.5 mm
No.
Meaning
RESET button
Display LEDs
Top terminals
Label
Bottom terminals
(removable terminals)
(removable terminals)
Rear side:
Connection to 3SK1 output
expansion/3RM1 Failsafe motor starter via
3ZY12 (SYS) device connector
Figure 3-2
37
Description
3.3 3SK2 safety relay with width 22.5 mm
Meaning
Explanation
T1
T2
QM1
Solid-state output
F-Q1, F-Q2
Safety-related solid-state
outputs
A1+
Power supply
24 V DC
A2-
Ground
Ground to 24 V DC
FE
Functional ground
Meaning
Explanation
X1
System interface
SYS
Meaning
RESET
button
Fault acknowledgment
Factory settings
Explanation
38
Description
3.3 3SK2 safety relay with width 22.5 mm
Meaning
DEVICE
Status
SF
Group error
39
Description
3.4 3SK2 safety relay with width 45 mm
3.4
Figure 3-3
Properties
The 3SK2 safety relay with width 45 mm for safety-related control functions can be used up
to SILCL 3 as per EN 62061 and PL e / Cat. 4 as per EN ISO 13849-1.
The 3SK2 safety relay can be parameterized using Safety ES.
3SK2 safety relays have a device display.
3SK2 safety relays are supplied with a memory module (sealable with basic unit or
control cabinet).
3SK1 output expansions (24 V DC) can be connected as actuators with little wiring via
3ZY12 device connectors.
Safety-related 3RM1 Failsafe motor starters (24 V DC) can be connected as actuators
with little wiring via 3ZY12 device connectors.
Connection of the diagnostics display is possible as an option for time-saving diagnostics.
An additional interface module (e.g., DP interface) can be used to exchange process data
with a PLC. Diagnostics data of 3SK2 safety relays are also transmitted to the PLC.
40
Description
3.4 3SK2 safety relay with width 45 mm
41
Description
3.4 3SK2 safety relay with width 45 mm
No.
Meaning
Device display
Display LEDs
Connection of a PC/PG,
interface module, diagnostics
display (X1, sealable)
Top terminals
Connection of a memory
module (X3, sealable)
RESET button
Label
Bottom terminals
(removable terminals)
(removable terminals)
Rear side:
Connection to 3SK1 output
expansion/3RM1 Failsafe
motor starter via 3ZY12 (SYS)
device connector
Figure 3-4
42
Description
3.4 3SK2 safety relay with width 45 mm
Meaning
T1_1
F-IN17, F-IN19
Explanation
T2_1
T1_2
F-IN17, F-IN19
T2_2
Independent of T1_1/T2_1
...
QM1, QM2
Solid-state output
Safety-related solid-state
outputs
A1+ (2 x)
Power supply
24 V DC
A2- (3 x)
Ground
Ground to 24 V DC
FE
Functional ground
Meaning
Explanation
X1
System interface
X3
SYS
Interface
43
Description
3.4 3SK2 safety relay with width 45 mm
Meaning
RESET
button
Fault acknowledgment
Explanation
Factory settings
SET key
MODE key
Meaning
Device display
Display of the operating state and the status of the input and
output terminals
DEVICE
Status
SF
Group error
44
Description
3.5 3SK1 output expansions
3.5
3SK1213
Application
3SK1 output expansions are actuators that can be connected to the 3SK2 safety relay in a
time and space-saving manner. They serve to expand the release circuits, to which
additional actuators can be connected.
3SK1 output expansions are suitable for safety-related applications up to SILCL 3 as per EN
62061, PL e/Cat. 4 as per EN ISO 13849-1.
Note
Only 3SK1 output expansions with a supply voltage of 24 V DC can be combined with the
3SK2 safety relays.
45
Description
3.6 3RM1 Failsafe motor starters
3.6
Applications
3RM1 Failsafe motor starters are actuators that can be connected to 3SK2 safety relays in a
time and space-saving manner. They can be used wherever combinations of contactors and
overload relays were previously used. Thanks to their additional safety-related shutdown
functionality, 3RM1 Failsafe motor starters are suited to safety-related applications up to
SILCL 3 in accordance with EN 62061 and PL e/Cat. 4 in accordance with EN ISO 13849-1.
Note
Only 3RM1 Failsafe motor starters with a supply voltage of 24 V DC can be combined with
3SK2 safety relays.
46
Description
3.7 3RK36 diagnostics display
3.7
Application
A diagnostics display is available for 3SK2 safety relays and the 3RK3 Modular Safety
System that displays the current messages, diagnostics data, and status information of the
monitored system directly on the control cabinet, enabling elementary diagnostics without
PC and Safety ES. The diagnostics display has a connection to the safety relay (on the
back) and a connection for the PC / PG (on the front).
Figure 3-5
Diagnostics display
Note
3SK2 safety relays
These 3SK2 safety relays are supported by the diagnostics display from product version E04
and firmware version V1.2.x and higher.
MSS 3RK3 Advanced/ MSS 3RK3 ASIsafe basic/ MSS 3RK3 ASIsafe extended
These 3RK3 central units are supported by the diagnostics display with product version E03
and firmware version V1.1.x and higher.
MSS 3RK3 Basic
MSS 3RK3 Basic is supported by the diagnostics display with product version E01 and
higher.
47
Description
3.7 3RK36 diagnostics display
Note
Communication via PROFIBUS and diagnostics display
If the safety relay is accessed by the software using PROFIBUS, the diagnostics display
must have at least product version 3 (E03) or firmware version1) V1.1.x.
If an access path is established by the software over an extended period or the device is
switched to test mode, the diagnostics display is disabled and outputs a corresponding
message. The diagnostics display restarts automatically once this status ends.
The firmware version can be read at the startup of the diagnostics display or in the bottom
left when the diagnostics display is locked. In addition, it is shown by selecting menu
command "Display settings / Identification". (see also Section "Display settings (Page 224)")
1)
Rear view:
No.
Meaning
Display
Arrow keys
Display LED
Functional ground
48
Description
3.7 3RK36 diagnostics display
Figure 3-6
Meaning
Explanation
FE
Functional ground
Meaning
Explanation
X1
System interface
X2
System interface
Operator controls
Element
Meaning
Keys
Element
Meaning
DEVICE
Status
BF
Bus error
SF
Group error
Displays
49
Description
3.8 3RK35 DP interface module
3.8
Figure 3-7
DP interface module
Application
Interface modules are the interface between the safety relay and a higher-level bus system,
e.g. PROFIBUS DP. The safety relay uses them to make diagnostics and status information
available to a higher-level controller. Non-safety-related input and output signals can be
exchanged between the safety relay and a higher-level controller (PLC).
Properties
The DP interface module has the following properties:
The DP interface connects the safety relay to PROFIBUS DP and thus with a higher-level
programmable controller or a PG / PC. Using the DP interface, the safety relay can be
configured, tested and the configuration released via PROFIBUS DP.
Integration into the higher-level control is performed by means of a GSD file.
The properties of the DP interface are set with Safety ES. The address can also be set
directly on the device.
The DP interface is equipped with one system interface for connecting the safety relay
and one system interface for connecting a PC / PG (sealable).
The DP interface can be used to link non-safety-related signals of a higher-level controller
with the safety relay logic.
The DP interface supports a baud rate of up to 12 Mbps.
50
Description
3.8 3RK35 DP interface module
Process and diagnostics data can be exchanged through the DP interface:
Cyclic: Depending on the safety relay, the PLC can exchange 32 bits or 64 bits of
process data with safety relay.
Acyclic: The PLC can query diagnostic data from the safety relay. With Safety ES, the
diagnostics information can be displayed graphically.
Both options can be used at the same time.
The DP interface supports DPV1 and DPV0 mode.
Note
Program cycle time
When the 3SK2 safety relay is in operation with a DP interface, set a program cycle time of
15 ms.
No.
Meaning
PROFIBUS DP connection
Label
LCD display
Display LEDs
51
Description
3.8 3RK35 DP interface module
Figure 3-8
Meaning
Explanation
L+
Power supply
24 V DC
Ground
Ground to 24 V DC
FE
Functional ground
Meaning
Explanation
X1
System interface
X2
System interface
PROFIBUS DP
Connection to PROFIBUS DP
Meaning
Explanation
SET
MODE
Meaning
DEVICE
Status
BF
Bus error
SF
Group error
52
Description
3.9 Safety systems - General information
3.9
3.9.1
What is safety?
Safety defines a state in which the risk of damage is reduced to a tolerable level, or which
can be regarded as risk-free. Following on from this definition, functional safety concerns
persons, machines and the environment.
The objective of safety systems is to reduce the risk for humans and machines that is posed
by a use case to an acceptable level. The first step is, therefore, to identify the risk of a use
case. In order to make a reliable assessment regarding the application, each individual
function of a machine or plant must be analyzed for potential hazards.
You can find further information on the Siemens Safety Integrated
(http://www.siemens.com/safety) Internet page.
3.9.2
Safety function
A safety function describes the reaction of a machine/plant when a specific event occurs
(e.g. opening of a protective door). Execution of the safety function(s) is carried out by a
safety-related control system. This usually comprises three subsystems, detecting,
evaluating and and reacting.
Detecting (sensors):
Detection of a safety requirement
e.g. EMERGENCY STOP or a sensor for monitoring a hazardous area (light array, laser
scanner, etc.) is operated.
Evaluating (safety relay):
Detection of a safety requirement and the safe initiation of the reaction, e.g. switching off
the enabling circuits
Monitoring the correct operation of sensors and actuators
Initiating a reaction upon detection of faults
The safety relays described in this manual are evaluation units for safety functions.
Reacting (actuators):
Switching off the hazard by means of downstream actuators
53
Description
3.9 Safety systems - General information
3.9.3
Basic terminology
3.9.3.1
54
Description
3.9 Safety systems - General information
Figure 3-9
3.9.3.2
Cross-circuit detection
Cross-circuit detection is a diagnostic function of a safety relay that detects short circuits and
cross-circuits between the input channels (sensor circuits) during two-channel detecting or
reading. A cross-circuit can be caused, for example, by a cable casing being squashed. In
devices without cross-circuit detection, this can mean that a two-channel emergency stop
circuit does not trip even though only one NC contact is faulty (secondary error).
With the safety relays, a cross-circuit is detected in the sensor circuits by means of signals
with different clock pulses. If the clocked signals overlap, the device detects a cross-circuit.
With safety relays, cross-circuit detection can be deactivated to enable evaluation of
electronic sensors (that monitor themselves as well as the cable to the evaluation unit).
55
Description
3.9 Safety systems - General information
3.9.3.3
Enabling circuit
An enabling circuit provides a safety-related output signal. From an external viewpoint,
enabling circuits usually act as NO contacts.
An individual enabling circuit with two channels that is configured accordingly in the safety
relay can be used for applications up to SILCL 3 / PL e / Kat. 4.
Note: Enabling current paths can also be used for signaling purposes.
3.9.3.4
3.9.3.5
Feedback circuit
A feedback circuit serves to monitor controlled actuators. Only the actuators' positively driven
NC contacts or mirror contacts may be used to read back the switch positions of coupling
contacts or load contactors. The fail-safe outputs can only be activated if the feedback circuit
is closed. One input of the safety relay is needed to read in the feedback circuit. Logical
evaluation of the feedback circuit is implemented in the Safety ES software with the
"F output" and "F output delayed" output functions.
3.9.3.6
Stop categories
Stop category 0
Non-controlled shutdown by immediately switching off the power to the machine's drive
elements.
Stop category 1
Controlled stopping where the energy feed is interrupted with a time delay, or is only
interrupted once standstill has been reached.
Note
Time-delayed shutdown of enabling circuits in accordance with stop category 1 is not
ensured under all operating states.
In the case of some internal device faults, and when disconnecting the supply voltage, these
enabling circuits are switched off instantaneously. This must be considered during the risk
analysis and when designing the system.
56
Description
3.9 Safety systems - General information
3.9.3.7
Start functions
After triggering of a safety function and recovery of the enabled state (e.g. protective door
has been opened and is closed again), it is necessary for the user to reset the safety-related
control system by means of a further manual action. This reset is generally performed by
operating a button.
This "start button" can be interfaced directly at an input of the safety relay or at a higher-level
controller. This then sends the start signal for activation of the safety outputs to the safety
relay by means of a bus signal.
Evaluation of the start command or execution of one of the start types in the logic diagram
can be implemented by means of different function elements:
Parameterization of the monitoring functions
Every sensor monitoring function (except acknowledgment buttons, two-hand operation,
and mode selector switches) has the automatic, manual and monitored start types. This
type of realization is suitable for applications with several sensors and their own
command points.
Parameterization of the output functions
Further, it is possible to activate a start type at the output functions.
Use of separate start functions
Another option is to use separate start functions. To this end, Safety ES offers start
functions for manual and monitored starting. Use of separate start functions allows you to
individually evaluate the process signals and thus to realize visualization for requesting
button operation, for example.
Start types
You will find information on the start types in the Sections:
Automatic start (Page 58)
Manual start (Page 58)
Monitored start (Page 59)
57
Description
3.9 Safety systems - General information
Automatic start
For an automatic start, the device is started without manual confirmation, but only after the
input image has been checked and a positive test of the safety relay has been conducted.
This function is also known as dynamic operation and is not permissible for EMERGENCY
STOP devices. Safety devices for inaccessible danger zones can use the automatic start
function if this does not pose any risk.
Note
An automatic start is not permitted for EMERGENCY STOP devices.
WARNING
Restarting the system
Can Cause Death, Serious Injury, or Property Damage.
The start type depends on the risk assessment. For PL e n accordance with
EN ISO 13849-1 as well as SIL 3 in accordance with IEC 61508, the monitored start must
be used in the case of EMERGENCY STOP, for example. For other safety
sensors/functions, the need for a monitored start command depends on the risk
assessment.
Manual start
For a manual start, the device is started by operating the START button, but only after the
input image has been checked and a positive test of the safety relay has been conducted.
On a manual start, the START button is not monitored for correct operation, a positive edge
of the START button is sufficient for starting.
Figure 3-11
Note
A blocked start button is not detected in the case of this start type. Thus, for example, a
disruption of the signal can trigger an undesirable start. The manual start is therefore not
suitable for PL e in accordance with EN ISO 13849-1 or SIL 3 in accordance with IEC 61508.
58
Description
3.9 Safety systems - General information
WARNING
Restarting the system
Can Cause Death, Serious Injury, or Property Damage.
The start type depends on the risk assessment. For PL e n accordance with
EN ISO 13849-1 as well as SIL 3 in accordance with IEC 61508, the monitored start must
be used in the case of EMERGENCY STOP, for example. For other safety
sensors/functions, the need for a monitored start command depends on the risk
assessment.
Monitored start
For a monitored start, the device is started by operating the START button, but only after the
input image has been checked and a positive test of the safety relay has been conducted.
Contrary to the manual start, the monitored start evaluates the signal sequence of the
START button. The output is not activated until the START button is opened again and its
operating duration was within the valid time window (0.15 s to 2 s). This means that the
START button cannot be bypassed (misuse). For PL e n accordance with EN ISO 13849-1
as well as SILCL 3 in accordance with EN 62061, monitored start must be used in the case
of EMERGENCY STOP. For other safety sensors/functions, the need for a monitored start
command depends on the risk assessment.
If the START button is actuated for more than 2 seconds, the safety relay detects a wiring
short circuit in the START button and the associated function element remains in the safe
state.
Figure 3-12
WARNING
Restarting the system
Can Cause Death, Serious Injury, or Property Damage.
The start type depends on the risk assessment. For PL e n accordance with
EN ISO 13849-1 as well as SIL 3 in accordance with IEC 61508, the monitored start must
be used in the case of EMERGENCY STOP, for example. For other safety
sensors/functions, the need for a monitored start command depends on the risk
assessment.
59
Description
3.9 Safety systems - General information
3.9.3.8
Two-hand operation/synchronism
Synchronous sensor operation is a special form of simultaneity of sensors.
In this case, it is not sufficient for buttons 1 and 2 to be switched to the closed state "at
different times". Instead, the buttons must be actuated within 0.5 seconds of each other.
Before monitoring, a button is considered to have been operated if all the button's sensor
contacts are closed and no fault (e.g. discrepancy, cross-circuit, etc.) has been detected.
Synchronism of sensors is required, in particular, in the case of two-hand operation of
presses. This ensures that the presses only become active when the sensors are operated
simultaneously with both hands. This minimizes the risk of the operator getting a hand in the
press.
With the safety relays, you can achieve applications up to type IIIc in compliance with EN
574 (applications up to PL e / Cat. 4 as per EN ISO 13849-1 or SIL 3 as per IEC 61508).
Note
The safety relays support two-hand operator panels with the following contact arrangements:
Two-channel normally open contact (NO)(NO)
Four-channel normally open contact (NONO)(NONO)
Four-channel normally open/normally closed contact (NONC)(NONC)
Note
The two-hand circuit must be marked in compliance with EN 574. You can find information
on determining the response time in Section Response times (Page 156).
3.9.3.9
Discrepancy monitoring
Discrepancy monitoring is a diagnostics function that monitors, in the case of sensors with
two contacts, whether dependence of the two contacts is correctly fulfilled. As a result, faults
on one contact of the sensor can be detected. For example, such faults can be a stuck
contact or a short circuit between the supplying test clock pulse and the return line from the
sensor to the input. In the case of sensors without discrepancy monitoring, this can mean
that a two-channel emergency stop circuit does not trip even though only one NC contact is
faulty (secondary error).
In the case of the safety devices, discrepancy monitoring is set depending on the monitoring
function. In the case of some functions (protective door, protective door with tumbler and
universal monitoring), discrepancy monitoring can be deactivated, for example to ensure that
certain variants of protective doors with tumbler do not have to be opened after every
unlocking.
If the discrepancy time is set to infinite, any amount of time can elapse between closing of
the first and the second contacts. However, a discrepancy fault is signaled if both contacts
are closed and only one contact is opened and then closed again.
60
Description
3.9 Safety systems - General information
3.9.3.10
Sequence monitoring
Sequence monitoring is a diagnostics function that monitors, in the case of sensors with
more than one contact, whether a change in the switching states takes place at the
corresponding contacts in the intended order. A simultaneous change of the switching state
at more than one contact is a sequence violation.
In the case of Safety devices, sequence monitoring can be set depending on the monitoring
function (e.g. protective door).
3.9.3.11
Startup testing
The sensor or protection equipment must be properly operated once after the supply voltage
is restored before the enables for the safety relay can be switched through. Startup testing
ensures that any errors in the sensors are detected (again), because safety relays lose their
ability to store errors at zero voltage. Unauthorized manipulation of the protection equipment
can also be detected through startup testing. The plant operator decides whether startup
testing should be performed (risk assessment). No general statements apply.
Possible startup testing applications:
Seasonally operated machines
Function test after extensive maintenance/repair work
Realization of a test routine for safety functions without automatic test (e.g.
EMERGENCY STOP)
61
Description
3.9 Safety systems - General information
3.9.4
EMERGENCY STOP
Safety relay
62
Description
3.9 Safety systems - General information
63
Description
3.9 Safety systems - General information
64
Mounting
4.1
4.2
4.2.1
Requirements
Please note the following requirements for mounting on a level surface:
Refer to Section "System configuration guidelines (Page 125)".
Two (22.5 mm devices) / four (45 mm devices) properly drilled holes with thread or plug
on the level surface
For details of the distances between the drilled holes, please refer to the relevant
dimension drawings in Section "Dimension drawings (Page 253)".
Two (22.5 mm devices) / four screws (45 mm devices) to fit the M4 x 12 holes in
accordance with DIN 784
Two (22.5 mm devices) / four (45 mm devices) lugs for screw fastening
Refer to the accessories list for the relevant article number in Section "Spare
parts/Accessories (Page 263)".
65
Mounting
4.2 3SK2 safety relays
Procedure
Step
Instructions
Figure
Tightening torque: 1 Nm
22.5 mm device
45 mm device
66
Mounting
4.2 3SK2 safety relays
4.2.2
Requirements
The terminals have been removed or disconnected.
All system interface connections are disconnected.
67
Mounting
4.2 3SK2 safety relays
Procedure
Step
Instructions
Figure
22.5 mm device
45 mm device
68
Mounting
4.2 3SK2 safety relays
4.2.3
Requirements
A horizontal 35-mm wide mounting rail in accordance with DIN EN 60715 has been
properly secured at the installation location.
Refer to Section "System configuration guidelines (Page 125)".
Procedure
The figures show 22.5 mm devices. The 45 mm devices are mounted correspondingly.
Step
Instructions
Figure
69
Mounting
4.2 3SK2 safety relays
4.2.4
Requirements
The terminals have been removed or disconnected.
All system interface connections are disconnected.
Procedure
Step
Instructions
Figure
4.2.5
Requirements
Please note the following requirements for mounting on a level surface:
Refer to Section "System configuration guidelines (Page 125)".
Two properly executed drill holes (per device connector) with thread or plug on the level
surface.
For details of the distances between the drilled holes, please refer to the relevant
dimension drawings in Section "Dimension drawings (Page 253)".
Two screws (per device connector) to fit the holes M4 x12 in accordance with DIN 784.
Device connector
Refer to the accessories list for the relevant article number in Section "Spare
parts/Accessories (Page 263)".
70
Mounting
4.2 3SK2 safety relays
Procedure
The figures show 22.5 mm devices. The 45 mm devices are mounted correspondingly.
Step
Instructions
Figure
Bottom: 1 Nm
71
Mounting
4.2 3SK2 safety relays
Step
Instructions
Figure
72
Mounting
4.2 3SK2 safety relays
4.2.6
Requirements
The terminals have been removed or disconnected.
All system interface connections are disconnected.
Procedure
The figures show 22.5 mm devices. The 45 mm devices are disassembled correspondingly.
Step
Instructions
Figure
73
Mounting
4.2 3SK2 safety relays
Step
Instructions
Figure
74
Mounting
4.2 3SK2 safety relays
4.2.7
Requirements
A horizontal 35-mm wide mounting rail in accordance with DIN EN 60715 has been
properly secured at the installation location.
Refer to Section "System configuration guidelines (Page 125)".
Device connectors:
Refer to the accessories list for the relevant article number in Section "Spare
parts/Accessories (Page 263)".
Procedure
The figures show 22.5 mm devices. The 45 mm devices are mounted correspondingly.
Step
Instructions
Figure
75
Mounting
4.2 3SK2 safety relays
Step
Instructions
Figure
76
Mounting
4.2 3SK2 safety relays
Step
Instructions
Figure
77
Mounting
4.2 3SK2 safety relays
4.2.8
Requirements
The terminals have been removed or disconnected.
All system interface connections are disconnected.
Procedure
The figures show 22.5 mm devices. The 45 mm devices are disassembled correspondingly.
Step
Instructions
Figure
78
Mounting
4.2 3SK2 safety relays
Step
Instructions
Figure
79
Mounting
4.2 3SK2 safety relays
Step
Instructions
Figure
80
Mounting
4.3 3RK36 diagnostics display
4.3
4.3.1
Requirements
A mounting cut-out measuring H x W 55 x 92 mm must be available.
The control cabinet door/control panel must be no more than 16 mm thick.
Note
Overall depth
Please observe the installation depth of 41 mm for the device.
Note
Degree of protection IP54
The degree of protection IP54 on the front is only guaranteed if:
The device has been properly installed with the fixing elements supplied.
The system interface on the front has been protected with a system interface cover.
Operating instruction
Insert the diagnostics display in the mounting cutout from the front.
Figure
81
Mounting
4.3 3RK36 diagnostics display
4.3.2
Requirements
All system interface connections are disconnected.
Removing the diagnostics display from a control cabinet door / control panel
Step
Instructions
Figure
82
Mounting
4.4 3RK35 DP interface module
4.4
4.4.1
Requirements
Please note the following requirements for mounting on a level surface:
Please observe the information about the mounting position in Section "Device
configuration rules (Page 134)".
Two properly executed drill holes with thread or plug on the level surface
Refer to the relevant dimension drawings in the appendix for the distances between the
drill holes "DP interface (Page 258)".
Two screws with a maximum thread diameter of 4.8 mm
Two push-in lugs for screw fixing
Refer to the accessories list for the relevant article number in Section "Spare
parts/Accessories (Page 263)".
Instructions
Figure
83
Mounting
4.4 3RK35 DP interface module
4.4.2
Requirements
All system interface connections are disconnected.
If applicable, the PROFIBUS DP connection is terminated.
The terminal blocks have been removed or disconnected.
Procedure
Step
Instructions
Figure
84
Mounting
4.4 3RK35 DP interface module
4.4.3
Requirements
At the installation location, a horizontal 35-mm wide mounting rail per DIN EN 60715 is
properly secured.
Pay attention to the information on the mounting position in Chapter "Device configuration
rules (Page 134)."
Operating instruction
Figure
85
Mounting
4.4 3RK35 DP interface module
4.4.4
Requirements
All system interface connections are disconnected.
If applicable, the PROFIBUS DP connection is terminated.
The terminal blocks have been removed or disconnected.
Procedure
Step
Instructions
Figure
86
Connection
5.1
87
Connection
5.2 Power supply
5.2
Power supply
88
Connection
5.3 Grounding
5.3
Grounding
WARNING
Hazardous Voltage
Can Cause Death, Serious Injury, or Property Damage.
Before grounding or wiring an electrical device, you must ensure that the power supply for
the device is switched off. Ensure that all the connected devices are also switched off.
Grounding measures
All electrical devices must be grounded and wired properly not only to ensure that your
system functions as smoothly as possible but also to provide additional noise immunity for
your application.
The following components must be grounded:
FE contacts of the devices, if present
The shield, if shielded sensor and actuator cables are used
Flat connector on the rear of the diagnostics display
Shield of the PROFIBUS cable
All grounding cables must be as short as possible and have the largest possible cable crosssection.
89
Connection
5.4 3SK2 safety relays
5.4
5.4.1
Terminal assignment
Figure 5-1
90
Connection
5.4 3SK2 safety relays
Figure 5-2
91
Connection
5.4 3SK2 safety relays
5.4.2
Terminal coding
You can provide the terminals with coding pins (3ZY1440-1AA00). These assist you when
replacing devices so as to avoid confusing terminals.
Figure 5-3
Figure 5-4
92
Connection
5.4 3SK2 safety relays
5.4.3
Requirements
Cross-tip screwdriver size PZ 1 x 80
For suitable connection cross-sections of the cables, see Section 3SK2 safety relays
(Page 251).
Procedure
Step
Instructions
Figure
93
Connection
5.4 3SK2 safety relays
5.4.4
Requirements
Cross-tip screwdriver size PZ 1 x 80
Procedure
Step
Instructions
Figure
94
Connection
5.4 3SK2 safety relays
5.4.5
Terminals
-----
10 ... 11 mm
10 mm
1)
AWG: American Wire Gauge (AWG does not define use of end sleeves)
2)
When 2 x 1.0 mm end sleeves with a plastic sleeve are used, space problems may arise with the sleeves; as an
alternative, you are advised to use end sleeves without plastic sleeves
Figure 5-5
Terminal area
95
Connection
5.4 3SK2 safety relays
WARNING
Hazardous Voltage
Can Cause Death, Serious Injury, or Property Damage.
Before starting work, therefore, disconnect the system and devices from the power supply.
Note
Functional ground - protective ground conductor
Terminal FE must be connected to functional ground with a low-resistance connection.
Push-in connections are a form of spring-loaded terminals allowing wiring without tools for
rigid conductors or conductors equipped with end sleeves.
For wiring finely stranded or stranded conductors without end sleeves on push-in
connections, a screwdriver is required.
Requirements
Screwdriver DIN 5264 of the size 0.5 x 3 mm (for finely-stranded conductors only)
For suitable connection cross-sections of the cables, see Section Connecting the push-in
terminals (Page 95).
Procedure
Table 5- 1
Step
Instructions
Figure
96
Connection
5.4 3SK2 safety relays
Table 5- 2
Step
Finely-stranded conductors
Instructions
Figure
5.4.6
Requirements
Screwdriver DIN 5264 of the size 0.5 x 3 mm
Procedure
Step
Instructions
Figure
97
Connection
5.4 3SK2 safety relays
5.4.7
Requirements
You must have removed the terminal blocks, for the purpose of replacing a device, for
example.
Procedure
Step
Instructions
Figure
98
Connection
5.4 3SK2 safety relays
5.4.8
Procedure
Step
Instructions
Figure
99
Connection
5.4 3SK2 safety relays
5.4.9
Figure 5-6
Note
Correct position of the memory module
Check to ensure that the memory module is positioned correctly (the locking elements must
be locked ).
100
Connection
5.4 3SK2 safety relays
101
Connection
5.5 3RK35 DP interface module
5.5
5.5.1
Requirements
The insulation on the connection cables must be properly stripped to a length of 10 mm.
Flexible cables must be fitted with end sleeves or cable lugs for connection to screw-type
terminal blocks. For suitable connection cross-sections of the cables, see Section 3RK35
DP interface (Page 252).
Instructions
Figure
102
Connection
5.5 3RK35 DP interface module
Instructions
Figure
103
Connection
5.5 3RK35 DP interface module
5.5.2
PI installation guidelines
In the case of electric PROFIBUS networks, note also the PROFIBUS DP/FMS installation
guidelines defined by the PROFIBUS user organization. These contain important information
about installing cables and commissioning PROFIBUS networks.
Publisher:
PROFIBUS-Nutzerorganisation e. V.
Haid-und-Neu-Strae 7
76131 Karlsruhe, Germany
Tel.: +49 721 / 9658 590
Fax: +49 721 / 9658 589
Internet (http://www.profibus.com)
guidelines, article no. 2.111
See also "SIMATIC NET PROFIBUS Network Manual
(https://support.industry.siemens.com/cs/ww/en/view/35222591)"
Requirement
PROFIBUS DP connection cable with 9-pin sub-D connector is available.
Connection to PROFIBUS DP
Step
Instructions
Figure
104
Connection
5.5 3RK35 DP interface module
5.5.3
Instructions
CAUTION
Protection against electrostatic charge
Unused system interfaces must be closed using system interface covers.
NOTICE
Off-circuit installation
Connect the system interfaces only in a voltage-free state!
If you connect system interfaces while the system is connected to the power supply, this
can damage the safety components which, in turn, means that the safety function is no
longer available.
Note
Reverse polarity protection
Observe the color coding and mechanical coding on the connection cables.
Connection cables
The DP interface and the diagnostics display are connected to the 3SK2 safety relay at the
interfaces using connecting cables.
The DP interface is configured side-by-side with the 3SK2 safety relay. A connecting
cable with a length of 0.025 m is available for this purpose.
Connection cables up to max. 2.5 m in length are available for connecting to the
diagnostics display.
105
Connection
5.5 3RK35 DP interface module
Instructions
Figure
5.5.4
Disconnecting
WARNING
Hazardous Voltage
Can Cause Death, Serious Injury, or Property Damage.
Before starting work, therefore, disconnect the system and devices from the power supply.
Instructions
Figure
106
Connection
5.5 3RK35 DP interface module
Instructions
Figure
Step
Instructions
Figure
107
Connection
5.5 3RK35 DP interface module
Instructions
Figure
Instructions
Figure
108
Connection
5.5 3RK35 DP interface module
5.5.5
Requirement
You must have removed the terminal blocks, for the purpose of replacing a device, for
example.
Step
Operating instruction
Figure
109
Connection
5.6 Diagnostics display
5.6
Diagnostics display
5.6.1
System interface X2
Functional ground
The rear is normally not accessible if the diagnostics display is installed. The connection
cable from the safety relay / interface module is connected to the system interface 2
there. The diagnostics display also has to be grounded at the functional ground .
You will find additional information in Section "Grounding (Page 89)".
Note
Only the safety relay or interface module may be connected to the system interface X2
on the rear of the diagnostics display.
110
Connection
5.6 Diagnostics display
System interface X1
The front is normally accessible if the diagnostics display is installed. Components are only
directly inserted in the system interface X1 as required and removed after use. These can
be:
PC cable for connecting a PC/PG
Cover (when the system interface is not used)
Note
Only one PC / PG may be connected to the system interface X1 on the front of the
diagnostics display.
NOTICE
EMC measures
If the system interface X1 is not used, it must be closed with the interface cover supplied to
retain the degree of protection of the diagnostics display and to prevent damage due to
electrostatic charge.
111
Connection
5.6 Diagnostics display
5.6.2
Instructions
CAUTION
Protection against electrostatic charge
Unused system interfaces must be closed using system interface covers.
NOTICE
Off-circuit installation
Connect the system interfaces only in a voltage-free state!
If you connect system interfaces while the system is connected to the power supply, this
can damage the safety components which, in turn, means that the safety function is no
longer available.
Note
Reverse polarity protection
Observe the color coding and mechanical coding on the connection cables.
112
Connection
5.6 Diagnostics display
Connection cables
The DP interface and the diagnostics display are connected to the 3SK2 safety relay at the
interfaces using connecting cables.
The DP interface is configured side-by-side with the 3SK2 safety relay. A connecting
cable with a length of 0.025 m is available for this purpose.
Connection cables up to max. 2.5 m in length are available for connecting to the
diagnostics display.
Instructions
Figure
113
Connection
5.6 Diagnostics display
114
Operation
6.1
6.1.1
RESET button
MODE and SET keys for operating the device display
Figure 6-1
Operator controls
115
Operation
6.1 Operating the 3SK2 safety relay
RESET button
Both 3SK2 safety relays have a RESET button on the front with the following functions:
Acknowledging messages
Restoring the basic factory settings (Page 187)
MODE and SET keys for operating the device display (3SK2 safety relay 45 mm only)
3SK2 safety relays (45 mm width) have two additional keys on the front to navigate the
diagnostics menu on the device display; see Section "Diagnostics via device display (3SK2
safety relay with width 45 mm) (Page 203)".
The device display of the 3SK2 safety relay (45 mm width) shows the states of the central
unit's inputs and outputs.
Safety ES software
The 3SK2 safety relay is parameterized with the Safety ES software, see Section
"Application areas for safety systems (Page 29)".
116
Operation
6.2 Operating the 3RK36 diagnostics display
6.2
6.2.1
Figure 6-2
Two softkeys
They can have different functions depending on the menu displayed (e.g. open menu, exit
menu, reset). The current assigned functions are displayed on the bottom left or right of the
display.
LED displays
LED
Meaning
DEVICE
Status
BF
Bus error
SF
Group error
Reference
You will find additional information in Section "Diagnostics with diagnostics display
(Page 208)".
117
Operation
6.3 Operating the 3RK35 DP interface
6.3
6.3.1
LED display
Display (LCD display)
MODE and SET keys for operating the display
Figure 6-3
DP interface module
Display
The display has two device statuses:
Standard mode with status display
Menu mode:
Setting the DP address
Resetting to factory settings
Meaning
SET
MODE
118
Operation
6.3 Operating the 3RK35 DP interface
LED statuses
6.3.2
LED
Meaning
DEVICE
Status
BF
Bus error
SF
Group error
Messages
Various status messages are output during normal operation:
Display
Meaning
RUN
DPXXX
SF
SB
System fault
BF
noEx
Bus error
BF
CFG
Bus error
Error in configuration
BF
PRM
Bus error
Parameterization error
BF
noCon
Bus error
No error
If several messages are active, a cursor line runs from one end of the affected line to the
other. To scroll through the messages, press "MODE".
A corrected error is automatically deleted from the display.
If you do not press any buttons for 30 seconds, the display automatically returns to the error
with the highest priority.
119
Operation
6.3 Operating the 3RK35 DP interface
6.3.3
Navigation
To switch from standard mode to menu mode, choose "SET". Different actions can be
carried out in menu mode:
Setting the PROFIBUS address (Page 121)
Restoring factory settings (Page 123)
To switch between the sub-menus, choose "MODE". When you confirm "EXIT" with "SET",
the system switches to standard mode. When you confirm the other entries with "SET", the
system switches to the relevant sub-menu. The system also returns to standard mode after
an extended period of inactivity (30 s).
1)
Changing the PROFIBUS address is not possible as this function has been disabled (e.g. with
Safety ES).
2)
Restoring the factory settings is not possible since the DP interface is in cyclic data exchange
with a DP master.
Figure 6-4
DP interface menu
120
Operation
6.3 Operating the 3RK35 DP interface
6.3.4
Key functions
The menu option DP is used to change the PROFIBUS address. You start input of the
hundreds digit by pressing "SET".
The buttons have the following functions when entering the address:
Pushbutton
"SET"
Result
"MODE"
Double-click on "SET"
Counts up
Double-click on
"MODE"
Counts down
121
Operation
6.3 Operating the 3RK35 DP interface
Action
1st line: not flashing
2nd line: 1st digit in DP address
flashing
Result
Display
XXX
OK
Meaning
1st line: not flashing
2nd line: flashing
Error
Display
XXX
NOK
Meaning
1st line: not flashing
2nd line: flashing
122
Operation
6.3 Operating the 3RK35 DP interface
Meaning
1st line: not flashing
2nd line: flashing
6.3.5
Action
RST
EXIT
RST
DO
Action
1st line: not flashing
2nd line: flashing
123
Operation
6.3 Operating the 3RK35 DP interface
124
Planning/configuring
7.1
7.1.1
System components
WARNING
Failure of Safety Functions
Can Cause Death, Serious Injury, or Property Damage.
Connect only released 3SK1 output expansions and 3RM1 Failsafe motor starters to a
3SK2 safety relay via device connectors.
125
Planning/configuring
7.1 System configuration guidelines
Released devices
The following devices can be used for system configuration with a 3SK2 safety relay. When
configuring the system, please observe Device configuration rules (Page 134).
Description
Article number
3SK2112-xAA10
Precisely 1
3SK2122-xAA10
with width 45 mm
Expansion units (actuators)
3SK1 output expansions (24 V DC)
3SK1211 (22.5 mm) output expansion
Up to 5
3SK1211-xBB40
Up to 5
3SK1213-xAB40
max. 1
3RM11..-xAA041)
Up to 5
3RM13..-xAA041)
Up to 5
display2)
3RK3511-xBA10
max. 1
3RK3611-3AA00
max. 1
x = 3 hybrid connection: Control circuit realized as push-in spring-loaded terminal and main circuit
as screw terminal
2)
Product version E04 or FW version V1.2.x and higher of the diagnostics display
Accessories
You can find an overview of available accessories in Section "Spare parts/Accessories
(Page 263)".
126
Planning/configuring
7.1 System configuration guidelines
7.1.2
Slots
Figure 7-1
The 3SK2 safety relay forms the basis of the system. A diagnostics display and/or a DP
interface module can be fitted on the left of it. On the right of the 3SK2 safety relay, a
maximum of five expansion units (3SK1 output expansions and 3RM1 Failsafe motor
starters) can be fitted using 3ZY12 device connectors.
Assign the slots from left to right in the following order:
Slot : Diagnostics display (optional); connect to interface module or 3SK2 safety relay
Slot : Interface module (optional)
Slot : 3SK2 safety relay (precisely 1 device per system)
Slots to actuators, in total five devices:
3SK1211 (22.5 mm) output expansions
3RM1 Failsafe safety-related motor starters
3SK1213 output expansion (90 mm) (maximum of 1 device)
Note
3SK1213 (90 mm) output expansion
One 3SK1213 output expansion must be placed on the right as the last device in the
system structure because expansion on the right is not possible.
127
Planning/configuring
7.1 System configuration guidelines
7.1.3
Operating conditions
7.1.3.1
Mounting position
Operation of 3SK2 safety relays is permissible up to an altitude of 2000 m.
Device
Any
Any
3RK35 DP interface
7.1.3.2
Ambient temperature
The maximum ambient temperature depends on the following factors:
Configuration (stand-alone installation, system configuration with or without DP interface)
Total maximum output currents Imax
Maximum
ambient
temperature
ImaxF-Q
ImaxQ
Imax
Tmax
2A
0.5 A
4.5 A
60 C
Required clearance
128
Planning/configuring
7.1 System configuration guidelines
System configuration without DP interface
Maximum
ambient
temperature
Imax F-Q
Imax Q
Imax
Tmax
2A
0.5 A
4.5 A
60 C
4A
1)
0.5 A
6.5 A
40 C
Required clearance
Maximum
ambient
temperature
ImaxF-Q
ImaxQ
Imax
Tmax
4A
0.5 A
6.5 A
40 C
1)
Required clearance
129
Planning/configuring
7.1 System configuration guidelines
Maximum
ambient
temperature
Required clearance
ImaxF-Q
ImaxQ
Imax
Tmax
4A
0.5 A
7A
60 C
Maximum
ambient
temperature
Required clearance
Imax F-Q
Imax Q
Imax
Tmax
4A
0.5 A
7A
40 C
No clearance required
Instructions
Note
3SK1 output expansions and 3RM1 Failsafe motor starters
You will find clearances to be observed and mounting position restrictions for 3SK1 output
expansions and 3RM1 Failsafe motor starters in the associated manuals, see Section
"Additional documentation (Page 14)".
130
Planning/configuring
7.1 System configuration guidelines
Note
Use in accordance with EN 50156-1
When operated in stand-alone configuration in utility rooms (boiler rooms, for instance) the
3SK2 safety relay with a width of 22.5 mm can be operated at a maximum ambient
temperature of 60 C.
The 3SK2 safety relay with either 3SK1 output expansions or a 3RM1 Failsafe motor starter
may be operated only in electrical utility rooms with a maximum ambient temperature of
40 C.
7.1.4
131
Planning/configuring
7.1 System configuration guidelines
There are suitable 3ZY12 device connectors for every device in the system and, in this
respect, you must observe the following:
Device
Device connector /
3ZY1212-2GA00
3SK2112-xAA10
Basic unit 45 mm
3SK2122-xAA10
Output expansion
22.5 mm
3SK1211-xBB40
(24V DC)
Description
Device connector /
3ZY1212-2BA00
132
Planning/configuring
7.1 System configuration guidelines
Device
Output expansion
90 mm
3SK1213-xAB40
(24V DC)
Device connector /
3ZY1212-2EA00
Description
133
Planning/configuring
7.1 System configuration guidelines
7.1.5
134
Planning/configuring
7.1 System configuration guidelines
135
Planning/configuring
7.1 System configuration guidelines
136
Planning/configuring
7.1 System configuration guidelines
137
Planning/configuring
7.1 System configuration guidelines
7.1.6
Diagnostics display
DP interface
3SK2 safety relay, 45 mm, with device connector set 3ZY1212-4GA01
3SK1211 output expansion actuator with device connector 3ZY1212-2BA00
3SK1211 output expansion actuator with device termination connector 3ZY1212-2DA00
138
Planning/configuring
7.1 System configuration guidelines
Diagnostics display
3SK2 safety relay, 45 mm, with device connector set 3ZY1212-4GA01
3RM1 Failsafe motor starter actuator with device connector 3ZY1212-2EA00
3RM1 Failsafe motor starter actuator with device termination connector 3ZY1212-2FA00
Typical system configuration with 3RM1 Failsafe motor starter and 3SK1 output expansions
Diagnostics display
DP interface
3SK2 safety relay, 22.5 mm, with device connector set 3ZY1212-4GA01
3SK1211 output expansion actuator with device connector 3ZY1212-2BA00
3RM1 Failsafe motor starter actuator with device connector 3ZY1212-2EA00
3SK1213 output expansion actuator with device connector set 3ZY1212-0FA01
139
Planning/configuring
7.2 Wiring rules for inputs and outputs
7.2
7.2.1
Safety information
WARNING
Hazardous Voltage
Can Cause Death, Serious Injury, or Property Damage.
To minimize any risk to humans or the environment, you must not bypass any safety
functions or implement measures that cause such safety functions to be bypassed. The
manufacturer is not liable for the consequences of any such manipulation or for any
damage resulting if this warning is not observed.
WARNING
Bypassing the Safety Function
Can Cause Death, Serious Injury, or Property Damage.
3SK1 output expansions and 3RM1 Failsafe motor starters that are connected to the
3SK2 safety relay via 3ZY12 device connectors are supplied with voltage via the device
connectors.
Do not directly connect any separate supply voltage to a 3SK1 output expansion or to a
3RM1 Failsafe motor starter as otherwise the safety function will be bypassed.
WARNING
Hazardous Voltage
Can Cause Death, Serious Injury, or Property Damage.
A two-channel safety application that is parameterized with two separate monitoring
functions does not achieve the same safety integrity level as a redundantly parameterized
monitoring function.
WARNING
Hazardous Voltage
Can Cause Death, Serious Injury, or Property Damage.
When safety-related outputs or inputs are used on a single channel, a cable cross-circuit or
the reaction of loads can result in a dangerous malfunction. When stringent requirements
regarding safety must be fulfilled, the risk of dangerous malfunctions must be minimized by
implementing appropriate measures (e.g., protected cable installation).
140
Planning/configuring
7.2 Wiring rules for inputs and outputs
Note
To achieve SILCL 2/3 as per EN 62061 or PL d/e as per EN ISO 13849-1, a fault exclusion
such as a short circuit to P or M is required. This can be implemented e.g. within a control
cabinet and by installing the connection cables in such a way that they are protected. If that
is not possible, the outputs must be implemented with two channels. For this purpose,
separate cables must be laid to actuators/contactors. In the associated function element
"F output," the output type "F output redundant" must be chosen.
7.2.2
Cross-circuit detection
Cross-circuit detection enables detection of an inadmissible connection between a sensor
cable and another sensor cable (= cross-circuit), a ground cable (= short circuit to ground) or
a power supply cable (= short circuit to P). The test outputs are available for this purpose.
141
Planning/configuring
7.2 Wiring rules for inputs and outputs
4. Test output T1 (22.5 mm devices) or T1_x (45 mm devices) must always be combined
with an odd-numbered sensor input (F-IN1, F-IN3, ..., F-IN19).
5. Test output T2 (22.5 mm devices) or T2_x (45 mm devices) must always be combined
with an even-numbered sensor input (F-IN2, F-IN4, ..., F-IN20).
6. Cross-circuit detection of the applicable safety function must be deactivated in Safety ES.
7. Non-floating sensors cannot be operated on test outputs T1_x / T2_x. Cross-circuit
detection of non-floating sensors with a 3SK2 safety relay is therefore not possible.
These sensors must be able to monitor and evaluate themselves and also the line to the
evaluation unit to ensure the safety of the application. In this case, cross-circuit detection
must be deactivated in the Safety ES software.
8. Cross-circuit detection between three, four, or more inputs on one sensor is not possible.
For this reason, the cables for the two buttons must be routed separately or in a protected
manner to prevent a cross-circuit (in two-hand operation, for example).
9. If a safety shutdown mat (cross-circuit principle) is connected to a 3SK2 safety relay (22.5
mm width), cross-circuit detection must be deactivated for the remaining inputs on this
device because otherwise the monitoring functions configured for these inputs will also
signal a cross-circuit when somebody steps on the safety shutdown mat.
In the case of 45 mm devices, the second, isolated test output pair (T1_2/T2_2) can be
used to enable detection of cross-circuits on these monitoring functions.
If a cross-circuit occurs on a test output pair (T1_1/T2_1), only the safety-related inputs
connected to this pair detect the cross-circuit. The safety-related inputs that are
connected to the other test output pair (T1_2/T2_2) do not detect this cross-circuit.
10.Since a cross-circuit is a fault that requires acknowledgment, a cross-circuit that has been
rectified must therefore be acknowledged by means of a reset.
142
Planning/configuring
7.2 Wiring rules for inputs and outputs
Cross-circuit detection
Note
Universal monitoring
EMERGENCY STOP
ON
In the case of this monitoring function, a crosscircuit is not a fault, but corresponds to the safety
requirement. Therefore, a cross-circuit is not
evaluated as a fault and need not be
acknowledged.
To be able to ensure absence of interaction of the
safety shutdown mat with the cross-circuit
detection of other sensors, only the safety
shutdown mat is connected to the test outputs
T1_x and T2_x.
Protective door
Acknowledgment
button
ON
Two-hand operation
Off
AS-i 2F-DI
Off
Wiring
The Section "Connecting safety-related inputs (Page 144)" describes how to connect the
sensors to the 3SK2 safety relay.
SIRIUS 3SK2 Safety Relays
Manual, 05/2015, A5E32639619002A/RS-AB/002
143
Planning/configuring
7.2 Wiring rules for inputs and outputs
7.2.3
144
Planning/configuring
7.2 Wiring rules for inputs and outputs
1 two-channel sensor*)
T1_1 (or T1_2 or T1) test output for F-IN1, F-IN3, ..., F-IN19
T2_1 (or T2_2 or T2) test output for F-IN2, F-IN4, ..., F-IN20
*) Two-channel sensors are monitored for cross-circuits
Note
SILCL 3 in accordance with EN 62061 or PL e/Cat. 4 in accordance with EN ISO 13849-1
The following conditions must be met to achieve SILCL 3 in accordance with EN 62061 or
PL e/Cat. 4 in accordance with EN ISO 13849-1:
The two-channel sensor is connected to a test output pair on the 3SK2 safety relay in
compliance with the wiring rules (Page 141).
Cross-circuit detection of the applicable safety function is activated in Safety ES.
Note
Single-channel acknowledgement button
Cross-circuit monitoring is always implemented in the case of a single-channel
acknowledgment button. This is why a single-channel acknowledgment button must also be
connected via a test output. Non-floating wiring is not possible.
1 two-channel sensor
Application examples
For examples of how to connect sensors, see Section "Connection of sensors (Page 272)."
145
Planning/configuring
7.2 Wiring rules for inputs and outputs
7.2.4
Solid-state outputs
Internally, safety-related solid-state outputs always have a two-channel structure. Each of
these outputs can therefore be used for applications up to SILCL 3 in compliance with
EN 62061 or PL e in compliance with EN ISO 13849-1.
Connection options
Single-channel actuator wiring
QA/QB contactors
F-Q1, F-Q2 Safety-related solid-state outputs
Note
*)SILCL 2/3 in accordance with EN 62061 or PL d/e in accordance with EN ISO 13849-1
To achieve SILCL 2/3 as per EN 62061 or PL d/e as per EN ISO 13849-1, a fault exclusion
such as a short circuit to P or M is required. This can be implemented e.g. within a control
cabinet and by installing the connection cables in such a way that they are protected.
If this is not possible, the actuators must be wired via two safety-related outputs; see the
right-hand image. For this purpose, separate cables must be laid to actuators/contactors. In
the associated function element "F output," the output type "F output redundant" must be
chosen.
Note
Protective circuit
A suitable protective circuit is needed for inductive loads. In this way, electromagnetic
interference can be suppressed and service life increased. You will find additional
information in Section "Requirements for actuators (Page 171)."
146
Planning/configuring
7.2 Wiring rules for inputs and outputs
Application examples
For examples of how to connect actuators, see Section "Connection of actuators
(Page 294)."
7.2.5
Non-safety-related sensors
3SK2 safety relays only have safety-related inputs. Therefore, these inputs are also used for
non-fail-safe signals (e.g. fault acknowledgement).
Just like single-channel sensors, non-safety-related signals such as start buttons can be
supplied not only in a non-floating fashion via L+, but also via the test outputs.
Connection possibility
147
Planning/configuring
7.2 Wiring rules for inputs and outputs
7.2.6
Signaling outputs
Besides the safety-related outputs, 3SK2 safety relays also feature one (22.5 mm version) or
two (45 mm version) non-safety-related signaling outputs.
These can be used for signaling purposes, to signal system states, for example. The safetyrelated outputs can also be used for signaling purposes.
Connection possibility
Indicator light
Q1 Non-safety-related solid-state output
Note
Protective circuit
A suitable protective circuit is needed for inductive loads. In this way, electromagnetic
interference can be suppressed and service life increased. You will find additional
information in Section "Requirements for actuators (Page 171)."
148
Planning/configuring
7.2 Wiring rules for inputs and outputs
7.2.7
7.2.7.1
Application examples
For examples of how to connect 3SK1 output expansions, see Section
"Examples/applications (Page 269)."
149
Planning/configuring
7.2 Wiring rules for inputs and outputs
7.2.7.2
Slide switch
Marking
22.5 mm unit
45 mm unit
F-Q3-C
F-Q5-C
F-Q4-C
F-Q6-C
150
Planning/configuring
7.2 Wiring rules for inputs and outputs
7.2.7.3
-K1
-K2
3SK1211 output expansion (24 V DC), slide switch setting: Undelayed (black area)
-K3
3SK1211 output expansion (24 V DC), slide switch setting: Delayed (black area)
-Q1/-Q2
Contactors
151
Planning/configuring
7.2 Wiring rules for inputs and outputs
In this case, use the "F output delayed" output function for parameterization in Safety ES.
Set the "Monitoring" parameter for feedback circuit 2 to "To OFF and ON status". Link
feedback circuit of the actuators (F-IN1) with an AND operation to the feedback circuit
(IN1-C) and in this way interconnect both to the FEEDBACK 2 input of the "F output delayed"
output function.
Note
If you only interconnect one output (FQx-C) of the device connector interface, you can use
the internal feedback circuit (IN1-C) without restriction.
152
Planning/configuring
7.2 Wiring rules for inputs and outputs
-K1
-K2
3SK1211 output expansion (24 V DC), slide switch setting: Undelayed (black area)
-K3
3SK1211 output expansion (24 V DC), slide switch setting: Delayed (black area)
-Q1/-Q2
Contactors
153
Planning/configuring
7.2 Wiring rules for inputs and outputs
Looping the feedback contact (51-52) into the feedback circuit of the downstream actuators
If both outputs (F-Qx-C) are to be used independently of each other, then the feedback
circuit (IN1-C) must not be interconnected in the logic diagram.
The feedback contacts (51-52) of the 3SK1 output expansions are looped into the
downstream actuators, e.g. Q1 and Q2. In this case, the feedback contacts of the actuators
Q1 and Q2 are wired conventionally to the 3SK2 safety relay via the corresponding input
terminals (F-INx).
-K1
-K2
3SK1211 output expansion (24 V DC), slide switch setting: Undelayed (black area)
-K3
3SK1211 output expansion (24 V DC), slide switch setting: Delayed (black area)
-Q1/-Q2
Contactors
Reference
You can find additional information in Sections "Stop categories (Page 56)" and "Connection
of actuators (Page 294)".
7.2.7.4
45 mm unit
F-Q3-C
F-Q5-C
154
Planning/configuring
7.2 Wiring rules for inputs and outputs
It is not possible to change over to the other output. Control is independent of the other
outputs (terminals) of the 3SK2 safety relay.
Pay attention to the system configuration rules; see Section "System configuration guidelines
(Page 125)".
WARNING
Bypassing the Safety Function When Using Device Connectors
Can Cause Death, Serious Injury, or Property Damage.
When operating with a 3SK2 safety relay and 3ZY12 device connectors, the supply voltage
for 3RM1 Failsafe motor starters is established via the device connectors.
Do not connect any separate supply voltage to a 3RM1 Failsafe motor starter (A1/A2) as
otherwise the safety function will be bypassed.
Application examples
For examples of how to connect 3RM1 motor starters, see Section "Connection of actuators
(Page 294)".
155
Planning/configuring
7.3 Response times
7.3
Response times
7.3.1
156
Planning/configuring
7.3 Response times
Note
3SK1 output expansions and 3RM1 Failsafe motor starters
The response times of 3SK1 output expansions or 3RM1 Failsafe motor starters are part of
the actuator response time tA.
7.3.2
Figure 7-2
Without flags:
Figure 7-3
With a flag:
157
Planning/configuring
7.3 Response times
7.3.3
Formulas for calculating fault response times in the case of single-channel actuator wiring without
flags
Figure 7-4
"Sensor - actuator" fault response time in the case of single-channel actuator wiring without using flags
Without flags:
Formulas for calculating fault response times in the case of single-channel actuator wiring with flags
Figure 7-5
"Sensor - actuator" fault response time in the case of single-channel actuator wiring with use of flags
With a flag:
158
Planning/configuring
7.3 Response times
7.3.4
Formulas for calculating fault response time in the case of two-channel actuator wiring without flags
Figure 7-6
"Sensor - actuator" fault response time in the case of two-channel actuator wiring used without flags
Without flags:
Formulas for calculating fault response time in the case of two-channel actuator wiring with flags
Figure 7-7
"Sensor - actuator" fault response time in the case of two-channel actuator wiring used with flags
With a flag:
159
Planning/configuring
7.3 Response times
7.3.5
"OFF signal" means the change from the ON state to the OFF state (1 > 0).
"ON signal" means the change from the OFF state to the ON state (0 > 1).
IN
Input terminal
Output terminal
tRSA
Response time of the system from a sensor (S) to an actuator (A) in error-free operation
tFR1
tFR2
tS
For the response time of the sensor (S), see the documentation of the sensor
tIN
Transmission duration from signal acquisition at the input terminal (IN) to the logic of the
3SK2 safety relay; depending on the signal; the following always applies to the
3SK2 safety relay: tIN = tCYCL
tMEMORY
tTIMER_1
Parameterizable timer functions in the logic, which lies between reading of the input state
to writing into the flag.
tTIMER_2
Parameterizable timer functions in the logic, lying between reading of the flag to writing
the output state.
tDELAY
Parameterizable input delay time in the case of monitoring functions and input cells
tFB
tQ
Transmission duration from the logic of the 3SK2 safety relay to the output terminal (Q);
On the 3SK2 safety relay, the response time of the output terminal (Q)
tA
For the response time of the actuator (A) including the time until the signal has been
received and processed by the actuator, see the actuator documentation
tCYCL
160
Planning/configuring
7.3 Response times
7.3.6
Parameterizing in Safety ES
161
Planning/configuring
7.3 Response times
162
Planning/configuring
7.3 Response times
163
Planning/configuring
7.3 Response times
7.3.7
In this case, the response time is identical with the fault response time and is calculated as
follows:
164
Planning/configuring
7.3 Response times
Formula
Explanation
IN
Input terminals
Output terminals
tRSA_I
tFR2_I
tS
Refer to the associated documentation for details of the EMERGENCY STOP response
time
tIN
For the 3SK2 safety relay: tIN = tCYCL (set program cycle time)
tCYCL
tTIMER
tDELAY
Input delay for monitoring functions and input cells at the inputs
tQ
tA
Refer to the associated documentation for the response time of the SIRIUS 3RT20
contactor
Refer to the associated documentation for the response time of the motor
165
Planning/configuring
7.3 Response times
The response time is calculated as follows:
Explanation
IN
Input terminals
Output terminals
tRSA_II
tFR1_II
tS
Refer to the associated documentation for details of the EMERGENCY STOP response
time
tIN
For the 3SK2 safety relay: tIN = tCYCL (set program cycle time)
tCYCL
tTIMER
tDELAY
Input delay for monitoring functions and input cells at the inputs
tFB
tQ
tA
Refer to the associated documentation for the response time of the SIRIUS 3RT20
contactor
Refer to the associated documentation for the response time of the motor
166
Planning/configuring
7.3 Response times
Example III: shutdown via 3SK1 output expansion with device connector (single-channel actuator
wiring)
The 3SK2 safety relay monitors the EMERGENCY STOP. When the EMERGENCY STOP
(OFF signal) is triggered, the 3SK2 safety relay controls the 3SK1 output expansion via one
safety-related output by means of 3ZY12 device connectors. The 3SK1 output expansions
opens the enabling circuits and shuts down the motor safely via power contactors.
167
Planning/configuring
7.3 Response times
Formula
Explanation
IN
Input terminals
Output terminals
Actuator consisting of 3SK1 output expansion, two SIRIUS 3RT20 contactors and one
motor
tRSA_III
tFR1_III
tS
Refer to the associated documentation for details of the EMERGENCY STOP response
time
tIN
For the 3SK2 safety relay: tIN = tCYCL (set program cycle time)
tCYCL
tTIMER
tDELAY
Input delay for monitoring functions and input cells at the inputs
tFB
tQ
tA
Refer to the associated documentation for the response time of the 3SK1 output
expansion
Refer to the associated documentation for the response time of the SIRIUS 3RT20
contactor
Refer to the associated documentation for the response time of the motor
168
Planning/configuring
7.3 Response times
Example IV: shutdown via 3RM1 Failsafe motor starter with device connector (single-channel actuator
wiring)
The 3SK2 safety relay monitors the EMERGENCY STOP. When the EMERGENCY STOP
(OFF signal) is triggered, the 3SK2 safety relay controls the 3RM1 Failsafe motor starter via
one safety-related output by means of 3ZY12 device connectors. The 3RM1 Failsafe motor
starter shuts down the motor safely.
169
Planning/configuring
7.3 Response times
Formula
Explanation
IN
Input terminals
Output terminals
tRSA_IV
tFR1_IV
tS
Refer to the associated documentation for details of the EMERGENCY STOP response
time
tIN
For the 3SK2 safety relay: tIN = tCYCL (set program cycle time)
tCYCL
tTIMER
tDELAY
Input delay for monitoring functions and input cells at the inputs
tFB
tQ
tA
Refer to the associated documentation for the response time of the 3RM1 Failsafe
motor starter
Refer to the associated documentation for the response time of the motor
170
Planning/configuring
7.4 Selection of sensors and actuators
7.4
7.4.1
Design of sensors
The minimum actuating duration at the input of the 3SK2 safety relay is the length of time for
which a signal must be present at the input to ensure that it can be reliably detected. Please
observe this time when selecting suitable sensors.
tMIN = 2 x tCYCL
tMIN
Minimum actuating duration at the input terminals of the 3SK2 safety relay
7.4.2
Design of actuators
When actuators are selected, the following attributes of the actuators must be suitably
designed:
Response time of the actuator
Capacitive load of the actuator
Inductive load of the actuator
171
Planning/configuring
7.4 Selection of sensors and actuators
Response time
The response time is the time between application of the actuation voltage by the
3SK2 safety relay and closing of the contacts or switching of the actuator.
When selecting suitable actuators, make sure that the actuator's response time is adequately
long; see also Section "Light test (Page 173)".
WARNING
Hazardous State Due to Too Short a Response Time of the Actuator
Can Cause Death, Serious Injury, or Property Damage.
The 3SK2 safety relay continually runs self-tests to monitor whether the outputs are
operating without faults, for example. Please observe the actuator's minimum response
time when selecting suitable actuators.
By default, the light test is activated for every fail-safe output and can only be deactivated
via the "F output delayed" output function.
If the light test is activated, the response time of the actuator must be greater than the
duration of the maximum read-back time plus the light test time:
Greater than 6 ms when using an "output cell" combined with the safety-related output
terminal or the element "F output".
Greater than 6 403 ms when using the "F output delayed" output function.
Even if the light test is deactivated, in the case of single-channel wiring of the actuators, a
brief light pulse can occur in the event of a fault of the 3SK2 safety relay. In this case, use
actuators with a response time of more than 4 ms or implement two-channel wiring using
two safety-related outputs.
Capacitive load
A specific capacitive load must not be exceeded at the connected actuators. The maximum
capacitive load depends on the load current.
When selecting suitable actuators, make sure that the actuator does not exceed the
permissible capacitive load; see also Section "Guidelines for capacitive loads (Page 177)". If
necessary, adjust the maximum read-back time of the dark test in Safety ES, see Section
"Dark test (Page 174)".
Inductive load
The outputs of the 3SK2 safety relay do not feature internal induction protection. If inductive
loads are operated at the safety-related outputs of the 3SK2 safety relay, then they must be
provided with inductive interference protection, see Section "Guidelines for inductive loads
(Page 178)".
172
Planning/configuring
7.4 Selection of sensors and actuators
7.4.2.1
Light test
Light test
The light test is understood to consist of brief activation of a deactivated safety-related output
to test whether the output is functioning without faults. A sufficiently slow actuator does not
respond to this and remains switched off.
Within the test interval time, a light pulse normally appears with a maximum light testing time
of 3 ms.
If a light pulse detects a fault, the light pulse is repeated twice at an interval of 0.5 s. If the
fault is then still present, all safety-related outputs are set to the safe state. The 3SK2 safety
relay changes to configuring mode.
173
Planning/configuring
7.4 Selection of sensors and actuators
7.4.2.2
Dark test
Dark test
A dark test is the brief deactivation of an activated safety-related output of the 3SK2 safety
relay to ensure that the output can be deactivated at any time should safety requirements
dictate it. To this end, the chosen test pulse is so short that a connected actuator does not
shut down as a result.
174
Planning/configuring
7.4 Selection of sensors and actuators
Within the test interval time, a dark pulse normally appears with a maximum read-back time
of 3 to 400 ms.
If a dark pulse detects a fault, the dark pulse is repeated twice at an interval of 0.5 s. If the
fault is then still present, all safety-related outputs are set to the safe state. The 3SK2 safety
relay changes to configuring mode.
Parameterizing in Safety ES
The maximum read-back time can be set in the logic diagram when using the "F output
delayed" output function. In the case of all other output elements, the maximum read-back
time for fail-safe outputs is 3 ms.
WARNING
Increasing the Fault Response Time
Can Cause Death, Serious Injury, or Property Damage.
When the maximum read-back time is increased, the fault response time of the 3SK2 safety
relay also increases; see Section "Response times (Page 156)".
Please note this when designing your system.
As the fault response time is extended by the maximum read-back time, the chosen
maximum read-back time should be set to as low a value as possible by approximation, but
should be so high that no fault is detected by the 3SK2 safety relay.
Use the diagram in Section "Guidelines for capacitive loads (Page 177)" to determine the
maximum read-back time required for your actuator. If the actuator's capacitance is not
known, it may be necessary for you to approximate the value for the maximum read-back
time. This may also be necessary because of component spread or external influences.
175
Planning/configuring
7.4 Selection of sensors and actuators
Proceed as follows:
Set the maximum read-back time so that the output is read back correctly but your
actuator does not yet respond.
If the output is sporadically deactivated, set a higher value for the maximum read-back
time.
If the output is deactivated, the maximum read-back time is too short for a connected
capacitive load. Discharging cannot take place within the parameterized maximum readback time. Increase the maximum read-back time.
If you have set the maximum read-back time to the maximum value of 400 ms and the
output is still deactivated, either an internal fault has occurred or the connected
capacitance is outside the permissible range.
Note
Maximum read-back time of actuators with 3ZY12 device connectors
In the case of 3SK1 output expansions and 3RM1 Failsafe motor starters connected to the
3SK2 safety relay via 3ZY12 device connectors, a maximum read-back time of 3 ms is
sufficient.
176
Planning/configuring
7.4 Selection of sensors and actuators
7.4.2.3
Characteristics
The following figure shows typical characteristics for the relationship between the maximum
capacitive load C (F) at load current I (A) at the safety-related outputs for different
parameterizable maximum read-back times [ms] of the dark test (Page 174).
The maximum read-back time can be set in Safety ES when using the "F output delayed"
output function.
177
Planning/configuring
7.4 Selection of sensors and actuators
7.4.2.4
178
Planning/configuring
7.4 Selection of sensors and actuators
Example:
Protective circuit for an inductive load
Characteristics
The figure below shows typical characteristics for the relationship between the maximum
inductive loads L [H] with respect to the load current I [mA] and switching frequency f [Hz].
179
Planning/configuring
7.5 Commissioning
7.5
Commissioning
Safety information
Note
Since commissioning of the safety relay is an important, safety-related step, it must be
carried out by qualified personnel.
WARNING
Hazardous Voltage
Can Cause Death, Serious Injury, or Property Damage.
Conduct a function test of the system.
To ensure the safety of the system, a full functional test of the system must be conducted
after commissioning, and a successful result obtained.
A complete function test consists of the following tests:
Configuration test (test of the configuration)
System test (wiring test of the connected sensors and actuators)
7.5.1
Modes
The safety relay always differentiates between three operating modes:
Configuring mode
Test mode
Safety mode
180
Planning/configuring
7.5 Commissioning
Startup/self-test
Once the power supply has been applied, the safety relay performs a self-test. During the
self-test phase, both LEDs on the safety relay light up for 2 seconds (lamp test). Two-color
LEDs light up yellow. The safety relay then loads the configuration from the memory and
checks whether a valid configuration or parameterization is stored and released and
automatically switches to safety mode (DEVICE LED lights up green).
The safety relay enters configuration mode (the DEVICE LED lights up yellow) when:
No configuration exists,
The TARGET configuration differs from the ACTUAL configuration (the SF LED lights up
red)
The existing configuration has not been released.
The memory module (45 mm unit) is missing or defective: In this case, only diagnostics of
the safety relay are possible (DEVICE LED flashes red, SF LED lights up red).
181
Planning/configuring
7.6 Integrating into DP master systems
7.6
7.6.1
Figure 7-8
The DP address can in principle be changed using all three access channels. The DP
address last written or set in the DP interface is the valid address.
182
Planning/configuring
7.6 Integrating into DP master systems
Individual access paths for changing the DP address can also be disabled. This can be
carried out via the parameterization of the DP interface in Safety ES.
WARNING
Hazardous system state due to unauthorized access via PROFIBUS
Can result in death, serious injury, or property damage.
Unauthorized access to the safety relay via PROFIBUS can enable configuration changes
and overriding of safety functions.
To prevent unauthorized access to the safety relay via the PROFIBUS network, assign a
password for accessing the device in Safety ES. If you operate several safety relays in one
PROFIBUS network, you must assign a separate password for each safety relay to prevent
confusion when accessing via PROFIBUS. In other words, the passwords must not be
identical.
183
Planning/configuring
7.6 Integrating into DP master systems
7.6.2
Requirements
You require a GSD file for the DP interface. You can download this file from the Internet
(http://support.automation.siemens.com/WW/view/en/113630):
If you want to use the DP interface as a DP slave, your configuring tool must support GSD
files (Revision 5) -- e.g. STEP7 V5.3 and higher.
184
Planning/configuring
7.6 Integrating into DP master systems
7.6.3
PROFIBUS failure
The DP interface reports a PROFIBUS interruption to the safety relay. The safety relay then
uses the substitute value "0" for the PROFIBUS logic inputs. Safety mode is not exited. The
bus failure can be diagnosed in Safety ES.
Indication failure PROFIBUS
LED
DP interface
DP interface display
Safety relay
DEVICE
Green
BF
DPXXX
Green
BF
Red
SF
off
off
Restoration of PROFIBUS
Once the PROFIBUS connection has been restored, the safety relay will work with the real
values again.
Indication of PROFIBUS restoration
LED
DP interface
DP interface display
Safety relay
DEVICE
Green
RUN
DPXXX
Green
BF
Off
SF
off
off
185
Planning/configuring
7.6 Integrating into DP master systems
186
Figure 8-1
Step
Action
Release the "RESET" key only when the DEVICE LED flickers yellow.
Keep holding down the "RESET" key if the DEVICE LED flickers red.
Release the "RESET" key when the DEVICE LED flickers yellow.
Keep holding down the "RESET" key if the DEVICE LED flickers red.
When the DEVICE LED goes out, release the "RESET" key within 10 s.
The DEVICE LED starts to flash yellow.
Once the factory settings have been restored, the 3SK2 safety relay automatically restarts
and switches to configuring mode.
Factory setting
Result
The procedure for restoring the factory settings has the following effects:
All configuration information in the internal memory of the 3SK2 safety relay is deleted.
If the external memory module is plugged in, all the existing data is deleted (Only affects
3SK2 safety relays with 45 mm width)
The DP address is deleted and set to DP address 126.
187
Note
Alternatively, the factory settings can be restored by Safety ES.
Note
Factory settings with connected DP interface
As communication with the DP interface is interrupted when the factory settings are being
restored, you must switch the entire system off and then on again once the they have been
restored.
Note
Factory settings of the diagnostics display
The factory settings for the diagnostics display can also be restored; see Section "Display
settings (Page 224)".
Note
Factory settings for DP interface
The factory settings for the DP interface can also be restored; see Section "Restoring factory
settings (Page 123)".
188
8.2
Device replacement
Defective devices
Replace a defective device with a new device. Note the following safety instructions and the
described procedure when doing so. Device replacement must be carried out by authorized
specialist personnel.
Safety information
WARNING
Hazardous Voltage
Can Cause Death, Serious Injury, or Property Damage.
Hazardous electrical voltages can cause electric shock, burns and damage.
Turn off and lock out all power supplying the system and device before working on the
device.
To ensure protection against the hazard of electric shock when the terminal cover is
open, screw in all terminal screws that are not needed to clamp conductors.
Close the terminal covers and always keep them closed during operation.
WARNING
Hazardous Voltage
Can Cause Death, Serious Injury, or Property Damage.
Carry out function test of the system
To ensure the safety of the system, any changes to it or any replacement of defective
components must be followed by a thorough and successfully completed function test of
the system.
A complete function test consists of the following tests:
Configuration test (test of the configuration)
System test (wiring test of the connected sensors and actuators)
Note
Recycling and disposal
Dispose of existing packing material in accordance with applicable regulations or recycle it.
3SK2 safety relays are able to be recycled thanks to a low-pollutant manufacturing process.
For environmentally-friendly recycling and disposal of your electronic waste, please contact a
company certified for the disposal of electronic waste.
Note
When replacing a device, you do not need to re-wire it. The terminals can be disconnected
from the defective device and then connected to the new device. Please observe this
sequence.
189
190
191
192
Diagnostics
Diagnostics options
A number of methods are available for diagnosing errors:
Diagnostics with LEDs
Diagnostics via device display (on the 3SK2 safety relay with width 45 mm)
Diagnostics with Safety ES
Diagnostics with diagnostics display (optional)
Diagnostics via PROFIBUS (via DP interface; optional)
9.1
Troubleshooting procedure
Local troubleshooting
There are different options for local troubleshooting.
1. Troubleshooting with diagnostics display
Read queued messages of the elements as plain text locally on the control cabinet.
The cabinet does not need to be opened for this if the diagnostics display is built into
the control cabinet door.
The diagnostics display shows the active fault.
The diagnostics display shows the affected element (sensor / actuator) causing the
fault.
The diagnostics display shows which signals are active at which terminals
(1 / 0 / fault).
2. Troubleshooting with LEDs
You can see the status of the safety relay from the LEDs.
3. Troubleshooting with device display (45 mm device)
The diagnostics display shows which signals are active at which terminals
(1 / 0 / fault).
4. Troubleshooting with Safety ES
Safety ES offers you detailed diagnostics of all elements with a locally connected PG /
PC.
In the logbooks of the safety relay, all messages are saved with a time stamp, and a
log is thus created that you can read out with Safety ES.
193
Diagnostics
9.1 Troubleshooting procedure
Online troubleshooting
1. Troubleshooting with Safety ES via PROFIBUS interface
Safety ES offers you detailed diagnostics of all elements with a PG / PC connected via
PROFIBUS and DP interface.
In the logbooks of the safety relay, all messages are saved with a time stamp, and a
log is thus created that you can read out with Safety ES.
2. Troubleshooting via PROFIBUS diagnostics frame
With the connection to PROFIBUS via a DP interface, you can evaluate diagnostics
data sets with a higher-level controller, and respond accordingly. You need to have a
sound knowledge of writing/reading data sets using PROFIBUS.
Fault acknowledgment
Acknowledge the message after resolving the cause.
WARNING
System Restart After Fault Acknowledgement/Restart
Can Cause Death, Serious Injury, or Property Damage.
When the power-on condition is fulfilled, the system immediately continues to operate with
the values and outputs specified by control following fault acknowledgement/restart.
Take appropriate measures (e.g. start button with monitored starting) to prevent
unintentional restarting and to ensure a defined start of the system.
194
Diagnostics
9.2 Diagnostics concept
9.2
Diagnostics concept
The diagnostics concept of the 3SK2 safety relay is illustrated in the following diagram:
The various device messages result in an entry in DS92. Some of the messages then trigger
a higher-level error, for example, group errors (SF), bus faults (BF), group warnings (SW),
and group prewarnings (SVW) in the group status.
Messages output by the function elements initially result in a certain element status, which
itself can result in an entry in DS92.
This status is then indicated by the LEDs. Data set 92 can be read out via the diagnostics via
PROFIBUS.
Figure 9-1
195
Diagnostics
9.2 Diagnostics concept
9.2.1
Display philosphy
In error management, the following display concept applies:
Errors requiring acknowledgment are displayed by a red SF LED.
WARNING
System Restart After Fault Acknowledgement/Restart
Can Cause Death, Serious Injury, or Property Damage.
When the power-on condition is fulfilled, the 3SK2 safety relay immediately continues to
operate with the values and outputs specified by the control following fault
acknowledgement/restart.
Take appropriate measures (e.g. start button with monitored starting) to prevent
unintentional restarting and to ensure a defined start of the system.
Self-acknowledging errors are displayed by a red flashing SF LED.
If more than one error is present at the same time, red has priority over red flashing.
9.2.2
Error management
Error categories
Error management makes a distinction between five different error categories:
Device error
System error
Logic or wiring error
Parameterization or configuration error
Handshake error
Device error
A device error causes the system to stop. Communication between the devices is not
possible. This error is caused either by internal system errors or a defective 3SK2 safety
relay.
196
Diagnostics
9.2 Diagnostics concept
This error category can occur in any operating mode.
Display on the safety relay
LED
Display
DEVICE
red
SF
red
Display
Remedy
The 3SK2 safety relay can only exit the
system stop by means of a restart after
switching the power supply off and on. If the
error is still present after the system has been
restarted, you must replace the 3SK2 safety
relay.
(45 mm)
Exception:
In the event of overvoltage or undervoltage,
the device LED and SF LED do not light up:
Note
Diagnostics not possible
In this state, no diagnostics information can be queried.
System error
If a system error occurs, the 3SK2 safety relay switches from safety/test mode to a safe state
(configuring mode) and switches off all the outputs. The option of reading out status and
diagnostics messages is still available.
Display on the safety relay
LED
Display
DEVICE
SF
red
Display
(45 mm)
Remedy
197
Diagnostics
9.2 Diagnostics concept
Display
DEVICE
SF
red
Display
(45 mm)
Operating state
Remedy
Resolve the cause and then acknowledge
the error with reset.
*) Diagnostics also possible with the 3RK36 diagnostics display for all 3SK2 safety relays
Logic error
(e.g., discrepancy time violation, violation of a signal sequence):
Display on the safety relay
LED
Display
DEVICE
SF
flashing red
Display
(45 mm)
Operating state
Remedy
Acknowledgment is not necessary. If the
logic is correct then the warning is
automatically canceled.
*) Diagnostics also possible with the 3RK36 diagnostics display for all 3SK2 safety relays
Group prewarning
(e.g., wait for startup test; safety sensor tripped)
Display on the safety relay
LED
Display
DEVICE
SF
Display
(45 mm)
Operating state
Remedy
Acknowledgment is not necessary. If the
logic is correct then the warning is
automatically canceled.
*) Diagnostics also possible with the 3RK36 diagnostics display for all 3SK2 safety relays
198
Diagnostics
9.2 Diagnostics concept
Display
DEVICE
yellow
SF
red
Display
Remedy
Acknowledgment is not necessary. If the
parameterization is correct then the error is
automatically canceled.
(45 mm)
Handshake error
This category of error only occurs in test mode. This error is caused by an interruption in the
connection between Safety ES and the 3SK2 safety relay. The safety relay changes from
test mode to configuring mode.
Display on the safety relay
LED
Display
DEVICE
yellow
SF
red
Display
Remedy
Acknowledgment is not necessary. The error
is automatically canceled when a connection
is correctly re-established.
(45 mm)
199
Diagnostics
9.3 Diagnostics via LEDs
9.3
9.3.1
Display
Explanation
DEVICE
Off
No voltage
Undervoltage, overvoltage
green
Green flashing
0.5 Hz (ratio 1:1)
System power-up
Flickering green
yellow
Yellow flashing
0.5 Hz (ratio 1:1)
Flickering yellow
red
System stop
The system stop can only be exited by means of a
restart after switching the power supply off and on. If
the error is still present after the system has been
restarted, you must replace the 3SK2 safety relay.
SF
Red flashing
0.5 Hz (ratio 1:1)
Flickering red
off
No group error
red
Red flashing
0.5 Hz (ratio 1:1)
1)
200
Diagnostics
9.3 Diagnostics via LEDs
WARNING
System Restart After Fault Acknowledgement/Restart
Can Cause Death, Serious Injury, or Property Damage.
When the power-on condition is fulfilled, the system immediately continues to operate with
the values and outputs specified by control following fault acknowledgement/restart.
Take appropriate measures (e.g. start button with monitored starting) to prevent
unintentional restarting and to ensure a defined start of the system.
Reference
You will find more information on the LED display during startup in the Section "Modes
(Page 180)"
201
Diagnostics
9.3 Diagnostics via LEDs
9.3.2
Display
Explanation
DEVICE
Off
No voltage
Green
Device OK
Green flashing
0.5 Hz (ratio 1:1)
Red
Device defective
Yellow flashing
0.5 Hz (ratio 1:1)
Off
Red
BF
SF
9.3.3
Red flashing
0.5 Hz (ratio 1:1)
Off
No group error
Red
Display
Explanation
DEVICE
Off
Device error
green
BF
SF
flickering green
yellow
Off
No bus error
red
Red flashing
0.5 Hz (ratio 1:1)
Off
No group error
red
Red flashing
0.5 Hz (ratio 1:1)
202
Diagnostics
9.4 Diagnostics via device display (3SK2 safety relay with width 45 mm)
9.4
Diagnostics via device display (3SK2 safety relay with width 45 mm)
Display
The device display of the 3SK2 safety relay with 45 mm width displays the operating state
and the states of the input and output terminals.
The following operating states can be displayed:
Display
Meaning
RUN
TEST
PROJ
PROJ
ERR
An error has occurred that prevents further processing of the safety application
INIT
Navigation
The "SET" and "MODE" keys are used for navigation in the menus and submenus:
"SET" changes to the menu levels.
"MODE" scrolls through the menu items.
Single click: scroll forward
Double-click: scroll back
After 30 seconds of inactivity, you are returned to the top menu level (menu or menu ).
203
Diagnostics
9.4 Diagnostics via device display (3SK2 safety relay with width 45 mm)
Menu structure
204
Diagnostics
9.4 Diagnostics via device display (3SK2 safety relay with width 45 mm)
Menu
Menu
Operating state
Menu
The display shows the number and the type of the affected terminal, e.g. fault at
F-IN5 and at F-Q6
A: Overview
B: Detail view
Menu
Menu
Menu
SET1)
205
Diagnostics
9.4 Diagnostics via device display (3SK2 safety relay with width 45 mm)
Overview A
Four terminals and their states are displayed in this menu.
Indicates whether you can scroll to the left in the menu (2 x Mode)
Number of the first of the four terminals, in this case F-IN5.
Indicates whether you can scroll to the right in the menu (1 x Mode)
Type of the terminal
Status of the four terminals, in this case of the terminals F-IN5 to F-IN8.
The following states can be displayed:
0 = there is no signal
1 = a signal is present
- = unknown status
E = a message is pending.
206
Diagnostics
9.4 Diagnostics via device display (3SK2 safety relay with width 45 mm)
Detail view B
The details of a terminal are displayed in this menu:
0 = there is no signal
1 = a signal is present
- = unknown status
ok = configured and ok
207
Diagnostics
9.5 Diagnostics with diagnostics display
9.5
9.5.1
Diagnostics display
Figure 9-2
Diagnostics display
A diagnostics display is available for the safety relays that is able to display the current
messages, diagnostics data, and status information of the monitored system. It has three
status LEDs and makes the system interface easily accessible outside of the control cabinet.
Note
3SK2 safety relays
These 3SK2 safety relays are supported by the diagnostics display from product version E04
and firmware version V1.2.x and higher.
MSS 3RK3 Advanced/ MSS 3RK3 ASIsafe basic/ MSS 3RK3 ASIsafe extended
These 3RK3 central units are supported by the diagnostics display with product version E03
and firmware version V1.1.x and higher.
MSS 3RK3 Basic
MSS 3RK3 Basic is supported by the diagnostics display with product version E01 and
higher.
208
Diagnostics
9.5 Diagnostics with diagnostics display
Note
Communication via PROFIBUS and diagnostics display
If the safety relay is accessed by the software using PROFIBUS, the diagnostics display
must have at least product version 3 (E03) or firmware version1) V1.1.x.
If an access path is established by the software over an extended period or the device is
switched to test mode, the diagnostics display is disabled and outputs a corresponding
message. The diagnostics display restarts automatically once this status ends.
The firmware version can be read at the startup of the display or at the bottom left when
the display is disabled. In addition, it is shown by selecting menu command "Display settings
/ Identification". (see also Section "Display settings (Page 224)")
1)
209
Diagnostics
9.5 Diagnostics with diagnostics display
9.5.2
Displays
You can read current operating and diagnostics data, as well as status information of the
safety relay in plain text, via the display.
Display
Messages and status information of the safety relay can be displayed in plain text here.
Short values (e.g.: plant identifiers) are displayed directly under the heading, long texts (e.g.
the comment) are shown in a submenu. It can be seen on the (OK) key that a submenu can
be launched.
Scrollbar
As shown in the graphic, this bar shows whether there are any more menu items or
messages. These items can be selected and displayed using the arrow keys.
If no other entries are present, the inside of the bar is black.
OK (selects / confirms)
Reset (acknowledges error)
210
Diagnostics
9.5 Diagnostics with diagnostics display
9.5.3
Menus
You can navigate the menu with the arrow keys and softkeys. Any menu option may have
additional sub-menus. The menu structure and display are in part directly dependant on the
device parameterization (e. g. selected control function) and hardware configuration (e.g.
type and number of expansion modules used).
211
Diagnostics
9.5 Diagnostics with diagnostics display
Status display
The "status display" is the standard display of the diagnostics display. It displays the
equipment identifier, the operating status and the status of the configuration.
You can navigate to the individual menus via the right softkey (OK). With the left softkey
(reset), pending errors can be acknowledged directly.
If messages are pending, they are displayed directly, that is, the diagnostics menu switches
directly to the message menu and to the message with the highest priority. This function can
be deactivated via the display settings. If multiple messages are pending, they are displayed
as a list that is visible on the scrollbar on the right side of the display. You can scroll to the
individual messages with the arrow keys.
Messages
The "Messages" menu provides an overview of all current pending error messages and
warnings for the entire system.
You will find detailed information in Section "Messages (Page 213)"
Status
The "Status" menu displays all relevant status information and messages for the configured
function elements. Pending messages can be acknowledged after they are dealt with.
You will find detailed information in Section "Status (Page 217)"
System configuration
The "System configuration" menu provides all relevant information for configuration and for
the individual devices.
You will find detailed information in Section "System configuration (Page 221)"
Display settings
All settings affecting the diagnostics display can be made via the "Display settings" menu. In
addition to selecting the language and adjusting contrast and brightness, it is also possible to
reset to the factory settings.
You will find detailed information in Section "Display settings (Page 224)"
212
Diagnostics
9.5 Diagnostics with diagnostics display
9.5.3.1
Messages
The "Messages" menu option provides an overview of all current pending error messages
and warnings for the entire system.
Second level of the menu of the diagnostics display - "Messages" menu option
Message categories
The following message categories may be displayed, according to the cause of error:
Device errors
Group errors
Bus errors
Group warning
Group prewarning
If multiple errors from different categories are pending, you can switch between the individual
error categories with the arrow keys.
213
Diagnostics
9.5 Diagnostics with diagnostics display
Acknowledging errors
For individual errors, you can switch directly to the applicable function element in the status
menu by marking the error message with the arrow keys and by pressing the right key (OK).
WARNING
System Restart After Fault Acknowledgement/Restart
Can Cause Death, Serious Injury, or Property Damage.
When the power-on condition is fulfilled, the system immediately continues to operate with
the values and outputs specified by control following fault acknowledgement/restart.
Take appropriate measures (e.g. start button with monitored starting) to prevent
unintentional restarting and to ensure a defined start of the system.
You can switch to the status display for the affected function element when the following
messages occur:
Group prewarning from user program
Group warning from user program
Wiring error
Logic error
Group error from user program
In the "Status" menu, you can acknowledge the error after having dealt with it with the right
key (reset).
Device errors
Possible causes for device errors/self-test errors are:
Output wiring error
Faulty input or output
Defective device
214
Diagnostics
9.5 Diagnostics with diagnostics display
Group errors
The following group errors can be diagnosed:
Message
Configuration
Meaning(s)
error1)
Configuration error1)
Wiring error2)
Logic
SC configuration error
TARGETACTUAL configuration
error2)
Handshake error
SC bus error
SC configuration error
More configuration data were transferred to the safety relay than can be
stored in the configuration memory.
1)
Different error causes are possible. The cause is displayed by pressing the right key (OK).
2)
Pressing the right key (OK) switches the diagnostics display directly to the relevant function
element in the status menu.
215
Diagnostics
9.5 Diagnostics with diagnostics display
Bus errors
The following bus errors can be diagnosed:
Message
Meaning
DP bus error
DP parameterization error
DP configuration error
SC bus error
SC parameterization error
SC configuration error
Group warning
The following group warnings can be diagnosed:
Message
Meaning
Disconnect
The monitoring time has been exceeded During monitoring time, the
safety relay has not received any data set from the communication
partner with write access to the safety relay.
Configuration missing
1)
Pressing the right key (OK) switches the diagnostics display directly to the element in the status
menu.
Group prewarning
The following group prewarnings can be diagnosed:
Message
Meaning
1)
Pressing the right key (OK) switches the diagnostics display directly to the element in the status
menu.
216
Diagnostics
9.5 Diagnostics with diagnostics display
9.5.3.2
Status
Second level of the menu of the diagnostics display - "Status" menu option
217
Diagnostics
9.5 Diagnostics with diagnostics display
218
Diagnostics
9.5 Diagnostics with diagnostics display
219
Diagnostics
9.5 Diagnostics with diagnostics display
Invalid operating mode selection
Incoming/outgoing alarm
Counter limit value exceeded/undershot
Last count pulse was up/down
OFF delay active
ON delay active
Passing make pulse contact active
Clock-pulse generator active
Standby time is ON
Control mode selection invalid
Output n active
Output n overloaded
Output n defective
Feedback circuit signal n and switching status do not match
220
Diagnostics
9.5 Diagnostics with diagnostics display
9.5.3.3
System configuration
Second level of the menu of the diagnostics display - "System configuration" menu
option
221
Diagnostics
9.5 Diagnostics with diagnostics display
Marking
The following plant information is available:
Plant identifier
Location identifier
Installation date
Description
Author
Comment
Project
The following project information is available:
Project name
Name of configuration engineer
Company name
Config CRC
Time stamp
Configuration released
Cycle time
Number of slot modules
Number of elements
222
Diagnostics
9.5 Diagnostics with diagnostics display
223
Diagnostics
9.5 Diagnostics with diagnostics display
9.5.3.4
Display settings
All settings affecting the diagnostics display can be made via the display settings.
Second level of the menu of the diagnostics display - "Display settings" menu option
224
Diagnostics
9.5 Diagnostics with diagnostics display
In this menu, you will also find information on the diagnostics display itself. The display
settings can be reset to the factory settings under the "Factory settings" menu option.
You can access the individual submenus by pressing the right key (OK):
Identification
Languages
Contrast
Lighting
Return to the status display
Invert display
Messages
Factory settings
With the left key, the display moves back one menu level.
Identification
The following information for identifying the diagnostics display is to be found here:
Article number of the diagnostics display
Hardware version (HW revision level)
Firmware version (FW revision level)
Languages
The following languages can be selected:
English (default setting)
German
French
Spanish
Italian
Portuguese
The desired language can be marked with the arrow keys. The right key (OK) selects the
marked language.
Contrast
You can set the desired contrast of the display with the arrow keys and with the right key
(OK).
Setting range: 10% ... 90% (default setting: 50 %)
Increment: 5 %
225
Diagnostics
9.5 Diagnostics with diagnostics display
Lighting
This menu option specifies how long the backlit display will remain on after the last keystroke
and enables permanent activation or deactivation of the backlit display.
The following settings are possible:
Off
3s
10 s (default setting)
1 min
5 min
On
The desired setting can be marked with the arrow keys. The right key (OK) selects the
marked setting.
Invert display
This setting makes it possible to specify whether the display should be displayed normally or
inverted. The readability of the display can be improved in the event of difficult lighting
conditions.
The desired setting can be marked with the arrow keys. The right key (OK) selects the
marked setting.
Messages
This setting makes it possible to specify whether to automatically switch to the "Messages"
menu if messages are pending and to display the messages (default setting) or whether the
status display should remain.
The desired setting can be marked with the arrow keys. The right key (OK) selects the
marked setting.
226
Diagnostics
9.6 Diagnostics using PROFIBUS
Factory settings
The factory setting makes it possible to reset the display settings to the default settings.
The desired setting can be marked with the arrow keys. The right key (OK) selects the
marked setting. A prompt for confirmation then follows that also has to be confirmed with the
right key (OK).
9.6
9.6.1
Required knowledge
This section is aimed at the following target groups:
Configuration engineers
PLC programmers
You need to have a sound knowledge of writing/reading data sets using PROFIBUS.
Description
Read/write
0/1
System diagnostics
Read
92
Read
DP interface
3SK2 basic unit
227
Diagnostics
9.6 Diagnostics using PROFIBUS
Settings in STEP 7
Set the properties of the PROFIBUS subnet in STEP 7: The DP alarm mode must be set to
DPV1 for operation downstream of a Y link. Individual PROFIBUS diagnostics can be
deselected in the device-specific parameters. The length of the diagnostics frame must be
adjusted accordingly. If all diagnostics are transmitted, the length of the diagnostics frame is
42 bytes. The diagnostics must only be deselected from bottom to top in the hierarchy. For
example, it is not permissible to deselect on the module status; the channel-specific
diagnostics must then also be deactivated.
The following table shows the length of the DP diagnosis to be set when deselecting
diagnoses:
Diagnostic type
Activated
Deactivated
ID-specific diagnosis
Module status
Channel-specific diagnosis
ID-specific diagnosis
Module status
Channel-specific diagnosis
ID-specific diagnosis
Module status
Channel-specific diagnosis
ID-specific diagnosis
Length
42
24
12
Module status
Channel-specific diagnosis
228
Diagnostics
9.6 Diagnostics using PROFIBUS
Byte arrangements
When data longer than one byte is stored, the bytes are arranged as follows ("big endian"):
Figure 9-8
Byte arrangement
Additional information
You will find more information about the SFCs and SFBs
Reference manual "System Software for S7-300/400, System and Standard Functions"
In the STEP7 online help
229
Diagnostics
9.6 Diagnostics using PROFIBUS
9.6.2
Figure 9-9
Diagnostics pyramid
Byte
Length
Diagnostics block
0 ... 5
6 bytes
Standard diagnostics
DPV0 standard
6 ... 11
6 bytes
ID-related diagnosis
12 ... 23
12 bytes
Status messages
Device-related diagnostics
24...x
(max. 41)
0 ... 18 bytes
Channel-related diagnostics
(max. 6 channels of 3 bytes each) Error numbers
230
Diagnostics
9.6 Diagnostics using PROFIBUS
Channel-related diagnostics
Channel-related diagnostics contains the error number from DS92. Up to six errors can be
transferred simultaneously. The safety relay uses the following error numbers:
DP error numbers
Error
no.
Description
Explanation
Remedy
Reduce configuring
Device error
Self-test error
16
19
23
Error
Parameterization error
Communication error
Actuator warning
Configuring error:
Bus error:
Error on PROFIBUS
Adapt configuring
Correct configuring
231
Diagnostics
9.6 Diagnostics using PROFIBUS
DP error numbers
Error
no.
Description
Explanation
Remedy
24
Actuator disconnection
Group error:
25
Safety-related shutdown
Error in configuration
Configuring error
Handshake error
Wiring error
Logic error
TARGETACTUAL configuration
Programming error
232
Diagnostics
9.6 Diagnostics using PROFIBUS
DP error numbers
Error
no.
Description
Explanation
26
External error
27
Unclear error
Error in configuration
Handshake error
TARGETACTUAL configuration
Programming error
Remedy
233
Diagnostics
9.6 Diagnostics using PROFIBUS
9.6.3
Data set 0
9.6.3.1
9.6.3.2
Meaning
Note
00
Module fault
01
Internal error
02
External error
03 ... 05
Reserved=0
06
07
10
...
13
Type class
0000 CPU
14
DS1 exists
15
16
17
Reserved=0
20
21
Communication fault
22
Time monitoring
23
24
...
27
Reserved=0
30
Rack failure
31
Reserved=0
32
33 ... 37
Reserved=0
234
Diagnostics
9.6 Diagnostics using PROFIBUS
9.6.3.3
Meaning
Note
00
Module fault
SF on the DP interface
01
Internal error
02
...
07
Reserved=0
10...
13
Type class
0011 DP slave
14
Reserved=0
15
16 ... 20
Reserved=0
21
Communication fault
DeviceConnect failed
22
23 ... 27
Reserved=0
30
Rack failure
31
...
37
DeviceConnect failed
Reserved=0
235
Diagnostics
9.6 Diagnostics using PROFIBUS
9.6.4
Data set 1
9.6.4.1
Meaning
Same as DS0
50
...
57
...
67
60
70
71 ... 86
Reserved=0
87
90
91
92
97
Reserved=0
100
Parameterization error
Reserved=0
107
110
111
112
113
114
Reserved=0
115
Wiring error
116
Logic error
117
120
157
Reserved=0
236
Diagnostics
9.6 Diagnostics using PROFIBUS
9.6.4.2
Meaning
Same as DS0
40
...
47
...
57
50
60 ... 67
70
71 ... 112
Reserved=0
112
114
...
157
Reserved=0
237
Diagnostics
9.6 Diagnostics using PROFIBUS
9.6.5
Data set 92
All device-specific messages and information about the individual device function statuses
are collected centrally and stored in the message memory of the 3SK2 safety relay. The
message memory can be read via DS92. The current device status is stored as of byte 12.
The content of DS92 is described below:
DS92 (device messages)
Byte
Meaning
Note
Error category
DP error number
Header
0 11
Reserved = 0
Device status
120
F24, F9
121
F24
122
F19
123
F23
124
Group prewarning
(SVW)
F23
Reserved = 0
131
Configuration error
(KF)
SF*
F24, F27*
132
SF
F24, F16
133
Reserved = 0
134
SF, SF.A
F24, F26
135
SF, SF.A
F24, F25
Reserved = 0
140
Configuring mode
active
SE
141
SE
142
143
SVW
F23
144
145
146
Reserved = 0
147
Operating mode
change rejected
150
151
Access path to
Access path via the fieldbus interface
fieldbus control is open is open.
152
Reserved = 0
153
154
Reserved = 0
238
Diagnostics
9.6 Diagnostics using PROFIBUS
Meaning
Note
Error category
DP error number
155
Reserved = 0
160
Disconnect
SW
F23
161
SF
F24, F27
Reserved = 0
170
Device access
authorization exists
Reserved = 0
174
Password protection
for device access is
inactive
Reserved = 0
177
Incorrect password
entry
180
SF
F24
181
SW
F23
182
SVW
F23
Reserved = 0
Configuration status:
200 ... 207
Reserved = 0
210
Configuration missing
SW
F23
211
Configuration not
released
212
213
Reserved = 0
214
215
Release denied,
already released
216
Release canceled
217
220
Reserved = 0
SF, PF
SF, PF
F24, F16
F24, F16
239
Diagnostics
9.6 Diagnostics using PROFIBUS
Meaning
Note
221
Error category
DP error number
SF, PF
F24, F16
222
SF, PF
F24, F16
223
Reserved = 0
224
TARGET = ACTUAL
configuration
225
TARGET ACTUAL
configuration (KF.SI)
SF, KF*
F24, F27*
226
TARGETACTUAL
slot expanded
configuration
SF, PF,KF.SI*
F24, F27*
Reserved = 0
231
Invalid parameter
value
SF, PF
F24, F16
232
Reserved = 0
233
Interconnection rule
violated
SF, PF
F24, F16
234
Data structure
incorrect
SF, PF
F24, F16
235
Factory settings
restored
Reserved = 0
24 ... 25
Reserved = 0
260
SF, KF
F24, F27
261
Memory module
defective
SF, KF
F24, F27
262
Reserved = 0
263
Memory module
programming
successful
264
Programming error
SF, KF
F24, F27
265
User memory too small The configuration data do not fit into
the configuration memory or onto the
memory module.
SF, KF
F24, F27
266
Memory module
incorrectly organized
SF, KF
F24, F27
267
Memory module
deleted
270
Reset implemented
Reset implemented.
271
240
Diagnostics
9.6 Diagnostics using PROFIBUS
...
Meaning
293
Note
Error category
DP error number
Reserved = 0
294
Self-test active
295
Self-test OK
296
SF, GF
F24, F9
297 ... 33
Reserved = 0
34 ... 35
Incorrect element
number
DP fieldbus interface:
360
CPU/master STOP
361
DP bus error
BF
F19
362
DP parameterization
error
Erroneous or incorrect
parameterization frame
BF
F19
363
DP configuration error
BF
F19
364
DP process data
exchange stopped
365
DP communication OK DP communication OK
Reserved = 0
38 ... 89
Reserved = 0
-
Diagnosed elements
90 ... 91
92 ... 93
94 ... 95
96 ... 99
[0]: No error
[0]: No error
[0]: No error
Reserved = 0
241
Diagnostics
9.6 Diagnostics using PROFIBUS
Meaning
Note
Error category
DP error number
1000
Logbook 1 deleted
1001
Logbook 2 deleted
1002
Logbook 3 deleted
1003
Logbook 4 deleted
1004
Logbook 5 deleted
1005
Logbook 6 deleted
1006
Logbook 7 deleted
1007
Logbook 8 deleted
1010
Logbook 9 deleted
1011
Logbook 10 deleted
1012
Logbook 11 deleted
1013
Logbook 12 deleted
1014
Logbook 13 deleted
1015
Logbook 14 deleted
1016
Logbook 15 deleted
Reserved = 0
242
Technical data
10.1
10
Data sheet
You can find all the technical data of the product in the Siemens Industry Online Support
(https://support.industry.siemens.com/cs/ww/en/ps/).
1. Enter the full article number of the desired device in the "Product" field, and confirm with
the Enter key.
2. Click the "Technical data link.
243
Technical data
10.2 3SK2 safety relays
10.2
Key statement
Order number
3SK2112-1AA10
SIRIUS
Product designation
3SK2122-1AA10
3SK2112-2AA10
3SK2122-2AA10
185
100
185
EMERGENCY STOP
function
Yes
Yes
Yes
muting, 2 sensor-parallel
Yes
muting, 4 sensor-parallel
Yes
muting, 4 sensor-sequential
Yes
Monitoring parameterizable
Yes
evaluation: electro-sensitive
protective equipment
Yes
Yes
Pressure-sensitive mat
monitoring
Yes
evaluation: two-hand
operator panel
Yes
Yes
monitored start-up
Yes
Yes
50
V
50
mA
100
without semiconductor
output
Degree of pollution
Shock resistance
15g / 11 ms
244
Technical data
10.2 3SK2 safety relays
Order number
3SK2112-1AA10
800
Protection class IP
3SK2122-1AA10
3SK2112-2AA10
3SK2122-2AA10
4.5
2.5
4.5
IP20
of the enclosure
IP20
of the terminal
IP20
Equipment marking
ms
400
ms
No
No
Monitoring of floating
sensors
Yes
Monitoring of non-floating
sensors
Yes
Yes
EMERGENCY-OFF circuit
monitoring
Yes
valve monitoring
Yes
opto-electronic protection
device monitoring
Yes
magnetically operated
switch monitoring
Yes
Yes
safety-related circuits
Yes
Yes
2.5
245
Technical data
10.2 3SK2 safety relays
Order number
3SK2112-1AA10
3SK2122-1AA10
3SK2112-2AA10
3SK2122-2AA10
Communication/ Protocol:
Protocol
optional / is supported /
PROFIBUS DP protocol
Yes
Note
No
is supported / PROFINET
IO protocol
Protocol / is supported /
AS-interface protocol
No
bit
64
bit
64
DC
DC
24
24
Inputs/ Outputs:
Product function
Parameterizable inputs
Yes
Parameterizable outputs
Yes
Yes
Number of inputs
safety-related
10
non-safety-related
ms
20
10
20
0 ... 150
Type 1
ms
60
246
Technical data
10.2 3SK2 safety relays
Order number
3SK2112-1AA10
3SK2122-1AA10
3SK2112-2AA10
3SK2122-2AA10
Number of outputs
safety-related / 2-channel
6.5
1-channel
2-channel
safety-related / 2-channel
P potential
ms
24
-3 ... +5
15 ... 30
mA
2.6
Residual current
maximum
mA
0.05
mA
0.1
6.5
0.5
shielded / maximum
1 000
unshielded / maximum
600
247
Technical data
10.2 3SK2 safety relays
Order number
3SK2112-1AA10
3SK2122-1AA10
3SK2112-2AA10
3SK2122-2AA10
any
Mounting type
Height
100
Width
mm
22.5
Depth
mm
124.5
45
22.5
45
Connections/ Terminals:
Product function
removable terminal
Yes
Yes
Yes
screw-type terminals
spring-loaded terminals
solid
solid
stranded
0.5 ... 1
20 ... 14
20 ... 16
20 ... 14
20 ... 16
mm
248
Technical data
10.2 3SK2 safety relays
Order number
3SK2112-1AA10
3SK2122-1AA10
3SK2112-2AA10
3SK2122-2AA10
SIL3
0/1
99
99
1 000 000
at rate of recognizable
hazardous failures (dd)
1/s
1 000
1 200
1 000
1 200
at rate of non-recognizable
hazardous failures (du)
1/s
10
13
10
13
0.00000001
0.000000012
0.00000001
0.000000012
0.000015
0.000018
0.000015
0.000018
110
90
110
90
MTBF
1
y
20
finger-safe
Electromagnetic compatibility:
EMC emitted interference / acc.
to IEC 60947-1
class A
10 V/m
249
Technical data
10.2 3SK2 safety relays
Order number
3SK2112-1AA10
3SK2122-1AA10
3SK2112-2AA10
3SK2122-2AA10
Ambient conditions:
Installation altitude / at height
above sea level / maximum
2 000
Ambient temperature
during operation
during storage
during transport
10 ... 95
kPa
90 ... 106
250
Technical data
10.3 Connection cross-sections
10.3
Connection cross-sections
10.3.1
Screwdriver
Cross-tip screwdriver
Size: PZ 1 ( 4.5 mm)
Torque: 0.6 ... 0.8 Nm
Rigid cable
Not allowed
Flexible cable
20 ... 14
20 ... 16
18 ... 16
20 ... 16
251
Technical data
10.3 Connection cross-sections
10.3.2
3RK35 DP interface
The following connection data apply dependent on the removable terminal block:
Specification and value
in the case of removable
terminal blocks with screw-type
terminals
Screwdriver
Cross-tip screwdriver
Size: PZ 2 ( 5 6 mm)
Torque: 0.8 1.2 Nm
Screwdriver
Size: 0 or 1 (width to 3 mm) for
raising the terminal springs
Rigid cable
Flexible cable
Not allowed
252
Dimension drawings
11
253
Dimension drawings
254
Dimension drawings
255
Dimension drawings
256
Dimension drawings
11.1 Diagnostics display
11.1
Diagnostics display
Diagnostics display
257
Dimension drawings
11.2 DP interface
11.2
DP interface
258
Dimension drawings
11.2 DP interface
259
Dimension drawings
11.2 DP interface
260
Circuit diagrams
12.1
12.2
12.3
Diagnostics display
12
261
Circuit diagrams
12.4 DP interface
12.4
DP interface
262
13
Spare parts/Accessories
Accessories
The following components can be ordered as accessories:
Component
Description
Parameterization
and diagnostics
software
Figure
263
Spare parts/Accessories
Component
Description
PC cable and
adapter
Figure
RS 232 PC cables
Article number: 3UF7940-0AA00-0, product
version 2 or higher
USB PC cable
Article number: 3UF7941-0AA00-0
Connection cable to
the interface module
Connection cable to
the diagnostics
display
Memory module
0.025 m ("adjacent")
Max. 2.5 m
Article numbers:
3UF7937-0BA00-0: 1 m, (round)
Flat:
Round:
264
Spare parts/Accessories
Component
Description
System interfaces
cover
Door adapter
Removable
terminals
Contents 10 units
for DP interface
Figure
2 per device
Coding pins
Contents 6 units
Contents 12 units
265
Spare parts/Accessories
Description
Width 22.5 mm
Device termination
connectors for 3SK1
safety relay
Width 22.5 mm
Width 45 mm
Width 22.5 mm
Figure
266
Spare parts/Accessories
Description
Description
Device termination
connector set for 3SK1
safety relay
Width > 45 mm
Figure
Width 22.5 mm
Device termination
connectors for
3RM1 motor starter
Width 22.5 mm
267
Spare parts/Accessories
268
Examples/applications
14.1
14
269
Examples/applications
14.1 User responsibility for system design and function
Safety information
WARNING
Hazardous system state due to unverified safety specifications
Can result in death, serious injury, or property damage.
If you use components in your system that do not conform to the safety specifications,
safety functions may be deactivated.
The application examples listed in this document are intended only to assist comprehension
of the topics covered. For this reason, always check whether the respective application
example is actually suitable for your real world application and that it would correspond to
the resulting safety requirements. Use the safety characteristics provided for verification for
this purpose.
WARNING
Hazardous system state due to unverified components
Can result in death, serious injury, or property damage.
If you use components in your system that do not conform to current legal requirements,
safety functions may be deactivated.
The application examples mention components that are not covered by this documentation.
Before using any component, check whether its characteristics comply with the current
legal requirements for functional safety.
You can obtain up-to-date information in our Newsletter (Page 26).
With regard to all application examples, please observe the "Safety information
(Page 21)".
270
Examples/applications
14.2 Layout of application examples
14.2
Safety function
A safety function consists of the three subfunctions "detecting", "evaluating" and "reacting".
Sensors detect the condition of a system, and the 3SK2 safety relay evaluates the sensor
signals and controls the actuators such as contactors, valves or frequency converters which
then react accordingly. The 3SK2 safety relay also continuously tests and monitors the state
of the sensors, the actuators and the associated wiring.
The examples in the following sections focus on one of the two subfunctions "detecting" or
"reacting". The second part is implied schematically. You achieve complete safety functions
by combining the two parts.
Description
This section lists the most important features of the respective application, and the maximum
Safety Integrity Level (SILCL) as per EN 62061 or Performance Level (PL) and Category
(Cat.) as per EN ISO 13849-1 that can be achieved.
Application
Here you will find a simplified graphical representation of the components used to implement
the safety function. It is split into the "detecting", "evaluating" and "reacting" subsystems.
Circuit diagram
The characteristics of the inputs and outputs shown in the graphic equally apply to the other
input and output terminals of the 3SK2 safety relay. The wiring shown can be adapted for all
equivalent terminals of the 3SK2 safety relay. The rules from Section "Wiring rules for crosscircuit detection (Page 141)" must be observed.
Logic diagram
The logic is configured with the Safety ES software. To simplify matters, only the respective
safety function from the logic diagram of the Safety ES software is shown in the graphic. In
practice, several safety functions are often needed on a machine/system. It is also possible
to combine several safety-related input/output signals in the logic diagram.
Parameters
The parameters of the functions are set in the Safety ES software. This section only lists the
parameters of the software elements that are necessary to obtain the safety-related
diagnosis. Depending on the required SILCL or PL, it is necessary to implement fault
detection measures in the sensors and actuators. You can find further setting parameters
provided by the software elements in the Safety ES (Software) operating manual. See
Section "Additional documentation (Page 14)".
271
Examples/applications
14.3 Connection of sensors
14.3
Connection of sensors
14.3.1
Description
EMERGENCY STOP shutdown
"Detecting" subsystem up to SILCL 1 as per EN 62061 and PL e / Cat. 2 as per
EN ISO 13849-1
EMERGENCY STOP command device according to EN ISO 13850
Single-channel sensor interfacing
Monitored start
Sensor supply possible via test output or via 24 V DC
Application
272
Examples/applications
14.3 Connection of sensors
Circuit diagram
-K1
-S1
-S2
Start pushbutton
Logic diagram
Value
Note
Type
Single-channel (NC)
IN1
SLOT3_F-IN1
Start type
Monitored
273
Examples/applications
14.3 Connection of sensors
14.3.2
Description
EMERGENCY STOP shutdown
"Detecting" subsystem up to SILCL 3 as per EN 62061 and PL e / Cat. 4 as per
EN ISO 13849-1
EMERGENCY STOP command device according to EN ISO 13850
Two-channel sensor connection
Discrepancy evaluation between the sensor channels integrated in the "EMERGENCY
STOP" monitoring element (5 s)
Sensor wiring cross-circuit monitoring activated
Monitored start
Sensor supply via test outputs
Application
274
Examples/applications
14.3 Connection of sensors
Circuit diagram
-K1
-S1
-S2
Start pushbutton
Logic diagram
Value
Note
Type
Two-channel (NCNC)
IN1
SLOT3_F-IN1
IN2
SLOT3_F-IN2
Cross-circuit detection
Start type
Monitored
275
Examples/applications
14.3 Connection of sensors
14.3.3
Description
Protective door monitoring
"Detecting" subsystem up to SILCL 1 as per EN 62061 and PL e / Cat. 2 as per
EN ISO 13849-1
Single-channel sensor interfacing
Monitored start in the case of rear-access safety facilities
Sensor supply possible via test outputs or via 24 V DC
Application
Circuit diagram
-K1
-S1
Position switches
-S2
Start pushbutton
276
Examples/applications
14.3 Connection of sensors
Logic diagram
14.3.4
Parameter
Value
Note
Type
Single-channel (NC)
IN1
SLOT3_F-IN1
Start type
Monitored
Description
Protective door monitoring
"Detecting" subsystem up to SILCL 3 as per EN 62061 and PL e / Cat. 4 as per
EN ISO 13849-1
Redundant sensors
Discrepancy evaluation between the sensors activated
Sensor wiring cross-circuit monitoring activated
Monitored start in the case of rear-access safety facilities
Sensor supply via test outputs
277
Examples/applications
14.3 Connection of sensors
Application
-K1
Circuit diagram
-S1
Position switch
-S2
Start pushbutton
278
Examples/applications
14.3 Connection of sensors
Logic diagram
14.3.5
Parameter
Value
Note
Discrepancy monitoring
Type
Two-channel (NCNC)
IN1
SLOT3_F-IN1
IN2
SLOT3_F-IN2
Cross-circuit detection
Start type
Monitored
Description
RFID protective door monitoring
"Detecting" subsystem up to SILCL 3 as per EN 62061 and PL e / Cat. 4 as per
EN ISO 13849-1
Electro-sensitive position switch with RFID technology certified for SILCL 3/PL e
Discrepancy evaluation between the sensor inputs activated
Sensor wiring cross-circuit monitoring deactivated
Monitored start in the case of rear-access safety facilities
Sensor supply via 24 V DC
279
Examples/applications
14.3 Connection of sensors
Application
Circuit diagram
-K1
-S1
-S2
Start pushbutton
Logic diagram
280
Examples/applications
14.3 Connection of sensors
14.3.6
Parameter
Value
Note
Discrepancy monitoring
Type
Two-channel (NCNC)
IN1
SLOT3_F-IN1
IN2
SLOT3_F-IN2
Cross-circuit detection
Deactivated
Start type
Monitored
Description
Monitoring electro-sensitive protective equipment
"Detecting" subsystem up to SILCL 2 as per EN 62061 and PL d / Cat. 3 as per
EN ISO 13849-1
Use of a type 2 ESPE in compliance with IEC 61496
Use of an ESPE with integrated automatic testing
Note
Restrictions for manual or parameterizable testing
Type 2 ESPE with manual or parameterizable testing is not supported by the 3SK2 safety
relay.
Certification of sensors according to SILCL 2 as per EN 62061 or PL d / Cat. 3 as per
EN ISO 13849-1 required
Two-channel sensor connection
Light curtains or arrays or laser scanners are possible
Sensor wiring cross-circuit monitoring deactivated
Monitored start in the case of rear-access safety facilities
Discrepancy evaluation between the sensor channels is integrated in the "ESPE"
monitoring function
Sensor supply via 24 V DC
281
Examples/applications
14.3 Connection of sensors
Application
Circuit diagram
-K1
-S1
-S2
Start pushbutton
282
Examples/applications
14.3 Connection of sensors
Logic diagram
14.3.7
Parameter
Value
Note
Type
Two-channel (NCNC)
IN1
SLOT3_F-IN1
IN2
SLOT3_F-IN2
Cross-circuit detection
Deactivated
Start type
Monitored
Description
Monitoring electro-sensitive protective equipment
"Detecting" subsystem up to SILCL 3 as per EN 62061 and PL e / Cat. 4 as per
EN ISO 13849-1
Use of a type 4 ESPE in compliance with IEC 61496
Certification of sensors according to SILCL 3 as per EN 62061 or PL d / Cat. 4 as per
EN ISO 13849-1 required
Light curtains or arrays or laser scanners possible
Two-channel sensor connection
Sensor wiring cross-circuit monitoring deactivated
Monitored start in the case of rear-access safety facilities
Discrepancy evaluation between the sensor channels is integrated in the "ESPE"
monitoring function
Sensor supply via 24 V DC
283
Examples/applications
14.3 Connection of sensors
Application
Circuit diagram
-K1
-S1
-S2
Start pushbutton
284
Examples/applications
14.3 Connection of sensors
Logic diagram
Parameter
Value
Note
Type
Two-channel (NCNC)
IN1
SLOT3_F-IN1
IN2
SLOT3_F-IN2
Cross-circuit detection
Activated
Start type
Monitored
285
Examples/applications
14.3 Connection of sensors
14.3.8
Description
Access monitoring using a safety shutdown mat (NC contact principle)
"Detecting" subsystem up to SILCL 3 as per EN 62061 and PL e / Cat. 4 as per
EN ISO 13849-1
Two-channel connection of the safety shutdown mat
Sensor supply cross-circuit monitoring activated
Monitored start in the case of rear-access safety facilities
Sensor supply via test outputs
Application
286
Examples/applications
14.3 Connection of sensors
Circuit diagram
-K1
-S1
-S2
Start pushbutton
Logic diagram
Parameters of the "safety shutdown mat" (NC contact principle) monitoring function
Parameter
Value
Note
Type
Two-channel (NCNC)
IN1
SLOT3_F-IN1
IN2
SLOT3_F-IN2
Cross-circuit detection
Start type
Monitored
287
Examples/applications
14.3 Connection of sensors
14.3.9
Description
Access monitoring using a safety shutdown mat (cross-circuit principle)
"Detecting" subsystem up to SILCL 3 as per EN 62061 and PL e / Cat. 4 as per
EN ISO 13849-1
Two-channel connection of the safety shutdown mat
Triggering of the safety function by cross-circuit detection (when stepping on the mat)
Use of test outputs T1_2 and T2_2
Monitored start in the case of rear-access safety facilities
Note
Use of a second safety shutdown mat with cross-circuit principle
To enable use of a second safety shutdown mat based on the cross-circuit principle and
independently of the first safety shutdown mat, this second mat must be connected to the
decoupled test outputs T1_1 and T2_1. Then, further sensors can only be used without
cross-circuit detection.
Application
288
Examples/applications
14.3 Connection of sensors
Circuit diagram
-K1
-S1
-S2
Start pushbutton
Logic diagram
Value
Note
Type
Two-channel (NCNC)
Cannot be changed
IN1
SLOT3_F-IN1
IN2
SLOT3_F-IN2
Start type
Monitored
289
Examples/applications
14.3 Connection of sensors
14.3.10
14.3.10.1
Description
Safe operation via two-hand operation type IIIc
"Detecting" subsystem up to SILCL 3 as per EN 62061 and PL e / Cat. 4 as per
EN ISO 13849-1
Type IIIc in accordance with EN574
Two-channel monitoring of actuators
Synchronous time between the actuators 0.5 s
Sensor wiring cross-circuit monitoring activated
Design
290
Examples/applications
14.3 Connection of sensors
Circuit diagram
-K1
-S1
-S2
Logic diagram
Value
Note
Type
four-channel
(NONCNONC)
IN1
SLOT3_F-IN1
IN2
SLOT3_F-IN2
IN3
SLOT3_F-IN3
IN4
SLOT3_F-IN4
Cross-circuit detection
291
Examples/applications
14.3 Connection of sensors
14.3.10.2
Description
Safe operation via two-hand operation type IIIc
"Detecting" subsystem up to SILCL 3 as per EN 62061 and PL e / Cat. 4 as per
EN ISO 13849-1
Type IIIc in accordance with EN574
Synchronous time between the actuators 0.5 s
Sensor wiring cross-circuit monitoring activated
Design
-K1
Circuit diagram
-S1
-S2
292
Examples/applications
14.3 Connection of sensors
Logic diagram
Value
Note
Type
two-channel (NONO)
IN1
SLOT3_F-IN1
IN2
SLOT3_F-IN2
Cross-circuit detection
293
Examples/applications
14.4 Connection of actuators
14.4
Connection of actuators
14.4.1
Description
Shutdown via contactor
Stop category 0
"Reacting" subsystem up to SILCL 1 as per EN 62061 and PL c / Cat. 2 as per
EN ISO 13849-1
Single-channel actuator interfacing
Application
Detection: Sensor S
Evaluation: 3SK2 safety relay
Reaction: 3RT20 contactor
294
Examples/applications
14.4 Connection of actuators
Circuit diagram
-K1
-Q1
3RT20 contactor
Logic diagram
Value
Note
Output type
Single F output
Feedback circuit
monitoring 1
0.090
Default value;
Application-dependent adjustment to the
actuator, depending on the actuator's
response time
Q1
SLOT3_F-Q1
295
Examples/applications
14.4 Connection of actuators
14.4.2
14.4.2.1
Description
Shutdown by two contactors via a safety-related output
Stop category 0
"Reacting" subsystem up to SILCL 3 as per EN 62061 and PL e / Cat. 4 as per
EN ISO 13849-1
Redundant actuators
Cross-circuit-proof, short-circuit-to-ground-proof laying in the field or laying in a control
cabinet necessary
Application
Detection: Sensor S
Evaluation: 3SK2 safety relay
Reaction: 3RT20 contactors
296
Examples/applications
14.4 Connection of actuators
Circuit diagram
-K1
-Q1
3RT20 contactor
-Q2
3RT20 contactor
Logic diagram
Value
Note
Output type
Single F output
0.090
Default value
Application-dependent adjustment to the
actuator, depending on the actuator's
response time
Q1
SLOT3_F-Q1
activated
297
Examples/applications
14.4 Connection of actuators
14.4.2.2
Description
Shutdown by two contactors via two safety-related outputs
Stop category 0
"Reacting" subsystem up to SILCL 3 as per EN 62061 and PL e / Cat. 4 as per
EN ISO 13849-1
Redundant actuators
Use of two safety-related outputs of the 3SK2 safety relay when actuator cables are laid
unprotected in the field
Application
Detection: Sensor S
Evaluation: 3SK2 safety relay
Reaction: 3RT20 contactors
298
Examples/applications
14.4 Connection of actuators
Circuit diagram
-K1
-Q1
3RT20 contactor
-Q2
3RT20 contactor
Logic diagram
Value
Note
Output type
Redundant F output
0.090
Default value
Application-dependent adjustment to the
actuator, depending on the actuator's
response time
Q1
SLOT3_F-Q1
Q2
SLOT3_F-Q2
299
Examples/applications
14.4 Connection of actuators
14.4.3
Description
Shutdown via two 3SK1 output expansions. Each 3SK1 output expansion is controlled by
its own safety-related output from the 3SK2 safety relay
Stop category 0
"Reacting" subsystem up to SILCL 3 as per EN 62061 and PL e / Cat. 4 as per
EN ISO 13849-1
Redundant actuators
Control of the 3SK1 output expansion via 3ZY12 device connector
Feedback circuit (51-52) of the 3SK1 output expansions in series with the signaling
contacts of the downstream actuators
Cross-circuit-proof, short-circuit-to-ground-proof laying in the field or laying in a control
cabinet necessary
WARNING
Bypassing the Safety Function When Using Device Connectors
Can Cause Death, Serious Injury, or Property Damage.
When operating with a 3SK2 safety relay and 3ZY12 device connectors, the supply voltage
for the 3SK1 output expansions is established via the 3ZY12 device connectors.
In this case, do not connect anything to terminals A1 and A2 of the 3SK1 output
expansions, in order to prevent bypassing of the safety function.
Application
300
Examples/applications
14.4 Connection of actuators
Circuit diagram
-K1
-K2
-K3
-Q1 to -Q4
Contactors
Logic diagram
Control of the 3SK1 output expansion (-K2)
301
Examples/applications
14.4 Connection of actuators
Control of the 3SK1 output expansion (-K3)
Value
Note
Output type
Single F output
Feedback circuit
monitoring
0,090
Default value
Application-dependent adjustment to the
actuator, depending on the actuator's
response time
SLOT3_F-Q3-C
SLOT3_F-Q4-C
302
Examples/applications
14.4 Connection of actuators
14.4.4
Description
Shutdown via two 3SK1 output expansions
Stop category 1
"Reacting" subsystem up to SILCL 3 as per EN 62061 and PL e / Cat. 4 as per
EN ISO 13849-1
Redundant actuators
Control of the 3SK1 output expansions via 3ZY12 device connector
One 3SK1 output expansion shuts down instantaneously and the other after a delay
Monitoring of the 3SK1 output expansions via the feedback circuit 2 of the device
connector
WARNING
Bypassing the Safety Function When Using Device Connectors
Can Cause Death, Serious Injury, or Property Damage.
When operating with a 3SK2 safety relay and 3ZY12 device connectors, the supply voltage
for the 3SK1 output expansions is established via the 3ZY12 device connectors.
In this case, do not connect anything to terminals A1 and A2 of the 3SK1 output
expansions, in order to prevent bypassing of the safety function.
Application
Detection: Sensor S
Evaluation: 3SK2 safety relay
Reaction: 3SK1 output expansions, 3RT20 contactor and SINAMICS G120 frequency
converter
303
Examples/applications
14.4 Connection of actuators
Circuit diagram
304
Examples/applications
14.4 Connection of actuators
-K1
-K2
-K3
-K4
-Q1
Contactor
Logic diagram
305
Examples/applications
14.4 Connection of actuators
Value
Note
Output type
Redundant F output
Feedback circuit 1
monitoring
Deactivated
Feedback circuit 2
monitoring
Default value
Output circuit
time-delay (t)On (Q2-t->Q1) [s]
0,000
Default value
Output circuit
time-delay (t)Off (Q1-t->Q2) [s]
0,000
SLOT3_F-Q3-C
3,0
Default value
activated
SLOT3_F-Q4-C
3,0
Default value
activated
306
Examples/applications
14.4 Connection of actuators
14.4.5
14.4.5.1
Operational and safety-related switching via 3SK2 safety relay (3ZY12 device
connectors)
Description
Shutdown via 3RM1 Failsafe motor starter
"Reacting" subsystem up to SILCL 3 as per EN 62061 and PL e / Cat. 4 as per
EN ISO 13849-1
Safety-related control of up to five 3RM1 Failsafe motor starters via 3ZY12 device
connectors
Operational, non-safety-related switching of the 3RM1 Failsafe motor starter through its
local input IN1 by means of the 3SK2 safety relay
WARNING
Bypassing the Safety Function When Using Device Connectors
Can Cause Death, Serious Injury, or Property Damage.
When operating with a 3SK2 safety relay and 3ZY12 device connectors, the supply voltage
for 3RM1 Failsafe motor starters is established via the 3ZY12 device connectors.
To prevent bypassing of the safety function, do not connect anything to terminals A1 and
A2 of the 3RM1 Failsafe motor starters in this case.
Application
Detection: Sensor S
DP interface
Evaluation: 3SK2 safety relay
Reaction: up to five 3RM11 Failsafe motor starters (direct-on-line starters)
307
Examples/applications
14.4 Connection of actuators
Circuit diagram
-K1
-Q1
Logic diagram
Safety-related control of 3RM1 Failsafe motor starters
Value
Note
Output type
Single F output
Feedback circuit
monitoring
Deactivated
Q1
SLOT3_F-Q3-C
308
Examples/applications
14.4 Connection of actuators
14.4.5.2
Operational and safety-related switching via 3SK2 safety relay (conventional wiring)
Description
Shutdown via 3RM1 Failsafe motor starter
"Reacting" subsystem up to SILCL 3 as per EN 62061 and PL e / Cat. 4 as per
EN ISO 13849-1
Component certified in accordance with EN 62061/EN ISO 13849-1 in the actuator circuit
(3RM1 Failsafe motor starter)
Device supply of the 3RM1 Failsafe motor starter via the terminals A1/A2
Safety-related switching of the local input of the 3RM1 Failsafe motor starter via fail-safe
output of the 3SK2 safety relay
Suitable for frequently requested safety functions (e.g. on indexing tables)
No use of device connectors
Protected laying of signal cables between the 3SK2 safety relay and 3RM1 Failsafe motor
starter (in the same control cabinet or in armored conduit)
Application
Detection: Sensor S
Evaluation: 3SK2 safety relay
Reaction: 3RM11 Failsafe motor starters (direct-on-line starters)
309
Examples/applications
14.4 Connection of actuators
Circuit diagram
-K1
-Q1
Logic diagram
Value
Note
Output type
Single F output
Feedback circuit
monitoring
Deactivated
Q1
SLOT3_F-Q1
310
Examples/applications
14.4 Connection of actuators
14.4.5.3
Safety-related switching via the 3SK2 safety relay (3ZY12 device connector) and
operational switching via PLC
Description
Shutdown via 3RM1 Failsafe motor starter
"Reacting" subsystem up to SILCL 3 as per EN 62061 and PL e / Cat. 4 as per
EN ISO 13849-1
Safety-related control of up to five 3RM1 Failsafe motor starters via 3ZY12 device
connectors
Operational, non-safety-related switching of the 3RM1 Failsafe motor starter through its
local input IN1 by means of PLC
WARNING
Bypassing the Safety Function When Using Device Connectors
Can Cause Death, Serious Injury, or Property Damage.
When operating with a 3SK2 safety relay and 3ZY12 device connectors, the supply voltage
for 3RM1 Failsafe motor starters is established via the 3ZY12 device connectors.
To prevent bypassing of the safety function, do not connect anything to terminals A1 and
A2 of the 3RM1 Failsafe motor starters in this case.
Application
Detection: Sensor S
Evaluation: 3SK2 safety relay
Reaction: up to five 3RM11 Failsafe motor starters (direct-on-line starters)
311
Examples/applications
14.4 Connection of actuators
Circuit diagram
PLC
-K1
-Q1
Logic diagram
Value
Note
Output type
Single F output
Feedback circuit
monitoring
Deactivated
Q1
SLOT3_F-Q3-C
312
Examples/applications
14.4 Connection of actuators
14.4.6
Description
Control of frequency converters
"Reacting" subsystem up to SILCL 2 as per EN 62061 and PL d / Cat. 3 as per
EN ISO 13849-1
Safety-related control of the frequency converter via two safety-related outputs of the
3SK2 safety relay
The safety function of the frequency converter (e.g. STO, SS1, SS2, SLS) is configured
via the converter's software
Use of two safety-related outputs of the 3SK2 safety relay when actuator cables are laid
unprotected in the field.
(In the case of cross-circuit-proof, short-circuit-to-ground-proof laying in the field or in the
control cabinet, the frequency converter can be operated at a safety-related output of the
3SK2 safety relay.)
Application
Detection: Sensor S
Evaluation: 3SK2 safety relay
Reaction: SINAMICS G120 frequency converters
313
Examples/applications
14.4 Connection of actuators
Circuit diagram
-K1
-K2
Logic diagram
Value
Note
Output type
Redundant F output
Feedback circuit
monitoring
Deactivated
Q1
SLOT3_F-Q1
Q2
SLOT3_F-Q2
314
Examples/applications
14.5 Complex applications
14.5
Complex applications
14.5.1
Muting
Description
If materials have to be conveyed into or out of a hazardous zone for processing, the
openings of the access paths can be large enough to enable a person to reach into or enter
the hazardous zone. The requirement is to protect persons who may attempt to enter the
hazardous zone from harm while allowing the materials to automatically pass unhindered.
This is achieved with a special safety circuit that monitors the opening to the hazardous zone
with electro-sensitive protective equipment (ESPE) such as a light curtain, and deactivates
or "overrides" the protective equipment briefly when the material is conveyed. This safety
circuit is known as "muting" and is described in the standard EN 61496-1-A.7. Muting is
either already integrated into special light curtains, or it can be implemented via the
downstream 3SK2 safety relay evaluation unit.
Application
Figure 14-1
Reference
You can find a detailed description of the muting function and its parameterization in the
following document:
Link: Muting (http://support.automation.siemens.com/WW/view/en/59847384)
315
Examples/applications
14.5 Complex applications
14.5.2
Description
Protective door monitoring with tumbler
SILCL 2 as per EN 62061 and PL d / Cat. 3 as per EN ISO 13849-1
The 3TK2810-0 fail-safe standstill monitor measures a voltage of the coasting motor induced
by residual magnetization at three terminals of the stator winding. If the induction voltage
falls to zero, this means motor standstill for the device and the output relays are activated.
The 3SK2 safety relay monitors this signal from the standstill monitor as well as the 3SE5
position switches. As soon as motor standstill is detected and the button for unlocking is
pressed, the tumbler is unlocked and the protective door can be opened. At the same time,
the contactors are shut down in a safety-related manner, thus preventing unexpected
restarting of the motor. When the door is locked again and the feedback circuit is closed, the
Start button can be used to switch on again. EMERGENCY STOP is an additional required
safety function that is not considered further here.
316
Examples/applications
14.5 Complex applications
Application
Starting, unlocking
Evaluation: 3SK2 safety relay 45 mm
Detection: 3TK2810-0 standstill monitors
Reaction: 3RT20 contactors
Detection: 3SE5 position switch
317
Examples/applications
14.5 Complex applications
Circuit diagram
-K1
-K2
-S1
-S2
Start
-S3
Unlock
-Q1/-Q2
3RT20 contactors
-Q3
3SE5 tumbler
Logic diagram
318
Examples/applications
14.5 Complex applications
Parameters of the "protective door with tumbler" and "F output" function
Protective door with tumbler
Parameter
Value
Note
Discrepancy monitoring
Type
2-channel (NCNC)
IN1
SLOT3_F-IN1
IN2
SLOT3_F-IN2
Cross-circuit detection
Interlock type
Spring locking
0.000
Feedback circuit
monitoring
Activated
0.090
Default value
Start type
Monitored
Parameter
Value
Note
Output type
Redundant F output
Feedback circuit
monitoring
0.090
Adaptation to application
F output
Default value
Application-dependent adjustment to the
actuator, depending on the actuator's
response time
Q1
SLOT3_F-Q1
Q2
SLOT3_F-Q2
319
Examples/applications
14.5 Complex applications
14.5.3
Description
3SK2 safety relays do not possess a safety-related bus connection. If a small number of
safety-related signals is to be exchanged between two or more 3SK2 safety relays (e.g.
higher-level EMERGENCY STOP commands), the 3SK2 safety relays can be cascaded by
means of wiring. The shutdown signal is sent through either one or two channels. The extent
to which single-channel wiring is sufficient depends on the required safety level and the
laying of cables. Protected laying is required as from safety integrity level (SILCL) 2 or
performance level (PL) d. This is ensured if the 3SK2 safety relays are fitted in the same
control cabinet or the signal cable is laid in a protected fashion (e.g. in an armored conduit).
An external cable fault (current source short circuit) can be ruled out with these measures. If
this is not the case, the wiring should be realized in two channels and laid separately.
Architecture
Laying of
Single-channel signal
transmission through one
output
Unprotected
Protected or
Two-channel signal
transmission through one
output
Unprotected
Protected or
Two-channel signal
transmission through two
outputs
Unprotected
1)
1)
Protected or
signal cables
1)
SILCL 1/
PL c
SILCL 2/
PL d
SILCL 3/
PL e
320
Examples/applications
14.5 Complex applications
Design
321
Examples/applications
14.5 Complex applications
14.5.3.1
Description
Architecture
Laying of
SILCL
PL
Category
Single-channel signal
transmission through one
output
Unprotected
Protected or
signal cables
Circuit diagram
-K1
-K2
-S1
-S2
Start
-Q1/-Q2
322
Examples/applications
14.5 Complex applications
Value
Note
Type
2-channel (NCNC)
IN1
SLOT3_F-IN1
IN2
SLOT3_F-IN2
Cross-circuit detection
Start type
Monitored
F output
Parameters
Value
Note
Output type
Single F output
Feedback circuit
monitoring
Deactivated
Q1
SLOT3_F-Q1
323
Examples/applications
14.5 Complex applications
Value
Note
Type
1-channel (NC)
IN1
SLOT3_F-IN1
Cross-circuit detection
Deactivated
Start type
Automatic
Parameter
Value
Note
Output type
Redundant F output
Feedback circuit
monitoring
0.090
F output
Default value
Application-dependent adjustment to the
actuator, depending on the actuator's
response time
Q1
SLOT3_F-Q1
Q2
SLOT3_F-Q2
324
Examples/applications
14.5 Complex applications
14.5.3.2
Description
Architecture
Laying of
SILCL
PL
Category
Two-channel signal
transmission through one
output
Unprotected
Protected or
signal cables
Circuit diagram
-K1
-K2
-S1
-S2
Start
-Q1/-Q2
325
Examples/applications
14.5 Complex applications
Value
Note
Type
2-channel (NCNC)
IN1
SLOT3_F-IN1
IN2
SLOT3_F-IN2
Cross-circuit detection
Start type
Monitored
F output
Parameters
Value
Note
Output type
Single F output
Feedback circuit
monitoring
Deactivated
Q1
SLOT3_F-Q1
326
Examples/applications
14.5 Complex applications
Value
Note
Type
Two-channel (NCNC)
IN1
SLOT3_F-IN1
IN2
SLOT3_F-IN2
Cross-circuit detection
Deactivated
Start type
Automatic
F output
Parameter
Value
Note
Output type
Redundant F output
Feedback circuit
monitoring
0,090
Default value
Application-dependent adjustment to the
actuator, depending on the actuator's
response time
Q1
SLOT3_F-Q1
Q2
SLOT3_F-Q2
327
Examples/applications
14.5 Complex applications
14.5.3.3
Description
Architecture
Laying of
SILCL
PL
Category
Two-channel signal
transmission through two
outputs
Unprotected
e 1)
41)
Protected or
signal cables
1)
Circuit diagram
-K1
-K2
-S1
-S2
Start
-Q1/-Q2
328
Examples/applications
14.5 Complex applications
Value
Note
Type
Two-channel (NCNC)
IN1
SLOT3_F-IN1
IN2
SLOT3_F-IN2
Cross-circuit detection
Start type
Monitored
F output
Parameter
Value
Note
Output type
Redundant F output
Feedback circuit
monitoring
Deactivated
Q1
SLOT3_F-Q1
Q2
SLOT3_F-Q2
329
Examples/applications
14.5 Complex applications
Value
Note
Discrepancy monitoring
Type
2-channel (NCNC)
IN1
SLOT3_F-IN1
IN2
SLOT3_F-IN2
Cross-circuit detection
Deactivated
Start type
Automatic
Parameter
Value
Note
Output type
Redundant F output
Feedback circuit
monitoring
0,090
F output
Default value
Application-dependent adjustment to the
actuator, depending on the actuator's
response time
Q1
SLOT3_F-Q1
Q2
SLOT3_F-Q2
330
Appendix
A.1
Correction sheet
Correction sheet
Have you noticed any errors while reading this manual? If so, please use this form to tell us
about them. We welcome comments and suggestions for improvement.
Fax response
From (please complete):
To:
Name
SIEMENS AG
DF CP PRM IM 2
Company/Department
92220 Amberg/Germany
Address
_________________________________________________________________________________
Fax: +49 (0)9621-80-3337
Manual title:
Errors, comments, and suggestions for improvements
331
Appendix
A.1 Correction sheet
332
Glossary
*.sdp file
File for storing parameterization data of a device (switching device parameters) on a
programming device / PC. Safety ES projects are saved in files with this extension (*.sdp).
Address
Each device receives an individual address to enable its identification.
Baud rate
The baud rate is the data transfer rate, indicating the number of bits transferred per second
(baud rate = bit rate).
Catalog window
View in the Safety ES interface; tree representation of elements that can be dragged and
dropped into the work space (in the configuration view: Modules; logical view: Function
elements).
Configuration
Defines the configuration of a device or system and the arrangement of the components.
CPU
The central processing unit (CPU) or the main processor is the main processing element of a
computer system.
Cross-circuit detection
Cross-circuit detection enables detection of an inadmissible connection between a sensor
cable and another sensor cable (= cross-circuit), a ground cable (= short circuit to ground) or
a power supply cable (= short circuit to P). The test outputs are available for this purpose.
333
Glossary
Dark period
Dark periods occur during shutdown tests and complete bit pattern tests. Test-related 0
signals are switched from the fail-safe output module to the output bit while the output is
active. This output is then briefly disabled (= dark period). A sufficiently slow actuator does
not respond to this and remains switched on.
Dark test
A dark test is the brief deactivation of an activated safety-related output of the 3SK2 safety
relay to ensure that the output can be deactivated at any time should safety requirements
dictate it. To this end, the chosen test pulse is so short that a connected actuator does not
shut down as a result.
DC
Diagnostic coverage
DI
Digital input
334
Glossary
Discrepancy monitoring
A two-channel or multi-channel sensor can be monitored for signal discrepancy
(= discrepancy monitoring). Discrepancy monitoring is possible with the following monitoring
criteria:
Discrepancy monitoring monitors the values of the input signals when changing from 1->0
or 0->1 at at least one input to check that they are the same after a certain time, the
"discrepancy time".
Discrepancy monitoring monitors the values of the input signals for the simultaneous
presence of the value "0".
While a discrepancy error is active, it is impossible to set the function output Q to the value
"1".
Discrepancy time
Parameterizable time for the discrepancy analysis.
The discrepancy time monitoring tolerates associated signals not being available at the
same time within a defined time window. The signal transmitters are monitored to increase
the functional reliability. The signal change of the signal transmitters is checked within the
defined time. If this time is exceeded, an enable signal is not output. This type of monitoring
is mandatory for a number of protective safety devices.
If the discrepancy time is set too high, the error detection time and error response time will
be prolonged to no useful effect. If the discrepancy time is set too low, the availability is
reduced to no useful effect because a discrepancy error will be detected even if there is no
real error.
DO
Digital output
Element identifier
Parameterizable name for a circuit element.
Element number
Unique and type-independent identification numbers for switching elements that are
assigned by the system and can be parameterized.
335
Glossary
EUC
Abbreviation for equipment under control
Fault tolerance
Ability of a functional unit to continue executing a required function in the presence of faults
or deviations.
Feedback circuit
The feedback circuit of a safety function monitors the connected actuators with positivelydriven contacts. The normally closed contacts of the actuators with positively-driven contacts
are used to check whether these have assumed their safe state before being activated
again.
Forcing
Signal state of an output is set to a fixed value irrespective of the actual signal state value.
This function overwrites a variable (e.g. flag, output) with a defined value. The variable is
also write-protected so that this value cannot be changed from any source (including the
user program). The value is retained even after the PG has been removed. The write
protection can only be removed in error-free operation by calling the "unforce" function and
assigning the value defined by the user program to the variable again. In the event of a fault
(e.g. connection loss, device fault, etc.), write protection is revoked early.
The "force" function can be used, for example, to set certain outputs to the "ON" state for
any length of time during the commissioning phase if the conditions of logic operations of the
user program are not fulfilled (for example, because inputs have not yet been wired).
336
Glossary
FW
Abbreviation for firmware
Group warning
For all device diagnostic buffer entries that can result in internal tripping, a group warning is
generated if the relevant message (e.g. unbalance) is set and the associated internal trip
signal (e.g. unbalance trip) is not set. This warning is entered in the I/O area. The bit for
group errors in the I/O area is not set.
HFT
Hardware fault tolerance
HW
Abbreviation for hardware
I&M data
Identification and maintenance data. Identification data (I data) is information about the
module, some of which is also printed on the module housing.
I data is only read. Maintenance data (M data) is plant-specific information, such as the
installation location, installation date, etc. M data is created and written to the module during
commissioning. Identification and maintenance data (I&M) is information stored in a module
that supports you with
Checking the system configuration
Locating modified system hardware
Troubleshooting a system.
I&M data can be used to identify modules uniquely on the network.
IBS
Abbreviation for commissioning
337
Glossary
Input delay
Parameter that is used to suppress interference pulses of 0 ms up to a set input delay time.
The set input delay is subject to a tolerance that can be looked up in the technical data of the
module. A long input delay will suppress longer interference pulses; a short delay will
suppress shorter interference pulses. The permissible input delay depends on the cable
length between the transmitter and module.
Interconnection rule
Rules that have to be followed in creating the safety circuit (logic).
Interlock
According to the standard EN 1088: A mechanical, electrical or another device that has the
function of preventing the operation of a machine element under certain specific conditions
(usually for as long as the protective door is not closed).
Light test
The light test is understood to consist of brief activation of a deactivated safety-related output
to test whether the output is functioning without faults. A sufficiently slow actuator does not
respond to this and remains switched off.
338
Glossary
MSS
Modular Safety System: MSS denotes a modular safety relay product family from SIEMENS.
MTTR
Mean time to restoration: expected time required to achieve restoration.
Muting
Muting is the temporary deactivation or cancellation of a safety function, e.g. light array, that
must be passed through.
EN 61946-1:
Override function: Temporary automatic overriding of the protection function with additional
sensors to distinguish between people and objects.
Navigation window
Representation in the Safety ES interface; tree structure with which the view shown in the
work space can be selected ("Configuration" view, "Logic" view).
Offline project
The safety circuit is provided in the form of a program file and can be opened using the
software.
Online project
A safety circuit is present in the safety relay and can be read out using the software.
Output window
View in the software interface in which messages or similar are displayed.
Parameters
Parameters are values that can be used to control the behavior of the devices.
SIRIUS 3SK2 Safety Relays
Manual, 05/2015, A5E32639619002A/RS-AB/002
339
Glossary
PC cable
The PC cable is used to connect a PC, via its serial interface, for example, to the system
interface of a safety relay for device parameterization.
PELV
Protective Extra-Low Voltage. PELV (Protective Extra-Low Voltage, formerly referred to as
"protective extra low voltage with safe isolation") offers protection against electric shock. It is
dealt with in EN 50178.
PFH
Probability of dangerous failure per hour.
PII
Process image input
PIQ
Process Image Output
PLC
Abbreviation for programmable logic controller (e.g. SIMATIC S7)
340
Glossary
Redundant structure
Configuration variant of S7 FH systems in safety operation to increase availability. F-CPU,
PROFIBUS-DP, and F I/Os are provided double. In case of a fault, the F I/Os continue to be
available.
Reliability
In the safety-related sense, the term reliability refers to the probability of hardware
component failure. When dealing with software/firmware, we speak of "expectations" here.
Reset
Tripping, i.e. disconnection and prevention of reclosure of an affected output due to a fault
(e.g. cross-circuit, discrepancy time violation) can be acknowledged with Reset.
Response time
Time that a system needs to respond at an output after an input variable has been modified.
It is therefore the total time between an event and the action, e.g. from terminal to terminal.
The real response time is somewhere between a minimum and a maximum response time.
Allowances must be made in the system configuration for the expected maximum response
time.
341
Glossary
Restart
The device carries out a complete restart as with Power-ON. However, the auxiliary power
for the electronics does not have to be switched off; something that is often difficult in
practice in the installed state. A restart can be forced by the command "Restart", for
example.
S7 routing
The term routing denotes a transition from one subnet to one or several other subnets in a
SIMATIC station that possesses interfaces to the applicable subnets.
Routing makes it possible to reach S7 stations online across subnet boundaries using a
PG/PC, for example to download user programs or a hardware configuration or to be able to
execute testing and diagnostic functions.
You can connect a PG/PC anywhere on the network and establish an online connection to
all stations reachable via network transitions.
Safe state
The basis of the safety concept in safety-related systems is that a safe state exists for all
process variables that can also be specified by the user. (Substitute value for failed inputs;
initial state in the event of a "safety-related incident"). Generally, the safe state signifies
signal level = 0 in the case of inputs and deactivation of the output in the case of outputs.
Safety circuit
A safety circuit encompasses the section of a safety system that is located before a safe
output and sets this output.
342
Glossary
Safety systems
Safety systems are intended to play their role in keeping potential hazards for both people
and the environment as low as possible by using suitable technical equipment, without
restricting, more than absolutely necessary, industrial production and the use of machines.
The protection of man and environment has to be put on an equal footing in all countries by
applying rules/regulations that have been internationally harmonized. These regulations are
also intended to avoid the distortion of competition due to differing safety requirements in
international trade.
Safety-related input/output
An input / output showing a defined residual fault probability or a specific SILCL / PL / Cat.,
in order to be categorized as "safe".
Safety-related slave
Slave for connecting safety-related sensors, actuators, and other devices.
SC
Abbreviation used for semiconductor. Used in conjunction with inputs and outputs (e.g. "SC
outputs").
Sequence monitoring
If at least two function inputs are parameterized on an input element, sequence monitoring is
possible. Sequence monitoring monitors the sequence of the remaining input signals in the
case of a signal change from 0 -> 1 at an input. The simultaneous response of input signals
constitutes a sequence violation. While a sequence error is active, it is impossible to set the
function output Q to the value "1".
SFF
Safe failure fraction
SIL
Safety integrity level
343
Glossary
Startup test
Manually or automatically conducted test of the safety-related evaluation device after the
supply voltage has been applied to the safety-related evaluation device.
One example of such a test is manually opening and closing a guard after the supply voltage
has been switched on.
STOP category 0
EN 60204-1: Uncontrolled stop by means of immediate power shutdown.
STOP category 1
EN 60204-1: Controlled stop by means of interrupting the power supply when standstill has
been reached
Substitute value
Substitute values are, for example, values that are output to the process if signal output
modules or signal input modules are defective.
Substitute values are used in the user program instead of a process value. In some cases,
the substitute values can be preset. These are values that the outputs or output will output in
case of CPU STOP.
On the safety relay, a substitute value can be set as a fixed value for a deactivated function
element.
SW
Abbreviation for software
Target/actual comparison
Comparison of configured and actual system configuration.
Terminal comments
Parameterizable remarks referring to an input or output terminal.
Terminal identifier
Symbolic name for an input or output terminal that can be parameterized.
344
Glossary
Test mode
Test mode is used to test and optimize the parameterization of the safety relay. In test mode,
it is possible to observe and modify values of function outputs.
Validation
Confirmation based on an inspection and provision of verification that the special
requirements for a particular intended use have been met. Validation is the activity that
explains that the safety-related system under inspection corresponds to the safety
requirements of the safety-related system in all respects of the specification before and after
installation.
Verification
Confirmation based on an inspection and provision of verification that the requirements have
been met. Verification is the activity that explains in each phase of the relevant safety life
cycle through analysis and/or testing that the supplied elements fulfil in every respect the
targets and requirements defined for this phase.
Work space
View in the software interface in which the configuration is created.
345
Glossary
346
Index
3
3D model, 16
3RM1 Failsafe motor starter, 149
Connection, 154
Monitoring, 155
Response time, 157
3RM1 Failsafe motor starters, 12, 21, 35, 40, 46
Configuration rules, 137
3SK1 output expansion, 12, 21, 35, 40, 45, 149
Monitoring, 151
Response time, 157
Slide switch, 149, 150
3SK1 output expansion
Connection, 149
3SK1 output expansion
Slide switch, 149, 150
3SK1211 output expansion
Configuration rules, 135
3SK1213 output expansion
Configuration rules, 136
3SK2 safety relay (22.5 mm), 35
3SK2 safety relay (45 mm), 40
3ZY12 device
connectors, 12, 21, 32, 35, 40, 131, 151, 154, 266
3ZY12 device termination connectors, 132
A
Accessories, 263
Acknowledge, 194
Acknowledging errors
Diagnostics display, 214
Actuator, 53
Capacitive load, 171
Design, 171
Inductive load, 171
Response time, 171
Actuator wiring
Single-channel, 146, 148
Two-channel, 1 output, 146
Two-channel, 2 outputs, 146
Adapter, 264
Addressing
PROFIBUS DP, 182
Ambient temperature, 128
App
SIEMENS Industry Support, 17
Article number, 12
ATEX, 26
Automatic start, 58
B
BMK, 222
C
Cable cross-section, 251, 252
Capacitive load, 177
Actuator, 172
CAx data, 16
Characteristics
Capacitive load, 177
Inductive load, 179
Coding pins, 265
Commissioning, 180
Communication, 31
Conductive contamination, 22
Configuration rules
Safety relay, 134
Configuration test, 180, 189
Configurator, 18
Configuring error, 199
Configuring mode, 180, 203
Connecting, 141
Cable cross-section, 252
Diagnostics display, 110
DP interface, 106, 113
Ground, 89
PROFIBUS DP, 104
Terminal blocks, 102
Connection
Diagnostics display, 106, 113
Inputs, 144, 145
Non-floating sensors, 145
Outputs, 146, 148
Single-channel sensors, 145, 147
Test output, 145, 147
Two-channel sensors, 145
Connection cables, 105, 113, 264
Contamination, 265
Correction sheet, 331
347
Index
Cover
3ZY12 device connectors, 131
Cross-circuit, 141
Cross-circuit detection, 55, 141
Cross-circuit monitoring, 145
Current-source short circuit, 141
D
Dark test, 163, 174
Data set 0, 234
DP interface, 235
Safety relay, 234
Data set 1
3SK2 safety relay, 236
DP interface, 237
Data set 92, 238
Data sets, 183
Data sheet, 243
DataMatrix code, 17
Delay time, 162
DELAYED, 150
DEVICE, 200
Device connector for looping through signals, 132
Device connector interface, 149
Device display, 116, 203
Device error, 196
Device messages, 195
Device replacement, 190
Diagnostics, 30, 31, 32, 203
LED, 200
Diagnostics block, 227
Diagnostics concept, 195
Diagnostics
display, 30, 32, 47, 117, 208, 210, 211, 217, 221
Configuration rules, 138
Connecting, 110
Messages, 213
Settings, 225
Diagnostics frame, 230
Diagnostics options, 193
Diagnostics software, 31, 263
Diagnostics using PROFIBUS, 228, 230
Diagnostics with diagnostics display, 208
Diagnostics with LED
Diagnostics display, 202
DP interface, 202
Dimension drawings, 16, 253, 258
DIN EN ISO 7200, 31
Disassembly, 84, 86
Disconnecting, 106
Discrepancy monitoring, 60
Display, 201
Device display, 203
Display elements (22.5 mm), 39
Display elements (45 mm), 44
Display settings, 212
Disposal, 23, 189
Documentation, 31
Door adapter, 265
DP address, 182, 184
DP error numbers, 231
DP interface, 31, 32, 50, 126, 183, 184, 185, 227
DP interface module, 30
Drilling plan, 259
Drilling plans, 255
E
Electrostatic charge, 23
Element messages, 195, 219
Element status, 195
EMC directive, 23
EMC regulations, 265
EN 62061:2005, 21
EN ISO 13849-1:2008, 21
Enabling circuit, 56
EPLAN macros, 16
Error category, 196
Error display, 205
Error management, 196
F
Factory setting, 187
Restore, 187
Factory settings
DP interface, 123
FAQs, 14
Fault acknowledgment, 194, 196, 201, 214, 218
Fault response time, 156, 161
Fault response time with flags
Single-channel actuator wiring, 158
Two-channel actuator wiring, 159
Fault response time without flags
Single-channel actuator wiring, 158
Two-channel actuator wiring, 159
Features, 32
Feedback circuit, 56, 151, 155
Forcing, 31
Function elements, 33
Function test, 25, 25, 61, 180, 189
Functional extra-low voltage, 22
348
Index
G
Grounding, 22, 89
GSD, 32
GSD file, 184
H
Handshake error, 199
HW Config, 184
I
Inductive interference protection, 178
Inductive load, 179
Actuator, 172
Input delay, 161
Inputs
Connection, 144, 145, 147
Inputs (22.5 mm), 36
Inputs (45 mm), 41
Installation
Diagnostics display, 81
On a level surface, 83
onto DIN rail, 85
Intended Use, 24
Interconnecting, 141
Interface, 31
Interface (22.5 mm), 38
Interface (45 mm), 43
Interface module, 30, 50, 264
Configuration rules, 138
L
LED
Startup, 181
LED display, 201
Light test, 173
Logic error, 198
Logic prewarning, 198
M
Machine safety, 24
Manual start, 58
Maximum read-back time, 163, 174
N
Newsletters, 26
Non-floating sensors, 142, 145
Number of cables, 251
O
Online configurator, 18
Operating states, 203
Operational safety, 26
Operator controls, 115
Operator controls (22.5 mm), 38
Operator controls (45 mm), 44
Output current, 128
Outputs
Connection, 146, 148
Outputs (22.5 mm), 36
Outputs (45 mm), 41
P
Parameterization error, 199
Parameterization software, 31, 263
PC cable, 264
PELV, 22
Power supply, 141
PROFIBUS, 32
Grounding, 22
PROFIBUS address, 121
PROFIBUS DP, 50, 182, 184, 185
Connecting, 104
Program cycle time, 161
Protective circuit, 148
Protective conductor, 93, 96, 102
Push-in, 95
Push-in lugs, 265
349
Index
R
Read-back time, 174
Recycling, 23, 189
Redundancy, 54
References, 14
Remote access, 32
Removing
Diagnostics display, 82
Replacing, 190
Diagnostics display, 191
DP interface, 191
RESET button, 116
Response time, 156
Actuator, 172
with flags, 157
without flags, 157
Restart standby time, 174
Restoring the factory settings, 187
Ribbon cable, 264
RS 232 PC cables, 264
Rules
Interconnecting / wiring / connecting, 141
S
Safe state, 24
Safety clearance, 156
Safety concept, 24
Safety ES, 31, 32, 263
Safety Evaluation Tool, 18
Safety function, 31, 53, 271
Safety information, 21
Wiring, 140
Safety Integrated, 18
Safety mode, 181, 203
Safety of the installation, 19, 269
Safety program, 31
Safety shutdown mat with cross-circuit principle, 142
Safety systems, 29, 53
Safety-related inputs, 32
Screw-type connection, 102
Seal, 265
Self-test, 181
SELV, 22
Sensor, 53
Sensor inputs, 32
Sensors
Design, 171
Single-channel, 145
Two-channel, 145
Sequence monitoring, 61
Serial number, 17
Series connection, 62
SET key, 116, 203
SF, 200
Short circuit detection, 55
Short circuit to ground, 141
Signaling output, 56, 148
Single-channel acknowledgement button, 145
Single-channel actuator wiring, 146, 148
Single-channel sensors, 145
Slide switch
3SK1 output expansion, 149
Slots, 127
Software, 263
Spring-loaded connection, 103
Spring-loaded terminals
Push-in, 95
Stand-alone installation, 128
Standard outputs, 32
Standards, 21
Start
Automatic, 58
Manual, 58
Monitored, 59
Start button, 57, 194, 196, 201, 214, 218
Start functions, 57
Startup, 181
Startup testing, 61
Status information, 218
STEP 7, 184, 228
Stop category, 56
Substitute value, 185
Synchronism, 60
System components, 126, 127
System configuration, 126, 127, 221
Examples, 138
System documentation, 31
System error, 197
System interfaces, 23, 87, 105, 112
System interfaces cover, 265
System test, 180, 189
T
Table of Contents, 13
Technical specifications, 243
terminal blocks, 109
Terminal marking (22.5 mm), 38
Terminal marking (45 mm), 43
Terminals, 265
Test interval, 25
Test interval time, 173
SIRIUS 3SK2 Safety Relays
350
Index
U
UNDELAYED, 150
USB PC cable, 264
W
Wiring, 141
Wiring error, 198
351
Index
352