Pizzato Elettrica CS MP208 Serie Manual página 4

1 INFORMATION ON THIS DOCUMENT
1.1 Function
These operating instructions provide information on installation, connection and safe
use for the following articles: CS MP208•0.
1.2 Target audience
The operations described in these operating instructions must be carried out by qua-
lified personnel only, who are fully capable of understanding them, and with the tech-
nical qualifications required for operating the machines and plants in which the safety
devices are to be installed.
1.3 Application field
These instructions apply exclusively to the products listed in paragraph Function, and
their accessories.
1.4 Original instructions
The Italian language version is the original set of instructions for the device. Versions
provided in other languages are translations of the original instructions.
2 SYMBOLS USED
This symbol indicates any relevant additional information
Attention: Any failure to observe this warning note can cause damage or malfun-
ction, including possible loss of the safety function.
3 DESCRIPTION
3.1 Device description
The safety device described in this manual is defined according to the Machinery
Directive 2006/42/EC as logic component for safety functions.
This multifunction safety module is used to implement safety functions such as emer-
gency stop monitoring, door or guard control, monitoring safety barriers, safety mats
or magnetic sensors on industrial machines. This device is particularly suitable for
controlling machines with a variety of combined safety functions (for example, simul-
taneous emergency stop and guard control), or machines with parts that have to be
isolated in normal operating conditions (to do maintenance for example).
3.2 Device functions
This multifunction safety module has many different inputs, which are evaluated by an
application program to activate safety or signalling outputs. To reach the highest levels
of safety, this device has a redundant and self monitoring structure with two proces-
sors that continuously check the system in a coordinated way. The module also has
numerous green LEDs that show the state of the inputs and outputs and two red/blue
LEDs (P1, P2) that show the state of the processors or any faults.
In the safe state, the safety outputs are switched off (safe power off).
The safety function performed by the module is set up and configured using the logical
blocks available in the Gemnis Studio configuration software, which is distributed as
freeware by Pizzato Elettrica and which must be installed on an external PC. A general
safety function can be defined as follows:
- the safety outputs are switched off within the specified reaction time if the result of
the programmable logic solver (application program) is negative or in the case of
errors.
On the basis of external device features and the circuit structure, with this module you
can obtain safety circuits up to:
- SIL 3 acc. to EN 62061;
- PL e acc. to EN ISO 13849-1;
- safety category 4 acc. to EN ISO 13849-1.
3.3 Intended use of the device
- The device described in these operating instructions is designed to be applied on
industrial machines.
- The direct sale of this device to the public is prohibited. Installation and use must be
carried out by qualified personnel only.
- The use of the device for purposes other than those specified in these operating
instructions is prohibited.
- Any use other than as expressly specified in these operating instructions shall be
considered unintended by the manufacturer.
- Also considered unintended use:
a) using the device after having made structural, technical, or electrical modifications
to it;
b) using the product in a field of application other than as described in paragraph
TEChNICAL DATA.
4 OPERATION
4.1 Definitions
- Application program: the part of the internal safety module software intended for the
customer's application.
- POwER ON: the safety module state, which lasts from the power on until the end of
the internal controls.
- RUN: the safety module state on completion of the POwER ON phase (if no errors
have been detected) in which the application program is run.
- ERROR: the safety module state when a fault is detected. In this state, the module
switches to the safe state, i.e., all safety outputs are deactivated.
- Fault: a fault can be internal or external to the safety module. Internal faults are
autonomously detected thanks to its redundant and self-monitored structure. An
external fault can be detected by the application program. It follows that the definition
of external fault is strictly dependent on the application (see note A).
e-mail:
Pizzato Elettrica Srl
web site: www.pizzato.com
via Torino, 1
36063 MAROSTICA (VI) Phone:
ITALY
4.2 Description of operation
when supplied with power, the module enters the POwER ON state and runs an inter-
nal self-diagnosis. In this phase, the two processor LEDs (P1, P2) remain illuminated
red for about 1 second. If the internal tests are completed without malfunction, the
two LEDs are switched off, the module enters the RUN state, and runs the application
program. If the start tests are not passed, the module enters the ERROR state and the
malfunction is indicated by the processor LEDs (P1, P2) remaining illuminated in red.
The green LEDs relating to the power supply and the module inputs are not control-
led by processors, and they immediately begin indicating the states of the respective
inputs/outputs.
when the module is in the RUN state, and no faults are detected, the two LEDs (P1,
P2) remain switched off.
In the RUN state, the module can detect faults external to the module, for example
caused by short circuits, or invalid input states (see note A). Depending on the fault
type detected, the application program may place the module in ERROR state, to
indicate the malfunction. In this case, the application program can communicate an
error code by making the LEDs (P1, P2) flash in sequence.
During the Run state, simultaneously with application program execution, the module
constantly runs a series of internal tests to check for correct hardware operation. If a
malfunction is detected, the module state changes to ERROR.
Once in ERROR state, the module is placed in a safe condition, that is with all the sa-
fety outputs open; the application program is no longer evaluated, and neither are the
system inputs. Furthermore, the semiconductor signalling outputs are left unaltered
(changes in inputs do not affect them) at the value imposed by the application program
before entering the ERROR state. To reset the module, just switch it off for the required
duration (see technical data) and then switch it on again.
Note A: A short circuit is not always a fault. For example, in the case of an ordinary push button for
emergency stops equipped with two NC contacts, contact opening is the signal to be evaluated and
a short circuit between the two contacts is a fault. In contrast, in the case of a safety mat with 4-wire
technology, the opposite is true, i.e. a short circuit between the wires is the signal to be evaluated
whereas wire interruption is a fault.
4.3 Increase of number and load capacity of contacts
If necessary the number and the load capacity of output contacts can be increased by
using external contactors with forcibly guided contacts
Feedback circuit for external contactors
with automatic start
+
K7
F
K8
Tx Ix 24 Vdc
OS1
OS2
K7 K8
-
In order to function correctly, any modules or PLCs connected to the OSx safety elec-
tronic outputs must be able to withstand cyclical deactivation tests performed on the
same.
5 INTERNAL WIRING DIAGRAM
A1 T01 T02 ... T04
P1
P2
A2
6 SIGNALLING
LEDs P1,
PWR LED
P2
No power supply, incorrect connections, power wires cut, external fuses
Off Off broken.
Module fault.
Green Off Normal operation.
4/18
info@pizzato.com
ZE FOG118B22-EU
+39.0424.470.930
Feedback circuit for external contactors
with manual or monitored start
+
K7
F
K8
Tx Ix 24 Vdc
OS1
K7
-
I11 I12 ... I28 24V
0V OS1 OS2 ... OS8
Possible fault cause
OS2
K8