ID* From To Description
(14) RUN (channel
passivation &
reintegration)
INIT Powering off/on
(15) INIT INIT Powering off/on
(16) RUN (user
acknowledge-
ment request)
SAFE STOP Fatal error(s) (CPU test, RAM test, etc. failed)
took place
(17) RUN (user
acknowledge-
ment request)
INIT Powering off/on
(18) RUN (module
passivation with
a command)
RUN (module
passivation)
PROFIsafe watchdog, PROFIsafe communication
error or undervoltage/overvoltage was identified.
Note: In this transition, it is possible that
WD_timeout bit of PROFIsafe F-Host instance
toggles if watchdog timeout is periodically recog-
nized by the Safety I/O module.
(19) RUN (module
passivation)
RUN (module
passivation with
a command)
If the threshold shut-down value was not reached
during process undervoltage or overvoltage
phase and the process voltage is back in the
normal range, the Safety I/O module reintegrates
and would go to RUN (ok) state automatically, but
short time before the “activate_FV_C = 1” com-
mand was sent from the PROFIsafe F-Host
stack, which leads the Safety I/O module to RUN
(module passivation with a command) state.
(20) RUN (user
acknowledge-
ment request)
RUN (module
passivation)
Process undervoltage/overvoltage was identified.
(21) RUN (module
passivation)
RUN (user
acknowledge-
ment request)
n Module error (watchdog or communication
error (CRC)) is gone.
and
n Command activate_FV_C = 0
then
n Safety I/O module sets OA_Req_S = 1
(22) RUN (user
acknowledge-
ment request)
RUN (ok)
n OA_Req_S = 1 was set by the Safety I/O
module after the module error is gone.
n OA_C (positive edge) was set by the PROFI-
safe F-Host for the given Safety I/O module
(23) RUN (user
acknowledge-
ment request)
RUN (module
passivation with
a command)
“activate_FV_C = 1” command was sent from the
PROFIsafe F-Host
(24) RUN (module
passivation with
a command)
SAFE STOP Fatal error(s) (CPU test, RAM test, etc. failed)
took place
AC500-S Safety Modules
Generic Safety I/O module behaviour > Safety I/O module states
30.03.2017AC500-S68