Fault reaction function
Definition: A safety function requires a “fault reaction function” that tries to initiate a safe
state if it detects a failure in the safety system.
Examples of different failures:
• a short or open circuit or redundancy failure of the SLS activation switch wiring chain
• an internal failure in the FSO or FSE-31 modules, the safety encoder or the drive STO.
This section describes the fault reaction functions in the FSO and FSE-31 modules, the
safety encoder and the drive STO.
■ FSO module
The fault reaction function of the FSO module trips the drive if it detects a failure. The FSO
module activates the STO function or the Safe stop emergency (SSE) function. This activates
the drive STO function. The drive STO function is active until the fault is repaired.
The FSO module goes into Fail-safe mode. The STATUS/FAULT LED of the FSO module
is red until the fault is repaired. To exit the Fail-safe mode, remove the cause of the fault
and reset the FSO module. See section Resetting the FSO module (page 32).
For more information, see the drive firmware manual and the FSO module user’s manual.
Resetting the FSO module
To reset the FSO module:
• switch the power off and on, or
• click the Reboot FSO button on the Safety view of the Drive composer pro PC tool, or
•
use the drive parameter 96.09 FSO reboot.
■ FSE-31 module and safety encoder
The fault reaction function depends on the value of FSO parameter S_ENCGEN.11 FSE
diagnostic failure reaction.
If there is a fault in the FSE-31 module or safety encoder, and parameter S_ENCGEN.11
is set to value STO, the FSO-21 module goes into Fail-safe mode and activates the drive
STO function. To exit the Fail-safe mode, remove the cause of the fault and reset the FSO
module.
In FSE-31 module faults, the STATUS/FAULT LED of the FSO-21 module is red and the
STATUS LED of the FSE-31 module is off. The drive also indicates some FSE-31 module
faults.
In safety encoder faults, the STATUS/FAULT LED of the FSO-21 module is red and the
ENC STATUS LED of the FSE-31 module is off. The drive also indicates a safety encoder
fault. The safety encoder goes into the Safe state. To exit the Safe state, remove the cause
of the fault and reboot the safety encoder (for example, switch the power off and on).
For more information, see the drive firmware manual, FSO-21 safety functions module user’s
manual (3AXD50000015614 [English]) and FSE-31 pulse encoder interface module user’s
manual (3AXD50000016597 [English]).
32 Option description