466 Verification and validation
Validation of the STO function
WARNING! Configure and validate the STO function independently and before
other safety functions.
General validation principles:
• The STO function is the basic safety function. It must always be configured and
validated before (and independent of) other safety functions. This is essential
because the internal diagnostics of the FSO module can trigger the STO function
even if no external request signal has been defined for the function.
• The STO function must always be tested with a separate request signal. The
signal is connected to a suitable FSO module input, and the input is configured to
be the interface for the STO request.
• If the stop by coast time from the maximum process speed to zero speed is not
known, it must be measured, and parameter STO.14 Time to zero speed with
STO and modoff set accordingly.
• If an encoder is not used, it must be ensured by other means (for example, by a
visual check) that the motor shaft stops within the STO.14 delay time and that the
STO function cannot be acknowledged before the motor shaft has stopped. The
only exception to this is when STO.13 Restart delay after STO has been set
shorter than STO.14 delay time. In that case, the fly-start of the motor is possible.
To validate the STO function:
1. Make sure that the input for the STO function is configured according to the wiring
diagram.
2. Make sure that the output to indicate the drive STO state (STO.21 STO output) is
configured correctly according to your design.
3. Make sure that the STO function is configured correctly according to your design.
For a configuration example, see chapter Configuring STO on page 331. Check
these settings:
Activation:
• STO.11 STO input A
• STO.12 STO input B
• Note: Activation can also come from the PROFIsafe.
Acknowledgement:
• STO.02 STO acknowledgement
• FSOGEN.42 Acknowledgement button input if manual acknowledgement is
used.
Functionality:
• STO.13 Restart delay after STO (if fly-start is used)