512 Maintenance
Drive control board boot
If you reboot the drive control board (for example, by cycling the power or with
parameter 96.08 Control board boot (in DCS880 drives: 96.27 Control board boot)),
the FSO module goes into the Fail-safe mode.
To exit the Fail-safe mode:
• switch the FSO module power off and then switch it back on, or
• reboot the FSO module with drive parameter 96.09 FSO reboot (in DCS880
drives: 96.28 FSO reboot), or
• click the Reboot FSO button in Drive composer pro.
Note: The STO function must be completed before you can reboot the FSO module
with parameter 96.09 FSO reboot (in DCS880 drives: 96.28 FSO reboot) or with the
Reboot FSO button. See section Safe torque off (STO) on page 67.
Updates
After any changes in the safety application or the safety system configuration, you
must perform the acceptance tests to verify that the safety functionality is maintained.
See chapter Verification and validation.
Proof tests
Periodic proof testing of the safety system may be required in order to maintain the
claimed SIL / PL level of the system, to ensure that the safety integrity of a safety
system is maintained continuously and does not deteriorate over time.
If proof testing is required, it must be taken into consideration in the safety
calculations, maintenance manuals, user documentation, and it must be done
periodically.
In high demand mode of operation, the maximum proof test interval for the FSO
module is 20 years. In low demand mode of operation, the maximum proof test
interval for FSO is 20, 5 or 2 years. You must select the proof test interval according
to the application where the modules are used. See section Safety data on page 520.
Proof testing of the FSO module can be done by following the instructions in section
Validation of safety functions on page 464. A reboot of the FSO module is necessary
for the proof test.
Decommissioning
WARNING! Obey the instructions in chapter Safety instructions. If you ignore
them, injury or death, or damage to the equipment can occur.