COMMISSIONING 
 
 
214  Service Manual    Part No.: 4417340 Revision 1 
  954 SmartServo FlexLine
 
The following safety categories are monitored continuously to determine 
whether a safe state should be activated, in the order listed, at a rate of 
at least once per second. 
 
Monitored Safety Categories 
Contact and analog output physical health 
Physical module health 
Contact and analog output functional health 
Product level health 
Product level overfill or underfill 
 
  Errors 
7.3.13.1  Safety Function Status 
The Safety Function Status define possible reasons for activation of the 
safe state for each output.  Each is a condition monitored as part of the 
safety categories outlined in section 7.3.12.1, above.  
When the condition causing activation is no longer present, the output 
may be configured to remain in the safe state (latched) until power is 
cycled or a reset is initiated.  This latching behavior can be enabled or 
disabled for each of the possible reasons for activation. 
The safe state of the analog output can be configured to be a high or 
low burnout current level.  High or low burnout action can also be 
assigned for each of the possible reasons for activation of a safe state. 
Board and function failures are hardware failures which are considered 
to impact the integrity of the analog output current level.  To assure a 
safe state will always be signalled, these failures always result in a 
latched burnout current level of 0 mA. 
The safety function status error codes, user actions, and the default 
latching behaviour and burnout action for each are defined below: