Mitsubishi Electric R60AD8-G - PART 2 SIL2 MODE

APPX
Appendix 6 Disabling the Safety Module
217
A
Appendix 6 Disabling the Safety Module
For the R60AD8-G whose safety module for SIL2 mode was enabled in a different system, to use this module in standard
mode, disabling its safety module function is required. If the R60AD8-G with the safety module function enabled is started up
in standard mode, an error (start-up in standard mode with safety validated (error code: 3040H)) occurs. The R60AD8-G does
not operate normally until its safety module function becomes disabled.
Safety module validity status check
Whether the safety module function is enabled or not can be checked with Validation status area (Un\G4201).
• The R60AD8-G does not operate normally in standard mode while Enable (1) is stored in Validation status area
(Un\G4201). In such a case, disabling the safety module function is required. Note that for the R60AD8-G operating in
standard mode, its safety module function cannot be disabled through "Safety Module Operation" of GX Works3.
• The R60AD8-G operates normally in standard mode when Disable (0) is stored in Validation status area (Un\G4201). In this
case, disabling the safety module function is not required.
Procedure for disabling the safety module
1. Set Command area for module invalidation (Un\G4200) to 1234H and turn on and off 'Operating condition setting
request' (Y9). This operation disables the safety module function of the R60AD8-G.
2. To check whether the safety module function becomes disabled or not, refer to the table below.
• If disabling the safety module fails, check that a set value in Command area for module invalidation (Un\G4200) is correct,
and once again, turn on and off 'Operating condition setting request' (Y9) and check whether the safety module function is
disabled.
• When 'Operating condition setting request' (Y9) is turned on, 'Operating condition setting completed flag' (X9) turns off
regardless of the result (succeed or fail) of disabling the safety module function.
3. After checking that the disabling has succeeded, reset the CPU module, or turn off and on the programmable controller's
power to restart the R60AD8-G.
4. Check that the ALM LED is off. (The R60AD8-G is operating normally in standard mode.) If the ALM LED is on or
flashing (1s cycles), it indicates that an alarm occurred, even though the R60AD8-G is operating in standard mode.
Check 'Latest alarm code' (Un\G2), and take actions described in the list of alarm codes. ( Page 112 List of Alarm
Codes)
When the safety module is disabled, the enabled/disabled state is saved in the flash memory in the module,
but note that the number of rewrite operations is limited. The enabled and disabled states can be written up to
250000 times in total. If the number of write operations exceeds 250000, a number of safety module status
switching exceeding limit error (error code: 1081H) occurs. In this case, a write operation of the enabled/
disabled state is executed, but the result is not guaranteed.
Disabling the safety module Description
Succeeded • Disable (0) is stored in Validation status area (Un\G4201).
• The ALM LED flashes (400ms cycle). (R60AD8-G waiting for restart)
Failed • Enable (1) remains in Validation status area (Un\G4201).
• The ALM LED does not flash (400ms cycle).
• Failure of disabling safety module (error code: 1302H) is stored in 'Latest error code'
(Un\G0).