8 - 3
8   Safety Function
AC Servomotors/Servo Drives 1S-series with Built-in EtherCAT® Communications User’s Manual (I586)
8-1  Safe Torque OFF Function
8
 
• The EDM output signal is not a safety output. Do not use the EDM output for any purpose 
other than the failure monitoring function.
• During installation, be sure to perform wiring check. Especially, check the following items.
• There is no short circuit nor disconnection
• The EDM circuit polarity is correct (not reversed)
• SF1, SF2, and EDM operate correctly
• Wrong wiring may prevent the safety function from operating correctly.
• The dynamic brake and the external brake release signal output do not belong to the 
safety-related parts. During the system design, make sure that there is no danger even if the 
external brake release function fails in the STO status.
• When you use the STO function, connect equipment that meets the safety standards.
• When you use the STO function with the safety input signals wired, confirm STO operation 
once every three months.
• When you use the STO function via EtherCAT communications, be sure to turn the power 
from OFF to ON once every three months to check that no error occurs due to the 1S-series 
Servo Drive’s self diagnosis (at power ON).
• Before you build a system with the safety function, make sure that you thoroughly understand 
the related safety standards and specifications in the user’s manuals so that you can design 
a system that meets all requirements of those standards and specifications.
• Qualified engineers must develop your safety-related system and install safety products in 
devices and equipment. Prior to machine commissioning, verify through testing that the 
safety products work as expected.
• Carefully read the specifications and precautions as well as all items in the Instruction Man-
ual for your safety product to learn appropriate usage procedures. Any deviation from instruc-
tions will lead to unexpected device or equipment failure not anticipated by the safety-related 
system.
• Conduct the user test before system operation to make sure that all safety devices operate 
correctly. Otherwise, safety functions may be impaired and serious injury may result.
• Design programs for the safety controller so that the STO function is not canceled automati-
cally even when the emergency stop switch is released.
• Design programs for the safety controller so that the STO function is not canceled automati-
cally when a Servo Drive failure is detected through the EDM output.
• When you use the STO function via EtherCAT communications, enable the security function 
of the EtherCAT master to ensure that the PDO mapping is not changed.
• Use the Operation Authority Verification function in the NJ/NX-series CPU Unit to enable the 
security function. Set authorities so that synchronization of the transfer operations cannot be 
operated. Refer to the Sysmac Studio Version 1 Operation Manual (Cat. No. W504) for 
details.
• When you use STO function for a vertical axis, in some cases, the power supply of a Servo-
motor becomes OFF before the brake is held. As a result, a workpiece may fall. Take a cau-
tion of the timing when the brake is held. Refer to the details about 7-6 Brake Interlock on 
page 7-22.