Parker Hannifin Corporation
Cylinder Division
Des Plaines, Illinois
www.parker.com/cylinder
Hydraulic and Electrohydraulic Actuators
HAS Series Analog Drives Manual
Catalog HY08-4005-M3
52
WARNING: This product can expose you to chemicals including Lead and Lead Compounds which are known to the State of
California to cause cancer and birth defects or other reproductive harm. For more information go to www.P65Warnings.ca.gov
PROP 65 WARNING
Safe Torque Off
TTHHIISS EEQQUUIIPPMMEENNTT IIFF UUSSEEDD IINNCCOORRRREECCTTLLYY IISS PPOOTTEENNTTIIAALLLLYY DDAANNGGEERROOUUSS.. TTHHEERREEFFOORREE
UUNNDDEERR NNOO CCIIRRCCUUMMSSTTAANNCCEESS SSHHOOUULLDD IITT BBEE UUSSEEDD BBEEFFOORREE TTHHEESSEE IINNSSTTRRUUCCTTIIOONNSS HHAAVVEE
BBEEEENN RREEAADD AANNDD UUNNDDEERRSSTTOOOODD BBYY TTHHEE EENNDD UUSSEERR WWHHOO SSHHOOUULLDD BBEE AA
PPPPRROOPPRRIIAATTEELLYY
QQUUAALLIIFFIIEEDD TTOO OOPPEERRAATTEE TTHHEE EEQQUUIIPPMMEENNTT..
This section provides general information about STO.
Two safety functions can be implemented with the 890: Safe Torque Off (STO) and Safe Stop
1 (SS1). In order to meet all aspects of STO and SS1, an external safety control unit should
be used.
To implement Safe Stop 1 (SS1), the external safety control unit causes the drive to
decelerate to rest. Once at rest, it invokes STO in the 890. Please refer to
EN61800-5-2:2007 para 4.2.2.3 for the formal definitions.
It is the user’s responsibility to:
1) Risk assess the machine.
2) Design, implement and assess an appropriate solution for each application to meet all
relevant safety requirements.
Note: STO is an electronic inhibit intended for use during normal operation of the machine. It is
not intended for use during machine maintenance, repair, replacement or other similar
activities. For these activities recognized electrical power isolation devices and lock-off
procedures should be used.
The 890 STO function is a factory-fitted and factory-tested feature. It is only compatible with
firmware versions 3.5 and onwards. See the section “SSaaffeettyy WWaarrnniinnggss aanndd LLiimmiittaattiioonnss” on
page 6-21.
SSTTOO FFuunnccttiioonnaall DDeessccrriippttiioonn
STO is a means of preventing an 890 drive from delivering power to its connected electric
motor. Please refer to EN61800-5-2:2007 para 4.2.2.2 for the formal definition.
To ensure a high degree of safety, two independent STO control channels are implemented in
hardware. The STO circuit in the 890 is designed such that a fault in one control channel will
not affect the other channel’s ability to prevent the drive from starting, i.e. the STO function of
the 890 drive is tolerant to any single fault. It may not be tolerant to an accumulation of faults.
This is in keeping with its declared safety ratings.
STO always overrides any attempt to start the drive. If one or both STO control inputs is
requesting the STO function, the drive will not start, even if for example, the drive’s software
malfunctions and tries to cause the motor to turn.
The STO function is implemented in hardware; it overrides all software activities. The only
software involvement is to report STO status to the user via an MMI, serial communications link
or user terminal on the 890 control board as defined by the drive configuration.
WWAARRNNIINNGG
THE DECLARED SIL/PL CAPABILITY OF THIS STO PRODUCT CAN BE ACHIEVED ONLY WHEN
THE TWO STO USER INPUTS ARE DRIVEN INDEPENDENTLY. THEY MUST NOT BOTH BE
DRIVEN FROM A COMMON SOURCE; OTHERWISE THE SINGLE FAULT DETECTION WILL BE
COMPLETELY INOPERATIVE.
USE OF THE PRODUCT IN THIS “COMMON SOURCE” CONDITION INVALIDATES THE
STO PRODUCT SPECIFICATION AND IS ENTIRELY AT THE USER’S OWN RISK.
PPaarrkkeerr HHaannnniiffiinn CCoorrppoorraattiioonn
Cylinder Division
Des Plaines, Illinois
49
wwwwww..ppaarrkkeerr..ccoomm/
cylinder
General Information
TTHHIISS EEQQUUIIPPMMEENNTT IIFF UUSSEEDD IINNCCOORRRREECCTTLLYY IISS PPOOTTEENNTTIIAALLLLYY DDAANNGGEERROOUUSS.. TTHHEERREEFFOORREE
UUNNDDEERR NNOO CCIIRRCCUUMMSSTTAANNCCEESS SSHHOOUULLDD IITT BBEE UUSSEEDD BBEEFFOORREE TTHHEESSEE IINNSSTTRRUUCCTTIIOONNSS HHAAVVEE
BBEEEENN RREEAADD AANNDD UUNNDDEERRSSTTOOOODD BBYY TTHHEE EENNDD UUSSEERR WWHHOO SSHHOOUULLDD BBEE
AAPPPPRROOPPRRIIAATTEELLYY
QQUUAALLIIFFIIEEDD TTOO OOPPEERRAATTEE TTHHEE EEQQUUIIPPMMEENNTT..
This section provides general information about STO.
Two safety functions can be implemented with the 890: Safe Torque Off (STO) and Safe Stop
1 (SS1). In order to meet all aspects of STO and SS1, an external safety control unit should
be used.
To implement Safe Stop 1 (SS1), the external safety control unit causes the drive to
decelerate to rest. Once at rest, it invokes STO in the 890. Please refer to
EN61800-5-2:2007 para 4.2.2.3 for the formal definitions.
It is the user’s responsibility to:
1) Risk assess the machine.
2) Design, implement and assess an appropriate solution for each application to meet all
relevant safety requirements.
Note: STO is an electronic inhibit intended for use during normal operation of the machine. It is
not intended for use during machine maintenance, repair, replacement or other similar
activities. For these activities recognised electrical power isolation devices and lock-off
procedures should be used.
The 890 STO function is a factory-fitted and factory-tested feature. It is only compatible with
firmware versions 3.5 and onwards. See the section “SSaaffeettyy WWaarrnniinnggss aanndd LLiimmiittaattiioonnss” on
page 6-21.
SSTTOO FFuunnccttiioonnaall DDeessccrriippttiioonn
STO is a means of preventing an 890 drive from delivering power to its connected electric
motor. Please refer to EN61800-5-2:2007 para 4.2.2.2 for the formal definition.
To ensure a high degree of safety, two independent STO control channels are implemented in
hardware. The STO circuit in the 890 is designed such that a fault in one control channel will
not affect the other channel’s ability to prevent the drive from starting, i.e. the STO function of
the 890 drive is tolerant to any single fault. It may not be tolerant to an accumulation of faults.
This is in keeping with its declared safety ratings.
STO always overrides any attempt to start the drive. If one or both STO control inputs is
requesting the STO function, the drive will not start, even if for example, the drive’s software
malfunctions and tries to cause the motor to turn.
The STO function is implemented in hardware; it overrides all software activities. The only
software involvement is to report STO status to the user via an MMI, serial communications link
or user terminal on the 890 control board as defined by the drive configuration.
WWAARRNNIINNGG
THE DECLARED SIL/PL CAPABILITY OF THIS STO PRODUCT CAN BE ACHIEVED ONLY WHEN
THE TWO STO USER INPUTS ARE DRIVEN INDEPENDENTLY. THEY MUST NOT BOTH BE
DRIVEN FROM A COMMON SOURCE; OTHERWISE THE SINGLE FAULT DETECTION WILL BE
COMPLETELY INOPERATIVE.
USE OF THE PRODUCT IN THIS “COMMON SOURCE” CONDITION INVALIDATES THE
STO PRODUCT SPECIFICATION AND IS ENTIRELY AT THE USER’S OWN RISK.
PPaarrkkeerr HHaannnniiffiinn CCoorrppoorraattiioonn
Cylinder Division
Des Plaines, Illinois
49
wwwwww..ppaarrkkeerr..ccoomm/
cylinder
STO Functional Description
To Next Page
Loading...
