Maintenance
82 Rev. D7 Jul 2017 Marathon MM
11.2 Fail-Safe Operation
The Fail-Safe system is designed to alert the operator and provide a safe output in case of any system
failure. Basically, it is designed to shutdown the process in the event of a set-up error, system error, or
a failure in the sensor electronics.
The Fail-Safe circuit should never be relied on exclusively to protect critical heating
processes. Other safety devices should also be used to supplement this function!
When an error or failure does occur, the display indicates the possible failure area, and the output
circuits automatically adjust to their lowest or highest preset level. The following table shows the values
displayed on the control panel and transmitted over the serial interface.
Internal temperature over range
Internal temperature under range
Target temperature under range
Target temperature over range
Table 12: Error Codes and Current Output Values
The relay is controlled by the temperature selected on the display. If any failsafe code appears on the
display, the relay changes to the “abnormal” state. This causes the relay to change state, leaving a
normal numerical temperature output.
If two errors occur simultaneously, the higher priority error is the one that is presented on the digital
and analog outputs. For example, if the internal temperature is too high and the target temperature is
over range, the unit outputs EIHH on the display and digital output and 21 mA on the analog output.