Interrupts/diagnostic messages
6.1 Reactions to faults
ET 200SP F-TM Count 1x1Vpp sin/cos HF (6ES7136-6CB00-0CA0)
Equipment Manual, V1.0, 01/2021, A5E47073911-AA
69
Reintegration of a fail-safe module
A channel or module can be reintegrated after successful diagnostics determine that a fault
has cleared. The F-TM Count module requires that counting faults such as N-signal,
discrepancy, frequency, and A and B signal monitoring must be cleared for at least 10
seconds before allowing reintegration. High and low voltage diagnostics require that the
input voltage returns to the allowed range for 60 seconds before reintegration is possible.
The channel to be manually reintegrated must also be acknowledged in your safety program
after the fault has cleared. The bits you use for this acknowledgement are referenced in the
F-I/O data blocks (under the system blocks).
The "ACK_REQ" bit for that module goes true to indicate that reintegration is possible. After
the "ACK_REQ" bit is true, your program can set the "ACK_REI" bit to allow the reintegration of
all channels in that module that are ready to be reintegrated.
You can also acknowledge all faults in an F-runtime group using the "ACK_REI_GLOB" input of
the "ACK_GL" instruction.
Fatal diagnostic errors require a power cycle with successful diagnostics.
Reintegration after high stress events
High temperature, high voltage, and excessive current stress can damage electronics,
reducing the reliability while components continue to work apparently as expected.
Passivation does not remove the potentially damaging effects of high ambient temperature
or high applied voltage. Solid state switch outputs can be damaged by high currents prior to
protective device activations. The reliability calculations assume the fail-safe module is
operated within its specified operating parameters. When a module has passivated due to a
high stress event, even though it apparently works correctly and passes all diagnostics, the
probability of a future failure may be increased.
It is possible to reintegrate a channel or module while some fault is still present that is
not readily detected by the module diagnostics.
Reintegration of a faulty system can result in unexpected machine or process operation,
which may cause death or serious injury to personnel, and/or damage to equipment.
After any reported fault, the steps outlined in this chapter and in safety standards applicable
to your system should be followed to assure that the fault is completely understood and
corrected before reintegration.
For an exact list of faults for the module, refer to the Diagnostic messages (Page 75) section.
At reintegration, the following occurs:
• Updated count value, measured value, and the event and status bits are provided to your
safety program.
• Control outputs from your safety program are again transferred to the counter module.