* If the brake actuator (e.g. coil) is not controlled (on/off) by the lift control and it rest in „on“ position
the LED „FB“ will not be lighted if the lift is in the station!.
Note: There are different types and designs of diagnostic switches on the various UCM-braking
devices. For proper use the manufacturer's instructions of the UCM-braking device must be observed.
This applies to UCM-brake actuators like dual-circuit brake, a limiter with safety gear, cable brake, etc.
as well as for hydraulic lifts with UCM safety valves.
If the UCM-brake actuator has no diagnostic switches or contacts available to connect to the ENA3
control, it can be assumed that the UCM-tested brake actuator already includes other equivalent ways
of self-monitoring. Thus, the terminals 5 and 6 must be bridged, that the ENA3 control will still operate!
Error detection:
The ENA3 safety control is responsible, for detecting a specific error ( UCM-error) and in the case of
an error, to initiate an immediate emergency stop of the lift.
The ENA3 safety control itself has no direct control function of the lift.
Possible errors:
• Error in the ENA3 safety control itself. Such an error is detected by the safety control itself and
always leads to a shutdown of the device, and thus the lift.
• Wiring errors at the inputs of the safety control are also detected and lead also to a shutdown.
• External wiring errors on the safe outputs of the safety control system must be detected during the
installation and must be corrected. The safety control must not be used until all wiring errors (no
missing or incorrect external connections) are corrected.
Concept for possible error detection and error prevention:
• Error indication by LEDs which are not lighted:
In normal operation and when the lift is in the station with closed doors, all LEDs on the board
should be lighted. It is therefore absolutely necessary to monitor the LEDs and in case of a not
lighted LED to find the cause of it.
• Detecting errors using the automatic testing of safety control:
If safety control detects an error, the „µP“ LED starts flashing and the piezo-buzzer starts beeping.
• Prevention of errors by suitable wiring management.
Errors in the output circuit are detected by a functional test.
Plausibility check: (Testing of the correct function)
• Redundant (twice arranged) transmitters and sensors for safety functions are subjected to an
examination for plausibility by ENA3 safety control. The functional test is carried out for all possible
combinations of the two transmitters. If a plausibility-error occurs the safety control shuts down
automatically.