General information

Signal processing of the safe digital outputs within the MOVISAFE^® CS..A safety option is performed in two channels. The safe digital outputs can therefore achieve SIL 3 pursuant to EN 61508 and Performance Level e pursuant to EN ISO 13849-1. The external actuators to be connected and their wiring must comply with the respective required safety class.

The actuators can be connected to the safe digital outputs F-DO00 and F-DO01 (not with MOVISAFE^® CSB21A) via two poles, sourcing/sinking output, two poles, double-sinking output or single-pole, sourcing output.

The following functions can be assigned to the safe digital outputs:

• None
• Control of the safe digital output F‑DO takes place via the safe process data. If no safe process data has been activated, the safe digital output is open (logically "0").
• STO
• F‑DO behaves like F‑DO_STO. Control via safe process data is not possible.
• SBC
• A brake is connected to the safe digital output. Control via safe process data is only possible indirectly via the safety sub-function STO. The basic device controls the brake when the safety sub-function STO is inactive. The SBC function can only be activated if a brake has been parameterized in the inverter in drive train 1.

Set the respective configuration during startup using the parameterization tool "Assist CS..".

One-pole, sinking digital outputs are not permitted.

It is not necessary to use shielded cables for all safe digital outputs.

Note the dependency of the achieved performance level (PL) and SIL on the selected connection variant of the safe digital outputs. A maximum switching frequency of 10 Hz is possible for each of the two safe digital outputs F‑DO00 and F‑DO01. The switching state of the safe digital outputs must be stable for at least 2 seconds at least once within 60 seconds. If a fault is detected by diagnostics, the "output error" error response occurs, which disables all outputs. The consequence of this is that the respective digital output is switched to the safe state "open".

Diagnostics can be activated optionally for safe digital outputs F-DO00 and F‑DO01. Diagnostics safely detects a wire break in the interrupted output current circuit.

If a wire break is detected, the "Output error" error response occurs, which disables all outputs.

The outputs F-DO00 and F-DO01 are equipped with an optional wire break monitoring. Wire break monitoring checks whether the connected actuator is consuming a minimum current. If the actuator current is below the minimum value, the MOVISAFE^® CS..A safety option detects this as an open circuit.

Activate wire break monitoring only if you are sure that the current consumption of the actuator is always above the minimum current (see chapter Technical data > Safe digital outputs).

In standalone operation, the outputs of the safety option can be safely disabled. This means that the safe outputs are switched at the same time as the internal STO output or with a time delay, depending on the parameterization. The outputs can also be set safely via a safe fieldbus, e.g. to unlock a door lock when the machine is in the idle state.

One safe F-DO digital output can be used to control up to 10 STO inputs on units of the MOVI-C^® modular system or one STO input and one safe SBM brake module.