General information

Signal processing of the safe digital output within the MOVISAFE^® CS..A safety option is performed in two channels. The safe digital output can therefore achieve SIL 2 pursuant to EN 61508 and performance level d pursuant to EN ISO 13849-1. The external actuators to be connected and their wiring must comply with the respective required safety class.

The actuators can be connected to the safe digital output F-DO00 (not with MOVISAFE^® CSB) via two channels, namely a sourcing/sinking output, or via one channel, namely a sourcing output.

The following functions can be assigned to the safe digital output:

• None
• Control of the safe digital output F‑DO takes place via the safe process data. If no safe process data has been activated, the safe digital output is open (logically "0").
• STO
• F‑DO behaves like F‑DO_STO. Control via safe process data is not possible.
• SBC
• The safe digital output F-DO00 takes over the DB0 brake control function by assigning the SBC function. In this way, the safe digital output F-DO00 is simultaneously switched with the DB00 brake output. The brake application delay that is parameterized in the drive train is taken into consideration when this takes place. This means that the DB00 brake output does not need to be connected separately to the SBM. The DB00 brake output can optionally be connected to the SBM.

Set the respective configuration during startup using the "Assist CS.." parameterization tool.

One-pole, sinking digital outputs are not permitted.

It is not necessary to use shielded cables for all safe digital outputs.

Note the dependency of the achieved performance level (PL) and SIL on the selected connection variant of the safe digital outputs. A maximum switching frequency of 10 Hz is permitted for the safe digital output F‑DO00. The switching state of the safe digital output must be stable for at least 2 seconds at least once within 60 seconds. If a fault is detected by diagnostics, the "Output error" error response occurs, which disables all outputs. The consequence of this is that the respective digital output is switched to the "open" safe state.

Diagnostics can be activated optionally for the safe digital output F-DO00. Diagnostics safely detects a wire break in the interrupted output current circuit.

If a wire break is detected, the "Output error" error response occurs, which disables all outputs.

The safe digital output F-DO00 is equipped with an optional wire break monitoring function. Wire break monitoring checks whether the connected actuator is consuming a minimum current. If the actuator current is below the minimum value, the MOVISAFE^® CS..A safety option detects this as an open circuit.

Activate wire break monitoring only if you are sure that the current consumption of the actuator is always above the minimum current (see chapter "Technical data" > "Safe digital outputs").

In standalone operation, the outputs of the safety option can be safely disabled. This means that the safe outputs are switched at the same time as the internal STO output or with a time delay, depending on the parameterization. The outputs can also be set safely via a safe fieldbus, e.g. to unlock a door lock when the machine is in the idle state.

One safe F-DO digital output can be used to control up to 10 STO inputs on units of the MOVI-C^® modular system or one STO input and one safe SBM brake module.