Danfoss AQ355238304444 Automation Drive User Guide

June 1, 2024
Danfoss

Danfoss-Logo

Danfoss AQ355238304444 Automation Drive

Danfoss-AQ355238304444-Automation-Drive-Product

Product Information

Specifications

  • Type: Safe Torque Off (STO)
  • Function: Safety control system component to prevent power generation for motor rotation
  • Compliance: Complies with relevant safety standards

Product Usage Instructions

  1. Installation
  2. Safety Instructions: Ensure to follow all safety instructions provided in the manual during the installation process.
  3. Installing STO: Follow the step-by-step guide in the manual for proper installation of the Safe Torque Off function.
  4. Commissioning
  5. Safety Instructions: Before commissioning, ensure all safety precautions are in place.
  6. Activating STO: Activate the Safe Torque Off function according to the instructions provided in section 4.2 of the manual.
  7. Automatic/Manual Restart Behavior: Understand the behaviour of automatic and manual restart after activating STO.
  8. STO Technical Data
    • Notices Regarding Technical Data: Pay attention to technical data notices for the proper functioning of the STO.
    • European Directives: Ensure compliance with European directives related to technical data.

Frequently Asked Questions (FAQ)

Q: What should I do if the STO function is not working?
A: If you encounter issues with the STO function, refer to the troubleshooting section in the manual for guidance on resolving common problems.

Introduction

Purpose of this Operating Guide

  1. This Operating Guide provides information for the use of Danfoss VLT® AutomationDrive EZ FC 321 drives in functional safety applications. The manual includes information about functional safety standards, Danfoss VLT®
  2. AutomationDrive EZ FC 321 Safe Torque Off (STO) function, the related installation and commissioning, and service and maintenance for STO.
  3. VLT® is a registered trademark for Danfoss A/S.

Additional Resources
This manual is targeted at users already familiar with the VLT® drives. It is intended as a supplement to the manuals and instructions available for download at www.danfoss.com. Read the instructions shipped with the drive and/or drive option before installing the unit, and observe the instructions for safe installation.

Functional Overview

Introduction
The Safe Torque Off (STO) function is a component of a safety control system. STO prevents the unit from generating the power required to rotate the motor.

NOTICE
Select and apply the components in the safety control system appropriately to achieve the required level of operational safety. Before integrating and using STO in an installation, carry out a thorough risk analysis on the installation to determine whether the STO functionality and safety levels are appropriate and sufficient.

The VLT® drive is available with:

  • Safe Torque Off (STO), as defined by EN IEC 61800-5-2.
  • Stop category 0, as defined in EN 60204-1.
  • The drive integrates the STO functionality via control terminal 37.
  • The VLT® drive with STO functionality is designed and approved suitable for the requirements of:
    • Category 3 in EN ISO 13849-1.
    • Performance Level “d” in EN ISO 13849-1.
    • SIL 2 in IEC 61508 and EN 61800-5-2.
    • The product can be used in the application area of EN IEC 62061.

Products Covered and Identification
The STO function is available for the following drive types:

  • VLT® AutomationDrive EZ FC 321.

Identification
Confirm that the drive is configured with the STO function by checking the unit type code on the nameplate.

Table 1: Type Code Identification

Product Type code
VLT® AutomationDrive EZ FC 321 X, B, or R at digit 18 of the type code.

Applied Standards and Compliance
Using the STO on terminal 37 requires that the user fulfils all provisions for safety, including relevant laws, regulations, and guidelines.

The integrated STO function complies with the following standards:

  • IEC/EN 60204-1: 2016 Stop category 0 – uncontrolled stop.
  • IEC/EN 61508: 2010 SIL2.
  • IEC/EN 61800-5-2: 2016.
  • EN ISO 13849-1: 2015 Category 3 PL d.

Safety

Safety Symbols
The following symbols are used in this manual:

  • DANGER
    Indicates a hazardous situation that, if not avoided, will result in death or serious injury.

  • WARNING
    Indicates a hazardous situation which, if not avoided, could result in death or serious injury.

  • CAUTION
    Indicates a hazardous situation that, if not avoided, could result in minor or moderate injury.

  • NOTICE
    Indicates information considered important, but not hazard-related (for example, messages relating to property damage).

Qualified Personnel
The products must only be assembled, installed, programmed, commissioned, maintained, and decommissioned by persons with proven skills. Persons with proven skills:

  • Are qualified electrical engineers, or persons who have received training from qualified electrical engineers and are suitably experienced to operate devices, systems, plant, and machinery by the general standards and guidelines for safety technology.
  • Are familiar with the basic regulations concerning health and safety/accident prevention.
  • Have read and understood the safety guidelines given in this manual and also the instructions given in the operating guide of the drive.
  • Have good knowledge of the generic and specialist standards applicable to the specific application.

Responsibilities of Users of Safety-related Power Drive Systems PDS(SR)
Users of safety-related Power Drive Systems (PDS(SR)) are responsible for:

  • Hazard and risk analysis of the application.
  • Identifying safety functions required and allocating SIL or PLr to each of the functions.
  • Other subsystems and the validity of signals and commands from these subsystems.
  • Designing appropriate safety-related control systems (hardware, software, parameterization, and so on).

Protective Measures
Qualified and skilled personnel must be available for installing and commissioning the safety engineering systems.

Procedure

  • Install the drive in an IP54/NEMA 12 cabinet as per IEC 60529, or in an equivalent environment. In special applications, a higher IP/NEMA rating may be necessary.
  • Ensure short-circuit protection of the cable between terminal 37 and the external safety device according to ISO 13849-2 table D.4.
    Optional step: Install additional measures (for example, a safety holding brake) if external forces influence the motor axis (for example suspended loads).

Safety Precautions
See the Safety chapter in the relevant operating guides for general safety precautions.

WARNING

FALL PROTECTION REQUIRED
External forces acting on the motor, for example, suspended loads, and unintended movements, caused by gravity, can cause hazards. Not taking any measures to protect against falling loads can lead to death or serious injury.

  • Equip the motor with extra measures for fall protection, for example, install extra mechanical brakes.

WARNING

NO ELECTRICAL SAFETY
STO (that is, removal of 24 V DC voltage supply to terminal 37) does not provide electrical safety. The STO function itself is not sufficient to implement the Emergency-Off function as defined by EN 60204-1. Using the STO function to implement Emergency- Off may lead to personal injury.

  • Emergency-Off requires measures of electrical isolation, for example, by switching off mains via an extra contactor.

WARNING

RISK OF ELECTRICAL SHOCK
The STO function does NOT isolate mains voltage to the drive or auxiliary circuits. Only perform work on electrical parts of the drive or the motor after isolating the mains voltage supply and waiting for the discharge time to elapse, as specified in the Safety chapter in the Operating Guide of the relevant drive. Failure to isolate the mains voltage supply from the unit and waiting the time specified could result in death or serious injury.

  • Do not stop the drive by using the STO function. If a running drive is stopped by using the function, the unit trips and stops by coasting. If this limitation is not acceptable, for example, because it causes danger, use the appropriate stopping mode to stop the drive and machinery before using the STO function. Depending on the application, a mechanical brake may be required.
  • STO is suitable for performing mechanical work on the drive system or affected area of a machine only. It does not provide electrical safety. STO must not be used as a control for starting and/or stopping the drive.

WARNING

RESIDUAL ROTATION
The STO function can be used for asynchronous, synchronous, and permanent magnet motors. Two faults can occur in the power semiconductor of the drive. When using synchronous or permanent magnet motors, a residual rotation can result from the faults. The rotation can be calculated to angle = 360/(number of poles). The application using synchronous or permanent magnet motors must consider this residual rotation and ensure that it does not pose a safety risk. The situation is not relevant for asynchronous motors.

CAUTION
After installing STO, perform a commissioning test. A passed commissioning test is mandatory after the 1st installation and after each change to the safety installation.

CAUTION

AUTOMATIC RESTART
Automatic restart behaviour is only allowed in 1 of the 2 situations:

  • The unintended restart prevention is implemented by other parts of the STO installation.
  • A presence in the dangerous zone can be physically excluded when STO is not activated. In particular, observe paragraph 6.3.3.2.5 of ISO 12100:2010.

NOTICE

  • Perform a risk assessment for each stop function to determine the selection of a stop category by EN 60204-1:
  • Stop Category 0 is achieved with immediate removal of power to the actuator, resulting in an uncontrolled cost to stop.
  • STO according to EN 61800-5-2 accomplished a Stop Category 0 stop.
  • Stop Category 1 is achieved with power available to the machine actuators to achieve the stop. Power is removed from the actuators when the stop is achieved according to EN 61800-5-2 Safe Stop 1 (SS1).
  • Stop Category 2 is a controlled stop with power available to the machine actuators. A holding position under power follows the stop.

NOTICE

  • When designing the machine application, timing and distance must be considered for a coast to stop (Stop Category 0 or STO).
  • For more information regarding stop categories, refer to EN 60204-1.

Installation

Safety Instructions

CAUTION

ELECTRICAL HAZARD

  • The operator or electrical installer is responsible for proper grounding and compliance with all applicable national and local safety regulations.
  • See 2.5 Safety Precautions and the Operating Guide of the relevant drive. Also, always observe the instructions provided by the motor manufacturer.

Installing STO
For motor connection, AC mains connection, and control wiring, follow the instructions for safe installation in the Operating Guide of the drive.

Procedure

  1. Remove the yellow jumper wire between control terminals 37 and 12 or 13.Danfoss-AQ355238304444-Automation-Drive-Fig- \(1\)
  2. For example, connect an external safety monitoring relay via an NO safety function to terminal 37 (STO) and either terminal 12 or 13 (24 V DC).
    • Connection and application examples are found in the chapter Application Examples.
  3. Complete wiring according to the instructions given in the Operating Guide of the drive.

Commissioning

Safety Instructions

CAUTION

ELECTRICAL HAZARD
The operator or electrical installer is responsible for proper grounding and compliance with all applicable national and local safety regulations.

  • See Safety Precautions and the Operating Guide of the relevant drive. Also, always observe the instructions provided by the motor manufacturer.

Activating STO

  1. The STO function can be used for asynchronous, synchronous, and permanent magnet motors.
  2. Ensure that external safety devices fulfil Cat./PL or SIL when connected to terminal 37.

Procedure

  1. Remove the voltage at terminal 37 of the drive.
  2. Connect the drive to an external safety device providing a safe delay.
    • An installation for a Safe Stop 1 can be obtained.

When the STO function (terminal 37) is activated, the drive issues an alarm trips the unit and coasts the motor to a stop. A manual restart is required. Use the STO function to stop the drive in emergency stop situations. In normal operating mode when STO is not required, use the standard stop function instead. Ensure that requirements according to ISO 12100 paragraph 6.3.3.2.5 are fulfilled before using the automatic restart function.

Automatic/Manual Restart Behavior
The STO default state prevents unintended restarts (restart prevention behaviour). To terminate STO and resume normal operation, follow the procedure below.

Procedure

  1. Reapply 24 V DC to terminal 37.
  2. Give a reset signal via bus, digital I/O, or [Reset] key.
    • Set the STO function to automatically restart by setting the value of parameter 5-19 Terminal 37 Safe Stop from default value [1] Safe Stop Alarm to value [3] Safe Stop Warning.
    • Automatic restart means that STO is terminated and normal operation is resumed when the 24 V DC is applied to terminal 37. No reset signal is required.

Automatic Restart Behavior
Automatic restart means that STO is terminated and normal operation is resumed when the 24 V DC is applied to terminal 37. No reset signal is required.

Procedure
Set parameter 5-19 Terminal 37 Safe Stop to [3] Safe Stop Warning.

STO Commissioning Test

NOTICE
A successful commissioning test of the STO function is required after the initial installation and after each subsequent change to the installation or application involving the STO.

  • For applications without automatic restart after a safe stop, follow the instructions in Restart Prevention for STO Application.
  • For applications with automatic restart after a safe stop, follow the instructions in Automatic Restart of STO Application.

Restart Prevention for STO Application
Application where parameter 5-19 Terminal 37 Safe Stop is set to default value [1] Safe Stop Alarm.

Procedure

  1. Remove the 24 V DC voltage supply to terminal 37 using the interrupt device while the drive runs the motor (that is, the main supply is not interrupted).
  2. Check that:
  3. The motor costs.
  4. The mechanical brake activates (if connected).
  5. The LCP (if mounted) shows Alarm 68, Safe Stop.
  6. Reapply 24 V DC to terminal 37.
  7. Ensure that the motor remains coasted and that the mechanical brake (if connected) remains activated.
  8. Send a reset signal via bus, digital I/O, or [Reset] key.
  9. Ensure that the motor is operational again.

When all given steps are passed, the commissioning test is completed.

Automatic Restart of STO Application
Applications where parameter 5-19 Terminal 37 Safe Stop is set to [3] Safe Stop Warning or combined STO.

Procedure
Remove the 24 V DC voltage supply to terminal 37 by the interrupt device while the drive runs the motor (that is, the main supply is not interrupted).

  1. Check that:
    • The motor costs.
    • The mechanical brake activates (if connected).
    • The LCP (if mounted) shows Warning 68, Safe Stop.
  2. Reapply 24 V DC to terminal 37.
  3. Ensure that the motor is operational again.

When all the given steps are passed, the commissioning test is completed.

NOTICE
See the warning on the restart behaviour in 2.5 Safety Precautions.

System Configuration Security

  • Security measures are the responsibility of the user.
  • The drive parameters can be password-protected.

Service and Maintenance

  • It is required for PL d or SIL2 to conduct a functional test every 12 months to detect any failure or malfunction of the STO functionality.
  • For lower PL or SIL, it is a recommendation.

Performing Functional Tests
It is required to perform successful functional tests. If hardware faults are detected during a test, leading to situations where steps 3– 5 and step 7 cannot be verified:

  • Immediately initiate the STO.
  • Replace the faulty unit and run a successful commissioning test before resuming normal operation.
  • Operation is not allowed with a faulty unit.
  • Repair is not allowed.
  • If a failure is found in the periodic test, it must result in a safe state. The drive cannot guarantee a safe state so the test must be conducted in a way that secures a safe state, for example, via a safety PLC.

Procedure

  1. Remove the 24 V DC voltage supply at terminal 37.
  2. Check if the LCP shows Alarm 68, Safe Stop or Warning 68, Safe Stop.
  3. Verify that the drive trips the unit.
  4. Verify that the motor is coasting and comes to a complete stop.
  5. Verify that the motor cannot be started.
  6. Reconnect 24 V DC supply to terminal 37.
  7. If parameter 5-19 Terminal 37 Safe Stop is set to default value [1] Safe Stop Alarm, verify that the motor is not started automatically and restarts only by giving a reset signal via bus, digital I/O, or [Reset] key.

Application Examples

SISTEMA Data
SISTEMA (Safety Integrity Software Tool for the Evaluation of Machine Applications) is a software utility that provides developers and testers of safety-related machine controls with comprehensive support in the evaluation of safety in the context of ISO 13849-1. Functional safety data are available from a data library for use with the SISTEMA calculation tool from the ISA (Institute for Occupational Safety and Health of the German Social Accident Insurance), and data for manual calculation. SISTEMA is available for download at www.danfoss.com in the Service and support/downloads sections.

Emergency Stop of Drive with STO – Category 1, PL c, SIL1

Illustration 2: Application Example, Emergency Stop with STO, Category 1, PL c, SIL1

  1. Emergency stop button.
  2. Short-circuit protected cable (if not inside installation IP54/NEMA 12 cabinet). See ISO 13849-2, table D4 for further information.

Safety function
If there is an emergency, the emergency stop device is activated. The STO function of the drive is activated. Following a stop or emergency stop command, the drive is halted.

Design features

  • The circuit can be used up to Category 1, PL c (ISO 13849-1) or SIL1 (EN 62061 and IEC 61508).
  • The STO function is activated via 1 NC positively operated switch contact (according to IEC 60947-1, IEC 60947-5-1, and IEC 60947-5-5).
  • The PL c, the complete safety functions have to be calculated (MTTFd).
  • Use the basic safety principles.
  • Devices used for activation of STO must be suitable for the selected Category, PL, or SIL.

When implementing the emergency stop, pay attention to the following tips:

  • Any non-safety-related standards should be fulfilled for the application and its components.
  • The application designer is responsible for selecting suitable components.
  • The cable shown in bold in Illustration 2 has to be short-circuit protected according to ISO 13849-2 Table D.4.
  • To fulfil PL c, the MTTFd and DC for the whole safety function have to be calculated.
  • The B10d value of the emergency stop device shall be known. The B10d value has to be high enough to fulfil MTTFd corresponding to PL c.

Implementation in SISTEMA using Danfoss VLT library
As an example, use the subsystem “VLT® AutomationDrive EZ FC 321 (Terminal 37)”. It is not necessary to edit all the parameters which are set in the library.

Emergency Stop of Drive with STO Using Safety Relay – Category 3, PL d, SIL2

Danfoss-AQ355238304444-Automation-Drive-Fig- \(4\)

Illustration 4: Installation Example Achieving a Stop Category 0 (EN 60204-1) with Safety Cat. 3/PL “d” (ISO 13849-1) or SIL2 (EN 62061 and IEC 61508)

  1. Safety relay (Category 3, PL d, SIL 2)
  2. Emergency stop button
  3. Reset button
  4. Short-circuit protected cable (if not inside installation IP54/NEMA 12 cabinet). See ISO 13849-2, Table D.4 for further information.

Safety function
If there is an emergency, the emergency stop device is activated. The STO function of the drive is activated. Following a stop or emergency stop command, the drive is halted.

Design features

  • The circuit can be used up to Category 3, PL d (ISO 13849-1) or SIL2 (EN 62061 and IEC 61508).
  • For PL d, the complete safety functions have to be calculated (MTTFd).
  • Use the basic safety principles.
  • The device used for activation of STO and safety relay must be suitable for the selected category PL and SIL.

When implementing the emergency stop, pay attention to the following tips:

  • Any non-safety-related standards should be fulfilled for the application and its components.
  • The application designer is responsible for selecting suitable components.
  • The cable shown in bold in Illustration 4 has to be short-circuit protected according to ISO 13849-2 Table D.4.
  • To fulfil PL d, the MTTFd and DC for the whole safety function have to be calculated.

This setup can be used if a dual positive switching device is used. Depending on the safety relay, it is also possible to connect several activation devices to 1 STO.

Implementation of SISTEMA using Danfoss VLT library
As an example, use the subsystem “VLT® AutomationDrive EZ FC 321 Safe Torque Off (Terminal 37)”. It is not necessary to edit all the parameters which are set in the library.

Illustration 5: Safety-related Block Diagram

Emergency Stop of Drive with STO, Safety Relay, and Output Contactor – Category 4, PL e, SIL3

Danfoss-AQ355238304444-Automation-Drive-Fig- \(6\)

Illustration 6: Drive with STO, Safety Relay, and Output Contactor, Category 4, PL e, SIL3

  1. Safety relay (Category 4, PL e, SIL 3)
  2. Emergency stop button
  3. Reset button
  4. Short-circuit protected cable (if not inside installation IP54/NEMA 12 cabinet). See ISO 13849-2, Table D.4 for further information.

Safety function
If there is an emergency, the emergency stop device is activated. The STO function in the drive is activated. Following a stop or emergency stop command, the drive is halted.

Where the safety control system must be under PL e ISO 13849-1 or SIL3 (EN 62061 and IEC 61508), it requires a 2-channel stop for the STO function. One channel can be implemented by the STO input on the drive and the other by a contactor, which may be connected to either the drive input or output power circuits. The contractor must be monitored through an auxiliary guide contact, shown as K1 in Illustration 6.

Design features

  • The circuit can be used up to category 4 and PL e.
  • For PL e, the complete safety functions have to be calculated (MTTFd).
  • Use basic safety principles.
  • A device used for activation of STO and safety relay must be suitable for the selected category, PL or SIL.

When implementing the emergency stop, pay attention to the following tips:

  • Any non-safety-related standards should be fulfilled for the application and its components.
  • The application designer is responsible for selecting suitable components.
  • The cable shown in bold in Illustration 6 has to be short-circuit protected according to ISO 13849-2, table D.4.
  • To fulfil PL e, the MTTFd and DC for the entire safety function have to be calculated.

This setup can be used if a dual positive switching device is used.

Implementation in SISTEMA using Danfoss VLT library
As an example, use the block “VLT® AutomationDrive EZ FC 321 (Terminal 37)”. It is not necessary to edit all the parameters which are set in the library.

Illustration 7: Safety-related Block Diagram

Emergency Stop of Multiple Drives – Category 3, PL d, SIL2

Danfoss-AQ355238304444-Automation-Drive-Fig- \(8\)

Illustration 8: Multiple Drives with Category 3, PL d, SIL2

  1. Safety relay (Category 3, PL d, or SIL2)
  2. Emergency stop button
  3. Reset button
  4. Short-circuit-protected cable (if not inside an installation IP54/NEMA 12 cabinet). See ISO 13849-2, Table D.4 for further information.

Safety function

  • If there is an emergency, the emergency stop device is activated. The STO function in the drive is activated. Following a stop or an emergency stop command, the drive is halted.
  • If it is required to control multiple drives from the same control line, the STO inputs may be interconnected directly.
  • Connecting the inputs increases the probability of a fault in the unsafe direction since a fault in 1 drive may result in all drives becoming enabled. However, the probability of a fault is so low, at 1 x 10-10 per hour, that the resulting probability still meets the requirement for SIL2 for a realistic number of drives. Do not connect more than 20 inputs in parallel.

NOTICE
When using an internal 24 V DC supply (terminal 12), the number of parallel inputs (terminal 37) is limited to 3, otherwise, the available output power is exceeded.

Design features

  • The circuit can be used up to Category 3, PL d, or SIL2.
  • For PL d, the complete safety functions have to be calculated (MTTFd).
  • Use basic safety principles.
  • A device used for activation of STO and safety relay must be suitable for the selected category, PL or SIL.

When implementing the emergency stop, pay attention to the following tips:

  • Any non-safety-related standards should be fulfilled for the application and its components.
  • The application designer is responsible for selecting suitable components.
  • The cable shown in bold in Illustration 8 has to be short-circuit protected according to ISO 13849-2, table D.4.
  • To fulfil PL d, the MTTFd and DC for the entire safety function have to be calculated.

Implementation in SISTEMA using Danfoss VLT library
As an example, use the subsystem “VLT® AutomationDrive EZ FC 321 Safe Torque Off (Terminal 37)”. It is not necessary to edit all the parameters which are set in the library. Put the subsystem into the safety function as often as the number of drives that are present on the single STO line.

Danfoss-AQ355238304444-Automation-Drive-Fig- \(9\)

Illustration 9: Safety-related Block Diagram.

STO Technical Data

Notices Regarding Technical Data

NOTICE
For technical specifications and operating conditions for the drive, refer to the Operating Guide of the relevant drive.

NOTICE
The STO signal must be SELV or PELV supplied.

European Directives

  • Machinery Directive (2006/42/EC) EN ISO 13849-1, EN IEC 61800-5-2
  • EMC Directive (2014/30/EU) EN 50011, EN 61000-6-3, EN 61800-3
  • Low Voltage Directive (2014/35/EU) EN 50178, EN 61800-5-1

Safety Standards

  • Safety of Machinery EN ISO 13849-1, IEC 60204-1
  • Functional Safety IEC 61508-1 to -7, IEC 61800-5-2

Safety Function

  • Safe Torque Off (STO) IEC 61800-5-2
  • Stop Category 0 IEC 60204-1

Safety Performance

ISO 13849-1

  • Category Cat 3
  • Diagnostic coverage DC: 90% (Medium)
  • Mean time to dangerous failure MTTFd: 100 years (high)
  • Performance level PL d

IEC 61508

  • Safety integrity level SIL2
  • Probability of dangerous failure per hour PFH: 1E-10/h; 1E-8/h for specific variants (High Demand Mode)
  • Probability of dangerous failure on demand PFD: 1E-10; 1E-4 for specific variants (Low Demand Mode)
  • Subsystem classification Type A
  • Proof test interval T1 20 years
  • Mission time TM 20 years

Reaction time
Input to output response time Maximum 20 ms, 60 ms for specific variants

Abbreviations

Table 2: Abbreviations Related to Functional Safety

Abbreviations

| Reference|

Description

---|---|---
B10d|  | Number of cycles until 10% of the components have a dangerous failure (for pneumatic and electromechanical components).
Cat.| EN ISO 13849-1| Category, level “B, 1–4”
CCF|  | Common cause failure
DC|  | Diagnostic coverage is divided into Low, Medium, and High.
FIT|  | Failure in time: 1E-9/hour
MTTFd| EN ISO 13849-1| Mean time to failure – dangerous. Unit: Years are divided into Low, Medium, and High.
PFH| EN IEC 61508| Probability of dangerous failures per hour. Consider this value if the safety device is operated in high demand or continuous mode of operation, where the frequency of demands for operation made on a safety- related system is greater than 1 per year.
PFD| EN IEC 61508| The average probability of failure on demand, value used for low demand operation.
PL| EN ISO 13849-1| The discrete level is used to specify the ability of safety-related parts of control systems to perform a safety function under foreseeable conditions. Levels are divided into a to e.
PLr|  | Required performance level (the required performance level for a particular safety function).
SIL| EN IEC 61508| Safety integrity level
STO| EN IEC 61800-5-2| Safe Torque Off
SS1| EN IEC 61800-5-2| Safe Stop 1
SRECS| EN IEC 62061| Safety-related electrical control system
SRP/CS| EN ISO 13849-1| Safety-related parts of control systems
PDS/SR| EN IEC 61800-5-2| Power Drive System (safety-related)

Conventions

  • Numbered lists indicate procedures.
  • Bulleted and dashed lists indicate listings of other information where the order of the information is not relevant.
  • Bolded text indicates highlighting and section headings.
  • Italicized text indicates the following:
    • Cross-reference.
    • Link.
    • Footnote.
    • Parameter name.
    • Parameter option.
    • Parameter group name.
    • Alarms/warnings.
  • All dimensions in drawings are in metric values (imperial values in brackets).
  • An asterisk (*) indicates the default setting of a parameter.

Danfoss A/S

Danfoss can accept no responsibility for possible errors in catalogues, brochures, and other printed material. Danfoss reserves the right to alter its products without notice. This also applies to products already on order provided that such alterations can be made without subsequential changes being necessary in specifications already agreed. All trademarks in this material are the property of the respective companies. Danfoss and the Danfoss logotype are trademarks of Danfoss A/S. All rights reserved.

Danfoss A/S © 2022.11.

References

Read User Manual Online (PDF format)

Read User Manual Online (PDF format)  >>

Download This Manual (PDF format)

Download this manual  >>

Related Manuals