Banner SC22-3E Safety Controller with Ethernet Manual de usuario

SC22-3/-3E Safety Controller Instruction ManualP/N 133487 rev. C -- 10/7/2010Original Instructions

2.2 ApplicationsThe Safety Controller can be used wherever safety modules areused. The Safety Controller is well suited to address many types ofapplic

cause the response time to increase based on the debounce time.In this situation, the response time could be longer than specified,based on the (selec

The installation of the hand controls must consider:• Failure modes that would result in a short circuit, a broken spring(s), mechanical seizure, etc.

Ds = the separation (safety) distance in inchesS = the minimum safety distance in millimetersK = OSHA/ANSI and ISO 13855 hand speed constant of 1600mm

Dual-Channel (PNP device): This circuit is a Type IIIa Two-HandControl circuit as described by ISO 13851, and typically can meetISO 13849-1 (EN 954-1)

Do not use safety mats as a tripping device to initiate machine motion (such as in a presence-sensing device initiationapplication), due to the possib

This circuit typically can meet ISO 13849-1 category 2 or category3 requirements depending on the safety rating and installation ofthe mat(s) or other

Formula for U.S. Installations Formula for EU-Certified InstallationsThe formula used to calculate separation (safety) distance (Ds) is:Ds = K x ( Ts

The Safety Controller Emergency Stop configuration prevents muting or bypassing of the E-Stop input(s). However,the user still must ensure that the E-

Category 2 E-Stop CircuitA single-channel emergency stop application typically provides aCategory 2 level of circuit performance, because a short circ

Dual-Channel (2 or 3 terminals): This circuit typically can meetISO 13849-1 Category 3 requirements, depending on the designand installation of the sw

Hard drive space: 100 MB (plus up to 280 MB for Microsoft .NET 2.0, if not already installed)Third-party software: Microsoft .NET 2.0, included and in

SC22-3/-3E Safety Controller Instruction Manual110 www.bannerengineering.com - tel: 763-544-3164 P/N 133487 rev. C

10.8.2 Rope Pull Hookup OptionsThe device is shown in the armed (Run) state.Single-Channel (1 terminal, 2 terminals or PNP device): Thesecircuits can

10.9 Enabling Device An enabling device is a manually operated control that, when continuously actuated, will allow a machine cycle to be initiated in

Dual-Channel (2 or 3 terminals): This circuit typically can meetISO 13849-1 Category 2 or Category 3 requirements, dependingon the safety rating and i

2x Complementary (PNP device): This circuit can meet ISO13849-1 category3 or category 4 requirements depending on thedesign and installation of the en

Safe work procedures provide a means for individuals to control exposure to hazards through the use of written procedures for specifictasks and the as

Complementary (PNP device): This circuit can meet ISO13849-1 category 2, 3, or 4 requirements depending on the safetyrating and the installation of th

WARNING: . . . Muting LimitationsMuting is allowed only during the non-hazardous portion of the machine cycle.A muting application must be designed so

The user has the responsibility to satisfy all local, state, and national laws, rules, codes, and regulations relating to the use ofsafety equipment i

Dual-Channel (4 terminals): This circuit can meet ISO 13849-1category 2, 3, or 4 requirements depending on the installation ofthe mute device(s). This

The XM card can be used to:• Keep a backup copy of the Safety Controller’s configuration (to minimize downtime in the case of a hardware failure that

Lamp monitoring must be selected if the application requires compliance with UL 61496.10.11.6 Muting Time Limit (Backdoor Timer)The muting time limit

For example, in an entry/exit application where a pallet initiates the mute cycle by entering a cell, if both the entry and the exit PSSDs aremuted, i

10.11.10 Mute Timing SequencesSafety Light ScreenMute EnableMute Sensor 1Mute Sensor 2Backdoor TimerSafety OutputMax.TimeMax.TimeMax.TimeMax.Time< 

Power2-Hand InputsMute EnableMute Sensor 1Mute Sensor 2Backdoor TimerSafety OutputMax.TimeMax.TimeMax.TimeMax.Time< 3s< 3s < 3s< 3sMute cy

11 Ethernet ReferenceInformation on Ethernet functionality can also be found in the following sections of this manual:2.1 Ethernet-Compatible Model on

• Instance ID 102 (0x66) with a size (data length) of one hundred forty 16-bit words. Instance ID 102 is used to access fault log infor-mation (it pro

6. Access the data in the Fault Index Table file using the Fault Index number. The data in the file provides a specific fault number, ashort fault des

3 Normal Operating Mode (including if I/O faults are present)4 Configuration Mode5 Waiting for System Reset (exiting Configuration Mode)6 System Locko

12 GlossaryThe following terms are used in this manual. Where possible, definitions are from the U.S. and international product performance stand-ards

Diverse-redundancy:The practice of using components, circuitry or operation of different designs, architectures or functions to achieve redundan-cy an

Legend:1. Moves cursor to the left or selects settings.2. Moves cursor to the pre-established point in the program to re-establisha menu reference poi

Run Signal:The input signal monitored by the Controller that, when detected, causes one or more Safety Outputs to turn ON, if theirother associated in

Accessing Fault CodesFault codes are displayed in the last line of the OBI fault diagnosticsmenu (see example at right). Refer to OBI Configuration an

PCI Software CompatibilityTo identify the version of your PCI software (i.e., PC Interface), click on the "Help" tab located on the top tool

2.6.2 Safety OutputsThe Safety Outputs are designed to control final switching devices (FSDs) and machine primary control elements (MPCEs) that are th

2.6.3 Status OutputsThe Safety Controller has 10 configurable Status Outputs, used to send non-safety status signals to programmable logic controllers

WARNING: . . . Virtual Status OutputsThe Virtual Status Outputs are not Safety Outputs and can fail in either the ON or the OFF state. They must never

• All Safety Outputs will turn ON immediately if the inputs that are mapped to these outputs are all in the Run state.• Exception: Two-hand control in

Contents1 About This Document ...61.1 Important

2.8.1 Additional Logic FunctionsOther logic functions are slight variations of the general AND logic rule set.• Two-Hand Control: The machine initiati

3 Components and SpecificationsTo order the Safety Controller ready for use, order it as part of a kit(see following table). It also can be ordered al

3.3 Ethernet CordsetsShielded Models Cat5e Crossover Models LengthSTP07 STPX07 2.1 mSTP25 STPX25 7.6 mSTP50 STPX50 15.5 mSTP75 STPX75 23 m3.4 Interfac

Model Supply Voltage Inputs Outputs Output Rating11-BG00-31-D02424V dc 2 (dual-channel hookup) 3 N.O. and 1 N.C.10 amps11-BF18C01-024 18 amps3.5 Speci

Recovery Time (OFF to ON): 400 ms max. (with manual reset option)Recovery Time (OFF to ON): 400 ms max. plus input debounce time (auto reset)Onboard L

ISO 13849-1 (2006): Category 4 Performance Level (PL) e, complies with Machinery Directive 2006/42/ECIEC 61131-2 Programmable Controllers, Part 2: Equ

4 System Installation4.1 Appropriate ApplicationThe correct application of the Safety Controller is dependent on the type of machine and the safeguard

The user has the sole responsibility to ensure that this Safety Controller is installed and interfaced to the guarded machine byQualified Persons (see

SO1 SO2 SO3SafetyOutputsInputs S1...S112 x 24V dc (A1)Inputs S12...S222 x 0V dc (A2)0V dc (A2)O1...O10 Status OutputsSyste

Circuit Types: Contact and Solid State CircuitsThe table below depicts many of the input devices and circuit types the Controller can monitor. It high

4.5.1 Reset Signal Requirements ...344.5.2 Automa

Signal Change-of-State TypesTwo change-of-state (COS) types can be used when monitoring dual-channel safety input device signals: Simultaneous or Conc

CAUTION: . . . Debounce and ResponseAny changes in the closed-to-open debounce time will affect the Safety Output response (turn OFF) time. This value

Cancel OFF-Delay Devices. This feature provides the option to cancel a configured OFF-delay time. It functions in one of two ways:• Keeps the Safety O

Manual Safety Input(s)Latch Reset Input(Monitored Reset Shown)Cancel Delay Input(Monitored Option Shown)Safety OutputStatus Output(OK to Cancel OFF-De

area unnoticed (a "pass-through hazard"). See section 4.5.3 Perimeter Guarding and Pass-Through Hazards on page 35 for more in-formaton.WARN

Safety Device 1Manual Monitored ResetSafety Device 2Manual Monitored ResetManual ResetSafety OutputFigure 16. Timing logic: Safety Outputs with a comm

4.6.2 Two-Hand Control (THC)The two-hand control function requires that two hand actuators (e.g., hand/palm buttons) each be activated within 0.5 seco

Enable DeviceSafety DeviceSafety Output(ON-Delayed)System ResetEnable ModeON- DelayON- DelayON- DelayON-DelayON-DelayON-DelayDon’t Care*Don’t Care*Don

Directional Muting. As soon as two mute sensor pairs are configured and mapped to a muteable Safety Input, an advanced settingoption appears in the PC

Bypass Time Limit. A bypass function time limit can be established to limit how long the safety input device bypass is active. The timelimit can be ad

8.2.1 Verifying System Operation ...768.3 Initial

CAUTION: . . . Adjustable Valve Monitoring (AVM) OperationWhen an input is configured with automatic reset logic and is quickly cycled (from Run to St

+24V dcMPCE 1SO 1MPCE1Safety InputDeviceEDMSafety ControllerMPCE 2MPCE2Single-channel EDM used to monitor both MPCE feedback signals. If one or both c

OSSD Output ConnectionsThe output signal switching device (OSSD) outputs must be connected to the machine control such that the machine’s safety relat

WARNING: . . . Safety Output Lead ResistanceIn order to ensure proper operation, the resistance in the Safety Output wires should not exceed 10 ohms.

• Properly installing multi-conductor cabling and multiple wires that pass through strain-relief fittings. Over-tightening of a strain-reliefcan cause

Generic Hookup: 1-channel, 2-channel, and No EDM OptionsThe following figure is generic in nature and represents all three EDM options:• Safety Output

One-Channel EDM Hookup to SC-IM9A Interface ModuleThe SC-IM9A interface module depicted in the following figure is shown in one-channel EDM hookup. Th

Two-Channel EDM Hookup to IM-T-9A Interface ModuleThe IM-T-9A interface module depicted in the following figure is shown in two-channel EDM hookup. Th

One-Channel EDM Hookup to IM-T-9A Interface ModuleThe IM-T-9A interface module depicted in the following figure is shown in one-channel EDM hookup. Th

4.7.4 Common Wire InstallationTo avoid nuisance lockout codes 1.1, 1.2, or 1.5, give thoughtful consideration to the leadwire resistance of the 0V com

10.11.8 Corner Mirrors, Optical Safety Systems, and Muting ...12010.11.9 Multiple Presence-Se

4.8 Status Outputs4.8.1 Status Output Signal ConventionsTwo signal conventions are selectable for each Status Output. The default convention provides

4.8.2 Status Output FunctionalityTrack InputA Status Output configured for this function will indicate the current state of an input.Track OutputA Sta

Bypass StatusStatus Outputs configured for this function will indicate when an input is truly bypassed. A Safety Input is required to be determinedina

5 PC Interface Configuration (PCI)5.1 PC Interface (PCI) OverviewThe PC Interface (PCI) is a computer program with real-time display and diagnostic to

5.1.2 Build a ConfigurationTo install the software on your computer, double-click on the Banner Safety Controller icon . Read and understand the warn

Create a New ConfigurationOpen the software program, and a new un-named file is created. You may name the Configuration and the Author, and establish

Select the Input Device PropertiesAfter an input device is selected, the Properties menu for that device pops up. This menu presents the properties th

Figure 39. Wiring diagram populates with devices and output mappingFigure 40. Ladder logic diagram develops along with wiring diagramFinish the Config

Save and Confirm the ConfigurationYou will need to confirm this new configuration before it can be used in a safeguarding application. A 4-digit Contr

Figure 42. Confirm Configuration screen, all devices confirmed by user (checklist is compressed)If the columns do not match, or if you wish to change

1 About This Document1.1 Important . . . Read This Before Proceeding!It is the responsibility of the machine designer, controls engineer, machine buil

5.1.4 Other FunctionsReceive a Configuration from the Safety ControllerTo receive a configuration from a Controller and display it in the PCI:• Connec

Changing the Password Using the Personal Computer Interface (PCI)For this procedure, the PC must be connected to the Controller viaUSB cable, and the

6 Onboard Interface Configuration (OBI)6.1 Onboard Interface (OBI) OverviewThe Safety Controller’s onboard interface (OBI) consists of a display and s

System MenuConfirm Safety OutputsEdit PasswordSet LanguageSystem SettingsTerminal AssignmentsInput/Output MappingStatus Output SettingsSafety Outputs

6.2 Run ModeFrom Run mode, press OK to view the System menu. This menu provides the ability to read fault diagnostic information, enter Configura-tion

To perform an Erase, use the up/down arrows to select the option from the menu and press OK. When prompted whether you want todo this, highlight Yes a

The Confirm Configuration menu reappears, indicating whether the inputs and Safety Outputs are confirmed. If any boxes do not have acheck mark, repeat

properties; select each property (in the same way used to define the input initially; see section 6.5 Add an Input on page 68), and pressOK.The Inputs

2. To save the settings for this output, select <Done> and press OK. The display returns to the Outputs/System Settings menu. Toconfigure additi

• Cancel OFF-delay switchSelect an Input Device (Either Safety or Non-Safety)—Use the left/right arrows to selectthe proper device, then press OK. The

1.3 Standards and RegulationsThe list of standards below is included as a convenience for users of this Banner product. Inclusion of the standards bel

Map Outputs—This option is used to select which of the Safety Output(s) the input controls. Any combination of 1, 2, or all 3 outputsmay be selected,

7 Operating Instructions7.1 Monitoring Controller OperationThe Safety Controller can be operated using either the OBI or the PCI interfaces to monitor

7.3.1 Run Mode Screen—OBIThe OBI Run mode screen displays current information about the Safety Controller, including:• The configuration name• Safety

• If more than one output is OFF, a small arrowhead indicates the Safety Output to which the input messages correspond, as shown inthe preceding figur

7.5 System Resets and Lockout ConditionsA system reset is necessary under the following conditions:• Recovering from a lockout condition• Starting the

8 System Checkout8.1 Schedule of Required CheckoutsVerifying the configuration and proper functioning of the Safety Controller includes the verificati

8.2.1 Verifying System OperationThe commissioning checkout procedure must be performed by a Qualified Person, as defined in the glossary of this manua

e. Examine the electrical wiring connections between the Safety Controller’s OSSD outputs and the guarded machine’s controlelements to verify that the

11. While the outputs are ON, individually actuate and re-arm each E-stop and/or rope-pull device, one device at a time.Verify that each associated Sa

a. Turn the Safety Controller power OFF.a. Activate the mute enable inputs (if used).b. Activate an appropriate muting sensor pair for starting a mute

ISO 13851 (EN 574) Two-Hand Control Devices – Functional As-pects – Principles for DesignISO 62061 Functional Safety of Safety-Related Electrical, Ele

Before connecting the mat to the Safety Controller, verify that the mat and the wiring to the mat does not exceed the maximumresistance specification

• If the Safety Input is configured for auto reset: Verify that the delayed safety output turns OFF immediately for 500 ms,then turns back ON.23. Enab

9 Troubleshooting9.1 CleaningDisconnect power to the Controller and wring out excessive moisture from the cloth before cleaning.If cleaning of the pol

9.3.1 Troubleshooting Fault CodeTableFaultCodeDisplayedMessageAdditionalMessageFurther Steps and Checks0.0 Input Fault Cycle Input• Check for unstable

FaultCodeDisplayedMessageAdditionalMessageFurther Steps and Checks• The AVM may be disconnected; check the wiring.• Perform a System Reset to clear th

FaultCodeDisplayedMessageAdditionalMessageFurther Steps and Checks2.19 Open LeadCheck Terminalxx• Check for open lead.2.20 Input FaultCheck Terminalxx

FaultCodeDisplayedMessageAdditionalMessageFurther Steps and Checks4.1Supply VoltageLowCheck PowerSupplyThe supply voltage dropped below the rated volt

9.5 Fault Diagnostics—PCIThe first step in diagnosing faults via the PCI is to bring up the Live Display screen (see section 7.2 Display Controller In

9.6 Fault Diagnostics—OBITroubleshooting the Controller and connected I/O devices is easy using the Onboard Interface. Any event that causes a Safety

9.6.2 View Fault Log—OBIThe Safety Controller keeps a record of the last ten faults that have occurred. The faults are viewable from the View Fault Lo

2 OverviewNOTE: This section of this document provides a high-level discussion of the Banner models SC22-3 / SC22-3E Safety Controller, toacquaint the

10 Input Device and Safety Category ReferenceFor ease in finding information about them, the specific device types discussed are presented in the foll

The following sections deal only with Category 2, Category 3, and Category 4 applications, as described by ISO 13849-1 (1999). Thefollowing figure pro

WARNING: . . . Input Devices with Solid State OutputsThe Safety Controller will not detect shorts between inputs or from an input to +24V, if the inpu

Fault Exclusion must be used to achieve a higher level of safetycircuit integrity.Dual-Channel (2 or 3 terminals): This circuit typically can meetISO

The safety performance (integrity) must reduce the risk from identified hazards as determined by the machine’s risk assessment. Seesection 10.1 Safety

The switch and its magnet must be mounted a minimum distance from any magnetized or ferrous materials for proper operation. If eitherthe switch or mag

Category 3 Interlocked Guard CircuitA dual-channel hookup switching +24V dc is typically a Category 3application, because a single failure does not re

Dual-Channel (2 or 3 terminals): This circuit typically can meetISO 13849-1 Category 2 or Category 3 requirements, dependingon the safety rating and i

2x Complementary (4 or 5 terminals): This circuit can meet ISO13849-1 category 4 requirements, depending on the safety ratingand the installation of t

WARNING: . . . Incomplete InformationMany installation considerations necessary to properly applying these devices are not covered by this document. R