Safety With S7 1200FCPU V12 en

Application Examples  12/2015
Safety Applications with the

S7-1200 FC CPU
STEP 7 Safety V13 SP1 (TIA Portal)
https://support.industry.siemens.com/cs/ww/en/view/109478932
Warranty and Liability
Warranty and Liability

Note The Application Examples are not binding and do not claim to be complete
regarding the circuits shown, equipping and any eventuality. The Application
Examples do not represent customer-specific solutions. They are only intended
to provide support for typical applications. You are responsible for ensuring that
the described products are used correctly. These Application Examples do not
relieve you of the responsibility to use safe practices in application, installation,
operation and maintenance. When using these Application Examples, you
recognize that we cannot be made liable for any damage/claims beyond the
liability clause described. We reserve the right to make changes to these
Application Examples at any time without prior notice. If there are any deviations
between the recommendations provided in this Application Example and other
Siemens publications – e.g. Catalogs – the contents of the other documents shall
have priority.
We do not accept any liability for the information contained in this document.
Any claims against us – based on whatever legal reason – resulting from the use of
the examples, information, programs, engineering and performance data etc.,
described in this application example shall be excluded. Such an exclusion shall
not apply in the case of mandatory liability, e.g. under the German Product Liability
Act (“Produkthaftungsgesetz”), in case of intent, gross negligence, or injury of life,
body or health, guarantee for the quality of a product, fraudulent concealment of a
deficiency or breach of fundamental contractual obligations (“wesentliche
 Siemens AG 2015 All rights reserved
Vertragspflichten”). The damages for a breach of a substantial contractual

obligation are, however, limited to the foreseeable damage, typical for the type of
contract, except in the event of intent or gross negligence or injury to life, body or
health. The above provisions do not imply a change of the burden of proof to your
detriment.
Any form of duplication or distribution of these Application Examples or excerpts
hereof is prohibited without the expressed consent of Siemens AG.
Security Siemens provides products and solutions with industrial security functions that
informati support the secure operation of plants, solutions, machines, equipment and/or
on networks. They are important components in a holistic industrial security
concept. With this in mind, Siemens’ products and solutions undergo continuous
development. Siemens recommends strongly that you regularly check for
product updates.
For the secure operation of Siemens products and solutions, it is necessary to
take suitable preventive action (e.g. cell protection concept) and integrate each
component into a holistic, state-of-the-art industrial security concept. Third-party
products that may be in use should also be considered. For more information
about industrial security, visit http://www.siemens.com/industrialsecurity.
To stay informed about product updates as they occur, sign up for a product-
specific newsletter. For more information, visit
http://support.industry.siemens.com/.
Safety with S7-1200 FC CPU

Entry ID: 109478932, V1.2, 12/2015 2
Table of Contents
Table of Contents
Warranty and Liability ................................................................................................. 2
1 How to Use this Document ............................................................................... 9
2 Why Safety with the S7-1200 F-CPU? .............................................................. 9
3 Description of an Automation Task ............................................................... 10
4 PL and SIL ........................................................................................................ 11
4.1 Achieving PL c/SIL 1 .......................................................................... 12
4.1.1 Interconnection examples .................................................................. 12
4.1.2 Settings in the STEP 7 hardware configuration ................................. 13
4.2 Achieving PL d/SIL 2 .......................................................................... 15
4.3 Achieving PL e/SIL 3 .......................................................................... 18
5 Prepared User Scenarios ................................................................................ 20
6 Solution for the User Scenarios ..................................................................... 23
6.1 What applies to all user scenarios ..................................................... 23
6.1.1 Installing the user scenario................................................................. 23
6.1.2 Interlocking mechanisms for safety doors with guard locking ............ 26
6.1.3 Program structure ............................................................................... 29

6.1.4 Brief description of the F-library blocks .............................................. 30
6.1.5 Passivation and reintegration ............................................................. 32
6.1.6 Value status ........................................................................................ 33
6.1.7 Notes on the electric actuators ........................................................... 34
6.2 User Scenario 1: Emergency Stop at PL e/SIL 3,
Electromechanical Actuator................................................................ 34
6.2.1 Safety function .................................................................................... 34
6.2.2 Hardware and software components ................................................. 34
6.2.3 Wiring ................................................................................................. 35
6.2.4 Brief description of the core functionality ........................................... 37
6.2.5 Description of the user block FB F100EStopSIL3PLe ....................... 37
6.2.6 Configuration and parameterization ................................................... 39
6.2.7 Operation of the user scenario ........................................................... 40
6.3 User Scenario 2: Emergency Stop at PL d/SIL 2,
6.3.1 Safety function .................................................................................... 41
6.3.3 Wiring ................................................................................................. 42
6.3.5 Description of the user block FB F02EStopSIL2PLd ......................... 43
6.4 User Scenario 3: Emergency Stop at PL c/SIL 1,
6.4.1 Safety function .................................................................................... 47
6.4.3 Wiring ................................................................................................. 48
6.4.5 Description of the user block FB F03EStopSIL1PLc ......................... 49

Entry ID: 109478932, V1.2, 12/2015 3
Table of Contents
6.5 User Scenario 4: Emergency Stop at PL e/SIL 3, Electric

Actuator .............................................................................................. 53
6.5.1 Safety function .................................................................................... 53
6.5.3 Wiring ................................................................................................. 54
6.5.5 Description of the user block FB F04EStopSIL3PLe ......................... 55
6.6 User Scenario 5: Emergency Stop at PL d/SIL 2, Electric
Actuator .............................................................................................. 58
6.6.1 Safety function .................................................................................... 58
6.6.3 Wiring ................................................................................................. 58
6.6.5 Description of the user block FB F05EStopSIL2PLd ......................... 60
6.7 User Scenario 6: Emergency Stop at PL c/SIL 1, Electric
Actuator .............................................................................................. 63
6.7.1 Safety function .................................................................................... 63
6.7.3 Wiring ................................................................................................. 64
6.7.5 Description of the user block FB F06EStopSIL1PLc ......................... 65

6.8 User Scenario 7: Safety Door without Guard Locking at PL
e/SIL 3, Electromechanical Actuator .................................................. 68
6.8.1 Safety function .................................................................................... 68
6.8.3 Wiring ................................................................................................. 69
6.8.5 Description of the user block FB F07FDoorSIL3PLe ......................... 71
d/SIL 2, Electromechanical Actuator .................................................. 74
6.9.1 Safety function .................................................................................... 74
6.9.3 Wiring ................................................................................................. 75
6.9.5 Description of the user block FB F08FDoorSIL2PLd ......................... 77
c/SIL 1, Electromechanical Actuator .................................................. 80
6.10.1 Safety function .................................................................................... 80
6.10.3 Wiring ................................................................................................. 81
6.10.5 Description of the user block FB F09FDoorSIL1PLc ......................... 83
e/SIL 3, Electric Actuator .................................................................... 86
6.11.1 Safety function .................................................................................... 86

Entry ID: 109478932, V1.2, 12/2015 4
Table of Contents
6.11.3 Wiring ................................................................................................. 87

6.11.5 Description of the user block FB F10FDoorSIL3PLe ......................... 89
d/SIL 2, Electric Actuator .................................................................... 92
6.12.1 Safety function .................................................................................... 92
6.12.3 Wiring ................................................................................................. 93
6.12.5 Description of the user block FB F11FDoorSIL2PL ........................... 95
c/SIL 1, Electric Actuator .................................................................... 98
6.13.1 Safety function .................................................................................... 98
6.13.3 Wiring ................................................................................................. 99
6.13.4 Brief description of the core functionality ......................................... 100
6.13.5 Description of the user block FB F12FDoorSIL1PLc ....................... 101
6.13.6 Configuration and parameterization ................................................. 102
6.13.7 Operation of the user scenario ......................................................... 103
6.14 User Scenario 13: Safety Door with Guard Locking at PL e/SIL
3, Electromechanical Actuator ......................................................... 104
6.14.1 Safety functions ................................................................................ 104

6.14.2 Hardware and software components ............................................... 104
6.14.3 Wiring ............................................................................................... 105
6.14.5 Description of the user block FB F13FDoorSIL3PLe ....................... 108
6.15 User Scenario 14: Safety Door with Guard Locking at PL d/SIL
6.15.1 Safety function .................................................................................. 112
6.15.3 Wiring ............................................................................................... 113
6.15.5 Description of the user block FB F14FDoorSIL2PLd ....................... 116
6.16 User Scenario 15: Safety Door with Guard Locking at PL c/SIL
6.16.1 Safety function .................................................................................. 120
6.16.3 Wiring ............................................................................................... 121
6.17 User Scenario 16: Safety Door with Guard Locking at PL e/SIL
3, Electric Actuator ........................................................................... 128
6.17.1 Safety function .................................................................................. 128
6.17.3 Wiring ............................................................................................... 129
6.17.5 Description of the user block FB F16FDoorSIL3PLe ....................... 132

Entry ID: 109478932, V1.2, 12/2015 5
Table of Contents

6.18 User Scenario 17: Safety Door with Guard Locking at PL d/SIL
6.18.1 Safety function .................................................................................. 136
6.18.3 Wiring ............................................................................................... 137
6.18.5 Description of the user block FB F17FDoorSIL2PLd ....................... 140
6.19 User Scenario 18: Safety Door with Guard Locking at PL c/SIL
6.19.1 Safety function .................................................................................. 144
6.19.3 Wiring ............................................................................................... 145
6.20 User Scenario 19: Emergency Stop + Safety Door without
Guard Locking at PL e/SIL 3, Electromechanical Actuator .............. 151
6.20.1 Safety function .................................................................................. 151
6.20.3 Wiring ............................................................................................... 152
6.20.5 Description of the user block FB F19EStopFDoorSIL3PLe ............. 154

Guard Locking at PL d/SIL 2, Electromechanical Actuator .............. 158
6.21.1 Safety function .................................................................................. 158
6.21.3 Wiring ............................................................................................... 159
6.21.5 Description of the user block FB F20EStopFDoorSIL2PLd ............. 161
Guard Locking at PL c/SIL 1, Electromechanical Actuator .............. 165
6.22.1 Safety function .................................................................................. 165
6.22.3 Wiring ............................................................................................... 166
6.22.5 Description of the user block FB F21EStopFDoorSIL1PLc ............. 168
6.23 User Scenario 22: Emergency Stop and Safety Door without
Guard Locking at PL e/SIL 3, Electric Actuator ................................ 171
6.23.1 Safety function .................................................................................. 171
6.23.3 Wiring ............................................................................................... 173
Guard Locking at PL d/SIL 2, Electric Actuator ................................ 178
6.24.1 Safety function .................................................................................. 178

Entry ID: 109478932, V1.2, 12/2015 6
Table of Contents

6.24.3 Wiring ............................................................................................... 179
Guard Locking at PL c/SIL 1, Electric Actuator ................................ 184
6.25.1 Safety function .................................................................................. 184
6.25.3 Wiring ............................................................................................... 185
6.26 User Scenario 25: Emergency Stop + Safety Door with Guard
Locking at PL e/SIL 3, Electromechanical Actuator ......................... 190
6.26.1 Safety function .................................................................................. 190
6.26.3 Wiring ............................................................................................... 192
6.26.7 Implementation of the safety functions in the F-program ................. 198
Locking at PL d/SIL 2, Electromechanical Actuator ......................... 202
6.27.1 Safety function .................................................................................. 202
6.27.3 Wiring ............................................................................................... 204
Locking at PL c/SIL 1, Electromechanical Actuator ......................... 212
6.28.1 Safety function .................................................................................. 212
6.28.3 Wiring ............................................................................................... 214
6.29 User Scenario 28: Emergency Stop and Safety Door with
Guard Locking at PL e/SIL 3, Electric Actuator ................................ 221
6.29.1 Safety function .................................................................................. 221
6.29.3 Wiring ............................................................................................... 223
Locking at PL d/SIL 2, Electric Actuator ........................................... 230
6.30.1 Safety function .................................................................................. 230
6.30.3 Wiring ............................................................................................... 232

Entry ID: 109478932, V1.2, 12/2015 7
Table of Contents

Locking at PL c/SIL 1, Electric Actuator ........................................... 240
6.31.1 Safety function .................................................................................. 240
6.31.3 Wiring ............................................................................................... 242
7 References/Links ........................................................................................... 249
8 History............................................................................................................. 249

Entry ID: 109478932, V1.2, 12/2015 8
1 How to Use this Document
1 How to Use this Document

This document describes a large number of typical user scenarios from the field of
functional safety. From this variety of user scenarios, you can select (chapter 5
and the following chapters) a scenario you are particularly interested in. Therefore,
it is not necessary to read the entire document.
2 Why Safety with the S7-1200 F-CPU?

Simple stand-alone solutions
SIMATIC S7-1200 with Safety Integrated is the intelligent choice for all the
everyday standard and fail-safe automation tasks with a small project scope:
 Certified for functional safety according to EN 61508 (version 2010)
 Suitable for use in safety-related applications up to SIL 3 according to IEC
62061 and PL e according to ISO 13849
 Additional password protection for the F-configuration and F-program
F-blocks certified by TÜV are available for support. You can integrate these blocks
into your solutions. This document supports you in doing so.
Economic efficiency
As part of Safety Integrated, the S7-1200 FC CPU stands for the consistent
implementation of safety technology in the sense of Totally Integrated Automation.
This includes consistent and convenient integration of safety technology into
standard automation. This results in tremendous advantages for machine
manufacturers and plant operators – particularly in economic terms.
The TIA Portal automation platform

Engineering of the S7-1200 FC CPU is performed based on the TIA Portal
automation platform. This allows you to access all the advantages of Totally
Integrated Automation (TIA): TIA Portal is designed for efficiency, intuitive
operation and future viability. It allows you to solve all the engineering tasks of
automation and drive technology.

Entry ID: 109478932, V1.2, 12/2015 9
3 Description of an Automation Task
3 Description of an Automation Task

This document assumes that a risk analysis and assessment have already been
performed. Hazard control on the cutting machine to be examined is implemented
through the safety devices safety door and emergency stop pushbutton (see the
figure below).
Figure 3-1 Cutting machine with safety door and emergency stop pushbutton
The following questions reflect the automation task to be discussed in this

document:
 Safety door with or without guard locking?
 Is it possible to open the safety door during operation without shutting down
the machine?
 How do I connect the components?
 How does the PLC support me?
 How and what can I parameterize? What can I program?
 How do I achieve PL e/SIL 3?
 What if I don’t need PL e/SIL 3 but PL d/SIL 2 or PL c/SIL 1?
This document provides specific answers to these questions. Before chapter 5

refers to a specific user scenario, chapter 4 provides basic information on the
safety integrity and performance level.

Entry ID: 109478932, V1.2, 12/2015 10
4 PL and SIL
4.1 Achieving PL c/SIL 1
4 PL and SIL
The performance level (PL) or safety integrity level (SIL) classifies electrical and
(programmable) electronic systems in terms of the reliability of safety functions.
You implement a
 PL when you follow ISO 13849.
 SIL when you follow IEC 61508 (basic standard) or IEC 62061 (sector
standard).
Table 4 of ISO 13849 specifies a relationship between PL and SIL:
Table 4-1 Relationship between performance level (PL) and safety integrity level (SIL) from
table 4 of ISO 13849
PL SIL (high/continuous mode of operation)
a -
b 1
c 1
d 2
e 3
The following applies:

PL e/SIL 3 describes the highest degree of safety.
NOTICE This document does not replace the standards for functional safety!
However, it shows concise aspects of engineering and its aim is to contribute to
their clarification.
Note The statements in this chapter are of a general nature. They do not directly relate
to the F-library blocks offered with this documentation or settings of the
associated hardware configuration.
Note The following sections list the numerical values for the probability of a dangerous
failure per hour. You need these PFHD values to assess your safety function.
This assessment can be made conveniently using the Safety Evaluation Tool
(SET). For the link to the SET, please refer to \6\.

Entry ID: 109478932, V1.2, 12/2015 11
4 PL and SIL

General
This chapter deals with emergency stops and position switches. The statements
generally apply to electromechanical components.
The following applies to PL c/SIL 1:
 10−6 ≤ 𝑃𝐹𝐻𝐷 < 3 10−5
 The circuit design may be a single-channel design.
4.1.1 Interconnection examples
Example of an emergency stop interconnection

Assign the emergency stop signal to the F-DI on a single-channel basis to achieve
PL c/SIL 1.
Figure 4-1 Emergency stop interconnection for PL c/SIL 1
F-DI
E-stop
Example of a safety door interconnection

Assign the position switch signal to the F-DI on a single-channel basis to achieve
PL c/SIL 1.

Entry ID: 109478932, V1.2, 12/2015 12
4 PL and SIL
Figure 4-2 Interconnection of a position switch for PL c/SIL 1
F-DI
Position switch
4.1.2 Settings in the STEP 7 hardware configuration
You can assign – on a single-channel basis – the emergency stop pushbutton (or
position switch) to any channel (shown for channel 0 in the below figure).
Figure 4-3 Settings for the F-DI in the hardware configuration

Entry ID: 109478932, V1.2, 12/2015 13
4 PL and SIL
Table 4-2 Explanation of the above figure

No. Explanation
Select the appropriate channel pair (here: “Channel 0, 8”).
The default setting is “1oo1 evaluation”.

Note: 1oo1 = 1 out of 1
The channels are activated by default.
Note: You should deactivate unused channels.
For PL c/SIL 1, you can set internal or external sensor supply.
Note: We recommend the internal sensor supply offered in the hardware
configuration of the respective user scenarios.

Entry ID: 109478932, V1.2, 12/2015 14
4 PL and SIL
4.2 Achieving PL d/SIL 2

General
The following applies to PL d/SIL 2:
 10−7 ≤ 𝑃𝐹𝐻𝐷 < 10−6
 The circuit design should be a two-channel design ∗1 ).
 Internal or external sensor supply can be used.
1
∗ ) Single-channel circuit design (hardware fault tolerance (HFT) = 0) is basically
possible for PL d/SIL 2; in this case, however, you have to increase the safe failure
fraction (SFF). When HFT = 0, this value would be in the following range:
90% ≤ 𝑆𝐹𝐹 < 99%
Note The correlation between HFT and SFF can be found in table 5 of
IEC 62061 (see \4\). For help with IEC 62061, please refer to \7\.
Example of an emergency stop

Assign the emergency stop signal to the F-DI on a two-channel basis to achieve
PL d/SIL 2.
Figure 4-4 Emergency stop interconnection for PL d/SIL 2
F-DI
E-stop
Example of a safety door application

Use two position switches to achieve PL d/SIL 2. Assign each switch to the F-DI on
a single-channel basis. The evaluation itself is performed on a two-channel basis
(for more information, please refer to chapter 4.2.2).

Entry ID: 109478932, V1.2, 12/2015 15
4 PL and SIL
Figure 4-5 Interconnection of a position switch for PL d/SIL 2

F-DI
Position switch 1
Position switch 2
Emergency stop
You can assign the emergency stop to any provided channel pair (this is shown for
the channel pair 0 and 8 in the below figure).
Figure 4-6 Settings of the F-DI for the emergency stop in the hardware configuration

Entry ID: 109478932, V1.2, 12/2015 16
4 PL and SIL
Table 4-3 Explanation of the above figure

No. Explanation
Select the appropriate channel pair (here: “Channel 0, 8”).
Select “1oo2 evaluation, equivalent”

Note: 1oo1 = 1 out of 2, equivalent due to the same logic (normally closed contact,
NC/NC) of the sensors
For PL d/SIL 2, after a channel fault, reintegration requires a FALSE signal.
For PL d/SIL 2, you can set internal or external sensor supply.

Note: We recommend the internal sensor supply offered in the hardware
configuration of the respective user scenarios.
Same as no.
Position switches
In the prepared examples, the1oo2 evaluation of the position switches is performed
by the FB SFDOOR F-library block. This block requires a single-channel signal at
each of two inputs. For this reason, each of the two inputs is parameterized as a
1oo1 evaluation in the hardware configuration.
Figure 4-7 Settings of the F-DI for the position switches in the hardware configuration

Entry ID: 109478932, V1.2, 12/2015 17
4 PL and SIL
4.3 Achieving PL e/SIL 3
Here, too, the following applies:

 You should deactivate unused channels.
 For PL d/SIL 2, you can set internal or external sensor supply.
We recommend internal sensor supply.
 For PL d/SIL 2, after a channel fault, reintegration requires a FALSE signal. For
the safety door, this is automatically done by the FB SFDOOR F-library block
so that, in the hardware configuration, the “Test 0-Signal not necessary” setting
can be kept.
Note To implement a 1oo1 evaluation with two sensors for each switch, it is not
mandatory to select a channel pair (e.g., 0, 8 or 1, 9 or …).
Figure 4-8 1oo2 evaluation in the FB SFDOOR F-library block
1oo2 evaluation
is performed
in the block
FB SFDOOR evaluates the signals of the position switch received via IN1 and IN2
in the F-program.

General
The following applies to PL e/SIL 3:
 The circuit design must be a two-channel design and a cross-circuit must be
safely detected.
 10−8 ≤ 𝑃𝐹𝐻𝐷 < 10−7
Example of an emergency stop

The interconnection for SIL 3/PL e is the same as the one shown in Figure 4-4 for
PL d/SIL 2.
Example of a safety door application

The interconnection for SIL 3/PL e is the same as the one shown in Figure 4-5 for
PL d/SIL 2.

Entry ID: 109478932, V1.2, 12/2015 18
4 PL and SIL
Emergency stop
The settings of PL d/SIL 2 apply. In addition, the following applies:
The ability to withstand crossover required by PL e/SIL 3 can only be implemented
using internal sensor supply.
Figure 4-9 Activating the short-circuit test
Note You can deactivate the short-circuit test if you can otherwise rule out a cross-
circuit, for example, by installing protected lines or in the case of sensors that
perform internal short-circuit monitoring.
Position switches
The statements under “Position switches” in chapter 4.2.2 apply. In addition, the
statements made on the emergency stop earlier in this chapter (4.3.2) apply
accordingly.

Entry ID: 109478932, V1.2, 12/2015 19
5 Prepared User Scenarios

Prepared user scenarios
In many areas of production engineering, emergency stop buttons and safety doors
are typical safety devices to implement your safety function. Various options exist
for implementing typical safety functions with emergency stop and/or safety door.
From a total of 30 user scenarios, we offer you solutions for your safety function
with emergency stop and safety door. All solutions include the F-block that solves
the automation task.
Simply select your application from the matrix on the page following the next page.
Examples of using the matrix

Example 1: You want to safely shut down a drive using an emergency stop
pushbutton.
Figure 5-1 Emergency stop pushbutton
You will find solutions for this requirement in User Scenarios 1 to 6, depending on
which PL/SIL and which actuators (electromechanical actuators such as contactors
or electric actuators such as drives) you are using.
For PL e/SIL 3 and contactors as actuators, for example, you can use User
Scenario 1. In addition, you are provided with a ready-to-use F-program block that
implements the safety function at PL e according to IEC 13849 or SIL 3 according
to IEC 62061.
Example 2: You want to safely shut down a drive using an emergency stop
pushbutton. The hazardous area should not be accessible during operation and,
after shutting down the drive, it should only be accessible after a delay (e.g., due to
a dangerous slowing down of a machine).

Entry ID: 109478932, V1.2, 12/2015 20
Figure 5-2 Emergency stop pushbutton + safety door with guard locking
Depending on which PL/SIL and which actuators (contactor or drive) you are using,
you can use User Scenarios 25 to 30 (emergency stop + safety door with guard
locking) for these safety functions. In this case, too, you are provided with a ready-
to-use F-program block that implements the safety function.

Entry ID: 109478932, V1.2, 12/2015 21
Matrix of the prepared user scenarios
Direct link to the user scenario
Note User Scenario 25 (emergency stop + safety door with guard locking at PL e/SIL
3 with contactors as actuators) contains additional information on the structure of
the F-program that is also applicable to other user scenarios.
User scenario no. and link to the appropriate chapter

No. 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
Link 6.2 6.3 6.4 6.5 6.6 6.7 6.8 6.9 6.10 6.11 6.12 6.13 6.14 6.15 6.16
No. 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30
Link 6.17 6.18 6.19 6.20 6.21 6.22 6.23 6.24 6.25 6.26 6.27 6.28 6.29 6.30 6.31

Entry ID: 109478932, V1.2, 12/2015 22
6 Solution for the User Scenarios

Each of the 30 user scenarios is discussed in a separate chapter (chapter 6.2 and
the following chapters). This concisely provides you with all the information
required for the user scenario you are reading. Before we look at the individual
user scenarios, global information that applies to all user scenarios is given in the
next chapter (6.1). At the appropriate points in the individual user scenarios, there
are links to this information.
You can read the next chapter (6.1) or specifically access it from the individual user
scenarios.
6.1 What applies to all user scenarios

6.1.1 Installing the user scenario
Note If you make changes to safety-related settings or the safety program, you will be
prompted for a password. This password is siemens.
When you have selected your user scenario, the following instructions help you
download and use it.
Downloading the S7_1200F_LIB library

1. Download the S7_1200F_LIB.zip file to any Windows directory.
2. Extract the zip file: “Right-click > 7-Zip > Extract”
Opening the S7_1200F_LIB library

3. In TIA Portal, create a new S7 project: “Project > New”.
4. Enter a name and the storage path.
5. Click “Libraries”
Figure 6-1 Opening libraries

Entry ID: 109478932, V1.2, 12/2015 23
6. Click the “open global library” icon

Figure 6-2 “open global library” icon
7. Locate the S7_1200F_LIB file

Important: Uncheck “Open as read-only” before you click “Open”.
Figure 6-3 “Open as read-only” checked
Hardware configuration, F-user block and selection of the user scenario

8. Open the folder of your user scenario (shown here: “01EStopSIL3PLe”).
9. Drag and drop “PLC_1” to “Devices & networks”.
Figure 6-4 Drag and drop hardware configuration to STEP 7 project.
Drag & Drop
10. Open “Program blocks”.

Entry ID: 109478932, V1.2, 12/2015 24
Figure 6-5 “Program blocks” folder

The F-user block is located in the STEP 7 project.

11. Select “PLC_1 [CPU 1215FC DC/DC/RLY]” > Right-click > “Compile” >
“Hardware (rebuild all)”.
12. Select “PLC_1 [CPU 1215FC DC/DC/RLY]” > Right-click > “Compile” >
“Software (rebuild all blocks)”.
13. “Save project”.
Downloading to the CPU

1. Select the “PLC_1” F-CPU.
Right-click > Download to device > Hardware configuration.
2. Establish an online connection to the S7-1200 FC CPU.

Entry ID: 109478932, V1.2, 12/2015 25
Figure 6-6 Preparing the download
3. Select the “PLC_1” F-CPU.

Right-click > Download to device > Software (only changes).
6.1.2 Interlocking mechanisms for safety doors with guard locking
You should read this chapter if you are using a safety door with guard locking.
An output of the F-DQ activates a magnet in the position switch. The magnet
implements guard locking depending on whether
(1 signal from the F-DQ) or not (0 signal from the F-DQ) it is activated.
Figure 6-7 Control of the coil in the position switch
F-DQ

Entry ID: 109478932, V1.2, 12/2015 26
Basically, there are two interlocking mechanisms:

 Locking with electro-magnetic force
 Locking with spring force
Locking with electro-magnetic force

To interlock the safety door, the coil must be controlled with 1 signal.
Locking with spring force

To interlock the safety door, the coil must be de-energized (0 signal).
Which option is preferable?

Locking with spring force has the advantage that in the event of a failure of the
F-DQ channel that controls the coil of the position switch, this channel safely
outputs 0 signal and therefore the coil remains de-energized; this means the guard
locking of the safety door remains active or is automatically activated. For this
reason, the user scenarios for safety doors with guard locking shown here use the
locking with spring force mechanism.
Monitoring the locking device

The SIRIUS 3SE5 position switch allows monitoring of the locking device position.
This information is read in via a standard DI.
Safety door signals

The following section provides an overview of the safety door signals
where
 fDoorCoil
 eMagnet
 sepAct
 hingedSwitch
are variables of the F-program of your user scenario.
Figure 6-8 Correlation between control of guard locking (fDoorCoil variable) and monitoring
of guard locking (eMagnet variable)
fDoorCoil = 0
41
(0 signal from F-DQ)
causes
E1 E2 eMagnet = 1
42
fDoorCoil = 1
41
(1 signal from F-DQ)
causes eMagnet = 0
E1 E2
42

Entry ID: 109478932, V1.2, 12/2015 27
Figure 6-9 Correlation between the actuator and the sepAct variable
Actuator inserted 11
(door closed) causes
sepAct = 1
12
Actuator not inserted 11
(door open) causes
sepAct = 0
12
Figure 6-10 Hinge switch
11
Unoperated
(door closed) hingedSwitch = 1
Hinge switch
12
11
Operated
(door open) sepAct = 0
12
Normative assessment of guard locking

For the normative assessment of a safety door application, a distinction has to
made between:
 Opening and closing of the safety door
 The guard locking of the safety door
Due to the use of spring-actuated lock position switches, guard locking remains
active in the event of an electrical fault (e.g., passivation of the channel of the F-DI)
(safety door cannot be opened).
A fault current on the magnet at a time when the safety door must be closed
(hazardous machine active, fDoorCoil=1) must result in the safe shutdown of the
machine. Theoretically, someone could open the door at this very moment, which
might cause a hazard. Therefore, PL e/SIL 3 e cannot be achieved for the guard
locking.
Chapter 8.4 (see \3\) of DIN EN ISO 14119 addresses this subject and assumes
that in most cases the required PL or SIL of the guard locking function is lower than
the required PL or SIL of the interlocking function. The probability of a guard
locking function failure while a person simultaneously enters the area is considered
to be very low.
The user scenarios provided in this document are based on this assessment.

Entry ID: 109478932, V1.2, 12/2015 28
6.1.3 Program structure
The block offered for your user scenario is your user interface (F-user FB). All other
blocks that are used need not be edited. To provide an overall understanding of the
F-user FB within the F-program, some explanations will be given below.
F-library blocks
To implement the respective safety function, the F-user FBs access certified
F-library blocks included in STEP 7 Safety. The following F-library blocks are used
in the application examples shown here:
 Emergency stop (FB ESTOP1)
 Safety door (FB SFDOOR)
 Readback (FB FDBACK)
 Reintegration via all F-I/O (FB ACK_GL)
F-user FB
The F-user FB of your selected user scenario includes at least two of the
above-listed F-library blocks.
Figure 6-11 F-user FB and used F-library blocks
F-user FB
FB SFDOOR
FB ESTOP1
FB FDBACK F-library blocks
FB ACK_GL
While you can change the F-user FB,

the F-library blocks are know-how protected.

Entry ID: 109478932, V1.2, 12/2015 29
Note The F-user FBs are also provided to you in a block library. However, this is not
the F-library included in STEP 7 Safety.
Execution of the F-program

The standard program is interrupted by the safety program (F-program) in fixed
time slices. During this process, an F-OB (FOB_RTG1) calls the
Main_Safety_RTG1 F-block.
Figure 6-12 Call of the F-program
FB Main_Safety_RTG1 calls the F-user FB.
6.1.4 Brief description of the F-library blocks
The following section provides a brief description of the functionality of the F-library
blocks.
Note For related information on the individual F-library blocks, please refer to the
STEP 7 online help.
Select the F-library block in the F-program editor > Press “F5”.
Emergency stop: FB ESTOP1

The signals from the emergency stop pushbutton are read in to the F-DI on a
two-channel basis (except for SIL1/PL c). To achieve PL e/SIL 3, both signals must
carry the same signal when the emergency stop pushbutton is actuated within a
certain configurable time. When this time is exceeded, the block reacts in the same
way as when the emergency stop is pressed: By resetting the Q output.

Entry ID: 109478932, V1.2, 12/2015 30
Figure 6-13 Discrepancy analysis for the emergency stop
F-CPU
E-stop F-DI
Chnl 1
Discrepancy
Chnl 2 analysis
The evaluation of the two channels is performed in the F-DI. In the F-program, the
processed signal is available as an input in the process image. This always
corresponds to the lower address of the two channels.
Safety door: FB SFDOOR

This F-FB monitors the correct closing of the safety door. In the examples, the
evaluation is performed via two input channels:
 Insertion of the actuator into the position switch
 Position of the hinge switch
Figure 6-14 Reading in position switch/actuator and hinge switch
Position switch
Actuator
Hinge switch
If the two signals do not correlate as expected, this will be detected as a fault and
the Q output will not be set/reset.
Example:
An actuator – that has broken off the swinging part of the safety door – inserted in
the position switch outputs the information “safety door closed” when the safety
door is opened. The hinge switch, in contrast, outputs the information “safety door
open”. This discrepancy is detected by FB SFDOOR and the Q output is reset to 0
signal.
After such a fault, it is always necessary to completely open and close the safety
door before the fault can be acknowledged. This ensures that, for example, an
actuator that has broken off is safely detected.
Readback: FB FDBACK
This block compares, for example for a contactor, whether the state of the
contactor coil correctly correlates with the state of the contactor auxiliary contact.

Entry ID: 109478932, V1.2, 12/2015 31
Figure 6-15 FB FDBACK
Contactor auxiliary
contact
K1
Contactor coil
K1
If these two states are not plausible to each other after a configurable period of
time, the Q output (here: the contactor coil) will be safely disabled. This allows you
to react, for example, to a welded contactor.
Reintegration: FB ACK_GL
Passivated F-modules/channels cannot output process values before the fault has
been cleared and the F-module/channel has been reintegrated (see also chapter
6.1.5). With FB ACK_GL used here, you reintegrate the entire F-I/O of an
F-runtime group.
6.1.5 Passivation and reintegration
Passivation
The safety program provides a set of commands that allows you to safely shut
down one or more actuators. Typical applications include emergency stop or the
unauthorized opening of a safety door.
Furthermore, situations can arise where functional errors occur. In this context, the
following example describes a discrepancy error:
Example:
Two sensors (normally closed contacts, NC) are read in via an F-DI. A time value is
configured to evaluate the discrepancy time. If a sensor changes its state, e.g. from
1 to 0 signal, this change must also be made – within the configured discrepancy
time – by the sensor on the other channel; otherwise, the F-system detects a
functional error (here: discrepancy error).
Figure 6-16 Passivation due to discrepancy error
F-DI
Sensor 1 Chnl 1
Discrepancy Time Discrepancy
Sensor 2 Chnl 2 analysis elapsed error
The discrepancy error automatically results in passivation of the respective

channels.

Entry ID: 109478932, V1.2, 12/2015 32
In case of passivation, the affected channel outputs substitute values (0 signal)

instead of the process values. The author of the F-program must ensure that 0
signal corresponds to the safe state.
Reintegration
Even if the error that caused passivation is no longer present, passivation persists.
To enable the passivated channel to output process values, reintegration is
required.
Note The term “depassivation” is also used as a synonym for reintegration. This
document uses only the term reintegration.
Reintegration of the F-I/O after clearing the errors requires user acknowledgment
with a positive edge at the ACK_REI variable of the F-I/O DB. For this purpose, you
can provide, for example, the acknowledgment button, a separate button or also an
HMI.
Death or severe personal injury may result if you implement reintegration

in the program without deliberate acknowledgment (automatic
reintegration).
WARNING
Automatic reintegration may only be used if it does not result in hazards such as
the unexpected startup of hazardous machines. The risk analysis is to confirm
this.
In addition, the FB ACK_GL F-library block provides you with the option to
reintegrate the entire F-I/O (see chapter 6.1.4).
6.1.6 Value status
The value status is binary additional information on a channel value of an F-I/O and
entered in the process input image (PII).
Variable names that contain the value status have the “VS” suffix at the end. The
value status provides you with information on the valid channel value:
 1: A valid process value is output for the channel.
 0: A substitute value is output for the channel.
The table below shows an example of the address assignment in the PII for the 16-
channel F-DI:
Table 6-1 Example of the address assignment in the PII for a fail-safe digital input module with 16
channels
Byte in Assigned bits in the F-CPU per F-module:
the
F-CPU 7 6 5 4 3 2 1 0
x+0 DI8 DI7 DI6 DI5 DI4 DI3 DI2 DI1


Entry ID: 109478932, V1.2, 12/2015 33
Byte in Assigned bits in the F-CPU per F-module:

the
F-CPU 7 6 5 4 3 2 1 0
value value value value value value value value

status status status status status status status status
value value value value value value value value
status status status status status status status status
Example:
The address of the value status of a fail-safe input E0.0 would be E2.0.
6.1.7 Notes on the electric actuators
Among other things, the user scenarios provided in this document differ in the
types of actuators used:
 Electromechanical actuators
 Electric actuators
In the case of electromechanical actuators (e.g., contactors), the readback signal is

processed accordingly by the actuator. In the case of certified electric actuators
(e.g., F-drives), safety-related checks are performed within the actuator. For this
case, we provide you with an appropriate signal on the F-DQ (e.g.,
signalPLdSIL2Quality) that meets the required PL/SIL of the respective user
scenario.
NOTICE It is possible that the required PL/SIL is not achieved.

Make sure that the electric actuator is also suitable for the required PL/SIL of the
safety function.
6.2 User Scenario 1:

Emergency Stop at PL e/SIL 3, Electromechanical
Actuator
6.2.1 Safety function
The safety function is as follows:

Pressing the emergency stop button safely shuts down the actuator.
6.2.2 Hardware and software components
You need the hardware and software components listed below.

Entry ID: 109478932, V1.2, 12/2015 34
Hardware components
Table 6-2 Hardware
Component No. Article number Note
CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
Enclosed 2 3SB3801-0DD3
pushbutton (NO)
Enclosed 1 3SB3801-0DB3
pushbutton (NC)
Emergency stop 1 3SB3801-0EG3
pushbutton (NC/NC)
Contactors 2 3RT2015-2BB42
Software components
Table 6-3 Software
STEP 7 Basic 1 6ES7822-0AA03-0YA5 Or STEP 7 Professional

STEP 7 Safety 1 6ES7833-1FB13-0YA5 Or STEP 7 Safety Advanced
Basic V13 SP1
6.2.3 Wiring
The figure below shows the wiring of the hardware components.

Entry ID: 109478932, V1.2, 12/2015 35
Figure 6-17 Emergency stop PL e/SIL 3 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
K2 K1
M
L+ Vs1
.3 L+ 0+
K1
.0
.4 M
K2
0-
.0
Vs2
eStop
Note In the F-program, the auxiliary contacts of the contactors K1 and K2 are termed
“feedback1” and “feedback2”.

Entry ID: 109478932, V1.2, 12/2015 36
6.2.4 Brief description of the core functionality
The following flowchart provides a concise description of the core functionality.

Figure 6-18 Core functionality
Start
Actuators Yes E-stop

switch off pressed?
No No
E-stop
released
?
Yes
No
Stop caused by
e-stop or
1st start?
Yes
Acknowledge
Actuators Yes
Operational stop?
switch off
Start conditions No
are complied
Actuators
on
6.2.5 Description of the user block FB F100EStopSIL3PLe
Note The block names of the prepared F-user FBs start with an “F” and a number for
the block number that refers to the user scenario number (e.g., FB
F23EStopFDoorSIL3PLe refers to User Scenario 23). The only exception to this
convention is FB F100EStopSIL3PLe, which refers to User Scenario 1. “100”
was used instead of “1”, because the block number “1” is assigned to the
Main_Safety_RTG1 by default.

Entry ID: 109478932, V1.2, 12/2015 37
Figure 6-19 F-user FB F100EStopSIL3PLe
NOTICE For F-blocks, the enable input (EN) must not be wired.
Parameter description
The following section describes the inputs and outputs of FB F100EStopSIL3PLe.
Note NO: normally open (contact); NC: normally closed (contact)
Table 6-4 Inputs of FB F100EStopSIL3PLe

Description Symbol Data type Convention Note
Acknowledgment ack BOOL NO Positive edge
1: required
Acknowledgment after triggering the
safety function
to reintegrate F-I/O
Start request start BOOL NO
1: Start request
Stop request stop BOOL NC
0: Stop request
Readback signal from readbackK1 BOOL
auxiliary contact of
contactor K1 NC
0: Contactor has
Readback signal from readbackK2 BOOL picked up
contactor K2
Emergency stop eStop BOOL NC/NC
pushbutton 0: Emergency
stop triggered
Value status for output K1K2_VS BOOL 0: Fault
K1K2
Time between the control feedbackTime TIME
command and the response
of the contactors

Entry ID: 109478932, V1.2, 12/2015 38
Table 6-5 Outputs of FB F100EStopSIL3PLe

Contactors K1/K2 K1K2 BOOL 1: Control Actuator on F-DQ
command for the
contactors
Release releaseEStop BOOL 1: Emergency stop Information of the
emergency stop released and F-library blocks.
acknowledged Can be read out,
Acknowledgment AckReqEStop BOOL 1: for example, in the
required standard user
Acknowledgment
program.
required
6.2.6 Configuration and parameterization
The STEP 7 hardware configuration (HW Config) has already been prepared for
commissioning FB F100EStopSIL3PLe. Customizations are possible.
The associated HW Config can be found in the provided block library.
Inappropriate values for safety-related settings may result in the safety

function not being triggered in the event of danger.
WARNING Please keep this in mind if, due to your requirements, you want to change the
settings shown here.
Note For more information on the hardware configuration in this user scenario, please
refer to chapter 4.3.2.

Entry ID: 109478932, V1.2, 12/2015 39
6.2.7 Operation of the user scenario
For demonstration purposes, this document shows different user scenarios. These
scenarios can also be used as verification steps for validation.
Note For information on installing the user scenario, please refer to chapter 6.1.1.
Requirements:
 No faults
 Emergency stop released
Table 6-6 Start actuator

No. Action Comment
1 Press ack Acknowledgment mandatory when starting
the scenario for the first time
2 Press start K1K2 picks up
3 Press stop K1K2 drops out
Table 6-7 Safety function: Trigger emergency stop

No. Action Comment
3 Press the emergency stop (eStop) K1K2 drops out
4 Release the emergency stop (eStop)
5 Press start K1K2 does not pick up (acknowledgment
required)
6 Start again with no. 1
Table 6-8 Trigger readback error

No. Action Comment
3 Make sure that K1 or K2 does not drop out when Simulated welding of the contactor
shutting down
4 Press stop Readback error is detected
5 Let the contactor drop out
required)

Entry ID: 109478932, V1.2, 12/2015 40

Emergency Stop at PL d/SIL 2, Electromechanical
Actuator

Hardware components
Table 6-9 Hardware
CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0

4x24VDC
pushbutton (NO)
pushbutton (NC)
pushbutton (NC/NC)
Software components
Table 6-10 Software
Basic V13 SP1

Entry ID: 109478932, V1.2, 12/2015 41
6.3.3 Wiring

Figure 6-20 Emergency stop PL d/SIL 2 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
K2 K1
M
L+ Vs1
.3 L+ 0+
K1
.0
.4 M
K2
0-
eStop
Note In the F-program, the NC auxiliary contacts of the contactors K1 and K2 are
termed “feedback1” and “feedback2”.

Entry ID: 109478932, V1.2, 12/2015 42

Start

switch off pressed?
No No
E-stop
released
?
Yes
No
Stop caused by
e-stop or
1st start?
Yes
Acknowledge
Actuators Yes
Operational stop?
switch off
Start conditions No
are complied
Actuators
on
6.3.5 Description of the user block FB F02EStopSIL2PLd
Figure 6-22 F-user FB F02EStopSIL2PLd

Entry ID: 109478932, V1.2, 12/2015 43
The following section describes the inputs and outputs of FB F02EStopSIL2PLd.
Table 6-11 Inputs of FB F02EStopSIL2PLd

1: required
safety function
1: Start request
0: Stop request

contactor K1 NC
0: Contactor has
contactor K2
stop triggered
Value status for output K1K2_VS BOOL 0: Fault
K1K2
of the contactors
Table 6-12 Outputs of FB F02EStopSIL2PLd

command for the
contactors
required Acknowledgment standard user
program.
required

Entry ID: 109478932, V1.2, 12/2015 44
commissioning FB F02EStopSIL2PLd. Customizations are possible.

Requirements:
 No faults

No. Action Comment

No. Action Comment
required)

Entry ID: 109478932, V1.2, 12/2015 45

No. Action Comment
shutting down
required)

Entry ID: 109478932, V1.2, 12/2015 46

Emergency Stop at PL c/SIL 1, Electromechanical
Actuator

Hardware components
Table 6-16 Hardware
CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NC)
Emergency stop 1 3SB3801-0DG3
pushbutton (NC)
Software components
Table 6-17 Software
Basic V13 SP1

Entry ID: 109478932, V1.2, 12/2015 47
6.4.3 Wiring

Figure 6-23 Emergency stop PL c/SIL 1 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
K1
M
Vs1 0+
L+
.3 L+
K1
.0
M 0-
eStop
Note In the F-program, the auxiliary contact of contactor K1 is termed “feedback”.
Note Due to the use of the FB FDBACK F-library block, it is useful to monitor
readback. Basically, monitoring the readback signals is not required for PL c/SIL
1.

Entry ID: 109478932, V1.2, 12/2015 48

Start
Actuator Yes E-stop

switches off pressed?
No No
E-stop
pressed
?
Yes
No
Stop caused by
e-stop or
1st start?
Yes
Acknowledge
Actuator Yes
Operational stop?
switches off
Start conditions No
are complied
Actuator
on
6.4.5 Description of the user block FB F03EStopSIL1PLc
Figure 6-25 F-user FB F03EStopSIL1PLc

Entry ID: 109478932, V1.2, 12/2015 49
The following section describes the inputs and outputs of FB F03EStopSIL1PLc.
Table 6-18 Inputs of FB F03EStopSIL1PLc

1: required
safety function
1: Start request
0: Stop request
Readback signal from readbackK1 BOOL NC

auxiliary contact of 0: Contactor has
contactor K1 picked up
Emergency stop eStop BOOL NC
stop triggered
Value status of output K1 K1VS BOOL 0: Fault
of the contactor
Table 6-19 Outputs of FB F03EStopSIL1PLc

Contactor K1 K1 BOOL 1: Actuator Actuator on F-DQ
switched
(contactor has
picked up)
required Acknowledgment standard user
required program.

Entry ID: 109478932, V1.2, 12/2015 50
commissioning FB F03EStopSIL1PLc. Customizations are possible.

Requirements:
 No faults

No. Action Comment
2 Press start K1 picks up
3 Press stop K1 drops out

No. Action Comment
3 Press the emergency stop (eStop) K1 drops out
5 Press start K1 does not pick up (acknowledgment
required)

Entry ID: 109478932, V1.2, 12/2015 51
No. Action Comment


No. Action Comment
3 Make sure that K1 does not drop out when Simulated welding of the contactor
shutting down
required)

Entry ID: 109478932, V1.2, 12/2015 52

Emergency Stop at PL e/SIL 3, Electric Actuator

Hardware components
Table 6-23 Hardware
CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NC)
pushbutton (NC/NC)
Software components
Table 6-24 Software
Basic V13 SP1

Entry ID: 109478932, V1.2, 12/2015 53
6.5.3 Wiring
Figure 6-26 Emergency stop PL e/SIL 3 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
L+ Vs1
L+ 0+
.0
M signalPLeSIL3Quality
0-
eStop
Note For the actuators used in this user scenario, please also refer to chapter 6.1.7.

Entry ID: 109478932, V1.2, 12/2015 54

Start

switch off pressed?
No No
E-stop
released
?
Yes
No
Stop caused by
e-stop or
1st start?
Yes
Acknowledge
Actuators Yes
Operational stop?
switch off
Start conditions No
are complied
Actuators
on
6.5.5 Description of the user block FB F04EStopSIL3PLe
Figure 6-28 F-user FB F04EStopSIL3PLe

Entry ID: 109478932, V1.2, 12/2015 55
The following section describes the inputs and outputs of FB F04EStopSIL3PLe.
Table 6-25 Inputs of FB F04EStopSIL3PLe

Description Symbol Data Convention Note
type
1: required
Acknowledgment after triggering
the safety
function
to reintegrate F-
I/O
1: Start request

0: Stop request
stop triggered
Value status of output signalPLeSIL3QualityVS BOOL 0: Fault
signalPLeSIL3Quality
Table 6-26 Outputs of FB F04EStopSIL3PLe

Output signal signalPLeSIL3Quality BOOL 1: F-DQ output
from the F-DQ to set
the electric
actuator
Release releaseEStop BOOL 1: Emergency Information of the
emergency stop stop released F-library blocks. Can
and be read out, for
acknowledged example, in the
standard user
program.
commissioning FB F04EStopSIL3PLe. Customizations are possible.

Entry ID: 109478932, V1.2, 12/2015 56

Requirements:
 No faults

No. Action Comment
2 Press start signalPLeSIL3Quality=1
3 Press stop signalPLeSIL3Quality=0

No. Action Comment
3 Press the emergency stop (eStop) signalPLeSIL3Quality=0
(acknowledgment required)

Entry ID: 109478932, V1.2, 12/2015 57

Emergency Stop at PL d/SIL 2, Electric Actuator
Note You are using a drive as an actuator. Please also follow the information in
chapter 6.1.7.

Hardware components
Table 6-29 Hardware

CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NC)
pushbutton (NC/NC)
Software components
Table 6-30 Software
Basic V13 SP1
6.6.3 Wiring

Entry ID: 109478932, V1.2, 12/2015 58
Figure 6-29 Emergency stop PL d/SIL 2 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
L+ Vs1
L+ 0+
.0
signalPLdSIL2Quality
M
0-
eStop

Entry ID: 109478932, V1.2, 12/2015 59

Start

switch off pressed?
No No
E-stop
released
?
Yes
No
Stop caused by
e-stop or
1st start?
Yes
Acknowledge
Actuators Yes
Operational stop?
switch off
Start conditions No
are complied
Actuators
on
6.6.5 Description of the user block FB F05EStopSIL2PLd
Figure 6-31 F-user FB F05EStopSIL2PLd

Entry ID: 109478932, V1.2, 12/2015 60
The following section describes the inputs and outputs of FB F05EStopSIL2PLd.
Table 6-31 Inputs of FB F05StopSIL2PLd

type
1: required
the safety
function
to reintegrate F-
I/O
1: Start request

0: Stop request
stop triggered
Value status of output signalPLdSIL2QualityVS BOOL 0: Fault
Table 6-32 Outputs of FB F05StopSIL2PLd

Output signal signalPLdSIL2Quality BOOL 1: F-DQ output
the electric
actuator
emergency stop stop released F-library blocks. Can
and be read out, for
acknowledged example, in the
standard user
program.
commissioning FB F05StopSIL2PLd. Customizations are possible.

Entry ID: 109478932, V1.2, 12/2015 61

Requirements:
 No faults

No. Action Comment
2 Press start signalPLdSIL2Quality=1
3 Press stop signalPLdSIL2Quality=0

No. Action Comment
3 Press the emergency stop (eStop) signalPLdSIL2Quality=0

Entry ID: 109478932, V1.2, 12/2015 62

Emergency Stop at PL c/SIL 1, Electric Actuator

Hardware components
Table 6-35 Hardware
CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0

4x24VDC
pushbutton (NO)
pushbutton (NC)
pushbutton (NC)
Software components
Table 6-36 Software
Basic V13 SP1

Entry ID: 109478932, V1.2, 12/2015 63
6.7.3 Wiring

Figure 6-32 Emergency stop PL c/SIL 1 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
M
L+ Vs1
L+ 0+
.0
M
signalPLcSIL1Quality
0-
eStop

Entry ID: 109478932, V1.2, 12/2015 64

Start
Actuator Yes E-stop

switches off pressed?
No No
E-stop
released
?
Yes
No
Stop caused by
e-stop or
1st start?
Yes
Acknowledge
Actuator Yes
Operational stop?
switches off
Start conditions No
are complied
Actuator
on
6.7.5 Description of the user block FB F06EStopSIL1PLc
Figure 6-34 F-user FB F06EStopSIL1PLc

Entry ID: 109478932, V1.2, 12/2015 65
The following section describes the inputs and outputs of FB F06EStopSIL1PLc.
Table 6-37 Inputs of FB F06EStopSIL1PLc

type
1: required
the safety
function
to reintegrate F-
I/O
1: Start request

0: Stop request
stop triggered
Value status of output signalPLcSIL1QualityVS BOOL 0: Fault
Table 6-38 Outputs of FB F06EStopSIL1PLc

Output signal signalPLcSIL1Quality BOOL 1: F-DQ output
the electric
actuator
emergency stop stop released and F-library blocks.
required standard user
Acknowledgment
program.
required

Entry ID: 109478932, V1.2, 12/2015 66
commissioning FB F06EStopSIL1PLc. Customizations are possible.

Requirements:
 No faults
No. Action Comment
2 Press start signalPLcSIL1Quality=1
3 Press stop signalPLcSIL1Quality=0

No. Action Comment
3 Press the emergency stop (eStop) signalPLcSIL1Quality=0

Entry ID: 109478932, V1.2, 12/2015 67

Safety Door without Guard Locking at PL e/SIL 3,
Electromechanical Actuator

Opening the safety door safely shuts down the actuator.
Hardware components
Table 6-41 Hardware
CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0

4x24VDC
pushbutton (NO)
pushbutton (NC)
Position switch 2 3SE5132-1QV20
without tumbler
Actuator for position 2 3SE5000-0AV0
switch
Software components
Table 6-42 Software
Basic V13 SP1

Entry ID: 109478932, V1.2, 12/2015 68
6.8.3 Wiring

Figure 6-35 Safety door without guard locking PL e/SIL 3 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
K2 K1
M
L+ Vs1
.3 L+ 0+
K1
.0
.4 M
K2
0-
posSwitch2 posSwitch1

Entry ID: 109478932, V1.2, 12/2015 69
Note Before starting the scenario for the first time, open and close the safety door
once. Then acknowledge with ACK=1.
Figure 6-36 Safety door without guard locking – core functionality
Start
Actuators Yes Safety door

switch off open?
No
No
Actuators Yes
Safety door Operational stop?
closed switch off

?
No
Yes
No
Safety door
closed
?
Acknowledge Yes
Start conditions
are complied
Actuators
on

Entry ID: 109478932, V1.2, 12/2015 70
6.8.5 Description of the user block FB F07FDoorSIL3PLe
Figure 6-37 F-user FB F07FDoorSIL3PLe
The following section describes the inputs and outputs of FB F07FDoorSIL3PLe.
Table 6-43 Inputs of FB F07FDoorSIL3PLe

1: required
Acknowledgment  after triggering
the safety
function
 to reintegrate
F-I/O
1: Start request
0: Stop request
contactor K1 NC
0: Contactor has
contactor K2
Position switch 1 posSwitch1 BOOL NC
1: Actuator

Entry ID: 109478932, V1.2, 12/2015 71

inserted (safety
door closed)
1: Actuator
inserted (safety
door closed)
Position switch 1 value posSwitch1VS BOOL
status
VS: value status
status 0: Fault Chapter 6.1.6
Value status of output K1K2 K1K2VS BOOL

of the contactors
Table 6-44 Outputs of FB F07FDoorSIL3PLe

command for the
contactors
Release safety releaseFDoor BOOL 1: With regard to Information of the

door safety door, start F-library blocks.
is possible (safety Can be read out,
door closed) for example, in the
Acknowledgment ackReqFDoor BOOL 1: standard user
program.
for safety door Acknowledgment
required
commissioning FB F07FDoorSIL3PLe. Customizations are possible.


Entry ID: 109478932, V1.2, 12/2015 72
Requirements:
 No faults
 Safety door closed
No. Action Comment
1 Open and close the safety door When starting the scenario for the first time or in
the event of a safety door fault, open and close
the door completely.
2 Press ack Required when starting the scenario for the first
time and after each opening of the safety door.
Table 6-46 Safety function: Safe shutdown when the safety door is opened
No. Action Comment
4 Open the safety door K1K2 drops out
5 Close the safety door

No. Action Comment
2 Press ack Acknowledgment mandatory when starting the
scenario for the first time
4 Make sure that K1 or K2 does not drop out Simulated welding of the contactor
when shutting down

Entry ID: 109478932, V1.2, 12/2015 73
No. Action Comment

required)
8 Start with no. 2

Safety Door without Guard Locking at PL d/SIL 2,

Hardware components
Table 6-48 Hardware

CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NC)
without tumbler
switch
Software components
Table 6-49 Software
Basic V13 SP1

Entry ID: 109478932, V1.2, 12/2015 74
6.9.3 Wiring

Figure 6-38 Safety door without guard locking PL d/SIL 2 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
K2 K1
M
L+ Vs1
.3 L+ 0+
K1
.0
.4 M
K2
0-

Entry ID: 109478932, V1.2, 12/2015 75
Start

switch off open?
No
No
Actuators Yes
Safety door
Operational stop?
closed switch off
?
No
Yes
No
Safety door
closed
?
Acknowledge Yes
Start conditions
are complied
Actuators
on

Entry ID: 109478932, V1.2, 12/2015 76
6.9.5 Description of the user block FB F08FDoorSIL2PLd
Figure 6-40 F-user FB F08FDoorSIL2PLd
The following section describes the inputs and outputs of FB F08FDoorSIL2PLd.
Table 6-50 Inputs of FB F09FDoorSIL1PLc

1: required
the safety
function
 to reintegrate
F-I/O
1: Start request
0: Stop request
contactor K1 NC
0: Contactor has
contactor K2
1: Actuator
inserted (safety
door closed)

Entry ID: 109478932, V1.2, 12/2015 77

1: Actuator
inserted (safety
door closed)
status
VS: value status

of the contactors
Table 6-51 Outputs of FB F08FDoorSIL2PLd

command for the
contactors

for safety door program.
Acknowledgment
required
commissioning FB F08FDoorSIL2PLd. Customizations are possible.


Entry ID: 109478932, V1.2, 12/2015 78
Requirements:
 No faults

No. Action Comment

No. Action Comment

No. Action Comment
4 Make sure that K1 or K2 does not drop out Simulated welding of the contactor
when shutting down

Entry ID: 109478932, V1.2, 12/2015 79
No. Action Comment

required)
8 Start with no. 2

Safety Door without Guard Locking at PL c/SIL 1,

Hardware components
Table 6-55 Hardware

CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NC)
without tumbler
switch
Software components
Table 6-56 Software
Basic V13 SP1

Entry ID: 109478932, V1.2, 12/2015 80
6.10.3 Wiring

Figure 6-41 Safety door without guard locking PL c/SIL 1 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
K1
M
Vs1 0+
L+
.3 L+
K1
.0
M 0-
posSwitch
1.

Entry ID: 109478932, V1.2, 12/2015 81
Start
Actuator Yes Safety door

switches off open?
No
No
Actuator Yes
Safety door
Operational stop?
closed switches off
?
No
Yes
No
Safety door
closed
?
Acknowledge Yes
Start conditions
are complied
Actuator
on

Entry ID: 109478932, V1.2, 12/2015 82
6.10.5 Description of the user block FB F09FDoorSIL1PLc
Figure 6-43 F-user FB F09FDoorSIL1PLc
The following section describes the inputs and outputs of FB F09FDoorSIL1PLc.


1: required
the safety
function
 to reintegrate
F-I/O
1: Start request
0: Stop request
Position switch posSwitch BOOL NC
1: Actuator
inserted (safety
door closed)
Position switch value status posSwitch1VS BOOL VS: value status
0: Fault Chapter 6.1.6
Value status of output K1 K1VS BOOL
of the contactor

Entry ID: 109478932, V1.2, 12/2015 83

switched
(contactor has
picked up)
for safety door program.
Acknowledgment
required
commissioning FB F09FDoorSIL1PLc. Customizations are possible.

Requirements:
 No faults

Entry ID: 109478932, V1.2, 12/2015 84

No. Action Comment
No. Action Comment
4 Open the safety door K1 drops out

No. Action Comment
shutting down
7 Press start K1 does not pick up (acknowledgment required)
8 Start with no. 2

Entry ID: 109478932, V1.2, 12/2015 85

Safety Door without Guard Locking at PL e/SIL 3,
Electric Actuator

Hardware components
Table 6-62 Hardware
CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0

4x24VDC
pushbutton (NO)
pushbutton (NC)
without tumbler
switch
Software components
Table 6-63 Software
Basic V13 SP1

Entry ID: 109478932, V1.2, 12/2015 86
6.11.3 Wiring

Figure 6-44 Safety door without guard locking PL e/SIL 3 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
M
L+ Vs1
L+ 0+
.0
0-
.0
Vs2

Entry ID: 109478932, V1.2, 12/2015 87
Start

switch off open?
No
No
Actuators Yes
Safety door
Operational stop?
closed switch off
?
No
Yes
No
Safety door
closed
?
Acknowledge Yes
Start conditions
are complied
Actuators
on

Entry ID: 109478932, V1.2, 12/2015 88

type
1: required
Acknowledgment  after
triggering
the safety
function
 to
reintegrate
F-I/O
1: Start request
0: Stop request
1: Actuator
inserted (safety
door closed)
1: Actuator
inserted (safety

Entry ID: 109478932, V1.2, 12/2015 89

type
door closed)
status
Position switch 2 value posSwitch2VS BOOL VS: value status
Value status of output signalPLeSIL3QualityVS BOOL

the electric
actuator
door safety door, start F-library blocks. Can
is possible be read out, for
(safety door example, in the
closed) standard user
program.
Acknowledgment ackReqFDoor BOOL 1:

required
commissioning FB FF10EStopSIL3PLe. Customizations are possible.


Entry ID: 109478932, V1.2, 12/2015 90
Requirements:
 No faults

No. Action Comment
1 Open and close the safety door When starting the scenario for the first time
or in the event of a safety door fault, open
and close the door completely.
2 Press ack Required when starting the scenario for the
first time and after each opening of the
safety door.
3 Press start signalPLeSIL3Quality =1
4 Press stop signalPLeSIL3Quality = 0
No. Action Comment
safety door.
3 Press start signalPLeSIL3Quality = 1
4 Open the safety door signalPLeSIL3Quality =0

Entry ID: 109478932, V1.2, 12/2015 91

Safety Door without Guard Locking at PL d/SIL 2,
Electric Actuator
chapter 6.1.7.

Hardware components
Table 6-68 Hardware

CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NC)
without tumbler
switch
Software components
Table 6-69 Software
Basic V13 SP1

Entry ID: 109478932, V1.2, 12/2015 92
6.12.3 Wiring

Figure 6-47 Safety door without guard locking PL d/SIL 2 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
M
L+ Vs1
L+ 0+
.0
M signalPLdSIL2Quality
0-
.0
Vs2

Entry ID: 109478932, V1.2, 12/2015 93
Start

switch off open?
No
No
Actuators Yes
Safety door
Operational stop?
closed switch off
?
No
Yes
No
Safety door
closed
?
Acknowledge Yes
Start conditions
are complied
Actuators
on

Entry ID: 109478932, V1.2, 12/2015 94
6.12.5 Description of the user block FB F11FDoorSIL2PL
Figure 6-49 F-user FB F11FDoorSIL2PL
The following section describes the inputs and outputs of FB F11FDoorSIL2PL.
Table 6-70 Inputs of FB F11FDoorSIL2PL

type
1: required
triggering
the safety
function
 to
reintegrate
F-I/O
1: Start request
0: Stop request
1: Actuator
inserted (safety
door closed)
1: Actuator
inserted (safety

Entry ID: 109478932, V1.2, 12/2015 95

type
door closed)
status
Value status of output signalPLdSIL2QualityVS BOOL

the electric
actuator
program.

required


Entry ID: 109478932, V1.2, 12/2015 96
Requirements:
 No faults

No. Action Comment
safety door.
3 Press start signalPLdSIL2Quality =1
4 Press stop signalPLdSIL2Quality = 0
No. Action Comment
safety door.
3 Press start signalPLdSIL2Quality = 1
4 Open the safety door signalPLdSIL2Quality = 0

Entry ID: 109478932, V1.2, 12/2015 97

Safety Door without Guard Locking at PL c/SIL 1,
Electric Actuator

Hardware components
Table 6-74 Hardware
CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0

4x24VDC
pushbutton (NO)
pushbutton (NC)
without tumbler
switch
Software components
Table 6-75 Software
Basic V13 SP1

Entry ID: 109478932, V1.2, 12/2015 98
6.13.3 Wiring

Figure 6-50 Safety door without guard locking PL c/SIL 1 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
M
L+ Vs1
L+ 0+
.0
M
0-
posSwitch

Entry ID: 109478932, V1.2, 12/2015 99
Start
Actuator Yes Safety door

switches off open?
No
No
Actuator Yes
Safety door
Operational stop?
closed switches off
?
No
Yes
No
Safety door
closed
?
Acknowledge Yes
Start conditions
are complied
Actuator
on

Entry ID: 109478932, V1.2, 12/2015 100

type
1: required
triggering
the safety
function
 to
reintegrate
F-I/O
1: Start request
0: Stop request
1: Actuator
inserted (safety
door closed)

Entry ID: 109478932, V1.2, 12/2015 101

type
Position switch 1 value posSwitchVS BOOL 0: Fault
status
VS: value status

Chapter 6.1.6
Value status of output signalPLcSIL1QualityVS BOOL

Table 6-77 Outputs of FB F12FDoorSIL1PLc

the electric
actuator
program.
required


Entry ID: 109478932, V1.2, 12/2015 102
Requirements:
 No faults

No. Action Comment
safety door.
3 Press start signalPLcSIL1Quality = 1
4 Press stop signalPLcSIL1Quality = 0
No. Action Comment
safety door.
4 Open the safety door signalPLcSIL1Quality = 0

Entry ID: 109478932, V1.2, 12/2015 103

Safety Door with Guard Locking at PL e/SIL 3,
6.14.1 Safety functions
This user scenario has the following safety functions:

 Safety function with regard to opening/closing the safety door
– Opening the safety door during operation safely shuts down the actuator.
 Safety function with regard to guard locking
– After shutdown of the actuator, the safety door may only be opened when
the actuator no longer constitutes a hazard.
Note Under “Normative assessment of guard locking”, chapter 6.1.2 addresses the
situation where there is a safety function with regard to guard locking.

Hardware components
Table 6-80 Hardware
CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NC)
Position switch with 1 3SE5322-0SD21
solenoid interlocking
(spring-locked)
Hinge switch 1 3SE5132-0LU21
switch

Entry ID: 109478932, V1.2, 12/2015 104
Software components
Table 6-81 Software
Basic V13 SP1
6.14.3 Wiring

Figure 6-53 Safety door with guard locking PL e/SIL 3 wiring
24V DC
M
stop start ack
.0
.1
.2 L+
.5 M
L1 .4
0+
K2 K1
M
L+ Vs1 K1 K2
.3 .0
eMagnet 0-
1-
1+
fDoorCoil
.0
Vs2
hingedSwitch sepAct
The following signals from the above connection diagram are connected to the
position switch (sepAct):
 sepAct (monitoring of the actuator position)
 sepAct (monitoring of the locking device position)

Entry ID: 109478932, V1.2, 12/2015 105
 fDoorCoil (control of guard locking)
The following figure shows the wiring on the position switch and therefore
complements the above connection diagram.
Figure 6-54 Internal terminals of the position switch with solenoid interlocking
sepAct (F-DI) CH + (F-DQ)

eMagnet (Standard-DI)
L+ (F-CPU)
Vs1 (F-DI) CH – (F-DQ)

Entry ID: 109478932, V1.2, 12/2015 106
Figure 6-55 Safety door with guard locking – core functionality
Start
No
Stop request?
No
Yes
Safety door
closed
?
Actuators stop
Yes
Previous
stop was Yes
operational Timer starts
stop
?
No
Acknowledge Unlock No
timer
expired
?
Yes
Start conditions Safety door

are complied interlocking
is released
Actuators
on

Entry ID: 109478932, V1.2, 12/2015 107
In this example for electromechanical actuators, the safety door’s guard

locking is deactivated when the timer has expired. For moving parts, a
hazard cannot be automatically ruled out when the timer has expired.
WARNING
Make sure that the safety door’s guard locking is deactivated only when a hazard
no longer exists.

Note This example assumes that you are using a hinge switch (hingedSwitch) as a
second channel. However, it is not mandatory to use a hinge switch. The
required dual-channel redundancy can also be implemented with a different
switch.
Death or severe personal injury may result if you select a delayTimeUnlock

time that is too short.
WARNING Customize these times to your requirements, for example to the slow-down time
of a hazardous machine, to release the safety door when the delayTimeUnlock
time has expired.

Entry ID: 109478932, V1.2, 12/2015 108

type
1: Acknowledgment required
 after
triggering
the safety
function
 to
reintegrate
F-I/O
1: Start request
0: Stop request
Monitoring of magnet in eMagnet BOOL NC Chapter 6.1.2
position switch 0: Magnet in position
switch energized
1: Magnet in position
switch de-energized
auxiliary contact of contactor
K1 NC
0: Contactor has
K2
Position switch sepAct BOOL NC
1: Actuator inserted
(safety door closed)
Chapter 6.1.2
Hinge switch hingedSwitch BOOL NC
1: Unoperated (safety
door
closed)
Position switch value status sepActVS BOOL
Hinge switch value status hingedSwitchVS BOOL
VS: value status
Value status of output K1K2 K1K2VS BOOL 0: Fault Chapter 6.1.6
Value status of output fDoorCoilVS BOOL
fDoorCoil
of the contactors
Time delay after shutdown of delayTimeUnlock TIME Choose a time
the actuators to release the which is long
safety door. enough

Entry ID: 109478932, V1.2, 12/2015 109

command for the
contactors
Magnet in the fDoorCoil BOOL 0: Guard locking
position switch active
standard user
program.
required
commissioning FB F13FDoorSIL3PL3. Customizations are possible.

Requirements:
 No faults

Entry ID: 109478932, V1.2, 12/2015 110

No. Action Comment
safety door.
3 Press start Guard locking is activated, then K1K2 picks
up
4 Press stop K1K2 drops out; then the timer for the
delayed release of the safety door starts.
5 Wait until the timer expires. When the timer has expired, the safety door
can be opened.
Table 6-85 Safety function: Safety door fault

No. Action Comment

safety door.
up
4 Turn the hinge switch until it outputs “0” signal. K1K2 drops out; then the timer for the
can be opened.

No. Action Comment
shutting down
required)
8 Wait until the timer expires.
9 Start with no. 2

Entry ID: 109478932, V1.2, 12/2015 111

Safety Door with Guard Locking at PL d/SIL 2,

 Safety function with regard to the position of the safety door (interlocking)

Hardware components
Table 6-87 Hardware
CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NC)
(spring-locked)
switch
Software components
Table 6-88 Software

Entry ID: 109478932, V1.2, 12/2015 112

Basic V13 SP1
6.15.3 Wiring

Figure 6-57 Safety door with guard locking PL d/SIL 2 wiring
24V DC
M
stop start ack
.0
.1
.2 L+
.5 M
L1 .4
0+
K2 K1
M
L+ Vs1 K1 K2
.3 .0
0-
eMagnet
1-
1+
fDoorCoil
.0
Vs2
hingedSwitch sepAct

Entry ID: 109478932, V1.2, 12/2015 113
In the safety program, the signals of the position switch are defined as follows:

L+ (F-CPU)

Entry ID: 109478932, V1.2, 12/2015 114
Start
No
Stop request?
No
Yes
Safety door
closed
?
Actuators stop
Yes
Previous
stop was Yes
stop
?
No
Unlock No
Acknowledge timer
expired
?
Yes

is released
Actuators
on

Entry ID: 109478932, V1.2, 12/2015 115

WARNING
no longer exists.
Figure 6-60 F-user FB F14FDoorSIL2PLd

switch.

time has expired.

Entry ID: 109478932, V1.2, 12/2015 116
Table 6-89 Inputs of FB F14FDoorSIL2PLd

type
 after
triggering
the safety
function
 to
reintegrate
F-I/O
1: Start request
0: Stop request
switch energized
switch de-energized
K1 NC
0: Contactor has
K2
Chapter 6.1.2
door
closed)
VS: value status
Value status of output K1K2 K1K2VS BOOL 0: Fault Chapter 6.1.6
fDoorCoil
of the contactors
safety door. enough

Entry ID: 109478932, V1.2, 12/2015 117

command for the
contactors
standard user
program.
required

Requirements:
 No faults

Entry ID: 109478932, V1.2, 12/2015 118

No. Action Comment
safety door.
up
can be opened.

No. Action Comment

safety door.
up
can be opened.

No. Action Comment
shutting down
required)
9 Start with no. 2

Entry ID: 109478932, V1.2, 12/2015 119

Safety Door with Guard Locking at PL c/SIL 1,


Hardware components
Table 6-94 Hardware
CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NC)
(spring-locked)
switch
Software components
Table 6-95 Software
Basic V13 SP1

Entry ID: 109478932, V1.2, 12/2015 120
6.16.3 Wiring

Figure 6-61 Safety door with guard locking PL c/SIL 1 wiring
24V DC
M
stop start ack
.0
.1 L+
.2
M
L1 .4
K1
M
.3
L+ Vs1 0+
K1
.0
eMagnet 0-
1-
1+
fDoorCoil
sepAct

Entry ID: 109478932, V1.2, 12/2015 121

L+ (F-CPU)

Entry ID: 109478932, V1.2, 12/2015 122
Start
No
Stop request?
No
Yes
Safety door
closed
?
Actuator stops
Yes
Previous
stop was Yes
stop
?
No
Unlock No
Acknowledge timer
expired
?
Yes

is released
Actuator
on

WARNING
no longer exists.

Entry ID: 109478932, V1.2, 12/2015 123

time has expired.

type
 after
triggering
the safety
function
 to
reintegrate
F-I/O
1: Start request

Entry ID: 109478932, V1.2, 12/2015 124

type
0: Stop request
switch energized
switch de-energized
auxiliary contact of contactor 0: Contactor has
K1 picked up
Chapter 6.1.2
Position switch value status sepActVS BOOL 0: Fault

VS: value status
Chapter 6.1.6
Value status of output K1 K1VS BOOL
of the contactor

safety door. enough

switched
(contactor has
picked up)
standard user
program.
required

Entry ID: 109478932, V1.2, 12/2015 125

Requirements:
 No faults

No. Action Comment
safety door.
3 Press start Guard locking is activated, then K1 picks up
4 Press stop K1 drops out; then the timer for the delayed
release of the safety door starts.
can be opened.

Entry ID: 109478932, V1.2, 12/2015 126
No. Action Comment
safety door.
4 Release the interlocking and open the safety door K1 drops out

No. Action Comment
shutting down

required)
9 Start with no. 2

Entry ID: 109478932, V1.2, 12/2015 127

Safety Door with Guard Locking at PL e/SIL 3, Electric
Actuator


Hardware components
Table 6-101 Hardware
CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NC)
(spring-locked)
switch
Software components
Table 6-102 Software

Entry ID: 109478932, V1.2, 12/2015 128

Basic V13 SP1
6.17.3 Wiring

Figure 6-65 Safety door with guard locking PL e/SIL 3 wiring
24V DC
M
stop start ack
.0
.1
L+
.2
M
L1
M
.3
L+ Vs1
0+
.0 SignalPLeSIL3Quality
eMagnet
0-
1-
1+
fDoorCoil
.0
Vs2
hingedSwitch
sepAct
Note For the actuator signals, please refer to chapter 6.1.7.

Entry ID: 109478932, V1.2, 12/2015 129

L+ (F-CPU)

Entry ID: 109478932, V1.2, 12/2015 130
Start
No
Stop request?
No
Yes
Safety door
closed
?
Actuators stop
Yes
Previous
stop was Yes
stop
?
No
Unlock No
Acknowledge timer
expired
?
Yes
Safety door
Start conditions interlocking
are complied is released
Actuators
on
In this example for electric actuators, the safety door’s guard locking is
deactivated when the timer has expired. For moving parts, a hazard cannot
be automatically ruled out when the timer has expired.
WARNING
no longer exists.

Entry ID: 109478932, V1.2, 12/2015 131
Figure 6-68 F-user block FB F16FDoorSIL3PLe

switch.

time has expired.

Entry ID: 109478932, V1.2, 12/2015 132
Table 6-103 Inputs of FB F15F16FDoorSIL3PLe

type
 after
triggerin
g the
safety
function
 to
reintegra
te
F-I/O
1: Start request
0: Stop request
position switch 0: Magnet in
position switch
energized
1: Magnet in
position switch de-
energized
Chapter 6.1.2
1: Unoperated
(safety door
closed)
VS: value
Value status of output signalPLeSIL3QualityVS BOOL 0: Fault status
signalPLeSIL3Quality Chapter 6.1.6
fDoorCoil
In the position switch: Time feedbackTime TIME
between the response of the
magnet and the monitoring
contact
Time delay after shutdown of delayTimeUnlock TIME Choose a
the actuators to release the time which is
safety door. long enough

Output signal from signalPLeSIL3Quality BOOL 1: F-DQ output
the F-DQ to the set
electric actuator
Magnet in the fDoorCoil BOOL 0: Guard locking Actuator on F-DQ

Entry ID: 109478932, V1.2, 12/2015 133

standard user
program.
required
Configuration and parameterization




Entry ID: 109478932, V1.2, 12/2015 134
Requirements:
 No faults

No. Action Comment
safety door.
3 Press start Guard locking is activated, then

signalPLeSIL3Quality = 1
4 Press stop signalPLeSIL3Quality = 0; then the timer for
the delayed release of the safety door starts.
can be opened.

No. Action Comment
safety door.
signalPLeSIL3Quality = 1
4 Turn the hinge switch until it outputs “0” signal. signalPLeSIL3Quality = 0; then the timer for
can be opened.

Entry ID: 109478932, V1.2, 12/2015 135

Safety Door with Guard Locking at PL d/SIL 2, Electric
Actuator
chapter 6.1.7.

Hardware components
CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NC)
(spring-locked)
switch

Entry ID: 109478932, V1.2, 12/2015 136
Software components
Basic V13 SP1
6.18.3 Wiring

Figure 6-69 Safety door with guard locking PL d/SIL 2 wiring
24V DC
M
stop start ack
.0
.1
L+
.2
M
L1
M
.3
L+ Vs1 0+
.0
eMagnet 0-
1-
1+
fDoorCoil
.0
Vs2
hingedSwitch
sepAct

Entry ID: 109478932, V1.2, 12/2015 137

L+ (F-CPU)

Entry ID: 109478932, V1.2, 12/2015 138
Start
No
Stop request?
No
Yes
Safety door
closed
?
Actuators stop
Yes
Previous
stop was Yes
stop
?
No
Unlock No
Acknowledge timer
expired
?
Yes
Safety door
Actuators
on
WARNING
no longer exists.

Entry ID: 109478932, V1.2, 12/2015 139
Figure 6-72 User block FB F17FDoorSIL2PLd

switch.

time has expired.

Entry ID: 109478932, V1.2, 12/2015 140
Table 6-109 Inputs of FB F17FDoorSIL2PLd

type
 after
triggerin
g the
safety
function
 to
reintegra
te
F-I/O
1: Start request
0: Stop request
position switch
energized
1: Magnet in
position switch de-
energized
Chapter 6.1.2
1: Unoperated
(safety door
closed)
VS: value
Value status of output signalPLdSIL2QualityVS BOOL 0: Fault status
signalPLdSIL2Quality Chapter 6.1.6
fDoorCoil
between the response of the
magnet and the monitoring
contact
Time delay after shutdown of delayTimeUnlock TIME Choose a
the actuators to release the time which is
safety door. long enough

Output signal from signalPLdSIL2Quality BOOL 1: F-DQ output
the F-DQ to the set
electric actuator

Entry ID: 109478932, V1.2, 12/2015 141

standard user
program.
required

Requirements:
 No faults

Entry ID: 109478932, V1.2, 12/2015 142

No. Action Comment
safety door.
signalPLdSIL2Quality = 1
4 Press stop signalPLdSIL2Quality = 0; then the timer for
can be opened.

No. Action Comment

safety door.
4 Turn the hinge switch until it outputs “0” signal. signalPLdSIL2Quality = 0; then the timer for
can be opened.

Entry ID: 109478932, V1.2, 12/2015 143

Safety Door with Guard Locking at PL c/SIL 1, Electric
Actuator


Hardware components
CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NC)
(spring-locked)
switch
Software components
Basic V13 SP1

Entry ID: 109478932, V1.2, 12/2015 144
6.19.3 Wiring

Figure 6-73 Safety door with guard locking SIL 1/PL d wiring
24V DC
M
stop start ack
.0
.1
L+
.2
M
L1
M
.3
L+ Vs1 0+
.0 signalPLcSIL1Quality
eMagnet 0-
1-
1+
fDoorCoil
sepAct

Entry ID: 109478932, V1.2, 12/2015 145

L+ (F-CPU)

Entry ID: 109478932, V1.2, 12/2015 146
Start
No
Stop request?
No
Yes
Safety door
closed
?
Actuator stops
Yes
Previous
stop was Yes
stop
?
No
Unlock No
Acknowledge timer
expired
?
Yes
Safety door
Actuator
on

Entry ID: 109478932, V1.2, 12/2015 147
WARNING
no longer exists.
Figure 6-76 F-user block FB F18FDoorSIL1PLc


time has expired.

Entry ID: 109478932, V1.2, 12/2015 148

type
 after
triggering
the safety
function
 to
reintegrat
e
F-I/O
1: Start request
0: Stop request
position switch
energized
1: Magnet in
position switch de-
energized

1: Actuator inserted Chapter 6.1.2
Position switch value status sepActVS BOOL 0: Fault

VS: value
Value status of output signalPLcSIL1QualityVS BOOL status
signalPLcSIL1Quality Chapter 6.1.6
Time delay after shutdown delayTimeUnlock TIME Choose a

of the actuators to release time which is
the safety door. long enough

Output signal from signalPLcSIL1Quality BOOL 1: F-DQ output
the F-DQ to the set
electric actuator
standard user
program.
required

Entry ID: 109478932, V1.2, 12/2015 149

Requirements:
 No faults
No. Action Comment
safety door.
signalPLcSIL1Quality = 1
4 Press stop signalPLcSIL1Quality = 0; then the timer for
can be opened.

Entry ID: 109478932, V1.2, 12/2015 150

Emergency Stop + Safety Door without Guard Locking
at PL e/SIL 3, Electromechanical Actuator

 Pressing the emergency stop button safely shuts down the actuator.
 Opening the safety door during operation safely shuts down the actuator.
Hardware components
CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NC)
pushbutton (NC/NC)
without tumbler
switch
Software components
Basic V13 SP1

Entry ID: 109478932, V1.2, 12/2015 151
6.20.3 Wiring

Figure 6-77 Emergency stop and safety door without guard locking PL e/SIL 3 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
K2 K1
M
L+ Vs1
.3 L+ 0+
K1
.1
.4 M
K2
0-
.1
.0
Vs2
eStop
Vs1
.0

Entry ID: 109478932, V1.2, 12/2015 152

Figure 6-78 Emergency stop + safety door without guard locking – core functionality
Start
No
Stop request?
No
Safety door
Yes
closed
and e-stop
released Actuator is
? switched off
Yes
Previous
stop was Yes
operational stop
No
Acknowledge
Start conditions
are complied
Actuators
on

Entry ID: 109478932, V1.2, 12/2015 153
6.20.5 Description of the user block FB F19EStopFDoorSIL3PLe
Figure 6-79 User block FB F19EStopFDoorSIL3PLe
The following section describes the inputs and outputs of FB
F19EStopFDoorSIL3PLe.
Table 6-120 Inputs of FB F19EStopFDoorSIL3PLe

1: required
Acknowledgment  after triggering a
safety function
 to reintegrate
F-I/O
1: Start request
0: Stop request
contactor K1 NC
0: Contactor has
contactor K2

Entry ID: 109478932, V1.2, 12/2015 154

stop triggered
1: Actuator
inserted (safety
door closed)
1: Actuator
inserted (safety
door closed)
status
VS: value status

of the contactors
Table 6-121 Outputs of FB F19EStopFDoorSIL3PLe


command for the
contactors
is possible (safety be read out, for
door closed) example, in the
Release releaseEStop BOOL 1: Emergency standard user
emergency stop program.
stop released and
acknowledged
required
Acknowledgment ackReqEStop BOOL
required

Entry ID: 109478932, V1.2, 12/2015 155
commissioning FB F19EStopFDoorSIL3PLe. Customizations are possible.

Requirements:
 No faults

No. Action Comment
safety door.

Entry ID: 109478932, V1.2, 12/2015 156
No. Action Comment
safety door.

No. Action Comment

required)

No. Action Comment
shutting down
required)
8 Start with no. 2

Entry ID: 109478932, V1.2, 12/2015 157

at PL d/SIL 2, Electromechanical Actuator

Hardware components
CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NC)
pushbutton (NC/NC)
without tumbler
switch
Software components
Basic V13 SP1

Entry ID: 109478932, V1.2, 12/2015 158
6.21.3 Wiring

Figure 6-80 Emergency stop and safety door without guard locking PL d/SIL 2 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
K2 K1
M
L+ Vs1
.3 L+ 0+
K1
.1
.4 M
K2
0-
.1
.0
Vs2
eStop
Vs1
.0

Entry ID: 109478932, V1.2, 12/2015 159

Start
No
Stop request?
No
Safety door
Yes
closed
and e-stop
? switched off
Yes
Previous
stop was Yes
operational
stop
?
No
Acknowledge
Start conditions
are complied
Actuators
on

Entry ID: 109478932, V1.2, 12/2015 160
6.21.5 Description of the user block FB F20EStopFDoorSIL2PLd
Figure 6-82 User block FB F20EStopFDoorSIL2PLd
F20EStopFDoorSIL2PLd.
Table 6-128 Inputs of FB F20EStopFDoorSIL2PLd

1: required
the safety
function
 to reintegrate
F-I/O
1: Start request
0: Stop request
contactor K1 NC
0: Contactor has
contactor K2

Entry ID: 109478932, V1.2, 12/2015 161

stop triggered
1: Actuator
inserted (safety
door closed)
1: Actuator
inserted (safety
door closed)
status
VS: value status

of the contactors
Table 6-129 Outputs of FB F20EStopFDoorSIL2PLd


command for the
contactors
program.
emergency stop stop released and
acknowledged
required
required

Entry ID: 109478932, V1.2, 12/2015 162
commissioning FB F20EStopFDoorSIL2PLd. Customizations are possible.

Requirements:
 No faults

No. Action Comment
safety door.

Entry ID: 109478932, V1.2, 12/2015 163
No. Action Comment
safety door.

No. Action Comment

required)

No. Action Comment
shutting down
required)
8 Start with no. 2

Entry ID: 109478932, V1.2, 12/2015 164

at PL c/SIL 1, Electromechanical Actuator

Hardware components
CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NC)
pushbutton (NC)
without tumbler
switch
Software components
Basic V13 SP1

Entry ID: 109478932, V1.2, 12/2015 165
6.22.3 Wiring

Figure 6-83 Emergency stop and safety door without guard locking PL c/SIL 1 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
K1
M
L+ Vs1 0+
.3 L+
K1
.1
0-
M
.0
eStop posSwitch1
Vs1
1.

Entry ID: 109478932, V1.2, 12/2015 166
Start
No
Stop request?
No
Safety door
Yes
closed
and e-stop
? switched off
Yes
Previous
stop was Yes
operational
stop
?
No
Acknowledge
Start conditions
are complied
Actuator
on

Entry ID: 109478932, V1.2, 12/2015 167
6.22.5 Description of the user block FB F21EStopFDoorSIL1PLc
Figure 6-85 User block FB F21EStopFDoorSIL1PLc
F21EStopFDoorSIL1PLc.
Table 6-136 Inputs of FB F21EStopFDoorSIL1PLc

1: required
the safety
function
 to reintegrate
F-I/O
1: Start request
0: Stop request
stop triggered

Entry ID: 109478932, V1.2, 12/2015 168

1: Actuator
inserted (safety
door closed)
Position switch value status posSwitchVS BOOL 0: Fault VS: value status
Value status of output K1 K1VS BOOL Chapter 6.1.6

of the contactor
Table 6-137 Outputs of FB F21EStopFDoorSIL1PLc

command for the
contactors
standard user
Release releaseEStop BOOL 1: Emergency

stop released and
acknowledged
required
required
commissioning FB F21EStopFDoorSIL1PLc. Customizations are possible.


Entry ID: 109478932, V1.2, 12/2015 169
Requirements:
 No faults

No. Action Comment
safety door.

No. Action Comment
required)
No. Action Comment
safety door.
4 Open the safety door K1 drops out

Entry ID: 109478932, V1.2, 12/2015 170

No. Action Comment
safety door.
shutting down
required)

Emergency Stop and Safety Door without Guard
Locking at PL e/SIL 3, Electric Actuator


Hardware components
CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NC)
pushbutton (NC/NC)
without tumbler

Entry ID: 109478932, V1.2, 12/2015 171

switch
Software components
Basic V13 SP1

Entry ID: 109478932, V1.2, 12/2015 172
6.23.3 Wiring

Figure 6-86 Emergency stop and safety door without guard locking PL e/SIL 3 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
M
L+ Vs1
L+
0+
.1
0-
.1
.0
Vs2
eStop
Vs1
.0

Entry ID: 109478932, V1.2, 12/2015 173

Start
No
Stop request?
No
Safety door
Yes
closed
and e-stop
? switched off
Yes
Previous
stop was Yes
operational
stop
?
No
Acknowledge
Start conditions
are complied
Actuators
on

Entry ID: 109478932, V1.2, 12/2015 174

type
1: required
triggering
the safety
function
 to
reintegrate
F-I/O
1: Start request
0: Stop request
stop triggered
1: Actuator
inserted (safety

Entry ID: 109478932, V1.2, 12/2015 175

type
door closed)
1: Actuator
inserted (safety
door closed)
Position switch 1 value posSwitch1VS BOOL 0: Fault
status
status Chapter 6.1.6
Value status of output signalPLeSIL3QualityVS BOOL

the electric
actuator

program.
emergency stop stop released
and
acknowledged
required
required


Entry ID: 109478932, V1.2, 12/2015 176
Requirements:
 No faults

No. Action Comment
safety door.
4 Press stop signalPLeSIL3Quality = 0

No. Action Comment
safety door.
4 Press the emergency stop (eStop) signalPLeSIL3Quality = 0
No. Action Comment
safety door.

Entry ID: 109478932, V1.2, 12/2015 177
No. Action Comment

4 Open the safety door signalPLeSIL3Quality = 0

at PL d/SIL 2, Electric Actuator
chapter 6.1.7.

Hardware components
CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NC)
pushbutton (NC/NC)
without tumbler
switch

Entry ID: 109478932, V1.2, 12/2015 178
Software components
Basic V13 SP1
6.24.3 Wiring

Figure 6-89 Emergency stop and safety door without guard locking PL d/SIL 2 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
L+ Vs1 0+
L+
.1 signalPLdSIL2Quality
M
0-
.1
.0
Vs2
eStop
Vs1
.0

Entry ID: 109478932, V1.2, 12/2015 179

Start
No
Stop request?
No
Safety door
Yes
closed
and e-stop
? switched off
Yes
Previous
stop was Yes
operational stop
?
No
Acknowledge
Start conditions
are complied
Actuators
on

Entry ID: 109478932, V1.2, 12/2015 180

type
1: required
triggering
the safety
function
 to
reintegrate
F-I/O
1: Start request
0: Stop request
stop triggered
1: Actuator
inserted (safety

Entry ID: 109478932, V1.2, 12/2015 181

type
door closed)
1: Actuator
inserted (safety
door closed)
status
Value status of output signalPLdSIL2QualityVS BOOL

the electric
actuator

program.
acknowledged
required
required


Entry ID: 109478932, V1.2, 12/2015 182
Requirements:
 No faults

No. Action Comment
safety door.
4 Press stop signalPLdSIL2Quality = 0

No. Action Comment
safety door.
4 Press the emergency stop (eStop) signalPLdSIL2Quality = 0
No. Action Comment
safety door.

Entry ID: 109478932, V1.2, 12/2015 183
No. Action Comment

4 Open the safety door signalPLdSIL2Quality = 0

at PL c/SIL 1, Electric Actuator


Hardware components
CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NC)
pushbutton (NC)
without tumbler
switch
Software components
Basic V13 SP1

Entry ID: 109478932, V1.2, 12/2015 184
6.25.3 Wiring

Figure 6-92 Emergency stop and safety door without guard locking PL c/SIL 1 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
M
L+ Vs1
L+
0+
.1
M
0-
.0
eStop posSwitch1
Vs1

Entry ID: 109478932, V1.2, 12/2015 185

Start
No
Stop request?
No
Safety door
Yes
closed
and e-stop
? switched off
Yes
Previous
stop was Yes
operational
stop
?
No
Acknowledge
Start conditions
are complied
Actuator
on

Entry ID: 109478932, V1.2, 12/2015 186


type
1: required
triggering
the safety
function
 to
reintegrate
F-I/O
1: Start request
0: Stop request
stop triggered
1: Actuator
inserted (safety
door closed)

Entry ID: 109478932, V1.2, 12/2015 187

type
Position switch value posSwitchVS BOOL 0: Fault
status VS: value status
Value status of output signalPLcSIL1QualityVS BOOL Chapter 6.1.6

the electric
actuator
stop released and
acknowledged

required
required


Entry ID: 109478932, V1.2, 12/2015 188
Requirements:
 No faults

No. Action Comment
safety door.
4 Press stop signalPLcSIL1Quality = 0

No. Action Comment
safety door.
4 Press the emergency stop (eStop) signalPLcSIL1Quality = 0
No. Action Comment
safety door.

Entry ID: 109478932, V1.2, 12/2015 189
No. Action Comment

4 Open the safety door signalPLcSIL1Quality = 0

Emergency Stop + Safety Door with Guard Locking at
PL e/SIL 3, Electromechanical Actuator

Hardware components
CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NC)
pushbutton (NC/NC)
(spring-locked)

Entry ID: 109478932, V1.2, 12/2015 190

switch
Software components
Basic V13 SP1

Entry ID: 109478932, V1.2, 12/2015 191
6.26.3 Wiring

Figure 6-95 Emergency stop + safety door with guard locking PL e/SIL 3 wiring
24V DC
M
stop start ack
.0
.1
.2 L+
.4 M
L1 .3
0+ Vs1
K2 K1
M
L+ .0 K1 K2
.5 eMagnet .1
0-
1-
1+
fDoorCoil
.1
Vs2
hingedSwitch
sepAct
.0
eStop

Entry ID: 109478932, V1.2, 12/2015 192

L+ (F-CPU)

Entry ID: 109478932, V1.2, 12/2015 193
once. Then acknowledge with ack=1.
Figure 6-97 Emergency stop + safety door with guard locking – core functionality
Start
No
Stop request?
No
Safety door
Yes
closed
and e-stop
released
? Actuators stop
Yes
Previous
stop was Yes
operational
Timer starts
stop
?
No
Unlock No
Acknowledge timer
expired
?
Yes

is released
Actuators
on

Entry ID: 109478932, V1.2, 12/2015 194

WARNING
no longer exists.

switch.

time has expired.

Entry ID: 109478932, V1.2, 12/2015 195

type
 after
triggering
the safety
function
 to
reintegrate
F-I/O
1: Start request

0: Stop request
switch energized
switch de-energized
contactor K1 NC
0: Contactor has picked
Readback signal from readbackK2 BOOL up
contactor K2
Emergency stop pushbutton eStop BOOL NC/NC
0: Emergency stop
triggered
(safety door closed) Chapter 6.1.2
door
closed)
VS: value status
Value status of output K1K2 K1K2_VS BOOL 0: Fault Chapter 6.1.6
Value status of output fDoorCoil_VS BOOL
fDoorCoil
of the contactors

Entry ID: 109478932, V1.2, 12/2015 196

type
Time delay after shutdown delayTimeUnlock TIME When the time has Choose a time
of the actuators to release elapsed, the door will be which is long
the safety door. released. enough

command for the
contactors
Release releaseEStop BOOL 1: Emergency stop standard user
program.
emergency stop released and
acknowledged
required
Acknowledgment AckReqEStop BOOL
required
commissioning FB F32F25EStopFDoorSIL3PLe. Customizations are possible.


Entry ID: 109478932, V1.2, 12/2015 197
6.26.7 Implementation of the safety functions in the F-program
In this chapter, you will find information on the structure of the F-program that is (in
parts) also applicable to the other user scenarios.
Release
The application will only be released when the F-library blocks for the safety door
(FB SFDOOR) and the emergency stop (FB ESTOP1), for their part, give the
release (Q=1).
Figure 6-99 Release of safety door and emergency stop
For each release,

Q=1 is required
Switching the actuator

The actuator can only be switched on when the safety door provides feedback that
the safety door was interlocked. This information is provided via the eMagnet
variable that correlates with the magnet in the position switch (see also “Safety
door signals” in chapter 6.1.2).

Entry ID: 109478932, V1.2, 12/2015 198
Figure 6-100 Switching the actuator
Contactor auxiliary
contacts must
correlate
with the actuator
signal
Missing release of
safety door or e-stop or
operational stop
switches off the actuator
Feedback from the

magnet in the position
switch as a
switch-on condition
Guard locking
The guard locking also uses FB FDBACK. This is where the correlation of the
signals of the eMagnet monitoring contact and of the magnet in the position switch
is monitored.
Figure 6-101 Activating and monitoring the interlocking
Death or severe personal injury may result if the actuator starts before the
safety door is interlocked.
WARNING For the following reason, this risk does not exist in the user scenarios described
in this document: The guard locking, incl. monitoring, was programmed in a
network following the switching of the actuator. This means that the actuator
only starts one program cycle after the safety door has been interlocked
(switch-on condition due to eMagnet).

Entry ID: 109478932, V1.2, 12/2015 199
Requirements:
 No faults

No. Action Comment

safety door.
up
can be opened.

No. Action Comment
safety door.
required)

Entry ID: 109478932, V1.2, 12/2015 200

No. Action Comment
safety door.
up
can be opened.

No. Action Comment

shutting down
required)
8 Start with no. 2

Entry ID: 109478932, V1.2, 12/2015 201

PL d/SIL 2, Electromechanical Actuator

Hardware components
CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NC)
pushbutton (NC/NC)
(spring-locked)
switch

Entry ID: 109478932, V1.2, 12/2015 202
Software components
Basic V13 SP1

Entry ID: 109478932, V1.2, 12/2015 203
6.27.3 Wiring

Figure 6-102 Emergency stop + safety door with guard locking PL d/SIL 2 wiring
24V DC
M
stop start ack
.0
.1
.2 L+
.4 M
L1 .3
0+ Vs1
K2 K1
M
L+ .0 K1 K2
.1
.5 eMagnet 0-
1-
1+
fDoorCoil
.1
Vs2
hingedSwitch
sepAct
.0
eStop

Entry ID: 109478932, V1.2, 12/2015 204

L+ (F-CPU)

Entry ID: 109478932, V1.2, 12/2015 205
Start
No
Stop request?
No
Safety door
Yes
closed
and e-stop
released
? Actuators stop
Yes
Previous
stop was Yes
operational
Timer starts
stop
?
No
Unlock No
Acknowledge timer
expired
?
Yes

is released
Actuators
on

WARNING
no longer exists.

Entry ID: 109478932, V1.2, 12/2015 206

switch.

time has expired.

Entry ID: 109478932, V1.2, 12/2015 207

type
 after
triggering
the safety
function
 to
reintegrate
F-I/O
1: Start request
0: Stop request
switch energized
switch de-energized
contactor K1 NC
0: Contactor has picked
Readback signal from readbackK2 BOOL up
contactor K2
0: Emergency stop
triggered
Chapter 6.1.2
door
closed)
VS: value status
Value status of output K1K2 K1K2_VS BOOL 0: Fault Chapter 6.1.6
fDoorCoil
of the contactors

Entry ID: 109478932, V1.2, 12/2015 208

command for the
contactors
released and
acknowledged
Acknowledgment AckReqEStop BOOL required
required



Entry ID: 109478932, V1.2, 12/2015 209
Requirements:
 No faults

No. Action Comment

safety door.
up
can be opened.

No. Action Comment
safety door.
required)

Entry ID: 109478932, V1.2, 12/2015 210

No. Action Comment
safety door.
up
can be opened.

No. Action Comment

shutting down
required)
8 Start with no. 2

Entry ID: 109478932, V1.2, 12/2015 211

PL c/SIL 1, Electromechanical Actuator

Hardware components
CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NC)
pushbutton (NC)
(spring-locked)
switch

Entry ID: 109478932, V1.2, 12/2015 212
Software components
Basic V13 SP1

Entry ID: 109478932, V1.2, 12/2015 213
6.28.3 Wiring

Figure 6-106 Emergency stop + safety door with guard locking PL c/SIL 1 wiring
24V DC
M
stop start ack
.0
.1
.2 L+
M
L1
Vs1
K1
M
.4
.0 0+
L+
K1
.1
.3 eMagnet 0-
1-
1+
fDoorCoil
.1
sepAct
.0
eStop

Entry ID: 109478932, V1.2, 12/2015 214
readback. Basically, monitoring the readback signals is not required for
PL c/SIL 1.

L+ (F-CPU)

Entry ID: 109478932, V1.2, 12/2015 215
Start
No
Stop request?
No
Safety door
Yes
closed
and e-stop
released
? Actuator stops
Yes
Previous
stop was Yes
operational
Timer starts
stop
?
No
Unlock No
Acknowledge timer
expired
?
Yes

is released
Actuator
on

Entry ID: 109478932, V1.2, 12/2015 216

WARNING
no longer exists.


time has expired.

Entry ID: 109478932, V1.2, 12/2015 217

type
 after
triggering
the safety
function
 to
reintegrate
F-I/O
1: Start request
0: Stop request
switch energized
switch de-energized
auxiliary contact of 0: Contactor has picked
contactor K1 up
0: Emergency stop
triggered
Chapter 6.1.2
Position switch value status sepActVS BOOL 0: Fault VS: value status
Value status of output K1 K1_VS BOOL Chapter 6.1.6

of the contactor

switched
(contactor has
picked up)
program.
released and

Entry ID: 109478932, V1.2, 12/2015 218

emergency stop acknowledged
required
required


Entry ID: 109478932, V1.2, 12/2015 219
Requirements:
 No faults

No. Action Comment
safety door.
4 Press stop K1 drops out; then the timer for the delayed
release of the safety door starts.
can be opened.

No. Action Comment

safety door.
required)

No. Action Comment
safety door.
shutting down

Entry ID: 109478932, V1.2, 12/2015 220
No. Action Comment

required)
8 Start with no. 2

Emergency Stop and Safety Door with Guard Locking
at PL e/SIL 3, Electric Actuator

Hardware components
CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NC)
pushbutton (NC/NC)
(spring-locked)

Entry ID: 109478932, V1.2, 12/2015 221

switch
Software components
Basic V13 SP1

Entry ID: 109478932, V1.2, 12/2015 222
6.29.3 Wiring

Figure 6-110 Emergency stop + safety door with guard locking PL e/SIL 3 wiring
24V DC
M
stop start ack
.0
.1
.2 L+
M
L1
Vs1
M
.3 .0 0+
L+
SignalPLeSIL3Quality
.1 0-
eMagnet
1-
1+
fDoorCoil
.1
Vs2
hingedSwitch
sepAct
.0
eStop

Entry ID: 109478932, V1.2, 12/2015 223

L+ (F-CPU)

Entry ID: 109478932, V1.2, 12/2015 224
Start
No
Stop request?
No
Safety door
Yes
closed
and e-stop
released
? Actuators stop
Yes
Previous
stop was Yes
stop
?
No
Unlock No
Acknowledge timer
expired
?
Yes

is released
Actuators
on

Entry ID: 109478932, V1.2, 12/2015 225
WARNING
no longer exists.

switch.

time has expired.

Entry ID: 109478932, V1.2, 12/2015 226

type
Acknowledgment ack BOOL NO Positive
1: Acknowledgment edge
required
 after
triggerin
g the
safety
function
 to
reintegr
ate
F-I/O

1: Start request
0: Stop request
Monitoring of magnet in eMagnet BOOL NC Chapter
position switch 0: Magnet in 6.1.2
position switch
energized
1: Magnet in
position switch de-
energized
pushbutton 0: Emergency stop
triggered
(safety door closed) Chapter
Hinge switch hingedSwitch BOOL NC 6.1.2
1: Unoperated
(safety door
closed)
Hinge switch value status hingedSwitchVS BOOL VS: value
0: Fault
Value status of output signalPLeSIL3Quality_VS BOOL status
signalPLeSIL3Quality Chapter
6.1.6
fDoorCoil
between the response of
the magnet and the
monitoring contact

Entry ID: 109478932, V1.2, 12/2015 227

type
Time delay after shutdown delayTimeUnlock TIME When the time has Choose a
of the actuators to release elapsed, the door time which is
the safety door. will be released. long enough

Channel 1: signalPLeSIL3Quality BOOL 1: F-DQ output
Output signal set
from the F-DQ to
the electric
actuator
program.
emergency stop stop released
and
acknowledged
required
required


Entry ID: 109478932, V1.2, 12/2015 228
Requirements:
 No faults

No. Action Comment

safety door.
signalPLeSIL3Quality=1
4 Press stop signalPLeSIL3Quality = 0; then the timer for
can be opened.

No. Action Comment
safety door.
4 Press the emergency stop (eStop) signalPLeSIL3Quality=0

Entry ID: 109478932, V1.2, 12/2015 229

No. Action Comment
safety door.
signalPLeSIL3Quality=1
4 Turn the hinge switch until it outputs “0” signal. signalPLeSIL3Quality = 0; then the timer for
can be opened.

PL d/SIL 2, Electric Actuator
chapter 6.1.7.


Entry ID: 109478932, V1.2, 12/2015 230
Hardware components
CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NC)
pushbutton (NC/NC)
(spring-locked)
switch
Software components
Basic V13 SP1

Entry ID: 109478932, V1.2, 12/2015 231
6.30.3 Wiring

Figure 6-114 Emergency stop + safety door with guard locking PL d/SIL 2 wiring
24V DC
M
stop start ack
.0
.1
.2 L+
M
L1
Vs1
M
.3 .0 0+
L+
.1
eMagnet 0-
1-
1+
fDoorCoil
.1
Vs2
hingedSwitch
.0
sepAct
eStop

Entry ID: 109478932, V1.2, 12/2015 232

L+ (F-CPU)

Entry ID: 109478932, V1.2, 12/2015 233
Start
No
Stop request?
No
Safety door
Yes
closed
and e-stop
released
? Actuators stop
Yes
Previous
stop was Yes
stop
?
No
Unlock No
Acknowledge timer
expired
?
Yes

is released
Actuators
on
WARNING
no longer exists.

Entry ID: 109478932, V1.2, 12/2015 234

switch.

time has expired.

Entry ID: 109478932, V1.2, 12/2015 235

type
Acknowledgment ack BOOL NO Positive
1: Acknowledgment edge
required
 after
triggerin
g the
safety
function
 to
reintegr
ate
F-I/O
1: Start request
0: Stop request
Monitoring of magnet in eMagnet BOOL NC Chapter
position switch 0: Magnet in 6.1.2
position switch
energized
1: Magnet in
position switch de-

energized
triggered
(safety door closed) Chapter
Hinge switch hingedSwitch BOOL NC 6.1.2
1: Unoperated
(safety door
closed)
Hinge switch value status hingedSwitchVS BOOL VS: value
Value status of output signalPLdSIL2Quality_VS BOOL status
0: Fault
signalPLdSIL2Quality Chapter
6.1.6
fDoorCoil
between the response of
the magnet and the
monitoring contact
of the actuators to release elapsed, the door time which is
the safety door. will be released. long enough

Entry ID: 109478932, V1.2, 12/2015 236

Output signal from signalPLdSIL2Quality BOOL 1: F-DQ output
the F-DQ to the set
electric actuator
program.
acknowledged
required
required



Entry ID: 109478932, V1.2, 12/2015 237
Requirements:
 No faults

No. Action Comment

safety door.
4 Press stop signalPLdSIL2Quality=0; then the timer for
can be opened.

No. Action Comment
safety door.
4 Press the emergency stop (eStop) signalPLdSIL2Quality=0
6 Press start signalPLdSIL2Quality=0;

Entry ID: 109478932, V1.2, 12/2015 238

No. Action Comment
safety door.
4 Turn the hinge switch until it outputs “0” signal. signalPLdSIL2Quality=0; then the timer for
can be opened.

Entry ID: 109478932, V1.2, 12/2015 239

PL c/SIL 1, Electric Actuator

Hardware components
CPU 1215FC 1 6ES7215-1HF40-0XB0
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NC)
pushbutton (NC)
(spring-locked)
switch

Entry ID: 109478932, V1.2, 12/2015 240
Software components
Basic V13 SP1

Entry ID: 109478932, V1.2, 12/2015 241
6.31.3 Wiring

Figure 6-118 Emergency stop + safety door with guard locking PL c/SIL 1 wiring
24V DC
M
stop start ack
.0
.1
.2 L+
M
L1
Vs1
M
.3 .0 0+
L+
.1 0-
eMagnet
1-
1+
fDoorCoil
sepAct
.0
eStop
Vs1

Entry ID: 109478932, V1.2, 12/2015 242

L+ (F-CPU)

Entry ID: 109478932, V1.2, 12/2015 243
Start
No
Stop request?
No
Safety door
Yes
closed
and e-stop
released
? Actuator stops
Yes
Previous
stop was Yes
stop
?
No
Unlock No
Acknowledge timer
expired
?
Yes

is released
Actuators
on

Entry ID: 109478932, V1.2, 12/2015 244
WARNING
no longer exists.


time has expired.

Entry ID: 109478932, V1.2, 12/2015 245

type
 after
triggering
the
safety
function
 to
reintegrat
e
F-I/O
1: Start request
0: Stop request
switch energized
switch de-energized

triggered
Chapter 6.1.2
Position switch value sepActVS BOOL 0: Fault

status VS: value
status
Value status of output signalPLcSIL1QualityVS BOOL Chapter 6.1.6
of the actuators to release elapsed, the door will time which is
the safety door. be released. long enough
Table 6-203 FB F30EStopFDoorSIL1PLc

Output signal from signalPLcSIL1Quality BOOL 1: F-DQ output
the F-DQ to the set
electric actuator
stop released and
acknowledged

Entry ID: 109478932, V1.2, 12/2015 246

Acknowledgment ackReqEStop BOOL required
required

For demonstration purposes, this document shows different user scenarios.
Requirements:
 No faults

No. Action Comment
safety door.
signalPLcSIL1Quality = 1
4 Press stop signalPLcSIL1Quality=0; then the timer for
can be opened.

Entry ID: 109478932, V1.2, 12/2015 247

No. Action Comment
safety door.
4 Press the emergency stop (eStop) signalPLcSIL1Quality=0

Entry ID: 109478932, V1.2, 12/2015 248
7 References/Links
7 References/Links
Table 7-1
Subject Title
\1\ Siemens Industry https://support.industry.siemens.com/cs/?lc=en-WW
Online Support
\2\ Download page of https://support.industry.siemens.com/cs/ww/en/view/109478932
the entry
\3\ DIN EN ISO 14119 Safety of machinery –
Interlocking devices associated with
guards –
Principles for design and selection (ISO 14119:2013);
German version EN ISO 14119:2013
\4\ Standard: Safety of machinery –
IEC 62061 Functional safety of safety-related electrical, electronic
and programmable electronic control systems
\5\ Standard: Safety of machinery –
ISO 13849 Safety-related parts of control systems
\6\ Safety Evaluation www.siemens.com/safety-evaluation-tool
Tool (SET)
\7\ Document for https://support.industry.siemens.com/cs/de/en/view/23996473
IEC 62061
8 History
Table 8-1
Version Date Modifications
V1.0 11/2015 First version
V1.1 12/2015 Addition of the Value status for F-DQ
V1.2 12/2015 „ack“ as NO in the circuit diagram
Replacement picture position switch with guard locking

Entry ID: 109478932, V1.2, 12/2015 249

Safety With S7 1200FCPU V12 en

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Safety With S7 1200FCPU V12 en

Uploaded by

Copyright:

Available Formats

Application Examples  12/2015

Safety Applications with the

Warranty and Liability

Vertragspflichten”). The damages for a breach of a substantial contractual

Safety with S7-1200 FC CPU

6.1.3 Program structure ............................................................................... 29

Safety with S7-1200 FC CPU

6.5 User Scenario 4: Emergency Stop at PL e/SIL 3, Electric

6.7.6 Configuration and parameterization ................................................... 67

Safety with S7-1200 FC CPU

6.11.3 Wiring ................................................................................................. 87

6.14.1 Safety functions ................................................................................ 104

Safety with S7-1200 FC CPU

6.17.7 Operation of the user scenario ......................................................... 135

6.20.5 Description of the user block FB F19EStopFDoorSIL3PLe ............. 154

Safety with S7-1200 FC CPU

6.24.2 Hardware and software components ............................................... 178

Safety with S7-1200 FC CPU

6.30.5 Description of the user block FB F29EStopFDoorSIL2PLd ............. 235

Safety with S7-1200 FC CPU

1 How to Use this Document

2 Why Safety with the S7-1200 F-CPU?

The TIA Portal automation platform

Safety with S7-1200 FC CPU

3 Description of an Automation Task

The following questions reflect the automation task to be discussed in this

This document provides specific answers to these questions. Before chapter 5

Safety with S7-1200 FC CPU

Table 4 of ISO 13849 specifies a relationship between PL and SIL:

The following applies:

Safety with S7-1200 FC CPU

4.1 Achieving PL c/SIL 1

4.1.1 Interconnection examples

Example of an emergency stop interconnection

Example of a safety door interconnection

Safety with S7-1200 FC CPU

Figure 4-2 Interconnection of a position switch for PL c/SIL 1

4.1.2 Settings in the STEP 7 hardware configuration

Figure 4-3 Settings for the F-DI in the hardware configuration

Safety with S7-1200 FC CPU

Table 4-2 Explanation of the above figure

The default setting is “1oo1 evaluation”.

Safety with S7-1200 FC CPU

4.2 Achieving PL d/SIL 2

4.2.1 Interconnection examples

Example of an emergency stop

Example of a safety door application

Safety with S7-1200 FC CPU

Figure 4-5 Interconnection of a position switch for PL d/SIL 2

4.2.2 Settings in the STEP 7 hardware configuration

Safety with S7-1200 FC CPU

Table 4-3 Explanation of the above figure

Select “1oo2 evaluation, equivalent”

The channels are activated by default.

For PL d/SIL 2, you can set internal or external sensor supply.

Safety with S7-1200 FC CPU

Here, too, the following applies:

Figure 4-8 1oo2 evaluation in the FB SFDOOR F-library block

4.3 Achieving PL e/SIL 3

4.3.1 Interconnection examples

Example of an emergency stop

Example of a safety door application