Safety With S7 1200FCPU v20 en

Safety Applications
with the S7-1200 FC

CPU
Siemens
STEP 7 Safety V15 (TIA Portal) Industry
Online
https://support.industry.siemens.com/cs/ww/en/view/109478932 Support
Legal information
Legal information
Use of application examples
Application examples illustrate the solution of automation tasks through an interaction of several
components in the form of text, graphics and/or software modules. The application examples are
a free service by Siemens AG and/or a subsidiary of Siemens AG ("Siemens"). They are non-
binding and make no claim to completeness or functionality regarding configuration and
equipment. The application examples merely offer help with typical tasks; they do not constitute
customer-specific solutions. You yourself are responsible for the proper and safe operation of the
products in accordance with applicable regulations and must also check the function of the
respective application example and customize it for your system.
Siemens grants you the non-exclusive, non-sublicensable and non-transferable right to have the
application examples used by technically trained personnel. Any change to the application
examples is your responsibility. Sharing the application examples with third parties or copying the
application examples or excerpts thereof is permitted only in combination with your own products.
The application examples are not required to undergo the customary tests and quality inspections
of a chargeable product; they may have functional and performance defects as well as errors. It is
your responsibility to use them in such a manner that any malfunctions that may occur do not
result in property damage or injury to persons.
Disclaimer of liability
Siemens shall not assume any liability, for any legal reason whatsoever, including, without
limitation, liability for the usability, availability, completeness and freedom from defects of the
application examples as well as for related information, configuration and performance data and
any damage caused thereby. This shall not apply in cases of mandatory liability, for example
under the German Product Liability Act, or in cases of intent, gross negligence, or culpable loss of
life, bodily injury or damage to health, non-compliance with a guarantee, fraudulent
non-disclosure of a defect, or culpable breach of material contractual obligations. Claims for
damages arising from a breach of material contractual obligations shall however be limited to the
 Siemens AG 2018 All rights reserved
foreseeable damage typical of the type of agreement, unless liability arises from intent or gross
negligence or is based on loss of life, bodily injury or damage to health. The foregoing provisions
do not imply any change in the burden of proof to your detriment. You shall indemnify Siemens
against existing or future claims of third parties in this connection except where Siemens is
mandatorily liable.
By using the application examples you acknowledge that Siemens cannot be held liable for any
damage beyond the liability provisions described.
Other information
Siemens reserves the right to make changes to the application examples at any time without
notice. In case of discrepancies between the suggestions in the application examples and other
Siemens publications such as catalogs, the content of the other documentation shall have
precedence.
The Siemens terms of use (https://support.industry.siemens.com) shall also apply.
Security information
Siemens provides products and solutions with industrial security functions that support the secure
operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary
to implement – and continuously maintain – a holistic, state-of-the-art industrial security concept.
Siemens' products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines
and networks. Such systems, machines and components should only be connected to an
enterprise network or the internet if and to the extent such a connection is necessary and only
when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit
https://www.siemens.com/industrialsecurity.
Siemens' products and solutions undergo continuous development to make them more secure.
Siemens strongly recommends that product updates are applied as soon as they are available
and that the latest product versions are used. Use of product versions that are no longer
supported, and failure to apply the latest updates may increase customer’s exposure to cyber
threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed
at: http://www.siemens.com/industrialsecurity.
Safety Applications with the S7-1200 FC CPU

Entry ID: 109478932, V2.0, 01/2018 2
Table of Contents
Table of Contents
Legal information ......................................................................................................... 2
1 How to Use this Document ............................................................................... 9
2 Why Safety with the S7-1200 FC CPU? ........................................................... 9
3 Description of an Automation Task ............................................................... 10
4 PL and SIL ........................................................................................................ 11
4.1 Achieving PL c/SIL 1 .......................................................................... 12
4.1.1 Interconnection examples .................................................................. 12
4.1.2 Settings in the STEP 7 hardware configuration ................................. 13
4.2 Achieving PL d/SIL 2 .......................................................................... 14
4.3 Achieving PL e/SIL 3 .......................................................................... 18
5 Prepared User Scenarios ................................................................................ 19
6 What applies to all user scenarios ................................................................. 22
6.1 Installing the user scenario................................................................. 22
6.2 Interlocking mechanisms for safety doors with guard locking ............ 25
6.3 RFID safety switches .......................................................................... 28
6.4 Program structure ............................................................................... 28

6.5 Brief description of the F-library blocks .............................................. 30
6.6 Passivation and reintegration ............................................................. 31
6.7 Value status ........................................................................................ 33
6.8 Notes on the electric actuators ........................................................... 33
7 User Scenario 1: Emergency Stop at PL d, e/SIL 2, 3 .................................. 34
7.1 Sensor/actuator .................................................................................. 34
7.2 Safety function .................................................................................... 34
7.3 Hardware and software components ................................................. 34
7.4 Wiring ................................................................................................. 35
7.5 Brief description of the core functionality ........................................... 36
7.6 Description of the user block FB F100EStopPLdeSIL23 ................... 37
7.7 Configuration and parameterization ................................................... 38
7.8 Operation of the user scenario ........................................................... 39
8 User Scenario 2: Emergency Stop at PL c/SIL 1 .......................................... 40
8.1 Sensor/actuator .................................................................................. 40
8.2 Safety function .................................................................................... 40
8.4 Wiring ................................................................................................. 41
8.6 Description of the user block FB F02EStopPLcSIL1 ......................... 43
9 User Scenario 3: Emergency Stop at PL d/SIL 2 .......................................... 46
9.1 Sensor/actuator .................................................................................. 46
9.2 Safety function .................................................................................... 46
9.4 Wiring ................................................................................................. 47
9.6 Description of the user block FB F03EStopPLdSIL2 ........................ 49

Entry ID: 109478932, V2.0, 01/2018 3
Table of Contents

10 User Scenario 4: Emergency Stop at PL c/SIL 1 .......................................... 52
10.1 Sensor/actuator .................................................................................. 52
10.2 Safety function .................................................................................... 52
10.4 Wiring ................................................................................................. 53
10.6 Description of the user block FB F04EStopPLcSIL1 ......................... 54
11 User Scenario 5: Safety Door without Guard Locking at PL d, e/SIL
2, 3 ..................................................................................................................... 58
11.1 Sensor/actuator .................................................................................. 58
11.2 Safety function .................................................................................... 58
11.4 Wiring ................................................................................................. 58
11.6 Description of the user block FB F05FDoorPLdeSIL23 ..................... 61
12 User Scenario 6: Safety Door without Guard Locking at PL c/SIL 1 .......... 64
12.1 Sensor/actuator .................................................................................. 64

12.2 Safety function .................................................................................... 64
12.4 Wiring ................................................................................................. 64
12.6 Description of the user block FB F06FDoorPLcSIL1 ......................... 67
13 User Scenario 7: Safety Door without Guard Locking at PL d/SIL 2 .......... 70
13.1 Sensor/actuator .................................................................................. 70
13.2 Safety function .................................................................................... 70
13.4 Wiring ................................................................................................. 71
13.6 Description of the user block FB F07FDoorSIL2PL .......................... 73
14 User Scenario 8: Safety Door without Guard Locking at PL c/SIL 1 .......... 76
14.1 Sensor/actuator .................................................................................. 76
14.2 Safety function .................................................................................... 76
14.4 Wiring ................................................................................................. 77
14.6 Description of the user block FB F08FDoorPLcSIL1 ........................ 79
15 User Scenario 9: Safety Door without Guard Locking at PL d, e/SIL
2, 3 ..................................................................................................................... 82
15.1 Sensor/actuator .................................................................................. 82
15.2 Safety function .................................................................................... 82

Entry ID: 109478932, V2.0, 01/2018 4
Table of Contents

15.4 Wiring ................................................................................................. 83
16 User Scenario 10: Safety Door without Guard Locking at PL d/SIL 2 ........ 88
16.1 Sensor/actuator .................................................................................. 88
16.2 Safety function .................................................................................... 88
16.4 Wiring ................................................................................................. 89
16.6 Description of the user block FB F10FDoorPldSIL2 ......................... 91
17 User Scenario 11: Safety Door with Guard Locking PL d, e/SIL 2, 3 .......... 94
17.1 Sensor/actuator .................................................................................. 94
17.2 Safety functions .................................................................................. 94
17.4 Wiring ................................................................................................. 95
17.7 Configuration and parameterization ................................................. 100
17.8 Operation of the user scenario ......................................................... 100

18 User Scenario 12: Safety Door with Guard Locking at PL c/SIL 1 ............ 102
18.1 Sensor/actuator ................................................................................ 102
18.2 Safety function .................................................................................. 102
18.3 Hardware and software components ............................................... 102
18.4 Wiring ............................................................................................... 103
18.5 Brief description of the core functionality ......................................... 104
18.6 Description of the user block FB F12FDoorPLcSIL1 ....................... 106
19 User Scenario 13: Safety Door with Guard Locking at PL d/SIL 2 ........... 110
19.1 Sensor/actuator ................................................................................ 110
19.2 Safety function .................................................................................. 110
19.4 Wiring ............................................................................................... 112
19.6 Description of the user block FB
F13FDoorGuardLockingPLdSIL2 ..................................................... 115
20 User Scenario 14: Safety Door with Guard Locking at PL c/SIL 1 ............ 120
20.1 Sensor/actuator ................................................................................ 120
20.2 Safety function .................................................................................. 120
20.4 Wiring ............................................................................................... 122
F14FDoorGuardLockingPLcSIL1 ..................................................... 125

Entry ID: 109478932, V2.0, 01/2018 5
Table of Contents
21 User Scenario 15: Emergency Stop + Safety Door without Guard

Locking at PL d, e/SIL 2, 3 ............................................................................ 129
21.1 Sensor/actuator ................................................................................ 129
21.2 Safety function .................................................................................. 129
21.4 Wiring ............................................................................................... 130
21.6 Description of the user block FB F15EStopFDoorPLdeSIL23 ......... 132
Locking at PL c/SIL 1 ..................................................................................... 136
22.1 Sensor/actuator ................................................................................ 136
22.2 Safety function .................................................................................. 136
22.4 Wiring ............................................................................................... 137
22.6 Description of the user block FB F16EStopFDoorPLcSIL1 ............. 139
Locking at PL d/SIL 2 .................................................................................... 143
23.1 Sensor/actuator ................................................................................ 143
23.2 Safety function .................................................................................. 143

23.4 Wiring ............................................................................................... 145
23.6 Description of the user block FB F17EStopFDoorPLdSIL2 ............. 147
24.1 Sensor/actuator ................................................................................ 151
24.2 Safety function .................................................................................. 151
24.4 Wiring ............................................................................................... 153
25.1 Sensor/actuator ................................................................................ 159
25.2 Safety function .................................................................................. 159
25.4 Wiring ............................................................................................... 160
25.6 Description of the user block FB F19EStopFDoorPLdeSIL23 ........ 162
26.1 Sensor/actuator ................................................................................ 166

Entry ID: 109478932, V2.0, 01/2018 6
Table of Contents
26.2 Safety function .................................................................................. 166

26.4 Wiring ............................................................................................... 168
26.6 Description of the user block FB F20EStopFDoorPLdSIL2 ............. 170
27 User Scenario 21: Emergency Stop + Safety Door with Guard
27.1 Sensor/actuator ................................................................................ 174
27.2 Safety function .................................................................................. 174
27.4 Wiring ............................................................................................... 176
27.6 Description of the user block FB F21EStopFDoorPLdeSIL23 ......... 179
28.1 Sensor/actuator ................................................................................ 184
28.2 Safety function .................................................................................. 184
28.4 Wiring ............................................................................................... 186

29.1 Sensor/actuator ................................................................................ 194
29.2 Safety function .................................................................................. 194
29.4 Wiring ............................................................................................... 197
F23EStopFDoorGuardLockingPLdSIL2 ........................................... 199
29.9 Additional information on engineering .............................................. 205
29.9.1 Emergency stop ............................................................................... 205
29.9.2 Safety door including guard locking ................................................. 206
29.9.3 SINAMICS G120 .............................................................................. 208
30.1 Sensor/actuator ................................................................................ 210
30.2 Safety function .................................................................................. 210
30.4 Wiring ............................................................................................... 212
F24EStopFDoorGuardLockingPLcSIL1 ........................................... 215
31 Links and Literature ...................................................................................... 221

Entry ID: 109478932, V2.0, 01/2018 7
Table of Contents
32 History............................................................................................................. 221

Entry ID: 109478932, V2.0, 01/2018 8
1 How to Use this Document
1 How to Use this Document

This document describes a large number of typical user scenarios from the field of
functional safety. From this variety of user scenarios, you can select (chapter 5
and the following chapters) a scenario you are particularly interested in. Therefore,
it is not necessary to read the entire document.
2 Why Safety with the S7-1200 FC CPU?

Simple stand-alone solutions
SIMATIC S7-1200 with Safety Integrated is the intelligent choice for all the
everyday standard and fail-safe automation tasks with a small project scope:
 Certified for functional safety according to EN 61508 (version 2010)
 Suitable for use in safety-related applications up to SIL 3 according to IEC
62061:2005 + A1:2012 + A2:2015 and PL e according to EN ISO 13849-
1:2015
 Additional password protection for the F-configuration and safety program
F-blocks certified by TÜV are available for support. You can integrate these blocks
into your solutions. This document supports you in doing so.
PROFIsafe
The S7-1200 FC CPU also supports distributed solutions. In this context, the
PROFIsafe profile allows safety-related applications.
Economic efficiency
As part of Safety Integrated, the S7-1200 FC CPU stands for the consistent
implementation of safety technology in the sense of Totally Integrated Automation.
This includes consistent and convenient integration of safety technology into
standard automation. This results in tremendous advantages for machine
manufacturers and plant operators – particularly in economic terms.
The TIA Portal automation platform

Engineering of the S7-1200 FC CPU is performed based on the TIA Portal
automation platform. This allows you to access all the advantages of Totally
Integrated Automation (TIA): TIA Portal is designed for efficiency, intuitive
operation and future viability. It allows you to solve all the engineering tasks of
automation and drive technology.

Entry ID: 109478932, V2.0, 01/2018 9
3 Description of an Automation Task
3 Description of an Automation Task

This document assumes that a risk analysis and assessment have already been
performed. The technical measures for risk reduction on the cutting machine to be
examined are implemented through the safety devices safety door and emergency
stop pushbutton (see the figure below)
Figure 3-1 Cutting machine with safety door and emergency stop pushbutton
The following questions reflect the automation task to be discussed in this

document:
 Safety door with or without guard locking?
 Is it possible to open the safety door during operation without shutting down
the machine?
 How do I connect the components?
 How does the PLC support me?
 How and what can I parameterize? What can I program?
 How do I achieve PL e/SIL 3?
 What if I don't need PL e/SIL 3 but PL d/SIL 2 or PL c/SIL 1?
This document provides specific answers to these questions. Before chapter 5 and
the following chapters refer to specific user scenarios, chapter 4 provides basic
information on the safety integrity and performance level.

Entry ID: 109478932, V2.0, 01/2018 10
4 PL and SIL
4 PL and SIL
The performance level (PL) or safety integrity level (SIL) classifies electrical and
(programmable) electronic systems in terms of the reliability of safety functions.
You implement a
 PL when you follow EN ISO 13849-1:2015.
 SIL when you follow IEC 61508 (basic standard) or IEC 62061:2005 + A1:2012
+ A2:2015 (sector standard).
Table 4 of EN ISO 13849-1:2015 specifies a relationship between PL and SIL:

Table 4-1 Relationship between performance level (PL) and safety integrity level (SIL) from
table 4 of EN ISO 13849-1:2015
PL SIL (high/continuous mode of operation)
a -
b 1
c 1
d 2
e 3
The following applies:

PL e/SIL 3 describes the highest degree of safety.
NOTICE This document does not replace the standards for functional safety!
However, it shows concise aspects of engineering and its aim is to contribute to
their clarification.
Note The statements in this chapter are of a general nature. They do not directly relate
to the F-library blocks offered for this documentation or settings of the associated
hardware configuration.
Note The following sections list the numerical values for the probability of a dangerous
failure per hour. You need these PFHD values to assess your safety function.
This assessment can be made conveniently using the Safety Evaluation Tool
(SET). For the SET, visit www.siemens.com/safety-evaluation-tool.

Entry ID: 109478932, V2.0, 01/2018 11
4 PL and SIL
4.1 Achieving PL c/SIL 1

General
This chapter deals with emergency stops and position switches. The statements
generally apply to electromechanical components.
The following applies to PL c/SIL 1:
 10−6 ≤ 𝑃𝐹𝐻𝐷 < 3 10−5
 The circuit design may be a single-channel design.
4.1.1 Interconnection examples
Example of an emergency stop interconnection

Assign the emergency stop signal to the F-DI on a single-channel basis to achieve
PL c/SIL 1.
Figure 4-1 Emergency stop interconnection for PL c/SIL 1
F-DI
E-stop
Example of a safety door interconnection

Assign the position switch signal to the F-DI on a single-channel basis to achieve
PL c/SIL 1.
Figure 4-2 Interconnection of a position switch for PL c/SIL 1
F-DI
Position switch

Entry ID: 109478932, V2.0, 01/2018 12
4 PL and SIL
4.1.2 Settings in the STEP 7 hardware configuration
You can assign – on a single-channel basis – the emergency stop pushbutton (or
position switch) to any channel (shown for channel 0 in the below figure).
Figure 4-3 Settings for the F-DI in the hardware configuration
4
Table 4-2 Explanation of the above figure

No. Explanation
Select the appropriate channel pair (here: "Channel 0, 8").
The default setting is "1oo1 evaluation".

Note: 1oo1 = 1 out of 1
The channels are activated by default.
Note: You should deactivate unused channels.
For PL c/SIL 1, you can set internal or external sensor supply.
Note: We recommend the internal sensor supply offered in the hardware
configuration of the respective user scenarios.

Entry ID: 109478932, V2.0, 01/2018 13
4 PL and SIL
4.2 Achieving PL d/SIL 2

General
The following applies to PL d/SIL 2:
 10−7 ≤ 𝑃𝐹𝐻𝐷 < 10−6
 The circuit design should be a two-channel design ∗1 ).
 Internal or external sensor supply can be used.
1
∗ ) Single-channel circuit design (hardware fault tolerance (HFT) = 0) is basically
possible for
PL d/SIL 2; in this case, however, you have to increase the safe failure fraction
(SFF). When HFT = 0, this value would be in the following range:
90% ≤ 𝑆𝐹𝐹 < 99%
Note The correlation between HFT and SFF can be found in table 5 of
IEC 62061:2005 + A1:2012 + A2:2015 (see \4\). For help with
IEC 62061, please refer to
https://support.industry.siemens.com/cs/en/en/view/23996473.
Example of an emergency stop

Assign the emergency stop signal to the F-DI on a two-channel basis to achieve PL
d/SIL 2.
Figure 4-4 Emergency stop interconnection for PL d/SIL 2
F-DI
E-stop
Example of a safety door application

Use two position switches to achieve PL d/SIL 2. Assign each switch to the F-DI on
a single-channel basis. The evaluation itself is performed on a two-channel basis
(for more information, please refer to chapter 4.2.2).

Entry ID: 109478932, V2.0, 01/2018 14
4 PL and SIL
Figure 4-5 Interconnection of a position switch for PL d/SIL 2

F-DI
Position switch 1
Position switch 2
Emergency stop
You can assign the emergency stop to any provided channel pair (this is shown for
the channel pair 0 and 8 in the below figure).
Figure 4-6 Settings of the F-DI for the emergency stop in the hardware configuration

Entry ID: 109478932, V2.0, 01/2018 15
4 PL and SIL
Table 4-3 Explanation of the above figure

No. Explanation
Select the appropriate channel pair (here: "Channel 0, 8").
Select "1oo2 evaluation, equivalent"

Note: 1oo1 = 1 out of 2, equivalent due to the same logic (normally closed contact,
NC/NC) of the sensors
For PL d/SIL 2, after a channel fault, reintegration requires a FALSE signal.
The channels are activated by default.

Note: You should deactivate unused channels.
For PL d/SIL 2, you can set internal or external sensor supply.
Note: We recommend the internal sensor supply offered in the hardware
configuration of the respective user scenarios.
1002 evaluation automatically applies for the second channel.
1002 evaluation automatically applies for the second channel.
Position switches
In the prepared examples, the 1oo2 evaluation of the position switches is
performed by the FB SFDOOR F-library block. This block requires a single-channel
signal at each of two inputs. For this reason, each of the two inputs is
parameterized as a 1oo1 evaluation in the hardware configuration.
Figure 4-7 Settings of the F-DI for the position switches in the hardware configuration

Entry ID: 109478932, V2.0, 01/2018 16
4 PL and SIL
Here, too, the following applies:

 You should deactivate unused channels.
 For PL d/SIL 2, you can set internal or external sensor supply.
We recommend internal sensor supply.
 For PL d/SIL 2, after a channel fault, reintegration requires a FALSE signal. For
the safety door, this is automatically done by the
FB SFDOOR F-library block so that, in the hardware configuration, the "Test 0-
Signal not necessary" setting can be kept.
Note To implement a 1oo1 evaluation with two sensors for each switch, it is not
mandatory to select a channel pair (e.g., 0, 8 or 1, 9 or …).
Figure 4-8 1oo2 evaluation in the FB SFDOOR F-library block
1oo2 evaluation is
performed in the block

Entry ID: 109478932, V2.0, 01/2018 17
4 PL and SIL
4.3 Achieving PL e/SIL 3

General
The following applies to PL e/SIL 3:
 The circuit design must be a two-channel design and a cross-circuit must be
safely detected or ruled out.
 10−8 ≤ 𝑃𝐹𝐻𝐷 < 10−7
Example of an emergency stop

The interconnection for SIL 3/PL e is the same as the one shown in Figure 4-4 for
PL d/SIL 2.
Example of a safety door application

The interconnection for SIL 3/PL e is the same as the one shown in Figure 4-5 for
PL d/SIL 2.

Emergency stop
The settings of PL d/SIL 2 apply. In addition, the following applies:
The ability to withstand crossover required by PL e/SIL 3 can only be implemented
using internal sensor supply.
Figure 4-9 Activating the short-circuit test
Note You can deactivate the short-circuit test if you can otherwise rule out a cross-
circuit, for example, by installing protected lines. The short-circuit test must be
deactivated for sensors that perform internal short-circuit monitoring.
Position switches
The statements under "Position switches" in chapter 4.2.2 apply. In addition, the
statements made on the emergency stop earlier in this chapter (4.3.2) apply
accordingly.

Entry ID: 109478932, V2.0, 01/2018 18
5 Prepared User Scenarios

Prepared user scenarios
In many areas of production engineering, emergency stop buttons and safety doors
are typical safety devices to implement your safety function. Various options exist
for implementing typical safety functions with emergency stop and/or safety door.
From a total of 24 user scenarios, we offer you solutions for your safety function
with emergency stop and safety door. All solutions include the F-program block that
solves the automation task.
Simply select your application from the table on the page following the next page.
Figure 5-1 Emergency stop pushbutton + safety door with guard locking

Entry ID: 109478932, V2.0, 01/2018 19
Table 5-1 Matrix of the prepared user scenarios

Scenario Safety level Safety device Actuator
No. PL SIL Emergency Safety door Contactor SINAMICS G120 via Link
stop (central PROFIsafe
Without guard locking With guard configuration)
locking
Position RFID safety
switch switch
1 d, e 2, 3 X X Chapter 7
2 c 1 X X Chapter 8
3 d 2 X X Chapter 9
4 c 1 X X Chapter 10
7 d 2 X X Chapter 13
10 X X Chapter 16
d 2
13 d 2 X X Chapter 19
15 d, e 2, 3 X X X Chapter 21
16 c 1 X X X Chapter 22
17 d 2 X X X Chapter 23

Entry ID: 109478932, V2.0, 01/2018 20
Scenario Safety level Safety device Actuator

No. PL SIL Emergency Safety door Contactor SINAMICS G120 via Link
stop (central PROFIsafe
Without guard locking With guard configuration)
locking
Position RFID safety
switch switch
The row highlighted in color in the above table shows scenarios that provide additional information on engineering and are also valid for
other scenarios. These additional scenarios comprise:
 Emergency stop
 Safety door including guard locking
 SINAMICS G120
Password
Password for changes in the safety program: siemens
Solution for the user scenarios

Each of the 24 user scenarios is discussed in a separate chapter (chapter 7 and the following chapters).
This concisely provides you with all the information required for the user scenario you are reading.
The next chapter, 6, provides global information that applies to all user scenarios.
At the appropriate points in the individual user scenarios, there are links to this information.
You can read the next chapter (6) or specifically access it from the individual user scenarios.

Entry ID: 109478932, V2.0, 01/2018 21
6 What applies to all user scenarios

6.1 Installing the user scenario
Note If you make changes to safety-related settings or the safety program, you will be
prompted for a password. This password is siemens.
When you have selected your user scenario, the following instructions help you
download and use it.
Downloading the S7_1200F_LIB_V15 library

1. Download the S7_1200F_LIB_V15SP1.zip file to any Windows directory.
2. Extract the zip file: "Right-click > 7-Zip > Extract"
Opening the S7_1200F_LIB_V15 library

3. In TIA Portal, create a new S7 project: "Project > New".
4. Enter a name and the storage path.
5. Click "Libraries"
Figure 6-1 Opening libraries
6. Click the "open global library" icon

Figure 6-2 "open global library" icon
7. Locate the S7_1200F_LIB_V15 file

Important: Uncheck "Open as read-only" before you click "Open".
Figure 6-3 "Open as read-only" checked

Entry ID: 109478932, V2.0, 01/2018 22
Hardware configuration, F-user block and selection of the user scenario

8. Open the folder of your user scenario (shown here: "01EStopSIL3PLe").
9. Use drag and drop to move "PLC_1" to "Devices & networks"
Figure 6-4 Drag and drop hardware configuration to STEP 7 project
Drag & Drop
Drag & Drop
10. Open "Program blocks"

Figure 6-5 "Program blocks" folder
The F-user block is located in the STEP 7 project.

11. Select "PLC_1 [CPU 1215FC DC/DC/RLY]" > Right-click > "Compile" >
"Hardware (rebuild all)".
12. Select "PLC_1 [CPU 1215FC DC/DC/RLY]" > Right-click > "Compile" >
"Software (rebuild all blocks)".
13. "Save project".

Entry ID: 109478932, V2.0, 01/2018 23
Downloading to the CPU

1. Select the "PLC_1" F-CPU.
Right-click > Download to device > Hardware configuration
2. Establish an online connection to the S7-1200 FC CPU.
Figure 6-6 Preparing the download
3. Select the "PLC_1" F-CPU.

Right-click > Download to device > Software (only changes)

Entry ID: 109478932, V2.0, 01/2018 24
6.2 Interlocking mechanisms for safety doors with guard

locking
You should read this chapter if you are using a safety door with guard locking.
An output of the F-DQ activates a magnet in the position switch. The magnet
implements guard locking depending on whether
(1 signal from the F-DQ) or not (0 signal from the F-DQ) it is activated.
Figure 6-7 Control of the coil in the position switch
F-DQ
Basically, there are two interlocking mechanisms:

 Locking with electro-magnetic force
 Locking with spring force
Locking with electro-magnetic force

To interlock the safety door, the coil must be controlled with 1 signal.
Locking with spring force

To interlock the safety door, the coil must be de-energized (0 signal).
Which option is preferable?

Locking with spring force has the advantage that in the event of a failure of the F-
DQ channel that controls the coil of the position switch, this channel safely outputs
0 signal and therefore the coil remains de-energized; this means the guard locking
of the safety door remains active or is automatically activated. For this reason, the
user scenarios for safety doors with guard locking shown here use the locking with
spring force mechanism.
Monitoring the locking device

The SIRIUS 3SE5 position switch allows monitoring of the locking device position.
This information is read in via a standard DI.
Safety door signals

The following section provides an overview of the safety door signals
where

Entry ID: 109478932, V2.0, 01/2018 25
 fDoorCoil
 eMagnet
 sepAct
 hingedSwitch
are variables of the safety program of your user scenario.
Figure 6-8 Correlation between control of guard locking (fDoorCoil variable) and monitoring
of guard locking (eMagnet variable)
“fDoorCoil” = 0
(0 signal from F-DQ) 41
causes
“eMagnet” = 1
E1 E2
42
“fDoorCoil” = 1
(1 signal from F-DQ) 41
causes “eMagnet” = 0
E1 E2
42
Figure 6-9 Correlation between the actuator and the "sepAct" variable
Actuator inserted 11
(door closed)
causes “sepAct” = 1
12
Actuator not inserted 11
(door open)
causes “sepAct” = 0
12

Entry ID: 109478932, V2.0, 01/2018 26
Figure 6-10 Hinge switch

11
Unoperated
(door closed) “hingedSwitch” = 1
Hinge switch
12
11
Operated
“sepAct” = 0
(door open)
12
Normative assessment of guard locking

For the normative assessment of a safety door application, a distinction has to
made between:
 Opening and closing of the safety door
 Guard locking of the safety door
Due to the use of spring-actuated lock position switches, guard locking remains
active in the event of an electrical fault (e.g., passivation of the channel of the F-
DQ) (safety door cannot be opened).

A fault current on the magnet at a time when the safety door must be closed
(hazardous machine active, "fDoorCoil"=1) must result in the safe shutdown of the
machine. Theoretically, someone could open the door at this very moment, which
might cause a hazard. Therefore, PL e/SIL 3 e cannot be achieved for the guard
locking.
Chapter 8.4 (see \3\) of DIN EN ISO 14119 addresses this subject and assumes
that in most cases the required PL or SIL of the guard locking function is lower than
the required PL or SIL of the interlocking function. The probability of a guard
locking function failure while a person simultaneously enters the area is considered
to be very low.
The user scenarios provided in this document are based on this assessment.

Entry ID: 109478932, V2.0, 01/2018 27
6.3 RFID safety switches

Internally, the non-contact RFID safety switches have a two-channel design.
Because of this, and because it is tamper-proof due to its RFID technology, a
redundant safety switch is not required to achieve PL e or SIL 3.
Figure 6-11 RFID safety switch
When parameterizing, keep in mind that the RFID safety switch performs an
internal short-circuit test. Therefore, deselect short-circuit monitoring in the DI
parameters (see Figure 4-9). If you need short-circuit monitoring for other sensors
connected to the F-DI, set "external power supply" for the RFID safety switch. Then
short-circuit monitoring can remain selected.
6.4 Program structure

The block offered for your user scenario is your user interface (F-user FB). All other
blocks that are used need not be edited. To provide an overall understanding of the
F-user FB within the safety program, some explanations will be given below.
F-library blocks
To implement the respective safety function, the F-user FBs access certified F-
library blocks included in STEP 7 Safety. The following F-library blocks are used in
the application examples shown here:
 Emergency stop (FB ESTOP1)
 Safety door (FB SFDOOR)
 Readback (FB FDBACK)
 Reintegration via all F-I/O (FB ACK_GL)
F-user FB
The F-user FB of your selected user scenario includes at least two of the above-
listed F-library blocks.

Entry ID: 109478932, V2.0, 01/2018 28
Figure 6-12 F-user FB and used F-library blocks
F-user FB
FB SFDOOR
FB ESTOP1
FB FDBACK F-library blocks
FB ACK_GL
While you can change the F-user FB,

the F-library blocks are know-how protected.
Note The F-user FBs are also provided to you in a block library. However, this is not
the F-library included in STEP 7 Safety.
Execution of the safety program

The standard program is interrupted by the safety program (F-program) in fixed
time slices. During this process, an F-OB (FOB_RTG1) calls the
Main_Safety_RTG1 F-block.
Figure 6-13 Call of the safety program
FB Main_Safety_RTG1 calls the F-user FB.

Entry ID: 109478932, V2.0, 01/2018 29
6.5 Brief description of the F-library blocks

The following section provides a brief description of the functionality of the
F-library blocks.
Note For related information on the individual F-library blocks, please refer to the
STEP 7 online help.
Select the F-library block in the safety program editor > Press "F5"
Emergency stop: FB ESTOP1

The signals from the emergency stop pushbutton are read in to the F-DI on a two-
channel basis (except for SIL1/PL c). To achieve PL e/SIL 3, both signals must
carry the same signal when the emergency stop pushbutton is actuated within a
certain configurable time. When this time is exceeded, the block reacts in the same
way as when the emergency stop is pressed: by resetting the Q output.
Figure 6-14 Discrepancy analysis for the emergency stop
F-CPU
E-stop F-DI
Chnl 1
Discrepancy
analysis
Chnl 2
The evaluation of the two channels is performed in the F-DI. In the safety program,
the processed signal is available as an input in the process image. This always
corresponds to the lower address of the two channels.
Safety door: FB SFDOOR

This F-FB monitors the correct closing of the safety door. In the examples, the
evaluation is performed via two input channels:
 Insertion of the actuator into the position switch
 Position of the hinge switch
Figure 6-15 Reading in position switch/actuator and hinge switch
Position switch
Actuator
Hinge switch
If the two signals do not correlate as expected, this will be detected as a fault and
the Q output will not be set/reset.

Entry ID: 109478932, V2.0, 01/2018 30
Example:
An actuator – that has broken off the swinging part of the safety door – inserted in
the position switch outputs the information "safety door closed" when the safety
door is opened. The hinge switch, in contrast, outputs the information "safety door
open". This discrepancy is detected by FB SFDOOR and the Q output is reset to 0
signal.
After such a fault, it is always necessary to completely open and close the safety
door before the fault can be acknowledged. This ensures that, for example, an
actuator that has broken off is safely detected.
Readback: FB FDBACK
This block compares, for example for a contactor, whether the state of the
contactor coil correctly correlates with the state of the contactor auxiliary contact.
Figure 6-16 FB FDBACK
Contactor
auxiliary contact
K1
Contactor coil
K1
If these two states are not plausible to each other after a configurable period of
time, the Q output (here: the contactor coil) will be safely disabled. This allows you
to react, for example, to a welded contactor.
Reintegration: FB ACK_GL
Passivated F-modules/channels cannot output process values until the fault has
been cleared and the F-module/channel has been reintegrated (see also chapter
6.6). With FB ACK_GL used here, you reintegrate the entire F-I/O of an F-runtime
group.
6.6 Passivation and reintegration

Passivation
The safety program provides a set of commands that allows you to safely shut
down one or more actuators. Typical applications include emergency stop or the
unauthorized opening of a safety door.
Furthermore, situations can arise where functional errors occur. In this context, the
following example describes a discrepancy error:
Example:
Two sensors (normally closed contacts, NC) are read in via an F-DI. A time value is
configured to evaluate the discrepancy time. If a sensor changes its state, e.g. from
1 to 0 signal, this change must also be made – within the configured discrepancy

Entry ID: 109478932, V2.0, 01/2018 31
time – by the sensor on the other channel; otherwise, the F-system detects a
functional error (here: discrepancy error).
Figure 6-17 Passivation due to discrepancy error
F-DI
Sensor 1 Chnl 1
Discrepancy Time Discrepancy
Sensor 2 Chnl 2 analysis elapsed error
The discrepancy error automatically results in passivation of the respective

channels.
In case of passivation, the affected channel outputs substitute values (0 signal)
instead of the process values. The author of the safety program must ensure that 0
signal corresponds to the safe state.
Reintegration
Even if the error that caused passivation is no longer present, passivation persists.
To enable the passivated channel to output process values, reintegration is
required.
Note The term "depassivation" is also used as a synonym for reintegration. This
document uses only the term reintegration.
Reintegration of the F-I/O after clearing the errors requires user acknowledgment
with a positive edge at the ACK_REI variable of the F-I/O DB. For this purpose, you
can provide, for example, the acknowledgment button, a separate button or also an
HMI.
Death or severe personal injury may result if you implement reintegration

in the program without deliberate acknowledgment (automatic
reintegration).
WARNING
Automatic reintegration may only be used if it does not result in hazards such as
the unexpected startup of hazardous machines. The risk analysis is to confirm
this.
In addition, the FB ACK_GL F-library block provides you with the option to
reintegrate the entire F-I/O (see chapter 6.5).

Entry ID: 109478932, V2.0, 01/2018 32
6.7 Value status

The value status is binary additional information on a channel value of an
F-I/O and entered in the process input image (PII).
Variable names that contain the value status have the "VS" suffix at the end. The
value status provides you with information on the valid channel value:
 1: A valid process value is output for the channel.
 0: A substitute value is output for the channel.
The table below shows an example of the address assignment in the PII for the 16-
channel F-DI:
Table 6-1 Example of the address assignment in the PII for a fail-safe digital input module with 16
channels
Byte in Assigned bits in the F-CPU per F-module:
the
F-CPU 7 6 5 4 3 2 1 0
x+0 DI8 DI7 DI6 DI5 DI4 DI3 DI2 DI1

value value value value value value value value
status status status status status status status status

value value value value value value value value
status status status status status status status status
Example:
The address of the value status of a fail-safe input E0.0 would be E2.0.
6.8 Notes on the electric actuators

Among other things, the user scenarios provided in this document differ in the
types of actuators used:
 Electromechanical actuators
 Electric actuators
In the case of electromechanical actuators (e.g., contactors), the readback signal is

processed accordingly by the actuator. In the case of certified electric actuators
(e.g., F-drives), safety-related checks are performed within the actuator.
The F-actuator included in the user scenarios described in this document is the
SINAMICS G120 connected via PROFINET. The safe data is exchanged via the
PROFIsafe profile and transferred using the PROFINET protocol.

Entry ID: 109478932, V2.0, 01/2018 33
7 User Scenario 1: Emergency Stop at
PL d, e/SIL 2, 3

PL d, e/SIL 2, 3
7.1 Sensor/actuator
Sensor: Emergency stop pushbutton
Actuator: electromechanical (contactor)
7.2 Safety function

The safety function is as follows:
Pressing the emergency stop button safely shuts down the actuator.
7.3 Hardware and software components

You need the hardware and software components listed below.
Hardware components
Table 7-1 Hardware

Component No. Article number Note
CPU 1215FC 1 6ES7215-1HF40-0XB0 FW4.2 or higher
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
Enclosed 1 3SU1100-0AB40-1BA0 Green, screw terminal
pushbutton (NO)
Enclosed 1 3SU1100-0AB40-1BA0 Blue, screw terminal
pushbutton (NO)
Enclosed 1 3SU1100-0AB20-1CA0 Red, screw terminal
pushbutton (NC)
Emergency stop 1 3SU1100-1HB20-1CF0
pushbutton (NC)
nd
2 NC for 1 3SU1400-1AA10-1CA0
emergency stop
Contactors 2 3RT2015-2BB42
Software components
Table 7-2 Software
STEP 7 Basic V15 1 6ES7822-0AA05-0YA5 Or STEP 7 Professional V15
STEP 7 Safety Basic 1 6ES7833-1FB15-0YA5 Or STEP 7 Safety Advanced
V15 V15

Entry ID: 109478932, V2.0, 01/2018 34
PL d, e/SIL 2, 3
7.4 Wiring
The figure below shows the wiring of the hardware components.
Figure 7-1 Emergency stop PL e/SIL 3 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
K2 K1
M
L+ Vs1
.3 L+ 0+
K1
.0
.4 M
K2
0-
.0
Vs2
eStop
Note In the safety program, the auxiliary contacts of the contactors K1 and K2 are
termed "feedback1" and "feedback2".

Entry ID: 109478932, V2.0, 01/2018 35
PL d, e/SIL 2, 3
7.5 Brief description of the core functionality

The following flowchart provides a concise description of the core functionality.
Figure 7-2 Core functionality
Start
Actuators Yes E-stop

switch off pressed?
No No
E-stop
released
?
Yes
No
Stop caused by
e-stop or
1st start?
Yes
Acknowledge
Actuators Yes
Operational stop?
switch off
Start condition No
met
Actuators
on

Entry ID: 109478932, V2.0, 01/2018 36
PL d, e/SIL 2, 3
7.6 Description of the user block FB F100EStopPLdeSIL23
Note The names of the prepared F-user FBs start with an "F" and a number for the
block number that refers to the user scenario number (e.g., FB
F20EStopFDoorPLdSIL2 refers to User Scenario 20). The only exception to this
convention is FB F100EStopPLdeSIL23, which refers to User Scenario 1. "100"
was used instead of "1", because the block number "1" is assigned to the
Main_Safety_RTG1 by default.
Figure 7-3 F-user FB F100EStopPLdeSIL23

NOTICE For F-blocks, the enable input (EN) must not be wired.
Parameter description
The following section describes the inputs and outputs of FB
F100EStopPLdeSIL23.
Note NO: normally open (contact); NC: normally closed (contact)
Table 7-3 Inputs of FB F100EStopPLdeSIL23

Description Symbol Data Convention Note
type
Acknowledgment ack BOOL NO Positive edge
1: required
Acknowledgment  after triggering
the safety
function
 to reintegrate
F-I/O
Start request start BOOL NO
1: Start request
Stop request stop BOOL NC
0: Stop request
Readback signal from readbackK1 BOOL NC
auxiliary contact of 0: Contactor has
contactor K1 picked up

Entry ID: 109478932, V2.0, 01/2018 37
PL d, e/SIL 2, 3

type
Readback signal from readbackK2 BOOL
auxiliary contact of
contactor K2
Emergency stop eStop BOOL NC/NC
pushbutton 0: Emergency
stop triggered
Output K1K2 value status K1K2_VS BOOL 0: Fault
Time between the control feedbackTime TIME
command and the response
of the contactors
Table 7-4 Outputs of FB F100EStopPLdeSIL23

Description Symbol Data type Convention Note
Contactors K1/K2 K1K2 BOOL 1: Control Actuator on F-DQ
command for the
contactors
Release releaseEStop BOOL 1: Emergency stop Information of the
emergency stop released and F-library blocks.
acknowledged Can be read out,
Acknowledgment AckReqEStop BOOL 1: for example, in the
required Acknowledgment standard user

program.
required
7.7 Configuration and parameterization

The STEP 7 hardware configuration (HW Config) has already been prepared for
commissioning FB F100EStopPLdeSIL23. Customizations are possible.
The associated HW Config can be found in the provided block library.
Inappropriate values for safety-related settings may result in the safety

function not being triggered in the event of danger.
WARNING Please keep this in mind if, due to your requirements, you want to change the
settings shown here.
Note For more information on the hardware configuration in this user scenario, please
refer to chapter 4.3.2.

Entry ID: 109478932, V2.0, 01/2018 38
PL d, e/SIL 2, 3
7.8 Operation of the user scenario

For demonstration purposes, this document shows different user scenarios. These
scenarios can also be used as verification steps for validation.
Note For information on installing the user scenario, please refer to chapter 6.1.
Requirements:
 No faults
 Emergency stop released
Table 7-5 Start actuator

No. Action Comment
1 Press ack Acknowledgment mandatory when starting
the scenario for the first time
2 Press start K1K2 picks up
3 Press stop K1K2 drops out
Table 7-6 Safety function: Trigger emergency stop

No. Action Comment
3 Press the emergency stop (eStop) K1K2 drops out
4 Release the emergency stop (eStop)
5 Press start K1K2 does not pick up (acknowledgment
required)
6 Start again with no. 1
Table 7-7 Trigger readback error

No. Action Comment
3 Make sure that K1 or K2 does not drop out when Simulated welding of the contactor
shutting down
4 Press stop Readback error is detected
5 Let the contactor drop out
required)

Entry ID: 109478932, V2.0, 01/2018 39
8 User Scenario 2: Emergency Stop at PL c/SIL 1
8 User Scenario 2: Emergency Stop at PL

c/SIL 1
8.1 Sensor/actuator
8.2 Safety function

Pressing the emergency stop button safely shuts down the actuator.

Hardware components
Table 8-1 Hardware

DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NO)
pushbutton (NC)
pushbutton (NC)
Software components
Table 8-2 Software
STEP 7 Safety 1 6ES7833-1FB15-0YA5 Or STEP 7 Safety Advanced
Basic V15 V15

Entry ID: 109478932, V2.0, 01/2018 40
8.4 Wiring
Figure 8-1 Emergency stop PL c/SIL 1 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
K1
M
Vs1 0+
L+
.3 L+
K1
.0
M 0-
eStop
Note In the safety program, the auxiliary contact of contactor K1 is termed "feedback".
Note Due to the use of the FB FDBACK F-library block, it is useful to monitor
readback. Basically, monitoring the readback signals is not required for PL c/SIL
1.

Entry ID: 109478932, V2.0, 01/2018 41

Start
Actuator Yes E-stop

switches off pressed?
No No
E-stop
released
?
Yes
No
Stop caused by
e-stop or
1st start?
Yes
Acknowledge
Actuator Yes
Operational stop?
switches off
Start condition No
met
Actuator
on

Entry ID: 109478932, V2.0, 01/2018 42
8.6 Description of the user block FB F02EStopPLcSIL1

Figure 8-3 F-user FB F02EStopPLcSIL1
The following section describes the inputs and outputs of FB F02EStopPLcSIL1.
Table 8-3 Inputs of FB F02EStopPLcSIL1

type
1: required
Acknowledgment after triggering the
safety function
to reintegrate F-I/O
1: Start request
0: Stop request
Emergency stop eStop BOOL NC
stop triggered
Output K1 value status K1VS BOOL 0: Fault
of the contactor

Entry ID: 109478932, V2.0, 01/2018 43
Table 8-4 Outputs of FB F02EStopPLcSIL1

Contactor K1 K1 BOOL 1: Actuator Actuator on F-DQ
switched
(contactor has
picked up)
Release releaseEStop BOOL 1: Emergency stop Information of the
emergency stop released and F-library blocks.
acknowledged Can be read out,
Acknowledgment AckReqEStop BOOL 1: for example, in the
program.
required

commissioning FB F02EStopPLcSIL1. Customizations are possible.



Entry ID: 109478932, V2.0, 01/2018 44

Requirements:
 No faults

No. Action Comment
2 Press start K1 picks up
3 Press stop K1 drops out

No. Action Comment
3 Press the emergency stop (eStop) K1 drops out
5 Press start K1 does not pick up (acknowledgment
required)

No. Action Comment
3 Make sure that K1 does not drop out when Simulated welding of the contactor
shutting down
required)

Entry ID: 109478932, V2.0, 01/2018 45
9 User Scenario 3: Emergency Stop at PL d/SIL 2

d/SIL 2
9.1 Sensor/actuator
Actuator: electric (SINAMICS G120)
9.2 Safety function

When the emergency stop button is pressed, the actuator is safely shut down using
STO.

Hardware components
Table 9-1 Hardware

DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
pushbutton (NO)
pushbutton (NO)
pushbutton (NC)
pushbutton (NC)
nd
2 NC for 1 3SU1400-1AA10-1CA0
emergency stop
SINAMICS G120 1 6SL3244-0BB13-1FA0
CU240E-2 PN-F
SINAMICS G120 1 6SL3224-0BE17-5UA0
PM240
Software components
Table 9-2 Software
STEP 7 Basic V15 1 6ES7822-0AA05-0YA5 Or STEP 7 Professional
V15
Basic V15 V15
SINAMICS 1 6SL3072-4EA02-0XG0 SINAMICS Startdrive
Startdrive V15

Entry ID: 109478932, V2.0, 01/2018 46
9.4 Wiring
Figure 9-1 Emergency stop PL d/SIL 2 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
M
L+ Vs1
L+
.0
M
PROFINET IE
eStop
Note For the actuators used in this user scenario, please also refer to chapter 6.8.

Entry ID: 109478932, V2.0, 01/2018 47

Start
Actuator Yes E-stop

switches off (STO) pressed?
No No
E-stop
released
?
Yes
No
Stop caused by
e-stop or
1st start?
Yes
Acknowledge
Actuator Yes
Operational stop?
switches off
Start condition No
met
Actuator
on

Entry ID: 109478932, V2.0, 01/2018 48
9.6 Description of the user block

FB F03EStopPLdSIL2
Figure 9-3 F-user FB F03EStopPLdSIL2
The following section describes the inputs and outputs of FB F03EStopPLdSIL2.
Table 9-3 Inputs of FB F03EStopPLdSIL2

type
1: required
safety function
1: Start request
0: Stop request
stop triggered

Entry ID: 109478932, V2.0, 01/2018 49
Table 9-4 Outputs of FB F03EStopPLdSIL2

Safe Torque Off STO BOOL 0: Select STO The converter with
safety function 1: Deselect STO the active STO
function disconnects
the power supply to
the motor.
Start and stop the startStopDrive BOOL 0: Stop drive At the "EnableAxis"
drive 1: Start drive input of the
"SINA_SPEED" FB
(DriveLib block).
Release releaseEStop BOOL 1: Emergency Information of the
emergency stop stop released and F-library blocks. Can
acknowledged be read out, for
example, in the
standard user
Acknowledgment AckReqEStop BOOL 1:
program.
required Acknowledgment
required

commissioning FB F03EStopPLdSIL2. Customizations are possible.

NOTE The provided block library includes the drive project "Drive_1". This includes our
individual parametrization for testing the functionalities of the examples. You
have to execute your own commissioning of the SINAMICS G120 in case of use.
The following link takes you to a document that explains how to control the
SINAMICS G120 using the S7-1200 F-CPU via PROFIsafe:
https://support.industry.siemens.com/cs/ww/en/view/109746271

Note For information on the SINAMICS G120, please refer to chapter 29.9.3.

Entry ID: 109478932, V2.0, 01/2018 50

Requirements:
 No faults

No. Action Comment
2 Press start DB "Drive".enableAxis = 1; STO = 1
3 Press stop DB "Drive".enableAxis = 0; STO = 1

No. Action Comment
3 Press the emergency stop (eStop) DB "Drive".enableAxis = 0; STO = 0

Entry ID: 109478932, V2.0, 01/2018 51

c/SIL 1
10.1 Sensor/actuator
10.2 Safety function

When the emergency stop button is pressed, the actuator is safely shut down using
STO.

Hardware components
Table 10-1 Hardware

DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
pushbutton (NO)
pushbutton (NO)
pushbutton (NC)
pushbutton (NC)
CU240E-2 PN-F
PM240
Software components
Table 10-2 Software
V15
Basic V15 V15
SINAMICS 1 6SL3072-4EA02-0XG0 SINAMICS Startdrive
Startdrive V15

Entry ID: 109478932, V2.0, 01/2018 52
10.4 Wiring
Figure 10-1 Emergency stop PL c/SIL 1 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
L+ Vs1
L+
.0
M
PROFINET IE
eStop

Entry ID: 109478932, V2.0, 01/2018 53

Start
Actuator Yes E-stop

switches off (STO) pressed?
No No
E-stop
released
?
Yes
No
Stop caused by
e-stop or
1st start?
Yes
Acknowledge
Actuator Yes
Operational stop?
switches off
Start condition No
met
Actuator
on
10.6 Description of the user block FB F04EStopPLcSIL1

Figure 10-3 F-user FB F04EStopPLcSIL1

Entry ID: 109478932, V2.0, 01/2018 54
The following section describes the inputs and outputs of FB F04EStopPLcSIL1.
Table 10-3 Inputs of FB F04EStopPLcSIL1

type
1: required
safety function
1: Start request
0: Stop request
stop triggered
Table 10-4 Outputs of FB F04EStopPLcSIL1

the power supply to
the motor.
"SINA_SPEED" FB
(DriveLib block).
example, in the
standard user
program.
required

Entry ID: 109478932, V2.0, 01/2018 55

commissioning FB F04EStopPLcSIL1. Customizations are possible.

Note For information on the SINAMICS G120, please refer to chapter 29.9.3

Requirements:
 No faults

No. Action Comment

Entry ID: 109478932, V2.0, 01/2018 56

No. Action Comment
3 Press the emergency stop (eStop) DB "Drive".enableAxis = 0; STO = 0

Entry ID: 109478932, V2.0, 01/2018 57
11 User Scenario 5: Safety Door without Guard Locking at PL d, e/SIL 2, 3
11 User Scenario 5: Safety Door without

Guard Locking at PL d, e/SIL 2, 3
Sensor: Position switch

Opening the safety door safely shuts down the actuator.

Hardware components
Table 11-1 Hardware

DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NO)
pushbutton (NC)
Position switch 2 3SE5132-1QV20
without tumbler
Actuator for position 2 3SE5000-0AV0
switch
Software components
Table 11-2 Software
Basic V15 V15
11.4 Wiring

Entry ID: 109478932, V2.0, 01/2018 58
Figure 11-1 Safety door without guard locking PL e/SIL 3 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
K2 K1
M
L+ Vs1
.3 L+ 0+
K1
.0
.4 M
K2
0-
posSwitch2 posSwitch1
Note In the safety program, the NC auxiliary contacts of the contactors K1 and K2 are

Entry ID: 109478932, V2.0, 01/2018 59
Note Before starting the scenario for the first time, open and close the safety door
once. Then acknowledge with ACK=1.
Figure 11-2 Safety door without guard locking – core functionality
Start
Actuators Yes Safety door

switch off open?
No
No
Actuators Yes
Safety door
Operational stop?
closed switch off
?
No
Yes
No
Safety door
closed
?
Acknowledge Yes
Start condition
met
Actuators
on

Entry ID: 109478932, V2.0, 01/2018 60
11.6 Description of the user block FB F05FDoorPLdeSIL23

Figure 11-3 F-user FB F05FDoorPLdeSIL23
The following section describes the inputs and outputs of FB F05FDoorPLdeSIL23.
Table 11-3 Inputs of FB F05FDoorPLdeSIL23

type
1: required
the safety
function
 to reintegrate
F-I/O
1: Start request
0: Stop request
contactor K1 NC
0: Contactor has
Readback signal from readbackK2 BOOL picked up
contactor K2
Position switch 1 posSwitch1 BOOL NC
1: Actuator

Entry ID: 109478932, V2.0, 01/2018 61

type
inserted (safety
door closed)
1: Actuator
inserted (safety
door closed)
Position switch 1 value posSwitch1VS BOOL
status
0: Fault VS: value status
status Chapter 6.7
Output K1K2 value status K1K2VS BOOL

of the contactors

command for the
contactors
Release safety releaseFDoor BOOL 1: With regard to Information of the

door safety door, start F-library blocks.
is possible (safety Can be read out,
door closed) for example, in the
Acknowledgment ackReqFDoor BOOL 1: standard user
for safety door program.
Acknowledgment
required

commissioning FB F05FDoorPLdeSIL23. Customizations are possible.


Entry ID: 109478932, V2.0, 01/2018 62

Requirements:
 No faults
 Safety door closed
No. Action Comment
1 Open and close the safety door When starting the scenario for the first time or in
the event of a safety door fault, open and close
the door completely.
2 Press ack Required when starting the scenario for the first
time and after each opening of the safety door.
Table 11-6 Safety function: Safe shutdown when the safety door is opened
No. Action Comment
4 Open the safety door K1K2 drops out
5 Close the safety door

No. Action Comment
2 Press ack Acknowledgment mandatory when starting the
scenario for the first time
4 Make sure that K1 or K2 does not drop out Simulated welding of the contactor
when shutting down
required)
8 Start with no. 2

Entry ID: 109478932, V2.0, 01/2018 63
12 User Scenario 6: Safety Door without Guard Locking at PL c/SIL 1

Guard Locking at PL c/SIL 1


Hardware components
Table 12-1 Hardware

DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NO)
pushbutton (NC)
without tumbler
switch
Software components
Table 12-2 Software
Basic V15 V15
12.4 Wiring

Entry ID: 109478932, V2.0, 01/2018 64
Figure 12-1 Safety door without guard locking PL c/SIL 1 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
K1
M
Vs1 0+
L+
.3 L+
K1
.0
M 0-
posSwitch
readback. Basically, monitoring the readback signals is not required for
PL c/SIL 1.

Entry ID: 109478932, V2.0, 01/2018 65
Start
Actuator Yes Safety door

switches off open?
No
No
Actuator Yes
Safety door
Operational stop?
closed switches off
?
No
Yes
No
Safety door
closed
?
Acknowledge Yes
Start condition
met
Actuator
on

Entry ID: 109478932, V2.0, 01/2018 66
12.6 Description of the user block FB F06FDoorPLcSIL1

Figure 12-3 F-user FB F06FDoorPLcSIL1
The following section describes the inputs and outputs of FB F06FDoorPLcSIL1.
Table 12-3 Inputs of FB F06FDoorPLcSIL1

type
1: required
the safety
function
 to reintegrate
F-I/O
1: Start request
0: Stop request
Position switch posSwitch BOOL NC
1: Actuator
inserted (safety
door closed)
Position switch value status posSwitchVS BOOL 0: Fault VS: value status
Output K1 value status K1VS BOOL Chapter 6.7

Entry ID: 109478932, V2.0, 01/2018 67

type
of the contactor
Table 12-4 Outputs of FB F06FDoorPLcSIL1

switched
(contactor has
picked up)
program.
for safety door Acknowledgment
required

commissioning FB F06FDoorPLcSIL1. Customizations are possible.



Entry ID: 109478932, V2.0, 01/2018 68
Requirements:
 No faults

No. Action Comment
No. Action Comment

4 Open the safety door K1 drops out

No. Action Comment
shutting down
7 Press start K1 does not pick up (acknowledgment required)
8 Start with no. 2

Entry ID: 109478932, V2.0, 01/2018 69
13 User Scenario 7: Safety Door without Guard Locking at PL d/SIL 2

Guard Locking at PL d/SIL 2

When the safety door is opened, the actuator is safely shut down using STO.

Hardware components
Table 13-1 Hardware

DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NO)
pushbutton (NC)
without tumbler
switch
CU240E-2 PN-F
PM240
Software components
Table 13-2 Software
STEP 7 Safety Basic 1 6ES7833-1FB15-0YA5 Or STEP 7 Safety Advanced
V15 V15
SINAMICS Startdrive 1 6SL3072-4EA02-0XG0 SINAMICS Startdrive V15

Entry ID: 109478932, V2.0, 01/2018 70

V15
13.4 Wiring
Figure 13-1 Safety door without guard locking PL d/SIL 2 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
L+ Vs1
L+
.0
M
.0
Vs2
PROFINET IE

Entry ID: 109478932, V2.0, 01/2018 71

once. Then acknowledge with ack=1.
Start

switches off (STO) open?
No
No
Actuator Yes
Safety door
Operational stop?
closed switches off
?
No
Yes
No
Safety door
closed
?
Acknowledge Yes
Start condition
met
Actuator
on

Entry ID: 109478932, V2.0, 01/2018 72

FB F07FDoorSIL2PL
Figure 13-3 F-user FB F07FDoorSIL2PL
The following section describes the inputs and outputs of FB F07FDoorSIL2PL.
Table 13-3 Inputs of FB F07FDoorSIL2PL

type
1: required
Acknowledgment  after
triggering the
safety
function
 to reintegrate
F-I/O
1: Start request
0: Stop request
1: Actuator
inserted (safety
door closed)
1: Actuator
inserted (safety
door closed)
status VS: value status
Position switch 2 value posSwitch2VS BOOL 0: Fault
Chapter 6.7
status

Entry ID: 109478932, V2.0, 01/2018 73
Table 13-4 Outputs of FB F07FDoorSIL2PL

the power supply to
the motor.
"SINA_SPEED" FB
(DriveLib block).
Release for safety releaseFDoor BOOL 1: With regard to Information of the
door safety door, start F-library blocks. Can
is possible (safety be read out, for
door closed) example, in the
standard user
Acknowledgment ackReqFDoor BOOL 1:
program.
required

commissioning FB F07FDoorSIL2PL. Customizations are possible.


Entry ID: 109478932, V2.0, 01/2018 74

Requirements:
 No faults

No. Action Comment
1 Open and close the safety door When starting the scenario for the first time
or in the event of a safety door fault, open
and close the door completely.
2 Press ack Required when starting the scenario for the
first time and after each opening of the
safety door.
No. Action Comment
1 Open and close the safety door. When starting the scenario for the first time
safety door.
4 Open the safety door DB "Drive".enableAxis = 0; STO = 0

Entry ID: 109478932, V2.0, 01/2018 75

Guard Locking at PL c/SIL 1


Hardware components
Table 14-1 Hardware

DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NO)
pushbutton (NC)
without tumbler
switch
CU240E-2 PN-F
PM240
Software components
Table 14-2 Software
V15
Basic V15 V15
SINAMICS 1 6SL3072-4EA02-0XG0 SINAMICS Startdrive V15
Startdrive

Entry ID: 109478932, V2.0, 01/2018 76
14.4 Wiring
Figure 14-1 Safety door without guard locking PL c/SIL 1 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
L+ Vs1
L+
.0
M
PROFINET IE
posSwitch

Entry ID: 109478932, V2.0, 01/2018 77

Start

No
No
Actuator Yes
Safety door
Operational stop?
closed switches off
?
No
Yes
No
Safety door
closed
?
Acknowledge Yes
Start condition
met
Actuator
on

Entry ID: 109478932, V2.0, 01/2018 78

FB F08FDoorPLcSIL1
Table 14-3 Inputs of FB F08FDoorPLcSIL1

type
1: required
the safety
function
 to reintegrate
F-I/O
1: Start request
0: Stop request
1: Actuator
inserted (safety
door closed)
Position switch value status posSwitchVS BOOL 0: Fault

VS: value status
Chapter 6.7

Entry ID: 109478932, V2.0, 01/2018 79

the power supply to
the motor.
"SINA_SPEED" FB
(DriveLib block).
example, in the
standard user
program.
required




Entry ID: 109478932, V2.0, 01/2018 80

Requirements:
 No faults
No. Action Comment
safety door.
No. Action Comment
safety door.

Entry ID: 109478932, V2.0, 01/2018 81

Guard Locking at PL d, e/SIL 2, 3
Sensor: RFID safety switch


Hardware components
Table 15-1 Hardware

DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NO)
pushbutton (NC)
RFID safety switch 1 3SE6315-1BB01
Actuator with 1 3SE6310-1BC01
magnet latching
Software components
Table 15-2 Software
Basic V15 V15

Entry ID: 109478932, V2.0, 01/2018 82
15.4 Wiring
Figure 15-1 Safety door without guard locking PL e/SIL 3 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
K2 K1
M
L+
.3 L+ 0+
K1
.0
.4 M
K2
0-
.0
M
L+
A2 A1 X1 X2
RFID
OSSD1 OSSD2

Entry ID: 109478932, V2.0, 01/2018 83
Note When using RFID safety switches, the short-circuit test in the hardware
configuration must be deactivated.
Start
Actuators Yes Safety door

switch off open?
No
No
Actuators Yes
Safety door
Operational stop?
closed switch off
?
No
Yes
No
Safety door
closed
?
Acknowledge Yes
Start condition
met
Actuators
on

Entry ID: 109478932, V2.0, 01/2018 84

The following section describes the inputs and outputs of FB F09FDoorPLdeSIL23.

type
1: required
the safety
function
 to reintegrate
F-I/O
1: Start request
0: Stop request
contactor K1 NC
0: Contactor has
contactor K2
Safety output 1 OSSD1 BOOL 1 when door
closed
Safety output 2 OSSD2 BOOL

Entry ID: 109478932, V2.0, 01/2018 85

type
Safety output 1 value status OSSD1VS BOOL
VS: value status
Safety output 2 value status OSSD2VS BOOL
0: Fault Chapter 6.7
Output K1K2 value status K1K2VS BOOL
of the contactors
Table 15-4 Outputs of FB F09FDoorPLdeSIL23

command for the
contactors
for safety door program.
Acknowledgment
required



Entry ID: 109478932, V2.0, 01/2018 86

Requirements:
 No faults
No. Action Comment
No. Action Comment


No. Action Comment
4 Make sure that K1 or K2 does not drop out Simulated welding of the contactor
when shutting down
required)
8 Start with no. 2

Entry ID: 109478932, V2.0, 01/2018 87

Guard Locking at PL d/SIL 2
Sensor: RFID safety switch


Hardware components
Table 16-1 Hardware

DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
pushbutton (NO)
pushbutton (NO)
pushbutton (NC)
magnet latching
CU240E-2 PN-F
PM240
Software components
Table 16-2 Software
Basic V15 V15
Startdrive

Entry ID: 109478932, V2.0, 01/2018 88
16.4 Wiring
Figure 16-1 Safety door without guard locking PL d/SIL 2 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
L+
L+
.0
M
A2 A1 X1 X2
RFID
OSSD1 OSSD2
PROFINET IE .0

Entry ID: 109478932, V2.0, 01/2018 89

Start

No
No
Actuator Yes
Safety door
Operational stop?
closed switches off
?
No
Yes
No
Safety door
closed
?
Acknowledge Yes
Start condition
met
Actuator
on

Entry ID: 109478932, V2.0, 01/2018 90

FB F10FDoorPldSIL2
Figure 16-3 F-user FB F10FDoorPldSIL2
The following section describes the inputs and outputs of FB F10FDoorPldSIL2.
Table 16-3 Inputs of FB F10FDoorPldSIL2

type
1: required
triggering the
safety
function
 to reintegrate
F-I/O
1: Start request
0: Stop request
closed
Safety output 1 value OSSD1VS BOOL
0: Fault
Safety output 2 value OSSD2VS BOOL Chapter 6.7
status

Entry ID: 109478932, V2.0, 01/2018 91
Table 16-4 Outputs of FB F10FDoorPLdSIL2

the power supply to
the motor.
"SINA_SPEED" FB
(DriveLib block).
Release for safety releaseFDoor BOOL 1: With regard to Information of the
standard user
program.
required

commissioning FB F10FDoorPLdSIL2. Customizations are possible.



Entry ID: 109478932, V2.0, 01/2018 92

Requirements:
 No faults

No. Action Comment
safety door.

No. Action Comment
1 Open and close the safety door. When starting the scenario for the first time
safety door.

Entry ID: 109478932, V2.0, 01/2018 93
17 User Scenario 11: Safety Door with Guard Locking PL d, e/SIL 2, 3
17 User Scenario 11: Safety Door with Guard

Locking PL d, e/SIL 2, 3
17.2 Safety functions

This user scenario has the following safety functions:
 Safety function with regard to opening/closing the safety door
– Opening the safety door during operation safely shuts down the actuator.
 Safety function with regard to guard locking
– After shutdown of the actuator, the safety door may only be opened when
the actuator no longer constitutes a hazard.
Note Under "Normative assessment of guard locking", chapter 6.2 addresses the
situation where there is a safety function with regard to guard locking.

Hardware components
Table 17-1 Hardware
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NO)
pushbutton (NC)
Position switch with 1 3SE5322-0SD21
solenoid interlocking
(spring-locked)
Hinge switch 1 3SE5132-0LU21
switch

Entry ID: 109478932, V2.0, 01/2018 94
Software components
Table 17-2 Software
Basic V15 V15
17.4 Wiring
Figure 17-1 Safety door with guard locking PL e/SIL 3 wiring
24V DC
M
stop start ack

.0
.1
.2 L+
.5 M
L1 .4
0+ Vs1
K2 K1
M
.0 .1
L+ K1 K2
standstill
.3
0-
eMagnet
1-
1+
fDoorCoil
.0
Vs2
hingedSwitch sepAct

Entry ID: 109478932, V2.0, 01/2018 95
The following signals from the above connection diagram are connected to the
position switch (sepAct):
 sepAct (monitoring of the actuator position)
 sepAct (monitoring of the locking device position)
 fDoorCoil (control of guard locking)
The following figure shows the wiring on the position switch and therefore
complements the above connection diagram.
Figure 17-2 Internal terminals of the position switch with solenoid interlocking
sepAct (F-DI) CH + (F-DQ)

eMagnet (standard DI)
L+ (F-CPU)
Vs1 (F-DI) CH – (F-DQ)


Entry ID: 109478932, V2.0, 01/2018 96
Figure 17-3 Safety door with guard locking – core functionality
Start
No
Stop request?
No
Yes
Safety door
closed
?
Actuators stop
Yes
Previous Yes
stop was
Timer starts
operational stop
?
No
Timer No
Acknowledge expired or
“standstill”=1
?
Yes
Start condition Safety door

met interlocking
is released
Actuators
on
In this example for electromechanical actuators, the safety door's guard

locking is deactivated as follows:
WARNING When the configured delay time is greater than zero (delayTimeUnlock > 0):
 The timer has expired or
 the standstill bit ("standstill") is TRUE.
When the configured delay time is equal to zero (delayTimeUnlock = 0):

 The standstill bit ("standstill") is TRUE.
Make sure that the safety door's guard locking is deactivated only when a hazard
no longer exists.

Entry ID: 109478932, V2.0, 01/2018 97

Note This example assumes that you are using a hinge switch (hingedSwitch) as a
second channel. However, it is not mandatory to use a hinge switch. The
required dual-channel redundancy can also be implemented with a different
switch.
Death or severe personal injury may result if you select a delayTimeUnlock

time that is too short.
WARNING Customize these times to your requirements, for example to the slow-down time
of a hazardous machine, to release the safety door when the delayTimeUnlock
time has expired.
The following section describes the inputs and outputs of FB F11FDoorSIL3PLe.

Entry ID: 109478932, V2.0, 01/2018 98

type
1: required
the safety
function
 to reintegrate
F-I/O
1: Start request
0: Stop request
Monitoring of magnet in eMagnet BOOL NC Chapter 6.2
position switch 0: Magnet in
position switch
energized
1: Magnet in
position switch
de-energized
contactor K1 NC
0: Contactor has

contactor K2
Position switch sepAct BOOL NC
1: Actuator
inserted (safety
door closed) Chapter 6.2
Hinge switch hingedSwitch BOOL NC
1: Unoperated
(safety door
closed)
Position switch value status sepActVS BOOL
Hinge switch value status hingedSwitchVS BOOL
Output K1K2 value status K1K2VS BOOL Chapter 6.7
Output fDoorCoil value fDoorCoilVS BOOL
status
Standstill detection standstill BOOL 1: Standstill Simulates the
standstill/motion of a
machine
of the contactors
Time delay after shutdown delayTimeUnlock TIME Set this time to a
of the actuators to release sufficiently large
the safety door. value

Entry ID: 109478932, V2.0, 01/2018 99
Table 17-4 Outputs of FB F11FDoorPLdeSIL23

command for the
contactors
Magnet in the fDoorCoil BOOL 0: Guard locking
position switch active
standard user
program.
required



Requirements:
 No faults
 "delayTimeUnlock" > 0

Entry ID: 109478932, V2.0, 01/2018 100

No. Action Comment
safety door.
3 Press start Guard locking is activated, then K1K2 picks
up
4 Press stop K1K2 drops out; then the timer for the
delayed release of the safety door starts.
5 Wait until the timer expires. When the timer has expired, the safety door
can be opened.
Table 17-6 Safety function: Safety door fault

No. Action Comment
safety door.
up
4 Turn the hinge switch until it outputs "0" signal. K1K2 drops out; then the timer for the
can be opened.

No. Action Comment
shutting down
required)
8 Wait until the timer expires.
9 Start with no. 2

Entry ID: 109478932, V2.0, 01/2018 101
18 User Scenario 12: Safety Door with Guard Locking at PL c/SIL 1

Locking at PL c/SIL 1

 Safety function with regard to the position of the safety door (interlocking)

Hardware components
Table 18-1 Hardware
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NO)
pushbutton (NC)
(spring-locked)
switch

Entry ID: 109478932, V2.0, 01/2018 102
Software components
Table 18-2 Software
V15
Basic V15 V15
18.4 Wiring
Figure 18-1 Safety door with guard locking PL c/SIL 1 wiring
24V DC
M
stop start ack
.0
.1 L+
.2
M
L1 .4
Vs1
K1
M
.3 .1
L+ 0+
.0
K1
eMagnet standstill 0-
1-
1+
fDoorCoil
sepAct

Entry ID: 109478932, V2.0, 01/2018 103
In the safety program, the signals of the position switch are defined as follows:

L+ (F-CPU)


Entry ID: 109478932, V2.0, 01/2018 104
Start
No
Stop request?
No
Yes
Safety door
closed
?
Actuator stops
Yes
Previous Yes
stop was
Timer starts
operational stop
?
No
Timer No
“standstill”=1
?
Yes

met interlocking
is released
Actuator
on


no longer exists.

Entry ID: 109478932, V2.0, 01/2018 105
18.6 Description of the user block FB F12FDoorPLcSIL1


time has expired.
Table 18-3 Inputs of F12FDoorPLcSIL1

type
1: required
the safety
function
 to reintegrate
F-I/O
1: Start request
0: Stop request

Entry ID: 109478932, V2.0, 01/2018 106

type
position switch
energized
1: Magnet in
position switch
de-energized
1: Actuator
Chapter 6.2
inserted (safety
door closed)
Position switch value status sepActVS BOOL 0: Fault

VS: value status
Output K1 value status K1VS BOOL Chapter 6.7

machine

of the contactor

switched
(contactor has
picked up)
standard user
program.
required

Entry ID: 109478932, V2.0, 01/2018 107



Requirements:
 No faults

No. Action Comment
safety door.
3 Press start Guard locking is activated, then K1 picks up
4 Press stop K1 drops out; then the timer for the delayed
release of the safety door starts.
can be opened.

Entry ID: 109478932, V2.0, 01/2018 108
No. Action Comment
safety door.
4 Release the interlocking and open the safety door K1 drops out

No. Action Comment
shutting down

required)
9 Start with no. 2

Entry ID: 109478932, V2.0, 01/2018 109
19 User Scenario 13: Safety Door with Guard Locking at PL d/SIL 2

Locking at PL d/SIL 2

– When the safety door is opened during operation, the actuator is safely
shut down using STO.

Hardware components
Table 19-1 Hardware
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NO)
pushbutton (NC)
(spring-locked)
switch

Entry ID: 109478932, V2.0, 01/2018 110

CU240E-2 PN-F
PM240
Software components
Table 19-2 Software
Basic V15 V15
Startdrive

Entry ID: 109478932, V2.0, 01/2018 111
19.4 Wiring
Figure 19-1 Safety door with guard locking PL d/SIL 2 wiring
24V DC
M
stop start ack
.0
.1
L+
.2
M
L1
M
.3
L+ Vs1
.0
eMagnet
0-
0+
fDoorCoil
PROFINET IE .0
hingedSwitch
sepAct
Vs2
Note For the actuator signals, please refer to chapter 6.8.

Entry ID: 109478932, V2.0, 01/2018 112

L+ (F-CPU)


Entry ID: 109478932, V2.0, 01/2018 113
Start
No
Stop reques?
No
Yes
Safety door
closed
?
Actuator stops
Yes
Previous
stop was Yes
operational stop Timer starts
?
Yes Safety door
No
opened after
operational stop?
Unlock No
Acknowledge timer
expired
No ?
Yes
Safety door
Start condition interlocking
met is released
Actuator
on
In this example for electric actuators, the safety door's guard locking is
deactivated when the timer has expired. For moving parts, a hazard cannot
be automatically ruled out when the timer has expired.
WARNING
no longer exists.

Entry ID: 109478932, V2.0, 01/2018 114

F13FDoorGuardLockingPLdSIL2
Figure 19-4 User block FB F13FDoorGuardLockingPLdSIL2
switch.
NOTE If you want to use the extended safety function SLS in the drive, you have to set
the bit SS1 also on TRUE. This is solved in network 2 of the
FB F13FDoorGuardLockingPLdSIL2. There you can fit the address of SS1 if
necessary.

time has expired.
F13FDoorGuardLockingPLdSIL2.

Entry ID: 109478932, V2.0, 01/2018 115
Table 19-3 Inputs of FB F13FDoorGuardLockingPLdSIL2

type
1: required
the safety
function
 to reintegrate
F-I/O
1: Start request
0: Stop request
position switch
energized
1: Magnet in
position switch
de-energized
SLS request reqSLS BOOL NO
1: SLS requested
SLS feedback from drive fdbackSLS BOOL 1: SLS active
STO feedback from drive fdbackSTO BOOL 1: STO active
Power-on inhibit of drive driveLockout BOOL 1: Power-on
inhibit active
1: Actuator
inserted (safety
1: Unoperated
(safety door
closed)
VS: value status
0: Fault Chapter 6.7
status
In the position switch: Time feedbackTime TIME
between the response of
the magnet and the
monitoring contact

Entry ID: 109478932, V2.0, 01/2018 116
Table 19-4 Outputs of FB F13FDoorGuardLockingPLdSIL2

"Safe Torque Off" STO BOOL 0: STO active
power supply to
drive interrupted
"Safely Limited SLS BOOL 0: SLS active
Speed"
Acknowledge internalEventAck BOOL 1:
internal drive Acknowledgement
event
Start enable of onDrive BOOL 1: Start enable
drive
standard user
program.
required

commissioning FB F13FDoorGuardLockingPLdSIL2. Customizations are possible.


Entry ID: 109478932, V2.0, 01/2018 117

Requirements:
 No faults
No. Action Comment
safety door.
3 Press start  Guard locking is activated
("fDoorCoil"=0)
 "onDrive"=1
 "STO"=1, "SLS"=1
4 Press stop  "onDrive"=0
 the timer for the delayed release of the
safety door starts.
can be opened ("fDoorCoil"=1).

Entry ID: 109478932, V2.0, 01/2018 118
Table 19-6 Toggle between normal mode and SLS

No. Action Comment
2 Press "ack" Required when starting the scenario for the
safety door.
3 Press "start"  Guard locking is activated
("fDoorCoil"=0)
 "onDrive"=1
 "STO"=1, "SLS"=1
4 Switch to SLS ("reqSLS"=1, "fdbackSLS"=1)  "fDoorCoil"=1: You can open the door
 "STO"=1, "SLS"=0
5 Close the door and return from SLS to normal  "fDoorCoil"=0: Door interlocked
mode  "STO"=1, "SLS"=1
6 Press "stop"  "onDrive"=0
 Timer for delayed release of safety door
starts.
 "STO"=1, "SLS"=1
7 Wait until the timer expires.  When the timer has expired, the safety
door can be opened ("fDoorCoil"=1).

"STO"=1, "SLS"=1
Table 19-7 SLS from standstill (n=0)

No. Action Comment
safety door.
3 Switch to SLS ("reqSLS"=1) To start at SLS from a standstill, the door
must be closed.
 "fDoorCoil"=1: You can open the door
 "onDrive"=0
 "STO"=0, "SLS"=1, "fdbackSLS"=0
4 Press "start"  "onDrive"=1
 "STO"=1, "SLS"=0
 "STO"=0, "SLS"=0
"stop" (OFF1 in the drive) automatically
triggers STO.
6 Press "ack"  "STO"=1, "SLS"=0
NOTE In case of closing door and "onDrive"=0 (OFF1 is active in the drive), the drive
will change to STO after some seconds, if there is "reqSLS"=1 and no start
command.

Entry ID: 109478932, V2.0, 01/2018 119

Locking at PL c/SIL 1

– When the safety door is opened during operation, the actuator is safely
shut down using STO.

Hardware components
Table 20-1 Hardware
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NO)
pushbutton (NC)
(spring-locked)
switch
CU240E-2 PN-F

Entry ID: 109478932, V2.0, 01/2018 120

PM240
Software components
Table 20-2 Software
Basic V15 V15
SINAMICS 1 6SL3072-4EA02-0XG0 SINAMICS Startdrive V15 V15
Startdrive

Entry ID: 109478932, V2.0, 01/2018 121
20.4 Wiring
Figure 20-1 Safety door with guard locking SIL 1/PL d wiring
24V DC
M
stop start ack
.0
.1
L+
.2
M
L1
M
.3
L+ Vs1
.0
eMagnet
0-
0+
fDoorCoil
PROFINET IE
sepAct

Entry ID: 109478932, V2.0, 01/2018 122

L+ (F-CPU)


Entry ID: 109478932, V2.0, 01/2018 123
Start
No
Stop request?
No
Yes
Safety door
closed
?
Actuator stops
Yes
Previous
stop was Yes
?
Safety door
No Yes
opened after
operational stop
? Unlock No
Acknowledge timer
expired
No ?
Yes
Safety door
Start condition interlocking
met is released
Actuator
on
WARNING
no longer exists.

Entry ID: 109478932, V2.0, 01/2018 124

F14FDoorGuardLockingPLcSIL1
Figure 20-4 F-user block FB F14FDoorGuardLockingPLcSIL1

FB F14FDoorGuardLockingPLcSIL1. There you can fit the address of SS1 if
necessary.

time has expired.
F14FDoorGuardLockingPLcSIL1.

Entry ID: 109478932, V2.0, 01/2018 125
Table 20-3 Inputs of FB F14FDoorGuardLockingPLcSIL1

type
1: required
triggering the
safety
function
 to
reintegrate
F-I/O
1: Start request
0: Stop request
position switch
energized
1: Magnet in
position switch
de-energized
1: SLS requested
STO feedback from fdbackSTO BOOL 1: STO active
drive
inhibit active
1: Actuator
Chapter 6.2
inserted (safety
door closed)
Position switch value sepActVS BOOL 0: Fault

status
VS: value status

Output fDoorCoil value fDoorCoilVS BOOL Chapter 6.7
status
In the position switch: feedbackTime TIME

Time between the
response of the magnet
and the monitoring
contact
Time delay after delayTimeUnlock TIME Set this time to a
shutdown of the sufficiently large
actuators to release the value
safety door.

Entry ID: 109478932, V2.0, 01/2018 126
Table 20-4 Outputs of FB F14FDoorGuardLockingPLcSIL1

the power supply to
the motor.
Speed"
internal drive Acknowledgment
event
drive
Magnet in the fDoorCoil BOOL 0: Guard locking Actuator on F-DQ
standard user
program.
required

commissioning FB F14FDoorGuardLockingPLcSIL1. Customizations are possible.


Entry ID: 109478932, V2.0, 01/2018 127

Requirements:
 No faults
No. Action Comment
safety door.
3 Press start  Guard locking is activated
("fDoorCoil"=0)
 "onDrive"=1, "STO"=1
4 Press stop  "onDrive"=0

 the timer for the delayed release of the
safety door starts.

Entry ID: 109478932, V2.0, 01/2018 128
21 User Scenario 15: Emergency Stop + Safety Door without Guard Locking at PL d, e/SIL 2, 3
21 User Scenario 15: Emergency Stop +

Safety Door without Guard Locking at PL
d, e/SIL 2, 3
Sensor: Emergency stop pushbutton, position switch

 Pressing the emergency stop button safely shuts down the actuator.
 Opening the safety door during operation safely shuts down the actuator.

Hardware components
Table 21-1 Hardware
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NO)
pushbutton (NC)
pushbutton (NC)
nd
2 NC for 1 3SU1400-1AA10-1CA0
emergency stop
without tumbler
switch

Entry ID: 109478932, V2.0, 01/2018 129
Software components
Table 21-2 Software
Basic V15 V15
21.4 Wiring
Figure 21-1 Emergency stop and safety door without guard locking PL e/SIL 3 wiring
24V DC
M
stop start ack

.0
.1
.2
L1
K2 K1
M
L+ Vs1
.3 L+ 0+
K1
.1
.4 M
K2
0-
.1
.0
Vs2
eStop
Vs1
.0

Entry ID: 109478932, V2.0, 01/2018 130

Figure 21-2 Emergency stop + safety door without guard locking – core functionality
Start
No
Stop request?
No
Safety door
Yes
closed
and e-stop
released Actuators are
? switched off
Yes
Previous
stop was Yes
operational stop
?
No
Acknowledge
Start condition
met
Actuators
on

Entry ID: 109478932, V2.0, 01/2018 131

F15EStopFDoorPLdeSIL23
Figure 21-3 User block FB F15EStopFDoorPLdeSIL23
F15EStopFDoorPLdeSIL23.
Table 21-3 Inputs of FB F15EStopFDoorPLdeSIL23

type
1: required
Acknowledgment  after triggering a
safety function
 to reintegrate
F-I/O
1: Start request
0: Stop request


Entry ID: 109478932, V2.0, 01/2018 132

type
contactor K2
stop triggered
1: Actuator
inserted (safety
door closed)
1: Actuator
inserted (safety
door closed)
Position switch 1 value posSwitch1VS BOOL 0: Fault
status
VS: value status
status Chapter 6.7
K1K2 value status K1K2VS BOOL

of the contactors
Table 21-4 Outputs of FB F15EStopFDoorPLdeSIL23

command for the
contactors
Release releaseEStop BOOL 1: Emergency standard user
emergency stop program.
stop released and
acknowledged
required
Acknowledgment ackReqEStop BOOL
required

Entry ID: 109478932, V2.0, 01/2018 133

commissioning FB F15EStopFDoorPLdeSIL23. Customizations are possible.


Requirements:
 No faults

No. Action Comment
safety door.

Entry ID: 109478932, V2.0, 01/2018 134
No. Action Comment
safety door.

No. Action Comment

required)

No. Action Comment
shutting down
required)
8 Start with no. 2

Entry ID: 109478932, V2.0, 01/2018 135
22 User Scenario 16: Emergency Stop + Safety Door without Guard Locking at PL c/SIL 1

c/SIL 1


Hardware components
Table 22-1 Hardware

DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NO)
pushbutton (NC)
pushbutton (NC)
without tumbler
switch
Software components
Table 22-2 Software
Basic V15 V15

Entry ID: 109478932, V2.0, 01/2018 136
22.4 Wiring
Figure 22-1 Emergency stop and safety door without guard locking PL c/SIL 1 wiring
24V DC
M
stop start ack
.0
.1
.2
L1
K1
M
L+ Vs1 0+
.3 L+
K1
.1
0-
M
.0
eStop posSwitch1
Vs1
1.


Entry ID: 109478932, V2.0, 01/2018 137
Start
No
Stop request?
No
Safety door
Yes
closed
and e-stop
released Actuator is
? switched off
Yes
Previous
stop was Yes
operational stop
?
No
Acknowledge
Start condition
met
Actuator
on

Entry ID: 109478932, V2.0, 01/2018 138

F16EStopFDoorPLcSIL1
Figure 22-3 User block FB F16EStopFDoorPLcSIL1
F16EStopFDoorPLcSIL1.
Table 22-3 Inputs of FB F16EStopFDoorPLcSIL1

type
1: required
the safety
function
 to reintegrate
F-I/O
1: Start request
0: Stop request
stop triggered

Entry ID: 109478932, V2.0, 01/2018 139

type
1: Actuator
inserted (safety
door closed)
Position switch value status posSwitchVS BOOL 0: Fault
VS: value status

Chapter 6.7
Output K1 value status K1VS BOOL

of the contactor
Table 22-4 Outputs of FB F16EStopFDoorPLcSIL1

command for the
contactors
program.
emergency stop stop released and
acknowledged
required
required

commissioning FB F16EStopFDoorPLcSIL1. Customizations are possible.


Entry ID: 109478932, V2.0, 01/2018 140

Requirements:
 No faults

No. Action Comment
safety door.


No. Action Comment
required)
No. Action Comment
safety door.
4 Open the safety door K1 drops out

Entry ID: 109478932, V2.0, 01/2018 141
No. Action Comment


No. Action Comment
safety door.
shutting down
required)

Entry ID: 109478932, V2.0, 01/2018 142
23 User Scenario 17: Emergency Stop + Safety Door without Guard Locking at PL d/SIL 2

d/SIL 2

 When the safety door is opened during operation, the actuator is safely shut
down (STO) or monitored for Safely Limited Speed (SLS). The selection is
made using a switch.

Hardware components
Table 23-1 Hardware
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NO)
pushbutton (NC)
pushbutton (NC)
nd
2 NC for 1 3SU1400-1AA10-1CA0
emergency stop
without tumbler
switch
CU240E-2 PN-F
PM240

Entry ID: 109478932, V2.0, 01/2018 143
Software components
Table 23-2 Software
Basic V15 V15
Startdrive

Entry ID: 109478932, V2.0, 01/2018 144
23.4 Wiring
Figure 23-1 Emergency stop and safety door without guard locking PL d/SIL 2 wiring
24V DC
M
stop start ack
.0
.1
.2
.3
L1
selectSTOOrSLS
M
L+ Vs1
L+
.1
M
PROFINET IE
.0
.1
Vs2
eStop
Vs1
.0

Entry ID: 109478932, V2.0, 01/2018 145

Start
No
E-stop?
No
Safety door
Yes No
closed
and e-stop Safety door open?
? switched off (STO)
Yes Yes
No
STO selected
STO or No by operator?
SLS
active?
Yes
Yes
Acknowledge
SLS active
Start condition
met
Yes Operational stop

?
Actuator
on
No

Entry ID: 109478932, V2.0, 01/2018 146

F17EStopFDoorPLdSIL2
Figure 23-3 User block FB F17EStopFDoorPLdSIL2
F17EStopFDoorPLdSIL2.
Table 23-3 Inputs of FB F17EStopFDoorPLdSIL2

type
1: required
triggering the
safety
function
 to reintegrate
F-I/O
1: Start request
0: Stop request
Select STO or SLS selectSTOOrSLS BOOL 0: STO Only relevant to
1: SLS opening the
safety door.
stop triggered
1: Actuator

Entry ID: 109478932, V2.0, 01/2018 147

type
inserted (safety
door closed)
1: Actuator
inserted (safety
door closed)
0: Fault
Position switch 2 value posSwitch2VS BOOL Chapter 6.7
status
Table 23-4 Outputs of FB F17EStopFDoorPLdSIL2

Safe Torque Off STO BOOL 0: selected The converter with
1: deselected the active STO
the power supply to
the motor.
Safely Limited SLS BOOL 0: selected
Speed 1: deselected
Acknowledge internalEventAck BOOL Acknowledgment The "ack" button is

internal drive on negative edge used for
event of acknowledgment.
internalEventAck
Start/stop the startStopDrive BOOL 0: Stop Switches the
drive (assignment 1: Start "EnableAxis" input of
of drive control the "SINA_SPEED"
word 1 bit 0) FB
Release safety releaseFDoor BOOL 1: With regard to example, in the
door safety door, start standard user
program.
is possible (safety
door closed)

required
required

Entry ID: 109478932, V2.0, 01/2018 148

commissioning FB F17EStopFDoorPLdSIL2. Customizations are possible.


Requirements:
 No faults

No. Action Comment

Entry ID: 109478932, V2.0, 01/2018 149
No. Action Comment

safety door.
3 Press start enableAxis (SINA_SPEED) = 1
4 Press stop enableAxis (SINA_SPEED) = 0
No. Action Comment
safety door.
4 Press the emergency stop (eStop) STO = 0
5 Release the emergency stop (eStop) STO = 0
6 Press start STO = 0 (acknowledgment required)
7 Start again with no. 2 STO = 1
Table 23-7 Safety function: Safe shutdown when the safety door is opened (STO)
No. Action Comment
1 Set "selectSTOOrSLS" = 0 STO selected

safety door.
5 Open the safety door STO = 0
6 Close the safety door STO = 0
Start again with no. 3 STO = 1
Table 23-8 Safety function: Safe shutdown when the safety door is opened (SLS)
No. Action Comment
safety door.
5 Open the safety door SLS = 0
6 Close the safety door SLS = 0
Start again with no. 3 SLS = 1 and startup of drive

Entry ID: 109478932, V2.0, 01/2018 150

c/SIL 1


Hardware components
Table 24-1 Hardware
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NO)
pushbutton (NC)
pushbutton (NC)
without tumbler
switch
CU240E-2 PN-F
PM240

Entry ID: 109478932, V2.0, 01/2018 151
Software components
Table 24-2 Software
Basic V15 V15
Startdrive

Entry ID: 109478932, V2.0, 01/2018 152
24.4 Wiring
Figure 24-1 Emergency stop and safety door without guard locking PL c/SIL 1 wiring
24V DC
M
stop start ack
.0
.1
.2
.3
L1
selectSTOOrSLS
M
L+ Vs1
L+
.1
M
PROFINET IE
posSwitch1
.0
eStop
Vs1

Entry ID: 109478932, V2.0, 01/2018 153

Start
No
E-stop?
No
Safety door
Yes No
closed
Yes Yes
No
STO selected
SLS
active?
Yes
Yes
Acknowledge
SLS active
Start condition
met

?
Actuator
on
No

Entry ID: 109478932, V2.0, 01/2018 154


type
1: required
triggering the
safety
function
 to reintegrate
F-I/O
1: Start request
0: Stop request
1: SLS opening the
safety door.

stop triggered

Entry ID: 109478932, V2.0, 01/2018 155

type
1: Actuator
inserted (safety
door closed)
Position switch 1 value posSwitch1VS BOOL 0: Fault VS: value status
status Chapter 6.7

the power supply to
the motor.
Speed 1: deselected
internalEventAck

word 1 bit 0) FB
program.
is possible (safety
door closed)

required
required

Entry ID: 109478932, V2.0, 01/2018 156



Requirements:
 No faults
No. Action Comment
safety door.

Entry ID: 109478932, V2.0, 01/2018 157
No. Action Comment

No. Action Comment
safety door.
No. Action Comment
safety door.
No. Action Comment
1 Set "selectSTOOrSLS" = 1 SLS selected
safety door.

Entry ID: 109478932, V2.0, 01/2018 158

d, e/SIL 2, 3
Sensor: Emergency stop pushbutton, RFID safety switch

 When the emergency stop button is pressed, the actuator is safely shut down
using STO.

Hardware components
Table 25-1 Hardware
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NO)
pushbutton (NC)
pushbutton (NC)
nd
2 NC for 1 3SU1400-1AA10-1CA0
emergency stop
magnet latching

Entry ID: 109478932, V2.0, 01/2018 159
Software components
Table 25-2 Software
Basic V15 V15
25.4 Wiring
Figure 25-1 Emergency stop and safety door without guard locking PL e/SIL 3 wiring
24V DC
M
stop start ack

.0
L+
.1
.2 M
L1 0+
K2 K1
M
L+ Vs1
.3 L+
K1
.1
.4 M
K2
0-
.0
.1 A2 A1 X1 X2
Vs2 RFID
OSSD1 OSSD2
eStop .1
.0 Vs1

Entry ID: 109478932, V2.0, 01/2018 160
Note When using RFID safety switches, the short-circuit test in the hardware
configuration must be deactivated.

Start
No
Stop request?
No
Safety door
Yes
closed
and e-stop
released Actuators are

? switched off
Yes
Previous
stop was Yes
operational stop
?
No
Acknowledge
Start condition
met
Actuators
on

Entry ID: 109478932, V2.0, 01/2018 161

FB F19EStopFDoorPLdeSIL23

type
1: required
Acknowledgment  after triggering a
safety function
 to reintegrate
F-I/O
1: Start request
0: Stop request
contactor K1 NC
0: Contactor has
contactor K2

Entry ID: 109478932, V2.0, 01/2018 162

type
stop triggered
RFID safety switch 1 OSSD1 BOOL NC
1: Safety door
closed
RFID safety switch 2 OSSD2 BOOL NC
1: Safety door
closed
RFID safety switch 1 value OSSD1VS BOOL 0: Fault
status
VS: value status
RFID safety switch 2 value OSSD2VS BOOL
status Chapter 6.7
K1K2 value status K1K2VS BOOL

of the contactors


command for the
contactors
program.
emergency stop stop released and
acknowledged
required
required

Entry ID: 109478932, V2.0, 01/2018 163



Requirements:
 No faults

No. Action Comment
safety door.

Entry ID: 109478932, V2.0, 01/2018 164
No. Action Comment
safety door.

No. Action Comment

required)

No. Action Comment
shutting down
required)
8 Start with no. 2

Entry ID: 109478932, V2.0, 01/2018 165

d/SIL 2
Sensor: Emergency stop pushbutton, RFID safety switch

 When the emergency stop button is pressed, the actuator is safely shut down
using STO.

Hardware components
Table 26-1 Hardware
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
pushbutton (NO)
pushbutton (NO)
pushbutton (NC)
pushbutton (NC)
nd
2 NC for 1 3SU1400-1AA10-1CA0
emergency stop
magnet latching
CU240E-2 PN-F
PM240

Entry ID: 109478932, V2.0, 01/2018 166
Software components
Table 26-2 Software
Basic V15 V15
Startdrive

Entry ID: 109478932, V2.0, 01/2018 167
26.4 Wiring
Figure 26-1 Emergency stop and safety door without guard locking PL d/SIL 2 wiring
24V DC
M
stop start ack
.0
L+
.1
.2 M
.3
L1
selectSTOOrSLS
M
L+ Vs1
L+
.1
M
PROFINET IE
.1
.0
A2 A1 X1 X2
Vs2
RFID
OSSD1 OSSD2
eStop .1
.0 Vs1

Entry ID: 109478932, V2.0, 01/2018 168

Start
No
E-stop?
No
Safety door
Yes No
closed
Yes Yes
No
STO selected
SLS
active? Yes
Yes
Acknowledge
SLS active
Start condition
met

?
Actuator
on No

Entry ID: 109478932, V2.0, 01/2018 169

F20EStopFDoorPLdSIL2
Figure 26-3 User block FB F20EStopFDoorPLdSIL2

F20EStopFDoorPLdSIL2.
Table 26-3 Inputs of FB F20EStopFDoorPLdSIL2

type
1: required
triggering the
safety
function
 to reintegrate
F-I/O
1: Start request
0: Stop request
1: SLS opening the
safety door.
stop triggered
closed

Entry ID: 109478932, V2.0, 01/2018 170

type
Safety output 1 value OSSD1VS BOOL
Safety output 2 value OSSD2VS BOOL 0: Fault
Chapter 6.7
status
Table 26-4 Outputs of FB F20EStopFDoorPLdSIL2

the power supply to
the motor.
Speed 1: deselected
internalEventAck

word 1 bit 0) FB
program.
is possible (safety
door closed)

required
required

Entry ID: 109478932, V2.0, 01/2018 171

commissioning FB F20EStopFDoorPLdSIL2. Customizations are possible.


Requirements:
 No faults
No. Action Comment
safety door.

Entry ID: 109478932, V2.0, 01/2018 172
No. Action Comment

No. Action Comment
safety door.
No. Action Comment
safety door.
No. Action Comment
1 Set "selectSTOOrSLS" = 1 SLS selected
safety door.

Entry ID: 109478932, V2.0, 01/2018 173
27 User Scenario 21: Emergency Stop + Safety Door with Guard Locking at PL d, e/SIL 2, 3

Safety Door with Guard Locking at PL d,
e/SIL 2, 3


Hardware components
Table 27-1 Hardware
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NO)
pushbutton (NC)
pushbutton (NC)
nd
2 NC for 1 3SU1400-1AA10-1CA0
emergency stop

Entry ID: 109478932, V2.0, 01/2018 174

(spring-locked)
switch
Software components
Table 27-2 Software
Basic V15 V15

Entry ID: 109478932, V2.0, 01/2018 175
27.4 Wiring
Figure 27-1 Emergency stop + safety door with guard locking PL e/SIL 3 wiring
24V DC
M
stop start ack
.0
.1
.2 L+
.4 M
L1 .3
0+ Vs1
K2 K1
M
.0 .2 K1 K2
L+
.1
.5
eMagnet standstill 0-
1-
1+
fDoorCoil
.1
Vs2
hingedSwitch
sepAct
.0
eStop

Entry ID: 109478932, V2.0, 01/2018 176

L+ (F-CPU)


Entry ID: 109478932, V2.0, 01/2018 177
Figure 27-3 Emergency stop + safety door with guard locking – core functionality
Start
No
Stop request?
No
Safety door
Yes
closed
and e-stop
released
? Actuators stop
Yes
Previous
stop was Yes
Timer starts
operational stop
?
No
No
Timer
Acknowledge expired
or “standstill”=1?
Yes

met interlocking
is released
Actuators
on


no longer exists.

Entry ID: 109478932, V2.0, 01/2018 178

F21EStopFDoorPLdeSIL23
switch.

time has expired.

Entry ID: 109478932, V2.0, 01/2018 179

type
1: required
the safety
function
 to reintegrate
F-I/O
1: Start request
0: Stop request
position switch
energized
1: Magnet in
position switch
de-energized
contactor K1 NC
0: Contactor has

contactor K2
stop triggered
1: Actuator
inserted (safety
Chapter 6.2
door closed)
1: Unoperated
(safety door
closed)
Output K1K2 value status K1K2_VS BOOL Chapter 6.7
Output fDoorCoil value fDoorCoil_VS BOOL
status
machine
of the contactors
Time delay after shutdown delayTimeUnlock TIME When the time Set this time to a
of the actuators to release has elapsed, the sufficiently large
the safety door. door will be value
released.

Entry ID: 109478932, V2.0, 01/2018 180

command for the
contactors
Release releaseEStop BOOL 1: Emergency stop standard user
emergency stop program.
released and
acknowledged
required
Acknowledgment AckReqEStop BOOL
required


Death or severe personal injury may result if the actuator starts before the
safety door is interlocked.
WARNING For the following reason, this risk does not exist in the user scenarios described
in this document: The guard locking, incl. monitoring, was programmed in a
network following the switching of the actuator. This means that the actuator
only starts one program cycle after the safety door has been interlocked (switch-
on condition due to eMagnet).

Entry ID: 109478932, V2.0, 01/2018 181

Requirements:
 No faults

No. Action Comment

safety door.
up
4 Press stop K1K2 drops out; then the timer for the
can be opened.

No. Action Comment
safety door.
required)

Entry ID: 109478932, V2.0, 01/2018 182
Table 27-7 Safety function: Safety door fault

No. Action Comment
safety door.
up
4 Turn the hinge switch until it outputs "0" signal. K1K2 drops out; then the timer for the
can be opened.

No. Action Comment

shutting down
required)
8 Start with no. 2

Entry ID: 109478932, V2.0, 01/2018 183
28 User Scenario 22: Emergency Stop + Safety Door with Guard Locking at PL c/SIL 1

Safety Door with Guard Locking at PL
c/SIL 1


Hardware components
Table 28-1 Hardware
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NO)
pushbutton (NC)
pushbutton (NC)
(spring-locked)

Entry ID: 109478932, V2.0, 01/2018 184

switch
Software components
Table 28-2 Software
Basic V15 V15

Entry ID: 109478932, V2.0, 01/2018 185
28.4 Wiring
Figure 28-1 Emergency stop + safety door with guard locking PL c/SIL 1 wiring
24V DC
M
stop start ack
.0
.1
.2 L+
M
L1
.0 Vs1
K1
M
.4
0+
.2
L+
standstill K1
.1
.3 eMagnet 0-
1-
1+
fDoorCoil
.1
sepAct
.0
eStop

Entry ID: 109478932, V2.0, 01/2018 186
1.

L+ (F-CPU)


Entry ID: 109478932, V2.0, 01/2018 187
Start
No
Stop request?
No
Safety door
Yes
closed
and e-stop
released
? Actuator stops
Yes
Previous
stop was Yes
?
No
Timer No
“standstill”=1?
Yes

met interlocking
is released
Actuator
on


no longer exists.

Entry ID: 109478932, V2.0, 01/2018 188


time has expired.

Entry ID: 109478932, V2.0, 01/2018 189

type
1: required
the safety
function
 to reintegrate
F-I/O

1: Start request
0: Stop request
position switch
energized
1: Magnet in
position switch
de-energized
stop triggered
1: Actuator
Chapter 6.2
inserted (safety
door closed)
Position switch value status sepActVS BOOL 0: Fault

VS: value status
Chapter 6.7
Output K1 value status K1_VS BOOL

machine
of the contactor
released.

Entry ID: 109478932, V2.0, 01/2018 190

switched
(contactor has
picked up)
Release releaseEStop BOOL 1: Emergency stop standard user
program.
emergency stop released and
acknowledged
required
Acknowledgment AckReqEStop BOOL
required



Entry ID: 109478932, V2.0, 01/2018 191

Requirements:
 No faults

No. Action Comment

safety door.
4 Press stop K1 drops out; then the timer for the delayed
release of the safety door starts.
can be opened.

No. Action Comment
safety door.
required)

Entry ID: 109478932, V2.0, 01/2018 192

No. Action Comment
safety door.
shutting down
required)
8 Start with no. 2

Entry ID: 109478932, V2.0, 01/2018 193
29 User Scenario 23: Emergency Stop + Safety Door with Guard Locking at PL d/SIL 2

d/SIL 2

– When the safety door is opened during normal mode (no SLS), the
SINAMICS G120 is safely shut down.
– When the safety door is opened with SLS selected, the SINAMICS G120
runs at a safe speed.

Hardware components
Table 29-1 Hardware
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NO)
pushbutton (NC)
pushbutton (NC)

Entry ID: 109478932, V2.0, 01/2018 194
nd
2 NC for 1 3SU1400-1AA10-1CA0
emergency stop
(spring-locked)
switch
CU240E-2 PN-F
PM240
Software components
Table 29-2 Software
Basic V15 V15

Startdrive

Entry ID: 109478932, V2.0, 01/2018 195
Figure 29-1 Emergency stop + safety door with guard locking PL d/SIL 2 wiring
24V DC
M
stop start ack
.0
.1
.2 L+
M
L1
Vs1
M
.3 .0
L+
.1
eMagnet
1-
1+
fDoorCoil
PROFINET IE .1
hingedSwitch
Vs2 .0
sepAct
eStop

Entry ID: 109478932, V2.0, 01/2018 196

L+ (F-CPU)
29.4 Wiring


Entry ID: 109478932, V2.0, 01/2018 197
Start
No
E-stop No Door interlocking

SLS selected
released active
by operator?
?
Yes
Yes
SLS inactive
SLS active
Safety door No
closed
No
? Door interlocking
deactivated
Yes Stop command
?
Yes No Yes
STO active
? Stop command
?
No Acknowledgment
request Yes No
Operational stop
Yes ?
Acknowledgment
request Actuator stops
? (STO) Yes
No Acknowledged
Actuator stops
Start conditions
met
Timer expired
? No
Door interlocking
active
Yes
Actuator Door interlocking

on deactivated
WARNING
no longer exists.

Entry ID: 109478932, V2.0, 01/2018 198

F23EStopFDoorGuardLockingPLdSIL2
Figure 29-4 User block FB F23EStopFDoorGuardLockingPLdSIL2
switch.
FB F23EStopFDoorGuardLockingPLdSIL2. There you can fit the address of SS1
if necessary.

time has expired.

Entry ID: 109478932, V2.0, 01/2018 199
F23EStopFDoorSIL2PLd.
Table 29-3 Inputs of FB F23EStopFDoorGuardLockingPLdSIL2

type
1: required
the safety
function
 to reintegrate
F-I/O
1: Start request
0: Stop request
position switch
energized
1: Magnet in
position switch
de-energized
stop triggered
1: SLS requested
inhibit active
1: Actuator
inserted (safety
1: Unoperated
(safety door
closed)

Output fDoorCoil value fDoorCoil_VS BOOL Chapter 6.7
status


Entry ID: 109478932, V2.0, 01/2018 200

type
the magnet and the
monitoring contact
released.
Table 29-4 Outputs of FB F23EStopFDoorGuardLockingPLdSIL2

power supply to
drive interrupted.
Speed"
event
drive

Acknowledgment ackReqEStop BOOL 1: example, in the
required program.
Release safety releaseFDoor BOOL 1: With regard to

door safety door, start
is possible (safety
door closed)
required

Entry ID: 109478932, V2.0, 01/2018 201

commissioning FB F23EStopFDoorGuardLockingPLdSIL2. Customizations are
possible.


Requirements:
 No faults
 No power-on inhibit on the SINAMICS G120
Note Acknowledge a power-on inhibit on the SINAMICS G120 in the same way as
internal faults with "ack".

Entry ID: 109478932, V2.0, 01/2018 202

No. Action Comment
safety door.
("fDoorCoil"=0)
 "onDrive"=1
 "STO"=1, "SLS"=1
starts.

No. Action Comment

safety door.
("fDoorCoil"=0)
 "onDrive"=1
 "STO"=1, "SLS"=1
4 Press the emergency stop (eStop)  "onDrive"=0
starts.
 "STO"=0, "SLS"=1
5 Release the emergency stop (eStop)  "STO"=0, "SLS"=1
7 Start again with no. 2  "STO"=1, "SLS"=1

Entry ID: 109478932, V2.0, 01/2018 203

No. Action Comment
safety door.
("fDoorCoil"=0)
 "onDrive"=1
 "STO"=1, "SLS"=1
4 Switch to SLS ( "reqSLS"=1, "fdbackSLS"=1)  "fDoorCoil"=1: You can open the door
 "STO"=1, "SLS"=0
starts.
 "STO"=1, "SLS"=1

"STO"=1, "SLS"=1

No. Action Comment
2 Switch to SLS ("reqSLS"=0) To start at SLS from a standstill, the door
must be closed.
 "onDrive"=0
safety door.
 "STO"=1, "SLS"=0
 "reqSLS"=1, "fdbackSLS"=1
 "STO"=0, "SLS"=0
triggers STO.

Entry ID: 109478932, V2.0, 01/2018 204
Note When switching to SLS with the safety door closed and "onDrive"=0 (OFF1
active in the drive) and the drive does not start, it goes to STO after a few
seconds.
29.9 Additional information on engineering

This scenario provides you with additional information when implementing
 emergency stop
 safety door including guard locking
 SINAMICS G120
29.9.1 Emergency stop
In addition to the explanation in chapter 4.2, the following section provides you with
information on implementing the emergency stop in the safety program.
The "ESTOP1" function block certified by TÜV is used to implement the emergency
stop. In TIA Portal, you will find this function block in "Basic instructions > Safety
functions".
Figure 29-5 TÜV-certified FB ESTOP1 in the "Safety functions" folder of TIA Portal
It is called in FB F23EStopFDoorGuardLockingPLdSIL2 of the safety program.

In the safety program, the 1oo2 evaluation uses only the lower channel (0) of the
emergency stop's channels 0 and 8. The evaluation type (1oo1 or 1oo2) cannot by
identified by the call of the ESTOP1 FB (E STOP parameter), but by the hardware
configuration (see Figure 4-6).
Figure 29-6 FB ESTOP1 call
The Q output ensures safe shutdown in STO and prevents the system from
restarting as long as the emergency stop has not yet been released and
acknowledged:
(1: Emergency stop released and available.)

Entry ID: 109478932, V2.0, 01/2018 205
29.9.2 Safety door including guard locking
In addition to the explanation in chapter 4.2, the following section provides you with
information on implementing the safety door with guard locking.
Safety door
Like for the emergency stop, a TÜV-certified function block, "SFDOOR", is
available for implementing a safety door. In TIA Portal, you will find this function
block, too, in "Basic instructions > Safety functions".
It is called in FB F23EStopFDoorGuardLockingPLdSIL2 of the safety program.
Unlike the ESTOP1 FB, the SFDOOR FB requires the signals of both position
switches (IN1 and IN2). The 1oo2 evaluation is performed within the block.
The Q output ensures safe shutdown in STO and prevents the system from
restarting as long as the safety door is open and no acknowledgment has been
made.
When the door is closed and no fault has been saved,
a 1 signal is present at the Q output.
Figure 29-7 FB SFDOOR call

Guard locking
Guard locking is monitored using the FDBACK FB. This TÜV-certified function
block, too, can be found in the "Safety functions" folder of TIA Portal.
Figure 29-8 FB FDBACK call
The following applies: When Q=0, the safety door's guard locking is active. In
normal mode (no SLS selected), the drive does not start until Q=0. This can be
achieved, for example, by

Entry ID: 109478932, V2.0, 01/2018 206
 calling the network for starting the drive first and then calling the FDBACK FB
and
 Q or "statFDoorCoil" as a switch-on condition for the drive.
The following figure illustrates that in the event of a falling edge of Q, the drive
cannot be started until the next program cycle. These conditions do not apply to
selected SLS as, in this case, the safety door may be opened during operation.
Figure 29-9 Starting the drive considering FB FDBACK
Network 5
Conditions for SLS

Switch drive
Network 6

Entry ID: 109478932, V2.0, 01/2018 207
29.9.3 SINAMICS G120
General
The S7-1200 F-CPU is operated as an IO controller. Data exchange with the
PROFINET-capable drive SINAMICS G120 also includes safety-related data.
In this document, you will find a chapter on the "LDrvSafe" library that can be used
as an alternative for implementing the tasks described here. For this library, please
use the following link:
STO and SLS

The outputs of FB F23EStopFDoorGuardLockingPLdSIL2 include:
 STO (Safe Torque Off)
 SLS (Safely Limited Speed)
You will find STO and SLS in control word 1 of the extended drive functions. In
the safety program, write to these bits according to the following convention:
STO: Byte 0, bit 0
0: Select STO; 1: Deselect STO
SLS: Byte 0, bit 4
0: Select SLS; 1: Deselect SLS
To deactivate the safety door's guard locking when SLS is active, the appropriate
bit from status word 1 of the SINAMICS G120 is evaluated:
SLS: Byte 0, bit 4
0: SLS is not active; 1: SLS is active.
The following figure shows these bits on

FB F23EStopFDoorGuardLockingPLdSIL2:
Figure 29-10 Control and status word on FB F23EStopFDoorGuardLockingPLdSIL2
Feedback from drive
(status word 1)
Control drive using

control word 1

Entry ID: 109478932, V2.0, 01/2018 208
Stop when SLS active
When SLS is active, the converter safely stops the motor torque using the STO
Note safety function.
For the user scenarios with safety door and SLS, this means: After a stop at SLS, a
restart requires that the safety door be closed.
Starting the motor when SLS is active

When you have triggered a stop, the SINAMICS G120 expects:
 Select STO (or SS1). STO is automatically selected by the safety program.
 Deselect STO (or SS1). STO is automatically deselected by the safety
program.
 When STO has been deselected, wait until the converter is "ready to start".
Alternative: When STO has been deselected, wait a certain time before starting
the motor. We recommend a waiting time of 200 ms.
 Start the motor within 5 s after STO has been deselected.
For more information about the SINAMICS G120, please refer to the manual:

Entry ID: 109478932, V2.0, 01/2018 209

c/SIL 1

– When the safety door is opened during normal mode (no SLS), the
SINAMICS G120 is safely shut down.
– When the safety door is opened with SLS selected, the SINAMICS G120
runs at a safe speed.
–
After shutdown of the actuator, the safety door may only be opened when

Hardware components
Table 30-1 Hardware
DC/DC/RLY
SM 1226 F- 1 6ES7226-6BA32-0XB0
DI8/16x24VDC
SM 1226 F-DQ 1 6ES7 226-6DA32-0XB0
4x24VDC
pushbutton (NO)
pushbutton (NO)
pushbutton (NC)
pushbutton (NC)

Entry ID: 109478932, V2.0, 01/2018 210

(spring-locked)
switch
CU240E-2 PN-F
PM240
Software components
Table 30-2 Software
Basic V15 V15
Startdrive

Entry ID: 109478932, V2.0, 01/2018 211
30.4 Wiring
Figure 30-1 Emergency stop + safety door with guard locking PL c/SIL 1 wiring
24V DC
M
stop start ack
.0
.1
.2 L+
M
L1
Vs1
M
.3 .0
L+
.1
eMagnet
1-
1+
fDoorCoil
PROFINET IE
sepAct
.0
eStop
Vs1

Entry ID: 109478932, V2.0, 01/2018 212

L+ (F-CPU)


Entry ID: 109478932, V2.0, 01/2018 213
Start
No
E-stop No Door interlocking

SLS selected
released active
by operator?
?
Yes
Yes
SLS inactive
SLS active
Safety door No
closed
No
? Door interlocking
deactivated
Yes Stop command
?
Yes No Yes
STO active
? Stop command
?
No Acknowledgment
request Yes No
Operational stop
Yes ?
Acknowledgment
request Actuator stops
? (STO) Yes
No Acknowledged
Actuator stops
Start conditions
met
Timer expired
? No
Door interlocking
active
Yes
Actuator Door interlocking

on deactivated
WARNING
no longer exists.

Entry ID: 109478932, V2.0, 01/2018 214

F24EStopFDoorGuardLockingPLcSIL1
Figure 30-4 User block FB F24EStopFDoorGuardLockingPLcSIL1
FB F24EStopFDoorGuardLockingPLcSIL1. There you can fit the address of SS1
if necessary.

time has expired.
F24EStopFDoorGuardLockingPLcSIL1.

Entry ID: 109478932, V2.0, 01/2018 215
Table 30-3 Inputs of FB F24EStopFDoorGuardLockingPLcSIL1

type
1: required
the safety
function
 to reintegrate
F-I/O
1: Start request
0: Stop request
position switch
energized
1: Magnet in
position switch
de-energized
stop triggered

1: SLS requested
inhibit active
1: Actuator Chapter 6.2
inserted (safety
door closed)
VS: value status
status Chapter 6.7
0: Fault
the magnet and the
monitoring contact
released.

Entry ID: 109478932, V2.0, 01/2018 216
Table 30-4 Outputs of FB F24EStopFDoorGuardLockingPLcSIL1

power supply to
drive interrupted.
Speed"
event
drive
Acknowledgment ackReqEStop BOOL 1: example, in the
required program.
Release safety releaseFDoor BOOL 1: With regard to

door safety door, start
is possible (safety
door closed)

required

commissioning FB F24EStopFDoorGuardLockingPLcSIL1. Customizations are
possible.


Entry ID: 109478932, V2.0, 01/2018 217

For demonstration purposes, this document shows different user scenarios.
Requirements:
 No faults
 No power-on inhibit on the SINAMICS G120
Note Acknowledge a power-on inhibit on the SINAMICS G120 in the same way as
internal faults – with "ack".

No. Action Comment
safety door.
("fDoorCoil"=0)
 "onDrive"=1
 "STO"=1, "SLS"=1
starts.

No. Action Comment
safety door.
("fDoorCoil"=0)

Entry ID: 109478932, V2.0, 01/2018 218
No. Action Comment

 "onDrive"=1
 "STO"=1, "SLS"=1
4 Press the emergency stop (eStop)  "onDrive"=0
starts.
 "STO"=0, "SLS"=1
5 Release the emergency stop (eStop)  "STO"=0, "SLS"=1
7 Start again with no. 2  "STO"=1, "SLS"=1

No. Action Comment
safety door.
("fDoorCoil"=0)
 "onDrive"=1
 "STO"=1, "SLS"=1
4 Switch to SLS ( "reqSLS"=1, "fdbackSLS"=1)  "fDoorCoil"=1: You can open the door
 "STO"=1, "SLS"=0
starts.
 "STO"=1, "SLS"=1
 "STO"=1, "SLS"=1

No. Action Comment
2 Switch to SLS ("reqSLS"=1) To start with SLS from a standstill, the door
must be closed.
 "onDrive"=0
safety door.

Entry ID: 109478932, V2.0, 01/2018 219
No. Action Comment

 "STO"=1, "SLS"=0
 "reqSLS"=1, "fdbackSLS"=1
 "STO"=0, "SLS"=0
triggers STO.
Note When switching to SLS with the safety door closed and "onDrive"=0 (OFF1
active in the drive) and the drive does not start, it goes to STO after a few
seconds.

Entry ID: 109478932, V2.0, 01/2018 220
31 Links and Literature
31 Links and Literature

Table 31-1
Topic Title
\1\ Siemens Industry http://support.industry.siemens.com/
Online Support
\2\ Download page of https://support.industry.siemens.com/cs/ww/en/view/10947
the entry 8932https://support.industry.siemens.com/cs/ww/en/view/1094789
32
\3\ DIN EN ISO 14119 Safety of machinery –

Interlocking devices associated with
guards –
Principles for design and selection (ISO 14119:2013);
German version EN ISO 14119:2013
\4\ IEC 62061:2005 + Safety of machinery –
A1:2012 + A2:2015 Functional safety of safety-related electrical, electronic and
standard programmable electronic control systems
\5\ EN ISO 13849- Safety of machinery –

1:2015 standard Safety-related parts of control systems
\6\ Safety Evaluation www.siemens.com/safety-evaluation-tool
Tool (SET)
\7\ Document for IEC https://support.industry.siemens.com/cs/de/en/view/23996473
62061
32 History
Table 32-1
Version Date Modifications
V1.0 11/2015 First version
V1.1 12/2015 Value status for F-DQ added
V1.2 12/2015  "ack" shown as NO in connection diagram
 'Position switch with solenoid interlocking' figure
replaced
V2.0 01/2018  Update to TIA Portal V15
 Examples with SINAMICS G 120 via PROFIsafe
 Safety door with RFID switches

Entry ID: 109478932, V2.0, 01/2018 221

Safety With S7 1200FCPU v20 en

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Safety With S7 1200FCPU v20 en

Uploaded by

Copyright:

Available Formats

Safety Applications

with the S7-1200 FC

Safety Applications with the S7-1200 FC CPU

6.4 Program structure ............................................................................... 28

Safety Applications with the S7-1200 FC CPU

9.7 Configuration and parameterization ................................................... 50

12.1 Sensor/actuator .................................................................................. 64

Safety Applications with the S7-1200 FC CPU

15.3 Hardware and software components ................................................. 82

17.8 Operation of the user scenario ......................................................... 100

Safety Applications with the S7-1200 FC CPU

21 User Scenario 15: Emergency Stop + Safety Door without Guard

23.2 Safety function .................................................................................. 143

Safety Applications with the S7-1200 FC CPU

26.2 Safety function .................................................................................. 166

28.5 Brief description of the core functionality ......................................... 187

Safety Applications with the S7-1200 FC CPU

Safety Applications with the S7-1200 FC CPU

1 How to Use this Document

2 Why Safety with the S7-1200 FC CPU?

The TIA Portal automation platform

Safety Applications with the S7-1200 FC CPU

3 Description of an Automation Task

The following questions reflect the automation task to be discussed in this

Safety Applications with the S7-1200 FC CPU

Table 4 of EN ISO 13849-1:2015 specifies a relationship between PL and SIL:

The following applies:

PL e/SIL 3 describes the highest degree of safety.

Safety Applications with the S7-1200 FC CPU

4.1 Achieving PL c/SIL 1

4.1.1 Interconnection examples

Example of an emergency stop interconnection

Example of a safety door interconnection

Safety Applications with the S7-1200 FC CPU

4.1.2 Settings in the STEP 7 hardware configuration

Table 4-2 Explanation of the above figure

The default setting is "1oo1 evaluation".

Safety Applications with the S7-1200 FC CPU

4.2 Achieving PL d/SIL 2

4.2.1 Interconnection examples

Example of an emergency stop

Example of a safety door application

Safety Applications with the S7-1200 FC CPU

Figure 4-5 Interconnection of a position switch for PL d/SIL 2

4.2.2 Settings in the STEP 7 hardware configuration

Safety Applications with the S7-1200 FC CPU

Table 4-3 Explanation of the above figure

Select "1oo2 evaluation, equivalent"

The channels are activated by default.

1002 evaluation automatically applies for the second channel.

1002 evaluation automatically applies for the second channel.

Safety Applications with the S7-1200 FC CPU

Here, too, the following applies:

Figure 4-8 1oo2 evaluation in the FB SFDOOR F-library block

Safety Applications with the S7-1200 FC CPU

4.3 Achieving PL e/SIL 3

4.3.1 Interconnection examples

Example of an emergency stop

Example of a safety door application

4.3.2 Settings in the STEP 7 hardware configuration

Safety Applications with the S7-1200 FC CPU

5 Prepared User Scenarios

Safety Applications with the S7-1200 FC CPU