Professional Documents
Culture Documents
SCP 011 Eng
SCP 011 Eng
SCP 011 Eng
Copyright © 2013
SIGMATEK GmbH & Co KG
All rights reserved. No part of this work may be reproduced, edited using an electronic system, duplicated or
distributed in any form (print, photocopy, microfilm or in any other process) without the express permission.
We reserve the right to make changes in the content without notice. The SIGMATEK GmbH & Co KG is not responsible
for technical or printing errors in the handbook and assumes no responsibility for damages that occur through use
of this handbook.
S-DIAS SAFETY CPU MODULE SCP 011
The Safety CPU component has the safety integrity level SIL3 or SIL CL
3 (EN / IEC 62061) or Performancelevel e (PL e) (EN ISO 13849-1/-2).
The safety-related SCP 011 is ideal for use in systems with optional
modules and interface variables according to Safety System Handbook,
see homepage1.
1 Using the search function with the keyword “Safety System Handbook”
05.03.2021 Page 1
SCP 011 S-DIAS SAFETY CPU MODULE
Contents
1 Basic Safety Guidelines ......................................................... 5
1.1 General Information on Safety .................................................... 5
Page 2 05.03.2021
S-DIAS SAFETY CPU MODULE SCP 011
6 Validation Button................................................................... 24
6.1 Explanation of the Individual Sequences ................................. 24
6.1.1 Start Sequence ................................................................................. 24
9 Mounting ................................................................................ 36
05.03.2021 Page 3
SCP 011 S-DIAS SAFETY CPU MODULE
11 Disposal ..................................................................................38
12.4.6 SaveLogActive................................................................................... 45
Page 4 05.03.2021
S-DIAS SAFETY CPU MODULE SCP 011
If the safety guidelines are not followed, dangers to personnel can arise that could lead to
serious injury or in worst cases, death. In less serious cases, systems and equipment can be
damaged.
The following symbols identify the individual risks as well as the degree of seriousness; their
respective meanings are briefly explained. You should therefore familiarize yourself with the
safety symbols and their meanings to prevent dangers and risks.
DANGER! DANGER!
Identifies an immediate danger with high risk, which
can lead to immediate death or serious injury if not
avoided.
Indique un danger direct à haut risque d’un décès
immédiat ou des blessures graves si les consignes de
sécurité ne sont pas respectées.
WARNING
WARNING
Identifies a possible danger with a mid-level risk, which
can lead to death or (serious) injury if not avoided.
CAUTION!
CAUTION!
Identifies a low risk danger, which can lead to injury or
property damage if not avoided.
Indique un danger avec un niveau de risque faible des
blessures légères ou des dommages matériels si les
consignes de sécurité ne sont pas respectées.
05.03.2021 Page 5
SCP 011 S-DIAS SAFETY CPU MODULE
Page 6 05.03.2021
S-DIAS SAFETY CPU MODULE SCP 011
Acceptance of the Before handling the product belonging to this documentation, the
Safety Guidelines operating instructions and safety guidelines must be read.
SIGMATEK GmbH & Co KG accepts no liability for damages
resulting from non-compliance with the safety guidelines or the
relevant regulations.
05.03.2021 Page 7
SCP 011 S-DIAS SAFETY CPU MODULE
Page 8 05.03.2021
S-DIAS SAFETY CPU MODULE SCP 011
Designated Use The Safety modules are designed for use in safety-oriented
applications and meet the required conditions for safety
operation in compliance with Performance level e (PL e), in
accordance with EN ISO 13849-1/-2 and SIL3 or SIL CL 3 in
accordance with EN 62061.
For your own safety and the safety of others, use safety modules
for their designated purpose. Correct EMC installation as well as
proper transport and storage are also included in designated use.
Utilisation prévue Les modules de sécurité sont conçus pour une utilisation dans
les applications sollicitant un niveau de sécurité et répondent à
toutes les conditions nécessaires pour un fonctionnement sûr
conformément au niveau de performance e (PL e) selon la norme
EN ISO 13849-1/-2 et SIL3 ou SIL CL 3 de la norme EN 62061.
05.03.2021 Page 9
SCP 011 S-DIAS SAFETY CPU MODULE
Page 10 05.03.2021
S-DIAS SAFETY CPU MODULE SCP 011
2 Safety Conformity
2.1 Functional Safety Standards
- EN / IEC 62061:2005/A2 2015
- EN ISO 13849-1:2015
- EN ISO 13849-2:2012
CE Declaration of Conformity
The SCP 011 complies with the following European directives:
• 2006/42/EG “Directive of the European Parliament and of the
Council of 17 May 2006 on Machinery and Change to the Directive
95/16/EC” (machine guideline)
• 2014/30/EU “Electromagnetic Compatibility” (EMC guideline)
• 2011/65/EU Restricted use of certain hazardous substances in
electrical and electronic equipment (RoHS Guideline)
The EU Conformity Declarations are provided on the SIGMATEK website.
Using the search function with the keyword “EU Declaration of Conformity”.
05.03.2021 Page 11
SCP 011 S-DIAS SAFETY CPU MODULE
Page 12 05.03.2021
S-DIAS SAFETY CPU MODULE SCP 011
2.4 Compatibility
The safety-related module SCP 011 is supported with firmware version V334 and build No.
1156 or higher of the Safety Designer.
SAFEDINT variables are transferred when for two or more Safety CPU's in a project,
SAFEDINT values are placed in the networks of the remote Safety CPU or with the use of
SAFEDINT values in interface frames (safe variables).
05.03.2021 Page 13
SCP 011 S-DIAS SAFETY CPU MODULE
3 Technical Data
3.1 Performance Data
with existing 0A 0A 0A 0A
+24 V connection (X3)
A fuse for the supply voltage must be installed, which can sufficiently limit voltage
and current.
Page 14 05.03.2021
S-DIAS SAFETY CPU MODULE SCP 011
______________
The limiting component (e.g. transformer, power supply or fuse) must be certified by an NRTL
(Nationally Recognized Testing Laboratory).
(2) dependent on the number of connected modules on the S-DIAS Safety bus
(3) For
loading the internal capacitors a higher power consumption can occur for a short time
(microseconds). This value depends on the input voltage and the impedance of the supply
source.
(4)If this S-DIAS Safety CPU module is connected to several modules, the total currents for
+24 V and +12 V must be calculated based on the module documentations of the used S-
DIAS Safety modules! The total current of the +24 V supply must not exceed 800 mA. The
total current of the +12 V supply must not exceed 800 mA.
(4)
Si ce module S-DIAS Safety est connecté à un SCP avec plusieurs modules S-DIAS, le
courant total des modules utilisés doit être défini et contrôlé. Le courant total de l'alimentation
+24 V ne peut pas dépasser 800 mA! Le courant total de l'alimentation +12 V ne peut pas
dépasser 800 mA!
05.03.2021 Page 15
SCP 011 S-DIAS SAFETY CPU MODULE
(5)
With increased ambient temperature >55 °C the maximum permissible supply voltage is
reduced from 30 V to 28.8 V.
If the SCP 011 with a firmware version lower than V355 resp. with a Safety number
lower than S01.03.01 is integrated with Safety I/O modules in the S-DIAS system (blue
modules), the voltage increase of the +24 V supply of the SCP 011 must not happen
later than 100 ms after the voltage supply of the S-DIAS supply modules, otherwise it
can happen, that the SCP 011 does not recognize the Safety I/O modules on the
Safety bus. This results in a Safety error (error code 1009, reason code 15 in the
Safety Designer) and thus the Safety application is not started.
Page 16 05.03.2021
S-DIAS SAFETY CPU MODULE SCP 011
05.03.2021 Page 17
SCP 011 S-DIAS SAFETY CPU MODULE
3.3 Miscellaneous
Page 18 05.03.2021
S-DIAS SAFETY CPU MODULE SCP 011
4 Mechanical Dimensions
05.03.2021 Page 19
SCP 011 S-DIAS SAFETY CPU MODULE
5 Connector Layout
The connections of the +24 V supply (X3: pin 1 and pin 2) or the GND supply (X3: pin
3 and pin 4) are internally bridged. To supply the module, only one connection to a
+24 V pin (pin 1 or pin 2) and a GND pin (pin 3 or pin 4) is required. The bridged
connections may be used for further looping of the +24 V supply and the GND
supply. However, it must be taken into account that a total current of 6 A per
connection is not exceeded by the forward looping!
Page 20 05.03.2021
S-DIAS SAFETY CPU MODULE SCP 011
B red Display validation button S1 See chapter "Validation Button" for description
05.03.2021 Page 21
SCP 011 S-DIAS SAFETY CPU MODULE
Connections:
Stripping length/Sleeve length: 10 mm
Plug-in direction: parallel to conductor axis or to PCB
Conductor cross section, rigid: 0.2-1.5 mm2
Conductor cross section, flexible: 0.2-1.5 mm2
Conductor cross section, ultrasonically compacted: 0.2-1.5 mm2
Conductor cross section AWG/kcmil: 24-16
Conductor cross section flexible, with ferrule without plastic 0.25-1.5 mm2
sleeve:
Conductor cross section flexible, with ferrule with plastic sleeve: 0.25-0.75 mm2 (ground for reducing d2 of the
ferrule)
Page 22 05.03.2021
S-DIAS SAFETY CPU MODULE SCP 011
Manufacturer Weidmüller
05.03.2021 Page 23
SCP 011 S-DIAS SAFETY CPU MODULE
6 Validation Button
With the validation button S1, several commands as well as the validation can be executed:
Inputting commands with the validation button consists of 3 sequential components; the start
and End sequence, and the sequence for selecting a command (see the following diagram).
Buttons pressed
not pressed
ON
LED B
OFF
ON
LED C1-C3
OFF
Start Command selection End
The button must be pushed until LED B lights (approximately 3 seconds). If the button is
pushed too long (longer the approximately 10 seconds), an Error sequence is initiated (see
"Error sequence"). The same applies when the button is released too soon (before LED B
lights) or it is pushed immediately after being released (time between 2 button presses shorter
than 200 ms).
Page 24 05.03.2021
S-DIAS SAFETY CPU MODULE SCP 011
After the Start sequence, the desired command is selected. This selection is made with button
presses in the following time intervals: Minimum press duration is 200 ms, maximum is
approximately 3 seconds; the minimum pause between individual button presses is 200 ms,
the maximum is 10 seconds. After each correct button press (incl. The minimum pause of
approx. 200 ms), the selected command is shown with LEDs C1, C2 and C3. If an invalid
command is selected (see "valid commands"), the Error sequence is initiated; as with not
correctly observing the time intervals. LED B lights continuously during this sequence.
This sequence is used to confirm the selected command. Here, the button is pressed until
LED starts to blink (approx. 3 seconds, blinks in a slow interval). The number of light pulses
in LED B depends on the previously selected command (see "valid commands").
After the LED turns off, the button must be released. After the minimum pause of
approximately 200 ms, in which the button must not be pressed, the service mode is imitated
and the command is executed. If the button pressed for longer than approximately 3 seconds,
the selected command is not accepted and the Error sequence is displayed. The same
applies when the button is released too soon or the minimum pause of 200 ms is not
observed. After executing the command, the corresponding mode is initiated depending on
the command (see "Valid Commands").
05.03.2021 Page 25
SCP 011 S-DIAS SAFETY CPU MODULE
If an invalid button press occurs, as in the sequences described above, the Error sequence
is initiated. LED B indicates this sequence with fast blinking, which lasts for at least 3 seconds.
If the button is still pressed after 3 seconds, LED B will continue to blink until the button is
released and a minimum pause of approximately 200 ms has elapsed. The Start sequence
cannot be reinitiated until LED B stops blinking.
After ending the Error sequence, the mode is changed as described in "Overview of Module
Statuses". If turned on, LEDs C1, C2 and C3 are turned off after ending the Error sequence.
Page 26 05.03.2021
S-DIAS SAFETY CPU MODULE SCP 011
The number of button presses corresponds to the number of light pulses in LED B during
the End sequence.
QUIT_ERROR 1 X
CLR_CFG 2 X X
SET_VERIFIED 3 X X X
The following tables show a sample of the statuses in which the system can be found, the
commands that can be active during the respective status and their functions (see the
Safety System handbook for the module statuses).
Command
System status QUIT_ERROR CLR_CFG SET_VERIFIED
Check-Configuration X
Time-restricted operational mode X X
Operational mode X
Service mode X
Error X
05.03.2021 Page 27
SCP 011 S-DIAS SAFETY CPU MODULE
Page 28 05.03.2021
S-DIAS SAFETY CPU MODULE SCP 011
An SD card can only be written on with the Safety Designer. A detailed description can be
found in the Safety System Handbook (Link: https://www.sigmatek-
automation.com/fileadmin/user_upload/downloads/Safety-Systemhandbuch-eng.pdf).
A Safety project, which was programmed with the SafetyDesigner, can be stored on an SD
card. The stored Safety project can then be loaded into an additional SCP Safety-CPU,
providing that the module's Flash memory is empty (cleared).
If the configuration on the SD card is different from that on the Safety CPU Flash, the system
switches to the error status (error message 87). The SD card cannot be inserted into the
Safety CPU during normal operation (Operational or temporary operational mode). If the SD
card is inserted during normal operation, the Safety CPU switches to the error status (error
message 88). However, an SD card can be removed during normal operation.
05.03.2021 Page 29
SCP 011 S-DIAS SAFETY CPU MODULE
• If an error occurs during the restart, see the following chapter "Restart Error".
Only microSD cards that support version 2.0 or higher of the "SDA Physical Layer
Specification" (SDA=SD Card Association) can be used.
The number of read and write accesses has a significant influence on the service
life of the storage medium.
Page 30 05.03.2021
S-DIAS SAFETY CPU MODULE SCP 011
05.03.2021 Page 31
SCP 011 S-DIAS SAFETY CPU MODULE
7 Error Response
In the event of an error, please consult the chapter "LED Displays", as important information
on the runtime status of the system can be derived from the status an error display. Since
errors in general are of a complex nature, do not perform a diagnosis based on the LEDs
alone (consult the corresponding chapter in the Safety System Handbook as well). For an
exact error analysis, the SafetyDesigner must be used.
Flash
Flash
Restart
Wiederanlauf Safe-
Safe-CPU Service
POST Cpu is
ist leer Mode
Empty
Error
Konfiguration
Configuration nicht
not Mode
verteilt
distributed
Idle
Check Config.
Mode dauerhaft ONon
Continously
dauerhaft ONon
Continously
blinking
blinken
Configuration distributed
Konfiguration verteilt E
ST
(Temp.) dauerhaft ON
Continously on
Op. Mode
dauerhaft ON
Continously on RN
Page 32 05.03.2021
S-DIAS SAFETY CPU MODULE SCP 011
During restart, the Safety CPU first runs the POST (Power On Self Test). In the POST,
whether the Safety CPU is configured or not is determined. If the Flash memory in
the Safety CPU is empty, it changes to the service mode and switches the status
LED (ST) to continuously on.
a) If the Flash memory of the Safety CPU contains a configuration, it goes into the
idle / Check Configuration Mode. Thereby, an attempt is made to distribute the
configuration; the ST-LED blinks during this process.
b) If the configuration is successfully distributed, the Safety CPU either goes into the
Operational Mode or the Temporary Operational Mode depending on whether or
not the configuration has already been validated. If the System was already
validated, the ST-LED turns off and the RN-LED lights. If the system has not been
validated, both LEDs light simultaneously.
c) If for whatever reason the distribution of the configuration is still not successful, the
Safety CPU switches to the Error Mode and the E-LED lights
d) When the Safety CPU remains in the idle / Check Configuration Mode for a long
period of time (ST-LED blinking) without switching to the Error Mode, it is an
indication that the bus communication is malfunctioning. In this case, the PLC will
remain in the error status and must be restarted.
e) A change to the error status can also occur from the POST and (Temp.) OP Mode
if other (internal) errors are detected or errors in remote modules occur. The analysis
of these errors however, requires the use of the SafetyDesigner.
05.03.2021 Page 33
SCP 011 S-DIAS SAFETY CPU MODULE
7.3 Troubleshooting
• Check all modules in the system for completeness and Type conformity
If the Safety CPU remains in the error status after the QUIT_ERROR command has been
executed, it must be retested using the SafetyDesigner.
Lors de la détection d'une erreur de câblage, le système doit être arrêté en mode
contrôlé et mis hors tension.
Le câblage et l'installation ne peuvent être effectués que sur un système hors
tension.
Page 34 05.03.2021
S-DIAS SAFETY CPU MODULE SCP 011
8 Wiring Guidelines
The input filters, which suppress noise signals, allow operation in harsh environmental
conditions. A careful wiring method is also recommended to ensure error-free function.
The ground bus should be connected to the control cabinet when possible!
IMPORTANT:
The S-DIAS module CANNOT be connected or disconnected while voltage is applied!
IMPORTANT:
Le module S-Dias NE PEUT PAS être inséré ou retiré sous tension.
05.03.2021 Page 35
SCP 011 S-DIAS SAFETY CPU MODULE
9 Mounting
The S-DIAS modules are designed for installation into the control cabinet. To mount the
modules a DIN-rail is required. The DIN rail must establish a conductive connection with the
back wall of the control cabinet. The individual S-DIAS modules are mounted on the DIN rail
as a block and secured with latches. The functional ground connection from the module to
the DIN rail is made via the grounding clamp on the back of the S-DIAS modules. The
modules must be mounted horizontally (module label up) with sufficient clearance between
the ventilation slots of the S-DIAS module blocks and nearby components and/or the control
cabinet wall. This is necessary for optimal cooling and air circulation, so that proper function
up to the maximum operating temperature is ensured.
Page 36 05.03.2021
S-DIAS SAFETY CPU MODULE SCP 011
a, b, c … distances in mm (inches)
05.03.2021 Page 37
SCP 011 S-DIAS SAFETY CPU MODULE
x x x x x x
x= supported
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16
x x x x x x x x x x x x x x x x
x= supported
17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32
x x x x x x x x x x x x x x x x
x= supported
11 Disposal
For the disposal of the product, the respective guidelines, possibly country-specific, must be
observed and followed.
Page 38 05.03.2021
S-DIAS SAFETY CPU MODULE SCP 011
This hardware class is used to control the SCP 011 hardware module. More information on
the hardware can be found in the module documentation.
05.03.2021 Page 39
SCP 011 S-DIAS SAFETY CPU MODULE
12.1 General
ClassState State This server shows the actual status of the hardware class.
DeviceID State The device ID of the hardware module is shown in this server.
FPGAVersion State FPGA version of the module in the format 16#XY (e.g. 16#10 = version 1.0).
Hardware State Hardware version of the module in the format 16#XXYY (e.g. 16#0120 =
Version version 1.20).
Serial Number State The serial number of the hardware module is shown in this server.
RetryCounter State This server increments when a transfer fails.
Required Property This client is active by default, which means that the S-DIAS hardware module
at this position is mandatory for the system and can under no circumstances
be disconnected or return an error. Otherwise, the entire hardware
deactivated. If the hardware module is missing or removed, an S-DIAS error
is triggered. If his client is initialized with 0, the hardware module located in
this position is not mandatory. This means that it doesn't have to be available
or error-free. However, which components identified as "not required" should
be selected with regard to the safety of the system.
Page 40 05.03.2021
S-DIAS SAFETY CPU MODULE SCP 011
12.2 Safety
05.03.2021 Page 41
SCP 011 S-DIAS SAFETY CPU MODULE
Error State State Indicates whether the module has detected an error.
0 No error detected
1 Error detected
2 Transfer timeout for data needed by another module
Quit State If the safety.dlm is used, other errors (server error = 1) can be cancelled
Communication starting with dlm version 6.
Errors
Caution!
Cancellation can activate Safety outputs and thereby lead to unexpected
responses from machine elements.
Firmware State In this server, the Firmware version of the hardware used is displayed in xx.yy
Version format. Whereby x represents the major version and y the minor version.
For example, 16#0100 means v1.0
Safety Number State Shows the unique Safety number of the module.
Safety Retry State This server shows the current number of retries of the Safety bus.
Counter
Designer State Shows the CRC of the SafetyDesigner project configuration.
Project Config This can be compared with the CRC of that displayed in the SafetyDesigner
CRC when printing the project (or in the print preview).
Designer State Name of the Safety Designer project
Project Name
Designer State Revision number of the Safety Designer project
Project
Revision
Validaten State Shows the status of the validation button.
Button State 0 Validation button not used at the moment
1 Now the desired command can be selected by pressing the
button
2 Command is executed
3 Error in module
Fast Unsafe Output Bit field with 32 fast non-Safe inputs. These inputs are configured in Safety
Inputs Designer. More detailed information can be found in the Safety Designer
documentation. The SCPFastUnsafeInput hardware class can be connected
to break down the bit field to individual servers.
Page 42 05.03.2021
S-DIAS SAFETY CPU MODULE SCP 011
Fast Unsafe Input Bit field with 32 non-Safe outputs. These inputs are configured in Safety
Outputs Designer. More detailed information can be found in the Safety Designer
documentation. The SCPFastUnsafeOutput hardware class can be connected
to break down the bit field to individual servers.
Server Update Property Time interval in ms, in which the server (unsafe variables in the Safety
Time Designer) should be updated.
The Client is updated automatically when the time setting is too short for the
number of available servers.
SPDO Read Property The maximum size of the safe read PDO data can be entered for a precise
Size resources calculation in the HW Editor.
The exact size can be read in the SafetyDesigner. Simply right click on the
project -> Show PDO length of modules and the PDO lengths of the Safety
CPUs are displayed.
The number of bytes in the column "SPDO Read Size" is the number to be
entered for "SPDO Read Size".
Default value: 28
SPDO Write Property The maximum size of the safe write PDO data can be entered for a precise
Size resources calculation in the HW Editor.
The exact size can be read in the SafetyDesigner. Simply right click on the
project -> Show PDO length of modules and the PDO lengths of the Safety
CPUs are displayed.
The number of bytes in the column "SPDO Read Size" is the number to be
entered for "SPDO Read Size".
Default value: 28
Additional Write Property The number of additional write PDO accesses per cycle can be entered for a
PDOs precise resources calculation in the HW Editor.
The exact size can be read in the SafetyDesigner. Simply right click on the
project -> Show PDO length of modules.
In the dialog the column "Number of PDO frames per bus cycle" shows the
number of PDO frames per cycle for the respective CPU.
This number minus 1 is then the number to be entered for "Additional Write
PDOs". E.g.: Number of PDO frames per bus cycle = 3 -> Additional Write
PDOs = 2
Default value: 0
ALARM Downlink With this downlink the corresponding alarm class can be placed via the
hardware editor.
05.03.2021 Page 43
SCP 011 S-DIAS SAFETY CPU MODULE
This method is used to read the diagnostic status information (Run State, Config State, Login
Level, Error Counter IO State) from The Safety CPU.
12.4.2 GetDiagState
This method is used to retrieve the read diagnostic information of the class.
12.4.3 FetchDiagInfo
This method is used to read the diagnostic status information (Controller ID, Act Error Code,
First Error Code, Reason Code 0 und 1) from the Safety CPU.
12.4.4 GetDiagInfo
This method is used to retrieve the read diagnostic information of the class.
Page 44 05.03.2021
S-DIAS SAFETY CPU MODULE SCP 011
12.4.5 SaveLog
This method can be used to store the log file from one of the two micro controllers This is a
binary file and should be sent to SIGMATEK support when an error occurs)
pDPNE ^CHAR Here, the pointer to there log file name is sent.
Return parameters Type Description
Success BOOL FALSE Error during start, another process stored in
the log file is currently active.
TRUE Start successful, log file is stored.
12.4.6 SaveLogActive
05.03.2021 Page 45
SCP 011 S-DIAS SAFETY CPU MODULE
The status "SafetyState" refers to the Safety CPU. If a status unequal to "_SafetyClassOK"
is displayed at "SafetyState", the Safety CPU and consequently the Safety modules
connected behind it are not working.
12.5.1 Example
The external supply of the SCP is not connected. The communication via SDIAS bus is
running anyway. "ClassState" is equal to "_ClassOk". The SDIAS bus reads that the power
supply of the SCP is not connected. "SafetyState" is set to "_LostPowerSupply" in sequence.
Note: When using a SALAMANDER system, these steps are not required, since the function
is already integrated into the OS.
Page 46 05.03.2021
S-DIAS SAFETY CPU MODULE SCP 011
Documentation Changes
11 3.2 Electrical Requirements Changed table content and added notice below
08.09.2014 11 3.2 Electrical Requirements Added Supply voltage (UL) and notice in grey box
05.03.2021 Page 47
SCP 011 S-DIAS SAFETY CPU MODULE
02.09.2020 16 3.2.2 S-DIAS Bus/Safety For footnote (5) text “horizontal mounting position
Supply (Output) and” removed
03.11.2020 42 + 43 12.2 Safety Changes in Fast Unsafe Inputs and Fast Unsafe
Outputs
Page 48 05.03.2021