SIMATIC failsafe controllersSeamless safety solutions in factory and process automation

Pro

du

ct B

rie

f · N

ov

em

be

r 2

00

3

2

Safety Integrated as a component of Totally Integrated Automation

Safety Integrated constitutes a com-plete and totally integrated safety program.

Safety Integrated � as a member of Totally Integrated Automation � incorporates full safety technology from

· sensors (SIGUARD®)

· controllers (SIMATIC®)

· drives (SINUMERIK®, MASTERDRIVES®, SIMODRIVE®, SIMOTION®)

Thanks to the integration of safety technology functions into the auto-mation world of Totally Integrated Automation, standard automation and safety automation have become one integrated overall sys-tem.

This is also the case for the increas-ing decentralization of automation solutions. Therefore the PROFIsafe protocol was added to PROFIBUS for safety-related communication. Safety-related and standard com-munication are now possible over only one standard PROFIBUS cable.

These technical innovations also generate considerable cost savings � for machine manufacturers as well as for plant operators.

Key features of SIMATIC Safety Integrated

SIMATIC Safety Integrated com-prises the failsafe SIMATIC control-lers as well as I/O and engineering modules within the product range of Safety Integrated. If a fault occurs, the application can be flexi-bly changed into a safe state and remains in that safe state. The fail-safe controllers are based on time-proven standard PLCs.

The engineering for the standard and safety functions of the failsafe SIMATIC controllers is implemented with the same configuring tools (STEP® 7). In a SIMATIC controller the safety technology is thus seam-lessly integrated into standard auto-mation.

Thanks to the fine-grained structure of the failsafe I/Os, safety technol-ogy is only applied where actually required. Combining safety compo-nents and standard components is no problem, as well as the coexist-ence of safety-related and non-safety-related programs in one con-troller. Links to non-Siemens failsafe fieldbus devices can also be easily implemented with the help of PROFIBUS and the PROFIsafe profile.

Highlights of SIMATIC Safety Integrated

■ One control

■ One engineering

■ One PROFIBUS

■ One I/O system

for standard and safety-related applications

The trend to safety systemsFeatures of SIMATIC Safety Integrated

Increased importance of safety systems

Accidents and damage caused by faults in machines or systems must be prevented to the extend possible. Laws regarding safety at the work-place and protection of the environ-ment are becoming increasingly strict worldwide.

To that goal, many different produts and systems for safety-oriented functions (electrical engineering) and standard tasks (classic PLC) are employed. Conventional wiring combined with special safety buses will not only increase wiring costs, and engineering effort, but will also cause error diagnostics to become more expensive and availability to decrease.

That's why machine manufacturers and plant operators are more and more using automation compo-nents for safety-related tasks. The safety of people, machines and the environment thus depends on the correct functioning of the automa-tion systems. The same high demands that are placed on safety-related electromechanical compo-nents are therefore placed on safety-related electronic systems as well. Both generic and arbitrary erros must be handled in a safe way.

2

3

The main application areas of SIMATIC Safety Integrated are:

Factory automation

· Conveyor systems, presses, machine tools, processing machines, etc.

· Transport of people, e.g. cable cars, lifting platforms, rides in amusement parks, etc.

Process automation

· Burner Management Systems

· Emergency shutdown systems

· High availabilty, critical control

· Fire and gas systems

SIMATIC Safety Integrated in Process and Factory Automation

For these applications, SIMATIC Safety Integrated is offering a scale-able range of failsafe controllers with common I/O and communica-tion modules.

All important standards and regula-tions are met, e.g.

· IEC 61508 (up to SIL 3),

· EN 954 (up to Category 4),

· NFPA 79-2002,

· NFPA 85,

· German TÜV-certificates for fac-tory and process automation.

Thus the worldwide use of SIMATIC Safety Integrated for the protection of people, machines, and the envi-ronment is made possible.

Factory automationF-controllers

H-CPUs of S7-400;(see Page 12)

EngineeringCFC; (see Page 13)

Process automationFH-controllers

F-CPUs of ET 200®S, S7-300®F, S7-400®F; (see Page 10)

EngineeringSTEP 7 (LAD, FBD); (see Page 11)

Shared I/Os ET 200M, ET 200S; (see Page 14)

Communication via PROFIBUS with PROFIsafe profile; (see Page 7)

Factory automation

Process automation

The main application areas of SIMATIC Safety Integrated are:

Factory automation

· Conveyor systems, presses, machine tools, processing machines, etc.

· Transport of people, e.g. cable cars, lifting platforms, rides in amusement parks, etc.

Process automation

· Burner Management Systems

· Emergency shutdown systems

· High availabilty, critical control

· Fire and gas systems

4

SIMATIC Safety Integrated combines standard automation and safety technology into one innovative overall system.

Siemens offers a complete product range. Existing SIMATIC and safety technology expertise is sufficient to solve safety-related tasks with SIMATIC.

SIMATIC Safety Integrated provides benefits for:

· machine manufacturers and plant engineers, e.g. reduced engineer-ing support

· plant operators, e.g. through higher plant availability and increased flexibility

· management, e.g. savings and increased productivity

Siemens Safety Integrated offers advantages compared to standalone failsafe controllers and conventional safety technology, e.g. electro-mechanical relays.

Advantages of SIMATIC Safety Integrated

Advantage of SIMATIC Safety Integrated

compared toproprietary failsafe controllers

compared toconventional safety technology

Less engineering over-head

· Only one engineering tool required for de-velopment of standard and safety programs

· Shared data management for standard and safety programs

· Uniform configuration of standard and safety-related communication

· A solution can be easily duplicated by copying the safe-ty program

· Increased flexibility thanks to programming instead of wiring the safety logic circuit

Commissioning is easier and faster

· Only one PROFIBUS cable for standard and safety-related communication

· All system components are from a single source

· Only one interface to the HMI system

· Easy modification of the safety logic circuit through program changes with automatic updating of the doc-umentation.

· Uniform diagnostics, from sensors to controllers right up to the HMI system

More efficient operating phase

· Shorter downtimes thanks to uniform diagnostics from sensors to controllers right up to the HMI system

· Simplified spare parts inventory based on common architecture and fewer components

5

Previous safety-related PLC solu-tions required two different PLCs, and for distributed solutions an additional safety bus.

The new solution using SIMATIC Safety Integrated requires only one PLC with uniform engineering and the standard PROFIBUS with the PROFIsafe protocol for standard and safety-related automation.

If required, the systems can be set up separately as in the past with the advantages of a common engineer-ing software and architecture.

Comparison of old and new failsafe solutions

Innovations for PLC-based failsafe solutions

Standard PLC

Failsafe I/O and emer-gency stop

Emergency Emergency

Emergency

Standard I/O

Standard I/O

Safety bus

Previously: Standard and safety automation � in two different systems

Failsafe PLCs

PROFIBUS

Failsafe SIMATIC PLCs

Standard and failsafe I/O

PROFIBUS with PROFIsafe profile

SIMATIC Safety IntegratedFailsafe controllers for factory and process automation

New: Standard and safety automation � integrated into one system

From the propri-etary solution to afailsafe PLC

Failsafe I/O and emer-gency stop

Laser scanner

Emergency

Laser scanner

6

������������

The same standard PROFIBUS cable is used for both standard and safety-related communication with the protocol profile PROFIsafe, which has been specially developed for safety technology.

When configuring SIMATIC Safety Integrated, the SIMATIC controllers and distributed I/O, as well as com-ponents for evaluation and visual-ization, drives and process control systems are integrated via a com-mon PROFIBUS network.

In addition, branching into the haz-ardous area through PROFIBUS PA and linking the actuator-sensor interface via the DP/AS interface link is possible.

Configuration example for Safety Integrated

The configuration example shows the standard PROFIBUS and a selection of components from the Safety Integrated range that can be connected

SIMATIC S7-400FH

SIMATIC S7-300FStandard systemsProcess control technology PROFIBUS PA

SIMATIC ET 200S with motor starter

VisualizationSIGUARD® laser scanner

SIMATIC ET 200M

SINUMERIK 840 D

SIMATIC ET 200S with motor starter

SIGUARD laser scanner

DP/AS-Interface link

7

PROFIsafe was the first communica-tion protocol approved under the safety standard IEC 61508 that per-mits both standard and safety-related communication on one bus. This not only results in an enormous savings potential with regard to cabling and the required number of parts, but also adds the advantage of retrofitting.

PROFIsafe is an open solution with safety-related communication via standard field busses. Numerous manufacturers of failsafe compo-nents and end users of safety tech-nology have helped develop this vendor-independent and open stan-dard for Profibus International (PI).

With SIL 3 (IEC 61508) and AK6 (DIN V 19250), PROFIsafe is taking additional relevant standards into account and thus meets the highest safety requirements of the manu-facturing and process industry. With the PA protocol (IEC 1158-2), PROFI-BUS DP is extending distributed automation seamlessly into the pro-cess world.

PROFIsafe uses PROFIBUS compo-nents and services for failsafe com-munication. A failsafe CPU (F-CPU) and a failsafe slave (F-slave) exchange useful data as well as sta-tus and control information; no additional hardware is required for that purpose.

PROFIsafe prevents various errors that can occur when transmitting messages, such as wrong address, loss, delay, etc., through the follow-ing features:

· Continuous numbering of the PROFIsafe telegram

· time monitoring (watchdog time-out)

· authenticity monitoring using "passwords"

· optimized CRC checking

As a result, PROFIBUS has been expanded for safety-related func-tions. Existing solutions can be sup-plemented without having to change the cabling. Thanks to the PROFIBUS protocol PROFIsafe, stan-dard and safety-related communica-tion can be carried out via one bus system on new or existing PROFIBUS applications.

As component of SIMATIC Safety Integrated, PROFIBUS with PROFIsafe is certified to IEC 61508 (up to SIL 3), EN 954 (up to Category 4), NFPA 79-2002and NFPA 85.

PROFIBUS with PROFIsafe protocol for safety-related communication

Standard and safety-related data are transmitted over the same bus line using PROFIsafe.

Failsafedata

Standard data

PROFIsafe PROFIsafe

Standard PROFIBUS DP

protocol

Standard PROFIBUS DP

protocol

PROFIsafe layer

black channel = standard PROFIBUS

PROFIBUS DP

Failsafedata

Standard data

8

Factory automation

The following failsafe controllers are predestined for the manufac-turing industry

· IM 151-7 F-CPU of the ET 200S

· CPU 315F and CPU 317F of the S7-300

· CPU 416F of the S7-400

These CPUs are based on the respective standard CPUs. Vari-ous protective mechanisms have been added to their hardware and operating system for execut-ing safety programs.

The entire programming of the safety-related program is done by STEP 7 in the standard languages LAD and FBD.

The software package "S7 Distrib-uted Safety" supports the config-uration of the failsafe I/Os and the programming using precon-figured, certified modules.

There are no restrictions for edit-ing non-safety-related programs.

The product range of the failsafe SIMATIC controllers is optimally adapted to the respective applica-tions in factory and process automa-tion.

· In factory automation, the safety of people and machines are the most important objective.

· In process automation, the pro-tection of the environment also needs to be considered.

If a fault occurs, the application can be flexibly changed into a safe state and kept in that safe condition with the help of failsafe SIMATIC control-lers.

The safety functions are executed by the safety program in the CPU in connection with failsafe I/O mod-ules. Standard I/O modules and fail-safe I/O modules can also be set up as a combination.

In factory and process automation, the ET 200S and ET 200M are used as the failsafe I/O modules.

Safety-relevant as well as standard communication between the cen-tral processing unit and the I/O mod-ules (safety-related or standard) is carried out over PROFIBUS DP and the PROFIsafe profile.

Process automation

The fault-tolerant CPUs 414H and 417H of the S7-400 are used in the process industry. A special F-library - the "S7 F Systems" soft-ware package - has been added to their operating system. One CPU can solve failsafe application tasks.

When using two CPUs, demands on fail-safety and fault-tolerance are met. If an error occurs, the redundant CPU continues the production process.

The configuration is carried out by calling and interconnecting function blocks in the Continu-ous Function Chart (CFC).

The software package "S7 F Systems" supports the con-figuration of the failsafe I/Os and the programming using precon-figured, certified modules.

Scaleable systems for factory and process automation

The scalable range of failsafe CPUs for factory automation: IM 151-7 F-CPU, CPU 315F, CPU 416F, CPU 317F.

Two fault-tolerant CPUs 414H provide fail-safety and fault-tolerance for pro-cess automation in one system.

9

The following illustrations show the configuration possibilities for

· manufacturing industry

· process industry.

Configurations for factory automation or process automation

Example manufacturing industry: Failsafe control with distributed I/O; direct slave-to-slave traffic enables various intelligent, failsafe slaves to communicate in a failsafe manner (without participation of the master).

Factory automation (F-controller)

Example process industry: Failsafe and fault-tolerant control with two CPUs, redundant PROFIBUS and redundant I/O modules for continuing the process after a fault in the control system.

Centrally with standard and safety-related SMxxx I/O mod-ules of the ET 200M

Distributed with standard and safety-related I/O modules

Distributed with standard and safety-related I/O modules (also in connection with safety-related motor starters)

S7-300F or S7-400F (master)

ET 200M (slave)

ET 200S(slave)

Process automation (FH-controllers)

Redundant master systems S7-400H in segmented mount-ing rack with redundancy con-nection

The controller continues to be available, even if an S7-400H master system, an ET 200 sta-tion or failsafe modules fail.

S7-400FH(master)

ET 200M (slave)

ET 200S(slave)

Fault-tolerant communication through Ethernet

PR

OFI

BU

S D

P -

re

du

nd

an

t

Factory automation

Process automation

10

For factory automation, there are four different CPUs available. The following table lists the most impor-tant technical characteristics of the CPUs.

The failsafe CPUs have the following functionality:

· Comprehensive self-tests and self-diagnostics to check the failsafe state of the CPU

· Execution of standard and failsafe programs on one CPU

· Direct slave-to-slave failsafe traf-fic between failsafe, intelligent DP slaves

· Common diagnostics and signal-ing functions as for standard SIMATIC S7 CPU

Failsafe controllers for factory automationOverview of CPUs

The ET 200M (centralized in connec-tion with F-CPUs of the S7-300 and decentralized) and the ET 200S are used as failsafe I/Os (see Page 14).

CPU IM 151-7 F-CPU CPU 315F-2 DP CPU 317F-2 DP CPU 416F-2

Design ET 200S S7-300 with central and/or distributed failsafe I/O S7-400 with distributed failsafe I/O

Application · Distributed applica-tions in the low-end performance range

· Standalone systems

· Medium performance range

· Medium to upper per-formance range

· Top performance range

Main memory 48KB 192KB 512KB 0.8 MB data0.8 MB code

Load memory (plug-in) 64 KB - 8 MB 64 KB - 8 MB 64 KB - 8 MB 256KB integrated64 KB -64 MB

Instruction execution time (bit)

0.1 µs 0.1 µs 0.1 µs 0.08 µs

Bit memories 2 Kbits 16 Kbits 64 Kbits 128 Kbits

FB/FC/DB 512/512/511 2048/2048/1023 2048/2048/2047 2048/2048/4095

Failsafe I/O Up to 28 Up to 320 > 500 > 1000

I/O address area 244 B/244 B 2 KB/2 KB 8 KB/8 KB 16 KB/16 KB

Process I/O image 128 B/128 B 384 B/384 B 1 KB/1 KB 16 KB/16 KB

Interfaces MPI/DP MPI and DP MPI/DP and DP MPI/DP and DP

Dimensions 60 x 120 x 75 40 x 125 x 130 80 x 125 x 130 25 x 290 x 219

Order No. stem: 6ES7 151-7FA.. 6ES7 315-6FF.. 6ES7 317-6FF.. 6ES7 416-2FK..

11

When using the "S7 Distributed Safety" software package, no addi-tional know-how is required. Pro-gramming of safety-related pro-grams for the failsafe CPUs is carried out over the well-known STEP 7 standard language ladder diagram (LAD) and function block diagram (FBD). A safety-related program is automatically generated through a special function during compilation.

In addition to the failsafe program, a standard program may coexist and can run on the CPU as well.

An additional component of this software package is the F-library with preconfigured, TÜV-certified modules for safety-related func-tions. S7 Distributed Safety also supports the comparison of safety-related programs. And the gener-ated program printout simplifies the acceptance test of the plant.

Example

The example "Emergency stop" shows how stop functions can be implemented immediately (cate-gory 0) or time-delayed (category 1). The acknowledge key is used as start input.

The programming overhead is mini-mized thanks to distributed error analysis by the ET 200S and ET 200M modules. For example, the discrepancy time is configured by the HW Configuration and analyzed in the module. In the PLC program, only a signal appears. This signal determined by the system can thus be easily processed in the program. Complicated calculations become unnecessary.

S7 Distributed Safety option package

F-library Certified modules, e.g. emergency stop, two-hand control, muting, door monitor-ing

Requirements STEP 7

Engineering package 1 license required per engineering loca-tion

Order No. stem: 6ES7 833-1FC..

Failsafe controllers for factory automationProgramming

S7 Distributed Safety: The entire programming process is carried out in a function block diagram (FBD, see above) or ladder diagram (LAD)

Programming example "Emergency Stop"

Start

Immediate_stop

Stop 8

Time 1

Stop 1

&

&

ŠS

R

Q

T1

Factory automation

8

12

For process automation, there are two CPUs available in the S7-400 family. They are fault-tolerant S7-400 CPUs with software imple-mented safety functions that permit the configuration of failsafe systems as well as the configuration of simultaneously failsafe and fault-tolerant systems.

The SIMATIC PCS 7 process control system can very easily integrate the SIMATIC failsafe controllers.

The CPU monitors the proper opera-tion of the system through regular self-tests, instruction tests, as well as program execution monitoring.

The table (see bottom right) lists the most important technical character-istics of the CPUs.

In a distributed configuration, the ET 200M and ET 200S are used as fail-safe I/Os (see Page 14).

Failsafe controllers for process automationOverview of CPUs

CPU CPU 414-4H CPU 417-4H

RAM (integral) 384 KB data384 KB code

2 MB data2 MB code

RAM (expandable)

-- 8 MB data8 MB code

Load memory (integral RAM)

256 KB 256 KB

Load memory (expanded RAM)

Up to 64 MB Up to 64 MB

Load memory (expanded FEPROM)

Up to 64 MB Up to 64 MB

Instruction execution time (bit)

0.1 µs 0.1 µs

Bit memories 64 Kbits 64 Kbits

FB/FC/DB 2048/2048/4095 6144/6144/8192

I/O address area 8 KB/8 KB 16 KB/16 KB

Process I/O image 8 KB/8 KB 16 KB/16 KB

Interfaces MPI/DP and DP MPI/DP and DP

Dimensions 25 x 290 x 219 25 x 290 x 219

Order No. stem: 6ES7414-4H... 6ES7417-4H...

Requirement Design Safety Integrity Level

Failsafe Simplex configuration with one CPU

up to SIL 3 by TÜV per IEC 61508

Failsafe and fault-tolerant Redundant configuration with two CPUs

up to SIL 3 by TÜV per IEC 61508

Fault-tolerant CPU 414-4H withTÜV-logo and power supply

13

SIMATIC process safety systems are primarily configured with the SIMATIC STEP 7 Continuous Func-tion Chart (CFC) engineering tool which is compliant with the IEC 61131-3 standard for PLC program-ming languages. CFCs are also the primary configuration tool for the SIMATIC PCS 7 process control sys-tem.

The commonality in programming tools significantly reduces the cost and complexity traditionally associ-ated with integrating control and safety systems.

The „S7 F Systems“ software pack-age integrates special TÜV-certified failsafe functions into the CFC tool. These failsafe functions are distin-guished graphically by their yellow color. This is just one of the many safeguards built-into the S7 failsafe controllers that make it possible to include both standard and failsafe functions in the same controller. In fact, the independence of failsafe and standard functions in the same failsafe CPU has been certified by TÜV per IEC 61508 and thus is allowed if also permitted by relevant application standards.

The new "S7 F Systems" version offers an extended F-library with signal selection blocks for two or three sensors, as well as F-blocks which automatically detect certain programming errors (e.g. division by zero).

In the case of an error or distur-bance, the safety-related program stops. However, the standard pro-gram continues to be processed.

You can program the S7-400FH like any other standard CPU with the common program-ming languages if standard automa-tion tasks are to be solved as well.

Failsafe controllers for process automationConfiguring

Graphical configuration of the S7-400FH with the engineering tool Continuous Function Chart (CFC)

S7 F Systems option package

F-library approx. 50 certified basic function mod-ules

Prerequisites · STEP 7· CFC· S7-SCL· S7 H Systems

(option package for redundant system configuration)

Engineering package 1 license required per engineering location

Runtime package 1 license required per system

Order No. stem: 6ES7 833-1CC..

Process automation

14

ET 200S and ET 200M are available as failsafe I/Os for all fail-safe SIMATIC CPUs.

They meet SIL 3 (to IEC 61508) and Category 4 (to EN 954) and are UL-listed and TÜV-certified. The I/Os are connected to the CPU via PROFIBUS DP with special safety-related com-munication (PROFIsafe protocol).

The failsafe I/Os are redundant, can diagnose internal and external faults and carry out numerous self-tests and field-wiring diagnostics (e.g. short-circuit, wire break). Fail-safe shutdown is implemented without additional safety relays through a built-in secondary means of de-energizing the outputs. The I/O modules also monitor the dis-crepancy time autonomously that was set during parameterization.Failsafe and standard modules can

be combined in one system. Depending on the system configura-tion, up to SIL 3 or Cat. 4 can be achieved.

The following table shows the main features of both types of failsafe I/O.

Failsafe I/Os ET 200S, ET 200M

I/O ET 200S ET 200M

Feature Bit modular I/O module with up to 8 chan-nels per module

Modular I/O module for high-channel applications with up to 24 channels per module

Application · Distributed expansion of S7-300F, S7-400F and S7-400FH

· Distributed expansion of S7-300F, S7-400F and S7-400FH

· Central expansion of S7-300F

Digital inputs For connecting digital sensors / encoders· 4/8 F-DI 24V DC

For connecting digital sensors / encoders· DI 24 x DC 24 V· DI 8 x NAMUR

Digital outputs For connecting digital actuators / loads· 4 F-DO 24 V DC / 2 A

For connecting digital actuators / loads· DO 10 x 24 V DC / 2 A

Analog inputs -- For connecting analog sensors / encoders· AI 6 x 4-20 mA / 13 bits

Power module For monitoring and fuse protection of load and encoder supply voltages· PM-E F 24V DC

--

Motor starter In addition to a circuit-breaker/contactor combination, the failsafe motor starters have a safe electronic evaluation circuit for fault detection. If the contactor to be switched in the case of an EMERGENCY STOP fails, the analyzing electronics detect a fault and deactivate the circuit-breaker in the motor starter in a failsafe manner.

--

15

ET 200M

ET 200S

Failsafe ET 200M modules

Digital input module SM 326 F

Digital input module SM 326 F (NAMUR)

Digital output module SM 326 F

Analog input module SM 336 F

Number of inputs resp. outputs

24 (1-channel for SIL 2 sensors)24 (2-channel for SIL 3 sensors)

8 (1-channel) 4 (2-chan-nel)

10 6 (2-channel for SIL 3 sensors)13 bit

Input or output voltage 24 V DC NAMUR 24 V DC

Alarms Diagnostic alarm Diagnostic alarm Diagnostic alarm

Input current/output current

-- -- 2 A per channel at signal "1"

4-20 mA

Order No. stem: 6ES7 326-1BK..-.... 6ES7 326-1RF..-.... 6ES7 326-2BF..-.... 6ES7 336-1HE..-....

Failsafe ET 200M modules

Digital input module 4/8 F-DI

Digital output module 4 F-DO

Power module PM-E F

Number of inputs/outputs 4 (2-channel for SIL 3 sensors)8 (1-channel for SIL 2 sensors)

4 at 24 V/2 A 2 SIL 3 outputs for 24 V/2 A1 relay output (10 A max.)

Input or output voltage 24 V DC 24 V DC 24 V DC

Order No. stem: 6ES7 138-4FA..-.... 6ES7 138-4FB..-.... 6ES7 138-4CF..-....

ET 200S

Failsafe motor starter

Performance at 500 V 7.5 kW

Rated operating current IE 16 A

Short-circuit breaking capacity 50 kA at 400 V

Coding Can be assigned to 1 of 6 disconnection groups

LEDs Coding indicated by LED on motor starter

Release class Class 10/20 parameterizable

Type of coordination 2 (up to 16 A)

Order No. motor starter 3RK1301-0.B13-.AA2

Order No. terminal module 3RK1903-3A...

PM-D F power module

Number of int. disconnection groups

6

Aggregate current of outputs 5 A

Diagnostics Can be read out

Order No.: 3RK1903-3BA..

F-CM failsafe contact multiplier

Contacts 4 NO

Diagnostics Voltage failure, PLC device malfunction

Making/breaking capacity 1.5 A/24 V

Order No. stem: 3RK1 903-3CA..

Failsafe motor starter (continued)

Failsafe power module (infeed terminal module) PM-D F X1

Operation Standalone with external safety technology

Double terminals for disconnec-tion groups

6

Diagnostics Voltage failure

Order No. stem: 3RK1 903-3DA..

Failsafe I/Os ET 200S, ET 200M Technical data

www.siemens.com/f-cpu

Order No.: 6ZB5310-0KE02-0BA3Printed in the Federal Republic of Germany26100/401338 KB 0104 7. MAN En

Siemens AG

Automation and DrivesPostfach 4848, D-90327 NürnbergFederal Republic of Germany

You can obtain further information on SIMATIC Safety Integrated in the Internet:www.siemens.com/f-cpu

To get in touch with your contact person near you, look in the Internet under:

www.siemens.com/automation/partner

You can place a direct order electroni-cally over the Internet at the A&D Mall:www.siemens.com/automation/mall

© Siemens AG 2003Subject to change without prior noticeAll designations marked in this Product Brief with ® are registered trademarks of Siemens AG.

The

info

rmat

ion

pro

vid

ed in

th

is b

roch

ure

co

n-

tain

s de

scri

ptio

ns

or

char

acte

rist

ics

of

perf

or-

man

ce w

hic

h in

cas

e o

f act

ual

use

do

no

t alw

ays

app

ly a

s de

scri

bed

or

wh

ich

may

ch

ang

e as

a

resu

lt o

f fu

rth

er d

evel

opm

ent

of t

he

prod

uct

s.

An

obl

igat

ion

to

pro

vide

th

e re

spec

tive

ch

arac

-te

rist

ics

shal

l on

ly e

xist

if e

xpre

ssly

agr

eed

in

the

term

s o

f co

ntr

act.

Ava

ilabi

lity

and

tech

nic

al

spec

ific

atio

ns

are

subj

ect

to c

han

ge w

ith

ou

t n

oti

ce.