Lenze 9400 - Manual (Page 367)

Lenze · Servo-Inverter 9400 HighLine · Reference manual · DMS 10.0 EN · 11/2013 · TD05/06
367
10 Safety engineering
10.1 Integration into the application
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _
10.1 Integration into the application
If a safety function is requested, the safety engineering activates a corresponding safe monitoring
function. The standstill function, however, is only executed directly if the "Safe torque off" function
(STO) is activated. For the other safety functions, an action of the controller is required, which is
safely monitored. The implementation of the corresponding action (e.g. braking, braking to
standstill, holding of the standstill position) must be carried out by the application.
System block "LS_SafetyModuleInterface"
For the transmission of the control and status information from the safety module to the
application, the LS_SafetyModuleInterface system block is provided in the function block editor of
the »Engineer«. ( 368)
System block "LS_Limiter"/basic function "Limiter"
Furthermore the LS_Limiter system block which contains the basic function "
Limiter " is provided in
the function block editor for the connection of safety engineering to the application. ( 502)
For one thing, the basic function "Limiter" provides a parameterisation interface in »Engineer« for a
comfortable setting of limit positions, limited speeds, and limit values, and for another it enables
the drive to be braked specifically after request through the safety module.
Basic workflow
1. Activation of the safety function on the safety module (e. g. SS1 - safe stop 1).
 Monitoring starts.
2. The safety module informs the controller via a control word that the safety function has been
activated.
3. The application evaluates the control word and starts the required motion sequence (e.g.
braking).

Note!
If communication to the controller is interrupted, e.g. by switching off the controller, the
safety module responds as follows:
• Fault stop with STO is activated.
• "Warning" error message is transmitted.
• The LED "ME" is blinking.
The required fault acknowledgement (AIE) is possible via terminal or safety bus.