User Manual — Original Language Guardmaster® 440C-CR30 Configurable Safety Relay Catalog Number 440C-CR30-22BBB
Important User Information Read this document and the documents listed in the additional resources section about installation, configuration, and operation of this equipment before you install, configure, operate, or maintain this product. Users are required to familiarize themselves with installation and wiring instructions in addition to requirements of all applicable codes, laws, and standards.
Preface Read this preface to familiarize yourself with the rest of the manual. It provides information concerning: • who should use this manual • the purpose of this manual • related documentation • conventions used in this manual Who Should Use this Manual Use this manual if you are responsible for designing, installing, configuring, or troubleshooting control systems that use the CR30 safety relay.
Preface Definitions 4 Publication AG-7.1 contains a glossary of terms and abbreviations used by Rockwell Automation to describe industrial automation systems. Below is a list of specific terms and abbreviations used in this manual. • CCW – The Connected Components Workbench. This is a software package that allows the user to configure a CR30, program a Micro800® controller and configure a PanelView™ HMI. • CR30 – Is the Cat. No.
Table of Contents Preface Important User Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2 Who Should Use this Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Purpose of this Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Additional Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Definitions . . . . . . . . . . . .
Table of Contents Chapter 4 Configuring the CR30 Begin Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . The Workspace . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Download the Configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Validation and Verification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Validation. . . . . . . . .
Table of Contents Alternate Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Single Channel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Dual Channel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Dual Channel OSSD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Dual Channel N.C./N.O. . . . . . . . . . . . . . . . . . . .
Table of Contents Chapter 15 Troubleshooting Recoverable Faults. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . LEDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Nonrecoverable Faults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . Troubleshooting with the CCW. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Table of Contents Appendix A Specifications SIL Rating. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121 Performance Level/Category . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121 General . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122 Environmental. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
Table of Contents Notes: 10 Rockwell Automation Publication 440C-UM001C-EN-P - November 2014
Chapter 1 Overview Intended Use The Cat. No. 440C-CR30-22BBB (CR30) relay is a software-configurable safety relay. This device is intended to be part of the safety-related control system of a machine. The CR30 must be configured using a personal computer (PC) running the Allen-Bradley Connected Components Workbench™ (CCW). The CR30 accommodates up to 24 safety monitoring functions.
Chapter 1 Overview CR30 Hardware Details Figure 2 - Hardware Details 1 2 3 4 5 6 7 Status Indicators 12 13 14 15 16 17 18 8 9 10 5 6 11 Description Description 1 Status indicators 10 Verification button 2 Plug-in latch 11 Din Rail mounting latch 3 Plug-in screw hole 12 Input status 4 40-pin high-speed plug-in connector 13 Power status 5 I/O and Power terminal blocks 14 Run status 6 Mounting screw hole/mounting foot 15 Fault status 7 Right-side cover 16 Lock stat
Overview Software Chapter 1 The CR30 is software configurable using the Rockwell Automation Connected Components Workbench (CCW). Connected Components Workbench is a set of collaborative tools that supports the CR30 safety relays. CCW is based on Rockwell Automation and Microsoft® Visual Studio® technology. The CCW is used to configure the CR30, program the Micro800 controllers, and configure many PowerFlex® drives and PanelView™ graphic display terminals.
Chapter 1 Overview Notes: 14 Rockwell Automation Publication 440C-UM001C-EN-P - November 2014
Chapter 2 Installation Mounting Dimensions DIN Rail Mounting Mounting dimensions exclude mounting feet or DIN Rail latches. Figure 3 - DIN Rail Mounting [mm (in.)] 100 (3.94) 80 (3.15) 90 (3.54) Maintain spacing from objects such as enclosure walls, wireways, and adjacent equipment. Allow 50.8 mm (2 in.) of space on all sides for adequate ventilation. If optional accessories/modules are attached to the relay, such as the power supply Cat. No. 2080-PS120-240VAC, make sure that there is 50.8 mm (2 in.
Chapter 2 Installation Panel Mounting Figure 4 - Panel Mounting [mm (in.)] 100 (3.94) 86 (3.39) The preferred mounting method is to use four M4 (#8) screws per module. Hole spacing tolerance: ±0.4 mm (0.016 in.). Follow these steps to install your relay using mounting screws. 1. Place the relay against the panel where you are mounting it. Make sure that the relay is spaced properly. 2. Mark drilling holes through the mounting screw holes and mounting feet then remove the relay. 3.
Installation Enclosure Considerations Chapter 2 Most applications require installation in an industrial enclosure to reduce the effects of electrical interference and environmental exposure. Pollution Degree 2 is an environment where normally only non-conductive pollution occurs except that occasionally temporary conductivity that is caused by condensation can be expected. Overvoltage Category II is the load level section of the electrical distribution system.
Chapter 2 Installation Notes: 18 Rockwell Automation Publication 440C-UM001C-EN-P - November 2014
Chapter 3 Power, Ground, and Wiring Wiring Requirements and Recommendation WARNING: Before you install and wire any device, disconnect power to the system. WARNING: Calculate the maximum current in each power and common wire. Observe all electrical codes dictating the maximum current allowable for each wire size. Current above the maximum ratings can cause wiring to overheat, which can cause damage. • Allow for at least 50 mm (2 in.) between I/O wiring ducts or terminal strips and the relay.
Chapter 3 Power, Ground, and Wiring Wire Size Table 1 - Wiring Requirements Wire Size Type Copper Stranded Min 0.326 mm (22 AWG) Max 2 1.31 mm2 (16 AWG) Rated @ 90 °C (194 °F) insulation min. Terminal Assignments Some terminals are designed to have one specific function. Some terminals can perform multiple functions; these terminals must be configured in the application software. Table 2 - Terminal Assignments Terminal 20 Function 00 Safety Input (N.C.) 01 Safety Input (N.C.
Power, Ground, and Wiring Grounding the Configurable Safety Relay Chapter 3 WARNING: All devices that are connected to the RS-232 communication port must be referenced to controller ground, or be floating (not referenced to a potential other than ground). Failure to follow this procedure can result in property damage or personal injury. This product is intended to be mounted to a grounded mounting surface such as a metal panel.
Chapter 3 Power, Ground, and Wiring Wire Input Devices Input Devices with Mechanical Contacts WARNING: Applying an inappropriate DC or any AC voltage can result in a loss of safety function, product damage, or serious injury. Properly apply only the specified voltage to relay inputs. Input devices with mechanical contact outputs, such as emergency stop buttons and safety limit switches, use both a safety input terminal and a test output terminal. This enables the circuit to achieve a Category 4 rating.
Power, Ground, and Wiring Chapter 3 Use Surge Suppressors Wire Output Devices Because of the potentially high current surges that occur when switching inductive load devices, such as motor starters and solenoids, the use of some type of surge suppression to help protect and extend the operating life of the relays output is required. By adding a suppression device directly across the coil of an inductive device, you prolong the life of the outputs.
Chapter 3 Power, Ground, and Wiring Figure 9 - Pinouts 1 Receive 3 6 Transmit 2 5 4 7 8 24V Common Pin RS-232 Example Pin RS-232 Example 1 RS-485 (not used) 5 DCD (not used) 2 GND 6 CTS (not used) 3 RTS (not used) 7 TxD 4 RxD 8 RS-485 (not used) Table 3 shows a recommended list of cables for the serial connection between the CR30 and other Allen-Bradley products. They may also be suitable for thirdparty products.
Chapter 4 Configuring the CR30 This manual assumes that the Connected Components Workbench has been loaded and describes basic operations. Use the online help for configuring the safety functions. ATTENTION: Activities including installation, adjustments, putting into service, use, assembly, disassembly, and maintenance are required to be conducted by suitably trained personnel in accordance with applicable code of practice.
Chapter 4 Configuring the CR30 3. Double-click the icon in the Project Organizer to open the project. 4. Click the Edit Logic button to begin the configuration process. The Workspace The workspace is split into a grid of four columns: Safety Monitoring (the inputs), Logic Level A, Logic Level B, and Safety Output. By expanding the Toolbox on the left, blocks can be added to the Workspace and safety functions can be created.
Configuring the CR30 Chapter 4 5. Click and drag the Gate Switch function block to the first block in the work space. The CCW automatically assigns embedded input terminals EI_00 and EI_01 to the function block. The terminal connection parameters can be changed by you. 6. Click and drag the immediate Output to the first Safety Output block in the workspace. The CCW automatically assigns embedded output terminals EO_18 and EO_19 to the output block. In addition, the output terminals are pulse tested (PT).
Chapter 4 Configuring the CR30 Download the Configuration Download initiates the transfer of the configuration file of your CR30 project to the CR30 safety relay. The download process automatically performs a file transfer verification to help ensure that the project configuration and configuration in the CR30 is valid and equal. Successful file transfer verification allows you to change the CR30 operation mode to Run and execute the safety function.
Configuring the CR30 Chapter 4 15. File transfer successful or failed. a. File transfer successful. Click Yes to change the relay to Run mode. For unverified configuration, this allows the CR30 to operate for a maximum duration of 24 hours to perform relevant tests to validate the safety function. Click No to maintain the relay in Program mode and continue with the verification process. b. File transfer failed. If the transfer file verification failed, the following message occurs.
Chapter 4 Configuring the CR30 Verification After validation, you can assign a unique verification ID to the current configuration in Connected Components workbench. Any change to a verified configuration invalidates the verification ID and requires a new validation and verification process. To complete the validation and verification, you finally have to acknowledge that the safety configuration and installation meets the operational and environmental specification of the machine.
Configuring the CR30 Chapter 4 21. Click Yes to change the safety relay back to Run mode. 22. The CCW generates a Safety Verification ID. Click OK to continue. 23. Confirm the Verification ID in the CCW. The ID is stored in the CR30. During power-up, the CR30 uses this number during its self-testing to help ensure its internal processors are functioning properly. When the configuration is uploaded from the CR30, the CCW shows the Verification ID. The ID is not stored with the CCW project file.
Chapter 4 Configuring the CR30 Viewing the Verification ID without CCW During machine lifecycle, it is required to check whether the system requirements are still valid. The LEDs can be used to view the verification ID without the use of the CCW and compare the documented verification ID of the technical file of the machine. If the CR30 configuration has not been verified, the ID is 0000. Press and release the Verification button. The IN 0 LED is green. The OUT 1, 2, 3, and 4 LEDs are green.
Configuring the CR30 Chapter 4 Press the Verification button within five seconds. Figure 13 - Second Verification Digit Value is 9 Verification Digit 2 Press the Verification button within five seconds. Figure 14 - Third Verification Digit Value is 1 Verification Digit 3 Press the Verification button within five seconds.
Chapter 4 Configuring the CR30 Multiple Block Connections Multiple blocks can be connected between: • Safety Monitoring Functions and Logic Level A • Logic Level A and Logic Level B, and • Logic Level B and Safety outputs This is done by clicking the desired input and output connection points. The CCW automatically determines whether the connection can be made.
Chapter 5 Pulse Testing The CR30 performs three types of pulse testing functions: • N.O. inputs • N.C. inputs • Outputs Normally Open Input Pulse Testing When a safety input is configured for normally open (N.O.) operation, the CR30 periodically checks the status of the input. The purpose of the test pulse is to detect short circuits in the wiring to 24V DC, 0V and between two channels. This test is independent of the “Input Test Pulses”.
Chapter 5 Pulse Testing Figure 18 - Test Sequence 1 Terminal 12 HI LO Terminal 13 HI LO Terminal 14 HI LO Terminal 15 HI LO Terminal 16 HI LO Terminal 17 HI LO 2 3 4 5 6 500ms intervals Normally Closed Input Pulse Testing Terminals 12…17 can be configured to generate test pulse outputs.
Pulse Testing Chapter 5 The purpose of the test pulses is to detect short circuits from the input signal to 24V DC, 24V common, and shorts from one input signal to another input signal. If one input signal is assigned to Test Pulse A and another signal is assigned to Test Pulse B (or C), then a short circuit from one input to the other is detected by the CR30, and the CR30 de-energizes the outputs of those safety functions using the two inputs.
Chapter 5 Pulse Testing Then a sequence occurs in which each output is individually tested twice. The test pulse is 50 μs wide. The test pulses occur every 250 ms and switch to the next output configured with testing.
Chapter 6 Input Filter Input filtering gives the CR30 the ability to filter out noise and, in some cases, inadvertent operation. Sometimes, an operator presses a push button and immediately realizes that they pressed the wrong button and immediately releases the button. In muting applications, an object, moving down a conveyor, might stop just at the point where the muting sensor is deactivated and then back off enough that the muting sensor is reactivated.
Chapter 6 Input Filter The input filtering is set in the Advanced Settings of each safety monitoring block. Figure 24 shows that the Enabling Switch function with the input filter is set to 4 (4 x 25 = 100 ms).
Chapter 7 Discrepancy Time Safety Monitoring functions using dual inputs have a feature that allows the CR30 to test for the timing of the operation of both channels. In most cases, the outputs of dual channel safeguarding devices change state within a few milliseconds of each other. In some cases, the second channel can change state much later than the first.
Chapter 7 Discrepancy Time Notes: 42 Rockwell Automation Publication 440C-UM001C-EN-P - November 2014
Chapter 8 Safety Block Renaming General With Release 7 of the Connected Components Workbench (CCW) and Release 7 of the CR30 firmware, the names of both the safety monitoring functions and safety output functions can be edited. The editing rules follow IEC 61131-3, section 2.1.2. This feature is important because it allows you to distinguish between multiple occurrences of the same function blocks during the design, wiring, and troubleshooting phases. The name change is initiated in one of two ways: 1.
Chapter 8 Safety Block Renaming Naming Error Indication After tabbing off, pressing enter, or mousing off the block, the CCW evaluates the integrity of the name. If valid, the name appears in black letters. If invalid, the CCW shows a naming error in two ways: 1. A red box around the name 2. An error message in the build results Figure 28 - Red Box Indicates Naming Error This example block has two errors: 1. The name starts with a period (“.”). 2. The name contains a space.
Chapter 9 Safety Monitoring Functions Many types of safeguarding and safety devices and safety related signals can be connected as inputs to the CR30. The Connected Components Workbench (CCW) facilitates the selection and connection of the device. Each block is assigned the next available settings for input terminals, test sources number of inputs, pulse testing, discrepancy time, and input filter.
Chapter 9 Safety Monitoring Functions You can use the default Discrepancy Time and Input Filter or choose to modify these settings.
Safety Monitoring Functions Chapter 9 The available input selections for the Enabling Switch inputs are: • EI_00…EI_11 (embedded input terminals 00…11) • MP_12…MP_17 (multi-purpose terminals 12…17) You can modify the number and types of inputs: • 2 N.C. • 2 OSSD • 1 N.C. Pulse testing can be disabled or set to 2 Sources. When 2 Sources is selected, the next available test sources are automatically selected. You can modify the sources afterward.
Chapter 9 Safety Monitoring Functions Feedback Monitoring The Feedback function block is used in safety systems to monitor the status of output devices (like safety contactors). When the output device is off, a HI signal is fed back to the input of the CR30 to indicate that the device is indeed off. When the output device is energized, the feedback signal goes LO. If the output device remained energized, the feedback signal remains LO and the CR30 will not energize the output.
Safety Monitoring Functions Chapter 9 Figure 37 - Example Feedback Schematic with Two Feedback Contacts Connected in Series to One Input Terminal +24V DC K1 K2 00 01 02 03 04 05 06 07 08 09 10 11 CR30 A1 A2 12 13 14 15 16 17 18 19 20 21 K1 K2 24V Com Figure 38 - Example Feedback Schematic with Four Feedback Contacts Connected Individually to Four Input Terminals +24V DC K1 K2 K3 K4 00 01 02 03 04 05 06 07 08 09 10 11 CR30 A1 A2 12 13 14 15 16 17 18 19 20 21 K1 K2 K3 K4 24V Com Gate Switch The Ga
Chapter 9 Safety Monitoring Functions You can modify the number and types of inputs: • 2 N.C. • 2 OSSD • 1 N.C. Pulse testing can be disabled or set to 2 Sources. When 2 Sources is selected, the next available test sources are automatically selected. You can modify the sources afterward. You can use the default Discrepancy Time and Input Filter or choose to modify these settings.
Safety Monitoring Functions Light Curtain Chapter 9 The Light Curtain function block sets the parameters for light curtains that have dual OSSD outputs. In the CCW, click and drag (or double-click) the block to an available Safety Monitoring Function spot. This block can be used for other devices, like laser scanners, with OSSD outputs.
Chapter 9 Muting Safety Monitoring Functions Muting is the temporary automatic suspension of the protective function of a safeguarding device like a light curtain. The muting function allows the transport of material through a light curtain without stopping a conveyor. To distinguish between material and persons, a certain sequence of events and timings are used. Muting sensors are mounted in a certain pattern, and the material must pass by the sensors and light curtain within specified time limits.
Safety Monitoring Functions Chapter 9 You can use the default Discrepancy Time and Input Filters or choose to modify these settings. The CR30 safety relay has three distinct types of muting, where the sequence and timing of signals that are monitored by the CR30 allows objects to pass through the light curtain without shutting down the machine process.
Chapter 9 Safety Monitoring Functions Figure 47 - Example Schematic for 2-Sensor T-Type Muting +24V DC Light Curtain OSSD B OSSD A MS1 MS2 Override 00 01 02 03 04 05 06 07 08 09 10 11 CR30 A A1 A2 12 13 14 15 16 17 18 19 20 21 Muting Lamp K1 K2 24V Com Contactors for Conveyor Power For simplicity, the power and ground connections of the light curtain and muting sensors are not shown. The light curtain and muting sensors must have the same reference (24V Com) as the CR30 for proper operation.
Safety Monitoring Functions Chapter 9 Table 4 - Muting and Synchronization Timing Selections Muting Time Synchronization Time Muting Time Synchronization Time 10 s 3s 900 s (15 min) 90 s 20 s 3s 1800 s (30 min) 180 s (3 min) 30 s 3s 3600 s (1 hr) 180 s (3 min) 60 s (1 min) 6s 28,800 s (8 hr) 180 s (3 min) 300 s (5 min) 30 s Infinite Infinite 2-Sensor L-Type Muting The sensors and light curtain form the shape of the letter “L”, when viewed from the side.
Chapter 9 Safety Monitoring Functions Figure 50 - Example Schematic for 2-Sensor L-Type Muting +24V DC Light Curtain OSSD B OSSD A MS1 MS2 Override 00 01 02 03 04 05 06 07 08 09 10 11 CR30 A A1 A2 12 13 14 15 16 17 18 19 20 21 Muting Lamp K1 K2 24V Com Contactors for Conveyor Power For simplicity, the power and ground connections of the light curtain and muting sensors are not shown. The light curtain and muting sensors must have the same reference (24V Com) as the CR30 for proper operation.
Safety Monitoring Functions Chapter 9 Table 5 shows the muting and synchronization times that are selectable in the CCW. These times are selected independently. For example, you can select two minute muting time, a 500 ms synchronization time between MS1 and MS2, and a 1000 ms synchronization time between MS2 and the light curtain. Note: The synchronization time also depends on the input filter time settings for the muting sensor inputs.
Chapter 9 Safety Monitoring Functions Figure 53 - Example Schematic for 4-Sensor Muting +24V DC Light Curtain OSSD B OSSD A MS1 MS3 MS2 Override MS4 00 01 02 03 04 05 06 07 08 09 10 11 CR30 A A1 A2 12 13 14 15 16 17 18 19 20 21 Muting Lamp K1 K2 24V Com Contactors for Conveyor Power For simplicity, the power and ground connections of the light curtain and muting sensors are not shown.
Safety Monitoring Functions Chapter 9 Table 6 shows the muting and synchronization times that are selectable in the CCW. These times are linked. For example, if you select a 10 s muting time, then the synchronization time between MS1 and MS2 is 3 s. To use a synchronization time of 6 s, you must select a 60 s muting time. Note: The synchronization time also depends on the input filter time settings for the muting sensor inputs.
Chapter 9 Reset Safety Monitoring Functions The reset block is used in safety functions that require a manual intervention to turn on the safety system. Figure 55 - Reset Function Block To prevent inadvertent actuation of the reset block, the reset requires a leading edge and trailing edge within a specific time frame. The pulse width must be between 250…3000 ms. If the pulse width is too short or too long, the reset function will not be executed.
Safety Monitoring Functions Chapter 9 Figure 57 - Wiring Connection for a Reset Signal to Terminal 00 +24V DC Reset 00 01 02 03 04 05 06 07 08 09 10 11 CR30 A1 A2 12 13 14 15 16 17 18 19 20 21 24V Com The reset block works with one or more output blocks. When an output block requires a manual reset, the CCW shows all available reset inputs that can be used. Restart The restart function works with an AND or OR logic block in Logic Level A and Logic Level B.
Chapter 9 Safety Monitoring Functions For a valid Restart operation, according to the requirements specified in the approved safety concept, you must use the default Restart timing and leave the input filter setting “0”. The filter setting is enabled in CCW versions smaller than Rev 7. A filter time setting greater than “0” extends the Reset Timing by 2 x Filter Time.
Safety Monitoring Functions Chapter 9 Figure 62 - Example Schematic for a Safety Mat +24V DC Safety Mat 00 01 02 03 04 05 06 07 08 09 10 11 CR30 A B A1 A2 12 13 14 15 16 17 18 19 20 21 24V Com SensaGuard The SensaGuard™ function block sets the parameters for interlocks having dual OSSD outputs. In the CCW, click and drag (or double-click) the block to an available Safety Monitoring Function spot. This block can be used for other devices with OSSD outputs.
Chapter 9 Safety Monitoring Functions Single Wire Safety Input When configured for this type of input, the CR30 expects a Single Wire Safety (SWS) input signal from a GSR relay or a safeguarding device that has an SWS output signal. The GSR relay family includes the CI, SI, DI, DIS, GLP, GLT, EM, and EMD modules. Each of these modules provides the SWS signal on terminal L11. Figure 65 - Single Wire Safety Function Block Only terminals 10 and 11 of the CR30 can be configured to receive the SWS signal.
Safety Monitoring Functions Two-Hand Control Chapter 9 The CR30 can be configured to operate in two different types of two-hand control, which are specified in ISO 13851. The two types are: • Type IIIA (for low-risk safety systems) • Type IIIC (for high-risk safety systems) Mechanically palm-operated buttons (Bulletin 800P) or the electronic output push buttons (Bulletin 800Z Zero-Force Touch Buttons™) should be used as actuating devices for two hand control.
Chapter 9 Safety Monitoring Functions Type IIIA Two-hand Control The Type IIIA uses only one normally open contact for each hand. This configuration can be set up with or without the use of test pulses. The test pulses provide short circuit fault detect between channels and between channel and 24V.
Safety Monitoring Functions Chapter 9 Figure 72 - Wiring Connection for a Type IIIC Two-hand Control with Test Pulses +24V DC 00 01 02 03 04 05 06 07 08 09 10 11 CR30 A B A1 A2 12 13 14 15 16 17 18 19 20 21 24V Com The timing diagram for the two-hand control is shown in Figure 73. The Type IIIA uses only the N.O. contact of the button. The Type IIIC uses both the N.C. and the N.O. contacts. Figure 73 - Two-hand Control Timing Diagram 1 2 3 4 5 6 7 8 HI Hand 1 N.C. LO Hand 1 N.O.
Chapter 9 Safety Monitoring Functions Alternate Device The Alternate Device provides the flexibility to create other types of input monitoring blocks. Use this block for the following types of input functions: • Single channel OSSD • Single channel N.C. • Dual channel OSSD • Dual channel 2 N.C. • Dual channel 1 N.C./1 N.O. • Three channel N.C.
Safety Monitoring Functions Chapter 9 Figure 75 - Example Schematic for Single Channel N.C. without Test Pulse +24V DC 00 01 02 03 04 05 06 07 08 09 10 11 CR30 A1 A2 12 13 14 15 16 17 18 19 20 21 24V Com Figure 76 - Example Schematic for Single Channel N.C.
Chapter 9 Safety Monitoring Functions Pulse testing can be set to 1 Source, 2 Sources, or Disabled. When 1 or 2 Sources is selected, the next available test sources are automatically assigned by the CCW. You can modify the sources afterward. You can use the default Discrepancy Time and Input Filter or choose to modify these settings. The two terminals do not necessarily have to be consecutive. Figure 78 - Example Schematic for 2 N.C.
Safety Monitoring Functions Chapter 9 Figure 80 - Example Schematic for Two OSSD +24V DC Safeguarding Device A1 A2 00 01 02 03 04 05 06 07 08 09 10 11 CR30 A1 A2 12 13 14 15 16 17 18 19 20 21 24V Com Dual Channel N.C./N.O. The N.C./N.O. configuration applies the diversity concepts, where one contact is open and the other contact is closed. The contact, while in an open state, cannot be welded closed. The CR30 turns off its safety outputs when either channel changes state.
Chapter 9 Safety Monitoring Functions If a short circuit occurs on terminal 12 to ground, the CR30 turns off its safety outputs within 3.3 seconds. Remove the fault and cycle the contacts to clear the fault. If a short circuit occurs from terminal 12 to terminal 13, the CR30 turns off its safety outputs within 35 ms. Remove the fault and cycle the contacts to clear the fault. Three Channel The CR30 can accept three channels into one safety monitoring function.
Safety Monitoring Functions Chapter 9 Figure 86 - Example Schematic for Three N.C.
Chapter 9 Safety Monitoring Functions Notes: 74 Rockwell Automation Publication 440C-UM001C-EN-P - November 2014
Chapter 10 Logic Levels A and B The Connected Components Workbench (CCW) has two levels that allow you to apply simple logic to create more sophisticated safety systems. The logic levels are labeled A and B on the CCW workspace. The logic functions are available in the Toolbox. Figure 88 - Logic Levels A and B on the CCW Workspace Pass Through When a logic level is not used, the CCW automatically creates a Pass Through block. AND The AND block accepts 2…24 inputs.
Chapter 10 Logic Levels A and B Table 8 - AND Logic Table for Two Inputs OR Input 1 Input 2 Output 0 0 0 0 1 0 1 0 0 1 1 1 The OR block accepts 2…24 inputs. If any of the inputs are HI, the output of the block is HI. If all inputs go LO, the output of the block goes LO. The OR block is often used with enabling devices. Figure 90 - OR Logic Block Table 9 - OR Logic Table for Two Inputs XOR Input 1 Input 2 Output 0 0 0 0 1 1 1 0 1 1 1 1 The XOR block accepts 2…24 inputs.
Logic Levels A and B NAND Chapter 10 The NAND block accepts 2…24 inputs. The NAND performs the opposite of an AND block. The output of the NAND block is LO when all inputs are HI. When any input is LO, the output is HI. Figure 92 - NAND Logic Block Table 11 - NAND Logic Table for Two Inputs NOR Input 1 Input 2 Output 0 0 1 0 1 1 1 0 1 1 1 0 The NOR block performs the opposite of the OR block. When any input is HI, the output is LO. When all inputs are LO, the output is HI.
Chapter 10 Logic Levels A and B Table 13 - NOT Logic Table for Two Inputs AND with Restart Input Output 0 1 1 0 The AND with Restart accepts 2…24 inputs and requires a Restart input. All inputs must be HI when the Restart button is pressed. The CCW automatically recognizes the Restart function blocks and allows you to select one. Once selected, the Restart is no longer available for other logic blocks. Figure 95 shows an example with a gate switch and a light curtain.
Logic Levels A and B Chapter 10 Figure 97 - AND with Restart Timing Diagram Restart HI LO Input 1 HI LO AND Input 2 Output OR with Restart HI LO HI LO The OR with Restart accepts 2…24 inputs and requires a Restart input. At least one input must be HI when the Restart button is pressed. The CCW automatically recognizes the Restart function blocks and allows you to select one. Once selected, the Restart is no longer available for other logic blocks.
Chapter 10 Logic Levels A and B Figure 99 - Logic of the Restart Function with Two Input OR Restart Input 1 > Input 2 The timing diagram shows how the output of the Logic block responds to the input signals and the Restart signal. Either or both inputs can be HI when the Restart signal occurs for the output to go HI. If all inputs go LO, the output goes LO.
Chapter 11 Safety Outputs The safety output blocks are the fourth stage of the configuration. Many of the blocks have common features. Input Connection Each output block has one input connection. This input connection can be connected to only Logic Level B blocks. Feedback The Immediate OFF, ON Delay, and OFF Delay blocks have a feedback parameter. To use the feedback parameter, a feedback input block must be declared.
Chapter 11 Safety Outputs Immediate OFF The Immediate OFF block is used to turn off output terminals immediately upon a demand that is placed on a safety function. Figure 101 shows the Immediate OFF output block that is connected to an Estop block through Logic Level LLB1. The feedback signal is provided by SMF2 and manual reset by SMF3. The output is connected to: • Terminals 18 and 19 for dual channel safety switching of the machine hazards. • Plug-in 1 terminal 00 for status indication.
Safety Outputs ON Delay Chapter 11 The ON Delay block turns on the output after the specified time delay expires. Figure 102 shows the ON Delay output block that is connected to an E-stop block through Logic Level LLB1. The feedback signal is provided by SMF2 and manual reset by SMF3. The time delay is set to 20. The output will turn on 1000 ms (20x50 ms) after the reset button is released. The output is connected to: • Terminals 18 and 19 for dual channel safety switching of the machine hazards.
Chapter 11 Safety Outputs OFF Delay The OFF Delay block turns off the output after the specified time delay expires. The retriggerable parameter can be set to enabled or disabled. • When enabled, the input to the OFF Delay block can go HI again during the timing cycle, and the output remains HI. • When disabled, the timing cycle runs to completion, regardless of changes to the input. Figure 103 shows the OFF Delay output block that is connected to a gate switch block through Logic Level LLB1.
Safety Outputs Jog Chapter 11 The Jog block turns on the output for a specified duration while the jog input is held HI. If the Jog input goes LO, the output immediately turns off. Figure 104 shows the Jog output block that is connected to an enabling switch block through Logic Level LLB1. The reset is set to automatic. The time delay is set to 40. The output will turn on for a maximum of 2000 ms (40x50 ms) after the enabling switch is closed.
Chapter 11 Safety Outputs Notes: 86 Rockwell Automation Publication 440C-UM001C-EN-P - November 2014
Chapter 12 Plug-in Modules The CR30 accepts up to two plug-in I/O modules. Table 14 shows which modules are available for the firmware that is installed in the CR30.
Chapter 12 Plug-in Modules 2080-IQ4OB4 The 2080-IQ4OB4 has four sinking inputs and four sourcing outputs. The COM connection B3 is internally connected to A3. This COM connection is for the inputs (without it, the inputs do not turn on). Terminal B4 must be connected to the +24V supply to provide power to the outputs terminals O00…O-03.
Plug-in Modules Chapter 12 2080-IQ4 The 2080-IQ4 has four sinking inputs. The four COM connections, A3, A4, B3, and B4 are internally connected. At least one COM connection must be connected to 24V Com (without it, the inputs do not turn on). Figure 109 - 2080-IQ4 Schematic Showing Four Standard Input Signals +24V DC B1 B2 B3 B4 B5 B6 I-00 I-01 COM COM NU I-02 I-03 COM COM NU NU NU 2080-IQ4 A1 A2 A3 A4 A5 A6 24V Com 2080-OB4 The 2080-OB4 has four sourcing outputs.
Chapter 12 Plug-in Modules 2080-OW4I The 2080-OW4I has four electromechanical relays with normally open (Form A) contacts.
Chapter 13 LEDs The CR30 has 21 LEDs on the upper left front of the module.
Chapter 13 LEDs Input and Output LEDs To access and configure the LEDs in the CCW, 1. In the Project Organizer, double-click Guardmaster_440C-CR30*. 2. Click LED Configuration. 3. Configure the filter type and value for input and output LEDs. First select one of four Filter Types for each LED: 1. Not Used 2. Terminal Status 3. Safety Monitoring Function Status 4. Safety Output Function Status Then select the instance for each Filter Type.
LEDs Chapter 13 In the previous example: a. Input LED 1 is monitoring a terminal status. In this case, it is monitoring terminal 01. When the signal to terminal 1 is HI, the LED is on. When the signal to terminal 1 is LO, the LED is off. If this were a single channel input, then the LED provides all information that we need to know about the input. b. Input LED 2 is monitoring safety monitoring function 1.
Chapter 13 LEDs Notes: 94 Rockwell Automation Publication 440C-UM001C-EN-P - November 2014
Chapter 14 Modbus Communication The CR30 uses Modbus RTU communications to transfer status information and control signals to Micro800® controllers and human-machine interfaces like the Allen-Bradley PanelView. The Modbus configuration of the CR30 is fixed to Modbus RTU slave at address 1.
Chapter 14 Modbus Communication Modbus Address Parameter 000377…000392 Ready-to-start of SOF 00…15 000393…000416 Fault bit 0 of SMF 0…23 00: No error 01: Crossloop 10: Simultaneity fault 11: One channel open after reset 000417…000440 Fault bit 1 of SMF 1…24 000441…000464 Fault bit 2 of SMF 1…24 000465…000488 Fault bit 3 of SMF 1…24 000489…000504 Retrigger Fault SOF 1…16 000505…000512 Cross Fault of Terminals 12…17 000513…000848 Reserved 000849…000860 Fault log (1) When a Logic Level A
Modbus Communication Example Architectures Chapter 14 Some examples of how the CR30 is used with Modbus are shown in Figure 114. In the example below, a PanelView C600 is connected to the serial port of the CR30. The C600 is configured over its Ethernet port. The C600 can read status information from the CR30 and can send reset and restart signals to the CR30.
Chapter 14 Modbus Communication Figure 116 - Modbus RTU Communication — PanelView C600 & Micro830 To Ethernet Network Ethernet Port 10/100Base-T PanelView C600 2711C-T6T Modbus Master 1761-CBL-PM02 Cable 2080-SERIALISOL Ethernet Cables Micro830 2080-LC30-24QBB RXD TXD GND Standard Cable USB A Male to B Male 98 Rockwell Automation Publication 440C-UM001C-EN-P - November 2014 CR30 440C-CR30-22BBB Modbus Slave
Modbus Communication Reading CR30 Status Chapter 14 In the Micro800 family, the Msg_Modbus block must be used. In the example ladder diagram below, a Micro830 reads the status of the first five input wiring terminals of the CR30. • Rung 1: When a push button, which is connected to terminal 03 of the Micro830, is pressed, the Micro830 sends a Modbus message to the CR30 • Rung 2: The format of the data in LocalAddr is a 'WORD'. The first block ANY_TO_DINT converts the 'WORD' to a 'DINT'.
Chapter 14 Modbus Communication • LocalAddr - The results are placed in LocalAddr. There is no need to make changes. Figure 118 - Read Local Variables Sending Reset to CR30 The Reset function must use a separate Modbus message block. Another constraint that must be considered is reset signal must be between 0.5…3 s long. In the example below, a momentary button is connected to embedded terminal _IO_EM_DI_02. • Rung 3: The push button initiates a TONOFF timer.
Modbus Communication Chapter 14 You should configure a second set of local variables. In this example, they are labeled ResetCfg, ResetTrgt, and ResetAddr. • ResetCfg must be configured as a MODBUSLOCPARA data type. ResetTrgt must be configured as a MODBUSTARPARA data type. ResetAddr must be configured as a MODBUSLOCADDR data type. • ResetTrgt.Addr - Enter a value of 1, which is Modbus mapping of the CR30. • ResetTrgt.Node - Enter a value of 1. The CR30 is fixed at Node 1. • ResetCfg.
Chapter 14 Modbus Communication Notes: 102 Rockwell Automation Publication 440C-UM001C-EN-P - November 2014
Chapter 15 Troubleshooting Faults fall into two categories: • Recoverable • Nonrecoverable Recoverable faults are those faults that can be corrected without having to cycle the power to the CR30. Nonrecoverable faults require power cycling to recover after the fault is corrected. Recoverable Faults Recoverable faults can be cleared by eliminating the cause of the fault and cycling the inputs that are associated with the fault. The output that is connected to an input with that fault is switched off.
Chapter 15 Troubleshooting Nonrecoverable Faults Nonrecoverable faults and failures are malfunctions of the device itself that occur during operation. These faults are detected by internal monitoring measures helping to ensure the safety integrity of the device itself. Nonrecoverable faults require a power cycle to allow CR30 to perform all relevant internal system tests during initialization. If there are transient malfunctions, CR30 will recover after power cycle.
Troubleshooting Chapter 15 Figure 123 - Mouse Over to Show Error Message (in Yellow Box) The type of fault is also shown in the top panel of the Project tab (Figure 124). • For a recoverable fault, the Device Details view only indicates “Fault: Recoverable”. For further details, navigate to the “Logic Editor” view and mouse over the red marked function block.
Chapter 15 Troubleshooting Figure 125 - Recent Fault List Troubleshooting with Modbus Many faults can be reported to an HMI or PLC using Modbus. Table 17 shows a list of the Modbus addresses for faults.
Troubleshooting Chapter 15 Table 18 shows the 'fault bit' message for the type of functions that are selected for the Safety Monitoring Function block. Table 18 - Fault Messages for the SMF Type SMF Type Fault Bit 3 Fault Bit 2 Fault Bit 1 Fault Bit 0 1 Channel Reserved Reserved Reserved Input circuit shorted to 24V. 2 Channel, Two Hand Control Reserved The left and right buttons have been in an inconsistent state for longer than 500 ms.
Chapter 15 Troubleshooting Remove the fault • The Modbus address 000505 goes LO immediately, showing that the fault was removed. • Modbus address 000393 (Bit 0 of SMF1) remains HI. • On the CCW Logic tab, both the E-stop and gate logic blocks continue to show red color. • The safety output remains off. Cycle the E-stop. • Modbus address 000393 (Bit 0 of SMF1) goes LO. • On the CCW Logic tab, the E-stop block turns green, and the gate block remains red, Cycle the gate.
Chapter 16 Security and Password Guardmaster 440C safety relay security has two components: • Exclusive access that prevents simultaneous configuration of the safety relay by two users. • Password protection that secures the intellectual property that is contained within the safety relay and prevents unauthorized access. Exclusive Access Exclusive access is enforced on the Guardmaster 440C safety relay regardless of whether the safety relay is password-protected or not.
Chapter 16 Security and Password Compatibility The Safety Relay Password feature is supported on: • Connected Components Workbench version7 and later • Guardmaster 440C safety relays with revision 7 or later firmware Users with earlier versions of the software and/or hardware are advised to upgrade the software and firmware. See Upgrade the Firmware on page 141 for instruction on firmware upgrades.
Security and Password Configure Password Chapter 16 Set, change, and clear the password on a target safety relay through the Connected Components Workbench software. IMPORTANT The following instructions are supported on Connected Components Workbench version 7 and Guardmaster 440C safety relays with firmware revision 7. Set Safety Relay Password In the following instructions: • The Connected Components Workbench software is connected to the Guardmaster 440C safety relay.
Chapter 16 Security and Password 5. Click OK. Once a password is created, any new session that tries to connect to the safety relay has to supply the password to gain exclusive access to the target safety relay. IMPORTANT If you have to flash the safety relay, the project in the relay is lost. A new project must be downloaded. 6. Click OK. Change Password With an authorized session, you can change the password on a target safety relay through the Connected Components Workbench software.
Security and Password Chapter 16 2. Enter the Old Password, New Password and confirm the new password. 3. Click OK. The safety relay requires the new password to grant access to any new session. IMPORTANT Keep the password carefully. If lost, you have to flash the safety relay to reset the password. The project in the safety relay is lost but a new project can be downloaded.
Chapter 16 Security and Password Lost Password If the safety relay is secured with a password and the password has been lost, then it becomes impossible to access the safety relay using the Connected Components Workbench software. To recover, use ControlFLASH™ to refresh the safety relay firmware, which also clears the safety relay memory and clears the password ATTENTION: The project in the safety relay is lost but a new project can be downloaded.
Chapter 17 Using the Memory Module Overview Guardmaster 440C safety relays support the Cat. No. 2080-MEMBAK-RTC memory modules for the following purposes: • Project backup and restore • Firmware and project backup and restore ATTENTION: Removal and Insertion Under Power (RIUP) is not supported on the Cat. No. 2080-MEMBAK-RTC memory module when used with a Guardmaster® 440C safety relay. ATTENTION: The Cat. No.
Chapter 17 Using the Memory Module Backup and restore can only occur when the Cat. No. 2080-MEMBAK-RTC module is present in plug-in Slot 1 (the leftmost slot) of the Guardmaster 440C safety relay. On safety relay power-up, the safety relay enters a fault state where the application logic is not executing. Backup and restore commands can be issued in this fault state. The Cat. No. 2080-MEMBAK-RTC memory module stores the safety relay password, if present, in encrypted format.
Using the Memory Module Chapter 17 5. Using a small flathead screwdriver press the Backup button on the Cat. No. 2080MEMBAK-RTC memory module. Hold the button until the Status LED on the Cat. No. 2080-MEMBAK-RTC module begins flashing indicating the backup process has begun. When the backup operation is complete the Status LED on the Cat. No. 2080MEMBAK-RTC stops flashing. If the Status LED does not blink and turns on after 15 seconds, the TIP program is not verified and backup cannot take place. 6.
Chapter 17 Using the Memory Module The behavior of the IN and OUT LEDs depends on whether the configuration is verified: • Verified - the IN and OUT LEDs continuously cycle through the verification number of the configuration currently running in the CR30. • Not Verified - the IN 0 and the OUT 1, 2, 3 and 4 are solid green. The restore can take place since the configuration being downloaded is verified. 5.
Chapter 18 Reports The Connected Components Workbench™ (CCW) allows you to generate a report using Microsoft Word automatically. The report is editable, which allows you to add more information or combine the report with other documents for the safety technical file. The report generator button is at the top of the logic editor. Mouse over the icon that looks like a printer and click.
Chapter 18 Reports Select the desired output type, orientation, image options, header/footer options, and output file location and name. If a report with the same name already exits, the user is prompted to overwrite it. An example of a report is shown in the following two figures.
Appendix A Specifications The CR30 meets the requirements of SIL CL 3 in accordance with IEC/EN 61508.
Appendix A Specifications General Number of I/O 22 Dimensions 90 x 100 x 80 mm (3.54 x 3.94 x 3.15 in.) Shipping Weight, approx. 0.423 kg (0.933 lb) Wire Size 0.2…2.5 mm2 (24…12 AWG) solid copper wire or 0.2…2.5 mm2 (24…12 AWG) stranded copper wire rated @ 90 °C (194 °F) insulation max Wiring Category 2 – on signal ports 2 – on power ports Use this Conductor Category information for planning conductor routing. See Industrial Automation Wiring and Grounding Guidelines, publication 1770-4.1.
Specifications Inputs Outputs Number of Inputs Up to 18 embedded 12 dedicated inputs 6 configurable as Inputs Operating Voltage Range 20.4…26.V DC Off-state Voltage, max 5V DC Off-state Current, max 2.91 mA (independent of supply) On-state Voltage, max 26.4V DC On-state Voltage, min 11.0V DC On-state Current, min 3.14 mA at 20.4V DC On-state Current, nominal 3.2 mA at 24V DC On-state Current, max 3.25 mA at 26.
Appendix A Specifications Recovery Times Response Times System Response Time Calculation To trigger Inputs again Response time as demand + reaction time + 100 ms Safety Input 45 ms + Input Filter time Single Wire Safety Input <45 ms Safety Mats <70 ms Single Wire Safety Output <60 ms The safety response time is the time that is required to establish the safe state of the safety output function considering the demand of the safety monitoring function and/or occurrence of faults and failures in
Specifications Appendix A Response Time - Demand of the Safety Function The safety response time of CR30 is the screw-to-screw response time to turn off a safety output at demand of the safety function by the safety input device. The safety response has to be calculated for each safety monitoring function. Table 21 shows the possible safety chain with all considerable response times.
Appendix A Specifications Figure 132 - Example Table 23 - For SMF1 - E-stop: Comment Value Safety Sensors Safety response time of sensor device - considered as 0 ms since mechanical device only 0 ms SMF An E-stop SMF does not require extra processing time 0 ms Input Filter Advanced Settings: Input Filter: 10 x 25 ms = 250 ms 250 ms Logic Internal execution time to process input signal, routing, and output processing 45 ms SOF Configured Off-Delay time immediate OFF 0 ms Actuator Assumin
Specifications Appendix A Table 24 - For SMF2 - Safety Mat Comment Value Safety Sensors Safety response time of sensor device - considered as 0 ms since mechanical device only 0 ms SMF Safety mat processing time 25 ms Input Filter Advanced Settings: Input Filter: 0 ms 0 ms Logic Internal execution time to process input signal, routing, and output processing 45 ms SOF Configured Off-Delay time immediate OFF 0 ms Actuator Same contactor is controlled by the safety mat SMF as by the E-stop
Appendix A Specifications The evaluation method of the input or output signal depends on the configuration of the SMF and SOF in CCW and the wiring of the sensor. Table 25 shows typical evaluation functions and required settings to be enabled. Table 25 - Evaluation Method Evaluation Method Configuration Applicable for Multi-channel signal evaluation Inputs: 2 N.C., 2 OSSD, 3 N.C.
Specifications Evaluation Method Configuration Applicable for Muting: Synchronization time Synch Time: 0.05…10 s The maximum amount of time that is allowed between clearing or blocking of the muting sensor inputs before generating a fault. SMF Muting Muting time Max. Mute Time: 1 s…10 days Maximum amount of time during which the instruction lets the protective function of the light curtain be disabled before generating a fault.
Appendix A Specifications Test Pulse Evaluation Integral test pulses are applied to the input circuit of safety sensor with electromechanical outputs. The test pulse output signal becomes input signal of a safety input through the contacts of the safety sensor. Sensors with electronic OSSDe (output safety switching device electronic) semiconductor outputs have their own test pulses and do not require a test pulse evaluation that is sourced by the logic device.
Specifications Appendix A The overall monitoring time to evaluate a fault and initiate a system response, after the occurrence of a recoverable fault must consider any specific-fault processing times depending on the I/O evaluation method and configured input filter times. Table 26 shows the response time for specific recoverable faults, if the safety function is not demanded, and the required settings of SMF and SOF to enable the proper fault evaluation method.
Appendix A Specifications Figure 133 - Example Table 28 - Consideration for Recoverable Faults of E-stop Safety Function Description Value SMF Cross loop fault: 3 s according to above table 3s Logic Internal execution time to process input signal, routing, and output processing 45 ms SOF No off delay configured 0s Actuator Assuming a contactor with a response time of 30 ms 30 ms Total 3.
Specifications Reaction Time Appendix A The reaction time is the time to enable the safety output function when activating the safety input devices and performing a valid reset operation. The overall reaction time of the safety function considers the whole safety chain, including the safety input device, logic device, and actuator. The reaction time must be calculated for each safety function. Table 29 shows the possible chain with all considerable reaction times for a safety function.
Appendix A Specifications Table 30 - For SMF1 - E-stop: Comment Value Feedback Disabled for SOF 0 ms Safety Sensors Reaction time of sensor device considered as 0 ms since mechanical device only 0 ms SMF Configured Input Filter time 10x25 ms = 250 ms 250 ms Reset/Restart SOF configured for Automatic 0s Logic Internal execution time to process input signal, routing, and output processing 2) 100 ms SOF No On delay configured for SOF 0s Actuator Assuming a contactor with a response time
Specifications Appendix A Figure 135 - Example 2: Same as Figure 134 on page 133 but with manual monitored reset and feedback monitoring Table 32 - For SMF1 - E-stop: Comment Value Feedback Configured Input Filter time 10x25 ms = 250 ms 250 ms Safety Sensors Reaction time of sensor device considered as 0 ms since mechanical device only 0 ms SMF Configured Input Filter time 10x25 ms = 250 ms 250 ms Reset/Restart Min: 2 x Input Filter Time + 250 ms = 500ms + 250 ms = 0.
Appendix A Specifications Table 33 - For SMF2 - Safety Mat: Comment Value Feedback Configured Input Filter time 10x25 ms = 250 ms 250 ms Safety Sensors Reaction time of sensor device considered as 0 ms since mechanical device only 0 ms SMF Input Filter Disabled 0 ms Reset/Restart Min: 2 x Input Filter Time + 250 ms = 500ms + 250 ms = 0.75 s Max: 2 x Input Filter Time + 3 s = 0.5 + 3 s = 3.5 s Min: 0.75 s Max: 3.
Appendix B Regulatory Approvals Agency Certifications Compliance to European Union Directives • • • • • UL Listed Industrial Control Equipment (certified for US and Canada) CE marked for all applicable directives C-Tick marked for all applicable acts CCC Mark S-Mark This product has the CE mark and is approved for installation within the European Union and EEA regions. It has been designed and tested to meet the following directives.
Appendix B Regulatory Approvals Notes: 138 Rockwell Automation Publication 440C-UM001C-EN-P - November 2014
Appendix C Configuration Reference Document The Configuration Reference Document must be stored together with technical documentation of the machine. It includes information about the validity of a configuration that is created for the machine. This document must be updated anytime changes to the configuration have been made, validated, and verified. Any new configuration or changes to an existing configuration require a validation and verification before putting it into service.
Appendix C Configuration Reference Document Configuration Reference Document Device Information: Device Name: From Name Field, General View Description: From Description Field, General View Vendor: Allen-Bradley Catalog ID: 440C-CR30-22BBB Safety Relay Firmware Version: Found in the Device Details Window of CCW Project Information: Project Name: As stored in the configuration tool Project File Name: From file name Software revision: From Help -> About CCW Verification ID: Generated in verification w
Appendix D ControlFLASH Firmware Upgrade Upgrade the Firmware This appendix shows how to flash update the firmware in a Guardmaster CR30 safety relay using ControlFLASH™. To download the latest Guardmaster CR30 safety relay firmware revision, go to http://www.rockwellautomation.com/ support/pcdc.page and select your desired revision. 1. Through USB connection: Verify successful RSLinx Classic communications with you Guardmaster CR30 safety relay by USB using RSWho.
Appendix D ControlFLASH Firmware Upgrade 4. Click Next 5. Select the catalog number of the Guardmaster CR30 safety relay (440CCR30-22BBB) that you are updating and click Next.
ControlFLASH Firmware Upgrade Appendix D 6. Expand the AB_VBP-1, 1789-A17/A Virtual Chassis by clicking the +. 7. Select the safety relay in the browse window and click OK. If the device comes up unrecognized, the EDS file has not been loaded. 8. Verify the revision, and click Next to continue.
Appendix D ControlFLASH Firmware Upgrade 9. Click Finish. 10. Click Yes to initiate the update. The next screen shows the download progress. 11. When the flash update is complete, you see a status screen similar to the following. Click OK to complete the update.
ControlFLASH Firmware Upgrade Appendix D 12. The “Welcome to ControlFlash” window appears again. Click Cancel. 13. Click Yes to end the session. Unrecognized Device If the device comes up as Unrecognized, the EDS file must be uploaded. 1. Right-click the device and select Upload EDS file from device. 2. Click Yes.
Appendix D ControlFLASH Firmware Upgrade 3. Click Next. 4. Click Next. 5. Click Next.
ControlFLASH Firmware Upgrade Appendix D 6. Click Next. 7. Click Finish.
Appendix D ControlFLASH Firmware Upgrade Notes: 148 Rockwell Automation Publication 440C-UM001C-EN-P - November 2014
Rockwell Automation Support Rockwell Automation provides technical information on the Web to assist you in using its products. At http://www.rockwellautomation.com/support you can find technical and application notes, sample code, and links to software service packs. You can also visit our Support Center at https://rockwellautomation.custhelp.com/ for software updates, support chats and forums, technical information, FAQs, and to sign up for product notification updates.
