The following elements also contribute to the safety function:

Hardware self-test

Safe communication with I/O modules

Reaction in the event of a fault

If the test harness detects a fault, the processor module enters the ERROR STOP state and restarts.

Diagnostic information is available to find the cause of the fault.

Start-up after error stop

If the cause of the fault still exists, the processor module avoids restarting and repeating the error stop:

After the first error stop, the processor module reboots normally and switches to system operation.

After the second error stop, the user must reboot the system using PADT after troubleshooting.

After the processor module has been running in system operation for approximately one minute,

the next error stop will be considered as the first error stop.

Scope of delivery

The module must be mounted on a suitable connection board to operate.

An Ethernet cable is required to connect the PADT.

The connection board and Ethernet cable are not included in the scope of delivery of the module.