Safety Function

The module ensures its safety function using one extra safety switch for each channel pair

that is opened if a failure occurs.

The safety function is performed in accordance with SIL 3.

Reaction in the Event of a Fault

If the safety-related processor system of the module detects a module fault during

operation, the module adopts the safe state after a maximum of 16 ms and all the outputs

are de-energized in accordance with the ‘de-energize to trip principle’. If a channel fault

occurs, both channels of the affected channel group are switched off.

The module activates the Error LED on the front plate.

Scope of Delivery

The module must be installed on a suitable connector board to be able to operate. If a FTA

is used, a system cable is required to connect the connector board to the FTA. Connector

boards, system cables and FTAs are not included within the scope of delivery.

The connector boards are described in Chapter 3.6. the system cables are described in

Chapter 3.7. The FTAs are described in own manuals.