Download SafeC 200 SafeC 400 Safety Controller

Operation Manual
SafeC 200
SafeC 400
Safety Controller
SafeC 400 Category 4, PL e according to EN ISO 13849-1
Typ 4 according to EN 61496-1/-2
SIL 3 according to IEC 61508
SIL CL 3 according to EN 62061
SafeC 200 Category 2, PL d according to EN ISO 13849-1
Typ 2 according to EN 61496-1/-2
SIL 2 according to IEC 61508
SIL CL 2 according to EN 62061
English
Deutsch
The safety relays SafeC 200 and SafeC 400
take over the entire safety monitoring
in your control cabinet.
The real genius!
IMPORTANT NOTE
FOLLOW THE INSTRUCTIONS GIVEN IN THIS MANUAL CAREFULLY. FAILURE TO DO
SO MAY CAUSE CUSTOMER COMPLAINTS AND SERIOUS CALL BACKS. KEEP
INSTRUCTION MANUAL ON SITE.
© CEDES Safety & Automation AG Version 1.9 / 07. February 2014
Part Nr. 103 415 E
SafeC 200 / SafeC 400
Operation Manual
Content
1.
2.
3.
1.
History..................................................................... 2
Approvals and Conformity ................................ 2
Introduction........................................................... 3
3.1.
Special features ......................................................3
4.
Applications ........................................................... 4
4.1.
Typical applications ..............................................4
4.2.
Application restrictions .......................................4
5.
Hardware ................................................................ 4
5.1.
HW description ......................................................4
6.
Configurations ...................................................... 5
6.1.
Basic configuration (Factory setting) .............5
6.2.
Configuring a SafeC controller module .......6
7.
Terminal connection diagram ........................... 6
8.
Start type ..............................................................11
8.1.
Manual start ......................................................... 11
8.2.
Automatic start ................................................... 11
8.3.
Two hand start .................................................... 11
9.
Special functions ................................................11
9.1.
Function "Safety Prevention"......................... 11
9.2.
Function EDM (External device monitoring)12
9.3.
Other functions ................................................... 13
10.
Status outputs .....................................................13
10.1. Display elements ................................................ 14
11.
Response time ....................................................16
11.1. Calculation of the total response time for
safety light curtains .......................................................... 16
11.2. Calculation of the total response time for
other safety components ............................................... 16
12.
Installation ...........................................................16
12.1. Installation instructions.................................... 16
12.2. Legal regulations ................................................ 19
13.
RS 485 interface .................................................19
13.1. Measuring function ........................................... 19
13.2. Configuration of the RS 485 interface ....... 20
14.
Fault identification through LED ....................20
15.
Selection tables ..................................................21
16.
Accessories / Components ..............................21
17.
Inspection and service ......................................21
17.1. Inspections ............................................................ 21
17.2. Decommissioning .............................................. 21
18.
Product labels .....................................................22
19.
Configuration Control Document ..................22
20.
Technical data .....................................................28
20.1. Arc-limiting graph.............................................. 29
21.
Index ......................................................................30
22.
Glossary ................................................................31
2
History
This manual describes the following versions of the
controller family SafeC x00:
2.
Manual
SafeC x00
SafeC x00
V1.9
V1.22-1.28
V1.15-1.16
Approvals and Conformity
TÜV Rheinland Product Safety GmbH, performed
the CE-type examination according to
 2006/42/EC (low voltage directive),
 2004/108/EC (EMC directive) and
 GS-ET-20 (Fundamental examination and certification of relay-safety combination)
and confirmed the product meets the following categories of EN 13849-1
Product type
SafeC 200
SafeC 400
Safety category of EN 13849-1
(SiLcl according to EN62061)
Cat. 2, Performance Level d (SiLcl 2)
Cat. 4, Performance Level e (SiLcl3)
The CE-conformity declaration and TÜV examination certificate are available at your nearest CEDES
Safety & Automation dealer.
Warning
SafeC 200 or SafeC 400 units can only achieve their
function as a safety controller module, if the instructions given in this instruction manual and the within
mentioned documents are exactly followed, as well
as consulting the valid laws and regulations at the
time of installation.
Should these instructions not be carefully followed,
serious injury or death may occur. The installer or
system integrator will be fully responsible for a safe
integration of this product. Any claims for liability to
CEDES Safety & Automation expires in such a case
This instruction manual is part of the controller module type SafeC 200 or SafeC 400. It must be kept
accessible together with the other machine documentation during its entire life cycle for all personnel
responsible for assembly, installation, operation and
maintenance.
www.cedes-sa.com
© CEDES Safety & Automation AG
SafeC 200 / SafeC 400
Operation Manual
3.
Introduction
SafeC 200 and SafeC 400 are extremely compact
safety controller modules that simultaneously survey
different safety components. The modules allow for
the connection and the control of the compact safety
light curtain systems Safe200 or Safe400 from
CEDES Safety & Automation (Figure 1) or the
GuardShield Micro 400 from Allen Bradley. In addition, numerous other safety components can be
connected and monitored simultaneously. The controller modules are especially useful due to their
numerous individual application possibilities. It is
possible for authorized personnel to very simply
reconfigure the factory settings of the module themselves and thereby adjust them to meet individual
needs.
With the help of this software it is easy to use the
graphic functions to choose and configure for example: Start mode, stop delay times, "Blanking", and
"Safety Prevention". There is no need to learn a
programming language!
Figure 3: Programming made easy using the OptiLink interface
Figure 1: SafeC 400 or SafeC 200 in combination with the
CEDES Safety & Automation safety light curtain Safe400
(GuardShield Micro400) resp. Safe200
SafeC 200 and SafeC 400 accept the outputs of all
standard safety components such as light curtains,
emergency stop buttons, two hand controls or interlock switches.
The highly efficient integrated safety circuit of a
SafeC x00 eliminates the need for auxiliary relays in
the majority of applications. Furthermore numerous
monitoring outputs guarantee a simple communication with every Standard-PLC to ensure reliable
and trouble free process control. Even the most
demanding applications may be solved with the
SafeC 400, fulfilling the requirements according to
the highest safety category 4, PL e of EN 13849-1,
SiLcl 3 according EN 62061.
3.1.
Special features
The outstanding characteristics of the SafeC 200 or
SafeC 400 controller modules are:
Figure 2: Connection possibilities SafeC 400
The configuration of a SafeC 200 or a SafeC 400
module for different application occurs with the aid
of the optical interface, OptiLink (Figure 3). The OptiLink interface ensures the user a fast and uncomplicated configuration according to his own needs.
The corresponding software "Configuration Tool"
supplied is available to download for free from our
website at www.cedes-sa.com.
© CEDES Safety & Automation AG
 Safety category 2 (PL d) or 4 (PL e) from EN
13849-1
 Short reaction times
 Efficient force guided relays
 Up to 8 contacts per controller module
 Multifunctional
 Adjustable stop delay time
 Different safety components suitable for connection
 Optical interface for diagnosis and configuration
 Fixed and floating blanking configurable
 Numerous status outputs
 Cost-effective and maintenance free
 Individually configurable
 State of the art technology
www.cedes-sa.com
3
SafeC 200 / SafeC 400
Operation Manual
4.
Applications
5.
Hardware
4.1.
Typical applications
5.1.
HW description
SafeC 200 or SafeC 400 controller modules are
developed and conceived for application in:
 Small machines
 Medical machines
The dimensions of the housing for SafeC 200 or
SafeC 400 are illustrated in Figure 4. The housing
and the terminals are sealed according to IP20 (EN
60529).
Typical application areas are:
 Presses
 Robotic cells with automatic insertion
 Assembly lines
 Circular assembly stations
 Conveyor systems
 Automatic storage facilities
in different industries:
 Electronic industry
 Semiconductor industry
 Machine manufacturing
 Metal processing
 Paper processing
 Wood processing
 Textile industry
Figure 4: Dimensions of SafeC 200 or SafeC 400
4.2.
Application restrictions
SafeC 200 or SafeC 400 controller modules are not
intended for application in explosive (EX) or in radioactive environments.
SafeC 200 or SafeC 400 controller modules (IP20)
are designed for use in a control cabinet. If it is used
outside of a control cabinet we recommend a housing with a protection category of IP54 and a mounting rail capability. This device can operate in a temperature range between 0°C and 55°C.
Numerous LED clearly show the status of the controller. A quick diagnosis can be accomplished with
the help of these LED (chapter 10.1) as well as with
the optical interface OptiLink.
For the individual configuration of the controller by
authorized personnel, the OptiLink optical interface
must be used. This interface (i) is very noticeably
positioned on the front side of the controller.
The body of every SafeC 200 or SafeC 400 can be
roughly divided into two parts (Figure 5): the controller section and the relay section.
Controller section
For the professional installation and connection,
please consult the relevant laws and regulations.
The safety officer of the manufacturing facilities, the
local authorities (OSHA in USA, HSE in GB) or the
respective industry associations as well as the intensively trained employees of CEDES Safety &
Automation are available for any safety related queries.
Relay section
and any situation where working personnel must be
protected from dangerous machinery.
Figure 5: Sections of a SafeC 200 or SafeC 400 controller
4
www.cedes-sa.com
© CEDES Safety & Automation AG
SafeC 200 / SafeC 400
Operation Manual
5.1.1.
Controller section
The left area, with the numerous LED’s for status
display, is the controller section. With the help of the
detachable terminal blocks, the various safety components (such as emergency stop button, light curtain, etc.) as well as the status outputs for the PLCmachine controller, can be connected (see also
Figure 7). The two RJ45 sockets on top are for the
connection of a Safex00 / Micro400 safety light curtain (white = E = emitter; blue = R = receiver).
5.1.2.
Relay section
The area to the right of Figure 5 is the relay section.
Depending on the hardware versions of the SafeC
200 or SafeC 400 unit the relay portion is made up
of one or two switching blocks (FSD = Final Safety
Switching Device):
Block A: 3 relay contacts or 2 PNP
Block B: 5 relay contacts or 2 PNP
The following hardware versions are available
(Figure 6):
Type
Diagram
SafeC 200-3C
Block A
Block B
3 NO contacts
5 NO contacts
SafeC 200-5C
SafeC 200-8C
3 NO contacts
SafeC 400-3C
3 NO contacts
redundant
5 NO contacts
2 PNP,
cross-fault
detection
5 NO contacts
redundant
SafeC 400-8C
3 NO contacts
redundant
5 NO contacts
redundant
SafeC 400-4P
2 PNP,
cross-fault
detection
2 PNP,
cross-fault
detection
SafeC 400-2P5C
Important safety advice:
The safety relay contacts switch through two terminals (e.g. see Figure 8, Pin 64-Pin 65). The safety
PNP semiconductor outputs are supplied internal
with 24 V and signal only on one output terminal
(e.g. see Figure 9, Pin 65).
This feature has to be considered when a SafeC400 with safety relay outputs is replaced with a
SafeC-400 with safety PNP outputs (SafeC 4002P5C or -4P).
6.
Configurations
6.1.
Basic configuration (Factory setting)
Besides the different hardware versions (chapter
5.1.2) the SafeC 200 and SafeC 400 controller
modules are also available with different configurations. These configurations distinguish themselves
in the action of the individual safety components.
This means that the configurations define which
safety component switches which relay block (A and
/ or B) and with which time delay.
Likewise the start mode is defined (manual or automatic) for every component. Furthermore it determines the function of the "Safety Prevention" switch.
The Basic configuration CAG A001 was developed
for the most common recurring applications. This
allows for the immediate use of a SafeC 200 or
SafeC 400 module, without changing a configuration. A description of the function of the respective
SafeC module is supplied with each delivery, in the
form of a "Configuration Control Document". The
Configuration Control Document for a module with
the Basic configuration is shown in chapter 19. All
other modules have a separate Configuration Control Document included in the shipment.
5 NO contacts
redundant
SafeC 400-5C
the help of contact feedback (EDM, chapter 9.2), to
realize a safe deactivation of their machine. The
SafeC 400-4P collectively features 2 pairs of outputs
each with cross-fault detection. Depending on the
configuration of the safety components, the PNP
pair A and / or the PNP pair B react.
Figure 6: Hardware versions of different SafeC 200 or SafeC
400 units
The designation SafeC 400-8C means: a SafeC 400
module with a relay block comprising of 3 contacts
(Block A) as well as a relay block with 5 contacts
(Block B). The corresponding switching capabilities
of both relay blocks with alternating or direct voltage
are described in chapter 20.
Likewise the CEDES Safety & Automation controller
is also available with two PNP versions. These versions allow a user to use his specific relays and with
© CEDES Safety & Automation AG
www.cedes-sa.com
5
SafeC 200 / SafeC 400
6.2.
Operation Manual
7.
Configuring a SafeC controller module
Terminal connection diagram
Should the Basic configuration version supplied not
correspond with the application at hand, then it is
possible for authorised personnel, using the OptiLink, to modify the effect of the connected components on relay blocks A and B. Likewise, the start
mode for every component may be customized and
stop time delays for each component may be individually selected.
Figure 7 shows an example of the connection diagram of the CEDES Safety & Automation Basic configuration version CAG A001. The logic of this Basic
version is exemplified in the accompanying Configuration Control Document (Figure 19).
The procedure for configuring a SafeC 200 or SafeC
400 controller module with an OptiLink is described
in detail in the Configuration Tool program manual
(CEDES Safety & Automation document number:
105 784). The safety instructions in this manual
must also be closely followed.
Figure 9 shows the wiring of external contactors for
contact monitoring. This circuit is described in chapter 9.2.
Figure 8 shows all possible safety component connections on a SafeC 400 module.
Figure 10 shows the terminal assignment for a
SafeC 200 controller module including the testing
connection
Important safety advice:
If a configuration has changed the attached label
“Configuration Changed” has to be attached to the
controller housing and a new configuration control
document has to be printed out and added to the
controller documentation (see manual 105 784).
6
www.cedes-sa.com
© CEDES Safety & Automation AG
SafeC 200 / SafeC 400
105
104
Operation Manual
55
54
65
64
75
74
85
84
95
94
Block A
45
25
14
15
24
35
34
44
Block B
B: FSD


17
5


P
4
L10 L11
L9
L8
20
L7

1
L6
21
RSA RSB S20 S18 S17 S19

18
Safety switch 1
22
Safety switch 2
19


Res S21 S23 S22 S24 S26
23

L3
2

S10
SP

L2
12

S11 S12

L1
Int

+24V 0V

Safe4
3

Safe4
13
S34 S32 S31 S33 S41 S44
L16
L15
L14
8
L12 S28 L13
9

S13 S15 S16 S14
14

Start

Emergency
stop button
10

0V

15

Power
Block A

+24V

Block B
S40 S38 S36 S35 S37 S39
FSD :A
Response delayed:A
B: Response delayed
RS485
RS485
5 A slow
E
: 0V
: +24V
R
Receiver Safe400
Emitter Safe400
Figure 7: Example of connection allocation of a SafeC 400-8C controller module with basic configuration CAG A001
© CEDES Safety & Automation AG
www.cedes-sa.com
7
SafeC 200 / SafeC 400
104
Operation Manual
105
94
Block A
74
75
65
54
55
84
85
64
95
45
14
15
24
25
34
35
44
Block B
B: FSD

L11
L10
Emergency
stop button
L9
Safety
Prevention

4
L8

P
L7
5
L6

17
RSA RSB S20 S18 S17 S19
20
Safety switch 1
1
Block B
EDM
Safety switch 2
21
S40 S38 S36 S35 S37 S39
S23 S22 S24 S26
Res S21
18

L3
22

S10
19

L2
23

S11 S12
2
S34 S32 S31 S33 S41 S44
L16
L15
L14
L12 S28 L13
L1
SP

Start
12

+24V
Int

S13 S15 S16 S14

3

RS485
RS485
5 A slow
E
: +24V
R
Receiver Safe400
: 0V
+24V
8
13

0V
9

Power
14

+24V

Block A
EDM
10


Safe4
15


Safe4
Block A


Blanking
Prevention
Block B

+24V 0V
FSD : A
B: Response delayed Response delayed: A
Emitter Safe400
Figure 8: Possible connection allocation of a SafeC 400-8C controller module
8
www.cedes-sa.com
© CEDES Safety & Automation AG
SafeC 200 / SafeC 400
Operation Manual
Figure 9: Contacting of a PNP output controller module and an example for EDM (contact multiplication) with surge suppressors of a SafeC
400-4P
© CEDES Safety & Automation AG
www.cedes-sa.com
9
SafeC 200 / SafeC 400
104
Operation Manual
105
75
65
54
55
84
85
74
95
64
94
Block A
45
14
15
24
25
34
35
44
Block B

4
L11
L10
L9
Safety
Prevention

P
L8

5
L7

17
SafeC ok
L6
20
RSA RSB S20 S18 S17 S19

1
Safety switch 1a, 1b
21
Block B
EDM
Safety switch 2a, 2b
18
S40 S38 S36 S35 S37 S39
22


S10
19

L2
23

S11 S12
2
S34 S32 S31 S33 S41 S44
L16
L15
S23 S22 S24 S26
Res S21
L14
L12 S28 L13
L1
+24V 0V
SP

L3

12

Block A
EDM
Int

Safe4
3

Safe4

Start
8
13

0V
9

+24V
14

Emergency
stop button(s)
10

+24V
15

+24V
Block A

Power
Block B

5 A slow

Blanking
Prevention
FSD : A
Response delayed: A

S13 S15 S16 S14
B: FSD
B: Response delayed
RS485
RS485
Test
Receiver Safe200
: 0V
E
: +24V
R
Emitter Safe200
Figure 10: Possible connection allocation of a SafeC 200-8C controller module
10
www.cedes-sa.com
© CEDES Safety & Automation AG
SafeC 200 / SafeC 400
Operation Manual
8.
Start type
The connected safety components, depending on
the Basic configuration version, can be configured
with
- automatic start or
- manual start.
For some applications a so called "two hand start"
may be required, and this may also be configured.
Important safety advice:
It is fundamental that the start button is mounted so
that the danger area is clearly visible. That is, when
pressing the start button it must be guaranteed that
no one is detained within the danger area.
8.1.
Manual start
When activating a safety component, the associated
relay blocks A and / or B will open, depending on the
configuration. Once the safety component reports
"safety okay" (Output L1 = low), depressing the start
button will cause the associated relay blocks to close
again (= manual start). If more than one safety component is defined for a relay block, then all components must report "safety okay" before a start is allowed.
The start button is monitored. This means, a shortcircuit of the button will not lead to a start of the machine.
8.2.
Automatic start
If a safety component is configured to "automatic
start", then, after the activation and the deactivation
of the safety component, depending on the configuration, the associated relay blocks A and / or B will
automatically re-close.
Important safety advice:
According to EN 60204 article 9.2.4.4.2 a system
may not automatically restart, even after the cause of
the shutdown has been eliminated, and thereby another danger may still exist to the operator. If the
SafeC 200 or SafeC 400 unit is configured with an
"automatic start", this requirement must be fulfilled
by further measures in the machine controller (PLC).
8.3.
Two hand start
If a two hand start is configured, both start signals
must be pressed within 0.5 s of each other and then
the associated relay blocks A and / or B will close.
Both relay blocks will remain closed as long as both
start signals remain present. Only after letting go of
both buttons can a new cycle be started.
The configuration of the two hand start in a SafeC
400 controller fulfils the requirements of ZH1 / 456
(02.78) and the standard EN 574 (02.97) for type IIIc
(category 4 of EN 13849-1). According to EN 574, a
two hand start is not defined for safety category 2
© CEDES Safety & Automation AG
and therefore is a function only available with a
SafeC 400 controller.
A connected two hand console must satisfy all the
requirements of EN 574 (chapter 12.1.10).
9.
Special functions
9.1.
Function "Safety Prevention"
Certain applications require that at certain times
safety components must be prevented (e.g. during
installation). Specialists are familiar with different
terms for this kind of prevention: Safety Prevention,
Override or Bypass. Hereafter we will refer to this as
"Safety Prevention".
In Figure 8 you can also see a "Safety Prevention"
key switch and a safety prevention lamp. With the
"Safety Prevention" key switch you can prevent for
example the function of a Safex00 / Micro400 light
curtain. This means that if the prevention key switch
is activated, the corresponding relay contacts will
stay closed even if the protective field is interrupted.
Which safety component is prevented depends on
the configuration. For example, turning this prevention key switch, may deactivate the safety function of
an attached Safe2+ or Safe4 light curtain.
The reaction time of the "Safety Prevention" function
is three times the reaction time of the Safex00 / Micro400 (this reaction time is given on the label of the
Safe400). This means when both circuits of the
"Safety Prevention" key switch are closed, it will take
a maximum of 3 x t(LC) to activate the "Safety prevention" function. The same is true when deactivating the "Safety Prevention" function, as soon as one
of the two circuits of the key switch is opened, it
takes a maximum of three times the reaction time of
the Safe400 light curtain to deactivate the "Safety
Prevention" function.
Important safety advice:
The safety prevention key for this switch has to be
stored safely, so that only authorised personnel have
access to this key.
Note:
If the delivered configuration version does not correspond to the requirements of an application, authorized personnel may change the effect of this "Safety
Prevention" key switch with the help of an OptiLink.
If a key switch is used, a safety prevention lamp has
to be connected. The connection for this safety prevention lamp is current controlled (see Technical
Data chapter 20). This means, that if the lamp fails
and the prevented safety component is activated, the
prevention will not take place.
The safety prevention lamp used has to fulfil the
requirements of EN 61496 and has to be mounted
close enough to the prevented protective field that it
is clearly visible to the machine operator.
www.cedes-sa.com
11
SafeC 200 / SafeC 400
Operation Manual
If an application does not require a safety prevention
lamp – despite a "Safety Prevention" key switch (only allowed after a comprehensive safety evaluation
corresponding to EN ISO 12100-1 und DIN EN ISO
14121-1), then a resistor (1 kΩ / 2 W) must be connected between +24 V and terminal S28.
Alternatively to a safety prevention key switch, you
can attach – depending on the application and the
required safety analysis – so-called three-stage enable switch or two independent, safety position sensors.
Important safety advice:
The use of the "Safety Prevention" function is only
allowed in applications, for which the risk analysis
(EN ISO 12100-1 und DIN EN ISO 14121-1) permits
for the prevention of a safety component. As a general rule, emergency stop buttons may never be
prevented!
In category 4 units (SafeC 400) the two circuits S17S18 and S19-S20 (Figure 8) are cross-fault monitored. A connection of these two circuits would lead
to a deactivation of the "Safety Prevention" function
of the SafeC x00 controller.
Both circuits: S17-S18 and S19-S20 are protected
against one of the circuits switching off. In an active
"Safety Prevention" function if a circuit is deactivated, the second circuit must likewise also be deactivated, before the "Safety Prevention" function can
be reactivated. These properties apply to both the
SafeC 400 controller and the SafeC 200 controller.
9.2.
Function EDM (External device monitoring)
If the relay blocks A and B of a SafeC 200 or SafeC
400 controller do not have enough contacts or if the
required switching capacity is more than the specified capacity, then additional suitable contactors
have to be used. Generally, this extension is described as contact extension or contact multiplication.
For category 4 contact extension, you have to insert
two external contactors with force guided contacts
per relay block. For controlling the function of these
contactors, each relay block must have one normally
closed contact per contactor fed back in series to the
corresponding terminal of the SafeC 400 controller
(Figure 9).
o if the function EDM is not configured, a signal
change on the terminals cannot occur, otherwise
the module goes into a lock-out.
The feedback circuits for block A and block B are not
cross-fault monitored. Therefore the wiring of the
external device monitoring (EDM) must be permanently installed and protected against external damage, according to EN 13849-2 (i.e. cable channel, or
armoured conduit). Additionally, they must be realized within separate plastic-sheathed cables, as well
as inside a protective enclosure. Prerequisite, is that
both the wire and the protective enclosure fulfil the
corresponding requirements (according to EN
60204-1).
Example 1: For a controller of the type SafeC 4008C (safety category 4) both relay blocks have to be
extended (Figure 8). This means, four additional
contactors with forced guided contacts have to be
inserted (two per block).
The function of these contactors is checked by
means of EDM feedback.
Example 2: For a controller of the type SafeC 2008C (safety category 2) both relay blocks have to be
extended. This means, two additional contactors with
forced guided contacts have to be inserted (one per
block).
The function of these contactors is checked by
means of EDM feedback.
Note:
With the aid of OptiLink, it is possible for authorised
personnel to configure EDM at a later time.
Important safety advice:
The SafeC 400 controller is also available with PNP
outputs: SafeC 400-4P and SafeC 400-2P5C (see
chapter 5.1.2). When using a SafeC 400-4P or
SafeC 400-2P5C controller, the function external
device monitoring (EDM) must always be activated,
unless the PNP outputs are connected with another
safety relay or a safety PLC.
EDM for Block A: Terminal S22
EDM for Block B: Terminal S41
Note:
The input signals to the two EDM terminals are always monitored. This means:
o if the function EDM has been configured, there
must be corresponding signal changes on the
terminals, otherwise a lock-out occurs
12
www.cedes-sa.com
© CEDES Safety & Automation AG
SafeC 200 / SafeC 400
Operation Manual
9.3.
Table 1
Other functions
The configuration of a SafeC 200 or SafeC 400 controller may be adjusted by authorised personnel to
meet the specific needs of his own machine with
help of an optic interface, the aforementioned OptiLink. This is also the case for the operating modes of
the CEDES Safety & Automation safety light curtain.
In combination with a safety controller SafeC 200 or
SafeC 400, the following operating modes may be
configured:
Terminal
(LED)
Output high
(+24 V)
Output low
(0 V)
L1
(1)
No start requested
(green)
Start requested
(yellow)
L2
(2)
Blanking off
(LED off)
Blanking on
(red)
Emergency stop
S13/S14-S15/S16
closed
(green)
Emergency stop
S13/S14-S15/S16
open
(red)
Safety Prevention switch
open
S17/S18-S19/S20 open
(LED off)
Safety Prevention switch
closed
S17/S18-S19/S20 closed
(green)
Light curtain
Intensity sufficient or
Safe200/Safe400
interrupted (green)
Light curtain
Intensity inadequate
(LED: Red / green
blinking)
Output pulsed: +24V / 0V
Light curtain
protective field not
interrupted
(green)
Light curtain
protective field interrupted
(LED off)
(9)
Light curtain
protective field
interrupted
(red)
Light curtain
protective field not
interrupted
(LED off)
L10
(10)
SafeC 200/400 okay
(green)
SafeC 200/400 Lock Out
(red)
L11
Block A closed
Block A - OSSD high
(green)
Block A open
Block A - OSSD low
(red)
(12)
PNP inputs
S24+S26 high
(green)
PNP inputs
S24+S26 low
(red)
L13
(13)
Safety Prevention off
(LED off)
Safety Prevention active
(red)
[LED blinking: Safety
prevention lamp not
connected]
Safety switch
S35/S36-S37/S38
open
(red)
Safety switch
S35/S36-S37/S38
closed
(green)
Safety switch
S31/S32-S33/S34
open
[2 hand not activated]
(red)
Safety switch
S31/S32-S33/S34
closed
[2 hand activated]
(green)
Block B closed
Block B - OSSD high
(green)
Block B open
Block B - OSSD low
(red)
L3
(3)
L6
1. Protection mode
2. Blanking mode
3. Height measurement
(SP)
L7
The selection of an operating mode can be made
using the OptiLink (Figure 3) and the CEDES Safety
& Automation "Configuration Tool" software. Depending on the operating mode selected, it will be
possible to configure and install additional safety
components. During configuration, you can assign
the following characteristics to each safety component:
Automatic or manual start
With or without "Safety Prevention" function
(chapter 9.1)
- Effect on relay block A or B or A+B
- Stop time delay
-
(Int)
L8
(8)
L9
Important safety advice:
A detailed explanation, including the corresponding
safety information, for configuring a SafeC 200 /
SafeC 400 controller module may be found in the
Configuration Tool program manual (CEDES Safety
& Automation document number: 105 784). After
configuring one of the Blanking functions, it is necessary to attach the intended label to the light curtain
(see "Technical Description Manual Safe200 /
Safe400" CEDES Safety & Automation document
number: 103 373 or “User Manual Guardshield Micro400”, Rockwell Automation PN-107934).
(Block A)
10. Status outputs
L15
At the terminals designated with an 'L' in Figure 7 up
to Figure 10, you will find a short circuit protected
PNP output for the connection to a PLC.
(15)
L12
L14
(14)
L16
(Block B)
Important safety advice:
These outputs may not perform any safety relevant
functions. They serve only to communicate the status to a machine controller. The state of the status
outputs will also be indicated through numerous
LED’s on the front of the SafeC 200 / SafeC 400 unit.
© CEDES Safety & Automation AG
Please note:
1. The status output L1 shows when the controller
module is ready for a start impulse.
2. The status output for Block A (L11) and Block B
(L16) react when configured with a delay time
likewise with a delay.
www.cedes-sa.com
13
SafeC 200 / SafeC 400
Operation Manual
10.1. Display elements
Figure 11 shows the additional light emitting elements on the front of a SafeC 200 or SafeC 400
control unit, which signals the statuses to Blocks A
and B.
An overview of all the conditions is given in table 2:
Table 2
LED
Off
LED
Yellow
A
FSD 
Response delayed 
FSD 
Response delayed 
FSD
Response
No stop
delayed
time delay
is programmed
LED
Red
LED
Green
Block open
or not
integrated
Block
closed
Stop time
delay is
programmed
The following LED’s serve for the status indication of
the Safex00 or Micro400 light curtain:
Table 3
B
Figure 11: Status indicators for Block A and B of a SafeC 200 /
SafeC 400 controller unit
If FSD is green, the corresponding contacts of blocks
A and/or B are closed. [Note: In the case of PNP
output versions the green diode is an indication that
the output is active (+24 V).]
LED
(terminal)
Meaning
Remarks
(Output)
Sp
Safety
prevention
Green, safety prevention switch
closed
(Low: Safety prevention switch
activated)
(L6)
2
(L2)
Blanking
active
13
Safety
prevention
active
Red: Safety prevention active
Red blinking: Safety prevention
lamp not connected or defective
(High: Safety prevention active)
Intensity
Green: The received light intensity
is sufficient for stable operation or
light curtain is interrupted
Red / green blinking: The received
light intensity is inadequate for
stable operation
(High: Sufficient light intensity)
Protective
field status
Green, if the protective field is not
interrupted
(High: Protective field not interrupted)
Protective
field status
Red, if the protective field is interrupted.
(High: Protective field interrupted)
(L13)
If FSD is red, the associated contacts of blocks A
and/or B are open. [Note: In the case of PNP output
versions the red diode is an indication that the output
is inactive (floating).]
Int
In the event that one of the relay blocks is not physically present (e.g. block A for a 5C controller), then
the red LED of the missing block will always be illuminated.
(L7)
The LED "Response delayed" lights up only in orange, in the event that the corresponding block has
been configured with a delay.
9
8
(L8)
(L9)
Red: Blanking active
(Low: Blanking active)
If the protective field function of a Safex00 or Micro400 is prevented through the "Safety Prevention"
key switch, the status output L8 will remain high
even if the protective field is interrupted.
14
www.cedes-sa.com
© CEDES Safety & Automation AG
SafeC 200 / SafeC 400
Operation Manual
4
Red / green blinking: Lock-out
Green: Supply voltage okay
Off: No supply voltage
5
P 
17 
20
Yellow: Start requested
Green: No start requested
1
21
18 
22
19 
23
Red: Blanking on
Off: Blanking off
2
Sp
Off: Safety Prevention off S17/S18-S19/S20 open
Green: Safety Prevention on S17/S18-S19/S20 closed
Red: PNP inputs S24 + S26 low
Green: PNP inputs S24 + S26 high
12 
Int
Red / green blinking: light curtain Intensity inadequate
Green: light curtain intensity sufficient
Red: Safety switch S13/S14-S15/S16 open
Green: Safety switch S13/S14-S15/S16 closed
3
8
Off: light curtain protective field interrupted
Green: light curtain protective field not interrupted
Red: Safety prevention on
Off: Safety prevention off
Blinking: safety prevention lamp not connected
13 
9
Red: light curtain protective field interrupted
Off: light curtain protective field not interrupted
Red: Safety switch S35/S36-S37/S38 open
Green: Safety switch S35/S36-S37/S38 closed
14 
10
Red: SafeC 200 / SafeC 400 lock-out
Green: SafeC 200 / SafeC 400 okay
Red: Safety prevention switch S31/S32-S33/S34 open
Green: Safety prevention switch S31/S32-S33/S34 closed
15 
Red: Block B open
Green: Block B closed
Block B 
Block A Red: Block A open
Green: Block A closed
Figure 12: Indicator diodes (LED) on a SafeC 200 or SafeC 400 controller unit
Further information for the indicator LED’s is given in chapter 14.
© CEDES Safety & Automation AG
www.cedes-sa.com
15
SafeC 200 / SafeC 400
Operation Manual
11. Response time
In principle the following applies:
 The response time of a SafeC x00 controller
depends on its configuration.
 The response time of the SafeC x00 controller for the light curtains (Safex00 /Micro, and
or Safe2+, Safe4), t(cLC), differs from the
response time of the SafeC x00 for other
connected safety components, t(cSW).
 The standard maximum response times for
the SafeC x00 controller, t(cLC) and t(cSW)
are given in chapter 20 as well as the configuration control document.
 The response time will increase, when a
time delay, t(delay), is configured for a safety component.
 The response time can increase when a
suppression element is used on an external
contractor or magnetic valve (see chapter
12.1.7). The internal suppression element
limits the voltage to -39V. The impact to the
response time has to be considered carefully.
The total response time of a CEDES Safety & Automation system consisting of a light curtain
(Safex00/Micro400, and/or Safe2+/Safe4) and
SafeC x00 is equal to the sum of the individual response times, plus any configured delay times.
11.1. Calculation of the total response time for
safety light curtains
Maximum response time of the outputs A and B
t(R-total)
= t(LC) + t(cLC) + t(delay)
t(LC)
Response time of the respective
safety light curtain. Value may be
found on the light curtain label
(Safe200, Safe400, Guardshield
Micro400, Safe2+, Safe4).
t(cLC)
Response time of the controller’s
light curtain electronics (see
configuration control document)
t(delay)
Configured time delay of the
respective output block
11.2. Calculation of the total response time for
other safety components
Maximum response time of outputs A and B
t(R-total)
= t(cSW) + (delay)
t(cSW)
Response time of the controller’s
safety switch electronics (see
configuration control document)
t(delay)
Configured time delay of the
respective output block
16
Important safety advice:
If the controller unit is newly configured via OptiLink
by an authorized person, then depending on the
configuration, the response time t(R-total) may have
been increased. Therefore it is very important that
after each new configuration
a. the current configuration control document is
printed and enclosed with each controller and thereby made available to the user and
b. confirmed that the new response time lies within
the limiting values
A configured delay time is visible to the user through
the illumination of the LED "Response Delayed"
(Figure 11)
12. Installation
12.1. Installation instructions
12.1.1. Mounting location
The controller must be mounted in a control cabinet
which is sealed to at least IP54. The unit must be
snapped on a 35 mm mounting rail, which is
grounded. There is no restriction for the mounting
position.
12.1.2. Cable and wires
The wires from the controller section (all connections named L, S, RS, +24 V and 0 V) must be securely separated and guided away from the wires of
the relay section (terminals of blocks A and B: 14105).
12.1.3. Supply voltage
The supply voltage is connected to terminal +24 V
and 0 V. To safeguard the controller, the +24 V terminal should be protected with a 5 A fuse. The controller and the machine should be off-line before
beginning the installation.
The supply voltage must conform to the requirements of EN 60204-1, i.e. it must bridge a 20 ms
interruption of the supply network. When considering
the supply voltage, it must be one of the following:
SELV (Safety-Extra-Low-Voltage) or PELV (Protective-Extra-Low-Voltage) in accordance with IEC 3644-41.
12.1.4. Earth connection
The earth of every SafeC 200 / SafeC 400 unit is
realized through the connection to the mounting rail.
Consequently it is important to ensure, that the
mounting rail has a good earth connection.
www.cedes-sa.com
© CEDES Safety & Automation AG
SafeC 200 / SafeC 400
Operation Manual
12.1.5. Status outputs
All status output terminals are designated with an L.
The output voltage is equivalent to the supply voltage minus ca. 2.5 V.
Important safety advice:
The status outputs are not safety outputs.
solid-state outputs limit the minimal voltage to -39V
(nominal against earth potential on hat rail).
Surge suppressors affect the switch off time of contractors and may therefore increase significantly the
total response time. This is especially true when
using diodes.
Important safety advice:
The stop time of the hazardous movement must be
verified!
12.1.6. Safety contacts (block A+B)
Only the terminals 14-15, 24-25, 34-35, 44-45, 5455, 64-65, 74,-75 and 84-85 are to be handled as
safety contacts.
Small currents should not be switched over contacts
which have previously switched high currents.
To prevent an overload of the safety contacts, an
appropriate protective circuitry (fuse for every contact: 10 A fast blow, 6 A slow blow) and / or a surge
suppression circuitry is recommended over the load.
Through the use of EDM, it is possible to switch
external "power" contactors within the safety circuit.
Such contactors often deal with large inductive
loads, which during the switching off phase can create large potential peaks. For this reason surge
suppressors are highly recommended.
Important safety advice:
The safety relay contacts switch through two terminals (e.g. see Figure 8, Pin 64-Pin 65). The safety
PNP semiconductor outputs are supplied internal
with 24 V and signal only on one output terminal
(e.g. see Figure 9, Pin 65).
This feature has to be considered when a SafeC400 with safety relay outputs is replaced with a
SafeC-400 with safety PNP outputs (SafeC 4002P5C or -4P).
12.1.7. Surge Suppressors
Important safety advice:
Surge suppressors must be connected parallel to
the external contactors (Figure 9). They may never
be connected parallel to either block A or B (of
SafeC 200 - SafeC 400)
Guidance values for surge suppressors are:
Supply voltage [V]
Resistor R
[Ώ]
Condenser C
[μF]
24
100
2.2
115 – 230
220
0.2
12.1.8.
Testing SafeC 200 - SafeC 400
The SafeC 200 / SafeC 400 control unit complies
with safety category 2 and 4 based on EN 13849-1.
According to EN 13849-1 the correct operation of
the safety function must be checked at regular intervals via super ordinate controls. The frequency of
this check is based on the results of the danger
analysis, respectively risk analysis of the machine
(EN ISO 12100-1 und DIN EN ISO 14121-1). In
addition to when starting the machine this test must
be done before each dangerous cycle, as well as
periodically during operation, if this is what the risk
analysis and the operation mode indicate.
The SafeC 400 controller units are supplied with
redundant safety contacts. This means, should a
contact fuse, the dangerous action will still be
stopped through the opening of the second contact
located in series.
The SafeC 200 controller units feature only one contact per path. In accordance with EN 13849-1 such a
control unit must be tested within each machine
cycle and an output must indicate that a breakdown
(fusing of the contacts) is present, and respectively
report this error to a higher level controller.
Important safety advice:
On all SafeC 200 units the status contact L10 must
be connected to the machine controller which can
further communicate a possible failure. Within each
machine cycle the safety circuit (Block A and Block
B) must be opened (manual or automatically [e.g.
+24V on the terminal "Res" according to Figure 10])
and the machine controller must test if output L10 is
high (L10 =+24 V). If the output is low (L10 = 0 V),
an error has occurred and the machine should not
be started from the machine controller, or respectively must be stopped immediately. More detailed
information for a correct installation of a category 2
controller is available at CEDES Safety & Automation.
When using varistors, suppressor- or zener diodes,
it has to be considered that these components are
designed for an operating voltage of 24 VDC and
the protective voltage level does not fall below -60
VDC. SafeC 400 controllers equipped with OSSD
© CEDES Safety & Automation AG
www.cedes-sa.com
17
SafeC 200 / SafeC 400
Operation Manual
As a basic rule to increase reliability, it is recommended to use safety components with integrated
gold contacts.
12.1.9. Start button
On every SafeC 200 or SafeC 400 unit a start button
may be connected (chapter 7). When used, this
must be connected to the terminals S11-S12. A start
may also be initiated by providing a +24V pulse to
terminal S12 (Pulse length manual start: min 60 ms).
In the event that a light curtain is connected, the
start pulse should not occur earlier than 300 ms
after the protective field is no longer interrupted. The
release for the start pulse is signalled on the status
output L1.
12.1.10. Two hand start
If a two hand start is configured it must be connected in accordance with the diagram in Figure 13.
At present the connection of a two hand console has
been realized for the terminals: S31-S32, S33-S34
The connected two hand control must satisfy all the
requirements of EN 574.
A two hand control can only be configured with a
SafeC 400 controller (category 4 according to EN
13849-1). Two hand controls for category 2 (EN
13849-1) are, according to EN574, not defined.
S34 S32 S31 S33
To connect safety components, the following terminals are available:
S13-S14, S15-S16
S31-S32, S33-S34
S35-S36, S37-S38
If a CEDES Safety & Automation Basic configuration
version is used, depending on the application, there
may be more safety components defined than necessary. In such a case it is sufficient to bridge the
respective terminals of the missing components (on
the SafeC 200 or SafeC 400 controller), during the
installation, directly in the control cabinet.
The SafeC 400 unit is fitted with redundant safety
switches as well as redundant emergency stop buttons. Their wires are short-circuit and cross fault
monitored, and when used a synchronous switching
signal with the same timing sequence will be expected.
In the case of a SafeC 200 unit one channel wiring
will suffice, and two independent safety switching
devices can be implemented on both circuits of a
safety component (see Figure 10). For example one
emergency STOP button each can be connected to
terminals S13-S14 and another one to S15-S16. If
only one circuit is used, then the second one has to
be bridged (see Figure 10).
Important safety advice:
Using a SafeC 200 controller with Safety Prevention
it must be checked by a super ordinate control on
terminal L13, for whether the expected status
changes of the connected Safety Prevention switch
take
place
within
a
machine
cycle.
Figure 13: Connection of a two hand control switch (according to
EN 574: Typ IIIc)
12.1.11. Safety components
The connected safety components (e.g. safety
switches for securing doors and emergency stop
buttons) must satisfy the relevant standards for application within safety areas:
Emergency stop button: EN 418
Safety switch:
EN 60947-5-1,EN13849-1
Light curtains:
EN 61496
etc.
as well as the requirements of the safety analysis.
Depending on the requirements of the application,
the actual safety switch may be a cable pull switch,
a position switch or an emergency stop button.
Essential is that the components contain 2 force
guided, normally closed (NC) contacts, and that
they are approved for the relevant safety category according to EN 13849-1.
18
www.cedes-sa.com
© CEDES Safety & Automation AG
SafeC 200 / SafeC 400
Operation Manual
Important safety advice:
The RS 485 interface may not undertake any safety
relevant functions.
12.1.12. Blanking and Safety Prevention
lamp
If the Safety Prevention function (chapter 9.1) is
configured, then the workers on a machine must be
made aware (through a lamp). The connection of the
Safety Prevention lamp must take place on the terminal +24 V and S28 (Figure 14).
In the case of blanking, an appropriate lamp must be
connected to terminal S10 (Figure 14).
Safety
Prevention
Blanking
+24 V
+24 V
S10
S28
12.2. Legal regulations
The requirements of the safety regulations of electrical engineering, the local employer's liability insurance association and the international standard IEC
60204 are to be taken into full consideration.
13. RS 485 interface
All SafeC 200 and SafeC 400 controllers have an
RS 485 interface (Figure 7: Connections RSA and
RSB). This interface is used, if an attached Safex00
or Micro400 light curtain should take over a measuring function in addition to it's safety function. This
measuring function has to be configured (chapter
9.3). Only then, will the measuring information be
transmitted.
13.1. Measuring function
Figure 14: Connection of Blanking lamps and Safety Prevention
lamps
The brightness of this lamp must meet the requirements of EN 61496.
In accordance with regulations, the function of these
lamps must be monitored. This means, the current
(I) of the individual lamp must remain between certain values (Imin < I < Imax, see chapter 20).
12.1.13. Connection RS 485 interface
When connecting the RS 485 interface, a twisted
pair data communication cable with a wave impedance of 100-120 Ohm must be used. In addition this
cable must be completed at the input to the PLC
with a 150 Ohm resistor (Figure 15).
The connection of the RS 485 interface on the side
of the SafeC 200 or SafeC 400 controller is already
solved internally.
PLC
Connection
resistor
150 Ohm
If the measuring function is configured and if a
Safex00 or Micro400 safety light curtain is attached,
then after every protective field scan, the highest
and the lowest interrupted beam will be communicated through the RS 485 interface.
The RS 485 interface is not bus-compatible. This
means, that the interface sends information during
an interruption of the protective field and not upon
request. The RS 485 interface can only write, and
not read.
The protocol of the RS 485 interface looks as follows:
#MEAS>FST/LST
Definition of symbols:
Table 4
Abbreviation Meaning
Value area
Memory
[byte]
FST
First interrupted beam
000 ... 255
1
LST
Last interrupted beam
000 ... 255
1
The first beam has the number 0 and is located directly next to the cable input.
Table 5
Example
Protective field not interrupted
Twisted
pair
Wave impedance:
100 - 120 Ohm
Figure 15: Connection to RS 485 interface
© CEDES Safety & Automation AG
Protocol
no protocol
1st beam and 10th beam interrupted
#MEAS>000/009
5th beam until 33rd beam interrupted
#MEAS>004/032
The protocol is sent after every protective field scan,
during the emitter pause. The duration of a protecwww.cedes-sa.com
19
SafeC 200 / SafeC 400
Operation Manual
tive field scan depends on the protective field length,
respectively the number of beams. The following
table shows the times, within which the protocol is
periodically sent:
For example: The lighting of LED 3 indicates that
the safety switch S13/S14-S15/S16 is open. If this is
not so, the lighting of LED 3 can be attributed to a
short-circuit or cross-fault of the supply wires.
Table 6
Number of
beams
5
10
15
20
25
30
35
40
45
50
55
60
65
70
75
80
85
90
95
100
105
110
115
120
125
130
135
140
145
150
Protective field height
(pitch 10 mm)
[mm]
50
100
150
200
250
300
350
400
450
500
550
600
650
700
750
800
850
900
950
1000
1050
1100
1150
1200
1250
1300
1350
1400
1450
1500
The following fault conditions will lead to a lock-out
mode of the SafeC 200 or SafeC 400 controller:
Cycle time
[ms]
20.40
21.70
23.00
24.30
25.60
26.90
28.20
29.50
30.80
32.10
33.40
34.70
36.00
37.30
38.60
39.90
41.20
42.50
43.80
45.10
46.40
47.70
49.00
50.30
51.60
52.90
54.20
55.50
56.80
58.10
Table 8
Nr. Fault
profile
10 (red)
P (red /
green
blinking)
Short-circuit
or
cross-fault of the
supply lines of an
individual
safety
component.
Check connections
Lock-out
only
with
SafeC 400, SafeC 200
opens the contacts
2
10 (red)
P (red /
green
blinking)
The two output
signals of a safety
component do not
correspond.
Short-circuit,
cable
breakage or faulty safety
switch
Lock-out
only
with
SafeC 400, SafeC 200
opens the contacts
3
10 (red)
P (red /
green
blinking)
Electrical connection to Safex00 /
Micro400
safety
light curtain interrupted.
- Check supply lines
and connectors
- Possibly swap emitter
and receiver connections
4
10 (red)
P (red /
green
blinking)
Defect
in
the
electronics of the
Safex00/Micro400
light curtain or the
SafeC x00 controller module.
Switch off + on controller
unit, respectively Reset.
If continuously lit, contact
your
nearest
CEDES Safety & Automation partner.
6
No LED
No power supply
Check power supply
7
10 (red)
P (red /
green
blinking)
Low voltage identification
High
voltage
identification
The supply voltage is
lower / higher than the
permissible voltage (<
0.85 UN, i.e. > 1.15 UN,
+ 5% ripple).
8
10 (red)
P (red /
green
blinking)
Fault in the safety The safety prevention
prevention lamp
lamp is defective or has
not been connected
correctly.
9
10 (red)
P (red /
green
blinking)
Fault at the con- Check circuit and power
troller relay block supply. If okay, controlA and/or B
ler must be repaired.
10
10 (red)
P (red /
green
blinking)
EDM configured, Connect Normally Clobut not connected sed contact from external contactor to EDM
terminal
11
10 (red)
P (red /
green
blinking)
EDM
connected Configure EDM
but not configured
Table 7
Connection speed (Baud)
19200
Data bits
8
Parity
none
Protocol
Xon/Xoff
Stop bits
1
14. Fault identification through LED
In the event of a fault condition, it will be indicated
through the illumination of LED 10 (red) and P
(red / green blinking). At the same time, the respective status output L10 will switch from high to low. In
this situation both relay blocks are open, and the
controller unit is now in the so-called lock-out mode.
Following this, you must check which components
could have led to this fault.
20
Measures and instructions
1
(Data for larger heights available upon request)
13.2. Configuration of the RS 485 interface
Fault description
The lock-out mode of a SafeC 200 or SafeC 400 unit
may be reset by turning off-/on the power supply, or
temporarily applying 24 V for a minimum of 0.5 sec.
to the reset input terminal (Res).
www.cedes-sa.com
© CEDES Safety & Automation AG
SafeC 200 / SafeC 400
Operation Manual
Further diagnosis possibilities are given with the
CEDES Safety & Automation software Configuration
Tool in combination with the OptiLink (see chapter
16). If the SafeC 400 or SafeC 200 unit has a lockout, the exact fault description can be determined
with these tools. An exact description is available at
any time after a lock-out, as long as the SafeC 400
or SafeC 200 unit is still in the lock-out condition.
17. Inspection and service
The SafeC 200 or SafeC 400 controllers are built
electronically and do not need preventive maintenance
17.1. Inspections
The SafeC 200 or SafeC 400 controllers have to be
tested periodically – in accordance with valid regulations - by qualified and trained personnel to discover
prohibited manipulations or unauthorized modifications.
15. Selection tables
Table 9
CEDES S&A
Part number
[RA Cat. Nr.]
Controller type
Safety category /
Performance Level
(acc. to EN 13849-1)
103 558
[445L-103558]
SafeC 200-3C
2/d
To conduct such a test you can also contact your
CEDES Safety & Automation or Rockwell Automation partner.
103 559
[NA]
SafeC 200- 5C
2/d
17.2. Decommissioning
103 560
[445L-103560]
SafeC 200-8C
2/d
103 561
[445L-103561]
SafeC 400-4P
4/e
103 562
[445L-103562]
SafeC 400- 3C
4/e
103 563
[NA]
SafeC 400-5C
4/e
103 564
[445L-103564]
SafeC 400- 8C
4/e
104 561
[445L-104561]
SafeC 400-2P5C
4/e
The SafeC 200 or SafeC 400 controller can only be
removed, when the machine or the equipment is
completely shut down and can no longer be put into
operation without tools.
If a controller has to be disposed of, it can be simply
dismantled. The separated materials can be recycled according to state of the art technology and
corresponding regulations of the country it was used
in.
NA = not available
16. Accessories / Components
Table 10
CEDES S&A
Part number
[RA Cat. Nr.]
Description
104 698
[445L-104698]
Connector kit SafeC x00
103 282
[445L-103282]
Software Configuration Tool
(download from www.cedes-sa.com)
104 565
[445L-AF6150]
USB OptiLink
104 158 xxxx
[NA]
Safe200 Standard safety light curtain
103 566 xxxx
103 567 xxxx
103 568 xxxx
[445L-xC/Exxxx]
Safe400 Standard safety light curtain
Safe400 Cascade safety light curtain
Safe400 Perimeter safety light curtain
Micro400 safety light curtain
NA = not available
For further accessories, please contact your nearest
CEDES Safety & Automation sales partner.
© CEDES Safety & Automation AG
www.cedes-sa.com
21
SafeC 200 / SafeC 400
Operation Manual
18. Product labels
All necessary safety information can be found on the
two product labels, and the Configuration Control
Label, which can be found on both sides of every
controller module
Example:
Basic configuration CAG A001
19. Configuration
ment
Control
Docu-
All configuration data can be found in the configuration control document (e.g. Figure 19 – Figure 23).
The device number is unique and identifies the
SafeC x00 controller with the corresponding configuration control document. It is printed on both the
controller product labels and for newly configured
SafeC x00 controllers on the respective configuration control document. The configuration control
document contains, alongside the logical connections for output blocks A and B, also their delay time
t(delay) and their reaction time t(cLC) and t(cSW).
Important safety advice:
In the event that a SafeC 200 or SafeC 400 controller is reconfigured by authorized personnel using an
OptiLink, a new “Configuration Control Document”
must be printed out and added to the machine control cabinet documentation. The device number
found on each SafeC x00 product label, is the important connection identification number to the documentation and therefore must be entered during
the configuration process. The "Configuration
Changed" label shown below also needs to be attached to the controller.
Basic configuration CAG A057
Figure 16: Product label 1
Important safety advice:
If the controller has a "Configuration Changed" label
attached, it indicates that the controller has been
reconfigured. The corresponding configuration and
reaction times can be found in the separately provided “Configuration Control Document”.
Figure 17: Product label 2
Explanation of terminology
Table 11
Lot-no
Safety level according to EN 13849-1 /
EN62061
Prod. date YYMMDD/
Order confirmation number/
Code of final inspection /
Serial number
Device No.
Unit number
Response time
Response time tR see chapter 11
SW
Software Version
HW
Hardware Version
Power class
Power supply
Temperature range
Operating temperature range
Enclosure rating
IP sealing level
AC15
Max. switching capacity according to
EN 60947-5-1
Safety level
22
Figure 18: Label "Configuration changed"
www.cedes-sa.com
© CEDES Safety & Automation AG
SafeC 200 / SafeC 400
Operation Manual
Figure 19: Configuration Control Document – SafeC 400 8C CAG A001 Basic configuration
© CEDES Safety & Automation AG
www.cedes-sa.com
23
SafeC 200 / SafeC 400
Operation Manual
Figure 20: Configuration Control Document – SafeC 400 3C CAG A001 Basic configuration (only Block A available)
24
www.cedes-sa.com
© CEDES Safety & Automation AG
SafeC 200 / SafeC 400
Operation Manual
Figure 21: Configuration Control Document – SafeC 400 5C CAG A001 Basic configuration (only Block B available)
© CEDES Safety & Automation AG
www.cedes-sa.com
25
SafeC 200 / SafeC 400
Operation Manual
Figure 22: Configuration Control Document – SafeC 400 4P CAG A001 Basic configuration
26
www.cedes-sa.com
© CEDES Safety & Automation AG
SafeC 200 / SafeC 400
Operation Manual
Figure 23: Configuration Control Document – SafeC 400 2P5C CAG A001 Basic configuration
© CEDES Safety & Automation AG
www.cedes-sa.com
27
SafeC 200 / SafeC 400
Operation Manual
20. Technical data
General data
Nominal working mode
Temperature range
Outputs to safety components
Continuous process
Operating temp.: 0 ... +55°C
Stock temp.: -25 ... +70°C
Nominal voltage at: S11
Enclosure rating according
EN 60529:Housing
IP20
Terminals
IP20
Conductor
connection: Wire cross section: 1.7 mm (max)
6-pin, terminal strip (plug(2.27 mm2)
in)
Terminal screw thread: M2
Conductor
connection: Wire cross section: 2.4 mm (max)
5-pin, terminal strip (plug(4.52 mm2)
in)
Terminal screw thread: M3
Quick mounting
Top hat rail 35 mm (EN 50022)
Net weight
SafeC 200-3C:
1020 g
SafeC 200-5C:
1070 g
SafeC 200-8C:
1170 g
SafeC 400-3C:
1110 g
SafeC 400-5C:
1190 g
SafeC 400-8C:
1380 g
SafeC 400-2P5C: 1220 g
SafeC 400-4P:
1040 g
Housing dimensions
105 x 112 x 135 mm
Housing material
Polycarbonate non-reinforced
Vibration
according
to Amplitude: 0.35 mm
EN60068-2-6
Frequency: 10 … 55Hz
Shock resistant according Acceleration: 100 ms-2
to EN 60068-2-29
Impulse length: 16 ms
Number of shocks: 1000 per
direction
Installation position
No restrictions
Approvals
TÜV, UL
Interfaces
RS 485, optical (OptiLink)
24 VDC at UN
Nominal voltage at: S13, S15,
24 VDC at UN (coded)
S17, S19, S31, S33, S35, S37
Minimum voltage at: S12, S22, 18 VDC at activated
S24, S26, S41
controller
Relay outputs
Number of contacts
Typical response time of a controller’s safety light curtain electronics t(cLC)
Typical response time of a controller’s safety switch electronics
t(cSW)
Contact type
Contact material
AgCdO (+ 5 m gold plated)
Max. switching capacity
1'150 VA / 120 W
Max. switching current
5A
Max. switching voltage
AC 230 / 240 V; DC 300 V
Output nominal voltage
DC: see arc-limiting graph
(Figure 24)
≥4V
≥ 10 mA
Power supply UN
24 VDC (EN 60204-1)
at 5 % residual ripple
0.85 ... 1.15 UN
Switching of low loads
(contact with 5m Au)
Block A
Continuous current Ith
with simultaneous switching
Block B
Continuous current Ith
with simultaneous switching
Switching capacity acc. DC 13
(EN 60947-5-1, 0.1 Hz, 24 V)
Switching capacity acc. AC 15
(EN 60947-5-1, 0.1 Hz, 220 V)
Electronic lifespan according
AC 15 at 2 A, 230 VAC
Current consumption
Max. 500 mA (Semiconductor
outputs unloaded)
Allowed switching capacity
Weight and packaging
Dispatch packaging
250 mm x 165 mm x 165 mm
Dispatch weight
Net weight + 250 g
Inputs
Max. power consumption at
max. supply voltage
Controller protection (external)
Control current into:
S12, S22, S24, S26, S41
Start pulse duration (min.)
Control current into:
S14, S16, S18, S20, S32,
S34, S36, S38
Maximum cable length for
safety switches
Blanking Lamp
Minimum current at S10
Maximal current at S10
Safety Prevention Lamp
Minimum current at S28
Maximum current at S28
28
15 W
Mechanical lifespan
5 A slow
Block A: 3 NO
Block B: 5 NO
≤ 32 ms
See attached CEDES Safety
& Automation Configuration
Control Document
(figure 19-21 & 23)
≤ 96 ms
See attached CEDES Safety
& Automation Configuration
Control Document
(figure 19-21 & 23)
relay, force guided
(EN 50205)
5 A (1 contact)
2.5 A (≥ 2 contacts)
5 A (1 contact)
2.5 A (≥ 2 contacts)
Block A, Block B:
7A DC / 24 V
Block A, Block B:
4 A AC / 240 V
Block A, Block B
105 operating cycles
(EN 60947-5-1)
Block A, Block B:
Max. 1200 switching / h
10 x 106 operating cycles
Switch on delay after switching
5s
on the power supply
Switch off delay after switching
 40 ms
off the power supply
5 mA each (min.)
60 ms
12 mA each at UN (coded)
50 m out and back (total 100 m)
20 mA with lamp switched on
1 A with lamp switched on
20 mA with lamp switched on
1 A with lamp switched on
www.cedes-sa.com
© CEDES Safety & Automation AG
SafeC 200 / SafeC 400
Operation Manual
Semiconductor outputs (PNP)
Status outputs:
Terminals: L1-L16
Typical response time of a controller’s safety light curtain electronics t(cLC)
Typical response time of a controller’s safety switch electronics
t(cSW)
Safety outputs (see Figure 9)
PNP (short-circuit protected)
Voltage: +24 VDC  20 %
Max. current: 30 mA
≤ 25 ms
See attached Configuration
Control Document (figure 22)
Safety Related Parameter
Probability of a dangerous
failure per hour PFH
5.0 E-9 1/h
4.0 E-9 1/h
SafeC x00t &
plus
Safe400 or
Micro400
≤ 89 ms
See attached Configuration
Control Document (figure 22)
4P (short-circuit protected
and with cross-fault detection)
Voltage: +24 VDC  20 %
Max. current: 400 mA
20.1. Arc-limiting graph
Characteristic curves for DC and AC applications (Relay output):
Block A (FSD A) + Block B (FSD B):
Lichtbogengrenzkurve
Arc-limiting graph
Lebensdauerkurve
Electrical service life
Figure 24: Arc-limiting graph and lifespan curve for Block A and Block B (certain switching off, no standing arc, max. 1 operating cycle / s)
© CEDES Safety & Automation AG
www.cedes-sa.com
29
SafeC 200 / SafeC 400
Operation Manual
21. Index
A
M
Accessories............................................................ 21
Application restrictions ............................................. 4
Arc-limiting graph ............................................. 29, 31
Automatic start ....................................................... 11
B
Basic software version ............................................. 5
Blanking ..................................................... 13, 19, 31
Block A ......................................................... 5, 12, 29
Block B ......................................................... 5, 12, 29
Bypass ............................................................. 11, 31
C
CE-conformity .......................................................... 2
Configuration control label ..................................... 22
configuration Tool .................................................. 21
Configuration Tool ................................................. 13
Configuring a SafeC controller module .................... 6
Connection diagram ................................................. 6
Contact multiplication ......................................... 9, 12
Controller section ..................................................... 5
D
Decommissioning .................................................. 21
Delay time .............................................................. 13
Dimensions ........................................................ 4, 28
Display elements ................................................... 14
E
Earth connection .................................................... 16
EDM ......................................................... 5, 9, 12, 31
Emergency stop button .......................................... 12
ESPE ..................................................................... 31
F
Fault identification .................................................. 20
Force guiding ................................................... 12, 31
FSD .................................................................... 5, 14
H
Hardware version ..................................................... 5
Height measurement ....................................... 13, 31
I
Manual start ........................................................... 11
O
OptiLink ............................................................... 3, 5
OSSD .............................................................. 13, 31
Other functions ...................................................... 13
Override ................................................................. 11
Over-ride ................................................................ 31
P
PLC ........................................................................ 12
PNP ..................................... 5, 12, 13, 14, 15, 29, 31
Prevention ............................................................. 12
R
Relay outputs......................................................... 28
Relay section ............................................................5
Reset input terminal .............................................. 20
Risk analysis.......................................................... 12
RS 485 interface .................................................... 19
S
Safety components ................................................ 18
Safety Prevention .............. 11, 12, 13, 14, 15, 19, 31
Safety prevention lamp .................................... 11, 19
Safety switch ......................................................... 13
Selection tables ..................................................... 21
Semiconductor....................................................... 29
Special functions ................................................... 11
Start button ............................................................ 18
Start type ............................................................... 11
Status indication .................................................... 14
Status outputs.............................................. 5, 13, 17
Supply voltage ....................................................... 16
Surge suppressor .....................................................9
Switch-off-time ................................................. 28, 29
T
Technical data ................................................. 28, 30
Time delay ................................................................5
Two hand console ................................................. 11
Two hand start ................................................. 11, 18
Typical applications ..................................................4
Installation .............................................................. 16
Intensity............................................................ 14, 15
L
Label ...................................................................... 13
LED ........................................................ 4, 13, 15, 20
Lifespan curve........................................................ 29
Lock-out ..................................................... 12, 20, 31
30
www.cedes.com
© CEDES
SafeC 200 / SafeC 400
Operation Manual
22. Glossary
accordance with chapter 4.1 of the mentioned
standard a contact is considered opened if its contact distance is > 0.5 mm. Otherwise, the contact is
regarded as closed.
Arc-limiting graph
The load field of a relay contact can be divided into
two regions: One in which there is no standing arc
and the other where there is a high probability of a
standing arc (spark between contacts) being present. Figure 24 shows that the correlation between
current and voltage is not linear. When operating
with DC, always bear in mind this correlation. Preventative measures to suppress this switching arc
need to be carried out at the source (origin).
Height measurement
Blanking
Lock-out
Some applications require that a portion of the protective area of a SafeX00 or Micro400 light curtain is
allowed to be interrupted, without causing safety
block A or B to open. A typical example for such an
application is a break press.
In general, three different types of Blanking are defined:
 Fixed blanking
 Floating blanking
 Reduced resolution blanking
Lock-out is defined as an unallowable condition.
Unallowable conditions arise if, e.g. during operation
a hardware failure develops in the light curtain, the
relay is not functioning correctly or another safety
relevant failure has occurred (see chapter 13).
Bypass see Safety Prevention
Muting
Text from IEC 61496-1:
Temporary automatic suspension of a safety function(s) by a safety-related parts of the control system.
OSSD
EDM
= External Device Monitoring
Text from IEC 61496-1:
A means by which the electro-sensitive protective
equipment (ESPE) monitors the state of control devices which are external to the ESPE.
FSD
= Final Safety Switching Device
Component of the machine's safety-related control
system that interrupts the circuit to the machine
primary control element (MPCE) when the output
signal switching device (OSSD) goes to the OFFstate.
ESPE
= Electro-Sensitive Protective Equipment
Text from EN 61496-1:
An assembly of devices and/or components working
together for protective tripping or presence-sensing
purposes and comprising as a minimum:
– a non-contact sensing device;
– controlling/monitoring devices;
– output signal switching devices (OSSD).
Force guiding
Principally the specifications are met in the EN
50205: 1997. A force guided contact is accordingly
made up of at least 1 NC and 1 NO contact. A force
guided contact block is made up of (n+1) NC and
(m+1) NO contacts. In a force guided contact block,
all contacts are force guided with one another. In
© CEDES Safety & Automation AG
In addition to the safety function, the CEDES Safety
& Automation Safe200 or Safe400 safety light curtains can be simultaneously implemented parallel for
height measuring. If the height measuring function is
configured, the first and last interrupted beams of
the interrupted protected area are sent through the
RS 485 interface.
= Output Signal Switching Device
Text from EN 61496-1:
The component of the electro-sensitive protective
equipment (ESPE) connected to the machine control
system which, when the sensing device is actuated
during normal operation, responds by going to the
OFF-state.
Override
Override is similar to Muting, i.e. an override of a
safety function. The switching off of light curtains
can be realised e.g. with two door signals. Using an
override lamp signals that the light curtains are inactive. As soon as the doors are re-closed, the light
curtain becomes active again.
PNP
The PNP output switches the positive supply voltage
to the load. The other side of the load is already
connected to the negative supply voltage.
Safety Prevention
Through the activation of the safety prevention key
switch, one or more safety devices may be overridden. Which devices this key switch affects, is determined by the configuration. The overriding of safety
equipment may have safety consequences.
www.cedes-sa.com
31
SafeC 200 / SafeC 400
Operation Manual
CEDES Safety & Automation AG
A Rockwell
CEDES Safety
Automation
& Automation
Company
AG
A Rockwell
Science
Park Automation Company
CH-7302
Landquart
– Schweiz
Science
Park
[email protected]
CH-7302 Landquart – Schweiz
www.cedes-sa.com
[email protected]
www.cedes-sa.com
Tech Support: +41 81 307 82 13
[email protected]
Tech Support: +41 81 307 82 13
[email protected]
www.cedes-sa.com
www.cedes-sa.com