SCHNEIDER ELECTRIC MODICON M580 (01) PDF MANUAL


Post questions, comments, reviews or errors in the comment box below.

Your File is Ready … Download PDF

CLICK HERE TO DOWNLOAD SCHNEIDER ELECTRIC MODICON M580 (01) PDF MANUAL


PDF Content Summary: schneider-electric.com Modicon M580 QGH60283 09/2019 Modicon M580 Safety System Planning Guide Original instructions 09/2019 The information provided in this documentation contains general descriptions and/or technical characteristics of the performance of the products contained herein. This documentation is not intended as a substitute for and is not to be used for determining suitability or reliability of these products for specific user applications. It is the duty of any such user or integrator to perform the appropriate and complete risk analysis, evaluation and testing of the products with respect to the relevant specific application or use thereof. Neither Schneider Electric nor any of its affiliates or subsidiaries shall be responsible or liable for misuse of the information contained herein. If you have any suggestions for improvements or amendments or have found errors in this publication, please notify us. You agree not to reproduce, other than for your own personal, noncommercial use, all or part of this document on any medium whatsoever without permission of Schneider Electric, given in writing. You also agree not to establish any hypertext links to this document or its content. Schneider Electric does not grant any right or license for the personal and noncommercial use of the document or its content, except for a non-exclusive license to consult it on an "as is" basis, at your own risk. All other rights are reserved. All pertinent state, regional, and local safety regulations must be observed when installing and using this product. For reasons of safety and to help ensure compliance with documented system data, only the manufacturer should perform repairs to components. When devices are used for applications with technical safety requirements, the relevant instructions must be followed. Failure to use Schneider Electric software or approved software with our hardware products may result in injury, harm, or improper operating results. Failure to observe this information can result in injury or equipment damage. © 2019 Schneider Electric. All rights reserved. 2 QGH60283 09/2019 Table of Contents Safety Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7 About the Book. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11 Chapter 1 M580 Safety System Supported Modules . . . . . . . . . . . 13 M580 Safety System Certified Modules . . . . . . . . . . . . . . . . . . . . . . . 14 Non-Interfering Modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16 Chapter 2 Selecting an M580 Safety System Topology . . . . . . . . . 21 Designing an M580 Safety System Topology . . . . . . . . . . . . . . . . . . . 22 M580 Safety Topologies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25 Chapter 3 M580 Safety CPU and Coprocessor. . . . . . . . . . . . . . . . 31 3.1 M580 Safety CPU & Coprocessor Physical Features . . . . . . . . . . . . . 32 Physical Description of the M580 Safety CPU & Coprocessor . . . . . . 33 LED Displays for the M580 Safety CPU and Copro . . . . . . . . . . . . . . 38 Ethernet Ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40 USB Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43 SFP Socket . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45 SD Memory Card. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46 3.2 M580 Safety CPU & Coprocessor Performance Characteristics. . . . . 48 M580 CPU & Copro Performance Characteristics . . . . . . . . . . . . . . . 48 Chapter 4 M580 Safety Power Supplies . . . . . . . . . . . . . . . . . . . . . 53 Physical Description of the M580 Safety Power Supplies. . . . . . . . . . 54 M580 Safety Power Supply Performance Characteristics. . . . . . . . . . 58 M580 Safety Power Supply Alarm Relay. . . . . . . . . . . . . . . . . . . . . . . 63 Chapter 5 M580 Safety I/O Modules. . . . . . . . . . . . . . . . . . . . . . . . 65 5.1 M580 Safety I/O Modules Physical Description. . . . . . . . . . . . . . . . . . 66 Physical Description of M580 I/O Modules . . . . . . . . . . . . . . . . . . . . . 66 5.2 M580 Safety I/O Performance Characteristics . . . . . . . . . . . . . . . . . . 72 BMXSAI0410 Safety Analog Input Module Performance Characteristics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73 BMXSDI1602 Safety Digital Input Module Performance Characteristics 75 BMXSDO0802 Safety Digital Output Module Performance Characteristics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77 BMXSRA0405 Safety Digital Relay Output Module . . . . . . . . . . . . . . 79 QGH60283 09/2019 3 Chapter 6 Installing the M580 Safety PAC . . . . . . . . . . . . . . . . . . . . 81 6.1 Installing M580 Racks and Extender Modules. . . . . . . . . . . . . . . . . . . 82 Planning the Installation of the Local Rack . . . . . . . . . . . . . . . . . . . . . 83 Mounting the Racks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88 Extending a Rack. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90 6.2 Installing M580 CPU, Copro, Power Supply, and I/O. . . . . . . . . . . . . . 92 Installing the CPU and Coprocessor . . . . . . . . . . . . . . . . . . . . . . . . . . 93 Installing a Power Supply Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96 Installing M580 Safety I/O . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100 Installing an SD Memory Card in a CPU . . . . . . . . . . . . . . . . . . . . . . . 102 Chapter 7 Upgrading M580 Safety CPU Firmware . . . . . . . . . . . . . . 105 Upgrading CPU Firmware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105 Chapter 8 Operating an M580 Safety System. . . . . . . . . . . . . . . . . . 107 8.1 Process, Safety and Global Data Areas in Control Expert. . . . . . . . . . 108 Data Separation in Control Expert . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108 8.2 Operating Modes, Operating States, and Tasks . . . . . . . . . . . . . . . . . 111 M580 Safety PAC Operating Modes . . . . . . . . . . . . . . . . . . . . . . . . . . 112 M580 Safety PAC Operating States. . . . . . . . . . . . . . . . . . . . . . . . . . . 117 Start Up Sequences. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122 M580 Safety PAC Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126 8.3 Building an M580 Safety Project . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 129 Building an M580 Safety Project . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130 Safe Signature . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131 8.4 Locking M580 Safety I/O Module Configurations. . . . . . . . . . . . . . . . . 138 Locking M580 Safety I/O Module Configurations. . . . . . . . . . . . . . . . . 138 8.5 Initializing Data in Control Expert. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 140 Initializing Data in Control Expert for the M580 Safety PAC . . . . . . . . 140 8.6 Working with Animation Tables in Control Expert . . . . . . . . . . . . . . . . 141 Animation Tables and Operator Screens. . . . . . . . . . . . . . . . . . . . . . . 141 8.7 Adding Code Sections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145 Adding Code to an M580 Safety Project . . . . . . . . . . . . . . . . . . . . . . . 146 Diagnostic Request . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150 Swap and Clear Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153 4 QGH60283 09/2019 8.8 Application Security Management. . . . . . . . . . . . . . . . . . . . . . . . . . . . 156 Application Password Protection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157 Safe Area Password Protection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 161 Section Protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164 Firmware Protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166 Data Storage Protection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 168 Loss of Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170 8.9 Workstation Security Management . . . . . . . . . . . . . . . . . . . . . . . . . . . 174 Managing Access to Control Expert . . . . . . . . . . . . . . . . . . . . . . . . . . 175 Access rights . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 178 8.10 M580 Safety Project Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 187 Project Settings for an M580 Safety Project in Control Expert . . . . . . 187 Appendices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 191 Appendix A IEC 61508. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 193 General Information on the IEC 61508 . . . . . . . . . . . . . . . . . . . . . . . . 194 SIL Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 196 Appendix B System Objects. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 201 M580 Safety System Bits . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 202 M580 Safety System Words . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 204 Glossary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 207 Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 225 QGH60283 09/2019 5 6 QGH60283 09/2019 Safety Information Important Information NOTICERead these instructions carefully, and look at the equipment to become familiar with the device before trying to install, operate, service, or maintain it. The following special messages may appear throughout this documentation or on the equipment to warn of potential hazards or to call attention to information that clarifies or simplifies a procedure. QGH60283 09/2019 7 PLEASE NOTE Electrical equipment should be installed, operated, serviced, and maintained only by qualified personnel. No responsibility is assumed by Schneider Electric for any consequences arising out of the use of this material. A qualified person is one who has skills and knowledge related to the construction and operation of electrical equipment and its installation, and has received safety training to recognize and avoid the hazards involved. BEFORE YOU BEGIN Do not use this product on machinery lacking effective point-of-operation guarding. Lack of effective point-of-operation guarding on a machine can result in serious injury to the operator of that machine. WARNING UNGUARDED EQUIPMENT ● Do not use this software and related automation equipment on equipment which does not have point-of-operation protection. ● Do not reach into machinery during operation. Failure to follow these instructions can result in death, serious injury, or equipment damage. This automation equipment and related software is used to control a variety of industrial processes. The type or model of automation equipment suitable for each application will vary depending on factors such as the control function required, degree of protection required, production methods, unusual conditions, government regulations, etc. In some applications, more than one processor may be required, as when backup redundancy is needed. Only you, the user, machine builder or system integrator can be aware of all the conditions and factors present during setup, operation, and maintenance of the machine and, therefore, can determine the automation equipment and the related safeties and interlocks which can be properly used. When selecting automation and control equipment and related software for a particular application, you should refer to the applicable local and national standards and regulations. The National Safety Council's Accident Prevention Manual (nationally recognized in the United States of America) also provides much useful information. In some applications, such as packaging machinery, additional operator protection such as point- of-operation guarding must be provided. This is necessary if the operator's hands and other parts of the body are free to enter the pinch points or other hazardous areas and serious injury can occur. Software products alone cannot protect an operator from injury. For this reason the software cannot be substituted for or take the place of point-of-operation protection. Ensure that appropriate safeties and mechanical/electrical interlocks related to point-of-operation protection have been installed and are operational before placing the equipment into service. All interlocks and safeties related to point-of-operation protection must be coordinated with the related automation equipment and software programming. 8 QGH60283 09/2019 NOTE: Coordination of safeties and mechanical/electrical interlocks for point-of-operation protection is outside the scope of the Function Block Library, System User Guide, or other implementation referenced in this documentation. START-UP AND TEST Before using electrical control and automation equipment for regular operation after installation, the system should be given a start-up test by qualified personnel to verify correct operation of the equipment. It is important that arrangements for such a check be made and that enough time is allowed to perform complete and satisfactory testing. WARNING EQUIPMENT OPERATION HAZARD ● Verify that all installation and set up procedures have been completed. ● Before operational tests are performed, remove all blocks or other temporary holding means used for shipment from all component devices. ● Remove tools, meters, and debris from equipment. Failure to follow these instructions can result in death, serious injury, or equipment damage. Follow all start-up tests recommended in the equipment documentation. Store all equipment documentation for future references. Software testing must be done in both simulated and real environments. Verify that the completed system is free from all short circuits and temporary grounds that are not installed according to local regulations (according to the National Electrical Code in the U.S.A, for instance). If high-potential voltage testing is necessary, follow recommendations in equipment documentation to prevent accidental equipment damage. Before energizing equipment: ● Remove tools, meters, and debris from equipment. ● Close the equipment enclosure door. ● Remove all temporary grounds from incoming power lines. ● Perform all start-up tests recommended by the manufacturer. QGH60283 09/2019 9 OPERATION AND ADJUSTMENTS The following precautions are from the NEMA Standards Publication ICS 7.1-1995 (English version prevails): ● Regardless of the care exercised in the design and manufacture of equipment or in the selection and ratings of components, there are hazards that can be encountered if such equipment is improperly operated. ● It is sometimes possible to misadjust the equipment and thus produce unsatisfactory or unsafe operation. Always use the manufacturer’s instructions as a guide for functional adjustments. Personnel who have access to these adjustments should be familiar with the equipment manufacturer’s instructions and the machinery used with the electrical equipment. ● Only those operational adjustments actually required by the operator should be accessible to the operator. Access to other controls should be restricted to prevent unauthorized changes in operating characteristics. 10 QGH60283 09/2019 About the Book At a Glance Document Scope This Safety System Planning Guide describes the modules of the M580 Safety system with special regard to how they meet the Safety requirements of the IEC 61508. It provides detailed information on how to install, run, and maintain the system correctly in order to help protect human beings as well as to help prevent damage to environment, equipment, and production. This documentation is intended for qualified personnel familiar with Functional Safety and Control Expert XL Safety. Commissioning and operating the M580 Safety System may only be performed by persons who are authorized to commission and operate systems in accordance with established Functional Safety standards. Validity Note This document is valid for EcoStruxureTM Control Expert 14.1 or later. For product compliance and environmental information (RoHS, REACH, PEP, EOLI, etc.), go to schneider-electric.com/green-premium. The technical characteristics of the devices described in the present document also appear online. To access the information online: Step Action 1 Go to the Schneider Electric home page schneider-electric.com. 2 In the Search box type the reference of a product or the name of a product range. ● Do not include blank spaces in the reference or product range. ● To get information on grouping similar modules, use asterisks (*). 3 If you entered a reference, go to the Product Datasheets search results and click on the reference that interests you. If you entered the name of a product range, go to the Product Ranges search results and click on the product range that interests you. 4 If more than one reference appears in the Products search results, click on the reference that interests you. 5 Depending on the size of your screen, you may need to scroll down to see the datasheet. 6 To save or print a datasheet as a .pdf file, click Download XXX product datasheet. The characteristics that are presented in the present document should be the same as those characteristics that appear online. In line with our policy of constant improvement, we may revise content over time to improve clarity and accuracy. If you see a difference between the document and online information, use the online information as your reference. QGH60283 09/2019 11 Related Documents Title of documentation Reference number M580 Safety Manual QGH46982 (English), QGH46983 (French), QGH46984 (German), QGH46985 (Italian), QGH46986 (Spanish), QGH46987 (Chinese) EcoStruxureTM Control Expert Safety Block Library QGH60275 (English), QGH60278 (French), QGH60279 (German), QGH60280 (Italian), QGH60281 (Spanish), QGH60282 (Chinese)

Modicon Controllers Platform Cyber Security, Reference Manual EIO0000001999 (English), EIO0000002001 (French), EIO0000002000 (German), EIO0000002002 (Italian), EIO0000002003 (Spanish), EIO0000002004 (Chinese)

You can download these technical publications and other technical information from our website at schneider-electric.com/en/download. Modicon M580, Hardware, Reference Manual EIO0000001578 (English), EIO0000001579 (French), EIO0000001580 (German), EIO0000001582 (Italian), EIO0000001581 (Spanish), EIO0000001583 (Chinese)

Modicon M580 Standalone System Planning Guide for Frequently Used Architectures HRB62666 (English), HRB65318 (French), HRB65319 (German), HRB65320 (Italian), HRB65321 (Spanish), HRB65322 (Chinese) Modicon M580 System Planning Guide for Complex Topologies NHA58892 (English), NHA58893 (French), NHA58894 (German), NHA58895 (Italian), NHA58896 (Spanish), NHA58897 (Chinese)

Unity Loader, User Manual 33003805 (English), 33003806 (French), 33003807 (German), 33003809 (Italian), 33003808 (Spanish), 33003810 (Chinese) EcoStruxureTM Control Expert, Operating Modes 33003101 (English), 33003102 (French), 33003103 (German), 33003104 (Spanish), 33003696 (Italian), 33003697 (Chinese)

EcoStruxureTM Control Expert, System Bits and Words, Reference Manual EIO0000002135 (English), EIO0000002136 (French), EIO0000002137 (German), EIO0000002138 (Italian), EIO0000002139 (Spanish), EIO0000002140 (Chinese)

12 QGH60283 09/2019 Modicon M580 Supported modules QGH60283 09/2019 M580 Safety System Supported Modules Chapter 1 M580 Safety System Supported Modules Introduction An M580 safety project can include both safety modules and non-safety modules. You can use: ● Safety modules in the SAFE task. ● Non-safety modules only for the non-safe tasks (MAST, FAST, AUX0, and AUX1). NOTE: Only non-safety modules that do not interfere with the safety function can be added to a safety project. Use only the Control Expert programming software of Schneider Electric for programming, commissioning, and operating your M580 safety application. ● Control Expert L Safety provides all the functionality of Control Expert L and can be used with BMEP582040S and BMEH582040S safety CPUs. ● Control Expert XL Safety provides all the functionality of Control Expert XL and can be used for the entire range of BMEP58•040S and BMEH58•040S safety CPUs. This chapter lists the safety and non-safety modules supported by the M580 safety system. What Is in This Chapter? This chapter contains the following topics:Topic Page M580 Safety System Certified Modules 14 Non-Interfering Modules 16 QGH60283 09/2019 13 Supported modules M580 Safety System Certified Modules Certified Modules The M580 safety PAC is a safety-related system certified by TÜV Rheinland Group, according to: ● SIL3/IEC 61508/IEC 61511 ● SIL CL3/IEC 62061 ● PLe, Cat. 4 / ISO 13849-1 ● CIP Safety IEC 61784-3 It is based on the M580 family of programmable automation controllers (PACs). The following Schneider Electric M580 safety modules are certified: ● BMEP584040S standalone CPU ● BMEP582040S standalone CPU ● BMEH582040S Hot Standby CPU ● BMEH584040S Hot Standby CPU ● BMEH586040S Hot Standby CPU ● BMEP58CPROS3 co-processor ● BMXSAI0410 analog input module ● BMXSDI1602 digital input module ● BMXSDO0802 digital output module ● BMXSRA0405 digital relay output module ● BMXCPS4002S power supply ● BMXCPS4022S power supply ● BMXCPS3522S power supply NOTE: In addition to the safety modules listed above, you can also include non-interfering, non- safety modules (see page 16) in your safety project. You can find the most recent information on the certified product versions on the TÜV Rheinland Group website: certipedia.com or fs-products.com. 14 QGH60283 09/2019 Supported modules Replacing a CPU It is possible to replace a BME•58•040S CPU with another BME•58•040S. However, the replacement does not work if the following limitations are exceeded : ● number of I/O ● number of I/O drops ● number of variables ● application memory size Refer to the topics: ● Configuration Compatibility (see Modicon M580 Hot Standby, System Planning Guide for, Frequently Used Architectures) in the Modicon M580 Hot Standby System Planning Guide for Frequently Used Architectures for a description of Control Expert applications that are compatible with safety and Hot Standby CPUs. ● M580 CPU & Copro Performance Characteristics (see page 48) in the Modicon M580 Safety System Planning Guide for a description of CPU limitations. QGH60283 09/2019 15 Supported modules Non-Interfering Modules Introduction An M580 safety project can include both safety modules and non-safety modules. You can use non-safety modules only for non-safe tasks. Only non-safety modules that do not interfere with the safety function can be added to a safety project. Definition of a Non-Interfering Module CAUTION INCORRECT USE OF SAFETY-RELATED DATA Confirm that neither input data nor output data from non-interfering modules are used for controlling safety-related outputs. Non-safety modules can process only non-safety data. Failure to follow these instructions can result in injury or equipment damage. A non-interfering module is a module which cannot interfere with the safety function. For in-rack M580 modules (BMEx, BMXx, PMXx, and PMEx), there are two types of non-interfering modules: ● Type 1: A type 1 module can be installed in the same rack as safety modules (wherever the safety module is placed, in the main or extension rack). ● Type 2: A type 2 non-interfering module cannot be installed in the same main rack as safety modules (wherever the safety module is placed, in the main or extension rack). NOTE: Type 1 and Type 2 modules are listed on TÜV Rheinland website at fs- products.tuvasi.com. For not in-rack Mx80 modules, all Ethernet equipment (DIO or DRS) can be considered as non- interfering, and therefore can be used as part of an M580 safety system. Type 1 Non-Interfering Modules for SIL3 Applications The following non-safety modules can qualify as type-1 non-interfering modules in an M580 safety system. NOTE: The list of type-1 non-interfering non-safety modules may change from time to time. For the current list, visit the TÜV Rheinland website at fs-products.tuvasi.com. Module type Module Reference Backplane 4 slots BMEXBP0400 Backplane 8 slots BMEXBP0800 Backplane 12 slots BMEXBP1200 Backplane 4 slots BMXXBP0400 Backplane 6 slots BMXXBP0600 16 QGH60283 09/2019 Supported modules Module type Module Reference Backplane 8 slots BMXXBP0800 Backplane 12 slots BMXXBP1200 Backplane 6 slots with dual slots for redundant power supplies BMEXBP0602 Backplane 10 slots with dual slots for redundant power supplies BMEXBP1002 Communication: Performance X80 Ethernet Drop Adapter 1 CH BMXCRA31210 Communication: Performance X80 Ethernet Drop Adapter 1 CH BMECRA31210 Communication: Ethernet module with standard web services BMENOC0301 Communication: Ethernet module with IP Forwarding BMENOC0321 Communication: Ethernet module with FactoryCast web services BMENOC0311 Communication: Rack extender module BMXXBE1000 Communication: AS-Interface BMXEIA0100 Communication: Global Data BMXNGD0100 Communication: Fiber Converter MM/LC 2CH 100Mb BMXNRP0200 Communication: Fiber Converter SM/LC 2CH 100Mb BMXNRP0201 Communication: M580 IEC 61850 Communication module BMENOP0300 Counting: SSI module 3 CH BMXEAE0300 Counting: High speed counter 2 CH BMXEHC0200 Counting: High speed counter 8 CH BMXEHC0800 Motion: Pulse Train Output 2 independent CH BMXMSP0200 Analog: Ana 8 In Current Isolated HART BMEAHI0812 Analog: Ana 4 Out Current Isolated HART BMEAH00412 Analog: Ana 4 U/I In Isolated High Speed BMXAMI0410 Analog: Ana 4 U/I In Non Isolated High Speed BMXAMI0800 Analog: Ana 8 U/I In Isolated High Speed BMXAMI0810 Analog: Ana 4 In U/I 4 Out U/I BMXAMM0600 Analog: Ana 2 U/I Out Isolated BMXAMO0210 Analog: Ana 4 U/I Out Isolated BMXAMO0410 Analog: Ana 8 Out Current No Isolated BMXAMO0802 Analog: Ana 4 TC/RTD Isolated In BMXART0414.2 Analog: Ana 8 TC/RTD Isolated In BMXART0814.2 Discrete: Dig 8 In 220 Vac BMXDAI0805 Discrete: Dig 8 In 100 to 120 Vac Isolated BMXDAI0814 Discrete: Dig 16 In 24Vac/24Vdc Source BMXDAI1602 Discrete: Dig 16 In 48Vac BMXDAI1603 QGH60283 09/2019 17 Supported modules Module type Module Reference Discrete: Dig 16 In 100 to 120 Vac 20 pin BMXDAI1604 Discrete: Dig 16 Supervised inputs channels 100 to 120 Vac 40 pin BMXDAI1614 Discrete: Dig 16 Supervised inputs channels 200 to 240 Vac 40 pin BMXDAI1615 Discrete: Dig 16 Outputs Triacs 100 to 240 Vac 20 pin BMXDAO1605 Discrete: Dig 16 Outputs Triacs 24 to 240 Vac 40 pin BMXDAO1615 Discrete: Dig 16 In 24Vdc Sink BMXDDI1602 Discrete: Dig 16 In 48Vdc Sink BMXDDI1603 Discrete: Dig 16 In 125Vdc Sink BMXDDI1604 Discrete: Dig 32 In 24Vdc Sink BMXDDI3202K Discrete: Dig 64 In 24Vdc Sink BMXDDI6402K Discrete: Dig 8 In 24Vdc 8Q Source Tr BMXDDM16022 Discrete: Dig 8 In 24Vdc 8Q Relays BMXDDM16025 Discrete: Dig 16 In 24Vdc 16Q Source Tr BMXDDM3202K Discrete: Dig 16Q Trans Source 0.5A BMXDDO1602 Discrete: Dig 16 O Trans Sink BMXDDO1612 Discrete: Dig 32Q Trans Source 0.1A BMXDDO3202K Discrete: Dig 64Q Trans Source 0.1A BMXDDO6402K Discrete: Dig 8Q 125Vdc BMXDRA0804T Discrete: Dig 8Q 24 Vdc or 24 to 240 Vac Isolated Relays BMXDRA0805 Discrete: Dig 16 non-isolated relay output channels 5 to 125 Vdc or 25 to 240 Vac BMXDRA0815 Discrete: Dig 16Q Relays BMXDRA1605 Discrete: Dig NC Output 5 to 125 Vdc or 24 to 240 Vac Relays BMXDRC0805 Discrete: Dig 16In 24/125Vdc TSTAMP BMXERT1604 Mx80 Network Option Switch BMENOS0300 Turbomachinery Frequency Input 2 CH BMXETM0200 18 QGH60283 09/2019 Supported modules Type 2 Non-Interfering Modules for SIL2/3 Applications The following in-rack non-safety modules can be considered to be type-2 non-interfering modules in an M580 safety system. NOTE: The list of type-2 non-interfering non-safety modules may change from time to time. For the current list, visit the TÜV Rheinland website at fs-products.tuvasi.com. Module type Module Reference Communication: Standard X80 Ethernet Drop Adapter 1 CH BMXCRA31200 Standard AC power supply BMXCPS2000 Standard Isolated DC power supply BMXCPS2010 High Power Isolated 24 to 48 VDC power supply BMXCPS3020 Standard Redundant 125VDC power supply BMXCPS3522 Standard Redundant 24048VDC power supply BMXCPS4022 Standard Redundant AC power supply BMXCPS4002 High Power AC power supply BMXCPS3500 High Power DC power supply BMXCPS3540T Communication: Bus module 2 RS485/232 Port BMXNOM0200 CANopen X80 Master BMECXM0100 Weight module PMESWT0100 Profibus DP/DPV1 Master module support PMEPXM0100 Partner diagnostic module PMXCDA0400 NOTE: All authorized equipment of an M580 system that are linked to safety modules via Ethernet are considered as non-interfering. As a consequence, all modules from Quantum and STB Advantys ranges (not pluggable in the same rack as M580 safety modules) are Type 2 non- interfering modules. QGH60283 09/2019 19 Supported modules 20 QGH60283 09/2019 Modicon M580 Selecting a Topology QGH60283 09/2019 Selecting an M580 Safety System Topology Chapter 2 Selecting an M580 Safety System Topology Introduction This chapter describes the topologies supported by an M580 safety system. What Is in This Chapter? This chapter contains the following topics:Topic Page Designing an M580 Safety System Topology 22 M580 Safety Topologies 25 QGH60283 09/2019 21 Selecting a Topology Designing an M580 Safety System Topology Support for Standalone PACs An M580 safety system supports only SIL3 applications for standalone PACs. A standalone PAC includes a single CPU with coprocessor. NOTE: For a description of available racks and their permitted usage refer to the topic Rack Usage (see page 83). Placing Safety Modules in the RIO Main Ring Install M580 safety modules only in the RIO main ring, which includes: ● The local main rack. Standalone safety PACs can also include up to seven optional local extended racks. ❍ The local main rack must include a safety power supply, a safety CPU, and a safety coprocessor. ❍ For a standalone safety PAC, the local main rack and the local extended racks may also include safety I/O. An M580 Hot Standby PAC does not support I/O on the local main rack, or local extended racks. NOTE: The maximum distance between the main rack and the last extended rack is 30 m. ● Up to 31 RIO drops for the BMEH586040S Hot Standby CPU (16 RIO drops for the BME•584040S CPU; 8 RIO drops for the BME•582040S CPU), each consisting of a remote main rack and an optional remote extended rack. Any rack with safety modules also requires a safety power supply. NOTE: A rack that includes safety modules may also include type 1 non-interfering modules (see page 16). However, type 2 non-interfering modules (see page 19) may not be placed on the same rack as safety modules. Type 2 non-interfering modules may be placed on racks without safety modules–for example, in racks of distributed equipment. Other non-safe modules may not be included in an M580 safety system. Extending a Main Rack Use BMXXBE1000 rack extender modules to daisy chain together main and extended racks. Connect each pair of extender modules using BMXXBC•••K connector cables, and terminate each end of the chain with TSXELYEX line terminators. Local Rack Communications with an RIO Drop To support RIO drops in an M580 safety system, configure the M580 safety CPU as an NTP server, or as an NTP client (with another device configured as an NTP server). Without a properly set up clock (NTP), safety I/O communication may not operate correctly. 22 QGH60283 09/2019 Selecting a Topology Use a BM•CRA312•0 remote adapter module (a BM•CRA31200 for a remote rack hosting Non Interfering only modules, and a BM•CRA31210 adapter for remote rack hosting both non- interfering and/or safety I/O modules to connect the RIO drop to the RIO main ring. Connect each end of the RIO main ring to the two dual ports on the BME•58•040S safety CPU. If the connection is made via Cat5e copper cable, the maximum distance between drops is 100 m. NOTE: Alternatively, you can connect the local main rack to the BM•CRA312•0 remote adapter in the RIO drop by placing a BMXNRP020• fiber optic repeater module into each rack. Refer to the topic Using Fiber Converter Modules (see Modicon M580 Standalone, System Planning Guide for, Frequently Used Architectures) in the Modicon M580 Standalone System Planning Guide for Frequently Used Architectures for additional information. Connecting Two M580 Safety PACs A M580 safety system also supports peer-to-peer black channel communication between two safety PACs. Typically, this connection is made via a BMENOC0321 in each safety system. Refer to the peer-to-peer communications (see Modicon M580, Safety Manual) topic in the Modicon M580 Safety Manual for more information. NOTE: To support black channel communications between two PACs, enable the NTP service in both PACs. You can configure one PAC as the NTP server, and the other as the NTP client. Alternatively, you can configure each PAC as an NTP client, with another device configured as NTP server. Adding Distributed Equipment to an M580 Safety System You can include distributed equipment in your M580 safety system. Typically, distributed equipment is connected as either non-looping daisy chain, or a daisy chain loop. You can connect a distributed equipment daisy chain loop to the two network ports of one of the following modules on the RIO main ring: ● a BMENOC0301/11 Ethernet communications module. ● a BMENOS0300 Ethernet network option switch. ● a ConneXium dual ring switch. You can also use the service port of a BMENOC0301/11 Ethernet communications module, a BMENOS0300 Ethernet network option switch or the BME•58•040S safety CPU to connect distributed equipment in the shape of a non-looping daisy chain. NOTE: Place only type 1 and type 2 non-interfering modules in a distributed equipment network. Place safety modules only in the local rack (main or extended) and the RIO network. Exclude non- safe modules that are not type 1 or type 2 non-interfering modules from your safety project. Refer to the topic Selecting the Correct Topology (see Modicon M580 Standalone, System Planning Guide for, Frequently Used Architectures) in the Modicon M580 Standalone System Planning Guide for Frequently Used Architectures for additional information on connecting distributed equipment to an M580 CPU. QGH60283 09/2019 23 Selecting a Topology Adding CIP Safety Equipment to the M580 Safety System You can include CIP Safety I/O (CSIO) devices in your M580 safety system as CSIO distributed equipment. You can connect CSIO distributed equipment to the RIO main ring through: ● the service port of a CPU or a BM•CRA31210 X80 EIO adapter module. ● a BMENOS0300 Ethernet network option switch. ● a ConneXium Dual Ring Switch (DRS). Each type of I/O (CSIO, RIO, DIO) has its own limitation. To maintain an acceptable level of performance, it is recommended not to use the maximum of all I/O types in the same architecture. It is recommended that a typical M580 CIP Safety architecture is based on a remote or distributed topology. Recommended limitations are listed in table below: BMEP582040S BMEP584040S CSIO DIO Devices Devices The CSIO time contribution to the SAFE task is roughly 100 μs/equipment with a BMEP584040S CPU and 400 μs/equipment with a BMEP582040S CPU. 24 QGH60283 09/2019 RIO Drops CSIO Devices DIO Devices RIO Drops Recommended Remote Max Topology 10 10 8 32 10 16 Recommended Distributed Max Topology 16 61 2 64 61 2 Selecting a Topology M580 Safety Topologies Introduction The following diagrams present examples of M580 safety topologies. This collection of sample topologies does not include every potential topology supported by an M580 safety system. Refer to the Modicon M580 Standalone System Planning Guide for Frequently Used Architectures and the Modicon M580 System Planning Guide for Complex Topologies for additional information on how to set up an M580 topology. Extending the Local Main Rack The following diagram presents a local main rack, with two extended racks. Note that the M580 safety system supports a single local main rack plus up to seven extended racks over a maximum length of 30 m: 1 Local main rack with safety and type 1 non-interfering modules 2 Local extended rack with safety and type 1 non-interfering modules 3 Local extended rack with type 1 and type 2 non-interfering modules 4 BMXXBE1000 rack extender modules 5 TSXELYEX line terminators 6 BMXXBC•••K connector cables QGH60283 09/2019 25 Selecting a Topology High Availability I/O Topologies The following diagram presents an example of redundant I/O placed in the same RIO drop: 1 Local main rack 2 RIO drop 3 RIO main ring 4 Two redundant input modules in the same RIO drop 5 Two redundant output modules in the same RIO drop NOTE: Enable the NTP service for the M580 safety PAC to support black channel communication between the local main rack and RIO drops on the RIO main ring, and configure the time inside the PAC if the PAC is to be the NTP server. The safety PAC can be either the NTP server, or the NTP client (with another device configured as the NTP server). 26 QGH60283 09/2019 Selecting a Topology The following diagram presents an example of placing redundant I/O in two separate RIO drops: 1 Local main rack 2 RIO drop 3 RIO main ring 4 Two redundant input modules in separate RIO drops 5 Two redundant output modules in separate RIO drops NOTE: ● Schneider Electric recommends placing redundant safety I/O modules in separate RIO drops. ● Enable the NTP service for the M580 safety PAC to support black channel communication between the local main rack and RIO drops on the RIO main ring. The safety PAC can be either the NTP server, or the NTP client (with another device configured as the NTP server). QGH60283 09/2019 27 Selecting a Topology Peer-to-Peer Topology for Two Standalone Safety PACs The following diagram presents an example of how to connect two separate M580 safety PACs. In this example, a sensor linked to a safety input module in PAC 1 can be configured to cause a response by an actuator linked to a safety output module in PAC 2: 1 Standalone M580 safety PAC 1 2 M580 safety PAC 2 3 Black channel communication between PACs NOTE: To support black channel communications between the two PACs, enable the NTP service in both PACs. You can configure one PAC as the NTP server, and the other as the NTP client. Alternatively, you can configure each PAC as an NTP client, with another device configured as NTP server. 28 QGH60283 09/2019 Selecting a Topology Adding Distributed Equipment to the M580 Safety PAC You can add type 1 and type 2 non-interfering modules to your M580 safety project as distributed equipment, in either a non-looping daisy chain or a daisy chain loop design. The following diagram depicts an example of distributed equipment added as a non-looping daisy chain. In this example, the distributed equipment daisy chain connects to the PAC via the ETH2 and ETH3 EIO ports of a BMENOC0301/11 Ethernet communications module: 1 Local main rack with Ethernet backplane 2 RIO drop with safety modules and type 1 non-interfering modules 3 RIO main ring 4 Distributed equipment 5 Ring of distributed equipment QGH60283 09/2019 29 Selecting a Topology 30 QGH60283 09/2019 Modicon M580 M580 Safety CPU and Coprocessor QGH60283 09/2019 M580 Safety CPU and Coprocessor Chapter 3 M580 Safety CPU and Coprocessor Introduction This chapter describes the BME•58•040S CPUs and the BMEP58CPROS3 Coprocessor (Copro). What Is in This Chapter? This chapter contains the following sections: Section Topic Page 3.1 M580 Safety CPU & Coprocessor Physical Features 32 3.2 M580 Safety CPU & Coprocessor Performance Characteristics 48 QGH60283 09/2019 31 M580 Safety CPU and Coprocessor Section M580 Safety CPU & Coprocessor Physical Features 3.1 M580 Safety CPU & Coprocessor Physical Features Introduction This section describes the physical common features of the BME•58•040S CPUs and the BMEP58CPROS3 coprocessor (Copro). What Is in This Section? This section contains the following topics:Topic Page Physical Description of the M580 Safety CPU & Coprocessor 33 LED Displays for the M580 Safety CPU and Copro 38 Ethernet Ports 40 USB Port 43 SFP Socket 45 SD Memory Card 46 32 QGH60283 09/2019 M580 Safety CPU and Coprocessor Physical Description of the M580 Safety CPU & Coprocessor Position on the Local Rack Every M580 standalone SIL3 safety system requires one BME•58•040S CPU and one BMEP58CPROS3 coprocessor (Copro). The CPU requires two module slots and is placed in slots 0 and 1 immediately to the right of the power supply in the main local rack. The Copro also requires two module slots and is placed in slots 2 and 3 immediately to the right of the CPU. Both the CPU nor the Copro cannot be placed into any other slot locations or on any other rack. If there are extended racks in the local rack configuration, assign address 00 to the rack with the CPU and Copro. NOTE: Both the safety CPU and the Copro can be installed only on a BMEXBP•••• Ethernet rack. For a description of available M580 racks refer to the topic Local and Remote Racks in the Modicon M580 Hardware Reference Manual. CPU Front Panel BME•58•040S safety CPU supports both RIO and DIO scanning. CPU Physical features: Legend: Item Marking Description 1 – LED display (see page 38) for CPU status and diagnostics. 2 Mini-B USB connector (see page 43) to which you can attach a PC running Control Expert or Unity Loader, or an HMI. 3 Service RJ45 Ethernet connector (see page 40) for the service port. QGH60283 09/2019 33 M580 Safety CPU and Coprocessor Item Marking Description 4 Dual Port Dual RJ45 Ethernet connectors (see page 40) that support distributed equipment and RIO drops. 5 Dual Port SFP socket for copper or fiber-optic redundant link connection. 6 — Redundant link status LED. 7 — SD memory card (see page 46) slot. 8 — A/B/Clear rotary selector switch, used to designate a Hot Standby PAC as either PAC A or PAC B, or to clear the existing Control Expert application. Coprocessor Front Panel The BMEP58CPROS3 Coprocessor presents only an LED display on its front face. CPU & Copro Dimensions The BME•58•040S safety CPUs present the following physical dimensions: 34 QGH60283 09/2019 M580 Safety CPU and Coprocessor The BMEP58CPROS3 Copro presents the following physical dimensions. Unlike the CPU, the Copro does not present physical connectors or related labels NOTE: Consider the height of the CPU and Copro when you are planning the installation of the local rack. Both the CPU and Copro extend below the lower edge of the rack by: ● 29.49 mm (1.161 in.) for an Ethernet rack ● 30.9 mm (1.217 in.) for an X Bus rack QGH60283 09/2019 35 M580 Safety CPU and Coprocessor CPU Wiring Dimensions The BME•58•040S safety CPUs present the following dimensions when mounted on a DIN rail with cabling: Overall depth for the CPU is: ● 146 mm with cabling ● 156 mm with cabling plus DIN rail 36 QGH60283 09/2019 M580 Safety CPU and Coprocessor Copro Wiring Dimensions The BMEP58CPROS3 Copro presents the following dimensions when mounted on a DIN rail: QGH60283 09/2019 37 M580 Safety CPU and Coprocessor LED Displays for the M580 Safety CPU and Copro CPU LED Display A 10-LED display is located on the front panel of the CPU: NOTE: The Copro LED display is a sub-set of the CPU display, and includes the following LEDs: ● ERR ● DL ● SRUN ● SMOD LED Descriptions NOTE: Refer to the topics: ● M580 Safety CPU LED Diagnostics (see Modicon M580, Safety Manual) and M580 Coprocessor LED Diagnostics (see Modicon M580, Safety Manual) in the Modicon M580 Safety Manual for information on how to use the CPU and Copro LEDs to diagnose the state of the safety PAC. ● LED Diagnostics for M580 Hot Standby CPUs (see Modicon M580 Hot Standby, System Planning Guide for, Frequently Used Architectures) in the Modicon M580 Hot Standby System Planning Guide for Frequently Used Architectures for information on how to use the A, B, PRIM, STBY, and REMOTE RUN Hot Standby CPU LEDs. 38 QGH60283 09/2019 M580 Safety CPU and Coprocessor LED Indicator Applies to... Description CPU Copro RUN ✔ – ON: The CPU is managing its outputs, and at least one task is in the RUN state. ERR ✔ ✔ ON: The CPU has detected an internal CPU error (for example, no configuration, detected watchdog error, detected self test error.) I/O ✔ – ON: The CPU has detected an error, external to the CPU, in one or more I/O modules. DL (download) ✔ + ● ON: A firmware upgrade to the CPU, Copro, backplane or other in-rack module is in progress. ● OFF: No firmware upgrade in progress. BACKUP ✔ – ON: ● The memory card or CPU flash memory is missing or inoperable. ● The memory card is not usable (bad format, unrecognized type). ● The memory card or CPU flash memory content is inconsistent with the current application. ● The memory card has been removed and reinserted. ● A PLC → Project Backup... → Backup Clear command has been performed when no memory card is present. The BACKUP LED remains ON until the project is successfully backed up. OFF: The memory card or CPU flash memory content is valid, and the application in the execution memory is identical. ETH MS ✔ – MOD STATUS (green/red): Pattern indicates the Ethernet port configuration status. NOTE: With the detection of a recoverable error, the ETH MS LED can be green or red and on or off. ETH NS ✔ – NET STATUS (green/red): Pattern indicates the Ethernet connection status. FORCED I/O ✔ – ON: At least one input or output on a digital I/O module is forced. SRUN ✔ ✔ ON: The PAC is managing its safety outputs, and the SAFE task is in the RUN state. SMOD ✔ ✔ ● ON: The PAC is operating in safety mode (see page 112). ● FLASHING: The PAC is operating in maintenance mode (see page 113). ✔: Applies – : Does not apply. QGH60283 09/2019 39 M580 Safety CPU and Coprocessor Ethernet Ports Introduction There are three RJ45 Ethernet ports on the front of the CPU: one service port, and two device network ports. The ports share the characteristics described below. Common Characteristics All three ports have the same RJ45 connector and all use the same type of Ethernet cables. NOTE: The three Ethernet ports are connected to chassis ground, and the system requires an equipotential ground. Dust Cover To keep dust from entering the unused Ethernet ports, cover the unused ports with the stopper: Ethernet Ports Each RJ45 connector has a pair of LED indicators: 40 QGH60283 09/2019 M580 Safety CPU and Coprocessor The pin positions, pinouts, and cable connections are the same on all three RJ45 Ethernet ports: Pin Description 1 TD+ Pinout: 2 TD- 3 RD+ 4 not connected 5 not connected 6 RD- 7 not connected 8 not connected — shell/chassis ground NOTE: The TD pins (1 and 2) and the RD pins (3 and 6) are auto-MDIX enabled and automatically reverse their roles depending on the connected media (i.e., straight or crossed cables). The ports have an auto MDIX capability that automatically detects the direction of the transmission. Choose from these Ethernet cables to connect to the Ethernet ports: ● TCSECN3M3M••••: Cat 5E Ethernet straight-through shielded cable, rated for industrial use, CE- or UL-compliant ● TCSECE3M3M••••: Cat 5E Ethernet straight-through shielded cable, rated for industrial use, CE-compliant ● TCSECU3M3M••••: Cat 5E Ethernet straight-through shielded cable, rated for industrial use, UL-compliant The maximum length for a copper cable is 100 m. For distances greater than 100 m, use fiber optic cable. The CPU does not have any fiber ports on it. You may use dual ring switches or BMX NRP •••• fiber converter modules (see Modicon M580 Standalone, System Planning Guide for, Frequently Used Architectures) to handle the copper-fiber conversion. Ethernet Ports on Standalone CPUs On standalone CPUs, the ACTIVE LED is green. The LNK LED is either green or yellow, depending on the status: LED LED Status Description ACTIVE OFF No activity is indicated on the Ethernet connection. ON / blinking Data is being transmitted and received on the Ethernet connection. LNK OFF No link is established at this connection. ON green A 100 Mbps link* is established at this connection. ON yellow A 10 Mbps link* is established at this connection. * The 10/100 Mbps links support both half-duplex and full-duplex data transfer and autonegotiation. QGH60283 09/2019 41 M580 Safety CPU and Coprocessor Service Port The service port is the uppermost of the three Ethernet ports on the front panel of the CPU. This port can be used: ● To provide an access point that other devices or systems can use to monitor or communicate with the M580 CPU. ● As a standalone DIO port that can support a star, or daisy chain topology of distributed equipment. ● To mirror the CPU ports for Ethernet diagnostics. The service tool that views activity on the mirrored port may be a PC or an HMI device. NOTE: Use only the device network dual ports, and not the service port, to connect to the device network. Connecting the service port, either directly or through a switch/hub, to the device network may affect system performance. NOTE: The service port may not provide full performance and features that the Device Network ports on the CPU provide. Device Network Dual Ports You may use a Device Network port to support a star or daisy chain topology of distributed equipment. You may use both Device Network ports to support a ring topology. For details about distributed equipment architectures, refer to the Modicon M580 Standalone System Planning Guide for Frequently Used Architectures. When used as RIO ports, both ports connect the CPU to the main ring in an Ethernet daisy-chain loop or ring. For more information about RIO architectures, refer to the Modicon M580 Standalone System Planning Guide for Frequently Used Architectures (see Modicon M580 Standalone, System Planning Guide for, Frequently Used Architectures). Grounding Considerations Follow all local and national safety codes and standards. DANGER HAZARD OF ELECTRIC SHOCK If you cannot prove that the end of a shielded cable is connected to the local ground, the cable must be considered as dangerous and personal protective equipment (PPE) must be worn. Failure to follow these instructions will result in death or serious injury. 42 QGH60283 09/2019 M580 Safety CPU and Coprocessor USB Port Introduction The USB port is a high-speed, mini-B USB connector, version 2.0 (480 Mbps) that can be used for a Control Expert program or human-machine interface (HMI) panel. The USB port can connect to another USB port, version 1.1 or later. NOTE: Install M580 USB drivers before connecting the USB cable between the CPU and the PC. Transparency If your system requires transparency between the device connected to the USB port and the M580 device network, add a persistent static route in the device’s routing table. Example of a command to address a device network with IP address X.X.0.0 (for a Windows PC): route add X.X.0.0 mask 255.255.0.0 90.0.0.1 -p (In this case, X.X.0.0 is the network address used by the M580 device network, and 255.255.0.0 is the corresponding subnet mask.) Pin Assignments The USB port has the following pin positions and pinouts: Legend: Pin Description 1 VBus 2 D- 3 D+ 4 not connected 5 ground shell chassis ground QGH60283 09/2019 43 M580 Safety CPU and Coprocessor Cables Use a BMX XCA USB H018 (1.8 m/5.91 ft) or BMX XCA USB H045 (4.5 m/14.764 ft) cable to connect the panel to the CPU. (These cables have a type A connector on one side and the mini-B USB on the other side.) In a fixed assembly with an XBT-type console connected to the CPU, connect the USB cable to a protection bar (see Modicon X80, Racks and Power Supplies, Hardware Reference Manual). Use the exposed part of the shield or the metal lug on the BMX XCA cable to make the connection. 44 QGH60283 09/2019 M580 Safety CPU and Coprocessor SFP Socket Redundancy Link Port Connector Each Hot Standby CPU module includes one SFP socket, to which you can connect either a fiber optic or a copper transceiver: Refer to the Modicon M580 Hot Standby System Planning Guide for Frequently Used Architectures for information on installing and removing an SFP socket (see Modicon M580 Hot Standby, System Planning Guide for, Frequently Used Architectures), and a list of available SFP transceivers (see Modicon M580 Hot Standby, System Planning Guide for, Frequently Used Architectures). QGH60283 09/2019 45 M580 Safety CPU and Coprocessor SD Memory Card BMXRMS004GPF SD Memory Card The BMXRMS004GPF memory card is a 4 GB, Class A card rated for industrial use. The SD memory card slot resides behind the door on the front of the CPU. You can use a BMXRMS004GPF memory card for application and data storage. You can use a BMXRMS004GPF memory card for storage of: ● The M580 safety project application. ● Data for the non-safe tasks (MAST, FAST, AUX0, AUX1). NOTE: ● Data cannot be stored on the SD memory card for the SAFE task. ● The SD memory card is not included in the safety loop. You can insert and extract the card while power is ON and the PAC is in RUN mode. However, to avoid data losses, use system bit %S65 to make a system request to stop data access to the card before extracting it from the CPU. NOTE: Other memory cards, including those used in M340 CPUs, are not compatible with M580 CPUs. If you insert an incompatible SD memory card in the CPU: ● The CPU remains in NOCONF state (see Modicon M580, Hardware, Reference Manual). ● The CPU BACKUP LED turns ON. ● The memory card access LED remains blinking. The BMXRMS004GPF memory card is formatted specifically for the M580 CPUs. If you use this card with another CPU or tool, the card may not be recognized. Memory Card Characteristics The BMXRMS004GPF memory card presents the following characteristics: Characteristic Value global memory size 4 GB application backup size 200 MB data storage size 3.8 GB write/erase cycles (typical) 100,000 operating temperature range –40...+85 °C (–40...+185 °F) file retention time 10 years memory zone for FTP access data storage directory only NOTE: Due to formatting, wear-out, and other internal mechanisms, the actual available capacity of the memory card is slightly lower than its global size. 46 QGH60283 09/2019 M580 Safety CPU and Coprocessor Read/Write Card Switch The BMXRMS004GPF memory card has a read/write access switch along its non-beveled side edge, which you can use to help protect the card against non-permitted write access: 1 Read/write access switch Formatting the Memory Card The formatting procedure is described in Formatting the Memory Card topic in the EcoStruxureTM Control Expert System Block Library (see EcoStruxureTM Control Expert, System, Block Library). QGH60283 09/2019 47 M580 Safety CPU and Coprocessor Section M580 Safety CPU & Coprocessor Performance Characteristics 3.2 M580 Safety CPU & Coprocessor Performance Characteristics M580 CPU & Copro Performance Characteristics Safety CPU & Copro The BME•58•040S CPU and the BMEP58CPROS3 Coprocessor (Copro) provide the following performance characteristics in a SIL3 M580 safety solution: Performance Feature BME P582040S P584040S H582040S H584040S H586040S

Local racks 4 (1 main rack + up to 3 extended racks) 8 (1 main rack + up to 7 extended racks) 1 1 1 1 1 1

48 QGH60283 09/2019

RIO drops (max of 2 racks/drop: main rack + extended rack) 8 drops (up to 2 racks per drop) 16 drops (up to 2 racks per drop) 16 drops (up to 2 racks per drop) 8 drops (up to 2 racks per drop) 8 drops (up to 2 racks per drop) 8 drops (up to 2 racks per drop) 16 drops (up to 2 racks per drop) 16 drops (up to 2 racks per drop) 16 drops (up to 2 racks per drop) 16 drops (up to 2 racks per drop) 31 drops (up to 2 racks per drop) 31 drops (up to 2 racks per drop) 31 drops (up to 2 racks per drop) 31 drops (up to 2 racks per drop) 31 drops (up to 2 racks per drop) I/O Channels Discrete I/O 2048 4096 01 01 01 Analog I/O 512 1024 01 01 01 Expert 72 144 01 01 01 Ethernet Ports Backplane 1 1 1 1 1 Service 1 1 1 1 1 RIO 2 2 2 2 2

1. For M580 safety Hot Standby PACs, no I/O modules are supported in the local rack. 2. This data is included in both the safe and non-safe data areas. 3. Because the SAFE task exchanges data through backplane, there is a negative impact on performance. It takes 1ms to transfer 10KB for BMEH584040S and BMEH586040S and 2ms for BMEH582040S. 4. Application Program (non-safe) + Application Data (non-safe non-retain data only ) + Application Program (safe) + Application Data (Safe) is less than 64Mbytes. There is a global memory pool of 64 Mbytes on BMEH586040S CPU for Application Program and Application Data. 5. Maximum of Transfer data (non safe + safe) for redundant data is 4MB. 6. 2 GB without an external memory card. M580 Safety CPU and Coprocessor Performance Feature BME P582040S P584040S H582040S H584040S H586040S Control Max # of modules/devices 64 128 64 128 128 network Max input capacity 16 KB 24 KB 16 KB 24 KB 24 KB Max output capacity 16 KB 24 KB 16 KB 24 KB 24 KB Max FAST input capacity 3 KB 5 KB 3 KB 5 KB 5 KB Max FAST output capacity 3 KB 5 KB 3 KB 5 KB 5 KB Distributed equipment network 1. For M580 safety Hot Standby PACs, no I/O modules are supported in the local rack. 2. This data is included in both the safe and non-safe data areas. 3. Because the SAFE task exchanges data through backplane, there is a negative impact on performance. It takes 1ms to transfer 10KB for BMEH584040S and BMEH586040S and 2ms for BMEH582040S. 4. Application Program (non-safe) + Application Data (non-safe non-retain data only ) + Application Program (safe) + Application Data (Safe) is less than 64Mbytes. There is a global memory pool of 64 Mbytes on BMEH586040S CPU for Application Program and Application Data. 5. Maximum of Transfer data (non safe + safe) for redundant data is 4MB. 6. 2 GB without an external memory card. QGH60283 09/2019 49 Max # of modules/devices 61 61 61 61 61 Max input capacity 2 KB 8 KB 2 KB 2 KB 2 KB Max output capacity 2 KB 8 KB 2 KB 2 KB 2 KB Max CIP Safety devices 16 64 – – – Max CIP Safety connections 32 128 – – – Ethernet comm modules on local rack Max Eth Comm Modules 2 4 2 4 4 Max BMENOC0301/0311 2 3 2 3 3 Max BMENOC0321 2 2 2 2 2 M580 Safety CPU and Coprocessor Performance Feature BME P582040S P584040S H582040S H584040S H586040S Memory Non-safe application program 8 MB 16 MB 8 MB 16 MB 64 MB4 allocation (max) Safe application program 2 MB 4 MB 2 MB 4 MB 16 MB4 Non-safe data 768 KB 2048 KB 768 KB 2048 KB up to 65536 KB4 Max configurable retained data 768 KB 2048 KB 768 KB 2048 KB 4096 KB Max configurable redundant transfer data 1. For M580 safety Hot Standby PACs, no I/O modules are supported in the local rack. 2. This data is included in both the safe and non-safe data areas. 3. Because the SAFE task exchanges data through backplane, there is a negative impact on performance. It takes 1ms to transfer 10KB for BMEH584040S and BMEH586040S and 2ms for BMEH582040S. 4. Application Program (non-safe) + Application Data (non-safe non-retain data only ) + Application Program (safe) + Application Data (Safe) is less than 64Mbytes. There is a global memory pool of 64 Mbytes on BMEH586040S CPU for Application Program and Application Data. 5. Maximum of Transfer data (non safe + safe) for redundant data is 4MB. 6. 2 GB without an external memory card. 50 QGH60283 09/2019 768 KB 2048 KB 768 KB 2048 KB 4096 KB5 Safe data (non-retained data) 512 KB 1024 KB 512 KB 1024 KB 1024 KB4 Max configurable safe redundant transfer data 512 KB 1024 KB 512 KB 1024 KB 1024 KB5 Shared: Global -> Safe 16 KB 16 KB 16 KB2 16 KB2 16 KB2 Shared: Safe -> Global 16 KB 16 KB 16 KB2 16 KB2 16 KB2 Shared: Global -> Process 16 KB 16 KB 16 KB2 16 KB2 16 KB2 Shared: Process -> Global 16 KB 16 KB 16 KB2 16 KB2 16 KB2 Total Data Storage 4 GB6 4 GB6 4 GB6 4 GB6 4 GB6 M580 Safety CPU and Coprocessor Performance Feature BME P582040S P584040S H582040S H584040S H586040S Instruction MAST and FAST tasks: execution rate Boolean 10K instructions / ms 1. For M580 safety Hot Standby PACs, no I/O modules are supported in the local rack. 2. This data is included in both the safe and non-safe data areas. 3. Because the SAFE task exchanges data through backplane, there is a negative impact on performance. It takes 1ms to transfer 10KB for BMEH584040S and BMEH586040S and 2ms for BMEH582040S. 4. Application Program (non-safe) + Application Data (non-safe non-retain data only ) + Application Program (safe) + Application Data (Safe) is less than 64Mbytes. There is a global memory pool of 64 Mbytes on BMEH586040S CPU for Application Program and Application Data. 5. Maximum of Transfer data (non safe + safe) for redundant data is 4MB. 6. 2 GB without an external memory card. QGH60283 09/2019 51 40K instructions / ms 10K instructions / ms 40K instructions / ms 60K instructions / ms Typed 7.5K instructions / ms 30K instructions / ms 7.5K instructions / ms 30K instructions / ms 40K instructions / ms SAFE task: Boolean 10K instructions / ms 40K instructions / ms 10K instructions / ms3 40K instructions / ms3 40K instructions / ms3 Typed 7.5K instructions / ms 30K instructions / ms 7.5K instructions / ms3 30K instructions / ms3 30K instructions / ms3 Open field bus – – 0 0 0 Sensor Bus (AS-i) – – 16 16 16 M580 Safety CPU and Coprocessor 52 QGH60283 09/2019 Modicon M580 M580 Safety Power Supplies QGH60283 09/2019 M580 Safety Power Supplies Chapter 4 M580 Safety Power Supplies Introduction This chapter describes the M580 safety power supplies. What Is in This Chapter? This chapter contains the following topics:Topic Page Physical Description of the M580 Safety Power Supplies 54 M580 Safety Power Supply Performance Characteristics 58 M580 Safety Power Supply Alarm Relay 63 QGH60283 09/2019 53 M580 Safety Power Supplies Physical Description of the M580 Safety Power Supplies Use in M580 Safety Loop Use only a BMXCPS4002S, BMXCPS4022S, or BMXCPS3522S safety power supply in an rack that contains safety modules. You can use the safety power supply in an X Bus or Ethernet rack that is: ● a main local rack ● an extended local rack ● a main remote rack ● an extended remote rack You can use two safety power supply modules in Ethernet racks that support redundancy. The safety power supply requires two module slots and is placed in the left-most position in the rack. NOTE: For a description of available M580 racks refer to the topic Local and Remote Racks in the Modicon M580 Hardware Reference Manual. Power Supply Front Panel The M580 safety power supplies present the following front panel: 1 LED display panel 2 RESET button 3 Alarm relay contact 4 100...240 Vac main input power supply 5-pin connector 54 QGH60283 09/2019 M580 Safety Power Supplies LED ArrayThe M580 safety power supply modules present the following LED panel: The LED panel includes the following LED indicators: ● OK: Operating Status ● ACT: Activity ● RD: Redundancy Each LED has two states: ON (green) and OFF. Refer to the topic Power Supply LED Diagnostics (see Modicon M580, Safety Manual) in the M580 Safety Manual for information on how to use these LEDs to diagnose the state of the power supply. RESETPressing the RESET button on the power supply causes re-initialization of all modules in same rack as the power supply. If the M580 safety power supply module is in the main local rack, pressing the RESET button causes re-initialization of the CPU. NOTE: In a redundant design, with two M580 safety power supply modules, you can press the RESET button on either, or both, power supply modules to execute the reset function. Input Power Supply Connections For each M580 safety power supply, the following pin characteristics apply: ● 5 points ● Removable plug type: ❍ on the module: header with threaded flange ❍ plug terminal block with screw flange ● Pitch: 5.08 mm ● Minimum wire capability: 0.5 mm2...2.0 mm2 QGH60283 09/2019 55 M580 Safety Power Supplies The input power and pin assignments for each M580 safety power supply are as follows: Description BMXCPS4002S BMXCPS4022S BMXCPS3522S Main Input Power 100...240 Vac 24...48 Vdc 125 Vdc Pin 1 NC DC Line NC Pin 2 NC DC Line NC Pin 3 PE DC Neutral PE Pin 4 AC Neutral DC Neutral DC Neutral Pin 5 AC Line Earth DC Line NOTE: A plug terminal block is provided with the module in the shipping materials. Power Supply Dimensions The M580 safety power supplies present the following dimensions: 56 QGH60283 09/2019 M580 Safety Power Supplies Power Supply Wiring Dimensions The M580 safety power supplies present the following dimensions when wiring is considered: QGH60283 09/2019 57 M580 Safety Power Supplies M580 Safety Power Supply Performance Characteristics BMXCPS4002S Safety Power Supply The BMXCPS4002S safety power supply provides the following performance characteristics: Input characteristics Nominal Voltage 100...240Vrms Voltage range 85...132Vrms 170...264Vrms Frequency range 47...63Hz Masked input power outages Max 10ms @100Vrms-15% & @200Vrms-15% Typical Input apparent Power 130VA Typical input current 1.1Arms @115Vrms 0.55Arms @230Vrms

Inrush Current @25° @ 1st start-up Peak 30Arms @115Vrms 60Arms @230Vrms

58 QGH60283 09/2019

I2t (for rating external fuse) 1A2s @115Vrms 4A2s @230Vrms It (for rating external breaker) 0.1As @115Vrms 0.15As @230Vrms

Integrated Protection Internal non-accessible fuse located on L input Output characteristics MAX 3V3_BAC output current 5.5A (18.2W) MAX 24V_BAC output current 1.67A (40W) MAX Total output power 40W Detection Overload Yes - Disjunction Short-circuit Yes - Disjunction Overvoltage Yes - Disjunction Other characteristics Dielectric Primary/All Secondaries SELV / PELV Strength Primary/Ground SELV / PELV

Insulation Resistance Primary/All Secondaries 100MΩ Primary/Ground 100MΩ

M580 Safety Power Supplies BMXCPS4022S Safety Power Supply Input characteristics Nominal Voltage Type 24...48 Vdc Input Voltage Range 18...62.4 Vdc Efficiency max losses ≤7W (efficiency ≥84.8%) at maximum continuous load, over entire input voltage range, and temperature range Nominal Input Current 1.9 A @ 24 Vdc 1.0 A @ 48 Vdc

Inrush current at first start-up @25°C Peak current ≤60 A @ 24 Vdc ≤60 A @ 48 Vdc

QGH60283 09/2019 59

I2t (for rating external fuse) ≤ X A2s @ 24 Vdc ≤ X A2s @ 48 Vdc It (for rating external breaker) ≤ X As @ 24 Vdc ≤ X As @ 48 Vdc

Masked input power outages Any input power outage lasting at max: ● 1 ms at full load & minimum line voltage (i.e. 19.2 Vdc) ● 10 ms at full load & nominal line voltage (i.e. 24 or 48Vdc) Must not induce any change in the output characteristics. Period between interruptions 1 sec. Input Protection ● Protection against risk of fire: by a fuse mounted on the board, not accessible and not changeable by the user and located on DC+ input. Its rating is selected to comply with safety standards. It shall not be damaged during line noise withstand tests, under any circumstances. ● Protection against reverse input polarity: a built-in circuitry must protect the module. The internal (and eventual external) fuse(s) must not blow up. The power supply must start-up correctly when the right polarity is restored. Output characteristics: Output Nominal Voltage 24.35 V Output Steady-State Voltage Range 23.3...24.7 V over the entire input voltage range, over the full output load range, and over the full temperature range. Output Ripple and Noise 240 mV peak to peak (measured with a bandwidth ≥100 MHz, on the module connector pins. Continuous Output Current Range ● 1.63 A maximum ● 0 A minimum M580 Safety Power Supplies Output characteristics: Transient Output Current Capability 1.9 A maximum during 500 ms, period minimum 20 sec. Output impedance versus frequency 180 mΩ

Output Voltage Response to transient load on 24V_BAC For the following output load transient on 24V_BAC: ● Load variation I from minimum continuous output current limit to max transient output current limit (and vice versa).

60 QGH60283 09/2019 ● Transition time 4 μs – pulse width 500ms – period 20 sec. ● The transient output voltage on 24V_BAC must stay within the limits 23.0...25.0V, and the response time must be ≤ 50 ms. ● Whatever the value of the capacitive load on 24V_BAC in the specified limits.

Protection against output overload/short-circuit ● In case of any condition of overload or short-circuit on 24V_BAC (i.e. any case of level, duration, temperature, input voltage), the board must be protected from any damage. ● The overall maximum value of the overload detection threshold (i.e. including all tolerances, drifts, etc.) must be less than Imax.

● Imax = 2 A. Protection against overvoltage Disjunction of the power supply for a rise of the output reaching 30.0 Vdc ±.8 V. External Capacitive Load Capability All the above characteristics must be fulfilled with the following external capacitive load value. This feature must be considered notably for slope-up, regulation loop stability and overload detection/protection. 11500 μF capacitive value. M580 Safety Power Supplies BMXCPS3522S Safety Power Supply Input characteristics: Nominal Voltage Type 125 Vdc Input Voltage Range 100...150 Vdc Efficiency max losses ≤7W (efficiency ≥84.8%) @max continuous load, over entire input voltage range & temperature range Nominal Input Current 0.6 A @ 125 Vdc

Inrush current at first start-up @25°C Peak current ≤60 A @ 125 Vdc I2t (for rating external fuse) ≤ X A2s @ 125 Vdc

QGH60283 09/2019 61 It (for rating external breaker) ≤ X As @ 4 Vdc Masked input power outages Any input power outage lasting at max : ● 1 ms at full load & minimum line voltage (i.e. 100 Vdc) ● 10 ms at full load & nominal line voltage (i.e. 125 Vdc) Must not induce any change in the output characteristics. Period between interruptions 1 sec. Input Protection ● Protection against risk of fire : by a fuse mounted on the board, not accessible and not changeable by the user and located on DC+ input. Its rating is selected to comply with safety standards. It shall not be damaged during line noise withstand tests, under any circumstances. ● Protection against reverse input polarity: a built-in circuitry must protect the module. The internal (and eventual external) fuse(s) must not blow up. The power supply must start-up correctly when the right polarity is restored. BMXCPS3522 /S High Power Output Nominal Voltage 24.35 V Output Steady-State Voltage Range 23.3...24.7 V over the entire input voltage range, over the full output load range and over the full temperature range. Output Ripple and Noise 240 mV peak to peak (measured with a bandwidth ≥100 MHz, on the module connector pins. Continuous Output Current Range ● 1.63 A maximum ● 0 A minimum Transient Output Current Capability 1.9 A maximum during 500ms, period minimum 20 sec. Output impedance versus frequency 180 mΩ

M580 Safety Power Supplies BMXCPS3522 /S High Power Output Voltage Response to transient load on 24V_BAC For the following output load transient on 24V_BAC: ● Load variation I from minimum continuous output current limit to max transient output current limit (and vice versa).

62 QGH60283 09/2019 ● Transition time 4 μs – pulse width 500ms – period 20 sec. ● The transient output voltage on 24V_BAC must stay within the limits 23.0...25.0V, and the response time must be ≤ 50 ms. ● Whatever the value of the capacitive load on 24V_BAC in the specified limits.

Protection against output overload/short-circuit ● In case of any condition of overload or short-circuit on 24V_BAC (i.e. any case of level, duration, temperature, input voltage), the board must be protected from any damage. ● The overall maximum value of the overload detection threshold (i.e. including all tolerances, drifts, etc.) must be less than Imax.

● Imax = 2 A. Protection against overvoltage Disjunction of the power supply for a rise of the output reaching 30.0 Vdc ±.8 V. External Capacitive Load Capability All the above characteristics must be fulfilled with the following external capacitive load value. This feature must be considered notably for slope-up, regulation loop stability and overload detection/protection. 11500 μF capacitive value. M580 Safety Power Supplies M580 Safety Power Supply Alarm Relay Performance Characteristics The alarm relay terminal block on the M580 safety power supplies present the following performance characteristics: Characteristics Rated switching Voltage / Current 24 Vdc 2A (Restive load) 240 Vac 2A (cos φ =1) point Minimum switching load 5 Vdc 1 mA Maximum switching voltage 62.4 Vdc 264 Vac Contact type Normally open Contact time ● OFF → ON 10 ms or Less ● ON → OFF 12 ms or Less Built-in protection Against overload / short-circuits: none, a fast-blow fuse must be fitted. Against inductive overvoltage in AC: none, an RC circuit or a MOV (ZNO) suppressor (appropriate to the voltage) must be fitted in parallel to the terminals of each pre-actuator. Against inductive overvoltage in DC: none, a discharge diode must be fitted to the terminals of each pre-actuator. Dielectric strength Contact vs ground: 2000 Vrms 50Hz 1min.(Altitude 0...2000 m) Insulation resistance 10 MΩ or more under 500 Vdc QGH60283 09/2019 63 M580 Safety Power Supplies 64 QGH60283 09/2019 Modicon M580 M580 Safety I/O Modules QGH60283 09/2019 M580 Safety I/O Modules Chapter 5 M580 Safety I/O Modules Introduction This chapter describes the M580 safety I/O modules. What Is in This Chapter? This chapter contains the following sections: Section Topic Page 5.1 M580 Safety I/O Modules Physical Description 66 5.2 M580 Safety I/O Performance Characteristics 72 QGH60283 09/2019 65 M580 Safety I/O Modules Section M580 Safety I/O Modules Physical Description 5.1 M580 Safety I/O Modules Physical Description Physical Description of M580 I/O Modules Positioning Safety I/O Modules You can install an M580 safety I/O module on: ● the local rack in any slot that is not reserved for the power supply or CPU. ● a remote rack in any slot that is not reserved for the power supply or remote adapter. NOTE: A safety I/O module can be installed on either a BMXXBP•••• X Bus rack or a BMEXBP•••• Ethernet rack. For a description of available M580 racks refer to the topic Local and Remote Racks in the Modicon M580 Hardware Reference Manual. 66 QGH60283 09/2019 M580 Safety I/O Modules Safety I/O Module Front Panel The front panel of each safety I/O module presents the following features: 1 Lock / Unlock configuration button 2 LED panel 3 20-pin connector 4 Keying pin slots QGH60283 09/2019 67 M580 Safety I/O Modules Safety I/O Module Dimensions Each safety I/O module presents the following physical dimensions: NOTE: Consider the height of the safety I/O modules when you are planning the installation of a rack. Each safety I/O module extends below the lower edge of the rack by: ● 29.49 mm (1.161 in.) for an Ethernet rack ● 30.9 mm (1.217 in.) for an X Bus rack 68 QGH60283 09/2019 M580 Safety I/O Modules Safety I/O Wiring Dimensions Each safety I/O module presents the following wiring dimensions: LEDs Each safety I/O module provides module and channel LED diagnostics on the front face of the module: ● The top four LEDs (Run, Err, I/O, and Lck) together describe the state of the module. ● The bottom rows of LEDs combine with the top four LEDs to describe the state and health of each input or output channel. QGH60283 09/2019 69 M580 Safety I/O Modules NOTE: For information on how to use the module LEDs to diagnose the condition of M580 safety modules, refer to the Diagnostics (see Modicon M580, Safety Manual) chapter of the M580 Safety Manual. BMXSAI0410 safety analog input module, and BMXSRA0405 safety digital relay output module LEDs: 1 Module state LEDs 2 Channel state LEDs 3 Channel detected error LEDs BMXSDI1602 safety digital input module LEDs: 1 Module state LEDs 2 Channel state LEDs for Rank A 3 Channel detected error LEDs for Rank A 2 Channel state LEDs for Rank B 3 Channel detected error LEDs for Rank B 70 QGH60283 09/2019 M580 Safety I/O Modules BMXSDO0802 safety digital output module LEDs: 1 Module state LEDs 2 Channel state LEDs 3 Channel detected error LEDs QGH60283 09/2019 71 M580 Safety I/O Modules Section M580 Safety I/O Performance Characteristics 5.2 M580 Safety I/O Performance Characteristics Introduction This section describes the performance characteristics of the M580 safety I/O modules. What Is in This Section? This section contains the following topics:Topic Page BMXSAI0410 Safety Analog Input Module Performance Characteristics 73 BMXSDI1602 Safety Digital Input Module Performance Characteristics 75 BMXSDO0802 Safety Digital Output Module Performance Characteristics 77 BMXSRA0405 Safety Digital Relay Output Module 79 72 QGH60283 09/2019 M580 Safety I/O Modules BMXSAI0410 Safety Analog Input Module Performance Characteristics Analog Input Module Characteristics The BMXSAI0410 safety analog input module presents the following performance characteristics: Static characteristics Parameter Unit Value Input impedance in signal range – Ohm 286 Analog input error Max full scale error @ 25°C % 0.30%

Analog input error (=safety tolerance) Max full scale error full temperature range --25°C to 70°C % 0.35%

QGH60283 09/2019 73 Reliability MTTF @ 25°C years 54.2 Linear Measuring Range – ct/mA 0...25mA and 12,500 counts (500 ct/mA) Out of Range Detection – mA <3.75mA and >20.75 mA Digital resolution Resolution bits 16

Number of channels simultaneously converted – 4 Data format returned of the application program – – binary

Value of an LSB – μA 0.191 Maximum permanent allowed overload – mA 25

Digital output reading under overload condition overload will be signaled to client application mA I =25 mA I =25

Type of input type mA 4-20mA type – floating isolated inputs maximum Range for input mA 0-25 mA Common-mode characteristics common mode rejection dB to be measured Dynamic characteristics Parameter Unit Value input filter characteristics order – second Frequency cut at -3dB Hz 10.47 M580 Safety I/O Modules General characteristics Parameter Unit Value Conversion method – – successive approximation Type of protection – – protecting diode Isolation potential under normal operation Insulation between channel VAC eff 500 for 1 min. Insulation channel to backplane VAC eff 1500 for 1 min. External power supply data - if required – – not required

Type & length of cable - installation rules recommended to provide interference immunity – – shielded cable

74 QGH60283 09/2019

Calibration or verification to maintain rated accuracy – – No calibration

Typical examples of external connections – – temperature sensor & pressure sensor Miscellaneous characteristics Parameter Unit Value Monotonicity with no missing code – – yes

Crosstalk between at d.c. & a.c. 50Hz and a.c. 60Hz – – –

Non-linearity +/- LSB 0.006%

Repeatability at fixed temperature after specified stabilization time – – –

3.3V consumption Typical mA 223 Maximum mA 246 24V consumption Typical mA 92 Maximum mA 115 Power dissipation Maximum W 3.98 M580 Safety I/O Modules BMXSDI1602 Safety Digital Input Module Performance Characteristics Digital Input Module Characteristics The BMXSDI1602 safety input module presents the following performance characteristics: Characteristic Value Nominal input Voltage 24 VDC

Type external sensor Power-supply SELV/PELV, overvoltage II (Max 60V)

QGH60283 09/2019 75 Typical input current Current 3.2mA Input limit values Voltage at state 1 ≥11V Voltage at state 0 ≤5V Current at state 1 > 2 mA for U ≥ 11V Current at state 0 < 1.5 mA

Sensor supply (Ripple included) From 19 to 30V (Possible up to 33. Limited 1 hour per Day)

Input Impedance At Unom 7.5 KΩ Response time Typical/Maximum 100μs/ 250μs Reliability MTTF @ Tamb = 25°C 31.5 years Reverse polarity Protected IEC61131-2 - Edition 3.0 (2007) Type 3 Compatibility (2 wires, 3 wires prox. Sensors) IEC 947-5-2 Dielectric strength Primaries/secondary 1500VRMS (at 4000m) 50/60 Hz for 1min Insulation resistance >10 MΩ (at 500 VDC) Input type Current sink Input paralleling1 Yes

Sensor voltage Monitoring threshold OK > 18.6 VDC < 32 VDC Fault < 18.6 VDC > 33 VDC Sensor voltage monitoring response Time On disappearance 4.4ms < T < 30ms On appearance 0.18 ms < T < 0.3 ms Maximum external capacitance when using VS for short-circuit to 24V detection Maximum 80nF

1.This characteristic enables several inputs to be wired on the same module, or on different modules if redundant inputs are required. M580 Safety I/O Modules Characteristic Value 3.3V consumption Typical 200mA Maximum 275mA 24V consumption Typical 63mA Maximum 71mA Max dissipated power 3.57W 1.This characteristic enables several inputs to be wired on the same module, or on different modules if redundant inputs are required. 76 QGH60283 09/2019 M580 Safety I/O Modules BMXSDO0802 Safety Digital Output Module Performance Characteristics Digital Output Module Characteristics The BMXSDO0802 safety digital output module presents the following performance characteristics: Characteristic Value Nominal values Voltage 24 VDC Current 0.5A Limit values Voltage 19...30V1 Current/Channel 0.625 A Current/Module 5A Type external actuator Power-supply SELV/PELV (Max 60V), Overvoltage category II

Tungsten filament lamp power max 6W

QGH60283 09/2019 77 Leakage current At state 0 < 0.5mA Residual voltage At state 1 < 1.2V Protections Transient voltage yes Overload disjunction current > 0.625 A Short circuit yes Wrong polarity yes Over temperature yes Minimum load. Resistance value (For pre-actuator) 48 Ω

Full detection of CUT wire: Maximum cable load capacitance value (including pre-actuator capacitance) between output and pre-actuator 10nF

Response time2 1.2 ms Reliability: MTTF 45.8 years @ 25° C Switching frequency on inductive load 0.5/LI2Hz with Fmax =2Hz Output paralleling Yes (2 maximum) Compatibility with DC inputs Yes (Only sink type 3 or sink not IEC) Built-in protection Against overvoltage Yes - by internal TVS Against reverse polarity Yes - by reverse-mounted diode. Provide a fuse to the pre-actuator 24V.

Against short circuits and overloads Yes - by current limiter and electronic circuit-breaker 1.5 In < Id < 2 In

1. 33V permissible for 1 hour per 24h. 2. All outputs have fast demagnetization circuits for electromagnets. Electromagnet discharge time < L/R M580 Safety I/O Modules Characteristic Value 24V Preactuator OK > 19.0V and < 31.8V voltage Monitoring threshold Fault < 18.0 and > 31.8V Preactuator voltage Monitoring response time 1. 33V permissible for 1 hour per 24h. 2. All outputs have fast demagnetization circuits for electromagnets. Electromagnet discharge time < L/R 78 QGH60283 09/2019 On disappearance 2ms < T < 5.6ms On appearance 10 ms < T < 15.6 ms Consumption 3.3V Typical 240 mA Maximum 264 mA Consumption 24V backplane Typical 80 mA Maximum 87 mA Consumption 24V pre-actuator (Without load current) Typical 5 mA Maximum 15 mA Dissipated power 4.4 W max Dielectric strength (output/ground or internal logic) 1500 V rms & 50/60 Hz for 1min Insulation resistance > 10 MΩ at 500VDC M580 Safety I/O Modules BMXSRA0405 Safety Digital Relay Output Module Digital Relay Output Module Characteristics The BMXSRA0405 safety digital relay output module presents the following performance characteristics: Characteristic Value

Rated switching Voltage / Current 24 VDC 5A (Resistive load) 240 VAC 5A (cos Φ =1)

QGH60283 09/2019 79 Current max for contacts on resistive load 5A (DC12 and AC12) Current max for contacts on inductive load 4A DC13 and 3A AC15 Operating temperature 0 to 60°C Type external actuator Power-supply Overvoltage category II Min switching load 5 VDC 10 mA Max switching load 264 VAC 30 VDC Switching time OFF→ ON (operate) 12 ms typical ON →OFF (release) 6 ms typical

Life (Based on Elesta relay SIF3) Mechanical 10 million cycles or more Electrical DC12 24Vdc / 5A → 300.000 cycles DC12 24Vdc / 2A →500.000 cycles

DC12 24Vdc / 1A→1.000.000 cycles L/R=40ms DC13 24Vdc (0.1Hz) / 4A→30.000 cycles DC13 24Vdc (0.1Hz) / 2A→50.000 cycles DC13 24Vdc (0.1Hz) / 1A→80.000 cycles – AC12 250Vac / 5A→70.000 cycles AC12 250Vac / 2A→30.000 cycles AC12 250Vac / 1A→250.000 cycles – AC15 250Vac / 3A→40.000 cycles AC15 250Vac / 2A→80.000 cycles AC15 250Vac / 1A→80.000 cycles

Built-in Protection Against overloads and short-circuits None - a fast blow fuse must be fitted to each channel or group of channels. Against inductive overvoltages in ~ None - a RC circuit or MOV peak limiter (ZNO) suitable for the voltage must be fitted in parallel across the terminals of each preactuator. Against inductive overvoltages in = None - a discharge diode must be fitted across the terminals of each preactuator.

M580 Safety I/O Modules Characteristic Value Max switching frequency 5 cycles by second Dielectric maximum voltage between channels 3000 V rms 50/60Hz for 1 min

Dielectric maximum voltage between channels and backplane 3000 V rms 50/60Hz for 1 min

80 QGH60283 09/2019 Reinforced insulation standard 3000 Vac insulation between the process side (relay contact) and the backplane Insulation resistance >10MW or more by insulation resistance tester Reliability: MTTF at Tamb = 25°C 36.9 years Protection degree IP20 Consumption 3.3V Typical 215 mA Maximum 240 mA

24V relay internal current consumption Typical 95 mA Maximum 130 mA

Dissipated power 4 energized relays 3 W Typical; 3.9 W maximum


FREE ENGLISH PDF

OPERATING INSTRUCTIONS

USER GUIDE - USER MANUAL

OWNER GUIDE - OWNER MANUAL

REFERENCE GUIDE - REFERENCE MANUAL

INSTRUCTION GUIDE - INSTRUCTION MANUAL

Leave a Reply