SINUMERIK 840D sl. Service - Safety Integrated. Manual (2020)

Diagnostics

11.3 Safety messages for SINAMICS S120

F01625

SI P1 (CU): Sign-of-life error in the safety data

Explanation

The "Safety Integrated" function integrated in the drive on the Control Unit (CU) has detected an error in the

sign-of-life of the safety data between the two monitoring channels and initiated a STOP A.

There is either a DRIVE-CLiQ communications error or communications have failed.

A time slice overflow of the safety software has occurred.

Fault value (r0949, interpret decimal):

Only for internal Siemens troubleshooting.

Remedy

Select Safe Torque Off and then deselect again.

• Carry out a POWER ON (power off/on) for all components.

• Check whether there is a DRIVE-CLiQ communications error between the two monitoring channels, and if

required carry out a diagnostics routine for the faults identified.

• Deselect all drive functions that are not absolutely necessary.

• Reduce the number of drives.

• Check the electrical cabinet design and cable routing for EMC compliance.

F01630

SI P1 (CU): Brake control defective

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

The "Safety Integrated" function integrated in the drive on the Control Unit (CU) has detected a brake control

fault and initiated a STOP A.

Fault value (r0949, interpret decimal):

Re fault value 10, 11:

Fault for "Open brake".

Parameter p1278 incorrectly set.

Brake not connected or interrupted cable (check whether for p1278 = 1 and p9602/p9802 = 0 (SBC switched-

out) the brake opens).

For fault value 20:

Fault in the "Brake open" state. Short-circuit in the brake winding.

Safety Integrated (system-integrated)

694

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

Diagnostics

11.3 Safety messages for SINAMICS S120

F01630

SI P1 (CU): Brake control defective

Explanation

For fault value 30, 31:

Fault for "Close brake"

Brake not connected or interrupted cable (check whether for p1278 = 1 and p9602/p9802 = 0 (SBC switched-

out) the brake opens).

Short-circuit in the brake winding.

For fault value 40:

Fault in the "Brake closed" state

For fault value 50:

Fault in the brake control of the Control Unit or communications error between the Control Unit and Motor

Module (diagnostics of the brake control).

For fault value = 80:

Safe Brake Adapter. Fault in the brake control of the Control Unit or communications error between the Control

Unit and Motor Module (diagnostics of the brake control).

For fault value = 90:

Brake released for service purposes (X4).

Remedy

Check parameter p1278 (with SBC only p1278 = 0 is permissible).

• Select Safe Torque Off and then deselect again

• Check the setting of the power unit data set for a parallel connection for the control of the holding brake

(p7015).

• Check the connection of the motor holding brake.

• Check the function of the motor holding brake.

• Check whether there is a DRIVE-CLiQ communication error between the Control Unit and the Motor Module

involved, and if required carry out a diagnostics routine for the faults identified.

• Check that the control cabinet is EMC-compliant and the cable routing (e.g. connect the motor cable shield

and brake conductors with the shield connecting plate or screw the motor connector to the enclosure).

• Replace the Motor Module involved.

Operation with Safe Brake Module or Safe Brake Adapter:

• Check the connection of the Safe Brake Module or Safe Brake Adapter.

• Replace the Safe Brake Module or Safe Brake Adapter.

F01649

SI P1 (CU): Internal software error

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Safety Integrated (system-integrated)

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

695

Diagnostics

11.3 Safety messages for SINAMICS S120

F01649

SI P1 (CU): Internal software error

Explanation

An internal error in the Safety Integrated software on the Control Unit has occurred.

Note:

This fault results in a STOP A that cannot be acknowledged.

Fault value (r0949, interpret as hexadecimal):

Only for internal Siemens troubleshooting.

Remedy

Carry out a POWER ON (power off/on) for all components

• Re-commission the Safety Integrated function and carry out a POWER ON.

• Upgrade the firmware of the Control Unit to a later version.

• Contact the Hotline.

• Replace the Control Unit.

F01650

SI P1 (CU): Acceptance test required

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

The "Safety Integrated" function integrated in the drive on monitoring channel 1 requires an acceptance test.

Note:

This fault results in a STOP A that can be acknowledged.

Fault value (r0949, interpret as decimal)

130: Safety parameters for monitoring channel 2 not available.

This fault value is always output when Safety Integrated is commissioned for the first time.

1000: Reference and actual checksum on monitoring channel 1 are not identical (boot).

At least one checksum-checked piece of data is defective.

Safety parameters set offline and loaded to the Control Unit.

2000: Reference and actual checksum on monitoring channel 1 are not identical (commissioning mode).

Reference checksum incorrectly entered for monitoring channel 1 (p9799 not equal to r9798).

When deactivating the safety functions, p9501 or p9503 not deleted.

Safety Integrated (system-integrated)

696

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

Diagnostics

11.3 Safety messages for SINAMICS S120

F01650

SI P1 (CU): Acceptance test required

2001:

Reference and actual checksum on monitoring channel 2 are not identical (commissioning mode).

Reference checksum incorrectly entered for monitoring channel 2 (p9899 not equal to r9898).

When deactivating the safety functions, p9501 or p9503 not deleted.

2002:

Enable of safety-related functions between both monitoring channels differ (p9601 not equal to p9801).

2003:

Acceptance test is required as a safety parameter has been changed.

2004:

Acceptance test required due to a project download with enabled safety functions.

2005:

The safety logbook has identified that a functional checksum has changed. An acceptance test must be carried

out.

2010:

Safe Brake Control is enabled differently between both monitoring channels (p9602 not equal to p9802).

2020:

Error when saving the safety parameters for monitoring channel 2.

3003:

An acceptance test is required, as one of the safety parameters referred to the hardware has been changed.

3005:

The safety logbook has identified that a functional checksum referred to the hardware has changed. An

acceptance test must be carried out.

9999:

Subsequent response of another safety fault that occurred when powering up, which requires an acceptance

test.

Safety Integrated (system-integrated)

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

697

Diagnostics

11.3 Safety messages for SINAMICS S120

F01650

SI P1 (CU): Acceptance test required

Remedy

For fault value = 130:

Carry out safety commissioning routine.

For fault value = 1000:

Check the cycle time for the Safety Integrated Basic Functions (r9780) and adapt the set checksum (p9799).

Repeat safety commissioning.

Replace the memory card or the Control Unit.

Activate the safety parameters for the drive involved using STARTER (change settings, copy parameters, acti-

vate settings).

For fault value = 2000:

Check the safety parameters in monitoring channel 1, and adapt the reference checksum (p9799).

For fault value = 2001:

Check the safety parameters in the monitoring channel 2 and adapt the reference checksum (p9899).

For fault value = 2002:

Check whether the safety functions are enabled on both monitoring channels.

For fault value = 2003, 2004, 2005:

Carry out acceptance test and create test certificate. The procedure when carrying out the acceptance test as

well as an example for the acceptance report can be found in the following reference: SINAMICS S120 Safety

Integrated Function Manual The fault with fault value 2005 can only be acknowledged when the "STO" func-

tion is deselected.

For fault value = 2010:

Check whether Safe Brake Control is enabled on both monitoring channels (p9602 = p9802).

For fault value = 2020:

Repeat safety commissioning.

Replace the memory card or the Control Unit.

For fault value = 3003:

Carry out function tests for the modified hardware and generate an acceptance report. The procedure when

carrying out the acceptance test as well as an example for the acceptance report can be found in the following

reference: SINAMICS S120 Safety Integrated Function Manual

For fault value = 3005:

Carry out function tests for the modified hardware and generate an acceptance report. The fault with fault

value 3005 can only be acknowledged when the "STO" function is deselected.

For fault value = 9999:

Carry out diagnostics for the other safety-related fault that is present.

F01651

SI P1 (CU): Synchronization, safety time slices unsuccessful

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Safety Integrated (system-integrated)

698

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

Diagnostics

11.3 Safety messages for SINAMICS S120

F01651

SI P1 (CU): Synchronization, safety time slices unsuccessful

Explanation

The "Safety Integrated" function requires synchronization of the safety time slices between the two monitoring

channels and between the Control Unit and the higher-level control. This synchronization routine was not

successful.

Note:

This fault results in a STOP A that cannot be acknowledged.

Fault value (r0949, interpret decimal):

Fault value 121:

With SINUMERIK Safety Integrated enabled, a drive-side warm restart was executed on the CU/NX.

With SINUMERIK Safety Integrated enabled, on a drive object of the CU, the "Restore factory setting" function

was selected and a drive-side warm restart initiated.

Fault value 150:

Fault in the synchronization to the PROFIBUS master. All other values:

For Siemens internal fault diagnostics only.

See also: p9510 (SI Motion isochronous PROFIBUS master)

Remedy

For fault value 121:

Carry out a common power on/warm restart for the higher-level control and SINAMICS.

For fault value 150:

Check the setting of p9510 (SI Motion isochronous PROFIBUS master), and if required correct.

Always:

Carry out a POWER ON (power off/on) for all components

Upgrade the Motor Module/Hydraulic Module software.

Upgrade the Control Unit software.

Upgrade the software of the higher-level control.

F01652

SI P1 (CU): Monitoring clock cycle not permissible

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Safety Integrated (system-integrated)

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

699

Diagnostics

11.3 Safety messages for SINAMICS S120

F01652

SI P1 (CU): Monitoring clock cycle not permissible

Explanation

One of the Safety Integrated monitoring clock cycles is not permissible:

• The monitoring clock cycle integrated in the drive cannot be maintained due to the communication con-

ditions requested in the system.

• The monitoring clock cycle for the safety-related motion monitoring functions with the higher-level control

is not permissible (p9500).

• The actual value sensing clock cycle for safe motion monitoring is not permissible (p9511).

• The sampling time for the current controller cannot be supported (p0112, p0115[0]).

Note:

This fault results in a STOP A that cannot be acknowledged.

Fault value (r0949, interpret decimal):

When motion monitoring is not enabled (p9601.2 = p9801.2 = 0, p9501 = 0), the following applies:

Minimum setting for the monitoring clock cycle (in μs).

If motion monitoring is enabled (p9601.2 = p9801.2 = 1 and/or p9501 > 0), the following applies:

100: It was not possible to find an appropriate monitoring clock cycle.

101: The monitoring clock cycle is not an integer multiple of the actual value clock cycle.

102: An error has occurred when transferring the actual value sensing clock cycle to the Motor Module.

103: An error has occurred when transferring the actual value acquisition clock cycle to the Sensor Module.

104, 105: Four times the current controller sampling time is greater than 1 ms for operation with non-clock-

cycle synchronous PROFIBUS.

Four times the current controller sampling time is greater than the DP clock cycle for operation with clock-cycle

synchronous PROFIBUS.

The DP clock cycle is not an integer multiple of the current controller sampling time

Remedy

When the SI monitoring, integrated in the drive is enabled (p9601/p9801 > 0).

Upgrade the firmware of the Control Unit to a later version.

When the motion monitoring is enabled (p9501 > 0):

Correct the monitoring clock cycle (p9500) and carry out a POWER ON.

Re fault value = 101:

The actual value acquisition clock cycle corresponds to the position control clock cycle/DP clock cycle (factory

setting).

For the motion monitoring functions integrated in the drive (p9601/p9801bit 2 = 1), the actual value acquis-

ition clock cycle can be directly parameterized in p9511/p9311.

For fault value 104, 105:

Set your own actual value acquisition clock cycle in p9511.

Restrict operation to a maximum of two vector drives. For the default settings in p0112, p0115, the current

controller sampling time is automatically reduced to 250 ms. If the default values have been changed, then the

current controller sampling time (p0112, p0115) must be correspondingly set.

When operating with isochronous PROFIBUS, increase the DP clock cycle so that an integer clock cycle ratio of

at least 4:1 is obtained between the DP clock cycle and the current controller sampling time. We recommend

a pulse duty factor of at least 8:1.

With firmware version 2.5, please ensure that in the drive parameter p9510 is set to 1 (isochronous operation).

F01655

SI P1 (CU): Aligning the monitoring functions

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Safety Integrated (system-integrated)

700

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

Diagnostics

11.3 Safety messages for SINAMICS S120

F01655

SI P1 (CU): Aligning the monitoring functions

Explanation

An error has occurred when aligning the Safety Integrated monitoring functions for the two monitoring

channels. A common set of supported SI monitoring functions was not able to be determined.

• DRIVE-CLiQ communications has an error or failed.

• Safety Integrated software releases on the Control Unit and the Motor Module/Hydraulic Module are not

compatible with one another.

Note:

This fault results in a STOP A that cannot be acknowledged.

Fault value (r0949, interpret as hexadecimal):

Only for internal Siemens troubleshooting.

Remedy

Carry out a POWER ON (power off/on) for all components

• Upgrade the Motor Module/Hydraulic Module software.

• Upgrade the Control Unit software.

• Check the electrical cabinet design and cable routing for EMC compliance.

F01656

SI CU: Parameter error monitoring channel 2

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

When accessing the Safety Integrated parameters for monitoring channel 2 in the non-volatile memory, an

error has occurred.

Note:

This fault results in a STOP A that can be acknowledged.

Fault value (r0949, interpret as decimal):

129: Safety parameters for monitoring channel 2 corrupted. Drive with enabled safety functions possibly

copied offline using the commissioning software and the project downloaded.

131: Internal Motor Module/Hydraulic Module software error.

132: Communication errors when uploading or downloading the safety parameters for the monitoring chan-

nel 2.

255: Internal software error on the Control Unit.

Remedy

Recommission the safety functions.

Upgrade the Control Unit software.

Upgrade the Motor Module/Hydraulic Module software.

Replace the memory card or the Control Unit.

For fault value = 129:

Activate the safety commissioning mode (p0010 = 95).

Adapt the PROFIsafe address (p9610).

Start the copy function for SI parameters (p9700 = D0 hex).

Acknowledge data change (p9701 = DC hex).

Exit the safety commissioning mode (p0010 = 0).

Save all parameters (p0977 = 1 or "Copy RAM to ROM").

Carry out a POWER ON (power off/on) for all components.

For fault value = 132:

Check the electrical cabinet design and cable routing for EMC compliance.

Safety Integrated (system-integrated)

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

701

Diagnostics

11.3 Safety messages for SINAMICS S120

F01659

SI P1 (CU): Write task for parameter rejected

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

The write task for one or several Safety Integrated parameters on the Control Unit (CU) was rejected.

Note:

This fault does not result in a safety stop response.

Fault value (r0949, decimal):

•

1.: The Safety Integrated password is not set.

•

2.: A drive parameter reset was selected. However, the Safety Integrated parameters cannot be reset as

Safety Integrated is presently enabled.

•

3.: The interconnected STO input is in the simulation mode.

•

10.: An attempt was made to enable the SH (STO) function although this cannot be supported.

•

11.: An attempt was made to enable the SBC function although this cannot be supported.

•

12.: An attempt was made to enable the SBC function although this cannot be supported for a parallel

circuit configuration.

•

13.: An attempt was made to enable the SS1 function although this cannot be supported.

•

14.: An attempt was made to enable the PROFIsafe communication although this cannot be supported.

•

15.: An attempt was made to enable the motion monitoring functions integrated in the drive although this

cannot be supported.

•

16.: An attempt was made to enable the SH function although this cannot be supported when the internal

voltage protection (p1231) is enabled.

•

17: An attempt was made to enable the PROFIsafe function although this cannot be supported for a parallel

circuit configuration.

Safety Integrated (system-integrated)

702

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

Diagnostics

11.3 Safety messages for SINAMICS S120

F01659

SI P1 (CU): Write task for parameter rejected

•

18.: An attempt was made to enable PROFIsafe for Basic Functions although this cannot be supported.

•

19.: An attempt was made to enable SBA (Safe Brake Adapter), although this cannot be supported.

•

20.: An attempt was made to enable motion monitoring functions integrated in the drive and the STO

function, both controlled via F-DI

•

23.: An attempt was made to enable the pulse suppression delay for ESR, although this cannot be sup-

ported.

See also: p0970 (reset infeed parameters), p3900 (complete fast commissioning), r9771 (SI common func-

tions (Control Unit)), r9871 (SI common functions (Motor Module))

Remedy

For fault value = 1:

Set the Safety Integrated password (p9761).

For fault value = 2:

Inhibit Safety Integrated and again reset the drive parameters.

For fault value = 3:

Simulation mode for the digital input ended (p0795).

Re fault value = 10, 11, 12, 13, 14, 15, 17, 18, 19, 20, 21, 22, 23:

Check whether there are faults in the safety function alignment between the Control Unit and the Motor

Module involved (F01655, F30655), and if required carry out diagnostics for the faults involved.

Use a Motor Module that supports the function "Safe Torque Off" or "Safe Brake Control, PROFIsafe/PROFIsafe

V2", motion monitoring functions integrated in the drive.

Upgrade the Motor Module software.

Upgrade the Control Unit software.

For fault value = 16:

Inhibit the internal voltage protection (p1231).

See also: p9501 (SI Motion enable safe functions), p9601 (SI enable functions integrated in the drive (Control

Unit)), p9620 (SI signal source for SH/SBC/SS1 (Control Unit)), p9761 (SI password input), p9801 (SI enable

functions integrated in the drive (Motor Module))

F01660

SI P1 (CU): Safety functions not supported

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

The Motor Module/Hydraulic Module does not support the safety-related functions (e.g. the Motor Module/

Hydraulic Module version is not the correct one). Safety Integrated cannot be commissioned.

Note:

This fault does not result in a safety stop response.

Remedy

Use a Motor Module/Hydraulic Module that supports the safety-related functions.

Upgrade the Motor Module/Hydraulic Module software.

F01664

SI P1 (CU): No automatic firmware update

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Safety Integrated (system-integrated)

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

703

Diagnostics

11.3 Safety messages for SINAMICS S120

F01664

SI P1 (CU): No automatic firmware update

Explanation

When booting it was identified that function "Automatic firmware update" (p7826 = 1) was not activated.

However, this is necessary for the automatic firmware update/downgrade in order to avoid, when enabling the

safety functions, an inadmissible combination of versions.

Note:

This fault does not result in a safety stop response.

See also: p7826 (automatic firmware update)

Remedy

With the safety functions enabled (p9501<> 0 and/or p9601 <> 0):

1. Activate the "Automatic firmware update" function (p7826 = 1).

2. Save parameters (p0977 = 1) and carry out a power on

When deactivating the safety functions (p9501 = 0, p9601 = 0), it was not possible to acknowledge the fault

after exiting the safety commissioning mode.

F01670

SI Motion: Invalid Sensor Module parameterization

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

The parameterization of a Sensor Module used for Safety Integrated is not permissible.

Note:

This fault results in a STOP A that cannot be acknowledged.

Fault value (r0949, interpret decimal):

Safety Integrated (system-integrated)

704

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

Diagnostics

11.3 Safety messages for SINAMICS S120

F01670

SI Motion: Invalid Sensor Module parameterization

Explanation

1. No encoder was parameterized for Safety Integrated.

2. An encoder was parameterized for Safety Integrated that does not have an A/B (sine/cosine) track.

3. The encoder data set selected for Safety Integrated is still not valid.

4. The communications error with the encoder has occurred.

5. Number of relevant bits in the coarse encoder position invalid.

6. DRIVE-CLiQ encoder configuration invalid.

7. Non safety-relevant component of the encoder coarse position for linear DRIVE-CLiQ encoder invalid.

8. Parameterized safety comparison algorithm not supported.

9. Ratio between the grid division and measurement step not binary for linear DRIVE-CLiQ encoder.

10. For an encoder used for Safety Integrated, not all of the drive data sets (DDS) are assigned to the same

encoder data set (EDS) (p0187 ...p0189).

11. The zero point setting of a linear DRIVE-CLiQ encoder used in Safety Integrated is not zero.

12. The second encoder is not parameterized (p9526 = 1 is not permissible).

13. Hydraulic Module: A second encoder is not parameterized, and a DRIVE-CLiQ encoder is not being used.

Remedy

For fault value = 1, 2:

Use and parameterize an encoder that Safety Integrated supports (encoder with A/B track, sinusoidal, p0404.4

= 1)

For fault value = 3:

Check whether the device or drive commissioning is active and if required, initiate this (p0009 = p0010 = 0),

save the parameters (p0971 = 1) and carry out a power on.

For fault value = 4:

Check whether there is a DRIVE-CLiQ communications error between the Control Unit and the Sensor Module

involved and if required, carry out a diagnostics routine for the faults identified.

For fault value = 6:

The encoder configuration data are corrupted or an encoder with impermissible configuration data was used.

Therefore, replace the encoder or use a different type of encoder.

For fault value = 7:

p12033 for an encoder used for Safety Integrated is not equal to 1. Use a linear DRIVE-CLiQ encoder, and

parameterize where p12033 = 1.

For fault value = 8:

Check p9541. Use an encoder and parameterize it using an algorithm supported by Safety Integrated.

For fault value = 9:

Check p9514 and p9522. Use an encoder and parameterize where the ratio p9514 to p9522 is binary.

For fault value = 10:

Align the EDS assignment for all encoders used for Safety Integrated (p0187 ...p0189).

For fault value 11:

Use a linear DRIVE-CLiQ encoder and parameterize where the zero setting is equal to 0.

For fault value 12:

Parameterize an encoder for the second channel (p9526 > 1).

For fault value 13:

Parameterize a second encoder or use a DRIVE-CLiQ encoder.

Safety Integrated (system-integrated)

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

705

Diagnostics

11.3 Safety messages for SINAMICS S120

F01671

SI Motion: Encoder parameterization error

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

The parameterization of the encoder used for Safety Integrated is not the same as the parameterization of the

standard encoder.

Note:

This fault does not result in a safety stop response.

Fault value (r0949, interpret decimal):

Parameter number of the non-corresponding safety parameter.

Remedy

Align the encoder parameterization between the safety encoder and the standard encoder.

F01672

SI P1 (CU): Motor Module software/hardware not compatible

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

The existing Motor Module software does not support the safe motion monitoring, is incompatible to the

software on the Control Unit or there is a communication error between the Control Unit and Motor Module.

Note:

This fault results in a STOP A that cannot be acknowledged.

Fault value (r0949, interpret decimal):

1: The existing Motor Module software does not support the safety-related motion monitoring.

2, 3, 6, 8: There is a communication error between the Control Unit and Motor Module.

4, 5, 7: The existing Motor Module software is incompatible to the software on the Control Unit.

9,10,11,12: The existing Motor Module software does not support the safety-related motion monitoring

without encoder (sensorless).

13: At least one Motor Module in parallel operation does not support the safe motion monitoring function.

Remedy

Check whether there are errors in the safety function alignment between the Control Unit and the Motor

Module involved (F01655, F30655), and if required carry out diagnostics for the errors involved.

For fault value = 1:

Use a Motor Module that supports the safety-related motion monitoring functions.

For fault value = 2, 3, 6, 8:

Check whether there is a DRIVE-CLiQ communication error between the Control Unit and the Motor Module

involved, and if required carry out a diagnostics routine for the faults identified.

For fault value = 4, 5, 7, 9, 13:

Upgrade the Motor Module software.

F01673

SI Motion: Sensor Module software/hardware not compatible

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Safety Integrated (system-integrated)

706

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

Diagnostics

11.3 Safety messages for SINAMICS S120

F01673

SI Motion: Sensor Module software/hardware not compatible

Explanation

The existing Sensor Module software or hardware does not support the safety-related motion monitoring with

the higher-level control.

Note:

This fault does not result in a safety stop response.

Fault value (r0949, decimal):

Only for internal Siemens troubleshooting.

Remedy

Use a Sensor Module that supports the safety-related motion monitoring functions.

Upgrade the Sensor Module software.

F01680

SI Motion P1 (CU): Checksum error safe monitoring functions

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

The actual checksum calculated by the drive and entered into r9728 over the safety-related parameters does

not match the reference checksum in p9729 saved when the machine was accepted the last time. Safety-

relevant parameters have been changed or there is a fault.

Note:

This fault results in a STOP A that cannot be acknowledged.

Fault value (r0949, interpret decimal):

0: Checksum error for SI parameters for motion monitoring

1: Checksum error for SI parameters for actual values

2: Checksum error for SI parameters for component assignment

Remedy

Check the safety-related parameters and if required correct.

Execute the "Copy RAM to ROM" function.

Perform a POWER ON if safety parameters have been changed that require a POWER ON.

Carry out an acceptance test.

C01681

SI Motion P1 (CU): Incorrect parameter value

Response

NONE

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

The parameter value may not be parameterized with this value.

Note:

This fault does not result in a safety stop response.

Fault value (r0949, interpret decimal):

Parameter number with the incorrect value

A detailed parameter description is provided in the SINAMICS S120/S150 List Manual

Remedy

Correct the parameter value.

Safety Integrated (system-integrated)

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

707

Diagnostics

11.3 Safety messages for SINAMICS S120

F01682

SI Motion P1 (CU): Monitoring function not supported

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

The monitoring function enabled in p9501, p9601 or p9801 is not supported in this firmware version.

Note:

This fault results in a STOP A that cannot be acknowledged.

Fault value (r0949, interpret decimal):

1: Monitoring function SLP (SE) not supported (p9501.1)

2: Monitoring function SCA (SN) is not supported (p9501.7 and p9501.8 - 15 and p9503)

3: Monitoring function SLS override (SG override) not supported (p9501.5)

10: Only the servo drive object supports monitoring functions.

20: Motion monitoring functions integrated in the drive only supported in conjunction with PROFIsafe (p9501

and p9601.1 - 2 and p9801.1 -2)

21: Enabling a safe motion monitoring function (in p9501) for enabled basis functions via PROFIsafe (p9601.2

= 0, p9601.3 = 1) not supported.

Remedy

Deselect monitoring function involved (p9501, p9503, p9801).

F01683

SI Motion P1 (CU): SOS/SLS enable missing

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

In p9501, the safety-related basic function SOS/SLS has not been enabled although other safety-related mon-

itoring functions have been enabled.

Note:

This fault does not result in a safety stop response.

Remedy

Enable the function "SOS/SLS" (p9501.0) and carry out a POWER ON.

F01684

SI Motion P1 (CU): Safely-Limited Position limit values interchanged

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

For the function "Safely-Limited Position" (SLP), in p9534 there is a value less than that in p9535.

Note:

This fault does not result in a safety stop response.

Fault value (r0949, interpret decimal):

1: Limit values SLP1 interchanged

2: Limit values SLP2 interchanged

Remedy

Correct the limit values in p9534 and p9535 and carry out a POWER ON.

Safety Integrated (system-integrated)

708

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

Diagnostics

11.3 Safety messages for SINAMICS S120

F01685

SI Motion P1 (CU): Safely-Limited Speed limit value too high

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

The limit value for the function "Safely-Limited Speed" (SLS) is greater than the speed that corresponds to an

encoder limit frequency of 500 kHz.

Note:

This fault does not result in a safety stop response.

Fault value (r0949, interpret decimal):

Maximum permissible speed

Remedy

Correct the limit values for SLS and carry out a POWER ON.

F01686

SI Motion: Cam position parameterization not permissible

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

At least one enabled "Safe Cam" (SCA) is parameterized in p9536 or p9537 too close to the tolerance range

around the modulo position.

The following conditions must be maintained to assign cams to a cam track:

• The cam length of cam x = p9536[x]-p9537[x] must be greater than or equal to the cam tolerance + the

position tolerance (= p9540 + p9542). This means that for cams on a cam track, the minus position value

must be less than the plus position value.

• The distance between 2 cams x and y (minus position value[y] - plus position value[x] = p9537[y] -

p9536[x]) on a cam track must be greater than or equal to the cam tolerance + the position tolerance (=

p9540 + p9542).

Note:

This fault does not result in a safety stop response.

Fault value (r0949, interpret decimal):

Number of the "Safe Cam" with an illegal position.

See also: p9501 (SI Motion enable safety functions (Control Unit))

Remedy

Correct the cam position and carry out a POWER ON.

F01687

SI Motion: Illegal parameterization of modulo value SCA (SN)

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

The parameterized modulo value for the function "Safe Cams" (SCA) is not a multiple of 360 000 mDegree.

Note:

This fault does not result in a safety stop response.

Remedy

Correct the modulo value for SCA and carry out a POWER ON.

Safety Integrated (system-integrated)

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

709

Diagnostics

11.3 Safety messages for SINAMICS S120

F01688

SI Motion CU: Actual value synchronization not permissible

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

It is not permissible to enable actual value synchronization for a 1-encoder system.

• Simultaneously enabling actual value synchronization and a monitoring function with absolute reference

(SCA/SLP) is not permitted.

• Simultaneously enabling actual value synchronization and safe position via PROFIsafe is not permitted.

Note:

This fault results in a STOP A that cannot be acknowledged.

Remedy

Either deselect the "actual value synchronization" function or the monitoring functions with absolute refer-

ence (SCA/SLP) and carry out a POWER ON.

Either deselect the "Actual value synchronization" function - or do not enable "Safe position via PROFIsafe".

C01689

SI Motion: Axis re-configured

Response

OFF2

Acknowledg-

POWER ON

ment

Explanation

The axis configuration was changed (e.g. changeover between a linear axis and rotary axis). Parameter

p0108.13 is internally set to the correct value.

Note:

This fault does not result in a safety stop response.

Fault value (r0949, interpret decimal):

Parameter number of the parameter that initiated the change.

See also: p9502 (SI Motion axis type (Control Unit))

Remedy

The following must be carried out after the changeover:

• Exit the safety commissioning mode (p0010).

• Save all parameters (p0977 = 1 or "Copy RAM to ROM").

• Carry out a POWER ON.

Once the Control Unit has been powered up, safety message F01680 or F30680 indicates that the checksums

at the drive in r9398[0] and r9728[0] have changed. Therefore, the following must be carried out:

• Reactivate the Safety commissioning mode.

• Complete the safety commissioning of the drive.

• Exit the safety commissioning mode (p0010).

• Save all parameters (p0977 = 1 or "Copy RAM to ROM").

• Carry out a POWER ON.

Note:

For the commissioning software, the units are only displayed consistently after a project upload.

F01690

SI Motion: Data backup problems for NVRAM

Response

NONE (OFF1, OFF2, OFF3)

Acknowledg-

POWER ON

ment

Safety Integrated (system-integrated)

710

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

Diagnostics

11.3 Safety messages for SINAMICS S120

F01690

SI Motion: Data backup problems for NVRAM

Explanation

There is not enough memory space in the drive NVRAM to save parameters r9781 and r9782 (Safety logbook).

Note:

This fault does not result in a safety stop response.

Fault value (r0949, interpret decimal):

0: There is no physical NVRAM available in the drive.

1: There is no longer any free memory space in the NVRAM.

Remedy

For fault value = 0:

Use a Control Unit with NVRAM.

For fault value = 1:

Deselect functions that are not required and use the memory space in the NVRAM.

Contact the Hotline.

A01698 (F)

SI P1 (CU): Commissioning mode active

Response

NONE

Acknowledg-

NONE

ment

Explanation

The commissioning of the "Safety Integrated" function is selected. This message is withdrawn after the safety

functions have been commissioned.

Note:

This message does not result in a safety stop response.

When in the safety commissioning mode, the "STO" function is internally selected

See also: p9601, p9801, p10010

Response for F

NONE (OFF1, OFF2, OFF3)

Acknowledg-

IMMEDIATELY (POWER ON)

ment for F

Safety Integrated (system-integrated)

724

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

Diagnostics

11.3 Safety messages for SINAMICS S120

A01796 (F, N)

SI Motion CU: Wait for communication

Response for

NONE

Acknowledg-

NONE

ment for N

C01797

SI Motion P1 (CU): Axis not safely referenced

Response

NONE

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

The stop position saved before powering-down does not coincide with the actual position that is determined

when powering-up.

Message value: (r9749, interpret as decimal):

1: Axis not referenced

2: User agreement missing

Remedy

If the axis cannot be automatically and safely referenced, then the user must enter a user agreement for the

new position using the appropriate softkey. This therefore designates this position as being a safety-related

position.

C01798

SI Motion P1 (CU): Test stop running

Response

NONE

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

The test stop is active.

Remedy

Not necessary.

The message is withdrawn when the test stop is completed.

C01799

SI Motion P1 (CU): Acceptance test mode active

Response

NONE

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

The acceptance test mode is active.

The following applies to safety functions with SINUMERIK:

The power on messages of the safe motion monitoring functions can be acknowledged during the acceptance

test using the acknowledgment options of the higher-level control.

Remedy

Not necessary.

The message is withdrawn when exiting the acceptance test mode.

List of faults and alarms (Motor Module)

F30600

SI P2: STOP A initiated

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Safety Integrated (system-integrated)

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

725

Diagnostics

11.3 Safety messages for SINAMICS S120

F30600

SI P2: STOP A initiated

Explanation

The "Safety Integrated" function integrated in the drive on monitoring channel 2 has detected a fault and

initiated a STOP A (STO via the safety switch-off signal path of monitoring channel 2).

• Forced checking procedure of the safety switch-off signal path of the monitoring channel unsuccessful.

• Subsequent response to fault F30611 (defect in a monitoring channel).

Fault value (r0949, interpret decimal):

0: Stop request from the Control Unit

1005: STO active, although STO not selected and there is no internal STOP A present.

1010: STO inactive although STO is selected or an internal STOP A is present.

1011: Internal error for STO deselected in monitoring channel 2.

1020: Internal software error in the "Internal voltage protection" function. The "Internal voltage protection"

function is cancelled. A STOP A that cannot be acknowledged is initiated.

9999: Subsequent response to fault F30611

Remedy

Select Safe Torque Off and then deselect again.

Carry out a POWER ON (power off/on) for all components.

For fault value = 1020:

Upgrade the Motor Module/Hydraulic Module software.

Replace the Motor Module/Hydraulic Module.

For fault value = 9999:

Carry out diagnostics for fault F30611.

F30611

SI P2: Defect in a monitoring channel

Response

NONE (OFF1, OFF2, OFF3)

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

The "Safety Integrated" function integrated in processor 2 has detected a fault in the crosswise data comparison

between the two monitoring channels and has initiated STOP F.

As a result of this fault, after the parameterized transition has expired (p9858), fault F30600 (SI P2: STOP A

initiated) is output.

Fault value (r0949, interpret decimal):

0: Stop request from the Control Unit

Safety Integrated (system-integrated)

726

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

Diagnostics

11.3 Safety messages for SINAMICS S120

F30611

SI P2: Defect in a monitoring channel

1 to 999: Number of the crosswise compared data that resulted in this fault. This number is also displayed in

r9895.

1: SI monitoring clock cycle (r9780, r9880)

2: SI enable safety functions (p9601, p9801). Only the supported bits are crosswise compared.

3: SI SGE changeover, tolerance time (p9650, p9850)

4: SI transition time STOP F to STOP A (p9658, p9858)

5: SI enable Safe Brake Control (p9602, p9802)

6: SI Motion, enable safety functions (p9501, internal value).

7: SI delay time of STO for Safe Stop 1 (p9652, p9852).

9: Debounce time for STO/SBC/SS1 (MM) (p9651, p9851)

10: SI delay time to initiate STO for ESR (p9697, p9897)

11: SI Safe Brake Adapter mode, BICO interconnection (p9621, p9821).

1000: Check (watchdog) timer has expired. Within the time of approx. 5 x p9850 too many signal changes have

occurred at terminal EP of the Motor Module.

1001, 1002: Initialization error, change timer/check timer.

1950: Module temperature outside the permissible temperature range.

1951: Module temperature not plausible.

2000: Status of STO selection in both monitoring channels different.

2001: Feedback signal of STO deactivation in both monitoring channels different.

2002: Status of the delay timer SS1 in both monitoring channels different (status of the timer in p9650/p9850).

2003: Status of the STO terminals in both monitoring channels different.

Remedy

• For fault value = 1 to 5 and 7 to 999:

Check the crosswise compared data that resulted in a STOP F.

Carry out a POWER ON (power off/on) for all components.

Upgrade the Motor Module software.

Upgrade the Control Unit software.

• For fault value = 6:

Carry out a POWER ON (power off/on) for all components.

Upgrade the Motor Module software.

Upgrade the Control Unit software.

• For fault value = 1000:

Check the wiring of the safety-related inputs (SGE) on the Control Unit (contact problems).

• For fault value = 1001, 1002:

Carry out a POWER ON (power off/on) for all components.

Upgrade the Motor Module software.

Upgrade the Control Unit software.

• Re fault value = 2000, 2001, 2002, 2003:

Check the tolerance time SGE changeover and if required, increase the value (p9650, p9850, p9652/

p9852).

Check the wiring of the safety-related inputs (SGE) (contact problems).

Check the reason why STO was selected in r9872. For active SMM functions (p9501 = 1), STO can also be

selected as a result of these functions.

Replace the Motor Module involved.

This fault can be acknowledged after resolving the cause of fault and after selecting/deselecting STO.

Safety Integrated (system-integrated)

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

727

Diagnostics

11.3 Safety messages for SINAMICS S120

N30620 (F, A)

SI P2: Safe Torque Off active

Response

NONE

Acknowledg-

NONE

ment

Explanation

The "Safe Torque Off" (STO) function of the basis functions has been selected on monitoring channel 2 via the

input terminal and is active.

Note:

This message does not result in a safety stop response.

Remedy

Not necessary.

Response for F

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment for F

Response for

NONE

Acknowledg-

NONE

ment for A

N30621 (F, A)

SI P2: Safe Stop 1 active

Response

NONE

Acknowledg-

NONE

ment

Explanation

The "Safe Stop 1" (SS1) function has been selected on monitoring channel 2 and is active.

Note:

This message does not result in a safety stop response.

Remedy

Not necessary.

Response for F

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment for F

Response for

NONE

Acknowledg-

NONE

ment for A

F30625

SI P2: Sign-of-life error in safety data

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Safety Integrated (system-integrated)

728

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

Diagnostics

11.3 Safety messages for SINAMICS S120

F30625

SI P2: Sign-of-life error in safety data

Explanation

The "Safety Integrated" function integrated in the drive on monitoring channel 2 has detected an error in the

sign-of-life of the safety data between the two monitoring channels and initiated a STOP A.

• There is either a DRIVE-CLiQ communications error or communications have failed.

• A time slice overflow of the safety software has occurred.

• The enable signal for the safety functions in both monitoring channels is inconsistent (p9601 = 0, p9801

<> 0).

Fault value (r0949, interpret decimal):

Only for internal Siemens troubleshooting.

Remedy

Select Safe Torque Off and then deselect again.

• Carry out a POWER ON (power off/on) for all components.

• Check whether there is a DRIVE-CLiQ communications error between the two monitoring channels, and if

required carry out a diagnostics routine for the faults identified.

• Deselect all drive functions that are not absolutely necessary.

• Reduce the number of drives.

• Check the electrical cabinet design and cable routing for EMC compliance.

• Check the enabling of the safety functions for both monitoring channels and correct if necessary (p9601,

p9801).

F30630

SI P2: Brake control defective

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

The "Safety Integrated" function integrated in the drive on the Motor Module (MM) has detected a brake control

fault and initiated a STOP A.

The motor cable shield is not correctly connected.

Defect in the brake control circuit of the Motor Module.

Fault value (r0949, interpret decimal):

•

10: Fault for "Open brake", parameter p1278 incorrectly set

Brake not connected or interrupted cable (check whether for p1278 = 1 and p9602/p9802 = 0 (SBC deac-

tivated) the brake opens).

Ground fault, brake cable

Safety Integrated (system-integrated)

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

729

Diagnostics

11.3 Safety messages for SINAMICS S120

F30630

SI P2: Brake control defective

•

30: Fault for "Close brake"

Brake not connected or interrupted cable (check whether for p1278 = 1 and p9602/p9802 = 0 (SBC

switched-out) the brake opens).

Short-circuit in the brake winding

•

40: Fault in the "Brake closed" state

•

60, 70: Fault in the brake control of the Control Unit or communication error between the Control Unit and

Motor Module (brake control).

•

81: Safe Brake Adapter: Fault for "Brake closed".

•

82: Safe Brake Adapter: Fault for "Open brake".

•

83: Safe Brake Adapter: Fault for "Close brake".

•

84, 85: Safe Brake Adapter: Fault in the brake control of the Control Unit or communication error between

the Control Unit and Motor Module (brake control).

•

90: Brake released for service purposes (X4).

•

91: Fault for "Open brake".

Brake not connected or interrupted cable (check whether for p1278 = 1 and p9602/p9802 = 0 (SBC deac-

tivated) the brake opens).

Remedy

Check parameter p1278 (with SBC, only p1278 = 0 is permissible)

• Select Safe Torque Off and then deselect again.

• Check the connection of the motor holding brake.

• Check the function of the motor holding brake.

• Check whether there is a DRIVE-CLiQ communication error between the Control Unit and the Motor Module

involved, and if required carry out a diagnostics routine for the faults identified.

• Check that the control cabinet is EMC-compliant and the cable routing (e.g. connect the motor cable shield

and brake conductors with the shield connecting plate or screw the motor connector to the enclosure).

• Replace the Motor Module involved.

Operation with Safe Brake Module or Safe Brake Adapter:

• Check the connection of the Safe Brake Module or Safe Brake Adapter.

Replace the Safe Brake Module or Safe Brake Adapter.

A30640 (F)

SI P2: Fault in the switch-off signal path of the second channel

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

The Motor Module has a communication error with the higher-level control to transfer the safety-relevant

information, or there is a communication error between Motor Modules connected in parallel.

Note:

This fault results in a STOP A that can be acknowledged.

Fault value (r0949, interpret as decimal):

Only for internal Siemens troubleshooting.

Safety Integrated (system-integrated)

730

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

Diagnostics

11.3 Safety messages for SINAMICS S120

A30640 (F)

SI P2: Fault in the switch-off signal path of the second channel

Remedy

For a higher-level control, the following applies:

• Check the PROFIsafe address in the higher-level control and Motor Module and if required, correct

• Save all parameters (p0977 = 1).

• Carry out a POWER ON for all components.

In general, the following applies:

Upgrade the Motor Module software.

Response for F

NO (OFF2)

Acknowledg-

IMMEDIATELY (POWER ON)

ment for F

F30649

SI P2: Internal software error

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

An internal error in the Safety Integrated software in monitoring channel 2 has occurred.

Note:

This fault results in a STOP A that cannot be acknowledged.

Fault value (r0949, interpret as hexadecimal):

Only for internal Siemens troubleshooting.

Remedy

Carry out a POWER ON (power off/on) for all components.

• Re-commission the Safety Integrated function and carry out a POWER ON.

• Upgrade the Motor Module/Hydraulic Module software.

• Contact the Hotline.

• Replace the Motor Module/Hydraulic Module.

F30650

SI P2: Acceptance test required

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Safety Integrated (system-integrated)

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

731

Diagnostics

11.3 Safety messages for SINAMICS S120

F30650

SI P2: Acceptance test required

Explanation

The "Safety Integrated" function on monitoring channel 2 requires an acceptance test.

Note:

This fault results in a STOP A that can be acknowledged.

Fault value (r0949, interpret as decimal)

130: Safety parameters for monitoring channel 2 not available.

1000: Reference and actual checksum on monitoring channel 2 are not identical (boot).

As a result of the changed sampling time of the current controller (p0115[0]) the clock cycle time for Safety

Integrated Basic Functions (r9880) was adapted

Safety parameters set offline and loaded to the Control Unit.

A download was made to SINAMICS whose firmware version of monitoring channel 2 did not correspond to the

latest version release.

The request to switch off the DRIVE-CLiQ component A1007 was present after the download.

At least one checksum-checked piece of data is defective.

2000: Reference and actual checksum on monitoring channel 2 not identical (commissioning mode).

Reference checksum incorrectly entered for monitoring channel 2 (p9899 not equal to r9898).

2003: Acceptance test is required as a safety parameter has been changed.

2005: The safety logbook has identified that safety checksums have changed. An acceptance test is required.

3003: An acceptance test is required, as one of the safety parameters referred to the hardware has been

changed.

9999: Subsequent response of another safety fault that occurred when powering up, which requires an ac-

ceptance test.

Remedy

• For fault value = 130:

Carry out safety commissioning routine.

• For fault value = 1000:

Check the cycle time for the Safety Integrated Basic Functions (r9880) and adapt the set checksum (p9899).

Repeat safety commissioning.

Switch off the drive device and DRIVE-CLiQ components and then switch on again. If A30650 remains

active, then download again.

Replace the memory card or the Control Unit.

• For fault value = 2000:

Check the safety parameters in the monitoring channel 2 and adapt the reference checksum (p9899).

• For fault value = 2003, 2005:

Carry out acceptance test and create test certificate.

The procedure when carrying out the acceptance test as well as an example for the acceptance report can be

found in the following reference:

SINAMICS S120 Safety Integrated Function Manual

• For fault value = 9999:

Carry out diagnostics for the other safety-related fault that is present.

See also: p9799 (SI reference checksum SI parameters (Control Unit)), p9899 (SI reference checksum, SI

parameters (Motor Module)).

F30651

SI P2: Synchronization with the Control Unit unsuccessful

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Safety Integrated (system-integrated)

732

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

Diagnostics

11.3 Safety messages for SINAMICS S120

F30651

SI P2: Synchronization with the Control Unit unsuccessful

Explanation

The "Safety Integrated" function integrated in the drive requires that the safety time slices are synchronized in

both monitoring channels. This synchronization routine was not successful.

Note:

This fault results in a STOP A that cannot be acknowledged.

Fault value (r0949, interpret decimal):

Only for internal Siemens troubleshooting.

Remedy

Carry out a POWER ON (power off/on) for all components

Upgrade the Motor Module/Hydraulic Module software.

Upgrade the Control Unit software.

F30652

SI P2: Monitoring clock cycle not permissible

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

The Safety Integrated monitoring clock cycle cannot be maintained due to the communication conditions

requested in the system.

Note:

This fault results in a STOP A that cannot be acknowledged.

Fault value (r0949, interpret decimal):

Only for internal Siemens troubleshooting.

Remedy

When fault F01652 simultaneously occurs, apply the remedy/countermeasure described there.

Upgrade the firmware of the Motor Module/Hydraulic Module to a later version.

F30655

SI P2: Aligning the monitoring functions

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

An error has occurred when aligning the Safety Integrated monitoring functions for the two monitoring

channels. A common set of supported SI monitoring functions was not able to be determined.

• DRIVE-CLiQ communications has an error or failed.

• Safety Integrated software releases on the Control Unit and the Motor Module/Hydraulic Module are not

compatible with one another.

Note:

This fault results in a STOP A that cannot be acknowledged.

Fault value (r0949, interpret as hexadecimal):

Only for internal Siemens troubleshooting.

Remedy

Carry out a POWER ON (power off/on) for all components

Upgrade the Motor Module/Hydraulic Module software.

Upgrade the Control Unit software.

Check the electrical cabinet design and cable routing for EMC compliance.

Safety Integrated (system-integrated)

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

733

Diagnostics

11.3 Safety messages for SINAMICS S120

F30656

SI P2: Incorrect Motor Module parameter

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

When accessing the Safety Integrated parameters for monitoring channel 2 in the non-volatile memory, an

error has occurred.

Note:

This fault results in a STOP A that can be acknowledged.

Fault value (r0949, interpret decimal):

129: Safety parameters for monitoring channel 2 corrupted. Drive with enabled safety functions possibly

copied offline using the commissioning software and the project downloaded.

131: Internal software error on the Control Unit.

255: Internal Motor Module/Hydraulic Module software error.

Remedy

Recommission the safety functions.

Upgrade the Control Unit software.

Upgrade the Motor Module/Hydraulic Module software.

Replace the memory card or the Control Unit.

• For fault value = 129:

Activate the safety commissioning mode (p0010 = 95).

Adapt the PROFIsafe address (p9610).

Start the copy function for SI parameters (p9700 = D0 hex).

Acknowledge data change (p9701 = DC hex).

Exit the safety commissioning mode (p0010 = 0).

Save all parameters (p0977 = 1 or "Copy RAM to ROM").

Carry out a POWER ON (power off/on) for all components.

F30659

SI P2: Write task for parameter rejected

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

The write task for one or several Safety Integrated parameters on monitoring channel 2 was rejected.

Note:

This fault does not result in a safety stop response.

Fault value (r0949, interpret decimal):

10: An attempt was made to enable the STO function although this cannot be supported.

11: An attempt was made to enable the SBC function although this cannot be supported.

Safety Integrated (system-integrated)

734

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

Diagnostics

11.3 Safety messages for SINAMICS S120

F30659

SI P2: Write task for parameter rejected

13: An attempt was made to enable the SS1 function although this cannot be supported.

14: An attempt was made to enable the safe motion monitoring with the higher-level control although this

cannot be supported.

15: An attempt was made to enable the motion monitoring functions integrated in the drive although these

cannot be supported.

16: An attempt was made to enable PROFIsafe communication, although this cannot be supported or the

version of the PROFIsafe driver is different in both monitoring channels.

19: An attempt was made to enable the pulse suppression delay for ESR, although this cannot be supported.

See also: r9771 (SI common functions (Control Unit)), r9871 (SI common functions (Motor Module))

Remedy

• For fault value = 10, 11, 13, 14, 15, 16, 19:

Check whether there are faults in the safety function alignment between the two monitoring channels

(F01655, F30655), and if required carry out diagnostics for the faults involved. Use a Motor Module that

supports the required function.

Upgrade the Motor Module software.

Upgrade the Control Unit software.

F30672

SI P2: Control Unit software incompatible

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

The existing Control Unit software does not support the safe drive-integrated motion monitoring function.

Note:

This fault results in a STOP A that cannot be acknowledged.

Fault value (r0949, interpret decimal):

Only for internal Siemens troubleshooting.

Remedy

Check whether there are faults in the safety function alignment between the two monitoring channels

(F01655, F30655), and if required carry out diagnostics for the faults involved.

• Use a Control Unit that supports the safety-related motion monitoring functions.

• Upgrade the Control Unit software.

F30680

SI Motion P2: Checksum error safe monitoring functions

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Safety Integrated (system-integrated)

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

735

Diagnostics

11.3 Safety messages for SINAMICS S120

F30680

SI Motion P2: Checksum error safe monitoring functions

Explanation

The actual checksum calculated by the Motor Module/Hydraulic Module and entered into r9398 over the safety-

related parameters does not match the reference checksum in p9399 saved when the machine was accepted

the last time.

The safety-related parameters have been changed or there is an error.

Note:

This fault results in a STOP A that cannot be acknowledged.

Fault value (r0949, interpret decimal):

0: Checksum error for SI parameters for motion monitoring.

1: Checksum error for SI parameters for component assignment.

Remedy

Check the safety-related parameters and if required correct.

• Set the reference checksum to the actual checksum.

• Execute the "Copy RAM to ROM" function.

• Perform a POWER ON if safety parameters have been changed that require a POWER ON.

• Carry out an acceptance test.

C30681

SI Motion P2: Incorrect parameter value

Response

NONE

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

The parameter cannot be parameterized with this value.

Note:

This message does not result in a safety stop response.

Fault value (r0949, interpret decimal):

Parameter number with the incorrect value.

Remedy

Correct the parameter value (if necessary, also on the CU side, p9601).

For more detailed information, see the SINAMICS S120/S150 List Manual

F30682

SI Motion P2: Monitoring function not supported

Response

OFF2

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

The monitoring function enabled in p9301, p9501, p9601 or p9801 is not supported in this firmware version.

Note:

This message does not result in a safety stop response.

Fault value (r0949, interpret decimal):

9: Monitoring function not supported by the firmware or enable bit not used.

12: This Control Unit does not support the operation of safe functions with a higher-level control (e.g. SINU-

MERIK).

30: The firmware version of the Motor Module is older than the version of the Control Unit.

Remedy

Deselect monitoring function involved (p9301, p9301, p9303, p9601, p9801).

Upgrade the Motor Module firmware.

Safety Integrated (system-integrated)

736

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

Diagnostics

11.4 Safety PLC alarms

F30706

SI Motion P2: SAM/SBR limit exceeded

Response

NONE

Acknowledg-

IMMEDIATELY (POWER ON)

ment

Explanation

After the initiation of STOP B (SS1) or STOP C (SS2), the speed has exceeded the selected tolerance value.

The drive is stopped with message C30700 "SI Motion P2: STOP A initiated".

Remedy

Check the braking behavior and if required, adapt the parameterization of the "SAM" or "SBR" function.

This message can only be acknowledged in the acceptance test mode without POWER ON via PROFIsafe.

11.4

Safety PLC alarms

400253

PLC-STOP due to an SPL system error

Explanation

After an interruption in the communications between NCK and PLC regarding the SPL crosswise data com-

parison, the PLC was switched into the STOP state with a delay of 5 s.

Response

Alarm display

Remedy

Do not start the SPL anymore. Check the system components (PLC must have the correct version of FB15 and

have DB18).

Program con-

Remove the error. Switch control system OFF and ON again.

tinuation

400254

Checksum error occurred: %1 parameter: %1 = reference to the code section or table

Explanation

Checksum error in safety-related code or safety-related data. The safety monitoring functions (Safety Inte-

grated) in the PLC could be corrupted.

Response

Alarm display

Remedy

Switch off the control and switch on again. If this fault occurs again, contact the service department. In

addition perform a general reset for NC, PLC and reload the archive.

Program con-

Switch control system OFF and ON again.

tinuation

400551

Error on the MPI/DP bus

Explanation

I/O bus error detected

Response

Alarm display

Remedy

Check the I/O, resolve I/O errors

Program con-

Internal

tinuation

400552

Error on the DP bus

Explanation

I/O bus error detected

Response

Alarm display

Safety Integrated (system-integrated)

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

737

Diagnostics

11.5 Reducing the number of alarms

400552

Error on the DP bus

Remedy

Check the I/O, resolve I/O errors

Program con-

Internal

tinuation

411101

FB11, illegal axis number

Explanation

Parameter axis not in the permissible range

Response

Alarm display

PLC stop

Remedy

PLC general reset, use the basic program with the correct version.

Program con-

Remove the error. Switch control system OFF and ON again.

tinuation

11.5

Reducing the number of alarms

In some cases, alarms having the same significance are initiated by the NCK, PLC and SINAMICS

S120 monitoring channels. In order to make the alarm screen more transparent, the alarms that

were initiated sometime later - but have the same significance - are suppressed or even an alarm

that occurred earlier is cleared again if it apparently involves a subsequent (follow-on) fault/

error.

Alarm suppression and alarm priority are not involved when it comes to initiating a stop through

two channels. This functionality is implemented independently of the alarm being initiated and

is still maintained.

11.5.1

Alarm suppression

When the alarm suppression function is active, the alarm of the monitoring channel is displayed

that first detected the fault/error that initiated the alarm.

This only applies to some of the alarms. Alarms whose information content differs depending on

the monitoring channels are still separately displayed.

All of the NCK and SINAMICS S120 safety alarms, which can be suppressed with the appropriate

parameterization of $MN_SAFE_ALARM_SUPPRESS_LEVEL, are listed in the following table.

NCK

SINAMICS

Alarm suppression using the following values in

alarm

S120 alarm

$MN_SAFE_ALARM_SUPPRESS_LEVEL, several values are alternatively

number

possible

27000

C01797

3, 13, replaced by Alarm 27100

27010

C01707

1, 2, 3, 12, 13

27011

C01714

1, 2, 3, 12, 13

27012

C01715

1, 2, 3, 12, 13

27013

C01706

1, 2, 3, 12, 13

27020

C01710

1, 2, 3, 12, 13

27021

C01709

1, 2, 3, 12, 13

Safety Integrated (system-integrated)

738

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

Diagnostics

11.5 Reducing the number of alarms

NCK

SINAMICS

Alarm suppression using the following values in

alarm

S120 alarm

$MN_SAFE_ALARM_SUPPRESS_LEVEL, several values are alternatively

number

possible

27022

C01708

1, 2, 3, 12, 13

27023

C01701

1, 2, 3, 12, 13

27024

C01700

1, 2, 3, 12, 13

All of the NCK alarms, which can be prevented from being initiated twice due to a PLC request,

are listed in the following table.

NCK alarm

Alarm suppression using the following values in $MN_SAFE_ALARM_SUPPRESS_LEV-

number

EL, several values are alternatively possible.

27090

2, 3, 12, 13

27091

2, 3, 12, 13

27092

2, 3, 12, 13

27095

2, 3, 12, 13

27250

2, 3, 12, 13

27251

2, 3, 12, 13

27252

2, 3, 12, 13

27253

2, 3, 12, 13

27254

2, 3, 12, 13

27255

2, 3, 12, 13

27256

2, 3, 12, 13

Activation

The alarm is suppressed using MD10094 $MN_SAFE_ALARM_SUPPRESS_LEVEL. When standard

data is loaded, the function is already active. This means that a reduced number/scope of alarms

is displayed. Alarms 27000 and C01797 can be replaced via MD10094 with Alarm 27100.

MD $MN_SAFE_ALARM_SUPPRESS_LEVEL can also be used to set that Alarm 27040 is replaced

by the group alarm 27140 "Waiting for motor module of at least one axis".

SPL commissioning mode

The following alarm reductions are made in the commissioning phase:

The axis-specific acceptance test alarm 27032 "Axis %1 checksum error safe monitoring

functions. Confirmation and acceptance test required!", 27035 "Axis %1 new hardware

component, confirmation and functional test required" and 27060 "Axis %1 Drive assignment

checksum error, confirmation and acceptance test required!" are replaced by the axis-specific

group alarm 27132 "Axis %1 checksum group error safe monitoring functions. Confirmation and

acceptance test required", replaced.

An additional alarm reduction can be set using MD $MN_SAFE_ALARM_SUPPRESS_LEVEL (100's

position set). As a result, the axis-specific acceptance test alarms are replaced by the global

Safety Integrated (system-integrated)

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

739

Diagnostics

11.5 Reducing the number of alarms

acceptance test group alarm 27135 "Axis %1 checksum group error, safety-related monitoring

functions on at least one axis. Confirmation and acceptance test required", replaced.

Note

The alarm reduction is only made in the SPL commissioning mode (MD

$MN_PREVENT_SYNACT_LOCK[0,1] = 0). Outside this mode, when changing the parameter

assignment, the corresponding individual axis-specific alarms 27032, 27035 and 27060 are

always output.

Acceptance test alarms of the drive are not included in the alarm reduction. The reason for this

is that a parameterization change, which results in acceptance test alarms, can be performed

independently of one another in the two monitoring channels.

It does not make sense to reduce the global acceptance test alarms (27070-27073). The reason

for this is that these alarms, which refer to a checksum error in the SPL parameterization,

PROFIsafe configuration or I/O coupling (peripherals), is only output if the axis-specific

monitoring functions have been enabled.

Boundary condition

The MD is not incorporated in the axis-specific safety MD checksum. This means that the function

can be enabled/disabled at any time by changing the MD. In the acceptance test, the alarm

suppression should be internally deactivated so that the two-channel fault/error detection can

be checked. It can then be subsequently activated in order to reduce the number of alarms that

end users have to cope with.

11.5.2

Assigning priorities to alarms

Especially for machines with an extremely high number of axes, the previously described alarm

suppression function is not adequate in order to obtain a display of the real fault/error codes.

Just one single defective input signal can cause alarm 27001 (or 27101 to 27107) to occur for

many axes if this input signal has been configured as SGE on several axes. The cause of the fault/

error can be hidden as a result of the large alarm list.

This is the reason that priorities are assigned to Alarms 27090, 27004, 27001 and 27101 to

27107. For these alarms

• A subsequent (follow-on) alarm that occurs afterwards is no longer displayed. This alarm is

also not visible in the alarm log.

• A subsequent (follow-on) alarm that already occurred beforehand is cleared again. This

alarm is then visible in the alarm log.

Assigning priorities to Alarm 27090 only becomes effective if it occurs due to differences in the

$A_INSE system variables. Only then will this alarm be initiated as a result of different input

signals. For Alarms 27004, 27001 and 27101 to 27107, no additional condition is required, as

• Alarms 27001 and 27101 to 27107 cannot occur if a STOP B or a STOP A is already active.

When the SI functionality is active, STOP B and STOP A always occur as subsequent error and

do not provide the user with any additional information about the cause of the fault or error.

• Alarm 27004 only occurs if differences are determined in the input signals.

Safety Integrated (system-integrated)

740

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

Diagnostics

11.5 Reducing the number of alarms

Subsequent alarm for Alarm 27090

If Alarm 27090 is output, the following alarms are no longer displayed:

•

27001 defect in a monitoring channel

•

27004 difference, safety inputs

•

27020 STOP E initiated

•

27021 STOP D initiated

•

27022 STOP C initiated

•

27023 STOP B initiated

•

27024 STOP A initiated

•

27091 Error for crosswise data comparison NCK-PLC

•

27101 difference for the function, Safe Operating Stop

•

27102 difference for the function, safely reduced speed

•

27103 difference for the function, Safe End Position

•

27104 difference for the function, Safe Cam Plus

•

27105 difference for the function, Safe Cam Minus

•

27106 difference for the function safely reduced speed n_x

•

27107 difference for the function, cam modulo monitoring

Subsequent alarm for Alarm 27004

•

27001 defect in a monitoring channel

•

27023 STOP B initiated

•

27024 STOP A initiated

•

27101 difference for the function, Safe Operating Stop

•

27102 difference for the function, Safely-Limited Speed

•

27103 difference for the function, Safe End Position

•

27104 difference for the function, Safe Cam Plus

•

27105 difference for the function, Safe Cam Minus

•

27106 difference for the function safely reduced speed n_x

•

27107 difference for the function, cam modulo monitoring

Subsequent alarms for Alarms 27001 and 27101 to 27107

•

27023 STOP B initiated

•

27024 STOP A initiated

Safety Integrated (system-integrated)

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

741

Diagnostics

11.5 Reducing the number of alarms

Activation

Priorities are assigned to alarms by appropriately parameterizing MD10094

$MN_SAFE_ALARM_SUPPRESS_LEVEL. When this MD is set to either 12 or 13, in addition to the

alarm suppression, set with values 2 and 3, the function that assigns priorities to alarms is also

activated.

Alarm 27124,

By assigning priorities to alarms, alarms with the power on clear criterion are also cleared or no

longer displayed. In spite of this, the system is in a state in which a power on is required. If Alarm

27024 "STOP A initiated" has occurred, but is no longer displayed, then at least group Alarm

27124 "STOP A for at least 1 axis" is displayed.

Safety Integrated (system-integrated)

742

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

Interaction with other functions

12.1

Limiting the speed setpoint

The setpoint speed is parameterized as a function of the active safety monitoring in MD36933

$MA_SAFE_DES_VELO_LIMIT. This machine data is not incorporated in the axis-specific

checksum MD36998 $MA_SAFE_ACT_CHECKSUM, so that changes can be made to the MD for

the acceptance test without having to again change the checksum.

If the spindle speed is limited by the SG-specific setpoint limiting, then this is displayed using the

axis-specific status signal DB3x.DBX83.1.

MD = 0%:

setpoint limiting inactive

MD > 0%:

setpoint limiting = active SG limit multiplied by MD value

For SBH setpoint limit = 0

MD = 100%:

setpoint limiting = active SG limit

For SBH, setpoint limit = 0

• The function is effective in one channel in the NCK interpolator. The safety monitoring

channel provides a limit value that corresponds to the selected safety monitoring type.

• This function influences both axes and spindles.

• The active setpoint limit can be viewed in the safety service screen:

Display value = -1. corresponds to "setpoint limiting not active"

Display value >= 0. corresponds to "setpoint limiting active"

• The setpoint limit is changed-over when the SGE is changed-over:

SGE "SBH/SG deselection"

SGE "SBH deselection"

SGE "active SG stage, bits 0, 1"

SGE "SG override, bits 0, 1, 2, 3"

- Further, internal changeover operations in SBH have an effect as a result of a stop

response (STOP D, C, E)

- Using axis-specific signals DB3x.DBX34.0 ... 1, the user can select a value from the MD

field 36933 $MA_SAFE_DES_VELO_LIMIT[0..3]. This means that independent of the

active SG stage, one of four parameterized setpoint speed limits can be activated. If the

PLC user program does not provide an input value, then the value in MD

$MA_SAFE_DES_VELO_LIMIT[0] applies

• For the changeover via SGE, the states from both monitoring channels are taken into

consideration to take into account differences in the times. This results in the following rules:

Safety Integrated (system-integrated)

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

743

Interaction with other functions

12.2 Setpoint switchover

1. Changing-over from non-safe operation in SG/SBH

There is no delay (VELO_SWITCH_DELAY), so that this changeover must always be performed

at zero speed or below the enabled SG limit.

2. Changing-over from SGx to SGy

A) SGx > SGy (braking): A lower setpoint is entered as soon as changeover is detected in one

of the two channels.

B) SGx < SGy (accelerating): A higher setpoint is only entered if both channels have changed-

over.

3. Changing-over from SG to SBH (braking)

A lower setpoint (= 0) is entered as soon as the changeover has been detected in one of the

two channels.

4. Changing-over from SBH to SG (accelerating)

A higher setpoint is only entered if both channels have changed-over.

5. Changing-over from SBH/SG in the non-safe mode (accelerating)

A higher setpoint is only entered if both channels have changed-over.

• Effect of the function in the NCK interpolator:

- Setpoint limiting is active in both the AUTO as well as in the JOG modes.

- When changing-over while moving to higher safely reduced speeds, the position control

loop should be set so that it does not overshoot. This means that a sudden setpoint limit

change does not cause the monitoring to respond on the actual value side.

- When transformation is active, safety setpoint limits, effective in the interpolator on an

axis-for-axis basis are reduced by the transformation itself depending on the actual

position.

Note

There are no restrictions for motion from synchronous actions.

12.2

Setpoint switchover

The "setpoint changeover" function allows several axes to use a common drive. In order to

define the axes that are to be involved in the setpoint changeover, the same drive setpoint

channel is assigned a multiple number of times. To do this, MD30110

$MA_CTRLOUT_MODULE_NR must be preassigned for each axis with the logical drive number.

Safety Integrated (system-integrated)

744

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

Interaction with other functions

12.2 Setpoint switchover

Setpoint changeover and Safety Integrated

In conjunction with the setpoint changeover, the SI functionality is only supported with a

restricted scope. At each setpoint changeover, the absolute position reference is lost. This means

that only SI functions can be sensibly and practically used that do not require absolute position

information. These functions include SBH, SH, SG, SBR, Stops and SPL.

Note

SE and SN are not supported.

The SI monitoring functions are only calculated in the axis configured for this - not taking into

account existing drive checking functions. This means that only this SI machine axis detects SI

fault/error states. The associated alarm responses are automatically effective for all of the axes

involved in the setpoint changeover.

MD36901 $MA_SAFE_FUNCTION_ENABLE may only be activated in the last machine axis

configured for the setpoint changeover. This fixed assignment is kept over all setpoint

changeover operations.

In conjunction with Safety Integrated, all of the axes, involved in the setpoint changeover, must

be configured in the same channel.

If the SI monitoring is also to be effective when traversing/moving non-SI axes, then it is not

permissible that the SI axis is parked during this time.

An axis with the drive checking function DB3x.DBX96.5=1 must be parked at the same time as

an SI axis. This means that the axis SI monitoring functions are de-activated synchronously in the

drive and in the SI axis. Parking the axis - must always be selected for both axes.

The "parking" operating state can only be exited using the axis with the drive checking function.

As a result of the mechanical changeover, the motor encoder (G1) - monitored using SI - is

moved from several axes one after the other. In order to be able to determine the correct speed

on the load side, the existing gearbox ratios of the axes involved must be sensibly emulated

(mapped) in the 8 elements of MD36921, MD36922 of the SI axis and the drive p9521, p9522.

In order that the correct gearbox ratio becomes effective in the SI monitoring function, the PLC

must select the associated SI gearbox ratio and change over the setpoint at the same time.

The SGEs to change over the gearbox stage must be safety-related and therefore be able to be

controlled through 2 channels. Channel 1 should evaluate the feedback signals from the

gearboxes, channel 2 should evaluate the feedback from the setpoint changeover

DB3x.DBX96.5 "Control of drive accepted". It is not permissible to use a 1-channel signal source

to control the SGEs.

2-encoder system

If the SI axis has two encoders, when changing over to the non-SI axes, it is not permissible that

the second safety encoder is de-coupled. Both SI encoders must be continuously in operation.

The gearbox ratio between the SI axis and the non-SI axes must be taken into account when

configuring the SI gearbox ratios.

Safety Integrated (system-integrated)

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

745

Interaction with other functions

12.4 Gantry axes

STOPs

The setting MD36964 SAFE_IPO_STOP_GROUP <> 0 is not permissible for the SI axis, as this

causes the interpolating relationships to be cancelled.

Brake test

The brake test can only be carried-out in the SI axis. The SI axis must have the drive checking

function for the brake test.

Acceptance test

The acceptance test for non-SI axes must be manually carried-out and logged. The acceptance

test does not provide any support.

12.3

Measuring system switchover

When measuring systems are changed-over (selected) via interface signals

"Position measuring system 1" (DB 31..., DBX1.5)

"Position measuring system 2" (DB 31..., DBX1.6), the following applies:

The encoder used by the position controller is changed-over.

Note

SI continues to work with the parameterized encoder.

12.4

Gantry axes

Stop responses STOP A, B, C for gantry axes are initiated as fast as possible for all of the axes in

the group. However, if unacceptable offsets result because of the differing braking behavior of

the axes, then stop response Stop D should be configured.

Safety Integrated (system-integrated)

746

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

Interaction with other functions

12.5 Parking axis

12.5

Parking axis

When the park state is activated (using the interface signal "parking"), then the system

automatically cancels the pulses using an external STOP A. After the park state has been

removed, the external STOP A is automatically deactivated again.

WARNING

"Parking" function

When the "parking" function is selected, actual value acquisition and the position measuring

system monitoring are deactivated for an axis/spindle. The NCK actual value is frozen and

mechanical actual value changes are no longer detected. This also applies to the actual value

sensing of the two safety monitoring channels NCK and SINAMICS S120. This means that all of

the actual value-related safety motion monitoring functions (SBH, SG, n<n_x, SBR, SE, SN) are

ineffective.

The user can align the actual value acquisition of the safety monitoring channels after de-

selecting parking by again referencing/synchronizing to the machine position.

Parking an axis with absolute reference (SE/SN)

As a result of the fact that the actual value sensing of the two safety monitoring channels NCK

and SINAMICS S120 has been deactivated, then the absolute reference of the axis is no longer

detected in a safety-related fashion. The safety monitoring channels then respond as follows:

• Alarms 27000/C01797 are displayed "Axis no longer safely referenced"

• SGA "Axis safely referenced" cancelled on NCK and drive side

These alarms are only displayed for axes for which safety monitoring functions with absolute

reference are activated, i.e. for SE and SN. Alarms are not displayed for axes that do not have

these monitoring functions.

Machine data 36965 $MA_SAFE_PARK_ALARM_SUPPRESS can be used to suppress Alarms

27000/C01797 until parking has been withdrawn.

Note

If "parking axis" was not requested, however "parking active" is signaled from the drive or

encoder, then Alarm 27001 is output with fine code 1025.

Note

When a drive object that has Safety Integrated Functions enabled is switched into the "Parking"

state, the Safety Integrated software responds by activating STO without generating a separate

message.

Safety Integrated (system-integrated)

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

747

Interaction with other functions

12.7 OEM applications

12.6

Incremental encoder functionality

The function "Save actual value with incremental encoder" is enabled in MD

$MA_ENC_REFP_STATE for the parameterizable incremental encoder, and a monitoring function

with absolute reference (SE/SN) is enabled in MD $MA_SAFE_FUNCTION_ENABLE. This

combination of functions is not permitted.

12.7

OEM applications

Information for HMI-OEM users

If SINUMERIK Safety Integrated) (SI) and OEM applications (for HMI) are used at the same time,

the following points must be observed.

WARNING

HMI OEM users

1. The PLC interface signals (DB31, ...) with safety-related drive inputs and outputs may not be

written into using the variable service (utility) of the NCDDE/CAP server.

2. Write machine data using variable service

An acceptance test must be carried if the SI machine data were changed using the variable

service of the NCDDE/CAP server.

3. Changing alarm priorities

The alarm priorities selected for SI must be retained.

4. Changing alarm texts

The alarm texts of SI alarms can be modified: This must be clearly documented for the user.

5. "Carry out acceptance test" message box

It is not permissible that the "Carry out acceptance test" message box is modified!

6. User agreement

Functions relating to the user agreement (e.g. call, protective mechanism) may not be

altered.

Information for NCK-OEM users

SINUMERIK Safety Integrated can also be used for NCK-OEM applications.

Note

System memory change

System memory changes caused by the OEM application result in Alarm 27003 "Checksum error

occurred".

Safety Integrated (system-integrated)

748

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

Interaction with other functions

12.9 Response of the Sim-NCK systems

12.8

NCU-Link

An NCU link involves a group of several NCUs to control a machine. In this case, the interpolation

function of the various SERVO axes is distributed across the various NCUs.

The following definitions apply when operating systems such as these with safety functionality:

• An SPL must be applied on each NCU.

• An SPL is used to evaluate the local PROFIsafe I/O and the control of the local SERVO axes. The

monitoring behavior of SERVO axes of other NCUs is controlled by the SPL of the

corresponding NCU.

• Safety-related statuses are exchanged between various SPLs via the safety-related

communication F_SENDDP/F_RECVDP.

• Errors in the SPL context (SPL CDC) or F-communication context (PROFIsafe, F_SENDDP/

F_RECVDP) only act on the local SERVO axes.

• Errors from motion monitoring functions with stop responses on the IPO act on the axes of

the channel of the axis, which initiated this response. These responses can also affect other

NCUs.

• In conjunction with NCU Link, safety functions "Safe limit switch", "Safe cams" and "Safe cam

track" are not released.

12.9

Response of the Sim-NCK systems

For simulation systems, a distinction is made in systems, which can be used to verify

• that a part program can be executed

• the ability of the control to function - including the various I/O circuits

Simulation to check that the part program can be executed

It is not expected that the safety functionality is effective for these systems (Linux-based,

Windows-based without PLC simulation). The machine data, with which safety functionality can

be activated, are therefore write protected.

The following machine data are write protected:

• $MN_PROFISAFE_MASTER_ADDRESS

Enable PROFIsafe master functionality

• $MN_PROFISAFE_IN_ADDRESS

Enable PROFIsafe input modules

• $MN_PROFISAFE_OUT_ADDRESS

Enable PROFIsafe output modules

• $MN_PROFISAFE_IN_ENABLE_MASK

Enable PROFIsafe input modules

• $MN_PROFISAFE_OUT_ENABLE_MASK

Enable PROFIsafe output modules

Safety Integrated (system-integrated)

Function Manual, 10/2020, 6FC5397-4BP40-6BA2

749

Interaction with other functions

12.10 Response of Safety Integrated when the communication fails

• $MN_SAFE_SDP_ENABLE_MASK

Enable F_SENDDP connections

• $MN_SAFE_RDP_ENABLE_MASK

Enable F_RECVDP connections

• $MA_SAFE_FUNCTION_ENABLE

Enabling axis-specific SI functions

This means that the safety functionality in these systems is not activated and they behave

neutrally.

Correct operation of the general NC functionality is guaranteed (start and protection of the SPL

program does not have a disturbing effect). However, the safety functionality implemented in

the application (i.e. not within the context of the simulation) is not corrected.

Influencing the part program sequence by querying safety system variables or querying the

above-mentioned enable machine data is not changed.

Simulation, machine integration

For these systems (Windows-based with simulated PLC), the complete safety functionality (axis

motion monitoring), PROFIsafe and

F_SENDDP/F_RECVDP coupling should function just the same as in a real system.

The safety functionality can be parameterized and programmed just the same as in a real control

system. The communication mechanisms on the PLC side ensure that the PROFIsafe and

F_SENDDP/F_RECVDP protocols are maintained. External software components can read-in or

read-out user data in/out of the PROFIsafe module adapter.

12.10

Response of Safety Integrated when the communication fails

When the communication required for the SI fails between the drive and the NCK, then both

channels cancel the pulses. Under certain circumstances, this can be delayed to enable

retraction motion.

SINUMERIK 840D sl. Service - Safety Integrated. Manual (2020) - page 11