Table of contents 5 Table of contents 1 Safety instructions Contents of this chapter ................Use of warnings and notes ..............Instructions for functional safety circuits ............Electrical safety precautions ..............2 Introduction to the manual Contents of this chapter ................Applicability ..................
Page 6
6 Table of contents Ramp parameters ................Safety pulse encoder parameters ............4 Electrical installation Contents of this chapter ................Wiring ....................SLS function ................... SMS function ................... SSM function ................... 5 Use of the safety function Contents of this chapter ................Activating and deactivating the SLS function ..........
Safety instructions 7 Safety instructions Contents of this chapter This chapter contains the safety instructions which you must obey when you install, operate and do maintenance on the safety functions of a drive. Use of warnings and notes Warnings tell you about conditions which can cause injury or death, or damage to the equipment.
8 Safety instructions Only a qualified electrician who has appropriate knowledge on functional, machine, and process safety is allowed to install, start up and maintain the safety circuit. All user-made changes are on the user's responsibility. WARNING! This safety function does not disconnect the voltage of the main and auxiliary circuits from the drive.
Page 9
Safety instructions 9 • Make sure that the voltage between the drive output terminals (T1/U, T2/V, T3/W) and the grounding (PE) busbar is close to 0 V. 6. Ask the person in control of the electrical installation work for a permit to work.
Applicability The manual applies to ACS880-07/17/17LC/37/37LC drives which have the option +Q965: Safely-limited speed with the encoder interface. For the option +Q965, ABB installs the FSO-21 safety functions module (option +Q972) and the FSE-31 pulse encoder interface module (option +L521) to the drive.
12 Introduction to the manual Exclusion of liability ABB is not responsible for the implementation, verification and validation of the overall safety system. It is the responsibility of the system integrator (or other party) who is responsible for the overall system and system safety.
Page 13
Document Library. For manuals not available in the Document library, contact your local ABB representative. For additional ABB safety information and solutions visit http://www.abb.com/safety. ACS880-07 (45 to 710 kW) manu- ACS880-07 (560 to 2800 kW) ACS880-17 (45 to 400 kW) manuals...
14 Introduction to the manual Terms and abbreviations Term Description Cat. Classification of the safety-related parts of a control system in respect of their resistance to faults and their subsequent behavior in the fault condition, and which is achieved by the structural arrangement of the parts, fault detection and/or by their reliability. The categories are: B, 1, 2, 3 and 4.
The option +Q965 requires that the FSO-21 safety functions module(s) (option +Q972) and the FSE-31 pulse encoder interface module(s) (option +L521) are installed in the drive. ABB installs the FSO and FSE-31 modules to the drive and sets the delivery configuration for the cabinet safety option at the factory.
The digital output of the FSO module to which the SLS indication signal is connected, is selected as the output for the SLS output. This is an FSO module parameter that ABB sets at the factory by default and the user must check at the start-up.
SLS function except that it can only be configured to be continuously on or off. ABB activates the SMS function (Version 1) at the factory. This is an FSO module parameter that the user must check/set at the start-up.
18 Option description the SSE function activates the drive Safe torque off (STO) function either immediately or after a deceleration ramp. The motor coasts to a stop or decelerates to zero speed. There are four separate SLS functions in the FSO module with different parameter settings. The SLS1 function is used as an example and in the delivered default settings of the +Q965 option.
Option description 19 3. The user or a PLC deactivates the SLS request of the FSO module, that is, switches the digital input of the FSO module from 0 to 1. The FSO module acknowledges the SLS1 function automatically. This is set to be automatic by an FSO parameter (SLSx.02), and no external acknowledgement input is in use.
20 Option description (3b) Time B has elapsed. The FSO module starts SLS monitoring (if not already started). Note: If the motor speed is above the SLS monitoring limit after time B has elapsed, the FSO module activates the SSE function. Depending on SSE function parameter settings, the motor either coasts to a stop (“Immediate STO”) or ramps down to zero speed (“Emergency ramp”).
Option description 21 1. The user or a PLC activates the SLS request of the FSO module, that is, switches the digital inputs of the FSO module from 1 to 0. 2. (From (2) to (3)) After the safety function response time (A), the drive starts to ramp down the motor speed.
Page 22
22 Option description used with FSO-21 and FSE-31 when feedback change from encoder to speed estimate is allowed. For more instructions, see FSO module user’s manual. SLS ramp modoff selection FSO reaction during SLS deceleration ramp if drive modula- See fig- (par.
Page 23
Option description 23 Example 1: Modoff delay time – modulation returns before modoff delay The operation of the SLS function in case of the modulation of the drive is lost during the deceleration ramp and the modulation returns before the Modoff delay time has run out with Modoff delay time selected (parameter SLSx.05 is set to Modoff delay time) is described in the time diagram and table below.
Page 24
24 Option description Example 2: SAR1 ramp monitoring active The operation of the SLS function in case the modulation of the drive is lost during the deceleration ramp with Monitoring active selected (parameter SLSx.05 is set to Monitoring active) is described in the time diagram and table below. Motor speed Time SLS request...
Page 25
Option description 25 Example 3: SAR1 ramp monitoring and SLS modoff delay time active The operation of the SLS function in case the modulation of the drive is lost during the deceleration ramp with Monitoring active and modoff delay time selected (parameter SLSx.05 is set to Monitoring active and modoff delay time) is described in the time diagram and table below.
Page 26
26 Option description Example 4: Time monitoring active The operation of the SLS function in case the modulation of the drive is lost during the deceleration ramp with Monitoring active selected (parameter SLSx.05 is set to Monitoring active) is described in the time diagram and table below. Motor speed Time SLS request...
Option description 27 Example 5: Monitoring and modoff delay time disabled The operation of the SLS function in case the modulation of the drive is lost during the deceleration ramp with Monitoring and modoff delay time disabled selected (parameter SLSx.05 is set to Monitoring and modoff delay time disabled) is described in the time diagram and table below.
The SSM1 function is used as an example and in the delivered default settings of the +Q965 option. ABB activates the SSM1 function at the factory. The user sets the SSM positive and negative SSM speed limits at the start-up. For more information, see section Parameter settings and FSO module user’s manual.
Option description 29 Motor speed Time SSM indication SSM1 limit positive (parameter SSMx.13) SSM1 limit negative (parameter SSMx.12) 1. The motor speed goes above the SSM limit positive. The SSM indication goes off. 2. The motor speed goes below the SSM limit positive. The SSM indication goes on. 3.
Option description 31 Note: If the motor speed goes above the SLS trip limit, the FSO module activates the SSE function. The motor coasts to a stop or decelerates to zero speed according to FSO parameter settings. The FSO module activates the drive STO. 3.
32 Option description For more information, see the drive firmware manual, FSO-21 safety functions module user’s manual (3AXD50000015614 [English]) and FSE-31 pulse encoder interface module user’s manual (3AXD50000016597 [English]). ■ Safety encoder Internal faults of the safety encoder and the FSE-31 module will cause the FSO module to go into Fail-safe mode.
Option description 33 Note: When the motor is running, you cannot change the password, adjust parameter values, nor upload or download the FSO configuration file. Note: The FSO module activates the STO function if the motor speed hits a ramp monitoring limit during the deceleration ramp.
34 Option description Index Name Example value Description FSOGEN.52 Zero speed with en- 10 rpm Sets the general zero speed limit for safety coder functions when a safety encoder is in use. This parameter is relevant when the SSE function is activated and if parameter SSE.13 SSE function is set to Emergency ramp.
Page 35
Option description 35 Index Name Example value Description STO.11 STO input A None Sets the digital input that is connected to the primary input of the STO function. The safety option described in this manual does not use this function and the value must be None.
STO function. SAR0 parameters define the deceleration ramp (for more information, see the FSO module user’s manual). For the +Q965 option, ABB has set this parameter to value Immediate STO at the factory. Adjust the default value when ne- cessary.
Page 37
Option description 37 Index Name Example value Description SSE.16 SSE ramp zero 0 ms Sets an extra delay time for the drive STO speed delay for STO activation at the zero speed in the SSE function. With this parameter, the FSO module delays the STO activation so that the drive is able to reach the shaft zero speed before the FSO module activates the STO function.
There are four separate SLS functions (SLS1...4) in the FSO module. The SLS functions are identical and the configuration is done similarly, only the parameter numbers differ. The SLS1 function is shown as an example. ABB has activated the SLS1 function at the factory. For more information, see FSO module user’s manual.
Page 39
Ramp monitoring: SAR1 parameters define the deceleration ramp and monitoring limits. See parameters 200.112, SARx.21, SARx.22 and SARx.02. For the option +Q965, ABB has set this parameter to value Ramp at the factory. Adjust the default value when necessary. SLSx.04...
Page 40
Sets the digital input that is connected to the primary input of the SLS function with limits 1. For the option +Q965, ABB has configured the SLS request signal to these digital in- puts at the factory. Note: The default value after factory reset is None.
Page 41
Sets the digital output that is connected to the primary output of the SLS1 function. Active when the SLS monitoring is on. For the option +Q965, ABB has configured the SLS indication signal to this digital out- put at the factory.
Active high: The digital output is on when the indicated signal is active. For the option +Q965, ABB has configured the SLS indication signal to this digital out- put at the factory. Make sure that this value corresponds to the actual wiring. See the circuit diagrams of the delivery.
There are four separate SSM functions (SSM1...4) in the FSO module. The SSM functions are identical and the configuration is done similarly, only the parameter numbers differ. The SSM1 function is shown as an example. ABB has activated the SSM1 function at the factory. For more information, see FSO-21 module user’s manual.
Sets the digital output connected to the SSM1 function. Active when the motor speed is within the SSM1 speed limits. For the option +Q965, ABB has configured the SSM1 indication signal to this digital output at the factory. SAFEIO.55 DO X113:8 diag...
Page 45
Option description 45 Index Name Example value Description S_ENCGEN.14 Enc speed cross 1 rpm Sets the encoder speed cross comparison comp tolerance tolerance. This defines how much the axle speed of the motor can change within 1 ms. Adjust the default value to meet the motor in use.
46 Option description ■ Drive parameter settings The parameter setting in ACS880 primary control program: Name Default value Description 31.22 STO indication Warning/Warning Selects which indications are given when one or both Safe run/stop torque off (STO) signals are switched off or lost. Warning/Warning is the recommended setting.
27, 28, 29, 30 There is a separate user interface (terminal block [X965]) inside the drive cabinet. ABB installs the FSO and FSE-31 modules and the wirings between the FSO module and the user interface at the factory. The user must wire the safety pulse encoder to the FSE-31 module on site. Obey the instructions of the encoder manufacturer as well as the following rules: •...
Note: If you change the input and the parameter settings in the FSO module into a one-channel implementation, it affects the safety integrity of the safety function. The safety data that ABB has calculated for the function is not valid. 2. Use a shielded, twisted pair cable. We recommend a double-shielded cable.
Use of the safety function 49 Use of the safety function Contents of this chapter This chapter describes the use of the safety function with factory default settings. Activating and deactivating the SLS function To activate the SLS function, de-energize (24 V -> 0 V) the appropriate digital input of the FSO module.
50 Use of the safety function • the FSO module generates a fault (see parameter FSOGEN.62) • the drive generates an event according to parameter 31.22 STO indication run/stop (see section Parameter settings). The indications that the FSO module generates are configurable. For more information, see section Parameter settings and chapter Fault tracing in FSO module user’s manual.
Start-up and acceptance test 51 Start-up and acceptance test Contents of this chapter This chapter describes the start-up, acceptance test procedure, and validation of the safety function. Validation of the safety functions You must do an acceptance test (validation) to validate the correct operation of safety functions.
Note: The SLS acceptance test procedure described in this chapter does not test the trip limits, because the SLS function limits the motor reference speed to the SLS limit. ABB has validated the functionality of trip limits in the verification tests.
Page 53
Start-up and acceptance test 53 Action WARNING! Obey the safety instructions. If you ignore them, injury or death, or damage to the equipment can occur. Checks and settings with no voltage connected Stop the drive and do the steps in section Electrical safety precautions (page 8) before you start the work.
Page 54
54 Start-up and acceptance test Action Start the drive and make sure that the motor is running. For SLS function: Increase the motor speed close to the maximum speed of the application (above the SLS limit). For SMS function: Increase the motor speed above the speed defined in parameter SMS trip limit pos- itive.
If you change any wiring or component after the start-up, replace the FSO or FSE-31 module, modify FSO module parameters, or restore parameters to their factory default values: • Use only ABB-approved spare parts. • Register the change to the change log for the safety circuit.
56 Maintenance The person responsible for the design of the complete safety system should also note the Recommendation of Use CNB/M/11.050 published by the European co-ordination of Notified Bodies for Machinery concerning dual-channel safety-related systems with electromechanical outputs: • When the safety integrity requirement for the safety function is SIL 3 or PL e (cat. 3 or 4), the proof test for the function must be performed at least every month.
Technical data 57 Technical data Contents of this chapter This chapter lists the safety data, describes the ambient conditions and gives a list of standards related to the product. Safety data ■ Safety performance with different safety pulse encoders See FSE-31 pulse encoder interface module user’s manual (3AXD50000016597 [English]). This table gives the maximum PFH values for the safety encoder to fulfill the requirements for each safety integrity level.
Safety data values This safety data is valid for the default design of the safety circuit described in this manual. In case the final design differs from the default, ABB calculates new safety data and delivers it separately to the customer.
Technical data 59 module Drive module switch (STO) module ■ Relevant failure modes Relevant failure modes are: • internal failures of the FSO and FSE modules and the STO function in the drive. These failures are included in the failure rate value of the function. ■...
60 Technical data Standard Name EN 61800-5-2:2007 Adjustable speed electrical power drive systems – Part 5-2: Safety requirements – Functional IEC 61800-5-2:2016 EN 62061:2005 Safety of machinery – Functional safety of safety-related electrical, electronic and pro- grammable electronic control systems + AC:2010 + A1:2013 + A2:2015...
Product and service inquiries Address any inquiries about the product to your local ABB representative, quoting the type designation and serial number of the unit in question. A listing of ABB sales, support and service contacts can be found by navigating to www.abb.com/searchchannels.