Table of contents 5 Table of contents 1 Safety instructions Contents of this chapter ................Use of warnings and notes ............... Instructions for functional safety circuits ............Electrical safety precautions ..............2 Introduction to the manual Contents of this chapter ................Applicability ..................
Page 6
9 Technical data Contents of this chapter ................Safety data ..................Safety data values ................ACS880-07/07LC/17/17LC/37/37LC drives without the FSE-31 module ... ACS880-07/07LC/17/17LC/37/37LC drives with the FSE-31 module ....Safety component types ............... Safety block diagrams ................. Relevant failure modes ................
Safety instructions 7 Safety instructions Contents of this chapter This chapter contains the safety instructions which you must obey when you install, operate and do maintenance on the safety functions of a drive. Use of warnings and notes Warnings tell you about conditions which can cause injury or death, or damage to the equipment.
8 Safety instructions Instructions for functional safety circuits This manual does not contain the complete safety instructions of the drive. It only includes the instructions related to the scope of this manual. Only a qualified electrical professional who has sufficient knowledge about functional, machine, and process safety is permitted to install, start up and maintain the safety circuit.
Safety instructions 9 Electrical safety precautions These electrical safety precautions are for all personnel who do work on the drive, motor cable or motor. WARNING! Obey these instructions. If you ignore them, injury or death, or damage to the equipment can occur. If you are not a qualified electrical professional, do not do installation or maintenance work.
This chapter also contains a quick reference guide for implementing a safety system. Applicability This manual is applicable to ACS880-07/07LC/17/17LC/37/37LC drives which have the option +Q979: Emergency stop, configurable stop category 0 or 1 with STO, with FSO. Required versions with the FSO-12 module: •...
Exclusion of liability ABB is not responsible for the implementation, verification and validation of the overall safety system. It is the responsibility of the system integrator (or other party) who is responsible for the overall system and system safety.
Page 13
Delivered with the drive Safety data report (if the safety circuit is different from the default design) www.abb.com/drives/documents for all manuals on the Internet. ACS880-07 (45 to 710 kW) manuals ACS880-07 (560 to 2800 kW) ACS880-07LC manuals manuals ACS880-17 (45 to 400 kW) manuals...
14 Introduction to the manual Terms and abbreviations Term Description Cat. Classification of the safety-related parts of a control system in respect of their resistance to faults and their subsequent behavior in the fault condition, and which is achieved by the structural arrangement of the parts, fault detection and/or by their reliability. The categories are: B, 1, 2, 3 and 4.
STO function is activated. The main contactor/breaker of the drive is not opened. ABB installs the FSO module, and the emergency stop circuit to the drive. ABB sets default parameter values for the option at the factory. The user adjusts the operation of the emergency stop function with the safety parameters at the start-up, for example, sets the stop category (0 or 1).
ABB installs the module at the factory. • One emergency stop button is installed on the cabinet door and wired to the FSO module. ABB wires the button at the factory. The user can add buttons to the emergency stop circuit.
• The digital output of the FSO module to which the emergency stop indication lamp is connected, is selected as the output for the Stop completed signal. This is an FSO module parameter that ABB sets at the factory by default and the user must check at the start-up. Emergency stop, stop category 0: •...
18 Option description Time schemes with a speed estimate (no safety encoder) ■ Emergency stop, stop category 0 This time scheme diagram illustrates the operation of the Emergency stop, stop category 0 safety function. This option uses the Safe torque off (STO) function of the FSO module. STO.14 Motor speed STO.13...
Option description 19 Emergency stop, stop category 1 with time monitoring This time scheme diagram illustrates the operation of the Emergency stop, stop category 1 safety function with time monitoring. This option uses the Safe stop 1 (SS1) function of the FSO module.
Page 20
20 Option description Case B: The motor speed does not reach the zero speed limit within the user-defined time Time A has elapsed from the emergency stop command (step 1) but the motor speed still exceeds the zero speed limit. Motor speed SS1.14 STO.14...
Option description 21 6. b) The user pushes the reset button (this resets the emergency stop circuit and acknowledges the STO function). 7. b) The FSO module deactivates the STO function in the drive. The emergency stop indication lamp goes off. The user must reset the drive before it is ready for a restart (this is because the FSO module generates a fault to the drive after a limit hit [parameter FSOGEN.62 STO indication safety limit]).
Page 22
22 Option description 3. a) The motor speed reaches the zero speed limit. The FSO module activates the drive STO function and stops the ramp monitoring. The emergency stop indication lamp comes Note: You can set an additional delay for the STO activation (parameter SS1.15 SS1-r ramp zero speed delay for STO).
Option description 23 4. b) The user releases the emergency stop button. 5. b) Time C has elapsed. The motor has stopped. The emergency stop indication lamp comes on. Acknowledgement of the STO function is possible. 6. b) The user pushes the reset button (this resets the emergency stop circuit and acknowledges the STO function).
24 Option description 3. Time B has elapsed. Acknowledgement of the STO function is possible even though the motor is still running. (In this example, the user pushes the reset button in step 5.). 4. The motor speed goes below the zero speed limit (A). The motor has stopped and the emergency stop indication lamp comes on.
Page 25
Option description 25 3. a) The motor speed goes below the zero speed limit (B). The FSO module activates the drive STO function. The emergency stop indication lamp comes on. Note: You can set an additional delay for the STO activation (parameter SS1.15 SS1-r ramp zero speed delay for STO).
26 Option description 3. b) The FSO module activates the FSO and drive STO functions. The motor coasts to a stop. 4. b) The motor speed reaches the zero speed limit (B). The emergency stop indication lamp comes on. The motor has stopped. Acknowledgement of the STO function is possible.
Page 27
Option description 27 1. The user pushes the emergency stop button (this activates the SS1 function of the FSO module). 2. The drive starts to decelerate the motor along the user-defined stop ramp. The FSO module starts the ramp monitoring (SAR1 parameters 200.112, SARx.21, SARx.22 and SARx.02).
28 Option description 3. b) The FSO module activates the FSO and drive STO functions and stops the ramp monitoring. The motor coasts to a stop. 4. b) The user releases the emergency stop button. 5. b) The motor speed reaches the zero speed limit (B). The emergency stop indication lamp comes on.
Option description 29 Emergency stop reset button with indicator light X111 STO connections to inverter control unit X113, Terminal block in the FSO module X114 T11.x Inverter module(s) under inverter unit T11 (only for R8i) Test pulse(s) for digital input Step Operation Initial status: The drive is in operation and the motor is running.
30 Option description Resetting the FSO module To reset the FSO module: • switch the power off and on, or • click the Reboot FSO button on the Safety view of the Drive composer pro PC tool, or • use the drive parameter 96.09 FSO reboot. FSE-31 module and safety encoder ■...
Electrical installation 31 Electrical installation Contents of this chapter This chapter describes the wiring of the safety option done at the factory and contains guidelines for making user connections. Wiring One emergency stop button and one reset button are installed on the cabinet door and wired to the FSO module at the factory.
Page 32
In this case, the safety data that ABB has calculated for the function is not valid. Note: The safety circuit design can be different when modified according to the customer's safety requirements.
IEC 61508-1 clause 6. In this context, the person must have expertise and knowledge of functional safety, the safety functions and the configuration of the FSO module. ABB has training courses on the FSO module. FSO module parameter settings The default parameter values shown below are example values for the safety functions described in this manual.
Active when the FSO module has completed the STO, SSE or SS1 function. For option +Q979, ABB has configured the emergency stop indication lamp to this digit- al output at the factory. Make sure that this value corresponds to the actual wiring.
Page 35
Parameter settings 35 Index Name Example value Description FSOGEN.51 Zero speed without 90 rpm Sets the general zero speed limit for safety encoder functions when no safety encoder is in use. Emergency stop, stop category 0: This value has no effect in the operation. Emergency stop, stop category 1: The FSO module activates the drive STO function when the drive has decelerated the motor...
STO function. Stop cat. 1: None Emergency stop, stop category 0: For option +Q979, ABB has connected the emergency stop button to this digital input at the factory. Make sure that the setting corresponds to the circuit diagrams of the delivery.
Page 37
Parameter settings 37 Index Name Example value Description STO.14 Time to zero speed 2000 ms The time it takes for the motor to coast to a with STO and modoff standstill from maximum process speed. This must be measured with Drive composer pro PC tool when an encoder is used for motor control (otherwise you have to make sure that the motor shaft has stopped rotat-...
Zero speed is defined by parameter FSOGEN.51 Zero speed without encoder or FSOGEN.52 Zero speed with encoder. For option +Q979, ABB sets this parameter to value Immediate STO at the factory. Ad- just the default value when necessary. SBC usage SBC.15...
X114:2 on or off. On: The input monitors that it receives test pulses. For option +Q979, ABB has configured the emergency stop reset button to this digital input at the factory. Make sure that this value corresponds to the actual wiring. See the circuit diagrams of the delivery.
Page 40
40 Parameter settings Index Name Example value Description SS1.13 SS1 type SS1-r or SS1-t Sets the method used for the SS1 monitor- ing. Adjust the default value when neces- sary. Time monitoring (SS1-t): The FSO module monitors that a user-defined deceleration time limit is not exceeded.
Parameter settings 41 Index Name Example value Description 200.202 SAR speed scaling 1500 rpm Sets a speed value that the FSO module uses as a reference point in ramp parameter calculations (see SAR1 ramp parameters 200.112, SARx.21, SARx.22 and SARx.02). Adjust the default value when necessary.
42 Parameter settings To change the stop category from 0 to 1: • set the parameters shown in this section • set the parameters shown in section Parameters for Emergency stop, stop category 1 (page 39) • if necessary, set the applicable parameters shown in section Drive parameter settings (page 44).
Page 43
Parameter settings 43 Index Name Example value Description S_ENCGEN.14 Enc speed cross 1 rpm Sets the encoder speed cross comparison comp tolerance tolerance. This defines how much the axle speed of the motor can change within 1 ms. Adjust the default value to meet the motor in use.
FSO module activates the drive STO function. 1) Value set by ABB at the factory for the default design. The table that follows shows the parameters that you must set when you use a safety encoder.
Use of the safety function 45 Use of the safety function Contents of this chapter This chapter describes the use of the safety function with factory default settings. Activating the safety function Activation procedure: 1. Push the emergency stop button [S61]. The emergency stop is activated and the button locks in the “ON”...
46 Use of the safety function Resetting the safety function WARNING! Make sure that the drive does not start accidentally. This can occur after the acknowledgement of the safety function, if a level-triggered start command and the start enable signal are on at the same time. 1.
Start-up and validation test 47 Start-up and validation test Contents of this chapter This chapter describes the start-up, validation test procedure, and validation of the safety function. Validation of the safety functions You must do a validation test to validate the correct operation of safety functions. Competence ■...
48 Start-up and validation test • you must document all validation tests • you must sign and store the validation test report for further reference. Validation test reports ■ You must store the signed validation test reports in the logbook of the machine. The report must include, as required by the referred standards: •...
Page 49
Note: The FSO safety file is not included in the drive backup process. Validation test ABB recommends that you monitor these signals with the Drive composer PC tool: • 01.01 Motor speed used (rpm) • 01.02 Motor speed estimated (rpm) •...
Page 50
50 Start-up and validation test Action Make sure that you cannot start the drive or motor from any control location. Make sure that the drive or motor does not start when you switch the start signal off and on, or push the start key of the panel when the panel is in local control mode.
FSO module parameters, or restore parameters to their factory default values: • Use only ABB-approved spare parts. • Register the change to the change log for the safety circuit. • If parameters were restored to the factory default values: Set the parameters related to the safety function.
52 Maintenance The person responsible for the design of the complete safety system should also note the Recommendation of Use CNB/M/11.050 published by the European co-ordination of Notified Bodies for Machinery concerning dual-channel safety-related systems with electromechanical outputs: • When the safety integrity requirement for the safety function is SIL 3 or PL e (cat. 3 or 4), the proof test for the function must be done at least every month.
■ This safety data is valid for the default design of the safety circuit described in this manual. If the final design is different from the default, ABB calculates new safety data and delivers it separately to the customer. The safety data calculations are based on the assumption that the emergency stop is used once a month.
3) See the Recommendation of Use CNB/M/11.050 published by the European co-ordination of notified bodies for lower T requirement. 4) T = 20a is used with high demand mode of operation. T = 5a/2a is used with low demand mode of operation. ACS880-07/07LC/17/17LC/37/37LC drives with the FSE-31 module 3) 4) Stop category SIL / Cat.
Technical data 55 • FSE module: type B • drive STO circuit: • frame sizes R1…R9 and drives with R1i…R7i inverter modules: type A • frame sizes R10 and R11 and drives with R8i inverter modules: type B. Safety block diagrams ■...
56 Technical data Note: If you use a safety pulse encoder, you must add the delays of the encoder when defining the total response time for the safety function and the fault reaction function. Ambient conditions For the environmental limits for the safety functions and the drive, refer to the drive hardware manual, and to the FSO module user's manual.
Product and service inquiries Address any inquiries about the product to your local ABB representative, quoting the type designation and serial number of the unit in question. A listing of ABB sales, support and service contacts can be found by navigating to www.abb.com/searchchannels.