Safety instructions 9 Safety instructions Contents of this chapter This chapter contains the safety instructions which you must obey when you install, operate and do maintenance on the safety functions of a drive. Use of warnings and notes Warnings tell you about conditions which can cause injury or death, or damage to the equipment.
10 Safety instructions Only a qualified electrical professional who has sufficient knowledge about functional, machine, and process safety is permitted to install, start up and maintain the safety circuit. All user-made changes are on the user's responsibility. WARNING! The safety function described in this manual does not isolate the main circuit or auxiliary circuit from the power supply.
Page 11
Safety instructions 11 5. Measure that the installation is de-energized. • Before and after measuring the installation, verify the operation of the voltage tester on a known voltage source. • Make sure that the voltage between the drive input power terminals (L1, L2, L3) and the grounding (PE) busbar is zero.
This chapter also contains a quick reference guide for implementing a safety system. Applicability The manual is applicable to ACS880-07/07LC/17/17LC/37/37LC drives which have the option +Q978: Emergency stop, configurable stop category 0 or 1 with opening the main contactor/breaker and STO, with FSO.
14 Introduction to the manual Exclusion of liability ABB is not responsible for the implementation, verification and validation of the overall safety system. It is the responsibility of the system integrator (or other party) who is responsible for the overall system and system safety.
Page 15
Delivered with the drive Safety data report (if the safety circuit is order-based engineered) www.abb.com/drives/documents for all manuals on the Internet. ACS880-07 (45 to 710 kW) manuals ACS880-07 (560 to 2800 kW) ACS880-17 (45 to 400 kW) manuals manuals ACS880-17 (160 to 3200 kW)
16 Introduction to the manual Terms and abbreviations Term Description Cat. Classification of the safety-related parts of a control system in respect of their resistance to faults and their subsequent behavior in the fault condition, and which is achieved by the structural arrangement of the parts, fault detection and/or by their reliability. The categories are: B, 1, 2, 3 and 4.
+F255), and the emergency stop circuit to the drive. ABB sets default parameter values for the option at the factory. The user adjusts the operation of the emergency stop function with the safety parameters at the start-up, for example, sets the stop category (0 or 1). ABB sets stop category 0 at the factory.
ABB installs the module at the factory. • One emergency stop button is installed on the cabinet door and wired to the FSO module. ABB wires the button at the factory. The user can add buttons to the emergency stop circuit.
Page 19
The digital output of the FSO module to which the emergency stop indication lamp is connected, is selected as the output for the Stop completed signal. This is an FSO module parameter that ABB sets at the factory by default and the user must check at the start-up.
(SLS) function (option +Q965) is included in the drive, the main contactor/breaker is opened after trip limit hits. For more information, see Safely-limited speed with the encoder interface (option +Q965) for ACS880-07/07LC/17/17LC/37/37LC drives user's manual (3AXD50000019727 [English]). Operation principle The operation and configuration of the emergency stop function is slightly different with and without a safety encoder.
Option description 21 ■ Time schemes with a speed estimate (no safety encoder) Emergency stop, stop category 0 This time scheme diagram illustrates the operation of the Emergency stop, stop category 0 safety function. This option uses the Safe torque off (STO) function of the FSO module. Motor speed SBC.13 STO.13...
22 Option description Emergency stop, stop category 1 with time monitoring This time scheme diagram illustrates the operation of the Emergency stop, stop category 1 safety function with time monitoring. This option uses the Safe stop 1 (SS1) function of the FSO module.
Page 23
Option description 23 4. a) Time A has elapsed. The STO function is already active. In this case, this time has no effect. 5. a) The user releases the emergency stop button. 6. a) Time D has elapsed. The emergency stop indication lamp comes on. The user can push the reset button, that is, the acknowledgment of the STO function is possible.
24 Option description 1. The user pushes the emergency stop button (this activates the SS1 function of the FSO module). The FSO module starts a timer for delay A. 2. The drive starts to decelerate the motor along the user-defined stop ramp (SAR1 parameter 200.112 SAR1 ramp time to zero).
Page 25
Option description 25 SBC time to zero speed: When time C has elapsed from the start of the counter (step 3b, activation of the STO and SBC functions), the user can push the reset button. This is a user- defined value (parameter SBC.13 SBC time to zero speed). 1.
Page 26
26 Option description SBC time to zero speed: When time C has elapsed from the start of the counter (step 3b, activation of the STO and SBC functions), the user can push the reset button. This is a user- defined value (parameter SBC.13 SBC time to zero speed). 1.
Option description 27 ■ Time schemes with a safety encoder Emergency stop, stop category 0 This time scheme diagram illustrates the operation of the Emergency stop, stop category 0 safety function when a safety encoder is used. This option uses the Safe torque off (STO) function of the FSO-21 module.
28 Option description Emergency stop, stop category 1 with time monitoring This time scheme diagram illustrates the operation of the Emergency stop, stop category 1 safety function with time monitoring when a safety encoder is used. This option uses the Safe stop 1 (SS1) function of the FSO-21 module.
Page 29
Option description 29 6. a) The user pushes the reset button (this resets the emergency stop circuit and acknowledges the STO function). 7. a) The FSO module deactivates the STO function in the drive and closes the main contactor/breaker. The emergency stop indication lamp goes off. The drive is ready for a restart.
30 Option description 6. b) The user pushes the reset button (this resets the emergency stop circuit and acknowledges the STO function). 7. b) The FSO module deactivates the STO function in the drive and closes the main contactor/breaker. The emergency stop indication lamp goes off. The user must reset the drive before it is ready for a restart (this is because the FSO module generates a fault to the drive after a limit hit [parameter FSOGEN.62 STO indication safety limit]).
Page 31
Option description 31 3. a) The motor speed reaches the zero speed limit (B). The FSO module activates the drive STO and SBC functions (this opens the main contactor/breaker) and stops the ramp monitoring. The emergency stop indication lamp comes on. The user can push the reset button, that is, the acknowledgment of the STO function is possible.
Implementation of main contactor/breaker and charging circuit can vary depending on the product. For a more detailed description, see the circuit diagrams delivered with the drive. ACS880-07 drives, frames R6 to R11 and ACS880-17/-37 drives, frame R8 -A41 100-250 VA C...
• switches the external start signal of the drive off and on (only in external control mode) • resets the drive if a fault was generated (see FSO parameter FSOGEN.61 STO indication ext request, and drive parameter 31.22 STO indication run/stop). ACS880-07/07LC drives, frames n×DXT + n×R8i -A51 -A51...
Page 34
34 Option description Supply control unit Safety functions module FSO-12/-21 Emergency stop button Emergency stop reset button with indicator light K62.1 Safety relay K62.2 Safety relay Main contactor or breaker X111 STO connections to inverter control unit X113, Terminal block in the FSO module X114 Supply unit Inverter unit...
Page 36
36 Option description Inverter unit T11.1- Inverter module(s) under inverter unit T11 T11.x Test pulse(s) for digital input 1) Component can also be installed by the customer. Step Operation Initial status: The drive is in operation and the motor is running. The user activates emergency stop with the emergency stop button [S61].
38 Option description Step Operation Initial status: The drive is in operation and the motor is running. The user activates emergency stop with the emergency stop button [S61]. This activates the safety function in the FSO module. Emergency stop, stop category 0: The FSO module [A68] activates the drive STO function, opens the main contactor [Q2], and opens the charging supply contactor [Q3].
Option description 39 ■ FSE-31 module When a safety function is active, the fault reaction function of the FSO module trips the drive if it detects a failure in the FSE-31 module. The FSO module activates the STO function. This activates the drive STO function and opens the main contactor/breaker. The drive STO function is active until the fault is repaired.
Electrical installation 41 Electrical installation Contents of this chapter This chapter describes the wiring of the safety option done at the factory and contains guidelines for making user connections (if any). Wiring One emergency stop button and one reset button are installed on the cabinet door and wired to the FSO module at the factory.
In this case, the safety data that ABB has calculated for the function is not valid. 3. Use shielded, twisted pair cables. ABB recommends double-shielded cable and gold-plated contacts in the emergency stop button.
IEC 61508-1 clause 6. In this context, the person must have expertise and knowledge of functional safety, the safety functions and the configuration of the FSO module. ABB has training courses on the FSO module available. FSO module parameter settings The default parameter values shown below are example values for the safety functions described in this manual.
Active when the FSO module has completed the STO, SSE or SS1 function. For the option +Q978, ABB has configured the emergency stop indication lamp to this digital output at the factory. Make sure that this value corresponds to the actual wiring.
Page 45
Parameter settings 45 Index Name Example value Description FSOGEN.52 Zero speed with en- 10 rpm Sets the general zero speed limit for safety coder functions when a safety encoder is in use. Emergency stop, stop category 0: The indic- ation lamp comes on when the motor speed goes below this value.
STO function. Stop cat. 1: None Emergency stop, stop category 0: For the option +Q978, ABB has connected the emergency stop button to this digital input at the factory. Make sure that the setting corresponds to the circuit diagrams of the delivery.
Page 47
Parameter settings 47 Index Name Example value Description SBC usage SBC.11 STO SBC usage Delayed brake Sets how the mechanical brake is used to- gether with the STO function. Mechanical brake usage is always coupled with the STO function. In this manual, it is assumed that you do not use a mechanical brake.
STO function. SAR0 para- meters define the deceleration ramp (for more information, see the FSO module user’s manual). For the option +Q978, ABB sets this para- meter to value Immediate STO at the fact- ory. Adjust the default value when neces- sary.
DO X113:9 & X114:9 Sets the digital output connected to safety relay 1. For the option +Q978, ABB has connected the auxiliary safety relay(s) which controls the main contactor/breaker to this digital output at the factory. Make sure that this value corresponds to the actual wiring.
X114:1 on or off. On: The input monitors that it receives test pulses. For the option +Q978, ABB has configured the emergency stop button to this digital input at the factory. Make sure that this value corresponds to the actual wiring. See the circuit diagrams of the delivery.
DI X113:1 & X114:1 Sets the digital input that is connected to the primary input of the SS1 function. For the option +Q978, ABB has connected the emergency stop button to this input at the factory. Make sure that this value cor- responds to the actual wiring.
Page 52
52 Parameter settings Index Name Example value Description SS1.15 SS1-r ramp zero 0 ms Sets an extra delay time for the activation speed delay for STO of the drive STO and SBC functions at the zero speed limit in the SS1 function. With this parameter, the FSO module delays the STO activation so that the drive is able to reach the axle zero speed before...
Parameter settings 53 Index Name Example value Description SARx.21 SAR1 min ramp time 1000 ms Sets the minimum ramp time for the SAR1 to zero ramp monitoring. Time monitoring: This value has no effect in the operation. Ramp monitoring: Sets the minimum stop ramp time for the emergency stop.
54 Parameter settings ■ FSE-31 module and safety pulse encoder related parameters Set these parameters when you use a safety pulse encoder in the safety application. Index Name Example value Description 200.231 FSE 3X act and par Version 1 Activates the FSE-31 encoder interface and version shows the version of the encoder parameter groups (91 and 92).
Warning/Warning is the recommended setting. To prevent the drive from generating a fault each time the FSO module activates the drive STO function, ABB recommends that you do not set parameter 31.22 STO indication run/stop to value Fault/Fault, Fault/Warning, or Fault/Event.
56 Parameter settings Safety pulse encoder parameters The drive parameter settings in ACS880 primary control program when you use a pulse encoder: • parameter 90.41 Motor feedback selection is set to value Encoder 1. • parameter 90.45 Motor feedback fault is set to value Warning. Note: If you want that the drive trips on encoder faults, set this parameter to value Fault.
Use of the safety function 57 Use of the safety function Contents of this chapter This chapter describes the use of the safety function with factory default settings. Activating the safety function 1. Push the emergency stop button [S61]. The emergency stop is activated and the button locks in the “ON”...
58 Use of the safety function Resetting the safety function WARNING! If the drive start signal is on, and the operating switch is set to ON (1), the drive starts automatically after the reset. 1. Turn the emergency stop button [S61] until it releases. 2.
Start-up and acceptance test 59 Start-up and acceptance test Contents of this chapter This chapter describes the start-up, acceptance test procedure, and validation of the safety function. Validation of the safety functions You must do an acceptance test (validation) to validate the correct operation of safety functions.
60 Start-up and acceptance test ■ Acceptance test reports You must store the signed acceptance test reports in the logbook of the machine. The report must include, as required by the referred standards: • a description of the safety application (including a figure) •...
Page 61
Note: The FSO safety file is not included in the drive backup process. Acceptance test ABB recommends that you monitor these signals with the Drive composer PC tool: • 01.01 Motor speed used (rpm) • 01.02 Motor speed estimated (rpm) •...
Page 62
62 Start-up and acceptance test Action Turn the emergency stop button [S61] until it releases and returns to the up position. Push the emergency stop reset button [S62]. Make sure that: • the emergency stop reset button indicator light [S62] goes off. •...
If you change any wiring or component after the start-up, replace the FSO or FSE-31 module, modify FSO module parameters, or restore parameters to their factory default values: • Use only ABB-approved spare parts. • Register the change to the change log for the safety circuit.
64 Maintenance Proof test interval After the operation of the safety function is validated at start-up, the operation of the safety function must be ensured by periodic proof testing. In high demand mode of operation, the maximum proof test interval is 20 years. In low demand mode of operation, the maximum proof test interval is 1 year (high or low demand as defined in IEC 61508, IEC/EN 62061 and EN ISO 13849-1).
Safety data values This safety data is valid for the default design of the safety circuit described in this manual. If the final design is different from the default, ABB calculates new safety data and delivers it separately to the customer.
The safety pulse encoder is not included in the calculations since it is not included in the delivery. Only the FSE module is included in the calculations (if used). ACS880-07/07LC drives without the FSE-31 module 3) 4) Stop category and monitor- SIL / Cat.
Technical data 67 3) 4) Stop category and monitor- SIL / Cat. Mis- ing method SIL- sion [1/h] time Stop cat. 1, ramp monitoring 8.9E-8 3.3E-3 ≥90 20/1 3AXD10000097591 H 1) PFH values are according to EN ISO 13849. 2) In low demand mode, DC of electromechanical devices is considered as 0%, and therefore no overall DC value is claimed in low demand mode.
70 Technical data Diagram 4: ACS880-17/17LC/37/37LC drives, frames n×R8i + n×R8i and frame R11 Emergency stop button FSO module, and FSE module (if used) Drive STO Auxiliary safety relay Charging contactor Auxiliary safety relay Main contactor or main breaker Main contactor or main breaker Note: Only some variants have two main contactors or main breakers.
Technical data 71 Related standards and directives Standard Name EN ISO 12100:2010 Safety of machinery – General principles for design – Risk assessment and risk reduction EN ISO 13849- Safety of machinery – Safety-related parts of control systems – Part 1: General principles 1:2015 for design EN ISO 13849-...
Page 73
Product and service inquiries Address any inquiries about the product to your local ABB representative, quoting the type designation and serial number of the unit in question. A listing of ABB sales, support and service contacts can be found by navigating to www.abb.com/searchchannels.