Safety in case of faults 10
Fuse protection for power supply 10
Requirements for connection cables 11
Maximum cable lengths 12
Connector assignment of safety switch CES-AR 14
Connection of a single CES-AR-C 15
Connection of several CES-AR-C in a switch chain 17
Notes for operation with safe control systems 19
Setup 21
LED indicators 21
Teach-in function for actuator 21
Functional check 23
System status table 24
Technical data 25
Technical data for safety switch CES-AR-CR2-AH/CES-AR-CL2-AH 25
Technical data for actuator CES-A-BLN-... 29
Technical data for actuator CES-A-BDN-06 31
The Coded Electronic Safety switches series CES are safety devices for monitoring movable safety guards.
In combination with a separating safety guard and the machine control, this safety
component prevents dangerous machine movements from occurring while the
safety guard is open. A stop command is triggered if the safety guard is opened
during the dangerous machine function.
Before safety switches are used, a risk assessment must be performed on the
machine, e.g., in accordance with:
Ì EN ISO 13849-1, Safety of machinery. Safety related parts of control systems.
General principles for design
Ì EN ISO 12100, Safety of machinery – General principles for design – Risk as-
sessment and risk reduction
Ì IEC 62061, Safety of machinery. Functional safety of safety-related electrical,
electronic and programmable electronic control systems.
Correct use includes compliance with the relevant requirements for installation
and operation, for example
Important!
Ì EN ISO 13849-1, Safety of machinery. Safety related parts of control systems.
General principles for design
Ì EN 1088, Safety of machinery. Interlocking devices associated with guards.
Principles for design and selection
Ì EN 60204-1, Safety of machinery. Electrical equipment of machines. General
requirements
Ì EN 60947-5-3, Specification for low-voltage switchgear and controlgear. Con-
trol circuit devices and switching elements. Requirements for proximity devices
with defined behaviour under fault conditions
The safety switch must be used only in conjunction with the designated CES actuators from EUCHNER. On the use of different actuators, EUCHNER provides no
warranty for safe function.
Several devices are only allowed to be connected in series using devices intended
for series connection with the CES-AR. Check the operating instructions for the
related device. A combination of other CES devices or devices from other manufacturers is not allowed.
A maximum of 20 safety switches are allowed to be operated in a switch chain.
Ì The user is responsible for the integration of the device into a safe overall
system. For this purpose, the overall system must be validated, e.g. in accordance with EN ISO 13849-2.
Ì Correct use requires observing the permissible operating parameters (see
Technical data).
Ì If a product data sheet is included with the product, the information on the
data sheet applies in case of discrepancies with the operating instructions.
Ì In the estimation of the PL for the overall system, a maximum value of
100 years can be assumed for the MTTFd according to the limit value in
EN ISO 13849-1:2008, section 4.5.2. This corresponds to a minimum value
for the PFHd of 2.47x10-8/h.
Ì When up to 11 devices are connected in series, these limit values can be
assumed for the entire switch chain as a subsystem. As a subsystem, this
switch chain achieves PL e.
Ì In the case of series connection of more than 11 devices, the PFH
calculated according to one of the stated methods in EN ISO 13849-1:2008,
Section 4.5.1.
Ì If the simplified method according to Section 6.3 of EN ISO 13849:2008-12
is used for validation, the Performance Level (PL) might be reduced when
more than 11 devices are connected in series.
Ì It is only allowed to use components that are permissible in accordance with
the table below.
Possible combinations for CES components
Actuator
Door hinge right
CES-A-BLN-R2-100776
100776
Door hinge left
CES-A-BLN-L2-104510
104510
Usage independent of
position of door hinge
CES-A-BLN-U2-103450
103450
Usage independent of
position of door hinge
CES-A-BDN-06-104730
104730
can be
d
Key to symbols
Combination possible
Note!
Devices with version number V 1.1.2 or higher can be operated on an AR evaluation unit. Please refer to the operating instructions for the relevant AR evaluation
unit for more information.
In case of failure to comply with the conditions for correct use stated above, or
if the safety instructions are not followed, or if any servicing is not performed as
required, liability will be excluded and the warranty void.
General safety instructions
Safety switches fulfill personal protection functions. Incorrect installation or tampering can lead to fatal injuries to personnel.
Check the safe function of the safety guard particularly
Ì after any setup workÌ after the replacement of a CES componentÌ after an extended period without useÌ after every fault
Independent of these checks, the safe function of the safety guard should be
checked at suitable intervals as part of the maintenance schedule.
Warning!
Important!
Danger of fatal injury in the event of incorrect connection or incorrect use.
Ì Safety switches must not be bypassed (bridging of contacts), turned away,
removed or otherwise rendered ineffective.
On this topic pay attention in particular to the measures for reducing the possibility of bypassing from EN 1088:1995+A2:2008, Section 5.7.
The device is only allowed to be installed and placed in operation by authorized
personnel
Ì who are familiar with the correct handling of safety components Ì who are familiar with the applicable EMC regulationsÌ who are familiar with the applicable regulations on health and safety and ac-
cident prevention
Ì who have read and understood the operating instructions.
Prior to use, read the operating instructions and keep these in a safe place.
Ensure that the operating instructions are always available during mounting,
setup and servicing work. EUCHNER cannot provide any warranty in relation to
the readability of the CD for the storage period required. For this reason you
should archive a printed copy of the operating instructions. You can download
the operating instructions from www.EUCHNER.de.
The device meets the following safety requirements:
Ì Category 4, PLe according to EN ISO 13849-1Ì Redundant design of the circuit in the unit with self-monitoringÌ This means that the safety system still functions even if an internal component
fails
Ì The switch state of the semiconductor outputs is continuously monitored inter-
nally
Ì Short circuit detection at the safety outputs by pulsed signals
The following switch-on condition applies to safety outputs OA and OB (see also
System status table and the section Typical system times):
Ì Safety guard closedÌ Both safety outputs (IA and IB) must be on
The system consists of the following components: coded actuator (transponder)
and switch.
Each actuator has a unique electronic coding and is therefore a unique element.
The code in an actuator cannot be reprogrammed.
The actuator must be assigned to the safety switch by a teach-in process so that
it is detected by the system. This unambiguous assignment ensures a particularly
high level of protection against tampering.
The safety switch is fastened to the fixed part of the safety guard.
The actuator attached to the movable part of the safety guard is moved towards
the read head fitted in the safety switch by closing the door. When the switch-on
distance is reached, power is supplied to the actuator by the read head by induction and data can be transferred.
The bit pattern read is compared with the code saved in the safety switch. If the
data match, the safety outputs are enabled.
Due to the combination of dynamic polling of the actuator and the redundant,
diverse design of the safety electronics with the two feedback safety outputs, the
safety switch will enter the safe state with every detectable fault.
When the safety guard is opened, the safety outputs switch off the safety circuit
and the monitoring output OUT is switched off. The state of the safety outputs is
monitored internally by two microprocessors.
If faults are detected, the safety circuit is switched off and the DIA LED illuminates.
In case of devices with a DIA monitoring output, the output is switched on.
The safety switch has a redundant circuit design with self-monitoring. This means
that the safety system is still effective even if a component fails.
The system is designed so that failures will not result in the loss of the safety function. The occurrence of failures is detected by cyclic self-monitoring at the latest
on the next demand to close the safety contacts (e.g. on starting).
If the safety door with the actuator should settle over time, the actuator can drift
out of the read head operating distance. The device recognizes this and indicates
that the actuator is in the boundary area (function available for V 1.1.2 and higher).
This allows the safety door to be readjusted in time.
Safety switches must not be bypassed (bridging of contacts), turned away,
removed or otherwise rendered ineffective.
Ì On this topic pay attention in particular to the measures for reducing the pos-
sibility of bypassing according to EN 1088:1995.A2:2008, sec. 5.7.
Caution!
Risk of damage to equipment as a result of incorrect installation. Safety switches
must not be used as a mechanical end stop.
Ì Fit an additional end stop for the movable part of the safety guard.
Important!
Ì From the assured switch-off distance S
down.
, the safety outputs are safely shut
ar
Ì When mounting several safety switches, observe the stipulated minimum
distance to avoid mutual interference.
min. 120 mm
Ì The operating distance changes during the mounting of the actuator as a
function of the material used for the safety guard.
Note the following points:
Ì Actuator and safety switch must be easily accessible for inspection and re-
placement.
Ì The switching operation must only be triggered by the specific actuator desig-
nated for this purpose. For permissible combinations please see the Table Pos-sible combinations for CES components on page 4.
Ì Actuator and safety switch must be fitted so that
Ì the front faces are at the minimum switch-on distance 0.8 x S
when the safety guard is closed (see section Operating distances). A minimum distance dependent on the actuator must be maintained for a side approach direction: - For CES-A-BLN-R2 6 mm
- For CES-A-BLN-L2 6 mm
- For CES-A-BLN-U2 6 mm
- For CES-A-BDN-06 8 mm
Ì when the safety guard is open up to the distance S
tance), a hazard is excluded.
(assured switch-off dis-
ar
or closer
ao
Ì the actuator is positively mounted on the safety guard, e.g. by using the
safety screws included.
Ì they cannot be removed or tampered with using simple means.Ì Pay attention to the maximum tightening torque for the safety switch and
Ì Separate operationÌ Series connection with Y-distributors from EUCHNER (only with M12 plug con-
nector)
Ì Series connection, e. g. with wiring in the control cabinetÌ Operation on an AR evaluation unit.
Warning!
In case of an error, loss of the safety function through incorrect connection.
Ì To ensure safety, both safety outputs (OA and OB) must always be evaluated.Ì The monitoring output OUT must not be used as a safety output.Ì Lay the connection cables with protection to prevent the risk of short cir-
cuits.
Caution!
Risk of damage to equipment or malfunctions as a result of incorrect connection.
Ì Do not use a control system with pulsing or switch off the pulsing function in
your control system. The device generates its own pulse signal on the output lines OA/OB. A downstream control system must tolerate these pulses,
which may have a length of up to 1 ms.
The pulses are also output when the safety outputs are switched off.
Depending on the inertia of the connected device (control system, relay,
etc.), this can lead to short switching processes.
Ì The inputs on an evaluation unit connected must be positive-switching, as the
two outputs on the safety switch deliver a level of +24 V in the switched-on
state.
Ì All the electrical connections must either be isolated from the mains supply by
a safety transformer according to IEC 61558-2-6 with limited output voltage in
the event of a fault, or by other equivalent isolation measures (PELV).
Ì For use and operation as per the requirements, a power supply with the
feature "for use in class 2 circuits" must be used. The same requirement applies to the safety outputs.
Alternative solutions must comply with the following requirements:
a) Electrically isolated power supply unit with a max. open-circuit voltage of 30
V/DC and a limited current of max. 8 A.
b) Electrically isolated power supply unit in combination with fuse as per UL248.
This fuse should be designed for max. 3.3 A and should be integrated into
the 30 V/DC voltage section.
Ì For use and applications as per the requirements of , a connection cable
listed under the UL category code CYJV2 must be used and the following
requirements met: The connection cables of EUCHNER meet these requirements. The same requirement applies to the safety outputs.
Ì All electrical outputs must have an adequate protective circuit for inductive
loads. The outputs must be protected with a free-wheeling diode for this purpose. RC interference suppression units must not be used.
* Note on the scope of the UL approval: Only for applications as per NFPA 79 (Industrial Machinery)
The devices are tested according to the requirements of UL508 (protection against electric shock and fire).
Ì Power devices which are a powerful source of interference must be installed
in a separate location away from the input and output circuits for signal processing. The cable routing for safety circuits should be as far away as possible from the cables of the power circuits.
Ì In order to avoid EMC interference, the physical environmental and operating
conditions at the installation site of the device must comply with the requirements according to the standard EN 60204-1:2006, section 4.4.2 (EMC).
Ì Please pay attention to any interference fields in case of devices such as
frequency converters or induction heating systems. Observe the EMC instructions in the manuals from the respective manufacturer.
Important!
If the device does not appear to function when operating voltage is applied (e.g.
green STATE LED does not flash), the safety switch must be returned unopened
to the manufacturer.
Safety in case of faults
Ì The operating voltage U
is reverse polarity protected.
B
Ì The contacts OA/OB are short circuit-proofÌ A short circuit between OA and OB is detected by the switch. Ì A short circuit in the cable can be excluded by laying the cable with protection.
Fuse protection for power supply
The power supply must be provided with fuse protection depending on the number
of switches and current required for the outputs. The following rules apply:
Max. current consumption of an individual switch I
I
= IUB + I
max
= Switch operating current (50 mA)
I
UB
= Monitoring output load current (max. 50 mA)
I
OUT
= Load current of safety outputs OA + OB (2 x max. 200 mA)