PowerFlex 750-Series Safe Torque Off Option Module
Catalog Number 20-750-S
Page 2
Important User Information
Read this document and the documents listed in the additional resources section about installation, configuration, and
operation of this equipment before you install, configure, operate, or maintain this product. Users are required to
familiarize themselves with installation and wiring instructions in addition to requirements of all applicable codes, laws,
and standards.
Activities including installation, adjustments, putting into service, use, assembly, disassembly, and maintenance are
required to be carried out by suitably trained personnel in accordance with applicable code of practice.
If this equipment is used in a manner not specified by the manufacturer, the protection provided by the equipment may
be impaired.
In no event will Rockwell Automation, Inc. be responsible or liable for indirect or consequential damages resulting from
the use or application of this equipment.
The examples and diagrams in this manual are included solely for illustrative purposes. Because of the many variables and
requirements associated with any particular installation, Rockwell Automation, Inc. cannot assume responsibility or
liability for actual use based on the examples and diagrams.
No patent liability is assumed by Rockwell Automation, Inc. with respect to use of information, circuits, equipment, or
software described in this manual.
Reproduction of the contents of this manual, in whole or in part, without written permission of Rockwell Automation,
Inc., is prohibited.
Throughout this manual, when necessary, we use notes to make you aware of safety considerations.
WARNING: Identifies information about practices or circumstances that can cause an explosion in a hazardous
environment, which may lead to personal injury or death, property damage, or economic loss.
ATTENTION: Identifies information about practices or circumstances that can lead to personal injury or death, property
damage, or economic loss. Attentions help you identify a hazard, avoid a hazard, and recognize the consequence.
IMPORTANTIdentifies information that is critical for successful application and understanding of the product.
Labels may also be on or inside the equipment to provide specific precautions.
SHOCK HAZARD: Labels may be on or inside the equipment, for example, a drive or motor, to alert people that dangerous
voltage may be present.
BURN HAZARD: Labels may be on or inside the equipment, for example, a drive or motor, to alert people that surfaces may
reach dangerous temperatures.
ARC FLASH HAZARD: Labels may be on or inside the equipment, for example, a motor control center, to alert people to
potential Arc Flash. Arc Flash will cause severe injury or death. Wear proper Personal Protective Equipment (PPE). Follow ALL
Regulatory requirements for safe work practices and for Personal Protective Equipment (PPE).
Rockwell Automation Publication 750-UM002I-EN-P - August 20193
Page 4
Table of Contents
Notes:
4Rockwell Automation Publication 750-UM002I-EN-P - August 2019
Page 5
Preface
This manual explains how PowerFlex® 750-Series Safe Torque Off option
module can be used in Safety Integrity Level (SIL) 3, Performance Level [PLe],
or Category (cat.) 3 applications. It describes the safety requirements, including
PFD and PFH values and application verification information, and provides
information on installing, configuring, and troubleshooting the Safe Torque
Off option module.
Use this manual if you are responsible for designing, installing, configuring, or
troubleshooting safety applications that use the PowerFlex 750-Series Safe
To r q u e O ff op tio n m od ul e .
The 20-750-S Safe Torque Off option module applies to the following
PowerFlex 750-Series drives:
• PowerFlex 755TM drive systems with regenerative bus-supplies and
common-bus inverters
• PowerFlex 755 AC drives
• PowerFlex 753 AC drives
Summary of Changes
Throughout this manual, PowerFlex 755T drive products is used to refer to
PowerFlex 755TL drives, PowerFlex 755TR drives, and PowerFlex 755TM
drive systems.
We recommend that you have a basic understanding of the electrical circuitry
and familiarity with these products. You must also be trained and experienced
in the creation, operation, and maintenance of safety systems.
This manual contains new and updated information as indicated in the
following table.
Top icPa ge
Added definitions for DCavg%, and MTTFD to the Terminology table.6
Updated the definitions of PELV, PFH, and SELV in theTerminology table.6
Added the PowerFlex 750-Series AC Drives Technical Data publication to the Additional Resources
table.
Updated the definition of PFH in PFD and PFH Definitions section.12
Changed the PFD and PFH data section to Safety Data section.12
Added IMPORTANT statement to Safety Data section for determination of safety parameters.12
Added rows for MTTF
755 Drives table and PFD and PFH for PowerFlex 755T Drive Products table.
Added columns for Drive Frames 5 and 6, Drive Frames 7 and 8, Drive Frame 13, Drive Frame 14,
and Drive Frame 15 to PFD and PFH for PowerFlex 755T Drive Products table.
Updated the list of supported drive families in the Safety Reaction Time table.13
Updated the Remove Power to the System section in the Installation and Wiring chapter. 16
years and DC
D
% data to PFD and PFH for PowerFlex 753 and PowerFlex
avg
8
12, 13
13
Rockwell Automation Publication 750-UM002I-EN-P - August 20195
Page 6
Preface
Top icPa ge
Updated the Access the Control Pod section.16
Updated the Set the Safety Enable Jumper section - mentioned Safety Jumper In fault (F213).18
Added an Important note to the Install the Safety Option Module section.19
Added parameter 10:351 [M Start Inhibits] for the PowerFlex 755T to the Operation section.23
Updated the drive families examples in Stop Category Wiring Examples section.24
Updated Standards and Safety Categories in the General Specifications table to show card
certifications when used with the PowerFlex 750-Series and when used with the
PowerFlex 750-Series with TotalFORCE Control.
Updated Certifications table to show latest Directive number.33
31
Conventions
In this manual, we list configuration parameters by number followed by the
name in brackets. For example, P24 [OverSpd Response].
Terminology
AbbreviationFull TermDefinition
1oo2One out of TwoRefers to the behavioral design of a dual-channel safety system.
cat.CategoryClassification of the safety-related parts of a control system in respect of their resistance to faults and
CLClaim LimitThe maximum SIL rating that can be claimed for a Safety-Related Electrical Control System subsystem
DCavg%Diagnostic CoverageRatio between the failure rate of detected dangerous failures and the failure rate of total dangerous
ENEuropean NormThe offi cial European Standard.
ESDEmergency Shutdown SystemsA system, usually independent of the main control system, that is designed to shut down an operating
HFTHardware Fault ToleranceThe HFT equals n, where n+1 faults could cause the loss of the safety function. An HFT of 1 means that
HIMHuman Interface ModuleA module used to configure a device.
IECInternational Electrotechnical CommissionThe International Electrotechnical Commission (IEC) is the world’s leading organization that prepares
IGBTInsulated Gate Bi-polar TransistorsTypical power switch used to control main current.
ISOInternational Organization for StandardizationThe International Organization for Standardization is an international standard-setting body that is
MTTF
D
PELVProtective Extra Low VoltageAn electrical system where the voltage cannot exceed ELV under normal conditions, and under single-
PFDProbability of Dangerous Failure on DemandThe average probability of a system to fail to perform its design function on demand.
PFHAverage Frequency of a Dangerous Failure per Hour The average frequency of a system to have a dangerous failure occur per hour.
PLPerformance LevelEN ISO 13849-1 safety rating
Mean Time to FailureThe average length of time before a device has a dangerous failure.
This table defines abbreviations that are used in this manual.
their subsequent behavior in the fault condition, and which is achieved by the structural arrangement
of the parts, fault detection, and/or by their reliability (source EN ISO 13849-1).
in relation to architectural constraints and systematic safety integrity (source IEC 62061).
failures. (source IEC 61508).
system safely.
2 faults are required before safety is lost.
and publishes International Standards for all electrical, electronic, and related technologies.
composed of representatives from various national standards organizations.
fault conditions, except earth faults in other circuits. PELV is defined in IEC 61131-2.
6Rockwell Automation Publication 750-UM002I-EN-P - August 2019
Page 7
Preface
AbbreviationFull TermDefinition
SELVSafety Extra Low Voltage CircuitA secondary circuit that is designed and protected so that, under normal and single fault conditions, its
SILSafety Integrity LevelA measure of a products ability to lower the risk that a dangerous failure could occur.
STOSafe Torque OffThe Safe Torque Off (STO) function is used to prevent unexpected motor rotation if there is an
voltages do not exceed a safe value. SELV is defined in IEC 61010-2-201.
emergency while the drive remains connected to the power supply. When STO is activated, the torque
power cannot reach the drive, thus stopping and preventing any motor shaft rotation.
Rockwell Automation Publication 750-UM002I-EN-P- August 20197
Page 8
Preface
Additional Resources
These documents contain additional information concerning related
Rockwell Automation products.
To order paper copies of technical documentation, contact your local
Allen-Bradley distributor or Rockwell Automation sales representative.
8Rockwell Automation Publication 750-UM002I-EN-P - August 2019
.
Page 9
Chapter 1
Safety Concept
This chapter describes the safety Performance Level concept and how the
PowerFlex® 750-Series Safe Torque Off option module meets the requirements
for SIL 3, or cat. 3, PLe applications.
Top icPa ge
Certification9
Proof Tests11
PFD and PFH Definitions12
Safety Data12
Safe State13
Safety Reaction Time13
Considerations for Safety Ratings14
Contact Information if Safety Option Failure Occurs14
Certification
The PowerFlex 750-Series Safe Torque Off option module is certified for use in
safety applications up to and including SIL 3 according to EN/IEC 61800-5-2,
IEC 61508, and SIL CL3 according to EN 62061, Performance Level PLe, and
Category 3 according to EN ISO 13849-1. Safety requirements are based on
the standards current at the time of certification.
The TÜV Rheinland group has approved the PowerFlex 750-Series Safe
Torque Off option module for use in safety-related applications where the deenergized state is considered to be the safe state. The examples in this manual
are based on achieving de-energization as the safe state for typical Machine
Safety and Emergency Shutdown (ESD) systems.
Rockwell Automation Publication 750-UM002I-EN-P - August 20199
Page 10
Chapter 1Safety Concept
Important Safety Considerations
The system user is responsible for the following:
• Set-up, safety rating, and validation of any sensors or actuators
connected to the system
• Complete system-level risk assessment and reassess the system any time a
change is made
• Certification of the system to the desired safety Performance Level
• Project management and proof testing
• Program the application software and the safety option module
configurations in accordance with the information in this manual
• Access control to the system
• Analyze all configuration settings and choose the proper setting to
achieve the required safety rating
IMPORTANTWhen applying Safety, restrict access to qualified, authorized personnel
who are trained and experienced.
ATT EN TI ON : When designing your system, consider how personnel exit the
machine if the door locks while they are in the machine. Additional
safeguarding devices may be required for your specific application.
Safety Category 3 Performance Definition
To achieve Safety Category 3, according to EN ISO 13849-1, design the safetyrelated parts according to these guidelines:
• The safety-related parts of machine control systems and/or their
protective equipment, and their components, shall be designed,
constructed, selected, assembled, and combined in accordance with
relevant standards so that they can withstand expected conditions
• Basic safety principles shall be applied
• A single fault in any of its parts does not lead to a loss of safety function.
• The average diagnostic coverage of the safety-related parts of the control
system shall be medium
• The mean-time to dangerous failure of each of the redundant channels
shall be high
• Measures against common cause failure shall be applied
10Rockwell Automation Publication 750-UM002I-EN-P - August 2019
Page 11
Safety ConceptChapter 1
Stop Category Definitions
Conduct a risk assessment to determine the selection of a stop category for
each stop function.
• Stop Category 0 is achieved with immediate removal of power to the
actuator. This results in an uncontrolled coast-to-stop. Safe Torque Off
accomplishes a Stop Category 0 stop.
• Stop Category 1 is achieved with power available to the machine
actuators to achieve the stop. Power is removed from the actuators when
the stop is achieved.
IMPORTANTWhen designing the machine application, consider timing and distance for a
coast-to-stop (Stop Category 0 or Safe Torque Off). For more information
regarding stop categories and Safe Torque Off, refer to EN 60204-1 and
EN/IEC 61800-5-2, respectively.
Performance Level and Safety Integrity Level (SIL) 3
Proof Tests
For safety-related control systems, Performance Level (PL), according to
EN ISO 13849-1, and SIL levels, according to IEC 61508 and EN 62061,
include a rating of the ability of the system to perform its safety functions. All
safety-related components of the control system must be included in both a
risk assessment and the determination of the achieved levels.
See the EN ISO 13849-1, IEC 61508, and EN 62061 standards for complete
information on requirements for PL and SIL determination.
The safety standards require that proof tests be performed on the equipment
that is used in the system. Proof tests are performed at user-defined intervals
and are dependent upon PFD and PFH values.
IMPORTANTYour specific application determines the time frame for the proof test
interval.
Verify operation of safety function after drive installation, modification, or
maintenance. See Verify Operation
on page 21 for more information.
Rockwell Automation Publication 750-UM002I-EN-P - August 201911
Page 12
Chapter 1Safety Concept
PFD and PFH Definitions
Safety Data
Safety-related systems can be classified as operating in either a Low Demand
mode, or in a High Demand/Continuous mode.
• Low Demand mode: where the frequency of demands for operation that
are made on a safety-related system is no greater than one per year or no
greater than twice the proof test frequency.
• High Demand/Continuous mode: where the frequency of demands for
operation that are made on a safety-related system is greater than once
per year or greater than twice the proof test interval.
The SIL value for a low-demand safety-related system is directly related to
order-of-magnitude ranges of its average probability of failure to perform its
safety function satisfactorily on demand or, simply, average probability of a
dangerous failure on demand (PFD). The SIL value for a High Demand/
continuous mode safety-related system is directly related to the average
frequency of a dangerous failure occurring per hour (PFH).
PFD and PFH calculations are based on the equations from Part 6 of
IEC 61508.
These tables provide data for a 20-year proof test interval and demonstrate the
worst-case effect of various configuration changes on the data.
IMPORTANTDetermination of safety parameters is based on the assumptions that the
system operates in High-demand mode and that the safety function is
requested at least once every year.
Table 1 - PFD and PFH for PowerFlex 753 and PowerFlex 755 Drives
Attribute
PFD
avg
PFH (1/hour)3.75E-101.99E-93.04E-94.09E-9
SIL3333
PLeeee
Category3333
MTTF
years143171.9104.475.5
D
%99 (high)97.4 (high)97.5 (high)97.5 (high)
DC
avg
HFT1 (1oo2)1 (1oo2)1 (1oo2)1 (1oo2)
Mission time20 years20 years20 years20 years
PowerFlex 753 and
PowerFlex 755 Drives
Frames 1…7
3.29E-51.73E-42.65E-43.56E-4
PowerFlex 755 Drives
Frame 8
PowerFlex 755 Drives
Frame 9
PowerFlex 755 Drives
Frame 10
12Rockwell Automation Publication 750-UM002I-EN-P - August 2019
Page 13
Table 2 - PFD and PFH for PowerFlex 755T Drive Products
The safe state encompasses all operation that occurs outside of the other
monitoring and stopping behavior that is defined as part of the Safe Torque
Off option module.
If a Safe State fault is detected, the safety option module transitions to the safe
state. This includes faults that are related to the integrity of hardware or
firmware. The drive safe state is defined as preventing force-producing power
from being provided to the motor. For more information on the safe state, see
EN/IEC 61800-5-2.
Safety Reaction Time
IMPORTANTThe drive is in the safe state if the safety function is installed and the drive
status is ‘Not Enabled’. Drive ‘Ready’ is NOT a safe state even if there is no
motion.
ATT EN TI ON : In circumstances where external influences (for example,
falling of suspended loads) are present, additional measures (for example,
mechanical brakes) can be necessary to help prevent a hazard.
The safety reaction time is the length of time from a safety-related event as
input to the system until the system is in the safe state.
The safety reaction time from an input signal condition that triggers a safe
stop, to the initiation of the configured Stop Type, is shown in Ta b l e 3
.
Rockwell Automation Publication 750-UM002I-EN-P - August 201913
Page 14
Chapter 1Safety Concept
SE
SP
Safe Torque O
Safety Reaction Time
Table 3 - Safety Reaction Time
Drive FamilyValue, Max
PowerFlex 753 drives
Frames 1…7
PowerFlex 755 drives
Frames 1…10
PowerFlex 755TL drives,
PowerFlex 755TR drives, and
PowerFlex 755TM drive systems
Frames 7…15
PowerFlex 755TL drives
Frames 5, 6
10 ms
10 ms
10 ms
20 ms
IMPORTANTAn input signal condition that is present for less than the reaction time
cannot result in the safety function being performed. Repeated requests of
the safety function for less than the reaction time can result in a spurious
detection of a fault.
Figure 1 - Safety Reaction Timing Diagram
Considerations for Safety
Ratings
The achievable safety rating of an application using the safety option module
installed in PowerFlex 750-Series drives is dependent upon many factors, drive
options, and the type of motor.
For applications that rely on the immediate removal of power to the actuator,
which results in an uncontrolled coast-to-stop, a safety rating up to and
including SIL 3, PLe, and Category 3 can be achieved.
Contact Information if Safety
Option Failure Occurs
If you experience a failure with any safety-certified device, contact your local
Allen-Bradley distributor. With this contact, you can do the following:
• Return the device to Rockwell Automation so the failure is
appropriately logged for the catalog number that is affected and a record
is made of the failure.
• Request a failure analysis (if necessary) to determine the probable cause
of the failure.
14Rockwell Automation Publication 750-UM002I-EN-P - August 2019
Page 15
Chapter 2
Installation and Wiring
This chapter provides installation, jumper settings, and wiring for the
PowerFlex® 750-Series Safe Torque Off option module.
Top icPa ge
Remove Power to the System16
Access t he Control Pod16
Set the Safety Enable Jumper18
Install the Safety Option Module19
Wire the Safety Option Module20
Verify O peration21
ATT EN TI ON : The following information is merely a guide for proper
installation. Rockwell Automation cannot assume responsibility for the
compliance or the noncompliance to any code, national, local or otherwise
for the proper installation of this equipment. A hazard of personal injury
and/or equipment damage exists if codes are ignored during installation.
IMPORTANTInstallation must be in accordance with the instructions in this user manual
and the installation instructions for your drive. Only qualified, authorized
personnel that are trained and experienced in safety can plan, implement,
and apply safety systems.
IMPORTANTDuring installation and maintenance, check your drive firmware release
notes for known anomalies and verify that there are no safety-related
anomalies.
The PowerFlex 750-Series Safe Torque Off option module is intended to be
part of the safety-related control system. Before installation, perform a risk
assessment that compares the PowerFlex 750-Series Safe Torque Off option
module specifications and all foreseeable operational and environmental
characteristics of the control system.
A safety analysis of the machine section that is controlled by the drive is
required to determine how often to test the safety function for proper
operation during the life of the machine.
Rockwell Automation Publication 750-UM002I-EN-P - August 201915
Page 16
Chapter 2Installation and Wiring
Remove Power to the System
Before performing any work on this drive, remove all power to the system.
ATT EN TI ON :
• Electrical Shock Hazard. Verify that all sources of AC and DC power are deenergized and locked out or tagged out in accordance with the requirements
of ANSI/NFPA 70E, Part II.
• To avoid an electric shock hazard, verify that the voltage on the bus
capacitors has discharged before performing any work on the drive. Measure
the DC bus voltage at the +DC and -DC terminals or test points. The voltage
must be zero.
For the location of the terminal block and test point sockets, see the manual for
your drive:
• PowerFlex 750-Series AC Drives Installation Instructions, publication
750-IN001
• PowerFlex 750-Series Products with TotalFORCE Control Installation
Instructions, publication 750-IN100
• PowerFlex 755TM IP00 Open Type Kits Installation Instructions, publication
750-IN101
• In Safe Torque Off mode, hazardous voltages may still be present at the
motor. To avoid an electric shock hazard, disconnect power to the motor and
verify that the voltage is zero before performing any work on the motor.
.
.
.
Access the Control Pod
The option module is installed in the drive control pod. Different drives have
different ways to access the control pod.
To access the control pod, follow these steps.
1. Open the door or remove cover.
2. Loosen the retention screw on the HIM cradle.
16Rockwell Automation Publication 750-UM002I-EN-P - August 2019
Page 17
3. Lift the cradle until the latch engages.
Panel-mount ed Driv es
Drives in Cabinet Enclosures
Installation and WiringChapter 2
See the installation instructions for your drive for more information.
Rockwell Automation Publication 750-UM002I-EN-P - August 201917
Page 18
Chapter 2Installation and Wiring
PowerFlex 753 AC Drive
SAFETY Enable
(jumper removed)
Hardware ENABLE (jumper in place)
PowerFlex 755 AC Drive
SAFETY Enable
(jumper removed)
Hardware ENABLE (jumper in place)
Set the Safety Enable Jumper
The PowerFlex 750-Series drives ship with the safety-enable (SAFETY)
jumper installed. The jumper, which is on the main control board, must be
removed when using the Safe Torque Off option module or a Safety Jumper In
fault (F213) occurs.
IMPORTANT Failure to remove the SAFETY jumper causes the drive to fault when a start
Terminating point for wiring shields when an
EMC plate or conduit box is not installed.
SPSP+
SdSd
SE-
SE+
Common
+24V
20Rockwell Automation Publication 750-UM002I-EN-P - August 2019
Page 21
Installation and WiringChapter 2
Cabling
Safety input wiring must be protected against external damage by cable
ducting, conduit, armored cable, or other means.
Shielded cable is required. For proper shield termination, follow the
installation requirements that are related to EN 61800-3 and the EMC
Directive as described in these publications:
• PowerFlex 750-Series AC Drive Installation Instructions, publication
750-IN001
• PowerFlex 750-Series Products with TotalFORCE Control Installation
Instructions, publication
750-IN100
Power Supply Requirements
The external power supply must conform to the Directive 2014/35/EU
Low Voltage, by applying the requirements of EN61131-2 Programmable
Controllers, Part 2 - Equipment Requirements and Tests and one of the
following:
• EN60950 - SELV (Safety Extra Low Voltage)
• EN60204 - PELV (Protective Extra Low Voltage)
• IEC 60536 Safety Class III (SELV or PELV)
• UL 508 Limited Voltage Circuit
• 24V DC ±10% must be supplied by a power supply that complies with
IEC 60204 and IEC 61558-1.
Verify Operation
For specific power supply recommendations, refer to your drive installation
instructions:
• PowerFlex 750-Series Products with TotalFORCE Control Installation
Instructions, publication
• PowerFlex 750-Series AC Drives Installation Instructions, publication
750-IN001
For planning information, see the guidelines in Industrial Automation Wiring
and Grounding Guidelines, publication 1770-4.1
Test the safety function for proper operation after initial installation of the
safety option module. Retest the safety function at the intervals that are
determined by the safety analysis that is described on page 15
Verify that both safety channels are functioning according to Ta b l e 6
.
750-IN100
.
.
.
.
Rockwell Automation Publication 750-UM002I-EN-P - August 201921
Page 22
Chapter 2Installation and Wiring
Table 6 - Channel Operation and Verification
Safety Function Status
Safety Channel Operation
Safety Option Module
Ter min al s SP+ & SP-
(safety power)
Safety Option Module
Ter min al s SE+ & SE-
(safety enable)
Drive Not
Enabled
No Power AppliedPower AppliedNo Power AppliedPower Applied
No Power AppliedNo Power AppliedPower AppliedPower Applied
Drive Not
Enabled
Drive Not
Enabled
Drive Enabled
(Ready)
IMPORTANT If an external fault is present on the wiring or circuitry controlling the Safety
Enable or Safety Power inputs for a period of time, the safety option module
does not detect this condition. When the external fault condition is
removed, the safety option module allows an enable condition.
To achieve maximum safety rating, both safety inputs SP and SE must be
activated by appropriate dual-channel equipment. The repeated activation
of the safety function by only one input at a time can result in a spurious
detection of a fault.
TIPThere is no safe-status output provided on the safety option module.
22Rockwell Automation Publication 750-UM002I-EN-P - August 2019
Page 23
Chapter 3
Safe Torque Off Option Module Operation
This chapter provides operation and Stop Category example wiring diagrams
for the PowerFlex® 750-Series Safe Torque Off option module.
Top icPa ge
Operation23
Stop Category Wiring Examples24
Operation
The PowerFlex 750-Series Safe Torque Off option module (see Figure 5)
disables the drive’s output IGBTs by disconnecting power to the gate control
driver IC, or disabling the output of the gate-control driver IC. This helps
prevent the drive’s output power devices from switching in the pattern
necessary to generate AC power to the motor.
The safety option module can be used in combination with other safety devices
to satisfy the requirements of IEC 61508, EN/IEC 61800-5-2 SIL 3,
EN ISO 13849-1 PLe, and Category 3 for Safe Torque Off (STO).
IMPORTANT The safety option module is suitable for performing mechanical work on the
drive system or affected area of a machine only. It does not provide electrical
safety.
Do not use the safety option module as a control for starting and/or
stopping the drive.
IMPORTANT The safety option module does not eliminate dangerous voltages at the
drive output. Input power to the drive must be turned off and safety
procedures followed before performing any electrical work on the drive or
motor. See Remove Power to the System
on page 16 for more information.
ATT EN TI ON : In the event of the failure of two output IGBTs in the drive,
when the safety option module has controlled the drive outputs to the OFF
state, the drive can provide energy for up to 180° of rotation in a 2-pole
motor before torque production in the motor ceases.
Under normal operation, 24V DC is applied to both the Safety Power and
Safety Enable inputs of the safety option module. If the Safety Enable or Safety
Rockwell Automation Publication 750-UM002I-EN-P - August 201923
Page 24
Chapter 3Safe Torque Off Option Module Operation
AC Line Input
Power
PowerFlex 750-Series
AC Drives
+24V DC
Stop
Start
Start/Stop Common
24V DC Common
Jumpers:
ENABLE Installed
SAFETY Removed
Gate Control
Safety
Power
Safety
Enable
Motor
Power is de-energized, the outputs of the gate-control driver IC are disabled
and IGBT firing is disabled. On the PowerFlex 753/755, parameter 933 [Start
Inhibits] indicates that IGBTs are inhibited and the HIM indicates that the
drive is not enabled. On the PowerFlex 755T, this is indicated in parameter
10:351 [M Start Inhibits].
ATT EN TI ON : By itself, the safety option module initiates a coast-to-stop
action. Additional protective measures must be applied when an application
requires a different stopping action.
Figure 5 - Drive Safe Torque Off Circuitry
Stop Category Wiring
Examples
SP+
SP–
SE+
SE–
Sd
Sd
The following diagrams illustrate Stop Category 0 and Stop Category 1 dualchannel wiring examples for PowerFlex 750-Series drives with Guardmaster®
safety relays. Examples include the following drive families:
• PowerFlex 753 and PowerFlex 755 Drives, Frames 1…10
24Rockwell Automation Publication 750-UM002I-EN-P - August 2019
Page 25
Figure 6 - Stop Category 0
AC Lin e
Input Power
Motor
24V DC COM
START
STOP
PowerFlex 750-Series
Drive
Gate Control
Jumpers:
ENABLE Installed
SAFETY Removed
START/STOP COM
SensaGuard™
Interlock Switch
Guardmaster
440R-D22R2
Dual-input Safety Relay
Aux
(PAC)
Aux
(PAC)
Reset
Safe Torque Off Option Module OperationChapter 3
24V DC
Gray
Pink
A1
A2
S11
S21
S12
S22
S32
S42
LOGIC
8
7
DI
0V DC COM
24V DC
L12
L11
Y32
S34
0
1
2
3
4
56
13
14
23
24
SP+
SP–
SE+
SE–
Sd
Sd
Table 7 - Guardmaster DI Example Summary
AttributeDescription
Circuit status
Operating principle
Fault d etec tion
Circuit is shown with guard door closed and system ready for normal drive
operation.
This is a dual-channel system with monitoring of the Safe Torque Off circuit and
drive. Opening the guard door switches the input circuits (S12 and S22) to the
Guardmaster monitoring safety relay. The output circuits (13, 14 and 23, 24) cause
the safety option module and drive Enable circuit to trip and the motor coast-tostop. To restart the drive, the Guardmaster safety relay must first be reset followed
by a valid start command to the drive.
A single fault that is detected on the Guardmaster safety input circui ts results i n the
lockout of the system at the next operation and does not cause loss of the safety
function.
Rockwell Automation Publication 750-UM002I-EN-P - August 201925
Page 26
Chapter 3Safe Torque Off Option Module Operation
SP+
SP–
Sd
SE+
SE–
Sd
24V DC
0V DC COM
Gray
Pink
1 2 3 4 5 6 7 8 9 10 11
DC+
24V
COM
0V
PWR
RUN
FAULT
LOCK
COM
12 13 14 15 16 17 18 19 20 21
24V DC
A1 A2 A3 A4 A5 A6
B1 B2 B3 B4 B5 B6
AC Lin e
Input Power
Motor
24V DC COM
START
STOP
PowerFlex 750-Series
Drive
Gate Control
Jumpers:
ENABLE Installed
SAFETY Removed
START/STOP COM
SensaGuard
Interlock Switch
Micro800™
2080-IQ40B4 Plug-in I/O
Guardmaster 440C-CR30
Configurable
Safety Relay
Initiate Reset to
440C-CR30 Safety Relay via PAC
Reset
Figure 7 - Stop Category 0
Table 8 - Guardmaster Configurable Relay Example Summary
AttributeDescription
Circuit status
Operating principle
Application Considerations
Circuit is shown with guard door closed and system ready for normal drive
operation.
This is a dual-channel system with monitoring of the Safe Torque Off circuit and
drive. Monitoring is software configurable by using Connected Components
Workbench software. Opening the guard door switches the input circuits (1 and 2)
to the Guardmaster monitoring safety relay. The output circuits (19, 20, and 21)
cause the drive Enable circuit to trip and the motor coast-to-stop. To restart the
drive, the Guardmaster safety relay must first be reset followed by a valid start
command to the drive.
When the hazard analysis for the overall machine determines the need for external
mechanical brakes or other stopping means, the external means shall be activated
after the removal of power for Stop Category 0.
If the safety option module sticks ON, the motor stops on command due to the
enable input. The system cannot be reset when this fault condition exists.
26Rockwell Automation Publication 750-UM002I-EN-P - August 2019
Page 27
Figure 8 - Stop Category 1
SP+
SE+
Sd
SP–
SE–
Sd
A1
S11
S21
24V DC
0V DC COM
Gray
Pink
24V DC
DI
A2
S12
S22
S32
S42
13
14
23
24
0
1
2
3
4
56
7
8
LOGIC
A1
B1
A2
X32
37
38
47
48
17
18
27
28
1
2
3
4
5
6
7
8
RANGE
10
1
2
3
4
5
6
7
8
TIME
9
0
9
L12
L11
L11
EMD
Y32
S34
AC Lin e
Input Power
Motor
24V DC COM
START
STOP
PowerFlex 750-Series
Drive
Gate Control
Jumpers:
ENABLE Installed
SAFETY Removed
START/STOP COM
Guardmaster
440R-D22R2
Dual-input Safety Relay
Guardmaster
440R-EM4R2D
Expansion Module Delayed
SensaGuard
Interlock Switch
Reset
Aux
(PAC)
Aux
(PAC)
Aux
(PAC)
Safe Torque Off Option Module OperationChapter 3
Rockwell Automation Publication 750-UM002I-EN-P - August 201927
Page 28
Chapter 3Safe Torque Off Option Module Operation
AC Lin e
Input Power
Motor
PowerFlex 750-Series
Drive
Gate Control
Jumpers:
ENABLE Installed
SAFETY Removed
SensaGuard
Interlock Switch
POINT Guard I/O™ Modules
1734-IB8S
Digital Input
1734-OB8S
Digital Output
Safety Reset
Fault Reset
SinkingSourcing
Table 9 - Guardmaster DI and EMD Example Summary
AttributeDescription
Circuit status
Circuit is shown with guard door closed and system ready for normal drive
operation.
This is a dual-channel system with monitoring of the Safe Torque Off circuit and
drive. Opening the guard door switches the input circuits (S12, S22, and S32, S42)
to the Guardmaster monitoring safety relay. The output circuits (13, 14) issue a
Stop command to the drive and cause a controlled deceleration. After the
Operating principle
programmed delay, the timed output circuits (17, 18 and 27, 28) cause the Safe
Torque Off option module and the drive Enable circuit to trip. If the motor is
rotating when the trip occurs, it will coast-to-stop. To restart the drive, the
Guardmaster safety relay must first be reset followed by a valid start command to
the drive.
A single fault that is detected on the Guardmaster safety input circui ts results i n the
lockout of the system at the next operation and does not cause loss of the safety
Fault d etec tion
function.
If the safety option module sticks ON, the motor stops on command due to the
enable input. The system cannot be reset when this fault condition exists.
Figure 9 - Stop Category 0
24V DC
Gray
I0
Pink
I1
I2
I3
24V
COM
24V
O0
O1
O2
COM
COM
COM
SP+
SP–
SE+
SE–
Sd
Sd
0V DC COM
28Rockwell Automation Publication 750-UM002I-EN-P - August 2019
Page 29
Table 10 - POINT Guard I/O Example Summary
AttributeDescription
Circuit status
Operating principle
Fault d etec tion
Circuit is shown with guard door closed and system ready for normal drive
operation.
When a partial-access guard door is opened, the safety system initiates and
maintains a stop command to stop hazardous motion before a person can reach the
hazardous area. The safety system cannot be reset, and hazardous motion cannot
be restarted while the guard door is open. Once the guard door is closed and the
stop command is reset, a valid start command is required before hazardous motion
can resume.
The GuardLogix® controller-logic monitors the system for valid status and faults.
When it receives a safety demand on its inputs or an invalid status or fault is
detected, the GuardLogix controller-logic deactivates its safety outputs and sends a
safety stop command.
The PowerFlex drive monitors its internal safety circuits for valid status and faults.
When the GuardLogix controller de-energizes the drive Safe Torque Off (STO)
inputs, or an invalid state or fault is detected, the STO feature on the drive forces
the drive output power transistors to a disabled state. The hazardous motion that is
controlled by the drive coasts or ramps to a stop. This feature does not provide
electrical power isolation.
Safe Torque Off Option Module OperationChapter 3
Rockwell Automation Publication 750-UM002I-EN-P - August 201929
Page 30
Chapter 3Safe Torque Off Option Module Operation
Notes:
30Rockwell Automation Publication 750-UM002I-EN-P - August 2019
Page 31
Appendix A
Specifications, Certifications, and CE
Conformity
This appendix provides general specifications for the PowerFlex 750-Series
Safe Torque Off option module.
Top icPa ge
Specifications31
Certifications33
CE Conformity34
Specifications
These specifications apply to the Safe Torque Off option module. For
additional specifications, refer to the following publications:
• PowerFlex 750-Series AC Drives Technical Data,
publication 750-TD001
.
• PowerFlex 750-Series Products with TotalFORCE Control Technical
Data, publication 750-TD100
Table 11 - General Specifications
AttributeValue
Standards when used with
PowerFlex 750-Series
Safety category when used with
PowerFlex 750 Series
Standards when used with
PowerFlex 750-Series with
Tot al FO RC E Co nt rol
Safety category when used with
PowerFlex 750-Series with
Tot al FO RC E Co nt rol
Power supply (user I/O)24V DC ±10%, 0.8…1.1 x rated voltage
Power cons umption4.4 W
Safety enable SE+, SE–24V DC, 25 mA
Safety power SP+, SP–24V DC, 45 mA
Input ON Voltage, min24V DC ±10%, 21.6…26.4V DC
Input OFF Voltage, max5V
Input OFF Current, max2.5 mA @ 5V DC
IEC 61800-5-2, EN 61800-5-1, EN 61800-3:, EN ISO 13849-1, EN 62061, EN
60204-1, IEC 61508 parts 1-7
SIL 3 according to EN 62061 / IEC 61508
SIL CL 3 according to IEC 61800-5-2 / EN 62061 / IEC 61508
Cat. 4 and PL e according to EN ISO 13849-1
EN 61800-5-2, EN 61800-5-1, EN 61800-3, EN ISO 13849-1, EN 62061, EN
60204-1, IEC 61508 parts 1-7
SIL 3 according to EN 62061 / IEC 61508
SIL CL 3 according to EN 61800-5-2 / EN 62061 / IEC 61508
Cat. 3 and PL e according to EN ISO 13849-1
.
(2)
PE LV or S ELV
Rockwell Automation Publication 750-UM002I-EN-P - August 201931
Page 32
Appendix ASpecifications, Certifications, and CE Conformity
For detailed information on environmental, pollution degree, and drive
enclosure rating specifications, see the technical data publication for your
drive.
• PowerFlex 750-Series AC Drives Technical Data,
publication 750-TD001
• PowerFlex 750-Series Products with TotalFORCE Control Technical Data,
publication 750-TD100
• PowerFlex 755TM IP00 Open Type Kits Technical Data,
publication 750-TD101
(1) See Industrial Automation Wiring and Grounding Guidelines, publication 1770-4.1.
(2) Safety outputs need additional fuse for reverse voltage protection of the control circuit. Install a 6 A slow-blow or 10 A fast-
Environmental Specifications
The installation must comply with all environmental, pollution degree, and
drive enclosure rating specifications required for the operating environment.
AttributeValue
Conductor typeMulti-conductor s hielded cable
Conduc tor size
Strip length10 mm (0.39 in.)
acting fuse.
CategorySpecification
Ambient tempe rature
Storage temperature
Shock
Operating
Packaged for shipment
Vibration
Operating
Packaged for shipment
Sinusoidal loose load
Random secured
Surrounding environment
(1)
0.3…0.8 mm2 (28…18 AWG)
32Rockwell Automation Publication 750-UM002I-EN-P - August 2019
ATT EN TI ON : Failure to maintain the specified ambient temperature can
result in a failure of the safety function.
IMPORTANT Products with a safety function installed must be protected against
conductive contamination by one of the following methods:
• Select a product with an enclosure type of at least IP54,
NEMA/UL Type 12
• Provide an environmentally controlled location for the product that does
not contain conductive contamination
Page 33
Specifications, Certifications, and CE ConformityAppendix A
Certifications
See the Product Certifications website, rok.auto/certifications for Declarations
of Conformity, Certificates, and other certifications details.
Certification
c-UL-us
CE
RCM
TÜV
(1) When product is marked, refer to rok.auto/certifications for Declarations of Conformity Certificates.
(2) Underwriters Laboratories Inc. has not evaluated the Safe Torque Off, or Safe Speed Monitor option modules for safety.
(1)
(2)
Valu e
UL Listed, certified for US and Canada.
European Union 2014/30/EU EMC Directive, compliant with:
EN 61800-3; PowerFlex 750-Series AC Drive, Emissions, and Immunity
European Union 2006/42/EC Machinery Directive:
EN ISO 13849-1; Safety Function
EN ISO 13849-2; Safety Function
EN 60204-1; Safety Function
EN 62061; Safety Function
EN 61800-5-2; Safety Function
Australian Radiocommunications Act, compliant with:
EN 61800-3; categories C2 and C3
Certified by TÜV Rheinland for Safety:
Up to SIL 3, according to EN 61800-5-2, and IEC 61508, and SIL CL3 according to
EN IEC 62061;
up to Performance Level PLe and Category 3, according to EN ISO 13849-1;
when used as described in this PowerFlex 750-Series Safe Torque Off User Manual,
publication 750-UM002
.
Rockwell Automation Publication 750-UM002I-EN-P - August 201933
Page 34
Appendix ASpecifications, Certifications, and CE Conformity
CE Conformity
CE Declarations of Conformity are available online at: the Product
Certifications website, rok.auto/certifications
The 20-750-S Safe Torque Off option module is in conformity with the
essential requirements of the 2006/42/EC Machinery Directive and the 2004/
108/EC EMC Directive when installed and maintained in accordance with
the instructions that are contained in this document. The following standards
have been applied to demonstrate conformity:
.
Machinery Directive (2006/42/EC)
• EN ISO 13849-1 Safety of machinery - safety-related parts of control
systems - Part 1: General principles for design
• EN 60204-1 Safety of machinery - Electrical equipment of machines Part 1: General requirements
• EN 62061 Safety of machinery - safety of safety-related electrical,
electronic, and programmable electronic control systems
• EN 61800-5-2 Adjustable speed electrical power drive systems Part 5-2: Safety requirement -
• IEC 61508 Part 1…7 safety of electrical/electronic/programmable
electronic safety-related systems
EMC Directive (2014/30/EU)
• EN 61800-3 - Adjustable speed electric power drive systems - Part 3:
EMC requirements and specific test methods
34Rockwell Automation Publication 750-UM002I-EN-P - August 2019
Page 35
Index
A
additional resources 8
Australian Radiocommunications Act
Rockwell Automation Publication 750-UM002I-EN-P - August 201935
18
18
Page 36
Index
Notes:
36Rockwell Automation Publication 750-UM002I-EN-P - August 2019
Page 37
Page 38
Rockwell Automation Support
Use the following resources to access support information.
Documentation Feedback
Your comments will help us serve your documentation needs better. If you have any suggestions on how to improve this
document, complete the How Are We Doing? form at
Rockwell Otomasyon Ticaret A.Ş., Kar Plaza İş Merkezi E Blok Kat:6 34752 İçerenköy, İstanbul, Tel: +90 (216) 5698400
Rockwell Automation maintains current product environmental information on its website at http://ww w.rockwellautomation.com/rockwellautomation/about-us/sustainability-ethics/product-environmental-compliance.page.
Allen-Bradley, Connected Components Workbench, GuardLogix, Guardmaster, Micro800, POINT Guard I/O, PowerFlex, Rockwell Automation, Rockwell Software, SensaGuard, and TotalFORCE are trademarks of Rockwell Automation, Inc.
Trademarks not belonging to Rockwell Automation are property of their resp ective companies.