This document is protected by the law of copyright, whereby all right s established therein remain with the
company SICK AG. Reproduction of this document or parts of this document is only permissible within the limits
of the legal det ermination of Copyright Law. Alteration or abridgement of the document is not permitted without
the explicit written approval of the company SICK AG.
Please read this chapter carefully before working with this documentation and the Flexi
Classic modular safety controller.
1.1Function of this document
These operating instructions are designed to address the technical personnel of the machine manufacturer or the machine operator in regards to safe mounting, configuration,
electrical installation, commissioning, operation and maintenance of the Flexi Classic
modular safety controller.
These operating instructions do not provide instructions for operating machines on which
the safety controller is, or will be, integrated. Information on this is to be found in the appropriate operating instructions for the machine.
1.2Target group
These operating instructions are addressed to planning engineers, machine designers and
operators of plants and systems which are to be protected by a Flexi Classic modular safe-
ty controller. They are also addressed to people who integrate the Flexi Classic modular
safety controller into a machine, initialise its use, or who are in charge of servicing and
maintaining the device.
Note
1.3Information depth
These operating instructions contain the following information on the Flexi Classic modular
safety controller:
• mounting
• electrical installation
• commissioning and configuration
• care and maintenance
Planning and using SICK protective devices also require specific technical skills which are
not detailed in this documentation.
When operating the Flexi Classic modular safety controller, the national, local and statutory rules and regulations must be observed.
General information on accident prevention using opto-electronic protective devices can
be found in the competence brochure “Guidelines Safe Machinery”.
We also refer you to the homepage on the Internet at www.sens-control.com.
Here you will find information on:
• product and application animations
• configuration aid
• these operating instructions in different languages for viewing and printing
These operating instructions are original operating instructions.
These operating instructions apply to all Flexi Classic safety controller modules with the
following entry in the field Operating Instructions on the type label: “E-01” or higher. Take
into account the respectively applicable operating instructions (refer to the type label entry
on the modules).
This chapter deals with your own safety and the safety of the equipment operators.
= Please read this chapter carefully before working with the Flexi Classic modular safety
controller or with the machine protected by the Flexi Classic modular safety controller.
2.1Qualified safety personnel
The Flexi Classic modular safety controller must be mounted, commissioned and serviced
only by qualified safety personnel.
Qualified safety personnel are defined as persons who …
• have undergone the appropriate technical training
and
• who have been instructed by the responsible machine operator in the operation of the
machine and the current valid safety guidelines
and
• have access to the operating instructions of the Flexi Classic and those of the particular
modules and have read and familiarised themselves with them
and
• have access to the operating instructions for the protective devices (e.g. C4000)
connected to the safety controller and have read and familiarised themselves with
them.
2.2Applications of the device
The Flexi Classic modular safety controller is a configurable control system for safety
applications.
The category in accordance with EN ISO 13 849-1 or the SIL in accordance with IEC 61 508
and the SILCL in accordance with EN 62 061 depend on the external circuit, the realisation
of the wiring, the choice of the sensors and their location at the machine.
The device corresponds to up to category 4 in accordance with EN ISO 13 849-1; applications can reach up to SIL3 in accordance with IEC 61 508, up to SILCL3 in accordance
with EN 62 061 or PL e in accordance with EN ISO 13 849-1. The emergency stop function
in the device corresponds to stop category 0 or 1 in accordance with EN 60 204-1.
In order to reach the SIL3 safety level (see chapter 11 “Technical specifications” on
page 96) in accordance with IEC 61 508, the following test must be made at least every
365 days:
• The Flexi Classic system must be powered down.
• The Flexi Classic system must be powered up.
• All safety functions of the connected safety sensors must be verified.
The type of safety sensors as well as the method of wiring must be chosen according to
the category which is to be achieved.
Opto-electronic and tactile safety sensors (e.g. light curtains, laser scanners, safety switches, sensors, emergency stop pushbuttons) are connected to the modular safety controller
and are linked logically. The corresponding actuators of the machines or systems can be
switched off safely via the switching outputs of the safety controller.
The Flexi Classic safety controller has been tested in accordance with UL 508.
The Flexi Classic modular safety controller may only be used as intended in section 2.2
“Applications of the device”. It may only be used by specialist personnel and only at the
machine at which it was mounted and initially commissioned by qualified safety personnel
in accordance with these operating instructions.
If the device is used for any other purposes or modified in any way — also during mounting
and installation — any warranty claim against SICK AG shall become void.
2.4General safety notes and protective measures
Observe the safety notes and protective measures!
WARNING
Please observe the following items in order to ensure correct use of the Flexi Classic
modular safety controller.
• When mounting, installing and using the Flexi Classic, observe the standards and
directives applicable in your country.
• The national/international rules and regulations apply to the installation, use and
periodic technical inspection of the Flexi Classic modular safety controller, in particular:
– Machinery Directive 2006/42/EC
– EMC Directive 2004/108/EC (valid until 19.04.2016)
EMC Directive 2014/30/EU (valid from 20.04.2016)
– Provision and Use of Work Equipment Directive 2009/104/EC
– Low Voltage Directive 2006/95/EC (valid until 19.04.2016)
Low Voltage Directive 2014/35/EU (valid from 20.04.2016)
– The work safety regulations/safety rules
• Manufacturers and owners of the machine on which a Flexi Classic is used are
responsible for obtaining and observing all applicable safety regulations and rules.
• The notes, in particular the test notes (see chapter 8 “Commissioning” on page 90) of
these operating instructions (e.g. on use, mounting, installation or integration into the
existing machine controller) must be observed.
• The tests must be carried out by qualified safety personnel or specially qualified and
authorised personnel and must be recorded and documented to ensure that the tests
can be reconstructed and retraced at any time by third parties.
• These operating instructions must be made available to the operator of the machine
where the Flexi Classic is used. The machine operator is to be instructed in the use of
the device by qualified safety personnel and must be instructed to read the operating
instructions.
• To meet the requirements of the relevant product standards (e.g. EN 61 496-1), the
external voltage supply for the devices (SELV) must, among other aspects, be able to
bridge a power failure lasting 20 ms. Suitable power supplies are available as accessories from SICK.
• The modules of the Flexi Classic family conform to Class A, Group 1, in accordance with
EN 55 011. Group 1 encompasses all ISM devices in which intentionally generated
and/or used conductor-bound RF energy that is required for the inner function of the
device itself occurs.
The Flexi Classic system complies, as per the “radiated emissions” generic standard,
with the requirements of class A (industrial applications).
The Flexi Classic system is therefore only suitable for use in an industrial environment.
Loss of the safety function through an incorrect configuration!
Plan and carry out configuration carefully!
The configuration of safety applications must be carried out with the greatest accuracy and
must match the status and the condition of the machine or system to be monitored.
= Check whether the configured safety application monitors the machine or system as
planned and whether the safety of a configured application is ensured at all times. This
must be ensured in each operating mode and partial application. Document the result
of this check!
= In each case, observe the instructions for commissioning and daily checking in the
operating instructions of the protective devices integrated into the safety application!
= Note the warnings and function descriptions of protective devices connected to the
safety controller! Contact the respective manufacturer of the protective device if in
doubt!
The Flexi Classic modular safety controller has been designed to minimise environmental
impact. It uses only a minimum of power and natural resources.
= At work, always act in an environmentally responsible manner.
2.5.1Disposal
Disposal of unusable or irreparable devices should always occur in accordance with the
applicable country-specific waste-disposal regulations (e.g. European Waste Code
16 02 14).
Note
WARNING
We would be pleased to be of assistance to you on the disposal of these devices.
Contact us.
2.5.2Separation of materials
Material separation may only be performed by qualified safety personnel!
Caution is required when dismantling devices. There is a risk of injuries.
Before you send the devices for appropriate recycling, it is necessary to separate the
different materials in the Flexi Classic.
= Separate the housing from the rest of the parts (in particular the circuit board).
= Send the separated components for recycling as appropriate (see Tab. 5).
by components
ComponentsDisposal
Product
Housing, circuit boards, cables,
connectors and electrical connecting
pieces
This chapter provides information on the special features and properties of the Flexi
Classic modular safety controller. It describes the construction and the operating principle
of the device.
= Please read this chapter before mounting, installing and commissioning the device.
3.1Special features
safety controller
The Flexi Classic series is a safety controller concept comprising different modules that
can be interconnected individually. This allows the system to be extended to up to 104
inputs or outputs.
Each of these modules has a compact width of 22.5 mm. The units are of plug-in style with
communication between the individual units over an internal bus.
The required logic and function is specified by means of rotary switches on the modules.
An exception thereof are the relay modules and the fieldbus modules that are used for
integration in a higher level controller without a safety function. These modules are output
units and have no effect on the logic set or the function of the upstream units.
The Flexi Classic series consists of the following modules:
• main module UE410-MU
• main module UE410-GU
• input/output extension module UE410-XU
• input extension module UE410-8DI
• output modules UE410-2RO and UE410-4RO
• gateways, e.g.
– UE410-PRO (PROFIBUS-DP)
– UE410-CAN (CANopen)
– UE410-DEV (DeviceNet)
– UE410-EN1 (EtherNet/IP)
– UE410-EN3 (Modbus TCP)
– UE410-EN4 (PROFINET IO)
3.2Structure
A Flexi Classic system always consists of a single main module (UE410-MU or UE410-GU)
and, if necessary, additional input and output extensions as well as a corresponding bus
module.
structure Flexi Classic
(example with UE410-MU)
Main module
4 inputs /4 outputs
Input/output extension module
4 in puts/4 o utputs
Input extension module
8 in puts
UE410-8DIUE410-XUUE410-MU
Output module
2/4 outputs
UE410-2RO/
UE410-4RO
Gateway
E.g. UE410 -PRO, UE410-DEV,
UE410-CAN (see operating
instructions Flexi Classic
Gateways )
3.2.1UE410-MU main module
The UE410-MU is the main module in which the system configuration of the entire Flexi
Classic system is stored.
The UE410-MU has 4 safety inputs, 4 semiconductor outputs and 2 test outputs. The
9 programs that are available can be set by means of rotary switches that ensure the
connection of a large number of safety components. Functions such as EDM, resetting,
etc. are selected by means of the wiring of S1, S2 and S3. The UE410-MU can control two
applications acting independently as well as two applications that are dependent on each
other.
• safety laser scanners and safety camera systems (e.g. S300, V300, S3000)
Typical applications such as muting and OR links can be implemented simply, depending
on the setting of the program switch. If additional inputs or outputs are required, the
UE410-MU can be supplemented with a UE410-XU input/output extension module and/or
one or several UE410-8DI input extension modules.
If relay outputs are required, these can be implemented with the UE410-2RO/UE410-4RO
output modules.
Note
3.2.2UE410-GU main module
The UE410-GU is a main module that can be used as an alternative to the UE410-MU. As
in the UE410-MU, the system configuration for the entire Flexi Classic system is saved in
the UE410-GU. The UE410-GU makes possible a global emergency stop function for several stations connected together that must each be equipped with a UE410-GU. A local
emergency stop is also possible on each UE410-GU.
The UE410-GU has 4 safety inputs (I1-I4), 1 semiconductor output (Q1), 1 output for a
lamp for “Global emergency stop status” and “Reset required” (Q2), 2 test outputs (X1, X2)
and 2 inputs and 2 outputs for the global emergency stop function (IP, IN, OP and ON). The
safe control inputs I5 and I6 are used to connect external device monitoring and a reset
button. The 9 available programs can be set using a rotary switch and make it possible to
connect a variety of safety components.
The following devices can be connected to the UE410-GU:
The UE410-8DI module is an input extension with 8 inputs that can be linked using the OR,
AND or Bypass logic function to the respectively upstream UE410-MU, UE410-GU or
UE410-XU module. The 9 switch positions of the UE410-8DI rotary switch determine which
safety components can be connected to the UE410-MU/GU/XU and which type of logic is
used. The input extension module UE410-8DI acts exclusively on the next UE410-MU,
UE410-GU or UE410-XU module positioned to the left in the module structure, thus forming a function group. It is allowed to connect a maximum of 8 UE410-8DI modules to a
UE410-MU, UE410-GU or UE410-XU.
For more informationen on this topic see section 4.12 “Grouping of subsystems” on
page 78.
3.2.4UE410-XU input/output extension
The UE410-XU module is an input/output extension with 4 safety inputs, 4 semiconductor
outputs and 2 test outputs. It has the same switch positions, logic functions and facilities
for connecting sensors as the UE410-MU. In contrast to the UE410-MU and UE410-GU, the
UE410-XU cannot store the system configuration.
• A UE410-XU can only be operated in combination with a UE410-MU or UE410-GU main
module.
• A main module and a UE410-XU can be linked logically with each other, thus forming a
subsystem (for further information please refer to section 4.12 “Grouping of subsystems” on page 78).
Note
3.2.5UE410-2RO/UE410-4RO output modules
The UE410-2RO/UE410-4RO output extensions make one or two dual-channel, contactbased outputs available. They do not have any influence on the specified logic instructions
of a system structure and are controlled by the UE410-MU, UE410-GU or UE410-XU outputs.
3.2.6Gateways
Gateways (fieldbus modules) can be added to the Flexi Classic modular system for diagnostic purposes. They output the system configuration and the input/output states as well
as the error and status information of all the modules.
Several gateways are available, e.g.:
• UE410-PRO for PROFIBUS-DP
• UE410-DEV for DeviceNet
• UE410-EN1 for EtherNet/IP
The UE410-GU does not support all data sets from all gateways.
You will find a complete list of all gateways and the data sets supported in the operating
instructions “Flexi Classic Gateways” or in the Internet on our homepage www.senscontrol.com.
All gateways have 4 non-safe application diagnostic outputs. The outputs are short-circuit
protected (see also the Flexi Classic Gateways operating instructions).
The UE410-MU main module is the main module of the Flexi Classic modular safety controller. Only one UE410-MU can be integrated for each Flexi Classic system. A UE410-MU
can control up to two applications acting independently or two applications that are dependent on each other.
In order to increase the number of inputs, one or more UE410-8DI extension modules can
be used additionally.
An additional UE410-XU module can be used in order to increase the number of outputs
(for further information refer to section 4.12 “Grouping of subsystems” on page 78).
The system configuration is stored in the UE410-MU main module (ENTER button to accept
the program settings and system configuration) (for further information refer to section 9.1
“Accepting the system configuration” on page 92).
9 programs that can be set with a screwdriver at the program switch are available.
The following functions can be set by selecting the program and connecting the terminals
S1, S2, and S3 at the module:
• type of the logic and of the safety sensors to be connected
• restart interlock
• external device monitoring (EDM)
Q1 and Q2 always switch off within the response time.
Q31) and Q4 can be deactivated with off delay by using the lower rotary switch (depending
on the device variant 0-5 s/0-50 s/0-300 s/not on UE410-xxxT0).
The outputs are tested periodically in order to detect errors in the safety outputs Q1-Q4.
When using XU modules see section 4.12 “Grouping of subsystems” on page 78.
For further information see section 3.6 “UE410-MU/UE410-XU programs” on page 36.
Subsequent changes to the program or to the wiring (S1-S3) without saving will result in a
safety-related shutdown.
You have two possibilities to reach SIL3 or Category 4 for your application:
• dual-channel wiring of the outputs, e.g. Q1/Q2 to K1/K2
or
• single-channel wiring only with routing within protected areas such as in a control
cabinet, e.g. Q1 to K1/K2.
Safety-oriented devices must be suitable for safety related signals!
A function interruption of safety outputs results in a loss of the safety functions so that the
risk of serious injury exists.
• Do not connect any loads that exceed the rated values of the safety outputs.
• Wire the Flexi Classic system so that 24 V DC signals cannot contact the safety outputs.
• Connect the GND wires of the power supply to earth so that the devices do not switch
on when the safety output line is applied to frame potential.
• Use suitable components or devices that fulfil all the applicable regulations and
standards.
Actuators at the outputs can be wired single-channeled. In order to maintain the respective
Safety Integrity Level the lines have to be routed in such a manner that cross circuits to
other live signals can be excluded, for example by routing them within protected areas
such as in a control cabinet or in separate plastic-sheathed cables.
The UE410-GU is a main module that can be used as an alternative to the UE410-MU. The
system configuration is stored in the main module (for further information please refer to
section 9.1 “Accepting the system configuration” on page 92).
Only one UE410-GU can be used per Flexi Classic system.
In order to increase the number of inputs, one or more UE410-8DI extension modules can
be used additionally.
To increase the number of outputs, an additional UE410-XU can be used (see section 4.12
“Grouping of subsystems” on page 78). A total of up to 12 Flexi Classic modules and one
gateway can be connected to the UE410-GU.
The UE410-GU makes possible a global emergency stop function for several stations connected together that must each be equipped with a UE410-GU. If the global emergency
stop on a module is operated, the safety outputs on all modules switch off. To reset a global emergency stop, the reset button must be operated on the same module on which the
global emergency stop was triggered.
Note
A global emergency stop must always be reset manually.
Along with the global emergency stop function, on each module it is also possible to select
a local emergency stop function with or without restart interlock. The local emergency stop
only acts on the safety output on the related module. A local emergency stop can be reset
either automatically or manually.
The safety output Q1 always switches within the response time. A switch off delay as on
the UE410-MU is not possible with the UE410-GU.
Different programs for the local inputs can be selected with the aid of a rotary switch.
9 programs are available using which the following functions can be set:
• type of the safety sensors to be connected
• global emergency stop or global and local emergency stop
• automatic or manual reset of a local emergency stop
For further information see section 3.7 “UE410-GU programs” on page 49.
WARNING
Subsequent changes to the program will result in a safety-related shutdown without
saving.
Other indicatorsDevice error, see chapter 10 “Diagnostics” on page 93
Switch/buttonFunction
X
10-step rotary switch (position 0 forbidden) for setting an input
circuit function, see section 3.7 “UE410-GU programs” on
page 49
ENTER
Button for accepting the system configuration (Teach-in), see
section 9.1 “Accepting the system configuration” on page 92
Subject to change without notice
Operating instructionsChapter 3
Tab.14:
UE410
-
GU terminal
Flexi Classic
Product description
3.4.2Terminal assignment
assignment
AssignmentDescription
I1/I2Global emergency stop (equivalent switch with test pulses)
I3/I4
Local emergency stop (local input, depending on the program
set)
A1 (+UB)
Voltage supply
A2 (GND)
X1
X2
Q1Single-channel safety output (OSSD)
Q2
Test outputs: cross-circuit detecting and short-circuit detecting
control signals for controlling safety sensors
4)
4)
Connection for the lamp for “Global emergency stop status” and
“Reset required”
I5Connection for the external device monitoring (EDM)
I6Connection for the reset button
I
P
I
N
O
P
O
N
Input signal from the previous module (PRE_IN)
Input signal from the next module (NEXT_IN)
Output signal to the previous module (PRE_OUT)
Output signal to the next module (NEXT_OUT)
Notes
3.4.3Global emergency stop with the UE410-GU
The global emergency stop makes possible the simultaneous shut down of the safety outputs on several Flexi Classic stations connected together that are each equipped with a
UE410-GU as the main module.
• In theory as many UE410-GU modules as required can be connected together to form a
global emergency stop system. However, it is recommended not to exceed 32 modules,
because each module increases the response time of the overall system (see the information on the global response time in section 11.1.2 “UE410-GU module” of the technical data on page 101).
• The different UE410-GU modules that together form a global emergency stop circuit do
not need to be in the same protected area. Faults in the area OX and IX, e.g. a shortcircuit or cross circuit, are detected and will result in shutdown.
• All UE410-GU modules that are on a common global emergency stop cut-off path must
be connected to the same GND connection.
Principle of operation
As long as the system is enabled, each UE410-GU sends a signal to the previous UE410GU (PRE) and to the next UE410-GU (NEXT). If the global emergency stop is activated on a
module (falling edge on I1/I2), then this module sets its safety output Q1 as well as the
signals to its neighboring modules (outputs OP and ON) to low. The neighboring modules
now also set their safety output Q1 as well as their outputs OP and ON to low.
The status of the global emergency stop is also output via the output Q2. If the global
emergency stop is activated on this UE410-GU, this status is indicated with a signal
flashing at 2 Hz on output Q2. If the global emergency stop has been activated on another
UE410-GU, then this status is indicated with a continuous high on output Q2.
4)
When using multiple modules see section 4.12 “Grouping of subsystems” on page 78.
Once the cause of the global emergency stop has been rectified (inputs I1 and I2 are high
again, e.g. protective field clear), then the UE410-GU on which the global emergency stop
was originally triggered signals on output Q2 the status Reset required with a signal
flashing at 1 Hz.
Reset
A global emergency stop can only be reset manually. The reset must be undertaken on the
same module on which the global emergency stop was triggered.
Once the global cut-off path for this module is closed again (inputs I1 and I2 are high
again, e.g. protective field clear) and the reset button on this module is then operated, the
safety output Q1 on this module as well as the outputs OP and ON switch to high again.
The following conditions are to be noted for the reset:
• Only the falling edge is evaluated.
• The minimum actuation time for the reset button is ≥ 50 ms.
• The maximum actuation time for the reset button is ≤ 5 s.
If one of these criteria is not met, the emergency stop is not reset.
Wiring of the modules
To connect several UE410-GU modules together, the input IN on the previous UE410-GU
must be connected to the output OP on the next UE410-GU and the output ON on the previous UE410-GU must be connected to the input IP on the next UE410-GU.
For the specification of the connection cable please refer to the data sheet in section 11.1.2 “UE410-GU module” on page 101.
The first and last UE410-GU in an emergency stop system act as end modules. An end
module is a UE410-GU that has only one neighboring station. These modules are defined
by the wiring of the outputs X1 and X2.
• The end module without PRE is defined by wiring X1 to IP.
• The end module without NEXT is defined by wiring X2 to IN.
This wiring is saved with the configuration and checked each time on switching on.