S_StartReset input

This input is used to specify the start-up inhibit after the Safety Logic Controller has been started up or after the function block has been activated.

When a start-up inhibit is active, all safety-related outputs of the function block are in the defined safe state. This ensures that a machine/system cannot be started up inadvertently. If a start-up inhibit is active, a reset signal is required to remove the inhibit and enable the machine/system to function.

Data type: SAFEBOOL

Initial value: SAFEFALSE

Connection: Connect this input to a variable or constant.

If Activate = TRUE, the possible values at S_StartReset lead to the following function block behavior:

Value

Description

SAFETRUE

No start-up inhibit for the function block after the Safety Logic Controller has been started up and after the function block has been activated.

If no start-up inhibit has been specified for the function block, the SAFETRUE status at the S_GuardLock input can cause the S_GuardLocked output to immediately switch to SAFETRUE.

Refer to the first hazard message below this table.

SAFEFALSE

Active start-up inhibit after the Safety Logic Controller has been started up and after the function block has been activated.

The active start-up inhibit must be manually removed by means of a reset signal at the Reset input.

Removing the start-up inhibit by means of a positive signal edge at the Reset input can cause the S_GuardLocked output to switch to SAFETRUE immediately (depending on the status of the other inputs).

Refer to the second hazard message below the table.

 WARNING

UNINTENDED START-UP

If no start-up inhibit is specified:

  • Be sure that your risk analysis includes an evaluation for the state change at the S_GuardLocked output after applying SAFETRUE to the S_GuardLock input.

  • Make certain that appropriate procedures and measures (according to applicable sector standards) have been established to help avoid hazardous situations when applying SAFETRUE to the S_GuardLock input.

  • Use appropriate safety interlocks where personnel and/or equipment hazards exist.

Failure to follow these instructions can result in death, serious injury, or equipment damage.

 WARNING

UNINTENDED START-UP

  • Verify the impact of removing the start-up inhibit by means of a positive signal edge at the Reset input.

  • Make certain that appropriate procedures and measures (according to applicable sector standards) have been taken to help avoid hazardous situations when removing the start-up inhibit.

  • Do not enter the zone of operation when removing the start-up inhibit.

  • Ensure that no other persons can access the zone of operation when removing the start-up inhibit.

  • Use appropriate safety interlocks where personnel and/or equipment hazards exist.

Failure to follow these instructions can result in death, serious injury, or equipment damage.

The start-up inhibit must only be deactivated (S_StartReset = SAFETRUE) if it is certain that starting up the machine/system will not lead to a hazardous situation or that a suitable start-up inhibit is in place at another location or using other means.

 WARNING

NON-CONFORMANCE TO SAFETY FUNCTION REQUIREMENTS

  • Verify the impact of a deactivated start-up inhibit (S_StartReset = SAFETRUE) on your machine or process prior to implementation.

  • Observe the regulations given by relevant sector standards regarding the start-up inhibit.

  • Verify that a suitable start-up inhibit is in place at another location or using other means if the start-up inhibit is deactivated by setting S_StartReset = SAFETRUE.

Failure to follow these instructions can result in death, serious injury, or equipment damage.

 WARNING

NON-CONFORMANCE TO SAFETY FUNCTION REQUIREMENTS

Verify that a start-up inhibit facility is implemented in your safety-related network if required for your specific safety-related function according to the relevant standards.

Failure to follow these instructions can result in death, serious injury, or equipment damage.

 WARNING

UNINTENDED START-UP

Validate the behavior of the function block and the safety-related network as a whole and thoroughly test the application.

Failure to follow these instructions can result in death, serious injury, or equipment damage.