About the Book

Document Scope

This guide provides the information you will need in order to plan and install a safety-related TM5 / TM7 System.

This guide contains:

an overview and description of the TM5 / TM7 Safety-Related System,
information and requirements to plan your installation.

Validity Note

This document has been updated for the release of EcoStruxure^TM Machine Expert V2.1.

The characteristics that are described in the present document, as well as those described in the documents included in the Related Documents section below, can be found online. To access the information online, go to the Schneider Electric home page www.se.com/ww/en/download/.

The characteristics that are described in the present document should be the same as those characteristics that appear online. In line with our policy of constant improvement, we may revise content over time to improve clarity and accuracy. If you see a difference between the document and online information, use the online information as your reference.

Related Documents

Document title	Reference
Modicon TM5 Compact I/O Modules Hardware Guide	EIO0000000456 (ENG); EIO0000000457 (FRE); EIO0000000458 (GER); EIO0000000459 (SPA); EIO0000000460 (ITA); EIO0000000461 (CHS)
Modicon TM5 Digital I/O Modules Hardware Guide	EIO0000000444 (ENG); EIO0000000445 (FRE); EIO0000000446 (GER); EIO0000000447 (SPA); EIO0000000448 (ITA); EIO0000000449 (CHS)
Modicon TM5 Analog I/O Modules Hardware Guide	EIO0000000450 (ENG); EIO0000000451 (FRE); EIO0000000452 (GER); EIO0000000453 (SPA); EIO0000000454 (ITA); EIO0000000455 (CHS)
Modicon TM5 Expert (High Speed Counter) Modules Hardware Guide	EIO0000000462 (ENG); EIO0000000463 (FRE); EIO0000000464 (GER); EIO0000000465 (SPA); EIO0000000466 (ITA); EIO0000000467 (CHS)
Modicon TM5 Transmitter and Receiver Modules Hardware Guide	EIO0000000468 (ENG); EIO0000000469 (FRE); EIO0000000470 (GER); EIO0000000471 (SPA); EIO0000000472 (ITA); EIO0000000473 (CHS)
Modicon TM7 Digital I/O Blocks Hardware Guide	EIO0000000703 (ENG); EIO0000000704 (FRE); EIO0000000705 (GER); EIO0000000706 (SPA); EIO0000000707 (ITA); EIO0000000708 (CHS)
Modicon TM5/TM7 I/O Safety Modules Hardware Guide	EIO0000000861 (ENG); EIO0000000862 (GER); EIO0000000863 (ITA)
Modicon TM5 Safety Logic Controller TM5CSLC•00FS Hardware Guide	EIO0000000889 (ENG); EIO0000000891 (GER); EIO0000000892 (ITA)
Modicon TM5 - Sercos III Interface, Hardware Guide	EIO0000003221 (ENG); EIO0000003223 (GER); EIO0000003224 (SPA); EIO0000003222 (FRE); EIO0000003225 (ITA); EIO0000003226 (CHS)
PacDrive Logic Motion Controller - LMC Eco, Hardware Guide	EIO0000001501 (ENG); EIO0000001502 (GER)
PacDrive Logic Motion Controller - LMC Pro/Pro2, Hardware Guide	EIO0000001503 (ENG); EIO0000001504 (GER)
PacDrive TM5 / TM7 Flexible System, System Planning and Installation Guide	EIO0000001058 (ENG); EIO0000001060 (GER)
M262 Embedded Safety - Integration Guide	EIO0000003921 (ENG); EIO0000003923 (FRE); EIO0000003922 (GER); EIO0000003926 (SPA); EIO0000003924 (ITA); EIO0000003925 (CHS)
Modicon M262 Logic/Motion Controller Hardware Guide	EIO0000003659 (ENG); EIO0000003660 (FRE); EIO0000003661 (GER); EIO0000003662 (SPA); EIO0000003663 (ITA); EIO0000003664 (CHS)
Cybersecurity Guidelines for EcoStruxure Machine Expert, Modicon and PacDrive Controllers and Associated Equipment User Guide	EIO0000004242 (ENG)
How to Configure the Firewall for PacDrive LMC Controllers User Guide	EIO0000004198 (ENG); EIO0000004199 (GER)

Product Related Information

DANGER
	HAZARD OF ELECTRIC SHOCK, EXPLOSION OR ARC FLASH Disconnect all power from all equipment including connected devices prior to removing any covers or doors, or installing or removing any accessories, hardware, cables, or wires except under the specific conditions specified in the appropriate hardware guide for this equipment. Always use a properly rated voltage sensing device to confirm the power is off where and when indicated. Replace and secure all covers, accessories, hardware, cables, and wires and confirm that a proper ground connection exists before applying power to the unit. Use only the specified voltage when operating this equipment and any associated products. Failure to follow these instructions will result in death or serious injury.

DANGER

HAZARD OF ELECTRIC SHOCK, EXPLOSION OR ARC FLASH

Disconnect all power from all equipment including connected devices prior to removing any covers or doors, or installing or removing any accessories, hardware, cables, or wires except under the specific conditions specified in the appropriate hardware guide for this equipment.
Always use a properly rated voltage sensing device to confirm the power is off where and when indicated.
Replace and secure all covers, accessories, hardware, cables, and wires and confirm that a proper ground connection exists before applying power to the unit.
Use only the specified voltage when operating this equipment and any associated products.

Failure to follow these instructions will result in death or serious injury.

For important hazardous location information, refer to the individual product descriptions contained in their hardware guides.

WARNING
	LOSS OF CONTROL The designer of any control scheme must consider the potential failure modes of control paths and, for certain critical control functions, provide a means to achieve a safe state during and after a path failure. Examples of critical control functions are emergency stop and overtravel stop, power outage and restart. Separate or redundant control paths must be provided for critical control functions. System control paths may include communication links. Consideration must be given to the implications of unanticipated transmission delays or failures of the link. Observe all accident prevention regulations and local safety guidelines.¹ Each implementation of this equipment must be individually and thoroughly tested for proper operation before being placed into service. Failure to follow these instructions can result in death, serious injury, or equipment damage.

WARNING

LOSS OF CONTROL

The designer of any control scheme must consider the potential failure modes of control paths and, for certain critical control functions, provide a means to achieve a safe state during and after a path failure. Examples of critical control functions are emergency stop and overtravel stop, power outage and restart.
Separate or redundant control paths must be provided for critical control functions.
System control paths may include communication links. Consideration must be given to the implications of unanticipated transmission delays or failures of the link.
Observe all accident prevention regulations and local safety guidelines.¹
Each implementation of this equipment must be individually and thoroughly tested for proper operation before being placed into service.

Failure to follow these instructions can result in death, serious injury, or equipment damage.

¹ For additional information, refer to NEMA ICS 1.1 (latest edition), "Safety Guidelines for the Application, Installation, and Maintenance of Solid State Control" and to NEMA ICS 7.1 (latest edition), "Safety Standards for Construction and Guide for Selection, Installation and Operation of Adjustable-Speed Drive Systems" or their equivalent governing your particular location.

WARNING
	UNINTENDED EQUIPMENT OPERATION Only use software approved by Schneider Electric for use with this equipment. Update your application program every time you change the physical hardware configuration. Failure to follow these instructions can result in death, serious injury, or equipment damage.

WARNING
	UNINTENDED EQUIPMENT OPERATION Understand the requirements contained in IEC 61508, "Functional safety of electrical/electronic/programmable electronic safety-related systems" before applying the information contained in the present document. Completely understand the applications and environment defined by Safety Integrity Level (SIL) 3 within IEC 61508 Parts 1-7. Do not exceed SIL 3 ratings in the application of this product. Failure to follow these instructions can result in death, serious injury, or equipment damage.

WARNING

UNINTENDED EQUIPMENT OPERATION

Understand the requirements contained in IEC 61508, "Functional safety of electrical/electronic/programmable electronic safety-related systems" before applying the information contained in the present document.
Completely understand the applications and environment defined by Safety Integrity Level (SIL) 3 within IEC 61508 Parts 1-7.
Do not exceed SIL 3 ratings in the application of this product.

Failure to follow these instructions can result in death, serious injury, or equipment damage.

NOTE: SIL requirements referred to in the present document are based on the standards current at the time of TÜV certification.

Trademarks

QR Code is a registered trademark of DENSO WAVE INCORPORATED in Japan and other countries.

Terminology Derived from Standards

The technical terms, terminology, symbols and the corresponding descriptions in this manual, or that appear in or on the products themselves, are generally derived from the terms or definitions of international standards.

In the area of functional safety systems, drives and general automation, this may include, but is not limited to, terms such as safety, safety function, safe state, fault, fault reset, malfunction, failure, error, error message, dangerous, etc.

Among others, these standards include:

Standard	Description
IEC 61131-2:2007	Programmable controllers, part 2: Equipment requirements and tests.
ISO 13849-1:2015	Safety of machinery: Safety related parts of control systems. General principles for design.
EN 61496-1:2013	Safety of machinery: Electro-sensitive protective equipment. Part 1: General requirements and tests.
ISO 12100:2010	Safety of machinery - General principles for design - Risk assessment and risk reduction
EN 60204-1:2006	Safety of machinery - Electrical equipment of machines - Part 1: General requirements
ISO 14119:2013	Safety of machinery - Interlocking devices associated with guards - Principles for design and selection
ISO 13850:2015	Safety of machinery - Emergency stop - Principles for design
IEC 62061:2015	Safety of machinery - Functional safety of safety-related electrical, electronic, and electronic programmable control systems
IEC 61508-1:2010	Functional safety of electrical/electronic/programmable electronic safety-related systems: General requirements.
IEC 61508-2:2010	Functional safety of electrical/electronic/programmable electronic safety-related systems: Requirements for electrical/electronic/programmable electronic safety-related systems.
IEC 61508-3:2010	Functional safety of electrical/electronic/programmable electronic safety-related systems: Software requirements.
IEC 61784-3:2016	Industrial communication networks - Profiles - Part 3: Functional safety fieldbuses - General rules and profile definitions.
2006/42/EC	Machinery Directive
2014/30/EU	Electromagnetic Compatibility Directive
2014/35/EU	Low Voltage Directive

In addition, terms used in the present document may tangentially be used as they are derived from other standards such as:

Standard	Description
IEC 60034 series	Rotating electrical machines
IEC 61800 series	Adjustable speed electrical power drive systems
IEC 61158 series	Digital data communications for measurement and control – Fieldbus for use in industrial control systems

Finally, the term zone of operation may be used in conjunction with the description of specific hazards, and is defined as it is for a hazard zone or danger zone in the Machinery Directive (2006/42/EC) and ISO 12100:2010.

NOTE: The aforementioned standards may or may not apply to the specific products cited in the present documentation. For more information concerning the individual standards applicable to the products described herein, see the characteristics tables for those product references.