Security information 1 Preface 2 SIMATIC Product overview 3 ET 200SP HA F-DI 16x24VDC HA Wiring 4 Parameters/address space 5 Applications of the F-I/O module 6 Displays, alarms and messages 7 Technical specifications 8 Response times A Equipment Manual 6DL1136-6BA00-0PH1 01/2021 A5E45647528-AC Legal information Warning notice system This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger. DANGER indicates that death or severe personal injury will result if proper precautions are not taken. WARNING indicates that death or severe personal injury may result if proper precautions are not taken. CAUTION indicates that minor personal injury can result if proper precautions are not taken. NOTICE indicates that property damage can result if proper precautions are not taken. If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage. Qualified Personnel The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems. Proper use of Siemens products Note the following: WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed. Trademarks All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner. Disclaimer of Liability We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions. Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY A5E45647528-AC Ⓟ 06/2021 Subject to change Copyright © Siemens AG 2021. All rights reserved Table of contents 1 Security information.............................................................................................................................. 5 2 Preface ................................................................................................................................................... 7 3 Product overview ................................................................................................................................... 9 3.1 4 5 6 7 Properties of the F-DI 16x24VDC HA I/O module ................................................................... 9 Wiring .................................................................................................................................................. 13 4.1 Terminal blocks for the I/O module ..................................................................................... 13 4.2 Pin assignment of the F-DI 16x24VDC HA I/O module ......................................................... 15 4.3 Schematic circuit diagram .................................................................................................. 17 Parameters/address space ................................................................................................................... 19 5.1 Parameters ........................................................................................................................ 20 5.2 5.2.1 5.2.2 5.2.3 5.2.4 5.2.5 5.2.6 5.2.7 Description of parameters .................................................................................................. 24 F-parameters ..................................................................................................................... 24 Cross-channel parameters .................................................................................................. 25 Parameters of the module .................................................................................................. 26 Parameters of the channel pairs ......................................................................................... 27 Parameters of the channels ................................................................................................ 29 Parameters of the potential group ...................................................................................... 35 Additional parameters on the "Redundancy" tab for redundant modules ............................. 36 5.3 Address space .................................................................................................................... 37 Applications of the F-I/O module ......................................................................................................... 39 6.1 Applications of the electronic module................................................................................. 39 6.2 Application 1: Safety mode SIL3/Cat.3/PLd .......................................................................... 41 6.3 Application 2: Safety mode SIL3/Cat.3/PLe .......................................................................... 43 6.4 6.4.1 6.4.2 Application 3: Safety mode SIL3/Cat.4/PLe .......................................................................... 46 Application 3.1 (SIL3/Cat.4/PLe) ......................................................................................... 47 Application 3.2 (SIL3/Cat.4/PLe) ......................................................................................... 48 6.5 Requirements placed on sensors for fail-safe modules ........................................................ 51 6.6 IO redundancy ................................................................................................................... 53 Displays, alarms and messages ........................................................................................................... 55 7.1 Status and fault displays of the F-DI 16x24VDC HA I/O module............................................ 55 7.2 Interrupts .......................................................................................................................... 58 7.3 Diagnostic messages.......................................................................................................... 60 7.4 Maintenance messages ...................................................................................................... 66 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 3 Table of contents 8 Technical specifications ....................................................................................................................... 67 A Response times.................................................................................................................................... 75 Index .................................................................................................................................................... 77 4 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Security information 1 Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines, and networks. In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial security concept. Siemens’ products and solutions form one element of such a concept. Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. These systems, machines and components should only be connected to the enterprise network or the Internet if and only to the extent necessary and with appropriate security measures (firewalls and/or network segmentation) in place. You can find more information on protective measures in the area of industrial security by visiting: https://www.siemens.com/industrialsecurity. Siemens’ products and solutions undergo continuous development to make them more secure. Siemens strongly recommends performing product updates as soon as they are available and using only the latest product versions. Use of product versions that are no longer supported, and failure to apply latest updates may increase customer’s exposure to cyber threats. To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under https://www.siemens.com/industrialsecurity. F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 5 Security information 6 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 2 Preface Validity of the documentation This device manual describes the I/O module F-DI 16x24VDC HA with the article number 6DL1136-6BA00-0PH1. It supplements the system manual "Distributed I/O System ET 200SP HA (https:// support.industry.siemens.com/cs/ww/en/view/109761547)". Functions that generally relate to the system are described in the system manual. The information in this device manual and the system/function manuals enables you to put the ET 200SP HA into operation. You can find additional information in the programming and operating manual "SIMATIC Industrial Software S7 F/FH Systems - Configuring and Programming (https:// support.industry.siemens.com/cs/ww/en/view/109773062)". Conventions Please also observe notes marked as follows: Note A note contains important information on the product described in the documentation, on the handling of the product or on the section of the documentation to which particular attention should be paid. F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 7 Preface Important notes for maintaining operational safety of your plant Note Operation of systems with safety aspects in mind Safety-related systems are subject to special operational safety requirements on the part of the operator. The supplier is also obliged to comply with special product monitoring measures. For this reason, we provide you with information on product developments and features that are (or could be) relevant to operation of systems with safety aspects in mind. In order to obtain the latest information and to enable you to undertake any necessary modifications to your system, you must subscribe to the corresponding notifications To subscribe, go to the Internet (https:// support.industry.siemens.com/My/ww/de/). Log on to this website and under "My Notifications" select the notifications for the following topics, for example: • S7-300 / S7-300F • S7-400 / S7-400H / S7-400F/FH • Distributed I/O • SIMATIC Industrial Software • S7 F/FH Systems • SIMATIC PCS 7 • ET 200SP HA You can find additional information on setting up notifications on the page "Helpful Functions in Online Support (https://support.industry.siemens.com/cs/ww/en/sc/2063)". Security concepts and communication The PCS 7 security concepts described in the document "PCS 7 Compendium Part F - Industrial Security" must be observed for secure operation of the system. You can find additional information on this document in the table above under "PCS 7". In particular, we recommend the following: • Protection of the devices/systems, e.g. PCS 7 OS server and clients • Ensuring the integrity and confidentiality of communication between the devices/systems, e.g.: – By means of encrypted and authenticated communication between the systems involved, such as the PCS 7 OS system and/or between engineering stations (ES) – When using Industrial Ethernet CPs: by means of a VPN tunnel between the OS systems and/or automation systems (AS). 8 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 3 Product overview 3.1 Properties of the F-DI 16x24VDC HA I/O module View of the module F-DI 16x 24V DC HA DIA G MT 1 3 5 7 9 11 13 15 DI.0 + DI.2 + DI.4 + DI.6 + DI.8 + DI.10 + DI.12 + DI.1 4 + 17 19 21 23 25 27 29 31 UV0 UV2 UV4 UV6 UV8 UV1 0 UV12 UV1 4 F-D I DI.1+ DI.3 + DI.5 + DI.7 + DI.9 + DI.11+ DI.1 3 + DI.15 + 2 4 6 8 10 12 14 16 UV UV1 18 UV3 20 UV5 22 UV7 24 UV9 26 UV11 28 UV1 3 30 UV15 32 1P1 L+ 24V 2P1 L+ 24V DC M 1P2 DC MA X. 10 A M 2P2 .0 F0 .2 F2 .4 F4 .6 F6 .8 F8 .10 F10 .12 F12 .14 F14 .1 F1 .3 F3 .5 F5 .7 F7 .9 F9 .11 F11 .13 F13 .15 F15 ③ ④ ⑤ ⑥ X 2 3 4 PW R CC0 1 6DL1131-6BH 00- ① ② 0PH1 Module type and designation LED for diagnostics LED for maintenance 2D matrix code Wiring diagram LEDs for channel status/channel fault ⑧ ⑨ ⑩ ⑪ ⑫ ⑬ Output disable switch Color coding • Basic module type: "White" = Digital input module • Supplemental type information: "Yellow" = Fail-safe I/O module Product version Color code for selection of the color-coded labels Serial number Article number ⑦ LED for supply voltage Figure 3-1 View of the module F-DI 16×24VDC HA F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 9 Product overview 3.1 Properties of the F-DI 16x24VDC HA I/O module Properties The I/O module has the following properties: • Technical properties – 16 fail-safe digital inputs (SIL3/Cat.4/PLe) – 16 outputs for sensor supply – PROFIsafe Profile V2.6.1 – 1oo1 and 1oo2 evaluation can be configured for each channel or channel pair. 1oo2 evaluation can be configured in pairs with a permanently assigned partner channel (e.g. channel 0 configured, channel 8 is assigned) – Module-specific configurable diagnostics for missing supply voltage L+ – Sinking input – Suitable for connection of 2-/3-/4-wire sensors in accordance with IEC 61131, type 1 – Channel-specific configurable input delay – Channel-specific configurable pulse stretching – Internal short-circuit-proof sensor supplies for each input – External sensor supply possible – Diagnostics display LED DIAG (red/green) – Maintenance messages and maintenance display LED MT (yellow) – Channel-specific status display LED "Channel status" (green) – Channel-specific error display LED "Channel fault" (red) – Channel-specific diagnostics, e.g. short-circuit/wire break – Modular diagnostics, e.g. load voltage missing – Channel-specific or module-wide passivation • Supported functions – Firmware update – I&M identification data – Value status QI – IO redundancy – High-precision time stamping (accuracy 10 ms) – Output disable switch 10 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Product overview 3.1 Properties of the F-DI 16x24VDC HA I/O module WARNING Validity of safety parameters The safety parameters in the technical specifications are valid for a mission time of 20 years and a repair time of 100 hours. If a repair is not possible within 100 hours, remove the relevant module from the terminal block or switch off its supply voltage before 100 hours elapse. After 100 hours elapse, the module switches off on its own. For repairs, follow the procedure described in section "Diagnostic messages (Page 60)". (FDIW-001) Output disable switch If you want to pull the I/O module in runtime, you have to press the output disable switch for 3 seconds for the I/O module to be deenergized. When the output disable switch has been pressed for 3 seconds, the LED DIAG flashes red, the LED MT lights up yellow and the I/O module generates a diagnostics message. You can find additional information in section "Status and fault displays of the F-DI 16x24VDC HA I/O module (Page 55)". Note Pressing the output disable switch interrupts any ongoing firmware update. A firmware update cannot be performed when the device is deenergized. Accessories The following accessories must be ordered separately: • Labeling strips • Color-coded labels • Reference identification labels • Slot cover • Shield connector F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 11 Product overview 3.1 Properties of the F-DI 16x24VDC HA I/O module 12 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 4 Wiring 4.1 Terminal blocks for the I/O module Terminal blocks You can operate the I/O module with the following terminal blocks: • 6DL1193-6TP00-0DH1, light • 6DL1193-6TP00-0BH1, dark • 6DL1193-6TP00-0DM1, light, for redundant configuration • 6DL1193-6TP00-0BM1, dark, for redundant configuration The terminal block is not included in the scope of delivery of the I/O module and must be ordered separately. WARNING Provisions for IO redundancy • With a redundant configuration, you need to ensure that not only one I/O module is permanently operated on the terminal block. • When plugging a I/O module in a redundant configuration, you must ensure that you use identical module types. (FDIW-013) Note Further information on the configuration can be found in the system manual for ET 200SP HA. F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 13 Wiring 4.1 Terminal blocks for the I/O module Connections on the slot and I/O module 6ORWRIWKH,2PRGXOH &RQQHFWRUVLGHRIWKH,2 PRGXOH ; &DUULHUPRGXOHFRQWDFWVRIWKHEDFNSODQHEXV 0D[LPXP9'& 0D[LPXPP$ ; 7HUPLQDOEORFNFRQWDFWVRIWKH,2PRGXOH 0D[LPXP9'& 0D[LPXP$SHUSLQ$SHUPRGXOH 7HUPLQDOEORFN 3URFHVVWHUPLQDOV 6XSSO\RIWKH,2PRGXOH Figure 4-1 Slot and I/O module connections Information on the pin assignment of the I/O module (terminal block) can be found in the sections below. 14 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Wiring 4.2 Pin assignment of the F-DI 16x24VDC HA I/O module 4.2 Pin assignment of the F-DI 16x24VDC HA I/O module General pin assignment Table 4-1 Pin assignment of the F-DI 16×24VDC HA Terminal Assignment Terminal Assignment Explanations 1 F-DI /DI.0+ 2 F-DI /DI.1+ F-DI /DI.n+: Input signal, channel n (0…15) 3 F-DI /DI.2+ 4 F-DI /DI.3+ UV /UVn: Sensor supply, channel n (0…15) 5 F-DI /DI.4+ 6 F-DI /DI.5+ 1P1: Supply voltage L+ of the voltage bus 1P 7 F-DI /DI.6+ 8 F-DI /DI.7+ 2P1: Supply voltage L+ of the voltage bus 2P 9 F-DI /DI.8+ 10 F-DI /DI.9+ 1P2: Ground reference of the voltage bus 1P 11 F-DI /DI.10+ 12 F-DI /DI.11+ 2P2: Ground reference of the voltage bus 2P 13 F-DI /DI.12+ 14 F-DI /DI.13+ 15 F-DI /DI.14+ 16 F-DI /DI.15+ 17 UV /UV0 18 UV /UV1 19 UV /UV2 20 UV /UV3 21 UV /UV4 22 UV /UV5 23 UV /UV6 24 UV /UV7 25 UV /UV8 26 UV /UV9 27 UV /UV10 28 UV /UV11 29 UV /UV12 30 UV /UV13 31 UV /UV14 32 UV /UV15 1P1 L+ 1P2 M 2P1 L+ 2P2 M 1 1 3 5 7 9 11 13 15 DI.0 + DI.2 + DI.4 + DI.6 + DI.8 + DI.10 + DI.12 + DI.14 + 17 19 21 23 25 27 29 31 UV0 UV2 UV4 UV6 UV8 UV10 UV12 UV14 F-DI DI.1+ DI.3 + DI.5 + DI.7+ DI.9 + DI.11+ DI.13 + DI.15 + 2 4 6 8 10 12 14 16 UV1 UV3 UV5 UV7 UV9 UV11 UV13 UV15 18 20 22 24 26 28 30 32 UV 1P1 L+ 24VDC M 1P2 2P1 L+ 24VDC M 2P2 MAX. 10 A 1 If the module is plugged into a TB45R-P32 terminal block suitable for IO redundancy, the potential at this terminal is 1P3. Table 4-2 Circuit diagrams 1-wire ', Q ',Q 9'& 2-wire 3-wire 4-wire ',Q ',Q 89Q + DI.n 89Q 0 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC UVn DI.n+8 - M 15 Wiring 4.2 Pin assignment of the F-DI 16x24VDC HA I/O module Note Connection with multicore cables at function status 1 (FS01) of the I/O module If you use multi-core cables to connect the signals to the inputs of the I/O module, make sure that any unused cores of this cable are grounded on one side. This note can be ignored for I/O modules with function status 2 (FS02) and higher. Note To prevent wire-break diagnostics in the case of simple encoder contacts, you have the option of connecting a resistor in parallel to the encoder contact. Recommended ohmic resistance value: 18 kOhm to 30 kOhm, typically: 26 kOhm 16 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Wiring 4.3 Schematic circuit diagram 4.3 Schematic circuit diagram The following figure shows the schematic circuit diagram of the F-DI 16x24VDC HA. ,QSXWFLUFXLW 7HUPLQDO ', ವ ವ ವ %DFNSODQHEXVLQWKHFDUULHUPRGXOH w& *DOYDQLF LVRODWLRQ (763+$ EDFNSODQHEXV LQWHUIDFH 89 w& 3RZHUEXVLP 7HUPLQDOEORFN ', ವ ವ ವ 89 0 / Figure 4-2 5HYHUVHSRODULW\ SURWHFWLRQ &KDQQHOVWDWXV/('V &KDQQHOGLDJQRVWLF/('V Schematic circuit diagram of F-DI 16x24VDC HA Firmware update The supply voltage L+ must be available on the I/O module at the start of the firmware update and during the update. The firmware can only be updated in the STOP mode of the F-CPU. F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 17 Wiring 4.3 Schematic circuit diagram 18 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Parameters/address space 5 Configuration The following software is required to configure the I/O module: • S7 F Systems V6.3 (or higher) • Additionally optional: – PCS 7 V9.0 SP3 (or higher) or – SIS compact V9.0 SP3 (or higher) Parameters You define the functioning of the I/O module via parameters. F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 19 Parameters/address space 5.1 Parameters 5.1 Parameters Introduction The parameters of the F-DI 16×24VDC HA are described below. The parameters of the I/O module are displayed in the "Properties" dialog of the module in HW Config on the following tabs: • "Parameters" tab • "Redundancy" tab This tab is displayed for redundant I/O modules. • "Time stamp" tab This tab is used to configure the time stamp for the I/O module. For more information on time stamping, refer to the function manual "SIMATIC; Process Control System PCS 7; High-precision Time Stamping with ET 200SP HA (https:// support.industry.siemens.com/cs/ww/en/view/109772337)". Parameters in the "Parameters" tab You have the following setting options: Parameter Value range Default value Parameter reassign‐ ment in RUN Scope F_source_address 1 (display only) *a) 1 No Module F_destination_address 1 to 65534 Preset automatically *b) No Module F_monitoring time (ms) 10 ms to 65535 ms 2500 No Module • Enabled Enabled No All channels • Disabled • Enabled Disabled No All channels • Disabled • 0.4 ms 3.2 ms No All channels • 0.8 ms • 1.6 ms • 3.2 ms • 6.4 ms • 10.0 ms • 12.8 ms • 20 ms F-parameters • Cross-channel Channel activated Diagnostics: Wire break Input delay (ms) The value of the input delay depends on the time for the short-circuit test of the sensor and the discrepancy time. 20 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Parameters/address space 5.1 Parameters Parameter Value range Default value Parameter reassign‐ ment in RUN Scope Pulse stretching (s) • None None No All channels • 0.05 s • 0.1 s • 0.5 s • 1s • 2s • Enabled Disabled No All channels • Disabled Flutter monitoring Number of signal changes 2 to 31 5 No All channels Monitoring window (s) 0.5 to 100 s 2s No All channels Internal No All channels Enabled No All channels (If 0 s is set, the monitoring window is 0.5 s long.) Sensor supply Short-circuit test • Internal • External • Enabled • Disabled Time for short-circuit test (ms) 1 ms to 2 s (in 17 steps) 10 ms No All channels Startup time of sensor after short-circuit test (ms) 0.5 ms to 2 s (in 18 steps) 10 ms No All channels Diagnostics missing supply volt‐ age L+ Enabled (display only) Enabled No Module Behavior after channel fault • Passivate the entire module Passivate channel No Module • Passivate channel 1oo1 evaluation No Channel pair Each sensor has its own sensor supply No Channel pair Supply last valid val‐ ue No Channel pair Module parameters • Channel n, n+8 (channel pair) Sensor evaluation Sensor supply for 1oo2 Discrepancy behavior • 1oo1 evaluation • 1oo2 evaluation, equivalent • 1oo2 evaluation, non-equivalent • Each sensor has its own sensor supply • Both sensors on one sensor sup‐ ply • Supply value 0 • Supply last valid value Discrepancy time (ms) 10 ms to 30 s 30 ms No Channel pair Reintegration after discrepancy error • Test 0-Signal not necessary No Channel pair • Test 0-Signal necessary Test 0-Signal not necessary • Enabled Enabled No Channel • Disabled • Channel n Channel activated F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 21 Parameters/address space 5.1 Parameters Parameter Value range Default value Parameter reassign‐ ment in RUN Scope Diagnostics: Wire break • Enabled Disabled No Channel • Disabled • 0.4 ms 3.2 ms No Channel • 0.8 ms • 1.6 ms • 3.2 ms • 6.4 ms • 10.0 ms • 12.8 ms • 20 ms None No Channel Disabled No Channel Input delay (ms) The value of the input delay depends on the time for the short-circuit test of the sensor and the discrepancy time. Pulse stretching (s) • None • 0.05 s • 0.1 s • 0.5 s • 1s • 2s Flutter monitoring • Enabled • Disabled Number of signal changes 2 to 31 5 No Channel Monitoring window (s) 0.5 to 100 s 2s No Channel Internal No Channel Enabled No Channel (If 0 s is set, the monitoring window is 0.5 s long.) Sensor supply Short-circuit test • Internal • External • Enabled • Disabled Time for short-circuit test (ms) 1 ms to 2 s (in 17 steps) 10 ms No Channel Startup time of sensor after short-circuit test (ms) 0.5 ms to 2 s (in 18 steps) 10 ms No Channel • Use potential group of left mod‐ ule (dark terminal block) No Terminal block • Enable new potential group (light terminal block) Use potential group of left module (dark terminal block) • Potential group Potential group *a) The F_source_address is automatically preset with the value "1" in S7 F/FH Systems and cannot be changed in the properties of the I/O module. *b) The F_destination_address is automatically preset uniquely throughout the station. 22 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Parameters/address space 5.1 Parameters You can find more information on these parameters in the section "F-parameters (Page 24)". Parameters in the "Redundancy" tab For redundant digital input modules, define additional parameters in the "Additional parameters" section of the "Redundancy" tab. Parameter Value range Parameter reas‐ signment in RUN Scope 0 to 30 s No Redundant modules "Parameters" group Discrepancy time (ms) F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 23 Parameters/address space 5.2 Description of parameters 5.2 Description of parameters 5.2.1 F-parameters F_source_address Together, the F-source address "F_source_address" and the F-destination address "F_destination_address" form the PROFIsafe address. The PROFIsafe address is used for the unique identification of the F-I/O modules. The F-source address is a unique address of the fail-safe CPU for the entire network. In S7 F/FH systems, it is automatically preset with the value "1" and cannot be changed in the properties of the I/O module. F_destination_address Together, the F-destination address "F_destination_address" and the F-source address "F_source_address" form the PROFIsafe address. The PROFIsafe address is used for the unique identification of the F-I/O modules. Station-wide uniqueness: • The F-source address "F_source_address" of the F-CPU is unique station-wide. In S7 F/FH systems, it is automatically preset with the value "1". • The F-destination address of the F-I/O module is automatically unique station-wide. To prevent an incorrect parameter assignment, a station-wide unique F-destination address is automatically assigned when the F-I/O module is placed in HW Config. If you change F-destination address, the station-wide uniqueness of F-destination address is automatically checked. You must assign the F-destination address to the F-I/O module before you commission it. Note Requirement for type R1 system redundancy With type R1 system redundancy for distributed I/O, the left interface module must be plugged in so that a new F_destination_address can be assigned to the module. 24 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Parameters/address space 5.2 Description of parameters WARNING PROFIsafe addresses have to be unique for the station • Station-wide uniqueness: Fail-safe I/O modules of the ET 200SP HA are uniquely addressed station-wide by a combination of F-source address (PROFIsafe basic address of the assigned F-CPU) and Fdestination address. The F-system itself ensures that the F-destination addresses of all F-I/O modules within the assigned F-CPU are unique. • Cross-station uniqueness: To guarantee uniqueness across stations, you must verify that the PROFIsafe addresses ("F_source_address" + "F_destination_address") of the F-I/O modules are unique across stations. • Verification following a change: Because the F-source address "F_source_address" of the PROFIsafe address of the F-CPU is automatically set to "1", you can only change the preset address "F_destination_address" for F-I/O modules of the ET 200SP HA. Note that the PROFIsafe address of the F-I/O module must be unique across all stations! For Ethernet subnets and mixed configurations of PROFIBUS and Ethernet subnets, the following also applies: The combination of F-source address and F-destination address of all F-I/O modules only has to be unique throughout the Ethernet subnet including all lower-level PROFIBUS subnets, under the exclusion of cyclic PROFINET IO communication between Ethernet subnets. (FDIW-002) F_monitoring time (ms) With this parameter you set the monitoring time for safety-related communication between the F-CPU and F-I/O (PROFIsafe monitoring time) for safety operation. The parameter is assigned a default value, but you can change it. The configured F-monitoring time influences the response time of the system to a system error. For this reason, the selected time must be as short as possible, but still long enough to prevent timeouts when no error is occurring. 5.2.2 Cross-channel parameters Distinction between "Cross-channel parameters" / "Channel parameters": F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 25 Parameters/address space 5.2 Description of parameters Cross-channel parameters act on all identically named parameters of the channels of the module and thus allow a higher-level setting. Note Due to dependencies, the parameters of the channels can be reset to default values if crosschannel parameters are changed. Therefore, check the setting of the channel parameters after changing a cross-channel parameter. The function of the cross-channel parameters is identical to the parameters of the channels. • "Channel activated" • "Diagnostics: Wire break" • "Input delay (ms)" • "Pulse stretching (s)" • "Flutter monitoring" • "Number of signal changes" • "Monitoring window (s)" • "Sensor supply" • "Short-circuit test" • "Time for short-circuit test (ms)" • "Startup time of sensor after short-circuit test (ms)" You can find detailed information on this in section "Parameters of the channels (Page 29)". 5.2.3 Parameters of the module Diagnostics missing supply voltage L+ Enabling of the diagnostics for missing or insufficient supply voltage L+. By default, this parameter is "Activated", cannot be changed and is only used for display. Behavior after channel fault With this parameter you specify whether the entire F-module is passivated after channel faults or just the faulty channel(s): • "Passivate entire module" • "Passivate channel" 26 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Parameters/address space 5.2 Description of parameters 5.2.4 Parameters of the channel pairs Sensor evaluation You select the type of sensor evaluation with the "Sensor evaluation" parameter: • 1oo1 evaluation With 1oo1 evaluation one sensor is connected. The sensor occupies one input channel. • 1oo2 evaluation, equivalent/non-equivalent With 1oo2 evaluation equivalent/non-equivalent, two input channels are occupied by one of the following: – A two-channel, equivalent/non-equivalent sensor – Two single-channel sensors The input signals are compared internally for equivalence or non-equivalence. Note that in 1oo2 evaluation, two channels are grouped into a channel pair. The number of available process signals of the F-module is reduced accordingly. The evaluation result for the channel pair is available at the input of the channel with the low channel number (channel "n"). Dependencies: • If the "1oo2 evaluation, equivalent" or "1oo2 evaluation, non-equivalent" option is selected for the "Sensor evaluation" parameter, the "Input delay (ms)" of a channel must be less than the configured "Discrepancy time (ms)". Discrepancy analysis: If you are using a two-channel sensor or two single-channel sensors that measure the same process variable, the response of the sensors will be delayed relative to one another due to the limited precision of their arrangement, for example. The discrepancy analysis for equivalence/non-equivalence is used for fail-safe inputs to detect errors from the time sequence of two signals of the same functionality. The discrepancy analysis is started when different levels are detected for two associated input signals (when testing for non-equivalence: the same level). On expiration of a configurable time interval, i.e. the so-called discrepancy time, a check is made to determine whether the difference in the signal levels has disappeared (when testing for non-equivalence: the equivalence of the signal levels). If not, there is a discrepancy error. Sensor supply for 1oo2 You use this parameter to select the sensor supplies for 1oo2 evaluation: • Each sensor has its own sensor supply • Both sensors on one sensor supply In this setting, the sensor supply of the channel with the low channel number (channel "n") is used, for example, the sensor supply of channel "0" is used for channel pair 0/8. F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 27 Parameters/address space 5.2 Description of parameters Discrepancy behavior Requirement: You have configured the following: • "Sensor evaluation": "1oo2 evaluation, equivalent" or "1oo2 evaluation, non-equivalent" Function: For "Discrepancy behavior", you configure the value that is supplied to the safety program in the F-CPU during the discrepancy between the two affected input channels, i.e. while the discrepancy time is running. You configure the discrepancy behavior as follows: • "Supply last valid value" • "Supply 0 value" Option "Supply last valid value": The last valid value (old value) before the discrepancy occurred is supplied to the safety program in the F-CPU as soon as a discrepancy is detected between the signals of the two affected input channels. This value is supplied until the discrepancy disappears or the discrepancy time expires, and a discrepancy error is detected. The sensor-actuator response time is correspondingly extended by this time. This means that the discrepancy time of connected sensors with 1oo2 evaluation must be matched with short response times for fast responses. Accordingly, it makes no sense, for example, when connected sensors with a discrepancy time of 500 ms trigger a time-critical shutdown. In the worst-case scenario, the sensor-actuator response time is extended by an amount equal to the discrepancy time, which you can calculate in section "Response times": • For this reason, arrange the sensors in the process in such a way as to minimize discrepancy. • Then, select as short a discrepancy time as possible that also has a sufficient margin to prevent false triggering of discrepancy errors. Option "Supply 0 value": The value "0" is supplied to the safety program in the F-CPU as soon as a discrepancy between the signals of the two affected input channels is detected. If you have configured "Supply 0 value", the sensor-actuator response time is not affected by the discrepancy time. Discrepancy time (ms) Requirement: You have configured the following: • "Sensor evaluation": "1oo2 evaluation, equivalent" or "1oo2 evaluation, non-equivalent" In most cases, the discrepancy time is started but does not completely elapse because the signal differences even out after a short time. Select a sufficiently long discrepancy time so that in the error-free case the difference between the two signals always disappears before the discrepancy time expires (when testing for nonequivalence: the equivalence of the two signals). 28 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Parameters/address space 5.2 Description of parameters Function: You can specify the discrepancy time for each channel pair. Behavior while discrepancy time is running: While the configured discrepancy time is running inside the module, the affected input channels supply either the last valid value or "0" to the safety program in the F-CPU, depending on the configured discrepancy behavior. Behavior after expiration of the discrepancy time: If after expiration of the configured discrepancy time the input signals are still different (when testing for non-equivalence: input signals are still the same), e.g. due to a sensor wire break, a discrepancy error is detected and the diagnostics message "Discrepancy error" is generated along with information on the faulty channels. Reintegration after discrepancy error Requirement: You have configured the following: • "Sensor evaluation": "1oo2 evaluation, equivalent" or "1oo2 evaluation, non-equivalent" Function: You use this parameter to specify when a discrepancy error is regarded as corrected, thus enabling reintegration of the affected input channels. You have the following parameter assignment options: • "Test 0-Signal necessary" • "Test 0-Signal not necessary" Option "Test 0-Signal necessary": If you have configured "Test 0-Signal necessary", a discrepancy error is not regarded as corrected until a 0-signal is present again at both of the affected input channels. If you are using non-equivalent sensors, i.e. "Sensor evaluation" is set to "1oo2 evaluation, nonequivalent", the result of the channel pair must be "0" again. Option "Test 0-Signal not necessary": If you have configured "Test 0-Signal not necessary", a discrepancy error is regarded as corrected when a discrepancy is no longer present at both of the affected input channels. 5.2.5 Parameters of the channels Channel activated Specifies whether a channel is activated or deactivated. F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 29 Parameters/address space 5.2 Description of parameters Diagnostics: Wire break Enables the wire break test. The wire break test must be activated for wire break detection to take place. Input delay (ms) To suppress injected interference, you can set an input delay for a channel or channel pair. Interference pulses whose pulse time is less than the set input delay (in ms) are suppressed. Suppressed interference pulses are not visible in the process image input (PII). A long input delay suppresses longer interference pulses but results in a longer response time. Dependencies: • The values available for the input delay depend on the "Time for short-circuit test (ms)" of the configured sensor supply. • The value "Time for short-circuit test (ms)" must be more than twice as large as the configured "Input delay (ms)". • The "Input delay (ms)" of a channel must be less than the configured "Discrepancy time (ms)" if the "1oo2 evaluation, equivalent" or "1oo2 evaluation, non-equivalent" option is selected for the "Sensor evaluation" parameter in the respective channel pair. In 1oo2 evaluation, the input delay of the lower-order channel (channel n) also applies automatically to the higher-order channel (channel n+8). Note Due to physical properties, crosstalk of signals can occur on longer unshielded signal wires (see section "Electromagnetic compatibility" in system manual Distributed I/O System ET 200SP HA (https://support.industry.siemens.com/cs/ww/en/view/109761547)). Adjust the input delay or use shielded signal wires to avoid possible passivation of fail-safe digital inputs and shutdown of the sensor supply. Pulse stretching (s) Pulse stretching is a function for extending a digital input signal. A pulse on a digital input is extended to at least the configured length. If the input pulse is already longer than the configured length, the pulse is not changed. How the fail-safe input module works: The fail-safe input module only stretches pulses with the value "0". That is because the safety concept is based on existence of a safe state for all process variables. For digital F-I/O, this is the value "0". This applies to sensors and actuators. Impulses with the value "1" are ignored. With "1oo2" evaluation, the first pulse with value "0" triggers pulse stretching. After pulse stretching starts, further impulses with the value "0" are ignored. Principle: The following figure shows pulse stretching of the fail-safe input module. 30 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Parameters/address space 5.2 Description of parameters 3XOVHVWUHWFKLQJIRUSXOVHVZLWKWKHYDOXH Only pulses with the value "0" are stretched. Pulses with the value "1" are ignored. RRHYDOXDWLRQ 1 Process value 0 Process value with pulse stretching 1 Time "Pulse stretching (s)" 0 A B RRHYDOXDWLRQ 1 Channel "n" 0 1 Channel "n+8" 0 1 Process value without pulse stretching 0 Process value with pulse stretching 0 Time "Pulse stretching (s)" Time "Pulse stretching (s)" 1 A B C D Event "A": Pulse with the value "0" at channel "n" triggers pulse stretching up to time "B". Pulses with the value "0" on channel "n+8" are ignored between "A" and "B". Event "C": Pulse with the value "0" on channel "n+8" triggers pulse stretching up to time "D". Pulses with the value "0" on channel "n" are ignored between "C" and "D". Figure 5-1 Principle of pulse stretching F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 31 Parameters/address space 5.2 Description of parameters Note If you configure pulse stretching for an input channel, it also affects chatter monitoring enabled for this channel. The "pulse-stretched" signal is the input signal for chatter monitoring. This means you need to adapt the parameter settings of pulse stretching and chatter monitoring to each other. You can adapt the functions to your process by selecting the appropriate parameter values. Flutter monitoring Function: Flutter monitoring is a process control function for digital input signals. It detects and reports unusual signal sequences for the process, for example, too frequent input signal changes between "0" and "1", during 1oo1 evaluation. If signal characteristics like these occur, it is a sign that the sensors are faulty or that there are instabilities from a process engineering viewpoint. Recognizing unusual signal patterns: A configured monitoring window is available for each input channel. A monitoring window is started every time the input signal changes. If the input signal changes within a monitoring window more often than the configured "Number of signal changes", it is recognized as a flutter error. If no flutter error is detected within the monitoring window, the monitoring window is restarted at the next signal change. If a flutter error is detected, a diagnostics message is output. When the flutter error does not occur for three times the configured monitoring window time, the diagnostic is reset. Principle of flutter monitoring: The following figure shows the principle of flutter monitoring. 32 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Parameters/address space 5.2 Description of parameters Parameter "Number of signal changes" = 7 Time "Monitoring window (s)" = y 3 x "Monitoring window (s)" = 3y 8 signal changes detected Process value 8 signal changes detected 6 signal changes detected Diagnostics Diagnostics "Flutter error" Incoming => "Signal" Figure 5-2 Diagnostics "Flutter error" Outgoing => "Reset" Principle of flutter monitoring Number of signal changes Specifies the number of permissible signal changes within a monitoring window. A flutter error is signaled after the configured number is exceeded. Value range: 2 to 31 Monitoring window (s) Specifies the time for the monitoring window of the flutter monitoring. You have the option of setting times from 0.5 s to 100 s for the monitoring window. Sensor supply You use this parameter to select between the internal or external sensor supply. An internal sensor supply must be selected for use of the short-circuit test. Dependencies: • If the following conditions are fulfilled at the same time, then the "Sensor supply" parameter for channel "n+8" is set to "external" and cannot be edited. The setting of the sensor supply for channel "n" remains editable. – With the "Sensor evaluation" parameter, the option "1oo2 (2v2) evaluation, equivalent" or "1oo2 (2v2) evaluation, non-equivalent" is selected. – With the parameter "Sensor supply for 1oo2" the option "Both sensors on one sensor supply" is selected. F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 33 Parameters/address space 5.2 Description of parameters Short-circuit test Here, you enable the short-circuit detection for the channels of the F-module for which one of the internal sensor supplies is set. The short-circuit test only makes sense if an internal sensor supply is set. A short-circuit test is not possible for sensors with power supply, e.g. 3-/4-wire proximity switches. The short-circuit detection briefly switches off the sensor supply. The switch-off duration is the same as the configured "Time for short-circuit test (ms)". If a short-circuit is detected, the F-module triggers a diagnostic interrupt in the F-CPU and the input is passivated. The following short-circuits are detected: • Input shorted to L+ • Input shorted to a sensor supply of another channel • Sensor supply shorted to M Also detected with disabled short-circuit detection if the sensor supply is configured "internally". When a 1 signal is active at the input, the following short-circuits are also recognized: • Short circuit on an input with the input of another channel • Sensor supply shorted to sensor supply of another channel • Short circuit of a sensor supply to L+ If the short-circuit test is disabled, you must route your cables in a short-circuit-proof and crosscircuit-proof manner. Note During the execution time of the short-circuit test ("Time for short-circuit test (ms)" + "Startup time of sensor after short-circuit test"), the last valid value before the start of the short-circuit test is passed to the F-CPU. Activation of the short-circuit test thus affects the response time of the respective channel or channel pair. Time for short-circuit test (ms) When the short-circuit test is enabled, the corresponding sensor supply is switched off for the configured time. If the module does not detect a "0" signal at the input within the configured time, a diagnostics message is generated. 34 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Parameters/address space 5.2 Description of parameters Note the following for the parameter assignment: • If the channel is passivated, this can also be due to excessively high capacitance between the sensor supply and input. This consists of the capacitance per unit length of the cable and the capacitance of the employed sensor. If the connected capacitance is not discharged within the configured time, you must adjust the "Time for short-circuit test (ms)" parameter. • Dependencies: – The values available for the input delay depend on the "Time for short-circuit test (ms)" of the configured sensor supply. – The value "Time for short-circuit test (ms)" must be more than twice as large as the configured "Input delay (ms)". Startup time of sensor after short-circuit test (ms) Requirement: The short-circuit test is enabled. Function: In addition to the switch-off time "Time for short-circuit test (ms)", a startup time must also be specified for performing the short-circuit test. You use this parameter to notify the module how long the utilized sensor needs to start up after the sensor supply is switched on again. This prevents an undefined input state due to transient reactions in the sensor. Note the following for the parameter assignment: • This parameter must be greater than the transient recovery time of the employed sensor. • Because the configured time affects the response time of the module, we recommend that you set the time as short as possible but long enough for reliable transient recovery of your sensor. See also Cross-channel parameters (Page 25) 5.2.6 Parameters of the potential group Potential group Specifies whether the I/O module is located on a terminal block with supply voltage infeed Function: A potential group consists of a group of directly adjacent I/O modules within an ET 200SP HA station that are supplied via a common supply voltage. F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 35 Parameters/address space 5.2 Description of parameters A potential group begins with a light terminal block, via which the required supply voltage is fed to all I/O modules of the potential group. The light terminal block interrupts the self-assembling voltage buses to the left neighbor. All other I/O modules of this potential group are plugged into dark terminal blocks. I/O modules on dark terminal blocks take the potentials of self-assembling voltage rails from the left neighbor. A potential group ends with the dark terminal block, which follows a light terminal block or a server module in the station configuration. Further information on the configuration of the potential group can be found in system manual "Distributed I/O System ET 200SP HA (https://support.industry.siemens.com/cs/ww/en/view/ 109761547)". 5.2.7 Additional parameters on the "Redundancy" tab for redundant modules Introduction For redundant digital input modules, define additional parameters in the "Additional parameters" section of the "Redundancy" tab. Discrepancy time (ms) The parameter is displayed if redundancy is configured. The discrepancy time is the maximum permissible time in which the redundant input signals may differ. • If the discrepancy time = "0" is configured, the discrepancy analysis is disabled. • If a discrepancy time not equal to "0" is configured, a discrepancy analysis is performed. 36 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Parameters/address space 5.3 Address space 5.3 Address space Address assignment of the digital input module F-DI 16x24VDC HA The digital input module F-DI 16x24VDC HA occupies the following address areas in the F-CPU: Table 5-1 Address assignment in the F-CPU Assigned bytes in the F-CPU: In the input range In the output range IB x + 0 to x + 8 QB x + 0 to x + 4 x = module start address Address assignment of the user data and the value status of the digital input module F-DI 16x24VDC HA The user data occupies the following addresses in the F-CPU out of all the assigned addresses of the digital input module F-DI 16x24VDC HA: Table 5-2 Address assignment by user data Byte in the F-CPU Assigned bits in the F-CPU per F-module: 7 6 5 4 3 2 1 0 x+0 DI7 DI6 DI5 DI4 DI3 DI2 DI1 DI0 x+1 DI15 DI14 DI13 DI12 DI11 DI10 DI9 DI8 x+2 Value sta‐ tus for DI7 Value sta‐ tus for DI6 Value sta‐ tus for DI5 Value sta‐ tus for DI4 Value sta‐ tus for DI3 Value sta‐ tus for DI2 Value sta‐ tus for DI1 Value sta‐ tus for DI0 x+3 Value sta‐ tus for DI15 Value sta‐ tus for DI14 Value sta‐ tus for DI13 Value sta‐ tus for DI12 Value sta‐ tus for DI11 Value sta‐ tus for DI10 Value sta‐ tus for DI9 Value sta‐ tus for DI8 x = module start address Note • You may only access the addresses occupied by user data. • In S7 F/FH systems, the value status is automatically processed by the F-channel drivers. • With I/O redundancy, you only access the channels of the left I/O module. The input values of the corresponding channels of the redundant I/O module are automatically processed by the F channel drivers. • For 1oo2 sensor evaluation, the two channels are combined, e.g. channel 0 (input bit DI0) with channel 8 (input bit DI8). With 1oo2 evaluation of the sensors, you may only access the input bit of the lower channel number in the safety program, in this example channel 0. • The other address areas occupied by the F-modules are assigned for functions including safety-related communication between the F-modules and F-CPU in accordance with PROFIsafe. F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 37 Parameters/address space 5.3 Address space "Value status" bit For each input signal, the F-DI 16x24VDC HA module provides information on its validity, the "value status" (qualifier bit). The value status is stored in the process image of the inputs. In S7 F/FH Systems, you may only access the addresses (DIx) occupied by user data. The value status is automatically processed by the F-channel drivers. Additional information You can find additional information on address assignment as well as evaluation and processing of the value status in the programming and operating manual "SIMATIC Industrial Software S7 F/FH Systems - Configuring and Programming (https://support.industry.siemens.com/cs/ww/en/ view/109773062)". 38 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 6 Applications of the F-I/O module 6.1 Applications of the electronic module Selecting the application The diagram below supports you in selecting the application that suits your fail-safe requirements. In the following sections, you will learn how to wire the F-I/O module for each application, which specific parameters you need to set in STEP 7 and which errors are detected. Required Safety class? SIL3/Cat.3/PLd SIL3/Cat.3/PLe SIL3/Cat.4/PLe Applications 1 to 3 1 2 3 See case 1 See case 2 See cases 3.1 3.2 Figure 6-1 Selecting the application ‑ Digital input module F-DI 16x24VDC HA IO redundancy All application cases can also be set up with IO redundancy to increase availability. WARNING Achievable safety class The achievable safety class depends on the sensor quality and the proof-test interval according to the IEC standard 61508:2010. If the sensor quality is not as high as required by the required safety class, the sensor must be used redundantly, have a 2-channel connection and 2-channel evaluation. (FDIW-003) F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 39 Applications of the F-I/O module 6.1 Applications of the electronic module Conditions for achieving SIL/Cat./PL The table below lists the conditions which have to be met for achieving at least the corresponding safety requirements. Table 6-1 Conditions for achieving SIL/Cat./PL Application Sensor evaluation Sensor supply Achievable SIL/ Cat./PL 1 1oo1 Internal or external 3/3/d 2 1oo2 equivalent Internal, without short circuit test 3/3/e External 3.1 1oo2 equivalent Internal, with short circuit test 3.2 1oo2 non-equivalent External/internal, with short circuit test 3/4/e Note You can operate the various inputs of an F-I/O module simultaneously in SIL3/Cat.3/PLd and in SIL3/Cat.3 or Cat.4/PLe. You only have to interconnect the inputs and assign parameters as described in the following sections. Sensor requirements You can find information on the requirements placed on sensors for F-I/O modules in safetyrelated use in section "Requirements placed on sensors for fail-safe modules (Page 51)". 40 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Applications of the F-I/O module 6.2 Application 1: Safety mode SIL3/Cat.3/PLd 6.2 Application 1: Safety mode SIL3/Cat.3/PLd Wiring You perform the wiring on the appropriate terminal block. You can find additional information on this in section "Pin assignment of the F-DI 16x24VDC HA I/O module (Page 15)". Sensor supply The sensor supply can be powered internally or externally. Wiring diagram – connecting one sensor via one channel One 1-channel sensor (1oo1 evaluation) is connected per process signal. A sensor supply of the module is assigned to each input. 89Q ',Q Figure 6-2 One sensor connected via one channel, internal sensor supply You can also supply the sensor by means of an external sensor supply. 89Q / ',Q Figure 6-3 One sensor connected via one channel, external sensor supply WARNING Requirement for sensor To achieve SIL3/Cat.3/PLd using this wiring, you must use a qualified sensor. (FDIW-004) F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 41 Applications of the F-I/O module 6.2 Application 1: Safety mode SIL3/Cat.3/PLd Parameter assignment Set the following parameters for the corresponding channel: Table 6-2 Configuration for internal/external sensor supply Parameter Channel with internal sensor sup‐ Channel with external sensor sup‐ ply ply Sensor evaluation 1oo1 evaluation Short-circuit test • Disabled • Enabled Sensor supply Disabled Internal External Fault detection The following table shows the fault detection depending on the sensor supply and the configuration of the short-circuit test: Table 6-3 Fault detection with internal/external sensor supply Fault Fault detection Internal sensor supply, and short-circuit test ena‐ bled Internal sensor supply, and short-circuit test disabled External sensor sup‐ ply Yes* No No Input shorted to the associated sensor supply No No No Shorted to L+ at DIn Yes No No Shorted to M at DIn Yes* Yes* No — — — Yes** No — Yes Yes — Input shorted to other channels or other sensor supplies (short circuit with other channels is detected only if they use a differ‐ ent sensor supply) Discrepancy error Shorted to L+ at UVn Shorted to M at UVn or defect *) Fault detection only if signals are corrupted. That is, the read signal differs from the sensor signal. If there is no signal corruption with respect to the sensor signal, fault detection is not possible and is not required from a safety standpoint. **) If the input has a "1" signal. WARNING Short-circuit-proof cable routing If the short-circuit test is not activated or the sensor supply for digital inputs is set to "External", you must lay the cable to protect against short-circuits. (FDIW-005) 42 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Applications of the F-I/O module 6.3 Application 2: Safety mode SIL3/Cat.3/PLe 6.3 Application 2: Safety mode SIL3/Cat.3/PLe Assigning inputs to each other Digital input module F-DI 16x24VDC HA has 16 fail-safe inputs DI0 to DI15 (SIL3). You can combine two of these inputs in pairs to form one input. The following inputs can be combined in pairs: • DI0 and DI8 • DI1 and DI9 • DI2 and DI10 • DI3 and DI11 • DI4 and DI12 • DI5 and DI13 • DI6 and DI14 • DI7 and DI15 The process signals are read from channels DI0, DI1, DI2, DI3, DI4, DI5, DI6 and DI7. Note You can mix a 1oo1 evaluation and 1oo2 evaluation on an F-digital input module. You must connect and configure the inputs according to the fail-safe requirements (SIL3/Cat.3/PLd and SIL3/Cat.3 or Cat.4/PLe). Wiring You perform the wiring on the appropriate terminal block. You can find additional information on this in section "Pin assignment of the F-DI 16x24VDC HA I/O module (Page 15)". Sensor supply The sensor supply can be powered internally or externally. Wiring diagram – connecting a two-channel sensor equivalent For each process signal, a two-channel sensor is connected equivalent to two inputs of the Fdigital input module (1oo2 evaluation). 89Q ',Q 89Q ',Q F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 43 Applications of the F-I/O module 6.3 Application 2: Safety mode SIL3/Cat.3/PLe Figure 6-4 One two-channel sensor connected via two channels, internal sensor supply You can also supply the sensor by means of an external sensor supply. 89Q / / ',Q 89Q ',Q Figure 6-5 One two-channel sensor connected via two channels, external sensor supply Wiring diagram – connecting two single-channel sensors via two channels For each process signal, two single-channel sensors, which acquire the same process value, are connected to two inputs of the F-digital input module (1oo2 evaluation). 89Q ',Q 89Q ',Q Figure 6-6 Two single-channel sensors connected via two channels, internal sensor supply You can also supply the sensors by means of an external sensor supply. 89Q / ',Q 89Q / ',Q Figure 6-7 Two single-channel sensors connected via two channels, external sensor supply WARNING Requirement for sensor To achieve SIL3/Cat.3/PLe using this wiring, you must use a qualified sensor. (FDIW-006) 44 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Applications of the F-I/O module 6.3 Application 2: Safety mode SIL3/Cat.3/PLe Parameter assignment Assign the following parameters for the corresponding channel: Table 6-4 Configuration for internal/external sensor supply Parameter Channel with internal sensor supply Sensor evaluation 1oo2 evaluation, equivalent Short circuit test • Disabled • Enabled Sensor supply Channel with external sensor supply Disabled Internal External Fault detection The following table presents fault detection according to the sensor supply and the parameter assignment for the short circuit test: Table 6-5 Fault detection with internal/external sensor supply Fault Fault detection Internal sensor supply, and short-circuit test disabled Shorted within the channel pair External sensor supply No No Shorted to other channels or other sensor supplies Yes* Yes Shorted to L+ at DIn Yes* Yes* Shorted to M at DIn Yes* Yes* Discrepancy error Yes Yes Shorted to L+ at UVn No No Shorted to M at UVn or defect Yes — *) Fault detection only if signals are corrupted. That is, the read signal differs from the sensor signal (discrepancy error). If there is no signal corruption with respect to the sensor signal, fault detection is not possible and is not required from a safety standpoint. F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 45 Applications of the F-I/O module 6.4 Application 3: Safety mode SIL3/Cat.4/PLe 6.4 Application 3: Safety mode SIL3/Cat.4/PLe Assigning inputs to each other Digital input module F-DI 16x24VDC HA has 16 fail-safe inputs DI0 to DI15 (SIL3). You can combine two of these inputs in pairs to form one input. The following inputs can be combined in pairs: • DI0 and DI8 • DI1 and DI9 • DI2 and DI10 • DI3 and DI11 • DI4 and DI12 • DI5 and DI13 • DI6 and DI14 • DI7 and DI15 The process signals are read from channels DI0,DI1,DI2, DI3, DI4, DI5, DI6 and DI7. Wiring You perform the wiring on the appropriate terminal block. You can find additional information on this in section "Pin assignment of the F-DI 16x24VDC HA I/O module (Page 15)". Sensor supply The sensor must be supplied internally by at least one channel for application 3.1. The sensor can be supplied internally or externally for application 3.2. Requirements for applications in machine protection with Cat.4 Both conditions must be met for applications in machine protection with Cat.4: • The wiring between sensors and automation system and between automation system and actuators must be designed to state-of-the-art engineering and standards to prevent short circuits. • The sensors are wired as shown in the sections Application 3.1 (SIL3/Cat.4/PLe) (Page 47) or Application 3.2 (SIL3/Cat.4/PLe) (Page 48). You only need to detect one short circuit because two faults are required to generate it. This means both signal cables in short circuit have an isolation fault. A multiple short circuit analysis is not required. Procedures for locating all short circuits are also permitted if single short circuits are not located. One of the two conditions must be met for this purpose: • Short circuits may not corrupt the read signals compared to the sensor signals. • Short circuits cause a corruption of the read signals compared to sensor signals in the direction that ensures safety. 46 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Applications of the F-I/O module 6.4 Application 3: Safety mode SIL3/Cat.4/PLe 6.4.1 Application 3.1 (SIL3/Cat.4/PLe) Wiring diagram – connecting a two-channel sensor via two channels For each process signal, a two-channel sensor is connected to two inputs of the F-I/O module (1oo2 evaluation). Supply the sensors from two different sensor supplies. 89Q ',Q 89Q ',Q Figure 6-8 One two-channel sensor connected via two channels, internal sensor supply You can also connect two single-channel sensors via two channels. In this case, the same process variable is acquired with two mechanically separate sensors. 89Q ',Q 89Q ',Q Figure 6-9 Two single-channel sensors connected via two channels, internal sensor supply WARNING Requirement for sensors To achieve SIL3/Cat.4/PLe using this wiring, you must use a suitably qualified sensor. (FDIW-007) Parameter assignment Assign the following parameters for the corresponding channel: Table 6-6 Configuration for evaluation of the sensors, short-circuit test, sensor supply Parameter Sensor evaluation 1oo2 evaluation, equivalent Short circuit test Enabled Sensor supply Internal (at least for one channel internal) F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 47 Applications of the F-I/O module 6.4 Application 3: Safety mode SIL3/Cat.4/PLe Fault detection The following table presents fault detection according to the sensor supply and the parameter assignment for the short circuit test: Table 6-7 Fault detection depending on the sensor supply and short-circuit test Fault Fault detection Shorted within the channel pair, to other chan‐ nels or other sensor supplies Yes* Shorted to L+ at DIn Yes* / Yes (on channel whose short-circuit test is ena‐ bled) Shorted to M at DIn Yes* Discrepancy error Yes Shorted to L+ at UVn Shorted to M at UVn or defect Yes** Yes, with "Internal" sensor supply *) Fault detection only if signals are corrupted. That is, the read signal differs from the sensor signal (discrepancy error). If there is no signal corruption with respect to the sensor signal, fault detection is not possible and is not required from a safety standpoint. **) If the input has a "1" signal and the short-circuit test is enabled. 6.4.2 Application 3.2 (SIL3/Cat.4/PLe) Wiring diagram – connecting a non-equivalent sensor For each process signal, an antivalent sensor is connected to two inputs of the F-I/O module (1oo2 evaluation, antivalent). 89Q ',Q 89Q ',Q Figure 6-10 Non-equivalent sensor connected, internal sensor supply You can also supply the sensor by means of an external sensor supply. 89Q / ',Q 89Q ',Q Figure 6-11 48 Non-equivalent sensor connected, external sensor supply F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Applications of the F-I/O module 6.4 Application 3: Safety mode SIL3/Cat.4/PLe WARNING Requirement for sensors To achieve SIL3/Cat.4/PLe using this wiring, you must use a suitably qualified sensor. (FDIW-008) Wiring diagram – connecting two single-channel sensors non-equivalent For each process signal, 2 single-channel sensors are connected antivalent to two inputs of the F-I/O module (1oo2 evaluation). 89Q ',Q 89Q ',Q Figure 6-12 Two single-channel sensors connected non-equivalent, internal sensor supply You can also supply the sensors by means of an external sensor supply. 89Q / ',Q 89Q / ',Q Figure 6-13 Two single-channel sensors connected non-equivalent, external sensor supply WARNING Requirement for sensors To achieve SIL3/Cat.4/PLe using this wiring, you must use a suitably qualified sensor. (FDIW-009) F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 49 Applications of the F-I/O module 6.4 Application 3: Safety mode SIL3/Cat.4/PLe Parameter assignment Assign the following parameters for the corresponding channel: Table 6-8 Configuration for evaluation of the sensors, short-circuit test, sensor supply Parameter Sensor evaluation 1oo2 evaluation, non-equivalent Short circuit test • Disabled • Enabled • Internal • External Sensor supply Fault detection The following table presents fault detection according to the sensor supply and the parameter assignment for the short circuit test: Table 6-9 Fault detection depending on the sensor supply and short-circuit test Fault Fault detection Shorted within the channel pair, to other channels or other sensor supplies Yes Shorted to L+ at DIn Yes* / Yes (on channel whose short-circuit test is enabled) Shorted to M at DIn Yes* Discrepancy error Yes Shorted to L+ at UVn Shorted to M at UVn or defect Yes** Yes, with "Internal" sensor supply *) Fault detection only if signals are corrupted. That is, the read signal differs from the sensor signal (discrepancy error). If there is no signal corruption with respect to the sensor signal, fault detection is not possible and is not required from a safety standpoint. **) If the input has a "1" signal and the short-circuit test is enabled. 50 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Applications of the F-I/O module 6.5 Requirements placed on sensors for fail-safe modules 6.5 Requirements placed on sensors for fail-safe modules General sensor requirements For safety-related use of sensors, you must observe the following important warning: WARNING Sensor requirements Note that a significant responsibility for safety of instrumentation lies with the sensors. Also keep in mind that sensors generally do not have proof-test intervals of 20 years according to IEC 61508:2010 without a significant loss of safety. The probability of dangerous faults or the rate of dangerous faults of a safety function must adhere to an SIL-dependent upper limit. You will find the values achieved by the F-modules in their technical specifications. To achieve the respective safety class, correspondingly qualified sensors are required. (FDIW-010) Additional sensor requirements The following table shows which safety class can be implemented with a given sensor configuration. Safety class? Sensor configuration SIL3/Cat. 3/PLe • With a single-channel connected sensor, if this sensor itself is capable of SIL3/ Cat. 3/PLe. • With a two-channel connected sensor that is not capable of SIL3/Cat. 3/PLe. • With a two-channel connected sensor. SIL3/Cat. 4/PLe WARNING Safe response of the safety program when the sensor has "0" status In the case of fail-safe input modules, the value "0" is passed to the F‑CPU after detection of faults. Therefore you must ensure that sensors are implemented in such a way that the safety program reacts safely to a "0" state of the sensors. Example: The safety program of the EMERGENCY OFF sensor must ensure the opening action on the affected actuator with "0" state (EMERGENCY OFF pushbutton pressed). (FDIW-011) F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 51 Applications of the F-I/O module 6.5 Requirements placed on sensors for fail-safe modules Requirements for the duration of the sensor signals WARNING Sensor signal requirements Observe the following requirements for the sensor signals: • To guarantee the correct acquisition of the sensor signals by F-modules with inputs, you must ensure that the sensor signals have a certain minimum duration. • So that pulses are reliably detected, the time between two signal changes (pulse duration) must be greater than the PROFIsafe monitoring time. (FDIW-012) Reliable acquisition by F-modules with inputs The minimum duration of the sensor signals for F-modules with inputs is dependent on the configured input delay, the parameters of the short-circuit test of the sensor supplies and the configured discrepancy behavior for 1oo2 (2v2) evaluation. The duration of the sensor signal must be longer than the maximum response time of the configured application case. For information on calculating the maximum response time, refer to section "Response times" of the respective F-module. The minimum durations yield the maximum permissible switching frequency of the sensor signals. Technical specifications of the sensors Also refer to the device manuals of the F-modules for information on the technical specifications for selecting the sensors. 52 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Applications of the F-I/O module 6.6 IO redundancy 6.6 IO redundancy Overview of IO redundancy For the configuration of IO redundancy, you insert 2 F-DI 16×24VDC HA I/O modules of the same type next to each other on a redundant block. You can find additional information on the possible terminal blocks in section "Terminal blocks for the I/O module (Page 13)". This terminal block connects the respective process signals of the two modules to a common process terminal. • The wiring work is lower compared to connecting separate I/O modules, because the interconnection of the process signals is integrated into the system. • The redundant signal processing of the sensors at module level increases the availability of the system. Note IO redundancy is briefly described below. You can find detailed information on this in system manual ET 200SP HA Distributed I/O System. Configuration and use For configuration and use of F-DI 16×24VDC HA I/O modules in IO redundancy, the following requirements apply: Selection of hardware: • Redundantly used I/O modules must be identical. This means they must have the same article number, the same firmware version, and a compatible hardware version. Installation: • I/O modules of the same type are plugged in pairs next to each other in the same redundant terminal block (type "TB45R-P32"). IO redundancy: • The master module must always be configured at an even slot, the slave module at the following odd slot. • The two redundant I/O modules operate simultaneously and independently. Both modules generate diagnostics, interrupts, messages, process values, etc. Configuration: • Assign the redundancy parameters for the I/O module. • The settings you make for an I/O module always apply to the module pair. Response to failure If an I/O module or a channel fails, the following applies to one of the two I/O modules: • Error-free inputs remain available in the system. F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 53 Applications of the F-I/O module 6.6 IO redundancy 54 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Displays, alarms and messages 7.1 7 Status and fault displays of the F-DI 16x24VDC HA I/O module LED displays The following figure shows the LED displays of the I/O module: HA F-DI 16x24VDC DIAG MT F-DI 1 3 5 7 9 11 13 15 DI.0 + DI.2 + DI.4 + DI.6 + DI.8 + DI.10 + DI.12 + DI.14 + 17 19 21 23 25 27 29 31 UV0 UV2 UV4 UV6 UV8 UV10 UV12 UV14 DI.1+ 2 DI.3 + 4 DI.5 6 DI.7 + 8 DI.9 + 10 DI.11+ 12 DI.13 + 14 DI.15 + 16 + UV UV1 18 UV3 20 UV5 22 UV7 24 UV9 26 UV10 28 UV13 30 UV15 32 1P1 L+ 24VDC M 1P2 2P1 L+ 24VDC M 2P2 MAX. 10 A .0 F0 .2 F2 .4 F4 .6 F6 .8 F8 .10 F10 .12 F12 .14 F14 .1 F1 .3 F3 .5 F5 .7 F7 .9 F9 .11 F11 .13 F13 .15 F15 PWR X 2 3 4 CC01 6DL1136-6BA00-0PH1 ① ② ③ ④ ⑤ DIAG LED (green/red) MT LED (yellow) Channel status LED (green) Channel fault LED (red) PWR LED (green) Figure 7-1 LED displays Meaning of the LED displays The tables below explain the meaning of the status and error displays. Measures for dealing with diagnostics messages can be found in the section "Diagnostic messages (Page 60)". WARNING LED of a single input is not safety-related The LEDs "DIAG", "Channel status" and "Channel fault" of an input are not safety-related and must therefore not be evaluated for safety-related activities. (FDIW-015) F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 55 Displays, alarms and messages 7.1 Status and fault displays of the F-DI 16x24VDC HA I/O module DIAG LED Table 7-1 Diagnostics display of the DIAG LED DIAG LED Meaning The supply voltage of the ET 200SP HA is switched off. Off Module is not configured. Flashes Module is configured, a diagnostics message is not pending. On Module is configured, at least one diagnostics message is pending. Flashes / Module is waiting for user acknowledgment Alternately flashing MT LED Table 7-2 MT LED Status display of the LED MT Meaning No maintenance required. Off Maintenance is required, i.e. at least one maintenance event has occurred. On LEDs DIAG/MT Table 7-3 DIAG LED Meaning of the combination MT LED Flashes on Meaning The release button of the I/O module was pressed for at least 3 s and the I/O module was thereby disconnected from the load. In addition to this status display, the I/O module sends a corre‐ sponding diagnostics message. LEDs for channel status/channel fault Regardless of the parameter assignment, the green "Channel status" LED shows the signal level at the input terminal. 56 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Displays, alarms and messages 7.1 Status and fault displays of the F-DI 16x24VDC HA I/O module The red LED "Channel fault" is lit when channel diagnostics for an enabled channel are pending. Table 7-4 Meaning of the combination Channel status LED Channel fault LED Off Off Meaning • Module is switched off • Process signal = 0 and no channel diagnostics pending Process signal = 1 and no channel diagnostics pending On Off Channel enabled and channel diagnostics pending Off On LEDs Channel status/DIAG/Channel fault Table 7-5 Channel status Off Flashing Meaning of the combination DIAG Flash‐ ing Channel fault All On Flash‐ ing Off Meaning • The PROFIsafe address is different from the configured PRO‐ FIsafe address. • Module fault/defect • Fault on all channels Identification of the module for assignment of the PROFIsafe ad‐ dress PWR LED Table 7-6 PWR LED Status display of the PWR LED Meaning Supply voltage P (L+) missing. Off Supply voltage P (L+) available. On F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 57 Displays, alarms and messages 7.2 Interrupts 7.2 Interrupts Introduction Fail-safe digital input module F-DI 16x24VDC HA supports diagnostics interrupts and maintenance messages. Diagnostic interrupts The F-module generates a diagnostic interrupt for each diagnostics message described in section "Diagnostic messages (Page 60)". The following table provides an overview of the diagnostics interrupts of the F-module. The diagnostics interrupts are assigned either to one channel or to the entire F-module. Table 7-7 Diagnostic interrupts of F-DI 16x24VDC HA Diagnostic interrupt Error code Effective range of diagnostic in‐ terrupt Configurable Overtemperature 5H F-module No Wire break 6H Channel Yes Parameter error 10H F-module No No supply voltage 11H F-module No Communication error 13H F-module No Channel/component temporarily unavailable 1FH F-module No Mismatch of safety destination address (F_Dest_Add) 40H F-module No Safety destination address not valid (F_Dest_Add) 41H F-module No Safety source address not valid (F_Source_Add) 42H F-module No Safety watchdog time value is 0 ms (F_WD_Time) 43H F-module No Parameter F_SIL exceeds SIL from specific device application 44H F-module No Parameter F_CRC_Length does not match the generated values 45H F-module No Version of F-parameter set incorrect 46H F-module No CRC1 fault 47H F-module No Device-specific diagnostics information, see manual 48H F-module No Save iParameter watchdog time exceeded 49H F-module No Restore iParameter watchdog time exceeded 4AH F-module No Inconsistent iParameters (iParCRC error) 4BH F-module No F_Block_ID not supported 4CH F-module No Transfer error: Inconsistent data (CRC error) 4DH F-module No Transfer error: Timeout (monitoring time 1 or 2 expired) 4EH F-module No Module is defective 100H F-module No Watchdog tripped 103H F-module No Invalid/inconsistent firmware present 11BH F-module No Redundancy partner has different hardware/firmware version 120H F-module No IO redundancy warning 121H F-module No 58 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Displays, alarms and messages 7.2 Interrupts Diagnostic interrupt Error code Effective range of diagnostic in‐ terrupt Configurable Shutdown with key operation 122H F-module No Diagnostic queue overflow 13EH F-module No Invalid terminal block 152H F-module No Carrier module or memory in carrier module defective 154H F-module No Terminal block (TB) or memory in terminal block defective 155H F-module No Discrepancy error, channel status 0/0 300H Channel No Discrepancy error, channel status 0/1 301H Channel No Discrepancy error, channel status 1/0 302H Channel No Discrepancy error, channel status 1/1 303H Channel No Overload or internal sensor supply short-circuit to ground 307H Channel No F-address memory not accessible 30DH F-module No No valid F-address available 30EH F-module No Sensor signal flutters 310H Channel Yes Frequency too high 311H Channel No Undertemperature 312H F-module No Discrepancy error 314H Channel No Internal discrepancy error 315H Channel No Input shorted to P 31CH Channel Yes Auxiliary voltage too high 321H F-module No Auxiliary voltage too low 322H F-module No Maintenance messages The I/O module generates a maintenance message for the following events: • Redundancy partner has different hardware/firmware • IO redundancy warning • Retentive memory in carrier module defective • Retentive memory in the terminal block defective You can find additional information on this in section "Maintenance messages (Page 66)". F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 59 Displays, alarms and messages 7.3 Diagnostic messages 7.3 Diagnostic messages Overview The F-module generates a diagnostic interrupt for each diagnostics message described in the following table. In addition, the DIAG LED on the I/O module flashes red or the MT LED lights up yellow. In addition, channel-specific diagnostics are indicated by the corresponding channel fault/status LEDs. The diagnostics messages can be read from the diagnostics buffer of the CPU, for example. Module faults are indicated as diagnostics (module status). After fault correction, you must reintegrate the F-module in the safety program. You can find additional information on passivation and reintegration of F-I/O in the programming and operating manual "SIMATIC Industrial Software S7 F/FH Systems Configuring and Programming (https://support.industry.siemens.com/cs/ww/en/view/ 109773062)". Table 7-8 Diagnostics messages of F-DI 16×24VDC HA Diagnostics message Error code Meaning Remedy Overtemperature 5H An excessively high temperature was measured in the F-module. Operate the F-module in the specified temperature range. (See section "Tech‐ nical specifications (Page 67)") Once the fault has been eliminated, the F-module must be removed and inser‐ ted or the power switched OFF and ON Wire break 6H Possible causes: • Establish a cable connection. • The cable between the module and the sensor is broken. The channel is not wired (open). • Disable wire break detection for the channel in the configuration. • Eliminate the short-circuit. • There is a short-circuit between channels with different signals. See the note below *1) regarding this message. Parameter error 10H Parameter assignment errors include: • The F-module cannot use the pa‐ rameters (unknown, invalid combi‐ nation, etc.). • The F-module parameters have not been configured. Correct the parameter assignment. No supply voltage 11H Supply voltage missing or too low Communication error 13H A communication error has occurred. The solution depends on the cause. The possible causes depend on the module type used. You can find information on this in the manual for the F-module. 60 • Check the supply voltage P on the terminal block • Check the terminal block type F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Displays, alarms and messages 7.3 Diagnostic messages Diagnostics message Error code Meaning Remedy Channel/component temporari‐ 1FH ly unavailable Possible causes: Perform the firmware update again. Mismatch of safety destination address (F_Dest_Add) 40H The F-module has detected a different F- Check the parameter assignment of the destination address. PROFIsafe driver and the address setting of the F-module. Safety destination address not valid (F_Dest_Add) 41H The F-module has detected an invalid F- Check the parameter assignment of the destination address. PROFIsafe driver. Safety source address not valid (F_Source_Add) 42H The F-module has detected an invalid Fsource address. Safety watchdog time value is 0 ms (F_WD_Time) 43H The F-module has detected an invalid watchdog time. Parameter F_SIL exceeds SIL from specific device application 44H The F-module has detected a discrepan‐ cy between the SIL setting of the com‐ munication and the application. Parameter F_CRC_Length does 45H not match the generated values The F-module has detected a discrepan‐ cy in the CRC length. Version of F-parameter set in‐ correct 46H The F-module has detected an invalid version of the F-parameters. CRC1 fault 47H The F-module has detected inconsis‐ tent F-parameters. Device-specific diagnostics in‐ formation, see manual 48H The F-module has detected inconsis‐ tent F-parameters. • Error in firmware update Save iParameter watchdog time 49H exceeded iPar server does not respond to "Save" request. Check configuration / parameter assign‐ ment of the iPar server. Restore iParameter watchdog time exceeded 4AH iPar server does not respond to "Re‐ store" request. Check configuration / parameter assign‐ ment of the iPar server. Inconsistent iParameters (iParCRC error) 4BH The F-module has detected inconsis‐ tent iParameters. Check the parameter assignment. F_Block_ID not supported 4CH The F-module has detected an incorrect Check the parameter assignment of the block ID. PROFIsafe driver. Transfer error: Inconsistent da‐ ta (CRC error) 4DH The F-module has detected a CRC error. Transfer error: Timeout (moni‐ toring time 1 or 2 expired) • Possible causes: 4EH F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC • The communication between F-CPU • and F-module is disturbed. • Electromagnetic interference is too high. • An error has occurred in the sign-oflife monitoring. Check the communication connec‐ tion between F-module and F-CPU. Eliminate the electromagnetic inter‐ ference. The F-module has detected a timeout. • Check the parameter assignment. Possible causes: • Ensure that communication is func‐ tioning. • The F-monitoring time is set incor‐ rectly. • There is a bus fault. 61 Displays, alarms and messages 7.3 Diagnostic messages Diagnostics message Error code Meaning Remedy Module is defective 100H Possible causes: • Eliminate the interference. The mod‐ ule must then be pulled and plug‐ ged, or the power switched OFF and ON • Replace the F-module. • Eliminate the interference. The mod‐ ule must then be pulled and plug‐ ged, or the power switched OFF and ON Watchdog tripped Invalid/inconsistent firmware present 103H 11BH • Impermissibly high electromagnet‐ ic interference is present. • The F-module is defective. Possible causes: • Impermissibly high electromagnet‐ ic interference is present. • The F-module has detected an inter‐ • nal error and responded to it in a safety-related manner. The firmware is incomplete and/or firm‐ • ware added to the F-module is incom‐ patible. This leads to errors or function‐ al limitations when operating the F• module. If the F-module cannot be put back into operation, consider replacing it. Perform a firmware update of the Fmodule and watch out for any error messages. Use only firmware versions released for this F-module. Shutdown on button activation 122H The release button of the I/O module was pressed for at least 3 s and the I/O module was thereby disconnected from the load. Diagnostics memory overflow 13EH Overflow of the diagnostics memory. Correct the cause of the diagnostic Not all pending diagnostics information memory overflow. could be sent. This fault can lead to dis‐ abling of the F-module until the supply voltage is switched off/on. Invalid terminal block 152H The terminal block cannot be used with the current F-module. Replace the terminal block. Carrier module or memory in carrier module defective 154H An error of the carrier module or of the memory module on the carrier module was detected during operation. Replace carrier module Terminal block (TB) or memory in terminal block defective 155H An error of the terminal block or the Replace carrier module memory chip on the terminal block was detected during operation. 62 The enable button is pressed to pull the I/O module during operation and to be able to replace it, for example. Perform the desired action. F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Displays, alarms and messages 7.3 Diagnostic messages Diagnostics message Error code Meaning Remedy Discrepancy error, channel sta‐ tus 0/0 300H Possible causes: • Check the process signal. • The process signal is faulty. Discrepancy error, channel sta‐ tus 0/1 301H • Replace the sensor. • The sensor is defective. • Discrepancy error, channel sta‐ tus 1/0 302H • The configured discrepancy time is too low. Check the parameter assignment of the discrepancy time. • Check the process wiring. Discrepancy error, channel sta‐ tus 1/1 303H Possible causes: • Eliminate the overload. • The internal sensor supply is shortcircuited to ground. • Eliminate the short circuit in the process wiring. • Impermissibly high electromagnet‐ ic interference is present. • Check the "Sensor supply" parame‐ ter. See the note below *1) regarding this message. • Eliminate/reduce the electromag‐ netic interference. No valid PROFIsafe address is stored in the retentivity memory. • Assign the PROFIsafe address during initial commissioning or when delib‐ erately changing parameters. • Check the consistency between the nominal and actual configuration. Overload or internal sensor sup‐ 307H ply short-circuit to ground F-address memory not accessi‐ ble 30DH • There is a short-circuit between the cable of an "unconnected sensor" and the sensor supply cable. • Wire break in the line of a "connec‐ ted sensor" or the sensor supply ca‐ ble • An error occurred during the dis‐ crepancy check. Possible causes: • Initial commissioning • Deliberate parameter change of the PROFIsafe address • Deviation between set and actual configuration of the plant No valid F-address available 30EH F_source_address and F_destina‐ tion_address parameters invalid Sensor signal flutters 310H Too many signal changes have occurred • within the time configured with the "Monitoring window" parameter. • • The "Monitoring window" setting is too high. • • The "Number of signal changes" pa‐ • rameter setting is too low. F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Check F_source_address and F_destina‐ tion_address parameters • A momentary interruption/short cir‐ • cuit of the sensor cable (loose con‐ tact) is present. • Impermissibly high electromagnet‐ ic interference is present. • The sensor/switch bounces. • The sensor is defective. Check the "Monitoring window" pa‐ rameter. Check the "Number of signal changes" parameter. Check the process wiring. Eliminate/reduce the electromag‐ netic interference. Replace the sensor. 63 Displays, alarms and messages 7.3 Diagnostic messages Diagnostics message Error code Meaning Remedy Frequency too high 311H The maximum switching frequency of the F-module has been exceeded. Reduce the switching frequency of the sensor. Undertemperature 312H The minimum permissible temperature limit has been violated. Operate the F-module in the specified temperature range. (See section "Tech‐ nical specifications (Page 67)") Discrepancy error 314H The 1oo2 discrepancy time set for op‐ eration has been exceeded. Check the discrepancy time, the sensors and their wiring. Possible causes: Internal discrepancy error Input shorted to P 315H 31CH • Incorrect parameter assignment • Wire break of the supply cable of the sensor An error occurred during the plausibility • check of the input signal between the processors. You must correct the error • within 100 hours. • Possible causes: • The input signal is disturbed, For ex‐ ample, by impermissibly high elec‐ tromagnetic interference. • A high-frequency input signal is present. for example, due to mutual interference of sensors or because the signal is above the sampling fre‐ quency of the input signal. • There is a brief interruption / transi‐ ent short-circuit of the sensor line (loose contact). • The sensor/switch bounces. Use shielded cables to reduce influ‐ ences on EMC Reduce the input frequency Check the wiring of the sensor. Possible causes: • Check the wiring. • The input signal is short-circuited with P. • Check the configured test time and the process wiring. • There is a short-circuit in the inter‐ nal sensor supply with P. • Replace the sensor. • There is a short circuit of two sensor supplies. • The capacitance of the connected sensor for the configured test time is too high. • The sensor is defective. Auxiliary voltage too high 321H The supply voltage is too high. Check the supply voltage. Auxiliary voltage too low 322H The supply voltage is too low. Check the supply voltage. 64 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Displays, alarms and messages 7.3 Diagnostic messages Note Note *1) for the messages "Overload or internal sensor supply short-circuit to ground" (307H) and "Wire break" (6H) With incoming diagnostics message "Overload or internal sensor supply short-circuit to ground", a wire break (incoming/going) may also be signaled. The wire break signal (6H) can be ignored in this case. Supply voltage outside the nominal range If the supply voltage P is outside the specified value range, the DIAG LED flashes and the module is passivated. After subsequent voltage recovery (level must be within the specified value range for at least 1 minute (see section "Technical specifications (Page 67)": Voltages, currents, potentials), the DIAG LED stops flashing. The module remains passivated and waits for user acknowledgment. Behavior in case of cross circuit/short circuit to the sensor supply With configured internal sensor supply and deactivated short-circuit test, M short-circuits to the sensor supplies are detected. Channels for which the relevant sensor supply is configured will be passivated. Short-circuits from ground to the sensor supply are detected for a configured internal sensor supply and activated short-circuit test. Channels for which the relevant sensor supply is configured will be passivated. Special features for fault detection The detection of some faults (e.g. short-circuits, discrepancy errors) depends on the application, the wiring, the configuration of the short-circuit test and the configuration of the sensor supply. You can find the corresponding tables for fault detection for the applications in section "Applications of the F-I/O module (Page 39)". General information on diagnostics You can find additional information on diagnostics that pertains to all F-modules (e.g. readout of diagnostic functions, passivation of channels) in the programming and operating manual "SIMATIC Industrial Software S7 F/FH Systems - Configuring and Programming (https:// support.industry.siemens.com/cs/ww/en/view/109773062)". F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 65 Displays, alarms and messages 7.4 Maintenance messages 7.4 Maintenance messages Overview A maintenance event is generated every time a maintenance requirement is determined. The MT LED lights up on the module. Maintenance messages do not have a direct influence on the functions of the module or digital inputs. Table 7-9 Maintenance messages of F-DI 16×24VDC HA Maintenance message Error code Assign‐ Meaning / Cause ment Remedy Redundancy partner has different hardware/firm‐ ware version 120H Module The redundantly configured I/O modules are not compatible. Check the hardware version and firmware version of the modules and replace modules or perform a firmware update. IO redundancy warning 121H Module Unable to correctly communi‐ cate with the partner module • Check/replace right module • Check/replace left module • Check/replace terminal block See also system manual ET 200SP HA Distrib‐ uted I/O System, section "Communication er‐ rors", "I/O redundancy warning" (Mainte‐ nance event: Error code 121H)" Carrier module or memo‐ 154H ry in carrier module de‐ fective Module A fault of the carrier module or of the memory module on the carrier module was detected during operation. Replace carrier module Terminal block (TB) or memory in terminal block defective Module A fault of the terminal block or the memory chip on the termi‐ nal block was detected during operation. Replace carrier module 66 155H F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Technical specifications 8 Technical specifications of F-DI 16x24VDC HA Note Power supply The supply and input voltages of the ET 200SP HA system must always be generated with voltage/current supplies with protection by electrical separation (SELV/PELV according to IEC/UL 61010-2-201) with a nominal value of 24 V DC ±20%. Note Bridging of supply failures For compliance with IEC 61131-2, EN 298 and the NAMUR Recommendation NE 21, use only power supplies (230 V AC --> 24 V DC) with bridging of supply failures of at least 20 ms. You can find up-to-date information on PS components on the Internet (http:// mall.automation.siemens.com). F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 67 Technical specifications Article number 6DL1136-6BA00-0PH1 General information Firmware version V1.0.1 • Yes FW update possible Usable terminal block TB type H1 and M1 Color code for module-specific color identifica‐ tion plate CC01 Product function • I&M data Yes; I&M0 to I&M3 Engineering with • PCS 7 configurable/integrated from version V9.0 SP3 Operating mode • DI Yes Redundancy • Redundancy capability Yes; With TB type M1 Supply voltage Rated value (DC) 24 V permissible range, lower limit (DC) 19.2 V permissible range, upper limit (DC) 28.8 V Reverse polarity protection Yes Input current Current consumption (rated value) 80 mA Current consumption, max. 150 mA Encoder supply Number of outputs 16 24 V encoder supply • 24 V Yes; Min. L+ (-1 V) • Short-circuit protection Yes; electronic (response threshold 0.7 A to 1.5 A; for IO redundancy up to 3 A). Ensure sufficient ca‐ ble cross-section to attain the response threshold. Depending on the cable cross-section used, there may be constraints regarding the usable length of cable • Output current per channel, max. 0.5 A • Output current per module, max. 8A Power Power available from the backplane bus 90 mW Power loss Power loss, typ. 3.2 W; All channels equipped with internal encoder supply and switch contacts, at rated voltage and ambient temperature Address area Address space per module • 68 Inputs 9 byte F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Technical specifications Article number • Outputs 6DL1136-6BA00-0PH1 5 byte Hardware configuration Automatic encoding Yes Digital inputs Number of digital inputs 16 Digital inputs, parameterizable Yes Source/sink input Yes; P-reading Input characteristic curve in accordance with IEC 61131, type 1 Yes Input characteristic curve in accordance with IEC 61131, type 2 No Input characteristic curve in accordance with IEC 61131, type 3 No Pulse extension Yes • off, 50 ms, 100 ms, 200 ms, 500 ms, 1 s, 2 s Length Time stamping Yes; Resolution 10 ms Signal change flutter Yes Flutter observation window Yes Input voltage • Rated value (DC) 24 V • for signal "0" -30 to +5 V • for signal "1" +15 to +30 V Input current • for signal "1", typ. 2.5 mA Input delay (for rated value of input voltage) for standard inputs – parameterizable Yes Cable length • shielded, max. 1 000 m • unshielded, max. 600 m Encoder Connectable encoders • 2-wire sensor Yes – permissible quiescent current (2-wire sensor), max. 1.5 mA Interrupts/diagnostics/status information Diagnostics function Yes Alarms • Diagnostic alarm Yes • Maintenance interrupt Yes Diagnostic messages • Diagnostic information readable Yes • Monitoring the supply voltage Yes; Module-wise F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 69 Technical specifications Article number 6DL1136-6BA00-0PH1 – parameterizable Yes • Monitoring of encoder power supply Yes; channel by channel • Wire-break Yes; channel by channel, optional protective circuit for preventing wire-break diagnostics in the case of simple encoder contacts: 18 kOhm to 30 kOhm, typical 26 kOhm • Short-circuit to M Yes; Encoder supply to M, channel by channel Diagnostics indication LED • MAINT LED Yes; Yellow LED • Monitoring of the supply voltage (PWR-LED) Yes; green PWR LED • Channel status display Yes; green LED • for channel diagnostics Yes; red LED • for module diagnostics Yes; green/red LED Potential separation Potential separation channels No • between the channels • between the channels and backplane bus Yes between the channels and the power supply of the electronics No • Isolation Isolation tested with 1 500 V DC/1 min, type test Standards, approvals, certificates Highest safety class achievable in safety mode • Performance level according to ISO 13849-1 Up to PLe • Category according to ISO 13849-1 Cat. 4 • SIL acc. to IEC 61508 Up to SIL 3 Probability of failure (for service life of 20 years and repair time of 100 hours) – Low demand mode: PFDavg in accord‐ ance with SIL3 < 3.00E-05 – High demand/continuous mode: PFH in accordance with SIL3 < 2.00E-09 1/h Ambient conditions Ambient temperature during operation • horizontal installation, min. -40 °C • horizontal installation, max. 70 °C • vertical installation, min. -40 °C • vertical installation, max. 60 °C Dimensions Width 22.5 mm Height 115 mm Depth 138 mm Weights Weight, approx. 70 210 g F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Technical specifications Derating curve • The following figures show the load current derating of the internal sensor supply in horizontal and vertical mounting position. The underlying scenario provides for wiring of the inputs with a maximum value of 30V as defined in IEC 61131-2 for Type 1 sensors. 7RWDOFXUUHQWRI HQFRGHUVXSSO\>$@ Total current I [A] Horizontal mounting position (28.8/30V) $PELHQWWHPSHUDWXUH>R&@ Figure 8-1 Load current derating of the sensor supply in horizontal mounting position (scenario according to IEC 61131-2, Type 1) 7RWDOFXUUHQWRI HQFRGHUVXSSO\>$@ Detailed description Total current I [A] Horizontal mounting position (28.8/30V) $PELHQWWHPSHUDWXUH> &@ R Figure 8-2 Enlarged section of the load current derating of the sensor supply in horizontal mounting position (scenario according to IEC 61131-2, Type 1) F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 71 Technical specifications 7RWDOFXUUHQWRI HQFRGHUVXSSO\>$@ Total current I [A] Vertical mounting position (28.8/30V) $PELHQWWHPSHUDWXUH> &@ R Figure 8-3 Load current derating of the sensor supply in vertical mounting position (scenario according to IEC 61131-2, Type 1) • The following figures show the load current derating of the internal sensor supply in horizontal and vertical mounting position. The underlying scenario provides for wiring of the inputs with a typical value of 24V. 7RWDOFXUUHQWRI HQFRGHUVXSSO\>$@ Total current I [A] Horizontal mounting position (24/24V) $PELHQWWHPSHUDWXUH> &@ R Figure 8-4 72 Load current derating of the sensor supply in horizontal mounting position (typical scenario) F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Technical specifications 7RWDOFXUUHQWRI HQFRGHUVXSSO\>$@ Total current I [A] Vertical mounting position (24/24V) $PELHQWWHPSHUDWXUH>R&@ Figure 8-5 Load current derating of the sensor supply in vertical mounting position (typical scenario) Load current when using up to 12 channels • Horizontal mounting position: Up to 70 °C when using the internal sensor supplies (Total current of the outputs 1.5 A) • Vertical mounting position: Up to 60 °C when using the internal sensor supplies (Total current of the outputs 1 A) Cycle time The cycle time describes the time during which signals from the inputs are recorded and processed. The cycle time of the I/O module is approx. 4 ms. F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 73 Technical specifications 74 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Response times A Introduction The response times of digital input module F-DI 16x24VDC HA are found below. The response times of the digital input module go into the calculation of the F-system response time. Definition of response time for fail-safe digital inputs The response time represents the interval between a signal change at the digital input and reliable availability of the safety frame on the backplane bus. Times required for the calculation • Max. cycle time: Tcycle = 6 ms • Max. acknowledgment time (Device Acknowledgement Time): TDAT = 12 ms The maximum response time when a fault is present (One Fault Delay Time, OFDT) corresponds to the maximum response time under fault-free conditions (Worst Case Delay Time, WCDT). Maximum response time under fault-free conditions (Worst Case Delay Time, WCDT), with 1oo1 evaluation • The following formula applies to a sensor supply without short-circuit test: t <= 2 * Tcycle + Input delay • The following formula applies to a sensor supply with short-circuit test: t <= 2 * Tcycle + Input delay + T1 + T2 T1 T2 Time for short-circuit test Startup time of the sensor after the short-circuit test Maximum response time under fault-free conditions (Worst Case Delay Time, WCDT), with 1oo2 evaluation • The following formula applies to a sensor supply without short-circuit test: t <= 2 * Tcycle + Input delay + Discrepancy time*) • The following formula applies to a sensor supply with short-circuit test: t <= 2 * Tcycle + 2 * Input delay + max. (T1p + T2p, T1s + T2s) + Discrepancy time*) *) Not applicable for behavior at discrepancy "provide value 0". T1p T2p Test time for sensor supply of sensor 1 Startup time of sensors after the short-circuit test (sensor 1) F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 75 Response times T1s T2s Test time for sensor supply of sensor 2 Startup time of sensors after the short-circuit test (sensor 2) Maximum response time to external short-circuits t <= 2 * Tcycle + 2 * (n * 10 * Tcycle) + 2 * Total [x=0…15](T1x + T2x) T1x T2x n x Time for sensor test Startup time of the sensor after the short-circuit test Number of sensor supplies with enabled short-circuit test Sensor supply Maximum response time to discrepancy error with 1oo2 evaluation t <= 2 * Tcycle + 2 * Input delay + Discrepancy time + max. (T1p + T2p, T1s + T2s) T1p T2p T1s T2s 76 Test time for sensor supply of sensor 1 Startup time of sensors after the short-circuit test (sensor 1) Test time for sensor supply of sensor 2 Startup time of sensors after the short-circuit test (sensor 2) F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC Index Output disable switch, 11 C Channel fault LED, 55 Channel parameters, 20 Channel status LED, 55 Conventions, 7 P Parameter, 19 Pin assignment, 15 PWR LED, 57 D R DIAG LED, 56 Diagnostic interrupt, 58 Documentation Range of validity, 7 Redundant I/O, 53 S Schematic circuit diagram, 17 F F-DI 16x24VDC HA Accessories, 11 Channel parameters, 20 Functions, 10 Module parameters, 20 Parameters, 19 Pin assignment, 15 Properties, 10 Schematic circuit diagram, 17 T Terminal block, 13 V Value status, 38 I IO redundancy, 53 L LED displays, 55 M Maintenance message, 59 Module parameters, 20 MT LED, 56 O Operational safety Safety aspects, 8 Security concepts and communication, 8 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC 77 Index 78 F-DI 16x24VDC HA Equipment Manual, 01/2021, A5E45647528-AC