Emergency Stop Button and Gray Stop Button

The device is available with a red-yellow emergency stop button as well as with a gray stop button, see also chapter 1 "System Presentation" on page 5.

The emergeny stop button or the stop button is dual circuit wired and the con‐

tacts are realized as NC contacts.

Devices with gray stop button Optionally, the IndraControl VCH 08.1 device is also available with a grey stop button instead with a red-yellow emergency stop button. In practical terms, the gray stop button has the same functionality as the red-yellow emergency stop button. By means of its coloring, the gray stop button is to prevent the operator from using the emergency stop button when the hand-held terminal is discon‐

nected. The gray stop button complies with all of the mechanical aspects of EN ISO 13850 and merely differs in color.

The IndraControl VAC 30.2 connection module is equipped with an automatic stop circuit jumpering. This feature allows the operator the connection or dis‐

connection of the Hand-held Terminal IndraControl VCH 08.1 via the connec‐

tion module IndraControl VAC 30.2 without causing an unintended stopping of the plant.

Shutdown of the plant due to connecting a In‐

draControl VCH 08.1 with pressed stop button.

NOTICE

Before commissioning the IndraControl VCH 08.1 do observe that the stop but‐

ton is not pressed.

Functionality of the stop circuit jumpering

Fig.7-5: Stop circuit jumpering

If the Hand-held Terminal IndraControl VCH 08.1 is not plugged in, the contacts K1.1 and K1.2 of relay K1 in the IndraControl VAC 30.2 connection module keep the stop circuits 1 and 2 of the control closed. The stop circuits are active;

the control is ready for operation.

If the 17-pin connector of the IndraControl VCH 08.1 is screwed on the Indra‐

Control VAC 30.2 connection module, NC contacts ST1.1 and ST1.2 are switched in the stop circuits via leading contacts. The IndraControl VCH 08.1 is still without voltage supply and the stop button has no effect.

If the 17-pin connector is completely screwed on the connection module, relay K1 switches and supplies the IndraControl VCH 08.1 with voltage via NO con‐

tact K1.3. Simultaneously, by opening contacts K1.1 and K1.2 the stop circuit jumpering is deactivated. The stop circuits are active, the control is ready for operation, and the stop button is integrated in the stop circuit.

The VAC 30.2 connection module must be permanently supplied with voltage (24 V) via pin 1 X1.1 or pin 1 X1.2. To ensure that the stop button is integrated, a voltage monitoring must be provided at this point. The connected hand-held terminal can be supplied via pin 3 X1.1 or pin 3 X1.2 with 24 V, and so the hand-held terminal can be switched on and switched off as desired.

The time course of the connection procedure is illustrated in fig. 7-6 "Time course when connecting the IndraControl VCH08.1 stop circuit" on page 71.

Fig.7-6: Time course when connecting the IndraControl VCH08.1 stop circuit Devices with red-yellow button The red-yellow emergency stop button of the IndraControl VCH 08.1 device

meets the requirements of the EN ISO 13850. It must be designed as an emer‐

gency stop of category 0 or category 1 (see EN 60204-1 chapter 9.2.5.4.2) on the basis of the risk assessment for the machine. The connection of the positive-break contacts to an appropriate monitoring system must meet the category (in accordance with EN ISO 13849-1) which is defined by means of the risk as‐

sessment (in accordance with EN ISO 14121-1) of the machine.

The IndraControl VAC 31.1 is designed for the connection of a hand-held ter‐

minal with red-yellow emergency stop button. The both channels of the emer‐

gency stop button are directly looped in the safety circuit. In order to operate the plant without connected hand-held terminal, the VAC 31.1 is equipped with a short-circuit connector. If the IndraControl VCH 08.1 hand-held terminal should be disconnected from the plant, the plant must be lead to a safe state;

and after the hand-held terminal is diconnected from the plant, the short-circuit connector must be screwed on the IndraControl VAC 31.1 connection module.

Then the plant can be put into operation again. If the IndraControl VCH 08.1 hand-held terminal should be switchd on again, also the plant must be in a safe state, before the short-circuit connector can be removed and the hand-held terminal can be connected to the plant.

Shutdown of the plant due to connecting an IndraControl VCH 08.1 with pressed emergen‐

cy stop button.

NOTICE

Before commissioning the IndraControl VCH 08.1 do observe that the emer‐

gency stop button is not pressed.

Fig.7-7: Connection diagram, connection module VAC 31.1

Non-functioning emergency stop devices can have lethal consequences!

WARNING

Red-yellow emergency stop buttons must function in all operation modes of a machine or a plant at any time.

Hand-held terminals with red-yellow emergency stop button which are not con‐

nected to a machine, must be stored in a place where they cannot be seen by the operator in order not to confuse operational devices with non-operational devices.

● Unlocking an emergency stop facility must not result in uncontrolled start-up of machines or plant.

● The emergency stop button does not replace other safety devices.

● The emergency stop button on the handheld terminal does not replace the emergency stop button to be mounted directly on the machine.

● Some mechanical errors in the emergency stop button and in the stop button can be recognized at operation only.

Test the function of the emergency stop button the device had been ex‐

posed to mechanical shock (e.g. it had been fallen on the ground).

Additionally, the emergency stop button must be tested cyclically (every 6 months) by activating the emergency stop button.

● For further information on the emergency stop button and stop button, do observe also chapter 4 "Technical Data" on page 27.

7.3 Enabling Button

7.3.1 General Information

The following chapters contain more detailed information on the enabling but‐

ton:

● chapter 7.3.2 "Enabling Function" on page 73

● chapter 7.3.3 "Functioning" on page 74

● chapter 7.3.4 "Enabling" on page 74

● chapter 7.3.5 "Panic" on page 75

● chapter 7.3.6 "Foreseeable Misuse of the Enabling Switch" on page 76

The pin assingment and a connection example of the enabling device is con‐

tained in chapter 7.4.6 "X2.2: Enabling Button" on page 82.

7.3.2 Enabling Function

The IndraControl VCH 08.1 is equipped with two enabling buttons, one at the left and one at the right side of the device. This allows a left- and right-hand operation of the enabling button. Both enabling buttons are switched in parallel and effect the common safety circuits in the connecting cable in the same way.

Therefore only one of the both enabling buttons must be activated.

The enabling button consists of a 3-stage operating element and an separated evaluation electronics. An essential feature are the continuous 2-circuit design, beginning from the actuating elements up to the connection terminals. Different technologies and circuits are used for the evaluation circuits. Due to the elec‐

tronic switching contacts, their service life does not depend on the load provided the nominal values of the load (ohmic, inductive and capacitive) are not excee‐

ded.

The switching elements of the enabling button are reverse voltage protected.

The outputs of both circuits are protected against short circuits and overload:

Circuit Function

Circuit 1 Thermal protective circuit

Circuit 2 Fold back line

Fig.7-8: Short-circuit and overload protection

7.3.3 Functioning

The actuating element consists of two symmetrically arranged slides. The po‐

sition of these slides is detected by electrical switches and transmitted to the evaluation electronics. The enabling button can have three different switch po‐

sitions, see the following table:

Switch position Function Enabling button Switching contact

1 Home position Is not pressed Off

(opened)

2 Enabling Is pressed On

(closed)

3 Panic Is pressed strong Off

(opened) Fig.7-9: Switch positions of the enabling button

Non-functioning enabling device can have le‐

thal consequences!

WARNING

The enabling switch must be tested cyclically (every 6 months) by pressing the panic position. Watch the machine performing the panic function after pressing the enabling switch. Fig.7-10: Contact travel diagram for enabling

7.3.5 Panic

The pushing of the actuating elements into the panic position is evaluated in a way that the enabling position is skipped when the actuating elements are re‐

leased.

home position enabling panic home position

Enabling

Fig.7-11: Contact travel diagram for panic

At the IndraControl VCH 08.1 devices, the enabling buttons always feature 2 circuits.

To meet the safety category 3 PL d in accordance with EN ISO 13849-1, the enabling switch must be realized with 2 circuits and these circuits have to be monitored on short circuits.

The safety category 3 PL d means, that 1 failure must not lead to the loss of the safety function, and whenever possible, the single failure is detected.

The connection example in fig. 7-22 "Connection example with PILZ PNOZ s6.1 monitoring device" on page 84 shows how the safety category 3 PL d can be fulfilled by the enabling switch up to the output terminal K4 within the connection module. Observe that the entire concept of the machine must be laid out ac‐

cording to the above mentioned principles.

The monitoring of the simultaneity by the monitoring device is necessary, be‐

cause otherwise maybe a failure culmination would not be recognised and this would cause the safety loss.

Example:

Example

If one channel of the enabling button switches to the enabled state as a result of a failure and after some time the second channel also switches to the enabled state as a result of an failure, then no de-energisation by the enabling button would be possible. Further the EN 60204-1 specifies that the enabling button is to be connected to a category 0 stop or a category 1 stop, i.e. the energy must be switched off.

For calculating the PL for the "enabling" safety function the PL and B10d values of all involved components have to be included. For details for calculating the PL for the whole safety function see EN ISO 13849-1 (chapter 6.3, appendix H and appendix I).

7.3.6 Foreseeable Misuse of the Enabling Switch

Impermissible fixing of the enabling switch in the enabling position by using auxiliary means is considered as foreseeable misuse. Such foreseeable misuse is to be prevented.

The following measures causing the stop of the machine in the manual mode are recommended:

● Inquiry of the enabling button when turning on the machine/plant and in‐

quiry of the enabling button when changing the operation mode from automatic to manual (The enabling switch must not be in the enabling position.)

● The enabling button must be released within a defined period and pushed into the enabling position again. The length of the period must be defined according to the requirements of the activity.

Non-functioning enabling device can have le‐

thal consequences!

WARNING

● The enabling switch is only suitable as safety function if the person acti‐

vating the enabling button recognizes the dangerous situation in time so that he or she can immediately take the necessary measures to avoid such situations.

● As additional measure reduced speed of the movement can be necessary.

The allowed speed must be determined by means of a risk assessment.

● The enabling button must not be used as only component for initiating dangerous states. For initiating dangerous states a second, intentional start command is necessary (button on the hand-held terminal).

● Only the person who operates the enabling button is allowed to work in the dangerous area.

● For further information regarding the enabling button, do observe also chapter 4 "Technical Data" on page 27.