Safety relays Protecting the user and the equipment.

Safety relays Protecting the user and the equipment

Overview PAGE Overview Crouzet 4 Custom Sensors & Technologies 5 The basics Definition of safety relays 6 Range 7 Safety standards Introduction 8 Selection guide Machine safety 10 Relevelling control 10 Applications Examples 12 Technical data Emergency stop & Safety guard monitoring with 1 channel (screw terminals) Emergency stop & Safety guard monitoring with 1 channel (spring terminals) Emergency stop & Safety guard monitoring with 2 channels (screw terminals) Emergency stop & Safety guard monitoring with 2 channels (spring terminals) 14 14 17 17 To order: Customer Service Control Technologies Tel: +44 (0)1256 318900 info@crouzet.co.uk 2

PAGE Technical data (continued) Timed contacts (1.0 10 s) 21 Extensions for safety relays 24 Zero speed monitoring 27 Two-hand control with 2 O outputs 31 Two-hand control with 3 O outputs + 1 C output 31 Power supply for 24 VDC safety relays 34 Relevelling zone control for lifts with 2 O outputs 36 Relevelling zone control for lifts with 2 O outputs + 1 C output 36 Safety standards Highlights 40 Glossary Terminology 44 To order: Customer Service Control Technologies Tel: +44 (0)1256 318900 info@crouzet.co.uk 3

Overview Crouzet Automation & Control Widely recognised for over 50 years as the specialist in electromechanical, electronic technology and software engineering, Crouzet's experience in time management, physical and mechanical values has resulted in an extensive automation components offer that includes logic controllers, timers, control relays, counters, ratemeters, machine safety equipment, and temperature controllers. Simple to use, Crouzet products are easy to program and install. With operations around the globe, Crouzet is constantly monitoring its customers' needs. Its sales teams, technicians and designers combine all their skills to adapt products to customer specifications, both in terms of the application and cost. Crouzet also ensures that its products are manufactured in compliance with quality and environmental standards (factories certified ISO 9001, 14001 and OHSAS 18001, eco-design). With its industrial and logistic flexibility, Crouzet is able to deliver products, whether small-scale or mass production items, within the best possible timescale. In this new catalogue dedicated to safety relays, Crouzet Control Technologies presents: A new range of 8 safety relay part numbers for "machinery" and "lift" applications. This new range includes versions with fixed or removable screw terminals and versions with removable spring terminals, thus simplifying installation wiring and maintenance. In addition to this catalogue, technical data sheets for each product are available as free downloads on the website. 4

Custom Sensors & Technologies is a specialist in sensing, control and motion products Through its brands, BEI Kimco, BEI Sensors, BEI PSSC, Crouzet, Crydom, Kavlico, ewall and Systron Donner Inertial, CST offers customizable, reliable and efficient components for mission-critical systems in Aerospace & Defence, Transportation, Energy & Infrastructures, Commercial & Industrial OEMs, Medical, Food and Beverage and Building Equipment markets. Focused on premium value offers and committed to excellence, CST, with 4700 employees worldwide and sales of $660M US in 2011, is the dependable and adaptable partner for the most demanding customers. The Crouzet team worldwide Production Sales subsidiaries 5

The basics A safety relay How can it be defined in simple terms? A safety relay is an automation component which is part of a machine's safety system, thus contributing to the safety of people around it. It is essential for compliance with machine safety standards (E ISO 13849-1 and IEC/E 62061). A safety relay To execute which actions? Protecting, Controlling The safety relay protects people. It controls a user's action to ensure that this does not lead to anything that may damage his health, either voluntarily or accidentally. Monitoring, Sensing When a machine may be dangerous for the user, it is necessary to monitor all hazardous operations, and detect the slightest anomaly. Actuating It is then necessary to actuate safety contacts to stop cutting, rotating, burning items, etc which could be hazardous for the user. Protecting Controlling Monitoring Sensing Actuating In addition to this catalogue, technical data sheets for each product are available as free downloads on the website. 6

Crouzet safety relays A relevelling range and a machine safety range Power supply LED Relay output LED Power supply LED Relay output LED Error indication LED KA3-YS KSW3-JS Crouzet safety relays Their features: A range covering machine applications: emergency stop and mobile guard monitoring, emergency stop with timed contact, two-hand control, zero speed monitoring, expansion module and power supply accessory. A relevelling control relay for the lift market. A safety component with one or two channels. Prohibition of machine starting if a problem becomes apparent through self-checking of the integrity of the control devices. A range conforming to: - Performance Level (PL) e and category 4 according to E ISO 13849-1 - Limit value SIL 3 (SIL CL) according to IEC/E 62061 7

Safety Standards - Introdu 1. Preface It is the aim of every business to improve operational results by increasing productivity. This can be achieved, for example, by increasing automation of workstations or faster cycle times. Research into accidents has proved that this increases the risk potential on workstations, which has ultimately led to increased safety awareness, expressed through national and international standards. Besides the human aspect, safety improvement measures can also be justified from the business point of view. Assuming that there is no absolute safety even when using technology, there will always remain an element of risk that cannot be excluded. The diagram below illustrates the relationship between increased safety and the costs of risk financing. It can be seen from the business management aspect that the residual risk is determined by the minimum total cost of increasing safety. For manufacturers and users of machinery and installations, it is not always easy to implement circuitry that meets the abundance of regulations. To support users in implementing safety-related circuits, Crouzet offers switching devices which can be used to create modular solutions tailored to the specific application with respect to functionality and cost. These include: Emergency stop circuits Safety guards Two-hand controls Zero-speed monitors These modules wired ready for connection comply with the applicable national and international standards and regulations and are tested by the bodies responsible for their enforcement if required. Please note that Crouzet has already taken account of the new standards that have recently come into force. 100% Total costs after measures which increase safety have been implemented 2. Standards and directives Savings The creation of the European Union s domestic market has required the elimination of technical trade barriers by standardization of approval conditions. Risk financing costs Cost of damage after measures which increase safety have been implemented Cost of measufres which increase safety Minimum costs Residual risk costs The Council of the European Union has enacted the Machinery Directive 2006/42/CE, replacing the 98/37/CE directive, in which occupational safety is given high priority. However, the Machinery Directive only defines global safety standards. Individual application of the safety requirements is recommended in standards that have been worked out on the basis of international standards, i.e. by the European Committee for Electrotechnical Standardization (CEELEC). Successive standards set out the increasing requirements with respect to complexity and especially quality. 0 Increase in safety 100% Residual risk 2.1 Scope Fig. 1 Financing costs of a risk after implementation of safety-improving measures as a function of the level of safety aimed for. Source: Eberhard Franck, Risikobewertung in der Technik, Labor 2000-1991 Any decision on what residual risk can be allowed always requires a risk assessment with an evaluation of potential hazards. This depends on the type and severity of damage as well as the probability of occurrence. If the minimum requirements cannot be met, the necessary measures must be defined together with specific health and safety at work authorities. Within the scope of product liability, the level of liability for consequential losses from faulty products has been significantly extended. In future, this liability can no longer be limited by a contractually restricted warranty in the general conditions of sale. Moreover, conformity with the requirements of the European Machinery Directive is a prerequisite for the sale of machinery on the European market. The scope of the European Machinery Directive 2006/42/CE is no longer restricted to industrial machines, as was previously the case, but now covers almost all machines used in the fields of industry, small business and the private sector. Machines covered by this directive include: Single machines Complex plants (interlinked machines) Interchangeable equipment for changing the functionality of a machine Equipment with drive system and movable devices Mobile machinery (e.g. forklift trucks) Machinery for lifting loads (cranes, lifting devices) Machinery for lifting or transporting people, etc. Machinery and equipment covered by other European Directives, such as military equipment are excluded. 8

ction 2.2 The main standards Machinery Directive 2006/42/CE in remplacement of the 98/37/CE since 29/12/2009 Type E Title Type A: E ISO 12100 Safety of machinery (former E 292) Basic safety standards E ISO 14121 Principles for risk assessment (former E 1050) Type B: E 60204-1 Electrical equipment of machinery Safety generic standards E ISO 13857 Safety of machinery - Safety distances to prevent hazard zones being reached by upper and lower limbs (former E 294 and E 811) Type B1: Safety generic standards for specific machines characteristics Type B2: Safety generic standards for specific devices Type C: Safety generic standards for machines ranges E ISO 13849-1 Safety-related parts of control systems (former E 954-1) IEC/E 62061 Safety of machinery - Functional safety of safety-related electrical, electronic and programmable electronic control systems E ISO 13850 Emergency stop - Principles of design (former E 418) E 574 Two-hand control devices (see also ISO 13851) E 61496 Electro-sensitive protective equipment E 1088 Interlocking devices associated with guards E 692 Mechanical brakes E 693 Hydraulic presses E 201 Injection moulding machines E 12415 Small numerically controlled turning machines and turning centres E 12417 Machining centres E 13218 Stationary grinding machines E 12478 Large numerically controlled turning machines and turning centres 2.3 ew standards E 61508 Functional safety of safety-related electrical, electronic and programmable electrical systems. Standard E 61508 considers technical safety-related functions over the whole life cycle of a product/system from design to decommissioning (probabilistic aspects). It is a basic safety standard from which industry-specific or sector-specific standards are derived, including E 61511 for process industry, E 61513 for nuclear power plants and IEC/E 62061 for the mechanical engineering industry. IEC/E 62061 Safety of machinery Functional safety of safety-related electrical, electronic and programmable electrical systems. Application-specific standard for the mechanical engineering industry. E ISO 13849-1 Safety of machinery - Safety-related parts of control systems - Part 1: General principles for design - Part 2: Validation In this standard, deterministic (safety) categories are included that are evaluated by using values such as MTTFd (Mean time to dangerous failure), DC (Diagnostic coverage) and CCF (Common Cause Failure) and result in a PL (Performance Level). The Performance Level (PL) defines the probability of a dangerous failure per hour (PFHd), which is the gateway to the SIL classifications of IEC/E 62061. If the outcome corresponds to the class required by the risk assessment, the required safety-related performance will be reached. It is clear that a category in E 951 can no longer be simply mapped as a Performance Level. The required safety-related performance of the relevant safety function is still calculated and determined on the basis of how hazardous an application is. (Risk graph PLr Performance Level required by E ISO 13849-1, SIL class IEC/E 62061). Both E ISO 13849-1 and IEC/E 62061 are equally applicable to electrical systems. E ISO 13849-1 covers among others mechanical, hydraulic and pneumatic systems. E ISO 13849-1 has been replacing E 954-1 since 31/12/2011 and takes into account considerations of probability as found in E 61508. I.e. technical safety functionality is based on the entire life cycle of a product or system, from its conception to its end of life. 9

Selection guide Crouzet safety relays What are the selection criteria? Machine safety Function(s) Safety category Safety contacts Data contact Emergency stop & Safety guard monitoring with 1 channel 3 3 x O 1 x C Emergency stop & Safety guard monitoring with 2 channels 4 3 x O 1 x C Timed contacts 1 C 10 s 4 2 x O (instantaneous) 1 x O (timed) - Expansion module for safety relays 4 (combined with a level 4 safety relay) 5 x O 1 x C (feedback loop) Zero speed monitoring 4 3 x O 1 x C 1 x O 2 x solid state outputs 2 x O - Two-hand control 4 3 x O 1 x C Power supply for 24 V c safety relays - - - Relevelling control according to E 81-1, -2 (lift standard) Function(s) Safety category Safety contacts Data contact Relevelling zone control for lifts 4 2 x O - 1 x C 10

Connection Casing width (mm) Supply Part number Type Pages 24 V c 85 102 031 Screw terminals 110 V a 85 102 034 KA3-YS 22.5 230 V a 85 102 035 24 V c 85 103 031 14-16 Removable spring terminals 110 V a 85 103 034 KAC3-YS 230 V a 85 103 035 24 V z 85 102 436 Screw terminals 22.5 110-115 V a 85 102 434 230 V a 85 102 435 KE3-YS 17-20 Removable spring terminals 24 V z 85 103 436 KEC3-YS Screw terminals 22.5 24 V z 85 102 736 KZR3-YS 21-23 24 V z 85 102 956 Screw terminals 22.5 110-115 V a 85 102 954 230-240 V a 85 102 955 KZE5-YS 24-26 Screw terminals 45 24 V c 85 102 331 KSW3-JS 27-30 24 V c 85 102 621 KZH2-Y2 Screw terminals 22.5 24 V c 85 102 631 24 V a 85 102 632 KZH3-YS 31-33 Screw terminals 22.5 85 C 265 V z 85 102 208 KPS0-YS 34-35 Connection Casing width (mm) Supply Part number Type Pages Removable screw terminals 22.5 24 V z 85 102 826 KZHU-YS 24 V z 85 102 526 KZHV-YS 36-38 11

Applications Crouzet safety relays Where are they found? Emergency stop and guard monitoring Emergency stop modules with 1 or 2 channels Relevelling lift cars Levelling the landing and the lift car KA3-YS and KE3-YS, KAC3-YS and KEC3-YS SAFETY RELAYS KZHU-YS and KZHV-YS SAFETY RELAYS They can be found in electrical cabinets, associated with other automation functions in the following markets: Building equipment Industrial automation systems Zero speed monitoring Two-hand control Sensorless control for stopping electric motors Control of two-hand control console Single or three-phase KSW3-JS SAFETY RELAYS KZH2-YS and KZH3-YS SAFETY RELAYS 12

Crouzet Automation & Control Behind every project, technologies and expertise Local support for all industrial projects. A multi-skilled team. A sales presence in over 40 countries. A Premium offer designed to ensure the excellence of products and services. Eco-design integrated in Crouzet's "Offer Creation Process". Certifications: ISO 9001, ISO 14001, OHSAS 18001. Products which comply with international standards (UL, CSA, EC). A dynamic R&D department. In addition to this catalogue, technical data sheets for each product are available as free downloads on the website. 13

ew safety relays Emergency stop module with 1 channel - 22.5 mm - KA(C)3-YS "Emergency stop" & "Gate monitoring" functions Single channel operation Security with redundancy and feedback circuit 3 "O" security contacts 1 "C" monitoring contact Security category 3 (according to E 954-1) Performance Level (PL) d, safety category 3 to E ISO 13849-1 SIL Claimed Level (SIL CL) 2 to IEC/E 62061 Terminals : fixed screw terminals or plugin cage clamp terminals Part numbers Type Terminals Voltages Supply frequency range Outputs Code (Hz) KA3-YS Screws 24 Vc - 3 O + 1 C 85102031 Screws 110 Va 50/60 3 O + 1 C 85102034 Screws 230 Va 50/60 3 O + 1 C 85102035 KAC3-YS Clamps 24 Vc - 3 O + 1 C 85103031 Clamps 110 Va 50/60 3 O + 1 C 85103034 Clamps 230 Va 50/60 3 O + 1 C 85103035 General characteristics Operating characteristics Functions Operation Control input Failure detection Display of output state by LED Supply Supply voltage Supply frequency range (Hz) Operating range Emergency stop Monitoring of safety gates 1 channel Manual restart with On-button (Y1 - Y2 terminals) Automatic restart (Y1 - Y2 linked) Between terminal Y1 and common Power supply : PWR Outputs : OUT (relays K1 & K2) 85 102 031 / 85 103 031 : 24 Vc 85 102 034 / 85 103 034 : 110 Va 85 102 035 / 85 103 035 : 230 Va 50 / 60 for AC versions a : -15 % / +10 % Un c : ± 10 % Un (at 10 % residual ripple) c : - 15 % / +10 % Un (at 48 % residual ripple) Consumption 1.5 W (24 Vc ) 3.5 VA (230 Va ) Initialization time 0.5 s Precision Maximum reset time 40 ms (24 Vc ) 200 ms (230 Va ) Maximum response time on emergency stop 70 ms (24 Vc ) 35 ms (230 Va ) Output specification Type Forcibly guided relays (positively driven) umber of safety circuits 3 O umber of data circuits 1 F ominal output voltage 250 Va max. Max. thermal current Ith for each contact 5 A Maximum power rating According to AC15 (O contacts) : 3 A / 230 V a According to AC15 (C contacts) : 2 A / 230 Va According to DC13 (O contacts) : 4 A / 24 Vc ; 0.5 A / 110 Vc According to DC13 (C contacts) : 4 A / 24 Vc Electrical endurance At 5 A, 230 Va, cos ϕ = 1 : 1.5 x 10 5 switching cycles At 8 A, 24 Vc, according to DC 13 (O contacts) : 25 x 10 3 (O : 0.4 s ; OFF : 9.6 s) Mechanical life 20 x 10 6 switching cycles Maximum rate 600 switching cycles / h Protection against short circuits Max. fuse rating : 10 A gl Line circuit breaker : B 6 A 14

Climatic environment Operating temperature ( o C) -15 +55 C Storage temperature ( 0 C) -25 +85 C Altitude < 2000m Climate resistance according to IEC/E 60068-1 15 / 055 / 04 Mechanical environnement Vibration resistance according to IEC/E 60068-2-6 Electromagnetic environment Immunity to electrostatic discharges acc. IEC/E 61000-4-2 Immunity to electrostatic fields acc. EV 50140/204 CEI/E 61000-4-3 Immunity to rapid transient bursts acc. to IEC/E 61000-4-4 Immunity to shock waves according to IEC/E 61000-4-5 Amplitude : 0.35 mm Frequency : 10 55 Hz Immunity to radio frequency in common mode acc. to IEC/E 61000-4-6 Interference suppression according to IEC/E 55011 Housing Material : self-extinguishing (UL94VO) Protection (IEC 60529) - Casing Protection (IEC 60529) - Term. block Mounting Weight (g) 200 (24 Vc ) 270 (230 Va ) Standards and approvals Approvals Environmental directive 2002/95/CE Environmental regulation 1907/2006 Security data according to E ISO 13849-1 SIL Claimed Level (SIL CL) to IEC/E 62061 2 Safety Integrity Level (SIL) according to CEI/E 61508 2 Safety category to E 954-1 3 Dimensions (mm) 8 kv (air) 10 V / m 2 kv Between wires for power supply : 1 kv Between wires and ground : 2 kv 10 V Limit value class B Thermoplastic with V0 extinction behaviour IP40 IP20 DI-rail CE, TÜV, UL/CSA RoHS Reach Performance Level (PL) : d Category : 3 KA3-YS - Screw terminals KAC3-YS - Clamp terminals + 0,6 22,5-0 121 118 +0,6 22,5-0 121 118 90 111 113 113 15

Connections Front face drawing KA3-YS Contacts Front face drawing KAC3-YS 13 23 33 41 A1 (+) Y1 Y2 A1 K1 K2 A2 Y21 Y21 A2 Y1 Y2 (-) (-) 14 24 34 42 13 23 33 41 14 24 34 42 A1 (+) : + / L A2 : - / Y1, Y2 : Validation Input Y21 (-) : Measure Output (-) of secondary used for example in IT networks for insulation control 13, 14, 23, 24, 33, 34 : Safety circuit outputs (forcibly guided O contacts) 41, 42 : Monitoring output (forcibly guided C contact) Principles Safety related data Curves Function diagram E ISO 13849-1: Category: 3 PL: d MTTF d : 180,3 a (year) DC avg : 99,0 % d op : 365 d/a (days/year) h op : 24 h/d (hours/day) t cycle : 3600 s/cycle 1 /h (hour) Pushbutton (On) Emergency stop (Off) K1 Relay K2 Relay IEC E 62061 IEC E 61508: SIL CL: 2 IEC E 62061 SIL 2 IEC E 61508 HFT *) : 1 DC avg : 99,0 % SFF 99,7 % PFH D : 2,60E-10 h -1 *) HFT = Hardware failure tolerance Applications Single channel emergency-stop circuit without feed back loop, with or without automatic restart Contact reinforcement by external contactors L1(+) L1(+) emergency stop on emergency stop on K3 K4 A1(+) Y1 Y2 13 23 33 41 A1(+) Y1 Y2 13 23 33 41 KA(C)3-YS KA(C)3-YS A2(-) Y21(-) 14 24 34 42 A2(-) Y21(-) 14 24 34 42 (-) K3 K4 For automatic restart, terminals Y1 - Y2 must be linked. o O-pushbutton necessary (-) For currents > 5 A, the output contacts can be reinforced by external contactors. Functioning of the external contactors is monitored by looping the C contacts into the start circuit (Y1-Y2) 16

ew safety relays Emergency stop modules with 1 or 2 channels (22.5 mm) - KE(C)3-YS "Emergency stop" & "Safety gates monitoring" functions Single and 2-channel operation Security with redundancy and feedback circuit 3 "O" security contacts 1 "C" monitoring contact Security category 4 (according to E 954-1) Performance Level (PL) e, safety category 4 to E ISO 13849-1 SIL Claimed Level (SIL CL) 3 to IEC/E 62061 Terminals : fixed screw terminals or plugin cage clamp terminals Part numbers Type Terminals Voltages Supply frequency range Outputs Code (Hz) KE3-YS Screws 24 Vz 50/60 3 O + 1 C 85102436 Screws 110-115 Va 50/60 3 O + 1 C 85102434 Screws 230 Va 50/60 3 O + 1 C 85102435 KEC3-YS Clamps 24 Vz 50/60 3 O + 1 C 85103436 General characteristics Operating characteristics Functions Operation Control input Failure detection Display of output state by LED Supply Supply voltage Emergency stop Safety gates monitoring 1 or 2 channels Manual restart with On-button (Y1 - Y2 terminals) Automatic restart (switch S2 & Y1 - Y2 linked) Monitored start on On-button With or without cross fault monitoring in the emergency-stop loop (switch S1) Power supply : PWR Output : OUT1 (relay K1) Output : OUT2 (relay K2) 85 102 436 / 85 103 436 : 24 V z 85 102 434 : 110-115 Va 85 102 435 : 230 Va Supply frequency range (Hz) 50 / 60 Operating range z : ± 10 % Un a : -15 % +10 % Un Consumption 1.5 W (24 Vc ) 3.7 VA (230 Va ) Initialization time 250 ms Precision Maximum reset time 30 ms (manual start) 350 ms (automatic start) Maximum response time on emergency stop 150 ms (z ) 50 ms (a ) Output specification Type Forcibly guided relays (positively driven) umber of safety circuits 3 O umber of data circuits 1 C ominal output voltage 250 V AC max. Max. thermal current Ith for each contact 8 A Maximum power rating According to AC15 (O contacts) : 3 A / 230 V a According to AC15 (C contacts) : 2 A / 230 Va According to DC13 (O contacts) : 4 A / 24 Vc ; 0.5 A / 110 Vc According to DC13 (C contacts) : 4 A / 24 Vc Electrical endurance At 5 A, 230 Va, cos ϕ = 1 : 1.5 x 10 5 switching cycles At 8 A, 24 Vc, according to DC 13 (O contacts) : 25 x 10 3 switching cycles (O : 0.4 s ; OFF : 9.6 s) Mechanical life 20 x 10 6 switching cycles Maximum rate 1200 switching cycles / h Protection against short circuits Max. fuse rating : 10 A gl Line circuit breaker : B 6 A 17

Climatic environment Operating temperature ( o C) -15 +55 Storage temperature ( 0 C) -25 +85 Altitude < 2000 m Climate resistance according to IEC/E 60068-1 15 / 055 / 04 Mechanical environnement Vibration resistance according to IEC/E 60068-2-6 Amplitude : 0.35 mm Frequency : 10 55 Hz Electromagnetic environment Immunity to electrostatic discharges acc. IEC/E 61000-4-2 8 kv (air) Immunity to electrostatic fields acc. EV 50140/204 CEI/E 61000-4-3 10 V / m Immunity to rapid transient bursts acc. to IEC/E 61000-4-4 2 kv Immunity to shock waves according to IEC/E 61000-4-5 Between wires for power supply : 1 kv (a ), 0.5 kv (24 V z ) Between wires and ground : 2 kv Immunity to radio frequency in common mode acc. to IEC/E 61000-4-6 10 V Interference suppression according to IEC/E 55011 Limit value class B Housing Material : self-extinguishing (UL94VO) Thermoplastic with V0 extinction behaviour Protection (IEC 60529) - Casing IP40 Protection (IEC 60529) - Term. block IP20 Mounting DI-rail Weight (g) 210 (24 Vz ) 275 (230 Va ) Standards and approvals Approvals CE, TÜV, UL / CSA Environmental directive 2002/95/CE RoHS Environmental regulation 1907/2006 Reach Security data according to E ISO 13849-1 Performance Level (PL) : e Category : 4 SIL Claimed Level (SIL CL) to IEC/E 62061 3 Safety Integrity Level (SIL) according to CEI/E 61508 3 Safety category to E 954-1 4 Dimensions (mm) KE3-YS - Screw terminals KEC3-YS - Clamp terminals + 0,6 22,5-0 121 118 +0,6 22,5-0 121 118 90 111 113 113 18

Connections Front face drawing KE3-YS Contacts Front face drawing KEC3-YS A1 + 13 23 33 Y1 Y2 41 42 Y12 Y22 Y1 Y2 A1+ Y11 K1 K2 A2 Y21 13 23 33 41 14 24 34 42 Y11 Y12 Y21 Y22 A2 14 24 34 A1 (+) : + / L A2 : - / Y1, Y2 : Validation Input Y11, Y21, Y12, Y22 : Control Inputs 13, 14, 23, 24, 33, 34 : Safety circuit outputs (forcibly guided O contacts) 41, 42 : Monitoring output (forcibly guided C contact) Principles Safety related data Curves Function diagram E ISO 13849-1: Category: 4 PL: e MTTF d : > 100 a (year) DC avg : 99,0 % d op : 365 d/a (days/year) h op : 24 h/d (hours/day) t cycle : 3600 s/cycle 1 /h (hour) Pushbutton (On) Emergency stop (Off) K1 Relay K2 Relay IEC/E 62061 IEC/E 61508: SIL CL: 3 IEC/E 62061 SIL 3 IEC/E 61508 HFT *) : 1 DC avg : 99,0 % SFF 99,7 % PFH D : 2,66E-10 h -1 *) HFT = Hardware failure tolerance 19

Applications Single channel emergency stop circuit L1 2-channel emergency stop circuit without cross fault monitoring L1 Contact reinforcement by external contactors controlled by one contact path L1 off E-stop on E-stop K4 E-stop K5 A1(+) Y11 Y1 Y2 Y12 Y22 13.... A1(+) Y11 Y1 Y2 Y12 Y22 13.... A1(+) Y11 Y1 Y2 Y12 Y22 13.... KE(C)3-YS KE(C)3-YS KE(C)3-YS A2(-) Y21 14.... A2(-) Y21 14.... A2(-) Y21 14.... S1, S2: Switches S1, S2: Switches K4 K5 This circuit does not have any redundancy in the emergency-stop control circuit. S1 : no cross fault detection S2 : automatic start S1 : no cross fault detection S2 : manual start S1, S2: Switches S1 : no cross fault detection S2 : automatic start 2-channel safety gate monitoring L1 sliding guard closed Contact reinforcement by external contactors, 2-channel controlled L1 2-channel emergency stop circuit with cross fault monitoring L1 on on K4 E-stop on E-stop K5 A1(+) Y11 Y1 Y2 Y12 Y22 13.... A1(+) Y11 Y1 Y2 Y12 Y22 13 23.. A1(+) Y11 Y1 Y2 Y12 Y22 Y21 13.... KE(C)3-YS KE(C)3-YS KE(C)3-YS A2(-) Y21 14.... A2(-) Y21 14 24.. A2(-) 14.... Activated O contact (contact position: closed) K4 K5 S1, S2: Switches S1, S2: Switches S1, S2: Switches S1 : no cross fault detection S2 : manual start For currents > 8 A, the output contacts can be reinforced by external contactors. Functioning of the external contactors is monitored by looping the C contacts into the start circuit (Y1-Y2) S1 : cross fault detection S2 : manual start 20

ew safety relays Delayed Emergency Stop Module (22.5 mm) - KZR3-YS "Emergency stop" & "Safety gates monitoring" functions 1- or 2-channel operation Security with redundancy and feedback circuit 2 instantaneous "O" security contacts 1 release delayed "O" security contact Release delay of 1.0 10s for security contacts Performance Level (PL) e, safety category 4 to E ISO 13849-1 SIL Claimed Level (SIL CL) 3 to IEC/E 62061 Part numbers Type Terminals Voltages Supply frequency range Outputs Code (Hz) KZR3-YS Screws 24 Vz 50/60 (2 O) I + (1 O) T 85102736 General characteristics Operating characteristics Functions Operation Control input Failure detection Display of output state by LED Emergency stop Safety gates monitoring Release delay of security contacts (1.0 to 10 s) 1 or 2 channels Manual restart with On-button (Y1 - Y2 terminals) Automatic restart (Y13 - Y2 linked) Monitored start on On-button if Y1 - Y2 linked With or without cross fault monitoring in the emergency-stop loop (depending on connections) Supply voltage : PWR Output : OUT1 (relay K1) Output : OUT2 (relay K2) Output : OUT1t (relay K1t) Output : OUT2t (relay K2t) Supply Supply voltage 85 102 736 : 24 Vz Supply frequency range (Hz) 50 / 60 Operating range ± 10 % Un Consumption 3.5 W Initialization time 1 s Precision Maximum reset time 25 ms (manual start) 100 ms (automatic start) Maximum response time on emergency stop 20 ms (supply disconnection) 10 ms (disconnection in Y12 - Y22 - Y32) Output specification Type Forcibly guided relays (positively driven) umber of safety circuits 2 instantaneous O 1 release delayed O ominal output voltage 250 Va max. Max. thermal current Ith for each contact 13 / 14 ou 23 / 24 : 8 A 37 / 38 : 6 A Maximum power rating According to AC 15 (O contacts) : 3 A / 230 Va According to DC 13 (O contacts) : 3 A / 24 Vc (O : 0.4 s ; OFF : 9.6 s) Electrical endurance At 2 A, 230 Va, according to AC 15 : 10 5 switching cycles Mechanical life 10 x 10 6 switching cycles Maximum rate 360 switching cycles / h Protection against short circuits Max. fuse rating : 10 A gl (for contacts 13-14 ou 23-24) 4 A gl (for contacts 37-38) Line circuit breaker : B 6 A Climatic environment Operating temperature ( o C) -15 +55 Storage temperature ( 0 C) -25 +85 Altitude < 2000 m Climate resistance according to IEC/E 60068-1 15 / 055 / 04 Mechanical environnement Vibration resistance according to IEC/E 60068-2-6 Amplitude : 0.35 mm Frequency : 10 55 Hz 21

Electromagnetic environment Immunity to electrostatic discharges acc. IEC/E 61000-4-2 8 kv (air) Immunity to electrostatic fields acc. EV 50140/204 CEI/E 61000-4-3 10 V / m Immunity to rapid transient bursts acc. to IEC/E 61000-4-4 2 kv Immunity to shock waves according to IEC/E 61000-4-5 Between wires for power supply : 1 kv Between wires and ground : 2 kv Immunity to radio frequency in common mode acc. to IEC/E 61000-4-6 10 V Interference suppression according to IEC/E 55011 Limit value class B Housing Material : self-extinguishing (UL94VO) Thermoplastic with V0 extinction behaviour Protection (IEC 60529) - Casing IP40 Protection (IEC 60529) - Term. block IP20 Mounting DI-rail Weight (g) 210 Standards and approvals Approvals CE, TÜV, UL / CSA Environmental directive 2002/95/CE RoHS Environmental regulation 1907/2006 Reach Security data according to E ISO 13849-1 Performance Level (PL) : e Category : 4 SIL Claimed Level (SIL CL) to IEC/E 62061 3 Safety Integrity Level (SIL) according to CEI/E 61508 3 Safety category to E 954-1 4 Dimensions (mm) Screw terminals 121 + 0,6 22,5-0 118 90 113 Connections Front face drawing Contacts A1 + 37 13 23 Y12 Y13 Y22 Y32 Y1 Y2 K1 K1t K2 K2t A1(+) Y1 Y2 Y13 Y32 Y11 13 23 37 A2(-) Y21 14 24 38 Y11 Y12 Y21 Y22 A2 38 14 24 A1 (+) : + / L A2 : - / Y1, Y2 : Validation Input Y12, Y21, Y11, Y22, Y13, Y32 : Control Inputs 13, 14, 23, 24 : Safety circuit outputs (instantaneous forcibly guided O contacts) 37, 38 : Safety circuit output (release delayed forcibly guided O contact) 22

Principles Safety related data Curves Function diagram E ISO 13849-1: Category: 4 PL: e MTTF d : 215,1 a (year) DC avg : 99,0 % d op : 365 d/a (days/year) h op : 24 h/d (hours/day) t cycle : 3600 s/cycle 1 /h (hour) IEC E 62061 IEC E 61508: Relay Relay Relay Relay SIL CL: 3 IEC E 62061 SIL 3 IEC E 61508 HFT *) : 1 DC avg : 99,0 % SFF 99,7 % PFH D : 2,17E-10 h -1 *) HFT = Hardware failure tolerance Applications Single channel emergency stop circuit 2-channel emergency stop circuit 2-channel safety gate monitoring L1 (+) on off Emergency stop L1 (+) on Emergency stop L1 (+) on S1 S2 sliding protection grid closed active O-contact (contact position closed) A1(+) Y11 Y1 Y2 Y12 Y32 13.... A1(+) Y11 Y1 Y2 Y12 Y22 Y21 13.... A1(+) Y11 Y1 Y2 Y12 Y32 13.... KZR3-YS KZR3-YS KZR3-YS (-) A2(-) Y21 Y22.... 14 (-) A2(-) Y11 Y32 14.... (-) A2(-) Y21 Y22 14.... This circuit does not have any redundancy in the emergency-stop control circuit. With cross fault monitoring Contact reinforcement by external contactors controlled by one contact path L1 (+) A1(+) Y11 on K4 K5 Y1 Y2 Y1 2 Y32 Emergency Stop 13.... Y13 Auto Start : K4 K5 Y2 Contact reinforcement by external contactors, 2-channel controlled L1 (+) on K4 K5 Emergency stop KZR3-YS A1(+) Y11 Y1 Y2 Y12 Y22 Y21 13 23.. A2(-) Y21 Y22 14.... KZR3-YS (-) K4 K5 A2(-) Y11 Y32 14 24.. K4 K5 (-) Y1 - Y2 must stay open on auto start For currents > 5 A, the output contacts can be reinforced by external contactors. Functioning of the external contactors is monitored by looping the C contacts into the start circuit Y13-Y2 or Y1 - Y2. 23

ew safety relays Extension module (22.5 mm) - KZE5-YS "Multiplication of contacts" function for safety relays 1- or 2-channel operation Security with redundancy and feedback circuit 5 "O" security contacts Performance Level (PL) e, safety category 4 to E ISO 13849-1 SIL Claimed Level (SIL CL) 3 to IEC/E 62061 Part numbers Type Terminals Voltages Supply frequency range Outputs Code (Hz) KZE5-YS Screws 24 Vz 50/60 5 O 85102956 Screws 110-115 Va 50/60 5 O 85102954 Screws 230-240 Va 50/60 5 O 85102955 General characteristics Operating characteristics Functions Multiplication of the number of contacts for safety relays Operation 1 or 2 channels Return loop X1 - X2 Display of output state by LED Output : OUT1 (relay K1) Output : OUT2 (relay K2) Supply Supply voltage 85 102 956 : 24 Vz 85 102 954 : 110-115 Va 85 102 955 : 230-240 Va Supply frequency range (Hz) 50 / 60 Operating range a : - 15 / + 10 % Un c : ± 10 % Un (at 10 % residual ripple) c : - 15 / + 10 % Un (at 48 % residual ripple) Consumption 1.8 VA (24 Vz ) 3.0 VA (110, 230 Va ) Precision Maximum reset time 20 ms Maximum response time on emergency stop 35 ms Output specification Type Forcibly guided relays (positively driven) umber of safety circuits 5 O ominal output voltage 250 Va max. Max. thermal current Ith for each contact 5 A Maximum power rating According to AC15 (O contacts) : 3 A / 230 Va According to AC15 (C contacts) : 2 A / 230 Va According to DC13 (O contacts) : 4 A / 24 Vc ; 0.5 A / 110 Vc According to DC13 (C contacts) : 4 A / 24 Vc Electrical endurance At 5 A, 230 Va, cos ϕ = 1 : > 1.5 x 10 5 switching cycles At 8 A, 24 Vc, according to DC 13 (O contacts) : > 25 x 10 3 switching cycles (O : 0.4 s ; OFF : 9.6 s) Mechanical life 20 x 10 6 switching cycles Maximum rate 1200 switching cycles / h Protection against short circuits Max. fuse rating : 10 A gl Line circuit breaker : B 6 A Climatic environment Operating temperature ( o C) -15 +55 Storage temperature ( 0 C) -25 +85 Altitude < 2000 m Climate resistance according to IEC/E 60068-1 15 / 055 / 04 Mechanical environnement Vibration resistance according to IEC/E 60068-2-6 Amplitude : 0.35 mm Frequency : 10 55 Hz Electromagnetic environment Immunity to electrostatic discharges acc. IEC/E 61000-4-2 8 kv (air) Immunity to electrostatic fields acc. EV 50140/204 CEI/E 61000-4-3 10 V / m Immunity to rapid transient bursts acc. to IEC/E 61000-4-4 4 kv Immunity to shock waves according to IEC/E 61000-4-5 Between wires for power supply : 1 kv (a ), 0.5 kv (24 Vz ) Between wires and ground : 4 kv Immunity to radio frequency in common mode acc. to IEC/E 61000-4-6 10 V 24

Interference suppression according to IEC/E 55011 Limit value class B Housing Material : self-extinguishing (UL94VO) Thermoplastic with V0 extinction behaviour Protection (IEC 60529) - Casing IP40 Protection (IEC 60529) - Term. block IP20 Mounting DI-rail Weight (g) 205 Standards and approvals Approvals CE, TÜV, UL/CSA Environmental directive 2002/95/CE RoHs Environmental regulation 1907/2006 Reach Security data according to E ISO 13849-1 Performance Level (PL) : e Category : 4 SIL Claimed Level (SIL CL) to IEC/E 62061 3 Safety Integrity Level (SIL) according to CEI/E 61508 3 Safety category to E 954-1 4 Dimensions (mm) Screw terminals 121 + 0,6 22,5-0 118 90 113 Connections Front face drawing Contacts 13 23 33 43 A1 K1 A2 A3 K2 A4 A1 (+) A2 53 54 13 23 33 43 53 X1 14 24 34 44 54 X2 A3 A4 X1 X2 (+) 14 24 34 44 A1 (+) : + / L A2 : - / X1, X2 : Feedback circuit (forcibly guided C contact) 13, 14, 23, 24, 33, 34, 43, 44, 53, 54 : Safety circuit outputs (forcibly guided O contacts) 25

Principles Safety related data L1 Applications Multiplication of the contacts of a KE (C) 3-YS module with a KZE5- YS module Emergencystop A1(+) Y11 Y12 Y22 21 13 23.. KE(C)3-YS A2(-) On Y1 Y2 14 24.. X1 X2 A1(+) A3(+) 13 23 33 43 53 KZE5-YS A2(-) A4(-) 14 24 34 44 54 26

ew safety relays Standstill monitor (45 mm) - KSW3-JS Function "Stillstand detection without sensors" Independent of rotation direction Security with redundancy and feedback circuit 3 forcibly guided "O" security contacts 1 forcibly guided "C" security contact 1 "O" monitoring contact 2 semiconductor monitoring outputs Performance Level (PL) e, safety category 4 to E ISO 13849-1 SIL Claimed Level (SIL CL) 3 to IEC/E 62061 Part numbers Type Terminals Voltages Supply frequency range Outputs Code (Hz) KSW3-JS Screws 24 Vc - 3 O + 1 C 85102331 General characteristics Operating characteristics Functions Standstill detection on motors without sensors Return loop Y1, Y2 Failure detection Broken wire detection in measure circuit Display of output state by LED Power supply : PWR (green = operation, red = internal error) Output : OUT (yellow = e.m.f. > Uan, green flashes = time progression of ts, permanent green = output contacts enabled) Error : ERR (flashing codes) Supply Supply voltage 85 102 331 : 24 Vc Operating range ± 10 % Un Consumption 3 W Precision Release delay for detection of running motor < 100 ms Standstill time delay 0.2 6 adjustable Output specification Type Forcibly guided relays (positively driven) umber of safety circuits 3 O umber of data circuits 1 C ominal output voltage 250 Va max. Max. thermal current Ith for each contact 5 A Maximum power rating According to AC15 (O contacts) : 3 A / 230 Va at 40 C According to AC15 (C contacts) : 2 A / 230 Va at 40 C According DC13 (O contacts) : 2 A / 24 Vc at 40 C According to DC13 (C contacts) : 2 A / 24 Vc at 40 C Electrical endurance For 5 A, 230 Va, cos ϕ = 0.5 : > 2 x 10 5 switching cycles Mechanical life 50 x 10 6 switching cycles Maximum rate 1200 switching cycles / h Protection against short circuits Max. fuse rating : 4 A gl Line circuit breaker : C 6 A Climatic environment Operating temperature ( o C) -25 +60 Storage temperature ( 0 C) -40 +75 Altitude < 2000 m Climate resistance according to IEC/E 60068-1 25 / 060 / 04 Mechanical environnement Vibration resistance according to IEC/E 60068-2-6 Amplitude : 0.35 mm Frequency : 10 55 Hz Electromagnetic environment Immunity to electrostatic discharges acc. IEC/E 61000-4-2 8 kv (air) Immunity to electrostatic fields acc. EV 50140/204 CEI/E 61000-4-3 20 V / m Immunity to rapid transient bursts acc. to IEC/E 61000-4-4 2 kv Immunity to shock waves according to IEC/E 61000-4-5 Between wires for power supply : 2 kv (a - UH), 1 kv (24 Vc ) Between measuring input L1 / L2 / L3 : 2 kv Immunity to radio frequency in common mode acc. to IEC/E 61000-4-6 10 V Interference suppression according to IEC/E 55011 Limit value class B Housing Material : self-extinguishing (UL94VO) Thermoplastic with V0 extinction behaviour Protection (IEC 60529) - Casing IP40 27

Protection (IEC 60529) - Term. block IP20 Mounting DI-rail Weight (g) 400 Standards and approvals Approvals CE, TÜV, UL/CSA Environmental directive 2002/95/CE RoHS Environmental regulation 1907/2006 Reach Security data according to E ISO 13849-1 Performance Level (PL) : e Catégorie : 4 SIL Claimed Level (SIL CL) to IEC/E 62061 3 Safety Integrity Level (SIL) according to CEI/E 61508 3 Safety category to E 954-1 4 Dimensions (mm) Screw terminals 45 121 118 35 90 113 Connections Front face drawing Contacts 53 54 L1 L2 L3 Y1 Y2 Y3 11 23 33 43 11 23 33 43 53 A3+ K1 K2 12 24 34 44 54 A4 O ERR 12 24 34 44 A3 + A4 O ERR A1 A2 L1, L2, L3 : Connection to monitored motor 11, 12 : Safety circuit output (forcibly guided C contact) 23, 24, 33, 34, 43, 44 : Safety circuit outputs (forcibly guided O contacts) 53, 54 : Monitoring output (O contact) Y1, Y2 : Connection of feedback circuit (for external contactors) Y2, Y3 : Manual reset for external faults A1+, A2 : Auxiliary supply (UH) A3+, A4 : Supply for semiconductor outputs O : Semiconductor output indicated state of safety contacts ERR : Semiconductor output indicates failures 28

Principles Curves Safety related data Function diagram E ISO 13849-1: Category: 4 PL: e MTTF d : 93 a (years) DC avg : 99,0 % d op : 365 d/a (days/year) h op : 24 h/d (hours/day) t cycle : 28,8E+03 s/cycle 1 /8 h (hours) IEC/E 62061 IEC/E 61508: SIL CL: 3 IEC/E 62061 SIL 3 IEC/E 61508 HFT *) : 1 DC avg : 99,0 % SFF 99,7 % UH A1/A2 motor speed / voltage L1/L2/L3 23-24 33-34 43-44 53-54 A3-O A3-ERR auxiliary voltage on line breakage L1/L2/L3 11-12 motor on stop motor runs down standstill detected t E line breakage reset Y3-Y2 Motor Ein line breakage motor runs down standstill delay time t s t =2...2,5s start up delay time E UH t E reset Y3-Y2 t voltage level U an PFH D : 4,10E-10 h -1 *) HFT = Hardware failure tolerance Applications With 3-phase motor With single-phase motor PE L1 L2 L3 PE L motor contactor motor contactor + 24 Vc + 24 Vc A1+ 11 23 33 43 53 A3+ A4 A1+ 11 23 33 43 53 A3+ A4 L1 L2 L3 KSW3-JS Y1 Y2 Y3 K4 K5 L1 L2 L3 KSW3-JS Y1 Y2 Y3 K4 K5 A2-12 24 34 44 54 O ERR A2-12 24 34 44 54 O ERR K4 K5 K4 K5 M 3~ - M 1~ - Typical connection combination with star delta timer Typical connection combination with star delta timer L1 L2 L3 main switch fuse L1 L2 L3 main switch fuse F F F F off off on TQR6 Crouzet (ref. 85865176) 15 R 18 28 24 Vc + A1 23 33 L1 L2 KSW3-JS L3 Y1 Y2 K4 K5 U1 M 3~ W2 V1 U2 W1 V2 on TQR6 Crouzet (ref. 85865176) 15 R 18 28 24 Vc + A1 23 33 L1 L2 KSW3-JS L3 Y1 Y2 K4 K5 U1 M 3~ W2 V1 U2 W1 V2 A1 R A2 - A2 24 34 K4 K5 A1 R A2 - A2 24 34 K4 K5 d = star delta timer = mains contactor = star-contactor = triangle contactor d =star deltatimer =mains contactor = star-contactor = triangle contactor With 3-phase connection of KSW3-JS, the star contactor ( ) has to be closed after the motor is switched off to detect standstill. If this is not the case the failure signal broken wire blocks the output contacts in off posisition. 29

Typical connection combination with E-stop L1 L2 L3 F2 F1 Unlock K4 Open Emergency Stop On K4 Off 24 Vc + A1 Y11 Y12 Y22 13 23 33 41 A1+ 11 23 33 43 L1 L2 L3 Emergency Stop Module KE(C)3-YS K4 53 54 Stand Still Monitor KSW3-JS Y1 Y2 M 3 Y21 Y1 Y2 14 24 34 42 A2 A3 + O ERR A4 12 24 34 44 A2- - * +24V E0 E1... Programmable Logic Controller * Signal to Programmable Logic Controller * optional Signal lamp 30

ew safety relays Two-hand safety relays (22.5 mm) - KZH2-YS & KZH3-YS "Two-hand" safety function in with two push buttons Inputs for two switches with double contacts (1 O and 1 C for each) Security with redundancy and feedback circuit Monitoring of external contactors with feedback circuit Y1 - Y2 3 "O" security contacts & 1 "C" monitoring contact (KZH3-YS version) 2 "O" security contacts (KZH2-YS version) Performance Level (PL) e, safety category 4 to E ISO 13849-1 SIL Claimed Level (SIL CL) 3 to IEC/E 62061 Safety Level Type III-C according to E 574 Part numbers Type Terminals Voltages Supply frequency range Outputs Code (Hz) KZH2-YS Screws 24 Vc - 2 O 85102621 KZH3-YS Screws 24 Vc - 3 O + 1 C 85102631 Screws 24 Va 50 / 60 3 O + 1 C 85102632 General characteristics Operating characteristics Functions Protection of people with two-hand pushbuttons Return loop Y1 - Y2 Failure detection Overvoltage and short circuit protection Display of output state by LED Power supply : PWR Output : OUT1 (relay K1) Output : OUT2 (relay K2) Supply Supply voltage 85 102 621 / 85 102 631 : 24 Vc 85 102 632 : 24 Va Supply frequency range (Hz) 50 / 60 (for AC version) Operating range ± 10 % Un Consumption 2.3 W (c ) 4 VA (a ) Initialization time 1 s Precision Maximum reset time 30 ms Maximum response time on emergency stop 25 ms Output specification Type Forcibly guided relays (positively driven) umber of safety circuits 2 O (KZH2-YS) 3 O (KZH3-YS) umber of data circuits 1 C (KZH3-YS) ominal output voltage 250 Va max. Max. thermal current Ith for each contact 5 A Maximum power rating According to AC15 (O contacts) : 3 A / 230 Va According to AC15 (C contacts) : 2 A / 230 Va Accordinf to DC13 (O contacts) : 4 A / 24 Vc ; 0.5 A / 110 Vc According to DC13 (F contacts) : 4 A / 24 Vc Electrical endurance For 5 A, 230 Va, cos ϕ = 1 : > 1.5 x 10 5 switching cycles For 8 A, 24 Vc, according to DC 13 (O contacts) : > 25 x 10 3 switching cycles (O : 0.4 s ; OFF : 9.6 s) Mechanical life 20 x 10 6 switching cycles Maximum rate 1800 switching cycles / h Protection against short circuits Max. fuse rating : 10 A gl Line circuit breaker : B 6 A Climatic environment Operating temperature ( o C) -15 +55 Storage temperature ( 0 C) -25 +85 Altitude < 2000 m Climate resistance according to IEC/E 60068-1 15 / 055 / 04 1 31

Mechanical environnement Vibration resistance according to IEC/E 60068-2-6 Amplitude : 0.35 mm Frequency : 10 55 Hz Electromagnetic environment Immunity to electrostatic discharges acc. IEC/E 61000-4-2 8 kv (air) Immunity to electrostatic fields acc. EV 50140/204 CEI/E 61000-4-3 10 V / m Immunity to rapid transient bursts acc. to IEC/E 61000-4-4 2 kv Immunity to shock waves according to IEC/E 61000-4-5 Between wires for power supply : 1 kv Between wires and ground : 2 kv Immunity to radio frequency in common mode acc. to IEC/E 61000-4-6 10 V Interference suppression according to IEC/E 55011 Limit value class B Housing Material : self-extinguishing (UL94VO) Thermoplastic with V0 extinction behaviour Protection (IEC 60529) - Casing IP40 Protection (IEC 60529) - Term. block IP20 Mounting DI-rail Weight (g) 220 Standards and approvals Approvals CE, TÜV Environmental directive 2002/95/CE RoHS Environmental regulation 1907/2006 Reach Security data according to E ISO 13849-1 Performance Level (PL) : e Category : 4 SIL Claimed Level (SIL CL) to IEC/E 62061 3 Safety Integrity Level (SIL) according to CEI/E 61508 3 Safety category to E 954-1 4 Safety Level according to E 574 Type III-C Dimensions (mm) Screw terminals 121 + 0,6 22,5-0 118 90 113 Connections Front face drawing KZH2-YS Contacts Front face drawing KZH3-YS Y11 Y21 Y1 Y2 13 23 33* 41* Y22 A1 (-) Y1 Y2 (+) A1 Y12 13 23 33* 41* K1 K2 A2 Y22 14 24 34* 42* Y12 A2 (+) Y11 Y21 (-) 14 24 34* 42* * : only for KZH3-YS version A1 (+) : + / L A2 : - / Y1, Y2 : Feedback circuit input Y11, Y12, Y21, Y22 : Control inputs (push buttons) 13, 14, 23, 24, (33, 34) * : Safety circtui outputs (forcibly guided O contacts) (41, 42) * : Monitoring output (forcibly guided C contact) :* only for KZH3-YS version 32

Principles Safety related data Curves Function diagram E ISO 13849-1: Category: 4 PL: e MTTF d : 30,7 a (year) DC avg : 99,0 % d op : 220 d/a (days/year) h op : 12 h/d (hours/day) t cycle : 1,40E+02 s/cycle IEC/E 62061 IEC/E 61508: SIL CL: 3 IEC/E 62061 SIL 3 IEC/E 61508 HFT *) : 1 DC avg : 99,0 % SFF 99,7 % PFH D : 7,51E-09 h -1 *) HFT = Hardware failure tolerance U U A1/A2 Y1/Y2 S1 S2 13-14 23-24 max.0,5s >0,5s 1.) "S1, S2 activated" means, C open and O closed 2.) activated S1, switches "+"-potential 3.) activated S2, switches "-"-potential t Applications Two-hand safety relay L1 (+) Two-hand control with contact reinforcement via external positively-driven contactors L1 (+) Button 1 Button 1 K1 K2 A1(+) Y1 Y2 Y12 Y22 Y11 13 23 (33) (41) A1(+) Y1 Y2 Y12 Y22 Y11 13 23 (33) (41) KZH2-YS / (KZH3-YS) KZH2-YS / (KZH3-YS) A2(-) Y22 Y12 Y21 14 24 (34) (42) A2(-) Y22 Y12 Y21 14 24 (34) (42) Button 2 Button 2 K1 K2 (-) (-) When switching inductive loads, spark absorbers are recommended 33

ew safety relays Power supply AC / DC to DC 24 V (22.5 mm) - KPS0-YS Possibility of 110 Va and 230 Va power supply of 24 Vc safety relays Input : universal voltage range 85 265 Vz Output : secondary voltage 24 Vc / 200 ma High efficiency (80 %) Protection class II, according to E 61 558-1 Part numbers Type Terminals Voltages Supply frequency range Outputs Code (Hz) KPS0-YS Screws 85 265 Vz 24 Vc 50 / 60-85102208 General characteristics Operating characteristics Functions Universal Power supply for 24 Vc Safety Relays Failure detection Short circuit and overload protection Display of output state by LED Power supply : Us (secondary voltage) Supply Supply voltage 85 102 208 : 85 265 Va / 85 300 Vc Supply frequency range (Hz) 50 / 60 Output specification Type Secondary voltage 24 Vc ± 5 % Max. thermal current Ith for each contact 200 ma Protection against short circuits Electronic fuse Climatic environment Operating temperature ( o C) -20 +50 Altitude < 2000 m Climate resistance according to IEC/E 60068-1 20 / 050 / 04 Mechanical environnement Vibration resistance according to IEC/E 60068-2-6 Amplitude : 0.35 mm Frequency : 10 55 Hz Electromagnetic environment Immunity to electrostatic discharges acc. IEC/E 61000-4-2 8 kv (air) Immunity to electrostatic fields acc. EV 50140/204 CEI/E 61000-4-3 10 V / m Immunity to rapid transient bursts acc. to IEC/E 61000-4-4 4 kv Immunity to shock waves according to IEC/E 61000-4-5 Between wires for power supply : 1 kv Immunity to radio frequency in common mode acc. to IEC/E 61000-4-6 10 V Housing Material : self-extinguishing (UL94VO) Thermoplastic with V0 extinction behaviour Protection (IEC 60529) - Casing IP40 Protection (IEC 60529) - Term. block IP20 Mounting DI-rail Weight (g) 125 Standards and approvals Approvals CE Environmental directive 2002/95/CE RoHS Environmental regulation 1907/2006 Reach Protection class II according to E 61 558-1 II 34

Dimensions (mm) Screw terminals 121 + 0,6 22,5-0 118 90 113 Connections Front face drawing Contacts A1 (+) A2 Us+ A1 A2 Us+ Us+ A1 (+), A2 : Primary voltage Us+, Us- : Secondary voltage Applications 24 V c Two-hand safety relay supplied with 110 or 230 V a 85...265 V AC / DC L1 (+) 24 V DC A1(+) US+ US+ KPS0-YS A2 Us- Us- Us- US- US- Button 1 A1+ Y1 Y2 Y12 Y22 Y11 13 23 (33) (41) KZH2-YS / (KZH3-YS) A2 Y22 Y12 Y21 14 24 (34) (42) Button 2 (-) This wiring is only valid for 24 Vc or 24 V z safety relays 35

ew safety relays Relevelling Zone Check (22.5 mm) - KZHU-YS & KZHV-YS "Relevelling Zone Check" function Single and 2-channel operation Security with redundancy and feedback circuit 2 "O" security contacts 1 "C" monitoring contact (only for KZHV-YS version) Performance Level (PL) e, safety category 4 to E ISO 13849-1 SIL Claimed Level (SIL CL) 3 to IEC/E 62061 Lift Directive 95/16/EC Lift Standard E 81-1, -2 Removable terminal strips Part numbers Type Terminals Voltages Supply frequency range Outputs Code (Hz) KZHU-YS Screws 24 Vz 50/60 2 O 85102826 KZHV-YS Screws 24 Vz 50/60 2 O + 1 F 85102526 General characteristics Operating characteristics Functions Readjustment of elevator cabin position (while the doors are open on load charge for example) Operation 1 or 2 channels Control input Manual restart with On-button (Y1 - Y2 terminals) Automatic restart (switch S2 & shunt between Y1 - Y2) Failure detection Line fault detection on On-button (monitored start) With or without cross fault monitoring in the emergency-stop loop (switch S1) Display of output state by LED Power supply : PWR Output : OUT1 (relay K1) Output : OUT2 (relay K2) Supply Supply voltage 85 102 526 / 85 102 826 : 24 Vz Supply frequency range (Hz) 50 / 60 Operating range z : ± 10 % Un (at 10 % residual ripple) z : -15 / + 10 % Un (at 48 % residual ripple) Consumption 2 W Initialization time 250 ms Precision Maximum reset time 40 ms (manual start) 250 ms (automatic start) Maximum response time on emergency stop 50 ms (supply disconnection) 15 ms (disconnection in Y12 - Y22) Output specification Type Forcibly guided relays (positively driven) umber of safety circuits 2 O umber of data circuits 1 C (for KZHV-YS version) ominal output voltage 160 Va max. Max. thermal current Ith for each contact 5 A Maximum power rating According to AC15 (O contacts) : 3 A / 160 Va According to AC15 (C contacts) : 2 A / 160 Va According to DC13 (O contacts) : 2 A / 24 Vc According to DC13 (F contacts) : 2 A / 24 Vc Electrical endurance At 2 A, 230 Va, according to AC 15 : 10 5 switching cycles At 8 A, 24 Vc, according to DC 13 (O contacts) : 10 5 switching cycles (O : 0.4 s ; OFF : 9.6 s) Mechanical life 10 x 10 6 switching cycles Maximum rate 1200 switching cycles / h Protection against short circuits Max. fuse rating : 6 A gl Line circuit breaker : C 8 A Climatic environment Operating temperature ( o C) -15 +55 Storage temperature ( 0 C) -25 +85 Altitude < 2000 m Climate resistance according to IEC/E 60068-1 15 / 055 / 04 1 36

Mechanical environnement Vibration resistance according to IEC/E 60068-2-6 Amplitude : 0.35 mm Frequency : 10 55 Hz Electromagnetic environment Immunity to electrostatic discharges acc. IEC/E 61000-4-2 8 kv (air) Immunity to electrostatic fields acc. EV 50140/204 CEI/E 61000-4-3 10 V / m Immunity to rapid transient bursts acc. to IEC/E 61000-4-4 2 kv Immunity to shock waves according to IEC/E 61000-4-5 Between wires for power supply : 1 kv Between wires and ground : 2 kv Immunity to radio frequency in common mode acc. to IEC/E 61000-4-6 10 V Interference suppression according to IEC/E 55011 Limit value class B Housing Material : self-extinguishing (UL94VO) Thermoplastic with V0 extinction behaviour Protection (IEC 60529) - Casing IP40 Protection (IEC 60529) - Term. block IP20 Mounting DI-rail Weight (g) 220 Standards and approvals Approvals CE, TÜV Environmental directive 2002/95/CE RoHS Environmental regulation 1907/2006 Reach Security data according to E ISO 13849-1 Performance Level (PL) : e Category : 4 SIL Claimed Level (SIL CL) to IEC/E 62061 3 Safety Integrity Level (SIL) according to CEI/E 61508 3 Safety category to E 954-1 4 Aufzugsnorm E 81-1, -2 Dimensions (mm) Screw terminals 22,5 121 118 35 84 37

Connections Front face drawing KZHU-YS Contacts Front face drawing KZHV-YS A1 Y1 Y2 13 23 24 41* A1 Y11 13 23 Y12 Y22 K1 Y1 Y2 K2 A2 Y21 14 24 14 Y11 Y12 42* 41* 42* Y21 Y22 A2 * : only for KZHV-YS version A1 (+) : + / L A2 : - / Y1, Y2 : Validation input Y11, Y21, Y12, Y22 : Control inputs 13, 14, 23, 24, (33, 34) * : Safety circuit outputs (forcibly guided O contacts) (41, 42) * : Monitoring output (forcibly guided C contact) * : only for KZHV-YS version Principles Safety related data Curves Function diagram E ISO 13849-1: Category: 4 PL: e MTTF d : > 100 a (year) DC avg : 99,0 % d op : 365 d/a (days/year) h op : 24 h/d (hours/day) t cycle : 3600 s/cycle 1 /h (hour) IEC/E 62061 IEC/E 61508: SIL CL: 3 IEC/E 62061 SIL 3 IEC/E 61508 HFT *) : 1 DC avg : 99,0 % SFF 99,7 % PFH D : 1,97E-10 h -1 *) HFT = Hardware failure tolerance Switch S1 Switch S2 Relay K1 Relay K2 Outputs 13-14 23-24 Automatic Start Applications Relevelling Zone Check L1 S Pos 1 S Pos 2 A1(+) Y11 Y1 Y2 Y12 Y22 Y21 13.... KZHU-YS / KZHV-YS A2(-) 14.... S1, S2: Switches S2 : automatic start 38

Crouzet Automation & Control Behind every project, technologies and expertise Local support for all industrial projects. A multi-skilled team. A sales presence in over 40 countries. A Premium offer designed to ensure the excellence of products and services. Eco-design integrated in Crouzet's "Offer Creation Process". Certifications: ISO 9001, ISO 14001, OHSAS 18001. Products which comply with international standards (UL, CSA, EC). A dynamic R&D department. In addition to this catalogue, the website offers the latest tools, available as free downloads, including technical data sheets and installation manuals for each product. 39

Safety Standards - Highlights 1. Safety-related switching functions The standards mentioned in the introduction describe the main requirements for safety-related switching circuits. The following is an extract from them. 1.1 Emergency stop circuits In order to achieve quick stopping of dangerous movement in emergency situations, reliable operation of the emergency stop device is crucial. Therefore, appropriate circuits must prevent failures of devices downstream of an emergency stop device or a properly functioning protection device. E 60204-1 Safety of machinery Electrical equipment Actions in an emergency (emergency isolation or emergency stop) E ISO 13850 describes the design principles for emergency stop equipment. Emergency isolation and emergency stopping are complementary protective measures for minimizing risks on machines (see E ISO 12100). Emergency isolation relates to the actual operation of a machine, while emergency stop is directly related to switching on/off. They are initiated by a single main action and must be maintained effective up to a manual reset action at the location where the incident occurred, along with the control commands initiated by them. Resetting only enables the machine, it does not switch it on, or restart it. This must be performed as a separate operation. Emergency isolation [E ISO 13850] Emergency isolation must operate in compliance with stop categories 0 or 1 depending on the risk assessment carried out for the machine. The following applies in addition to the requirements for stopping: - Priority over all other functions and operations in all operating modes. - Interruption of the power supply to machine drives that may cause a hazardous situation must occur without further hazards either immediately (stop category 0) or in a controlled way as soon as possible (stop category 1). Emergency stop This is the disconnection of the corresponding power supply using an electromechanical switching device (stop category 0). If stop category 0 is not allowed for the machine, other measures such as protection against direct contact may be required. An emergency stop must be provided when danger or damage is possible and protection against direct contact can only be achieved by distance or placing obstacles upstream of the electrical supply. Stop functions There are three categories: - Stop category 0: Uncontrolled stop: by immediate interruption of the power supply (to the motor drive components). - Stop category 1: Controlled stop, the power supply is maintained to allow the machine to stop and is then interrupted. - Stop category 2: Controlled stop, with the power supply maintained. 1.2 Stop The Stop functions in the above categories must be selected as a result of a risk assessment and the machine requirements. If necessary, facilities for connecting guards and interlocks must be provided. Resetting the stop function must not lead to a hazardous situation. If required according to the risk assessment, stop commands must be available for each workstation. 1.3 Control functions in fault situations General requirements Depending on the risk level of the individual application, appropriate measures must be taken when failures or malfunctions may cause hazardous situations or damage to the machine or production materials. Electrical control circuits must be created with an adequate safety performance level determined by a risk assessment of the machine. The requirements of IEC/E 62061 and/or E ISO 13849-1 must then be applied. Risk reduction is possible by means of (but not limited to): - Protective equipment on the machine - Safety interlocking of the electrical circuit - Providing redundancy or diversity in part or completely - Running operational tests Hazardous situations due to a power failure or loss of memory content, i.e. removing batteries, must be prevented. Unauthorized or accidental changes to the memory content must be prevented by appropriate methods, i.e. use of a key, etc. Use of partial or complete redundancy The use of redundancy can minimize the chance of a single fault resulting in a dangerous situation. When used in normal operation it is referred to as online redundancy. A design where specific circuits perform the safety function only when the operational function fails is referred to as offline redundancy. When offline redundancy is provided which is not effective during operation, precautions must be taken to ensure that these circuits will activate when required. 40

Use of diversity Control circuits with different operating principles or the combination of different components and devices can reduce the probability of hazards due to faults and/or failures. These include, but are not limited to: - C-O combinations, actuated by interlocked safety devices - Use of control components of different design - A combination of electromechanical and electrical equipment in redundant systems Combinations of electrical and non-electrical systems (e.g. mechanical, hydraulic, pneumatic) can perform the redundant function and ensure diversity. 1.4 Two-hand control In ISO 13851, three types of two-hand control are defined for use depending on the likely risk: Type I: ot suitable for the initiation of dangerous operations: - Two control devices, simultaneous actuation by both hands - Continuous simultaneous actuation during the dangerous operation - Stopping of machine operation when one or both control devices are released and the dangerous situation is still present Type II: As type I, but both control devices must be released before the machine can be restarted. Type III: As type II, but simultaneous actuation must be as follows: - Control devices must be actuated within 0.5 seconds. - If this time is exceeded, both control devices must be released before the machine can be restarted. 1.5 E 13850: Safety of machinery Emergency stop, principles for design Emergency stop function - Prevents the occurrence of hazards (to persons, to machines and production materials) or minimizes those already present - Must be initiated by a single action by one person General requirements The emergency stop must be available and operational at all times and must have priority over other functions and operations in all machine operating modes, but without affecting devices provided for rescuing trapped persons. o start command must be able to affect an initiated emergency stop function until the emergency stop function has been manually reset. The emergency stop function should be designed as a complementary protective measure and must not be a substitute for protective measures or other safety functions, nor affect their efficiency. Depending on the risk assessment, the emergency stop function must be designed so that - after actuation of the emergency stop device - dangerous movements and machine operations are stopped in an appropriate way without causing further hazards and without intervention by any person. Such methods may include: - Selection of an optimum time delay - Selection of the Stop category - Application of a defined stopping sequence An emergency stop must be designed so that the decision to actuate it does not require anyone to consider the effects resulting from this. After initiating an emergency stop device/command, the effect must be maintained until it is manually reset. A reset must only be performed at the location where the emergency stop command is issued and restarting must only be possible after a manual reset at this location. The Stop category of the emergency stop must be selected according to the risk assessment for the machine. Stop category 0: Stopping by: - Immediate interruption of the power supply to the machine drive components - Mechanical separation (decoupling) between dangerous parts and their drive components (by braking if necessary) Stop category 1: Controlled stopping with power supply to the machine drive components in order to achieve a stop, then - after the machine has stopped - interruption of the power supply. Interruption of the power supply may include: - Disconnecting the power supply to the machine s electric motors - Disconnecting movable parts of the machine from the source of mechanical energy - Cutting off hydraulic/pneumatic power sources to a piston/plunger Emergency stop device - Manually actuated control device for initiating an emergency stop function 41

Safety Standards - Highlights 2. Functional safety - principles for design 2.1 General points Required safety-related performance These requirements have been modified by standards E ISO 13849-1 which replaces E 954-1 (obsolete since 31/12/2011) and IEC/E 62061; they have been calculated and defined in the form of a system and risk analysis. For each detected danger, a safety function including validation is specified. These standards also provide support tools for defining the required safety integrity. Application of standards E ISO 13849-1 or IEC/E 62061 E ISO 13849-1: - Also for non-electric systems, i.e. mechanical, hydraulic, etc. - For specific architectures - Categories ( E 954-1) are maintained, additional probability components result in the PL (Performance Level) in the given category, thus different performance levels are possible for each category IEC/E 62061: - For all electrical and electronic systems - All architectures - Breaking down of the safety-related electrical control system into safety-related control functions and interpretation of the SIL classification (Safety Integrity Level) Determination of the required safety integrity Result of the risk analysis = required system safety Safety functions with associated Safety Performance: E ISO 13849-1: Risk graph, result = PLr per safety function IEC/E 62061: Risk assessment and safety measures form Result = SIL of the safety measurement per unit of risk 2.2 Risk assessment and selection of an appropriate category 2.2.1 Standard E 954-1 Risk graph according to E 954-1: 1997, Annex B S1 S2 Risk parameters S - Severity of injury S1 - Slight (normally reversible) injury S2 - Serious (normally irreversible) injury, including death F - Frequency and/or duration of exposure to hazard F1 - Seldom to less often and/or exposed time is short F2 - Frequent to continuous and/or exposed time is long P - Possibility of avoiding the hazard or limiting damage P1 - Possible under specific conditions P2 - Scarcely possible Preferred category for reference points F1 F2 P1 P2 P1 P2 Category selection B 1 2 3 4 Possible categories that require additional measures O Measures that may be oversized for the risk concerned 42

2.2.2 Standard E ISO 13849-1 ew risk graph in standard E ISO 13849-1 The PL is determined by evaluating the following aspects: Quantitative: - MTTF d - DC - CCF - Safety related part of the central system. Other parameters can have an influence, i.e. specification level, test cycles, etc. Qualitative: - Behaviour of safety functions under fault conditions - Ability to perform the safety functions under foreseeable environmental conditions, etc. 1 S1 S2 F1 F2 F1 F2 P1 P2 P1 P2 P1 P2 P1 P2 low risk PL r a b c d e Definitions of sub- category high risk Category B (PL a,b): - Usually single-channel - CCF not relevant - A single failure results in loss of the safety function Category 1 (PL c): - Satisfies category B - A single failure results in the loss of the safety function, but the probability for this is lower than for category B Category 2 (PL a,b,c,d): - Satisfies category B - Test of functionality at appropriate time intervals - In the event of failure, initiation of a safe condition with at least signalling of a fault - Measures against CCF (e.g. diversity) - Test itself must not cause any danger - A failure between tests may result in the loss of the safety function, but is detected during the test. Category 3 (PL b,c,d): - Satisfies category B - Measures against CCF - A single failure does not result in the loss of the safety function and must be detected before a new request if possible - An accumulation of non-detected failures can result in loss of the safety function Category 4 (PL e): - Satisfies category B - Measures against CCF - A single failure does not result in loss of the safety function. It must be detected before a new request or the accumulation of unrecognised failures does not result in loss of the safety function. - Failures are detected in good time to prevent the loss of the safety function. - An accumulation of unrecognised failures is taken into account. Risk parameters S - Severity of injury S1 - Slight (normally reversible injury S2 - Serious (normally irreversible) injury, including death F - Frequency and/or duration of exposure to hazard F1 - Seldom to less often and/or exposed time is short F2 - Frequent to continuous and/or exposed time is long P - Possibility of avoiding the hazard or limiting damage P1 - Possible under specific conditions P2 - Scarcely possible a,b,c,d,e Safety-related Performance Level designations The risk assessment allows the manufacturer to optimise the basic safety- related requirements for the machine-specific data depending on the machine operating conditions. Both the manufacturer and the user are responsible for interpreting the risk correctly. Quantitative determination of the risk is difficult. For this reason, the acceptable risk can be determined within a wide range when it comes to selecting the category. This clarifies why we select F2 - Frequent to continuous rather than F1 - Seldom to less often for the risk parameter F - Frequency and exposure duration in the risk graph (see figure). There is a wide range of safety levels between the assessments less often and frequent. 3. Further safety measure ote: For products with a high qualitative value, reliability can lead to a PL e for a category 3 structure. Cut-off delay For controlled stopping according to stop category 1, it may be advisable to have a cut-off delay, e.g. a motor braking function designed to stop a dangerous movement quickly. 43

Glossary Terminology B B 10d umber of cycles until 10% of the components have failed dangerously (for pneumatic and electromechanical components). [E ISO 13849-1] Basic device Evaluation unit that includes all basic functions required in safety systems as a minimum to generate a safety-related output signal. C Category Classification of safety-related parts of a control system with respect to their resilience to faults (B, 1, 2, 3, and 4) and behaviour during faults. This classification derives from the structural arrangement of the parts and/or their reliability [E 954-1, see also E ISO 13849-1]. D DC CCF Common Cause Failure Failure of different units following a single event, with the failures not being caused by one another. Concurrency control Concurrency control of signal transmitters by the safety-related evaluation unit is used to increase the functional safety of the protective safety device. It monitors signal changes in the signal transmitters for a specified time - the synchronous monitoring time. If this time is exceeded, no enable signal will be issued. Concurrency control is required for several safety devices (Two-hand controls, for example). Cross-circuit fault Short-circuit between the input channels of an emergency stop module. OTE: This type of short-circuit can only occur with multi-channel controls. Cross-circuit fault detection This is the ability of a safety relay to go into a defined safe condition either immediately or as a part of a cyclical check, after the fault has been detected. Diagnostic Coverage Ratio between the failure rate of detected dangerous incidents and the failure rate of all dangerous incidents. Discrepancy control Tolerates lack of synchronization of related signals in the same assembly during a defined time window. ote 1: The term Concurrency control is also used. ote 2: The signal transmitters are monitored to increase functional safety. This consists of checking the signal change over a specified time. If this time is exceeded, no enable signal will be issued. This type of control is required for some safety systems (e.g. two-hand controls). E Emergency F Fault Door guard Monitors the state of position sensors on an isolating switch. It generates a safety-related output signal when the door is closed. stop Shutdown in the event of an emergency. Emergency stop buttons Signal transmitters. Emergency stop device An emergency stop device is an arrangement of components to perform the emergency stop function. (E 13850/E 60947-5-5 / E 60204-1) tolerance time Time interval during which the process can receive incorrect control signals without a hazardous state occurring. Feedback loop Monitors controlled actuators. OTE: The SRECS can only be activated when the feedback loop is closed. Feedback for relays or contactors, for example, is via positively-driven contacts. ormally closed contacts are connected in series and integrated in the feedback loop of the SRECS. If a contact is welded in the enable circuit, then it will no longer be possible to reactivate the SRECS because the feedback loop remains open. First fault occurrence time: This is the time interval during which the probability of a safetycritical first fault occurring in the relevant requirement class is sufficiently low. The time interval starts at the moment when the relevant system was in a fault-free state as defined for the relevant category. OTE: Measures to eliminate faults are not taken into account at this stage. FIT Failure in Time Describes the failure rate of technical components, especially electronic components. The FIT indicates the number of components that fail within 109 hours. Statistically, components having a high FIT value fail more frequently than those having a lower FIT value. Failure rate for a FIT value = 1/109 hours means once in approx. 114,000 years. λ Failure rate Failure rate of a component expressed in FIT. λ total Failure rate total Failure rate of the device expressed in FIT. MMTTFd (Mean Time To dangerous Failure) Average running time before dangerous failure. 44

O Occurrence time for multiple faults: This is the time interval during which the probability of a combination of safety-critical multiple faults occurring is sufficiently low for the relevant requirement class. The time interval starts at the moment when the relevant system was in a fault-free state as defined for the relevant category. Output expansion module SRECS unit that can only be used in connection with a basic device in order to increase the number of outputs. Output expansion modules are included in the cyclical self-check. P PFD Probability of Failure on Demand = probability of a safety function not being executed on demand. PFH d Probability of Dangerous Failure per Hour. The failure threshold PFD is used for low failure rates, while the failure threshold PFH is used for high or continuous failure rates. PL Performance Level Discrete level of safety-related capability. PLa is the lowest and PLe the highest level [E ISO 13849-1]. PL r Performance Level required PL applied to obtain the necessary risk reduction for each safety function. Position control Controls the position of a guard (i.e. protective door) using a Signal transmitter and interpretation unit. Positively-driven contacts Positively-driven means that no C contact may close if any O contact is not open. Also, no O contact may close when an C contact is not open. Example: If an O contact is welded, all the other C contacts of the relay/contactor concerned remain open no matter whether the relay/contactor is energised or not. Positive opening Contact opening as a direct result of a defined movement of a switch s operating element using non-sprung parts [E 60204-1]. OTE 1: For electrical equipment on machinery, positive opening of C contacts is expressly required for all safety circuits. OTE 2: According to E 60947-5-1-k, positive opening is designated by the symbol (arrow in a circle) (protection of persons function). R Redundancy The availability of more devices or systems than necessary for a function. OTE: Several functional groups are used for the same function (i.e. multi-channel structure). In particular in safety engineering, this means the duplication of critical components [E ISO 12100-2]. S Safety Reset Resetting to a defined condition. Restart inhibit The restart inhibit prevents an SRECS from issuing an enable signal after a failure, change of machine operating mode or change of the actuation type. OTE: The restart inhibit is only removed by an external command (e.g. Reset pushbutton). Risk The combination of probability that damage will occur and the extent of the damage [E ISO 12100-1]. OTE: Severity of the damage, exposure to a hazard, probability of occurrence and lack of fallback procedures are all influencing factors [E ISO 14121]. Risk assessment This is the evaluation of safety-related requirements taking account of the extent of damage, probability of occurrence and risk classification. Please note that as a rule, the extent of damage is the element that determines the hazard sequence. Either the limit of probability or frequency of occurrence has to be estimated or a permissible limit defined for each risk. The hazard sequence establishes the ratio between the recognised hazards and the risk assessment. The hazard sequence connects hazards and dangerous events that may cause an accident. Hazards are evaluated by allocating a Category, a requirement class, a Safety Integrity Level (SIL) or Performance Level (PL). E ISO 14121 describes the methodology required to perform a risk assessment. According to this, the risk assessment includes an initial risk analysis and subsequent interpretation of the risk. device Technical means of avoiding danger to persons, production materials and the environment. Self-checking Correct component operation is automatically and cyclically checked. SFF Safe Failure Fraction Proportion of harmless failures. Signal transmitters Emergency stop buttons for actuation in hazardous situations to stop a process, machine or plant. These devices must have positive-opening contacts, should be easily accessible and tamper-proof [E 13850; E 60204]. Position sensors are part of the interlocking device of a guard. They change switching state as a function of a mechanicallyissued run command. Reset button in an SRECS represented by a Restart inhibit which can only be removed by an actuation command. Cable-operated switches cause a stop category 0 when the cable is pulled or the cable breaks. 45

Enabling switches must be manually operated to remove the protection function on the corresponding devices. They cannot prevent the occurrence of hazardous conditions by themselves. For this, a second deliberate command is necessary. SIL Safety Integrity Level Discrete level used to define the requirements for the safety integrity of the safety functions. SIL 3 is the highest level and SIL 1 the lowest = target for the probability of failure of functions designed to reduce risk [IEC/E 62061]. SIL CL Safety Integrity Level Claim Limit; Max. SIL for a subsystem [IEC/E 62061]. Single-channel control: Control via one signal transmitter output. SLS Safely-Limited Speed The SLS function prevents a motor exceeding a defined speed limit. [E 61800-5-2]. SOS Safe Operating Stop The SOS function prevents the motor from deviating from the stop position by more than one unit. SRECS Safety-Related Electrical Control System A safety-related evaluation unit, i.e. command, module, switching device, interpretation unit. SSM Safe Speed Monitor The SSM function provides a safe output signal to indicate whether the motor speed is below a defined threshold [E 61800-5-2]. Start Automatic start An enable signal is generated without manual confirmation after checking of the input configuration and positive test by the SRECS. OTE: This function is also referred to as dynamic operation and is not suitable for emergency stop equipment. Manual start An enable signal is generated by pressing the Reset button and after checking of the input configuration and positive test by the SRECS. OTE: This function is also referred to as static operation and is required for emergency stop equipment ( Stop function) [IEC/ E 60204-1]. Stop function [E 60204-1] Stop category 0 Uncontrolled stopping by immediately disconnecting the power supply to the machine drive components. T Two-channel Stop category 1 Controlled stopping where the power supply is only interrupted once the machine has stopped. Stop category 2 Controlled stopping where the power supply is still maintained even at standstill. Stopping in an emergency This is an operation in an emergency used to stop a process or movement that has become hazardous [E 60204-1:2006 Annex E]. Switching off in emergency Action taken in an emergency to cut off the electrical supply to all or part of the installation if there is a risk of electric shock or another risk of electrical origin [E 60204-1:2006 Annex E]. Its purpose is to prevent or reduce the occurrence or persistence of hazards to persons and damage to machinery, products or the environment. Synchronous monitoring time This is the time during which simultaneous actuation must occur in order to generate an output signal. Two-hand control control: Control via two signal transmitter outputs. Two-hand control This is a device which requires at least simultaneous action with both hands to start and maintain the operation of a machine as long as a hazard is present. Its purpose is to protect a single operator [E 574]. OTE: In order to initiate the hazardous operation, both operating elements must be simultaneously actuated ( Discrepancy control). The enable signal is withdrawn when one of the two operating elements is released during the potentially dangerous movement. The dangerous operation can only be restarted if both operating elements have returned to their initial position and are then re-actuated. 46

otes 47

Custom Sensors & Technologies (CST) is a specialist in sensing, control and motion products. Through its brands, BEI Kimco, BEI Sensors, BEI PSSC, Crouzet, Crydom, Kavlico, ewall and Systron Donner Inertial, CST offers customizable, reliable and efficient components for mission-critical systems in Aerospace & Defence, Transportation, Energy & Infrastructures, Commercial & Industrial OEMs, Medical, Food and Beverage and Building Equipment markets. Focused on premium value offers and committed to excellence, CST, with 4700 employees worldwide and sales of $660M US in 2011, is the dependable and adaptable partner for the most demanding customers. www.cstsensors.com AmeRICA BRAZIL Custom Sensors & Technologies Crouzet Latinoamerica Alameda Rio egro 1030 - cj 1803 - Alphaville - Barueri SP - CEP 06454-000 BRASIL Tel.: +55 (11) 2505 7500 Fax: +55 (11) 2505 7507 E-mail: info@cst-latinoamerica.com.br www.cst-latinoamerica.com USA/CAADA Custom Sensors & Technologies - Crouzet 7230 Hollister Avenue Goleta, CA, 93117 USA Tel.: +1 (800) 677 5311 Fax: +1 (800) 677 3865 E-mail: customer.service@us.crouzet.com mexico Custom Sensors & Technologies - Crouzet Calzada Zavaleta 2505-C Santa Cruz Buenavista - Puebla. 72150 MEXICO Tel.: +1 (222) 409 7000 Fax: +1 (222) 409 7810 E-mail: mexico@cstsensors.com other CoUtRIeS Custom Sensors & Technologies Crouzet Latinoamerica Alameda Rio egro 1030 - cj 1803 - Alphaville - Barueri SP - CEP 06454-000 BRASIL Tel.: +55 (11) 4195 1834 Fax: +55 (11) 4191 9136 E-mail: info@cst-latinoamerica.com.br www.cst-latinoamerica.com europe middle east AfRICA BeLGIUm Crouzet V/SA Dieweg 3 B B - 1180 Uccle BELGIUM Tel.: +32 (0) 2 462 07 30 Fax: +32 (0) 2 461 00 23 E-mail: com-be@crouzet.com www.crouzet.be GeRmAy/ AUStRIA Crouzet GmbH Otto-Hahn-Str. 3, 40721 Hilden Postfach 203, 40702 Hilden DEUTSCHLAD Tel.: +49 (0) 21 03 9 80-108 Fax: +49 (0) 21 03 9 80-250 E-mail: info-direkt@crouzet.com www.crouzet.de ItALy Crouzet Componenti s.r.l. Via Viganò De Vizzi, 93/95 20092 Cinisello Balsamo (Mi) ITALIA Tel.: +39 (02) 66 599 220 Fax: +39 (02) 66 599 228 E-mail: crz-it-microcontrol@crouzet.com www.crouzet.it SpAI/poRtUGAL Crouzet Ibérica Avda. Dels Vents, 9-13 Esc.A 3ª Planta Oficina 2B 08917 Badalona ESPAÑA Tel.: +34 (93) 484 39 70 Fax: +34 (93) 484 39 73 E-mail: es-consultas@crouzet.es www.crouzet.es the etherlads Crouzet BV Industrieweg 17 2382 R Zoeterwoude EDERLAD Tel.: +31 (0) 71-581 20 30 Fax: +31 (0) 71-541 35 74 E-mail: com-nl@crouzet.com www.crouzet.nl UIteD KIGDom Crouzet Ltd 8 Cedarwood Chineham Business Park Crockford Lane Basingstoke, Hampshire RG24 8WD UITED KIGDOM Tel.: +44 (0)1256 318 900 Fax: +44 (0)1256 318 901 E-mail: info@crouzet.co.uk www.crouzet.co.uk SwItZeRLAD Crouzet AG Gewerbepark - Postfach 56 5506 Mägenwil SCHWEIZ Tel.: +41(0) 62 887 30 30 Fax: +41(0) 62 887 30 40 E-mail: info-direkt@crouzet.com www.crouzet.ch ASIA pacific ChIA & hog KoG Custom Sensors & Technologies Asia (Shanghai) Limited - Crouzet 13th floor, Chang Feng International Tower, 89 Yunling Road (East), Putuo District Shanghai 200062 CHIA Tel.: +86 (21) 6065 6699 Fax: +86 (21) 6065 7749 E-mail: china@cstsensors.com www.crouzet.cn www.cstsensors.com IDIA CST Sensors India Pvt Ltd 4th Floor, Trident Towers, o 23, 100 Feet Ashoka Pillar Road, 2nd Block, Jaynagar Bangalore 560 011 IDIA Tel.: +91 (0) 80 4113 2204/05 Fax: +91 (0) 80 4113 2206 E-mail: india@cstsensors.com www.crouzet.co.in www.cstsensors.com taiwa & japa Custom Sensors & Technologies - Crouzet 2F, o. 39, Ji-Hu Road ei-hu Dist. - Taipei 114 TAIWA Tel.: +886 (0)2 8751 6388 Fax: +886 (0)2 2657 8725 E-mail: taiwan@cstsensors.com www.cstsensors.com KoReA Custom Sensors & Technologies - Crouzet 14F, Kbiz DMC Tower. 189, Seongam-ro Mapo-gu, Seoul 121-904 SOUTH KOREA Tel.: +82 (0)2 2629 8312 Fax: +82 (0)2 2629 8310 E-mail: korea@cstsensors.com www.cstsensors.com SoUth east ASIA & pacific Custom Sensors & Technologies - Crouzet 2F, o. 39, Ji-Hu Road ei-hu Dist. - Taipei 114 TAIWA Tel.: +886 (0)2 8751 6388 Fax: +886 (0)2 2657 8725 E-mail: eap@cstsensors.com www.cstsensors.com Distributed by: Crouzet Automatismes SAS 2 rue du Docteur Abel - CS 60059 26902 Valence CEDEX 9 FRACE frace Crouzet Automatismes SAS 2 rue du Docteur Abel - CS 60059 26902 Valence CEDEX 9 FRACE Tel.: +33 (0) 4 75 44 88 44 Fax: +33 (0) 4 75 55 98 03 E-mail: com-fr@crouzet.com www.crouzet.fr Customer service Tel.: +33 (0) 4 75 80 21 01 Fax: +33 (0) 4 75 82 89 00 other CoUtRIeS Crouzet Automatismes SAS 2 rue du Docteur Abel - CS 60059 26902 Valence CEDEX 9 FRACE Tel.: +33 (0) 475 802 102 Fax: +33 (0) 475 448 126 E-mail: com-ex@crouzet.com Creation-Design: Actitudes, Communication Crouzet Editing-Publishing: Crouzet Automatismes, Dold Photos-Graphics: Ginko, Dold Printing: PDF Warning: The product information contained in this catalogue is given purely as information and does not constitute a representation, warrantly or any form of contractual commitment. CROUZET Automatismes and its subsidiaries reserve the right to modify their products without notice. It is imperative that we should be consulted over any particular use or application of our products and it is the responsability of the buyer to establish, particularly through all the appropriate tests, that the product is suitable for the use or application. Under no circumstances will our warranty apply, nor shall we be held responsible for any application (such as any modification, addition, deletion, use in conjunction with other electrical or electronic components, circuits or assemblies, or any other unsuitable material or substance) which has not been expressly agreed by us prior to the sale of our products. CRZ CP 10/B Ref. 6710015/ 12/2012 48 E