Siemens Profisafe
Siemens Profisafe
Reintegration of F-/O
We do not accept any liability for the information contained in this document.
Any claims against us – based on whatever legal reason – resulting from the use of
the examples, information, programs, engineering and performance data etc.,
described in this Application Example shall be excluded. Such an exclusion shall
not apply in the case of mandatory liability, e.g. under the German Product Liability
Act ("Produkthaftungsgesetz"), in case of intent, gross negligence, or injury of life,
body or health, guarantee for the quality of a product, fraudulent concealment of a
deficiency or breach of a condition which goes to the root of the contract
Siemens AG 2017 All rights reserved
Security Siemens provides products and solutions with industrial security functions that
informa- support the secure operation of plants, systems, machines and networks.
tion In order to protect plants, systems, machines and networks against cyber
threats, it is necessary to implement – and continuously maintain – a holistic,
state-of-the-art industrial security concept. Siemens’ products and solutions only
form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems,
machines and networks. Systems, machines and components should only be
connected to the enterprise network or the internet if and to the extent necessary
and with appropriate security measures (e.g. use of firewalls and network
segmentation) in place.
Additionally, Siemens’ guidance on appropriate security measures should be
taken into account. For more information about industrial security, please visit
http://www.siemens.com/industrialsecurity.
Siemens’ products and solutions undergo continuous development to make them
more secure. Siemens strongly recommends to apply product updates as soon
as available and to always use the latest product versions. Use of product
versions that are no longer supported, and failure to apply latest updates may
increase customer’s exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial
Security RSS Feed under http://www.siemens.com/industrialsecurity.
Table of Contents
Warranty and Liability ................................................................................................. 2
1 Introduction ........................................................................................................ 4
2 Functionality of reintegration ........................................................................... 5
2.1 Possibilities for reintegration ................................................................ 5
2.1.1 Manual and automatic reintegration ..................................................... 5
2.1.2 Realizing the reintegration in the safety program ................................ 5
2.2 PROFIsafe profile RIOforFA-Safety ..................................................... 7
2.3 Value state and QBAD ......................................................................... 8
2.3.1 Using the value state in the safety program ......................................... 8
2.3.2 Important difference to QBAD .............................................................. 8
2.3.3 Differences in the evaluation with F-CPUs S7-1200/1500 and
S7-300/400 ......................................................................................... 11
3 Application Example ....................................................................................... 11
3.1 Overview and faults to be shown ....................................................... 11
3.1.1 S7 project with S7-1500 F-CPU and ET 200SP ................................ 12
3.1.2 S7 project with S7-1200 F-CPU ......................................................... 13
3.2 Components used .............................................................................. 14
3.2.1 STEP 7 project with S7-1500 F-CPU and ET 200SP ........................ 14
3.2.2 STEP 7 project with S7-1200 F-CPU ................................................. 14
3.3 Configuring the passivation ................................................................ 15
Siemens AG 2017 All rights reserved
1 Introduction
Content
The present application example describes the passivation and reintegration of F-
I/O. With two provided STEP 7 projects (for the S7-1200 or S7-1500), you can
reproduce the statements contained in this document.
Passivation
Due to the safety function, a fail-safe module (F-Module) automatically outputs
substitute values instead of process values in the following cases:
Start-up of F-System
Fault at fail-safe communication (communication fault) between F-CPU and F-
I/O via the PROFIsafe safety protocol.
F-I/O/channel fault (e.g. wire break, short circuit, discrepancy fault)
Activating a passivation of F-I/O in the F-I/O DB with PASS_ON = 1.
If an F-channel outputs substitute values, it is passivated.
The table below shows possible faults that cause passivation.
Table 1-1: Possible faults that cause passivation
Fault scenario F-Module/ F-I/O Possible fault trigger
F-DI/F-DQ centrally in S7-1500 F-CPU
Siemens AG 2017 All rights reserved
Reintegration
After eliminating the fault that caused the passivation, the switchover from
substitute values to process values can be performed. The switchover can be done
automatically or after a user acknowledgment in the safety program.
The switchover is referred to as "reintegration".
The type of reintegration depends on:
the cause for the passivation of the F-I/O or the channels of the
F-I/O
a configuration that is to be done by you in the F-I/O DB or the configuration of
the F-Module S7-1500/ET 200MP/F-Module S7-1200 and, where appropriate,
of the DP norm slaves/IO norm devices according to the "RIOforFA-Safety"
profile.
2 Functionality of reintegration
This chapter provides the following knowledge:
Fundamental possibilities for the reintegration (Chap. 2.1);
PROFIsafe-Profil RIOforFA-Safety (Chap. 2.2)
Binary information from the QBAD bit from the F-I/O DB and the value state
from the process image of the inputs (PII) (Chap. 2.3).
*1)
Channel fault or peripheral fault Communication fault
w In the hardware In the hardware In the hardware
configuration configuration configuration
i
"Channel fault "Channel fault Not possible "Channel fault
t
acknowledgement = acknowledgement = acknowledgement =
h Automatic" Manual" Manual"
RIOforFA- w
Safety i
profile t F-I/O DB: F-I/O DB: F-I/O DB:
h Not possible
o ACK_NEC=0 ACK_NEC=1 ACK_NEC=1
u
t
Automatic Manual Automatic Manual
Type of reintegration
*1) The behavior after a communication fault cannot be configured. A manual reintegration
must always be performed.
Depending on whether the F-Module supports the RIOforFA-Safety profile, you
need to perform the settings via the hardware configuration or via the
F-I/O DB.
ACK_REI or ACK_GL
Reintegration into the safety program is only possible if:
you have configured "Manual reintegration" in the hardware configuration and
the F-Module supports the RIOforFA-Safety profile, or
the ACK_NEC parameter of the F-I/O DB is set to 1 and the
F-Module does not support the RIOforFA-Safety profile.
If you want to reintegrate channels of an F-Module, assign a positive edge to the
ACK_REI:
F-Peripherie-DBs
The application example alternatively uses the ACK_GL instruction from STEP 7
Safety:
Figure 2-3 "ACK_GL" from STEP 7 Safety
The following F-Modules currently (02/2017) do not yet support the RIOforFA-
Safety profile:
• Modules of the ET 200SP
Definition
The value state is a binary additional information on a channel value of an
F-IO and is entered into the process image of the inputs (PII).
1: A valid process value is output for the channel
0: A substitute value is output for the channel
Note The value state is inversely related to the QBAD signal of a channel from the
F-I/O DB:
QBAD = 1: A substitute value is output for the channel
QBAD = 0: A valid process value is output for the channel
The table below shows an example of the address assignment for an F-DI:
Table 2-2: Example: Address assignment in PII for F-I/O with 16 digital input channels
Byte in Assigned bits in the F-CPU per F-I/O:
the F-
7 6 5 4 3 2 1 0
CPU
Siemens AG 2017 All rights reserved
x+0 DI 7 DI 6 DI 5 DI 4 DI 3 DI 2 DI 1 DI 0
x+1 DI 15 DI 14 DI 13 DI 12 DI 11 DI 10 DI 9 DI 8
x+2 Value Value Value Value Value Value Value Value
state state state state state state state DI state
DI 7 DI 6 DI 5 DI 4 DI 3 DI 2 1 DI 0
x+3 Value Value Value Value Value Value Value Value
state state state state state state state DI state
DI 15 DI 14 DI 13 DI 12 DI 11 DI 10 9 DI 8
x = module start address
The position of the channel values in the PII can be found in the device manual of
the respective F-I/O.
In the event of a communication fault, QBAD and the value state behave the same,
regardless of whether the RIOforFA-Safety profile is supported or not.
In the event of channel or peripheral faults, QBAD does not change if the
RIOforFA-Safety profile is supported.
In the following, both of these cases are examined more closely.
F-System PAA
Channel fault
1 Q0.0
Process value “1” Q0.0 = “1” “1”
2
Substitute value “0” Q0.0 = “0” Substitute value “0”
3
!
RIOforFA-Safety profile is supported
In the event of a channel fault, the PIQ remains unchanged in a fault scenario.
The channel state is exclusively represented by the value state.
Example:
1. Process value "1" is written into the PIQ and output via F-DQ.
2. Despite a channel fault, the process value "1" remains unchanged in the PIQ.
3. Via the F-DQ, the substitute value is output in case of value state = 0, in case
of value state = 1, the process value would be output.
Figure -6 PIQ if RIOforFA-Safety is supported
F-System PAA
Channel fault
Siemens AG 2017 All rights reserved
1 Q0.0
Process value “1” Q0.0 = “1” “1”
In the event of channel and peripheral faults, the value state switches to 0
in a fault scenario, however, QBAD remains unchanged!
WARNING The module state in a channel or peripheral fault case needs to be
determined via the value state!
Table 2-3: Behavior of channel states. Tags and value state depending on the used F-I/O and F-CPU
Substitute value output F-I/O with F-I/O without F-I/O with F-CPU
to... "RIOforFA-Safety" "RIOforFA-Safety" S7-300/400
profile with F-CPU S7- profile with FCPUs S7-
1200/1500 1500
Start-Up of F-System QBAD and PASS_OUT= 1 QBAD and
The following applies for all channels: PASS_OUT= 1
Communication fault The following applies
Channel value = substitute value (0)
F-I/O fault for all channels:
Value state = 0* Channel value =
Channel fault during
substitute value (0)
configuration
QBAD_I_xx and
passivation of the entire
QBAD_O_xx = 1*
F-I/O
Channel fault during QBAD and PASS_OUT QBAD and QBAD and
configuration Unchanged PASS_OUT= 1 PASS_OUT= 1
channel granular The following applies The following applies The following applies
passivation for affected channels: for affected channels: for affected channels:
Channel value = Channel value = Channel value =
Siemens AG 2017 All rights reserved
In the following table, you will find a description of the differences regarding the
evaluation of tags of the F-I/O DB or the value state, depending on the used F-I/O
and the F-CPU.
Table 2-4: Differences in the evaluation with F-CPUs S7-1200/1500 and S7-300/400
Tag in F-I/O DB or F-I/O with "RIOforFA- F-I/O without F-I/O with F-CPU
value state "RIOforFA-Safety" S7-300/400
Safety" profile with F-
profile with F-CPU S7-
CPU S7-1200/1500
1200/1500
2
ACK_NEC - x x
3
QBAD x x x
3
PASS_OUT x x x
1
QBAD_I_xx - - x
1
QBAD_O_xx - - x
1
Value state x x -
1
QBAD_I_xx and QBAD_O_xx show the validity of the channel value channel granularly and
therefore correspond to the inverted value status at S7-1200/1500. For fail-safe DP norm
slaves and fail-safe IO norm devices without "RIOforFA-Safety" profile, value state or
QBAD_I_xx and QBAD_O_xx are not available.
2
via configuration of F-I/O; for F-Modules S7-1500/ET 200MP or F-Modulen S7-1200 with
the parameter "Channel fault acknowledgement"
3
Explanations on behavior, see chapter "PASS_OUT/QBAD/QBAD_I_xx/QBAD_O_xx and
Siemens AG 2017 All rights reserved
value state"
3 Application Example
3.1 Overview and faults to be shown
This application example shows the functioning of the passivation and reintegration
by means of two STEP 7 projects:
S7-1500 F-CPU with central I/O modules and the
ET 200SP as distributed I/O (Chap. 3.1.1)
S7-1200 F-CPU with central I/O modules and the 200SP as distributed I/O
(Chap. 3.1.2)
The functioning will be demonstrated by means of a (two-channel) Emergency Stop
Control Device with contactors as actuators.
Note In the following two figures, the read back signals of the contactor auxiliary
contacts are not displayed for the sake of clarity.
The following figure shows the structure of the S7 project with S7-1500 F-CPU and
ET 200SP:
Figure 3-1 S7-1500 F-CPU and ET 200SP
S7-1500
F-CPU S-DI F-DI F-DQ Passivation through...
Peripheral fault
With RIOforFA
Channel fault
K1
K2
start
F-DI
Siemens AG 2017 All rights reserved
ET 200SP
DI F-DQ
stop
Without RIOforFA
Communication fault K2
The following figure shows the structure of the S7 project with S7-1200 F-CPU:
Figure 3-2 S7-1200 F-CPU
Passivation through...
S7-1200
F-CPU S-DI F-DI F-DQ
With RIOforFA
Channel fault
K1
Peripheral fault K2
start
F-DI
ET 200SP
stop DI F-DQ
Siemens AG 2017 All rights reserved
Without RIOforFA
Communication fault K2
Hardware
Table 3-1 Hardware components for S7-1500 F-CPU and ET 200SP
Component Numbe Article number
r
CPU 1516F-3 PN/DP 1 6ES7516-3FN01-0AB0
S7-1500, DI 16X24VDC 1 6ES7521-1BH00-0AB0
F-DI 16X24VDC 1 6ES7526-1BH00-0AB0
F-DQ 8X24VDC 2A PPM 1 6ES7526-2BF00-0AB0
ET 200SP, bus adapter BA
1 6ES7193-6AP00-0AA0
2XSCRJ
ET 200SP, IM155-6PN ST 1 6ES7155-6AU00-0BN0
ET 200SP, DI 8X24VDC HF 1 6ES7131-6BF00-0CA0
ET 200SP, F-DI 8X24VDC HF 1 6ES7136-6BA00-0CA0
ET 200SP, F-DQ 4XDC 24V/2A 1 6ES7136-6DB00-0CA0
Siemens AG 2017 All rights reserved
Software
Table 3-2: Software components for S7-1500 F-CPU
Component Numbe Article number
r
STEP 7 Professional V14 1 6ES7822-1..04-..
STEP 7 Safety Advanced V14 1 6ES7833-1FA14-0YA5
Hardware
Table 3-3: Hardware components for S7-1200 F-CPU and ET 200SP
Component Numbe Article number
r
CPU 1215FC DC/DC/RLY 1 6ES7215-1HF40-0XB0
SM 1221, 8 DI, DC 24V 1 6ES7221-1BF32-0XB0
SM 1226 F-DI8/16xDC24V 1 6ES7226-6BA32-0XB0
SM 1226 F-DQ 4xDC24V 1 6ES7 226-6DA32-0XB0
Software
Table 3-4: Software components for S7-1200 F-CPU
Component Numbe Article number Note
r
6ES7822-0AA04-0YA5 Or STEP 7
STEP 7 Basic V14 1
Professional
6ES7833-1FB14-0YA5 Or STEP 7 Safety
STEP 7 Safety Basic V14 1
Advanced
Siemens AG 2017 All rights reserved
The F-DI/F-DQ modules of the S7-1200 only offer channel granular passivation.
F-Peripherie-DBs
The reintegration is performed with a positive edge at the ACK_REI parameter (see
the parameter after ACK_NEC in the figure) of the
F-I/O DB. Chap. 2.1.2 shows the realization in the safety program.
WARNING
Communication fault
Regardless of whether the RIOforFA-Safety profile is supported, the following
applies for communication faults:
After communication faults, F-Modules can only be integrated manually. In this
case, the settings for manual acknowledgement are ignored. For the reintegration,
the ACK_REI parameter of the F-I/O DB requires a positive edge. Chap. 2.1.2
shows the realization in the safety program.
4 Operation
This chapter demonstrates the previously presented fault cases and the
reintegration of the F-I/O.
the F system.
The value state of the affected channels
continues to output a 0 signal.
The affected channels continue to be
passivated
2. Pressing "ack"
With ack = 1, the F library block "FDBACK"
receives the acknowledgement signal. The
actuator can then be switched on again via the
"ON" input.
5 Appendix
5.1 Service and Support
Industry Online Support
Do you have any questions or need support?
Siemens Industry Online Support offers access to our entire service and support
know-how as well as to our services.
Siemens Industry Online Support is the central address for information on our
products, solutions and services.
Product information, manuals, downloads, FAQs and application examples – all
information is accessible with just a few mouse clicks at
https://support.industry.siemens.com/
Technical Support
Siemens Industry's Technical Support offers quick and competent support
regarding all technical queries with numerous tailor-made offers – from basic
support to individual support contracts.
Please address your requests to the Technical Support via the web form:
www.siemens.de/industry/supportrequest
Service offer
Siemens AG 2017 All rights reserved
Our service offer comprises, among other things, the following services:
Product Training
Plant Data Services
Spare Parts Services
Repair Services
On Site and Maintenance Services
Retrofit & Modernization Services
Service Programs and Agreements
Detailed information on our service offer is available in the Service Catalog:
https://support.industry.siemens.com/cs/sc