Important... Read This Before Proceeding!
Use of Warnings and Cautions
EU Declaration of Conformity (DoC)
In addition, a smart, scalable safety controller can be expanded with your needs and enable remote monitoring of your machine safety systems. The safety controller can replace multiple safety relay modules in applications that include such safety input devices as emergency stop buttons, locking door switches, safety light curtains, two-hand controls, safety mats and other safety devices.
Terms Used in this Manual
A safety controller is often the ideal solution for safety monitoring, as it provides more functionality than a safety relay, at a lower cost than a safety PLC. The safety controller can also be used instead of larger and more complex safety PLCs by using additional input and/or output expansion modules.
Software
Security controls are a critical and mandatory part of any security system. This is because security controls ensure that your security measures 1) do not fail or 2) if failure is unavoidable, fail in a predictable safe manner. Banner Safety Controllers are easy-to-use, configurable and expandable modules (models XS26-2xx) designed to control multiple safety and non-hazardous input devices, providing safe stop and start functions for hazardous motion machines.
USB Connections
Ethernet Connections
Internal Logic
Password Overview
SC-XM2/3 Drive and SC-XMP2 Programming Tool
With the option to add up to eight I/O expansion modules, the XS26-2 Expandable Safety Controller has the ability to adapt to a variety of machines, including large-scale machines with multiple processes. Expansion module models have a variety of safety inputs, solid state safety outputs and safety relay outputs.
XS/SC26-2 Models
The safety controller and input modules allow safety inputs to be converted to status outputs for efficient terminal use.
XS/SC26-2 Features and Indicators
Using XS/SC26-2 Safety Controllers with Different FIDs
The checklist in the Banner Safety Controller Software shows a warning when adding a function that requires a Safety Controller with firmware other than an FID 1 Safety Controller.
Input and Output Connections
XS/SC26-2 Safety and Non-Safety Input Devices
XS/SC26-2 Safety Outputs
XS/SC26-2 Status Outputs and Virtual Status Outputs
XS/SC26-2 Automatic Terminal Optimization (ATO) Feature
SC10-2 Safety Controller The SC10-2 adjustable safety relay controller is an easy-to-use and cost-effective alternative to safety relay modules. It supports a wide range of safety devices, eliminating the need to purchase and stock safety relay modules dedicated to specific safety devices.
SC10-2 Models
SC10-2 Features and Indicators
Using SC10-2 Safety Controllers with Different FIDs
Input and Output Connections
SC10-2 Safety and Non-Safety Input Devices
SC10-2 Safety Relay Outputs
SC10-2 Status Outputs and Virtual Status Outputs
SC10-2 Automatic Terminal Optimization (ATO) Feature with External Terminal Blocks (ETB)
XS/SC26-2 Specifications
All semiconductor outputs (safety and non-safety) are protected against short circuits to 0 V or +24 V, including overcurrent. Surge protection must be ensured by using the finished product according to the attached table.
SC10-2 Specifications
The minimum is the configured OFF delay time minus 0.02% (assuming no power outages or faults). Each normally open output is a series connection of contacts from two force-guided (mechanically coupled) relays.
Dimensions
PC Requirements
Installing the Software
Installing the Safety Controller
Mounting Instructions
Appropriate Application
XS/SC26-2 Applications
SC10-2 Applications
Safety Input Devices
Safety Circuit Integrity and ISO 13849-1 Safety Circuit Principles
A risk assessment must be carried out to determine the appropriate level of safety circuit integrity to ensure that the expected risk reduction is achieved and all relevant regulations and standards are met. A risk assessment must be carried out to determine the appropriate level of safety circuit integrity to ensure that the expected risk reduction is achieved and all relevant regulations and standards are met.
Safety Input Device Properties
Simultaneous: A and B are simultaneously in the Stop state, then contacts within a channel in the Run state within 3 seconds. 4 Safety outputs turn off when one of the control inputs is in the Stop state.
Safety Input Device Options
- Safety Circuit Integrity Levels
- Emergency Stop Push Buttons
- Rope (Cable) Pull
- Enabling Device
- Protective (Safety) Stop
- Interlocked Guard or Gate
- Optical Sensor
- Two-Hand Control
- Safety Mat
- Muting Sensor
- Bypass Switch
- Adjustable Valve Monitoring (AVM) Function
- SC10-2: ISD Inputs
- XS/SC26-2: Cycle Initiation for Press Control Function Block
- XS/SC26-2: Press Control Sequential Stop (SQS) Function
- XS/SC26-2: Press Control Mute Sensor
- XS/SC26-2: Foot Pedal
The means of bypass must be fully visible to the guard to be bypassed. This time must be added to the response time of the ISD device chain.
Non-Safety Input Devices
Manual Reset Input
Sets the Output to On when the Output Block configured for Latch Reset is On. If an interlock reset block is added in accordance with an output configured for interlock reset mode, the same or different manual reset input devices can be used to reset the interlock reset block and interlock the safety output.
Virtual Non-Safety Input Devices (XS/SC26-2 FID 2 or later and SC10-2)
Virtual Manual Reset and Cancel Delay (RCD) Sequence
Write a logic 1 to the RCD Register Bit(s) corresponding to the desired reset or virtual cancel delay. If desired, monitor the RCD Feedback Log to know if the desired reset or cancel delay was received (175ms typical).
Virtual ON/OFF and Mute Enable
Safety Outputs
XS/SC26-2 Solid-State Safety Outputs
In use, Final Switching Devices (FSDs) typically achieve this when the safety outputs go into the off position. Separate the 0 V common wire of the loads connected to the safety controller and the 0 V common wire of other equipment powered by the common 24 V supply.
Safety Relay Outputs
The XS/SC26-2 and SC10-2 are rated for Overvoltage Category III when voltages from 1 V to 150 V ac/dc are applied to the output relay contacts. They are rated for Overvoltage Category II when voltages of 151 V to 250 V ac/dc are applied to the output relay contacts and no additional precautions are taken to attenuate possible overvoltage situations in the supply voltage.
EDM and FSD Hookup
The monitor contacts must be closed before the safety controller outputs can be reset (manually or automatically). Final switching devices (FSDs) interrupt the power in the circuit to the Machine Primary Control Element (MPCE) when the safety outputs go to the off position.
Status Outputs
Status Output Signal Conventions
Track Input Group Initiated Stop Other Input Caused Stop Initiated Stop Other Input Caused Stop. Rail Function Block (XS/ . SC26-2 FID 4 or later) See XS/SC26-2: Press Control Status Output Functionality on p.
Status Output Functionality
Indicates the status of a number of Press Function events; see XS/SC26-2: Push Button Status Output Functionality on p. Note: If the manual reset input is connected to a Reset OR block, this status output cannot be used.
XS/SC26-2: Press Control Status Output Functionality
PIP Backcheck Alarm—Fires when the press is ready to run and an attempt is made to start a press cycle and the Part in Place (PIP) input, if configured, is off or is not off and then turned on again (part not removed and replaced). Operational Error—Lights when mutually exclusive operational inputs are on (for example, TOS and BOS, TOS and SQS, TOS and PCMS, SQS and BOS, etc.; if more than 3 seconds elapse between the SQS and PCMS signals, both turn on, if configured).
Virtual Status Outputs
Waiting for reset—Turns on when a reset input is required after the non-alternative and variable (if configured) safety stop inputs have returned to the ON state. Safety Stop—Turns on when the mutable or non-changeable safety stop input is turned off, the GO input node goes low (if configured for manual upstroke adjustment) before reaching SQS, BOS, or TOS (depending on settings and part of the process).
Creating a Configuration
Adding Inputs and Status Outputs
Adding Safety and Non-Safety Inputs
Circuit Type—circuit and signal negotiation options corresponding to the selected input device; scroll to see and select the desired option. Position, Name, and Type—Position, name, and type (Door Switch, E-Stop, ISD-Connect) of the ISD sensors used in the application.
Adding Status Outputs
Note: If the entire chain consists of door switches only, the configuration rules apply to a gate switch. If any device in the string is an E-stop, the configuration rules for an E-stop apply.
Designing the Control Logic
Saving and Confirming a Configuration
- Saving a Configuration
- Confirming a Configuration
- Write a Confirmed Configuration to an SC-XM2/3 using the Programming Tool
- Notes on Confirming or Writing a Configuration to a Configured SC10-2 or XS/SC26-2 FID 3 or later
Note: This process copies all data (configuration, network settings and passwords) to the SC-XM2/3 drive. User settings and passwords affect how the system responds when verifying a configuration or writing a verified configuration to a configured SC10-2 or XS/SC26-2 FID 3 or newer safety controller.
Sample Configurations
XS/SC26-2 Sample Configuration
Add a Reference to the block on another page—click any of the empty placeholders in the middle area, choose Reference, and select the block that's on the next page. Connect one of the Muting Blocks to one of the split safety outputs (M0:SO2A or M0:SO2B) and one to the other split safety output.
XS/SC26-2: Simple Press Control with Mutable Safety Input Sample Configuration
Connect the U output node of the Press Control function block to SO1 (change the name of SO1 to "Up Stroke"). Click the optical sensor input to the off (red) state, then back to the on (green) state.
XS/SC26-2: Full Feature Press Control Sample Configuration
The Press Control Function block and the LOWSO2 output should change to the On (green) state. Click the optical sensor input to the Off state (red), click the PIP input to the Off state (red) and then back to the On state (green), then click the optical sensor input back to the On- mode (green).
Abbreviations
NM Safety Non-mutable Safety input node for the Press Control blocks (XS/SC26-2 only). SQS sequential stop input node for the Press Control blocks (XS/SC26-2 only) SQSx Press Control SQS (sequential stop) input.
Software Overview
Learning Logic—Displays a symbolic representation of the Safety Controller's protection logic for use by the machine designer or control engineer. Edit—Displays the configuration options for the selected device or function block See Software: Troubleshooting on p.
New Project
Project Settings
Equipment Tab
Functional View Tab
Logic Blocks
The state of an output reflects the logical logical result of the combination of the states of its inputs (1 = on, 0 = off, x = whatever). Signal states can be inverted using NOT, NAND and NOR logic blocks or by selecting the “Invert Output” or “Invert Input Source” checkboxes (where available). True or On) and causes the output to turn on assuming all inputs are satisfied.
Function Blocks
Wiring Diagram Tab
Ladder Logic Tab
ISD Tab
Industrial Ethernet Tab
Network Settings
Note: Use the password manager to enable or disable the ability for user2 and user3 to change network settings. Note: Use the password manager to enable or disable the ability for user2 and user3 to change network settings.
PLC Tags/Labels File Creation
In the PLC Slot 1 Address Location field, enter the starting address location of slot 1 (status outputs). In the PLC Slot 20 Address Location field, enter the starting address location of slot 20 (ISD Status Information Module).
EtherNet/IP Assembly Objects
In the PLC slot 21 address location field, enter the starting address location of slot 21 (ISD Individual Device Information Module). The .csv file is ready to be imported directly into the PROFINET PLC software or the file can be opened with any software that can read a .csv file (for example Microsoft Excel).
Configuration Summary Tab
Print Options
XS/SC26-2 Password Manager
SC10-2 Password Manager
Viewing and Importing Controller Data
Note: The error log count is incremented unless the Safety Controller is power cycled, in which case the count resets to start at 1. Clearing the error log (either through the software or on-board interface) removes the history of register, but keeps count.
Live Mode
Simulation Mode
Timed Action Mode
While in simulation mode and in the Functional View tab, some elements that are in delayed action modes are shown in purple.
Bypass Block
Lockout/Tagout
Delay Block (XS/SC26-2 FID 2 or Later and SC10-2)
Available when Safety Exit Delay is set to either Off Delay or On Delay Delay time: 1 ms to 5 minutes in 1 ms increments. Control input (The delay block output remains on if the input is turned on again before the expiration of the delay.).
Enabling Device Block
The device activation timeout can be adjusted between 1 second (default) and 30 minutes and cannot be disabled. All on and off delay periods associated with the safety outputs controlled by the enable device function are followed during the Enable Mode.
Latch Reset Block
The above function block shows the SO2 reference signal connected to the RE reset enable node of the latch reset block LR1. When the OS1 protection device enters the stop state during a valid mute cycle, the latch reset function block will latch and request a reset signal to keep SO1 on after the mute has ended.
Muting Block
Optional Muting Attributes
The Mute Enable input can also be used to reset the sensor input simultaneity timer to mute the sound. The Mute Dependent Override mode is used to manually override an incomplete mute cycle (for example, after the mute timeout has expired).
One Shot Block (XS/SC26-2 FID 4 or later)
The output remains on for the time set for the One Shot setting, regardless of any state changes to the input. The timer set for the one shot will be reset if the input node switches OFF and then ON again.
Press Control (XS/SC26-2 FID 4 and later)
- Mode Function Block
- Press Control Inputs Function Block
- Press Control Function Block Examples
- Closed Loop Control
The Press Control Inputs function block is added if the PCI attribute box is selected. The following is a configuration that uses most of the functions of the Press Control function block.
Two-Hand Control Block (For XS/SC26-2 FID 3 and older and SC10-2 FID 1)
If both TC1 actuators and the BP1 bypass switch are active at the same time, the B1 bypass function block output and the Two-hand control function block output turn off. The Safety Controller's two-hand control logic does not allow the assigned safety output to turn On when power is initially supplied while the THC actuators are in their Run state.
Two-Hand Control Block (XS/SC26-2 FID 4 and later and SC10-2 FID 2 and later )
System Status—displays the current status of safety outputs and, when selected, inputs connected to that output. Error diagnostics – shows the current errors, error log and an option to clear the error log (see Finding and fixing errors on p. 283).
XS/SC26-2 Configuration Mode
For FID 1 controllers with date codes 1547 or later, see the XS/SC26-2E (FID 1) Industrial Ethernet User Manual. For older versions of the FID 1 safety controllers, see the XS/SC26-2E (OLD) Industrial Ethernet User Manual.
Configuring the Safety Controller
For information on where to find these documents, see Which XS/SC26-2 EDS File and Documentation Should You Use. For PROFINET connections on SC10-2 controllers and FID 2 or newer XS/SC26-2 controllers, see PROFINET on p.
Industrial Ethernet Definitions
The default EtherNet/IP string format has a length of 32 bits before the string (suitable for ControlLogix). While the string length is given, it is not usually required for Modbus/TCP systems.
Retrieving Current Fault Information
However, when reading an input assembly that includes a string with a 16-bit length, the string length will be prefixed by an extra 16-bit word (0x0000). In the case of Modbus/TCP, the state of the Virtual Status Output can be read as a discrete input, as part of an input register, or holding register.
EtherNet/IP ™
Which XS/SC26-2 EDS file and documentation should you use?
If string length is used for Modbus/TCP, the length format corresponds to the settings used for EtherNet/IP. The reference indicator associated with a particular virtual status output, for example VO10, is virtual status output 10.
Banner Safety Controller EDS File Installation in ControlLogix Software
Attempting to use the "Reset/Cancel Delay" link on a security controller that does not support virtual inputs; T>O instance of assembly 103 does not exist for this hardware. Attempting to use a "VRCD plus ISD" connection on a security controller that does not support ISD; An instance of the T>O 104 assembly does not exist for this hardware.
RSLogix5000 Configuration (Implicit Messaging)
Note: Select one of the O > T Assembly Instance connections to make use of the Virtual Input/Cancel Delay.
Inputs to the Safety Controller (Outputs from the PLC)
Information about an individual device via ISD on p. 45) 16-bit integer 12 ISD chain requested (see Requesting performance and status. Information about an individual device via ISD on p. 45) 16-bit integer 13 ISD device requested (see Requesting performance and status.
Outputs from the Safety Controller (Inputs to the PLC)
The error code and the advanced error code, taken together, form the safety checker error code. For example, a security checker error code 2.1 is represented by an error code 2 and an advanced error code 1.
Configuration Assembly Object
Fault Examples
Note the ControlLogix string format, where ASCII characters appear, two per register, backwards.
Flags
Extended Flags
ISD System Status Words
RSLogix5000 Configuration (Explicit Messaging)
A clear success message of this type returns the system information shown below (size and data type vary). A successful explicit message of this type returns two 32-bit integers representing the status of VO1 through VO64.
EIP on Omron PLC Configuration
Double-click the PLC icon to edit the device parameters. a) Select the Security Controller from the Deregister device list. In this example, the Safety Controller will output 16-bit words, so the DM area works.
Modbus/TCP
Flags
Extended Flags
PLC5, SLC500, and MicroLogix (PCCC)
PLC Configuration
Outputs from Safety Controller (Inputs to PLC)
Inputs to Safety Controller (Outputs from PLC)
Flags
Extended Flags
PROFINET ®
PROFINET and the Safety Controllers
General Station Description (GSD) File
PROFINET IO Data Model
Configuring the Safety Controller for a PROFINET IO Connection
Description of Modules
Configuration Instructions
ISD: Temperature, Voltage, and Distance Conversion Information
ISD: Supply Voltage
ISD: Internal Temperature
ISD: Actuator Distance
Schedule of Required Checkouts
Commissioning Checkout Procedure
Verifying System Operation
Initial Setup, Commissioning, and Periodic Checkout Procedures
XS/SC26-2 LED Status
Input Module Status Indicators
Output Module (Solid State or Relay) Status Indicators
SC10-2 LED Status
Live Mode Information: Software
Live Mode Information: Onboard Interface
Lockout Conditions
Recovering from a Lockout
SC10-2 Using Automatic Terminal Optimization
SC10-2 Example Configuration without Automatic Terminal Optimization
XS/SC26-2 Models without an Onboard Interface: Using the SC-XM2/3
XS/SC26-2 Models with an Onboard Interface: Using the SC-XM2/3
SC10-2: Using the SC-XM3
Reset the Safety Controller to Factory Defaults
Factory Defaults
Software: Troubleshooting
Software: Error Codes
Verifying Driver Installation
Finding and Fixing Faults
XS/SC26-2 Fault Code Table
SC10-2 Fault Code Table
Replacement Parts and Accessories
Ethernet Cordsets
Interface Modules
Mechanically Linked Contactors
Cleaning
Repairs and Warranty Service
Contact Us
Banner Engineering Corp. Limited Warranty
Banner Engineering Corp. Software Copyright Notice
Applicable U.S. Standards
Applicable OSHA Regulations
Applicable European and International Standards
