F30611 — SI P2: Defect in a monitoring channel

F30611 reports that the drive-integrated Safety Integrated (SI) function on processor 2 has detected a fault in the data cross-check between its two monitoring channels and has initiated STOP F. After the parameterized transition time has expired (p9858), the follow-up fault F30600 (SI P2: STOP A initiated) is output. The same condition can also be issued as an alarm, depending on the drive configuration. The fault value stored in r0949, interpreted as a decimal number, identifies which check failed.

The fault is raised when the crosswise data comparison between the two SI monitoring channels on processor 2 detects a difference. Which data are cross-compared depends on the component the manual describes: on a Motor Module the comparison includes the Safe Brake Control enable and the Safe Brake Adapter data, on the Hydraulic Module the HLA shutoff valve data, and on the G120 Control Unit the F-DI data and STO debounce time. The full assignment is given in the fault value decoding.

1. Read the fault value in r0949 (decimal) and locate it in the decoding below; for 6000 ... 6999 the individual message values are described in safety message C01611 (on the G120, safety fault F01611).
2. Fault value 1 ... 5 and 7 ... 999, and value 6: check the cross data comparison that resulted in the STOP F; carry out a POWER ON (switch-off/switch-on) for all components; upgrade the Motor Module software and the Control Unit software (Hydraulic Module software on the HLA; on the G120 the remedy is the POWER ON).
3. Fault value 1000: check the wiring of the safety-relevant inputs (SGE) on the Control Unit for contact problems (on the G120, the F-DI wiring); remove contact problems/faults at the PROFIBUS master/PROFINET controller; check the failsafe inputs at the TM54F; check the discrepancy time and, if required, increase it (p9650/p9850).
4. Fault values 1001, 1002: POWER ON all components; upgrade the module software and the Control Unit software.
5. Fault values 1950, 1951, 1952: operate the module in the permissible temperature range; check the module fan (1950); replace the Motor Module involved (Hydraulic Module on the HLA).
6. Fault values 2000 ... 2003: check the discrepancy time and increase it if required (p9650/p9850, p9652/p9852); check the SGE wiring for contact problems (F-DI on the G120); check in r9872 why STO was selected (r9772 on the G120) — with the SMM functions active (p9501 = 1), STO can also be selected by these functions; the manual also lists replacing the Motor Module or Hydraulic Module involved.
7. Fault values 2004, 2005: replace the Motor Module involved; diagnose the other active faults and resolve their causes.
8. On the G120 the manual additionally lists, for the fault values described in the Cause: POWER ON, contacting Technical Support, and replacing the Control Unit.

The drive stores the fault value in r0949; interpret it as a decimal number. Values 1 ... 999 are the number of the cross-compared data that caused the fault; this number is also displayed in r9895 (Motor Module) or r9795 (G120):

• 0 — stop request from the other monitoring channel.
• 1 — SI monitoring clock cycle (r9780/r9880).
• 2 — SI enable safety functions (p9601/p9801); compared only for the supported bits.
• 3 — SI SGE changeover discrepancy time (p9650/p9850); on the G120 the F-DI changeover discrepancy time.
• 4 — SI transition period STOP F to STOP A (p9658/p9858).
• 5 — SI enable Safe Brake Control (p9602/p9802).
• 6 — SI Motion enable, safety-relevant functions (p9501, internal value).
• 7 — SI delay time of STO for Safe Stop 1 (p9652/p9852).
• 8 — SI PROFIsafe address (p9610/p9810).
• 9 — SI debounce time for STO/SBC/SS1 (p9651/p9851); on the G120 for STO.
• 10 — SI delay time for initiating STO for ESR (p9697/p9897).
• 11 ... 13 — Safe Brake Adapter mode, BICO interconnection (p9621/p9821) and relay ON/OFF times (p9622); on the Hydraulic Module the HLA shutoff valve feedback contact configuration (p9626/p9826) and wait times (p9625).
• 14 — SI PROFIsafe telegram selection (p9611/p9811).
• 15 — SI PROFIsafe bus failure response (p9612/p9812).
• On the G120 the cross-check covers only the data numbered 2, 3, 8 and 9.
• 1000 — watchdog timer expired: within the time of approx. 5 x p9650, the signal at terminal EP of the Motor Module, at the STO terminal of the Hydraulic Module or at the F-DI changed continually, or STO was selected and deselected via PROFIsafe/TM54F (Motor Module: also safe pulse cancellation), in each case with intervals less than or equal to the discrepancy time.
• 1001, 1002 — initialization error, change timer / check timer.
• 1950, 1953 — module temperature outside the permissible temperature range; 1951, 1954 — module temperature not plausible; 1952 — S120M: hardware access fault (Motor Module).
• 2000 ... 2003 — STO selection, feedback signal of the STO shutdown, SS1 delay-timer status or STO terminal status differs between the two monitoring channels (on the G120: safe pulse suppression feedback, and the STO terminal of processor 1 and processor 2).
• 2004, 2005 (Motor Module) — forced checking procedure of the switch-off signal path of the second channel unsuccessful.
• 6000 ... 6999 — error in the PROFIsafe control: the failsafe values are transferred to the safety functions, delayed if "STOP B after failure of the PROFIsafe communication" (p9812) is parameterized; the individual message values are described in safety message C01611 (F01611 on the G120).

• r0949 — fault value; read it as a decimal number to identify the failed cross-check.
• r9895 — SI diagnostics STOP F (Motor Module); shows the number of the cross-compared data that caused the fault (r9795, processor 1, on the G120).
• p9650/p9850 — SI SGE changeover discrepancy time of Control Unit/Motor Module; check and increase for fault values 1000 and 2000 ... 2003.
• p9652/p9852 — SI Safe Stop 1 delay time; check together with the discrepancy time for values 2000 ... 2003.
• p9658/p9858 — SI transition time STOP F to STOP A; after it expires, F30600 follows.
• p9501 — SI Motion enable safety functions; with p9501 = 1 the SMM functions can also select STO.
• p9612/p9812 — SI PROFIsafe failure response; the "STOP B after failure of the PROFIsafe communication" setting delays the transfer of the failsafe values for 6000 ... 6999.

The fault can be acknowledged after the cause of the error has been removed and after STO has been correctly selected and deselected. Where the remedy requires it, carry out a POWER ON (switch-off/switch-on) for all components before restarting.