ABB AC500-S Safety User Manual

Also see for AC500-S: System manual Application note Safety user manual Operation manual

Contents

ABB AC500-S Safety User Manual Manual pdf 37 page image

NOTICE!The boot project update on SM560-S is possible only if no boot project is loaded on SM560-S. It isdone to avoid any occasional overwriting of existing valid boot project on SM560-S. To delete the bootproject from SM560-S Safety CPU, one can use, for example, the switch address value 0xFE duringthe start of SM560-S, which allows deleting the boot project from the Flash memory of SM560-S. Theboot project is finally deleted after SM560-S powering off/on is executed.NOTICE!FunctionOfCard=3 (combined boot project and firmware/boot code update) is not supported bySM560-S Safety CPU. The execution of boot project and firmware/boot code update shall be done intwo steps:– FunctionOfCard=1 with a proper boot project update shall be executed, followed by SM560-Srestart.– FunctionOfCard=2 with a proper firmware / boot code update shall be executed followed bySM560-S restart.It means that one may need two SD cards to perform both boot project and firmware/boot codeupdates. One SD card with firmware/boot code update and the other SD card with boot project update.When firmware and/or boot code update is started, SM560-S Safety CPU goes to a DEBUG STOP state andI-ERR and RUN LEDs are alternately blinking. After firmware and/or boot code update is done, no blinking ofI-ERR and RUN LEDs can be observed. Do not cut power supply during firmware and/or boot code updatebecause it can lead to an unrecoverable damage of SM560-S which would require the replacement of thisdevice. At the end of boot code and/or firmware update, SM560-S stays in DEBUG STOP state. The updatedfirmware and/or boot code can be started only after powering off/on of SM560-S.If firmware and/or boot code update was not successful, SM560-S goes to a SAFE STOP state with an I-ERR LED = ON. Restart Safety CPU and, if this error persists, replace Safety CPU.During boot project update, only RUN LED is flashing. At the end of the boot project update, SM560-S goesto SAFE STOP state. A complete SM560-S restart, e.g., through powering off/on, is needed to activate anew boot project.DANGER!Since firmware, boot code and boot project update is done from PM5xx CPU, it is important thatspecial organisational procedures (e.g., limited access to the cabinet where Safety CPU islocated) on the end-customer site are defined to avoid unintended firmware, boot code and bootproject update on SM560-S Safety CPU using SD card.It is possible to read the actual firmware version of SM560-S Safety CPU using POU SF_RTS_INFO(Ä Chapter 4.6 “AC500-S Libraries” on page 224 for further details) and, thus, limit safety programexecution only to the pre-defined firmware versions.Each firmware and boot project update has to be followed by a complete functional safety validationprocedure for a given safety process control application.3.1.3 Mounting, dimensions and electrical connectionThe Safety CPU is mounted on the left side of the CPU on the same Terminal Base. The electrical connec-tion is established automatically when mounting the Safety CPU.AC500-S Safety ModulesSM560-S Safety CPU > Mounting, dimensions and electrical connection30.03.2017 AC500-S 37