BNI IOF-329-P02-Z038
Safe I/O Module, Safety over IO-Link
IP67 Module
3
General safety notes
3.1
Proper use
The device is a decentralized safe in- and output module and is intended for use in industrial
automation.
All functions designated as safety functions may be used for the protection of human life. For
two-channel use of the input/multi-function port and activated test pulses on the outputs these
functions meet the requirements in accordance with IEC 62061 SIL CL 3 as well as
EN ISO 13849-1 PL e, Category 4. For single-channel use of the inputs or when test pulses on
the outputs are deactivated, the requirements of EN/IEC 61508 SIL 2 and EN ISO 13849-1 PL d,
Category 3 are met. All functions which are not indicated as safety functions do not meet these
requirements and may not be used for the protection of human life.
Safe operation always requires the use of a safety controller with PROFIsafe protocol. The
system response with respect to automatic restart (see ISO 12100) after cleared external faults
depends on the selected safety controller and its configuration or on the controller program.
Intended use also includes:
–
–
–
–
–
Restart behavior
Depending on the configuration or programming of the safety controller the restart behavior of
the overall system may vary. Here the manual/system description of the manufacturer of the
safety controller should be consulted and followed.
Direct any questions pertaining to restart behavior of the safety controller to the manufacturer of
the safety controller.
3.2
Reasonably
Use, installation or handling contrary to the instructions provided in this user's guide.
foreseeable
misuse
3.3
Warranty and
Warranty and liability claims against the manufacturer are rendered void by:
liability claims
–
–
www.balluff.com
The user must take into account the entire safety chain of the safety function in order to
determine the achieved SIL or PL.
All requirements described in this manual must be met. Ignoring instructions can result in
dangerous conditions.
Appropriate system and application measures must ensure that after an external fault is
cleared the machine does not restart unexpectedly or unintended (this must be accounted
for in the risk assessment).
Observing the scope of the certification.
Observing the requirements for the operating conditions as well as environmental and EMC
conditions.
Unauthorized tampering
Improper use
english
11