Siemens SINAMICS G120 Safety Functions

This alarm indicates that the settings transferred to the inverter are not compatible with the device. This commonly occurs during maintenance after component replacement or firmware updates when configuration data is loaded from an Operator Panel. Continuing operation with incompatible settings can lead to unexpected behavior or failure of the drive.

The parameterization of the motor holding brake or Safe Brake Control (SBC) contains an illogical or contradictory configuration, such as p1215 = 0 or 3 while p9602 = 1. This prevents correct and safe brake operation, potentially leading to unintended motor movement.

The PROFIsafe configuration in the higher-level control differs from that in the drive. This inconsistency can lead to communication errors or safety function issues, preventing reliable and safe operation. Specific alarm values (r2124=1 or r2124=2) provide more detail.

The combination of the motor and power unit is unsuitable, specifically if the ratio between the rated power unit current (r0207[0]) and rated motor current (p0305) is not greater than 5. This mismatch can lead to sporadic C01711 or C30711 messages and suboptimal performance or even damage over time.

The set time (p9661) for monitoring the forced checking procedure (test stop) for the 'STO via Power Module terminals' function has been exceeded. This indicates an overdue safety test that must be performed to maintain the integrity of the Safe Torque Off function.

The forced checking procedure (test stop) for extended motion functions was inadvertently selected during power-up, which is not permissible. This prevents normal startup and indicates a configuration error during initialization of safety functions.

The system is currently in commissioning mode. This is a normal state during initial setup or configuration, allowing special access and diagnostics. No fault is present, but it indicates the system is not in regular operation.

The time set in p9659 for the forced checking procedure (test stop) for the basic safety functions (STO) has been exceeded. This indicates an overdue safety test, which must be performed to ensure the reliability of the Safe Torque Off function.

The inverter's automatic self-test during power-up was interrupted because the 'STO via Power Module terminals' function is active. This prevents the drive from completing its initialization and starting normally, indicating an unintended or misconfigured safety state at startup.

The system is actively waiting for communication, likely with the F host. This alarm indicates a potential disruption or delay in the communication link, preventing the inverter from receiving necessary commands or operational data from the host controller.

A forced checking procedure (test stop) for the fail-safe digital output is currently in progress. This is a normal safety test to verify the output's functionality and indicates that the system is performing a self-check.

The system is waiting for the Safe Torque Off (STO) function of the extended safety functions to be deselected via Safety Monitor Module (SMM) as part of an automatic test stop procedure. This can also indicate active safety messages preventing STO deselection.

A STOP A command has been initiated, typically as a consequence of another primary safety-related event such as C01701, C01706, C01714, or C01716 (or their C307xx equivalents). This action results in an uncontrolled stop by immediately removing power from the motor.

A STOP B command has been initiated, usually as a consequence of another primary safety-related event like C01706, C01714, or C01716 (or their C307xx equivalents). This action brings the drive to a controlled stop via a defined deceleration ramp.

The limit for Safe Acceleration Monitoring (SAM) or Safe Brake Ramp (SBR) has been exceeded. This indicates that the motor braking response is not within the parameterized tolerance, posing a risk of uncontrolled deceleration and potential mechanical damage or safety hazard.

This alarm signifies a defect within a safety monitoring channel, detailed by r2124 fault values. Causes include data cross-check errors between processors (0-2, 4-43, 58-999), difference in position actual value exceeding tolerance (p9542), differing monitoring function tolerance values (44-57), or an expired watchdog timer (1000) due to frequent F-DI signal changes. Initialization errors (1001), test stop issues (1005, 1011), cyclic communication failure (1020), or low current for encoderless acquisition (1041) can also trigger this alarm.

This alarm indicates a defect occurring during the processing of Fail-safe I/O (F-IO). This suggests a problem with the safety-related input/output circuitry or its configuration, potentially compromising safety functions if not addressed.

The inverter is currently performing a forced checking procedure (test stop) for its extended motion monitoring functions. This is a normal operational state during a safety test and indicates that the system is validating its safety capabilities.

The acceptance test mode is currently active, indicating that safety functions are being validated. This is a normal state during commissioning or re-validation of safety parameters and functions.

A defect has been detected in a monitoring channel, with fault value r2124 providing more detailed information. This condition often initiates a STOP response and an inverter fault, indicating a critical issue with the safety monitoring system that requires immediate attention.

A defect has occurred during the processing of fail-safe inputs/outputs (F-IO), potentially due to incorrect wiring or parameter settings. This can compromise the integrity of safety-related I/O signals, leading to unpredictable safety reactions or system failures.

The Safely Limited Speed (SLS) has been exceeded, meaning the motor is moving faster than the configured safe speed limit. This indicates a failure in speed monitoring or an incorrect speed setpoint from the higher-level control, posing a significant safety risk.

The tolerance for the 'Safe Direction of Motion' (SDI) function has been exceeded. This indicates that the motor is moving in an unintended or unsafe direction, or its deviation from the intended direction is too great, posing a safety risk if not immediately addressed.

A discrepancy error has been detected in either the fail-safe digital inputs or outputs, indicating inconsistent signals or faulty wiring. This compromises the reliability of safety-related I/O, potentially leading to incorrect safety reactions.

A STOP A request has been initiated, often due to a safety-related event such as defective hardware, incorrect STO configuration, or a discrepancy at STO terminals. This condition is indicated by fault value r0949 and results in an immediate, uncontrolled cessation of motor power. It is a critical fault impacting machine safety and operation.

This fault indicates an issue within one of the inverter's safety monitoring channels. Fault value r0949 provides more specific details, ranging from a stop request, data cross-check errors between processors 1 and 2 (1-999), an expired check timer (1000) often due to a signal for a safety function changing too frequently, status discrepancies for STO (2000, 2003) or SS1 (2002), or internal software faults (6000). Unresolved, this fault compromises the integrity of safety functions.

An error has occurred with the safety data's sign-of-life signal, indicating a potential communication or integrity issue within the safety functions. This can be caused by EMC disturbances or an inadmissible voltage at a Control Unit digital output. Such an error critically impacts the system's ability to maintain safe operation.

The motor holding brake control is malfunctioning, posing a risk of uncontrolled motor movement. This can stem from an incorrect p1278 setting, disconnected or interrupted brake cables, a ground fault, or a short-circuit in the brake winding. A fault in the Safe Brake Relay, Control Unit, or Power Module could also be the cause.

The system has detected that a component has been replaced, requiring acknowledgment and data saving to integrate the new part and ensure consistent operation. Failure to perform these steps can prevent proper functionality and lead to an inconsistent safety state.

This fault is part of a group (F01641, F01650, F01680, F30680) that is expected to occur temporarily during specific corrective maintenance procedures, such as replacing a Control Unit or the entire inverter. It does not indicate a persistent problem if the full replacement and recommissioning steps are followed. The risk is negligible if acknowledged as part of the procedure.

An unexpected internal software error has occurred within the Control Unit, which can lead to unstable operation or system failure. If not resolved, it may indicate a hardware defect, compromising the drive's reliability.

This fault is part of a group (F01641, F01650, F01680, F30680) that is expected to occur temporarily during specific corrective maintenance procedures, such as replacing a Control Unit or the entire inverter. It does not indicate a persistent problem if the full replacement and recommissioning steps are followed. The risk is negligible if acknowledged as part of the procedure.

Synchronization of safety time slices within the Control Unit was unsuccessful, which can prevent proper and safe operation of the drive. This might indicate a transient issue or a deeper problem with the unit's internal timing or processing, affecting safety integrity.

There is an error in the PROFIBUS or PROFINET configuration of the safety slot, either on the master side or the Control Unit. This prevents safe communication with the higher-level controller and can lead to system shutdown, compromising integrated safety functions.

There's an issue with the alignment or operation of the monitoring functions, possibly due to EMC issues or a transient state. This can compromise the reliability of safety monitoring and lead to incorrect safety reactions or false alarms.

Parameter processor 2 is reporting an incorrect state or value, which could affect safety function processing. This can prevent proper configuration and operation of safety features, potentially leading to an unsafe state or system malfunction.

The PROFIsafe telegram number configured in p60022 is not suitable for the enabled safety functions. This indicates an inconsistency in PROFIsafe communication setup, which can prevent safe data exchange and lead to safety function failures.

A parameter write task was rejected, likely due to incorrect security settings or an attempt to modify safety parameters while safety functions are active. This prevents configuration changes, potentially leaving the system in an unconfigured or unsafe state.

The currently installed Power Module does not support the enabled safety functions. This hardware incompatibility prevents the safety functions from operating correctly and safely, requiring a hardware change.

The simulation mode for the digital inputs of the Control Unit (F-DI) is currently active. Safety functions cannot operate reliably while in simulation mode, which could mask actual input conditions and lead to unsafe operation if not deactivated before live use.

An internal communication error has occurred within the Control Unit. This indicates a disruption in data exchange between internal components, which can lead to unpredictable behavior or system shutdown, compromising operational stability and safety.

The attempt to copy Safety Integrated (SI) parameters was rejected. This can happen if p9700 is not 0, or if safety functions (p9501, p9601) are active, preventing critical parameter changes. This can lead to an inconsistent or un-saved configuration, especially after modifying safety settings.

The inverter has detected a critical internal defect, which could be a hardware failure, persistent software issue within the Control Unit, or an unconfigured 'STO via Power Module terminals' with active terminals. This compromises system integrity and requires immediate attention to prevent operational failure.

A static '1' signal is present at the F-DI input designated for safe acknowledgment of safety functions. This indicates an incorrect input state, preventing proper acknowledgment or causing a fault, which can stop operations or prevent safety functions from being reset.

This fault is part of a group (F01641, F01650, F01680, F30680) that is expected to occur temporarily during specific corrective maintenance procedures, such as replacing a Control Unit or the entire inverter. It does not indicate a persistent problem if the full replacement and recommissioning steps are followed. The risk is negligible if acknowledged as part of the procedure.

An incorrect or invalid parameter value has been detected. The fault value (r0949) provides additional information about the specific parameter affected, which needs to be corrected for proper operation. An incorrect parameter can lead to misconfigured safety functions or drive behavior.

A configured monitoring function is not supported by the current hardware or software version. This indicates a mismatch between desired functionality and system capabilities, preventing the function from operating correctly or safely.

The Safely Limited Speed (SLS) function is not enabled, even though it's required or configured for the application. This prevents the system from limiting speed safely, potentially leading to hazardous overspeed conditions if the drive operates outside its safe limits.

A problem has occurred during data backup to the Non-Volatile RAM (NVRAM), potentially leading to loss of configuration data if power is removed. This indicates a critical memory or hardware issue that could result in needing to reconfigure the drive after a power cycle.

A parameter value is not permitted or is incorrect for encoderless operation, indicating an invalid configuration for the current operating mode. This can lead to improper motor control and potentially unsafe conditions if speed or position feedback is compromised.

Safety-related parameters have been modified, requiring a power cycle for the changes to take effect and be properly stored. Operating without a power cycle could result in an inconsistent or unapplied safety state, compromising machine safety.

The set time (p9559) for performing the forced checking procedure (test stop) of the extended functions has been exceeded. This indicates a required safety test is overdue, compromising safety integrity if not performed and potentially leading to a fault state.

A defect has been detected in a monitoring channel. The fault value r0949 provides more detailed information on the specific issue. This indicates a critical problem with safety monitoring that needs further investigation to ensure safe operation.

The Safe Torque Off (STO) function is active, meaning the motor's torque-generating energy is prevented, and the motor is freely rotating or at a standstill. This is a safety state initiated to prevent unintended startup, not necessarily a fault.

The Safe Stop 1 (SS1) function is active, meaning the motor is brought to a standstill via a controlled ramp, and then STO is activated. This is a safety state initiated to safely stop the motor, not necessarily a fault.

A fault was detected during the inverter's power-up sequence, preventing it from starting correctly. This could be a hardware issue or a configuration problem encountered during initialization, which needs to be resolved for the drive to become operational.

This fault is part of a group (F01641, F01650, F01680, F30680) that is expected to occur temporarily during specific corrective maintenance procedures, such as replacing a Control Unit or the entire inverter. It does not indicate a persistent problem if the full replacement and recommissioning steps are followed. The risk is negligible if acknowledged as part of the procedure.

An error occurred during the forced checking procedure (test stop) for the fail-safe digital output, indicating a potential wiring issue or malfunction of the output itself. This means the safety test failed, and the fail-safe output cannot be trusted.