440c Um001 - en P

User Manual
Guardmaster Configurable Safety Relay

Catalog Number 440C-CR30-22BBB
Original Instructions
Important User Information
Read this document and the documents listed in the additional resources section about installation, configuration, and
operation of this equipment before you install, configure, operate, or maintain this product. Users are required to
familiarize themselves with installation and wiring instructions in addition to requirements of all applicable codes, laws,
and standards.
Activities including installation, adjustments, putting into service, use, assembly, disassembly, and maintenance are required
to be carried out by suitably trained personnel in accordance with applicable code of practice.
If this equipment is used in a manner not specified by the manufacturer, the protection provided by the equipment may be
impaired.
In no event will Rockwell Automation, Inc. be responsible or liable for indirect or consequential damages resulting from the
use or application of this equipment.
The examples and diagrams in this manual are included solely for illustrative purposes. Because of the many variables and
requirements associated with any particular installation, Rockwell Automation, Inc. cannot assume responsibility or
liability for actual use based on the examples and diagrams.
No patent liability is assumed by Rockwell Automation, Inc. with respect to use of information, circuits, equipment, or
software described in this manual.
Reproduction of the contents of this manual, in whole or in part, without written permission of Rockwell Automation,
Inc., is prohibited.
Throughout this manual, when necessary, we use notes to make you aware of safety considerations.
WARNING: Identifies information about practices or circumstances that can cause an explosion in a hazardous environment,
which may lead to personal injury or death, property damage, or economic loss.
ATTENTION: Identifies information about practices or circumstances that can lead to personal injury or death, property
damage, or economic loss. Attentions help you identify a hazard, avoid a hazard, and recognize the consequence.
IMPORTANT Identifies information that is critical for successful application and understanding of the product.
Labels may also be on or inside the equipment to provide specific precautions.
SHOCK HAZARD: Labels may be on or inside the equipment, for example, a drive or motor, to alert people that dangerous
voltage may be present.
BURN HAZARD: Labels may be on or inside the equipment, for example, a drive or motor, to alert people that surfaces may
reach dangerous temperatures.
ARC FLASH HAZARD: Labels may be on or inside the equipment, for example, a motor control center, to alert people to
potential Arc Flash. Arc Flash will cause severe injury or death. Wear proper Personal Protective Equipment (PPE). Follow ALL
Regulatory requirements for safe work practices and for Personal Protective Equipment (PPE).
Allen-Bradley, CompactLogix, Connected Components Workbench, ControlFLASH, ControlLogix, Guardmaster, GuardShield, Micro800, Micro830, PanelView, PowerFlex, Rockwell Software, RSLinx, RSLogix 5000,
SafeZone, SensaGuard, SoftLogix, Studio 5000, Studio 5000 Logix Designer, and Zero-Force Touch Buttons are trademarks of Rockwell Automation, Inc.
EtherNet/IP is a trademark of ODVA, Inc.
Microsoft and Visual Studio are trademarks of the Microsoft Corporation.
Trademarks not belonging to Rockwell Automation are property of their respective companies.
Summary of Changes
New and Updated This table contains the changes made to this revision.
Information Topic Page
Added Communication Connection section 15
Updated Chapter 4 - Configuring the CR30 Safety Relay 27
Added Lock Control section 60
Added Mode Selection section 61
Updated Muting Fuction Block figure 62
Added Override and Advanced Setting sections 63
Added Status In section 76
Added Status Out section 102
Updated Chapter 13 - Automation Controller Communications 113
Rockwell Automation Publication 440C-UM001F-EN-P - December 2015 3

Summary of Changes
Notes:
4 Rockwell Automation Publication 440C-UM001F-EN-P - December 2015

Table of Contents
Preface Who Should Use this Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

Purpose of this Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Additional Resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Definitions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Chapter 1
Overview Intended Use . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Hardware Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
CR30 Safety Relay Hardware Details. . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Maximum Number of Inputs and Outputs . . . . . . . . . . . . . . . . . . . . . 14
Software. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Obtain Connected Components Workbench Software . . . . . . . . . . 15
Communication Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
USB Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Serial Port Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
EtherNet/IP Connection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Chapter 2
Installation Mounting Dimensions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
DIN Rail Mounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Panel Mounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Enclosure Considerations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Preventing Excessive Heat . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Chapter 3
Power, Ground, and Wire Wiring Requirements and Recommendation . . . . . . . . . . . . . . . . . . . . . . . 21
Wire Size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Terminal Assignments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Grounding the Configurable Safety Relay . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Connecting a Power Supply . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Wire Input Devices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Input Devices with Mechanical Contacts . . . . . . . . . . . . . . . . . . . . . . . 24
Input Devices with OSSD Outputs . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Wire Output Devices. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Use Surge Suppressors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Wire Embedded Serial Port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Power Cycling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

Table of Contents
Chapter 4
Configuring the CR30 Safety Relay Start Connected Components Workbench Software . . . . . . . . . . . . . . . . 27
Start Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
New Project. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
The Workspace . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Build and Download the Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Verification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Viewing the Verification ID without the Connected Components
Workbench Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Multiple Block Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
Chapter 5
Pulse Testing Normally Open Input Pulse Testing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Normally Closed Input Pulse Testing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
Output Pulse Testing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
Chapter 6
Input Filter Input Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47
Chapter 7
Discrepancy Time Discrepancy Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
Chapter 8
Safety Block Renaming General . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
Naming Error Indication. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
Chapter 9
Safety Monitoring Functions Emergency Stop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
Enabling Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54
Feedback Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
Gate Switch. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Light Curtain . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
Lock Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60
Mode Selection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
Muting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
Override Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
Advanced Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
Two-sensor T-type Muting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
Two-sensor L-type Muting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66
Four-sensor Muting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
Muting Lamp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70
Reset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70
Restart . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
Safety Mat . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
SensaGuard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
Single Wire Safety Input . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
Status In . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76

Table of Contents
Example 1 - Ready for Reset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76

Example 2 - Fault Present . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
Two-Hand Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
Type IIIA Two-hand Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78
Type IIIC Two-Hand Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
Alternate Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
Single Channel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
Dual Channel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
Dual Channel OSSD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
Dual Channel N.C./N.O. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
Three Channel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
Output Loop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
Chapter 10
Logic Levels A and B Pass Through . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
AND . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
OR . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88
XOR. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
NAND. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
NOR. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
NOT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
AND with Restart . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
OR with Restart . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92
Nesting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
Invert . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94
Reset Set Flip Flop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95
Chapter 11
Safety Outputs Input Connection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
Feedback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
Reset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
Timing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
Output Connections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
Immediate OFF. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
ON Delay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 99
OFF Delay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 100
Jog . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101
Muting Lamp . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101
Status Out. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102

Table of Contents
Chapter 12
Plug-in Modules Insert Module into Controller . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
2080-IQ4OB4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104
2080-IQ4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105
2080-OB4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105
2080-OW4I. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106
Install a Guardmaster 440C-ENET EtherNet/IP Plug-in Module . . . 106
Installation Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
About the Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
Install the Module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108
Wire the Ethernet Connector . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109
Grounding Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 109
Connect the Module to the EtherNet/IP Network . . . . . . . . . . . . . 110
Set the Network Address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
Status Indicators. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112
Chapter Summary . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112
Chapter 13
Automation Controller Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
Communications Ethernet Messaging. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
I/O Messaging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
Using RSLogix 5000 Safety Relay Add-on Profile. . . . . . . . . . . . . . . 114
Add the CR30 Safety Relay to the I/O Configuration . . . . . . . . . . 114
Configure Safety Relay Logic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118
Download the Configuration to the CR30 Safety Relay . . . . . . . . . 119
Online Changes to the CR30 Safety Relay Configuration . . . . . . . 122
Access Module Data with Add-on Profiles . . . . . . . . . . . . . . . . . . . . . 123
Explicit Messaging. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125
Chapter 14
Status Indicators Input and Output Status Indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128
Controller Status Indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 129
Chapter 15
Modbus Communication Modbus Mapping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131
Example Architectures . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133
Reading CR30 Safety Relay Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 134
Sending Reset to CR30 Safety Relay . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136
Chapter 16
Troubleshooting Recoverable Faults. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 139
Status Indicators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 139
Nonrecoverable Faults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 140
Troubleshooting with the Connected Components Workbench Logic
Editor . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 140
Troubleshooting with Modbus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142
Example Fault Analysis Crossfault . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 143

Table of Contents
Chapter 17
Security and Password Exclusive Access. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145
Password Protection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145
Compatibility. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 146
Work with a Locked Safety Relay. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 146
Upload from a Password-protected Safety Relay. . . . . . . . . . . . . . . . 146
Connect to a Password-protected Safety Relay . . . . . . . . . . . . . . . . . 146
Download to a Password-protected Safety Relay . . . . . . . . . . . . . . . 146
Password Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147
Set Safety Relay Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147
Change Password. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 148
Clear Password. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149
Lost Password. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150
Chapter 18
Using the Memory Module Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151
Project Back Up and Restore . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151
Back Up Project . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 152
Restore Project . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153
Chapter 19
Reports Reports. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 155
Appendix A
Specifications SIL Rating. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157
Performance Level/Category . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157
General . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 158
Environmental. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 158
Inputs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 159
Outputs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 159
Reaction Times . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 159
Recovery Times . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 160
Response Times. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 160
System Response Time Calculation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 160
Response Time - Demand of the Safety Function. . . . . . . . . . . . . . . 161
Monitoring Time - Occurrence of Recoverable Faults and Failures. . .
163
Test Pulse Evaluation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166
Multi-Channel Signal Evaluation and Discrepancy Monitoring . 166
Sequence and Timing Faults. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166
Integral Test Pulses of Safety Outputs . . . . . . . . . . . . . . . . . . . . . . . . . 166
Response Time - Occurrence of Nonrecoverable Faults and Failures .
168
Reaction Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 169
440C-ENET Module Specifications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 172

Table of Contents
Appendix B
Regulatory Approvals Agency Certifications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 175
Compliance to European Union Directives . . . . . . . . . . . . . . . . . . . . . . . . 175
Machine Safety Directive . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 175
EMC Directive . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 175
Appendix C
Configuration Reference Document Important User Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 177
Appendix D
ControlFLASH Firmware Update Update the Firmware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 179
Unrecognized Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 183
Appendix E
EtherNet/IP I/O Assemblies Input Assemblies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 187
Output Assemblies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 188
Appendix F
Tag Definitions Input Tags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 189
Output Tags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 190
Major Faults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 191
Minor Faults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 193
Index Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 197

Preface
Read this preface to familiarize yourself with the rest of the manual. This preface
provides information concerning:
Who should use this manual
The purpose of this manual
Related documentation
Conventions that are used in this manual
Who Should Use this Manual Use this manual if you design, install, configure, or troubleshoot control systems
that use the CR30 safety relay.
You must have a basic understanding of electrical circuitry and familiarity with
safety-related control systems. If you do not, obtain the proper training before
using this product.
Purpose of this Manual This manual is a reference guide for the CR30 safety relay, plug-in modules, and
accessories. It describes the procedures that you use to install, wire, and
troubleshoot your relay. This manual:
Explains how to install and wire your relay
Gives an overview of the CR30 safety relay system
See the Online Help provided with Connected Components Workbench

software for more information on how to configure your CR30 safety relay.
Additional Resources These documents contain additional information concerning related products
from Rockwell Automation.
Resource Description
2711C-UM001_-EN-P PanelView Component HMI Terminal User Manual
440C-QS001_-EN-P Guardmaster 440C-CR30 Software Configurable Safety
Relay Quick Start Guide
Industrial Automation Wiring and Grounding Guidelines, Provides general guidelines for installing a
publication 1770-4.1 RockwellAutomation industrial system.
Product Certifications website, http://www.ab.com Provides declarations of conformity, certificates, and
other certification details.
Allen-Bradley Industrial Automation Glossary, AG-7.1 A glossary of industrial automation terms and
abbreviations.
You can view or download publications at

http://www.rockwellautomation.com/literature/. To order paper copies of
technical documentation, contact your local Allen-Bradley distributor or
Rockwell Automation sales representative.
You can download the latest version of Connected Components Workbench

software for your CR30 safety relay at
http://compatibility.rockwellautomation.com/Pages/
MultiProductDownload.aspx?Keyword=Free&crumb=112

Preface
Definitions Publication AG-7.1 contains a glossary of terms and abbreviations that are used
by Rockwell Automation to describe industrial automation systems. The
following is a list of specific terms and abbreviations that are used in this manual.
Connected Components Workbench software This software package
allows you to configure a CR30 safety relay, program a Micro800
controller, and configure a PanelView HMI.
CR30 safety relay The catalog number 440R-CR30-22BBB software
configurable safety relay, described in this user manual.
HI Logic state of being ON.
LO Logic state of being OFF.
Logic Block On the Connected Components Workbench software
grid, a logic block resides in any of the four columns. A logic block is
either: 1) a Safety Monitoring Function, 2) Logic LevelA, 3) Logic Level
B, or 4) Safety Output Function.
Logic Level A (LLA) This column is used to perform logic processes on
a number of inputs to create a desired output state.
Logic Level B (LLB) - This column is used to perform logic processes on a
number of inputs to create a desired output state.
N.C. (Normally Closed) An electrical contact whose normal state (that
is, no pressure or electrical potential applied) is in the closed position.
N.O. (Normally Open) An electrical contact whose normal state (that
is, no pressure or electrical potential applied) is in the open position.
OSSD (Output Signal Switching Device) Typically a pair of solid-state
signals that are pulled up to the DC source supply. The signals are tested
for short circuits to the DC power supply, short circuits to the DC
common and shorts circuits between the two signals.
Reaction Time - Describes the time between the true states of one input
to the ON state of the output.
Recovery Time - Describes the time that is required for the input to be in
the LO state before returning to the HI state.
Response Time - Describes the time between the trigger of one input to
the OFF state of the output.
Safety Function Describes the complete sensing of the action (for
example, open a safety gate) to execution the final output device (for
example, turn off a pair of contactors).
Safety Monitoring Function (SMF) The input block on the Connected
Components Workbench software for the CR30 safety relay.
Safety Output Function (SOF) The output block on the Connected
Components Workbench software for the CR30 safety relay.
Single Wire Safety (SWS) A unique, safety-rated signal that is sent over
one wire to indicate a safety status. The SWS can be used in Category 4,
Performance Level e, per ISO 13849-1 and Safety Integrity Level (SIL) 3,
per IEC 62061 and IEC 61508.

Chapter 1
Overview
Intended Use The catalog number 440C-CR30-22BBB (CR30) relay is a software-

configurable safety relay. This device is intended to be part of the safety-related
control system of a machine. The CR30 safety relay must be configured using a
personal computer (PC) with the Allen-Bradley Connected Components
Workbench software. The CR30 safety relay accommodates up to 24 safety
monitoring functions. Examples of safety monitoring functions are single
channel input, dual channel input, two hand control, reset, and feedback.
It is based on the Micro800 platform. The housing is red to signify it as a safety

device and to distinguish it from the gray-colored standard controllers.
Hardware Features Figure 1 - CR30 Safety Relay
The CR30 safety relay has 22 embedded safety rated inputs and outputs and
accepts up to two plug-in modules, each of which has four standard inputs and
four standard outputs.
The CR30 safety relay can be configured to accept two single-wire safety inputs
and to provide two single-wire safety outputs. This feature allows the CR30
safety relay to be an integral part of an extensive machine safeguarding system.

Chapter 1 Overview
CR30 Safety Relay Hardware Details

Figure 2 - Hardware Details
1 2 3 4 5 6 7 Status Indicators
12
13
14
15
16
17
18
8 9 10 5 11 6
Description Description
1 Status indicators 10 Verification button
2 Plug-in latch 11 Din Rail mounting latch
3 Plug-in screw hole 12 Input status
4 40-pin high-speed plug-in connector 13 Power status
5 I/O and Power terminal blocks 14 Run status
6 Mounting screw hole/mounting foot 15 Fault status
7 Right-side cover 16 Lock status
8 RS-232 non-isolated serial port 17 Serial communications status
9 Type B connector USB 18 Output status
Maximum Number of Inputs and Outputs
Many of the inputs and outputs can be configured for different roles. Table 1
shows the maximum number of terminals for a specific function. A configurable
terminal that is assigned to one role reduces the risks of its use as another role and
reduces the allowed maximum number of terminals for other functions.
Table 1 - Maximum Terminals Allowed
Function Max Allowed Function Max Allowed

Safety inputs, normally closed Up to 18 Pulse test outputs Up to 6
Safety inputs, normally open Up to 6 OSSD safety outputs Up to 10
Single-wire safety input Up to 2 Non-pulsed (standard) outputs Up to 6
Single-wire safety output Up to 2

Overview Chapter 1
Software The CR30 safety relay is configurable with the Connected Components
Workbench software. This software is a set of collaborative tools that supports
the CR30 safety relay. It is based on Rockwell Automation and Microsoft Visual
Studio technology. Connected Components Workbench software is used to
configure the CR30 safety relay, program the Micro800 controllers, and
configure many PowerFlex drives and PanelView graphic display terminals.
Obtain Connected Components Workbench Software
The Connected Components Workbench software is free and can be

downloaded from:
http://compatibility.rockwellautomation.com/Pages/
MultiProductDownload.aspx?Keyword=Free&crumb=112
To help you configure your relay through the Connected Components

Workbench software, you can refer to the Connected Components Workbench
Online Help (provided with the software).
Communication Connection The CR30 safety relay has three potential communication connections:
USB port
RS-232 port
Ethernet I/P plug-in module
Figure 3 - Communication Connections
RS-232 Port
USB Port
Ethernet Port
USB Connection
The CR30 safety relay has a USB interface for connection to a personal computer
for configuration. Use a standard USB Male (A) to Male (B) cable to connect to
the relay.

Chapter 1 Overview
The USB port is always available. When a USB connection is made, the CR30
safety relay appears as address 16 under the Virtual Backplane Chassis
(AB_VBP-1) in RSLinx (Figure 4).
Figure 4 - CR30 Safety Relay Listed Under the Virtual Backplane
Serial Port Connection
The embedded serial port is used to transfer control and status to other
Allen-Bradley products. The CR30 safety relay only supports RS-232 protocol.
The connection is not isolated. The RS-232 signals are referenced to the relay
power ground.
The RS-232 port is available if an Ethernet I/P module is not used.
EtherNet/IP Connection
When an EtherNet/IP module is installed, the CR30 safety relay appears under
the AB_ETHIP-n or AB_ETH-n node, where n is an integer. If an
EtherNet/IP plug-in module is installed, the RS-232 port is disabled.
Figure 5 shows two CR30 safety relays; one with address 30 and a second with
address 47. Devices with an X over their icons are not available.
Figure 5 - CR30 Listed Under EtherNet/IP

Chapter 2
Installation
Mounting Dimensions DIN Rail Mounting
Mounting dimensions exclude mounting feet or DIN Rail latches.
Figure 6 - DIN Rail Mounting [mm (in.)]

100 (3.94) 80 (3.15)
90 (3.54)
Maintain spacing from objects such as enclosure walls, wireways, and adjacent
equipment. Allow 50.8 mm (2 in.) of space on all sides for adequate ventilation. If
optional accessories/modules are attached to the relay, such as the power supply
catalog number 2080-PS120-240VAC, make sure that there is 50.8 mm (2 in.) of
space on all sides after attaching the optional parts.
The module can be mounted using the following DIN Rails:
35 x 7.5 x 1 mm (EN 50 022 - 35 x 7.5).
To mount the module on a DIN Rail:
1. Use a flat-blade screwdriver in the DIN Rail latch and pry it downwards
until it is in the unlatched position.
2. Hook the top of the DIN Rail mounting area of the relay onto the DIN
Rail, and then press the bottom until the relay snaps onto the DIN Rail.
3. Push the DIN Rail latch back into the latched position.
Use DIN Rail end anchors (Allen-Bradley catalog numbers 1492-EAJ35 or
1492-EAHJ35) for vibration or shock environments.
To remove the module from the DIN Rail, pry the DIN Rail latch downwards
until it is in the unlatched position.
For environments with greater vibration and shock concerns, use the panel
mounting method (page 18) instead of DIN Rail mounting.

Chapter 2 Installation
Panel Mounting
Figure 7 - Panel Mounting [mm (in.)]
86 (3.39)
100 (3.94)
The preferred mounting method is to use four M4 (#8) screws per module. Hole
spacing tolerance: 0.4 mm (0.016 in.).
Follow these steps to install your relay with mounting screws.
1. Place the relay against the panel where you are mounting it. Make sure that
the relay is spaced properly.
2. Mark holes to be drilled through the mounting screw holes and mounting
feet then remove the relay.
3. Drill the holes at the markings, then replace the relay and mount it.
Leave the protective debris strip in place until you are finished wiring the relay
and any other devices.

Installation Chapter 2
Enclosure Considerations Most applications require installation in an industrial enclosure to reduce the
effects of electrical interference and environmental exposure. Pollution Degree 2
is an environment where normally only non-conductive pollution occurs except
that occasionally temporary conductivity that is caused by condensation can be
expected. Overvoltage Category II is the load level section of the electrical
distribution system. At this level, transient voltages are controlled and do not
exceed the impulse voltage capability of the product insulation.
This equipment is intended for use in a Pollution Degree 2 industrial

environment, in overvoltage Category II applications (as defined in
IEC 60664-1), at altitudes up to 2000 m (6562 ft) without derating. This
equipment is considered Group 1, Class A industrial equipment according to
IEC/CISPR 11. Without appropriate precautions, there could be difficulties
with electromagnetic compatibility in residential and other environments due to
conducted and radiated disturbances.
This equipment is supplied as open-type equipment. It must be mounted within

an enclosure that is suitably designed for those specific environmental conditions
that are present. It must also be appropriately designed to prevent personal injury
as a result of accessibility to live parts. The enclosure must have suitable
flame-retardant properties to prevent or minimize the spread of flame, complying
with a flame spread rating of 5VA, V2, V1, V0 (or equivalent) if non-metallic.
The interior of the enclosure must be accessible only by the use of a tool.
Subsequent sections of this publication contain more information regarding
specific enclosure type ratings that are required to comply with certain product
safety certifications.
For more information, see:

Industrial Automation Wiring and Grounding Guidelines, publication
1770-4.1, for more installation requirements.
NEMA Standard 250 and IEC 60529, as applicable, for explanations of
the degrees of protection that is provided by different types of enclosure.
Preventing Excessive Heat For most applications, normal convective cooling keeps the controller within the
specified operating range. Verify that the specified temperature range is
maintained. For most applications, proper spacing of components within an
enclosure is sufficient for heat dissipation.
In some applications, other equipment inside or outside the enclosure produce a

substantial amount of heat. In this case, place blower fans inside the enclosure to
help with air circulation and to reduce hot spots near the controller.
More cooling provisions are necessary when high ambient temperatures are
encountered. Do not bring in unfiltered outside air. Place the controller in an
enclosure to help protect it from a corrosive atmosphere. Harmful contaminants
or dirt could lead to improper operation or damage to components. In extreme
cases, use air conditioning to help protect against heat buildup within the
enclosure.

Chapter 2 Installation
Notes:

Chapter 3
Power, Ground, and Wire
Wiring Requirements and

WARNING: Before you install and wire any device, disconnect power to the
Recommendation system.
WARNING: Calculate the maximum current in each power and common wire.
Observe all electrical codes that dictate the maximum current allowable for
each wire size. Current above the maximum ratings can cause wiring to
overheat, which can cause damage.
Allow for at least 50 mm (2 in.) between I/O wire ducts or terminal strips
and the relay.
Route incoming power to the relay by a path separate from the device
wiring. Where paths must cross, their intersection must be perpendicular.
Do not run signal or communications wiring and power wiring in the same
conduit. Route wires with different signal characteristics by separate paths.
Separate wiring by signal type. Bundle wiring with similar electrical
characteristics together.
Separate input wiring from output wiring.
Label wiring to all devices in the system. Use tape, shrink-tubing, or other
means to label wires. Also use colored insulation to identify wires based on
signal characteristics. For example, you can use blue for DC wiring and red
for AC wiring.
Disabling pulse testing on safety-related terminals, including dedicated
safety outputs and test-pulse source-evaluating input signals, requires
protection (for example, cable conduit) and separated wiring of safety
signals to exclude potential cross loop faults.
IMPORTANT Fault exclusions for conductors and wiring must follow the requirements
according to EN ISO 13849-2 Table D.3 and D.4. A fault exclusion can reduce the
overall safety rating of the related safety function to a maximum of PLd per
ENISO 13849-1

Chapter 3 Power, Ground, and Wire
Wire Size
Table 2 - Wiring Requirements
Wire Size
Type Min Max

Copper Stranded 0.326 mm 1.31 mm Rated @ 90 C (194 F)
(22 AWG) (16AWG) insulation min.
Terminal Assignments
Some terminals are designed to have one specific function. Some terminals can
perform multiple functions; these terminals must be configured in the
application software.
Table 3 - Terminal Assignments

Terminal Function
00 Safety Input (N.C.)
10 Safety Input (N.C.) or Single Wire Safety Input
11 Safety Input (N.C.) or Single Wire Safety Input
+24V DC A1 Power Supply (+24V, -15%, +10%)
COM 0V A2 Power Supply (0V)
12 Test Output or OSSD High Side or Safety Input (N.C.) or Safety Input N.O. or standard diagnostic.
18 OSSD High Side
19 OSSD High Side
20 OSSD High Side or Single-wire Safety Output
21 OSSD High Side or Single-wire Safety Output

Power, Ground, and Wire Chapter 3
Grounding the Configurable

Safety Relay WARNING: All devices that are connected to the RS-232 communication port
must be referenced to controller ground, or be floating (not referenced to a
potential other than ground). Failure to follow this procedure can result in
property damage or personal injury.
This product is intended to be mounted to a grounded mounting surface such as

a metal panel. See the Industrial Automation Wiring and Grounding Guidelines,
publication 1770-4.1, for more information.
Connecting a Power Supply Power for the relay is provided by an external 24V DC power supply source.
To comply with the CE Low Voltage Directive (LVD), I/O power must come
from a DC source compliant with Safety Extra Low Voltage (SELV) or Protected
Extra Low Voltage (PELV).
To comply with UL restrictions, I/O power must come from DC sources whose
secondary circuits are isolated from the primary circuit by double insulation or
reinforced insulation. The DC power supply must satisfy the requirements for
Class 2.
The following Rockwell Automation power supplies are SELV- and PELV-
compliant, and they meet the isolation and output hold-off time requirements of
the CR30 safety relay:
Catalog number 2080-PS120-240VAC
Catalog number 1606-XLP30E
Catalog number 1606-XLP50EZ
Catalog number 1606-XLDNET4
Catalog number 1606-XLSDNET4
Figure 8 - Power Supply

00 01 02 03 04 05 06 07 08 09 10 11
Input Terminal Block
+DC COM
24V 0V Input/Output Terminal Block
A1 A2 12 13 14 15 16 17 18 19 20 21
+24V DC
24V Common

Wire Input Devices Input Devices with Mechanical Contacts
WARNING: Applying an inappropriate DC or any AC voltage can result in a loss

of safety function, product damage, or serious injury. Properly apply only the
specified voltage to relay inputs.
Input devices with mechanical contact outputs, such as Emergency Stop (E-stop)
buttons and safety limit switches, use both a safety input terminal and a test
output terminal. This setup enables the circuit to achieve a Category 4 rating.
When safety devices are connected through test outputs to an input circuit on
the CR30 safety relay, the recommended wire length is 30 m (98.4 ft) or less.
Figure 9 - Input Devices with Mechanical Contacts

+24 V DC
00 01 02 03 04 05 06 07 08 09 10 11
+DC COM
24V 0V
Input/Output Terminal Block
A1 A2 12 13 14 15 16 17 18 19 20 21
Configured for
3mA Typical
Pulse Test Output
24 V Common
Input Devices with OSSD Outputs
Devices, such as light curtains, laser scanners, and solid-state interlocks, having
current-sourcing PNP semiconductor outputs (OSSD) have built-in test pulses
(or other method of fault detection). These devices are connected directly to the
inputs of the CR30 safety relay and do not use a test output. These devices must
have a common reference with the CR30 safety relay.
Figure 10 - Input Devices with OSSD Outputs

+24 V DC
Receiver Transmitter
+ +
OSSD1
OSSD2
- -
00 01 02 03 04 05 06 07 08 09 10 11
+DC COM
A1 A2 12 13 14 15 16 17 18 19 20 21
Must have common reference.

24 V Common

Power, Ground, and Wire Chapter 3
Wire Output Devices Use Surge Suppressors
Because of the potentially high current surges that occur when switching
inductive load devices, such as motor starters and solenoids, the use of some type
of surge suppression to help protect and extend the operating life of the relays
output is required. By adding a suppression device directly across the coil of an
inductive device, you prolong the life of the outputs. You also reduce the effects
of voltage transients and electrical noise from radiating into adjacent systems.
The following diagram shows an output with a suppression device. We

recommend that you locate the suppression device as close as possible to the load
device. Since the outputs are 24V DC, we recommend 1N4001 (50V reverse
voltage) to 1N4007 (1000V reverse voltage) diodes for surge suppression for the
OSSD safety outputs, as shown in Figure 11. Connect the diode as close as
possible to the load coil.
Figure 11 - Surge Suppressors

+24V DC
+DC COM
A1 A2 12 13 14 15 16 17 18 19 20 21
Diode
Surge
K1 Suppressor
24 V Common
Example suppressors include:

Catalog number 100-FSD250 for Bulletin 100S Contactors
Catalog number 1492-LD4DF terminal block with built-in
1N4007 diode
Wire Embedded Serial Port The embedded serial port is a non-isolated RS-232 serial port that is targeted to
be used for short distances (<3 m [<9.8 ft]) to devices such as HMIs (for
example, PanelView). Pin2 and the shield are both internally connected to the
-24V Common (A2) terminal of the CR30 safety relay.
The CR30 safety relay uses the minimal RS-232 connection; only transmit
(TxD), receive (RxD) and ground connections are required. The CR30 safety
relay does not require nor perform any Handshaking, therefore the Request To
Send (RTS), Clear To Send (CTS), and Carrier Detect (DCD) are not used.
The CR30 safety relay only supports RS-232. The RS-485 signals, which are
used by some products with the 8-pin mini DIN connector, are not used.

Figure 12 - Pinouts
1 2
Receive
3 4 5
6 7 8
Transmit
24V Common
Pin RS-232 Example Pin RS-232 Example

1 RS-485 (not used) 5 DCD (not used, yellow)
2 GND (green) 6 CTS (not used, white)
3 RTS (not used, red) 7 TxD (brown)
4 RxD (orange) 8 RS-485 (not used)
Table 4 shows a recommended list of cables for the serial connection between the
CR30 safety relay and other Allen-Bradley products. They may also be suitable
for third-party products.
DIN connectors were originally standardized by the Deutsches Institut fr

Normung (DIN), the German national standards organization. Many variations
of this connector exist. Select a compatible cable from Table 4 for use with the
CR30 safety relay.
Table 4 - Cables
Cat. No. Description Length
1761-CBL-AM00 8-pin Mini DIN to 8-pin Mini DIN 0.5 m (1.5 ft)
1761-CBL-HM02 8-pin Mini DIN to 8-pin Mini DIN 2 m (6.5 ft)
1761-CBL-AP00 8-pin Mini DIN to 9-pin D-shell 0.5 m (1.5 ft)
1761-CBL-PM02 8-pin Mini DIN to 9-pin D-shell 2 m (6.5 ft)
The CR30 safety relay is categorized as Data Communications Equipment

(DCE). The PanelView HMIs are Data Terminal Equipment (DTE). These
categorizations are important when point-to-point wiring connections are made.
When DTE communicates with DCE, the connections are pin x to pin x. When
DTE communicates with other DTE, a crossover is required (for example, TxD
must be connected to RxD).
Power Cycling The state of the CR30 safety relay upon power-up depends on its state when
power was turned off. The Run status indicator indicates the state of the CR30
safety relay.
1. Program Mode (RUN status indicator off )
The CR30 safety relay is in program mode upon power-up.
2. Run Mode with Program Not Verified (RUN status indicator flashing)
The CR30 safety relay returns to Run mode. Run mode without
verification is good for only 24 hours on continuous running.
3. Run Mode with Program Verified (RUN status indicator solid green)
The CR30 safety relay returns to Run mode with no limitation on the run
duration.

Chapter 4
Configuring the CR30 Safety Relay
This manual assumes that the Connected Components Workbench software has
been loaded and describes basic operations. Use the online help for configuring
the safety functions.
ATTENTION: Suitably trained personnel must conduct activities including

installation, adjustments, commissioning, use, assembly, disassembly, and
maintenance in accordance with applicable code of practice. If this equipment is
used in a manner that is not specified by the manufacturer, the protection that
is provided by the equipment can be impaired.
Start Connected Components 1. Click the windows Start menu in the lower left corner.
Workbench Software 2. Click Connected Components Workbench.
Start Page The Start Page allows you to do the following:

Create a new project
Open an existing project
Open a recent project
Open on-line training videos (requires an internet connection)
The Discover feature is not supported with CR30 safety relays.
You can bypass this page by clearing the Show page on startup checkbox.

Chapter 4 Configuring the CR30 Safety Relay
New Project 1. Start a new project three ways:

Click New under the Project heading
Click File in the main menu, then click New
Press Ctrl-N on your keyboard
The Connected Components Workbench software maintains a list of projects to

help prevent you from overwriting an existing project. The name of each new
project increments by one (for example, Project90). This window allows you to
select a name and a location for the file.
2. Type a new name, for example, My CR30 Project1.
3. Click Create.
The Add Device window appears.

4. Expand the Safety listing.
5. Click the 440C-CR30-22BBB.
Select Existing Device or

from Catalog
4
5

Configuring the CR30 Safety Relay Chapter 4
You now have the opportunity to select the firmware revision of the CR30 safety
relay.
6. Click the Version pull-down menu to reveal the options.
7. Click the firmware revision that resides in the CR30 safety relay. In this
example, 10 is selected.
8. Click Select.
TIP To determine the current firmware revision, open RSLinx, right-click the CR30
safety relay, and click Device Properties.

The firmware selection process is confirmed in the next window.

9. Confirm that the firmware revision is correct and click Add to Project.
10. The project name appears in the title of the window and in the Project
Organizer. The CR30 safety relay appears in the Project Organizer with
the default name Guardmaster_440C_CR30.
If desired, the name of the safety controller can be changed. Click the
name to change the name of the safety controller (or right-click and select
Rename). This step is not required to complete the configuration or the
run the CR30 safety relay. The name that you choose must follow these
rules:
No special characters, except underscore
Cannot start with an underscore
No double underscore
132 characters
In this example, the safety controller name is My_CR30_Project1.
10
TIP An asterisk appears after the controller name and project name to indicate that
a valid project has not yet been saved.

11. In the Project Organizer, double-click the safety controller name or icon to
open the product configuration tab.
11
You can configure the following part of the CR30 safety relay:
Plug-in modules
Status indicator assignment
Fault codes
Edit the logic
12. Click Edit Logic to open the workspace to create a new logic
configuration.
12

The Workspace The workspace is split into a grid of four columns: Safety Monitoring (the
inputs), Logic Level A, Logic Level B, and Safety Output.
The workspace view can be customized by selecting optional panes under the
View menu option.
1. Click the Toolbox icon in the upper right. Then, click and drag the pane
to the desired location with the workspace.
2. Click and drag the E-stop function block to the first block in the work
space.
The Connected Components Workbench software automatically assigns
embedded input terminals EI_00 and EI_01 to the function block. You
can change the terminal connection parameters.
3. Click and drag the immediate Output to the first Safety Output block in
the workspace.
The Connected Components Workbench software automatically assigns
embedded output terminals EO_18 and EO_19 to the output block. In
addition, the output terminals are pulse tested (PT). You can change the
terminal connection parameters.
4. Use the pull-down menu to change the Immediate Output Reset from
Manual to Automatic.

5. Click the input connection (shown in blue when no connection is made)

of the Immediate Off output block.
6. Click the output connection of the Emergency Stop button (shown in
blue when no connection is made).
The Connected Components Workbench software automatically creates
two Pass Through blocks in Logic Level A and Logic Level B and makes
the connection.
7. Click the Product Setup tab.
7 2
6 5
4
Build and Download the Download initiates the transfer of the configuration file of your CR30 safety
relay project to the CR30 safety relay. The download process automatically
Configuration performs a file transfer verification to verify that the project configuration and
configuration in the CR30 safety relay is valid and equal. Successful file transfer
verification allows you to change the CR30 safety relay operation mode to Run
and execute the safety function.
IMPORTANT Transfer file verification only checks inconsistency of the configuration in the
project and the relay such as connection errors and corrupted files.
After file transfer, the configured safety function itself is still not verified. The
responsible personnel must check whether the configured safety function
meets the safety requirements according to the risk assessment and fulfills all
applicable standard and regulations

1. Click the Download icon to build and download the configuration to the
CR30 safety relay.
The configuration is built and the results appear in the Output pane. The
Connection Browser window appears.
2. Expand the AB_VBP-1 branch.
3. Select node 16 (the CR30).
4. Click OK.
2
3 4

The configuration is downloaded to the CR30 safety relay. A dialog box with the
Configuration CRC that was downloaded and the Configuration CRC that was
uploaded as part of the verification process appears.
5. Click Yes to change the safety relay to Run mode.
Confirmation of a successful download can be viewed in the Output pane. If the

application is wired, you can monitor the performance of the logic with the host
computer.
6. Click the Edit Logic button.
7. The function blocks are colored to indicate their status. All blocks are
green, which indicates the dual E-stop circuits are closed and the output
terminals are ON.

Verification To complete the safety system requirements, the configuration of the CR30
safety relay must be verified. If the configuration is not verified, the CR30 safety
relay can be placed in Run mode for only 24 hours. When not verified, the RUN
status indicator flashes green at a 2 Hz rate.
TIP After 24 hours, the CR30 safety relay reverts to a non-recoverable fault state
with a solid red Fault status indicator. The Connected Components Workbench
software shows a Type 06 Code 07 fault.
The power to the CR30 safety relay must be cycled to restore operation for
another 24 hours.
Figure 13 - Non-verified Fault
If the safety system is verified, the CR30 safety relay assigns a four-digit number
and allows the relay to operate in Run mode beyond the 24-hour limit. After
verification, the Run status indicator remains solid green.
The Connected Components Workbench software must be connected to the

CR30 safety relay during verification.
IMPORTANT The verification process must be documented in the technical file of the safety
system.
1. Click the product setup tab.

2. The CR30 safety relay must be in Program mode for verification.
3. Click the Verify button to make the Safety Verification window appear.
4. Answer all questions and check each box, if completed.
5. The Generate button is enabled only after all checkboxes are checked.
Click Generate.

1
3
6. Click Yes to change the CR30 safety relay back to Run mode.
7. A four-digit verification ID is generated.

8. Click OK.
7 8

The ID is stored in the CR30 safety relay. During power-up, the CR30
safety relay uses this number during its self-testing to verify that its internal
processors are functioning properly. When the configuration is uploaded
from the CR30 safety relay, the Connected Component Workbench
software shows the Verification ID.
The ID is not stored with the Connected Component Workbench project

file.
Viewing the Verification ID without the Connected Components

Workbench Software
During machine lifecycle, it is required to check whether the system

requirements are still valid. The status indicators can be used to view the
verification ID without the use of the Connected Components Workbench
software and compare the documented verification ID of the technical file of the
machine.
If the CR30 safety relay configuration has not been verified, the ID is 0000. Press
and release the Verification button. The IN 0 status indicator is green. The OUT
1, 2, 3, and 4 status indicators are green. After 5 seconds, the status indicators will
revert to show the status of the inputs and outputs as configured in the software.

Figure 14 - Verification ID is 0000 (Not Verified)
All Values
are 0
Verification Digits
1, 2, 3, and 4
If the CR30 safety relay configuration has been verified, pressing the Verification
button cycles the status indicators through each verification digit. In
Figure 15Figure 18, the Verification ID is 7916.
Press and release the Verification button once.
Figure 15 - First Verification Digit
Value is 7
Verification Digit 1

Press the Verification button within 5 seconds.
Figure 16 - Second Verification Digit
Value is 9
Figure 17 - Third Verification Digit
Value is 1
Figure 18 - Fourth Verification Digit
Value is 6
After 5 seconds, the status indicator will revert to show the status of the inputs
and outputs as configured in the Connected Components Workbench software.

Multiple Block Connections Multiple blocks can be connected between:

Safety Monitoring Functions and Logic Level A
Logic Level A and Logic Level B, and
Logic Level B and Safety outputs
This connection is done by clicking the desired input and output connection
points. The Connected Components Workbench software automatically
determines whether the connection can be made.
Figure 19 - Multiple Block Connections

Notes:

Chapter 5
Pulse Testing
The CR30 safety relay performs three types of pulse testing functions:
N.O. inputs
N.C. inputs
Outputs
Normally Open Input Pulse When a safety input is configured for normally open (N.O.) operation, the CR30
safety relay periodically checks the status of the input. The purpose of the test
Testing pulse is to detect short circuits in the wiring to 24V DC, 0V and between two
channels. This test is independent of the Input Test Pulses. Six terminals
(1217) can be configured for normally open operation.
When a terminal is configured for N.O. operation, the CR30 safety relay tests the
status of each terminal by generating a test pulse as shown in Figure 20.
The normally open input pulse testing cannot be configured to be on or off. If the
terminal is configured to be N.O., the CR30 safety relay performs pulse testing.
Figure 20 - N.O. Terminal Test Pulse

24V
0V
0 640s
When multiple terminals are configured for normally open operation, the CR30
safety relay tests each one at 500-ms intervals. This test sequence is repeated every
6.4 seconds.
In Figure 21 on page 44, terminals 12, 14, 15, and 17 are configured for N.O.
operation, and are tested. Terminals 13 and 16 are configured for normally closed
(N.C.) operation, therefore the test pulse does not occur on these two terminals.

Chapter 5 Pulse Testing
Figure 21 - Test Sequence

1 2 3 4 5 6
HI
Terminal 12 LO
HI
Terminal 13
LO
HI
Terminal 14
LO
HI
Terminal 15
LO
HI
Terminal 16
LO
HI
Terminal 17
LO
500ms intervals
Normally Closed Input Pulse Terminals 1217 can be configured to generate test pulse outputs. These signals
are used to test for short circuits in the wiring to 24V DC, 0V and between two
Testing channels that are wired to separate test pulse sources (one channel that is sourced
from an odd number terminal [13, 15, and 17], and the other one from an even
number terminal [12, 14, and 16]).
IMPORTANT Safety systems that require a Category 4 structure per ISO13849-1 and SIL 3
rating per IEC61508 must use pulse testing for the dual channel N.C. contacts.
Pulse testing for Category 3, 2, and 1 structures and SIL 2 and 1 ratings is
recommended.
The CR30 safety relay generates three distinct pulses, called A, B, and C. Each
pulse is 1.7 ms wide. Pulse Test B immediately follows Pulse Test A. Pulse Test C
immediately follows Pulse Test B. The pulse tests are repeated every 25 ms.
The timing diagram in Figure 22 shows an example of the pulse testing when the
respective terminals are configured for A, B, and C.
Figure 22 - Timing Diagram

1.7ms
24V
Terminal 12 - A 0V
24V
Terminal 13 - B 0V
24V
Terminal 14 - C 0V
24V
Terminal 15 - A 0V
24V
Terminal 16 - B 0V
24V
Terminal 17 - C 0V
0 25ms
The purpose of the test pulses is to detect short circuits from the input signal to
24V DC, 24V common, and shorts from one input signal to another input signal.
If one input signal is assigned to Test Pulse A and another signal is assigned to

Pulse Testing Chapter 5
Test Pulse B (or C), then the CR30 safety relay detects a short circuit from one
input to the other, and the CR30 safety relay de-energizes the outputs of those
safety functions that use the two inputs. In this example, you cannot select
terminal 12 as one test pulse source and terminal 15 as the second test pulse
source, as both of these terminals produce the A pulse.
The Connected Components Workbench software automatically prevents the

user from selecting two of the same pulses when dual channel inputs and two test
sources are selected.
Output Pulse Testing Internally, the CR30 safety relay provides dual-channel capability to turn off its
safety outputs. Conceptually, think of this as a main output transistor feeding
individual output transistors. The CR30 safety relay repeats a test process where
it tests the main transistor twice and then sequentially tests each individual
output twice. After successful completion of the tests, the CR30 safety relay
repeats the test sequence.
IMPORTANT Safety systems that require a Category 4 structure per ISO13849-1 and SIL 3
rating per IEC61508 must use pulse testing for the dual channel outputs. Pulse
testing for Category 3, 2, and 1 structures and SIL 2 and 1 ratings is
recommended.
Figure 23 - Output Pulse Testing

+24V DC
00 01 02 03 04 05 06 07 08 09 10 11
CR30 Main Transistor
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com
When the main transistor is tested, a 50-s test pulse appears simultaneously on
all outputs. The main transistor is tested again 125 ms later.
Figure 24 - Main Transistor Test

50s
24V
Terminal 12 0V
24V
Terminal 13 0V
24V
Terminal 20 0V
24V
Terminal 21 0V
0 125ms

Chapter 5 Pulse Testing
Then a sequence occurs in which each output is individually tested twice. The
test pulse is 50 s wide. The test pulses occur every 250 ms and switch to the next
output configured with testing.
Figure 25 - Test Pulse Sequence
24V
Terminal 12 0V
24V
Terminal 13 0V
24V
Terminal 20 0V
24V
Terminal 21 0V
0 250 500ms

Chapter 6
Input Filter
Input filtering gives the CR30 safety relay the ability to filter out noise and, in
some cases, inadvertent operation.
Sometimes, an operator presses a push button and immediately realizes that they
pressed the wrong button and immediately releases the button. In muting
applications, an object that moves down a conveyor, could stop at a point where
the muting sensor is deactivated and then back off enough that the muting sensor
is reactivated.
When an input filter time (t1) is specified, an input channel is allowed to go to

the LO state while the other channel is in the HI state for that length of time
without the output of the instruction going to the LO state. However, the output
goes to the LO state when both input channels are in the LO state
simultaneously. The input filter operates on both the leading and trailing edge of
the input signals. If specified, the filter time must be included in the response
time calculation.
Figure 26 - Input Filtering
1
Channel A
0
t1 t1
1
Channel B
0
t1 t1
1
Output
0
Input filtering can set in 25-ms increments, from 01000 ms. The default value is
0 ms.

Chapter 6 Input Filter
The input filtering is set in the Advanced Settings of each safety monitoring
block. Figure 27 shows that the Enabling Switch function with the input filter is
set to 4 (4 x 25 = 100 ms).
Figure 27 - Enabling Switch

Chapter 7
Discrepancy Time
Safety Monitoring functions that use dual inputs have a feature that allows the
CR30 safety relay to test for the timing of the operation of both channels. In
most cases, the outputs of dual-channel safeguarding devices change state within
a few milliseconds of each other. In some cases, the second channel can change
state much later than the first.
In these latter cases, you want to make sure that both channels return to their
safety state within a specified time relative to each other. For example, the
safety state of dual N.C. input is when both inputs are in the closed state.
Channel A can close before Channel B or Channel B can close before Channel A.
The CR30 safety relay allows you to specify a discrepancy time in 50-ms
increments, from 03 seconds.
Figure 28 - Discrepancy Time
1
Channel A
0
1
Channel B
0
t t
1
Output
0
t <= Discrepancy Time
The discrepancy is set in the Advanced Settings of each safety monitoring block.
The following example shows the Gate Switch function with the discrepancy
time set to 2 (2 x 50 = 100 ms).
When the discrepancy setting is set to zero, the CR30 safety relay does not test
for discrepancy. The duration between the operation of channel one and channel
two is infinite. The default value 100 ms.
Figure 29 - Setting Discrepancy Time

Chapter 7 Discrepancy Time
Notes:

Chapter 8
Safety Block Renaming
General With version 7 of the Connected Components Workbench software and

revision7 of the CR30 safety relay firmware, the names of both the safety
monitoring functions and safety output functions can be edited. The editing
rules follow IEC61131-3, section 2.1.2.
This feature is important because it allows you to distinguish between multiple

occurrences of the same function blocks during the design, wiring, and
troubleshooting phases.
The name change is initiated in one of two ways:

Simply double-click the name inside the block
Highlight the block and press F2.
The typical editing keys (Home, End, Backspace, Delete, Left Arrow, Right
Arrow, Page Up, Page Down, and Mouse Click) can be used to edit the name.
When the block is selected for editing, the name appears in a light blue box, and
the name is highlighted in light blue background, as shown in Figure 30.
Figure 30 - Block Name Selected for Editing
Follow these simple rules for naming the blocks:

Names must begin with a letter (upper or lower case) or an underscore
Names cannot have spaces
Names can contain letters, numbers, and underscores (no special
characters)
Name length can be anywhere from 130 characters
Letter case is not significant
Multiple leading or consecutive embedded underscores are not allowed
Trailing underscores are not allowed

Chapter 8 Safety Block Renaming
Naming Error Indication After tabbing off, pressing enter, or mousing off the block, the Connected
Components Workbench software evaluates the integrity of the name. If valid,
the name appears in black letters. If invalid, the software shows a naming error in
two ways:
A red box around the name
An error message in the build results
Figure 31 - Red Box Indicates Naming Error
The example block in Figure 32 has two errors:

The name starts with a period (.).
The name contains a space.
Figure 32 - Build Error List
After clicking the Build button, the Error List shows the name errors. In the
example in Figure 32, SMF1 and SOF1 have naming errors.
When a naming error occurs, the project cannot be built and downloaded to the
CR30 safety relay. Then naming errors must be corrected. However, the project
can be saved and reopened with the naming errors.

Chapter 9
Safety Monitoring Functions
Many types of safeguarding/safety devices and safety related signals can be

connected as inputs to the CR30 safety relay. The Connected Components
Workbench software facilitates the selection and connection of the device. Each
block is assigned the next available settings for input terminals, test sources
number of inputs, pulse testing, discrepancy time, and input filter.
Emergency Stop The Emergency Stop function block sets the parameters for typical emergency
stop push buttons. In the Connected Components Workbench software, click
and drag (or double-click) the block to an available Safety Monitoring Function
spot. When mechanical operated contacts are used, these contacts must be
direct-acting contacts.
Figure 33 - Emergency Stop Function Block
The available input selections for the Emergency Stop inputs are:
EI_00EI_11 (embedded input terminals 0011)
MP_12MP_17 (multi-purpose terminals 1217)
You can modify the number and types of inputs:

2 N.C.
2 OSSD
1 N.C.

Chapter 9 Safety Monitoring Functions
Pulse testing can be disabled or set to 2 Sources. When 2 Sources is selected, the
next available test sources are automatically selected. You can modify the sources
afterward.
You can use the default Discrepancy Time and Input Filter or choose to modify
these settings.
Figure 34 - Example Schematic of a Dual Channel E-stop Without Test Pulses

+24V DC
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com
Figure 35 - Example Schematic of a Dual Channel E-stop Using Test Pulses A and B
+24V DC
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A B
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com
Enabling Switch The Enabling Switch function block sets the parameters for typical enabling (or
hold-to-run) devices. In the Connected Components Workbench software, click
spot. When mechanical operated contacts are used, these contacts must be direct-
acting contacts.
Note: This function block is intended to be used only in applications with

a 3-position enabling switch that only allows activation of its outputs
(closed contacts) when the operator presses and holds the switch into its
middle position. The switch has to be designed using a mechanical force to
reset to its default off (contact open) position.

Safety Monitoring Functions Chapter 9
Figure 36 - Enabling Switch Function Block
The available input selections for the Enabling Switch inputs are:

2 N.C.
2 OSSD
1 N.C.
afterward.
these settings.
Figure 37 - Example Schematic of a Dual Channel Enabling Switch Without Test Pulses
+24V DC
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com
Figure 38 - Example Schematic of a Dual Channel Enabling Switch Using Test Pulses A and B
+24V DC
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A B
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com

Feedback Monitoring The Feedback function block is used in safety systems to monitor the status of
output devices (like safety contactors). When the output device is off, a HI signal
is fed back to the input of the CR30 safety relay to indicate that the device is
indeed off. When the output device is energized, the feedback signal goes LO. If
the output device remained energized, the feedback signal remains LO and the
CR30 safety relay does not energize the output. The feedback contacts can be
positive-guided, mechanically linked, or mirrored contacts.
The CR30 safety relay accepts one, two, three, or four inputs into each feedback
block. All inputs must be HI for the output of the block to go HI.
In the Connected Components Workbench software, click and drag (or double-
click) the block to an available Safety Monitoring Function spot.
Figure 39 - Feedback Monitoring Function Block
The available input selections for the Feedback Monitoring are:

P1_00P1_03 (plug-in 1 terminals 0003)
SP_00SP_15 (Modbus inputs 0005)
You can modify the number of inputs within the range of 14.
You can use the default Input Filter or choose to modify this setting.
In firmware revision 10 and later, multiple output blocks can use each feedback
block.

Figure 40 - Example Feedback Schematic with Two Feedback Contacts Connected in Series to One
Input Terminal
+24V DC
K1
K2
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A1 A2 12 13 14 15 16 17 18 19 20 21
K1 K2
24V Com
Figure 41 - Example Feedback Schematic with Four Feedback Contacts Connected Individually to
Four Input Terminals
+24V DC
K1 K2 K3 K4
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A1 A2 12 13 14 15 16 17 18 19 20 21
K1 K2 K3 K4
24V Com
Gate Switch The Gate Switch function block sets the parameters for typical safety-gate
interlock switches. In the Connected Components Workbench software, click
spot.
Figure 42 - Gate Switch Function Block
The available input selections for the Gate Switch inputs are:


2 N.C.
2 OSSD
1 N.C.
afterward.
these settings.
Figure 43 - Example Schematic of a Dual Channel Safety Gate Switch Without Test Pulses
+24V DC
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com
Figure 44 - Example Schematic of a Dual Channel Safety Gate Switch Using Test Pulses A and B
+24V DC
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A B
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com
Figure 45 - Example Schematic of a Dual Channel Safety Gate Switch Using OSSD Outputs
+24V DC
A1
A2
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com

Light Curtain The Light Curtain function block sets the parameters for light curtains that have
dual OSSD outputs. In the Connected Components Workbench software, click
spot. This block can be used for other devices, like laser scanners, with OSSD
outputs.
Figure 46 - Light Curtain Function Block
The available input selections for the Light Curtain inputs are:
these settings.
Figure 47 - Example Schematic of a Light Curtain

+24V DC Receiver Transmitter
+ +
OSSD1
OSSD2
- -
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com

Lock Control The Lock Control function block is designed to issue an unlock request to a
guard locking safety device. Example devices include the Allen-Bradley
Guardmaster TLS-ZR, TLS-ZL, 440G-LZ, TLS1, TLS2, TLS3, 440G-MT, and
Atlas guard locking switches. This function controls both power-to-lock and
power-to-release switches.
Figure 48 - Lock Control Function Block
LR - The Lock Request input turns OFF the ULC (Unlock Control
Output.
ULR - The Unlock Request input is used to request a power-to-release
electromagnetic solenoid (or similar device) to unlock. It turns the UCL
output ON when two conditions are met.
The Hazard Feedback signal is ON.
The Stop Time has expired.
ULR Latch - Set to OFF or ON by a mouse click.
When the ULR Latch configuration is set to OFF, the Unlock Request
input is ignored during hazardous motion, that is, when the Hazard
Feedback input is OFF.
When the ULR Latch configuration is set to ON, the Unlock Request
input is latched even during hazardous motion, that is, when the Hazard
Feedback input is OFF. When the Hazard Feedback turns ON, the
Unlock Command (ULC) will go active after the Stop Time expires.
Stop Time - The Stop Time is a preset time delay that begins timing when
the Hazard Feedback transitions to ON. After the timer expires, the
Unlock Request signal can be used to energize the Unlock Command.
You must set the Stop Time to a value that allows the hazard to stop before
sending the unlock request.
The input terminals can also be assigned to another function block.

Mode Selection The Mode Selection function block allows easy configuration for a 2- or
3-position selector switch. The Positions field determines the number of
positions.
Figure 49 - Mode Selection Function Block
Requires three consecutive

unassigned Safety
Monitoring blocks
Place the Mode Selector on the workspace where there are three consecutive
unassigned Safety Monitoring blocks.
Only one input can be ON at any given time, and at least one input must be ON.
The transition from one position to another position must be completed with
250milliseconds.
The first input turns on the first output. The second input turns on the second
output. The third input turns on the third output.
TIP Recoverable faults include No Input Selected or Multiple Inputs Selected.

To clear recoverable faults, cycle through each mode.
Muting Muting is the temporary automatic suspension of the protective function of a

safeguarding device like a light curtain. The muting function allows the transport
of material through a light curtain without stopping a conveyor. To distinguish
between material and persons, a certain sequence of events and timings are used.
Muting sensors are mounted in a certain pattern, and the material must pass by
the sensors and light curtain within specified time limits. If the muting sensor
sequence is incorrect or the timing parameters are violated, the conveyor is
turned off. An override signal moves the material through the light curtain after a
violation.

Figure 50 - Muting Function Block
The light curtain (LC) signals can use the following terminals:
The muting (S1S4) and override (OV) signals can use the following terminals:
You can use the default Discrepancy Time and Input Filters or choose to modify
these settings.
The CR30 safety relay has three distinct types of muting, where the sequence and
timing of signals that the CR30 safety relay monitors allows objects to pass
through the light curtain without shutting down the machine process. The three
types are:
2-sensor T-Type
2-sensor L-Type
4-sensor

Override Settings
Override - When the Override configuration is set to ON, the override
settings are exposed. Setting the configuration to OFF hides the settings.
OV O2 - When the OV O2 configuration is set to ON, an additional
output is shown in the function block; this output is labeled O2.
If the O1 output is OFF, the Override input turns both the O1 and O2
outputs ON for the Max Override Time as long the OV input is held ON.
If the OV input is turned OFF before the time expires, the O1 and O2
outputs turn OFF. If additional time is needed, the Override input can be
cycled ON again. If the O1 output is ON, the Override input is ignored.
Exit Ends Override - When configured to ON, the O2 override output
turns OFF when the material successfully moves through the light curtain
and pass the sensors. When configured to OFF, the O2 output remains
ON during the override time.
Max Override Time - Set the maximum duration of the override time in
increments of 5 seconds. The time can be set from 1255 (11275 s). A
setting of 0 turns on the O1 and O2 outputs for 0.5 seconds.
Inputs - Set the desired number of input terminals to execute the override
function.
Pulse Testing - Creates or removes pulse testing for the override inputs. If
pulse testing is selected, then the terminals that are used for Test Source A
and B must be selected.
Advanced Settings
Mute Enable - When the Mute Enable configuration is set to ON, an
input terminal is added to the Mute function block; this input is labeled
ME. Setting the Mute Enable configuration to OFF removes the input
terminal.
When Mute Enable is set to ON, a 24V DC signal must be provided to the
specified terminal to allow the use of the sensor inputs to mute the light
curtain inputs. When the signal is 0V, two conditions can happen:
Blocked sensors cause the function block and the Fault indicator to
show a recoverable fault, but does not turn the O1 output OFF. The
Fault Reset button will clear the fault after the sensor is cleared.
A blocked the light curtain causes the O1 output to turn OFF. The O1
output to turns ON, when the light curtain is cleared.
When Mute Enable is set to OFF, the muting function is always active.
Mute Fault Reset - When the Mute Fault Reset configuration is set to
ON, a new input terminal is added to the Mute function; this input is
labeled FR. To remove the input terminal, set the Mute Fault Reset
configuration to OFF.
After a recoverable fault occurs, the FR input must be cycled ON and then
OFF. Reset occurs on the trailing edge of the signal. The reset cycle must
be completed within 3 seconds.

Two-sensor T-type Muting
The sensors and light curtain form the shape of an upside down T, when
viewed from the side. The muting sensors (MS) are mounted to form an X
sensing pattern where the sensing beams cross near the center of the light curtain
(LC).
The muting sensors must be mounted asymmetrically (unequal distance from the
light curtain), such that the material breaks one muting sensor and then the other
muting sensor as it moves along the conveyor.
Figure 51 - Two-sensor T-type Muting Arrangement
LC
MS MS
Machine Material Material Conveyor
Muting Lamp
The material can break either MS1 first (or MS2 first), then the other sensor, and
then the light curtain. As the material clears the light curtain, it must then clear
MS2 (or MS1) first and then the other sensor. The muting lamp turns on shortly
after the second sensor is blocked, and the light curtain is muted
Either of these two patterns is acceptable:
1. MS1 MS2 LC LC MS2 MS1

2. MS2 MS1 LC LC MS1 MS2
With proper arrangement of the sensors, the conveyor can move in the forward
or reverse direction, while also maintaining safeguarding integrity.
In the example below, the OSSD outputs of the light curtain are connected to
terminals 00 and 01. The two muting sensors are connected to terminals 02 and
03. The momentary, normally open override switch is connected between
terminals 12 to 04 to take advantage of pulse testing. Contactors K1 and K2,
which provide power to the conveyor (and to other hazards), are connected to
terminals 18 and 19.
The muting lamp is connected to terminal 13; this terminal should be configured
with no pulse testing. Pulse testing does not affect filament lamps, but LED
lamps may appear to flicker if pulse testing is enabled.

Figure 52 - Example Schematic for Two-sensor T-type Muting

+24V DC
Light Curtain
MS1
MS2 Override
OSSD A
OSSD B
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A
A1 A2 12 13 14 15 16 17 18 19 20 21
Muting Lamp K1 K2
Contactors
for Conveyor Power
24V Com
For simplicity, the power and ground connections of the light curtain and muting
sensors are not shown. The light curtain and muting sensors must have the same
reference (24V Com) as the CR30 safety relay for proper operation.
For proper operation, the muting sensors are on (normally closed) when not
muting, and the light curtain OSSD outputs are also on (the light curtain is
clear).
Figure 53 - Muting Time for Two-sensor T-type Muting

Start of Next Cycle
Light Curtain Muted
Muting sensor
Muting sensor
Muting lamp
Muting Time
Synchronization Time
For proper operation, MS1 and MS2 must be activated/deactivated within the
synchronization time, and the light curtain must be clear before the muting time
expires.
The minimum synchronization time is dependent on the connection of the

muting sensors and is summarized in Table 5. When connected to the embedded
terminals (0011), you must maintain at least 50-ms delay for reliable operation.
When the muting sensors are connected to a plug-in module, the
synchronization delay must be at least 150 ms.
Table 5 - Minimum Synchronization Times

Muting Sensor Connection Minimum Synchronization Time
Connected to embedded terminals 0017 50 ms
Connected to Plug-in module terminals Px_00Px_03 150 ms

Note: The synchronization time also depends on the input filter time
settings for the muting sensor inputs.
Synchronization time (total) = 2 x Input Filter Time + Synch Time
Table 6 shows the muting and synchronization times that are selectable in the
Connected Components Workbench software. These times are linked. For
example, if you select a 10-s muting time, then the synchronization time between
MS1 and MS2 is 3 s. To use a synchronization time of 6 s, you must select a 60-s
muting time.
Table 6 - Muting and Synchronization Timing Selections

Muting Time Synchronization Time Muting Time Synchronization Time
10 s 3s 900 s (15 min) 90 s
20 s 3s 1800 s (30 min) 180 s (3 min)
30 s 3s 3600 s (1 hr) 180 s (3 min)
60 s (1 min) 6s 28,800 s (8 hr) 180 s (3 min)
300 s (5 min) 30 s Infinite Infinite
If the synchronization time is exceeded, the FAULT indicator and muting output
flashes. In the Connected Components Workbench software, the Muting Safety
Monitoring Function turns red and the Mute Lamp flashes green. If the material
is backed away from the sensors, the fault is cleared and the muting lamp turns
off. If the material proceeds to break the light curtain, the output of the Muting
Safety Monitoring Function turns off. The FAULT indicator and Mute continue
to flash. Use the muting override command to turn on the output of the Safety
Monitoring Function temporarily and clear the material from the light curtain
and muting sensors. The fault condition is cleared.
Two-sensor L-type Muting
The sensors and light curtain form the shape of the letter L, when viewed from
the side. The muting sensors (MS) are mounted on one side of the light curtain
(LC).
Figure 54 - Two-sensor L-type Muting Arrangement

LC
MS1 MS2
Muted LC
Machine Conveyor Material
Muting Lamp
The material must first break MS1, then MS2 and then the light curtain. As the
material progresses, the material must clear MS1 and then MS2. The muting
lamp turns on and the light curtain is muted after MS2 is blocked. The conveyor
can only move one direction.

IMPORTANT The 2L muting arrangement must only be used for material exiting the hazard
area. It must not be used for material entering the hazard area.
terminals 00 and 01. The two muting sensors are connected to terminals 02 and
terminals 12 to 04 to take advantage of pulse testing. Contactor K1 and K2,
which provide power to the conveyor (and other hazards if necessary), are
connected to terminals 18 and 19.
Figure 55 - Example Schematic for Two-sensor L-type Muting

+24V DC
Light Curtain
MS1
MS2 Override
OSSD A
OSSD B
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A
A1 A2 12 13 14 15 16 17 18 19 20 21
Muting Lamp K1 K2
Contactors
for Conveyor Power
24V Com
clear).
Figure 56 - Muting Time for Two-sensor L-type Muting

LC muted
Muting sensor 1
Muting sensor 2
Muting lamp
t > 30ms
t > 50ms
t > 30ms
t < muting time

30ms <= t
t < synchronization
time 30ms <= t
t < synchronization
time

Connected Components Workbench software. These times are selected
independently. For example, you can select two-minute muting time, a 500-ms
synchronization time between MS1 and MS2, and a 1000-ms synchronization
time between MS2 and the light curtain.
Table 7 - Muting and Synchronization Times for 2L Muting

Muting Time Units Available Values Synchronization Time Available Values
Seconds 159 MS1 to MS2 5010,000 ms in
50ms increments
Minutes 159 MS2 to LC
Hours 123
Days 110
Four-sensor Muting
The sensors and light curtain form the shape of an upside down T, when
viewed from the side. Two muting sensors (MS) are mounted on either side of the
light curtain (LC).
Figure 57 - Four-sensor Muting

LC
MS4 MS3 MS2 MS1
Muted LC
Machine Material Conveyor
Muting Lamp
The material can travel in either direction; breaking MS1 first and MS4 last or
breaking MS4 first and MS1 last. The muting lamp turns on and the light curtain
is muted after the second sensor is blocked. The object must be large enough to
break all four sensors.
terminals 00 and 01. The four muting sensors are connected to terminals 02 to
terminals 12 to 06 to take advantage of pulse testing. Contactor K1 and K2,
which provide power to the conveyor (and other hazards if necessary), are
connected to terminals 18 and 19.

Figure 58 - Example Schematic for Four-sensor Muting

+24V DC
Light Curtain
MS1 MS3
MS2 MS4 Override
OSSD A
OSSD B
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A
A1 A2 12 13 14 15 16 17 18 19 20 21
Muting Lamp K1 K2
Contactors
for Conveyor Power
24V Com
clear).
Figure 59 - Muting Time for Four-sensor Muting

LC muted
Muting sensor 1 (4)
Muting sensor 2 (3)

Muting sensor 3 (2)
Muting sensor 4 (1)

Muting lamp
t > 30ms
t > 50ms
t > 30ms
t > 30ms
t < muting time 30ms <= t

30ms <= t
t < synchronization t < synchronization
time time
Connected Components Workbench software. These times are linked. For
example, if you select a 10-s muting time, then the synchronization time between
MS1 and MS2 is 3 s. To use a synchronization time of 6 s, you must select a 60-s
muting time.

Table 8 - Muting and Synchronization Times for Four-sensor Muting

Muting Time Synchronization Time
10 s 3s
20 s 3s
30 s 3s
60 s (1 min) 6s
300 s (5 min) 30 s
900 s (15 min) 90 s
1800 s (30 min) 180 s (3 min)
3600 s (1 hr) 180 s (3 min)
28800 s (8 hr) 180 s (3 min)
Infinite Infinite
Muting Lamp
The muting lamp shows four states.
OFF light curtain is not muted.
ON light curtain is muted.
1-Hz blink rate muting sequence fault.
3-Hz blink rate muting is overridden (the Override input is on).
The muting lamp is not monitored. If the lamp burns out, the muting function
continues to work properly.
Reset The reset block is used in safety functions that require a manual intervention to
turn on the safety system.
Figure 60 - Reset Function Block
To help prevent inadvertent actuation of the reset block, the reset requires a
leading and trailing edge within a specific time frame. The pulse width must be

between 2503000 ms. If the pulse width is too short or too long, the reset
function is not executed.
Figure 61 - Reset Timing

+24V DC
250ms to
3000 ms
24V Com
The reset block is a Safety Monitoring Function in the Connected Components

Workbench software. For a valid Reset operation, according to the requirements
specified in the approved safety concept, you must use the default Reset timing
and leave the input filter setting 0.
The filter setting is enabled in Connected Components Workbench software

versions previous to Rev 7. A filter time setting greater than 0 extends the Reset
Timing by 2 x Filter Time.
The reset input signal can come from either one input wiring terminal or over the
Modbus communication input. The available input selections are:
Figure 62 - Wiring Connection for a Reset Signal to Terminal 00

+24V DC
Reset
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com
The reset block works with one or more output blocks. When an output block
requires a manual reset, the Connected Components Workbench software shows
all available reset inputs that can be used.

Restart The Restart function works with an AND or OR logic block in Logic Level A
and Logic Level B. When all inputs are satisfied, exercising the restart input
causes the restart function go be effective. If the Restart function is already
effective, the Restart input has no affect.
The Restart can only be used with one AND or OR logic block.
Figure 63 - Restart Function Block
The Restart Function requires a leading and trailing edge within a specific time
frame. The pulse width must be between 2503000 ms. If the pulse width is too
short or too long, the Restart function is not executed.
Figure 64 - Restart Timing
+24V DC
250ms to
3000 ms
24V Com
The available input selections for the Restart are:

For a valid Restart operation, according to the requirements specified in the

approved safety concept, you must use the default Restart timing and leave the
input filter setting 0.
The filter setting is enabled in Connected Components Workbench software

versions smaller than Rev 7. A filter time setting greater than 0 extends the
Reset Timing by 2 x Filter Time.
Figure 65 - Wiring Connection for a Restart Signal to Terminal 02 with Inputs on
Terminals 00 and 01
+24V DC
Restart
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com

Safety Mat Four-wire safety mats can be connected to the CR30 safety relay. The four wires
create two channels. Stepping on the safety mat creates a short circuit between
channel 1 and 2. To detect the short circuit, input pulse testing is used. The mats
must be connected to the input test pulses.
Figure 66 - Safety Mat Function Block
The safety mat can be connected to the following terminals:

these settings.
For input test pulses, terminals 1217 are available. The Connected
Components Workbench software automatically selects another test pulse
pattern for each input.
An example schematic shows a safety mat that is connected to terminals 0 and 1.

The mat uses test pulses that are generated at terminals 12 and 13.
Figure 67 - Example Schematic for a Safety Mat

+24V DC
Safety
00 01 02 03 04 05 06 07 08 09 10 11
Mat CR30
A B
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com

SensaGuard The SensaGuard function block sets the parameters for interlocks having dual
OSSD outputs. In the Connected Components Workbench software, click and
drag (or double-click) the block to an available Safety Monitoring Function spot.
This block can be used for other devices with OSSD outputs.
Figure 68 - SensaGuard Function Block
The available input selections for the SensaGuard inputs are:

You can use the default Discrepancy Time (See Discrepancy Time on page 49)
and Input Filter (See Input Filter on page 47) or choose to modify these settings.
Figure 69 - Example Schematic of a SensaGuard Interlock

+24V DC
Brown 2
Yellow 4
Red 8
White (Aux)
1
Green
3
Blue 7
Gray (OSSD1) 5
Pink (OSSD2) 6
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com

Single Wire Safety Input When configured for this type of input, the CR30 safety relay expects a Single
Wire Safety (SWS) input signal from a GSR relay or a safeguarding device that
has an SWS output signal. The GSR relay family includes the CI, SI, DI, DIS,
GLP, GLT, EM, and EMD modules. Each of these modules provides the SWS
signal on terminal L11.
Figure 70 - Single Wire Safety Input Function Block
Only terminals 10 and 11 of the CR30 safety relay can be configured to receive
the SWS signal.
The SWS signal is a long pulse followed by a short pulse, which is repeated while
the signal is active. The SWS is active when the safety outputs of a GSR safety
relay are ON. When the SWS is inactive, the SWS signal is 0V. The timing and
voltage characteristics of the SWS waveform are shown in Figure 71.
Figure 71 - SWS Waveform

4ms
0.7ms
0.5ms
1ms
+24 V
0V
Active (ON) Inactive (OFF)
Figure 72 shows an example schematic of the connection of the SWS from other
modules in the GSR family of relays. The CR30 safety relay and GSR modules
must be connected to the same 24V Common.
Figure 72 - SWS Connection Schematic

+24V DC
00 01 02 03 04 05 06 07 08 09 10 11 A1 L11 A1 L11
CR30 GSR Module GSR Module
A1 A2 12 13 14 15 16 17 18 19 20 21 A2 A2
24V Com

Status In The Status In is a safety monitoring function that can detect either a ready-for-
reset on an output function block or a fault present status on a safety
monitoring function block.
Figure 73 - Status In Function Block
Ready-for-reset - In the Type field, select the SOF RR option. Then, assign an
input to the desired Safety Output block.
Example 1 - Ready for Reset
In Figure 74, the Status_In_1 block is monitoring the Safety Output function
block SOF1. When the E-stop is closed, the SOF1 block is waiting for reset. The
SMF2 block detects this status and sends a command to SOF2 to turn on its
output. SOF2 is configured to pulse, so it flashes its output.
Figure 74 - Ready-for-reset Example
When SOF1 is ready for reset, the Status_In_1 block instructs the Status_Out_1 block to pulse its output.
When SOF1 is reset, the Status_In_1 block instructs the Status_Out_1 block to turn its output OFF.

Example 2 - Fault Present
In Figure 75, the Status_In_1 block is monitoring the SMF1, SMF2, and SOF1
blocks for faults. If a fault occurs on any of these blocks, the Status_In_1 block
sends a command to the Status_Out_1 block, and the Status_Out_1 block pulses
its output. The Status In block reports that the SMF1 block has a fault.
Figure 75 - Fault Present Example
Two-Hand Control The CR30 safety relay can be configured to operate in two different types of two-
hand control, which are specified in ISO 13851. The two types are:
Type IIIA (for low-risk safety systems)
Type IIIC (for high-risk safety systems)
Mechanically palm-operated buttons (Bulletin 800P) or the electronic output

push buttons (Bulletin 800Z Zero-Force Touch Buttons) should be used as
actuating devices for two hand control. The CR30 safety relay requires two
buttons to be actuated simultaneously and maintained to turn the two-hand
safety monitoring function ON. To meet the simultaneity requirement, the two
buttons must be actuated within 500 ms of each other.

Figure 76 - Two-Hand Control Function Block
The two-hand controls can be connected to the following terminals.

You can use the default Input Filter or choose to modify these settings.
When test pulses are used, the Connected Components Workbench software
automatically selects another test pulse pattern for each input. The two-hand
control can use input test pulses from following terminals:
Type IIIA Two-hand Control
The Type IIIA uses only one normally open contact for each hand. This
configuration can be set up with or without the use of test pulses. The test pulses
provide short circuit fault detect between channels and between channel and
24V.
Figure 77 - Example Wiring Connection for a Type IIIA Two-hand Control without Test Pulses
+24V DC
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com

Figure 78 - Wiring Connection for a Type IIIA Two-hand Control with the Test Pulses
+24V DC
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A B
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com
Type IIIC Two-Hand Control
The Type IIIC uses a normally open and a normally closed contact for each hand.
Figure 79 - Example Wiring Connection for a Type IIIC Two-hand Control without Test Pulses
+24V DC
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com
When test pulses are used, the CR30 safety relay will detect a short from Channel
1 to Channel 2 after 3.7 seconds and turn the output OFF. To clear the fault,
release both buttons.
Figure 80 - Wiring Connection for a Type IIIC Two-hand Control with Test Pulses
+24V DC
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A B
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com
The timing diagram for the two-hand control is shown in Figure 81. The Type
IIIA uses only the N.O. contact of the button. The Type IIIC uses both the N.C.
and the N.O. contacts.

Figure 81 - Two-hand Control Timing Diagram

1 2 3 4 5 6 7 8
HI
Hand 1 N.C. LO
Hand 1 N.O. HI
LO
HI
Hand 2 N.C.
LO
HI
Hand 2 N.O.
LO
HI
Logic Output LO
must be less than 500ms
1 Hand 1 button is pressed. 5 Hand 2 button is pressed.
2 Hand 2 button must be pressed within 500 ms 6 Hand 1 button must be pressed within 500 ms
for the output logic to turn ON. for the output logic to turn ON.
3 Releasing either hand button causes the logic 7 Releasing either hand button causes the logic
output to turn off. output to turn off.
4 Both hand buttons must be released to start a 8 Both hand buttons must be released to start a
new cycle. new cycle.
Alternate Device The Alternate Device provides the flexibility to create other types of input
monitoring blocks. Use this block for the following types of input functions:
Single channel OSSD Dual channel OSSD Three channel N.C.

Single channel N.C. Dual channel 2 N.C. Three channel OSSD
Dual channel 1 N.C./1 N.O.
Figure 82 - Alternate Device Function Block

Single Channel
Single-channel safety monitoring functions require only one connection to an

input terminal. The single-channel input must only be used in low-risk safety
systems.
The available input terminals are:

You can use the default Input Filter or choose to modify this setting.
When test pulses are used, the Connected Components Workbench software
automatically selects the test pulse pattern. The single channel N.C. can use input
test pulses from following terminals:
Figure 83 - Example Schematic for Single-Channel N.C. without Test Pulse

+24V DC
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com
Figure 84 - Example Schematic for Single-Channel N.C. with Test Pulse

+24V DC
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com
Figure 85 - Example Schematic for Single Channel OSSD

+24V DC
A1 Safeguarding
Device
A2
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com

Dual Channel
Dual-channel safety monitoring functions require two independent circuit

connections to the CR30 safety relay. Dual-channel inputs are used for medium
and high risk applications.

2 N.C.
2 OSSD
1N.C./1 N.O.
The available input selections for the dual-channel OSSD and two N.C.
inputsare:
The available input selections for the N.O. contact are:

Pulse testing can be set to 1 Source, 2 Sources, or Disabled. When 1 Source or 2

Sources is selected, the Connected Components Workbench software assigns the
next available test sources automatically. You can modify the sources afterward.
these settings.
The two terminals do not necessarily have to be consecutive.
Figure 86 - Example Schematic for 2 N.C. without Test Pulse

+24V DC
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com
Figure 87 - Example Schematic for 2 N.C. with Two Test Pulses Sources
+24V DC
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A B
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com

Dual Channel OSSD
Safeguarding devices with OSSD outputs generate their own test pulses to detect
for short circuit conditions or have other methods of detecting short circuit
conditions. When configured for dual channel OSSD, the CR30 safety relay
ignores the test pulses.
Table 9 shows examples of products that use dual channel OSSD outputs:
Table 9 - Products Using Dual Channel OSSD Outputs

Product Types Product Name
Light Curtains GuardShield
Laser Scanners SafeZone, SafeZone Multizone
Gate Interlocks SensaGuard, SensaGuard with Integrated Latch
Guardlocking Interlocks TLS-ZR, 440G-LZ
The safeguarding device detects short circuits, and the safeguarding device turns
off its safety outputs. Devices with OSSD outputs can operate in high-risk
applications.
Figure 88 - Example Schematic for Two OSSD

+24V DC
A1 Safeguarding
Device
A2
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com

Dual Channel N.C./N.O.
The N.C./N.O. configuration applies the diversity concepts, where one contact
is open and the other contact is closed. The contact, while in an open state,
cannot be welded closed. The CR30 safety relay turns off its safety outputs when
either channel changes state. Both channels must change state for proper
performance.
Figure 89 - Example Schematic for N.C./N.O. without Test Pulse

+24V DC
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com
Figure 90 - Example Schematic for N.C./N.O. with One Test Pulse

+24V DC
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com
Figure 91 - Example Schematic for N.C./N.O. with Two Test Pulses

+24V DC
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A B
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com
If a short circuit occurs on terminal 12 to 24V, the CR30 safety relay turns off its
safety outputs within 35 ms. Remove the fault and cycle the contacts to clear the
fault.
If a short circuit occurs on terminal 12 to ground, the CR30 safety relay turns off
its safety outputs within 3.3 seconds. Remove the fault and cycle the contacts to
clear the fault.
If a short circuit occurs from terminal 12 to terminal 13, the CR30 safety relay
turns off its safety outputs within 35 ms. Remove the fault and cycle the contacts
to clear the fault.

Three Channel
The CR30 safety relay can accept three channels into one safety monitoring
function. All three inputs must be HI to satisfy the input. If any one of the inputs
goes LO, the output of safety monitoring function goes LO and turns off its
associated output devices. The three N.C. inputs can be operated without input
test pulses, with one input test pulse, with only two input test pulses, or with
three input test pulses.
The available input selections for the three channel inputs are:
Pulse testing can be set to 1 Source, 2 Sources, 3 Sources, or Disabled. When 1
Source, 2 Sources, or 3 Sources is selected, the Connected Components
Workbench software assigns the next available test sources automatically. You can
modify the sources afterward.
these settings.
The three terminals do not necessarily have to be consecutive.
Figure 92 - Example Schematic for Three N.C. without Test Pulses
+24V DC
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com
Figure 93 - Example Schematic for Three N.C. with One Test Pulse Source
+24V DC
00 01 02 03 04 05 06 07 08 09 10 11
CR30 A
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com
Figure 94 - Example Schematic for Three N.C. with Three Test Pulse Sources
+24V DC
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A B C
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com
Figure 95 - Example Schematic for Three OSSD

+24V DC
A1 Safeguarding
Device
A2
00 01 02 03 04 05 06 07 08 09 10 11
CR30
A1 A2 12 13 14 15 16 17 18 19 20 21
24V Com

Output Loop The output loop is a single-channel safety monitoring input block that uses the
logical state of a Safety Output Function (SOF) as its input. This function block
eliminates the need to connect a wire from an output terminal and feed it back
into an input terminal. The CR30 safety relay completes the loop internally.
IMPORTANT The use of the output loop in a safety function requires an additional 25 ms of
response time.
In Figure 96, the output loop is selected from the Toolbox. Safety Output
Function block 1 (SOF_01) is the input to Safety Monitoring Function 3
(SMF3).
Figure 96 - Example Output Loop Function Block
Any single SOF can be the input on multiple output-loop safety-monitoring

functions.
During online monitoring, the input terminal state must be the same for the
output loop function and the referenced output condition of the SOF.
If Auto-assign is enabled, the default value is the top SOF instance.
The input terminal and output must be defined for the output loop function.
The input terminal list contains all instances of SOFs. The output terminal of an
output loop cannot be an input condition to a Safety Output Function
monitored by that output loop function block.

Chapter 10
Logic Levels A and B
The Connected Components Workbench software has two levels that allow you
to apply simple logic to create more sophisticated safety systems. The logic levels
are labeled A and B on the software workspace. The logic functions are available
in the Toolbox.
Figure 97 - Logic Levels A and B on the Connected Components Workbench Workspace
Pass Through When a logic level is not used, the Connected Components Workbench software
automatically creates a Pass Through block.

Chapter 10 Logic Levels A and B
AND The AND block accepts 224 inputs. When all inputs are HI, the output of the
block is HI. If any of the inputs is LO, the output of the block is LO.
The AND block is often used when multiple E-stops must be released and
multiple safety gates must be closed for the safety system to be energized.
Figure 98 - AND Logic Block
Table 10 - AND Logic Table for Two Inputs
Input 1 Input 2 Output

0 0 0
0 1 0
1 0 0
1 1 1
OR The OR block accepts 224 inputs. If any of the inputs are HI, the output of the
block is HI. If all inputs go LO, the output of the block goes LO.
The OR block is often used with enabling devices.
Figure 99 - OR Logic Block
Table 11 - OR Logic Table for Two Inputs

0 0 0
0 1 1
1 0 1
1 1 1

Logic Levels A and B Chapter 10
XOR The XOR block accepts 224 inputs. The output of the XOR block is HI when
any input is HI. The output is LO when multiple inputs are HI or if all inputs are
LO.
Figure 100 - XOR Logic Block
Table 12 - XOR Logic Table for Two Inputs

0 0 0
0 1 1
1 0 1
1 1 0
NAND The NAND block accepts 224 inputs. The NAND performs the opposite of
an AND block. The output of the NAND block is LO when all inputs are HI.
When any input is LO, the output is HI.
Figure 101 - NAND Logic Block
Table 13 - NAND Logic Table for Two Inputs

0 0 1
0 1 1
1 0 1
1 1 0

NOR The NOR block performs the opposite of the OR block. When any input is HI,
the output is LO. When all inputs are LO, the output is HI.
Figure 102 - NOR Logic Block
Table 14 - NOR Logic Table for Two Inputs

0 0 1
0 1 0
1 0 0
1 1 0
NOT The NOT block accepts only one input. The NOT inverts the input signal.
When the input is LO, the output is HI. When the input is HI, the output is LO.
Figure 103 - NOT Logic Block
Table 15 - NOT Logic Table for Two Inputs
Input Output
0 1
1 0
AND with Restart The AND with Restart accepts 124 inputs and requires a Restart input. All
inputs must be HI when the Restart button is pressed.
The Connected Components Workbench software automatically recognizes the

Restart function blocks and allows you to select one. Once selected, the Restart is
no longer available for other logic blocks.
Figure 104 shows an example with a gate switch and a light curtain. Both the gate
must be closed and the light curtain clear. Then, the Restart input must be
pressed. The output of the logic block goes HI on the trailing edge of the restart
signal.

Figure 104 - Example of AND with Restart
Figure 105 - Logic of the Restart Function with Two Input AND
Restart
Input 1
&
Input 2
The timing diagram shows how the output of the Logic block responds to the
input signals and the Restart signal. Both inputs must be HI when the Restart
signal occurs for the output to go HI. If any of the inputs go LO, the output goes
LO.
Figure 106 - AND with Restart Timing Diagram

HI
Restart LO
HI
Input 1
LO
AND
HI
Input 2
LO
HI
Output
LO

OR with Restart The OR with Restart accepts 224 inputs and requires a Restart input. At least
one input must be HI when the Restart button is pressed.
The Connected Components Workbench software automatically recognizes the

Restart function blocks and allows you to select one. Once selected, the Restart is
no longer available for other logic blocks.
Figure 107 shows an example with a gate switch and a light curtain. Either the
gate must be closed or the light curtain clear. Then, the Restart input must be
pressed. The output of the logic block goes HI on the trailing edge of the restart
signal.
Figure 107 - Example OR with Restart
Figure 108 - Logic of the Restart Function with Two Input OR

Restart
Input 1
>
Input 2
The timing diagram shows how the output of the Logic block responds to the
input signals and the Restart signal. Either or both inputs can be HI when the
Restart signal occurs for the output to go HI. If all inputs go LO, the output goes
LO.

Figure 109 - OR with Restart Timing Diagram

HI
Restart LO
HI
Input 1
LO
OR
HI
Input 2
LO
HI
Output
LO
Nesting Nesting allows you to create more than two logic levels effectively. Nesting is
accomplished by connecting the output of a logic level function block to the first
input of a logic level immediately below it (in the same column). Nesting can be
performed in Logic column A or logic column B, but Nesting cannot cross-over
from column A to column B. The following Logic Level function blocks support
Nesting: AND, OR, XOR, NAND, NOR, AND with Restart, and OR with
Restart.
IMPORTANT This feature is available in Firmware Revision 9 or later.
Use the following procedure to nest a Logic Level A function block. Figure 110
on page 94 shows the results.
1. Add an AND function block in LLA1.

2. Add an OR function block in LLA2 (immediately below LLA1).
3. On the LLA1 function block, click the output.
4. On the LLA2 function block, place the cursor over the second input.
Notice that the cursor becomes the forbidden style, meaning that the
connection cannot be made to the second input.
5. On the LLA2 function block, place the cursor over the first input.
Notice that the curser becomes the hand style, meaning that the
connection can be made to the first input.
6. On the LLA2function block, click the first input.
LLA1 function block output connects to the LLA2 function block first
input.
7. LLA2 function block becomes a Nested OR.

Figure 110 - Steps to Create a Nesting Block
To delete a nesting line, you can either:
1. Right-click on the line that connects the output to the input, and select
Delete from the context menu, or
2. Click the line and press the Delete key.
Invert Inverting gives you the ability to reverse the state of an input or output without
using a NOT function block. Inverting inputs can be applied to the AND,
NAND, OR, NOR, XOR, AND with Restart, OR with Restart, and the RS Flip
Flop logic functions. Inverting outputs can be applied to XOR, AND with
Restart, OR with Restart, and the RS Flip Flop logic functions.
To invert, right-click the input or output connection and click Invert. When
inverted, the connection point is hollow. To remove the invert, right-click the
input and click Revert. When reverted, the connection point becomes solid.
Figure 111 shows an example of an inverted input and a reverted input. The same
process can be applied to the output connection.
Figure 111 - Invert or Revert Input Connection Points

Reset Set Flip Flop A Reset Set Flip Flop (RS-FF) function can be used in logic levels LLA and LLB.
This function is useful when a momentary input must be used as the input signal.
You can configure the flip-flop to invert the Set and/or Reset inputs and/or the
Output.
Figure 112 - Example Selection of the RS Flip Flop to LLA1
Figure 113 shows the timing diagram for the RS Flip Flop.
1. When the Set input goes HI and the Reset input is LO, the output
turnsON.
2. If the Set input goes LO, the output remains ON.
3. When the Reset input goes HI and the Set input is LO, the output
turnsOFF.
4. If the Reset input goes HI while the output is OFF, the output
remainsOFF.
5. If the Reset input goes HI while the Set input is HI, the output turns OFF.
6. If the Set input goes LO while the Reset remains HI, the output
remainsOFF.
7. If the Reset input goes LO while Set input remains HI, the output
turnsON.
Figure 113 - Timing Diagram for the RS Flip Flop

1 2 3 4 5 6 7
Set
Reset
Output

Notes:

Chapter 11
Safety Outputs
The safety output blocks are the fourth stage of the configuration. Many of the
blocks have common features.
Input Connection Each output block has one input connection. This input connection can be
connected to only Logic Level B blocks.
Feedback The Immediate OFF, ON Delay, and OFF Delay blocks have a feedback
parameter. To use the feedback parameter, a feedback input block must be
declared. If a feedback input block is not available, the feedback parameter is set
to None, and can be considered to be always HI.
Reset The reset parameter must be set to either automatic or manual.

If set to automatic, the output turns on when the input that is received
from the Logic Level B block is HI.
If the reset is set to manual, a reset input block must be declared. Before the
reset button is pressed, the input that is received from the Logic Level B
block must be HI. Then, the output turns on if the reset button must be
pressed and held for at least 0.25 s and released within 3 s.
Timing Timing is used in the ON Delay, OFF Delay, and Jog functions.
The timing can be set between 50300,000 ms (5 minutes) in 50-ms increments.
Output Connections The output of the block can be connected to one or more of the following wiring
terminals:
1217 Multi-Purpose (MP)
1821 Embedded Output (EO)
0003 plug-in 1 module (not safety rated)
0003 plug-in 2 module (not safety rated)
The multi-purpose outputs can be configured to operate with pulse test (PT) or
without test pulses (No PT). The embedded terminals always operate with test
pulses. Terminals 20 and 21 can be configured as Single Wire Safety (SWS)
output.
WARNING: The plug-in outputs must only be used for nonsafety rated
purposes.

Chapter 11 Safety Outputs
Immediate OFF The Immediate OFF block is used to turn off output terminals immediately upon
a demand that is placed on a safety function.
Figure 114 shows the Immediate OFF output block that is connected to an
E-stop block through Logic Level LLB1. The feedback signal is provided by
SMF2 and manual reset by SMF3. The output is connected to:
Terminals 18 and 19 for dual channel safety switching of the machine
hazards.
Plug-in 1 terminal 00 for status indication.
Figure 114 - Immediate OFF Configuration

Safety Outputs Chapter 11
ON Delay The ON Delay block turns on the output after the specified time delay expires.
Figure 115 shows the ON Delay output block that is connected to an E-stop
block through Logic Level LLB1. The feedback signal is provided by SMF2 and
manual reset by SMF3. The time delay is set to 2 minutes 8 seconds. The output
will turn on 1000 ms (20x50 ms) after the reset button is released. The output is
connected to:
hazards.
Terminal 20, which is configured as a Single Wire Safety (SWS) output.
Figure 115 - ON Delay Configuration

OFF Delay The OFF Delay block turns off the output after the specified time delay expires.
The retriggerable parameter can be set to enabled or disabled.

When enabled, the input to the OFF Delay block can go HI again during
the timing cycle, and the output remains HI.
When disabled, the timing cycle runs to completion, regardless of changes
to the input.
Figure 116 shows the OFF Delay output block that is connected to a gate switch
block through Logic Level LLB1. The feedback signal is provided by SMF2 and
manual reset by SMF3. The time delay is set to 1 minute, 5 seconds, and 400
milliseconds. The output will turn off after the delay time has expired. The
output is connected to:
hazards.
Terminal 00 of Plug-in 2 for status reporting
Figure 116 - OFF Delay Configuration

Safety Outputs Chapter 11
Jog The Jog block turns on the output for a specified duration while the jog input is
held HI. If the Jog input goes LO, the output immediately turns off.
Figure 117 shows the Jog output block that is connected to an enabling switch
block through Logic Level LLB1. The reset is set to automatic. The Max Jog
Time is set to 2 minutes, 5 seconds, and 250 milliseconds. After this time expires,
the outputs will turn OFF. The output is connected to:
hazards.
Figure 117 - Jog Configuration
Muting Lamp The Muting Lamp block works with the Muting safety monitoring function.
The muting lamp is not monitored. If the lamp burns out or becomes
disconnected, the muting function continues to function properly.
Figure 118 shows the muting lamp output block connected to the mute function
in SMF1. The output is connected to:
Terminal 14, a multi-purpose terminal with no pulse testing (No PT).
Plug-in 1 terminal 00 for more status indication.
The muting lamp should be connected to terminals without pulse testing.
Pulse testing does not affect filament lamps, but LED lamps can appear to
flicker if pulse testing is enabled.
Figure 118 - Muting Lamp Configuration

Status Out The Status Out block provides either a steady output or a pulsing output. The
Pulse type can be changed to ON or OFF by a mouse click on the ON/OFF field.
The pulse is a 1 Hz frequency with a 50% duty cycle.
Figure 119 - Status Out Function Block
See Figure 74 (page 76) and Figure 75 (page 77) for examples of how the Status
Out block works with the Status In block. Figure 73 (page 76) shows how the
Status Out block is used with other functions. In this example, the Status_Out_1
block pulses its output as soon as the E-stop button is pressed. When the E-stop
button is released, the Status_Out_1 block turns OFF.
Figure 120 - Example Usage of the Status Out Block
When the E-stop is pressed, the Immediate

OFF block turns OFF and the Status Out
bock pulses its output.

Chapter 12
Plug-in Modules
The CR30 safety relay accepts up to two plug-in I/O modules. Table 16 shows
which modules are available for the firmware that is installed in the CR30 safety
relay.
Table 16 - Plug-in Modules for the CR30 Safety Relay
Module Description Firmware Revision

2080-IQ4OB4 4 sinking inputs + 4 sourcing outputs 6 and later
2080-IQ4 4 sinking inputs 7 and later
2080-OB4 4 sourcing outputs 7 and later
2080-OW4I 4 electromechanical relay outputs 7 and later
ATTENTION: The input and output signals of these modules are not safety
rated. They must only be used for standard control functions.
Insert Module into Controller Follow the instructions to insert and secure the plug-in module to the controller.
Figure 121 - Plug-in Module
1. Position the plug-in module with the terminal block facing the front of the
controller as shown.
2. Snap the module into the module bay.
3. Tighten the 1012 mm (0.390.47 in.) M3 self-tapping screw to
0.2Nm (1.48 lbin) torque.

Chapter 12 Plug-in Modules
2080-IQ4OB4
The 2080-IQ4OB4 has four sinking inputs and four sourcing outputs. The
COM connection B3 is internally connected to A3. This COM connection is for
the inputs (without it, the inputs do not turn on). Terminal B4 must be
connected to the +24V supply to provide power to the outputs terminals
O-00O-03.
Figure 122 - 2080-IQ4OB4 Schematic Showing Four Standard Input Signals

+24V DC
B1 B2 B3 B4 B5 B6
I-00 I-01 COM +24DC O-00 O-01
2080-IQ4OB4
I-02 I-03 COM -24DC O-02 O-03
A1 A2 A3 A4 A5 A6
24V Com
Figure 123 - 2080-IQ4OB4 Schematic Showing Four Standard Output Signals

+24V DC
B1 B2 B3 B4 B5 B6
I-00 I-01 COM +24DC O-00 O-01
2080-IQ4OB4
I-02 I-03 COM -24DC O-02 O-03

A1 A2 A3 A4 A5 A6
24V Com

Plug-in Modules Chapter 12
2080-IQ4
The 2080-IQ4 has four sinking inputs. The four COM connections, A3, A4, B3,
and B4 are internally connected. At least one COM connection must be
connected to 24V Com (without it, the inputs do not turn on).
Figure 124 - 2080-IQ4 Schematic Showing Four Standard Input Signals

+24V DC
B1 B2 B3 B4 B5 B6
I-00 I-01 COM COM NU NU
2080-IQ4
I-02 I-03 COM COM NU NU

A1 A2 A3 A4 A5 A6
24V Com
2080-OB4
The 2080-OB4 has four sourcing outputs. Terminals B3 and B4 are internally
connected; one of these terminals must be connected to +24V DC. Terminals A3
and A4 are internally connected; one of these terminals must be connected to
24V Com.
Figure 125 - 2080-OB4 Schematic Showing Four Standard Output Signals

+24V DC
B1 B2 B3 B4 B5 B6
NU NU +24DC +24DC O-00 O-01
2080-OB4
NU NU -24DC -24DC O-02 O-03
A1 A2 A3 A4 A5 A6
24V Com

2080-OW4I
The 2080-OW4I has four electromechanical relays with normally open

(FormA) contacts.
Figure 126 - 2080-OW4I Schematic Showing Four Standard Output Signals

+24V DC
B1 B2 B3 B4 B5 B6
CM0 O-0 CM1 O-1 CM2 O-2
2080-OW4I
CM3 O-3 NU NU NU NU
A1 A2 A3 A4 A5 A6
24V Com
Install a Guardmaster
440C-ENET EtherNet/IP ATTENTION: Environment and Enclosure
Plug-in Module This equipment is intended for use in a Pollution Degree 2 industrial
environment, in overvoltage Category II applications (as defined in
IEC606641), at altitudes up to 2000 m (6562 ft) without derating.
This equipment is considered Group 1, Class A industrial equipment according to
IEC/CISPR 11. Without appropriate precautions, there may be difficulties with
electromagnetic compatibility in residential and other environments due to
conducted and radiated disturbances.
This equipment is supplied as open-type equipment. It must be mounted
within an enclosure that is suitably designed for those specific environmental
conditions that are present and appropriately designed to prevent personal
injury resulting from accessibility to live parts. The enclosure must have suitable
flame-retardant properties to prevent or minimize the spread of flame,
complying with a flame spread rating of 5VA, V2, V1, V0 (or equivalent) if
nonmetallic. The interior of the enclosure must be accessible only by the use of
a tool. Subsequent sections of this publication may contain additional
information regarding specific enclosure type ratings that are required to
comply with certain product safety certifications.
In addition to this publication, see:
Industrial Automation Wiring and Grounding Guidelines, for additional
installation requirements, Allen-Bradley publication 1770-4.1.
NEMA 250 and IEC 60529, as applicable, for explanations of the degrees of
protection provided by different types of enclosures.

ATTENTION: Prevent Electrostatic Discharge

This equipment is sensitive to electrostatic discharge, which can cause internal
damage and affect normal operation. Follow these guidelines when you handle
this equipment:
Touch a grounded object to discharge potential static.
Wear an approved grounding wriststrap.
Do not touch connectors or pins on component boards.
Do not touch circuit components inside the equipment.
Use a static-safe workstation, if available.
Store the equipment in appropriate static-safe packaging when not in use.
Installation Summary
Do these steps to install the Ethernet plug-in module.
1. Mount the CR30 safety relay on a DIN Rail or panel.

2. Install the plug-in module.
About the Module
The module provides EtherNet/IP connectivity for CR30 safety relays.
Use Figure 127 to identify the external features of your module.
Figure 127 - External Features
2
3
4
1 Status indicators 3 Plug-in connector (on opposite
side of circuit board)
2 MAC ID label 4 RJ45 (Ethernet) cable connector

Software Requirements
You must have one of the following versions of software.
Table 17 - Software Versions
Software Description
Studio 5000 Logix Designer 20 or later
software Download the Add-on Profile from
http://www.rockwellautomation.com/support/controlflah/LogixProfiler.asp
Connected Components Workbench 8 or later
software Download the software from
http://www.rockwellautomation.com/rockwellautomation/support/pcdc.page
Firmware Requirements
You must have one of the following revisions of firmware.
Table 18 - Firmware Revisions
Module Description
440C-CR30-22BBB 8.001 or later
Download the firmware from
http://www.rockwellautomation.com/rockwellautomation/support/pcdc.page
Install the Module
To install the module, follow this procedure.
ATTENTION:
Do not insert or remove the plug-in module while power is applied, otherwise
permanent damage to equipment may occur.
This plug-in module is not compatible with Micro800 controllers.

1. Position the plug-in module as shown (Figure 128).
Figure 128 - Plug-in Module Positioning
2. Snap the module into slot 1 of the module bay.

3. Tighten the 1012 mm (0.390.4 in.) M3 self-tapping screw to torque
specifications.
Wire the Ethernet Connector
Use an RJ45 connector to connect to the EtherNet/IP network. Wire the

connector as shown.
Figure 129 - Connector Wiring

8 ------ NC
7 ------ NC 8
6 ------ RD-
5 ------ NC
4 ------ NC 1
3 ------ RD+
2 ------ TD-
RJ 45
1 ------ TD+
For detailed EtherNet/IP connection information, see the EtherNet/IP Media

Planning and Installation Manual, available from the Open DeviceNet Vendor
Association (ODVA) at http://www.odva.org.
Grounding Considerations
The grounding and bonding must be of equal potential between all devices in the
communication coverage area.

Connect the Module to the EtherNet/IP Network
Connect the RJ45 connector of the Ethernet cable to the Ethernet port on the
bottom of the plug-in module as shown.
Figure 130 - Ethernet Cable Connection
Set the Network Address
The default setting for the CR30 safety relay is DHCP enabled for the Ethernet
plug-in. You can set the network internet protocol (IP) address two ways.
Use Dynamic Host Configuration Protocol (DHCP) server.
Use Rockwell Automation RSLinx Classic, Studio 5000, or Connected
Components Workbench software.
Use a DHCP/BOOTP Server
If you do not have a large computer that can act as a boot server, download our
DHCP/BOOTP software so you can use a personal computer as a DHCP/
BOOTP server.
To set the network address by using the Rockwell Automation DHCP/BOOTP

server, follow these steps.
1. Access the DHCP/BOOTP utility at:

http://www.software.rockwell.com/download/comms/rsnetworx/bootp-
dhcp%20server%202.3.2.zip.
2. Download the version 2.3.1 DHCP/BOOTP utility.
3. Extract the zipped files to a temporary directory.
4. In the temporary directory, double-click setup.exe to install the DHCP/
BOOTP utility.
5. Run the utility.

6. See Table 19, which describes what happens next, depending on whether
DHCP/BOOTP is enabled on the module.
Table 19 - DHCP/BOOTP
If DHCP/BOOTP is Description
Enabled Asks for an address from a DHCP/BOOTP server. The server also assigns other
Transport Control Protocol (TCP) parameters.
Not enabled Uses the IP address (along with other TCP configurable parameters) stored in
nonvolatile memory.
Use RSLinx Classic, Studio 5000, or Connected Components Workbench Software
Follow the procedures that are outlined in the online help that accompanies this
software to set the network address.

Status Indicators
The three status indicators on the module provide diagnostic information about
the module and its connections to the network.
Table 20 - Status Indicators

Indicator Status Description
MS Off The plug-in module does not have power. Check the safety relay power
supply.
Flashing green The port is in standby mode; it does not have an IP Address. Verify that the
DHCP server is running.
Green The port is operating correctly. No action is required.
Red The safety relay is holding the port in reset or the safety relay has faulted.
Clear the fault.
If the fault does not clear, replace the plug-in.
Flashing red/green The module is performing its power-up self-test. No action is required.
NS Off The port is not initialized; it does not have an IP Address.
Verify that the DHCP server is running.
Flashing green The port has an IP Address, but no CIP connections are established.
If no connections are configured, no action is required.
If connections are configured, check connection originator for connection
error code.
Green The port has an IP Address and CIP connections (Class 1 or Class 3) are
established. No action is required.
Red Duplicate IP - The device has detected that its IP Address is being used by
another device in the network. Change the devices IP Address.
Flashing red/green The port is performing its power-up self-test. No action is required.
LNK Off The port is not connected to a powered Ethernet device. Therefore, the safety
relay cannot communicate over an Ethernet network.
Verify that all Ethernet cables are connected.
Verify that Ethernet switch is powered.
Flashing green The port is communicating on Ethernet. No action is required.
The port is performing its power-up self-test. No action is required.
Green The port is connected to a powered Ethernet device. Therefore, the safety
relay can communicate over an Ethernet network. No action is required.
Chapter Summary In this chapter, you learned how to install and wire your Guardmaster
440C-ENET Ethernet plug-in module.

Chapter 13
Automation Controller Communications
Introduction This chapter describes and gives examples of how each type of EtherNet/IP
messaging, I/O messaging, and Explicit Messaging, is used.
Ethernet Messaging The Guardmaster 440C-CR30 safety relay with 440C-ENET plug-in module
supports two types of EtherNet/IP messaging:
I/O Messaging - Used for deterministic EtherNet/IP communications
with ControlLogix, CompactLogix, SoftLogix, and EtherNet/IP
scanners. Its primary use is to read and write I/O data for diagnostics and
control purposes.
Logic Explicit Messaging - Used for non-deterministic communications
in which data is not critical for control. Logic explicit messages have a
lower priority when compared to I/O messages and are used to read and
write non-critical data.
I/O Messaging Studio 5000 Logix Designer application is used to configure I/O messaging
between an automation controller and a CR30 safety relay on an EtherNet/IP
network.
There are two ways to add the safety relay into the I/O configuration:
CR30 safety relay Add-on Profile (AOP) - RSLogix 5000 software,
version 20.00 or later, Studio 5000 Logix Designer application, version
21.00 or later
Generic profile - RSLogix 5000 software, all versions
These configuration methods are described in the following sections. If your

version of RSLogix 5000 software supports safety relay AOP, we recommend
that you use this method.

Chapter 13 Automation Controller Communications
Using RSLogix 5000 Safety Relay Add-on Profile
When compared to the Generic Profile (all versions), the RSLogix 5000 safety
relay Add-on Profiles provide these advantages:
Profile provides descriptive controller tags for data assemblies that are
exchanged between the controller and safety relay. This profile minimizes
potential mismatches between assembly data and tags and substantially
reduces safety relay configuration time.
New Logic Configuration tab (AOP version 2.01 or later) minimizes the
need for a separate configuration tool.
Monitor the configured safety relay logic directly from the AOP (AOP
version 2.01 or later).
Safety relay configuration settings are saved as part of the RSLogix 5000
software, version 20.00 or later, project file (.ACD) and also downloaded
to the controller.
Unicast connection option (RSLogix 5000 software, version 20.00 or
later)
The Add-on Profile can be added online while the controller is in Remote
Run Mode (ControlLogix only).
The safety relay Add-on Profile can be updated anytime. Go to
http://www.rockwellautomation.com/global/support/pcdc.page to
download the latest safety relay Add-on Profile.
Add the CR30 Safety Relay to the I/O Configuration
An existing project can be used or a new project can be created to configure

EtherNet/IP I/O messaging. To create a project, perform the following steps.
1. Create a new, or open an existing, RSLogix 5000 or Studio 5000 Logix

Designer project and verify that the Logix controller is offline.
TIP For ControlLogix users who want to add a Guardmaster 440C safety relay
online manually, go online with the ControlLogix controller using RSLogix
5000 or Studio 5000 Logix Designer application. The ControlLogix controller
can be in Remote Run or Program mode.

Automation Controller Communications Chapter 13
2. To open the Select Module Type window, right-click on the Ethernet tree of
the EtherNet/IP bridge within the I/O Configuration folder and select
New Module.
3. Search for a Guardmaster 440C safety relay by typing 440C in the search
field, select the 440C-CR30-22BBB, then click Create.
TIP If the Guardmaster 440C safety relay is not shown, go to

http://www.rockwellautomation.com/global/support/pcdc.page and
download the latest RSLogix 5000 safety relay Add-on Profile. Add-on Profile
version 2.01 (or later) includes support for the embedded configuration editor.

The New Module dialog box appears.
4. On the General tab, edit the following items about the safety relay:
Field Setting
Name A unique name to identify the safety relay.
(The name can contain as many as 40 characters; any mix of upper/lower case letters,
number, and underscore characters.)
Description Optional - Description of the safety relay.
IP Address The IP address of the safety relay.
5. Click Change to configure the plug-in modules that are attached to the
CR30 safety relay.
6. Right-click on the [2] <Empty> slot in the Module Definition dialog box
and select the plug-in module that is physically located in that slot, if any.
TIP The catalog number 440C-ENET plug-in is fixed in slot 1 as it is required to

communicate with the Logix controller.

7. In the Module Definition dialog box, edit the following information:
Field Setting
Revision The major and minor revision of the firmware in the safety relay. The Major Revision
selection determines the functionality available in the Add-on Profile:
Major Revision 8 - I/O Messaging only. The Add-on Profile does not configure the CR30
safety relay. The safety relay must be configured using Connected Components
Workbench software, version 8.00 or later, when this selection is made.
Major Revision 9 - Version 2.01 or later of the Add-on Profile only. This selection
enables the Logic Configuration tab on the AOP that supports the setup and monitoring
of the safety relay configuration. The configuration is stored in the ACD file of the
controller project, which is downloaded and stored in the controller.
IMPORTANT The configuration consumes at least 300 KB of controller memory.

You can monitor the controller memory usage from the Controller
Properties dialog box, Memory tab. To prevent the configuration
from being stored in controller memory, choose Major Revision 8.
Electronic The settings for Electronic Keying determine whether a connection is successful between
KeyinChag the controller and safety relay based on the following criteria:
Compatible - A successful connection is made when the defined settings match the
values in the safety relay as follows:
a. The Device Type and Product Code matches.
b. Same Major Revision or higher.
c. Minor Revision as follows:
If the Major Revision is the same, the Minor revision must be the same or higher.
If the Major Revision is higher, the Minor Revision can be any number.
Disable - The keying attributes are not considered when attempting to communicate
with the device. Other attributes, such as data size and format, are considered and must
be acceptable before communication is established.
ATTENTION: With Disable Keying, communication can occur

with a device other than the type specified in the project with
unpredictable results.
Exact Match - All keying attributes of the device that is defined (Major Revision, Minor
Revision, Device Type, and Product Code) must precisely match the attributes of the
installed device to establish communication.
Data Format The following Data Formats are supported:
Listen Only - An input connection where another controller owns/provides
configuration data for the safety relay. A controller with a listen-only connection does
not write configuration to the safety relay nor does it write to the safety relay outputs. A
listen-only connection can only be established when the owner controller is actively
controlling the safety relay.
Data - An I/O connection where this controller is the owner and controls the outputs to
the safety relay and is able to write the configuration to the safety relay. The safety relay
supports only one Data connection.
8. Click OK once you have added any plug-in module that is attached to the
CR30 safety relay.
9. If you use Major Revision 8 in the AOP, click OK on the next window to
have the Studio 5000 Logix Designer application create the predefined
tags. The CR30 safety relay now appears as a module in the I/O
Configuration folder.

Configure Safety Relay Logic
The relay logic can be configured in the CR30 safety relay Add-on Profile,
version 2.01 or later. Firmware revisions 9.004 or later of the CR30 safety relay
support this feature.
IMPORTANT Major Revision 9 (default selection) or later must be selected in the Module
Definition Dialog box (access from General>Change) to enable the Logic
Configuration tab.
To edit the Logic for the safety relay:
1. Click the Logic Configuration tab in the Add-on Profile.

2. Click the Edit Logic button.
The Edit Guardmaster 440C-CR30 Logic window launches.
TIP For information about use of the Logic Editor, see Chapter 4 on page 27.
3. After you have created your logic configuration, close the Edit
Guardmaster 440C-CR30 Logic window.
4. If errors are present in your logic, you are notified that your changes are
discarded if you exit the editor, click Cancel to continue to fix any errors.

The Error List pane appears at the bottom of the Edit Guardmaster 440C-
CR30 Logic window to inform you of any errors in the logic.
5. After correcting the errors, close the window.

6. Click Apply.
7. Close the profile.
Download the Configuration to the CR30 Safety Relay
A a two-step process is required to apply the configuration to your CR30 safety

relay. First, you must download the configuration to the Logix controller. The
configuration is not automatically pushed to the CR30 safety relay, you must
open the profile and select the Logic Configuration tab to initiate the download
of the configuration to the CR30 safety relay. Since the configuration is not
stored in safety-rated memory on the Logix controller nor is it transferred to the
safety relay using a safety-rated protocol, you must manually trigger the download
to the CR30 safety relay following these steps:
1. From the Communications menu, choose Who Active to open the Who
Active dialog box.
2. From the navigation pane, find the path between your Workstation and
the target Logix controller for this project.

3. Click Download to open the Download dialog box.
ATTENTION: Review the attention statements that are presented in the

Download dialog box. Only proceed with the download if the conditions
displayed do not present a hazard for your application.
4. Click Download.
After the download is complete, the I/O Not Responding indicator
flashes. A warning icon appears on the CR30 safety relay in the I/O
Configuration tree. The module fault is Code 16#0106 as the
configuration in the Logix controller for the safety relay does not match
what is in the physical device.
5. Double-click the safety relay profile.

6. Click the Logic Configuration tab. The Project Mismatch dialog box
opens. Click Download the current project to the safety relay.
7. The Change to Program Mode dialog box appears. ClickYes.

8. The Download Success dialog box appears. Click Yes.
IMPORTANT If the Download Failed dialog box appears, confirm that the safety relay is
physically present on the network and has the correct network address.
Once the download is complete, the I/O connection between the Logix
controller and the safety relay is successful.
9. Click the Edit Logic button to monitor the safety relay logic online.
IMPORTANT After a download, the safety relay runs with the configuration for 24 hours
without being verified. See Verification on page 36 to learn more about how to
verify the safety relay.

Online Changes to the CR30 Safety Relay Configuration
While connected to the Logix controller, the configuration to a CR30 safety

relay can be modified without a separate download to the Logix controller. To
modify the CR30 safety relay configuration, follow these steps:
1. While connected to the Logix controller, open the Guardmaster

440C-CR30 safety relay profile.
2. Click the Logic Configuration tab.
3. Select Go offline from the pull-down menu in the upper-right hand
corner of the tab.
The status is now displayed as Edit.
4. Click the Edit Logic button to launch the Edit Guardmaster 440C-CR30
Logic window.
TIP For information about use of the Logic Editor, see Chapter 4 on page 27.
5. After completing your edits, close the Edit Guardmaster 440C-CR30 Logic
window.
6. If errors are present in your logic, you are notified that your changes are
discarded if you exit the editor, click Cancel to continue to fix any errors.

The Error List pane appears at the bottom of the Edit Guardmaster 440C-
CR30 Logic window to inform you of any errors in the logic.
7. After correcting the errors, close the window.

8. Click Apply. The download begins. The Download Success dialog box
appears.
9. Click Yes.
IMPORTANT After a download, the safety relay runs with the configuration for 24 hours
without being verified. See Verification on page 36 to learn more about how to
verify the safety relay.
Access Module Data with Add-on Profiles
With configuration of the Logix controller and the CR30 safety relay complete,
the Logix controller can exchange data with the safety relay.
1. After downloading to the Logix controller, open the Controller tags

window.

2. Select the Monitor Tags tab.
In the following example, predefined input tags were created for the
Guardmaster 440C-CR30 safety relay. For detailed information on the
individual tag members and their meaning, see Appendix F (page 189).
The Output tags are used to write signals to the CR30 safety relay. In this
example, a reset signal is sent to the safety relay.
The signal can be used within the safety relay logic by selecting the
corresponding Communications Input selection from a Safety Monitoring
Function that supports standard rated signals.

Explicit Messaging Data can be accessed from the CR30 safety relay with 440C-ENET plug-in by
non-Logix automation controllers that support EtherNet/IP Explicit Messaging.
This example shows the configuration of an explicit message to read data from
the CR30 safety relay:
1. Configure the MSG instruction to read the data assembly from the
Guardmaster EtherNet/IP network interface by editing these fields.
Channel: 1 (Integral) (this channel is the Ethernet port)
Communication Command: CIP Generic
Data Table Address (Receive): N7:0 (choose an address that supports
28 bytes)
Size in Bytes (Receive): 28
Extended Routing Info File (RIX): RIX11:0
Service: Read Assembly
Class: 04
Instance: 100 (64 h)
Attribute: 03
2. Set the Ethernet network address of the Guardmaster 440C-ENET

plug-in module as the target of the message instruction:
Appendix E (page 187) describes the individual members of the data that
are returned from the message instruction.

This example shows the configuration of an explicit message to write data to the
CR30 safety relay:
1. Configure the MSG instruction to read the data assembly from the
Guardmaster EtherNet/IP network interface by editing these fields.
Channel: 1 (Integral) (this channel is the Ethernet port)
Communication Command: CIP Generic
Data Table Address (Send): N7:0 (choose an address that supports 4
bytes)
Size in Bytes (Send): 4
Extended Routing Info File (RIX): RIX11:0
Service: Write Assembly
Class: 04
Instance: 150 (96 h)
Attribute: 03
2. Set the Ethernet network address of the Guardmaster 440C-ENET

plug-in module as the target of the message instruction.
Appendix E (page 187)describes the individual members of the data that

are returned from the message instruction.

Chapter 14
Status Indicators
The CR30 safety relay has 21 status indicators on the upper left front of the
module. These status indicators fall into three categories:
Input status
Module status
Output status
Figure 131 - Status Indicators
Input
Module
Output

Chapter 14 Status Indicators
Input and Output Status To access and configure the status indicators in the Connected Components
Workbench software,
Indicators
1. In the Project Organizer, double-click Guardmaster_440C-CR30*.
2. Click LED Configuration.
3. Configure the filter type and value for input and output status indicators.
First, select one of four Filter Types for each status indicator:
Not Used
Terminal Status
Safety Monitoring Function Status
Safety Output Function Status
Then select the instance for each Filter Type.
Monitoring a function is advantageous when the input and output logic blocks
have multiple inputs or outputs. One status indicator can provide status
information about multiple inputs or outputs, when it provides the status of an
input or output block.
In the previous example:

Input LED 1 is monitoring a terminal status. In this case, it is monitoring
terminal 01. When the signal to terminal 1 is HI, the status indicator is on.
When the signal to terminal 1 is LO, the status indicator is off. If this was a
single channel input, then the status indicator provides all information
about the input.

Status Indicators Chapter 14
Input LED 2 is monitoring safety monitoring function 1. If the status

indicator is on, then we know that all inputs are satisfied for whatever
function (for example, dual channel input, muting, or two-hand control) is
being monitored.
Output LED 3 is monitoring the status of a Safety Output Function. In
this case, SOF 1 is being monitored. If SOF 1 is driving four outputs (two
safety, one diagnostic, and one Modbus), we expect all four outputs to be
HI when LED 3 is on.
Controller Status Indicators The CR30 safety relay has five module status indicators that are described in
Table 21.
Table 21 - Status Indicators

Status Color Indicates
Indicator
POWER Off No input power or power error condition
Green Power on
RUN Off Program mode
Green Run mode
Flashing Green [2 Hz] Application is running but not verified
FAULT Off No fault is detected
Red Flashing [2 Hz] Application fault is detected, recoverable
Red Controller hardware is faulted,
non-recoverable
LOCK Off Not used
COM Off No communication
Green Communication by serial port or USB

Chapter 14 Status Indicators
Notes:

Chapter 15
Modbus Communication
The CR30 safety relay uses Modbus RTU communications to transfer status
information and control signals to Micro800 controllers and human machine
interfaces like the Allen-Bradley PanelView monitors.
The Modbus configuration of the CR30 safety relay is fixed to Modbus RTU
slave at address1.
For more information on PanelView monitors, refer to the following documents:

User Manual: 2711C-UM001_-EN-P
Quick Start Guide: 440C-QS001_-EN-P
Modbus Mapping The CR30 safety relay Modbus addresses are mapped to parameters shown in
Table 22. The addresses in the range of 1512 can be accessed as coils. The fault
log can be accessed by holding register reads; each address contains 16 bits of
data.
Table 22 - Modbus Addresses (table continues on next page)
Modbus Address Parameter

000001000016 Modbus serial input
000025000028 Input Data for Plug-in 1 Terminals I-00I-03
000033000036 Output Data for Plug-in 1 Terminals O-00O-03
000265 Processor HW fault
000266 Safety Input HW fault
000267 Safety Output HW fault
000268 Power supply fault / Main transistor fault
000269 Communication fault
000270 Configuration fault (wrong revision, invalid configuration)
000271 Time out (Clock monitoring)
000272 Plug-in fault
000273000294 State of Embedded Terminals 0021
000297000300 Input of Plug-in 2 Terminals I-00I-03
000301000304 Output of Plug-in 2 Terminals O-00O-03
000305000328 State of Safety Monitoring Function (SMF) 124

Chapter 15 Modbus Communication

000329000344 State of Logic Level A Instance (LLA) 116 (1)
000345000360 State of Logic Level B Instance (LLB) 116
000361000376 State of Safety Output Function (SOF) 116
000377000392 Ready-to-start of SOF 116
000393000416 Fault bit 0 of SMF 124
00: No error
01:
10: Simultaneity fault
11: One channel open after reset
000417000440 Fault bit 1 of SMF 124
000441000464 Fault bit 2 of SMF 124
000465000488 Fault bit 3 of SMF 124
000489000504 Retrigger Fault SOF 116
000505000512 Cross Fault of Terminals 1217
000521000761 Input Assembly Data (see Appendix E [page 187] for
details)
000513000520, Reserved
000762000848
000849000860 Fault log
(1) When a Logic Level A block is automatically created as a Pass Through, the block does not
occupy memory and cannot be read over Modbus. It can be viewed in the Connected
Components Workbench software as a block with no title. Pass Through blocks in Logic Level B
can be read over Modbus.
Figure 132 - (Non-)Readable Pass-through Blocks

Modbus Communication Chapter 15
Example Architectures Some examples of how the CR30 safety relay is used with Modbus are shown in
Figure 133.
In Figure 133, a PanelView C600 graphic terminal is connected to the serial port
of the CR30 safety relay. The C600 graphic terminal is configured over its
Ethernet port. The C600 graphic terminal can read status information from the
CR30 safety relay and can send reset and restart signals to the CR30 safety relay.
Figure 133 - Modbus RTU Communication PanelView C600

To Ethernet DHCP-enabled Network
PanelView C600
2711C-T6T
Modbus Master
Ethernet Port RS-232 Serial Port

10/100Base-T 9-pin D-shell
Ethernet Cables
1761-CBL-PM02 Cable CR30

440C-CR30-22BBB
Modbus Slave
8-pin Mini DIN
RS232
In Figure 134, a Micro830 programmable logic controller (PLC) is connected to

the CR30 safety relay by the 8-pin DIN serial port connections. The Micro830
PLC can read/use status information from the CR30 safety relay and can send
reset and restart signals to the CR30 safety relay.
Figure 134 - Modbus RTU Communication Micro830
Micro830
2080-LC30-24QBB
Modbus Master
1761-CBL-HM02
8 Pin mini DIN to 8 Pin mini DIN
CR30
Standard Cable 440C-CR30-22BBB
USB A Male to B Male Modbus Slave

In Figure 135, a PanelView C600 graphic terminal is connector the serial port of
the Micro830 PLC and the Micro830 PLC is connected to the CR30 safety relay
through a SERIALISOL plug-in module. The Micro830 PLC can read/use
status information from the CR30 safety relay and can send reset and restart
signals to the CR30 safety relay.
Figure 135 - Modbus RTU Communication PanelView C600 & Micro830

To Ethernet Network
PanelView C600
2711C-T6T
Modbus Master
Ethernet Port
10/100Base-T 1761-CBL-PM02 Cable
2080-SERIALISOL
Ethernet Cables
Micro830
2080-LC30-24QBB
RXD TXD
GND
CR30
Standard Cable 440C-CR30-22BBB
USB A Male to B Male Modbus Slave
Reading CR30 Safety Relay In the Micro800 family, the Msg_Modbus block must be used.
Status In the example ladder diagram below, a Micro830 PLC reads the status of the
first five input wiring terminals of the CR30 safety relay.
Rung 1: When a push button, which is connected to terminal 03 of the
Micro830 PLC, is pressed, the Micro830 PLC sends a Modbus message to
the CR30 safety relay
Rung 2: The format of the data in LocalAddr is a 'WORD'. The first block
ANY_TO_DINT converts the 'WORD' to a 'DINT'. The second block
compares the DINT to the value of 1 with an AND_MASK. The third
block checks to see if the value is 1. If the value is 1, then the output
terminal _IO_EM_DO_00 goes HI.

Figure 136 - Read Ladder Diagram
You must configure local variables. In this example, they are labeled LocalCfg,
TargetCfg, and LocalAddr.
LocalCfg must be configured as a MODBUSLOCPARA data type.
TargetCfg must be configured as a MODBUSTARPARA data type.
LocalAddr must be configured as a MODBUSLOCADDR data type.
TargetCfg.Addr - Select the first value from the Modbus Mapping table
for the CR30 safety relay. In this case, the initial value is set to 000273
(leading zeros must be included), which is mapped to terminal 00 of the
CR30 safety relay.
TargetCfg.Node - Enter a value of 1. The CR30 safety relay is fixed at
Node 1.
LocalCfg.Channel - Select the serial port location. Enter a 2 if the
embedded serial port is used. Enter a 5 to use the serial port in the fist plug-
in slot.
LocatCfg.TriggerType - Enter a 0 to have the block execute only once. Each
time the push button that is connected to terminal _IO_EM-DI-00 is
pressed, message is sent once.
LocalCfg.Cmd - Enter a 1 to instruct the block to read a 'coil' (which is
mapped to the CR30 safety relay).
LocalCfg.ElementCnt - Enter a 5 to read the status of five inputs (starting
at 000273 and ending at 000277).
LocalAddr - The results are placed in LocalAddr. There is no need to
change.
Figure 137 - Read Local Variables

Sending Reset to CR30 Safety The Reset function must use a separate Modbus message block. Another
constraint that must be considered is reset signal must be between 0.53 s long.
Relay In the example below, a momentary button is connected to embedded terminal
_IO_EM_DI_02.
Rung 3: The push button initiates a TONOFF timer. The timer is set for a
100-ms delay ON and a 1100-ms delay OFF. This provides a reset signal of
1 s.
Rung 4: The Modbus message is sent with every scan of the ladder. The
reset is executed because the reset value goes from 0 to 1 and back to 0
within the acceptable range of 0.53 s.
Rung 5: When the TONOFF block goes LO, embedded output
_IO_EM_DO_01 goes LO and moves the value of 0 into Reset Addr.
Rung 6: When the TONOFF block goes HI, embedded output
_IO_EM_DO_01 goes HI and moves the value of 1 into Reset Addr.
Figure 138 - Reset Ladder Diagram
You must configure a second set of local variables. In this example, they are
labeled ResetCfg, ResetTrgt, and ResetAddr.
ResetCfg must be configured as a MODBUSLOCPARA data type.
ResetTrgt must be configured as a MODBUSTARPARA data type.
ResetAddr must be configured as a MODBUSLOCADDR data type.
ResetTrgt.Addr - Enter a value of 1, which is Modbus mapping of
theCR30 safety relay.
ResetTrgt.Node - Enter a value of 1. The CR30 safety relay is fixed at
Node 1.

ResetCfg.Channel - Select the serial port location. Enter a 2 if the

embedded serial port is used. Enter a 5 to use the serial port in the fist plug-
in slot.
ResetCfg.TriggerType - Enter a 1 to have the block execute every time that
the ladder is scanned
LocalCfg.Cmd - Enter a 5 to instruct the block to write to a 'coil' (that is,
turn on an input of the CR30 safety relay).
ResetCfg.ElementCnt - Enter a 1 to write only 1 bit.
ResetAddr - The results are placed in LocalAddr. There is no need to
change.
Figure 139 - Reset Local Variables

Notes:

Chapter 16
Troubleshooting
Faults fall into two categories:

Recoverable
Nonrecoverable
Recoverable faults are those faults that can be corrected without having to cycle
the power to the CR30 safety relay. Nonrecoverable faults require power cycling
to recover after the fault is corrected.
Recoverable Faults Recoverable faults can be cleared if you eliminate the cause of the fault and cycle
the inputs that are associated with the fault. The output that is connected to an
input with that fault is switched off. The other non-affected outputs continue to
work.
Examples of recoverable faults include:

SMF faults
Cross loop
Simultaneity faults
Reset button fault
Muting: Synchronization time exceeded
Muting time exceeded
Sequence fault
Status Indicators The fault status indicator alerts you to faults. If the fault status indicator is
flashing red, a recoverable fault has occurred. If the Fault status indicator is solid
red, a nonrecoverable fault has occurred.
Figure 140 - Fault Status Indicator

Chapter 16 Troubleshooting
Nonrecoverable Faults Nonrecoverable faults and failures are malfunctions of the device itself that occur
during operation. Internal monitoring measures verify the safety integrity of the
device by detecting these faults. Nonrecoverable faults require a power cycle to
allow the CR30 safety relay to perform all relevant internal system tests during
initialization. If there are transient malfunctions, the CR30 safety relay will
recover after power cycle. If there is permanent damage or malfunction, the
CR30 safety relay will remain in safe-state after power cycle. Permanent
nonrecoverable faults are typically related to random hardware faults that cause
permanent damage of components.
Potential root cause for nonrecoverable faults:

Transient EMC disturbance causing asynchrony of the two CPU
Environmental disturbances of high voltage or high current spikes that
cause internal damage of components
Power supply interruptions that are detected by internal voltage level
monitor
Transient overload conditions of safety outputs that trigger short circuit
and overload protection or the output (for example, high inrush currents)
Troubleshooting with the When connected to the CR30 safety relay through the USB port, the Connected
Components Workbench Logic Editor monitors and displays the status of each
Connected Components terminal and block.
Workbench Logic Editor Green shows an ON (HI) state.
Red shows a Fault state (output is LO).
Gray blocks are OFF (LO) state.
Figure 141 - Monitor Status with Logic Editor
Mouse over the red block, and the Connected Components Workbench software
displays an error message for 5 seconds. Move the mouse away and then back over
the block to show the message again. The fault tooltip automatically appears once
a fault is detected during the online monitoring mode. You can acknowledge the

Troubleshooting Chapter 16
fault to close the tooltip window by clicking the X in the upper-right hand
corner of the tooltip. To show the fault information again, right-click on the
function block and click Show Fault.
Figure 142 - Mouse Over to Show Error Message (in Yellow Box)
The type of fault is also shown in the top panel of the Project tab (Figure 143).
For a recoverable fault, the Device Details view only indicates Fault:
Recoverable. For further details, navigate to the Logic Editor view and
mouse over the red marked function block. A user is allowed to change the
operation mode to Program Mode
For a nonrecoverable fault, the Device Details view provides the fault type
and status. The device automatically exits RUN mode and switches to
Program mode. You cannot change the operation mode. Mouse over the
fault status area to get more information.
Figure 143 - Mouse Over Fault in Project Tab
To see a list of the recent non-recoverable faults, click Faults in the Safety Tree.
The recent faults appear in the fault pane.

Click the Export button to export the faults to a comma-separated value (.csv)
file. The default path for Win7 for saving the exported fault log file is the folder
at C:\Users\<user name>\documents\CCW\Fault log.

Figure 144 - Recent Fault List
Troubleshooting with Many faults can be reported to an HMI or PLC using Modbus. Table 23 shows a
list of the Modbus addresses for faults.
Modbus
Table 23 - Modbus Addresses for Faults

000265 Processor HW fault
000266 Safety Input HW fault
000267 Safety Output HW fault
000268 Power supply fault / Main transistor fault
000269 Communication fault
000270 Configuration fault (wrong revision, invalid configuration)
000271 Time out (Clock monitoring)
000272 Plug-in fault
000393...000416 Fault bit 0 of SMF 0...23
000417...000440 Fault bit 1 of SMF 0...23
000441...000464 Fault bit 2 of SMF 0...23
000465...000488 Fault bit 3 of SMF 0...23
000489...000504 Retrigger Fault SOF 0...23
000505...000512 Cross Fault of Terminals 12...17
000849...000860 Fault log

Troubleshooting Chapter 16
Table 24 shows the fault bit message for the type of functions that are selected
for the Safety Monitoring Function block.
Table 24 - Fault Messages for the SMF Type
SMF Type Fault Bit 3 Fault Bit 2 Fault Bit 1 Fault Bit 0
1 Channel Reserved Reserved Reserved Input circuit is shorted to 24V.
2 Channel, Two Reserved The left and right buttons have been Reserved At least one circuit is shorted to 24V or
Hand Control in an inconsistent state for longer another input circuit.
than 500 ms.
Safety Mat Reserved Discrepancy Fault: Input channels One channel went to the safe state At least one circuit is shorted to 24V or
inconsistent greater than the and back to the active state while the another input circuit.
configured discrepancy time other channel remained active, or
One channel went to the safe state
upon power-up.
3 Channel Reserved Reserved One channel went to the safe state At least one circuit is shorted to 24V.
upon power-up.
Reset Reserved Reserved Reserved A transition of the reset input from ON
(1) to OFF (0) did not occur within
3000 ms.
Override Reserved Reserved Reserved At least one circuit is shorted to 24V or
another input circuit.
Restart Reserved Reserved Reserved A transition of the restart input from
ON (1) to OFF (0) did not occur within
3000 ms.
Mute Reserved Muting sensor sequence fault. The Light Curtain was muted for Too much time has elapsed between
longer than the configured maximum sensors being blocked.
mute time.
Lack of Muting Too much time has elapsed between Muting sensor sequence fault. The Light Curtain was muted for Too much time has elapsed between
L-Type Sensor2 and Light Curtain2 being longer than the configured maximum Sensor1 and Sensor2 being blocked.
blocked. mute time.
Example Fault Analysis Create a crossfault from Input Test Pulse A to Input Pulse Test B with the safety
output ON.
Crossfault
The Modbus address 000505 goes HI immediately, this action indicates
that the fault was detected.
About 4 seconds later, the fault is acted upon.
Modbus address 000393 (Bit 0 of SMF1) goes HI.
The Safety Output goes off.
On the Connected Components Workbench Logic tab, the E-stop and
gate inputs go off, and both logic blocks show red color.
The Connected Components Workbench Project tab shows Recoverable
Fault.
Figure 145 - E-stop Block Fault Message

Remove the fault.

The Modbus address 000505 goes LO immediately, this action indicates
that the fault was removed.
Modbus address 000393 (Bit 0 of SMF1) remains HI.
On the Connected Components Workbench Logic tab, both the E-stop
and gate logic blocks continue to show red color.
The safety output remains off.
Cycle the E-stop.
Modbus address 000393 (Bit 0 of SMF1) goes LO.
On the Connected Components Workbench Logic tab, the E-stop block
turns green, and the gate block remains red,
Cycle the gate.
On the Connected Components Workbench Logic tab, the gate block
turns green.
The safety system is back to an operating state and waits for the reset button to be
pressed.

Chapter 17
Security and Password
CR30 safety relay security has two components:

Exclusive access that prevents simultaneous configuration of the safety
relay by two users.
Password protection that secures the intellectual property that is
contained within the safety relay and prevents unauthorized access.
Exclusive Access Exclusive access is enforced on the CR30 safety relay whether the safety relay is
password-protected or not. This access means that only one Connected
Components Workbench session is authorized at a time and only an authorized
client has exclusive access to the safety relay application. This access also verifies
that only one software session has exclusive access to the Guardmaster 440C
application-specific configuration.
Exclusive access is enforced on Guardmaster 440C firmware revision 7 and later.
When you connect to a CR30 safety relay with the Connected Components
Workbench software, the software is given exclusive access to that safety relay.
Password Protection By setting a password on the safety relay, you effectively restrict access to the
configuration software connections to the safety relay to software sessions that
can supply the correct password. Essentially, Connected Components
Workbench operations such as upload, download, and connect are prevented if
the safety relay is secured with a password and the correct password is not
provided.
CR30 safety relays with firmware revision 7 and later are shipped with no
password. A password can be set through the Connected Components
Workbench software (version 7 or later).
The CR30 safety relay password is also backed up to the memory backup module
(catalog number 2080-MEMBAK-RTC).

Chapter 17 Security and Password
Compatibility The Safety Relay Password feature is supported on:

Connected Components Workbench version 7 and later
CR30 safety relays with revision 7 or later firmware
If you have earlier versions of the software and/or hardware you are advised to
upgrade the software and firmware. See Update the Firmware on page 179 for
instruction on firmware updates.
Work with a Locked Safety The following workflows are supported on compatible CR30 safety relays
(firmware revision 7 or later) and Connected Components Workbench software
Relay version 7 or later.
Upload from a Password-protected Safety Relay

1. Launch the Connected Components Workbench software project with
your CR30 safety relay configuration.
2. To open the Safety Relay workspace, double-click Guardmaster 440C
safety relay in the Project Organizer.
3. Select Upload from the pull-down menu in the safety relay header.
4. Select the target safety relay in the Connection Browser.
5. When requested, provide the safety relay password.
Connect to a Password-protected Safety Relay
1. Launch the Connected Components Workbench project with your CR30

safety relay configuration.
3. Select Connect from the pull-down menu in the safety relay header.
Download to a Password-protected Safety Relay

1. Launch the Connected Components Workbench project with your CR30
safety relay configuration.
3. Select Download from the pull-down menu in the safety relay header.

Security and Password Chapter 17
Password Configuration This section shows you how to set, change, and clear the password on a target
safety relay through the Connected Components Workbench software.
IMPORTANT The following instructions are supported on Connected Components

Workbench software version 7 and CR30 safety relays with firmware revision 7.
Set Safety Relay Password

In the following instructions:
The Connected Components Workbench software is connected to the
CR30 safety relay.
The relay is loaded with a viable configuration.
The configuration does not necessarily have to be verified.
The CR30 safety relay can be in either program or run mode.
1. On the Connected Components Workbench software, open the project

for the target safety relay by double-clicking the safety relay in the Project
Organizer.
2. On the Device Details toolbar, mouse over the Secure button. The tooltip
message Set, Change, or Clear Safety Relay Password Protection is
displayed.
3. Click the Secure button. Select Set Password.

4. Provide password. Confirm the password by providing it again in the
Confirm field.
TIP Passwords must have at least eight characters to be valid.

5. Click OK.
Once a password is created, any new session that tries to connect to the
safety relay has to supply the password to gain exclusive access to the target
safety relay.
IMPORTANT If you have to flash the safety relay, the project in the relay is lost. A new project
must be downloaded.
6. Click OK.
Change Password
With an authorized session, you can change the password on a target safety relay
through the Connected Components Workbench software. The target safety
relay must be in Connected status.
1. On the Device Details toolbar, click the Secure button. Select Change
Password.
The Change Safety Relay dialog appears.

Security and Password Chapter 17
2. Enter the Old Password, New Password, and Confirmation of the new
password.
3. Click OK.
The safety relay requires the new password to grant access to any new
session.
IMPORTANT Keep the password carefully. If lost, you have to flash the safety relay to reset
the password. The project in the safety relay is lost but a new project can be
downloaded.
Clear Password
With an authorized session, you can clear the password on a target safety relay
through the Connected Components Workbench software.
1. On the Device Details toolbar, click the Secure button. Select Clear
Password.
The Clear Password dialog appears.
2. Enter password.
3. Click OK to clear the password.
The safety relay requires no password on any new session.

Lost Password
If the safety relay is secured with a password and the password has been lost, then
it becomes impossible to access the safety relay with the Connected Components
Workbench software.
To recover, use ControlFLASH software to refresh the safety relay firmware,

which also clears the safety relay memory and clears the password
ATTENTION: The project in the safety relay is lost but a new project can be
downloaded.

Chapter 18
Using the Memory Module
Overview CR30 safety relays support the catalog number 2080-MEMBAK-RTC memory
modules for the following purposes:
Project backup and restore
Firmware and project backup and restore
ATTENTION: Removal and Insertion Under Power (RIUP) is not supported on

the catalog number 2080-MEMBAK-RTC memory module when used with a
Guardmaster 440C safety relay.
ATTENTION: The catalog number 2080-MEMBAK-RTC module can only be

installed in Slot 1 (the leftmost plug-in slot) on the CR30 safety relay.
IMPORTANT Do not remove the catalog number 2080-MEMBAK-RTC or power down while
operations such as backup and restore are ongoing to prevent data loss. A
blinking status indicator on the memory module indicates that these
operations are ongoing.
IMPORTANT Backup can only occur when the safety relay is in the Safety Verified state. To
learn about safety verification, see Verification on page 36.
IMPORTANT The use of catalog number 2080-MEMBAK-RTC with the CR30 safety relay is
only supported with firmware revision 7 or later.
Project Back Up and Restore Project backup and restore on CR30 safety relays are supported through the
catalog number 2080-MEMBAK-RTC memory module. Both backup and
restore can be initiated through the Connected Components Workbench
software and the use of buttons physically present on the CR30 safety relay and
the catalog number 2080-MEMBAK-RTC module.
A backup of both the CR30 safety relay firmware and project can only occur
through the Connected Components Workbench software.

Chapter 18 Using the Memory Module
Backup and restore can only occur when the catalog number
2080-MEMBAK-RTC module is present in plug-in Slot 1 (the leftmost slot) of
the CR30 safety relay. On safety relay power-up, the safety relay enters a fault
state where the application logic is not executing. Backup and restore commands
can be issued in this fault state.
The catalog number 2080-MEMBAK-RTC memory module stores the safety

relay password, if present, in encrypted format. When the password is
mismatched, the contents of the catalog number 2080-MEMBAK-RTC memory
module is not restored on the safety relay.
Back Up Project
You can back up a CR30 safety relay project to a catalog number
2080-MEMBAK-RTC memory module with the button on the memory
module.
1. Power down the CR30 safety relay.

2. Remove the dustcover or plug-in module that is located in slot 1, the
leftmost slot, of the safety relay module bay.
3. Snap the catalog number 2080-MEMBAK-RTC module into slot 1 of the
module bay.
4. Power on the CR30 safety relay.
The safety relay detects the presence of the catalog number
2080-MEMBAK-RTC memory module and enters a fault state
The status indicators are as follows:

PWR - solid green
RUN - off (not executing)
FAULT - solid red
LOCK - solid green
COM - off
The behavior of the IN and OUT status indicators depends on whether

the configuration is verified:
Verified - the IN and OUT status indicators continuously cycle
through the verification number.
Not Verified - the IN 0 and the OUT 1, 2, 3 and 4 are solid green. The
backup cannot take place since the configuration is not verified.

Using the Memory Module Chapter 18
5. Press the Backup button on the catalog number 2080-MEMBAK-RTC

memory module with a small flathead screwdriver. Hold the button until
the Status LED on the catalog number 2080-MEMBAK-RTC module
begins flashing, which indicates the backup process has begun.
When the backup operation is complete, the Status LED on the catalog
number 2080-MEMBAK-RTC stops flashing.
TIP If the Status LED does not blink and turns on after 15 seconds, the
program is not verified and backup cannot take place.
6. Confirm the Verification ID displayed on the safety relay match the

expected Verification ID of the application to be backed up.
8. Remove the Cat. No. 2080-MEMBAK-RTC memory module from slot 1
of the safety relay module bay.
9. Snap the dustcover or previous plug-in module into slot 1 of the module
bay.
10. Power on the CR30 safety relay to resume normal operation.
Restore Project
You can restore a CR30 safety relay project from a catalog number
2080-MEMBAK-RTC memory module using the buttons on the memory
module and safety relay.

2. Remove the dust cover or plug-in module that is located in slot 1, the
leftmost slot, of the safety relay module bay.
3. Snap the catalog number 2080-MEMBAK-RTC module into slot 1 of the
module bay.
4. Power on the CR30 safety relay.
The safety relay detects the presence of the catalog number
2080-MEMBAK-RTC memory module and enters a fault state. The Fault
status indicator is solid Red and the application logic is not executed.
The status indicators are as follows:

PWR - solid green
RUN - off (not executing)
FAULT - solid red
LOCK - solid green
COM - off

Chapter 18 Using the Memory Module
The behavior of the IN and OUT status indicators depends on whether

the configuration is verified:
Verified - the IN and OUT status indicators continuously cycle
through the verification number of the configuration currently run by
the CR30 safety relay.
Not Verified - the IN 0 and the OUT 1, 2, 3 and 4 are solid green. The
restore can take place since the configuration being downloaded is
verified.
5. Press and hold the MEM/ID button that is on the CR30 safety relay just
below the USB port.
6. While holding the MEM/ID button, use a small flathead screwdriver to
press the Backup button on the catalog number 2080-MEMBAK-RTC
memory module. Hold both buttons until the Status LED on memory
module begins to flash (approximately 5 seconds) which indicates the
restore process has begun.
TIP You do not have to hold the Backup button down until the
flashingstops.
When the restore operation is complete, the Status LED on the catalog
number 2080-MEMBAK-RTC stops flashing and the status indicators on
the CR30 safety relay begin to cycle through each of the verification digits
of the application that is restored to the safety relay from the memory
module.
7. Confirm the Verification ID displayed on the safety relay match the
expected Verification ID of the application to be restored from the
memory module.
9. Remove the catalog number 2080-MEMBAK-RTC memory module from
slot 1of the safety relay module bay.
10. Snap the dust cover or previous plug-in module into slot 1 of the module
bay.
11. Power on the CR30 safety relay to resume normal operation.

Chapter 19
Reports
The Connected Components Workbench software allows you to generate a

report using Microsoft Word automatically. The report is editable, which allows
you to add more information or combine the report with other documents for
the safety technical file.
The report generator button is at the top of the logic editor. Click the icon that
looks like a printer to generate a report.
Figure 146 - Report Icon at Top of Logic Editor
The report generator takes a snapshot of the logic editor as viewed by the
operator. If the editor is actively monitoring the configuration, the report
generator captures the colors reflected the block status. You can expand or
collapse the blocks as desired to show or hide the advanced setting of each block.
Figure 147 - Report Output Settings

Chapter 19 Reports
Select the desired output type, orientation, image options, header/footer options,
and output file location and name. If a report with the same name exists, you are
prompted to overwrite it.
An example of a report is shown in Figure 148.
Figure 148 - Example Report
Page 2
Page 1

Appendix A
Specifications
SIL Rating The CR30 safety relay meets the requirements of SIL CL 3 in accordance with
IEC/EN 61508.
Table 25 - SIL Rating
Safety Integrity Level Claim Limit 3

PFD 1,76 10-3 (whole safety function)
PFH 1 10-8
Mode of Operation High-demand mode
Safety Related Subsystems Type B (use of programmable / complex components)
Hardware Fault Tolerance HFT = 1 (two channel system)
Safe Failure Fraction 9099%
Performance Level/Category The Performance Level of the safety function is dependent on the structure of all
devices that comprise the safety function.
The CR30 safety relay can be used in safety systems meeting up to Category 4
and Performance Level PLe in accordance with ISO 13849-1.
Table 26 - Performance Level/Category
Category Up to 4
Performance Level Up to e

Appendix A Specifications
General Number of I/O 22

Dimensions 90 x 100 x 80 mm (3.54 x 3.94 x 3.15 in.)
Shipping Weight, approx. 0.423 kg (0.933 lb)
Wire Size 0.22.5 mm2 (2412 AWG) solid copper wire or
0.22.5 mm2 (2412 AWG) stranded copper wire
rated @ 90 C (194 F) insulation max
Wiring Category 2 on signal ports
2 on power ports
Use this Conductor Category information for planning conductor routing. See Industrial
Automation Wiring and Grounding Guidelines, publication 1770-4.1.
Insulation Stripping Length 7 mm (0.28 in.)
Terminal Screw Torque 0.6 Nm (4.4 lbin) max
(Using a 2.5 mm (0.10 in.) flat-blade screwdriver)
Input Circuit Type 24V DC source
Output Circuit Type 24V DC source
Power Supply Voltage Range 24V DC +10% -15%
Fuse Specification 6A
Power Consumption 5.28 W
I/O Rating Input 24V DC, 4 mA
Output 24V DC, Class 2, 0.5 A per point
Enclosure Type Rating IP20
Power has to be supplied by a power supply that complies with IEC / EN 60204 and IEC / EN 61558-1. Such a power supply meets the
electrical safety requirements and maintain the minimum power of 18V DC during 20 ms even in the event of voltage dips.
Environmental Temperature, Operating -5+55 C (23131 F)

Relative Humidity 90%
Vibration 1055 Hz, 0.35mm
Shock 10 g, 16 ms
Pollution Level 2

Specifications Appendix A
Inputs Number of Inputs Up to 18 embedded

12 dedicated inputs
6 configurable as Inputs
Operating Voltage Range 20.426.V DC
Off-state Voltage, max 5V DC
Off-state Current, max 2.91 mA (independent of supply)
On-state Voltage, max 26.4V DC
On-state Voltage, min 11.0V DC
On-state Current, min 3.14 mA at 20.4V DC
On-state Current, nom 3.2 mA at 24V DC
On-state Current, max 3.25 mA at 26.4V DC
Off Pulse Accepted for OSSD Min = 0 s
Setting without Declaring Max = 700 s
the Input as OFF
Reverse Voltage Protection No
Input Capacitance 10 nF
Galvanic Isolation: I/O from No
Logic
Outputs Number of Outputs Up to 10

Output Signals Standard, OSSD, and Single Wire Safety
Continuous Output Current 0.5 A (Terminals 1219)
0.3 A (Terminals 2021)
Aggregate Current of Outputs 3A
per Device (Max)
Surge Output Current 1A
Surge Output Current 5 ms
Duration
Residual Voltage (Drop from 0.2V DC
Power Supply), max
Max Load Capacitance 200 nF / 20-mA load
100 nF / 10-mA load
22 nF without load
Off-state Leakage Current, < 0.1 mA
max
Short Circuit Detection Yes
Short Circuit Protection Yes
Galvanic Isolation: I/O from No
Logic
Pulse Test Duration 700 s
Pulse Test Period 13000 ms (less than 15 s)
Reaction Times Safety Input

Automatic reset < 100 ms
Single Wire Safety Input
Manual monitored reset < 500 ms
Safety Mats

Recovery Times To trigger Inputs again Response time as demand + reaction time + 100 ms
Response Times Safety Input 45 ms + Input Filter time

Single Wire Safety Input <45 ms
Safety Mats <70 ms
Single Wire Safety Output <60 ms
Output Loop 25 ms
System Response Time The safety response time is the time that is required to establish the safe state of
the safety output function considering the demand of the safety monitoring
Calculation function and/or occurrence of faults and failures in the safety chain. The overall
response time of the safety function considers the whole safety chain, including
the safety input device, logic device, and actuator. The safety response time is
used to calculate the safety distance, distance between a safeguarding device, and
the hazardous area.
The following paths have to be considered:
Figure 149 - System Response Time

Input Logic Actuator
E.g.
E.g.
Interlock E.g. CR30
Contactor
switch
Embedded CPU, Logic Embedded

Input routing Output

Response Time - Demand of the Safety Function
The safety response time of CR30 safety relay is the screw-to-screw response time
to turn off a safety output at demand of the safety function by the safety input
device. The safety response has to be calculated for each safety monitoring
function. Table 27 shows the possible safety chain with all considerable response
times.
Table 27 - Safety Chain Response Times

Description Where to find: Value
Safety Sensors Safety response time of sensor device Sensor operating manual
SMF Specific Processing time of safety Table 28 (SMF processing times)
monitoring function configured in
Connected Components Workbench
software
Input Filter Configured Input Filter time From SMF configuration advanced
settings (2)
Logic Internal execution time to process input From technical specification 45 ms
signal, routing, and output processing (1)
SOF Configured Off-Delay time From SOF configuration
Actuator Safety switching device controlling the Actuator operating manual
load
Total
(1) The internal execution time is static and independent of the number of function blocks that are configured for the safety function.
(2) The maximum input filter time must not be greater than 250 ms.
Table 28 shows the additional processing time of dedicated SMF
Table 28 - Processing Time

SMF Description SMF response time
Emergency Stop SMF inputs deactivated 0 ms
Enabling Switch
Gate Switch
Light Curtain
Alternative Device
Muting N/A 0 ms
Light Curtain Light interrupted, not muted 0 ms
Override Deactivate Override when light 0 ms
curtain is interrupted
Safety Mats Step on Mat, cross loop between 25 ms
safety mat inputs
Single Wire Safety Deactivated SWS signal 15 ms
Two Hand Control Release of at least one hand actuator 0 ms

Figure 150 - Example
Table 29 - For SMF1 - E-stop:
Comment Value
Safety Sensors Safety response time of sensor device 0 ms
- considered as 0 ms since
mechanical device only
SMF An E-stop SMF does not require extra 0 ms
processing time
Input Filter Advanced Settings: Input Filter: 10 x 250 ms
25 ms = 250 ms
Logic Internal execution time to process 45 ms
input signal, routing, and output
processing
SOF Configured Off-Delay time - 0 ms
immediate OFF
Actuator Assuming a contactor with a 30 ms
response time of 30 ms
Total 325 ms
A demand of the E-stop will force a safe state after 325 ms.

Table 30 - For SMF2 - Safety Mat
Comment Value
Safety Sensors Safety response time of sensor device 0 ms
- considered as 0 ms since
mechanical device only
SMF Safety mat processing time 25 ms
Input Filter Advanced Settings: Input Filter: 0ms 0 ms
processing
SOF Configured Off-Delay time - 0 ms
immediate OFF
Actuator Same contactor is controlled by the 30 ms
safety mat SMF as by the E-stop
Total 100 ms
A demand of the Safety Mat will force a safe state after 100 ms.
Monitoring Time - Occurrence of Recoverable Faults and Failures
Recoverable faults as defined earlier (Chapter 16 - Troubleshooting) are faults

and failures within the connected periphery of the CR30 safety relay. The ability
to detect faults depends on the wiring, the type of sensor, and the signal
evaluation function that is applied to the circuit. The monitoring time is the
amount of time to evaluate the fault or failure after detection and to initiate
appropriate system response. Recoverable faults can be recovered by removing the
fault and cycling the appropriate input circuit.
The detection of a recoverable fault does not lead to the loss of the safety
function. When the safety function is demanded during the monitoring time,
after the occurrence of a recoverable fault, the system will respond within the
safety response time according to the response time considerations of this safety
function (See System Response Time Calculation on page 160).
Note: Monitoring measures that are provided by CR30 safety relay to the
periphery define the diagnostic coverage of the application and thus the
safety rating. Internal monitoring measures related to a fail-safe design of
CR30 safety relay are only related to the safety integrity of the CR30 safety
relay itself, see nonrecoverable faults.
Examples of recoverable faults include:

Cross loop and shorts to 24V and COM faults
Input discrepancy
Muting: Synchronization times exceed
Muting time exceeded
Muting sequence fault
Two-hand discrepancy fault
Reset/Restart timing fault

The evaluation method of the input or output signal depends on the

configuration of the SMF and SOF in Connected Components Workbench
software and the wiring of the sensor. Table 31 shows typical evaluation functions
and required settings to be enabled.
Table 31 - Evaluation Method

Evaluation Method Configuration Applicable for
Multi-channel signal evaluation Inputs: 2 N.C., 2 OSSD, 3 N.C. (1), or SMF:
3OSSD(1) Emergency Stop
Enabling Switch
Gate Switch
Light Curtain
Two Hand Control
Alternative Device
Muting: Light Curtain settings
Muting: Override settings
Test pulse evaluation Test Pulses: 1 or 2 sources, or 3 SMF:
sources (1): >0 Emergency Stop
Enabling Switch
Gate Switch
Two Hand Control
Alternative Device
Input Discrepancy Time Discrepancy Time (2): >0 SMF:

Range: 0.053 s Emergency Stop
Enabling Switch
Gate Switch
Light Curtain
Two Hand Control
Alternative Device
Muting: Light Curtain settings
Two Hand Discrepancy Monitoring Default: 0.5 s SMF
The maximum amount of time Two Hand Control
between activation of Hand 1 and
Hand 2 to enable SMF
Muting Sequence Muting Type: 2 Sensor T-Type, 2 SMF
Sensor L-Type, 4 Sensor Muting
Defines the type of muting
application and thus the valid
sequence of clearing or blocking the
muting sensors and protective
device.

Evaluation Method Configuration Applicable for

Muting: Synchronization time Synch Time: 0.0510 s SMF
The maximum amount of time that is Muting
allowed between clearing or blocking
of the muting sensor inputs before
generating a fault.
Muting time Max. Mute Time: 1 s10 days SMF

Maximum amount of time during Muting
which the instruction lets the
protective function of the light
curtain be disabled before
generating a fault.
Input pulse monitoring Input Pulse of 250 ms3 s SMF

Monitors the operation of a valid Reset
reset or restart actuation. Restart
Retrigger Time Delay If retrigger function is disabled, once SOF
the Time Delay has begun timing, it Off Delay
cannot be reset.
When SOF input signal transitions
from the Safe state back to the Active
state, when timing has started, the
time will completely lapse but the
SOF indicates a fault
Integral test pulses Integral test pulses are enabled for SOF
safety outputs controlled by an SOF Immediate OFF
When using the multi-purpose OFF Delay
terminals 1317 as outputs, the ON Delay
integral test pulses can be disabled.
Jog
(1) For alternative SMF only
(2) A discrepancy time of 0 disables discrepancy monitoring. The time between opening or closing the channels is infinite.

Test Pulse Evaluation
Integral test pulses are applied to the input circuit of safety sensor with
electromechanical outputs. The test pulse output signal becomes input signal of a
safety input through the contacts of the safety sensor. Sensors with electronic
OSSDe (output safety switching device electronic) semiconductor outputs have
their own test pulses and do not require a test pulse evaluation that is sourced by
the logic device.
Note: In case multiple input circuits are sourced by the same test pulse
output, a fault affects all inputs that are connected to this output.
Multi-Channel Signal Evaluation and Discrepancy Monitoring

Independent of the test pulse evaluation or sensor type, components can be wired
in a single-channel, dual-channel, or even three-channel structure. In a dual or
three channel structure, all channels must be active to enable the SMF. Disabling
at least one of the channels demands the safety function. These channels can be
monitored against discrepancy.
The discrepancy time is the amount of time that input channels of an SMF are
allowed to be in an inconsistent state before an instruction fault is generated. The
discrepancy time cannot be set in Single Channel Mode.
Sequence and Timing Faults
Typically applied to specialty safety functions such as Muting or Two-hand

control. It monitors the sequence of events to evaluate the validity of input
signals to enable the SMF.
Integral Test Pulses of Safety Outputs

Test pulses are applied to safety outputs to detect faults within the connected
periphery such as short circuits to 24V of 0V or cross-loop faults between two
output sources. Integral pulses on safety outputs are also used to confirm the
safety integrity of the output itself, such as ability to switch off. An output fault,
internal or external, always requires a power cycle to test if the fault is recoverable
or not.
Note: To verify the ability to switch off actuator devices in case of short
circuits to 24V DC within the control line of one actuator, it is
recommended to use a pair of safety outputs controlling two redundant
switching actuators. Once the fault is detected, a second channel is able to
switch off the load. Fault exclusions of potential short-circuits between
two conductors are also possible when following the requirements for fault
exclusions according to EN ISO 13849-2 Table D.3 and D.4, among
others protection (for example, cable conduit) and separated wiring of
safety signals.

The overall monitoring time to evaluate a fault and initiate a system response,
after the occurrence of a recoverable fault must consider any specific-fault
processing times depending on the I/O evaluation method and configured input
filter times. Table 32 shows the response time for specific recoverable faults, if the
safety function is not demanded, and the required settings of SMF and SOF to
enable the proper fault evaluation method.
Table 32 - Processing Time of Recoverable Faults and Required Settings

Recoverable Fault Detection Enabled by Processing Time
Cross loop fault Inputs: 2 N.C. 3s
Pulse Testing: 2 Sources
Short circuit fault Inputs: 1 N.C., or 2 N.C. 3s
Pulse Testing: 1 Source, 2 Sources
Input discrepancy fault Inputs: 2 N.C., 2 OSSD Discrepancy time + Input Filter time
Discrepancy Time: >03 s
Reset/restart timing fault Default: 0.253 s 0 s (1)
Non-retriggerable timer fault Retriggerable: Disabled Configured time delay (2)
Muting: Synchronization time Synch Time: 0.0510 s Max. Synch Time (3)
exceeded Muting Sensors Input Filter: 03 s + 2 x Input Filter Time
Muting time exceeded Max. Mute Time: 1 s10 days Configured Max. Mute Time
Muting sequence fault Muting Type: 2 Sensor T-Type, 2 Input Filter Time
Sensor L-Type, 4 Sensor
(1) A Reset/Restart Timing Fault can only occur when safety outputs are OFF, so there is no impact on the safety response time
(2) The maximum of the configured delay must be considered. The remaining time at occurrence of fault will lapse.
(3) The synchronization time between the Muting Sensors, and between Muting Sensor can be set individually. The longest
synchronization must be considered.
Table 33 - Response time of the Safety Chain at Occurrence of Recoverable Faults without a
Demand of the Safety Function
SMF Fault processing Table 32, according to
configured input
evaluation of the SMF
Logic Internal execution time to From technical 45 ms (fix)
process input signal, specification
routing, and output
processing (1)
SOF Fault processing time and From SOF configuration
configured time delay
Actuator Safety switching device Actuator Operating manual
controlling the load
Total

Figure 151 - Example
Table 34 - Consideration for Recoverable Faults of E-stop Safety Function
Description Value
SMF Cross loop fault: 3 s according to 3s
above table
processing
SOF No off delay configured 0s
Total 3.075 s
Response Time - Occurrence of Nonrecoverable Faults and Failures
Internal monitoring measures applied to monitor the safety integrity of the

system detect nonrecoverable faults. These faults are independent of the logic
configuration. Once detected the CR30 safety relay forces the safe state within
the internal process cycle time of 45 ms.

Reaction Time The reaction time is the time to enable the safety output function when
activating the safety input devices and performing a valid reset operation. The
overall reaction time of the safety function considers the whole safety chain,
including the safety input device, logic device, and actuator. The reaction time
must be calculated for each safety function.
Table 35 shows the possible chain with all considerable reaction times for a safety
function.
Table 35 - Safety Function Reaction Times

Feedback Feedback Input Filter time From SMF configuration
advanced settings (3)
Safety Sensors Reaction time of sensor Sensor operating manual
device
SMF Configured Input Filter From SMF configuration
time advanced settings (3)
Reset/Restart Reset/Restart Pulse Time + Reset Pulse: max 3 s 3 s + 2 x Input Filter
2 x Filter Time (1) Input Filter Time from SMF
configuration
Logic Internal execution time to From technical 100 ms
process input signal, specification
routing, and output
processing (2)
SOF Configured On-Delay time From SOF configuration
Actuator Safety switching device Actuator Operating manual
controlling the load
Total
(1) If input filter time settings are not disabled, the recommended setting is 0. Values greater 0 must be considered for the
reactiontime.
(3) The maximum input filter time must not be greater than 250 ms.
Figure 152 - Example 1:

Comment Value
Feedback Disabled for SOF 0 ms
Safety Sensors Reaction time of sensor device - 0 ms
considered as 0 ms since mechanical
device only
SMF Configured Input Filter time 250 ms
10x25ms = 250 ms
Reset/Restart SOF configured for Automatic 0s
processing 2)
SOF No On Delay is configured for SOF 0s
Total 360 ms
It takes 360 ms to enable the outputs when the E-stop is active (closed contacts).
Table 37 - For SMF2 Safety Mat:
Comment Value
Feedback Disabled for SOF 0 ms
device only
SMF Input Filter Disabled 0 ms
Reset/Restart SOF configured for Automatic 0 ms
processing 2)
Total 110 ms
It takes 110 ms to enable the outputs when the Safety Mat is released.

Figure 153 - Example 2: Same as Figure 152 on page 169 but with manual monitored reset and
feedback monitoring
Comment Value
Feedback Configured Input Filter time 250 ms
10x25ms = 250 ms
device only
SMF Configured Input Filter time 250 ms
10x25ms = 250 ms
Reset/Restart Min: 2 x Input Filter Time + 250 ms = Min: 0.75 s
500 ms + 250 ms = 0.75 s Max: 3.5 s
Max: 2 x Input Filter Time + 3 s = 0.5
+ 3 s = 3.5 s
processing 2)
Total Min: 1.36 s
Max: 4.11 s
It takes a minimum of 1.36 s, after a valid Reset operation of at least 250 ms to

enable the outputs when the E-stop is active (closed contacts).

Table 39 - For SMF2 - Safety Mat:
Comment Value
Feedback Configured Input Filter time 250 ms
10x25ms = 250 ms
device only
SMF Input Filter Disabled 0 ms
Reset/Restart Min: 2 x Input Filter Time + 250 ms = Min: 0.75 s
500 ms + 250 ms = 0.75 s Max: 3.5 s
Max: 2 x Input Filter Time + 3 s = 0.5
+ 3 s = 3.5 s
processing 2)
Total Min: 1.055 s
Max: 3.3 s
It takes a minimum of 1055 s, after a valid Reset operation of at least 250 ms to

enable the outputs when the E-stop is active (closed contacts).
440C-ENET Module The following are specifications for the Guardmaster 440C-ENET Ethernet
plug-in module.
Specifications
Table 40 - Technical Specifications
Specification Description
Module location Slot 1 module bay only.
Backplane current (mA) at 24V DC 42 mA
Isolation voltage 50V DC, Reinforced Insulation Type, Ethernet to system
Type tested at 1500V AC for 60 s
Power consumption, max 1W
Thermal dissipation 3.41 BTU/hr @ 65 C
Wire size Ethernet connections:
RJ45 connector according to IEC 60603-7, 2 or 4 pair Category 5e minimum
cable according to TIA 568-B.1 or Category 5 cable according to ISO/IEC 24702.
Wiring category 1 - on communication port(1)
Enclosure type rating None (open-style)
(1) Use this Conductor Category information for planning conductor routing. See Industrial Automation Wiring and Grounding Guidelines,
publication 1770-4.1.

Table 41 - Environmental Specifications

Specification Description
Temperature, operating -20+65 C (-4+149 F)
IEC 60068-2-1 (Test Ad,
Operating Cold)
IEC 60068-2-2 (Test Bd,
Operating Dry Heat)
IEC 60068-2-14 (Test Nb,
Operating Thermal Shock)
Temperature, nonoperating -40+85 C (-40+185 F)
IEC 60068-2-1 (Test Ab,
Unpackaged Nonoperating Cold)
IEC 60068-2-2 (Test Bb,
Unpackaged Nonoperating Dry
Heat)
IEC 60068-2-14 (Test Na,
Unpackaged Nonoperating
Thermal Shock)
Relative humidity, operating 585% noncondensing
IEC 60068-2-30 (Test Db,
Unpackaged Damp Heat)
Relative humidity, nonoperating 595% noncondensing
IEC 60068-2-30 (Test Db,
Unpackaged Damp Heat)
Vibration 2 g @ 10500 Hz
IEC 60068-2-6 (Test Ea,
Unpackaged Shock)
Shock, operating 25 g (DIN Rail or panel mount)
IEC 60068-2-27 (Test Ea,
Unpackaged Shock)
Shock, nonoperating 25 g (DIN Rail mount)
IEC 60068-2-27 (Test Ea, 35 g (panel mount)
Unpackaged Shock)
Emissions Group 1, Class A
CISPR 11
Immunity, ESD 6 kV contact discharges
IEC 6100-4-2 8 kV air discharges
Immunity, radiated RF 10V/m with 1-kHz sine-wave 80%AM from 802700 MHz
IEC 61000-4-3 10V/m with 200 Hz 50% Pulse 100%AM at 900 MHz
10V/m with 200 Hz 50% Pulse 100%AM at 1890 MHz
Immunity, EFT/B 1 kV at 5 kHz on Ethernet port
IEC 61000-4-4
Immunity, surge transient 1 kV line-earth(CM) on Ethernet port
IEC 61000-4-5
Immunity, conducted RF 10V rms with 1-kHz sine-wave 80%AM from 150 kHz80 MHz
IEC 61000-4-6

Table 42 - Certifications
Certification Description
cULus UL Listed Industrial Control Equipment, certified for US and Canada.
See UL File E361015.
CE European Union 2004/108/EC EMC Directive, compliant with:
EN 61326-1; Meas./Control/Lab., Industrial Requirements
EN 61000-6-2; Industrial Immunity
EN 61000-6-4; Industrial Emissions
EN 60947-1; Auxiliary Devices
C-Tick Australian Radiocommunications Act, compliant with:
AS/NZS CISPR 11; Industrial Emissions
EtherNet/IP ODVA conformance tested to EtherNet/IP specifications
Note: When product is marked. See the Product Certification link at http://www.ab.com for Declarations of Conformity, Certificates,
and other certification details

Appendix B
Regulatory Approvals
Agency Certifications UL Listed Industrial Control Equipment (certified for US and Canada)
CE marked for all applicable directives
C-Tick marked for all applicable acts
CCC Mark
S-Mark
Compliance to European This product has the CE marking and is approved for installation within the
European Union and EEA regions. It has been designed and tested to meet the
Union Directives following directives.
Machine Safety Directive

This product is designed and tested to meet the European Council Directive
2006/42/EC on machinery and the following standards.
IEC/EN 61508 - Functional safety of electrical/electronic/programmable
electronic safety-related systems
IEC/EN 62061 - Safety of machinery - Functional safety of safety-related
electrical, electronic, and programmable electronic control systems
EN ISO 13849-1 - Safety of machinery -- Safety-related parts of control
systems -- Part 1: General principles for design
This product is intended for use in an industrial environment.
EMC Directive
This product is designed and tested to meet the European Council Directive
2004/108/EC on Electromagnetic Compatibility (EMC) and the following
standards:
EN 61000-6-4: Generic Standards - Emission Standard for Industrial
Environments
EN 61000-6-2: Generic Standards - Immunity for Industrial
Environments
This product is intended for use in an industrial environment.

Appendix B Regulatory Approvals
Notes:

Appendix C
Configuration Reference Document
The Configuration Reference Document must be stored together with technical

documentation of the machine. It includes information about the validity of a
configuration that is created for the machine. This document must be updated
anytime changes to the configuration have been made, validated, and verified.
Any new configuration or changes to an existing configuration require a

validation and verification before putting it into service. An unverified
application will stop operating after 24 hr after power-up.
With your signature you confirm that:

You have validated and verified of the safety configuration, identified the
previously mentioned details AND
The configuration and installation meets all specified operational and
environmental requirements of the machine to which CR30 safety relay is
to be fitted AND
You have read and understood the Important User Information
Important User Information Review user information that is given on page 2. For additional information
concerning related products. See Additional Resources on page 11.

Appendix C Configuration Reference Document
Configuration Reference Document
Device Information:
Device Name:
From Name Field, General View
Description:
From Description Field, General View
Vendor:
Allen-Bradley
Catalog ID:
440C-CR30-22BBB
Safety Relay Firmware Version:
Found in the Device Details Window of CCW
Project Information:
Project Name:
As stored in the configuration tool
Project File Name:
From file name
Software revision:
From Help -> About CCW
Verification ID:
Generated in verification window
Approval:
Project Developer Name:
Date:
Signature

Appendix D
ControlFLASH Firmware Update
Update the Firmware IMPORTANT Before updating the firmware, verify that the CR30 safety relay is in
programmode.
This appendix shows how to update the firmware in a CR30 safety relay using
ControlFLASH software. To download the latest CR30 safety relay firmware
revision, go to http://www.rockwellautomation.com/support/pcdc.page and
select your desired revision.
1. Through USB connection: Verify successful RSLinx Classic

communications with your CR30 safety relay by USB using RSWho. The
CR30 safety relay uses the AB_VBP-x driver.
2. Start ControlFLASH
Click Start > All Programs > FLASH Programming Tools >
ControlFLASH.
3. Select Local and click OK.

Appendix D ControlFLASH Firmware Update
4. Click Next
5. Select the catalog number of the CR30 safety relay (catalog number
440C-CR30-22BBB) that you are updating and click Next.

ControlFLASH Firmware Update Appendix D
6. Expand the AB_VBP-1, 1789-A17/A Virtual Chassis by clicking the +.

7. Select the safety relay in the browse window and click OK.
If the device comes up unrecognized, the EDS file has not been loaded.
8. Verify the revision, and click Next to continue.
9. Click Finish.

10. Click Yes to initiate the update.
The next screen shows the download progress.
11. When the flash update is complete, you see a status screen similar to the
following. Click OK to complete the update.
IMPORTANT If you see the following message, check the mode of the CR30 safety relay.
ControlFlash cannot be performed when the CR30 safety relay is in run mode.
The CR30 safety relay must be in program mode.
12. The Welcome to ControlFlash window appears again. Click Cancel.

13. Click Yes to end the session.
Unrecognized Device
If the device comes up as unrecognized, the EDS file must be uploaded.
1. Right-click the device and select Upload EDS file from device.
2. Click Yes.
3. Click Next.

4. Click Next.
5. Click Next.
6. Click Next.

7. Click Finish.

Notes:

Appendix E
EtherNet/IP I/O Assemblies
Input Assemblies The following are input assemblies available over EtherNet/IP for the CR30
safety relay.
Table 43 - CR30 Safety Relay Input Assemblies
Instance Byte Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
Decimal (hex)
100 (64 h) 0 Reserved Minor Fault Major Fault Connection Run Mode
Faulted
1 Reserved
High Byte Low Byte
2, 3 Verification ID
4, 5 Major Fault Type (1) Major Fault Code (1)
6, 7 Minor Fault Type (1) Minor Fault Instance (1)
8, 9 Minor Fault Code (1)
Byte Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
10 Pt 07 Data Pt 06 Data Pt 05 Data Pt 04 Data Pt 03 Data Pt 02 Data Pt 01 Data Pt 00 Data
11 Pt 15 Data Pt 14 Data Pt 13 Data Pt 12 Data Pt 11 Data Pt 10 Data Pt 09 Data Pt 08 Data
12 Reserved Pt 21 Data Pt 20 Data Pt 19 Data Pt 18 Data Pt 17 Data Pt 16 Data
13 Plug-in 2 Plug-in 2 Plug-in 2 Plug-in 2 Plug-in 2 Plug-in 2 Plug-in 2 Plug-in 2
Pt 07 Data Pt 06 Data Pt 05 Data Pt 04 Data Pt 03 Data Pt 02 Data Pt 01 Data Pt 00 Data
14 SMF 8 Data SMF 7 Data SMF 6 Data SMF 5 Data SMF 4 Data SMF 3 Data SMF 2 Data SMF 1 Data
17 LLA 8 Data LLA 7 Data LLA 6 Data LLA 5 Data LLA 4 Data LLA 3 Data LLA 2 Data LLA 1 Data
18 LLA 16 Data LLA 15 Data LLA 14 Data LLA 13 Data LLA 12 Data LLA 11 Data LLA 10 Data LLA 9 Data
19 LLB 8 Data LLB 7 Data LLB 6 Data LLB 5 Data LLB 4 Data LLB 3 Data LLB 2 Data LLB 1 Data
20 LLB 16 Data LLB 15 Data LLB 14 Data LLB 13 Data LLB 12 Data LLB 11 Data LLB 10 Data LLB 9 Data
21 SOF 8 Data SOF 7 Data SOF 6 Data SOF 5 Data SOF 4 Data SOF 3 Data SOF 2 Data SOF 1 Data
22 SOF 16 Data SOF 15 Data SOF 14 Data SOF 13 Data SOF 12 Data SOF 11 Data SOF 10 Data SOF 9 Data
23 SOF 8 Reset SOF 7 Reset SOF 6 Reset SOF 5 Reset SOF 4 Reset SOF 3 Reset SOF 2 Reset SOF 1 Reset
Required Required Required Required Required Required Required Required
24 SOF 16 Reset SOF 15 Reset SOF 14 Reset SOF 13 Reset SOF 12 Reset SOF 11 Reset SOF 10 Reset SOF 9 Reset
Required Required Required Required Required Required Required Required
25 Reserved
26 Reserved
27 Reserved
Where:
Pt = Value of the I/O point
SMF = Safety Monitoring Function (SMF) block status in the CR30 safety relay editor
LLA = Logic Level A (LLA) Function block status in the CR30 safety relay editor
LLB = Logic Level B (LLB) Function block status in the CR30 safety relay editor
SOF = Safety Output Function (SOF) block status in the CR30 safety relay editor
(1) See Appendix F (page 189) for details on Faults.

Appendix E EtherNet/IP I/O Assemblies
Output Assemblies The following are output assemblies available over EtherNet/IP for the CR30
safety relay.
Table 44 - CR30 Safety Relay Output Assemblies

Instance Byte Bit 7 Bit 6 Bit 5 Bit 4 Bit 3 Bit 2 Bit 1 Bit 0
Decimal (hex)
150 (96 h) 0 PNB 07 PNB 06 PNB 05 PNB 04 PNB 03 PNB 02 PNB 01 PNB 00
1 PNB 15 PNB 14 PNB 13 PNB 12 PNB 11 PNB 10 PNB 09 PNB 08
2, 3 Reserved
Where:
PNB = Produced Network Bit, writes to the Communications Inputs selections in the CR30 safety relay editor.

Appendix F
Tag Definitions
Input Tags Table 45 - CR30 Safety Relay Input Tags
Name Data Type Tag Definition

RunMode BOOL Run Mode - Indicates the operating mode of the safety relay.
0 = Idle/Program Mode
1 = Run Mode
ConnectionFaulted BOOL Connection Faulted - Indicates the state of the communication
connection between the safety relay and the controller.
0 = Connection
1 = Connection faulted
MajorFault BOOL Major Fault Status - Indicates whether the safety relay is major
(non-recoverable) faulted.
0 = No Fault
1 = Fault
MinorFault BOOL Minor Fault Status - Indicates whether the safety relay is minor
(recoverable) faulted.
0 = No Fault
1 = Fault
VerificationID INT Verification ID - Indicates the unique verification ID of the safety
relay when you have verified the configuration.
Valid verification ID values - 0001. . . 9999.
0000 = Configuration is not verified
PtxxData BOOL Data - Off/On status for input/output point that is echoed back from
the safety relay. This is used to verify proper communication only. No
field side verification is done.
0 = Off
1 = On
Plugin2InPtxxData (1) BOOL Data - Off/On status for input/output point that is echoed back from
the safety relay slot 2 plug-in module. This is used to verify proper
communication only. No field side verification is done.
0 = Off
1 = On
Plugin2OutPtxxData (1) BOOL Data - Off/On status for input/output point that is echoed back from
the safety relay slot 2 plug-in module. This is used to verify proper
communication only. No field side verification is done.
0 = Off
1 = On
MajorFaultType SINT Major Fault Type - Indicates the major fault type of the safety relay.
01H = Hardware Fault
02H = Safety Input Fault
04H = Safety Output Fault
08H = Power Fault
10H = Communication Fault
20H = Configuration Fault
40H = Time Monitoring Fault
80H = Plug-in Fault

Appendix F Tag Definitions

MajorFaultCode SINT Major Fault Code - Indicates the specific major fault code for the
corresponding major fault type. See Table 47 for additional details
MinorFaultType SINT Minor Fault Type - Indicates the type of function block that is
faulted.
10H = Safety Monitoring Function minor fault
40H = Safety Output Function minor fault
MinorFaultInstance SINT Minor Fault Instance - Indicates the instance of the function block
that is faulted.
Valid values: 0124
MinorFaultCode INT Minor Fault Code - Indicates the specific minor fault code for the
corresponding minor fault type and instance. See Table 48 for
additional details.
SMFxx (1) BOOL Data - Off/On status for Safety Monitoring Function echoed back from
the safety relay. This is used to verify proper communication only. No
field side verification is done.
0 = Off
1 = On
LLAxx (1) BOOL Data - Off/On status for Logic Level A Function echoed back from the
safety relay. This is used to verify proper communication only. No field
side verification is done.
0 = Off
1 = On
LLBxx (1) BOOL Data - Off/On status for Logic Level A Function echoed back from the
0 = Off
1 = On
SOFxx (1) BOOL Data - Off/On status for Safety Output Function echoed back from the
0 = Off
1 = On
SOFxxResetRequired (1) BOOL Safety Output Function Reset Required - Indicates whether a
safety output function is awaiting a reset command before initiating
its output.
0 = No reset required
1 = Reset required
(1) xx corresponds to 0116 for bits 0015 of the integer.
Output Tags Table 46 - CR30 Safety Relay Output Tags

LogicDefinedDataxx (1) BOOL Logic Defined Data - These 16 bits write to the Communications
Inputs in the CR30 safety relay editor.
(1) xx corresponds to 0015.

Tag Definitions Appendix F
Major Faults Table 47 - Major Faults
Type Code Cause Recovery Method

01H 01 RAM test failure Do one of the following:
Power cycle the safety relay.
02 ROM test failure Reconfigure the safety relay.
03 Stack overflow or underflow Validate the electrical installation and appropriate
measures to reduce noise and suppress surges are taken.
04 Watchdog expired If the fault persists, contact your local Rockwell Automation
technical support representative. For contact information, see:
05 Memory error http://rockwellautomation.com/support
06 Register failure
07 Flow control/switch default
08 EEPROM fault
11 Host detected incorrect safety firmware revision Do one of the following:
12 Host detected incorrect safety firmware CRC A Update the firmware in the safety relay.
13 Host detected incorrect safety firmware CRC B Validate the electrical installation and appropriate
15 Host software error If the fault persists, contact your local Rockwell Automation
http://rockwellautomation.com/support
02H 0118 Safety input pulse test failure. Code corresponds to Do one of the following:
specific terminal that is faulted +1 Check wiring for shorts to 24V or other channels.
Reconfigure the safety relay.
Validate the electrical installation and appropriate
If the fault persists, contact your local Rockwell Automation
19 Cross loop inputs of input shift register Do one of the following:
2021 Input data transfer fault Reconfigure the safety relay.
04H 0110 Safety output plausibility failure (short of failure on Do one of the following:
power-up). Code 0110 corresponds to terminals Check wiring for shorts to 24V or other channels.
1221, respectively. Power cycle the safety relay.
1120 Safety output pulse test failure. Code 1120 Reconfigure the safety relay.
corresponds to terminals 1221, respectively. Validate the electrical installation and appropriate
06H 00 Other fault A configuration fault occurred. Do one of the following:
01 CRC Error Power cycle the safety relay.
02 EEPROM If the fault persists, contact your local Rockwell Automation
03 Processors A and B received different values from the host http://rockwellautomation.com/support
04 Configuration files not OK
05 Plug-in slot 2 configuration not equal to actual
20 Host detected safety processors did not respond to
configuration step
21 Plug-in slot 1 configuration not equal to actual


08H 01 Over/under voltage is detected or pulse test failure of Do one of the following:
main internal transistor Validate the electrical installation and appropriate supply
voltage is provided.
02 Pulse test fault of voltage monitoring/main transistor Power cycle the safety relay.
03 Under voltage reset Reconfigure the safety relay.
10H 01 Compare UART data during operation technical support representative. For contact information, see:
02 Communication timeout between safety processors Do one of the following:
17 Host processor detected safety processors are Reattempt download of the safety relay configuration.
unresponsive
18 Host processor detected safety processors lost measures to reduce noise and suppress surges are taken.
communication If the fault persists, contact your local Rockwell Automation
20H 01 CRC Error in the configuration file http://rockwellautomation.com/support
02 CRC of configuration file different from EEPROM
03 Mismatch between I/O C A and I/O C B in configuration
files
04 Invalid ID numbers for configuration files
05 Mismatch between configured plug-in and plug-in Do one of the following:
detected on slot 2 Verify plug-in physically present in the slot matches the
configuration.
21 Mismatch between configured plug-in and plug-in Reattempt download of the safety relay configuration.
detected on slot 1
40H 0103 Timing fault Do one of the following:
80H 20 Memory module restore failed Do one of the following:
Verify that Memory Module is properly seated in slot 1
21 Memory module backup failed Power cycle the safety relay.
Initiate backup or restore
41 Plug-in slot 1: Parity failure Do one of the following:
Verify plug-in physically present in the slot matches the
42 Plug-in slot 1: Communication error configuration.
43 Plug-in slot 1: Plug-in Type not supported Reattempt download of the safety relay configuration.
81 Plug-in slot 2: Parity failure measures to reduce noise and suppress surges are taken.
82 Plug-in slot 2: Communication error technical support representative. For contact information, see:
83 Plug-in slot 2: Plug-in type is not supported. http://rockwellautomation.com/support

Minor Faults Table 48 - Minor Faults

10H 01H Pulse Test Failure Do one of the following:
Channel shorted to 24V or another channel. Check wiring for shorts to 24V or other channels.
02H Reset Held On Reconfigure the safety relay.
A transition of the reset input from ON (1) to OFF (0) did Validate the electrical installation and appropriate
not occur within 3 seconds. measures to reduce noise and suppress surges are taken.
04H Light Curtain Mute Time Exceeded Do one of the following:
The Light Curtain was muted for longer than the Verify that there is no obstruction of the mute sensor or
maximum configured mute time. light curtain.
Verify that the application times are appropriate
Check wiring for shorts to 24V or other channels.
05H No Input Selection Fault Do one of the following:
A no input selection fault condition existed for more than Check the timing of the mode selection inputs to see if they
250 ms. are within 250 ms.
To clear the fault, cycle the Mode Selection switch through
the valid modes.
06H Input Selection Fault Do one of the following:
A multiple input selection condition was detected. Check Check the timing of the mode selection inputs to see if they
the mode selection inputs. are within 250 ms.
To clear the fault, cycle the Mode Selection switch through
the valid modes.
07H Hazardous Motion Fault Do one of the following:
Hazard Feedback transitioned to OFF (0) while the Unlock Adjust the application to verify that the hazard cannot be
Command to the device was ON (1). energized when the lockable guard is unlocked.
To clear the fault, press the Lock Request (LR) input.
08H Contact bounce Do one of the following:
One channel went to the safe state and back to the active Check wiring and mechanical integrity of the field device.
state after a reset. Power cycle the safety relay.


10H 10H Mute Time Exceeded. Do one of the following:
Too much time has elapsed between mute sensors being Verify that there is no obstruction of the mute sensor.
blocked. Verify that the application times are appropriate
Check wiring for shorts to 24V or other channels.
14H Combination of faults detected See the following fault codes:
04H
10H
20H Discrepancy Fault. Do one of the following:
The configured amount of time that the inputs are Check wiring for shorts to 24V or other channels.
allowed to be in an inconsistent state expired. If appropriate, adjust the Discrepancy Time for the Safety
Monitoring Function.
40H Muting Sequence Fault. Do one of the following:
An illegal input pattern, the pattern of sensors being Check the sensor
blocked and cleared, for the mute sensors was detected. Check wiring
Power cycle the safety relay
Reconfigure the safety relay
04H
40H
10H
40H
4H
10H
40H
10H
80H
4H
10H
80H
40H
80H
4H
40H
80H


10H 130H Combination of faults detected See the following fault codes:
10H
40H
80H
4H
10H
40H
80H
80H Light Curtain Sequence Fault. Do one of the following:
An illegal input pattern, the pattern of sensors and light Check the sensor
curtain being blocked and cleared, was detected. Check wiring for shorts to 24V or other channels
Power cycle the safety relay
FFFFH Unregistered fault Contact your local Rockwell Automation technical support
representative. For contact information, see:
40H 01H Retrigger Fault. Do one of the following:
Enabled input has transitioned from OFF (0) to ON (1) Verify that application logic and wiring is appropriate
while the output delay time was in progress. Power cycle the safety relay
FFFFH Unregistered fault Contact your local Rockwell Automation technical support
representative. For contact information, see:

Notes:

Index
Numerics B
2080-IQ4 105 back up
2080-IQ4OB4 104 project 151, 152
2080-OB4 105 block
2080-OW4I 106 AND 88
440C-ENET AND with Restart 90
immediate OFF 98
about 107 jog 101
connect to network 110 muting lamp 101
ground 109 NAND 89
install 106, 108 nest 93
set network address 110 NOR 90
specifications 172 NOT 90
status indicator 112 OFF delay 100
wire 109 ON delay 99
OR 88
OR with Restart 92
A pass through 87
about XOR 89
Guardmaster 440C-ENET 107 build
access configuration 33
exclusive 145
module data with add-on profiles 123
add C
CR30 safety relay 114 cables 26
add-on profile calculation
use 114 system response time 160
add-on profiles certification 175
access module data 123 change
advanced settings 63 password 148
agency certification 175 clear
alternate device 80 password 149
dual channel 82 communication
dual channel N.C./N.O. 84 automation controller 113
dual channel OSSD 83 Modbus 131
single channel 81 communication connection 15
three channel 85 compatibility 146
AND 88
compliance
with Restart 90
approval European Union directive 175
configuration
regulatory 175
architecture 133 build 33
download 33
assembly download to CR30 safety relay 119
EtherNet/IP I/O 187 online changes 122
input 187 password 147
output 188 reference document 177
automation controller communication 113 configure
safety relay logic 118
connect
power supply 23
safety relay (password-protected) 146
to network 110
Connected Components Workbench
obtain software 15
start 27
troubleshoot with Logic Editor 140

Index
connection E
communication 15 embedded serial port
Ethernet/IP 16
input 97 wire 25
multiple block 41 EMC directive 175
output 97 emergency stop 53
serial port 16 enabling switch 54
USB 15 enclosure consideration 19
control
environmental 158
two-hand control 77
type IIIA two-hand 78 E-stop See emergergency stop
type IIIC two-hand 79 ethernet
ControlFLASH message 113
firmware upgrade 179 ethernet module
controller specifications 172
insert module 103 EtherNet/IP
status indicator 129 connection 16
CR30 safety relay I/O assembly 187
download configuration 119 EtherNet/IP plug-in module
crossfault about 107
fault analysis 143 connect to network 110
cycling ground 109
install 106, 108
power 26 set network address 110
status indicator 112
D wire 109
European Union directive
definition 12 compliance 175
tag 189 evaluation
delay multi-channel signal 166
OFF 100 test pulse 166
ON 99 excessive heat
detail prevention 19
hardware 14 exclusive access 145
device explicit
alternate 80 message 125
unrecognized 183
dimensions
mounting 17 F
DIN Rail
fault analysis
mounting 17
directive crossfault 143
fault present 77
EMC 175
faults
machine safety 175
discrepancy major 191
minor 193
monitoring 166
nonrecoverable 140
time 49
recoverable 139
download
sequence 166
configuration 33 timing 166
configuration to CR30 safety relay 119 features
hardware 13
dual channel 82
feedback
N.C./N.O. 84 parameter 97
OSSD 83
feedback monitoring 56
filter
input 47
firmware
upgrade 179
four-sensor muting 68

Index
function block I
alternate device 80 I/O
emergency stop 53
enabling switch 54 EtherNet/IP assembly 187
feedback monitoring 56 message 113
gate switch 57 I/O configuration
light curtain 59 add CR30 safety relay 114
muting 61 immediate OFF 98
output loop 86 indication
reset 70 naming error 52
restart 72 input
safety mat 73
SensaGuard 74 assembly 187
connection 97
single wire safety input 75
device (mechanical contact) 24
two-hand control 77
device (OSSD output) 24
functions
filter 47
safety monitoring 53 invert 94
maximum number 14
revert 94
G single wire safety 75
gate switch 57 specifications 159
general status indicator 128
tag 189
specifications 158 insert
glossary 12
module into controller 103
ground
install
Guardmaster 440C-ENET 109
safety relay 23 Guardmaster 440C-ENET 106, 108
installation 17
Guardmaster 440C-ENET
integral test pulse
about 107
connect to network 110 safety output 166
ground 109 intended use 13
install 106, 108 invert 94
set network address 110
status indicator 112
wire 109 J
jog 101
H
hardware L
detail 14
features 13 lamp
muting 70
LED See status indicator
light curtain 59
lock control 60
locked safety relay 146
logic levels
A and B 87
nest 93
lost
password 150
L-type muting
two-sensor 66

Index
M O
machine safety directive 175 OFF delay 100
major faults 191 ON delay 99
map online changes
Modbus 131 configuration 122
mechanical contact OR 88
input device 24 with Restart 92
memory module OSSD
use 151 dual channel 83
message OSSD output
ethernet 113 input device 24
explicit 125 output
I/O 113 assembly 188
minor faults 193 connections 97
Modbus invert 94
communication 131 loop 86
map 131 maximum number 14
troubleshoot 142 pulse testing 45
mode selection 61 revert 94
module safety 97
specifcations 159
insert into controller 103 status indicator 128
plug-in 103 tag 190
monitoring wire device 25
discrepancy 166 override settings 63
time 163 overview 13
mounting
dimensions 17
DIN Rail 17
panel 18
P
multi-channel signal page
evaluation 166 start 27
multiple block connections 41 panel
muting 61 mounting 18
four-sensor 68 parameter
lamp 70, 101 feedback 97
two-sensor L-type 66 reset 97
two-sensor T-type 64 pass through 87
password 145
change 148
N clear 149
naming error configuration 147
indication 52 lost 150
NAND 89 protection 145
set 147
nest performance
logic levels 93 category 157
network address level 157
set 110 pinouts 26
new project 28 plug-in module 103
nonrecoverable faults 140 power 21
nonrecoverable faults and failures power cycling 26
response time 168 power supply
NOR 90
connect 23
normally closed input prevent
pulse testing 44 excessive heat 19
normally open input product overview 13
pulse testing 43 project
NOT 90
back up 151, 152
new 28
restore 151, 153

Index
protection S
password 145 safety block
pulse testing 43
rename 51
normally closed input 44 safety mat 73
normally open input 43
output 45 safety monitoring functions 53
safety output 97
integral test pulse 166
R safety relay
rating connect (password-protected) 146
SIL 157 download (password-protected) 146
reaction time 159, 169 ground 23
locked 146
read upload (password-protected) 146
status 134 safety relay logic
ready for reset 76
configure 118
recoverable faults 139 security 145
recovery time 160 send
reference document reset 136
configuration 177 SensaGuard 74
regulatory approval 175 sequence faults 166
rename serial port connection 16
safety block 51 set
report
network address 110
example 156 password 147
reports 155 settings
reset 70 advanced 63
parameter 97 override 63
send 136 signal evaluation
reset set flip flop 95 multi-channel 166
response time 160 SIL rating 157
demand of safety function 161 single channel 81
nonrecoverable faults and failures 168 single wire safety input 75
restart 72
software 15
restore
Connected Components Workbench 15
project 151, 153 specifications 157
revert 94
environmental 158
RS-FF See reset set flip flop general 158
RSLogix 5000 safety relay input 159
add-on profile 114 output 159
reaction time 159
recovery time 160
response time 160
start
Connected Components Workbench 27
start page 27
status
read 134
status in 76
status indicator 127, 139
controller 129
Guardmaster 440C-ENET 112
input 128
output 128
status out 102
surge suppressor 25
switch
enabling 54
gate 57
system response time
calculation 160

Index
T W
tag wire 21, 24
definition 189 embedded serial port 25
input 189 Guardmaster 440C-ENET 109
output 190 input devices 24
terminal assignment 22 output device 25
test pulse recommendation 21
evaluation 166 requirements 21
integral 166 size 22
three channel 85 workspace 32
time
discrepancy 49
monitoring 163
X
reaction 159, 169 XOR 89
recovery 160
response 160
timing 97
faults 166
troubleshoot 139
with Connected Components Workbench
Logic Editor 140
with Modbus 142
T-type muting
two-sensor 64
two-hand control 77
type IIIA 78
type IIIC 79
two-sensor L-type muting 66
two-sensor muting
L-type 66
T-type 64
two-sensor T-type muting 64
type IIIA
two-hand control 78
type IIIC
two-hand control 79
U
unrecognized device 183
upgrade
firmware 179
upload
USB connection 15
use
memory module 151
RSLogix 5000 safety relay add-on profile 114
V
verification
view ID without Connected Components
Workbench software 38
view ID
without Connected Components Workbench
software 38

Rockwell Automation Support
Rockwell Automation provides technical information on the Web to assist you in using its products.
At http://www.rockwellautomation.com/support you can find technical and application notes, sample code, and links to
software service packs. You can also visit our Support Center at https://rockwellautomation.custhelp.com/ for software
updates, support chats and forums, technical information, FAQs, and to sign up for product notification updates.
In addition, we offer multiple support programs for installation, configuration, and troubleshooting. For more
information, contact your local distributor or Rockwell Automation representative, or visit
http://www.rockwellautomation.com/services/online-phone.
Installation Assistance
If you experience a problem within the first 24 hours of installation, review the information that is contained in this
manual. You can contact Customer Support for initial help in getting your product up and running.
United States or Canada 1.440.646.3434
Outside United States or Canada Use the Worldwide Locator at http://www.rockwellautomation.com/rockwellautomation/support/overview.page, or contact your local
Rockwell Automation representative.
New Product Satisfaction Return
Rockwell Automation tests all of its products to confirm that they are fully operational when shipped from the
manufacturing facility. However, if your product is not functioning and needs to be returned, follow these procedures.
United States Contact your distributor. You must provide a Customer Support case number (call the phone number above to obtain one) to your
distributor to complete the return process.
Outside United States Please contact your local Rockwell Automation representative for the return procedure.
Documentation Feedback
Your comments will help us serve your documentation needs better. If you have any suggestions on how to improve this
document, complete this form, publication RA-DU002, available at http://www.rockwellautomation.com/literature/.
Rockwell Automation maintains current product environmental information on its website at

http://www.rockwellautomation.com/rockwellautomation/about-us/sustainability-ethics/product-environmental-compliance.page.
Rockwell Otomasyon Ticaret A.., Kar Plaza Merkezi E Blok Kat:6 34752 erenky, stanbul, Tel: +90 (216) 5698400
Publication 440C-UM001F-EN-P - December 2015

Supersedes Publication 440C-UM001E-EN-P - September 2015 Copyright 2015 Rockwell Automation, Inc. All rights reserved. Printed in the U.S.A.

440c Um001 - en P

Uploaded by

Copyright:

Available Formats

440c Um001 - en P

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

440c Um001 - en P

Uploaded by

Copyright:

Available Formats

User Manual

Guardmaster Configurable Safety Relay

Labels may also be on or inside the equipment to provide specific precautions.

Rockwell Automation Publication 440C-UM001F-EN-P - December 2015 3

4 Rockwell Automation Publication 440C-UM001F-EN-P - December 2015

Preface Who Should Use this Manual . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

Rockwell Automation Publication 440C-UM001F-EN-P - December 2015 5

6 Rockwell Automation Publication 440C-UM001F-EN-P - December 2015

Example 1 - Ready for Reset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76

Rockwell Automation Publication 440C-UM001F-EN-P - December 2015 7

8 Rockwell Automation Publication 440C-UM001F-EN-P - December 2015

Rockwell Automation Publication 440C-UM001F-EN-P - December 2015 9

Index Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 197

10 Rockwell Automation Publication 440C-UM001F-EN-P - December 2015

See the Online Help provided with Connected Components Workbench

You can view or download publications at

You can download the latest version of Connected Components Workbench

Rockwell Automation Publication 440C-UM001F-EN-P - December 2015 11

12 Rockwell Automation Publication 440C-UM001F-EN-P - December 2015

Intended Use The catalog number 440C-CR30-22BBB (CR30) relay is a software-

It is based on the Micro800 platform. The housing is red to signify it as a safety

Hardware Features Figure 1 - CR30 Safety Relay

Rockwell Automation Publication 440C-UM001F-EN-P - December 2015 13

CR30 Safety Relay Hardware Details

Maximum Number of Inputs and Outputs

Table 1 - Maximum Terminals Allowed

Function Max Allowed Function Max Allowed

14 Rockwell Automation Publication 440C-UM001F-EN-P - December 2015

Obtain Connected Components Workbench Software

The Connected Components Workbench software is free and can be

To help you configure your relay through the Connected Components

Figure 3 - Communication Connections

Rockwell Automation Publication 440C-UM001F-EN-P - December 2015 15

Figure 4 - CR30 Safety Relay Listed Under the Virtual Backplane

Serial Port Connection

The RS-232 port is available if an Ethernet I/P module is not used.

Figure 5 - CR30 Listed Under EtherNet/IP

16 Rockwell Automation Publication 440C-UM001F-EN-P - December 2015

Mounting Dimensions DIN Rail Mounting

Mounting dimensions exclude mounting feet or DIN Rail latches.

Figure 6 - DIN Rail Mounting [mm (in.)]

Rockwell Automation Publication 440C-UM001F-EN-P - December 2015 17

Follow these steps to install your relay with mounting screws.

18 Rockwell Automation Publication 440C-UM001F-EN-P - December 2015

This equipment is intended for use in a Pollution Degree 2 industrial

This equipment is supplied as open-type equipment. It must be mounted within

For more information, see:

In some applications, other equipment inside or outside the enclosure produce a

Rockwell Automation Publication 440C-UM001F-EN-P - December 2015 19

20 Rockwell Automation Publication 440C-UM001F-EN-P - December 2015

Power, Ground, and Wire

Wiring Requirements and

Rockwell Automation Publication 440C-UM001F-EN-P - December 2015 21

Table 3 - Terminal Assignments

22 Rockwell Automation Publication 440C-UM001F-EN-P - December 2015

Grounding the Configurable

This product is intended to be mounted to a grounded mounting surface such as

Figure 8 - Power Supply

Rockwell Automation Publication 440C-UM001F-EN-P - December 2015 23