El 1918 en

Operation Manual | EN
EL1918 and EL1918-2200

TwinSAFE Terminal with 8 digital fail-safe inputs
2023-03-06 | Version: 2.0.0

Table of contents
Table of contents
1 Notes on the documentation.................................................................................................................... 5
1.1 Disclaimer.......................................................................................................................................... 5
1.1.1 Trademarks ........................................................................................................................ 5
1.1.2 Patents ............................................................................................................................... 5
1.1.3 Limitation of liability ............................................................................................................ 6
1.1.4 Copyright............................................................................................................................ 6
1.2 Documentation issue status .............................................................................................................. 7
1.3 Version history of the TwinSAFE product ......................................................................................... 8
1.4 References ........................................................................................................................................ 8
1.5 Staff qualification ............................................................................................................................... 9
1.6 Safety and instruction...................................................................................................................... 10
1.6.1 Explanation of symbols .................................................................................................... 10
1.7 Beckhoff Support and Service......................................................................................................... 11
2 For your safety ........................................................................................................................................ 12

2.1 Duty of care ..................................................................................................................................... 12
2.2 Safety image signs .......................................................................................................................... 13
2.3 General safety instructions.............................................................................................................. 14
2.3.1 Before operation............................................................................................................... 14
2.3.2 In operation ...................................................................................................................... 15
2.3.3 After operation.................................................................................................................. 15
3 System description ................................................................................................................................. 16

3.1 The Beckhoff EtherCAT Terminal system ....................................................................................... 16
3.1.1 EtherCAT Bus Coupler..................................................................................................... 17
3.1.2 EtherCAT Terminals......................................................................................................... 18
3.1.3 E-bus................................................................................................................................ 19
3.1.4 Power contacts................................................................................................................. 19
3.2 TwinSAFE ....................................................................................................................................... 19
3.2.1 The I/O construction kit is extended safely ...................................................................... 19
3.2.2 Safety concept ................................................................................................................. 19
3.2.3 The fail-safe principle (Fail Stop) ..................................................................................... 20
4 Product description ................................................................................................................................ 21

4.1 EL1918 and EL1918-2200 .............................................................................................................. 21
4.2 Intended use ................................................................................................................................... 22
4.3 Technical data ................................................................................................................................. 24
4.4 Safety parameters ........................................................................................................................... 25
4.5 Safe input ........................................................................................................................................ 25
4.6 Characteristic curve of the inputs .................................................................................................... 26
4.7 Dimensions ..................................................................................................................................... 27
5 Operation ................................................................................................................................................. 28
5.1 Environmental conditions ................................................................................................................ 28
5.2 Installation ....................................................................................................................................... 28
5.2.1 Safety instructions............................................................................................................ 28
5.2.2 Transport / storage........................................................................................................... 28
EL1918 and EL1918-2200 Version: 2.0.0 3

Table of contents
5.2.3 Mechanical installation ..................................................................................................... 28

5.2.4 Electrical installation......................................................................................................... 34
5.3 Configuration of the terminal in TwinCAT ....................................................................................... 39
5.3.1 Inserting a Bus Coupler.................................................................................................... 39
5.3.2 Inserting a Bus Terminal .................................................................................................. 39
5.3.3 Adding an EL1918............................................................................................................ 39
5.3.4 Address settings on TwinSAFE terminals with 1023 possible addresses........................ 40
5.3.5 Alias devices .................................................................................................................... 41
5.3.6 EL1918 parameters in TwinCAT ...................................................................................... 42
5.3.7 Process image of the EL1918 .......................................................................................... 44
5.3.8 EL1918: using the integrated TwinSAFE Logic functions ................................................ 45
5.4 TwinSAFE reaction times ................................................................................................................ 46
5.5 Diagnosis ........................................................................................................................................ 49
5.5.1 Status LEDs ..................................................................................................................... 49
5.5.2 Diagnostic LEDs............................................................................................................... 49
5.5.3 Flash code display ........................................................................................................... 50
5.5.4 Diagnosis History ............................................................................................................. 50
5.5.5 Diag History tab................................................................................................................ 53
5.6 Maintenance.................................................................................................................................... 54
5.7 Service life....................................................................................................................................... 55
6 Maintenance and cleaning ..................................................................................................................... 56
7 Decommissioning ................................................................................................................................... 57

7.1 Disposal .......................................................................................................................................... 57
7.1.1 Returning to the vendor.................................................................................................... 57
8 Appendix .................................................................................................................................................. 58
8.1 Volatility ........................................................................................................................................... 58
8.2 Focus of certificates ........................................................................................................................ 59
8.3 Certificates ...................................................................................................................................... 60
4 Version: 2.0.0 EL1918 and EL1918-2200

Notes on the documentation
1 Notes on the documentation
1.1 Disclaimer
Beckhoff products are subject to continuous further development. We reserve the right to revise the
operating instructions at any time and without prior announcement. No claims for the modification of products
that have already been supplied may be made on the basis of the data, diagrams and descriptions in these
operating instructions.
In these operating instructions we define all permissible use cases whose properties and operating
conditions we can guarantee. The use cases we define are fully tested and certified. Use cases beyond this,
which are not described in these operating instructions, require the approval of Beckhoff Automation GmbH
& Co KG.
1.1.1 Trademarks
Beckhoff®, TwinCAT®, EtherCAT®, EtherCAT G®, EtherCAT G10®, EtherCAT P®, Safety over EtherCAT®,
TwinSAFE®, XFC®, XTS® and XPlanar® are registered and licensed trademarks of Beckhoff Automation
GmbH.
The use of other brand names or designations by third parties may lead to an infringement of the rights of
the owners of the corresponding designations.
1.1.2 Patents
The EtherCAT technology is protected by patent rights through the following registrations and patents with
corresponding applications and registrations in various other countries:
• EP1590927
• EP1789857
• EP1456722
• EP2137893
• DE102015105702
EtherCAT® is a registered trademark and patented technology,

licensed by Beckhoff Automation GmbH.
Safety over EtherCAT® is a registered trademark and patented

technology, licensed by Beckhoff Automation GmbH.
EL1918 and EL1918-2200 Version: 2.0.0 5

1.1.3 Limitation of liability

All components in this product as described in the operating instructions are delivered in a specific
configuration of hardware and software, depending on the application regulations. Modifications and
changes to the hardware and/or software configuration that go beyond the documented options are
prohibited and nullify the liability of Beckhoff Automation GmbH & Co. KG.
The following is excluded from the liability:

• Failure to observe these operating instructions
• Improper use
• Use of untrained personnel
• Use of unauthorized spare parts
1.1.4 Copyright
© Beckhoff Automation GmbH & Co. KG, Germany.
The distribution and reproduction of this document as well as the use and communication of its contents
without express authorization are prohibited.
Offenders will be held liable for the payment of damages. All rights reserved in the event of the grant of a
patent, utility model or design.
6 Version: 2.0.0 EL1918 and EL1918-2200

1.2 Documentation issue status

Version Comment
2.0.0 • Foreword changed to Notes on the documentation [} 5] and For your safety [} 12]
• Maintenance and cleaning [} 56] and Decommissioning [} 57] adapted
• Annex adapted and expanded
1.3.1 • Corrections
1.3.0 • Chapter Version history of the TwinSAFE product [} 8] Firmware 02 added
• In chapter Technical data [} 24] link to download page of certificates added
• Chapter "Firmware update of TwinSAFE products" removed
• I/O component EL1918-2200 added as variant of EL1918
• Chapter Connection [} 37] renamed
• Chapter Project design limits of EL1918 [} 45] moved
1.2.0 • Project design limits added
1.1.0 • Restrictions on channel use amended
• Note on commissioning added
1.0.0 • Certificate added
• Connection added
• First released version
0.0.3 • System limits added
• Description of Module Fault Link active parameter added.
• Version history updated
• References added
• Description of local logic function added
• Foreword updated
• Safety instructions adapted to IEC 82079-1.
0.0.2 • Update after review
0.0.1 • First draft
Currentness
Please check whether you are using the current and valid version of this document. The current version can
be downloaded from the Beckhoff homepage at http://www.beckhoff.de/twinsafe. In case of doubt, please
contact Technical Support (see Beckhoff Support and Service [} 11]).
Origin of the document
The original documentation is written in German. All other languages are derived from the German original.
Product features
Only the product properties specified in the current operating instructions are valid. Further information given
on the product pages of the Beckhoff homepage, in emails or in other publications is not authoritative.
EL1918 and EL1918-2200 Version: 2.0.0 7

1.3 Version history of the TwinSAFE product

This version history lists the software and hardware version numbers. A description of the changes
compared to the previous version is also given.
Updated hardware and software

TwinSAFE products are subject to a cyclical revision. We reserve the right to revise and change the
TwinSAFE products at any time and without prior notice.
No claims for changes to products already delivered can be asserted from these hardware and/or
software changes.
Date Software ver- Hardware Modifications

sion version
First release of the EL1918-2200
2022-03-25 02 00 • New function blocks SBT and SLP
• Prevention of unauthorized firmware downgrade
• Updating the modules
2018-08-03 01 00 First release of the EL1918
1.4 References
No. Version Description
[1] / Not used.
[2] / Not used.
[3] 1.4.1 or newer Operating Manual for EL6910 TwinSAFE Logic Module
The document contains a description of the logic functions of the EL6910
and its programming.
[4] 3.1.0 or newer Dokumentation TwinSAFE-Logic-FB
The document describes the safety-related function blocks that are
available in the EL6910 and thus also in the TwinSAFE card and form the
safety-related application.
[5] 3.1.0 or newer TwinSAFE Application Guide
The application guide provides the user with examples for the calculation of
safety-related parameters for safety functions according to the standards
DIN EN ISO 13849-1 and EN 62061 or EN 61508:2010, as they are
typically used on machines.
[6] 2006/42/EG Directive 2006/42/EC of the European Parliament and of the Council of
17 May 2006 on machinery and amending Directive 95/16/EC (recast)
of 9.6.2006
This directive, also known as the Machinery Directive, defines requirements
for the placing on the market of machines and machine-like components,
such as safety components.
8 Version: 2.0.0 EL1918 and EL1918-2200

1.5 Staff qualification

These operating instructions are intended exclusively for trained specialists in control technology and
automation with the relevant knowledge.
The trained specialist personnel must ensure that the applications and use of the described product meet all
safety requirements. This includes all applicable and valid laws, regulations, provisions and standards.
Trained specialists
Trained specialists have extensive technical knowledge from studies, apprenticeships or technical training.
Understanding of control technology and automation is available. Trained specialists can:
• Independently identify, avoid and eliminate sources of hazard.
• Apply relevant standards and directives.
• Implement specifications from accident prevention regulations.
• Evaluate, prepare and set up the workplaces.
• Evaluate, optimize and execute work independently.
EL1918 and EL1918-2200 Version: 2.0.0 9

1.6 Safety and instruction

Read the contents that refer to the activities you have to perform with the product. Always read the chapter
For your safety [} 12] in the operating instructions.
Observe the warnings in the chapters so that you can handle and work with the product as intended and
safely.
1.6.1 Explanation of symbols

Various symbols are used for a clear arrangement:
1. The numbering indicates an action that should be taken.
• The bullet point indicates an enumeration.
[…] The square brackets indicate cross-references to other text passages in the document.
[1] The number in square brackets indicates the numbering of a referenced document.
1.6.1.1 Pictograms
In order to make it easier for you to find text passages, pictograms and signal words are used in warning
notices:
DANGER
Failure to observe will result in serious or fatal injuries.
WARNING
Failure to observe may result in serious or fatal injuries.
CAUTION
Failure to observe may result in minor or moderate injuries.
NOTE
Notes
Notes are used for important information on the product. The possible consequences of failure to observe
these include:
• Malfunctions of the product
• Damage to the product
• Damage to the environment
Information
This sign indicates information, tips and notes for dealing with the product or the software.
10 Version: 2.0.0 EL1918 and EL1918-2200

1.7 Beckhoff Support and Service

Support
Beckhoff Support offers technical advice on the use of individual Beckhoff products and system planning.
The employees support you in the programming and commissioning of sophisticated automation systems.
Hotline: +49 5246/963-157
E-mail: [email protected]
Web: www.beckhoff.com/support
Training
Training in Germany takes place in our training center at the Beckhoff headquarters in Verl, at subsidiaries
or, by arrangement, at the customer's premises.
Hotline: +49 5246/963-5000
Web: www.beckhoff.com/training
Service
The Beckhoff Service Center supports you with after-sales services such as on-site service, repair service or
spare parts service.
Hotline: +49 5246/963-460
Web: www.beckhoff.com/service
Download area
In the download area you can obtain product information, software updates, the TwinCAT automation
software, documentation and much more.
Web: www.beckhoff.com/download
Headquarters
Beckhoff Automation GmbH & Co. KG

Hülshorstweg 20
33415 Verl
Germany
Phone: +49 5246/963-0
Web: www.beckhoff.com
For the addresses of our worldwide locations, please visit our website at Global Presence.
EL1918 and EL1918-2200 Version: 2.0.0 11

For your safety
2 For your safety

Read this chapter containing general safety information. In addition, always observe the safety instructions
and warnings in these operating instructions for your own safety, the safety of other persons and the safety
of the product.
When working with control and automation products, many dangers can result from careless or incorrect use.
Work particularly thoroughly, not under time pressure and responsibly towards other people.
2.1 Duty of care

Read entire documentation for TwinSAFE component
• TwinSAFE application manual
• EL6910 TwinSAFE logic terminal operating manual
• TwinSAFE Logic FB documentation manual
The operator must comply with all the requirements and notes specified in these operating instructions in
order to fulfill his duty of care. This includes in particular that you
• comply with the provisions defined in the chapter Limitation of liability [} 6].
• only operate the TwinSAFE component when it is in perfect working order.
• provide the operating instructions in a legible condition and complete at the place of use of the
TwinSAFE component.
• do not remove the safety markings attached to the TwinSAFE component and maintain their legibility.
No disposal in domestic waste

Products marked with a crossed-out waste bin must not be disposed of with domestic
waste. The device is considered waste electrical and electronic equipment when it is
disposed of. Observe the national regulations for the disposal of waste electrical and
electronic equipment.
12 Version: 2.0.0 EL1918 and EL1918-2200

For your safety
2.2 Safety image signs

On Beckhoff products you will find attached or lasered safety pictograms, which vary depending on the
product. They serve to serve to ensure safety for people and to prevent damage to the products. Safety
pictograms must not be removed and must be legible for the user.
Read and observe the operating instructions

Commissioning is only permitted if the operating instructions have been read and understood
beforehand. This applies in particular to the safety instructions and warnings.
Electrostatic sensitive components

Work with and on the TwinSAFE component is only permitted in protected workplaces.
EL1918 and EL1918-2200 Version: 2.0.0 13

For your safety
2.3 General safety instructions

This chapter contains safety instructions for handling the product. This product is a safety component as
defined by the Machinery Directive. The product must be installed in a machine or system by the machine
builder and is used to ensure the safety function. Safety components are not required for the functioning of a
machine. However, a failure or malfunction of safety components will result in a hazard to personal safety.
Read the documentation prepared by the machine builder.
2.3.1 Before operation
Use in machines according to the Machinery Directive
Only use the TwinSAFE component in machines that comply with the Machinery Directive. This is how you
ensure safe operation.
For more information see the document [6] under References [} 8].
Ensure traceability
Ensure the traceability of the TwinSAFE component via the serial number.
Use SELV/PELV power supply
Use a SELV/PELV power supply unit with an output-side voltage limit of Umax = 36 VDC to supply the
TwinSAFE component with 24 VDC.
Failure to observe this will endanger the safety function of the product. Depending on the machine, death
and danger to life, serious physical injury and damage to the machine may result.
Carry out commissioning test
Before commissioning, wiring faults to the sensors must be excluded. Before commissioning, carry out a
commissioning test. After a successful commissioning test, you can use the TwinSAFE component for the
intended safety-related task.
In case of wiring errors, the safety function of the product is at risk. Depending on the machine, death and
danger to life, serious bodily injury and damage to the machine may result.
Use permissible engineering tools and procedures
The TÜV SÜD certificate applies to the TwinSAFE component, the function blocks available in it, the
documentation and the engineering tool. Approved engineering tools are TwinCAT 3.1 and TwinSAFE
Loader.
Procedures or engineering tools that deviate from this are not covered by the certificate. This is especially
true for externally generated xml files for the TwinSAFE import.
14 Version: 2.0.0 EL1918 and EL1918-2200

For your safety
2.3.2 In operation
Interference due to emitted interference
Do not operate the following devices in the vicinity of the TwinSAFE component: for example, radio
telephones, radios, transmitters or high-frequency systems.
TwinSAFE components comply with the requirements of the applicable electromagnetic compatibility
standards with regard to interference emission and immunity. If you exceed the limits for emitted interference
specified in the standards, the function of the TwinSAFE component may be impaired.
2.3.3 After operation
De-energize and switch off components before working on them
Check all safety-relevant equipment for functionality before working on the TwinSAFE component. Secure
the working environment. Secure the machine or plant against being inadvertently started up. Observe the
chapter Decommissioning [} 57].
EL1918 and EL1918-2200 Version: 2.0.0 15

System description
3 System description
3.1 The Beckhoff EtherCAT Terminal system

The Beckhoff EtherCAT Terminal system is used for decentralized connection of sensors and actuators to a
controller. The components of the Beckhoff EtherCAT Terminal system are mainly used in industrial
automation and building management systems. As a minimum, a bus station consists of an EtherCAT
Coupler and connected EtherCAT Terminals. The EtherCAT Coupler forms the communication interface to
the higher-level controller, while the EtherCAT Terminals form the interface to the sensors and actuators.
The whole bus station is clipped onto a 35 mm DIN mounting rail (EN 60715). The mechanical link of the bus
station is established with a slot and key system on EtherCAT Couplers and EtherCAT Terminals.
The sensors and actuators are connected with the terminals via the screwless (spring-loaded) connection
system.
Fig. 1: Slot and key system and screwless (spring-loaded) connection system
16 Version: 2.0.0 EL1918 and EL1918-2200

System description
3.1.1 EtherCAT Bus Coupler

Mechanical data Bus Coupler
Material polycarbonate, polyamide (PA6.6).
Dimensions (W x H x D) 44 mm x 100 mm x 68 mm
Mounting on 35 mm mounting rail (EN 60715) with locking
Attachable by double slot and key connection
Fig. 2: Bus Coupler (EtherCAT)
Connection technology Bus Coupler

Wiring Spring-loaded system
Connection cross-section 0.08 mm² ... 2.5 mm², stranded wire, solid wire
Fieldbus connection EtherCAT
Power contacts 3 spring contacts
Current load 10 A
Nominal voltage 24 VDC
EL1918 and EL1918-2200 Version: 2.0.0 17

System description
3.1.2 EtherCAT Terminals

Mechanical data Bus Terminal
Material polycarbonate, polyamide (PA6.6).
Dimensions (W x H x D) 12 mm x 100 mm x 68 mm or 24 mm x 100 mm x 68 mm
Mounting on 35 mm mounting rail (EN 60715) with locking
Attachable by double slot and key connection
Fig. 3: Overview of EtherCAT Terminals
Connection technology Bus Terminal

Wiring Spring-loaded system
Connection cross-section typically 0.08 mm² – 2.5 mm², stranded wire, solid wire
Communication E-bus
Power contacts Up to 3 blade/spring contacts
Current load 10 A
Nominal voltage Depending on terminal type (typically 24 VDC)
18 Version: 2.0.0 EL1918 and EL1918-2200

System description
3.1.3 E-bus
The E-bus is the data path within a terminal strip. The E-bus is led through from the Bus Coupler through all
the terminals via six contacts on the terminals' side walls.
3.1.4 Power contacts

The operating voltage is passed on to following terminals via three power contacts. Terminal strip can be
split into galvanically isolated groups by means of potential supply terminals as required. The supply
terminals play no part in the control of the terminals, and can be inserted at any locations within the terminal
strip.
3.2 TwinSAFE
3.2.1 The I/O construction kit is extended safely

The integrated TwinSAFE safety solution is the logical continuation of the open, PC-based Beckhoff control
philosophy. Due to their modularity and versatility, the TwinSAFE components fit seamlessly into the
Beckhoff control system. The I/O components are available in the formats Bus Terminal, EtherCAT Terminal,
EtherCAT plug-in module and EtherCAT Box.
Thanks to the fieldbus-neutral safety protocol (TwinSAFE/Safety-over-EtherCAT), TwinSAFE devices can be

integrated into any fieldbus system. They are integrated into existing networks with K-bus or EtherCAT and
can be used directly in the machine as IP 67 modules. These safety I/Os form the interfaces to the safety-
relevant sensors and actuators.
The possibility to transmit the safety-relevant signals over a standard bus system gives rise to substantial
advantages in terms of planning, installation, operation, maintenance, diagnostics and costs.
The safety application is configured or programmed respectively in the TwinCAT software. This application is
then transferred via the bus to a TwinSAFE logic component. These form the heart of the TwinSAFE system.
All safety devices in the system communicate with this logic component. Due to the enormous flexibility of
the system, several TwinSAFE logic components can also be operated simultaneously in a network.
3.2.2 Safety concept
TwinSAFE: Safety and I/O technology in one system

• Extension of the familiar Beckhoff I/O system with TwinSAFE Terminals
• Freely selectable mix of safe and standard signals
• Logic link of the I/Os in the TwinSAFE logic component, e.g. EL6910
• Safety-relevant networking of machines via bus systems
TwinSAFE protocol (FSoE / Safety-over-EtherCAT)

• Transfer of safety-relevant data via any media (“genuine black channel”)
• TwinSAFE communication via fieldbus systems such as EtherCAT, Lightbus, PROFIBUS or Ethernet
• IEC 61508:2010 SIL 3 compliant
TwinCAT software and TwinSAFE editor

• Safety application is configured or programmed in the TwinCAT software
• Certified function blocks such as emergency stop, operation mode, etc.
• simple handling
• Transfer of the application via the bus to the TwinSAFE logic component
EL1918 and EL1918-2200 Version: 2.0.0 19

System description
TwinSAFE logic component, e.g. EL6910

• Processing of the safety-related application and communication with the TwinSAFE terminals
• No safety requirements for higher-level control system
• TwinSAFE enables a network with up to 65,535 TwinSAFE components.
• TwinSAFE logic component can establish up to 512 connections (TwinSAFE connections).
• Several TwinSAFE logic components can be operated in a network
• Suitable for applications up to SIL 3 according to IEC 61508:2010 and category 4 / PL e according to
EN ISO 13849-1:2015.
TwinSAFE I/O components

• The TwinSAFE I/O components are available in the formats Bus Terminal, EtherCAT Terminal,
EtherCAT plug-in module, EtherCAT Box and TwinSAFE Drive option card
• All common safety sensors and actuators can be connected
• Operation with a TwinSAFE logic component
• Typically meet the requirements of IEC 61508:2010 up to SIL 3 and EN ISO 13849-1:2015 up to
Category 4, PL e. More detailed information can be found in the respective user documentation
3.2.3 The fail-safe principle (Fail Stop)

The basic rule for a safety system such as TwinSAFE is that failure of a part, a system component or the
overall system must never lead to a dangerous condition.
CAUTION
Safe state!
The safe state of the TwinSAFE system is always the switched-off and de-energized state.
20 Version: 2.0.0 EL1918 and EL1918-2200

Product description
4 Product description
4.1 EL1918 and EL1918-2200

The EL1918 is a digital input terminal for sensors with potential-free contacts for 24 VDC. The TwinSAFE
Terminal has 8 fail-safe inputs.
With a two-channel connection, the EL1918 meets the requirements of IEC 61508:2010 SIL 3 and
EN ISO 13849-1:2015 (Cat 4, PL e). See chapter Safe input [} 25].
The TwinSAFE terminal has the typical design of an EtherCAT HD Terminal.
Fig. 4: EL1918 – TwinSAFE Terminal with 8 fail-safe inputs
EL1918 variants
The EL1918 has an integrated safety control that can be used for user-specific applications directly
on the component. The variant EL1918-2200 does not have this functionality and represents a pure
I/O component.
EL1918 and EL1918-2200 Version: 2.0.0 21

Product description
4.2 Intended use

WARNING
Caution - Risk of injury!
TwinSAFE components may only be used for the purposes described below!
The TwinSAFE Terminals expand the application area of Beckhoff Bus Terminal system with functions that
enable them to be used for machine safety applications. The TwinSAFE Terminals are designed for machine
safety functions and directly associated industrial automation tasks. They are therefore only approved for
applications with a defined fail-safe state. This safe state is the switched-off and de-energized state. Fail-
safety according to the relevant standards is required.
The TwinSAFE I/O components allow the connection of:

• 24 VDC sensors such as
emergency stop push-buttons, rope pull switches, position switches, two-hand switches, safety
switching mats, light curtains, light barriers, laser scanners, etc.
• 24 VDC actuators such as
contactors, protective door switches with tumbler, signal lamps, servo drives, etc.
Test pulses
When selecting actuators please ensure that the test pulses of the TwinSAFE component do not
lead to switching of the actuator or a diagnostic message of the TwinSAFE component.
The following TwinSAFE components were developed for these tasks:

• The EL1904 is an EtherCAT Terminal with 4 digital fail-safe inputs
• The EL2904 is an EtherCAT Terminal with 4 digital fail-safe outputs
• The EL6910 is an EtherCAT Terminal with integrated TwinSAFE logic
These TwinSAFE components are suitable for operation on the

• Beckhoff EKxxxx series Bus Couplers
• Beckhoff CXxxxx series Embedded PCs with E-bus connection
WARNING
System limits
The TÜV SÜD certificate applies to this TwinSAFE component, the function blocks available in it, the
documentation and the engineering tool. TwinCAT 3.1 and the TwinSAFE Loader are permitted as
engineering tools. Any deviations from these procedures or tools, particularly externally generated xml files
for TwinSAFE import or externally generated automatic project creation procedures, are not covered by the
certificate.
WARNING
Power supply from SELV/PELV power supply unit!
The TwinSAFE components must be supplied with 24 VDC by an SELV/PELV power supply unit with an
output voltage limit Umax of 36 VDC. Failure to observe this can result in a loss of safety.
WARNING
Commissioning test
Before the EL1918 can be used for safety-related tasks, a commissioning test must be carried out by the
user so that faulty sensor wiring can be ruled out.
CAUTION
Follow the machinery directive!
The TwinSAFE components may only be used in machines as defined in the machinery directive.
22 Version: 2.0.0 EL1918 and EL1918-2200

Product description
CAUTION
Ensure traceability!
The buyer has to ensure the traceability of the device via the serial number.
CAUTION
Note on approval according to EN 81-20, EN 81-22 and EN 81-50
• The release does not apply to the EL1918-2200, EL2911-2200 and EP1957-2222 variants.
• The TwinSAFE components may only be used in machines that have been designed and installed in
accordance with the requirements of the EN 60204-1 standard.
• Provide a surge filter for the supply voltage of the TwinSAFE components against overvoltages
(reduction to overvoltage category II).
• EN 81 requires that in the case of devices with internal temperature monitoring, a stop must be reached
in the event of an overtemperature. In this case, passengers must be able to disembark (see EN 81-20
chapter 5.10.4.3, for example). To ensure this, application measures are necessary. The internal
terminal temperature of the TwinSAFE components can be read out by the user. A direct switch-off
occurs at the maximum permissible temperature of the respective TwinSAFE component (see chapter
Temperature measurement).
The user must select a temperature threshold below the maximum temperature such that a stop can be
reached in all cases before the maximum temperature is reached. Information on the optimum terminal
configuration can be found under Notes on the arrangement of TwinSAFE components and under
Example configuration for temperature measurement.
• For the use of the TwinSAFE components according to EN 81-22 and EN 81-50, the conditions
described in the manuals for achieving category 4 according to EN ISO 13849-1:2015 must be
observed.
• The use of TwinSAFE components is limited to indoor applications.
• Basic protection against direct contact must be provided, either by fulfilling protection class IP2X or by
installing the TwinSAFE components in a control cabinet which corresponds at least to protection class
IP54 according to EN 60529.
• The ambient conditions regarding temperature, humidity, heat dissipation, EMC and vibrations, as
specified in the operating instructions under technical data, must be observed.
• The operating conditions in potentially explosive atmospheres (ATEX) are specified in the operating
instructions.
• The safe state (triggering) of the application must be the de-energized state. The safe state of the
TwinSAFE components is always the de-energized, switched-off state, and this cannot be changed.
• The service life specified in the operating instructions must be observed.
• If the TwinSAFE component is operated outside the permissible temperature range, it changes to
"Global Shutdown" state.
• The TwinSAFE components must be installed in a control cabinet with protection class IP54 according to
EN 60529, so that the requirement for degree of pollution 3 according to EN 60664-1 can be reduced to
level 2.
• The TwinSAFE components must be supplied by a SELV/PELV power supply unit with a maximum
voltage of Umax ≤ 36 VDC.
EL1918 and EL1918-2200 Version: 2.0.0 23

Product description
4.3 Technical data

The current certificates of all TwinSAFE products with the underlying standards and directives can be found
at https://www.beckhoff.com/en-en/support/download-finder/certificates-approvals/.
Product designation EL1918 and EL1918-2200
Number of inputs 8
Status display 12 (one green LED per input + 4 DIAG LEDs)
Response time (read input/write to E-bus) typically: 4 ms,
maximum: see fault reaction time
Fault reaction time ≤ watchdog time
Cable length between sensor and terminal unshielded max. 100 m (with 0.75 or 1 mm²)
shielded max. 100 m (with 0.75 or 1 mm²)
Output current of the clock outputs typically 3 mA, max. 6.5 mA
Input process image 7 bytes
Output process image 6 bytes
Supply voltage of the EL1918 (PELV) 24 VDC (–15% / +20%)
Signal voltage "0" inputs -3 V to 5 V (EN 61131-2, type 3) see chapter Characteristic curve
of the inputs [} 26]
Signal voltage "1" inputs 11 V to 30 V (EN 61131-2, type 3) see chapter Characteristic
curve of the inputs [} 26]
Current consumption of the module electronics at 24 V (without 8 channels occupied: typically 29.6 mA (@28.8 VDC)
current consumption of sensors) 0 channels occupied: typically 2.27 mA (@28.8 VDC)
Current consumption via E-bus 8 channels occupied: approx. 165 mA
Power loss of the terminal typically 1.6 W
Electrical isolation (between the channels) No
Electrical isolation (between the channels and the E-bus) Yes
Insulation voltage (between the channels and the E-bus, under Insulation tested with 500 VDC
common operating conditions)
Dimensions (W x H x D) 12 mm x 100 mm x 68 mm
Weight approx. 50 g
Permissible ambient temperature (operation) -25°C to +55°C (observe the chapter Temperature measurement
[} 30])
Permissible ambient temperature (transport/storage) -40 °C to +70 °C
Permissible air humidity 5% to 95%, non-condensing
Permissible air pressure (operation/storage/transport) 750 hPa to 1100 hPa
(this is equivalent to an altitude of approx. -690 m to 2450 m
above sea level assuming an international standard atmosphere)
Climate category according to EN 60721-3-3 3K3
(the deviation from 3K3 is possible only with optimal
environmental conditions and also applies only to the technical
data which are specified differently in this documentation)
Permissible degree of pollution Degree of pollution 2
according to EN 60664-1 (please note the chapter Maintenance [} 54])
Inadmissible operating conditions TwinSAFE Terminals must not be used under the following
operating conditions:
• under the influence of ionizing radiation (exceeding the
natural background radiation)
• in corrosive environments
• in an environment that leads to unacceptable contamination
of the TwinSAFE component
EMC immunity / emission conforms to EN 61000-6-2 / EN 61000-6-4
Vibration / shock resistance conforms to EN 60068-2-6 / EN 60068-2-27
Shocks 15 g with pulse duration 11 ms in all three axes
Protection rating IP20
Permitted operating environment In the control cabinet or terminal box, with minimum protection
rating IP54 according to IEC 60529
Correct installation position see chapter Installation position and minimum distances [} 29]
Approvals CE, TÜV SÜD
24 Version: 2.0.0 EL1918 and EL1918-2200

Product description
4.4 Safety parameters

Key data EL1918 and EL1918-2200
Lifetime [a] 20
Prooftest Interval [a] not required 1
PFHD 3.00 E-09
PFD 4.90 E-05
MTTFD High
DC High
Performance level PL e
Category 4
HFT 1
Classification element 2 Type B
1. Special proof tests are not required during the entire service life of the EtherCAT Terminal.
2. Classification according to IEC 61508-2:2010 (chapter 7.4.4.1.2 and 7.4.4.1.3)
The EtherCAT Terminals can be used for safety-related applications within the meaning of IEC 61508:2010
up to SIL3 and EN ISO 13849-1:2015 up to PL e (Cat4).
Further information on calculating or estimating the MTTFD value from the PFHD value can be found in the
TwinSAFE Application Guide or in EN ISO 13849-1:2015 , Table K.1.
In terms of safety-related parameters, the Safety-over-EtherCAT communication is already considered with

1% of SIL3 according to the protocol specification.
4.5 Safe input

The safe inputs and associated clock outputs are implemented as a single channel for each module. This
has the advantage that any channels, e.g. for a two-channel safe sensor, can be combined and used. For
error evaluation of these two channels, the Module Fault Link active parameter of the two modules involved
must be set to TRUE. This is the default state of this parameter.
DANGER
Clocked signals inside a sheathed cable
If clocked signals (clock outputs for the safe inputs) of different modules are used within a sheathed cable,
a fault of one module, such as cross-circuit or external feed, must lead to the disconnection of all of these
modules. This is achieved by setting the Module Fault Link active parameter for all modules involved. This
parameter is set to TRUE by default.
DANGER
Safe inputs in Kat.4 / PL e
If two safe input channels are to be used in a Category 4 structure, please ensure that you always combine
an even and an odd channel number.
EL1918 and EL1918-2200 Version: 2.0.0 25

Product description
4.6 Characteristic curve of the inputs

The characteristic curve of the inputs is similar to type 3 according to EN 61131-2.
Fig. 5: Characteristic curve of the inputs
26 Version: 2.0.0 EL1918 and EL1918-2200

Product description
4.7 Dimensions
Fig. 6: EL1918 dimensions
Width: 12 mm (side-by-side installation)

Height: 100 mm
Depth: 68 mm
EL1918 and EL1918-2200 Version: 2.0.0 27

Operation
5 Operation
5.1 Environmental conditions

Please ensure that the TwinSAFE components are only transported, stored and operated under the specified
conditions (see technical data)!
WARNING
Risk of injury!
The TwinSAFE components must not be used under the following operating conditions.
• under the influence of ionizing radiation (that exceeds the level of the natural environmental radiation)
• in corrosive environments
• in an environment that leads to unacceptable soiling of the TwinSAFE component
NOTE
Electromagnetic compatibility
The TwinSAFE components comply with the current standards on electromagnetic compatibility with regard
to spurious radiation and immunity to interference in particular.
However, in cases where devices such as mobile phones, radio equipment, transmitters or high-frequency
systems that exceed the interference emissions limits specified in the standards are operated near
TwinSAFE components, the function of the TwinSAFE components may be impaired.
5.2 Installation
5.2.1 Safety instructions

Before installing and commissioning the TwinSAFE components please read the safety instructions in the
foreword of this documentation.
5.2.2 Transport / storage

Use the original packaging in which the components were delivered for transporting and storing the
TwinSAFE components.
CAUTION
Note the specified environmental conditions
Please ensure that the digital TwinSAFE components are only transported and stored under the specified
environmental conditions (see technical data).
5.2.3 Mechanical installation

WARNING
Risk of injury!
Bring the bus system into a safe, de-energized state before starting installation, disassembly or wiring of
the devices!
28 Version: 2.0.0 EL1918 and EL1918-2200

Operation
5.2.3.1 Instructions for ESD protection

NOTE
Devices can be destroyed by electrostatic charging!
The devices contain electrostatically sensitive components which can be damaged by
improper handling.
• Please ensure you are electrostatically discharged when handling the components; also
avoid touching the spring contacts directly (see illustration).
• Avoid contact with highly insulating materials (synthetic fibers, plastic films etc.)
• When handling the components, ensure good grounding of the environment (workplace,
packaging and persons)
• Each bus station must be terminated on the right side with the EL9011 or EL9012 end cap
to ensure the protection class and ESD protection.
Fig. 7: Spring contacts of Beckhoff I/O components
5.2.3.2 Control cabinet / terminal box

The TwinSAFE terminals must be installed in a control cabinet or terminal box with IP54 protection class
according to IEC 60529 as a minimum.
5.2.3.3 Installation position and minimum distances

For the prescribed installation position the mounting rail is installed horizontally and the mating surfaces of
the EL/KL terminals point toward the front (see illustration below). The terminals are ventilated from below,
which enables optimum cooling of the electronics through convection. The direction indication “down”
corresponds to the direction of positive acceleration due to gravity.
EL1918 and EL1918-2200 Version: 2.0.0 29

Operation
Fig. 8: Installation position and minimum distances
In order to ensure optimum convection cooling, the distances to neighboring devices and to control cabinet
walls must not be smaller than those shown in the diagram.
5.2.3.4 Temperature measurement

The temperature measurement consists of an EK1100 EtherCAT Coupler, to which EtherCAT Terminals are
attached, based on the typical distribution of digital and analog signal types at a machine. On the EL6910 a
safety project is active, which reads safe inputs and enables safe outputs during the measurement.
NOTE
External heat sources / radiant heat / impaired convection
The maximum permissible ambient temperature of 55°C was checked with the example configuration
described above. Impaired convection, an unfavorable location near heat sources or an unfavorable
configuration of the EtherCAT Terminals may result in overheating of the TwinSAFE components.
The key parameter is always the maximum permitted internally measured temperature of 110°C, above
which the TwinSAFE components switch to safe state and report an error. The internal temperature can be
read from the TwinSAFE components via CoE.
30 Version: 2.0.0 EL1918 and EL1918-2200

Operation
5.2.3.5 Notes on the arrangement of TwinSAFE components

The following notes illustrate favorable and unfavorable terminal arrangements from a thermal perspective.
Components with higher waste heat are identified with a red symbol , components with lower waste heat
are identified with a blue symbol .
EK11xx EtherCAT Coupler and EL9410 power supply terminal
The more terminals are attached after an EtherCAT Coupler or a power supply terminal, the higher the E-bus
current that their power supply units have to supply. With increasing current the waste heat from the power
supply units also increases.
EL69x0
The EL69x0 emits a relatively high amount of waste heat, since it has a high internal clock rate and high
logic performance.
EL2904, EL291x, EL291x-2200
The EL2904 emits a relatively high amount of waste heat due to the potentially high output current of the
connected actuators.
EL1904
The EL1904 also emits a relatively high amount of waste heat, despite the fact that the external load due to
clock outputs and safe inputs is relatively low.
Thermally unfavorable arrangement of the TwinSAFE terminals
The following arrangement is rather unfavorable, as terminals with relatively high waste heat are attached
directly to the EtherCAT Coupler or the power supply terminal with high E-bus load. The additional external
heating of the TwinSAFE terminals by the adjacent power supply units increases the internal terminal
temperature, which can lead to the maximum permissible temperature being exceeded. This leads to the
diagnosis message "Overtemperature".
EL1918 and EL1918-2200 Version: 2.0.0 31

Operation
Fig. 9: Thermally unfavorable arrangement of the TwinSAFE terminals
Thermally favorable arrangement of the TwinSAFE terminals
The following arrangement is thermally optimized, as terminals with low current consumption and therefore
low waste heat are attached between the EtherCAT Coupler/power supply terminal and terminals with higher
waste heat.
Fig. 10: Thermally favorable arrangement of the TwinSAFE terminals
32 Version: 2.0.0 EL1918 and EL1918-2200

Operation
5.2.3.6 Installation on mounting rails

WARNING
Risk of electric shock and damage of device!
Bring the bus terminal system into a safe, powered down state before starting installation, disassembly or
wiring of the Bus Terminals!
Mounting
Fig. 11: Installation on the mounting rail
The Bus Couplers and Bus Terminals are attached to commercially available 35 mm mounting rails (DIN rail
according to EN 60715) by applying slight pressure:
1. First attach the Fieldbus Coupler to the mounting rail.

2. The Bus Terminals are now attached on the right-hand side of the Fieldbus Coupler. Join the
components with slot and key and push the terminals against the mounting rail, until the lock clicks
onto the mounting rail.
If the terminals are clipped onto the mounting rail first and then pushed together without slot and key,
the connection will not be operational! When correctly assembled, no significant gap should be visible
between the housings.
Fastening of mounting rails

The locking mechanism of the terminals and couplers protrudes into the profile of the mounting rail.
When installing the components, make sure that the locking mechanism doesn't come into conflict
with the fixing bolts of the mounting rail. For fastening mounting rails with a height of 7.5 mm under
the terminals and couplers, use flat fastening components such as countersunk head screws or
blind rivets.
EL1918 and EL1918-2200 Version: 2.0.0 33

Operation
Disassembly
Fig. 12: Removal from mounting rail
Each terminal is secured by a lock on the mounting rail, which must be released for disassembly:
1. Pull down the terminal at its orange-colored straps from the mounting rail by approx. 1 cm. The rail
locking of this terminal is automatically released, and you can now pull the terminal out of the Bus
Terminal block with little effort.
2. To do this, grasp the unlocked terminal simultaneously at the top and bottom of the housing surfaces
with your thumb and index finger and pull it out of the Bus Terminal block.
5.2.4 Electrical installation
5.2.4.1 Connections within a Bus Terminal block

The electric connections between the Bus Coupler and the Bus Terminals are automatically realized by
joining the components:
Spring contacts (E-bus)
The six spring contacts of the E-bus deal with the transfer of the data and the supply of the Bus Terminal
electronics.
NOTE
Observe the E-bus current
Observe the maximum current that your Bus Coupler can supply to the E-bus! Use the EL9410 Power
Supply Terminal if the current consumption of your terminals exceeds the maximum current that your Bus
Coupler can feed to the E-bus supply.
Power contacts
The power contacts deal with the supply for the field electronics and thus represent a supply rail within the
Bus Terminal block. The power contacts are supplied via terminals on the Bus Coupler.
Note the connection of the power contacts

During the design of a Bus Terminal block, the pin assignment of the individual Bus Terminals must
be taken account of, since some types (e.g. analog Bus Terminals or digital 4-channel Bus
Terminals) do not or not fully loop through the power contacts.
Potential supply terminals (EL91xx, EL92xx) interrupt the power contacts and thus represent the
start of a new supply rail.
34 Version: 2.0.0 EL1918 and EL1918-2200

Operation
PE power contact
The power contact labelled PE can be used as a protective earth. For safety reasons this contact mates first
when plugging together, and can ground short-circuit currents of up to 125 A.
Fig. 13: PE power contact
CAUTION
Insulation tests
Note that, for reasons of electromagnetic compatibility, the PE contacts are capacitatively coupled to the
mounting rail. This may lead to incorrect results during insulation testing or to damage on the terminal (e.g.
disruptive discharge to the PE line during insulation testing of a consumer with a rated voltage of 230 V).
For insulation testing, disconnect the PE supply line at the Bus Coupler or the Potential Supply Terminal! In
order to decouple further feed points for testing, these Power Feed Terminals can be released and pulled at
least 10 mm from the group of terminals.
DANGER
Serious risk of injury!
The PE power contact must not be used for other potentials!
5.2.4.2 Overvoltage protection

If protection against overvoltage is necessary in your plant, provide a surge filter for the voltage supply to the
Bus Terminal blocks and the TwinSAFE terminals.
EL1918 and EL1918-2200 Version: 2.0.0 35

Operation
5.2.4.3 HD housing wiring
Fig. 14: Connection of a cable to a terminal point
Up to 16 terminal points enable the connection of solid or finely stranded wires to the EtherCAT Terminal.
The terminal points are spring-loaded.
Several conductors at one connection

If it is necessary to connect several conductors to one connection, pre-connect them with terminal
blocks, for example.
Solid and stranded wire conductors with ferrules can be inserted directly into the terminal point. This
eliminates steps 1 and 3 in the above illustration. For all other conductor types, the terminal point must be
opened with a screwdriver to establish the connection.
Connect the cables as follows:
1. Open a terminal point by pushing a screwdriver straight into the

square opening above the terminal point as far as it will go. Do not turn or move the screwdriver back
and forth (do not lever)
2. The wire can now be inserted into the round terminal opening without any force.
3. The terminal closes automatically when the pressure is released, holding the wire safely and
permanently.
The permissible conductor cross-sections can be taken from the following table.
Wire cross-section (solid) 0.08 ... 1.5 mm2
Wire cross-section (stranded wire) 0.25 ... 1.5 mm2
Wire cross-section (core wire with ferrule) 0.14 ... 0.75 mm2
Strip length 8 ... 9 mm
36 Version: 2.0.0 EL1918 and EL1918-2200

Operation
5.2.4.4 Connection
Fig. 15: EL1918 connection
Terminal point Input Signal

1 1 Input 1+ (clock output)
2 Input 1- (safe input)
Configurable inputs
The inputs 1 to 8 can be occupied as you want with normally closed contacts or normally open
contacts. The corresponding analysis is carried out in the safety PLC. The input labeled Input x- is
used for connecting OSSD sensors (self-testing sensors).
EL1918 and EL1918-2200 Version: 2.0.0 37

Operation
5.2.4.5 Signal cables
Cable routing
Fig. 16: Cable routing
NOTE
Route the signal cable separately
The signal cable must be routed separately from potential sources of interference, such as motor supply
cables, 230 VAC power cables etc.!
Interference caused by cables routed in parallel can influence the signal form of the test pulses and thus
cause diagnostic messages (e.g. sensor errors or OpenLoad errors).
D: Distance between the cable ducts should be as large as possible
blue arrows: signal line
red arrows: potential source of interference
The common routing of signals together with other clocked signals in a common cable also reduces the
maximum propagation, since crosstalk of the signals can occur over long cable lengths and cause diagnostic
messages.
38 Version: 2.0.0 EL1918 and EL1918-2200

Operation
5.3 Configuration of the terminal in TwinCAT

Identical configuration
The configuration of the terminal in TwinCAT is identical for the EL1918-2200 variant.
CAUTION
Do not change CoE objects!
Do not change any of the CoE objects in the TwinSAFE terminals. Any modifications (e.g. via TwinCAT) of
the CoE objects will permanently set the terminals to the Fail-Stop state or lead to unexpected behavior of
the terminals!
5.3.1 Inserting a Bus Coupler

See TwinCAT automation software documentation.
5.3.2 Inserting a Bus Terminal

See TwinCAT automation software documentation.
5.3.3 Adding an EL1918

An EL1918 is added in exactly the same way as any other Beckhoff EtherCAT Terminal. Open TwinSAFE
Terminals item in the list and select the EL1918.
Fig. 17: Adding an EL1918
EL1918 and EL1918-2200 Version: 2.0.0 39

Operation
5.3.4 Address settings on TwinSAFE terminals with 1023 possible

addresses
Fig. 18: Address settings on TwinSAFE terminals with 1023 possible addresses
The TwinSAFE address of the terminal is set via the 10-way DIP switch on the left-hand side of the
TwinSAFE terminal. TwinSAFE addresses between 1 and 1023 are available.
DIP switch Address

1 2 3 4 5 6 7 8 9 10
ON OFF OFF OFF OFF OFF OFF OFF OFF OFF 1
OFF ON OFF OFF OFF OFF OFF OFF OFF OFF 2
ON ON OFF OFF OFF OFF OFF OFF OFF OFF 3
OFF OFF ON OFF OFF OFF OFF OFF OFF OFF 4
ON OFF ON OFF OFF OFF OFF OFF OFF OFF 5
OFF ON ON OFF OFF OFF OFF OFF OFF OFF 6
ON ON ON OFF OFF OFF OFF OFF OFF OFF 7
... ... ... ... ... ... ... ... ... ... ...
ON ON ON ON ON ON ON ON ON ON 1023
WARNING
TwinSAFE address
Each TwinSAFE address may only be used once within a network / a configuration!
The address 0 is not a valid TwinSAFE address!
40 Version: 2.0.0 EL1918 and EL1918-2200

Operation
5.3.5 Alias devices

The communication between the safety logic and the I/O level is realized via an alias level. At this alias level
(subnode Alias Devices) corresponding alias devices are created for all safe inputs and outputs, and also for
standard signal types. For the safe inputs and outputs, this can be done automatically via the I/O
configuration.
The connection- and device-specific parameters are set via the alias devices.
Fig. 19: Starting the automatic import from the I/O configuration
If the automatic import is started from the I/O configuration, a selection dialog opens, in which the individual
terminals to be imported can be selected.
Fig. 20: Selection from the I/O tree
The alias devices are created in the safety project when the dialog is closed via OK.
Alternatively, the user can create the alias devices individually. To this end select Add and New item from
the context menu, followed by the required device.
EL1918 and EL1918-2200 Version: 2.0.0 41

Operation
Fig. 21: Creating alias devices by the user
5.3.6 EL1918 parameters in TwinCAT

After creating the alias device, it can be parameterized according to the user specifications.
The FSoE address is set under the Linking tab, and the link to the physical device is created.
Fig. 22: Linking tab of the alias device
42 Version: 2.0.0 EL1918 and EL1918-2200

Operation
Under the Connection tab you can make further settings, e.g. the mapping of the info data or the behavior in
case of a module error.
Fig. 23: Connection tab of the alias device
The Safety Parameters tab contains the parameters of the EL1918 to be set. The parameters are set
separately for each input. Objects 0x8000 and 0x8001 are available for input 1. For all other inputs, the CoE
index is increased by 10 hex each, so that objects 0x8070 and 0x8071 are available for input 8.
Fig. 24: EL1918 parameters
Index Name Default value/ Description

unit
80x0:01 ModuloDiagTestPulse 0x00 / integer Modulo value for the frequency of
generating a test pulse.
0 -> every time
1 -> every second time
...
80x0:02 MultiplierDiagTestPulse 0x01 / integer Length of the test pulse in multiples of
400 µs
EL1918 and EL1918-2200 Version: 2.0.0 43

Operation
Index Name Default value/ Description

unit
80x0:04 Diag TestPulse active TRUE / Boolean Activation of test pulses for the
corresponding input module
80x0:05 Module Fault Link active TRUE / Boolean If a module error occurs in this module, a
module error is also set for all other
modules of this TwinSAFE component for
which this parameter is also set to TRUE.
80x1:01 InputFilterTime 0x000A / 0.1 ms Input filter of the safe input. Following this
time the internal input signal changes to
the applied signal state.
80x1:02 DiagTestPulseFilterTime 0x0002 / 0.1 ms Input filter for the test pulse signal
5.3.7 Process image of the EL1918

The process image of the EL1918 consists of 7 bytes process data in the input and 6 bytes process data in
the output.
Fig. 25: Process image of the EL1918
The assignment of the individual signals in the safe data is listed in the following table.
Name Process Bit position Description

image
FSIN Module1.Input IN 0.0 Safe input 1
FSIN Module1.Module Fault IN 0.1 Module error information for input 1
44 Version: 2.0.0 EL1918 and EL1918-2200

Operation
Name Process Bit position Description

image
FSIN Module 1.ErrAck OUT 0.0 Error acknowledge for safe input 1
5.3.8 EL1918: using the integrated TwinSAFE Logic functions

In addition to its standard function as a digital safe input terminal, the EL1918 TwinSAFE Terminal also
supports the option of executing a local safety-related user program. To do this, select the EL1918 as the
target system in the TwinCAT Safety Editor.
Information on creating a safety user program can be found in the documentation for the EL6910 (see
References).
The default project, so that the EL1918 once again behaves as a safe input terminal, can be reactivated by
deleting the safety-related user program from the TwinSAFE component. To do this, select the entry Safe
Logic, Mapping and Parameter Data in the dialog for deleting the project. After switching the TwinSAFE
component off and on, the default project is active again.
Fig. 26: Deleting the project data
5.3.8.1 Project design limits of EL1918

Project design limits
The maximum project design size for EL1918 is determined by the available memory. This is
managed dynamically. The values specified in the following table are therefore only guide values
and may differ from the actual values, depending on the safety project.
EL1918 and EL1918-2200 Version: 2.0.0 45

Operation
NOTE
Execution time of the logic function
The execution time of the logic program - with identical logic program - will typically be longer compared to
the EL6910, since the safe I/O signals must be processed additionally. This also has a corresponding effect
on the processing of the I/O signals, since with increasing project size these can only be evaluated with a
lower frequency.
Process image size max. 1486 byte per data direction

(maximum memory size 0x1E00 for 3 buffers, ie with the same size of
input and output process data, a maximum size of 1280 bytes per data
direction is possible. Only straight start addresses are possible, so fill
bytes must be taken into account)
TwinSAFE connections 128 max.
(up to 255 CRCs in total; 1 CRC is required for a TwinSAFE connection
with 1 or 2 byte safe data.)
Safe data per TwinSAFE maximum 126 byte (telegram length 255 byte)
connection
TwinSAFE blocks maximum 512 (when using ESTOP function blocks with complete input
and output mapping, other function blocks can lead to a smaller
maximum number)
TwinSAFE groups 128 max.
TwinSAFE user 40 max.
Standard PLC inputs dynamic (memory-dependent), max. 1484 byte
Standard PLC outputs dynamic (memory-dependent), max. 1484 byte
NOTE
Project development
TwinCAT 3.1 Build 4022.25 or newer is required to use the internal logic functions. If the EL1918 is used as
TwinSAFE slave with the default project, at least an EL6910, EK1960 or newer logic component is required
as TwinSAFE master.
5.4 TwinSAFE reaction times

The TwinSAFE terminals form a modular safety system that exchanges safety-oriented data via the Safety-
over-EtherCAT protocol. This chapter is intended to help you determine the system's reaction time from the
change of signal at the sensor to the reaction at the actuator.
Typical reaction time
The typical reaction time is the time that is required to transmit information from the sensor to the actuator, if
the overall system is working without error in normal operation.
Fig. 27: Typical reaction time
46 Version: 2.0.0 EL1918 and EL1918-2200

Operation
Definition Description
RTSensor Reaction time of the sensor until the signal is provided at the interface. Typically supplied by
the sensor manufacturer.
RTInput Reaction time of the safe input, such as EL1904 or EP1908. This time can be found in the
technical data. In the case of the EL1904 it is 4 ms.
RTComm Reaction time of the communication This is typically 3x the EtherCAT cycle time, because
new data can only be sent in a new Safety-over-EtherCAT telegram. These times depend
directly on the higher-level standard controller (cycle time of the PLC/NC).
RTLogic Reaction time of the logic terminal. This is the cycle time of the logic terminal and typically
ranges from 500 µs to 10 ms for the EL6900, depending on the size of the safety project.
The actual cycle time can be read from the terminal.
RTOutput Reaction time of the output terminal. This typically lies within the range of 2 to 3 ms.
RTActor Reaction time of the actuator. This information is typically supplied by the actuator
manufacturer
WDComm Watchdog time of the communication
This results in the following equation for the typical reaction time:
ReactionTimetyp = RTSensor + RTInput + 3 * RTComm + RTLogic + 3 * RTComm + RTOutput + RTActuator
with, for example
ReactionTimetyp = 5 ms + 4 ms + 3 * 1 ms + 10 ms + 3 * 1 ms + 3 ms + 20 ms = 48 ms
Worst-case reaction time
The worst case reaction time is the maximum time required to switch off the actuator in the case of an error.
Fig. 28: Worst-case reaction time
This assumes that a signal change occurs at the sensor and is transmitted to the input. A communication
error occurs at precisely the moment when the signal is to be transferred to the communication interface.
This is detected by the logic following the watchdog time of the communication link. This information should
then be transferred to the output, but a further communication error occurs here. This error is detected at the
output following the expiry of the watchdog time and leads to the switch-off.
This results in the following equation for the worst-case reaction:
ReactionTimemax = WDComm + WDComm + RTActuator
with, for example
EL1918 and EL1918-2200 Version: 2.0.0 47

Operation
ReactionTimemax = 15 ms + 15 ms + 20 ms = 50 ms
48 Version: 2.0.0 EL1918 and EL1918-2200

Operation
5.5 Diagnosis
5.5.1 Status LEDs
Fig. 29: Status LEDs
LED Color Description

Input 1 green Status display for the respective input
Input 2 LED lights up: Input is set
Input 3 LED not lit: Input is not set
Input 4
Input 5
Input 6
Input 7
Input 8
5.5.2 Diagnostic LEDs
Diagnostic LEDs
LED lit flashing off

Diag 1 Environment variables, - Environment variables,
(green) operating voltage and internal operating voltage and internal
tests are in the valid range tests are outside the valid
• If Diag 2 flashes, a logic range
error code applies • If Diag 2 flashes, an
environment error code
applies
Diag 2 Together with Diag 3 and 4: Logic or environment error Together with Diag 3 and 4:
(red) 1)
Global shutdown has code according to Diag1 and Global fault1) has occurred. (see
occurred. (see diag history of tables below is output diag history of the TwinSAFE
the TwinSAFE components) components)
Diag 3 Global fault or global shutdown - No global fault or global
(red) on µC11) shutdown on µC11)
Diag 4 Global fault or global shutdown - No global fault or global
(red) on µC21) shutdown on µC21)
EL1918 and EL1918-2200 Version: 2.0.0 49

Operation
1. A global fault permanently disables the TwinSAFE component, so that it has to be replaced. A global
shutdown temporarily disables the TwinSAFE component. The error can be reset by switching off and
back on again.
Logic error codes of LED Diag 2 (if LED Diag 1 is lit)
Flashing Description
Code
1 Function block error in one of the TwinSAFE groups
2 Communication error in one of the TwinSAFE groups
3 Error combination: Function block and communication
4 General error in one of the TwinSAFE groups
5 Error combination: General and function block
6 Error combination: General and communication
7 Error combination: General, function block and communication
Environment error codes of LED Diag 2 (if LED Diag 1 is off)
Flashing Description
Code
1 Maximum supply voltage µC1 exceeded
2 Supply voltage µC1 below minimum value
3 Maximum supply voltage µC2 exceeded
4 Supply voltage µC2 below minimum value
5 Maximum internal temperature exceeded
6 Internal temperature below minimum value
7 Valid temperature difference between µC1 and µC2 exceeded
8 not used
9 not used
10 General error
5.5.3 Flash code display

LED Display Description
flashing 400 ms ON / 400 ms OFF
1 second pause between the flash codes
flickering 50 ms ON / 50 ms OFF
5.5.4 Diagnosis History

The diagnostic history of the TwinSAFE devices that support this function is implemented in accordance with
the ETG guideline ETG.1020 Chapter 13 "Diagnosis Handling". The diagnostic messages are saved by the
TwinSAFE device in a dedicated CoE object under 0x10F3 and can be read out by the application or by
TwinCAT.
Both the control entries and the history itself can be found in the CoE object 0x10F3. The entry Newest
Message (0x10F3:02) contains the subindex of 0x10F3, which contains the latest diagnostic message, e.g.
0x06 for diagnostic message 1.
50 Version: 2.0.0 EL1918 and EL1918-2200

Operation
Index 10F3hex Diagnosis History

Index (hex) Name Meaning Data type Flags Default
10F3:0 Diagnosis
History
10F3:01 Maximum Maximum number of stored messages. A UINT8 RO 0x40 (64dec)
Messages maximum of 64 messages can be stored.
After that the respective oldest messages
are overwritten.
10F3:02 Newest Subindex of the latest message UINT8 RO 0x00 (0dec)
Message
10F3:03 Newest Subindex of the last confirmed message UINT8 RW 0x00 (0dec)
Acknowledged
Message
10F3:04 New Indicates that a new message is available BOOLEAN RO 0x00 (0dec)
Messages
Available
10F3:05 Flags Set via the startup list. If set to 0x0001, the UINT16 RW 0x0000 (0dec)
diagnostic messages are additionally sent
by emergency to the EtherCAT master
10F3:06 Diagnosis Diagnostic message 1 BYTE[32] RO {0}
Message 001
... ... ... ... ... ...
10F3:45 Diagnosis Diagnostic message 64 BYTE[32] RO {0}
Message 064
Structure of the diagnostic messages

• DiagCode (4 bytes) – in this case always 0x 0000 E000
• Flags (2 bytes) - diagnosis type (info, warning or error), timestamp and number of parameters
contained (see the following table)
• Text ID (2 bytes) – ID of the diagnostic message as a reference to the message text from the ESI/XML
• Timestamp (8 bytes) – local slave time in ns since switching on the TwinSAFE device
• dynamic parameters (16 bytes) – parameters that can be inserted in the message text (see following
table)
Flags in diagnostic messages

Data type Offset Description
UINT16 Bits 0 to 3 DiagType (value)
0 Info message
1 Warning message
2 Error message
3…15 reserved
Bit 4 If the bit = 1, the timestamp contained in the message is the local timestamp of the
TwinSAFE device. The age of the diagnostic message can be deduced by
calculation with the current timestamp from the CoE object 0x10F8.
Bits 5 to 7 reserved
Bits 8 to 15 Number of parameters in this diagnostic message
Dynamic parameters in the diagnostic messages

Type Data type Description
Flags parameter 1 UINT16 Describes the type of parameter 1
Bits 12 to 15 = Bits 0 to 11 = data type of parameter 1
0
EL1918 and EL1918-2200 Version: 2.0.0 51

Operation
Type Data type Description

0x0001 - BOOLEAN
0x0002 - INT8
0x0003 - INT16
0x0004 - INT32
0x0005 - UINT8
0x0006 - UINT16
0x0007 - UINT32
0x0008 - REAL32
0x0011 - REAL64
0x0015 - INT64
0x001B - UINT64
Text parameters and formats are
specified in ETG.2000.
Parameter 1 Data type in accordance with Value of parameter 1
flags
Flags parameter 2 UINT16 see Flags parameter 1
Parameter 2 Data type in accordance with Value of parameter 2
flags
...
The diagnostic messages are saved in text form in the ESI/XML file belonging to the TwinSAFE device. On
the basis of the Text ID contained in the diagnostic message, the corresponding plain text message can be
found in the respective languages. The parameters can be inserted in the appropriate positions. In the
following example, %x is used for a hexadecimal representation of the parameters.
Fig. 30: ESI/XML message text
Via the entry New Messages Available the user receives information that new messages are available. The
messages can be read out via CompleteAccess (a CoE read command for the complete CoE object
0x10F3). The New Messages Available bit is reset after reading the messages.
The sending of emergency messages to the EtherCAT master is activated by adding the CoE object
0x10F3:05 to the startup list (Transition IP, value 0x0001). If new diagnostic messages arrive, they are
entered in object 0x10F3 and additionally sent by emergency to the EtherCAT master.
Fig. 31: Startup list
52 Version: 2.0.0 EL1918 and EL1918-2200

Operation
5.5.5 Diag History tab

All errors occurring within the TwinSAFE components are stored in their diag history. The diag history can be
viewed by selecting the corresponding TwinSAFE component in the I/O tree structure and then selecting the
Diag History tab. Use the Update History button to fetch the current data from the TwinSAFE component.
Errors within the logic, the function blocks, the connections or the component itself are stored with a
corresponding time stamp.
Fig. 32: Diag history
Use the Advanced… button to open the advanced settings. Here, the user can customize the behavior of the
diag history.
Fig. 33: Diag history – advanced settings
Advanced Settings
Setting Description
Message Types • disable Info
Messages with the Info status are not saved in the diag history
• disable Warnings
Messages with the Warning status are not saved in the diag history
• disable Errors
Messages with the Error status are not saved in the diag history
EL1918 and EL1918-2200 Version: 2.0.0 53

Operation
Setting Description
Emergency In addition to saving the message in the diag history, an emergency object
is also sent and displayed in the TwinCAT logger window.
Overwrite / Acknowledge Mode This setting is currently not supported.
5.6 Maintenance
Maintenance
The TwinSAFE components are maintenance-free!
Environmental conditions
WARNING
Observe the specified environmental conditions!
Please ensure that the TwinSAFE components are only stored and operated under the specified conditions
(see technical data).
If the TwinSAFE component is operated outside the permitted temperature range it will switch to Global
Shutdown state.
Cleaning
Protect the TwinSAFE component from unacceptable soling during operation and storage!
If the TwinSAFE component was subjected to unacceptable soiling it may no longer be operated!
WARNING
Have soiled terminals checked!
Cleaning of the TwinSAFE component by the user is not permitted!
Please send soiled terminals to the manufacturer for inspection and cleaning!
54 Version: 2.0.0 EL1918 and EL1918-2200

Operation
5.7 Service life

The TwinSAFE terminals are designed for a service life of 20 years.
Due to the high diagnostic coverage within the lifecycle no special proof tests are required.
The TwinSAFE terminals bear a date code, which is composed as follows:
Date code: CW YY SW HW
Legend: Sample: Date Code 17 11 05 00
CW: Calendar week of manufacture Calendar week: 17
YY: Year of manufacture Year: 2011
SW: Software version Software version: 05
HW: Hardware version Hardware version: 00
In addition the TwinSAFE terminals bear a unique serial number.
00000000
17110500
Fig. 34: Unique serial number of a TwinSAFE terminal
EL1918 and EL1918-2200 Version: 2.0.0 55

Maintenance and cleaning
6 Maintenance and cleaning

Cleaning by the manufacturer only
Do not operate the TwinSAFE component if it is impermissibly dirty according to protection class
IP20. Send impermissibly dirty TwinSAFE components to the manufacturer for cleaning.
TwinSAFE components are basically maintenance-free.
56 Version: 2.0.0 EL1918 and EL1918-2200

Decommissioning
7 Decommissioning
7.1 Disposal
NOTE
Correct disposal
Observe the applicable national laws and guidelines for disposal.
Incorrect disposal may result in environmental damage.
Remove the TwinSAFE component for disposal.
Depending on your application and the products used, make sure that the respective components are
disposed of properly:
Cast iron and metal
Hand over cast iron and metal parts to scrap metal recycling.
Cardboard, wood and polystyrene
Dispose of packaging materials made of cardboard, wood or Styrofoam in accordance with regulations.
Plastic and hard plastic
You can recycle parts made of plastic and hard plastic via the waste management center or reuse them in
accordance with the component regulations and markings.
Oils and lubricants
Dispose of oils and lubricants in separate containers. Hand over containers to the waste oil collection point.
Batteries and accumulators
Batteries and accumulators may also be marked with the crossed-out wheeled garbage can symbol. You
must separate these components from waste. You are legally obliged to return used batteries and
accumulators within the EU. Outside the validity of the EU Directive 2006/66/EC, observe the respective
regulations.
7.1.1 Returning to the vendor

In accordance with the WEEE-2012/19/EU directives, you can return used devices and accessories for
professional disposal. The transport costs are borne by the sender.
Send the used devices with the note "For disposal" to:

Gebäude „Service“
Stahlstraße 31
D-33415 Verl
In addition, you have the option to contact a local certified specialist company for the disposal of used
electrical and electronic appliances. Dispose of the old components in accordance with the regulations
applicable in your country.
EL1918 and EL1918-2200 Version: 2.0.0 57

Appendix
8 Appendix
8.1 Volatility
If there are requirements concerning the volatility of products in your application, for example of the U.S.
Department of Defense or similar authorities or security organizations, the following process applies:
The product has both volatile and non-volatile components. Volatile components lose their data immediately
after removing power. Non-volatile components keep the data even after loss of power.
If there is customer specific data saved on the product, it cannot be ensured that this data might not be
restored through for example forensic measures, even after the data is deleted through the provided tool
chain. If this data is confidential, the scrapping of the product after usage is recommended to protect this
data.
58 Version: 2.0.0 EL1918 and EL1918-2200

Appendix
8.2 Focus of certificates

The most decisive document for certified components of the TwinSAFE department is the EC type
examination certificate. The document contains both the test coverage and the regarded component and
component family.
The current certificates of all TwinSAFE components with the underlying standards and directives can be
found at https://www.beckhoff.com/en-en/support/download-finder/certificates-approvals/.
If the document refers only to the first four figures of a product (ELxxxx), the certificate is valid for all
available variants of the component (ELxxxx-abcd). This is applicable for all components like EtherCAT
Terminals, EtherCAT Boxes, EtherCAT plug-in modules and Bus Terminals.
If you regard the example EL1918 in the picture, the certificate is valid for both the EL1918 and the available
variant EL1918-2200.
EL1918 and EL1918-2200 Version: 2.0.0 59

Appendix
8.3 Certificates
Fig. 35: EL1918 EC Declaration of Conformity
60 Version: 2.0.0 EL1918 and EL1918-2200

List of figures
List of figures
Fig. 1 Slot and key system and screwless (spring-loaded) connection system ..................................... 16
Fig. 2 Bus Coupler (EtherCAT) .............................................................................................................. 17
Fig. 3 Overview of EtherCAT Terminals................................................................................................. 18
Fig. 4 EL1918 – TwinSAFE Terminal with 8 fail-safe inputs .................................................................. 21
Fig. 5 Characteristic curve of the inputs................................................................................................. 26
Fig. 6 EL1918 dimensions...................................................................................................................... 27
Fig. 7 Spring contacts of Beckhoff I/O components ............................................................................... 29
Fig. 8 Installation position and minimum distances................................................................................ 30
Fig. 9 Thermally unfavorable arrangement of the TwinSAFE terminals................................................. 32
Fig. 10 Thermally favorable arrangement of the TwinSAFE terminals..................................................... 32
Fig. 11 Installation on the mounting rail ................................................................................................... 33
Fig. 12 Removal from mounting rail ......................................................................................................... 34
Fig. 13 PE power contact ......................................................................................................................... 35
Fig. 14 Connection of a cable to a terminal point..................................................................................... 36
Fig. 15 EL1918 connection ...................................................................................................................... 37
Fig. 16 Cable routing................................................................................................................................ 38
Fig. 17 Adding an EL1918........................................................................................................................ 39
Fig. 18 Address settings on TwinSAFE terminals with 1023 possible addresses.................................... 40
Fig. 19 Starting the automatic import from the I/O configuration.............................................................. 41
Fig. 20 Selection from the I/O tree ........................................................................................................... 41
Fig. 21 Creating alias devices by the user ............................................................................................... 42
Fig. 22 Linking tab of the alias device ...................................................................................................... 42
Fig. 23 Connection tab of the alias device ............................................................................................... 43
Fig. 24 EL1918 parameters...................................................................................................................... 43
Fig. 25 Process image of the EL1918 ...................................................................................................... 44
Fig. 26 Deleting the project data .............................................................................................................. 45
Fig. 27 Typical reaction time .................................................................................................................... 46
Fig. 28 Worst-case reaction time ............................................................................................................. 47
Fig. 29 Status LEDs ................................................................................................................................. 49
Fig. 30 ESI/XML message text................................................................................................................. 52
Fig. 31 Startup list .................................................................................................................................... 52
Fig. 32 Diag history .................................................................................................................................. 53
Fig. 33 Diag history – advanced settings ................................................................................................. 53
Fig. 34 Unique serial number of a TwinSAFE terminal ............................................................................ 55
Fig. 35 EL1918 EC Declaration of Conformity ......................................................................................... 60
EL1918 and EL1918-2200 Version: 2.0.0 61

More Information:
www.beckhoff.com/EL1918

Hülshorstweg 20
33415 Verl
Germany
Phone: +49 5246 9630
[email protected]
www.beckhoff.com

El 1918 en

Uploaded by

Copyright:

Available Formats

El 1918 en

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

El 1918 en

Uploaded by

Copyright:

Available Formats

Operation Manual | EN

EL1918 and EL1918-2200

2023-03-06 | Version: 2.0.0

2 For your safety ........................................................................................................................................ 12

3 System description ................................................................................................................................. 16

4 Product description ................................................................................................................................ 21

EL1918 and EL1918-2200 Version: 2.0.0 3

5.2.3 Mechanical installation ..................................................................................................... 28

6 Maintenance and cleaning ..................................................................................................................... 56

7 Decommissioning ................................................................................................................................... 57

4 Version: 2.0.0 EL1918 and EL1918-2200

1 Notes on the documentation

EtherCAT® is a registered trademark and patented technology,

Safety over EtherCAT® is a registered trademark and patented

EL1918 and EL1918-2200 Version: 2.0.0 5

1.1.3 Limitation of liability

The following is excluded from the liability:

6 Version: 2.0.0 EL1918 and EL1918-2200

1.2 Documentation issue status

Origin of the document

EL1918 and EL1918-2200 Version: 2.0.0 7

1.3 Version history of the TwinSAFE product

Updated hardware and software

Date Software ver- Hardware Modifications

8 Version: 2.0.0 EL1918 and EL1918-2200

1.5 Staff qualification

EL1918 and EL1918-2200 Version: 2.0.0 9

1.6 Safety and instruction

1.6.1 Explanation of symbols

Failure to observe will result in serious or fatal injuries.

Failure to observe may result in serious or fatal injuries.

Failure to observe may result in minor or moderate injuries.

10 Version: 2.0.0 EL1918 and EL1918-2200

1.7 Beckhoff Support and Service

Beckhoff Automation GmbH & Co. KG

EL1918 and EL1918-2200 Version: 2.0.0 11

2 For your safety

2.1 Duty of care

No disposal in domestic waste

12 Version: 2.0.0 EL1918 and EL1918-2200

2.2 Safety image signs

Read and observe the operating instructions

Electrostatic sensitive components

EL1918 and EL1918-2200 Version: 2.0.0 13

2.3 General safety instructions

2.3.1 Before operation

Use in machines according to the Machinery Directive

Use SELV/PELV power supply

Carry out commissioning test

Use permissible engineering tools and procedures

14 Version: 2.0.0 EL1918 and EL1918-2200

Interference due to emitted interference

2.3.3 After operation

De-energize and switch off components before working on them

EL1918 and EL1918-2200 Version: 2.0.0 15

3.1 The Beckhoff EtherCAT Terminal system

16 Version: 2.0.0 EL1918 and EL1918-2200

3.1.1 EtherCAT Bus Coupler

Fig. 2: Bus Coupler (EtherCAT)