
General Overview
11
Critical systems, Detected Alarms and Handling Requirements
Critical detected alarm indicators and system functions require independent and
redundant protection hardware and/or mechanical interlocks.
If the unit for any reason becomes inoperative (for example, an inoperative
backlight) it may be difficult or impossible to identify a function. Functions that may
present a hazard if not immediately executed, such as emergency stop, must be
provided independently of the unit. The design of the control system must take into
account an inoperative unit (backlight) and that the operator is unable to control the
machine or respond to detected errors using the unit.
When the power is cycled, wait at least 10 seconds before restoring the power to the
GP Unit. Switching the power OFF and ON quickly can damage the unit.
WARNING
LOSS OF CONTROL
Consider the potential failure modes of control paths in the machine control
system design, such as:
The possibility of backlight failure,
Unanticipated link transmission delays or failures,
The operator being unable to control the machine,
The operator making errors in the control of the machine.
Provide a means to achieve a safe state during and after a path failure for critical
control functions such as emergency stop and overtravel stop.
Provide separate or redundant control paths for critical control functions.
Test individually and thorougly each implementation of the GP unit for correct
operation before service.
Failure to follow these instructions can result in death, serious injury, or
equipment damage.
WARNING
UNINTENDED EQUIPMENT OPERATION
Do not use the unit as the only means of control for critical system functions
such as motor start/stop or power control.
Do not use the unit as the only notification device for critical alarms, such as
device overheating or overcurrent.
Failure to follow these instructions can result in death, serious injury, or
equipment damage.
Comments to this Manuals