Help
  • Explore Community
  • Get Started
  • Ask the Community
  • How-To & Best Practices
  • Contact Support
Notifications
Login / Register
Community
Community
Notifications
close
  • Forums
  • Knowledge Center
  • Events & Webinars
  • Ideas
  • Blogs
Help
Help
  • Explore Community
  • Get Started
  • Ask the Community
  • How-To & Best Practices
  • Contact Support
Login / Register
Sustainability
Sustainability

Join our "Ask Me About" community webinar on May 20th at 9 AM CET and 5 PM CET to explore cybersecurity and monitoring for Data Center and edge IT. Learn about market trends, cutting-edge technologies, and best practices from industry experts.
Register and secure your Critical IT infrastructure

Integrating Safety and Process Environments with Modicon M580 Safety

Modicon PAC Forum

A forum for topics related to the scope of Modicon PAC offers and ecosystem along the whole lifecycle: Modicon M580 and 340, EcoStruxure Control Expert, EcoStruxure Process Expert (Unity Pro) and more.

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 
  • Home
  • Schneider Electric Community
  • Industrial Automation
  • Modicon PAC Forum
  • Integrating Safety and Process Environments with Modicon M580 Safety
Options
  • Subscribe to RSS Feed
  • Mark Topic as New
  • Mark Topic as Read
  • Float this Topic for Current User
  • Bookmark
  • Subscribe
  • Mute
  • Printer Friendly Page
Invite a Co-worker
Send a co-worker an invite to the portal.Just enter their email address and we'll connect them to register. After joining, they will belong to the same company.
You have entered an invalid email address. Please re-enter the email address.
This co-worker has already been invited to the Exchange portal. Please invite another co-worker.
Please enter email address
Send Invite Cancel
Invitation Sent
Your invitation was sent.Thanks for sharing Exchange with your co-worker.
Send New Invite Close
Top Experts
User Count
MatthewM
Lt. Commander MatthewM
8
RoozeeR
Lt. Commander RoozeeR Lt. Commander
7
Trinxs1
Lt. Commander Trinxs1 Lt. Commander
6
ciupol
Lieutenant ciupol
6
View All
Related Products
product field
Schneider Electric
EcoStruxure™ Control Expert

Invite a Colleague

Found this content useful? Share it with a Colleague!

Invite a Colleague Invite
Back to Modicon PAC Forum
Michael_Chan
Commander Michael_Chan Commander
Commander

Posted: ‎2020-10-01 01:51 AM

1 Like
6
6280
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2020-10-01 01:51 AM

Integrating Safety and Process Environments with Modicon M580 Safety

Integrating Safety and Process Environments

Using a single programmable controller such as Schneider Electric’s M580 Safety controller to manage both process and safety systems can help speed up deployment, improve reliability and sustainability of operations, enhance cybersecurity and support greater productivity and transparency.

 

The Concept of Common Safety

Common safety ensures that both process and safety operations are separate and independent in a common engineering environment.

2020-10-01_16h23_03.png

 

Architecture with standalone M580 Safety

2020-10-01_16h25_08.png

 

Architecture with redundant M580 Safety

HSBY.png

Integrated Cyber security

The Modicon M580 integrated cyber security has proven secure under both real world and simulated cyber attack. By encrypting and verifying hardware, firmware, and software systems together at every startup and during runtime, critical system integrity is maintained, secure from unauthorized modification

 

Michael Chan Kum Yuen
Attachments
Labels
  • Labels:
  • Edge Control
  • Tags:
  • english
Reply

Link copied. Please paste this link to share this article on your social media post.

  • All forum topics
  • Previous Topic
  • Next Topic
Replies 6
Anonymous user
Not applicable

Posted: ‎2021-01-15 01:50 AM

2 Likes
0
6108
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-01-15 01:50 AM

Safety first, thank you for the information!

  • Tags:
  • english
Reply

Link copied. Please paste this link to share this article on your social media post.

Anonymous user
Not applicable

Posted: ‎2021-02-24 09:26 AM

0 Likes
4
5978
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-02-24 09:26 AM

It would be great if the CoPro would still keep the SAFE TASK running if the main CPU fails in a standalone Safety CPU configuration.

 

I know we meet 1oo2 CPU architecture to achieve SIL3 but what does that mean ? If one CPU out of the 2 fails, we go to safe state😎 ? or lose control of the safety loop 😱?

 

If we are going to expect consultants and end users to promote common safety, we need to ensure CPU redundancy failsafe in a standalone configuration

 

Any thoughts on this ? 

 

 

 

 

 

 

  • Tags:
  • english
Reply

Link copied. Please paste this link to share this article on your social media post.

pmgpa
pmgpa
Cadet

Posted: ‎2021-02-24 02:39 PM

In response to Anonymous user
1 Like
3
5967
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-02-24 02:39 PM

Hi Patrick,

 

My understanding of the Safety CPU and Co-Processor is that they dont provide hardware redundancy for the safety process, only a logic comparison. If any differences in the logic result are detected between the two processors, the process goes to safe state. Therefore it would mean that if the CPU or CoProcessor fail, that the system goes to the safe state as there is no valid comparison.

 

From the M580 Safety Manual: "1oo2 (“one out of two”) architecture means that two independent channels execute the safety
process and, if an error is detected on either channel, the safety function is activated and a shutdown occurs."

 

Hot/Standby Safety Processors are available if hardware CPU redundancy is required.

  • Tags:
  • english
Reply

Link copied. Please paste this link to share this article on your social media post.

DanielWeber
Ensign DanielWeber Ensign
Ensign

Posted: ‎2021-02-24 11:43 PM

In response to pmgpa
0 Likes
2
5958
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-02-24 11:43 PM

This is correct Paul,
the Safety CPU is based on a redundant processor architecture to allow a redundant execution of the logic.
The 1oo2 architecture and voter allow reaching the SIL3 level. In case one processor fails, no voting is possible, so the system cannot be considered Safe and the Safe task goes in Halt mode (then reaching the Safe state). The non-safe tasks stay in Run, for sure the Process "should" stop but you can still control it.

Common Safety means the PAC is able to execute both Process control and Safety independently.
Same as if you have a different PLC for Process and Safety, if one fails the system should not be fully operating.

  • Tags:
  • english
Reply

Link copied. Please paste this link to share this article on your social media post.

RoozeeR
Lt. Commander RoozeeR Lt. Commander
Lt. Commander

Posted: ‎2021-02-25 01:57 AM

In response to DanielWeber
0 Likes
1
5951
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-02-25 01:57 AM

Problem in this is the use of the word "redundant" in "Safety CPU is based on a redundant processor architecture". The general meaning of redundant is "Unnecessary" or "Surplus" or in plain language: You do not need the second one for the first one do perform it's function.

In case of a Safety system this means that the Safe functioning of the system is maintained when the "redundant" processor fails: The Process will be stopped to the defined SAFE situation. This redundancy will increase the reliability (SIL level) of the Safety function. But for the safety system to continue functioning (without going to SAFE state), this second CPU is very necessary.

 

In a "normal" redundant system, like M580 HotStandby, redundancy means when one fails, the remaining CPU will continue to control the process without any change (bumpless). This will increase the Availability of the total system.

 

So if you want the combination of a reliable SAFE system (using this internal CPU redundancy) and high availability of the process control, including SAFE control, you need M580 Safe Hot-Standby.

 

When the reliability level of the SAFETY system, can be decreased (ex. from SIL3 to SIL1), this could technically be offered by a single CPU (without Copro). However this has not been implemented in M580, @DanielWeber , any comment on that?

R.Roozee
Sr Solution Architect (SAE Master)
  • Tags:
  • english
Reply

Link copied. Please paste this link to share this article on your social media post.

DanielWeber
Ensign DanielWeber Ensign
Ensign

Posted: ‎2021-02-25 05:50 AM

In response to RoozeeR
0 Likes
0
5946
  • Mark as New
  • Bookmark
  • Subscribe
  • Mute
  • Subscribe to RSS Feed
  • Permalink
  • Print
  • Email to a Friend
  • Report Inappropriate Content

Link copied. Please paste this link to share this article on your social media post.

Posted: ‎2021-02-25 05:50 AM

I think it's clear now there exists redundancy for Safety and redundancy for availability.

The M580 Safety CPU (based on 2 processors) cannot safely operate if one CPU fails. As our Safety modules (CPU and I/O) are not designed to operate in a 1oo1 mode the system goes in Halt. This is a choice we did...and it's not a plan to change.

 

  • Tags:
  • english
Reply

Link copied. Please paste this link to share this article on your social media post.

Preview Exit Preview

never-displayed

You must be signed in to add attachments

never-displayed

 
To The Top!

Forums

  • APC UPS Data Center Backup Solutions
  • EcoStruxure IT
  • EcoStruxure Geo SCADA Expert
  • Metering & Power Quality
  • Schneider Electric Wiser

Knowledge Center

Events & webinars

Ideas

Blogs

Get Started

  • Ask the Community
  • Community Guidelines
  • Community User Guide
  • How-To & Best Practice
  • Experts Leaderboard
  • Contact Support
Brand-Logo
Subscribing is a smart move!
You can subscribe to this board after you log in or create your free account.
Forum-Icon

Create your free account or log in to subscribe to the board - and gain access to more than 10,000+ support articles along with insights from experts and peers.

Register today for FREE

Register Now

Already have an account? Login

Terms & Conditions Privacy Notice Change your Cookie Settings © 2025 Schneider Electric

This is a heading

With achievable small steps, users progress and continually feel satisfaction in task accomplishment.

Usetiful Onboarding Checklist remembers the progress of every user, allowing them to take bite-sized journeys and continue where they left.

of