D 71334 Waiblingen-Hegnach

Esslinger Str. 26
Tel.: +49 (0)7151/956230
Fax: +49 (0)7151/956250
E-Mail: [email protected]
Quality certified according ISO 9001 Internet: www.braun-tacho.de

Datasheet and Manual of

Protection System E16A358
with
Overspeed Protection
and
Voters for external Trip Conditions
and
2oo3 Valve Control Circuits

Certified by TÜV for

IEC61508; SIL3
DIN EN ISO 13849-1:2008; Cat.3 PLe

Testgenerator Monitor A Monitor B Monitor C Valve Control Modules

E1612 E1612 E1612

E1698 E1668 E1668 E1668
SIL3/IEC61508 SIL3/IEC61508 SIL3/IEC61508 SIL3/IEC61508

1 CMD 1 CMD 1 CMD

1 RDY 1 RDY 1 RDY
2 CMD 2 CMD 2 CMD
2 RDY 2 RDY 2 RDY
1 2 3 4 1 2 3 4 1 2 3 4 1 2 3 4 3 CMD 3 CMD 3 CMD
3 RDY 3 RDY 3 RDY

P P P P OK OK OK

E E E E

Figure 1: E16A358 Part of System Front View

E16A358 Rev:00 10.05.2013 Page 1 of 99

Table of Contents Page

1. General Informations ................................................................................................5

1.1. List of Figures..............................................................................................................5
1.2. List of Abbreviations ....................................................................................................6
1.3. System Applications and Definitions ...........................................................................8
1.3.1. System Applications ....................................................................................................8
1.3.2. Definition of Terms ......................................................................................................8
1.4. Key Features of System E16A358 ..............................................................................9
1.5. Ordering Key for Systems E16A358.abcTMFU.........................................................10
1.6. Certifications .............................................................................................................11
1.6.1. Certification IEC61508; SIL3 .....................................................................................11
1.6.2. Certification DIN EN ISO 13849-1:2008; Cat.3 PLe..................................................11
1.7. Safety Data................................................................................................................13
1.7.1. Safety Data IEC61508; SIL3 for Core System (without E1612/E1613).....................13
1.7.2. Safety Data DIN EN ISO 13849-1:2008; Cat.3 PLe (without E1612/E1613).............13
2. System Structure and I/Os......................................................................................14
2.1. System Structure.......................................................................................................14
2.1.1. Speed Sensors..........................................................................................................14
2.1.2. System Components .................................................................................................14
2.1.3. System Design ..........................................................................................................14
2.1.4. System Structure Diagrams ......................................................................................15
2.1.5. System Wiring Diagrams...........................................................................................19
2.1.6. Connection of Sensors to the Speed Signal Inputs...................................................23
2.2. Inputs of the System .................................................................................................24
2.2.1. Speed Signal.............................................................................................................24
2.2.2. Rotation Direction Signal (F/R : Forward/Reverse) ...................................................24
2.2.3. Reset of Alarms.........................................................................................................24
2.2.4. Test Lock...................................................................................................................24
2.2.5. Start Auto Test Sequence .........................................................................................24
2.2.6. Test I , Test II , Test III ..............................................................................................25
2.2.7. Starter (Override of SP2)...........................................................................................25
2.2.8. SP1B Valid ................................................................................................................25
2.2.9. Chapter left blank intentionally ..................................................................................25
2.2.10. External Signals for Voter 1.......................................................................................25
2.2.11. External Signals for Voters 2 … 6 .............................................................................25
2.2.12. Switch Command to E1612/E1613 ...........................................................................26
2.2.13. Secondary Trip Criterion to E1612/E1613.................................................................26
2.2.14. Command Release and Bypass Command Release to CH1 of E1612 ....................26
2.2.15. Trip Line Bypass / No Trip Line Bypass Release to CH2 of E1613...........................26
2.3. Outputs of the System...............................................................................................27
2.3.1. System Alarm 1 and System Alarm 2........................................................................27
2.3.2. Speed Signal Repeater .............................................................................................27
2.3.3. Monitor Warning Alarm .............................................................................................27
2.3.4. Speed Alarm SP3......................................................................................................27
2.3.5. Analog Outputs proportional to measured speed (Option)........................................28
2.3.6. Rotation Direction Detection .....................................................................................28
2.3.7. Speed Trip Logic (2oo3 voted) ..................................................................................28
2.3.8. Trip Lines IV, V, VI ....................................................................................................28
2.3.9. Chapter left blank intentionally ..................................................................................28
2.3.10. Logic Outputs LO1 through LO6 (voted 2oo3) ..........................................................28
2.3.11. Command Feedback from E1612/E1613 ..................................................................28
2.3.12. 2oo3 Switched Valve Control Outputs from E1612/E1613........................................29
2.4. Power Supply ............................................................................................................30
2.4.1. Power Supply of Monitors E1668 and Testgenerator E1698 ....................................30
2.4.2. L+ Supply of Trip Lines I, II, III and Valve Control Modules E1612/E1613................30
2.4.3. Valve Load Supply of the 2oo3 Valve Control Circuits..............................................30
2.5. Data Interface............................................................................................................30
2.5.1. PROFIBUS Interface for Status and Diagnostics of the System ...............................30
2.5.2. RS232 Interface for Setting of Parameters ...............................................................30
3. Technical Specifications ........................................................................................31

E16A358 Rev:00 Page 2 of 99

 3.1. Technical Data of Inputs ...........................................................................................31
3.1.1. Technical Data of Speed Signal Inputs .....................................................................31
3.1.1.1. Hall Sensor Inputs .....................................................................................................31
3.1.1.2. Eddy Current Sensor Inputs or MPU (Magnetic Pickup) Inputs ................................31
3.1.2. Technical Data of Rotation Direction Inputs ..............................................................31
3.1.3. Technical Data of Binary Inputs (excluding Voter 1) .................................................31
3.1.4. Technical Data of Binary Inputs of Voter 1................................................................31
3.1.5. Technical Data of Inputs (Category 1) of E1612/E1613............................................31
3.1.6. Technical Data of Inputs (Category 2) of E1612/E1613............................................31
3.1.7. Technical Data of Inputs (Category 3) of E1612/E1613............................................32
3.1.8. Technical Data of Inputs Starter................................................................................32
3.2. Technical Data of Outputs.........................................................................................33
3.2.1. Technical Data of Speed Sensor Signal Repeater Outputs ......................................33
3.2.2. Technical Data of Analog Outputs.............................................................................33
3.2.3. Technical Data of Opto Relay Outputs......................................................................33
3.2.4. Technical Data of Logic Outputs ...............................................................................33
3.2.5. Technical Data of Trip Lines IV, V, VI .......................................................................33
3.2.6. Chapter left blank intentionally ..................................................................................33
3.2.7. Technical Data of Command Feedback Signals from E1612/E1613 ........................34
3.2.8. Technical Data of 2oo3 Valve Control Outputs from E1612/E1613 ..........................34
3.3. Technical Data of Power Supplies ............................................................................35
3.3.1. Technical Data of Power Supply of Monitors E1668 and Testgenerator E1698 .......35
3.3.2. Technical Data of L+ Supply of Trip Lines I, II, III and Valve Control Modules .........35
3.3.3. Technical Data of Valve Load Supply of the 2oo3 Valve Control Circuits.................35
3.4. Amount of Heat to be dissipated ...............................................................................36
3.5. Installation Conditions ...............................................................................................36
3.6. Protection Grade .......................................................................................................36
3.7. Connectors ................................................................................................................36
3.7.1. Connectors with Pull Spring Terminals .....................................................................36
3.7.2. Connectors with Screw Terminals.............................................................................37
3.8. Conformity to Standards............................................................................................37
3.9. Weight of E16A358 ...................................................................................................37
3.10. Useful Lifetime, Proof Test Interval and Maintenance of the E16A358 System ........38
3.11. Dimensions of one rack of System E16A358 ............................................................39
3.12. Total Front View with Location of Terminals of Main Rack........................................40
4. Safety Notes for Installation and Operation..........................................................41
4.1. Safety Notes for Installation ......................................................................................41
4.1.1. General Instructions ..................................................................................................41
4.1.2. EMI ............................................................................................................................41
4.2. Safety Notes for Operation........................................................................................41
4.2.1. Safety Notes for Initial Operation ..............................................................................41
4.2.2. Safety Notes for Replacement of Fuses on E1612/E1613........................................41
5. Description of Monitor E1668.................................................................................42
5.1. Display and Frontside Operational Elements ............................................................42
5.1.1. Front View of Monitor E1668.....................................................................................42
5.1.2. Status-LEDs ..............................................................................................................42
5.1.3. Display during Test Procedures ................................................................................42
5.1.4. Values accessible during normal operation ..............................................................43
5.1.5. Special Display Mode 1.............................................................................................43
5.1.6. Special Display Mode 2.............................................................................................43
5.1.7. Display of Firmware release state and CRC-Parameter-Checksum of Monitor ........43
5.1.8. Frontside Reset of Alarms and Event codes .............................................................44
5.1.9. Data Interface............................................................................................................44
5.2. Functions of Monitor 1667......................................................................................45
5.2.1. Speed Measurement .................................................................................................45
5.2.2. Functions for Overspeed Protection..........................................................................45
5.2.3. Functions for External Trip by Voters ........................................................................45
5.2.4. Permanent Monitoring Functions ..............................................................................45
5.2.5. Functional Tests ........................................................................................................45
5.2.6. Selftest of Monitor .....................................................................................................46
6. Description of Testgenerator E1698......................................................................47

E16A358 Rev:00 Page 3 of 99

 6.1. Display and Frontside Operational Elements ............................................................47
6.1.1. Front View of Testgenerator E1698 ..........................................................................47
6.1.2. Status-LEDs ..............................................................................................................47
6.1.3. Display during Test Procedures ................................................................................48
6.1.4. Values accessible during normal operation ..............................................................48
6.1.5. Display of Firmware release state and CRC-Parameter-Checksum of Monitor ........48
6.1.6. Frontside Reset of Alarms and Event codes .............................................................48
6.1.7. Manual Start of a Monitor-Test Sequence................................................................48
6.1.8. Manual Start of a Trip-Line-Test Sequence ..............................................................48
6.1.9. Data Interface............................................................................................................48
6.2. Functions of Testgenerator 1697 ..............................................................................49
6.2.1. Permanent Monitoring of Feedbacks ........................................................................49
6.2.2. Monitor-Test Sequence .............................................................................................49
6.2.3. Trip-Line-Test Sequence (Test of 2oo3 Valve Control Circuit)..................................50
6.2.4. Cross-check between CPUs of Test-Generator ........................................................50
6.2.5. Selftest of CPUs ........................................................................................................50
7. Description of Valve Control Modules E1612 and E1613 ....................................51
7.1. Frontview and Status LEDs.......................................................................................51
7.1.1. Frontview of E1612 and E1613 .................................................................................51
7.1.2. Status LEDs ..............................................................................................................51
7.1.3. Display during Trip-Line Test ....................................................................................52
7.1.4. Data Interface to Testgenerator ................................................................................52
7.2. Functions of Valve Control Modules E1612 and E1613............................................52
7.2.1. Diagnostic Functions.................................................................................................52
7.2.2. Response to detected faults......................................................................................52
8. Programming of the Modules.................................................................................53
8.1. Programming of the Modules via Front Keyboard.....................................................53
8.2. Programming of the Modules via RS232-Interface ...................................................54
8.3. Default Values ...........................................................................................................54
8.4. Response of Parameter if range of values is exceeded............................................54
8.5. Display of Parameter Values if front side parameter access is locked .....................54
9. Parameters of Monitor E1668.................................................................................55
9.1. Summary of parameters and their default values......................................................55
9.2. Description of Parameters and their Settings of Monitor E1668 ...............................59
10. Parameters of Test-Generator E1698 ....................................................................87
10.1. Summary of parameters and their default values......................................................87
10.2. Description of Parameters and their Settings of Test-Generator E1698 ...................88
11. Event codes and Troubleshooting ........................................................................95
11.1. Event codes on display of Monitor E1668 .................................................................95
11.2. Troubleshooting if display of Monitor reads E.0.4.x.x...............................................96
11.3. Event codes on display of Testgenerator E1698.......................................................97
12. Revision Notes ........................................................................................................99

E16A358 Rev:00 Page 4 of 99

1. General Informations

1.1. List of Figures

Figure 1: E16A358 Part of System Front View 1

Figure 2: E16A358 System Structure Diagram 1 of 4 : Testgenerator and speed section of Monitors 15
Figure 3: E16A358 System Structure Diagram 2 of 4 : Voter section of Monitors 16
Figure 4: E16A358 System Structure Diagram 3 of 4 : Triple of E1612 Valve Control Modules 17
Figure 5: E16A358 System Structure Diagram 4 of 4 : Triple of E1613 Valve Control Modules 18
Figure 6: E16A358 System Wiring Diagram 1 of 5 : Testgenerator and speed section of Monitors 19
Figure 7: E16A358 System Wiring Diagram 2 of 5 : Voter section of Monitors 20
st
Figure 8: E16A358 System Wiring Diagram 3 of 5 : Connections of E1612 triple (1 triple in main rack) 21
st
Figure 9: E16A358 System Wiring Diagram 4 of 5 : Connections of E1613 triple (1 triple in main rack) 22
Figure 10: E16A358 System Wiring Diagram 5 of 5 : Connection of speed sensors 23
Figure 11: Dimensions of System E16A358 (main rack and sub racks have identical dimensions) 39
Figure 12: Position of Terminals of System E16A358 (main rack) 40
Figure 13: Front View of Monitor E1668 42
Figure 14: Front View of Test-Generator E1698 47
Figure 15: Front view of E1612 and E1613 51
Figure 16: SP1 as a variable of the acceleration 67

E16A358 Rev:00 Page 5 of 99

1.2. List of Abbreviations

Abbreviation Meaning
altern. alternative
API Technical standards of the "American Petroleum Institute"
A5S BRAUN GmbH Sensor series
AWG/kcmil Code number according to the "American Wire Gauge" System
approx. approximately
CH1 Channel 1
CH2 Channel 2
CH3 Channel 3
CCF Common Cause Failure
CPU Central Processing Unit
DCavg Diagnostic Coverage average
DCS Distributed Control System
DIN Deutsches Institut für Normung (German Institute for Standardization)
dn/dt Change of speed per time unit (Acceleration)
EEPROM Electrically Erasable Programmable Read Only Memory
EMV Electro magnetic compatibility
EN European Norm
F/R Forward/Reverse (Forward/Backward)
HE Height units
HFT Hardware Fault Tolerance
IEC International Electrotechnical Commission
incl. inclusive
IPxx Ingress Protection Number xx according to DIN EN 60529
ISO International Organization for Standardization
LED Light Emitting Diode
LOx Logic Output x
max. maximum
min. minimum
MPU Magnetic Pick Up
MTTFd Mean Time To dangerous Fault
MTTR Mean Time to Restoration
Moo3 Median out of 3 selection logic
n Short term for Speed
NEMAx National Electrical Manufacturers Association Number x
PFDavg Probability of Fault on Demand average
PELV Protective Extra Low Voltage
PLC Programmable Logic Controller
RAM Random Access Memory
RPM Revolutions Per Minute
sec second
SELV Safety Extra Low Voltage
SFF Safe Failure Fraction
SILx Safety Integrity Level x
SPx SetPoint x
SPVx SetPoint Voter x
SP1var SetPoint 1 variable

continued on next page

E16A358 Rev:00 Page 6 of 99

Abbreviation Meaning
TE Width unit
TMR Triple Modular Redundant
Tproof Proof Test Interval
UL/cUL Acc. US Underwriter Laboratories or Canadian Underwriter Laboratories standards
VCC Valve Control Circuit
VCM Valve Control Module
Vdc Volt direct current
Vpp Volt peak-to-peak

1oo2 1 out of 2 voting logic

1oo3 1 out of 3 voting logic
2oo2 2 out of 2 voting logic
2oo3 2 out of 3 voting logic

E16A358 Rev:00 Page 7 of 99

1.3. System Applications and Definitions

1.3.1. System Applications

Protection of rotating machinery such as turbines, expanders, compressors and motors with
safety requirements SIL3/IEC61508 and DIN EN ISO 13849:2008 Cat.3 PLe and/or API 670
versus Overspeed and other Critical Conditions.

1.3.2. Definition of Terms

The protection system incorporates one testgenerator of type E1698 and three modules of
type E1668 for evaluation of speed signals and external trip signals. This modules are named
“Monitors” .
The logic blocks of the Monitors for the evaluation of the external trip signals are named "Vot-
er".
Each of the monitors represents a "Channel" (A, B and C) for processing of the speed signals
and external trip signals.
The logic results of the three Channels are connected internally via the trip relays to form six
2oo3 trip circuits, whereof the circuits I, II and III are used internally as " Trip-Lines".
Valves or other actuators are controlled by triples of “Valve Control Modules” (type E1612 or
E1613) in 2oo3 voting logic. These 2oo3 voting logics are named “Valve Control Circuits”.
The three Trip Lines are used as normally open circuits (high level = "No Trip") and
are internally fed into the triples of Valve Control Modules E1612 or E1613.
Each triple of E1612 or E1613 has three valve control circuits with partially different actuation
logic.
A trip of the Monitors or of the complete system E16A358 can be latched, this function is
named "Trip Lock".

Trip is initiated by de-energizing of the Trip Lines to the E1612/E1613 modules if:
 2oo3 Monitors detect overspeed condition
 2oo3 speed sensors are detected as faulty by Monitors
 2oo3 Monitors detect external trip condition via Voters (1oo2, 2oo2, 2oo3 or 3oo3 select-
able)

E16A358 Rev:00 Page 8 of 99

1.4. Key Features of System E16A358
Trip initiation function is SIL3/IEC61508 and DIN EN ISO 13849:2008 Cat.3 PLe compliant
as stand alone unit (without external testing by PLC or by DCS or by operator).
Total response time from trip event to de-energize of the Valve Control Outputs:
less than 25 milliseconds.
Proof Test Interval = 20 Years (no periodic maintenance required).
Maximum safety at maximum availability by :
 TMR (Triple Modular Redundancy) with three Monitors E1668 and triples of Valve Control
Modules E1612 or E1613
 Triple speed measurement and evaluation by each Monitor
 Variable overspeed alarm depending on acceleration
 Monitoring versus speed low limit to protect against incorrect mounting or malfunction of
speed sensors
 Permanent monitoring of speed sensors
 Evaluation of external trip-condition signals by Voters in each Monitor. Response to signals
selectable for each Voter individually (logic function, low/high: trip, response time)
 Monitoring of Monitors by Testgenerator
 Monitoring of the Valve Control Modules by Testgenerator
 Each Trip Line (trip circuit) in 2oo3 technique
 Trip Lines I, II, III, IV, V, VI are formed by safety relays with force guided contact sets
 Trip Line monitoring with Trip Lock function (selectable)
 2oo3 Valve Control Circuits by triples of E1612/E1613 modules to actuate valves
 Outputs to valves are bi-polar and formed by safety relays with force guided contact sets

Additional features of the E16A358 system:

 Display in each module for measured values and diagnostics
 Alarm outputs via opto relays to DCS
 Free extra alarm from each Monitor
 Up to 6 speed setpoints with 2oo3 logic outputs (if Voters are not required)
 Sensor signal repeater outputs, free floating and push/pull
 Optional analog output (to represent the speed) 0/4..20 mA for each Monitor
 Rotation direction alarm (only with sensors type A5S with rotating direction output)
 Parameters may be set by front keys (protected by code digit) or by RS232 interface
(password protected)
 Redundant PROFIBUS interface to DCS

E16A358 Rev:00 Page 9 of 99

1.5. Ordering Key for Systems E16A358.abcTMFU

E16A358.abcTnnn-Vxx

Vxx = : Release state of system

nnn = : Id of Siemens gas turbine application

T = P : Terminal blocks with pull spring terminals

T = S : Terminal blocks with screw terminals

c = 1 : signal inputs for differnetial Hall sensors A5S

c = 2 : Speed signal inputs for eddy current sensors or MPUs
oder
MPU (magnetinduktive Sensoren)

b = 1 : 1 Voter in each Monitor for external trip conditions

b = 2 : 6 Voters in each Monitor for external trip conditions

a = 0 : without analog output (to represent the speed)

a = 1 : 1 analog output per Monitor A, B, C
a = 2 : 1 SIL3 analog output per Monitor A, B, C

E16A358 Rev:00 Page 10 of 99

1.6. Certifications

1.6.1. Certification IEC61508; SIL3

The E16x3xx system is certified by TÜV-Nord to be compliant with IEC61508; SIL3 as a stand
alone TMR Trip-System for Overspeed Protection and Voters for external Trip Release Condi-
tions, such as emergency stop, boiler protection etc.

1.6.2. Certification DIN EN ISO 13849-1:2008; Cat.3 PLe

The E16x3xx system is certified by TÜV-Nord to be compliant with DIN EN ISO 13849:2008;
Cat.3 PLe as a stand alone TMR Trip-System for Overspeed Protection and Voters for external
Trip Release Conditions, such as emergency stop, boiler protection etc.

E16A358 Rev:00 Page 11 of 99

E16A358 Rev:00 Page 12 of 99
1.7. Safety Data

1.7.1. Safety Data IEC61508; SIL3 for Core System (without E1612/E1613)
System type B; HFT = 1; architecture 2oo3,
Useful lifetime = 20 years
Proof Test Interval = 20 years
SFF = 96,7%
-6
PFDavg = 8,41* 10 at MTTR = 72 h
-6
PFDavg = 9,67* 10 at MTTR = 168 h
-5
PFDavg = 1,85* 10 at MTTR = 1 month
-4
PFDavg = 1,24* 10 at MTTR = 1 year

1.7.2. Safety Data DIN EN ISO 13849-1:2008; Cat.3 PLe (without E1612/E1613)
System type B; HFT = 1; architecture 2oo3, service time 20 years
MTTFd = 489,5 years
DCavg = 93,18%
CCF = 80

E16A358 Rev:00 Page 13 of 99

2. System Structure and I/Os

2.1. System Structure

The structure of the system is shown in chapter 2.1.4 (figures 2, 3, 4 and 5).
The wiring of the system is shown in chapter 2.1.5 (figures 6 ,7, 8, 9 and 10).
The indexes ”see 2.x.x” in these figures refer to the corresponding chapters 2.x.x. which de-
scribe the according functions.

2.1.1. Speed Sensors

With versions E16A358.xx1:
Three A5S differential Hall effect sensors, with integrated signal amplifier are placed at the
machine shaft.
The differential Hall effect sensors A5S are not susceptible to uniform external magnetic
fields. Air gap variations between machine and sensor do not create false signals.
With versions E16A358.xx2:
Three speed signals from eddy current sensors or MPU sensors are evaluated.

2.1.2. System Components

The system comprises one Testgenerator E1698, three Monitors E1668 and Valve Control
Modules E1612/E1613. The number of E1612 and E1613 and their position within the rack de-
pend on application requirements defined by customers.

The Testgenerator E1698 checks and validates the performance of the Monitors, of the Trip
Lines and of the Valve Control Modules E1612/E1613 by tests.

The Monitors E1668 monitor the sensors, the speed and the external trip conditions.
Trip is initiated by de-energizing of the Trip Lines to the E1612/E1613 modules if:
 2oo3 Monitors detect overspeed condition
 2oo3 speed sensors are detected as faulty by Monitors
 2oo3 Monitors detect external trip condition via Voters (1oo2, 2oo2, 2oo3 or 3oo3 select-
able)

The Valve Control Modules E1612/E1613 actuate the valves in 2oo3 voting logic. One triple of
Valve Control Modules provides three independent 2oo3 Valve Control Circuits (VCC1, VCC2,
VCC3).
Each Valve Control Module within a triple belongs to one of the Trip Lines I, II or III.
Each of the individual Valve Control Modules comprises three Channels (CH1, CH2, CH3) with
sub-logics, where the various input signals and the status of the respective Trip Line are logi-
cally linked on board to control the CH1, CH2 and CH3 trip relays.
The contacts of the three CH1 trip relays are connected on the rack backplane to form the
VCC1. The outputs of VCC1 switch the Valve Load Supply of valve 1 in a bi-polar manner (L+
and M). The same applies for CH2 and CH3.

The Monitors, the Testgenerator and the Valve Control Modules are interconnected via the rack
backplane.
The rack backplane does not contain any active components.

2.1.3. System Design

The system is designed for bulkhead mounting.

E16A358 Rev:00 Page 14 of 99

2.1.4. System Structure Diagrams

Trip-Line III 2oo3 Valve

L+
Control Circuits
Trip-Line II
L+
Trip-Line I Feedback
see figures
L+ 4 and 5 II
I III
I II III Trip Lines
see 2.3.9

spark extinguishing

Trip IV
Trip V
Trip VI Wiring of Trip Relay contacts on
in 2oo3 System-Backplane forming six 2oo3 Trip Lines
(only 1 of 3 Trip
Lines shown)
see 2.3.8

I II III IV I II III IV I II III IV

V V V
Trip Relays Trip Relays Trip Relays

Monitoring I Monitoring I Monitoring

of Trip Lines with II of Trip Lines with II of Trip Lines with
Trip Lock III Trip Lock III Trip Lock

Speed-Trip
Logic Output 2oo3
in 2oo3
see 2.3.7
Rotation Direction A
Detection B Speed- Speed- Speed-
see 2.3.6
C Trip Trip Trip
optional A Trip by Trip by Trip by
Analog Output Voter Voter Voter
0/4 … 20 mamps B
C (from (from (from
see 2.3.5
Diagram 2) Diagram 2) Diagram 2)
A SP1B
SP1B valid B SP1B
see 2.2.8 C SP1B

Starter A Starter
Override of SP2 B Starter
see 2.2.7 C Starter

Speed Alarm SP3 Data- Data- Data-

see 2.3.4 Interface Interface Interface

Warning Alarm A E1668 E1668 E1668

of Monitor B
Feedback C
Feedback A
Feedback B

see 2.3.3 Monitor A Monitor B Monitor C

C

Sensor Signal A
Repeater B
Test I
Test II
Test III

Test I
Test II
Test III

Test I
Test II
Test III
see 2.3.2 C
Test

Test

Test

F/R F/R F/R F/R F/R F/R F/R F/R F/R

ZT

ZT

ZT

fT fA fB fC fT fB fA fC fT fC fA fB

Data-
Interface

System Alarm 1
A
see 2.3.1 Forced
Trip B
System Alarm 2 C
see 2.3.1
Test A
Test B
Test C

E1698 Test
Frequency fT
Test- fT
generator
Test I Test I
Test II Test II
Test IIII Test III
see 2.2.6
I
Start Auto-Test Feed-
II
see 2.2.5 back
III
Test Lock
see 2.2.4
F/R F/R F/R
Alarm Reset to all modules fA fB fC
see 2.2.3

Speed Signals
see 2.2.1
B
Direction Signals
= terminal blocks see 2.2.2
A C

Sensor
Rev. 00 / 11.2012
Pole Wheel

Figure 2: E16A358 System Structure Diagram 1 of 4 : Testgenerator and speed section of Monitors

E16A358 Rev:00 Page 15 of 99

 Part of Part of Part of
Monitor A Monitor B Monitor C

Trip by Voter Trip by Voter Trip by Voter

(to Diagram 1) (to Diagram 1) (to Diagram 1)

LO1
Input Signals 1
Soft- Soft- Soft- 2oo3 Trip
Voter 1 2 Voter 1
ware- ware- ware-
3 Voter Voter Voter altern.
see 2.2.10 n > SPV1

LO2
Input 1
Soft- Soft- Soft- 2oo3 Trip
Signals 2 Voter 2
ware- ware- ware-

If used as Speed Alarm Output : low / high at 'n > SPV' selectable
Voter 2 3 Voter Voter Voter altern.
n > SPV2

LO3
Input 1
Soft- Soft- Soft- Trip
see 2.2.11

Signals 2 2oo3
ware- ware- ware- Voter 3
Voter 3 Voter Voter Voter altern.
3
n > SPV3

If used as Output "Trip of Voter" : low = Trip

Input Signals for Voters 2 … 6 .

LO4
Input 1
Soft- Soft- Soft- 2oo3 Trip
Signals 2 Voter 4
ware- ware- ware-
Voter 4 3 Voter Voter Voter altern.
n > SPV4

Logic Outputs to DCS

LO5
Input 1
Soft- Soft- Soft- 2oo3 Trip
Signals 2 Voter 5
ware- ware- ware-
Voter 5 3 Voter Voter Voter altern.

see 2.3.10
n > SPV5

LO6
Input 1
Soft- Soft- Soft- 2oo3 Trip
Signals 2 ware- ware- ware- Voter 6
Voter 6 3 Voter Voter Voter altern.
n > SPV6

Rev. 00 / 11.2012

Figure 3: E16A358 System Structure Diagram 2 of 4 : Voter section of Monitors

E16A358 Rev:00 Page 16 of 99

 Valve Control Circuit 3
L+
Valve 3
M
Valve Control Circuit 2
L+
Valve 2
M
Valve Control Circuit
L+
Valve 1
M
see 2.4.3 2oo3 Valve
Output see 2.3.12

contacts
protected with
3.15 amps
each
Wiring of trip relay contacts of Channels 1, 2 and 3 on
System Backplane forming three bi-polar switching 2oo3 Valve Control Circuits

Switch Command I
Feedback II addit.
for Channel 1 Valve
see 2.3.11 III
Control
Switch Command I
Feedback Module
II
for Channel 2 Triples
see 2.3.11 III
Switch Command I
Feedback
II
for Channel 3
see 2.3.11 III

M
M
M
CH1 CH2 CH3 CH1 CH2 CH3 CH1 CH2 CH3
Trip Trip Trip Trip Trip Trip Trip Trip Trip
Relay Relay Relay Relay Relay Relay Relay Relay Relay

Trip-Line
I
II
III

Switch Command I
for Channel 1 II
see 2.2.12 III
Command Release I
for Channel 1
see 2.2.14 II
III
Secondary ≥1 & ≥1 & ≥1 &
Command Release I
for Channel 1 II
see 2.2.14 III
& & &
Secondary I
Trip Criterion A
II
for Channel 1
see 2.2.13 III
≥1 ≥1 ≥1
Secondary I & & &
Trip Criterion B II
for Channel 1
III
see 2.2.13

Switch Command I
for Channel 2 II
see 2.2.12 III

Secondary I
Trip Criterion II
for Channel 2
see 2.2.13 III

Switch Command I
for Channel 3 II
see 2.2.12 III

Secondary I
Trip Criterion II
for Channel 3
see 2.3.13 III

I L+
Feed-
back II L+
III L+
Diagnosis Diagnosis Diagnosis
Reset
OK OK OK

Data- Data- Data-

I
Trip-Line Interface Interface Interface
Test II
III
E1612 Module I E1612
E1612 Module
Module III E1612 Module III
Data-
Interface

E1698

= Terminals Rev. 00 / 11.2012

Figure 4: E16A358 System Structure Diagram 3 of 4 : Triple of E1612 Valve Control Modules

E16A358 Rev:00 Page 17 of 99

 Valve Control Circuit 3
L+
Valve 3
M
Valve Control Circuit 2
L+
Valve 2
M
Valve Control Circuit 1
L+
Valve 1
M
see 2.4.3 2oo3 Valve
Output see 2.3.12

contacts
protected with
3.15 amps
each
Wiring of Trip Relay contacts of Channels 1, 2 and 3 on
System Backplane forming three bi-polar switching 2oo3 Valve Control Circuits

Switch Command I
Feedback II addit.
for Channel 1 Valve
see 2.3.11 III
Control
Switch Command I
Feedback Module
II
for Channel 2 Triples
see 2.3.11 III
Switch Command I
Feedback
II
for Channel 3
see 2.3.11 III

M
M
M
CH1 CH2 CH CH1 CH2 CH3 CH1 CH2 CH3
Trip Trip Trip Trip Trip Trip Trip Trip Trip
Relay Relay Relay Relay Relay Relay Relay Relay Relay

Switch Command I
for Channel 1 II
see 2.2.12 III
Secondary I
Trip Criterion A
II
for Channel 1
see 2.2.13 III
≥1 & ≥1 & ≥1 &
Secondary I
Trip Criterion B II
for Channel 1
see 2.2.13 III

I
II
III
Trip-Line

No Trip-Line By- I
pass Release & & & & & &
II
for Channel 2
see 2.2.15 III

≥1 & ≥1 & ≥1 &

Trip-Line-Bypass I
& & &
for Channel 2 II
see 2.2.15 III

Switch Command I
for Channel 2 II
see 2.2.12 III

Secondary I
Trip Criterion II
for Channel 2
see 2.2.13 III

Switch Command I
for Channel 3 II
see 2.2.12 III

Secondary I
Trip Criterion II
for Channel 3
see 2.2.13 III

I L+
Feed-
back II L+
III L+
Diagnosis Diagnosis Diagnosis
Reset
OK OK OK

Data- Data- Data-

I
Trip-Line Interface Interface Interface
Test II
III
E1613 Module I E1613 Module II E1613 Module III
Data-
Interface

E1698

= Terminals Rev. 00 / 11.2012

Figure 5: E16A358 System Structure Diagram 4 of 4 : Triple of E1613 Valve Control Modules

E16A358 Rev:00 Page 18 of 99

 2.1.5.
+ Supply X1.1_ PE

1N
X3.1

L+
5060

Figure 6:
Sensor connections 0V
Monitor A X3.2 X1.2_ L+

E1698
Speed Monitor A
* = only with X3.3 X1.3_ M
sensors A5S3…. F/R* Power Supply of
X3.5 X1.8_ L+ E1668 Monitors and
Screen Monitor B
X3.4 X1.9_ M E1698 Test-Generator
Speed Signal Speed 24 volts dc
X3.6 X1.14_ L+ see 2.4.1
Repeater Output
Reference Monitor C
Monitor A X3.7

M
X1.15_ M

+ Supply X2.1_ System

E1668,E1698
E1612,E1613
X4.1 Outputs
Sensor connections 0V X2.2_ Alarm 1
X4.2 System Alarm

Speed Signals
Monitor B X2.3_ System
Speed from testgenerator
* = only with X4.3 X2.4_ Alarm 2
F/R* see 2.3.1
sensors A5S3…. X4.5
Screen

Direction Signals F/R

X4.4 X1.4 Monitor A
Speed Signal Speed _
X1.5_ Outputs
Repeater Output X4.6 Monitor
Reference X1.10_ Warning Alarm
Monitor B X4.7 Monitor B
X1.11_ from monitor

Connection of sensors see 2.1.6

+ Supply X1.16_ see 2.3.3
X5.1 Monitor C
Sensor connections 0V X1.17_
Monitor C X5.2
Speed

Speed Sensor Signal Repeater Outputs

* = only with X5.3 X1.6.
System Wiring Diagrams

F/R* Monitor A
sensors A5S3…. X5.5 X1.7_ Outputs
Screen Speed Alarm SP3
X5.4 X1.12
Monitor B from monitor
Speed Signal Speed X1.13_
Repeater Output X5.6 see 2.3.4

see 2.3.3
see 2.2.2
see 2.2.1
Reference X1.18_
Monitor C X5.7 Monitor C
X1.19_
X1.20
X2.11_
14 Monitor A
X2.12_
Outputs
X7.1 14
Monitor A X2.13_ Direction Alarm
high = Starter Monitor B
Monitor B X7.2 14
X2.14_ from monitor
(override SP2)
14 see 2.3.6
see 2.2.7

E16A358 Rev:00
Monitor C X7.3 X2.15_
14 Monitor C
X2.16_
high =Test Lock X8.6 14
see 2.2.4
X2.5_ L+ I L+ Supply of
Trip-Lines and
= Start Auto-Test-Sequence E1612/E1613 Valve
X8.5 L+ II

(Reference:
see 2.2.5 X2.7_
Control Modules
24 volts dc
X2.9_ L+ III
see 2.4.2
Trip-Line I X7.4
high =Test of
Trip-Line Trip-Line II X7.5

Logic Signal Inputs

see 2.2.6 Trip-Line III X7.6 X14.1
Trip IV
X14.2
Outputs
X14.3 Trip Line
Monitor A X9.5
Trip V IV, V, VI
high =SP1B valid Monitor B X9.6 X14.4
see 2.3.8
see 2.2.8
Monitor C X14.6 X14.7
Trip VI
X14.8
= Reset of Alarms X8.4
terminals 3.X1, 3.X9, 3.X15 of Power Supply) see 2.2.3

E16A358 System Wiring Diagram 1 of 5 : Testgenerator and speed section of Monitors

Diagram 2
in de-energized status
all contacts are shown

Rev. 00 / 11.2012
E16-System

Page 19 of 99
 Figure 7:
Diagram 1
E16-System
Signal Inputs I X10.1 Trip Voter 1
II .X10.2 X13.1 LO1 alternative
of Voter 1
see 2.2.10 n > SP1
III X10.3

I X10.4 Trip Voter 2

Signal Inputs X13.2 LO2 alternative
II X10.5
of Voter 2 n > SP2
III X10.6

I X11.1 Trip Voter 3

Signal Inputs X13.3 LO3 alternative
II X11.2
of Voter 3 n > SP3
III X11.3
see 2.3.10

see 2.2.11
I X11.4 Trip Voter 4
Signal Inputs
Logic Outputs

X13.4 LO4 alternative

II X11.5
of Voter 4

Signal Inputs
n > SP4
III X11.6

Voter 2 through 6
I X12.1 Trip Voter 5
Signal Inputs X13.5 LO5 alternative
II X12.2

only with systems E16A358.x21

of Voter 5 n > SP5
III X12.3

I X12.4 Trip Voter 6

E16A358 Rev:00
Signal Inputs X13.6 LO6 alternative
II X12.5
of Voter 6 n > SP6
III X12.6

Speed Trip
X14.5 Logic Output
see 2.3.7

E16A358 System Wiring Diagram 2 of 5 : Voter section of Monitors

X15.1 +
Monitor A
X15.2
optional

see 2.3.5

X15.3 + Monitor B
0/4 … 20 mamps

.3.3
X15.4
Analog Outputs

(not with versions E16A358.0xx)

X15.5 +
Monitor C
X15.6

Rev. 00 / 11.2012

Page 20 of 99
 st
st

th
th
th
th
th

rd
rd

nd
nd
Switch Command I X313.1 X315.1 I Load Supply L+
for Channel 1 II X313.6 X315.6 II for Channel 1
see 2.2.12 III III see 2.4.3

Figure 8:
X313.11 X315.11

X317.1 I Load Supply M

X317.6 II for Channel 1
Command Re- I X313.4
X317.11 III see 2.4.3
lease II X313.9
for Channel 1 III X313.14
see 2. 2.14 X317.4 I Control Command
II
Feedback
X317.5
for Channel 1
X311.13 III
Bypass for Com- see 2.3.11
I X313.5
mand Release
II X313.10 2oo3-switched
for Channel 1 X315.4 +
see 2. 2.14 III X313.15 Valve Output

7 triple: X471, X473, X475, X477

6 triple: X461, X463, X465, X467
5 triple: X451, X453, X455, X457
4 triple: X441, X443, X445, X447
3 triple: X431, X433, X435, X437
2 triple: X421, X423, X425, X427
1 triple: X411, X413, X415, X417
4 triple: X341, X343, X345, X347
3 triple: X331, X333, X335, X337
2 triple: X321, X323, X325, X327
1 triple: X311, X313, X315, X317

for Channel 1
X315.5 - see 2.3.12

Secondary I X313.2 X315.2 I Load Supply L+

Trip Criterion A II II
X313.7 X315.7 for Channel 2
for Channel 1 see 2.4.3
III X313.12 X315.12 III
see 2. 2.13

X317.2 I Load Supply M

Secondary X317.7 II for Channel 2
I X313.3
Trip Criterion B X317.12 III see 2.4.3
II X313.8
The main rack may be equipped with maximum 4 triples.

for Channel 1
III X313.13
see 2. 2.13 X317.9 I Control Command
The second sub rack has terminal block identifications X5yy.

II
Feedback
X317.10
for Channel 2 valid for a triple of E1612 in the first triple of the main rack.
X311.14 III
I X311.1
see 2.3.11
Switch Command
for Channel 2 II X311.5 2oo3-switched
X315.9 +

E16A358 Rev:00
see 2.2.12 III X311.9 Valve Output
for Channel 2
X315.10 - see 2.3.12

Secondary I X311.2 X315.3 I Load Supply L+

The first sub rack has terminal block identifications X4yy (yy as shown below).

Trip Criterion II II
X311.6 X315.8 for Channel 3
for Channel 2 see 2.4.3
III X311.10 X315.13 III
see 2. 2.13
Each sub rack may be equipped with maximum 7 triples (21 Valve Control Modules)

X317.3 I Load Supply M

X317.8 II for Channel 3
Switch Command I X311.3
X317.13 III see 2.4.3
for Channel 3 II X311.7

st
see 2.2.12 III X311.11
X317.14 I Control Command
II
Feedback
X317.15
for Channel 3
X311.15 III
Secondary I X311.4
see 2.3.11
Trip Criterion II X311.8 2oo3-switched
for Channel 3 X315.14 +
III X311.12 Valve Output
see 2. 2.13
for Channel 3
X315.15 -

Rev. 00 / 11.2012
see 2.3.12
Each triple of Valve Control Modules of type E1612 or E1613 has 4 terminal blocks with a 3 digit identification.

E16A358 System Wiring Diagram 3 of 5 : Connections of E1612 triple (1 triple in main rack)
The assignment of terminals and terminal block numbers to the Valve Control Modules as shown below are

Page 21 of 99
 Switch Command I X313.1 X315.1 I Load Supply L+
for Channel 1 II X313.6 X315.6 II for Channel 1
see 2.2.12 III III see 2.4.3

Figure 9:
X313.11 X315.11

X317.1 I Load Supply M

Secondary X317.6 II for Channel 1
I X313.2
Trip Criterion A X317.11 III see 2.4.3
II X313.7
for Channel 1
III X313.12
see 2. 2.13 Control Command
X317.4 I
Feedback
X317.5 II
for Channel 1
X311.13 III see 2.3.11
Secondary I X313.3
Trip Criterion B II 2oo3-switched
X313.8
for Channel 1 X315.4 +
III X313.13 Valve Output
see 2. 2.13 for Channel 1
X315.5 - see 2.3.12

Switch Command I X311.1 X315.2 I Load Supply L+

for Channel 2 II X311.5 X315.7 II for Channel 2
see 2.2.12 III X311.9 X315.12 III see 2.4.3

X317.2 I Load Supply M

Secondary X317.7 II for Channel 2
I X311.2
Trip Criterion X317.12 III see 2.4.3
II X311.6
for Channel 2
III X311.10
see 2. 2.13 Control Command
X317.9 I
Feedback
X317.10 II
for Channel 2 valid for a triple of E1613 in the first triple of the main rack.
X311.14 III see 2.3.11
Trip-Line-Bypass I X313.5
for Channel 2 II X313.10 2oo3-switched
X315.9 +

E16A358 Rev:00
see 2. 2.15 III X313.15 Valve Output
for Channel 2
X315.10 - see 2.3.12

No Release for Trip- I X313.4 X315.3 I Load Supply L+

Line-Bypass II II for Channel 3
X313.9 X315.8
for Channel 2 see 2.4.3
III X313.14 X315.13 III
see 2. 2.15

X317.3 I Load Supply M

X317.8 II for Channel 3
Switch Command I X311.3
X317.13 III see 2.4.3
for Channel 3 II X311.7

st
see 2.2.12 III X311.11 Control Command
X317.14 I
Feedback
X317.15 II
for Channel 3
X311.15 III see 2.3.11
Secondary I X311.4
Trip Criterion II 2oo3-switched
X311.8
for Channel 3 X315.14 +
III X311.12 Valve Output
see 2. 2.13 for Channel 3
X315.15 - see 2.3.12

Rev. 00 / 11.2012

E16A358 System Wiring Diagram 4 of 5 : Connections of E1613 triple (1 triple in main rack)
The assignment of terminals and terminal block numbers to the Valve Control Modules as shown below are

Page 22 of 99
2.1.6. Connection of Sensors to the Speed Signal Inputs

Pin Nos. of BRAUN Sensors A5S...

Lead colors of BRAUN cables Terminals
Marks for BRAUN cable leads. Mark D only with sensors equipped with direction detection Monitor
Cable screen must be connected to screen bar ! A B C

brown
1 C + Sensor Supply
X3.1 X4.1 X5.1
green Reference 0 volts
3 B X3.2 X4.2 X5.2
A5S.. white Speed Signal
X3.3 X4.3 X5.3
4 A
Direction – Signal *
yellow or red X3.5 X4.5 X5.5
2* D
X3.4 X4.4 X5.4
S * only with sensors equipped with direction detection

Alarm ** only with D461.21 and

sensors with direction
brown 8 6
1 C + Sensor Supply
24 13 X3.1 X4.1 X5.1
A5S1.. green Reference 0 volts
3 B 25 10 X3.2 X4.2 X5.2
+ white Speed Signal
A 23 11 X3.3 X4.3 X5.3
D461 4
Direction – Signal ** D461.11U1
yellow or red 22 ** D461.21U1 12** X3.5 X4.5 X5.5
2* D
X3.4 X4.4 X5.4
1 2
S
L+ N
24 volts dc

Speed Signal
X3.3 X4.3 X5.3
Eddy Current Sensor Reference 0 volts
with negative X3.1 X4.1 X5.1
EC-
power supply - 24 volts dc
X3.2 X4.2 X5.2

X3.4 X4.4 X5.4

Speed Signal
X3.3 X4.3 X5.3
Eddy Current Sensor Reference 0 volts
with positive X3.2 X4.2 X5.2
EC+
power supply + 24 volts dc
X3.1 X4.1 X5.1

X3.4 X4.4 X5.4

Speed Signal
X3.3 X4.3 X5.3
Reference 0 volts
Magnetic Pick-Up X3.2 X4.2 X5.2
MPU

X3.4 X4.4 X5.4

Rev. 00 / 11.2012

Figure 10: E16A358 System Wiring Diagram 5 of 5 : Connection of speed sensors

E16A358 Rev:00 Page 23 of 99

2.2. Inputs of the System

2.2.1. Speed Signal

The speed signals are internally wired to all three Monitors in parallel.

With versions E16A358.xx1:

The speed signal inputs match the values of sensors A5S…
The speed signal inputs are rated SIL3/IEC61508 if sensors of type A5S. (also via barriers
D461) are connected. For other sensors this is only valid, if the sensor supplier guarantees,
that the sensors will not give erratic speed signals due to a common cause failure. The instruc-
tions of the sensor supplier must be observed.
Technical data of inputs see 3.1.1.1

With versions E16A358.xx2:

The signal inputs match the values of eddy current sensors or of MPUs.
The speed signal inputs are rated SIL3/IEC61508, if the sensor supplier guarantees, that the
sensors will not give erratic speed signals due to a common cause failure. The instructions of
the sensor supplier must be observed.
Technical data of inputs see 3.1.1.2

2.2.2. Rotation Direction Signal (F/R : Forward/Reverse)

The rotating direction signal inputs match the values of BRAUN sensors A5S with rotating di-
rection signal.
The rotating direction signals are internally wired to all three Monitors in parallel.
The rotating direction signal inputs are rated SIL3/IEC61508 (valid only for sensors A5S3..).
Technical data of inputs see 3.1.2

2.2.3. Reset of Alarms

The Reset signal is internally connected to all modules in parallel. It resets a no longer prevail-
ing, but latched alarm or trip condition.
A signal transition from low to high will reset a latched alarm.
Minimum time of reset signal: 0.5 s to ensure correct reset of all modules.
The input Reset of Alarms is rated SIL3/IEC61508 provided that the signal source is rated
SIL3/IEC61508.
Technical data of input see 3.1.3

2.2.4. Test Lock

A high signal will abort any running system inherent cyclic proof test and inhibit further tests as
long as the signal is high. If the signal is true for more than 60 minutes, the alarms System
Alarm 1 and System Alarm 2 are initiated.
The input Test Lock is rated SIL3/IEC61508 provided that the signal source is rated
SIL3/IEC61508.
Technical data of input see 3.1.3

2.2.5. Start Auto Test Sequence

A signal transition from low to high will start an automatic test sequence. First the test (if se-
lected, see step P03.01 of E1698) of the Trip Lines for the Valve Control Modules is performed,
two minutes later the test of the Monitors is performed.
The input Start Auto Test Sequence is rated SIL3/IEC61508 provided that the signal source is
rated SIL3/IEC61508.
Technical data of input see 3.1.3

E16A358 Rev:00 Page 24 of 99

2.2.6. Test I , Test II , Test III
The inputs Test I, II, III are enabled, if the Testgenerator E1698 is programmed to external Trip
Line Test (see parameter P03.01 of E1698).
If the input is high, the corresponding Trip Line will switch to trip condition.
The inputs may be configured to inhibit simultaneous test of two or three Trip Lines.
The input Test I, II, III are rated SIL3/IEC61508 provided that the signal source is rated
SIL3/IEC61508.
Technical data of inputs see 3.1.3

2.2.7. Starter (Override of SP2)

Each Monitor has one input for the starter condition. As long as the input is high, the starter
condition is true.
During starter condition the monitoring versus a speed low limit (SP2) is disabled.
The inputs Starter are rated SIL3/IEC61508 provided that the signal source is rated
SIL3/IEC61508.
Technical data of inputs see 3.1.3

2.2.8. SP1B Valid

Each Monitor has one input to select SP1B as trip setpoint.
As long as the input is high, setpoint value SP1B (see step P03.03 of E1668) is true.
With open input (low), setpoint value SP1A (see P03.00 of E1668) is true.
The inputs SP1B Valid are rated SIL3/IEC61508 provided that the signal source is rated
SIL3/IEC61508.
Technical data of inputs see 3.1.3

2.2.9. Chapter left blank intentionally

2.2.10. External Signals for Voter 1

The input signals for Voter 1 are internally connected to all Monitors in parallel.
The input load of Voter 1 meets the requirements for the redundant outputs of a failsafe PLC
(load > 45 mA per input).
The signal truth level (high or low as trip condition), the voting principle (1oo2, 2oo2, 2oo3,
3oo3) and the response time is selectable. Configuration of the Voter is done in steps P10.xx of
E1668.
The inputs Voter 1 are rated SIL3/IEC61508 provided that the signal source is rated
SIL3/IEC61508.
Technical data of inputs see 3.1.4

2.2.11. External Signals for Voters 2 … 6

The input signals for Voters 2 … 6 are internally connected to all Monitors in parallel.
The signal truth level (high or low as a trip condition), the voting principle (1oo2, 2oo2, 2oo3,
3oo3) and the response time is selectable for each Voter individually. Configuration of Voters is
done in steps P11.xx to P15.xx of E1668.
The inputs Voter 2…6 are rated SIL3/IEC61508 provided that the signal source is rated
SIL3/IEC61508.
Technical data of inputs see 3.1.3
Note:
Systems E16A358.x1x do not have inputs for Voters 2 … 6 .

E16A358 Rev:00 Page 25 of 99

2.2.12. Switch Command to E1612/E1613
Each sub-logic within a 2oo3 Valve Control Circuit has an individual input for the Switch Com-
mand of the valve. Thereby the 2oo3 structure is secured also regarding the signal transfer
from the DCS to the E16 system.
The Switch Commands are logically linked with further input signals and with the status of the
corresponding Trip Line within the Valve Control Module E1612/E1613.
The active level of the Switch Command signal is high (to activate the valve).
The inputs Switch Command are rated SIL2/IEC61508 provided that the signal source is rated
SIL2/IEC61508.
Technical data of inputs (category 1) see 3.1.5

2.2.13. Secondary Trip Criterion to E1612/E1613

Each sub-logic within a 2oo3 Valve Control Circuit has minimum one input for a secondary trip
criterion.
If a secondary trip criterion is active, the corresponding Switch Command of this Valve Control
Circuit is disabled.
The active level of the input is high (to deactivate the valve).
The inputs Secondary Trip Criterion are rated SIL2/IEC61508 provided that the signal source is
rated SIL2/IEC61508.
Technical data of inputs (category 3) see 3.1.5

2.2.14. Command Release and Bypass Command Release to CH1 of E1612

Each sub-logic within the Channel 1 of module type E1612 has an input for command release
and an input to bypass the command release input.
At least one of these two inputs must be permanently active to enable the Switch Command of
Channel 1 of E1612.
The active level of the inputs is high.
The inputs Command Release and Bypass Command Release to Channel 1 of E1612 are rat-
ed SIL3/IEC61508 provided that the signal source is rated SIL3/IEC61508.
Technical data of inputs (category 2) see 3.1.6

2.2.15. Trip Line Bypass / No Trip Line Bypass Release to CH2 of E1613
Each sub-logic within Channel 2 of module type E1613 has an input Trip Line Bypass and an
input No Trip Line Bypass Release.
If the input No Trip Line Bypass Release is active, then the Switch Command is only enabled if
the corresponding Trip Line is not in trip status. The input Trip Line Bypass is then disabled.
If the input No Trip Line Bypass Release is not active and the input Trip Line Bypass is active,
then the Switch Command of CH2 of E1613 is enabled independent of the status of the corre-
sponding Trip Line (valve may be actuated during trip state of E16 system).
The active level of the inputs is high.
The inputs Trip Line Bypass and No Trip Line Bypass Release to CH2 of E1613 are rated
SIL3/IEC61508 provided that the signal source is rated SIL3/IEC61508.
Technical data of inputs (category 2) see 3.1.6

E16A358 Rev:00 Page 26 of 99

2.3. Outputs of the System

2.3.1. System Alarm 1 and System Alarm 2

The alarms System Alarm 1 and System Alarm 2 from Testgenerator E1698 are initiated if at
least one of the following conditions is true:
 a Monitor does not show correct response
 a Monitor issues a Sensor Fault alarm
 the feedback signals from the Valve Control Modules do not show correct response (if mo-
nitored)
 a Monitor issues Antivalence fault alarm of Voter inputs
Note:
If the alarms System Alarm 1 and System Alarm 2 do not have the same status, the Testgen-
erator E1698 itself has a malfunction. For required action see 3.10.

The outputs System Alarm 1 and System Alarm 2 are rated SIL3/IEC61508.
Technical data of outputs see 3.2.3

2.3.2. Speed Signal Repeater

Each Monitor repeats the speed signal of its main sensor (Monitor A repeats sensor signal A) to
the periphery at a non-reactive pulse signal output.
The Speed Signal Repeater Outputs are rated SIL2/IEC61508.
Technical data of outputs see 3.2.1

2.3.3. Monitor Warning Alarm

The Monitor warning alarm (for each Monitor individually) is initiated if at least one of the fol-
lowing conditions is true:
 Monitor initiates trip (due to overspeed or Voter), if selected in step P02.11 of E1668
 Deviation of its own sensors versus both sensors of neighbor Monitors, if monitored
selection in steps P02.07 through P02.09 of E1668
 Measured speed lower than SP2 (after starter condition), if monitored
selection in step P02.06 of E1668
 Sensor circuit fault, if monitored
selections in steps P02.04 and P02.05 of E1668
 If starter condition is still true and speed exceeds 50% of nominal speed (as set in step
P01.03), if selected in step P02.06
Note:
The Monitor Warning Alarm is not initiated, if the Monitor detects antivalence at its Voter inputs.
This status is forwarded to the Testgenerator E1698 which then initiates the alarms System
Alarm 1 and System Alarm 2. In case of alarm chapter "Troubleshooting " of the manual must
be consulted.

The outputs Monitor Warning Alarm are rated SIL2/IEC61508.

Technical data of outputs see 3.2.3

2.3.4. Speed Alarm SP3

Each Monitor has a free adjustable speed alarm output SP3.
Configuration of SP3 in steps P05.xx of E1668.
The outputs Speed Alarm SP3 are rated SIL2/IEC61508.
Technical data of outputs see 3.2.3

E16A358 Rev:00 Page 27 of 99

2.3.5. Analog Outputs proportional to measured speed (Option)
The (optional) analog outputs have a range of 0/4 .. 20 mA.
Configuration of the analog output in steps P08.xx of E1668.
The analog outputs of versions E16A358.1xx are rated SIL2/IEC61508.
The analog outputs of versions E16A358.2xx are rated SIL3/IEC61508.
Technical data of outputs see 3.2.2

2.3.6. Rotation Direction Detection

If operated with sensors A5S with rotating direction signal, the sense of direction is signalized.
Each Monitor votes the rotating direction input signals 2oo3. Each Monitor has a rotating direc-
tion detection output.
The outputs Rotating Direction Detection are rated SIL2/IEC61508.
Technical data of outputs see 3.2.3

2.3.7. Speed Trip Logic (2oo3 voted)

Speed trip logic output is actuated, if minimum 2 of the 3 Monitors detect overspeed condition.
If overspeed status is latched, the alarm will persist until reset.
Output high : no overspeed trip
Output low : overspeed trip
The Speed Trip Logic Output is rated SIL2/IEC61508.
Technical data of output see 3.2.4

2.3.8. Trip Lines IV, V, VI

The Trip Lines IV, V, VI are 2oo3 circuits formed by contacts of safety trip relays IV and V of
Monitors A,B,C.
Trip is initiated if minimum two Monitors E1668 are in trip status.
Trip Lines IV, V, VI are intended to signalize the trip to a DCS or PLC.
The outputs of Trip Lines IV, V, VI are rated SIL3/IEC61508.
Technical data of output see 3.2.5

2.3.9. Chapter left blank intentionally

2.3.10. Logic Outputs LO1 through LO6 (voted 2oo3)

The Logic Outputs LO may be assigned to signalize a Voter trip or to a speed alarm.
If assigned to Voter trip : output high : no trip of Voter
output low : trip of Voter
If assigned to speed alarm: output high/low if n > SP is selectable.
The Logic Outputs LO1 through LO6 are rated SIL2/IEC61508.
Technical data of outputs see 3.2.4

2.3.11. Command Feedback from E1612/E1613

Three independent feedback outputs are available per Valve Control Circuit.
These feedback signals reflect the command status of the 2oo3 switched Valve Control Output
to the DCS or may be hardwired to other Valve Control Circuits for example as Command Re-
lease signals.
Output high : Valve Control Output active
Output low : Valve Control Output not active
The outputs Command Feedback are non-reactive and rated SIL3/IEC61508.
Technical data of outputs see 3.2.7

E16A358 Rev:00 Page 28 of 99

2.3.12. 2oo3 Switched Valve Control Outputs from E1612/E1613
Each Valve Control Circuit has a bi-polar switched 2oo3 Valve Control Output for L+ and M ac-
tivation of valves or other actors.
If the Valve Control Circuit is switched on both outputs are low resistive versus Valve Load
Supply inputs.
If the Valve Control Circuit is switched off both outputs are high resistive and carry a potential
of approximately 3 Vdc for diagnostic purposes.
If the outputs are not used a resistor of 4,7 kOhm (0.25 W) must be connected as load to avoid
a diagnostic alarm.
The Valve Control Outputs are rated SIL3/IEC61508.
Technical data of outputs see 3.2.8

E16A358 Rev:00 Page 29 of 99

2.4. Power Supply

2.4.1. Power Supply of Monitors E1668 and Testgenerator E1698

The L+ supply of the Testgenerator is formed by an internal power rail by the three Monitor L+
supplies (decoupled by diodes).
The M supply of the Testgenerator is formed by an internal power rail by the three Monitor M
supplies.
Technical data see 3.3.1

2.4.2. L+ Supply of Trip Lines I, II, III and Valve Control Modules E1612/E1613
The L+ power supply of the E1612/E1613 is provided by the respective individual Trip Line L+
supply.
The M supply of the E1612/E1613 is formed by an internal power rail by the three Monitor M
supplies.
Technical data see 3.3.2

2.4.3. Valve Load Supply of the 2oo3 Valve Control Circuits

Each Channel within a 2oo3 Valve Control Circuit has individual Valve Load Supply inputs for
trip relay contact feeding with L+ and M.
Note:
The Load Supply inputs of not used Valve Control Circuits must be connected to L+ and M be-
cause the E1612/E1613 check the load supply inputs and will initiate an alarm if not con-
nected.
Technical data see 3.3.3

2.5. Data Interface

Each of the Monitors E1668 and the Testgenerator E1698 have two female 9pole Sub-D con-
nectors on the front side. On the left connector are a PROFIBUS interface (with standard pin-
ning) and a RS232 interface (non standard pinning) implemented. On the right connector is a
PROFIBUS interface with identical function as on the left connector implemented.

2.5.1. PROFIBUS Interface for Status and Diagnostics of the System

The PROFIBUS interface reflects the standard PROFIBUS DP and serves for the upload of
status and diagnostic information of the system to a PLC or DCS.

2.5.2. RS232 Interface for Setting of Parameters

The RS232 interface in conjunction with the interface software IS-RS232-E16 serves to down-
load parameter values from a PC to the E16 and to upload parameter values from the E16 to a
PC. The data communication in between the E16 and the PC fulfills SIL3/IEC61508 require-
ments.

E16A358 Rev:00 Page 30 of 99

3. Technical Specifications

3.1. Technical Data of Inputs

3.1.1. Technical Data of Speed Signal Inputs

3.1.1.1. Hall Sensor Inputs

Maximum input frequency : 50 kHz
Maximum signal voltage : 30 Vdc
Input low : at < 3 Vdc
Input high : at > 7 Vdc
Impedance : approx. 5 kOhm
Minimum pulse high time: 20 microseconds
Minimum pulse low time: 20 microseconds
Sensor supply : approx. 13 Vdc, maximum 80 mA
The speed signal inputs have the same reference potential but are free floating versus all other
circuits. The sensors are supplied by internal isolated power sources of the Monitors.

3.1.1.2. Eddy Current Sensor Inputs or MPU (Magnetic Pickup) Inputs

Maximum input frequency : 30 kHz
Maximum signal voltage : 30 Vpp
Trigger hysteresis : 0.07 to 2.5 Vpp (ac-coupled input)
Impedance : approx. 47 kOhm
Sensor supply: approx. 24 V, maximum 120 mA
The speed signal inputs have the same reference potential but are free floating versus all other
circuits. The sensors are supplied by internal isolated power sources of the Monitors.

3.1.2. Technical Data of Rotation Direction Inputs

Maximum signal Voltage : 30 Vpp
Input low : at < 3 Vdc
Input high : at > 7 Vdc
Impedance : approx. 22 kOhm
Same reference potential as speed signal inputs.

3.1.3. Technical Data of Binary Inputs (excluding Voter 1)

Input high : 18..48 Vdc (nominal current at 24 Vdc: 6 mA)
Input low : at < 3 Vdc or open input
Reference potential : M (negative pole of Monitor power supply)

3.1.4. Technical Data of Binary Inputs of Voter 1

Input high : 18..33 Vdc (nominal current at 24 Vdc: 45 mA)
Input low : at < 3 Vdc or open input
Reference potential : M (negative pole of Monitor power supply)

3.1.5. Technical Data of Inputs (Category 1) of E1612/E1613

Input high : 18..33 Vdc (nominal current at 24 Vdc: min. 4 mA, max. 6 mA)
Input low : at < 3 Vdc or open input
Reference potential : M (negative pole of Monitor power supply)

3.1.6. Technical Data of Inputs (Category 2) of E1612/E1613

Input high : 18..33 Vdc (nominal current at 24 Vdc: min. 13 mA, max. 21 mA)
Input low : at < 3 Vdc or open input
Reference potential : M (negative pole of Monitor power supply)

E16A358 Rev:00 Page 31 of 99

3.1.7. Technical Data of Inputs (Category 3) of E1612/E1613
Input high : 18..33 Vdc (nominal current at 24 Vdc: min. 1 mA, max. 3 mA)
Input low : at < 3 Vdc or open input
Reference potential : M (negative pole of Monitor power supply)
Note:
If both signals "Secondary Trip A and B" of Channel 1 of E1612/E1613 are active, one of both
inputs will not draw a significant current.

3.1.8. Technical Data of Inputs Starter

Input high : 18..33 Vdc (nominal current at 24 Vdc: min. 11mA, max. 19mA)
Input low : at < 3 Vdc or open input
Reference potential : M (negative pole of Monitor power supply)

E16A358 Rev:00 Page 32 of 99

3.2. Technical Data of Outputs

3.2.1. Technical Data of Speed Sensor Signal Repeater Outputs

High level : > 20 V with max. load, (maximum 26 V without load)
Low level : < 2 V, with max. load
Maximum load: 1 kOhm
The outputs are short-circuit proof and free floating (also versus each other).
The outputs are supplied by internal isolated power sources of the Monitors.

3.2.2. Technical Data of Analog Outputs

Range : 0/4…20 mA
Resolution : 12 Bit
Maximum load : versions E16A358.1xx : 650 Ohm, versions E16A358.2xx : 400 Ohm
Linearity error : < 0.1%
Temperature stability : ±0,02 %/°C within a range of 0...60°C.
The outputs are short-circuit proof and free floating (also versus each other).
The outputs are supplied by internal isolated power sources of the Monitors.

3.2.3. Technical Data of Opto Relay Outputs

Maximum rating : 50 Vdc / 50 mA.
The outputs are passive without polarity restrictions (comparable to dry-contact characteristic),
short-circuit proof and free floating (also versus each other). They must be supplied externally.
Note:
In case of temporary overload these outputs switch to a latched tri state characteristic until the
source signal changes to low state or the output supply voltage has been switched off and on.

3.2.4. Technical Data of Logic Outputs

The outputs are fed from the system power supply.
Reference potential: M (negative pole of Monitor power supply).
High level : Power supply L+ minus 2 V
Low level : < 3 Vdc
Maximum output current : 50 mA
The outputs are short-circuit proof.
Note:
In case of temporary overload these outputs switch to a latched tri state characteristic until the
source signal changes to low state or the Monitor supply voltage has been switched off and on.

3.2.5. Technical Data of Trip Lines IV, V, VI

Maximum rating : 50 Vdc / 300 mA.
The outputs are passive of dry-contact type, short-circuit proof and free floating. They must be
supplied externally.
Maximum voltage drop at a load equal to 300 mA is < 1 V.
Note:
In case of short-circuit the output goes low as long as the short-circuit persists.

3.2.6. Chapter left blank intentionally

E16A358 Rev:00 Page 33 of 99

3.2.7. Technical Data of Command Feedback Signals from E1612/E1613
The outputs are fed from the 2oo3 switched L+ pole of Valve Control Outputs.
Reference potential: M (negative pole of Monitor power supply)
High level : Valve Load Supply voltage minus 2 V (up to maximum output current)
Low level : < 3 Vdc
Maximum output current : 100 mA
The outputs are short-circuit proof.
Note:
In case of short-circuit the output goes low as long as the short-circuit persists.

3.2.8. Technical Data of 2oo3 Valve Control Outputs from E1612/E1613

The outputs are fed from the L+ and M of the Valve Load Supplies.
Maximum output load : 50 Vdc / 3 A / 75 W
Both outputs L+ and M are protected by 3.15 A fuses located on E1612/E1613 modules.
The outputs are not short-circuit proof. Actuation of the fuses is irreversible.
Response time from trip event to de-energizing of the outputs: < 25 milliseconds.
Attention !
For inductive type loads external spark quenching must be provided.

Note:
For unused Valve Control Circuits a terminating resistor of 4,7 kOhm (0,6 W) must be con-
nected to the Valve Control Output to avoid a diagnostic alarm.

E16A358 Rev:00 Page 34 of 99

3.3. Technical Data of Power Supplies

3.3.1. Technical Data of Power Supply of Monitors E1668 and Testgenerator E1698
3x 24 Vdc (18…33 Vdc) from a power supply with protective separation (SELV or PELV), con-
forming to IEC 61131-2 requirements.
Maximum current consumption : < 300 mA per Monitor supply
Recommended primary fuse rating for Monitor supply : max. 1 A nominal with max. 2 A actua-
tion current.

3.3.2. Technical Data of L+ Supply of Trip Lines I, II, III and Valve Control Modules
3x 24 Vdc (18…33 Vdc) from a power supply with protective separation (SELV or PELV), con-
forming to IEC 61131-2 requirements.
Maximum current consumption : 3x 120 mA per E1612/E1613 triple, but max. 3x 3 A
Recommended primary fuse rating for Trip Line supply : max. 3 A nominal with max. 6 A actua-
tion current.

3.3.3. Technical Data of Valve Load Supply of the 2oo3 Valve Control Circuits
3x 24 Vdc (18…33 Vdc) from a power supply with protective separation (SELV or PELV), con-
forming to IEC 61131-2 requirements.
Current consumption per Valve Load Supply: depending on load type, but max. 3 A
Recommended primary fuse rating for Valve Load Supply: max. 3 A nominal with max. 6 A ac-
tuation current.

E16A358 Rev:00 Page 35 of 99

3.4. Amount of Heat to be dissipated
Maximum heat to be dissipated of a main rack equipped with 1 module E1698, 3 modules
E1668 and 4 triples E1612/E1613 is equivalent to a power loss < 50 W plus power loss for
each connected valve.
Maximum heat to be dissipated of a sub rack equipped with 7 triples E1612/E1613 is equiva-
lent to a power loss < 56 W plus power loss for each connected valve.

Maximum power loss of one E1612/E1613 triple is < 8 W.

Power loss per active valve depends on the load current.

At 1 A load current the power loss is < 2 W per valve.
At 2 A load current the power loss is < 4 W per valve.
At 3 A load current the power loss is < 6 W per valve.

3.5. Installation Conditions

Ambient temperature in operation : 0 °C..+55 °C
Ambient temperature in storage : -20 °C..+85 °C
Relative humidity: < 80 %, non-condensing
To be installed in dry cabinets in air-conditioned rooms

3.6. Protection Grade

Insulation class III
IP 20

3.7. Connectors

3.7.1. Connectors with Pull Spring Terminals

Type Phoenix Combicon FK-MLP1.5 or DFMC1.5
fitting for:
Conductor cross section solid min.: 0.2 mm²
Conductor cross section solid max.: 1.5 mm²
Conductor cross section stranded min.: 0.2 mm²
Conductor cross section stranded max.: 1.5 mm²
Conductor cross section stranded, with ferrule without plastic sleeve min.: 0.25 mm²
Conductor cross section stranded, with ferrule without plastic sleeve max.: 1.5 mm²
Conductor cross section stranded, with ferrule with plastic sleeve min.: 0.25 mm²
Conductor cross section stranded, with ferrule with plastic sleeve max.: 0.75 mm²
Conductor cross section acc. to AWG/kcmil min.: No. 24
Conductor cross section acc. to AWG/kcmil max: No. 16
Minimum AWG according to UL/CUL: 28
Maximum AWG according to UL/CUL: 16

Stripping length : 10 mm

E16A358 Rev:00 Page 36 of 99

3.7.2. Connectors with Screw Terminals
Type Phoenix Combicon MC1.5
fitting for:
Conductor cross section solid min.: 0.14 mm²
Conductor cross section solid max.: 1.5 mm²
Conductor cross section stranded min.: 0.14 mm²
Conductor cross section stranded max.: 1.5 mm²
Conductor cross section stranded, with ferrule without plastic sleeve min.: 0.25 mm²
Conductor cross section stranded, with ferrule without plastic sleeve max.: 1.5 mm²
Conductor cross section stranded, with ferrule with plastic sleeve min.: 0.25 mm²
Conductor cross section stranded, with ferrule with plastic sleeve max.: 0.5 mm²
Conductor cross section acc. to AWG/kcmil min.: No. 28
Conductor cross section acc. to AWG/kcmil max: No. 16
2 conductors cross section solid min.: 0.08 mm²
2 conductors cross section solid max.: 0.5 mm²
2 conductors cross section stranded min.: 0.08 mm²
2 conductors cross section stranded max.: 0.75 mm²
2 conductors cross section stranded, with ferrule without plastic sleeve min.: 0.25 mm²
2 conductors cross section stranded, with ferrule without plastic sleeve max.: 0.34 mm²
2 conductors cross section stranded, with ferrule with plastic sleeve min.: 0.5 mm²
2 conductors cross section stranded, with ferrule with plastic sleeve max.: 0.5 mm²
Minimum AWG according to UL/CUL: 30
Maximum AWG according to UL/CUL: 14

Stripping length: 7 mm

Tightening torque min : 0.22 Nm

Tightening torque max : 0.25 Nm

3.8. Conformity to Standards

2006/42/EU
SIL3/IEC61508, DIN EN ISO 13849-1:2008 Cat 3 PL e, API 612, API 670,
2006/95/EU, IEC 61010-1,
2004/108/EU, IEC 61000-6-4, IEC 61326-3-2

3.9. Weight of E16A358

Maximum weight of one (main or sub) rack: < 10 kg

E16A358 Rev:00 Page 37 of 99

3.10. Useful Lifetime, Proof Test Interval and Maintenance of the E16A358 System
The assumed useful lifetime of the E16A358 system is 20 years.
The proof test interval of the E16A358 system is 20 years.
Therefore the system is maintenance free and does not require service until a fault occurs.

Attention !
Any faulty module must be replaced with a new one within a time period of maximum 1 year.
Instructions for replacement procedure see manual of E16A358.
It is recommended to return defective hardware to BRAUN for inspection and repair if possible.
Apart from the replacement of blown fuses for the load circuits on modules E1612/E1613 any
other repairs not executed by BRAUN are not admissible and will render void the SIL3 level.

Order code for load circuit fuses with BRAUN is: FuseT3,15A/RM5

E16A358 Rev:00 Page 38 of 99

3.11. Dimensions of one rack of System E16A358

484 (19.06)

465.5 (18.33)

60 (2.36 )
height incl. backplane + terminals

109.3 (4.30)
133 (5.24)
253 (9.96)

88 (3.46)
front view
21.3 (0.84)
60 (2.36 )

wiring from
top and bottom

detail
mounting holes

20 (0.79)
to hang the racks to pre-
mounted screws

Ø 13 (0.51)

6.4 (0.25)

total depth (including Profibus-connector with 35° cable outlet)

265 (10.43)

wiring

terminal
premounted screws or blocks
bolts with nuts

side view

wiring

220 (8.66)
all dimensions in mm (inch)
drawing not to scale

Figure 11: Dimensions of System E16A358 (main rack and sub racks have identical dimensions)

E16A358 Rev:00 Page 39 of 99

 3.12.

Figure 12:
Test- Monitor A Monitor B Monitor C Valve Control Valve Control Valve Control Valve Control
generator Modules Triple 1 Modules Triple 2 Modules Triple 3 Modules Triple 4

1 1 1 1 1 1 1 1 1 1 1
X311 X321 X331 X341

6 6 6 6 6 6 1 15 1 15 1 15 1 15
7 7 7
8 8
X313 X323 X333 X343
X7 X8 X9 X3 X10 X11 X4 X12 X13 X5 X14
1 15 1 15 1 15 1 15

E1612 E1612 E1612 E1612 E1612 E1612 E1612 E1612 E1612 E1612 E1612 E1612
E1698 E1668 E1668 E1668
SIL3/IEC61508 SIL3/IEC61508 SIL3/IEC61508 SIL3/IEC61508

1 CMD 1 CMD 1 CMD 1 CMD 1 CMD 1 CMD 1 CMD 1 CMD 1 CMD 1 CMD 1 CMD 1 CMD

1 RDY 1 RDY 1 RDY 1 RDY 1 RDY 1 RDY 1 RDY 1 RDY 1 RDY 1 RDY 1 RDY 1 RDY

2 CMD 2 CMD 2 CMD 2 CMD 2 CMD 2 CMD 2 CMD 2 CMD 2 CMD 2 CMD 2 CMD 2 CMD

2 RDY 2 RDY 2 RDY 2 RDY 2 RDY 2 RDY 2 RDY 2 RDY 2 RDY 2 RDY 2 RDY 2 RDY

1 2 3 4 1 2 3 4 1 2 3 4 1 2 3 4 3 CMD 3 CMD 3 CMD 3 CMD 3 CMD 3 CMD 3 CMD 3 CMD 3 CMD 3 CMD 3 CMD 3 CMD

3 RDY 3 RDY 3 RDY 3 RDY 3 RDY 3 RDY 3 RDY 3 RDY 3 RDY 3 RDY 3 RDY 3 RDY

OK OK OK OK OK OK OK OK OK OK OK OK
P P P P

E16A358 Rev:00
E E E E

Total Front View with Location of Terminals of Main Rack

Total Front View with Location of Terminals of Main Rack

X315 X325 X335 X345

X2 X1 X15
1 15 1 15 1 15 1 15
1 16 1 20 1 6
X317 X327 X337 X347

1 15 1 15 1 15 1 15

Page 40 of 99
4. Safety Notes for Installation and Operation

4.1. Safety Notes for Installation

This unit has been designed and inspected according to standards DIN EN 61010-1 (VDE
0411-1). Observe these instructions and wiring diagrams carefully, to ensure this protection.
The installation must be done only by adequately qualified personnel.

4.1.1. General Instructions

Specifically, connect the PE terminal 1.X1 to a safe ground potential.
Do not open the instrument. Connections and all programming are done from outside. When
removing it from its enclosure however, from whatever reason, make sure that power is
switched off.
The instrument may be installed in any position, but not in the immediate neighborhood of in-
terfering sources.
Signal leads must be carefully shielded, and should not be run in bundles with power or relay
control leads.

4.1.2. EMI
The unit complies with all relevant regulations, as determined by the Policy of the European
Committee for Electrotechnical Standardization (CENELEC), for the Electromagnetic Compati-
bility (2004/108/EU). Testing and inspection has been performed according to Standards
EN 61000-4-2 and EN 61000-4-4. Thereby, the product meets all requirements to be marked
by the CE sign.
Strict observance of these instructions during installation and use is an indispensable precon-
dition hereto. Specifically to be observed:
Terminals must be kept off all undue access; power supply and all input and output leads must
be protected against voltage interference, higher than specified operation data, and they must
be protected against electrostatic discharge.

4.2. Safety Notes for Operation

4.2.1. Safety Notes for Initial Operation

The initial operation must be done only by qualified personnel.
On initial operation of the monitored machine the operator must ensure proper function of the
measurement chains. This includes checking of the correct speed display and of the trip re-
lease due to a real overspeed condition.
The parameter settings must be documented and protected against unauthorized changes.

4.2.2. Safety Notes for Replacement of Fuses on E1612/E1613

The replacement of the load circuit fuses on E1612/E1613 must be done only by qualified
personnel.
Fuses may be replaced only by identical type of fuse.

Order code for load circuit fuses with BRAUN is: FuseT3,15A/RM5

E16A358 Rev:00 Page 41 of 99

5. Description of Monitor E1668

5.1. Display and Frontside Operational Elements

5.1.1. Front View of Monitor E1668

E1668

5-digit display

4 LEDs for status in-

dication 1 2 3 4

Input keyboard
P
E

Profibus-Interfaces
as 9 pole Sub-D
(female) connector

RS-232-Interface
only on left
connector

Figure 13: Front View of Monitor E1668

5.1.2. Status-LEDs
LED1 steady on: Trip
LED2 steady on: no Trip, SP1A is valid
blinking: SP1B is valid
LED3 steady on: see parameter P05.05 of E1668
blinking: one only of three input channels measures zero speed
LED4 steady on: see parameter P05.05 of E1668

5.1.3. Display during Test Procedures

FC-1 : Frequency generator tests Input "Forced Trip"
FC-3.1 : Trip-Line I is tested (relay I to Trip-Condition)
FC-3.2 : Trip-Line II is tested (relay II to Trip-Condition)
FC-3.4 : Trip-Line III is tested (relay III to Trip-Condition)

SELF : Monitor self-test

E16A358 Rev:00 Page 42 of 99

5.1.4. Values accessible during normal operation
Values accessible during normal operation (Standard Display Mode):
with key : the value of SP1
with key : the value of SP2
with key and together: maximum stored speed value,
with key and together: minimum stored speed value.

Note:
with key : reset of stored minimum/maximum value reset
with key and together: reset of non persistent events (if enabled)
with key and together: toggle between Standard and Special Display Mode 1
with key and together: toggle between Standard and Special Display Mode 2

5.1.5. Special Display Mode 1

Toggle between Standard and Special Display Mode 1 by pressing keys and together.
In Special Display Mode 1 the measured speed values of sensors A, B, C can be shown indi-
vidually as well as the actual level of the main sensor signal input.
Toggle between the four values with .
The LED assigned to the specific speed value is blinking (see table).

with Monitor LED assigned to

actual signal input level
speed value of sensor:
(in xx.x volts):
LED1 LED2 LED3
LED4
A A C B A

B B A C B

C C B A C

5.1.6. Special Display Mode 2

Toggle between Standard and Special Display Mode 2 by pressing keys and together.
In Special Display Mode 2 LED1 and LED4 are blinking.
This display mode is only used for trouble shooting, if external signals are missing and the
Monitor displays the event code E.0.4.0.0 .

5.1.7. Display of Firmware release state and CRC-Parameter-Checksum of Monitor

With key pressed longer as 5 seconds, the firmware release state and the CRC-
Parameter-Checksum will be shown in a scrolled display:
A.0383 (firmware ID)
U._ _xx (xx = firmware version number)
D.uu_ _ (uu = year )
D._v v_ (v v = month )
D._ _ww (ww = day of firmware release state)
C.abcd (abcd = CRC-Parameter-Checksum)

E16A358 Rev:00 Page 43 of 99

5.1.8. Frontside Reset of Alarms and Event codes
Resetting of (no longer valid) alarms and event codes is done by pressing keys and (if
enabled in step P00.02).

5.1.9. Data Interface

9pole Sub-D for PROFIBUS and RS232.
See also chapter 7.3.

E16A358 Rev:00 Page 44 of 99

5.2. Functions of Monitor 1667
For a detailed description of the individual functions refer to chapter 9.

5.2.1. Speed Measurement

Each Monitor receives the signal from the three sensors and calculates the speed from each
signal. For the further evaluation it selects (depending on parameter settings) the calculated
speed value derived of its own sensor or the mean value of all three speed values.
Speed calculation is done by measuring the time in between the pulses. The minimum meas-
urement time is 5 milliseconds.
To compensate for an imperfect gear, a predivider may be introduced to reduce the signal fre-
quency to 1 pulse per revolution.

5.2.2. Functions for Overspeed Protection

Overspeed protection is done by :
 Monitoring of Sensors
 Monitoring versus Lowspeed as protection versus incorrect mounting or fault of speed
sensors
 Monitoring versus overspeed

5.2.3. Functions for External Trip by Voters

Trip is released, if one of the voters detects an external trip condition.
Voters may be configured as 1oo2, 2oo2, 2oo3 or 3oo3. High or low Input-Level as trip condi-
tion and response time is selectable.

5.2.4. Permanent Monitoring Functions

Each Monitor E1668 has the following permanent monitoring functions:
 Sensor monitoring (see parameter group P02.xx)
 Overspeed monitoring SP1 (see parameter group P03.xx)
 Lowspeed monitoring SP2 (see parameter group P04.xx)
 Speed limit monitoring SP3 (siehe parameter group P05.xx)
 Trip-Line monitoring (see P07.00 und P07.01)
 Forward/Reverse monitoring of sense of rotation (see P07.02 and P07.03)
 Current monitoring of analog output (only with E16A358.2xx, see P08.06)
Monitoring of external trip release signals (see parameter group P10.xx and with E16A358.x2x
parameter groups P11.xx through P15.xx).

5.2.5. Functional Tests

TheTestgenerator E1698 initiates cyclic automatic test sequences which incorporates the
Monitors E1668. These test sequences may be initiated also by an external signal or manually
by the frontpanel of the Testgenerator.
Performed functional tests are:
 Trip-Line test sequence (de-energize of Trip-Lines I, II and III, see chapter 6.2.3)
 Monitor test sequence (overspeed test of SP1 and trip of Monitor, see chapter 6.2.2)
If during the Trip-Line test sequence a fault is detected, the system response will be according
the setting of parameter P03.01 of E1698.
If during the Monitor test sequence a fault is detected, the system response will be according
the setting of parameter P02.03 of E1698 respective P03.02 of E1668.

E16A358 Rev:00 Page 45 of 99

5.2.6. Selftest of Monitor
Selftest is performed at an interval of 2 hours. Execution of Selftest is signalized on display
with message SELF. Selftest of the Monitors are inhibited versus each other.
The Selftest routine includes
 CPU RAM Test
 CPU EEPROM Test
 CPU Command Test
 CPU Register Test
 Voter Inputsignal Test
If the Selftest detects a malfunction, the Monitor sets itself to trip-status.

E16A358 Rev:00 Page 46 of 99

6. Description of Testgenerator E1698

6.1. Display and Frontside Operational Elements

6.1.1. Front View of Testgenerator E1698

E1698

5-digit display

4 LEDs for status in-

dication 1 2 3 4

Input keyboard
P
E

Profibus-Interfaces
as 9 pole Sub-D
(female) connector

RS-232-Interface
only on left
connector

Figure 14: Front View of Testgenerator E1698

6.1.2. Status-LEDs
LED1 blinking: Test of Monitor A resp. Trip-Line I
steady on: Monitor A signalizes Trip
LED2 blinking: Test of Monitor B resp. Trip-Line II
steady on: Monitor B signalizes Trip
LED3 blinking: Test of Monitor C resp. Trip-Line II
steady on: Monitor C signalizes Trip
LED4 blinking: LED4 blinking: Test in preparation
steady on: Monitor-AutoTest-Mode on
steady off: Monitor-AutoTest-Mode off

E16A358 Rev:00 Page 47 of 99

6.1.3. Display during Test Procedures
FC-1 : Frequency generator tests Input "Forced Trip"
FC-3.0 : Trip-Line Test in preparation
FC-3.1 : Test Generator is testing Trip-Line I (relay I of all Monitors to Trip-Condition)
FC-3.2 : Test Generator is testing Trip-Line II (relay II of all Monitors to Trip-Condition)
FC-3.4 : Test Generator is testing Trip-Line III (relay III of all Monitors to Trip-Condition)

FC-3.3 : Inputs Test I and II are active (but test is inhibited)

FC-3.5 : Inputs Test I and III are active (but test is inhibited)
FC-3.6 : Inputs Test II and III are active (but test is inhibited)
FC-3.7 : Inputs Test I and II and III are active (but test is inhibited)

FC-5.1 : Non-coincidence of test outputs detected.

FC-5.2 : Input Test Lock is active
FC-5.6 : Input Test Lock is longer than 10 minutes active

SELF : Test-Generator self-test

6.1.4. Values accessible during normal operation

with key : the value of test-speed 1 resp. SP1A,
with key : the value of test-speed 2 resp. SP1B,
with keys and together: time remaining (in XXXX.X minutes) till start of the next
Monitor-Test-Sequence),
with keys and together: time remaining (in XXXX.X minutes) till start of the next
Trip-Line-Test-Sequence).

6.1.5. Display of Firmware release state and CRC-Parameter-Checksum of Monitor

With key pressed longer as 5 seconds, the firmware release state and the CRC-
Parameter-Checksum will be shown in a scrolled display:
A.0379 (firmware ID)
U._ _xx (xx = firmware version number)
D.uu_ _ (uu = year )
D._v v_ (v v = month )
D._ _ww (ww = day of firmware release state)
C.abcd (abcd = CRC-Parameter-Checksum)

6.1.6. Frontside Reset of Alarms and Event codes

Resetting of (no longer valid) alarms and error messages is done by pressing
keys and simultaneously.

6.1.7. Manual Start of a Monitor-Test Sequence

The test routine can be activated from the front of the test generator by pressing
keys and simultaneously.

6.1.8. Manual Start of a Trip-Line-Test Sequence

The test routine can be activated from the front of the test generator by pressing
keys and simultaneously.

6.1.9. Data Interface

9-pole Sub-D for PROFIBUS and RS232.
See also chapter 7.3.

E16A358 Rev:00 Page 48 of 99

6.2. Functions of Testgenerator 1697
For a detailed description of the individual functions refer to chapter 10.

6.2.1. Permanent Monitoring of Feedbacks

The Monitors signalize their trip respective warning status to the Testgenerator. The status of
the three feedback signals from the Valve Control Circuits is also signalized to the Testgenera-
tor. With system E16A358 the Valve Control Circuit feedback is in trip state as long as no ex-
ternal valve command is active. With the first valve command active, the feedback changes to
no trip state. The Testgenerator permanently monitors these signals and will release its alarm
outputs "System Warning Alarm 1” and "System Warning Alarm 2”, if one or more of these sig-
nals do not show the expected state.
The sequence of the Monitor Test is inhibited during channel warning alarm of the monitors.
The sequence of the Trip-Line Test is inhibited during channel warning alarm of the monitors
and during Valve Control Circuit fault.

6.2.2. Monitor-Test Sequence

During the Monitor-Test Sequence each monitor is sequentially subjected to a test sequence
consisting of two simulated test-speeds followed by a 'Forced Trip' signal.

Step 1: Each Monitor is sequentially provided with a test-speed 1 (n >SP1) to which the
Monitor under test must respond with trip release.

Step 2: Each Monitor is sequentially provided with a test-speed 2 (n < SP1) to which the
Monitor under test must not respond with trip release.

Step 3: The ‘Forced Trip’ control input of each Monitor is sequentially activated to which the
Monitor under test must respond with trip release. During this step the Monitor is
provided with test-speed 2 (n < SP1)

In the event of an incorrect response the test will be discontinued and the Testgenerator re-
leases the System Warning Alarm 1 and 2.

If variable setpoint SP1var is active, the test may be optionally performed according to the fol-
lowing steps:

Step 1: Each Monitor is sequentially provided with a test-speed 1 (SP1A + 5 RPM) to which
the Monitor under test must respond with trip release.

Step 2: Each Monitor is sequentially provided with a test-speed 2 (SP1B - 5 RPM) to which
the Monitor under test must not respond with trip release.

Step 3: The ‘Forced Trip’ control input of each Monitor is sequentially activated to which the
Monitor under test must respond with trip release. During this step the Monitor is
provided with test-speed 2 (SP1B - 5 RPM)

Step 4: Each Monitor is sequentially provided with a test-speed 3 (SP1A - 5 RPM) to which
the Monitor under test must not respond with trip release.

Step 5: Each Monitor is sequentially provided with a test-speed 4 (SP1B + 5 RPM) to which
the Monitor under test must respond with trip release.

E16A358 Rev:00 Page 49 of 99

 The time interval of these tests is programmable (see P02.02). The test sequence may also be
started by an external signal „Start Auto Test Sequence“ or manually via frontside keyboard of
the Test-Generator.

6.2.3. Trip-Line-Test Sequence (Test of 2oo3 Valve Control Circuit)

The Testgenerator commands the Monitors to put sequentially the trip relays I, II or III to trip
condition.
By doing so the designated Trip-Line to Valve Control Circuits is in trip condition.
The status of the 2oo3 Valve Control Circuits is fed back to the Testgenerator. For this function
the E1612 and E1613 are equipped with force guided contact safety relays.
The testing of Trip-Line I must provide the response of Trip I.
The testing of Trip-Line II must provide the response of Trip II.
The testing of Trip-Line III must provide the response of Trip III.

In the event of an incorrect response the test will be discontinued and the Testgenerator re-
leases the System Warning Alarm 1 and 2.
The interval between two automatic test sequences is selectable (see P03.00 of E1698). The
test sequence may also be initiated by an external signal (terminal X8.5) or by frontpanel.
If externally initiated the sequence is executed automatically, subsequent after approx. 2 min-
utes the monitor test sequence is executed (see chapter 6.2.2)

6.2.4. Cross-check between CPUs of Test-Generator

The Test-Generator incorporates two redundant CPUs. Both CPUs must perform identically to
release a test sequence. In case of failure of one CPU no test is released, but System Warning
Alarm 1 or 2 is released.

6.2.5. Selftest of CPUs

Selftest is performed after each Monitor test sequence. Execution of Selftest is signalized on
display with message SELF.
The Selftest of both CPU routine includes: CPU RAM Test
CPU EEPROM Test
CPU Command Test
CPU Register Test
If the Selftest detects a malfunction, System Warning Alarm 1 or 2 is released.

E16A358 Rev:00 Page 50 of 99

7. Description of Valve Control Modules E1612 and E1613

7.1. Frontview and Status LEDs

7.1.1. Frontview of E1612 and E1613

E1612 E1613

1 CMD 1 CMD
1 RDY 1 RDY
2 CMD 2 CMD
7 LEDs to 2 RDY 2 RDY
indicate the status 3 CMD 3 CMD
3 RDY 3 RDY
OK OK

Figure 15: Front view of E1612 and E1613

7.1.2. Status LEDs

Valid for all channels: x = 1, 2 or 3:

LED x CMD glows yellow:

Trip Line is high, external switch command for channel x is true and channel is ready

LED x CMD glows red :

Trip Line is high, external switch command for channel x is true but channel is not ready
(LED x RDY is off)

LED x RDY glows yellow (= channel ready) if none of the following conditions is true:
 load power supply fault detected
 no load (lead break) detected at activated channel
 relay contact fault detected
 discrepancy of switch command versus 2oo3 load output detetcted
 short circuit of 2oo3 + or - verrsus supply detected (only if channel is not active)s

LED OK (valid for the module) glows yellow if none of the following conditions is present:
 module power supply fault detected
 one channel signalizes not ready
 the internal reset signal is too long or permanent active

E16A358 Rev:00 Page 51 of 99

7.1.3. Display during Trip-Line Test
Each Valve Control Module of a triple is assigned to one of the Trip-Lines I, II, III and responds
according its state.
If a Command of the Valve Control Circuit is active, the CMD LED of the respective channel
flashes yellow. During the test of a Trip-Line the commands of the corresponding Valve Control
Modules are disabled and its CMD Led´s are off.

7.1.4. Data Interface to Testgenerator

The Valve Control Modules E1612 and E1613 have an incorporated data interface which con-
nects to the Testgenerator E1698. The following status informations are transmitted to the
Testgenerator and then transferred via its Profibus Interface to the DCS:
 Ready status of channels 1, 2, 3 of Valve Control Module
 OK status of Valve Control Module
 Command status of channels 1, 2, 3

The databus is of daisy chain type. For its function all Valve Control Modules must be inserted
and operational. If one of the modules is removed, its status informations and those of the
subsequent modules are not available for the Testgenerator. This will be signalized by the
Testgenerator as event code on its display and via Profibus.

7.2. Functions of Valve Control Modules E1612 and E1613

7.2.1. Diagnostic Functions

1. Monitoring of the trip relay contacts for plausibility.
2. Monitoring of the load supply inputs (L+ and M) which are assigned to the module
3. Comparision of the the channel command status with the status of the assigned 2oo3 load
circuit for antivalence.
4. Monitoring of the load circuit for short circuit versus L+ respective versus M (only if the
Valve Control Circuit is in state de-energized).
5. Monitoring of the module internal power supply.
6. Monitoring of the module internal reset for stuck-at faults.

7.2.2. Response to detected faults

 In case of fault detected by diagnostic functions 1, 2, 3 or 4 the faulty channel will de-
energize itself and remains in this state until a reset command has been given. the LED OK
and the assigned LED x RDY are off. Bit 3 and one of the bits 0, 1 or 2 of the assigned sta-
tus byte of the E1698-Profibus string will be high. The module signalizes the fault to the
Testgenerator by de-energizing of its internal OK relay.
 In case of fault detected by diagnostic function 5 the response will be the same as above,
but all three channels will be de-energized
 In case of fault detected by diagnostic function 6 the LED OK of the module will be off. Bit 3
of the status bytes will be high and the module internal OK relay will be de-energized. This
status is not latched and must not be reset externally once the fault is rectified

E16A358 Rev:00 Page 52 of 99

8. Programming of the Modules

8.1. Programming of the Modules via Front Keyboard

Principle: Select a parameter via its ‚name’ Pgg.ss,

in that gg : Parameter-group number and
ss : Step-number within the group,

then display the value and alter if required.

Procedure:
Initiate programming phase by pressing keys and together; instead of the normal display P00.00. appears
Select the group or step number with keys , .
Switch between Groups and Step Fields with the . key
Current value of the Parameters is displayed with key .
Select active position with the . key
Adjust the number in the active field with keys , .
Acknowledge and set with key , Discard (original value remains) with key .
Return to operational mode with the key. The display then returns to the current ‘is’ speed (with E1668) resp.
to the current test-speed (with E1698)

See example below: Change parameter P01.01 from 2386 to 2387 or 2385.

Normal Display While Programming

Display active digit(s) blinking (shown underlined here)

Select Select Change

Toggle Group Toggle Step-No. Toggle Parameter Value
with with with
key(s) Key Key

P E

E : Enter
or
P : Cancel
P

Enter : new, changed value is valid

P + E
Cancel : original value still valid
Move
active
P digit with

E16A358 Rev:00 Page 53 of 99

8.2. Programming of the Modules via RS232-Interface
Only possible for OEM with interface-software IS-RS232-E16 and either

1. adapter L3D02 with cable L3D03 by BRAUN

Note:
- Adapter L3D02 has male connectors on both sides.
- Cable L3D03 has female connectors to L3D02 and to PC.

or

2. customized cable with connections PC (female connector) to E16 (male connector):

PC pin 2 to E16 pin 2
3 to 7
5 to 5 (of 9 pole Sub-D connectors)

Note:
- The RS232-Interface serves only for parameter programming purposes, not for transmission
of current data. States, alarms and measurement data are transmitted via PROFIBUS-Interface
only.

8.3. Default Values

If not specified otherwise, the unit is supplied with default values as listed in the summary of
parameters. In process of installation, the setting of its parameters inevitably must be adapted
to the correct values according its application.

8.4. Response of Parameter if range of values is exceeded

If the admissible range of values is exceeded, the parameter value is blinking. The value will
not be stored the previous set value is still valid.

8.5. Display of Parameter Values if front side parameter access is locked

If front side parameter access is locked, the values may be displayed but not changed. The
parameter values are displayed blinking.

E16A358 Rev:00 Page 54 of 99

9. Parameters of Monitor E1668

9.1. Summary of parameters and their default values

Default
No. Parameter Function
Value

P00.xx Code figure, Parameter Lock

P00.00 0000 Code figure
.01 0000 New code figure
.02 1 Parameter Lock : 0: locked / 1: enabled
.03 1 Front side Reset: 0: not possible / 1: possible
P01.xx Input, Scaling
P01.00 0 Reserved for future applications
.01 10000 Value of nominal input frequency in Hz
.02 0 Decimals of speed value for SP2, SP3 PROFIBUS-Output
.03 10000 Nominal speed in RPM
.04 00001 Lower limit of the speed range
.05 001 Predivider : 001 ... 255
.06 0 Reserved for future applications
.07 0 Decimals for acceleration
.08 01000 Maximum acceleration in XXXX or XXX.X RPM/sec
.09 1 No. of acceleration measurements included in calculation of SP1var: 1 .. 5
P02.xx Display, Starter, Tests
P02.00 0 Reserved for future applications
.01 0.3 Display updating sequence : 0.1 ... 9.9 sec
.02 000 Starter time period: 000 ... 999 sec
.03 1 Reserved for future applications
.04 4 Sensor monitoring: 0 ... 4 (see parameter description)
.05 1 Mode of Sensor Monitoring: 0 ... 7 (see parameter description)
.06 1 Lowspeed Monitoring "n < SP2": 0 ... 4 (see parameter description)
.07 5 Mode of Speed Comparison Test : 0 ... 5 (see parameter description)
.08 030 Permissible Speed Difference between Sensors (in xxx RPM)
.09 05 Number of errors before reporting
.10 1 Monitor Warning Alarm at Trip: 0 ... 4 (see parameter description)
.11 1 Latch Monitor Warning Alarm: 0: no / 1: yes, all alarms / 2: yes, first one only
P03.xx Overspeed Alarm SP1
P03.00 00010 Setpoint SP1A in RPM
.01 05.0 Hysteresis bandwidth (XX.X % of SP1A)
.02 0 Alarm to be latched / energized or de-energized to trip: 0 ... 3 (see parameter description)
.03 00001 Setpoint SP1B in RPM
.04 0 Setpoint SP1var : 0: not active / 1: active

Continued on next page

E16A358 Rev:00 Page 55 of 99

Param. Default
Parameter Function
No. Value

P04.xx Low Speed Alarm SP2

P04.00 00015 Setpoint SP2 in RPM
.01 05.0 Hysteresis bandwidth (XX.X % of SP2)
.02 0 Fix value = 0, do not change
P05.xx Alarm SP3
P05.00 00003 Setpoint SP3 in RPM
.01 05.0 Hysteresis bandwidth (XX.X % of SP3)
.02 1 Hysteresis position: 0: above / 1: below
.03 1 Relay state at "n > SP3" : 0 … 3 (see parameter description)
.04 0 Alarm state at sensor fault: 0: acc. to speed / 1: "n < SP" / 2: "n > SP"
.05 1 Setting of LEDs to status "n > SP3" : 0: LED3 on / 1: LED4 on
P06.xx Eddy sensor
P06.00 00100 Reserved for future application
.01 00.0 Eddy sensor input check: input voltage upper limit in xx.x volts
.01 00.0 input voltage lower limit in xx.x volts
.03 00.0 current drain upper limit in xxx ma
.04 00.0 current drain lower limit in xxx ma
.05 0.0 Eddy sensor input hysteresis in x.x volts
P07.xx Trip-Lines, Forward / Reverse Detection
P07.00 0 Trip-Line Monitoring: 0 ... 3 (see parameter description)
.01 0 Signal level Trip-Feedback: 0: low = Trip / 1: high = Trip
.02 1 Forward / Reverse Detection Input level: 0: low = forward / 1: high = forward
.03 1 Forward / Reverse relay state: 0: de-energized = forward / 1: energized = forward
.04 0 Reserved for future application
P08.xx Analog Output
P08.00 10000 High end speed value
.01 00000 Low end speed value
.02 1 Zero level: 0: dead zero / 1: live zero
.03 0 Output level at sensor fault: 0: no change / 1: min / 2: max
.04 0 Output direction: 0: 0/4 … 20 ma / 1: 20 ... 4/0 ma
.05 1 Output response to test-speed: 0: test-speed / 1: frozen
.06 0 Test of Analog Output value: 0: no / 1: yes
P09.xx Reserved for future application
P09.00 0 Reserved for future application
P10.xx Voter No. 1 and LO1
P10.00 0 Operation Mode: 0 ... 5 (see parameter description)
.01 0 Input Truth Level: 0: high = Trip / 1: low = Trip
.02 0 Voting logic: 0: 1oo2 / 1: 2oo2 / 2: 2oo3 / 3: 3oo3
.03 0 Truth Time until Trip: 0 ... 7 (see parameter description)
.04 0 Trip latched: 0: no / 1: yes
.05 0 Delay of Antivalence Alarm: 0 ... 9 (see parameter description)
.06 00110 Value for setpoint SPV1
.07 0 Reserved for future application
.08 0 Reserved for future application
Continued on next page

E16A358 Rev:00 Page 56 of 99

Param. Default Parameter Function
No. Value

P11.xx Voter 2 and LO2

P11.00 0 Operation Mode: 0 ... 5 (see parameter description)
.01 0 Input Truth Level: 0: high = Trip / 1: low = Trip
.02 0 Voting logic: 0: 1oo2 / 1: 2oo2 / 2: 2oo3 / 3: 3oo3
.03 0 Truth Time until Trip: 0 ... 7 (see parameter description)
.04 0 Trip latched: 0: no / 1: yes
.05 0 Delay of Antivalence Alarm: 0 ... 9 (see parameter description)
.06 00120 Value for setpoint SPV2
.07 0 Reserved for future application
.08 0 Reserved for future application
P12.xx Voter 3 and LO3
P12.00 0 Operation Mode: 0 ... 5 (see parameter description)
.01 0 Input Truth Level: 0: high = Trip / 1: low = Trip
.02 0 Voting logic: 0: 1oo2 / 1: 2oo2 / 2: 2oo3 / 3: 3oo3
.03 0 Truth Time until Trip: 0 ... 7 (see parameter description)
.04 0 Trip latched: 0: no / 1: yes
.05 0 Delay of Antivalence Alarm: 0 ... 9 (see parameter description)
.06 00130 Value for setpoint SPV3
.07 0 Reserved for future application
.08 0 Reserved for future application
P13.xx Voter 4 and LO4
P13.00 0 Operation Mode: 0 ... 5 (see parameter description)
.01 0 Input Truth Level: 0: high = Trip / 1: low = Trip
.02 0 Voting logic: 0: 1oo2 / 1: 2oo2 / 2: 2oo3 / 3: 3oo3
.03 0 Truth Time until Trip: 0 ... 7 (see parameter description)
.04 0 Trip latched: 0: no / 1: yes
.05 0 Delay of Antivalence Alarm: 0 ... 9 (see parameter description)
.06 00140 Value for setpoint SPV4
.07 0 Reserved for future application
.08 0 Reserved for future application
P14.xx Voter 5 and LO5
P14.00 0 Operation Mode: 0 ... 5 (see parameter description)
.01 0 Input Truth Level: 0: high = Trip / 1: low = Trip
.02 0 Voting logic: 0: 1oo2 / 1: 2oo2 / 2: 2oo3 / 3: 3oo3
.03 0 Truth Time until Trip: 0 ... 7 (see parameter description)
.04 0 Trip latched: 0: no / 1: yes
.05 0 Delay of Antivalence Alarm: 0 ... 9 (see parameter description)
.06 00150 Value for setpoint SPV5
.07 0 Reserved for future application
.08 0 Reserved for future application

Continued on next page

E16A358 Rev:00 Page 57 of 99

Param. Default Parameter Function
No. Value

P15.xx Voter 6 and LO6

P15.00 0 Operation Mode: 0 ... 5 (see parameter description)
.01 0 Input Truth Level: 0: high = Trip / 1: low = Trip
.02 0 Voting logic: 0: 1oo2 / 1: 2oo2 / 2: 2oo3 / 3: 3oo3
.03 0 Truth Time until Trip: 0 ... 7 (see parameter description)
.04 0 Trip latched: 0: no / 1: yes
.05 0 Delay of Antivalence Alarm: 0 ... 9 (see parameter description)
.06 00160 Value for setpoint SPV6
.07 0 Reserved for future application
.08 0 Reserved for future application
P16.xx Reserved for future application
P16.00 0 Reserved for future application
.01 0 Reserved for future application
.02 0 Reserved for future application
.03 0 Reserved for future application
.04 0 Reserved for future application
.05 0 Reserved for future application
.06 00000 Reserved for future application
.07 0 Reserved for future application
.08 0 Reserved for future application
P17.xx Data Interface
P17.00 016 PROFIBUS-Interface Device no.
01 00 Address Offset for redundant Profibus Interface

E16A358 Rev:00 Page 58 of 99

9.2. Description of Parameters and their Settings of Monitor E1668

Parameter Group P00.xx of Monitor E1668

Code Figure, Parameter Lock, Frontside Reset of Alarms

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P00.00 If the parameters are locked (see P00.02), the code figure must be entered
Code Figure prior to any change of other parameters.
Range: 0000 .. 9999 If the code figure is not correct, -E 1- is displayed.
Without code figure and P00.02 : 0 the values of all parameters may be in-
spected, but not changed.

P00.01 A new code figure may be set in P00.01. Then it replaces the previous one.
New Code Figure
Range: 0000 .. 9999

P00.02 Setting
Parameter Lock 0 : Parameters are locked, change only possible with code figure
Range: 0 .. 1 1 : Parameters unlocked, change of parameter values possible

P00.03 Setting
Frontside Reset of Alarms 0 : Frontside reset of alarms not possible
Range: 0 .. 1 1 : Frontside reset of alarms possible with keys and .

E16A358 Rev:00 Page 59 of 99

Parameter Group P01.xx of Monitor E1668
Input Scaling and Measurement Configuration

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P01.00
Reserved for future applications

Description of Scaling:
Scaling defines the relationship between the input signal frequency (in terms
of Hz), and the corresponding display (in terms of RPM).
Of course, they must refer to the same operation level. This reference point
is recommended close to the high end of the intended operation range. In
later operation, however, it may be overrun without error.

Example:
1500 Hz corresponds to 3000 RPM :
 Step P01.01 : setting 01500
Step P01.03 : setting 03000

P01.01 See description of Scaling.

Nominal Input Frequency [Hz]
Range: 00001 .. 99999

P01.02 Setting
Decimals for P01.04, P04.00, 0 : Setting range for P01.04, P04.00, P05.00 : 00001 to 99999 RPM
P05.00 and for 1 : Setting range for P01.04, P04.00, P05.00 : 0000.1 to 9999.9 RPM
PROFIBUS Speed Data Output
Range: 0 .. 1

P01.03 See description of Scaling.

Nominal speed [RPM]
Range: 00001 .. 99999

P01.04 If the monitored speed falls below the value entered here the measured val-
Lower Limit of the Speed Range ue is given as 0 both for the display and the alarms. The lower limit of the
speed range is entered in units of RPM.
Range as defined in P01.02

E16A358 Rev:00 Page 60 of 99

Parameter Group P01.xx (continued) of Monitor E1668
Measurement Configuration

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P01.05 The predivider is used only if the variable setpoint SP1var is active (P03.04 =
Predivider 1).
Range: 001 .. 255 The predivider must then be set to the number of teeth of the gear wheel.
The acceleration measurement is extended over one full rotation of the ma-
chine.
Note:
The predivider applies only to the primary measurement input.
The two other measurement channels are not affected by the predivider.

P01.06
Reserved for future application

P01.07 Setting
Decimals for acceleration 0 : setting of acceleration in XXXX RPM/sec
Range: 0 .. 1 1 : setting of acceleration in XXX.X RPM/sec

P01.08 Setting is done in RPM/sec.

Maximum acceleration of the Value must be set to the maximum possible acceleration (dN/dt max) of the
machine [RPM/sec] machine in the worst case scenario.
Range: 00001 .. 99999 resp. See also description of step P03.04.
0000.1 .. 9999.9

P01.09 Recommended value is 1 or 2 measurements (equals to a measurement

No of acceleration measure- time of 20 or 40 milliseconds at a speed of 3000 RPM).
More measurements included will improve the stability of the calculated set-
ments included in calculation of
point SP1var, but also result in a delayed update rate.
SP1var
Range: 1 .. 5

E16A358 Rev:00 Page 61 of 99

Parameter Group P02.xx of Monitor E1668
Display, Starter time, Sensor Failure Monitoring

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P02.00
Reserved for future application

P02.01 The display may have its own independent up-dating sequence, different
Display updating sequence from the response time used by other functions - again in the interests of
Range: 0.1 .. 9.9 [sec] stabilized and legible readings. Set the parameter to the time required in
steps of 0.1 sec. Recommended value is 0.3 sec.
The display value is determined by the duration of a cycle sequence.
The rapid response of the alarms is not influenced by this procedure.

P02.02 This step sets the starter time period (duration). The starter phase state for
Starter Time Period SP2 lasts from the beginning of the external starter signal plus the pro-
Range: 000 .. 999 [sec] grammed time elapse following its end.

P02.03
Fix value = 1, do not change

P02.04 A sensor fault will be reported according to the designated parameters and, if
Sensor Monitoring configured, latched until the reset is activated.
(Current and Signal Level) Setting
Range: 0 .. 4 0 : Monitoring disabled
1 : Not permissible
2 : Fault reported + Trip release, latched till reset
3 : Not permissible
4 : Fault reported without trip release (recommended setting)

P02.05 Setting
Mode of Sensor Monitoring 0 : Without monitoring (see Note 3)
Range: 0 .. 3 1 : Checks sensor current drain
2 : Checks signal voltage level at stand still (see Note 1)
3 : Current drain and voltage level
4 : Inductive sensor (MPU)
5 : Reserved for future use
6 : Eddy sensor voltage level (see Note 2)
7 : Eddy sensor voltage level and current drain (see Note 2)

Note 1: The voltage level check is only possible with Braun-sensor type
A5S... . In this instance even at stand still a defective sensor or
supply cable can be detected.
Note 2: The signal voltage level (and current drain) is compared versus
max/min-values as set in P06.01 to P06.04.
Note 3: Selection of Setting 0 makes Step P02.04 meaningless.

E16A358 Rev:00 Page 62 of 99

Parameter Group P02.xx (continued) of Monitor E1668
Sensor Failure Monitoring

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P02.06 Safety Note:

Lowspeed Monitoring The Lowspeed Monitoring "n < SP2" is the only compre-
"n < SP2" hensive protection versus a systematic fault of any type of
Range: 0 .. 4 speed sensor (no speed signal from sensor at running
machine).
Setting of P02.06 = 0 is allowed only for test purposes dur-
ing commissioning of the machine. In normal operation
P02.06 must be set to a value of 1 or 2 or 3 or 4.

Function of Lowspeed Monitoring "n < SP2":

Following the end of the Starter phase (Start-Up Bridging) the measured
speed must exceed the value set for SP2. If the measured speed n is then
lower than SP2, trip is released.

Function of Starter Plausibility Check:

If
 starter condition is true
 and plausibility check is on
 and speed exceeds 50% of overspeed setpoint SP1A
then
Monitor Warning Alarm is released by plausibility check and event code
E.3.0.1.0 is displayed.

Setting
0 : Monitoring switched off (not permissible, see safety note above)
1 : Trip and Alarm till rectified, starter plausibility check on
2 : Trip and Alarm latched, starter plausibility check on
3 : Trip and Alarm, till rectified / starter plausibility check off
4 : Trip and Alarm latched / starter plausibility check off

E16A358 Rev:00 Page 63 of 99

Parameter Group P02.xx (continued) of Monitor E1668
Sensor Failure Monitoring

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P02.07 Speed comparison of the 3 sensors enables:

Speed Comparison  Detection of incorrect installation of the sensor (distance from the
Evaluation Mode tooth wheel too large or wrong position) even during the start-up bridg-
Range: 0 .. 5 ing phase.
 Detection of a fading function of a sensor during normal operation.

Functionality:
Each Monitor has three measuring channels and receives the signals of all
three sensors.

Setting
0 : only the primary sensor will be evaluated; no redundancy
1 : Trip is released if primary sensor fault is detected
2 : only error message is released if primary sensor fault is detected, but
only speed value of primary sensor is used for further evaluation
3 : not permissible
4 : only error message is released if primary sensor fault is detected, but
the mean value of the three speed values is used for further evaluation
5 : same as setting 4, but a trip released due to deviation is latched

Setting 1 or 2 or 4 or 5 :
During machine operation each Monitor compares its sensor input with
those of its two neighbors. If the measured speed value of its own
(primary) sensor in comparison with its two neighbors produces a dis-
crepancy exceeding the tolerance level set at P02.08, the monitor’s
primary sensor will be reported as faulty.
However, should all three measured speed values deviate from each
other for more than the specified tolerance, the monitor will release
trip.

Note:
Setting P02.07 = 4 or 5 avoids a trip release caused by a sensor fault
during the automatic test procedure and are recommended settings.

Example:
Monitor A is tested for overspeed, at the same time the signal from sensor B
drops out. Monitor B reports an error, but continues to evaluate the signals
from sensors A and C.

E16A358 Rev:00 Page 64 of 99

Parameter Group P02.xx (continued) of Monitor E1668
Sensor Failure Monitoring

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P02.08 Value for the permissible difference in RPM between the speed measure-
Permissible Speed Difference ment of the primary sensor and that of the other two sensors before a fault is
between Sensors [RPM] detected.
Range: 001 .. 999 Note: Primary sensor is the sensor the monitor supplies with power.

P02.09 Number of consecutively failed speed comparison tests which may occur be-
Number of tests until alarm fore an error message is issued.
Range: 01 .. 99 Note:
At speeds lower than 50% of the nominal speed, the number of tests is au-
tomatically increased to avoid incorrect alarms during acceleration phase of
the machine.

Example for Setting of P02.07 = 4:

P02.08 = 030 (permissible difference between measured values = 30 RPM)
P02.09 = 5 (Number of consecutive errors till error message issued)

With the example above an error message will be issued when the speed
value of the primary sensor deviates by 30 RPM from the two other meas-
ured sensors five measurements in succession.
When all three measurements of one monitor between themselves differ by
more than 30 RPM (measurement of sensor A = 6031 RPM, of sensor B =
6000 RPM, of sensor C = 5969 RPM), the monitor will release trip.

P02.10 Setting depends on how the alarm is used according the specific application
Monitor Warning Alarm also for detection of SOE (sequence of events).
at Trip Condition
Range: 0 .. 4 Setting Alarm at Alarm at Alarm at Trip Alarm at
Overspeed- Voter-Trip due to Trip- Lowspeed-
Trip Line-Monitoring Trip
0 No No Yes Yes
1 Yes Yes Yes Yes
2 No No No Yes
3 Yes Yes No Yes
4 No No No No

Note: The Monitor Warning Alarm is always released in case of detected

sensor fault.

P02.11 The Monitor Warning Alarm and the error message can be latched.
Latching of Monitor Warning
Alarm and Error Messages Setting
Range: 0 .. 2 0 : no
1 : yes, in this case all occurring errors are shown in the display as error
combinations
2 : yes, in this case only the first occurring error is displayed

E16A358 Rev:00 Page 65 of 99

Parameter Group P03.xx of Monitor E1668
Overspeed Alarm SP1

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P03.00 The numerical value for the setpoint is set in terms of RPM.
Overspeed Setpoint SP1A
Range: 00001 .. 99999

P03.01 The hysteresis is the margin between condition "excess" (>) and
Alarm Hysteresis Width "no excess" (<), defined by its bandwidth.
Range: 00.1 .. 99.9 The width of hysteresis is set as a percentage of the switching point.
The position of the hysteresis for SP1 is determined beneath the setpoint.
Example:
With 5% Hysteresis and a setpoint of 10000 RPM an overspeed alarm is is-
sued once 10000 RPM is exceeded and ceases should the speed drop be-
low 9500 RPM.

Note:
The hysteresis is always calculated for SP1A.
If SP1B is used and the alarm is not latched, hysteresis must be chosen that
 it is big enough to include SP1B to avoid bouncing of the trip relays
 it is small enough to that the return point is not lower that normal
operating speed.

Example:
SP1A=3240 RPM, SP1B=3090 RPM, normal operating speed=3000 RPM.

Then hysteresis must be minimum (3240-3090)/3240 = 4.7% and

maximum (3240-3000)/3000 = 7.9%.

P03.02 The overspeed alarm can be latched until externally reset.

Latching of Overspeed Alarm/ The trip relays can be programmed to energize or to de-energize to trip (re-
Energize or de-energize to Trip leased by Overspeed or externally via Voter) condition.
Range: 0 .. 3 Setting
0 : alarm not latched, trip relays de-energize to trip
1 : alarm latched, trip relays de-energize to trip
2 : alarm not latched, trip relays energize to trip
3 : alarm latched, trip relays energize to trip

P03.03 The numerical value for the setpoint is set in terms of RPM.
Overspeed Setpoint SP1B SP1B is always valid as long as the input „SP1B valid" is true.
Range: 00001 .. 99999

E16A358 Rev:00 Page 66 of 99

Parameter Group P03.xx (continued) of Monitor E1668
Overspeed Alarm SP1

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P03.04 Setting
Overspeed Setpoint SP1var 0 : overspeed setpoint SP1var is not active
not active / active 1 : overspeed setpoint SP1var is active
Range: 0 .. 1
If the overspeed setpoint SP1var is not active, then SP1A is valid (respective
SP1B as long as the input "SP1B valid" is true).
If the overspeed setpoint SP1var is active, it is calculated depending on the
measured acceleration in between the limits of SP1A and SP1B.
Attention: If acceleration dN/dt = 0 , then SP1var = SP1A.
If P03.04 = 1: The value of SP1A If acceleration dN/dt = dN/dt max , then SP1var = SP1B.
(P03.00) must not be lower than
the value of SP1B (P03.03), else Example for values of SP1var:
SP1B will always be valid dur- dN/dt max = 300 RPM/sec
ing acceleration phase. SP1A = 3240 RPM (at acceleration rate of 0 RPM/sec)
SP1B = 3090 RPM (at acceleration rate of 300 RPM/sec)

measured acceleration calculated value SP1var

300 RPM/sec 3090 RPM
240 RPM/sec 3120 RPM
180 RPM/sec 3150 RPM
120 RPM/sec 3180 RPM
60 RPM/sec 3210 RPM
0 RPM/sec 3240 RPM

See also graph below

Value
SP1
SP1A SP1var

SP1B

Figure 16:
SP1 as a variable
of the acceleration
0 acceleration
dN/dt max dN/dt
0

E16A358 Rev:00 Page 67 of 99

Parameter Group P04.xx of Monitor E1668
Lowspeed Alarm SP2

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P04.00 The numerical value for the setpoint is expressed as RPM.

Lowspeed Setpoint SP2
Range: 00001 .. 99999

P04.01 The hysteresis is the margin between condition "excess" (>) and "no excess"
Alarm Hysteresis Width (<), defined by its bandwidth.
Range: 00.1 .. 99.9 The width of hysteresis is set as a percentage of the switching point.
The position of the hysteresis of SP2 is determined above the setpoint.

Example:
With 5% Hysteresis and a setpoint of 100 RPM a Lowspeed alarm is issued
once speed drops below 100 RPM and ceases once speed exceeds 105
RPM.

P04.02
Fix value = 0, do not change

E16A358 Rev:00 Page 68 of 99

Parameter Group P05.xx of Monitor E1668
Alarm SP3

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P05.00 The numerical value for the setpoint is expressed as RPM.

Setpoint SP3
Range: 00001 .. 99999

P05.01 The hysteresis is the margin between condition "excess" (>) and "no excess"
Alarm Hysteresis Width (<), defined by its bandwidth.
Range: 00.1 .. 99.9 The width of hysteresis is set as a percentage of the switching point.

P05.02 The hysteresis band for SP3 may be placed above or below setpoint.
Hysteresis position Setting
Range: 0 .. 1 0 : Hysteresis above SP3
1 : Hysteresis below SP3

P05.03 Setting
Relay State at n > SP3 0 : Relay energized if n > SP3
Range: 0 … 3 1 : Relay de-energized if n > SP3
2 : Relay energized if n > SP3, output frozen at test
3 : Relay de-energized if n > SP3, output frozen at test

P05.04 If a sensor fault is detected, alarm SP3 can be forced into a defined state.
Alarm State at Setting
Sensor Error Condition 0 : Alarm SP3 according to measured rotational speed
Range: 0 .. 2 1: Alarm SP3 forced to state n < SP3
2: Alarm SP3 forced to state n > SP3

P05.05 Assignment LED (red or green) to alarm state n > SP3.

Status of LEDs 3 and 4 for Setting
Alarm n > SP3 0 : LED3 (green) on at n > SP3
Range: 0 .. 1 1 : LED4 (red) on at n > SP3

E16A358 Rev:00 Page 69 of 99

Parameter Group P06.xx of Monitor E1668
Eddy sensor input and MPU input

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P06.00
Reserved for future application

Eddy sensors must not be operated outside (manufacturer) specified limits of

voltage level and supply current. These limits can be checked (see pa-
rameter P02.05).

P06.01 Input check: input voltage upper limit in xx.x volts

Input voltage upper limit
Range: 00.0 to 99.9

P06.02 input voltage lower limit in xx.x volts

Input voltage lower limit
Range: 00.0 to 99.9

P06.03 current drain upper limit in xxx ma

Current drain upper limit
Range: 000 to 999

P06.04 current drain lower limit in xxx ma

Current drain lower limit
Range: 000 to 999

P06.05 Signal input hysteresis (sensitivity level) in x.x volts

Signal input hysteresis Note: with setting 0.0 hysteresis is approx 70 millivolts
Range: 0.0 to 2.5

E16A358 Rev:00 Page 70 of 99

Parameter Group P07.xx of Monitor E1668
Trip-Line-Monitoring, Rotational Direction Output

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P07.00 If activated the Monitor checks the output of the Trip-Lines.

Trip-Line-Monitoring If two or three Trip-Lines indicate trip condition the monitor moves to trip sta-
Range: 0 .. 3 tus (Trip Lock Function).
Following the reset signal the monitor releases the trip state for one second.
Within this time the feedback signal must respond correctly, otherwise the
monitor returns to trip status.
Setting
0 : Trip-Line-Monitoring not active
1 : Trip-Line-Monitoring active, with response time until trip = 50 ms
2 : not admissible
3 : Trip-Line-Monitoring active, with response time until trip = 3 ms

P07.01 Setting
Trip-Line Level at Trip-Status 0 : Low Level at Trip-Status (relays de-energized to Trip)
Range: 0 .. 1 1 : High-Level at Trip-Status (relays energized to Trip)

P07.02 Setting
Signal-Input Level for Rota- 0 : Signal level low is assigned to forward motion
tional Direction Detection 1 : Signal level high is assigned to forward motion
Range: 0 .. 1

P07.03 Setting
Relay State for status forward 0 : Relay de-energized at status forward motion
motion 1 : Relay energized at status forward motion
Range: 0 .. 1

P07.04
Reserved for future application.

E16A358 Rev:00 Page 71 of 99

Parameter Group P08.xx of Monitor E1668
Analog Output

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P08.00 The high end defines the speed (in terms of RPM) at which the analog output
High End of Analog Output delivers 20 ma (with P08.04 = 0), resp. 0 / 4 ma (with
P08.04 = 1).
Range: 00001 .. 99999

P08.01 The low end defines the speed (in terms of RPM) at which the analog output
Low End of Analog Output delivers 0 resp. 4 ma (with P08.04 = 0), resp. 20 ma (with
P08.04 = 1).
Range: 00000 .. 99999

P08.02 Setting
Analog Output Zero Level 0 : without live zero (0..20 ma)
Range: 0 .. 1 1 : with live zero (4..20 ma)

P08.03 Setting
Output Level at Sensor Fault 0 : no change of output
Range: 0 .. 1 1 : output goes to < 0 ma
2 : output goes to >20,8 ma

P08.04 Setting
Direction of Analog Output 0 : output is increasing with increasing speed (0/4 …20 ma)
Range: 0 .. 1 1 : output is decreasing with increasing speed (20….4/0 ma)

P08.05 Setting
Output Response at 0 : output follows test-speed
Test-speed 1 : output is frozen (on last value before test starts) during test-speed
Range: 0 .. 1

P08.06 Analog output may be checked for short circuit or no load or its correct out-
Test of Analog Output Value put, detected via integrated control feedback.
Range: 0 .. 1 Setting
0 : output value is not tested (mandatory with versions E1668.0xx
respective E1668.1xx)
1 : value of output is tested (only possible with versions E1668.2xx)

E16A358 Rev:00 Page 72 of 99

Parameter Group P09.xx of Monitor E1668
Reserved for future application

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P09.00
Reserved for future application

E16A358 Rev:00 Page 73 of 99

Parameter Group P10.xx of Monitor E1668
Voter 1 and Logic Output LO1

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P10.00 Setting
Operation mode 0 : Voter inactive
Range: 0 .. 5 1 : Voter always active (over entire speed range)
2 : Voter only active, if n > SPV1
3 : Voter only active, if n < SPV1
4 : Voter inactive, output LO1 low, if n > SPV1
5 : Voter inactive, output LO1 high, if n > SPV1

P10.01 Setting
Input Truth Level 0 : high level at inputs is assigned to trip condition
Range: 0 .. 1 1 : low level at inputs is assigned to trip condition

P10.02 Selecparameter description Voting Logics are:

Voting Logic  1oo2 : trip is released if 1of 2 inputs signalizes trip condition
Range: 0 .. 3  2oo2 : trip is released if 2 of 2 inputs signalize trip condition
 2oo3 : trip is released if 2 of 3 inputs signalize trip condition
 3oo3 : trip is released if 3 of 3 inputs signalize trip condition
Setting
0 : 1oo2 (only inputs 1 and 2 of voter 1 are monitored)
1 : 2oo2 (only inputs 1 and 2 of voter 1 are monitored)
2 : 2oo3 (all three inputs of voter 1 are monitored)
3 : 3oo3 (all three inputs of voter 1 are monitored)

P10.03 If the trip signal is shorter than the Trip after

Truth Time until Trip minimum truth time, the signal is Setting
min. max.
Range: 0 .. 7 not valid (anti bouncing filter). If the 0 0 msec 4 msec
signal is longer than the maximum 1 3 msec 12 msec
truth time, the signal is valid and 2 9 msec 36 msec
trip is released 3 18 msec 54 msec
Note: 4 36 msec 108 msec
Signal truth times in between min. 5 72 msec 216 msec
and max. may release trip. 6 144 msec 432 msec
7 288 msec 864 msec

Maximum response time until trip-lines go to trip status is

maximum truth time + 3 milliseconds.

P10.04 Setting
Trip by Voter 1 latched 0 : trip by voter 1 is not latched
Range: 0 .. 1 1 : trip by voter 1 is latched until reset

E16A358 Rev:00 Page 74 of 99

Parameter Group P10.xx (continued) of Monitor E1668
Voter 1 and Logic Output LO1

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P10.05 To avoid unnecessary Antivalence Alarms due to shifted trip release signals
Delay of Antivalence Alarm at the voter inputs a delay may be introduced.
Range: 0 .. 9 Antivalence alarm will then be released only if the time shift between the
signals exceeds the set delay.
Setting
0 : no delay
1 : delay = 100 milliseconds
2 : delay = 500 milliseconds
3 : delay = 1 second
4 : delay = 2 seconds
5 : delay = 3 seconds
6 : delay = 5 seconds
7 : delay = 15 seconds
8 : delay = 30 seconds
9 : delay = 60 seconds

Note:
The input signals will be monitored for antivalence only, if the voter is active.

P10.06 Depending on setting of P10.00, SPV1 controls the activity of voter 1 or con-
Setpoint SPV1 trols directly the output LO1.
Range: 00001 .. 99999 [RPM] SPV1 is set in terms of RPM.

P10.07
Reserved for future application

P10.08
Reserved for future application

E16A358 Rev:00 Page 75 of 99

Parameter Group P11.xx of Monitor E1668
Voter 2 and Logic Output LO2

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P11.00 Setting
Operation mode 0 : Voter inactive
Range: 0 .. 5 1 : Voter always active (over entire speed range)
2 : Voter only active, if n > SPV2
3 : Voter only active, if n < SPV2
4 : Voter inactive, output LO2 low, if n > SPV2
5 : Voter inactive, output LO2 high, if n > SPV2

P11.01 Setting
Input Truth Level 0 : high level at inputs is assigned to trip condition
Range: 0 .. 1 1 : low level at inputs is assigned to trip condition

P11.02 Selectable Voting Logics are:

Voting Logic  1oo2 : trip is released if 1of 2 inputs signalizes trip condition
Range: 0 .. 3  2oo2 : trip is released if 2 of 2 inputs signalize trip condition
 2oo3 : trip is released if 2 of 3 inputs signalize trip condition
 3oo3 : trip is released if 3 of 3 inputs signalize trip condition
Setting
0 : 1oo2 (only inputs 1 and 2 of voter 2 are monitored)
1 : 2oo2 (only inputs 1 and 2 of voter 2 are monitored)
2 : 2oo3 (all three inputs of voter 2 are monitored)
3 : 3oo3 (all three inputs of voter 2 are monitored)

P11.03 If the trip signal is shorter than the Trip after

Truth Time until Trip minimum truth time, the signal is Setting
min. max.
Range: 0 .. 7 not valid (anti bouncing filter). If the 0 0 msec 4 msec
signal is longer than the maximum 1 3 msec 12 msec
truth time, the signal is valid and 2 9 msec 36 msec
trip is released. 3 18 msec 54 msec
Note: 4 36 msec 108 msec
Signal truth times in between min. 5 72 msec 216 msec
and max. may release trip. 6 144 msec 432 msec
7 288 msec 864 msec

Maximum response time until output of trip-lines go to trip status is

maximum truth time + 3 milliseconds.

P11.04 Setting
Trip by Voter 2 latched 0 : trip by voter 2 is not latched
Range: 0 .. 1 1 : trip by voter 2 is latched until reset

E16A358 Rev:00 Page 76 of 99

Parameter Group P11.xx (continued) of Monitor E1668
Voter 2 and Logic Output LO2

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P11.05 To avoid unnecessary Antivalence Alarms due to shifted trip release signals
Delay of Antivalence Alarm at the voter inputs a delay may be introduced.
Range: 0 .. 9 Antivalence alarm will then be released only if the time shift between the
signals exceeds the set delay.
Setting
0 : no delay
1 : delay = 100 milliseconds
2 : delay = 500 milliseconds
3 : delay = 1 second
4 : delay = 2 seconds
5 : delay = 3 seconds
6 : delay = 5 seconds
7 : delay = 15 seconds
8 : delay = 30 seconds
9 : delay = 60 seconds

Note:
The input signals will be monitored for antivalence only, if the voter is active.

P11.06 Depending on setting of P11.00, SPV2 controls the activity of voter 2 or con-
Setpoint SPV2 trols directly the output LO2.
Range: 00001 .. 99999 [RPM] SPV2 is set in terms of RPM.

P11.07
Reserved for future application

P11.08
Reserved for future application

E16A358 Rev:00 Page 77 of 99

Parameter Group P12.xx of Monitor E1668
Voter 3 and Logic Output LO3

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P12.00 Setting
Operation mode 0 : Voter inactive
Range: 0 .. 5 1 : Voter always active (over entire speed range)
2 : Voter only active, if n > SPV3
3 : Voter only active, if n < SPV3
4 : Voter inactive, output LO3 low, if n > SPV3
5 : Voter inactive, output LO3 high, if n > SPV3

P12.01 Setting
Input Truth Level 0 : high level at inputs is assigned to trip condition
Range: 0 .. 1 1 : low level at inputs is assigned to trip condition

P12.02 Selectable Voting Logics are:

Voting Logic  1oo2 : trip is released if 1of 2 inputs signalizes trip condition
Range: 0 .. 3  2oo2 : trip is released if 2 of 2 inputs signalize trip condition
 2oo3 : trip is released if 2 of 3 inputs signalize trip condition
 3oo3 : trip is released if 3 of 3 inputs signalize trip condition
Setting
0 : 1oo2 (only inputs 1 and 2 of voter 3 are monitored)
1 : 2oo2 (only inputs 1 and 2 of voter 3 are monitored)
2 : 2oo3 (all three inputs of voter 3 are monitored)
3 : 3oo3 (all three inputs of voter 3 are monitored)

P12.03 If the trip signal is shorter than the Trip after

Truth Time until Trip minimum truth time, the signal is Setting
min. max.
Range: 0 .. 7 not valid (anti bouncing filter). If the 0 0 msec 4 msec
signal is longer than the maximum 1 3 msec 12 msec
truth time, the signal is valid and 2 9 msec 36 msec
trip is released. 3 18 msec 54 msec
Note: 4 36 msec 108 msec
Signal truth times in between min. 5 72 msec 216 msec
and max. may release trip. 6 144 msec 432 msec
7 288 msec 864 msec

Maximum response time until output of trip-lines go to trip status is

maximum truth time + 3 milliseconds.

P12.04 Setting
Trip by Voter3 latched 0 : trip by voter 3 is not latched
Range: 0 .. 1 1 : trip by voter 3 is latched until reset

E16A358 Rev:00 Page 78 of 99

Parameter Group P12.xx (continued) of Monitor E1668
Voter 3 and Logic Output LO3

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P12.05 To avoid unnecessary Antivalence Alarms due to shifted trip release signals
Delay of Antivalence Alarm at the voter inputs a delay may be introduced.
Range: 0 .. 9 Antivalence alarm will then be released only if the time shift between the
signals exceeds the set delay.
Setting
0 : no delay
1 : delay = 100 milliseconds
2 : delay = 500 milliseconds
3 : delay = 1 second
4 : delay = 2 seconds
5 : delay = 3 seconds
6 : delay = 5 seconds
7 : delay = 15 seconds
8 : delay = 30 seconds
9 : delay = 60 seconds

Note:
The input signals will be monitored for antivalence only, if the voter is active.

P12.06 Depending on setting of P12.00, SPV3 controls the activity of voter 3 or con-
Setpoint SPV3 trols directly the output LO3.
Range: 00001 .. 99999 [RPM] SPV3 is set in terms of RPM.

P12.07
Reserved for future application

P12.08
Reserved for future application

E16A358 Rev:00 Page 79 of 99

Parameter Group P13.xx of Monitor E1668
Voter 4 and Logic Output LO4

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P13.00 Setting
Operation mode 0 : Voter inactive
Range: 0 .. 5 1 : Voter always active (over entire speed range)
2 : Voter only active, if n > SPV4
3 : Voter only active, if n < SPV4
4 : Voter inactive, output LO4 low, if n > SPV4
5 : Voter inactive, output LO4 high, if n > SPV4

P13.01 Setting
Input Truth Level 0 : high level at inputs is assigned to trip condition
Range: 0 .. 1 1 : low level at inputs is assigned to trip condition

P13.02 Selectable Voting Logics are:

Voting Logic  1oo2 : trip is released if 1of 2 inputs signalizes trip condition
Range: 0 .. 3  2oo2 : trip is released if 2 of 2 inputs signalize trip condition
 2oo3 : trip is released if 2 of 3 inputs signalize trip condition
 3oo3 : trip is released if 3 of 3 inputs signalize trip condition
Setting
0 : 1oo2 (only inputs 1 and 2 of voter 4 are monitored)
1 : 2oo2 (only inputs 1 and 2 of voter 4 are monitored)
2 : 2oo3 (all three inputs of voter 4 are monitored)
3 : 3oo3 (all three inputs of voter 4 are monitored)

P13.03 If the trip signal is shorter than the Truth Time until Trip
Truth Time until Trip minimum truth time, the signal is Setting
min. max.
Range: 0 .. 7 not valid (anti bouncing filter). If the 0 0 msec 4 msec
signal is longer than the maximum 1 3 msec 12 msec
truth time, the signal is valid and 2 9 msec 36 msec
trip is released. 3 18 msec 54 msec
Note: 4 36 msec 108 msec
Signal truth times in between min. 5 72 msec 216 msec
and max. may release trip. 6 144 msec 432 msec
7 288 msec 864 msec

Maximum response time until output of trip-lines go to trip status is

maximum truth time + 3 milliseconds.

P13.04 Setting
Trip by Voter 4 latched 0 : trip by voter 4 is not latched
Range: 0 .. 1 1 : trip by voter 4 is latched until reset

E16A358 Rev:00 Page 80 of 99

Parameter Group P13.xx (continued) of Monitor E1668
Voter 4 and Logic Output LO4

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P13.05 To avoid unnecessary Antivalence Alarms due to shifted trip release signals
Delay of Antivalence Alarm at the voter inputs a delay may be introduced.
Range: 0 .. 9 Antivalence alarm will then be released only if the time shift between the
signals exceeds the set delay.
Setting
0 : no delay
1 : delay = 100 milliseconds
2 : delay = 500 milliseconds
3 : delay = 1 second
4 : delay = 2 seconds
5 : delay = 3 seconds
6 : delay = 5 seconds
7 : delay = 15 seconds
8 : delay = 30 seconds
9 : delay = 60 seconds

Note:
The input signals will be monitored for antivalence only, if the voter is active.

P13.06 Depending on setting of P13.00, SPV4 controls the activity of voter 4 or con-
Setpoint SPV4 trols directly the output LO4.
Range: 00001 .. 99999 [RPM] SPV4 is set in terms of RPM.

P1307
Reserved for future application

P13.08
Reserved for future application

E16A358 Rev:00 Page 81 of 99

Parameter Group P14.xx of Monitor E1668
Voter 5 and Logic Output LO5

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P14.00 Setting
Operation mode 0 : Voter inactive
Range: 0 .. 5 1 : Voter always active (over entire speed range)
2 : Voter only active, if n > SPV5
3 : Voter only active, if n < SPV5
4 : Voter inactive, output LO5 low, if n > SPV5
5 : Voter inactive, output LO5 high, if n > SPV5

P14.01 Setting
Input Truth Level 0 : high level at inputs is assigned to trip condition
Range: 0 .. 1 1 : low level at inputs is assigned to trip condition

P14.02 Selectable Voting Logics are:

Voting Logic  1oo2 : trip is released if 1of 2 inputs signalizes trip condition
Range: 0 .. 3  2oo2 : trip is released if 2 of 2 inputs signalize trip condition
 2oo3 : trip is released if 2 of 3 inputs signalize trip condition
 3oo3 : trip is released if 3 of 3 inputs signalize trip condition
Setting
0 : 1oo2 (only inputs 1 and 2 of voter 5 are monitored)
1 : 2oo2 (only inputs 1 and 2 of voter 5 are monitored)
2 : 2oo3 (all three inputs of voter 5 are monitored)
3 : 3oo3 (all three inputs of voter 5 are monitored)

P14.03 If the trip signal is shorter than the Trip after

Truth Time until Trip minimum truth time, the signal is Setting
min. max.
Range: 0 .. 7 not valid (anti bouncing filter). If the 0 0 msec 4 msec
signal is longer than the maximum 1 3 msec 12 msec
truth time, the signal is valid and 2 9 msec 36 msec
trip is released. 3 18 msec 54 msec
Note: 4 36 msec 108 msec
Signal truth times in between min. 5 72 msec 216 msec
and max. may release trip. 6 144 msec 432 msec
7 288 msec 864 msec

Maximum response time until output of trip-lines go to trip status is

maximum truth time + 3 milliseconds.

P14.04 Setting
Trip by Voter 5 latched 0 : trip by voter 5 is not latched
Range: 0 .. 1 1 : trip by voter 5 is latched until reset

E16A358 Rev:00 Page 82 of 99

Parameter Group P14.xx (continued) of Monitor E1668
Voter 5 and Logic Output LO5

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P14.05 To avoid unnecessary Antivalence Alarms due to shifted trip release signals
Delay of Antivalence Alarm at the voter inputs a delay may be introduced.
Range: 0 .. 9 Antivalence alarm will then be released only if the time shift between the
signals exceeds the set delay.
Setting
0 : no delay
1 : delay = 100 milliseconds
2 : delay = 500 milliseconds
3 : delay = 1 second
4 : delay = 2 seconds
5 : delay = 3 seconds
6 : delay = 5 seconds
7 : delay = 15 seconds
8 : delay = 30 seconds
9 : delay = 60 seconds

Note:
The input signals will be monitored for antivalence only, if the voter is active.

P14.06 Depending on setting of P14.00, SPV5 controls the activity of voter 5 or con-
Setpoint SPV5 trols directly the output LO5.
Range: 00001 .. 99999 [RPM] SPV5 is set in terms of RPM.

P14.07
Reserved for future application

P14.08
Reserved for future application

E16A358 Rev:00 Page 83 of 99

Parameter Group P15.xx of Monitor E1668
Voter 6 and Logic Output LO6

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P15.00 Setting
Operation mode 0 : Voter inactive
Range: 0 .. 5 1 : Voter always active (over entire speed range)
2 : Voter only active, if n > SPV6
3 : Voter only active, if n < SPV6
4 : Voter inactive, output LO6 low, if n > SPV6
5 : Voter inactive, output LO6 high, if n > SPV6

P15.01 Setting
Input Truth Level 0 : high level at inputs is assigned to trip condition
Range: 0 .. 1 1 : low level at inputs is assigned to trip condition

P15.02 Selectable Voting Logics are:

Voting Logic  1oo2 : trip is released if 1of 2 inputs signalizes trip condition
Range: 0 .. 3  2oo2 : trip is released if 2 of 2 inputs signalize trip condition
 2oo3 : trip is released if 2 of 3 inputs signalize trip condition
 3oo3 : trip is released if 3 of 3 inputs signalize trip condition
Setting
0 : 1oo2 (only inputs 1 and 2 of voter 6 are monitored)
1 : 2oo2 (only inputs 1 and 2 of voter 6 are monitored)
2 : 2oo3 (all three inputs of voter 6 are monitored)
3 : 3oo3 (all three inputs of voter 6 are monitored)

P15.03 If the trip signal is shorter than the Trip after

Truth Time until Trip minimum truth time, the signal is Setting
min. max.
Range: 0 .. 7 not valid (anti bouncing filter). If the 0 0 msec 4 msec
signal is longer than the maximum 1 3 msec 12 msec
truth time, the signal is valid and 2 9 msec 36 msec
trip is released. 3 18 msec 54 msec
Note: 4 36 msec 108 msec
Signal truth times in between min. 5 72 msec 216 msec
and max. may release trip. 6 144 msec 432 msec
7 288 msec 864 msec

Maximum response time until output of trip-lines go to trip status is

maximum truth time + 3 milliseconds.

P15.04 Setting
Trip by Voter 6 latched 0 : trip by voter 6 is not latched
Range: 0 .. 1 1 : trip by voter 6 is latched until reset

E16A358 Rev:00 Page 84 of 99

Parameter Group P15.xx (continued) of Monitor E1668
Voter 6 and Logic Output LO6

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P15.05 To avoid unnecessary Antivalence Alarms due to shifted trip release signals
Delay of Antivalence Alarm at the voter inputs a delay may be introduced.
Range: 0 .. 9 Antivalence alarm will then be released only if the time shift between the
signals exceeds the set delay.
Setting
0 : no delay
1 : delay = 100 milliseconds
2 : delay = 500 milliseconds
3 : delay = 1 second
4 : delay = 2 seconds
5 : delay = 3 seconds
6 : delay = 5 seconds
7 : delay = 15 seconds
8 : delay = 30 seconds
9 : delay = 60 seconds

Note:
The input signals will be monitored for antivalence only, if the voter is active.

P15.06 Depending on setting of P15.00, SPV6 controls the activity of voter 6 or con-
Setpoint SPV6 trols directly the output LO6.
Range: 00001 .. 99999 [RPM] SPV6 is set in terms of RPM.

P15.07
Reserved for future application

P15.08
Reserved for future application

E16A358 Rev:00 Page 85 of 99

Parameter Group P16.xx of Monitor E1668
Reserved for future application

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P16.00
Reserved for future application

P16.01
Reserved for future application

P16.02
Reserved for future application

P16.03
Reserved for future application

P16.04
Reserved for future application

P16.05
Reserved for future application

P16.06
Reserved for future application

P16.07
Reserved for future application

P16.08
Reserved for future application

Parameter Group P17.xx of Monitor E1668

PROFIBUS

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P17.00 All members of the PROFIBUS-Communication must have different device

Device No for PROFIBUS nos.
Range: 001 .. 125

P17.01 For test purposes (operation of both PROFIBUS Interfaces at the same Bus)
Address Offset for redundant an address offset may be introduced for the redundant (right one on front
panel) PROFIBUS Interface.
PROFIBUSInterface
Example:
Range: 0 .. 9 With P17.00 = 34 und P17.01 = 4 the right hand side PROFIBUS Interface
has adress 38.

E16A358 Rev:00 Page 86 of 99

10. Parameters of Test-Generator E1698

10.1. Summary of parameters and their default values

Param. Default
Parameter Function
No. Value

P00.xx Code figure, Parameter Lock

P00.00 0000 Code figure
.01 0000 New code figure
.02 1 Parameter Lock : 0: locked / 1: enabled
P01.xx Output Scaling
P01.00 0 Reserved for future application
.01 10000 Value of output frequency in Hz at nominal Test-Speed
.02 0 Reserved for future applications
.03 10000 Nominal Test-Speed in RPM
P02.xx Monitor-Test Configuration
P02.00 1 Reserved for future application
.01 0 Reserved for future application
.02 1440 Test Interval in xxxx minutes
.03 0 Test of SP1 or Test of SP1A and SP1B
.04 11000 Test-Speed 1: 'n > SP1'
.05 09000 Test-Speed 2: 'n < SP1'
P03.xx Trip-Line Test Configuration
P03.00 01440 Test Interval in xxxxx minutes (max 65000)
.01 0 Test Mode: 0 ... 3 (see parameter description)
.02 0 Reserved for future application
.03 0 Feedback-Signal level at trip : 0: low / 1: high
.04 0 Reserved for future applications
.05 00 duration time for Trip-Line test in xx sec
.06 0 Reserved for future application
.07 60 Waiting time after reset of alarms in xx sec
.08 0 Waiting time after test of a Trip-Line in xx sec
.09 0 Reserved for future application
P04.xx Total no of Valve Control Modules within the System
P04.00 00 Total no of Valve Control Modules within the System
P05.xx Data Interface
P05.00 020 PROFIBUS-Interface Device no.
01 00 Address Offset for redundant Profibus Interface

E16A358 Rev:00 Page 87 of 99

10.2. Description of Parameters and their Settings of Test-Generator E1698

Parameter Group P00.xx of Test-Generator E1698

Code Figure, Parameter Lock

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P00.00 If the parameters are locked (see P00.02), the code figure must be entered
Code Figure prior to any change of other parameters.
Range: 0000 .. 9999 If the code figure is not correct, -E 1- is displayed.
Without code figure and P00.02 : 0 the values of all parameters may be in-
spected, but not changed.

P00.01 A new code figure may be set in P00.01. Then it replaces the previous one.
New Code Figure
Range: 0000 .. 9999

P00.02 Setting
Parameter Lock 0 : Parameters are locked, change only possible with code figure
Range: 0 .. 1 1 : Parameters unlocked, change of parameter values possible

E16A358 Rev:00 Page 88 of 99

Parameter Group P01.xx of Test-Generator E1698
Output Scaling

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P01.00
Reserved for future applications

Description of Scaling:
Scaling defines the relationship between the output signal frequency (in
terms of Hz) to the monitors E1668, and the corresponding test-speed (in
terms of RPM).
Of course, they must refer to the same operation level. This reference point
is recommended close to the high end of the intended operation range. In
later operation, however, it may be overrun without error.

Example:
1500 Hz corresponds to 3000 RPM :
 Step P01.01 : setting 01500
Step P01.03 : setting 03000

P01.01 See description of Scaling.

Nominal Output Frequency [Hz]
at nominal Test-Speed
Range: 00001 .. 99999

P01.02
Reserved for future application

P01.03 See description of Scaling.

Nominal Test-Speed [RPM]
Range: 00001 .. 99999

E16A358 Rev:00 Page 89 of 99

Parameter Group P02.xx of Test-Generator E1698
Monitor Test

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P02.00
Reserved for future application

P02.01
Reserved for future application

P02.02 The time interval in between the Monitor Test sequences can be set from
Time Interval in between 0001 to 9999 minutes.
Monitor Test Sequences Recommended settings: any time in between 60 and 1440 minutes.
Range: 0001 .. 9999 [min]

P02.03 De-Energize/Energize depends on the setting of P03.02 of monitors E1668.

Test of SP1 Setting
or 0 : if test of SP1 only is required
Test of SP1A and SP1B 1 : not permissible
Range: 0 .. 3 2 : not permissible
3 : if test of SP1A and SP1B is required

Explanation:
If P02.03 = 0 or 2, then Test-Speed 1 and 2:
In the first step of the monitor auto test sequence, the monitor is tested with
test-speed 1. Value for test-speed 1 must be > SP1 of monitor.
In the second step of the monitor auto test sequence, the monitor is tested
with test-speed 2. Value for test-speed 2 must be < SP1 of monitor.

Example:
SP1 of monitor is set to 3300 RPM.
Recommended value for Test-speed 1 : 3305 RPM
Recommended value for Test-speed 2 : 3295 RPM

If P02.03 = 3, then P02.04 must be set to SP1A (P03.00 of E1668) and

P02.05 must be set to SP1B (P03.03 of E1668).
Test will then be performed with Test-Speed SP1A +/- 5RPM and with Test-
Speed SP1B +/- 5RPM.

E16A358 Rev:00 Page 90 of 99

Parameter Group P02.xx (continued) of Test-Generator E1698
Monitor Test

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P02.04 See explanation of step P03.02

Test-Speed 1 [RPM] resp. SP1A
Range: 00001 .. 99999

P02.05 See explanation of step P03.02

Test-Speed 2 [RPM] resp. SP1B
Range: 00001 .. 99999

E16A358 Rev:00 Page 91 of 99

Parameter Group P03.xx of Test-Generator E1698
Trip-Line Test

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P03.00 The time interval in between automatic (see P03.01) Trip-Line Test se-
Time Interval in between quences can be set from 00001 to 65000 minutes.
Trip-Line Test Sequences Recommended settings: not less than 60 minutes.
Range: 00001 .. 65000 [min]

P03.01 Setting
Trip-Line Test Mode 0 : Trip-Line Test off, feedback signal from Valve Control Modules are not
Range: 0 .. 6 evaluated)
1 : Trip-Line Test sequence in automatic mode (cyclic, interval as set in
P03.00); feedback signals from Valve Control Circuits will be evaluated.
If the feedback does not signalize trip status, the output will hold the
corresponding Trip-Line on trip status and the test is aborted.
2 : Trip-Line Test controlled by external signals, simultaneous test of 2 or 3
lines is inhibited,
feedback signal from Valve Control Circuits are not evaluated
3 : one single Trip-Line Test Sequence, externally triggered by signal
Start Auto-Test-Sequence;
feedback signals from Valve Control Circuits will be evaluated,
4 : Trip-Line Test controlled by external signals, simultaneous test of 2 or 3
lines is possible,
feedback signal from Valve Control Circuits are not evaluated.
5 : Trip-Line Test sequence in automatic mode (cyclic, interval as set in
P03.00); feedback signals from Valve Control Circuits will be evaluated.
If the feedback does not signalize trip status, the output will return to
No Trip status and the test is aborted.
6 : Reserved for future application

For a system E16A358 setting 1 or 3 is mandatory during normal operation.

P03.02
Reserved for future application

P03.03 Setting
Feedback Level from Trip-Lines 0 : low level feedback expected at trip state
at trip state 1 : high level feedback expected at trip state
Range: 0 .. 1
For a system E16A358 setting 0 is mandatory.

P03.04
Fix value 0, do not change

E16A358 Rev:00 Page 92 of 99

Parameter Group (continued) P03.xx of Test-Generator E1698
Trip-Line Test

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P03.05 If automatic sequence is activated (P03.01 = 1 or = 3), each Trip-Line is set

Duration of Trip-Line Test (subsequently) to trip condition for the duration set in P03.05. Duration is set
Range: 01 .. 99 [sec] in terms of seconds.
Note: Setting 00 sets the Trip-Line to trip condition for 0.5 seconds.

For a system E16A358 a setting of 00 or 01 is mandatory.

P03.06
Reserved for future application

P03.07 After a reset of an alarm, the Test-Generator waits for this time before it
Waiting Time after Reset of starts to check the external feedback signals.
Alarms Waiting time is set in terms of seconds.
Range: 01 .. 99 [sec] Note: Setting 00 equals 01.

P03.08 The Test-Generator waits after the test of a Trip-Line for this time before it
Waiting Time after test of a Trip- permanently checks again the status of the feedback signals from the Trip-
Line Lines for No-Trip-state.
Range: 01 .. 99 [sec] Waiting time is set in terms of seconds.

Note: Setting 00 equals 01.

P03.09
Reserved for future application

Parameter Group P04.xx of Testgenerator E1698

Total Number of Valve Control Modules within the System

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P04.00 The Testgenerator controls the data communication to the Valve Control
Total Number of Valve Control Modules. Therefore the total number of Valve Control Modules within the
Modules within the System E16A358 system must be set in this parameter.
Range: 00 .. 99

E16A358 Rev:00 Page 93 of 99

Parameter Group P05.xx of Testgenerator E1698
PROFIBUS

Parameter No. Description of Parameters and their Settings

Meaning of Parameter
Setting Range of Parameter

P05.00 All members of the PROFIBUS-Communication must have different device

Device No for PROFIBUS nos.
Range: 001 .. 125

P05.01 For test purposes (operation of both PROFIBUS Interfaces at the same Bus)
Address Offset for redundant an address offset may be introduced for the redundant (right one on front
panel) PROFIBUS Interface.
PROFIBUSInterface
Example:
Range: 0 .. 9 With P05.00 = 33 und P05.01 = 4 the right hand side PROFIBUS Interface
has adress 37.

E16A358 Rev:00 Page 94 of 99

11. Event codes and Troubleshooting

11.1. Event codes on display of Monitor E1668

The Event codes are shown in format E.0.x.x.x .
Depending on setting of P02.11 only the first occurred fault or all faults are displayed (combi-
nation of faults is possible).

Display Explanation of Event code

E.0.0.0.0 Overspeed trip (if P03.02 = 0)

E.0.x.x.1 Sensor failure (current or voltage), refer to P02.05

E.0.x.x.2 Deviation of primary sensor versus neighbor sensors, refer to P02.07

E.0.x.x.3 E.x.x.x.1 + E.x.x.x.2

E.0.x.x.4 Speed < SP2

E.0.x.x.5 E.x.x.x.1 + E.x.x.x.4

E.0.x.x.6 E.x.x.x.2 + E.x.x.x.4

E.0.x.x.7 E.x.x.x.1 + E.x.x.x.2 + E.x.x.x.4

E.0.x.1.x Generator tests with zero speed

E.0.x.2.x Trip by Voter

E.0.x.4.x Internal relay fault

E.0.1.x.x Failure detection during internal self test

E.0.2.x.x Overspeed trip (if P03.02 = 1)

E.0.3.x.x E.x.1.x.x + E.x.2.x.x

E.0.4.0.0 Alarm caused by antivalence of Voter Signals or signals for Trip-Line-Monitoring

without Trip (for troubleshooting refer to next page)

E.0.4.0.0
Trip-Line Monitoring has caused trip
with Trip

E.0.4.2.0 Trip by voter ( with non-coincidence at inputs of voter)

E.0.6.x.x E.x.2.x.x + E.x.4.x.x

Trip-Line Monitoring has caused trip plus antivalence of signals for Trip-Line-Monitoring
E.0.8.0.0
(for troubleshooting refer to next page)
Trip-Line Monit by antivalence of signals for Trip-Line-Monitoring
E.0.c.0.0
(for troubleshooting refer to next page)
External Analog output error (short circuit / 'no load' detected via feedback from monitor termi-
E.3.0.2.0
nals)
E.3.0.2.1 Internal Analog output error (fault on monitor board)

E.6.0.0.1 Parameter value changed via RS232-Interface

-E1- Wrong code figure in step P00.00

-E4- No test by E1698 for more than 7 days (releases also Monitor Warning Alarm)

E16A358 Rev:00 Page 95 of 99

11.2. Troubleshooting if display of Monitor reads E.0.4.x.x
Display E.0.4.x.x signalizes a fault (not all signals are identical) from the input signals for the
voters or for Trip-Line-Monitoring (resp. feedbacks from 2oo3-solenoid).
The actual status of the signal inputs is shown in Special Display Mode 2.

Switching between Standard and Special Display Mode 2 by pressing keys and simul-
taneously.

Special Display Mode 2

In Special Display Mode 2 LED1 and LED4 are blinking.

Steps of Special Display Mode 2 : 0._x.x.x

1._x.x.x
2._x.x.x
3._x.x.x
4._x.x.x

Steps of Special Display Mode 2 are selected with key (next step) resp.
key (previous step).

For troubleshooting only steps 3. _x.x.x and 4. _x.x.x are relevant.

The status of signal inputs for Trip-Line-Monitoring are shown in step 3 .

Display of:
3._x.x.1 : Feedback signal from Trip-Line I is true
3._x.x.2 : Feedback signal from Trip-Line II is true
3._x.x.4 : Feedback signal from Trip-Line III is true

resp. all combinations hereof, for example:

3._x.x.7 : all Feedback signal from Trip-Lines are true

The voter signal inputs are shown in step 4._x.x.x

Display of:
4.n.0.0.1 : Voter n, input 1 active n=1-6 (7 reserved)
4.n.0.0.2 : Voter n, input 2 active
4.n.0.0.4 : Voter n, input 3 active

resp. all combinations hereof, for example:

4.3.0.0.5 : Voter 3, inputs 1 und 3 active, input 2 not active.

While key is pressed, the input status latched at error will be shown, else the current input
status.
Switch the input status of voter 1 to 6 with key .

E16A358 Rev:00 Page 96 of 99

11.3. Event codes on display of Testgenerator E1698

Display Error

C0-E1 Trip status notification from Monitor A

C0-E2 Trip status notification from Monitor B

C0-E3 Trip status notification from Monitor A + B

C0-E4 Trip status notification from Monitor C

C0-E5 Trip status notification from Monitor A + C

C0-E6 Trip status notification from Monitor B + C

C0-E7 Trip status notification from Monitor A + B + C

C1-E1 Fault during Test of Monitor A at step 1

C1-E2 Fault during Test of Monitor A at step 2

C1-E3 Fault during Test of Monitor A at step 3

C2-E1 Fault during Test of Monitor B at step 1

C2-E2 Fault during Test of Monitor B at step 2

C2-E3 Fault during Test of Monitor B at step 3

C3-E1 Fault during Test of Monitor C at step 1

C3-E2 Fault during Test of Monitor C at step 2

C3-E3 Fault during Test of Monitor C at step 3

C9-E1 Fault of Monitor A subsequent to a test step

C9-E2 Fault of Monitor B subsequent to a test step

C9-E4 Fault of Monitor C subsequent to a test step

C9-E7 All Monitors on Trip at start of test

ECh0.1 Alarm notification from Monitor A

ECh0.2 Alarm notification from Monitor B

ECh0.3 Alarm notification from Monitor A + B

ECh0.4 Alarm notification from Monitor C

ECh0.5 Alarm notification from Monitor A + C

ECh0.6 Alarm notification from Monitor B + C

ECh0.7 Alarm notification from Monitor A + B + C

E16A358 Rev:00 Page 97 of 99

 Event codes on display of E1698 (continued)

Display Explanation of Event code

E.0.y.y.1 Trip-Line I in Trip-Status (y = not relevant with this code)

E.0.y.y.2 Trip-Line II in Trip-Status (y = not relevant with this code)

E.0.y.y.4 Trip-Line III in Trip-Status (y = not relevant with this code)

E.0.y.y.7 Trip-Lines I, II, III in Trip-Status (y = not relevant with this code)

E.1.y.y.0 Incorrect feedback from Trip-Line I at test of Trip-Line I (y = not relevant with this code)

E.1.y.y.2 Incorrect feedback from Trip-Line II at test of Trip-Line I (y = not relevant with this code)

E.1.y.y.4 Incorrect feedback from Trip-Line III at test of Trip-Line I (y = not relevant with this code)

E.2.y.y.0 Incorrect feedback from Trip-Line II at test of Trip-Line II (y = not relevant with this code)

E.2.y.y.4 Incorrect feedback from Trip-Line III at test of Trip-Line II (y = not relevant with this code)

E.3.y.y.0 Incorrect feedback from Trip-Line III at test of Trip-Line III (y = not relevant with this code)

Test outputs are asynchronous: if code reappears subsequent to reset, one of the test outputs
FC-5.1
has a hardware fault and E1698 must be replaced
FC-5.2 Input Test Lock is active

FC-5.6 Input Test Lock is active for more than 10 minutes

E16A358 Rev:00 Page 98 of 99

12. Revision Notes

Date Rev. Revision

10.05.0213 00 First Edition

E16A358 Rev:00 Page 99 of 99