
Connection to the Machine to be Controlled
WARNING: Interfacing Safety Outputs
NEVER wire or interface an intermediate device (e.g., PLC, PES, PC) that can fail in such a manner
that there is a loss of the safety stop command to the MPCEs.
To do so could result in serious bodily injury or death.
Figure 7 shows a generic connection of the Safety Module’s two redundant output contacts to machine primary control elements MPCE1
through MPCE4. An MPCE is defined as an electrically-powered element, external to the safety module, which directly controls the ma-
chine’s normal operating motion so that it is the last (in time) to operate when motion is either initiated or arrested. Some older machines
offer only one MPCE; for such machines, it may be necessary to add a second MPCE to establish the appropriate level of safety integrity
(e.g., control reliability).
The connection of the safety outputs must be in such a
manner that the stop command issued by the AT-
xM-13A can not be overridden by a device or circuit
that is not at the same level of safety integrity. This
means that the safety outputs are interfaced on the
output of the machine logic (e.g., PLC or PC). Then,
normally, a feedback signal identifies to the machine
logic the status of the safety module and, if possible,
the status of the MPCEs. If interposing relays are
used, they must be of mechanically linked (forced-gui-
ded) design and monitored by the MPCE Monitoring
Circuit (Y1/Y2).
As a summary, Control Reliability (OSHA
29CFR1910.217, ANSI B11, and ANSI/RIA R15.06)
and Category 3 and 4 (ISO13849-1) requirements de-
mand that a single failure does not lead to the loss of
the safety function, or does not prevent a normal or im-
mediate stop from occurring. The failure or the fault
must be detected at or before the next demand of
safety (e.g., at the beginning or end of a cycle, or when
a safeguard is actuated). The safety-related function of
the machine control then must issue an immediate
stop command or prevent the next machine cycle or
hazardous situation until the failure or fault is correc-
ted. The user must refer to the relevant standard(s)
for complete information.
MPCE1 MPCE2
MPCE4 MPCE3
A2
Y1 (1)
Y2
L2/-V dc
+24V dc
+0V dc
L1/+V dc
24V dc
Connecti ons to
actuati on devices –
see Figures 4a,
4b and 4c
Z1
A1
Z2
S12
S11
S13
S22
K1 K2
13
23
14
24
S21
S23
AT-GM- 13A
AT-HM- 13A
115V ac
230V ac
33 34
43 44
51 52
Y30
Y31
Y32
Y33
B2 0V dc or for AC hookup
B1
*
*
*
*
MPCE
1
MPCE
2
MPCE
3
MPCE
4
Machine
Control
Circ uit
(1) See warni ng at left
abou t i nterfacing
safety outputs
* Arc Supp ressor – See Warning
Figure 7. Machine control circuit connections
As shown in Figure 7, a normally-closed, mechanically linked monitor contact from each of the four MPCEs must be connected in series
across terminals Y1 and Y2. This allows the Safety Module to monitor the state of the MPCEs, and to prevent a successive machine
cycle, if an MPCE fault is detected. Monitoring MPCE contacts is one method of maintaining control reliability. When MPCE monitor
contacts are not available, a jumper wire must be installed across terminals Y1 and Y2.
When a jumper wire is used (dotted line between Y1 and Y2 in Figure 7), it is the user’s responsibility to provide an appropriate level of
safety for the means of machine interfacing to ensure that any single MPCE component failure will not result in the loss of safety.
WARNING: Use of Arc Suppressors
If arc suppressors are used, they MUST be installed as shown across the coils of the Machine Primary
Control Elements (MPCEs). NEVER install suppressors directly across the output contacts of the
Safety Module. It is possible for suppressors to fail as a short circuit. If installed directly across the
output contacts of the Safety Module, a short-circuited suppressor will create an unsafe condition
which could result in serious injury or death.
DUO-TOUCH® SG Two-Hand Control Modules
P/N 67241 Rev. D www.bannerengineering.com - tel: 763-544-3164 9