Reer MOSAIC M1S Installation And Use Manual

MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
(Copy of the original instructions)
MODULAR SAFETY INTEGRATED CONTROLLER
Installation and use
1
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MODULAR SAFETY INTEGRATED CONTROLLER
TABLE OF CONTENTS
INTRODUCTION ................................................................................................................................................. 8
Contents of this handbook ............................................................................... 8
Important safety instructions ............................................................................ 8
Abbreviations and symbols ............................................................................... 9
Applicable standards ........................................................................................ 9
OVERVIEW .......................................................................................................................................................... 10
PRODUCT COMPOSITION ........................................................................................................................... 13
INSTALLATION ................................................................................................................................................ 14
Mechanical fastening ...................................................................................... 14
Calculation of safety distance of an ESPE connected to MOSAIC ....................... 15
Electrical connections ..................................................................................... 15
Instructions concerning connection cables. ........................................................... 16
Master Module M1 ................................................................................... 16
Master Module M1S .................................................................................. 17
USB input ............................................................................................................ 18
MOSAIC Configuration Memory (MCM) .................................................................. 18
MULTIPLE LOAD function .......................................................................... 18
RESTORE function .................................................................................... 19
Module MI8O2 ......................................................................................... 19
Module MI8O4 ......................................................................................... 20
Module MI8 .............................................................................................. 20
Module MI12T8 ........................................................................................ 21
Module MI16 ............................................................................................ 21
Module MO2 ............................................................................................ 22
Module MO4 ............................................................................................ 22
Module MO4L .......................................................................................... 23
Module MR2 ............................................................................................. 24
Module MR4 ............................................................................................. 24
Module MR8 ............................................................................................. 25
Modules MV0 - MV1 - MV2 ...................................................................... 26
ENCODER CONNECTIONS WITH RJ45 CONNECTOR (MV1, MV2) ............................... 27
Module MOR4 .......................................................................................... 28
Module MOR4S8....................................................................................... 28
Module MOS8 .......................................................................................... 29
Module MOS16......................................................................................... 29
Module MO4LHCS8 .................................................................................. 30
Modulo MA2 ............................................................................................ 30
Modulo MA4 ............................................................................................ 31
English
MA2 / MA4 Analog sensor connections ................................................................ 32
Example of connection of Mosaic to the machine control system ........................... 33
CHECKLIST AFTER INSTALLATION.................................................................... 33
OPERATING DIAGRAM ................................................................................................................................. 34
SIGNALS .............................................................................................................................................................. 35
INPUTS ........................................................................................................... 35
2
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MASTER ENABLE .................................................................................................. 35
NODE SEL ............................................................................................................ 35
PROXIMITY INPUT FOR SPEED CONTROLLER MV ..................................................... 36
Configuration With Interleaved Proximity .................................................. 36
RESTART_FBK ...................................................................................................... 37
OUTPUTS........................................................................................................ 38
OUT STATUS (SIL 1/PL c) ...................................................................................... 38
OUT TEST............................................................................................................ 38
OSSD SAFETY OUTPUTS .................................................................................. 38
IMPORTANT NOTE CONCERNING OSSD SAFETY OUTPUTS .......................... 38
OSSD (M1, MI8O2, MO2, MO4) ............................................................................. 39
OSSD (M1S, MI8O4, MO4L) ................................................................................... 39
OSSD (MO4LHCS8) ............................................................................................... 41
OSSD OUTPUTS CONFIGURATION ......................................................................... 42
SAFETY RELAYS (MR2, MR4, MOR4, MOR4S8) ........................................................ 43
Characteristics of the output circuit. ..................................................................... 43
MR2/MR4/MR8 internal contacts diagram............................................................. 43
Example of MR2 module connection with static OSSD outputs of a module M1 ....... 44
Switching operation timing diagram. .................................................................... 45
TECHNICAL FEATURES ................................................................................................................................ 46
GENERAL SYSTEM CHARACTERISTICS .................................................................... 46
Master M1 (Figure 16).......................................................................................... 54
Master M1S (Figure 16) ........................................................................................ 55
MI8O2 (Figure 18) ............................................................................................... 56
MI8O4 (Figure 18) ............................................................................................... 57
MI8 (Figure 20).................................................................................................... 58
MI12T8 (Figure 22) .............................................................................................. 59
MI16 (Figure 22) .................................................................................................. 60
MO2 (Figure 23) .................................................................................................. 61
MO4 (Figure 24) .................................................................................................. 62
MO4L (Figure 18)................................................................................................. 63
MOR4 (Figure 26) ................................................................................................ 64
MOR4S8 (Figure 27)............................................................................................. 65
MOS8 (Figure 28) ................................................................................................ 66
MOS16 (Figure 29)............................................................................................... 67
MV0, MV1, MV2 (Figure 30).................................................................................. 68
8540780 • 10/07/2020 • Rev.38
3
English
Safety level parameters ............................................................................ 46
General data ............................................................................................ 46
Enclosure ................................................................................................. 47
M1 module .............................................................................................. 47
M1S module ............................................................................................. 48
MI8O2 module ......................................................................................... 48
MI8O4 module ......................................................................................... 48
MI8 - MI16 modules................................................................................. 49
MI12T8 module........................................................................................ 49
MO2 - MO4 modules ............................................................................... 49
MO4L module .......................................................................................... 49
MOS8 MOS16 modules .......................................................................... 50
MR2 - MR4 MR8 modules ...................................................................... 50
MOR4 MOR4S8 module .......................................................................... 50
MO4LHCS8 module .................................................................................. 51
MV0 - MV1 - MV2 modules ...................................................................... 51
MA2, MA4 module ................................................................................... 52
MECHANICAL DIMENSIONS.............................................................................. 53
LED INDICATORS (Normal Operation) .............................................................. 54
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MR2, MR4, MR8 (Figure 31) .................................................................................. 69
MO4LHCS8 (Figure 32)......................................................................................... 70
MA2, MA4 (Figure 33) .......................................................................................... 71
LED INDICATORS (Troubleshooting) ................................................................ 72
Master M1 (Figure 34).......................................................................................... 72
Master M1S (Figure 35) ........................................................................................ 73
MI8O2 (Figure 36) ............................................................................................... 74
MI8O4 (Figure 37) ............................................................................................... 75
MI8 (Figure 38).................................................................................................... 76
MI12T8 (Figure 39) .............................................................................................. 77
MI16 (Figure 40) .................................................................................................. 78
MO2 / MO4 (Figure 41) ........................................................................................ 79
MO4L (Figure 42)................................................................................................. 80
MOR4 (Figure 43) ................................................................................................ 81
MOR4S8 (Figure 44)............................................................................................. 82
MOS8 (Figure 45) ................................................................................................ 83
MOS16 (Figure 46)............................................................................................... 84
MV0, MV1, MV2 (Figure 47).................................................................................. 85
MO4LHCS8 (Figure 48)......................................................................................... 86
MA2, MA4 (Figure 49) .......................................................................................... 87
MOSAIC SAFETY DESIGNER SOFTWARE .............................................................................................. 89
Installing the software .................................................................................... 89
PC HARDWARE requirements ................................................................................ 89
PC SOFTWARE requirements ................................................................................. 89
Installation of MSD software................................................................................. 89
Fundamentals ..................................................................................................... 90
Standard tool bar ................................................................................................ 91
Textual tool bar .................................................................................................. 92
Create a new project (configure the MOSAIC system) ............................................. 92
EDIT CONFIGURATION (composition of the various modules) ................................. 93
Change user parameters ...................................................................................... 93
OBJECTS - OPERATOR - CONFIGURATION tool bars ............................................... 94
Creating the diagram........................................................................................... 95
USE OF MOUSE RIGHT BUTTON ................................................................. 96
Example of a project............................................................................................ 97
Project validation ..................................................................................... 97
Resources Allocation ................................................................................ 98
Project report ........................................................................................... 99
Connect to Mosaic ................................................................................. 101
Sending the configuration to the MOSAIC ............................................... 101
Download a configuration file (project) from Mosaic ............................... 101
Configuration LOG ................................................................................. 101
System composition ............................................................................... 102
Disconnecting System ............................................................................ 102
MONITOR (I/O status in real time - textual) ............................................ 103
MONITOR (I/O status in real time - textual - graphic) ............................. 103
Password protection .......................................................................................... 104
Level 1 password ................................................................................... 104
Level 2 password ................................................................................... 105
Password Change ................................................................................... 105
English
TESTING the system........................................................................................... 106
OBJECT FUNCTION BLOCKS ........................................................................... 107
OUTPUT OBJECTS............................................................................................... 107
OSSD (safety outputs)............................................................................. 107
SINGLE DOUBLE OSSD (safety output)...................................................... 108
4
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
STATUS (SIL 1/PL c output) ..................................................................... 111
FIELDBUS PROBE ..................................................................................... 111
RELAY .................................................................................................... 112
Use with RESTART: Automatic (A) or Manual (B) (Category 2) ................... 113
INPUT OBJECTS .................................................................................................. 115
E-STOP (emergency stop) ....................................................................... 115
E-GATE (safety gate device) .................................................................... 116
SINGLE E-GATE (safety gate device) ........................................................ 117
LOCK FEEDBACK..................................................................................... 118
ENABLE (enable key) ............................................................................... 119
ESPE (optoelectronic safety light curtain / laser scanner) ......................... 120
FOOTSWITCH (safety pedal) .................................................................... 121
MOD-SEL (safety selector) ...................................................................... 123
PHOTOCELL (safety photocell) ................................................................ 124
TWO-HAND (bimanual control) ............................................................... 125
NETWORK_IN.......................................................................................... 125
SENSOR.................................................................................................. 126
S-MAT (safety mat) ................................................................................ 127
SWITCH .................................................................................................. 128
ENABLING GRIP SWITCH .......................................................................... 129
TESTABLE SAFETY DEVICE ....................................................................... 130
SOLID STATE DEVICE .............................................................................. 131
FIELDBUS INPUT ..................................................................................... 132
LL0-LL1 ................................................................................................. 133
COMMENTS ............................................................................................ 133
TITLE ..................................................................................................... 133
SPEED CONTROL TYPE FUNCTION BLOCKS..................................................... 134
Warning concerning safety ..................................................................... 134
Note concerning Speed Control Functional Blocks ................................... 134
SPEED CONTROL .................................................................................... 135
WINDOW SPEED CONTROL ...................................................................... 138
STAND STILL .......................................................................................... 140
STAND STILL AND SPEED CONTROL ........................................................ 142
ANALOG INPUT TYPE FUNCTION BLOCKS....................................................... 145
ANALOG INPUT (4 inputs each MA4 module, 2 inputs each MA2 module) 145
ANALOG DIVISION (4 inputs each MA4 module, 2 inputs each MA2 module)
............................................................................................................. 158
OPERATOR FUNCTION BLOCKS...................................................................... 171
AND....................................................................................................... 171
NAND .................................................................................................... 171
NOT ....................................................................................................... 172
OR ......................................................................................................... 172
NOR ....................................................................................................... 172
XOR ....................................................................................................... 173
XNOR ..................................................................................................... 173
LOGICAL MACRO .................................................................................... 174
MULTIPLEXER ......................................................................................... 174
DIGITAL COMPARATOR (M1S only) .......................................................... 175
MEMORY OPERATORS ........................................................................................ 177
D FLIP FLOP (max number = 16 with M1, 32 with M1S) ........................... 177
T FLIP FLOP (max number = 16 with M1, 32 with M1S) ........................... 177
8540780 • 10/07/2020 • Rev.38
5
English
LOGICAL OPERATORS......................................................................................... 171
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
SR FLIP FLOP .......................................................................................... 177
USER RESTART MANUAL (max number = 16 with M1, 32 with M1S with other
RESTART operators) ............................................................................... 178
USER RESTART MONITORED (max number = 16 with M1, 32 with M1S with
other RESTART operators) ...................................................................... 179
MACRO RESTART MANUAL (max number = 16 with M1, 32 with M1S with
other RESTART operators) ...................................................................... 179
MACRO RESTART MONITORED (max number = 16 with M1, 32 with M1S with
other RESTART operators) ...................................................................... 180
PRE-RESET (M1S only) (max number = 32 with other RESTART operators)
............................................................................................................. 181
GUARD LOCK OPERATORS (max number = 4 with M1, 8 with M1S) ....................... 182
GUARD LOCK ......................................................................................... 182
COUNTER OPERATORS ....................................................................................... 194
COUNTER (max number = 16) ................................................................ 194
COUNTER COMPARATOR ........................................................................ 195
TIMER OPERATORS (max number = 32 with M1, 48 with M1S) ............................. 196
MONOSTABLE......................................................................................... 196
MONOSTABLE_B ..................................................................................... 197
PASSING MAKE CONTACT ....................................................................... 198
DELAY.................................................................................................... 199
LONG DELAY .......................................................................................... 200
DELAY COMPARATOR ............................................................................. 201
DELAY LINE ............................................................................................ 201
LONG DELAY LINE ................................................................................. 202
CLOCKING ............................................................................................. 203
MUTING FUNCTION............................................................................................ 204
MUTING OPERATORS (max number = 4 with M1, 8 with M1S) .............................. 204
"Concurrent" MUTING ............................................................................. 204
............................................................................................ 205
"Sequential" MUTING .............................................................................. 206
............................................................................................ 208
MUTING OVERRIDE (max number = 4) .................................................... 209
ANALOG OPERATORS (M1S only) ........................................................................ 211
English
Analog Comparator ................................................................................ 211
Math (max number = 16) ....................................................................... 214
Equality check (max number = 16) ......................................................... 215
MISCELLANEOUS FUNCTION BLOCKS ............................................................. 216
SERIAL OUTPUT (max number = 4 with M1, 8 with M1S) ......................... 216
NETWORK (max number = 1).................................................................. 217
Example of application in Category 2 according to ISO 13849-1: ............ 220
Logical block diagram of a safety function using the network ................. 221
Example of application in Category 4 according to ISO 13849-1: ............ 221
Logical block diagram of a safety function using the network ................. 222
RESET M1 ............................................................................................... 222
OSSD EDM (M1S only, max number = 32) ............................................... 222
INTERPAGE IN/OUT ................................................................................ 223
INTFBK_IN / INTFBK_OUT (M1S only, max number = 8) ........................... 224
TERMINATOR ......................................................................................... 224
SPECIAL APPLICATIONS ...................................................................................... 225
Output delay with manual ...................................................................... 225
SIMULATOR FEATURE ......................................................................................... 226
Schematic Simulation......................................................................................... 227
6
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
How to use graphic simulation ........................................................................... 229
Application example of graphic simulation ............................................. 232
MOSAIC FAIL CODES .......................................................................................... 234
ERRORS LOG DOWNLOAD .................................................................... 235
English
ACCESSORIES AND SPARE PARTS ....................................................................................................... 236
WARRANTY..................................................................................................................................................... 237
8540780 • 10/07/2020 • Rev.38
7
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
INTRODUCTION
Contents of this handbook
This handbook describes how to use the MOSAIC programmable safety module and its
expansion units ("SLAVES");
it includes:
• a description of the system
• method of installation
• connections
• signals
• troubleshooting
• use of the configuration SW
Important safety instructions
 This safety alert symbol indicates a potential personal safety hazard. Failure to comply with
instructions bearing this symbol could pose a very serious risk to personnel.
 This symbol indicates an important instruction.
English
 The MOSAIC is built to the following safety levels: SIL 3, SILCL 3, PL e, Cat. 4, Type 4 in
accordance with the applicable standards. However, the definitive SIL and PL of the application
will depend on the number of safety components, their parameters and the connections that
are made, as per the risk analysis.
 Read the "Applicable Standards" section carefully.
 Perform an in-depth risk analysis to determine the appropriate safety level for your specific
application, on the basis of all the applicable standards.
 Programming/configuration of the Mosaic is the sole responsibility of the installer or user.
 The device must be programmed/configured in accordance with the application-specific risk
analysis and all the applicable standards.
 Once you have programmed/configured and installed the Mosaic and all the relative devices,
run a complete application safety test (see the "TESTING the system" section, page 106).
 Always test the complete system whenever new safety components are added (see the
"TESTING the system" page 106).
 ReeR is not responsible for these operations or any risks in connection therewith.
 Reference should be made to the handbooks and the relative product and/or application
standards to ensure correct use of devices connected to the Mosaic within the specific
application.
 The ambient temperature in the place where the system is installed must be compatible with
the operating temperature parameters stated on the product label and in the specifications.
 For all matters concerning safety, if necessary, contact your country's competent safety
authorities or the competent trade association.
8
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Abbreviations and symbols
MCM = MOSAIC Configuration Memory: memory chip for MOSAIC M1/M1S (accessory)
MSC =
MOSAIC Safety Communication: proprietary bus for expansion units
MSD =
MOSAIC Safety Designer: MOSAIC configuration SW running in Windows
LL0, LL1 = Logic Level 0, Logic Level 1
OSSD = Output Signal Switching Device: solid state safety output
MTTFd = Mean Time to Dangerous Failure
PL =
Performance Level
PFHd =
Probability of a dangerous failure per Hour
SIL =
Safety Integrity Level
SILCL = Safety Integrity Level Claim Limit
SW =
Software
Applicable standards
MOSAIC complies with the following European Directives:
• 2006/42/EC
"Machinery Directive"
• 2014/30/EU
"Electromagnetic Compatibility Directive"
• 2014/35/EU
"Low Voltage Directive"
and is built to the following standards:
EN ISO 13489-1
EN 61496-1
EN 61508-1
EN 61508-2
EN 61508-3
EN 61508-4
IEC 61784-3
EN 62061
EN 81-20
EN 81-50
Programmable controllers, part 2:
Equipment requirements and tests
Safety of machinery:
Safety related parts of control systems. General principles for design
Safety of machinery: Electro-sensitive protective equipment. Part 1: General
requirements and tests.
Functional safety of electrical/electronic/programmable electronic safetyrelated systems: General requirements.
Functional safety of electrical/electronic/programmable electronic safetyrelated systems: Requirements for electrical/electronic/programmable
electronic safety-related systems.
Functional safety of electrical/electronic/programmable electronic safetyrelated systems: Software requirements.
Functional safety of electrical/electronic programmable electronic safety
related systems: Definitions and abbreviations.
Digital data communication for measurement and control: Functional safety
fieldbuses.
Safety of machinery. Functional safety of safety-related electrical, electronic
and programmable electronic control systems
Safety rules for the construction and installation of lifts. Lifts for the
transport of persons and goods. Passenger and goods passenger lifts
Safety rules for the construction and installation of lifts. Examinations and
tests. Design rules, calculations, examinations and tests of lift components
English
CEI EN 61131-2
Table 1
8540780 • 10/07/2020 • Rev.38
9
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
OVERVIEW
MOSAIC is a modular safety controller. It consists of a master unit (M1 or M1S),
which can be configured using the MSD graphic interface, and a number of
expansion units connected to the main unit via the proprietary MSC bus.
The M1 or M1S can also be used as a stand-alone device and they are equipped
with:

M1: 8 safety inputs, 2 independent programmable dual channel safety
outputs (OSSD) and 2 SIL 1/PL c outputs

M1S: 8 safety inputs, 4 independent programmable single channel safety
outputs (OSSD) and up to 4 SIL 1/PL c outputs
 The following expansions are available: I/O expansions (MI8O2 and MI8O4(with M1S
only)), input expansions (MI8, MI12T8, MI16), output expansions (MO2, MO4 and
MO4LHCS8 and MO4L (only for M1S)), SIL 1/PL c output expansions (MOS8 and
MOS16), guided contact safety relay output modules (MR2, MR4, MR8, MOR4 and
MOR4S8), encoder and proximity input expansions (MV2, MV, MV0), modules with
analog inputs (MA2, MA4 only for M1S) and diagnostic connections to the main
fieldbuses: MBP (PROFIBUS), MBC (CanOpen), MBD (DeviceNet), MBEI (ETHERNET/IP),
MBEP (Profinet), MBEC (ETHERCAT), MBMR (Modbus RTU), MBEM (Modbus/TCP)
MBCCL (CC-link).
MOSAIC is capable of monitoring the following safety sensors and commands:
optoelectronic sensors (safety light curtains, scanners, safety photocells),
mechanical switches, safety mats, emergency stops, two-hand controls, all
managed by a single flexible and expandable device.
The system must consist of just one Master M1 or M1S and a number of electronic
expansions that can range from 0 to a maximum of 14, not more than 4 of which
of the same type. There is no limit to the number of relay modules MR2 e MR4 that
can be installed.
With 14 expansions, the system can have up to:

with M1: 128 inputs, 16 safety outputs and 32 SIL 1/ PL c outputs.

with M1S: 128 inputs, 32 safety outputs and 48 SIL 1/ PL c outputs.
MASTER and its SLAVE units communicate via the 5-way MSC bus (ReeR proprietary
bus), physically arranged on the rear panel of each unit.
English
Furthermore, by means of MBx Fieldbus interfaces, are available:
10

All inputs states (with diagnostics)

All safety outputs states (with diagnostics)

8 fieldbus inputs with M1 or 32 fieldbus inputs with M1S (MBx firmware
2.0). These fieldbus inputs can act in the schematic as physical
inputs, but are not safety inputs and they can
applications.

16 probe outputs with M1 or 32 probe outputs with M1S (MBx firmware
These probe outputs can be connected everywhere in the
schematic by means of MSD software.
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
With the MI8, MI16 and MI12T8 Mosaic expansion units, the number of inputs in
the system can be increased to allow more external devices to be connected. The
MI12T8 also provides 8 OUT_TEST outputs.
The MO2 and MO4 Mosaic expansion units provide the system, respectively, with
2 and 4 OSSD (Output Signal Switching Device) pairs for controlling devices
connected downstream of the MOSAIC. These modules provides also 2 (MO2) or
4 (MO4) SIL 1/PL c outputs.
The MO4LHCS8 is a safety module with 4 single channel High Current Safety
Outputs (2A/channel usable also in pairs) and 4 relative inputs for external
feedback contacts (EDM).
The module provides 8 SIL 1/PL c outputs.
The MI802 expansion unit provides 8 inputs, 2 pairs of OSSD outputs and 2
programmable
SIL 1/PL c outputs.
The MI8O4 expansion unit provides 8 inputs, 4 single channel OSSD outputs
(usable also in pairs) and up to 4 programmable SIL 1/PL c outputs or up to 4
relative inputs for external feedback contacts (EDM).
The MO4L expansion unit provides 4 single channel OSSD outputs (usable also in
pairs) and up to 4 programmable SIL 1/PL c outputs or up to 4 relative inputs for
external feedback contacts (EDM).
The MR2, MR4 and MR8 Mosaic expansion units provide the system with 2, 4
and 8 N.O. guided contact safety relay outputs, respectively, with the related
external relay feedback (N.C. contact).
The expansion units in the MB series permit connection to the most commonly used
industrial fieldbus systems for diagnostics and data transmission like Profibus
(MBP), Canopen (MBC), Devicenet (MBD), CClink (MBCCL), Profinet (MBEP),
EthernetIP (MBEI), Ethercat (MBEC), Modbus RTU (MBEM).
MBU expansion unit permits connection to devices with a USB port.
The MCT1 and MCT2 expansion units are used to connect the M1/M1S to other
slave units installed at a distance (< 50 m). Two MCT units installed at the required
distance can be connected using a shielded cable (ReeR MC25, MC50 or other cable
with the characteristics set out in the cable data sheet).
The MV0, MV1 and MV2 Mosaic expansion units can be used to control the
following (up to PLe):
 Zero speed, Max. speed, Speed range;
 Direction of movement, rotation/translation;
Each unit incorporates two logic inputs that can be configured using the MSD
software and is thus capable of controlling up to two independent axes.
8540780 • 10/07/2020 • Rev.38
11
English
Up to 4 speed thresholds can be set for each logic input (axis).
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
The MOR4 and MOR4S8 are safety expansion units provided with 4 independent
safety relay outputs and the corresponding 4 inputs for the external feedback
contacts (EDM).
There are two possible output settings (configured using the MSD configuration
software).

Two pairs of connection contacts (2 N.O. contacts per output with 2
corresponding feedback inputs).

Four independent single connection contacts (1 N.O. contact per output with
4 corresponding feedback inputs).
The MOR4S8 unit has 8 programmable SIL 1/PL c outputs.
The MOS8 and MOS16 have 8 and 16 SIL 1/PL c outputs.
The MA2 provides 2 independent safety analog inputs usable also in pairs.
The MA4 provides 4 independent safety analog inputs usable also in pairs.
The MSD software is capable of creating complex logics, using logical operators
and safety functions such as muting, timer, counters, etc.
All this is performed through an easy and intuitive graphic interface.
The configuration performed on the PC is sent to the master unit via USB
connection; the file resides in the M1 (or M1S) and can also be saved on the
proprietary MCM memory card (accessory). By MCM the configuration can
therefore quickly be copied to another master unit.
 The MOSAIC system is certified to the maximum safety level envisaged by the
English
applicable industrial safety standards (SIL 3, SILCL 3, PL e, Cat. 4).
12
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
PRODUCT COMPOSITION
The MOSAIC M1 and M1S are supplied with:
• CD-ROM containing the free MSD SW, the present PDF multi-language handbook
and other product literature.
• Multi-language installation sheet.
 NB: the rear panel MSC connector and MCM memory can be ordered separately as
accessories.
The expansion units are supplied with:
• Multilingual Installation sheet.
• Rear panel MSC connector (not present in the MR2 and MR4 which are connected
via terminal blocks only).
 NB: to install an expansion unit (excluding relays) you will need the MSC connector
English
supplied with the unit plus another MSC for the connection to the M1 or M1S.
This can be ordered separately as an accessory.
8540780 • 10/07/2020 • Rev.38
13
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
INSTALLATION
Mechanical fastening
Fix the MOSAIC system units to a 35mm DIN rail as follows:
1. Connect the same number of "MSC" 5-pole rear panel connectors as the
number of units to be installed.
2. Fix the train of connectors thus obtained to the Omega DIN 35mm (EN 5022)
rail (hooking them at the top first).
3. Fasten the units to the rail, arranging the contacts on the base of the unit on
the respective connector. Press the unit gently until you feel it snap into place.
4. To remove a unit, use a screwdriver to pull down the locking latch on the
back of the unit; then lift the unit upwards and pull.
1
2b
2a
3
4
English
Figure 1
14
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Calculation of safety distance of an ESPE connected to MOSAIC
Any Electro-sensitive Protective Equipment device connected to MOSAIC, must be
positioned at a distance equal to or greater than the minimum safety distance S so that the
dangerous point can be reached only after stopping the dangerous movement of the
machine.
 The european standard:
- ISO 13855:2010- (EN 999:2008) Safety of machinery - Positioning of safeguards with respect
to
the
approach
speeds
of
parts
of
the
human
body. 1
provides the elements to calculate the proper safety distance.
 Carefully read the installation manual of each device for specific information on the correct
positioning.
 Remember
that
the
total
response
time
depends
on:
MOSAIC response time + ESPE response time + response time of the machine (i.e. the time
taken by the machine to stop the dangerous movement from the moment in which the stop
signal is transmitted).
Electrical connections
The MOSAIC system units are provided with terminal
blocks for the electrical connections. Each unit can
have 8, 16 or 24 terminals.
Each unit also has a rear panel plug-in connector
(for communication with the master and with the
other expansion units).
The MR2, MR4 and MR8 are connected via terminal
blocks only.
 Terminal tightening torque: 5÷7lb-in (0,6÷0,7 Nm).
 Install safety units in an enclosure with a protection class of at least IP54.
 Connect the module when it is not powered.
 The supply voltage to the units must be 24Vdc 20% (PELV, in compliance with the
1
"Describe the methods that designers can use to calculate the minimum safety distance from a specific dangerous point for
the safety devices, particularly Electro-sensitive devices (eg. light curtains), safety-mats or pressure sensitive floors and
bimanual control. It contains a rule to determine the placement of safety devices based on approach speed and the stopping
time of the machine, which can reasonably be extrapolated so that it also includes the interlocking guards without guard
locking."
8540780 • 10/07/2020 • Rev.38
15
English
standard EN 60204-1 (Chapter 6.4)).
 Do not use the MOSAIC to supply external devices.
 The same ground connection (0VDC) must be used for all system components.
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Instructions concerning connection cables.
 Wire size range: AWG 12÷30, (solid/stranded) (UL).
 Use 60/75°C copper (Cu) conductor only.
 We recommend the use of separate power supplies for the safety module and for other
electrical power equipment (electric motors, inverters, frequency converters) or other
sources of disturbance.
 Cables used for connections of longer than 50m must have a cross-section of at least
1mm2 (AWG16).
Connections of each single MOSAIC system unit are listed in the table below:
Master Module M1
TERMINAL
SIGNAL
TYPE
DESCRIPTION
OPERATION
1
24VDC
-
24VDC power supply
2
MASTER_ENABLE1
Input
Master Enable 1
3
MASTER_ENABLE2
Input
Master Enable 2
0VDC power supply
Input ("type B" according to
EN 61131-2 )
Input ("type B" according to
EN 61131-2 )
-
4
0VDC
-
5
OSSD1_A
Output
6
OSSD1_B
Output
7
RESTART_FBK1
Input
Feedback/Restart 1
Input according to EN 61131-2
8
OUT_STATUS1
Output
SIL 1/PL c output
PNP active high
9
OSSD2_A
Output
10
OSSD2_B
Output
11
RESTART_FBK2
Input
Feedback/Restart 2
Input according to EN 61131-2
12
OUT_STATUS2
Output
SIL 1/PL c output
PNP active high
13
OUT_TEST1
Output
Short circuit detection output
PNP active high
14
OUT_TEST2
Output
Short circuit detection output
PNP active high
15
OUT_TEST3
Output
Short circuit detection output
PNP active high
16
OUT_TEST4
Output
Short circuit detection output
PNP active high
17
INPUT1
Input
Digital input 1
Input according to EN 61131-2
18
INPUT2
Input
Digital input 2
Input according to EN 61131-2
19
INPUT3
Input
Digital input 3
Input according to EN 61131-2
20
INPUT4
Input
Digital input 4
Input according to EN 61131-2
21
INPUT5
Input
Digital input 5
Input according to EN 61131-2
22
INPUT6
Input
Digital input 6
Input according to EN 61131-2
23
INPUT7
Input
Digital input 7
Input according to EN 61131-2
24
INPUT8
Input
Digital input 8
Input according to EN 61131-2
Static output 1
Static output 2
PNP active high
PNP active high
PNP active high
PNP active high
English
Table 2
16
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Master Module M1S
TERMINAL
SIGNAL
TYPE
DESCRIPTION
OPERATION
1
24VDC
-
24VDC power supply
-
2
NC
-
-
-
3
NC
-
-
-
4
0VDC
-
0VDC power supply
-
5
OSSD1
Output
Solid State Safety Output 1
PNP active high
6
OSSD2
Output
Solid State Safety Output 2
PNP active high
Input according to EN 61131-2
7
RESTART_FBK1/ Input/
STATUS1
Output
Feedback/Restart 1
SIL 1/PL c output
PNP active high
8
RESTART_FBK2/ Input/
STATUS2
Output
Feedback/Restart 2
Input according to EN 61131-2
SIL 1/PL c output
PNP active high
PNP active high
9
OSSD3
Output
Solid State Safety Output 3
10
OSSD4
Output
Solid State Safety Output 4
PNP active high
Input according to EN 61131-2
11
RESTART_FBK3/ Input/
STATUS3
Output
Feedback/Restart 3
SIL 1/PL c output
PNP active high
12
RESTART_FBK4/ Input/
STATUS4
Output
Feedback/Restart 4
Input according to EN 61131-2
SIL 1/PL c output
PNP active high
13
OUT_TEST1
Output
Short circuit detection output
PNP active high
14
OUT_TEST2
Output
Short circuit detection output
PNP active high
15
OUT_TEST3
Output
Short circuit detection output
PNP active high
16
OUT_TEST4
Output
Short circuit detection output
PNP active high
17
INPUT1
Input
Digital input 1
Input according to EN 61131-2
18
INPUT2
Input
Digital input 2
Input according to EN 61131-2
19
INPUT3
Input
Digital input 3
Input according to EN 61131-2
20
INPUT4
Input
Digital input 4
Input according to EN 61131-2
21
INPUT5
Input
Digital input 5
Input according to EN 61131-2
22
INPUT6
Input
Digital input 6
Input according to EN 61131-2
23
INPUT7
Input
Digital input 7
Input according to EN 61131-2
24
INPUT8
Input
Digital input 8
Input according to EN 61131-2
Table 3
 The STATUS SIL 1/PL c outputs are shared with the feedback/restart inputs of the
English
OSSDs. To use them, the corresponding OSSD must be used with automatic reset
without external feedback monitoring. For example, to use the STATUS1 output
(Terminal 7), you must program OSSD1 (by means of the MSD software) with automatic
reset without K feedback monitoring.
8540780 • 10/07/2020 • Rev.38
17
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
USB input
The MOSAIC master M1 and M1s
include a mini USB 2.0 connector for
connection to a Personal Computer
where the MSD (MOSAIC Safety
Designer) configuration SW resides.
A USB cable of the correct size is
available as an accessory (CSU).
Figure 2 - USB 2.0 front panel connector
MOSAIC Configuration Memory
(MCM)
TECHNICAL DATA LABEL
MCM LABEL
A backup memory, called MCM (optional)
can be installed in the MOSAIC master
M1/M1S and used to save the SW
configuration parameters.
The MCM is written each time a new
project is sent from the PC to the M1.
 Always switch the M1/M1S off before
logging on to/logging off from the
MCM.
Insert the card in the slot in the rear
panel of the M1 and M1S (in the
direction shown in Figure 3 - MCM).
MULTIPLE LOAD function
Figure 3 - MCM
To perform the configuration of several
master modules without using a PC and
the USB connector, you can save the
desired configuration on a single MCM
and then use it to download data on the
masters modules to be configured simply
inserting the MCM into the module and
turning it on.
 If the file contained in the MCM is not identical to the one contained in M1/M1S, an overwrite
English
operation that will permanently delete the configuration data contained in M1/M1S will be
performed. In this case the module blinks fast leds COM and ENABLE.
WARNING: ALL DATA PREVIOUSLY CONTAINED IN M1/M1S WILL BE LOST.
18
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
RESTORE function
If the M1 or M1S unit is damaged, you can replace it with a new one; having already saved
all the configurations on the MCM, all you need to do is insert the MCM in the new M1/M1S
and switch on the MOSAIC system, that will immediately load the backup configuration. In
this way, the work interruptions will be minimized.
Compatibility between MCM memory and Master modules:


M1S can load configurations from MCM if it is written by a M1S or M1
M1 can load configurations from MCM only if it is written by a M1
 The LOAD and RESTORE functions can be disabled via SW. (see Figure 54)
 Each time MCM is used, carefully check that the chosen configuration is the one that was
planned for that particular system. Try again a fully functional test of the system composed of
Mosaic plus all devices connected to it (see the "TESTING the system" section).
Module MI8O2
TERMINAL
SIGNAL
TYPE
DESCRIPTION
OPERATION
1
24VDC
-
24VDC power supply
-
2
NODE_SEL0
Input
3
NODE_SEL1
Input
4
0VDC
-
5
OSSD1_A
Output
6
OSSD1_B
Output
7
RESTART_FBK1
Input
Feedback/Restart 1
Input according to EN 61131-2
8
OUT_STATUS1
Output
SIL 1/PL c output
PNP active high
9
OSSD2_A
Output
10
OSSD2_B
Output
11
RESTART_FBK2
Input
12
OUT_STATUS2
13
OUT_TEST1
14
Node selection
0VDC power supply
Static output 1
Static output 2
Input ("type B" according to EN 61131-2 )
Input ("type B" according to EN 61131-2 )
PNP active high
PNP active high
PNP active high
PNP active high
Feedback/Restart 2
Input according to EN 61131-2
Output
SIL 1/PL c output
PNP active high
Output
Short circuit detection output
PNP active high
OUT_TEST2
Output
Short circuit detection output
PNP active high
15
OUT_TEST3
Output
Short circuit detection output
PNP active high
16
OUT_TEST4
Output
Short circuit detection output
PNP active high
17
INPUT1
Input
Digital input 1
Input according to EN 61131-2
18
INPUT2
Input
Digital input 2
Input according to EN 61131-2
19
INPUT3
Input
Digital input 3
Input according to EN 61131-2
20
INPUT4
Input
Digital input 4
Input according to EN 61131-2
21
INPUT5
Input
Digital input 5
Input according to EN 61131-2
22
INPUT6
Input
Digital input 6
Input according to EN 61131-2
23
INPUT7
Input
Digital input 7
Input according to EN 61131-2
24
INPUT8
Input
Digital input 8
Input according to EN 61131-2
English
Table 4
8540780 • 10/07/2020 • Rev.38
19
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Module MI8O4
TERMINAL
1
SIGNAL
24VDC
TYPE
-
2
NODE_SEL0
-
3
NODE_SEL1
-
4
5
6
0VDC
OSSD1
OSSD2
RESTART_FBK1/
STATUS1
RESTART_FBK2/
STATUS2
OSSD3
OSSD4
RESTART_FBK3/
STATUS3
RESTART_FBK4/
STATUS4
OUT_TEST1
OUT_TEST2
OUT_TEST3
OUT_TEST4
INPUT1
INPUT2
INPUT3
INPUT4
INPUT5
INPUT6
INPUT7
INPUT8
Output
Output
Input/
Output
Input/
Output
Output
Output
Input/
Output
Input/
Output
Output
Output
Output
Output
Input
Input
Input
Input
Input
Input
Input
Input
DESCRIPTION
24VDC power supply
Node selection
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
0VDC power supply
Solid State Safety Output 1
Solid State Safety Output 2
Feedback/Restart 1
SIL 1/PL c output
Feedback/Restart 2
SIL 1/PL c output
Solid State Safety Output 3
Solid State Safety Output 4
Feedback/Restart 3
SIL 1/PL c output
Feedback/Restart 4
SIL 1/PL c output
Short circuit detection output
Short circuit detection output
Short circuit detection output
Short circuit detection output
Digital input 1
Digital input 2
Digital input 3
Digital input 4
Digital input 5
Digital input 6
Digital input 7
Digital input 8
OPERATION
Input ("type B" according to EN 611312)
Input ("type B" according to EN 611312)
PNP active high
PNP active high
Input according to EN 61131-2
PNP active high
Input according to EN 61131-2
PNP active high
PNP active high
PNP active high
Input according to EN 61131-2
PNP active high
Input according to EN 61131-2
PNP active high
PNP active high
PNP active high
PNP active high
PNP active high
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
Table 5
 The STATUS SIL 1/PL c outputs are shared with the feedback/restart inputs of the
OSSDs. To use them, the corresponding OSSD must be used with automatic reset
without external feedback monitoring. For example, to use the STATUS1 output
(Terminal 7), you must program OSSD1 with automatic reset without K feedback
monitoring.
Module MI8
TERMINAL
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
SIGNAL
24VDC
NODE_SEL0
NODE_SEL1
0VDC
INPUT1
INPUT2
INPUT3
INPUT4
OUT_TEST1
OUT_TEST2
OUT_TEST3
OUT_TEST4
INPUT5
INPUT6
INPUT7
INPUT8
TYPE
Input
Input
Input
Input
Input
Input
Output
Output
Output
Output
Input
Input
Input
Input
DESCRIPTION
24VDC power supply
Node selection
0VDC power supply
Digital input 1
Digital input 2
Digital input 3
Digital input 4
Short circuit detection output
Short circuit detection output
Short circuit detection output
Short circuit detection output
Digital input 5
Digital input 6
Digital input 7
Digital input 8
OPERATION
Input ("type B" according to EN 61131-2 )
Input ("type B" according to EN 61131-2 )
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
PNP active high
PNP active high
PNP active high
PNP active high
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
English
Table 6
20
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Module MI12T8
TERMINAL
SIGNAL
TYPE
DESCRIPTION
OPERATION
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
24VDC
NODE_SEL0
NODE_SEL1
0VDC
INPUT1
INPUT2
INPUT3
INPUT4
OUT_TEST1
OUT_TEST2
OUT_TEST3
OUT_TEST4
INPUT5
INPUT6
INPUT7
INPUT8
OUT_TEST5
OUT_TEST6
OUT_TEST7
OUT_TEST8
INPUT9
INPUT10
INPUT11
INPUT12
Input
Input
Input
Input
Input
Input
Output
Output
Output
Output
Input
Input
Input
Input
Output
Output
Output
Output
Input
Input
Input
Input
24VDC power supply
Input ("type B" according to EN 61131-2 )
Input ("type B" according to EN 61131-2 )
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
PNP active high
PNP active high
PNP active high
PNP active high
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
PNP active high
PNP active high
PNP active high
PNP active high
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
Node selection
0VDC power supply
Digital input 1
Digital input 2
Digital input 3
Digital input 4
Short circuit detection output
Short circuit detection output
Short circuit detection output
Short circuit detection output
Digital input 5
Digital input 6
Digital input 7
Digital input 8
Short circuit detection output
Short circuit detection output
Short circuit detection output
Short circuit detection output
Digital input 9
Digital input 10
Digital input 11
Digital input 12
Table 7
TERMINAL
SIGNAL
TYPE
DESCRIPTION
OPERATION
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
24VDC
NODE_SEL0
NODE_SEL1
0VDC
INPUT1
INPUT2
INPUT3
INPUT4
OUT_TEST1
OUT_TEST2
OUT_TEST3
OUT_TEST4
INPUT5
INPUT6
INPUT7
INPUT8
INPUT9
INPUT10
INPUT11
INPUT12
INPUT13
INPUT14
INPUT15
INPUT16
Input
Input
Input
Input
Input
Input
Output
Output
Output
Output
Input
Input
Input
Input
Input
Input
Input
Input
Input
Input
Input
Input
24VDC power supply
Input ("type B" according to EN 61131-2 )
Input ("type B" according to EN 61131-2 )
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
PNP active high
PNP active high
PNP active high
PNP active high
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
Input according to EN 61131-2
Node selection
0VDC power supply
Digital input 1
Digital input 2
Digital input 3
Digital input 4
Short circuit detection output
Short circuit detection output
Short circuit detection output
Short circuit detection output
Digital input 5
Digital input 6
Digital input 7
Digital input 8
Digital input 9
Digital input 10
Digital input 11
Digital input 12
Digital input 13
Digital input 14
Digital input 15
Digital input 16
Table 8
8540780 • 10/07/2020 • Rev.38
21
English
Module MI16
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Module MO2
TERMINAL
SIGNAL
TYPE
DESCRIPTION
OPERATION
1
24VDC
24VDC power supply
2
NODE_SEL0
Input
Input ("type B" according to EN 61131-2 )
Node selection
3
NODE_SEL1
Input
Input ("type B" according to EN 61131-2 )
4
0VDC
0VDC power supply
5
OSSD1_A
Output
PNP active high
Static output 1
6
OSSD1_B
Output
PNP active high
7
RESTART_FBK1 Input Feedback/Restart 1
Input according to EN 61131-2
8
OUT_STATUS1 Output
SIL 1/PL c
PNP active high
9
OSSD2_A
Output
PNP active high
Static output 2
10
OSSD2_B
Output
PNP active high
11
RESTART_FBK2 Input Feedback/Restart 2
Input according to EN 61131-2
12
OUT_STATUS2 Output
SIL 1/PL c
PNP active high
13
24VDC
24VDC power supply
24VDC power supply *
14
n.c.
15
0VDC
0VDC power supply
0VDC *
16
n.c.
-
Table 9
Module MO4
TERMINAL
SIGNAL
TYPE
DESCRIPTION
OPERATION
1
24VDC
24VDC power supply
2
NODE_SEL0
Input
Input ("type B" according to EN 61131-2 )
Node selection
3
NODE_SEL1
Input
Input ("type B" according to EN 61131-2 )
4
0VDC
0VDC power supply
5
OSSD1_A
Output
PNP active high
Static output 1
6
OSSD1_B
Output
PNP active high
7
RESTART_FBK1 Input Feedback/Restart 1
Input according to EN 61131-2
8
OUT_STATUS1 Output
SIL 1/PL c
PNP active high
9
OSSD2_A
Output
PNP active high
Static output 2
10
OSSD2_B
Output
PNP active high
11
RESTART_FBK2 Input Feedback/Restart 2
Input according to EN 61131-2
12
OUT_STATUS2 Output
SIL 1/PL c
PNP active high
13
24VDC
-
24VDC power supply
24VDC outputs power supply *
14
24VDC
-
24VDC power supply
-
15
0VDC
-
0VDC power supply
0VDC outputs *
16
17
18
19
20
21
22
23
24
0VDC
0VDC power supply
OSSD4_A
Output
Static output 4
OSSD4_B
Output
RESTART_FBK4 Input Feedback/Restart 4
OUT_STATUS4 Output
SIL 1/PL c
OSSD3_A
Output
Static output 3
OSSD3_B
Output
RESTART_FBK3 Input Feedback/Restart 3
OUT_STATUS3 Output
SIL 1/PL c
PNP active high
PNP active high
Input according to EN 61131-2
PNP active high
PNP active high
PNP active high
Input according to EN 61131-2
PNP active high
English
Table 10
* This terminal must be connected to the power supply for the unit to work
properly.
22
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Module MO4L
TERMINAL
1
SIGNAL
24VDC
TYPE
-
2
NODE_SEL0
-
3
NODE_SEL1
-
4
5
6
0VDC
OSSD1
OSSD2
Output
Output
7
RESTART_FBK1/
STATUS1
Input/
Output
DESCRIPTION
24VDC power supply
Node selection
0VDC power supply
Solid State Safety Output 1
Solid State Safety Output 2
Feedback/Restart 1
SIL 1/PL c
8
RESTART_FBK2/
STATUS2
Input/
Output
Feedback/Restart 2
9
10
OSSD3
OSSD4
Output
Output
11
RESTART_FBK3/
STATUS3
Input/
Output
Solid State Safety Output 3
Solid State Safety Output 4
Feedback/Restart 3
12
RESTART_FBK4/
STATUS4
Input/
Output
SIL 1/PL c
SIL 1/PL c
Feedback/Restart 4
SIL 1/PL c
OPERATION
Input ("type B" according to
EN 61131-2 )
Input ("type B" according to
EN 61131-2 )
PNP active high
PNP active high
Input according to EN 61131-2
PNP active high
Input according to EN 61131-2
PNP active high
PNP active high
PNP active high
Input according to EN 61131-2
PNP active high
Input according to EN 61131-2
PNP active high
Table 11
 The STATUS SIL 1/PL c signal outputs are shared with the feedback/restart inputs of
English
the OSSDs. To use them, the corresponding OSSD must be used with automatic reset
without external feedback monitoring.
8540780 • 10/07/2020 • Rev.38
23
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Module MR2
TERMINAL
SIGNAL
TYPE
DESCRIPTION
OPERATION
1
24VDC
-
24VDC power supply
-
4
0VDC
-
0VDC power supply
-
5
OSSD1_A
Input
6
OSSD1_B
Input
Control ZONE 1
PNP active high
7
FBK_K1_K2_1
Output
9
A_NC1
Output
10
B_NC1
Output
13
A_NO11
Output
14
B_NO11
Output
15
A_NO12
Output
16
B_NO12
Output
Feedback K1K2 ZONE 1
NC contact ZONE 1
NO1 contact ZONE 1
NO2 contact ZONE 1
Table 12
Module MR4
TERMINAL
SIGNAL
TYPE
DESCRIPTION
OPERATION
1
24VDC
-
24VDC power supply
-
4
0VDC
-
0VDC power supply
-
5
OSSD1_A
Input
6
OSSD1_B
Input
Control ZONE 1
PNP active high
7
FBK_K1_K2_1
Output
9
A_NC1
Output
10
B_NC1
Output
13
A_NO11
Output
14
B_NO11
Output
15
A_NO12
Output
16
B_NO12
Output
11
A_NC2
Output
12
B_NC2
Output
17
OSSD2_A
Input
18
OSSD2_B
Input
19
FBK_K1_K2_2
Output
21
A_NO21
Output
22
B_NO21
Output
23
A_NO22
Output
24
B_NO22
Output
Feedback K1K2 ZONE 1
NC contact ZONE 1
NO1 contact ZONE 1
NO2 contact ZONE 1
NC contact ZONE 2
Control ZONE 2
PNP active high
Feedback K1K2 ZONE 2
NO1 contact ZONE 2
NO2 contact ZONE 2
English
Table 13
24
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Module MR8
SIGNAL
24VDC
TYPE
DESCRIPTION
OPERATION
-
24VDC power supply
-
4
GND
-
0VDC power supply
-
5
OSSD1_A
Input
6
OSSD1_B
Input
Control ZONE 1
PNP active high
7
FBK_K1_K2_1_1
Output
8
FBK_K1_K2_1_2
Output
Feedback K1K2 ZONE 1
Normally closed EDM
9
A_NC1
Output
10
B_NC1
Output
NC contact ZONE 1
Normally closed
13
A_NO11
Output
14
B_NO11
Output
NO1 contact ZONE 1
Normally opened
15
A_NO12
Output
16
B_NO12
Output
NO2 contact ZONE 1
Normally opened
11
A_NC2
Output
12
B_NC2
Output
NC contact ZONE 2
Normally closed
17
OSSD2_A
Input
18
OSSD2_B
Input
Control ZONE 2
PNP active high
19
FBK_K1_K2_2_1
Output
20
FBK_K1_K2_2_2
Output
Feedback K1K2 ZONE 2
Normally closed EDM
21
A_NO21
Output
22
B_NO21
Output
NO1 contact ZONE 2
Normally opened
23
A_NO22
Output
24
B_NO22
Output
NO2 contact ZONE 2
Normally opened
25
24VDC
-
24VDC power supply
-
28
GND
-
0VDC power supply
-
29
OSSD3_A
Input
30
OSSD3_B
Input
Control ZONE 3
PNP active high
31
FBK_K1_K2_3_1
Output
32
FBK_K1_K2_3_2
Output
Feedback K1K2 ZONE 3
Normally closed EDM
33
A_NC3
Output
34
B_NC3
Output
NC contact ZONE 3
Normally closed
37
A_NO31
Output
38
B_NO31
Output
NO1 contact ZONE 3
Normally opened
39
A_NO32
Output
40
B_NO32
Output
NO2 contact ZONE 3
Normally opened
35
A_NC4
Output
36
B_NC4
Output
NC contact ZONE 4
Normally closed
41
OSSD4_A
Input
42
OSSD4_B
Input
Control ZONE 4
PNP active high
43
FBK_K1_K2_4_1
Output
44
FBK_K1_K2_4_2
Output
Feedback K1K2 ZONE 4
Normally closed EDM
45
A_NO41
Output
46
B_NO41
Output
NO1 contact ZONE 4
Normally opened
47
A_NO42
Output
48
B_NO42
Output
NO2 contact ZONE 4
Normally opened
English
TERMINAL
1
Table 14
8540780 • 10/07/2020 • Rev.38
25
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Modules MV0 - MV1 - MV2
TERMINAL
SIGNAL
TYPE
DESCRIPTION
OPERATION
1
24VDC
-
24VDC power supply
-
Node selection
Input ("type B" according
to EN 61131-2)
Input ("type B" according
to EN 61131-2)
2
NODE_SEL0
Input
3
NODE_SEL1
Input
4
0VDC
-
5
PROXI1_24V
Output
6
PROXI1_REF
Output
7
PROXI1 IN1 (3 WIRES)
Input
8
PROXI1 IN2 (4 WIRES)
Input
PROXI1 NC input
9
PROXI2_24V
Output
10
PROXI2_REF
Power supply 24VDC to
PROXI2
Power supply 0VDC to
PROXI2
11
PROXI2 IN1 (3 WIRES)
Input
12
PROXI2 IN2 (4 WIRES)
Input
PROXI2 NC input
13
N.C.
-
-
14
N.C.
-
15
N.C.
-
-
16
N.C.
-
-
Output
0VDC power supply
-
PROXIMITY 1
connections
Power supply 24VDC to
PROXI1
Power supply 0VDC to
PROXI1
PROXIMITY INPUT FOR SPEED
CONTROLLER MV2 -> 36)
PROXIMITY 2
connections
-> 36)
Not connected
PROXI1 NO input
PROXI2 NO input
-
English
Table 15
26
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
ENCODER CONNECTIONS WITH RJ45 CONNECTOR (MV1, MV2)
PIN
TWISTED *
TWISTED *
TWISTED *
1
2
3
4
5
6
7
MVT
5VDC
EXT_0V
N.C.
A
INPUT
Ā
N.C.
B
8
B
MVTB
N.C.
EXT_0V
N.C.
A
Ā
N.C.
B
MVH
N.C.
EXT_0V
N.C.
A
Ā
N.C.
B
MVS
N.C.
EXT_0V
N.C.
A
Ā
N.C.
B
B
B
B
* IN CASE OF UTILIZATION OF TWISTED CABLE
POWER SUPPLY
WHITE
2
7
N.C.
A
A
B
EXT_0V
EXT_0V
3
N.C.
3
GREEN
4
4
YELLOW
5
8
N.C.
B
5VDC/24VDC
A
A
6
N.C.
5
GREY
7
6
PINK
8
B
B
2
BROWN
1
1
WHITE
2
7
N.C.
A
A
3
GREEN
4
4
YELLOW
5
8
N.C.
B
B
24VDC EXT_0V
5
GREY
7
6
PINK
8
BROWN
1
1
WHITE
2
7
N.C.
A
A
3
N.C.
3
GREEN
4
4
YELLOW
5
8
N.C.
B
B
5VDC/24VDC
EXT_0V
A
A
6
N.C.
5
GREY
7
6
PINK
8
B
B
B
B
5VDC/
24VDC EXT_0V
ENCODER SIN/COS
ENCODER SIN/COS - M12 8 POLES CONNECTOR
EXT_0V
2
A
POWER SUPPLY
MV MODULE - RJ45 CONNECTOR
ENCODER HTL - M12 8 POLES CONNECTOR
24VDC
A
6
N.C.
POWER SUPPLY
ENCODER HTL
EXT_0V
3
N.C.
EXT_0V
2
BROWN
1
1
WHITE
2
7
N.C.
A
A
3
GREEN
4
4
YELLOW
5
8
N.C.
B
B
EXT_0V
3
N.C.
A
A
6
N.C.
5
GREY
7
6
PINK
8
B
B
English
1
+5VDC
MV MODULE - RJ45 CONNECTOR
1
ENCODER TTLB - M12 8 POLES CONNECTOR
BROWN
MV MODULE - RJ45 CONNECTOR
ENCODER TTL - M12 8 POLES CONNECTOR
EXT_0V
2
5VDC/
24VDC EXT_0V
ENCODER TTLB
MV MODULE - RJ45 CONNECTOR
EXT_0V 5VDC
ENCODER TTL
+5VDC
POWER SUPPLY
Figure 4
8540780 • 10/07/2020 • Rev.38
27
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Module MOR4
TERMINAL
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
SIGNAL
24VDC
NODE_SEL0
NODE_SEL1
0VDC
REST_FBK1
REST_FBK2
REST_FBK3
REST_FBK4
A_NO1
B_NO1
A_NO2
B_NO2
A_NO3
B_NO3
A_NO4
B_NO4
TYPE
Input
Input
Input
Input
Input
Input
Output
Output
Output
Output
Output
Output
Output
Output
DESCRIPTION
24VDC power supply
Node selection
0VDC power supply
Feedback/Restart 1
Feedback/Restart 2
Feedback/Restart 3
Feedback/Restart 4
OPERATION
Input ("type B" according to EN 61131-2)
Input ("type B" according to EN 61131-2)
-
Input (according EN 61131-2)
Input (according EN 61131-2)
Input (according EN 61131-2)
Input (according EN 61131-2)
N.O. contact Channel 1
N.O. contact Channel 2
N.O. contact Channel 3
N.O. contact Channel 4
Table 16
Module MOR4S8
TERMINAL
SIGNAL
TYPE
DESCRIPTION
1
24VDC
-
24VDC power supply
2
NODE_SEL0
Input
3
NODE_SEL1
Input
4
0VDC
-
5
REST_FBK1
6
Node selection
OPERATION
Input ("type B" according to EN 61131-2)
Input ("type B" according to EN 61131-2)
Input
0VDC power supply
Feedback/Restart 1
Input (according EN 61131-2)
REST_FBK2
Input
Feedback/Restart 2
Input (according EN 61131-2)
7
REST_FBK3
Input
Feedback/Restart 3
Input (according EN 61131-2)
8
REST_FBK4
Input
Feedback/Restart 4
Input (according EN 61131-2)
9
A_NO1
Output
10
B_NO1
Output
11
A_NO2
Output
12
B_NO2
Output
13
A_NO3
Output
14
B_NO3
Output
15
A_NO4
Output
16
B_NO4
Output
17
OUT_STATUS1
Output
18
OUT_STATUS2
Output
19
OUT_STATUS3
Output
20
OUT_STATUS4
Output
21
OUT_STATUS5
Output
22
OUT_STATUS6
Output
23
OUT_STATUS7
Output
24
OUT_STATUS8
Output
N.O. contact Channel 1
N.O. contact Channel 2
N.O. contact Channel 3
N.O. contact Channel 4
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
PNP active high
PNP active high
PNP active high
PNP active high
PNP active high
PNP active high
PNP active high
PNP active high
English
Table 17
28
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Module MOS8
PIN
SIGNAL
TYPE
DESCRIPTION
1
24VDC
-
24VDC power supply
2
NODE_SEL0
Input
3
NODE_SEL1
Input
4
-
6
0VDC
24VDC
STATUS 1-8
-
7
8
Node selection
OPERATION
Input ("type B" according to EN 61131-2)
Input ("type B" according to EN 61131-2)
-
-
0VDC power supply
24VDC power supply
OUT_STATUS 1-8
-
-
-
-
-
-
-
-
-
9
OUT_STATUS1
Output
PNP active high
10
OUT_STATUS2
Output
11
OUT_STATUS3
Output
12
OUT_STATUS4
Output
13
OUT_STATUS5
Output
14
OUT_STATUS6
Output
15
OUT_STATUS7
Output
16
OUT_STATUS8
Output
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
5
-
-
PNP active high
PNP active high
PNP active high
PNP active high
PNP active high
PNP active high
PNP active high
Table 18
Module MOS16
PIN
1
2
3
4
TYPE
Input
Input
-
7
8
SIGNAL
24VDC
NODE_SEL0
NODE_SEL1
0VDC
24VDC
STATUS 1-8
24VDC
STATUS 9-16
-
9
10
11
12
13
14
15
16
OUT_STATUS1
OUT_STATUS2
OUT_STATUS3
OUT_STATUS4
OUT_STATUS5
OUT_STATUS6
OUT_STATUS7
OUT_STATUS8
Output
Output
Output
Output
Output
Output
Output
Output
17
18
19
20
21
22
23
24
OUT_STATUS9
OUT_STATUS10
OUT_STATUS11
OUT_STATUS12
OUT_STATUS13
OUT_STATUS14
OUT_STATUS15
OUT_STATUS16
Output
Output
Output
Output
Output
Output
Output
Output
5
6
-
DESCRIPTION
24VDC power supply
Node selection
0VDC power supply
24VDC power supply for
OUT_STATUS 1...8
24VDC power supply for
OUT_STATUS 9...16
-
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
OPERATION
Input ("type B" according to EN 61131-2 )
Input ("type B" according to EN 61131-2 )
PNP active high
PNP active high
PNP active high
PNP active high
PNP active high
PNP active high
PNP active high
PNP active high
PNP active high
PNP active high
PNP active high
PNP active high
PNP active high
PNP active high
PNP active high
PNP active high
English
Table 19
8540780 • 10/07/2020 • Rev.38
29
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Module MO4LHCS8
PIN
SIGNAL
TYPE
DESCRIPTION
1
24VDC
-
24VDC power supply
2
NODE_SEL0
Input
3
NODE_SEL1
Input
Node selection
OPERATION
Input ("type B" according to EN 61131-2)
Input ("type B" according to EN 61131-2)
4
0VDC
5
REST_FBK1
Input
Feedback/Restart 1
Input (according EN 61131-2)
6
REST_FBK2
Input
Feedback/Restart 2
Input (according EN 61131-2)
7
REST_FBK3
Input
Feedback/Restart 3
Input (according EN 61131-2)
8
REST_FBK4
Input
Feedback/Restart 4
Input (according EN 61131-2)
9
OSSD1
Output
Safety Output 1
10
OSSD2
Output
Safety Output 2
11
OSSD3
Output
Safety Output 3
12
OSSD4
Output
Safety Output 4
0VDC power supply
PNP active high
4 single channels (or 2 dual channels)
13
-
-
-
14
24 VDC
24VDC power supply
-
15
-
-
-
16
-
17
OUT_STATUS1
Output
18
OUT_STATUS2
Output
19
OUT_STATUS3
Output
20
OUT_STATUS4
Output
21
OUT_STATUS5
Output
22
OUT_STATUS6
Output
23
OUT_STATUS7
Output
24
OUT_STATUS8
Output
-
-
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
SIL 1/PL c
PNP active high
PNP active high
PNP active high
PNP active high
PNP active high
PNP active high
PNP active high
PNP active high
Table 20
Modulo MA2
PIN
SIGNAL
TYPE
DESCRIPTION
1
24 VDC
-
24VDC power supply
2
NODE_SEL0
Input
3
NODE_SEL1
Input
4
0 VDC
-
9
24VDC_S1
Output
Isolated 24VDC power supply for sensor 1
4/20mA sensor 1 Input
Node selection
0VDC power supply
OPERATION
Input ("type B" according to EN 61131-2)
Input ("type B" according to EN 61131-2)
-
IN_S1
Input
NEG_S1
Input
OUT_S1
Output
POS_S1
Input
0/10V sensor 1 positive input
12
0 VDC_S1
Output
Isolated 0VDC reference for sensor 1
13
24VDC_S2
Output
Isolated 24VDC power supply for sensor 2
IN_S2
Input
4/20mA sensor 2 Input
NEG_S2
Input
OUT_S2
Output
POS_S2
Input
0/10V sensor 2 positive input
0 VDC_S2
Output
Isolated 0VDC reference for sensor 2
10
11
14
15
16
Sensor 1 Connections
Sensor 2 Connections
0/10V sensor 1 negative input
4/20mA sensor 1 Output
0/10V sensor 2 negative input
4/20mA sensor 2 Output
English
Table 21
30
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Modulo MA4
PIN
SIGNAL
TYPE
DESCRIPTION
OPERATION
1
24 VDC
-
24VDC power supply
-
2
NODE_SEL0
Input
3
NODE_SEL1
Input
4
0 VDC
-
9
24VDC_S1
Output
Isolated 24VDC power supply for sensor 1
IN_S1
Input
4/20mA sensor 1 Input
NEG_S1
Input
OUT_S1
Output
POS_S1
Input
0/10V sensor 1 positive input
12
0 VDC_S1
Output
Isolated 0VDC reference for sensor 1
13
24VDC_S3
Output
Isolated 24VDC power supply for sensor 3
IN_S3
Input
4/20mA sensor 3 Input
10
11
14
15
NEG_S3
Input
OUT_S3
Output
Node selection
0VDC power supply
Sensor 1 Connections
Sensor 3 Connections
Input ("type B" according to EN 61131-2)
Input ("type B" according to EN 61131-2)
-
0/10V sensor 1 negative input
4/20mA sensor 1 Output
0/10V sensor 3 negative input
4/20mA sensor 3 Output
POS_S3
Input
0/10V sensor 3 positive input
16
0 VDC_S3
Output
Isolated 0VDC reference for sensor 3
17
24VDC_S2
Output
Isolated 24VDC power supply for sensor 2
4/20mA sensor 2 Input
IN_S2
Input
NEG_S2
Input
OUT_S2
Output
POS_S2
Input
0/10V sensor 2 positive input
20
0 VDC_S2
Output
Isolated 0VDC reference for sensor 2
21
24VDC_S4
Output
Isolated 24VDC power supply for sensor 4
IN_S4
Input
4/20mA sensor 4 Input
18
19
22
23
24
Sensor 2 Connections
0/10V sensor 2 negative input
4/20mA sensor 2 Output
NEG_S4
Input
OUT_S4
Output
POS_S4
Input
0/10V sensor 4 positive input
0 VDC_S4
Output
Isolated 0VDC reference for sensor 4
Sensor 4 Connections
0/10V sensor 4 negative input
4/20mA sensor 4 Output
English
Table 22
8540780 • 10/07/2020 • Rev.38
31
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MA2 / MA4 Analog sensor connections
The MA2/MA4 modules are suitable for:
 4/20mA current output sensors with 2/3/4 wires
 0/20mA current output sensors with 2/3/4 wires
 0/10V voltage output sensors with 3 wires
Following are shown some connections example:
Figure 5
English
 If shielded cables are not used or if the shield connection to PE is not properly
wired
then
electromagnetic
disturbance
could
cause
signal
corruption.
A corrupted signal could lead to unexpected behavior of the module which as a consequence
could lead to potentially severe damage to people or things.
 If the sensor connections are not correct or if the type of sensor connected to the input is
incorrect (for example a voltage sensor connected to a current input and
vice versa), the functionality of the module is not more guaranteed.
 Perform a complete system TEST (see "TESTING the system").
32
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Example of connection of Mosaic to the machine control system
Figure 6
CHECKLIST AFTER INSTALLATION
The MOSAIC system is able to detect the faults that occurs in each own module.
Anyway to have the system perfect operation perform the following checks at start up and
at least every one year:
1.
2.
3.
4.
5.
6.
Operate a complete system TEST (see "TESTING the system")
Verify that all the cables are correctly inserted and the terminal blocks well screwed.
Verify that all the leds (indicators) light on correctly.
Verify the positioning of all the sensors connected to MOSAIC.
Verify the correct fixing of MOSAIC to the Omega rail.
Verify that all the external indicators (lamps) work properly.
 After installation, maintenance and after any eventual configuration change perform a
English
System TEST as described in the paragraph "TESTING the system".
8540780 • 10/07/2020 • Rev.38
33
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
OPERATING DIAGRAM
Mechanical fastening
Electrical connections
between the Mosaic
modules and with the
external sensors
Designing the diagram
NO
Validation
sw OK ?
YES
Connection
via USB with PSW
Downloading the
schematic to M1/M1S
NO
Configuration check
(including complete
system TEST)
on M1/M1S OK?
YES
End of connection
via USB
English
System
startup
34
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
SIGNALS
INPUTS
MASTER ENABLE
The MOSAIC M1 master has two inputs: MASTER_ENABLE1 and MASTER_ENABLE2.
 These signals must both be permanently set to logic level 1 (24VDC) for the MOSAIC
to operate. If the user needs to disable the MOSAIC simply lower these inputs to logic
level 0 (0VDC).
 These input are not present on M1S which is always enabled.
NODE SEL
The NODE_SEL0 and NODE_SEL1 inputs (on the SLAVE units) are used to attribute a physical
address to the slave units with the connections shown in Table 23:
NODE_SEL1 (Terminal 3)
NODE_SEL0 (Terminal 2)
NODE 0
0 (or not connected)
0 (or not connected)
NODE 1
0 (or not connected)
24VDC
NODE 2
24VDC
0 (or not connected)
NODE 3
24VDC
24VDC
Table 23
A maximum of 4 addresses is provided and 4 modules of the same type can be used in the
same system.
 It is not allowed to use the same physical address on two units of the same type.
 In order to be used, the expansion units must be addressed at the time of installation
English
(see the NODE SEL section).
8540780 • 10/07/2020 • Rev.38
35
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
PROXIMITY INPUT FOR SPEED CONTROLLER MV
 An inadequate mechanical installation of proximity sensors can cause dangerous operation. Pay
particular attention to the size of the phonic wheel and to the mechanical fixing of the sensors.
 In any condition of expected speed, the MVxxx module must be able to detect the speed.
During the installation (and then periodically) perform a complete system test. By using the
MSD software or by checking that the LEDs relating to the sensors are lit, make sure that the
module does not detect any anomalies in any case.
 The sizing of the exciter and the positioning of the sensors must be done following the technical
data of the latter and the manufacturer’s guidelines.
 Pay particular attention to Common Cause Failures (CCF) that may involve both sensors (short
circuit of cables, objects falling from above, idle rotation of the phonic wheel, etc.)
Configuration With Interleaved Proximity
When an axis of the MV modules is configured for a measurement with two proximity
switches, these can be configured in interleaved mode. Under the conditions listed below
the system reaches a Performance Level = PLe:


Proximity switches must be fitted such that the recorded signals overlap.
Proximity switches must be fitted such that at least one is always activated.
Figure 7
English
In addition:
 The proximity switches must be PNP type.
 The proximity switches must be NO type (Output ON when detecting metal).
 With the above conditions fulfilled, the DC value is equal to 90%.
 The two proximity switches must be of the same model, with MTTF > 70 years.
36
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
RESTART_FBK
The RESTART_FBK signal input allows the MOSAIC to verify an EDM (External Device
Monitoring) feedback signal (series of contacts) from the external contactors, and to
monitor Manual/Automatic operation (See the list of possible connections in Table 24).
 If the application requires it, the response time of the external contactors must be verified by
an additional device.
 The RESTART command must be installed outside the danger area in a position where the
danger area and the entire work area concerned are clearly visible.
 It must not be possible to reach the control from inside the danger area.
MODE OF
OPERATION
EDM
With K1_K2
control
RESTART_FBK
24V
K1
K2
ext_Restart_fbk
AUTOMATIC
Without
K1_K2
control
With K1_K2
control
24V
24V
ext_Restart_fbk
K1
K2
ext_Restart_fbk
MANUAL
Without
K1_K2
control
24V
ext_Restart_fbk
English
Table 24
8540780 • 10/07/2020 • Rev.38
37
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
OUTPUTS
OUT STATUS (SIL 1/PL c)
The OUT STATUS signal is a Programmable SIL 1 /PL c output that can indicate the
status of:
• An input.
• An output.
• A node of the logic diagram designed using the MSD.
OUT TEST
The OUT TEST signals must be used to monitor the presence of short-circuits or overloads
on the inputs (Figure 8).
 The maximum number of controllable inputs for
each output OUT TEST is 4 INPUTs (parallel
connection)
 The maximum allowed length for OUT TEST signal
connections is = 100m.
Figure 8
OSSD SAFETY OUTPUTS
IMPORTANT NOTE CONCERNING OSSD SAFETY OUTPUTS
 OSSD safety outputs are periodically tested against possible stucks to 0V or +24VDC
English
or against bad cabling (e.g. two OSSD outputs shorted together). The test method
(test pulse in MSD
Software): periodically and for a very short time (few microseconds) each OSSD output
is shorted to 0V by the Control Unit which knows the results has to be expected and
if the test results are not consistent brings immediately the system to a safe state.
Figure 9 – Voltage dip test
38
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
OSSD (M1, MI8O2, MO2, MO4)
The M1, MI8O2, MO2, MO4 modules are equipped with OSSD (static semiconductor safety
outputs) dual channel. These outputs are short circuit protected, cross circuit monitored
and supply:
• In the ON condition: (Uv-0,75V) ÷ Uv (24VDC ± 20%)
• In the OFF condition: 0V ÷ 2V r.m.s.
The maximum load of 400mA@24V corresponds to a minimum resistive load of 60.
The maximum capacitive load is 0.68 F. The maximum inductive load is 2 mH.
 External devices cannot be connected to the outputs unless explicitly planned in the
MSD program configuration.
OSSD (M1S, MI8O4, MO4L)
The M1S, MI8O4, MO4L modules are equipped with OSSD (static semiconductor safety outputs)
single channel. These outputs are short circuit protected, cross circuit monitored and supply:
• In the ON condition: (Uv-0,75V) ÷ Uv (24VDC ± 20%)
• In the OFF condition: 0V ÷ 2V r.m.s.
The maximum load of 400mA@24V corresponds to a minimum resistive load of 60.
The maximum capacitive load is 0.82F. The maximum inductive load is 2 mH.
Different output configurations (configurable with MSD configuration software)
can be set:
• 4 single channels (1 Safety Output per channel with its relative feedback input).
• 2 dual channels (2 Safety Outputs per channel with their relative feedback input).
• 1 dual channel and 2 single channels.
 Using single channels OSSD, to maintain Safety Integrity Level (SIL) "3" requirements the OSSD
English
outputs must be independent.
 Common cause failures between OSSD outputs must be excluded by observing an appropriate
cable installation (i.e. separate cable paths).
8540780 • 10/07/2020 • Rev.38
39
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Configuration with 4 single outputs
(safety category SIL3/Pl e)
English
Configuration with 2 dual channel
outputs (safety category SIL3/Pl e)
40
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
OSSD (MO4LHCS8)
MO4LHCS8 provides 4 High Current Safety Outputs single channel (2A max per channel).
These outputs are short circuit protected, cross circuit monitored and supply:
• In the ON condition: (Uv-0,6V) ÷ Uv (24VDC ± 20%)
• In the OFF condition: 0V ÷ 2V r.m.s.
The maximum load of 2A@24V corresponds to a minimum resistive load of 12.
The maximum capacitive load is 0.82F. The maximum inductive load is 2.4 mH.
Different output configurations (configurable with MSD configuration software) can be set:
• Four single channels (1 Safety Output per channel with its relative feedback input).
• Two dual channels (2 Safety Outputs per channel with their relative feedback input).
• 1 dual channel and 2 single channels.
 Using single channels OSSD, to maintain Safety Integrity Level (SIL) "3" requirements the OSSD
English
outputs must be independent.
 Common cause failures between OSSD outputs must be excluded by observing an appropriate
cable installation (i.e. separate cable paths).
 Using MO4LHCS8 with sum output current > 5 A, then separate adjacent modules by
interposing a MSC connector.
8540780 • 10/07/2020 • Rev.38
41
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Configuration with 2 dual channel
outputs (safety category SIL3/Pl e)
Configuration with 4 single outputs
(safety category SIL3/Pl e)
OSSD OUTPUTS CONFIGURATION
Each OSSD output can be configured as shown in Table 25:
Automatic
Manual
Monitored
The output is activated according to le configurations set by the MSD SW only if the
corresponding RESTART_FBK input is conected to 24VDC.
The output is activated according to le configurations set by the MSD SW only if
corresponding RESTART_FBK input FOLLOWS A LOGIC TRANSITION OF 0-->1.
The output is activated according to le configurations set by the MSD SW only if the
corresponding RESTART_FBK input FOLLOWS A LOGIC TRANSITION OF 0-->1-->0.
Table 25
250ms < t1< 5s
t2 = 250ms
t = 250ms
Figure 10
 It is not allowed the connection of external devices to the outputs, except as expected
English
in the configuration performed with the MSD software.
42
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
SAFETY RELAYS (MR2, MR4, MOR4, MOR4S8)
Characteristics of the output circuit.
The MR2/MR4 units use guided contact safety relays, each of which provides two N.O. contacts and
one N.C contact in addition to the N.C. feedback contact.
The MR2 unit uses two safety relays and the MR4 uses four.
The MOR4/MOR4S8 units use four guided-contact safety relays. Each relay provides one NO contact
monitored by the module logic through internal FBK contact.
 Refer to the "RELAY" section to check the possible MOR4/MOR4S8 operation modes
configurable with MSD software.
Excitation voltage
Minimum switchable voltage
17...31 VDC
10 VDC
Minimum switchable current
Maximum switchable voltage (DC)
Maximum switchable voltage (AC)
20 mA
250VDC
400VAC
Maximum switchable current
Response time
6A
12ms
Mechanical life of contacts
> 20 x 106
Table 26
 To guarantee correct isolation and avoid the risk of premature ageing of or damage to
the relays, each output line must be protected using a fast acting 4A fuse and the load
characteristics must be consistent with those specified in Table 12.
 See the "MR2/MR4" section (for further details on these relays).
MR2/MR4/MR8 internal contacts diagram
English
Figure 11
8540780 • 10/07/2020 • Rev.38
43
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MOSAIC MR8 ZONE 1/2 INTERNAL DIAGRAM
MOSAIC MR8 ZONE 3/4 INTERNAL DIAGRAM
Figura 12
Example of MR2 module connection with static OSSD outputs of a module M12
English
Figure 13
2
If a relay module is connected, the response time of the OSSD linked, must be increased of 12ms.
44
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Switching operation timing diagram.
English
Figure 14
8540780 • 10/07/2020 • Rev.38
45
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
TECHNICAL FEATURES
GENERAL SYSTEM CHARACTERISTICS
Safety level parameters
Parameter
Value
PFHd
See the technical data tables for each module
SIL
3
1 (only MOS8, MOS16)
99,8%
1
Type B
SIL
SFF
HFT
Safety standard
Standard
EN 61508:2010
EN 62061:2005 / A2:2015
EN 61496-1:2013
PL
3
4
e
c (only MOS8, MOS16)
Dcavg
High
MTTFd (years)
30 ÷ 100
4
EN ISO 13849-1:2015
EN 62061:2005 / A2:2015
SILCL
Type
PL
Category
Device lifetime
Pollution degree
20 years
2
General data
Max number of inputs
Max number of OSSD outputs
Max number of signalling outputs
Max number of slave units
(excluding MR2-MR4, MR8)
Max number of slave units of the same type
(excluding MR2-MR4-MR8)
Rated voltage
Over voltage category
Digital INPUTS
OSSD (M1, M1S, MI8O2, MI8O4, MO2, MO4, MO4L)
OSSD (MO4LHCS8)
Relays OUTPUTS (MR2, MR4, MR8, MOR4, MOR4S8)
SIL1/PL C output
(M1, M1S, MI8O2, MI8O4, MO2, MO4, MO4L, MOR4S8,
MO4LHCS8, MOS8, MOS16)
128
16 (M1); 32 (M1S)
32 (M1); 48 (M1S)
14
4
24VDC + 20% / PELV, Protective Class III;
UL: Supply from class 2 (LVLE)
II
PNP active high (EN 61131-2)
Max. applicable resistance 1,2kΩ
PNP active high - 400mA@24VDC max (each OSSD)
PNP active high - 2A@24VDC max (each OSSD)
6A max@240Vac max (each relais)
PNP active high - 100mA@24VDC max
Master
10,6 ÷ 12,6 + TInput_filter
Response time M1 (ms)
M1 + 1 Slave
M1 + 2 Slaves
This response times depends on the following
parameters:
1) Number of Slave modules installed
2) Number of Operators
3) Number of OSSD outputs
11,8 ÷ 26,5 + TInput_filter
12,8 ÷ 28,7 + TInput_filter
M1 + 3 Slaves
13,9 ÷ 30,8 + TInput_filter
M1 + 4 Slaves
15 ÷ 33 + TInput_filter
16 ÷ 35 + TInput_filter
For the right response time refer to the one calculated
by the DSD software (see Project report)
M1 + 7 Slaves
M1 + 5 Slaves
M1 + 6 Slaves
M1 + 8 Slaves
M1 + 9 Slaves
English
Failure Response time M1 (ms)
This parameter corresponds to the response time,
with the exception of MV modules with
Encoder/Proximity interface where is 2s
46
17 ÷ 37,3 + TInput_filter
18,2 ÷ 39,5 + TInput_filter
19,3 ÷ 41,7 + TInput_filter
20,4 ÷ 43,8 + TInput_filter
M1 + 12 Slaves
21,5 ÷ 46 + TInput_filter
22,5 ÷ 48,1 + TInput_filter
23,6 ÷ 50,3 + TInput_filter
M1 + 13 Slaves
24,7 ÷ 52,5 + TInput_filter
M1 + 14 Slaves
25,8 ÷ 54,6 + TInput_filter
M1 + 10 Slaves
M1 + 11 Slaves
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Response time M1S (ms)
This response times depends on the following
parameters:
1) Number of Slave modules installed
2) Number of Operators
3) Number of OSSD outputs
For the right response time refer to the one
calculated by the DSD software (see Project report)
Failure Response time M1S (ms)
This parameter corresponds to the response time,
with the exception of MV modules with
Encoder/Proximity interface where is 2s
Master
12,75 ÷ 14,75
+ TInput_filter
M1S + 1 Slave
13,83 ÷ 37,84
+ TInput_filter
M1S + 2 Slaves
14,91 ÷ 40,00
+ TInput_filter
M1S + 3 Slaves
15,99 ÷ 42,16
+ TInput_filter
M1S + 4 Slaves
17,07 ÷ 44,32
+ TInput_filter
M1S + 5 Slaves
18,15 ÷ 46,48
+ TInput_filter
M1S + 6 Slaves
19,23 ÷ 48,64
+ TInput_filter
M1S + 7 Slaves
20,31 ÷ 50,80
+ TInput_filter
M1S + 8 Slaves
21,39 ÷ 52,96
+ TInput_filter
M1S + 9 Slaves
22,47 ÷ 55,12
+ TInput_filter
M1S + 10 Slaves
23,55 ÷ 57,28
+ TInput_filter
M1S + 11 Slaves
24,63 ÷ 59,44
+ TInput_filter
M1S + 12 Slaves
25,71 ÷ 61,60
+ TInput_filter
M1S + 13 Slaves
26,79 ÷ 63,76
+ TInput_filter
M1 / M1S -> module connection
Connection cable cross-section
Max length of connections
Operating temperature
Max surrounding air temperature
Storage temperature
Relative humidity
Max. altitude (above sea level)
27,87 ÷ 65,92
+ TInput_filter
ReeR proprietary 5-pole bus (MSC)
0,5 ÷ 2,5 mm2 / AWG 12÷30 (solid/stranded)
M1S + 14 Slaves
100m
-10 ÷ 55°C
55°C (UL)
-20 ÷ 85°C
10% ÷ 95%
2000 m
 TInput_filter = max filtering time from among those set on project inputs
(see "INPUTS" section").
Enclosure
Description
Enclosure material
Enclosure protection class
Terminal blocks protection class
Fastening
Dimensions (h x l x d)
Electronic housing max 24 pole, with locking latch mounting
Polyamide
IP 20
IP 2X
Quick coupling to rail according to EN 60715
108 x 22.5 x 114.5
M1 module
Rated voltage
Dissipated power
Unit enable (No./description)
Digital INPUTS (No./description)
6.86E-9
24VDC  20%
3W max
2 / PNP active high "type B" according to EN 61131-2
8 / PNP active high according to EN 61131-2
INPUT FBK/RESTART (No./description)
2 / EDM control / possible Automatic
or Manual operation with RESTART button
Test OUTPUT (No./description)
4 / to check for short-circuits - overloads
SIL 1/PL c OUTPUTS (No./description)
OSSD (No./description)
2 / programmable - PNP active high
2 pairs / solid state safety outputs PNP active high
400mA@24VDC max - Interface type C class 3 (ZVEI CB24I)
SLOT for MCM card
Available
Connection to PC
USB 2.0 (Hi Speed) - Max cable length: 3m
Connection to slave units
8540780 • 10/07/2020 • Rev.38
English
PFHd (IEC 61508:2010)
via MSC 5-way ReeR proprietary bus
47
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
M1S module
PFHd (IEC 61508:2010)
Rated voltage
Dissipated power
1,35E-08
24VDC  20%
3W max
Digital INPUTS (No./description)
8 / PNP active high according to EN 61131-2
INPUT FBK/RESTART
(No./description)
Up to 4 / EDM control / possible Automatic
or Manual operation with RESTART button
Test OUTPUT (No./description)
4 / to check for short-circuits - overloads
SIL 1/PL c OUTPUTS (No./description)
Up to 4 / programmable - PNP active high
OSSD (No./description)
4 single / solid state safety outputs PNP active high
400mA@24VDC max
Interface type C class 3 (ZVEI CB24I)
SLOT for MCM card
Available
Connection to PC
USB 2.0 (Hi Speed) - Max cable length: 3m
Connection to slave units
via MSC 5-way ReeR proprietary bus
MI8O2 module
PFHd (IEC 61508:2010)
Rated voltage
Dissipated power
Digital INPUTS (No./description)
5.67E-9
24VDC  20%
3W max
8 / PNP active high according to EN 61131-2
INPUT FBK/RESTART (No./description)
2 / EDM control / possible Automatic
or Manual operation with RESTART button
Test OUTPUT (No./description)
4 / to check for short-circuits - overloads
SIL 1/PL c OUTPUTS (No./description)
2 / programmable - PNP active high
OSSD (No./description)
2 pairs / solid state safety outputs:
PNP active high 400mA@24VDC max
Interface type C class 3 (ZVEI CB24I)
Connection to M1 and M1S
via MSC 5-way ReeR proprietary bus
MI8O4 module
PFHd (IEC 61508:2010)
Rated voltage
English
Dissipated power
1,32E-08
24VDC  20%
3W max
Digital INPUTS (No./description)
8 / PNP active high according to EN 61131-2
INPUT FBK/RESTART
(No./description)
Up to 4 / EDM control / possible Automatic
or Manual operation with RESTART button
Test OUTPUT (No./description)
4 / to check for short-circuits - overloads
SIL 1/PL c OUTPUTS (No./description)
Up to 4 / programmable - PNP active high
OSSD (No./description)
4 single / solid state safety outputs:
PNP active high 400mA@24VDC max
Interface type C class 3 (ZVEI CB24I)
Connection to M1S
via MSC 5-way ReeR proprietary bus
48
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MI8 - MI16 modules
Model
PFHd (IEC 61508:2010)
MI8
MI16
4.46E-9
4.93E-9
Rated voltage
24VDC  20%
Dissipated power
Digital INPUTS (No./description)
Test OUTPUT (No./description)
Connection to M1 and M1S
3W max
8
16
PNP active high according to EN 61131-2
4 / to check for short-circuits - overloads
via MSC 5-way ReeR proprietary bus
MI12T8 module
PFHd (IEC 61508:2010)
5,60E-09
24VDC  20%
Rated voltage
Dissipated power
Digital INPUTS (No./description)
Test OUTPUT (No./description)
Connection to M1 and M1S
3W max
12
PNP active high according to EN 61131-2
8 / to check for short-circuits - overloads
via MSC 5-way ReeR proprietary bus
MO2 - MO4 modules
Model
PFHd (IEC 61508:2010)
MO2
MO4
4,08E-09
5,83E-09
Rated voltage
24VDC  20%
Dissipated power
INPUT FBK/RESTART (No./description)
SIL 1/PL c OUTPUTS (No./description)
3W max
2 4 / EDM control / possible Automatic
or Manual operation with RESTART button
2
4
programmable - PNP active high
2
OSSD (No./description)
Connection to M1 and M1S
4
Solid state safety outputs: PNP active high 400mA@24VDC max
Interface type C class 3 (ZVEI CB24I)
via MSC 5-way ReeR proprietary bus
MO4L module
Rated voltage
Dissipated power
1,12E-08
24VDC  20%
3W max
INPUT FBK/RESTART (No./description)
Up to 4 / EDM control / possible Automatic
or Manual operation with RESTART button
SIL 1/PL c OUTPUTS (No./description)
4 / programmable - PNP active high
OSSD (No./description)
Connection to M1S
8540780 • 10/07/2020 • Rev.38
English
PFHd (IEC 61508:2010)
4 single / solid state safety outputs: PNP active high
400mA@24VDC max - Interface type C class 3 (ZVEI CB24I)
via MSC 5-way ReeR proprietary bus
49
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MOS8 – MOS16 modules
Model
PFHd (IEC 61508:2010)
MOS8
MOS16
4,44E-09
6,61E-09
24VDC  20%
Rated voltage
Dissipated power
3W max
8
SIL 1/PL c OUTPUTS (No./description)
16
programmable - PNP active high
through 5-way MSC proprietary bus
Connection to M1 and M1S
MR2 - MR4 – MR8 modules
Model
MR2
MR4
Rated voltage
MR8
24VDC  20%
Dissipated power
3W max
Switching voltage
240 VAC
Switching current
6A max
N.O. contacts
FEEDBACK contacts
2 N.O. + 1 N.C.
4 N.O. + 2 N.C.
8 N.O. + 4 N.C.
1
2
4
Response time
12ms
Mechanical life of contacts
> 20 x 106
Connection to output module
Via front-panel terminal strip (no connection via MSC bus)
PFHd
3,09E-10
8,53E-11
6,63E-11
8,23E-09
7,42E-10
1,07E-10
3,32E-09
3,36E-10
8,19E-11
SFF
99,6%
99,7%
99,8%
99,5%
99,5%
99,7%
99,5%
99,6%
99,7%
MR2 – MR4 – MR8: TECHNICAL DATA CONCERNING SAFETY
FEEDBACK CONTACT PRESENT
FEEDBACK CONTACT MISSING
MTTFd
DCavg
PFHd
SFF
MTTFd
DCavg
2335,94
98,9%
tcycle1
9,46E-10
60%
2335,93
0
tcycle1
24453,47
97,7%
tcycle2
DC13 (2A)
1,08E-10
87%
24453,47
0
tcycle2
126678,49
92,5%
tcycle3
6,75E-11
97%
126678,5
0
tcycle3
70,99
99,0%
tcycle1
4,60E-07
50%
70,99
0
tcycle1
848,16
99,0%
tcycle2
AC15 (3A)
4,49E-09
54%
848,15
0
tcycle2
12653,85
98,4%
tcycle3
1,61E-10
79%
12653,85
0
tcycle3
177,38
99,0%
tcycle1
7,75E-08
51%
177,37
0
tcycle1
2105,14
98,9%
tcycle2
AC15 (1A)
1,09E-09
60%
2105,14
0
tcycle2
28549,13
97,5%
tcycle3
1,00E-10
88%
28549,13
0
tcycle3
DC13 (2A)
AC15 (3A)
AC15 (1A)
tcycle1: 300s (1 commutation every 5 minutes)
tcycle2: 3600s (1 commutation every hour)
tcycle3: 1 commutation every day
(PFHd according IEC61508, MTTFd and DCavg according ISO13849-1)
MOR4 – MOR4S8 module
MOR4
Model
PFHd (IEC 61508:2010)
2,72E-09
3W max
max
Switching voltage
240 VAC
Switching current
6A max
N.O. contacts
INPUT FBK/RESTART
(No./description)
SIL 1/PL c OUTPUTS (No./description)
English
1,30E-08
24VDC ± 20%
Rated voltage
Dissipated power
MOR4S8
Mechanical life of contacts
Connection to M1 and M1S
50
4
4 / EDM control / possible Automatic
or Manual operation with RESTART button
-
8 / Programmable output
PNP active high
> 40 x 106
via MSC 5-way ReeR proprietary bus
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MO4LHCS8 module
PFHd (IEC 61508:2010)
8,64E-09
Rated voltage
24VDC ± 20%
Dissipated power
max
4W max
OSSD output current
2A max per channel *
4 single channels (or 2 dual channels), cat.4
Number of Safety Outputs (OSSD)
Interface type C class 3 (ZVEI CB24I)
4 / EDM control / possible Automatic
INPUT FBK/RESTART (No./description)
or Manual operation with RESTART button
SIL 1/PL c 8 / Programmable output / PNP active high
Digital OUTPUT (No./description)
Response time
12ms
Connection to M1 and M1S
via MSC 5-way ReeR proprietary bus
 Using MO4LHCS8 with current output >500mA, separate it from adjacent modules by
interposing an MSC connector.
MV0 - MV1 - MV2 modules
Condition
Overspeed
Stand still
Window speed
Safe state
Overspeed
NO Stand still
Out of Window speed
(-> SPEED CONTROL TYPE FUNCTION BLOCKS)
Model
MV0
MV1
MV2
PFHd
7,36E-09
-
-
PFHd (TTL)
-
8,46E-09 (MV1T)
9,56E-09 (MV2T)
PFHd (sin/cos)
-
9,31E-09 (MV1S)
1,13E-08 (MV2S)
PFHd (HTL24)
-
8,08E-09 (MV1H)
8,80E-09 (MV2H)
PFHd (TTL internal power supply)
-
9,20E-09 (MV1TB)
1,10E-08 (MV2TB)
Rated Voltage
24VDC ± 20%
max
3W
Input impedance
-
Encoder Interface
-
Encoder connections
120 Ohm (MV1T MV1TB / MV2T
120 Ohm (MV1S - MV2S models)
MV2TB models)
TTL (MV1T MV1TB / MV2T MV2TB models)
HTL (MV1H - MV2H models)
sin/cos (MV1S - MV2S models)
-
RJ45 connector
Encoder input signals electrically
insulated in accordance with
EN 61800-5
-
Rated insulation voltage 250V
Overvoltage category II
Rated impulse withstand voltage 4.00 kV
Max number of encoders
-
Max encoder frequency
-
Encoder adjustable threshold range
-
Proximity type
Proximity connections
Proximity adjustable threshold range
1
2
500kHz (HTL: 300kHz)
1Hz ÷ 450kHz
PNP/NPN - 3/4 wires
Terminal blocks
1Hz ÷ 4kHz
Max number of proximity
2
Max proximity frequency
5kHz
Max number of axes
2
Stand-still/overspeed frequency gap
>10Hz
Min. gap between thresholds
(with thresholds >1)
> 5%
M1 connections and M1S
8540780 • 10/07/2020 • Rev.38
English
Dissipated power
via MSC 5-way ReeR proprietary bus
51
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MA2, MA4 module
Module
PFHd (IEC 61508:2010)
Rated voltage
Max dissipated power
Channels number / description
MA2
MA4
9,54E-09
1,53E-8
24 VDC  20%
24 VDC  20%
3W
5W
2 / fully isolated (500 VDC)
Each channel can be configured as
Voltage input or Current input
4 / fully isolated (500 VDC)
Each channel can be configured as
Voltage input or Current input
Current output sensors
Range
4...20 mA (0‐20 mA)
Conversion bits
16
Resolution (minimum current
variation relevable)
Sample rate (Samples per second)
381 Na
User selectable. Allowable values:
2.5, 5, 10, 16.6, 20, 50, 60, 100,
200, 400, 800, 1000, 2000, 4000
Conversion internal resistance
200 Ohm
Max input current
23 mA
Voltage output sensors
Range
0...10 VDC
Conversion bits
16
Resolution (minimum voltage
variation relevable)
Sample rate (Samples per second)
152 uV
User selectable. Allowable values:
2.5, 5, 10, 16.6, 20, 50, 60, 100,
200, 400, 800, 1000, 2000, 4000
Conversion internal resistance
250 kOhm
Diagnostic
Isolated sensor power supply
overload (if the sensor draws more
than 30 mA)
Input overvoltage / input
overcurrent
YES with active protection.
When this condition is detected the power supply of the sensor is disconnected for
1 second and then again activated to check if the overload condition still exist in
an endless loop until the overload condition disappear.
YES with active protection.
When this condition is detected the power supply of the sensor is disconnected for
1 second and then again activated to check if the input overvoltage/overcurrent
condition still exist in an endless loop until the anomaly disappear.
Disconnected cable detection
YES
Overthreshold / Underthreshold
detection
YES
via MSC 5-way ReeR proprietary bus
English
Connection to M1S
52
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MECHANICAL DIMENSIONS
22.5 mm
114.5 mm
99 mm
108 mm
English
Figure 15
8540780 • 10/07/2020 • Rev.38
53
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
LED INDICATORS (Normal Operation)
Master M1 (Figure 16)
LED
MEANING
Power on - initial TEST
RUN
IN FAIL
EXT FAIL
COM
ENA
IN1÷8
OSSD1/2
CLEAR1/2
STATUS1/2
GREEN
RED
RED
ORANGE
BLUE
YELLOW
RED/GREEN
YELLOW
YELLOW
ON
ON
ON
ON
ON
ON
Red
ON
ON
ON
(max 1s)
OFF
Red
OFF
OFF
MCM recognised
OFF
OFF
OFF
ON
(max 1s)
Writing/loading/ diagram
to/from MCM card
OFF
OFF
OFF
5
flashes
5
flashes
OFF
Red
OFF
OFF
MSD requesting connection:
internal configuration not present
OFF
OFF
OFF
Flashes slowly
OFF
OFF
Red
OFF
OFF
MSD requesting connection:
(slave module or node number
not correct) (ref. System composition)
OFF
OFF
OFF
Flashes quickly
OFF
OFF
Red
OFF
OFF
MSD requesting connection:
(slave module missing or not ready)
(ref. System composition)
Flashes quickly
OFF
OFF
Flashes quickly
OFF
OFF
Red
OFF
OFF
OFF
OFF
OFF
ON
OFF
OFF
Red
OFF
OFF
MSD connected M1 stopped
Table 27 - Opening Screen
LED
MEANING
NORMAL
OPERATION
English
EXTERNAL
FAULT
DETECTED
Figure 16 - M1
54
RUN
IN FAIL
EXT FAIL
COM
IN1÷8
ENA
OSSD1/2
CLEAR1/2
STATUS1/2
GREEN
RED
RED
ORANGE
YELLOW
BLUE
RED/GREEN
YELLOW
YELLOW
OFF
OFF
op. OK
ON = M1
connected to
PC
OFF=otherwise
INPUT condition
RED with
output OFF
ON = M1
connected to
PC
OFF=otherwise
only the number
of the INPUT with
the incorrect
connection
flashes
ON
waiting for
RESTART
OFF
ON
incorrect
external
connection
detected
ON
MASTER_ENABLE1
and MASTER_ENABLE2
active
OFF
otherwise
ON
ON
GREEN with
output ON
Flashing
NO feedback
OUTPUT
condition
Table 28 - Dynamic Screen
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Master M1S (Figure 16)
LED
MEANING
RUN
IN FAIL
EXT FAIL
COM
ENA
IN1÷8
OSSD1/4
STATUS1/4
GREEN
RED
RED
ORANGE
BLUE
YELLOW
RED/GREEN/YELLOW
YELLOW
Power on - initial TEST
ON
ON
ON
ON
ON
ON
Red
ON
MCM recognised
OFF
OFF
OFF
ON
(max 1s)
ON
(max 1s)
OFF
Red
OFF
Writing/loading/ diagram
to/from MCM card
OFF
OFF
OFF
5
flashes
5
flashes
OFF
Red
OFF
MSD requesting connection:
internal configuration not present
OFF
OFF
OFF
Flashes slowly
OFF
OFF
Red
OFF
MSD requesting connection:
(slave module or node number
not correct) (ref. System composition)
OFF
OFF
OFF
Flashes quickly
OFF
OFF
Red
OFF
MSD requesting connection:
(slave module missing or not ready)
(ref. System composition)
Flashes quickly
OFF
OFF
Flashes quickly
OFF
OFF
Red
OFF
OFF
OFF
OFF
ON
OFF
OFF
Red
OFF
MSD connected M1 stopped
Table 29 - Opening Screen
LED
MEANING
NORMAL
OPERATION
EXTERNAL
FAULT
DETECTED
IN FAIL
EXT FAIL
COM
IN1÷8
ENA
OSSD1/4
STATUS1/4
GREEN
RED
RED
ORANGE
YELLOW
BLUE
RED/GREEN/YELLOW
YELLOW
OFF
OFF
op. OK
ON = M1
connected to PC
OFF=otherwise
INPUT condition
ON = M1
connected to PC
OFF=otherwise
only the number of the
INPUT with the incorrect
connection flashes
OUTPUT condition
OFF
ON
incorrect
external
connection
detected
RED with output OFF
GREEN with output ON
YELLOW waiting for restart
BLINKING YELLOW with
inconsistent feedback (if
required)
ON
ON
ON
Table 30 - Dynamic Screen
English
Figure 17 - M1S
RUN
8540780 • 10/07/2020 • Rev.38
55
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MI8O2 (Figure 18)
LED
MEANING
RUN
IN FAIL
EXT FAIL
SEL0/1
IN1÷8
OSSD1/2
CLEAR1/2
STATUS1/2
GREEN
RED
RED
ORANGE
YELLOW
RED/GREEN
YELLOW
YELLOW
ON
ON
ON
ON
ON
Red
ON
ON
Power on - initial TEST
Table 31 - Opening Screen
LED
MEANING
RUN
IN FAIL
EXT FAIL
IN1÷8
SEL0/1
OSSD1/2
CLEAR1/2
STATUS1/2
GREEN
RED
RED
YELLOW
ORANGE
RED/GREEN
YELLOW
YELLOW
OFF
INPUT condition
Shows the
NODE_SEL0/1
signal table
RED
with output
OFF
GREEN
with output
ON
ON
waiting for
RESTART
OFF
if the unit is waiting for
the first communication
from the MASTER
NORMAL
OPERATION
FLASHES
if no INPUT or OUTPUT
requested by the
configuration
ON
if INPUT or OUTPUT
requested by the
configuration
OFF
ON
incorrect
external
connection
detected
only the number of the
INPUT with the
incorrect connection
flashes
OUTPUT
condition
Flashes
NO feedback
Table 32 - Dynamic Screen
English
Figure 18 - MI8O2
56
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MI8O4 (Figure 18)
LED
MEANING
Power on - initial TEST
RUN
IN FAIL
EXT FAIL
SEL0/1
IN1÷8
OSSD1/4
STATUS1/4
GREEN
RED
RED
ORANGE
YELLOW
RED/GREEN/YELLOW
YELLOW
ON
ON
ON
ON
ON
Red
ON
Table 33 - Opening Screen
LED
MEANING
RUN
IN FAIL
EXT FAIL
IN1÷8
SEL0/1
OSSD1/4
STATUS1/4
GREEN
RED
RED
YELLOW
ORANGE
RED/GREEN/YELLOW
YELLOW
OFF
INPUT condition
Shows the
NODE_SEL0/1
signal table
RED with output OFF
GREEN with output ON
YELLOW waiting for restart
BLINKING YELLOW with
inconsistent feedback (if
required)
OUTPUT
condition
OFF
if the unit is waiting for
the first communication
from the MASTER
NORMAL
OPERATION
FLASHES
if no INPUT or OUTPUT
requested by the
configuration
ON
if INPUT or OUTPUT
requested by the
configuration
OFF
ON
incorrect
external
connection
detected
only the number of the
INPUT with the
incorrect connection
flashes
Table 34 - Dynamic Screen
English
Figure 19 - MI8O4
8540780 • 10/07/2020 • Rev.38
57
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MI8 (Figure 20)
LED
MEANING
RUN
GREEN
ON
Power on - initial TEST
IN FAIL
RED
ON
EXT FAIL
RED
ON
SEL0/1
ORANGE
ON
IN1÷8
YELLOW
ON
Table 35 - Opening Screen
LED
MEANING
RUN
IN FAIL
EXT FAIL
SEL0/1
IN1÷8
GREEN
RED
RED
ORANGE
YELLOW
OFF
if the unit is waiting for the first
communication from the MASTER
NORMAL
OPERATION
FLASHES
if no INPUT or OUTPUT requested by the
configuration
ON
if INPUT or OUTPUT requested by the
configuration
OFF
OFF
ON
incorrect external
connection detected
INPUT condition
Shows the
NODE_SEL0/1 signal
table
only the number of the INPUT
with the incorrect connection
flashes
Table 36 - Dynamic Screen
English
Figure 20 - MI8
58
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MI12T8 (Figure 22)
LED
MEANING
Power on - initial TEST
RUN
IN FAIL
EXT FAIL
SEL0/1
IN1÷12
GREEN
ON
RED
ON
RED
ON
ORANGE
ON
YELLOW
ON
Table 37 - Opening Screen
MEANING
RUN
IN FAIL
LED
EXT FAIL
GREEN
RED
RED
SEL0/1
IN1÷12
ORANGE
YELLOW
OFF
if the unit is waiting for the first
communication from the MASTER
NORMAL
OPERATION
FLASHES
if no INPUT or OUTPUT requested by the
configuration
ON
if INPUT or OUTPUT requested by the
configuration
OFF
OFF
ON
incorrect external
connection detected
INPUT condition
Shows the
NODE_SEL0/1 signal
table
only the number of the INPUT
with the incorrect connection
flashes
Table 38 - Dynamic Screen
English
Figure 21-MI12T8
8540780 • 10/07/2020 • Rev.38
59
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MI16 (Figure 22)
RUN
IN FAIL
LED
EXT FAIL
SEL0/1
IN1÷16
GREEN
ON
RED
ON
RED
ON
ORANGE
ON
YELLOW
ON
MEANING
Power on - initial TEST
Table 39 - Opening Screen
MEANING
RUN
IN FAIL
LED
EXT FAIL
GREEN
RED
RED
SEL0/1
IN1÷16
ORANGE
YELLOW
OFF
if the unit is waiting for the first
communication from the MASTER
NORMAL
OPERATION
FLASHES
if no INPUT or OUTPUT requested by the
configuration
ON
if INPUT or OUTPUT requested by the
configuration
OFF
OFF
ON
incorrect external
connection detected
INPUT condition
Shows the
NODE_SEL0/1 signal
table
only the number of the INPUT
with the incorrect connection
flashes
Table 40 - Dynamic Screen
English
Figure 22 - MI16
60
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MO2 (Figure 23)
LED
MEANING
Power on - initial TEST
RUN
GREEN
IN FAIL
RED
EXT FAIL
RED
SEL0/1
ORANGE
OSDD1/2
RED/GREEN
CLEAR1/2
YELLOW
STATUS1/2
YELLOW
ON
ON
ON
ON
Red
ON
ON
Table 41 - Opening screen
MEANING
RUN
IN FAIL
EXT FAIL
LED
SEL0/1
GREEN
RED
RED
ORANGE
OFF
if the unit is waiting for the first
communication from the MASTER
NORMAL
OPERATION
FLASHES
if no INPUT or OUTPUT requested by
the configuration
OFF
op. OK
OFF
op. OK
Shows the
NODE_SEL0/1 signal
table
ON
if INPUT or OUTPUT requested by the
configuration
OSSD1/2
CLEAR1/2
STATUS1/2
RED/GREEN
YELLOW
YELLOW
RED
with output
OFF
ON
waiting for
RESTART
GREEN
with output
ON
OUTPUT
condition
Flashes
NO feedback
Table 42 - Dynamic screen
English
Figure 23 - MO2
8540780 • 10/07/2020 • Rev.38
61
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MO4 (Figure 24)
LED
MEANING
Power on - initial TEST
RUN
GREEN
IN FAIL
RED
EXT FAIL
RED
SEL0/1
ORANGE
OSSD1/4
RED/GREEN
CLEAR1/4
YELLOW
STATUS1/4
YELLOW
ON
ON
ON
ON
Red
ON
ON
Table 43 - Opening screen
LED
MEANING
RUN
IN FAIL
EXT FAIL
SEL0/1
OSSD1/4
CLEAR1/4
STATUS1/4
GREEN
RED
RED
ORANGE
RED/GREEN
YELLOW
YELLOW
RED
with output
OFF
ON
waiting for
RESTART
OFF
if the unit is waiting for the first
communication from the MASTER
NORMAL
OPERATION
FLASHES
if no INPUT or OUTPUT requested by
the configuration
OFF
op. OK
OFF
op. OK
Shows the
NODE_SEL0/1 signal
table
ON
if INPUT or OUTPUT requested by the
configuration
GREEN
with output
ON
OUTPUT
condition
Flashes
NO feedback
Table 44 - Dynamic Screen
English
Figure 24 - MO4
62
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MO4L (Figure 18)
LED
MEANING
Power on - initial TEST
RUN
IN FAIL
EXT FAIL
SEL0/1
OSSD1/4
STATUS1/4
GREEN
RED
RED
ORANGE
RED/GREEN/YELLOW
YELLOW
ON
ON
ON
ON
Red
ON
Table 45 - Opening Screen
LED
MEANING
RUN
IN FAIL
EXT FAIL
SEL0/1
OSSD1/4
STATUS1/4
GREEN
RED
RED
ORANGE
RED/GREEN/YELLOW
YELLOW
Shows the
NODE_SEL0/1 signal
table
RED with output OFF
GREEN with output ON
YELLOW waiting for restart
BLINKING YELLOW with
inconsistent feedback (if required)
OUTPUT
condition
OFF
if the unit is waiting for the first
communication from the MASTER
NORMAL
OPERATION
FLASHES
if no INPUT or OUTPUT requested
by the configuration
ON
if INPUT or OUTPUT requested by
the configuration
OFF
OFF
ON
incorrect external
connection detected
Table 46 - Dynamic screen
English
Figure 25 - MO4L
8540780 • 10/07/2020 • Rev.38
63
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MOR4 (Figure 26)
LED
MEANING
Power on - initial TEST
RUN
IN FAIL
EXT FAIL
SEL0/1
RELAY 1/4
CLEAR1/4
GREEN
RED
RED
ORANGE
RED
YELLOW
ON
ON
ON
ON
Red
ON
GREEN
Table 47 - Opening screen
LED
MEANING
RUN
IN FAIL
EXT FAIL
SEL0/1
RELAY 1/4
CLEAR1/4
GREEN
RED
RED
ORANGE
RED
YELLOW
OFF
if the unit is waiting
for the first
communication from
the MASTER
NORMAL OPERATION
FLASHES
if no INPUT or
OUTPUT requested by
the configuration
RED
with contact
opened
OFF
operation OK
OFF
operation OK
English
64
ON
waiting for
RESTART
Shows the
NODE_SEL0/1
signal table
GREEN
with contact closed
ON
if INPUT or OUTPUT
requested by the
configuration
Figure 26 MOR4
GREEN
FLASHES
External contactors
feedback error
Table 48 - Dynamic screen
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MOR4S8 (Figure 27)
LED
MEANING
Power on - initial
TEST
RUN
IN FAIL
EXT FAIL
SEL0/1
RELAY 1/4
CLEAR1/4
STATUS1/8
GREEN
RED
RED
ORANGE
RED
YELLOW
YELLOW
ON
ON
ON
ON
Red
ON
ON
RELAY 1/4
CLEAR1/4
STATUS1/8
YELLOW
YELLOW
GREEN
Table 49 - Opening screen
LED
RUN
IN FAIL
EXT FAIL
SEL0/1
GREEN
RED
RED
ORANGE
OFF
if the unit is
waiting for the
first
communication
from the MASTER
NORMAL OPERATION
Figure 27 MOR4S8
FLASHES
if no INPUT or
OUTPUT requested
by the
configuration
RED
GREEN
RED
with contact opened
OFF
operation OK
OFF
operation OK
ON
waiting for
RESTART
Shows the
NODE_SEL0/1
signal table
OUTPUT
condition
GREEN
with contact closed
ON
if INPUT or
OUTPUT requested
by the
configuration
FLASHES
wrong feedback
external
contactors
English
MEANING
Table 50 - Dynamic screen
8540780 • 10/07/2020 • Rev.38
65
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MOS8 (Figure 28)
LED
MEANING
Power on - initial TEST
RUN
IN FAIL
EXT FAIL
SEL0/1
STATUS1/8
GREEN
RED
RED
ORANGE
YELLOW
ON
ON
ON
ON
ON
Table 51 - Opening screen
LED
MEANING
RUN
IN FAIL
EXT FAIL
SEL0/1
STATUS1/8
GREEN
RED
RED
ORANGE
YELLOW
OFF
operation OK
OFF
operation OK
Shows the
NODE_SEL0/1 signal
table
OUTPUT
condition
OFF
if the unit is waiting
for the first
communication from
the MASTER
NORMAL OPERATION
Figure 28 - MOS8
FLASHES
if no INPUT or OUTPUT
requested by the
configuration
ON
if INPUT or OUTPUT
requested by the
configuration
English
Table 52 - Dynamic screen
66
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MOS16 (Figure 29)
LED
MEANING
Power on - initial TEST
RUN
IN FAIL
EXT FAIL
SEL0/1
STATUS1/16
GREEN
RED
RED
ORANGE
YELLOW
ON
ON
ON
ON
ON
Table 53 - Opening screen
LED
MEANING
RUN
IN FAIL
EXT FAIL
SEL 0/1
STATUS1/16
GREEN
RED
RED
ORANGE
YELLOW
OFF
operation OK
OFF
operation OK
Shows the
NODE_SEL0/1 signal
table
OUTPUT
condition
OFF
if the unit is waiting
for the first
communication from
the MASTER
NORMAL OPERATION
FLASHES
if no INPUT or OUTPUT
requested by the
configuration
ON
if INPUT or OUTPUT
requested by the
configuration
Table 54 - Dynamic screen
English
Figure 29 – MOS16
8540780 • 10/07/2020 • Rev.38
67
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MV0, MV1, MV2 (Figure 30)
LED
MEANING
Power on - initial TEST
RUN
IN FAIL
EXT FAIL
SEL0/1
ENC*
PROX
SH
GREEN
RED
RED
ORANGE
YELLOW
YELLOW
YELLOW
ON
ON
ON
ON
ON
ON
ON
Table 55 - Opening screen
MEANING
RUN
IN FAIL
EXT FAIL
LED
SEL0/1
ENC*
PROX
SH
GREEN
RED
RED
ORANGE
YELLOW
YELLOW
YELLOW
OFF
if the unit is waiting
for the first
communication
from the MASTER
NORMAL OPERATION
English
Figure 30 - MV1, MV2
FLASHES
if no INPUT or
OUTPUT requested
by the
configuration
OFF
Axis in normal
speed range
OFF
operation OK
OFF
operation OK
Shows the
NODE_SEL0/1
signal table
ON
if INPUT or OUTPUT
requested by the
configuration
ON
Encoder
connected and
operative
ON
Proximity
connected and
operative
ON
Axis in stand
still
BLINKING
Axis in
overspeed
Table 56 - Dynamic screen
* NOT PRESENT ON MV0 MODULE
68
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MR2, MR4, MR8 (Figure 31)
LED
OSSD1
MEANING
GREEN
NORMAL OPERATION
ON with output activated
Table 57 - MR2 - Dynamic screen
LED
OSSD1
GREEN
MEANING
NORMAL OPERATION
OSSD2
GREEN
ON with output activated
Table 58 - MR4 - Dynamic screen
LED
MEANING
NORMAL OPERATION
OSSD1
GREEN
OSSD2
GREEN
OSSD3
GREEN
OSSD4
GREEN
ON with output activated
Table 59 – MR8 - Dynamic screen
English
Figure 31 - MR2, MR4, MR8
8540780 • 10/07/2020 • Rev.38
69
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MO4LHCS8 (Figure 32)
LED
MEANING
Power on - initial
TEST
RUN
IN FAIL
EXT FAIL
SEL0/1
GREEN
RED
RED
ORANGE
ON
ON
ON
ON
OSSD 1/4
CLEAR1/4
STATUS1/8
YELLOW
YELLOW
Red
ON
ON
OSSD 1/4
CLEAR1/4
STATUS1/8
YELLOW
YELLOW
ON
waiting for
RESTART
The associated
output is active
RED
GREEN
Table 60 - Opening screen
LED
MEANING
RUN
IN FAIL
EXT FAIL
SEL0/1
GREEN
RED
RED
ORANGE
OFF
if the unit is waiting
for the first
communication
from the MASTER
NORMAL OPERATION
FLASHES
if no INPUT or
OUTPUT requested
by the configuration
GREEN
RED
with output OFF
OFF
operation
OK
OFF
operation
OK
ON
Shows the
NODE_SEL0/1
signal table
GREEN
with output ON
ON
if INPUT or OUTPUT
requested by the
configuration
FLASHES
wrong feedback
external
contactors
OFF
The associated
output is NOT
active
Table 61 - Dynamic screen
English
Figure 32 MO4LHCS8
RED
70
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MA2, MA4 (Figure 33)
LED
MEANING
Power on - initial TEST
RUN
IN FAIL
EXT FAIL
SEL0/1
CHAN 1/4
GREEN
RED
RED
ORANGE
RED/GREEN
ON
ON
ON
ON
RED ON
CHAN 1/4
Table 62 – Initial operation LEDs state
LED
MEANING
RUN
IN FAIL
EXT FAIL
SEL0/1
GREEN
RED
RED
ORANGE
OFF
if the unit is waiting for the first
communication from the MASTER
NORMAL
OPERATION
GRN
Channel configured
FLASHES
if no INPUT configuration is requested from
MASTER
ON
if INPUT configuration is requested from
MASTER
OFF
Normal operation
OFF
ON
Anomaly detected on
measurement channel
Shows the
NODE_SEL0/1
signal table
OFF
ON
Channel NOT configured
OFF
OFF
Table 63 - Dynamic operation LEDs state
English
Figure 33 – MA2, MA4
RED
8540780 • 10/07/2020 • Rev.38
71
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
LED INDICATORS (Troubleshooting)
Master M1 (Figure 34)
LED
MEANING
Internal fat
OSSD output
error
RUN
IN FAIL
EXT FAIL
COM
IN1÷8
ENA
OSSD1/2
CLEAR1/2
STATUS1/2
GREEN
RED
RED
ORANGE
YELLOW
BLUE
RED/GREEN
YELLOW
YELLOW
OFF
2 or 3
flashes
OFF
OFF
OFF
OFF
Red
OFF
OFF
Return the unit to
ReeR to be repaired
OFF
4 flashes
(only the LED
corresponding to
the output in FAIL
mode)
OFF
• Check the
OSSD1/2
connections
• If the problem
persists return the
M1 to ReeR to be
repaired
OFF
4
flashes
OFF
OFF
OFF
OFF
REMEDY
Error in
communication
with slave
OFF
5
flashes
OFF
OFF
OFF
OFF
OFF
OFF
OFF
• Restart the
system.
• If the problem
persists return the
M1 to ReeR to be
repaired
Slave unit
error
OFF
ON
OFF
OFF
OFF
OFF
OFF
OFF
OFF
• Restart the system
• Check which unit
is in FAIL mode
MCM error
OFF
6
flashes
OFF
6
flashes
OFF
OFF
OFF
OFF
OFF
Replace the MCM
English
Table 64 - Troubleshooting M1
Figure 34 - M1
72
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Master M1S (Figure 35)
LED
MEANING
Internal fault
OSSD output
error
RUN
IN FAIL
EXT FAIL
COM
IN1÷8
ENA
OSSD1/4
STATUS1/4
GREEN
RED
RED
ORANGE
YELLOW
BLUE
RED/GREEN/YELLOW
YELLOW
OFF
2 or 3
flashes
OFF
OFF
OFF
OFF
Red
OFF
Return the unit to
ReeR to be repaired
OFF
• Check the
OSSD1/2
connections
• If the problem
persists return
the M1 to ReeR to
be repaired
OFF
• Restart the
system.
• If the problem
persists return
the M1 to ReeR to
be repaired
OFF
4
flashes
OFF
OFF
OFF
OFF
4 flashes
(only the LED corresponding
to the output in FAIL mode)
REMEDY
Error in
communication
with slave
OFF
5
flashes
OFF
OFF
OFF
OFF
OFF
Slave unit error
OFF
ON
OFF
OFF
OFF
OFF
OFF
MCM error
OFF
6
flashes
OFF
6
flashes
OFF
OFF
OFF
OFF
Overload on
OSSD / OSSD
load connected
to 24V
ON
OFF
ON
OFF
Inputs
State
ON
Red blinking (only LED
corresponding to the relative
output)
OUTPUT
state
• Verify OSSD
connections
Short circuit or
overload
detected on
status output
ON
OFF
ON
OFF
Inputs
State
ON
OUTPUT
state
blinking
• Verify output
status
connections
OFF
• Restart the
system
• Check which unit
is in FAIL mode
Replace the MCM
Figure 35 - M1S
English
Table 65 - Troubleshooting M1S
8540780 • 10/07/2020 • Rev.38
73
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MI8O2 (Figure 36)
LED
MEANING
RUN
IN FAIL
EXT FAIL
SEL0/1
IN1÷8
OSSD1/2
CLEAR1/2
STATUS1/2
GREEN
RED
RED
ORANGE
YELLOW
RED/GREEN
YELLOW
YELLOW
REMEDY
Internal fault
OFF
2 or 3
flashes
OFF
OFF
Red
OFF
OFF
• Return the unit to ReeR
to be repaired
Compatibility error
OFF
5
flashes
OFF
5 flashes
5
flashes
5
flashes
5
flashes
• Firmware version not
compatible with M1,
return to ReeR for FW
upgrade.
OFF
4 flashes
(only the LED
corresponding to the
output in FAIL mode)
OFF
OFF
• Check OSSD1/2
connections
• If the problem persists,
return the unit to ReeR
to be repaired
OSSD output error
OFF
4
flashes
OFF
Error in
communication with
master
OFF
5
flashes
OFF
OFF
OFF
OFF
OFF
• Restart the system
• If the problem persists,
return the MI8O2 to
ReeR to be repaired
Error on other
slave or M1
OFF
ON
OFF
OFF
OFF
OFF
OFF
• Restart the system
• Check which unit is in
FAIL mode
Same type of slave
with same address
detected
OFF
5
flashes
5
flashes
OFF
OFF
OFF
OFF
• Change the unit's
address (see NODE
SEL)
Node detection
circuit error
OFF
3
flashes
OFF
OFF
OFF
OFF
OFF
• Return the unit to ReeR
to be repaired
Shows the
physical
address of the
unit
3
flashes
Table 66 - Troubleshooting MI8O2
English
Figure 36 MI8O2
74
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MI8O4 (Figure 37)
LED
MEANING
RUN
IN FAIL
EXT FAIL
SEL0/1
IN1÷8
OSSD1/4
STATUS1/4
GREEN
RED
RED
ORANGE
YELLOW
RED/GREEN/YELLOW
YELLOW
REMEDY
Internal fault
OFF
2 or 3
flashes
OFF
OFF
Red
OFF
• Return the unit to ReeR
to be repaired
Compatibility error
OFF
5
flashes
OFF
5 flashes
5
flashes
5
flashes
• Firmware version not
compatible with M1,
return to ReeR for FW
upgrade.
OFF
4 flashes
(only the LED corresponding
to the output in FAIL mode)
OFF
• Check OSSD1/2
connections
• If the problem persists,
return the unit to ReeR
to be repaired
OSSD output error
OFF
4
flashes
OFF
Error in
communication with
master
OFF
5
flashes
OFF
OFF
OFF
OFF
• Restart the system
• If the problem persists,
return the MI8O4 to
ReeR to be repaired
Error on other
slave or M1
OFF
ON
OFF
OFF
OFF
OFF
• Restart the system
• Check which unit is in
FAIL mode
Same type of slave
with same address
detected
OFF
5
flashes
5
flashes
OFF
OFF
OFF
• Change the unit's
address (see NODE
SEL)
Overload on OSSD /
OSSD load connected
to 24V
ON
OFF
ON
Shows the
physical
address of the
unit
Inputs
State
Red blinking (only LED
corresponding to the
relative output)
OUTPUT
state
• Verify OSSD connections
ON
Shows the
physical
address of the
unit
Inputs
State
OUTPUT
state
blinking
• Verify output status
connections
Short circuit or
overload detected on
status output
OFF
Table 67 - Troubleshooting MI8O4
English
Figure 37 MI8O4
ON
Shows the
physical
address of the
unit
8540780 • 10/07/2020 • Rev.38
75
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MI8 (Figure 38)
LED
MEANING
RUN
IN FAIL
EXT FAIL
SEL0/1
IN1÷8
GREEN
RED
RED
ORANGE
YELLOW
Internal fault
OFF
2 or 3
flashes
OFF
OFF
Compatibility error
OFF
5
flashes
OFF
5
flashes
Error in communication with
master
OFF
5
flashes
OFF
Error on other
slave or M1
OFF
ON
Same type of slave with same
address detected
OFF
Node detection circuit error
OFF
Shows the
physical
address of
the unit
REMEDY
• Return the unit to ReeR to be repaired
• Firmware version not compatible with M1,
return to ReeR for FW upgrade.
OFF
• Restart the system
• If the problem persists, return the unit to ReeR
to be repaired
OFF
OFF
• Restart the system
• Check which unit is in FAIL mode
5
flashes
5
flashes
OFF
• Change the unit's address (see NODE SEL)
3
flashes
OFF
OFF
• Return the unit to ReeR to be repaired
3
flashes
Table 68 - Troubleshooting MI8
English
Figure 38 - MI8
76
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MI12T8 (Figure 39)
LED
RUN
IN FAIL
EXT FAIL
SEL0/1
IN1÷12
GREEN
RED
RED
ORANGE
YELLOW
OFF
2 or 3 flashes
OFF
OFF
Compatibility error
OFF
5
flashes
OFF
5
flashes
• Firmware version not compatible with M1,
return to ReeR for FW upgrade.
Error in communication with
master
OFF
5
flashes
OFF
OFF
• Restart the system
• If the problem persists, return the unit to
ReeR to be repaired
Error on other
slave or M1
OFF
ON
OFF
OFF
• Restart the system
• Check which unit is in FAIL mode
Same type of slave with
same address detected
OFF
5
flashes
5
flashes
OFF
• Change the unit's address (see NODE SEL)
Node detection circuit error
OFF
3
flashes
OFF
OFF
• Return the unit to ReeR to be repaired
MEANING
Internal fault
Shows the physical
address of the unit
3
flashes
REMEDY
Return the unit to ReeR to be repaired
Table 69 - Troubleshooting MI12T8
English
Figure 39 - MI12T8
8540780 • 10/07/2020 • Rev.38
77
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MI16 (Figure 40)
LED
MEANING
RUN
IN FAIL
EXT FAIL
SEL0/1
IN1÷16
GREEN
RED
RED
ORANGE
YELLOW
OFF
2 or 3 flashes
OFF
OFF
Compatibility error
OFF
5
flashes
OFF
5
flashes
• Firmware version not compatible with M1,
return to ReeR for FW upgrade.
Error in communication with
master
OFF
5
flashes
OFF
OFF
• Restart the system
• If the problem persists, return the unit to
ReeR to be repaired
Error on other
slave or M1
OFF
ON
OFF
OFF
• Restart the system
• Check which unit is in FAIL mode
Same type of slave with same
address detected
OFF
5
flashes
5
flashes
OFF
• Change the unit's address (see NODE SEL)
Node detection circuit error
OFF
3
flashes
OFF
OFF
• Return the unit to ReeR to be repaired
Internal fault
Shows the
physical
address of the
unit
3
flashes
REMEDY
• Return the unit to ReeR to be repaired
Table 70 - Troubleshooting MI16
English
Figure 40 - MI16
78
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MO2 / MO4 (Figure 41)
LED
MEANING
Internal fault
Compatibility error
OSSD output error
Figure 41 - MO2 / MO4
RUN
IN FAIL
EXT FAIL
SEL0/1
OSSD1/4
CLEAR1/4
STATUS1/4
GREEN
RED
RED
ORANGE
RED/GREEN
YELLOW
YELLOW
OFF
2 or 3
flashes
OFF
Red
OFF
OFF
Return the unit to
ReeR to be repaired
5
flashes
• Firmware version
not compatible
with M1, return to
ReeR for FW
upgrade.
OFF
• Check OSSD1/2
connections
• If the problem
persists, return the
unit to ReeR to be
repaired
OFF
OFF
5
flashes
4
flashes
OFF
5
flashes
OFF
4 flashes
(only the LED
corresponding to
the output in FAIL
mode)
Shows the
physical
address of the
unit
5
flashes
OFF
REMEDY
OFF
OFF
OFF
• Restart the system
• If the problem
persists, return the
unit to ReeR to be
repaired
OFF
OFF
OFF
OFF
• Restart the system
• Check which unit is
in FAIL mode
5
flashes
5
flashes
OFF
OFF
OFF
• Change the unit's
address (see
NODE SEL)
ON
OFF
ON
Red
flashes
flashes
OUTPUT
condition
• Connect 13 and 14
pin to power
supply
Status output overload
or short circuit
OFF
OFF
ON
OUTPUT condition
CLEAR
condition
flashes
• Check STATUS
connections
Error on node
detection circuit
OFF
3
flashes
OFF
OFF
OFF
OFF
Error in communication
with master
OFF
5
flashes
OFF
Error on other
slave or M1
OFF
ON
Same type of slave
with same address
detected
OFF
Power supply missing
on OSSD 3,4 (MO4
only)
3
flashes
• Return the MO2/4
to ReeR to be
repaired
8540780 • 10/07/2020 • Rev.38
English
Table 71 - Troubleshooting MO2/MO4
79
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MO4L (Figure 42)
LED
MEANING
RUN
IN FAIL
EXT FAIL
SEL0/1
OSSD1/4
STATUS1/4
GREEN
RED
RED
ORANGE
RED/GREEN/YELLOW
YELLOW
Internal fault
OFF
2 or 3
flashes
OFF
Red
OFF
• Return the unit to ReeR to be
repaired
Compatibility error
OFF
5
flashes
OFF
5
flashes
5
flashes
• Firmware version not
compatible with M1, return to
ReeR for FW upgrade.
OSSD output error
OFF
4
flashes
OFF
4 flashes
(only the LED corresponding to
the output in FAIL mode)
OFF
• Check OSSD1/2 connections
• If the problem persists, return
the unit to ReeR to be repaired
Error in communication
with master
OFF
5
flashes
OFF
OFF
OFF
• Restart the system
• If the problem persists, return
the MO4L to ReeR to be
repaired
Error on other
slave or M1
OFF
ON
OFF
OFF
OFF
• Restart the system
• Check which unit is in FAIL
mode
Same type of slave with
same address detected
OFF
5
flashes
5
flashes
OFF
OFF
• Change the unit's address (see
NODE SEL)
ON
Shows the
physical
address of the
unit
Red blinking
(only LED corresponding to the
relative output)
OUTPUT
state
• Verify OSSD connections
ON
Shows the
physical
address of the
unit
OUTPUT
state
blinking
• Verify output status
connections
Overload on OSSD /
OSSD load connected to
24V
Short circuit or overload
detected on status output
ON
ON
OFF
OFF
Shows the
physical
address of the
unit
REMEDY
Table 72 - Troubleshooting MO4L
English
Figure 42 - MO4L
80
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MOR4 (Figure 43)
MEANING
LED
SEL 0/1
ORANGE
IN FAIL
RED
EXT FAIL
RED
OFF
2 / 3 flashes
OFF
Rosso
OFF
• Return the unit to ReeR
to be repaired
Compatibility error
OFF
5
flashes
OFF
5
flashes
5
flashes
• Firmware version not
compatible with M1,
return to ReeR for FW
upgrade.
Relais output error
OFF
4
flashes
OFF
4 flashes
(only the LED
corresponding to the
output in FAIL mode)
OFF
• If the problem persists,
return the module to
ReeR to be repaired
Error in
communication with
master
OFF
5
flashes
OFF
OFF
OFF
• Restart the system
• If the problem persists,
return the module to
ReeR to be repaired
Error on other
slave or M1
OFF
ON
OFF
OFF
OFF
• Restart the system
• Check which unit is in
FAIL mode
Same type of slave
with same address
detected
OFF
5
flashes
5
flashes
OFF
OFF
• Change the unit's
address (see NODE SEL)
External contactors
feedback error on
Category 4 relay
ON
OFF
4
flashes
Error on node
detection circuit
OFF
3 flashes
OFF
Internal fault
Shows the
physical address
of the unit
CLEAR1/4
YELLOW
4 flashes
(only the LEDs corresponding to the
outputs in FAIL mode)
3
flashes
OFF
OFF
• Verify connections
5,6,7,8.
• Return the module to
ReeR to be repaired
Table 73 - Troubleshooting MOR4
English
Figure 43 MOR4
RELAY 1/4
RED
GREEN
REMEDY
RUN
GREEN
8540780 • 10/07/2020 • Rev.38
81
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MOR4S8 (Figure 44)
LED
MEANING
English
Figure 44 MOR4S8
SEL0/1
ORANGE
IN FAIL
RED
EXT FAIL
RED
Internal fault
OFF
2/3
flashes
OFF
Rosso
OFF
Compatibility error
OFF
5
flashes
OFF
5
flashes
5
flashes
5
flashes
• Firmware version not
compatible with M1,
return to ReeR for
FW upgrade.
Relais output error
OFF
4
flashes
OFF
4 flashes
(only the LED
corresponding to the
output in FAIL mode)
OFF
OFF
• If the problem
persists, return the
module to ReeR to
be repaired
Shows the
physical
address of
the unit
RELAY 1/4
RED
GREEN
CLEAR1/4
YELLOW
STATUS1/8
YELLOW
REMEDY
RUN
GREEN
• Return the unit to
ReeR to be repaired
OFF
OFF
OFF
• Restart the system
• If the problem
persists, return the
module to ReeR to
be repaired
OFF
OFF
OFF
OFF
• Restart the system
• Check which unit is in
FAIL mode
5
flashes
5
flashes
OFF
OFF
OFF
• Change the unit's
address
(see NODE SEL)
ON
OFF
4
flashes
OFF
• Verify connections
5,6,7,8.
Error on node
detection circuit
OFF
3 flashes
OFF
3
flashes
OFF
OFF
OFF
• Return the module to
ReeR to be repaired
Short circuit or
overload detected
on status output
OFF
OFF
ON
OFF
OUTPUT
condition
CLEAR
condition
flash
• Verify output status
connections
Error in
communication with
master
OFF
5
flashes
OFF
Error on other
slave or M1
OFF
ON
Same type of slave
with same address
detected
OFF
External contactors
feedback error on
Category 4 relay
4 flashes (only the LEDs corresponding
to the outputs in FAIL mode)
Table 74 - Troubleshooting MOR4S8
82
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MOS8 (Figure 45)
LED
MEANING
RUN
IN FAIL
EXT FAIL
SEL0/1
GREEN
RED
RED
ORANGE
OFF
2 / 3 flashes
OFF
OFF
• Return the unit to ReeR
to be repaired
OFF
5
flashes
OFF
5
flashes
• Firmware version not
compatible with M1,
return to ReeR for FW
upgrade.
Error in communication
with master
OFF
5
flashes
OFF
OFF
• Restart the system
• If the problem persists,
return the module to
ReeR to be repaired
Error on other
slave or M1
OFF
ON
OFF
OFF
• Restart the system
• Check which unit is in
FAIL mode
Same type of slave with
same address detected
OFF
5
flashes
5
flashes
OFF
• Change the unit's
address
(see NODE SEL)
Error on node detection
circuit
OFF
3 flashes
OFF
3
flashes
OFF
• Return the module to
ReeR to be repaired
Short circuit or overload
detected on status 1-8
output
OFF
OFF
ON
OFF
flash
• Verify output status 18 connections
Power supply missing
on status 1-8 output
OFF
OFF
ON
OFF
flash
alternatively
• Connect 5 pin to power
supply
Internal fault
Compatibility error
REMEDY
Table 75 - Troubleshooting MOS8
English
Figure 45 – MOS8
Shows the physical
address of the unit
STATUS1/8
YELLOW
8540780 • 10/07/2020 • Rev.38
83
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MOS16 (Figure 46)
LED
MEANING
Figure 46 –
MOS16
RUN
GREEN
IN FAIL
RED
EXT FAIL
RED
Internal fault
OFF
2 / 3 flashes
Compatibility error
OFF
Error in communication
with master
SEL0/1
ORANGE
REMEDY
STATUS1/8
YELLOW
STATUS9/16
YELLOW
OFF
OFF
OFF
• Return the unit to ReeR
to be repaired
5
flashes
OFF
5
flashes
5
flashes
• Firmware version not
compatible with M1,
return to ReeR for FW
upgrade.
OFF
5
flashes
OFF
OFF
OFF
• Restart the system
• If the problem persists,
return the module to
ReeR to be repaired
Error on other
slave or M1
OFF
ON
OFF
OFF
OFF
• Restart the system
• Check which unit is in
FAIL mode
Same type of slave with
same address detected
OFF
5
flashes
5
flashes
OFF
OFF
• Change the unit's
address
(see NODE SEL)
Error on node detection
circuit
OFF
3 flashes
OFF
3
flashes
OFF
OFF
• Return the module to
ReeR to be repaired
Short circuit or overload
detected on status 1-8
output
OFF
OFF
ON
OFF
flash
OFF
• Verify output status 1-8
connections
Short circuit or overload
detected on status 9-16
output
OFF
OFF
ON
OFF
OFF
flash
• Verify output status
9-16 connections
Power supply missing on
status 1-8 output
OFF
OFF
ON
OFF
flash
alternatively
OFF
• Connect 5 pin to power
supply
Power supply missing on
status 9-16 output
OFF
OFF
ON
OFF
OFF
flash
alternatively
• Connect 6 pin to power
supply
Shows the
physical address
of the unit
English
Table 76 - Troubleshooting MOS16
84
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MV0, MV1, MV2 (Figure 47)
LED
RUN
IN FAIL
EXT FAIL
SEL0/1
ENC*
PROX
SH
GREEN
RED
RED
ORANGE
YELLOW
YELLOW
YELLOW
OFF
2 or 3
flashes
OFF
OFF
OFF
OFF
• Return the unit to
ReeR to be repaired
Compatibility error
OFF
5
flashes
OFF
5
flashes
5
flashes
5
flashes
• Firmware version not
compatible with M1,
return to ReeR for FW
upgrade.
Encoder INTERNAL
error
OFF
3
flashes
OFF
3
flashes
OFF
OFF
• Change the encoder
• Return the unit to
ReeR to be repaired
3
flashes
OFF
MEANING
Internal fault
Proximity
INTERNAL error
Figure 47 - MV1, MV2
Error on node
detection circuit
OFF
3
flashes
OFF
Same type of slave
with same address
detected
OFF
5
flashes
5
flashes
Encoder not
connected but
requested from the
configuration
OFF
OFF
continuous
flashes
Proximity not
connected but
requested from the
configuration
OFF
OFF
continuous
flashes
Shows the
physical
address
of the unit
• Change the proximity
• Return the unit to
ReeR to be repaired
3
flashes
3
flashes
Shows the
physical
address
of the unit
REMEDY
OFF
OFF
OFF
• Return the unit to
ReeR to be repaired
OFF
OFF
OFF
• Change the unit's
address
(see NODE SEL)
continuous
flashes
OFF
OFF
• Verify encoder
connection and power
supply
• Verify input frequency
(in range)
OFF
continuous
flashes
OFF
• Verify proximity
connection
• Verify input frequency
(in range)
Table 77 - Troubleshooting MV1/MV2
NOT PRESENT ON MV0 MODULE
English
*
8540780 • 10/07/2020 • Rev.38
85
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MO4LHCS8 (Figure 48)
LED
MEANING
English
Figure 48 MO4LHCS8
SEL 0/1
ORANGE
IN FAIL
RED
EXT FAIL
RED
Internal fault
OFF
2/3
flashes
OFF
Rosso
OFF
Compatibility error
OFF
5
flashes
OFF
5
flashes
5
flashes
5
flashes
• Firmware version not
compatible with M1,
return to ReeR for FW
upgrade.
OSSD output error
OFF
4
flashes
OFF
4 flashes
(only the LED
corresponding to the
output in FAIL mode)
OFF
OFF
• If the problem persists,
return the module to
ReeR to be repaired
Error in
communication
with master
OFF
5
flashes
OFF
OFF
OFF
OFF
• Restart the system
• If the problem persists,
return the module to
ReeR to be repaired
Error on other
slave or M1
OFF
ON
OFF
OFF
OFF
OFF
• Restart the system
• Check which unit is in
FAIL mode
Same type of slave
with same address
detected
OFF
5
flashes
5
flashes
OFF
OFF
OFF
• Change the unit's
address
(see NODE SEL)
Short circuit or
overload detected
on status output
ON
OFF
ON
OUTPUT
condition
CLEAR
condition
flash
• Verify output status
connections
OSSD overload or
load connected to
24VDC
ON
OFF
ON
Blinking (only LED
corresponding to the
relative output)
OFF
OUTPUT
condition
• Verify OSSD connections
Power supply
missing on
OSSD3-OSSD4
ON
OFF
ON
OSSD3/OSSD4
led blinking
OSSD3/OSSD4
led blinking
OUTPUT
condition
• Connect pin 14 to 24VDC
Error on node
detection circuit
OFF
3 flashes
OFF
OFF
OFF
OFF
Shows the
physical
address of
the unit
3
flashes
OSSD 1/4
RED
GREEN
CLEAR1/4
YELLOW
STATUS1/8
YELLOW
REMEDY
RUN
GREEN
• Return the unit to ReeR
to be repaired
• Return the module to
ReeR to be repaired
Table 78 - Troubleshooting MO4LHCS8
86
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MA2, MA4 (Figure 49)
LED
MEANING
RUN
IN FAIL
EXT FAIL
SEL0/1
GREEN
RED
RED
ORANGE
Internal fault
OFF
2/3
flashes
Compatibility error
OFF
Communication
error with MASTER
CHAN 1/4
REMEDY
RED
GREEN
OFF
OFF
OFF
• Return the unit to ReeR to be repaired
3
flashes
OFF
OFF
OFF
• Wrong MASTER firmware version, return MASTER unit to
ReeR in order to update the firmware.
OFF
5
flashes
OFF
OFF
OFF
• Reboot the system
• If reboot does not work return the unit to ReeR
Error on other
slave or MASTER
OFF
ON
OFF
OFF
OFF
• Restart the system
• Check which unit is in FAIL mode
Same type of slave
with same address
detected
OFF
5
flashes
5
flashes
OFF
OFF
• Change the unit address (see NODE SEL)
Wrong configuration
received
OFF
5
flashes
OFF
OFF
OFF
• Check field bus connection.
Shows the
physical
address of the
unit
Channel configured as SINGLE or not configured at all
ON
OFF
ON
1 flash
every 600
ms
OFF
 Check sensor connections
 Check sensor status
Input channel
overload
ON
OFF
ON
1 flash
every 600
ms
OFF
 Check sensor connections
 Check sensor status
3 fast
flashes and
a pause of
600 ms
OFF
ON
3 fast
flashes and
a pause of
600 ms
OFF
ON
3 fast
flashes and
a pause of
600 ms
OFF
Read value over
threshold
ON
OFF
ON
Read value under
threshold
ON
OFF
Disconnected sensor
8540780 • 10/07/2020 • Rev.38
ON
OFF
Shows the
physical
address of the
unit
 Check sensor connections
 Check sensor status
 Check threshold values set with MSD software
 Check sensor connections
 Check sensor status
 Check threshold values set with MSD software
 Check sensor connections
 Check sensor status
English
Figure 49 –
MA2, MA4
Sensor supply
overload
87
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Channel configured as Redundant (Pair of sensors connected), conditions:
1.
2.
Sensor supply overload. Input channel overload. Read value over threshold. Read value under threshold. Disconnected sensor:
When one of these diagnosis is detected the RED led relative to the channel with the problem will flash. The RED led of the other channel remains ON
(no flash). If one of the above diagnosis is detected at the same time on both sensors the RED led of the second channel will flash while the RED led of the
first channel remains ON (no flash).
Read value from sensor pair out of tolerance diagnosis: both LEDs of channel pair will flash.
LED
MEANING
IN FAIL
EXT FAIL
SEL0/1
RED
RED
ORANGE
Sensor supply
overload
ON
OFF
Input channel
overload
ON
Read value over
threshold
ON
Read value under
threshold
ON
OFF
ON
Disconnected
sensor
ON
OFF
Read value from
sensor pair out of
tolerance
ON
OFF
CHAN 1/4
REMEDY
RED
GREEN
ON
1 flash every
600 ms
OFF
 Check sensor connections
 Check sensor status
OFF
ON
1 flash every
600 ms
OFF
 Check sensor connections
 Check sensor status
OFF
ON
3 fast flashes
and a pause
of 600 ms
OFF
3 fast flashes
and a pause
of 600 ms
OFF
 Check sensor connections
 Check sensor status
 Check threshold values set with MSD software
ON
3 fast flashes
and a pause
of 600 ms
OFF
 Check sensor connections
 Check sensor status
ON
1 flash every
100 ms
OFF
 Check sensor connections
 Check sensor status
 Check values set with MSD software
Shows the
physical
address of the
unit
 Check sensor connections
 Check sensor status
 Check threshold values set with MSD software
Table 79 - Troubleshooting MA4
English
MA2, MA4
RUN
GREEN
88
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MOSAIC SAFETY DESIGNER SOFTWARE
The "MOSAIC SAFETY DESIGNER" application software can be used to configure a logic
diagram of the connections between the MOSAIC (Master + expansions) and the
components of the system being developed.
The MOSAIC and its SLAVE units will thus monitor and control the connected safety
components.
The MSD uses a versatile graphic interface to establish the connections between the various
components, as described below:
Installing the software
PC HARDWARE requirements
• RAM: 256 MB (minimum to run 7 with Service Pack 1 + Framework 4.0)
•
• USB port: 2.0 or greater
• Internet connection for program download
• CD-ROM drive
PC SOFTWARE requirements
• Windows 7 with Service Pack 1 installed (or higher OS).
• Microsoft Framework 4.0 (or higher) must be installed on the PC
Installation of MSD software
• Insert the installation CD;
• Wait for the auto-run installer to request the SW setup program;
• Otherwise, run the
file located on the root of the installation CD or
download the last available version from the Download section of the ReeR website:
https://www.reersafety.com/it/en/download/configuration-software.
 When the installation procedure is complete a window is displayed asking you to close
English
the setup program.
8540780 • 10/07/2020 • Rev.38
89
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Fundamentals
Once the MSD has been correctly installed it
To launch the program: double-click on this icon. =>
The opening screen shown below is displayed:
creates an icon on the desktop.
Figure 50
english
You are now ready to create your project.
90
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Standard tool bar
The standard tool bar is shown in Figure 51. The meanings of the icons are listed below:
1 ->
CREATE A NEW PROJECT
2 ->
CHANGE CONFIGURATION (composition of different modules)
3 ->
CHANGE USER PARAMETERS (name, company, etc)
4 ->
SAVE THE ACTUAL PROJECT
5 ->
LOAD AN EXISTING PROJECT (FROM THE PC)
6 ->
PRINT THE PROJECT SCHEMATIC
7 ->
PRINT PREVIEW
8 ->
PRINTING AREA
9 ->
SNAP TO GRID
10 ->
RESOURCES ALLOCATION
11 ->
PRINT THE PROJECT REPORT
12 ->
UNDO (CANCEL THE LAST COMMAND)
13 ->
REDO (RESTORE THE LAST CANCELLATION)
14 ->
VALIDATE THE PROJECT
15 ->
CONNECT TO MOSAIC
16 ->
SEND PROJECT TO MOSAIC
17 ->
DISCONNECT FROM MOSAIC
18 ->
DOWNLOAD AN EXISTING PROJECT (FROM MOSAIC)
19 ->
MONITOR (Real time I/O status - graphic)
20 ->
MONITOR (Real time I/O status - textual)
21 ->
DOWNLOAD LOG FILE
22 ->
SHOW SYSTEM CONFIGURATION
23 ->
DOWNLOAD ERRORS LOG
24 ->
DELETE ERRORS LOG
25 ->
SCHEMATIC SIMULATION
26 ->
GRAPHIC SIMULATION
27 ->
CHANGE PASSWORD
28 ->
HELP ON-LINE
29 ->
PASSWORD RECOVERY
8540780 • 10/07/2020 • Rev.38
English
Figure 51
91
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Textual tool bar
Optionally the textual tool bar shown below is also available (drop down).
Figure 52
Create a new project (configure the MOSAIC system)
Select icon CREATE (Figure 51) from the standard tool bar to start a new project. The user
authentication window is displayed (Figure 53).
english
Figure 53
Next the MSD displays a window showing the M1S only. It is possible to select the M1 module acting
on the drop-down menu under the master module choosing the fw version. For M1 it is <5.0, for
.
You may add the various units needed to create your system, using the drop-down menus at the
top of the screen (select slave) and at the bottom to select the relative node (0÷3).
The insertion order of modules is not important. Also the physical position of the modules must not
be the same of the msd configuaration menu. For example, you can physically put the slave modules
to the left of the master module.
For some slave modules, it is also necessary to choose the type (MVx, MBx) by means of a second
drop-down menu located below the node selection menu.
92
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
SELECT SLAVE (to add to your configuration)
Firmware
version:
NODE SELECTION
(from 0 to 3)
M1 < 5.0
Necessary for
MTBF and SIL
Module type selection
(MV and MB)
Figure 54
Select to disable MCM
operations
EDIT CONFIGURATION (composition of the various modules)
The change of the system composition is obtained with the icon
The configuration window is showed again (Figure 51).
.
Change user parameters
English
The change of user parameters is obtained with the icon
.
The dialog user identification request appears (Figure 55). To accomplish this operation is
not necessary to Log out from Mosaic. Generally it serves when the user must create a
new project (even using a previously created).
Figure 55
8540780 • 10/07/2020 • Rev.38
93
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
OBJECTS - OPERATOR - CONFIGURATION tool bars
Four large tool windows are displayed to the left and right of the main window
(shown in Figure 56):
1
2
4
3
english
Figure 56
1 > OBJECT TOOL WINDOW
This contains the various function blocks that will make up your project; these
blocks are divided into 4 different types:
- Inputs
- Speed Monitoring
- Outputs
- Comments
2 > OPERATOR TOOL WINDOW
This contains the various function blocks for connecting the objects in point 1;
these blocks are divided into 6 different types:
- Logic
- Memories
- Safety Guard Lock
- Counters
- Timers
- Muting
- Miscellaneous
3 > CONFIGURATION TOOL WINDOW
This contains the description of your Mosaic composition.
4 > CONFIGURATION TOOL WINDOW (view)
This contains the graphic representation of your Mosaic composition.
In this window it is possible to navigate through the I/Os of each module by acting with
the right mouse button on the module to be analyzed.
94
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Creating the diagram
Once you have selected your system composition, you are ready to configure the project.
The logic diagram is created using a DRAG&DROP function:
• Select the objects as required from the windows described previously (each single object
is described in detail in the following sections) and drag it into the design area.
• Now when you select the object the PROPERTIES window is enabled, where you must fill
in the fields as required.
• When you need to set a specific numerical value with a slide (eg filter) use the left and
right arrows on your keyboard or click the sides of the slider.
• Connect the objects by moving the mouse over the required pin and then dragging it
onto the pin to be connected.
• If the scheme requires the PAN function (moving working area in the window), select the
object to move and use the arrow keys on your keyboard.
• If the scheme is very complicated and requires a connection between two elements very
far, use the "Interpage" component. The element "Interpage out" must have a name
which, invoked by the corresponding "Interpage in", allows the desired link.
(scheme
side SX)
(scheme
side SX)
• When you need to duplicate an object, select it and press CTRL+C / CTRL+V keys on
your keyboard or click at the right mouse button and select context menu "Copy" and
then "Paste".
• Wires position: it is possible to move the wires for a better graphic visibility of the
scheme. To activate the function, simply place the mouse pointer and left click on the
wire to be moved.
• When you need to delete an object or a link, select it and press DEL key on your keyboard.
• Find function: (press CTRL + F) allows you to make search within the scheme based on
a search parameter. Research does not distinguish between upper and lower case.
8540780 • 10/07/2020 • Rev.38
Find item description
English
Find Operator
95
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
USE OF MOUSE RIGHT BUTTON
ON BLOCK INPUT / OUTPUT







Copy / Paste
Delete
Delete all the assigned pins
Alignment with other functional blocks (multiple selection)
On-line Help
Monitor Mode: Show / Hide Properties window
The block Status: pin input enable / disable logical negation
ON BLOCK OPERATORS






Copy / Paste
Delete
Alignment with other functional blocks (multiple selection)
On-line Help
On input pin: activate / deactivate logical negation
Monitor Mode: Show / Hide Properties window
ON TERMINALS

Alignment with other blocks
ON CONNECTION (WIRES)


Delete
Display full path of the connection (network)
OBJECT
PROPERTIES
WINDOW
english
DESIGN
AREA
Connection
start point
Figure 57
96
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Example of a project
Figure 58 shows an example of a project in which the M1S unit only is connected to two
safety blocks (E-GATE and E-STOP).
The M1S inputs (1,2,3) for connecting the contacts of the safety components are shown on
the left, in yellow. The MOSAIC outputs (from 1 to 2) are activated according to the
conditions defined in E-GATE and E-STOP (see the E-GATE - E-STOP sections).
By clicking on a block to select it, you enable the PROPERTIES WINDOW on the right, which
you can use to configure the block activation and test parameters (see the
E-GATE - E-STOP sections).
Figure 58
At the end of the project design stage (or at intermediate steps) you can save the current
configuration using the icon SAVE
on the standard tool bar.
Project validation
 Now the finished project must be verified. Execute the VALIDATE command (Icon
on the standard toolbar).
 The validation function only verifies the consistency of programming with respect to the
characteristics of the MOSAIC system. It does not guarantee that the device has been
programmed to meet all the safety requirements for the application.
8540780 • 10/07/2020 • Rev.38
97
English
If the validation is successful, a sequential number is assigned to the input and output of
the project. Then, this number is also listed in the REPORT and in the MONITOR of MSD.
Only if the validation is successful we will proceed to send the configuration.
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Resources Allocation
To activate the RESOURCES ALLOCATION function use the icon
.
Executing this command, all the used elements among Inputs, Outputs, Status, Fieldbus
input and Probe are visible, see the example in figure.
english
Figure 59
98
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Project report
on the
English
Print of the System composition with properties of each block. (Icon
standard toolbar).
Figure 60
8540780 • 10/07/2020 • Rev.38
99
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Figure 61
 This definition of PL and of the other related parameters as set forth in ISO 13849-1 only refers
english
to the functions implemented in the Mosaic system by the MSD configuration software,
assuming configuration has been performed correctly.
 The actual PL of the entire application and the relative parameters must consider data for all
the devices connected to the Mosaic system within the scope of the application.
 This must only be performed by the user/installer.
100
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Connect to Mosaic
After connecting M1 or M1S to the PC via CSU cable (USB) use the icon
for the
connection.
A window appears to request the password. Enter the password (see "Password protection").
 With the
 If a remote connection (via internet) is needed M1/M1S can connect to the appropriate
devices through its USB port.
 In this case (ONLY WITH FW > 3.0.1) select "Remote connection".
Select here if the
connection is from a PC
not directly connected to
Mosaic via USB (remote
connection)
Figure 62
Sending the configuration to the MOSAIC
To send the saved configuration from a PC to M1 or M1S use the icon
on the standard
toolbar and wait the execution. M1/M1S will save the project in its internal memory and (if
present) in MCM memory. (Password Required: level 2).
 This function is possible only after project validation with OK result.
Download a configuration file (project) from Mosaic
To download a project from MOSAIC M1 or M1S to MSD use the icon
on the Standard
toolbar.
MSD will display the project residing in M1 or M1S. (Level 1 password is enough).
 If the project must be used on other mosaic system verify the modules effectively
connected (ref. "System composition" on page 102).
 Then perform a "Project Validation" (page 97) and a "Testing the System "
(page 106).
Configuration LOG
 Within the configuration file (project), are included the creation date and CRC
(4-digit hexadecimal identification) of a project that are stored in M1 or M1S.
 If M1S is used, it is also indicated whether the schematic was loaded via MSD or via
MCM memory
 This logbook can record up to 5 consecutive events, after which these are overwritten,
starting from the least recent event.
8540780 • 10/07/2020 • Rev.38
in the standard tool bar.
English
The log file can be visualized using the icon
(Password Required: level 1).
101
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Figure 63
System composition
The check of the actual composition of the MOSAIC system is obtained using the icon
. (Password Required: level 1). A pop-up window will appear with:
- Connected modules;
- Firmware version of each module;
- Node number (physical address) of each module.
Figure 64
If the modules found are not correct the following window will appear;
e.g. MI12T8 node number not correct (displayed in red color text).
Figure 65
Disconnecting System
To disconnect the PC from M1/M1S use the icon
is resetted and it starts with the sent project.
; when the system is disconnected it
 If the system is not composed of all modules provided by the configuration, after the
english
disconnection
(See SIGNALS).
102
M1/M1S
indicates
the
incongruity
and
does
not
starts.
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MONITOR (I/O status in real time - textual)
To activate the MONITOR function use the icon
. (Password Required: level 1).
A pop-up window will appear with (all in real time):
- input s state (when the object has two or more input connections to Mosaic, the
MONITOR will show as active only the first), see the example in figure;
- Input s/Out_test Diagnostics;
- OSSD State;
- OSSD Diagnostics;
- Signaling OUTPUT
;
Figure 66 - textual monitor
MONITOR (I/O status in real time - textual - graphic)
To activate/deactivate the monitor use the icon
. (Password Required: level 1).
The color of links (Figure 33) allows you to view the diagnostics (in real time) with:
RED = OFF
GREEN = ON
DASHED ORANGE = Connection Error
DASHED RED = Pending enable (for example RESTART)
 Placing the mouse pointer over the link, you can display the diagnostics.
PARTICULAR CASES
 NETWORK OPERATOR, signals NETWORK IN, OUT:
8540780 • 10/07/2020 • Rev.38
English
RED CONTINUOUS LINE = STOP
GREEN CONTINUOUS LINE = RUN
ORANGE CONTINUOUS LINE = START
 SERIAL OUTPUT OPERATOR:
BLACK CONTINUOUS LINE = data in transmission
103
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
ged during the monitor. It is possible to display the
parameters of a component by clicking on it with the right mouse button, choosing
"Show/Hide Properties".
Figure 67 - graphical monitor
Password protection
The MSD requests a password in order to upload and save the project.
 The password entered as default must be modified to avoid manipulation (level 2
password) or so that the configuration loaded on Mosaic (level 1 password) is not
visible.
Level 1 password
All operators using the M1/M1S system must have a Level 1 PASSWORD.
This password allows only to view the configuration and error LOGs, composition of the
system and MONITOR in real time and upload operations.
For the first time the password is "" (ENTER key).
Designers who know the level 2 password can enter a new level 1 password
(alphanumerical, max 8 characters).
 Operators who know this password are enabled to upload (from M1/M1S to PC),
english
modify or save the project.
104
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Level 2 password
Designers authorised to work on the creation of the project must know a Level 2
PASSWORD. The first time the system is initialised the operator must use the password
"SAFEPASS" (all capital letters).
Designers who know the level 2 password can enter a new level 2 password
(alphanumerical, max 8 characters).
With the Level 2 password, the designers authorized has availabele all the functions of Level
plus the ability to downoad the project from PC to Mosaic and change the passwords
 This password enables the project to be uploaded (from PC to M1), modified and
saved. In other words, it allows total control of the PC => MOSAIC system.
 When a new project is UPLOADED the level 2 password could be changed.
 Should you forget either of these passwords, please contact ReeR which will provide
an unlock file (when the unlock file is saved in the right directory the icon
will
appear on the toolbar). When the icon is activated, the password level 1 and level 2
are restored to their original values. This password is only given to the designer and
can only be used once.
Password Change
To activate the PASSWORD Change use icon
, after connecting with Level 2 Password.
A window appears (Figure 68) allowing the choice of the new password; insert the old and
new passwords in the appropriate fields (max 8 characters). Click OK.
At the end of the operation disconnect to restart the system.
If MCM is present the new password is also saved in it.
English
Figure 68
8540780 • 10/07/2020 • Rev.38
105
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
TESTING the system
 After validating and uploading the project to the M1/M1S and connecting all the safety devices,
you must test the system to verify its correct operation.
This is done by forcing a change of status for each safety device connected to the MOSAIC to check
that the status of the outputs actually changes.
The following example is helpful for understanding the TEST procedure.
Figure 69
(t1) In the normal operating condition (E-GATE closed) Input1 is closed, Input2 is open and the
output of the E-GATE block is set to high logic level; in this mode the safety outputs
(OSSD1/2) are active and the power supply to the relative terminals is 24VDC.
(t2) When the E-GATE is physically opened, the condition of the inputs and thus of the outputs
of the E-GATE block will change: (OUT= 0VDC--->24VDC); the condition of the
OSSD1-OSSD2 safety outputs will change from 24VDC to 0VDC. If this change is detected
the mobile E-GATE is connected correctly.
 For the correct installation of each external sensor/component refer to their installation
english
manual.
 This test must be performed for each safety component in the project.
106
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
OBJECT FUNCTION BLOCKS
OUTPUT OBJECTS
OSSD (safety outputs)
OSSD safety outputs use semiconductor technology, if
 Each pair of OSSD outputs has a relative
RESTART_FBK input. This input must always be
connected as indicated in the RESTART_FBK
paragraph.
Parameters
Manual Reset: If selected this enables the request to reset each time the input signal falls. Otherwise,
output Follows directly In input Signal level.
There are two types of reset: Manual
and Monitored. In selecting the Manual
option only signal transition from 0 to 1
is verified. If the Monitored option is
selected, the double transition from 0 to
1 and back to 0 is verified.
Enable Status: If selected, enables the
connection of the current OSSD state to
any point on the schematic.
External K time monitoring: If selected, enables the setting of the time window within which the
external feedback signal is to be monitored (according to following output conditions).
OUTPUT
FBK
ERROR
M1/M1S CLEAR LED
1
0
0
0
0
1
1
Flashing
With high level (TRUE) OUTPUT, the FBK signal must be at low level (FALSE) within the set time.
Otherwise, OUTPUT is set to low level (FALSE) and the error is indicated on the master M1 by the
flashing CLEAR LED corresponding to the OSSD in error.
The FBK signal must meet the following conditions:
1) 24 VDC during power on.
2) 24 VDC within 10 s of the TRUE/FALSE transition of the OSSD outputs.
If one of these conditions are not met, the system detects an error that can only be reset by a power
cycle. This is signaled by a flashing of the CLEAR LED corresponding to the affected output.
When the NC contacts of K1/K2 are not connected, connect the FBK input to 24 VDC.
8540780 • 10/07/2020 • Rev.38
107
English
If not selected, the following checks are performed:
1) During power on, the system verifies that the FBK signal is connected to 24 VDC.
2) During normal operation, the system verifies that 24 Vdc are available via the series of NC contacts
of K1/K2.
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Enable Error Out If selected, enables the ERROR OUT output. This output is set to high level (TRUE)
when an external FBK error is detected.
The Error Out signal is reset in case of one of the following events:
1. Switching on and switching off of system.
2. Activation of the RESET M1 operator.
Example of OSSD with correct Feedback
signal:
In this case ERROR OUT=FALSE
Example of OSSD with incorrect Feedback signal
(k external time exceeded):
In this case ERROR OUT=TRUE
OSSD feedback unconnected: If selected, the feedback must not be connected.
If not selected the feedback must be connected directly to 24V or through the series of NC
contacts of K1/K2.
 This parameter is only applicable to modules:
- M1 with firmware version >= 4.1
- MI8O2 with firmware version >=0.11
- MO2,MO4 with firmware version >= 0.7
- MO4LHCS8 firmware version >0.1
SINGLE DOUBLE OSSD (safety output)
SINGLE DOUBLE OSSD
safety
semiconductor technology
output
uses
l
be set at 24 VDC (module power supply). If the
 Each
SINGLE DOUBLE OSSD output
provides a relative RESTART_FBK input.
This input, in the case of M1S, MI8O4 and
MO4L, appears only if the manual reset
or the EDM time control is activated. In
case of MO4LHCS8, it always appears and
must be connected as indicated in the
RESTART_FBK paragraph.
Parameters
english
Output Type: There is a choice of 2 different output type:
 Single Output Type
 Double Output Type
Using M1S, MI8O4, MO4L, MO4LHCS8 modules, the operator can choose between different
configurations:
1. Four SINGLE OUTPUTS function blocks (single output type)
2. Two SINGLE OUTPUTS function blocks (double output type)
3. Two SINGLE OUTPUTS function blocks (single output type) + one SINGLE OUTPUTS function
block (double output type)
108
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
 Using single channels OSSD, to maintain Safety Integrity Level (SIL) "3" requirements the OSSD
outputs must be independent.
 Common cause failures between OSSD outputs must be excluded by observing an appropriate
cable installation (i.e. separate cable paths).
Example of project
2 single output type function blocks + 1 double output type function blocks
Here below you can find the explanation of the M1S, MI8O4, MO4L, MO4LHCS8 SINGLE-OSSD
configurations.
t = 250ms
8540780 • 10/07/2020 • Rev.38
English
Manual Reset: If selected this enables the request to reset each time the input signal falls. Otherwise,
output enabling directly follows In input conditions.
5s > t1 > 250ms
t2 = 250ms
109
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
There are two types of reset: Manual and Monitored. In selecting the Manual option only signal
transition from 0 to 1 is verified. If the Monitored option is selected, the double transition from 0 to
1 and back to 0 is verified.
Enable Status: If selected, enables the connection of the current OSSD state to any point on the
schematic.
External K time monitoring: If selected, enables the setting of the time window within which the
external feedback signal is to be monitored (according to following output conditions).
OUTPUT
1
0
FBK
0
1
ERROR
0
1
M1/M1S CLEAR LED
0
Flashing
With high level (TRUE) OUTPUT, the FBK signal must be at low level (FALSE) within the set time.
Otherwise, OUTPUT is set to low level (FALSE) and the error is indicated on the master M1 by the
flashing CLEAR LED corresponding to the OSSD in error.
Enable Error Out: If selected, enables the ERROR OUT output. This output is set to high level
(TRUE) when an external FBK error is detected.
The Error Out signal is reset in case of one of the following events:
1. Switching on and switching off of system.
2. Activation of the RESET M1 operator.
Example of OSSD with correct Feedback signal:
In this case ERROR OUT=FALSE
Example of OSSD with incorrect Feedback signal
(k external time exceeded):
In this case ERROR OUT=TRUE
OSSD feedback unconnected: If selected, the feedback must not be connected. If not selected the
feedback must be connected directly to 24V or through the series of NC contacts of K1/K2.
 This parameter is only applicable to module MO4LHCS8 firmware version >0.1
No test pulses: if selected disables the
on the OSSD safety outputs (refer to
“IMPORTANT NOTE CONCERNING OSSD
SAFETY OUTPUTS”, page 38).
 Selecting “no test pulse” causes the loss of the
english
safety function of the Single-Double OSSD
(function block grey colored). As a
consequence the SIL will be downgraded.
110
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
STATUS (SIL 1/PL c output)
STATUS output (SIL 1/PL c output) makes it
possible to monitor any point on the diagram
by connecting it to the input.
The output Is set at 24Vdc if the input is 1
(TRUE), or it is set at 0Vdc if the input is 0
(FALSE).
 The STATUS output reaches only the SIL 1/Pl c safety level.
FIELDBUS PROBE
FIELDBUS PROBEs collect the logical status of any point of
the MSD schematic where they are attached.
These information are then transmitted over the fieldbus
and are represented with 4 bytes (M1S) or 2 bytes (M1).
The user could choose the bit position of a particular
probe within the transmitted byte.
It is possible to insert a maximum of 32 probes with M1S
and MBx fw >= 2.0 and 16 with M1 or MBx
fw < 2.0.
(For more detailed information, consult the fieldbus manual on the MSD CD-ROM).
English
 WARNING: the PROBE output is NOT a safety output.
8540780 • 10/07/2020 • Rev.38
111
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
RELAY
The Output RELAY Consists in a N.O. (Normally Open) contact relay. Relay contacts are
closed when the input IN is equal to 1 (TRUE), otherwise they are open (FALSE).
Parameters
Category There is a choice of 3 different
relay output categories:
Category 1. Outputs with single Category 1
relay. Each MOR4/S8 unit may have up to 4 of
these outputs.
Features:
• Internal relays are monitored.
• EDM feedback not used (not requested for
Category 1).
• Each output can be set as AUTO or MANUAL
RESTART.
Example with external relay
Example with the internal relay only
Category 2. Outputs with single Category 2 relay with OTE outputs. Each MOR4/S8 unit can have
up to 4 of these outputs.
Features:
• Internal relays are always monitored.
• Monitored EDM feedback.
• The output can be configured with Manual
or Automatic restart. The EDM feedback
monitor cannot be activated with the
manual restart.
• The feedback is monitored only if
Automatic reset is selected.
• To use the manual reset, a dedicated logic
must be provided. Refer to the following
paragraph.
(Output Test Equipment)
 OTE (Output Test Equipment) with configurations of category 2 is mandatory because it is
english
necessary for the reporting of hazardous failures in accordance with EN 13849-1: 2015.
OTE: The OTE (Output Test Equipment) output is:
 ON in normal operation
 OFF in case of an internal error or a fault associated with feedback from the external
contactors (OFF). This permits to inform the machine logic with the aim of stopping the
dangerous movement or at least signaling the fault to the user.
112
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Use with RESTART: Automatic (A) or Manual (B) (Category 2)
Figure 70
Category 4. Outputs with two Category 4 relays.
Each MOR4/S8 unit can have up to 2 of these outputs.
With this output the relays are controlled in pairs.
Features:
• 2 double channel outputs.
• Double internal relays are monitored.
• Each output can be set as AUTO or MANUAL RESTART.
 In order to not affect the outcome of the calculation of the PL, the inputs (sensors or
safety devices) must be of a category equal to or higher than the other devices in the
chain.
Example of use with external contactors with feedback.
English
Example of use with only the internal relay and
monitored solenoid valves.
8540780 • 10/07/2020 • Rev.38
113
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Manual Reset: When selected, the function requires a reset each time the function block is
activated. When not selected, the enabling of the output of the function directly follows the
input conditions.
 When Manual is selected, the function verifies the reset signal transition from 0 to 1.
 When Monitored is selected, the function verifies the reset signal transition from 0 to
1 to 0.
Enable Status: If selected, enables the connection of the current RELAY state to any point
on the screen.
External K time monitoring: When this is selected it monitors the switching of external
contactors:
 With category 1, monitoring of external contactors cannot be enabled.
 With category 4, monitoring of external contactors is enabled and cannot be disabled.
External K delay (ms): Select the Maximum delay the external contactors are allowed to
introduce. This value can be used to check the maximum delay between switching of the
internal relays and switching of the external contactors (during both activation and
deactivation).
Enable Error Out If selected, enables the ERROR OUT output. This output is set to high
level (TRUE) when an external FBK error is detected.
The Error Out signal is reset in case of one of the following events:
1. Switching on and switching off of system.
2. Activation of the RESET M1 operator.
RELAY
Example of RELAY with incorrect Feedback signal
(k external time exceeded):
In this case ERROR OUT=TRUE
english
Example of RELAY with correct Feedback signal:
In this case ERROR OUT=FALSE
114
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
INPUT OBJECTS
E-STOP (emergency stop)
E-STOP function block verifies an emergency stop
device inputs status. If the emergency stop button has
been pressed the output is 0 (FALSE). If not the output
is 1 (TRUE).
Parameters
Input type:
- Single NC allows connection of one-way
emergency stops
- Double NC allows connection of two-way
emergency stops .
Manual reset: If selected this enables the request to
reset each time the emergency stop is activated.
Otherwise, enabling of the output directly follows the input conditions.
There are two types of reset: Manual and Monitored. When Manual is selected the system
only verifies the signal's transition from 0 to 1. If Monitored is selected the double transition
from 0 to 1 and then back to 0 is verified.
t = 250ms
t1 > 250ms
t2 = 250ms
 WARNING: If the Manual Reset is active, a consecutive Input have to be used. Example:
Output test: This is used to select which test output signals are to be sent to the emergency
stop (mushroom pushbutton). This additional test makes it possible to detect and manage
any short-circuits between the lines. This additional control permits detection and
management of any short-circuits between the lines. To enable this control, the test output
signals must be configured (amongst those available).
Test at start-up: If selected this enables the test at start-up of the external component
(emergency stop). This test is performed by pressing and releasing the pushbutton to run
a complete function test and enable the output. This test is only requested at machine
start-up (when the unit is switched on).
8540780 • 10/07/2020 • Rev.38
115
English
Input 1 and Input 2 are used for the fuctional block, then Input 3 have to be used for
the Reset Input.
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Filter (ms): This is used to filter the signals coming from the emergency stop. The filter can
be configured to between 3 and 250 ms and eliminates any bouncing on the contacts. The
length of the filter affects the calculation of the unit's total response time.
With Simultaneity (only with Double_NC Input type): If selected this activates the test to
verify concurrent switching of the signals coming from the emergency stop.
Simultaneity (only with Double_NC Input type) (ms): This is only active if the previous
parameter is enabled. It defines the maximum time (in ms) between the switching of two
different signals from the emergency stop.
Enable Error Out: If selected reports a fault detected by the function block.
Item description: This allows a description of the component's function to be entered. The
text is displayed in the top part of the symbol.
E-GATE (safety gate device)
E-GATE function block verifies a mobile guard
or safety gate device input status. If the mobile
guard or safety gate is open, the output is 0
(FALSE). Otherwise the output is 1 (TRUE).
Parameters
Input type:
- Double NC Allows connection of components
with two NC contacts
- Double NC/NO Allows connection of
components with one NO contact and one NC.
 With inactive input (block with Output FALSE),
connect:
- Contact NO to terminal
to
- Contact NC to terminal
to IN2.
corresponding
IN1.
corresponding
english
Enable reset: If selected this enables the request to reset each time the mobile guard/safety
gate is activated. Otherwise, enabling of the output directly follows the input conditions.
There are two types of reset: Manual and Monitored. When Manual is selected the system
only verifies the signal's transition from 0 to 1. If Monitored is selected the double transition
from 0 to 1 and then back to 0 is verified.
 WARNING: If the Manual Reset is active, a consecutive Input have to be used.
Example: Input 1 and Input 2 are used for the fuctional block, then Input 3 have to be
used for the Reset Input.
116
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Output test: This is used to select which test output signals are to be sent to the component
contacts. This additional control permits detection and management of any short-circuits
between the lines. To enable this control, the test output signals must be configured
(amongst those available).
Test at start-up: If selected this enables the test at start-up of the external component.
This test is performed by opening the mobile guard or safety gate to run a complete
function test and enable the output. This test is only requested at machine start-up (when
the unit is switched on).
Filter (ms): This is used to filter the signals coming from the external contacts. The filter
can be configured to between 3 and 250 ms and eliminates any bouncing on the contacts.
The length of the filter affects the calculation of the unit's total response time.
With Simultaneity: If selected this activates the test to verify concurrent switching of the
signals coming from the external contacts.
Simultaneity (ms): This is only active if the previous parameter is enabled. It defines the
maximum time (in ms) between the switching of two different signals from the external
contacts.
Enable Error Out: If selected reports a fault detected by the function block.
Item description: This allows a description of the component's function to be entered. The
text is displayed in the top part of the symbol.
SINGLE E-GATE (safety gate device)
SINGLE E-GATE function block verifies a mobile
guard or safety gate device input status. If the
mobile guard or safety gate is open, the output
is 0 (FALSE). Otherwise the output is 1 (TRUE).
Parameters
Enable reset: If selected this enables the
request to reset each time the mobile
guard/safety gate is activated. Otherwise,
enabling of the output directly follows the input
conditions.
There are two types of reset: Manual and
Monitored. When Manual is selected the system
only verifies the signal's transition from 0 to 1. If Monitored is selected the double transition
from 0 to 1 and then back to 0 is verified.
t1 > 250ms
t2 = 250ms
 WARNING: If the Manual Reset is active, a consecutive Input have to be used. Example
: Input 1 and Input 2 are used for the fuctional block, then Input 3 have to be used for
the Reset Input.
Output test: This is used to select which test output signals are to be sent to the component
contacts. This additional control permits detection and management of any short-circuits
8540780 • 10/07/2020 • Rev.38
117
English
t = 250ms
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
between the lines. To enable this control, the test output signals must be configured
(amongst those available).
Test at start-up: If selected this enables the test at start-up of the external component.
This test is performed by opening the mobile guard or safety gate to run a complete
function test and enable the output. This test is only requested at machine start-up (when
the unit is switched on).
Filter (ms): This is used to filter the signals coming from the external contacts. The filter
can be configured to between 3 and 250 ms and eliminates any bouncing on the contacts.
The length of the filter affects the calculation of the unit's total response time.
Enable Error Out: If selected reports a fault detected by the function block.
Item description: This allows a description of the component's function to be entered. The
text is displayed in the top part of the symbol.
LOCK FEEDBACK
The function block LOCK FEEDBACK verifies the
lock status of the guard lock device for mobile
guard or safety gate. In the case where the
inputs indicate that the guard is locked the
Output will be 1 (TRUE). Otherwise the output
is 0 (FALSE).
Parameters
Input type
- Single NC Allows connection of
components with one NC contact;
- Double NC Allows connection of
components with two NC contacts.
- Double NC/NO Allows connection of
components with one NO contact and one NC.
 With inactive input (guard unlocked), connect:
english
- Contact NO to terminal corresponding to IN1
- Contact NC to terminal corresponding to IN2.
Output test: This is used to select which test output signals are to be sent to the component
contacts. This additional control permits detection and management of any short-circuits
between the lines. To enable this control, the test output signals must be configured
(amongst those available).
Filter (ms): This is used to filter the signals coming from the external contacts. The filter
can be configured to between 3 and 250 ms and eliminates any bouncing on the contacts.
The length of the filter affects the calculation of the unit's total response time.
With Simultaneity (only with Double_NC or Double NC/NO Input type): If selected this
activates the test to verify concurrent switching of the signals coming from the external
contacts.
Simultaneity (ms) (only with Double_NC or Double NC/NO Input type): This is only active if
the previous parameter is enabled. It defines the maximum time (in ms) between the
switching of two different signals from the external contacts.
Enable Error Out: If selected reports a fault detected by the function block.
Item description: This allows a description of the component's function to be entered. The
text is displayed in the top part of the symbol.
118
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
ENABLE (enable key)
ENABLE function block verifies a manual key
device Input status. If the key is not turned the
output is 0 (FALSE). Otherwise the output is 1
(TRUE).
Parameters
Input type
- Single NO Allows connection of
components with one NO contact;
- Double NO Allows connection of
components with two NO contacts.
Enable reset: If selected this enables the request
to reset each time the command is activated.
Otherwise, enabling of the output directly
follows the input conditions.
There are two types of reset: Manual and
Monitored. When Manual is selected the system
only verifies the signal's transition from 0 to 1.
If Monitored is selected the double transition from 0 to 1 and then back to 0 is verified.
 WARNING: If the Manual Reset is active, a consecutive Input have to be used.
Example : Input 1 and Input 2 are used for the fuctional block, then Input 3 have to be
used for the Reset Input.
t1 > 250ms
t2 = 250ms
Output test: This is used to select which test output signals are to be sent to the component
contacts. This additional control permits detection and management of any short-circuits
between the lines. To enable this control, the test output signals must be configured
(amongst those available).
Test at start-up: If selected this enables the test at start-up of the external component.
This test is performed by opening and activating the enable key to run a complete function
test and enable the output. This test is only requested at machine start-up (when the unit
is switched on).
8540780 • 10/07/2020 • Rev.38
119
English
t = 250ms
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Filter (ms): This is used to filter the signals coming from the external contacts. The filter
can be configured to between 3 and 250 ms and eliminates any bouncing on the contacts.
The length of the filter affects the calculation of the unit's total response time.
With Simultaneity (only with Double NO Input type): If selected this activates the test to
verify concurrent switching of the signals coming from the external contacts.
Simultaneity (ms) (only with Double NO Input type): This is only active if the previous
parameter is enabled. It defines the maximum time (in ms) between the switching of two
different signals from the external contacts.
Enable Error Out: If selected reports a fault detected by the function block.
Item description: This allows a description of the component's function to be entered. The
text is displayed in the top part of the symbol.
ESPE (optoelectronic safety light curtain / laser scanner)
ESPE function block verifies an optoelectronic
safety light curtain (or laser scanner) inputs
state. If the area protected by the light curtain is
occupied, (light curtain outputs FALSE) the
output is 0 (FALSE). Otherwise, with the area
clear and outputs to 1 (TRUE) the output is 1
(TRUE).
Parameters
Enable reset: If selected this enables the request
to reset each time the area protected by the
safety light curtain is occupied. Otherwise,
enabling of the output directly follows the input
conditions.
There are two types of reset: Manual and Monitored. When Manual is selected the system
only verifies the signal's transition from 0 to 1. If Monitored is selected the double transition
from 0 to 1 and then back to 0 is verified.
t = 250ms
t1 > 250ms
t2 = 250ms
 WARNING: If the Manual Reset is active, a consecutive Input have to be used. Example:
english
Input 1 and Input 2 are used for the functional block, then Input 3 have to be used for
the Reset Input.
OUT TEST signals cannot be used in case of safety static output ESPE because the control
is carried out from the ESPE.
Test at start-up: If selected this enables the test at start-up of the safety light curtain. This
test is performed by occupying and clearing the area protected by the safety light curtain
to run a complete function test and enable the output. This test is only requested at
machine start-up (when the unit is switched on).
120
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Filter (ms): This is used to filter the signals coming from the safety light curtain. The filter
can be configured to between 3 and 250 ms and eliminates any bouncing on the contacts.
The length of the filter affects the calculation of the unit's total response time.
Simultaneity (ms): always active. Determines the maximum permissible time (ms) between
switching of the various signals from the external contacts of the device.
Enable Error Out: If selected reports a fault detected by the function block.
Item description: This allows a description of the component's function to be entered. The
text is displayed in the top part of the symbol.
FOOTSWITCH (safety pedal)
The FOOTSWITCH function block verifies the
status of the inputs of a safety pedal device. If
the pedal is not pressed the output is 0 (FALSE).
Otherwise the output is 1 (TRUE).
Parameters
Input type:
- Single NC Allows connection of pedals
with one NC contact
- Single NO Allows connection of pedals
with one NO contact.
- Double NC Allows connection of pedals
with two NC contacts
- Double NC/NO Allows connection of
pedals with one NO contact and one NC.
Double NC/NO correct connection
Contact NC to terminal corresponding to IN1
Contact NO to terminal corresponding to IN2
English


8540780 • 10/07/2020 • Rev.38
121
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Manual reset: If selected this enables the request to reset each time the safety pedal is
activated. Otherwise, enabling of the output directly follows the input conditions.
There are two types of reset: Manual and Monitored. When Manual is selected the system
only verifies the signal's transition from 0 to 1. If Monitored is selected the double transition
from 0 to 1 and then back to 0 is verified.
t = 250ms
t1 > 250ms
t2 = 250ms
 WARNING: If the Manual Reset is active, a consecutive Input have to be used. Example:
Input 1 and Input 2 are used for the functional block, then Input 3 have to be used for
the Reset Input.
Output test: This is used to select which test output signals are to be sent to the component
contacts. This additional control permits detection and management of any short-circuits
between the lines. To enable this control, the test output signals must be configured
(amongst those available).
Test at start-up: If selected this enables the test at start-up of the external component.
This test is performed by pressing and releasing the footswitch to run a complete function
test and enable the output. This test is only requested at machine start-up (when the unit
is switched on).
Filter (ms): This is used to filter the signals coming from the external contacts. The filter
can be configured to between 3 and 250 ms and eliminates any bouncing on the contacts.
The length of the filter affects the calculation of the unit's total response time.
With Simultaneity (only with Double NC or Double NC-NO Input type): If selected this
activates the test to verify concurrent switching of the signals coming from the external
contacts.
Simultaneity (ms): This is only active if the previous parameter is enabled. It defines the
maximum time (in ms) between the switching of two different signals from the external
contacts.
Enable Error Out: If selected reports a fault detected by the function block.
english
Item description: This allows a description of the component's function to be entered. The
text is displayed in the top part of the symbol.
122
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MOD-SEL (safety selector)
The MOD-SEL function block verifies the status of
the inputs from a mode selector (up to 4 inputs):
If only one input is 1 (TRUE) the corresponding
output is also 1 (TRUE). In all other cases, and thus
when all inputs are 0 (FALSE) or more than one
input is 1 (TRUE) all the outputs are 0 (FALSE).
Parameters
Input type:
- Double selector Allows connection of twoway mode selectors.
- Triple selector Allows connection of threeway mode selectors.
- Quadruple selector - Allows connection of four-way mode selectors.
Filter (ms): This is used to filter the signals coming from the mode selector. The filter can
be configured to between 3 and 250 ms and eliminates any bouncing on the contacts. The
length of the filter affects the calculation of the unit's total response time.
Simultaneity (ms): always active. Determines the maximum permissible time (ms) between
switching of the various signals from the external contacts of the device.
Enable Error Out: If selected reports a fault detected by the function block.
English
Item description: This allows a description of the component's function to be entered. The
text is displayed in the top part of the symbol.
8540780 • 10/07/2020 • Rev.38
123
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
PHOTOCELL (safety photocell)
The PHOTOCELL function block verifies the status
of the inputs of an optoelectronic safety
photocell. If the beam of the photocell is
occupied (photocell output FALSE) the output is 0
(FALSE). Otherwise with the beam clear and an
output of 1 (TRUE) the output is 1 (TRUE).
Parameters
Manual reset: If selected this enables the request
to reset each time safety photocell is activated.
Otherwise, enabling of the output directly follows
the input conditions.
There are two types of reset: Manual and
Monitored. When Manual is selected the system
only verifies the signal's transition from 0 to 1. If
Monitored is selected the double transition from 0 to 1 and then back to 0 is verified.
 An output test signal is mandatory and can be selected from the 4 possible Test Output
1 ÷ 4.
 If the Manual Reset is active, a consecutive Input have to be used. Example: Input 1 is
used for the functional block, then Input 2 have to be used for the Reset Input.
 The response time of the photocell must be >2ms and <20ms.
Output test: This is used to select which test output are to be sent to the photocell test
input. This additional control permits detection and management of any short-circuits
between the lines. To enable this control, the test output signals must be configured
(amongst those available).
Test at start-up: If selected this enables the test at start-up of the external component.
This test is performed by occupying and clearing the photocell to run a complete function
test and enable the output. This test is only requested at machine start-up (when the unit
is switched on).
english
Filter (ms): This is used to filter the signals coming from the external contacts. The filter
can be configured to between 3 and 250 ms and eliminates any bouncing on the contacts.
The length of the filter affects the calculation of the unit's total response time.
Enable Error Out: If selected reports a fault detected by the function block.
Item description: This allows a description of the component's function to be entered. The
text is displayed in the top part of the symbol.
124
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
TWO-HAND (bimanual control)
The TWO HAND function block verifies the status of the
inputs of a two hand control switch. Only if both the
press-buttons are pressed within 500 ms the output is 1
(TRUE). Otherwise the output is 0 (FALSE).
Input type:
- Double NO Allows connection of two-hand switch
with one NO contact for each button (EN 574 III A).
- Quadruple NC-NO - Allows connection of two-hand
switch with a double NO/NC contact for each button
(EN 574 III C).
Quadruple NC/NO correct connection
 Contacts NO to terminal corresponding to IN1, IN3
 Contacts NC to terminal corresponding to IN2, IN4
Parameters
Output test: This is used to select which test output signals are to be sent to the component
contacts. This additional control permits detection and management of any short-circuits
between the lines. To enable this control, the test output signals must be configured
(amongst those available).
Test at start-up: If selected this enables the test at start-up of the external component.
This test is performed by pressing the two buttons (within 500 ms) and releasing them to
run a complete function test and enable the output. This test is only requested at machine
start-up (when the unit is switched on).
Filter (ms): This is used to filter the signals coming from the mode selector. The filter can
be configured to between 3 and 250 ms and eliminates any bouncing on the contacts. The
length of the filter affects the calculation of the unit's total response time.
Enable Error Out: If selected reports a fault detected by the function block.
Item description: This allows a description of the component's function to be entered. The
text is displayed in the top part of the symbol.
NETWORK_IN
This functional block implements a Network
connection input interface; it generates an LL1 in
the OUT output when the line is high, otherwise
an LL0.
Parameters
Type of input:
- Single - enables the connection of Signalling
outputs of an external M1/M1S unit.
- Double - enables the connection of OSSD outputs of an external M1/M1S unit.
 This input can only be allocated on M1
 This input must be used when Mosaic OSSD outputs are connected to the inputs of a
second downstream Mosaic or together with the NETWORK operator.
8540780 • 10/07/2020 • Rev.38
125
English
Filter (ms): Enables the filtering of signals from an external M1/M1S unit.
This filter can be set to between 3 and 250ms. The length of the filter affects the calculation
of the unit's total response time.
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
SENSOR
The SENSOR function block verifies the status of the
input of a sensor (not a safety sensor). If the beam of
the sensor is occupied (sensor output FALSE) the
output is 0. Otherwise, with the beam clear and an
output of 1 (TRUE) then the output is 1.
Parameters
Manual reset: If selected this enables the request to
reset each time the area protected by the sensor is
occupied. Otherwise, enabling of the output directly
follows the input conditions.
There are two types of reset: Manual and Monitored.
When Manual is selected the system only verifies the
signal's transition from 0 to 1. If Monitored is selected the double transition from 0 to 1
and then back to 0 is verified.
t = 250ms
t1 > 250ms
t2 = 250ms
 WARNING: If the Manual Reset is active, a consecutive Input have to be used. Example:
Input 1 is used for the functional block, then Input 2 have to be used for the Reset
Input.
Output test: This is used to select which test output signals are to be sent to the sensor.
This additional control permits detection and management of any short-circuits between
the lines. To enable this control, the test output signals must be configured (amongst those
available).
Test at start-up: If selected this enables the test at start-up of the sensor. This test is
performed by occupying and clearing the area protected by the sensor to run a complete
function test and enable the output. This test is only requested at machine start-up (when
the unit is switched on).
Filter (ms): This is used to filter the signals coming from the sensor. The filter can be
configured to between 3 and 250 ms and eliminates any bouncing on the contacts. The
length of the filter affects the calculation of the unit's total response time.
Enable Error Out: If selected reports a fault detected by the function block.
english
Item description: This allows a description of the component's function to be entered. The
text is displayed in the top part of the symbol.
126
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
S-MAT (safety mat)
The S-MAT function block verifies the status of
the inputs of a safety mat. If a person stands
on the mat the output is 0 (FALSE). Otherwise,
with the mat clear, the output is 1 (TRUE).
Parameters
Manual reset: If selected this enables the
request to reset each time the mobile
guard/safety gate is activated. Otherwise,
enabling of the output directly follows the
input conditions.
There are two types of reset: Manual and
Monitored. When Manual is selected the
system only verifies the signal's transition from
0 to 1. If Monitored is selected the double
transition from 0 to 1 and then back to 0 is verified.
t = 250ms
t1 > 250ms
t2 = 250ms
 If the Manual Reset is active, a consecutive Input have to be used. Example: Input 1
and Input 2 are used for the functional block, then Input 3 have to be used for the
Reset Input.
 Two output test signals are mandatory. Each output OUT TEST can be connected to
only one input S-MAT (it is not allowed parallel connection of 2 inputs).
 The function block S-MAT cannot be used with 2-wire components and termination
resistance.
Output test: This is used to select which test output signals are to be sent to the s-mat
contact. This additional control permits detection and management of any short-circuits
between the lines. To enable this control, the test output signals must be configured
(amongst those available). Test signals are mandatory.
Test at start-up: If selected this enables the test at start-up of the external component.
This test is performed by pressing and releasing the safety mat to run a complete function
test and enable the output. This test is only requested at machine start-up (when the unit
is switched on).
Enable Error Out: If selected reports a fault detected by the function block.
Item description: This allows a description of the component's function to be entered. The
text is displayed in the top part of the symbol.
8540780 • 10/07/2020 • Rev.38
127
English
Filter (ms): This is used to filter the signals coming from the external contacts. The filter
can be configured to between 3 and 250 ms and eliminates any bouncing on the contacts.
The length of the filter affects the calculation of the unit's total response time.
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
SWITCH
SWITCH function block verifies the input status of a
pushbutton or switch (NOT SAFETY SWITCHES). If the
pushbutton is pressed the output is 1 (TRUE).
Otherwise, the output is 0 (FALSE).
Parameters
Manual reset: If selected this enables the request to
reset each time the device is activated. Otherwise,
enabling of the output directly follows the input
conditions.
There are two types of reset: Manual and Monitored.
When Manual is selected the system only verifies the
signal's transition from 0 to 1.
If Monitored is selected the double transition from 0
to 1 and then back to 0 is verified.
t = 250ms
t1 > 250ms
t2 = 250ms
 WARNING: If the Manual Reset is active, a consecutive Input have to be used. Example:
Input 1 is used for the functional block, then Input 2 have to be used for the Reset
Input.
Output test: This is used to select which test output signals are to be sent to the switch.
This additional control permits detection and management of any short-circuits between
the lines. To enable this control, the test output signals must be configured (amongst those
available).
Test at start-up: If selected this enables the test at start-up of the switch. This test is
performed by opening and closing the switch contact to run a complete function test and
enable the output. This test is only requested at machine start-up (when the unit is
switched on).
Filter (ms): This is used to filter the signals coming from the switch. The filter can be
configured to between 3 and 250ms and eliminates any bouncing on the contacts. The
length of the filter affects the calculation of the unit's total response time.
Enable Error Out: If selected reports a fault detected by the function block.
english
Item description: This allows a description of the component's function to be entered. The
text is displayed in the top part of the symbol.
128
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
ENABLING GRIP SWITCH
The ENABLING GRIP functional block checks the status of
the Inx inputs of an enabling grip. If this is not gripped
(position 1) or is gripped completely (position 3), the
OUTPUT will be 0 (FALSE). If it is gripped to middle position
(position 2), the OUTPUT will be 1 (TRUE).
Refer to truth tables at the bottom of the page.
 The
ENABLING GRIP functional block requires
that the assigned module has a minimum Firmware
version as Table below:
M1
1.0
MI8O2
0.4
MI8
0.4
MI16
0.4
MI12T8
0.0
Parameters
Type of inputs:
- Double NO Permits connection of an enabling grip
with 2 NO contacts.
- Double NO+1NC Permits connection of an
enabling grip switch with 2 NO contacts + 1 NC contact.
Test outputs: Permits selection of the test output signals to be sent to the enabling grip.
This additional control permits detection and management of any short-circuits between
the lines. To enable this control, the test output signals must be configured (amongst those
available).
Power-on test: If selected, enables the power-on test of the external component
(Enabling Grip). To run the test, the device must be gripped and released to carry out a
complete functional check and enable the Output terminal. This control is required only at
machine start-up (power-on of the module).
Simultaneity (ms): always active. Determines the maximum permissible time (ms) between
switching of the various signals from the external contacts of the device.
Filter (ms): Permits filtering of signals from the device control. This filter can be set to
between 3 and 250ms and eliminates any rebounds on the contacts. The duration of the
filter affects calculation of module total response time.
Table mode 1 (device 2NO + 1NC)
POSITION 1: enabling grip fully released
POSITION 2: enabling grip pressed to middle position
POSITION 3: enabling grip fully pressed
1
0
0
1
0
Position
2
1
1
1
1
3
0
0
0
0
English
Input
IN1
IN2
IN3
OUT
8540780 • 10/07/2020 • Rev.38
129
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Table mode 1 (device 2NO + 1NC)
POSITION 1: enabling grip fully released
POSITION 2: enabling grip pressed to middle position
POSITION 3: enabling grip fully pressed
Input
IN1
IN2
IN3
OUT
1
0
0
1
0
Position
Input
1
1
0
1
1
0
0
0
0
Enable Error Out: If selected reports a fault detected by the function block.
Item description: Permits insertion of a descriptive text of the function of the component.
This text will be displayed in the top part of the symbol.
TESTABLE SAFETY DEVICE
The TESTABLE SAFETY DEVICE functional block checks
the status of the Inx inputs of a single or double safety
sensor, both NO and NC. Refer to the tables below to
check type of sensor and behaviour.
(single NC)
IN1
0
1
OUT
0
1
(single NO)
IN1
0
1
OUT
0
1
(double NC)
IN1
0
0
1
1
IN2
0
1
0
1
OUT
0
0
0
1
Simultaneity error *
X
X
-
(double NC-NO)
IN1
0
0
1
1
IN2
0
1
0
1
OUT
0
0
1
0
Simultaneity error *
X
X
* Simultaneity error = the maximum time between switching of the
single contacts has been exceeded.
english
Parameters
Manual Reset: If selected, enables the reset request after each activation of the device.
Otherwise, enabling of the output follows directly the conditions of the inputs. Reset may
be of two types: Manual and Monitored. Selecting the Manual option, only transition of the
signal from 0 to 1 is checked. If Monitored is selected, double transition from 0 to 1 and
return to 0 is checked.
130
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
t = 250ms
t1 > 250ms
t2 = 250ms
 WARNING: if Reset is enabled, the input consecutive to those used by the functional
block must be used. For example: If inputs 1 and 2 are used for the functional block,
input 3 must be used for Reset.
Power-on test: If selected, enables the power-on test of the device. This test requires
activation and de-activation of the device in order to run a complete functional check and
enable the Output terminal. This test is required only at machine start-up (power-on of the
module).
Filter (ms): Permits filtering of signals from the device. This filter can be set to between 3
and 250 ms and eliminates any rebounds on the contacts. The duration of the filter affects
calculation of module total response time.
With simultaneity: If selected, activates control of simultaneity between switching of signals
from the device.
Simultaneity (ms): Is active only if the previous parameter is enabled. Determines the
maximum permissible time (ms) between switching of two different signals from the
sensor.
Enable Error Out: If selected reports a fault detected by the function block.
Item description: Permits insertion of a descriptive text of the function of the component.
This text will be displayed in the top part of the symbol.
SOLID STATE DEVICE
The SOLID STATE DEVICE functional block checks the
status of the Inx inputs. If the inputs are at 24VDC,
the Output will be 1 (TRUE), otherwise the OUTPUT
will be 0 (FALSE).
Parameters
8540780 • 10/07/2020 • Rev.38
English
Manual Reset: If selected, enables the reset request
after each safety function activaction. Otherwise,
enabling of the output follows directly the
conditions of the inputs. Reset may be of two types:
Manual and Monitored. Selecting the Manual option,
only transition of the signal from 0 to 1 is checked.
If Monitored is selected, double transition from 0 to 1 and return to 0 is checked.
131
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
t = 250ms
t1 > 250ms
t2 = 250ms
 WARNING: if Reset is enabled, the input consecutive to those used by the functional block must
be used. For example: if inputs 1 and 2 are used for the functional block, input 3 must be used
for Reset.
Power-on test: If selected, enables the power-on test of the safety device. This test requires
activation and de-activation of the device in order to run a complete functional check and
enable the Output terminal. This test is required only at machine start-up (power-on of the
module)
Filter (ms): Permits filtering of signals from the safety device. This filter can be set to
between 3 and 250 ms and eliminates any rebounds on the contacts. The duration of the
filter affects calculation of module total response time.
Simultaneity (ms): always active. Determines the maximum permissible time (ms) between
switching of the various signals from the external contacts of the device.
Enable Error Out: If selected reports a fault detected by the function block.
Item description: Permits insertion of a descriptive text of the function of the component.
This text will be displayed in the top part of the symbol.
FIELDBUS INPUT
Element that permits insertion of a non-safety input
whose status is modified via the fieldbus.
It is possible to insert a maximum of 32 virtual
inputs with M1S and MBx fw >= 2.0 and 8 with M1
or MBx fw < 2.0.
The bit on which status is to be modified must be
selected for each.
On the fieldbus the states are represented with 4
bytes with M1S and 1 byte with M1.
(For more detailed information, consult the fieldbus
manual on the MSD CD-ROM).
English
 WARNING: the FIELDBUS INPUT is NOT a safety input.
132
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
LL0-LL1
input.
LL0 -> logical level 0
LL1 -> logical level 1
 IMPORTANT: LL0 and LL1 cannot be used to disable the logical ports in the diagram.
COMMENTS
This item allows a description to be entered and placed in
any point of the diagram.
Parameters
Comment: If selected, it can be filled with the desired comment.
Color: select the color of the comment text.
Height: select the dimension of the comment text.
TITLE
English
Automatically adds the name of the manufacturer,
the designer, the project name and the CRC.
8540780 • 10/07/2020 • Rev.38
133
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
SPEED CONTROL TYPE FUNCTION BLOCKS
Warning concerning safety
 An external error or malfunction deriving from encoder/proximity or its wiring, does not
necessarily involve a change of safety status of the normal output (i.e. “Zero”) of the function
block. Failures or malfunctions of encoder/proximity switch or its wiring are then recognized
by the module, managed and specified via the diagnostic bit on every function block (“Enable
Error Out”).
 To ensure the safety features the diagnostic bit has to be used in the configuration program
created by the user to cause a possible deactivation of the outputs if the axis is working. In
absence of encoder/proximity external anomalies, Error bit will be equal to 0 (zero).
 In presence of encoder/proximity external anomalies, error_out bit will be equal
to 1 (one):
- Absence of encoder or proximity.
- Absence of one or more wiring from encoder/proximity.
- Absence of encoder power supply (only model with TTL external power supply).
- Error of congruence frequencies between signals from encoder/proximity.
- Phase error between signals from the encoder or duty cycle error of a single phase.
Figure 71 – Example of speed control functional block with Error Out enabled
Note concerning Speed Control Functional Blocks
Starting from the MSD 1.8.0 Software Version
the Speed Control Functional Blocks provide a
graphical visualization of the configured
thresholds.
English
In the figure on the right it is represented an
example of a 3 thresholds graphical diagram.
The solid line represents the threshold value
while the dotted line represents how much
hysteresis is applied to the threshold value.
134
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
SPEED CONTROL
The Speed Control function block monitors the speed of a
device generating an output 0 (FALSE) when the measured
speed exceeds a predetermined threshold.
When the speed is below the predetermined threshold the
output will be 1 (TRUE).
Parameters
Axis type: It defines the type of axis controlled by the
device. It will be Linear in the case of a translation and will
be rotational in the case of motion around an axis.
Sensor Type: When the previous parameter is Linear, the
Sensor Type defines the type of sensor connected to the
module inputs. It can be rotational (e.g. shaft encoder) or
Linear (e.g. optical array). These choices allows to set other
parameters explained later.
Measuring device: It defines the type of sensor(s) used.
The possible choices are:
- Encoder
- Proximity
- Encoder+Proximity
- Proximity1+ Proximity2
- Encoder1+ Encoder2
Sin/Cos: Disable Analog check: When a Sin/Cos Module
is used, it is possible to disable the analog verification sin2θ
+ cos2θ, carrying out a simplified plausibility check of the
Encoder signals.
 Please note that when the analog check is disabled the
diagnostic coverage decreases.
Enable direction: (Available only when at least one Encoder
input is present): when checked, the DIR output is enabled
on the function block. This output will be 1 (TRUE) when
the axis rotates Counterclockwise and will be 0 (FALSE)
when the axis rotates Clockwise.
Threshold number: It allows you to enter the number of
thresholds for the maximum value of speed. Changing this
value will increase/decrease the number of thresholds that
can be entered from a minimum of 1 to a maximum of 8
with M1 fw >= 4.0, M1S fw >=5.1 and MVx fw >= 2.0 and
4 with M1 fw <4.0 or or M1S< 5.1 or MVx fw < 2.0. In the
case of thresholds greater than 1, the input pins for the
selection of the specific threshold will appear in the lower
part of the function block. Let the user to choose which
threshold has to be enabled.
8540780 • 10/07/2020 • Rev.38
Example of CLOCKWISE axis rotation
2 threshold settings
In1
0
1
Threshold no.
Speed 1
Speed 2
Up to 4 threshold settings
In2
0
0
1
1
In1
0
1
0
1
Threshold no.
Speed 1
Speed 2
Speed 3
Speed 4
English
Direction decision: It defines the direction of rotation for
which the set thresholds are made active. The possible
choices are:
- Bidirectional
- Clockwise
- Counterclockwise
If Bidirectional is selected, the excess of the set threshold
is detected whether the axis rotates clockwise or
counterclockwise.
Selecting
Clockwise
or
Counterclockwise, this is detected only when the axis
rotates in the selected direction.
135
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Up to 8 threshold settings
In3
0
0
0
0
1
1
1
1
In2
0
0
1
1
0
0
1
1
In1
0
1
0
1
0
1
0
1
Threshold no.
Speed 1
Speed 2
Speed 3
Speed 4
Speed 5
Speed 6
Speed 7
Speed 8
Pitch: If the Axis Type chosen was linear and rotational, this field allows you to enter the sensor pitch
to obtain a conversion between sensor revolutions and distance travelled.
Proximity choice: It allows you to choose the type of proximity
sensor from PNP, NPN, Normally Open (NA) and Normally
Closed (NC), with 3 or 4 wires.
(In order to ensure a Performance Level = PLe use a proximity
switch type PNP NO: ref. “Interleaved proximity -> page 36).
Measurement: Enter in this field the number of pulses/revolution (in the case of rotational sensor)
or µm/pulse (linear sensor) relating to the sensor used
Verification: Enter in this field the number of pulses/revolution (in the case of rotational sensor) or
µm/pulse (linear sensor) relating to the second sensor used.
Gear Ratio: This parameter is active if there are two sensors on the selected axis. This parameter
allows you to enter the ratio between the two sensors. If both sensors are on the same moving parts,
the ratio will be 1 otherwise the number corresponding to the report must be entered. E.g. there are
an encoder and a proximity switch, and the latter is on a moving part that (due to a gear reduction
ratio) rotates at twice the speed of the encoder. Therefore, this value must be set at 2.
Hysteresis (%): It represents the percentage hysteresis (the percentage is calculated from the
threshold value) below which the speed change is filtered.
English
Speed 1
Enter in this field the maximum speed value above which the function block output
(OVER) will be 0 (FALSE). If the measured speed is less than the set value, the function block output
(OVER) will be 1 (TRUE). If M1 fw >= 4.0, M1S fw >= 5.1 and MVx fw >= 2.0 it possible to enter
the speed value with the decimal point.
136
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Frequency: It shows the frequencies values calculated starting
from the speed thresholds fM and fm (fm is the fM threshold
frequency decreased by the hysteresis set). If the displayed
value is GREEN, the calculation of frequency gave a positive
result.
If the displayed value is RED, it is necessary to change the
parameters given in the following formulas.
1. rotational axis, rotational sensor. The frequency obtained is:
f [Hz] 
rpm[rev/min]
 Re solution[pulses/rev]
60
Proximity choice:
KEY:
f = frequency
Rpm = rotational speed
Resolution = measurement
Speed = linear speed
Pitch = sensor pitch
2. Linear axis, rotational sensor. The frequency obtained is:
f [Hz] 
speed[m/min] * 1000
 Re solution[pulses/rev]
60 * pitch[mm/rev]
3. Linear axis, linear sensor. The frequency obtained is:
f [Hz] 
speed[mm/s] * 1000
Re solution[µm/pulse]
English
4. Hysteresis. To be changed only if: fM=green; fm=red
8540780 • 10/07/2020 • Rev.38
137
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
WINDOW SPEED CONTROL
The Window Speed Control function block monitors the
speed of a device, causing a transition from 0 (FALSE) to 1
(TRUE) of the WINDOWS output when the speed is within a
prefixed range.
Parameters
Axis type: It defines the type of axis controlled by the
device. It will be Linear in the case of a translation and will
be rotational in the case of motion around an axis.
Sensor Type: When the previous parameter is Linear, the
Sensor Type defines the type of sensor connected to the
module inputs. It can be rotational (e.g. shaft encoder) or
Linear (e.g. optical array). These choices allows to set other
parameters explained later.
Measuring device: It defines the type of sensor(s) used.
The possible choices are:
- Encoder
- Proximity
- Encoder+Proximity
- Proximity1+ Proximity2
- Encoder1+ Encoder2
Sin/Cos: Disable Analog check: only when a Sin/Cos
Expansion Module is used, it is possible to disable the
analog verification sin2θ + cos2θ, carrying out a simplified
plausibility check of the Encoder signals.
 Please note that when the analog check is disabled the
diagnostic coverage decreases.
Enable direction: (Available only when at least one
Encoder input is present): when checked the DIR output is
enabled on the function block. This output will be 1 (TRUE)
when the axis rotates Counterclockwise and will be 0
(FALSE) when the axis rotates Clockwise
Pitch: If the Axis Type chosen was linear and rotational,
this field allows you to enter the sensor pitch to obtain a
conversion between sensor revolutions and distance
travelled.
Proximity choice: It allows you to choose the type of
proximity sensor from PNP, NPN, Normally Open (NA) and
Normally Closed (NC), with 3 or 4 wires.
(In order to ensure a Performance Level = PLe use a
proximity switch type PNP NO: ref. “Interleaved proximity
-> page 36).
Proximity choice
English
Measurement: Enter in this field the number of
pulses/revolution (in the case of rotational sensor) or
µm/pulse (linear sensor) relating to the sensor used.
Verification: Enter in this field the number of
pulses/revolution (in the case of rotational sensor) or
µm/pulse (linear sensor) relating to the second sensor
used.
138
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Gear Ratio: This parameter is active if there are two sensors on the selected axis. This parameter
allows you to enter the ratio between the two sensors. If both sensors are on the same moving
parts, the ratio will be 1 otherwise the number corresponding to the report must be entered. E.g.
there are an encoder and a proximity switch, and the latter is on a moving part that (due to a gear
reduction ratio) rotates at twice the speed of the encoder. Therefore, this value must be set at 2.
Hysteresis (%): It represents the percentage hysteresis (the percentage is calculated from the
threshold value) below which the speed change is filtered.
High speed:
Enter in this field the maximum speed value above which the output of the function block
(WINDOW) will be 0 (FALSE). If the measured speed is less than the set value, the output (WINDOW)
of the function block will be 1 (TRUE). If M1 fw >= 4.0 and MVx fw >= 2.0 it possible to enter
the speed value with the decimal point (not with M1S).
Low speed:
Enter in this field the minimum speed value below which the output of the function block
(WINDOW) will be 0 (FALSE). If the measured speed is more than the set value, the output (WINDOW)
of the function block will be 1 (TRUE). If M1 fw >= 4.0 and MVx fw >= 2.0
possible to enter
the speed value with the decimal point (not with M1S).
Frequency: It shows the frequencies values calculated starting
from the speed thresholds fM and fm (fm is the fM threshold
frequency decreased by the hysteresis set). If the displayed
value is GREEN, the calculation of frequency gave a positive
result.
If the displayed value is RED, it is necessary to change the
parameters given in the following formulas.
1. Rotational axis, rotational sensor. The frequency obtained
is:
f [Hz] 
rpm[rev/min]
 Re solution[pulses/rev]
60
KEY:
f = frequency
Rpm = rotational speed
Resolution = measurement
Speed = linear speed
Pitch = sensor pitch
2. Linear axis, rotational sensor. The frequency obtained is:
f [Hz] 
speed[m/min] * 1000
 Re solution[pulses/rev]
60 * pitch[mm/rev]
3. Linear axis, linear sensor. The frequency obtained is:
f [Hz] 
speed[mm/s] * 1000
Re solution[µm/pulse]
English
4. Hysteresis. To be changed only if: fM=green; fm=red
8540780 • 10/07/2020 • Rev.38
139
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
STAND STILL
The StandStill function block monitors the speed of a device,
causing a transition from 0 (FALSE) to 1 (TRUE) of the ZERO
output when the speed is lower than a selected value.
Parameters
Axis type: It defines the type of axis controlled by the device.
It will be Linear in the case of a translation and will be
rotational in the case of motion around an axis.
Sensor Type: When that the previous parameter is Linear,
the Sensor Type defines the type of sensor connected to the
module inputs. It can be rotational (e.g. shaft encoder) or
Linear (e.g. optical array). This choice allows to define the
following parameters.
Measuring device: It defines the type of sensor(s) used. The
possible choices are:
- Encoder
- Proximity
- Encoder+Proximity
- Proximity1+ Proximity2
- Encoder1+ Encoder2
Sin/Cos: Disable Analog check: only when a Sin/Cos
Module is used, it is possible to disable the analog
verification sin2θ + cos2θ, carrying out a simplified
plausibility check of the Encoder signals.
 Please note that when the analog check is disabled the
diagnostic coverage decreases.
Pitch: If the Axis Type chosen was linear and rotational, this
field allows you to enter the sensor pitch to obtain a
conversion between sensor revolutions and distance
travelled.
Proximity choice: It allows you to choose the type of proximity
sensor from PNP, NPN, Normally Open (NA) and Normally Closed
(NC), with 3 or 4 wires.
(In order to ensure a Performance Level = PLe use a proximity
switch type PNP NO: ref. “Interleaved proximity -> page 25).
Proximity choice
Measurement: Enter in this field the number of pulses/revolution (in the case of rotational sensor)
or µm/pulse (linear sensor) relating to the sensor used
Verification: Enter in this field the number of pulses/revolution (in the case of rotational sensor) or
µm/pulse (linear sensor) relating to the second sensor used.
English
Gear Ratio: This parameter is active if there are two sensors on the selected axis. This parameter
allows you to enter the ratio between the two sensors. If both sensors are on the same moving parts,
the ratio will be 1 otherwise the number corresponding to the report must be entered. E.g. there are
an encoder and a proximity switch, and the latter is on a moving part that (due to a gear reduction
ratio) rotates at twice the speed of the encoder. Therefore, this value must be set at 2.
Hysteresis (%): It represents the percentage hysteresis (the percentage is calculated from the
threshold value) below which the speed change is filtered.
140
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Zero speed limit:
Enter in this field the maximum speed value above which the
output of the function block (ZERO) will be 0 (FALSE). If the
measured speed is less than the set value, the output (ZERO)
of the function block will be 1 (TRUE).
Frequency zero speed: It shows the maximum calculated
frequency values fM and fm (fm is the fM threshold frequency
decreased by the hysteresis set). If the displayed value is
GREEN, the calculation of frequency gave a positive result.
If the displayed value is RED, it is necessary to change the
parameters given in the following formulas.
1. rotational axis, rotational sensor. The frequency obtained
is:
f [Hz] 
rpm[rev/min]
 Re solution[pulses/rev]
60
2. Linear axis, rotational sensor. The frequency obtained is:
f [Hz] 
speed[m/min] * 1000
 Re solution[pulses/rev]
60 * pitch[mm/rev]
KEY:
f = frequency
Rpm = rotational speed
Resolution = measurement
Speed = linear speed
Pitch = sensor pitch
3. Linear axis, linear sensor. The frequency obtained is:
f [Hz] 
speed[mm/s] * 1000
Re solution[µm/pulse]
English
4. Hysteresis. To be changed only if: fM=green; fm=red
8540780 • 10/07/2020 • Rev.38
141
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
STAND STILL AND SPEED CONTROL
The StandStill and Speed Control function block monitors
the speed of a device, causing the transition from 0 (FALSE)
to 1 (TRUE) of the ZERO output when the speed is lower than
a selected output. In addition a transition from 0 (FALSE) to
1 (TRUE) of the OVER output is generated when the measured
speed exceeds a predetermined threshold.
Parameters
Axis type: It defines the type of axis controlled by the device.
It will be Linear in the case of a translation and will be
rotational in the case of motion around an axis.
Sensor Type: In the event that the previous parameter is
Linear, the Sensor Type defines the type of sensor connected
to the module inputs. It can be rotational (e.g. shaft encoder)
or Linear (e.g. optical array). This choice allows to define the
following parameters.
Measuring device: It defines the type of sensor(s) used. The
possible choices are:
- Encoder
- Proximity
- Encoder+Proximity
- Proximity1+ Proximity2
- Encoder1+ Encoder2
Sin/Cos: Disable Analog check: only when a Sin/Cos
Encoder is used, it is possible to disable the analog
verification sin2θ + cos2θ, carrying out a simplified plausibility
check of the Encoder signals.
 Please note that when the analog check is disabled the
English
diagnostic coverage decreases.
Enable direction: (Available only when at least one Encoder
input is present): when checked, the DIR output is enabled on
the function block. This output will be 1 (TRUE) when the axis
rotates Counterclockwise and will be 0 (FALSE) when the axis
rotates Clockwise.
Direction decision: It defines the direction of rotation for
which the set thresholds are made active. The possible
choices are:
- Bidirectional
- Clockwise
- Counterclockwise
If Bidirectional is selected, the excess of the set threshold is
detected whether the axis rotates clockwise or
counterclockwise. Selecting Clockwise or Counterclockwise,
this is detected only when the axis rotates in the selected
direction.
Threshold number: It allows you to enter the number of
thresholds for the maximum value of speed. Changing this
value will increase/decrease the number of thresholds that
can be entered from a minimum of 1 to a maximum of 8 with
M1 fw >= 4.0, M1S fw >=5.1 and MVx fw >= 2.0 and 4 with
M1 fw <4.0 or o M1S fw< 5.1 or MVx fw < 2.0. In the case of
thresholds greater than 1, the input pins for the selection of
the specific threshold will appear in the lower part of the
function block. Let the user to choose which threshold has to
be enabled.
142
Example of CLOCKWISE axis rotation
2 threshold settings
In1
0
1
Threshold no.
Speed 1
Speed 2
Up to 4 threshold settings
In2
0
0
1
1
In1
0
1
0
1
Threshold no.
Speed 1
Speed 2
Speed 3
Speed 4
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Up to 8 threshold settings
In3
0
0
0
0
1
1
1
1
In2
0
0
1
1
0
0
1
1
In1
0
1
0
1
0
1
0
1
Threshold no.
Speed 1
Speed 2
Speed 3
Speed 4
Speed 5
Speed 6
Speed 7
Speed 8
Pitch: If the Axis Type chosen was linear and rotational, this field allows you to enter the sensor
pitch to obtain a conversion between sensor revolutions and distance travelled.
Proximity choice: It allows you to choose the type of proximity
sensor from PNP, NPN, Normally Open (NA) and Normally Closed
(NC), with 3 or 4 wires.
(In order to ensure a Performance Level = PLe use a proximity
switch type PNP NO: ref. “Interleaved proximity -> page 36).
Proximity choice:
Measurement: Enter in this field the number of pulses/revolution (in the case of rotational sensor)
or µm/pulse (linear sensor) relating to the sensor used.
Verification: Enter in this field the number of pulses/revolution (in the case of rotational sensor)
or µm/pulse (linear sensor) relating to the second sensor used.
Gear Ratio: This parameter is active if there are two sensors on the selected axis. This parameter
allows you to enter the ratio between the two sensors. If both sensors are on the same moving
parts, the ratio will be 1 otherwise the number corresponding to the report must be entered. E.g.
there are an encoder and a proximity switch, and the latter is on a moving part that (due to a gear
reduction ratio) rotates at twice the speed of the encoder. Therefore, this value must be set at 2.
Hysteresis (%): It represents the percentage hysteresis (the percentage is calculated from the
threshold value) below which the speed change is filtered.
Zero speed limit:
Enter in this field the maximum speed value above which the output of the function block (ZERO)
will be 0 (FALSE). If the measured speed is less than the set value, the output (ZERO) of the function
block will be 1 (TRUE).
English
Speed 1
: Enter in this field the maximum speed value above which the function block output
(OVER) will be 0 (FALSE). If the measured speed is less than the set value, the function block output
(OVER) will be 1 (TRUE). ). If M1 fw >= 4.0, M1S fw >=5.1 and MVx fw >= 2.0 it possible to
enter the speed value with the decimal point.
8540780 • 10/07/2020 • Rev.38
143
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Frequency zero speed/Frequency1/ Frequency2: It shows
the maximum calculated frequency values fM and fm (fm is the
fM threshold frequency decreased by the hysteresis set). If the
displayed value is GREEN, the calculation of frequency gave a
positive result.
If the displayed value is RED, it is necessary to change the
parameters given in the following formulas.
1. rotational axis, rotational sensor. The frequency obtained
is:
f [Hz] 
rpm[rev/min]
 Re solution[pulses/rev]
60
KEY:
f = frequency
Rpm = rotational speed
Resolution = measurement
Speed = linear speed
Pitch = sensor pitch
2. Linear axis, rotational sensor. The frequency obtained is:
f [Hz] 
speed[m/min] * 1000
 Re solution[pulses/rev]
60 * pitch[mm/rev]
3. Linear axis, linear sensor. The frequency obtained is:
f [Hz] 
speed[mm/s] * 1000
Re solution[µm/pulse]
English
4. Hysteresis. To be changed only if: fM=green; fm=red
144
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
ANALOG INPUT TYPE FUNCTION BLOCKS
ANALOG INPUT (4 inputs each MA4 module, 2 inputs each MA2 module)
selection of which types of analog sensor that will be
used (0...20mA; 4...20mA; 0...10V) together with the parameters that will set the acquisition.
It allows also the configuration of two simple threshold comparators or one window comparator.
Input Voltage channel
Input Current channel
Parameters
















Input type
o Single
o Redundant
 Sensors coherence
 Incoherence
calculation mode
 Consolidation
Measurement unit
Scale: minimum value
Scale: maximum value
0...20 mA Input
0...10 V Input
Window comparator
Enable threshold1
Enable threshold2
Hysteresis
Sample per second
Current limit: minimum current
Current limit: maximum current
Sensor anomaly
o Saturated 0 mA
o Saturated 25 mA
Analog Output
Enable Error Out
 If wrong parameters are attributed (eg. scale values not
8540780 • 10/07/2020 • Rev.38
English
corresponding to those used by sensor), the functionality of the
MA2/MA4 module is compromised.
 Perform a complete system TEST (see page 106).
145
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Detailed description
Input type
It defines the inputs type of the MA2/MA4 module channels described below.
Single
A single sensor is connected to one channel from 1 to 4.
Redundant
A pair of sensors is connected to two adjacent channels (1-2 or 3-4). The sensor
pair readings are processed by a single analog block.
In the table below are summarized the channels allowable connections (the
Not-connected cases are excluded on purpose).
Channel
Ch. 2
Single
Redundant
Single
Redundant
Ch. 3
Single
Single
Redundant
Redundant
Ch. 4
Single
Single
Redundant
Redundant
English
Input
Type
Ch. 1
Single
Redundant
Single
Redundant
146
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
In case of Input Type -> Redundant, three further options will be enabled:
1. Sensors coherence
2. Incoherence calculation mode
3. Consolidation
Sensors coherence
The measurement results of the two channels in redundant configuration are
unlikely to be exactly the same (even with equal sensors) due to the tolerances in
the signal chain. The tolerable difference between the channels can be set-up in
the option Sensors Coherence.
The following parameters are provided to compensate for permissible differences
between readings of identical sensors.
 Maximum deviation threshold: Maximum tolerable difference between the
measurements of the two sensors in the unit defined in the parameter
Measurement unit.
 Maximum timeout threshold: maximum time to exceed the gap in seconds.
English
For additional explanation see the following diagram.
8540780 • 10/07/2020 • Rev.38
147
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Incoherence calculation mode: equal sensors
Select Equal sensors if the sensors to be used are identical i.e. they have the same
scale. No additional configuration is required.
The following parameter is provided to define whether the sensors are the same or
different.
English
Equal sensors: The pair of sensors have the same characteristics and no
parameters need no further configuration.
For additional explanation see the following diagram.
148
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Incoherence calculation mode: different sensors
The two sensors used in the redundant configuration must provide the same
reading in units but they can have different scaling factors.
The following parameter is provided to define whether the sensors are the same or
different.
Different sensors: the pair of sensors used are not identical. The box Scale is
displayed. The values you enter in this box are used for scaling of the second sensor
and calculation of the differences between the two sensors. The MA2/MA4 module
will adapt signal conversion accordingly i.e. the scale of the second sensor will
adapt automatically to the scale of the first sensor.
English
For additional explanation see the diagram following.
8540780 • 10/07/2020 • Rev.38
149
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Input Type Redundant: Consolidation
If you select Redundant as Input type, you must configure the
Consolidation parameter which specifies the measurement value
to be used.
Select the measurement values to be used by MA2/MA4
comparators and sent as analog data to M1S controller:



English


Input Ain: Use the values supplied by the connected Channel.
AinR: Use the values supplied by the connected Channel.
Maximum: Use the maximum value supplied by channels 1 or 2,
whichever is greater.
Minimum: Use the minimum value supplied by channels 1 or 2, whichever is less.
Arithmetic average: Use the arithmetic mean of the values supplied by channels 1 and 2.
150
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Measurement unit: Scale and type of input
You must specify the unit (e.g. Celsius degree, Bar, kg, m/s) and the scale of the
measurement. The MA2/MA4 module will calculate the relationship between these
values and the corresponding measured current or voltage values (scaling) based
on the condition that the sensor has a linear characteristic.


Scale, minimum value: It is the lowest value in units corresponding to the minimum
output value of the sensor (4 mA for a 4÷20 mA sensor, 0 mA for a 0÷20 mA sensor
and 0 V for a 0÷10 Vdc sensor).
Scale, maximum value: it is the highest value in units corresponding to the maximum
output value of the sensor (20 mA for a 0/4÷20 mA sensor and 10 Vdc for a
0÷10 Vdc sensor).
 MSD assumes that the sensors have a linear transfer function and, as a consequence,
automatically computes the slope and the offset of the transfer function on the basis
of the values entered by the user.
 Do not use a configuration of the function block as 0÷20 mA or 0÷10 V input for safety purposes.
If you use a configuration of the function block as 0÷20 mA or 0÷10 V input for non safety
purposes, implement all measures required to avoid unintended equipment operation and any
other hazard.
Input type: 4÷20mA -> no selection
Input type: 0÷20mA -> 0÷20mA Input selected
English
Input type: 0÷10V -> 0÷10V Input selected
8540780 • 10/07/2020 • Rev.38
151
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Reading analysis: Window comparator
If you activate the option Window comparator, the output Out1 is added to the
graphical representation of the function block and a number of additional
parameters are displayed.
The following parameters are provided to define the behavior of the Window
comparator:
High threshold: is the maximum value of the range set for the window.
Low threshold: is the minimum value of the range set for the window.
Hysteresis: is the hysteresis value for the window.
The output state of the window comparator depends on the value of the division
and on its actual logic state. There are two possible states:
 OUT OF WINDOW: the output of the comparator is a logical value 0 If the state of the
English
Window comparator is Out of Window, the output of the Window comparator is FALSE.
 IN WINDOW: the output of the comparator is a logical value 1 If the state of the Window
comparator is In Window, the output of the Window comparator is TRUE.
152
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
The following figure and table exemplify the states of the Window comparator:
Figure 72 – Example of window comparator behavior
Measurement value (A)
Next state of window
comparator
OUT OF WINDOW
OUT OF WINDOW
OUT OF WINDOW
OUT OF WINDOW
IN WINDOW
IN WINDOW
IN WINDOW
IN WINDOW
English
(A) < Low threshold value + hysteresis
(A) > High threshold
(A) >= High threshold value - hysteresis
(A) <= Low threshold value
(A) < High threshold value - hysteresis
(A) > Low threshold value
(A) < High threshold value
(A) > Low threshold value + hysteresis
Current state of window
comparator
OUT OF WINDOW
OUT OF WINDOW
OUT OF WINDOW
OUT OF WINDOW
OUT OF WINDOW
OUT OF WINDOW
IN WINDOW
IN WINDOW
8540780 • 10/07/2020 • Rev.38
153
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Reading analysis: Enable threshold1 / threshold2
If you activate the options Enable threshold1 and/or Enable threshold2, the output
Out1 and/or Out2 are added to the graphical representation of the function block
and a number of additional parameters are displayed.
The following parameters are provided to define the behavior of the Threshold
comparator:
 Threshold1 / threshold2: is the value of the threshold.
 Hysteresis: is the hysteresis value
The following figure and table exemplify the states of the Enable threshold:
Figure 73 – Example of Enable threshold behavior
Measurement value (A)
English
(A) < Threshold value - hysteresis
(A) <= Threshold value
(A) > Threshold value
(A) < Threshold value - hysteresis
(A) < Threshold value - hysteresis
154
Current state of threshold
comparator
UNDER THRESHOLD
UNDER THRESHOLD
UNDER THRESHOLD
OVER THRESHOLD
OVER THRESHOLD
Next state of threshold
comparator
UNDER THRESHOLD
UNDER THRESHOLD
OVER THRESHOLD
OVER THRESHOLD
UNDER THRESHOLD
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Samples per second
Let the user to choose the number of sampling per second of the Analog to Digital
Sigma Delta converter. A low value would have better performance in terms of noise
while an high value would have better performance in terms of response speed.
The value 50 and 60 enhance line filter rejection.
Figure 74 - List of samples per second possible values
Current/Voltage limits: minimum current and maximum current/voltage
Current sensors: current limits
If the measurement values are under the minimum value or over the maximum value
a diagnosis is set.
The following table summarize MA2/MA4 module behaviour as a function of
measurement values.
Measurement value (A)
(A) < Minimum current limit
(A) > Maximum current limit
Minimum current limit < (A) < Maximum current limit
8540780 • 10/07/2020 • Rev.38
Diagnostic
YES
YES
NO
155
English
The user can set the range of valid measurement values setting a minimum current
and a maximum current.
 Minimum current values: range from 2.5 mA to 3.9 mA
 Maximum current values: range from 20.1 mA to 23 mA.
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Voltage sensors: voltage limits
The user can set the range of valid measurement values by set a maximum voltage.
If the measurement values are over the maximum value a diagnosis is set.
The allowable maximum voltage values range from 10,05 V to 11,5 V.
The following table summarize MA2/MA4 module behaviour as a function of
measurement values.
Measurement value (A)
(A) < Minimum voltage limit
(A) > Maximum voltage limit
Minimum voltage limit < (A) < Maximum voltage limit
Diagnostic
NO
YES
NO
Sensor anomaly: measure saturated at 0 mA or 25 mA
This option let the user to choose which value MA2/MA4 will force to the
measurement when a sensor anomaly is detected.
The list of sensor anomalies are reported below:
 Disconnected cable (only for 4mA/20mA sensors)
 Isolated channel power supply overload
 Isolated channel input overload
Analog Output
English
When this flag is checked the raw value of the measurements are available to MSD.
This is highlighted on input block by a light green square
.
156
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Enable Error Out
When this flag is checked the a digital signal is available to indicate an error when
an anomaly on a sensor is detected. This is highlighted on input block by a dark
green square near the label
.
Value
1 (TRUE)
0 (FALSE)
English
Anomaly
Present
Not present
8540780 • 10/07/2020 • Rev.38
157
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
ANALOG DIVISION (4 inputs each MA4 module, 2 inputs each MA2 module)
The function block ANALOG DIVISION allows the arithmetic division of the values of two inputs.
The inputs can be single or redundant.
ANALOG DIVISION allows also the configuration of one THRESHOLD COMPARATOR (or one WINDOW
COMPARATOR) and a WARNING COMPARATOR.
Voltage Input
Current Input
Parameters














English


Input type
o Single
o Redundant
 Sensors coherence
 Incoherence
calculation mode
 Consolidation
Measurement unit
Scale: minimum value
Scale: maximum value
0...20 mA Input
0...10 V Input
Window comparator
Enable threshold
Warning enable
Hysteresis
Sample per second
Current limit: minimum current
Current limit: maximum current
Division Anomaly: division
saturated at 0 or 200000
Analog Output
Enable Error Out
158
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Single
The measurement values of two single channels are divided.
Redundant
The measurement values of two pairs of sensors configured as redundant are
divided. The following illustration shows this configuration (the suffix R identifies
the redundant input channel).
The following table summarizes the possible divisions:
Channel 1 / Channel 2
Division
Channel 3 / Channel 4
Channel 1,2 / Channel 3,4
Maximum deviation threshold / Maximum timeout threshold
English
In case of Input Type -> Redundant, three further options will be enabled:
1. Sensors coherence
2. Incoherence calculation mode
3. Consolidation
8540780 • 10/07/2020 • Rev.38
159
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Sensors coherence
The measurement results of the two channels in redundant configuration are
unlikely to be exactly the same (even with equal sensors) due to the tolerances in
the signal chain. The tolerable difference between the channels can be set-up in
the option Sensors Coherence.
The following parameters are provided to compensate for permissible differences
between readings of identical sensors.
 Maximum deviation threshold: Maximum tolerable difference between the
measurements of the two sensors in the unit defined in the parameter
Measurement unit.
 Maximum timeout threshold: maximum time to exceed the gap in seconds.
English
For additional explanation see the following diagram.
160
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Incoherence calculation mode: equal sensors
Select Equal sensors if the sensors to be used are identical i.e. they have the same
scale. No additional configuration is required.
The following parameter is provided to define whether the sensors are the same or
different.
English
Equal sensors: The pair of sensors have the same characteristics and no
parameters need no further configuration.
For additional explanation see the diagram following.
8540780 • 10/07/2020 • Rev.38
161
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Incoherence calculation mode: different sensors
The two sensors used in the redundant configuration must provide the same
reading in units but they can have different scaling factors.
The following parameter is provided to define whether the sensors are the same or
different.
Different sensors: the pair of sensors used are not identical. The box Scale is
displayed. The values you enter in this box are used for scaling of the second sensor
and calculation of the differences between the two sensors. The MA2/MA4 module
will adapt signal conversion accordingly i.e. the scale of the second sensor will
adapt automatically to the scale of the first sensor.
English
For additional explanation see the diagram following.
162
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Input Type Redundant: Consolidation
If you select Redundant as Input type, you must configure the Consolidation
parameter which specifies the measurement value to be used.
Select the measurement values to be used by MA2/MA4
comparators and sent as analog data to M1S controller:





Input Ain1, 2: Use the values supplied by the connected Channel.
Ain1R, 2R: Use the values supplied by the connected Channel.
Maximum: Use the maximum value supplied by channels 1 or 2,
whichever is greater.
Minimum: Use the minimum value supplied by channels 1 or 2, whichever is less.
Arithmetic average: Use the arithmetic mean of the values supplied by channels 1 and 2.
Measurement unit: Scale and type of input
You must specify the unit (e.g. Celsius degree, Bar, kg, m/s) and the scale of the
measurement. The MA2/MA4 module will calculate the relationship between these
values and the corresponding measured current or voltage values (scaling) based
on the condition that the sensor has a linear characteristic.


Scale, minimum value: It is the lowest value in units corresponding to the minimum
output value of the sensor (4 mA for a 4÷20 mA sensor, 0 mA for a 0÷20 mA sensor
and 0 V for a 0÷10 Vdc sensor).
Scale, maximum value: it is the highest value in units corresponding to the maximum
output value of the sensor (20 mA for a 0/4÷20 mA sensor and 10 Vdc for a
0÷10 Vdc sensor).
 MSD assumes that the sensors have a linear transfer function and, as a consequence,
automatically computes the slope and the offset of the transfer function on the basis
of the values entered by the user.
 Do not use a configuration of the function block as 0÷20 mA or 0÷10 V input for safety purposes.
Input type: 4÷20mA -> no selection
8540780 • 10/07/2020 • Rev.38
Input type: 0÷20mA -> 0÷20mA Input selected
163
English
If you use a configuration of the function block as 0÷20 mA or 0÷10 V input for non safety
purposes, implement all measures required to avoid unintended equipment operation and any
other hazard.
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Input type: 0÷10V -> 0÷10V Input selected
Division analysis: Window comparator
If you activate the option Window comparator, the output Out1 is added to the
graphical representation of the function block and a number of additional
parameters are displayed.
The following parameters are provided to define the behavior of the Window
comparator:
High threshold: is the maximum value of the range set for the window.
Low threshold: is the minimum value of the range set for the window.
Hysteresis: is the hysteresis value for the window.
The output state of the window comparator depends on the value of the division
and on its actual logic state. There are two possible states:
 OUT OF WINDOW: the output of the comparator is a logical value 0 If the state of the
Window comparator is Out of Window, the output of the Window comparator is FALSE.
 IN WINDOW: the output of the comparator is a logical value 1 If the state of the Window
comparator is In Window, the output of the Window comparator is TRUE.
English
The following figure and table exemplify the states of the Window comparator:
164
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Division value (A)
Next state of window
comparator
OUT OF WINDOW
OUT OF WINDOW
OUT OF WINDOW
OUT OF WINDOW
IN WINDOW
IN WINDOW
IN WINDOW
IN WINDOW
English
(A) < Low threshold value + hysteresis
(A) > High threshold
(A) >= High threshold value - hysteresis
(A) <= Low threshold value
(A) < High threshold value - hysteresis
(A) > Low threshold value
(A) < High threshold value
(A) > Low threshold value + hysteresis
Current state of window
comparator
OUT OF WINDOW
OUT OF WINDOW
OUT OF WINDOW
OUT OF WINDOW
OUT OF WINDOW
OUT OF WINDOW
IN WINDOW
IN WINDOW
8540780 • 10/07/2020 • Rev.38
165
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Division analysis: Enable threshold
If you activate the option Enable threshold, the output Out is added to the
graphical representation of the function block and a number of additional
parameters are displayed.
The following parameters are provided to define the behavior of the Threshold
comparator:
 Threshold: is the value of the threshold.
 Hysteresis: is the hysteresis value
The following figure and table exemplify the states of the Enable threshold:
DIVISION VALUES (A)
Next state of threshold
comparator
UNDER THRESHOLD
UNDER THRESHOLD
OVER THRESHOLD
OVER THRESHOLD
UNDER THRESHOLD
English
(A) < Threshold value - hysteresis
(A) <= Threshold value
(A) > Threshold value
(A) < Threshold value - hysteresis
(A) < Threshold value - hysteresis
Current state of
threshold comparator
UNDER THRESHOLD
UNDER THRESHOLD
UNDER THRESHOLD
OVER THRESHOLD
OVER THRESHOLD
166
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Division analysis: Warning enable -> warning threshold
If you activate the Warning enable, a further output is added to the function block.
You can specify a threshold value and a hysteresis.
The option "Lower limit" determines the behavior of the comparison.
Division analysis: Warning enable -> threshold -> hysteresis
Following it is described the behaviour of the alert threshold comparator when
"Alert lower limit" is not selected.
The output state of the Warning comparator depends on the value of the
measurement and on its current state. There are two possible states:
 OVER THRESHOLD: the output of the comparator is a logic 1 (TRUE)
 UNDER THRESHOLD: the output of the comparator is a logic 0 (FALSE)
The following figure and table exemplify the states of the Alert threshold:
8540780 • 10/07/2020 • Rev.38
English
Division values (A)
Current state of threshold comparator Next state of threshold comparator
(A) < Threshold value
UNDER THRESHOLD
UNDER THRESHOLD
(A) <= Threshold value + hysteresis
UNDER THRESHOLD
UNDER THRESHOLD
(A) > Threshold value + hysteresis
UNDER THRESHOLD
OVER THRESHOLD
(A) > Threshold value
OVER THRESHOLD
OVER THRESHOLD
(A) < Threshold value
OVER THRESHOLD
UNDER THRESHOLD
167
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Samples per second
Lets you select the number of samples per second of the analog to digital converter.
The lower the value, the less the reading is susceptible to noise.
The higher the value, the shorter the response time.
The Samples per second values 50 and 60 enhance the AC power line filter rejection.
Current limits / voltage
Current sensors: current limits
With the following parameters you can limit the measurement range by setting a
minimum and a maximum permissible current:
Minimum current: The range for the minimum permissible current is 2,5 to 3,9 mA.
 Maximum current: The range for the maximum permissible current is 20,1 to 23 mA.

If the measurement values are under the minimum value or above the maximum
value, then the MA2/MA4 module detects a anomaly and raise diagnostics.
The following table summarizes MA2/MA4 module behaviour as a function of
measurement values.
Diagnostic
YES
YES
NO
English
Measurement value (A)
(A) < Minimum current limit
(A) > Maximum current limit
Minimum current limit < (A) < Maximum current limit
168
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Voltage sensors: voltage limits
With the following parameters you can limit the measurement range by setting a
minimum and a maximum permissible voltage:


Minimum voltage: The value is set to 0 V and cannot be changed.
Maximum voltage: The range for the maximum permissible voltage is 10,05 VDC to
11,5 VDC.
If the measurement values are above the maximum value, then the MA2/MA4
module detects a anomaly and raise diagnostics.
The following table summarizes MA2/MA4 module behaviour as a function of
measurement values.
Measurement value (A)
(A) < Minimum voltage limit
(A) > Maximum voltage limit
Minimum voltage limit < (A) < Maximum voltage limit
Diagnostic
NO
YES
NO
Division anomaly: division saturated at 0 or 200000
This option let you to choose which value the MA2/MA4 module will force to the
division when a mathematical error is detected.
Analog Output
English
If this option is selected, the raw values of the measurements are available within
MSD by using the Graphical Monitor.
This is graphically represented on the function block by a light green square and
the label Analog.
8540780 • 10/07/2020 • Rev.38
169
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Enable Error Out
If selected, provides an output to indicate that an error has been detected by the
function block. This is graphically represented on the function block by a dark green
square and the label Error.
Math Err
The output Math Err provides the state of the division:
“Math Err” Value
1 (TRUE)
1 (TRUE)
1 (TRUE)
1 (TRUE)
1 (TRUE)
0 (FALSE)
English
Anomaly
Division by 0
Disconnected cable diagnosis detected
Output overload detected
Input overload detected
Mismatch detected (only with redundant sensors)
Normal operation
170
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
OPERATOR FUNCTION BLOCKS
All the input of these operators could be inverted (logical NOT). It could be done clicking
with the right mouse key on the input to be inverted. A little circle will be showed on the
inverted input. To cancel the inversion, simply click another time on the same input pin.
 The maximum number of functional blocks is 64 with M1 or 128 with M1S.
LOGICAL OPERATORS
AND
Logical AND returns an output of 1 (TRUE) if all
the inputs are 1 (TRUE).
In1
0
1
0
1
0
1
0
1
In2
0
0
1
1
0
0
1
1
Inx
0
0
0
0
1
1
1
1
Out
0
0
0
0
0
0
0
1
Parameters
Number of inputs: this is used to set between 2 and 8 inputs.
NAND
Logical NAND returns an output of 0 (FALSE) if
all the inputs are 1 (TRUE).
In1
0
1
0
1
0
1
0
1
In2
0
0
1
1
0
0
1
1
Inx
0
0
0
0
1
1
1
1
Out
1
1
1
1
1
1
1
0
Parameters
English
Number of inputs: this is used to set between 2 and 8 inputs.
8540780 • 10/07/2020 • Rev.38
171
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
NOT
Logical NOT inverts the logical status of the
input.
In
0
1
Out
1
0
OR
Logical OR returns an output of 1 (TRUE) if at
least one of the inputs is 1 (TRUE).
In1
0
1
0
1
0
1
0
1
In2
0
0
1
1
0
0
1
1
Inx
0
0
0
0
1
1
1
1
Out
0
1
1
1
1
1
1
1
Parameters
Number of inputs: this is used to set between 2 and 8 inputs.
NOR
Logical NOR returns an output of 0 (FALSE) if at
least one of the inputs is 1 (TRUE).
In1
0
1
0
1
0
1
0
1
In2
0
0
1
1
0
0
1
1
Inx
0
0
0
0
1
1
1
1
Out
1
0
0
0
0
0
0
0
English
Parameters
Number of inputs: this is used to set between 2 and 8 inputs.
172
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
XOR
Logical XOR returns an output 0 (FALSE) if the
input's number at 1 (TRUE) is even or the inputs
are all 0 (FALSE).
In1
0
1
0
1
0
1
0
1
In2
0
0
1
1
0
0
1
1
Inx
0
0
0
0
1
1
1
1
Out
0
1
1
0
1
0
0
1
Parameters
Number of inputs: this is used to set between 2 and 8 inputs.
XNOR
Logical XNOR returns an output 1 (TRUE) if the
input's number at 1 (TRUE) is even or the inputs
are all 0 (FALSE).
In1
0
1
0
1
0
1
0
1
In2
0
0
1
1
0
0
1
1
Inx
0
0
0
0
1
1
1
1
Out
1
0
0
1
0
1
1
0
Parameters
English
Number of inputs: this is used to set between 2 and 8 inputs.
8540780 • 10/07/2020 • Rev.38
173
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
LOGICAL MACRO
This operator enables the grouping together of two or
three logic gates.
A maximum of 8 inputs is foreseen.
The result of the first two operators converges into a
third operator, the result of which is the OUTPUT.
Parameters
Logic inputs 1, 2: enables the selection of the number of
logic inputs (from 1 to 7).
If one of the Logic Inputs equals "1", the corresponding logic is
disabled and the input is directly connected to the end logic
(e.g. see diagram on the left).
Select Logic 1, 2, 3: enables the selection of one of the following types of operator:
AND, NAND, OR, NOR, XOR, XNOR, SR Flip-Flop (the latter only for logic 3).
Disable OUT: If selected, it deactivates the main output allowing to use only logics 1 and/or 2
enabling their respective outputs
Enable (OUT1, OUT2): If selected, it activates an output with the result of logics 1 and/or 2.
MULTIPLEXER
Logical MULTIPLEXER forwards the signal of the
inputs to the output according to the Sel
selection. If the SEL1÷SEL4 have only one bit
set, the selected In n is connected to the
Output.
the SEL
inputs are:
- more than one = 1 (TRUE)
- none = 1 (TRUE)
the output is set to 0 (FALSE) independently
from the In n values.
Parameters
English
Number of inputs: this is used to set between 2 and 4 inputs.
174
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
DIGITAL COMPARATOR (M1S only)
The digital comparator allows to compare (in binary
format) a group of signals with a constant or two
groups of signals to each other
Comparison with constant
In this case the Signal Comparator check must not be
activated.
The DIGITAL COMPARATOR block allows to compare
a series of input signals (from 2 to a maximum of 8).
The integer constant could be inputted directly as
Decimal number or as a combination of binary values.
In the latter In1 is the LSB (least significant bit) while
input In8 (or less if the number of inputs selected is
less than 8) is the MSB (most significant bit).
Example of operator with 8 inputs:
In1 → 0
In2 → 1
In3 → 1
In4 → 0
In5 → 1
In6 → 0
In7 → 0
In8 → 1
Example of operator with 5 inputs:
In1 → 0
In2 → 1
In3 → 0
In4 → 1
In5 → 1
Decimal value equal to 26.
Decimal value equal to 150.






< (Lower) The OUT output will be 1 (TRUE) as long as the input value is less than
the decimal value set as constant. The OUT output will be set to 0 (FALSE) when the
input value is higher than or equal to the decimal value set as constant.
>= (Higher) or equal The OUT output will be 1 (TRUE) as long as the input value is
higher than or equal to the decimal value set as constant. The OUT output will be
set to 0 (FALSE) when the input value is lower than the decimal value set as constant.
> (Higher) The OUT output will be 1 (TRUE) as long as the input value is higher
than the decimal value set as constant. The OUT output will be set to 0 (FALSE) when
the input value is lower than or equal to the decimal value set as constant.
<= (Lower or equal) The OUT output will be 1 (TRUE) as long as the input value is
lower than or equal to the decimal value set as constant. The OUT output will be set
to 0 (FALSE) when the input value is higher than the decimal value set as constant.
= (Equal) The OUT output will be 1 (TRUE) as long as the input value is equal to
the decimal value set as constant. The OUT output will be set to 0 (FALSE) when the
input value is different from the decimal value set as constant.
!= (Different) The OUT output will be 1 (TRUE) as long as the input value is different
from the decimal value set as constant. The OUT output will be set to 0 (FALSE) when
the input value is equal to the decimal value set as constant.
8540780 • 10/07/2020 • Rev.38
175
English
The user could choice among various operation listed below:
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Signal comparison
Signal comparison: Selecting this item will
allow the DIGITAL COMPARATOR operator
to compare the first four A inputs
(In1_A...In4_A) with the second four B
inputs (In1_B...In4_B).
Depending on the value of the inputs and
the operation selected, the following results
will be obtained:





English

< (Lower): The OUT output will be
1 (TRUE) as long as the value of A
inputs is lower than the value of B inputs. The OUT output will be set to 0 (FALSE)
when the value of A inputs is higher than or equal to the value of B inputs.
>= (Higher or equal): The OUT output will be 1 (TRUE) as long as the value of A
inputs is higher than or equal to the value of B inputs. The OUT output will be set to
0 (FALSE) when the value of A inputs is lower than the value of B inputs.
> (Higher): The OUT output will be 1 (TRUE) as long as the value of A inputs is
higher than the value of B inputs. The OUT output will be set to 0 (FALSE) when the
value of A inputs is lower than or equal to the value of B inputs.
<= (Lower or equal): The OUT output will be 1 (TRUE) as long as the value of A
inputs is lower than or equal to the value of B inputs. The OUT output will be set to
0 (FALSE) when the value of A inputs is higher than the value of B inputs.
= (Equal): The OUT output will be 1 (TRUE) as long as the value of A inputs is equal
to the value of B inputs. The OUT output will be set to 0 (FALSE) when the value of A
inputs is different from the value of B inputs.
!= (Different): The OUT output will be 1 (TRUE) as long as the value of A inputs is
different from the value of B inputs. The OUT output will be set to 0 (FALSE) when
the value of A inputs is equal to the value of B inputs.
176
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MEMORY OPERATORS
MEMORY operators can be used if you decide to save any data (TRUE or FALSE) from other
project components.
Status changes are performed according to the truth tables shown for each operator.
D FLIP FLOP (max number = 16 with M1, 32 with M1S)
The D FLIP FLOP operator saves the previously set
status on output Q according to the following truth
table.
Preset Clear
Ck
1
0
X
0
1
X
1
1
X
0
0
L
0
0
Rising edge
0
0
Rising edge
D
Q
X
1
X
0
X
0
X Keep memory
1
1
0
0
Parameters
Preset: If selected enables output Q to be set to 1 (TRUE).
Clear: If selected enables the saving process to be reset.
T FLIP FLOP (max number = 16 with M1, 32 with M1S)
This operator switches the Q output at each rising
edge of the T input (Toggle).
Parameters
Enable Clear: If selected enables the saving process
to be reset.
SR FLIP FLOP
SR FLIP FLOP operator brings output Q
at 1 with Set, 0 with Reset.
See the following truth table.
English
SET RESET
Q
0
0
Keep memory
0
1
0
1
0
1
1
1
0
8540780 • 10/07/2020 • Rev.38
177
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Parameters
Store output status: If selected, it stores the output status of the Flip-flop in non-volatile
memory every time it is changed. When the system is turned on, the last stored value is
restored.
It is possible to have up to 8 Flip-Flops with output status storage that will be
distinguishable by an 'M'.
 Some limitations to the use of this storage. The maximum time required for a single
storage is estimated at 50ms and the maximum number of possible storages is set at
100000.
 The total number of storages must not exceed the set limit, otherwise the operational
life of the product will be reduced, and the frequency of such storages must be
sufficiently low to enable them to be stored safely.
USER RESTART MANUAL
(max number = 16 with M1, 32 with M1S with other RESTART operators)
The USER RESTART MANUAL operator saves the
restart signal (coming from a RESTART command
device) according to the following truth table.
Clear
Restart
In
Q
Restart Request Type 1
Restart Request Type 2*
1
1
X
X
0
0
X
X
0
0
0
1
0
0
0
Rising Edge
1
Keep Memory
1
Blinking
1Hz
1
1
0
0
Parameters
Clear enable: If selected, enables an input to reset the memorization.
Restart request: If selected, it enables an output that can be used to signal the possibility
of performing the Restart. The behaviour can be of type 1 or type 2 (type 2 only with M1S)
as represented in the truth table.
English
* Restart Request Type 2 uses a system timer
178
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
USER RESTART MONITORED
(max number = 16 with M1, 32 with M1S with other RESTART operators)
The USER RESTART MONITORED operator is used
to save the restart signal (coming from a RESTART
command device) according to the following truth
table.
Clear
Restart
In
Q
Restart Request Type 1
Restart Request Type 2*
X
X
0
X
0
1
0
0
Keep Memory
0
0
1
1
1
Blinking 1Hz
1
1
0
0
1
X
0
0
Parameters
Clear enable: If selected, enables an input to reset the memorization.
Restart request: If selected, it enables an output that can be used to signal the possibility
of performing the Restart. The behaviour can be of type 1 or type 2 (type 2 only with M1S)
as represented in the truth table.
*This output uses a system timer
MACRO RESTART MANUAL
(max number = 16 with M1, 32 with M1S with other RESTART operators)
Clear
Restart Logic Out
Input Logic Out
Output
Restart Request
1
X
X
0
0
X
X
0
0
0
0
0
1
Keep memory
1
1
1
0
0
Rising Edge
8540780 • 10/07/2020 • Rev.38
English
The MACRO RESTART MANUAL operator is used to combine a
logic gate chosen by the user with the Restart Manual
functional block ("USER RESTART MANUAL") in accordance with
the following truth table.
179
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Parameters
Input Logic: enables the selection of the number of logic inputs (from 1 to 7). Selecting 1
the logic will not be considered.
Select Logic: enables the selection of one of the following types of operator:
AND, NAND, OR, NOR, XOR, XNOR.
Restart Input Logic (only M1S): enables the selection of the number of inputs for restart
logic (from 1 to 7). If you select 1 the logic will not be considered.
Restart Select Logic (only M1S): enables the selection of one of the following types of
operator for restart logic: AND, NAND, OR, NOR, XOR, XNOR.
Enable Clear: If selected, enables an input to reset the memorization.
Enable Out: If selected activates an output with the result of the calculation done by the
input logic.
Restart request: If selected, it enables an output that can be used to signal the possibility
of performing the Restart. The behaviour is represented in the truth table.
MACRO RESTART MONITORED
(max number = 16 with M1, 32 with M1S with other RESTART operators)
The MACRO RESTART MONITORED operator is used
to combine a logic gate chosen by the user with the
Restart Manual functional block ("USER RESTART
MONITORED") in accordance with the following truth
table.
Clear
Restart
Logic Out
1
X
0
X
X
0
0
Input
Logic
Out
X
0
1
Output
Restart
Request
0
0
Keep memory
0
0
1
1
1
0
Parameters
Input Logic: enables the selection of the number of logic inputs (from 1 to 7). Selecting 1
the logic will not be considered.
Select Logic: enables the selection of one of the following types of operator:
AND, NAND, OR, NOR, XOR, XNOR.
Restart Input Logic (only M1S): enables the selection of the number of inputs for restart
logic (from 1 to 7). If you select 1 the logic will not be considered.
Restart Select Logic (only M1S): enables the selection of one of the following types of
operator for restart logic: AND, NAND, OR, NOR, XOR, XNOR.
English
Enable Clear: If selected, enables an input to reset the memorization.
Enable Out: If selected activates an output with the result of the calculation done by the
input logic.
Restart request: If selected, it enables an output that can be used to signal the possibility
of performing the Restart. The behaviour is represented in the truth table.
180
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
PRE-RESET (M1S only) (max number = 32 with other RESTART operators)
The PRE-RESET operator can be used when
there is no possibility of having a single reset
button in a position from which a complete
visibility of the hazardous area is available.
In this case it is necessary to use a PRE-RESET
button inside a zone of operation with a
complete visibility and a RESET button outside
the zone of operation to activate the Q output.
For both Pre-reset and Reset inputs the
transition 0->1->0 is considered a valid
signal. It is mandatory that the pulse 0->1->0
has a maximum duration of 5s.
Parameters
Time: The external reset is operative if pressed within a preset time configurable by the
user in the range 6÷120s
Blocking Mandatory: If selected, the minimum number of interruptions (of the light curtain
or similar) is 1 before the RESET signal can be activated.
If you specify a BLOCKING NUMBER other than 1, this number corresponds to the maximum
permissible number of interruptions.
Blocking number: Blocking number has the range from 1 to 7.
Reset Request: Enabling this item will make available an output from this operator. This
signal is 1 from the PreReset signal transition to the end of the allowable time or to the
next Reset signal transition.
Enable Clear: If selected, enables an input to reset the memorization.
English
The behavior of the PRE-RESET operator is shown in the following timings:
8540780 • 10/07/2020 • Rev.38
181
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
GUARD LOCK OPERATORS (max number = 4 with M1, 8 with M1S)
GUARD LOCK
operator is designed to
control locking/unlocking of an
ELECTROMECHANICAL GUARD LOCK in a
variety of operating contexts.
Parameters
Manual Reset:
There are two types of reset: Manual and Monitored. When Manual is selected the system
only verifies the signal's transition from 0 to 1. If Monitored is selected the double transition
from 0 to 1 and then back to 0 is verified.
t = 250 ms
5sec > t1 > 250 ms
t2 = 250 ms
Unlock Time (s):
The time that must pass between the UnLock_cmd input reaching and the real guard unlock
(Lockout output).
- 0ms ÷ 1 s Step 100 ms
- 1.5 s ÷ 10 s Step 0.5 s
- 15 s ÷ 25 s Step 5 s
Feedback Time (s):
Maximum delay accepted between LockOut output and Lock_fbk input (must be the one shown on
the lock data sheet with appropriate gap decided by the operator).
- 10ms ÷ 100 s Step 10 ms
- 150ms ÷ 1 s Step 50 ms
- 1.5 s ÷ 3 s Step 0.5 s
Interlock Spring: The guard is locked passively and released actively, i.e. the mechanical force of
the spring keeps it locked. The guard thus continues to be locked even when the power supply is
disconnected.
English
Mandatory gate opening: Only with door opening and subsequent confirmation of input GATE, the
cycle proceeds.
Gate not present: If selected, enables configuration without Gate but only with LOCK FEEDBACK
(feedback coil lock).
Enable error out: This can be selected to enable a signal (Error Out) to indicate a lock malfunction.
When Error Out = 1 (TRUE) there is a fault in the lock. (e.g. open door with guard lock locked,
Feedback Time exceeding the maximum allowed, etc.).
182
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Description of "GUARD LOCK" operator inputs/outputs
“Lock_fbk” input
used to detect the status (feedback) of the electromagnet that
unlocks/locks the guard lock.
Electromechanical guard locks are unlocked/locked via an electric control that
energises/de-energises an electromagnet. Its status (energised/de-energised) is indicated
by appropriate contacts. For example, the status of the electromagnet may be indicated by
a normally open contact that is closed when the electromagnet is energised, as in the case
shown in Figure 75.
Figure 75 - Example of feedback of the status of the electromagnet of a guard lock.
The signal received by the module is processed by the "Guard Lock" operator.
“Gate” input
English
present, it detects the status (feedback) of the door/gate
connected to the guard lock.
The status of the door/gate (GATE) is detected using specific contacts. For example, the
status of the door/gate may be indicated by a normally open contact that is closed when
the door/gate is closed, as in the case in Figure 76.
8540780 • 10/07/2020 • Rev.38
183
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Figure 76 - Example of feedback of the status of a door/gate connected to the guard lock. The
signal received by the module is processed by the "Guard Lock" operator.
“Unlock_cmd” input
lock. In detail:
 Request to unlock: the Unlock_cmd signal must be set to LL1
 Request to lock: the Unlock_cmd signal must be set to LL0
The command signal may be sent via a key, for example.
“Output” out
This signal indicates the information shown in the table below, depending on its value.
Value
LL1
Output
LL0




English
Output
Meaning
Door/Gate closed
Guard lock locked
User request to unlock the guard lock
Error condition
184
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
“LockOut” output
This signal controls the guard lock electromagnet and can assume LL0 and LL1 value.
“ErrorOut” output
If enabled, when this signal is set to LL1 it indicates an error in the control of the guard
lock. It is set to LL0 when no errors have occurred.
Operation: general description
signal, the status of a door/gate (Ewhen the guard lock is closed and locked.
s LL1 (TRUE)
Operation in the “no Gate” mode
In this case, the user must select t
parameter.
The Lock_Fbk input must always be connected to a
LOCK
FEEDBACK section on page 118) that verifies the status
of the guard lock electromagnet.
The UnLock_cmd input can be connected freely in the
diagram and determines the request to unlock the
guard lock (when set to LL1).
The Output signal is LL1 (TRUE) if the safety guard is
locked. When an unlock command is applied to the
UnLock_cmd input, the Output signal is set to LL0 and the guard lock is unlocked via the
LockOut signal.
The Output signal can also be set to LL0 (FALSE) when error conditions are present.
(e.g. Feedback Time exceeding the maximum allowed, etc.).
When the Unlock_cmd signal is detected, the LockOut signal unlocks the guard lock after
the UnLock Time, a parameter that can be defined by the user.
The time after which the electromagnet is activated depends entirely on the
technical/physical characteristics of the specific device and may therefore vary according
to the type of guard lock used. Thus, since the LockOut signal controls the activation of
this device, the status of the Lock_Fbk feedback signal will change at different times,
depending on the type of guard lock. This variability can be avoided by changing the value
of the Feedback Time parameter, which is the maximum delay accepted by the
Lock_Fbk signal switches status following a request to
activate the electromagnet. Clearly, the following condition must be met:
English
Feedback Time ≥ Electromagnet activation time
This will now be explained using a practical example.
8540780 • 10/07/2020 • Rev.38
185
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Example of operation in the “no Gate” mode
The guard lock used in the example continues to be locked when the electromagnet is not
energised. Therefore the "Interlock spring " option must be selected.
T
STATUS SIL 1/PL c output block that controls the guard lock electromagnet, the status of
LOCK FEEDBACK
indicates the status of the operations.
Lock_fbk
Output1
LockOut
Figure 77 – Example of operation in the no Gate mode
 The Guard Lock operator parameters are shown on the right. On the left there is an
example of an application diagram. The electromagnet feedback consists of two
contacts, one normally closed and one normally open. When the electromagnet is
energised the two contacts switch status.
Figure 78 shows the traces relative to the operation. These are described in detail below:
(1) At this time the user requests to unlock the guard lock. Th
OUTPUT1
(2) At this time the electromagnet is activated with a delay of "Unlock Time", after the
l
switches from LL0 to LL1.
(3) At this time the electromagnet is actually activated, 95ms after the command was
sent. This delay is due to the technical characteristics of the electromagnet. In any
case, 95ms is less than 100ms ("Feedback Time") and so no errors have occurred.
(4)
English
(5) At this time the electromagnet is actually deactivated, approx. 95ms after the
command was sent due to the technical characteristics of the device. The guard lock
is now locked.
(6)
OUTPUT1
186
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Figure 78 - Traces relative to “Guard Lock” block operation in the no gate mode.
Operation in the “with Gate” mode
In this case, the user must NOT
.
The Gate input must always be connected to an
E-GATE (safety gate
device) section on page 116) that verifies the status of
the door/gate.
The Lock_Fbk input must always be connected to a
LOCK
FEEDBACK section on page 118) that verifies the status
of the guard lock electromagnet.
The Output signal is LL1 (TRUE) if the safety guard is closed and locked. When an unlock
command is applied to the UnLock_cmd input, the Output signal is set to LL0 and the
guard lock is unlocked via the LockOut signal. The Output signal can also be set to LL0
(FALSE) when error conditions are present (e.g. open door with guard lock locked,
Feedback Time exceeding the maximum allowed, etc.).
8540780 • 10/07/2020 • Rev.38
187
English
The UnLock_cmd input can be connected freely in the
diagram and determines the request to unlock the guard lock (when set to LL1).
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
When the Unlock_cmd signal is detected, the LockOut signal unlocks the guard lock after
the UnLock Time, a parameter that can be defined by the user.
The time after which the electromagnet is activated depends entirely on the
technical/physical characteristics of the specific device and may therefore vary according
to the type of guard lock used. Thus, since the LockOut signal controls the activation of
this device, the status of the Lock_Fbk feedback signal will change at different times,
depending on the type of guard lock. This variability can be avoided by changing the value
of the Feedback Time parameter, which is the maximum delay accepted by the
Lock_Fbk signal switches status following a request to
activate the electromagnet. Clearly, the following condition must be met:
Feedback Time ≥ Electromagnet activation time
This will now be explained using a practical example.
Example of operation in the “with Gate” mode
STATUS SIL 1/PL c output that controls the guard lock electromagnet,
LOCK FEEDBAC
The status of the safety gate is monitored by the "Gate" input via the "E_GATE" input.
The guard lock used in the example continues to be locked when the electromagnet is not
energised. Therefore the "Interlock spring" option must be selected.
Figure 79 – Example of operation in the with Gate mode
 The Guard Lock operator parameters are shown on the right. On the left there is an
English
example of an application diagram. The electromagnet feedback consists of two
contacts, one normally closed and one normally open. When the electromagnet is
energised the two contacts switch status. The gate feedback consists of two normally
closed contacts.
188
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Figure 80 shows the traces relative to the operation. These are described in detail below:
(1)
OUTPUT1
(2) At this time the electromagnet is activated with a delay of "Unlock Time", after the
switches from LL0 to LL1.
(3) At this time the electromagnet is actually activated, 95ms after the command was
sent. This delay is due to the technical characteristics of the electromagnet. In any
case, 95ms is less than100ms ("Feedback Time") and so no errors have occurred.
(4) At this time the guard lock is unlocked and the user opens the gate, the FBK_GATE
signal switches from LL1 to LL0.
(5) At this time the user closes the gate and the FBK_GATE signal thus switches from
LL0 to LL1.
(6)
the gate closed condition, via the FBK_GATE signal, and sends a command to lock
English
(7) At this time the electromagnet is actually deactivated, approx. 95ms after the
command was sent due to the technical characteristics of the device. The guard lock
is now locked.
(8)
OUTPUT1
Figure 80 - Traces relative to “Guard Lock” block operation in the with gate mode.
8540780 • 10/07/2020 • Rev.38
189
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Operation in the “Mandatory Gate Opening” mode
In this case, the user must NOT
"Mandatory Gate opening" parameter.
The Gate input must always be connected to an
element (see the E-GATE (safety gate
device) section on page 116) that verifies the status
of the door/gate. NB: IN THIS OPERATING MODE
THE "GATE" INPUT MUST CONFIRM THE OPENING
OF THE GATE.
The Lock_Fbk input must always be connected to
(see the LOCK
FEEDBACK section on page 118) that verifies the status of the guard lock electromagnet.
The UnLock_cmd input can be connected freely in the diagram and determines the request
to unlock the guard lock (when set to LL1).
The Output signal is LL1 (TRUE) if the safety guard is closed and locked. When an unlock
command is applied to the UnLock_cmd input, the Output signal is set to LL0 and the
guard lock is unlocked via the LockOut signal.
The Output signal can also be set to LL0 (FALSE) when error conditions are present (e.g.
open door with guard lock locked, Feedback Time exceeding the maximum allowed, etc.).
When the Unlock_cmd signal is detected, the LockOut signal unlocks the guard lock after
the UnLock Time, a parameter that can be defined by the user.
The time after which the electromagnet is activated depends entirely on the
technical/physical characteristics of the specific device and may therefore vary according
to the type of guard lock used. Thus, since the the LockOut signal controls the activation
of this device, the status of the Lock_Fbk feedback signal will change at different times,
depending on the type of guard lock. This variability can be avoided by changing the value
of the Feedback Time parameter, which is the maximum delay accepted by the
Lock_Fbk signal switches status following a request to
activate the electromagnet. Clearly, the following condition must be met:
Feedback Time ≥ Electromagnet activation time
English
This will now be explained using a practical example.
190
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Example of operation in the “Mandatory Gate Opening” mode
SWITCH
STATUS SIL 1/PL c output that controls the guard lock electromagnet,
LOCK FEEDBACK
the status of the operations.
The status of the safety gate is monitored by the "Gate" input via the "E_GATE" input block,
the "Mandatory Gate opening" parameter is selected.
The guard lock used in the example continues to be locked when the electromagnet is not
energised. Therefore the "Interlock spring" option must be selected.
Figure 81 Example of operation in the Mandatory Gate Opening mode
 The Guard Lock operator parameters are shown on the right. On the left there is an
example of an application diagram. The electromagnet feedback consists of two
contacts, one normally closed and one normally open. When the electromagnet is
energised the two contacts switch status. The gate feedback consists of two normally
closed contacts.
Figure 82 shows the traces relative to the operation. These are described in detail below:
(1)
switches from LL0 to LL1.
(3) At this time the electromagnet is actually activated, 95ms after the command was
sent. This delay is due to the technical characteristics of the electromagnet. In any
case, 95ms is less than 100ms ("Feedback Time") and so no errors have occurred.
(4) At this time the guard lock is unlocked and the user opens the gate. The FBK_GATE
signal switches from LL1 to LL0.
(5) At this time the user closes the gate and the FBK_GATE signal thus switches from
LL0 to LL1.
(6)
the gate closed condition, via the FBK_GATE signal, and sends a command to lock
(7) At this time the electromagnet is actually deactivated, approx. 95ms after the
command was sent due to the technical characteristics of the device. The guard lock
is now locked.
8540780 • 10/07/2020 • Rev.38
191
English
(2) At this time the electromagnet is activated with a delay of "Unlock Time", after the
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
(8)
Figure 82 - Traces relative to “Guard Lock” block operation in the “Mandatory gate opening mode”.
Mandatory
condition if it does not detect that the gate has been opened following a request to
unlock the guard lock. This concept is highlighted in the figure below
(Figure 83
diagram in Figure 81, so that the error is shown in the graph.
As previously described, the operator requests unlocking of the guard lock, but the
door is never opened, and this condition is indicated by the "FBK_GATE" signal,
which stays at LL1. Thus, when the guard lock unlocking/locking cycle ends, at time
English
to LL1.
192
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
English
Figure 83 – Example of possible error condition in "Mandatory gate opening" mode. In this case the
error condition is generated because the gate has not been opened, even though a request has been
sent to unlock/lock the guard lock.
8540780 • 10/07/2020 • Rev.38
193
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
COUNTER OPERATORS
COUNTER (max number = 16)
COUNTER operator is a pulse counter that sets
output Q to 1 (TRUE) as soon as the desired
count is reached.
There are 3 operating modes:
1) AUTOMATIC
2) MANUAL
3) AUTOMATIC + MANUAL
Following are illustrated 3 examples for each
operating mode. The counter value is 6 for all
examples.
1) AUTOMATIC: The counter generates a pulse duration equal to 2 x Tcycle (this value is
indicated in the REPORT) as soon as the set count is reached. If the CLEAR pin is not
enabled this is the default mode.
English
2) MANUAL: The counter leads to 1 (TRUE) the output Q as soon as it reaches the set
count. The output Q goes to 0 (FALSE) when the signal CLEAR is activated.
194
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
3) MANUAL/AUTOMATIC: The counter generates a pulse duration equal to the system
response time as soon as the set count is reached. If the CLEAR signal is
activated, the internal count goes back to 0.
Parameters
Enable Clear: If selected enables the signal CLEAR in order to restart the counter setting
output Q to 0 (FALSE). It also offers the possibility to select the operation mode.
Counter type: If ENABLE CLEAR is not selected operation is AUTOMATIC (example 1).
If ENABLE CLEAR is selected, operation is selectable between MANUAL (example 2)
MANUAL/AUTOMATIC (example 3).
or
Ck down: Enables counting down.
Two-way: If selected it enables counting on both the rising and falling edges.
Counter value: If selected, it allows the current counter value to be outputted from the
delay block. This output can be sent as input to one or more COUNTER COMPARATOR
blocks.
COUNTER COMPARATOR
Gets as an input the counter value of an
operator COUNTER and compares the
received value with a threshold set by the
user.
The OUT output will be 0 (FALSE) as long as the
COUNTER value is lower than the threshold
value. The OUT output will be set to 1 (TRUE)
for COUNTER values equal to or higher than the
threshold value.
 The COUNTER COMPARATOR operator can only be connected to the Counter value of
English
a COUNTER operator. Multiple COUNTER COMPARATOR can be also connected to a
single COUNTER operator.
8540780 • 10/07/2020 • Rev.38
195
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
TIMER OPERATORS (max number = 32 with M1, 48 with M1S)
TIMER operators allow you to generate a signal (TRUE or FALSE) for a user-definable period.
MONOSTABLE
The MONOSTABILE operator generates a level 1 (TRUE)
output activated by the rising edge of the input and
remains in this condition for the set time.
Parameters
Time: The delay can be set to between 10 ms and
1098,3 s.
Scale: The user can choose two different scales for the time T to be set.

10 ms...60 s, step 10 ms

60,1 s...1098,3 s, step 100 ms
Rising edge: If selected, the output is set to 1 (TRUE) on the input signal's rising edge where
it remains for the set time, which can be extended for as long as the input stays at 1 (TRUE).
In
Rising edge
T
T
T
T = set time
Out
If not selected the logic is inverted, the output is set to 0 (FALSE) on the input signal's
falling edge, where it remains for the set time, which can be extended for as long as the
input stays at 0 (FALSE).
Falling edge
In
English
T
T
T
T = set time
Out
Retriggerable: If selected the time is reset each time the input status changes.
196
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MONOSTABLE_B
This operator generates a level 1 (TRUE) output
activated by the rising/falling edge of the input and
remains in this condition for the set time t.
Parameters
Time: The delay can be set to between 10 ms and
1098,3 s.
Scale: The user can choose two different scales for the
time T to be set.

10 ms...60 s, step 10 ms

60,1 s...1098,3 s, step 100 ms
Rising edge:
- If selected provides a level 1 (TRUE) in the OUT output if a rising edge is detected on
the IN input.
- If not selected the logic is inverted, the OUT output is set to 0 (FALSE) on the IN signal's
falling edge, where it remains for the set time.
 Unlike the MONOSTABLE operator, the Out output of MONOSTABLE_B does not
maintain a level 1 (TRUE) for a time which exceeds the set period T.
Rising edge
T = set time
Falling edge
English
T = set time
Retriggerable: If selected the time is reset each time the input status changes.
8540780 • 10/07/2020 • Rev.38
197
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
PASSING MAKE CONTACT
In the PASSING MAKE CONTACT operator the output
follows the signal on the input. However, if this is 1
(TRUE) for longer than the set time, the output
changes to 0 (FALSE). When there is an input falling
edge, the timer is cleared.
Rising edge
T = set time
Parameters
Time: The delay can be set to between 10 ms and 1098,3 s.
Scale: The user can choose two different scales for the time T to be set.

10 ms...60 s, step 10 ms

60,1 s...1098,3 s, step 100 ms
Retriggerable: If selected the time is not reset when there is an input falling edge.
The output stays 1 (TRUE) for all the selected time. When there is a new input rising edge,
the timer restart again.
Rising edge
English
T = set time
198
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
DELAY
DELAY operator applies a delay to a signal by setting
the output to 1 (TRUE) after the set time, against a
change in the level of the input signal.
Parameters
Time: The delay can be set to between
10 ms and 1098,3 s.
Scale: The user can choose two different scales for
the time T to be set.

10 ms...60 s, step 10 ms

60,1 s...1098,3 s, step 100 ms
Rising edge: If selected, the delay starts on the input signal's rising edge at the end of which
the output changes to 1 (TRUE) if the input is 1 (TRUE) where it remains for as long as the
input stays at 1 (TRUE).
Rising edge
T = set time
If not selected the logic is inverted, the output is set to 1 (TRUE) on the input signal's rising
edge, the delay starts on the input signal's falling edge, at the end of the set time the
output changes to 0 (FALSE) if the input is 0 (FALSE) otherwise it remains 1 TRUE.
Rising edge
In
T
T
T
T
T = set time
Out
English
Retriggerable: If selected the time is reset each time the input status changes.
8540780 • 10/07/2020 • Rev.38
199
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
LONG DELAY
The LONG DELAY operator allows to apply a delay (up to
more than 15 hours) to a signal bringing to 1 (TRUE) the
Out output after the set time, in case of a level variation
of the signal on the In input.
Parameters
Time: The delay can be set from 0.5 s to 54915 s.
Scale: The user can choose two different scales for the
time T to be set.

0,5 s...3000 s, step 0,5 s

3005 s...54915 s, step 5 s
Rising edge: If selected, the delay starts on the input signal's rising edge at the end of which
the output changes to 1 (TRUE) if the input is 1 (TRUE) where it remains for as long as the
input stays at 1 (TRUE).
Rising edge
T = set time
If not selected the logic is inverted, the output is set to 1 (TRUE) on the input signal's rising
edge, the delay starts on the input signal's falling edge, at the end of the set time the
output changes to 0 (FALSE) if the input is 0 (FALSE) otherwise it remains 1 TRUE.
Falling edge
In
T
T
T
T
T = set time
Out
English
Retriggerable: If selected the time is resetted every time the input status changes.
Timer value: When selected the actual value of the timer is available as output which can
be sent as input to a DELAY COMPARATOR block.
200
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
DELAY COMPARATOR
This operator compares the timer value
outputted by a LONG DELAY timer and
connected to the DELAY COMPARATOR
The OUT output will be 0 (FALSE) as long as
the timer value is lower than the threshold
value. The OUT output will be set to 1 (TRUE)
for Timer values equal to or higher than the
threshold value.
Parameters
Threshold: The threshold can be set from 0,5 s to 54910 s.
Scale: The user can choose two different scales for the time T to be set.

0,5 s...3000 s, step 0,5 ms

3005 s...54910 s, step 5 s
 The Delay Comparator operator can only be connected to the Timer value output of a
LONG DELAY operator. Multiple DELAY COMPARATORS can be connected to each
LONG DELAY operator.
DELAY LINE
This operator applies a delay to a signal by setting the
If "In" returns to 1(TRUE) before the end of the set time
approximately twice the system response time and
delayed by the set time.
Parameters
Time: The delay can be set to between 10 ms and 1098,3 s.
IN
IN
OUT
t
t
OUT
2xtcycle


English
Scale: The user can choose two different scales for the time T to be set.
10 ms...60 s, step 10 ms
60 s...1098,3 s, step 100 ms
8540780 • 10/07/2020 • Rev.38
201
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
 Unlike the DELAY operator, the DELAY LINE operator does not filter any interruptions
in the IN input which are shorter than the set time.
 This operator is recommended when using delayed OSSD (the OSSD must be
programmed with RESTART MANUAL).
LONG DELAY LINE
This operator applies a delay to a signal by
the
set time when a falling edge is detected on
If In returns to 1(TRUE) before the end of the
negative impulse lasting approximately twice
the system response time and delayed by the
set time.
Parameters
Time: The delay can be set from 0.5 s to 54915 s.
2xtcycle
Scale: The user can choose two different scales for the time T to be set.

0,5 s...3000 s, step 0,5 s

3005 s...54915 s, step 5 s
 Unlike the DELAY operator, the LONG DELAY LINE operator does not filter out any
English
interruptions to the IN input that are shorter than the set time.
 This operator is useful when using delayed OSSDs (the OSSD must be programmed
with MANUAL RESTART).
202
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
CLOCKING
The CLOCKING operator generates a square wave output
which period is set by the user. The output is enabled if
Clocking has up to 7
inputs to control output Duty Cycle.
Parameters
Time: The period can be set to between 100 ms and
1098,3 s.
Scale: The user can choose two different scales for the
time T to be set.


100 ms...60 s, step 10 ms
60,1 s...1098,3 s, step 100 ms
Duty cycle selection: Up to 7 inputs can be selected for 7 different output signal duty
cycles. Depending on the active input, the OUT clock signal has its corresponding duty
cycle. EN input must always be to 1 (TRUE).
Refer to the table below for all possible values of Duty cycle selectable by the user.
EN
0
1
1
1
1
1
1
1
1
1
10%
0
0
1
0
0
0
0
0
0
1
20%
0
0
0
1
0
0
0
0
0
0
30%
0
0
0
0
1
0
0
0
0
0
DUTY CYCLE CHOICE
40%
60%
0
0
0
0
0
0
0
0
0
0
0
1
0
1
0
0
0
0
0
0
70%
0
0
0
0
0
0
0
1
0
0
80%
0
0
0
0
0
0
0
0
1
1
OUT
0
50%
10%
20%
30%
40%
60%
70%
80%
90%
 The circuit upstream clocking operator must ensure the presence of only one input
English
signal in addition to enable EN (excluded the pair 10% 80%).
 The presence on EN input of high level (TRUE), generates an output signal with a duty
cycle = 50%.
8540780 • 10/07/2020 • Rev.38
203
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MUTING FUNCTION
The Muting function generates a temporary, automatic interruption of electro-sensitive protective
device (ESPE) operation in order to permit normal transit of material through the guarded opening.
In other words, when the system recognizes the material and distinguishes between this and any
operator (in a potentially dangerous situation), it is enabled to bypass the safety device temporarily,
allowing the material to pass through the guarded opening.
MUTING OPERATORS (max number = 4 with M1, 8 with M1S)
"Concurrent" MUTING
The activation of the Muting function occurs
following interruption of the sensors S1 and S2
beam (the order does not matter) within a time
range from 2s and 5s chosen by the operator (or
S3 and S4 with material that is moving in the
direction opposite).
The MUTING operator with "Concurrent" logic
performs muting of the input signal through
sensor inputs S1, S2, S3 and S4.
 Preliminary condition: The Muting cycle
can only start if all the sensors are 0
(FALSE) and inputs are 1 (TRUE) (safety
curtain free).
Parameters
Timeout (sec): Sets the time, between 10 secs and unlimited, within which the Muting cycle
must end. If the cycle is not complete at the end of this time, Muting is immediately
discontinued.
With Enable: When checked let the user the possibility of enabling or not enabling the
Muting function. Otherwise the Muting function is always enabled.
Enable Type:
There are two Enable modes: Enable/Disable and Enable Only.
 If “Enable/Disable” is selected the Muting cycle cannot start if Enable is stucked at 1
(TRUE) or 0 (FALSE). It is only activated with a rising edge of the signal. On the other
hand the falling edge disables Muting regardless of the current condition.
 If “Enable Only” is selected the Muting function cannot be disabled. It is mandatory
cycle.
Direction: This let the user to choose the order in which the sensors are occupied. If set to
BIDIR they can be occupied in both directions, from S1&S2 to S3&S4 and from S3&S4 to
S1&S2, if set to UP they can be occupied from S1&S2 to S3&S4 and if set to DOWN from
S3&S4 to S1&S2.
English
Muting Closing: There are two types, CURTAIN and SENSOR. If you select CURTAIN muting
closes when the input signal rises, if you select SENSOR it closes when the third sensor has
been cleared.
204
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Select CURTAIN
S1
S2
Input
S3
S4
Muting
0
1
1
1
1
0
0
0
0
0
1
1
1
0
0
0
1
1
1
X
X
0
1
1
0
0
0
0
1
1
1
0
0
0
0
0
1
1
1
0
0
0
1
1
1
1
0
0
S4
0
0
0
0
1
1
1
1
0
Muting
0
0
1
1
1
1
1
0
0
Muting
active
Select SENSOR
S1
0
1
1
1
1
0
0
0
0
S2
0
0
1
1
1
0
0
0
0
Input
1
1
1
X
X
0
1
1
1
S3
0
0
0
0
1
1
1
0
0
Muting
active
Blind Time: Only with Muting Close=Curtain, blind time is enabled when it is known that
after a complete transition of the pallet (muting cycle close) some protruding objects could
still occupy the light curtain and send the input to 0 (FALSE). During blind time the input
remains 1 (TRUE). Blind Time can range from 250 ms to 1 second.
Sensors Time: Sets the maximum time (between 2 and 5 seconds) between activating two
muting sensors.
Minimum sensors time: If selected, allows the activation of Muting cycle only if a time >150ms
elaps between the activation of the sensor 1 and sensor 2 (or sensor 4 and 3).
MUTING “L”
The activation of the Muting function occurs
following interruption of the sensors S1 and S2
beam (the order does not matter) within a time
range from 2s and 5s decided by the operator.
The state of the Muting ends after the liberation of
the guarded opening.
muting of the input signal through sensor
inputs S1 and S2.
 Preliminary condition: The Muting cycle
can only start if S1 and S2 are 0 (FALSE) and
the input = 1 (TRUE) (safety curtain free).
Timeout (sec): Sets the time, between 10 secs and unlimited, within which the Muting cycle
must end. If the cycle is not complete at the end of this time, Muting is immediately
discontinued.
With Enable: When checked let the user the possibility of enabling or not enabling the
Muting function. Otherwise the Muting function is always enabled.
8540780 • 10/07/2020 • Rev.38
205
English
Parameters
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Enable Type:
There are two Enable modes: Enable/Disable and Enable Only.
 If “Enable/Disable” is selected the Muting cycle cannot start if Enable is stucked at 1
(TRUE) or 0 (FALSE). It is only activated with a rising edge of the signal. On the other
hand the falling edge disables Muting regardless of the current condition.
 If “Enable Only” is selected the Muting function cannot be disabled. It is mandatory
cycle.
Sensors Time: Sets the maximum time (between 2 and 5 seconds) between activating two
muting sensors.
End of Muting time: sets the maximum time (from 2.5 to 6 seconds) that must elapse
between the release of the first sensor and the release of guarded opening.
The end of this time determines the end of the Muting function.
Blind Time: enabled when it is known that after a complete transition of the pallet (muting
cycle close) some protruding objects could still occupy the light curtain and send the input
to 0 (FALSE). During blind time the input remains 1 (TRUE). Blind Time can range from
250 ms to 1 second.
"Sequential" MUTING
The activation of the Muting function occurs
following sequential interruption of the sensors S1
and S2, subsequently S3 and S4 sensors (without
time limit). If the pallet proceeds in the opposite
direction the correct sequence is: S4, S3, S2, S1.
The MUTING operator with "Sequential" logic
performs muting of the input signal through
sensor inputs S1, S2, S3 and S4.
 Preliminary condition: The Muting cycle
can only start if all the sensors are 0
(FALSE) and the input = 1 (TRUE) (safety
curtain free).
Parameters
Timeout (sec): Sets the time, between 10 secs and unlimited, within which the Muting cycle
must end. If the cycle is not complete at the end of this time, Muting is immediately
discontinued.
English
With Enable: When checked let the user the possibility of enabling or not enabling the
Muting function. Otherwise the Muting function is always enabled.
Enable Type:
There are two Enable modes: Enable/Disable and Enable Only.
 If “Enable/Disable” is selected the Muting cycle cannot start if Enable is stucked at 1
(TRUE) or 0 (FALSE). It is only activated with a rising edge of the signal. On the other
hand the falling edge disables Muting regardless of the current condition.
 If “Enable Only” is selected the Muting function cannot be disabled. It is mandatory
cycle.
206
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Direction: This let the user to choose the order in which the sensors are occupied. If set to
BIDIR they can be occupied in both directions, from S1 to S4 and from S4 to S1, if set to UP
they can be occupied from S1 to S4 and if set to DOWN from S4 to S1.
Muting Closing: There are two types, CURTAIN and SENSOR. If you select CURTAIN muting
closes when the input signal rises, if you select SENSOR it closes when the third sensor has
been cleared.
Select CURTAIN
S1
0
1
1
1
1
1
0
0
0
0
0
S2
0
0
1
1
1
1
1
0
0
0
0
Input
1
1
1
X
X
X
X
0
1
1
1
S3
0
0
0
0
1
1
1
1
1
0
0
S4
0
0
0
0
0
1
1
1
1
1
0
Muting
0
0
1
1
1
1
1
1
0
0
0
S4
0
0
0
0
0
1
1
1
1
1
0
Muting
0
0
1
1
1
1
1
1
1
0
0
Muting
active
Select SENSOR
S1
0
1
1
1
1
1
0
0
0
0
0
S2
0
0
1
1
1
1
1
0
0
0
0
Input
1
1
1
X
X
X
X
0
1
1
1
S3
0
0
0
0
1
1
1
1
1
0
0
Muting
active
English
Blind Time: Only with Muting Close=Curtain, blind time is enabled when it is known that
after a complete transition of the pallet (muting cycle close) some protruding objects could
still occupy the light curtain and send the input to 0 (FALSE). During blind time the input
remains 1 (TRUE). Blind Time can range from 250 ms to 1 second.
8540780 • 10/07/2020 • Rev.38
207
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MUTING “T”
The activation of the Muting function occurs
following interruption of the sensors S1 and S2 beam
(the order does not matter) within a time range from
2s and 5s decided by the operator.
The state of the Muting ends after the liberation of
at least one of the two sensors.
performs
muting of the input signal through sensor
inputs S1 and S2.
 Preliminary condition: The Muting cycle can only start if S1 and S2 are 0 (FALSE) and
the inputs are 1 (TRUE) (safety curtain free).
Parameters
Timeout (sec): Sets the time, between 10 secs and unlimited, within which the Muting cycle
must end. If the cycle is not complete at the end of this time, Muting is immediately
discontinued.
With Enable: When checked let the user the possibility of enabling or not enabling the
Muting function. Otherwise the Muting function is always enabled.
Enable Type:
There are two Enable modes: Enable/Disable and Enable Only.
 If “Enable/Disable” is selected the Muting cycle cannot start if Enable is stucked at 1
(TRUE) or 0 (FALSE). It is only activated with a rising edge of the signal. On the other
hand the falling edge disables Muting regardless of the current condition.
 If “Enable Only” is selected the Muting function cannot be disabled. It is mandatory
cycle.
English
Sensors Time: Sets the maximum time (between 2 and 5 seconds) between activating two
muting sensors.
208
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MUTING OVERRIDE (max number = 4)
The OVERRIDE function must be used when the machine stops
due to incorrect Muting activation sequences with the
material obstructing the guarded opening.
This function activates the OSSD outputs making it possible to
remove the material that is obstructing the guarded opening.
The operator must be connected after the Muting
operator (Muting OUTPUT directly to the Override
INPUT). It permits override of the directly connected
Muting Input.
Override can be activated only if Muting is not active
(INPUT=0) and at least one Muting sensor is occupied
(or the safety curtain is occupied).
Override ends when the light curtain and sensors are cleared and the OverOut switches to
logical 0 (FALSE).
Override can be set to Spring Return Key or Pushbutton.
Override with spring return key.
This function must be activated maintaining the Override command active
(OVERRIDE=1) during all subsequent operations. However, a new Override can be
activated, de-activating ad re-activating the command.
When the light curtain and sensors are cleared (gap free) or on expiry of the timeout,
Override ends without the need for further commands.
Override with pushbutton
This function is enabled activating the Override command (OVERRIDE=1).
Override ends when the light curtain and sensors are cleared (gap free) or on expiry
of the timeout. The function can be restarted only if the Override command is
reactivated (OVERRIDE=1).
Parameters
With sensors occupied: Must be selected with "T" sequential, simultaneous muting;
with "L" muting, must not be selected.
 Otherwise, a Warning is displayed in the compilation phase and in the report.
 The user must adopt additional safety measures during the Override phase.
Conditions to be checked for activation of Override
"With occupied
sensors" selected
Occupied
sensor
X
X
X
X
-
Light
curtain
occupied
X
X
Input
Override
request
Override
output
0
0
0
0
1
1
1
1
1
1
1
1
English
Timeout (sec): Used to set the time, between 10 sec and infinity, by which the Override
function must end.
Override mode: Used to configure the type of Override (pulsed or maintained action).
With OverOut: Used to activate an Override active Signaling output (active when high).
With Request: Used to activate a Signaling output (active when high) indicating that the
Override function can be activated.
8540780 • 10/07/2020 • Rev.38
209
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Manual Reset:
 Should the INPUT be active (TRUE), the reset enables the output of the function block.
 Should the INPUT be not active (FALSE), the output of the function block follows the
OVERRIDE request.
There are two types of reset: Manual and Monitored. When Manual is selected the system
only verifies the signal's transition from 0 to 1. If Monitored is selected the double transition
from 0 to 1 and then back to 0 is verified.
5s > t1 > 250 ms
t2 = 250 ms
English
t = 250 ms
210
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
ANALOG OPERATORS (M1S only)
Analog Comparator
This operator works as a comparator of an analog signal
connected.
The threshold value to be entered will be in engineering
units (eg Kg, °C) and must respect the limits defined by
the functional block connected ot the
input.
When the input value is lower than the threshold, the
output Q will be at level 0 (FALSE).
When the input value is equal or greater than to the
threshold, the output Q will be at level 1 (TRUE).
The
input can be connected to:
 the analogue output of an “ANALOG COMPARISON” input block
 the analogue output of a “MATH” block.
The hysteresis used in the comparison will be the one programmed in the functional block
connected upstream.
Window comparator:
When the window comparator is enabled the user can choose a high threshold value and a
low threshold value.
The output state of the window comparator depends on the value of the measurement and
on its current state. There are two possible states:
 OUT OF WINDOW: the output of the comparator is a logic 0 (FALSE)
 IN WINDOW: the output of the comparator is a logic 1 (TRUE)
If the meas
English
In the following picture is given an example of the behavior of the window comparator.
8540780 • 10/07/2020 • Rev.38
211
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Example of window comparator behavior
When the window comparator is not enabled, the output state of the threshold
comparator depends on the value of the measurement and on its current state.
There are two possible states:
 OVER THRESHOLD: the output of the comparator is a logic 1 (TRUE)
 UNDER THRESHOLD: the output of the comparator is a logic 0 (FALSE)
e threshold
-
English
s stay
212
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
In the following picture is given an example of the behavior of the threshold
comparator.
English
Example of threshold comparator behavior
8540780 • 10/07/2020 • Rev.38
213
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Math (max number = 16)
The Math operator performs the sum (or the difference) between analog signals coming
from an ANALOG INPUT blocks.
The signals must have the same physical unit and must be generated by sensors of the
same type (4/20mA, 0/20mA or 0/10V) but they can have different scales.
Parameters
Input number:
Sum:
ssible to sum from 2 to 8 signals.
Difference:
2 signals.
Operation:
Sum: The result will be the sum of all the inputs.
Difference: The result of the operation will be the
absolute value of the difference |(Ain1 - Ain2)| with
relative sign (output Sign).
The Sign output will be at 0 (FALSE) if the sign of the
difference is positive, while it will be at 1 (TRUE) if the
sign is negative.
English
Arithmetic average:
Setting Arithmetic Average box with Operation as
Sum, the output value of this operator will be the
arithmetic average of the various inputs.
214
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Equality check (max number = 16)
This operator checks if two analog inputs are
equal within a selectable value.
The signals must have the same physical unit
and must be generated by sensors of the same
type (4/20mA, 0/20mA or 0/10V) but they can
have different scales.
The output Q will be 1 (TRUE) when the
condition of equality is verified. If the two
signals differs of an amount greater than the
allowed error then the
.
Parameters
Allowed error:
Corresponds to the maximum tolerance between the difference of the values AN1 and AN2.
Force output FALSE on anomaly:
English
ue value
assumes a full scale value), the output of the block will remain at 0 (FALSE) as in the
presence of different signals.
8540780 • 10/07/2020 • Rev.38
215
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MISCELLANEOUS FUNCTION BLOCKS
SERIAL OUTPUT (max number = 4 with M1, 8 with M1S)
The Serial Output operator outputs the status of up to 8
inputs, serialising the information.
Operating principles.
This operator outputs the status of all the connected
inputs in two different ways:
Asynchronous serialisation:
1) The status of the line in the idle condition is 1 (TRUE);
2) The start data transmission signal is 1 bit = 0 (FALSE);
3) Transmission of n bits with the status of the connected inputs encoded using the Manchester
method:
- Status 0: rising edge of the signal at the centre of the bit
- Status 1: falling edge of the signal at the centre of the bit
4) Intercharacter interval is 1 (TRUE) to allow synchronisation of an external device.
Therefore, with the Asynchronous method the Clock output is not present.
Synchronous serialisation:
1) The output and the clock in the idle condition are 0 (FALSE);
2) Transmission of n bits with the input status using OUTPUT as data, CLOCK as the timing base;
3) Intercharacter interval is 0 (FALSE) to allow synchronisation of an external device.
Parameters
Inputs number: Defines the number of inputs of the function block, which may be 2÷8
(asynchronous) or 3÷8 (synchronous).
English
Mode select: The user can choose two ways of tranmission: Asynchronous and Synchronous.
Operating principles
op of this page.
Bit length (ms): Enter the value corresponding to the length of each single bit (input n) in the pulse
train that makes up the transmission.
- 40 ms ÷ 200 ms
(Step 10 ms)
- 250 ms ÷ 0.95 s
(Step 50 ms)
Intercharacter interval (ms): Enter the time that must pass between the transmission of one pulse
train and the next.
- 100 ms ÷ 2.5 s (Step 100 ms)
- 3s÷6s
(Step 500 ms)
216
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
NETWORK (max number = 1)
The Network operator is used to distribute Stop
and Reset commands via a simple local network.
Use Network_in and Network_out to exchange
START, STOP and RUN signals between the
different nodes.
Operating principles.
This operator allows stop and reset commands to
be simply distributed in a local Mosaic network.
The Network operator requires the following:
1) the Network_In input (single or double) must be connected to the Network_Out output of
the preceding unit in the local network.
2) the Network_Out (could be a STATUS or OSSD output), must be connected to the
Network_in input of the next unit in the local network.
3) the Stop_In and Reset_In inputs must be connected to input devices that act as Stop (e.g.
E-STOP) and Reset (e.g. SWITCH), respectively.
4) the In input can be connected freely in the diagram (e.g. input function blocks or results of
logical combinations).
5) Output can be connected freely in the diagram. Output is 1 (TRUE) when the IN input is 1
(TRUE) and the function block has been restarted.
Parameters
Enable Reset Network: when selected allows the distribution network to reset the function block.
If not enabled, the function block can only be reset via the local Reset_In input.
Enable error out: if selected, it enables the Error_Out output that can be used to signal, with a logic
1 (TRUE), the presence of a failure.
Global Reset Enable: if selected, the operator can restart the entire system with the reset button
from any node in the network. If deselected the operator can restart all the nodes that have been
not caused the stop from anywhere in the network, except the node that has caused the stop (this
node has to be restarted with its own reset).
Stop cause: (only M1S) if selected, it enables the Network_stop and Local_stop outputs and
indicates the cause of the STOP status. These outputs are normally at 0 with the system in RUN and
the Output at 1 (TRUE). If a network stop is requested, the Network_stop output increases to 1(TRUE).
If the Output output goes to 0 due to the In input or the Stop_in input, the Local_stop output goes
to 1 (TRUE). The outputs will remain in this status until the next main reset.
 The RESET command must be installed outside the zone of operation in a position where the
zone of operation and the entire work area concerned are clearly visible.
 The maximum number of MASTER modules that can be connected in network
configuration is equal to 10.
 Each Master module can have a maximum of 9 expansion modules connected.
1.
2.
3.
4.
5.
The Net_out of the various nodes are in the 0 (FALSE) condition;
The STOP signal is sent via the Net_out line;
When the RESET command is pressed on one of the nodes all the nodes that are present are started when the
START signal is sent;
As the end result, the Net_out of all the connected nodes is in condition 1 (TRUE) if the various Net_in inputs
are in condition 1 (TRUE);
The RUN signal is sent via the network of the 4 nodes present.
8540780 • 10/07/2020 • Rev.38
217
English
Condition 1:
With reference to the Figure 86 and Figure 87, at power-on:
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Condition 2:
With reference to the Figure 86 and Figure 87, when the emergency stop is pressed in one of the
four nodes:
1. The Net_out moves to condition 0 (FALSE);
2. The STOP signal is sent via the Net_out line;
3. The next node receives the stop code and deactivates the output;
4. The stop command generates the stop code for all Net_in and Net_out lines;
5. As the end result, the Net_out of all the connected nodes is in condition 0 (FALSE).
6. When the emergency stop is restored to the normal position, all the nodes can be restarted by sending the START signal
with a single reset. The latter condition does not occur when ENABLE RESET NETWORK is not enabled. In that case, the
local reset method must be used. The system will employ about 4s to restore all the outputs of the blocks that make up the
network.
 Perform a local reset of the module which caused the network shutdown, to restore its
safety output.
Response Time
The max response time of the network starting from emergency stop is given by the formula:
(Master M1) tr = 11.3 ms + [175.3 ms x (number of controllers – 1)]
(Master M1S) tr = 12.7 ms + [232.7 ms x (number of controllers – 1)]
 The max number of connected Master must be 10.
Emergency Stop Pressing
Master M1
Master M1S
MASTER n°1
MASTER n°2
MASTER n°3
MASTER n°4
trMASTER1
trMASTER2
trMASTER3
trMASTER4
11.3 ms
12.7 ms
186.6 ms
245,4 ms
362 ms
478.1 ms
537.2 ms
710.8 ms
Master1
Master4
Master2
Master3
Condition 3:
With reference to the Figure 84 and Figure 85, when the IN input of the NETWORK function block of
one of the 4 nodes moves to condition 0 (FALSE):
1.
2.
3.
4.
The local OUTPUT moves to condition 0 (FALSE);
The RUN signal continues to be sent via the Network_out lines;
The states of the remaining nodes remain unchanged;
In that case, local reset must be used. The Reset-in LED flashes to indicate this condition. This condition is
signaled by the corresponding LED flashing Reset_In entrance.
The affected node will be restarted with its own reset (if 'Reset Global Reset' is not selected).
English
The Network_in input and the Network_out output can only be mapped to the I/O pins of the
MASTER.
218
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Master M1 signals with Network operative
NETWORK FUNCTIONAL BLOCK SIGNALS
Network in
STATUS
(1)
Network out (OSSD)
Network out
(STATUS)
Reset in
LED
FAIL EXT
IN (1)
OSSD (2)
STATUS
IN (3)
STOP
OFF
OFF
RED
OFF
OFF
CLEAR
OFF
BLINKING
RED/GREEN (BLINKING)
BLINKING
BLINKING
RUN
OFF
ON
GREEN
ON
ON
FAIL
ON
BLINKING
-
-
-
Corresponding to the input where is wired Network IN
(2) Corresponding to the input where is wired Network OUT
(3) Corresponding to the input where is wired Reset IN
English
Figure 84 - NETWORK function block scheme example (Category 2)
8540780 • 10/07/2020 • Rev.38
219
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Figure 85 - NETWORK function block scheme example (Category 4)
English
Example of application in Category 2 according to ISO 13849-1:
Network data flow
Figure 86
220
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Network parameters for the PL calculation
Architecture:
Cat.2
Diagnostic coverage:
DC = 90%
Reliability of Module M1:
MTTFd = 437 (years)
Logical block diagram of a safety function using the network
INPUT
M1 n°1
M1 n°2
M1 n°3
M1 n°4
OUTPUT
LOGIC (NETWORK)
Example of application in Category 4 according to ISO 13849-1:
Network data flow
Figure 87
Architecture:
Cat.4
Diagnostic coverage:
DC = 99%
PFH Module M1:
PFHd = 6,86E-09 (hour-1)
8540780 • 10/07/2020 • Rev.38
English
Network parameters for the PL calculation
221
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Logical block diagram of a safety function using the network
INPUT
M1 n°1
M1 n°2
M1 n°3
M1 n°4
OUTPUT
LOGIC (NETWORK)
RESET M1
This operator generates a system Reset when there
is a double OFF-ON-OFF transition on the
corresponding input which lasts less than 5 s.
IN
t
t < 5s
 If > 5s, RESET is not generated.
 It can be used to reset faults without disconnecting system power.
OSSD EDM (M1S only, max number = 32)
English
The OSSD EDM (External Device Monitoring)
operator allows to control an EDM feedback
related to a safety output using a generic Mosaic
input.
The Output can only be connected to one safety
output functional block (OSSD, single OSSD,
Relay). This output functional block must have
the K external time monitor deactivated.
 OSSD output connected downstream is at high level (TRUE) -> the Fbk_K signal must
be at low level (FALSE) (within the set delay) and vice versa.
 If the delay is not respected, the Output of the OSSD EDM block goes to low level
(FALSE) and the anomaly is signaled by the flashing of the CLEAR led corresponding
to the OSSD in error.
If Enable Error Out of the connected output is selected, this output is set to high level
(TRUE) when an external FBK error is detected (example: exceeded the external time K).
Example of OSSD with correct Fbk signal:
In this case ERROR OUT=FALSE
222
Example of OSSD with incorrect Fbk signal
(External K delay exceeded):
In this case ERROR OUT=TRUE
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Parameters
External K delay: allows the operator to set the time window within which the external
feedback signal (Fbk_K) is to be monitored (according to output conditions).
Enable Clear: if checked enables input Clear.
With this input at 1 it is possible to clear the error when the fault has been repaired. Using
this input it is no longer necessary to reset M1S or turn off the system.
Figure 88 – OSSD EDM operator scheme example
INTERPAGE IN/OUT
If the scheme is very complicated and requires a connection between two elements very far, use
the "Interpage" component.
INTERPAGE OUT
(scheme
side SX)
INTERPAGE IN
(scheme
side DX)
English
The element "Interpage out" must have a name which, invoked by the corresponding
"Interpage in", allows the desired link.
8540780 • 10/07/2020 • Rev.38
223
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
INTFBK_IN / INTFBK_OUT (M1S only, max number = 8)
This operator can be used to create logical loops or to connect the output of a function
block to the input of another function block. IntFbk consist of IntFbk_In and IntFbk_Out;
after one M1S logical cycle delay, every IntFbk_In assumes the same logical value of the
corresponding IntFbk_Out.
INTFBK_IN
INTFBK_OUT
(scheme
side SX)
(scheme
side DX)
The element "IntFbk_Out" must have a number which, invoked by the corresponding
"IntFbk_In", allows the desired link.
Figure 89 – INTFBK_IN / INTFBK_OUT operator scheme example
 If not carefully designed feedback loops could trigger dangerous system oscillations and as a
consequence makes the system instable. An instable system may have severe consequence to
the user like severe injuries or death.
TERMINATOR
English
This operator can be used as a terminator for
inputs not used in the scheme.
The input connected to the TERMINATOR operator
appears in the input map and its status is
transferred to the BUS.
224
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
SPECIAL APPLICATIONS
Output delay with manual
If the operator needs to have two OSSD output with one of them delayed (in MANUAL mode)
use the following scheme:
English
Figure 90 - Two outputs with one delayed (in MANUAL mode)
8540780 • 10/07/2020 • Rev.38
225
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
SIMULATOR FEATURE
 This simulator is only designed to assist in the design of safety functions.
 The results of the simulation do not constitute validation of the project.
 The resulting safety function must always be validated, from the point of view of both hardware
and software, under actual usage conditions in accordance with the applicable regulations,
such as ISO/EN 13849-2: validation or IEC/EN 62061: Chapter 8 - Validation of the safety-related
electrical control system.
 Mosaic configuration safety parameters are provided in the MSD software report.
The top toolbar features two new green icons (with firmware M1 version 3.0 or higher):
Figure 91 – Simulator icons
These icons refer to the new Simulator function.

The first icon
indicates "Schematic Simulation". It enables the schematic
simulator (both static and dynamic) in which you can activate the input to verify the
diagram that is loaded.

The second icon
indicates "Graphic Simulation". It enables the simulator guided
by the stimuli file which also allows the desired traces to be displayed in a specific
graph.
English
 THE SIMULATION ICONS ARE ONLY AVAILABLE WITH NODE M1 DISCONNECTED.
226
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Schematic Simulation
Click on the
icon to start the schematic simulation.
Schematic simulation can be used to check/guide the output signals of the various function
blocks in real-time, even during the actual simulation. You may choose the block outputs
you wish to control and check the response of the various elements of the schematic model
according to the colour of the different lines.
As with the monitor function, the colour of the line (or of the actual key) indicates the signal
status: green means the signal is set to LL1, red means the signal is set to LL0.
With "Schematic Simulation", some new keys appear in the toolbar. These can be used to
control the simulation: the "Play" and "Stop" keys to start and stop the simulation, the
"PlayStep" key for step-by-step operation and the "Reset" key. When the simulation is reset,
the Time value is reset to 0 ms.
When you press "Play" to start the simulation, the amount of time that has elapsed is
displayed next to the word "Time". This time is measured in "Step" units of time multiplied
by the user-defined "KT" factor.
Click on the bottom right key of each input block to activate the respective output status
(even when the simulator is not running, i.e. when the time is not elapsing: in this case the
simulation is "static"). If the key turns red when you click on it, the output will be set to
level LL0. If it turns green, the output will be set to level LL1.
In some function blocks, such as "speed control" or "lock_feedback", for example, the key
is grey. This indicates that the value must be entered manually in a specific pop-up window.
The type of value to be entered differs according to the type of function block (e.g., in a
"speed control" block you will need to enter the frequency).
8540780 • 10/07/2020 • Rev.38
227
English
Figure 92 – Schematic Simulation
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
(Speed selection)
(LL0)
(LL0)
Figure 93 – MV frequency input
 The keys for enabling block outputs are shown at the top, an example of a pop-up
English
window for entering, in this case, the frequency in a "speed control" block is shown at
the bottom
228
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
How to use graphic simulation
Click on the
icon to start the graphic simulation.
Graphic simulation can be used to display the signal pattern over time in a graph. First you
must define the stimuli in a specific text file: this means defining the trend over time in the
waveforms used as inputs (stimuli). Based on the stimuli file created, the simulator injects
these into the diagram and displays the traces required in order to perform the simulation.
When the simulation is complete, a graph like the one shown below is automatically
displayed. From the graph you can print the traces displayed ("Print"), save the results in
order to load them again later (Save) or display other traces ("Change visibility"). The names
of the traces match the description of the function blocks.
Click the "X" key (top right) to exit the graphic simulation environment.
Figure 94 – Example of a result of the graphic simulation.
 It shows the traces and the three keys in the bottom right corner for selecting the
traces, saving and printing.
The simulation can only be carried out after performing at least the following steps.
English
1. Create a stimuli file to suit your needs.
2. Upload the stimuli file and wait until the simulation finishes.
8540780 • 10/07/2020 • Rev.38
229
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Click on the
icon to display the page shown below.
Figure 95 – Menu for selecting the graphic simulation mode
The functions of each key in the menu shown in Figure 95 will now be described:
English
Template Stimuli: used to save the template file with the desired name and disk location.
This file will contain the names of the signals as shown in the diagram, Figure 96 Now you
may use a text editor to enter the status of the input signals at a given moment in time as
well as the duration of the simulation and the time step to be used, Figure 97.
Figure 96 – Template file immediately after saving
230
Figure 97 –Example of complete template file
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Simulation with Stimuli: used to load a template file (suitably completed) and, once
loaded, to immediately start the simulation.
At the end of the simulation, a graph is displayed with the resulting signals.
Load simulation: used to load a previously completed simulation, provided at least one
has been saved.
Traces visibility: used to select the traces (signal waveforms) to be displayed in the graph.
When you press this key, it opens a pop-up window as shown in Figure 98 from which you
can add or remove traces to or from the graph.
Figure 98 - Traces visibility.
 The traces that can be added to the graph are shown in the box on the left. The traces
English
currently displayed and which can be removed from the graph are shown in the box
on the right.
8540780 • 10/07/2020 • Rev.38
231
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Application example of graphic simulation
The following example refers to the use of a press located inside a safety area. The
motor of the press can only be started when two conditions are simultaneously true:
the safety area gate is closed and the command to start the motor is sent. The
motor will start two seconds after the start signal is sent.
Diagram
In the diagram the input elements are the safety area gate and the motor start
command. These two signals are used as the input for an AND logic operator the
result of which will be delayed by two seconds by a retarder block. The delayed
signal will then energise the relay which will, in turn, allow the press motor to be
started.
Safe Area
M_Press
Press Start button
Figure 99 - Diagram referring to the application example
Stimuli file
The stimuli file provide the closure of the gate when 2000 ms have elapsed (signal
set to LL1) and the start command sent by the operator when 3000 ms have elapsed
(signal set to LL1).
- Safe Area Gate
English
Press Start button
comments entered
by the user
Figure 100 - Stimuli file referring to the application example
232
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
Result of the simulation
The graph shows the signals relating to the simulation, in this case:

which indicates closing of the gate.

which indicates the request to start sent by the operator

have elapsed
logic level 1.
 The AND operator output signal is delayed by 2000 ms by the delay operator.
 The "Op7" retarder output signal sends the command to close the relay when
5000 ms have elapsed, at which time the "M-press" relay is activated.
English
Figure 101 - Graph produced by the simulation of the application example
8540780 • 10/07/2020 • Rev.38
233
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
MOSAIC FAIL CODES
In case of malfunction the Mosaic system transmits to the MSD software a code
corresponding to the error detected by the master M1/M1S.
To read the code, proceed as follows:
- connect the Master M1/M1S (indicating FAIL by led) to the PC using the USB cable;
- launch the software MSD;
- use the icon
for the connection; a window appears to request the password; enter
the password; a window appears with the error code occurred.
The following table lists all possible errors detected and their solution.
CODE
FAIL
19D, 20D
The two M1microcontrollers do not see the same hw/sw
configuration
133D (Proxi1)
140D (Proxi2)
2 or more same expansion modules with the same
node number
Exceeded max expansion modules number
One or more modules have detected a change in the
node number
A slave module has detected an external error
Errors related to memory MCM
from a MOR4 MOR4S8 EDM error on the couple RELAY1 and 2 used in
Category 4
from MOR4 MOR4S8 EDM error on the Relay 2 and 3 used in Category 4
from a form or MOR4 MOR4S8 - EDM error on the
Relay 3 and 4 used in Category 4
From a module MV2, MV1 or MV0:
over-frequency detected on Proximity input
136D (Encoder1)
143D (Encoder2)
From a module MV2, MV1 or MV0: encoder input
signals not Standard (duty cycle, phase displacement)
138D (Encoder1)
145D (Encoder2)
130D 135D
137D 138D
140D 194D
197D 198D
199D 201D
202D 203D
205D
144D 149D
151D 152D
154D 208D 211D
212D 213D 215D
216D 217D 219D
158D 163D
165D 166D
168D 222D 225D
226D 227D 229D
230D 232D 233D
172D 177D
179D 180D
182D 236D
239D 240D 241D
243D 244D 245D
247D
129D
130D, 134D, 142D
131D, 135D, 143D
132D, 136D, 144D
133D, 137D, 145D
138D
139D
140D
141D
146D
147D
From a module MV2, MV1 or MV0:
over-frequency detected on Encoder input
66D
68D
70D
73D
96D ÷ 101D
137D
147D
English
157D
234
RESOLUTION
CHECK CORRECT INSERTION OF MASTER AND EXPANSION
MODULES CONNECTORS MSC. POSSIBLY REPLACE THE
CONNECTORS.
IF MCT IS PRESENT, CHECK CONNECTION
CHECK THE CONNECTIONS PIN 2, 3 EXPANSION MODULES
DISCONNECT THE MODULES IN EXCESS (MAX14)
CHECK THE CONNECTIONS OF PIN 2, 3 EXPANSION MODULES
CHECK THE ERROR CODE ON MODULE FOR MORE INFORMATION
REPLACE MCM MEMORY
CHECK THE CONNECTION OF THE EXTERNAL FEEDBACK
CONTACTORS
CHECK THE CONNECTION OF THE EXTERNAL FEEDBACK
CONTACTORS
CHECK THE CONNECTION OF THE EXTERNAL FEEDBACK
CONTACTORS
THE INPUT FREQUENCY MUST BE < 5kHz
THE DUTY CYCLE MUST BE: 50% +33% OF THE PERIOD (HTL, TTL).
THE PHASE DISPLACEMENT MUST BE: 90°+45° (HTL, TTL)
(not applicable to SIN / COS)
THE INPUT FREQUENCY MUST BE:
< 500kHz (TTL, SIN/COS); < 300kHz (HTL).
Errors solid state output OSSD1
CHECK THE OSSD1 CONNECTIONS RELATIVE TO THE MODULE IN
ERROR
Errors solid state output OSSD2
CHECK THE OSSD2 CONNECTIONS RELATIVE TO THE MODULE IN
ERROR
Errors solid state output OSSD3
CHECK THE OSSD3 CONNECTIONS RELATIVE TO THE MODULE IN
ERROR
Errors solid state output OSSD3
CHECK THE OSSD3 CONNECTIONS RELATIVE TO THE MODULE IN
ERROR
MA4 Measures incongruency
MA4 Channel 1 failure
MA4 Channel 2 failure
MA4 Channel 3 failure
MA4 Channel 4 failure
MA4 Channel 1 isolated supply failure
MA4 Channel 2 isolated supply failure
MA4 Channel 3 isolated supply failure
MA4 Channel 4 isolated supply failure
MA4 Connected an M1S not suitable for the application
MA4 Internal failure
RETURN THE UNIT TO REER
RETURN THE UNIT TO REER
RETURN THE UNIT TO REER
RETURN THE UNIT TO REER
RETURN THE UNIT TO REER
RETURN THE UNIT TO REER
RETURN THE UNIT TO REER
RETURN THE UNIT TO REER
RETURN THE UNIT TO REER
USE AN M1S WITH THE RIGHT FIRMWARE VERSION (≥5.1)
RETURN THE UNIT TO REER
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
All other codes are related to errors or an internal malfunction. Please replace the module that gave
the error or return to ReeR for repair and/or debugging and inform REER at the time of shipment.
CODE
FAIL
1D ÷ 31D
Microcontroller Error
32D ÷ 63D
Mainboard error
64D ÷ 95D
Communication error between units
96D ÷ 127D
MCM memory card error
128D ÷ 138D
Error module MOR4 relay 1
139D ÷ 148D
Error module MOR4 relay 2
149D ÷ 158D
Error module MOR4 relay 3
159D ÷ 168D
Error module MOR4 relay 4
128D ÷ 191D
Error units MV encoder interface
128D ÷ 142D
Error module MO4LHCS8 OSSD1
143D ÷ 156D
Error module MO4LHCS8 OSSD2
157D ÷ 170D
Error module MO4LHCS8 OSSD3
171D ÷ 184D
128D ÷ 143D
192D ÷ 205D
144D ÷ 159D
206D ÷ 219D
160D ÷ 173D
220D ÷ 233D
174D ÷ 188D
234D ÷ 247D
Error module MO4LHCS8 OSSD4
OSSD1 Error
SOLUTION
TRY TO RESTART SYSTEM. IF ERROR PERSISTS, SEND UNIT TO REER LABORATORY
FOR REPAIR.
REPLACE MCM MEMORY CARD
TRY TO RESTART SYSTEM. IF ERROR PERSISTS, SEND UNIT TO REER LABORATORY
FOR REPAIR.
TRY TO RESTART SYSTEM. IF ERROR PERSISTS, SEND UNIT TO REER LABORATORY
FOR REPAIR.
OSSD2 Error
OSSD3 Error
OSSD4 Error
ERRORS LOG DOWNLOAD
The errors log file can be visualized using the icon
(Password Required: level 1).
in the standard tool bar.
A table will appear with the last 5 errors occurred from the date when the schema was
sent to Mosaic or from the date of error log cancellation (icon ).
English
Figure 102 – Mosaic Errors Log Table
8540780 • 10/07/2020 • Rev.38
235
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
English
ACCESSORIES AND SPARE PARTS
MODEL
M1
M1S
MI8O2
MI8O4
MO4L
MI8
MI16
MI12T8
MA2
MA4
MO2
MO4
MO4LHCS8
MR2
MR4
MR8
MOR4
MOR4S8
MOS8
MOS16
MBP
MBD
MBC
MBEC
MBEI
MBEP
MBMR
MBEM
MCT2
MCT1
MBCCL
MCM
MSC
CSU
MV1T
MV1H
MV1S
MV2T
MV2TB
MV2H
MV2S
MV0
MV1TB
236
DESCRIPTION
MOSAIC main unit (8 inputs / 2 double OSSD )
MOSAIC main unit (8 inputs / 4 single OSSD )
MOSAIC I/O expansion unit (8 inputs / 2 double OSSD)
MOSAIC I/O expansion unit (8 inputs / 4 single OSSD)
MOSAIC output expansion unit (4 single OSSD)
MOSAIC input expansion unit (8 inputs)
MOSAIC input expansion unit (16 inputs)
MOSAIC input expansion unit (12 input, 8 test output)
MOSAIC analog input expansion unit (2 channels)
MOSAIC analog input expansion unit (4 channels)
MOSAIC output expansion unit (2 double OSSD)
MOSAIC output expansion unit (4 double OSSD)
MOSAIC output expansion unit (4 single OSSD, 8 signal outputs)
MOSAIC safety relay unit (2 relays)
MOSAIC safety relay unit (4 relays)
MOSAIC safety relay unit (8 relays)
MOSAIC safety relay expansion unit (4 relays)
MOSAIC safety relay expansion unit (4 relays, 8 signal outputs)
MOSAIC output expansion unit (8 signal outputs)
MOSAIC output expansion unit (16 signal outputs)
MOSAIC PROFIBUS DP interface unit
MOSAIC DeviceNet interface unit
MOSAIC CANopen interface unit
MOSAIC ETHERCAT interface unit
MOSAIC ETHERNET/IP interface unit
MOSAIC PROFINET interface unit
MOSAIC MODBUS RTU interface unit
MOSAIC MODBUS TCP interface unit
MOSAIC BUS TRANSFER interface unit (2 channels)
MOSAIC BUS TRANSFER interface unit (1 channel)
MOSAIC MBCCL CC-Link interface unit
MOSAIC external configuration memory
MOSAIC connector for 5-way communication
MOSAIC USB cable for connection to PC
MOSAIC TTL expansion unit
MOSAIC HTL expansion unit
MOSAIC SIN/COS expansion unit
MOSAIC TTL expansion unit (2 encoders)
MOSAIC TTL expansion unit (2 encoders)
MOSAIC HTL expansion unit (2 encoders)
MOSAIC SIN/COS expansion Unit (2 encoders)
MOSAIC proximity expansion unit
MOSAIC TTL expansion unit
CODE
1100000
1100003
1100010
1100011
1100012
1100020
1100021
1100022
1100026
1100025
1100030
1100031
1100032
1100040
1100041
1100049
1100042
1100043
1100091
1100092
1100050
1100051
1100052
1100053
1100054
1100055
1100082
1100083
1100057
1100058
1100059
1100060
1100061
1100062
1100070
1100071
1100072
1100073
1100087
1100074
1100076
1100077
1100086
8540780 • 10/07/2020 • Rev.38
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
WARRANTY
ReeR warrants that all of its MOSAIC units shall be free from defects in material or
workmanship for a period of 12 (twelve) months from the date of shipment. This warranty
applies to the products under normal conditions of use.
If the product proves to be defective during the warranty period, ReeR will repair or
replace any faulty parts without any charge for material or labour.
ReeR S.p.A. may, at its discretion, replace the defective equipment with the same type of
equipment or with equipment having the same characteristics, rather than repair it.
This warranty is subject to the conditions listed below:
The customer must inform ReeR of the fault within twelve months from the date of
delivery of the product.
The equipment and all components must be in the condition as they were at the time of
delivery by ReeR.
The fault or defect must not been caused either directly or indirectly by:
- Improper use;
- Failure to comply with the instructions for use;
- Carelessness, misuse, incorrect maintenance;
- Repairs, modifications, adaptations not performed by ReeR, tampering, etc.;
- Accidents or collisions (also during transportation and as a result of force
majeure);
- Other causes for which ReeR cannot be held liable.
The defective equipment must be delivered or shipped to ReeR's works to be repaired: the
warranty does not cover costs of transport or the risk of damage to or loss of the equipment
during shipment, which shall be borne by the customer.
All products and components that are replaced become the property of ReeR.
ReeR shall not be held liable under any other warranties or rights except for those expressly
indicated above. ReeR shall not therefore accept claims to pay damages for expenses,
interruption of work or other factors or circumstances in any way related to failure of the
product or any parts thereof.
Please, visit the website www.reer.it for the list of the authorised representative of each
Country.
essential for the correct operation of the device. ReeR therefore declines any responsibility for
all and anything resulting from failure to comply with all or some of the aforesaid instructions.
Characteristics are subject to change without prior notice. No part of this document may be reproduced unless authorised by ReeR.
8540780 • 10/07/2020 • Rev.38
237
English
 Precise, complete compliance with all standards, instructions and warnings in this handbook is
Dichiarazione CE di conformità / EC declaration of conformity
Torino, 01/07/2019
REER SpA - via Carcano 32
10153 – Torino – Italy
dichiara che il controllore integrato MOSAIC costituisce un dispositivo di sicurezza realizzato in conformità alle seguenti Direttive Europee:
declares that the integrated controller MOSAIC is a safety device complying with the following European Directives:
2006/42/EC
2014/30/EU
2014/35/EU
2011/65/EU
"Direttiva Macchine"
"Machine Directive"
"Direttiva Compatibilità Elettromagnetica"
"Electromagnetic Compatibility Directive"
"Direttiva Bassa Tensione"
"Low Voltage Directive"
"Limitazioni sull'uso di sostanze pericolose nelle Apparecchiature Elettriche ed Elettroniche"
"Restriction of the use of certain hazardous substances in Electrical and Electronic Equipment"
ed è conforme alle seguenti norme:
and complies with the following standards:
EN 61131-2
(2007)
Controllori programmabili - Parte 2: Specifiche e prove delle apparecchiature.
Programmable controllers - Part 2. Equipment requirements and tests.
EN ISO 13849-1 Sicurezza del macchinario: Parti dei sistemi di comando legate alla sicurezza. Parte 1: Principi generali per la progettazione.
(2015)
Safety of machinery:- Safety-related parts of control systems - Part 1: General principles for design.
EN 61496-1
(2013)
Sicurezza del macchinario: Dispositivi Elettrosensibili di protezione, Parte 1: Requisiti generali e tests.
EN 61508-1
(2010)
Sicurezza funzionale di impianti elettrici/elettronici/programmabili legati alla sicurezza: Requisiti generali.
EN 61508-2
(2010)
Safety of machinery : Electro sensitive protective equipment, Part 1: General requirements and tests.
Functional safety of electrical/electronic programmable electronic safety related systems: General requirements.
Sicurezza funzionale di impianti elettrici/elettronici/programmabili legati alla sicurezza:
Requisiti per impianti elettrici/elettronici/programmabili legati alla sicurezza.
Functional safety of electrical/electronic/programmable electronic safety related systems:
Requirements for electrical/electronic/programmable electronic safety-related systems.
EN 61508-3
(2010)
Sicurezza funzionale di impianti elettrici/elettronici/programmabili legati alla sicurezza: Requisiti Software.
EN 61508-4
(2010)
Sicurezza funzionale di impianti elettrici/elettronici/programmabili legati alla sicurezza: Definizioni e abbreviazioni.
IEC 61784-3
(2008)
Functional safety of electrical/electronic programmable electronic safety related systems: Software requirements.
Functional safety of electrical/electronic programmable electronic safety related systems: Definitions and abbreviations.
Reti di comunicazione industriali - Profili - Parte 3: Sicurezza funzionale dei bus di campo - Norme generali e profilo definizioni.
Industrial communication networks - Profiles - Part 3: Functional safety fieldbuses - General rules and profile definitions.
Sicurezza del macchinario. Sicurezza funzionale dei sistemi di comando e controllo elettrici, elettronici e programmabili correlati alla
EN 62061 (2005) sicurezza.
A2 (2015)
Safety of machinery - Functional safety of safety-related electrical, electronic and programmable electronic control systems.
EN 81-20
(2014)
EN 81-50
(2014)
Regole di sicurezza per la costruzione e l’installazione di Ascensori. Ascensori per il trasporto di persone e cose. Parte 20: Ascensori per
persone e cose accompagnate da persone.
Safety rules for the construction and installation of lifts. Lifts for the transport of persons and goods. Passenger and goods passenger lifts.
Regole di sicurezza per la costruzione e l’installazione di Ascensori. Verifiche e prove. Parte 50: Regole di progettazione, calcoli, verifiche e
prove dei componenti degli ascensori.
Safety rules for the construction and installation of lifts. Examinations and tests.
Design rules, calculations, examinations and tests of lift components
raggiungendo il livello di sicurezza pari a: SIL 3 / SILCL 3 / PL e/ Cat. 4 / Tipo 4 (v. standard corrispondenti)
reaching a safety level corresponding to: SIL 3 / SILCL 3 / PL e / Cat. 4 / Type 4 (see related standards)
ed è identico all'esemplare esaminato ed approvato con esame di tipo CE da:
and is identical to the specimen examined and approved with a CE - type approval by:
TÜV SÜD Product Service GmbH – Zertifizierstelle – Ridlerstraße 65 – 80339 – München – Germany
N.B. number: 0123 – Certificate No. Z10 024820 0077 Rev. 00
Carlo Pautasso
Direttore Tecnico
Technical Director
Simone Scaravelli
Amministratore Delegato
Managing director
English
MODULAR SAFETY INTEGRATED CONTROLLER MOSAIC
238
8540780 • 10/07/2020 • Rev.38