Software Description Section 3.2
Software Description
Introduction
This section describes the special characteristics of Unity Pro XLS developed to program SIL3 applications.
What Is in This Section?
This section contains the following topics:
Topic
Unity Pro XLS
Functions/Function Blocks for SIL3 Applications
Application Password
Page
80
82
86
33003879 10/2017
79
Unity Pro XLS
Introduction
To meet the requirements of the IEC 61508, only certified software is allowed for programming
SIL3 applications. For this purpose, Schneider Electric has developed the Safety version of the programming tool Unity Pro XLS (XL-Safety). It is able to perform both fault diagnostics and project protection to an extent necessary for programming a SIL3 project.
NOTE: When you create a new project with Unity Pro XLS, the choice of the Quantum PLC type determines if a SIL3 or non-Safety project is created.
SIL3 and Non-Safety Applications
Unity Pro XLS can be used to program both SIL3 and non-Safety applications. Thus, no other programming software is necessary. Only 1 version can be installed on your computer.
Your SIL3 project is stored in binary project files ( executable binary files (
Mode" in the
APX ) into a Safety CPU. For details, see the chapter "Services in Offline
Unity Pro Operating Modes Manual .
STU ) and in archive project files ( STA ). You cannot open these files with non-Safety versions of Unity Pro. Further, you can only download your
Non-Safety projects created by non-Safety Unity Pro versions must be exported using the appropriate Unity Pro version and imported into Unity Pro XLS.
Description of the Project Protection
Unity Pro XLS offers protection against unauthorized access concerning your SIL3 project and the
Quantum Safety PLC as well as Unity Pro XLS itself.
Your SIL3 project and the Quantum Safety PLC are protected by the following password mechanisms:
The SIL3 project is protected by a password at the application level, the application password.
When you create a SIL3 project, an empty password, which you can change, is set.
The Quantum Safety PLC is also protected by the application password. In case there is no application in the PLC, it accepts any password.
Connecting to a Safety PLC requires to enter the application password if the currently opened project in Unity Pro XLS is different or no project is opened.
Unity Pro XLS itself is protected by the following mechanisms:
You can define access rights or a list of functions a user is allowed to perform using the Security
Editor provided together with Unity Pro XLS (and having the same functionality as in
Unity Pro XL).
After a configured time of inactivity, Unity Pro XLS is locked automatically. Before being able to continue to work with it, you must enter the application password. While Unity Pro XLS is locked, the connection to the PLC is maintained and it stays in the current mode.
80
33003879 10/2017
Description of the Security Editor
To protect Unity Pro XLS against unauthorized access, you can use the Security Editor
to apply a policy and to create profiles and users for it.
to manage access rights to it.
For example, you can restrict the access for
creating or modifying the application password,
entering Maintenance Mode, or adapting the auto-lock timeout.
For details of using the Security Editor, see also the chapter "Access Security Managment" in the
Unity Pro Operating Modes Manual and the chapter "Security Management for Unity Pro XLS" in the Unity Pro XLS Operating Mode Manual Safety PLC Specifics .
NOTE: Use the features provided by the Security Editor to protect Unity Pro XLS against unauthorized access. However, using the Security Editor does not remove the necessity to protect your SIL3 project by using an application password.
Description of the Auto-Lock Feature
Unity Pro XLS offers the option to protect itself against unauthorized access after a configured time of inactivity. After this time is exceeded, Unity Pro XLS prompts you to enter the application password.
You can find a detailed procedure for activating the auto-lock in the chapter "Protection of a Safety
Project with Unity Pro XLS" in the Unity Pro XLS Operating Mode Manual Safety PLC Specifics .
Default Values
When you create a new SIL3 project, the following values are set by default:
The application password is empty.
The auto-lock is activated, allowing 10 minutes of inactivity before Unity Pro XLS is locked.
33003879 10/2017
81
Functions/Function Blocks for SIL3 Applications
Introduction
Schneider Electric offers you a number of elementary functions (EF) and function blocks (EFBs) that are certified for use in SIL3 applications. For details, see the Unity Pro Safety Block Library.
Remark
FFBs that are available for different data types are labeled with *** .
For example, the elementary function S_AND_*** is available for the data type
BOOL as S_AND_BOOL .
BYTE as S_AND_BYTE .
WORD as S_AND_WORD .
DWORD as S_AND_DWORD .
Description of the Safety FFBs for Mathematics
The following table lists the Safety FFBs belonging to the family of mathematic functions:
Name
S_ADD_***
S_SUB_***
S_MUL_***
S_DIV_***
S_NEG_***
S_ABS_***
S_SIGN_***
S_SMOVE_BIT
S_SMOVE_WORD
EF
EF
EF
EF
EFB
Type Used...
EF to add the input values
EF
EF to substract the input 2 from the input 1 value to multiply the input value to divide the Divident input value by the Divisor input value to negate the input values to compute the absolute value of the input value to detect negative signs to assign the input value to the output (to use data from unrestricted memory area in the Safety logic)
Description of the Safety FFBs for Comparison
The following table lists the Safety FFBs belonging to the family of comparison functions:
Name
S_EQ_***
S_GT_***
S_GE_***
S_LT_***
S_LE_***
S_NE_***
EF
EF
EF
Type Used to check the values of successive inputs...
EF for equality
EF
EF for a decreasing sequence for a decreasing sequence or equality for an increasing sequence for an increasing sequence or equality for inequality
82
33003879 10/2017
Description of the Safety FFBs for Logic
The following table lists the Safety FFBs belonging to the family of logic functions:
Name
S_AND_***
S_OR_***
S_XOR_***
S_NOT_***
S_SHL_***
S_SHR_***
S_ROL_***
S_ROR_***
S_RS
S_SR
S_F_TRIG
S_R_TRIG
EF
EFB
EFB
EFB
EFB
EF
EF
EF
EF
Type Used...
EF to perform a bit by bit AND link of the input bit sequence
EF
EF to perform a bit OR link of the input bit sequence to perform a bit XOR link of the input bit sequence to negate the input sequence bit by bit to shift a bit pattern to the left to shift a bit pattern to the right to rotate a bit pattern circularly to the left to rotate a bit pattern circularly to the right as RS memory with a dominant reset input as SR memory with a dominant set input to detect falling edges to detect rising edges
Description of the Safety FFBs for Statistics
The following table lists the Safety FFBs belonging to the family of statistical functions:
Name
S_MIN_***
S_MAX_***
S_LIMIT_***
S_MUX_***
S_SEL
Type Used...
EF to assign the smallest input value to the output
EF
EF to assign the largest input value to the output to transfer the unchanged input value to the output if it lies within the minimum and the maximum limit
EF
EF to transfer the respective input value to the output depending on the K input value for a binary selection between 2 input values
Description of the Safety FFBs for Timers and Counters
The following table lists the Safety FFBs belonging to the family of timer and counter functions:
Name
S_CTU_***
S_CTD_***
S_CTUD_***
S_TON
S_TOF
Type Used...
EFB for counting upwards
EFB
EFB for counting downwards for counting upwards and downwards
EFB
EFB as on delay timer as off delay timer
33003879 10/2017
83
Name
S_TP
Type Used...
EFB for generating a pulse with defined duration
Description of the Safety FFBs for Type Conversion
The following table lists the Safety FFBs belonging to the family of type conversion functions:
Name
S_BOOL_TO_***
S_BYTE_TO_***
S_WORD_TO_***
S_DWORD_TO_***
S_INT_TO_***
S_DINT_TO_***
S_UINT_TO_***
S_UDINT_TO_***
Type Used to convert an input value of the data type...
EF
EF
BOOL to a data type
BYTE , WORD , DWORD , INT , DINT , UINT , or UDINT
BYTE
to a
BOOL
,
WORD
,
DWORD
,
INT
,
DINT
,
UINT
, or
UDINT data type
EF
EF
WORD
to a
BOOL
,
BYTE
,
DWORD
,
INT
,
DINT
,
UINT
, or
UDINT data type
DWORD to a BOOL , BYTE , WORD , INT , DINT , UINT , or UDINT data type
EF
EF
EF
EF
INT
to a
BOOL
,
BYTE
,
WORD
,
DWORD
,
DINT
,
UINT
, or
UDINT data type
DINT to a BOOL , BYTE , WORD , DWORD , INT , UINT , or UDINT data type
UINT
to a
BOOL
,
BYTE
,
WORD
,
DWORD
,
INT
,
DINT
, or
UDINT data type
UDINT
to a
BOOL
,
BYTE
,
WORD
,
DWORD
,
INT
,
DINT
, or
UINT data type
Description of the Safety FFBs for High Availability
The following table lists the Safety FFBs belonging to the family of functions for high availability:
Name
S_DISIL2
S_AISIL2
Type Used...
EFB to select the data from the 2 digital input modules in case of a redundant input module configuration
EFB to select the data from the 2 analog input modules in case of a redundant input module configuration
Description of the Safety FFBs for Hot Standby
The following table lists the Safety FFBs belonging to the family of functions for Hot Standby:
Name
S_HSBY_SWAP
Type Used...
EFB to swap between primary and standby CPU in case of a Hot
Standby solution
84
33003879 10/2017
Details on how to use the Safety FFBs in your project are provided in the Unity Pro Safety Block
Library .
Description of the Safety DFBs for Safe Peer-to-Peer Communication
The following table lists the Safety DFBs belonging to the family of functions for Safe Peer-to-Peer communication:
Name
S_WR_ETH
S_RD_ETH
Type Used...
EFB to compute data to send on Safe Peer-to-Peer communication from the sender PLC
EFB to compute data received from Safe Peer-to-Peer communication in the receiver PLC
Details on how to use the Safety DFBs in your project are provided in the Unity Pro Safety Block
Library .
Description of the Non-Interfering FFBs for Quantum I/O
WARNING
LOSS OF ABILITY TO PERFORM SAFETY FUNCTIONS
Do not use output of the non-interfering function blocks to perform Safety functions.
Failure to follow these instructions can result in death, serious injury, or equipment damage.
The following table lists the non-interfering FFBs belonging to the family of functions for
Quantum I/O:
Name
NI_QUANTUM
Type Used...
EFB to edit the configuration data of a Quantum main rack
NI_DROP EFB
NI_ERT_854_20 EFB to edit the configuration data of a remote I/O station to give access to the time stamp and status functions of the
140 ERT 854 20 module
Details on how to use the non-interfering FFBs in your project are provided in the Unity Pro Safety
Block Library .
33003879 10/2017
85
Application Password
Password Protection Management
In the following situations, you are requested to enter the application password:
opening an existing SIL2 or SIL3 project
modifying the application password clearing the application password connecting to the Safety PLC exceeding the configured time of inactivity and launching the auto-lock mechanism
You can find detailed procedures for managing the application password in the chapter "Project
Properties and Password for Unity Pro XLS" in the Unity Pro XLS Operating Mode Manual Safety
PLC Specifics .
NOTE: Schneider Electric strongly recommends changing the default password immediately after having selected a Quantum Safety CPU in order to protect your project against unauthorized access from the beginning. Yet, if you forget to change the default password, the empty password is kept even if you save and close your project. When re-opening it, just click OK, that is leave the edit field empty, and change the password as soon as possible.
Losing the Application Password
You can find detailed procedures for what to do in case you have lost the application password in the chapter "Loss of Password" in the Unity Pro XLS Operating Mode Manual Safety PLC
Specifics .
86
33003879 10/2017
