Black Horse F1202 Safety Relay Module Fails to Reset After Trip – Root Cause Analysis and Safe Recovery Procedure - Excellent PLC

Incident Overview

In a safety interlock system within a process plant, the Black Horse F1202 Safety Relay Module tripped correctly after an emergency stop activation. However, once the emergency condition was cleared, the safety relay failed to reset.

Observed behavior:

Safety output remained open
Reset pushbutton had no effect
Safety status LED remained in fault state
Controller showed safety chain incomplete

Because this is a safety-rated module, improper troubleshooting could introduce risk. A structured and controlled approach was required.

Understanding the F1202 Safety Relay Function

The F1202 is designed to:

Monitor safety input loops (E-stop, safety door switches, etc.)
Validate dual-channel safety inputs
Control safety-rated relay outputs
Require manual reset after trip

Unlike standard relay modules, safety relays contain internal monitoring logic to prevent unintended restart.

Step 1 – Verify Safety Input Loop Integrity

A safety relay will not reset unless all monitored input channels return to a valid state.

SAFETY_INPUT_VERIFICATION:

Measure both safety input channels (CH1 and CH2).

Confirm voltage symmetry.

Verify no open circuit or mismatch.

Check for short between channels.

In this case, one input channel showed intermittent voltage fluctuation.

Step 2 – Inspect Reset Circuit

RESET_CIRCUIT_TEST:

– Confirm reset pushbutton wiring continuity.

– Measure reset signal voltage at module input.

– Ensure reset timing sequence matches specification.

Reset signal was reaching the module, eliminating pushbutton failure.

Root Cause – Input Channel Asymmetry

Further investigation revealed a loose terminal in one safety input loop.

The F1202 monitors dual-channel symmetry. Even slight timing or voltage mismatch prevents reset. This is intentional to maintain safety integrity.

Because one channel voltage dropped intermittently, the module refused to re-energize the safety output.

Controlled Verification Procedure

SAFE_VERIFICATION:

Power down system.

Retorque input terminals.

Restore power.

Validate both safety channels stable.

Perform manual reset.

After correcting terminal connection, reset function restored immediately.

Other Potential Causes

If input wiring is correct, consider:

Internal safety monitoring circuit fault
Cross-short detection active
Welded safety output contacts detected by feedback loop
Supply voltage below safety threshold

Safety modules may self-lock if internal diagnostics detect abnormal conditions.

Corrective Action Plan

CORRECTIVE_ACTION:

– Repair input wiring imbalance.

– Verify dual-channel voltage symmetry.

– Replace F1202 module if internal monitoring failure confirmed.

– Document safety validation test results.

Safety Engineering Best Practices

Always use dual-channel wiring with proper separation.
Perform periodic safety loop verification.
Avoid mixing safety and non-safety wiring in same bundle.
Maintain torque and terminal integrity inspections.

Safety relays are designed to fail-safe; refusal to reset often indicates a real integrity issue.

Conclusion

When the Black Horse F1202 Safety Relay Module fails to reset after a trip event, the most common cause is dual-channel input imbalance or wiring instability. Structured verification of safety loop integrity ensures safe and compliant restoration of operation in Planar F systems.