Excellent PLC
Incident Summary
In an automated production line, the Black Horse F1202 Safety Relay Module indicated that all safety inputs were valid. Both dual-channel inputs showed correct voltage levels, and the reset procedure was executed correctly.
However:
-
Safety output contacts remained open
-
Downstream contactor did not energize
-
Status LED showed fault condition after reset attempt
The safety chain appeared complete, but the output failed to close.
Understanding Safety Output Monitoring
Unlike standard relay modules, safety relay modules continuously monitor:
-
Dual-channel input symmetry
-
Reset circuit timing
-
Output feedback loop (EDM – External Device Monitoring)
-
Internal contact state
If any feedback inconsistency is detected, the module blocks output energization.
Step 1 – Confirm Dual-Channel Input Stability
1. Measure voltage on Input CH1 and CH2.
2. Confirm equal potential within tolerance.
3. Ensure no cross-short or ground leakage.
Both channels were confirmed stable and symmetrical.
Step 2 – Inspect External Device Monitoring (EDM) Circuit
Many F1202 installations include a feedback loop from the downstream safety contactor back to the module.
Purpose:
-
Detect welded contacts
-
Ensure output truly opened after previous trip
-
Prevent unsafe restart
1. Measure feedback signal continuity.
2. Verify normally closed auxiliary contact state.
3. Ensure no welded contact condition.
The feedback auxiliary contact was found permanently open.
Root Cause – Failed Contactor Auxiliary Feedback
The downstream safety contactor’s auxiliary feedback contact failed mechanically and did not return to its normally closed position.
The F1202 interpreted this as a welded output or unsafe condition and therefore refused to energize its own safety relay.
This behavior is intentional and part of the module’s safety design.
Controlled Isolation Test
1. Power down system.
2. Temporarily simulate proper feedback loop.
3. Restore power and attempt reset.
4. Confirm output energizes.
When feedback circuit was temporarily corrected, the module reset and output closed normally.
Corrective Action Plan
– Replace faulty safety contactor auxiliary contact.
– Verify proper EDM wiring configuration.
– Perform complete safety validation test.
– Document functional safety test results.
After contactor replacement and verification, normal operation resumed.
Additional Possible Causes
If EDM loop is healthy, consider:
-
Internal output relay failure
-
Supply voltage below hold-in threshold
-
Internal diagnostic self-lock condition
-
Wiring polarity error
However, in most cases, output refusal with valid inputs is EDM-related.
Safety Best Practices
-
Always wire EDM circuits correctly for safety-rated installations.
-
Test auxiliary contacts periodically.
-
Never permanently bypass feedback circuits.
-
Record all safety validation procedures for compliance audits.
Safety modules are designed to prevent unsafe restarts — refusal to energize often protects personnel and equipment.
Conclusion
When the Black Horse F1202 Safety Relay Module refuses to energize its output despite valid safety inputs, the most common cause is an abnormal external device monitoring (EDM) feedback condition. Systematic verification of auxiliary contact integrity ensures safe restoration of operation in Planar F safety systems.