Excellent PLC
Fault Overview
In a HIMatrix safety control cabinet, the Black Horse F2 DO 8 01 Safety-Related Controller intermittently entered SAFE state during normal operation.
Observed symptoms:
-
All safety outputs de-energized
-
SAFE LED illuminated
-
No hardware fault LED
-
System required manual reset
-
Fault occurred during nearby motor startup
This indicated a non-permanent but repeatable system-level trigger.
Understanding SAFE State Mechanism
Safety controllers such as F2 DO 8 01 include:
-
Dual-processor architecture
-
Internal watchdog timer
-
Memory integrity verification
-
EMI immunity filtering
-
Redundant I/O validation
If internal timing or logic verification fails, controller forces SAFE state to prevent unsafe operation.
Step 1 – Review Event Log
1. Access diagnostic buffer.
2. Identify reset cause code.
3. Check for watchdog timeout entries.
Log indicated:
Watchdog cycle time exceeded threshold
This suggested temporary CPU disruption.
Step 2 – Correlate with External Events
Technicians observed SAFE state triggered when:
-
Large induction motor started
-
Variable frequency drive energized
-
Welding equipment operated nearby
This pointed toward electromagnetic interference (EMI).
Step 3 – Power Quality Analysis
1. Connect oscilloscope to controller supply.
2. Observe ripple and transient spikes.
3. Monitor during motor startup.
Detected:
-
High-frequency transient spikes
-
Brief 5–10V disturbances
-
Ground reference fluctuation
These disturbances interfered with controller timing.
Root Cause – Inadequate EMI Shielding and Grounding
Investigation revealed:
-
Improper grounding topology
-
Shield drains not bonded correctly
-
Controller power shared with high-noise devices
-
No ferrite suppression installed
Electromagnetic interference disrupted internal clock cycle, triggering watchdog timeout.
Step 4 – Controlled Reproduction Test
1. Run motor startup with controller powered independently.
2. Compare with shared power scenario.
3. Observe SAFE state behavior.
With isolated power and improved grounding, SAFE state did not occur.
Corrective Action Plan
– Separate controller power supply from motor/VFD supply.
– Implement single-point grounding scheme.
– Install ferrite cores on supply lines.
– Ensure proper shield termination at cabinet entry.
– Maintain minimum cable separation distance.
After grounding correction and EMI mitigation, controller operated continuously without SAFE state.
Engineering Best Practices
-
Always isolate safety controller supply from high-current equipment.
-
Maintain EMC-compliant cabinet wiring practices.
-
Route signal cables separately from power cables.
-
Use industrial-grade shielded cables.
EMI is a common but often underestimated cause of safety controller resets.
Conclusion
Unexpected SAFE state activation on the Black Horse F2 DO 8 01 Safety-Related Controller is often caused by electromagnetic interference disrupting watchdog timing. Structured power quality analysis and grounding correction restore stable operation in HIMatrix safety systems.