i950 ES: Safe muting function is not aborted (corrected of V01.03.05)

i950 Extended Safety as of V01.03.05.00

The muting function can be deactivated in all operating cases. 

Function: The safe muting function deactivates selected safe inputs and all functions of the safety bus. For this purpose, this function must be parameterized in the safe parameter set. After entering a previously assigned muting password, the muting function can only be started via the muting dialog in the Easy Starter or Plc Designer.

The muting function can be stopped via a button, deactivated when the dialog is exited, deactivated when the connection to the device is interrupted or automatically after a maximum of 30 minutes. 

If the muting function is started and stopped again after a time less than or equal to 2s, the muting function is not terminated. In this state, muting cannot be terminated using the methods described above.

The only way to end muting is to restart the Safety (0x2022:041) or switch the device to mains.

This error has been classified as safety critical. An FMEA has been performed.

The final evaluation shows that the fault can only occur in very rare cases. In these cases, it is mainly during the commissioning phase, within which employees must be specially trained in safety technology and take special precautions. The occurrence of this error during operation is very unlikely, since it is a handling error that must occur in a very small time window (typically < 2 seconds) during the initialization of the safety module. The handling error consists of the activation and deactivation of the muting function within typically 2 seconds.

The safety FW V01.03.03 is not recalled.

All affected customers were contacted directly and had to acknowledge receipt of the letter via a confirmation letter.

In addition to the measure described above, the safety firmware of the device can be updated free of charge by returning it to Lenze Service.