Professional Documents
Culture Documents
En-16052.707-A
Code Word
Order Number
Contents
1 Technical Data......................................................................................... 1-1
2 Safety ....................................................................................................... 2-1
3 Systems description............................................................................... 3-1
3.1 Introduction ............................................................................................... 3-1
3.2 Configuration possibilities ......................................................................... 3-4
4 Control system SIMATIC S7-300F ......................................................... 4-1
4.1 Requests ................................................................................................... 4-1
4.2 Hardware................................................................................................... 4-2
4.3 Software .................................................................................................. 4-13
5 Operator panel TP 177 B ........................................................................ 5-1
5.1 General description ................................................................................... 5-1
5.2 Display areas ............................................................................................ 5-3
5.3 Operating objects ...................................................................................... 5-8
5.4 Operating displays .................................................................................. 5-10
5.5 Signalling system .................................................................................... 5-32
5.6 System .................................................................................................... 5-53
5.7 User administration ................................................................................. 5-56
5.8 Saving and restoring the project ............................................................. 5-58
6 Electrical commissioning....................................................................... 6-1
6.1 Checks prior to commissioning ................................................................. 6-1
6.2 Checks after commissioning ..................................................................... 6-2
6.3 Handing-over............................................................................................. 6-2
7 Maintenance ............................................................................................ 7-1
8 Spare Parts .............................................................................................. 8-1
9 Appendix.................................................................................................. 9-1
9.1 Firing system interlocks ............................................................................ 9-1
9.2 Communication ......................................................................................... 9-2
9.3 Test log ..................................................................................................... 9-5
9.4 Handing-over record ............................................................................... 9-15
9.5 Glossary .................................................................................................. 9-16
En-16052.707-A
Operating Instruction Technical Data
Control system “failsafe plant interlocking“ with operator panel TP 177 B 1-1
1 Technical Data
Basic data
Year of manufacture.................................................................................................
Programmable logic controller ....................................................SIMATIC S7-300F
Control cabinet
Ambient temperature of control cabinet ..................................... 0 °C to max. 60 °C
Relative humidity ....................................................................... max. 95 % at 25 °C
En-16052.707-A
Operating Instruction Safety
Control system “failsafe plant interlocking“ with operator panel TP 177 B 2-1
2 Safety
NOTE
Be sure to comply with the general safety instructions in the supplement
Important notes on the documentation.
Use
The control system “failsafe plant interlocking“ is exclusively provided for the
safety interlocks for the firing system and the efilter of a kiln plant. Be sure to
comply with the specification of the intended use in section Technical data.
Any use other than the intended use is forbidden. POLYSIUS AG is not responsi-
ble for damage resulting from any use other than the intended use. Any other use
is at the owner's own risk.
The intended use also includes compliance with the operating instructions and
the maintenance instructions.
Operation
It is strictly forbidden to make program alterations (software) to the programma-
ble control system without prior consultation with POLYSIUS AG.
Any safety checks before or during operation depend on the relevant national
regulations. The plant management is responsible for the performance and re-
cording of such checks.
Be sure to comply with all warning signs and safety instructions on and around
the systems, as well as in the machine manuals and operating instructions.
The control system is specially designed for the planned system and may, there-
fore, not be used for any other machine without the express consent of
POLYSIUS AG.
If changes in the plant or its operating behaviour relevant to safety occur, shut it
down immediately.
En-16052.707-A
Operating Instruction Systems description
Control system “failsafe plant interlocking“ with operator panel TP 177 B 3-1
3 Systems description
3.1 Introduction
The safety interlocks for the firing system and the efilter in the plants are imple-
mented in accordance with the standard operating procedure 118 (SOP 118,
status 02.06.1982).
®
The gas analysis for O2 and CO after cyclone stage 2 or 3 and after the DOPOL
exhaust gas fan is the most important instrument for setting and monitoring the
correct fuel-air-mixture.
The correct setting of the fuel-air mixture is monitored by means of the CO analy-
sis after cyclone stage 2 or 3 and is corrected if necessary by manual adjustment
of the fuel quantity and/or the combustion air volume (speed of the kiln exhaust
gas fan or position of the damper in the kiln exhaust gas duct).
®
The CO analysis after the DOPOL exhaust gas fan is primarily a safety device
for monitoring the gas atmosphere after the kiln system.
The system is also switched off if events occur that do not exclude the formation
of exhaust gases containing CO. This includes e.g. failure of the primary air fan,
®
the DOPOL exhaust gas fan or of the filter fan, simultaneous failure of more than
two cooling air fans in the recuperation section of the clinker cooler or serious ex-
®
ceeding of the pressure after the DOPOL exhaust gas fan or at the kiln hood
(e.g. due to incorrect operator command or similar).
After a direct CO-shutdown of the firing system and the efilter the plant has to be
purged for at least three minutes (air exchange 5 times) before restart of the firing
system and the efilter is enabled. The time monitor purging of the system is not
started before the CO concentration in the exhaust gas is below the limit of MAX1
and all other purging conditions are fulfilled.
En-16052.707-A
Systems description Operating Instruction
3-2 Control system “failsafe plant interlocking“ with operator panel TP 177 B
All safety interlocks for the firing system and the efilter are shown in the section
Firing system interlocks. This table is based on the standard operating procedure
118 and is used as basis for writing the program for the control system "failsafe
plant interlocking". The table is divided into the following working folders:
• Glossary
Explanations of the designations used
• List of signals
General list of signals (type, use of interlocks)
• 1.0 Conditions for PURGING the system
Conditions for purging the system after a CO-shutdown has occurred
• 2.1 Starting conditions SZ
Switch-on conditions for starting the SZ burner
• 2.2 Operating conditions SZ
Permanent conditions for operating the SZ burner
• 3.1 Starting conditions PC
Switch-on conditions for starting the PC burner
• 3.2 Operating conditions PC
Permanent conditions for operating the PC burner
• 4.1 Starting conditions CC
Switch-on conditions for starting the CC burner
• 4.2 Operating conditions CC
Permanent conditions for operating the CC burner
• 5.1 Starting conditions KI
Switch-on conditions for starting the KI burner
• 5.2 Operating conditions KI
Permanent conditions for operating the KI burner
• 6.0 Conditions bypass PURGING
Conditions for purging the bypass system
• 6.1 Starting conditions bypass
Conditions for starting up the bypass system
• 6.2 Operating conditions bypass
Permanent conditions for the bypass system
• 7.1 Starting conditions efilter
Conditions for starting up the efilter high voltage supply
• 7.2 Operating conditions efilter
Permanent conditions for the efilter high voltage supply
• external interlocks
Machine protection conditions of the kiln system (are NOT implemented in the
fail-safe control system)
En-16052.707-A
Operating Instruction Systems description
Control system “failsafe plant interlocking“ with operator panel TP 177 B 3-3
It is not necessary that the two process temperatures "temperature before mill"
and "temperature after mill" are fail-safe. However, the two signals must be made
available by the master process control system as start and permanent conditions
at the hot gas generator control system. This means: no burner enable signal for
the hot gas generator if T > Max and burner stop if T > MaxMax.
En-16052.707-A
Systems description Operating Instruction
3-4 Control system “failsafe plant interlocking“ with operator panel TP 177 B
The control system “failsafe plant interlocking“ is the only connection of the differ-
ent burner control systems to the master process control system.
Master-master-communication
Master-slave-communication
En-16052.707-A
Operating Instruction Systems description
Control system “failsafe plant interlocking“ with operator panel TP 177 B 3-5
Parallel communication
All fail-safe control systems are connected in parallel for this communication, i.e.
the data are wired as inputs and outputs in the respective control system.
For the different types of communication see the diagrams in section Communi-
cation.
En-16052.707-A
Operating Instruction Control system SIMATIC S7-300F
Control system “failsafe plant interlocking“ with operator panel TP 177 B 4-1
4.1 Requests
Fail-safe automation systems (F-systems) are used in plants with high safety re-
quirements. F-systems are used to control processes with a safe state that can
be achieved immediately after shutdown. That is, F-systems control processes in
which an immediate shutdown does not endanger humans or the environment.
Functional safety
The functional safety is implemented principally through safety functions in the
software. Safety functions are executed by the S7 Distributed Safety system to
place or maintain the system in a safe state in case of a dangerous occurrence.
Safety functions are contained mainly in the following components:
• in the F-capable CPU (F-CPU)
• in the fail-safe inputs and outputs (F-I/O)
The fail-safe I/O ensure safe processing of field information (flap positions, tem-
peratures,...). They contain all of the required hardware and software components
for safe processing in accordance with the required safety class.
Safety interlocks
The safety interlocks for the firing system and the efilter are implemented in the
safety program of the control system “failsafe plant interlocking“. The operating
statuses are diversely monitored, i.e. one plant condition is defined with two dif-
ferent signals. Example: A damper is signalised as “damper in position” by the ex-
ternal limit switch and the analog signal from the position feedback transmitter in
the actuator, the signal statuses always being scanned for signal "1".
Diverse monitoring of an operating status and use of the control system SIMATIC
S7-300F fulfill the requirements according to IEC 61508 SIL2 and EN 954-1 cate-
gory 3. These are the requirements of the TÜV Hannover as regards monitoring
systems for fuels in the report of 13.12.2001 "Hazard analysis for cement rotary
®
kiln firing systems and PREPOL -AS-CC calciners with respect to explosion haz-
ards".
En-16052.707-A
Control system SIMATIC S7-300F Operating Instruction
4-2 Control system “failsafe plant interlocking“ with operator panel TP 177 B
4.2 Hardware
The control system SIMATIC S7-300F consists of the following hardware compo-
nents:
• F-capable CPU (F-CPU)
• fail-safe inputs and outputs (F-I/O)
A CPU with fail-safe capability is a central processing unit that fulfills certain
safety requirements and is permitted for use in S7 Distributed Safety. A standard
program and a safety program can be processed at the same time on a F-CPU. A
standard program can coexist with a safety program in a F-CPU because the
safety-related data of the safety program are protected from being affected unin-
tentionally by data of the standard program.
The main distinction between fail-safe signal modules and standard modules in
the S7-300 module family is that fail-safe modules have a two-channel internal
design. The two integrated processors monitor each other, automatically test the
input and output wiring and place the fail-safe signal module in a safe state in the
event of a fault. The F-CPU communicates with the fail-safe signal module by
means of the PROFIsafe safety-related bus profile.
The actuators relevant for the safety interlocks have to meet the SIL2 require-
ments if possible (e.g. PNOZ contactors). Monitoring of the static pressure after
®
the DOPOL exhaust gas fan and at the kiln hood is extremely important for the
purging process because this is the way the main gas route is monitored. Imple-
mentation of these sensors is therefore either redundant or in SIL2 absolutely
necessary.
The pages below show the fail-safe signal modules used in the control system.
En-16052.707-A
Operating Instruction Control system SIMATIC S7-300F
Control system “failsafe plant interlocking“ with operator panel TP 177 B 4-3
En-16052.707-A
Control system SIMATIC S7-300F Operating Instruction
4-4 Control system “failsafe plant interlocking“ with operator panel TP 177 B
One sensor is connected via one channel (1oo1 evaluation) for each process sig-
nal. Power supply to the sensors is via the internal sensor supply of the module. If
a channel fault occurs, the inadequate channel is passivated and the substitution
value “0“ is called up.
En-16052.707-A
Operating Instruction Control system SIMATIC S7-300F
Control system “failsafe plant interlocking“ with operator panel TP 177 B 4-5
En-16052.707-A
Control system SIMATIC S7-300F Operating Instruction
4-6 Control system “failsafe plant interlocking“ with operator panel TP 177 B
One actuator is connected via a single pin for each process signal. If a channel
fault occurs, the inadequate channel is passivated and the substitution value “0“
is called up.
En-16052.707-A
Operating Instruction Control system SIMATIC S7-300F
Control system “failsafe plant interlocking“ with operator panel TP 177 B 4-7
En-16052.707-A
Control system SIMATIC S7-300F Operating Instruction
4-8 Control system “failsafe plant interlocking“ with operator panel TP 177 B
En-16052.707-A
Operating Instruction Control system SIMATIC S7-300F
Control system “failsafe plant interlocking“ with operator panel TP 177 B 4-9
En-16052.707-A
Control system SIMATIC S7-300F Operating Instruction
4-10 Control system “failsafe plant interlocking“ with operator panel TP 177 B
The analog output module 332; AI 4 × 16Bit has the following features:
• 4 outputs in 4 channel groups
• Outputs configured as current outputs
• Resolution of 16 bits
• Group error display (SF)
En-16052.707-A
Operating Instruction Control system SIMATIC S7-300F
Control system “failsafe plant interlocking“ with operator panel TP 177 B 4-11
The two figures below show the hardware configuration in the control cabinet and
the hardware configuration of the decentral I/O level.
En-16052.707-A
Control system SIMATIC S7-300F Operating Instruction
4-12 Control system “failsafe plant interlocking“ with operator panel TP 177 B
En-16052.707-A
Operating Instruction Control system SIMATIC S7-300F
Control system “failsafe plant interlocking“ with operator panel TP 177 B 4-13
4.3 Software
Safety program
The safety interlocks for the firing system and the efilter are implemented in the
safety program. It consists of fail-safe blocks that are created using the F-FBD or
F-LAD programming languages or are selected from an F-library and fail-safe
blocks that are automatically added when the safety program is compiled. Fault
control measures are automatically added to the safety program, and additional
safety-related tests are performed.
After the safety program has been compiled, it can be downloaded to the F-CPU.
The safety program must be consistent, i.e. the collective signature of all fail-safe
blocks with F-attribute in the block container and the collective signature of the
safety program must be identical. For the present collective signature of the
safety program see the section Handing-over record.
Standard program
In addition to the safety program, a standard program can be run on the F-CPU.
The communication to the master process control system, generation of the
alarm messages etc. are implemented in the standard program. A standard pro-
gram can coexist with a safety program in a F-CPU because the safety-related
data of the safety program are protected from being affected unintentionally by
data of the standard program. Data are exchanged between the safety program
and the standard program in the F-CPU by means of bit memory or by accessing
the process input and output images.
Safety mode
The safety program runs in the F-CPU in safety mode. This means that all safety
mechanisms for fault detection and fault reaction are activated. The safety pro-
gram cannot be modified during operation in safety mode. Safety mode of the
safety program in the F-CPU can be deactivated and reactivated occasionally.
So-called "deactivated safety mode" enables the safety program to be tested
online and changed as needed while the F-CPU is in RUN mode. For S7 Distrib-
uted Safety, you can switch back to safety mode only after an operating mode
change from RUN to STOP to RUN.
En-16052.707-A
Control system SIMATIC S7-300F Operating Instruction
4-14 Control system “failsafe plant interlocking“ with operator panel TP 177 B
In safety mode, data are transmitted consistently between the F-CPU and F-I/O in
a safety message frame. The safety message frame in accordance with PROFIs-
afe consists of the following:
• Process data (user data)
• Status byte / control byte (coordination data for safety mode)
• Sequence number
• CRC signature
To meet the demands on the control system, the safety mode in the F-CPU must
be activated.
Password protection
In addition to the standard password for the F-CPU or CPU, F-systems require a
password for the safety program. The password for the F-CPU protects the F-
systems from unauthorized downloads to the F-CPU from the engineering system
or programming device. The password for the safety program protects from unau-
thorized changes to the configuration and parameter settings of the F-CPU and
F-I/O. For the respective passwords see the section Handing-over record.
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-1
To operate and monitor the control system "failsafe plant interlocking", a operator
panel TP 177 B is used. This device has a touch screen, i.e. a programmable
touch-sensitive screen.
You can operate the device using operating objects, which are illustrated on the
touch screen after the operating program has started.
In the following, "quotation marks" are used for the output to the user. Buttons are
highlighted in bold print.
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-2 Control system “failsafe plant interlocking“ with operator panel TP 177 B
NOTE
When operating with the touch screen, always touch only one operating object.
By touching more than one operating object at the same time, unintended
actions can be activated.
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-3
All operating displays of the touch screen are always - from top to bottom - di-
vided into three areas:
• Overview area
• Process operating area
• Display changing area
Overview area
Process operating
area
Overview area
In the upper section of the overview area, the name of the recent display, and
under this, the last received, not yet acknowledged message is displayed. You
select the message picture by touching the overview area.
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-4 Control system “failsafe plant interlocking“ with operator panel TP 177 B
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-5
Start display
System
User
Menu
Process values
Fans
Filter fan(s)
Flaps
Damper(s)
CO analysers
Bypass*
Kiln inlet*
Temperature values
Pressure values
Bypass*
Efilter*
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-6 Control system “failsafe plant interlocking“ with operator panel TP 177 B
Efilter*
Kiln plant
SZ burner
PC/CC burner
KI burner*
Bypass*
Efilter*
Control cabinet
Interlocks
SZ burner startup
SZ burner operation
KI burner startup*
KI burner operation*
Bypass purging*
Bypass startup*
Bypass operation*
Efilter startup*
Efilter operation*
Parameter
Kiln plant
SZ burner
PC/CC burner
KI burner*
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-7
Operating displays consist of static objects, e.g. texts, as well as dynamic objects
for displaying process values and operating conditions and for operation (but-
tons).
The operating displays marked * are integrated depending on the system configu-
ration.
When operating the button Back you jump to the next higher hierarchical level. In
the message picture the user can jump to the last displayed process diagram by
touching this button.
With the arrow buttons and you can select a neighbouring picture of the
same hierarchical level.
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-8 Control system “failsafe plant interlocking“ with operator panel TP 177 B
Buttons
Figure 18 Button
In the process operating area, buttons are used amongst others for acknowledg-
ing fault messages or setting parameters.
Input/Output fields
In the process operating area, pure output fields display process values for ex-
ample. Input/Output fields are used for entering and displaying parameters.
After touching an input/output field the following input dialog opens on the screen:
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-9
Cursor (flashing text cursor, not shown in Figure 20): A flashing text cursor in the
upper field indicates that entries can be made on the left of the text cursor. In
Figure 20 the total display "0.00" is marked. Each new entry deletes the marked
part and displays the new sign entered.
• With this button (ESCape) you can cancel the entry without changing
the value and close the input dialog.
• By pushing this button (BackSPace), a single sign left of the text cur-
sor is deleted.
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-10 Control system “failsafe plant interlocking“ with operator panel TP 177 B
After the run up of the "WinCC Flexible“ runtime application (operating program)
the following start display appears:
The following is a list of extracts from operating displays that can vary depending
on the system configuration.
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-11
This field indicates whether the fan drive is switched on. Main contactor of motor
(statuses: ON / OFF)
This field indicates whether the fan speed is n > MIN. Speed monitor on fan
impeller shaft (statuses: n > MIN / n < MIN)
This field indicates whether the fan damper is closed. External limit switch at
damper (statuses: Closed / Not closed)
This field indicates whether the pressure after the damper in the primary air
channel of the SZ burner is p > MIN. Pressure switch in the primary air duct
(statuses: p > MIN / p < MIN)
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-12 Control system “failsafe plant interlocking“ with operator panel TP 177 B
This field indicates the flow rate of the fan (% of the nominal flow rate).
This field indicates the fan speed (% of the rated speed). Tacho-generator or ac-
tual value of frequency converter
This field indicates the position of the damper (% open). Position feedback
transmitter in the actuator
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-13
This field indicates whether the damper is closed. External limit switch at damper
(statuses: Closed / Not closed / Open / Not open)
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-14 Control system “failsafe plant interlocking“ with operator panel TP 177 B
This field indicates the flap / damper position (% open). Position feedback trans-
mitter in the actuator
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-15
This field indicates whether the measuring lance of the AURETRAC analysis in
the kiln inlet is in measuring position. Limit switch of the measuring lance
(statuses: In measuring position / Not in measuring position)
This field indicates whether the limit value of the CO analysis MAX1 = 0.4 % by
volume is exceeded. Digital output of the CO analyser (statuses: CO < MAX1 /
CO > MAX1)
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-16 Control system “failsafe plant interlocking“ with operator panel TP 177 B
This field indicates whether the limit value of the CO analysis MAX2 = 0.5 % by
volume is exceeded. Digital output of the CO analyser (statuses: CO < MAX2 /
CO > MAX2)
This field indicates whether the limit value of the CO analysis MAX3 = 0.8 % by
volume is exceeded. Digital output of the CO analyser (statuses: CO < MAX3 /
CO > MAX3)
This field indicates whether the limit value of the CO analysis MAX4 = 1.2 % by
volume is exceeded. Digital output of the CO analyser (statuses: CO < MAX4 /
CO > MAX4)
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-17
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-18 Control system “failsafe plant interlocking“ with operator panel TP 177 B
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-19
This field indicates whether the hot gas flap is closed. External or integrated limit
switch at hot gas flap (statuses: Closed / Not closed / Open / Not open)
This field indicates whether the slack rope switch has been operated and if so,
that the rope or the chain of the hot gas flap is not in good condition. Slack rope
switch (statuses: Operated / Not operated)
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-20 Control system “failsafe plant interlocking“ with operator panel TP 177 B
This field indicates whether the high voltage of the efilter is switched on. Main
contactor of the ESP high voltage transformer (statuses: ON / OFF)
This field indicates whether the efilter is earthed. Earthing switch of the efilter
(statuses: Active / Not active)
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-21
This field indicates whether the kiln plant must be purged, e.g. after a shutdown
(see section Firing system interlocks) (statuses: Requested / Not requested).
This field indicates whether the preconditions for purging the kiln plant, e.g. cool-
ing air fans in operation, CO < MAX1,… are fulfilled (see section Firing system in-
terlocks) (statuses: / ).
This field indicates whether the first section of the kiln plant (main exhaust gas
route from clinker cooler to filter fan) has been purged (statuses: / ) or indi-
cates during the purging period the remaining purging time for the first section.
This field indicates whether the second section of the kiln plant (main exhaust gas
route from damper in kiln exhaust gas duct to filter fan) has been purged
(statuses: / ) or indicates during the purging period the remaining purging
time for the second section. The position of the fresh-air flap in the kiln exhaust
gas duct is no longer monitored in the second section. This means that the fresh-
air flap can be opened and the damper in the kiln exhaust gas duct can be partly
closed. This prevents excessive heat from being dissipated from the kiln system
during the purging process.
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-22 Control system “failsafe plant interlocking“ with operator panel TP 177 B
This field indicates whether the control system has enabled operation of the hot
gas generator (statuses: Blocked / Released).
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-23
This field indicates whether the burner is controlled locally or from the master
process control system (statuses: LOCAL / REMOTE).
This field indicates whether the burner is in the operating mode "Automatic" or
"Manual". In the "Automatic" operating mode, a setpoint value for the fuel quantity
is set; in the "Manual" operating mode, a setpoint value for the control device is
set (statuses: AUTO / MAN).
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-24 Control system “failsafe plant interlocking“ with operator panel TP 177 B
This field indicates the setpoint value set by the master process control system.
This field indicates the setpoint value that is transferred to the burner control sys-
tem after calculation of the heat quantities in the control system.
This field indicates the actual value that is transferred from the burner control sys-
tem to the control system.
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-25
This field indicates whether the bypass system must be purged, e.g. after a fail-
ure of the bypass exhaust gas fan (see section Firing system interlocks)
(statuses: Requested / Not requested).
This field indicates whether the preconditions for purging the bypass system, e.g.
bypass filter fan in operation, bypass hot gas flap closed,… are fulfilled (see sec-
tion Firing system interlocks) (statuses: / ).
This field indicates whether the bypass system has been purged
(statuses: / ) or indicates during the purging period the remaining purging
time.
This field indicates whether the control system has enabled operation of the hot
gas generator (see section Firing system interlocks) (statuses: Blocked / Re-
leased).
This field indicates whether the control system has enabled operation of the by-
pass efilter (see section Firing system interlocks) (statuses: Blocked / Released).
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-26 Control system “failsafe plant interlocking“ with operator panel TP 177 B
This field indicates whether the control system has enabled operation of the efilter
(see section Firing system interlocks) (statuses: Blocked / Released).
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-27
This field indicates whether the control system is running in safety mode or in
standard mode (see section Control system SIMATIC S7-300F) (statuses:
FAILSAFE / STANDARD).
This field indicates the status of the control system (statuses: Ok / Disturbed).
This field indicates the statuses of the I/O modules (statuses: Ok / Disturbed).
This field indicates whether all circuit breakers in the control cabinet are switched
on (statuses: Ok / Disturbed).
This field indicates whether an I/O module can be reintegrated after a fault has
been eliminated (statuses: Requested / Not requested).
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-28 Control system “failsafe plant interlocking“ with operator panel TP 177 B
The affected F-I/O and the affected channels are reintegrated when:
• communication errors, F-I/O faults and channel faults no longer exist
• the F-system has requested acknowledgement (see output field "Acknowl-
edgement for reintegration") and
• the user has touched the button Acknowledgement for reintegration.
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-29
Interlocks
Figure 37 Interlocks
This field indicates whether the respective preconditions e.g. for starting the SZ
burner are fulfilled (see section Firing system interlocks) (statuses: / ).
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-30 Control system “failsafe plant interlocking“ with operator panel TP 177 B
After touching the input/output field referred to the burner, the input dialog opens
on the screen. You can enter the required parameter with the input dialog. The
following preconditions must have been fulfilled:
• The respective burner must be switched off.
• "Administration“ authorisation necessary.
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-31
Indicates the heat capacity set by the master process control system. This pa-
rameter must be between the entered lower and upper limits ("LL" ≤ "From PCS"
≤ "UL") in order to ensure that it is accepted by the control system.
After touching the input/output field the input dialog opens on the screen. You can
enter the required lower limit for the specific heat capacity with this input dialog.
The following preconditions must have been fulfilled:
• The burner must be switched off.
• "Administration“ authorisation necessary.
Input / output field "UL"
After touching the input/output field the input dialog opens on the screen. You can
enter the required upper limit for the specific heat capacity with this input dialog.
The following preconditions must have been fulfilled:
• The burner must be switched off.
• "Administration“ authorisation necessary.
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-32 Control system “failsafe plant interlocking“ with operator panel TP 177 B
Latest messages
Message display
Figure 40 shows the message display that contains the two last current mes-
sages. The message lines are three-spaced. When you select the picture, the
cursor is automatically moved to the upper message line of this display.
The selected message, operable for acknowledging, appears in the colours text:
white, background: blue. The other messages appear in colour, depending on the
message class and the message status, see table Message classes.
Message blocks
The message lines consist of the following message blocks:
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-33
Message classes
Message Status Text col- Background Comment
class our colour
Error C Black Red
CG Black Red
CAck Black Grey
CGAck --- ---
System C Black Yellow No acknowledge-
ment demanded
CG --- ---
CAck --- ---
CGAck --- ---
Messages, with the statuses Come, Acknowledged and Gone are automatically
deleted from this message display.
Button
When this button is pressed, the cursor moves upwards in the message display.
Button
When this button is pressed, the cursor moves downwards in the message dis-
play.
Acknowledge button
This button acknowledges the message, selected in the message display using
the cursor. "Operate" authorisation necessary.
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-34 Control system “failsafe plant interlocking“ with operator panel TP 177 B
Message archive
The operating display "Message archive" is called up pushing the archive button
in the display "Latest messages".
Message display
Figure 41 shows the message display that contains the two last current mes-
sages. The message lines are three-spaced. When you select the picture, the
cursor is automatically moved to the upper message line of this display.
The selected message appears in the colours text: white, background: blue. The
other messages appear in colour, depending on the message class and the mes-
sage status, see table Message classes.
Message blocks
The message lines consist of the following message blocks:
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-35
Message classes
In contrast to the latest messages, here the messages are shown and saved with
all three statuses, that means also acknowledged messages relating to expired
events. This applies to max. 64 different messages with max. 256 statuses.
Button
When this button is pressed, the cursor moves upwards in the message display.
Button
When this button is pressed, the cursor moves downwards in the message dis-
play.
Delete button
This button deletes all messages visible in the message display and saved in the
message buffer. "Administration" authorisation necessary.
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-36 Control system “failsafe plant interlocking“ with operator panel TP 177 B
Message texts
General
To allow a detailed error analysis, the control system "failsafe plant interlocking"
provides fault messages.
If one or more errors occur, you can call up these fault messages on the operator
panel.
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-37
The following is a list of all fault messages of the control system "failsafe plant in-
terlocking". The messages vary depending on the system configuration.
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-38 Control system “failsafe plant interlocking“ with operator panel TP 177 B
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-39
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-40 Control system “failsafe plant interlocking“ with operator panel TP 177 B
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-41
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-42 Control system “failsafe plant interlocking“ with operator panel TP 177 B
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-43
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-44 Control system “failsafe plant interlocking“ with operator panel TP 177 B
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-45
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-46 Control system “failsafe plant interlocking“ with operator panel TP 177 B
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-47
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-48 Control system “failsafe plant interlocking“ with operator panel TP 177 B
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-49
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-50 Control system “failsafe plant interlocking“ with operator panel TP 177 B
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-51
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-52 Control system “failsafe plant interlocking“ with operator panel TP 177 B
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-53
5.6 System
Figure 42 System
System time
After touching the input field the input dialog for entering date and time opens on
the screen.
Offline button
This button finishes the "WinCC Flexible“ runtime application. The desktop
(graphical user interface) of the Windows CE operating system appears.
Clean TP button
After pressing this button, the touch screen is grey for 30 seconds. The functions
of the operating display are ineffective for this period of time and the screen can
be cleaned.
NOTE
For cleaning the screen, use a wet cleaning tissue with a cleaning agent. Only
use washing-up liquid or foaming cleaning agent for the screen.
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-54 Control system “failsafe plant interlocking“ with operator panel TP 177 B
Calibration button
Depending on installation position and viewing angle, during normal work with the
operator panel a parallax can occur. To avoid operating errors based on this par-
allax, you can recalibrate the touch screen during operation with this function.
Carefully press and briefly hold stylus on Message text: "Carefully press and briefly
the center of the target. Repeat as the target hold stylus on the center of the target. Re-
moves around the screen.
peat as the target moves around the
screen."
Target
3. After that, the target appears on four other positions. In each position
briefly touch the centre of the target. If you miss the centre of the target,
the procedure will be repeated.
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-55
If you have touched the target in every position, the following dialog is displayed:
New calibration settings have been measured. Message text: "New calibration settings
Tap the screen to register saved data.
Wait for 30 seconds to cancel saved data and
have been measured. Tap the screen to
keep the current setting. register saved data. Wait for 30 seconds to
cancel saved data and keep the current
setting."
4. Touch the screen within 30 seconds. The new calibration is stored. If you
wait longer than 30 seconds, the new calibration is discarded and the
previous calibration remains active.
By pushing this button the displayed value will be sent to the subordinated control
system. Date and time of touch screen and control system are cyclically synchro-
nised per minute by the control system.
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-56 Control system “failsafe plant interlocking“ with operator panel TP 177 B
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-57
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-58 Control system “failsafe plant interlocking“ with operator panel TP 177 B
The entire "WinCC Flexible“ project can be saved on the supplied memory card
after finishing the commissioning. If the operator panel TP 177 B is damaged, you
can restore the project on a new operator panel with this card according to the
following procedure.
After the runtime application has quit (see operating display "system") the follow-
ing dialog appears:
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-59
By pushing the Control Panel button you will call up the control panel of the op-
erator panel.
Figure 46 Backup/Restore
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-60 Control system “failsafe plant interlocking“ with operator panel TP 177 B
The message “Starting Backup“ is displayed. The first step is a check by pro-
gramming if a suitable memory card is inserted.
If the memory card contains data, the message "You may have an old backup on
the storage card. Do you want to delete it?" is displayed.
3. Touch Yes if you want to delete the data. Touch No if you want to retain the
data.
The messages "Checking Registry" and "Saving CE-Image" are displayed in se-
quence when the backup begins. A progress bar shows the status of the process.
The backup ends with the following message: "Backup successfully completed.
Press OK and remove your storage card."
The control panel is displayed. The data is saved on the memory card. Now you
can remove the memory card and store it on a suitable place.
En-16052.707-A
Operating Instruction Operator panel TP 177 B
Control system “failsafe plant interlocking“ with operator panel TP 177 B 5-61
The message “Starting restore“ is displayed. The first step is a check by pro-
gramming if a suitable memory card is inserted.
If no memory card is inserted in the card slot or if the memory card is damaged
the message "Storage card couldn't be detected. Try restore again? Insert stor-
age card and press OK or abort restore with CANCEL." is displayed.
When the data has been checked, the message "You are starting RESTORE
now. All files (except files on storage cards) and the registry will be erased. Are
you sure?" is displayed.
3. If you want the data to be restored, touch the Yes button. If you do not want
the data to be restored, touch the No button.
The messages "Deleting files on flash" and "Restore CE-Image" are displayed in
sequence once the restore process begins. A progress bar shows the status of
the process.
En-16052.707-A
Operator panel TP 177 B Operating Instruction
5-62 Control system “failsafe plant interlocking“ with operator panel TP 177 B
The restore ends with the following message: "Restore of CE Image finished. The
device will be rebooted now. Don`t remove the storage card."
The operator panel will be restarted; Loader and control panel open one after an-
other. Two messages are following. Then the final message appears: "Restore
successfully finished. Press ok, remove your storage card and reboot your de-
vice."
The operator panel will be restarted. The control panel is displayed. The data
from the memory card are on the operator panel. Existing licenses remain on the
operator panel, all other data which already existed are deleted.
En-16052.707-A
Operating Instruction Electrical commissioning
Control system “failsafe plant interlocking“ with operator panel TP 177 B 6-1
6 Electrical commissioning
En-16052.707-A
Electrical commissioning Operating Instruction
6-2 Control system “failsafe plant interlocking“ with operator panel TP 177 B
For checking the safety interlocks for the firing system and the efilter the commis-
sioning manager has to perform a test routine in co-operation with the customer
After a successful test of the safety functions (e.g. switching off if CO > MAX3,
failure of a system fan,...) a test log is drawn up and signed by both parties (see
the section Test log).
6.3 Handing-over
At the end of commissioning the software and the associated passwords are
handed over to the customer. This is noted in a handing-over record that has to
be signed by the commissioning manager and the customer (see the section
Handing-over record).
En-16052.707-A
Operating Instruction Maintenance
Control system “failsafe plant interlocking“ with operator panel TP 177 B 7-1
7 Maintenance
Make absolutely sure that the entire working area is cordoned off during mainte-
nance work to prevent unauthorised persons from gaining access.
Make absolutely sure that all machines and motors whose operation might en-
danger persons or equipment are switched off and safeguarded against restarting
for the entire duration of the maintenance work.
Switch off the power supply to the electrical components before starting any
maintenance work.
Keep the plant free of oily and combustible substances and materials! Be careful
with cleaning agents! Never use gasoline or other easily inflammable substances
for cleaning!
Remount all protection devices when maintenance work has been finished.
En-16052.707-A
Operating Instruction Spare Parts
Control system “failsafe plant interlocking“ with operator panel TP 177 B 8-1
8 Spare Parts
POLYSIUS AG want to make spare part enquiries and spare part order place-
ment as easy and efficient as possible. For this purpose we have prepared a form
sheet containing all data required by our spare parts department to ensure opti-
mum processing in the most speedy and troublefree manner.
Please provide all the data mentioned below in every enquiry or order for spare
parts or copy this sheet and enclose the copy with your order or enquiry.
We hope that this will ensure quick and smooth cooperation between you and our
spare parts department.
En-16052.707-A
Spare Parts Operating Instruction
8-2 Control system “failsafe plant interlocking“ with operator panel TP 177 B
En-16052.707-A
Operating Instruction Appendix
Control system “failsafe plant interlocking“ with operator panel TP 177 B 9-1
9 Appendix
En-16052.707-A
9-2
Appendix
Monitor
Visualisation General Arrangement Drawing
Failsafe Control Units for Kiln Firing
(with MASTER - MASTER communication)
(by ?????) OLM
* failsafe I/O‘s Optical Link Module
Server/Client
* FOC (fibre optical cable)
(by ?????) (by ?????)
Controller Controller
(kiln aerea) (cooler area)
(by ?????) *
OLM OLM
INTERLOCKING
MPI
TP177B failsafe PLC
S7-315F (Master)
OLM
*
Master-master-communication
Process
(digital and analog signals)
Profisafe (187.5 kBit/s)
Profibus DP * Profibus DP
(by ?????) (by ?????) (by ?????) (by ?????) (by ?????) (by ?????)
Profisafe Profisafe Profisafe
* * * *
OLM OLM OLM OLM OLM OLM
serial serial serial serial
DP / DP parallel parallel DP / DP parallel parallel
coupler Profisafe coupler Profisafe
* *
OLM OLM
serial serial
parallel
OP170B parallel
OP170B
En-16052.707-A
Monitor
Visualisation General Arrangement Drawing
En-16052.707-A
Failsafe Control Units for Kiln Firing
(with MASTER - SLAVE communication)
* failsafe I/O‘s
Server/Client
* Profibus FOC by ABB
Operating Instruction
Controller Controller
(kiln aerea) (cooler area)
OLM OLM
Profibus DP
Control Level
(by Polysius)
OLM OLM
POLYSIUS
Master-slave-communication
MPI
TP177B S7-315F (Master)
Address: x
OLM *
3K1Nxxx Process
(digital and analog signals)
* *
(by xxxx) (by Polysius ) (by xxxx ) (by xxxx) (by Polysius ) (by xxxx )
* * * *
OLM OLM OLM OLM
Typ: xxxx OLM OLM
serial serial serial serial
Precalcination Sintering Zone
parallel parallel parallel parallel
S7-315F (Slave) S7-315F (Slave)
Addr:3 Address: 20 Addr: 4
Address: 10 * *
* KxNxxx KxNxxx KxNxxx * LxNxxx LxNxxx LxNxxx
binary (parallel) analog (parallel) MPI (serial)
binary (parallel) analog (parallel)
(by xxx) (by xxx) (by xxx) (by xxx)
Monitor
Visualisation General Arrangement Drawing
Failsafe Control Units for Kiln Firing
(with PARALLEL communication)
* failsafe I/O‘s
Server/Client
* Profibus FOC
Controller Controller
(kiln aerea) (cooler area)
parallel
OLM OLM
Profibus DP
Control Level Profibus DP
Parallel communication
(by ?????)
OLM OLM
parallel parallel
*
(digital and analog
signals)
Process
(by ?????) (by ?????) (digital and analog signals)
to: xxxx
OLM OLM
DP / DP DP / DP
coupler coupler
OLM OLM
serial
OP170B serial
parallel OP170B
parallel
LxNxxx
* LxNxxx
(by ?????) * (by ?????)
En-16052.707-A
Operating Instruction Appendix
Control system “failsafe plant interlocking“ with operator panel TP 177 B 9-5
En-16052.707-A
Appendix Operating Instruction
9-6 Control system “failsafe plant interlocking“ with operator panel TP 177 B
Pressure after DOPOL exhaust gas fan > MAX (point 2.1.3.3) □
En-16052.707-A
Operating Instruction Appendix
Control system “failsafe plant interlocking“ with operator panel TP 177 B 9-7
Pressure after DOPOL exhaust gas fan > MAX (point 2.2.4.2) □
En-16052.707-A
Appendix Operating Instruction
9-8 Control system “failsafe plant interlocking“ with operator panel TP 177 B
Temp. after DOPOL exhaust gas fan > MAX2 (point 8.1.2) □
En-16052.707-A
Operating Instruction Appendix
Control system “failsafe plant interlocking“ with operator panel TP 177 B 9-9
En-16052.707-A
Appendix Operating Instruction
9-10 Control system “failsafe plant interlocking“ with operator panel TP 177 B
Temp. after DOPOL exhaust gas fan > MAX2 (point 8.1.2) □
En-16052.707-A
Operating Instruction Appendix
Control system “failsafe plant interlocking“ with operator panel TP 177 B 9-11
En-16052.707-A
Appendix Operating Instruction
9-12 Control system “failsafe plant interlocking“ with operator panel TP 177 B
En-16052.707-A
Operating Instruction Appendix
Control system “failsafe plant interlocking“ with operator panel TP 177 B 9-13
Pressure after DOPOL exhaust gas fan > MAX (point 7.2.3.2) □
En-16052.707-A
Appendix Operating Instruction
9-14 Control system “failsafe plant interlocking“ with operator panel TP 177 B
.................................................................................
Note site modifications according to "comments" □
(modification of documentation)
The performed test of the manufactured part shall not release the manufacturer from his Release for operation Yes No
responsibility for appropriate manufacture in conformity with the drawings.
En-16052.707-A
Operating Instruction Appendix
Control system “failsafe plant interlocking“ with operator panel TP 177 B 9-15
9.4.3 Passwords
- Operator panel user: ....................................................................................................................................
- Operator panel password: ....................................................................................................................
- Control system standard password: ...........................................................................................................
- Control system password safety program: ..............................................................................................
En-16052.707-A
Appendix Operating Instruction
9-16 Control system “failsafe plant interlocking“ with operator panel TP 177 B
9.5 Glossary
AV Actual value
BP Bypass
CC Combustion chamber
KI Kiln inlet
LL Lower limit
TP Touchpanel (Touchscreen)
UL Upper limit
En-16052.707-A