Risks according to risk assessment#
According to our risk assessment, the following acceptable risks exist for the device:
Incorrect operating (software), with regard to the control of third-party devices
The device is a software controllable processor system. The user and/or operator may use the software and adapt it to his needs. Since inputs and outputs of the system can be controlled by the software, there is always the risk of a incorrect operation. Since the device is a flexible system regarding the interfaces and neither those connected to the inputs nor outputs are specified or restricted by the device manufacturer (us), risks may arise if the third-party devices are not rated and/or handled properly. These risks should be mitigated by internal protections of third-party devices be so that even in the event of an operating error, there is no danger to users and other persons nor any property. Therefore, we advise the operator and users to select the peripherals also according to these aspects.
Error propagation, with regard to the power supply for connected third-party devices
External devices can be supplied with the device by redistributing the input voltage (24 V DC) to the connected external devices (e.g. lights or light barriers). In case of errors of the main power supply or system breakdown, the power supply and control of the connected external devices may be affected. In safety relevant applications, this must be considered and connected third-party devices shall not double for safety applications at the same time.
Incorrect operation (software) with regard to protective devices
External devices can be supplied with the device by redistributing the input voltage (24 V DC) to the connected external devices (e.g. lights or light barriers). The corresponding circuits are equipped with over-current protection. If the fuse was triggered by an error (e.g. short circuit on a third-party device), it may be reset by restarting (disconnecting voltage) the system or via software control. There is no automatic reset function build into the device. However, there is a risk that the operator and user of the device implements a corresponding automatism in the software. We expressly advise against an automatic reset and hereby point this out to the operators and users of the device - and these are in particular the software developers, programming the applications on the device. The over-current protection shall only be reset after manual error check and confirmation.
Mechanical damage in the event of improper installation / transport
The device is a technical device with a metal body. If the device is not firmly mounted as specified or not moved (e.g. during transport or disposal) in the supplied packaging, there is always the risk of dropping the device from an undefined height. This may lead to injuries if hit by the falling device. Therefore, it is necessary to ensure that an adequate mounting is carried out by a specialist and the device is always handled with appropriate care. Pay attention to wearing protective work clothing, e.g. protective work shoes!
Electrical safety
According to section interfaces, the device should be protected by a suitable, fast-acting fuse that does not reset automatically. This serves electrical safety and fire protection.
Functional safety
The device does not meet the requirements of IEC 61508! In Safety-relevant applications, the device must always be combined with additional components to ensure the safety of the system.