In the field of industrial automation, safety controllers are the last line of defense for equipment safety circuits. Banner Engineering's XS/SC26 series (expandable) and SC10-2 (compact) safety controllers are gradually replacing traditional safety relay modules with flexible functional block programming, rich industrial Ethernet protocol support, and powerful ISD (In Series Diagnostic) diagnostic capabilities. However, grounding negligence, incorrect connection of functional blocks, Ethernet communication failures, and false triggering of latch states during on-site installation often result in extended debugging cycles. This article is based on the official Banner manual, which outlines the installation points, programming pitfalls, communication configuration, and fault code response strategies of safety controllers from an engineering practical perspective, helping engineers quickly put them into use.
The 'invisible killer' in hardware installation
1.1 Electrostatic Discharge (ESD) and Protective Strips
Manual repeatedly warns: ESD sensitive devices. Before installing a processor, memory module, or data access tool (DAT), the base power must be disconnected and static electricity must be released by touching the grounded metal. Do not touch the bus connector pins when disassembling or assembling modules. In addition, the protective dust strip on the base must not be removed before wiring is completed - drilling metal debris that falls into the circuit board may cause permanent damage. After wiring is completed and debris is cleaned, the dust strip can be removed and the processor can be installed.
1.2 Grounding and Common Mode Voltage
All Banner safety controllers require the use of a 24V DC ± 20% SELV/PELV power supply. A detail that is easily overlooked: the USB interface is not isolated from the 24V return line. Special warning in the manual: USB cables may cause the computer and controller to become accidental grounding circuits for other devices, and high currents can burn out the computer or controller. Therefore, it is recommended to use SC-USB2 dedicated cables during debugging and place the computer on a non-conductive surface. If necessary, disconnect the laptop's AC power supply. If long-term monitoring is required, Ethernet interface (only applicable to FID 7 and above models) should be used.
1.3 DIN rail installation and heat dissipation
The controller must be installed vertically (with the ventilation opening facing up/down), with a 50mm heat dissipation gap reserved around it. It is strictly prohibited to level or invert. The DIN rail lock can extend 15 mm in the open state, and it needs to be pried open with a screwdriver when removed. For XS26 scalable systems, a maximum of 8 I/O modules are supported (16 for FRN 6 and later), and each extended I/O group (Bank) must be separately configured with a power supply (such as 1769-PA2/PB2), and the EtherCAT gateway module must be located adjacent to the base.
The 'Function Block Trap' in Software Configuration
Banner safety controller software (free download) adopts drag and drop function block programming, greatly simplifying logic design, but the following errors can easily lead to invalid configuration or output failure.
2.1 Essence of Connection Rules
An output node can connect multiple input nodes, but an input node can only accept one source. Attempting to connect two manual reset signals to the same Latch Reset block LR node will result in an error.
Manual Reset can only be connected to specific nodes: LR (latch reset), FR (fault reset), RST (enable device reset), SET/RST (trigger block), and the input of the reset dedicated OR block. Ordinary OR blocks cannot be used for reset signals.
In the Muting function, emergency stop and pull switch cannot be muted. If E-Stop is connected to the IN node of the Muting block, the software will report error F.1.
2.2 ATO automatic terminal optimization and external terminal block
SC10-2 defaults to ATO (Automatic Terminal Optimization). When the input terminals are insufficient, the system will automatically share the same I/O output terminal with multiple devices that require+24V test pulses (such as door switches) through an external terminal block (ETB). This will expand the number of inputs from 10 to a maximum of 14. If ATO is disabled, the terminals must be manually reassigned, otherwise more devices cannot be added. If it is found during debugging that "new input cannot be added", check whether ATO has been unexpectedly closed.
2.3 Virtual Reset and Activation Code
Starting from XS/SC26 FID 2 and SC10-2, virtual manual reset and delay cancellation (via Ethernet or Modbus register writing) are supported. But ISO 13849-1 requires that resetting must be an 'intentional operation'. To this end, Banner has designed an activation code mechanism: the PLC must first write the correct activation code to the RCD Enable Register (which can be customized in the software), then write 1 to the RCD Register Bit, and reset the activation code within 2 seconds. If the activation code does not match or times out, the reset is invalid. If virtual reset is used in the configuration, the activation code must be set in Network Settings, otherwise the configuration cannot be confirmed.