Siemens Industry Online Support
Siemens AG
Entry type: Application example Entry ID: 21064024, Entry date: 05/19/2017

Emergency stop up to SIL 3 / PL e with a fail-safe S7-1500 controller

  • Entry
  • Associated product(s)
In order to be able to safely switch of a machine even in an emergency situation, an emergency stop command device is attached and the actuators are controlled via two contactors. The safety function is designed up to PL e in accordance with EN ISO 13849-1 and SIL 3 in accordance with IEC 62061.

For a seamless integration into the automation process, the failsafe S7-1516F controller is used, in which standard user program and safety program run next to each other.

In order to achieve the demanded safety level, the emergency stop is designed with two channels and monitored for discrepancy and cross-circuit by the controller.

The actuators are also set up redundantly, so in case one contactor fails (e.g. welding of the contacts) the machine is still safely switched off by the second contactor.

Documentation and example projects
  Documentation (1,4 MB)
 Registrierung notwendig  Project for TIA Portal V14 (2,5 MB)
 Registrierung notwendig  Evaluation of the safety function as SET project (12,3 KB)

Version 4.0 with distributed I/O system
  Documentation (1,2 MB)
 Registrierung notwendig  Project for STEP 7 V13 SP1 (14,8 MB)
 Registrierung notwendig  Project for Safety Evaluation Tool (12,1 KB)

Last Changes
Upgrade to TIA Portal V14
Replacement of decentral periphery with central modules

Additional Keywords
TIA-Portal, emergency-stop, Safety Integrated, Safety function

Security information
In order to protect technical infrastructures, systems, machines and networks against cyber threats, it is necessary to implement – and continuously maintain – a holistic, state-of-the-art IT security concept. Siemens’ products and solutions constitute one element of such a concept. For more information about cyber security, please visit