PLC Simulator
All 151 components

controls · safety model

Safety relay

A safety relay monitors safety devices such as an emergency stop or guard switch and removes hazardous-motion permission through redundant, force-guided outputs. A standard PLC can display status and coordinate normal production, but it must not silently replace the safety function. The important PLC boundary is command versus permission: the controller may request motion only while the independently validated safety circuit reports healthy.

2 I/O points1 snap portsPLC-driven state

Start with the public scenario; create a free account when you want to save progress.

Isolated component viewPROP_SafetyRelay_ROOT

Explore Safety relay in 3D

Load the interactive model when you are ready to rotate, inspect and operate it. Deferring WebGL keeps the reference page fast.

Motion and state

Its state is used to practise permissive and trip reasoning; it is not a safety-rated engineering model.

PLC control pattern

Commission it by proving active feedback before accepting enable.

Fault practice

Inject stuck-on, stuck-off states and require the PLC sequence to detect, stop and recover deliberately.

PLC integration guide

How to use a safety relay with a PLC

Keep safety removal in the safety-rated path

Dual input channels allow the relay to detect a single open circuit, contact fault or channel discrepancy. Its output contacts drive safety contactors, safe drive inputs or another validated final element according to the risk assessment. A standard PLC status bit is useful for messages and sequence inhibition, but software, network communications and an ordinary output do not acquire a safety rating because the logic looks redundant.

Reset means ready—not restart

A manual monitored reset should be accepted only after input channels are healthy, external devices have returned to their expected state and the reset signal makes the required transition. Resetting the relay restores permission; a separate deliberate machine start command should be required. PLC logic should clear stale run requests when safety permission drops so motion cannot resume unexpectedly when the circuit is restored.

Use external device monitoring to find welded contactors

External device monitoring reads mechanically linked normally-closed auxiliary contacts from the final contactors. Before reset, those contacts must prove the contactors actually opened. If a power pole or mechanism remains closed, the feedback path prevents reset. The PLC can present a specific EDM fault to maintenance, but the safety relay performs the safety-rated monitoring.

Learn the physical principle first

The reference above focuses on PLC integration. The interactive school lesson shows the device, signal or mechanism before you write the control sequence.

Learn the E-stop mechanism and reset principle

Signal map

I/O you can reason about

PLC output Enable; PLC input Active feedback

SignalPLC directionType / range
Enable
enable
outputbool
Active feedback
active
inputbool

Field checklist

Commissioning sequence

  1. 01Verify the safety function, stop category, required performance and wiring architecture against the documented risk assessment.
  2. 02Operate each input channel independently using an approved test and confirm a channel discrepancy prevents reset.
  3. 03Press every E-stop and open every guard in each relevant operating mode while measuring the required stopping result.
  4. 04Reset the initiating device and prove the machine remains stopped until a separate start action.
  5. 05Test external-device-monitoring failure and confirm the safety relay cannot reset while the final elements report closed.

Fault finding

Symptoms and first checks

SymptomCheck
Safety relay will not resetCheck both input channels, reset-edge requirements, feedback-loop state, supply voltage and the device diagnostic code.
Relay resets but PLC still shows safety openTrace the auxiliary status contact, input common, PLC address and any inversion in the standard program.
Intermittent channel discrepancyInspect simultaneous contact operation, cable damage, loose terminals and test-pulse compatibility. Do not mask it with PLC delay.

Fault and recovery exercise

Make abnormal states part of the sequence

Inject stuck-on, stuck-off states and require the PLC sequence to detect, stop and recover deliberately.

stuck-onstuck-off

Engineering boundary

Training model only. It does not perform a machinery risk assessment, calculate performance level or SIL, replace a safety PLC, or validate a real safety function.

Plain-English answers

Safety relay FAQ

Can a normal PLC replace a safety relay?

Not for a safety-rated function. Use certified safety hardware and a validated design appropriate to the risk. A standard PLC may consume diagnostic status only.

Why does a safety relay need two channels?

The architecture can detect certain single faults and disagreement instead of allowing one hidden wiring or contact failure to defeat the stop request.

What is a monitored reset?

The safety device checks that reset occurs as a deliberate signal transition under valid conditions rather than accepting a permanently bridged reset input.

Free first success

Put the safety relay into a working control sequence

Open a related browser scenario, run the PLC logic and see the component state respond. Start without installing software or entering a card.

No installNo credit cardImmediate pass/fail feedback