Pro
18 min

Wiring 8 — Dual-Channel E-Stop (Cat 3 Safety)

wiringsafetyestopdual-channelcat3safety-relay

Ready to build this?

Sign up free — no credit card required. This scenario requires the Pro plan.

Sign up to play this scenario →

Already have an account? Log in

Wiring 8 — Dual-Channel E-Stop (Cat 3 Safety) scenario preview

Briefing

Category 3 (Cat 3) e-stop circuits use **two independent channels** so that a single component failure cannot prevent the machine from stopping. **Architecture:** - E-stop button has two NC contacts (CH1 and CH2). - Both channels feed separate inputs on the safety relay. - The safety relay monitors cross-faults (short between channels). - The relay output enables the machine power contactors. Wire the dual-channel e-stop to the safety relay and verify the reset circuit. ⚠️ Correctness is critical — an incorrect wiring here represents a real safety hazard.

Objectives

  • Wire E-stop CH1 NC contact to safety relay input S11
  • Wire E-stop CH2 NC contact to safety relay input S21
  • Wire safety relay 13-14 output to enable %I0.0
  • Wire reset pushbutton to safety relay S34

Hints

  • Both NC contacts must open on e-stop activation for Cat 3 compliance.
  • The reset button must be a deliberately actuated action — not automatic.

I/O Table

Inputs

ESTOP_CH1

E-stop CH1 NC contact → safety relay S11

BOOL · %I0.0

ESTOP_CH2

E-stop CH2 NC contact → safety relay S21

BOOL · %I0.1

SR_OUT

Safety relay output (13-14) → PLC safe-state input

BOOL · %I0.2

RESET_PB

Manual reset pushbutton → safety relay S34

BOOL · %I0.3

Ready to build this?

Sign up free — no credit card required. This scenario requires the Pro plan.

Sign up to play this scenario →

Already have an account? Log in

Competency and practice field guide

Dual-channel safety-circuit scenario: practice plan

Direct answer

The learner can explain why both channels, discrepancy behavior, reset and final-element feedback must agree before a safety request can be considered healthy.

Written for automation learners tracing two emergency-stop channels through a generic monitoring device to redundant output paths.

a guarded machine-safety training cell with an emergency stop, two-hand station, safety mat, light curtain and inspectable relay panel while studying dual-channel emergency-stop wiring, discrepancy monitoring, reset and output-device evidence
System map / 02

NODE 01observable

Scope

Risk function, channel one, channel two, test pulses or common-cause assumptions, discrepancy time, monitor state, reset, redundant outputs and feedback.

NODE 02observable

Signal path

Actuator contacts through independent conductors, monitoring logic, output elements, machine stopping request and external-device feedback.

NODE 03observable

Baseline practice

Both channels healthy, deliberate trip observed, outputs removed, reset blocked until conditions are valid and no automatic restart.

NODE 04observable

Edge cases

One channel opens, channels switch apart, cross short, welded final element, reset held, feedback missing, supply loss and restart.

NODE 05observable

Fault practice

An actuator, channel, conductor, discrepancy, monitor, reset, output element, feedback or stopping-response mismatch.

NODE 06observable

Transfer to the job

The actual function engineered and validated by competent persons using the risk assessment, exact devices and applicable machinery-safety standards.

Answer surface / 07

Why use two channels in an emergency-stop circuit?

A suitable architecture can detect certain single faults and retain or improve fault response, but two wires alone do not establish a safety category or performance level.

What is safety-circuit discrepancy monitoring?

It checks whether related channels change within the permitted relationship and time. A discrepancy should produce a defined fault and controlled reset requirement.