PILZ PNOZ X2.8P Safety Relay Wiring and Installation Guide

---

1. Introduction: The Critical Role of the PNOZ X2.8P in Machine Safety

The Pilz PNOZ X2.8P safety relay is a foundational component in achieving safety integrity across industrial automated systems. It is specifically engineered to monitor critical safety devices—such as emergency stop (E-STOP) pushbuttons, mechanical safety gates, and optical protective equipment (like light curtains)—and ensure a predictable, safety-oriented shutdown of hazardous motion. Field technicians and system integrators rely on this unit because it guarantees adherence to stringent global standards, including EN ISO 13849-1 (allowing for up to Performance Level 'e') and IEC 62061 (up to Safety Integrity Level 3, or SIL 3). The quality of the final machine safety system is directly proportional to the accuracy of the PNOZ X2.8P’s wiring and installation. Understanding the nuances of its connections is not just a best practice; it is a regulatory requirement for maintaining certified machine safety.

---

2. Foundational Installation and Supply Voltage Requirements

Proper physical installation sets the stage for reliable electrical performance. The PNOZ X2.8P is designed for robust industrial environments but requires adherence to installation specifics.

2.1. Physical Mounting Environment and Practices

The PNOZ X2.8P is compact, typically measuring 22.5 mm wide, and is secured onto a standard 35 mm DIN rail within the machine's control cabinet.

• Environmental Protection: The control cabinet housing the unit must provide a minimum ingress protection rating of IP54. This protects the sensitive electronics from the particulate matter and moisture common in manufacturing environments.
• Orientation and Spacing: While the relay can theoretically be mounted in any orientation, standard vertical mounting is recommended to facilitate the most effective convection cooling. Adequate spacing from major heat-generating components (like large motor contactors or transformers) should be maintained to prevent thermal stress on the relay's internal circuitry.
• Vibration Mitigation: In areas subjected to significant machine vibration, technicians should use DIN rail end stops and retaining clips to secure the relay firmly. A loose connection due to vibration is a frequent but often overlooked cause of intermittent safety circuit faults.

2.2. Electrical Power Supply Connection and Verification

The PNOZ X2.8P family supports various operating voltages. A critical initial step is confirming the specific model’s rating.

• Terminals A1 and A2: These are the primary power terminals. For a 24 V DC system, A1 is connected to positive (+) and A2 to negative (-). For AC systems, A1 is the Line (L1) and A2 is the Neutral (N).
• Technician’s Voltage Check: Before applying power for the first time, technicians must use a multimeter to verify the voltage applied across A1 and A2 matches the specified range printed on the relay's housing. Applying an incorrect voltage—even momentarily—can permanently compromise the internal components, leading to unpredictable safety failures. Proper circuit protection (fusing) for the control voltage supply is mandatory to protect the unit from power surge damage.

---

3. The Redundancy Principle: Single-Channel vs. Dual-Channel Input Wiring

The primary function of the PNOZ X2.8P is to monitor external safety devices, and the method of wiring the input contacts fundamentally defines the safety category and Performance Level of the entire system.

3.1. Single-Channel Input Wiring

Single-channel wiring utilizes only one Normally Closed (N/C) contact from the safety device, connecting the circuit to input terminals S11-S12 or S21-S22.

• Inherent Limitation: This configuration is non-redundant. If the single wire breaks or shorts to ground, the fault may not be detected by the PNOZ X2.8P’s internal diagnostics until the next demand on the safety function. It can only reliably achieve low to medium safety levels (typically up to PL c).
• Usage Context: Used exclusively in applications where the potential for injury is low and the required Performance Level is minimal.

3.2. Dual-Channel Input Wiring (Standard Practice)

This configuration uses both input channels (S11-S12 and S21-S22) to monitor two independent N/C contacts within the safety device (e.g., a two-contact E-STOP button). This is the mandatory configuration for high safety integrity systems (PL d/e, Cat. 3/4).

• The Principle of Diversity: By monitoring two independent signals, the PNOZ X2.8P ensures that a single fault—such as a component failure or a wire break—will not lead to the loss of the safety function.
• Cross-Wire Short Detection: A key diagnostic feature of the PNOZ X2.8P in dual-channel mode is the detection of a short circuit between the S12 and S22 wires. It achieves this by injecting a brief test pulse onto the lines. If the unit detects a short, it recognizes a failure in redundancy and prevents the machine from starting, adhering strictly to safety regulations. Technicians must ensure the input devices are compatible with this test pulse principle.

Wiring Configuration	Target Safety Level	Input Terminals Used	Primary Diagnostic Capability
Single-Channel	PL c or lower	S11-S12 (or S21-S22)	None (Relies on contact opening)
Dual-Channel	PL d/e, Cat. 3/4	S11-S12 and S21-S22	Cross-Wire Short and Earth Fault Detection

---

4. System Integration: Interfacing the PNOZ X2.8P with PLCs

The safety relay is fundamentally a hardware solution, but it must communicate its status to the Programmable Logic Controller (PLC) for operational control and HMI display. The PNOZ X2.8P facilitates this through its outputs.

4.1. Connecting Safety Outputs to Final Switching Elements

The three redundant safety outputs (13-14, 23-24, 33-34) must control the final switching elements, usually power contactors (K1, K2), which directly cut power to the motors or actuators.

• Series Control: To maintain redundancy, it is paramount that at least two of the N/O safety contacts are wired in series to control the coil of the final switching element. For instance, contacts 13-14 and 23-24 could be wired to the coil of K1. This ensures that even if one contact on the PNOZ X2.8P welds shut, the safety function can still be executed via the other contact.
• Fuse Protection: Given that contactor coils are inductive loads, they generate high inrush currents and back EMF. Proper protection requires installing fast-acting fuses (e.g., 6 A) in the power line feeding the safety outputs to prevent contact welding over time.

4.2. Utilizing the Auxiliary Contact for PLC Signaling

The non-safety auxiliary contact (41-42, Normally Closed) provides the operational status signal needed by the PLC.

• PLC Input Mapping: The N/C contact (41-42) should be wired to a standard digital input card on the PLC.
• Relay De-energized (Safe State): When the PNOZ X2.8P is tripped (outputs open), the 41-42 contact closes. The PLC input should read "ON," indicating the safety circuit is open.
• Relay Energized (Ready/Run State): When the PNOZ X2.8P is reset and ready, the 41-42 contact opens. The PLC input should read "OFF," indicating the safety circuit is closed and the machine can run.
• PLC Programming Context: The PLC program should never use this auxiliary signal (41-42) to directly control a safety-related shutdown. Its sole purpose is for diagnostics, status display on the HMI, and logging machine downtime. The safety shutdown itself must rely entirely on the hardware control provided by the safety outputs (13-14, etc.) to the contactor coils. Using this signal for safety control would undermine the entire hardware-based safety architecture.

---

5. Reset/Start Logic: Ensuring Operator Acknowledgment

The reset logic is the crucial interface between the technical safety system and the operational human element. The PNOZ X2.8P manages the machine’s restart condition via the S34-S52 terminals.

5.1. Monitored Manual Start (Standard Safety Requirement)

For nearly all medium to high-risk applications (PL d/e), a monitored manual start is mandatory.

• The Wiring: A momentary, Normally Open (N/O) pushbutton—the "Reset" or "Start" button—is connected between S34 and S52.
• The Logic: The PNOZ X2.8P requires the safety inputs (S11-S12 and S21-S22) to be closed first. Only after this condition is met can the operator press the Start button, momentarily closing the S34-S52 loop. The PNOZ X2.8P then verifies that the button releases (opens) immediately after being pressed, preventing a permanent bypass (stuck button). This ensures the operator has actively acknowledged the safe state before the machine can restart, which is a key safety philosophy in EN ISO 13849-1.

5.2. Integrated Feedback Loop (Preventing Contactor Failure)

The feedback loop is essential for achieving the highest safety levels (Cat. 4/PL e) because it forces the PNOZ X2.8P to self-check the entire control chain.

• The Wiring: The Normally Closed (N/C) monitoring contacts of the final switching element(s) (K1, K2) are wired in series with the Start button between S34 and S52.
• The Check: When the E-STOP is activated, the PNOZ X2.8P opens its outputs, de-energizing K1 and K2. The N/C feedback contacts should then close. If the contactors fail to drop out (e.g., due to welded contacts), the feedback loop remains open, and the PNOZ X2.8P will inhibit the reset function. This guarantees that the machine cannot be restarted until the faulty contactor is replaced or repaired, proving the integrity of the power cut-off mechanism. A technician must always verify the functional check before restoring power to the system.

---

6. Advanced Troubleshooting: Interpreting LED Patterns for Rapid Diagnosis

The five LED indicators on the face of the PNOZ X2.8P provide an immediate, structured diagnostic window into the safety circuit's status. Masterful interpretation of these indicators is critical for minimizing downtime.

6.1. Systematic LED Interpretation

LED Indicator	State	Diagnostic Cause (Field Technician’s Action)
POWER	Off	No control voltage applied to A1/A2. (Check fuses/breaker upstream.)
POWER	On	Supply voltage is present. Proceed to check channel LEDs.
CH.1 / CH.2	On	The corresponding input channel is closed (safe device released).
CH.1 / CH.2	Off	The input channel is open (safe device tripped) or a wiring break has occurred. (Inspect the E-STOP contacts and wiring integrity.)
CH.1 & CH.2	Both On, Outputs Open	The E-STOP is released, but the Reset/Feedback Loop is open. (Check Start button and the feedback contacts of the final contactor.)
CH.1 & CH.2	Flashing Alternately	Cross-Wire Short/Earth Fault on the input lines S12/S22. (Immediate isolation required; inspect wiring for insulation damage.)

6.2. Experienced Diagnosis of Intermittent Faults

Intermittent faults—where the relay trips randomly—are often challenging. In high-vibration environments, technicians should suspect wiring that is loose or poorly terminated (e.g., insufficient torque on screw terminals). The PNOZ X2.8P's push-in terminals, where applicable, mitigate this, but screw terminals require routine verification using a torque wrench. If the fault is non-physical, a common cause is an external electrical disturbance (noise/EMI). In such cases, the input wiring (S11-S12, S21-S22) should be run in a separate, shielded conduit, away from high-power cables like motor VFD outputs. This signal separation is a cornerstone of reliable safety installation.

---

7. Cascading Logic: Considerations for Series Connection (Cascading)

In large machines or integrated safety cells, multiple safety devices (e.g., ten different safety gates) often need to be monitored by a single safety relay. Wiring multiple devices in series, known as cascading, is a common practice, but it has safety implications that must be managed.

7.1. Wiring Multiple Safety Devices in Series

To monitor multiple N/C safety contacts (e.g., contacts from various door switches) with the PNOZ X2.8P, the safety contacts are wired sequentially:

• Channel 1 Series: S11 is connected to the first contact, which exits to the second, and so on, until the last contact returns to S12.
• Channel 2 Series: The same procedure is followed for Channel 2, connecting S21 to the first contact's second channel, and the last contact back to S22.

7.2. The Safety Degradation Problem in Cascading

While cascading simplifies wiring, it introduces a critical limitation known as Fault Masking or Diagnostic Coverage Reduction. The longer the series chain:

• Increased Resistance: The total cable length and the number of contact resistances increase the electrical impedance of the loop. This can suppress the PNOZ X2.8P's ability to reliably detect low-level faults, such as a subtle earth fault or a short circuit between two distant points in the chain.
• Localization Difficulty: When the safety relay trips, the LED indicators simply show CH.1/CH.2 open. The technician must manually check every single device in the chain to find the one that opened, leading to extensive troubleshooting time.

7.3. The Solution: Use Dedicated Safety Bus Systems

For applications requiring high PL e or monitoring more than 3-4 safety devices, experienced integrators avoid long series chains. Instead, they recommend connecting each safety device to a dedicated decentralized safety I/O module (e.g., Pilz PSS or PNOZmulti system). This allows each individual device's status to be monitored independently via a safety bus (like PROFIsafe or CIP Safety), preventing fault masking and allowing the HMI to pinpoint the exact device that caused the trip, significantly accelerating fault recovery time and maintaining the required high Performance Level.

---

8. Conclusion: The Blueprint for PNOZ X2.8P Excellence

The Pilz PNOZ X2.8P is a workhorse in industrial safety, providing a robust, hardware-based means of protecting personnel. Achieving a high safety Performance Level depends entirely on meticulous execution of the wiring plan. Technicians must prioritize dual-channel inputs for redundancy, correctly integrate the monitored start and feedback loop, and understand how to leverage the auxiliary output for non-safety PLC monitoring. By strictly adhering to these installation principles and utilizing the diagnostic LEDs effectively, the PNOZ X2.8P will consistently deliver reliable machine safety compliance.

---

Note to Readers: This guide is for informational purposes and should not replace official Pilz documentation or professional safety engineering consultation. All installation and maintenance work must be performed by qualified personnel strictly following local safety regulations.

The author assumes no liability for any loss, damage, or malfunction resulting from the use or application of this information. Use is strictly at the reader's own risk.