Basic Functional Scheme for E-stop with Reset and EDM

I have written a basic functional Scheme for an Emergency Stop with (Manual) Reset and EDM in ctrlX Safety Engineering. I would like some confirmation that this is the correct/best way to write this functionality. Or is there a better way?

The scheme outputs a signal Estop_Status that would drive an external relay with a N/C forced guided contact connected to an EDM input.

Function Description:

Estop_Status off after power on.
Estop_Status off when emergency stop is pressed.
Estop_Status off when EDM mismatch is detected.
Estop_Status Does not come on when EDM mismatch is cleared
Rising/Falling sequence on Reset input requried to turn Estop_Status back on
Reset input clears any previous EDM error

Functional Scheme below.

Note: I have used a ctrlX PLC and functional I/O to simulate the external relay and adjust the EDM time to simulate faults.

Hi bclapperton,

First I would like to tell you some limitations if you are using the current release SAFEX-C.1x Firmware 1.0.1.29-FPGA211 and ctrlX SAFETY Engineering 1.7.1.8239:

EDM block reset is not working, the only way to reset the EDM block is to set the Start/Reset element as "Use as Alarm Reset", but this will reset all your PLC logic (Bug #584752)
For the restart of the Restart block you can use a normal Confirm Button, you don't need to use a Start/Reset element (you can use it if you want of course)

Because of these limitations I would not recommend to use the logic you posted on the current release sorry 😅

Regarding the application itself, I have 2 things to say:

Instead of using the Restart block to control the emergency button you can do this, it has the same effect:

Regarding the EDM, the function is to monitor loop feedback for contact multiplication following the cat 4 of EN 954 1, is this your use case?

Best Regards,

BRamos