E94AYAA Lenze 9400-series Integrated Safety Control Module

Product Overview

The E94AYAA (E94AYAA) is a high-integrity safety control module specifically developed for the Lenze 9400-series servo drive system. This module serves as the primary hardware interface for implementing localized functional safety, ensuring that machinery can be brought to a safe state during an emergency or maintenance intervention. Engineered for mission-critical industrial applications, the E94AYAA provides a "Safe Torque Off" (STO) function, which prevents the drive from generating torque without disconnecting the mains power. This German-manufactured module is essential for compliance with international safety standards (such as EN ISO 13849-1 and SIL 3), allowing production leaders to maintain high safety levels while minimizing hardware-related downtime and protecting both personnel and high-value automation assets.

Technical Configuration

The E94AYAA is designed as a plug-in functional unit that integrates directly into the dedicated safety slot of a 9400-series servo drive. Its architecture is focused on dual-channel redundancy, a requirement for high-level safety ratings. The module features a highly compact and lightweight design, weighing just 0.06 kg, which allows for efficient installation without altering the drive's physical footprint. It facilitates the direct connection of safety devices such as emergency stop buttons, light curtains, or safety interlocks. The hardware is testable and monitors itself for internal faults, providing real-time feedback to the drive's control unit to ensure that the safety function is always available when required.

Technical Specifications

Technical FAQs

Does the E94AYAA require additional software to activate its safety functions?

The core STO function of the E94AYAA is hardware-based. However, the drive’s safety parameters must be configured using the Lenze L-force Engineer software to ensure the diagnostic feedback and restart logic match your specific machine safety protocols.

Can I use the E94AYAA to replace an older safety relay system?

While the E94AYAA provides the safety function at the drive level, it is typically part of a larger safety chain. It replaces the need for high-current safety contactors in front of the drive, but it must still be triggered by a certified safety controller or a dry-contact emergency stop circuit.

What is the impact of a fault detected within the E94AYAA module?

If the module detects an internal hardware failure or a dual-channel discrepancy, it will immediately trigger a "Safe State" (inhibiting the drive output) and signal a fault to the drive's display. The drive cannot be restarted until the fault is cleared and the safety circuit is reset.

Engineering & Installation Guide

Dual-Channel Wiring and Redundancy:

To achieve a PL e or SIL 3 rating, the E94AYAA must be wired using a dual-channel configuration. This involves using two separate 24 VDC control signals. If only a single-channel signal is used, the safety rating of the entire system will be significantly downgraded (typically to PL c or SIL 1), which may not meet the safety requirements for your specific machinery.

Handling and ESD Protection:

Like all 9400-series expansion modules, the E94AYAA is sensitive to electrostatic discharge. Ensure the drive is completely powered down and the DC bus is discharged before insertion. Use an ESD-safe wrist strap during installation to prevent damaging the sensitive logic circuits that monitor the safety feedback loops.

Validation and Proof Testing:

After installing the E94AYAA, the safety function MUST be validated by a qualified technician. This involves triggering the safety circuit and verifying that the drive enters the "Safe Torque Off" state and that the motor cannot be restarted while the safety command is active. This proof test should be documented as part of the machine’s safety file and repeated at regular maintenance intervals.