440R-N23132 — MSR127RP Safety Relay, Dual-Channel, Auto/Manual Reset, 24V DC

The 440R-N23132 is a safety relay module from the MSR127 series, designed for dual-channel emergency stop and safety gate monitoring applications. It accepts two independently monitored 24V DC input channels from safety devices (E-stop buttons, safety interlock switches, light curtain OSSDs) and provides three safety-rated output contacts plus one auxiliary contact. Auto or manual reset is selectable via a front-panel switch. The unit is certified for SIL 3 (IEC 61508) and PLe Category 4 (ISO 13849-1) — the highest performance level for a standard safety relay configuration.

Specifications

Parameter	Value
Part Number	440R-N23132
Series	MSR127
Supply Voltage	24V DC (19.2–28.8V)
Input Channels	2 (dual-channel, independently monitored)
Compatible Input Devices	E-stop buttons, safety interlock switches, light curtain OSSDs, safety mats
Safety Output Contacts	3 × NO (force-guided, safety-rated)
Auxiliary Contact	1 × NC (monitoring / feedback)
Reset Mode	Automatic or manual reset (front-panel selectable)
Reset Input	Monitored (detects stuck reset button)
Cross-Channel Fault Detection	Yes
Safety Rating	SIL 3 (IEC 61508), PLe Category 4 (ISO 13849-1)
Response Time (input to output)	≤ 20 ms
Mounting	35 mm DIN rail
Operating Temperature	−10°C to 55°C
Standards	IEC 60947-5-1, EN ISO 13849-1, UL 508, CE

How the Safety Relay Architecture Works

The MSR127 monitors two input channels simultaneously. Both channels must be energized (input devices closed) for the safety outputs to close and allow the machine to operate. De-energizing either channel — from an E-stop press, a guard door opening, or a loss of OSSD signal from a light curtain — opens all three safety outputs within 20 ms, removing power from the downstream hazardous circuit.

The dual-channel architecture with cross-channel monitoring is what enables PLe Category 4 certification. The relay detects when one channel disagrees with the other (one contact welded closed while the other opens correctly) and latches in fault state. This channel discrepancy detection is the mechanism that makes the safety function detectable under single-component failure — the defining requirement for Category 4. Single-channel wiring reduces the achievable category regardless of the relay's own certification.

The monitored reset input prevents a stuck reset button from creating a spurious restart — the relay requires a positive rising edge on the reset signal (button pressed and released) rather than a sustained high signal. Automatic reset mode is appropriate for applications like perimeter light curtains where re-entering the safe zone constitutes the reset condition; manual reset is required wherever an operator must confirm the hazard is resolved before the machine can restart.

Wiring Validation Before Commissioning

Three functional tests are required before the safety circuit can be considered validated:

Normal stop test: activate the input device (press E-stop, open guard), verify all three safety outputs open within the rated response time.
Single-channel fault test: disconnect one input channel while the other remains energized. The relay should detect the discrepancy and latch in fault state.
Reset test (manual mode): with the E-stop reset and both channels energized, apply the reset signal. Verify the safety outputs close and the machine can be restarted — then verify the machine cannot restart without an explicit reset after a second stop event.

All three tests and their pass/fail results must be documented in the machine's safety validation record. Component certification alone doesn't constitute a validated safety function at the machine level.

FAQ

Q: Can a single E-stop button (NC-only contact) be wired to both input channels?

No. Using the same contact for both channels provides no redundancy — it's functionally single-channel. PLe Category 4 requires two independent input paths from physically separate contacts. A dual-channel E-stop device (two independent NC contacts) wired to Channel 1 and Channel 2 separately is the correct implementation.

Q: What's the difference between automatic and manual reset?

Automatic reset: the relay's safety outputs re-close automatically when the input device returns to the safe state (E-stop released, guard closed). Manual reset: the operator must additionally press and release the reset button after the safe state is restored. Use manual reset wherever EN ISO 13849-1 or the risk assessment requires a deliberate operator action before restart.

Q: Can the MSR127's safety outputs directly energize motor contactors?

Yes, within the contact current rating. For large contactors, verify the inductive load rating — relay contacts switch inductive loads at lower current than resistive loads. For high-current applications, the safety relay contacts control an intermediate contactor coil, which then switches the motor power circuit.

Q: What is the auxiliary NC contact used for?

The auxiliary contact is for status monitoring — typically wired to a PLC digital input to signal whether the safety relay is in the armed (ready) or tripped state. It is not a safety-rated contact and should not be used in the safety circuit itself.

440R-N23132 New Factory Sealed 440RN23132 Ser C Safety Relay GuardMaster