ACS880 Fault FA81 — Safe torque off circuit

Overview

The FA81 "Safe torque off circuit" fault on an ABB ACS880 variable frequency drive (VFD) indicates a critical hardware or timing discrepancy between the redundant Safe Torque Off (STO) input channels. The drive's internal control board (ZCON or BCU) continuously monitors both STO channels to ensure they change state simultaneously when safety functions are triggered or reset. If one channel opens or closes while the other remains unchanged, or if there is an internal hardware failure within the STO diagnostic circuit, the drive initiates an emergency shutdown and displays the FA81 fault code.

Symptoms

When an ACS880 drive trips with an FA81 fault, you can expect the following behavior in your control system:

• Total Drive Lockout: The drive immediately halts the motor and refuses to start or generate torque.
• Fault Code Display: The control panel (Assistant Panel) illuminates with a solid red LED, displaying "Fault FA81" and the descriptive string "Safe torque off circuit".
• Relay Output State Change: Any digital outputs or relays mapped to the "Fault" status will toggle, alerting the master PLC of a safety-related trip.
• Non-Resettable State: Often, pressing the Reset button on the keypad or sending a reset command via a fieldbus network will fail to clear the fault if the underlying wiring or hardware mismatch persists.

Possible Causes

Understanding what triggers an FA81 fault helps focus the physical investigation of the system. The most common causes include:

• Channel Timing Mismatch: The external safety relay, safety PLC, or emergency stop switch contacts are wearing out or mechanical contact bounce is causing one contact to close slightly slower than the other (exceeding the drive's built-in 10–25ms synchronization tolerance).
• Loose or Corroded Connections: Vibration has loosened the terminal screws or spring-cage clamps on the drive's XSTO diagnostic terminal block.
• Auxiliary 24V DC Supply Drop: The external safety loop power supply is sagging, causing the voltage on one or both STO input channels to drop below the safety threshold (typically 15V DC).
• Single-Channel Safety Wiring Error: An attempt was made to wire the safety circuit in a single-channel configuration on a system configured for high-reliability dual-channel safety.
• Damaged XSTO Connector Header: Physical damage or excessive pressure applied to the internal control board pins during installation.
• ZCON / BCU Control Board Failure: Unstable internal power planes or microchip damage within the drive's control board logic circuits.

Step-by-Step Troubleshooting

Follow these sequential diagnostics to isolate and resolve the FA81 fault safely:

Step 1: Verify Direct Channel Voltages

Locate the XSTO connector block on the ACS880 control board (ZCON on standard wall-mounted drives, BCU on high-power module drives). Ensure the power is on, and the safety system is commanded to be "Run" (i.e., E-Stop is released, interlocks are closed).

1. Use a digital multimeter set to DC voltage.
2. Measure the voltage between Pin 3 (IN1) and Pin 2 (SGND). It should read approximately 24V DC.
3. Measure the voltage between Pin 4 (IN2) and Pin 2 (SGND). It should also read approximately 24V DC.
4. If either reading is below 15V DC while the other is at 24V DC, you have identified a physical channel mismatch.

Step 2: Test the Drive Locally (Jumper Test)

To isolate whether the issue is inside the drive or out in the field wiring/panels, perform a local hardware bypass.

Note: Drive bypass diagnostic tests should only be done by competent personnel with the motor disconnected from the load and with no personnel in the danger zone.

1. Lock out and tag out (LOTO) power to the ACS880 drive.
2. Gently remove the external control wires connected to the XSTO terminal block.
3. Install temporary copper wire jumper loops directly on the XSTO block: connect Pin 1 (OUT1) to Pin 3 (IN1) and Pin 2 (SGND) to Pin 4 (IN2) (or as mapped on your specific drive configuration, matching the 24V internal source to both input channels).
4. Remove safety tags, restore power, and try to reset the fault.
5. Evaluation: If the FA81 fault clears and is replaced by normal standby status or a benign "Safe Torque Off" warning, your drive hardware is fully functional. The problem lies in your external wiring, safety relay, or field contact devices. If the FA81 fault persists with direct jumpers installed, the drive's internal control board is damaged and must be replaced.

Step 3: Check External Safety Relay Contact Synchronization

If the local jumper test was successful, turn your attention to the external safety devices.

1. Inspect the safety relay (e.g., Phoenix Contact, Pilz, or ABB Sentry) feeding the STO signals.
2. If using old electromechanical safety relays, they can suffer from contact degradation where one contact closes fractions of a second later than the other. Replace the safety relay with an equivalent safety-rated solid-state or high-cycle mechanical relay.
3. If using a safety PLC, check the logic block configuration. Ensure the outputs are configured to fire simultaneously and do not contain individual delays or staggered logic executions.

Step 4: Inspect Cable Integrity and Shielding

Incorrect cable types or poor shield terminations can cause EMI (electromagnetic interference) to couple onto the STO lines, mimicking the appearance of an open-channel condition.

1. Verify that the STO wiring uses a shielded, twisted pair cable (specifically, two pairs, with each pair twisted and shielded individually if run over long distances).
2. Ensure the STO shield is grounded only at the drive end to avoid creating ground loops.
3. Route the STO cable away from high-noise cables, such as the mains incoming power and the variable frequency motor output cables.

Recommended Actions

To prevent recurrence of the FA81 fault in high-uptime environments, implement these operational practices:

• Standardize Mechanical Connections: Swap standard screw-terminal blocks for spring-loaded tension clamp connectors on XSTO pins to prevent thermal cycling and vibration from backing out terminal connections.
• Use Buffered Safety Outputs: When running STO lines over distances exceeding 30 meters (98 feet), use an auxiliary safety relay local to the drive enclosure to minimize voltage drops and capacitive coupling along long cable runs.
• Perform PM Inspection Cycles: During routine plant PM outages, use the drive's built-in diagnostic log tools to trace if there is an increasing frequency of transient STO alerts, which indicate deteriorating contact conditions before they manifest as a hard line trip.

Recommended Replacement Parts

If diagnostics point to a physical component failure, source these replacement parts to restore operation:

• ZCON-11 or ZCON-12 Control Unit: The main control board used on standard frame sizes R1 through R9. Replacing this board will solve internal circuit diagnostic failures of the STO subsystem.
• BCU-12 / BCU-02 Control Unit: Main control block for parallel-connected modular frame systems and larger cabinet drives.
• XSTO Terminal Kit: Replacement 4-pin or 6-pin terminal block headers (removable plug-in design) if physical screw threads are stripped or cracked.
• Electronic Safety Relay (e.g., ABB RT9 / Sentry Series): To replace mechanical relays whose contacts are drifting out of the time synchronization range.

Related Articles

• Replacing ACS880 ZCON-12 and ZCON-11 Control Boards
• Dual-Channel vs. Single-Channel STO Wiring Configurations for ACS880
• Debugging Safety Faults 71B1 and FA81 on ABB Sentry Safety Loops

FAQ

Q: Can I permanently bypass the STO fault on an ACS880 if my factory does not use a safety relay?

A: If your process application does not require a Functional Safety loop, the STO must still be physically completed for the drive to run. You can accomplish this by installing permanent local jumpers between the internal 24V source output (OUT1) and the safety inputs (IN1 and IN2). Always ensure your installation complies with local machine safety regulations before permanently bypassing any functional safety hardware.

Q: Can a firmware update resolve recurring FA81 faults?

A: Generally, no. The FA81 code is triggered by analog comparator circuits validating discrete electrical parameters. While firmware updates occasionally optimize filter delays or safety fault logging tolerances, they cannot resolve physical contact degradation, loose terminal links, or damaged silicon components on the ZCON control board.

Q: What is the difference between an A7A1 warning and an FA81 fault code?

A: An A7A1 code is a standard "Safe torque off" warning. It indicates that the STO inputs have safely opened in perfect unison, which is normal behavior when a worker presses an E-stop button. Conversely, FA81 is a hard fault, indicating that the drive has detected a diagnostic problem within the safety hardware loop itself, such as an unsynchronized channel switch or broken internal components.

Q: Why does the FA81 fault only trigger when the machine starts up or shuts down?

A: During starting or stopping sequences, external safety relays are actively opening or closing their output contacts. If the mechanical contacts have aged unequally, their switching speed difference expands. The drive will tolerate small discrepancies during steady-state run conditions, but will immediately capture and trip on a timing mismatch during the transition margins of startup or shutdown.