Safety Relay Wiring Diagram: Dual-Channel Monitoring & Circuit Design

Safety Relay Wiring Diagram: Dual-Channel Monitoring & Circuit Design — interactive diagram. Open it in the editor to customise components and wiring.

This is a free printable safety relay wiring diagram: download the diagram as SVG or open it and print to paper or PDF.

A safety relay wiring diagram shows how dual-channel inputs, force-guided output contacts, and external device monitoring connect to achieve IEC 61508 / ISO 13849 functional safety requirements in machinery.

A safety relay is not a standard control relay with better reliability — it is a fundamentally different device with architectural features that allow it to detect its own faults and refuse to output an unsafe state. Understanding those features is essential for correct wiring.

The core architecture has three elements. First, dual-channel input monitoring: the relay has two independent input channels, each of which must be simultaneously active (or simultaneously inactive) for the relay to operate. If the channels disagree — one open, one closed — the relay interprets this as a fault and locks out, refusing to energise its output contacts until the fault is cleared and a valid monitored reset is performed. This discrepancy detection is what allows a single wiring fault to be caught before it creates a dangerous state.

Second, force-guided (positive-guided) output contacts: the output contacts of a safety relay are mechanically linked so that if any NC contact is open, no NO contact can be closed, and vice versa. This is verified at manufacturing and is fundamental to the relay's ability to provide reliable feedback. The NC auxiliary (mirror) contacts are used for External Device Monitoring (EDM) — wired back to the relay's monitoring input so the relay can confirm that its output contactors physically opened after a safety demand.

Third, monitored reset: after any safety demand (e-stop, guard open, light curtain beam break), the safety relay requires a deliberate manual reset. The reset input monitors the button — the relay checks for a low-to-high-to-low transition, confirming a genuine button press rather than a wiring fault. Automatic reset is configurable on some relays for low-risk applications but must be justified by risk assessment.

Safety relays are rated and certificated against IEC 61508 (functional safety) and ISO 13849-1 (safety-related parts of control systems). The achievable Performance Level (PLa through PLe) or Safety Integrity Level (SIL 1–3) depends on the relay's hardware fault tolerance, diagnostic coverage, and proof-test interval — always consult the relay manufacturer's safety datasheet.

A safety relay wiring diagram documents a dedicated fail-safe monitoring relay — such as a Pilz PNOZ, Schmersal SRB, or equivalent — used to control machine guarding, e-stops, light curtains, and two-hand controls to a defined Safety Integrity Level (SIL) or Performance Level (PL). The diagram must show the dual-channel input connections (S11/S12 or equivalent), the feedback loop through the output contactors (Y1/Y2), the safety outputs (typically 13/14 and 23/24), and the manual or auto-restart input. Correct wiring of the cross-monitoring feedback loop is mandatory for achieving the rated PL/SIL. You can map out your safety relay wiring diagram free in the browser-based editor to plan the circuit before installation.

How to wire safety relay wiring diagram

Select the safety relay to match the required Performance Level Based on the risk assessment output (required PLr), select a safety relay certified to at least that Performance Level. Confirm the relay supports the required number of input channels, the number of output contacts, the control supply voltage, and the required safety functions (e-stop monitoring, guard switch monitoring, two-hand control, etc.). Obtain and study the manufacturer's safety datasheet and wiring diagrams.
Connect the control supply to the relay Connect the safety relay's supply input terminals to the appropriate control voltage (typically 24 V DC from a safety-rated power supply). Observe polarity. Connect the supply earth/0 V terminal to the clean earth busbar. Confirm supply voltage is within the relay's specified operating range before continuing.
Wire Channel 1 and Channel 2 input loops For e-stop monitoring: wire Channel 1 from the relay's S11 terminal (or equivalent positive input), through all NC positive-opening e-stop contacts in series for Channel 1, back to the relay's S12 terminal. Repeat for Channel 2 using S21/S22 terminals. Keep channel conductors physically separated. Do not share return conductors between channels.
Connect the reset button to the monitored reset input Wire a normally-open momentary reset pushbutton between the relay's reset input terminal and the positive supply. The relay's reset circuit is typically connected between the supply positive and the reset terminal, with the button in series. Consult the specific relay's wiring diagram — connections vary between manufacturers and relay models. Locate the reset button outside the hazard zone.
Wire the External Device Monitoring (EDM) feedback loop Connect the NC force-guided mirror contacts of each output contactor in series. Wire this series string between the relay's EDM input terminal and the 0 V or return terminal as specified by the relay manufacturer. With all output contactors de-energised, the EDM loop should be closed (continuous). A welded contactor will break the EDM loop.
Connect the safety relay output contacts to output contactors Connect the safety relay's normally-open output contacts in the control circuit of each output contactor coil. Both output contacts (where dual-contact output relays are specified) must be used and connected in series in the contactor coil circuits for Category 3 or 4 applications. Do not use only one output contact of a dual-output safety relay and leave the second unwired.
Test the complete safety function With power applied and the circuit in the run state: (1) Open each input channel independently and confirm the relay de-energises. (2) Close all e-stop buttons and press reset — confirm the relay energises and the machine is ready. (3) Simulate a welded contactor by forcing the EDM open — confirm reset is refused. (4) Test all e-stop buttons individually. Record all test results and retain them with the machine's technical file.

Specifications

Typical supply voltage	24 V DC (most common); some models support 24–240 V AC/DC — verify datasheet
Number of safety input channels	2 (dual-channel) for Category 3/4; 1 (single-channel) for Category 1/2 — per risk assessment
Output contact type	Force-guided (positive-guided) per IEC 60947-5-1 Annex L; typically 2 NO safety outputs + 1 NC auxiliary
Maximum achievable performance level (typical dual-channel relay with EDM)	PLe / Category 4 per ISO 13849-1; SIL 3 per IEC 62061 — verify with specific relay safety datasheet
Response time (input opening to output opening, typical)	≤ 20 ms — verify with specific relay datasheet
Operating temperature range (typical)	-10 °C to +55 °C — verify with specific relay datasheet for installation environment
Applicable standards	IEC 61508 (functional safety), ISO 13849-1 (safety-related control systems), IEC 60947-5-1 Annex L (force-guided contacts), IEC 60204-1 (electrical equipment of machinery)
Proof-test interval	Per manufacturer's safety datasheet — typically 1 year for PLe; must be scheduled and documented

Safety warnings

Safety relay installation and circuit design must be performed by personnel with documented competency in functional safety (IEC 61508, ISO 13849). Incorrect wiring — particularly sharing return conductors between channels or omitting EDM — can create circuits that appear correct but fail to detect single-point faults, defeating the purpose of the safety relay.
Always consult the specific safety relay manufacturer's wiring diagram for the chosen model. Terminal designations, channel configurations, and EDM connections vary significantly between relay manufacturers and models. Do not use a generic wiring diagram as a substitute for the device-specific documentation.
The complete safety function — input devices, safety relay, output contactors, and reset — must be validated as a system. Validation must include functional testing of every safety input device and simulation of relevant faults (channel discrepancy, welded contactor, wiring fault). Retain all validation records.
All work must comply with IEC 60204-1 (electrical equipment of machinery), ISO 13849-1 (safety-related parts of control systems), and the applicable local electrical installation standard. Non-compliance may result in regulatory enforcement, voided equipment certification, and personal liability in the event of an accident.

Tools needed

Calibrated digital multimeter (DC voltage, continuity, and resistance)
Insulated test leads rated for the circuit voltage
Safety relay manufacturer's configuration software (if configurable relay is used)
Insulated screwdrivers for terminal connections
Wire strippers and ferrule crimping tool
SISTEMA or equivalent software for PLr calculation and verification

Common mistakes

Sharing a common return conductor between Channel 1 and Channel 2 — this defeats cross-fault detection and means a single wiring fault can prevent the relay from detecting a channel discrepancy.
Omitting the EDM feedback connection — without EDM, the safety relay cannot detect a welded output contactor. The machine may restart with a failed contactor, resulting in a loss of the safety function.
Using only one output contact of a dual-output safety relay for Category 3 or 4 applications — both output contacts must be used in series in the load circuit to maintain redundancy.
Placing the reset button inside the hazard zone — an operator must be able to verify the hazard zone is clear before pressing reset. A reset button accessible from within the zone can allow a restart with personnel inside the machine.
Failing to test each safety input device individually — testing only the final result (machine stops) is insufficient. Each e-stop and guard switch must be tested independently to confirm the relay responds to each one.

Troubleshooting

Safety relay will not energise after reset button pressed: Cause: One or both input channels open (e-stop pressed, wiring fault, or guard open), EDM loop open (welded contactor or broken EDM wiring), or supply voltage outside acceptable range Fix: With the relay's diagnostic LED or indicator: confirm supply voltage is within specification. Check channel input voltages at relay terminals — both channels must be within the relay's high-level input range. Check EDM input — must be closed (high) with all output contactors de-energised. Trace each fault indicator systematically per the relay manufacturer's diagnostic procedure.
Safety relay de-energises without any safety input being activated: Cause: Intermittent wiring fault on one input channel causing channel discrepancy detection, electrical noise causing false triggering, or a marginal connector contact on the channel return Fix: Check all channel wiring connections for loose ferrules or terminals. Inspect cable routing for proximity to high-noise sources (VFD output cables, contactors). Use a data logger or the relay's internal diagnostics to capture the channel states at the moment of fault. Segregate safety circuit wiring from power wiring.
EDM feedback prevents reset even though all output contactors appear de-energised: Cause: One output contactor has welded NO contacts (EDM NC contact therefore remains open), broken EDM wiring, or incorrect EDM connection Fix: With LOTO applied, manually check each output contactor by attempting to move the main contacts. A contactor with welded contacts will resist manual separation. Alternatively, measure continuity of each NC mirror contact individually to identify which one remains open. Replace the contactor with welded contacts.

Frequently asked questions

What is the difference between a safety relay and a standard relay?

A safety relay has dual-channel input monitoring (detects single-channel faults), force-guided output contacts (mechanically linked NC and NO contacts that cannot both be closed simultaneously), monitored reset (verifies deliberate manual reset), and External Device Monitoring (verifies output actuators de-energised). Standard relays have none of these features. Safety relays are certified to IEC 61508 and rated for specific Performance Levels per ISO 13849-1.

What are force-guided (positive-guided) contacts in a safety relay?

Force-guided contacts are mechanically linked within the relay so that if any normally-closed contact is open, no normally-open contact can be closed — and vice versa. This linkage is maintained even if a contact welds shut. It allows the NC mirror contacts to provide reliable feedback that the output has de-energised. IEC 60947-5-1 Annex L defines the requirements for force-guided contacts.

What is External Device Monitoring (EDM) in a safety relay circuit?

EDM is a feedback loop from the output contactors back to the safety relay's monitoring input. The NC force-guided mirror contacts of the output contactors are wired in series and connected to the EDM terminal. When the safety relay de-energises its outputs, it checks that the EDM circuit closes (indicating the contactors opened). If a contactor welds shut, EDM stays open and the relay will not reset, preventing a restart with a failed contactor.

Can I use a PLC safety function module instead of a dedicated safety relay?

Yes — certified safety PLCs (SIL-rated) can perform the same monitoring functions as a discrete safety relay, often with greater flexibility. However, the safety function must still be implemented in certified safety firmware, the I/O modules must be safety-rated, and the overall system must be validated against the required Performance Level. A discrete safety relay is often simpler to apply and validate for straightforward e-stop or guard-monitoring applications.

What Performance Level can a dual-channel safety relay achieve?

A correctly wired dual-channel safety relay with EDM feedback, force-guided contacts, and monitored reset can typically achieve up to PLe / Category 4 per ISO 13849-1, or SIL 3 per IEC 62061. The actual achievable level also depends on the MTTFd and DC of the connected input devices (e-stop buttons, guard switches) and the diagnostic coverage of the overall circuit. Verify with the specific relay manufacturer's safety datasheet and SISTEMA or equivalent calculation.

How do you wire a safety relay and what does a safety relay wiring diagram show?

A safety relay wiring diagram shows the dual-channel monitored input wiring (e.g. two normally-closed e-stop contacts feeding separate input channels), the cross-monitoring or feedback loop terminals (typically Y1–Y2) which are looped through the external contactors' auxiliary NC contacts, the safety output contacts, and the reset/restart input. Dual-channel wiring ensures that a single wire break or contact failure is detected and prevents the machine from restarting unexpectedly. Always follow the manufacturer's application guide and verify the achieved Performance Level with a SISTEMA or equivalent calculation.

Related diagrams

Free electrical calculators

Edit this diagram free in the online editor