Configuring Siemens 840D Automatic Power-Off Safely

The machine completes its last part but remains energized through the unattended period. On Siemens 840D Powerline and Solutionline machines, the correct response is an OEM-defined automatic shutdown sequence, not a program-generated emergency stop. The NC program can request a state change, but the PLC, machine electrical design, and installed options determine which loads stop and whether the main supply can be disconnected.

Operating-State Definitions

The term here means selecting a deliberate operating state after production ends. It does not mean using a protective function as an energy-management command.

State	Purpose	Typical result	Decision implication
Program end	End the machining cycle	The NC cycle stops; auxiliary loads may remain on	Use as a shutdown request only when the PLC recognizes the completed cycle
Idle-load shutdown	Reduce consumption while retaining the control	Motors, coolant pumps, chip conveyor, display, or other auxiliaries may be stopped selectively	Preferred when retained functions must continue
Automatic power-off	Disconnect machine power after an orderly sequence	Requires an electromechanical power-disconnection path coordinated by the PLC	Available only when the machine builder designed or retrofitted it
Emergency stop	Stop hazardous machine motion in an emergency	The exact reaction and retained power depend on the machine safety design	Never use as the routine end-of-production command
Main isolation	Isolate electrical energy for the defined machine circuits	Performed by the machine's designed disconnecting hardware	A software parameter alone cannot provide physical isolation

A severe safety reaction such as STOP A does not prove that the NC exposes a parameter for routine control-voltage removal. A safety function can command stops through a validated chain while leaving parts of the control energized for diagnostics, state retention, or restart handling. Read the machine circuit diagrams and functional description to determine the actual result.

Check 1: Installed Shutdown Capability

Start with the machine documentation, not the generic 840D control manual. Automatic power-off is a machine-builder function assembled from the NC program, PLC logic, electrical hardware, and shutdown sequencing. Two machines with the same Siemens control can therefore behave differently.

1. Open the machine operating manual and option list. Search for automatic power-off, automatic shutdown after program end, shutdown after shift end, or an equivalent builder-defined function.
2. Inspect the HMI for an inactivity timer, shift-end setting, or automatic shutdown selection.
3. Review the electrical drawings for a remotely operated main disconnect or another builder-approved power-disconnection device.
4. Review the PLC functional description for the conditions that authorize shutdown and the feedback proving that power hardware reached its commanded state.

Check 1: expect either a documented OEM function with settings and a defined final state, or no installed automatic power-off capability. If the function exists, proceed to Check 2. If only an inactivity or shift-end function exists, determine whether its reduced-power state meets the operating requirement. If neither exists, skip to Check 5 and assess a builder-approved retrofit.

The Powerline or Solutionline designation does not decide this branch. Machine manufacturer, installed software, PLC application, and electrical build decide it.

Check 2: Required Final State

Define the required state load by load. “Control voltage off,” “motors off,” and “machine isolated” are different requirements. An imprecise requirement commonly produces either inadequate energy savings or an unsafe loss of services that were meant to remain active.

Requirement	Suitable path	Control status	Next check
Stop drives and production auxiliaries	Idle-load or shift-end function	May remain energized	Check 3
End the cycle and later remove control power	OEM automatic power-off sequence	Orderly shutdown before disconnection	Check 3
Obtain electrical isolation	Rated physical disconnecting device	Software request is insufficient by itself	Check 5
React to an actual hazardous condition	Validated emergency-stop system	Machine-specific	Outside the energy-saving sequence

A “shutdown after shift end” function associated with M30 was identified as one possible implementation: after the program ends and the configured inactivity period expires, machine motors switch off while the control remains on. That state can deliver most of the saving without removing power from the controller. Confirm its actual behavior in the machine manual because the name, availability, and affected loads are builder-dependent.

Check 2: expect a written list of loads that must turn off and loads that must remain active. If control-on standby is acceptable, use the installed idle-load function and continue to Check 3. If the main supply must be disconnected, continue through every remaining check.

Check 3: Production-Complete Trigger

The shutdown request must represent completed production rather than one sensor changing state. A raw-material-empty signal can start the sequence, but the PLC must also account for the part in process, axis and spindle state, automation handshakes, tool position, and any auxiliary cycle still running.

1. Detect that no new raw part is available through the normal process input. Keep this input out of the emergency-stop chain.
2. Inhibit the next automatic cycle while permitting the current cycle to reach its defined completion state.
3. Complete the program with the machine builder's recognized end condition, such as M30 where that behavior is documented.
4. Set an NC-to-PLC shutdown request or call a builder-assigned M function only after all production-complete conditions are true.
5. Have the PLC verify permissives, stop discretionary loads, perform any controller shutdown handshake, and then command the installed power-disconnection hardware.

An example proposed for a custom application used M200 after a 120 s delay. Those values are application-defined examples, not standard Siemens 840D commands or default timings. Before using any M code, inspect the machine M-function table and PLC cross-reference. An existing assignment or an unhandled M-function handshake can stop the program without producing the requested power state.

Check 3: expect one stable production-complete bit that can be traced from the raw-material decision through cycle completion to the PLC shutdown request. If the signal changes as soon as the last blank leaves the magazine, revise the sequence so the last workpiece finishes before shutdown. Then continue to Check 4.

Check 4: Loads That Must Remain Active

Removing machine power can stop processes whose purpose continues after cutting ends. Coolant circulation is the clearest cited case. If the emergency-stop circuit also drops the coolant system, weekend stagnation can degrade coolant condition and create odor by the next production period. The correct state may therefore be motors-off standby rather than total power-off.

Load or service	Question to answer	Required evidence
Coolant circulation	Must circulation continue during the unattended period?	Coolant-system operating requirement and machine circuit behavior
Compressed air	Does the machine consume air while idle, and can supply be isolated without defeating a safety or sealing function?	Pneumatic schematic, leakage measurement, and service requirements
Chip conveyor	Can it stop immediately after the last cycle?	PLC sequence and residual chip-clearing requirement
Control and display	Can the display sleep while the control remains ready?	Installed HMI and power-management settings
Hydraulic and coolant pumps	Which pumps can stop in standby?	Machine-builder shutdown-state definition

Compressed-air consumption can exceed the overlooked electrical idle load. A builder-designed solenoid valve may isolate machine air and allow the compressor to enter its low-demand state when piping is tight. Do not use loss of air merely to provoke an emergency stop. First determine whether barrier air, clamping, braking, lubrication, measurement, or another retained function depends on pressure.

Check 4: expect a load schedule showing each auxiliary as off, retained, or delayed. If any required service would be lost, select a staged standby state or supply that service independently through the machine's approved design. Continue to Check 5 only after the retained-load boundary is fixed.

Check 5: Physical Power-Disconnection Path

Software can request shutdown, but power-disconnection hardware performs it. A true automatic power-off arrangement therefore uses PLC logic together with an electromechanically operated main switch or another machine-builder-selected device. The device must provide the required switching function, feedback, and restart behavior for the actual machine power architecture.

1. Trace the main power path and control-power branches on the electrical drawings.
2. Identify which device can remove the requested supply and which circuits remain energized after it operates.
3. Confirm that the device is intended for remote operation and that its auxiliary feedback is available to the PLC.
4. Determine how an orderly control shutdown completes before power disappears.
5. Determine the required manual action after power returns. Automatic restart after a power interruption is not an acceptable side effect of an energy-saving sequence.

If no remotely operable disconnect exists, an NC parameter cannot create one. Adding the function changes wiring, PLC logic, functional behavior, documentation, and potentially the machine's CE conformity basis. Request the OEM automatic-power-off option or a retrofit engineered and validated for the complete machine.

Check 5: expect a documented disconnect device, command path, status feedback, and restart interlock. If any element is absent, stop the implementation path and obtain a designed retrofit. If all are present, continue to Check 6.

Check 6: Safety-System Boundary

The emergency-stop chain is a protective control function, not spare process logic. Adding a raw-part sensor, an ordinary PLC output, or an M-function-controlled contact to that chain changes the safety-related architecture. A contact opening the chain may stop the machine while leaving the controller powered; it still does not provide the orderly or isolated state requested.

Reject the following shortcuts:

• Do not wire the raw-material sensor directly into the emergency-stop chain. A process sensor lacks the defined role and validation of an emergency-stop device.
• Do not assign an ordinary M function to open the safety chain. That modification crosses the NC, PLC, wiring, and machine-conformity boundaries.
• Do not use a pneumatic cylinder or machine tool to press an emergency-stop button. The mechanism can obstruct access to the button, introduce a crushing hazard, and leave no validated relationship between process completion and safe power removal.
• Do not use loss of compressed air as the commanded shutdown method unless the machine builder explicitly designed that sequence.

The uncertain force figures proposed for a pneumatic mechanism are unusable: both 15 N and 150 N were suggested without a governing requirement. Obtain the applicable machine risk assessment and protective-measure requirements instead of selecting either value.

Check 6: expect no new process device in the emergency-stop chain and no obstructed emergency control. The automatic shutdown request must remain in normal control logic, while the existing safety system continues to supervise hazardous conditions independently.

Energy and Payback Decision

Calculate the saving from measured power, not from a current machine-state label. The cited estimate used an idle demand described as 1.5 kW/h; the dimension needed for demand is 1.5 kW. Energy then equals power multiplied by time:

Idle energy (kWh) = measured idle power (kW) × idle time (h)
Energy cost = idle energy (kWh) × tariff (currency/kWh)
Payback time (h) = retrofit cost / [idle power (kW) × tariff (currency/kWh)]

A cited retrofit price was €400, with a claimed payback at . At 1.5 kW, that interval avoids 1818 kWh. The implied tariff is approximately €0.22/kWh, derived as €400 / 1818 kWh. Replace that implied figure with the site's actual billed energy price and include any demand or compressed-air cost that the project changes.

The same was expressed as about 24 weekends using approximately 50 h per weekend. Adding four weekday idle periods of 8 h produces 32 h more each week; combined with the weekend assumption, the cited estimate falls to about 15 weeks. These are scheduling assumptions, not controller settings.

Check 7: expect logged idle demand, weekly eligible shutdown hours, the electricity tariff, and measured compressed-air impact. Select full power-off only when its added hardware and validation cost produces a better operational result than selective load shedding.

Resolving Implementation Procedure

1. Specify the final state. List the drives, pumps, conveyor, display, control, coolant circulation, pneumatic supply, and other auxiliaries that must be on or off.
2. Select the installed function. Use the OEM automatic shutdown or shift-end option when its documented final state matches the specification.
3. Define production completion. Combine the no-more-raw-parts condition with completion of the active workpiece and automation handshakes.
4. Issue a normal shutdown request. Use the builder-defined NC-to-PLC interface or documented M function. Do not open the emergency-stop chain.
5. Sequence discretionary loads. Stop the spindle, drives, chip conveyor, pumps, and display functions in the order required by the machine application.
6. Preserve required services. Retain coolant circulation, sealing air, or other services identified in Check 4.
7. Perform the control shutdown handshake. Allow the control and PLC to reach the state specified by the machine builder before removing their supply.
8. Command the designed disconnect. Operate only the documented remote power-disconnection hardware and monitor its status feedback.
9. Latch restart authorization off. Require the machine's defined operator restart sequence before automatic production can resume.
10. Update the machine record. Record logic changes, drawings, option settings, test results, risk assessment effects, and the conformity review.

Final Verification Checks

1. Check 1: normal completion. Run a controlled test with more raw parts available. Expect repeated automation cycles and no shutdown request.
2. Check 2: last-part handling. Remove the next-part availability signal while one workpiece is active. Expect the current workpiece to finish, the next cycle to remain inhibited, and the shutdown request to appear only at the defined completion state.
3. Check 3: load sequence. Observe every listed auxiliary. Expect each device to change state in the specified order while retained coolant or air services remain active.
4. Check 4: aborted permissive. Create one approved test condition that blocks shutdown. Expect the PLC to withhold the disconnect command and identify the missing permissive through the machine's normal diagnostics.
5. Check 5: power-disconnect feedback. Execute the automatic-power-off sequence. Expect the physical disconnect status to match the command and every documented downstream circuit to reach its specified de-energized state.
6. Check 6: emergency independence. Test the emergency-stop function under the machine's approved test procedure. Expect its protective reaction to remain independent of the production-complete and energy-saving logic.
7. Check 7: power restoration. Restore the supply after automatic shutdown. Expect no automatic motion or cycle restart; production must require the defined operator actions.
8. Check 8: energy result. Measure demand in production-complete standby and after automatic power-off. Expect the difference to match the loads removed by the shutdown schedule.

FAQ