EN 60204 — Safety of Machinery: Electrical Equipment in Control Cabinet Construction

For practical implementation in the control cabinet, the cross-sectional area, color-coding, and mechanical securing of the protective conductor connections are crucial: The green-yellow color-coding is reserved exclusively for the PE conductor and must not be used for any other purpose. Detachable connections on doors, removable mounting plates, and control units must be implemented separately using flexible grounding straps; hinges themselves are unsuitable as protective conductor paths and must not serve this function. The protective conductor continuity test is a mandatory measurement required by Section 18 and must verify that every point in the protective conductor system is connected with low resistance. In practice, recurring sources of error include: interrupted or undersized PE conductors, an impermissible series connection of protective conductor terminals instead of a star-shaped configuration, painted contact surfaces without serrated contact discs, and the incorrect use of the PE conductor as a return path for functional currents. Such defects jeopardize the low-impedance connection and thus the effectiveness of fault protection throughout the entire system.

In addition to basic and fault protection against electric shock, the standard addresses the hazard posed by stored electrical energy: Capacitors in the DC links of frequency converters, in line filters, switching power supplies, and reactive power compensation systems may continue to carry a dangerous residual voltage even after being disconnected. The standard therefore requires suitable discharge devices as well as warning labels on accessible parts that become exposed after the control cabinet is opened; in addition, information on the discharge time must be provided in the technical documentation. The actual residual voltage must be checked prior to commissioning, regardless of the insulation resistance measurement required in Section 18. Also relevant are leakage and fault currents that can arise from EMC filters at the power supply input and from long, shielded motor cables connected to frequency converters; their magnitude directly influences the selection of suitable residual-current protective devices. Specific numerical values for discharge times, residual voltage limits, or permissible leakage currents must always be taken from the manufacturers’ specifications for the components as well as the relevant standard text.

The four short-circuit withstand capacity parameters are critical for the design of a switchgear assembly: Icp as the uninfluenced short-circuit current derived from transformer and cable data, Icc as the manufacturer’s specified short-circuit current rating, Icw as the rated short-time withstand current, and Icu as the rated breaking capacity. The EN 61439 family of standards provides for three recognized verification methods: laboratory testing or type testing, comparison with a previously tested reference design using a checklist, and mathematical verification. Systems with a rated short-circuit current of up to 10 kA and current-limited devices up to 17 kA are exempt from the testing requirement; the exact threshold values must always be verified in the current version of the standard. For machinery exported to North America, the SCCR (Short Circuit Current Rating) concept according to UL 508A applies in addition, which requires an explicit evaluation of the entire control cabinet in kA based on the component SCCRs and the coordination of protective devices. In practice, the documented short-circuit current verification is often completely missing from the plant operator’s records, even though it has been mandatory since the 2019 edition of EN 60204-1.

When specifying protective devices, circuit breakers, power circuit breakers, motor protection switches, and fuses must be selected so that their rated current and trip characteristic curve are appropriate for the conductor cross-section, installation method, and ambient temperature, ensuring that overcurrent protection remains effective along the entire cable path. For outlet circuits up to 20 A, the standard requires a residual-current device with a rated residual current of no more than 30 mA to reliably protect persons from indirect contact with connected loads. Control transformers must be protected against overload on the secondary side, while auxiliary circuits require their own short-circuit protection to ensure that a fault in the control circuit does not affect the higher-level power supply. Additionally, the feedback of leakage currents from EMC filters must be considered: In the case of frequency converters, operational DC components in the fault current can render conventional RCDs inoperable, making all-current-sensitive Type B residual-current protective devices necessary to ensure reliable tripping in the event of an actual fault.

The emergency stop function plays a special role within the control circuits, as it must take precedence over all other functions and commands of the machine, must remain available and operational at all times, and must under no circumstances itself create an additional hazard. The standard sets specific requirements for control devices: Actuators must be red on a yellow background, typically in the form of mushroom-head pushbuttons or pull-cord switches with mechanical latching based on the positive-release principle, and must be positioned so they are easily accessible at all operator stations. Resetting the emergency stop command must not trigger an automatic restart; a deliberate, separate start command is mandatory. The specific classification into stop category 0 or 1 results from the risk assessment of the respective machine and must be documented accordingly. The testing of the emergency stop function is expressly mandated as a mandatory test in Section 18 and must therefore be verified both during installation and following modifications or repairs to the electrical equipment.

Following the discussion of the emergency stop function and the stop categories, it is important for design engineers and purchasers to understand the conceptual distinction between these functions and the emergency shutdown, as the two must be clearly differentiated in the operating instructions. While an emergency stop halts a hazardous motion as quickly as possible, an emergency shutdown cuts off the electrical power supply to protect against immediate electrical hazards such as electric shock or electric arcs. The two functions thus differ in their protective purpose, trigger conditions, and sequence of effects, and require separate, clearly identifiable labeling and signage for the respective control elements. On a single machine, both an emergency stop and an emergency shutdown may be required simultaneously; however, they must be designed to be clearly distinguishable from one another and described separately in the electrical schematic and in the operating instructions. In practice, recurring errors occur here: mixed or inconsistent labeling, “Emergency Off” markings on devices that actually perform only an “Emergency Stop” function, and a missing or incomplete description of the respective function in the electrical schematic. Such deficiencies make correct operation difficult in the event of a malfunction and can impair the testing of the emergency stop function required under Section 18, as well as the documentation of the electrical equipment.

At the component level, typical sources of interference—such as frequency converters, switching power supplies, and clocked drives—are contrasted with sensitive interference sinks, such as sensors, bus systems, and analog signals; both groups require deliberate spatial and circuit-level separation within the control cabinet. For a viable shielding connection strategy, well-designed grounding and bonding concepts are just as crucial as an effective functional potential equalization system, which minimizes equalization currents between individual modules and thereby interrupts coupling paths. In addition, filtering measures at inputs and outputs—such as power line filters at the power supply or interference-suppression chokes on frequency converters—as well as targeted interference suppression of inductive loads using free-wheeling diodes, RC circuits, and varistors are effective. A closed metallic enclosure with defined openings that are as small as possible enhances the shielding effect and limits both the coupling of and the leakage of high-frequency interference. In this context, immunity to interference and interference emission must be evaluated as two distinct aspects of electromagnetic compatibility, since a piece of equipment must be insensitive to external influences and, at the same time, must not itself cause any impermissible interference; corresponding tests are mandatory unless components already bear an appropriate CE marking. This EMC assessment is an integral part of the machine’s technical documentation.

For wiring installation, the standard requires careful selection of conductor cross-sections, which must be tailored to current-carrying capacity, installation method, and ambient temperature; Wire end ferrules, defined bend radii, and effective strain relief ensure the mechanical stability of the connections. Power and control cables operating at different voltage levels must be physically separated to prevent coupling and insulation faults. According to DIN EN 60445, conductors are identified using numbers, letters, colors, or combinations thereof; for power conductors, brown, black, and gray are used, while for control circuits, red is used for AC and blue for DC. Terminal blocks must be arranged in a clear and organized manner, provided with reserve capacity for future expansions, and equipped with disconnect terminals at test points. Every conductor, terminal, and piece of equipment must be clearly labeled in accordance with the circuit diagram and the reference marking system specified in DIN EN 81346-2 to ensure that maintenance and troubleshooting remain traceable. In addition, clearances and creepage distances must be maintained; depending on the rated voltage and pollution degree, these can range from approximately 3 to 12.5 mm and must be verified in the specific text of the standard.

With regard to handover documentation, the standard specifies the requirements for the individual types of documents. The electrical schematic must be prepared using a standardized labeling system, such as that specified in DIN EN 81346-2, remain clearly legible throughout, include traceable cross-references between the individual pages and sheets, and be updated promptly after every change to the system so that the version of the diagram corresponds to the actual configuration. On the control cabinet itself, additional labels supplement the actual nameplate, such as warning labels regarding residual voltage or external power supply; in addition to the manufacturer and rating data, the IP rating is also a mandatory item on the nameplate. The operating instructions summarize information on transportation, installation, connection, commissioning, operation, maintenance, and decommissioning, and specify the qualifications required of personnel for each respective activity. The handover documentation also includes test reports specifying the date, the tester, and the measuring instrument used, as well as—depending on the machine’s country of destination—a corresponding language version of all documentation. In practice, the same deficiencies crop up time and again: electrical schematics that have not been updated following modifications, incomplete equipment labeling on terminals and devices, and missing information on discharge times in the operating instructions.

From the perspective of design engineers and purchasers, the specifications should explicitly state the applicable version of the standard, including the full publication date, supplemented by evidence of the short-circuit current expected at the feed-in point, as well as information on the short-circuit withstand capacity of the switchgear assembly in accordance with the EN 61439 family of standards. Likewise, an EMC assessment in accordance with DIN EN 61000-6-1 through 6-4, as well as the test reports specified in Section 18, are among the documents that must be required. In addition, lists of spare parts and operating supplies, as well as defined data formats for circuit diagrams, must be specified to ensure that maintenance and future expansions in switchgear construction remain traceable. During acceptance, it is advisable to have criteria and defect lists that enable a clear allocation of responsibilities among the machine manufacturer, the switchgear manufacturer, and the operator—for example, in accordance with the division of responsibilities between the original manufacturer, the manufacturer of the switchgear assembly, and the operator as specified in DIN EN 61439. These documents also form the basis for subsequent periodic inspections in accordance with DGUV Regulation 3, as well as for the operator’s risk assessment. Specific deadlines for the provision of individual documents are not prescribed across the board but must be agreed upon on a project-by-project basis between the contracting parties.

In addition to the short-circuit withstand capacity parameters already described, the EN 61439 series of standards makes a fundamental distinction between type testing and unit testing: While type testing confirms the basic suitability of a design, unit testing examines each individually manufactured control cabinet separately. Temperature verification in accordance with IEC 61439 or IEC 60890 is required to rule out overheating; the method to be used depends on the rated current: Up to approximately 630 A, simply adding the power losses of all equipment is sufficient; up to about 1,600 A, a more detailed calculation method is permitted; above this threshold, a test or thermal simulation is required. In addition, the design must ensure that equipment is loaded to no more than 80 percent of its rated values, main current paths must be designed for at least 125 percent of the rated current, and for current-carrying conductors at or above approximately 200 A, eddy current losses in enclosure parts must be minimized. In addition, degrees of protection as well as clearances and creepage distances must be taken into account as part of the verification process, and the associated documentation must be retained for a defined period of time. Since limit values may vary depending on the version of the standard, all figures cited must always be verified against the current text of EN 61439.

In day-to-day project work, these two sets of standards are directly intertwined: The control cabinet is designed and manufactured as a self-contained switchgear assembly in accordance with the EN 61439 series of standards and is certified through type and unit testing, while at the same time the emergency stop concept, the control circuits, the protective conductor system of the complete machine, the marking, and the tests are evaluated in accordance with Section 18 of EN 60204-1. In practice, this leads to typical interface conflicts: duplicate or contradictory testing requirements, unclear responsibility for verifying short-circuit withstand capability, and differing marking systems between switchgear manufacturers and machine manufacturers. Such points of friction can be avoided if the requirements specification and functional specifications clearly define the interface between the machine manufacturer and the switchgear manufacturer at an early stage—particularly with regard to the scope of documentation, responsibilities, and the applicable version of the standard. In addition to EN 60204-1 and EN 61439, the standards EN ISO 13849 and EN 62061 apply to safety-related control components, and EN 61800-5-2 must be taken into account, as these standards provide supplementary coverage of the functional safety of the control system.

The test procedure specified in Section 18 follows a defined sequence: Following the visual inspection, the protective conductor resistance measurement and the insulation resistance measurement are performed, before the voltage test and the test of the fault-loop impedance or the conditions for automatic shutdown are carried out. Next, the residual voltage is tested, followed by the functional test of the protective devices and the testing of the emergency stop function, interlocks, restart protection, and stop categories. Appropriate protective measures must be observed during the test; in particular, sensitive electronics must be disconnected before the insulation and voltage tests to prevent damage. All measured values must be documented with reference to the acceptance criteria specified in the standard text; however, specific limit values are not to be listed here in a blanket manner. The resulting test report is an integral part of the handover documentation in control panel construction and contains information on the tester, the test equipment used, the date, the scope of the test, and the result, ensuring that acceptance and subsequent periodic inspections remain traceable.

After commissioning, the testing requirements shift from EN 60204-1 to occupational safety regulations: The relevant regulations are the Industrial Safety Ordinance and DGUV Regulation 3, which has served as the central accident prevention regulation for electrical systems and equipment since 2014, supplemented by the TRBS series. EN 60204-1 itself does not specify general inspection intervals; these must be determined based on the risk assessment, operating conditions, and the manufacturer’s specifications. Values commonly cited in practice—such as four years for stationary systems or one to two years for portable equipment in production—should be understood as examples and verified on a case-by-case basis. The inspection may only be performed by a qualified electrician certified under TRBS 1203 or by a competent person. Following significant modifications or repairs, a new inspection is required, and the documentation for the control cabinet assembly must be updated accordingly so that circuit diagrams and test reports reflect the actual condition of the system. The system operator is always responsible for the periodic inspections.