We designed the hardware controlled safety system. A systematic safety analysis was performed that consisted of several steps identification of the dangers, identification of actuator controls and actuator control values to reach a safe state. The identified actuator controls to reach a safe state for the tractor are the engine and parking brake on/off controls. The effectiveness of this measure was tested in an experiment. After the safety system has been activated the control unit could still provide controls causing dangers.  To ensure a safe state after restarting the safety system additional requirements are defined. For the hardware controlled safety system the drawings for the electronics are being made and the components are selected.