Electric door drive for a safety door, in particular a fire door, comprising: - an electric drive unit for electrically driving a movable door wing of the safety door, - a control unit (23; 23'; 23") which can be connected to the electric drive unit and has the purpose of outputting control signals to the electric drive unit in order to open and/or close the safety door, - at least one fault signalling device which is designed to output a fault signal to the control unit (23; 23'; 23") when a fault criterion is met, wherein the control unit (23; 23'; 23") is designed to prohibit electric driving of the door wing when such a fault signal is received, but when the door wing is not closed to bring about one-off closing of the door wing, wherein the control unit (23; 23'; 23") has at least one microcontroller (25, 47), one motor actuation system and one motor relay, wherein at least one microcontroller (25, 47) is designed to actuate the one motor relay to open and close the safety door and to open the motor relay, in order to prohibit the electrical driving of the door wing when the fault criterion is met, - at least one emergency opening input device which, when activated, transfers an emergency opening signal to the control unit (23; 23'; 23"), wherein the control unit (23; 23'; 23") is designed to permit, when such an emergency opening signal is received, prohibited electrical driving of the door wing at least once, in order to bring about, at least in an assisting fashion, an opening movement of the door wing, and renewed closing of the door wing, - at least one mechanical energy store for storing potential energy, wherein the mechanical energy store can be coupled or is coupled to the door wing in such a way that when there is an opening movement of the door wing energy is loaded into the energy store and, under certain circumstances after enabling of the energy store, a closing movement of the door wing, accompanied by the outputting of energy by the energy store, is at least assisted, wherein the control unit (23; 23'; 23") is designed, when the fault criterion is met and when the door wing is not closed, to bring about closing of the door wing by means of the mechanical energy store if electrically driven closing is not possible or is not possible in a suitable way, and a redundant energy supply is provided, wherein the redundant energy supply is designed to replace, when a fault criterion is met and/or a power failure occurs, a power supply of the door drive from a power grid, preferably for a predefined time period, wherein the redundant energy supply is formed by an accumulator, and a loading and monitoring device is provided by means of which a state of the accumulator is monitored, and the control unit (23; 23'; 23") is designed to bring about, when a low state of charge of the redundant energy supply is detected, electrical isolation of the electric drive unit from the redundant energy supply, preferably by means of the charging and monitoring device, and to maintain said isolation until the power supply from the power grid is ensured again. - an electric drive unit for electrically driving a movable door wing of the safety door, - a control unit (23; 23'; 23") which can be connected to the electric drive unit and has the purpose of outputting control signals to the electric drive unit in order to open and/or close the safety door, - at least one fault signalling device which is designed to output a fault signal to the control unit (23; 23'; 23") when a fault criterion is met, wherein the control unit (23; 23'; 23") is designed to prohibit electric driving of the door wing when such a fault signal is received, but when the door wing is not closed to bring about one-off closing of the door wing, wherein the control unit (23; 23'; 23") has at least one microcontroller (25, 47), one motor actuation system and one motor relay, wherein at least one microcontroller (25, 47) is designed to actuate the one motor relay to open and close the safety door and to open the motor relay, in order to prohibit the electrical driving of the door wing when the fault criterion is met, - at least one emergency opening input device which, when activated, transfers an emergency opening signal to the control unit (23; 23'; 23"), wherein the control unit (23; 23'; 23") is designed to permit, when such an emergency opening signal is received, prohibited electrical driving of the door wing at least once, in order to bring about, at least in an assisting fashion, an opening movement of the door wing, and renewed closing of the door wing, - at least one mechanical energy store for storing potential energy, wherein the mechanical energy store can be coupled or is coupled to the door wing in such a way that when there is an opening movement of the door wing energy is loaded into the energy store and, under certain circumstances after enabling of the energy store, a closing movement of the door wing, accompanied by the outputting of energy by the energy store, is at least assisted, wherein the control unit (23; 23'; 23") is designed, when the fault criterion is met and when the door wing is not closed, to bring about closing of the door wing by means of the mechanical energy store if electrically driven closing is not possible or is not possible in a suitable way, and a redundant energy supply is provided, wherein the redundant energy supply is designed to replace, when a fault criterion is met and/or a power failure occurs, a power supply of the door drive from a power grid, preferably for a predefined time period,