Archives

Safety Function

Safety-Related Inputs

The module is equipped with safety-related inputs.The module is equipped with safety-related

inputs. These inputs are divided in 4 groups of 7 inputs and 1 group of 4 inputs (I29…I32). Refer

to Table 10 for more information about terminal assignment. Each group is equipped with a

common short-circuit-proof supply LS+.

Reaction in the Event of a Fault

If the module detects a fault on a digital input, the user program processes a low level in

accordance with the de-energized to trip principle.

The module activates the ERR LED.

In addition to the channel signal value, the user program must also consider the corresponding

error code.

The error code allows the user to configure additional fault reactions in the user program.

Line Control

Line control is used to detect short-circuits or open-circuits, e.g., on EMERGENCY STOP inputs

complying with Cat. 4 and PL e in accordance with EN ISO 13849-1. Line control can be

configured for the F60 system.

The digital outputs are pulsed. This allows monitoring of the wires to the digital inputs of the

F60 DI 32 01 or F60 DIO 24/16 01 module.

Product Description

The DI 32 01 is a module with 32 digital inputs and is used for the modular F60 system. The

inputs are galvanically separated to the I/O bus.

The module can be inserted in the F60 subrack’s slot 3…8. Slots 1 and 2 are reserved for the

power supply module and central module, respectively.

The module has been certified by the TÜV for safety-related applications up to SIL 3

(IEC 61508. IEC 61511 and IEC 62061), Cat. 4 and PL e (EN ISO 13849-1) and SIL 4

(EN 50126. EN 50128 and EN 129).

Further safety standards, application standards and test standards are specified in the

certificates available on the HIMA website.

A fault reaction is triggered if one of the following faults occurs:

 Cross-circuit between two parallel wires.

 Improper connections of two lines (e.g., TO 2 to DI 3).

 Earth fault of a line (with earthed ground only).

 Open-circuit or open contacts, i.e., including when one of the two EMERGENCY STOP

switches mentioned above has been engaged.

The fault reaction includes the following actions:

 The ERROR LED on the controller’s front plate blinks.

 The inputs are set to 0.

 An evaluable error code is created.

Assembly

The module has 32 analog current inputs (0/4…20 mA), each input is measured and functionally

tested using two internal measuring facilities. A short-circuit-proof transmitter supply is assigned

to each input.

The 32 analog inputs can be used to evaluate the values measured for the transmitters and

safety transmitters. Two-wire or three-wire transmitters with a maximum supply current of 30 mA

can be connected to the module.

The functional units are galvanically separated to ensure that the input signals are interference

free.

The safety-related 1oo2 processor system for the I/O module controls and monitors the I/O

level. The data and states of the I/O module are made available to the processor modules via

the redundant system bus. The system bus has a redundant structure for reasons of availability.

Redundancy is only ensured if both system bus modules are inserted in the base plates and

configured in SILworX.

Reaction in the Event of a Fault

If a fault occurs, the module adopts the safe state and the assigned input variables transmit the

initial value (default value = 0) to the user program.

The initial values must be set to 0 to ensure that the input variables transmit the value 0 to the

user program if a fault occurs. If the raw value is evaluated instead of the process value, the

user must program the monitoring function and the value in the event of faults from within the

user program.

The module activates the Error LED on the front plate.

Scope of Delivery

The module must be installed on a suitable connector board to be able to operate. If a Field

Termination Assembly (FTA) is used, a system cable is required to connect the connector board

to the FTA. Connector boards, system cables and FTAs are not included within the scope of

delivery.

The connector boards are described in Chapter 3.6. the system cables are described in

Chapter 3.7. The FTAs are described in own manuals.

Product Description

The X-AI 32 01 analog input module is intended for use in the programmable electronic system

(PES) HIMax.

The module is inserted into any of the base plate slots with the exception of the slots reserved

for system bus modules. For more information, refer to the System Manual (HI 801 001 E).

The module is used to evaluate up to 32 analog input signals.

The module is TÜV-certified for safety-related applications up to SIL 3 (IEC 61508. IEC 61511

and IEC 62061), Cat. 4 and PL e (EN ISO 13849-1).

Refer to the HIMax Safety Manual (HI 801 003 E) for more information on the standards used to

test and certify the module and the HIMax system.

Safety Function

The module measures the current of the connected devices with safety-related accuracy,

providing the transmitter supply with a guaranteed minimum voltage.

The safety function is performed in accordance with SIL 3.

Reaction in the Event of a Fault

If the device detects a fault on an analog input, the AI.Error Code system parameter > 0 is

set. In case of module faults, the Mod. Error Code system parameter > 0 is set.

In both cases, the device activates the FAULT LED.

In addition to the analog value the the error code must be evaluated. The analog value

must be configured to ensure a safety-related reaction.

The error code allows the user to configure additional fault reactions in the user program.

Line Monitoring for Digital Outputs

The analog inputs (AI) of the F3 AIO 8/4 01 can also be used to monitor the line for open-

circuits and short-circuits of digital outputs of other HIMatrix controllers (line monitoring). To

this end, the transmitter supply must be set to 26 V. To do so, set the Transmitter

Voltage[01] parameter in SILworX and ELOP II Factory to 2. see Table 26 und Table 30.

Requirements

Using HIMatrix devices with analog inputs, the digital outputs of any HIMatrix controller can

be monitored under the following conditions:

The transmitter supply of analog inputs exists,

An external shunt can be connected to the analog inputs.

Safety Function

The remote I/O is equipped with safety-related analog inputs. The input values on the

inputs are safely transmitted to the connected controller via safeethernet. The outputs are

safely assigned their values by the connected controller via safeethernet.

Safety-Related Analog Inputs

The remote I/O is equipped with 8 analog inputs with transmitter supplies for the unipolar

measurement of voltages, referenced to L-.

The remote I/O is intended to measure the voltage on the inputs. To measure the current

on the inputs, connect a resistor of up to 500 Ω in parallel to each input.

Only shielded cables with a length of a maximum of 300 m must be connected to the

analog inputs. Each analog input must be connected to a twisted pair of wires. The

shielding must be connected to the remote I/O and the sensor housing and earthed of one

end to the remote I/O side to form a Faraday cage.

If an open-circuit occurs during voltage measurement (the line is not monitored), any input

signals are processed on the high-resistance inputs. The value resulting from this

fluctuating input voltage is not reliable; with voltage inputs, the channels must be terminated

with a 10 kΩ resistor. The internal resistance of the source must be taken into account.

For a current measurement with the shunt connected in parallel, the 10 kΩ resistor is not

required.

The analog inputs are designed to retain the metrological accuracy for 10 years. A

recalibration must be carried out every 10 years.

Product Description

The safety-related F3 AIO 8/4 01 remote I/O is a compact system located in a metal

enclosure with 8 analog inputs and 4 analog outputs.

The remote I/O is available in three model variants for SILworX and three model variants

for ELOP II Factory, see Chapter 3.3. All variants are described in this manual.

The remote I/O serves as extension of the I/O level of HIMax and HIMatrix controllers, and

is connected to them via safeethernet. The remote I/O itself is not able to run a user

program.

The HIMatrix remote I/Os are not multi-master capable.

The remote I/O is suitable for mounting in Ex-zone 2. see Chapter 4.1.3.

The device has been certified by the TÜV for safety-related applications up to SIL 3 (IEC

61508. IEC 61511 and IEC 62061), Cat. 4 (EN 954-1) and PL e (EN ISO 13849-1). Further

safety standards, application standards and test standards are specified in the certificate

available on the HIMA website.

Safety Function

The module does not perform any safety-related functions.

The parameters and status for this module must not be used for safety functions.

Reaction in the Event of a Fault

If a module fault occurs, all outputs are switched off.

If the system bus fails, the outputs are de-energized.

The module activates the Error LED on the front plate.

Scope of Delivery

The module must be installed on a suitable connector board to be able to operate. If a Field

Termination Assembly (FTA) is use, a system cable is required to connect the connector board

to the FTA. Connector boards, system cables and FTAs are not included within the scope of

delivery.

The connector boards are described in Chapter 3.6. the system cables are described in

Chapter 3.7. The FTAs are described in own manuals.

Structure

The module is equipped with 12 relay outputs; each of these outputs can be energized by a

relay.

All 12 relay outputs are electrically safely isolated from one another. Each relay output is safely

isolated from the voltage supply of the module by its own contact circuit. For safe insulation, the

air and creeping distances are designed in accordance with IEC 61131-2 for overvoltage class II

up to 300 V.

Product Description

X-DO 12 51 is a NonSIL relay module intended for use in the programmable electronic system

(PES) HIMax.

The module can be inserted into any of the base plate slots with the exception of the slots

reserved for system bus modules. For more information, see System Manual (HI 801 001 E).

The module is equipped with 12 potential-free relay outputs. The relay outputs are suitable for

connecting ohmic and inductive loads.

It can be operated with safety-related modules and other NonSIL modules within one base

plate. Safety-related and NonSIL modules may not be wired redundantly.

The module is interference-free, in particular, with respect to EMC, electrical safety,

communication to the X-SB and X-CPU modules, as well as the user program.

Module and connector boards are mechanically coded, see Chapter 3.6.1. Coding avoids

installation of improper modules.

Refer to the HIMax Safety Manual (HI 801 003 E) for more information on the standards used to

test and certify the module and the HIMax system.