Category: HIMA

Highlights

• XMR architecture and integrated redundancy management deliver “availability for life”

• Unique common-cause protection

• All changes, additions and maintenance procedures are possible without stopping

a HIMax system

• CPU self-educates when processor module is replaced

• Proof tests can be conducted online

• Stores up to 2.500 diagnostic entries in the processor module and 500 entries per

I/O module automatically

• Multitasking – run up to 32 user programs simultaneously

• Sequence of event (SOE), storage for 5.000 events, 1 ms resolution quality

• Redundant integrated and protected power distribution

• Two or three wiring inputs/outputs per channel to help eliminate additional wiring

• Remote rack functionality enables star topology

• HIMax – HIMatrix PES, redundant link via SafeEthernet

• Optimize process simulation and operator training with the HIMax Safety Simulator X-OTS

HIMax is a flexible platform for critical production processes that you can never afford

to have go down.

HIMax adapts to all I/O-count, response-time and fault-tolerance requirements as well

as centralized and distributed applications. HIMax delivers availability for life by enabling

uninterrupted system operation throughout your plant’s life cycle. Hardware and software

changes can be performed without system interruption. Alternative CPU modules make

HIMax suitable for meeting high performance and critical control requirements as well

as for use in small and mid-sized safety applications.

HIMax systems

• SIL 3. PL e

• SIL 4 CENELEC

• Nonstop operation

• Maximum performance

• Maximum configuration flexibility for life

• Different mechanical concepts

• Small, mid-sized and large applications

Safety Function

No safety function is performed by the communication module.

Reaction in the Event of a Fault

If fault occur, the module enters the temporary ERROR STOP. The module is then rebooted

and restarted from the INIT state.

No process data is exchanged with external communication partners in the ERROR STOP

state. No process data is transferred to process module.

HIMax COM Module Part Number

Each COM module forms a functional unit with the X-CB 001 02 connector board. Note that the

connector board must be separately purchased.

The fieldbus submodules are optional and must be mounted by the manufacturer. The fieldbus

submodule is selected when ordering the controller using the part number. Additionally, the

protocols used must be activated.

Processor System

The processor system uses self tests to control and monitor the communication.

Data is exchanged between the communication module and the processor module

is carried out via redundant system bus. The system bus has a redundant structure

for reasons of availability. Redundancy is only ensured if both system bus modules

are inserted in the base plates and configured accordingly.

Operating system and error code history are stored in a non-volatile memory and

can be read in SILworX via the diagnosis.

Product Description

The X-COM 01 communication module is intended for use in the programmable electronic

system (PES) HIMax.

The module is inserted into any of the base plate slots with the exception of the slots reserved

for system bus modules. For more information, refer to the System Manual (HI 801 001 E).

The module is approved for use in the safety-related HIMax system and can be used to

transport safety-related protocols.

The module ensures communication with systems via Ethernet and fieldbus interfaces with

safeethernet and different standard protocols.

Processor System

The processor system uses self tests to control and monitor the communication.

Data is exchanged between the communication module and the processor module

is carried out via redundant system bus. The system bus has a redundant structure

for reasons of availability. Redundancy is only ensured if both system bus modules

are inserted in the base plates and configured accordingly.

Operating system and error code history are stored in a non-volatile memory and

can be read in SILworX via the diagnosis.

Ethernet Switch

Integrated Ethernet switch to configure different networks.

Ethernet interface

The communication module is equipped with four Ethernet switch ports connected to the

Ethernet interface of the processor system via an integrated Ethernet switch.

Safety Function

The module evaluates the digital input signals and provides them to the user program.

The safety function is performed in accordance with SIL 3.

Reaction in the Event of a Fault

If a fault occurs, the module adopts the safe state and the assigned input variables transmit

the initial value (default value = 0) to the user program.

The initial values must be set to 0 to ensure that the input variables transmit the value 0 to

the user program if a fault occurs.

The module activates the Error LED on the front plate.

Scope of Delivery

The module must be installed on a suitable connector board to be able to operate. If a FTA

is used, a system cable is required to connect the connector board to the FTA. Connector

boards, system cables and FTAs are not included within the scope of delivery.

The connector boards are described in Chapter 3.6. the system cables are described in

Chapter 3.7. The FTAs are described in own manuals.

Introduction

The present manual describes the technical characteristics of the module and its use. It

provides information on how to install, start up and configure the module in SILworX.

Product Description

The X-DI 64 01 digital input module is intended for use in the programmable electronic

system (PES) HIMax.

The module can be inserted in any of the base plate slots with the exception of the slots

reserved for system bus modules. For more information, refer to the System Manual

(HI 801 001 E).

The module is used to evaluate up to 64 digital input signals. The digital inputs are current

sinking logic for 24 VDC signals in accordance with type 3 specified in the IEC 61131-2.

The module has been certified by the TÜV for safety-related applications up to SIL 3

(IEC 61508. IEC 61511 and IEC 62061), Cat. 4 (EN 954-1) and PL e (EN ISO 13849-1).

Refer to the HIMax Safety Manual (HI 801 003 E) for more information on the standards

used to test and certify the modules and the HIMax system.

The following elements also contribute to the safety function:

Hardware self-test

Safe communication with I/O modules

Reaction in the event of a fault

If the test harness detects a fault, the processor module enters the ERROR STOP state and restarts.

Diagnostic information is available to find the cause of the fault.

Start-up after error stop

If the cause of the fault still exists, the processor module avoids restarting and repeating the error stop:

After the first error stop, the processor module reboots normally and switches to system operation.

After the second error stop, the user must reboot the system using PADT after troubleshooting.

After the processor module has been running in system operation for approximately one minute,

the next error stop will be considered as the first error stop.

Scope of delivery

The module must be mounted on a suitable connection board to operate.

An Ethernet cable is required to connect the PADT.

The connection board and Ethernet cable are not included in the scope of delivery of the module.

Modernisation to HIQuad X brings additional benefits:

– Seamless modernisation

HIQuad inputs/outputs (including field wiring) can be left in place,

which reduces costs compared to new installations.

Software engineering is supported through automated logic conversions,

reducing engineering effort and potential sources of error.

– Reduced downtime

Unaltered components can be tested more easily,

reducing the downtime required for modernisation.

– Modernisation flexibility

You have complete freedom to carry out modernisation in a single step or in phases.

– Increased safety and security

HIQuad X provides you with the optimal basis for compliance of your system with

the latest functional safety standards of IEC 61511 and automation safety standards of IEC 62443.

– Better performance

State-of-the-art technology delivers better functionality, such as shorter cycle times,

increased heavy-duty capability, improved system availability, reduced engineering effort and improved

maintenance.

– Ongoing support:

Products entering the legacy phase have limited availability and do not receive updates

or new features. HIQuad X fully supports new safety features and future certifications.

Product Description

The X-CPU 01 processor module is an absolute necessity for data processing within the HIMax system.

Data processing within the HIMax system is absolutely essential. The processor module is used to:

Process up to 32 user programmes

Perform all central functions including communication

Handle the redundant functions of up to 3 additional processor modules

Communicate via secure Ethernet

Create and store CPU events.

Stores events created by the I/O modules.

The module is TÜV-certified for safety-related applications up to SIL 3.

(IEC 61508. IEC 61511 and IEC 62061), Cat. 4 (EN 954-1) and PL e (EN ISO 13849-1).

Safety features of the module

The safety features of the processor module include the following:

Handling of the user programme

– If a fault occurs Stop the user programme and reset the variables to their initial values.

– If a fault occurs: Reset the processor module to a safe state and report the CPU status

Safe communication between the HIMA controllers (HIMax, HIMatrix and remote I/O modules) using the safety-related safeethernet protocol.

Data transfer can be carried out using the Ethernet interface of the processor module itself, or

The data can be transferred using the Ethernet interface of the processor module itself or using the Ethernet interface of the COM module.

The safety function complies with the SIL 3 standard.

The following elements also contribute to the safety function:

Hardware self-test

Safe communication with I/O modules

Reaction in the event of a fault

If the test harness detects a fault, the processor module enters www.cniacs.com the ERROR STOP state and restarts. Diagnostic information is available to find the cause of the fault.

Start-up after error stop

If the cause of the fault still exists, the processor module avoids restarting and repeating the error stop:

After the first error stop, the processor module reboots normally and switches to system operation.

After the second error stop, the user must reboot the system using PADT after troubleshooting.

After the processor module has been running in system operation for approximately one minute, the next error stop will be considered as the first error stop.

Scope of delivery

The module must be mounted on a suitable connection board to operate.

An Ethernet cable is required to connect the PADT.

The connection board and Ethernet cable are not included in the scope of delivery of the module.

HIQuad X completes our intelligent security platform. All new features are now

also available for HIQuad X, including

– SILworX as an engineering tool for all system families

– State-of-the-art safety concepts

– Performance enhancements, especially in REAL calculations

– Comprehensive communication (Secure Ethernet, HIPRO-S-V2)

Expansion, upgrading and modernisation

Systems, technologies and standards www.cniacs.com are constantly changing. To ensure the long-term safety and availability of your equipment, our experts will assist you in keeping it up to date during its operation.

As part of our modernisation service, our experts support you with on-site analyses.

As part of our modernisation service, our experts support you with on-site analyses and advise you on all options and technologies to keep your equipment up to date. This includes consulting on system upgrades, equipment maintenance and updating to compatible successor models.

Our modernisation service includes upgrade planning, logical conversion from ELOP II to SILworX and installation of the system in accordance with the latest safety standards.

Modernisation to HIQuad X brings additional benefits:

– Seamless modernisation

HIQuad inputs/outputs (including field wiring) can be left in place, which reduces costs compared to new installations.

Software engineering is supported through automated logic conversions, reducing engineering effort and potential sources of error.

– Reduced downtime

Unaltered components can be tested more easily, reducing the downtime required for modernisation.

– Modernisation flexibility

You have complete freedom to carry out modernisation in a single step or in phases.

– Increased safety and security

HIQuad X provides you with the optimal basis for compliance of your system with the latest functional safety standards of IEC 61511 and automation safety standards of IEC 62443.

– Better performance

State-of-the-art technology delivers better functionality, such as shorter cycle times, increased heavy-duty capability, improved system availability, reduced engineering effort and improved maintenance.

– Ongoing support:

Products entering the legacy phase have limited availability and do not receive updates or new features. HIQuad X fully supports new safety features and future certifications.