HIMA HIMatrix F30 System Manual Download Page 29 | Manualshive

Page: 29 / 110

HIMA HIMatrix F30 System Manual Download Page 29

System Manual Compact Systems

5 Operating System

HI 800 141 E Rev. 2.02

Page 29 of 110

5.4.1

Modes of Operation for the Processor System

LEDs located on the front plate of the controller indicate the operating state of the processor
system. The latter can also be reported by the PADT, together with other parameters specific to
processor module and user program.

Stopping the processor interrupts the execution of the user program and sets the outputs of the
controller and all remote I/Os to safe values.

Setting the EMERGENCY STOP system parameters to TRUE using a program logic causes the
processor system to enter the STOP state.

The following table specifies the most important operating states:

Mode of Operation Description

INIT

Safe state of the processor system during the initialization phase.
Hardware and software tests are performed.

STOP/VALID
CONFIGURATIO
N

Safe state of the processor system with no execution of the user program
All outputs of the controller are reset.
Hardware and software tests are performed.

STOP/INVALID
CONFIGURATIO
N

Safe state of the processor system without a configuration loaded or after
a system fault.
All controller's outputs are reset, the hardware watchdog has not
triggered.
The processor system can only be rebooted using the PADT.

RUN

The processor system is active.
The user program is run,
I/O signals are processed.
The processor system ensures safety-related and non-safety-related
communication (if configured).
Hardware and software tests, and test for configured I/O modules are
performed.

Table 19: Modes of Operation for the Processor System

5.4.2

Programming

A PADT (programming and debugging tool) is used to program the HIMatrix controllers. The
PADT is a PC equipped with one of the programming tools:



SILworX for HIMatrix systems with processor operating system V7 and higher.



ELOP II Factory for HIMatrix systems with processor operating system up to 7.



The programming tools supports the following programming languages in accordance with

IEC 61131-3:



Function block diagrams (FBD)



Sequential function charts (SFC)

The programming tools are suitable for developing safety-related programs and for operating
the controllers.



For more details on the programming tools, refer to the manuals 'First Steps ELOP II

Factory' (HI 800 006 E) and 'First Steps SILworX' (HI 801 103 E), and to the corresponding
online help.

«
...
27
28
29
30
31
...
»

Summary of Contents for HIMatrix F30

Page 1: ...HIMatrix Safety Related Controller System Manual Compact Systems HIMA Paul Hildebrandt GmbH Co KG Industrial Automation Rev 2 02 HI 800 141 E...

Page 2: ...y the written material without prior notice For further information refer to the HIMA DVD and our website http www hima de and http www hima com Copyright 2013 HIMA Paul Hildebrandt GmbH Co KG All rig...

Page 3: ...s 13 2 2 1 3 EMC Requirements 13 2 2 1 4 Power Supply 14 2 2 2 Noxious Gases 14 2 3 Tasks and Responsibilities of Operators and Machine and System Manufacturers 14 2 3 1 Connection of Communication Pa...

Page 4: ...f the Operating System Versions 27 5 2 1 SILworX 27 5 2 2 ELOP II Factory 27 5 3 Behavior in the Event of Faults 27 5 3 1 Permanent Faults on Inputs or Outputs 28 5 3 2 Temporary Faults on Inputs or O...

Page 5: ...nd Outputs 61 7 3 5 Configure Line Control 63 7 3 5 1 Required Variables 63 7 3 5 2 Configuring Pulsed Outputs 64 7 3 5 3 Configuration Example with SILworX 64 7 3 6 Generating the Resource Configurat...

Page 6: ...afeethernet Communication 90 7 9 Handling the User Program 91 7 9 1 Setting the Parameters and the Switches 91 7 9 2 Starting the Program from STOP VALID CONFIGURATION 91 7 9 3 Restarting the Program...

Page 7: ...for the intended applications under the specified environmental conditions and only in connection with approved external devices 1 1 Structure and Use of the Document This system manual is composed o...

Page 8: ...Document number HIMatrix Safety Manual Safety functions of the HIMatrix system HI 800 023 E SILworX Communication Manual Description of the communication protocols ComUserTask and their configuration...

Page 9: ...ng state are designated by capitals Chapter 1 2 3 Cross references are hyperlinks even if they are not particularly marked When the cursor hovers over a hyperlink it changes its shape Click the hyperl...

Page 10: ...appear as follows TIP The tip text is located here 1 4 Service and Training Deadlines and the extent of actions for commissioning testing and modifying controller systems can be agreed with the servic...

Page 11: ...ip principle adopts the de energized state if a fault occurs 2 1 1 2 Application in Accordance with the Energize to Trip Principle The HIMatrix controllers can be used in applications that operate in...

Page 12: ...owing standards for EMC climatic and environmental requirements Standard Content IEC EN 61131 2 2007 Programmable controllers Part 2 Equipment requirements and tests IEC EN 61000 6 2 2005 EMC Generic...

Page 13: ...bration immunity test 5 9 Hz 3 5 mm 9 150 Hz 1 g EUT in operation 10 cycles per axis Shock immunity test 15 g 11 ms EUT in operation 3 shocks per axis 18 shocks Table 7 Mechanical Tests 2 2 1 3 EMC Re...

Page 14: ...ons in environments with noxious gas concentrations as described in the following standards ANSI ISA S71 04 1985 Corrosive gases Class G3 DIN EN 60068 2 60 1996 also IEC 68 2 60 1995 With noxious gas...

Page 15: ...rotected from electrostatic discharge e g by storing them in their packaging 2 5 Residual Risk No imminent risk results from a HIMatrix compact system itself Residual risk may result from Faults relat...

Page 16: ...f the individual devices refer to the corresponding manuals The compact systems may also be connected to modular systems F60 via safeethernet as well 3 1 Line Control Line control is used to detect sh...

Page 17: ...able error code is created If multiple faults occur simultaneously the error code is the sum of all single fault error codes Line control can be configured if the following systems are used F1 DI 16 0...

Page 18: ...r circulates within a control cabinet and natural convection is not enough the threshold associated with High Temperature in the HIMatrix controller can already be exceeded at ambient temperatures of...

Page 19: ...ues defined for a scalar variable Scalar variables have a numeric data type e g INT REAL Two upper limits and two lower limits are possible The following condition must be met for the limits Highest l...

Page 20: ...fer and transfers this to a third party system for evaluation and representation Four X OPC servers can simultaneously read events out of a processor module 3 7 Product Data Designation Value range of...

Page 21: ...ls used in the project invalid configuration Order the software activation code on time The software activation code can be generated on the HIMA website using the system ID of the controller value 1...

Page 22: ...E Rev 2 02 Example of other F60 PADT Superior safeethernet PADT Figure 3 safeethernet Ethernet Networking Example The different systems can be connected to one another via Ethernet in any configuratio...

Page 23: ...s transferred over multiple cycles number of communication time slices 1 i When calculating the maximum response times allowed the number of communication time slices must be equal to 1 see the commun...

Page 24: ...s communication the slave address and a CRC checksum are transferred in addition to the instruction code and data while in a Modbus TCP this function is assumed by the subordinate TCP protocol For fur...

Page 25: ...ieldbus submodule 4 3 1 Equipment of Fieldbus Interfaces with Fieldbus Submodules The HIMatrix controllers can be equipped with fieldbus submodules in accordance with the following table Controller FB...

Page 26: ...unction Modbus master slave RS485 can only be operated on one fieldbus interface However simultaneous operation via RS485 and Ethernet is allowed i No safety related communication can be ensured with...

Page 27: ...terface Actions allowed Defined in the programming tool Configuration of protective functions User log in Table 18 Functions of the Processor Operating System Each operating system is inspected by the...

Page 28: ...erating system statistically evaluates the frequency with which a fault occurs If the specified fault frequency is exceeded it permanently sets the module status to faulty In this way the module no lo...

Page 29: ...ocessor system without a configuration loaded or after a system fault All controller s outputs are reset the hardware watchdog has not triggered The processor system can only be rebooted using the PAD...

Page 30: ...tion for the User Program Only one user program at a time can be loaded into a given controller For this user program the following modes of operations are allowed Mode of Operation Description RUN Th...

Page 31: ...program cycle requires multiple CPU cycles to be completed These two scenarios are even possible if only one user program exists It is not possible to exchange global data between user programs within...

Page 32: ...e Use of the execution duration unneeded by the user program e g the difference between actual execution duration in one CPU cycle and the defined Max Duration for Each Cycle s Resource Multitasking E...

Page 33: ...ograms is possible The use of the same global variables in several user programs can lead to a variety of consequences caused by the reciprocal influence among the user programs Carefully plan the use...

Page 34: ...CPU cycle considered Max Duration for Each Cycle s of Prg 1 has expired Prg 2 starts Max Duration for Each Cycle s of Prg 2 has expired Prg 3 starts Max Duration for Each Cycle s of Prg 3 has expired...

Page 35: ...as expired Prg 3 starts Max Duration for Each Cycle s of Prg 3 has expired Prg 4 starts Max Duration for Each Cycle s of Prg 4 has expired completion of the first CPU cycle Completion of the Prg 1 cyc...

Page 36: ...itasking mode 3 allows users to verify if multitasking mode 2 ensures proper program execution even in the worst case scenario The example examines user programs named Prg 1 Prg 2 and Prg 3 t Prg 1 Pr...

Page 37: ...ust be carefully analyzed prior to performing a reload Examples If a timer action qualifier is deleted due to the reload the timer expires immediately Depending on the remaining settings the Q outputs...

Page 38: ...results in initializing all variables even retain variables and all function block instances Renaming a program results in initializing all contained variables and function block instances This behav...

Page 39: ...ogram especially under special circumstances or conditions that cannot otherwise be tested Simulating unavailable sensors in cases where the initial values are not appropriate WARNING Physical injury...

Page 40: ...rocess value is used again for the variable Force Editor The SILworX Force Editor displays all the variables for which forcing is allowed Global and local variables are grouped into two different tabs...

Page 41: ...continues to be used as the new process value even after the end of the forcing process The previous process value is no longer valid Time Limits A time limit can be defined for global forcing Once t...

Page 42: ...Absolutely take the following facts into account when forcing or evaluating tests performed with forced global variables Signal force values are only valid until overwritten by the user program Howev...

Page 43: ...d Stop at Force Timeout switches cannot be changed when a controller is operating and locked i e define these settings prior to locking the controller Table 24 Force Switches and Parameters up to CPU...

Page 44: ...e and position must be chosen such that heat dissipation is ensured The power dissipation of the installed equipment is decisive for determining the fan components It is assumed that heat load and unh...

Page 45: ...on is approx 34 W The temperature within an enclosure can also be calculated in accordance with VDE 0660 Part 507 HD 528 S2 i All considerations about heat must take every component within a cabinet o...

Page 46: ...various devices The minimum clearances of the HIMatrix systems among one another to external devices and to the control cabinet enclosure are Vertically 100 mm Horizontally approx 20 mm with the F60 d...

Page 47: ...0 mm above and below the device must be maintained The device must not be mounted above heating equipment or any heat source 100 mm DIO 20 8 01 31 DIO 20 8 01 20 mm Figure 8 Minimum Clearances with HI...

Page 48: ...cable ducts are higher the mounting rails must be placed on spacers 100 mm 100 mm 40 mm 40 mm 1 1 2 3 Compact system Cable duct Spacer Figure 9 Use of Cable Ducts and Spacers If more than two HIMatri...

Page 49: ...lly if sufficient ventilation is ensured With open mounting surfaces it is not difficult to remain within the maximum operating temperature limits provided that the minimum clearances are maintained a...

Page 50: ...ontrollers with analog inputs To this end place the clamp over the surface of the stripped cable shielding and press it from both sides into the oblong holes of the shield contact plate until it snaps...

Page 51: ...t that are electrically connected to the housing potential A clamp is used to connect the cable shielding to the rail In all other devices the shielding must be positioned in the controller housing te...

Page 52: ...be interconnected Safety Time ms Safety time in milliseconds 20 22 500 ms 600 ms 400 ms1 Application specific Watchdog Time ms Watchdog time in milliseconds 4 5000 ms for F 03 devices and modules 8 5...

Page 53: ...resource Safety Time Target Cycle Time Target Cycle Time Mode If Reload Allowed is set to OFF they are not changeable online i Allow Online Settings can only be set to ON if the PES is stopped Autost...

Page 54: ...ycle time the cycle duration is increased Reload is not processed if the target cycle time is not sufficient Fixed tolerant The same as Fixed At most the duration of every fourth cycle is increased to...

Page 55: ...lication specific Timeout ms Monitoring time for command communication 600 60 000 ms Timeout ms 2 resend time ms A connection loss is detected upon expiration of the defined time In the worst case sce...

Page 56: ...ic Table 31 Hardware System Variables CPU OS V7 and Higher Global variables can be connected to these system variables the value of the global variables is modified using a physical input or the user...

Page 57: ...s active BOOL OFF Global forcing is not active Spare 0 Spare 16 Reserved USINT Spare 17 BOOL Last Field Warning ms Date and time of the last I O warning in s and ms since 1970 01 01 UDINT Last Field W...

Page 58: ...using PADT is allowed BOOL OFF Start of processor system using PADT is not allowed Start Cycle ON during the first cycle after starting otherwise OFF BOOL Power Supply State Bit coded state of the pow...

Page 59: ...5 Rack System Parameter Settings The rack system parameters can be set in the Rack s online view Parameter Description Default value Type Spare not changeable Name Rack name for the controller text HI...

Page 60: ...HIMatrix F 03 systems with counter inputs ensure that the user program s watchdog time is less than or equal to 5000 ms Classification Classification of the user program Safety related or Standard for...

Page 61: ...em variables for input and output channels To access the system variables for input and output channels 1 Display the desired resource in the Hardware Editor 2 Double click the required input or outpu...

Page 62: ...e of the input 4 In the user program program a safety related fault reaction using the error code Counter xx Error Code The global variable provides values to the user program To get additional option...

Page 63: ...lsed outputs 4 1 8 as required Board_POS_P ulse UDINT Module slot with pulsed outputs 2 With compact devices the DOs are used in slot 1 2 or 3 see Table 37 With the F60 the slot 3 8 is given Pulse_del...

Page 64: ..._ON Pulse_ON Pulse_ON Channel no 6 A6 A6 A6 Pulse_ON A6 Pulse_ON Channel no 7 A7 A7 A7 A7 A7 A7 Channel no 8 A8 A8 A8 A8 A8 A8 Table 38 Configuration of Pulsed Outputs The corresponding inputs can be...

Page 65: ...nel Error Code BYTE of the corresponding channel FC_S1_1_Pulsed FC_S2_2_Pulsed one variable for each channel Table 40 Connection of the Global Variables to Input System Variables of the Input Module A...

Page 66: ...lick Write Connection data and S R S are configured and it is now possible to log in For further details refer to the SILworX manual First Steps HI 801 103 E 7 3 8 Loading a Resource Configuration aft...

Page 67: ...munication System If data errors were detected in the NVRAM thus causing the watchdog time to be exceeded it can be useful to load the resource configuration from the flash memory for the communicatio...

Page 68: ...llowing options Use the PADT date and time to transfer the time and date displayed for the PADT into the controller User defined to transfer the date and time from the two input boxes into the control...

Page 69: ...defined with SILworX and loaded into the processor module The user management can be used to set and manage the access rights to a controller for up to ten users The access rights are stored in the c...

Page 70: ...et the system time force restart and reset modules Start system operation for processor modules Read Write Similar to Read Operator but users may also Create programs Translate programs Load programs...

Page 71: ...system within a device or module as processor module and communication module For HIMatrix systems set the Speed Mode Mbit s and Flow Control Mode to Autoneg in the Ethernet switch settings The param...

Page 72: ...ult Broadcast Table 43 Port Configuration Parameters CPU OS and Higher To modify and enter these parameters in the communication system s configuration double click each table cell The parameters beco...

Page 73: ...t is triggered Deactivated If the global variable value changes from FALSE to TRUE an event is triggered Default value Deactivated Checkbox activated deactivated Alarm Text Text specifying the alarm s...

Page 74: ...esis L Alarm Value Hysteresis or H Alarm Value L Alarm Value Depending on the global variable type H Alarm Priority Priority of the high limit H default value 500 0 1000 H Alarm Acknowledgment Require...

Page 75: ...ms up to V7 7 7 1 Configuring the Resource The first step is to configure the resource The parameter and switch settings associated with the configuration are stored to the NVRAM of the processor syst...

Page 76: ...7 2 Configuring the User Program General system signals and parameters Signal Data type Unit value R W Description System ID high low USINT R CPU system ID the first part of the SRS not safe 1 OS majo...

Page 77: ...vailable Table 47 General System Signals and Parameters CPU OS up to V7 The following table specifies the parameters for configuring the user program Parameter Range Description Default value Executio...

Page 78: ...select the Outputs tab and proceed as described for the inputs The inputs and outputs are now connected and thus effective in the user program Refer to the manual for the individual modules or remote...

Page 79: ...ifies the switch signals used in the example Name Type Description Remark S1_1_pulsed S1_2_pulsed BOOL BOOL Value Value First and second contact of switch 1 S2_1_pulsed S2_2_pulsed BOOL BOOL Value Val...

Page 80: ...s Hardware Management 2 Right click the HIMatrix I O module and select Connect Signals from the context menu A dialog box for connecting the signals in the Signal Editor to the available hardware cha...

Page 81: ...n the Status Viewer note down the created checksum 4 Move to the ELOP II Factory Hardware Management right click the HIMatrix resource and select Configuration Information on the context menu 5 Note d...

Page 82: ...menu 2 Click the Connect button to establish the connection 3 Click the Default Settings button The user management contained in the controller is deleted and the Administrator default user with empty...

Page 83: ...Flash Memory of the Communication System In certain cases it can be useful to load the resource configuration from the flash memory for the communication system instead of from the PADT After replaci...

Page 84: ...m such that a connection to the PADT can still be established Upon deletion the controller can immediately be loaded with a new program This action deletes the previous program from the working memory...

Page 85: ...and remote I Os with extended settings set the Speed Mode and Flow Control Mode to Autoneg To ensure that the parameters of this dialog box become effective the option Activate Extended Settings must...

Page 86: ...ns but only one direction at a time Autoneg Automatic communication control Standard Autoneg Autoneg also with fixed values The Advertising function forwarding the Speed and Flow Control properties is...

Page 87: ...UDINT ms Maximum time in ms that may elapse between the reception of two valid messages Response Time UDINT ms Time in ms that elapsed while waiting for a response to the last message sent Connection...

Page 88: ...nnection Table 61 The Connection Control Parameter CPU OS up to V7 To evaluate system signals in the user program 1 Right click the resource in the ELOP II Factory Hardware Management and select P2P E...

Page 89: ...6 Setting the Parameters in the P2P Editor up to CPU OS V7 The parameters specified above determine the data throughput and the fault and collision tolerance of the safeethernet connection Refer to th...

Page 90: ...ge the Signal Editor and P2P Process Signals windows adjacent to one another 5 In the P2P Process Signals window select the tab corresponding to the desired data transfer direction e g from the resour...

Page 91: ...th the code generated program The parameters and the switches can also be set when the controller is in the STOP or RUN state provided that the main enable switch has been activated Only the elements...

Page 92: ...their current values Finally the Cycle Step command can be used to start the user program in single step mode All current values are retained for the following cycle freezed state WARNING Property da...

Page 93: ...s are described in the communication manual Version Manual Document number CPU OS V7 and higher SILworX Communication Manual HI 801 101 E CPU OS up to V7 HIMatrix PROFIBUS DP Master Slave Manual HI 80...

Page 94: ...N STOP VALID CONFIGURATION STOP INVALID CONFIGURATION User log in Operating system load If the memory for the long term diagnosis is full all data older than three days is deleted allowing new entries...

Page 95: ...n the Action Bar The system log in window opens 3 In the system log in window select or enter the following information IP address of the controller User name and password The Hardware Editor s Online...

Page 96: ...ems that are stored in the rewritable flash memories and can be replaced if necessary NOTE Disruption of the safety related operation The controller must be in the STOP state to enable the programming...

Page 97: ...t 7 Click OK to load the operating system The operating system is loaded into the controller The controller restarts and enters the STOP state After an operating system has been loaded the controller...

Page 98: ...gher The controller must be programmed with SILworX 9 2 3 2 Downgrading from SILworX to ELOP II Factory In rare cases it can be necessary changing a controller or remote I O to be programmed using ELO...

Page 99: ...ning HI 800 141 E Rev 2 02 Page 99 of 110 10 Decommissioning Remove the supply voltage to decommission the device Afterwards it is possible to pull out the pluggable screw terminal connector blocks fo...

Page 100: ...rt To avoid mechanical damage HIMatrix components must be transported in packaging Always store HIMatrix components in their original product packaging This packaging also provides protection against...

Page 101: ...v 2 02 Page 101 of 110 12 Disposal Industrial customers are responsible for correctly disposing of decommissioned HIMatrix hardware Upon request a disposal agreement can be arranged with HIMA All mate...

Page 102: ...12 Disposal System Manual Compact Systems Page 102 of 110 HI 800 141 E Rev 2 02...

Page 103: ...ive earth PELV Protective extra low voltage PES Programmable electronic system R Read The system variable or signal provides value e g to the user program Rack ID Base plate identification number Inte...

Page 104: ...Use of Cable Ducts and Spacers 48 Figure 10 Mounting without Spacers and Vertical Mounting 49 Figure 11 Communication System Properties CPU OS up to V7 85 Figure 12 Creating a Port Configuration CPU O...

Page 105: ...odes of Operation for the Processor System 29 Table 20 User Program Modes of Operation 30 Table 21 Parameters Configurable for Multitasking 32 Table 22 Reloading after Changes 38 Table 23 Effect of th...

Page 106: ...53 Connecting Signals to the Input Module s Output Signals 80 Table 54 Connecting Signals to the Input Module s Input Signals 81 Table 55 Sub States Associated with STOP up to CPU OS V7 83 Table 56 Pe...

Page 107: ...age 107 of 110 Declaration of Conformity For the HIMatrix system declarations of conformity exist for the following directives EMC Directive Low Voltage Directive EX Directive The current declarations...

Page 108: ...4 event creation F 03 19 definition F 03 72 general F 03 19 recording F 03 20 faults internal 28 permanent in connection with I Os 28 reaction to 27 temporary in connection with I Os 28 forcing 39 CPU...

Page 109: ......

Page 110: ...336 HIMA Paul Hildebrandt GmbH Co KG P O Box 1261 68777 Br hl Germany Phone 49 6202 709 0 Fax 49 6202 709 107 E mail info hima com Internet www hima com HI 800 141 E by HIMA Paul Hildebrandt GmbH Co K...

Reviews:

No comments