3 Product Description
X-DO 24 02
Page 10 of 54
HI 801 095 E Rev. 4.00
3 Product
Description
The X-DO 24 02 digital output module is intended for use in the programmable electronic
system (PES) HIMax.
The module can be inserted into any of the base plate slots with the exception of the slots
reserved for system bus modules. For more information, see System Manual
(HI 801 001 E).
The module is equipped with 24 digital outputs that are operated with 24 or 48 VDC
external power supply. Each output can be loaded up to a nominal current of 0.5 A; ensure
that the total permissible current of the external voltage supply does not exceeded 12 A.
The outputs are suitable for connecting ohmic, inductive and capacitive loads and lamps.
The module has been certified by the TÜV for safety-related applications up to SIL 3
(IEC 61508, IEC 61511 and IEC 62061), Cat. 4 (EN 954-1) and PL e (EN ISO 13849-1).
Refer to the HIMax Safety Manual (HI 801 003 E) for more information on the standards
used to test and certify the module and the HIMax system.
3.1 Safety
Function
The module ensures its safety function using three safety switches connected in series for
each channel. This ensures that each output is two-fault-tolerant with respect to the safety
switch. Each safety switch of a channel can be individually switched off either via the
system bus (I/O bus) or via the second independent shutdown function (watchdog).
The safe output state is the de-energized state. Redundant processor systems monitor the
values expected for the outputs. Outputs that do not correspond to the expected values are
reset. One of the two read-back branches that were monitored for their expected values
can be tested.
The safety function is performed in accordance with SIL 3.
3.1.1
Reaction in the Event of a Fault
If a fault is detected, the module adopts the safe state and all the outputs are de-energized
in accordance with the 'de-energize to trip principle'. If a channel fault occurs, only the
corresponding output is switched off; if a module fault occurs, all module outputs are
switched off.
If the system bus fails, the outputs are de-energized.
The module activates the
Error
LED on the front plate.
3.2
Scope of Delivery
The module must be installed on a suitable connector board to be able to operate. If a FTA
is used, a system cable is required to connect the connector board to the FTA. Connector
boards, system cables and FTAs are not included within the scope of delivery.
The connector boards are described in Chapter 3.6, the system cables are described in
Chapter 3.7. The FTAs are described in own manuals.
