HIMatrix M45
Safety-Related Controller
System Manual M45
HIMA Paul Hildebrandt GmbH
Industrial Automation
Rev. 1.01
HI 800 651 E
Страница 1: ...HIMatrix M45 Safety Related Controller System Manual M45 HIMA Paul Hildebrandt GmbH Industrial Automation Rev 1 01 HI 800 651 E...
Страница 2: ...e contact HIMA directly HIMA appreciates any suggestion on which information should be included in the manual Equipment subject to change without notice HIMA also reserves the right to modify the writ...
Страница 3: ...13 2 3 Tasks and Responsibilities of Operators and Machine and System Manufacturers 13 2 3 1 Connection of Communication Partners 13 2 3 2 Use of Safety Related Communication 13 2 4 ESD Protective Mea...
Страница 4: ...the Processor Operating System 26 5 2 Indication of the Operating System Versions 26 5 3 Behavior in the Event of Faults 26 5 3 1 Permanent Faults on Inputs or Outputs 26 5 3 2 Temporary Faults on Inp...
Страница 5: ...Hardware Image 55 7 5 5 Configuring the Inputs and Outputs 55 7 5 5 1 Use of Digital Input 56 7 5 5 2 Use of Safety Related Counter Inputs 56 7 5 5 3 Use of Digital Input 56 7 5 6 Generating the Resou...
Страница 6: ...1 01 9 Maintenance 69 9 1 Interferences 69 9 2 Loading Operating Systems 69 9 3 Repairing Modules and Sockets 70 10 Decommissioning 71 11 Transport 72 12 Disposal 73 Appendix 74 Glossary 74 Index of F...
Страница 7: ...e and Use of the Document This system manual is composed of the following chapters Safety Information on how to safely use the HIMatrix M45 system Allowed applications and environmental requirements f...
Страница 8: ...al user inputs RUN Operating states are designated by capitals Chapter 1 2 3 Cross references are hyperlinks even if they are not particularly marked When the cursor hovers over a hyperlink it changes...
Страница 9: ...as follows TIP The tip text is located here 1 4 Service and Training Deadlines and the extent of actions for commissioning testing and modifying controller systems can be agreed with the service depar...
Страница 10: ...s in accordance with the de energize to trip principle adopts the de energized state if a fault occurs 2 1 1 2 Use in Fire Alarm Systems HIMatrix systems are suitable for use in fire alarm systems in...
Страница 11: ...red by the relevant application standards e g EN 60204 EN 13849 the HIMatrix system must be installed in an enclosure of the specified protection class e g IP54 Table 4 General Requirements 2 2 1 1 Cl...
Страница 12: ...riterion FS Functional Safety IEC EN 61131 2 Interference immunity tests Criterion FS IEC EN 61000 4 2 ESD test 6 kV contact 8 kV air discharge 6 kV 8 kV IEC EN 61000 4 3 RFI test 10 V m 80 MHz 2 GHz...
Страница 13: ...e responsible for ensuring that HIMatrix systems are safely operated in automated systems and plants Machine and system manufacturers must sufficiently validate that the HIMatrix systems were properly...
Страница 14: ...responsible for demonstrating that the environment is sufficiently free from noxious gases 2 5 Residual Risk No imminent risk results from a modular HIMatrix M45 system itself Residual risk may resul...
Страница 15: ...e modules without removing the field wiring The sockets have a lateral electrical connection for attaching modules to the system bus and supply voltage The socket of the processor module also accommod...
Страница 16: ...al source ground must be connected to the input ground 3 1 1 1 Surges on Digital Inputs Due to the short cycle time of the HIMatrix M45 systems a surge pulse as described in EN 61000 4 5 can be read i...
Страница 17: ...blinking The inputs are set to 0 An evaluable error code is created For more information on how to configure line control in the user program refer to the module specific HIMatrix M45 manuals 3 1 2 O...
Страница 18: ...Voltage Monitoring The HIMatrix system is a single voltage system In accordance with IEC EN 61131 2 the required supply voltage is defined as follows Supply voltage Nominal value 24 VDC 15 20 20 4 28...
Страница 19: ...am to read the temperature If the state Very high temperature often occurs HIMA recommends improving the system heat dissipation e g by taking additional ventilation or cooling measures such that the...
Страница 20: ...hysteresis is defined to avoid a needless large number of events when a global variable strongly oscillate around a limit HIMatrix M45 can only create events if they are configured in SILworX see Chap...
Страница 21: ...hird party system for evaluation and representation purposes Four X OPC servers can simultaneously read events out of a processor module 3 7 Product Data Designation Value range of values Power supply...
Страница 22: ...using the system ID of the controller value 1 65 535 The software activation code is intrinsically bound to this system ID One license can only be used one time for a specific system ID For this reaso...
Страница 23: ...specified by the process 4 2 4 Connectors for safeethernet Ethernet The connectors for Ethernet communication are located in the socket of the processor module and of the communication module The proc...
Страница 24: ...003 E 4 2 6 3 Send Receive TCP S R TCP is a manufacturer independent non safety related protocol for cyclic and acyclic data exchange and does not use any specific protocols other than TCP IP With S R...
Страница 25: ...For further information on how to register and activate the protocols refer to the SILworX communication manual HI 801 101 E 4 3 2 Restrictions for Simultaneous Operation of Protocols PROFIBUS DP mas...
Страница 26: ...g tool Configuration of protective functions User log in Table 15 Functions of the Processor Operating System Each operating system is inspected by the T V in charge and approved for operation in the...
Страница 27: ...eleased and the fault statistics are reset when the controller operating state switches from STOP to RUN This change acknowledges the module fault 5 3 3 Internal Faults In the seldom case that a HIMat...
Страница 28: ...ing the PADT RUN The processor module is active The user program is run I O signals are processed The processor module performs safety related and non safety related communication if configured Hardwa...
Страница 29: ...a given controller For this user program the following modes of operations are allowed Mode of operation Description RUN The processor module is in RUN The user program is run cyclically I O signals...
Страница 30: ...sible to exchange global data between user programs within a single CPU cycle Data written by a user program is provided immediately before phase 3 but after the user program has been completely execu...
Страница 31: ...source Multitasking Editor Mode 1 The duration of a CPU cycle is based on the required execution time of all user programs Mode 2 The processor provides user programs with a higher priority the execut...
Страница 32: ...obal variables in several user programs Use the cross references in SILworX to check the use of global data Global data may only be assigned values in one location either in a user program or from the...
Страница 33: ...Each Cycle s of Prg 2 has Expired Prg 3 Starts Max Duration per Cycle s of Prg 3 has Expired End of the First CPU Cycle Completion of the Prg 1 cycle Prg 2 is Resumed Completion of the Prg 2 Cycle Pr...
Страница 34: ...rg 3 Starts Max Duration for Each Cycle s of Prg 3 has Expired Prg 4 Starts Max Duration for Each Cycle s of Prg 4 has Expired Completion of the First CPU Cycle Completion of the User Program Cycle of...
Страница 35: ...s to verify if multitasking mode 2 ensures proper program execution even in the worst case scenario The example examines user programs named Prg 1 Prg 2 and Prg 3 t Prg 1 Prg 3 Prg 2 First CPU Cycle C...
Страница 36: ...n the remaining settings the Q outputs can therefore be set to TRUE If the status action qualifier e g the S action qualifier is deleted for a set element the element remains set Deleting a P0 action...
Страница 37: ...nstances Renaming a program results in initializing all its variables and function block instances This behavior may have unintended effects on one or multiple user programs and therefore on the plant...
Страница 38: ...ible due to forced values Forced value may lead to incorrect output values Forcing prolongates the cycle time This can cause the watchdog time to be exceeded Forcing is only permitted after receiving...
Страница 39: ...tor displays all the variables for which forcing is allowed Global and local variables are grouped into two different tabs Use these tabs to configure the force values and set the force switches 6 4 3...
Страница 40: ...unting type and position must be chosen such that heat dissipation is ensured The power dissipation of the installed equipment is decisive for determining the fan components It is assumed that heat lo...
Страница 41: ...an be installed on mounting surfaces and also in closed enclosures such as control stations terminal boxes and control cabinets They have been developed in compliance with the relevant standards for E...
Страница 42: ...high heat emissions Devices with high EMC interference do not interfere with HIMatrix M45 systems Observe the instructions provided by the manufacturer 7 2 2 Construction Depth Due to the connections...
Страница 43: ...Set the socket onto the DIN rail 2 Swivel the socket in 3 Move the socket on the DIN rail and connect it to another socket 4 Press the socket s latch upwards The latch is used to attach the socket to...
Страница 44: ...nual M45 Page 44 of 80 HI 800 651 E Rev 1 01 3 3 4 1 2 Setting and Lifting the Socket Swiveling the Socket In and Out Connecting and Disconnecting Sockets Closing and Opening the Latch Figure 8 Exampl...
Страница 45: ...e module in to the socket until the locking mechanism is engaged To remove the module 1 Press the latch backwards as far as it can go The locking mechanism is released 2 Remove the module from the soc...
Страница 46: ...d Shielding 7 4 1 1 Earthing the 24 VDC System Voltage All HIMatrix M45 systems must be operated with power supply units that comply with the SELV Safety Extra Low Voltage or PELV Protective Extra Low...
Страница 47: ...g point must be as short as possible to achieve a low earthing resistance 7 4 2 Connecting the Supply Voltage The electrical connection is made via a removable connector on the processor module socket...
Страница 48: ...watchdog time minimum watchdog time otherwise it is rejected by the PES If the default value 0 ms is set the target cycle time is not taken into account 0 ms Application specific Target Cycle Time Mod...
Страница 49: ...N A cold start or warm start permitted with the PADT in RUN or STOP ON Application specific OFF Start not allowed Load Allowed ON Configuration download is allowed ON Application specific OFF Configur...
Страница 50: ...wn the controller if faults are detected by the user program FALSE Application specific Read only in RUN After starting the controller no operating action such as stop start or download is permitted i...
Страница 51: ...rent system errors UDINT System Error Historic Count Counted number of system errors counter resettable UDINT System Warning Count Number of current system warnings UDINT System Warning Historic Count...
Страница 52: ...g BYTE 0x01 Fan defective 0xFF Not available for M45 Allow Online Settings Specifies if the online settings of the enable switch are allowed BOOL ON The subordinate enable switches can be changed onli...
Страница 53: ...with 5 V voltage 0x40 Undervoltage with 3 3 V voltage 0x80 Overvoltage with 3 3 V voltage BYTE System ID SRS System ID of the controller 1 65 535 UINT Systemtick HIGH Revolving millisecond counter 64...
Страница 54: ...ialog box of the user program Switch Parameter Function Default value Setting for safe operation Name Name of the user program Arbitrary Program ID ID for identifying the program when displayed in SIL...
Страница 55: ...de generation is the same as in the previous version and the generated configuration is compatible with the operating systems in the hardware For this reason the value of Code Generation Compatibility...
Страница 56: ...the input 4 In the user program program a safety related fault reaction using the status Module OK The global variable provides values to the user program To get additional options for programming fau...
Страница 57: ...for the connection parameters and the SRS and enter the access data for a user account with administrator rights valid on the controller Click Write Connection data and SRS are configured and it is n...
Страница 58: ...roject If no PADT user management scheme exists any user can open and modify the project If a user management scheme has been defined for a project only authorized users can open the project Only user...
Страница 59: ...er account is composed of name password and access permission Once the project has been loaded into the controller by performing a download the user data are available for logging in The user accounts...
Страница 60: ...orce restart and reset modules Start system operation for processor modules Read Write Similar to Read Operator but users may also Load programs into the controller Test programs Administrator Similar...
Страница 61: ...ng on the resource Speed Mbit s 10 Data rate 10 Mbit s 100 Data rate 100 Mbit s Autoneg Automatic baud rate setting Standard Autoneg Flow Control Full duplex Simultaneous communication in both directi...
Страница 62: ...be modified BOOL Event Source CPU event The processor module creates the timestamp It creates all the events in each of its cycles Auto event As CPU event Default value Auto Event CPU Auto Alarm when...
Страница 63: ...Value Hysteresis or H Alarm Value L Alarm Value Depending on the global variable type H Alarm Priority Priority of the high limit H default value 500 0 1000 H Alarm Acknowledgment Required Activated T...
Страница 64: ...parameters and the switches can also be set when the controller is in the STOP or RUN state provided that the main enable switch has been activated Only the elements in the NVRAM can be modified all r...
Страница 65: ...used to start the user program in single step mode All current values are retained for the following cycle freezed state WARNING Property damage or physical injury possible due to actuators in unsafe...
Страница 66: ...s are described in the SILworX communication manual HI 801 101 E 8 2 2 Diagnostic History The diagnostic history records the various states of the processor module and communication system and stores...
Страница 67: ...errors associated with the inputs or outputs might be not detected during the code generation If a parameter error occurs the message INVALID CONFIGURATION with the error source and code are displayed...
Страница 68: ...m Manual M45 Page 68 of 80 HI 800 651 E Rev 1 01 If a controller is operating messages about the state of the processor system communication system and I O modules are displayed at specific user defin...
Страница 69: ...nication modules have different operating systems that are stored in the rewritable flash memories and can be replaced if necessary NOTE Disruption of the safety related operation The controller must...
Страница 70: ...erating system version must be verified using the PADT 9 3 Repairing Modules and Sockets The operator is not authorized to repair modules and sockets of the HIMatrix M45 system Defective HIMatrix M45...
Страница 71: ...01 Page 71 of 80 10 Decommissioning Remove the supply voltage to decommission the modular controller Afterwards it is possible to pull out the pluggable screw terminal connector blocks for inputs and...
Страница 72: ...void mechanical damage HIMatrix components must be transported in packaging Always store HIMatrix components in their original product packaging This packaging also provides protection against electro...
Страница 73: ...1 Page 73 of 80 12 Disposal Industrial customers are responsible for correctly disposing of decommissioned HIMatrix hardware Upon request a disposal agreement can be arranged with HIMA All materials m...
Страница 74: ...rth PELV Protective extra low voltage PES Programmable electronic system R Read The system variable or signal provides value e g to the user program Rack ID Base plate identification number Interferen...
Страница 75: ...ystem 15 Figure 2 Line Control 17 Figure 3 CPU Cycle Sequence with Multitasking 30 Figure 4 Multitasking Mode 1 33 Figure 5 Multitasking Mode 2 34 Figure 6 Multitasking Mode 3 35 Figure 7 Mounting Dis...
Страница 76: ...1 Table 14 Fieldbus Submodule 25 Table 15 Functions of the Processor Operating System 26 Table 16 Modes of Operation for the Processor Module 28 Table 17 User Program Modes of Operation 29 Table 18 Pa...
Страница 77: ...of 80 Declaration of conformity For the HIMatrix M45 system declarations of conformity exist for the following directives EMC Directive Low Voltage Directive EX Directive The current declarations of c...
Страница 78: ...internal 27 permanent in connection with I Os 26 reaction to 26 temporary in connection with I Os 27 forcing 38 restrictions 39 forcing 38 Hardware Editor 50 monitoring the temperature state 19 noxio...
Страница 79: ......
Страница 80: ...1404 HIMA Paul Hildebrandt GmbH P O Box 1261 68777 Br hl Germany Phone 49 6202 709 0 Fax 49 6202 709 107 E mail info hima com Internet www hima com HI 800 651 E by HIMA Paul Hildebrandt GmbH...
