Hanna Instruments HI510 User manual

INSTRUCTION MANUAL
Hanna Instruments Inc., 584 Park East Drive, Woonsocket, RI 02895 USA www.hannainst.com
HI510
HI520
Universal Process Controller
Modbus RTU Protocol and Remote Device Control

Dear Customer,
Thank you for choosing a Hanna Instruments®product.
Please read this instruction manual carefully as it provides details on Modbus RTU protocol, function codes,
controller wiring and setup configuration for remote control and monitoring.
This manual has been written as a companion for HI510 and HI520 process controller manuals.
Scan the QR code to download MAN510 or follow the link:
https://manuals.hannainst.com/HI510.
Scan the QR code to download MAN520 or follow the link:
https://manuals.hannainst.com/HI520.
If you need additional technical information, do not hesitate to e‑mail us at [email protected].
Visit www.hannainst.com for more information about Hanna Instruments and our products.
All rights are reserved. Reproduction in whole or in part is prohibited without the written consent of the copyright owner,
Hanna Instruments Inc., Woonsocket, Rhode Island, 02895, USA. Hanna Instruments reserves the right to modify the design,
construction, or appearance of its products without advance notice.

3 TABLE OF CONTENTS
TABLE OF CONTENTS
1. Introduction ...........................................................................................................................................................4
2. Modbus Protocol Basics...........................................................................................................................................4
3. Wiring & Settings Configuration.............................................................................................................................10
3.1. Wiring .................................................................................................................................................... 10
3.2. Setup ...................................................................................................................................................... 10
4. Operation Modes when Using Modbus....................................................................................................................13
4.1. Modbus General Steps .............................................................................................................................. 13
4.2. Modbus Special Holding Registers ............................................................................................................. 14
4.3. Retrieving Controller Parameters ................................................................................................................ 14
4.4. Editing & Saving Controller Parameters ...................................................................................................... 15
5. Modbus Functions.................................................................................................................................................16
5.1. Supported Function Codes ......................................................................................................................... 16
5.2. Exception Codes ....................................................................................................................................... 16
5.3. Coil Registers Functions (0xxxx Addresses) .................................................................................................. 17
5.4. Discrete Inputs Functions (1xxxx Addresses) ................................................................................................ 18
5.5. Input Registers Functions (3xxxx Addresses) ................................................................................................ 19
5.6. Holding Registers Functions (4xxxx Addresses) ............................................................................................ 38
6. Abbreviations.......................................................................................................................................................47
Certification...............................................................................................................................................................48
Recommendations for Users........................................................................................................................................48
Warranty ..................................................................................................................................................................48
General Safety Precautions & Installation Recommendations
HI510 and HI520 safety precautions and installation recommendations apply.
Procedures and instructions detailed in this section may require special precautions to ensure the safety of the
personnel performing the operations.
•
Electrical connection, installation, start‑up, operation, and maintenance must be carried out by
specialized personnel only.
•
The specialized personnel must have read and understood the instructions in this manual and should
adhere to them.
• User serviceable connections are all accessible inside the enclosure.
• Do not operate or energize the instrument with the case open.
• Before powering the controller, verify wiring has been done properly.
• Always disconnect the instrument from power when making electrical connections.
• Do not run other cables through the same cable gland with the power cable.
• A clearly marked disconnect switch must be installed in the vicinity of the instrument to ensure that
the electrical circuit is completely de‑energized for service or maintenance.

Introduction 4
1. INTRODUCTION
Modbus is a request‑response software protocol intended for efficient and immediate remote industrial process
control.
Main Features
• Allows immediate response to a problem with equipment (even from different plants)
• Minimizes production downtime as mechanical issues are quickly identified
• Traceability of stored data
• Monitors and controls processes remotely
2. MODBUS PROTOCOL BASICS
Modbus protocol defines a communication structure that occurs in pairs. One device initiates a request and then
waits for a response. The initiating device is responsible for initiating every interaction (query).
The initiating device can address individual requests (client responds) or initiate a broadcast message to several
clients (client does not respond).
Default parameters
Modbus communication protocol is implemented through a serial communication channel that makes controller
data available to a remote user. Physical layer is implemented on a RS485 line with the following default
parameters:
half duplex 8 bit data 1 start bit 1 stop bit no parity
RTU (Remote Terminal Unit) mode
Bytes are transferred as they are and checksum is calculated over CRC algorithm.
START ADDRESS FUNCTION DATA CRC CHECK END
T1‑T2‑T3‑T4 8 bits 8 bits N x 8 bits 16 bits T1‑T2‑T3‑T4
Note: T1-T2-T3-T4 = 3.5 characters times at no communication
• Address Field – client address range is 1 – 247 (0 kept for broadcasting).
• Function Field – values range is 1 – 255.
Field is used by client device to echo server query function field for normal case or sets most significant bit
of query function to 1 if an error occurs.
• Data Field – information regarding required operation.
Data field can be of various lengths or 0. Data uses “big‑endian” convention, whereby numerical data with
a size greater than 1 byte is sent with the most significant byte first e.g. 0x1234 is sent as 0x12,0x34.

5 Modbus Protocol Basics
General query message structure
SERVER
Device Address Function Code Query Data Error Check
CLIENT
Error Check Response Data Function Code Device Address
• Device Address – individual client address
• Function Code – type of action
• Query Data / Response Data – transmitted data
• Error Check – data integrity error check field
Changing a specific parameter
1. Enter Remote Control Edit Mode.
2. Change a specific Parameter Value.
3. Save Settings.
Edit
Mode
Inputs Controller is not in Manual, Calibration, or Local Edit Mode
•Set password register
•Set specific value for Remote Control Mode register
Actions A copy of the current settings is made.
All further requests (writings) will address that copy.
Outputs
Remote Control Edit Mode will be available for reading in Remote Control Mode register
• A timeout value is configured for the Remote Control Edit Mode
• Timeout is reloaded on each successful transaction
Change
Value
Inputs Controller is in Remote Control Edit Mode.
Actions Use write actions for coils or holding registers.
Outputs Settings are visible with read‑specific functions.
• Timeout for Remote Control Edit Mode is refreshed with each transaction
Save
Settings
Inputs Issue a specific value for Remote Control Mode register.
Actions Validity of changes made in the settings image area is tested.
If correct, settings are transferred to work area.
•
Controller enters Hold Mode to allow saving new values and process control
initialization
• Controller exits from Remote Control Edit Mode and enters Run Mode
Outputs Remote Control Mode register will be updated with the new values.

Modbus Protocol Basics 6
Modbus Functions
Modbus data types
• Coil (1 bit), read/write access, 1to 9999 address range
– forces the ON/OFF state of discrete outputs (DO) or modifies mode / status of client devices
• Discrete Input (1 bit), read‑only, 10001 to 19999 address range
– requests input status of field discrete inputs (DI) or the client devices status
• Input Register (16 bit), read‑only access, 30001 to 39999 address range
– provides field analog inputs (AI) or client device information
– floating or double integer data can be handled if consecutive addresses are assigned
• Holding Register (16 bit), read/write access, 40001 to 49999 address range
– receives data from field analog outputs (AO) or sets information on client devices
– floating or double integer data handled only if consecutive addresses are assigned
Access
type
Access
size Internal data type Function Name
Code
Dec
Code
Hex
Data
bit
Physical discrete inputs Read Discrete Inputs 20x02
Internal bits or
physical coils
Read Coils 10x01
Write Coil 50x05
Write Multiple Coils 15 0x0F
16 bit
Physical input register Read Input Register 40x04
Internal register or
physical output register
Read Holding Register 30x03
Write Single Register 60x06
Write Multiple Registers 16 0x10
Read/Write Multiple Registers 23 0x17
Mask Write Register 22 0x16
Read FIFO Queue 24 0x18
File record access Read File Record 20 0x14
Write File Record 21 0x15
Diagnostic
Read Exception Status 70x07
Diagnostic 80x08
Get COMM Event Counter 11 0x0B
Get COMM Event Log 12 0x0C
Report Server ID 17 0x11
Read Device ID 43 0x2B

7 Modbus Protocol Basics
Read Coils (0x01) Read from 1 to 2000 maximum contiguous status of coils
Request Function code 1 byte 0x01 1
Starting address 2 bytes 0x0000 to 0xFFFF 0 to 65535
Quantity of coils 2 bytes 0x0001 to 0x07D0 1 to 2000
Normal
response
Function code 1 byte 0x01 1
Bytes count 1 byte N = Quantity of coils / 8
(if the remainder is other than 0, then N = N+1)
Coil status N×1 byte
Read Discrete Inputs (0x02) Read from 1 to 2000 maximum contiguous status of discrete inputs
Request Function code 1 byte 0x02 2
Starting address 2 bytes 0x0000 to 0xFFFF 0 to 65535
Quantity of discrete inputs 2 bytes 0x0001 to 0x07D0 1 to 2000
Normal
response
Function code 1 byte 0x02 2
Bytes count 1 byte N = Quantity of discrete inputs / 8
(if the remainder is other than 0, then N = N+1)
Discrete inputs N×1 byte
Read Holding Registers (0x03) Read from 1 to 125 maximum contiguous holding registers
Request Function code 1 byte 0x03 3
Starting address 2 bytes 0x0000 to 0xFFFF 0 to 65535
Quantity of holding registers 2 bytes 0x0001 to 0x007D 1 to 125
Normal
response
Function code 1 byte 0x03 3
Bytes count 1 byte 2×N N = 1 to 125
Holding register N×2 bytes
Read Input Registers (0x04) Read from 1 to 125 maximum contiguous input registers
Request Function code 1 byte 0x04 4
Starting address 2 bytes 0x0000 to 0xFFFF 0 to 65535
Quantity of input registers 2 bytes 0x0001 to 0x007D 1 to 125
Normal
response
Function code 1 byte 0x04 4
Bytes count 1 byte 2×N N = 1 to 125
Input register N×2 bytes
Errors Function code 1 byte Function code + 0x80
Exception status 1 byte 01 or 02 or 03 or 04

Modbus Protocol Basics 8
Write Single Coil (0x05) Write a single output to either ON or OFF
Request Function code 1 byte 0x05 5
Coil address 2 bytes 0x0000 to 0xFFFF 0 to 65535
Coil value 2 bytes 0x0000 or 0xFF00 0 or 65280
Normal
response
Function code 1 byte 0x05 5
Coil address 2 bytes 0x0000 to 0xFFFF 0 to 65535
Coil value 2 bytes 0x0000 or 0xFF00 0 or 65280
Write Single Register (0x06) Write a single holding register
Request Function code 1 byte 0x06 6
Register address 2 bytes 0x0000 to 0xFFFF 0 to 65535
Register value 2 bytes 0x0000 to 0xFFFF 0 to 65535
Normal
response
Function code 1 byte 0x06 6
Register address 2 bytes 0x0000 to 0xFFFF 0 to 65535
Register value 2 bytes 0x0000 to 0xFFFF 0 to 65535
Write Multiple Coils (0x0F) Used to force each coil in a sequence of coils to either ON or OFF
Request Function code 1 byte 0x0F 15
Starting address 2 bytes 0x0000 to 0xFFFF 0 to 65535
Quantity of outputs 2 bytes 0x0001 to 0x07B0 1 to 1968
Byte count 1 byte
N = Quantity of outputs / 8
(if the remainder is other than 0, then N = N+1)
Outputs Value N×1 byte
Normal
response
Function code 1 byte 0x 0F 15
Starting address 2 bytes 0x0000 to 0xFFFF 0 to 65535
Quantity of outputs 2 bytes 0x0001 to 0x07B0 1 to 1968
Write Multiple Registers (0x10) Write a block of contiguous registers (1 to 123)
Request Function code 1 byte 0x10 16
Starting address 2 bytes 0x0000 to 0xFFFF 0 to 65535
Quantity of registers 2 bytes 0x0001 to 0x007B 1 to 123
Byte count 1 byte
2×N (N = Quantity of Registers)
Registers value N×2 bytes
Normal
response
Function code 1 byte 0x10 16
Starting address 2 bytes 0x0000 to 0xFFFF 0 to 65535
Quantity of registers 2 bytes 0x0001 to 0x007B 1 to 123
Errors Function code 1 byte Function code + 0x80
Exception status 1 byte 01 or 02 or 03 or 04

9 Modbus Protocol Basics
Read Device Identification (function 43/14; 0x2B / 0x0E)
This function code allows reading the identification and additional information relative to the physical and
functional description of a remote device. The Read Device Identification interface is modeled as an address
space / composed of a set of addressable data elements identified by an object ID.
Controller responds to three types of queries:
• Queries for basic information i.e. mandatory objects (Vendor Name, Product Code, Revision Number)
• Queries for regular information i.e. optional objects (e.g. Model Name)
• Queries for extended information i.e. optional objects (e.g. private data regarding device location)
Controller responds to the following access requests.
• 01: request to get basic device identification (stream access)
• 04: request to get one specific identification object (individual access)
ID Category Type Data Description
0x00
Basic Mandatory
ASCII String
Vendor Name
0x01 Product Code
0x02 Major / Minor Revision Number
0x03
Regular Optional
Vendor URL
0x04 Product Name
0x05 Model Name
0x06 User Application Name
0x07…0x7F Reserved
0x80…0xFF Extended Device Dependent Private Objects
"Vendor Name" (ID = 0x00) query message structure (individual access)
Query Response
0x2B = Function Code
0x0E = MEI Type
0x04 = Read Device ID Code
0x00 = Object ID
0x2B = Function Code
0x0E = Modbus Encapsulated Interface
0x04 = Individual Object
0x81 = Conformity Level
0x00 = More Follows (NO)
0x00 = Next Object ID (None)
0x01 = Number of Objects (1 object)
0x00 = Object ID (Vendor Name)
0x11 = Object Length (17 characters)
"Hanna Instruments" = Object Value

Wiring & Settings Conguration 10
3. WIRING & SETTINGS CONFIGURATION
3.1. WIRING
Follow lead markings to ensure that output leads are correctly wired to the COMM position on the main board.
Note: removable terminal connector marked PROBE 2 is only part of HI520 (two-channel process controller)
hardware structure.
COMM
-BA+
IN1 IN2 A01 A02 A03 A04 PROBE 2
-BA+
PROBE 1
-BA+
Terminal 1
Terminal 2
3.2. SETUP
• Press the mkey to access the main menu.
• Press the ud keys to navigate to General setup.
• Enable Remote Control option.
• Press Setup to configure Communication Protocol parameters (to match the Modbus server).
Enable
b
Setup
3.2.1. Configurable parameters
Remote Control
Option: Enabled, Disabled
Option must be enabled when using the Modbus protocol.
The check mark confirms the option as enabled Нor disabled М.
HI510
HI520