Hanna Instruments HI520 User manual

INSTRUCTION MANUAL
Hanna Instruments Inc., 584 Park East Drive, Woonsocket, RI 02895 USA www.hannainst.com
Modbus Remote Control
HI520 Dual-Channel Universal Process Controller

Dear Customer,
Thank you for choosing a Hanna Instruments®product.
Please read this instruction manual carefully as it provides details on Modbus protocol, function codes, controller
wiring and setup configuration for remote control and monitoring.
This manual has been written as a companion for HI520 controller manual.
Scan the QR code to download MAN520 as well as additional information on compatible
probe series or follow the link: https://manuals.hannainst.com/HI520.
If you need additional technical information, do not hesitate to e‑mail us at [email protected].
Visit www.hannainst.com for more information about Hanna Instruments and our products.
TABLE OF CONTENTS
* DO NOT delete this box.
* Must be Anchored inside page box !!!
All rights are reserved. Reproduction in whole or in part is prohibited without the written consent of the copyright owner,
Hanna Instruments Inc., Woonsocket, Rhode Island, 02895, USA. Hanna Instruments reserves the right to modify the design,
construction, or appearance of its products without advance notice.

3 TABLE OF CONTENTS
General Safety Precautions & Installation Recommendations
HI520 safety precautions and installation recommendations apply. Procedures and instructions detailed in
this section may require special precautions to ensure the safety of the personnel performing the operations.
•
Electrical connection, installation, start‑up, operation, and maintenance must be carried out by
specialized personnel only.
•
The specialized personnel must have read and understood the instructions in this manual and should
adhere to them.
• User serviceable connections are all accessible inside the enclosure.
• Do not operate or energize the instrument with the case open.
• Before powering the controller, verify wiring has been done properly.
• Always disconnect the instrument from power when making electrical connections.
• Do not run other cables through the same cable gland with the power cable.
• A clearly marked disconnect switch must be installed in the vicinity of the instrument to ensure that
the electrical circuit is completely de‑energized for service or maintenance.
TABLE OF CONTENTS
1. Introduction ...........................................................................................................................................................4
2. Modbus Protocol Basics...........................................................................................................................................4
3. Wiring & Controller Settings Configuration.................................................................................................................9
3.1. Wiring ...................................................................................................................................................... 9
3.2. Setup ........................................................................................................................................................ 9
4. Operation Modes when using Modbus.....................................................................................................................11
4.1. Modbus General Steps .............................................................................................................................. 12
4.2. Modbus Special Holding Registers ............................................................................................................. 13
4.3. Retrieving Controller Parameters ................................................................................................................ 14
4.4. Editing & Saving Controller Parameters ...................................................................................................... 14
5. Modbus Functions.................................................................................................................................................15
5.1. Function Codes ........................................................................................................................................ 15
5.2. Exception Codes ....................................................................................................................................... 15
5.3. Coil Registers (0xxxx Addresses) ................................................................................................................. 16
5.4. Discrete Inputs (1xxxx Addresses) ............................................................................................................... 17
5.5. Input Registers (3xxxx Addresses) .............................................................................................................. 18
5.6. Holding Registers (4xxxx Addresses) ........................................................................................................... 32
Certification...............................................................................................................................................................42
Recommendations for Users........................................................................................................................................42
Warranty ..................................................................................................................................................................42

Introduction 4
1. INTRODUCTION
Modbus is a request‑response software protocol implemented on HI520 and intended for efficient and immediate
remote industrial process control.
Main Features
• Allows immediate response to a problem with equipment (even from different plants)
• Minimizes production downtime as mechanical issues are quickly identified
• Traceability of stored data
• Monitors and controls processes remotely
2. MODBUS PROTOCOL BASICS
Modbus protocol defines a communication structure that occurs in pairs. One device initiates a request and then
waits for a response. The initiating device is responsible for initiating every interaction (query).
The initiating device can address individual requests (client responds) or initiate a broadcast message to several
clients (client does not respond).
Default parameters
Modbus communication protocol is implemented on HI520 through a serial communication channel that makes
controller data available to a remote user. Physical layer is implemented on a RS485 line with the following
default parameters:
half duplex 8 bit data 1 start bit 1 stop bit no parity
RTU (Remote Terminal Unit) mode
Bytes are transferred as they are and checksum is calculated over CRC algorithm.
START ADDRESS FUNCTION DATA CRC CHECK END
T1‑T2‑T3‑T4 8 bits 8 bits N x 8 bits 16 bits T1‑T2‑T3‑T4
Note: T1-T2-T3-T4 = 3.5 characters times at no communication
• Address Field – client address range is 1 – 247, with 0 kept for broadcasting.
• Function Field – values range is 1 – 255.
Field is used by client device to echo server query function field for normal case or sets most significant bit
of query function to 1 if an error occurs.
• Data Field – information regarding required operation.
Data field can be of various lengths or 0. Data uses “big‑endian” convention, whereby numerical data with
a size greater than 1 byte is sent with the most significant byte first e.g. 0x1234 is sent as 0x12,0x34.

5 Modbus Protocol Basics
General query message structure
SERVER
Device Address Function Code Query Data Error Check
CLIENT
Error Check Response Data Function Code Device Address
• Device Address – individual client address
• Function Code – type of action
• Query Data / Response Data – transmitted data
• Error Check – data integrity error check field
Changing a specific parameter
1. Enter Remote Control Edit Mode.
2. Change a specific Parameter Value.
3. Save Settings.
Inputs Actions Outputs
View Mode
Remote Control enabled in
Setup and the communication
protocol configured.
Controller settings are read only. Remote Control Mode register is
updated with new value; a
timeout value is configured;
timeout reloaded on each successful
transaction.
Edit Mode
Controller not in manual,
calibration, or local edit mode.
• Set password register.
• Set specific value for Remote
Control Mode register.
A copy of the current settings is made.
All further requests will address the settings
image area.
Remote Control Edit Mode will be
available for reading in Remote Control
Mode register; a timeout value is
configured; timeout reloaded on each
successful transaction.
Change Value
Controller is in Remote Control
Edit Mode.
Use write actions for coils or holding
registers.
Settings visible with read‑specific
functions.
Timeout for remote Control Edit Mode
is refreshed with each transaction.
Save Settings
Issue a specific value for
Remote control Mode register.
Validity of changes made in the settings
image area is tested. If correct, settings are
transferred to work area.
Controller enters in Hold Mode for enough
time to allow saving of new values and
process control initialization.
Controller will exit from Remote Control
Edit Mode.
Remote Control Mode register will be
updated with the new values.

Modbus Protocol Basics 6
Modbus functions
Modbus data types
•
Coil (1 bit) – forces the ON/OFF state of discrete outputs (DO) or modifies mode / status of client devices.
Coil is both read and write. Addresses are in the 1to 9999 range.
•
Discrete input (1 bit) – requests input status of field discrete inputs (DI) or the client devices status.
Input status data is read only. Addresses are in the 10001 to 19999 range.
• Input register (16 bit) – provides field analog inputs (AI) or client devices information. Input register is
read only. Floating or double integer data can be handled if consecutive addresses are assigned. Addresses
are in the 30001 to 39999 range.
•
Holding register (16 bit) – receives data from field analog outputs (AO) or sets information on client
device. Holding register is both read and write. Floating or double integer data can be handled if consecutive
addresses are assigned. Addresses are in the 40001 to 49999 range.
Access type Access size Internal data type Function Name and code
Data
bit
Physical discrete inputs Read discrete inputs 2
Internal bits or
physical coils
Read coils 1
Write coil 5
Write multiple coils 15
16 bit
Physical input register Read input register 4
Internal register or
physical output register
Read holding register 3
Write single register 6
Write multiple registers 16
Read/write multiple registers 23
Mask write register 22
Read FIFO queue 24
File record access Read file record 20
Write file record 21
Diagnostic
Read exception status 7
Diagnostic 8
Get COM event counter 11
Get COM event log 12
Report server ID 17
Read device ID 43

7 Modbus Protocol Basics
Retrieving and setting controller parameters
Parameters grouped based on functionality:
• read only – accessed with read inputs and read registers functions (03)
• read & write – accessed with functions related to coils and holding registers
Read coils (0x01) Read from 1 to 2000 maximum contiguous status of coils
Request
Function code 1 byte 0x01
Starting address 2 bytes 0 to 65535 (0 to 0xFFFF)
Quantity of coils 2 bytes 1 to 2000 (1 to 0x7D0)
Normal
answer
Function code 1 byte 0x01
Bytes count 1 byte n
Coil status n bytes 1 to 2000/8 (maximum 250)
Read discrete inputs (0x02) Read from 1 to 2000 maximum contiguous status of discrete inputs
Request
Function code 1 byte 0x02
Starting address 2 bytes 0 to 65535 (0 to 0xFFFF)
Quantity of discrete inputs 2 bytes 1 to 125 (1 to 0x7D)
Normal
answer
Function code 1 byte 0x02
Bytes count 1 byte n
Discrete inputs – n bytes n bytes 1 to 2000/8 (max 250)
Read holding registers (0x03) Read from 1 to 125 maximum contiguous holding registers
Request
Function code 1 byte 0x03
Starting address 2 bytes 0 to 65535 (0 to 0xFFFF)
Quantity of holding registers 2 bytes 1 to 125 ( 1 to 0x7D)
Normal
answer
Function code 1 byte 0x03
N= 1 to 125Bytes count 1 byte 2*N
Holding register – 2*N bytes n bytes N*2 bytes
Read input registers (0x04) Read from 1 to 125 maximum contiguous input registers
Request
Function code 1 byte 0x04
Starting address 2 bytes 0 to 65535 (0 to 0xFFFF)
Quantity of input registers 2 bytes 1 to 125 (1 to 0x7D)
Normal
answer
Function code 1 byte 0x03
N= 1 to 125Bytes count 1 byte 2*N
Input register – 2*N bytes n bytes N*2 bytes

Modbus Protocol Basics 8
Write single coil (0x05) Write a single coil
Request
Function code 1 byte 0x05
Coil address 2 bytes 0 to 65535 (0 to 0xFFFF)
Coil value 2 bytes 0x0000 or 0xFF00
Normal
answer
Function code 1 byte 0x05
Coil address 1 byte 0x0000 to 0xFFFF
Coil value n bytes 0x0000 or 0xFF00
Write single register (0x06) Write a single hold register
Request
Function code 1 byte 0x06
Register address 2 bytes 0 to 65535 (0 to 0xFFFF)
Register value 2 bytes 0x0000 to 0xFFFF
Normal
answer
Function code 1 byte 0x06
Register address 1 byte 0 to 65535 (0 to 0xFFFF)
Register value n bytes 0x0000 to 0xFFFF
Write multiple coils (0x0F) Write multiple consecutive coils (1 to 123)
Request
Function code 1 byte 0x0F
Starting address 2 bytes 0 to 65535 (0 to 0xFFFF)
Quantity of outputs 2 bytes 1 to 1968 (1 to 0x07B0)
Byte count Outputs / 8 1 to 246 (1 to 0xF6)
Normal
answer
Function code 1 byte 0x0F
Starting address 1 byte 0 to 65535 (0 to 0xFFFF)
Quantity of outputs n bytes 0x0001 to 0x07B0
Write multiple registers (0x10) Write a block of contiguous registers (1 to 123)
Request
Function code 1 byte 0x10
Starting address 2 bytes 0 to 65535 (0 to 0xFFFF)
Quantity of registers 2 bytes 0x0001 to 0x7B
Byte count
1 byte Registers * 2
Registers value Registers * 2
Normal
answer
Function code 1 byte 0x10
Starting address 1 byte 0 to 65535 (0 to 0xFFFF)
Quantity of registers n bytes 0x0001 to 0x7B
Errors Function code 1 byte Function code + 0x80
Starting address 2 bytes 01 or 02 or 03 or 04

9 Wiring & Controller Settings Conguration
3. WIRING & CONTROLLER SETTINGS CONFIGURATION
3.1. WIRING
Follow the lead markings (+ positive / – negative) to ensure that output leads are correctly wired to the
COMM position on the main board.
COMM
-BA+
IN1 IN2 A01 A02 A03 A04 PROBE 2
-BA+
PROBE 1
-BA+
Terminal 1
Terminal 2
3.2. SETUP
• Press the mkey to access the main menu.
• Press the ud keys to navigate to General setup.
• Enable Remote Control option.
• Press Setup to configure Communication Protocol parameters (to match the Modbus server).
Enable
b
Setup
3.2.1. Configurable parameters
Remote Control
Option: Enabled, Disabled
Option must be enabled when using the Modbus protocol.
The check mark confirms the option as enabled Нor disabled М.
Ф
ББ
У
Ла
6.43
401
25.0
25.0
pH
mV
°C
°C
pH & ORP
Displayed icons
Й remote connection to a Modbus server established
Л remote connection to a Modbus server established (controller operating in editing mode)

Wiring & Controller Settings Conguration 10
Comm Protocol (Communication Protocol)
Parameter indicates supported transmission mode (Modbus RTU).
Parameter Options Default
Modbus Protocol Modbus RTU Modbus RTU
Net Address 01 to 99 01
Baud Rate 9600, 19200, 38400, 57600, 115200, 256000 19200
Parity None, Even, Odd None
Stop Bits 1 or 2 bits 1 bit
RemLink_Timeout 60 to 1200 seconds 60 seconds
RemEdit_Timeout 30 to 1200 seconds 30 seconds
Bit Length 7 or 8 bits 8 bits
Net Address: sets the controller’s Modbus address.
• With item selected, press Set to modify.
•
Press the ud keys to increase or decrease the value (keep the key
pressed to increase editing speed). Press CFM to save.
Baud Rate: Set the desired speed for the serial communication (baud rate in bps.).
• With item selected, press Modify for the drop‑down list to display.
• Use the ud keys to navigate between options. Press Select to save.
Note: The controller and the Modbus Server must have the same Baud Rate.
Parity: sets communication parity based on the parity mode of the connected device.
• With item selected, press Modify for the drop‑down list to display.
• Press the ud keys to navigate between options. Press Select to save.
Stop Bits: sets stop bit option based on the stop bit of the connected device.
• With item selected, press Modify for the drop‑down list to display.
• Use the ud keys to navigate between options. Press Select to save.

11 Operation Modes when using Modbus
RemLink_Timeout
Number of seconds a remotely connected device should wait for a command acknowledgement before timing out.
• With item selected, press Set to modify.
• Press the ud keys to increase or decrease the value (keep the key
pressed to increase editing speed). Press CFM to save.
RemEdit_Timeout
Number of seconds that a remotely connected device should wait before exiting Edit mode.
• With item selected, press Set to modify.
• Press the ud keys to increase or decrease the value (keep the key
pressed to increase editing speed). Press CFM to save.
4. OPERATION MODES WHEN USING MODBUS
Mode Type Scope Description
Manual Local control, controller
operated manually
Controller operated manually.
Note: Remote Control is not available.
Local Edit Local edit of settings & parameters Local edit of controller’s settings and parameters.
Note: Remote Control is not available.
Calibration System calibration Allows for controller’s system calibration.
Note: Remote Control is not available.
Remote Control HI520 remote control mode Remote operation is available.
When not enabled, controller reverts to manual mode.
Remote View View parameter & settings values
Remote Control Mode must be enabled.
Use Modbus function codes to view or retrieve data.
Note: Parameters cannot be updated in this mode.
Remote Edit View & change parameter and
settings values
Remote Control Mode must be enabled.
Value contained in the data field is outside range or
not accepted as configurable value.
Remote Save Saves data entered in Edit Mode
Remote Control Mode must be enabled.
After editing/changing parameters, the HI520 is
placed on Hold and data saved.
Init
(Initialization)
Loads new parameter & settings
values
Following a Remote Save, the controller
automatically runs through an initialization procedure
to ensure new data/parameters are being used.

Operation Modes when using Modbus 12
4.1. MODBUS GENERAL STEPS
Prerequisite for HI520 remote operation
The controller must not be in Manual, Calibration, or Local Edit Mode as these modes prevent remote operation.
Steps
1.
Ensure remote communication is enabled and serial communication parameters match the Modbus server.
`Displayed Йsymbol confirms connection to the server is established.
`40195 and 40196 Holding Registers contain status and link information that is not password protected.
2. Ensure the controller has the correct Modbus ID set for use with the Modbus server.
HI520 default Modbus ID is1, and configurable range is 1 to 99.
`
Each Modbus device has a configurable ID which must be set in order for the Modbus server to
communicate with the device.
3. Determine if the unit is password protected.
`If yes, continue with Step 4.
`If not, skip Step 4 and continue with Step 5.
4. Send a 32‑bit password to the controller using 2 consecutive Write Single Holding register (06) Modbus
Function Codes or a single Write Multiple Holding registers (16) Function Code to the controller. The
password register addresses are:
• 40193 – Lower half of 32‑bit value (bytes 1‑0)
• 40194 – Upper half of 32‑bit value (bytes 3‑2)
`
Enter the password to enable remote operation. The password does not need to be resent unless RemLink
or RemEdit timeouts are registered or settings are saved.
`Each Modbus transaction resets the timeout timer. (See RemLink_Timeout and RemEdit_Timeout ).
5. Continue with data reading and writing.
Note: If during reading parameter values, a long enough communication pause causes a Remote Link timeout,
the Modbus General Steps need to be repeated.

13 Operation Modes when using Modbus
4.2. MODBUS SPECIAL HOLDING REGISTERS
Four special holding registers can be read and written to, regardless of operating mode, to allow a Modbus server
to enter controller’s password, check status, as well as view and set remote operating modes.
Address Register Size Note
40193 Remote password 32‑bit Low part of 32‑bit password (bytes 1‑0)
40194 High part of 32‑bit password (bytes 3‑2)
40195 Remote
Mode control 8‑bit B0 Remote link (read only) 0= no link between controller and server
1= link present between controller and server
B1 Set Remote Control View Mode
0= Controller settings can be done locally
1= Controller settings can be done only remotely
B2 Set Remote Control Edit Mode
0= Settings can't be done remotely
1= Settings are done remotely on an image of controller settable
parameters
B3 Save Settings done on Remote Control Edit Mode
1= Settings done on Remote control Edit Mode are saved after review of
validity change
40196 Reset
Controller status 32‑bit bytes 1‑0
b0 = R/W controller setup updated
b1 = R/W CH1 calibration updated
b2 = R/W CH2 calibration updated
b3 = RO ‑ CH1 probe update parameters
b4 = R/W ‑ CH1 probe parameters updated
b5 = Cleaning active
b6 = Local edit mode active
b7 = Manual mode active
b8 = CH1 calibration mode active
b9 = Remote Control Mode active
b10 = Remote Control Edit mode active
b11 = Controller in Hold mode
b12 = Controller in startup mode
b13 = Manual Hold active
b14 = External Hold active

Operation Modes when using Modbus 14
4.3. RETRIEVING CONTROLLER PARAMETERS
1.
Ensure HI520 is correctly configured for remote communication and RemLink or RemEdit have not timed out.
`Controller is ready for reading data.
`
40195 and 40196 Modbus Holding Registers contain status and link information that is not password
protected.
2.
Use function code Write Single Holding register (06) to set B1 in 40195 Holding Register i.e. enable
remote viewing.
`Controller settings are locked (view only) and cannot be changed remotely (or locally).
3.
Use function code Read Holding register (03) to confirm the B1 has been set in 40195 Holding Register.
`Controller is in the Remote View mode.
4. Use Modbus function codes Read Coil (01), Read Input (02), Read Holding Register (03), or Read Input
Register (04) to read parameter values off the controller. See Modbus Functions for register details.
5. Repeat step 4 as needed.
`Modbus Exception Codes may be encountered. See Exception Codes.
`Each transaction with the controller resets the timeout timer.
6. At the end of the process, use function code Write Single Holding Register (06) to clear B1 from 40195
Holding Register and disable remote viewing (allow local editing).
`Stopping Modbus server communication with the controller until the link timeout expires, causes the
Remote View mode to exit.
7.
Use function code Read Holding Register (03) to confirm the B1has been cleared from 40195 Holding Register.
`Confirmation that controller exited Remote View mode.
4.4. EDITING & SAVING CONTROLLER PARAMETERS
1.
Ensure HI520 is correctly configured for remote communication and RemLink or RemEdit have not timed out.
`controller is ready for reading data
`
40195 and 40196 Modbus Holding Registers contain status and link information that is not password
protected
2. Use function code Write Single Holding Register (06) to set B1 and B2 in 40195 Holding Register i.e.
enable remote editing.
`
A copy of the controller’s settings is made and it should be saved before exiting the Remote Edit mode
(any changes will be lost).
`Subsequent Modbus read/write transactions are with this copied image
3.
Use function code Read Holding Register (03) to confirm B1 and B2 have been set in 40195 Holding Register.
`Confirms the controller is in the Remote Edit mode.
4.
Use correct Modbus function codes to read and write parameters. See Modbus Functions sections for details.
5. Repeat Step 4 as needed.
`Controller could return Modbus Exception Codes. See Exception Codes.
`Each transaction with the controller resets a timeout timer.

15 Modbus Functions
6. At the end of the process, use function code Write Single Holding register (06) to set B3 in 40195 Holding
Register.
`A successfully sent command is followed by the controller entering Remote Save mode. A parameters
working image is stored to the controller’s non‑volatile memory. During this time the controller enters
the Hold Mode and the new values are stored. Subsequently, the controller runs an Init process to
reload new values.
7.
Use function code Read Holding register (03) to confirm B2 and B3 have been cleared from 40195 Holding
Register during the Remote Save process.
`This confirms the controller has exited Remote Editing mode.
5. MODBUS FUNCTIONS
HI520 controller’s parameters can be read or modified via Modbus functions.
Parameters are grouped based on their functionality. Not all addresses are used; unused addresses are not shown.
5.1. FUNCTION CODES
The HI520 supports the following standard Modbus function codes:
Decimal Hex Name
10x01 Read coil
20x02 Read input
30x03 Read holding register
40x04 Read input register
50x05 Write single coil
60x06 Write single holding register
15 0x0F Write multiple coils
16 0x10 Write multiple holding registers
• Read‑only parameters can be reached via Read Input (02) and Read Input Register (03) functions.
• Read & write parameters (and settings) can be accessed using:
A. coil functions
`Read Coil (01), Write Single Coil (05), and Write Multiple Coils (15)
B. holding register functions
`Read Holding Registers (03), Write single Holding register (06) and Write multiple Holding registers (16).
5.2. EXCEPTION CODES
Standard Modbus exception codes are returned by HI520 following a command:
Code Name Description
01 Illegal function Received function code can not be executed as an action by the controller.
02 Illegal data address Received data address can not be accessed by the controller.
03 Illegal data value Value contained in the data field is out of range or not allowed on the controller.
04 Server device failure An error occurred while the controller was attempting to perform requested action.

Coil Registers (0xxxx Addresses) 16
5.3. COIL REGISTERS (0XXXX ADDRESSES)
The following functions support the coil registers:
Decimal Hex Name
10x01 Read coil
50x05 Write single coil
15 0x0F Write multiple coils
Address Coil Function
00001 KeyBeep
00002 ErrorBeep
00003 CH1 Setpoint 1 enable control
00004 CH1 Setpoint 2 enable control
00005 CH1 Main Parameter enable Alarm High
00006 CH1 Main Parameter enable Alarm Low
00007 CH1 Temperature Parameter enable Alarm High
00008 CH1 Temperature Parameter enable Alarm Low
00009 CH2 Setpoint 1 enable control
00010 CH2 Setpoint 2 enable control
00011 CH2 Main Parameter enable Alarm High
00012 CH2 Main Parameter enable Alarm Low
00013 CH2 Temperature Parameter enable Alarm High
00014 CH2 Temperature Parameter enable Alarm Low
00015 Hold Input Enable
00016 Clean Enable
00017 AnOut1 enable 22 mA on Alarm
00018 AnOut2 enable 22 mA on Alarm
00019 AnOut3 enable 22 mA on Alarm
00020 AnOut4 enable 22 mA on Alarm
00021 Enable CH1
00022 Enable CH2
00025 Clean Schedule Monday Enable
Address Coil Function
00026 Clean Schedule Tuesday Enable
00027 Clean Schedule Wednesday Enable
00028 Clean Schedule Thursday Enable
00029 Clean Schedule Friday Enable
00030 Clean Schedule Saturday Enable
00031 Clean Schedule Sunday Enable
00033 Math Channel Enable Alarm0_High
00034 Math Channel Enable Alarm0_Low
00035 Math Channel Enable Alarm1_High
00036 Math Channel Enable Alarm1_Low
00037 Math Channel Enable Alarm2_High
00038 Math Channel Enable Alarm2_Low
00039 Math Channel Enable Alarm3_High
00040 Math Channel Enable Alarm3_Low
00049 Key USR0
00050 Key MENU
00051 Key ESC
00052 Key USR1
00053 Key UP
00054 Key DW
00055 Key USR2
00056 Key HELP
00057 Key RIGHT

17 Discrete Inputs (1xxxx Addresses)
5.4. DISCRETE INPUTS (1XXXX ADDRESSES)
The following function supports the discrete inputs:
Decimal Hex Name
20x02 Read input
Address Coil Function
10001 CH1 Setpoint 1 Overtime Alarm
10002 CH1 Setpoint 2 Overtime Alarm
10003 CH1 Main Parameter Alarm High
10004 CH1 Main Parameter Alarm Low
10005 CH1 Temperature Parameter Alarm High
10006 CH1 Temperature Parameter Alarm Low
10007 CH1 Main Parameter Over_range Alarm
10008 CH1 Main Parameter Under_range Alarm
10009 CH1 Temperature Parameter Over_range Alarm
10010 CH1 Temperature Parameter Under_range Alarm
10011 CH1 Probe Reconnect Alarm
10012 CH1 No Probe Alarm
10013 CH1 No Parameters Loaded Alarm
10014 CH1 Probe Error
10015 CH2 Temperature sensor broken
10017 CH2 Setpoint 1 Overtime Alarm
10018 CH2 Setpoint 2 Overtime Alarm
10019 CH2 Main Parameter Alarm High
10020 CH2 Main Parameter Alarm Low
10021 CH2 Temperature Parameter Alarm High
10022 CH2 Temperature Parameter Alarm Low
10023 CH2 Main Parameter Over_range Alarm
10024 CH2 Main Parameter Under_range Alarm
10025 CH2 Temperature Parameter Over_range Alarm
10026 CH2 Temperature Parameter Under_range Alarm
10027 CH2 Probe Reconnect Alarm
10028 CH2 No Probe Alarm
10029 CH2 No Parameters Loaded Alarm
10030 CH2 Probe Error
10031 CH2 Temperature Sensor Broken
10033 Hold Alarm
10034 Main Power Failed Alarm
10035 Math CH Alarm High
10036 Math CH Alarm Low
10037 Smart Input Alarm High
Address Coil Function
10038 Smart Input Alarm Low
10039 Smart Input Disconnected
10040 Smart Input Locked
10041 Smart Input not Syncronized
10049 Controller EEPROM Memory Error
10050 Probe EEPROM Memory Error
10051 Controller EEPROM Memory Checksum Error
10052 Controller Flash Memory Error
10053 AO Power Error
10054 Micro Temperature Error
10055 IO Power Error
10057 Controller Key USR0 status
10058 Controller Key MENU status
10059 Controller Key ESC status
10060 Controller Key USR1 status
10061 Controller Key UP status
10062 Controller Key DOWN status
10063 Controller Key USR2 status
10064 Controller Key HELP status
10065 Controller Key RIGHT status
10066 Digital Input1 Value
10067 Digital Input2 Value
10068 Smart Input Value
10069 GREEN_STATUS_LED value
10070 RED_STATUS_LED value
10071 HOLD LED value
10073 ALARM RELAY value
10074 RELAY 1 value
10075 RELAY 2 value
10076 RELAY 3 value
10077 RELAY 4 value
10078 RELAY 5 value
10079 BUZZER value
10081 Remote Control Enable status

Input Registers (3xxxx Addresses) 18
5.5. INPUT REGISTERS (3XXXX ADDRESSES)
The following function supports the Input Registers:
Decimal Hex Name
40x04 Read input register
Address Parameter Size Note
30001 CH1 Main Parameter Value float Low part of float (bytes 1‑0)
30002 High part of float (bytes 3‑2)
30003 CH1 Main Parameter Eng Unit 8 bytes bytes 1‑0
30004 bytes 3‑2
30005 bytes 5‑4
30006 bytes 7‑6
30007 CH1 Main Parameter Value measure Resolution uint8_t
30008 CH1 Main Parameter Value display Resolution uint8_t
30009 CH1 Main Parameter measure Status uint8_t
30010 CH1 Temperature Parameter Value float Low part of float (bytes 1‑0)
30011 High part of float (bytes 3‑2)
30012 CH1 Temperature Parameter Eng Unit 8 bytes bytes 1‑0
30013 bytes 3‑2
30014 bytes 5‑4
30015 bytes 7‑6
30016 CH1 Temperature Parameter Value measure Resolution uint8_t
30017 CH1 Temperature Parameter Value display Resolution uint8_t
30018 CH1 Temperature Parameter measure status uint8_t
30019 CH1 Aux1 Parameter Value float Low part of float (bytes 1‑0)
30020 High part of float (bytes 3‑2)
30021 CH1 Aux1 Parameter Eng Unit 8 bytes bytes 1‑0
30022 bytes 3‑2
30023 bytes 5‑4
30024 bytes 7‑6
30025 CH1 Aux1 Parameter Value measure Resolution uint8_t
30026 CH1 Aux1 Parameter Value display Resolution uint8_t
30027 CH1 Aux1 Parameter measure status uint8_t
30028 CH1 Aux2 Parameter Value float Low part of float (bytes 1‑0)
30029 High part of float (bytes 3‑2)
30030 CH1 Aux2 Parameter Eng Unit 8 bytes bytes 1‑0
30031 bytes 3‑2
30032 bytes 5‑4
30033 bytes 7‑6
30034 CH1 Aux2 Parameter Value measure Resolution uint8_t
30035 CH1 Aux2 Parameter Value display Resolution uint8_t
30036 CH1 Aux2 Parameter measure status uint8_t
30037 CH1 Probe Model uint8_t

19 Input Registers (3xxxx Addresses)
Address Parameter Size Note
30038 CH1 Probe Parameters No uint8_t
30039 CH1 Probe Measure Mode uint8_t
30040 CH1 Probe Measure Unit uint8_t
30041 CH1 Main Parameter Name 8 bytes bytes 1‑0
30042 bytes 3‑2
30043 bytes 5‑4
30044 bytes 7‑6
30045 CH1 Engineering unit basic Name 8 bytes bytes 1‑0
30046 bytes 3‑2
30047 bytes 5‑4
30048 bytes 7‑6
30049 CH1 Main parameter low limit Value float Low part of float (bytes 1‑0)
30050 High part of float (bytes 3‑2)
30051 CH1 Main parameter high limit Value float Low part of float (bytes 1‑0)
30052 High part of float (bytes 3‑2)
30053 CH1 Main parameter limits Resolution uint8_t
30054 CH1 Temperature Parameter Name 8 bytes bytes 1‑0
30055 bytes 3‑2
30056 bytes 5‑4
30057 bytes 7‑6
30058 CH1 Temperature parameter engineering unit basic Name 8 bytes bytes 1‑0
30059 bytes 3‑2
30060 bytes 5‑4
30061 bytes 7‑6
30062 CH1 Temperature parameter low limit Value float Low part of float (bytes 1‑0)
30063 High part of float (bytes 3‑2)
30064 CH1 Temperature parameter high limit Value float Low part of float (bytes 1‑0)
30065 High part of float (bytes 3‑2)
30066 CH1 Temperature parameter limits Resolution uint8_t
30067 CH1 Aux1 Parameter Name 8 bytes bytes 1‑0
30068 bytes 3‑2
30069 bytes 5‑4
30070 bytes 7‑6
30071 CH1 Aux1 parameter engineering unit basic Name 8 bytes bytes 1‑0
30072 bytes 3‑2
30073 bytes 5‑4
30074 bytes 7‑6
30075 CH1 Aux1 parameter low limit Value float Low part of float (bytes 1‑0)
30076 High part of float (bytes 3‑2)
30077 CH1 Aux1 parameter high limit Value float Low part of float (bytes 1‑0)
30078 High part of float (bytes 3‑2)
30079 CH1 Aux1 parameter limits Resolution uint8_t

Input Registers (3xxxx Addresses) 20
Address Parameter Size Note
30080 CH1 Aux2 Parameter Name 8 bytes bytes 1‑0
30081 bytes 3‑2
30082 bytes 5‑4
30083 bytes 7‑6
30084 CH1 Aux2 parameter engineering unit basic Name 8 bytes bytes 1‑0
30085 bytes 3‑2
30086 bytes 5‑4
30087 bytes 7‑6
30088 CH1 Aux2 parameter low limit Value float Low part of float (bytes 1‑0)
30089 High part of float (bytes 3‑2)
30090 CH1 Aux2 parameter high limit Value float Low part of float (bytes 1‑0)
30091 High part of float (bytes 3‑2)
30092 CH1 Aux2 parameter limits Resolution uint8_t
30093 Controller Serial No 12 bytes bytes 1‑0
30094 bytes 3‑2
30095 bytes 5‑4
30096 bytes 7‑6
30097 bytes 9‑8
30098 bytes 11‑10
30199 Controller FW Version 14 bytes bytes 1‑0
30100 bytes 3‑2
30101 bytes 5‑4
30102 bytes 7‑6
30103 bytes 9‑8
30104 bytes 11‑10
30105 bytes 13‑12
30106 CH1 Probe Constant1 Value uint16_t
0= Incremental (–Min. Range Value ÷ Max. Range Value)
1= Unit
DO probe
• DO saturation (%DO) 0 or 1
• DO concentration (mg/L) 0
• DO concentration (ppm) 1
EC probe
• EC mode (µs) 0 or 1
• TDS mode (mg/L) 0
• TDS mode (ppm) 1
• Sal % (%) 0 or 1
• Sal ppt (ppt) 0 or 1
• Sal psu (psu) 0 or 1
• Resistivity (Ohm) 0 or 1
2= Check Glass Impedance
3= Check Reference Impedance
4= Temperature Compensation (–Min. Range Value ÷ Max. Range Value)
5= Manual Temperature Compensation (–Min. Range Value ÷ Max. Range Value)
6= Temperature Offset (–Min. Range Value ÷ Max. Range Value)
7= Calibration Timeout (–Min. Range Value ÷ Max. Range Value)
8= Resolution (–Min. Range Value ÷ Max. Range Value) {0,1,2,3}