HIMA HIMatrix F10 PCI 03 User manual

HIMatrix
Safety-Related Controller
F10 PCI 03 Manual
HIMA Paul Hildebrandt GmbH + Co KG
Industrial Automation
Rev. 1.00 HI 800 483 E

HI 800 483 E Rev. 1.00 (1124)
All HIMA products mentioned in this manual are protected by the HIMA trade-mark. Unless noted
otherwise, this also applies to other manufacturers and their respective products referred to herein.
All of the instructions and technical specifications in this manual have been written with great care and
effective quality assurance measures have been implemented to ensure their validity. For questions,
please contact HIMA directly. HIMA appreciates any suggestion on which information should be
included in the manual.
Equipment subject to change without notice. HIMA also reserves the right to modify the written material
without prior notice.
For further information, refer to the CD-ROM and our website at http://www.hima.de and
http://www.hima.com.
© Copyright 2011, HIMA Paul Hildebrandt GmbH + Co KG
All rights reserved
Contact
HIMA contact details:
HIMA Paul Hildebrandt GmbH + Co KG
P.O. Box 1261
68777 Brühl, Germany
Phone: [phone]
Fax: [phone]
E-mail: [email protected]
Type of Change
Revision
index
Revisions
technical editorial
1.00 First edition of the manual

F10 PCI 03 Table of Contents
HI 800 483 E Rev. 1.00 Page 3 of 34
Table of Contents
1Introduction ............................................................ 5
1.1 Structure and Use of this Manual......................................................................... 5
1.2 Target Audience..................................................................................................... 5
1.3 Formatting Conventions ....................................................................................... 6
1.3.1 Safety Notes ............................................................................................................ 6
1.3.2 Operating Tips ......................................................................................................... 7
2Safety...................................................................... 8
2.1 Intended Use .......................................................................................................... 8
2.1.1 Environmental Requirements................................................................................... 8
2.1.2 ESD Protective Measures........................................................................................ 8
2.2 Residual Risk ......................................................................................................... 9
2.3 Safety Precautions................................................................................................. 9
2.4 Emergency Information......................................................................................... 9
3Product Description .............................................. 10
3.1 Safety Function.................................................................................................... 10
3.2 Equipment and Scope of Delivery...................................................................... 11
3.2.1 IP Address and System ID (SRS) .......................................................................... 11
3.3 Type Label ............................................................................................................ 11
3.4 Structure............................................................................................................... 12
3.4.1 LED Indicators ....................................................................................................... 13
3.4.1.1 Operating Voltage LED .......................................................................................... 13
3.4.1.2 Communication LEDs ............................................................................................ 13
3.4.2 Communication...................................................................................................... 14
3.4.2.1 Connections for Ethernet Communication ............................................................. 14
3.4.2.2 Network Ports Used for Ethernet Communication ................................................. 15
3.4.3 Reset Key .............................................................................................................. 16
3.4.4 Hardware Clock ..................................................................................................... 16
3.5 Product Data......................................................................................................... 17
3.6 Certified HIMatrix F10.......................................................................................... 17
4Start-up................................................................. 18
4.1 Installation and Mounting ................................................................................... 18
4.2 Sequence of Events Recording (SOE)............................................................... 18
4.3 Configuring the Controller with SILworX .......................................................... 19
4.3.1 Processor Module .................................................................................................. 19
4.3.1.1 Tab: Module.......................................................................................................... 19
4.3.1.2 Tab: Routings....................................................................................................... 21
4.3.1.3 Tab: Ethernet Switch............................................................................................ 21
4.3.1.4 Tab: VLAN (Port-Based VLAN) ............................................................................. 22
4.3.1.5 Tab: LLDP ............................................................................................................. 22
4.3.1.6 Tab: Mirroring....................................................................................................... 23
4.3.2 Communication Module ......................................................................................... 23

Table of Contents F10 PCI 03
Page 4 of 34 HI 800 483 E Rev. 1.00
5Operation .............................................................. 24
5.1 Handling................................................................................................................24
5.2 Diagnosis ..............................................................................................................24
6Maintenance.......................................................... 25
6.1 Faults.....................................................................................................................25
6.2 Maintenance Measures........................................................................................25
6.2.1 Loading the Operating System...............................................................................25
6.2.2 Proof Test...............................................................................................................25
7Decommissioning.................................................. 26
8Transport .............................................................. 27
9Disposal................................................................ 28
Appendix............................................................... 30
Glossary................................................................................................................30
Index of Figures....................................................................................................31
Index of Tables .....................................................................................................31
Index......................................................................................................................32

F10 PCI 03 1 Introduction
HI 800 483 E Rev. 1.00 Page 5 of 34
1 Introduction
This manual describes the technical characteristics of the device and its use. It provides
information on how to install, start up and configure the module in SILworX.
1.1 Structure and Use of this Manual
The content of this manual is part of the hardware description of the HIMatrix
programmable electronic system.
This manual is organized in the following main chapters:
Introduction
Safety
Product Description
Start-up
Operation
Maintenance
Decommissioning
Transport
Disposal
Additionally, the following documents must be taken into account:
Name Content Document number
HIMatrix System Manual
Compact Systems
Hardware description of the HIMatrix
compact systems
HI 800 141 E
HIMatrix Safety Manual Safety functions of the HIMatrix
system
HI 800 023 E
HIMatrix Engineering
Manual
Project planning description for
HIMatrix systems
HI 800 101 E
SILworX
Communication Manual
Description of the communication
protocols, ComUserTask and their
configuration in SILworX
HI 801 101 E
SILworX Online Help Instructions on how to use SILworX -
SILworX
First Steps
Introduction to SILworX using the
HIMax system as an example
HI 801 103 E
Table 1: Additional Relevant Documents
The latest manuals can be downloaded from the HIMA website at www.hima.com. The
revision index on the footer can be used to compare the current version of existing manuals
with the Internet edition.
1.2 Target Audience
This document addresses system planners, configuration engineers, programmers of
automation devices and personnel authorized to implement, operate and maintain the
modules and systems. Specialized knowledge of safety-related automation systems is
required.

1 Introduction F10 PCI 03
Page 6 of 34 HI 800 483 E Rev. 1.00
1.3 Formatting Conventions
To ensure improved readability and comprehensibility, the following fonts are used in this
document:
Bold: To highlight important parts
Names of buttons, menu functions and tabs that can be clicked and
used in the programming tool.
Italics: For parameters and system variables
Courier Literal user inputs
RUN Operating state are designated by capitals
Chapter 1.2.3 Cross references are hyperlinks even though they are not
particularly marked. When the cursor hovers over a hyperlink, it
changes its shape. Click the hyperlink to jump to the corresponding
position.
Safety notes and operating tips are particularly marked.
1.3.1 Safety Notes
The safety notes are represented as described below.
These notes must absolutely be observed to reduce the risk to a minimum. The content is
structured as follows:
Signal word: danger, warning, caution, notice
Type and source of danger
Consequences arising from the danger
Danger prevention
The signal words have the following meanings:
Danger indicates hazardous situation which, if not avoided, will result in death or serious
injury.
Warning indicates hazardous situation which, if not avoided, could result in death or
serious injury.
Warning indicates hazardous situation which, if not avoided, could result in minor or
modest injury.
Notice indicates a hazardous situation which, if not avoided, could result in property
damage.
NOTE
Type and source of damage!
Damage prevention
SIGNAL WORD
Type and source of danger!
Consequences arising from the danger
Danger prevention

F10 PCI 03 1 Introduction
HI 800 483 E Rev. 1.00 Page 7 of 34
1.3.2 Operating Tips
Additional information is structured as presented in the following example:
iThe text corresponding to the additional information is located here.
Useful tips and tricks appear as follows:
TIP The tip text is located here.

2 Safety F10 PCI 03
Page 8 of 34 HI 800 483 E Rev. 1.00
2 Safety
The following safety information, notes and instructions must be strictly observed. The
product may only be used if all guidelines and safety instructions are adhered to.
This product is operated with SELV or PELV. No imminent danger results from the product
itself. The use in Ex-Zone is permitted if additional measures are taken.
2.1 Intended Use
HIMatrix components are designed for assembling safety-related controller systems.
When using the components in the HIMatrix system, comply with the following general
requirements.
2.1.1 Environmental Requirements
Requirement type Range of values
Protection class Protection class III in accordance with IEC/EN 61131-2
Ambient temperature 0...+60 °C
Storage temperature -40...+85 °C
Pollution Pollution degree II in accordance with IEC/EN 61131-2
Altitude < 2000 m
Housing Standard: IP20
Supply voltage 24 VDC
Table 2: Environmental Requirements
Exposing the HIMatrix system to environmental conditions other than those specified in this
manual can cause the HIMatrix system to malfunction.
2.1.2 ESD Protective Measures
Only personnel with knowledge of ESD protective measures may modify or extend the
system or replace devices.
NOTE
Device damage due to electrostatic discharge!
When performing the work, make sure that the workspace is free of static, and
wear an ESD wrist strap.
If not used, ensure that the device is protected from electrostatic discharge, e.g.,
by storing it in its packaging.

F10 PCI 03 2 Safety
HI 800 483 E Rev. 1.00 Page 9 of 34
2.2 Residual Risk
No imminent danger results from a HIMatrix system itself.
Residual risk may result from:
Faults in the engineering
Faults in the user program
Faults in the wiring
2.3 Safety Precautions
Observe all local safety requirements and use the protective equipment required on site.
2.4 Emergency Information
A HIMatrix system is a part of the safety equipment of a site. If a device or a module fails,
the site adopts the safe state.
In case of emergency, no action that may prevent the HIMatrix systems from operating
safely is permitted.

3 Product Description F10 PCI 03
Page 10 of 34 HI 800 483 E Rev. 1.00
3 Product Description
The safety-related F10 PCI 03 controller is a printed circuit board system for mounting in a
PC. The controller is designed as a PC Card for the PCI slot.
The configuration is performed using SILworX, see Chapter 4.3. Communication to the
PADT occurs via the PCI interface of the PC.
The device is suitable for sequence of events recording (SOE), see Chapter 4.2. The
device supports multitasking and reload. For more details, refer to the System Manual for
Compact Systems (HI 800 141 E).
iA licence is required to use the events recording, the multitasking and the reload features.
The controller must be internally supplied via the PC or by an external 24 V power source.
The terminal for the external power supply is provided on the slot bracket.
The controller is composed of the safety-related processor system and the communication
system. It neither features I/O connections nor fieldbus interfaces.
The controller is connected to the field zone via remote I/Os. To this end, the device is
equipped with 4 Ethernet interfaces.
The device has been certified by the TÜV for safety-related applications up to SIL 3
(IEC 61508, IEC 61511 and IEC 62061) and PL e (EN ISO 13849-1). Further safety
standards, application standards and test standards are specified in the certificate available
on the HIMA website.
3.1 Safety Function
The safety function of the controller includes the following points:
Processing of the user program:
If faults occur: Stop the user program and reset the variables to the initial values
Safe communication between HIMA controllers (HIMax, HIMatrix, and remote I/O
modules) using the safety-related safeethernet protocol. Data is transferred runs over
the Ethernet interfaces of the controller.
The safety function is performed in accordance with SIL 3.

F10 PCI 03 3 Product Description
HI 800 483 E Rev. 1.00 Page 11 of 34
3.2 Equipment and Scope of Delivery
The available components and their part numbers are listed below:
Designation Description Part no.
F10 PCI 03
SILworX
Printed circuit board with 4 Ethernet interfaces
for PCI slot
Operating temperature 0...+60 °C
for SILworX programming tool
98 2200469
Table 3: Part Numbers
3.2.1 IP Address and System ID (SRS)
A transparent label is delivered with the device to allow one to note the IP address and the
system ID (SRS for system rack slot) after a change.
Default value for IP address of the CPU: 192.168.0.99
Default value for IP address of the COM: 192.168.0.100
Default value for SRS: 60000.0.0
The label must be affixed such that the ventilation slots in the housing are not obstructed.
Refer to the SILworX First Steps manual for more information on how to modify the IP
address and the system ID.
3.3 Type Label
The type plate contains the following details:
Product name
Bar code (1D or 2D code)
Part no.
Production year
Figure 1: Type Label

3 Product Description F10 PCI 03
Page 12 of 34 HI 800 483 E Rev. 1.00
3.4 Structure
This chapter describes the layout and function of the controller, and its connection for
communication.
Figure 2: Front View
RJ-45
RJ-45
RJ-45
RJ-45
Safety-Related Processor System
(CPU)
Communication System (COM)
Switch
Watchdog
PCI Interface
Figure 3: Block Diagram

F10 PCI 03 3 Product Description
HI 800 483 E Rev. 1.00 Page 13 of 34
3.4.1 LED Indicators
The light-emitting diodes (LEDs) indicate the operating state of the controller. The LEDs are
classified as follows:
Operating voltage LED
Communication LED
When the supply voltage is switched on, a LED test is performed and all LEDs are briefly lit
simultaneously.
Definition of Blinking Frequencies
The following table defines the blinking frequencies of the LEDs:
Name Blinking frequencies
Blinking1 Long (approx. 600 ms) on, long (approx. 600 ms) off
Blinking-x Ethernet communication: Blinking in sync with data transfer
Table 4: Blinking Frequencies of LEDs
3.4.1.1 Operating Voltage LED
The operating voltage LED is located on the printed circuit board.
LED Color Status Description
On 24 VDC operating voltage present24 VDC Green
Off No operating voltage
Table 5: Operating Voltage LED
3.4.1.2 Communication LEDs
All RJ-45 connectors are provided with a small green and a yellow LEDs. The LEDs signal
the following states:
LED Status Description
On Full duplex operation
Blinking1 IP address conflict, all communication LEDs are blinking
Blinking-x Collision
Green
Off Half duplex operation, no collision
On Connection available
Blinking1 IP address conflict, all communication LEDs are blinking
Blinking-x Interface activity
Yellow
Off No connection available
Table 6: Ethernet Indicators

3 Product Description F10 PCI 03
Page 14 of 34 HI 800 483 E Rev. 1.00
3.4.2 Communication
The controller communicates with remote I/Os via safeethernet. Up to 128 redundant
safeethernet connections can be configured.
3.4.2.1 Connections for Ethernet Communication
Property Description
Port 4 x RJ-45
Transfer standard 10/100 Base-T, half and full duplex
Auto negotiation Yes
Auto crossover Yes
IP address Freely configurable1)
Subnet Mask Freely configurable1)
Supported protocols Safety-related: safeethernet, PROFIsafe
Standard protocols: Programming and debugging tool (PADT),
OPC, Modbus-TCP, TCP-SR, SNTP, ComUserTask,
PROFINET
1) The general rules for assigning IP address and subnet masks must be adhered to.
Table 7: Ethernet Interfaces Properties
The four RJ-45 connectors with integrated LEDs are located in the slot braket of the PC
card. Refer to Chapter 3.4.1.2 for a description of the LEDs' function.
The connection parameters are read based on the MAC address (media access control
address) defined during manufacturing.
CPU and COM have their own MAC addresses. The MAC addresses are specified on a
label located on the housing of the RJ-45 connectors.
Figure 4: Sample MAC Address Label
The controller is equipped with an integrated switch for Ethernet communication. For further
information on the integrated switch and safeethernet, refer to Chapter Communication of
the System Manual for Compact Systems (HI 800 141 E).

F10 PCI 03 3 Product Description
HI 800 483 E Rev. 1.00 Page 15 of 34
3.4.2.2 Network Ports Used for Ethernet Communication
UDP ports Use
123 SNTP (time synchronization between PES and remote I/O, PES and
external devices)
502 Modbus (can be modified by the user)
6010 safeethernet and OPC
6005/ 6012 If TCS_DIRECT was not selected in the HH network
8000 Programming and operation with SILworX
8004 Configuration of the remote I/O using the PES (SILworX)
34964 PROFINET endpoint mapper (required for establishing the connection)
49152 PROFINET RPC server
49153 PROFINET RPC client
Table 8: Network Ports (UDP Ports) in Use
TCP ports Use
502 Modbus (can be modified by the user)
xxx TCP SR assigned by the user
Table 9: Network Ports (TCP Ports) in Use
iThe ComUserTask can use any port if it is not already used by another protocol.

3 Product Description F10 PCI 03
Page 16 of 34 HI 800 483 E Rev. 1.00
3.4.3 Reset Key
The controller is equipped with a reset key. The key is only required if the user name or
password for administrator access is not known. If only the IP address set for the controller
does not match the PADT (PC), the connection can be established with a Route add entry
on the PC.
The reset key is located on the upper side of the printed circuit board and can only be
accessed if the PC case is open.
The reset is only effective if the controller is rebooted (switched off and on) while the key is
simultaneously engaged for at least 20 seconds. Engaging the key during operation has no
effect.
WARNING
Caution! Fieldbus communication may be disturbed!
Prior to switching on the controller with the reset key engaged, all device fieldbus
connectors must be unplugged to ensure that the fieldbus communication among
other stations is not disturbed.
The fieldbus plugs may only be plugged in again when the controller is in the RUN or
STOP state.
Properties and behavior of the controller after a reboot with engaged reset key:
Connection parameters (IP address and system ID) are set to the default values.
All accounts are deactivated except for the administrator default account with empty
password.
With COM operating system version 10.42 and beyond, loading a user program or
operating system with default connection parameters is inhibited!
The loading procedure is only allowed after the connection parameters and the account
have been configured on the controller and the controller has been rebooted.
After a new reboot without the reset key engaged, the connection parameters (IP address
and system ID) and accounts become effective.
Those configured by the user.
Those valid prior to rebooting with the reset key engaged, if no changes were
performed.
3.4.4 Hardware Clock
In case of loss of operating voltage, the power provided by an integrated gold capacitor is
sufficient to buffer the hardware clock for approximately one week.

F10 PCI 03 3 Product Description
HI 800 483 E Rev. 1.00 Page 17 of 34
3.5 Product Data
General
Total program and data memory
for all application programs
5 MB less 64 kBytes for CRCs
Response time ≥6 ms
Ethernet interfaces 4 x RJ-45, 10/100BaseT (with 100 Mbit/s)
with integrated switch
Operating Voltage 24 VDC, -15...+20 %, rPP ≤15 %,
from a power supply unit with safe insulation
in accordance with IEC 61131-2
Current input 0.7 A
Fuse (external) 10 A time-lag (T) for line protection
Buffer for date/time Gold capacitor
Temperature class T4 (Zone 2)
Operating temperature 0 °C...+60 °C
Storage temperature -40 °C...+85 °C
Type of protection IP20
Max. dimensions Width: 168 mm
Depth: 108 mm
Weight approx. 190 g
Table 10: Product Data
3.6 Certified HIMatrix F10
HIMatrix F10
CE EMC
TÜV IEC 61508 1-7:2010 up to SIL 3
IEC 61511:2004
EN ISO 13849-1:2008
IEC 62061:2005
EN 50156-1:2004
EN 298:2003
EN 230:2005
Table 11: Certificates
Further safety standards and application standards are specified in the certificate. The
certificate and the EC Type-Examination Certificate are available on the HIMA website at
www.hima.com.

4 Start-up F10 PCI 03
Page 18 of 34 HI 800 483 E Rev. 1.00
4 Start-up
To start up the controller, it must be mounted, connected and configured in SILworX.
4.1 Installation and Mounting
The controller is mounted on a PCI slot. Observe the mounting manual of the PC
manufacturer.
4.2 Sequence of Events Recording (SOE)
Global variables of the controller can be monitored using the sequence of events recording.
Global variables to be monitored are configured using the programming tool SILworX, see
the online help and the SILworX Communication Manual (HI 801 101 E). Up to 4000 events
can be configured.
An event is composed of:
Entry data Description
Event ID The event ID is assigned by the PADT.
Timestamp Date (e.g., 21/11/2008-21)
Time (e.g., 9:31:57.531)
Event state Alarm/Normal (boolean event)
LL, L, N, H, HH (scalar event)
Event quality Quality good/
Quality bad, see www.opcfoundation.org
Table 12: Event Description
Events are recorded within the cycle of the user program. The processor system uses
global variables to create the events and stores them in its non-volatile event buffer.
The event buffer includes 1000 events. If the event buffer is full, an overflow system event
entry is created. Thereafter, events are no longer recorded until existing events have been
read and space is once again available in the event buffer.

F10 PCI 03 4 Start-up
HI 800 483 E Rev. 1.00 Page 19 of 34
4.3 Configuring the Controller with SILworX
In the Hardware Editor, the controller is represented like a base plate equipped with the
following modules:
Processor module (CPU)
Communication module (COM)
Double-click the module to open the detail view with the corresponding tabs.
4.3.1 Processor Module
The following tables present the parameters for the processor module (CPU) in the same
order as given in the Hardware Editor. The content of the Module and Routings tabs is
identical for both the processor module and communication modules.
4.3.1.1 Tab: Module
The Module tab contains the following parameters:
Parameter Description
Name Module name
Use Max. µP Budget for
HH Protocol
Activated: Use CPU load limit from the Max. µP Budget for
HH Protocol [%] field.
Deactivated: Do not use the CPU Load limit for safeethernet.
Default setting: Deactivated
Max. µP Budget for HH
Protocol [%]
Maximum CPU load of module that can be used for processing
the safeethernet protocols.
iThe maximum load must be distributed among all the
implemented protocols that use this communication
module.
IP Address IP address of the Ethernet interface.
Default value: 192.168.0.99
Subnet Mask 32 bit address mask to split up the IP address in network and
host address.
Default value: 255.255.252.0
Standard Interface Activated: the interface is used as standard interface for the
system login.
De
Default Gateway IP address of the default gateway.
Default value: 0.0.0.0

4 Start-up F10 PCI 03
Page 20 of 34 HI 800 483 E Rev. 1.00
Parameter Description
ARP Aging Time [s] A processor or COM module stores the MAC addresses of the
communication partners in a MAC/IP address assignment table
(ARP cache).
If in a period of 1x....2x ARP Aging Time ...
-... messages of the communication are received, the MAC
address remains stored in the ARP cache.
-... no messages of the communication partner are received,
the MAC address is erased from the ARP cache.
The typical value for the ARP Aging Time in a local network
ranges from 5...300 s.
The user cannot read the contents of the ARP cache.
If routers or gateways are used, the user must adjust (increase)
the ARP Aging Time due to the additional time required for two-
way transmission.
If the ARP Aging Time is too low, the processor or the COM
module deletes the MAC address of the communication partner
from the ARP cache and the communication is either delayed or
breaks down entirely. For an efficient performance, the ARP
aging time value must be less than the receive timeout set for
the protocols in use.
Range of values: 1...3600 s
Default value: 60 s
MAC Learning Learning behavior of the ARP cache
Conservative: MAC addresses of stored ARP entries are not
overwritten by received messages
Tolerant: MAC addresses of stored ARP entries are
overwritten by received messages
Default setting: Conservative
IP Forwarding Allow a processor module to operate as router and to forward
data packets to other network nodes.
Default setting: Deactivated
ICMP Mode Message types of Internet Control Message Protocol (ICMP)
supported by the processor module:
No ICMP Responses
Echo Response
Host Unreachable
All Implemented ICMP Responses
Default setting: Echo Response
Table 13: CPU and COM Configuration Parameters in the Module tab