HIMA HIMatrix M45 User manual

HIMatrix
Safety-Related Controller
Manual M-CPU 01
HIMA Paul Hildebrandt GmbH + Co KG
Industrial Automation
Rev. 1.00 HI 800 655 E

HI 800 655 E Rev. 1.00 (1343)
All HIMA products mentioned in this manual are protected by the HIMA trade-mark. Unless noted otherwise,
this also applies to other manufacturers and their respective products referred to herein.
HIMax®, HIMatrix®, SILworX®, XMR®and FlexSILon®are registered trademarks of
HIMA Paul Hildebrandt GmbH + Co KG.
All of the instructions and technical specifications in this manual have been written with great care and
effective quality assurance measures have been implemented to ensure their validity. For questions, please
contact HIMA directly. HIMA appreciates any suggestion on which information should be included in the
manual.
Equipment subject to change without notice. HIMA also reserves the right to modify the written material
without prior notice.
For further information, refer to the HIMA DVD and our website at http://www.hima.de and
http://www.hima.com.
© Copyright 2013, HIMA Paul Hildebrandt GmbH + Co KG
All rights reserved
Contact
HIMA contact details:
HIMA Paul Hildebrandt GmbH + Co KG
P.O. Box 1261
68777 Brühl, Germany
Phone: [phone]
Fax: [phone]
E-mail: [email protected]
Type of change
Revision
index Revisions technical editorial
1.00 First issue

M-CPU 01 Table of Contents
HI 800 655 E Rev. 1.00 Page 3 of 38
Table of Contents
1Introduction 5
1.1 Structure and Use of this Manual 5
1.2 Target Audience 5
1.3 Formatting Conventions 6
1.3.1 Safety Notes 6
1.3.2 Operating Tips 7
2Safety 8
2.1 Intended Use 8
2.1.1 Environmental Requirements 8
2.1.2 ESD Protective Measures 8
2.2 Residual Risk 9
2.3 Safety Precautions 9
2.4 Emergency Information 9
3Product Description 10
3.1 Safety Function 10
3.1.1 Reaction in the Event of a Fault 10
3.2 Scope of Delivery 10
3.2.1 IP Address and System ID (SRS) 10
3.3 Type Label 11
3.4 Structure 12
3.4.1 Block Diagram 12
3.4.2 Front view 13
3.4.3 LED indicators 14
3.4.3.1 Module Status Indicators 14
3.4.3.2 Program Light Emitting Diodes 15
3.4.3.3 User and System Bus LEDs 15
3.4.3.4 Ethernet Indicators 16
3.4.4 Operating System 16
3.4.5 User Program 16
3.4.6 Alarms&Events 16
3.4.7 Communication 16
3.4.7.1 Connections for Ethernet Communication 17
3.4.7.2 Network Ports Used for Ethernet Communication 17
3.4.8 Monitoring the Operating Voltage 17
3.5 Product Data 18
3.6 Socket M-SO CPU 01 19
3.7 Certified HIMatrix M-CPU 01 19

Table of Contents M-CPU 01
Page 4 of 38 HI 800 655 E Rev. 1.00
4Start-up 20
4.1 Mounting 20
4.2 Mounting and Removing the Modules and the Socket 20
4.2.1 Mounting a Socket 20
4.2.2 Mounting and Removing the Modules 22
4.3 Configuration 22
4.3.1 Tab Module 23
4.3.2 Tab Routings 25
4.3.3 Tab Ethernet Switch 25
4.3.4 Tab VLAN (Port-Based VLAN) 26
4.3.5 Tab LLDP 26
4.3.6 Mirroring Tab 26
5Operation 27
5.1 Handling 27
5.2 Diagnosis 27
6Maintenance 28
6.1 Errors 28
6.2 Maintenance Measures 28
6.2.1 Loading the Operating System 28
6.2.2 Proof Test 29
7Decommissioning 30
8Transport 31
9Disposal 32
Appendix 33
Glossary 33
Index of Figures 34
Index of Tables 35
Index 36

M-CPU 01 1 Introduction
HI 800 655 E Rev. 1.00 Page 5 of 38
1 Introduction
This manual describes the technical characteristics of the module and its use. It provides
information on how to install, start up and configure the module in SILworX.
1.1 Structure and Use of this Manual
The content of this manual is part of the hardware description of the HIMatrix M45
programmable electronic system.
This manual is organized in the following main chapters:
Introduction
Safety
Product Description
Start-Up
Operation
Maintenance
Decommissioning
Transport
Disposal
Additionally, the following documents must be taken into account:
Name Content Document no.
HIMatrix M45
Safety Manual Safety functions of the HIMatrix sys-
tem HI 800 653 E
HIMatrix M45
System Manual Hardware description of the HIMa-
trix M45 HI 800 651 E
SILworX
Communication Manual Description of communication and protocols HI 801 101 E
SILworX Online Help (OLH) Instructions on how to use SILworX -
First steps manual Introduction to SILworX HI 801 103 E
Table 1: Additional Relevant Documents
The latest manuals can be downloaded from the HIMA website at www.hima.com. The revision
index on the footer can be used to compare the current version of existing manuals with the
Internet edition.
1.2 Target Audience
This document addresses system planners, configuration engineers, programmers of
automation devices and personnel authorized to implement, operate and maintain the modules
and systems. Specialized knowledge of safety-related automation systems is required.

1 Introduction M-CPU 01
Page 6 of 38 HI 800 655 E Rev. 1.00
1.3 Formatting Conventions
To ensure improved readability and comprehensibility, the following fonts are used in this
document:
Bold To highlight important parts.
Names of buttons, menu functions and tabs that can be clicked and used
in the programming tool.
Italics For parameters and system variables
Courier Literal user inputs
RUN Operating state are designated by capitals
Chapter 1.2.3 Cross-references are hyperlinks even if they are not particularly marked.
When the cursor hovers over a hyperlink, it changes its shape. Click the
hyperlink to jump to the corresponding position.
Safety notes and operating tips are particularly marked.
1.3.1 Safety Notes
The safety notes are represented as described below.
These notes must absolutely be observed to reduce the risk to a minimum. The content is
structured as follows:
Signal word: warning, caution, notice
Type and source of risk
Consequences arising from non-observance
Risk prevention
SIGNAL WORD
Type and source of risk!
Consequences arising from non-observance
Risk prevention
The signal words have the following meanings:
Warning indicates hazardous situation which, if not avoided, could result in death or serious
injury.
Caution indicates hazardous situation which, if not avoided, could result in minor or modest
injury.
Notice indicates a hazardous situation which, if not avoided, could result in property damage.
NOTE
Type and source of damage!
Damage prevention

M-CPU 01 1 Introduction
HI 800 655 E Rev. 1.00 Page 7 of 38
1.3.2 Operating Tips
Additional information is structured as presented in the following example:
iThe text corresponding to the additional information is located here.
Useful tips and tricks appear as follows:
TIP The tip text is located here.

2 Safety M-CPU 01
Page 8 of 38 HI 800 655 E Rev. 1.00
2 Safety
All safety information, notes and instructions specified in this document must be strictly
observed. The product may only be used if all guidelines and safety instructions are adhered to.
The product is operated with SELV or PELV. No imminent risk results from the product itself.
The use in Ex-Zone is permitted if additional measures are taken.
2.1 Intended Use
HIMatrix components are designed for assembling safety-related controller systems.
When using the components in the HIMatrix system, comply with the following general
requirements.
2.1.1 Environmental Requirements
Requirement type Range of values
Protection class Protection class III in accordance with IEC/EN 61131-2
Ambient temperature 0...+60 °C
Storage temperature -40...+85 °C
Pollution Pollution degree II in accordance with IEC/EN 61131-2
Altitude < 2000 m
Housing Standard: IP20
Supply voltage 24 VDC
Table 2: Environmental Requirements
Exposing the HIMatrix system to environmental conditions other than those specified in this
manual can cause the HIMatrix system to malfunction.
2.1.2 ESD Protective Measures
Only personnel with knowledge of ESD protective measures may modify or extend the system
or replace devices.
NOTE
Device damage due to electrostatic discharge!
When performing the work, make sure that the workspace is free of static, and wear
an ESD wrist strap.
If not used, ensure that the device is protected from electrostatic discharge, e.g., by
storing it in its packaging.

M-CPU 01 2 Safety
HI 800 655 E Rev. 1.00 Page 9 of 38
2.2 Residual Risk
No imminent risk results from a HIMatrix M45 system itself.
Residual risk may result from:
Faults related to engineering
Faults related to the user program
Faults related to the wiring
2.3 Safety Precautions
Observe all local safety requirements and use the protective equipment required on site.
2.4 Emergency Information
A HIMatrix M45 system is a part of the safety equipment of a plant. If a device or a module fails,
the system enters the safe state.
In case of emergency, no action that may prevent the HIMatrix M45 systems from operating
safely is permitted.

3 Product Description M-CPU 01
Page 10 of 38 HI 800 655 E Rev. 1.00
3 Product Description
The M-CPU 01 processor module is the central component of the HIMatrix M45 controller.
The module is always the leftmost HIMatrix M45 module on the DIN rail.
The M-CPU 01 module is used to store the operating system and the user program. The module
executes all central functions, including communication with the PADT and other systems. The
module monitors the supply voltage and operating temperature.
The configuration is performed using SILworX, see Chapter 4.3.
The module is suitable for sequence of events recording (SOE), see Chapter 3.4.6. The module
supports multitasking and reload. For more details, refer to the system manual (HI 800 651 E).
iA licence is required to use the events recording, the multitasking and the reload features.
The module has been certified by the TÜV for safety-related applications up to SIL 3
(IEC 61508, IEC 61511, IEC 62061 and EN 50156) as well as PL e (EN ISO 13849-1).
Further safety standards, application standards and test standards are specified in the
certificates available on the HIMA website.
3.1 Safety Function
The CPU monitors the sequence and the proper, logical execution of the operating system and
user program or the user programs. The following functions are monitored with respect to time:
Hardware and software self-tests of the processor system
RUN cycle of the processor system (including the user program)
I/O tests and processing of I/O signals
3.1.1 Reaction in the Event of a Fault
If the self-tests detect errors, the processing of the user program and the process data is
stopped.
For further information on the fault reaction of the processor module, refer to Chapter 6.1.
Module's faults are signaled by the Err LED located on the front plate, see Chapter 3.4.3.
3.2 Scope of Delivery
The module must be installed on a suitable M-SO CPU 01 socket to be able to operate. The
socket is not included within the scope of delivery of the module.
The socket is described in Chapter 3.6.
3.2.1 IP Address and System ID (SRS)
A transparent label is delivered with the device to allow one to note the IP address and the
system ID (SRS,System.Rack.Slot) after a change.
The label must be affixed such that the ventilation slots in the housing are not obstructed.
Refer to the SILworX First Steps manual for more information on how to modify the IP address
and the system ID.

M-CPU 01 3 Product Description
HI 800 655 E Rev. 1.00 Page 11 of 38
3.3 Type Label
The type plate contains the following details:
Product name
Mark of conformity
Bar code (2D code)
Part number (Part-No.)
Hardware revision index (HW-Rev.)
Operating system revision index (OS-Rev.)
Operating data (Power:)
Production year (Prod-Year:)
Figure 1: Sample Type Label

3 Product Description M-CPU 01
Page 12 of 38 HI 800 655 E Rev. 1.00
3.4 Structure
This chapter describes the layout and function of the module, and its communication via
safeethernet.
3.4.1 Block Diagram
Watchdog
System Bus
Power Supply
Voltage Monitoring
Non-Volatile Memory
Ethernet Switch
1oo2D Processor System
System Bus Switch
Figure 2: Block Diagram

M-CPU 01 3 Product Description
HI 800 655 E Rev. 1.00 Page 13 of 38
3.4.2 Front view
Figure 3: Front View M-CPU 01

3 Product Description M-CPU 01
Page 14 of 38 HI 800 655 E Rev. 1.00
3.4.3 LED indicators
The LEDs indicate the operating state of the module. The LEDs are classified as follows:
System LEDs
Program LEDs
User and system bus LEDs
Communication LEDs
When the supply voltage is switched on, a LED test is performed and all LEDs are briefly lit.
Definition of Blinking Frequencies
The following table defines the blinking frequencies of the LEDs:
Name Blinking frequencies
Blinking1 Long (approx. 600 ms) on, long (approx. 600 ms) off
Blinking2 Short (approx. 200 ms) on, short (approx. 200 ms) off, short (approx. 200 ms)
on, long (approx. 600 ms) off
Blinking-x Ethernet communication: Blinking synchronously with data transfer
Table 3: Blinking Frequencies of LEDs
3.4.3.1 Module Status Indicators
The LEDs signal the following states:
LED Color Status Description
On Module in RUN, normal operation
Emergency loader active.
Blinking1 A new operating system is being loaded.
Module in the OPERATE state, no user program started
Run Green
Off Module is in none of the states described.
On System warning, e.g.:
Missing license for additional functions (communication proto-
cols, reload), test mode.
Temperature warning
Blinking1 System error, e.g.:
Internal module fault detected by self-tests,
e.g., hardware or voltage supply.
The processor system can only be restarted with a command
from the PADT (reboot).
System configuration fault.
Fault while loading the operating system
Emergency loader active.
Err Red
Off No faults detected.
On Module in the STOP / VALID CONFIGURATION state
Emergency loader active.
Blinking1 Module in the STOP / INVALID CONFIGURATION state
A new operating system is being loaded.
Stop Yellow
Off Module is in none of the states described.
On Module state: INIT
Emergency loader active.
Blinking1 A new operating system is being loaded.
Init Yellow
Off Module is in none of the states described.
Table 4: Module Status Indicators

M-CPU 01 3 Product Description
HI 800 655 E Rev. 1.00 Page 15 of 38
3.4.3.2 Program Light Emitting Diodes
The LEDs signal the following states:
LED Color Status Description
On The controller is being loaded with a new configuration.
Emergency loader active.
A new operating system is being loaded.
Watchdog time, safety time or SRS change.
Check for duplicate IP address.
A PADT write command is being processed.
Blinking1 Reload is performed
A duplicate IP address was detected.1)
PROFINET has received an identify request.1)
Prog Yellow
Off None of the described events occurred.
On Forcing prepared: The force switch is set for a variable, the force main
switch is still deactivated. The module is in the RUN or STOP state.
Blinking1 Forcing is active: At least one local or global variable has adopted the
corresponding force value.
A duplicate IP address was detected.1)
PROFINET has received an identify request.1)
Force Yellow
Off None of the described events occurred.
On A field warning occurred.
Operating system emergency loader active.
Blinking1 A field error occurred.
Field Red
Off None of the described events occurred.
On Warning related to external process data communication
Operating system emergency loader active.
Blinking1 Fault in the external process data communication.
COM Red
Off None of the described events occurred.
On A system warning occurred.
Operating system emergency loader active.
Blinking1 A system error occurred.
System Red
Off None of the described events occurred.
1) If all the LEDs PROG and FORCE are blinking simultaneously.
Table 5: Program Light Emitting Diodes
3.4.3.3 User and System Bus LEDs
The LEDs are labeled User. The LEDs signal the following states:
LED Color Status Description
On
Blinking1
User 1,
User 2 Yellow
Off
These LEDs can be switched by the user program. The meaning
of these LEDs is user-specific.
On System bus connection established, no data transfer.
Blinking-x Data transfer through system bus.
Pri Yellow
Off System bus connection not established.
Sec Yellow On / Off For future applications. On only when LED test, otherwise Off.
Table 6: User and System Bus LEDs
The meaning of the user LEDs must be defined during the engineering phase and must be
described for the user. Labeling the LEDs on the front plate with user-specific names supports
the user.

3 Product Description M-CPU 01
Page 16 of 38 HI 800 655 E Rev. 1.00
3.4.3.4 Ethernet Indicators
The Ethernet LEDs are labeled Ethernet. The LEDs signal the following states:
LED Color Status Description
On Communication partner connected
no communication detected on interface
Blinking1 IP address conflict detected
All Ethernet LEDs are blinking
Blinking-x Communication detected on interface
1
2 Green
Off No communication partner connected
On Full duplex operation on Ethernet line
Blinking1 IP address conflict detected.
All Ethernet LEDs are blinking
Blinking-x Collisions detected on Ethernet line
H/F Yellow
Off Half duplex operation on Ethernet line
Table 7: Ethernet Indicators
3.4.4 Operating System
The operating system loaded into the processor module contains all basic functions of the
HIMatrix M45 programmable electronic system (PES), for example:
Reading the inputs and writing to the outputs
Processing the user program
Performing all test routines for hardware and software
Cycle time monitoring (watchdog)
Communication with other systems
For a description of the operating system functions and the variables used to configure the
systems and all modules, refer to the HIMatrix M45 system manual (HI 800 651 E).
3.4.5 User Program
The user program is created using the SILworX programming tool. It is then translated into a
machine code using the code generator and transferred to the flash EPROM of the processor
module.
3.4.6 Alarms&Events
The processor module records alarms and other events in its non-volatile memory. Up to 4000
events can be configured. The event buffer includes 1000 events.
For further details on alarms and events, their creation and recording, refer to the system
manual (HI 800 651 E).
3.4.7 Communication
Communication with external systems occurs via the Ethernet interfaces of the M-CPU 01
module.
iWhen configuring safety-related communication, observe the instructions specified in the
SILworX Communication Manual (HI 801 101 E).

M-CPU 01 3 Product Description
HI 800 655 E Rev. 1.00 Page 17 of 38
3.4.7.1 Connections for Ethernet Communication
Ethernet interfaces
Ports 3
Transfer standard 10BASE-T/100BASE-Tx, half and full duplex
Auto negotiation Yes
Auto crossover Yes
Connection socket RJ-45
IP Address Freely configurable1)
Subnet Mask Freely configurable1)
Supported protocols safeethernet
Programming and debugging tool (PADT), SNTP
1) The general rules for assigning IP address and subnet masks must be adhered to.
Table 8: Connections for Fieldbus Communication
The three RJ-45 connectors are located on the front plate of the module. The status is indicated
by LEDs, see Chapter 3.4.3.4.
The connection parameters are read based on the MAC address (media access control
address) defined during manufacturing.
The MAC address of the module is specified on the label on the front plate.
Example of label: MAC: 00.E0.A1.00.0E.04
3.4.7.2 Network Ports Used for Ethernet Communication
UDP ports Use
8000 Programming and operation with the programing tool
8004 Configuration of the remote I/O using the PES (SILworX)
6010 safeethernet and OPC
123 SNTP (time synchronization between PES and remote I/O, PES and ex-
ternal devices)
Table 9: Network Ports (UDP Ports) in Use
3.4.8 Monitoring the Operating Voltage
The M-CPU 01 processor module monitors the 24 VDC operating voltage of the HIMatrix M45;
reactions occur in accordance with the listed levels:
Voltage level Reaction of the CPU
18...28.8 V No reaction
< 18.0 V Alarm state (the internal variables are written to)
< 13.0 V Shutdown
Table 10: Operating Voltage Monitoring
The alarm can be evaluated with a PADT loaded with a programming tool, using the Power
Supply State system parameter.

3 Product Description M-CPU 01
Page 18 of 38 HI 800 655 E Rev. 1.00
3.5 Product Data
General
Operating voltage 24 VDC, -15...+20 %, rP5 %,
from a power supply unit with safe insulation
in accordance with IEC 61131-2
Maximum supply voltage 30 V
Operating data 3.3 VDC / 1.5 A
5 VDC / 0.1 A
Microprocessor PowerPC
Total program and data memory for all user
programs 5 MB less 64 kB for CRCs
Data memory for retain variables 32 kB
Number of user programs 1...32
Number of event definitions 0...4000
Size of the non-volatile event buffer. 1000 Events
Ethernet interfaces 3 x RJ-45, 10BASE-T/100BASE-Tx with inte-
grated switch
Buffer for date/time Gold capacitor
Ambient temperature 0...+60 °C
Storage temperature -40...+85 °C
Humidity max. 95 % relative humidity, non-condensing
Type of protection IP20
Space requirement
Module housing (H x X D) in mm
Socket (H x W) in mm
Module housing + socket
105 x 62.5 x 68
165 x 65
D 90 mm to DIN rail, 96 mm total
Weight
Module
Socket
approx. 215 g
approx. 180 g
Table 11: Product Data

M-CPU 01 3 Product Description
HI 800 655 E Rev. 1.00 Page 19 of 38
3.6 Socket M-SO CPU 01
The M-SO CPU 01 socket includes on its left side the M-CPU 01 Processor module slot and on
its right side the M-PWR 01 power module slot. The power module supplies the processor
module as well as the modules in their sockets on its right side. Refer to the power module
manual (HI 800 659 E) for more details.
Processor Module Slot Power Module Slot
Figure 4: Socket M-SO CPU 01
3.7 Certified HIMatrix M-CPU 01
M-CPU 01
CE EMC
TÜV IEC 61508 1-7:2010 up to SIL 3
IEC 61511:2004
EN ISO 13849-1:2008
IEC 62061:2005
EN 50156-1:2004
EN 298:2003
EN 230:2005
PROFIBUS
Nutzerorganisation (PNO) Test Specification for PROFIBUS DP Slave, V3.0 November 2005
Table 12: Certificates
Further safety standards and application standards are specified in the certificate. The
certificate and the EC type test certificate are available on the HIMA website at www.hima.com.

4 Start-up M-CPU 01
Page 20 of 38 HI 800 655 E Rev. 1.00
4 Start-up
To start up the controller, it must be mounted, connected and configured in the programming
tool.
4.1 Mounting
The module is mounted on a 35 mm DIN rail using the corresponding M-SO CPU 01 socket.
When installing the HIMatrix M45 system, the socket must be mounted as the first one on the
left side of the DIN rail. The remaining sockets must be mounted from the right side.
Observe the following points when mounting the module and the socket:
Removing or replacing of sockets or modules is only permitted in the de-energized state.
WARNING
Removing and inserting the module is only permitted in the de-energized state.
4.2 Mounting and Removing the Modules and the Socket
This chapter describes how to mount and remove the modules and sockets. When replacing
modules, the sockets remain on the DIN rail. This saves additional wiring effort since all
communication lines are connected to the socket.
4.2.1 Mounting a Socket
Tools and utilities:
Screwdriver, slotted 1.0 x 5.5 mm
Mounting a socket
1. Setting the socket onto the DIN rail .
2. Swiveling a Socket in .
3. Moving the socket on the DIN rail and connecting it to another socket .
4. Pressing the socket's latch upwards .
The latch attaches the socket to the DIN rail and engages the socket with the socket on
its left side.
5. Mounting the socket is completed, the field lines can be connected.
Removing a socket
Prior to removing the socket, the module must be dismantled and the field lines must be
released from the terminals.
1. Use a screwdriver to to push the blue latch downwards .
2. Removing socket from adjacent socket .
3. Swiveling socket out .
4. Lifting and removing socket .