HIMA HIMatrix M45 User manual

HIMatrix M45
Safety-Related Controller
System Manual M45
HIMA Paul Hildebrandt GmbH
Industrial Automation
Rev. 1.01 HI 800 651 E

HI 800 651 E Rev. 1.01 (1404)
All HIMA products mentioned in this manual are protected by the HIMA trade-mark. Unless noted otherwise,
this also applies to other manufacturers and their respective products referred to herein.
HIMax®, HIMatrix®, SILworX®, XMR®and FlexSILon®are registered trademarks of
HIMA Paul Hildebrandt GmbH.
All of the instructions and technical specifications in this manual have been written with great care and
effective quality assurance measures have been implemented to ensure their validity. For questions, please
contact HIMA directly. HIMA appreciates any suggestion on which information should be included in the
manual.
Equipment subject to change without notice. HIMA also reserves the right to modify the written material
without prior notice.
For further information, refer to the HIMA DVD and our website http://www.hima.de and
http://www.hima.com.
© Copyright 2015, HIMA Paul Hildebrandt GmbH
All rights reserved
Contact
HIMA contact details:
HIMA Paul Hildebrandt GmbH
P.O. Box 1261
68777 Brühl, Germany
Phone: [phone]
Fax: [phone]
E-mail: [e-mail]
Revision
index
Revisions
Type of change
technical
editorial
1.00
First issue
1.01
Revision, changed chapters: Extending the System Bus, Mounting
and Removing Modules and Sockets
X
X

System Manual M45 Table of Contents
HI 800 651 E Rev. 1.01 Page 3 of 80
Table of Contents
1Introduction 7
1.1 Structure and Use of the Document 7
1.2 Target Audience 8
1.3 Formatting Conventions 8
1.3.1 Safety Notes 8
1.3.2 Operating Tips 9
1.4 Service and Training 9
2Safety 10
2.1 Intended Use 10
2.1.1 Scope 10
2.1.1.1 Application in Accordance with the De-Energize-to-Trip Principle 10
2.1.1.2 Use in Fire Alarm Systems 10
2.2 Environmental Requirements 10
2.2.1 Test Conditions 10
2.2.1.1 Climatic Requirements 11
2.2.1.2 Mechanical Requirements 12
2.2.1.3 EMC Requirements 12
2.2.1.4 Power Supply 13
2.3 Tasks and Responsibilities of Operators and Machine and System Manufacturers
13
2.3.1 Connection of Communication Partners 13
2.3.2 Use of Safety-Related Communication 13
2.4 ESD Protective Measures 13
2.4.1 Noxious Gases 14
2.5 Residual Risk 14
2.6 Safety Precautions 14
2.7 Emergency Information 14
3Product Description 15
3.1 Modules 15
3.1.1 Inputs 16
3.1.1.1 Surges on Digital Inputs 16
3.1.1.2 Line Control 16
3.1.2 Outputs 17
3.2 Extending the System Bus 18
3.3 Supply Voltage Monitoring 18
3.4 Monitoring the Temperature State 19
3.4.1 Setting the Temperature Threshold for Messages 19
3.5 Short-Circuit Reaction of Output Channels 19
3.6 Alarms&Events Recording 19
3.6.1 Alarms&Events 20
3.6.2 Creating Events 20
3.6.3 Recording Events 21
3.6.4 Transfer of Events 21
3.7 Product Data 21

Table of Contents System Manual M45
Page 4 of 80 HI 800 651 E Rev. 1.01
4Communication 22
4.1 HIMatrix Communication Protocols M45 22
4.2 Ethernet Communication 22
4.2.1 Communication via Switches 22
4.2.2 safeethernet 22
4.2.3 Maximum Communication Time Slice 23
4.2.4 Connectors for safeethernet/Ethernet 23
4.2.5 Communication with the PADT 23
4.2.6 Ethernet Communication Protocols 23
4.2.6.1 SNTP 24
4.2.6.2 Modbus TCP 24
4.2.6.3 Send & Receive TCP 24
4.2.6.4 PROFINET IO and PROFIsafe 24
4.3 Fieldbus Communication 24
4.3.1 Protocols of the Fieldbus Interfaces 24
4.3.2 Restrictions for Simultaneous Operation of Protocols 25
5Operating System 26
5.1 Functions of the Processor Operating System 26
5.2 Indication of the Operating System Versions 26
5.3 Behavior in the Event of Faults 26
5.3.1 Permanent Faults on Inputs or Outputs 26
5.3.2 Temporary Faults on Inputs or Outputs 27
5.3.3 Internal Faults 27
5.4 Processor Module 27
5.4.1 Operating States of the Processor Module 27
5.4.2 Programming 28
6User Program 29
6.1 Modes of Operation for the User Program 29
6.2 Cycle Sequence 29
6.2.1 Multitasking 30
6.2.2 Multitasking Mode 32
6.3 Reload 36
6.3.1 Conditions for Using the Reload Function 37
6.4 Forcing 38
6.4.1 Time Limits 38
6.4.2 Force Editor 39
6.4.3 Restricting the Use of Forcing 39
7Start-Up 40
7.1 Considerations about Heat 40
7.1.1 Heat Dissipation 40
7.1.1.1 Definitions 40
7.1.1.2 Installation Type 40
7.1.1.3 Natural Convection 41
7.2 Installation and Mounting 41
7.2.1 Mounting 41
7.2.2 Construction Depth 42

System Manual M45 Table of Contents
HI 800 651 E Rev. 1.01 Page 5 of 80
7.2.3 Mounting on a Flat Base 42
7.3 Mounting and Removing Modules and Sockets 43
7.3.1 Mounting the Socket 43
7.3.2 Inserting and Removing the Module 45
7.3.3 Changes to M45 System 45
7.4 Connecting the Input and Output Circuits 46
7.4.1 Earthing and Shielding 46
7.4.1.1 Earthing the 24 VDC System Voltage 46
7.4.1.2 Earthing Connections 47
7.4.1.3 Shielding 47
7.4.1.4 EMC Protection 47
7.4.2 Connecting the Supply Voltage 47
7.5 Configuration 47
7.5.1 Configuring the Resource 47
7.5.1.1 Resource Properties 48
7.5.1.2 Hardware System Variables for Setting the Parameters 50
7.5.1.3 Hardware System Variables for Reading the Parameters 51
7.5.1.4 Rack System Parameter Settings 54
7.5.2 Configuring the Ethernet Interfaces 54
7.5.3 Configuring the User Program 54
7.5.4 Configuration of the Hardware Image 55
7.5.5 Configuring the Inputs and Outputs 55
7.5.5.1 Use of Digital Input 56
7.5.5.2 Use of Safety-Related Counter Inputs 56
7.5.5.3 Use of Digital Input 56
7.5.6 Generating the Resource Configuration 56
7.5.7 Configuring the System ID and the Connection Parameters 57
7.5.8 Loading a Resource Configuration from the PADT 57
7.5.9 Setting the Date and the Time 58
7.6 User Management in SILworX 58
7.6.1 User Management for SILworX Projects 58
7.6.2 User Management for the Controller 59
7.6.3 Setting up User Accounts 60
7.7 Configuration with SILworX 60
7.7.1 Configuring the Ethernet Interfaces 61
7.8 Configuring Alarms and Events 62
7.9 Handling the User Program 64
7.9.1 Setting the Parameters and the Switches 64
7.9.2 Starting the Program from STOP/VALID CONFIGURATION 64
7.9.3 Restarting the Program after Errors 64
7.9.4 Stopping the Program 64
7.9.5 Program Test Mode 65
7.9.6 Online Test 65
8Operation 66
8.1 Handling 66
8.2 Diagnosis 66
8.2.1 Light-Emitting Diode Indicators 66
8.2.2 Diagnostic History 66
8.2.3 Diagnosis in SILworX 67

Table of Contents System Manual M45
Page 6 of 80 HI 800 651 E Rev. 1.01
9Maintenance 69
9.1 Interferences 69
9.2 Loading Operating Systems 69
9.3 Repairing Modules and Sockets 70
10 Decommissioning 71
11 Transport 72
12 Disposal 73
Appendix 74
Glossary 74
Index of Figures 75
Index of Tables 76
Declaration of conformity 77
Index 78

System Manual M45 1 Introduction
HI 800 651 E Rev. 1.01 Page 7 of 80
1 Introduction
The modular HIMatrix M45 system described in this manual is safety-related and can be used
for various purposes. The following conditions must be met to safely install and start up the
HIMatrix M45 automation devices, and to ensure safety during their operation and maintenance:
Knowledge of regulations.
Proper technical implementation of the safety instructions detailed in this manual performed
by qualified personnel.
HIMA shall not be held liable for severe personal injuries, damage to property or the
environment caused by any of the following: unqualified personnel working on or with the
devices, de-activation or bypassing of safety functions, or failure to comply with the instructions
detailed in this manual (resulting in faults or impaired safety functionality).
HIMatrix M45 automation devices have been developed, manufactured and tested in
compliance with the pertinent safety standards and regulations. They may only be used for the
intended applications under the specified environmental conditions and only in connection with
approved external devices.
1.1 Structure and Use of the Document
This system manual is composed of the following chapters:
Safety
Information on how to safely use the HIMatrix M45 system.
Allowed applications and environmental requirements for operating
the HIMatrix M45 systems.
Product description
Basic structure of the HIMatrix M45 system.
Communication
Brief description of the HIMatrix M45 modular systems'
communication among each other and with other systems. Detailed
information can be found in the communication manuals.
Operating system
Functions of the operating systems.
User program
Basic information on the user program.
Start-up, operation,
maintenance,
decommissioning,
transport, disposal
Phases of a HIMatrix M45 system's lifecycle.
Appendix
Glossary
Index of tables and index of figures
Declaration of conformity
Index
Additionally, the following documents must be taken into account:
Name
Content
Document
number
HIMatrix M45 Safety Manual
Safety functions of the HIMatrix M45 system
HI 800 653 E
SILworX Communication
Manual
Description of the communication protocols,
ComUserTask and their configuration in SILworX
HI 801 101 E
HIMatrix M45 module manuals
Description of the HIMatrix M45 modules
SILworX Online Help (OLH)
Instructions on how to use SILworX
-
SILworX First Steps
Introduction to SILworX using the HIMax system as an
example
HI 801 103 E
Table 1: Additional Relevant Documents

1 Introduction System Manual M45
Page 8 of 80 HI 800 651 E Rev. 1.01
The latest manuals can be downloaded from the HIMA website at www.hima.com. The revision
index on the footer can be used to compare the current version of existing manuals with the
Internet edition.
1.2 Target Audience
This document addresses system planners, configuration engineers, programmers of
automation devices and personnel authorized to implement, operate and maintain the modules
and systems. Specialized knowledge of safety-related automation systems is required.
1.3 Formatting Conventions
To ensure improved readability and comprehensibility, the following fonts are used in this
document:
Bold
To highlight important parts.
Names of buttons, menu functions and tabs that can be clicked and used
in the programming tool.
Italics
For parameters and system variables.
Courier
Literal user inputs.
RUN
Operating states are designated by capitals.
Chapter 1.2.3
Cross-references are hyperlinks even if they are not particularly marked.
When the cursor hovers over a hyperlink, it changes its shape. Click the
hyperlink to jump to the corresponding position.
Safety notes and operating tips are particularly marked.
1.3.1 Safety Notes
The safety notes are represented as described below.
These notes must absolutely be observed to reduce the risk to a minimum. The content is
structured as follows:
Signal word: warning, caution, notice
Type and source of risk
Consequences arising from non-observance
Risk prevention
The signal words have the following meanings:
Warning indicates hazardous situation which, if not avoided, could result in death or serious
injury.
Caution indicates hazardous situation which, if not avoided, could result in minor or modest
injury.
Notice indicates a hazardous situation which, if not avoided, could result in property damage.
SIGNAL WORD
Type and source of risk!
Consequences arising from non-observance
Risk prevention

System Manual M45 1 Introduction
HI 800 651 E Rev. 1.01 Page 9 of 80
NOTE
Type and source of damage!
Damage prevention
1.3.2 Operating Tips
Additional information is structured as presented in the following example:
i
The text corresponding to the additional information is located here.
Useful tips and tricks appear as follows:
TIP
The tip text is located here.
1.4 Service and Training
Deadlines and the extent of actions for commissioning, testing and modifying controller systems
can be agreed with the service department.
HIMA holds training, usually in-house, for software programs and the hardware of the
controllers. Additionally, customer training can be offered on-site.
Refer to the HIMA website at www.hima.com for the current training program and dates. Offers
for specialized, on-site training can also be provided upon request.

2 Safety System Manual M45
Page 10 of 80 HI 800 651 E Rev. 1.01
2 Safety
All safety information, notes and instructions specified in this document must be strictly
observed. The product may only be used if all guidelines and safety instructions are adhered to.
The product is operated with SELV or PELV. No imminent risk results from the product itself.
The use in Ex-Zone is permitted if additional measures are taken.
2.1 Intended Use
This chapter describes the conditions for using HIMatrix M45 systems.
2.1.1 Scope
The safety-related HIMatrix controllers can be used in applications up to SIL 3 in accordance
with IEC 61508.
The HIMatrix systems are certified for use in process controllers, protective systems, burner
controllers, and machine controllers.
2.1.1.1 Application in Accordance with the De-Energize-to-Trip Principle
The automation devices have been designed in accordance with the de-energize-to-trip
principle.
A system that operates in accordance with the de-energize-to-trip principle adopts the de-
energized state if a fault occurs.
2.1.1.2 Use in Fire Alarm Systems
HIMatrix systems are suitable for use in fire alarm systems in accordance with DIN EN 54-2 and
NFPA 72. For these fire alarm systems, the following is required:
To contain the risks, these systems must be able to adopt an active state on demand.
Open-circuit and short-circuit detection.
The environmental requirements have to be observed!
For details, see the safety manual of the HIMatrix F systems (HI 800 023 E).
2.2 Environmental Requirements
Requirement type
Protection class
Protection class III in accordance with IEC/EN 61131-2
Ambient temperature
0...+60 °C
Storage temperature
-40...+85 °C
Pollution
Pollution degree II in accordance with IEC/EN 61131-2
Altitude
< 2000 m
Housing
Standard: IP20
Supply voltage
24 VDC
Table 2: Environmental Requirements
All the environmental requirements specified in this manual must be observed when operating
the HIMatrix system.
2.2.1 Test Conditions
The devices have been tested to ensure compliance with the following standards for EMC,
climatic and environmental requirements:

System Manual M45 2 Safety
HI 800 651 E Rev. 1.01 Page 11 of 80
Standard
Content
IEC/EN 61131-2:
2007
Programmable controllers, Part 2
Equipment requirements and tests
IEC/EN 61131-6:
2012
Programmable controllers, Part 6
Functional Safety
IEC/EN 61000-6-2:
2005
EMC
Generic standards, Parts 6-2
Immunity for industrial environments
IEC/EN 61000-6-4:
2007 + A1:2011
Electromagnetic compatibility (EMC)
Generic emission standard, industrial environments
Table 3: Standards for EMC, Climatic and Environmental Requirements
When using the safety-related HIMatrix control systems, the following general requirements
must be met:
Requirement type
Requirement content
Protection class
Protection class III in accordance with IEC/EN 61131-2
Pollution
Pollution degree II in accordance with IEC/EN 61131-2
Altitude
< 2000 m
IP class
Standard: IP20
Requirements of the
application
If required by the relevant application standards (e.g., EN 60204,
EN 13849), the HIMatrix system must be installed in an enclosure of the
specified protection class (e.g., IP54).
Table 4: General Requirements
2.2.1.1 Climatic Requirements
The following table lists the most important tests and limits for climatic requirements:
Standard
Climatic tests
IEC/EN 61131-2
Operating temperature: 0...+60 °C
(test limits: -10...+70 °C)
Storage temperature: -40...+85 °C
Dry heat and cold resistance tests:
+70 °C / -40 °C, 16 h, +85 °C, 1 h
Power supply not connected
Temperature changes, withstand test:
Fast temperature changes: -40 °C / +70 °C power supply not connected
Immunity test:
Slow temperature changes: -10 °C / +70 °C power supply not connected
Cyclic damp-heat withstand tests:
+25 °C / +55 °C, 95 % relative humidity,
Power supply not connected
EN 54-2
Damp-heat
93 % relative humidity, 40 °C, 4 days in operation
93 % relative humidity, 40 °C, 21 days, power supply not connected
Table 5: Climatic Requirements
Operating requirements other than those specified in this document are described in the device-
specific or module-specific manuals.

2 Safety System Manual M45
Page 12 of 80 HI 800 651 E Rev. 1.01
2.2.1.2 Mechanical Requirements
The following table lists the most important tests and limits for mechanical requirements:
IEC/EN 61131-2
Mechanical tests
Vibration immunity test:
5...8,4 Hz, 3,5 mm
8.4...150 Hz, 1 g, EUT in operation, 10 cycles per axis
Shock immunity test:
15 g, 11 ms, EUT in operation, 3 shocks per axis and direction (18
shocks)
Table 6: Mechanical Tests
2.2.1.3 EMC Requirements
Higher interference levels are required for safety-related systems. HIMatrix systems meet these
requirements in accordance with IEC 61131-6, IEC 61326-3-1, and IEC 61326-3-2. See column
Criterion FS (Functional Safety).
IEC/EN 61131-2
Interference immunity tests
Criterion FS
IEC/EN 61000-4-2
ESD test: 6 kV contact, 8 kV air discharge
6 kV, 8 kV
IEC/EN 61000-4-3
RFI test (10 V/m): 80 MHz...2 GHz, 80 % AM
RFI test (10 V/m): 2 GHz...3 GHz, 80 % AM
RFI test (20 V/m): 80 MHz...1 GHz, 80 % AM
10 V/m
3 V/m
20 V/m
IEC/EN 61000-4-3
900 MHz pulses
-
IEC/EN 61000-4-4
Burst test
Supply voltage: 2 kV
Signal lines: 2 kV
4 kV
2 kV
IEC/EN 61000-4-5
Surge:
Power lines: 2 kV CM, 1 kV DM
Signal lines: 2 kV CM, 1 kV DM at AC I/O
2 kV /1 kV
2 kV
IEC/EN 61000-4-6
High frequency, asymmetrical
10 V, 150 kHz...80 MHz, AM
20 V, ISM frequencies, 80 % AM
10 V
-
IEC/EN 61000-4-12
Damped oscillatory wave test
2.5 kV L-, L+ / PE
1 kV L+ / L-
-
-
Table 7: Interference Immunity Tests
IEC/EN 61000-6-4
Noise emission tests
EN 55011
Class A
Emission test:
radiated, conducted
Table 8: Noise Emission Tests

System Manual M45 2 Safety
HI 800 651 E Rev. 1.01 Page 13 of 80
2.2.1.4 Power Supply
The following table lists the most important tests and limits for the HIMatrix systems' power
supply:
IEC/EN 61131-2
Verification of the DC supply characteristics
The power supply must comply with the following standards:
IEC/EN 61131-2:
SELV (Safety Extra Low Voltage) or
PELV (Protective Extra Low Voltage)
HIMatrix systems must be fuse protected as specified in this manual
Voltage range test:
24 VDC, -20...+25 % (19.2...30.0 V)
Momentary external current interruption immunity test:
DC, PS 2: 2 ms
Reversal of DC power supply polarity test:
Refer to corresponding chapter of the system manual or data sheet of
power supply.
Table 9: Verification of the DC Supply Characteristics
2.3 Tasks and Responsibilities of Operators and Machine and System
Manufacturers
Operators and machine and system manufacturers are responsible for ensuring that HIMatrix
systems are safely operated in automated systems and plants.
Machine and system manufacturers must sufficiently validate that the HIMatrix systems were
properly programmed.
2.3.1 Connection of Communication Partners
Only devices with safe electrical separation may be connected to the communications
interfaces.
2.3.2 Use of Safety-Related Communication
When implementing safety-related communications between various devices, ensure that the
overall response time does not exceed the fault tolerance time. All calculations must be
performed in accordance with the rules given in this chapter.
2.4 ESD Protective Measures
Only personnel with knowledge of ESD protective measures may modify or extend the system
or replace a module.
NOTE
Electrostatic discharge can damage the electronic components within the HIMatrix
systems!
When performing the work, make sure that the workspace is free of static, and wear
an ESD wrist strap.
If not used, ensure that the module is protected from electrostatic discharge, e.g., by
storing it in its packaging.

2 Safety System Manual M45
Page 14 of 80 HI 800 651 E Rev. 1.01
2.4.1 Noxious Gases
HIMatrix components may be operated without functional and safety restrictions in
environments with noxious gas concentrations as described in the following standards:
ANSI/ISA -S71.04:1985
Corrosive gases, Class G3
DIN EN 60068-2-60: 1996 (also IEC 68-2-60: 1995)
With noxious gas concentrations higher than those mentioned in the standards, a reduced
component lifetime is to be expected. The user is responsible for demonstrating that the
environment is sufficiently free from noxious gases.
2.5 Residual Risk
No imminent risk results from a modular HIMatrix M45 system itself.
Residual risk may result from:
Faults related to engineering
Faults related to the user program
Faults related to the wiring
2.6 Safety Precautions
Observe all local safety requirements and use the protective equipment required on site.
2.7 Emergency Information
A HIMatrix M45 system is a part of the safety equipment of a plant. If a device or a module fails,
the system enters the safe state.
In case of emergency, no action that may prevent the HIMatrix M45 systems from operating
safely is permitted.

System Manual M45 3 Product Description
HI 800 651 E Rev. 1.01 Page 15 of 80
3 Product Description
The modular system HIMatrix M45 is composed of modules lined up on a DIN rail.
The only processor module is located at the left-hand side of the system. If required, one to
three communication modules can be added to the right of the processor module. All additional
modules are positioned at the right-hand side.
Processor Module M-CPU 01
Power Module M-PWR 01
Communication Module M-COM 01
I/O Modules from Here to the Right
Figure 1: HIMatrix M45 System
The modules are inserted into sockets. The sockets are fastened to the DIN rail. This allows one
to replace modules without removing the field wiring.
The sockets have a lateral electrical connection for attaching modules to the system bus and
supply voltage.
The socket of the processor module also accommodates the M-PWR 01 power module ,
which is the minimum requirement for supplying the controller with electrical power.
The M-PWR 01 power module in the processor module socket is sufficient for small controllers.
If more power or isolated operation of I/O modules is required, additional power modules can be
used on the DIN rail to supply the I/O modules located to the right.
The modular M45 system can also be connected to HIMatrix F60 and compact systems via
safeethernet.
3.1 Modules
All HIMatrix M45 system modules are 165 mm in height.
Certain slots are specified for the first power module, the processor module, and communication
modules if used, see above.

3 Product Description System Manual M45
Page 16 of 80 HI 800 651 E Rev. 1.01
NOTE
Controller damage!
Inserting and removing the modules during operation is not permitted.
Prior to modifying the assembly, ensure that the controller is shut down!
After modifying a controller assembly, its user program must be adapted to the change and
reloaded.
Pluggable clamps located on the modules' sockets are used to connect sensors and actuators.
The modules indicate the status of digital signals via LEDs located on the front plate.
3.1.1 Inputs
The modules' input channels are used to transmit and adjust the signals between the sensors
and the microprocessor system on the CPU module.
The safety-related modules continuously test themselves. If a fault occurs, the module restarts.
If the same fault occurs again within one minute, the module shuts down and displays the fault.
The controller's operating system then sets the user program's input value to the initial value.
Instead of contacts, signal sources with own voltage may also be connected. To this end, the
signal source ground must be connected to the input ground.
3.1.1.1 Surges on Digital Inputs
Due to the short cycle time of the HIMatrix M45 systems, a surge pulse as described in
EN 61000-4-5 can be read in to the digital inputs as a short-term high level.
To prevent malfunctions, take one of the following measures for the application:
Install shielded input wires to prevent surges within the system.
Activate noise blanking: a signal must be present for at least two cycles before it is
evaluated.
Caution: This action increases the system's response time!
i
The measures specified above are not necessary if the plant design precludes surges from
occurring within the system.
In particular, the design must include protective measures with respect to overvoltage,
lightning, earth grounding and plant wiring in accordance with the relevant standards and the
manufacturer's specifications.
3.1.1.2 Line Control
Line control is used to detect short-circuits or open-circuits, e.g., on EMERGENCY STOP inputs
complying with Cat. 4 and PL e in accordance with EN ISO 13849-1. Line control can be
configured for the M45 system.
Application example: The outputs TO 1 through TO 2 of the M-DI 8 01 module are connected to
the digital inputs (DI) of the same module as follows:

System Manual M45 3 Product Description
HI 800 651 E Rev. 1.01 Page 17 of 80
DI 3 4
TO 1 2
DI 1 2
EMERGENCY STOP 1
EMERGENCY STOP 2
EMERGENCY STOP devices in
accordance with EN 60947-5-1 and
EN 60947-5-5
Figure 2: Line Control
The digital outputs are pulsed. This allows monitoring of the wires to the digital inputs of the
M-DI 8 01 module.
A fault reaction is triggered if one of the following faults occurs:
Cross-circuit between two parallel wires.
Improper connections of two lines (e.g., TO 2 to DI 3).
Earth fault of a line (with earthed ground only).
Open-circuit or open contacts, i.e., including when one of the two EMERGENCY STOP
switches mentioned above has been engaged.
The fault reaction includes the following actions:
The ERROR LED on the controller's front plate is blinking.
The inputs are set to 0.
An evaluable error code is created.
For more information on how to configure line control in the user program, refer to the module-
specific HIMatrix M45 manuals.
3.1.2 Outputs
The module's output channels are used to transmit and adjust the signals between the
microprocessor systems on the central module and the actuators.
The safety-related modules continuously test themselves. If a fault occurs, the module restarts.
If the same fault occurs again within one minute, the module shuts down and displays the fault.
The outputs are set to the safe de-energized state.
NOTE
Controller damage!
Plug the terminals for output circuits without a load.
If short-circuits are present, the resulting high current may damage the terminals.
Inductive loads may be connected with no free-wheeling diode on the actuator. However, HIMA
recommends connecting a protective diode directly to the actuator.
For more details on line control, refer to Chapter 3.1.1

3 Product Description System Manual M45
Page 18 of 80 HI 800 651 E Rev. 1.01
3.2 Extending the System Bus
Systems composed of a larger or the maximum number of modules require a very long DIN rail.
This can result in exceeding the width of the planned mounting space. In this case, multiple
short DIN rails may replace a long one. Short rails are usually mounted one above another. An
Ethernet cable connects the system bus between two rails. The Ethernet cable is connected to
the system bus on either side via an extension socket. The cable connects the right extension
socket, M-SO EXT 02, of the upper rail to the left extension socket, M-SO EXT 01, of the lower
rail.
Only use passive Ethernet cables to extend the system bus.
The maximum length of the Ethernet cable between two extension sockets is 100 m. An M45
system bus may be extended via Ethernet cable at no more than 10 places. The maximum
overall length of the Ethernet cables may be 1000 m.
Lay the Ethernet cables ensuring their adequate protection. They must not be run parallel to
power supply cables.
A power module must be used after the left extension socket on each rail.
3.3 Supply Voltage Monitoring
The HIMatrix system is a single voltage system. In accordance with IEC/EN 61131-2, the
required supply voltage is defined as follows:
Supply voltage
Nominal value
24 VDC, -15...+20 %
20.4...28.8 V
Max. permissible function limits in
continuous operation
18.5...30.2 V
(including ripple)
Permissible ripple
r < 5 % as r.m.s. value
rPP < 15 % as value peak-to-peak
Ground
L- (negative pole)
Earthing the ground is permitted, see Chapter
Earthing.
Table 10: Supply Voltage
The power supply units of HIMatrix systems must comply with the SELV (Safety Extra Low
Voltage) or PELV (Protective Extra Low Voltage) requirements. At the power supply units'
outputs, a maximum overvoltage of 35 V may occur in case of fault.
Observing the permitted voltage limits guarantees the system's proper operation.
The required SELV/PELV power supply units ensure safe operation.
The device monitors the 24 VDC voltage during operation. Reactions occur in accordance with
the specified voltage level:
Voltage level
Reaction of the device
19.3...28.8 V
Normal operation
< 18.0 V
Alarm states (internal variables are written and provided to the inputs or
outputs)
< 12.0 V
Switching off the inputs and outputs
Table 11: Operating Voltage Monitoring
The Power Supply State system variable is used to evaluate the operating voltage state with the
programming tool or from within the user program.

System Manual M45 3 Product Description
HI 800 651 E Rev. 1.01 Page 19 of 80
3.4 Monitoring the Temperature State
One or multiple sensors are used to measure the temperature at relevant positions within the
module.
If the measured temperature exceeds the defined temperature threshold, the value of the
Temperature State system variable changes as follows:
Temperature
Temperature range
Temperature State [BYTE]
< 60 °C
Normal
0x00
60 °C…70 °C
High temperature
0x01
> 70 °C
Very high temperature
0x03
Back to 64 °C...54 °C 1)
High temperature
0x01
Back to < 54 °C 1)
Normal
0x00
1) The hysteresis of sensors is 6 °C.
Table 12: Temperature Monitoring
If no or insufficient air circulates within a control cabinet and natural convection is not enough,
the threshold associated with High Temperature in the HIMatrix M45 controller can already be
exceeded at ambient temperatures of less than 35 °C.
This can be due to local heating or to a bad heat conduction. In particular with digital outputs,
the heat levels strongly depend on their load.
The Temperature State system variable allows the user program to read the temperature. If the
state Very high temperature often occurs, HIMA recommends improving the system heat
dissipation, e.g., by taking additional ventilation or cooling measures, such that the long life time
of the HIMatrix systems can be maintained.
i
The safety of the system is not compromised if the state High Temperature or Very High
Temperature is entered.
3.4.1 Setting the Temperature Threshold for Messages
The temperature threshold that, if exceeded, causes a message to be issued can be defined for
the M45 system. In the SILworX Hardware Editor, use the detail view for the rack to configure
this setting.
3.5 Short-Circuit Reaction of Output Channels
If a short-circuit occurs in an output channel, the HIMatrix automation systems switch off the
affected channel. If multiple short-circuits occur, the channels are switched off individually in
accordance with their current input.
If the maximum current permitted for all outputs is exceeded, all outputs are switched off and
cyclically switched on again.
i
The terminals for output circuits must be plugged without a load. If short-circuits are present,
the resulting high current may damage the terminals.
3.6 Alarms&Events Recording
The HIMatrix M45 system is able to record alarms and sequences of events (SOE).

3 Product Description System Manual M45
Page 20 of 80 HI 800 651 E Rev. 1.01
3.6.1 Alarms&Events
Events are state changes of a variable that are performed by the plant or controller, and are
provided with a timestamp.
Alarms are events that signalize increased risk potential.
The HIMatrix system records the state changes as events specifying the time point when they
occurred. The X-OPC server transfers the events to other systems such as control systems that
display or evaluate the events.
HIMatrix differentiates between Boolean and scalar events.
Boolean events:
Changes of Boolean variables, e.g., of digital inputs.
Alarm and normal state: They can be arbitrarily assigned to the variable states.
Scalar events:
Crossing the upper and lower limit values defined for a scalar variable.
Scalar variables have a numeric data type, e.g., INT, REAL.
Two upper limits and two lower limits are possible.
The following condition must be met for the limits:
Highest limit (HH) ≥ high limit (H) ≥ normal range ≥ low limit (L) ≥ lowest limit (LL).
A hysteresis can be effective in the following cases:
-If the value falls below one of the upper limits.
-If the value exceeds one of the lower limit.
A hysteresis is defined to avoid a needless large number of events when a global variable
strongly oscillate around a limit.
HIMatrix M45 can only create events if they are configured in SILworX, see Chapter 7.8. Up to
4 000 alarms and events can be defined.
3.6.2 Creating Events
The processor system is able to create events.
The processor system uses global variables to create the events and stores them in the buffer,
see Chapter 3.6.3. The events are created in the user program cycle.
Every event that has been read can be overwritten by a new event.
System Events
In addition to events, which records changes of global variables or input signals, processor
systems create the following types of system events:
Overflow: Some events were not stored due to buffer overflow. The timestamp of the
overflow event corresponds to that of the event causing the overflow.
Init: The event buffer was initialized.
System events contain the SRS identifier of the device causing the events.
Status Variables
Status variables provide the user program with the state of scalar events. Each of the following
states is connected to a status variable and can be assigned a global variable of type BOOL:
Normal.
Low limit (L) exceeded.
Lowest limit (LL) exceeded.
High limit (H) exceeded.
Highest limit (HH) exceeded.
The assigned status variable becomes TRUE when the corresponding state is achieved.