HIMA HIMatrix F35 Manual Safety-Related Controller

HIMA HIMatrix F35 Manual Safety-Related Controller

Product Overview

1. Core positioning and certification

HIMatrix F35 is a high safety compact programmable electronic controller launched by HIMA, designed specifically for industrial automation safety control scenarios. It can replace traditional decentralized relay circuits and is suitable for safety related functions such as emergency shutdown, process protection, and equipment interlocking. This controller has been certified by T Ü V and supports up to SIL 3 safety level (compliant with IEC 61508, IEC 61511, IEC 62061 standards). It also meets safety specifications such as EN 954-1 Cat.4 and EN ISO 13849-1 PL e, and is suitable for Zone 2 hazardous environments (compliant with EC Directive 94/9/EG ATEX directive). Some models can be used in underwater scenarios (compliant with ISO 13628-6 standard).

2. Model variants and environmental adaptation

The controller offers 6 variants, each adapted to different programming tools and usage environments, with the following core differences:

Model Programming Tool Operating Temperature Special Design Applicable Scenarios

F35 01 ELOP II Factory 0~60 ℃ Standard Metal Shell Conventional Industrial Environment

F35 011 (-20 ℃) ELOP II Factory -20~60 ℃ Electronic components coated with protective paint Low temperature industrial environment

F35 012 (Subsea/-20 ℃) ELOP II Factory -20~60 ℃ V2A stainless steel shell, impact and vibration resistant subsea production control system

F35 01 SILworX SILworX 0~60 ℃ Standard Metal Shell Conventional Industrial Environment (OS ≥ 7 version)

F35 011 SILworX (-20 ℃) SILworX -20~60 ℃ Electronic components coated with protective paint Low temperature industrial environment (OS ≥ 7 version)

F35 012 SILworX (Subsea/-20 ℃) SILworX -20~60 ℃ V2A stainless steel shell, impact and vibration resistant subsea production control system (OS ≥ 7 version)

3. Physical and Electrical Basic Parameters

Protection level: IP20 (standard), Zone 2 environment needs to be equipped with a protective shell of IP54 or above;

Power supply requirements: 24VDC (-15%~+20%), in compliance with SELV/PELV safety standards, external 10A delay fuse needs to be connected in series;

Power consumption: 15-29W (varying with output load);

Physical dimensions: width 257mm x height 114mm x depth 97mm (excluding plug);

Weight: The standard model weighs about 1.2kg, while the subsea model weighs about 1.7kg;

Storage temperature: -40~+85 ℃, altitude<2000m, pollution level II (compliant with IEC/EN 61131-2).

Hardware configuration and functional details

1. Core configuration of input/output/counter

(1) Digital input (24 channels)

Electrical characteristics: Non isolated, current absorption logic, 24V type 1 (compliant with IEC 61131-2);

Voltage range: 0~30V, default low level<7V, high level>13V, threshold can be customized through system parameters;

Current parameters: approximately 3.5mA at 24V, approximately 4.5mA at 30V, input resistance<7k Ω;

Overload protection: -10V~+35V overvoltage protection;

Wiring and power supply: divided into 3 groups (8 channels per group), each group is powered by independent LS+(24V), supporting passive mechanical contacts and active signal source connections, with a maximum wiring distance of 300m;

Safety feature: Following the principle of "power-off tripping", a low-level safety state is output in case of a fault, and channel faults are fed back through ERROR CODE.

(2) Digital output (8 channels)

Load capacity: Channels 1-3/5-7（ 0.5A@60 ℃), channel 4/8（ 1A@60 ℃ 2A@50 ℃), minimum load 2mA/channel;

Electrical characteristics: Non isolated, common ground (L -) design, output voltage of L+minus 2V, maximum internal voltage drop of 2W (at 2A), leakage current ≤ 1mA (at low level);

Overload protection: Automatic power-off in case of single channel overload, and automatic restoration after fault relief; When the total current exceeds 7A, all outputs will be powered off and the cycle will retry;

Wiring requirements: The 1-pole switch output should be paired with the corresponding channel group's L-ground (2-pole connection), and it is recommended to parallel protect diodes for inductive loads;

Safety feature: When a module or channel fails, the output switches to a power-off safety state and activates the FAULT LED indicator light.

(3) Analog input (8 channels)

Measurement range: Unipolar 0~10V voltage (12 bit resolution), 0~20mA current (requires external Z7301/Z7302 shunt adapter);

Accuracy indicators: Measurement accuracy at 25 ℃ ± 0.1% full range, full temperature range ± 0.5% full range, safety related accuracy ± 2% full range;

Electrical characteristics: Input resistance of 1M Ω, internal resistance of signal source ≤ 500 Ω, sampling time of about 45 μ s, measurement value refreshed once per controller cycle;

Power supply and wiring: Each channel is equipped with a 24~28V, ≤ 46mA short-circuit protection transmitter power supply, which requires the use of shielded twisted pair cables (up to 300m in length), with the shielding layer grounded at one end (controller side). Unused channels need to be short circuited;

Extended function: Short circuit/open circuit monitoring of digital output can be achieved through external resistors and voltage regulators (compliant with SIL 3 requirements).

(4) Counter (2 independent channels)

Electrical characteristics: Non isolated, supports 5V/24V input voltage (configured through system parameters), input current 1.4mA (5V)/6.5mA (24V), input impedance 3.7k Ω;

Performance parameters: 24 bit resolution, maximum count value 16777215, minimum pulse width 5 μ s, maximum input frequency 100kHz (5V/24V), trigger edge as falling edge, pulse duty cycle 1:1;

Working mode: Supports 3 modes - ① Direction controllable counting (input B controls increase or decrease); ② Fixed direction counting (user program controls increase or decrease); ③ Gray code decoding (compatible with 3-bit absolute rotary encoder);

Wiring requirements: Each channel contains 3 inputs: A (counting input), B (direction/bit 1), and Z (reset/bit 2), with a maximum wiring distance of 500m, and both ends of the shielded twisted pair are grounded.

2. Communication interface configuration

(1) Ethernet interface (4 RJ-45 ports)

Transmission characteristics: Supports 10/100Base-T, half duplex/full duplex automatic negotiation, Auto Crossover automatic adaptation to cable types;

Protocol support: Safety related protocols (safeEthernet), non safety protocols (Modbus TCP, OPC, SNTP, TCP-SR), EtherNet/IP only supports ELOP II Factory;

Port allocation: UDP ports (8000 for programming tools, 8001/ELOP II Factory remote I/O configuration, 8004/SILworX remote I/O configuration, 502/Modbus), TCP ports (502/Modbus, 44818/EtherNet/IP);

Hardware features: Integrated switch, MAC address fixed (pasted above the port), IP address and subnet mask can be freely configured (default IP: 192.168.0.99).

(2) Fieldbus interface (3 9-pin D-sub connectors)

Interface support module compatible protocol core usage

FB1 PROFIBUS master/slave, RS485/RS232/RS422, INTERBUS master PROFIBUS DP, Modbus, ComUserTask master fieldbus communication

FB2 communicates with FB1 via redundant or backup fieldbus

FB3 fixed RS485 Modbus (master/slave), ComUserTask auxiliary fieldbus communication

3. Other hardware functions

LED indicator lights: including power light (24VDC green), system light (RUN/RROR/ROG/FORCE/AULT, etc.), communication light (Ethernet/fieldbus status), I/O light (independent indication for each channel), all LEDs light up synchronously during boot;

Reset button: located in the upper left corner of the casing, it needs to be long pressed with an insulating pin for 20 seconds and restarted to activate the controller. After resetting, the IP address (default 60000.0.0) and system ID will be restored to default, only valid for administrator accounts;

Hardware clock: Built in gold capacitor, can maintain the clock for about one week after power failure;

ESD protection: It is necessary to wear an anti-static wristband for operation, and store it in its original packaging when idle.

Software Programming and Configuration

1. Adaptation of programming tools

SILworX: Suitable for processor OS version ≥ 7, communication OS ≥ 12, supports hardware parameter configuration, variable mapping, fault code reading, project files are not compatible with ELOP II Factory;

ELOP II Factory: Suitable for processor OS version<7, communication OS<12, supports signal editing, channel assignment, protocol configuration, can be used to upgrade OS to version 7 and above, and later switch to SILworX.

2. Core configuration functions

(1) Variable and parameter configuration

Digital input: configurable channel enabled (Used), Hysteresis LOW/HIGH threshold, read analog values (0~3000 corresponds to 0~30V) and fault codes;

Digital output: Configure output values (BOOL type, 1=energized/0=de energized), read channel and module fault codes;

Analog input: Select resolution (FS1000:0~1000/0~10V; FS2000:0~2000/0~10V), configure channel enable, read measurement values and fault codes;

Counter: Configure input voltage (5V/24V), working mode, counting direction, reset mode, read count value, timestamp, overflow status, and fault code.

(2) Fault code system

The controller outputs fault codes through system variables, supporting channel level and module level fault localization. The core fault codes have the following meanings:

Digital input faults: 0x01 (module fault), 0x04 (A/D converter fault), 0x08 (measurement value exceeding safety accuracy), etc;

Digital output faults: 0x02 (overload power-off), 0x04 (output value read back error), 0x200 (total current exceeding limit), etc;

Analog input faults: 0x04 (A/D conversion fault), 0x08 (measurement value exceeds safety accuracy), 0x20 (channel not enabled), etc;

Counter malfunction: 0x02 (incorrect comparison of count values), 0x04 (incorrect comparison of timestamps), 0x08 (incorrect parameter settings), etc.

(3) Wiring variant configuration

Analog input connected to mechanical contacts: Z7308 shunt adapter (overvoltage protection) is required, with a supply voltage of 26.7~27.3V, switching threshold: L → H=6V (1200 digits), H → L=3V (600 digits), fault threshold ≤ 0.5V or ≥ 8.4V;

Digital input connected to mechanical contacts: 3 independent supplies (16.7~26.9V), each requiring 1 digital input to monitor the supply voltage. Switching threshold: L → H>12V, H → L<10V, fault threshold<2V or=supply 1.1V.

Installation and Startup

1. Installation requirements

Installation method: Standard 35mm DIN rail installation, submarine type (F35 012 series) mounting plate fixation;

Additional requirements for Zone 2 environment: ① Installed in a protective enclosure above IP54, with the enclosure labeled "Operable only in power-off state"; ② The shell needs to meet the heat dissipation requirements (15-29W); ③ The power supply is 24VDC PELV/SELV type; ④ The wiring complies with DIN EN 60079-15/14 standard;

Wiring specifications: Shielded twisted pair cables are required for digital input/output/counter/analog input, and wiring should be done according to the terminal definition (see Tables 33-36 for details). The shielding layer should be single ended (controller side) or grounded at both ends (counter).

2. Start the process

Hardware installation and wiring: confirm power polarity, shield grounding, and terminal fastening;

Programming tool connection: Connect PADT (PC+programming tool) through Ethernet port, configure IP address (default 192.168.0.99);

Project configuration: Load or create a project, configure I/O channels, counter modes, communication protocols, and fault response logic;

Download and Start: Download the configuration to the controller, set the module mode to Run, perform a cold start, and the controller enters the RUN state (LED indicator light RUN is always on);

Troubleshooting: If the startup fails, locate the problem (such as configuration mismatch, wiring error) through LED status and programming tool diagnostic logs.

Operation and maintenance

1. Running operation

No manual intervention is required during normal operation, and the status is monitored through LED indicator lights and programming tools;

Forcing: Supports global/local forcing, requires authorization activation, can set time limits, and automatically resets after restart;

Diagnostic function: Read diagnostic logs (including fault time, type, and channel) through SILworX/ELOP II Factory, supporting fault filtering and export.

2. Maintenance points

Regular maintenance: The analog input module is calibrated every 10 years, and the fan (if any) is replaced regularly;

Fault handling: When the OS version ≥ 6.42 fails, it will automatically restart. If the fault is repeated within 1 minute, it will enter the STOP_INVALID state (output power loss); OS<6.42 version directly enters the ERROR STOP state;

Operating system upgrade: Load the new version of OS through programming tools, and place the controller in STOP state before upgrading;

Replacement and scrapping: When a module fails, it needs to be replaced as a whole (only repairable by the manufacturer), and scrapping must comply with environmental requirements. A disposal agreement can be signed with HIMA.

Applicable scenarios and core advantages

1. Typical applications

Safety interlock systems for industries such as petrochemicals, electricity, pharmaceuticals, and automobile manufacturing;

Emergency shutdown (ESD), equipment safety door monitoring, safety light curtain linkage, pressure/temperature over limit protection;

Safety control in Zone 2 hazardous environments (such as gas stations and chemical workshops);

Equipment control for underwater production platforms (F35 012 series).

2. Core advantages

High integration: Compact design integrates 24DI+8DO+2 counters+8AI, saving installation space;

High safety: SIL 3 certification, automatically switches to a safe state in case of failure, supports channel level fault diagnosis;

Environmental adaptability: covering a temperature range of 0-60 ℃/(-20~60 ℃), suitable for conventional/low temperature/underwater/hazardous environments;

Flexible expansion: support multiple communication protocols and wiring variants, and adapt to different sensor/actuator types.