The HIMA X-AO1601 is a safety-certified Analog Output (AO) module for the HIMax series of Safety Instrumented Systems (SIS). It is used to generate precise, continuous current signals to control modulating field devices, enabling safety-related control functions where continuous adjustment of a final element is required.
Safety regulations and environmental requirements
Core Security Guidelines
Module operation follows SELV/PELV standards, additional measures are required for Ex area use
ESD protection must be followed: only professional personnel should operate, there should be no static electricity in the work area, anti-static wristbands should be worn, and stored in the original packaging when idle
Residual risk sources: engineering failures, user program failures, wiring failures
Emergency requirement: When the controller fails, the system enters a safe state and operations that hinder safe operation are prohibited
Environmental parameter requirements
Specific scope of required types
Protection level IP20 (standard), Class III (IEC/EN 61131-2)
Temperature operation: 0...+60 ° C; Storage: -40...+85 ° C
Pollution Level II (IEC/EN 61131-2)
Altitude<2000 meters
Supply voltage 24 VDC
Core features and parameters of the product
Core functions and certification
Purpose: HIMax Programmable Electronic Systems (PES) dedicated analog output module
Output specifications: 16 analog outputs (single channel connection), 8 for redundant connections (only odd numbered channels AO1/AO3... AO15 are available)
Nominal range: 4... 20 mA, working range: 0... 23 mA
Safety certification: T Ü V certification, compliant with SIL 3 (IEC 61508, etc.), Cat. 4, PL e (EN ISO 13849-1) standards
Fault response: After detecting a fault, it enters a safe state within ≤ 16 ms, and the channel group is powered off (power loss trip principle)
Key parameters
Category specific parameters
General parameter power supply voltage: 24 VDC (-15...+20% fluctuation); Maximum current input 1.3 A; size 310 × 29.2 × 230 mm; weight ≈ 1.2 kg
Simulate output accuracy of ≤ ± 0.2% full scale at 25 ° C; Full temperature range ≤ ± 0.5% full scale; Temperature coefficient ≤± 0.05%/K
Load capacity: Ohmic load ≤ 600 Ω; Inductive load ≤ 1 mH; Capacitive load ≤ 100 µ F (parallel Ohmic load)
Response characteristic stability time 5 ms; open circuit threshold ≥ 18.5 V
hardware structure
Indicator lights: Module status (Run/Error/Stop/Init), system bus (A/B), I/O channel (AO1-16/Field) three types of LEDs, supporting fault visualization
Isolation design: Galvanically isolate between channels and between channels and power supply
Diagnostic function: Automatic detection of open circuit (OC), which can be evaluated in the user program
Supporting components and wiring specifications
Matching parts
Connector board: 4 models (X-CB 014 01-04), including screw terminal type, cable plug type, and redundant version, with mechanical coding to prevent accidental insertion
System cable: X-CA 011, specification LIYCY-TP 18 × 2 × 0.25 mm ², length 8/15/30 m optional, flame retardant and self extinguishing characteristics
wiring method
Single channel wiring: using X-CB 014 01/03 connector board
Redundant wiring (serial): Use X-CB 014 02/04, install modules adjacent to each other, and configure redundant groups in SILworX
Other methods: closed-loop control (AO and AI physically coupled), on-site terminal component (FTA) connection, HART communication parallel connection (2% error should be noted)
Installation, Configuration, and Operation
Installation operation
Installation of connector board: Insert the guide rail → Fix to the cable shielding rail → Tighten the captive screw (reverse operation for disassembly)
Module loading and unloading: supports live operation, open the fan bracket cover → clip in the hook guide → fix the screws (disassembly in reverse), the opening time does not exceed a few minutes
Idle output: Can be open circuited without termination, wiring is prohibited when the on-site side is open circuited (to prevent short circuits and sparks)
SILworX configuration
Configuration location: Hardware editor, including 3 types of tabs
Module tags: Set module name, noise suppression, global variable allocation (such as module status in DWORD)
I/O submodule tags: diagnostic request/response, background test errors, restart faults, and other parameters
Channel label: Set 4/20 mA mapping value, redundancy enable, channel status evaluation (such as OC detection)
Operation and Diagnosis
Operation: No specific monitoring is required, perform analog output forcing and other operations through PADT (SILworX programming and debugging tool)
Diagnostic method: Real time feedback status of LED indicator light; SILworX reads diagnostic history and supports module/submodule/channel three-level fault code analysis
Maintenance, discontinuation, and disposal
Maintenance requirements
Verification testing: once every 10 years (refer to HI 801 003 E Security Manual)
System update: Load the latest operating system during shutdown (modules need to be in STOP state)
Module replacement: The faulty module needs to be replaced with the same model or an authorized substitute model, which can only be repaired by the manufacturer
Suspension and transportation
Deactivation: Remove from substrate according to module disassembly specifications
Transportation: Store in original packaging to prevent mechanical damage and static electricity
Disposal standards
Responsible party: Industrial customers are responsible for compliance disposal
Optional solution: A disposal agreement can be signed with HIMA to ensure eco-friendly disposal





Email:wang@kongjiangauto.com