Welcome to the Industrial Automation website!

NameDescriptionContent
XING-Automation
E-mail  
Password  
  
Forgot password?
  Register
当前位置:

BECKHOFF CX9000/CX9010 Hardware Maintenance Guide

F: | Au:FANS | DA:2026-06-09 | 12 Br: | 🔊 点击朗读正文 ❚❚ | Share:

BECKHOFF CX9000/CX9010 Embedded PC: Complete Guide to On site Hardware Diagnosis and Maintenance

In the field of industrial automation, Beckhoff's CX9000 and CX9010 series embedded controllers are widely used in PLC and motion control tasks due to their compact design, fanless operation, and powerful Intel XScale technology. However, like all industrial hardware, field engineers inevitably encounter startup failures, bus errors, or the need to perform system recovery during the device lifecycle.

This document aims to provide engineers with an in-depth maintenance and troubleshooting manual for the CX9000/CX9010 hardware platform. The content is entirely based on official hardware documentation, focusing on practical operational scenarios, covering the entire process from DIP switch recovery function, precise interpretation of LED status lights, K-Bus diagnostic code analysis, to battery replacement and system image updates.


Hardware Initial State Recovery: The Four Major Functions of DIP Switches

When the system encounters serious errors, such as configuration file corruption or registry exceptions, conventional operations cannot solve them. At this point, the DIP switch located inside the battery compartment is crucial for performing hardware level recovery. The switch group is located in the battery compartment between the two Ethernet ports on the front of the device, and all switches are in the "OFF" (downward) state during normal operation.

Before performing any DIP switch operation, the CX90x0 system must be powered off. Use a small flat head screwdriver (recommended Beckhoff order number ZB8700) to carefully turn the switch. The following are the specific functions and application scenarios of the four independent switches:

Switch 1: Restore factory settings

Operation steps:

Turn DIP switch 1 to the "ON" position.

Power on the CX system again and wait for the system to fully start.

After system startup, the registry will be forcibly regenerated and restored to its default state.

Turn off the power, turn switch 1 back to the "OFF" position, and close the compartment cover.

Application scenario: Used when the system cannot start properly due to incorrect registry modifications or software configuration.

Switch 2: Output debugging information

Operation steps:

Turn DIP switch 2 to the "ON" position.

Connect a serial monitoring device (such as a terminal or printer) through the COM1 port, and set the communication parameters to 38400 baud rate, 8-bit data bits, no checksum, and 1-bit stop bit.

To power on the system, debugging information will be output in real-time to the monitoring device.

After the diagnosis is completed, power off and reset switch 2.

Application scenario: Used for deep analysis of the underlying hardware or boot loader status during the system startup process, to locate startup freeze issues.

Switch 3: Enter BootStrap mode (for image updates)

Operation steps: This operation is used for updating system images, and the detailed steps will be explained in Section 4 of this article. In short, turn switch 3 to "ON" and start, and the system will search for the mirror server through the network.

Application scenario: Used when the operating system files are damaged or when a complete reinstallation of the Windows CE system is required.

Switch 4: Force TwinCAT into "Configuration Mode"

Operation steps:

When the startup project of TwinCAT contains incorrect logic, causing the system to loop errors, turn DIP switch 4 to "ON".

Power on and restart the system. At this point, TwinCAT will not automatically run the wrong startup project, but will remain in 'Config Mode'.

Connect programming devices, correct PLC projects or change settings.

After completion, power off and reset switch 4.

Application scenario: Used to solve problems where the controller cannot connect properly or restarts frequently due to incorrect PLC startup projects.

State analysis without diagnostic tools: in-depth interpretation of LED indicator lights

When programming software is not connected, the LED indicator on the front panel of CX9000/CX9010 is the most intuitive basis for judging the health status of the system. The meaning of LED varies depending on whether the I/O system you are using is K-Bus (Bus Terminal Module) or E-Bus (EtherCAT Terminal Module).

2.1 For E-Bus version (EtherCAT terminal)

PWR (Power/System Status)

Red constantly on: TwinCAT is in STOP mode.

Green constantly on: TwinCAT is in RUN mode (normal automation operation state).

Blue constantly on: TwinCAT is in CONFIG mode.

Extinguish: The system is offline.

LAN 1 / LAN 2

Green: Indicates the link/activity status of the corresponding RJ45 port.

L/A (Link/Activity)

Flashing: Indicates data traffic on the E-Bus (EtherCAT bus).

HDD (or Flash Access)

Red: Indicates that the Compact Flash card is being read or written (if the module is configured).

2.2 For K-Bus version (bus terminal module)

This version has added a key 'K-Bus' LED for diagnosing terminal module buses. The meaning of its status is as follows:

Extinguished: K-Bus is not activated (possibly not connected to any bus terminals or with abnormal power supply).

Green flashing: K-Bus is running normally and there is data communication.

Red flashing (with specific code): indicates a bus error has occurred. The error type is transmitted through flashing encoding, which is the core means of on-site hardware fault location.

K-Bus Red LED Flashing Code Diagnosis Table

When engineers see the red LED flashing, they need to observe its flashing sequence. The error starts with a 'fast flashing', followed by a 'slow sequence' representing the error code, and then a 'slow sequence' representing the error parameter.

Error code (number of pulses) Error parameter (number of pulses) Description and solution

Continuous illumination/irregular flashing - EMC issue: Check for overvoltage or undervoltage spikes in the power supply and implement EMC corrective measures. Power outage and restart may temporarily restore.

1 pulse 0 EEPROM checksum error: Factory settings need to be restored.

1. Code buffer overflow: Too many bus terminals have been inserted, exceeding the capacity of the configuration table.

2 Unknown data type: Need to update the firmware or software of the power module.

2 pulse 0 programming configuration errors: Check if the K-Bus configuration in the project is correct.

N (n>0) Terminal n configuration mismatch: The actual inserted nth terminal does not match the model in the software configuration.

3 pulses - K-Bus command error: Bus terminal not inserted, or one of the bus terminal hardware is damaged. The "splitting method" can be used for troubleshooting, gradually reducing the number of terminals until the fault point is located.

4 pulse 0 K-Bus data interruptions (immediately interrupted after power module).

Data interruption occurs after the nth terminal: Check if the (n+1) th terminal is securely connected or replace it. Simultaneously confirm whether the terminal terminal (KL9010) has been installed correctly.

Communication error between pulse n and the register of terminal n for 5 times: the bus terminal needs to be replaced.

9 pulse 0 Flash program checksum error: Factory reset.

The configuration of the startup project does not match the current terminal: restore the factory settings to clear the startup project.

The format of the nth terminal of the 14th pulse is incorrect: restart the power supply. If the error persists, replace the terminal.

15 pulses with incorrect number of n terminals: restart the power supply.

16 pulse n K-Bus data length error: Restart the power supply.

Note: For some serious errors, even after troubleshooting, the system may not automatically exit the flashing sequence. At this point, the power supply must be completely disconnected and reconnected to complete the hard restart.


Regular maintenance and hardware replacement

3.1 Battery replacement (every 5 years)

The CX9000/CX9010 comes with a built-in battery for maintaining real-time clock (RTC), model Panasonic CR2032 (3.0V, 225mAh). To prevent time and date loss, it is recommended to replace it every 5 years. When operating, it is necessary to use the same model of battery (Sanyo or Panasonic CR2032), as using other models may pose a risk of fire or explosion.

Replacement steps:

System power outage.

Carefully pry open the battery compartment cover between the two Ethernet ports on the front of the device using a screwdriver.

Remove the old battery and replace it with a new one, paying attention to the direction of the positive and negative poles.

Close the compartment lid.

Environmental requirements: Used batteries must be recycled in accordance with national electronic waste regulations and must not be discarded at will.

3.2 Mechanical installation and heat dissipation requirements

Correct mechanical installation is a prerequisite for ensuring long-term stable operation of CX9000/CX9010 at rated temperatures (0 ° C...+50 ° C).

Installation position: It must be installed vertically, so that the ventilation holes at both ends of the shell form vertical air ducts, utilizing natural convection for heat dissipation. It is strictly prohibited to install horizontally or upside down, otherwise it may cause heat accumulation.

Minimum spacing: To ensure smooth ventilation, a minimum clearance of 30mm must be maintained above and below the CX90x0 module combination.

Installation steps:

Before installation, pull down the white tension lock at the bottom of the module.

Attach the module to the standard DIN rail (top cap rail) and press firmly until you hear a "click" sound.

Push the white lock buckle back to its original position to lock the module.

Advanced Recovery: Operating System Image Update

When the operating system is damaged or needs to be upgraded, it is necessary to re burn the system image through "BootStrap mode". This process is divided into three steps: selecting the correct image, burning, and copying files.

4.1 Prepare image files

Download the corresponding file from the official Beckhoff FTP server (ftp. Beckhoff. de/Software/embPC Control/):

For CX9000: Go to the CX9000/CE/directory and download the CE5.0 (CX9000_CE500_LF_v226. zip) or CE6.0 (CX9000_CE600_LF_v312. zip) image as needed.

For CX9001/CX9010: Go to the CX90xx/CE/directory and download images such as CX90xx_CE600-HPS-v312zip.

4.2 Method 1: Update using interactive tools (applicable to devices with USB or network connections)

Copy the tool Cx9ImageUpdating. exe and image files to the Temp or Public directory of the CX device via USB drive, FTP, or CERHOST tool (these directories are located in RAM and do not consume Flash write life).

Run the tool on CX and enter the complete path of the image file.

Click on 'FLASH IMAGE' to confirm the warning message.

Wait for the progress bar to complete and display that the update is complete, then restart the device.

Key follow-up steps: After restarting, all old configuration files in the/Hard Disk directory need to be deleted, and the new configuration files in the image package need to be copied to/Hard Disk. Finally, restart again.

4.3 Method 2: Update using a mirror server (applicable to situations where the operating system cannot be started)

Prepare the host PC: Extract the image server toolkit and run the batch file (such as CxImgSrv-HMI. bat). The command line window displays' Waiting for download request... '.

Set CX target device:

Hardware method: Power off ->Open the battery compartment ->Turn DIP switch 3 to ON ->Power on again.

Software method: If the OS is still running, run a specific tool software restart to enter BootStrap mode.

Network connection: To ensure that only the target device is updated, it is recommended to use a dedicated network card or a crossover cable to directly connect the PC to CX to avoid interfering with other CX devices in the company network. You can also add the IP address of the PC in the batch file to force CX to request a mirror from that address.

Update execution: After CX is powered on, it will actively request a mirror from the server. Observe the command line output on the PC and confirm that the 'boot. bin' file transfer is successful. The HDD LED on CX will light up, indicating that a new image is being erased and written.

Completion: After the transfer is complete, close the command line window and make sure to turn the CX DIP switch 3 back to OFF, then close the battery compartment cover and restart the system.


Serial interface configuration (for CX90x0-N031 module)

If your system is equipped with CX90x0-N031 (RS422/RS485 interface module), it is crucial to correctly set the DIP switch on the side of the module. These switches are located under the gray cover on the left side of the module.

Common configuration examples:

RS485 has no echo, terminal resistance enabled (endpoint device): switch 1=OFF, 2=ON, 3=ON, 4=OFF, 5=ON, 6=OFF, 7=ON, 8=ON.

RS422 full duplex point-to-point: switch 1=ON, 2=OFF, 3=OFF, 4=ON, 5=OFF, 6=ON, 7=ON, 8=ON.

Note: Modifying these switch settings must be done after the system is powered off. This module cannot be used simultaneously with CX90x0-N030 (RS232 module).

  • Mitsubishi MELSEC A2ASCPU PLC System
  • PC PMC25.2-002 PLC Module
  • B&R X20CP1382 Programmable Controller
  • Siemens C98043-A7002-L4 PC Board
  • Fanuc A16B-3300-0057 PCB Board
  • Schneider LV430403 Circuit Breaker TM160D
  • ABB CI810B 3BSE020520R1 PLC Interface
  • Omron R88D-HT10 Servo Drive
  • Omron CS1G-CPU43H CPU Unit
  • Mitsubishi QD70D4 Positioning Module
  • Siemens 6FC5110-0BB04-0AA1 Sinumerik 840C CPU
  • Siemens 3RT5045-1AC20 SIRIUS Contactor 75kW
  • Siemens 3VA2340-5HL32-0AA0 Circuit Breaker 400A
  • ABB HBS01-CJC I/O MTUS SD Series Module
  • Eberle MT42 Complete PLC Rack PLS514
  • Siemens C8451-A201-A9 PLC Card Slot Backplane
  • Cherokee ACX643 REV-B Power Supply Unit 100-240VAC
  • Schneider SSD1A320BDC1 Solid State Relay 20A
  • GE Fanuc IC694APU300 High Speed Counter Module
  • Schneider 140DA175300 Analog Output Module
  • Allen Bradley 1794-OA8I FLEX 8-Point Digital Output Module
  • Phoenix Contact PLC-BPT-24DC/1/SEN Solid State Relay Module
  • Schneider IG2000PG2 PLC Module Industrial Controller Card
  • Mitsubishi LE-40MTA-E Tension Controller Web Handling Control
  • Siemens 6FX1122-1AC02 PLC Card Industrial Interface Module
  • ABB AF210-30-11 Contactor Coil Voltage 110-240VAC
  • Mitsubishi GT2508-VTBD GT2508-VTBA HMI Touch Screen Panel
  • BPT 67200020 Touch Screen PLC Display Multifunction Terminal 50Hz
  • NORIS A1-91 PCB Rack Module A1-91-4 A1-91-5 A1-91-6 A1-91-7
  • Mitsubishi A1S61PN Power Supply Unit AnS Series 5VDC 5A
  • Pilz 312070AA PSSU H PLC1 FS SN SD Safety Module
  • Pasaban MTC-3044 PLC Rack with Power Supply Card
  • Schneider METSEPM8243 Power Meter PM800
  • Fanuc A16B-1212-0100-01 Power Supply Unit
  • Honeywell DPCB21010002 PCB IRTP-161 REV A
  • Siemens 6ES7315-2AH14-0AB0 CPU 315-2 DP
  • Omron GRT1-DA2V Analog Output Module 2 Channels
  • Mitsubishi FX3U-128MT/ESS PLC CPU Module
  • Schneider SSP05EMA12 Soft Starter Altistart 22
  • Mushroom 787602 Push Button Head 40mm
  • Hydraulik Elektronik EPM8900 91221 Proportional Module
  • ABB XZ C828 A101 Didt Dioder Snubber 3BHE039453R0101
  • ABB 3BHE032593R0001 Isolated Power Supply
  • ABB 3BHB02722R0001 single-phase charging transformer
  • ABB 3BHE006412R0101 UFC762AE101 main control board
  • ABB XVC770BE101 3BHE021083R0101 interface board
  • ABB 3BHE024747R0101 GD C801 Overvoltage Protection Motherboard
  • ABB 3BHE021887R0101 3BHB002751R0102 Variable Frequency Control Board
  • ABB SD812 power module 3BSC610023R0001
  • Automotive LC4A00010 Brushless Motor Controller
  • Doric NC500 Neuroscience Data Acquisition System
  • Honeywell X-DCS2000/EN Broadcast Manager
  • Kollmorgen S60600 servo drive 6A 480V
  • Honeywell 30751044-008 ROM Card
  • Honeywell 5SE1-12 Micro Switch Specifications
  • Schneider AS-BDAU-204 Analog Output Module
  • K93712 Expansion Kit Industrial Module
  • MGE DCHEN 3400116300 Circuit Board
  • Siemens 6SE7036-1EE85-1HA0 Rectifier Board
  • Renesas UPD70F3624GBA1 Microcontroller
  • Omron E5AC-CX4A5M-014 Temperature Controller Parameters
  • GE IS200TBCIH1BCE Contact Input Board
  • Fanuc A05B-2255-C101#EAW Teach Pendant Data
  • Rieter RMC186C RMC RIO-1 PLC Controller
  • Siemens PXC24.2-EF32.A Building Automation Controller
  • Fanuc A16B-1200-0220 PC Memory Board F3
  • Omron CJ2M-CPU33 PLC CPU Module
  • Beckhoff EL1918 Safety Input Terminal EtherCAT
  • Fanuc A16B-1212-0871 CNC PCB Board
  • GE Fanuc IC697BEM713J PLC Module
  • Mitsubishi A2ACPU-R21 PLC CPU Module
  • Programmable Relay 230V AC 16 Inputs 8 Outputs T2UK
  • Schneider F3SP71-4S Safety PLC Module
  • NEED-24DC- T2UK Programmable Relay 24V 16in 8out
  • Siemens 3RT1075-6SP36 SIRIUS Power Contactor 200kW
  • GE 1C31170G02 Printed Circuit Board Module 94V-0
  • BPT 67200020 Multifunction Touch Terminal 50Hz
  • Fanuc A16B-2200-0931 Option Board with Daughter Cards
  • Honeywell FC-SDOL-0424 I/O Module Board
  • Lenze EMF2179IB DeviceNet Communication Module
  • Yaskawa CIMR-JC4A0007BAA J1000 VFD 0.4kW
  • Yokogawa PSBCMNBN Bus Continuation Module ProSafe-PLC
  • Phoenix Contact PLC-BPT-24DC/1/SEN Solid-State Relay
  • Allen-Bradley 193-EC2AB E3 Plus Overload Relay
  • GE DS200TCTGG1AFF Turbine Control Board
  • Westinghouse 1C31170G02 Ovation Module
  • Mitsubishi A2ACPU21 Programmable Controller Review
  • 710-95045-AD PLC I/O Operation Console Cable
  • Allen-Bradley 1785-L11B PLC-5 Processor Specifications
  • BEMAC UST-202-D 1307D V08B2 Circuit Board
  • Pilz 312070 PSSu H PLC1 FS Safety Module
  • Keyence QS-MB1 Safety Network Module Overview
  • GE Fanuc IC693CPU372 CPU Module 90-30 Series
  • Mitsubishi RJ71EIP91 EtherNet/IP Module
  • Schneider LXM62DD27D21000 Lexium 62 Servo Drive
  • Mitsubishi Q13UDEHCPU Universal PLC CPU Module
  • B&R X20CP3585 Programmable Controller X20 CPU
  • Siemens 6FC5203-0AF02-0AA0 Sinumerik Operator Panel
  • IWKA PG02 VKR TEL-Z Self-Sufficient Measuring System
  • Schneider BMXCPS2010 PLC Power Supply Modicon M340
  • Mitsubishi A171SCPU Motion Servo CPU Specifications
  • PLC Board with Finder 44.52 Relay Module 6A 250V
  • Honeywell DOP 09436601 Measurex Module Data
  • Fanuc A20B-8101-0320 CNC Circuit Board
  • KUAX 680I V.24 PLC Module 68142304
  • Allen Bradley 1785-L30B PLC 5/30 Processor
  • Phoenix ILC 191 ETH 2TX 2700976 Ethernet Controller
  • Siemens 6SY7000-0AC80 PLC Power Supply Module
  • Reliance Electric MACS 804.46.20 CWW PLC Drive
  • Omron CP1E-N60DR-D PLC CPU 36 Input 24 Output
  • Mitsubishi Melsec PLC System A2ACPU A63P AY13E AX82
  • Square D PAF361600DC1680 2000A Circuit Breaker
  • MERLIN GERIN STR 58U 5000A Electronic Trip Unit
  • Omron CJ1W-SCU21-V1 Serial Communication Unit
  • SICK S30A-6011EA S3000 Safety Laser Scanner
  • Mitsubishi Q00JCPU-S8 Universal Programmable Controller
  • Allen-Bradley 20AB9P6C3AYNANC0 PowerFlex 70 AC Drive
  • SYSMELEC Handheld Robot Automation Controller
  • LG Display LB315WRM-SVA1 32 Inch 4K LCD Panel
  • Mitsubishi Kakoki E Series PLC I/O Modules
  • Allen-Bradley 1440-VST02-01RA Dynamic Measurement Module
  • Beckhoff EL5042 EtherCAT Encoder Terminal
  • Beckhoff CX5010-0112 Embedded PC Controller
  • Guardmaster 440R-D22R2 Safety Relay Specifications
  • NL12880BC20-10ND Industrial Display Panel Data
  • LFI 12X5326-S1 Slide-in Control Board Technical Data
  • Modicon AS-9370-001 Programmable Controller Data
  • Mitsubishi Kakoki E-01B-4130 PLC Module Overview