In the field of industrial automation, Beckhoff's CX9000 and CX9010 series embedded controllers are widely used in PLC and motion control tasks due to their compact design, fanless operation, and powerful Intel XScale technology. However, like all industrial hardware, field engineers inevitably encounter startup failures, bus errors, or the need to perform system recovery during the device lifecycle.
This document aims to provide engineers with an in-depth maintenance and troubleshooting manual for the CX9000/CX9010 hardware platform. The content is entirely based on official hardware documentation, focusing on practical operational scenarios, covering the entire process from DIP switch recovery function, precise interpretation of LED status lights, K-Bus diagnostic code analysis, to battery replacement and system image updates.
Hardware Initial State Recovery: The Four Major Functions of DIP Switches
When the system encounters serious errors, such as configuration file corruption or registry exceptions, conventional operations cannot solve them. At this point, the DIP switch located inside the battery compartment is crucial for performing hardware level recovery. The switch group is located in the battery compartment between the two Ethernet ports on the front of the device, and all switches are in the "OFF" (downward) state during normal operation.
Before performing any DIP switch operation, the CX90x0 system must be powered off. Use a small flat head screwdriver (recommended Beckhoff order number ZB8700) to carefully turn the switch. The following are the specific functions and application scenarios of the four independent switches:
Switch 1: Restore factory settings
Operation steps:
Turn DIP switch 1 to the "ON" position.
Power on the CX system again and wait for the system to fully start.
After system startup, the registry will be forcibly regenerated and restored to its default state.
Turn off the power, turn switch 1 back to the "OFF" position, and close the compartment cover.
Application scenario: Used when the system cannot start properly due to incorrect registry modifications or software configuration.
Switch 2: Output debugging information
Operation steps:
Turn DIP switch 2 to the "ON" position.
Connect a serial monitoring device (such as a terminal or printer) through the COM1 port, and set the communication parameters to 38400 baud rate, 8-bit data bits, no checksum, and 1-bit stop bit.
To power on the system, debugging information will be output in real-time to the monitoring device.
After the diagnosis is completed, power off and reset switch 2.
Application scenario: Used for deep analysis of the underlying hardware or boot loader status during the system startup process, to locate startup freeze issues.
Switch 3: Enter BootStrap mode (for image updates)
Operation steps: This operation is used for updating system images, and the detailed steps will be explained in Section 4 of this article. In short, turn switch 3 to "ON" and start, and the system will search for the mirror server through the network.
Application scenario: Used when the operating system files are damaged or when a complete reinstallation of the Windows CE system is required.
Switch 4: Force TwinCAT into "Configuration Mode"
Operation steps:
When the startup project of TwinCAT contains incorrect logic, causing the system to loop errors, turn DIP switch 4 to "ON".
Power on and restart the system. At this point, TwinCAT will not automatically run the wrong startup project, but will remain in 'Config Mode'.
Connect programming devices, correct PLC projects or change settings.
After completion, power off and reset switch 4.
Application scenario: Used to solve problems where the controller cannot connect properly or restarts frequently due to incorrect PLC startup projects.

State analysis without diagnostic tools: in-depth interpretation of LED indicator lights
When programming software is not connected, the LED indicator on the front panel of CX9000/CX9010 is the most intuitive basis for judging the health status of the system. The meaning of LED varies depending on whether the I/O system you are using is K-Bus (Bus Terminal Module) or E-Bus (EtherCAT Terminal Module).
2.1 For E-Bus version (EtherCAT terminal)
PWR (Power/System Status)
Red constantly on: TwinCAT is in STOP mode.
Green constantly on: TwinCAT is in RUN mode (normal automation operation state).
Blue constantly on: TwinCAT is in CONFIG mode.
Extinguish: The system is offline.
LAN 1 / LAN 2
Green: Indicates the link/activity status of the corresponding RJ45 port.
L/A (Link/Activity)
Flashing: Indicates data traffic on the E-Bus (EtherCAT bus).
HDD (or Flash Access)
Red: Indicates that the Compact Flash card is being read or written (if the module is configured).
2.2 For K-Bus version (bus terminal module)
This version has added a key 'K-Bus' LED for diagnosing terminal module buses. The meaning of its status is as follows:
Extinguished: K-Bus is not activated (possibly not connected to any bus terminals or with abnormal power supply).
Green flashing: K-Bus is running normally and there is data communication.
Red flashing (with specific code): indicates a bus error has occurred. The error type is transmitted through flashing encoding, which is the core means of on-site hardware fault location.
K-Bus Red LED Flashing Code Diagnosis Table
When engineers see the red LED flashing, they need to observe its flashing sequence. The error starts with a 'fast flashing', followed by a 'slow sequence' representing the error code, and then a 'slow sequence' representing the error parameter.
Error code (number of pulses) Error parameter (number of pulses) Description and solution
Continuous illumination/irregular flashing - EMC issue: Check for overvoltage or undervoltage spikes in the power supply and implement EMC corrective measures. Power outage and restart may temporarily restore.
1 pulse 0 EEPROM checksum error: Factory settings need to be restored.
1. Code buffer overflow: Too many bus terminals have been inserted, exceeding the capacity of the configuration table.
2 Unknown data type: Need to update the firmware or software of the power module.
2 pulse 0 programming configuration errors: Check if the K-Bus configuration in the project is correct.
N (n>0) Terminal n configuration mismatch: The actual inserted nth terminal does not match the model in the software configuration.
3 pulses - K-Bus command error: Bus terminal not inserted, or one of the bus terminal hardware is damaged. The "splitting method" can be used for troubleshooting, gradually reducing the number of terminals until the fault point is located.
4 pulse 0 K-Bus data interruptions (immediately interrupted after power module).
Data interruption occurs after the nth terminal: Check if the (n+1) th terminal is securely connected or replace it. Simultaneously confirm whether the terminal terminal (KL9010) has been installed correctly.
Communication error between pulse n and the register of terminal n for 5 times: the bus terminal needs to be replaced.
9 pulse 0 Flash program checksum error: Factory reset.
The configuration of the startup project does not match the current terminal: restore the factory settings to clear the startup project.
The format of the nth terminal of the 14th pulse is incorrect: restart the power supply. If the error persists, replace the terminal.
15 pulses with incorrect number of n terminals: restart the power supply.
16 pulse n K-Bus data length error: Restart the power supply.
Note: For some serious errors, even after troubleshooting, the system may not automatically exit the flashing sequence. At this point, the power supply must be completely disconnected and reconnected to complete the hard restart.
Regular maintenance and hardware replacement
3.1 Battery replacement (every 5 years)
The CX9000/CX9010 comes with a built-in battery for maintaining real-time clock (RTC), model Panasonic CR2032 (3.0V, 225mAh). To prevent time and date loss, it is recommended to replace it every 5 years. When operating, it is necessary to use the same model of battery (Sanyo or Panasonic CR2032), as using other models may pose a risk of fire or explosion.
Replacement steps:
System power outage.
Carefully pry open the battery compartment cover between the two Ethernet ports on the front of the device using a screwdriver.
Remove the old battery and replace it with a new one, paying attention to the direction of the positive and negative poles.
Close the compartment lid.
Environmental requirements: Used batteries must be recycled in accordance with national electronic waste regulations and must not be discarded at will.
3.2 Mechanical installation and heat dissipation requirements
Correct mechanical installation is a prerequisite for ensuring long-term stable operation of CX9000/CX9010 at rated temperatures (0 ° C...+50 ° C).
Installation position: It must be installed vertically, so that the ventilation holes at both ends of the shell form vertical air ducts, utilizing natural convection for heat dissipation. It is strictly prohibited to install horizontally or upside down, otherwise it may cause heat accumulation.
Minimum spacing: To ensure smooth ventilation, a minimum clearance of 30mm must be maintained above and below the CX90x0 module combination.
Installation steps:
Before installation, pull down the white tension lock at the bottom of the module.
Attach the module to the standard DIN rail (top cap rail) and press firmly until you hear a "click" sound.
Push the white lock buckle back to its original position to lock the module.

Advanced Recovery: Operating System Image Update
When the operating system is damaged or needs to be upgraded, it is necessary to re burn the system image through "BootStrap mode". This process is divided into three steps: selecting the correct image, burning, and copying files.
4.1 Prepare image files
Download the corresponding file from the official Beckhoff FTP server (ftp. Beckhoff. de/Software/embPC Control/):
For CX9000: Go to the CX9000/CE/directory and download the CE5.0 (CX9000_CE500_LF_v226. zip) or CE6.0 (CX9000_CE600_LF_v312. zip) image as needed.
For CX9001/CX9010: Go to the CX90xx/CE/directory and download images such as CX90xx_CE600-HPS-v312zip.
4.2 Method 1: Update using interactive tools (applicable to devices with USB or network connections)
Copy the tool Cx9ImageUpdating. exe and image files to the Temp or Public directory of the CX device via USB drive, FTP, or CERHOST tool (these directories are located in RAM and do not consume Flash write life).
Run the tool on CX and enter the complete path of the image file.
Click on 'FLASH IMAGE' to confirm the warning message.
Wait for the progress bar to complete and display that the update is complete, then restart the device.
Key follow-up steps: After restarting, all old configuration files in the/Hard Disk directory need to be deleted, and the new configuration files in the image package need to be copied to/Hard Disk. Finally, restart again.
4.3 Method 2: Update using a mirror server (applicable to situations where the operating system cannot be started)
Prepare the host PC: Extract the image server toolkit and run the batch file (such as CxImgSrv-HMI. bat). The command line window displays' Waiting for download request... '.
Set CX target device:
Hardware method: Power off ->Open the battery compartment ->Turn DIP switch 3 to ON ->Power on again.
Software method: If the OS is still running, run a specific tool software restart to enter BootStrap mode.
Network connection: To ensure that only the target device is updated, it is recommended to use a dedicated network card or a crossover cable to directly connect the PC to CX to avoid interfering with other CX devices in the company network. You can also add the IP address of the PC in the batch file to force CX to request a mirror from that address.
Update execution: After CX is powered on, it will actively request a mirror from the server. Observe the command line output on the PC and confirm that the 'boot. bin' file transfer is successful. The HDD LED on CX will light up, indicating that a new image is being erased and written.
Completion: After the transfer is complete, close the command line window and make sure to turn the CX DIP switch 3 back to OFF, then close the battery compartment cover and restart the system.
Serial interface configuration (for CX90x0-N031 module)
If your system is equipped with CX90x0-N031 (RS422/RS485 interface module), it is crucial to correctly set the DIP switch on the side of the module. These switches are located under the gray cover on the left side of the module.
Common configuration examples:
RS485 has no echo, terminal resistance enabled (endpoint device): switch 1=OFF, 2=ON, 3=ON, 4=OFF, 5=ON, 6=OFF, 7=ON, 8=ON.
RS422 full duplex point-to-point: switch 1=ON, 2=OFF, 3=OFF, 4=ON, 5=OFF, 6=ON, 7=ON, 8=ON.
Note: Modifying these switch settings must be done after the system is powered off. This module cannot be used simultaneously with CX90x0-N030 (RS232 module).
