HIMA HIMax ® System Manual is applicable to safety related control systems

Redundancy support: Can connect 2 redundant power supply units, each substrate requires fuse protection of 63A or above

Power estimation: Total power=number of processor modules x 35W+number of non processor modules x 20W+number of fans x 20W+external actuator power

Redundant configuration (improving availability)

1. Redundancy of processor modules

Configuration range: 1-4 redundant processor modules, new modules can automatically synchronize existing configurations

Fault response: When a single or multiple processor modules fail, the remaining modules maintain safe and relevant operation

Prerequisite: The user program needs to be redundantly configured, with corresponding slots reserved, and the dual system bus function is normal

2. I/O module redundancy

Module redundancy: 2-3 I/O modules of the same type are defined as redundant groups, and spare modules can be set up to avoid false alarms due to faults

Channel redundancy: Based on module redundancy, channels with the same number are automatically associated with the same global variable, and users can specify the signal synthesis method

Connector support: Redundant modules can use dedicated connector boards that occupy 2 slots, reducing on-site wiring workload

3. Redundancy of other components

System bus: Dual bus redundant operation, requiring 2 system bus modules to be inserted into each substrate

Communication redundancy: SafeEthernet supports dual physical transmission paths, and standard protocols require user program management for redundancy

Power redundancy: Dual power units are connected to L1+/L1- and L2+/L2- terminals respectively, and voltage decoupling is achieved inside the module

Programming and Configuration (Based on SILworX Tool)

1. Programming Fundamentals

Development environment: Programming through PADT (PC+SILworX), supporting IEC 61131-3 standard function blocks and custom function blocks

Program capacity: Up to 32 user programs can be loaded, with a maximum of 1023kB of program memory and 1023kB of data memory per program. The total program and data memory is 10MB (including 4kB of CRC space)

Multi tasking support: Supports 3 multitasking modes, and can set parameters such as program priority and maximum running cycle

2. Variable management

(1) Variable type

Variable type applicable scope and purpose

VAR user program, function block, function local variables, supporting CONST and RETAIN attributes

VAR-INPUT/VAR_oUTPUT All POU input/output variables

VAR_deTERNAL All POU external variables used for cross POU or global level data exchange

VAR_GLOBAL user program global variable, supporting project, configuration, and resource level definitions

VAR_TEMP All POU Temporary Variables

(2) Key configurations

Initial value: It is recommended to assign secure initial values to physical inputs and communication related variables. If not assigned, the default value is 0

System variables: pre-defined variables used to handle system properties such as temperature and power status, which can be associated and used through global variables

Mandatory function: Supports global and local variable enforcement, can set time limits, requires authorized personnel to operate, enforcement may affect security integrity

3. Program loading and updating

(1) Loading method

Download: Interrupt safety related operations, load new configuration, require controller to be in STOP state and load allowed switch to be turned on

Reload: Run without interruption, load modified configuration, require controller to be in RUN state and Reload Allow switch to be turned on, some modifications (such as communication protocol changes) do not support Reload

(2) Operating system loading

Loading order: I/O module → Communication module → System bus module → Processor module

Version management: Supports upgrading and downgrading, and can load existing versions when replacing modules to ensure compatibility

Attention: Ensure that redundant modules are running properly during loading to avoid service interruptions

User Management and Security Control

1. Project level user management (SILworX Projects)

Authorization type: Security administrators (Sec Adm) can modify user management plans and all SILworX functions; Read/write permission (R/W) can perform all functions except for user management; Read only permission (RO) can only view projects

User group characteristics: Unique name (1-31 characters), up to 100 user groups, can be assigned any number of user accounts

User account: Unique name (1-31 characters), up to 1000 accounts, can be set as the default user for the project

2. Controller level user management (Controller)

Account restriction: Up to 10 user accounts, including usernames, passwords, and access permissions. Permissions remain valid after power failure

Default Account: When no custom account is created, the default user is Administrator, without password, and has administrator privileges

Access modes: read permission (view only), read/write permission (create, load, test programs), administrator permission (load operating system, modify SRS, etc.)

3. Safety protection measures

ESD protection: Only personnel with ESD protection knowledge are allowed to modify the system or replace modules. An anti-static wristband must be worn during operation, and unused modules must be properly packaged