HIMA HIMatrix F30 Compact Safety Controller

HIMA HIMatrix F30 Compact Safety Controller

Safety regulations and environmental requirements

（1） Core security requirements

Expected use and protective measures

The controller is a SELV/PELV safety ultra-low voltage device, which poses no direct danger to itself. For use in Ex areas (such as Zone 2), additional explosion-proof requirements must be met (such as installation in enclosures with protection levels above IP54);

ESD protection: Only personnel with knowledge of electrostatic protection are allowed to operate. ESD wristbands should be worn during work, and when idle, they should be stored in anti-static packaging to avoid electrostatic damage to internal circuits (such as processors and relays).

Residual risk and emergency response

Residual risk sources: engineering design defects (such as unmonitored lines), user program vulnerabilities (such as lack of configured fault safety logic), wiring errors (such as poor output grounding), which need to be avoided through compliant configuration and regular testing;

Emergency principle: The controller is the core of the safety system, and in the event of a malfunction, all outputs must be switched to the "power-off safety state" (such as relay disconnection). It is prohibited to perform operations that obstruct the safe operation of the system in emergency scenarios (such as forcibly activating outputs).

（2） Environment and installation conditions

Specific parameter specifications for the required type

The protection level IP20 (IEC 60529) needs to be installed inside the control cabinet to prevent dust and condensation. Ex Zone 2 requires additional enclosure protection

Working temperature standard type 0...+60 ° C; low-temperature type (F30 011) -20...+60 ° C Low temperature type Electronic components coated with protective paint, suitable for cold industrial environments

Storage temperature -40...+85 ° C must be met during transportation or idle to avoid component damage

Pollution level II (IEC/EN 61131-2) is applicable to non-conductive dust environments to avoid short circuit risks

Evaluation of heat dissipation and insulation performance is required in high-altitude areas with an altitude of less than 2000 meters

Supply voltage 24 VDC (-15%...+20%) ripple factor ≤ 15%, requires independent power supply (recommended PELV/SELV power supply), equipped with 10A delay fuse

Product Description and Core Features

（1） Basic characteristics of controller

Functional positioning and compatibility

Role: As a compact controller, it can independently run user programs, support local I/O control and remote I/O expansion, and cover small and medium-sized safety application requirements with a single device;

Safety certification: certified by T Ü V, supporting SIL 3（IEC 61508/61511/62061）、Cat. 4（EN 954-1）、PL e（EN ISO 13849-1）， Simultaneously compliant with ATEX Zone 2 (T4), UL Class I Div 2, Lloyd's Register certification, and other global industry standards;

Model difference: divided into "standard type (F30 01/F30 01 SILworX)" and "low-temperature type (F30 011/F30 011 SILworX)", with the same hardware, only the working temperature range and programming tool adaptation are different (see table below):

Model, Operating Temperature, Adaptation Programming Tool, Part Number

F30 01 0…+60°C ELOP II Factory 98 2200415

F30 011 -20…+60°C ELOP II Factory 98 2200455

F30 01 SILworX 0…+60°C SILworX 98 2200472

F30 011 SILworX -20…+60°C SILworX 98 2200478

Core Components and Security Design

I/O circuit design:

Digital input: 20 non isolated inputs, divided into 5 groups for power supply (4 in each group, LS+is a short-circuit protection 24V power supply), supports "power loss trip" logic (input is in a low-level safety state in case of fault), and can be configured with line control to detect short circuits/open circuits;

Digital output: 8 non isolated outputs, channels 1-3/5-7 have a rated current of 0.5 A (60 ° C), channels 4/8 support 1 A (60 ° C)/2 A (50 ° C), automatically turn off and periodically retry when overloaded, and trigger a fault alarm when short circuited;

Fault response mechanism: When an input/output fault (such as open circuit or output overload) is detected, a single channel fault only cuts off the corresponding channel. If the controller experiences an overall fault, all outputs are cut off, and the FAULT LED is activated and a fault code is reported (such as 0x0001 indicating input module fault and 0x0200 indicating total current exceeding the limit);

Self detection function: supports MOT (maintenance testing) and FTT (fault tolerance time) testing, detecting hardware faults (such as processor abnormalities), software errors (such as cycle time exceeding limits), and triggering output cutoff when overheating occurs (first level overheating code 0x0400, second level overheating code 0x0800).

（2） Hardware Structure and Interface

key parameters

|Storage capacity | Version<6.46:500 kB program/data; Version ≥ 7:1023 kB program/data; Version 6.100:2047 kB Program/Data | Adapt to User Programs of Different Complexity|

|Response time | ≥ 20 ms | Meet the real-time requirements of small and medium-sized security applications|