X-CPU01 985210211 HlMA控制器(HlMax, HlMatrix和远程l/模块)

X-CPU01

Introduction
The present manual describes the technical characteristics of the module and its use. ltprovides information on how to install, start up and configure the module in SlLworX.
Structure and Use of this Manual
The content of this manual is part of the hardware description of the HlMax programmableelectronic system.
This manual is organized in the following main chapters:
Introduction
Safety
Product Description
Start-up
Operation
Maintenance
Decommissioning
Transport
Disposal

Product Description
The X-CPU 01 processor module is absolutely required for data processing within theHlMax system.The processor module is used for.
Processing of up to 32 user programs
Performing all central functions including communication
Handling redundancy with up to 3 additional processor modules
Handling communication via safeethernet.
Creating and storing CPU events.
Storing events created by lO modules.
The module has been certified by the TÜV for safety-related applications up to SlL 3(IEC 61508, IEC 61511 and lEC 62061), Cat. 4 (EN 954-1) and PL e (EN ISO 13849-1)Refer to the HiMax Safety Manual (Hl 801 003 E) for more information on the standardsused to test and certify the modules and the HlMax system.
Safety Function of the Module
The safety function of the processor module includes the following points.
Processing the user programs.
-lf faults occur: Stop the user program and reset the variables to the initial valueslf faults occur: Reset the processor module to the safe state and report the CPUstatus
Safe communication between HlMA controllers (HlMax, HlMatrix, and remote l/Omodules)using the safety-related safeethernet protocol.Data is transferred using either the Ethemet interfaces of the processor module itself orusing the Etheret interfaces of a COM module.
The safety function is performed in accordance with SlL 3.
The following elements also contribute to achieving the safety function.
Hardware self-tests
Safe communication with the l/O modules
Reaction in the Event of a Fault
If the test hamess detects faults, the processor module enters the ERROR STOP state andrestarts itself. The fault cause can be investigated using the diagnostic information.
Start after an Error Stop
If the cause of the fault is still present, the processor module avoids restarting andrepeating the error stop:
After a first error stop, the processor module restarts normally and switches to itssystem operation.
After the second error stop, the user must restart the system using the PADT aftereliminating the problem.
Once the processor module has run in system operation for approximately one minutethe next error stop to occur is considered to be as first error stop.