F2 DO 16 02 3 Product Description
HI 800 139 E Rev. 2.00 Page 11 of 42
3 Product Description
The safety-related F2 DO 16 02 remote I/O is a compact system in a metal housing with 16
safety-related relay outputs.
The remote I/O is available in various model variants for SILworX and ELOP II Factory, see
Table 4.
Remote I/O
s are connected to individual HIMax or HIMatrix controllers via safeethernet. They
are used to extend the I/O level, but are not able to run any user program by themselves.
The remote I/O is suitable for mounting in Ex-zone 2, see Chapter 4.1.3.
The device h
as been certified by the TÜV for safety-related applications up to SIL 3 (IEC 61508,
IEC 61511 and IEC 62061), Cat. 4 and PL e (EN ISO 13849-1) and SIL 4 (EN 50126, EN 50128
and EN 50129).
Further safety standards, application standards and test standards are specified in the
certificates available on the HIMA website.
3.1 Safety Function
The safety function meets the integrity requirements described in the corresponding test
standards.
The remote I/O is equipped with safety-related relay outputs. These outputs are safely assigned
their values by the connected controller via safeethernet.
The remote I/O is designed in accordance with the de-energize to trip principle. If a system fault
occurs, all relay outputs are set to the de-energized safe state. If a channel fault occurs, only the
affected channel is de-energized.
In both cases, the FAULT LED is lit. In addition, reactions in the user program can be triggered
using error codes.
The remote I/O can also be used in energized to trip applications. To this end, the relay output
is switched on to perform a safety function (energize to trip).
All instructions on how to use the remote I/O specified in the safety manual must be observed.