HIMatrix 4 Central Functions
HI 800 023 E Rev. 1.01 Page 25 of 72
4.3.7 Reactions to Processor System Failures
A hardware comparator within the central area permanently compares whether the
commands and data in microprocessor system 1 and in microprocessor system 2 are
identical. If they are different, or if the test routines detect failures in the processor module,
the watchdog signal is automatically switched off. This means that the input signals are no
longer processed by the controller and the outputs switch to the de-energized, switched-off
state.
If such a fault occurs for the first time, the controller is restarted (reboot). If a further internal
fault occurs within the first minute after start-up, the controller enters the STOP/INVALID
CONFIGURATION state and will remain in this state.
4.4 Fault Diagnosis
Each F60 module has an own LED for reporting module malfunctions or faults in the
external wiring. This allows the user to quickly diagnose faults in a faulty module.
In the compact systems F1.., F2.., F3.., these error messages are grouped together in one
common error message.
Additionally, the user program can evaluate various system signals associated with the
inputs, outputs or the controller.
Faults are only signaled if they do not hinder communication with the processor system,
i.e., the processor system must be still able to evaluate the faults.
The user program logic can evaluate the error codes of the system signals and of all input
and output signals.
An extensive diagnostic record of the system's behavior and detected faults are logged and
stored in the diagnostic memory of the processor and the communication system. After a
system fault, the recorded data can be read using the PADT.
For more details on how to evaluate the diagnostic messages, refer to the System Manual
for Compact Systems (HI 800 141) or the System Manual for the Modular System F60,
(HI 800 191), Chapter Diagnosis.