HIMA HIMatrix Series

6 Outputs HIMatrix
Page 34 of 72 HI 800 023 E Rev. 1.01
6.2 Safety of Actuators
In safety-related applications, the controller and its connected actuators must all meet the
safety requirements and achieve the specified SIL. For more details, see
Increasing the SIL
of Sensors and Actuators in the Annex.
6.3 Safety-Related Digital Outputs
The following points apply to the digital output channels of the F60 modules and to the
digital output channels of the compact systems, but not to the relay outputs.
6.3.1 Test Routines for Digital Outputs
The devices and modules are tested automatically during operation. The main test
functions are:
 Reading the output signals back from the switching amplifier. The switching threshold
for a read-back signal is 2 V. The diodes used prevent a feed back of signals.
 Checking the integrated redundant safety shutdown.
 A shutdown test of the outputs is carried out within the MOT for a maximum of 200 µs.
The minimum time between two tests is ≥ 20 seconds.
The system monitors its operating voltage and de-energizes all outputs at a low voltage of
less than 13 V.
6.3.2 Reaction in the Event of a Fault
If the controller detects a faulty signal, it sets the affected device or module output to the
safe, de-energized state using the safety switches. If a module fault occurs, all module
outputs are switched off. A compact system additionally reports the two faults via the
ERROR LED, a F60 module via the ERR LED.
6.3.3 Behavior in the Event of External Short-Circuit or Overload
If the output is short-circuited to L- or overloaded, the device or module is still testable. A
safety shutdown is not required.
The controller monitors the device's or module's total current input and set all output
channels to the safe state if the threshold is exceeded.
In this state, the outputs are checked every few seconds to determine whether the overload
is still present. In a normal state, the outputs are switched back on.
6.3.4 Line Control
The controller can pulse safety-related digital outputs and use them with the safety-related
digital inputs of the same system (but not the configurable digital inputs) to detect open-
circuits and short-circuits, e.g., on EMERGENCY STOP devices complying with Cat. 4 in
accordance with EN 954-1 (see Chapter
5.3.6 Line Control).
NOTE
Malfunctions of the connected actuators are possible!
Pulsed outputs must not be used as safety-related outputs (e.g., for activating
safety-related actuators)!
Relay outputs cannot be used as pulsed outputs.
6.4 Safety-Related Two-Pole Digital Outputs
The following points apply to two-pole digital outputs of the compact systems.