English
简体中文
News
Get to know our latest news
HIMatrix Safety-Related Controller F30 01 Manual
Source: | Author:kongjiang | Published time: 2026-09-21 | 38 Views | 🔊 Click to read aloud ❚❚ ▶ | Share:
The safety-related F30 controller is a compact system in a metal housing with 20 digital inputs and 8 digital outputs.
Product Description
The safety-related F30 controller is a compact system in a metal housing with 20 digital inputs and 8 digital outputs.

The controller is available in various model variants for SILworX and ELOP II Factory; see Table 

The device is TÜV-certified for safety-related applications up to SIL 3 (IEC 61508, IEC 61511 and IEC 62061), Cat. 4 and PL e (EN ISO 13849-1) and SIL 4 (EN 50126, EN 50128 and EN 50129). Further safety standards, application standards and test standards are specified in the certificates available on the HIMA website.
Safety Function
The controller is equipped with safety-related digital inputs and outputs.
Safety-Related Digital Inputs
The controller is equipped with 20 digital inputs. The state (HIGH, LOW) of each input is signaled by an individual LED.
Mechanical contacts without their own power supply or signal power source can be connected to the inputs.
Potential-free mechanical contacts without their own power supply are fed via an internal short-circuit-proof 24 V power source (LS+). Each of them supplies a group of 4 mechanical contacts. Figure 1 shows how the connection is performed.
Connections to Safety-Related Digital Inputs
For the external wiring and the connection of sensors, apply the de-energized-to-trip principle. Thus, if a fault occurs, the input signals adopt a de-energized, safe state (low level).
Reaction in the Event of a Fault
If the device detects a fault on a digital input, the user program processes a low level in accordance with the de-energized-to-trip principle.
The device activates the FAULT LED.
In addition to the channel signal value, the user program must also consider the corresponding error code.
The error code allows the user to configure additional fault reactions in the user program.
Line Control
Line control is used to detect short circuits or open circuits and can be configured for the F30 system, e.g., on EMERGENCY STOP inputs complying with Cat. 4 and PL e in accordance with EN ISO 13849-1.
To this end, connect the digital outputs DO 1 through DO 8 of the system to the digital inputs DI of the same system as follows:
The controller pulses the digital outputs to detect short circuits and open circuits on the lines connected to the digital inputs. To do so, configure the Value [BOOL] -> system variable in SILworX or the DO[0x].Value system signal in ELOP II Factory. The variables for the pulsed outputs must begin with channel 1 and reside in direct sequence, one after the other.
If the following faults occur, the FAULT LED located on the front plate of the controller blinks, the inputs are set to low level, and an (evaluable) error code is created:
 Cross-circuit between two parallel wires.
 Invalid connections of two lines (e.g., DO 2 to DI 3),
 Earth fault on one wire (with earthed ground only).
 Open-circuit or open contacts, i.e., including when one of the two EMERGENCY STOP switches mentioned above has been engaged, the FAULT LED blinks and the error code is created.
Safety-Related Digital Outputs
The controller is equipped with 8 digital outputs. The state (HIGH, LOW) of each output is signaled by an individual LED (HIGH, LOW).
At the maximum ambient temperature, the outputs 1...3 and 5...7 can be loaded with 0.5 A each; and outputs 4 and 8 can be loaded with 1 A or with 2 A at an ambient temperature of up to 50 °C.
Within a temperature range of 60- 70 °C, all outputs of the F30 014 can be loaded with 0.5 A; see Table 19.
If an overload occurs, one or all digital outputs are switched off. If the overload is removed, the outputs are switched on again automatically; see Table 17.
The external wire of an output is not monitored; however, a detected short-circuit is signaled.
WARNING
For connecting a load to a 1-pole switching output, use the corresponding L- ground of the respective channel group (2-pole connection) to ensure that the internal protective circuit can function.
Reaction in the Event of a Fault
If the device detects a faulty signal on a digital output, the affected module output is set to the safe (de-energized) state using the safety switches.
If a device fault occurs, all digital outputs are switched off.
In both cases, the device activates the FAULT LED.
The error code allows the user to configure additional fault reactions in the user program.
Equipment, Scope of Delivery
F30 01   Controller (20 digital inputs, 8 digital outputs), Operating temperature: 0...+60 °C, for ELOP II Factory programming tool
F30 011 (-20 °C)  Controller (20 digital inputs, 8 digital outputs), Operating temperature: -20...+60 °C, for ELOP II Factory programming tool
F30 014  Controller (20 digital inputs, 8 digital outputs), Operating temperature: -25...+70 °C (temperature class T1), Vibration and shock tested according to EN 50125-3 and EN 50155, class 1B according to IEC 61373, for ELOP II Factory programming tool.
F30 01 SILworX   Controller (20 digital inputs, 8 digital outputs), Operating temperature: 0...+60 °C, for SILworX programming tool
F30 011 SILworX (-20 °C)  Controller (20 digital inputs, 8 digital outputs), Operating temperature: -20...+60 °C, for SILworX programming tool
F30 014 SILworX  Controller (20 digital inputs, 8 digital outputs), Operating temperature: -25...+70 °C (temperature class T1), Vibration and shock tested according to EN 50125-3 and EN 50155, class 1B according to IEC 61373, for SILworX programming tool
LED Indicators
The light-emitting diodes (LEDs) indicate the operating state of the controller. The LEDs are classified as follows:
 Operating voltage LED
 System LEDs
 Communication LEDs
 I/O LEDs
 Fieldbus LEDs
Function and meaning of the system LEDs and communication LEDs depend on the CPU operating system (and thus on the COM operating system).
When the supply voltage is switched on, an LED test is performed, and all LEDs are briefly lit.
Reset Key
The controller is equipped with a reset key. The key is only required if the username or password for administrator access is not known. If only the IP address set for the controller does not match the PADT (PC), the connection can be established with a Route add entry on the PC.
The key can be accessed through a small round hole located approximately 5 cm from the upper left-hand side of the housing. The key is engaged using a suitable pin made of insulating material to avoid short-circuits within the controller.
The reset is only effective if the controller is rebooted (switched off and on) while the key is simultaneously engaged for at least 20 s. Engaging the key during operation has no effect.
CAUTION
Fieldbus communication may be disturbed! Prior to switching on the controller with the reset key engaged, all device fieldbus connectors must be unplugged to ensure that the fieldbus communication among other stations is not disturbed. The fieldbus plugs may only be plugged in again when the controller is in the RUN or STOP state.
Properties and behavior of the controller after a reboot with engaged reset key:
Connection parameters (IP address and system ID) are set to the default values.
All accounts are deactivated except for the administrator default account with an empty password.
With COM operating system version 10.42 and higher, loading a user program or operating system with default connection parameters is inhibited! The loading procedure is only allowed after the connection parameters and the account have been configured on the controller and the controller has been rebooted.
After a new reboot without the reset key engaged, the connection parameters (IP address and system ID) and accounts become effective.
Those configured by the user.
Those valid prior to rebooting with the reset key engaged, if no changes were performed.