HIMA H4135A Safety Relay H 4135A



Processor System

The processor system uses self tests to control and monitor the communication.

Data is exchanged between the communication module and the processor module

is carried out via redundant system bus. The system bus has a redundant structure

for reasons of availability. Redundancy is only ensured if both system bus modules

are inserted in the base plates and configured accordingly.

Operating system and error code history are stored in a non-volatile memory and

can be read in SILworX via the diagnosis.

HIMax is a flexible platform for critical production processes that you can never afford

to have go down.

HIMax adapts to all I/O-count, response-time and fault-tolerance requirements as well

as centralized and distributed applications. HIMax delivers availability for life by enabling

uninterrupted system operation throughout your plant’s life cycle. Hardware and software

changes can be performed without system interruption. Alternative CPU modules make

HIMax suitable for meeting high performance and critical control requirements as well

as for use in small and mid-sized safety applications.

The safety-related F35 controller is a compact system located in a metal enclosure with 24

digital inputs, 8 digital outputs, 2 counters and 8 analog inputs.

The controller is available in 3 model variants for SILworX and 3 model variants for

ELOP II Factory, see Chapter 3.2. All variants are described in this manual.

The device is suitable for mounting in Ex-zone 2. see Chapter 4.1.5.

The device has been certified by the TÜV for safety-related applications up to SIL 3

(IEC 61508. IEC 61511 and IEC 62061), Cat. 4 (EN 954-1) and PL e (EN ISO 13849-1).

Further safety standards, application standards and test standards are specified in the

certificate available on the HIMA website.

Safety Function

The module evaluates the digital input signals and provides them to the user program.

The safety function is performed in accordance with SIL 3.

Reaction in the Event of a Fault

If a fault occurs, the module adopts the safe state and the assigned input variables transmit

the initial value (default value = 0) to the user program.

The initial values must be set to 0 to ensure that the input variables transmit the value 0 to

the user program if a fault occurs.

The module activates the Error LED on the front plate.