system

HIMax System 5 Programming
i
HIMA recommends backing up the project configuration, e.g., on a data storage medium,
after loading a user program into the controller.
This is done to ensure that the project data corresponding to the configuration loaded into
the controller remains available even if the PADT fails.
HIMA recommends a data back up on a regular basis also independently from the user
program load.
5.5.1 Download
Requirements for the download:
� Controller in STOP
� Resource enable switch set to Load Allowed
After a download, the user program must be launched in SILworX to start safety-related
operation.
Use the download function to load a new program into the controller or if one of the conditions
mentioned in the next section prevents using the reload function.
5.5.2 Reload
Requirements:
� Controller in RUN
� Enable switch Reload Allowed is set to ON.
� System variable Reload Deactivation is set to OFF.
i
i
� A reload can also be performed if the controller only contains one processor module.
� During a reload, the user cannot use the PADT to operate on the controller!
Exceptions:
It is possible to abort the reload procedure and to modify the watchdog and target cycle
times in order to allow the reload.
If a user program already running in a controller is modified, the modified version can be
loaded into the controller by performing a reload. While the previous version of the user
program is still running, the new version is stored in the controller memory, tested and provided
with the variable values. Once the preparation steps are completed, the controller
adopts the new user program version and continues safety-related operation seamlessly.
The following factors limit the possibility to load a modified program into the controller by
performing a reload:
� The changes described in Chapter "Conditions for Using the Reload Function".
� Time required to perform a reload.
The execution cycle takes longer due to the time required by the additional reload tasks. To
prevent that the watchdog triggers and the controller enters the error stop state, both SILworX
and the controller verify the additional time required to perform a reload. If the time
required is too high, a reload is rejected.
In the watchdog time, plan sufficient time reserve to perform the reload.
HIMA recommends the procedure in safety manual HI 801 003 to evaluate the watchdog
time..
The watchdog and target cycle times can be increased for the duration of the reload, refer
to the SILworX online help for more details. This can be necessary if the defined time reserve
is too short and the reload procedure blocks in the Cleanup phase.
HI 801 001 E Rev. 3.00 Page 58 of 104