The HIMA F35 011, also cataloged as the F35 011 Safety-Related Controller Module, operates as a dedicated hardware component for input/output signal processing with integrated diagnostics within Planar4 safety system platforms. The hardware establishes fault monitoring of discrete field devices, validating the integrity of safe-state loops. Operating via direct hardware-coded logic paths, the unit processes logic demands to control downstream emergency shutdown valves, isolation interlocks, and critical safety instrumentation loops.
| Parameter | Specification |
| Model | F35 011 (F35011) |
| Brand | HIMA |
| Origin | Germany |
| Weight | 0.3-0.4 kg (net module weight); 1.2 kg (packaged weight) |
| Dimensions | 3U height, 4SU width (2.2 cm x 12.4 cm x 12.6 cm) |
| Operating Temp | -25 to +60 deg C |
| Power Consumption | 24 VDC (+/-20% tolerance), ~150-200 mA current draw |
| Channels | Configurable digital I/O channels |
| Switching Voltage | Up to 250 VAC/DC |
| Switching Current | 2-4 A maximum (load dependent) |
| Isolation Voltage | 1500 VAC |
| Response Time | 5-10 ms |
| Safety Certification | Up to SIL 3 / SIL 4 (IEC 61508 compliant) |
The functional design of the F35 011 is structured around a fail-safe state execution architecture to guarantee deterministic behavior under active fault conditions. The module contains on-board diagnostic sub-circuits that perform continuous cross-channel comparison routines, mimicking triple modular redundancy (TMR) 2oo3 architecture properties at the input/output processing boundary. Internal electronic lines utilize permanent hardware-driven galvanic isolation rated up to 1500 VAC to separate internal system logic from external field transient stresses. If an internal component drift, short circuit, or open circuit condition is detected, the device forces all active switching outputs directly to a de-energized, safe open state within a 5-10 ms response window.
Q: How does the integrated diagnostic circuit differentiate between a field wiring open circuit and a normal logic de-energized state?
A: The F35 011 injects low-current, sub-millisecond diagnostic pulses through the I/O channels during normal operation. These supervision signals trace line impedance without cycling the downstream actuator, allowing the module to isolate a wire break or short circuit directly and report a channel fault code while maintaining standard logic execution.
Q: What are the backplane power supply constraints when installing multiple F35 011 modules into a Planar4 rack?
A: Each module requires an independent allocation of 150-200 mA from the centralized 24 VDC rack power bus. System engineers must tally the collective maximum current draw of all populated sub-components to ensure the primary power rack supply does not experience voltage dips below the required nominal +/-20% input window.
Q: Can the internal 4 A protection fuse be serviced in the field following an overcurrent trip?
A: Yes. The module features an integrated 4 A time-lag, replaceable fuse designed to protect internal contact components from high-current welding. The module must be isolated and extracted from the Planar4 backplane before performing the replacement.
Our production line was down due to a faulty Bently Nevada monitor. We found it in stock here and they shipped it via DHL immediately. Back in operation within 48 hours—truly a lifesaver for our plant.
Finding brand new, original modules is critical for our safety. This team delivers factory-fresh components with full certification. Their commitment to only selling new products makes them our most trusted partner.
We have sourced Honeywell and Schneider parts here for two years. Every shipment arrives well-packaged with original factory seals intact. Clear communication and the best lead times in the industry.