APPLICATION NOTES

PROCESS CONTROLLER ( ESM-XX50)'s PROCESS INDICATOR ( ESM-XX00)'s TIMER&COUNTER ( EZM-XX50)'s PARAMETERS, SERIAL COMMUNICATION and MODBUS

CONTENTS
1. Introduction 2. Connecting Devices To The Bus 3. Modbus Protocol 3.1. Transmission Modes in Modbus 3.1.1. Transmission Spesification 3.1.2. Function Codes 3.2. Modbus Message Framing 3.2.1. ASCII Framing 3.2.2. RTU Framing 3.2.3. Address Field 3.2.4. Function Field 3.2.5. Data Field 3.3. ASCII and RTU Modes 3.3.1. ASCII Mode 3.3.1.1. LRC Calculation 3.3.2. RTU MODE 3.3.2.1. CRC Calculation 3.4. Exception Responses 4. Examples 4.1. Process Controller (ESM-XX50) 4.1.1. To read process value 4.1.2. Change process set value 4.2. Process Indicator (ESM-XX00) 4.2.1. To read process value 4.2.2. Change alarm1 set value 4.3. Timer&Counter (EZM-XX50) 4.3.1. To read preset active value 4.3.1.1. ASCII Mode 4.3.1.2. RTU Mode 4.3.2. To change set1 value 4.3.2.1. ASCII Mode 4.3.2.2. RTU Mode 5. Esm-XX50 Parameters List 6. Esm-XX00 Parameters List 7. Ezm-XX50 Parameters List

1. Introduction
This manual describes the RS-232 and RS-485 communication using Modbus protocol in Timer&Counter (EZM-XX50), Process Indicator (ESM-XX00) and Process Controller (ESM-XX50) instruments. In Timer&Counter instruments Modbus ASCII and RTU protocol is used. In Process Controller and Process Indicator instruments Modbus RTU protocol is used.

2. Connecting Devices To The Bus

Note : Each instrument connected to the bus must have a unique address
All instruments must be adjusted to the same mode (ASCII or RTU), baudrate, parity and stop bit. It is recommended to use twisted-pair cable for RS-485 connection in order to minimize signal errors due to the noise. To reduce cable reflections over long distances, RS-485 systems require line termination. This is achieved by putting two 120 terminating resistors. One resistor must be put PC's input / output buffer and the other buffer of the last device.

RS-485 interface with seperate converter.

RS-485 interface with plug in board

3. Modbus Protocol
A communication protocol defines commands and data formats that will be known by all instruments on the system. Modbus is a master-slave protocol with all transaction initiated by a single host (e.g. PC). Message packets contains device address, a command, data and a checksum for error detection. Each slave device continually monitors the bus looking for the beginning of the message. Message packets are detected by all slaves, but only one ,whose address matches that transmitted, answers it, others ignore the message.

3.1.Transmission Modes in Modbus

3.1.1.Transmission Spesification

Interface Communication System Synchronizing system Data Length Parity Stop Bit Transmission Rate Transmission Cable Error Detection Techniques

: RS-232 and RS-485 : Half Dublex : Start-stop synchronizing : 8 bits : None, odd, even : 1, 2 stop bits : 1200,2400,4800,9600 and 19200 : Twisted pair cable with shield. :1. Parity Checks: None / Odd / Even parity 2. Longitudinal redundancy checks (LRC) :ASCII mode 3. Cyclic redundancy checks (CRC): RTU mode

3.1.2.Function Codes
Function Code 03 : Read Holding Register Function Code 04 : Read Input Registers Function Code 06 : Preset Single Register

3.2. Modbus Message Framing

Modbus messages transmit with frames. Beginning and ending of the frame is known by the slave devices. If the slave devices receive a character that is beginning of the frame, they read the address field and determine the owner of the device. Also they know when the message is completed. If the message isn't completed failures can be occurred.

3.2.1. ASCII Framing

In ASCII Mode, messages start with a colon ' : ' ASCII character (3A hex), and end with a carriage return line feed (CR - LF ASCII character,0D - 0A hex) The allowable characters are 0-9 and A-F. Devices on the network waits for the ' : ' (Start character) on the bus. If one is received each device decodes the address field to know if it is the owner of the message.

3.2.2. RTU Framing

In this mode messages start with a silent interval of at least 3.5 character times. After this interval device address is sent. The devices on the network waits for the silent intervals.When the first field is received each device decodes it to know if it is the owner of the message. After the last character is sent 3.5 character silent interval marks the end of the message. A new message can begin after this interval. The whole message must be continuous. If a 1.5 character silent interval occur before completing the message, the device eliminates the received message and assumes that the next byte is the address field of a new message. If a new message begins earlier than 3.5 characters times, message will be considered the continuation of the message, then CRC field will not be okey for the message.

3.2.3. Address Field

In ASCII mode address field is two characters and in RTU mode address field has eight bits. Slave device address can be between 1-247.

3.2.4. Function Field

In ASCII mode function field is two characters and in RTU mode function field has eight bits. Function field tells the slave device which action will be performed. If there is no failure slave returns the same function code but if there is a failure to indicate the error slave device returns the function code with its most significant bit set to a logic 1. Error codes will be explained.

For example if master sends a message to read a group of holding registers and the function code will be: 0000 0011 (Hex 03) If the slave takes the message without error, it returns back the same function code, but if there is an exception the function code will be: 1000 0011 (Hex 83)

3.2.5. Data Field

This field can include register addresses, how many byte will be read and the count of the read bytes. For example if the master wants to read a group of holding registers, the data field includes the register address where to start to read, and how many registers are to be read.

3.3. ASCII and RTU Modes

Controllers can be set up to communicate on standard Modbus networks using two transmission modes : ASCII or RTU. The mode determines how information will be packed into the message fields and decoded. 16 bit address or data

15

14

13

12

11

10

Address or data MSB

Address or data LSB

15

14

13

12

11

10

MSB high nibble

MSB low nibble

LSB high nibble

LSB low nibble

15

14

13

12

11

10

Note : 1 must be substracted from register address value when data is sent to the device or data is read from the
device. E.g. If you want to read register address 15, 14 is sent for register address.

3.3.1. ASCII Mode

If the devices are setup to communicate using ASCII (American Standard Code for Information Interchange) mode, each 8-bit byte in a message is sent as two ASCII characters. The format in ASCII mode is: Coding system : Hexadecimal ASCII characters 0-9,A-F Error Check Field : Longitudinal Redundancy Check (LRC)

3.3.1.1. LRC Calculation

The LRC is calculated by adding all message bytes discarding any carries and then two's complementing the result. E.g. If slave ID is 1, command is 4, register address is 14 and register count is 1 LRC = slave ID+command+register address+register count = 1+4+14+1 = 20 if LRC is bigger than 255, 256 must be substracted from LRC. (E.g. If LRC is 300 LRC = 300-256 = 44) result = (255^LRC)+1

To send data to the instrument;

Slave ID Command Register address Data Start Character Slave ID high nibble Slave ID low nibble :1 : 6 (Preset Single Register) : 15 : 300
ASCII DECIMAL HEX

: 0 1

58 48 49

0x3A 0x30 0x31

Start Character Command high nibble Command low nibble Register Address MSB high nibble Register Address MSB low nibble Register Address LSB high nibble Register Address LSB low nibble Data MSB high nibble Data MSB low nibble Data LSB high nibble Data LSB low nibble LRC MSB LRC LSB 13 10

: 0 6 0 0 0 E 0 1 2 C B E CR LF

58 48 54 48 48 48 69 48 49 50 67 66 69 13 10

0x3A 0x30 0x36 0x30 0x30 0x30 0x45 0x30 0x31 0x32 0x43 0x42 0x45 0xD 0xA

To read data from the device;

Slave ID Command Register address Register count

:1 : 3 (Read Holding Register) : 15 :1

ASCII DECIMAL HEX

Start Character Slave ID high nibble Slave ID low nibble Command high nibble Command low nibble Register Adres MSB high nibble Register Adres MSB low nibble Register Adres LSB high nibble Register Adres LSB low nibble Register Sayisi MSB high nibble Register Sayisi MSB low nibble Register Sayisi LSB high nibble Register Sayisi LSB low nibble LRC MSB LRC LSB CR LF

: 0 1 0 3 0 0 0 E 0 0 0 1 E D CR LF

58 48 49 48 51 48 48 48 69 48 48 48 49 69 68 13 10

0x3A 0x30 0x31 0x30 0x33 0x30 0x30 0x30 0x45 0x30 0x30 0x30 0x31 0x45 0x44 0xD 0xA

Data is 300 in this register, the device sends the bytes below:
ASCII DECIMAL HEX

Start Character Slave ID high nibble Slave ID low nibble Command high nibble Command low nibble Byte Count high nibble Byte Count low nibble Data MSB high nibble

: 0 1 0 3 0 2 0

58 48 49 48 51 48 50 48

0x3A 0x30 0x31 0x30 0x33 0x30 0x32 0x30

Start Character Data MSB low nibble Data LSB high nibble Data LSB low nibble LRC MSB LRC LSB CR LF Data MSB high nibble = Data MSB high nibble-48 Data MSB high nibble = 48-48 = 0 Data MSB low nibble = Data MSB low nibble -48 Data MSB low nibble = 49-48 = 1 Data LSB high nibble = Data LSB high nibble-48 Data LSB high nibble = 50-48 = 2 Data LSB low nibble = Data LSB low nibble-55 Data LSB low nibble = 67-55 = 12

: 1 2 C C D CR LF

58 49 50 67 67 68 13 10

0x3A 0x31 0x32 0x43 0x43 0x44 0x0D 0x0A

Gelen Data = ( Data MSB high nibble*16+Data MSB low nibble)*256+(Data LSB high nibble*16+Data LSB low nibble) Gelen Data = ( 0*16+1)*256+(2*16+12) Gelen Data = 256+32+12 = 300

3.3.2. RTU MODE

When controllers are set up to communicate on a Modbus network using RTU (Remote Terminal Unit) mode, each 8-bit byte in a message contains two 4-bit hexadecimal characters. Each message must be transmitted in a continuous stream. The format in RTU mode is:

Coding System : 8 bit binary,hexadecimal 0-9,A-F Error Check Field : Cyclical Redundancy Check (CRC)

To send data to the instrument;

Slave ID Command Register address Data Slave ID Command Register Adres MSB Register Adres LSB Data MSB Data LSB CRC MSB CRC LSB To read data from the instrument; Slave ID Command Register address Register count :1 : 3 ( Read holding register ) : 15 :1 :1 : 6 (Preset Single Register) : 15 : 300 1 6 0 14 1 44 232 68

If user wants to read the 15. input register from the device ID is 1 The datas are in right below) Slave ID Command Register Adres MSB Register Adres LSB Register Count MSB Register Count LSB CRC MSB CRC LSB 1 3 0 14 0 1 229 201

Data is 300 in this register, the device sends the bytes below: Slave ID Command Byte Count Data MSB Data LSB CRC MSB CRC LSB Gelen Data = Data MSB*256+Data LSB Gelen Data = 1*256+44 = 300 1 3 2 1 44 184 9

3.3.2.1. CRC Calculation

A 16-bit CRC field is added to the end of the message. CRC is a calculation of a message contents. The slave device recalculates the CRC and compares with the CRC contained in the message. If two values aren't equal a failure occurs, slave device ignores the message. A simpler method involves swapping the low and high order bytes of the CRC integer at the end of the

calculation. This is shown in the following routine. 1- Load a 16-bit register (CRC Register) with FFFF Hex. (all1s). 2 - Exclusive-OR the first eight bits of the message with the low-order byte of the CRC register. Put the result in the CRC register. 3 - Shift the CRC register one bit to the right (divide by two), filling the MSB with a zero. 4 - If the bit shifted out in three is a one, Exclusive-OR the CRC register with the value A001 Hex. 5 - Repeat steps 3 and 4 until eight shifts have been performed and the bits tested. A single byte has thus been processed. 6 - Repeat steps 2 to 5 using the next eight-bit byte of the message until all bytes have been processed. 7 - The final contents of the CRC register are tagged on to the end of the message with the most significant byte first. 8 - Swap the low and high order bytes of the integer result. An implementation of the CRC calculation in C code is show below. unsigned int check_sum(unsigned char *buff, char start, char bytes) { Char byte_cnt,bit_cnt; /* loop counters */ unsigned int crc_reg; /* Result register */ unsigned int CRCHi, CRCLO;/*Low and high order bytes of the crc*/ /* Set the CRC register to all 1s */ crc_reg = 0xFFFF; /* Repeat for each byte of sub string */ for(byte_cnt=start; byte_cnt<(bytes+start); byte_cnt++) { crc_reg = crc_reg ^ (Unsigned int)buff[byte_cnt]; /*EXOR CRC &Next Byte*/ /* Test each bit of the CRC */ for(bit_cnt=0; bit_cnt<8; bit_cnt++) { if(crc_reg & 0x0001) { crc_reg = crc_reg >>1; /* IF LSB=1 EXOR CRC with A001H*/ crc_reg = crc_reg ^ 0Xa001; /* Then shift CRC toward LSB */ } else crc_reg = crc_reg>>1; /* ELSE Shift CRC towards LSB */ } } CRCLo=crc_reg>>8; /*Swap the low and high order bytes of the crc result*/ CRCHi=crc_reg<<8; crc_reg = CRCLo+CRCHi; return crc_reg; /*Final CRC register Result */ }

3.4. Exception Responses

* If the slave does not receive the query because of a communication error , no response is returned. (Timeout Error) * If the slave receives the query, but detects a communication error (parity, LRC or CRC) , no response is

returned. (Timeout Error) * If the slave receives the query without communication error, but can not handle it (e.g.if Master wants to read non-existent register), the slave will return an exception The Error Codes are below: 01 : ILLEGAL FUNCTION : The function code received in the query is not an allowable action for the slave. 02 : ILLEGAL DATA ADDRESS : The data address received in the query is not an allowable address for the slave. 03 : ILLEGAL DATA VALUE : A value contained in the query data field is not an allowable value for the slave. 05 : ACKNOWLEDGE : The slave has accepted the request and is processing it, but a long duration of time will be required to do so. This response is returned to prevent a timeout error from occuring in the master. The master can next issue a Poll Program Complete message to determine if processing is completed. 08 : MEMORY PARITY ERROR : The slave attempted to read extended memory, but detected a parity error in the memory. The master can retry the request, but service may be required on the slave.

if there is a failure to indicate the error slave device returns the function code with its most significant bit set to a logic 1.
Command* = Command's most significant bit set to a logic 1. RTU MODE Slave ID Command* Error Code CRC MSB CRC LSB ASCII MODE : Slave ID high nibble Slave ID low nibble Command* high nibble Command* low nibble Error Code MSB Error Code LSB LRC MSB LRC LSB CR LF

4. Examples
4.1. Process Controller (ESM-XX50)
4.1.1. To read process value

To read process value ( register address is 1) from the ESM-XX50 (slave ID is 1). 1 must be substracted from the register address . In here 0 (register address-1) will be used for register address. Slave ID Command Register Address MSB Register Address LSB Register Count MSB Register Count LSB Slave ID *Delay Command *Delay Register Address MSB *Delay Register Address LSB *Delay Register Count MSB *Delay Register Count LSB *Delay CRC MSB *Delay CRC LSB = = = = = = 1 4 0 0 0 1 1 *Delay 4 *Delay 0 *Delay 0 *Delay 0 *Delay 1 *Delay 49 *Delay 202

After sending all the bytes, wait minimum one second and read the bytes in the receive buffer.If process value is 1500 in this register, the device sends the bytes below: Slave ID Command Byte Count Data MSB Data LSB CRC MSB CRC LSB Data = Data MSB*256+ Data LSB Data = 5*256+220 Data = 1500 1 4 2 5 220 187 249

4.1.2. Change process set value

Slave ID is 1, process set value register address is 1 and 1000 will be the new set value.1 must be substracted from the register address . In here 0 (register address-1) will be used for register address. Data = 1000 Data = 3*256+232 so Data MSB = 3 Data LSB = 232 Slave ID Command Register Address MSB Register Address LSB Data MSB Data LSB =1 =6 =0 =0 =3 = 232

Slave ID *Delay Command *Delay Register Address MSB *Delay Register Address LSB *Delay Data MSB *Delay Data LSB *Delay CRC MSB *Delay CRC LSB

1 *Delay 6 *Delay 0 *Delay 0 *Delay 3 *Delay 232 *Delay 137 *Delay 116

After sending all the bytes, wait minimum one second and read the bytes in the receive buffer. If the slave receives the query and changes the set value 1000 correctly, the bytes which slave device has received, will be sent back. Note : *Delay time must be put between two bytes. When a byte is written into the buffer after *Delay time next byte must be put into the buffer. For 1200 bps minimum For 2400 bps minimum For 4800 bps minimum For 9600 bps minimum For 19200 bps minimum 9.17 msec maximum 13.76 4.59 msec maximum 6.88 2.30 msec maximum 3.44 1.15 msec maximum 1.72 0.57 msec maximum 0.86

4.2. Process Indicator (ESM-XX00) 4.2.1. To read process value

To read process value ( register address is 1) from the ESM-XX00 (slave ID is 1). 1 must be substracted

from the register address. In here 0 (register address-1) will be used for register address. Slave ID Command Register Address MSB Register Address LSB Register Count MSB Register Count LSB Slave ID *Delay Command *Delay Register Address MSB *Delay Register Address LSB *Delay Register Count MSB *Delay Register Count LSB *Delay CRC MSB *Delay CRC LSB = = = = = = 1 4 0 0 0 1 1 *Delay 4 *Delay 0 *Delay 0 *Delay 0 *Delay 1 *Delay 49 *Delay 202

After sending all the bytes, wait minimum one second and read the bytes in the receive buffer.If process value is 523 in this register, the device sends the bytes below: Slave ID Command Byte Count Data MSB Data LSB CRC MSB CRC LSB Data = Data MSB*256+Data LSB Data = 2*256+11 Data = 523 1 4 2 2 11 249 151

4.2.2. Change alarm1 set value

Slave ID is 1, process set value register address is 1 and 999 will be the new set value.1 must be substracted from the register address value. In here 0 (register address-1) will be used for register address. Data = 999 Data = 3*256+231 so Data MSB = 3 Data LSB = 231 Slave ID Command Register Address MSB Register Address LSB Data MSB Data LSB Slave ID *Delay Command *Delay =1 =6 =0 =0 =3 = 231 1 *Delay 6 *Delay

Slave ID Register Address MSB *Delay Register Address LSB *Delay Data MSB *Delay Data LSB *Delay CRC MSB *Delay CRC LSB

1 0 *Delay 0 *Delay 3 *Delay 231 *Delay 201 *Delay 112

After sending all the bytes, wait minimum one second and read the bytes in the receive buffer. If the slave receives the query and changes the set value 999 correctly, the bytes which slave device has received, will be sent back. Note : *Delay time must be put between two bytes. When a byte is written into the buffer after *Delay time next byte must be put into the buffer. For 1200 bps minimum For 2400 bps minimum For 4800 bps minimum For 9600 bps minimum For 19200 bps minimum 9.17 msec maximum 13.76 4.59 msec maximum 6.88 2.30 msec maximum 3.44 1.15 msec maximum 1.72 0.57 msec maximum 0.86

4.3. Timer&Counter (EZM-XX50) 4.3.1. To read preset active value

4.3.1.1. ASCII Mode

To read preset active value ( register address is 2 and 3) from the EZM-XX00 device (slave ID is 1). 1 must be substracted from the register address value. In here 1 and 2 (register address-1) will be used for register address. Slave ID =1 Command =4 Register Address = 1 Byte Count =2 DECIMAL Start Character Slave ID high nibble Slave ID low nibble Command high nibble Command low nibble Register Address MSB high nibble Register Address MSB low nibble Register Address LSB high nibble Register Address LSB low nibble Byte Count MSB high nibble Byte Count MSB low nibble Byte Count LSB high nibble Byte Count LSB low nibble LRC MSB LRC LSB 13 10 58 48 49 48 52 48 48 48 49 48 48 48 50 70 56 13 10

Note : *Delay time must be put between two bytes. When a byte is written into the buffer after *Delay time next byte must be put into the buffer. *Delay value varies with the baud rate. For 1200 bps minimum For 2400 bps minimum For 4800 bps minimum For 9600 bps minimum For 19200 bps minimum 9.17 msec maximum 13.76 4.59 msec maximum 6.88 2.30 msec maximum 3.44 1.15 msec maximum 1.72 0.57 msec maximum 0.86

After sending all the bytes, wait minimum one second and read the bytes in the receive buffer.If preset active value is 2530 in this register, the device sends the bytes below:
DECIMAL

Start Character Slave ID high nibble Slave ID low nibble Command high nibble Command low nibble Byte Count high nibble Byte Count low nibble First byte MSB high nibble First byte MSB low nibble First byte LSB high nibble First byte LSB low nibble Second byte MSB high nibble Second byte MSB low nibble Second byte LSB high nibble Second byte LSB low nibble LRC MSB LRC LSB CR LF Slave ID = (Slave ID high nibble)*16+Slave ID low nibble Slave ID = (48-48)*16+(49-48) Slave ID = 1 Command = (Command high nibble)*16+Command low nibble Command = (48-48)*16+(52-48) Command = 4 Byte Count = (Byte Count high nibble)*16+Byte Count low nibble Byte Count = (48-48)*16+(50-48) Byte Count = 2

58 48 49 48 52 48 50 48 48 48 48 48 57 69 50 48 69 13 10

First byte = (First byte MSB high nibble*16+First byte MSB low nibble)*256+(First byte LSB high nibble*16+First byte LSB low nibble) First byte = ((48-48)*16+(48-48))*256+((48-48)*16+(48-48)) First byte = 0 Second byte = (Second byte MSB high nibble*16+Second byte MSB low nibble)*256+(Second byte LSB high nibble*16+Second byte LSB low nibble) Second byte = ((48-48)*16+(57-48))*256+((69-55)*16+(50-48)) Second byte = 9*256+14*16+2 Second byte = 2304+224+2 Second byte = 2530

4.3.1.2. RTU Mode

To read preset active value ( register address is 2 and 3) from the EZM-XX50 device (slave ID is 1). 1 must be substracted from the register address value. In here 1 and 2 (register address-1) will be used for register address. Slave ID Command Register Address MSB Register Address LSB Register Count MSB Register Count LSB Slave ID *Delay Command *Delay = = = = = = 1 4 0 1 0 2 1 *Delay 4 *Delay

Slave ID Register Address MSB *Delay Register Address LSB *Delay Register Count MSB *Delay Register Count LSB *Delay CRC MSB *Delay CRC LSB

1 0 *Delay 1 *Delay 0 *Delay 2 *Delay 32 *Delay 11

After sending all the bytes, wait minimum one second and read the bytes in the receive buffer.If preset active value is 2530 in this register, the device sends the bytes below: Slave ID Command Byte Count First byte MSB First byte LSB Second byte MSB Second byte LSB CRC MSB CRC LSB First byte = First byte MSB*256+First byte LSB First byte = 0*256+0 First byte = 0 Second byte = Second byte MSB*256+Second byte LSB Second byte = 9*256+226 Second byte = 2530 1 4 4 0 0 9 226 125 157

Preset Active Value = First byte*65536+Second byte Preset Active Value = 0*65536+2530 Preset Active Value = 2530

4.3.2. To change set1 value 4.3.2.1. ASCII Mode

Slave ID is 1, set1 register address is 32 and 33 and 72135 will be the new set1 value.1 must be substracted from the register address value. In here 31 and 32 (register address-1) will be used for register address. Data = 72135 Data = 1*65536+6599 so First byte is 1 Second byte is 6599 First byte = 1 First byte = 0*256+1 so Data MSB is 0 Data LSB is 1 Data MSB = 0 Data MSB = 0*16+0 so Data MSB high nibble = 0 Data MSB low nibble = 0 Data LSB = 0 Data LSB = 0*16+1 so Data LSB high nibble = 0 Data LSB low nibble = 1

Slave ID Command Register Address MSB Register Address LSB Data MSB Data LSB

=1 =6 =0 = 31 =0 =1
DECIMAL

Start Character Slave ID high nibble Slave ID low nibble Command high nibble Command low nibble Register Address MSB high nibble Register Address MSB low nibble Register Address LSB high nibble Register Address LSB low nibble Data MSB high nibble Data MSB low nibble Data LSB high nibble Data LSB low nibble LRC MSB LRC LSB 13 10

58 48 49 48 54 48 48 49 70 48 48 48 49 68 57 13 10

After sending all the bytes, wait minimum one second and read the bytes in the receive buffer. If the slave receives the query and changes the set1 high byte 1 correctly, the bytes which slave device has received, will be sent back.

Second byte = 6599 Second byte = 25*256+199 so Data MSB is 25 Data LSB is 199 Data MSB = 25 Data MSB = 1*16+9 so Data MSB high nibble = 1 Data MSB low nibble = 9 Data LSB = 199 Data LSB = 12*16+7 so Data LSB high nibble = 12 Data LSB low nibble = 7 Slave ID Command Register Address MSB Register Address LSB Data MSB Data LSB =1 =6 =0 = 32 = 25 = 199

DECIMAL

Start Character Slave ID high nibble Slave ID low nibble Command high nibble Command low nibble Register Address MSB high nibble Register Address MSB low nibble Register Address LSB high nibble Register Address LSB low nibble Data MSB high nibble Data MSB low nibble Data LSB high nibble Data LSB low nibble LRC MSB LRC LSB 13 10

58 48 49 48 54 48 48 50 48 49 57 67 55 70 57 13 10

After sending all the bytes, wait minimum one second and read the bytes in the receive buffer. If the slave receives the query and changes the set1 high byte 1 correctly, the bytes which slave device has received, will be sent back. Note : *Delay time must be put between two bytes. When a byte is written into the buffer after *Delay time next byte must be put into the buffer. *Delay value varies with the baud rate. For 1200 bps minimum For 2400 bps minimum For 4800 bps minimum For 9600 bps minimum For 19200 bps minimum 9.17 msec maximum 13.76 4.59 msec maximum 6.88 2.30 msec maximum 3.44 1.15 msec maximum 1.72 0.57 msec maximum 0.86

4.3.2.2. RTU Mode

Slave ID is 1, set1 register address is 32 and 33 and 72135 will be the new set1 value.1 must be substracted from the register address value. In here 31 and 32 (register address-1) will be used for register address. Data = 72135 Data = 1*65536+6599 First byte is 1 Second byte is 6599 First byte = 1 First byte = 0*256+1 so Data MSB = 0 Data LSB = 1 Slave ID Command Register Address MSB Register Address LSB Data MSB Data LSB =1 =6 =0 = 31 =0 =1

Slave ID *Delay Command *Delay Register Address MSB *Delay Register Address LSB *Delay Data MSB *Delay Data LSB *Delay CRC MSB *Delay CRC LSB

1 *Delay 6 *Delay 0 *Delay 31 *Delay 0 *Delay 1 *Delay 121 *Delay 204

After sending all the bytes, wait minimum one second and read the bytes in the receive buffer. If the slave receives the query and changes the set1 high byte 1 correctly, the bytes which slave device has received, will be sent back.

Second byte = 6599 First byte = 25*256+199 so Data MSB = 25 Data LSB = 199 Slave ID Command Register Address MSB Register Address LSB Data MSB Data LSB Slave ID *Delay Command *Delay Register Address MSB *Delay Register Address LSB *Delay Data MSB *Delay Data LSB *Delay CRC MSB *Delay CRC LSB =1 =6 =0 = 32 = 25 = 199 1 *Delay 6 *Delay 0 *Delay 32 *Delay 25 *Delay 199 *Delay 194 *Delay 2

After sending all the bytes, wait minimum one second and read the bytes in the receive buffer. If the slave receives the query and changes the set1 high byte 1 correctly, the bytes which slave device has received, will be sent back.

5. ESM-XX50 Parameters List

Read Holding Register Command (4XXXX) Holding registers can be read and written.

Operator parameters
Set list SEt LSt 40001 PSEt Process SV 40002 ALr1 40003 ALr2 40004 ALr3
Alarm-1 SV Alarm-2 SV Alarm-3 SV

SU-L - SU-u if process input selected SU-L-SU-u ,if analog input selected SUL2SUu2 if process input selected SU-L-SU-u ,if analog input selected SUL2SUu2 if process input selected SU-L-SU-u ,if analog input selected SUL2SUu2

Running mode run LSt

40005 tunn Tuning type Auto tuning no Atun Stun At.St

40006 Attn

40007 Auto Manual/Automatic selection for control output 40008 rSSL selection
Ramp-soak

no YES Auto man Off run HoLd (if modul 1 is relay out you can see and change this parameter else you can't use valve control) 0 = no valve control 1 = heating (reverse action) 2 = cooling (direct action) if your choice is heating or cooling; -modul1 output uses for open the valve and out3 output for close the valve. -you can't select pid output at the modul2 output) no YES

valve control type selection (CAUTION!! 40167 ULSL When you changing this parameter there must be
no electrical connections.)

40009 bPLt

Bumpless transfer

Display list dSP LSt

40010 tdSP Top display 0 PV 1 Deviation (SV-PV) 2 2nd sensor input (if equipment has 2nd sensor module) 0 Local SV 1 Power(%) 2 ramp - soak display - no ramp - soak P.End - ramp - soak waiting HoLd - ramp segment rA 1-8 - soak segment So 1-8

40011 bdSP

Bottom display (if working man mode always shows Power)

3 2nd sensor input (if equipment has 2nd sensor module) Ramp/Soak rmP SoA
40012 StrA Start ramp time 0 to 99h 59min if set 0.0 start ramp doesnt work 0 - %50 F.S. if 0 doesnt work if (set value+rSto)<temp <(set value+rSto) ramp or soak time working else ramp or soak time holding & process waiting to came normal position

40013

rSto

Ramp-soak tolerance

40014 rStY

Ramp-soak type

40015 PU_1 1. target SV 40016 tr_1 1. ramp segment time

0 1-4 segment 1 5-8 segment 2 1-8 segment SU-L SU-u 0 to 99h 59min 0 to 99h 59min SU-L SU-u 0 to 99h 59min 0 to 99h 59min SU-L SU-u 0 to 99h 59min 0 to 99h 59min SU-L SU-u 0 to 99h 59min 0 to 99h 59min SU-L - SU-u 0 to 99h 59min 0 to 99h 59min SU-L - SU-u 0 to 99h 59min 0 to 99h 59min SU-L - SU-u 0 to 99h 59min 0 to 99h 59min SU-L - SU-u 0 to 99h 59min 0 to 99h 59min

40017 tS_1 1. soak segment time 40018 PU_2 2. target SV 40019

40020

tr_2 2. ramp segment time tS_2 2. soak segment time

40021 PU_3 3. target SV 40022 tr_3 3. ramp segment time

40023 tS_3 3. soak segment time 40024 PU_4 4. target SV 40025 tr_4 4. ramp segment time

40026 tS_4 4. soak segment time

40027 PU_5 40028 5. target SV 5. ramp segment time 5. soak segment time 6. target SV 6. ramp segment time 6. soak segment time 7. target SV 7. ramp segment time 7. soak segment time 8. target SV 8. ramp segment time 8. soak segment time

tr_5

40029 tS_5
40030

PU_6 tr_6

40031

40032 tS_6 40033 PU_7 40034 tr_7

40035 tS_7
40036 PU_8

40037 tr_8 40038 tS_8

Technician parameters
Process input configuration PnP ConF 40039 SSL
Input signal selection TC (L,J,K,R,S,T,B,E,N,C) RTD (PT100,JPT100), PTC (900ohm/25C), NTC (1000ohm/25C) mA, mV, V TC (L.J,K,R,S,T,B,E,N,C) 0 (L) 1 (L) 2 (J) 3 (J) 4 (K) 5 (K) 6 (R) 7 (R) 8 (S) 9 (S) 10 (T) 11 (T) 12 (B) 13 (B) 14 (E) 15 (E) 16 (N) 17 (N) 18 (C) 19 (C) C F scale min upL

Process input configuration

40040 TCSL Type and input

scale selection(TC)

-148F -148.0F -328F -199.9F -328F -199.9F 32F 32.0F 32F 32.0F -328F -199.9F 111F 111.0F -238F -199.9F -328F -199.9F 32F 32.0F

1562F 999.9F 1652F 999.9F 2372F 999.9F 3092F 999.9F 3092F 999.9F 752F 752.0F 3272F 999.9F 1292F 999.9F 2372F 999.9F 3261F 999.9F

-100C -100.0C -200C -199.9C -200C -199.9C 0C 0.0C 0C 0.0C -200C -199.9C 44C 44.0C -150C -150.0C -200C -199.9C 0C 0.0C

850C 850.0C 900C 900.0C 1300C 999.9C 1700C 999.9C 1700C 999.9C 400C 400.0C 1800C 999.9C 700C 700.0C 1300C 999.9C 2300C 999.9C

40064 unt 40065 LoL 40066 uPL

Unit selection Lower limit of the input range Upper limit of the input range

LoL - scale max

(FS = upL LoL)

40067 PuoF PV offset

Time constant of input filter Cold junction 40069 CJnC compensation

40068

FLt

-10 to 10%FS With this function, predetermined value is added to the input reading 0.0 to 900.0 seconds no = Does not perform the RCJ YES = Performs the RCJ

Process input configuration

40041 rtdS Type and input scale selection(RTD) Unit selection

RTD (PT100, JPT100, PTC, NTC)

0 (PT100) 1 (PT100) C F scale min uPL -328F 1202F -199.9F 999.9F -200C -199.9C 650C 650.0C

40064 unt 40065 LoL 40066 uPL

Lower limit of the input range

Upper limit of the input range

LoL - scale max

-10 to 10%FS With this function, predetermined value is added to the input reading 0.0 to 900.0 seconds

40067 PuoF PV offset 40068 FLt

Time constant of input filter

Process input configuration

(mV,V,mA)

Type and input scale 40042 uASL selection(mA,mV,V)

40043 dPnt

Point position

40044 uCAL User calibration 40045 TpoL Two point Low point value 40046 40047 40048 40049 40050 40051 40052 40053 40054 40055 40056 40057 40058 40059 40060 40061 40062 40063 TpoH Po00 Po01 Po02 Po03 Po04 Po05 Po06 Po07 Po08 Po09 Po10 Po11 Po12 Po13 Po14 Po15 Po16
Two point High point value Multi point Disp out val 0 Multi point Disp out val 1 Multi point Disp out val 2 Multi point Disp out val 3 Multi point Disp out val 4 Multi point Disp out val 5 Multi point Disp out val 6 Multi point Disp out val 7 Multi point Disp out val 8 Multi point Disp out val 9 Multi point Disp out val 10 Multi point Disp out val 11 Multi point Disp out val 12 Multi point Disp out val 13 Multi point Disp out val 14 Multi point Disp out val 15 Multi point Disp out val 16 Unit selection

0 (0...50mV) 1 (0...5V) 2 (0...10V) 3 (0...20mA) 4 (4...20mA) 0 9999 1 999.9 2 99.99 3 9.999 0 None 1 Two Point 2 Multi Point -1999 9999 -1999 9999 -1999 9999 -1999 9999 -1999 9999 -1999 9999 -1999 9999 -1999 9999 -1999 9999 -1999 9999 -1999 9999 -1999 9999 -1999 9999 -1999 9999 -1999 9999 -1999 9999 -1999 9999 -1999 9999 -1999 9999 C F U _ =No unit scale min uPL LoL - scale max -10 to 10%FS With this function, predetermined value is added to the input reading 0.0 to 900.0 seconds

40064 unt 40065 LoL 40066 uPL

Lower limit of the input range Upper limit of the input range

40067 PUoF PV offset 40068 IFLt

Time constant of input filter

PID control parameters

40070 P-Ht
40071 -Ht 40072 d-Ht Propotional Band for heating Integral Time for heating Derivative Time for heating Cycle time of control output(heating)

Pd ConF
0.0 to 999.9% of the FS

40073 Ct-H

0 to 3600 seconds 0.0 to 999.9 seconds 1 to 150 seconds For contact output: typical 30 second For SSR-driving output: typical 1 to 2 second

(if ULSL heating or cooling you can't see this parameter)

0.0 to ouLH Not avaiable for double heat/cool action

40074 oLLH Low output limit (heating) 40075 ouLH High output limit (heating) 40076 oLtH 40077
Output minimum on time (heating)

oLLH To 100.0
0.0 to Ct-H 0.0 is 50 msec

(if ULSL heating or cooling you can't see this parameter)

0.0 to 100.0 % (P-Ht * CCoE/100=P-CL) if (0.0) no coefficient

cooling side proportional CCoE band coefficient

40078 P-CL
40079 -CL 40080 d-CL

Proportional band for cooling Integral time for cooling Derivative time for cooling Cycle time for control output(cooling)

0.0 to 999.9% of the FS 0 to 3600 seconds 0.0 to 999.9 seconds 1 to 150 seconds (Avaiable for dual output only) For contact output: typical 30 second For SSR-driving output: typical 1 to 2 second

40081

Ct-C

(if ULSL heating or cooling you can't see this parameter) 40082 oLLC Low output limit (cooling) 40083 ouLC High output limit (cooling) 40084 oLtC time(cooling) 40085 Ar 40086 SuoF 40087 PoFS
Output minimum on Anti-reset windup SV offset value 0.0 to ouLC Not avaiable for double heat/cool action

oLLC To 100.0
0.0 to Ct-C 0.0 is 50 msec

(if ULSL heating or cooling you can't see this parameter)

0 to 100% FS -50 to 50 % FS if only cooling pid -100.0 to 0 if only heating pid 0.0 to 100.0 if cooling & heating pid -100.0 to 100.0 adding pid output if only cooling pid -100.0 to 0 if only heating pid 0.0 to 100.0 if cooling & heating pid -100.0 to 100.0 adding pid output (PoSS * PUAL / FS) 1 max. scale

pid output offset

pid output offset with set 40088 PoSS point Measured value stable range Proportional band shift(Overlap/Deadband) Output setting when in sensor break

40089 Strn 40090 o-db 40091 Sbou

-50.0 to 50.0 % FS adding PUAL for cooling control if only cooling pid -100.0 to 0 if only heating pid 0.0 to 100.0 if cooling & heating pid -100.0 to 100.0

Input/Output Modul 1 configuration [Outputs(Relay,SSR)] 40092 out1

Output function HEAt cooL Lout

oP1 ConF

Heating (reverse action) Cooling (direct action) Logic output

Input/Output Modul 1 configuration [Outputs(Relay,SSR)] (Heat or Cool) 40093 Con1 Control action
on.oF Pd ON/OFF Control PID Control

Input/Output Modul 1 configuration [Outputs(Relay,SSR)] (ON/OFF control) 0 % 50 FS 40094 HYS1 Hysteresis 40095 HYn1 Hysteresis mode 40096 tm1
Minimum OFF time 0 1 0.0 100.0 sn SV+(HYS/2) and SV-(HYS/2) SV and SV+HYS or SV and SV-HYS

Input/Output Modul 1 configuration [Outputs(Relay,SSR)] (Logic output) 0 Alarm output 1 Manual/Automatic Logic output 2 Sensor break 40097 Lou1 3 PV out of range function 4 analog input sensor break 5 analog input sensor PV out of range

Input/Output Modul 1 alrm sensor type sel [Outputs(Relay,SSR)](Logic out) 0 Process input sensor Analog modul sensor 40162 ALS1 Alarm sensor selection 1 Input/Output Modul 1 configuration [Outputs(Relay,SSR)] (Logic out-Alarm) 0 Process high alarm 1 Process low alarm 2 Deviation high alarm not available if analog in selected 3 Deviation low alarm not available if analog in selected 40098 Alt1 Type 4 Deviation band alarm not available if analog in 5 Deviation range alarm not available if analog in selected if process in selected 0 - %50 FS, if analog in selected 0 - %50 40099 ALH1 Alarm hysteresis FS2 Input/Output Modul 1 configuration [Analog Output] 40100 oAt1
Output type 0 1 0-20 mA 4-20 mA

Input/Output Modul 1 configuration [Analog Output] 40101 OuA1 Function

HEAt cooL rEtr Heating Cooling Retransmission

Input/Output Modul 1 configuration [Analog Output] (Retransmission) 40102 rEt1

Retransmission Function rt.Pr rt.Er rt.PU Retransmission of PV Retransmission of error Retransmission of SV

Input/Output Modul 1 configuration [Logic input] 0 Manual / Automatic ( when logic input closed, changes Auto program parameter, if man changes to Auto, if Auto changes to man) 1 Start Stop the AT (when logic input closed, changes Attn program parameter, if no changes to YES, if YES changes to no) 40160 Lin1 Function 2 run / off the ramp (when logic input closed, changes rSSL program parameter, if run or HoLd changes to oFF, if oFF changes to run) 3 run / hold the ramp (when logic input closed, changes rSSL program parameter, if run changes to HoLd, if HoLd changes to run) Input/Output Modul 1 configuration [Analog input] TC (L,J,K,R,S,T,B,E,N,C) Analog input Modul 1 RTD (PT100,JPT100), PTC (900ohm/25C), NTC (1000ohm/25C) 40130 SL1 Input signal selection mA, mV, V

TC (L.J,K,R,S,T,B,E,N,C) -148F 1562F -100C 850C 0 (L) 1 (L) -148.0F 999.9F -100.0C 850.0C 2 (J) -328F 1652F -200C 900C -199.9F 999.9F -199.9C 900.0C 3 (J) 4 (K) -328F 2372F -200C 1300C 5 (K) -199.9F 999.9F -199.9C 999.9C 32F 3092F 0C 1700C 6 (R) 7 (R) 32.0F 999.9F 0.0C 999.9C 8 (S) 32F 3092F 0C 1700C Analog input Modul 1 32.0F 999.9F 0.0C 999.9C 9 (S) 40131 TSL1 Type and input scale 10 (T) -328F 752F -200C 400C selection(TC) 11 (T) -199.9F 752.0F -199.9C 400.0C 111F 3272F 44C 1800C 12 (B) 13 (B) 111.0F 999.9F 44.0C 999.9C 14 (E) -238F 1292F -150C 700C -199.9F 999.9F -150.0C 700.0C 15 (E) 16 (N) -328F 2372F -200C 1300C 17 (N) -199.9F 999.9F -199.9C 999.9C 18 (C) 32F 3261F 0C 2300C 19 (C) 32.0F 999.9F 0.0C 999.9C Analog input Modul 1 Unit C 40138 unt1 F selection Second Sensor scale min upL1 Analog input Modul 1 Lower 40139 LoL1 limit of the input range Analog input Modul 1 Upper LoL1 - Second Sensor scale max 40140 UpL1 limit of the input range -10 to 10% (FS1 = upL1 LoL1) Analog input modul 1 PV With this function, predetermined value is added to the 40141 PU1 offset input reading Time constant of Analog input modul 1 input filter Analog input Modul 1 Cold 40143 CJn1 junction compensation Analog input Remote 40144 rES1 Selection 40142 FL1 0.0 to 900.0 seconds no = Does not perform the RCJ YES = Performs the RCJ YES no

Analog input-1 configuration

Analog input-1 configuration 40132 rtS1 40138 unt1 40139 LoL1 40140 uPL1 40141 PU1 40142 FL1

RTD (PT100, JPT100, PTC, NTC) 0 -328F 1202F -200C 650C Analog input Modul 1 Type 1 -199.9F 999.9F -199.9C 650.0C and input scale (PT10 selection(RTD) 0) Analog input Modul 1 Unit C F selection Second Sensor scale min UpL1 Analog input Modul 1 Lower limit of the input range Analog input Modul 1 Upper limit of the input range Analog input modul 1 PV offset Time constant of Analog input modul 1 input filter LoL1 - Second Sensor scale max -10 to 10% FS1 With this function, predetermined value is added to the input reading 0.0 to 900.0 seconds

40144 ReS1

Analog input Remote Selection

YES no

Analog input-1 configuration 40133 uAS1

(mV,V,mA)
0 0-20 type 1 4-20 type 0=9999 1=999.9 2=99.99 3=9.999 0 1 -1999 9999

Analog input Modul 1 Type and input scale selection (mA,mV,V)

40134 dPn1 Analog input Modul 1 Point position

Analog input Modul 1 User

40135 CA1 calibration 40136

None Two point

IcL1 Low point value

Analog input Modul 1 Two point

40137 CH1

Analog input Modul 1 Two point High point value Analog input Modul 1 Unit selection limit of the input range

-1999 9999

40138 unt1

40139 LoL1 Analog input Modul 1 Lower 40140 uPL1 Analog input Modul 1 Upper
limit of the input range

C F U _ =No unit Second Sensor scale min UpL1

LoL1 - Second Sensor scale max

-10 to 10% FS1 With this function, predetermined value is added to the input reading 0.0 to 900.0 seconds YES no

40141 PU1 Analog input modul 1 PV offset 40142 IFL1

Time constant of Analog input modul 1 input filter

40144 rES1 Analog input Remote Selection

Input/Output Modul 2 configuration [Outputs(Relay,SSR)] 40103 out2 Output function

HEAt cooL Lout

oP2 ConF

Heating (reverse action) Cooling (direct action) Logic output

Input/Output Modul 2 configuration [Outputs(Relay,SSR)] (Heat or Cool) 40104 Con2 Control action
on.oF Pd ON/OFF Control PID Control

Input/Output Modul 2 configuration [Outputs(Relay,SSR)] (ON/OFF control) 0 % 50 FS 40105 HYS2 Hysteresis 40106 HYn2 Hysteresis mode 40107 tm2 Minimum OFF time
0 1 0.0 100.0 sn SV+(HYS/2) and SV-(HYS/2) SV and SV+HYS or SV and SV-HYS

Input/Output Modul 2 configuration [Outputs(Relay,SSR)] (Logic output)

40108 Lou2

Logic output function

0 1 2 3 4 5

Alarm output Manual/Automatic Sensor break PV out of range analog input sensor break analog input sensor PV out of range

Input/Output Modul 2 alrm sensor type sel [Outputs(Relay,SSR)](Logic out) 0 Process input sensor Analog modul sensor 40163 ALS2 Alarm sensor selection 1 Input/Output Modul 2 configuration [Outputs(Relay,SSR)] (Logic out-Alarm) 0 Process high alarm 1 Process low alarm 2 Deviation high alarm not available if analog in selected 40109 Alt2 Type 3 Deviation low alarm not available if analog in selected 4 Deviation band alarm not available if analog in selected 5 Deviation range alarm not available if analog in selected if process in selected 0 - %50 FS, if analog in selected 0 - %50 40110 ALH2 Alarm hysteresis FS1 Input/Output Modul 2 configuration [Analog Output] 40111 oAt2
Output type 0 1 0-20 mA 4-20 mA

Input/Output Modul 2 configuration [Analog Output] 40112 OuA2 Function

HEAt cooL rEtr rt.Pr rt.Er rt.PU Heating Cooling Retransmission Retransmission of PV Retransmission of error Retransmission of SV

Input/Output Modul 2 configuration [Analog Output] (Retransmission) 40113 Ret2 Retransmission Function

Input/Output Modul 2 configuration [Logic input] Manual / Automatic ( when logic input closed, changes 0 Auto program parameter, if man changes to Auto, if Auto changes to man) 1 Start Stop the AT (when logic input closed, changes Attn program parameter, if no changes to YES, 40161 Lin2 Function 2 3 run / off the ramp (when logic input closed, changes RssL program parameter, if run or HoLd changes run / hold the ramp (when logic input closed, changes rSSL program parameter, if run changes to HoLd, if HoLd changes to run)

Input/Output Modul 2 configuration [Analog input] Analog input Modul 2 TC (L,J,K,R,S,T,B,E,N,C) RTD (PT100,JPT100), PTC (900ohm/25C), NTC (1000ohm/25C) 40145 SL2 Input signal selection mA, mV, V

Analog input-2 configuration

40146 TSL2

40153 40154

unt2 LoL2

40155 UpL2

40156 PU2 40157 FL2 40158

TC (L.J,K,R,S,T,B,E,N,C) -100C 850C 0 (L) -148F 1562F 1 (L) -148.0F 999.9F -100.0C 850.0C 2 (J) -328F 1652F -200C 900C -199.9C 900.0C 3 (J) -199.9F 999.9F 4 (K) -328F 2372F -200C 1300C 5 (K) -199.9F 999.9F -199.9C 999.9C 3092F 0C 1700C 6 (R) 32F 7 (R) 32.0F 999.9F 0.0C 999.9C 8 (S) 32F 3092F 0C 1700C Analog input Modul 2 Type and 0.0C 999.9C 9 (S) 32.0F 999.9F 10 (T) -328F 752F -200C 400C input scale selection(TC) 11 (T) -199.9F 752.0F -199.9C 400.0C 3272F 44C 1800C 12 (B) 111F 13 (B) 111.0F 999.9F 44.0C 999.9C 14 (E) -238F 1292F -150C 700C -150.0C 700.0C 15 (E) -199.9F 999.9F 16 (N) -328F 2372F -200C 1300C 17 (N) -199.9F 999.9F -199.9C 999.9C 3261F 0C 2300C 18 (C) 32F 19 (C) 32.0F 999.9F 0.0C 999.9C Analog input Modul 2 Unit C F selection Second Sensor scale min upL2 Analog input Modul 2 Lower limit of the input range Analog input Modul 2 Upper limit of LoL2 - Second Sensor scale max the input range -10 to 10% FS2 (FS2 = upL2 LoL2) With this function, predetermined value is added to the Analog input modul 2 PV offset input reading

Time constant of Analog input 0.0 to 900.0 seconds modul 2 input filter Analog input Modul 2 Cold junction no = Does not perform the RCJ YES = Performs the RCJ CJn2 compensation YES no

40159 rES2 Analog input 2 Remote Selection

Analog input-2 configuration RTD (PT100, JPT100, PTC, NTC) 0 (PT100) -328F 40147 rtS2 Analog input Modul 2 Type 1 (PT100) -199.9F and input scale selection(RTD) 40153 unt2 Analog input Modul 2 Unit selection 40154 40155 LoL2 Analog input Modul 2 Lower limit of the input range Analog input Modul 2 Upper limit of uPL2 the input range
C F

1202F -200C 999.9F -199.9C

650C 650.0C

Second Sensor scale min UpL2 LoL2 - Second Sensor scale max -10 to 10% FS2 With this function, predetermined value is added to the input reading 0.0 to 900.0 seconds YES no

40156 PU2 Analog input modul 2 PV offset FL2 Time constant of Analog input modul 2 input filter 40159 rES2 Analog input 2 Remote Selection 40157

Analog input-2 configuration

(mV,V,mA)

40148 uAS2 Analog input Modul 2 Type and input

scale selection (mA,mV,V)

40149 dPn2 Analog input Modul 2 Point position 40150 CA2

Analog input Modul 2 User calibration point value

40151 IcL2 Analog input Modul 2 Two point Low 40152 CH2 Analog input Modul 2 Two point High
point value

0 0-20 type 1 4-20 type 0 = 9999 1 = 999.9 2 = 99.99 3 = 9.999 0 1 -1999 9999 -1999 9999

None Two point

40153

unt2 Analog input Modul 2 Unit selection

40154 LoL2 Analog input Modul 2 Lower limit of the

input range input range

C F U _ =No unit Second Sensor scale min UpL2

40155 uPL2 Analog input Modul 2 Upper limit of the 40156 PU2
Analog input modul 2 PV offset input filter

LoL2 - Second Sensor scale max

-10 to 10% FS2 With this function, predetermined value is added to the input reading 0.0 to 900.0 seconds YES no

40157 IFL2 Time constant of Analog input modul 2 40159 rES2 Analog input 2 Remote Selection

Output 3 configuration [Relay] 40114 out3

Output function

out3 ConF
Heating (reverse action) Cooling (direct action) Logic output

HEAt cooL Lout

Output 3 configuration [Relay] (Heating or Cooling) 40115 Con3 Control action

on.oF Pd ON/OFF Control PID Control

Output 3 configuration [Relay] (ON/OFF control) 0 % 50 FS 40116 HYS3 Hysteresis 40117 HYn3 Hysteresis mode 40118 tm3
Minimum OFF time 0 1 0.0 100.0 sn SV+(HYS/2) and SV-(HYS/2) SV and SV+HYS or SV and SV-HYS

Output 3 configuration [Relay] (Logic output) 0 1 40119 Lou3 Logic output function 2 3 4 5

Alarm output Manual/Automatic Sensor break PV out of range analog input sensor break analog input sensor PV out of range

Input/Output Modul 3 alrm sensor type sel [Outputs(Relay,SSR)](Logic output) 0 Process input sensor Analog modul sensor 40164 ALS3 Alarm sensor selection 1 Output 3 configuration [Relay] (Logic output-Alarm) 0 Process high alarm 1 Process low alarm 2 Deviation high alarm not available if analog in selected 3 Deviation low alarm not available if analog in selected 40120 Alt3 Type 4 Deviation band alarm not available if analog in selected 5 Deviation range alarm not available if analog in selected

40121 ALH3 Alarm hysteresis

if process in selected 0 - %50 FS, if analog in selected 0 - %50 FS1 or 0 - %50 FS2 (which analog input modul is available)

General

GEnn ConF Scale min to SU-u These parameter set the setting range low limit of the SV SU-L to Scale max These parameters set the setting range high limit of the SV Second Sensor Scale min to SUu2 These parameter set the setting range low lim of the AUL1,AUL2 and AUL3 SUL2 to Second Sensor Scale max These parameter set the setting range high lim of the AUL1,AUL2 and AUL3 15 - 600 sec(if ULSL no you can't see this parameter) 0.1 5.0 % (if ULSL no you can't see this parameter)

40122 SU-L SV lower limiter 40123 SU-u SV upper limiter Second Sensor SV lower 40165 SUL2 limiter Second Sensor SV upper 40166 SUu2 limiter 40168 ULtt motor travel time 40169 ULHY minimum output step Communication Com ConF 40124 Sadr Slave address
Baud rate

40125 bAud

40126 Prty 40127 Stpb

Parity Stop bit

1-247 0 = 1200 1 = 2400 2 = 4800 3 = 9600 4 = 19200 0 = none 1 = odd 2 = even 0 = 1 stop bit 1 = 2 stop bits

Password PASS ConF 40128 oPPS Operator password

0 9999 0 no operator password protection enter 0 in the operator password input mode for only look operator parameters 0 9999 0 no technician password protection enter 0 in the technician password input mode for only look technician parameters

40129 tCPS Technician password

Read Input Register Command (3XXXX) Input registers can not be changed by the user. Input registers can be only read.

Address Parameter Name

Parameter Description
If input type is tc or pt ; if tc or pt is even number, it hasn't got a point ; if tc or pt is odd number, it has a point If other is selected, point is determined by the parameter dpnt range= -1999 - 9999 -100.0 to 100.0 SU-L SU-h Reading Value XXYY XX = Modul1 Type YY = Modul2 Type Moduls Present in the ESM-XX50 Relay Out Modul = 00000000 SSR Out Modul = 00001000 Analog Out Modul = 00000100 Logic Input Modul = 00001100 Current in Modul = 00000010 2. Sensor in Modul =00001010 No Modul =00001110 0 to 60000 0 to 60000 Reading Value XXYY for ESM-7750 OR ESM-9950 XX-bit 0 remote led XX-bit 1 auto led XX-bit 2 man led XX-bit 3 ramp led XX-bit 4 XX-bit 5 at led XX-bit 6 XX-bit 7 sv led YY-bit 0 op3 led YY-bit 1 v led YY-bit 2 op1 led YY-bit 3 op2 led YY-bit 4 YY-bit 5 f led YY-bit 6 c led YY-bit 7 for ESM-4450 XX-bit 0 f led XX-bit 1 c led XX-bit 2 XX-bit 3 XX-bit 4 auto led XX-bit 5 XX-bit 6 XX-bit 7 man led YY-bit 0 remote led YY-bit 1 op3 led YY-bit 2 op2 led YY-bit 3 sv led YY-bit 4 ramp led YY-bit 5 op1 led YY-bit 6 at led YY-bit 7 v led

30001

Process Variable

30002 30003

Output Power Set Value

30004

Modul Types

30005 30006

Analog Output Modul-1 Analog Output Modul-2

30007

Leds

30008 Errors

30009 Decimal Point Selection

Reading Value XXYY XX=0 YY=Errors bit 0 sensor break bit 1 reading value overflow from Upl bit 2 reading value underflow from LoL bit 3 tuning cant ended before 8 hours bit 4 reading heater current value exceeded current set value bit 5 reading value overflow from uPL1 or uPL2 bit 6 reading value underflow from LoL1 or LoL2 bit 7 second sensor, sensor break 0 = XXXX 1 = XXX.X 2 = XX.XX 3 = X.XXX
Reading Value XXYY XX = 0 YY = Ramp Soak Type bit 0 ramp-soak number bit0 bit 1 ramp-soak number bit1 bit 2 ramp-soak number bit2 bit 3 ramp-soak number bit3 bit 4 0 bit 5 ramp-soak holding bit 6 first energy on ramp working bit 7 if set soak else ramp working example: 00001000 --> 8. ramp working 00101000 --> 8. ramp holding 10001000 --> 8. soak working 10101000 --> 8. soak holding 01000000 --> 8. first energy on ramp working 01100000 --> 8. first energy on ramp holding If input type is tc or pt ; if tc or pt is 2*k, it hasn't got a point ; if tc or pt is 2*k+1, it has a point If other is selected, point is determined by the parameter (dpn1 or dpn2 parameters.

30010

Ramp-Soak

30011

Second Sensor Variable

range= -1999 9999 0 = process value display (decimal point dpnt) 1 = (set value process value) dispaly (decimal point dpnt) 2 = second sensor process value display (decimal point dpn1 or dpn2 which sensor is available) 0 = set value display (decimal point dpnt) 1 = output % power display 2 = ramp&soak display 0 = XXXX 1 = XXX.X 2 = XX.XX 3 = X.XXX Reading Value XXYY XX = Instrument Type 4 = ESM-4450 5 = ESM-7750 6 = ESM-9950 YY = Revision Number 0 = heat 1 = cool 2 = logic out 0 = on.Of 1 = Pid

3 0012 Top Display Selection

30013 Bottom Display Selection

Second Sensor 30014 Decimal Point Selection

30015

Instrument Type & Revision No

30016 30017

out1 Relay or SSR Output1 Function Con1 Output1 Control Action

30018

ouA1 Analog Output1 Function

30019

out2 Relay or SSR Output1 Function

0 = heat 1 = cool 2 = retransmission 0 = heat 1 = cool 2 = logic out 0 = on.Of 1 = Pid 0 = heat, 1 = cool, 2 = retransmission 0 = heat, 1 = cool, 2 = logic out 0 = on.Of, 1 = Pid

30020 Con2 Output1 Control Action ouA2 Analog Output1 Function 30022 out3 Relay or SSR Output1 Function 30021 30023 Con3 Output1 Control Action

After power up revision number of the device is seen at the top display. At the bottom display, first two digit implements the ouput type that is connected to the first modul. Second two digit implements the output type that is connected to the second modul. For SSR output type For Relay output type For analog output type For analog input type For digital input type If modul is empty : oS : or : oA : iA : id :E

6. ESM-XX00 Parameters List

Read Holding Register Command (4XXXX) Holding registers can be read and written.

ALARM SET 40001 AUL1 Alarm-1 SV 40002 AUL2 Alarm-2 SV 40003 AUL3 Alarm-3 SV Technician parameters

SU-L - SU-u SU-L - SU-u SU-L - SU-u

Process input configuration PnP ConF 40004

Issl Input signal selection TC (L,J,K,R,S,T,B,E,N,C) RTD (PT100,JPT100), PTC (900ohm/25C), NTC (1000ohm/25C) mA, mV, V TC (L.J,K,R,S,T,B,E,N,C) 0 (L) -148F 1562F -100C 850C 1 (L) -148.0F 999.9F -100.0C 850.0C 2 (J) -328F 1652F -200C 900C 3 (J) -199.9F 999.9F -199.9C 900.0C 4 (K) -328F 2372F -200C 1300C 5 (K) -199.9F 999.9F -199.9C 999.9C 6 (R) 32F 3092F 0C 1700C 7 (R) 32.0F 999.9F 0.0C 999.9C 8 (S) 32F 3092F 0C 1700C 9 (S) 32.0F 999.9F 0.0C 999.9C Type and input scale selection(TC) 10 (T) -328F 752F -200C 400C 11 (T) -199.9F 752.0F -199.9C 400.0C 12 (B) 111F 3272F 44C 1800C 13 (B) 111.0F 999.9F 44.0C 999.9C 14 (E) -238F 1292F -150C 700C 15 (E) -199.9F 999.9F -150.0C 700.0C 16 (N) -328F 2372F -200C 1300C 17 (N) -199.9F 999.9F -199.9C 999.9C 18 (C) 32F 3261F 0C 2300C 19 (C) 32.0F 999.9F 0.0C 999.9C C Unit selection F scale min upL (if reading value < upL display blink with reading Lower limit of the input range value & uuuu) LoL - scale max (FS = upL LoL) (if reading value > LoL display Upper limit of the input range blink with reading value & nnnn) -10 to 10%FS PV offset With this function, predetermined value is added to the input reading Time constant of input filter 0.0 to 600.0 seconds no = Does not perform the RCJ Cold junction compensation YES = Performs the RCJ

Process input configuration

40005

TCSL

40029 40030 40031

unt LoL uPL

40032 PuoF 40033 FLt 40034 CJnC

Process input configuration

40006 Type and input scale rtdS selection(RTD) unt LoL uPL Unit selection

RTD (PT100, JPT100, PTC, NTC)

0 (PT100) 1 (PT100) -328F -199.9F 1202F 999.9F -200C -199.9C 650C 650.0C

40029 40030 40031

Lower limit of the input range Upper limit of the input range

40032 PuoF PV offset

C F scale min upL (if reading value < upL display blink with reading value & uuuu) LoL - scale max (FS = upL LoL) (if reading value > LoL display blink with reading value & nnnn) -10 to 10%FS With this function, predetermined value is added to the input reading

0.0 to 600.0 seconds 40033 FLt Time constant of input filter Process input configuration (mV,V,mA) 0 (0...50mV) 1 (0...5V) Type and input scale selection(mA,mV,V) 2 (0...10V) uASL 3 (0...20mA) 4 (4...20mA) 0=9999 Point position 1=999.9 Dpnt 2=99.99 3=9.999 0 None 1 Two Point uCAL User calibration 2 Multi Point -1999 9999 TpoL Two point Low point value -1999 9999 TpoH Two point High point value -1999 9999 Po00 Multi point Disp out val 0 -1999 9999 Po01 Multi point Disp out val 1 -1999 9999 Po02 Multi point Disp out val 2 -1999 9999 Po03 Multi point Disp out val 3 -1999 9999 Po04 Multi point Disp out val 4 -1999 9999 Po05 Multi point Disp out val 5 -1999 9999 Po06 Multi point Disp out val 6 -1999 9999 Po07 Multi point Disp out val 7 -1999 9999 Po08 Multi point Disp out val 8 -1999 9999 Po09 Multi point Disp out val 9 -1999 9999 Po10 Multi point Disp out val 10 -1999 9999 Po11 Multi point Disp out val 11 -1999 9999 Po12 Multi point Disp out val 12 -1999 9999 Po13 Multi point Disp out val 13 -1999 9999 Po14 Multi point Disp out val 14 -1999 9999 Po15 Multi point Disp out val 15 -1999 9999 Po16 Multi point Disp out val 16 C F unt U Unit selection _ =No unit scale min upL (if reading value < upL display blink with LoL Lower limit of the input range reading value & uuuu) LoL - scale max (FS = upL LoL) (if reading value > LoL uPL Upper limit of the input range display blink with reading value & nnnn) -10 to 10%FS With this function, predetermined value is added to the input PUoF PV offset reading 0.0 to 600.0 seconds IFLt Time constant of input filter

40007

40008

40009 40010 40011 40012 40013 40014 40015 40016 40017 40018 40019 40020 40021 40022 40023 40024 40025 40026 40027 40028 40029 40030 40031 40032 40033

Input/Output Modul 1 configuration [Outputs(Relay,SSR)] 40035 Lou1 Logic output function

0 1 2

out1 ConF

Alarm output Sensor break PV out of range

Output Modul 1 configuration [Outputs(Relay,SSR)] (Logic output-Alarm) 40036 Alt1 Type

0 1 Process high alarm Process low alarm

40037 ALH1 Alarm hysteresis

0 - %50 FS

Output Modul 1 configuration [PROCESS VALUE Analog Output] 40038 oAt1 Output type
0 1 0-20 Ma 4-20 mA

Output Modul 2 configuration [Outputs(Relay,SSR)] 40039 Lou2 Logic output function

0 1 2

out2 ConF

Alarm output Sensor break PV out of range

Output Modul 2 configuration [Outputs(Relay,SSR)] (Logic output-Alarm) 40040 Alt2 Type

0 1 Process high alarm Process low alarm

40041 ALH2 Alarm hysteresis

0 - %50 FS

Output Modul 2 configuration [PROCESS VALUE Analog Output] 40042 oAt2 Output type
0 1 0-20 Ma 4-20 mA

Output 3 configuration [Relay] 40043 Lou3 Logic output function

out3 ConF
0 1 2 Alarm output Sensor break PV out of range

Output 3 configuration [Relay] (Logic output-Alarm) 40044 Alt3 Type

0 1 Process high alarm Process low alarm

40045 ALH3 Alarm hysteresis General 40046 40047 Genn ConF SU-L SV lower limiter SU-u SV upper limiter

0 - %50 FS

Scale min to SU-u These parameter set the setting range low limit of the SV SU-L to Scale max These parameters set the setting range high limit of the SV

Communication Com ConF 40048 Sadr Slave address 40049 bAud Baud rate

1-247 0=1200 1=2400 2=4800 3=9600 4=19200 0=none 1=odd 2=even 0=1 stop bit 1=2 stop bits

40050 40051

Prty Parity Stpb Stop bit

Password PASS ConF 40052 tCPS Technician password

0 9999 0 no technician password protection enter 0 in the technician password input mode for only look technician parameters

Read Input Register Command (3XXXX) Input registers can not be changed by the user. Input registers can be only read. Address Parameter Name Parameter Description

30001

Process Variable

30004

Modul Types

30005 30006

Analog Output Modul 1 Analog Output Modul 2

If input type is tc or pt ; if tc or pt is even number, it hasn't got a point ; if tc or pt is odd number, it has a point If other is selected, point is determined ny the parameter dpnt range= -1999 - 9999 Reading Value XXYY XX = Modul1 Type, YY = Modul2 Type Moduls Present in the ESM-XX00 Relay Out Modul = 00000000 SSR Out Modul = 00001000 Analog Out Modul = 00000100 No Modul = 00001110 0 to 60000 0 to 60000 Reading Value XXYY for ESM-7700 OR ESM-9900 YY-bit 0 op3 led YY-bit 1 v led YY-bit 2 op1 led YY-bit 3 op2 led YY-bit 5 f led YY-bit 6 c led for ESM-4400 XX-bit 0 f led XX-bit 1 c led YY-bit 1 op3 led YY-bit 2 op2 led YY-bit 5 op1 led YY-bit 7 v led Reading Value XXYY XX = 0 YY = Errors bit 0 sensor break bit 1 reading value overflow from uPL bit 2 reading value underflow from LoL 0 = XXXX 1 = XXX.X 2 = XX.XX 3 = X.XXX Reading Value XXYY XX = Instrument Type 7 = ESM-4400 8 = ESM-7700 9 = ESM-9900 YY = Revision Number

30007

Leds

30008

Errors

30009

Decimal Point Selection

30015

Instrument Type & Revision No

When power up revision number is shown on the display, then output type of modul1 is shown in first two digit and output type of modul2 is shown in second two digit . For SSR output type For Relay output type For analog output type If the modul is empty : oS : or : oA :E

7. EZM-XX50 Parameters List

Read Input Register Command (3XXXX) Input registers can not be changed by the user. Input registers can be only read.

Address 30001 30002 30003 30004 30005 30006 30007 30008 30009 30010 30011 30012 30013 30014 30015 30016 30017 30018 40019 40020

Parameter Name Preset Active Value Signed Preset Active Value High Preset Active Value Low Batch Active Value High Batch Active Value Low NPN / PNP Seimi Fonksiyon Seimi Out1 Durumu Out2 Durumu SSR1 Durumu SSR2 Durumu Total Active Value High Total Active Value Total Active Value Low EZM Slave Code Display Decimal Point Set Point-1 High Set Point-1 Low Set Point-2 High Set Point-2 Low

Range 0-1 0-1 0-65535 0-1 0-65535 0-1 1-5 0-1 0-1 0-1 0-1 0-232 0-65535 0-65535 0-65535 0-4 0-1 1-65535 0-1 1-65535

Read Holding Register Command (4XXXX) Holding registers can be read and written.

Address 40001 40002 40003 40004 40005 40006 40007 40008 40009 40010 40011 40012 40013 40014 40015 40016 40017 40018 40019 40020 40021 40022 40023 40024 40025 40026 40027 40028 40029 40030 40031

Parameter Name Input Type and Function Functions Measurement Type Contact Bounce Protection Time Time Base Output Function Input Signal Timeout MT Time Out1 Function Out2 Function Out1 Alarm Function Output-1 Hysteresis Output-2 Hysteresis Out1 Action Out2 Action Out1 Pulse Time Out2 Pulse Time Control On Mode Direction of CV Display Decimal Point Power On Reset Set Offset Slave ID Modbus Communication Type Parity Checking Baud Rate Speed Stop Bit Reset&Preset Protection Multiplication Factor-1 Multiplication Factor-2 High Multiplication Factor-2 Low

Range 0-7 0-2 0-1 0-250 0-6 0-7 1-10 0-99.9 0-2 0-1 0-4 0-50000 0-50000 0-1 0-1 0-99.99 0-99.99 0-3 0-1 0-4 0-1 0-1 1-247 0-1 0-2 0-4 0-1 0-5 1-9999 0-1 1-65535

Address 40032 40033 40034 40035 40036 40037

Parameter Name Set Point-1 High Set Point-1 Low Set Point-2 High Set Point-2 Low Reset Button Password

Range 0-1 1-65535 0-1 1-65535 0-1 0-9999