CS400 Manual - Eng

Doc.
n° PAGINA
page 1
DI
COMMESSA N°. of 128
Via Redipuglia, 8 20010 Bareggio (Mi) - ITALY
JOB N°:
Tel. +39 02 903.01.1 Fax +39 02 903.61.663
Cliente: Commessa Cliente:

Customer: Customer Job:
Ordine: Impianto: Localita`:
Order: Plan: Site:
Titolo:
Title:
CS 400
Fire Control System
Installation and operating guide
Annotazioni:
Notes:
REV. DATA Descrizione Redatto Contr. Appr.

Date Description Written Checked Apprd.
A TERMINE DI LEGGE LA KIDDE ITALIA S.P.A. SI RISERVA LA PROPRIETA` DEL PRESENTE DOCUMENTO E NE ARCHIVIO/File:
VIETA LA RIPRODUZIONE A TERZI SENZA IL PROPRIO BENESTARE.
THIS DOCUMENT IS LEGALLY EXCLUSIVE PROPERTY OF KIDDE ITALIA S.P.A. AND CANNOT BE CED
REPRODUCED NEITHER SHOWN TO A THIRD PARTY WITHOUT WRITTEN ASSENT.
Job No. Doc. No.
Contents
CONTENTS .........................................................................................................................2
1 CS 400 FIRE CONTROL SYSTEM ..................................................................................9

1.1 General Features.......................................................................................................9
1.2 Operator Panel ........................................................................................................10
1.3 M402 CPU ...............................................................................................................11
1.3.1 General Features .............................................................................................11
1.3.2 Visual Warning Signals.....................................................................................12
1.3.3 Basic Configuration ..........................................................................................12
1.4 M401 Module...........................................................................................................13
1.5 M404 Module...........................................................................................................15
1.6 M405 Module...........................................................................................................18
1.7 M406 Module...........................................................................................................20
1.8 M407 Module...........................................................................................................22
1.9 M408 Module...........................................................................................................24
CS400 - Installation & Operating Guide 2

Job No. Doc. No.

1.10 M409 Module.........................................................................................................27
1.10.1 General Features ...........................................................................................27
1.10.2 Visual Warning Signals...................................................................................27
1.10.3 Basic Configuration ........................................................................................28
2 INSTALLATION GUIDE .................................................................................................29

2.1 M402 CPU Module Installation ................................................................................30
2.1.1 Inputs and Outputs ...........................................................................................30
2.1.2 Connections and Diagrams ..............................................................................30
2.1.3 Technical Specifications ...................................................................................31
2.1.4 Maintenance.....................................................................................................31
2.2 M401 Module Installation.........................................................................................32
2.2.4 Maintenance.....................................................................................................34
2.3.4 Maintenance.....................................................................................................37
2.4.4 Maintenance.....................................................................................................40
2.5.4 Maintenance.....................................................................................................42
Job No. Doc. No.

2.6.4 Maintenance.....................................................................................................44
2.7.4 Maintenance.....................................................................................................47
2.8.4 Maintenance.....................................................................................................49
2.9 Remote Device Connection .....................................................................................50
2.10 Startup Actions ......................................................................................................51
3 CONTROL SYSTEM PROGRAMMING AND MANAGEMENT......................................52

3.1 Control System Programming..................................................................................52
3.2 Module Programming ..............................................................................................53
3.2.1 Accessing M401 Modules.................................................................................54
3.2.1.1 Setting The M401 Module Name...............................................................54
3.2.1.2 Configuring The M401 Module ..................................................................55
3.2.2.3 Copying And Pasting The M404 Configuration .........................................59
3.2.2.4 Programming The M404 Module ...............................................................60
3.2.3.2 Configuring The M405 Module Line ..........................................................62
3.2.3.4 Programming The M405 Module Line .......................................................64
3.2.3.5 Line Walk Test Of The M405 Module ........................................................65
Job No. Doc. No.
3.2.4.1 Setting The Line Name Of The M406 Module ...........................................66

3.2.6.3 Zero Self-Calibration .................................................................................74
3.2.7.4 Programming The M409 Module Line .......................................................78
3.2.7.5 Line Walk Test Of The M409 Module ........................................................79
3.3 System Programming ..............................................................................................80
3.3.1 Programming The System Logics ....................................................................80
3.3.2 Setting The System Name................................................................................80
3.3.3 Setting The System Code.................................................................................81
3.4 Printing The Programming.......................................................................................81
3.4.1 Printing the Configuration .................................................................................81
3.4.2 Printing the Logics ............................................................................................82
3.5 Saving The Programming ........................................................................................82
3.6 Updating The System ..............................................................................................82
3.7 Resetting The Control System.................................................................................83
3.8 System Management...............................................................................................84
3.8.1 Selecting The Language and Date Time format ...............................................85
3.8.2 Configuring The Events ....................................................................................85
3.8.3 Configuring The Serial Ports ............................................................................86
3.8.4 Configuring The Control System For Win400 ...................................................87
3.8.5 Setting The Printer ...........................................................................................88
Job No. Doc. No.
3.8.6 Deleting The Event Log ....................................................................................89

3.8.7 Setting The Date/Time Options ........................................................................90
3.8.8 Setting The Buzzer ...........................................................................................90
3.8.9 System Information ..........................................................................................91
3.8.10 Deletion Of a System Fault.............................................................................91
3.9 The Exclusions ........................................................................................................92
3.10 Changing The Access Codes ................................................................................93
3.11 Updating The Control System Program .................................................................94
4 EVENTS .........................................................................................................................95
4.1 Normal Operation ....................................................................................................95
4.1 Alarm Signals ..........................................................................................................95
4.2 Fault Signals............................................................................................................96
4.3 Warning Signals ....................................................................................................100
4.4 System Fault..........................................................................................................104
4.5 Printing Events ......................................................................................................106
4.6 Accessing The Event Log ......................................................................................107
4.6.1 Event Lists And Information............................................................................107
4.6.2 Printing A Log.................................................................................................109
4.6.3 System Fault Lists ..........................................................................................110
5 PROGRAMMING THE EVENT LOGIC ........................................................................111

5.1 Translating An Event Into A Logic Symbol.............................................................111
5.1.1 Symbolic Events On M401 .............................................................................112
5.1.2 Symbolic Events On M402 CPU.....................................................................112
5.2 Operators And Syntax ...........................................................................................114
5.2.1 The NULL Operator ........................................................................................114
5.2.2 The OR Operator............................................................................................115

Job No. Doc. No.
5.2.3 The AND Operator .........................................................................................115

5.2.4 The NOT Operator .........................................................................................115
5.2.5 The LATCH Operator .....................................................................................115
5.2.6 The DELAY Operator .....................................................................................116
5.2.7 The ELAP Operator ........................................................................................116
5.2.8 The CAL Operator ..........................................................................................116
5.2.9 The CMD ACK Operator.................................................................................117
5.2.10 The CMD TAC Operator...............................................................................117
5.2.11 The CMD RST Operator...............................................................................117
5.2.12 The SWITCH_ACK Operator........................................................................118
5.2.13 The SWITCH_TAC Operator........................................................................118
5.2.14 The SWITCH_RST Operator........................................................................118
5.2.15 The NULL_ACK Operator.............................................................................118
5.2.16 The NULL_TAC Operator.............................................................................119
5.2.17 The NULL_RST Operator.............................................................................119
5.2.18 The XGROUP Operator................................................................................119
5.2.19 The TEST LED Operator ..............................................................................120
5.3 System Logics .......................................................................................................120
5.4 Logical Errors ........................................................................................................120
6 THE MODBUS RTU PROTOCOL ................................................................................122

6.1 Programming .........................................................................................................122
6.2 Modbus Functions .................................................................................................124
APPENDIX A...................................................................................................................127

Job No. Doc. No.
Note
The signaling and system management principles and the information provided meet the European EN 54-2
provisions. The power system meets the EN 54-4 provisions.

Job No. Doc. No.
1 CS 400 Fire Control System

The CS 400 fire control system is a programmable system for fire detection and suppression.
Thanks to its configuration modularity and to the programming ease and versatility of intervention rules for
the different control system events and statuses, the use of this control system is suitable for various alarm
control and discharge activation functions.
The control system is equipped with an operator panel composed by a keypad and a backlit alphanumeric
display for the on-site system programming and configuration. By saving settings and event rules to the non-
volatile memory, you can switch off the control system keeping the configuration setup unchanged.
The CS 400 fire control system programming is based on the CONTROL-BY-EVENT (CBE) logic, that is, the
activation control depends on the events.
The control system manages a series of events (faults, alarms, prealarms) and statuses (test, line disabling,
warning signals, input activation), which can be remote or coming from the control system modules.
Programming is achieved by linking an event set to logical operators and by associating the obtained
equation with output activation or discharge commands. With the CBE logic, programming the CS 400
control system is intuitive and easily accessible.
Instead of on-site programming, the operator can use monitoring and supervision systems (Scope400, virtual
oscilloscope for monitoring gas detection lines) and programming systems (Win400), saving time during
management and intervention on the system.
Two serial ports (RS232 and opto-isolated RS485) allow you to use remote warning devices (such as
displays, printers, etc.) or modbus devices (such as Plc etc.).
The CS 400 fire control system can be connetted to Ethernet network with TCP/IP protocol.
You can have various feeders with redundancy function, assuring efficiency and reliable operation in every
condition.
1.1 General Features
• Microprocessor technology.
• Control system hardware self-check.
• Operator panel composed by a 20-key membrane keypad and a 40-character backlit alphanumeric
display (2 lines X 20 characters).
• RS232 serial port and opto-isolated RS485 port management for remote device communications.
• Modbus RTU protocol.
• Ethernet link with TCP/IP protocol.
• System parameterization, remote programming and runtime software update capabilities.
• Visual warning signals about every single board status with details on alphanumeric display.
• Control system event and status log.
• Signaling and system management in line with European EN 54-2 provisions.
• Feeder redundancy option.
• Feeder in line with European EN 54-4 provisions.
• Modular mounting of boards in 19’’ racks with locking screws.

Job No. Doc. No.
1.2 Operator Panel
The operator panel is composed by a 20-key membrane keypad and a 40-character backlit alphanumeric
display with 2 lines of 20 characters.
Yellow keys on the right are function keys, which allow to access to programming (Prog key) and to the
control system event log (List key). White keys are operation keys, which allow to enter alphanumeric
characters, delete, confirm and cancel, and to browse view pages.
Enter entry confirmation key.

Esc entry cancellation key.
Canc selected character deletion key.
Op logical operators entry key.
← left scroll key.
→ right scroll key.
↑ down scroll key.
↓ down scroll key.
1 alphanumeric key for “1 A B C” characters
2 alphanumeric key for “2 D E F” characters
3 alphanumeric key for “3 G H I” characters
4 alphanumeric key for “4 J K L” characters
5 alphanumeric key for “5 M N O” characters
6 alphanumeric key for “6 P Q R” characters
7 alphanumeric key for “7 S T U” characters
8 alphanumeric key for “8 V W X” characters
9 alphanumeric key for “9 Y Z” characters
0 alphanumeric key for “0 ‘space’ ( ) - ” characters
WARNING: the character is accepted if you do not press immediately the same key another time. To enter
all the other characters associated with the key, you can press the key repeatedly or hold it
down and release it when the desired character is displayed.

Job No. Doc. No.
1.3 M402 CPU
The M402 CPU module is the central unit of the CS 400 fire control system.
The board is equipped with a CPU and with volatile memory and Flash memory (retentive memory). The
processor is the master of the control system modules (slaves): with proprietary protocol it queries the slave
modules, reading their status and settings, sends general and addressed commands, implements the
configurations and the system parameters, processes the programming logics, saves the system
parameterization, stores the events and performs the control self-check.
In addition, the CPU manages the operator panel (keypad and display), the two control system
communication ports (RS232-RS485) for remote warning and monitoring devices.
In addition, on the module front panel there are 3 buttons useful to perform: event ACKNOWLEDGEMENT and
alarm status RESET at access level 2, LAMP TEST. These commands can also be remotely sent through opto-
isolated inputs, and there are other two inputs for SOUNDER SILENCING and aut/man discharge setting.
The board is equipped with relay outputs for the buzzer and for alarm, prealarm and general fault signaling.
Normally, the fault relay is activated, creating thereby a “Fail Safe” logic.
1.3.1 General Features
• Volatile and Flash memory devices on the module.
• Module hardware self-check.
• Operator panel management.
• Internal bus communication management with proprietary protocol.
• RS232 serial port and opto-isolated RS485 port management.
• Modbus RTU protocol.
• Ethernet link with TCP/IP protocol.
• Runtime operation software update.
• Event and status log management.
• ACKNOWLEDGEMENT and RESET commands at access level 2, LAMP TEST from front panel and remotely.
• Opto-isolated inputs for SILENCING commands and AUT/MAN settings.
• General relay outputs for fault, prealarm and alarm, with NO or NC setting option.
• Visual warning signals about the status of the module.
• Mounting in 19’’ racks with locking screws.

Job No. Doc. No.
1.3.2 Visual Warning Signals
On the module front panel there are LEDs for alarm and fault signaling, and buttons for
ACKNOWLEDGEMENT, RESET and LAMP TEST commands. However, all module events are shown on the
operator panel display.
LED (Color) / COMMAND DESCRIPTION

PREALARM (Red) General prealarm LED.
ALARM (Red) General alarm LED.
FAULT (Yellow) General fault LED.
AUT GEN (Red) Automatic discharge setting LED. On and steady if discharge is set to
automatic from the input to terminal #7, off if manual.
ACK Event acknowledgement button.
RESET Alarm status reset button.
LAMP TEST LED-based visual warning signals test button.
1.3.3 Basic Configuration
The central unit configuration is performed from the operator panel (cf § 3.8 System Management).
On the module there are 3 jumpers for setting the contact of the relays.

Job No. Doc. No.
Jumper Position A Position B Relay

SW1 Normally open Normally closed Prealarm
SW2 Normally open Normally closed Alarm
SW3 Normally open Normally closed Fault
WARNING: never change the position of the other jumpers on the module.
1.4 M401 Module
The M401 module is the feeder of the CS 400 fire control system. The feeder has been designed to assure the
highest security and reliability in the power supply of the internal control system and of the external devices.
In case of main supply failure or overload, an electronic switch turns on the batteries avoiding undesired
stabilized voltage drop. The control system hardware architecture allows the creation of redundant systems:
once one feeder fails, it is disabled and its load is maintained by the other existent feeders, without having
necessarily to switch to the batteries. The failed feeder can be removed from the rack and replaced without
altering the normal system operation.
The M401 module checks the presence of batteries and performs a periodic battery level test. The charge
circuit allows to recharge hermetic lead batteries and supplies a steady maintenance voltage to preserve their
status at best.
The feeders of the racks following the first are identified as M401S.
• Module coding through dip-switch on board.
• 24V stabilized voltage adjustable for the internal power supply of the control system.
• 27.6V adjustable stabilized voltage for the battery charger.
• 27V rectified filtered voltage for connected devices power supply.
• Power and battery level check (signaling for undervoltage and overvoltage).
• Short circuit and battery inversion protections.
• Periodic battery level test.
• Redundant systems options.

Job No. Doc. No.
On the module front panel there are LEDs for status or fault signaling. However, all module events are
shown on the operator panel display.
Unless otherwise noted, visual warning signals follow ISA 1B sequences for fault signals and ISA 2C for
alarm signals.
LED (Color) DESCRIPTION

MAIN SUPPLY (Green) Main supply presence LED: on and steady if main supply voltage is
present.
EMERGENCY 24VDC (Green) Battery activation LED: on and steady when batteries are switched on.
FEEDER FAULT (Yellow) Feeder fault LED: it indicates an incorrect stabilized power level
(undervoltage or overvoltage). Should the feeder fail, it is turned off: if
there are no auxiliary feeders, the batteries of the control system are
switched on. Undervoltage level is set at 21V, overvoltage at 28V.
BATTERY FAULT (Yellow) Battery absence LED: it indicates that the batteries have been
disconnected or wrongly connected.
BATTERY DISCHARGE (Yellow) Low battery LED: it indicates that the battery level is below the 22V
security threshold.
CHARGER FAULT (Yellow) Battery charger fault LED: it indicates an incorrect battery charger
level (undervoltage or overvoltage). Undervoltage level is set at 22V,
overvoltage at 28.5V. In case of overvoltage, the charge circuit is
disabled.
On the M401 module there are two dip-switches indicated as “Code” and “Setting” for the identification and
the basic configuration (default).
The “Code” dip-switch encodes the module ID in binary format (§ APPENDIX A). You can encode up to 31
different IDs by using the switches 1-5 (the switch 6 is not used). Every M401 module in the control system
must be unique to be acknowledged by the central unit, that is, you cannot have different modules with the
same ID. Otherwise, the control system activates an invalid module addressing fault (cf § 4.2 Fault Signals).
Job No. Doc. No.
The “Setting” dip-switch sets some specific functions, listed below.

From the operator panel, you can reconfigure the module (cf § 3.2.1.2 Configuring The M401 Module
).
Switch Function Description

1 Main feeder It sets the module as main feeder. If the M401 module is in the first
control system rack, set the field to ON, otherwise set it to OFF.
2 Automatic battery test activation It enables the automatic battery test. If you do not want the battery test
to be automatically performed every week, set this field to OFF.
WARNING: disabling this switch does not affect the manual control.
3 Main supply failure fault It activates the general fault relay of the M402 CPU in case of main
supply failure. If you want a main supply failure warning on the fault
relay output to terminals 3-4 of the M402 CPU, set this field to ON.
WARNING: the main supply failure warning is managed by the control
system as level 2 warning (cf § 4.3 Warning Signals), regardless of
the field setting.
1.5 M404 Module
The M404 module is designed for automatic putting off. Through programming, it can be combined with
detection modules (M406 and M407). You can have a double-consent combination with M406 (higher
intervention security), or programming can be combined to a wired control within the control system. When
the activation command is remotely generated, the M404 module can also be used separately.
Through a selector you can set automatic or manual discharge intervention. In automatic mode, discharge is
activated when the module detects the corresponding command, in manual mode it is activated only when
the operator executes a command via remote buttons or local buttons on the control system.
Moreover, the M404 module is set to inhibit discharge, that is, to stop timing before the solenoid valve is
activated.
All discharge activation or control lines are monitored.
• Line check for opening and short circuit.
• Automatic/manual mode selector.
• Discharge inhibition input.
• Double-consent discharge activation options.
• Visual warning signals about the status of the board.

Job No. Doc. No.
On the module front panel there are LEDs for status, alarm, and fault signaling. However, all module events
are shown on the operator panel display.
alarm signals.

DISCHARGE (Red) Discharge command alarm LED: timing begins before the solenoid valve
intervenes.
RELEASE (Red) Discharge completed alarm LED: it indicates the system pressure switch
intervention.
VALVE FAULT (Yellow) Solenoid valve line fault LED: it indicates an opening on the solenoid
valve line.
EV. PANEL FAULT (Yellow) Opto-acoustic warning panel line fault LED: it indicates an opening on the
opto-acoustic warning panel line.
PUSH B. FAULT (Yellow) Discharge command line fault LED: it indicates an opening or a short
circuit on the discharge command line (discharge from remote button
and/or remote discharge).
MAN (Red) Aut/man LED: it is off if the selector is set to AUT, it blinks if the selector
is set on MAN.
LOW PRESSURE (Yellow) Low pressure switch line fault LED: it indicates an opening of the line or
low pressure in the system.
INH. DISCHARGE (Yellow) Discharge inhibition or line fault LED: the LED blinks when the discharge
is inhibited, it is off if the discharge is enabled. For fault signaling the LED
follows the ISA 1B sequence.
PSH FAULT High pressure switch line fault LED: it indicates an opening of the high
pressure switch line.
AUT/MAN Selector on the module front panel for the aut/man discharge mode setting.

Job No. Doc. No.
On the M404 module there are three dip-switches indicated as “Code”, “Setting” and “Timer” for the
identification and the configuration.
different IDs. Every M404 module in the control system must be unique to be acknowledged by the central
unit, that is, you cannot have different modules with the same ID. Otherwise, the control system activates an
invalid module addressing fault (cf § 4.2 Fault Signals).
The “Setting” dip-switch sets some specific functions, listed below; the “Timer” dip-switch sets the timing
preceding the solenoid valve activation.
From the operator panel, you can reconfigure the module (cf § 3.2.2.2 Configuring The M404 Module
).
Setting:
1 Low pressure switch presence It sets the low pressure switch presence. Select ON if the discharge
module has an associated low pressure switch, otherwise select OFF.
2 High pressure switch presence It sets the high pressure switch presence. Select ON if the discharge
module has an associated high pressure switch, otherwise select OFF.
3 Low pressure switch line check It enables the low pressure switch line check. If you want the line to be
steadily checked, set it to ON, otherwise set it to OFF.
4 High pressure switch line check It enables the high pressure switch line check. If you want the line to be
5 NC contact for low pressure It sets the contact type for the low pressure switch. If the low pressure
switch switch is activated by opening the circuit (NC) set it to ON, otherwise
if it is activated by closing the line (NO) set it to OFF.
6 NC contact for high pressure It sets the contact type for the high pressure switch. If the high pressure
switch switch is activated by opening the circuit (NC) set it to ON, otherwise
if it is activated by closing the line (NO) set it to OFF.
7 Discharge from M406 command It sets the command type that activates the discharge. If an internal
control system cabling coming from the M406 module is connected to
the terminal #7 of the M404 module, set it to ON. Otherwise, set it to
OFF.
8 Discharge inhibition line check It enables the discharge inhibition line check. If you want the line to be
Timer:
Switch
Delay 1 2 3
0 sec OFF OFF OFF
15 sec ON OFF OFF
30 sec OFF ON OFF
45 sec ON ON OFF
60 sec OFF OFF ON
75 sec ON OFF ON
90 sec OFF ON ON
105 sec ON ON ON

Job No. Doc. No.
1.6 M405 Module
The M405 module is set to manage 6 controlled lines of commands. Its uses vary from automatic putting off
to other functions that need line status monitoring. You can separately configure the lines from the operator
panel of the CS 400 control system. For each line, you can set the control mode (inversion or current), or
disable control: in this case it is possible to select the quiescent state for the line (normally active or
inactive). Line activation is performed through logical equations programming.
• Line continuity check.
• Operator panel-configurable lines (inversion or current control, intermittence, disabling, activation
signaling).
• Unchecked line quiescent state setting option.
• Event and status logics programmable for every line.
On the module front panel there are LEDs for activation status and fault signaling. However, all module
events are shown on the operator panel display.
alarm signals.

Job No. Doc. No.

ACTIVE OUT1 (Red) Output 1 activation LED. On and steady if the output is active.
FAULT OUT1 (Yellow) Line 1 opening fault LED. On and steady if the line is disabled.
On the M405 module there is a dip-switch indicated as “Code” for module identification.
unit, that is, you cannot have different modules with the same ID. Otherwise, the control system activates
an invalid module addressing fault (cf § 4.2 Fault Signals).
On the module there is a pair of jumper for each line to be set with reference to the line configuration.
By default, the module lines have disabled control and activated relay. The activation is not intermittent and
is not shown on the display.
From the operator panel, you can reconfigure the module (cf § 3.2.3.2 Configuring The M405 Module Line
).
Jumper Inversion control Current control Disabled control

SW1 A B A
SW2 A B B

Job No. Doc. No.
1.7 M406 Module
The M406 module is designed for fire detection: it manages 2 non-addressed analog lines, checking their
current level, signaling faults (in case of short circuit or opening) and signaling the detector intervention
(alarm condition).
From the operator panel of the CS 400 control system you can separately configure the 2 lines, setting alarm
level, single or crossed line operation, output activation or inhibition during test. By setting the crossed lines
option, the intervention of one line generates a prealarm condition, while the intervention of both lines
generates the alarm condition.
By setting the inhibition during test, you can perform the line test procedure without activating the tested line
outputs and the discharge commands, keeping the visual warning signals active. The test is automatically
completed and the outputs are reactivated if, during its execution, the M406 module reports the effective
intervention of a fire alarm detector.
By using the front switch, you can separately disable the lines.
• Line check for opening/short circuit/detector intervention.
• Lines can be separately configured from the operator panel.
• Single or crossed line control mode.
• Settable alarm level.
• Line disabling from front switch option.
• Line test execution from front button with output inhibition option.
• Out of service/fault, alarm, discharge outputs.

Job No. Doc. No.
alarm signals.

ALARM (Red) Line 1 alarm LED.
FAULT (Yellow) Line 1 opening (3.0mA) or short circuit (140mA) fault LED.
DISABLE (Green) Line 1 disabling through front switch LED: on and steady if the line is
disabled, off if it is in service.
ALARM (Red) Line 2 alarm LED.
FAULT (Yellow) Line 2 opening (3.0mA) or short circuit (140mA) fault LED.
DISABLE (Green) Line 2 disabling through front switch LED: on and steady if the line is
disabled, off if it is in service.
ON/OFF LINE 1 Front switch for detection line 1 disabling.
ON/OFF LINE 1 Front switch for detection line 2 disabling.
TEST LINE 1-2 Front button for detection line test execution.
The “Setting” dip-switch sets some specific functions, listed below. From the operator panel, you can
reconfigure the module (cf § 3.2.4.2 Configuring The M406 Module Line
).

1 Output inhibition during line 1 It disables line 1 outputs in case of test. If you want to disable the
test outputs set it to ON, otherwise to OFF.
WARNING: with crossed lines, if you inhibit one line outputs, you
automatically inhibit the other line outputs.
2 Output inhibition during line 2 It disables line 2 outputs in case of test. If you want to disable the
test outputs set it to ON, otherwise to OFF.
3 Crossed lines It sets crossed line-management. If you want PREALARM and
ALARM signaling on both lines, set it to ON.
4 Alarm level It sets the line alarm level. Set it to ON for 15mA, to OFF for 20mA.

Job No. Doc. No.
1.8 M407 Module
The M407 module is designed for fire detection: it manages 6 non-addressed analog lines, checking their
current level, signaling faults (in case of short circuit or opening) and signaling the detector intervention
(alarm condition).
From the operator panel of the CS 400 control system you can separately configure the lines, setting
prealarm/alarm level, line disabling, single or crossed line operation, single or double intervention. By
setting the crossed lines option, the intervention of one line generates a prealarm condition, while the
intervention of both lines generates the alarm condition. The double intervention implies that the M407
module verifies the line intervention condition (for higher detection security): when an intervention condition
is detected, the line is temporarily reset. When a set amount of time has elapsed, should the intervention
persist, the alarm state is signaled.
You can also configure lines to manage the corresponding intervention as a simple warning or fault event.
• Line check for opening/short circuit/detector intervention.
• Lines can be separately configured from the operator panel.
• Single or double intervention, single or crossed line control mode.
• Settable prealarm and alarm level.
• Line disabling option.
• Alarm event can be configured and managed as simple warning or fault.

Job No. Doc. No.
alarm signals.

ACTIVE LINE1 (Red) Line 1 alarm LED.
FAULT LINE1 (Yellow) Line 1 opening (3.0mA) or short circuit (140mA) fault LED. On and steady
if out of service.
if out of service.
if out of service.
if out of service.
if out of service.
if out of service.
By default, lines are disabled. From the operator panel, you can reconfigure the module (cf § 3.2.5.2
Configuring The M407 Module Line
).

Job No. Doc. No.
1.9 M408 Module
The M408 is designed to control non-addressed gas detectors with standard output 4-20mA and is set to use
3 or 4-wire detectors.
On the front panel there is a 3-digit display where you can read line reading value in real time and a 20-LED
bar showing the measurement percentage.
Detection line and measurement can be easily configured from the operator panel of the CS 400 control
system. Specifically, the operator can select: measurement range (ppm, % LEL, oxigen), mA view, prealarm,
alarm and fault level, ascending or descending alarms, present and maximum sampled value view. From the
operator panel you can also activate an automatic procedure for the module zero calibration, in order to avoid
intervention with mechanical adjustments on the module.
Besides, the M402 CPU is set to acquire and keep values sampled by M408 modules, providing users with a
virtual oscilloscope for each gas detection line.
The M408 is equipped with a current repetition line (4-20mA) for remote devices with fault, prealarm and
alarm outputs.
• Set to use 3 or 4-wire detectors.
• Gas line monitoring for opening/short circuit/threshold overflow.
• Line and measurement settings are configurable from the operator panel.
• Reading range settings from operator panel.
• Settable prealarm and alarm level and trigger.
• Threshold overflow managed as alarm events or simple warnings.
• Measurement maximum view.
• Range or mA view.
• Self-zero calibration from operator panel.
• Line disabling from operator panel option.
• Current repetition in 4-20mA range and fault, prealarm and alarm outputs.
• Visual warning signals about the status of the module and of line measurements.
• Virtual oscilloscope.

Job No. Doc. No.
On the module front panel there are LEDs for alarm and fault signaling, a 3-digit display and a 20-LED bar.
However, all module events are shown on the operator panel display.
The 3-digit display shows line measurement in the set reading field. It might also show the current level in
mA. During startup, until the module has been acknowledged by the central unit, the display shows “8 8 8 “,
then the line value. In case of a disabled line, the characters “- - - “ are displayed.
The 20-LED bar shows the line reading percentage. It might also show the maximum sampled value.
When you start the control system, warnings are inhibited for 45 seconds, in order to allow the stabilization
of the line current.
alarm signals.

PREALARM (Red) Gas line prealarm LED. The measured values exceed the set prealarm level.
ALARM (Red) Gas line alarm LED. The measured values exceed the set alarm level.
FAULT (Yellow) Gas line opening or short circuit fault LED.
On and steady if the line is out of service. The opening current level is
programmable (by default, it is 3.6mA), the short circuit current level is set
to 30mA.
The “Setting” dip-switch sets some specific functions, listed below. From the operator panel, you can
reconfigure the module (cf § 3.2.6.2 Configuring The M408 Module
).

Job No. Doc. No.
Setting: view range

View range Switch Unit of measurement
1 2 3
15-25 OFF OFF OFF %O2
0-10 ON OFF OFF ppm
0-20 OFF ON OFF ppm
0-50 ON ON OFF ppm
0-100 OFF OFF ON ppm or % LEL
0-200 ON OFF ON ppm
0-500 OFF ON ON ppm
0-999 ON ON ON ppm
Setting: prealarm level

Prealarm level Switch
(%)
4 5
25 OFF OFF
50 ON OFF
75 OFF ON
100 ON ON
Setting: alarm level

Alarm level (%) Switch
6 7
25 OFF OFF
50 ON OFF
75 OFF ON
100 ON ON
Setting: detector type

Switch 8
Detector type ON OFF
4-wire detector 3-wire detector
By default, alarm detection occurs for threshold-exceeding values; fault current for opening is set to 3.6mA,
and for short circuit is set to 30mA.

Job No. Doc. No.
1.10 M409 Module
The M409 module is designed to activate 6 programmable relay outputs through CBE logics.
You can set NO or NC contacts and separately configure relay outputs to be normally active (to put in place
“Fail safe” logics) or inactive.
On the module front panel there are LEDs indicating the activation status and the module programming.
• Relay outputs with NO or NC setting option through jumper on the module.
• Operator panel-configurable outputs (normally active or inactive, intermittent).
• Outputs can be programmed with CBE logic association.
On the module front panel there are LEDs for output activation and fault signaling (module programming
status). However, all module events are shown on the operator panel display.
alarm signals.

Job No. Doc. No.

ACTIVE OUT1 (Red) Relay activation on line 1 LED.
FAULT (Yellow) Board configuration stage warning LED. On and blinking during
initialization or startup configuration stages, on and steady during output
configuration and logic programming stages. On and steady when at least
one output line is disabled.
By default, line relays are disabled. The activation is not intermittent and is not shown on the display. On the
module there is a jumper for every line to be set for NO or NC contact.
From the operator panel, you can reconfigure the module (cf § 3.2.7.2 Configuring The M409 Module Line
).

Job No. Doc. No.
2 Installation Guide
The following are the specifications and the wiring diagrams you should use to correctly install theCS 400
control system.
Power supply 230VAC 50Hz

Maximum absorption 0,57A
Size 600x600x250 (LxHxD)
Weight 30Kg
IP security IP 65 without buzzer
Batteries 2 hermetic lead batteries (2*13.8V) 12Ah
During installation, use a main supply disconnection device upstream from the control system, with at least
3mm separation between the contacts and easy to access.

Job No. Doc. No.
2.1 M402 CPU Module Installation
The following are the specifications and the wiring diagrams you should use to correctly install the M402
CPU module inside the CS 400 control system.
2.1.1 Inputs and Outputs
SIGNAL LEVEL TERM. DESCRIPTION

PREALR OUT NO/NC 1-2 General prealarm relay output.
Max 2A
FAULT OUT NO/NC 3-4 General fault relay output.
Max 2A
ALR OUT NO/NC 5-6 General alarm relay output.
Max 2A
AUT/MAN DISCH IN +27V 7 Input for the automatic discharge setting on all M404
modules.
LOCAL BUZZER 0V 8 Buzzer relay output.
OUT Max 2A
ACK IN +27V 9 Event acknowledgement remote control input.
SILENCE IN +27V 10 Sounder silencing button setting input.
LAMP TEST IN +27V 11 Lamp test remote control input.
RESET IN +27V 12 Alarm status reset remote control input.
2.1.2 Connections and Diagrams

Job No. Doc. No.
2.1.3 Technical Specifications
Model M402 CPU

CPU C167 Siemens (16-bit processor @25MHz)
Volatile memories 4Mbit (16bit)
Non volatile memories (Flash) 4Mbit (16bit)
Absorbed current Quiescent: 70 mA
Alarm: 210 mA
Minimum operation voltage in direct current 18V
Board configuration From operator panel
Operator panel 20-key membrane keypad
40-character alphanumeric display (2 lines)
Backlit
Serial outputs RS232 and opto-isolated RS485
Operating temperature -10°C ÷ +50°C
Storage temperature -30°C ÷ +70°C
Maximum humidity (non condensed) 95%
Front panel color Ral 7031
Weight 190gr
Size 100mmx160mm (Eurocard format)
2.1.4 Maintenance
With the CS 400 control system you can remove and insert the main module when the control system is fed.
However, the installer should consider that without the main M402 CPU module, the control system enters
the stand-by mode and it is not able to detect or activate outputs.

Job No. Doc. No.
You can replace the operator panel without turning off the control system: after the old panel has been
replaced with a new one, hold down any key to initialize the display.
2.2 M401 Module Installation
(M401S for secondary feeders) inside the CS 400 control system.

–27V IN 0V 1-2 Non stabilized power supply negative input.
CONNECTED DEV– 0V 3-7 Non stabilized voltage for external connected devices
OUT negative output.
+27V IN +27V 8-11 Non stabilized power supply positive input.
CONNECTED DEV+ +27V 12-17 Non stabilized voltage for external connected devices
OUT positive output.
BATT IN +24VDC 18-1A Battery connection input.
BATT TEST IN +24VDC 2A Manual battery test execution input.
BATT TEST OUT +24VDC 3A Output to which the load resistor for battery test
execution is connected.
MAIN SUPPLY Open collector 4A Main supply warning output.
FAILURE OUT Max 500mA WARNING: any relays or connected devices must be
connected at +24VDC.
+24VDC OUT +24VDC 5A-6A Stabilized voltage supply output.

Job No. Doc. No.

Job No. Doc. No.

Model M401
Stabilized feeder
Supply voltage 24V, adjustable
Maximum power 60W
Ripple and noise 100mV pk-pk
Undervoltage fault 21V
Overvoltage fault 28V
Battery charger
Battery charger voltage 27.6V, adjustable
Maximum power 60W
Ripple and noise 100mV pk-pk
Undervoltage fault 22V
Overvoltage fault 28.5V
Low battery fault 22V
General specifications
Absorbed current Quiescent: 10mA
Alarm: 10mA
Connected devices maximum power (27V) 100W
Test output activation Programmable
Weight 333gr
2.2.4 Maintenance
Before removing the M401 module, the control system must be turned off.
The following is an indication about the module protections you might need to replace during normal
maintenance operations.
Acronym Description Function

I1 T3.15A, 5x20 format Primary transformer protection
I2 F6A, 5x20 format Secondary transformer protection
I3 F6A, 5x20 format Line + connected devices protection
I4 F6A, 5x20 format Line - connected devices protection
IB F6A, 5x20 format Battery protection
F1 F10A, 5x20 format Battery short circuit protection

Job No. Doc. No.
module inside the CS 400 control system.

VENT BLOCK OUT SPDT Max 2A 1-2, 4 Ventilation block relay output.
EVAC OUT 0V Max 2A 3 Evacuation opto-acoustic device activation output.
LOW PRESS IN +27V 5 Low pressure switch input.
SOLENOID VALVE 0V Max 2A 6 Solenoid valve activation output.
OUT
IN DISCHARGE IN +27V 7 Discharge command input.
HIGH PRESS IN +27V 8 High pressure switch input.
DISCH LOC LAMP +24VC Max 100mA 9 Discharge button lamp switch output.
OUT
DISCH REM +27V 10 Discharge activation from remote button input.
BUTTON IN
DISCH LOC BUTTON 0V 11 Discharge activation from remote button input.
IN
INH DISCHARGE IN +27V 12 Discharge disabling input.
SOLENOID VALVE Open collector Max 5 Optional output, active when the solenoid valve is
ACT OUT 500mA activated. It is set with a jumper on the module when
there is no low pressure input.
AUT/MAN OUT +27V Max 100mA 6A rack Optional output, active when the operator sets the
automatic discharge, inactive in manual mode.
INH DISCH OUT Open collector Max 6C rack Optional output, active when the discharge is
500mA disabled.

Job No. Doc. No.
Model M404
Alarm: 50mA
Discharge activation Wired and/or programmable
Weight 174gr

Job No. Doc. No.
2.3.4 Maintenance
You can remove and insert the M404 module when the control system is operating: upon removal, the
central unit will signal a fault for absence of communication with the removed board. Inserting the removed
board will cancel the fault status if it is already acknowledged. Please make sure that the removed and
inserted modules have the same ID code (cf § 1.5.3 Basic Configuration).

F1 F2A fuse, 5x20 format Solenoid valve line protection
F2 F2A fuse, 5x20 format Evacuation line protection

Job No. Doc. No.

LINE 1- OUT 0V 1 Actuation line 1 negative.
LINE 1+ OUT +27V 2 Actuation line 1 positive.

Job No. Doc. No.
Model M405
All active lines: 110 mA
Output configuration From the operator panel and the jumper on board
Output activation Programmable
Weight 238gr

Job No. Doc. No.
2.4.4 Maintenance

F1 F2A fuse, 5x20 format Line 1 protection

Job No. Doc. No.

SIL1/SIL2 OUT Open collector Max 1 The output is active if one line is in alarm status, it is
500mA inactive during acknowledgement.
DISCHARGE 1 OUT +5VDC Max 15mA 2 With single lines, discharge for alarm line 1: with
crossed lines, command for alarm lines 1 and 2.
ALARM 1 OUT Open collector Max 3 Line 1 alarm output.
500mA.
ALARM 2 OUT Open collector Max 4 Line 2 alarm output.
500mA.
OoS_FAULT 1 OUT Open collector Max 5 Line 1 fault or out of service output.
500mA.
ALARM 1+2 OUT Open collector Max 6 The output is active when both lines are in alarm
500mA. status.
DISCHARGE 2 OUT +5VDC Max 15mA 7 With single lines, discharge for alarm line 2: with
crossed lines, command for alarm lines 1 and 2.
OoS_ FAULT 2 OUT Open collector Max 8 Line 2 fault or out of service output.
500mA.
LINE 1+ IN +24VDC 9 Detection line 1 positive.
LINE 1- IN 0V 10 Detection line 1 negative.
SIL1 OUT Open collector Max 6A rack The output is active for alarm 1, inactive with
500mA acknowledgement.
SIL2 OUT Open collector Max 6C rack The output is active for alarm 2, inactive with
500mA acknowledgement.

Job No. Doc. No.
Model M406
All lines in alarm: 30 mA + alarm current
Line configuration From operator panel
Alarm level 15mA/20mA
Opening fault level 3.0mA
Short circuit fault level 140mA
Weight 145gr
2.5.4 Maintenance
inserted modules have the same ID code (cf § 1.7.3 Basic Configuration
).
Job No. Doc. No.

LINE 5- IN +24VDC 9 Detection line 5 negative.
LINE 5+ IN +27V 10 Detection line 5 positive.

Job No. Doc. No.
Model M407
All lines in alarm: 85 mA + alarm current
Prealarm/alarm level 15-35mA/20-50mA
Alarm level (prealarm disabled) 15mA/20mA
Opening fault level 3.0mA
Weight 148gr
2.6.4 Maintenance

Job No. Doc. No.

PREALR OUT SPDT Max 2A 1,3,4 Gas line prealarm relay output. It activates when the
set threshold is exceeded.
4-20MA OUT 4-20mA 2 Current repetition output. It activates when the set
threshold is exceeded.
ALR OUT SPDT Max 2A 5,3,6 Gas line alarm relay output. It activates when the set
threshold is exceeded.
PREALARM OUT Open collector Max 7 Prealarm output. It activates when the set threshold
500mA is exceeded.
ALARM OUT Open collector Max 8 Alarm output. It activates when the set threshold is
500mA exceeded.
OoS_FAULT OUT Open collector Max 9 Gas line fault or out of service output. The opening
500mA current level is configurable, the short circuit current
level is set to 30mA.
GAS FEEDER - 0V 10 Gas sensor power supply negative.
GAS DET LINE 4-20 mA 11 Gas detection line.
GAS FEEDER + +27V 12 Gas sensor power supply positive.
Note: For 4-wire detectors, the sensor line + is at terminal 12, the sensor line – is at terminal 11, the power
supply negative at 10, while the power supply positive must be taken from the connected device
outputs.

Job No. Doc. No.
Model M408
Alarm: 10 mA + alarm current
Line and measurement configuration From operator panel
Alarm level Programmable
Prealarm level Programmable
Opening fault level Programmable (1.0mA ÷ 3.6mA)
Calibration Programmable
Current output 4-20mA
Operating temperature -10 °C ÷ +50°C
Weight 212gr

Job No. Doc. No.
2.7.4 Maintenance

F1 F500mA fuse, 5x20 format Gas sensor power line protection
F2 F100mA fuse, 5x20 format Gas sensor detection line protection

Job No. Doc. No.

OUT 1 NO/NC Max 2A 1-2 Line 1 relay output.

Job No. Doc. No.
Model M409
Absorbed current Quiescent:
6 active lines:
Relay outputs Programmable
Weight
2.8.4 Maintenance

Job No. Doc. No.
2.9 Remote Device Connection
The CS 400 fire control system is equipped with two serial ports on the M400RS module: one RS-232 port
on the DSUB-9 connector and one RS-485 port on the screw terminals identified as A and B.
RS232 Serial
The control system transmits data on the connector pin 2 and receives data on the pin 3. To connect any
device using the EIA RS-232C V.28 standard (for 9-pole connector), for example Personal Computer, you
need a 9-pole pin-to-pin serial cable.
You should pay more attention when using a 25-pole connector device, since for this type of connector the
standard provides for transmission on pin 2 and receiving on pin 3.
The following are summary tables useful for connection.
Control system 9-pole connector Device with 9-pole connector

Signal Pin Pin Signal
TX 2 2 RX
RX 3 3 TX
0V 5 5 0V
Control system 9-pole connector Device with 25-pole connector

Signal Pin Pin Signal
TX 2 3 RX
RX 3 2 TX
0V 5 7 0V
RS485 Serial
Connection on RS-485 port occurs on the A and B terminals: to the 0V terminal you can connect the line
screen.
WARNING: please make sure the screen is connected at one single point on the 485 network to avoid
ground rings. Based on the transmission length and speed, you can insert the 120 Ω
terminating resistor by inserting the jumper identified as SW on the M400RS module.
You can set transmission features programmatically (cf § 3.8.3 Configuring The Serial Ports
).

Job No. Doc. No.
2.10 Startup Actions
At startup, the CS 400 fire control system checks the hardware devices on the M402 CPU and the system
program by which the control unit can operate. At this stage, the display is on and signals the system check;
it also indicates the firmware revision running at loading stage.
After the check is completed, the central unit performs one of the following procedures:
• Configuration, if system parameters are valid.
• Initialization, if system parameter are absent or invalid.
Configuration
The last system configuration saved is loaded and the existent modules are configured.
When the procedure is completed, if the module fault LEDs are still blinking, it means that the module has
not been acknowledged as belonging to the loaded configuration. These are the possible causes:
• The module is new to the loaded configuration (that is, it was introduced after the last configuration
saving).
• The module is faulty.
Please refer to Chapter 3 (cf § 3.6 Updating The System
) to update the system with the new module.
Initialization
If the control system has no valid system configuration, a self-configuration stage is performed. The central
unit acknowledges the existent modules and takes as configuration the default values set with the
corresponding dip-switch on the modules.
During self-configuration, the fault LEDs of each module blink until the central unit acknowledges the
module.
When the procedure is completed, if the module fault LEDs are still blinking, it means that the module has
not been initialized. These are the possible causes:
• There are two modules of the same type with the same ID.
• The module is faulty.
In this case, remove the module from the control system and make sure its ID is unique, that is, there are no
modules of the same type with the same ID. Please refer to Chapter 3 (cf § 3.6 Updating The System
) to have the module acknowledged by the control system.
When the startup stage is completed, if there are no events to signal, the display goes off and the following
screen is shown:

Job No. Doc. No.
3 Control System Programming and Management

This section describes the CS 400 control system configuration and programming procedures. In order to
easily access the different functions and as a reference summary, at the beginning of each paragraph, you are
provided with a table describing all the commands by which you can access the desired functions (function-
specific commands appear in bold). Nonetheless, to those who are programming the control system for the
first time, it is recommended to carefully read the command and view screen descriptions.
To access programming and management menus, press the Prog key: the display turns on and you see the
Menu List screen containing the system management options, basically aimed at the operator user, and the
programming options, aimed at the installer and at the operator qualified for system configuration.
You can access the Menu List screen only if all alarm statuses and active faults have been acknowledged.
Press Esc to return to the normal operation screen: if you changed the control system configuration, you are
prompted to save changes so that the new programming is available at the next control system startup.
3.1 Control System Programming
Quick access command summary:
Action Displayed items

Press Prog Menu List
Press 3 Lev 3 password entry
Type a five-digit password ---
Press Enter Programming Menu
You can access the control system programming through two different modes, based on the configuration
change rights:
• Read-Write mode: access granted to the operator qualified for system configuration.
• Read Only mode: access granted to user for programming reference only.
Read-Write Mode
In this mode you can configure modules and the central unit, program logics, save parameters, etc. To access
the programming from the Menu List screen, press 3 and then enter the level 3 password to access the
Programming Menu.
Type the 5-digit password and press Enter (by default, the password is: 33333). If the password is correct,
the Programming Menu will appear. If the password is wrong, you will see an error message with an
alphanumeric code: press Esc to perform a new entry.
In case you forgot the password, you can notify the displayed password-decoding code to the manufacturer.
Pressing Esc you abort the programming access action. In the Read-Write mode, the event warning signals
on the display are inhibited, except for those related to the ACKNOWLEDGEMENT, SILENCING, RESET, and
LAMP TEST commands. An alarm or fault status during programming does not imply the automatic exit from
the corresponding menus.
Read Only Mode

In this mode you cannot perform control system configuration changes. All actions and keys related to
operation parameter changes are inhibited: you can only check the existing configuration. Should an alarm or
Job No. Doc. No.
fault status occur in this mode, it does imply the automatic exit from the corresponding menus, and the event
is shown on the display.
From the Menu List screen, press 3 and then press Enter without typing the password: you access the
Programming Menu.
The Programming Menu is made up of different pages: The New Page symbol on the upper right angle
indicates the presence of a following page that can be accessed by pressing the → (Right) key. If this symbol
is on the bottom right angle it means that you can return to a previous page pressing the ← (Left) key.
The first page displays the following options:
The second page displays:
Pressing the numeric key shown in the menu, you access the corresponding section:
1 Accessing module programming (cf § 3.2 Module Programming).
2 Setting system name (cf § 3.3.2 Setting The System Name
3 ).
4 Launching self-configuration procedure (cf § 3.6 Updating The System
5 ).
6 Saving programming parameters (cf § 3.5 Saving The Programming
7 ).
8 Resetting the central unit (cf § 3.7 Resetting The Control System
9 ).
10 Initializing the central unit (cf § 3.7 Resetting The Control System
11 ).
Pressing the Esc key, you exit the Programming Menu.
3.2 Module Programming

Press 1 Modules Menu
In this section you can configure and program the modules of the CS 400 control system.-.
The Modules Menu is made up of many pages: The New Page symbol on the upper right angle indicates the
presence of a following page that can be accessed by pressing the → (Right) key. If this symbol is on the
bottom right angle it means that you can return to a previous page pressing the ← (Left) key.
The following modules are displayed on the first page:
The remaining modules are displayed on the second page:

Job No. Doc. No.
Press Esc to return to the Programming Menu screen.

Select the desired option to access the programming section of each module.
If the selected module is not found, a warning message will be displayed for a few seconds then the Modules
Menu screen will appear again. For example, if you press the 9 key but in the control system there aren’t
modules of this type, you will see:
WARNING: Modules indicated in the Modules Menu and not described in this manual are not available yet.
3.2.1 Accessing M401 Modules

Press 1 Existing M401 List
← (Left) and → (Right) keys to The M401 module you wish to
scroll the list program
Press Enter M401 Configuration Menu
From the Modules Menu, press 1 to access the Existing M401 List page, i.e. a M401 module list saved in the
control system. On the left field you’ll see the module type and ID. The displayed name is the name
associated with the module.
The symbol on the upper right angle indicates that other modules of the same type but with a higher ID exist
in the list, you can access them by pressing the → (Right) key; using the ← (Left) key you select modules
with a descending ID. By pressing Esc you return to the Modules Menu, while you can access the M401
Configuration Menu of the selected module by choosing Enter. When in the module there aren’t any alarm
or fault events, all modules’ LEDs are on and steady. If an alarm or fault event occurs during the
configuration, the LEDs are turned off and the corresponding visual warning signals are processed for each
event, accordingly.
Example of M401 Configuration Menu for the module with ID equal to 1:
Press Esc to return to the Existing M401 List.
3.2.1.1 Setting The M401 Module Name

Job No. Doc. No.

Press 1 Name Entry
Type the name ---
Press Enter/Esc to M401 Configuration Menu
confirm/cancel.
From the M401 Configuration Menu press 1 to access the Name Entry screen. You can enter up to 31
alphanumeric characters using the keypad on the operator panel.
Use the ↑ (Up) and ↓ (Down) keys to position the cursor at the end or at the beginning of the name,
respectively. The ← (Left) and → (Right) keys may be used to move the cursor leftwards or rightwards,
respectively. A “Copy and Paste” function is available for module names: By pressing the Prog key you
copy the name you wish to associate with another module, by pressing List you associate a previously
copied name with the current module. Once the entry is completed, press Enter to validate the name. Press
Esc to cancel the entry. In both cases you’ll be brought back to the M401 Configuration Menu.
3.2.1.2 Configuring The M401 Module

Press 2 Settings
← (Left) and → (Right) keys to
move to the field. Configuration
↑ (Up) and ↓ (Down) keys to Fields
change the field.
confirm/cancel.
From the M401 Configuration Menu press 2 to access the Settings screen.
The three setting fields displayed in this screen are described in the following table:
Field Value Description

Feeder PRI / SEC It sets the module as main feeder. Set the field value to PRI if the M401
module is installed on the primary rack of the control system,
alternatively you can set the value to SEC.
Bat tst ENA / DIS It enables the automatic battery test. Set the value to DIS if you don’t
want to run an automatic battery test every week.

Job No. Doc. No.
WARNING: By disabling the test you don’t affect the manual control.
W relay ENA / DIS It activates the general fault relay of the M402 CPU in case of main
supply failure. Set the field value to ENA if you want to be notified
when a main supply failure occurs on the fault relay output of the
terminals 3-4 in the M402 CPU of the module.
WARNING: In case of main supply failure the control system
generates a level 2 warning (cf § 4.3 Warning Signals), regardless of
the field setting.
Use the ← (Left) and → (Right) keys to select the desired field and change this field by using the ↑ (Up)
and ↓ (Down) keys. Once the changes are completed, press Enter to validate the settings. Press Esc if you
want to cancel the settings. In both cases you’ll be brought back to the M401 Configuration Menu.

control system. On the left field you’ll see the module type and ID. The displayed name is the name
associated with the module.
with a descending ID. Press Esc to return to the Modules Menu, while you can access the M404
event, accordingly.
The M404 Configuration Menu is made up of many pages: The New Page symbol on the upper right angle
The following page:

Job No. Doc. No.

Press 1 Name Entry
Type the name ---
confirm/cancel.
respectively. Once the entry is completed, press Enter to validate the name. Press Esc to cancel the entry. In
both cases you’ll be brought back to the M404 Configuration Menu.

Job No. Doc. No.

Press 2 Settings
3 Line check
4 Discharge conf
change the field.
confirm/cancel.
From the M404 Configuration Menu press:

2 to access the Settings screen.
3 to access the Line check screen.
4 to access the Discharge conf screen.
The following table lists the fields of each screen.
Settings:
Low pr NC / NO It sets the contact type for the low pressure switch. You must set the
field to Normally Closed (NC) if the low pressure switch is activated
when the circuit is opened, alternatively you may set the field to
Normally Open (NO).
H pr sw NC / NO It sets the contact type for the high pressure switch. You must set the
field to Normally Closed (NC) if the high pressure switch is activated
when the circuit is opened, alternatively you may set the field to
Normally Open (NO).
Low pr ENA / DIS It sets the low pressure switch presence. Select ENA if the discharge
module is associated with a low pressure switch, alternatively you can
select DIS.
H pr sw ENA / DIS It sets the high pressure switch presence. Select ENA if the discharge
module is associated with a high pressure switch, alternatively you can
select DIS.

Job No. Doc. No.
Line check:
Lp Ctrl ENA / DIS It enables the low pressure line control. Set the value to ENA to
constantly control the line, alternatively you can set the value to DIS.
Hp Ctrl ENA / DIS It enables the line control of the high pressure switch. Set the value to
ENA to constantly control the line, alternatively you can set the value
to DIS.
Ih Ctrl ENA / DIS It enables the line control using the selector to inhibit the discharge. Set
the value to ENA to constantly control the line, alternatively you can
set the value to DIS.
Discharge conf:
Dis Cmd Rem / It sets the command type that activates the discharge. Set the value to
406 / Rem if a remote line for the discharge control is connected to the
P406 / terminal #7 of the module. Set the value to 406 if an internal wiring of
Prg the control unit from the M406 module is connected to the said
terminal. Set the value to P406 if you wish the discharge command
from the M406 module to be associated with a logic equation that
manages the M406 module alarm. In this way you obtain a double-
consent command. Set the value to Prg if the discharge command is
obtained through logic alone.
Timer 0 sec / 9 min It sets the timer-controlled discharge. The selectable values range from
0 seconds to 9 minutes.
Discharge Mode AUT/MAN It displays the Discharge Mode that may be either Automatic or
Manual. You cannot change the field from the keypad. Change the
value by using the AUT/MAN switch on the module front panel and
through the AUTO/MANUAL DISCHARGE SET input to the terminal
#7 of the M402 CPU.
Timer act ENA / DIS It determines whether the solenoid valve activation is controlled by a
timer. Set the value to ENA if you wish the solenoid valve to be
enabled for 1 minute before it is automatically disabled. Alternatively,
you may set the value to DIS, in this way the valve will remain
energized until the RESET control is selected.
3.2.2.3 Copying And Pasting The M404 Configuration
The Copy and Paste commands allow you to transfer the configuration from a M404 module to another
module of the same type. The Copy and Paste procedure allows you to simplify and accelerate the
configuration of the M404 modules, especially when the control system features a large number of discharge
modules with the same characteristics.
From the M404 Configuration Menu press → (Right) to access the second page, then press the 9 key to copy
the current configuration. Press Esc to return to the Existing M404 List. Use the ← (Left) and → (Right)
keys to select a new M404 module. Press Enter to access the M404 Configuration Menu: select the →
(Right) key to view the “Paste” option and then choose the 0 key to paste the configuration.

Job No. Doc. No.
3.2.2.4 Programming The M404 Module

→ (Right) key Second page of the
M404 Configuration Menu
Press 5 Logic Menu
Press 1 Equation Entry
Type the equation ---
confirm/cancel.
The M404 module can be associated with a logic equation that manages the events in order to create a
discharge command. From the second page of the M404 Configuration Menu press 5 to access the Logic
Menu.
Press the 1 key to access the Equation Entry screen.
Enter the equation into the screen according to the syntax rules defined in Chap. 5 (cf § 5.2 Operators And
Syntax). To enter the alphabetical characters you must repeatedly press the corresponding numerical key, if
you want to insert the operators you must repeatedly press the Op. key. Once the entry is completed, press
Enter to validate the equation. If the equation is free of errors you return to the Logic Menu, otherwise you’ll
receive an error message containing an error code (cf § 5.4 Logical Errors). Remove the programmed logic
by deleting the text and pressing Enter.
Press Esc to return to the Equation Entry screen: in this case the cursor is positioned over the error and
blinks until you press any key. Press Esc to exit without saving.
The Logic Menu displays the following options:
2 Current logic deletion: the logic associated with the module is canceled.
3 Access to the logics of the system, i.e. those logics that can be called from the module equations (cf §
3.3.1 Programming The System Logics
4 ).
9 Copy of the current logic to associate it with another M404 module.
0 Paste of the previously copied logic.
WARNING: After programming the M404 module with a logic equation, please make sure that in the
Discharge Conf screen (cf § 3.2.2.2 Configuring The M404 Module
) the Dis Cmd is set to P406 or Prg.

Job No. Doc. No.

Use the ← (Left) and → (Right) Two module lines
keys to select the 2 following
lines of the current module or of
the subsequent modules
Press the key corresponding to M405 Configuration Menu
the line you wish to program
control system. On the left field you’ll see the module type and ID. The first two lines of the module are
shown. To access the 2 following lines press the → (Right) key and to return to the previous 2 lines press the
← (Left) key.
Press Esc to return to the Module Programming Menu.

To configure a line, press the corresponding numeric key: you’ll access the M405 Configuration Menu of the
selected line. When in the module there aren’t any alarm or fault events, all modules’ LEDs are on and
steady. If an alarm or fault event occurs during the configuration, the LEDs are turned off and the
corresponding visual warning signals are processed for each event, accordingly.
The M404 Configuration Menu is made up of many pages: The New Page symbol on the upper right angle
is on the bottom right angle it means that you can return to a previous page pressing the ← (Left) key. On
the left field you see the module, the module ID and the configuration line.
The following page:

Job No. Doc. No.

Press 1 Name Entry
Type the name ---
confirm/cancel the entry.
3.2.3.2 Configuring The M405 Module Line

Press 2 Settings

Job No. Doc. No.

change the field.
confirm/cancel. the settings
WARNING: Please make sure that the jumpers on the module are in the correct position, according
to the defined settings (cf § 1.6.3 Basic Configuration).
Settings:
Ln Ctrl ENA / DIS It enables the line control. Set the value to ENA if you wish to
constantly control the line, alternatively you can set the value to DIS.
Ln Mode INV / CURR It sets the line mode. If the line is controlled, it will set the control type.
Select INV if you wish to perform a control with a polarity reversal;
ENA/DIS
select CURR to perform a current control. If the line is controlled, you
can set the status of the line relay: Normally enabled (ENA) or disabled
(DIS).
Interm ENA / DIS It sets the intermittent activation of the line.
Warning ENA / DIS It determines weather a level 2 warning is associated with the
activation event shown on the display (cf § 4.3 Warning Signals). The
archive is enabled when the value is set to ENA, the activation event is
archived in the history log too.
Use the Copy and Paste commands to transfer the configuration from a line to another line of the same
module or of a module of the same type. The Copy and Paste procedure allows you to simplify and
accelerate the configuration of the M405 modules, especially when the control system features a large
number of discharge modules with the same characteristics.
From the M405 Configuration Menu press → (Right) to access the second page, then press the 9 key to copy
the current configuration. Press Esc to return to the Existing M405 List. Use the ← (Left) and → (Right)
keys to scroll down the line list of the M405 modules. Select the desired line: you access the M405
Configuration Menu. Press the → (Right) key to view the “Paste” option and then choose the 0 key to paste
the configuration.

Job No. Doc. No.
3.2.3.4 Programming The M405 Module Line

the subsequent module
Press 5 Logic Menu
confirm/cancel.
Each line of the M405 module can be associated with a logic equation that manages the events in order to
activate the line itself.
From the second page of the M405 Configuration Menu press 5 to access the Logic Menu.
Enter the equation into the screen according to the syntax rules defined in Chap. 5 (cf § 5.2
Operators And Syntax). To enter the alphabetical characters you must repeatedly press the corresponding
numerical key, if you want to insert the operators you must repeatedly press the Op. key. Once the entry is
completed, press Enter to validate the equation. If the equation is free of errors you return to the Logic
Menu, otherwise you’ll receive an error message containing an error code (cf § 5.4 Logical Errors).
Remove the programmed logic by deleting the text and pressing Enter.
blinks until you press any key.
Press Esc to exit without saving.
).
9 Copy of the current logic in order to associate it to another line of the selected module or of another
M405 module.
Job No. Doc. No.
3.2.3.5 Line Walk Test Of The M405 Module

Press the 1 key M405 Configuration Menu
Press 3 Walk Test
move to the field. Test
↑ (Up) and ↓ (Down) keys to fields
change the field.
Enter/Esc to exit M405 Configuration Menu
Use this procedure to verify the correct operation of the lines or of the associated logics, without activating
the output relays. The intended audience for this procedure includes the system installer.
From the M405 Configuration Menu press 3 to access the Walk Test screen. Use the ← (Left) and → (Right)
keys to select the desired field and change this field by using the ↑ (Up) and ↓ (Down) keys.
The following table lists the line fields and test operation.
Walk Test:
Ln test 1-6 It selects the line where the test is performed.
Man act ACT / DIS You enable the selected output by setting the value to ACT. The board
LEDs turn off while the LED of the activated line lights up. The buzzer
sounds intermittently until the acknowledgment is received. Set the
value to DIS to disable the line.
Activat OK / INH If you set the value to INH you inhibit the line relay commutation. The
corresponding fault LED will be on and steady: When the line is
activated, the corresponding activation LED turns on but the relay isn’t
energized. Set the value to OK to re-enable the relay.
WARNING: The Walk Test settings are not maintained after the control system is shut down; therefore, at
the start up of the control system, all lines are enabled and the manual activation is inhibited. If
the line is disabled, the event is not shown on the display. However, the inhibition is displayed
in the corresponding line disabling menu.

Job No. Doc. No.

control system. On the left field you’ll see the module type and ID.
with a descending ID. Press Esc to return to the Module Menu.
If the module is configured to operate with single lines, you can set one line by pressing the corresponding
numeric key, otherwise press Enter: you’ll access the M406 Configuration Menu of the selected line. When
in the module there aren’t any alarm or fault events, all modules’ LEDs are on and steady. If an alarm or
fault event occurs during the configuration, the LEDs are turned off and the corresponding visual warning
signals are processed for each event, accordingly.
The M406 Configuration Menu displays the following options:
3.2.4.1 Setting The Line Name Of The M406 Module

Press 1 Name Entry
Type the name ---
Job No. Doc. No.
confirm/cancel.

Press 2 Settings
change the field.
confirm/cancel.

Job No. Doc. No.
Settings:
Cross ln ENA / DIS It sets the module crossed lines. Set the value to ENA if you wish to set
the crossed-line management of the two detection lines, otherwise
select DIS.
Tst alr ENA / DIS It enables the output activation of the module in case of test. Set the
value to ENA if you wish to activate the module output when
performing the line test by pressing the button on the module front
panel, otherwise select DIS.
Alr lev 15mA-20mA It sets the alarm level of the detection line.
From the M406 Configuration Menu press 9 to copy the current configuration. Press Esc to return to the
Existing M406 List. Use the ← (Left) and → (Right) keys to select the new M404 module where you wish
to paste the copied configuration. Press the key corresponding to the line, and then select the 0 key to paste
the configuration.

control system. On the left field you’ll see the module type and ID. The first two lines of the module are
shown. To access the 2 following lines press the → (Right) key and to return to the previous 2 lines press the
← (Left) key.

Job No. Doc. No.
Press Esc to return to the Module Menu.

The M407 Configuration Menu displays the following options:

Press 1 Name Entry
Type the name ---
confirm/cancel.

Job No. Doc. No.

Press 2 Settings
change the field
confirm/cancel.
Settings:
Cross ln ENA / DIS It sets the crossed line. In the M407 module you can set a crossed-line
management for the line pairs 1-2, 3-4 and 5-6. Set the value to ENA if
you wish to set the crossed-line management, alternatively you can set
the value to DIS.
Detect ENA / DIS It enables the detection line. The line is disabled if the value is set to
DIS.
Alr lev 15mA / It sets the alarm level. You can set the line for a level pair: in this case,
20mA / the prealarm and alarm management is disabled.
15-35mA /
20-50mA
Activat 1A/2A It enables the verification of the alarm signaling. If the value is set to 2°
for the first alarm signal, the line will be disabled for a few seconds.
The alarm signal is generated if the detector is still running even after
the re-activation. If the value is set to 1° the alarm signal is
immediately activated.
Event A/F/W In this field you can manage the line event by the setting the value to
Alarm (A), Fault (F) or Simple Warning (W).
WARNING: if the Cross ln field is set to ENA, the line will be
managed as an alarm, regardless of the setting configured in the Event
Job No. Doc. No.
field.
Existing M407 List. Use the ← (Left) and → (Right) keys to scroll down the line list of the M407 modules.
Select the desired line: you access the M407 Configuration Menu. Press the 0 key to paste the configuration.

Press → (Right) to access the ---
second screen
From the second screen of the Modules Menu, press 8 to access the Existing M408 List page, i.e. a M408
module list saved in the control system. On the left field you’ll see the module type and ID. The displayed
name is the name associated with the module.
with a descending ID. By pressing Esc you return to the Modules Menu, while you can access the M408
event, accordingly.
The M408 Configuration Menu is made up of many pages. The New Page symbol on the upper right angle
The following page:

Job No. Doc. No.

second screen
Press 1 Name Entry
Type the name ---
confirm/cancel.

second screen

Job No. Doc. No.
Press 2 Settings
3 Display
4 Calibration
move to the field, ↑ (Up) and ↓ Configuration
(Down) keys to change the field. Fields
confirm/cancel.
From the M408 Configuration Menu press:

2 to access the Settings screen.
3 to access the Display screen.
4 to access the Calibration screen.
want to cancel the settings. In both cases you’ll be brought back to the M408 Configuration Menu. When
exiting the Display screen, you are asked to delete the maximum values displayed on the module LED bar.
Settings:
Range Ox / It sets the value range that is shown on the 3-digit display of the
10 / module.
25 / Ox = values from 25.0 to 15.0
50 / 10 = values from 0.0 to 10.0
100 / 20 = values from 0.0 to 20.0
200 / 50 = values from 0.0 to 50.0
500 / 100 = values from 0 to 100
999 200 = values from 0 to 200
mA 500 = values from 0 to 500
999 = values from 0 to 999
mA = values from 0.0 to 20.0 in mAmpere
WARNING: If the field is set to mA, the calculation range is 0-20 mA.
In this case, the prealarm and alarm levels fall within this range. In all
other cases, the relevant calculation range is 4-20mA.
Thresh UP / DWN It sets the alarm or prealarm signal generation when the values
measured for the detection line are higher (UP) or lower (DOWN) then
the set thresholds.
Pre (%) 0-100 A/W It sets the prealarm level in percentage. If the Range field is set to mA,
the relevant range is 0-20 mA, otherwise the range is 0-20 mA. In
addition, you can set the event type associated with the threshold
overflow. (A) alarm, (W) simple warning (2 level warning cf
§.4.3 Warning Signals).
Alr (%) 0-100 A/W It sets the alarm level in percentage. If the Range field is set to mA, the
relevant range is 0-20 mA, otherwise the range is 0-20 mA. In addition,
you can set the event type associated with the threshold overflow. (A)
alarm, (W) simple warning (2 level warning cf §.4.3 Warning
Signals).
Display:
Max lev ENA / DIS When the maximum value is reached, it enables the signal generation

Job No. Doc. No.
on the module LED bar. The signaling is automatically reset when the
module indicates an alarm or prealarm level, and the user performs the
ACKNOWLEDGEMENT and RESET commands from the M402
CPU. The signaling is reset also when you exit the Display screen.
Act cur 0-20mA It indicates the actual circulating current on the sensor line; this
current value doesn’t necessarily correspond to that shown on
the module display, because it ignores the correction of zero, if
any (cf § 3.2.6.3 Zero Self-Calibration).
Lev (%) 0-100 It displays the current line value of the set range in percentage. The
field cannot be changed by the operator.
Max (%) 0-100 It displays the maximum line value of the set range in percentage. The
field cannot be changed by the operator.
Calibration:
Fault 1.0mA / It sets the minimum line current value, when the line current is lower
1.2mA / then this setting the module generates an opening fault warning. The
1.4mA / value refers to the module zero, i.e. it can differ from the line real
1.6mA / value, if a zero self-calibration has been performed (cf § 3.2.6.3 Zero
1.8mA / Self-Calibration).
2.0mA /
2.2mA /
2.4mA /
2.6mA /
2.8mA /
3.0mA /
3.2mA /
3.4mA /
3.6mA
Detect ENA / DIS It enables (ENA) or disables (DIS) the detection line.
Z Calib DIS/ENA/RST Cf § 3.2.6.3 Zero Self-Calibration
3.2.6.3 Zero Self-Calibration
The zero self-calibration procedure allows you to automatically calibrate the zero value of the line
measurements, without having to perform any mechanical adjustments (ex.: trimmer adjustments) on the
module.
To perform the calibration: From the Calibration page of the M408 Configuration Menu set the Z Calib field
to ENA and press Enter. In this way you activate an automatic procedure that allows you to correct the zero
value of the measurement according to the existing current value on the sensor line.
By setting the field to RST, you delete any zero adjustment and set the module back to the default
calibration. If you don’t wish to enable any correction, set the field value to DIS.
Calibration actions generate a level 4 warning event that is archived, if you enabled the history log
(cf § 4.3 Warning Signals).
WARNING: Before performing the self-calibration, please make sure that the line current value is steady
and that the sensor has been correctly calibrated.

Job No. Doc. No.
The Copy and Paste commands allow you to transfer the configuration from a M408 module to another
module of the same type. The Copy and Paste procedure allows you to simplify and accelerate the
configuration of the M404 modules, especially when the control system features a large number of discharge
modules with the same characteristics.
Existing M408 List. Use the ← (Left) and → (Right) keys to select the new M408 module where you wish
to paste the copied configuration. Press Enter to access the M408 Configuration Menu: select the → (Right)
key to view the “Paste” option and then choose the 0 key to paste the configuration.

second screen
From the Module Programming Menu, press 9 to access the Existing M409 List page, i.e. a M409 module list
saved in the control system. On the left field you’ll see the module type and ID. The first two lines of the
module are shown. To access the 2 following lines press the → (Right) key and to return to the previous 2
lines press the ← (Left) key.
Press Esc to return to the Module Programming Menu.

The M409 Configuration Menu is made up of many pages: The symbol on the upper right angle indicates
that other modules of the same type but with a higher ID exist in the list, you can access them by pressing the
→ (Right) key; using the ← (Left) key you select modules with a descending ID. On the left field you see
the module, the module ID and the configuration line.
The following page:

Job No. Doc. No.

second screen
Press 1 Name Entry
Type the name ---
confirm/cancel.

Job No. Doc. No.

second screen
Press 2 Settings
↑ (Up) and ↓ (Down) keys to Configuration
change the field Fields
confirm/cancel.
Settings:
Ln Mode ENA/DIS It sets the line relay status: Normally enabled (ENA) or disabled (DIS).
Interm ENA / DIS It sets the intermittent activation of the line.
Warning ENA / DIS It determines weather a level 2 warning is associated with the
activation event shown on the display (cf § 4.3 Warning Signals). The
archive is enabled when the value is set to ENA, the activation event is
archived in the history log too.
number of discharge modules with the same characteristics. From the M409 Configuration Menu press 9 to
copy the existing configuration. Press Esc to return to the Existing M409 List. Use the ← (Left) and →
(Right) keys to scroll down the line list of the M409 modules. Select the desired line: You access the M409
Configuration Menu. Press the 0 key to paste the configuration.

Job No. Doc. No.
3.2.7.4 Programming The M409 Module Line

second screen
Press 5 Logic Menu
confirm/cancel.
Each line of the M409 module can be associated with a logic equation that manages the events in order to
activate the line.
From the second page of the M409 Configuration Menu press 5 to access the Logic Menu.
Enter the equation into the screen according to the syntax rules defined in Chap. 5 (cf § 5.2 Operators
And Syntax). To enter the alphabetical characters you must repeatedly press the corresponding numerical
key, if you want to insert the operators you must repeatedly press the Op. key. Once the entry is completed,
press Enter to validate the equation. If the equation is free of errors you return to the Logic Menu,
otherwise you’ll receive an error message containing an error code (cf § 5.4 Logical Errors). Remove
the programmed logic by deleting the text and pressing Enter.
blinks until you press any key. Press Esc to exit without saving.
).
9 Copy of the existing logic in order to associate it to another line of the selected module or of another
M409 module.
Job No. Doc. No.
3.2.7.5 Line Walk Test Of The M409 Module

second screen
Press the 1 key M409 Configuration Menu
Press 3 Walk Test
move to the field Test
↑ (Up) and ↓ (Down) keys to fields
change the field
Enter/Esc to exit M409 Configuration Menu
Use this procedure to verify the correct operation of the lines or of the associated logics, without activating
the output relays. The intended audience for this procedure includes the system installer.
From the M409 Configuration Menu press 3 to access the Walk Test screen. Use the ← (Left) and → (Right)
keys to select the desired field and change this field by using the ↑ (Up) and ↓ (Down) keys.
The following table lists the line fields and test operation.
Walk Test:
Ln test 1-6 It selects the line where the test is performed.
Man act ACT / DIS You enable the selected output by setting the value to ACT. The board
LEDs turn off while the LED of the activated line lights up. The buzzer
sounds intermittently until the acknowledgment is received. Set the
value to DIS to disable the line.
Activat OK / INH If you set the value to INH you inhibit the line relay commutation. The
fault LED will be on and steady: When the line is activated, the
corresponding activation LED turns on but the relay isn’t energized.
Set the value to OK to re-enable the relay.
WARNING: The Walk Test settings are not maintained after the control system is shut down; therefore, at
the start up of the control system, all lines are enabled and the manual activation is inhibited. If
the line is disabled, the event is not shown on the display. However, the inhibition is displayed
in the corresponding line disabling menu.

Job No. Doc. No.
3.3 System Programming
From the Logic Menu of the selected module press option 3 to access the System Logic List, i.e. those logics
defined by the module equation (cf § 5.3 System Logics).
Use the ↑ (Up) and ↓ (Down) keys to browse the list pages; press ← (Left) and → (Right) to select the logic
in the page: You can select up to 63 system logics. Logics already programmed are marked with a “L”, while
non-programmed logics have only an index indicator. A selected logics can be deleted by pressing the Canc
key, copied by pressing the 9 key and pasted by pressing the 0 key.
To access the logic equation, move the cursor over the desired index and press Enter.
Enter the equation into the screen according to the syntax rules defined in Chap. 5 (cf § 5.2 Operators And
Syntax). To enter the alphabetical characters you must repeatedly press the corresponding numerical key, if
you want to insert the operators you must repeatedly press the Op. key. Once the entry is completed, press
Enter to validate the equation. If the equation is free of errors you return to the System Logic List, otherwise
you’ll receive an error message containing an error code (cf § 5.4 Logical Errors). Remove the programmed
logic by deleting the text and pressing Enter.
3.3.2 Setting The System Name

Press 2 System Menu
Press 1 Name Entry
Type the name ---
Press Enter/Esc to Programming Menu
confirm/cancel.
From the Programming Menu press the 2 key to access the System Menu and then press the 1 key to display
the Name Entry screen. You can enter up to 25 alphanumeric characters using the keypad on the operator
panel.
both cases you’ll be brought back to the System Menu.

Job No. Doc. No.
3.3.3 Setting The System Code

Press 2 System Menu
Press 2 Code Entry
Type the name ---
confirm/cancel.
From the Programming Menu press the 2 key to access the System Menu and then press the 1 key to display
the Code Entry screen. You can enter up to 15 alphanumeric characters using the keypad on the operator
panel.
Use the ↑ (Up) and ↓ (Down) keys to position the cursor at the end or at the beginning of the code,
3.4 Printing The Programming
The CS 400 fire control system is set to print on paper the programming of the existing modules (“Print
Config” mode) and the logics programming (“Print Logics” mode); this allows you to have a secure archive
of the set configuration.
3.4.1 Printing the Configuration

Press List List Menu
Press 2 Print Menu
Press 3 Print Config
To enable the “Print Config” mode press the List and 2 keys, you’ll access the Print Menu. From the Print
Menu, press 3 to activate the print command: a 40-column report with a header and a configuration list is
printed. The report header contains the system name and serial number, the report type and the activation
date/time of the “Print Config” mode. The configuration list contains various sections: module type and ID,
module or line name, configuration parameters, any association with logics through a numeric ID.
The “Print Config” mode is disabled when:
• You disable the printer (Cf § 3.8.4 Configuring The Control System For Win400
• ).
• You activate other modes in the Print Menu.
• You perform the Self-Configuration procedure (Cf § 3.6 Updating The System
• )
Job No. Doc. No.
3.4.2 Printing the Logics

Press 2 Print Menu
Press 4 Logics Print
The CS 400 fire control system is set to print all the user-programmed logic equation on paper.
To enable the “Print Logics” mode press the List and 2 keys, you’ll access the Print Menu. From the Print
Menu, press 4 to activate the print command: a 40-column report with a header and a programmed logics list
is printed. The report header contains the system name and serial number, the report type and the activation
date/time of the “Print Logics” mode. The logics list contains various sections: logic numeric ID (for the
association with module), logic type and equation.
The “Print Logics” mode is disabled when:

• ).
3.5 Saving The Programming

Press 4 Confirmation Message
confirm/cancel.
The Programming Saving procedure allows you to store the logics configuration and programming on a non-
volatile memory to make it available for the next control system startup. Access the Programming Menu and
press 4 to save the programming. A confirmation prompt is displayed: press Enter to save the control system
data or press Esc to cancel the action. In both cases you’ll be brought back to the Programming Menu. When
you exit the Menu List, a saving prompt is also automatically displayed if the current configuration is
different from the last saved configuration.
This action generates a level 2 warning event that is archived, if you enabled the history log (cf § 4.3
Warning Signals).
3.6 Updating The System

Job No. Doc. No.

Press 3 Self-Configuration Procedure
With the Self-Configuration procedure you can update the system configuration based on the modules
contained in the control system. This procedure allows the M402 CPU to query the current modules without
changing the pre-existing module configuration and programming, to delete the no longer existing modules
and to add any new module to the configuration.
In the following example you see the two most common actions of the system update procedure: a module
deletion and the creation of a new module.
A module deletion from the control system generates a fault event because the control system attempts to
communicate with the removed module. If, for example, you remove a M408 module with an ID of 2, you’ll
see the following display:
Access the Programming Menu and press 3 to start the updating process.
During the updating phase (it takes a few seconds) you receive the following message:
At the end of the updating process, the Programming Menu screen is displayed and the fault event is
automatically deleted. Now the system is configured without the removed M408 module.
When you add a new module, the module fault LEDs start blinking. This means that the module has not been
acknowledged by the control system yet and therefore it is inactive.
To add the module to the system, perform the above updating process. The fault LEDs stop blinking and the
configuration set with the dip-switch on the module is automatically applied. At this point the operator can
start the new module configuration and programming (cf § 3.2 Module Programming).
This action generates a level 2 warning event that is archived, if you enabled the history log (cf § 4.3
Warning Signals).
3.7 Resetting The Control System

Press → (Right) to access ---
the second screen
Press 5 (Reset) or 7 (Init) Confirmation Message
Press Enter/Esc to System Restart
confirm/cancel.
The Reset option allows you to perform a M402 CPU restart without turning off the system. When you
perform a reset, only the signaling status of the control system is changed, this means that the
enabling/signaling status of various modules and the power supply of remote and connected devices remain
unchanged.
Use the Init command to delete the configuration of the control system from the non-volatile memory. If you
manually turn off the control system, at the restart of the a system an initialization will be
performed (cf § 2.10 Startup Actions) and the default configuration will be set.
This action generates a level 2 warning event that is stored only if you enabled the history log (cf § 4.3
Job No. Doc. No.
Warning Signals).
WARNING: It is recommended to perform the Reset and Init action only when it is strictly necessary.
3.8 System Management

Press 2 Level 2 password
Press Enter System Menu
In this section you can configure the M402 CPU and the control system devices.
From the normal operation screen press the Prog key. You access the Menu List page: The access is granted
only if all the enabled alarm and fault events have been acknowledged.
You can access the control system management through two different modes, based on the configuration
change rights:
• Read Only mode: access granted to user for system configuration reference only.
Read-Write Mode
In this mode you can configure the M402 CPU and the control system devices. To access the system
configuration from the Menu List screen press 2 and enter the level 2 password to display the System Menu.
the System Menu will appear. If the password is wrong, you will see an error message with an alphanumeric
code: press Esc to perform a new entry.
Pressing Esc you abort the access action. In the Read-Write mode, the event warning signals on the display
are inhibited, except for those related to the ACKNOWLEDGEMENT, SILENCING, RESET, and LAMP TEST
commands. An alarm or fault status during control system management does not imply the automatic exit
from the corresponding menus.

Job No. Doc. No.
Read Only Mode

In this mode you cannot perform any control system configuration changes. All actions and keys related to
operation parameter changes are inhibited: you can only check the existing configuration. Should an alarm or
fault status occur in this mode, it does imply the automatic exit from the corresponding menus, and the event
is shown on the display.
The System Menu displays various management options on different pages: The New Page symbol on the
upper right angle indicates the presence of a following page that can be accessed by pressing the → (Right)
key. If this symbol is on the bottom right angle it means that you can return to a previous page pressing the
← (Left) key.
Options of the following page:
Press Esc to return to the Menu List screen.

Pressing the numeric key shown in the menu, you access the corresponding section:
3.8.1 Selecting The Language and Date Time format

Press 1 Language Setting
move to the field. ---
↑ (Up) and ↓ (Down) keys to
change the field.
Press Enter/Esc to System Menu
confirm/cancel.
From the System Menu press 1 to access the Language Setting screen. Use the ← (Left) and → (Right) keys
to select the desired field and change this field by using the ↑ (Up) and ↓ (Down) keys.
The control system supports Italian and English languages. Once the selection is completed, press Enter to
validate the action or Esc to cancel it. In both cases you’ll be brought back to System Menu.
3.8.2 Configuring The Events


Job No. Doc. No.
Press 2 Event Setting

move to the field. Setting
change the field.
From the System Menu press 2 to access the Event Setting screen. The page allows you to configure how the
event message are displayed and their archiving. Use the ← (Left) and → (Right) keys to select the desired
field and change this field by using the ↑ (Up) and ↓ (Down) keys.
Once the changes are completed, press Enter to validate the settings. Press Esc if you want to cancel the
settings. In both cases you’ll be brought back to the System Menu.
The following table lists the setting field description.
Event Setting:
Display AUT/MAN It sets how the events are displayed. Select AUT to display all the
enabled events in sequence, every 5 seconds. If you select MAN, you
will display the most recent event: the operator can scroll down the
event list of the displayed type by using the ↑ (Up) and ↓ (Down) keys
or he can select the event he wishes to display by pressing the ← (Left)
and → (Right) keys.
Log ENA / DIS It enables (ENA) or disables (DIS) the event archiving. If you disable
the event archiving, a fault event will be signaled until the operator
acknowledgment.
Man dis ENA / DIS It determines weather the manual discharge event is displayed: If the
value is set to ENA, by switching to the manual discharge mode you
generate a warning event that is shown on the display.
Aut Esc ENA / DIS It sets the timer-controlled exit from the page. After opening a page, if
you have not pressed any key for 10 minutes, an automatic exit from
the page would be generated and no parameters would be saved.
Cmd lev ENA / DIS It determines weather the ACKNOWLEDGMENT and RESET
commands are password-enabled: If you set the value to ENA, the
command will be enabled only after you enter the level 2 password. If
the value is set to DIS, the command can be executed without
activation.
3.8.3 Configuring The Serial Ports

Press 3 Serial Setting
Job No. Doc. No.

change the field.
confirm/cancel.
From the System Menu press 3 to access the Serial Setting screen. In this page you can configure the speed
and the protocol of the two M402 CPU serial ports. Use the ← (Left) and → (Right) keys to select the
desired field and change this field by using the ↑ (Up) and ↓ (Down) keys. Once the changes are completed,
press Enter to validate the settings. Press Esc if you want to cancel the settings. In both cases you’ll be
brought back to the System Menu.
Serial Setting:
Mode 8,N,1 / It sets the data format sent over the serial line.
8,O,1 / 8,N,1 = 8 data bit, no parity, 1 stop bit
8,E,1 / 8,O,1 = 8 data bit, odd parity, 1 stop bit
8,N,2 / 8,E,1 = 8 data bit, even parity, 1 stop bit
8,O,2 / 8,N,2 = 8 data bit, no parity, 2 stop bit
8,E,2 8,O,2 = 8 data bit, odd parity, 2 stop bit
8,E,2 = 8 data bit, even parity, 2 stop bit
Baud 1200 / It sets the communication speed in bit/sec.
2400 /
4800 /
9600 /
19200 /
38400
Netw Y/N It enables Ethernet link.
3.8.4 Configuring The Control System For Win400

Press 4 Remote Device Menu
Press 1 Modbus PC Settings
change the field.
Press Enter/Esc to Remote Device Menu
To use the setup and monitoring PC program of the control system you should set some parameters for the
Modbus protocol controlling the communication between the control system and the Windows application.

Job No. Doc. No.
From the System Menu, press the 4 key and access the Remote Device Menu; then select 1 to display the
Modbus PC Settings.
want to cancel the settings. In both cases you’ll be brought back to the Remote Devices Menu.
Printer Setting:
Win ENA / DIS It enables the Win400 communication in the control system.
WARNING: If this parameter is set to DIS, any attempt to connect to
Win 400 will generate a connection error (cf. the Win 400 Operation
Manual).
Address 1-247 It sets the control system address in the network modbus.
Port RS232/ RS485 It indicates the communication port the Win400 is connected to.
WARNING: Please make sure that the Win400 communication settings
(cf the corresponding manual) are the same as those of the selected
port.
Plc ENA / DIS It enables the Plc communication in the control system.
WARNING: If this parameter is set to DIS, plc rules will be disabled.
Address 1-247 It sets the control system address in the network modbus.
Port RS232/ RS485 It indicates the communication port the Plc is connected to.
3.8.5 Setting The Printer

Press 4 Remote Device Menu
Press 2 Printer Settings
change the field.
Press Enter/Esc to Remote Device Menu
From the System Menu, press the 4 key and access the Remote Device Menu; then select 2 to display the
Printer Settings. In this page you can enable the printer and set the print features.

Job No. Doc. No.
want to cancel the settings. In both cases you’ll be brought back to the System Menu.
Printer Setting:
Print ENA / DIS It enables the printer.
WARNING: Differing from other parameters, the printer does not
remain enabled when you turn off the control system, i.e. at the next
startup you’ll have to set the parameter again.
Columns 40-120 The print area is made up of 40 columns: the parameter allows to place
the print area according to the following criteria:
40 = Left margin alignment
80 = Centered alignment
120 = Right margin alignment
Port RS232/ RS485 It indicates the communication port the printer is connected to.
WARNING: Please make sure that the printer communication settings
(cf the corresponding manual) are the same as those of the selected
port.
WARNING: By accessing the Printer Settings page you start the initialization of the printer: Therefore you
can cancel a printing process in progress by accessing the page and confirming the action
pressing Enter (for example to delete all the events sent to the paused printer).
To avoid printing the control characters of the serial lines, it is recommended to turn on the
printer only after you started the control system and to turn it off before shutting down the
system.
3.8.6 Deleting The Event Log

the second screen
Press 5 Log Deletion
confirm/cancel.
From the System Menu press the 5 key to enable the deletion of all the events stored in the log. Before
performing the action, the control system displays a confirmation prompt. This action generates a level 2
warning event that is stored only if you enabled the history log (cf § 4.3 Warning Signals).

Job No. Doc. No.
3.8.7 Setting The Date/Time Options

the second screen
Press 6 Data/Time Setting
move to the field. ---
change the field.
confirm/cancel.
From the System Menu press 6 to access the Date/Time Setting screen.
and ↓ (Down) keys. Hold down the Up and Down keys to automatically change the selected field. Once the
changes are completed, press Enter to validate the settings. Press Esc if you want to cancel the settings. In
3.8.8 Setting The Buzzer

the following screen
Press 7 Buzzer Setting
change the field.
confirm/cancel.
From the System Menu press 7 to access the Buzzer Setting screen. In this page you can disable the buzzer by
using a timer.
want to cancel the settings. In both cases you’ll be brought back to the System Menu.

Job No. Doc. No.
Buzzer Setting:
Buzzer: ENA / DIS Set the value to DIS to disable the buzzer for the time interval set in the
Timer field.
WARNING: Differing from other parameters, the printer does not
remain enabled when you turn off the control system, i.e. at the next
startup you’ll have to set the parameter again.
Timer 10m-4h Time interval during which the buzzer is disabled: it ranges from 10
minutes to 4 hours
WARNING: The settings are not saved to the non-volatile memory: By default, the buzzer is enabled when
you turn on the control system.
Every time you confirm the settings (by pressing Enter) a new disabling action is started and
controlled by the timer.
3.8.9 System Information

Press List Menu List
Press 4 System Information
Press Enter/Esc to exit System Menu
In the System Information you find some data on the CS 400 control system: the presented fields can be
edited by the operator and are set by the manufacturer upon the delivery of the control system.
System Information:
(indicative)
Hw rev 1.0 It indicates the hardware revision of the M402 CPU.
Sn 1045FGDD It indicates the control system serial number (cfr.§ 3.3.3 Setting The
System Code
).
Fw rev 1.6 It indicates the firmware revision of the M402 CPU.
dd: 01/01/05 Control system delivery date.
Man rev 1.3 It indicates the manual revision of the control system program.
3.8.10 Deletion Of a System Fault

Job No. Doc. No.

the second screen
Press 0 System Fault Deletion
confirm/cancel.
Besides being acknowledged as a normal fault, a system fault should also be manually deleted by the
operator. Before performing the action, it is recommended to access the List Menu and inform the technical
support of the existing fault.
From the System Menu press the 5 key to enable the deletion of the active fault event.
This action generates a level 2 warning event that is stored only if you enabled the history log (cf § 4.3
Warning Signals).
3.9 The Exclusions

Press Enter Modules Menu
In this section you can exclude the detection line of the CS 400 control system.
From the normal operation screen press the Prog key. You access the Module Menu page: The access is
granted only if all the enabled alarm and fault events have been acknowledged.
You can access the exclusion management through two different modes, based on the configuration change
rights:
• Read Only mode: access granted to user for system configuration reference only.
Read-Write Mode
In this mode you can change the detection line exclusions: From the Menu List press 1 and enter a level 1
password.
the Module Menu will appear. If the password is wrong, you will see an error message with an alphanumeric
code: press Esc to perform a new entry.
Pressing Esc you abort the access action. In the Read-Write mode, the event warning signals on the display
are inhibited, except for those related to the ACKNOWLEDGEMENT, SILENCING, RESET, and LAMP TEST
commands. An alarm or fault status during control system management does not imply the automatic exit
from the corresponding menus.
Read Only Mode

In this mode you cannot perform any detection line changes. All actions and keys related to operation
parameter changes are inhibited: you can only check the existing configuration. Should an alarm or fault
status occur in this mode, it does imply the automatic exit from the corresponding menus, and the event is
shown on the display.

Job No. Doc. No.
The Modules Menu is made up of many pages: The New Page symbol on the upper right angle indicates the
presence of a following page that can be accessed by pressing the → (Right) key. If this symbol is on the
bottom right angle it means that you can return to a previous page pressing the ← (Left) key.
The following modules are displayed on the first page:
The remaining modules are displayed on the second page:
Press Esc to return to the List Menu screen.

You can access the M405, M406, M407, M408 module exclusions by pressing the 6, 7 and 8 keys,
respectively. Use the ← (Left) and → (Right) keys to select the line; use the ↑ (Up) and ↓ (Down) key to
modify the exclusion (ENA/DIS).
Press Esc to return to the Module Menu.
WARNING: M406 module exclusions must be performed using a switch on the module front panel. The
display shows only the switch status. If a module cannot have any exclusions, the
corresponding keys are inhibited.
3.10 Changing The Access Codes

Press 4 Password Menu
Select the access code you wish Password of the selected level
to change
Enter the existing code and press
Enter
Enter 5 numeric characters for Password Setting
the new code
Press Enter/Esc to Password Menu
confirm/cancel.
From the Menu List press 4 to access the Password Menu screen. Select the access code you wish to change.
You are prompted to enter the existing code: If you enter the correct code, you’ll display a screen where you
can enter the new user code.
Enter 5 numeric characters for the new password. If you mistype the password, press the Canc key. Once the
entry is completed, press Enter. If the password is correct, a confirmation prompt will automatically be
displayed, otherwise (if the entered password is not made up of 5 characters) you will see an error message.
You can try to reenter the password.
After the password validation or the entry canceling, you return to the Menu List.
WARNING: If you changed one or more passwords, when you exit the Menu List, you’ll be asked to save
the parameters; in this way the new codes will be available for the next control system startup.

Job No. Doc. No.
3.11 Updating The Control System Program
This procedure allows you to update the system program running on the M402-CPU. Configure the control
system for the communication with the PC. You must configure only the serial port. Start the Win400Loader
utility (cf. Win400 manual) on the PC and follow the firmware download instructions.
The programming jumper to be inserted is on the M400RS board (serial connector card), as shown below.
WARNING: Please make sure that the programming jumper is removed at the end of the update procedure
(Win400Loader shows a message): otherwise the control system is restarted but the program
does not run. In this case you must remove the jumper and reset the CPU by using the
corresponding button of the Win400Loader window.

Job No. Doc. No.
4 Events
The CS 400 fire control system can handle a set of events originated by external modules and remote devices
in order to monitor the system, the alarm or fault signals, and the activation of fire suppression functions.
4.1 Normal Operation
When no system alarms or faults are present, the display shows the following message:
The first line displays the system name (Cf § 3.3.2 Setting The System Name
) and current time, while the second line shows the normal operation message and current date.
During normal operation, the M402 CPU central unit performs the following functions:
• Periodically polls the available module to check their status and verify if valid responses are
received.
• Checks the presence of the battery every 15 seconds.
• Manages the remote devices.
• Manages the operator panel.
• Runs the self-diagnostic procedure every 30 minutes, to verify the operation and integrity of memory
units.
In case of alarm and/or fault events, or in the event of a simple warning, the control system displays the
related message. Events can be displayed automatically or manually depending on the setting used during
system programming (Cf § 3.8.2 Configuring The Events
).
In automatic mode, all active events are displayed sequentially in 5 seconds intervals.
In manual mode, the last event (chronologically) is shown: the operator can scroll the list of all events by
pressing the ← (Left) and → (Right) keys.
The only exception to this rule are the warning events controlled by a timer and related to the
ACKNOWLEDGEMENT, SILENCING, RESET and LAMP TEST commands, which are actuated by buttons
located on the front panel of the control system; these events are always displayed automatically.
4.1 Alarm Signals
In case of alarm, the display lights up to display the detected event, while the system activates the prealarm
and/or general alarm relay, and the prealarm and/or alarm LEDs on the front panel of the M402 CPU start to
blink; also, the system activates the visual warning signals and outputs related to the modules which detected
the alarm. The buzzer starts to sound continuously. If logging is enabled (Cf § 3.8.2 Configuring The
Events
), the alarm is recorded in the event log.
During the ACKNOWLEDGEMENT, the blinking alarm and/or prealarm LEDs turn steady, while the buzzer
stops sounding. The event signal remains on the display until the RESET command is issued; this turns off
the display and the prealarm/alarm LEDs on the central unit and on the modules that detected the event,
disables the prealarm and/or general alarm relay, and turns off the outputs of the modules in alarm status.
WARNING: to activate the RESET command, run the ACKNOWLEDGEMENT command first: any
attempt to reset the alarm status will not be recognized and will be ignored by the central unit.
The alarm event signal remains until the RESET command is issued, even if the event is no
longer present.
Job No. Doc. No.
A typical alarm event signal may look as follows:
The left side shows the module or the line that detected the alarm.
The first line displays the alarm type, while the second shows the name associated to the module or line. The
acknowledgement of the shown alarm event appears in the top right corner.
By pressing Enter, you can access detailed information about the event (Cf § 4.6.1 Event Lists And
Information).
Alarm Message Module Description

DISCHARGE ACTIVATE M404 It indicates the activation of the discharge command and the
beginning of the time control which sets the solenoid valve
activation command.
DISCHARGE CMD-MANUAL M404 It indicates that the discharge command is active, although
SETTING temporarily interrupted because the module is operating manually.
To activate the discharge, change the module setting to AUT mode
or press the related buttons.
DISCHARGE SYSTEM M404 It indicates that the system high pressure switch was activated and
ACTIVATE the discharge has terminated.
PREALARM TESTING M406 It indicates that one crossed module line activated the alarm due to
the test.
ALARM TESTING M406 It indicates either that one single module line or both module lines
(crossed configuration) activated the alarm due to the test.
LINE PREALARM M406 It indicates that one crossed module line activated the alarm.
M407
LINE ALARM M406 It indicates that one single module line activated the alarm.
M407
4.2 Fault Signals
In case of failure, the display turns on to show the event, the general fault relay is activated, the fault led on
the front panel of the M402 CPU starts to blink, and the related visual warning signals and outputs of the
fault modules are activated. The buzzer starts to play intermittently. If archiving is enabled (Cf § 3.8.2
Configuring The Events
), the fault is recorded in the log.
During the acknowledgement, the blinking fault LEDs turn on and steady, while the buzzer silences. After
the acknowledgement, the fault signal remains on until the fault reason is removed: Once the problem is
solved, the control system returns to normal operation: the display turns off, and all fault signals are disabled
on the central unit and on the modules involved in the event.
WARNING: the RESET command has no influence on how the fault event is handled.
The following shows a typical fault signal:
The module or module line which detected the fault is displayed at left. The first line shows the type of fault,
while the second shows the name associated to the module or line.

Job No. Doc. No.
Information).
Fault Message Module Description

CHARGER UNDER VOLTAGE M401 It indicates a battery voltage too low, set to 22V. In this case, it
FAULT means that the batteries are not properly recharged. Execute the
acknowledgment; should the fault persist, verify batteries’
integrity: if batteries present any error, the high current absorption
activates the recharging circuit protection. Alternatively, replace
the main M401 module.
WARNING: if you work with a single rack control system, turn
off the control system before replacing it. Working with multiple
rack control systems, redundancy of power supply modules allows
replacing the control system during operation.
CHARGER OVER VOLTAGE M401 It indicates a battery voltage too high, with the risk of damaging
FAULT them. The level is set to 28.5V: in case of fault, the recharging
circuit is disabled. Execute the acknowledgment; should the fault
persist, replace the main M401 module.
UNDER VOLTAGE FAULT M401 It indicates that the stabilized voltage generated by the supply
module (either main or secondary) is below the security level, set
to 21V. Verify that no device is fed by stabilized voltage
(connected to terminals 5 and 6), thus generating a high current
absorption (3 Amps) and causing the activation of the protection
status for supply modules. Alternatively, replace the damaged
M401 module.
OVER VOLTAGE FAULT M401 It indicates that the stabilized voltage generated by the supply
module (either main or secondary) is above the security level, set
to 28V, with the risk of damaging the control system modules. The
damaged power supply unit is disconnected: if no other power
supply units are available, the batteries of the control system are
switched on. Execute the acknowledgment; should the fault persist,
replace the damaged M401 module.
rack control systems, redundancy of power supply allows
MISSING BATTERY FAULT M401 It indicates that the auxiliary power supplied by batteries is not
present due to absence, short circuit or inversion of connections.
Verify the connections of the batteries.
LOW PRESSURE FAULT M404 It indicates that the high pressure switch was activated due to
system low pressure. Verify the pressure of the system shut off
circuit.
L PRESS SWITCH AC FAULT M404 It indicates the failure of continuity in the low pressure switch line.
Verify the presence and value of the line termination resistor (18-

Job No. Doc. No.
22 KΩ); alternatively, check the continuity of the system line.

H PRESS SWITCH AC FAULT M404 It indicates the failure of continuity in the high pressure switch
line. Verify the presence and value of the line termination resistor
(18-22 KΩ); alternatively, check the continuity of the system line.
DISCHARGE CMD AC FAULT M404 It indicates the failure of continuity in the discharge command line.
Verify the presence and value of the line termination resistor (18-
22 KΩ); alternatively, check the continuity of the system line.
DISCHARGE CMD CC FAULT M404 It indicates a short circuit on the discharge command line. Verify
the presence and value of the line termination resistor (18-22 KΩ).
If the event occurs at the same time of the command, verify the
presence and value of the resistor connected in series to the
command device (47 KΩ); alternatively, verify the presence of
short circuits on the system line.
REMOTE DISCHARGE AC M404 It indicates the failure of continuity in the discharge command line
FAULT from remote button. Verify the presence and value of the line
termination resistor (18-22 KΩ); alternatively, check the continuity
of the system line.
REMOTE DISCHARGE CC FAULT M404 It indicates a short circuit on the discharge command line from
remote button. Verify the presence and value of the line
termination resistor (18-22 KΩ). If the event occurs at the same
time of the manual discharge command, verify the presence and
value of the resistor connected in series to the command button (47
KΩ); alternatively, verify the presence of short circuits on the
system line.
SOLENOID VALVE FAULT M404 It indicates the failure of continuity in the solenoid valve command
line. Verify the continuity of the system line.
OPTICAL ACOUST LINE FAULT M404 It indicates the failure of continuity in the opto-acoustic panels
line. Verify the continuity of the system line.
INHIBIT DISCHARGE AC FAULT M404 It indicates the failure of continuity in the discharge inhibition
command line. Verify the presence and value of the line
termination resistor (18-22 KΩ); alternatively, check the continuity
of the system line.
LINE FAULT M405 It indicates the failure of continuity in the module line, configured
to have control over polarity reversal or over current (Cf § 3.2.3.2
Configuring The M405 Module Line
). When a control over polarity reversal is used, check the presence
of a diode in parallel with the device and that its polarity is correct;
when a control over current is used, verify that the line resistance
does not exceed 22 KΩ. Verify also the correct setting of jumpers
on the module (Cf § 1.6.3 Basic Configuration). Alternatively,
check the continuity of the system line.
CC LINE FAULT M406 It indicates a short circuit on the sensor line. For the M406 and
M407 M407 modules, verify the presence and value of the line
termination resistor (47 KΩ). For the M408 modules, check the
M408
correct operation of the gas sensor. Alternatively, verify if there
are short circuits on the sensor line.
LINE AC FAULT M406 It indicates the failure of continuity on the sensor line. For the
M407 M406 and M407 modules, verify the presence and value of the line
termination resistor (47 KΩ). For the M408 modules, check the
M408
correct operation of the gas sensor. Alternatively, check the
continuity of the sensor line.

Job No. Doc. No.
FAULT M407 It indicates the detection of an alarm level on the line, managed as
a failure (Cf § 3.2.5.2 Configuring The M407 Module Line
).
COMMUNICATION ERROR M40x It indicates that the unit cannot communicate with the module
shown, for example because it has been removed from the control
system. In case of removal and reinsertion of the module, the
failure signal is disabled upon acknowledgment. In case of
permanent removal of the module, run the self-configuration of the
control system (Cf § 3.6 Updating The System
) to eliminate the fault.
ID MODULE NOT VALID M40x It indicates that there are two or more modules of the same type
with identical IDs. In case of conflicting IDs, the modules involved
are excluded from the control system and are not operative (all
fault LEDs blink, outputs are disabled). Check that the module
addressing is unique and detect the fault.
LOADED SETTING NOT VALID M402 .
CPU
FLASH MEMORY ERROR M402 It indicates an error writing the programming in the flash memory.
CPU Try to save programming several times. Should the problem
persist, replace the M402 CPU.
CPU OVERTIME M402 It indicates that the processor was not able to process all program
CPU information within the given time. Access the event lists and report
detailed information about the event to the Service Center (Cf §
4.6.1 Event Lists And Information). To remove the fault, reset
the control system.
LOG NOT VALID M402 It indicates that during the start up the central unit loaded an event
CPU log with invalid or corrupted data. In this case, the central unit
loads a backup copy (the last event log saved) to avoid losing the
event history. Verify that the problem does not repeat by doing
multiple resets of the central unit, to make sure that during each
reset the central unit must not bear heavy loads from connected
devices. Should the problem persist, contact the Service Center.
LOG DISABLED M402 It indicates that the operator decided to disable the event log (Cf §
CPU 3.8.2 Configuring The Events
).
SYSTEM CLOCK ERROR M402 It indicates an error on the central unit while date and time update.
CPU Should the problem persist, replace the central unit.
NO MODULE DETECTED M402 It indicates that during the start up the central unit was not able to
CPU communicate with the control system modules. Run the self-
programming routine (Cf § 3.6 Updating The System
). Should the problem persist, replace the central unit or contact the
Service Center.
LOADED LOGICS NOT VALID M402 It indicates that during the start up the central unit loaded an
CPU invalid or corrupted logic data. Logic reprogramming is requested.
Then, save the programming
M402 COMMAND ERROR M402 It indicates that one or more modules did not interpret the general
CPU commands coming from the M402 module correctly (for example,
general settings for alarms inhibition during tests, setting of the
discharge mode, etc.). Run the self-programming routine (Cf § 3.6
Updating The System
).

Job No. Doc. No.
SYSTEM INTEGRITY ERROR M402 For a detailed description of this fault, the operator should read the
CPU § 4.4 System Fault. It indicates the presence of 5 active system
faults. The fault is recorded in the log and persists even after the
acknowledgment, forcing the operator to reset the central unit to
eliminate the problem (Cf § 3.7 Resetting The Control System
).
WARNING: we suggest to periodically verify the list of logged
faults, especially after a system fault event, and to report detailed
information about the event to the Service Center.
PARAMS NOT VALID M402 It indicates that during self-test or start up the central unit loaded
CPU an invalid or corrupted parameter setup. After start up, the central
unit runs the initialization procedure (described at § 2.10 Startup
Actions) to create a valid configuration. Since each module is set
up with default parameters (defined by dip-switches), you need to
reconfigure them and reprogram the central unit. Then, save the
programming. For a detailed description of this fault, the operator
should read the § 4.4 System Fault.
LOGICS NOT VALID M402 It indicates that during self-test or start up the central unit loaded
CPU an invalid or corrupted data configuration. After start up, the
central unit runs the initialization procedure (described at § 2.10
Startup Actions) to create a valid configuration. Since each
module is set up with default parameters (defined by dip-switches),
you need to reconfigure them and reprogram the corresponding
logic. Then, save the programming. For a detailed description of
this fault, the operator should read the § 4.4 System Fault.
PLC RULES NOT VALID M402 It indicates that during self-test or start up the central unit loaded
CPU an invalid or corrupted plc data configuration. You need to update
plc data from Win400.
PROG NOT VALID AT RESTART M402 For a detailed description of this fault, the operator should read the
CPU § 4.4 System Fault. It indicates that the control system program in
the retentive memory is corrupted, and is therefore no longer
available after turning off the control system. Run the procedure to
update the control system program.
ERROR BOOT PROGRAM: M402 Control system start up failure. The central unit was not able to
SYSTEM DISABLED CPU load a valid program to run; therefore, the system will be locked
until the operator runs an update of the control system program (Cf
§ 3.11 Updating The Control System Program
).
4.3 Warning Signals
Warning signals are the events related to a status change in the control system and operator commands: these
signals are visual, without any output activation run by the control system (with the exception of the main
supply failure signal) not specifically implemented by CBE logic.
We can recognize 4 signal typologies, each related to event persistence and to the command used to cancel it.
1st Level Warning: the warning persists until the acknowledgement is received, even if the cause of the
event has been removed (similar to faults management).
1st Level Warning Module Description

BATTERY LOW VOLTAGE M401 It indicates a battery voltage too low, set to 22V. Usually, this

Job No. Doc. No.
event occurs during periodic test of batteries if they are no longer

working properly.
2nd Level Warning: the warning persists until the event cause is removed, regardless of the
ACKNOWLEDGEMENT command. Also, if event logging is enabled, some 2nd level events are not
displayed, but only archived.
2nd Level Warning Module Description

MAIN SUPPLY FAILURE M401 It indicates that the main supply is missing and that the system is
operating with batteries.
MAIN SUPPLY RESTORE M401 It indicates the return of main supply and the switching from
batteries to main supply.
WARNING: if event logging is enabled, the message is only
archived without being displayed.
BATTERY RESTORE M401 It indicates that the use of batteries has been restored after the fault
signal.
BATTERY TEST M401 It indicates the manual/automatic activation of the battery test.
This message is never archived, even when event logging is
enabled.
DISCHARGE INHIBIT M404 It indicates that discharge inhibition has been set from remote
selector. The discharge command will not activate the time control
over the solenoid valve command.
DISCHARGE RESTORE M404 It indicates that the discharge function has been reactivated. The
discharge command will be able to activate the time control over
the solenoid valve command.
LINE ENABLE M405 It indicates the activation of the module line shown. For the M407
M407 module, the message indicates the detection of an alarm level on
the line, managed as a simple warning. For the M405 and M409
M409
modules, the message is displayed only if enabled in the
configuration settings (Cf § 3.2.3.2 Configuring The M405
Module Line
).
LINE RESTORE M406 It indicates that the module line shown is now working, and
M407 therefore it is able to manage the detection of alarms and faults.
M408 WARNING: if event logging is enabled, the message is only
AUTO DISCHARGE SET M402 It indicates that the central unit, based on the terminal #7 input,
CPU sets the general discharge activation command on automatic. The
discharge command from the M406 modules and/or programming
will activate the time control over the solenoid valve activation,
regardless of the setting of the AUT/MAN selector on the front
panel of the M404 module.
MANUAL DISCHARGE SET M402 It indicates that the central unit, based on the terminal #7 input,

Job No. Doc. No.
CPU sets the general discharge activation command on manual. The

discharge command from the M406 modules and/or programming
will activate the time control over the solenoid valve activation
depending on the setting of the AUT/MAN selector on the front
panel of the M404 module.
CPU RESTART M402 It indicates that a central unit restart command has been executed
CPU (Cf § 3.7 Resetting The Control System
). If event logging is enabled, the message is only archived without
being displayed when the display shows the following indication:
“System reset in progress...”.
SHUT DOWN IN PROGRESS M402 It indicates that the control system is shutting down. During this
CPU phase, the central unit starts a data backup procedure for the next
start up.
BATTERY RECOVERY M402 During the data backup procedure at shut down, the central unit
CPU detected the return of voltage due to battery use. The restoration of
backup data starts. This event can occur in case of main supply
faults when the control system must bear a heavy workload from
connected devices.
SETTINGS SAVE M402 It indicates that a central unit programming save command has
CPU been executed (Cf § 3.5 Saving The Programming
“Save in progress...”.
SELF-CONFIGURATION M402 It indicates that the control system self-configuration has been
CPU executed (Cf § 3.6 Updating The System
“Self-configuration in progress...”.
SYSTEM SELF-CHECK M402 It indicates that the central unit integrity and operation control
CPU procedure has been executed (Cf § 4.4 System Fault). The
message is not archived even if event logging is enabled.
PRINTER IN PAUSE M402 It indicates that the printer was turned off or paused (for example,
CPU out of paper) while printing.
PREALR THRESHOLD M408 When the prealarm event is configured to be managed as a simple
OVERFLOW warning (Cf § 3.2.6.2 Configuring The M408 Module
), it indicates that the preset threshold was exceeded.
ALR THRESHOLD OVERFLOW M408 When the alarm event is configured to be managed as a simple
warning (Cf § 3.2.6.2 Configuring The M408 Module
), it indicates that the preset threshold was exceeded.
SYSTEM PROGRAMMING M402 It indicates that the system program update procedure has been
CPU executed on the M402 CPU (Cf § 3.11 Updating The Control
System Program
).

Job No. Doc. No.
FLASH DELETE M402 It indicates that the flash memory data deletion command has been
CPU executed (Cf § 3.7 Resetting The Control System
). The control system keeps working using the currently loaded
parameters: if data are not saved before the next shut off, at
subsequent start up the control system will use the default
configuration data (Cf § 2.10 Startup Actions).
EVENT LOG DELETE M402 It indicates that the logged events deletion command has been
CPU executed (Cf § 3.8.6 Deleting The Event Log
).
SYSTEM FAULT DELETE M402 It indicates that the system faults deletion command has been
CPU executed (Cf §
3.8.10 Deletion Of a System Fault).
3rd Level Warning: the warning terminates upon acknowledgement or once the event cause is removed.
3rd Level Warning Module Description

LINE DISABLING M406 It indicates that the module line shown is now out of service, and
M407 therefore it is not able to manage the detection of alarms and
faults.
M408
TEST IN PROGRESS M406 It indicates the activation of the sensor line test.
MANUAL DISCHARGE MODE M404 It indicates that the AUT/MAN selector of the module is now set
in the MAN position. Discharge will be activated only by a manual
command.
4th Level Warning: higher priority, time controlled warning related to the ACKNOWLEDGEMENT,
SILENCING, RESET, LAMP TEST commands and to remote operating and configuration commands by the
Windows Win 400 program.
4th Level Warning Module Description

EVENTS ACKNOWLEDGEMENT M402 It indicates that an event ACKNOWLEDGEMENT command has
CPU been executed either pressing the button on the front panel of the
REMOTE ACKNOWLEDGEMENT
M402 CPU or from remote by running a configuration and
monitoring program under Win 400.
ALARMS RESET M402 It indicates that an event RESET command has been executed
CPU either pressing the button on the front panel of the M402 CPU or
REMOTE RESET
from remote by running a configuration and monitoring program
under Win 400.
SILENCE SOUNDERS M402 It indicates that a SILENCE SOUNDERS command has been
CPU executed either pressing the button on the front panel of the control
REMOTE SOUNDERS SILENCE
system or from remote by running a configuration and monitoring
program under Win 400.
LED ON STATUS TEST M402 It indicates that a LAMP TEST command has been executed for
CPU all control system modules by pressing the button on the front
Job No. Doc. No.
panel of the M402 CPU.

REMOTE PARAMETERS SAVE M402 It indicates that a central unit programming save command has
CPU been executed from remote by running a configuration and
monitoring program under Win 400.
REMOTE EVENT LOG DELETE M402 It indicates that a logged events deletion command has been
CPU executed from remote by running a configuration and monitoring
REMOTE FLASH DELETE M402 It indicates that a flash memory data deletion command has been
program under Win 400. The control system keeps working using
the currently loaded parameters: if data are not saved before the
next shut off, at subsequent start up the control system will use the
default configuration data (Cf § 2.10 Startup Actions).
REMOTE SYS FAULT DELETE M402 It indicates that a system faults deletion command has been
REMOTE CPU RESTART M402 It indicates that a central unit restart command has been executed
CPU from remote by running a configuration and monitoring program
under Win 400.
REMOTE SELF- M402 It indicates that the control system self-configuration has been
CONFIGURATION CPU executed (Cf § 3.6 Updating The System
) from remote by running a configuration and monitoring program
under Win 400.
ZERO CALIBRATION M408 It indicates that the gas sensor zero self-calibration procedure has
REMOTE ZERO CALIBRATION been started (Cf § 3.2.6.3 Zero Self-Calibration). This command
can be run either from the control system keyboard or from remote
by running a configuration and monitoring program under Win
400.
CALIBRATION RESET M408 It indicates that the gas sensor zero calibration reset procedure has
been started (Cf § 3.2.6.3 Zero Self-Calibration). This command
REMOTE CALIBRATION RESET
can be run either from the control system keyboard or from remote
by running a configuration and monitoring program under Win
400.
The display remains lit until any warning is displayed: for level 1, 2 and 3 warnings; also, the buzzer keeps
sounding for 15 seconds each minute, until the acknowledgment is received.
Information).
4.4 System Fault
The M402 CPU continuously checks the operating status of the control system modules, and runs (every 30
minutes) a self-diagnostic procedure on the available hardware devices, to verify that they are operating
correctly and to ensure the integrity of data and running program. During this phase, the following warning is
displayed:
The self-diagnostic event is not recorded in the event log.

If any problem is detected during this phase, the event may be handled in two different ways, depending on
the type of fault:
Job No. Doc. No.
• Dynamic fault
• Static fault
A dynamic fault occurs when the system detects an error running a program, or if there are damaged
execution data.
A static fault occurs when the system detects an error due to damaged retentive data, or a problem with the
flash memory data loaded during the control system start up.
If the error is a “dynamic fault”, the M402 CPU runs an automatic reset in order to restore the correct content
of system memory or to restore the running program. During the reset, the activation and warning status of
the available modules is not modified, and the level of power supply to connected devices is maintained.
This category consists of the following types of fault:

Job No. Doc. No.
Fault Description
Code
1 Execution data corruption
2 Central system parameters corruption
3 Programmed logic corruption
4 Running program code corruption
5 Interrupted communications with modules (watchdog polling)
6 Interrupted main program execution (watchdog main)
7 Internal processor error on M402 CPU (stack overflow)
8 Internal processor error on M402 CPU (stack underflow)
9 Illegal memory access on M402 CPU (access fault)
During the restart, the event is recorded in the fault list, and the “disabled” status is set. The fault is recorded
in the log, and a SYSTEM INTEGRITY ERROR is reported; this condition persists even after the
acknowledgment, forcing the operator to reset the central unit to eliminate it (Cf §
3.8.10 Deletion Of a System Fault).
If the error is a “static fault”, a system fault is generated, indicating which procedure to run in order to
eliminate it. This category consists of the following types of fault:
Fault Message Description Fault Removal Procedure

NO LOGIC AT Logic retentive data Execute the self-configuration (Cf § 3.6 Updating The
RESTART corruption. System
), verify the configurations and save (Cf § 3.5 Saving
The Programming
).
NO PARAM AT Configuration retentive data Access the Programming/Managing Menu and save
RESTART corruption. the configuration (Cf § 3.5 Saving The Programming
).
PROG NOT Program code in retentive Start the procedure to update the control system
VALID AT memory corruption program.
RESTART
WARNING: we suggest to periodically check the list of logged faults (Cf § 4.6.3 System Fault Lists),
especially after a system fault event, and to report detailed information about the event to the
Service Center.
4.5 Printing Events

Press 2 Print Menu
Press 1 Events to print filter
change the field. Enter to print,
Esc to cancel.

Job No. Doc. No.
The CS 400 fire control system is designed to send the operating status to remote printing devices or to print
internally (“Status Print” mode): a print command is issued every time the normal status changes, for
example due to an alarm, fault, command and outputs activation, allowing to save detailed information about
the event on paper.
To enable the “Print Status” mode, press the List and 2 keys to access the Print Menu.
From the Print Menu, press 1 to activate the “Status Print” mode.
Then, you must enter a filter to apply to the printable events; the following table lists the filter values:

Filter NUL / A / F / AF It sets the filter to apply to printed events.
/ W / AW / FW / A = alarms and prealarms only
AFW F = faults only
AF = alarms and faults
W = warnings only
AW = alarms and warnings
FW = faults and warnings
AFW = all events
WARNING: entering the NUL value in the field, the printer enters the
“Waiting to Print” mode, does not record the current control system
events, and waits for other printing commands (for example, archive or
programming printing).
During the activation of the “Status Print” mode, the system prints a 40 column report with an header and
the list of active events, updated as new events occur. The report header contains the system name and serial
number, the type of recorded events and the activation date/time of the “Status Print” mode. Each event is
reported in a separate section containing the following information: event name, module or generating line
name, detailed event information (Cf § 4.6.1 Event Lists And Information).
The “Status Print” mode is disabled when:
• ).
• You enable the “Waiting to Print” mode (by entering the NUL value in the “Filter” field).
4.6 Accessing The Event Log
The CS 400 fire control system can store up to 128 events, provided the archive is enabled in the system
configuration (Cf § 3.8.2 Configuring The Events
). The event log can be accessed for normal operations, as well as for alarm or fault events previously
detected.
To access the List Menu, press the List button. The display shows the following options:
Press Esc to exit the List Menu and return to the normal operation screen.
WARNING: in case of an event warning while the lists are displayed, the system automatically exits from
event log and displays the event; when this happens, the warnings related to the
ACKNOWLEDGEMENT, SILENCING, RESET and LAMP TEST commands are displayed.
4.6.1 Event Lists And Information

Job No. Doc. No.

Press 1 Access event lists
move to the field. Events to display filter
change the field.
From “List Menu”, press 1 to access the list of logged events. You need to enter a “time filter” to apply
during the event display, in order to select the event type to search and the start and end dates of the desired
period. To display all the events in the log, do not modify the field and press Enter.
Event filter:
Filter A / F / AF / W / It sets the filter to apply to the events displayed.
AW / FW / AFW A = alarms only
F = faults only
W = warnings only
AFW = all events
From: 01/01/05 It sets the start date of the logged events displayed.
To: 30/03/05 It sets the end date of the logged events displayed. By default, the
current date is entered.
If no events meet the parameters specified, the system shows an empty list message for a few seconds, then
returns to the List Menu. If logged events are present, the last recorded event is displayed.
The screen shows the alarm type and the name of the module or line that detected it. The archive date and
event position within the log are visible in the top right corner. Use the ← (Left) and → (Right) keys to
scroll the list to display respectively older or newer events.
Press Enter to access detailed information about the selected event. The following information appear for
about 10 seconds:
Press Esc to return to the List Menu.
Event Information:
(indicative)
Mod 408 Type of module that detected the event.
Line 1 Line of module that generated the event.
Date 01/01/05 Date of the event.
ID of 01 ID of the module that detected the event. For events associated to the
M402 CPU, the field shows the following:
0 = system event
1 = module command event
2 = module command actuation error

Job No. Doc. No.
3 = memory data integrity error

Type of Alr (%): Type of event: PRE (prealarm), ALR (alarm), FLT (fault), (WRN)
warning
Time 10:48 Time of the event
4.6.2 Printing A Log

Press 2 Print Menu
Press 2 Log events to print filter
move to the field.
change the field. Enter to print,
Esc to cancel.
From the List Menu, press 2 to access the archive print command (“Archive Print” mode): Access is allowed
only after the printer has been enabled. You need to enter a “filter” to apply to the printed events, in order to
select the event type and the start and end dates of the period that comprises it. To print all the events in the
log, do not modify the fields.

Filter A / F / AF / W / Sets the filter to apply to the printed events.
AW / FW / AFW A = alarms only
F = faults only
W = warnings only
AFW = all events
From: 01/01/05 Sets the start date of the printed logged events.
To: 30/03/05 It sets the end date of the printed logged events. By default, the current
date is entered.
Press Enter to start printing. The report is made up of 40 columns with an header and a list of archived
events. The report header contains the system name and serial number, the type of printed events along with
their logging time interval, and the current date and time of the print command. Each event is reported in a
separate section containing the following information: event name, module or generating line name, detailed
event information (Cf § 4.6.1 Event Lists And Information).
At the end of the printing operation, the control system waits for new printing commands (“Waiting to Print”
mode).
The “Archive Print” mode is disabled when:
• ).
WARNING: the archive print command interrupts printing the control system status (“Status Print” mode).

Job No. Doc. No.
4.6.3 System Fault Lists

Press 3 Last fault info
← (Left) and → (Right) ---
keys to scroll the events.
This section allows to verify any malfunctions of the M402 CPU (code or data memory corruption, program
execution errors, memory access errors, Cf § 4.4 System Fault).
From “List Menu”, press 5 to access the list of logged faults. If no archived event is present, the system
shows an empty list message for a few seconds, then returns to the List Menu. In case of a fault event, the
screen shows the following information:
Fault Information:
(indicative)
Code 1 Type of fault detected.
1 = memory data corruption.
2 = executable code for CBE logic corruption.
3 = program code corruption.
4 = interrupted communications with modules (watchdog polling)
5 = interrupted main program execution (watchdog main)
6 = internal processor error (stack overflow).
7 = internal processor error (stack underflow).
8 = illegal memory access (access fault)
9 = parameters corruption in retentive memory (static fault)
10= logic corruption in retentive memory (static fault)
10= program corruption in retentive memory (static fault)
Act Yes/No It indicates if the fault is active/inactive, that is if there is a system fault
not yet removed.
Date 01/01/05 Date of the event.
Addr 0x023452 Memory address of the fault.
Idx 2 Event position within the fault list.
Rev 1.0 It indicates the firmware revision currently run on the CS 400 control
system.
Use the ← (Left) and → (Right) keys to scroll the fault list. The list is circularly updated, that is new events
overwrite older ones.
Press Esc to return to the List Menu.

Job No. Doc. No.
5 Programming The Event Logic

Programming the event logic is based on the CONTROL-BY-EVENT (CBE) logic, that is, the activation control
depends on the events.
The CS 400 fire control system can manage a series of events (faults, alarms, prealarms) and statuses (test,
line disabling, warning signals, input activation), either coming from remote devices or from the control
system modules. Programming is achieved by linking an event set (OPERANDS) with logical operators
(OPERATORS), and by associating the obtained equation with output activation or discharge commands.
With the CBE logic, programming the CS 400 control system is intuitive and easily accessible.
5.1 Translating An Event Into A Logic Symbol
During the creation of the logic equations, each single event is uniquely defined in symbolic mode using the
following format:
Type of ID of Type of event Event

module module generator
Type of module: identifies the type of module that generated the event
A = power supply unit (M401 module)
C = central unit (M402 CPU)
S = discharge (M404 module)
O = relay-controlled outputs (M405 module)
D = 2 lines detection (M406 module)
R = 6 lines detection (M407 module)
G = gas detection (M408 module)
P = relay outputs (M409 module)
ID of module: it identifies the module code (set by dip-switches on the module itself)
The identifier for the M402 CPU is always 01.
Type of event: it identifies the possible event type
P = prealarm
A = alarm
G = fault
W = warning
T = test activation
F = disabling
Event generator: it identifies the element that generated the event
Numeric in case of line
Letter in case of device
For example: S02GE = solenoid valve fault in discharge module with ID 02
Other module-generated events use the following syntax for their symbolic format:
Type of ID of Type of event G

module module
Type of event: it identifies the possible event type

A = alarm
G = fault
G: it identifies a general event type
For example: S02GG = general fault on discharge module with ID 02
Job No. Doc. No.
5.1.1 Symbolic Events On M401
The following list shows the events coming from the M401 modules in symbolic format:
(Module type = A)
GC Battery charger fault
GA Power supply unit fault
GB Missing battery fault
WB Low battery warning
WR Main supply failure warning
GG General fault
5.1.2 Symbolic Events On M402 CPU
The following list shows the events coming from the M402 CPU in symbolic format:
(Module type = C)
GG General fault
PG General prealarm
AG General alarm
(Module type = S)
GB Low pressure or AC fault
GP Pressure switch AC fault
GS AC or CC discharge fault
GR AC or CC remote discharge button fault
WM Manual discharge set
GE Solenoid valve fault
GO Opto-acoustic fault
WI Discharge inhibit
GI Inhibit discharge AC fault
AS Discharge command alarm (time control start for solenoid valve activation)
AE Solenoid valve activation alarm
AP High pressure switch alarm
AG General alarm
GG General fault
(Module type = O)
G1 Line 1 fault
G2 Line 2 fault
G3 Line 3 fault
G4 Line 4 fault
G5 Line 5 fault
G6 Line 6 fault
Job No. Doc. No.
A1 Line 1 activation
AG General activation (at least one line activate)
GG General fault (at least one line in fault state)
(Module type = D)
A1 Line 1 alarm
G1 AC or CC line 1 fault
T1 Line 1 in test
F1 Line 1 out of service
A2 Line 2 alarm
T2 Line 2 in test
AG General alarm
GG General fault
(Module type = R)
A1 Line 1 alarm (or fault/warning, depending on the line configuration)
AG General alarm
GG General fault
P1 Line 1 prealarm (only for single lines)
Job No. Doc. No.

PG General prealarm
(Module type = G)
P1 Gas line prealarm
A1 Gas line alarm
G1 Gas line short circuit fault
F1 Gas line out of service
WP Prealarm threshold exceeded (if handled as a warning)
WA Alarm threshold exceeded (if handled as a warning)
AG General alarm (alarm or prealarm)
(Module type = P)
5.2 Operators And Syntax
The syntax for logic programming follows strict rules that you need to respect in order to avoid errors during
processing by the control system (error codes and their explanations are listed in the Appendix).
A CBE equation is composed by logical operators binding single or general events (logic operands) in
order to create the desired control.
Basic rules to comply with are as follows:
• Each logic can contain up to 8 operators.
• The maximum length of each logic is 95 characters.
• The number of open parenthesis must be equal to the number of closed ones.
• You can encode up to 511 different logics.
5.2.1 The NULL Operator
Syntax: OP
It executes the operand. The logical level returned by the operator corresponds to the operand’s level.
For example: D01A1
The equation is true when line 1 of the M406 module with ID 01 is in alarm status.

Job No. Doc. No.
5.2.2 The OR Operator
Syntax: OP1+OP2
It executes the logic operator OR between two operands. The operator returns the logic value true if at
least one operand is true.
For example: D01A1 + D01A2
The equation is true when lines 1 or 2 of the M406 module with ID 01 are in alarm status.
The operand can be a complex condition (generated by other operators): in this case, it must be enclosed in
parenthesis.
For example: D01A1+(D01A2*D02A1….)
The equation is true when line 1 of the M406 module with ID 01 is in alarm status, or the condition in
parenthesis is true.
5.2.3 The AND Operator
Syntax: OP1*OP2
It executes the logic operator AND between two operands. The operator returns the logic value true if
both operands are true.
For example: D01A1*D01A2
The equation is true when both lines of the M406 module with ID 01 are in alarm status.
parenthesis.
For example: D01A1*(D01A2+D02A1….)
The equation is true when line 1 of the M406 module with ID 01 is in alarm status, and the condition in
parenthesis is true.
5.2.4 The NOT Operator
Syntax: !OP
It executes the negation of the operand. The operator returns a logic value opposite to the operand.
For example: !D01A1
The equation is true when line 1 of the M406 module with ID 01 is not in alarm status.
parenthesis.
For example: !(D01A1+D01A2*….)
The equation is true when the condition in parenthesis is false.
It can be inserted in an equation along with other operators.
For example: A01WB*A01GB+!D01A1
5.2.5 The LATCH Operator
Syntax: lOP
It executes the latch of the operand. The logic becomes true on the operand’s leading edge and remains
true until a RESET command is run, regardless of the operand’s status.
For example: lD01G1

Job No. Doc. No.
The logic is activated upon the fault warning for line 1 of the M406 module with ID 01, and remains active
until the reset, even if an acknowledgment cancels the fault status.
parenthesis.
For example: l(D01A1+D01A2*….)
For example: A01WB*A01GB+lD01A1
5.2.6 The DELAY Operator
Syntax: d(hh.mm.ss OP)
It delays the activation of a logic. Before the operator returns the logic value true, the system waits hh hours,
mm minutes and ss seconds from the moment the condition enters the true status. The operator remains true
until the condition is true.
For example: d(00.00.10 D01A1)
From the moment the line 1 of the M406 module with ID 01 goes in alarm status, the system waits 10
seconds before the equation becomes true, and it remains in this logic status until the line is in alarm status.
parenthesis.
For example: d(00.00.10(D01A1+D01A2*….))
For example: A01WB*A01GB+d(00.00.00 D01A1)
5.2.7 The ELAP Operator
Syntax: e(hh.mm.ss OP)
Activation for a predefined time. The logic activates on the variation edge of the condition, then remains
active for hh hours, mm minutes and ss seconds, even if during this time the condition returns to false status.
At the end of the timing, the condition must return false in order to be able to restart the logic.
For example: e(00.00.10 D01A1)
The equation becomes true when line 1 of the M406 module with ID 01 goes in alarm status, and remains
true for 10 seconds before becoming false, regardless of the line status.
parenthesis.
For example: e(00.00.10(D01A1+D01A2*….))
For example: A01WB*A01GB+e(00.00.00 D01A1)
5.2.8 The CAL Operator
Syntax: c(dd/mm 00.00 dd/mm 00.00)

c(dow 00.00 dow 00.00)
c(dd/mm 00.00 dow 00.00)
It executes the activation on the specified date (dd/mm field) and time (00.00 field)
then deactivates on the specified date (dd/mm field) and time (00.00 field).
The date field can be replaced with the week day (dow field).
The first two fields indicate the beginning of the activation, while the second pair indicates the end
Job No. Doc. No.
Dow is the day in symbolic format (SU MO TU WE TH FR SA).

You can also enter a list of days using the following format:
dow1.dow2.dow3... for example, (SU.WE.FR)
For example: c(12.01 07.50 14.01 18.00)
The equation becomes true on Jan. 12 at 7.50 a.m., then turns false on Jan. 14 at 6.00 p.m.
For example: c(SU 07.50 WE 18.00)
The equation becomes true every Sunday at 7.50 a.m., and turns false on the following Wednesday at 6.00
p.m.
For example: A01WB*A01GB+ c(SU 07.50 WE 18.00)
5.2.9 The CMD ACK Operator
Syntax: aOP
It executes the ACKNOWLEDGEMENT command. When the operand changes from false to true, the
system generates an ACKNOWLEDGEMENT command.
For example: aD01A1
The ACKNOWLEDGEMENT command is executed when line 1 of the M406 module with ID 01 goes in
alarm status.
parenthesis.
For example: a(D01A1+D01A2*….)
The value returned by the operator is the logic value of its operand.
For example: A01WB*A01GB+aD01A1
5.2.10 The CMD TAC Operator
Syntax: tOP
It executes the SILENCING command. When the operand changes from false to true, the system generates
a SILENCING command.
For example: tD01A1
The SILENCING command is executed when line 1 of the M406 module with ID 01 goes in alarm status.
parenthesis.
For example: t(D01A1+D01A2*….)
For example: A01WB*A01GB+tD01A1
5.2.11 The CMD RST Operator
Syntax: rOP
It executes the RESET command. When the operand changes from false to true, the system generates a
RESET command.
For example: rD01A1
The RESET command is executed when line 1 of the M406 module with ID 01 goes in alarm status.

Job No. Doc. No.
parenthesis.
For example: r(D01A1+D01A2*….)
For example: A01WB*A01GB+rD01A1
5.2.12 The SWITCH_ACK Operator
Syntax: v(00.00.00)
It executes the time controlled activation of the ACKNOWLEDGEMENT command. The logic
activates for the predefined time each time an ACKNOWLEDGEMENT command is generated. Any
ACKNOWLEDGEMENT commands run during the activation are ignored by the logic.
For example: v(00.00.10)
When the ACKNOWLEDGEMENT command is run, the logic becomes true for 10 seconds.
For example: A01WB*A01GB+ v(00.00.10)
5.2.13 The SWITCH_TAC Operator
Syntax: w(00.00.00)
It executes the time controlled activation of the SILENCING command. The logic activates for the
predefined time each time a SILENCING command is generated. Any SILENCING commands run during
the activation are ignored by the logic.
For example: w(00.00.10)
When the SILENCING command is run, the logic becomes true for 10 seconds.
For example: A01WB*A01GB+ w(00.00.10)
5.2.14 The SWITCH_RST Operator
Syntax: z(00.00.00)
It executes the time controlled activation of the RESET command. The logic activates for the predefined
time each time a RESET command is generated. Any RESET commands run during the activation are
ignored by the logic.
For example: z(00.00.10)
When the RESET command is run, the logic becomes true for 10 seconds.
For example: A01WB*A01GB+ z(00.00.10)
5.2.15 The NULL_ACK Operator
Syntax: pOP
Cancels the logic when the ACKNOWLEDGEMENT command is run. The logic is canceled each time
an ACKNOWLEDGEMENT command is generated, even if its condition is true.

Job No. Doc. No.
For example: pD01A1

The equation is true when line 1 of the M406 module with ID 01 is in alarm status. When the
ACKNOWLEDGEMENT command is run, the logic becomes false (although its condition remains true).
parenthesis.
For example: p(D01A1+D01A2*….)
For example: A01WB*A01GB+pD01A1
5.2.16 The NULL_TAC Operator
Syntax: qOP
It cancels the logic when the SILENCING command is run. The logic is canceled each time a
SILENCING command is generated, even if its condition is true.
For example: qD01A1
The equation is true when line 1 of the M406 module with ID 01 is in alarm status. When the SILENCING
command is run, the logic becomes false (although its condition remains true).
parenthesis.
For example: q(D01A1+D01A2*….)
For example: A01WB*A01GB+qD01A1
5.2.17 The NULL_RST Operator
Syntax: oOP
Cancels the logic when the RESET command is run. The logic is canceled each time a RESET command
is generated, even if its condition is true.
For example: oD01F1
The equation is true when line 1 of the M406 module with ID 01 is excluded. When the RESET command is
run, the logic becomes false (although its condition remains true).
parenthesis.
For example: o(D01A1+D01A2*….)
For example: A01WB*A01GB+oD01F1
5.2.18 The XGROUP Operator
Syntax: xn(list) where list: OP1/OP2/OP3…and n =1…9.
It executes the activation after a predefined number of conditions. The logic is activated when at least n
conditions of the listspecified are true.
For example: x2(R01A1/R04A3/R05A4)
The equation is true when at least 2 lines of list are in prealarm/alarm status.
For example: x2(R01GG))
The equation is true when at least a total of 2 lines of the M407 module with ID 01 are in fault status.
For example: A01WB*A01GB+x3(R01A1/R04A3/R05A4)
Job No. Doc. No.
5.2.19 The TEST LED Operator
Syntax: y.
It executes the activation during test led command.

For example : y
The equation is true when test led command is executed.
For example : y +(A01WB*A01GB)
5.3 System Logics
System logics can be called from within the module logics.

They are useful when an equation associated to a module is very complex: in this case, it can be broken into
several smaller system equations, called from within the equation, to simplify programming.
Another similar example occurs when more equations share a common part: in this case, you can program a
logic that executes the common part and is called in several different equations, without having to write them
fully.
System logic follow the same syntax rules discussed in previous paragraph, and can be called from within an
equation using the following syntax:
For example: A01WB*L03
The equation calls the system logic with index 03, previously programmed for the purpose. If the equation 03
was not programmed, its insertion generates a syntax error.
The system allows 63 different logics, with indexes from 01 to 63.
5.4 Logical Errors
The following table shows the error codes which can occur programming the CBE logics.
Syntax error: caused by errors in the equation’s form. Verify again the logic syntax looking at the cursor
blinking over the error.
Symbolic ID Code Description

INVALID_OPEN_PAR 1 Parenthesis ‘(‘ in a wrong position
INVALID_CLOSE_PAR 2 Parenthesis ‘)‘ in a wrong position
INVALID_SYMBOL 3 Operand in a wrong position
INVALID_N_ACK_OPER 4 Operator NOT/LATCH/ ACK/TAC/RST/NULL_ACK/
NULL_TAC/NULL_RST in a wrong position
INVALID_LOG_OPER 5 Operator AND/OR in a wrong position
INVALID_TMR_OPER 6 Operator ELAP/DELAY/CAL/SW_RST/SW_ACK/SW_TAC
in a wrong position
TOO_MANY_LEV 8 Too many nesting levels (max 8)
TOO_MANY_LOGIC 9 Too many operators (max 8)
NO_CLOSE_PAR 10 ‘)‘ parenthesis is missing
UNKNOWN_CHAR 11 Unrecognized character
SYMBOL_NOT_FOUND 12 Symbolic event not found
INVALID_TERMINATION 13 Incorrect logic termination
INVALID_ID 14 Invalid Module ID
Job No. Doc. No.
BOARD_NOT_PRESENT 15 No module present

INVALID_FORMAT_DELAY 16 Invalid time format
INVALID_FORMAT_DATA 17 Invalid date format
Processing errors: internal errors caused by a wrong logic processing by the CS 400 control system. Contact
the Service Center to notify the logic syntax and the error code.
Symbolic ID Code
ERR_ELAB_LEFT_OP 30
ERR_ELAB_RIGHT_OP 31
ERR_RILOC_LEFT_OP 32
ERR_RILOC_RIGHT_OP 33
Allocation errors: no memory is available to archive the logic. Delete any unused logic in order to restore
space to archive the new one.
Symbolic ID Code Description
NO_MEMORY_AVAILABLE 40 Out of memory

Job No. Doc. No.
6 The Modbus RTU Protocol

The CS 400 fire control system allows you to connect remote devices communicating over the serial line to
the Modbus RTU protocol. For example, you can associate the control system with a PLC controlling and
supervising the system inputs and outputs. The PLC reads the input and output status and enables the
scheduled outputs according to specific programming logics.
With the Win400 program the operator can define a series of variables that are transmitted between the
remote device and the control system. For a detailed description on how to use the configuration program,
please refer to Win400 manual. The followings sections provide some general “consistency” rules that you
have to follow in order to avoid programming errors, that result in an incorrect operation of the
communication protocol.
6.1 Programming
The control system supports 256-word X 16-bit data memory, for a total of 4096 bit, to transmit write
only/read only data. Data can be divided into: inputs, outputs (coil) and registers.
The operator associates each variable with a control system status (“status association”), a rule (“rule
association”) or a logic equation, according to the syntax for CBE logic provided in Chap. 5. You can define
up to 256 rules.
In addition, each variable is associated with an identifying address. The same variable type is traditionally
associated with consecutive addresses, in order to avoid allocating unused memory. Addresses between 1800
and 1899 are reserved for internal use only and cannot be accessed by the user.
Inputs: read-only bit variables. You can perform a status association or a rule association.
Example of status association:

Name R/W Type Address Bit Association Reverse Equation Description
INP_1 R Input 1000 0 Status False R01G3 L3 fault status
You defined a read-only input variable with descriptive name INP_1 and address 1000. This variable is
associated with the line 3 fault status of the M407 module with id=01. The value you read is not reversed
compared to that of the control system.
Example of rule association:

INP_2 R Input 1001 0 Logic False R01A1*R01A2 L1-2 ALR status
You defined a read-only input variable with descriptive name INP_2 and address 1001. This variable is
associated with the given rule: the input is true when both lines of the M407 module with id=01 are in alarm
status. The value you read is not reversed compared to that of the control system.
The Bit field of input variables is always set to 0.
WARNING: the setting of a write-only input type will generate a compiling error during the programming
transfer from Win400 to the control system.
Outputs: read-/write-only bit variables. They can be associated only with an activation status of a physical
output line for M405 and M409 modules.
Example of status association:

OUT_1 R/W Coil 1000 0 Status False O02A3 L3 output activation
Job No. Doc. No.
You defined a read-/write-only output variable with descriptive name OUT_1 and address 1000. This
variable is associated with the line 3 activation status of the M405 module with id=02. The write mode
allows you to enable the line by writing the appropriate activation command (according to the specification
of the Modbus protocol). The value you read is not reversed compared to that of the control system.
The Bit field of coil variables is always set to 0.
WARNING: any association different from that of the activation status, will generate a compiling error
during the programming transfer from Win400 to the control system.
Registers: 16 bit read-/write-only variables. Each register bit is associated with a status or a rule.
Example of rule/status association:

REG_1 R Register 1000 0 Status False R01A1 L1 Alarm
REG_1 R Register 1000 6 Status False R01G1 L1 Fault
REG_1 R Register 1000 14 Logic False R01A1*R01A2 L5-6 Alarm
REG_1 R Register 1000 15 Logic False R01G1*R01G2 L5-6 Fault
You defined a read-only register variable with descriptive name REG_1 and address 1000. Bits between 0
and 5 are associated with the line alarm status of the M407 module with id=01; bits 6-11 are associated with
the fault status.
Bits 12 and 13 are not defined.
Bit 14 and 15 are associated with rules.
WARNING: register bits can be write-bit only if they are associated with an activation status of a physical
output. Any other status or rule association will generate a compiling error during the
programming transfer from Win400 to the control system.
Example of association of an activation status:

REG_2 R/W Register 1001 0 Status False O02A1 L1 Activation
REG_2 R/W Register 1001 6 Status False P03A1 L1 Activation

Job No. Doc. No.
You defined a read-only register variable with descriptive name REG_2 and address 1001. Bits between 0
and 5 are associated with the line activation status of the M405 module with id=02; bits 6-11 are associated
with the line activation status of the M409 module with id=03. Writing on the register you will enable or
disable the lines.
Bits between 12 and 15 are not defined.
Example of association “Null State” type:

Nome R/W Tipo Indirizz Bit Associazione Invertito Equazione Descrizione
o
REG_2 R/W Register 1001 0 State False
You defined a read/write register with descriptive name REG_2 and address 1001. Bits between 0 and 15
have no association: they can be read/write from plc without modifing central unit state.
WARNING: a register cannot contain both read-only and write-only bits; in this case any access to the
register will generate an error message according to the specification of the Modbus protocol.
When the programming is completed, the operator must download the data in the control system using the
specific command of the Win400 menu. To enable the communication with the Modbus protocol you have to
activate it using the relevant configuration parameter.
6.2 Modbus Functions
In the control system firmware you implement the Modbus RTU standard functions for communication. The
following is a brief summary of the active functions with the relevant error codes.
Read Coil (0x01)

It reads consecutive outputs, from 1 to 2000, starting from a given address.
Returned error messages (“Exception”) are:
Code ID Description
0x2 Unplanned address.
0x3 Quantity of read outputs out of the 1-2000 range.
0x4 Reading of a write-only output.
Read Discrete Input (0x02)

It reads consecutive inputs, from 1 to 2000, starting from a given address.
Job No. Doc. No.
Code ID Description
0x3 Quantity of read inputs out of the 1-2000 range.
0x4 Reading of an unplanned input.
Read Holding register (0x03)

It reads consecutive registers, from 1 to 125, starting from a given address.
Code ID Description
0x3 Quantity of read registers out of the 1-125 range.
0x4 Reading of a register where at least one write-only bit has been
programmed.
Writing of a register where at least one read-only bit has been
programmed.
Write Single Coil (0x05)

It writes an output of a given address.
Code ID Description
0x2 The address was not planned as an output.
0x3 Unknown activation command.
0x4 Unplanned write-only output.
Diagnostics (0x08)
Communication diagnostic function. The ‘0x2 – return diagnostic Register’ sub-function is implemented on
the control system. This sub-function enables the remote device to periodically monitor the communication
status with the control system.
The control system answers with a status register whose bits have the following meanings:
Bit 0: General prealarm enabled

Bit 1: General alarm enabled
Bit 2: General fault enabled
Bit 3: General signaling enabled
Bit 4: General prealarm acknowledged
Bit 5: General alarm acknowledged
Bit 6: General fault acknowledged
Bit 7: General signaling acknowledged
Bit 15: System initialization performed
Code ID Description
0x1 The diagnostic function is not implemented
0x3 Received data are not valid.
Write Multiple Coils (0x0F)

It writes consecutive outputs, from 1 to 2000, starting from a given address.
Codice Descrizione

Job No. Doc. No.
0x2 The address was not planned as an output.

0x3 Quantity of write outputs out of the 1-2000 range.
0x4 Unplanned write-only output
Write Multiple Register (0x10)

It writes a group of consecutive registers, starting from a given address.
Code ID Description
0x2 The address was not planned as a register.
0x3 Quantity of written registers out of the 1-125 range.
0x4 Writing of a register where at least one read-only bit has been
programmed.

Job No. Doc. No.
APPENDIX A
The following table lists the binary coding of the modules, which can be set using the “Code” dip-switch.
WARNING: the 0 ID is not allowed; by default, it is modified to 1.

Make sure that the control system does not contain modules of the same type with identical
coding.
Module ID: Switch

1 2 3 4 5 6
1 ON OFF OFF OFF OFF OFF
2 OFF ON OFF OFF OFF OFF
3 ON ON OFF OFF OFF OFF
4 OFF OFF ON OFF OFF OFF
5 ON OFF ON OFF OFF OFF
6 OFF ON ON OFF OFF OFF
7 ON ON ON OFF OFF OFF
8 OFF OFF OFF ON OFF OFF
9 ON OFF OFF ON OFF OFF
10 OFF ON OFF ON OFF OFF
11 ON ON OFF ON OFF OFF
12 OFF OFF ON ON OFF OFF
13 ON OFF ON ON OFF OFF
14 OFF ON ON ON OFF OFF
15 ON ON ON ON OFF OFF
16 OFF OFF OFF OFF ON OFF
17 ON OFF OFF OFF ON OFF
18 OFF ON OFF OFF ON OFF
19 ON ON OFF OFF ON OFF
20 OFF OFF ON OFF ON OFF
21 ON OFF ON OFF ON OFF
22 OFF ON ON OFF ON OFF
23 ON ON ON OFF ON OFF
24 OFF OFF OFF ON ON OFF
25 ON OFF OFF ON ON OFF
26 OFF ON OFF ON ON OFF
27 ON ON OFF ON ON OFF
28 OFF OFF ON ON ON OFF
29 ON OFF ON ON ON OFF
30 OFF ON ON ON ON OFF
31 ON ON ON ON ON OFF
32 OFF OFF OFF OFF OFF ON
33 ON OFF OFF OFF OFF ON
34 OFF ON OFF OFF OFF ON
35 ON ON OFF OFF OFF ON
36 OFF OFF ON OFF OFF ON
37 ON OFF ON OFF OFF ON
38 OFF ON ON OFF OFF ON
39 ON ON ON OFF OFF ON
40 OFF OFF OFF ON OFF ON
41 ON OFF OFF ON OFF ON
42 OFF ON OFF ON OFF ON
43 ON ON OFF ON OFF ON
44 OFF OFF ON ON OFF ON
45 ON OFF ON ON OFF ON

Job No. Doc. No.
46 OFF ON ON ON OFF ON
47 ON ON ON ON OFF ON
48 OFF OFF OFF OFF ON ON
49 ON OFF OFF OFF ON ON
50 OFF ON OFF OFF ON ON
51 ON ON OFF OFF ON ON
52 OFF OFF ON OFF ON ON
53 ON OFF ON OFF ON ON
54 OFF ON ON OFF ON ON
55 ON ON ON OFF ON ON
56 OFF OFF OFF ON ON ON
57 ON OFF OFF ON ON ON
58 OFF ON OFF ON ON ON
59 ON ON OFF ON ON ON
60 OFF OFF ON ON ON ON
61 ON OFF ON ON ON ON
62 OFF ON ON ON ON ON
63 ON ON ON ON ON ON

CS400 Manual - Eng

Uploaded by

Document Information

Original Description:

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

CS400 Manual - Eng

Uploaded by

Copyright:

Available Formats

Doc.

Cliente: Commessa Cliente:

REV. DATA Descrizione Redatto Contr. Appr.

1 CS 400 FIRE CONTROL SYSTEM ..................................................................................9

CS400 - Installation & Operating Guide 2

1.9.3 Basic Configuration ..........................................................................................25

2 INSTALLATION GUIDE .................................................................................................29

2.6.2 Connections and Diagrams ..............................................................................43

3 CONTROL SYSTEM PROGRAMMING AND MANAGEMENT......................................52

3.2.4.1 Setting The Line Name Of The M406 Module ...........................................66

3.8.6 Deleting The Event Log ....................................................................................89

5 PROGRAMMING THE EVENT LOGIC ........................................................................111

CS400 - Installation & Operating Guide 6

5.2.3 The AND Operator .........................................................................................115

6 THE MODBUS RTU PROTOCOL ................................................................................122

CS400 - Installation & Operating Guide 7

CS400 - Installation & Operating Guide 8

1 CS 400 Fire Control System

1.1 General Features

CS400 - Installation & Operating Guide 9

1.2 Operator Panel

Enter entry confirmation key.

CS400 - Installation & Operating Guide 10

1.3 M402 CPU

1.3.1 General Features

CS400 - Installation & Operating Guide 11

1.3.2 Visual Warning Signals

LED (Color) / COMMAND DESCRIPTION

1.3.3 Basic Configuration

CS400 - Installation & Operating Guide 12

Jumper Position A Position B Relay

1.4 M401 Module

1.4.1 General Features

CS400 - Installation & Operating Guide 13

1.4.2 Visual Warning Signals

LED (Color) DESCRIPTION

1.4.3 Basic Configuration

The “Setting” dip-switch sets some specific functions, listed below.

Switch Function Description

1.5 M404 Module

1.5.1 General Features

CS400 - Installation & Operating Guide 15

1.5.2 Visual Warning Signals

LED (Color) / COMMAND DESCRIPTION

CS400 - Installation & Operating Guide 16

1.5.3 Basic Configuration

CS400 - Installation & Operating Guide 17

1.6 M405 Module

1.6.1 General Features

1.6.2 Visual Warning Signals

CS400 - Installation & Operating Guide 18

LED (Color) DESCRIPTION

1.6.3 Basic Configuration

Jumper Inversion control Current control Disabled control

CS400 - Installation & Operating Guide 19

1.7 M406 Module

1.7.1 General Features

1.7.2 Visual Warning Signals

CS400 - Installation & Operating Guide 20

LED (Color) / COMMAND DESCRIPTION

1.7.3 Basic Configuration

Switch Function Description

CS400 - Installation & Operating Guide 21