FCC ID: 2AP5OLFM-LP RFID Reader

 

Customer manual LFM LP Reader Rev.1.2 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 0. Table of contents 0. 1. 2. 3. 4. 5. Table of contents Introduction Version history Used abbreviations and designations General instructions Safety instructions and warnings 5.5.1 6. Regulations and certifications Functional description 6.2.4 Test module 6.3.1 Top view 6.4.1 6.4.2 6.4.3 7. 7.5.1 7.5.2 7.6.1 7.6.2 Power supply and current input Device labels Device Label FCC ID 2AP5OLFM-LP Installation Positioning the antenna Antennas dimensions Tuning push button Test push button 8. Commissioning HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Version 1.2 15.01.2019 Page 2 of 119 2 5 7 7 8 9 14 15 16 17 20 21 21 22 25 26 27 28 29 Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Version 1.2 15.01.2019 Page 3 of 119 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 9. Operating 9.2.1 9.2.2 9.2.3 General Automatic protocol detection Triggered protocol change 10. ASCI-I1 Communication protocol 10.4.1 X Read data 10.4.2 R Automatic read 10.4.3 W Write data 10.4.4 G Query parameter 10.4.5 F Query parameter 10.4.6 P Set parameter 10.4.7 N Reset 10.4.8 e Error message 10.4.9 H Heartbeat 10.4.10 V Query software version 10.4.11 L Lock data area 10.4.12 I Adjust RF module 10.4.13 J RF module Queries the vote 10.4.14 A Sensor event object removed 10.4.15 B Sensor event object detected 10.4.16 O Set output 10.4.17 Q Querying the status of the inputs and outputs 10.8.1 Reader operation mode and sensor triggered reading 11. SECS / HSMS Communications protocol 11.3.1 Stream 1 (system state) 11.3.2 Stream 2 (system control) 11.3.3 Stream 3 (Material-state) 11.3.4 Stream 5 (Exception handling) 11.3.5 Stream 9 (system error) 11.3.6 Stream 18 (control and data transfer) 34 34 34 34 36 44 45 46 46 47 48 49 50 50 51 52 53 54 55 56 57 58 66 71 86 87 89 91 91 93 HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 12. Service and Troubleshooting Version 1.2 15.01.2019 Page 4 of 119 115 13. Disassembly and storage 119 HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 1. Introduction Version 1.2 15.01.2019 Page 5 of 119 These operating instructions correspond with the "Radio and Telecommunications Terminal. Equipment Act and Directive 2014/53/EU (RED) "

These operating instructions are intended for the operator who must pass these on to the personnel responsible for installation, connection, use, and repairs of the machine. The operator must ensure that the information contained in these operating instructions and in the accompanying documents has been read and understood. The operating instructions must be kept at a known place that is easy to reach, and they must be consulted if there is the slightest doubt. The manufacturer assumes no responsibility for damage to persons, animals, or objects or to the unit itself arising from the improper use or the disregard or insufficient consideration to the safety criteria contained in these operating instructions or based on modifications of the unit or the use of unsuitable replacement parts. The copyright for the operating instructions lies solely with HERMOS AG Track & Trace - RFID Division Gartenstr.19 95490 Mistelgau, Germany or its legal successor. Reproduction or circulation of this document to third parties only by express written permission of copyright holder. This also applies if only excerpts of the document are copied or circulated. These same conditions apply to the disclosure of the document in digital format. As of: Juli 2017 HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Using the device Version 1.2 15.01.2019 Page 6 of 119 The device is exclusively used to read and write passive LF transponders. Any other use of the machine or any use beyond its intended purpose is considered non -intended and thus improper. In this case, the device safety and the device p rotection provided may be compromised. HERMOS AG is not liable for damages resulting from such use. The device was developed for the use in an industrial environment as a built -in device in other systems. It was not developed as a stand-alone or mobile device in a non-industrial environment, such as domestic, vehicle or open air use. Intended use also includes the following:

Following all the operating instructions Following all the safety instructions Improper use, which can endanger the unit, the user and third parties, include:

The use of the device contrary to its intended use Changes to the device as well as attachments and conversions Operating the unit when there are obvious problems WARNING WARNING Danger of injury due to unauthorised modifications There are risks from unauthorised modifications on the device. Only original spare parts from the manufacturer must be used. No modification, attachment or conversion may be performed on the device without the permission of HERMOS AG. Danger of injury and interruption of operation due to improper use There are risks through the improper use of the device. The device must only be used according to its intended use. Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 2. Version history Version 1.2 15.01.2019 Page 7 of 119 Version Date Author Amendments 1.1 1.2 26.09.2018 HERMOS AG RK Initial version of customer documentation 16.11.2018 HERMOS AG RK FCC, additional Parameters 3. Used abbreviations and designations RFID LF SEMI SECS HSMS PoE DHCP Radio Frequency Identification Low Frequency 134,2 kHz Semiconductor Equipment and Materials SEMI Equipment Communications Standard High-Speed SECS Message Service Power over Ethernet Dynamic Host Configuration Protocol HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 4. General instructions Version 1.2 15.01.2019 Page 8 of 119 All previous versions of this document lose their validity with the issue of this version. We compiled the information in this document according to the best of our ability. HERMOS AG does not guarantee the accuracy and completeness of the information provided in this document and is also not liable for consequential damages based on faulty or incomplete information. Objective of the product manual The product manual serves as support and contains all the necessary information that must be followed for general safety, transport, installation and operation. The product manual with all safety instructions (as well as all additional documents) must be:

Objectives:

Followed, read and understood by all persons working with the unit (especially knowledge of the safety instructions) Easily available at all times to all persons Consulted if even the slightest doubt arises (safety) Prevent accidents Increase the service life and reliability of the unit Reduce the costs of production downtime Warranty and liability The "General Terms and Conditions of Sale and Delivery" of HERMOS AG shall apply. The warranty period is 24 months beginning with the delivery of the device, which is verified by the invoice or other documents. The warranty includes repairs of all damages to the unit tha t occur during the warranty period, and were clearly caused by material or manufacturing defects. Warranty and liability claims in the event of personal injury or property damage are excluded if they arise from one or more of the following causes:

Improper use of the unit Disregarding the information in the operating instructions Unauthorised structural modifications of the unit Insufficient maintenance and repairs Disaster events due to impact with foreign objects or force majeure HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 5. Safety instructions and warnings Scope and symbols Version 1.2 15.01.2019 Page 9 of 119 Follow the general safety instructions as well as special safety instructions included in the chapters. The unit was built according to state-of-the-art technology and recognised safety regulations. In order to prevent danger to life and limb of the user, third parties, or the unit, only use the unit for its intended purpose and in perfect condition with regard to safety. Bodily injuries and/or property damages resulting from non -compliance with the instructions provided in the operating instructions are the responsibility of the company operating the unit or the assigned personnel. Faults that may compromise safety must be eliminated immediately. DANGER Risk of death, injury and property damage. There is a risk of danger due to disregard of the product manual and the safety information contained therein. Read the product manual carefully before putting the unit into operation for the first time. Fulfil all required safety conditions. Safety symbols - according to DIN 4844-2 The following special safety symbols in accordance with DIN 4844-2 are used at the corresponding passages in the text of this product manual and require special attention depending on the combination of the signal word and symbol. DANGER Risk of injury due to disregarding the safety symbols. Risks exist when disregarding warnings in the operating instructions. Follow all warnings. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 5.2.1 Mandatory signs Version 1.2 15.01.2019 Page 10 of 119 Observe additional information Use safety goggles Wear ear protection Important note 5.2.2 Warning signs Warning of a hazardous area Warning of electromagnetic radiation Warning of explosive substances 5.2.3 Prohibition signs Unauthorised access is prohibited Switching prohibited HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Wear safety shoes Warning of hazardous electrical voltage Warning of flammable substances Warning of electrostatically sensitive components Fire, open flame and smoking prohibited Prohibited Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 5.2.4 Other signs Version 1.2 15.01.2019 Page 11 of 119 Dispose of packaging material according to rules and regulations Recycling Obligations 5.3.1 Operators obligations A safe condition and use of the unit is a requirement for a safe operation of the unit. For that reason, the operator has the obligation to ensure that the following points are adhered to:

The unit may only be operated by trained and authorised personnel. Prohibit unsafe or dangerous working methods! If necessary, check the conduct and actions of its personnel!

Have personnel who must be trained, instructed or within the scope of general training work only on the unit under the supervision of an experienced person!

Have the personnel confirm by their signature that the operating instructions have been understood!

Precisely establish responsibilities according to the various task areas (operation, installation)!

Operating personnel must be required to immediately report any occurring and identifiable safety deficiencies to their superior!

HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 5.3.2 Responsibilities of operating personnel Version 1.2 15.01.2019 Page 12 of 119 The operating personnel are obligated to contribute to th e prevention of work accidents and their consequences by their personal conduct. WARNING Risk of injury due to insufficient personnel qualifications There are dangers to personnel and the proper operation due to inadequately qualified personnel. Only trained personnel may operate the unit. New operating personnel must be instructed by the existing operating personnel. The operator must precisely regulate the personnels areas of responsibility, competence, and monitoring precisely. The personnel for the areas of responsibility mentioned above must have the corresponding qualification for this work (training, instruction). If necessary, this can be done by the manufacturer on behalf of the operator. In case of disregard, all warranty claims are void. 5.3.3 ESD Instructions CAUTION Static electricity can damage electronic components in the unit. All persons who install or maintain the unit must be trained in ESD protection. ESD protective measures must be applied when opening the unit. Disconnect the power supply prior to removing or adding components!

Observe the basic principles of ESD protection Take the appropriate ESD precautionary measures HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Residual risks Version 1.2 15.01.2019 Page 13 of 119 Despite all precautionary measures taken, there may still be residual risks that are not apparent. Adhering to the safety instructions, the intended use, and the product manual as a whole can reduce residual risks. DANGER Danger caused by electrical current Electrical residual energy remains in lines, equipment and devices after shutting down the device. ATTENTION DANGER Only qualified electricians may perform work on the electrical supply system. Disconnect the unit from the power supply system if active parts of the unit can be accessed using tools. Access is only permitted by authorised personnel. Regularly check the electrical equipment of the unit. Regularly check all moving cables for damage within the scope of maintenance and repair work. Dangers of fire and explosion There is a risk of fire and explosions in the vicinity of the device. Smoking, exposed flames and fire are strictly prohibited in the vicinity of the unit. Do not store any flammable liquids within the hazardous area of the device. A fire extinguisher must be kept in the vicinity of the device. Warning of electromagnetic radiation WARNING Electromagnetic radiation develops when transmitting and receiving data. Arrange the antenna in such a position that it is not in the vicinity or make contact with the human body while transmitting. The device satisfies the standard EN50364:2010 (Human Exposure). Supplemental instructions HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 14 of 119 Read and understand all safety and operating instructions prior to installing and operating the device. This documentation was written for specifically trained personnel. The installation, operation and error handling may only be carried out by specifically trained personnel. Keep these instructions. Keep this documentation in a location that is accessible to all personnel involved with the installation, use, and error handling of the device. Follow all warnings. Follow all warnings on and in the device and in the documentation. Install the unit only in accordance with the manufacturer's instructions. Use only the accessories and cables from the manufacturer. Troubleshooting that is not described in the chapter service and troubleshooting may only be performed by the manufacturer. When connecting cable connections, only pull on the plug and not on the cable. Only use spare parts specified by the manufacturer. The provisions of the accident-prevention regulations of the government safety organisations always apply to all work on the unit. Applicable, legally binding accident prevention regulations. Applicable binding regulations at the place of use Technical standards for safety and professional work Existing environmental protection regulations Other applicable regulations 5.5.1 Regulations and certifications The electrical design and documentation satisfy the DIN / VDE, EN / IEC regulations. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 6. Functional description General information Version 1.2 15.01.2019 Page 15 of 119 LF reading devices are radio frequency identification systems that use radio transmission to read or write data of LF transponders (134,2 kHz), which operate as tamper -proof electronic tags. The LF reading devices communicate with common transponders according to ISO 18000 -2 and ISO 11785 that are available on the market. The data is transmitted via the existing interface with the preset transmission parameters. If several interfaces are available and connected to the host, the transmission is always carried out on the most recently used interface. The data is embedded in a defined communication protocol and exchanged between the reader and host. Basic functions - operating modes During normal operation, the LF reading device supports various basic functions:

Heartbeat function, software version query Reading data Writing data Locking data Setting and reading out parameters Setting and querying inputs and outputs The LF devices can be set in 3 other operating modes by s etting the parameters: Polling operation

(optional), sensor-triggered automatic reading and test mode. 6.2.1 Normal operation During normal operation, the LF reading device is immediately ready for operation after a reset. It does not perform any automatic actions in this mode (standby). During normal operation, actions are triggered by protocol commands from the host. A scanning procedure or reading in the data area is initiated by a command of the host system using the communication protocol. In addition to the actions triggered by the host, a corresponding message can be automatically sent to the host and an automatic reading operation can be started by activating or releasing a sensor. When the reading operation is successful, the read data is immediately transmitted to the host. If several antenna ports are occupied simultaneously, the reading operations are processed sequentially. Writing actions (data saved to a transponder) are generally only possible via commands from the host. 6.2.2 Polling mode LF reading devices can be set into a continuous reading state, which is referred to as polling mode. The device then performs reading operations at regular intervals and outputs the corresponding data of the read LF transponder. The reading device also continues carrying out protocol messages in polling mode. This may, however, result in delays in the poll rhythm. The polling functionality is optional customer-specific available!

6.2.3 Sensor-triggered operation Device versions with IO port offer the function of a sensor-triggered automatic reading operation. The reading device automatically performs a reading operation when the input is triggered. The type of action HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 16 of 119

(inventory/reading) can be defined with the parameters Read mode and Read page. The read data is automatically sent to the host. The result of the reading operation (successful, not successful) can be optionally output via I/O s of the antenna port. 6.2.4 Test module The HERMOS LF reading devices support a test mode that facilitates setting up the antenna and checking the reading ranges during commissioning. These test mode can be activate with a push button. If the device is in test mode (maintenance mode) three tri-colour LEDs shows the state of the test mode. The chapter "Status LEDs" describes the behaviour in test mode. see also chapter push button switches HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Illustration 6.3.1 Top view Version 1.2 15.01.2019 Page 17 of 119 Component Describtion Power supply M12-A plug for 24V DC power supply. Antenna connection Lemo antenna connector Status-LEDs Push buttons HERMOS AG Gartenstrasse 19 D-95490 Mistelgau

--->see page 28 Tuning push button switch starts an automatic antenna tuning. Test push button activates the read test mode. On a long press the write test mode is activated. Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 18 of 119 Ethernet interface Depending on the device model, the reading device features a 10/100 BaseT Ethernet interface. RS232 interface Depending on the device model, the reading device features a RS232 interface (9-pin Sub D female). GPIO Optional is a GPIO port available, M8 connector HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Technical data Version 1.2 15.01.2019 Page 19 of 119 Technical data Voltage (protected against reverse polarity) Current consumption @24V

(passive, reading, pulse 50ms) 24VDC (18 30 V DC) 50mA, 200mA, max.580mA Fuse type Nano2 375 mA Operating temperature

-0 bis 50 C Storage temperature

-20 C bis 70 C Permissible humidity at 50C 25 80 %

Transmission frequency 134,2 kHz Serial Interface RS232 Ethernet interface 10/100 BaseT Protocol ASCII, SECS / HSMS Housing material l Aluminium, black and white anodised Protection IP20 Reader dimensions 115 x 82 x 35 mm Weight 250 g HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 20 of 119 The device label with the CE label, article and serial number are located on the side of the reading unit. 6.4.1 Power supply and current input Description Voltage (reverse polarity protected) Current consumption (Read/Write Pulse 50ms) Current (passive) Min. 18 Typ. Max. Unit 24 200 350 50 30 V (DC) 580 mA mA HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 6.4.2 Device labels Version 1.2 15.01.2019 Page 21 of 119 The device label is located on the reading unit housing. It contains a CE mark, article/serial number and the MAC address. 1. Designation 2. Article number (variants) 3. Serial number (example) 4. MAC address (only for ethernet type) 5. Manufacturer 6.4.3 Device Label FCC ID 2AP5OLFM-LP FCC

- The Federal Communications Commission (FCC) warns the users that changes or modifications to the unit not expressly approved by the party responsible for compliance could void the user's authority to operate the equipment. RF exposure statement (mobile and fixed devices) This device complies with the RF exposure requirements for mobile and fixed devices. However, the device shall be used in such a manner that the potential for human contact during normal operation is minimized.

- FCC 15.105 (a):

NOTE: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment. This equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in accordance with the instruction manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause harmful interference in which case the user will be required to correct the interference at his own expense. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 7. Installation Version 1.2 15.01.2019 Page 22 of 119 Follow the basic safety instructions in the chapter Safety instructions. Safety instructions The unit is exclusively designed for indoor use in an industrial environment. The unit may only be installed indoors with a temperature and humidity level with in the range of the specified technical module parameters. Never use the unit near or in water. Never pour liquids of any type over the unit. However, if the unit should still come in contact with liquid, disconnect it and have it checked by a technician. Do not install the device near heat sources such as radiators, heat registers, stoves or other devices (including amplifiers) that generate heat. Do not install the unit in a flammable environment. Never expose the device to extreme temperature fluctuations, since condensation otherwise develops inside the unit and causes damages. Do not install the device in the vicinity of voltage lines or other power lines with which they could collide (for example, drilling), which could result in serious injuries or even death. The device (especially the antenna) should not be installed in the immediate vicinity of electrical equipment such as medical devices, monitors, telephones, TV sets and magnetic disks, and metal objects. This could result in reduced read and write ranges. Never use the unit in explosive areas (such as paint warehouses). Do not use the device in areas where it is exposed to vibrations or shocks. The installation location must be adequately illuminated during the installation. Never install the unit during a lightning storm. Make sure that the installation meets the requirements of the FCC

(country specific) for human exposure to radio frequencies. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Qualified installation personnel Version 1.2 15.01.2019 Page 23 of 119 The unit must only be installed by specially trained personnel. If you have any doubts about the qualifications, please contact the manufacturer. If the unit is operated by untrained personnel, the reading device and or connected devices may be damaged. Unpacking The LF reading device and the accessories can be packed customer-dependent in clean room conditions. In order to maintain this condition, the devices must be unpacked in clean room conditions. The packaging material consists of cardboard and foil. Dispose of these materials separately under the respective regulations of your country. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Mounting the device Version 1.2 15.01.2019 Page 24 of 119 The mounting surface must be stable, non-flammable, dry and clean. If necessary, clean it before you install the device. Only use components, cable and mounting materials provided by HERMOS. Only mount the components at the designated locations and make sure that the operating and ambient conditions specified in the technical data are always maintained. Dimensions:

HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Installing the antenna Version 1.2 15.01.2019 Page 25 of 119 When installing the antenna, observe the required reading and writing ranges. The reading device can only be used properly, if the transponder is located within the reading and writing range of the antenna. Tune antenna after a new antenna installation!

Tune antenna after a new antenna installation!

The tuning function can be started with the tuning button . 7.5.1 Positioning the antenna The removal and alignment of the transponder to the antenna is critical to ensure reliable reading and writing. The following diagram displays the optimum alignment and position of the transponder to the antenna . After positioning, the antenna must be tuned to the ambient conditions. The tuning function can be st arted with the tuning button. Transponder parallel to the antenna axis :

Transponder is outside the antenna range Transponder is within the antenna range Transponder vertical to the antenna axis:

Transponder is outside the antenna range Transponder is within the antenna range HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 7.5.2 Antennas dimensions Block antenna Mini2 Version 1.2 15.01.2019 Page 26 of 119 Rod antenna M, (HRF.A.LFX.SM.LS.20) The type of connector is only symbolic and may vary!

HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 7.5.3 Connecting the antenna Version 1.2 15.01.2019 Page 27 of 119 Connect the antenna at the antenna connection at the rear of the reading unit. Use the antennas and antenna cable from the manufacturer to ensure optimum reading and writing ranges. Tune antenna after a new antenna installation!

The tuning function can be started with the tuning button. Power Supply M12-A connector The device can be connected to the system's internal power supply or an external power supply. PIN 1 2 3,4,5 Signal

+24V DC 0 V NC There are risks if the device is supplied with the incorrect voltage. Only use cables, plugs and adapters from the manufacturer. Observe power ratings provided in the technical data. If the device is connected to the power supply, the Status LED lights green (->parameter 35). 7.6.1 Tuning push button If the pushbutton is held down for a defined time (->parameter 54+55), the status of the pushbutton is changed and an automatic antenna tuning is initiated when enabled (->parameter 33 and 36). If the Reader is in test mode, the test mode for the automatic antenna tuning is briefly interrupted when enabled (->parameter 33). HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 7.6.2 Test push button Version 1.2 15.01.2019 Page 28 of 119 If the button is held pressed for a defined time (->parameter 56+57), the status of the button is changed. If the state changes from "Off" to "On", the test mode Read is started when the Test push button is enabled

(->parameter 36). If the push-button is then held without interruption for a further defined period of time (-

>parameter 56), it switches to the Write test mode. If the state of the button changes from "On" to "Off", the test mode Read or Write is terminated. The current state of the test mode is indicated by a unique status LED (->Status LED). Status LEDs Status LEDs:

The status LED is a tri-colour/RGB LED. The white or blue status LED indicates the status of the test mode. If the reader is in maintenance mode or the reading test mode is running, the white status LED flashes at about 1 Hz in reading testmode and 2 Hz in maintenance mode. If the reader is in maintenance mode and the writing test mode is running, the blue status LED flashes at about 1 Hz. If the reader is in normal operation mode, the green status LED is permanently shining (->parameter 35). Test LEDs:

The test LED is a tri-colour/RGB LED. The red and green Test LEDs are used for the reading and writing feedback in test or polling mode. If the read or write process is successful, the green test LED remains permanently lit. If the read or write process fails, the red test LED shines. In normal operation mode the red and green test LEDs are used for the last reading and writing feedback. In this mode the red or green test LED will light for 5 seconds (->parameter 84) after the last reading. Tuning LEDs:

The tuning LED is a tri-colour/RGB LED. The red and green tuning LEDs are used for the tuning feedback. After a successful antenna tuning, the green tuning LED is switched on for 5 seconds (->parameter 84). If no valid antenna tuning is found during antenna tuning or if an invalid tuning is detected during a read operation, the red tuning LED flashes quickly for 5 seconds (->parameter 84 and 85). During automatic antenna tuning, the blue tuning LED flashes. After a powerup reset, the Tri-Colour LEDs undergo a short self-test and then display the set communication protocol for one second:

SECS: The red status LED goes on briefly ASCII: The red test LED goes on briefly RS232 connection The serial interface is implemented as a Sub-D plug connector (9-pin, female). A serial connection line

(1:1 circuit) can be used. Signal NC PIN 1 HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 29 of 119 2 3 4 5 6 7 8 9 TxD RxD NC GND NC NC NC NC GPIO connection (optional) A M8 socket (4pos.) is used as connection socket for the GPIO PIN Signal 1 2 3 4

+24V LED out GND Input 8. Commissioning Operating conditions The following requirements must be fulfilled for smooth device operation. 1. The operating temperature must be within the scope of the values specified in the technical data. 2. The device must be connected to the power supply). HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 30 of 119 3. An antenna must be properly connected to the reading device. If the antenna has not yet been tuned (->Status LEDs), then the automatic tuning must be carried out. 4. A transponder must be within the reading and writing ranges of the connected antenna. 5. After startup the reader works in operation m ode. The serial interface parameters The following settings of the serial interfaces are set on delivery. The baud rate can be changed in the in the SECS protocol (->Parameter 0x01). If you want to change the baud rate in the ASCII protocol, then please contact the manufacturer HERMOS. Baud rate Data bits Stop bits Parity Value 19200 8 1 ASCII: Even SECS/HSMS: None HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Parameter of the ethernet interface Version 1.2 15.01.2019 Page 31 of 119 The unit is connected to the customer network via a 10/100BaseT Ethernet interface. The DHCP (Dynamic Host Configuration Protocol) is activated on delivery. If there is not a DHCP server available in your network, a random IP address is set from the ZeroConf range (169.254.0.0/16) and operations must still be performed to obtain an IP address. If an IP address could be obtained or with a static IP address, the device can be connected via TCP / IP port 3241 in the delivery state. The HERMOS "Device Discoverer" is available for configuring the network setting. HERMOS components can be found in the LAN network and settings can be easily changed using the "Device Discoverer". 1 2 3 HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 32 of 119 1. Select your network interface if you have several options on your PC. 2. Your network is automatically scanned for all HERMOS reading devices using the "Search Devices" button. 3. Select the desired reading device in the list to open the network settings. Here, you can edit the network settings and apply them to the reading device by pressing the respective button. Use "HERMOS" if you are asked to enter a password!

After parameters are changed, the reading device reboots and can be read in using "Search Devices". CAUTION Changing network settings generally cause the reading device to reboot. This closes an existing HSMS host connection. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Firmware update Version 1.2 15.01.2019 Page 33 of 119 Firmware updates can also be performed using the "Device Discoverer" HERMOS. Start the tool with administrator rights and scan the network for all HERMOS devices. To do this, mark the desired reading device and select "TCP/IP Firmware Download" or "RS232 Firmware Download" button depending on your interface. Use "HERMOS" if you are asked to enter a password!

1. Open the download connection by pressing the connect button. 2. Select the new firmware file using the load image button. 3. Start the download process. Wait until the "Download Finished" message appears. CAUTION During the download process, do not disconnect the power supply or interrupt the network connection. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 9. Operating Operating personnel Version 1.2 15.01.2019 Page 34 of 119 The device should only be operated by specially trained personnel. If you have any doubts about the required qualifications, please contact the manufacturer. The operation of the device without special expertise can result in damages to the device or on connected devices. Protocol change 9.2.1 General To communicate with a connected host system, the reader supports ASCII or SECS / HSMS protocols. The protocol selection takes place by means of automatic protocol recognition. The currently set protocol is displayed on the status LED (->Status LEDs) during the boot process. 9.2.2 Automatic protocol detection The reader automatically adjusts to the protocol used by checking and evaluating the first message after a reset. The interface is changed accordingly when the protocol is changed and reinitialized. This process can take several seconds. Already sent messages are lost. The newly recognized protocol is used for further communication. A renewed change is only possible after another reset. Automatic log detection can be enbaled or disabled with parameter 98. If the reader receives undefined or random characters, this may result in an accidental protocol change. Automatic log detection can be deactivated in parameter 98 . On default the automatic protocol detection is disabled. 9.2.3 Triggered protocol change During a powerup reset a protocol change can be performed. To do this, press and hold the test and tuning button during the powerup reset until only red LED lights up at the end. If the red test LED is lit then the protocol has been changed from SECS to ASCII. If the red status LED is lit then the protocol has been changed from ASCII to SECS. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Customer modes Version 1.2 15.01.2019 Page 35 of 119 The reader LFM LP can be delivered with a few customer modes. The settings of the customermode is part of the factory settings and can only be changed by Hermos. If customer needs another customer setting, please ask Hermos for the necessary steps. The customerc ode can be read by parameter 64. Customermode 0:

The antenna will be addressed by the ReaderID 0 or TargetID 1. For the SECS protocol, the standard MID range of 2 pages / 16 characters is defined. The RS232 port can be used for serial host communication. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 10. ASCI-I1 Communication protocol Version 1.2 15.01.2019 Page 36 of 119 The ASCI-I1 communication protocol defines a simple communication interface that is suitable for exchanging messages between a HERMOS reader and a host. A host is a computer or computer network that exchanges the information with the systems to carry out the production. Serial communication:

On serial communication the ASCI-I1 message is transmitted with 4 bytes checksum. The data is transmitted or received as a serial bit stream with 11 bits per character in a supported data rate. A standard character has a start bit, 8 data bits, a parity bit and a stop bit. An even parity bit is used for transmitting the individual bytes. Default setting: 19200 / 8E1 Ethernet communication:

On default the reading device functions as a server. This means that it waits for a connection request from a HOST PC (client). TCP/IP: IP-Adresse xxx.xxx.xxx.xxx Port 3241 After a connection is established, the ASCI-I1 messages defined in the message record are transmitted from the reading device to the respective HOST and vice versa. On default settings ASCI-I1 messages are transmitted without any checksum. The connection remains intact until it is specifically terminated by the host or the reading device. All reading devices available in the network (LAN) can be operated from any HOST PC. A reading device, however, can no longer be connected to more than one HOST simultaneously. The network settings can be changed using a configuration tool provided by HERMOS. Each change to the network settings causes the unit to reboot and thus disconnects existing communication connections. Structure of the communication protocol The communication is carried out via ASCII packets. After each command to the reading device, a specific reply is transmitted. We recommend waiting for this reply before transmitting a new command. Packet content Each message packet consists of a packet header (header = 3 characters), the message data (2 or more characters) and the packet end. Packet header Message data Packet end HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Packet header Version 1.2 15.01.2019 Page 37 of 119 The packet header contains a start character and the message length. The message length consists of 2 hexadecimal bytes and defines the number of characters in a message. Packet header Start character Length 1 (high byte) Length 2 (low byte) Start Length 1 Length 2 Start character (ASCII character "S") High byte of the message length (ASCII character "0"-"F") Low byte of the message length (ASCII character "0" -"F") Advanced ASCII-format:

The advanced ASCII format is defined for ASCII messages whose message length exceeds 255 characters. The packet header contains two start characters and the message length. The message length consists of 4 hexadecimal bytes and defines the number of characters in a message. Packet header Start 1 Start 2 Length 1 Length 2 Length 3 Length 4 Start 1 Start 2 Length 1 Length 2 Length 3 Length 4 Message data First start character (ASCII character "S") Second start character (ASCII character "X" = advanced ASCII protocol) High byte of the message length (ASCII character "0" -"F") Byte packet length (ASCII character "0"-"F") Byte packet length (ASCII character "0"-"F") Low byte of the message length (ASCII character "0"-"F") The message contains a command character, a target or source address, the number of the antenna port

(head) and the actual message data. The number of the antenna port is not required for all messages. Message data Command Address Antenna port Data The command is defined by an ASCII character.

(See protocol commands) Target/source address The definition of the message data depends on the protocol command. Command Address Data

* Depending on customer parameters, the readers are addressed via the address "0 ... E"

( Parameter E).

(ASCII characters "0", "1", ) *

HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Packet end Version 1.2 15.01.2019 Page 38 of 119 The end of the packet contains an end character and a checksum consisting of 4 characters. Packet end End character Checksum 1 Checksum 2 Checksum 3 Checksum 4

(ASCII character "0""F") ASCII end character <CR> (hex 0x0D). End character Checksum 1 High byte XOR logic of all data (packet header, data and end character). Checksum 2 Low byte XOR logic of all data (packet header, data and end character). Checksum 3 High byte addition of all data (packet header, data and end character). Checksum 4 Low byte addition of all data (packet header, data and end character).

(ASCII character "0""F")

(ASCII character "0""F")

(ASCII character "0""F") The checksum is not necessary when using the TCP/IP interface.

(No transmission) The end character is only transmitted. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Data element Version 1.2 15.01.2019 Page 39 of 119 The data elements that are used by default ASCII messages, which are described in the message details section, are defined in this section. Tuning value 2 Byte The tuning value is a set value for the optimal antenna tuning. For optimum read and write ranges, the value is automatically determined by the reader. The value is measured in 16 steps (0 -F). He can also be targeted. Example:

"10"

"00"

"0F"

automatic tuning manual tuning 0x00 manual tuning 0x0F CMD 1 Byte Command of the message, see table in Chapter Commands . Data 16 Bytes The data is represented in HEX format by 2 ASCII characters. The data always includes every 8 bytes of the corresponding page of the transporter Example:

Transponder data in ASCII-Format Transponder data in HEX-Format 0x31 0x32 0x33 0x34 0x35 0x36 0x37 0x38 Data in message

"3132333435363738"

(16 ASCII-characters)

"12345678"

(8 bytes) Output Index 1 Byte The Output Index defines the index of the output that is addressed. The index is displayed as an ASCII character (1 byte) in HEX format. Example:

LED1: externe LED of the port

"1"

"2" LED2: red LED TEST

"3" LED3: blue LED TEST

"4" LED4: green LED TEST

"5" LED5: red LED TUNING

"6" LED6: blue LED TUNING

"7" LED7: green LED TUNING HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 40 of 119

"8" LED8: red LED STATUS

"9" LED9: blue LED STATUS

"A" LEDA: green LED STATUS Output State 1 Byte The data element shows or sets the current status of one output. The Data Element Output State includes the status of each output on the reader. The status is displayed as an ASCII character (1 byte) in HEX format. 0 1 2 3 4 Switch off the output permanently Switch on the output permanently output flashes with approx. 1 Hz output remains unchanged output flashes with approx. 2 Hz Parameter No. 1 Byte The number of the parameter is displayed as an ASCII character (1 byte) in HEX format . Example:

Parameter 1 Parameter 2 Parameter 15

"1"

"2"

F Parameter-Value 2 Bytes With single-digit parameter numbers from 0 to F, the actual parameter value can be decimal or hexadecimal depending on the command and customer mode. Example for decimal Interpretation:

Example for hexadecimal interpretation:

45 2D (hexadecimal) Value 45 Value 45 Reader-ID 1 Byte The reader ID is defined by parameter (->Parameter E). The reader ID is displayed as an ASCII character (1 byte) in HEX format. Response-Code 4 Bytes This feature is not required for the individual device. This code is always "0000". HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Page 2 Bytes Version 1.2 15.01.2019 Page 41 of 119 The page of the transponder for a read / write operation is defined by 2 ASCII characters (2 bytes) in decimal format Example:

Page 1 Page 10 Page 17

"01"

"10"

"17"

Serial number 4 Bytes Contains 4 byte of the serial number, which are displayed as 4 ASCII characters in HEX format . The serial number is also on the adhesive label of the device. Example:

"1707HAG04660" complete serial number Decimal 04660 (the last 5 characters of the complete serial number ) Hexadecimal serial number 1234 Software version 16 Bytes The data item contains the software version currently used in the reader. The version string is displayed with up to 16 characters . Example:

"4C464D3449312E31"

hex-String

(LFM4I1.1) Timeout 2 Bytes The data element Timeout defines the period of time that elapses until the LEDs are switched off. The timeout is displayed as 2 ASCII characters (2 byte) in HEX format. When the timeout expires, the LED turns off. Example:

... permanently on

... 1 s to 255 s Timeout 00 01 to FF HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Version 1.2 15.01.2019 Page 42 of 119 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Protocol Commands Read:

Command Description X R Write:

Read Data Automatic Read Command Description W Write Data Device-Settings:

Command Description G F P N e H V L I J Query Parameter Query Parameter Set Parameter Reset Error message Heartbeat Software-Version Lock side of a transponder Coordinate RF-modules Querying the coordination of the RF-module HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader In- and Output:

Version 1.2 15.01.2019 Page 43 of 119 Command Description O Q A B Set Output Query Output/Input State Sensor event: Sensor removed Sensor event: Sensor detected HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 10.4.1 X Read data Version 1.2 15.01.2019 Page 44 of 119 The command X starts reading of the data area from a transponder. If there is no transponder in the read range of the antenna, the reader sends an error message (error 4

- no transponder). The data element "page" can have the following values . Value Description 01 17 Read page 98 99 Read multiple pages to the end character or a blank character 1) Read out all transponder data Bit 03 of the read ID 1) E or F in ID, Host Device CMD X CMD x Device Host Reader-ID Page 1 Byte 2 Bytes Reader-ID Page Data 1 Byte 2 Bytes 16 Bytes If there is no transponder in the reading range of the antenna, the reader repeats the reading function several times before an error message is sent. The number of repetitions is defined in parameter 4 ('r /

w maxrepeat'). If reading is still not possible, the reader sends the error message 'no tag (4)' to the host after the repetitions have been carried out. No confirmation is expected from the host. For a multi-page read request (98 or 99), the protocol is retried. At the end of reading, the reader sends an additional packet. If the sensor check is activated (parameter 1: readm ode), the assignment of the external input is checked before the initiation of a read process by the host. The reading process is only started if the sensor is occupied, otherwise the error message 'no tag (4)' is sent . HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 10.4.2 R Automatic read Version 1.2 15.01.2019 Page 45 of 119 By assigning the external input, an automatic read operation can be triggered. The command "R" sends the read data to the host. The host then has to confirm the message. Depending on the setting of the reader (parameter 1: readmode), the reader reads the following page s:

Read Mode:

0 1 2 Reading the page defined in parameter 2 sequential reading of a transponder to the end character

('E' - end character or 'F' empty) in ID bit 0 ... 3 Reading the entire transponder (all pages) Device Host Host Device Reader-ID Page Data 1 Byte 2 Bytes 16 Bytes Reader-ID 1 Byte CMD R CMD r When reading several pages (par. 1: readmode "tag" or "everything") the command is repeated for each read page. The last package contains the command 'R' and the reader ID. The host expects a confirmation of the read data. If there is no confirmation from the host, the command is repeated. (Par.5: 'RS232 delay time', par.6: 'RS232 maxrepeat'). If a reading is not possible, the reader automatically repeats the reading with th e set parameters.

(Par.3: 'r / w delay time', par.4 'r / w maxrepeat'). If no reading is possible, the reader sends the error message 'no tag (4)' to the host. The delay time for the presence sensor can be set (parameter 0: 'sensor delay'). An automatic reading is only possible if all messages to be confirmed have been confirmed by the previous reading or the waiting time (par.6: 'RS232 repeattime') has elapsed after the last transmission . HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 10.4.3 W Write data Version 1.2 15.01.2019 Page 46 of 119 The command W starts writing a defined data area of a transponder. If there is no transponder in the write range of the antenna, the reader sends an error message (error 4

- no transponder). Host Device Device Host CMD W CMD w Reader-ID Page Data 1 Byte 2 Bytes 16 Bytes Reader-ID 1 Byte If the describing of the tag fails, the reader repeats the writing operation several times before sending an error message. The number of repetitions is defined in parameter 4 ('r / w maxrepeat'). If writing is still not possible, the reader sends the error message 'no tag (4)' to the host after the repetitions have been carried out. If the sensor check is activated (parameter 1: readmode), the assignment of the external input is checked before the start of the write process by the host. The write process is started only when the sensor is busy, otherwise the error message 'no tag (4)' is sent . 10.4.4 G Query parameter With the command "G" the values of all public parameters of the device can be queried . Host Device CMD G HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Reader-ID 1 Byte Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Device Host CMD g Version 1.2 15.01.2019 Page 47 of 119 Reader-ID Parameter No. Parameter Value 1 Byte 1 Bytes 2 Bytes The reader sends an individual protocol packet for each available public parameter. After the last parameter, the reader sends a last packet including the command 'g' and the reader ID. The values returned for the data item parameter value in the response are decimal values (00 -99). The values for the data item Parameter No. are hexadecimal values (0 -F). 10.4.5 F Query parameter The command "F" can be used to query the value of a public parameter of the device. CMD F Host Device Device Host Reader-ID Parameter No. 1 Byte 1 Byte or 2 Bytes CMD Reader-ID Parameter No. Parameter Value f 1 Byte 1 Byte or 2 Bytes 2 Bytes The reader sends an individual protocol packet for the requested public parameter. The parameter number is a one or two byte hexadecimal value (0-F or 00-FF). The values returned in the response for the data elements parameter number and parameter value are each hexadecimal values (0-F or 00-FF). HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 10.4.6 P Set parameter Version 1.2 15.01.2019 Page 48 of 119 The command "P" can be used to change the value of individual parameters. After a parameter has been successfully changed, the reader sends a confirmation message. Host Device CMD Reader-ID Parameter No. Parameter Value Device Host P CMD p 1 Byte 1 Byte 2 Bytes Reader-ID 1 Byte Depending on the customer mode selected, the data elements parameter number and parameter value must be interpreted differently:

In the standard ASC-I1 protocol mode the data element "Parameter value" with decimal values (00-99) has to be used. The values for the data item "Parameter No." are hexadecimal values For two-digit hexadecimal parameter numbers, the value parameter must always be sent in two digits hexadecimal. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 10.4.7 N Reset Version 1.2 15.01.2019 Page 49 of 119 The command N performs a reset of the hardware/software of the reader . After performing the reset operation, the device sends a confirmation message . Host Device CMD Reader-ID Device Host N CMD n 1 Byte Reader-ID 1 Byte After a hardware reset, a confirmation ("n0") is sent to the host. If TCP / IP is used as the interface, it will not be received because an existing TCP / IP connection is interrupted by the reset. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 10.4.8 e Error message Version 1.2 15.01.2019 Page 50 of 119 This message is only available in standard ASC-I1 mode!

If an error occurs the device will send an error message with the respective error code. This message must be acknowledged by the host Device Host CMD e Reader-ID 1 Byte Error ID 1 Byte Further information about error codes and the corresponding measures can be found in the chapter Error Codes. 10.4.9 H Heartbeat The command "H" sends a heartbeat request to the reader. The reader responds with its serial number and a response code. Host Device Device Host CMD H CMD h Reader-ID 1 Byte - also Reader ID F allowed Reader-ID Serial numberr Response-Code 1 Byte 4 Bytes 4 Bytes The heartbeat function can be performed for all 4 antenna ports (1 -4). If another reader is operated as a customer variant on the RS232 port, a heartbeat can be sent to the external reader via reader ID "5". The response code is part of the protocol but is not used for this device. The response code is always '0000'. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 10.4.10 V Query software version Version 1.2 15.01.2019 Page 51 of 119 The command V is used to query the software version of the device . Host Device CMD V CMD v Device Host Reader-ID 1 Byte Reader-ID Software version 1 Byte 16 Bytes The 8 characters of the software version are represented by 16 ASCII characters. Each character is described in hex format and transmitted by 2 ASCII characters . HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 10.4.11 L Lock data area Version 1.2 15.01.2019 Page 52 of 119 A single page of a multipage transponder can be disabled. The page can still be read, but not rewritten. The process cannot be reversed. Host Device CMD Reader-ID Device Host L CMD L 1 Byte Reader-ID 1 Byte Page 2 Bytes If the lock of the transponder page fails, the reader repeats the procedure several times before an error message is sent. The number of repetitions is defined in parameter 4 ('r / w maxrepeat'). If writing is still not possible, the reader sends the error message 'no tag (4)' to the host after the repetitions have been carried out. If the page was already locked, a positive confirmation wi ll be sent (same as the first block). If the sensor check is activated (parameter 1 readmode), the assignment of the external input is checked before the blocking process is started by the host. The locking process is only started when the sensor is occupied, otherwise the error message 'no tag (4)' is sent . Locking a page cannot be reversed. This page is permanently write protected. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 10.4.12 I Adjust RF module Version 1.2 15.01.2019 Page 53 of 119 It is necessary to adjust the RF module in order to adapt an antenna to t he ambient conditions optimally. The tuning achieves an optimal read / write range for the present installation environment . Tuning is performed one at a time for the antenna port and the determined tuning value is stored for the antenna. For optimal results, the vote should be automatic, but the voting value can also be set manually. Host Device CMD Reader-ID Vote value Device Host I CMD i 1 Byte 2 Bytes Reader-ID 1 Byte To start the auto-tuning process, select the value 10. Example:

If the reader can not determine the appropriate calibration , the error "5 - Invalid" is sent instead of the confirmation. automatic tuning of antenna 1 I110 HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 10.4.13 J RF module Queries the vote Version 1.2 15.01.2019 Page 54 of 119 The command "J" can be used to query the tuning values of the individual antennas. Each antenna port has its own tuning value. Host Device CMD Reader-ID Device Host J CMD j 1 Byte Reader-ID Vote value 1 Byte 2 Bytes The tuning value is a set value for the optimal antenna tuning. For optimum read and write ranges, the value is automatically determined by the reader (I -message). The value is measured in 16 steps (00-0F). HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 10.4.14 A Sensor event object removed Version 1.2 15.01.2019 Page 55 of 119 The message of sensor events can be activated in the parameter "Watch -Port" (par. 07). If this is activated, the reader reports every drop of the external sensor. The sensor message must be confirmed by the host . Host Device CMD Reader-ID Device Host A CMD a 1 Byte Reader-ID 1 Byte The sensor event is detected after an adjustable delay time (par. 0 Sensor Delay). During the delay time, the sensor signal must be stable . In parameter 1 "Read Mode" the sensor can be deactivated . HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 10.4.15 B Sensor event object detected Version 1.2 15.01.2019 Page 56 of 119 The message of sensor events can be activated in the parameter "Watch-Port" (par. 07). If this is activated, the reader reports any recognition of the external sensor. The sensor message must be confirmed by the host. Host Device CMD Reader-ID 1 Byte B Device Host CMD Reader-ID 1 Byte The assignment of the external sensor results in an automatic reading and is not sent as a sensor event in standard ASC-I1 mode. However it is possible to activate the sensor B event (->parameter 49). In parameter 1 Read Mode the sensor can be deactivated. b HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 10.4.16 O Set output Version 1.2 15.01.2019 Page 57 of 119 The command O can be used to set the state of the outputs. The status of all outputs is changed in a message. In the current version, the value of the data element Head-ID always has the value "1" for the outputs . Host Device CMD Reader-ID Head-ID Output Index Output State Timeout *

O CMD o

*

1 Byte 1 Byte 1 Byte 1 Byte 2 Bytes Device Host Reader-ID 1 Byte Head-ID 1 Byte The specification of a time duration (timeout) is optional. permanently switch on external LED of port:

>> O111100 or O1111

<< 011 Example:

Turn blue test LED on for 10 seconds:

>> O11310A

<< 011 The number of available outputs depends on the reader version used. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 10.4.17 Q Querying the status of the inputs and outputs Version 1.2 15.01.2019 Page 58 of 119 The Q command can be used to query the current status of all outputs . The status of the outputs is queried in a message. In the current version, the value of the data element Head-ID always has the value "1" for the outputs. Host Device CMD Q Reader-ID 1 Byte Head-ID 1 Byte Device Host CMD Reader-ID Head-ID Output Index Output State LED1 Output State LEDA q 1 Byte 1 Byte 1 Byte 1 Byte 1 Byte Example: Status LEDs

>> Q01

<< q012000000001 external LED (2 = flash), green status LED (1 = on) The status of the input sensor can be queried via head ID 0. In this case, the answer contains the sensor state (0-1) instead of the 10 output states. Example: Status of input sensor

>> Q00

<< q000 HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Parameter Version 1.2 15.01.2019 Page 59 of 119 The parameters 0, 1, 2 and 7 are only valid if the reader is equipped with a corresponding I / O module and provides one input per antenna port. The data element "page" can have the following values . Nr. Nr.

(dez)

(hex) Parameter name Description 0 0x00 Sensor delay 1 0x01 Read mode 2 3 4 0x02 Read page 0x03 r/w repeat time 0x04 r/w max repeat 5 0x05 RS232 repeat time Delay time for the presence sensor. 01 .. 99 (0,1 seconds) Default: 10 (1 second) Read mode for reading automatically started by external input. 00 - read only one page 01 - read until the end character or empty character2) 02 - read all pages 10 - read only one page with previous sensor Check1) 11 - read until the end character / empty character with previous sensor check 1) 2) 12 - read all pages with previous sensor Check1) 99 - Disable sensor 1) If the Sensor Check (first byte = 1) is activated, the assignment of the potential-free input is checked before initiating a read / write process. When used, the read / write process is started, otherwise the error message "NOTAG" is sent. 2) 'E' or 'F' in ID bits 0...3 of the read ID Default: 00 (read only one page) Page for readmode "00". 00 - First page of each transponder 01 .. 17 - Side of a multipage transponder Default: 00 (read first page) Time between two read / write attempts . 01 .. 99 (0,1 s) Default: 05 (0,5 seconds) Max. number of read / write attempts. 01 .. 99 Default: 05 If no confirmation message was received from the host, the device waits for this time before sending another message. The number of repetitions is defined in parameter 6

('RS232 max repeat'). 01 .. 99 (0,1 s) Default: 50 (5 seconds) HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 6 0x06 RS232 max repeat 7 0x07 Watch port F 0x0F Reader address Version 1.2 15.01.2019 Page 60 of 119 If an acknowledgement is not sent by the host, the device repeats the message according to the set value. Only then is an error message sent 00 - endless 01 .. 99 Number of attempts Default: 3 Activates / deactivates the sensor event messages A or B to the host, that the input sensor has been opened or closed. Bit0 of the Watchport parameter (event message A):

0 - deactivate message A 1 - activate message A when sensor opened/released Bit11) of the Watchport parameter (event message B):

0 - deactivate message B 1 - activate message B when sensor closed/occupied Default: 01 Address of the first antenna port (0 ... E) Default: 1 1): The use of the sensor message B depends on internal parameter 49. Further internal parameters (from parameter 16 onwards) are available. Please ask the manufacturer HERMOS if you need anything. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Message examples Version 1.2 15.01.2019 Page 61 of 119 2 30 0 48 32 2 30 0 53 S'

H 0D CR 32*) HEX ASCII Description Start character End character Lowbyte message length High byte message length Message first character: value Message second character: destination address

*): With TCP / IP transmission in the standard ASC-I1 protocol, the checksum bytes are not transmitted. Calculation of the XOR checksum:

53 XOR 30 XOR 32 XOR 48 XOR 30 XOR 0D =

Calculation of the addition-checksum:

53 + 30 + 32 + 48 + 30 + 0D =

(LSB is used) Lowbyte Checksum Addition Highbyte Checksum Addition Lowbyte Checksum XOR Highbyte Checksum XOR 13A '3' 'A'

24 '2' '4'

34*) 33*) 41*) A 4 3 HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 62 of 119 The following examples are based on the standard ASC -I1 protocol. Different Reader ID's are used

(->Parameter E) V Query software version

>> V1

<< v14C464D3449312E32 Command Reader-ID Software version '4C464D3449312E32 V 1 ASCII " LFM4I1.2"

I RF module with connected antenna

>>I210

<<i2 Commandl Reader-ID J RF module Read out tuning value

<< j201 Command Reader-ID Data

(voting value) J 2 01 I 2 X 1 01

'4142434445464748'

X Read data (Reading from page 1 of the multipage transponder)

>> X101

<< x1014142434445464748 Command Reader-ID Page Data R - Automatic reading on antenna port

<< R1013132333435363738

>> r1 Command Reader-ID Page Data R 1 01

'4142434445464748'

ASCII " ABCDEFGH "

ASCII "ABCDEFGH"

W Write data (Writing page 16 of the multipage transponder)

>> W2103132333435363738

<< w2 Command Reader-ID Page Data W 2 10

'3132333435363738'

(10hex = page 16dec.) ASCII "12345678"

HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 63 of 119 O 1 1 3 1 0A O 1 1 1 1 00 optional (00=permanently) O Permanently switch on LED1 external LED:

>> O111100 or O1111

<< 011 Command Reader-ID Head-ID Output Nr Output State Timeout O Turn LED3 blue test LED on for 10 seconds:

>> O11310A

<< 011 Command Reader-ID Head-ID Output Nr Output State Timeout O Get the state of all outputs

>> Q01

<< q012000000001 external LED (2 = flash), green status LED (1 = on) Command Reader-ID Head-ID Output State LED1 Output State LED2 Output State LED3 Output State LED4 Output State LED5 Output State LED6 Output State LED7 Output State LED8 Output State LED9 Output State LEDA O Get the sensor state

>> Q00

<< q000 sensor state 0 released q Command 0 Reader-ID 0 Head-ID Sensor State 0 Released q 0 1 2 FLASH 0 OFF 0 OFF 0 OFF 0 OFF 0 OFF 0 OFF 0 OFF 0 OFF 1 ON HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Version 1.2 15.01.2019 Page 64 of 119 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Error Codes ID Name Description none No error 0 1 2 auto fail ext fail 3 write fail Automatic reading is not possible Execution failed, read or write operation cannot be carried out Data transfer to the tag is not possible. 4 no tag No transponder or antenna installed 5 invalid Invalid parameter or data Cause Reader is still busy with a former read or write request Reader is still busy with a former read or write request. Reader is still busy with a former read or write request. Antenna is not connected properly Antenna is not tuned No readable transponder within the reading range Antenna / transponder are misaligned Antenna is damaged or too close to metal Interference field at transmission frequency Invalid command data Parameter is not implemented or out of range 6 unknown Unknown errors 7 Unconfig The device is not configured Wrong reader address 8 check Parity or checksum error 9 void ackn unexpected acknowledge Wrong baud rate Transmission error at serial communication Serial communication is interrupted Ethernet communication is interrupted Double or wrong acknowledgment HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Corrective action none Wait until the previous request has ended. Wait until the previous request has ended. Wait until the previous request has ended. Check antenna connection Antenna tuning Put the transponder in the antenna area. Check the type and function of the transponder Check the alignment of the antenna and the transponder Replace the antenna, check the tuning Check antenna environment for possible sources of interference.

(Monitors, servomotors,) Check command syntax and data content Check parameter syntax and value no Check message syntax, check parameter F "Reader address Check the baud rate of the serial interface (Com port) Check RS232 cable and connector, Check sources of interference with RS232 Check RS232 cable and connector, Check sources of interference with RS232 Check Ethernet cable and connector, check IP address settings Check communication settings at the host Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader A Locked Locked page cannot be written Tag is write protected B Unconfig Maximum number of send messages has been confirmed

(RS232 maxrepeat), The terminal did not confirm within the specified timeframe C Bad type Wrong transponder type

: Msg len Message too long or too short or not received completely

;

Invalid Invalid command Host system does not acknowledge the message A wrong transponder type is used

(Read only or Read / Write instead of multipage) Message too long or too short or not received completely Message is longer than specified in the length byte Not all characters are transfered

(Intercharacter Timeout) Unknown command was received Version 1.2 15.01.2019 Page 65 of 119 Check the page number to be written, exchange the tag for the new one Check availability oft he host system, Check RS232 cable and connector, Ethernet cable and connector, Check IPAddress settings Check and replace transponder type Message length is longer than indicated on the length byte, Check message length and length byte Check message length, check length byte Check message syntax, Check RS232 or Ethernet connection Check message syntax HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Wiring of the external output Version 1.2 15.01.2019 Page 66 of 119 For readers with input sensor, the external output of the reader is switched accordingly when reading, depending on internal parameter 48. Please ask HERMOS for deactivation!

10.8.1 Reader operation mode and sensor triggered reading Picture1: Successful reading with instant host confirmation Picture 2: Successful reading with instant host confirmation HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 67 of 119 Picture 3: Unsuccessful reading with instant host confirmation HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader ASCII table DEZ HEX CTRL Code 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 0 1 2 3 4 5 6 7 8 9 A B C D E F 10 11 12 13 14

^@

^A

^B

^C

^D

^E

^F

^G

^H

^I

^J

^K

^L

^M

^N

^O

^P

^Q

^R

^S

^T NUL SOH STX ETX EOT ENQ ACK BEL BS HT LF VT EF CR SOH SI DLE DC1 DC2 DC3 DC4 Version 1.2 15.01.2019 Page 68 of 119 DEZ HEX CTRL Code 21 22 23 24 25 26 27 28 29 30 31 15 16 17 18 19 1A 1B 1C 1D 1E 1F

^U

^V

^W

^X

^Y

^Z

^[

^\

^]

^^

^_ NAK SYN ETB CAN EM SUB ESC FS GS RS US HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader DEZ HEX CTRL 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 20 21 22 23 24 25 26 27 28 29 2A 2B 2C 2D 2E 2F 30 31 32 33 34 35 36 37 BLANK

!

"

#

$

%

&

'

(

)

*

+

,

-

.

/

0 1 2 3 4 5 6 7 Version 1.2 15.01.2019 Page 69 of 119 DEZ HEX CTRL 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 38 39 3A 3B 3C 3D 3E 3F 40 41 42 43 44 45 46 47 48 49 4A 4B 4C 4D 4E 4F 8 9

:

;

<

=

>

?

@

A B C D E F G H I J K L M N O HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader DEZ HEX CTRL 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 50 51 52 53 54 55 56 57 58 59 5A 5B 5C 5D 5E 5F 60 61 62 63 64 65 66 67 P Q R S T U V W X Y Z

[

\

]

^

_

'

a b c d e f g Version 1.2 15.01.2019 Page 70 of 119 DEZ HEX CTRL 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 68 69 6A 6B 6C 6D 6E 6F 70 71 72 73 74 75 76 77 78 79 7A 7B 7C 7D 7E 7F h i j k l m n o p q r s t u v w x y z

{

|

}

~

HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 11. SECS / HSMS Communications protocol Version 1.2 15.01.2019 Page 71 of 119 The SECS I standard defines a communication interface that is suitable for exchanging messages between the semiconductor processing systems and a host. A host is a computer or computer network that exchanges the information with the systems to carry out the production. The standard does not define the data contained in the message. The meaning of the messages must be defined by a standard that defines the message content e.g. by the SEMI Equipment Communications Standard E5 (SECS-II). This message record describes the communication between a reading device with SECS-I and a host. The host and the RFID reading device can communicate via a RS232 interface (SECS-I) or an Ethernet interface (10/100BaseT) with HSMS protocol. The meaning of the messages is provided in the message details section in which the message content is defined. Serial communication (SECS-I):

The data is transmitted or received as a serial bit stream with 10 bits per character in a supported data rate. A standard character has a start bit, 8 data bits and a stop bit. No parity bits or other controls are used for transmitting the individual bytes. Default setting: 19200 / 8N1 Details about the data definition and the data transmission are provide i n the SEMI Standard E4.

(SEMI Equipment Communication Standard 1 Message Transfer SECS -I) Ethernet communication (HSMS):

The reading device functions as a HSMS server. This means that it waits for a connection request from a HOST PC (client). TCP/IP: IP-Adresse xxx.xxx.xxx.xxx Port 3241 If there is a connection request from a HOST, a HSMS connection is set up and the SECS II messages defined in the message record are transmitted from the reading device to the respective HOST and vice versa. The HSMS connection remains intact until it is specifically terminated by the host or the reading device. All reading devices available in the network (LAN) can be operated from any HOST PC. A HSMS reading device, however, can no longer be connected to more than one HOST simultaneously. The network settings can be changed using a configuration tool provided by HERMOS. Each change to the network settings causes the unit to reboot and thus disconnects existing communication connections. Structure of a message The communication structure and process is defined by the SEMI Equipment Communications Standards E4, E5 and E37 (SECS-I, SECS-II, HSMS). SECS message blocks always have a specified structure that consists of 1-4 length bytes, 10 bytes of message headers and message data. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 72 of 119 Byte MSB Description Length Header 0 1 2 3 4 5 6 7 8 9 10 Data 11-254 Checksum 255, 256 R W E Length without checksum Upper Device ID (reader ID) Lower Device ID (gateway ID) Upper Message ID (stream) Lower Message ID (function) Upper block number Lower block number System byte 1 System byte 2 System byte 3 System byte 4 Message data 16-bit checksum The length contains all the bytes transmitted after the length byte with the exception of the two checksum bytes. The maximum block length allowed by the SECS -I is 254 bytes and the minimum is 10 bytes. The reverse bit (R bit) indicates the direction of the message. The R bit (MSB) is set to "0" for messages to the reading device and "1" for messages to the ho st. The device ID is a unique number to establish the connection with the reading device . It consists of an 8-bit gateway ID (bit 0-7) and a 7-bit reader ID (bit 8-14). The gateway ID in the delivery state corresponds to the last two hexadecimal character s of the serial number of the reader. The reader ID has the value 0x01 in the delivery state. Of course, the device ID can be changed via the corresponding parameters Gateway ID (->Parameter 0) and Reader ID (->Parameter 0x0B) within the validity range. See example with Reader ID 0x01 and Gateway ID 0x00 :

Upper Devic-ID

(Reader-ID) Lower Device-ID

(Gateway-ID) R-Bit 0 0 0 0 0 0 1 0 0 0 0 0 0 0 0 HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Direction reading device to host 0x8100 Direction host to system (reading device) 0x0100 Version 1.2 15.01.2019 Page 73 of 119 The W bit indicates whether the transmitter of the primary message wait for a reply. If the W bit contains the value 1, it means that a reply is expected. The message ID determines the format and the content of the transmitted message. It consists of a stream and a function. The stream defines the message group and the function, the exact meaning and the syntax of the message. A primary message (request) is defined as an uneven message. A secondary message is defined as an even message (reply). The end bit indicates whether a block is the last block of the message. A value of 1 means that the block is the last block. Since all messages can be transmitted in a block, the block number always has the value 1. The system bytes in the header of each message are used to distinguish primary messages. The system bytes of the reply message must correspond to the system bytes of the corresponding primary message. The system bytes are incremented for each primary message. The checksum is calculated as the numerical sum of the unsigned binary values of all bytes after the length byte and before the checksum as well as in an individual block. For more detailed information about the structure and transmission procedure, see SEMI E4 , E5 , E37 , E99.

(SEMI Equipment Communication Standard Message Transfer SECS HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Directory Data Elements Version 1.2 15.01.2019 Page 74 of 119 This section defines the data elements used in the standard SECS-II messages described in the message details section. A unique name for this data item. This name is used in the message definitions A unique name for this data item. This name is used in the message definitions. Syntax:

Name

. Format The allowed element format code that can be used for this default data element. Element format codes are displayed in hexadecimal and octal, as described in chapter Data element. Description Where used The notification "3 ()" indicates a signed integer format

(30, 31, 32, 34). A description of the data element with the meaning of each value . standard messages in which the data element occurs. ACKC3 Verification code. ACKC5 Verification code. ALARM STATE 0 1

... .. Sensor 0 was the initiator error, not accepted Where used S3F6, S3F8 0 1

... .. No error error, not accepted Where used S5F2 Format: B[1]

Format: B[1]

Format: A[1]

The value of the alarm state refers to the last read. If a read or write error occurs, the alarm state is activated. A successful read or write deactivates the alarm state. When leaving the maintenance mode, the alarm state is also deactivated. 0 1

... .. no alarm alarm Where used S18F13 ALCD Alarm-Codebyte Only the occurrence of an error is reported. Errors are usually not reset. Bit 8 = 1 Alarm activated Where used S5F1 Format: B[1]

HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader ALID Alarm Identifier Version 1.2 15.01.2019 Page 75 of 119 Format: B[1]

Only the occurrence of an error is reported. Errors are usually not reset no error Automatic reading failed, the reader is busy External read failed, the reader is busy External write failed, the reader is busy No transponder could be detected when the sensor was covered, 0 1 2 3 4 or the carrier was removed too soon (sensor uncovered) 5 6 7 8 9 10 11 12 13 14 15 16 More about error codes and the corresponding corrective measures c an be found in the chapter Error Codes. Invalid command or parameter detected Unknown error Reserved parity error or checksum error detected An unexpected confirmation has been sent Locked page could not be described Reserved Wrong transponder type External read or write failed because the sensor is not covered Reserved Reserved Reservedt Where used S5F1 ALTX Format: A[max40]

Alarm text The length of the alarm text is between 0 and 40 characters. Depending on the version of the reader, information about the condition of the sensor or the sensors is also transmitted in the event of an error message from the reader The information should be interpreted as follows :

ALTX[0]

Initiator of an error message 0: Sensor 0 1: Sensor 1 (not available) F: Not assignable State of the sensor 0 0: Sensor is released 1: Sensor is occupied E: Sensor status is not available F: Sensor is not defined State of the sensor 1 0: Sensor is released 1: Sensor is occupied E: Sensor status is not available F: Sensor is not defined

: a semicolon separates the alarm text from the sensor states Where used S5F1 Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 ALTX[1]

ALTX[2]

ALTX[3]

HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader ATTRID Version 1.2 15.01.2019 Page 76 of 119 Format: A[max25]

Name for an attribute for a specific object type. CIDRW Attribut definitions:

"Configuration

"AlarmStatus

"OperationalStatus Number of heads Current CIDRW sub-state of the alarm state Current CIDRW sub-state in normal operation SoftwareRevisionLevel"

Change (version) of the software - maximum 8 bytes

"CarrierIDOffset"

"CarrierIDLength"

"SERIALNUM"

"HARDWARE"

Offset of the CID in the CID field (MID area) Length of the CID in the CID field (MID area) Series number string String of the Hardware-Release

"SELF_TEST_RESULT"

Supply the result of the last self-test

"MANUFACTURER"

String of the manufacturer

"ECID_00" Parameter 0 Gateway ID

"ECID_01" Parameter 1

"ECID_02" Parameter 2

"ECID_03" Parameter 3 Baudrate Inter-character timeout T1 Block protocol timeout T2

"ECID_04" Parameter 4 Reply timeout T3

"ECID_05" Parameter 5 Inter-block timeout T4

"ECID_06" Parameter 6 Retry limit RTY

"ECID_07" Parameter 7 TARGETID high byte

"ECID_08" Parameter 8 TARGETID low byte

"ECID_09" Parameter 9 Heartbeat time

"ECID_11" Parameter 11 ReaderID

"ECID_12" Parameter 12 HeadID

"ECID_20" Parameter 20 Sensor Delay for presence sensor

"ECID_22" Parameter 22 Sensor triggered action for presence sensor

"ECID_23" Parameter 23 Triggered read frequency

"ECID_24" Parameter 24 r/w max repeat

"ECID_25" Parameter 25 Transponder Type

"ECID_26" Parameter 26 Sensor activity

"ECID_27" Parameter 27 Sensor Watchport for presence sensor

"ECID_28" Parameter 28 Negate external output

"ECID_29" Parameter 29 Transponder load duration (read mode)

"ECID_30" Parameter 30 r/w synchronize

"ECID_33" Parameter 33 Automatic Antenna adjustment

"ECID_34" Parameter 34

"ECID_35" Parameter 35

"ECID_36" Parameter 36

"ECID_37" Parameter 37 Sensor type for presence sensor Special features Push button switches activation MID area HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 77 of 119

"ECID_38" Parameter 38

"ECID_40" Parameter 40

"ECID_41" Parameter 41

"ECID_42" Parameter 42

"ECID_43" Parameter 43

"ECID_44" Parameter 44

"ECID_45" Parameter 45

"ECID_54" Parameter 54

"ECID_55" Parameter 55

"ECID_56" Parameter 56

"ECID_57" Parameter 57

"ECID_58" Parameter 58

"ECID_80" Parameter 80

"ECID_97" Parameter 97

"ECID_98" Parameter 98

"ECID_99" Parameter 99 Header attribute definitions:

"HeadStatus

"HeadID Test after software reset Transponder load duration (write-mode) Delay time between read cycles CarrierIDOffset CarrierIDLength FixedMID MIDFormat SWITCHTUNEON SWITCHTUNEOFF SWITCHTESTON SWITCHTESTOFF Push Button switch status (read only) Auto adjust value antenna port 1 (read only) Default protocol (read only) Protocol change allowed Customer Code Current state corresponds to "OperationalStatus"

"01" ID of first antenna port Where used S5F1 ATTRVAL Value of the specified attribute. CIDRW-attribute definitions:

Format: A[max4]

"Configuration Number of antenna ports 01

"AlarmStatus Current CIDRW sub-state of the ALARM STATUS

"0" NO

"1" ALARMS

"OperationalStatus"

Current CIDRW sub-state of IN OPERATION

"IDLE

"BUSY

"MANT"

reader in REST mode reader is busy maintenance mode

"SoftwareRevisionLevel"

Revision (version) of the software - maximum 8 bytes

"SERIALNUM"

"HARDWARE"

serial number string (max 15 bytes) String of the hardware release (10 bytes max.)

"SELF_TEST_RESULT"

triggered by message S18F13 using SSCMD. Returns the result of the last self-test. A self-test can be

"MANUFACTURER"

String from the manufacturer HERMOS HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 78 of 119 ECID_00 bis ECID_99 see data element ECV parameters 0 - 99 Head attribute definitions:

"HeadStatus" Current state

... Reader in REST mode

"IDLE"

"BUSY" ... reader is busy

"NOOP" ... Not in operation

"HeadID"

corresponds to the 2-digit target ID of the first antenna port 01 Where used S18F2, S18F3 ATTRVAL State request value OpStatus LEDStatus LedNo Timeout Format: A[max2]

Operating status, maintenance or rest mode

"OP" ... operating status externe LED of the port

"MT" ... maintenance status LED-status

"Off" ... switch off the LED

"On" ... switch on the LED

"Flash" ... switch the LED to flashing mode with 1Hz LedNo LED-number, 1Byte

"1"

"2" red LED TEST

"3" blue LED TEST

"4" green LED TEST

"5" red LED TUNING

"6" blue LED TUNING

"7" green LED TUNING

"8" red LED STATUS

"9" blue LED STATUS

"A" green LED STATUS Timeout duration, Units seconds 00: permanently 01 to FF: Timeout from 1 to 255 s. After the timeout, the LED goes off. Where used S18F13 HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 79 of 119 The number of LEDs per antenna input depends on the design of the hardware. DATA Format: A[max200]

The data element is a vector or string of unformatted data. The DATA area depends on the MID area of the transponder and can be between page 1 and page 17. Read-write transponder DATA corresponds to 8 byte MID Read-only transponder DATA corresponds to 8 byte MID Where used S18F6, S18F7 DATALENGTH Format: U2 The DATA LENGTH corresponds to the number of bytes to be read or written. The scope depends on the length of the MID range (parameter 37). Where used S18F5, S18F7 DATASEG Format: A[2]

Used to identify the requested data. The DATASEG corresponds to the page number (PAGEID) of the transponder.

"00" First page of each transponder or first page of the DATA area. Multipage transponders (pages 1 to 17):

"01"

...

"11"

Read-Only-Transponder Read-Write-Transponder

"81" Locked page 1

...

"91" Locked page 17

"F0" Read only one page

"F1" Read or write only one page page 1

... page 17

... Where used S18F5, S18F7 EAC Confirmation code for new reader attribute 0 ... parameter successfully set 1 ... parameter could not be set Where used S2F16 Format: B[1]

ECID Format: U1 Parameter number of the reader. The values are displayed as decimal values. Where used S2F13, S2F15 ECV HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Format: U1 Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 80 of 119 Value of the reader parameter. The values are displayed as decimal values , see Parameter Where used S2F14, S2F15 MDLN Plant model number (Hardware Version) Where used S1F2 MF Format: A[6]

Format: B[1]

Material Format Code 20:

The material port number corresponds to the sensor number and the sensor status. Where used S3F5, S3F7 MHEAD Format: B[10]

The data element MHED consists of the head of the SECS message block associated with the defective message block. Where used S9F1, S9F3, S9F5, S9F9 MID Format: A Material ID, predefined area on the transponder in which the unique identifier of the cassette / box is stored. Depending on the type of transponder, the length of the MID can be changed. Multipage-Transponder:

first 10 pages). Read-Write-Transponder:

Read-Only-Transponder:

The MID length can be set from "0" (no MID) to "10" (MID occupies the The MID corresponds to the DATA (writable) The MID corresponds to the DATA (fixed) Where used S18F10, S18F11 Please note the parameters 42-45 MIDAC Format: B[1]

Material ID verification code 0 1 2 Material ID confirmed; the presence sensor was the initiator Not specified Material ID confirmed - reaction to externally triggered process; the message can not be assigned to a sensor Material ID not confirmed

>2 The initiator can be taken from the data element PTN. Where used S3F14 MIDRA HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Format: B[1]

Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 81 of 119 Material ID verification code 2 confirmation, MID will be sent later in S3F13 Where used S3F12 OFLACK Confirmation code for OFFLINE request. 0 OFFLINE-confirmation (reader is offline) ONLACK Where used S1F16 Confirmation code for ONLINE request. 0 ONLINE accepted (reader is online) Where used S1F18 PAGEDATA Format: B[1]

Format: B[1]

Format: B[9]

The data element corresponds to the transponder data. It contains the transponder page and the data content of the page. PAGEDATA [0]

the data element "DATASEG". PAGEDATA [1-8] The 8 bytes (one page) of the transponder ID follow. Correspond to the page number. The value of the page number is displayed in Where used S3F7, S3F13 PTN Format: B[1]

message initiated by Sensor0 message initiated by Sensor1 message initiated by external trigger Information about the status of up to two sensors and the initiator of a message. A second sensor depends on the hardware and is not implemented yet.The initiator represents the number of the sensor that has caused a message. Initiator: Bit7, Bit 6 0,0 0,1 1,1 Sensor1: Bit5, Bit4, Bit3 0,0,0 0,0,1 1,1,1 Sensor0: Bit2, Bit1, Bit0 0,0,0 0,0,1 1,1,1 Example:

Sensor released Sensor occupied Sensor not defined (Defaultvalue !) Sensor released Sensor occupied Sensor not defined 0b00111001 Message initiated by Sensor0, Sensor1 is not defined and Sensor0 is occupied HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 82 of 119 Where used S3F5, S3F7, S3F13 PM Information Information about the operating mode

"NE" normal execution

"MR" operating mode "maintenance" required Format: A[2]

Where used S18F2, S18F4, S18F8, S18F10, S18F12, S18F14 RAC Confirmation code reset 0 Reset could be executed 1 Reset could not be executed RIC Where used S18F20 1 Power-up-Reset 2 Software reset (without reset of the Ethernet component) SHEAD Where used S2F19 Format: B[1]

Format: B[1]

Format: B[10]

Head of the stored SECS message block. Only the last message is saved. This must be confirmed by the host. Where used S9F9 SOFTREV Software version SSACK Where used S1F2 Format: A[max 6]

Format: A[2]

Description: Result information about the status of the request for the service request.

"NO"

Normal Operation Indicates the success of the requested operation.

"EE"

Execution error HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 83 of 119 Transponder data can not be read. MID sequence can not be read, as valid ASCII characters were not found exclusively in the defined MID area. However, the condition of the facilities is normal.

"CE"

Communication error) Syntax error in message, message format, or value.

"HE"

Hardware error Error in the head of the ID reader / writer, head of the ID reader / writer is deactivated. Transponder error, reading / writing unsuccessful (Tag Error) No transponder detected in the antenna area. (No Tag) Where used S18F2, S18F4, S18F8, S18F10, S18F12, S18F14 Format: A[max 18]

"TE"

"NT"

SSCMD Description: Specifies an operation to be performed by the subsystem. Used to distinguish between the various subsystem commands displayed.

"ChangeState"

"GetStatus"

"Reset"

change status query staus reset CIDRW

"PerformDiagnostics" A diagnosis is made.

"ADJUST"

triggers an automatic alignment of the antenna.

"HERMOSDefParams" Basic setting of the readers parameters.

"SetLED "

Set one of the device LEDs. CPVALs 1 <LEDStatus>

2 <Timeout>

3 <LEDNo>

Where used S18F13 Status list Format: A[2]

The status list provides information about the system status. Consists of "PM Information" and the current values of the CIDRW attributes "AlarmStatus", "Operating Status" and "HeadStatus". Status list L,4

<PMInformation>

<AlarmStatus>

<OperatingStatus>

<HeadStatus>

TARGETID Where used S18F2, S18F4, S18F8, S18F10, S18F12, S18F14 Format: A[2 or 4]

The TargetID identifies where a request for action or data is to be applied. The TargetID supports 2 byte and 4 byte format. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 84 of 119 The 2-digit TargetID (2 ascii characters decimal) is changeable and defined in parameter 12 (Head-

ID). The 4-digit Target-ID (4 ascii characters hexadecimal) is changeable and defined in parameter 7

(TARGETID high byte) and parameter 8 (TARGETID low byte). Example:

"1707HAG04660" complete serial number Decimal 04660 (the last 5 characters of the complete serial number ) Hexadecimal serial number 1234 (High byte 0x12 and Low byte 0x34) High byte serial number 0x12 (parameter 7) Low byte serial number 0x34 (parameter 8) Target-ID 1234 Where used S18F1, S18F3, S18F4, S18F7, S18F9, S18F11, S18F13 HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Protocol commands Version 1.2 15.01.2019 Page 85 of 119 The message record describes the communication data between a reading device with and a host. The following functions can be used via commands by the host in the reading device or automatically transmitted from the reading device to the host:

Stream 1: (System state) Are you there request Request Offline Request Online Stream 2: (System control) Read parameter Write parameter Transmit reset Stream 3: (Material state) MID detected by sensor MID removed from sensor Read MID Stream 5: (Exception handling) Alarm message Stream 9: (System error) Unrecognised device ID Unrecognised stream type Unrecognised function type Invalid data Transmission timeout Stream 18: (System state) Read parameter Write parameter Read data Write data Read MID Write MID Subsystem command S1F1 S1F15 S1F17

(Host Reader)

(Host Reader)

(Host Reader S2F13 S2F15 S2F19 S3F5 S3F7 S3F13

(Host Reader)

(Host Reader)

(Host Reader)

(Reader Host)

(Reader Host)

(Reader Host) S5F1

(Reader Host) S9F1 S9F3 S9F5 S9F7 S9F9 S18F1 S18F3 S18F5 S18F7 S18F9 S18F11

(Reader Host)

(Reader Host)

(Reader Host)

(Reader Host)

(Reader Host)

(Host Reader)

(Host Reader)

(Host Reader)

(Host Reader)

(Host Reader)

(Host Reader) S18F13

(Host Reader) HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 11.3.1 Stream 1 (system state) Version 1.2 15.01.2019 Page 86 of 119 S1F0: ABORT TRANSACTION (reading device <-> host) This message is used instead of an expected reply to cancel an action. The function 0 is defined in each stream and has the same meaning in each stream. S1F0 (header only, no additional elements) S1F1: ARE YOU THERE REQUEST (reading device <-> host, reply) Determines whether the reading device or the host is online. S1F1 W (header only, no additional elements) S1F2: ON-LINE DATA (host -> reading device) The host indicates that it is online. S1F2

<L[2]

<A[6] MDLN >

<A[6] SOFTREV >

>

S1F2: ON-LINE (reading device -> host) The reading device indicates that it is online. S1F2

<L[2]

<A[6] MDLN >

<A[6] SOFTREV >

>

S1F15: REQUEST OFF_LINE (host -> reading device, reply) The reading device contains a request to change the communication state to "offline". The reading device can only be set to "online" again using the message S1F17 (or reset S2F19); all other messages are cancelled by message SxF0. S1F15 W (header only, no additional elements)

. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 87 of 119 S1F16: OFFLINE ACKNOWLEDGE (reading device -> host) Acknowledgement. S1F16

<B[1] OFLACK>. S1F17: REQUEST ON_LINE (host -> reading device, reply) The reading device contains a request to change the communication state to "online". S1F17 W (header only, no additional elements) S1F18: ONLINE ACKNOWLEDGE (reading device -> host) Acknowledgement S1F18

<B[1] ONLACK>. 11.3.2 Stream 2 (system control) S2F0: ABORT TRANSACTION (reading device <-> host) This message is used instead of an expected reply to cancel an action. S2F0 (header only, no additional elements) S2F13: EQUIPMENT CONSTANT REQUEST (host -> reading device, reply) The host requests an attribute (parameter) from the reading device. S2F13 W

<L[1]

<U1[1] ECID>

>

S2F14: EQUIPMENT CONSTANT DATA (reading device -> host) The reading device transmits the requested attribute (parameter) to the host. S2F14

<L[1]

<U1[1] ECV>

>

S2F15: NEW EQUIPMENT CONSTANT SENT (host -> reading device, reply) The host changes a reading device attribute (parameter). HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 88 of 119 S2F15 W

<L[1]

<L[2]

<U1[1] ECID>

<U1[1] ECV>

>

>

S2F16: NEW EQUIPMENT CONSTANT ACKNOWLEDGE (reading device ->host) The reading device acknowledges the reading device parameter). S2F16

<B[1] EAC>

S2F19: RESET SENT (host -> reading device, reply) The host transmits a request to the reading device to reset the hardware and software. If a heartbeat time (parameter 9) is set, the reading device transmits a S1F1 message once the reset operation is complete. A power-up reset takes a few seconds S2F19 W

<B[1] RIC>

S2F20: RESET ACKNOWLEDGE (reading device -> host) The reading device acknowledges the reset. This message is only displayed if a software reset (RIC=2) has been triggered . S2F20

<B[1] RAC>

HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 11.3.3 Stream 3 (Material-state) Version 1.2 15.01.2019 Page 89 of 119 S3F5: Material found (MID FOUND) (reading device-> host, reply) The reader sends the information that material has been detected on the input sensor. This message is sent only when a sensor is connected and activated.

(see par. 26 Sensor Activity and par. 27 Watchport) S3F5 W

<L[2]

<B[1] MF >

<B[1] PTN >

>

S3F6: Material found confirmation (MID FOUND, ACK ) (host -> reading device) The host confirms the message material found. S3F6

<B[1] ACKC3 >

S3F7: Material lost (MID LOST) (reading device -> host,reply) The reader sends the information that material has been removed from the input sensor. This message is sent only when a sensor is connected and activated.

(see par. 26 Sensor Activity and par. 27 Watchport) The PAGEDATA are only indicated if the last reading was successfu l. S3F7 W

<L[2]

<B[1] MF >

<B[1] PTN >

<B[9] PAGEDATA >

>

S3F8: Material lost confirmation (MID LOST, ACK ) (host -> reading device) The host confirms the message material lost. S3F8

<B[1] ACKC3 >

HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 90 of 119 S3F13: MID read (MID READ) (reading device -> host, reply) The reader sends the MID of the set up material to the host S3F13 W

<L[2]

<B[1] PTN >

<B[9] PAGEDATA >

>

S3F14: Material found confirmation (MID FOUND, ACK ) (host -> reading device) The host confirms the received MID data. S3F14

<B[1] MIDAC >

HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Version 1.2 15.01.2019 Page 91 of 119 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 11.3.4 Stream 5 (Exception handling) S5F1: Alarm Report (reading device -> host, reply) The reader reports an error to the host. S5F1 W

<L[3]

Alarmcodebyte

<B[1] ALCD >

<B[1] ALID >

Alarm-ID

<A[MAX 40] ALTX > Alarmtext

>

S5F2: Alarm Report confirmation (Host -> Lesegert) The host confirms the alarm message. S5F2

<B[1] ACKC5 >

11.3.5 Stream 9 (system error) S9F1: UNRECOGNIZED DEVICE ID (reading device -> host) The device ID in the header of the message block does not correspond to the expected device ID S9F1

<B[10] MHEAD >

S9F3: UNRECOGNIZED STREAM TYPE (reading device -> host) The reading device does not recognise the stream type in the header of the message block. S9F3

< B[10] MHEAD >

S9F5: UNRECOGNIZED FUNCTION TYPE (reading device-> host) The reading device does not recognise the function number in the header of the message block. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader S9F5

< B[10] MHEAD >

Version 1.2 15.01.2019 Page 92 of 119 S9F7: ILLEGAL DATA (reading device -> host) The reading device does not recognise the data in the message. S9F7

< B[10] MHEAD >

S9F9: TRANSACTION TIMER TIMEOUT (reading device -> host) This message indicates a timeout of a transmission timer and the cancellation of the corresponding transaction. Only the most recently transmitted message (that must be acknowledged by the host) is saved and its acknowledgement is monitored by time. S9F9

< B[10] SHEAD >

HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 11.3.6 Stream 18 (control and data transfer) Version 1.2 15.01.2019 Page 93 of 119 S18F0: ABORT TRANSACTION (reading device <-> host) This message is used instead of an expected reply to cancel an action. S18F0 (header only, no additional elements) S18F1: Read parameter (host -> reading device, reply) This message requests the current values of the parameters or states. Several attributes can be queried simultaneously by one message. S18F1 W

<L,2

<TARGETID>

< Ln

<ATTRID1>

<ATTRIDn>

>

>

>

S18F2: Read parameter, confirmation (reading device -> host) This message requests the current values of the requested parameters or states. S18F2

<L,4

<TARGETID>

<SSACK>

< L,n

<ATTRVAL1>

<ATTRVALn>

>

< L,1

<STATUSLISTE>

>

>

If the ATTRID of the S18F1 message is not known, the corresponding element ATTRVAL receives the value <nothing>. S18F3: Write parameter (host -> reading device, reply) The message transmits a request to the reading device to set (overwrite) the value of the transferred parameters. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 94 of 119 With a message several attributes can be set at the same time. S18F3 ,W

<L,2

<TARGETID>

<L,n

<L,2 1 <ATTRID1>

2 <ATTRVAL1>

>

<L,2 1 <ATTRIDn>

2 <ATTRVALn>

>

>

>

S18F4: Write parameter, confirmation (reading device ->host) This message acknowledges that the request for writing the parameter values successfully or reports an error. S18F4

<L,3

<TARGETID>

<SSACK>

<STATUSLISTE>

>

If the ATTRID of the S18F3 message is not known, a communication error (CE) occurs. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 95 of 119 S18F5: Read data (host -> reading device, reply) This message is used for requesting the antenna head specified in the TARGETID for reading data (from the data area). DATASEG defines the start address of the data to be read. DATALENGTH defines the data volume of the data to be read. S18F5 W

<L,3

<TARGETID>

<DATASEG>

<DATALENGTH>

>

If both the DATASEG as well as the DATALENGTH are missing (elements with zero length), all pages of the data area are queried. If only the DATALENGTH is missing, all data on the specified start address is queried. If the TARGETID is not known, a communication error (CE) occurs S18F6: Read data, confirmation (reading device -> host) This message is used to return the requested information of the antenna head specified in the TARGETID or acknowledge the result of the request. S18F6

<L,3

<TARGETID>

<SSACK>

<DATA>

>

HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 96 of 119 S18F7: Write Data (host -> reading device, reply) This message is used for requesting the antenna head specified in the TARGETID to write data. DATASEG defines the start address of the data to be written. DATALENGTH defines the data volume of the data to be written. S18F7 W

<L,4

<TARGETID>

<DATASEG>

<DATALENGTH>

<DATA>

>

If both the DATASEG as well as the DATALENGTH are missing (elements with zero length), all pages of the data area are overwritten. If only DATALENGTH is missing or if DATALENGTH has the value zero, all data within the specified section must be written. If the TARGETID is not known, a communication error (CE) occurs. If DATASEG is missing (elements with zero length), the DATALENGTH value determines the length of the data to be written. If the length of the data to be written is greater than the value of the DATALENGTH, a communication error (CE) occurs. S18F8: WRITE DATA ACKNOWLEDGE (WDA) (reading device ->host) This message indicates whether the process for writing data on the antenna port specified in the TARGETID was successful or failed. S18F8

<L,3

<TARGETID>

<SSACK>

< L,1

<STATUSLISTE>

>

>

HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader S18F9: Read MID (host -> reading device, reply) Version 1.2 15.01.2019 Page 97 of 119 This message is used for requesting the antenna head specified in the TARGETID for reading the MID. S18F9,W

<TARGETID>

S18F10: Read MID acknowledgement (reading devicet -> host) This message returns a requested MID from the antenna head specified in the TARGETID S18F10

<L,4

<TARGETID>

<SSACK>

<MID>

< L,1

<STATUSLISTE>

>

>

The reading device can be in maintenance mode (MT) or operating mode (OP) to read the MID with the message S18F9. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 98 of 119 S18F11: Write data (host -> reading device, reply) This message is used for writing the MID on the antenna head specified in the TARGETID. S18F11,W

<TARGETID>

<MID>

The reading device must be in maintenance mode to write the MID with the Message S18F11. If the reading device is not in maintenance mode, the execution is cancelled and acknowledged with SSACK = "EE" equipment error. S18F12: Write Data, Acknowledgment (reading device -> host) This message indicates whether the process for writing the MID on the subsystem specified in the TARGETID was successful or failed. S18F12

<L,4

<TARGETID>

<SSACK>

< L,1

<STATUSLISTE>

>

>

The reading device can be in maintenance mode (MT) to write the MID with the message S18F11. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 99 of 119 S18F13: SUBSYSTEM COMMAND (host -> reading device, reply) This message is used for requesting the subsystem specified in the TARGETID for executing a specific procedure. S18F13 ,W

<L,3

<TARGETID>

<SSCMD>

<L,n 1. <CPVAL>

n. <CPVALn>

>

>

S18F14: SUBSYSTEM COMMAND, ACKNOWLEDGE (Reading device-> host) This message reports the result of the requested procedure . S18F14 ,W

<L,3

<TARGETID>

<SSACK>

< L,1

<STATUSLISTE>

>

>

HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Parameter Version 1.2 15.01.2019 Page 100 of 119 Following the list of parameters, a description of each value follows. Nr.

(DEZ) Nr.

(HEX) Parameter name Description 0 0x00 Gateway ID 1 2 3 4 5 6 0x01 Baud rate 0x02 Inter-character Timeout T1 0x03 Block protocol Timeout T2 0x04 Reply Timeout T3 0x05 Inter-block Timeout T4 0x06 Retry limit RTY 7 0x07 TARGETID high byte 8 0x08 TARGETID low byte 9 0x09 Heartbeat time 11 0x0B ReaderID HERMOS AG Gartenstrasse 19 D-95490 Mistelgau The gateway ID is part of the device ID. The reading unit simultaneously acts as gateway and reader (CIDRW with integrated read head). It corresponds to the "Lower Device-ID"

in the message header. 00 .. 255 Default: Low Byte from the hexadecimal serialnumber Data transmission rate of the RS232 interface Default: 192 19200 Baud 1 100 1/10 s Default :

(5) 0,5 s 1 250 1/10 s Default :

(30) 3 s 1 120 1 s Default :

(10) 10 s 1 120 1 s Default :

(45) 45 s Number of retry attempts for a question or message . Default :

3 High byte of the predefined TARGETID. The TARGETID is changeable and the default value is determined from the serialnumber. Default: High byte from the hexadecimal serialnumber Low byte of the predefined TARGETID. The TARGETID is changeable and the default value is determined from the serialnumber. Default: Low byte from the hexadecimal serialnumber 0 no Heartbeat The reader sends a S1F1 message to the host at specified intervals. 0 no heartbeat 1 255 1 s (1-255s) Default :

The reader ID is part of the device ID. The reader ID corresponds to the 7 LSB (least significant bits) of the "Upper Device ID" in the message header. 00 127 (0x00 0x7F) Default : 0x01 Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 12 0x0C HeadID 14 0x0E Sensor polarity for all presence sensors 18 0x12 Sensor status of all heads 19 0x13 Data length Autoread 20 0x14 Sensor delay time 21 0x15 Readmode sensor triggered reading HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Version 1.2 15.01.2019 Page 101 of 119 01 The parameter defines the 2-digit TARGETID. 00 31 Default :

Type of sensor signal to start an automatic read. The setting is applied uniformly for all sensors. 0 read process when sensor is covered 1 read process when sensor is uncovered Default :

0 The sensor status of each head is represented by a bit. The parameter can only be queried 1 Sensor is assigned 0 Sensor is not assigned Example: 0x01 Sensor at Head1 (only one sensor) is occupied The parameter determines the number of bytes read from the tag during an automatic read 0 136 (max. 17 pages !!) Default :

8 Datenbytes Delay of the sensor event before a sensor event is triggered and an automatic read operation is started. 0 255 (1/10s) 10 (1s) Default :

Read mode for reading automatically started by external input. 00 - read only one page 01 - read until the end character or empty character2) 02 - read all pages 10 - read only one page with previous sensor Check1) 11 - read until the end character / empty character with previous sensor Check 1) 2) 12 - read all pages with previous sensor Check1) 1) If the Sensor Check (10, 11 and 12) is activated, the assignment of the potential-free input is checked before initiating a read / write process. When used, the read / write process is started, otherwise the error message "NOTAG" is sent. 2) 'E' or 'F' in ID bits 0 ... 3 of the read ID Default : 00 (read only one page) Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 22 0x16 Page number for readmode 00 23 0x17 Triggered read frequency 24 0x18 r/w max repeat 25 0x19 Transponder Type 26 0x1A Sensor Activity Version 1.2 15.01.2019 Page 102 of 119 The page to read for readmode 00:

0: Read all transponders 1: Page 1 Read multipage transponders

... 17: Page 17 Read multipage transponders 240: read read-only transponder 241: read read-write transponder 0 (read all transponders) Default For a read / write error, the triggered reading frequency sets the time between two read /

write attempts for a transponder;

Read frequency in case of a triggered read (no polling).. 02 10 (1/10s) Default : 5 (0,5s) Maximum number of read and write retries 0 255 Default :

5 The parameter defines the validity of the read data of the transponder. 00 read / write type TIRIS Each transponder page consists of 8 data bytes and 2 bytes CRC checksum. The validity of the data bytes is verified by a checksum 01 A transponder page is interpreted as 10 data bytes without checksum . Default:

0 Activate / Deactivate. 0 ... Sensor not activated 1 ... sensor activated Default :

1 HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 27 0x1B Watchport fr Presence Sensor 28 0x1C Negate external output 29 0x1D Transponder load duration

(read mode) 30 0x1E r/w synchronize 33 0x21 Automatic antenna tuning 34 0x22 Sensor polarity for the individual presence sensor Version 1.2 15.01.2019 Page 103 of 119 Enables a message to the host if a sensor has been used or if the occupancy has been removed. A sensor is required to use this feature. 0 message no action 1 message Sensor assignment has been removed 2 message Sensor assignment has been detected 3 message occupancy detected and removed Default :

The output signal of the external output

(LedNo.=1) can be negated. 0 ... no signal negation 1 ... Signal negation Default: 0 3 50 (50ms) Charging time of a transponder during the reading process. The default setting should not be changed. Default :

Activates / deactivates the synchronization of the reader. When synchronization is enabled, the reader detects interference or other active readers and synchronizes the read cycle . 0 synchronization deactivated 1 synchronization activated 1 activated Default :

The parameter controls the allowed triggers of an automatic adjustment of the antenna . 0 autom. Adaption is not activated 1 ... autom. Adaption via push button TUNING 2 ... autom. Adaptation by external command 3 ... autom. Adaption via push button TUNING or external command Default:

Type of sensor signal to start an automatic read. One bit is provided for each sensor (Bit0 Sensor1 (only one input sensor)) with the following meaning 0 read when sensor is covered 1 read when sensor is uncovered Default:

0 3 HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 35 0x23 Special Features 36 0x24 Push button switches activation 37 0x25 MID Area HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Version 1.2 15.01.2019 Page 104 of 119 Bit 0: After a hardware reset, the reader will auto-read if the presence sensor is covered. 0 ... execute read operation after reset, when sensor is covered 1 ... Do not execute a read after reset, when the sensor is covered (standard) Bit 1: Trigger sensor-triggered automatic read operation 0 ... sensor triggered automatic read enabled 1 ... sensor triggered automatic read disabled Bit 2: use adjustmentvalues of LFM4x 0 ... use own adjustmentvalues 1 ... use same adjustmentvalues as LFM4x Bit 3: use green STATUS LED as power LED Bit 4: external output/LED (LedNo. =1) to be switched during read operations 0 ... external output is not influenced 1 ... external output is set during read operations Bit 5: page transfer when reading the first page of a multipage transponder 0 ... without page transfer 1 ... with page transfer Bit 6: B-message for ASC-I1 protocol 0 ... activate B-message 1 ... deaktivate B-message Bit 7: Reading and writing in testmode is indicated by LED flickering 0 ... LED flickering disabled 1 ... LED flickering enabled Default:

The parameter defines the behaviour of the two push button switches. Bit 0: activate TUNING push button Bit 1: activate TEST push button Bit 2: activate TUNING push button in operation mode Bit 3: activate TUNING push button in maintenance mode 0 ... deactivate push button 1 ... activate push button Default: 0x0F 0x19 (0001 1001) The parameter defines the range of the MID. The parameter defines the maximum number of pages of a transponder reserved for the MID. One page usually has 8 bytes of data. 010 pages Default:

2 pages Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 38 0x26 Test after software reset 40 0x28 Transponder load duration

(write mode) 41 0x29 Delay time between read cycles 42 0x2A CarrierIDOffset 43 0x3B CarrierIDLength 44 0x2C FixedMID 45 0x2D MIDFormat 48 0x30 External output LED HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Version 1.2 15.01.2019 Page 105 of 119 This parameter activates / deactivates the

.initial test of the keyboard LED's after a software reset . 0 No initial test after software reset 1 initial test after software reset Default:

0 Charging time of a transponder during the writing process. The default setting should not be changed. Default:

Delay time between two read cycles. A reduction of the delay increases the reading speed . 1 .. 250 (1 ms) Default :

10 (10ms) 50 (50ms) Sets the offset of the CID (= MID) within the MID area. The valid value range depends on the value of the MIDArea (maximum MID range) and the CarrierIDLength . 0 maximum bytes of MID - 1 Default :

0 Sets the length of the CID (= MID) within the MID area. The valid value range depends on the value of the MIDArea (maximum MID range) and the CarrierIDLength. 1 maximum bytes of MID Default :

16 Defines the read and write behavior of the CID length specified in SEMI E99-03. 0 ... Dynamic CID length The length of the MID is variable. Valid Lengths are from 1 - CID Length Bytes. 1 ... Fixed CID length The length of the MID is at CID Length established. A departure from this length leads to an error message. Default :

1 Defines the physical format of the MID data in the transponder. 0 E99 standard format left justified Default :

0 External output LED shows reading process 0 aktivate external LED 1 deaktivate external LED Default :

1 (corresponds to parameter 35) Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 49 0x31 B-Message 54 0x36 SWITCHTUNEON 55 0x37 SWITCHTUNEOFF 56 0x38 SWITCHTESTON 57 0x39 SWITCHTESTOFF 58 0x3A Push Button switch status

(read only) 59 0x3B Hardware error detection

(read only) 66 0x42 Antenna adjustment

(read only) 67 0x43 antenna powerage for all adjust steps

(read only) HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Version 1.2 15.01.2019 Page 106 of 119 Support of B-Message at ASC-I1 Protocol 0 deaktivate B-message 1 aktivate B-message Default :

0 (corresponds to parameter 35) Duration how long the push button key TUNING must be pressed until it changes to the state

"On". 1 ... 100 (100 ms) Default :

1 (100ms) Duration how long the push button key TUNING must be pressed until it changes to the state

"OFF". 1 ... 100 (100 ms) Default :

1 (100ms) Duration how long the push button key TEST has to be pressed until it changes to the state "ON". 1 ... 100 (100 ms) Default :

30 (3s) Duration how long the push button key TEST has to be pressed until it changes to the state "OFF". 1 ... 100 (100 ms) Default :

1 (100ms) The parameter is used to query the state of the push button switches Bit0: TUNING (0=OFF, 1=ON) Bit1: TEST (0=OFF, 1=ON) The read-only parameter returns the complete identifier of the current firmware. 0 no hardware error 1 detect antenna adjustment error 2 detect antenna volatage error The read-only parameter returns the antenna adjustment if there is no hardware error. 255 on hardware error 00 15 adjustment The read-only parameter returns the antenna power at a defined adjustment step of the the adjustment procedure. Only available if a automatic antenna adjustment was running before. The fist byte shows the adjustment step

(00 0F) the next two bytes shows the antenna powerage to this step. Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 68 0x44 70 0x46 71 0x47 antenna powerage of the last read/write action

(read only) Software Version String

(read only) Serial number string

(read only) 72 0x48 Hardwarerevision String

(read only) 80 0x50 Antenna tuning of the antenna 1 84 0x54 Show R/W result time 85 0x55 Show Tuning error 96 0x60 Default parameter 97 0x61 Default protocol Version 1.2 15.01.2019 Page 107 of 119 The read-only parameter returns the antenna power from the last read or write action. Only available if there was a read or write action before. The read-only parameter returns the complete identifier of the current firmware. The read-only parameter provides the complete serial number string. The read-only parameter provides the complete identifier for the hardware version. 50 (5s) By automatically adjusting the antenna, the influence of interference can be minimized. 00 ... 15 Value of the automatic adjustment Time how long the test and tune LEDs indicate the last read, write or tune result. 0 without timeout 1 ... 255 (100 ms) Default :

Provides the ability to show tuning errors detected during operation permanently without timeout (Par. 84) 0 show with timeout 1 ignore timeout and show always Default :

All (the most) parameters of the reader will be set to default values. The set protocol is retained. There is no protocol change!

0 reset all parameters to their default value 1 reset all parameters to their default value, but the network settings are retained This parameter provides information about the currently set protocol. The automatic protocol selection distinguishes between the "ASCII"

and the "SECS" protocol. Setting the parameter leads to a restart of the reader when the protocol is changed. 1 SECS/HSMS 2 ASCII Default : 2 0 HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 98 0x62 Protocol change allowed 99 0x63 Customer mode Version 1.2 15.01.2019 Page 108 of 119 This parameter can be used to allow a detected protocol change. This will then set the new default protocol and restart the device. If the protocol change is suppressed, no automatic change takes place. If the protocol change is suppressed, no automatic change takes place. 0 protocol change not allowed 1 protocol change allowed Default : 1 Special customer parameter settings that differ from the basic settings. Several parameter values are set by a customer code. The following parameters are defined:

0 device version according to SEMI E99-

0303 Par. 37 = 2 Par. 42 = 0 Par. 43 = 16 Par. 44 = 1 Par. 45 = 0 3 device version before SEMI E99-0303 Par. 37 = 1 Par. 42 = 0 Par. 43 = 8 Par. 44 = 0 Par. 45 = 0 4 device version without MID Par. 37 = 0 Par. 42 = 0 Par. 43 = 0 Par. 44 = 1 Par. 45 = 0 Default :

0 HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Examples of a SECS / HSMS message Start routine of the HSMS protocol:

Version 1.2 15.01.2019 Page 109 of 119 S1F1 Software version query S2F13 Query parameter 3 S2F15 Set parameter 3 to 5 HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Automatic reading by sensor event:

S3F5 - Material found S3F13 - MID read S3F7 - Material lost S18F5 - Read data Antenna port: 1 Page:

3 Data length: 8 HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Version 1.2 15.01.2019 Page 110 of 119 Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader S18F7 - Write data Antenna port: 1 Page:

3 Data length: 8 Data:

ABCDEFGH S18F9 - read out MID HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Version 1.2 15.01.2019 Page 111 of 119 Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader S18F11 Describe MID Version 1.2 15.01.2019 Page 112 of 119 With the message S18F11 the MID area can be described. The MID can only be written in maintenance mode. Use the S18F13 message to put the reading device into the maintenance state. S18F13 Subsystem Command Change to Maintenance Mode The reading device must first be set to maintenance mode to write to the MID area. SSCMD = ChangeState CPVAL = MT

(Maintenance) The CPVAL "OP" can be used to switch back to the normal operating mode. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Error codes Version 1.2 15.01.2019 Page 113 of 119 SSACK Name Description Cause Corrective action NO Normal operation Indicates the success of the requested operation Reader processes previous read or write request Transponder has no or too few valid ASCII characters in the MID area Parameters for MID range do not match the transponder data Wrong reader mode

(MANT / OP) for functional operation List format, list set or data type is wrong Data sent with a command is incorrect Send parameter is not implemented or out of range EE Execute Error Transponder data and read ID sequence cannot be read CE Communication Error Syntax error with message or message format or wrong value no Please wait until previous query is finished Program transponder with valid ASCII characters in the MID area Adjust reader parameter for MID area according to transponder data area for MID Switch to proper mode

(MANT to write MID) Check SECS message syntax Check command syntax and data Check parameter syntax and value HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Wiring of the external output Version 1.2 15.01.2019 Page 114 of 119 The external output of the reader is switched accordingly when an external read or write is triggered, depending on internal parameter 48. Please ask HERMOS for deactivation!

Picture 1: external successful read Picture 2: external failed read HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 12. Service and Troubleshooting Version 1.2 15.01.2019 Page 115 of 119 General information Follow the basic safety instructions in the chapter Safety instructions. The maintenance of the reading device and its components may only be performed by the manufacturer Observe the instructions in this section when errors occur. Do not perform any further troubleshooting measures in addition to the described measures. In case of doubt concerning errors and handling them, contact the manufacturer. Troubleshooting personnel Troubleshooting must only be performed by specially trained personnel. In case of doubts concerning the necessary qualifications, contact the manufacturer. The handling of device errors by untrained personnel as well as the incorrect handling of the device can result in personal injuries as well as damages to the reading device and/or connected devices.. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Safety instructions Version 1.2 15.01.2019 Page 116 of 119 All components of the antenna oscillating circuit carry high voltage. Only use spare parts specified by the manufacturer. Unauthorised substitution of parts can result in fire, electric shock or other hazards. Electrostatic charges damage electronic components within the device. ESD protective measures must be applied prior to opening the unit. Carefully remove the housing covers to prevent damage. Do not operate the device when the housing is open. Never short circuit the fuse! This may result in fire or damages on the device. Only use fuses specified by the manufacturer HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Error indications on the device Power-LED is off Version 1.2 15.01.2019 Page 117 of 119 Depending on parameter 35, the green status LED is used as the power LED Check the power supply and the connecting cables!

Remove the power adapter. Open the case and check the fuse. Replace the fuse with a fuse specified by the manufacturer!

If the above measures do not resolve the problem, contact the manufacturer. Red tuning LED is flashing quickly If a antenna failure is detected while a read or write action, the fast flashing red tuning LED indicates the antenna or tuning error Press the tuning push button to trigger a new tuning If a new tuning does not help change the antenna position and trigger tuning again. In the case of a recurring error, in the worst case, the antenna must be replaced Red tuning LED is on If a tuning process does not find a suitable antenna tuning, than the red tuning LED indicates the tuning error Press the tuning push button to trigger a new tuning If a new tuning does not help change the antenna position and trigger tuning again. In the case of a recurring error, in the worst case, the antenna must be replaced No communication with the reading device Check the interface connection cable for damage and correct connection!

Check the power LED is lit, and make sure that the status indicator does not indicate an error. Try to read in the reader with the HERMOS Device-Discoverer and check the device settings. HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader Version 1.2 15.01.2019 Page 118 of 119 If the above measures do not correct the error, please contact the manufacturer. Software releases Release-date Version 16.11.2018 LFMPI1.0 (ASCII) LFMP10 (SECS/HSMS) Description Initial release Customer service HERMOS AG Track & Trace RFID Division Gartenstrae 19 D-95490 Mistelgau Germany Tel. Fax E-Mail URL:

+49 (0) 9279 991 - 0

+49 (0) 9279 991 - 100 rfid@hermos.com http://www.hermos.com/de/produkte/rfid/

HERMOS AG Gartenstrasse 19 D-95490 Mistelgau Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 Protocol description ASCII, SECS/HSMS Customer manual LFM LP Reader 13. Disassembly and storage Disassembly Storage Version 1.2 15.01.2019 Page 119 of 119 Remove the power supply Remove all cables Loosen and remove the mounting screws Remove the reading device from the installation area Store the reading device and its components in a clean and dry environment. Make sure that the power supply has been removed. Observe the required storage conditions specified in the technical data. 14. Transport and disposal Transport Use a solid cardboard box for the transport. Use enough cushioning material to protect the device on all sides. Disposal The device and its components are made of various materials. Disconnect the electronic components from the housing and dispose of them separately. Do not dispose of the unit in normal household waste. Dispose of the materials separately and according to the legal regulations of your country. Housing and attachments as plastic waste Electronic components, antennas and cables as electronic waste Tel. +49(9279) 991-0 Fax. +49(9279) 991-100 HERMOS AG Gartenstrasse 19 D-95490 Mistelgau