checklist...– if en 54-16 devices and non-en 54-16 devices (e.g. a cd player for background music)...

EN 54-16

en Installer checklist

Table of contents

1 Emergency Sound System 42 List of authorized end-users 63 EN 54-16 73.1 4 General requirements 73.2 5 General requirements for indications 93.3 6 The quiescent condition 113.4 7 The voice alarm condition 113.5 8 Fault warning condition 143.6 10 Voice alarm manual control (option with requirements) 213.7 11 Interface to external control device(s) (option with requirements) 233.8 12 Emergency microphone(s) (option with requirements) 233.9 13 Design requirements 243.10 14 Additional design requirements for software controlled VACIE 383.11 15 Marketing 443.12 16 Tests 44

EN 54-16 Table of Contents | en 3

Installer checklist 21-Sep-2015 | 01 |

Emergency Sound SystemBOSCH has made a great effort for the design and manufacturing of the components and alsosupplies all documentation that enables the assembly of a safe and high quality emergencyunit in accordance with EN 54-16. BOSCH has made up this list of requirements, based on thestandard, which needs to be filled in and subsequently signed off by both parties. The signedpaper has the nature of a certificate and can have significant meaning in the case of a legalinvestigation of the liability issue for personal injuries. – The safety of the system in accordance with EN 54-16 in an alarm and emergency

application does not only depend on component safety, but also highly on the installationengineer and the operator. For example, the sound pressure level of the system dependson the installation. Moreover, the system should only be installed and operated byqualified personnel.

– Modifications of the system should only be executed by authorized persons in accordancewith the safety concept and need to be registered in the system documentation.

– If EN 54-16 devices and non-EN 54-16 devices (e.g. a CD player for background music) areassembled in one cabinet, it must be marked which devices belong to EN54-16 and whichdevices do not.

– Only use a UPS compliant to the current standards and legislation in combination withthe PAVIRO System.

– The end-user must maintain a journal for the system.– The installer is responsible for security measures to prevent improper use of the system.– BOSCH refuses any liability for damage that might result from non-observance of these

instructions.– The installer has to ensure that he uses certified firmware running on the devices.

Information, which firmware versions are applicable can be seen at the web page.

Notice!

The EN 54-16 is a standard referring to products, for an installation the project-depending

country-specific standards must be observed.

1

4 en | Emergency Sound System EN 54-16

21-Sep-2015 | 01 | Installer checklist

Herewith the undersigned states that he/she has processed for him/her applicablerequirements, as specified in this document, in an adequate way and has confirmed this factby signing the right most column of each requirement.

Installer End-User

Name _____________________ Name _____________________

Signature _____________________ Signature _____________________

Date _____________________ Date _____________________

Place _____________________ Place _____________________

The installer is only allowed to affix a VACIE label on the applied cabinet of a PAVIRO system,wherein the controller has been installed, after the installer has completed, dated and signedthe checklist for EN 54-16 and has clearly indicated on the VACIE label the year in which theVACIE label actually has been affixed on the cabinet. A copy of the completed checklist is tobe returned to the regional Bosch office. To ensure compliance to classification IP30 of EN60529, make sure that the selected cabinet is compliant, and also pay attention to cableglands, ventilation grilles and connection to the wall. Keep in mind that access to thecontrolling and indicating equipment (e.g. PVA-15CST) is access level 2 (protected by a lock)and that the rear of the equipment is access level 3 (protected by a different or additionallock).Racks that are allowed within this EN54-16 system certification are listed on the originalcertificate. Please refer to this certificate to ensure the correct rack is used and refer to themanufacturer's site, instructions for use and sales technicians for information on correct IP30compliant mounting and accessories that are needed to safeguard all aspects of the selectedrack. The installer must ensure that all open areas and holes of the used racks which do notcomply with IP30 are closed. Use compatible cable glands, climate control, etc. Calculateample climate control (temperature dependent ventilation) for the rack and charger(s). Orderthe fan pack with thermal control.

EN 54-16 Emergency Sound System | en 5

Installer checklist 21-Sep-2015 | 01 |

List of authorized end-users

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

Name: _____________________________

2

6 en | List of authorized end-users EN 54-16

21-Sep-2015 | 01 | Installer checklist

EN 54-16

4 General requirements

Clause/Requirement EN 54-16:2008 Compliance Signature

4 General requirements

4.1 General

4.1.1 If an optional function with requirements isincluded in the VACIE, then all thecorresponding requirements shall be met.

The following optional functions, with requirements, areincluded in PAVIRO from software Version IRIS-NetV3.0.0 upwards– Audible warning (7.3)– Phased evacuation (7.5)– Manual silencing of the voice alarm condition

(7.6.2)– Manual reset of the voice alarm condition (7.7.2)– Voice alarm condition output (7.9)– Indication of faults related to the transmission path

to the CIE (8.3)– Indication of fault related to voice alarm zones (8.4)– Voice alarm manual control (10)– Emergency microphone(s) (12)– Redundant power amplifiers (13.14)The following optional functions with requirements arenot included in PAVIRO and are not used:– Delay(s) to entering the voice alarm condition (7.4)– Output to fire alarm devices (7.8)– Disabled condition (9)– Interface to external control device(s) (11)

4.1.2 If functions other than those specified inthis European Standard are provided, theyshall not jeopardize compliance with anyrequirements of this European Standard.

The installer has to ensure that additional functions likebackground music do not influence compliance. Forother functions such as announcements, chimes orstored messages the priority must be observed.

3

3.1

Installer checklist

21-Sep

-2015 | 01 |

EN

54-16E

N 54-16 | en

7


4.2 Combined VACIE and CIE No signaturenecessary in this line.

When the VACIE and CIE are combined theymay share common indications, manualcontrols and outputs (see Annex F). In thiscase, the following shall apply:

No signaturenecessary in this line.

a) a single fault in the CIE shall not adverselyaffect the mandatory functions of the VACIE;

The installer has to ensure to configure the systemaccordingly.

b) indication(s) and manual control(s) of thevoice alarm condition shall be clearlyidentifiable, with the exception of theoptional audible warning.

Indications and controls are not shared.

4.3 Power supply

Power supply equipment, external orincluded in the VACIE, shall comply with therequirements of EN 54-4.NOTE The power supply may be shared withthat of the fire detection and fire alarmsystem.

It is the responsibility of the installer to use powersupplies and battery charging equipment in accordancewith EN 54-4. The installer has to ensure that thecapacity of power supplies operates with sufficientheadroom.The power supply may be shared with that of a firedetection system, but when operated with a battery thefire detection and the fire alarm system must beincluded into the capacity calculation.

21-Sep

-2015 | 01 |Installer checklist

8en | E

N 54-16

EN

54-16

5 General requirements for indications


5.1 Display and functional conditions

5.1.1 The VACIE shall be capable ofunambiguously indicating the followingfunctional conditions, as described inClauses 6 to 9:– quiescent condition;– voice alarm condition;– fault warning condition;– disablement condition (option with

requirements)

The emergency CALL STATIONs indicate the "voicealarm condition" (must be configured) with the redLED (Alarm) and the "fault warning condition" withthe yellow LED (Fault). If both LED are off thesystem is in the "quiescent condition" and the greenLED (Power) must be on.The PAVIRO system does not support the„disablement condition“.The installer has to ensure that the system providesthe required indications. This can be solved e.g. byincluding a CALL STATION.

5.1.2 The VACIE shall be capable of beingsimultaneously in any combination of thefollowing functional conditions on differentvoice alarm zones:– voice alarm condition;– fault warning condition;

The PAVIRO system is capable of beingsimultaneously in the „voice alarm condition“ and inthe „fault warning condition“.

No signature necessary inthis line.

5.2 Indications displays

All mandatory indications shall be clearlyidentifiable, except where otherwisespecified in this European Standard.

Mandatory indications are clearly identifiable bysystem default.


5.3 Indication on alphanumeric displays

3.2

Installer checklist

21-Sep

-2015 | 01 |

EN

54-16E

N 54-16 | en

9


Where an alphanumeric display is used todisplay indications relating to differentfunctional conditions these may bedisplayed at the same time. However, foreach functional condition there shall be onlyone window, in which all of the informationrelating to that functional condition isgrouped.

The LC display of the emergency CALL STATIONsindicates status conditions and fault details of thesystem.If a fault occurs in the system, the faults aredisplayed automatically. The information related toemergency has precedence over the faultsinformation.Note: See chapter 8.

5.4 Indication of the supply of power

5.4.1 A visible indication shall be given by meansof a separate discrete light-emittingindicator while the VACIE is supplied withpower.

Each PAVIRO system component has a green powerLED. The LED is on when the component is suppliedwith power.


5.4.2 Where the VACIE is distributed in more thanone cabinet, an indication of supply ofpower to each distributed cabinet shall begiven at that point.

Each PAVIRO system component has a green powerLED. The LED is on when the component is suppliedwith power.


5.5 Additional indications

Where additional indications are provided,they shall be clearly identifiable and shallnot override the primary indication of theVACIE.

All of the additional indications are clearly identified(description in the User manuals of the PAVIROsystem); since the fault warning indication and thevoice alarm indication always do have separateindicators, the primary indications are notoverridden. The display of the CALL STATION offersa menu that is also used for other indications thanindication of the voice alarm and/or fault warningcondition. The Installation and User Instructions ofthe PAVIRO system CALL STATIONs clearlyidentifies the other indications of the menu. Theother menus do not override the emergency andfaults information.


21-Sep


10en | E

N 54-16

EN

54-16

6 The quiescent condition


6 The quiescent condition

Any kind of system information may bedisplayed during the quiescent condition.However, no indications shall be given whichcould be confused with indications used in the– voice alarm condition– fault warning condition– the disablement condition (option with

requirements).

All of the additional indications are clearly identified(description in the User manuals of the PAVIROsystem); since the fault warning indication and thevoice alarm indication always do have separateindicators, the primary indications are notoverridden.


7 The voice alarm condition


7.1 Reception and processing of fire signals

7.1.1 The VACIE shall be capable of receiving andprocessing alarm signals from the CIE or frommanual control on the VACIE or both, andcausing the appropriate voice alarm outputs tobe activated within 3 s or on expiry of any delayperiod (see 7.4).

The installer has to ensure the maximum 3 seconddelay time is observed.Note: Task Engine Debounce/Timer/SupervisionBlock

7.1.2 The mandatory indications and or outputs shallnot be falsified by multiple alarm signalsreceived simultaneously from the CIE and/ormanual controls.

The PAVIRO system offers 100 discrete priorities.Correct configuration assures that mandatoryindications, and outputs behave consistently whenmultiple alarm signals are received simultaneouslyfrom the CIE and/or manual controls.

3.3

3.4

Installer checklist

21-Sep

-2015 | 01 |

EN

54-16E

N 54-16 | en

11


7.1.3 Where the VACIE and CIE are in separatecabinets, failure of the transmission pathbetween the CIE and the VACIE shall not resultin any loss of control or any change of state ofthe VACIE.

PAVIRO is an autonomous subsystem that canoperate without connection to the CIE. The effectof the failure of the transmission path betweenthe CIE and the PAVIRO system is limited to faultreporting and losing interaction between the CIEand the PAVIRO system. The installer has toensure that a fault of the transmission path startsor stops an alarm signal/alarm message.

7.2 Indication of the voice alarm condition

7.2.1 The presence of a voice alarm condition shall beindicated on the VACIE, without prior manualintervention, by:


a) a visible indication by means of a separatediscrete light emitting indicator (the GeneralVoice Alarm Activated indicator) and

A voice alarm condition is indicated on the PAVIROsystem by a red LED (Alarm) indicator on allemergency CALL STATIONs. The installer has toensure to configure the alarm conditionaccordingly.

b) a visible indication for each activated voicealarm zone where manual controls are provided(see 10.2);

The red zone LED's on the emergency CALLSTATION indicates activated voice alarm zones

NOTE This may be by means of separate discreteindicators or an alphanumeric display asspecified in 13.8.


7.3 Audible warning (option with requirements) The emergency CALL STATION uses for audiblewarning a different frequency than for faultwarning. Audible warning has a higher prioritythan fault warning.Note: Regarding the sound pressure level seerequirement 13.10.2.

7.5 Phased evacuation (option with requirements)

21-Sep


12en | E

N 54-16

EN

54-16


The VACIE may have a provision to phase thewarning signals to the emergency loudspeakerzones. The facility shall be configurable ataccess level 3. There may be provision to switchon and switch off the phased evacuationsequence by means of a manual operation ataccess level 2 (see Annex A for information onaccess levels).

Phased evacuation is possible by using differentcontrol contacts from CIE. Every contactrepesents an emergency zone. The installer has toensure to configure the correct settings at thePVA-4CR12 "PAGINGS" dialog. If a system needsthe provision to switch on and switch off thephased evacuation sequence by means of amanual operation the installer has to configure theTask Engine accordingly. We suggest to label thebutton with "P-EVAC OFF".

7.6 Silencing of the voice alarm condition

7.6.1 Silencing of the voice alarm condition from theCIE


7.6.1.1 Where the voice alarm condition has beentriggered from the CIE, the VACIE shall respondappropriately to a silence instruction from theCIE.

Voice alarm triggered from the CIE can also besilenced from the CIE. The installer has to ensureto configure the system according therequirement.

7.6.1.2 The silencing procedure may allow for thecompletion of messages in the process of beingbroadcast.

The silencing will be done immediately or afterbeing broadcasted.

7.6.2 Manual silencing of the voice alarm condition

It may be possible to manually silence the voicealarm message from the VACIE at access level 2.In this case, following manual silencing, it shallbe possible to re-activate the voice alarmmessage at access level 2.

The installer has to configure the systemaccordingly.

7.7 Reset of the voice alarm condition

7.7.1 Reset of the voice alarm condition from the CIE No signaturenecessary in this line.

Installer checklist

21-Sep

-2015 | 01 |

EN

54-16E

N 54-16 | en

13


Where the voice alarm condition has beentriggered from the CIE, the VACIE shall respondappropriately to a reset instruction from the CIE.

The installer has to ensure that a separate inputfrom the CIE is configured for resetting the alarmcondition.

7.7.2 Manual reset of the voice alarm condition(option with requirements)


7.7.2.1 It shall be possible to reset the voice alarmcondition from the VACIE at access level 2 bymeans of a separate manual control. This controlshall be used only for reset and may be the sameas that used for reset from the fault warningcondition.

The installer has to ensure to configure a separateCALL STATION button to reset the voice alarmcondition. This manual reset function must have ahigher priority than the CIE contact.

7.7.2.2 Following a reset operation, the indication of thecorrect functional condition corresponding toany received signals shall either remain or be re-established within 20 s.

After a reset operation, the PAVIRO system willimmediately indicate the functional condition it iscurrently in. It will also immediately respond toreceived signals that will bring it into anotherfunctional condition. The installer has to ensurenot to add to much delay.

7.9 Voice alarm condition output (option withrequirements)

The VACIE may have provision for transmitting asignal that is in the voice alarm condition. In thiscase, it shall activate the output only in the voicealarm condition.

The installer has to ensure that the PAVIRO systemtransmits a signal that it is in the voice alarmcondition via control output contact which has tobe configured.

8 Fault warning condition


8 Fault warning condition

8.1 Reception and processing of fault signals

3.5

21-Sep


14en | E

N 54-16

EN

54-16


8.1.1 The VACIE shall enter the fault warningcondition when signals are received which,after any necessary processing, areinterpreted as a fault.

When the PAVIRO system receives a supervisionfault signal (i.e. detects a fault in the system), thefault warning condition is entered. The installer hasto ensure that faults are configured accordingly.

8.1.2 The VACIE shall be capable ofsimultaneously recognizing all of the faultsspecified in 8.2 and, if provided, in 8.3unless this is prevented by:– the presence of an alarm output signal

on the same voice alarm zone

The installer has to ensure to include only faultmessages into the fault handling.The PAVIRO system is capable of recognizing all ofits system faults simultaneously. The PAVIRO systemis able to recognize faults in a voice alarm zone evenwhen there is an alarm output signal on the zone.

8.1.3 The VACIE shall enter the fault warningcondition within 100 s of the occurrence ofany fault, or the reception of a fault signal orwithin another time as specified in thisEuropean Standard or in other parts of EN54.

The PAVIRO system recognizes and reports all faultswithin the time defined in EN 54.The installer has toensure that faults are configured accordingly.

8.2.1 The presence of faults in specified functionsshall be indicated on the VACIE withoutprior manual intervention. The fault warningcondition is established when the followingare present:


a) a visible indication by means of aseparate light emitting indicator (the generalfault warning indicator);

The PAVIRO system provides a visible indicationwhen it is in the fault warning condition via theyellow LED (Fault) of the emergency CALLSTATIONs, and via the yellow front panel LED(Fault) of the PAVIRO CONTROLLER.

b) a visible indication for each recognizedfault as specified in 8.2.4, and 8.2.5, 8.2.6,8.2.7, if provided, and 8.3;

The PAVIRO system offers visual indication ofindividual faults at the LC display or via additionalLEDs on emergency CALL STATIONS.

Installer checklist

21-Sep

-2015 | 01 |

EN

54-16E

N 54-16 | en

15


c) an audible indication, as specified in 8.4. The PAVIRO system provides an audible faultindication when it is in the fault warning conditionvia sounder at the emergency CALL STATION. Incase of CALL STATION fault it additionally indicatesthe fault warning condition via sounder at thePAVIRO CONTROLLER.

8.2.2 If the indication is on an alphanumericdisplay, which cannot simultaneouslyindicate all of the faults because of itslimited capacity, at least the following shallapply:


a) the presence of fault indications whichhave been suppressed shall be indicated;

The first line shows the total quantity of activefaults, the other lines indicate fault details.

b) suppressed fault indications shall becapable of being displayed by means of amanual operation at access level 1 or 2which interrogates only fault indications.

The next error is displayed each time you press the(ESC) fault button. After the last error, the displaybegins again from the beginning.


8.2.3 The following faults shall be indicated bymeans of separate light emitting indicatorsand/or an alphanumeric display:


a) an indication at least common to anypower supply fault resulting from:1) a short circuit or an interruption in atransmission path to a power supply (item Lof Figure 1 of EN 54-1), where the powersupply is contained in a different cabinetfrom that of the VACIE, and2) the power supply faults as specified in EN54-4;

The installer has to ensure that all Power faults areindicated on the LCD of the emergency CALLSTATION.

21-Sep


16en | E

N 54-16

EN

54-16


b) an indication at least common to anyearth fault of less than 50 kΩ which iscapable of affecting a mandatory function,and which is not otherwise indicated as afault of a supervised function;

The installer has to ensure that all Ground faultsfrom the amplifier outputs are indicated on the LCDof the emergency CALL STATION.

c) an indication of the rupture of any fusewithin the VACIE, or the operation of anyprotective device within the VACIE which iscapable of affecting a mandatory function inthe fire alarm condition;

Every rupture of a fuse or the operation of aprotected device that affects a mandatory functionwill result in a fault since the mandatory functionsare supervised.

d) an indication of any short circuit orinterruption, at least common to alltransmission paths between parts of theVACIE contained in more than one cabinet,which is capable of affecting a mandatoryfunction and which is not otherwiseindicated as a fault of a supervised function.

The installer has to ensure that the transmissionpaths between the cabinets are supervised if thecabinets used for one system are not mounted inone room.

Note: These indications from 8.2.3 may besuppressed during the fire alarm condition.


8.2.4 The following faults shall be indicated atleast by means of the general fault warningindicator:


a) any short-circuit or interruption in a voicealarm transmission path between parts ofthe VACIE contained in more than onecabinet even where the fault does not affecta mandatory function;

The installer has to ensure that the transmissionpaths between the cabinets are supervised if thecabinets used for one system are not mounted inone room.

b) any short-circuit or interruption in thevoice alarm transmission path to theemergency microphone capsule, if provided;

The installer has to ensure that the supervision ofthe emergency CALL STATION microphone isactivated.

Installer checklist

21-Sep

-2015 | 01 |

EN

54-16E

N 54-16 | en

17


c) any short-circuit or interruption in thevoice alarm transmission path between theVACIE and loudspeakers even where thefault does not affect the operation ofloudspeakers.

The installer has to ensure that the loudspeakerlines are permanently supervised by one of thefollowing options:– PLN-1EOL– PVA-1WEOL– Permanent impedance measurement

d) any short-circuit or interruption in thetransmission path between the VACIE andfire alarm devices when used.

The installer has to ensure that the path to firealarm devices are supervised.Note: E.g. with supervised control inputs.

e) failure of any power amplifier. The installer has to ensure that the supervision ofthe amplifiers is activated.

8.3 Indication of faults related to thetransmission path to the CIE (option withrequirements)

The VACIE may have provision for anindication of faults related to thetransmission path to the CIE. In this case,the shortcircuit or interruption of thetransmission path to the CIE shall beindicated by means of a separate lightemitting indicator and/or an alphanumericdisplay.

The installer has to ensure that the path to the CIEis supervised.Note: E.g. with supervised control inputs.

8.4 Indication of faults related to voice alarmzones (option with requirements)

21-Sep


18en | E

N 54-16

EN

54-16


The VACIE may have provision for anindication of faults related to voice alarmzones. In this case the short-circuit orinterruption of a voice alarm transmissionpath between the VACIE and theloudspeakers in that zone shall be indicatedby means of a separate light emittingindicator per zone and/or an alphanumericdisplay.

The PAVIRO system is able to indicate eachloudspeaker zone failure at the emergency CALLSTATION display by indicating the zone number. Theinstaller has to ensure that each amplifier may onlybe part of one voice alarm zone.

8.5 System fault

A system fault is a fault as specified in 14.4or 14.6 in the case of software controlledVACIE. A system fault may preventrequirements of this European Standard,other than those specified below, frombeing fulfilled. In the event of a system faultat least the following shall apply:


a) a system fault shall be visibly indicated bymeans of the general fault warning indicatorand a separate light emitting indicator onthe VACIE. These indications shall not besuppressed by any other functionalcondition of the VACIE and shall remain untila manual reset and/or another manualoperation at access level 2 or 3;

The installer has to ensure that the DEL button onthe emergency CALL STATION needs to beconfigured as system fault reset. The yellow LED ofthis button indicates a system fault. The buttonneeds to be clearly marked being related to systemfault.Note: We recommend to label the system fault key:„System Fault“

b) a system fault shall be audibly indicated.This indication may be capable of beingsilenced.

The Installer has to enable the sounder of theemergency CALL STATION. The sounder can besilenced by pressing the fault (ESC) button.

8.6 Audible indication

Installer checklist

21-Sep

-2015 | 01 |

EN

54-16E

N 54-16 | en

19


8.6.1 The audible indication of faults required in8.2 shall be capable of being silencedmanually at access level 1 or 2 at the VACIE.The same manual operation may be used asfor silencing the voice alarm condition.

The sounder in the emergency CALL STATION whichis used for failure indication can be silenced bypressing the fault (ESC) button.


8.6.2 The audible indication shall be silencedautomatically if the VACIE is automaticallyreset from the fault warning condition.

If the PAVIRO system is reset from the fault warningcondition, the sounder is automatically silenced.


8.6.3 If previously silenced, the audible indicationshall resound for each newly recognizedfault.

The sounder used for audible indication startssounding again every time a new failure occurs.


8.7 Reset of fault indications

8.7.1 Indications of faults as required in 8.2 shallbe capable of being reset


a) automatically when faults are no longerrecognized, and/or

The indication of faults is reset automatically whenfaults are no longer recognized.


b) by a manual operation at access level 2. Reset of system fault can be carried out viadedicated configured CALL STATION button.

8.7.2 Following reset as specified in 8.7.1, theindication of the correct functionalconditions corresponding to any receivedsignals shall either remain or be re-established within 20 s.

PAVIRO fault indication will remain or be re-established within 20 s.


8.8 Transmission of the fault warning condition

The VACIE shall have provision fortransmitting, by means of at least generalfault signal, all faults specified in 8. Thisfault signal shall also be given if the VACIE isde-energized.

There is a fixed defined potential free outputcontact at the PAVIRO CONTROLLER (Ready Relaison Control Output Connector) which gives acollective fault signal. This contact is also activewhen the system is de-energized

21-Sep


20en | E

N 54-16

EN

54-16

10 Voice alarm manual control (option with requirements)


10.1 General requirements

The VACIE may have provision for manuallyactivating the voice alarm output condition.If a voice alarm output control facility isprovided the following shall apply:

Note: We recommend to label the voice alarmmanual control key: „Start Alarm“


a) a manual control which causes a voicealarm output condition to be given shall onlybe accessible at access level 2 and

The Installer has to ensure to configure access level2 for the manual control.

b) it shall be possible to activate each voicealarm zone individually and/or in group(s) ofvoice alarm zones;

The Installer has to ensure to configure the systemaccordingly.

c) the manual activation of a voice alarmzone shall not prevent the mandatoryindications and outputs to other voice alarmzones.

PAVIRO will prevent mandatory indications. No signature necessary inthis line.

10.2 Indication of the voice alarm zones in anactivated condition

The indication for the voice alarm conditionin the voice alarm zone(s) associated witheach manual control shall be availablewithout any manual action and shall not besuppressed. This indication shall be bymeans of


a) a separate light emitting indicator (theGeneral Voice Alarm Output activatedindicator), and

The voice alarm condition is indicated on thePAVIRO system by a red indicator on the emergencyCALL STATIONs (the alarm LED). The installer hasto ensure to configure the emergency CALLSTATIONs accordingly.

3.6

Installer checklist

21-Sep

-2015 | 01 |

EN

54-16E

N 54-16 | en

21


b) a separate light emitting indicator and/oralphanumeric display for each voice alarmzone and/or an indication for group(s) ofvoice alarm zones.

A separate light emitting indicator is available foreach voice alarm zone and/or group(s) of voicealarm zones.


NOTE These indicators may not necessarilyindicate which emergency message is beingbroadcast in each voice alarm zone.


10.3 Indication of the voice alarm zones in faultcondition

The indication for the fault condition whichwould prevent the generation andtransmission of the voice alarm signal to thevoice alarm zone(s) associated with eachmanual control shall be available withoutany manual action and shall not besuppressed. This indication shall be by


a) a separate light emitting indicator (thegeneral fault indicator), and

The fault condition is indicated on the PAVIROsystem by a yellow indicator on all emergency CALLSTATIONs (the fault LED).

b) an indication for each voice alarm zoneand/or an indication for defined group(s) ofzones.

Individual faults for each voice alarm zone areindicated at the emergency CALL STATION display.The installer has to ensure to configure the systemaccordingly.

21-Sep


22en | E

N 54-16

EN

54-16

11 Interface to external control device(s) (option with requirements)


The VACIE may have provision for interfacing to externalcontrol devices(s) such as standardized user interfacesrequired by local regulations.a) the interface shall allow only access level 1 and 2functions;b) the mandatory functions of the VACIE shall not beoverridden;c) any short circuit, interruption or earth fault in thetransmission path to the external device(s) shall:1) not prevent the mandatory function of the VACIE and2) be indicated on the VACIE, at least by means of thegeneral fault warning indicator.NOTE The external control devices should comply withavailable local codes, European Standards or nationalstandards.

Not supported No signature necessary in thisline.

12 Emergency microphone(s) (option with requirements)


The VACIE may have provision for emergencymicrophone(s). In this case the emergencymicrophone(s) shall have

No signature necessary in thisline.

a) priority over all inputs, including pre-recordedmessages,

An emergency microphone can be configured from 0(lowest priority) to 100 (highest priority). Theinstaller has to ensure that the priority of theemergency microphone is higher than the prioritiesof other signals including pre-recorded messages.Higher priorities overrule lower priorities in case ofresource or destination conflicts. Calls with thesame priority operate on first come first serve basis.

3.7

3.8

Installer checklist

21-Sep

-2015 | 01 |

EN

54-16E

N 54-16 | en

23


b) an emergency microphone control to open themicrophone channel, at access level 2;

The Installer has to ensure to configure access level2 for the emergency microphone.

c) where a pre-announcement attention drawingsignal is provided, an indicator adjacent to themicrophone shall show when the signal hasfinished and live speech can commence, and

A emergency CALL STATION has an LC displaywhich indicates an active pre-chime. If the pre-chime signal has finished, the display shows"announcement".Note: Pre-announcement signal is mixed with livespeech.


d) when the emergency microphone control isoperated, any audible indication that mightinterfere with the use of the microphone shall beautomatically muted.

The sounder of the CALL STATION will be switchedoff automatically when a call is made. The installerhas to ensure to switch off any loudspeaker nearthe emergency microphone.

e) where the VACIE has provision for theconnection of more than one emergencymicrophone, they shall be configurable forpriority at access level 3 or 4 and only oneemergency microphone shall be active at any onetime

An emergency microphone can be configured from 0(lowest priority) to 100 (highest priority). Higherpriorities overrule lower priorities in case ofresource or destination conflicts. Calls with thesame priority operate on first come first serve basis.

13 Design requirements


13.1 General requirements and manufacturer’sdeclarations

13.1.1 The VACIE shall comply with the designrequirements of this clause, where relevant tothe technology used. Some requirements canbe verified by testing. Others can only beverified by inspection of the design and itsaccompanying documentation because of theimpracticability of testing all of the possiblecombinations of functions and of establishingthe long-term reliability of the VACIE.

No signature necessaryin this line.

3.9

21-Sep


24en | E

N 54-16

EN

54-16


13.1.2 In order to assist the process of designinspection, the manufacturer shall declare thefollowing in writing:


a) that the design has been carried out inaccordance with a quality managementsystem which incorporates a set of rules forthe design of all elements of the VACIE;

The BOSCH development department responsiblefor development/maintenance of the PAVIRO system- part of the EVI Audio GmbH - works according toISO 9001.


b) that the components of the VACIE havebeen selected for the intended purpose andare expected to operate within theirspecification when the environmentalconditions outside the cabinet of the VACIEcomply with Class 3k5 of EN 60721-3-3:1995 +A2:1997.

The components of the PAVIRO system operatewithin their specification within the specifiedenvironmental conditions (Class 3k5 of EN60721-3-3:1995 + A2:1997). It is the responsibilityof the installer that other parts of the system, e.g.the 19”-racks, comply with this requirement.


13.2 Documentation

13.2.1 The manufacturer shall prepare installationand user documentation which shall besubmitted to the testing authority togetherwith the VACIE. This shall comprise at leastthe following:

The PAVIRO user manuals and the installer checklistare provided.


a) a general description of the equipment,including a list of1) the optional functions with requirements ofthis European Standard,2) the functions relating to other parts of EN54, and3) the ancillary functions not required by thisEuropean Standard;

The user manual of the PAVIRO CONTROLLERcontains a general description of the PAVIROsystem. The installer checklist (this document)describes all functions related to EN 54-16.


Installer checklist

21-Sep

-2015 | 01 |

EN

54-16E

N 54-16 | en

25


b) technical specifications of the inputs andoutputs of the VACIE, sufficient to permit anassessment of the mechanical, electrical, andsoftware compatibility with other componentsof the system (e.g. as described in EN 54-1),including where relevant1) the power requirements for recommendedoperation,2) the maximum number of voice alarm zones,3) information concerning the connection ofemergency microphones,4) the maximum and minimum electricalratings for each input and output,5) information on the communicationparameters employed on each transmissionpath,6) recommended cable parameters for eachtransmission path, and7) fuse ratings;

The inputs and outputs for audio and control aredescribed in the user manual including the technicaldata, system functions, configuration instructions,compliancy to standards.


c) specified means to limit the consequencesof fault (see 13.5.2);

The user manual describes all means to limit theconsequences of fault.


d) configuring and commissioninginstructions;

Configuration instruction are included in the usermanual and IRIS-Net software help file,commissioning instructions are in this checklist.


e) operating instructions; Operating instructions are included in the usermanual


f) maintenance information. Maintenance information of the PAVIRO system isincluded in the user manual.


21-Sep


26en | E

N 54-16

EN

54-16


13.2.2 The manufacturer shall prepare designdocumentation that shall be submitted to thetesting authority together with the VACIE. Thisdocumentation shall include drawings, partslists, block diagrams, circuit diagrams and afunctional description to such an extent thatcompliance with this European Standard maybe checked and that a general assessment ofthe mechanical and electrical design is madepossible.

All of the mentioned design documentation isavailable as for inspection by testing authorities.


13.3 Mechanical design requirements

13.3.1 The cabinet of the VACIE shall be of robustconstruction consistent with the method ofinstallation recommended in thedocumentation. It shall meet at leastclassification IP30 of EN60529:1991+A1:2000.

The emergency CALL STATION complies with thisrequirement. The installer has to ensure forimplementing this requirement for 19”-units, bymeans of using a correct 19”- frame, meeting atleast classification IP30 of EN 60529:1991+A1:2000.

13.3.2 All interconnections and settings inside thecabinet shall be accessible at level 3.

The installer has to ensure to install the system in acompliant rack with restricted access to the rearpanels.

13.3.3 The VACIE may be housed in more than onecabinet. If the documentation shows that thecabinets may be installed in locationsdistributed within the protected premises,then all of the mandatory manual controls andindicators shall be on one cabinet or oncabinets declared to be only suitable formounting adjacent to each other.

The mandatory controls and indicators are locatedon the emergency CALL STATION.

Installer checklist

21-Sep

-2015 | 01 |

EN

54-16E

N 54-16 | en

27


13.3.4 All mandatory manual controls and lightemitting indicators shall be clearly labeled toindicate their purpose. The labels shall belegible at 0.8 m distance in an ambient lightintensity from 100 lux to 500 lux.

The emergency CALL STATION has paper slotsbelow each of its programmable buttons. Theinstaller has to ensure providing proper labels thatfit into these paper slots and implement thisrequirement.

13.3.5 The terminations for transmission paths andthe fuses shall be clearly labeled.

All terminations for transmission paths are clearlylabeled on all of the PAVIRO system elements (nearthe relevant connectors).


13.4 Electrical and other design requirements

13.4.1 The processing of signals shall give thehighest priority to the voice alarm condition.

Signals within the PAVIRO system have a configuredpriority. The installer has to ensure to give the voicealarm signals the highest priority.

13.4.2 Transitions between the main and the standbypower sources shall not change anyindications and/or the state of any outputs,except those relating to the power supplies.

Transition between the main and standby powersources does not change any of the indicationsand/or state of any outputs of the PAVIRO system,except for the fault warning indication in order toreport the failure of a power source.


13.4.3 If the VACIE has provision for disconnecting oradjusting the main or the standby powersource, this shall only be possible at accesslevel 3 or 4.

The installer has to ensure that these items are onlyaccessible at access level 3 or 4.


21-Sep


28en | E

N 54-16

EN

54-16


13.5 Integrity of transmission paths

13.5.1 A fault in any voice alarm transmission pathbetween the VACIE and other components ofthe voice alarm system shall not affect thecorrect functioning of the VACIE or of anyother voice alarm transmission path.

The PAVIRO system has the following voice alarmtransmission paths between itself and other parts ofthe voice alarm system:– transmission path between CIE and PAVIRO

system via input contact,– transmission path between FPA5000 and

PAVIRO via Ethernet,– transmission path between PAVIRO system and

the loudspeaker(s),– transmission path between PAVIRO controller

and emergency PAGING STATION.If there is a fault in the transmission path betweenthe CIE and an input contact of the PAVIRO system,the configured action of the input contact will notbe automatically activated or deactivated. Thecorrect functioning of the PAVIRO system or of anyother voice alarm transmission path is therefore notaffected. The fault will be reported.If there is a fault in the transmission path betweenthe PAVIRO system, i.e. the amplifier outputs andthe loudspeaker(s), the loudspeaker(s) will not beable to produce the intended audio signal. Howeverthe fault will not affect the correct functioning ofthe PAVIRO system or any other voice alarmtransmission path. The fault will be reported, only.

13.5.2 A short circuit or an interruption in thetransmission path to the loudspeaker(s) shallnot affect more than one voice alarm zone forlonger than 100 s following the occurrence ofthe fault.

The installer has to make sure to install the systemaccordingly.

Installer checklist

21-Sep

-2015 | 01 |

EN

54-16E

N 54-16 | en

29


13.5.3 A single short circuit or an interruption in anyvoice alarm transmission path betweendistributed cabinets of a VACIE shall notprevent the activation of a voice alarm outputcondition to more than one voice alarm zonefor longer than 100 s following the occurrenceof the fault.

We recommend to install the emergency CALLSTATION inside of the cabinet. In case ofinterruption of the transmission path to theemergency CALL STATION the CONTROLLER willactivate the system fault condition.

13.5.4 If the VACIE is designed to be used with apower supply (item L of Figure 1 of EN 54-1)contained in a separate cabinet, then aninterface shall be provided for at least twovoice alarm transmission paths to the powersupply, such that a short circuit or aninterruption in one does not affect the other.

If a 19”-cabinet (rack) or adjacent cabinets provideenough space for the battery and/or charger, theinstaller can install the complete PSE (power supplyequipment) as referred in EN 54-4 in one cabinet. Inthat case this requirement is not applicable.In case the installer installs the backup part of thePSE (battery and charger) in a separate cabinet,PAVIRO provides a separate DC-backup connectionon the PAVIRO units (Amplifiers). This implies that aPAVIRO installation will always have two separatepower paths to the power supply: one for mains andone for DC backup. Both will not influence eachother. For parts that do have only 24V DCconnectors (e.g. PAVIRO CONTROLLER), the PSEneeds to be in the same rack. It is the responsibilityof the installer to let the installation comply withthis requirement.

21-Sep


30en | E

N 54-16

EN

54-16


13.6 Accessibility of indications and controls

Four access levels shall be provided on theVACIE, from access level 1 (most accessible)to access level 4 (least accessible). Manualcontrols at a given access level shall not beaccessible at a lower access level. Thefollowing shall apply:

The Installer has to ensure to configure accesslevels described below.Access level 1 is intended for operational users ofthe PAVIRO system. It provides direct operationalaccess to the unrestricted functionality of thePAVIRO system via:– Input contacts of system components that have

level 1 functionality– The front panel menu of system components

(LED indications, acknowledge button)– A non emergency CALL STATIONAccess level 2 is intended for advanced operationalusers of the PAVIRO system. It provides operationalaccess to the system after gaining access to aphysical part of the system. Access level 2 isenforced for the access level 1 access points bymeans of physical access control, which restrictsaccess to persons that possess the physical accessdevice (e.g. key, access card, et cetera).– Input contacts with physical access control; the

system components offering the input contactsare located in a room/cabinet that is notgenerally accessible

– A emergency CALL STATION with physicalaccess control over the lock key. The keyswitch has to be connected so the key can beremoved in locked position only. Use pin 1 andpin 2 of the key switch.

– A emergency CALL STATION with physicalaccess control; the CALL STATION is located ina room/cabinet that is not generally accessible

Installer checklist

21-Sep

-2015 | 01 |

EN

54-16E

N 54-16 | en

31


Access level 3 is intended for installers and/orconfigurators of the PAVIRO system. It providesaccess for hardware configuration and installationof the PAVIRO system after physical access to therear of the rack– Physical access control by means of installing

the system elements in a restrictedenvironment, such as placing the 19”-units in a19”-rack with key lock. This type of access canbe used for physical diagnosis of the system,e.g. inspect interconnections.

Access level 4 is intended for maintenancepersonnel of the PAVIRO system. It providessoftware configuration and firmware upgrade of thePAVIRO system components after logicalidentification. This level of access is offeredthrough:– The IRIS-Net PC software. At access level 4,

specialized configuration software is needed.

a) all mandatory indications shall be visible ataccess level 1 without prior manualintervention (e.g. the need to open a door);

All mandatory indications are placed on theemergency CALL STATION. The installer has toensure to mount the emergency CALL STATION on asuitable place. If the CALL STATION is installed in acabinet with a front door, the door must be a glassdoor.

b) manual controls at access level 1 shall beaccessible without special procedures;

The installer has to ensure to enable access level 1controls without special procedures.

c) indications and manual controls that aremandatory at access level 1 shall also beaccessible at access level 2;

All PAVIRO indications (LEDs, equipment connectedto output contacts, front panel indication, LCdisplay) and manual controls (input contacts, CALLSTATION buttons) that are accessible at accesslevel 1 are also be accessible at access level 2.

21-Sep


32en | E

N 54-16

EN

54-16


d) entry to access level 2 shall be restrictedby a special procedure;

The installer has to ensure to enable access level 2controls with special procedures.

e) entry to access level 3 shall be restrictedby a special procedure, differing from that foraccess level 2;

Entry to access level 3 is restricted by limitingaccess to the rear of the rack. Correct configurationand installation (physical access control) will ensurethat the special procedure differs from that ofaccess level 2. The system administrator shoulddefine different users in IRIS-Net. The installershould ensure that the physical access procedurediffers from that of the physical access procedure ofaccess level 2.

f) the entry to access level 4 shall berestricted by special means which are not partof the VACIE.

The IRIS-Net PC software. At access level 4, apassword is needed.

NOTE Further access levels are permittedprovided that they are distinct from theaccess levels described in this standard.

13.7 Indications by means of light-emittingindicators

13.7.1 Mandatory indications from light emittingindicators shall be visible in an ambient lightintensity up to 500 lux, at any angle up to22.5° from a line through the indicatorperpendicular to its mounting surface– at 3 m distance for the general

indications of functional condition,– at 3 m distance for the indication of the

supply of power,and– at 0.8 m distance for other indications.

The emergency CALL STATION fulfills therequirements.The installer has to ensure to put the emergencyCALL STATION on a place where the requirementsare met also. E.g. installation behind a class door.No dark glass. Avoid installation on top or bottom ofthe rack.

Installer checklist

21-Sep

-2015 | 01 |

EN

54-16E

N 54-16 | en

33


13.7.2 If flashing indications are used, both the onperiod and the off period shall be greater thanor equal to 0.25 s, and the frequencies offlash shall not be less than– 1 Hz for voice alarm indications, and– 0.2 Hz for fault indications.

The emergency CALL STATION fulfils therequirements


13.8 Indications on alphanumeric displays

13.8.1 If an alphanumeric display consists ofelements or segments, the failure of one ofthese shall not affect the interpretation of thedisplayed information.

The LCD of the emergency CALL STATION does notconsists of elements or segments.


13.8.2 If an alphanumeric display is used to displaymandatory indications, it shall be clear andunambiguous.

The display of the emergency CALL STATION is usedfor indicating the different statuses. Therefore eachdisplayed information has a separate term.


13.8.3 Mandatory indications on an alphanumericdisplay shall be legible for at least one hourfollowing the display of a new indication ofthe voice alarm condition and at least 5minutes for fault or disablement conditions, at0,8 m distance, in ambient light intensitiesfrom 5 to 500 lux, at any angle from thenormal to the plane of the display up to– 22.5º when viewed from each side, and– 15º when viewed from above and below.

The emergency CALL STATION fulfills therequirements and the indication stays on as long asthe system is in the corresponding condition.The installer has to ensure to put the emergencyCALL STATION on a place there the requirementsare met also. E.g. installation behind a glass door.No dark glass. Avoid installation on top or bottom ofthe rack.

13.9 Indication colors

13.9.1 The colors of the general and specificindications from light emitting indicators shallbe


a) red for indications of voice alarms; The alarm LED of the emergency CALL STATIONs ison (red) when the system is in the voice alarmcondition.


21-Sep


34en | E

N 54-16

EN

54-16


b) yellow for indications of fault warnings The Fault LED of the emergency CALL STATIONs ison (yellow) when the system is in the fault warningcondition.


c) green for the indication that the VACIE issupplied with power.

All light emitting indicators of the PAVIRO systemthat indicate power supply are green.


NOTE Where voice alarm automatic messagestatus indicators are provided, it may beadvantageous to indicate the differencebetween evacuation and alert messages. Inthis case, red will be used for emergencymessages and yellow may be used for alertmessages.


13.9.2 The use of different colors is not necessary forindications on alphanumeric displays.However, if different colors are used fordifferent indications, the colors used shall beas specified in 13.9.1.

The LCD used in the emergency CALL STATIONdoes not use different colors for indications.


13.10 Audible indications

13.10.1 Audible indicators shall be part of the VACIE.The same device may be used for voice alarmzone activated and fault warning indications.

The sounder in the emergency CALL STATION willbe used for both indications.


13.10.2 The minimum sound pressure level, measuredunder anechoic conditions at a distance of 1m, with any access door(s) on the VACIEclosed, shall be– 60 dBA for the voice alarm condition, and– 50 dBA for the fault warning condition.

The emergency CALL STATION fulfills therequirements.The installer has to ensure to put the emergencyCALL STATION on a place where the requirementsare met also. E.g. installation behind a glass door.

13.11 Indicator testing

Installer checklist

21-Sep

-2015 | 01 |

EN

54-16E

N 54-16 | en

35


All mandatory visible and audible indicatorsshall be testable by a manual operation ataccess level 1 or 2.

PAVIRO provides an LED test via the menu on theemergency CALL STATION at access level 1. Thisindicator test is a local test.When activated all indications on that emergencyCALL STATION and all its connected emergencyCALL STATION EXTENSIONS are switched on tovisually and audible check the indicators.


13.12 Audio performance

13.12.1 Output powerThe VACIE output power shall be as declaredby the manufacturer.

The output power of the amplifier elements of thePAVIRO system are specified in the data sheets anduser manuals.


13.12.2 Signal-to-noise ratioThe VACIE shall have an A-weighted signal-to-noise ratio of at least 45 dB (see IEC60268-1).

The A-weighted signal-to-noise ratio of the PAVIROamplifiers is specified in the data sheets and in themanuals. The signal-to-noise ratio is above 100 dB.The complete signal chain from microphone toloudspeaker is compliant to this clause.


13.12.3 Frequency responseThe frequency response of the VACIE shall fitwithin the nonshaded area in Figure 1 forsound sources without microphone(s) (e.g.message store) and Figure 2 for soundsources with microphone(s).NOTE The frequency response limits excludeloudspeakers.NOTE A bandwidth of 400 Hz to 4 kHz issufficient to achieve acceptable intelligibilityin some acoustic environments. However, ahigher frequency limit may be necessary toachieve acceptable intelligibility in moredifficult acoustic environments due, forexample, to the masking effect caused byreverberation and/or ambient noise.

The default settings of the audio filters in IRIS-Netensure the correct frequency response of all soundpaths. If the default settings are edited in IRIS-Net,the installer has to ensure that the frequencyresponse still fits within the non-shaded area inFigure 1 and 2.

21-Sep


36en | E

N 54-16

EN

54-16


13.13 Message store(s)

Pre-recorded messages shall be stored in non-volatile memory that retains the messageswhen all power sources are removed.NOTE The use of tapes or magnetic or opticaldata disks for the storage of emergencymessages is not acceptable at the time ofdrafting this European Standard (see AnnexC)

The pre-recorded messages are digitally stored on aEEPROM/Flash in uncompressed format (PCM, 16-bit). This EEPROM/Flash retains the messages whenall power sources are removed.

13.14 Redundant power amplifiers

13.14.1 The VACIE may have provision for at least onespare power amplifier. In this case:


a) in the event of the failure of a poweramplifier, the faulty amplifier shall be capableof being replaced automatically with a spareamplifier withing 10 s of the fault beingdetected;NOTE: This can be achieved, for example, byswitching or by permanently connectedparallel amplifiers.

The installer has to ensure to configure spareamplifier switching accordingly.

b) the spare power amplifier(s) shall have atleast the same functionality and output poweras the replaced amplifier.

The installer has to ensure to include a spareamplifier with at least the same output power.

13.14.2 Every fault of an amplifier shall be indicatedby the general fault warning indicator asspecified in 8.2

The installer has to ensure to enable supervision onthe spare amplifier.

13.14.3 Supervision of the spare amplifier(s) shall bemaintained during the functional conditionwhilst the VACIE is powered by either themains or standby power supplies.

Supervision on spare amplifiers works with bothconditions.


Installer checklist

21-Sep

-2015 | 01 |

EN

54-16E

N 54-16 | en

37

14 Additional design requirements for software controlled VACIE


14.1 General requirements and manufacturer’sdeclarations

In order to fulfill requirements of thisEuropean Standard the VACIE may containelements which are controlled by software. Inthis case, the VACIE shall comply with therequirements of Clause 13 and this clausewhere relevant to the technology used.

The PAVIRO system is controlled by compliantsoftware.


14.2 Software documentation

3.10

21-Sep


38en | E

N 54-16

EN

54-16


14.2.1 The manufacturer shall preparedocumentation that gives an overview of thesoftware design, which shall be submitted tothe testing authority together with the VACIE.This documentation shall be in sufficientdetail for the design to be inspected forcompliance with this European Standard andshall comprise at least the following:a) functional description, using a clearmethodology appropriate to the nature of thesoftware, e.g. graphical representations of thesystem design, data flows and control flowsand of the main program flow, including:1) a brief description of each module and thetasks it performs,2) the way in which the modules interact,3) the way in which the modules are called,including any interrupt processing, and4) the overall hierarchy of the program;b) a description of which areas of memory areused for the various purposes (e.g. theprogram, site specific data and running data);c) a description of how the software interactswith the hardware of the VACIE.Where dynamic memory management isemployed, a separation shall be implementedbetween the program, site specific data andrunning data and this shall be described inconnection with the method of memoryallocation.

Design and development documents have beenprovided and approved by certification authority.


Installer checklist

21-Sep

-2015 | 01 |

EN

54-16E

N 54-16 | en

39


14.2.2 The manufacturer shall prepare and maintaindetailed design documentation. This need notbe submitted to the testing authority but shallbe available for inspection in a manner whichrespects the manufacturer's rights ofconfidentiality.This documentation shall comprise at leastthe following:a) a description of each module of theprogram, as it is implemented in the sourcecode of the program, containing:1) the name of the module, and2) the identification of the author(s);b) the source code listing, including all globaland local variables, constants and labels used,and sufficient comment for the program flowto be recognized;c) details of any software tools used in thepreparation of the program (e.g. high leveldesign tools, compilers, assemblers).

Documents have been inspected and approved bycertification authority.


14.3 Software design

In order to ensure the reliability of the VACIEthe following requirements for softwaredesign shall apply:a) the software shall have a modularstructure;b) the design of the interfaces for manuallyand automatically generated data shall notpermit invalid data to cause an error in theprogram execution;c) the software shall be designed to avoid theoccurrence of a deadlock in the program flow.

PAVIRO is built on a modular structure.Not relevant, there is no manually or automaticallygenerated data.PAVIRO is equipped with a watchdog which willsignalize a deadlock and automatically carry out areset.


14.4 Program monitoring (see also Annex C)

21-Sep


40en | E

N 54-16

EN

54-16


14.4.1 The execution of the program shall bemonitored as under 14.4.2 or 14.4.3. Ifroutines associated with the main functions ofthe program are no longer executed, either orboth of the following shall apply:a) the VACIE shall indicate a system fault (asin 8.3);b) the VACIE shall enter the fault warningcondition and indicate faults of affectedsupervised functions (as in 8.2.3, 8.2.4, 8.3,8.4 and 8.5), where only these functions areaffected.

Upon activation of a watchdog, a fault is reportedafter restart of the failing component. A system faultis indicated when entering the fault condition.Upon activation of a watchdog, a fault is reportedafter restart of the failing component indicating thefailing component.


14.4.2 If the program executes in one processor, theexecution of the routines in 14.4.1, it shall bemonitored by a monitoring device as in 14.4.4.

All processors used in the PAVIRO system are eitherguarded by a hardware watchdog or are monitoredby a processor that is guarded by a hardwarewatchdog.


14.4.3 If the program executes in more than oneprocessor, the execution of the routines in14.4.1 shall be monitored in each processor. Amonitoring device as in 14.4.4 shall beassociated with one or more processors, andat least one such processor shall monitor thefunctioning of any processor not associatedwith such a monitoring device.

The network controller is responsible for monitoringall processors in the system. Upon failure of one ofthe processors, either due to a watchdog failure ordue to a communication failure a fault is generated.Failure of the network controller itself will cause thesystem fault output contact to be de-activated toindicate a system fault.


14.4.4 The monitoring device of 14.4.2 and 14.4.3shall have a time-base independent of that ofthe monitored system. The functioning of themonitoring device, and the signaling of a faultwarning, shall not be prevented by a failure inthe execution of the program of themonitored system.

All components that have a processor have anexternal watchdog.


Installer checklist

21-Sep

-2015 | 01 |

EN

54-16E

N 54-16 | en

41


14.4.5 In the event of a system fault as specified in14.4.1 a) or 14.6, those parts of the VACIEaffected shall enter a safe state not later thanthe indication of the system fault. This safestate shall not result in the false activation ofmandatory outputs.

Safe state is included at all components. No signature necessaryin this line.

14.5 The storage of programs and data (see alsoAnnex C)

14.5.1 All executable code and data necessary tocomply with this European Standard shall beheld in memory that is capable of continuous,unmaintained, reliable operation for a periodof at least 10 years.

According to the datasheet of the memory morethan 10 years.


14.5.2 For the program, the following requirementsshall apply:


a) the program shall be held in non-volatilememory, which can only be written to ataccess level 4, and

The program is stored in a non-volatile memory.Configuring requires access level 4.


b) it shall be possible to identify the versionreference or references of the program ataccess level 3. The version reference orreferences shall be in accordance with thedocumentation of 14.2.1.

Version reference can be read out at access level 3. No signature necessaryin this line.

14.5.3 For site-specific data, including emergencymessage(s), the following requirements shallapply:


a) the alteration of site specific data shall onlybe possible at access level 3 or 4;

Responsibility of the installer to maintain site data.

b) the alteration of site specific data shall notaffect the structure of the program;

The configuration is a data set that cannot alter theprogram itself


21-Sep


42en | E

N 54-16

EN

54-16


c) if stored in read-write memory, there shallbe a mechanism which prevents the memorybeing written to during normal operation ataccess level 1 or 2, such that its contents areprotected during a failure in programexecution;

There is an EEPROM/Flash which holdsconfiguration and program data. This is copied toRAM, this RAM is used during operation. TheEEPROM/Flash is supervised.


d) It shall be possible to either read orinterrogate the site specific data at accesslevel 2 or 3, or the site specific data shall begiven a version reference that shall beupdated when each set of alterations iscarried out.

With specialized software at access level 3 theconfiguration can be read out.


e) If the site specific data has a versionreference, it shall be possible to identify thisat access level 2 or 3.

No version reference. No signature necessaryin this line.

14.6 Monitoring of memory contents

The contents of the memories containing thesite specific data shall be automaticallychecked at intervals not exceeding 1 h. Thechecking device shall signal a system fault if acorruption of the memory contents isdetected.

There is a checksum on this data which is checkedevery 1 hour.


Installer checklist

21-Sep

-2015 | 01 |

EN

54-16E

N 54-16 | en

43

15 Marketing


The VACIE shall be marked with thefollowing information,which shall be legible at access level 1:


a) the number of this European Standard; Marking the PAVIRO system with the number of thisEuropean standard (which is legible at access level 1) isthe responsibility of the installer, since the installer willhave to install and configure the system properly in orderto let the installation comply with this standard.

b) the name or trademark of themanufacturer or supplier;

The name „BOSCH “ is visible on each unit of the PAVIROsystem. It is the responsibility of the installer to ensurethat this name is legible at access level 1 for all systemelements.

c) the type number or other designation ofthe VACIE.

The type number of each unit of the PAVIRO system ispresent on the unit itself. The installer is responsible forensuring that this type number is legible at access level1.

It shall be possible to identify a code ornumber that identifies the productionperiod of the VACIE at access level 1 or 2 or3.

The serial numbers of each unit gives information aboutthe production period. This serial number is visible onthe type number plate of each unit of the PAVIRO system.The installer is responsible for ensuring that this typenumber plate is identifiable at access level 1, 2 or 3.

NOTE Where Annex ZA.3 covers the samerequirements as this clause, therequirements of this clause are met.


16 TestsAll applicable tests are carried out in an accredited test lab.

3.11

3.12

21-Sep


44en | E

N 54-16

EN

54-16

Bosch Security Systems B.V.Torenallee 495617 BA EindhovenThe Netherlandswww.boschsecurity.com© Bosch Security Systems B.V., 2015