functional safety manual soliphant m with electronic ...€¦ · switch setting for the safety...
TRANSCRIPT
SD204F/00/en71020793
Functional safety manual
Soliphant M with electronic insert FEM52 Level Limit Measuring System
ApplicationOverfill protection or operating maximum detection of all types of solids in tanks to satisfy particular safety systems requirements to IEC 61508.
The measuring device fulfils the requirements concerning • for safety functions up to SIL 2 • explosion protection by intrinsic safety or flameproof
enclosure • EMC to EN 61326 and
NAMUR Recommendation NE 21.
Your benefits
• For overfill protection up to SIL 2– Independently assessed (Functional Assessment)
by exida to IEC 61508 • No calibration • Protected against outside vibration • Easy commissioning
Soliphant M + FEM52
2 Endress + Hauser
Table of contents
SIL declaration of conformity. . . . . . . . . . . . . . . . . . . . 3
Functional Assessment Report. . . . . . . . . . . . . . . . . . . 4
Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Structure of the measuring system with Soliphant M with FEM52 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5Level limit measuring system . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5Safety function . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5Supplementary device documentation . . . . . . . . . . . . . . . . . . . . . . 6
Settings and installation instructions . . . . . . . . . . . . . . 6Installation instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6Settings for Soliphant M with FEM52 . . . . . . . . . . . . . . . . . . . . . . 7
Response in operation and failure . . . . . . . . . . . . . . . . 8
Failure rates of electrical components . . . . . . . . . . . . . 8
Repair . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Recurrent function tests of the measuring system . . . . 8
Appendix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9Specific values and wiring options for the measuring system Soliphant M with FEM52 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
FMEDA Report . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Soliphant M + FEM52
Endress + Hauser 3
SIL declaration of conformity
SIL05003b-en
Exam
ple
Soliphant M + FEM52
4 Endress + Hauser
Functional Assessment Report
L00-FEM5xxxx-01-06-xx-en-001
Soliphant M + FEM52
Endress + Hauser 5
Introduction
! Note! For general information about SIL please refer to: www.endress.com/sil
and in the Competence Brochure CP002Z "Safety in the Process Industry – reducing risks with SIL"
Structure of the measuring system with Soliphant M with FEM52
Level limit measuring system The measuring system is displayed in the following diagram (example).
L00-FTM5xxxx-16-06-xx-en-001
Soliphant M with electronics insert FEM52: three-wire DC connection (PNP) with transistor output
Safety function The safety function only applies to MAX safety (overfill protection).
The transistor output is blocked when:
• The switch point is exceeded (level exceeds response height) • A fault occurs • The mains voltage fails
The measuring range of Soliphant M depends on the medium, mounting location and fork length.
The detection range is within the length of the fork and depends on the weight of the medium and the resulting type of fork:
• Standard fork with a length of 155 mm (Density of medium ≥ 10 g/l) and• Short fork with a length of 100 mm (Density of medium ≥ 50 g/l)
Soliphant M
Electronic insert
Soliphant M + FEM52
6 Endress + Hauser
Permitted versions of the Soliphant M with FEM52 for the safety function
The following combinations are permitted for the measuring system:
• FTM50-#####2#####• FTM51-#####2#####• FTM52-#####2#####
Permitted instrument types (# = all instrument versions permitted excepting 9 and Y)
• Valid FW version (firmware): V01.01.00 or higher• Valid HW version (hardware): V02.00 or higher
Safety function data
The mandatory settings and data for the safety function can be found in the Appendix (Page 9).
The measuring system reacts in ≤ 0.9 s.
! Note! MTTR is set at 8 hours under the condition that the electronics insert is on stock.Safety systems without a self-locking function must be monitored or set to an otherwise safe state after carrying out the safety function within MTTR.
Supplementary device documentation
The following must be available for the measuring system:
Settings and installation instructions
Installation instructions Please refer to the Operating Instructions (KA) for information regarding the correct installation ofSoliphant M with FEM52. Since the application conditions have an effect on the safety of the measurement, pay attention to the notes in the Technical Information (TI) and Operating Instructions (KA).
Refer to the following documentation for instructions on setting the instruments:
Technical Information Operating Instructions
Soliphant M FTM50, FTM51, FTM52TI392F/00
FTM50, FTM51KA229F/00
FTM52KA230F/00
Relevant contents Connection data, Installation instructions
Setting, configuration, remarks, function tests
Setting description in documentation
Soliphant M FTM50, FTM51KA229F/00
FTM52KA230F/00
Soliphant M + FEM52
Endress + Hauser 7
Settings for Soliphant M with FEM52
Connectable load:
• Load switched via transistor and separate PNP connection, max. 55 V• Load current max. 350 mA (cyclical overload and short-circuit protection)• Residual current < 100 µA (with transistor blocked)• Capacitive load max. 0.5 µF at 55 V, max. 1.0 µF at 24 V• Residual voltage < 3 V (for transistor switched through)
Overvoltage protection FEM52: overvoltage category III
! Note! The SIL evaluation for the Soliphant M comprises the complete device, including the electronics insert,the tuning fork with piezo drive, the process connection and the internal wiring.
In applications with extremely strong external vibrations > 0.05 g2/Hz and light weight bulk solids < 600 gr/la functional test is recommended!
It is recommended to leave the switching elements following the overfill protection in the safe state until the alarm signal has been acknowledged.
" Caution! Changes to the settings at the electronic insert FEM52 after measuring system start-up can impair the safety function!
Switch setting for the safety function:
L00-FTM5xxxx-19-05-xx-xx-015
One switch for safety mode
MAX Overfill protection MIN Dry running protection
One switch for switching delay
0.5 s when covered, 1.5 s when uncovered (short fork 1 s)
5 s when covered, 5 s when uncovered
One switch for bulk density/density setting
≥ 50 g/l standard fork, ≥ 200 g/l short fork (high bulk density)
≥ 10 g/l standard fork, ≥ 50 g/l short fork (low bulk density)
One switch for diagnosis
OFF Diagnosis of abrasion and build-up switched OFF. ON Diagnosis of abrasion and build-up switched ON.
• For additional density setting to high bulk density:abrasion and build-up are indicated per LED at the electronic insert only
• For additional density setting to low bulk density:output of "signal on alarm" for abrasion and build-up
MAXMIN ON
OFF
Soliphant M + FEM52
8 Endress + Hauser
Response in operation and failure
The response in operation and failure is described in the following documentation:
Failure rates of electrical components
The underlying failure rates of electrical components are specified for the useful lifetime according to IEC 61508-2 Section 7.4.7.4. Note 3.
Repair
If a SIL-marked device that has been operated in a functional safety application fails, the "Declaration of Hazardous Material and De-Contamination" form containing the appropriate information "Used as a SIL device in a Safety Instrumented System" must be enclosed with the defective device when it is returned.
Recurrent function tests of the measuring system
The operativeness of the overfill protection must be checked periodicaly if the PFDavg values given in the Appendix are used. The check must be carried out in such a way that it is proven that the overfill protection functions perfectly in interaction with all components. This is guaranteed when the response height is approached in a filling process. If it is not practical to fill to the response height, suitable simulation of the level or of the physical measuring effect must be used to make the level sensor respond. If the operativeness of the level sensor/transmitter can be determined otherwise (exclusion of faults that impair function), the check can also be completed by simulating the corresponding output signal.
" Caution! Note the following points for the function test: • Transistor output switching can be checked by using a hand multimeter at the terminals or by observing the
overfill protection elements (e.g. horn, adjuster). • As a positive test result, a covered tuning fork must be detected and trigger the alarm for overfill protection. • If fork covering is not detected during the recurrent test, the monitored process must be set to a
safe state by means of additional or other measures and/or kept in the safe state until the safety system is repaired.
Setting description in documentation
Soliphant M FTM50, FTM51KA229F/00
FTM52KA230F/00
Soliphant M + FEM52
Endress + Hauser 9
Appendix
Specific values and wiring options for the measuring system Soliphant M with FEM52
The table show values and wiring options relevant to safety for the measuring system.
L00-FTM5xxxx-05-06-xx-en-002
1oo1 architecture
Evaluated transmitter (FEM52)
L00-FEM5xxxx-14-06-06-xx-001
MAX
SIL SIL 2
HFT 0
SFF 90 %
PFDavg(low demand mode of operation)
0.025 x 10-2
λsd 39 FIT
λsu2 487 FIT
λdd 39 FIT
λdu 58 FIT
MTBF 158 years
Wiring scheme
L00-FTM5xxxx-04-06-xx-xx-002 PNP
Recurrent teste.g. approaching level
T1 (test interval) as required; see table below
CH1
Pro
bab
ility
PFDavg
0 1 2 3 4 5 6 7 8 9 10
0,300x10–2
0,250x10–2
0,200x10–2
0,100x10–2
0,050x10–2
0,000x10–2
0,150x10–2
Test interval[years]
1oo1 structure
Soliphant M + FEM52
10 Endress + Hauser
FMEDA Report
L00-FEM52xxx-01-06-xx-en-002
L00-FEM52xxx-01-06-xx-en-001
© e
xida.c
om G
mbH
e+
h 0
3-0
3-2
2 r
030 v
1 r
1.0
.doc,
July
5,
2005
Ste
phan A
schenbre
nner
Page 2
of
3
Ma
na
ge
me
nt
su
mm
ary
Th
is r
ep
ort
su
mm
ari
ze
s t
he
re
su
lts o
f th
e h
ard
wa
re a
sse
ssm
en
t ca
rrie
d o
ut
on
th
e l
eve
l lim
it
sw
itch
So
liph
an
t M
with
tra
nsis
tor
(PN
P)
ou
tpu
t F
EM
52
an
d s
oft
wa
re v
ers
ion
V0
1.0
0.0
0.
Th
e
ha
rdw
are
a
sse
ssm
en
t co
nsis
ts
of
a
Fa
ilure
M
od
es,
Eff
ects
a
nd
D
iag
no
stics
An
aly
sis
(F
ME
DA
). A
FM
ED
A i
s o
ne
of
the
ste
ps t
ake
n t
o a
ch
ieve
fu
nctio
na
l sa
fety
asse
ssm
en
t o
f a
d
evic
e p
er
IEC
61
50
8.
Fro
m t
he
FM
ED
A,
failu
re r
ate
s a
re d
ete
rmin
ed
an
d c
on
se
qu
en
tly t
he
S
afe
F
ailu
re F
ractio
n (S
FF
) is
ca
lcu
late
d fo
r th
e d
evic
e.
Fo
r fu
ll a
sse
ssm
en
t p
urp
ose
s a
ll re
qu
ire
me
nts
of
IEC
61
50
8 m
ust
be
co
nsid
ere
d.
Th
e f
ailu
re r
ate
s u
se
d i
n t
his
an
aly
sis
are
th
e b
asic
fa
ilure
ra
tes f
rom
th
e S
iem
en
s s
tan
da
rd
SN
29
50
0.
Acco
rdin
g t
o t
ab
le 2
of
IEC
61
50
8-1
th
e a
ve
rag
e P
FD
fo
r syste
ms o
pe
ratin
g i
n l
ow
de
ma
nd
mo
de
ha
s t
o b
e
10
-3 t
o <
10
-2 f
or
SIL
2 s
afe
ty f
un
ctio
ns.
A g
en
era
lly a
cce
pte
d d
istr
ibu
tio
n o
f P
FD
AV
G v
alu
es o
f a
SIF
ove
r th
e s
en
so
r p
art
, lo
gic
so
lve
r p
art
, a
nd
fin
al
ele
me
nt
pa
rt a
ssu
me
s
tha
t 3
5%
of
the
to
tal S
IF P
FD
AV
G v
alu
e is c
au
se
d b
y t
he
se
nso
r p
art
. F
or
a S
IL 2
ap
plic
atio
n t
he
to
tal
PF
DA
VG v
alu
e o
f th
e S
IF s
ho
uld
be
sm
alle
r th
an
1,0
0E
-02
, h
en
ce
th
e m
axim
um
allo
wa
ble
P
FD
AV
G v
alu
e f
or
the
se
nso
r p
art
wo
uld
th
en
be
3,5
0E
-03
.
Th
e l
eve
l lim
it s
witch
So
liph
an
t M
with
tra
nsis
tor
(PN
P)
ou
tpu
t F
EM
52
is c
on
sid
ere
d t
o b
e a
T
yp
e B
1 c
om
po
ne
nt
with
a h
ard
wa
re f
au
lt t
ole
ran
ce
of
0.
Fo
r T
yp
e B
co
mp
on
en
ts w
ith
a h
ard
wa
re f
au
lt t
ole
ran
ce
of
0 t
he
SF
F s
ha
ll b
e >
90
% a
cco
rdin
g
to t
ab
le 3
of
IEC
61
50
8-2
fo
r S
IL 2
(su
b-)
syste
ms.
En
dre
ss+
Ha
use
r to
ge
the
r w
ith
exi
da.c
om p
erf
orm
ed
a q
ua
lita
tive
an
aly
sis
of
the
me
ch
an
ica
l p
art
s o
f th
e le
ve
l lim
it s
witch
So
liph
an
t M
with
tra
nsis
tor
(PN
P)
ou
tpu
t F
EM
52
. T
his
an
aly
sis
wa
s
use
d b
y e
xida t
o c
alc
ula
te t
he
fa
ilure
ra
tes o
f th
e s
en
so
r e
lem
en
t u
sin
g d
iffe
ren
t fa
ilure
ra
te
da
tab
ase
s (
[N5
], [
N6
], [
N7
] a
nd
exi
da
‘s e
xp
eri
en
ce
d-b
ase
d d
ata
co
mp
ilatio
n)
for
the
diffe
ren
t co
mp
on
en
ts o
f th
e s
en
so
r e
lem
en
t (s
ee
[R
1])
. T
he
re
su
lts o
f th
e q
ua
ntita
tive
an
aly
sis
we
re u
se
d
for
the
ca
lcu
latio
ns d
escri
be
d in
se
ctio
n 5
.2.
Tab
le 1
Failu
re r
ate
s a
cco
rdin
g t
o IE
C 6
1508
sd
su
2
dd
du
SF
F
DC
S 3
D
CD 3
39
FIT
4
87
FIT
3
9 F
IT
58
FIT
9
0%
7
%
40
%
Tab
le 2
: S
um
mary
– P
FD
AV
G v
alu
es
T[P
roo
f] =
1 y
ea
r T
[Pro
of]
= 5
ye
ars
T
[Pro
of]
= 1
0 y
ea
rs
PF
DA
VG =
2,5
2E
-04
P
FD
AV
G =
1,2
6E
-03
P
FD
AV
G =
2,5
2E
-03
Th
e b
oxe
s m
ark
ed
in
g
ree
n (
)
me
an
th
at
the
ca
lcu
late
d P
FD
AV
G va
lue
s a
re w
ith
in th
e
allo
we
d r
an
ge
fo
r S
IL 2
acco
rdin
g t
o t
ab
le 2
of
IEC
61
50
8-1
an
d t
ab
le 3
.1 o
f A
NS
I/IS
A–
84
.01
–1
99
6 a
nd
do
fu
lfill
th
e r
eq
uir
em
en
t to
no
t cla
im m
ore
th
an
35
% o
f th
is r
an
ge
, i.e
. to
be
be
tte
r th
an
or
eq
ua
l to
3,5
0E
-03
.
Be
ca
use
th
e S
afe
Fa
ilure
Fra
ctio
n (
SF
F)
is a
bo
ve
90
% f
or
all
co
nsid
ere
d v
ers
ion
s,
als
o t
he
a
rch
ite
ctu
ral
co
nstr
ain
ts r
eq
uir
em
en
ts o
f ta
ble
3 o
f IE
C 6
15
08
-2 f
or
Typ
e B
su
bsyste
ms w
ith
a
Ha
rdw
are
Fa
ult T
ole
ran
ce
(H
FT
) o
f 0
are
fu
lfill
ed
.
1 T
yp
e B
co
mp
on
en
t:
“Co
mp
lex”
co
mp
on
en
t (u
sin
g m
icro
co
ntr
olle
rs o
r p
rog
ram
ma
ble
lo
gic
); fo
r d
eta
ils
see 7
.4.3
.1.3
of IE
C 6
1508-2
. 2 N
ote
th
at th
e S
U c
ate
go
ry in
clu
de
s fa
ilure
s th
at d
o n
ot ca
use
a s
pu
rio
us trip
3 D
C m
ea
ns th
e d
iag
no
stic c
ove
rag
e (
sa
fe o
r d
an
ge
rou
s).
The d
ocum
ent
was p
repare
d u
sin
g b
est
effort
. T
he a
uth
ors
make n
o w
arr
anty
of
any k
ind a
nd s
hall
not
be lia
ble
in
any e
vent
for
incid
enta
l or
consequential dam
ages in c
onnection w
ith t
he a
pplic
ation o
f th
e d
ocum
ent.
© A
ll rights
on t
he f
orm
at
of
this
technic
al re
port
reserv
ed.
Failu
re M
od
es, E
ffects
an
d D
iag
no
sti
c A
naly
sis
Pro
ject:
Le
ve
l lim
it s
witch
So
liph
an
t M
with
tra
nsis
tor
(PN
P)
ou
tpu
t F
EM
52
A
pp
lica
tio
ns w
ith
le
ve
l lim
it d
ete
ctio
n in
so
lids (
MA
X d
ete
ctio
n)
Cu
sto
me
r:
En
dre
ss+
Ha
use
r G
mb
H+
Co
. K
G
Ma
ulb
urg
G
erm
an
y
Co
ntr
act
No
.: E
+H
03
/03
-22
R
ep
ort
No
.: E
+H
03
/03
-22
R0
30
Ve
rsio
n V
1,
Re
vis
ion
R1
.0,
Ju
ly 2
00
5
Ste
ph
an
Asch
en
bre
nn
er
Soliphant M + FEM52
Endress + Hauser 11
L00-FEM52xxx-01-06-xx-en-003
© e
xida.c
om G
mbH
e+
h 0
3-0
3-2
2 r
030 v
1 r
1.0
.doc,
July
5,
2005
Ste
phan A
schenbre
nner
Page 3
of
3
Th
e f
ailu
re r
ate
s lis
ted
ab
ove
do
no
t in
clu
de
fa
ilure
s r
esu
ltin
g f
rom
in
co
rre
ct
use
of
the
le
ve
l lim
it
sw
itch
So
liph
an
t M
with
tra
nsis
tor
(PN
P)
ou
tpu
t F
EM
52
, in
pa
rtic
ula
r h
um
idity e
nte
rin
g t
hro
ug
h
inco
mp
lete
ly c
lose
d h
ou
sin
gs o
r in
ad
eq
ua
te c
ab
le f
ee
din
g t
hro
ug
h t
he
in
lets
.
Th
e lis
ted
fa
ilure
ra
tes a
re va
lid fo
r o
pe
ratin
g str
ess co
nd
itio
ns ty
pic
al
of
an
in
du
str
ial
fie
ld
en
vir
on
me
nt
sim
ilar
to I
EC
60
65
4-1
cla
ss C
(sh
elte
red
lo
ca
tio
n)
with
an
ave
rag
e t
em
pe
ratu
re
ove
r a
lo
ng
pe
rio
d o
f tim
e o
f 4
0ºC
. F
or
a h
igh
er
ave
rag
e t
em
pe
ratu
re o
f 6
0°C
, th
e f
ailu
re r
ate
s
sh
ou
ld b
e m
ultip
lied
with
an
exp
eri
en
ce
ba
se
d f
acto
r o
f 2
,5.
A s
imila
r m
ultip
lier
sh
ou
ld b
e u
se
d
if f
req
ue
nt
tem
pe
ratu
re f
luctu
atio
n m
ust
be
assu
me
d.
A u
se
r o
f th
e le
ve
l lim
it s
witch
So
liph
an
t M
with
tra
nsis
tor
(PN
P)
ou
tpu
t F
EM
52
ca
n u
tiliz
e t
he
se
fa
ilure
ra
tes
in
a
pro
ba
bili
stic
mo
de
l o
f a
sa
fety
in
str
um
en
ted
fu
nctio
n
(SIF
) to
d
ete
rmin
e
su
ita
bili
ty in
pa
rt f
or
sa
fety
in
str
um
en
ted
syste
m (
SIS
) u
sa
ge
in
a p
art
icu
lar
sa
fety
in
teg
rity
le
ve
l (S
IL).
A f
ull
tab
le o
f fa
ilure
ra
tes is p
rese
nte
d in
se
ctio
n 5
.2 a
lon
g w
ith
all
assu
mp
tio
ns.
It i
s i
mp
ort
an
t to
re
aliz
e t
ha
t th
e “
no
eff
ect”
fa
ilure
s a
nd
th
e “
an
nu
ncia
tio
n”
failu
res a
re in
clu
de
d
in t
he
“sa
fe u
nd
ete
cte
d”
failu
re c
ate
go
ry a
cco
rdin
g t
o I
EC
61
50
8.
No
te t
ha
t th
ese
fa
ilure
s o
n its
o
wn
w
ill n
ot
aff
ect
syste
m re
liab
ility
o
r sa
fety
, a
nd
sh
ou
ld n
ot
be
in
clu
de
d in
sp
uri
ou
s tr
ip
ca
lcu
latio
ns.
Th
e f
ailu
re r
ate
s a
re v
alid
fo
r th
e u
se
ful
life
of
the
le
ve
l lim
it s
witch
So
liph
an
t M
with
tra
nsis
tor
(PN
P)
ou
tpu
t F
EM
52
, w
hic
h is e
stim
ate
d t
o b
e b
etw
ee
n 8
an
d 1
2 y
ea
rs (
se
e A
pp
en
dix
3).
Soliphant M + FEM52
International Head Quarter
Endress+Hauser
GmbH+Co. KG
Instruments International
Colmarer Str. 6
79576 Weil am Rhein
Deutschland
Tel. +49 76 21 9 75 02
Fax +49 76 21 9 75 34 5
www.endress.com
SD204F/00/en/01.06 71020793FM+SGML 6.0 ProMoDo
7711002200779933