Installation, commissioning and maintenance may only be carried out by properly trained and authorised personnel. INFORMATION! Configuration for SIL mode operation needs a login as role "Expert" (for details refer to [N1], chapter "Security and permissions"]. Nevertheless the operator shall protect the flowmeter against unauthorised access. www.siemens.com/flow 10/2017 - A5E40875009-AB EN...
Check in case a firmware is updated or any part of the device is replaced, whether a new safety manual is available on the manufacturer's internet site. Release date Electronic revision Changes and compatibility Documentation 2017-07-10 ER 2.0.0_ Initial version Edition 09/2017 2017-10-01 ER 2.0.1_ Sensor diagnostics update Edition 10/2017 10/2017 - A5E40875009-AB EN www.siemens.com/flow...
Proof Test Interval Proof Time to Repair Repair Internal Diagnostics Test Interval Test 1oo1 1 out of 1 channel architecture (single architecture performs the safety function) 1oo1D 1 out of 1 channel architecture with diagnostics 10/2017 - A5E40875009-AB EN www.siemens.com/flow...
Resetting the fail-safe flag is done under responsibility of the operator. He is responsible for the correct execution of appropriate tests and the evaluation of test results. SAC7: Firmware update Firmware may be updated by authorised personnel only. www.siemens.com/flow 10/2017 - A5E40875009-AB EN...
• Current loops are independently driven. • Current loops are installed in a way that failures affecting both lines at a time (common cause) can be avoided. • The logic subsystem must provide an appropriate low failure rate. 10/2017 - A5E40875009-AB EN www.siemens.com/flow...
As the maintenance mode is intended for testing, the operator shall provide additional measures to secure the safety of the overall system. Therefore, the operator shall install additional measures to provide safety of the overall system. www.siemens.com/flow 10/2017 - A5E40875009-AB EN...
A random fault can cause an error of up to 2% of the present measurement value or output current before it is Measuring accuracy signaled. For further information refer to on page 28. 10/2017 - A5E40875009-AB EN www.siemens.com/flow...
(> 21 mA). • The fault response time is 30 seconds. Any output older than 30 seconds is correct if the safety reaction is not triggered due to a safety critical device failure. www.siemens.com/flow 10/2017 - A5E40875009-AB EN...
Before switching to SIL mode the customer has to ensure the proper condition of the device. In case of any doubt, a Proof Test may be performed. Previous hours of operation have to be taken into account for failure rate calculation. 10/2017 - A5E40875009-AB EN www.siemens.com/flow...
• Check carefully, whether the device shows <3.6, 4 mA, 6 mA…20, >21 mA in a loop. • Confirm request "Set SIL jumper or press key to cancel" by setting the SIL jumper or refuse switch to SIL mode by pressing any key www.siemens.com/flow 10/2017 - A5E40875009-AB EN...
The device must be set to non-SIL mode first, before any parameter can be changed, as changing of parameters is prohibited in SIL mode. Follow the steps shown in the next chapter and then reconfigure the device. 10/2017 - A5E40875009-AB EN www.siemens.com/flow...
SIL mode. Status type Event group Description Actions to eliminate the event Electronics Emergency off Restart the device according to given procedure Resetting the fail-safe flags triggered (for details refer to on page 23). www.siemens.com/flow 10/2017 - A5E40875009-AB EN...
Vortex Algorithm / Min. 0.01 [V] Indicator for valid measurement of vortex frequency. Amplitude Gain CA Piezo configuration. VA Piezo Test Mode (no PIEZO TESTMODE OFF Piezo configuration. menu entry available) Distortion Reduction / Amplitude correction. Function 10/2017 - A5E40875009-AB EN www.siemens.com/flow...
Page 18
SIL operation. Depending on the device’s state, either the one parameter set or the other is shown or can be edited. As soon as the SIL mode is requested, the SIL mode parameters become active. www.siemens.com/flow 10/2017 - A5E40875009-AB EN...
Only flow sensor calibration is missed here which requires a reference meter. 10/2017 - A5E40875009-AB EN www.siemens.com/flow...
Page 20
16). • Unfix the electronics housing by loosening the 4 cylinder screws 1 and take off the electronics housing carefully. Figure 4-1: Unfixing of the electronics housing 1 Cylinder screws 2 Washers 3 Gasket www.siemens.com/flow 10/2017 - A5E40875009-AB EN...
Page 21
Confirm start of proof test with "YES" or cancel with "NO" YES / NO ^ If question "Confirm start of proof test?" has been confirmed with "YES", the device is prepared for proof test and displays "Proof Test is running…". 10/2017 - A5E40875009-AB EN www.siemens.com/flow...
Page 22
A current value below or above the acceptable limits is an indicator for wear out of the electronics. Please refer to chapters "Maintenance" and "Availability of service". INFORMATION! The frequency test does not consider the sensor element, configuration and drift errors. www.siemens.com/flow 10/2017 - A5E40875009-AB EN...
Failures that are critical to functional safety must be reported to technical support of the manufacturer. If you find a problem, please contact your local representative. If the device must be returned to the manufacturer, refer to "Returning the device to the manufacturer" in [N1]. 10/2017 - A5E40875009-AB EN www.siemens.com/flow...
• External power failure rates are not included in the calculation of the failure rates. • The FMEDA of the device was calculated with the exida tool FMEDA v7.1.17. The tool uses the latest values from the database SN 29500 [N3]. www.siemens.com/flow 10/2017 - A5E40875009-AB EN...
5 This is the part of the process safety time which must be reserved for the safety reaction of the flowmeter or for the delay of its safety function respectively. 6 Assuming MTTR = MTR = 8 hours. 7 Related to hardware components relevant for safe operation. 10/2017 - A5E40875009-AB EN www.siemens.com/flow...
All instruments which are unlocked for the use in a SIL mode are registered by the manufacturer. In case that modifications at the supplied flowmeter will be necessary which are relevant to the safety function of the device, the manufacturer will inform the customer immediately. 10/2017 - A5E40875009-AB EN www.siemens.com/flow...
The NAMUR diagnostic information must not be used to decide whether the device is intact or not. Reason is that this information is not safe, as the "latest" diagnostic message(s) may get lost due to a device failure. www.siemens.com/flow 10/2017 - A5E40875009-AB EN...
Page 31
The failure current (low/high) is configurable but the configuration is only effective in non-SIL mode. Consequently, a device evaluating the current output must react on both failure currents, not only on the configured one. 10/2017 - A5E40875009-AB EN www.siemens.com/flow...
Page 32
For more information www.siemens.com/flow www.siemens.com/processautomation Siemens AG Process Industries and Drives Process Automation 76181 Karlsruhe Germany Product Information...