Endress+Hauser Liquiline M CM42 Functional Safety Manual
  1. Manuals
  2. Brands
  3. Endress+Hauser Manuals
  4. Transmitter
  5. Liquiline M CM42
  6. Functional safety manual

Endress+Hauser Liquiline M CM42 Functional Safety Manual

Memosens transmitter
Hide thumbs Also See for Liquiline M CM42:
Table of Contents

Advertisement

Quick Links

Functional Safety Manual
for the Memosens transmitter Liquiline M CM42 SIL
Application
Used to run a Memosens sensor to
satisfy the particular requirements for
safety related systems as per IEC
61508.
The measuring device meets the
following requirements:
Functional safety in accordance with
IEC 61508
Explosion protection
Electromagnetic compatibility in
accordance with EN 61326 and
NAMUR-recommendation NE 21
Electrical safety in accordance with
IEC/EN 61010-1
Ingress protection IP66/IP67 in
accordance with DIN EN 60529
Version:
2.0
Functional Safety Manual
Liquiline M CM42
Memosens Transmitter
SD153C/07/EN/13.10
Your benefits
For all Memosens compatible systems
up to SIL 2
Independently assessed (Functional
Safety Assessment) by TÜV Süd in
accordance with IEC 61508
Permanent self-monitoring
Permanent connection monitoring
Safe Parameterization
Safe calibration and adjustment
71111752
Page:
1 of 72

Advertisement

Table of Contents
loading

Related Manuals for Endress+Hauser Liquiline M CM42

Summary of Contents for Endress+Hauser Liquiline M CM42

  • Page 1 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Functional Safety Manual Liquiline M CM42 Memosens Transmitter Application Your benefits Used to run a Memosens sensor to For all Memosens compatible systems satisfy the particular requirements for up to SIL 2...
  • Page 2 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Version: Page: 2 of 72...
  • Page 3 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL SIL Konformitätserklärung / SIL Declaration of Conformity Funktionale Sicherheit nach IEC 61508 / Functional Safety according to IEC 61508 Endress+Hauser Conducta GmbH+Co. KG, Dieselstr. 24, D-70839 Gerlingen erklärt als Hersteller die Richtigkeit der folgenden Angaben. / declares as manufacturer the correctness of the following data Gerät/Product...

  • Page 4: Table Of Contents

    Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL TABLE OF CONTENTS Structure of measuring system using a CM42 SIL transmitter System Components Description of the application as a safety related system Valid device types Applicable device documentation Description of safety requirements and boundary conditions 10 Safety Function (SAF) –...
  • Page 5 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Switch to SIL measurement mode Using the safe sensor calibration and adjustment 4.7.1 2 point pH calibration 4.7.2 1 point temperature calibration Maintenance, recalibration Proof test Proof test Testing to ensure its safe functioning 6.2.1...

  • Page 6: Structure Of Measuring System Using A Cm42 Sil Transmitter

    Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Note! General information about functional safety (SIL) is available at www.endress.com/SIL and in the competence brochure CP002Z "Functional safety in the Process Industry - risk reduction with Safety Instrumented Systems".

  • Page 7: Description Of The Application As A Safety Related System

    PLC rated SIL2 or higher), which in turn uses maybe some actors to realize the safety function. The Liquiline M CM42 display is not safe and therefore all operations using the display as an interface to the user are specially secured. It has been shown, that the display hardware and software is reactionless to the CM42 system.
  • Page 8 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL is not safe and therefore not executing the safety functions! After a reset/power-on the system is NOT in SIL measurement mode! The following diagram gives an overview of the two states of the system: And the following diagram shows the possible states inside the SIL mode.

  • Page 9: Valid Device Types

    You can use both variants of the housing: stainless steel or plastic. The CM42 SIL transmitter is distinguishable from Non-SIL versions by the nameplate with the TÜV logo and the Endress+Hauser SIL logo and can be identified using the order code.

  • Page 10: Applicable Device Documentation

    In the event of device modifications, a modification process compliant with IEC 61508 is applied by Endress+Hauser. Applicable device documentation With Liquiline M CM42 additional documentation is delivered. Please see the TI and the Operating Instructions of Liquiline M CM42. Documentation...

  • Page 11: Safety Function 1 (Saf1) - Limit Value Monitoring

    Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL be done by the operator of the safety chain. So we are here never talking about accuracy, but always about precision! To use the safety functions, the device has to be switched to the safe "SIL mode" and “SIL measurement mode”...
  • Page 12 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL The defined interval I of the monitored measured value is transferred automatically in an optimum way (with respect to resolution) to the current outs using a lower limit of 4 mA and an upper limit of 20 mA (see picture below).

  • Page 13: Safety Function 2 (Saf2) - Safe Measurement

    For all information or results given here, we assume we have no errors in the slope and zero point of the sensor. The error of the Liquiline M CM42 transmitter on the current output caused by the hardware is below ±0.05 mA for the complete range from 4-20 mA and for all possible allowed EMC/environment conditions.
  • Page 14 Endress+Hauser pH measuring chain If you are using a Endress+Hauser pH measuring chain using the SIL Memosens CYK10 cable and the pH glass sensor Orbisint CPS11D (with KSG2-SIL head), the following figures apply to the whole pH measuring chain: The time for a measurement to be visible on the current output is in the worst case scenario <6 seconds, most of the time it is <2 seconds.

  • Page 15: Safe Calibration And Adjustment (Saf3 And Saf4)

    Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL This table includes all uncertainties (including EMI) except the precision of the slope, zero point and temperature offset. 2.1.4 Safe calibration and adjustment (SAF3 and SAF4) The safe calibration executes a safe calibration sequence, safe value computations and safe interactions with the user for the calibration results using the display of the device.
  • Page 16 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Anyway the signal has to be voted by a 2oo2 voter using the following algorithm: If any of the current outs shows a HI or LO error current, an error current has to be set.
  • Page 17 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL This is the safe function block F_1oo2AI of a Siemens PLC: This function block checks for valid inputs, compares the two inputs against a configured delta tolerance and checks for a discrepancy time. See the manuals of the used PCS for more information.

  • Page 18: Restrictions For The Use In Safety Related Applications

    Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Restrictions for the use in safety related applications The given environmental conditions have to be obeyed at all times. All remarks in the CM42 Operating Manual and Installation Instructions (see chapter 1.4) have to be obeyed.
  • Page 19 To be sure, check with Endress + Hauser, if the sensor is to be used safely with the Liquiline M CM42 transmitter. •...
  • Page 20 2 and drive the system to a safe state, if the voltage drops below 9V. The current output 1 is supervised by the Liquiline M CM42 system and is reset if the voltage on output 1 drops below 9V.
  • Page 21 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Version: Page: 21 of 72...
  • Page 22 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Functional safety parameters Specific functional safety parameters for single-channel device operation: Parameters according to Liquiline M CM42, Memosens IEC 61508 1: pH limit monitoring 2: pH value measurement 3 and 4: safe calibration / adjustment...
  • Page 23 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL (Diagnostic coverage dangerous) 92 % According to Siemens SN29500 at 60°C/140°F. MTBF calculated as reciprocal of PFH/ , assuming constant failure rate. Total During this time all diagnostic functions are completed at least once.

  • Page 24: Behavior Of The Device When In Operation And In Case Of Failure

    Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Dangerous undetected failures in this scenario: A dangerous undetected failure is defined as a wrong measurement signal on the current outputs in the range of 4..20 mA, whereas a wrong measurement value is a value departing for more than the given precision (see chapter 2.1.3) from the true...

  • Page 25: Behavior Of The Device In The Event Of Alarms And Warnings

    Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL In case of the passive safe state, the system stops completely and displays some information. You have to repower the system to get it running again, but keep in mind that a passive safe state indicates a serious problem with the system.

  • Page 26: Installation

    The only temperature calibration is the one-point calibration. Calibrating the measuring point Calibration of the transmitter is not necessary, but calibration of the used sensor is mandatory. Please see Operating Instructions part 2 of Liquiline M CM42 and chapter 4.7.1. Version: Page:...

  • Page 27: Method Of Device Parameterization

    The classic mode is the default mode of the device after a reset or power on sequence. It is the non safe mode of the "traditional" Liquiline M CM42. Only in this mode parameter settings can be changed. The SIL mode is the operating mode for the safety functions.
  • Page 28 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Entering SIL mode: After password confirmation the software leads you to check and confirm the values of the lower and upper current output value in [pH] and the pH alteration rate in [pH/s].
  • Page 29 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL CAL hold SETUP hold DIAG hold Logbooks Lab device Correct hardware and software versions See chapter 1.3 Lower Limit current output 1 and 2 Identical Upper Limit current output 1 and 2 Identical The fastest way to default settings required for SIL mode: Use factory settings (DIAG –...
  • Page 30 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Version: Page: 30 of 72...
  • Page 31 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL You get this screen, if you have not correctly set up all parameters for SIL mode: If all parameters are OK, you get the screen to input the expert’s password.
  • Page 32 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Version: Page: 32 of 72...

  • Page 33: The Sil Mode - Active Safe State Mode

    Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Now the menu looks like: The SIL mode – Active safe state mode This mode always displays the reason for its activation. It is given as a hexadecimal number and looks like In this example the reason is 00000003, which means: "user has explicitly deactivated...
  • Page 34 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Number Number Reason decimal hexadecimal proposed action) as displayed on screen 00000000 No error. Maybe just switched to SIL mode. 00000002 User has explicitly deactivated the SIL measurement mode (via safe calibration)

  • Page 35: Switch To Sil Measurement Mode

    Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL 0000010 pH value exceeds pH limits. try changing sensor 0000011 Current output detected an invalid request. contact E+H service. 0000012 Responses to current output module came too slow/seldom. contact E+H service.
  • Page 36 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL The following screenshots give an impression how it looks like on the display: Version: Page: 36 of 72...
  • Page 37 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Now the Functional Safety menu looks like: Version: Page: 37 of 72...

  • Page 38: Using The Safe Sensor Calibration And Adjustment

    Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL The measurement screen will now look like: Using the safe sensor calibration and adjustment Important remark! You can also do the calibration in Classic mode (unsafe calibration/adjustment), this is not checked for when using a SIL sensor.
  • Page 39 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Tk = (T1+T2)/2, mean temperature of calibration and pH will be stored in the sensor, if the safe adjustment is used. 25°C For the formulas of the pH calculation see chapter 2.1.
  • Page 40 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Version: Page: 40 of 72...
  • Page 41 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Now carefully check the next screen, if all values are the same and if the value displayed makes sense for you. Only if everything is OK, push the "yes" soft key, and otherwise push "no".
  • Page 42 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Now again very carefully check the three values. If they are all the same, you can be sure, that these values have been written to the sensor correctly and will be used for this sensor now.
  • Page 43 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Version: Page: 43 of 72...
  • Page 44 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL You can check if a safe calibration was done by entering the calibration logbook (DIAG – Logbooks – Calibration logbook): A safe calibration is marked with “SIL”. The last picture above shows the result of the temperature calibration: the active safe state has been entered and the reason is 00000003, which means a safe calibration has taken place.

  • Page 45: Point Temperature Calibration

    Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL 4.7.2 1 point temperature calibration First enter the menu using the CAL menu in SIL measuring mode and follow the instructions given on the display carefully. Again: Only the safe screens must be used to document values. See the remarks given with the 2 point pH calibration in chapter 4.7.1.
  • Page 46 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Version: Page: 46 of 72...
  • Page 47 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Version: Page: 47 of 72...
  • Page 48 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Version: Page: 48 of 72...

  • Page 49: Maintenance, Recalibration

    Systematic errors can for example be forced by medium properties, environmental conditions, corrosion, etc. 6.2.1 Proof test of the Liquiline M CM42 transmitter You need a transmitter, a Memosens cable and a Memosens sensor. All components must be certified according to IEC 61508. You need an already calibrated sensor. You...
  • Page 50 7.0. You must adapt the corresponding settings in the procedure below and document that.) • Switch off the transmitter Liquiline M CM42. Now all devices (sensor, cable and transmitter) are switched off. • Put the sensor into the buffer with pH 9.0 or pH 9.2.

  • Page 51: Proof Test Of The Memosens Cable Cyk10

    Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL pH value is below pH 8.0, the current outputs must show a high or low error current for at least four seconds. The (active) safe state has been reached.
  • Page 52 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Version: Page: 52 of 72...
  • Page 53 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Version: Page: 53 of 72...

  • Page 54: Proof Test Of The Orbisint Cps11D Ph Sensor

    Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL 6.2.3 Proof test of the Orbisint CPS11D pH sensor You need a transmitter, a Memosens cable and a Memosens sensor. All components must be certified according to IEC 61508. You also need two buffer solutions, one with pH 7.0 and the other with pH 4.0.
  • Page 55 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Very important! Very carefully read the display during the proof test and only continue, if you have finished exactly, what has been asked for on the display. If you for example put the sensor in pH 7.0 instead of pH 4.0, this will leave the sensor in an almost unusable...
  • Page 56 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Version: Page: 56 of 72...
  • Page 57 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Version: Page: 57 of 72...
  • Page 58 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Version: Page: 58 of 72...
  • Page 59 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Version: Page: 59 of 72...
  • Page 60 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL In case the system detects a "correctable error", you get for example: In case of an unrecoverable error, you get for example: Version: Page: 60 of 72...

  • Page 61: Repair

    1. If only one of the Liquiline M CM42 modules is replaced, the complete system is NOT in an "almost new" state. Therefore you have to do a proof test of all not changed components and compute the current PFD value for your specific system.
  • Page 62 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Version: Page: 62 of 72...

  • Page 63: Notes On The Redundant Use Of The Device For Sil

    Right now, this is not possible in homogenous redundancy. But you can use inhomogeneous redundancy to reach SIL 3 using this device. Redundant use of the E+H SIL2 measuring chain (Liquiline M CM42 SIL, CYK10 SIL, Memosens SIL sensor) and one of another manufacturer is an option to reach a SIL3 pH measuring chain.

  • Page 64: Overview Of Modes And Current Output

    Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL To store the settings (all parameters) of the used transmitter, you can use a CopyDAT CY42-C1 (see operating instructions). Overview of modes and current output Mode of CM42 Current output 1...
  • Page 65 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL So after the proof test has been successfully finished, the systems PFD value has been "improved" and you can determine when the next proof test has to be carried out.

  • Page 66: Pfd

    Note! The following example can be used as the result for the safety parameters of the complete Endress+Hauser pH SIL measuring chain (see table at end of chapter). Assume we have a measuring point consisting of the following components from...
  • Page 67 + PFD actor As an example, the value of the complete (non-redundant) Endress+Hauser pH measuring chain, described at the beginning of this section, we get (The Memosens protocol has been taken into account with 1% of the PFD SIL-2 value = 1.0 E-4):...
  • Page 68 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL For the SFF of this specific chain you get: 93.8% with 92.3%, sensor 90.4% and cable 94.8%. transmitter The following table shows the specific functional safety parameters for a single-channel...
  • Page 69 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Parameters according to E+H Memosens pH SIL IEC 61508 measuring chain 1: pH limit monitoring 2: pH value measurement Safety Function 3+4: safe calibration and adjustment Hardware: 2, Software: 2...
  • Page 70 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL According to Siemens SN29500 at 60°/100° Celsius – 140°F/212°F. MTBF calculated as reciprocal of PFH/ Total During this time all diagnostic functions are completed at least once. Time between failure detection and failure reaction.
  • Page 71 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Version: Page: 71 of 72...
  • Page 72 Functional Safety Manual for the Memosens transmitter Liquiline M CM42 SIL Version: Page: 72 of 72...

Table of Contents