Endress+Hauser Proservo NMS80 Functional Safety Manual
Hide thumbs Also See for Proservo NMS80:

Advertisement

Quick Links

SD01920G/00/EN/01.17
71350261
Intelligent tank gauge for high-precision measurement of the level of liquids
with a 4-20 mA output signal and switch output
Products
Special Documentation
Proservo NMS80/81/83
Functional Safety Manual
Solutions
Services

Advertisement

Table of Contents
loading

Summary of Contents for Endress+Hauser Proservo NMS80

  • Page 1 Products Solutions Services SD01920G/00/EN/01.17 71350261 Special Documentation Proservo NMS80/81/83 Functional Safety Manual Intelligent tank gauge for high-precision measurement of the level of liquids with a 4-20 mA output signal and switch output...
  • Page 2: Table Of Contents

    Proservo NMS80/81/83 Table of contents Declaration of Conformity ....3 Other safety-related characteristic values ... . .
  • Page 3: Declaration Of Conformity

    Proservo NMS80/81/83 Declaration of Conformity A0032861 Endress+Hauser...
  • Page 4 Proservo NMS80/81/83 A0032862 Endress+Hauser...
  • Page 5: Other Safety-Related Characteristic Values

    Proservo NMS80/81/83 Other safety-related Characteristics as per IEC 61508 Value characteristic values Safety function MIN, MAX, Range SIL 2 (single-channel architecture 1oo1) SIL 3 (multi-channel architecture, also with homogeneous redundancy, e.g. 1oo2, 2oo3) Device type Operating mode Low demand mode, high demand mode...
  • Page 6: Document Information

    • General information about functional safety: SIL • General information about SIL is available: In the Download Area of the Endress+Hauser Internet site: www.de.endress.com/SIL Using this document Information on the document structure For the arrangement of the parameters as per the Operation menu, Setup menu, Diagnostics...
  • Page 7: Supplementary Device Documentation

    Proservo NMS80/81/83 Supplementary device Documentation Comment documentation Technical Information: The documentation is available on the Internet: • TI01248G/00 (NMS80) → www.endress.com • TI01249G/00 (NMS81) • TI01250G/00 (NMS83) Operating Instructions The documentation is available on the Internet: • BA01456G/00 (NMS80) → www.endress.com •...
  • Page 8: Permitted Devices Types

    Proservo NMS80/81/83 Permitted devices types The details pertaining to functional safety in this manual relate to the device versions listed below and are valid as of the specified software and hardware version. Unless otherwise specified, all subsequent versions can also be used for safety functions. A modification process according to IEC 61508 is applied for device changes.
  • Page 9: Sil Label On The Nameplate

    Proservo NMS80/81/83 • Valid firmware version: as of 01.02.zz (→ nameplate of the device) • Valid hardware version (electronics): as of date of production 23.11.2016 (→ nameplate of the device) SIL label on the nameplate SIL certified devices are marked with the following symbol on the nameplate:...
  • Page 10: Restrictions For Use In Safety-Related Applications

    Proservo NMS80/81/83 Restrictions for use in safety- • The measuring system must be used correctly for the specific application, taken into account the medium properties and ambient conditions. Carefully follow instructions pertaining to critical related applications process situations and installation conditions from the Operating Instructions. The application- specific limits must be observed.
  • Page 11 Proservo NMS80/81/83 Dangerous undetected failures in this scenario A dangerous, undetected failure is considered to be an incorrect output signal that deviates from the real value by more than 2 %, wherein the output signal is still in the range of 4 to 20 mA or the relay contact remains closed.
  • Page 12: Use In Protective Systems

    Proservo NMS80/81/83 Use in protective systems Device behavior during Digital operation Device behavior during power-up Once switched on, the device runs through a diagnostic phase of approx. 30 seconds. The relay contact is open during this time. During the diagnostic phase, no communication is possible via the service interface (CDI) or via protocols (HART, V1, Modbus).
  • Page 13: Parameter Configuration For Safety-Related Applications

    Proservo NMS80/81/83 Alarm and warning messages Additional information is provided by the alarm and warning messages in the form of error codes and associated clear text messages. The following table shows the correlation between the error code and the current output:...
  • Page 14 Proservo NMS80/81/83 Digital output (3) First select an alarm block (Alarm 1, Alarm 2, Alarm 3 or Alarm 4) for the limit value settings. Navigate to: Setup → Advanced setup → Application → Alarm → Alarm X Setting • Alarm mode = On •...
  • Page 15 Proservo NMS80/81/83 Setting • Operating mode = Output passive • Digital input source = selected alarm block (Alarm 1 any, Alarm 2 any, Alarm 3 any or Alarm 4 any) • Used for SIL/WHG = Enabled must be set to use this digital output as a SIL output.
  • Page 16 Proservo NMS80/81/83 Carry out function test. For MIN and MAX monitoring, at least one level/current input value above (MAX monitoring) or below (MIN monitoring) the switch point must be approached. For range monitoring, 5 level values/current input values which cover the entire measuring range should be approached.
  • Page 17 Proservo NMS80/81/83 Further parameter settings The following parameters affect the safety function. However, they may be freely configured in accordance with the application: It is recommended to note down the configured values! Parameter Parameter name Setup Upper density Setup Process condition...
  • Page 18 Proservo NMS80/81/83 CAUTION Unlocking the device deactivates diagnostic functions, and the device may not be able to carry out its safety function when unlocked. ‣ Therefore, independent measures must be taken to ensure that there is no risk of danger while the device is unlocked.
  • Page 19: Proof-Testing

    Proservo NMS80/81/83 Proof-testing Check the operativeness and safety of safety functions at appropriate intervals! The operator must determine the time intervals. The values and graphics in the "Additional safety-related characteristics" section can be used for this purpose (→  5). The test must be carried out in such a way that it verifies the correct operation of the protective system in interaction with all of the components.
  • Page 20 Proservo NMS80/81/83 Test sequence A (approach the level) Preparation Level limit value monitoring and range monitoring can also be performed when the SIL mode is active. If the "Analog" safety-related signal is used, connect a suitable measuring device (recommended accuracy better than ±0.1 mA) to the current output.
  • Page 21 Proservo NMS80/81/83 Check whether the contact is open (resistance >1 MΩ) between contacts Xy and Xz. Set: Output simulation = Simulating inactive. 10. Check whether the contact is closed (resistance <1 Ω) between contacts Xy and Xz. 11. Set: Output simulation = Fault 2.
  • Page 22 Proservo NMS80/81/83 Test sequence B (simulate the level) Preparation Deactivate SIL mode. Navigate to: Setup → Advanced setup → Deactivate SIL/WHG and enter the corresponding unlocking code (SIL: 7452) for the Reset write protection parameter. If the "Analog" safety-related signal is used, connect a suitable measuring device (recommended accuracy better than ±0.1 mA) to the current output.
  • Page 23 Proservo NMS80/81/83 Deactivate SIL mode. Navigate to: Setup → Advanced setup → Deactivate SIL/WHG and enter the corresponding unlocking code (SIL: 7452) for the Reset write protection parameter. Perform the device self-check as follows. Navigate to: Setup → Advanced setup Set: Input/output = Digital Xy-z Check whether Contact type = Normally closed (SIL factory setting).
  • Page 24 Proservo NMS80/81/83 Test sequence C (feed-in real currents) Preparation Level limit value monitoring and range monitoring can also be performed when the SIL mode is active. If the "Analog" safety-related signal is used, connect a suitable measuring device (recommended accuracy better than ±0.1 mA) to the current output.
  • Page 25 Proservo NMS80/81/83 Check whether the contact is open (resistance >1 MΩ) between contacts Xy and Xz. Set: Output simulation = Simulating inactive. 10. Check whether the contact is closed (resistance <1 Ω) between contacts Xy and Xz. 11. Set: Output simulation = Fault 2.
  • Page 26: Life Cycle

    Proservo NMS80/81/83 Life cycle Requirements for personnel The personnel for installation, commissioning, diagnostics, repair and maintenance must meet the following requirements: • Trained, qualified specialists must have a relevant qualification for this specific function and task • Are authorized by the plant owner/operator •...
  • Page 27: Repairs

    Proservo NMS80/81/83 Repairs Repair means restoring functional integrity by replacing defective components. Components of the same type must be used for this purpose. We recommend documenting the repair. This includes specifying the device serial number, the repair date, the type of repair and the individual who performed the repair.
  • Page 28: Modification

    Installation Instructions, see the Download Area at www.endress.com. The replaced component must be sent to Endress+Hauser for the purpose of fault analysis if the device has been operated in a protective system and a device error cannot be ruled out. In this case, always enclose the "Declaration of Hazardous Material and Decontamination"...
  • Page 29: Appendix

    Proservo NMS80/81/83 Appendix Structure of the measuring System components system The measuring system' s devices are displayed in the following diagram (example): NXA820 A0032783 Proservo NMS80/81/83 4 to 20 mA line Switch output Fieldbus (e.g. Modbus, V1) Tankvision Tank Scanner NXA820...
  • Page 30 Proservo NMS80/81/83 A0032821 Datum plate: reference point of the measurement Low stop 4 mA, 0% L or LL alarm H or HH alarm 20 mA, 100% High stop The device can be used in this arrangement in safety instrumented systems for MIN safety, MAX safety and range monitoring.
  • Page 31: Proof-Testing

    Proservo NMS80/81/83 Proof-testing System-specific data Company Measuring point/TAG no. Facility Device type/Order code Serial number of device Name Date Access code (if individual to each device) Locking code used  7452 Signature Device-specific commissioning parameters Upper density Process condition High stop level...
  • Page 32 *71350261* 71350261 www.addresses.endress.com...

This manual is also suitable for:

Proservo nms81Proservo nms83

Table of Contents