Endress+Hauser Micropilot FMR62 Functional Safety Manual
Free space radar for liquids and bulk solids with 4 to 20 ma output signal
Hide thumbs
Also See for Micropilot FMR62:
- Technical information (88 pages) ,
- Safety instructions (64 pages) ,
- Functional safety manual (32 pages)
Related Manuals for Endress+Hauser Micropilot FMR62
Summary of Contents for Endress+Hauser Micropilot FMR62
- Page 1 Products Solutions Services FY01055F/00/EN/01.21-00 71555196 2022-01-11 01.00.zz (Device firmware) Functional Safety Manual Micropilot FMR62 Free space radar for liquids and bulk solids with 4 to 20 mA output signal...
- Page 2 Micropilot FMR62 Order code: XXXXX-XXXXXX Ser. no.: XXXXXXXXXXXX Ext. ord. cd.: XXX.XXXX.XX Serial number www.endress.com/deviceviewer Endress+Hauser Operations App A0023555 Endress+Hauser...
-
Page 3: Table Of Contents
Micropilot FMR62 Table of contents Table of contents Declaration of Conformity ... 4 Operation ......19 Safety-related characteristic values . -
Page 4: Declaration Of Conformity
Declaration of Conformity Micropilot FMR62 Declaration of Conformity A0046346 Endress+Hauser... -
Page 5: Safety-Related Characteristic Values
Micropilot FMR62 Declaration of Conformity Safety-related characteristic values A0046347 Endress+Hauser... -
Page 6: About This Document
About this document Micropilot FMR62 About this document Document function This supplementary Safety Manual applies in addition to the Operating Instructions, Technical Information and ATEX Safety Instructions. The supplementary device documentation must be observed during installation, commissioning and operation. The requirements specific to the protection function are described in this safety manual. -
Page 7: Supplementary Device Documentation
• W@M Device Viewer (www.endress.com/deviceviewer): Enter the serial number from the nameplate • Endress+Hauser Operations App: Enter the serial number from the nameplate or scan the matrix code on the nameplate The following document types are available in the Downloads section of the Endress+Hauser website (www.endress.com/downloads):... -
Page 8: Design
Design Micropilot FMR62 Design Permitted device types The details pertaining to functional safety in this manual relate to the device versions listed below and are valid as of the specified firmware and hardware versions. Unless otherwise specified, all subsequent versions can also be used for safety functions. -
Page 9: Identification Marking
Micropilot FMR62 Design Feature: 590 "Additional approval" Version: • LA • The "LA" version must be selected for use as a safety function as per IEC 61508. Feature: 610 "Accessory mounted" Version: all Feature: 620 "Accessory enclosed" Version: all Feature: 850 "Firmware version"... -
Page 10: Redundant Configuration Of Multiple Sensors
Design Micropilot FMR62 NOTICE In an alarm condition ‣ Ensure that the equipment under control achieves or maintains a safe state. 3.3.2 Redundant configuration of multiple sensors This section provides additional information regarding the use of homogeneously redundant sensors e.g. in 1oo2 or 2oo3 architectures. -
Page 11: Restrictions For Safety-Related Use
Micropilot FMR62 Commissioning (installation and configuration) λ (Safe) • Safe failure • Implication for the safety-related output signal: The current measured value is output (2) or adopts the safe state (3) and measuring uncertainty is within the specified safety measured errors λ... -
Page 12: Installation
Commissioning (installation and configuration) Micropilot FMR62 ‣ Personnel must be authorized by the plant owner/operator. ‣ Be familiar with federal/national regulations. ‣ Before starting work: personnel must read and understand the instructions in the manual and supplementary documentation as well as the certificates (depending on the application). -
Page 13: Locking In "Increased Safety Mode
Micropilot FMR62 Commissioning (installation and configuration) Two methods of configuring the device are provided, which differ mainly with regard to the confirmation concept: • "Increased safety mode" While the commissioning sequence is performed, critical parameters which control functions in the safety path are either set automatically by the device to safe values or transferred to the display/operating tool via an alternative data format so that the setting can be checked. -
Page 14: Locking In Expert Mode
Commissioning (installation and configuration) Micropilot FMR62 5. Setting: "Commissioning = Increased safety mode". The device checks the parameter settings according to the following table and forces the switching of parameters if necessary. Once testing is finished, "SIL/WHG preparation: Finished" is displayed, and the commissioning sequence can continue. -
Page 15: Unlocking A Sil Device
Micropilot FMR62 Commissioning (installation and configuration) 5. Setting: "Commissioning = Expert mode". The device checks the parameter settings according to the following table and forces the switching of parameters if necessary. Once testing is finished, "SIL/WHG preparation: Finished" is displayed, and the commissioning sequence can continue. -
Page 16: Parameters And Default Settings For Sil Mode
Commissioning (installation and configuration) Micropilot FMR62 Parameters and default settings for SIL mode The following parameters affect the safety function. However, they may be freely configured in accordance with the application. In increased safety mode, it is necessary to confirm the configured values during the remainder of the commissioning process. - Page 17 Micropilot FMR62 Commissioning (installation and configuration) The following parameters affect the safety function and are automatically adapted by the device when configuring higher-ranking parameters (known as application parameters). It is not possible to specify values because the higher-ranking parameters may be user- configurable.
- Page 18 Commissioning (installation and configuration) Micropilot FMR62 The following parameters affect the safety function. If the settings differ from the as- delivered state of the device, only the expert mode can be selected during SIL/WHG confirmation. It is not possible to specify values because the as-delivered state of the device depends on the order code.
-
Page 19: Operation
Micropilot FMR62 Operation Operation Device behavior during power-up After SIL locking, additional diagnostics are active and critical parameters in the safety path are set to safe values. Therefore, the behavior of the device in the "SIL- locked state" may deviate from the "non-SIL-locked state". If a test phase takes place before the system is finally put into production, it is recommended that this test phase be run in the locked state in order to obtain the most conclusive results possible. -
Page 20: Exceptions
Proof testing Micropilot FMR62 Error code "Cxxx" • Current output: corresponding to measuring mode • Comment: xxx = three-digit number Error code "Sxxx" • Current output: corresponding to measuring mode • Comment: xxx = three-digit number 5.4.1 Exceptions The error codes are listed in the Operating Instructions. -
Page 21: Test Sequence A
Micropilot FMR62 Proof testing Heartbeat Verification enables the documentation of the current device diagnostic or device status as proof of testing. This supports the documentation of proof tests according to IEC 61511-1:2016 Section 16.3.3, "Documentation of proof tests and inspections". -
Page 22: Test Sequence B
Proof testing Micropilot FMR62 3. If (as an option) the function of the measuring point is to be checked immediately before the switch point, check the function before the MIN or MAX switch point: Approach the level directly below (MAX monitoring) or above (MIN monitoring) the point level to be monitored. -
Page 23: Test Sequence C
Micropilot FMR62 Proof testing The test is to be considered successful if the current values in step 2 are within the required level of accuracy. NOTICE The device has failed the proof test if the current value at a specific level deviates by >... -
Page 24: Test Sequence D
Proof testing Micropilot FMR62 Procedure for range monitoring 1. Perform device self-check. For this, in the operating menu "Expert → Sensor → Sensor diagnostics → Start self check" select "Yes". 2. After performing the test, read the result in the "Expert→ Sensor → Sensor diagnostics →... - Page 25 Micropilot FMR62 Proof testing 3. At any level within the measuring range, determine the actual measured value displayed by the device or the actual output current and compare it against the target value specified by the current level. This part of the test is deemed successful if the values are within the required level of accuracy.
-
Page 26: Verification Criterion
• Person who performed the repair Components may be repaired/replaced by the customer' s specialist staff if original Endress+Hauser spare parts (which can be ordered by the end customer) are used, and if the relevant installation instructions are followed. A proof test must always be performed after every repair. -
Page 27: Modification
• Modifications to SIL devices must be performed by staff who have been authorized to perform this work by Endress+Hauser • Only original spare parts from Endress+Hauser must be used for modifications • All modifications must be documented in the Endress+Hauser W@M Device Viewer •... -
Page 28: Decommissioning
(WEEE), the product is marked with the depicted symbol in order to minimize the disposal of WEEE as unsorted municipal waste. Do not dispose of products bearing this marking as unsorted municipal waste. Instead, return them to Endress+Hauser for disposal under the applicable conditions. -
Page 29: Description Of Use As A Safety Instrumented System
Micropilot FMR62 Appendix A0028746 PLC (programmable logic controller) Transmitter power supply unit RN221N (with communication resistor) Connection for Commubox FXA191, FXA195 and Field Communicator 375, 475 Field Communicator 475 Computer with operating tool (e.g. FieldCare, AMS Device Manager, SIMATIC PDM) -
Page 30: Commissioning Or Proof Test Report
Appendix Micropilot FMR62 A0024238 1 Typical measuring arrangement Flange: Reference point of measurement 20 mA, 100 % 4 mA, 0 % The device can be used in this arrangement in safety instrumented systems for MIN safety, MAX safety and range monitoring. -
Page 31: Test Report
Micropilot FMR62 Appendix 8.2.1 Test Report System-specific data Company Measuring points/TAG No. Facility Device type/Order code Serial number of device Name Date/time Access code (if individual to each device) Locking code used 7450 7452 SIL and WHG 7454 Signature Device-specific commissioning parameters (only in “Increased safety mode”) -
Page 32: Version History
Appendix Micropilot FMR62 Version history FY01055F; version 01.21 • Firmware version: from 01.00.zz (zz: any double number) • Hardware version: from date of manufacture 28 February 2017 • Changes: Certificate renewed • Predecessor: SD01950F Micropilot FMR60/62/67 Endress+Hauser... - Page 36 *71555196* 71555196 www.addresses.endress.com...