Endress+Hauser Deltapilot S FMB70 Functional Safety Manual

Endress+Hauser Deltapilot S FMB70 Functional Safety Manual

Level and pressure measurement with 4-20 ma output signal
Hide thumbs Also See for Deltapilot S FMB70:
Table of Contents

Advertisement

Quick Links

FY01053F/00/EN/01.21
71543541
2021-08-02
02.00.zz (Device firmware)
Products
Functional Safety Manual
Deltapilot S FMB70
Level and pressure measurement with
4-20 mA output signal
Solutions
Services

Advertisement

Table of Contents
loading

Summary of Contents for Endress+Hauser Deltapilot S FMB70

  • Page 1 Products Solutions Services FY01053F/00/EN/01.21 71543541 2021-08-02 02.00.zz (Device firmware) Functional Safety Manual Deltapilot S FMB70 Level and pressure measurement with 4-20 mA output signal...
  • Page 2 Deltapilot S FMB70 Order code: XXXXX-XXXXXX Ser. no.: XXXXXXXXXXXX Ext. ord. cd.: XXX.XXXX.XX Serial number www.endress.com/deviceviewer Endress+Hauser Operations App A0023555 Endress+Hauser...
  • Page 3: Table Of Contents

    Deltapilot S FMB70 Table of contents Table of contents 4.6.4 Check ......26 Declaration of Conformity ... 4 Safety-related characteristic values .
  • Page 4: Declaration Of Conformity

    Declaration of Conformity Deltapilot S FMB70 Declaration of Conformity A0046527 Endress+Hauser...
  • Page 5: Safety-Related Characteristic Values

    Deltapilot S FMB70 Declaration of Conformity Safety-related characteristic values A0046528 Endress+Hauser...
  • Page 6: About This Document

    About this document Deltapilot S FMB70 About this document Document function This supplementary Safety Manual applies in addition to the Operating Instructions, Technical Information and ATEX Safety Instructions. The supplementary device documentation must be observed during installation, commissioning and operation. The requirements specific for the protection function are described in this Safety Manual.
  • Page 7: Supplementary Device Documentation

    2.3.5 Certificate The associated certificate is available in the Endress+Hauser W@M Device Viewer or can be found in the declaration of conformity of the applicable Functional Safety Manual. This certificate must be valid at the time of delivery of the device.
  • Page 8: Order Codes

    Design Deltapilot S FMB70 A modification process according to IEC 61508 is applied for any device modifications. Any exemptions from possible combinations of features are saved in the Endress +Hauser ordering system. Valid device versions for safety-related use: 3.1.1 Order codes Deltapilot S FMB70 Feature: 010 "Approval"...
  • Page 9: Safety-Related Output Signal

    Deltapilot S FMB70 Design 3.3.1 Safety-related output signal The device' s safety-related signal is the 4 to 20 mA analog output signal as per NAMUR NE43. All safety measures refer to this signal exclusively. The device additionally communicates for information only via HART and contains all HART features with additional device information.
  • Page 10: Safety-Related Failures According To Iec / En 61508

    Design Deltapilot S FMB70 3.4.1 Safety-related failures according to IEC / EN 61508 Safety-related error Explanation Implications for the Implications for measuring uncertainty (see item number in safety related output graphic below) signal No device error Safe: SD None Is within the specification (see TI, BA, ...) No error λ...
  • Page 11: Restrictions For Safety-Related Operation

    Deltapilot S FMB70 Commissioning (installation and configuration) 3.4.3 Restrictions for safety-related operation • Device warm-up time: after device warm-up, the safety functions are available after a 30 Sekunden initialization period. • If the device is operated locally without a display and without an operating tool or without a HART communicator, it cannot be safely configured because the user cannot perform a visual check.
  • Page 12: Installation

    Commissioning (installation and configuration) Deltapilot S FMB70 Installation The mounting and wiring of the device and the permitted orientations are described in the Operating Instructions pertaining to the device. Correct installation is a prerequisite for safe operation of the device.
  • Page 13 Deltapilot S FMB70 Commissioning (installation and configuration) Parameter Available in the operating mode Group Pressure Level, level selection "Level easy pressure" MEASURING MODE MEASURING MODE EMPTY PRESSURE BASIC SETUP EMPTY CALIB. BASIC SETUP FULL PRESSURE BASIC SETUP FULL CALIB. BASIC SETUP...
  • Page 14 Commissioning (installation and configuration) Deltapilot S FMB70 For firmware version ≥02.30.zz • Any simulation which may be running is ended • No parameters are reset Log the following confirmed settings according to the "Device parameter configuration report". 9. Via the DIGIT SETS parameter, the user can check whether the characters and digits are displayed correctly on the user interface.
  • Page 15 Deltapilot S FMB70 Commissioning (installation and configuration) • OUTPUT FAIL MODE • SET MIN. CURRENT • SET MAX. ALARM The value saved is indicated on the fourth line of the local display. Options: • Valid: Select this option if the entered value or the desired value is displayed. The device continues to interrogate the safety-related parameters.
  • Page 16 Commissioning (installation and configuration) Deltapilot S FMB70 Parameter Available in the operating mode Group Pressure Level, level selection "Level easy pressure" SET MIN. CURRENT OUTPUT SET MAX. ALARM OUTPUT From firmware version ≥2.30 The EMPTY PRESSURE and FULL PRESSURE parameters are only displayed for the "Dry"...
  • Page 17 Deltapilot S FMB70 Commissioning (installation and configuration) 13. Only for firmware version ≤02.20.04: Via the OUTPUT CURRENT parameter, the user can check whether the following parameters are correctly reset to the factory values. If reset correctly, the OUTPUT CURRENT parameter displays "LinMaxNorm/22/3.8/0s".
  • Page 18 Commissioning (installation and configuration) Deltapilot S FMB70 15. Once the safety-related parameters have been successfully interrogated, the password "7452" must be entered again via the CONF. PASSWORD parameter. Afterwards, the device is locked for the safe measuring mode. The SAFETY LOCK parameter displays the status "Locked".
  • Page 19 Deltapilot S FMB70 Commissioning (installation and configuration) Parameter Available in the operating mode Group Pressure Level, level selection "Level easy pressure" SET MIN. CURRENT OUTPUT SET MAX. ALARM OUTPUT From firmware version ≥2.30 The EMPTY PRESSURE and FULL PRESSURE parameters are only displayed for the "Dry"...
  • Page 20 Commissioning (installation and configuration) Deltapilot S FMB70 13. Only for firmware version ≤02.20.04: Via the OUTPUT CURRENT parameter, the user can check whether the following parameters are correctly reset to the factory values. If reset correctly, the OUTPUT CURRENT parameter displays "LinMaxNorm/22/3.8/0s".
  • Page 21 Deltapilot S FMB70 Commissioning (installation and configuration) 15. Once the safety-related parameters have been successfully interrogated, the password "7452" must be entered again via the CONF. PASSWORD parameter. Afterwards, the device is locked for the safe measuring mode. The SAFETY LOCK parameter displays the status "Locked".
  • Page 22 CALIBRATION MODE parameter. You can read out the corresponding values for the EMPTY PRESSURE and FULL PRESSURE parameters here. • The sensor can only be recalibrated by Endress+Hauser Service. All parameters, except the parameters for a sensor recalibration, are reset by the "7864" reset code.
  • Page 23 CALIBRATION MODE parameter. You can read out the corresponding values for the EMPTY PRESSURE and FULL PRESSURE parameters here. • The sensor can only be recalibrated by Endress+Hauser Service. All parameters, except the parameters for a sensor recalibration, are reset by the "7864" reset code.
  • Page 24: Locking/Unlocking A Sil Device

    CALIBRATION MODE parameter. You can read out the corresponding values for the EMPTY PRESSURE and FULL PRESSURE parameters here. • The sensor can only be recalibrated by Endress+Hauser Service. All parameters, except the parameters for a sensor recalibration, are reset by the "7864" reset code.
  • Page 25: Parameters And Default Settings For Sil Mode

    Deltapilot S FMB70 Commissioning (installation and configuration) Parameters and default settings for SIL mode 4.6.1 "Increased security during parameter entry" method The device checks whether certain operating steps have been performed beforehand or whether invalid parameters have been configured. If this is the case, a message appears to this effect and this method is then no longer possible.
  • Page 26: Check

    • If operating via the DTM, it is only possible to lock via the SAFETY LOCK menu in the online mode. • The sensor can only be recalibrated by Endress+Hauser Service. All parameters, except the parameters for a sensor recalibration, are reset by the "7864" reset code.
  • Page 27: Operation

    Deltapilot S FMB70 Operation Operation Device behavior during power-up Once switched on, the device runs through a diagnostic phase of approx. 30 s. During this time, the current output is first set to approx. 12 mA, then to 4 mA, before the current that is output actually corresponds to the current measured value.
  • Page 28: Device Response In Event Of Overranging

    Operation Deltapilot S FMB70 Parameter Description Factory setting Parameterization method with increased security during parameter entry FW 02.20 FW ≥ Permitted SIL FW ≤ FW ≥ 02.30.zz 02.30.zz setting 02.20 Sens. pres. error Warning Warning Warning or Alarm As per client...
  • Page 29: Proof Testing

    Deltapilot S FMB70 Proof testing Proof testing The safety-related functionality of the device in the SIL mode must be verified during commissioning, when changes are made to safety-related parameters, and also at appropriate time intervals. This enables this functionality to be verified within the entire safety instrumented system.
  • Page 30: Verification Criterion

    • For level measurement: SET URV (012) ("Level easy pressure" level selection) Compare the displayed pressure measured value with the applied pressure again and check the current output. If there are any deviations, contact Endress+Hauser Service. ‣ Carry out steps 5 to 7 of test sequence A.
  • Page 31: Modification

    • Modifications to SIL devices must be performed by staff who have been authorized to perform this work by Endress+Hauser • Only original spare parts from Endress+Hauser must be used for modifications • All modifications must be documented in the Endress+Hauser W@M Device Viewer •...
  • Page 32: Appendix

    Appendix Deltapilot S FMB70 Appendix Structure of the measuring system 8.1.1 System components A0028746 PLC (programmable logic controller) 2 transmitter power supply units, e.g. RN221N (with communication resistor) Connection for Commubox FXA191, FXA195 and Field Communicator HART handheld terminal, e.g. Field Communicator...
  • Page 33: Commissioning Or Proof Test Report

    Deltapilot S FMB70 Appendix Commissioning or proof test report The following device-specific test report acts as a print/master template and can be replaced or supplemented any time by the customer' s own SIL reporting and testing system. Endress+Hauser...
  • Page 34: Pressure Device Parameter Configuration Form

    Appendix Deltapilot S FMB70 8.2.1 Pressure device parameter configuration form Operation via:  Handheld terminal  FieldCare/DeviceCare  On site Device designation: Serial number: Measuring Upper range limit (URL sensor): point: Parameter name Direct Menu path: Factory setting Permitted Actual...
  • Page 35 Deltapilot S FMB70 Appendix Parameter name Direct Menu path: Factory setting Permitted Actual Tested access Expert settings point value Current mode → HART Data Signaling or Enabled Signaling Enabled Bus address After locking: Config. → Transmitter counter data After performing a reset with reset code "7864"...
  • Page 36: Level Device Parameter Configuration Form

    Appendix Deltapilot S FMB70 8.2.2 Level device parameter configuration form Operation via:  Handheld terminal  FieldCare/DeviceCare  On site Device designation: Serial number: Measuring Upper range limit (URL sensor): point: Parameter name Direct Menu path: Factory setting Permitted Specifie...
  • Page 37 Deltapilot S FMB70 Appendix Parameter name Direct Menu path: Factory setting Permitted Specifie Actual Checked access Expert settings d value value 718 Transmitter under Warning Alarm o. warning temp. 720 Sensor under Warning Alarm o. warning temperature 726 Sens. temp. error...
  • Page 38: Parameter Description

    Appendix Deltapilot S FMB70 Parameter description 8.3.1 Parameter description of the SAFETY CONFIRM. group - "Pressure" measuring mode For other parameter descriptions, e.g. level, see the corresponding Operating Instructions. The numbers in brackets indicate the identification numbers of the parameters on the local display.
  • Page 39 Deltapilot S FMB70 Appendix Parameter name Description OUTPUT FAIL MODE Only for firmware version ≥ 2.30 (57) For displaying and querying the set output fail mode. Possibilities: • Max. alarm (110 %) • Min. alarm (–10 %) Options: • Valid Select this option if the selected and desired value is displayed •...
  • Page 40 Appendix Deltapilot S FMB70 Parameter name Description ACK. ALARM MODE For displaying and querying the option selected for the ACK. ALARM MODE parameter (MESSAGES group). (844) Possibilities: • On • Off Options: • Valid Select this option if the selected and desired value is displayed •...
  • Page 41: Version History

    Deltapilot S FMB70 Appendix Parameter name Description SET URV For displaying and querying the value entered or calculated for the SET URV parameter (BASIC SETUP or (853) QUICK SETUP group). Options: • Valid Select this option if the selected and desired value is displayed •...
  • Page 44 *71543541* 71543541 www.addresses.endress.com...

Table of Contents