Table of Contents

Advertisement

Quick Links

FY01099G/00/EN/01.23-00
71618211
2023-06-12
01.yy.zz (Device firmware)
Products
Functional Safety Manual
Proserve NMS80
Intelligent tank gauge for high-precision liquid level
measurements and bulk solids with a 4 to 20 mA output
signal and switch output
Solutions
Services

Advertisement

Table of Contents
loading

Summary of Contents for Endress+Hauser Proserve NMS80

  • Page 1 Products Solutions Services FY01099G/00/EN/01.23-00 71618211 2023-06-12 01.yy.zz (Device firmware) Functional Safety Manual Proserve NMS80 Intelligent tank gauge for high-precision liquid level measurements and bulk solids with a 4 to 20 mA output signal and switch output...
  • Page 2 Proserve NMS80 Order code: XXXXX-XXXXXX Ser. no.: XXXXXXXXXXXX Ext. ord. cd.: XXX.XXXX.XX Serial number www.endress.com/deviceviewer Endress+Hauser Operations App A0023555 Endress+Hauser...
  • Page 3: Table Of Contents

    Proserve NMS80 Table of contents Table of contents Proof testing ......21 Declaration of conformity ... 4 5.3.1...
  • Page 4: Declaration Of Conformity

    Declaration of conformity Proserve NMS80 Declaration of conformity A0044238 Endress+Hauser...
  • Page 5 Proserve NMS80 Declaration of conformity A0044239 Endress+Hauser...
  • Page 6: Other Safety-Related Characteristic Values

    Declaration of conformity Proserve NMS80 Other safety-related characteristic values Characteristic value as per IEC 61508 Value MTBF 29 Jahre System reaction time as per DIN EN 61508-2 In "Expert mode": User configurable According to Siemens SN29500 This value takes into account failure modes relevant to the function of the electronic components.
  • Page 7: Document Information

    The document is part of the Operating Instructions and serves as a reference for application-specific parameters and notes. • General information about functional safety: SIL • General information about SIL is available: In the Download Area of the Endress+Hauser Internet site: www.de.endress.com/SIL Using this document 2.2.1...
  • Page 8: Symbols In Graphics

    Document information Proserve NMS80 2.3.3 Symbols in graphics Symbol Meaning 1, 2, 3,... Item numbers … Series of steps A, B, C, ... Views Supplementary device documentation Documentation Comment Technical Information: The documentation is available on the Internet: • TI01248G/00 (NMS80) →...
  • Page 9: Permitted Devices Types

    Proserve NMS80 Permitted devices types Permitted devices types The details pertaining to functional safety in this manual relate to the device versions listed below and are valid as of the specified software and hardware version. Unless otherwise specified, all subsequent versions can also be used for safety functions. A modification process according to IEC 61508 is applied for any device modifications.
  • Page 10: Sil Label On The Nameplate

    Safety function Proserve NMS80 Order code * All options are possible. (This selection does not affect SIL capability.) • Valid firmware version: as of 01.02.zz (→ nameplate of the device) • Valid hardware version (electronics): as of date of production 23.11.2016 (→ nameplate...
  • Page 11: Restrictions For Use In Safety-Related Applications

    Proserve NMS80 Safety function The device can also communicate via HART for information purposes and contains all the HART features with additional device information. The safety-related output signal is fed to a downstream logic unit, e.g. a programmable logic controller or a limit signal transmitter where it is monitored for the following: •...
  • Page 12: Dangerous Undetected Failures In This Scenario

    Safety function Proserve NMS80 I [mA] A0025264 HI-Alarm ≥21 mA Error range ±2 % LO-Alarm ≤3.6 mA 4.3.1 Dangerous undetected failures in this scenario A dangerous, undetected failure is considered to be an incorrect output signal that deviates from the real value by more than 2 %, wherein the output signal is still in the range of 4 to 20 mA or the relay contact remains closed.
  • Page 13: Use In Safety Instrumented

    Proserve NMS80 Use in safety instrumented systems Use in safety instrumented systems Device behavior during operation Digital 5.1.1 Device behavior when switched on Once switched on, the device runs through a diagnostic phase of approx. 30 seconds. The relay contact is open during this time. During the diagnostic phase, communication via the service interface (CDI) or via protocols (HART, V1, Modbus, WM550) is not possible.
  • Page 14: Device Behavior In The Event Of Alarms And Warnings

    Use in safety instrumented systems Proserve NMS80 5.1.7 Device behavior in the event of alarms and warnings The output current in the event of an alarm can be set to a value of ≤3.6 mA or ≥21.0 mA. In some cases, e.g. failure of power supply, a cable break and faults in the current output itself where the failure current ≥21.0 mA cannot be set, output currents ≤3.6 mA occur...
  • Page 15: Calibration Of The Measuring Point - Safety Function 2 (Current Input Measurement)

    Proserve NMS80 Use in safety instrumented systems Navigate to: Setup Setting • Level source = Level • Empty andTank reference height must be set correctly. • High stop level andLow stop level must be set correctly. Navigate to: Setup → Gauge command...
  • Page 16: Configuration Method

    Use in safety instrumented systems Proserve NMS80 Setting • Operating mode =4..20mA input or HART master+4..20mA input • Analog input 0% value must be set correctly. • Analog input 100% value must be set correctly. Analog output (2) Make sure that the correct output is configured (Analog I/O B1-3 or Analog I/O C1-3).
  • Page 17 Proserve NMS80 Use in safety instrumented systems A detailed description of the configuration steps is provided in the following section. Only in the case of SIL devices (order code 590 "Additional Approval", option LA "SIL") is the SIL commissioning sequence visible on the display and in external operating tools.
  • Page 18 Use in safety instrumented systems Proserve NMS80 Set write protection = Enter the locking code again (SIL: 7452). Check the locking status after performing SIL locking. Navigate to: Setup → Advanced setup Locking status = SIL locked must be confirmed by selecting "".
  • Page 19 Proserve NMS80 Use in safety instrumented systems Further parameter settings The following parameters affect the safety function. However, they may be freely configured in accordance with the application: It is recommended to note down the configured values! Parameter Parameter name...
  • Page 20 Use in safety instrumented systems Proserve NMS80 for proof testing as per test sequence A →  22 or test sequence B →  24 or test sequence C →  26. CAUTION Unlocking the device deactivates diagnostic functions, and the device may not be able to carry out its safety function when unlocked.
  • Page 21: Proof Testing

    Proserve NMS80 Use in safety instrumented systems Proof testing Check the operativeness and safety of safety functions at appropriate intervals! The time intervals must be specified by the operator. The corresponding values and illustrations in the section on "Other safety-related characteristic values"...
  • Page 22: Test Sequence A (Approach The Level)

    Use in safety instrumented systems Proserve NMS80 5.3.1 Test sequence A (Approach the level) Preparatory steps 1. Point level monitoring and range monitoring can also be performed when the SIL mode is active. 2. If the safety-related "Analog" signal is used, connect a suitable measuring device (recommended accuracy better than ±0.1 mA) in the installed circuit.
  • Page 23 Proserve NMS80 Use in safety instrumented systems 1. Deactivate SIL mode. Navigate to: Setup → Advanced setup → Deactivate SIL/WHG and enter the relevant unlocking code (SIL: 7452) for the Reset write protection parameter. 2. Perform the device self-check as follows. Navigate to: Setup → Advanced setup 3.
  • Page 24: Test Sequence B (Simulate The Level)

    Use in safety instrumented systems Proserve NMS80 5.3.2 Test sequence B (simulate the level) Preparatory steps 1. Deactivate SIL mode. Navigate to: Setup → Advanced setup → Deactivate SIL/WHG and enter the relevant unlocking code (SIL: 7452) for the Reset write protection parameter.
  • Page 25 Proserve NMS80 Use in safety instrumented systems POWER A0032860 1. Deactivate SIL mode. Navigate to: Setup → Advanced setup → Deactivate SIL/WHG and enter the relevant unlocking code (SIL: 7452) for the Reset write protection parameter. 2. Perform the device self-check as follows. Navigate to: Setup → Advanced setup 3.
  • Page 26: Test Sequence C (Simulation And Single-Point Level Detection)

    Use in safety instrumented systems Proserve NMS80 5.3.3 Test sequence C (simulation and single-point level detection) Preparatory steps 1. Deactivate SIL mode. Navigate to: Setup → Advanced setup → Deactivate SIL/WHG and enter the relevant unlocking code (SIL: 7452) for the Reset write protection parameter.
  • Page 27 Proserve NMS80 Use in safety instrumented systems 5. For every level value, read the output current (mA) and the switch status of the relay (Ω), record them and assess for accuracy. The test has been passed successfully if the current values and the switch status of the relay in step 5 are within the required accuracy limits.
  • Page 28 Use in safety instrumented systems Proserve NMS80 End of test sequence C • The device has failed the proof test if the expected current value/relay resistance value at a specific level deviates by >±2 %. For troubleshooting, refer to the Operating Instructions→...
  • Page 29: Test Sequence D (Feed In Real Currents)

    Proserve NMS80 Use in safety instrumented systems 5.3.4 Test sequence D (Feed in real currents) Preparatory steps 1. Point level monitoring and range monitoring can also be performed when the SIL mode is active. 2. If the safety-related "Analog" signal is used, connect a suitable measuring device (recommended accuracy better than ±0.1 mA) in the installed circuit.
  • Page 30 Use in safety instrumented systems Proserve NMS80 2. Perform the device self-check as follows. Navigate to: Setup → Advanced setup 3. Setting: Input/output = Digital Xy-z 4. Check whether Contact type = Normally closed (SIL factory setting). 5. Setting: Output simulation = Simulating inactive.
  • Page 31: Life Cycle

    Proserve NMS80 Life cycle Life cycle Requirements for personnel The personnel for installation, commissioning, diagnostics, repair and maintenance must meet the following requirements: • Trained, qualified specialists must have a relevant qualification for this specific function and task • Are authorized by the plant owner/operator •...
  • Page 32: Repairs

    Life cycle Proserve NMS80 Repairs Repair means restoring functional integrity by replacing defective components. Components of the same type must be used for this purpose. We recommend documenting the repair. This includes specifying the device serial number, the repair date, the type of repair and the individual who performed the repair.
  • Page 33: Modification

    • Repeat the device commissioning check (Diagnostics → Device check). Installation Instructions, see the Download Area at www.endress.com. The replaced component must be sent to Endress+Hauser for the purpose of fault analysis if the device has been operated in a protective system and a device error cannot be ruled out.
  • Page 34: Appendix

    Appendix Proserve NMS80 Appendix Structure of the measuring system 7.1.1 System components The measuring system' s devices are displayed in the following diagram (example): NXA820 A0032783 Proservo NMS80/81/83 4 to 20 mA line Switch output Fieldbus (e.g. Modbus, V1) Tankvision Tank Scanner NXA820...
  • Page 35 Proserve NMS80 Appendix A0032821 Datum plate: reference point of the measurement Low stop 4 mA, 0% L or LL alarm H or HH alarm 20 mA, 100% High stop The device can be used in this arrangement in safety instrumented systems for MIN safety, MAX safety and range monitoring.
  • Page 36: Proof Testing

    Appendix Proserve NMS80 Proof testing System-specific data Company Measuring point/TAG no. Facility Device type/Order code Serial number of device Name Date Access code (if individual to each device) Locking code used  7452 Signature Device-specific commissioning parameters Upper density Process condition...
  • Page 37: Further Information

    Proserve NMS80 Appendix Please note the following when carrying out the proof test: If an error is detected in one of the redundantly operated devices, the other devices must be checked to see if the same error occurs. Further information General information on functional safety (SIL) is available at: www.de.endress.com/SIL (Germany) or www.endress.com/SIL (English) and in the...
  • Page 40 *71618211* 71618211 www.addresses.endress.com...

Table of Contents