Section 1: Introduction This safety manual provides essential information necessary to design, install, verify and maintain a Safety Instrumented Function (SIF) utilizing Emerson Actuator Series GVO-CLP-SR/FS. This manual provides necessary requirements for meeting the IEC 61508:2010 (Sections 1 to 7) or IEC 61511 functional safety standards.
SIL Safety Manual Section 2: Acronyms SM-025-GVO Rev. 0 November 2017 Section 2: Acronyms FMEDA: Failure Modes, Effects and Diagnostic Analysis HFT: Hardware Fault Tolerance (ref: 7.4.4 of IEC 61508-2:2010) Average Probability of dangerous Failure on Demand (ref: 3.6.18 of IEC 61508-4:2010) SFF: Safe Failure Fraction, property of a safety related element that is defined by the ratio of the average failure rates of safe plus dangerous detected failures...
November 2017 SM-025-GVO Rev. 0 Section 3: Functional Specification The safety function performed by Emerson actuator series GVO-CLP-SR/FS is defined as follows: The actuator performs the safety function on demand if it delivers a full stroke driven by the spring, moving the valve to the safe position (either closed or open depending upon the valve to be actuated) when the system is de-energized.
GVO-CLP-SR/FS pneumatic linear spring return actuator general description Emerson GVO-CLP-SR/FS low pressure pneumatic spring return linear actuator series is engineered and is manufactured to provide fail safe operation for any linear application such as wedge gate and through conduit gate valves, in On-Off and Modulating Heavy duty service;...
SM-025-GVO Rev. 0 GVO-CLP-SR/FS working principle Emerson GVO-CLP-SR/FS actuator working principle is simplified in the following Figure 2. In the normal operating situation the operating fluid (instrument air, nitrogen or sweet gas) is supplied to the actuator’s open (close) chamber of the pneumatic cylinder: the cylinder piston stroke causes the actuator operation and the consequent valve movement to the open (close) operational position, and at the same time compresses the spring.
SIL Safety Manual Section 5: Service Condition Limitations SM-025-GVO Rev. 0 November 2017 Section 5: Service Condition Limitations (limitation of use) The designer of an SIF must check that the product is rated for use within the expected application limits. The operating conditions limits strongly depend on the actuator type and on its construction materials.
Page 10
Section 5: Service Condition Limitations SIL Safety Manual November 2017 SM-025-GVO Rev. 0 Table 1. MHW Manual Hand-wheel MHP Manual Hydraulic To ensure that the hand pump has been correctly disengaged after a manual override operation, the following test shall be completed: restore the manual lever to remote position;...
November 2017 Section 6: Expected Time Actuators lifetime strongly depends on operating conditions and on construction materials. For normal service conditions the expected lifetime of Emerson GVO-CLP-SR/FS actuators can be estimated in approximately 25 years with planned maintenance. Expected Lifetime...
Section 7: Failure Modes and Estimated Failure Rates SIL Safety Manual November 2017 SM-025-GVO Rev. 0 Section 7: Failure Modes and Estimated Failure Rates A detailed Failure Mode, Effects, and Diagnostics Analysis (FMEDA) integrated with field feedback according to IEC 61508-2 par 7.4.4.3.3. has been carried out in order to detail all failure rates and failure modes of GVO-CLP-SR/FS actuators.
A non-conforming assembly could be the source of serious accidents. Please consider that the information in this paragraph are relevant only to reliability tests; please refer to GVO-CLP-SR/FS Use and maintenance manual (Emerson document MAN 617_GVO) for detailed information about product maintenance, handling and storage.
Page 14
Section 8: Periodic Test and Maintenance Requirements SIL Safety Manual November 2017 SM-025-GVO Rev. 0 NOTE: Not all parameters are needed, but the following combinations can be used: Measurement of linear position as function of time (pressure measurement is optional) Measurement of cylinder chamber pressure as function of time Verification of final position achievement in the established maximum time.
SIL Safety Manual Section 8: Periodic Test and Maintenance Requirements SM-025-GVO Rev. 0 November 2017 Table 4. Failure mode detectable by the test: Detectable failure modes Component Automatic Procedure Manual Procedure Spring Cartridge Breakage Weakened Spring Worn Sticking Spring Flange Breakage As per automatic procedure Breakage...
Section 8: Periodic Test and Maintenance Requirements SIL Safety Manual November 2017 SM-025-GVO Rev. 0 Partial Stroke Test The “Partial Stroke Test” (“On line”) can be performed to improve the PFDAVG value. For the execution of a partial stoke test the actuator performs a partial open-close cycle operation, typically a 15-25 degrees rotation of the valve, in order to check the correct functioning of the actuator and the correct movement of the valve (not sticking and able to move).
Page 17
Measurement of cylinder chamber pressure as function of time Verification of final position achievement in the established maximum time. By means of a manual PST system manufactured by Emerson (slightly different sys- tems can be available: please make reference to the documentation of the specific project) Table 5.
Page 18
Section 8: Periodic Test and Maintenance Requirements SIL Safety Manual November 2017 SM-025-GVO Rev. 0 Case A: use of a Logic Solver: 1. Pressure transmitter connected to the cylinder chamber 2. Analog Input Module included in the Logic Solver 3. Application SW function (to compare the actual trend Skilled and trained personnel Output Thrust...
Anyway every two years of operation an inspection is required: for the relevant procedures please refer to GVO-CLP-SR/FS Use and maintenance manual (Emerson document MAN 617_GVO Section 5). Periodic Test and Maintenance Requirements...
Section 9: Classification SIL Safety Manual November 2017 SM-025-GVO Rev. 0 Section 9: Classification GVO-CLP-SR/FS actuators are classified as Type A devices, according to 7.4.4.1.2 of IEC 61508-2:2010, for use in low demand mode applications. Classification...
SIL Safety Manual Section 10: MRT SM-025-GVO Rev. 0 November 2017 Section 10: The MRT of the device is 24 hours. NOTE: The MRT is estimated considering that the required spare parts are available on site, and considering the availability of skilled personnel for maintenance equipped with adequate tools and materials.
Section 11: Architectural Constraints SIL Safety Manual November 2017 SM-025-GVO Rev. 0 Section 11: Architectural Constraints For the evaluation of the conformity to the requirement of Hardware safety integrity architectural constraints of the standard IEC 61508, both Route 1H and Route 2H are used. Route 1H •...
SIL Safety Manual Section 12: Systematic Capability SM-025-GVO Rev. 0 November 2017 Section 12: Systematic Capability The systematic capability of GVO-CLP-SR/FS actuators is 3. This systematic capability is guaranteed only if the user: uses the actuator according to the instructions for use; uses the device in appropriate environment (limitation of use).
5% should be included in the Safety Integrity calculations. Any failures that are detected and that compromise functional safety should be reported to Emerson Italia srl. Please contact Emerson customer service or your local service representative.
Page 26
Tianjin 301700 Holland Fasor 6 P. R. China Székesfehérvár 8000 The Emerson logo is a trademark and service mark of Emerson Electric Co. T +86 22 8212 3300 Hungary Bettis is a mark of one of the Emerson family of companies.