Additionally, the following parts may belong to the documentation, if applicable: • EU-type examination certificate • EU declaration of conformity • Attestation of conformity • Certificates • Control drawings • FMEDA report • Assessment report • Additional documents For more information about Pepperl+Fuchs products with functional safety, see www.pepperl-fuchs.com/sil.
Functional Safety KFD2-RSH-1.2E.L*(-Y1) Introduction Safety Information Target Group, Personnel Responsibility for planning, assembly, commissioning, operation, maintenance, and dismounting lies with the plant operator. Only appropriately trained and qualified personnel may carry out mounting, installation, commissioning, operation, maintenance, and dismounting of the product. The personnel must have read and understood the instruction manual and the further documentation.
Functional Safety KFD2-RSH-1.2E.L*(-Y1) Introduction Symbols Used This document contains symbols for the identification of warning messages and of informative messages. Warning Messages You will find warning messages, whenever dangers may arise from your actions. It is mandatory that you observe these warning messages for your personal safety and in order to avoid property damage.
A fault is signalized by LEDs and a separate collective error message output. KFD2-RSH-1.2E.L2(-Y1) The device is a relay module that is suitable for safely switching applications of a load circuit. The device isolates load circuits up to 60 V DC and the 24 V DC control circuit.
Functional Safety KFD2-RSH-1.2E.L*(-Y1) Planning Planning System Structure 3.1.1 Low Demand Mode of Operation If there are two control loops, one for the standard operation and another one for the functional safety, then usually the demand rate for the safety loop is assumed to be less than once per year.
Functional Safety KFD2-RSH-1.2E.L*(-Y1) Planning Assumptions The following assumptions have been made during the FMEDA: • Failure rates are constant, wear is not considered. • Failure rate based on the Siemens standard SN 29500. • The safety-related device is considered to be of type A device with a hardware fault tolerance of 0.
Functional Safety KFD2-RSH-1.2E.L*(-Y1) Planning Safety Function and Safe State Safety Function Whenever the input of the device is energized, the ETS output is conducting. Safe State In the safe state of the safety function the ETS output is closed (conducting). Reaction Time The fault reaction time is <...
Functional Safety KFD2-RSH-1.2E.L*(-Y1) Planning Characteristic Safety Values Parameters Characteristic values Assessment type and Full assessment documentation Device type Mode of operation Low demand mode or high demand mode Safety function Output is energized (ETS, energized to safe) without diagnosis with diagnosis 300 FIT 300 FIT ...
Functional Safety KFD2-RSH-1.2E.L*(-Y1) Planning The characteristic safety values like PFD, PFH, SFF, HFT and T are taken from the FMEDA report. Observe that PFD and T are related to each other. The function of the devices has to be checked within the proof test interval (T Useful Lifetime Although a constant failure rate is assumed by the probabilistic estimation this only applies provided that the useful lifetime of components is not exceeded.
Functional Safety KFD2-RSH-1.2E.L*(-Y1) Mounting and Installation Mounting and Installation Mounting and Installing the Device Observe the safety instructions in the instruction manual. Observe the information in the manual. Observe the requirements for the safety loop. Connect the device only to devices that are suitable for this safety application. Check the safety function to ensure the expected output behavior.
Functional Safety KFD2-RSH-1.2E.L*(-Y1) Operation Operation Danger! Danger to life from missing safety function If the safety loop is put out of service, the safety function is no longer guaranteed. • Do not deactivate the device. • Do not bypass the safety function. •...
Functional Safety KFD2-RSH-1.2E.L*(-Y1) Operation Internal Diagnosis With enabled internal fault detection a diagnostic coverage of 81.2 % is achieved. Monitor one of the 4 possible ways of fault detection: • Input impedance change • Fault indication output • Collective error message output •...
See chapter 3.4. It is under the responsibility of the plant operator to define the type of proof test and the interval time period. Conditions KFD2-RSH-1.2E.L2(-Y1) KFD2-RSH-1.2E.L3(-Y1) Load power supply > 5 V DC >...
Page 19
Functional Safety KFD2-RSH-1.2E.L*(-Y1) Operation Proof Test Procedure Enable the internal fault detection and the line fault detection. See chapter 4.2.1. Check the device as shown in the following tables. After check reset the device to the necessary settings. Check the correct behavior of the safety loop. Is the configuration correct? Test No.
Application Examples 5.3.1 Standard Application for Dual Pole Switching For a switching application, the device has to be attached to the process control system and the load the following way. KFD2-RSH-1.2E.L2(-Y1) KFD2-RSH-1.2E.L3(-Y1) 24 V DC Fault 24 V DC Zone 2 Power Rail Figure 5.1...
Page 21
Where the output of the process control system can detect an open circuit in the signal loop, the fault indication output of the device may be put in series to the input. See figure. KFD2-RSH-1.2E.L2 KFD2-RSH-1.2E.L3 24 V DC...
Functional Safety KFD2-RSH-1.2E.L*(-Y1) Maintenance and Repair Maintenance and Repair Danger! Danger to life from missing safety function Changes to the device or a defect of the device can lead to device malfunction. The function of the device and the safety function is no longer guaranteed. Do not repair, modify, or manipulate the device.
Functional Safety KFD2-RSH-1.2E.L*(-Y1) List of Abbreviations List of Abbreviations Emergency Shutdown Failure In Time in 10 Failure Mode, Effects, and Diagnostics Analysis FMEDA Probability of safe failure Probability of dangerous detected failure Probability of dangerous undetected failure Probability of failures of components in the safety loop that have ...