Azbil ATT082 Functional Safety Manual
  1. Manuals
  2. Brands
  3. Azbil Manuals
  4. Transmitter
  5. ATT082
  6. Functional safety manual

Azbil ATT082 Functional Safety Manual

Advanced temperature transmitter with hart protocol
Hide thumbs Also See for ATT082:
Table of Contents

Advertisement

Quick Links

Download this manual
CM2-ATT082-2003
Advanced Temperature Transmitter
with HART protocol
Model ATT082
Functional Safety Manual

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the ATT082 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for Azbil ATT082

Summary of Contents for Azbil ATT082

  • Page 1 CM2-ATT082-2003 Advanced Temperature Transmitter with HART protocol Model ATT082 Functional Safety Manual...
  • Page 2 In no event shall Azbil Corporation be liable to anyone for any indirect, special or consequential damages. This information and specifications in this document are subject to change without notice.
  • Page 3 Safety Precautions for Use For safe use of the product, the following symbols are used in this manual. WARNING Warnings are indicated when mishandling the product might result in the death or serious injury of the user. CAUTION Cautions are indicated when mishandling the product might result in minor injury to the user or damage to property.
  • Page 4 CAUTION After installation, do not step or stand on this unit. Doing so may damage the device or cause injury. Bumping the glass of the display with a tool may cause damage or injury. Be careful. Install the device correctly. Incorrect or incomplete installation will cause output errors and violation of regulations.
  • Page 5 Certificate...

  • Page 6: Table Of Contents

    Table of Contents Chapter 1. SIL key figures ............1 Chapter 2.

  • Page 7: Chapter 1. Sil Key Figures

    Chapter 1. SIL key figures General Safety-related output signal 4...20mA Fault current 3.58 mA Process variable/function Temperature, voltage, resistance Safety function(s) min., max., range ☐ ☑ Device type acc. to IEC 61508-2 Type A Type B ☑ ☑ ☐ Operating mode Low Demand Mode High Demand Continuous Mode...
  • Page 8 Useful lifetime of electrical components: The established failure rates of electrical components apply within the useful lifetime as per IEC 61508-2:2010 section 7.4.9.5 note 3.

  • Page 9: Chapter 2. Permitted Devices Types

    Feature Designation Version Approval Additional approval Order code: ATT082 x x x x x x x x x x x x x x x x x Valid firmware version as of 01.01.07 ↑ Valid hardware version as of 01.00.06...
  • Page 10 1 SIL symbol Note: SIL certified devices are marked with the SIL symbol on the nameplate.

  • Page 11: Chapter 3. Safety Functions

    Chapter 3. Safety functions 3-1. Definition of the safety function Permitted safety functions of the device are: „ Limit value monitoring „ Safe measurement 3-1-1. Safety-related output signal The safety-related signal of the device is the analog output signal 4 to 20 mA according to the NAMUR NE43.

  • Page 12: Safe Measurement

    Temperature transmitter iTEMP TMT82 Safety functions Sensor-limit or Sensor-limit or recommended limit recommended limit Current output SIL (TC) (TC) x842 x842 F101 F101 Good=0 F102 F102 X = F, M, S X = F, M, S 400°C 850°C 851°C -201°C -200°C -100°C 1 OutOfRangeAlarm=Failure (F)

  • Page 13: Restrictions For Use In Safety-Related Applications

    3-2. Restrictions for use in safety-related applications „ Pay attention to a designated use of the measuring system in consideration of the medium properties and the environmental conditions. Carefully follow instructions from the Operating Instructions pertaining to critical process situations and installation conditions. The application-specific limits have to be observed.

  • Page 14: Safety Measured Error

    Temperature transmitter iTEMP TMT82 Safety functions I [mA] A0025264 High-alarm ≥ 21 mA A High-alarm ≥ 21 mA Error range →  18 Low-alarm ≤ 3.6 mA B Error range (Refer to page 18) C Low-alarm ≤ 3.6 mA Safety measured error Thermocouples 3-3.
  • Page 15 Measured error Longterm Min. Limited safety (+A/D), Measured drift in °C/ Standard Designation span measuring range –40 to +70 °C error (D/A) year or (–40 to +158 °F) μV/year IEC 60584-1; Type C (W5Re-W26Re) 50 K 0 to +2 000 °C 7.6 K (13.7 °F) 0.94 ASTM E988-96...
  • Page 16 Measured error Long-term Limited safety (+A/D), Measured drift in °C/ Standard Designation Min. span measuring range –40 to +70 °C error (D/A) year or Ω/ (–40 to +158 °F) year –60 to +180 °C Ni100 (12) 10 K (18 °F) 0.4 K (0.72 °F) 0.21 (–76 to +356 °F)

  • Page 17: Restrictions Of The Device Specifications For The Safety Operation

    3-4. Restrictions of the device specifications for the safety operation „ Compliance with the ambient conditions as per IEC 61326-3-2, appendix B is mandatory. „ The permitted voltage range for the SIL-mode: V = 11 to 32 V „ The power supply must be short-circuit proof and ensure that the upper error current can still be output at any time.

  • Page 19: Chapter 4. Use In Protective Systems

    Chapter 4. Use in protective systems 4-1. Behavior of device during operation and in case of error 4-1-1. Behavior of device during power-up After power-up, the device runs through a diagnostic phase. The current output is set to the error current (low alarm) during this time. During the diagnostic phase, no communication is possible via the service interface (CDI) or via HART®.

  • Page 20: Behavior Of Device In Event Of Alarms And Warnings

    4-1-5. Behavior of device in event of alarms and warnings In an alarm condition the output current is ≤ 3.6 mA. In some cases, (e.g. short-circuit in the supply line) output currents ≥ 21 mA occur irrespective of the error current defined. The downstream logic unit must be able to detect high alarms (≥...

  • Page 21: Parameter Configuration For Safety-Related Applications

    4-2. Parameter configuration for safety-related applications Configuration of the measuring point The transmitter is configured using guided safe parameterization with a limited parameter set which is performed with a suitable operating tool. Safe parameterization The user interface can differ from the screens shown here depending on the operating tool used and the selected language.
  • Page 22 In the Enter access code input window, enter 7452 and press ENTER to confirm. Then press NEXT to continue. The parameters that are relevant for safety are reset to the factory setting. See the 'Parameters and default settings for safe parameterization' table in the Appendix. (Refer to page 36) After this, the input windows for device settings open, starting with the unit of the measured variables.
  • Page 23 Once all the safety-related parameters have been entered, an overview of all the uneditable default values appears. Following confirmation, all the safety-related parameters that have been entered are displayed so the user can check them once again. If all the settings are correct select YES for Confirm and press ENTER to confirm. Press 'NEXT' to continue.
  • Page 24 Handling Precautions: This value displayed for the SIL checksum is needed to activate the SIL mode if the 'SIL startup mode' parameter has been set to DISABLED. Make sure to jot down the value displayed for the SIL checksum in the documentation for this measuring point.
  • Page 25 Fig. 3-1. Operational state displayed Disabling the SIL mode There are two ways (A or B) to disable the SIL mode. Switch off transmitter hardware write protection where necessary. Note: The procedure for doing so is described in User's manual. A) Enter the number 0 in the Enter SIL checksum field.
  • Page 26 After rebooting, the device is in the unsafe mode (normal mode). To switch back to the SIL mode, on the other hand, the user must start safe parameterization once again. (Refer to page B) Start the Deactivate SIL function in the submenu: Setup → Extended setup → SIL. 2.

  • Page 27: Commissioning Test And Proof Testing

    4-3. Commissioning test and proof testing The functional integrity of the transmitter in the SIL mode must be verified during commissioning and at appropriate intervals. Handling Precautions: The safety function is not guaranteed during a commissioning or proof test. Suitable measures must be taken to guarantee process safety during the test. f The safety-related output signal 4 to 20 mA may not be used for the protective system during the test.

  • Page 28: Transmitter Commissioning Or Proof Test

    Use in protective systems Temperature transmitter iTEMP TMT82 1oo1 1,75E-03 1,58E-03 1,40E-03 1,23E-03 1,05E-03 8,75E-04 7,00E-04 5,25E-04 3,50E-04 1,75E-04 0,00E+00 10 MT Mission time in years Mission time in years Average probability of dangerous failure on demand Average probability of dangerous failure on demand 1oo1: Single-channel architecture 1oo1:...
  • Page 29 Test sequence A 1. Two-point calibration Test the current output by applying the reference temperature at the sensor or a corresponding reference signal (resistance, voltage) at 2 points. For the lower range value, select 4 mA to +20 % of the span and for the upper range value, select 20 mA to up to –20 % of the span.
  • Page 30 Temperature transmitter iTEMP TMT82 Use in protective systems 3. NOTICE! If the display will remain attached to the transmitter for the rest of the NOTICE! If the display will remain attached to the transmitter for the rest of the Temperature transmitter iTEMP TMT82 Use in protective systems application, the setting of the DIP switches must be changed again after the test sequence.
  • Page 31 Use in protective systems Temperature transmitter iTEMP TMT82 94% of dangerous, undetected failures are detected using this test (proof test coverage, PTC = 0.94). During the test sequence, the device current output typically behaves as illustrated in 94% of dangerous, undetected failures are detected using this test (proof test coverage, PTC = (Refer to fig 3-4, Refer to page 25).
  • Page 32 Temperature transmitter iTEMP TMT82 Life cycle 58% of dangerous, undetected failures are detected using this test (proof test coverage, PTC = 0.58). Test sequence C is not permitted for a commissioning test. 58% of dangerous, undetected failures are detected using this test (proof test coverage, PTC = 0.58).

  • Page 33: Chapter 5. Life Cycle

    Chapter 5. Life cycle 5-1. Requirements for personnel The personnel for installation, commissioning, diagnostics and maintenance must meet the following requirements: f Trained, qualified specialists must have a relevant qualification for this specific function and task f Are authorized by the plant owner/operator f Are familiar with federal/national regulations f Before starting work, read and understand the instructions in the manual and supplementary documentation as well as the certificates (depending on the application)

  • Page 34: Repair

    5-6. Repair The following components may be replaced by the customer's technical staff if genuine spare parts are used and the appropriate installation instructions are followed: Component Checking the device after repair Display Visual inspection as to whether all the parts are present and mounted correctly and whether the device is in a proper condition.

  • Page 35: Chapter 6. Appendix

    The measuring system's devices are displayed in the following diagram (example). HART-Modem ATT082 An analog signal (4 to 20 mA), which is proportional to the sensor value, is generated in the transmitter and relayed to a downstream logic unit (e.g. PLC, limit signal switch) where it is monitored to ascertain whether it exceeds or drops below a predefined limit value.

  • Page 36: Measurement Function

    6-1-1. Measurement function The following connection versions and functional possibilities of the transmitter can be used for the SIL mode as part of a safety function: Sensor input 2 Sensor input 1 Thermocouple (TC), RTD or resistance RTD or resistance voltage transmitter, transmitter, 3-wire transmitter, 4-wire...
  • Page 37 SIL 3 configuration: homogeneous redundancy Two temperature transmitters with one sensor per transmitter are required for a SIL 3 measuring point. The measured values of the two transmitters are evaluated in a logic unit using a safe voter. (Refer to fig 5-1, Refer to page 31) The measured values can be transmitted either via the 4 to 20 mA signal and/or the safe HART®...

  • Page 38: Commissioning Or Proof Test Report

    6-2. Commissioning or proof test report Company / contact person Tester Device information Facility Measuring point/TAG no.: Device type/Order code Serial number Firmware version Access code (if individual to each device) SIL checksum Verification information Date / time Performed by Verification result Overall result ☐...
  • Page 39 Type of safety function ☐ Limit value monitoring MIN ☐ Limit value monitoring MAX ☐ Safe measurement Commissioning / proof test ☐ Test sequence A ☐ Test sequence B ☐ Test sequence C ☐ Commissioning Proof test report Test step Set point Actual value Passed...

  • Page 40: Parameter Settings For Safe Parameterization

    6-2-1. Parameter settings for safe parameterization Parameter name Factory setting Set value Tested Lower measuring range (4 mA) Upper measuring range (20 mA) Out of range category Maintenance required (M) Sensor type 1 Pt100 IEC60751 Sensor type 2 No sensor Upper sensor limit 1 +850 °C Lower sensor limit 1...
  • Page 41 Parameter name Factory setting Set value Tested SIL HART mode HART active SIL startup mode Active Assign current output (PV) Sensor 1 Assign SV Device temperature Assign TV Sensor 1 Assign QV Sensor 1 1) Only for Call./v. Dusen or polynomial Cu/Ni sensors...

  • Page 42: Other

    6-3. Other 6-3-1. Parameters and default settings for safe parameterization Parameters and default settings for safe parameterization Firmware version Use this function to view the device firmware version installed. Max. 6-digit character string in the format xx.yy.zz. The firmware version that is currently valid can be taken from the nameplate or the User's manual associated with the device.
  • Page 43 Parameters and default settings for safe parameterization Out of range category Use this function to select the category (status signal) as to how the device reacts when the value is outside the set measuring range. Factory setting: maintenance required (M) Minimum span A span is the difference between the temperature at 4 mA and 20 mA.
  • Page 44 Parameters and default settings for safe parameterization RJ preset value n Use this function to define the fixed preset value for temperature compensation. The Preset value parameter must be set if the Reference junction n option is selected. Factory setting: 0.00 Call./v.
  • Page 45 Parameters and default settings for safe parameterization Drift/difference mode Use this function to choose whether the device reacts to the drift/difference limit value being exceeded or undershot. Can only be selected for 2-channel operation. Factory setting: Drift/difference alarm category Use this function to select the category (status signal) as to how the device reacts when a drift/difference is detected between sensor 1 and sensor 2.

  • Page 46: Safe Hart

    Parameters and default settings for safe parameterization Assign current output (PV) Use this function to assign a measured variable to the primary HART® value (PV). Factory setting: Sensor 1 Assign SV Use this function to assign a measured variable to the secondary HART® value (SV) Factory setting: Device temperature...

  • Page 47: Use As A Safe Measuring System

    6-3-3. Use as a safe measuring system The temperature transmitter must be combined with a suitable sensor to implement a safe measuring system. The code numbers required for the system design must be taken from the following tables. Single channel operation Device type 40.0 FIT 258.0 FIT 129.0 FIT 4.0 FIT 1.8E-04...
  • Page 48 Appendix Temperature transmitter iTEMP TMT82 Two channel operation Two channel operation Device type Transmitter 40.0 FIT 258.0 FIT129.0 FIT 4.0 FIT 1.8E-04 Sensor elements (thermocouple / resistance thermometer) low stress high stress low stress high stress closed coupled extention wire 95% 4.8E-05 98% 3.3E-04 91% 7.6E-04...

  • Page 49: Assignment Of Code Numbers To Parameters

    6-3-4. Assignment of code numbers to parameters Integer value Parameter Parameter value Out of range category Out of specification (S) Maintenance required (M) Failure (F) Sensor type Pt100 IEC60751, a=0.00385 (1) Pt200 IEC60751, a=0.00385 (2) Pt500 IEC60751, a=0.00385 (3) Pt1000 IEC60751, a=0.00385 (4) Pt100 JIS C1604, a=0.003916 (5) Ni100 DIN 43760, a=0.00618 (6) Ni120 DIN 43760, a=0.00618 (7)
  • Page 50 Integer value Parameter Parameter value Unit °C °F °R Mains filter 50 Hz 60 Hz Drift/difference mode Out band (drift) In band SIL HART mode HART disabled in SIL mode HART enabled in SIL mode SIL startup mode Disabled Enabled Assign current output Sensor 1 (PV, SV, TV, QV)
  • Page 52 1. Warranty period and warranty scope 1.1 Warranty period Azbil Corporation's products shall be warranted for one (1) year from the date of your purchase of the said products or the delivery of the said products to a place designated by you.
  • Page 53 Although acceleration of the above situation varies depending on the conditions or environment of use of the products, you are required not to use any Azbil Corporation's products for a period exceeding ten (10) years unless otherwise stated in specifications or instruction manuals.
  • Page 55 Document Number: CM2-ATT082-2003 Document Name: Advanced Temperature Transmitter with HART protocol Model ATT082 Functional Safety Manual Date: 2nd edition: May 2016 Issued/Edited by:...

Table of Contents