Additionally, the following parts may belong to the documentation, if applicable: • EU-type examination certificate • EU declaration of conformity • Attestation of conformity • Certificates • Control drawings • FMEDA report • Assessment report • Additional documents For more information about Pepperl+Fuchs products with functional safety, see www.pepperl-fuchs.com/sil.
Functional Safety HiD282*, HiD284* Introduction Safety Information Target Group, Personnel Responsibility for planning, assembly, commissioning, operation, maintenance, and dismounting lies with the plant operator. Only appropriately trained and qualified personnel may carry out mounting, installation, commissioning, operation, maintenance, and dismounting of the product. The personnel must have read and understood the instruction manual and the further documentation.
Functional Safety HiD282*, HiD284* Introduction Symbols Used This document contains symbols for the identification of warning messages and of informative messages. Warning Messages You will find warning messages, whenever dangers may arise from your actions. It is mandatory that you observe these warning messages for your personal safety and in order to avoid property damage.
Product Description Product Description Validity This manual is only valid for devices with a part number greater than #70124759. Contact your Pepperl+Fuchs representative for information about older devices. Function HiD282* The HiD2822 device is a 2-channel isolated barrier. The HiD2824 device is a 4-channel isolated barrier.
Functional Safety HiD282*, HiD284* Product Description Marking Pepperl+Fuchs Group Lilienthalstraße 200, 68307 Mannheim, Germany Internet: www.pepperl-fuchs.com HiD2822, HiD2824, HiD2842, HiD2844 Up to SIL 2 Note If you design the safety loops in homogeneous redundancy (HFT = 1), you can use the devices in applications up to SIL 3.
Functional Safety HiD282*, HiD284* Planning Planning System Structure 3.1.1 Low Demand Mode of Operation If there are two control loops, one for the standard operation and another one for the functional safety, then usually the demand rate for the safety loop is assumed to be less than once per year.
Functional Safety HiD282*, HiD284* Planning Assumptions The following assumptions have been made during the FMEDA: • Failure rates are constant, wear is not considered. • Failure rate based on the Siemens standard SN 29500. • The safety-related device is considered to be of type A device with a hardware fault tolerance of 0.
Functional Safety HiD282*, HiD284* Planning Safety Function and Safe State Safe State In the safe state of the safety function the output is de-energized. Safety Function The safety function of the device is defined: the output switches to the safe state when the input signal is within the expected range.
Functional Safety HiD282*, HiD284* Planning Characteristic Safety Values HiD2822, HiD2824 Parameters Characteristic values Assessment type and Full assessment documentation Device type Mode of operation Low demand mode or high demand mode Safety function Output is de-energized. 1 output repeats the input signal. 2 outputs repeat the input signal (HiD2822 only).
Page 14
Functional Safety HiD282*, HiD284* Planning HiD2842, HiD2844 Parameters Characteristic values Assessment type and Full assessment documentation Device type Mode of operation Low demand mode or high demand mode Safety function Output is de-energized. 1 output repeats the input signal. 2 outputs repeat the input signal (HiD2842 only).
Functional Safety HiD282*, HiD284* Planning Useful Lifetime Although a constant failure rate is assumed by the probabilistic estimation this only applies provided that the useful lifetime of components is not exceeded. Beyond this useful lifetime, the result of the probabilistic estimation is meaningless as the probability of failure significantly increases with time.
Functional Safety HiD282*, HiD284* Mounting and Installation Mounting and Installation Mounting and Installing the Device Observe the safety instructions in the instruction manual. Observe the information in the manual. Observe the requirements for the safety loop. Connect the device only to devices that are suitable for this safety application. Check the safety function to ensure the expected output behavior.
Functional Safety HiD282*, HiD284* Operation Operation Danger! Danger to life from missing safety function If the safety loop is put out of service, the safety function is no longer guaranteed. • Do not deactivate the device. • Do not bypass the safety function. •...
Page 18
Functional Safety HiD282*, HiD284* Operation Proof Test Procedure Put out of service the entire safety loop. Protect the application by means of other measures. Prepare a test set-up, see figures below. Simulate the sensor state by connecting a potentiometer, a resistor for short circuit detection or by a resistor for lead breakage detection.
Page 19
Functional Safety HiD282*, HiD284* Operation Multimeter HiD2822 ( mA ) 240 :/2.5 W 24 V DC Multimeter (mA) Multimeter (mA) 24 V DC 1a, 1b Power 2a, 2b Supply supply Termination Board Zone 0, 1, 2 Zone 2 Div. 1, 2 Div.
Page 20
Functional Safety HiD282*, HiD284* Operation Multimeter HiD2822 ( mA ) 240 :/2.5 W 24 V DC Multimeter (mA) 240 :/2.5 W 24 V DC Multimeter (mA) 1a, 1b Multimeter 2a, 2b (mA) 24 V DC Termination Board Power Supply supply Zone 0, 1, 2 Zone 2 Div.
Functional Safety HiD282*, HiD284* Maintenance and Repair Maintenance and Repair Danger! Danger to life from missing safety function Changes to the device or a defect of the device can lead to device malfunction. The function of the device and the safety function is no longer guaranteed. Do not repair, modify, or manipulate the device.
Functional Safety HiD282*, HiD284* List of Abbreviations List of Abbreviations Diagnostic Coverage of dangerous faults Failure In Time in 10 Failure Mode, Effects, and Diagnostics Analysis FMEDA Probability of safe failure Probability of dangerous detected failure Probability of dangerous undetected failure ...