Additionally, the following parts may belong to the documentation, if applicable: • EU-type examination certificate • EU declaration of conformity • Attestation of conformity • Certificates • Control drawings • FMEDA report • Assessment report • Additional documents For more information about Pepperl+Fuchs products with functional safety, see www.pepperl-fuchs.com/sil.
Functional Safety M-LB-(Ex-)4000-System Introduction Safety Information Target Group, Personnel Responsibility for planning, assembly, commissioning, operation, maintenance, and dismounting lies with the plant operator. Only appropriately trained and qualified personnel may carry out mounting, installation, commissioning, operation, maintenance, and dismounting of the product. The personnel must have read and understood the instruction manual and the further documentation.
Functional Safety M-LB-(Ex-)4000-System Introduction Symbols Used This document contains symbols for the identification of warning messages and of informative messages. Warning Messages You will find warning messages, whenever dangers may arise from your actions. It is mandatory that you observe these warning messages for your personal safety and in order to avoid property damage.
Functional Safety M-LB-(Ex-)4000-System Product Description Product Description Function This manual describes solely the safety function and safe state of the surge protection barrier as part of the surge protection system. Danger! Danger to life from wrong usage of the device The protection of the safety loop against overvoltage is not the safety function of the surge protection barrier.
• Non-safety relevant interfaces: status indication Note For corresponding connections see datasheet. Marking Pepperl+Fuchs Group Lilienthalstraße 200, 68307 Mannheim, Germany Internet: www.pepperl-fuchs.com Surge protection barriers M-LB-42**(.M), M-LB-Ex-42**(.M) Up to SIL 3 The *-marked letters of the type code are placeholders for versions of the device.
Functional Safety M-LB-(Ex-)4000-System Planning Planning System Structure 3.1.1 Low Demand Mode of Operation If there are two control loops, one for the standard operation and another one for the functional safety, then usually the demand rate for the safety loop is assumed to be less than once per year.
Functional Safety M-LB-(Ex-)4000-System Planning Assumptions The following assumptions have been made during the FMEDA: • The device will be used under average industrial ambient conditions comparable to the classification stationary mounted according to MIL-HDBK-217F. Alternatively, operating stress conditions typical of an industrial field environment similar to IEC/EN 60654-1 Class C with an average temperature over a long period of time of 40 ºC may be assumed.
Functional Safety M-LB-(Ex-)4000-System Planning Safety Function and Safe State The safety function of the surge protection barriers depends on the signal loop to which it is attached. The interference on safety relevant signals (e. g. 4 mA to 20 mA analog signal) that pass through the devices was evaluated.
Page 13
Functional Safety M-LB-(Ex-)4000-System Planning Safety Function The safety function of the surge protection barrier is to behave like a piece of copper wire, passing through the process signal without being altered. Reaction Time The reaction time is < 1 ms. Note The fault indication output is not safety relevant.
Functional Safety M-LB-(Ex-)4000-System Planning Characteristic Safety Values M-LB-4224, M-LB-4244, M-LB-4254 Parameters Characteristic values Assessment type Full assessment Device type Mode of operation Low demand mode or high demand mode Safety function Pass through the signal Analysis Analysis 1 Analysis 2 0 FIT 0 FIT ...
Page 15
Functional Safety M-LB-(Ex-)4000-System Planning M-LB-4222, M-LB-4242, M-LB-4252 Parameters Characteristic values Assessment type Full assessment Device type Mode of operation Low demand mode or high demand mode Safety function Pass through the signal Analysis Analysis 1 Analysis 2 0 FIT 0 FIT ...
Page 16
Functional Safety M-LB-(Ex-)4000-System Planning M-LB-4212 Parameters Characteristic values Assessment type Full assessment Device type Mode of operation Low demand mode or high demand mode Safety function Pass through the signal Analysis Analysis 1 Analysis 2 0 FIT 0 FIT 3 FIT 3 FIT ...
Page 17
Functional Safety M-LB-(Ex-)4000-System Planning M-LB-4214 Parameters Characteristic values Assessment type Full assessment Device type Mode of operation Low demand mode or high demand mode Safety function Pass through the signal Analysis Analysis 1 Analysis 2 0 FIT 0 FIT 3 FIT 3 FIT ...
Page 18
Functional Safety M-LB-(Ex-)4000-System Planning M-LB-Ex-4242 Parameters Characteristic values Assessment type Full assessment Device type Mode of operation Low demand mode or high demand mode Safety function Pass through the signal Analysis Analysis 1 Analysis 2 0 FIT 0 FIT 3 FIT 3 FIT ...
Page 19
Functional Safety M-LB-(Ex-)4000-System Planning M-LB-4272 Parameters Characteristic values Assessment type Full assessment Device type Mode of operation Low demand mode or high demand mode Safety function Pass through the signal Analysis Analysis 1 Analysis 2 0 FIT 0 FIT 2 FIT 2 FIT ...
Page 20
Functional Safety M-LB-(Ex-)4000-System Planning M-LB-4282 Parameters Characteristic values Assessment type Full assessment Device type Mode of operation Low demand mode or high demand mode Safety function Pass through the signal Analysis Analysis 1 Analysis 2 0 FIT 0 FIT 2 FIT 2 FIT ...
As noted in DIN EN 61508-2:2011 note N3, appropriate measures taken by the manufacturer and plant operator can extend the useful lifetime. Our experience has shown that the useful lifetime of a Pepperl+Fuchs product can be higher if the ambient conditions support a long life time, for example if the ambient temperature is significantly below the maximum ambient temperature.
Functional Safety M-LB-(Ex-)4000-System Mounting and Installation Mounting and Installation Mounting and Installing the Device Observe the safety instructions in the instruction manual. Observe the information in the manual. Observe the requirements for the safety loop. Connect the device only to devices that are suitable for this safety application. Check the safety function to ensure the expected output behavior.
Functional Safety M-LB-(Ex-)4000-System Operation Operation Danger! Danger to life from missing safety function If the safety loop is put out of service, the safety function is no longer guaranteed. • Do not deactivate the device. • Do not bypass the safety function. •...
Page 24
Functional Safety M-LB-(Ex-)4000-System Operation Leakage Current Measurement Device Step no. Measurement Expected result M-LB-4212(.M) 6 V AC or 8.5 V DC between Leakage current below 10 A terminals 1' and 2' 6 V AC or 8.5 V DC between Leakage current below 10 nA terminal 1' and ground 6 V AC or 8.5 V DC between Leakage current below 10 nA...
Page 25
Functional Safety M-LB-(Ex-)4000-System Operation Device Step no. Measurement Expected result M-LB-4282(.M) 250 V AC or 320 V DC between Leakage current below 50 nA terminals 1' and 2' 250 V AC or 320 V DC between terminal 1' and ground 250 V AC or 320 V DC between terminal 2' and ground Table 5.1...
Page 26
Functional Safety M-LB-(Ex-)4000-System Operation 1’ ϑ 2’ Zone 2 Figure 5.3 Proof test set-up for M-LB-4212(.M) 1’ ϑ 2’ Zone 2 Figure 5.4 Proof test set-up for M-LB-4214(.M) 1’ ϑ 2’ Zone 2 Figure 5.5 Proof test set-up for M-LB-4272(.M)
Page 27
Functional Safety M-LB-(Ex-)4000-System Operation 1’ ϑ 2’ Zone 2 Figure 5.6 Proof test set-up for M-LB-4282(.M) 1’ ϑ 2’ Zone 0, 1, 2 Zone 0, 1, 2 Zone 1, 2 Figure 5.7 Proof test set-up for M-LB-Ex-4242(.M)
Report all failures in the safety function that are due to functional limitations or a loss of device function – especially in the case of possible dangerous failures. In these cases, contact your local sales partner or the Pepperl+Fuchs technical sales support (service line).
Functional Safety M-LB-(Ex-)4000-System List of Abbreviations List of Abbreviations Emergency Shutdown Failure In Time in 10 FMEDA Failure Mode, Effects, and Diagnostics Analysis Probability of safe failure Probability of dangerous detected failure Probability of dangerous undetected failure Probability of failures of components in the safety loop that have ...