Endress+Hauser Proserve NMS80 Functional Safety Manual page 17

Proserve NMS80
Endress+Hauser
A detailed description of the configuration steps is provided in the following section.
Only in the case of SIL devices (order code 590 "Additional Approval", option LA "SIL")
is the SIL commissioning sequence visible on the display and in external operating
tools. For this reason, SIL locking can only be activated on these devices.
Locking in "Expert mode"
To commission the device, carry out and document the following steps in the order shown
(→  36):
Perform the configuration; see also (→  14).
1.
The configuration procedure and the meaning of the individual parameters are
described in the Operating Instructions (→  8). You must comply with the
parameter settings in the following table (→  19).
Start the commissioning check and ensure that the distance between the level and
2.
the reference position is at least 500 mm (19.7 in).
Navigate to: Diagnostics → Device check → Commissioning check
Commissioning check = Start (for more information, see Operating Instructions
→  8).
A commissioning check is carried out. The device' s sensor calibration is checked and
any installation errors are detected.
Set Proservo to the "Level" gauge command.
3.
Navigate to: Operation → Gauge command
Gauge command = Level
Proservo returns to level mode. Depending on the tank height and the previous
position of the displacer, wait for a sufficient period of time until the displacer
reaches the level surface.
Start the SIL confirmation sequence.
4.
Navigate to: Setup → Advanced setup → SIL/WHG confirmation
SIL/WHG confirmation = Set write protection and enter the relevant locking code
(SIL: 7452).
Press "Next" to confirm.
Press "Next" to confirm Commissioning = Expert mode.
5.
The device checks the parameter settings in accordance with the following table
(→  19) and forces a switchover of parameters if necessary.
SIL preparation = Finished is shown when the check is finished. The
commissioning sequence can be continued. Press "Next" to confirm.
Carry out function test.
6.
For MIN and MAX monitoring, at least one level/current input value above (MAX
monitoring) or below (MIN monitoring) the switch point must be approached.
For range monitoring, 5 level values/current input values which cover the entire
measuring range should be approached. In doing so, check that the safety-related
signal (current output/relay contact) responds correctly in each case.

If it is not possible to approach the required level values: Carry out a test
according to test sequence C →  26 before locking. However, this will not
detect all possible errors (e.g. inadequate calibration). For this reason, we
recommend that the measured values be tested and documented in accordance
with test sequence A →  22 at the time when the required levels/point
levels are reached. In accordance with IEC 61508-1:2010, Section 7.14, this
test is included in the "Overall safety validation" and is the responsibility of the
operator.
Confirm that the function test has been successful.
7.
Confirm function test = Yes.
Use in safety instrumented systems
17