Siemens SIMATIC HMI KP Series Operating Instructions Manual page 37

Note
Have the fail-safe part of the system checked and accepted by a registered company in
regards to the prescribed technical safety controls before commissioning the HMI device.
Sensor Requirements for Fail-Safe Sensors
NOTICE
Qualified sensor
If you do not use any qualified, normed sensors, the safety categories SIL2, PL d and
category 3 will not be reached.
Only use qualified sensors corresponding with IEC 60947.
Note
Our electronics are equipped with such safety engineering features so that 98% of the
maximum permissible probability of hazardous faults is due to all other components of the
safety function. This corresponds to the recommended load division in safety engineering
between sensing devices, actuating devices, and electronic switching for input, processing,
and output.
The probability of hazardous faults and the rate of occurrence of hazardous faults of a safety
function must comply with an upper limit determined by an SIL or PL. For a description of the
HMI device, refer to chapter "Technical specifications (Page 84)".
Proof-test interval
Note the following:
● They have a considerable safety responsibility for the instrumentation with sensors.
● Sensors normally do not survive a proof-test interval of 10 years corresponding with
IEC 61508.
The sensors clearly lose their safety.
Note
In order to reach the safety categories SIL2, PL d and category 3, high-quality sensors
are required. The sensors used must fulfill the standards EN 60947-5-1:2004 and
EN 60947-5-5:1997 (VDE 0660, section 200).
The contacts of the sensors must be weld-resistant in accordance with the standard
IEC EN 60947-5. Ensure that the sensor connection is free of short-circuits.
Define an ideal proof-test interval for the used sensor.
KP8, KP8F
Operating Instructions, 10/2010, A5E03284305-01
Planning the use
3.7 Requirements for fail-safe operation
37