Safety Manual SD 161F/00/en/10.

03 52018169

Level Limit Measuring System liquiphant M/S with FEL 58 + nivotester FTL 325 N
Functional safety manual

[Ex ia] CH1

T

[Ex ia]
FTL 325 N

CH1
T

CH2 CH3

CH1 FTL 325 N

CH1

CH2 CH3

Application Overfill protection or operating maximum detection of all types of liquids in tanks to satisfy particular safety systems requirements to IEC 61508/IEC 61511-1. The measuring device fulfils the requirements concerning For safety functions up to SIL 2 Explosion protection by intrinsic safety or flameproof enclosure EMC to EN 61326 and NAMUR Recommendation NE 21

Your benefits

For overfill protection up to SIL 2

Independently assessed (Functional Assessment) by exida.com to IEC 61508/IEC 61511-1 Line monitoring including sensor with press of button Monitoring for corrosion on the tuning fork of the sensor No calibration Protected against outside vibration Easy commissioning

Liquiphant M/S + Nivotester FTL 325 N

Table of contents
SIL declaration of conformity. . . . . . . . . . . . . . . . . . 3 Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
General depiction of a safety system (protection function) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Structure of the measuring system with Liquiphant M/S (FEL 58) and Nivotester FTL 325 N . . . . . . 5

Settings and installation instructions . . . . . . . . . . . 7

Installation instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Response in operation and failure . . . . . . . . . . . . . 8

.............................................. 8

Recurrent function tests of the measuring system 8

.............................................. 8

Appendix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Specific values and wiring options for the measuring system Liquiphant M/S (FEL 58) + Nivotester FTL 325 N . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Exida Management Summary . . . . . . . . . . . . . . . . 15

Supplementary Documentation . . . . . . . . . . . . . . . . . . . . . 18

Endress + Hauser

Liquiphant M/S + Nivotester FTL 325 N

SIL declaration of conformity

L00-FTL325Nx-01-06-xx-a2-001

Endress + Hauser

Liquiphant M/S + Nivotester FTL 325 N

Introduction
General depiction of a safety system (protection function) Parameter tables for determining Safety Integrity Level (SIL) The following tables are used to define

The reachable SIL The requirements pertaining to the Average Probability of Dangerous Failure on Demand The Hardware Fault Tolerance (HFT) The Safe Failure Fraction (SFF)
of a measuring system suitable for the safety function. The specific values for the Liquiphant M/S measuring system with FEL 54 (relay version) can be found in the Appendix. Permitted probabilities of dangerous failures on demand of the complete safety related system dependent on the SIL (e.g. exceeding a defined MAX level/switch point) (Source: IEC 61508, Part 1):
SIL 4 3 2 1 PFDav 105...< 104

(PFDav )

104...< 103 103...< 102 102...< 101

The following table shows the achievable Safety Integrity Level (SIL) as a function of the probability fraction of safety-oriented failures and the "hardware fault tolerance" of the complete safety system for type B systems (complex components, not all faults are known or can be described).
SFF 0 < 60 % 60 % ...< 90 % 90% ...<99% 99 % 1) not allowed SIL 1 SIL 2 SIL 3 HFT 1 (0)1 SIL 1 SIL 2 SIL 3 2 (1)1 SIL 2 SIL 3

In accordance with IEC 61511-1 (FDIS) (Section 11.4.4), the HFT can be reduced by one (values in brackets) if the devices used fulfil the following conditions: - The device is proven in use, - Only process-relevant parameters can be changed at the device (e.g. measuring range, ... ), - Changing the process-relevant parameters is protected (e.g. password, jumper, ... ), - The safety function requires less than SIL 4. All conditions apply to Liquiphant M/S + Nivotester FTL 325 N.

Endress + Hauser

Liquiphant M/S + Nivotester FTL 325 N

Structure of the measuring system with Liquiphant M/S (FEL 58) and Nivotester FTL 325 N

Level limit measuring system The measuring system's devices are displayed in the following diagram (example).

Liquiphant M/S
[Ex ia] CH1
T

[Ex ia] CH1 CH2

T

FEL Electronic insert

CH3
FTL 325 N FTL 325 N CH1

CH1

CH2 CH3

Nivotester FTL 325 N (1 and 3 channel)

L00-FTL325Nx-16-06-xx-en-000

Safety function The safety function applies to all settings in MAX safety (monitoring of the covered state) and use of the NO contacts of the level relays. The following settings are permitted for the safety function:
Instrument Liquiphant Setting Density switch setting: 0.5 Density switch setting: 0.7 "MAX" safety Nivotester FTL 325 N-#3#3 Error current signal < 1.2 mA All settings except "S-function" (see Section Settings and installation instructions) The DIL switch for failure indication (short-circuit and cable break monitoring) must be set into position EIN/ON. Nivotester FTL 325 N-#1#1 Error current signal < 1.2 mA As-delivered state Density switch setting: 0.7 "MAX" safety Error current signal < 1.2 mA Three-channel operation

Failure switch"ON"

Error current signal < 1.2 mA One-channel operation

The DIL switch for failure indication (short-circuit and cable break monitoring) must be set into position EIN/ON.

Failure switch "ON"

The level relay always works in quiescent current safety; i.e. the relay releases when:

The switch point is exceeded (level exceeds response height) A fault occurs The mains voltage fails
In addition to the level relay, the alarm relay works in quiescent current safety and releases when:

One of the following faults occurs:

the sensor connection is interrupted the sensor connection short circuits The mains voltage fails

!
Endress + Hauser

Note! When the alarm relay releases, the level relay also releases.

Liquiphant M/S + Nivotester FTL 325 N

Permitted combinations of Nivotester FTL 325 N with Liquiphant M/S for the safety function The following combinations are permitted for the measuring system:
Nivotester One-channel instrument FTL 325 N-H### FTL 325 N-P### FTL 325 N-T### FTL 325 N-W### Three-channel instrument FTL 325 N-H### FTL 325 N-P### FTL 325 N-T### FTL 325 N-W### FTL 50-######8###* FTL 51-######8###* FTL 50 H-######8###* FTL 51 H-######8###* FTL 51 C-######8####* FTL 70-######8####* FTL 71-######8####* Liquiphant M + (FEL 58) Liquiphant S + (FEL 58)

Permitted instrument types (# = all instrument versions permitted); * 8 = FEL 58

Safety function data The mandatory settings and data for the safety function can be found in the Appendix (Page 9). The measuring system reacts in 0.9 s.

Note! MTTR is set at eight hours. Safety systems without a self-locking function must be monitored or set to an otherwise safe state after carrying out the safety function within MTTR. Supplementary device documentation The following must be available for the measuring system:
Technical Information Nivotester FTL 325 N For all instrument types: TI 353F Operating Instructions One-channel instrument FTL 325 N-#1#1: KA 170F Three-channel instrument FTL 325 N-#3#3: KA 171F Liquiphant M Types FTL 50, FTL 51, FTL 50 H, FTL 51 H: TI 328F Types FTL 50, FTL 51: KA 143F Types FTL 50, FTL 51: KA 163F (with aluminium housing/separate terminal compartment) Types FTL 50 H, FTL 51 H: KA 144F Types FTL 50 H, FTL 51 H: KA 164F (with aluminium housing/separate terminal compartment) Type FTL 51 C: TI 347F Type FTL 51 C: KA 162F Type FTL 51 C: KA 165F (with aluminium housing/separate terminal compartment) Types FTL 70, FTL 71: KA 172F Types FTL 70, FTL 71: KA 173F (with aluminium housing/separate terminal compartment) Setting, configuration, remarks, function tests

Liquiphant S

For all instrument types: TI 354F

Relevant contents

Connection data, Installation instructions

Endress + Hauser

Liquiphant M/S + Nivotester FTL 325 N

Settings and installation instructions

Installation instructions Please refer to the Compact Instructions (KA) for information regarding the correct installation of Liquiphant M/S + Nivotester FTL 325 N. Since the application conditions have an effect on the safety of the measurement, pay attention to the notes in the Technical Information (TI) and Compact Instructions (KA). The ambient conditions for the Nivotester FTL 325 N must correspond to IP54 (in accordance with EN 60529). Refer to the following documentation for instructions on setting the instruments:
Instrument Liquiphant M/S (FEL 58) Nivotester FTL 325 N-#1#1 Nivotester FTL 325 N-#3#3 Setting description in documentation: KA 143F, KA 163F, KA 144F, KA 164F, KA 162F, KA 165F, KA 172F, KA 173F, * KA 170F KA 171F

(* type-dependent, see Table: Supplementary device documentation, Page 6)

Settings for Liquiphant M/S (FEL 58):

The density switch setting does not have any major effect on the probability of failure and The setting of the safety mode has an effect on the function. The DIL switch must be set to MAX
in a SIL application. Settings for Nivotester FTL 325 N-#3#3 (three-channel version):
Setting Description

function test type.

"
CH2

Caution!

Channels 2+3 in Delta-S function

s

THIS SETTING IS NOT PERMITTED FOR THE SAFETY FUNCTION

CH3
L00-FTL325Nx-14-06-xx-xx-008

Channel 1, independent

Channel 1 is permitted for the safety function. The DIL switch for failure indication (short-circuit and cable break monitoring) must be set into position EIN/ON. CHANNELS 2 AND 3 IN THIS SETTING ARE NOT PERMITTED FOR THE SAFETY FUNCTION

CH1 CH2 CH3

L00-FTL325Nx-14-06-xx-xx-009

Channels 2+3 in Delta-S function

s

" "
Endress + Hauser

Caution! Observe the following for the Nivotester FTL 325 N-####: The operator must use suitable measures (e.g. current limiter, fuse) to ensure the relay contact characteristics are not exceeded: U 253 V AC 50/60 Hz , I 2 A, P 500 VA at cos 0.7 or U 40 V DC, I 2 A, P 80 W

Caution! Changes to the measuring system and settings after start-up can impair the protection function!

Liquiphant M/S + Nivotester FTL 325 N

Response in operation and failure

The response in operation and failure is described in the following documentation:
Instrument Liquiphant M/S (FEL 58) Nivotester FTL 325 N-#1#1 Nivotester FTL 325 N-#3#3 Setting description in documentation: KA 143F, KA 163F, KA 144F, KA 164F, KA 162F, KA 165F, KA 172F, KA 173F, * KA 170F KA 171F

(* type-dependent, see Table: Supplementary device documentation, Page 6)

Recurrent function tests of the measuring system

The operativeness of the overfill protection must be checked annually if the PFDav values given in the Appendix are used. The check must be carried out in such a way that it is proven that the overfill protection functions perfectly in interaction with all components. This is guaranteed when the response height is approached in a filling process. If it is not practical to fill to the response height, suitable simulation of the level or of the physical measuring effect must be used to make the level sensor respond. If the operativeness of the level sensor/transmitter can be determined otherwise (exclusion of faults that impair function), the check can also be completed by simulating the corresponding output signal. In the case of recurrent tests, each permitted setting must be checked, especially whether all the alarm switches are set to ON.

"

Caution! Note the following points for the function test: Each individual channel must be checked e.g. by approaching the level. Relay contact switching can be checked by using a hand multimeter at the terminals or by observing the overfill protection elements (e.g. horn, adjuster). In multi-channel instruments, all channels which do not carry out a safety function must be included in the recurrent function tests if faulty functioning cannot be detected by any other means. As a positive test result, a covered tuning fork must be detected and trigger the alarm for overfill protection. If fork covering is not detected during the recurrent test, the monitored process must be set to a safe state by means of additional or other measures and/or kept in the safe state until the safety system is repaired.

Endress + Hauser

Liquiphant M/S + Nivotester FTL 325 N

Appendix
Specific values and wiring options for the measuring system Liquiphant M/S (FEL 58) + Nivotester FTL 325 N The tables show the specific values and wiring options for the measuring system. Note! Note the following points on the tables below:

The PFDav values for multichannel systems already contain common cause failures for the The PFDav values are only valid for the associated wiring scheme. Wiring schemes other than
those shown in the Appendix were not assessed and thus do not bear any information relevant to safety. Using NC contacts instead of NO contacts requires further consideration of the installation means. The wiring scheme shows the number of instruments (Liquiphant and Nivotester) and the limit relay contact circuits (open, when the sensor signals covering). For every channel, which performs a safety function, the failure indication (cable break/ short circuit) must be switched on. With several instruments in a wiring scheme, they all indicate the same displayed settings.
1oo1 architecture (CONF 1) Liquiphant (FEL 58) Settings Evaluated NAMUR transmitter Error current signal < 1.2 mA 1) density 0.7 / 0.5 2) MAX safety

associated wiring scheme.

L00-FTL325Nx-14-06-xx-xx-010

SIL HFT SFF PFDav Wiring scheme

SIL 2 0 82.5 % 2.6 x 10-4

CH1
L00-FTL325Nx-04-06-xx-xx-006

Ask the manufacturer in question for the NAMUR transmitter parameters relevant to safety. Recurrent test e.g. approaching level TI (test interval) = annual

1oo1D structure

PFDav

3,00E-03 2,50E-03 2,00E-03 1,50E-03 1,00E-03 5,00E-04 0,00E+00 0,0 2,0 4,0 6,0 8,0 10,0 Test interval [years]
L00-FTL325Nx-05-06-xx-en-000

PFD

Endress + Hauser

Liquiphant M/S + Nivotester FTL 325 N

1oo1 architecture (CONF 2) Liquiphant (FEL 58) Settings Nivotester FTL 325 N-#1#1 Settings (One-channel instrument) 1) density 0.7 / 0.5 2) MAX safety Error current signal < 1.2 mA

L00-FTL325Nx-14-06-xx-xx-010

SIL HFT SFF PFDav Wiring scheme

SIL 2 0 89.8 % 3.1 x 10-4

CH1 CH1:
L00-FTL325Nx-04-06-xx-xx-001

Recurrent test e.g. approaching level

TI (test interval) = annual

1oo1D structure

PFDav

3,50E-03 3,00E-03 2,50E-03 2,00E-03 1,50E-03 1,00E-03 5,00E-04 0,00E+00 0,0 2,0 4,0 6,0 8,0 10,0 Test interval [years]
L00-FTL325Nx-05-06-xx-en-001

PFD

10

Endress + Hauser

Liquiphant M/S + Nivotester FTL 325 N

1oo1 architecture (CONF 3) Liquiphant (FEL 58) Settings Nivotester FTL 325 N-#3#3 Settings (Three-channel instrument) 1) density 0.7 / 0.5 2) MAX safety Error current signal < 1.2 mA

L00-FTL325Nx-14-06-xx-xx-010

SIL HFT SFF PFDav Wiring scheme

SIL 2 0 89.5 % 3.5 x 10-4

CH1 CH2 CH3 CH2 or CH3:
L00-FTL325Nx-04-06-xx-en-002

Recurrent test e.g. approaching level

TI (test interval) = annual

1oo1D structure
PFDav

4,00E-03 3,50E-03 3,00E-03 2,50E-03 2,00E-03 1,50E-03 1,00E-03 5,00E-04 0,00E+00 0,0 2,0 4,0 6,0 8,0 10,0 Test interval [years]
L00-FTL325Nx-05-06-xx-en-002

PFD

Endress + Hauser

11

Liquiphant M/S + Nivotester FTL 325 N

1oo2 architecture (CONF 4) Liquiphant (FEL 58) Settings Nivotester FTL 325 N-#3#3 Settings (Three-channel instrument) 1) density 0.7 / 0.5 2) MAX safety Error current signal < 1.2 mA

L00-FTL325Nx-14-06-xx-xx-011

SIL HFT SFF PFDav Wiring scheme

SIL 2 1 89.5 % 1.8 x 10-5

CH1 CH2 CH3 CH1 + CH2 or CH1 + CH3:
L00-FTL325Nx-04-06-xx-en-004

Recurrent test e.g. approaching level

TI (test interval) = annual

1oo2D structure

PFDav

2,50E-04 2,00E-04 1,50E-04 1,00E-04 5,00E-05 0,00E+00 0,0 2,0 4,0 6,0 8,0 10,0 Test interval [years]
L00-FTL325Nx-05-06-xx-en-003

PFD

12

Endress + Hauser

Liquiphant M/S + Nivotester FTL 325 N

2oo3 architecture (CONF 5) Liquiphant (FEL 58) Settings Nivotester FTL 325 N-#3#3 Settings (Three-channel instrument) 1) density 0.7 / 0.5 2) MAX safety Error current signal < 1.2 mA

L00-FTL325Nx-14-06-xx-xx-012

SIL HFT SFF PFDav Wiring scheme

SIL 2 1 89.9 % 2.0 x 10-5

CH1 CH2 CH3

L00-FTL325Ni-04-06-xx-xx-005

SPS

2oo3

Recurrent test e.g. approaching level

TI (test interval) = annual

2oo3D structure

PFDav

3,00E-04 2,50E-04 2,00E-04 1,50E-04 1,00E-04 5,00E-05 0,00E+00 0,0 2,0 4,0 6,0 8,0 10,0 Test interval [years]
L00-FTL325Nx-05-06-xx-en-004

PFD

Endress + Hauser

13

Liquiphant M/S + Nivotester FTL 325 N

1oo1 architecture (CONF 6) Liquiphant (FEL 58) Settings Nivotester FTL 325 N-#3#3 Settings (Three-channel instrument) 1) density 0.7 / 0.5 2) MAX safety Error current signal < 1.2 mA
s

CH1 CH2 CH3

L00-FTL325Nx-14-06-xx-xx-009

SIL HFT SFF PFDav Wiring scheme

SIL 2 0 89.8 % 3.1 x 10-4

CH1 CH2 CH3

SIL CH1:

L00-FTL325Nx-04-06-xx-xx-003

Recurrent test e.g. approaching level

TI (test interval) = annual

1oo1D structure

PFDav

3,50E-03 3,00E-03 2,50E-03 2,00E-03 1,50E-03 1,00E-03 5,00E-04 0,00E+00 0,0 2,0 4,0 6,0 8,0 10,0 Test interval [years]
L00-FTL325Nx-05-06-xx-en-001

PFD

14

Endress + Hauser

Liquiphant M/S + Nivotester FTL 325 N

Exida Management Summary

L00-FTL325Nx-01-06-xx-en-004

L00-FTL325Nx-01-06-xx-en-003

Endress + Hauser

15

Liquiphant M/S + Nivotester FTL 325 N

L00-FTL325Nx-01-06-xx-en-006

L00-FTL325Nx-01-06-xx-en-005

16

Endress + Hauser

Liquiphant M/S + Nivotester FTL 325 N

L00-FTL325Nx-01-06-xx-en-007

Endress + Hauser

17

Liquiphant M/S + Nivotester FTL 325 N

Supplementary Documentation

Safety in the Process Industry reducing risks with SIL PK 002Z/11

18

Endress + Hauser

Liquiphant M/S + Nivotester FTL 325 N

Endress + Hauser

19

Liquiphant M/S + Nivotester FTL 325 N

Endress+Hauser GmbH+Co. Instruments International P.O. Box 2222 D-79574 Weil am Rhein Germany Tel. (07621) 975-02 Tx 773926 Fax (07621) 975 345 e-mail: [email protected]

Internet: http://www.endress.com

11.01

SD 161F/00/en/10.03 52018169 FM+SGML 6.0 ProMoDo

52018169