DRAFT - 26 March 2015
DRAFT - 26 March 2015
SM45-55-SAD Rev 3
3
2
This manual supports the application of the products in functional safety related loops. It must be used
in conjunction with other supporting documents to achieve correct installation, commissioning and
operation. Specifically, the data sheet, instruction manual and applicable certificates for the particular
product should be consulted, all of which are available on the MTL web site.
In the interest of further technical developments, Eaton reserve the right to make design changes.
FSM
IEC 61508:2010
FUNCTIONAL SAFETY
MANAGEMENT
Contents
1 Introduction
3
1.1
Application
and
function
3
1.2
Variant
description
3
2 System configuration
4
2.1 Associated system components
4
3 Selection of product and implications
4
4 Assessment of functional safety
5
4.1
Hardware
safety
integrity
5
4.2
Systematic
safety
integrity
7
4.3
SIL
capability
7
4.4
EMC
7
4.5
Environmental
7
5 Installation
8
6 Maintenance
8
7 Appendices
9
7.1 Appendix A: Summary of applicable
standards
9
7.2 Appendix B: Proof test procedure,
MTL45/5500
digital
output
modules
10
Solenoid / Alarm Drivers
Hardware Fault Tolerance
(HFT) †
Module type
0
1
Loop-powered
MTLx521, MTL4521L,
MTL4523L, MTL5522, MTL5525
N/A
Separately-powered
MTLx523/x23x/x23VL,
MTL4523Y, MTLx524,
MTL4524S, MTL4525
† These modules have an inherent fault tolerance of 0. Duplication of modules in a voting architecture may be used to achieve
HFT=1. SIL ratings stated in this table apply where the required element safety function is to de-energise the output. Where the
required element safety function is to energise the output, a rating of SIL 1 is achieved for all module types.
SIL
3
IEC 61508:2010
SIL
2
IEC 61508:2010
SIL
3
IEC 61508:2010
