Endress+Hauser 9P5B Functional Safety Manual Download Page 40

Page: 40 / 44

Appendix

Proline Prosonic Flow P 500 HART

Hauser

‣

Modifications to devices with SIL capability onsite at the user's plant are possible following

approval by the Hauser manufacturing center. In this case, the modifications must

be performed and documented by an Hauser service technician.

‣

Modifications to devices with SIL capability by the user are not permitted.

6.8

Decommissioning

For detailed information on decommissioning, see the Operating Instructions for the

device

Appendix

7.1

Structure of the measuring system

7.1.1

System components

A0015443

 5

System components

Pump

Measuring device

Valve

Automation system

An analog signal (4–20 mA) proportional to the volume flow is generated in the transmitter.

This is sent to a downstream automation system where it is monitored to determine whether

it falls below or exceeds a specified limit value. The safety function (volume flow monitoring)

is implemented in this way.

Summary of Contents for 9P5B

Page 1: ...ducts Solutions Services Functional Safety Manual Proline Prosonic Flow P 500 Ultrasonic time of flight flowmeter HART FY02647D 06 EN 01 21 71510592 2021 05 10 Valid as of version 01 01 zz Device firmware ...

Page 2: ......

Page 3: ...the safety function 10 4 2 Restrictions for use in safety related applications 12 5 Use in protective systems 17 5 1 Device behavior during operation 17 5 2 Parameter configuration for safety related applications 18 5 3 Proof testing 26 6 Life cycle 38 6 1 Requirements for the personnel 38 6 2 Installation 38 6 3 Commissioning 38 6 4 Operation 39 6 5 Maintenance 39 6 6 Repair 39 6 7 Modification 3...

Page 4: ...Manufacturer s Declaration Proline Prosonic Flow P 500 HART 4 Endress Hauser 1 Manufacturer s Declaration A0045946 EN ...

Page 5: ... Demand Mode Continuous Mode 1 Valid hardware version main electronics From delivery date May 10 2021 Valid firmware version 01 01 zz and higher HART from delivery date May 10 2021 Safety manual FY02647D Type of assessment only 1 version can be selected Complete HW SW assessment in the context of development including FMEDA and change process according to IEC 61508 2 3 Assessment of evidence for p...

Page 6: ...raged ambient temperatures up to 40 C 104 F in accordance with the general standard for devices with SIL capability 3 PTC Proof Test Coverage diagnostic coverage achieved by device failure detection during manual proof testing 4 This value takes into account all failure types of the electronic components as per Siemens SN29500 5 All diagnostic functions are executed at least once during this time ...

Page 7: ...ostics menu Operating Instructions Operating concept Operating Instructions 2 3 Symbols 2 3 1 Safety symbols DANGER This symbol alerts you to a dangerous situation Failure to avoid this situation will result in serious or fatal injury WARNING This symbol alerts you to a dangerous situation Failure to avoid this situation can result in serious or fatal injury CAUTION This symbol alerts you to a dan...

Page 8: ...Item numbers A B C Views A A B B C C Sections 2 4 Supplementary device documentation For an overview of the scope of the associated Technical Documentation refer to the following W M Device Viewer www endress com deviceviewer Enter the serial number from nameplate Endress Hauser Operations App Enter the serial number from the nameplate or scan the 2D matrix code QR code on the nameplate This Speci...

Page 9: ...ion Option selected Order code 9P5B Prosonic Flow P 500 000 Mounting type All 010 Approval transmitter sensor All 015 Power supply All 020 Output input 1 1 Option BA 4 20mA HART Option CA 4 20mA HART Ex i passive Option CC 4 20mA HART Ex i active 021 Output input 2 All 022 Output input 3 All 030 Display Operation All 035 Integrated ISEM electronics All 041 Transmitter housing All 050 Electrical co...

Page 10: ...ssary be connected for non safety oriented purposes 2 Additional selection of further approvals is possible 3 1 SIL label on the nameplate Order code Ser no Ext ord cd i i Date 1 A0031473 1 SIL logo 4 Safety function 4 1 Definition of the safety function The measuring device s permitted safety functions are Monitoring of a maximum or minimum volume flow or a volume flow range for liquid media 4 1 ...

Page 11: ...ircuit of the signal line The safety related errors are broken down in accordance with IEC EN 61508 into different categories and implications for the safety related output signal Safety related error Explanation Position 12 Implication for safety related output signal No device error Safe No error 1 Within specification λSD Safe detected Safe detectable failure present 3 Device assumes a signal o...

Page 12: ...installation conditions which can be found in the device documentation 3 Observe application specific limits 4 Do not exceed technical specifications of measuring device Information on the safety related signal 10 For detailed information on the technical specifications see the device documentation 8 4 2 1 Dangerous undetected failures in this scenario An incorrect output signal that deviates from...

Page 13: ... 2014 P 2019 W 2024 4 2 3 Suitability of the measuring device 1 Carefully select the frequency of the sensor set in accordance with the application s expected flow rates The maximum flow rate during operation must not exceed the specified maximum value for the sensor 2 In safety related applications it is advisable to select the limit value for monitoring a minimum flow such that this limit is at ...

Page 14: ...is transmitted via the 4 20 mA current output the measuring device s relative measured error is made up of the contribution of the digitally determined measured value and the accuracy of the analog current output These contributions which are listed in the device documentation apply under reference operating conditions and can depend on the sensor version ordered The measured error of the digitall...

Page 15: ...3 o r 1000 40 4 05 o r 2000 80 3 92 o r 3000 120 3 88 o r 4000 160 3 86 o r The determined installation specific measured error covers the following application scenarios Pipe geometry In accordance with ASME B36 10M 2015 Deviation of the entry for the measuring pipe outer diameter Max 1 or min 0 5 mm 0 02 in average tolerance class D2 T3 as per DIN EN ISO 1127 Deviation of the entry for the measu...

Page 16: ...n the device s input protection unit This may lead to falsification of the output signal by more than the specified error or the minimum failure current 3 6 mA can no longer be set due to the leak current Use a 4 20 mA power supply unit with either voltage limitation or voltage monitoring NOTICE The safety related connection values depend on the Ex approval Pay attention to the safety related conn...

Page 17: ...put current on alarm can be set to a value 3 6 mA or 21 mA In some cases e g a cable open circuit or faults in the current output itself where it is not possible to set the failure current 21 mA output currents of 3 6 mA occur irrespective of the configured failure current In some other cases e g short circuit of cabling output currents of 21 mA occur irrespective of the configured failure current...

Page 18: ...able verification of the setting On completion of parameter configuration the SIL mode of the device must be enabled with a SIL locking code Availability of the SIL mode function NOTICE The SIL confirmation sequence is only visible on the local display and in the operating tools for devices with the order code for Additional approval option LA SIL For this reason the SIL mode can also only be acti...

Page 19: ...that the flowmeter works in the safety mode 3 Guides the user through the preconfigured parameters for checking This ensures that the user actively checks all the important pre settings 4 Activates write protection for all the relevant parameters in the SIL mode All this ensures that the parameter settings that are required for the safety function are configured correctly These settings cannot be ...

Page 20: ...n process variable 4 20 mA or 4 20 mA US 4 20 mA NAMUR or Min or Max Volume flow Off A0043165 EN 2 In the Setup menu Advanced setup submenu select the SIL confirmation wizard 3 Select the Set write protection parameter 4 Enter the SIL locking code 7452 The device first checks the preconditions listed under item 1 NOTICE If these preconditions are not met the message SIL preparation failed appears ...

Page 21: ...mulation Off Diagnostics Simulation current output 1 Off Assign process variable A0021506 EN The diagnostic behavior is set in such a way that the measuring device is set to the safe state when an error occurs This means that the diagnostic messages listed in the graphic are set to alarm and the current output adopts the configured failsafe mode 17 ...

Page 22: ...ystem Diagnostic behavior Diagnostic handling Alarm Expert Diagnostic no 832 833 Diagnostic no 881 A0044362 EN 832 Electronics temperature too high 833 Electronics temperature too low 881 Sensor signal path Communication HART output HART address 0 Expert Configuration A0031495 EN ...

Page 23: ... Use in protective systems Endress Hauser 23 Sensor Sensor adjustment Expert Sensor variable adjustment Volume flow offset Volume flow factor 0 1 A0031496 EN Sensor Process parameter Flow damping Expert 0 Flow override Off A0043256 EN ...

Page 24: ...nt output parameter A0044363 EN For detailed information on the parameters in the graphic see the Operating Instructions 6 At the end of the verification the SIL locking code 7452 must be entered in the Set write protection parameter again to confirm that all the parameter values have been defined correctly If the SIL locking code has been entered correctly the message End of sequence appears on t...

Page 25: ...to reset self holding diagnostic messages NOTICE Unlocking the device deactivates diagnostic functions and the device may not be able to carry out its safety function in the unlocked SIL mode Therefore independent measures must be taken to ensure that there is no risk of danger while the SIL device is unlocked Unlocking procedure 1 Check the write protection switch WP in the connection compartment...

Page 26: ...ing interval and this must be taken into account when determining the probability of failure PFDavg of the sensor system In the case of a single channel system architecture the average probability of failure PFD avg of the sensor is derived from the proof test interval Ti the failure rate for dangerous undetected failures λ du the proof test coverage PTC and the assumed mission time by close appro...

Page 27: ...hannel system SIL2 1oo1 2 1 0 003 0 0025 0 002 0 0015 0 001 0 0005 0 0 2 4 6 8 10 PFDa t A0042079 2 Options BA 4 20mA HART CA 4 20mA HART Ex i passive and CC 4 20mA HART Ex i active t Mission time in years 1 PFDavg Average probability of dangerous failure on demand 2 Limit value for average probability of failure 1oo1 Single channel architecture ...

Page 28: ...function PTC 1 Proof testing 48 Device restart and testing of current output 1 1 29 98 Testing with a secondary standard 3 33 99 Testing with a secondary standard and testing of current output 1 4 34 1 Proof Test Coverage Other recommendations It is advisable to perform a visual inspection on site As part of the visual inspection of the transmitter ensure that all of the electronics compartment co...

Page 29: ...t be reconfigured In the Device reset parameter select only the Restart device option Evaluating the results Part 1 Device restart Test restart of device After a successful startup the local display switches automatically from the startup display to the operational display If the device restarts and no diagnostic message is displayed this step has been completed successfully If nothing appears on ...

Page 30: ...uirements for the measuring equipment DC current measuring uncertainty 0 2 DC current resolution10 µA 2 1 A 3 4 A0034446 3 External verification taking the example of a passive current output 1 Automation system with current input e g PLC 2 Power supply unit 3 Ammeter 4 Transmitter 1 Connect the ammeter to the transmitter by looping it in series into the circuit 2 Connect the power supply unit Eva...

Page 31: ...e is not fulfilled the device may no longer be used as part of a protective system Take measures to reduce systematic errors Current output 1 to n simulation Navigation Diagnostics Simulation Current output 1 to n simulation 0354 1 to n Description Use this function to switch simulation of the current output on and off The display alternates between the measured value and a diagnostic message of t...

Page 32: ... option is selected Description Use this function to enter a current value for the simulation In this way users can verify the correct adjustment of the current output and the correct function of downstream switching units User entry 1 Default value Select 4 0 mA 2 Default value Select 20 0 mA or 3 59 to 22 5 mA Additional information Dependency The input range is dependent on the option selected ...

Page 33: ... using an external traceably calibrated ammeter 2 Measure the current of the DUT at the logic subsystem process control system or safety related PLC Evaluation of the results The amount of deviation between the measured flow rate and the set point must not exceed the measured error specified for the safety function For information on the required measured error for the device see the Performance c...

Page 34: ...process control system or safety related PLC Comparison of the measured value by measuring the current Requirements for the measuring equipment DC current measuring uncertainty 0 2 DC current resolution10 µA 1 Measure the current at the DUT using an external traceably calibrated ammeter 2 Measure the current of the DUT at the logic subsystem process control system or safety related PLC Evaluation ...

Page 35: ... the current of the DUT at the logic subsystem process control system or safety related PLC Measure the current at the DUT using an external traceably calibrated ammeter Compare the current values Connecting the measuring equipment and external testing Connecting the measuring equipment in the measuring circuit External check of the passive current output Requirements for the measuring equipment D...

Page 36: ...ese test sequences PTC 0 99 The influence of systematic errors on the safety function is not fully covered by the test Systematic faults can be caused for example by medium properties operating conditions build up or corrosion If one of the test criteria from the test sequences described above is not fulfilled the device may no longer be used as part of a protective system Take measures to reduce ...

Page 37: ... output value Navigation Diagnostics Simulation Current output value 0355 Prerequisite In the Current output 1 to n simulation parameter the On option is selected Description Use this function to enter a current value for the simulation In this way users can verify the correct adjustment of the current output and the correct function of downstream switching units User entry 1 Default value Select ...

Page 38: ... to perform heartbeat verification On completion of the verification the SIL mode must be enabled again The Heartbeat Verification application package is available as an order option and can be retrofitted on all measuring devices Please contact your Endress Hauser service or sales organization to retrofit the device 6 Life cycle 6 1 Requirements for the personnel 6 2 Installation 6 2 1 Installati...

Page 39: ...ff if genuine spare parts are used and the appropriate installation instructions are followed Sensor Transmitter without a sensor Display module Power unit Main electronics module I O Module Terminals Connection compartment cover Electronics compartment cover Seal sets for electronics compartment cover Securing clamps for electronics compartment cover Cable glands Installation Instructions see the...

Page 40: ...rmitted 6 8 Decommissioning For detailed information on decommissioning see the Operating Instructions for the device 7 Appendix 7 1 Structure of the measuring system 7 1 1 System components 1 2 3 4 A0015443 5 System components 1 Pump 2 Measuring device 3 Valve 4 Automation system An analog signal 4 20 mA proportional to the volume flow is generated in the transmitter This is sent to a downstream ...

Page 41: ...tems A Min alarm B Max alarm C Range monitoring Safety function is triggered Permitted operating status 7 2 Verification or calibration The SIL mode must be disabled in order to verify the measuring point with Heartbeat Technology or calibrate the measuring point NOTICE To use the device in a safety function again following a verification or calibration the configuration of the measuring point mus...

Page 42: ...ameter are directly connected to one another flange to flange mutual acoustic interference cannot be entirely ruled out To fully rule out potential interference it is recommended to install the sensors at different points of the pipe or to insert a spacer between the two sensors The spacer must be at least half as long as the sensor NOTICE Note the following if a fault is detected in one of the re...

Page 43: ......

Page 44: ...www addresses endress com 71510592 71510592 ...

Search results

Summary of Contents for 9P5B

Reviews:

Related manuals for 9P5B

Brands by name

Popular brands

Endress+Hauser 9P5B, Functional Safety Manual

Search results

Summary of Contents for 9P5B

Reviews:

Related manuals for 9P5B

Brands by name

Popular brands