background image

Deltapilot S

6

Hauser

Description of safety requirements 
and boundary conditions

Safety function

SD213en02

Operating and configuration possibilities of the Deltapilot S

Safety-related signal 

The safety-related signal of the Deltapilot S is the analog output signal 4...20 mA. All safety functions solely 
refer to this output. In addition, the Deltapilot S communicates via HART and contains all HART characteristics 
with additional diagnostics information. 

Deltapilot S generates an analog signal (

 3.8...

 20.5 mA) that is proportional to the pressure. This signal is 

sent to a logic unit located downstream, e.g. a programmable logic controller or a limit signal transmitter, and 
monitored there to establish if:
– A specified value for the "Pressure" or 

"Level" operating modes has been overshot or undershot ("Level Easy Pressure")

– A range to be monitored for the "Pressure" or "Level" operating modes has been violated ("Level Easy 

Pressure")

– A fault has occurred (e.g. sensor error, sensor cable disconnection or short-circuit, supply voltage failure).

The following dangerous undetected failures can occur in the devices:
– An incorrect output signal which deviates from the real measured value by more than 1%, with the output 

signal remaining within the 4...20 mA range.

– A settling time that is delayed by more than the specified settling time plus tolerance.
– Other deviations from specified safety-related properties.

For fault monitoring, the logic unit must be able to detect HI alarms (

 21 mA) and LO alarms (

 3.6 mA).

The transmitter output is not safety-oriented during the following activities:
– Changes to the configuration
– Multidrop
– Simulation
– Proof-test

While configuring the transmitter and performing maintenance work on Deltapilot S, alternative measures 
must be taken to ensure the process safety.

4…20 mA

Commubox
FXA191/
FXA195

1

# % &

Copy

G H I

P Q R S

, ( ) ‘

A B C

Paste

Page

On

Page

Up

Delete

Bksp

Insert

J K L

T U V

_ < >

D E F

Hot Key

+ Hot Key

M N O

W X Y Z

+ * /

4

7

.

2

5

8

0

375

FIELD COMMUNICATOR

3

6

9

-

9

6

DELTABAR: * * * * * * * *

ONLINE

1  QUICK SETUP

2  OPERATING MENU

4  SV

0 °C

3  PV

352 mbar

HELP

SAVE

dsdmdm
df das.
asdas fa
asas la.

Logic unit

e.g. PLC,
limit signal generator
etc.

Computer with operating program
FieldCare as of version 2.02

Actuator

Deltapilot S

with display module (optional)
and local operation

Handheld terminal
375 Field Communicator

Summary of Contents for Deltapilot S FMB70

Page 1: ...th IEC 61508 The measuring device fulfills the requirements concerning Functional safety in accordance with IEC 61508 Explosion protection depending on version Electromagnetic compatibility in accordance with EN 61326 and NAMUR recommendation NE 21 Electrical safety in accordance with IEC EN 61010 1 Your benefits Use for level monitoring pressure monitoring up to SIL 3 independently assessed Funct...

Page 2: ...nfiguration 10 Methods for device configuration 10 Conditions for safe measuring mode device configuration with increased security during parameter entry 12 Increased security during parameter entry via on site display or handheld terminal 375 Field Communicator 16 Increased security during parameter entry via operating tool 18 Parameter description of the SAFETY CONFIRM group Pressure operating m...

Page 3: ... 3 SIL Declaration of Conformity The binding document forms part of the scope of delivery when the Deltapilot S is ordered with the SIL 2 SIL 3 IEC 61508 Declaration of Conformity option P01 xMD7xxxx 01 xx xx xx 006 E x a m p l e ...

Page 4: ...are permitted for devices without an on site display that are to be used in process control protection equipment DTM for Deltapilot S with software version 02 10 e g can be operated with the Endress Hauser FieldCare operating program Handheld terminal 375 Field Communicator An operating program forms part of the scope of delivery for devices with the HistoROM M DAT option version N in feature 100 ...

Page 5: ...rnet at www de endress com Operating Instructions BA274P Description of Device Functions Configuration examples for pressure level and flow measurement Parameter description Troubleshooting Appendix diagram of menus The documentation is provided on the documentation CD enclosed The documentation is also available via the Internet at www de endress com Compact Instructions KA218P Wiring Operation w...

Page 6: ...erous undetected failures can occur in the devices An incorrect output signal which deviates from the real measured value by more than 1 with the output signal remaining within the 4 20 mA range A settling time that is delayed by more than the specified settling time plus tolerance Other deviations from specified safety related properties For fault monitoring the logic unit must be able to detect ...

Page 7: ...cated in this Safety Manual are based on a medium time to repair MTTR of 8 hours Functional safety parameters The table shows the specific functional safety parameters Parameters according to IEC 61508 Value Safety functions MIN MAX Range SIL Hardware 2 single channel 3 with use of a SIL 3 capable coincidence logic SIL Software 3 Device type B Mode of operation Low demand mode Safety functions MIN...

Page 8: ...ock the Deltapilot S via the SAFETY LOCK and SAFETY PASSWORD parameters Acknowledge the alarm via the ACK ALARM parameter Select the Lock option for the SAFETY LOCK parameter Enter the password for the SAFETY PASSWORD parameter Confirm the values and option selected for the parameters queried Lock the Deltapilot S via the password Standard device configuration Configure the current output for an a...

Page 9: ...h IEC 61298 2 the settling time is the time the output signal needs to reach its steady state value at 1 of the output span and remain within this range Maximum reaction time of alarms and warnings The reaction times of alarms and warnings are listed in the following table In the event of an alarm device faults the device outputs an error current ä 8 Alarm response and current output section Insta...

Page 10: ...dure for Standard device configuration Point Standard device configuration section ä 26 and for the Level operating mode Level Easy Pressure level selection also observe the permitted parameter settings ä 12 ff Point Observe the prescribed parameters in accordance with the form ä 34 Pressure operating mode and ä 35 Level operating mode Level Easy Pressure level selection SD213en04 Standard device ...

Page 11: ...ETY LOCK parameter Enter the password 7452 via the SAFETY PASSWORD parameter Device software checks whether all conditions have been fulfilled Conditions OK The correct display of the characters and digits is checked via the DIGITS SET parameter yes no Locking not possible Display OK no Safety relevant parameters are queried for validity Querying is continued Value OK yes no Querying completed The...

Page 12: ...ore Permitted parameter setting Only certain settings are possible for some parameters If a setting that is not permitted has been selected for one of these parameters the Increased security during parameter entry method is not possible This method is possible once more as soon as the permitted setting is selected for the parameter Parameter and menu path Permitted setting BUS ADDRESS 345 Menu pat...

Page 13: ...int The turndown which is determined by the difference between the pressure values for SET LRV and SET URV must not be larger than the maximum turndown 100 1 at factory Point The value for PRESSURE FULL PRESSURE EMPTY must not fall below the minimum span 1 of sensor measuring range 40 mbar 320 mbar p 0 mbar 400 mbar 0 m 3 2 m 4 m 0 4 m H I 20 mA 4 mA 3 1 1 2 Turndown max Turndown FULL PRESS EMPTY ...

Page 14: ...LRV and SET URV must not be larger than the maximum turndown is not met Point The Increased security during parameter entry method cannot be performed for the device without a correction Point The turndown which is determined by the difference between the pressure values for SET LRV and SET URV must not be larger than the maximum turndown 100 1 at factory p 0 mbar 0 m 4 m H I 20 mA 4 mA 4 48 m 400...

Page 15: ...e device has assumed a fault condition i e an alarm is output and the current output assumes the set value the cause of the fault must first be eliminated When operating via DTM locking via the SAFETY LOCK menu is only possible in the online mode The sensor can only be recalibrated by Endress Hauser Service As the parameters for a sensor recalibration are not reset with the 7864 reset code the par...

Page 16: ...or Unlocked status 5 Enter the password via the SAFETY PASSWORD parameter password 7452 If the correct password is entered the following parameters are reset to the factory settings CURR CHARACT OUTPUT FAIL MODE ALT CURR OUTPUT SET MAX ALARM SET MIN CURRENT SIMULATION MODE ALARM DELAY and ALARM DISPLAY TIME Point 7 for factory values Any simulation running is terminated The configurable messages E...

Page 17: ... the desired values In this case operation in the safe measuring mode is not possible The SAFETY LOCK parameter displays the status Unlocked 8 The following parameters have to be confirmed depending on the operating mode selected ACK ALARM MODE CALIB OFFSET MEASURING MODE PRESSURE EMPTY only Level operating mode EMPTY CALIBRATION only Level operating mode PRESSURE FULL only Level operating mode FU...

Page 18: ...ges Error type messages 115 120 620 715 716 717 718 720 726 and 727 are set to Alarm Operating Instructions BA332P Section 8 1 Messages All the parameters to be confirmed are displayed 6 By means of the DIGIT SETS parameter the user checks whether the characters and digits are displayed correctly on the user interface 0123456789 is displayed if everything is displayed correctly Options Valid Selec...

Page 19: ...nding on the operating mode selected ACK ALARM MODE CALIB OFFSET MEASURING MODE PRESSURE EMPTY only Level operating mode EMPTY CALIBRATION only Level operating mode PRESSURE FULL only Level operating mode FULL CALIBRATION only Level operating mode SET LRV SET URV DAMPING VALUE Options Valid Select this option if the value entered or the desired value is displayed Not valid Select this option if an...

Page 20: ...27 Locking Unlocking section DIGIT SETS 841 This parameter is used to check whether the characters and digits are displayed correctly on the user interface If the characters and digits are displayed correctly this parameter displays the character string 0123456789 Options Valid Select this option if the string of characters and digits is displayed correctly Not valid Select this option if the stri...

Page 21: ...lated value MEASURING MODE 845 For displaying and querying the set measuring mode Possibilities Pressure Level Options Valid for Pressure measuring mode Select this option if the selected and desired value is displayed Not valid for Level measuring mode Select this option if an incorrect value or a value that was not selected is displayed In this case operation of the device in the safe measuring ...

Page 22: ...n the safe measuring mode is not possible Note Changing the Damping DIP switch on the electronic insert does not have any effect on the damping time when operation is locked A change only takes effect once operation has been unlocked CONF PASSWORD 856 Once the safety related parameters have been successfully interrogated the password 7452 must be entered again via the CONF PASSWORD parameter After...

Page 23: ...asuring mode ä 27 Locking Unlocking section DIGIT SETS 841 This parameter is used to check whether the characters and digits are displayed correctly on the user interface If the characters and digits are displayed correctly this parameter displays the character string 0123456789 Options Valid Select this option if the string of characters and digits is displayed correctly Not valid Select this opt...

Page 24: ... mode is not possible Note You can also perform position adjustment by means of the POS ZERO ADJUST or POS INPUT VALUE parameters The CALIB OFFSET parameter then displays the calculated value MEASURING MODE 845 For displaying and querying the set operating mode Possibilities Pressure Level Options Valid for the Level operating mode Select this option if the selected and desired value is displayed ...

Page 25: ...fe measuring mode is not possible SET URV 022 For displaying and querying the value entered for the SET URV parameter BASIC SETUP group Options Valid Select this option if the value entered and desired is displayed Not valid Select this option if a value that was not entered or desired is displayed In this case operation of the device in the safe measuring mode is not possible DAMPING VALUE 855 Fo...

Page 26: ... selection 6 Lock the device via software and or hardware Operating Instructions BA332P Section 5 9 Locking unlocking operation 7 Read out and log the CONFIG COUNTER parameter Menu path GROUP SELECTION OPERATING MENU TRANSMITTERINFO TRANSMITTER DATA Permitted parameter setting Note If the device has assumed a fault condition i e an alarm is output and the current output assumes the set value the c...

Page 27: ...the device or the configuration Locking Unlocking Warning After entering all the parameters and checking the safety function the operation of the device must be locked since changes to the measuring system or parameters can affect the safety function Increased security during parameter entry Locking With the Increased security during parameter entry method the device is locked by a password at the...

Page 28: ...e SIMULATION MODE and SIM ERROR NO parameters This test detects any problems in conjunction with quiescent currents 5 Restore the complete operativeness of the current loop 6 Disable safety PLC bypassing or restore normal operation in some other way 7 Once the recurrent test has been carried out the results must be documented and stored in a suitable manner Proof test 2 This test detects approx 99...

Page 29: ... out following download and the device must be tested to ensure that it is functioning correctly and also recalibrated Appendix Notes on the redundant connection of multiple sensors for SIL 3 With redundant connection with HFT 1 e g coincidence logic 1oo2 or 2oo3 the FMB70 meets the requirements for SIL 3 The common cause factors β and βD indicated in the table below are minimum values for the FMB...

Page 30: ...Deltapilot S 30 Endress Hauser Management summary Management_summary exida_2 Management_summary exida_1 ...

Page 31: ...Deltapilot S Endress Hauser 31 Management_summary exida_3 ...

Page 32: ...Deltapilot S 32 Endress Hauser Certificate TUEV_en ...

Page 33: ...Deltapilot S Endress Hauser 33 ...

Page 34: ...718 720 726 727 Warning W W W W W W W W arning arning arning arning arning arning arning arning ALARM DELAY 336 ALARM DISPL TIME 480 After locking CONFIG RECORDER 352 QUICK SETUP BASIC SETUP DISPLAY 0123456789 0 0 Level Linear all except User unit 0 0 High sensor limit 2 0 s Linear Max alarm Min alarm Max alarm Normal Normal 22 mA 22 mA 3 8 mA 3 8 mA None None Off Alarm 0 0 s 0 0 s 0 0 0 s 0 0 0 s...

Page 35: ...E 413 ACK ALARM MODE 401 ERROR NO Only ToF HART display handheld SELECT ALARM TYPE 595 600 The following messages must be set to Alarm 115 120 620 715 716 717 718 720 726 727 Warning W W W Alarm W W W W W arning arning arning arning arning arning arning arning ALARM DELAY 336 BUS ADDRESS 345 ALARM DISPLAY TIME 480 After locking CONFIG RECORDER 352 BASIC SETUP DISPLAY 01234567789 0 0 Level Level Ea...

Page 36: ...tional Endress Hauser Instruments International AG Kaegenstrasse 2 4153 Reinach Switzerland Tel 41 61 715 81 00 Fax 41 61 715 25 00 www endress com info ii endress com SD213P 00 en 04 08 71073465 CCS FM SGML 6 0 71073465 ...

Reviews: