Safety instructions
TR-Electronic GmbH 2020, All Rights Reserved
Printed in the Federal Republic of Germany
Page 14 of 91
TR-ECE-BA-GB-0163 v03
10/07/2020
2.2 Safety-related requirements when using CIP Safety™ devices
● Exchanging the measuring system requires the backup device to be configured correctly and the
user to verify its correct function by a test run in safe mode before recommissioning the replaced
measuring system. See also Safety Manual
, Chapter 6 “Replacing the
measuring system”.
● The user must ensure the originator and measuring system are correctly configured when a safety
connection of the measuring system has been configured with a safety configuration ID
SCID = 0
. However, we strongly advise against this operating mode, as it bypasses an
automated security check. See Chapter 4.5 from Page 36.
● Unique
SNN numbers
must be assigned for each safety network or safety subnet across the
entire system. See Chapter 3.5 on Page 29.
● The transmitted SCID and configuration data must be compared with the SCID and configuration
data originally displayed on the PC if the measuring system is configured using a PC
(workstation). See Chapter 4.5 from Page 36.
● The user must validate all downloads to the measuring system. See Chapter 4.5 from Page 36.
● A user test is required to ensure a signature is verified (and the configuration locked). See Chapter
● Connection data and measuring system configuration data must be downloaded to the measuring
system first for an originator configuration to be tested and verified with such data. This is the only
way to confirm the measuring system SCID. See Chapter 4.5 from Page 36.
● The lock attribute can be set in the measuring system only after the user has verified the correct
function of the measuring system by a test run in safe mode. See Chapter 4.5 from Page 36.
● A configuration received by the measuring system from a Safety Network Configuration Tool
(SNCT) must afterwards be uploaded from the measuring system to the SNCT tool and be
compared. The lock attribute can only be set if the data match perfectly. See Chapter 4.5 from
● An existing configuration must be deleted before installing a measuring system in a safety
network. See Chapter 4 on Page 32.
● A measuring system must be programmed with the intended Target Unique Network Identifier
(TUNID) before it can be installed in a safety network. See Chapter 3.5 on Page 29.
● A safety function user must carefully consider the effects of mixing different SIL level devices in
the network. See Chapter 9.1.26 on Page 71.
● Safety connection configurations must be verified after they have been applied in an originator to
confirm that a target connection is working as intended. See Chapter 8 from Page 49.