Endress+Hauser FTL62 Series, Руководство по функциональной безопасности

Страница: 15 / 24

Liquiphant FTL62 with electronic insert FEL67 Operation
Hauser 15
5 Operation
5.1 Device behavior during power-up
The behavior of the device when switched on is described in the relevant Operating
Instructions.
5.2 Device behavior in safety function demand mode
The safety-related output signal is described in detail in the Functional Safety Manual
(FY01006F) for Nivotester FTL325P.
The Nivotester FTL325P always has switch contacts, they work with quiescent current safety;
they are closed when the status is OK.
5.3 Device behavior in the event of an alarm
The behavior of the device in the event of an alarm is described in the relevant Operating
Instructions.
6 Proof testing
The functional integrity of the device in the SIL mode must be verified during
commissioning, when changes are made to safety-related parameters, as well as at
appropriate time intervals. The operator must determine the time intervals.
L
CAUTION
The safety function is not guaranteed during a proof test.
‣
Suitable measures must be taken to guarantee process safety during the test.
When using the proof-test wizard in the SmartBlue app, the correct version must be
selected.
Version II to version VI are described in the Functional Safety Manual for the Nivotester
FTL325P.
Note the following for the test sequences:
• A demand mode or a fault takes absolute precedence over the proof test and in the
measuring system safety path. For this reason, the demand mode must first be ended
or the fault rectified before the proof test can commence.
• The proof test can and may only be performed if the device status is OK.
• The status of the individual output signal is indicated by a measuring device or a
downstream component of the safety path (e.g., PLC, actuator).
• The individual proof test coverages (PTC) that can be used for calculation are specified
in the Declaration of Conformity.
• To monitor the safety-related output signal, it is sufficient to evaluate the response of
downstream components of the safety function. If the different states are correctly
identified there, the test steps are passed.