Functional Safety Manual
for the Memosens transmitter Liquiline M CM42 SIL
Version:
Page:
2.0
20
of
72
A
ll
e
R
ec
h
te
v
o
rb
eh
al
te
n
.
D
as
K
o
p
ie
re
n
d
ie
se
s
D
o
k
u
m
en
ts
u
n
d
d
ie
V
er
w
en
d
u
n
g
v
o
n
T
ei
le
n
au
s
d
ie
se
m
D
o
k
u
m
en
t
is
t
o
h
n
e
sc
h
ri
ft
li
ch
e
G
en
eh
m
ig
u
n
g
d
er
E
n
d
re
ss
+
H
au
se
r
C
o
n
d
u
ct
a
G
m
b
H
+
C
o
.
K
G
n
ic
h
t
er
la
u
b
t.
A
ll
ri
gh
ts
re
se
rv
ed
.
P
as
si
n
g
o
n
an
d
co
p
yi
n
g
o
f
th
is
d
o
cu
m
en
t,
u
se
an
d
co
m
m
u
n
ic
at
io
n
o
f
it
s
co
n
te
n
ts
n
o
t
p
er
m
it
te
d
w
it
h
o
u
t
w
ri
tt
en
au
th
o
ri
za
ti
o
n
fr
o
m
E
n
d
re
ss
+
H
au
se
r
C
o
n
d
u
ct
a
G
m
b
H
+
C
o
.
K
G
.
Voltage supervision:
(The following statements can be used for a FMEDA of the complete safety function
including the PLC, etc.)
o
If you are using the LO error current, you must use a voltage
supervision on both outputs and drive the system to a safe state, if
the voltage drops below 15,5V.
o
If you are using the HI error current, you must use voltage
supervision on current output 2 and drive the system to a safe state,
if the voltage drops below 9V. The current output 1 is supervised by
the Liquiline M CM42 system and is reset if the voltage on output 1
drops below 9V.
o
We
recommend using two independent voltage supplies
for
the two current loops. Then all errors lead to a safe state, except if
the voltage supply on current output 2 has an error and there is an
error current on current output 2 or a measurement signal (4-20
mA) on both outputs. For these two cases, the voter detects the
error with a DC of 90%.
o
If you are using just one voltage supply for both current outputs, the
following applies:
If the voltage supply has an error, the voter detects all voltage errors
with a DC of 60%.
The following table gives an overview of the device status in SIL mode:
