Functional Safety Manual
for the Memosens transmitter Liquiline M CM42 SIL
Version:
Page:
2.0
25
of
72
A
ll
e
R
ec
h
te
v
o
rb
eh
al
te
n
.
D
as
K
o
p
ie
re
n
d
ie
se
s
D
o
k
u
m
en
ts
u
n
d
d
ie
V
er
w
en
d
u
n
g
v
o
n
T
ei
le
n
au
s
d
ie
se
m
D
o
k
u
m
en
t
is
t
o
h
n
e
sc
h
ri
ft
li
ch
e
G
en
eh
m
ig
u
n
g
d
er
E
n
d
re
ss
+
H
au
se
r
C
o
n
d
u
ct
a
G
m
b
H
+
C
o
.
K
G
n
ic
h
t
er
la
u
b
t.
A
ll
ri
gh
ts
re
se
rv
ed
.
P
as
si
n
g
o
n
an
d
co
p
yi
n
g
o
f
th
is
d
o
cu
m
en
t,
u
se
an
d
co
m
m
u
n
ic
at
io
n
o
f
it
s
co
n
te
n
ts
n
o
t
p
er
m
it
te
d
w
it
h
o
u
t
w
ri
tt
en
au
th
o
ri
za
ti
o
n
fr
o
m
E
n
d
re
ss
+
H
au
se
r
C
o
n
d
u
ct
a
G
m
b
H
+
C
o
.
K
G
.
In case of the passive safe state, the system stops completely and displays some
information. You have to repower the system to get it running again, but keep in mind
that a passive safe state indicates a serious problem with the system.
If the RAM- or ROM/Flash-Test detects an error, the system stops working and sets the
error currents without any information on the display (passive safe state).
The display in the passive safe state looks like this:
Please use this information to report to E+H service.
2.4.3
Behavior of the device in the event of alarms and warnings
Error current
The alarm current can be chosen to be
low or high error current
. But most internal
errors are signalled by using the high error current.
To that end the logic component has to handle both cases: low and high error currents.
Warnings
For warnings, see the Operating Instructions of the transmitter.
Resets
The system only resets, if the watchdog of the system is activated or the system detects
a power failure (or the system is physically reset or powered down).
