Functional safety manual

Liquiphant M/S with

electronic insert FEL54
Level Limit Measuring System

Application Your benefits

Dry running protection or operating minimum detection
• For protection against dry running up to SIL 2
of all types of liquids in tanks to satisfy particular safety
– Independently assessed (Functional Assessment)
systems requirements to IEC 61508/IEC 61511-1.
by exida.com to IEC 61508/IEC 61511-1
The measuring device fulfils the requirements • Monitoring for corrosion on the tuning fork of the
concerning sensor
• Safety functions up to SIL 2 • No calibration
• Explosion protection by flameproof enclosure • Protected against outside vibration
• EMC to EN 61326 and NAMUR Recommendation • Easy commissioning
NE 21.

SD187F/00/EN/07.10
71118542
Table of contents

SIL declaration of conformity. . . . . . . . . . . . . . . . . . . . 3

Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
General depiction of a safety system (protection function) . . . . . . . 4

Structure of the measuring system with

Liquiphant M/S with FEL54 . . . . . . . . . . . . . . . . . . . . 5
Level limit measuring system . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Safety function . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Supplementary device documentation . . . . . . . . . . . . . . . . . . . . . . 6

Settings and installation instructions . . . . . . . . . . . . . . 7

Installation instructions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Response in operation and failure . . . . . . . . . . . . . . . . 8

Recurrent function tests of the measuring system . . . . 8

Appendix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Specific values and wiring options for the measuring system
Liquiphant M/S with FEL54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Exida Management Summary . . . . . . . . . . . . . . . . . . 10

Supplementary Documentation . . . . . . . . . . . . . . . . . . . . . . . . . . 12

2
SIL declaration of conformity

L00-FEL54xxx-01-06-xx-a2-002

3
 Introduction

! Note!
For general information about SIL please refer to: www.endress.com/sil

General depiction of Parameter tables for determining Safety Integrity Level (SIL)
a safety system
The following tables are used to define
(protection function)
• The reachable SIL
• The requirements pertaining to the “Average Probability of Dangerous Failure on Demand” (PFDavg)
• The “Hardware Fault Tolerance” (HFT)
• The “Safe Failure Fraction” (SFF)
of a measuring system suitable for the safety function.

The specific values for the Liquiphant M/S measuring system with FEL54 (relay version) can be found in the
Appendix.

Permitted probabilities of dangerous failures on demand of the complete safety related system dependent on
the SIL (e.g. falling below a defined MIN level/switch point, that is the fork swings free)
(Source: IEC 61508, Part 1):

SIL PFDavg

4 ≥ 10−5 ...< 10−4

3 ≥ 10−4 ...< 10−3

2 ≥ 10−3 ...< 10−2

1 ≥ 10−2 ...< 10−1

The following table shows the achievable Safety Integrity Level (SIL) as a function of the probability fraction of
safety-oriented failures and the "hardware fault tolerance" of the complete safety system for type B systems
(complex components, not all faults are known or can be described).

SFF HFT

0 1 (0)1) 2 (1)1

< 60 % not allowed SIL 1 SIL 2

60 % ...< 90 % SIL 1 SIL 2 SIL 3

90% ...<99% SIL 2 SIL 3

≥ 99 % SIL 3

1) In accordance with IEC 61511-1 (FDIS) (Section 11.4.4), the HFT can be reduced by one (values in brackets) if the
devices used fulfil the following conditions:
- The device is proven in use,
- Only process-relevant parameters can be changed at the device (e.g. measuring range, ... ),
- Changing the process-relevant parameters is protected (e.g. password, jumper, ... ),
- The safety function requires less than SIL 4.

4
 Structure of the measuring system with
Liquiphant M/S with FEL54
Level limit measuring system The measuring system is displayed in the following diagram (example).

Liquiphant M/S

Electronic insert

L00-FTLxxxxx-16-06-xx-en-000

Safety function The safety function only applies to MIN safety (protection against dry running) and use of the relay NO contacts
working simultaneously.
The following settings are permitted for the safety function:

Instrument Setting As-delivered state

Liquiphant M/S Density switch setting: 0.5 Density switch setting: 0.7
Density switch setting: 0.7

"MIN" safety "MAX" safety

The level relay always works in quiescent current safety; i.e. the relay releases when:
• Falling below the switch point (level below response height, fork free)
• A detected fault occurs
• The mains voltage fails
In addition to the level relay, a red LED indicates the following:
• Level alarm (fork free) - red LED illuminated
• Corrosion alarm or detected electrical fault - red LED flashes (1 Hz)

5
 Permitted versions of the Liquiphant M/S with FEL54 for the safety function
The following combinations are permitted for the measuring system:

Liquiphant M with FEL54 Liquiphant S with FEL54

FTL50-######4###* FTL70-######4####*
FTL51-######4###* FTL71-######4####*
FTL50H-######4###*
FTL51H-######4###*
FTL51C-######4####*

Permitted instrument types (# = all instrument versions permitted); * 4 = FEL54

Safety function data

The mandatory settings and data for the safety function can be found in the Appendix (Page 9).
The measuring system reacts in ≤ 1.4 s.

! Note!
MTTR is set at 8 hours.
Safety systems without a self-locking function must be monitored or set to an otherwise safe state after
carrying out the safety function within MTTR.

Supplementary The following must be available for the measuring system:

device documentation
Technical Information Operating Instructions

Liquiphant M Types FTL50, FTL51, Types FTL50, FTL51: KA143F , KA220F

FTL50H, FTL51H:
Types FTL50, FTL51: KA163F
TI328F
(with aluminium housing/separate terminal
compartment)

Types FTL50H, FTL51H: KA144F , KA220F

Types FTL50H, FTL51H: KA164F

(with aluminium housing/separate terminal
compartment)

Type FTL51C: Type FTL51C: KA162F

TI347F
Type FTL51C: KA165F
(with aluminium housing/separate terminal
compartment)

Liquiphant S For all instrument types: Types FTL70, FTL71: KA172F

TI354F
Types FTL70, FTL71: KA173F
(with aluminium housing/separate terminal
compartment)

Relevant contents Connection data, Setting, configuration, remarks,

Installation instructions function tests

6
 Settings and installation instructions
Installation instructions Please refer to the Compact Instructions (KA) for information regarding the correct installation of
Liquiphant M/S with FEL54.
Since the application conditions have an effect on the safety of the measurement, pay attention to the notes in
the Technical Information (TI) and Compact Instructions (KA).
Refer to the following documentation for instructions on setting the instruments:

Instrument Setting description in documentation:

Liquiphant M/S with FEL54 KA143F, KA163F, KA144F, KA164F, KA220F, KA162F,
KA165F, KA172F, KA173F, *

(* type-dependent, see Table: Supplementary device documentation, Page 6)

Settings for Liquiphant M/S with FEL54:

• The density switch setting must be configured according to the density range of the medium.
• The setting of the safety mode has an effect on the function. The DIL switch must be set to MIN in a SIL
application.

" Caution!
Observe the following for FEL54: The operator must use suitable measures
(e.g. current limiter, fuse) to ensure the relay contact characteristics are not exceeded:
• U ≤ 253 V AC 50/60 Hz , I ≤ 6 A, P ≤ 1500 VA at cos ≥ 0.7 or
• U ≤ 30 V DC, I ≤ 6 A, P ≤ 80 W

" Caution!
Changes to the settings at the electronic insert FEL54 after measuring system start-up can impair the protection
function!

7
 Response in operation and failure
The response in operation and failure is described in the following documentation:

Instrument Setting description in documentation:

Liquiphant M/S with FEL54 KA143F, KA163F, KA144F, KA164F, KA220F, KA162F,
KA165F, KA172F, KA173F, *

(* type-dependent, see Table: Supplementary device documentation, Page 6)

Recurrent function tests of the measuring system

The operativeness of the minimum detection must be checked annually if the PFDavg values given in the
Appendix are used.
The check must be carried out in such a way that it is proven that the minimum detection functions perfectly
in interaction with all components. This is guaranteed when the response height is lowered in an emptying
process. If it is not practical to empty to the response height, suitable simulation of the level or of the physical
measuring effect must be used to make the level sensor respond. If the operativeness of the level sensor/
transmitter can be determined otherwise (exclusion of faults that impair function), the check can also be
completed by simulating the corresponding output signal.
In the case of recurrent tests, each permitted setting must be checked, especially whether all the alarm switches
are set to ON.

" Caution!
Note the following points for the function test:
• Relay contact switching can be checked by using a hand multimeter at the terminals or by observing the dry
running protection elements (e.g. horn, actuating element).
• During the recurrent test, all existing relay contacts must be tested.
• As a positive test result, a free tuning fork must be detected and trigger the alarm for dry running protection.
• If free fork is not detected during the recurrent test, the monitored process must be set to a safe
state by means of additional or other measures and/or kept in the safe state until the safety
system is repaired.

8
 Appendix
Specific values and The tables show values and wiring options relevant to safety for the measuring system.
wiring options for the
measuring system Note!
Liquiphant M/S with FEL54 Note the following points on the tables below:
• The PFDavg value applies to alarms with NO contacts.
Using NC contacts instead of NO contacts requires further consideration.

# Warning!
For safety related use for MIN detection, the following application errors must be excluded:
Liquiphant M/S:
• Permanent and/or heavy build-up or "non-Newtonian media"
• Solid proportions of the medium with a diameter > 5.0 mm
• Corrosion within the scope of the media compatibility with regard to fork material and coating.
Liquiphant S:
• Hydrogen diffusion at temperatures over 180 °C and over 64 bar.

1oo1 architecture

Liquiphant M/S with FEL54 1) density 0.7 / 0.5

Settings 2) MIN safety

Evaluated transmitter (FEL54)

MIN

L00-FTL325Ni-14-06-xx-xx-010

SIL SIL 2

HFT 0
SFF > 73 %

PFDavg < 0,055 x 10-2

Wiring scheme
CH1
CH1
L00-FTLxxxxx-04-06-xx-xx-001
Twin contacts DPDT

Recurrent test TI (test interval) = annual

e.g. approaching level

1oo1D structure

6,00E-03
Probability

5,00E-03

4,00E-03
PFDavg
3,00E-03

2,00E-03

1,00E-03

0,00E+00 Test interval

0,0 2,0 4,0 6,0 8,0 10,0 [years]

L00-FTLxxxxx-05-06-xx-en-001

9
 Exida Management Summary

L00-FEL54xxx-01-06-xx-en-003

L00-FEL54xxx-01-06-xx-en-002

10
L00-FEL54xxx-01-06-xx-en-004

11
Supplementary Safety in the Process Industry – reducing risks with SIL
Documentation CP002Z/11

Instruments International

Endress+Hauser
Instruments International AG
Kaegenstrasse 2
4153 Reinach
Switzerland

Tel. +41 61 715 81 00

Fax +41 61 715 25 00
www.endress.com
[email protected]

SD187F/00/EN/07.10
71118542
FM+SGML 6.0 ProMoDo
71118542