Azbil ATT082 Instructions for use

CM2-ATT082-2003
Advanced Temperature Transmitter
with HART protocol
Model ATT082
Functional Safety Manual

NOTICE
While the information in this manual is presented in good faith and
believed to be accurate, Azbil Corporation disclaims any implied
warranty of merchantability or fitness for a particular purpose and
makes no express warranty except as may be stated in its written
agreement with and for its customer.
In no event shall Azbil Corporation be liable to anyone for any indirect,
special or consequential damages. is information and specications
in this document are subject to change without notice.
© 2016 Azbil Corporation All Rights Reserved.

Safety
Precautions for Use
For safe use of the product, the following symbols are used in this manual.
WARNING Warnings are indicated when mishandling the product might
result in the death or serious injury of the user.
CAUTION Cautions are indicated when mishandling the product might
result in minor injury to the user or damage to property.
■In describing the product, this manual uses the icons and conventions listed below.
Use caution when handling the product.
The indicated action is prohibited.
Be sure to follow the indicated instructions.
Handling Precautions:
Handling Precautions indicate items that the user should pay attention to when handling
the ATT.
To use this product correctly and safely, always observe the following precautions.
We are not responsible for damage or injury caused by the use of the product in violation of these precautions.
Handling Precautions for This Product
Installation Precautions
WARNING
When installing, use proper fittings and proper tightening torque for connections to the
process and to the exhaust. Gas leakage is dangerous because process gas and calibration
gas are flammable. Please refer to the leak check instructions in this manual and verify
that there is no gas leakage.
Do not use the product except at the rated pressure, specified connection standards, and
rated temperature. Use under other circumstances might cause damage that leads to a
serious accident.
For wiring work in an explosion-proof area, follow the work method stated in the
explosion-proof policy.
i

ii
CAUTION
After installation, do not step or stand on this unit. Doing so may damage the device or
cause injury.
Bumping the glass of the display with a tool may cause damage or injury. Be careful.
Install the device correctly. Incorrect or incomplete installation will cause output errors
and violation of regulations.
This product is quite heavy. Protect your feet with safety shoes when working.
Do not subject the product to shock or impact.
Wiring Precautions
WARNING
Do not do wiring work with wet hands or while electricity is being supplied to the product.
There is a danger of electric shock. When working, keep hands dry or wear gloves, and
turn off the power.
CAUTION
When wiring, check the specifications carefully and make sure to wire correctly. Incorrect
wiring can cause device damage or malfunction.
Supply electric power correctly according to the specifications. Supplying power that
differs from the specifications can damage the device.
Use a DC power supply that has overload protection.
Maintenance Precautions
WARNING
When removing this device for maintenance, be careful of residual pressure or residual
process gas. Leakage of process gas is dangerous.
When working on the vent, check its direction so that people do not come into contact
with vented gas. There is a danger of burns or other physical harm.
When the device is being used in an explosion-proof area, do not open the cover.
Opening the cover may cause an explosion.
CAUTION
This product was kept under carefully controlled conditions until it was shipped. Never try
to modify this device. Doing so could damage it.

iii
Certicate

iv
Table of Contents
Chapter 1. SIL key figures. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1
Chapter 2. Permitted devices types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .3
Chapter 3. Safety functions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .5
3-1. Definition of the safety function. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
3-1-1. Safety-related output signal. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
3-1-2. Dangerous undetected failures in this scenario . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
3-1-3. Limit value monitoring. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
3-1-4. Safe measurement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
3-2. Restrictions for use in safety-related applications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
3-3. Safety measured error . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
3-4. Restrictions of the device specifications for the safety operation . . . . . . . . . . . . . . . . . . . . . . . .11
Chapter 4. Use in protective systems. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
4-1. Behavior of device during operation and in case of error . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
4-1-1. Behavior of device during power-up. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
4-1-2. Behavior of device during normal operation (SIL measuring mode) . . . . . . . . . . . . . . .13
4-1-3. Device behavior in safety function demand mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
4-1-4. Safe states . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .13
4-1-5. Behavior of device in event of alarms and warnings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14
4-2. Parameter configuration for safety-related applications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15
4-3. Commissioning test and proof testing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21
4-3-1. Proof testing the safety function. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .21
4-3-2. Transmitter commissioning or proof test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .22
Chapter 5. Life cycle. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
5-1. Requirements for personnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27
5-2. Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27
5-3. Commissioning. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27
5-4. Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27
5-5. Maintenance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .27
5-6. Repair28
5-7. Modification. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .28
Chapter 6. Appendix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
6-1. Structure of the measuring system . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .29
6-1-1. Measurement function. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .30
6-2. Commissioning or proof test report . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32
6-2-1. Parameter settings for safe parameterization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34
6-3. Other36
6-3-1. Parameters and default settings for safe parameterization. . . . . . . . . . . . . . . . . . . . . . . .36
6-3-2. Safe HART® . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .40
6-3-3. Use as a safe measuring system . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .41
6-3-4. Assignment of code numbers to parameters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .43

1
Chapter 1. SIL key figures
General
Safety-related output signal 4...20mA
Fault current 3.58 mA
Process variable/function Temperature, voltage, resistance
Safety function(s) min., max., range
Device type acc. to IEC 61508-2
☐
Type A
☑
Type B
Operating mode
☑
Low Demand Mode
☑
High Demand
☐
Continuous Mode
Valid Hardware-Version Head transmitter: 01.00.06 or higher
DIN Rail transmitter: 01.00.04 or higher
Valid Software-Version 01.01.08 or higher (Dev.Rev.:2 or higher)
Type of evaluation
(check only one box)
☑
Complete HW/SW evaluation parallel to development incl.
FMEDA and change request acc. to IEC 61508-2, 3
☐
Evaluation of “Proven-in-use“ performance for HW/SW incl. FMEDA
and change request acc. to IEC 61508-2, 3
☐
Evaluation of HW/SW field data to verify “prior use“ acc. to IEC
61511
☐
Evaluation by FMEDA acc. to IEC61508-2 for devices w/o software
Evaluation through TÜV SÜD Product Service GmbH, Germany
Test documents development documents, test reports, data sheets
SIL - Integrity
Systematic safety integrity
☐
SIL 2 capable
☑
SIL 3 capable
Hardware safety integrity Single channel use (HFT = 0)
☑
SIL 2 capable
☐
SIL 3 capable
Multi-channel use (HFT ≥ 1)
☐
SIL 2 capable
☑
SIL 3 capable
FMEDA
Safety function min., max., range
λDU1) 40 FIT
λDD1) 258 FIT
λSU1) 129 FIT
λSD1) 4 FIT
SFF - Safe Failure Fraction 91%
PFDavg T1 = 1 year 2) (single channel architecture) 1.75 · 10-4
PFDavg T1 = 5 years 2) (single channel architecture) 8.76 · 10-4
PFH 4.0 · 10-8 · 1/h
PTC 3) 96%
MTBF 4) 71 years
Diagnostic test interval 5) 32 min
Fault reaction time 6) < 10.7 s
Process safety time 7) 53 h
Declaration
☑
Our internal company quality management system ensures information on safety-related systematic faults
which become evident in the future
1) FIT = Failure In Time, Number of failures per 109h
2) Valid for average ambient temperature up to +40 °C (+104 °F)
For continuous operation at ambient temperature close to +60 °C (+140 °F), a factor of 2.1 should be applied
3) PTC = Proof Test Coverage
4) MTBF (Mean time between failures) is the predicted elapsed time between inherent failures of a system during operation
in accordance to Siemens SN29500
5) All diagnostic functions are performed at least once within the Diagnostic test interval
6) Maximum time between error recognition and error response
7) The Process safety time is: Diagnostic test interval x 100 (calculated acc. to IEC 61508)

2
Useful lifetime of electrical components:
The established failure rates of electrical components apply within the useful lifetime as per
IEC 61508-2:2010 section 7.4.9.5 note 3.

3
Chapter 2. Permitted devices types
The details pertaining to functional safety in this manual relate to the device versions listed
below and are valid as of the specified firmware and hardware versions. Unless otherwise
specified, all subsequent versions can also be used for safety instrumented systems.
A modification process according to IEC 61508 is applied for any device modifications. Valid
device versions for safety-related use:
Feature Designation Version
010 Approval All
... ... ...
590 Additional approval LA
... ... ...
Order code:
↑
A0026614
The full order code is saved electronically in the
device. It is shortened on the nameplate due to
space limitations.
Valid firmware version as of 01.01.07
Valid hardware version
(electronics)
as of 01.00.06
Valid device drivers DTM as of version 1.0.2.1
DD as of revision 03
ATT082 x x x x x x x x x x x x x x x x xLA+

4
1
TAGXXXXXXXXXXX
TAGXXXXXXXXXXX
1 SIL symbol
Note: SIL certified devices are marked with the SIL symbol on the nameplate.