Endress+Hauser Deltabar S PMD75 Operator's manual

Products Solutions Services
SD00189P/00/EN/16.17
71361630
Special Documentation
Deltabar S
PMD75, FMD77, FMD78
Functional Safety Manual
Pressure, differential pressure, level and flow measurement with 4 to 20 mA
output signal

Deltabar S
2Endress+Hauser
Table of contents
SIL declaration of conformity . . . . . . . . . . . . . . . . . . . . .3
Safety-related parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Useful lifetime of electric components . . . . . . . . . . . . . . . . . . . . 5
Certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .6
About this document . . . . . . . . . . . . . . . . . . . . . . . . . . . .7
Document purpose . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Symbols used . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Supplementary device documentation . . . . . . . . . . . . . . . . . . . . 8
Permitted devices types . . . . . . . . . . . . . . . . . . . . . . . . . .9
SIL label on the nameplate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Safety function. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Definition of the safety function . . . . . . . . . . . . . . . . . . . . . . . . 11
Safety-related signal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Restrictions for use in safety-related applications . . . . . . . . . 11
Use in protective systems . . . . . . . . . . . . . . . . . . . . . . 13
Device behavior during operation . . . . . . . . . . . . . . . . . . . . . . . 13
Confirmation and locking methods . . . . . . . . . . . . . . . . . . . . . . 15
Increased security during parameter entry via onsite display,
Field Communicator or FieldCare/DeviceCare . . . . . . . . . . . . . 16
Standard parameter entry via onsite display,
Field Communicator or FieldCare/DeviceCare . . . . . . . . . . . . . 20
Conditions for safe measuring mode . . . . . . . . . . . . . . . . . . . . 21
Checks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Locking/unlocking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Proof-test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Life cycle . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Requirements for personnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Commissioning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Maintenance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Repair . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Modification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Decommissioning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Appendix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Measuring system design . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Notes on the redundant connection of multiple sensors
for SIL 3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Additional information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Change history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Parameter description . . . . . . . . . . . . . . . . . . . . . . . . . 29
Parameter description of the SAFETY CONFIRM. group –
"Pressure" operating mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Form for device configuration – Pressure . . . . . . . . . 33
Form for device configuration – Level . . . . . . . . . . . . 35
Form for device configuration – Flow . . . . . . . . . . . . 37

Deltabar S
Endress+Hauser 3
SIL declaration of conformity
The binding document forms part of the scope of delivery when the Deltabar S is ordered with the
"SIL 2/SIL 3 IEC 61508 Declaration of Conformity" option.
SIL_Deltabar S

Deltabar S
4Endress+Hauser
Safety-related parameters In various applications, the operation of pressure or differential pressure transmitters at overpressure
(outside the measuring range, < MWP) or low pressure is not critical.
The state of the processes must be assessed and the various parameters must be taken into
consideration.
• Low pressure or overpressure not dangerous message E727 pressure overrange = Warning
• Low pressure or overpressure dangerous message E727 pressure overrange = Alarm
Depending on the configuration profile selected for the messages (Table ä14) different
parameters must be considered when assessing the facility:
• Message E727 pressure overrange = Alarm parameter profile A applies
• Message E727 pressure overrange = Warning parameter profile B applies
Parameter profiles A and B depend on the alarm settings and not on the firmware version.
For firmware versions up to and including firmware version 02.20.04, message E727 was set, as a rule,
to "Alarm" for SIL locking with increased security during parameter entry.
With firmware version 02.30.zz and higher, the settings for message E727 remain unchanged,
Table ä14.
Parameter profile A with message E727 (pressure overrange) configured as an alarm
Parameters according to IEC 61508 Value
Safety functions MIN, MAX, Range
SIL (hardware) • 2 (single-channel),
• 3 (with use of a SIL 3 capable coincidence logic)
SIL (software) 3
Device type B
Operating mode Low demand mode
Safety functions MIN MAX Range
sd 52 FIT 396 FIT 448 FIT
su 440 FIT 440 FIT 440 FIT
dd 396 FIT 52 FIT 0 FIT
du 69 FIT 69 FIT 69 FIT
tot 1)
1) According to Siemens SN29500. This value takes into account all failure types.
1194 FIT
MTBFtot )96 years
SFF 92.8 %
PFDavg for T1= 1 year (single-channel)2)
2) If the average temperature during continuous operation is in the region of +50 °C (+122 °F), a factor of 1.3
should be taken into account.
3.02 × 10-04
Diagnostic test interval 3)
3) During this time, all diagnostic functions are executed at least once.
5 min (RAM, ROM, ...), 1 s (Measurement)
Fault reaction time 4)
4) Time between fault detection and fault reaction.
5 min (RAM, ROM, …), 10 s (Measurement)
Settling time 5)
5) Step response time as per DIN EN 61298-2.
Technical Information TI00382P/00/EN,
"Dead time, time constant (T)" section

Deltabar S
Endress+Hauser 5
Parameter profile B with message E727 (pressure overrange) configured as a warning
Useful lifetime of electric
components
The established failure rates of electrical components apply within the useful lifetime as per
IEC 61508-2: 2010 section 7.4.9.5 note 3. According to DIN EN 61508-2:2011 section 7.4.9.5
national footnote N3 appropriate measures taken by the manufacturer and operator can extend the
useful lifetime.
Parameters according to IEC 61508 Value
Safety functions MIN, MAX, Range
SIL (hardware) • 2 (single-channel),
• 3 (with use of a SIL 3 capable coincidence logic)
SIL (software) 3
Device type B
Operating mode Low demand mode
Safety functions MIN MAX Range
sd 50 FIT 347 FIT 397 FIT
su 427 FIT 427 FIT 427 FIT
dd 347 FIT 50 FIT 0 FIT
du 76 FIT 76 FIT 76 FIT
tot 1)
1) According to Siemens SN29500. This value takes into account all failure types.
1136 FIT
MTBFtot )101 years
SFF 91%
PFDavg for T1= 1 year (single-channel)2)
2) If the average temperature during continuous operation is in the region of +50 °C (+122 °F), a factor of 1.3
should be taken into account.
3.32 × 10-04
Diagnostic test interval 3)
3) During this time, all diagnostic functions are executed at least once.
5 min (RAM, ROM, ...), 1 s (Measurement)
Fault reaction time 4)
4) Time between fault detection and fault reaction.
5 min (RAM, ROM, …), 10 s (Measurement)
Settling time 5)
5) Step response time as per DIN EN 61298-2.
Technical Information TI00382P/00/EN,
"Dead time, time constant (T)" section

Deltabar S
6Endress+Hauser
Certificate
TUEV_EN

Deltabar S
Endress+Hauser 7
About this document
Document purpose The document is part of the Operating Instructions and serves as a reference for application-specific
parameters and notes.
Symbols used Safety symbols
Symbols for certain types of information
Symbols in graphics
Symbols on the device
• General information about functional safety: SIL
• General information about SIL is available:
In the Download Area of the Endress+Hauser Internet site: www.de.endress.com Search 
Functional safety
Symbol Meaning
A0011189-DE
DANGER!
This symbol alerts you to a dangerous situation. Failure to avoid this situation will result in
serious or fatal injury.
A0011190-DE
WARNING!
This symbol alerts you to a dangerous situation. Failure to avoid this situation can result in
serious or fatal injury.
A0011191-DE
CAUTION!
This symbol alerts you to a dangerous situation. Failure to avoid this situation can result in
minor or medium injury.
A0011192-DE
Note!
This symbol contains information on procedures and other facts which do not result in
personal injury.
Symbol Meaning
A0011193
Tip
Indicates additional information.
A0028659
Reference to page.
1, 2, 3, 4, ... Series of steps
Symbol Meaning
1, 2, 3, 4, ... Numbering of main items
Symbol Meaning
A0019159
Safety
Observe the safety instructions contained in the Operating Instructions associated with
the device.
DANGER
WARNING
CAUTION
NOTICE
A

Deltabar S
8Endress+Hauser
Supplementary device
documentation Documentation Contents Note
Brief Operating
Instructions:
KA01018P/00
• Installation
•Wiring
•Operation
• Commissioning
• The documentation is provided with
the device.
• The documentation is available on
the Internet at
www.de.endress.com
Technical Information:
TI00382P/00
Technical data The documentation is available on the
Internet at
www.de.endress.com
Operating Instructions:
BA00270P/00
• Identification
• Installation
•Wiring
•Operation
• Commissioning, description of the
Quick Setup menu
• Maintenance
• Trouble-shooting incl. spare parts
• Appendix: diagram of menus
The documentation is available on the
Internet at
www.de.endress.com
Operating Instructions:
BA00274P/00
(Description of Device
Functions)
• Configuration examples for pressure,
level and flow measurement
• Parameter description
• Trouble-shooting
• Appendix: diagram of menus
The documentation is available on the
Internet at
www.de.endress.com
Compact Instructions:
KA00218P/00
•Wiring
• Operation without display
• Description of the Quick Setup menu
•HistoROM
®/M-DAT operation
The documentation is provided with the
device.
Cover of connection compartment
Safety Instructions,
Control Drawings or
Certificates
Safety, mounting and operating
instructions for devices suitable for use in
hazardous areas or as overfill prevention
(German Water Resources Act).
Select the desired explosion protection
or approval by means of feature 10
"Approval" in the order code. The
corresponding documentation is
provided with the device.

Deltabar S
Endress+Hauser 9
Permitted devices types
The details pertaining to functional safety in this manual relate to the device versions listed below and
are valid as of the specified software and hardware version. Unless otherwise specified, all subsequent
versions can also be used for safety functions. A modification process according to IEC 61508 is applied
for device changes.
Device versions valid for use in safety-related applications: PMD75
Device versions valid for use in safety-related applications: FMD77 with diaphragm seal
Ordering feature Option
010 Approval all
020 Output; Operation A 4-20 mA HART; extern. + LCD
B 4-20 mA HART; inside + LCD
C4-20mAHART;inside
D 4-20 mA HART; Li = 0; extern. + LCD
E 4-20 mA HART; Li = 0; inside + LCD
F 4-20 mA HART; Li = 0; inside
030 Housing; Cover Sealing; Cable Entry all
040 Nominal Range; Cell Material; PN all
050 Calibration; Unit all
060 Membrane Material all
070 Process Connection all
080 Seal all
100 Additional Option 1 E SIL Declaration of Conformity
or
110 Additional Option 2 E SIL Declaration of Conformity
Ordering feature Option
010 Approval all
020 Output; Operation A 4-20 mA HART; extern. + LCD
B 4-20 mA HART; inside + LCD
C4-20mAHART;inside
D 4-20 mA HART; Li = 0; extern. + LCD
E 4-20 mA HART; Li = 0; inside + LCD
F 4-20 mA HART; Li = 0; inside
030 Housing; Cover Sealing; Cable Entry all
040 Nominal Range; Cell Material; PN all
050 Calibration; Unit all
060 Membrane Material all
070 Process connection; LP Side; Seal all
080 Process Connection; High Pressure Side all (see the following "Warning" ä10)
090 Fill Fluid all
100 Additional Option 1 E SIL Declaration of Conformity
or
110 Additional Option 2 E SIL Declaration of Conformity

Deltabar S
10 Endress+Hauser
Device versions valid for use in safety-related applications: FMD78 with diaphragm seal
Valid firmware version: 02.0x and higher; 02.30.zz recommended
Valid hardware version (electronics): 02.00 and higher
In the event of device modifications, a modification process compliant with IEC 61508 is applied.
Devices with a firmware version 02.0x and higher which are already in use can still be operated if the
suitable DTM or DD is used.
An operating program is included in the scope of delivery for devices with the "HistoROM/M-DAT"
option (select the following in the product structure: feature 100 "Additional options 1", option N
"HistoROM/M-DAT Setup/diagnostic software included" or feature 110 "Additional options 2", option
N "HistoROM/M-DAT Setup/diagnostic software included").
WARNING
!
The functional safety assessment of the devices includes the basic unit with the main electronics,
sensor electronics and sensor up to the sensor membrane and the process connection mounted
directly. Process adapters, diaphragm seals and mounted/enclosed accessories were not taken
into account in the rating.
The operator is responsible for assessing the suitability of the overall system for safety-related
operation.
The additional use of diaphragm seal systems, primary devices (orifice plates, probes, etc.) and
accessories (e.g. impulse lines) has an impact on the overall accuracy of the measuring transmission
and the settling time.
‣The planning instructions in the conventional standards has to be observed (e.g. ISO6167, AGA 3)
for flow measurements with primary devices
‣Observe the Technical Information ("Supplementary device documentation", ä8)
SIL label on the nameplate
Ordering feature Option
010 Approval all
020 Output; Operation A 4-20 mA HART, extern. + LCD
B 4-20 mA HART; inside + LCD
C4-20mAHART;inside
D 4-20 mA HART; Li = 0; extern. + LCD
E 4-20 mA HART; Li = 0; inside + LCD
F 4-20 mA HART; Li = 0; inside
030 Housing; Cover Sealing; Cable Entry all
040 Nominal Range; Cell Material; PN all
050 Calibration; Unit all
060 Membrane Material all
080 Process Connection all
090 Transmitter Mounting; Fill Fluid all (see the following "Warning" ä10)
100 Additional Option 1 E SIL Declaration of Conformity
or
110 Additional Option 2 E SIL Declaration of Conformity
SIL certified devices bear the following symbol on the nameplate:

Deltabar S
Endress+Hauser 11
Safety function
Definition of the safety
function
The device's safety functions are:
• Minimum and/or maximum differential pressure monitoring; absolute and gauge pressure
(dp-gauge)
• Flow monitoring (via primary device)
• Level monitoring
Safety-related signal The safety-related signal of the Deltabar S is the analogue output signal 4 to 20 mA.
All safety functions solely refer to this output. In addition, the Deltabar S communicates via HART and
contains all HART features with additional diagnostics information.
The behavior of the output current in the event of an error depends on the settings for the messages
(Table ä14).
The safety-related output signal is fed to a downstream logic unit, e.g. a programmable logic controller
or a limit signal transmitter where it is monitored for the following:
• Exceeding and/or undershooting of a specific limit value.
• The occurrence of a fault, e.g. error current (≤3.6 mA, ≥21.0 mA, signal cable open circuit or short-
circuit).
The following dangerous undetected failures can occur in the devices:
• An incorrect output signal which deviates from the real measured value by more than 1%, with the
output signal remaining within the 4 to 20 mA or 3.8 to 20.5 mA range.
• A settling time that is delayed by more than the specified settling time plus tolerance.
For fault monitoring, the logic unit must be able to detect HI alarms (21 mA) and LO alarms
(3.6 mA).
The transmitter output is not safety-oriented during the following activities:
• Changes to the configuration
•Multidrop
– with software version < 02.20, if the parameter "bus address" (345) is set ≠"0".
– with software version ≥02.20, if the parameter "current mode" (052) is set to "fixed" (onsite display
and FieldCare) or "disabled" (HART handheld terminal).
• Simulation
• Proof-test
While configuring the transmitter and performing maintenance work on Deltabar S, alternative
measures must be taken to ensure the process safety.
Restrictions for use in
safety-related applications
• Device warmup time: after device warmup, the safety functions are available after a 30-second
initialization period.
• With regard to the calculation of the SFF, a tolerance range of ±1 % was established for the deviation
of the output current in the event of a failure of a safety-related component in the pressure
transmitter. If the pressure transmitter is operated in safety-related applications, it is recommended
to increase the total performance failure, as indicated in the Technical Information (TI), by this value.
• In the case of local operation of the Deltabar S without a display and without an operating tool or
without a HART communicator, the device cannot be safely configured because the user cannot
perform a visual check. In both these situations, communication via HART alone is not sufficient.
• The Deltabar S must be locked following configuration.
• When using the Deltabar S as a subsystem of a safety function, the "Hold meas. value" setting in the
parameter "Output fail mode" (388) and also the Multidrop mode (ä11) may not be selected as
this option does not provide failsafe alarming.
• During commissioning, a complete function test of the safety-related functions must be performed.
• The maximum interval for proof testing (Proof Test Interval) is 5 years.
• Faulty devices must be replaced as soon as possible to minimize the possibility of multiple errors
occurring.
The failure probabilities indicated in this Safety Manual are based on a medium time to repair
(MTTR) of 8 hours.
In the event of an error, it must be ensured that the facility to be monitored remains in a safe
state or is set to a safe state.

Deltabar S
12 Endress+Hauser
A0022897
AHI-Alarm≥21 mA
B Error range ± 1%
CLO-Alarm≤3.6 mA
Dangerous undetected failures in this scenario
An incorrect output signal that deviates from the real measured value by more than 1%, but is still in
the 4-20 mA range, is considered a dangerous, undetected failure.
Safety related
error
Explanation Implications for the
safety-related output
signal
Implications for
measuring uncertainty
(position, see Fig. ä12)
No device error Safe: SD
No error
None 1 Is within the specification
(see TI, BA, ...)
λSD Safe detected:
Safe failure which can be
detected
Causes the output signal to
signal the failsafe mode
ä13
3 No implications
λSU Safe undetected:
Safe failure which cannot be
detected
Is within the defined
error range
2 May be outside specifica-
tions
λDD Dangerous detected:
Dangerous failure which
can be detected
(Diagnostic within the
device)
Causes the output signal to
signal the failsafe mode
ä13
3 No implications
λDU Dangerous undetected:
Dangerous failure which-
cannot be detected
May be outside the defined
error range
4 May be outside the defined
error range
I [mA]
B
C
A
t
1
2
4
3
3

Deltabar S
Endress+Hauser 13
Use in protective systems
Device behavior during
operation
Device behavior during power-up
Once switched on, the device runs through a diagnostic phase for approx. 30 seconds. The current
output is set to approx. 12 mA, than 4 mA before going to the actual current.
Communication via HART is not possible during the diagnostic phase.
Behavior of device in event of alarms
The output current on alarm can be set to a value of ≤3.6 mA or ≥21.0 mA.
In some cases (e.g. failure of power supply, a cable open circuit and faults in the current output itself,
where the error current ≥21.0 mA cannot be reached), output currents ≤3.6 mA occur irrespective of
the configured error current.
In some other cases (e.g. cabling short circuit), output currents ≥21.0 mA occur irrespective of the
configured error current.
For alarm monitoring, the downstream logic unit must be able to recognize failure currents of the
upper level for signal on alarm (≥21.0 mA) and the lower level for signal on alarm (≤3.6 mA).
Alarm and warning messages
Additional information is provided by the alarm and warning messages in the form of error codes1) and
associated clear text messages.
WARNING
!
In the case of devices with firmware version ≤02.20.04, certain messages in the SAFETY
CONFIRM. menu (increased security during parameter entry) are automatically set from warning
to alarm, see Table ä14.
Do not use the SAFETY CONFIRM. sequence if the device is operated outside the set current or
measuring range in applications.
‣Standard device configuration and software/hardware locking is recommended in such
applications.
The behavior during operation and in case of failure is described in Operating Instructions
BA00270P/00/EN.
1) The error codes are listed in the Operating Instructions.

Deltabar S
14 Endress+Hauser
Alarm and warning messages
Process pressure range
A0022894
ARange of current signal for measured value transmission (NE43) 3.8 to 20.5 mA
BRange of output current 3.6 to ≥21.0 mA
LRL Lower range limit
LRV Lower range value
URV Upper range value
URL Upper range limit
Message
number/
parameter
Message/description Factory setting Parameterization method with increased security during
parameter entry
with FW 02.20 with FW ≥02.30.zz Permitted SIL
setting
with FW ≤02.201) with FW ≥02.30.zz
115 Sensor over pressure Warning Warning Warning or alarm Alarm
As per client setting
(default: warning)
120 Sensor low pressure Warning Warning Warning or alarm Alarm
620 Current output
out of range
Warning Warning Warning or alarm Alarm
715 Sensor over temperature Warning Warning Warning or alarm Alarm
720 Sensor under
temperature
Warning Warning Warning or alarm Alarm
717 Transmitter over temp. Warning Warning Warning or alarm Alarm
718 Transmitter under temp. Warning Warning Warning or alarm Alarm
726 Sens. temp. error
overrange
Warning Alarm Alarm Alarm Alarm
727 Sens. pres. error
overrange2)
Warning Warning Warning or alarm Alarm As per client setting
(default: warning)
Alarm
current
Output Fail Mode MAX MAX MIN or MAX MAX As per client setting
(default: MAX)
1) Settings are automatically changed from warning to alarm via the parametrization method.
2) The setting influences the parameters for functional safety (Tables ä4)
LRL -10% URL +10%
LRL URL LRV
1235
URV
A
B4
Process pressure
range
Acting process pressure Message1)
1) The output current depends on the message setting as alarm or warning.
1 Process pressure below sensor measuring range limit E120 (LRL -10 %)
E727 (<< LRL -10 %)
2 Process pressure/current below set range limit E620 < LRV
3 Process pressure within set measuring range None (3.8to20.5 mA)
4 Process pressure/current above set range limit E620 > URV
5 Process pressure above sensor measuring range limit E115 (URL +10 %)
E727 (>> URL +10 %)

Deltabar S
Endress+Hauser 15
Confirmation and locking
methods
The device is configured via the operating menu (see Operating Instructions BA00270P).
When using the devices in process control safety systems, the device configuration must meet two
requirements:
• Confirmation concept:
Proven independent checking of safety-related parameters entered.
– Via increased security during parameter entry or
– Manually via a checklist
• Locking concept:
Device locked after configuration (required in accordance with IEC 61511-1 §11.6.4 and NE 79 §3).
– SIL locking via increased security during parameter entry and/or
– Hardware locking via DIP switch on electronics; software locking
Two methods are available for commissioning the devices in process control safety systems:
• Standard device configuration and hardware/software locking
• Increased security during parameter entry
Due to the increased configuration security, the use of the "Increased security during parameter
entry" method is recommended.
Task
Select locking method SIL locking with increased security during parameter
entry (SAFETY CONFIRM. menu)
SW locking with standard configuration /
HW locking via DIP switch
Configuration
(e.g. LRV, URV, damping)
Via Quick Setup/operating menu Via Quick Setup/operating menu
Firmware ≤02.20.041) Firmware ≥02.30.zz Firmware ≤02.20.04 Firmware ≥02.30.zz
Configuration
Alarm settings/messages
Message automatically
switched to alarm
Table ä14
If required
(e.g. E727 pressure over-
range)2)
E726 manually switched to
alarm, Table ä14
If required
(e.g. E727 pressure over-
range)
Set current output/alarm
response
Automatic changeover
(e.g. to MAX alarm/
22 mA), Table ä14
If required
MIN or MAX (default) MIN or MAX (default)
Confirm plausibility and
correctness of parameter
settings
Automatically via SAFETY CONFIRM. menu Manually via checklist
Lock Automatically via SAFETY CONFIRM. menu
Additionally recommended: HW locking via DIP switch
SW locking with standard configuration and/or
HW locking via DIP switch
Operation FieldCare /
DeviceCare
Onsite display FieldCommuni-
cator
FieldCare /
DeviceCare
Onsite display FieldCommuni-
cator
Document DTM pdf Form ä33ff DTM pdf Form ä33ff
1) In the case of devices with firmware version ≤02.20.04, certain messages in the SAFETY CONFIRM. menu (increased security during parameter
entry) are automatically set from warning to alarm.
Do not use the SAFETY CONFIRM. sequence if the device is operated outside the set current or measuring range in applications, table ä14.
2) Configuring E727 as a warning or alarm affects the SIL parameters, Table ä4 ff.

Deltabar S
16 Endress+Hauser
Increased security during
parameter entry via onsite
display, Field Communicator
or FieldCare/DeviceCare
The following controls are permitted and recommended for devices without an onsite display that are
to be used in process control safety systems:
• Via the FieldCare/DeviceCare operating program and DTM for Deltabar S with firmware version
≥02.10
• Via Field Communicator handheld terminal and Device Description for Deltabar S with Device
Revision ≥21.
Description of the safety-related parameters, ä29 ff "Parameter description of the SAFETY
CONFIRM. group" section.
This configuration method is a software function implemented in the device and comprising
automated parameter confirmation and device locking.
Increased security during parameter entry via Field Communicator handheld terminal
a. Select "Main Menu" > "Hart Communication", in "Hart application" > "Online".
The device will automatically be found and opened online.
Make sure that the bus address of the device is = 0.
b. Make sure that the connection has been established to the correct device. This can be checked
using the measuring point, extended order code or serial number parameters.
Increased security during parameter entry via the FieldCare/DeviceCare operating program
a. The connection can be established in the following two ways:
– Select the "HART communication" connection wizard. The device will automatically be
found and opened online. Make sure that the bus address of the device is = 0.
– In the navigation tree, select "Create projects" > "Add device" > "HART communication". Then
select "Create network". The device is opened online. Make sure that the bus address of the
device is = 0.
b. Make sure that the connection has been established to the correct device. This can be checked
using the measuring point, extended order code or serial number parameters.
For increased security during parameter entry via onsite display, Field Communicator or FieldCare/
DeviceCare, perform the following steps:
1. Reset the parameters to their factory setting: reset code "7864"
(Operating Instructions BA00270P/00/EN, "Factory setting (reset)" section).
Check default values, number formats and parameter designations using the "Form for device
configuration" (column "Factory settings", ä33ff).
2. Configure device. Operating Instructions BA00270P/00/EN and BA00274P/00/EN.
Observe the "Conditions for safe measuring mode" section, ä21.
3. Note the settings of the following parameters according to the form (column "Specified value",
ä33ff) since these settings are queried for safe device configuration:
Parameters Available in the operating mode Group
Pressure Level, "Level
Easy Pressure"
level selection
Flow1)
ACK. ALARM MODE X X X MESSAGES
CALIB. OFFSET X X X POSITION ADJUSTMENT
MEASURING MODE X X X MEASURING MODE
PRESSURE EMPTY X BASIC SETUP
EMPTY CALIB. X BASIC SETUP
PRESSURE FULL X BASIC SETUP
FULL CALIB. X BASIC SETUP
MAX. FLOW X BASIC SETUP
MAX. PRESS. FLOW X BASIC SETUP
LOW FLOW CUT-OFF X EXTENDED SETUP
SET. L. FL. CUT-OFF X EXTENDED SETUP
LINEAR/SQROOT X EXTENDED SETUP

Deltabar S
Endress+Hauser 17
4. Switch the device off and on again. This ensures that the parameter settings are saved.
5. Check safety functions ("Checks", ä22).
Restart FieldCare/DeviceCare or Handheld FieldCommunicator and reconnect device.
6. Select the "SAFETY CONFIRM." group.
(Menu path: (GROUP SELECTION ) OPERATING MENU SAFETY CONFIRM.).
7. Select the "Lock" option.
Select the "Lock" option via the SAFETY LOCK parameter. The status "Locked" or "Unlocked" is
indicated on the fourth line on the display.
8. Enter the password via the SAFETY PASSWORD parameter (password: 7452).
Record the following confirmed settings according to the "Form for device configuration" (column
"Read-out actual value", ä33ff).
9. By means of the DIGIT SETS parameter, the user checks whether the characters and digits are
displayed correctly on the user interface. "0123456789.-" is displayed if everything is displayed
correctly.
Options:
– Valid: Select this option if the string of characters and digits is displayed correctly.
– Not valid: Select this option if the string of characters and digits is not displayed correctly. In
this case, operation in the safe measuring mode is not possible. The confirmation sequence is
aborted.
SET LRV X X X BASIC SETUP
SET URV X X X BASIC SETUP
DAMPING VALUE X X X BASIC SETUP
OUPUT FAIL MODE 2) X X X OUTPUT
SET MIN. CURRENT X X X OUTPUT
SET MAX. ALARM X X X OUTPUT
E727 P.OVERRANGE X X X OUTPUT
1) Not for options with 160/250 bar measuring range (2320/3625 psi)
2) From firmware version ≥2.30
The PRESSURE EMPTY and PRESSURE FULL parameters are only displayed for the "Dry"
CALIBRATION MODE. If you have performed a wet calibration, you subsequently have to
select the "Dry" option by means of the CALIBRATION MODE parameter.
You can read out the corresponding values for the PRESSURE EMPTY and PRESSURE FULL
parameters here.
For firmware version ≤02.20.04
– If the correct password is entered, the following
parameters are reset to the factory values:
CURR. CHARACT., OUTPUT FAIL MODE, ALT.
CURR. OUTPUT., SET MAX. ALARM, SET MIN.
CURRENT, SIMULATION MODE, ALARM DELAY,
ALARM DISPL. TIME and SELECT ALARMTYPE
(Point 10 for factory values).
– Any simulation running is terminated.
– The configurable messages ("Error"-type messages)
115, 120, 620, 715, 717, 718, 720, 726, 727 are
automatically set to "Alarm".
Operating Instructions BA00270P/00/EN,
"Messages" section.
For firmware version ≥02.30.zz
– Any simulation running is terminated.
– No parameters are reset.
Parameters Available in the operating mode Group
Pressure Level, "Level
Easy Pressure"
level selection
Flow1)

Deltabar S
18 Endress+Hauser
10. Only for firmware versions ≤02.20.04
By means of the OUTPUT CURRENT parameter, the user can check whether the following
parameters are correctly reset to the factory values. If reset correctly, the OUTPUT CURRENT
parameter displays "LinMaxNorm/22/3.8/0s". Factory values:
– CURR. CHARACT.: linear
– OUTPUT FAIL MODE: max. alarm
– ALT. CURR. OUTPUT: normal
– SET MAX. ALARM: 22 mA
– SET MIN. CURRENT: 3.8 mA
–ALARMDELAY:0.0s
– ALARM DISPLAY TIME: 0.0 s
Options:
– Valid: Select this option if the factory values displayed correspond to the desired values. The
system continues to interrogate the safety-related parameters.
– Not valid: Select this option if the factory values displayed do not correspond to the desired
values. In this case, operation in the safe measuring mode is not possible. The SAFETY LOCK
parameter displays the status "Unlocked". The confirmation sequence is aborted.
11. The following parameters have to be confirmed depending on the operating mode selected:
Options:
• Valid: Select this option if the value entered or the desired value is displayed. The system continues
to interrogate the safety-related parameters.
• Not valid: Select this option if an incorrect value or a value that was not entered is displayed. In this
case, operation in the safe measuring mode is not possible. The SAFETY LOCK parameter displays
the status "Unlocked". The confirmation sequence is aborted.
12. Once the safety-related parameters have been successfully interrogated, the password "7452"
must be entered again via the CONF. PASSWORD parameter. Afterwards, the device is locked for
the safe measuring mode. The SAFETY LOCK parameter displays the status "Locked". This locking
has the highest priority and can only be disabled via the SAFETY LOCK and SAFETY PASSWORD
parameters. ä23, "Locking/unlocking" section.
For firmware version ≤02.20.04
– ACK. ALARM MODE
– CALIB. OFFSET
–MEASURINGMODE
– PRESSURE EMPTY (only Level operating mode)
– EMPTY CALIB. (only Level operating mode)
– PRESSURE FULL (only Level operating mode)
– FULL CALIB. (only Level operating mode)
– MAX. FLOW (only Flow operating mode)
– MAX. PRESS. FLOW (only Flow operating mode)
– LOW FLOW CUT-OFF (only Flow operating mode)
– SET. L. FL. CUT-OFF (only Flow operating mode)
– LINEAR/SQROOT (only Flow operating mode)
–SETLRV
–SETURV
–DAMPINGVALUE
For firmware version ≥02.30.zz
– ACK. ALARM MODE
– CALIB. OFFSET
–MEASURINGMODE
– PRESSURE EMPTY (only Level operating mode)
– EMPTY CALIB. (only Level operating mode)
– PRESSURE FULL (only Level operating mode)
– FULL CALIB. (only Level operating mode)
– MAX. FLOW (only Flow operating mode)
– MAX. PRESS. FLOW (only Flow operating mode)
– LOW FLOW CUT-OFF (only Flow operating mode)
– SET. L. FL. CUT-OFF (only Flow operating mode)
– LINEAR/SQROOT (only Flow operating mode)
–SETLRV
–SETURV
–DAMPINGVALUE
– OUPUT FAIL MODE
– SET MIN. CURRENT
– SET MAX. ALARM
– E727 P.OVERRANGE
The value saved is indicated on the fourth line of the onsite display.

Deltabar S
Endress+Hauser 19
For increased security during parameter entry via the FieldCare/DeviceCare operating program, perform
the following steps:
Perform steps 1 to 12, see ä16 ff
13. Switch the device off and on again. This makes sure that parameter settings for the current ouput,
the alarm behavior and locking have been stored. Read the parameters out again and compare
them to the "Form for device configuration" (ä33ff).
For increased security during parameter entry via the Field Communicator handheld terminal, perform
the following steps:
Perform steps 1 to 12, see ä16 ff
The "Offline" and "FDT-Up-Download" operating options are not allowed for functional safety
options.
Observe the status when entering or reading parameters. The status is represented by icons or
symbols and may indicate possible errors concerning the data input, the updating of parameters
or the connection to the device.
For further information, refer to the FieldCare help.
13. Switch the device off and on again. This makes sure that parameter settings for the current
ouput, the alarm behavior and locking have been stored. Read the parameters out again and
compare them to the "Form for device configuration" (ä33ff).
The "Offline" operating option is not allowed for functional safety applications. Make sure that no
messages such as "Device disconnected" occur during the configuration.

Deltabar S
20 Endress+Hauser
Standard parameter entry
via onsite display,
Field Communicator or
FieldCare/DeviceCare
Standard device configuration via Field Communicator handheld terminal
a. Select "Main Menu" "HART Communication", in "Hart application" select "Online". The device
will automatically be found and opened online. Make sure that the bus address of the device
is = 0.
b. Make sure that the connection has been established to the correct device. This can be checked
using the measuring point, extended order code or serial number parameters.
Standard device configuration via the FieldCare/DeviceCare operating program
a. The connection can be established in the following two ways:
– Select the "HART communication" connection wizard. The device will automatically be
found and opened online. Make sure that the bus address of the device is = 0
– In the navigation tree, select "Create projects", then select "Add device" "HART
communication".
Then select "Create network". The device is opened online.
Make sure that the bus address of the device is = 0.
b. Make sure that the connection has been established to the correct device. This can be checked
using the measuring point, extended order code or serial number parameters.
In the case of device configuration via the onsite display, Field Communicator or FieldCare/DeviceCare,
perform the following steps:
1. Reset the parameters to their factory setting: with the "7864" reset code.
(Operating Instructions BA00270P/00/EN, "Factory setting (reset)" section).
Check default values, number formats and parameter designations using the "Form for device
configuration" (column "factory settings", ä33ff).
NOTICE
The following operating steps may no longer be performed after this reset:
‣Position adjustment or setting the measuring range on site without using the onsite display
‣Download
‣Configuration backup using HistoROM®/M-DAT
‣Reset apart from reset code "7864"
‣Current trimming
‣Sensor recalibration ("note" ä21)
2. By means of the DIGIT SETS parameter, check whether the characters and digits are displayed
correctly on the user interface. "0123456789.-" is displayed if everything is displayed correctly.
Menu path: (GROUP SELECTION) →OPERATING MENU →DISPLAY
3. Configure the device and log settings manually.
For the configuration Operating Instructions BA00270P/00/EN and BA00274P/00/EN.
Switch the device off and on again. This ensures that the parameter settings have been saved.
4. Check safety functions ("Checks" ä22).
Restart FieldCare/DeviceCare or Handheld FieldCommunicator and reconnect device.
5. Read out the specified parameters and compare them to the "Form for device configuration"
ä33ff.
6. Lock the device via software and/or hardware.
Operating Instructions BA00270P/00/EN, "Locking/unlocking operation" section.
7. Read out and log the CONFIG. COUNTER parameter.
Menu path: (GROUP SELECTION ) OPERATING MENUTRANSMITTER INFO 
TRANSMITTER DATA
Observe the prescribed parameters in accordance with the "Form for device configuration:
• For "Pressure", ä33
• For "Level" ("Level Easy Pressure" level selection) ä35
• For "Flow", ä37
In addition, the permitted parameter settings ä21 must be taken into consideration.