Endress+Hauser HART Proline Promass 500 Operator's manual

Products Solutions Services
Special Documentation
Proline Promass 500
Functional Safety Manual
K
e
e
p
c
ov
er
h
t
i
g
t
w
h
i
l
e
S
p
a
n
nu
ng
ö
f
f
n
e
n
SD01729D/06/EN/08.20
71488866
2020-07-31

Proline Promass 500 Table of contents
Endress+Hauser 3
Table of contents
1 Manufacturer's Declaration .... 4
1.1 Safety-related characteristic values ..... 5
2 Certificate ....................... 8
3 About this document ........... 9
3.1 Document function ................... 9
3.2 Using this document .................. 9
3.3 Symbols ............................ 9
3.4 Supplementary device documentation .. 10
4 Permitted device types ........ 12
4.1 SIL label on the nameplate ........... 14
5 Safety function ................ 15
5.1 Definition of the safety function ....... 15
5.2 Restrictions for use in safety-related
applications ........................ 16
6 Use in protective systems ..... 19
6.1 Device behavior during operation ...... 19
6.2 Parameter configuration for safety-
related applications ................. 20
6.3 Proof testing ....................... 31
7 Life cycle ....................... 44
7.1 Requirements for the personnel ....... 44
7.2 Installation ........................ 45
7.3 Commissioning ..................... 45
7.4 Operation ..........................45
7.5 Maintenance ....................... 45
7.6 Repair ............................. 45
7.7 Modification ....................... 46
7.8 Decommissioning ................... 46
8 Appendix ...................... 47
8.1 Structure of the measuring system ..... 47
8.2 Verification or calibration ............ 48
8.3 Notes on the redundant use of multiple
sensors ............................ 48
8.4 Version history ..................... 49

Manufacturer's Declaration Proline Promass 500
4 Endress+Hauser
1 Manufacturer's Declaration
A0037141-EN

Proline Promass 500 Manufacturer's Declaration
Endress+Hauser 5
1.1 Safety-related characteristic values
General
Device designation and permitted
versions
8A5B (Promass A 500)
8A5C (Promass A 500)
8E5B (Promass E 500)
8F5B (Promass F 500)
8H5B (Promass H 500)
8I5B (Promass I 500)
8O5B (Promass O 500)
8P5B (Promass P 500)
8Q5B (Promass Q 500)
8S5B (Promass S 500)
8X5B (Promass X 500)
Order code for "Output; input 1":
• Option BA "4-20mA HART"
• Option BB "4-20mA + Wireless HART"
• Option CA "4-20mA HART Ex-i passive"
• Option CB "4-20mA Ex-i + Wireless HART"
• Option CC "4-20mA HART Ex-i active"
Order code for "Output; input 2":
All options
Order code for "Output; input 3":
All options
Order code for "Output; input 4":
All options
Order code for "Additional approval":
Option LA "SIL"
Safety-related output signal 4 to 20 mA (output; input 1)
Failure current ≤ 3.6 mA or ≥ 21 mA
Assessed measured variable/
function
Monitoring of mass flow, volume flow or density
Safety function(s) Min., Max., Range
Device type according to IEC
61508-2
 Type A  Type B
Mode  Low Demand Mode  High Demand Mode  Continuous Mode 1)
Valid hardware version (main
electronics)
From delivery date October 1, 2017
Valid firmware version 01.01.zz and higher (HART; from delivery date October 1, 2017)
Safety manual SD01729D
Type of assessment
(only 1 version can be selected)
 Complete HW/SW assessment in the context of development including
FMEDA and change process according to IEC 61508-2, 3
 Assessment of evidence for proven-in-use HW/SW including FMEDA and
change process according to IEC 61508-2, 3

Manufacturer's Declaration Proline Promass 500
6 Endress+Hauser
 Analysis of HW/SW field data for evidence of "prior use" according to IEC
61511
 Assessment by FMEDA according to IEC 61508-2 for devices without software
Assessment by (including report
no. + FMEDA data source)
TÜV Rheinland Industrie Service GmbH – Certificate No. 968/FSP 1407.00/17
Test documents Development documents, test reports, data sheets
1) No continuous operation as per IEC 61508: 2011 (section 3.5.16)
SIL integrity
Systematic safety integrity  SIL 2 capability  SIL 3 capability
Hardware safety integrity Single-channel service
(HFT = 0)
 SIL 2 capability  SIL 3 capability
Multi-channel service
(HFT ≥ 1)
 SIL 2 capability  SIL 3 capability
FMEDA
Safety function(s) Min., Max., Range
Device model A1 A2
Option BA, BB Option CA, CB Option BA, BB Option CA, CB, CC
λDU 1) 127 FIT 127 FIT 145 FIT 146 FIT
λDD 1480 FIT 1439 FIT 2131 FIT 2172 FIT
λSU 994 FIT 957 FIT 1172 FIT 1209 FIT
λSD 1319 FIT 1348 FIT 2131 FIT 2102 FIT
SFF - Safe Failure Fraction 97 % 97 %
PFDavg for T1 = 1 year 2)
(single-channel architecture)
5.6 · 10-4 6.3 · 10-4
PFDavg for T1 = 4 years
(single-channel architecture)
2.2 · 10-3 2.5 · 10-3
PFH 6.4 · 10-8 6.3 · 10-8 7.3 · 10-8
PTC 3) Up to 99 % Up to 99 %
MTBFtot 4) 56 years 58 years 47 years 48 years
Diagnostic test interval 5) 30 min 30 min
Fault response time 6) 30 s 30 s
Process safety time 7) 50 h 50 h

Proline Promass 500 Manufacturer's Declaration
Endress+Hauser 7
Recommended test interval T14 years 3 years
MTTFd 8) 71 years 73 years 50 years 49 years
1) FIT = Failure In Time, number of failures per 109 h
2) Valid for averaged ambient temperatures up to 40 °C (104 °F) in accordance with general standard for devices
with SIL capability.
3) PTC = Proof Test Coverage (diagnostic coverage achieved by device failure detection during manual proof testing)
4) This value takes into account all failure types of the electronic components as per Siemens SN29500
5) All diagnostic functions are carried out at least once during this time.
6) Maximum time between fault detection and fault response.
7) The process safety time amounts to the diagnostic test interval * 100 (calculation as per IEC 61508).
8) MTTFd as per ISO 13849/IEC 62061 also includes soft errors (sporadic bit errors in data memories).
Note
The measuring device has been developed for use in "Low Demand" and "High Demand" mode.
Explanation
Our in-house quality management system saves information on safety-related systematic errors that will become
known in the future.

Certificate Proline Promass 500
8 Endress+Hauser
2 Certificate
A0033748

Proline Promass 500 About this document
Endress+Hauser 9
3 About this document
3.1 Document function
The document is part of the Operating Instructions and serves as a reference for application-
specific parameters and notes.
• General information about functional safety: SIL
• General information about SIL is available:
In the Downloads area of the Endress+Hauser website: www.endress.com/SIL
3.2 Using this document
3.2.1 Information on the document structure
Additional information regarding:
• The arrangement of the parameters, along with a short description, according to the
Operation menu, Setup menu, Diagnostics menu: Operating Instructions
• Operating concept: Operating Instructions
3.3 Symbols
3.3.1 Safety symbols
DANGER
This symbol alerts you to a dangerous situation. Failure to avoid this situation will result in
serious or fatal injury.
WARNING
This symbol alerts you to a dangerous situation. Failure to avoid this situation can result in
serious or fatal injury.
CAUTION
This symbol alerts you to a dangerous situation. Failure to avoid this situation can result in
minor or medium injury.
NOTICE
This symbol contains information on procedures and other facts which do not result in
personal injury.
3.3.2 Symbols for certain types of information
Symbol Meaning
Allowed
Procedures, processes or actions that are permitted.
Forbidden
Procedures, processes or actions that are forbidden.
Tip
Indicates additional information.

About this document Proline Promass 500
10 Endress+Hauser
Symbol Meaning
Reference to documentation
A
Reference to page
Reference to graphic
Notice or individual step to be observed
1.
,
2.
,
3.
… Series of steps
Result of a step
A0028662
Operation via local display
A0028663
Operation via operating tool
A0028665
Write-protected parameter
3.3.3 Symbols in graphics
Symbol Meaning
1, 2, 3 ... Item numbers
A, B, C, ... Views
A-A, B-B, C-C, ... Sections
3.4 Supplementary device documentation
For an overview of the scope of the associated Technical Documentation, refer to the
following:
•W@M Device Viewer (www.endress.com/deviceviewer): Enter the serial number from
nameplate
•Endress+Hauser Operations App: Enter the serial number from the nameplate or scan
the 2D matrix code (QR code) on the nameplate