Endress+Hauser Cerabar S PMC71 Instructions for use

Products Solutions Services
SD00190P/00/EN/16.17
71385812
Special Documentation
Cerabar S PMC71, PMP71, PMP75
Functional Safety Manual
Process pressure and level measurement with 4-20 mA output signal

Cerabar S
2Endress+Hauser
Table of contents
SIL Declaration of Conformity . . . . . . . . . . . . . . . . . . . . .3
Safety-related parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Useful lifetime of electric components . . . . . . . . . . . . . . . . . . . 13
Certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
General information . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Document purpose . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Symbols used . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Supplementary device documentation . . . . . . . . . . . . . . . . . . . 16
Permitted device types . . . . . . . . . . . . . . . . . . . . . . . . . 17
SIL label on the nameplate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Safety function. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Definition of the safety function . . . . . . . . . . . . . . . . . . . . . . . . 19
Safety-related signal . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Restrictions for use in safety-related applications . . . . . . . . . 19
Use in protective systems . . . . . . . . . . . . . . . . . . . . . . 21
Device behavior during operation . . . . . . . . . . . . . . . . . . . . . . . 21
Confirmation and locking methods . . . . . . . . . . . . . . . . . . . . . . 23
Increased security during parameter entry via onsite display,
Field Communicator or FieldCare/DeviceCare . . . . . . . . . . . . . 24
Standard device configuration via onsite display, Field
Communicator or FieldCare/DeviceCare . . . . . . . . . . . . . . . . . . 28
Conditions for safe measuring mode . . . . . . . . . . . . . . . . . . . . 29
Checks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Locking/unlocking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Proof-test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
Life cycle . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Requirements for personnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Commissioning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Maintenance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Repair . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Modification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Decommissioning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Appendix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Measuring system design . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Notes on the redundant connection of multiple sensors
for SIL 3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Additional information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Change history . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Parameter description . . . . . . . . . . . . . . . . . . . . . . . . . 37
Parameter description of the SAFETY CONFIRM. group –
"Pressure" operating mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Form for standard device configuration - Pressure . 41
Form for standard device configuration - Level . . . . 43

Cerabar S
Endress+Hauser 3
SIL Declaration of Conformity
The binding document forms part of the scope of delivery when the Cerabar S is ordered with the "SIL 2/
SIL 3 IEC 61508 Declaration of Conformity" option.
SIL_Cerabar S

Cerabar S
4Endress+Hauser
Safety-related parameters In various applications, the operation of pressure or differential pressure transmitters at overpressure
(outside the measuring range, < MWP) or low pressure is not critical.
The state of the processes must be assessed and the various parameters must be taken into
consideration.
• Low pressure or overpressure not dangerous message E727 pressure overrange = Warning
• Low pressure or overpressure dangerous message E727 pressure overrange = Alarm
Depending on the configuration profile selected for the messages (Table ä22) different
parameters must be considered when assessing the facility:
• Message E727 pressure overrange = Alarm parameter profile A applies
• Message E727 pressure overrange = Warning parameter profile B applies
Parameter profiles A and B depend on the alarm settings and not on the firmware version.
For firmware versions up to and including firmware version 02.20.04, message E727 was set, as a rule,
to "Alarm" for SIL locking with increased security during parameter entry.
With firmware version 02.30.zz and higher, the settings for message E727 remain unchanged,
Table ä22.
Parameter profile A with message E727 (pressure overrange) configured as an alarm
PMP71, PMP75
Parameters according to IEC 61508 Value
Safety functions MIN, MAX, Range
SIL (hardware) • 2 (single-channel),
• 3 (with use of a SIL 3 capable coincidence logic)
SIL (software) 3
Device type B
Operating mode Low demand mode
Safety functions MIN MAX Range
sd 52 FIT 396 FIT 448 FIT
su 313 FIT 313 FIT 313 FIT
dd 396 FIT 52 FIT 0 FIT
du 65 FIT 65 FIT 65 FIT
tot 1)
1) According to Siemens SN29500. This value takes into account all failure types.
1063 FIT
MTBFtot )107 years
SFF 92.0%
PFDavg for T1= 1 year (single-channel) 2)
2) If the average temperature during continuous operation is in the region of +50 °C (+122 °F), a factor of 1.3
should be taken into account.
2.86 × 10-4
Diagnostic test interval 3)
3) During this time, all diagnostic functions are executed at least once.
5 min (RAM, ROM, ...), 1 s (Measurement)
Fault reaction time 4)
4) Time between fault detection and fault reaction.
5 min (RAM, ROM, …), 10 s (Measurement)
Settling time 5)
5) Step response time as per DIN EN 61298-2.
Technical Information TI00383P/00/EN,
"Dead time, time constant (T63)" section

Cerabar S
Endress+Hauser 5
Parameter profile B with message E727 (pressure overrange) configured as a warning
PMP71, PMP75
Parameters according to IEC 61508 Value
Safety functions MIN, MAX, Range
SIL (hardware) • 2 (single-channel),
• 3 (with use of a SIL 3 capable coincidence logic)
SIL (software) 3
Device type B
Operating mode Low demand mode
Safety functions MIN MAX Range
sd 50 FIT 406 FIT 456 FIT
su 311 FIT 311 FIT 311 FIT
dd 406 FIT 50 FIT 0 FIT
du 88 FIT 88 FIT 88 FIT
tot 1)
1) According to Siemens SN29500. This value takes into account all failure types.
1105 FIT
MTBFtot )103 years
SFF 90%
PFDavg for T1= 1 year (single-channel) 2)
2) If the average temperature during continuous operation is in the region of +50 °C (+122 °F), a factor of 1.3
should be taken into account.
3.85 × 10-4
Diagnostic test interval 3)
3) During this time, all diagnostic functions are executed at least once.
5 min (RAM, ROM, ...), 1 s (Measurement)
Fault reaction time 4)
4) Time between fault detection and fault reaction.
5 min (RAM, ROM, …), 10 s (Measurement)
Settling time 5)
5) Step response time as per DIN EN 61298-2.
Technical Information TI00383P/00/EN,
"Dead time, time constant (T63)" section

Cerabar S
6Endress+Hauser
Parameter profile A with message E727 (pressure overrange) configured as an alarm
PMC71 standard, Ex i
Parameters according to IEC 61508 Value
Safety functions MIN, MAX, Range
SIL (hardware) • 2 (single-channel),
• 3 (with use of a SIL 3 capable coincidence logic)
SIL (software) 3
Device type B
Operating mode Low demand mode
Safety functions MIN MAX Range
sd 52 FIT 367 FIT 419 FIT
su 392 FIT 392 FIT 392 FIT
dd 367 FIT 52 FIT 0 FIT
du 80 FIT 80 FIT 80 FIT
tot 1)
1) According to Siemens SN29500. This value takes into account all failure types.
1128 FIT
MTBFtot )101 years
SFF 91.0%
PFDavg for T1= 1 year (single-channel) 2)
2) If the average temperature during continuous operation is in the region of +50 °C (+122 °F), a factor of 1.3
should be taken into account.
3.50 × 10-4
Diagnostic test interval 3)
3) During this time, all diagnostic functions are executed at least once.
5 min (RAM, ROM, ...), 1 s (Measurement)
Fault reaction time 4)
4) Time between fault detection and fault reaction.
5 min (RAM, ROM, …), 10 s (Measurement)
Settling time 5)
5) Step response time as per DIN EN 61298-2.
Technical Information TI00383P/00/EN,
"Dead time, time constant (T63)" section

Cerabar S
Endress+Hauser 7
Parameter profile B with message E727 (pressure overrange) configured as a warning
PMC71 standard, Ex i
Parameters according to IEC 61508 Value
Safety functions MIN, MAX, Range
SIL (hardware) • 2 (single-channel),
• 3 (with use of a SIL 3 capable coincidence logic)
SIL (software) 3
Device type B
Operating mode Low demand mode
Safety functions MIN MAX Range
sd 50 FIT 363 FIT 413 FIT
su 390 FIT 390 FIT 390 FIT
dd 363 FIT 50 FIT 0 FIT
du 82 FIT 82 FIT 82 FIT
tot 1)
1) According to Siemens SN29500. This value takes into account all failure types.
1173 FIT
MTBFtot )97 years
SFF 90%
PFDavg for T1= 1 year (single-channel) 2)
2) If the average temperature during continuous operation is in the region of +50 °C (+122 °F), a factor of 1.3
should be taken into account.
3.59 × 10-4
Diagnostic test interval 3)
3) During this time, all diagnostic functions are executed at least once.
5 min (RAM, ROM, ...), 1 s (Measurement)
Fault reaction time 4)
4) Time between fault detection and fault reaction.
5 min (RAM, ROM, …), 10 s (Measurement)
Settling time 5)
5) Step response time as per DIN EN 61298-2.
Technical Information TI00383P/00/EN,
"Dead time, time constant (T)" section

Cerabar S
8Endress+Hauser
Parameter profile A with message E727 (pressure overrange) configured as an alarm
PMC71 standard HT, Ex i HT (HT = high temperature)
Parameters according to IEC 61508 Value
Safety functions MIN, MAX, Range
SIL (hardware) • 2 (single-channel),
• 3 (with use of a SIL 3 capable coincidence logic)
SIL (software) 3
Device type B
Operating mode Low demand mode
Safety functions MIN MAX Range
sd 52 FIT 375 FIT 427 FIT
su 396 FIT 396 FIT 396 FIT
dd 375 FIT 52 FIT 0 FIT
du 80 FIT 80 FIT 80 FIT
tot 1)
1) According to Siemens SN29500. This value takes into account all failure types.
1140 FIT
MTBFtot  100 years
SFF 91.1%
PFDavg for T1= 1 year (single-channel) 2)
2) If the average temperature during continuous operation is in the region of +50 °C (+122 °F), a factor of 1.3
should be taken into account.
3.52 × 10-4
Diagnostic test interval 3)
3) During this time, all diagnostic functions are executed at least once.
5 min (RAM, ROM, ...), 1 s (Measurement)
Fault reaction time 4)
4) Time between fault detection and fault reaction.
5 min (RAM, ROM, …), 10 s (Measurement)
Settling time 5)
5) Step response time as per DIN EN 61298-2.
Technical Information TI00383P/00,
"Dead time, time constant (T63)" section

Cerabar S
Endress+Hauser 9
Parameter profile B with message E727 (pressure overrange) configured as a warning
PMC71 standard HT, Ex i HT (HT = high temperature)
Parameters according to IEC 61508 Value
Safety functions MIN, MAX, Range
SIL (hardware) • 2 (single-channel),
• 3 (with use of a SIL 3 capable coincidence logic)
SIL (software) 3
Device type B
Operating mode Low demand mode
Safety functions MIN MAX Range
sd 50 FIT 371 FIT 420 FIT
su 394 FIT 394 FIT 394 FIT
dd 371 FIT 50 FIT 0 FIT
du 82 FIT 82 FIT 82 FIT
tot 1)
1) According to Siemens SN29500. This value takes into account all failure types.
1185 FIT
MTBFtot )96 years
SFF 91%
PFDavg for T1= 1 year (single-channel) 2)
2) If the average temperature during continuous operation is in the region of +50 °C (+122 °F), a factor of 1.3
should be taken into account.
3.61 × 10-4
Diagnostic test interval 3)
3) During this time, all diagnostic functions are executed at least once.
5 min (RAM, ROM, ...), 1 s (Measurement)
Fault reaction time 4)
4) Time between fault detection and fault reaction.
5 min (RAM, ROM, …), 10 s (Measurement)
Settling time 5)
5) Step response time as per DIN EN 61298-2.
Technical Information TI00383P/00/EN,
"Dead time, time constant (T)" section

Cerabar S
10 Endress+Hauser
Parameter profile A with message E727 (pressure overrange) configured as an alarm
PMC71 Ex d[ia]
Parameters according to IEC 61508 Value
Safety functions MIN, MAX, Range
SIL (hardware) • 2 (single-channel),
• 3 (with use of a SIL 3 capable coincidence logic)
SIL (software) 3
Device type B
Operating mode Low demand mode
Safety functions MIN MAX Range
sd 52 FIT 443 FIT 495 FIT
su 450 FIT 450 FIT 450 FIT
dd 443 FIT 52 FIT 0 FIT
du 85 FIT 85 FIT 85 FIT
tot 1)
1) According to Siemens SN29500. This value takes into account all failure types.
1267 FIT
MTBFtot )90 years
SFF 91.7%
PFDavg for T1= 1 year (single-channel) 2)
2) If the average temperature during continuous operation is in the region of +50 °C (+122 °F), a factor of 1.3
should be taken into account.
3.70 × 10-4
Diagnostic test interval 3)
3) During this time, all diagnostic functions are executed at least once.
5 min (RAM, ROM, ...), 1 s (Measurement)
Fault reaction time 4)
4) Time between fault detection and fault reaction.
5 min (RAM, ROM, …), 10 s (Measurement)
Settling time 5)
5) Step response time as per DIN EN 61298-2.
Technical Information TI00383P/00/EN,
"Dead time, time constant (T63)" section (T63)"