Endress+Hauser Deltapilot S FMB70 Instructions for use

SD213P/00/en/04.08
71073465
Functional Safety Manual
Deltapilot S
FMB70
Level and Pressure Measurement
with Output Signal 4...20 mA
Application
Use for process pressure measurement in aggressive and
non-aggressive gases, vapours and liquids or level
measurement in systems that have to meet the particular
requirements for safety-related systems in accordance
with IEC 61508.
The measuring device fulfills the requirements
concerning:
• Functional safety in accordance with IEC 61508
• Explosion protection (depending on version)
• Electromagnetic compatibility in accordance with
EN 61326 and NAMUR recommendation NE 21
• Electrical safety in accordance with IEC/EN 61010-1
Your benefits
•Usefor
– level monitoring
– pressure monitoring
up to SIL 3, independently assessed (Functional Safety
Assessment) by TÜV Süd in accordance with
IEC 61508
• Continuous measurement
• Easy commissioning
• Permanent self-monitoring
• Safe parameterization concept

Deltapilot S
2Endress+Hauser
Table of contents
SIL Declaration of Conformity . . . . . . . . . . . . . . . . . . . 3
General information . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Measuring system design. . . . . . . . . . . . . . . . . . . . . . . 4
Permitted device types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Further applicable device documentation . . . . . . . . . . . . . . . . . . . 5
Description of safety requirements
and boundary conditions . . . . . . . . . . . . . . . . . . . . . . . 6
Safety function . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
Restrictions for use in safety-related applications . . . . . . . . . . . . . . 7
Functional safety parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Operating life of electrical components . . . . . . . . . . . . . . . . . . . . . 8
Behavior of device when in operation and in case of failure . . . . . . 8
Alarm response and current output . . . . . . . . . . . . . . . . . . . . . . . 8
Total performance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Settling time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Maximum reaction time of alarms and warnings . . . . . . . . . . . . . 9
Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Device configuration . . . . . . . . . . . . . . . . . . . . . . . . . 10
Methods for device configuration. . . . . . . . . . . . . . . . . . . . . . . . . 10
Conditions for safe measuring mode - device configuration
with increased security during parameter entry . . . . . . . . . . . . . . 12
Increased security during parameter entry via on-site display
or handheld terminal 375 Field Communicator . . . . . . . . . . . . . 16
Increased security during parameter entry via operating tool . . . . 18
Parameter description of the SAFETY CONFIRM group –
"Pressure" operating mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Parameter description of the SAFETY CONFIRM group –
"Level" operating mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Standard device configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Checks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Locking/Unlocking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Proof-test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Proof-test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
Repair . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Repair . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Appendix . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Notes on the redundant connection of multiple sensors
for SIL 3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Management summary . . . . . . . . . . . . . . . . . . . . . . . 30
Certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Form for standard device configuration -
Pressure. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Form for standard device configuration -
Level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

Deltapilot S
Endress+Hauser 3
SIL Declaration of Conformity
The binding document forms part of the scope of delivery when the Deltapilot S is ordered with the
"SIL 2/SIL 3 IEC 61508 Declaration of Conformity" option.
P01-xMD7xxxx-01-xx-xx-xx-006
Example

Deltapilot S
4Endress+Hauser
General information
!Note!
General information on functional safety (SIL) is available at:
www.de.endress.com/SIL (German) or www.endress.com/SIL (English) and in the Competence Brochure
CP002Z "Functional Safety in the Process Industry - Risk Reduction with Safety Instrumented Systems".
Measuring system design
Permitted device types The functional safety assessment described in this manual applies to the device versions listed below and is valid
from the stated software and hardware versions.
Unless otherwise indicated, all subsequent versions can also be used for safety functions. Device versions valid
for use in safety-related applications:
Valid software version: 02.10 and higher
Valid hardware version (electronics): 02.00 and higher
In the event of device modifications, a modification process compliant with IEC 61508 is applied.
The following controls are permitted for devices without an on-site display that are to be used in process control
protection equipment:
– DTM for Deltapilot S with software version 02.10,
e.g. can be operated with the Endress+Hauser FieldCare operating program
– Handheld terminal 375 Field Communicator.
An operating program forms part of the scope of delivery for devices with the "HistoROM/M-DAT" option
(version N in feature 100 "Additional option 1" or version N in feature 110 "Additional option 2" in the order
code).
#Warning!
The functional safety assessment of the devices includes the basic unit with the main electronics, sensor
electronics and sensor up to the sensor membrane and the process connection mounted directly.
FMB70 -
Options Designation Version
010 Approval all
020 Output; Operating A, B, C
030 Housing; Cable Entry all
040 Sensor Range; Sensor Overload Limit all
050 Calibration; Unit all
060 Membrane Material; Seal all
070 Process Connection all
090 Fill Fluid all
100 Additional Option 1 E (SIL, IEC 61508 Declaration of Conformity)
or
110 Additional Option 2 E (SIL, IEC 61508 Declaration of Conformity)

Deltapilot S
Endress+Hauser 5
Further applicable device
documentation Documentation Contents Note
Brief Operating Instructions
KA1020P
– Installation
– Wiring
– Operation
– Commissioning
– The documentation is provided with the
device.
Technical Information
TI416P
– Technical data – The documentation is provided on the
documentation CD enclosed.
– The documentation is also available via
the Internet at
→www.de.endress.com.
Operating Instructions
BA332P
– Identification
– Mounting
– Wiring
– Operation
– Commissioning, description of the Quick
Setup menu
– Maintenance
– Troubleshooting incl. spare parts
– Appendix: diagram of menus
– The documentation is provided on the
documentation CD enclosed.
– The documentation is also available via
the Internet at
→www.de.endress.com.
Operating Instructions
BA274P
(Description of Device
Functions)
– Configuration examples for pressure, level
and flow measurement
– Parameter description
– Troubleshooting
– Appendix: diagram of menus
– The documentation is provided on the
documentation CD enclosed.
– The documentation is also available via
the Internet at
→www.de.endress.com.
Compact Instructions
KA218P
– Wiring
– Operation without a display
– Description of the Quick Setup menu
–HistoROM
®/M-DAT operation
– The documentation is provided with the
device.
→Connection compartment cover.
Safety Instructions,
Control Drawings or
certificates
– Safety, mounting and operating
instructions for devices suitable for use in
hazardous areas or as overfill protection
(German Water Resources Act).
– Select the desired explosion protection or
approval by means of feature 10
"Approval" in the order code.
The corresponding documentation is
provided with the device.

Deltapilot S
6Endress+Hauser
Description of safety requirements
and boundary conditions
Safety function
SD213en02
Operating and configuration possibilities of the Deltapilot S
Safety-related signal
The safety-related signal of the Deltapilot S is the analog output signal 4...20 mA. All safety functions solely
refer to this output. In addition, the Deltapilot S communicates via HART and contains all HART characteristics
with additional diagnostics information.
Deltapilot S generates an analog signal (≥3.8...≤20.5 mA) that is proportional to the pressure. This signal is
sent to a logic unit located downstream, e.g. a programmable logic controller or a limit signal transmitter, and
monitored there to establish if:
– A specified value for the "Pressure" or
"Level" operating modes has been overshot or undershot ("Level Easy Pressure")
– A range to be monitored for the "Pressure" or "Level" operating modes has been violated ("Level Easy
Pressure")
– A fault has occurred (e.g. sensor error, sensor cable disconnection or short-circuit, supply voltage failure).
The following dangerous undetected failures can occur in the devices:
– An incorrect output signal which deviates from the real measured value by more than 1%, with the output
signal remaining within the 4...20 mA range.
– A settling time that is delayed by more than the specified settling time plus tolerance.
– Other deviations from specified safety-related properties.
For fault monitoring, the logic unit must be able to detect HI alarms (≥21 mA) and LO alarms (≤3.6 mA).
The transmitter output is not safety-oriented during the following activities:
– Changes to the configuration
– Multidrop
– Simulation
– Proof-test
While configuring the transmitter and performing maintenance work on Deltapilot S, alternative measures
must be taken to ensure the process safety.
4…20 mA
Commubox
FXA191/
FXA195
1
#% &
Copy
GH I
PQ R S
,( ) ‘
AB C
Paste
Page
On
Page
Up
DeleteBksp
Insert
JK L
TU V
_< >
DE F
HotKey
+Hot Key
MN O
WX Y Z
+* /
4
7
.
2
5
8
0
375
FIELD COMMUNICATOR
3
6
9
-
96
DELTABAR:** * * * * * *
ONLINE
1 QUICK SETUP
2 OPERATING MENU
4 SV 0°C
3 PV 352mbar
HELP SAVE
dsdmdm
dfdas.
asdasfa
asasla.
Logic unit
e.g. PLC,
limit signal generator
etc.
Computer with operating program
FieldCare as of version 2.02
Actuator
Deltapilot S
with display module (optional)
and local operation
Handheld terminal
375 Field Communicator

Deltapilot S
Endress+Hauser 7
Restrictions for use in safety-
related applications
– Device warmup time: after device warmup, the safety functions are available after a 30-second initialization
period.
– In the case of local operation of the Deltapilot S FMB70 without a display and without an operating tool or
without a HART communicator, the device cannot be safely configured because the user cannot perform a
visual check. In both these situations, communication via HART alone is not sufficient.
– The device must be locked following configuration.
– When using the device as a subsystem of a safety function, the "Hold meas. value" setting may not be selected
as this option does not provide failsafe alarming.
– During commissioning, a complete function test of the safety-related functions must be performed.
– The maximum interval for recurrent testing (Proof Test Interval) is 5 years.
– Faulty devices must be replaced as soon as possible to minimize the possibility of multiple errors occurring.
The failure probabilities indicated in this Safety Manual are based on a medium time to repair (MTTR) of
8hours.
Functional safety parameters The table shows the specific functional safety parameters.
Parameters according to IEC 61508 Value
Safety functions MIN, MAX, Range
SIL (Hardware) 2 (single-channel),
3 (with use of a SIL 3 capable coincidence logic)
SIL (Software) 3
Device type B
Mode of operation Low demand mode
Safety functions MIN, MAX, Range
λsd 0 FIT
λsu 332 FIT
λdd 463 FIT
λdu 53 FIT
λtot *11058 FIT
MTBF *1108 years
SFF 93.7 %
PFDavg for T1= 1 year (single-channel) *22.32 × 10-4
T1(Proof-test interval) →graphic
Diagnostic test interval *35 min (RAM, ROM, ...), 1 s (Measurement)
Fault reaction time *45 min (RAM, ROM, …), 10 s (Measurement)
Settling time *5→Technical Information TI416P, "Dead time, time constant (T63)" section
*1According to Siemens SN29500. This value takes into account all failure types (→"Management summary" →ä30).
*2Where the average temperature when in continuous use is in the region of 50 °C, a factor of 1.3 should be taken into
account. For further information →"Management summary" →ä30.
* 3 During this time, all diagnostic functions are executed at least once.
*4Time between fault detection and fault reaction.
*5Step response time as per DIN EN 61298-2.

Deltapilot S
8Endress+Hauser
SD213en03
Proof -test interval
Operating life of electrical
components
The underlying failure rates of electrical components apply within the usable operating life in accordance with
IEC 61508-2 Section 7.4.7.4 Note 3.
!Note!
Correct installation is essential to the safe operation of the Deltapilot S.
Behavior of device when in
operation and in case of failure
The behavior during operation and in case of failure is described in Operating Instructions BA332P.
Alarm response and current
output
Increased security during parameter entry
When using this configuration method, the Deltapilot S outputs a permanently configured error current
≥22 mA when the safety function is triggered or in the event of device errors.
!Note!
If you selected the "On" option for the ACK. ALARM MODE parameter and an alarm occurs, proceed as
follows:
– Rectify the cause of the alarm.
– Unlock the Deltapilot S via the SAFETY LOCK and SAFETY PASSWORD parameters.
– Acknowledge the alarm via the ACK. ALARM parameter.
– Select the "Lock" option for the SAFETY LOCK parameter.
– Enter the password for the SAFETY PASSWORD parameter.
– Confirm the values and option selected for the parameters queried.
– Lock the Deltapilot S via the password.
Standard device configuration
Configure the current output for an alarm condition via the parameters OUTPUT FAIL MODE (default value:
max. alarm) and SET MAX. ALARM (default value: 22 mA). These parameters can be set to the following
values:
#Warning!
When using the Deltapilot S as a subsystem of a safety function, the "Hold meas. value" setting may not be
selected as this option does not provide failsafe alarming.
!Note!
Please also refer to →ä26, "Standard device configuration" section.
012345678910
0
1x10
–3
2x10
–3
3x10
–3
PFD
avg
1oo1D
Proof-test interval (years)
OUTPUT FAIL MODE *1Current value in the event of a fault
Min. alarm (LO alarm) 3.6 mA
Max. alarm (HI alarm) Can be set via SET MAX. ALARM *1= 22 mA
*1Menu path: (GROUP SELECTION →) OPERATING MENU →OUTPUT

Deltapilot S
Endress+Hauser 9
!Note!
The following applies to both configuration methods "Increased security during parameter entry" and "Standard
device configuration":
– During device configuration, the selected current value in the event of a fault cannot be guaranteed for all
possible fault situations (e.g. cable open circuit). However, failure reaction in accordance with NE 43
(≤3.6 mA or ≥21 mA) is always ensured.
– The current value can be (independent of the selected current value) between 22 and 25 mA when the
integrated diagnostics and monitoring measures are triggered.
– In cases such as power failure or circuit break, output currents can be (independent of the selected current
value) ≤3.6 mA.
– After an error or a fault has been removed, the 4...20 mA output signal can be considered to be safe after
20 seconds.
– For the maximum reaction time of alarms and warnings →ä9.
Total performance "Total performance" comprises non-linearity including hysteresis and non-repeatability, the thermal change of
the zero point:
±1 % of the URL (upper range limit)
The information applies to a temperature range from –10...+60 °C (+14...+140°F).
Settling time The settling time is calculated according to the following formula:
tsettling time = t1+ (t2+ configured damping time) x 5
For t1(dead time) and t2(T63) →Technical Information TI416P, "Dead time, time constant (T63)" section.
The factory setting for the damping time is 2 seconds, but can be configured between 0 and 999 seconds.
In accordance with IEC 61298-2, the settling time is the time the output signal needs to reach its steady-state
value at 1% of the output span and remain within this range.
Maximum reaction time of
alarms and warnings
The reaction times of alarms and warnings are listed in the following table. In the event of an alarm (device
faults), the device outputs an error current, →ä8, "Alarm response and current output" section.
Installation Mounting, wiring and commissioning
The mounting, wiring and commissioning of the Deltapilot S is described in Operating Instructions BA332P.
Code *1Message type *2
(current output)
Maximum reaction
time
Diagnostic test
interval
113, 704, 705, 728, 729, 736 und 737 Alarm 5 min 5 min
703 und 739 Alarm 10 s 1 s
738, 131, 132, 133, 110, 121, 747 Alarm Only during
initialization
101, 115 *3, 120 *3, 122, 130, 703, 704, 707,
711, 713, 715 *3, 716, 717 *3, 718 *3, 719,
720 *3, 721, 722, 723, 725, 726 *3, 727 *3,
741, 742, 743, 744, 748
Alarm Immediately
102, 106, 116, 602, 604, 613, 700, 701, 702,
706, 710, 730 *4, 731 *4, 732 *4, 733 *4,
740 *4, 745, 746, 620 *3
Warning
(device continues
to measure)
Immediately
*1→Operating Instructions BA332P, Section 8.1 "Messages".
*2→Operating Instructions BA332P, Section 8.2 "Response of the outputs to error".
*3These messages are "Error"-type messages and are automatically set to "Alarm" when using the "Increased security
during parameter entry" method. These messages have to be set to "Alarm" manually when using the "Standard
device configuration" method. →ä26, "Standard device configuration" section.
*4These messages are "Error"-type messages and are set to "Warning" at the factory. These messages are not set to
"Alarm" when using the "Increased security during parameter entry" method.

Deltapilot S
10 Endress+Hauser
Device configuration
Methods for device
configuration
When using the devices in process control protection equipment, the device configuration must meet two
requirements:
1. Confirmation concept:
proven independent checking of the safety-related parameters input
2. Locking concept:
device locked after configuration (required in accordance with IEC 61511-1 §11.6.4 and NE 79 §3)
The following methods for device configuration are available:
1. Standard device configuration
2. Increased security during parameter entry
!Note!
Due to the increased configuration safety, the use of the "Increased security during parameter entry"
method is recommended when using the device in process control protection functions.
Procedure for "Standard device configuration"
Point ➀:
"Standard device configuration" section,
→ä26, and for the "Level" operating
mode, "Level Easy Pressure" level
selection, also observe the permitted
parameter settings, →ä12 ff.
Point ➁:
Observe the prescribed parameters in
accordance with the form, →ä34
("Pressure" operating mode) and
→ä35 ("Level" operating mode,
"Level Easy Pressure" level selection).
SD213en04
Standard device
(manual parameter confirmation and locking)
configuration
Read out the prescribed
parameters and compare
them to the protocol.
Is the configuration
identical to the
protocol?
Lock the device for safe
measuring mode via software
and/or hardware.
Perform a reset
(code "7864")
The correct display of the
characters and digits is checked
via the DIGITS SET parameter.
yes
no
Configure the device
(see Operating Instructions
BA332P and BA274P)
and make a protocol of the
.settings manually
Read out the
CONFIG RECORDER
parameter and document it.
2
2
1

Deltapilot S
Endress+Hauser 11
Procedure for "Increased security during parameter entry"
For a description of "Increased security during parameter entry" →ä16 ff and for "Standard device
configuration" →ä26 ff.
Point ➂:
Observe "Conditions for safe measuring
mode" section, →ä12.
SD213en05
Increased security during parameter entry
(software-guided configuration and locking)
Initiate the locking sequence
via the SAFETY LOCK
parameter.
Enter the password "7452”
via the SAFETY PASSWORD
parameter.
Device software checks
whether all conditions
have been fulfilled.
Conditions
OK?
The correct display of the
characters and digits is checked
via the DIGITS SET parameter.
yes
no
Locking
not possible.
Display
OK?
no
Safety-relevant parameters
are queried for validity.
Querying is
continued. Value OK?
yes no
Querying
completed.
The device is locked for
safe measuring mode.
Enter the password
"7452” again.
Configure the device
(see Operating Instructions
BA332P and BA274P).
Set parameter
correctly
or perform
a Reset
(code "7864").
yes
yes
3
3

Deltapilot S
12 Endress+Hauser
Conditions for safe measuring
mode - device configuration
with increased security during
parameter entry
With the "Increased security during parameter entry" method, the device checks whether a number of
operating steps have been performed beforehand and whether certain parameters have been configured with
reliable settings. This method of configuration is no longer possible if one of these operating steps has been
performed or if the configuration is not permitted. A corresponding message is displayed.
The "Increased security during parameter entry" method is no longer possible after the following operating
steps.
– Position adjustment performed or measuring range set on site without using the on-site display.
– Following a download
– After a configuration backup using HistoROM®/M-DAT
– After a reset apart from after the reset code "7864"
– After performing sensor recalibration (observe Note →ä15).
– Following current trimming
– For the LEVEL SELECTION parameter, the "Level Easy Height" or "Level Standard" option was selected
(permitted setting for LEVEL SELECTION is "Level Easy Pressure").
The reset code "7864" resets all the parameters to their delivery status.
After this, the "Increased security during parameter entry" method is possible once more.
Permitted parameter setting:
Only certain settings are possible for some parameters. If a setting that is not permitted has been selected for
one of these parameters, the "Increased security during parameter entry" method is not possible. This method
is possible once more as soon as the permitted setting is selected for the parameter.
Parameter and menu path Permitted setting
BUS ADDRESS (345)
Menu path:
(GROUP SELECTION →) OPERATING MENU→
TRANSMITTER INFO →HART PARAMETER
0
"Pressure" MEASURING MODE:
PRESS. ENG. UNIT (060)
Menu path:
(GROUP SELECTION →) OPERATING MENU →
SETTINGS →BASIC SETUP
All units, apart from "User unit"
"Level" MEASURING MODE, "Level Easy Pressure"
LEVEL SELECTION:
The PRESSURE EMPTY, PRESSURE FULL, EMPTY
CALIB., FULL CALIB., SET LRV and SET URV
parameters must meet the following conditions:
Menu path:
(GROUP SELECTION →) OPERATING MENU →
SETTINGS →BASIC SETUP
– The pressure values for SET LRV and SET URV must be within
the sensor measuring range. →following graphics, Point ➀.
– The turndown, which is determined by the difference between
the pressure values for SET LRV and SET URV, must not be
larger than the maximum turndown (100:1 at factory).
→following graphics, Point ➁.
– The value for PRESSURE FULL – PRESSURE EMPTY
must not fall below the minimum span (1 % of sensor measuring
range). →following graphics, Point ➂.
"Level" MEASURING MODE, "Level Easy Pressure"
LEVEL SELECTION:
ADJUST DENSITY (007)
Menu path:
(GROUP SELECTION →) OPERATING MENU →
SETTINGS →EXTENDED SETUP
Same value as PROCESS DENSITY (025)

Deltapilot S
Endress+Hauser 13
Example of 400 mbar measuring cell.
The "Level Easy Pressure" calibration was performed correctly.
SD213en06
The conditions ➀, ➁ and ➂ are met. The "Increased security during parameter entry" method can be performed for the
device.
Point ➀:
The pressure values for SET LRV and SET URV must be within the sensor measuring range.
Point ➁:
The turndown, which is determined by the difference between the pressure values for SET LRV and SET URV, must not
be larger than the maximum turndown (100:1 at factory).
Point ➂:
The value for PRESSURE FULL – PRESSURE EMPTY must not fall below the minimum span (1 % of sensor measuring
range).
40 mbar 320 mbar p
0 mbar 400 mbar
0m
3.2 m
4m
0.4 m
HI
20 mA
4mA
3
1 1
2
Turndown < max. Turndown
FULL PRESS.
EMPTY PRESS.
URL SENSOR =
Pressure value
for 20 mA
LRL SENSOR =
Pressure value
for4mA
Span >
permitted minimum
span
EMPTY
CALIB.
FULL
CALIB.
SET LRV
SET URV

Deltapilot S
14 Endress+Hauser
The "Level Easy Pressure" calibration was not performed correctly.
SD213en07
The condition that the pressure values for SET LRV and SET URV have to be within the sensor measuring range is not met
(Point ➀). The "Increased security during parameter entry" method cannot be performed for the device without a
correction.
Point ➀:
The pressure values for SET LRV and SET URV must be within the sensor measuring range.
SD213en08
The condition that the turndown, which is determined by the difference between the pressure values for SET LRV and
SET URV, must not be larger than the maximum turndown is not met (Point ➁). The "Increased security during parameter
entry" method cannot be performed for the device without a correction.
Point ➁:
The turndown, which is determined by the difference between the pressure values for SET LRV and SET URV, must not
be larger than the maximum turndown (100:1 at factory).
p
0 mbar
0m
4m
HI
20 mA
4mA
4.48 m
400 mbar
1
URL SENSOR
= 400 mbar
Pressure value
for4mA=
LRL SENSOR
Pressure value
for 20 mA =
448 mbar >
URL SENSOR
EMPTY PRESS. FULL PRESS.
EMPTY
CALIB.
FULL
CALIB.
SET LRV
SET URV
8 mbar p 0 mbar
0m
0.032 m
0.08 m
HI
20 mA
4mA
2
EMPTY PRESS. FULL PRESS.
EMPTY
CALIB.
FULL
CALIB.
SET LRV
SET URV
Pressure value
for4mA=
0 mbar
Pressure value
for 20 mA =
3.2 mbar

Deltapilot S
Endress+Hauser 15
SD213en09
The condition that the value for PRESSURE FULL – PRESSURE EMPTY must not drop below the minimum span (1 % of
sensor measuring range) is not met (Point ➂). The "Increased security during parameter entry" method cannot be
performed for the device without a correction.
Point ➂:
The value for PRESSURE FULL – PRESSURE EMPTY must not fall below the minimum span (1 % of sensor measuring
range).
!Note!
• If the device has assumed a fault condition, i.e. an alarm is output and the current output assumes the set
value, the cause of the fault must first be eliminated.
• When operating via DTM, locking via the SAFETY LOCK menu is only possible in the online mode.
• The sensor can only be recalibrated by Endress+Hauser Service. As the parameters for a sensor recalibration
are not reset with the "7864" reset code, the parameters have to be checked prior to locking via the SAFETY
CONFIRM. menu.
0 mbar
0m
0.032 m
0.08 m
20 mA
4mA
3.2 mbar
IH
p
3Pressure value
for 20 mA =
8 mbar
EMPTY PRESS. FULL PRESS.
EMPTY
CALIB.
FULL
CALIB.
SET LRV
SET URV

Deltapilot S
16 Endress+Hauser
Increased security during
parameter entry via on-site
display or handheld terminal
375 Field Communicator
For a description of the safety-related parameters →ä20 ff, "Parameter description of the SAFETY CONFIRM.
group" section.
This configuration method is a software function implemented in the device and comprising automated
parameter confirmation and device locking. →ä11, process diagram.
1. Configure device. →Operating Instructions BA332P and BA274P.
Observe "Conditions for safe measuring mode" section, →ä12.
2. Note the settings of the following parameters since these settings are queried for safe device configuration:
3. Select the "SAFETY CONFIRM." group. (Menu path: (GROUP SELECTION →) OPERATING MENU →
SAFETY CONFIRM.).
4. Select the "Lock" option.
–On-site display: Select the "Lock" option via the SAFETY LOCK parameter.
The status "Locked" or "Unlocked" is indicated on the fourth line of the display.
–Handheld terminal 375 Field Communicator: The Field Communicator offers the two SAFETY
LOCKSTATE and SAFETY LOCK methods.
– Via SAFETY LOCK, select the "Lock" option and confirm.
– Via SAFETY LOCKSTATE, you can display the "Locked" or "Unlocked" status.
5. Enter the password via the SAFETY PASSWORD parameter (password: 7452).
– If the correct password is entered, the following parameters are reset to the factory settings:
CURR. CHARACT., OUTPUT FAIL MODE, ALT. CURR. OUTPUT, SET MAX. ALARM,
SET MIN. CURRENT, SIMULATION MODE, ALARM DELAY and ALARM DISPLAY TIME
(→Point 7 for factory values.)
– Any simulation running is terminated.
– The configurable messages ("Error"-type messages) 115, 120, 620, 715, 716, 717, 718, 720, 726 and
727 are set to "Alarm". →Operating Instructions BA332P, Section 8.1 "Messages".
Parameters Available in the operating mode Group
Pressure Level,
"Level Easy Pressure"
level selection
ACK. ALARM MODE X X MESSAGES
CALIB. OFFSET X X POSITION ADJUSTMENT
MEASURING MODE X X On-site display:
• MEASURING MODE
Handheld terminal
375 Field Communicator:
•BASICSETUP
PRESSURE EMPTY X BASIC SETUP
EMPTY CALIBRATION X BASIC SETUP
PRESSURE FULL X BASIC SETUP
FULL CALIBRATION X BASIC SETUP
SET LRV X X BASIC SETUP
SET URV X X BASIC SETUP
DAMPING VALUE X X BASIC SETUP
!Note!
The PRESSURE EMPTY and PRESSURE FULL parameters are only displayed for the "Dry" CALIBRATION MODE.
If you have performed a wet calibration, you subsequently have to select the "Dry" option by means of the
CALIBRATION MODE parameter. You can read out the corresponding values for the PRESSURE EMPTY and
PRESSURE FULL parameters here.

Deltapilot S
Endress+Hauser 17
6. By means of the DIGIT SETS parameter, the user checks whether the characters and digits are displayed
correctly on the user interface. "0123456789.-" is displayed if everything is displayed correctly.
Options:
– Valid: Select this option if the string of characters and digits is displayed correctly.
– Not valid: Select this option if the string of characters and digits is not displayed correctly. In this case,
operation in the safe measuring mode is not possible.
7. By means of the OUTPUT CURRENT parameter, the user can check whether the following parameters
are correctly reset to the factory values. If reset correctly, the OUTPUT CURRENT parameter displays
"LinMaxNorm/22/3.8/0s".
Factory values:
– CURR. CHARACT.: linear
– OUTPUT FAIL MODE: max. alarm
– ALT. CURR. OUTPUT: normal
– SET MAX. ALARM: 22 mA
– SET MIN. CURRENT: 3.8 mA
– ALARM DELAY: 0.0 s
– ALARM DISPLAY TIME: 0.0 s
Options:
– Valid: Select this option if the factory values displayed correspond to the desired values. The system
continues to interrogate the safety-related parameters.
– Not valid: Select this option if the factory values displayed do not correspond to the desired values. In
this case, operation in the safe measuring mode is not possible. The SAFETY LOCK parameter displays
the status "Unlocked".
8. The following parameters have to be confirmed depending on the operating mode selected:
–ACK.ALARMMODE
– CALIB. OFFSET
– MEASURING MODE
– PRESSURE EMPTY (only Level operating mode)
– EMPTY CALIBRATION (only Level operating mode)
– PRESSURE FULL (only Level operating mode)
– FULL CALIBRATION (only Level operating mode)
– SET LRV
–SETURV
– DAMPING VALUE
The value saved is indicated on the fourth line of the on-site display.
Options:
– Valid: Select this option if the value entered or the desired value is displayed.
The system continues to interrogate the safety-related parameters.
– Not valid: Select this option if an incorrect value or a value that was not entered is displayed.
In this case, operation in the safe measuring mode is not possible.
The SAFETY LOCK parameter displays the status "Unlocked".
9. Once the safety-related parameters have been successfully interrogated, the password "7452" must be
entered again via the CONF. PASSWORD parameter. Afterwards, the device is locked for the safe
measuring mode. The SAFETY LOCK parameter displays the status "Locked".
This locking has the highest priority and can only be disabled via the SAFETY LOCK and SAFETY
PASSWORD parameters. →ä27, "Locking/Unlocking" section.

Deltapilot S
18 Endress+Hauser
Increased security
during parameter entry via
operating tool
For a description of the safety-related parameters →ä20 ff, "Parameter description of the SAFETY CONFIRM.
group" section.
This configuration method is a software function implemented in the device and comprising automated
parameter confirmation and device locking. →ä11, process diagram.
1. Configure device. →Operating Instructions BA332P and BA274P.
Observe "Conditions for safe measuring mode" section, →ä12.
2. Note the settings of the following parameters since these settings are queried for safe device configuration:
3. Select the "SAFETY CONFIRM." group. (Menu path: OPERATING MENU →SAFETY CONFIRM.).
4. Select the "Lock" option via the SAFETY LOCK parameter. The SAFETY LOCKSTATE parameter displays
the status "Unlocked".
5. Enter the password via the SAFETY PASSWORD parameter (password: 7452).
– If the password entered is correct, the following parameters are reset to the factory settings:
CURR. CHARACT., OUTPUT FAIL MODE, ALT. CURR. OUTPUT, SET MAX. ALARM,
SET MIN. CURRENT, SIMULATION, ALARM DELAY and ALARM DISPLAY TIME
(→Point 7 for factory values.)
– Any simulation running is terminated.
– The configurable messages ("Error"-type messages) 115, 120, 620, 715, 716, 717, 718, 720, 726 and
727 are set to "Alarm". →Operating Instructions BA332P, Section 8.1 "Messages".
– All the parameters to be confirmed are displayed.
6. By means of the DIGIT SETS parameter, the user checks whether the characters and digits are displayed
correctly on the user interface. "0123456789.-" is displayed if everything is displayed correctly.
Options:
– Valid: Select this option if the string of characters and digits is displayed correctly.
– Not valid: Select this option if the string of characters and digits is not displayed correctly. In this case,
operation in the safe measuring mode is not possible.
Parameters Available in the operating mode Group
Pressure Level,
"Level Easy Pressure"
level selection
ACK. ALARM MODE X X MESSAGES
CALIB. OFFSET X X POSITION ADJUSTMENT
MEASURING MODE X X BASIC SETUP
PRESSURE EMPTY X BASIC SETUP
EMPTY CALIBRATION X BASIC SETUP
PRESSURE FULL X BASIC SETUP
FULL CALIBRATION X BASIC SETUP
SET LRV X X BASIC SETUP
SET URV X X BASIC SETUP
DAMPING VALUE X X BASIC SETUP
!Note!
The PRESSURE EMPTY and PRESSURE FULL parameters are only displayed for the "Dry" CALIBRATION MODE.
If you have performed a wet calibration, you subsequently have to select the "Dry" option by means of the
CALIBRATION MODE parameter. You can read out the corresponding values for the PRESSURE EMPTY and
PRESSURE FULL parameters here.

Deltapilot S
Endress+Hauser 19
7. By means of the OUTPUT CURRENT parameter, the user can check whether the following parameters
are correctly reset to the factory values. If reset correctly, the OUTPUT CURRENT parameter displays
"LinMaxNorm/22/3.8/0s".
Factory values:
– CURR. CHARACT.: linear
– OUTPUT FAIL MODE: max. alarm
– ALT. CURR. OUTPUT: normal
– SET MAX. ALARM: 22 mA
– SET MIN. CURRENT: 3.8 mA
– ALARM DELAY: 0.0 s
– ALARM DISPLAY TIME: 0.0 s
Options:
– Valid: Select this option if the factory values displayed correspond to the desired values.
– Not valid: Select this option if the factory values displayed do not correspond to the desired values.
In this case, operation in the safe measuring mode is not possible.
8. The following parameters have to be confirmed depending on the operating mode selected:
–ACK.ALARMMODE
– CALIB. OFFSET
– MEASURING MODE
– PRESSURE EMPTY (only Level operating mode)
– EMPTY CALIBRATION (only Level operating mode)
– PRESSURE FULL (only Level operating mode)
– FULL CALIBRATION (only Level operating mode)
– SET LRV
–SETURV
– DAMPING VALUE
Options:
– Valid: Select this option if the value entered or the desired value is displayed.
– Not valid: Select this option if an incorrect value or a value that was not entered is displayed.
In this case, operation in the safe measuring mode is not possible.
9. Once the safety-related parameters have been successfully interrogated, the password "7452" must be
entered again via the CONF. PASSWORD parameter. Afterwards, the device is locked for the safe
measuring mode. The SAFETY LOCKSTATE parameter displays the status "Locked". This locking has the
highest priority and can only be disabled via the SAFETY LOCK and SAFETY PASSWORD parameters.
→ä27, "Locking/Unlocking" section.

Deltapilot S
20 Endress+Hauser
Parameter description of the
SAFETY CONFIRM group –
"Pressure" operating mode
The numbers in brackets indicate the ID numbers of the parameters on the on-site display.
MEASURING MODE = pressure
Parameter name Description
SAFETY LOCKSTATE Displays the device status with regard to the safe measuring mode.
Possibilities:
•Unlocked
• Locked
Prerequisites:
• Operating tool or handheld terminal 375 Field Communicator
SAFETY LOCK (836) This parameter offers the following functions:
– Check and lock the device for the safe measuring mode.
→ä16 ff for operation via the on-site display or handheld terminal
375 Field Communicator and →ä18 ff for operation via operating tool.
– Disable the lock on the safe measuring mode.
→ä27, "Locking/Unlocking" section.
– On-site display: Displays the device status with regard to the safe measuring mode.
SAFETY PASSWORD (838) The password has to be entered in the following instances:
– Prior to querying safety-related parameters
→ä16 ff for operation via the on-site display or handheld terminal
375 Field Communicator and →ä18 ff for operation via operating tool.
– When unlocking the safe measuring mode
→ä27, "Locking/Unlocking" section.
DIGIT SETS (841) This parameter is used to check whether the characters and digits are displayed correctly
on the user interface. If the characters and digits are displayed correctly, this parameter
displays the character string "0123456789.-".
Options:
• Valid: Select this option if the string of characters and digits is displayed correctly.
• Not valid: Select this option if the string of characters and digits is not displayed
correctly. In this case, operation in the safe measuring mode is not possible.
OUTPUT CURRENT (875) For displaying and querying the settings for the CURR. CHARACT., OUTPUT FAIL
MODE, ALT. CURR. OUTPUT, SET MAX. ALARM, SET MIN. CURRENT parameters.
Once you have entered the password correctly for the SAFETY PASSWORD parameter,
the following parameters - among others - are reset to the factory setting:
– CURR. CHARACT. = linear
– OUTPUT FAIL MODE = max. alarm
– ALT. CURR. OUTPUT = normal
– SET MAX. ALARM = 22 mA
– SET MIN. CURRENT = 3.8 mA
– ALARM DELAY = 0 s
– ALARM DISPLAY TIME = 0 s
The OUTPUT CURRENT parameter displays these factory values as "LinMaxNorm22/
3.8/0s".
Options:
• Valid: Select this option if the factory values displayed correspond to the desired values.
• Not valid: Select this option if the factory values displayed do not correspond to the
desired values. In this case, operation of the device in the safe measuring mode is not
possible.