Endress+Hauser FTL62 Series Instructions for use

Products Solutions Services
Functional Safety Manual
Liquiphant FTL62
with electronic insert FEL67
Vibronic
Using with FTL325P
FY01018F/00/EN/01.20
71491956
2020-09-28
Valid as of version
01.01.zz (Device firmware)
01.00.zz (Device hardware)

Liquiphant FTL62 with electronic insert FEL67
2 Endress+Hauser
Order code:
Ext. ord. cd.:
Ser. no.:
www.endress.com/deviceviewer Endress+Hauser
Operations App
XXXXXXXXXXXX
XXXXX-XXXXXX
XXX.XXXX.XX
Serial number
1.
3.
2.
A0023555

Liquiphant FTL62 with electronic insert FEL67 Table of contents
Endress+Hauser 3
Table of contents
1 Declaration of Conformity ...... 4
1.1 Safety-related characteristic values ..... 5
2 About this document ........... 6
2.1 Document function ................... 6
2.2 Symbols used ........................ 6
2.3 Supplementary device documentation ... 7
3 Design ........................... 8
3.1 Permitted device types ................ 8
3.2 Identification marking ................ 9
3.3 Safety function ...................... 9
3.4 Basic conditions for use in safety-
related applications .................. 9
3.5 Useful lifetime of electric components .. 12
4 Commissioning (installation
and configuration) ............ 12
4.1 Requirements for personnel .......... 12
4.2 Installation ........................ 13
4.3 Commissioning ..................... 13
4.4 Operation ..........................13
4.5 Parameter configuration for safety-
related applications ................. 13
5 Operation ...................... 15
5.1 Device behavior during power-up ...... 15
5.2 Device behavior in safety function
demand mode ...................... 15
5.3 Device behavior in the event of an
alarm ............................. 15
6 Proof testing ................... 15
6.1 Basic test sequence .................. 16
7 Repair and error handling .... 16
7.1 Maintenance ....................... 16
7.2 Repair ............................. 16
7.3 Modification ....................... 17
7.4 Decommissioning ................... 17
7.5 Disposal ........................... 17
7.6 Battery disposal .................... 18
8 Appendix ...................... 18
8.1 Structure of the measuring system ..... 18
8.2 Version history ..................... 20

Declaration of Conformity Liquiphant FTL62 with electronic insert FEL67
4 Endress+Hauser
1 Declaration of Conformity
SIL_00351_01.20
Declaration of Conformity
Functional Safety according to IEC 61508
Based on NE 130 Form B.1
Endress+Hauser SE+Co. KG, Hauptstraße 1, 79689 Maulburg
being the manufacturer, declares that the product
Liquiphant FTL62 with electronic insert FEL67
(with dedicated Nivotester only)
is suitable for the use in safety-instrumented systems according to IEC 61508. The instructions of the
corresponding functional safety manual must be followed.
This declaration of conformity is exclusively valid for the customer listed in the cover letter of the
respective Endress+Hauser sales center and for the listed products and accessories in delivery status.
Maulburg, 27-July-2020
Endress+Hauser SE+Co. KG
i. V.
Manfred Hammer
Dept. Man. Technology
Quality Management / FSM
Research & Development
A0042175

Liquiphant FTL62 with electronic insert FEL67 Declaration of Conformity
Endress+Hauser 5
1.1 Safety-related characteristic values
SIL_00351_01.20
General
Device designation and permissible types Liquiphant with electronic insert FEL67
FTL62–**A7*************+LA
Safety-related output signal For connection to dedicated Nivotester only
Fault signal
Process variable/function Level switch for liquids
Safety function(s) Overfill protection or operating maximum/minimum detection
Device type acc. to IEC 61508-2 Type A Type B
Operating mode Low Demand Mode High Demand Mode 1) Continuous Mode
Valid hardware version 01.00.ww (ww: any double number)
Valid soware version 01.01.zz (zz: any double number)
Safety manual FY01018F
Type of evalulation
(check only one box)
Complete HW/SW evaluation parallel to development incl.
FMEDA and change request acc. to IEC 61508-2, 3
Evaluation of “proven in use” performance for HW/SW incl. FMEDA
and change request acc. to IEC 61508-2, 3
Evaluation of HW/SW field data to verify „prior use” acc. to
IEC 61511
Evaluation by FMEDA acc. to IEC 61508-2 for devices w/o soware
Evaluation through – report/certificate no. TÜV Rheinland / 968/FSP 1388.02/20
Test documents Development documents Test reports Data sheets
SIL - Integrity
Systematic safety integrity SIL 2 capable SIL 3 capable
Hardware safety integrity Single channel use (HFT = 0)
SIL 2 capable SIL 3 capable
Multi channel use (HFT ³ 1)
SIL 2 capable SIL 3 capable
FMEDA
Safety function MIN MAX —
λDU 2),3) 28 FIT 13 FIT —
λDD 2),3) 140 FIT 106 FIT —
λSU 2),3) 133 FIT 149 FIT —
λSD 2),3) 5 FIT 41 FIT —
SFF 91% 96% —
PFDavg (T1 = 1 year) 3) (single channel architecture) 1.24 × 10-4 5.67× 10-5 —
PFH 3) 2.83 × 10-8 1/h 1.29 × 10-8 1/h —
PTC 4) Test sequence A 94% 94% —
Test sequence B 8% 17% —
λtotal 2),3) 307 FIT 308 FIT —
Diagnostic test interval 5) ≤ 60 s, except RAM check ≤ 10 min —
Fault reaction time 6) ≤ 3 s —
Comments
Nivotester works without soware.
Declaration
Our internal company quality management system ensures information on safety-related systematic faults which become evident
in the future
1) Maximum admissible 1 demand per week.
2) FIT = Failure In Time, number of failures per 109 h
3) Valid for average ambient temperature up to +40 °C (+104 °F)
For continuous operation at ambient temperature close to +60 °C (+140 °F), a factor of 1.5 should be applied
4) PTC = Proof Test Coverage
5) All diagnostic functions are performed at least once within the diagnostic test interval
6) Maximum time between error recognition and error response
A0042176

About this document Liquiphant FTL62 with electronic insert FEL67
6 Endress+Hauser
2 About this document
2.1 Document function
This supplementary Safety Manual applies in addition to the Operating Instructions, Technical
Information and ATEX Safety Instructions. The supplementary device documentation must be
observed during installation, commissioning and operation. The requirements specific to the
protection function are described in this Safety Manual.
General information on functional safety (SIL) is available at:
•www.endress.com/SIL
• CP01008Z, Brochure "Functional Safety – SIL, Safety Instrumented Systems in the
Process Industry"
2.2 Symbols used
2.2.1 Safety symbols
DANGER
This symbol alerts you to a dangerous situation. Failure to avoid this situation will result in
serious or fatal injury.
WARNING
This symbol alerts you to a dangerous situation. Failure to avoid this situation can result in
serious or fatal injury.
CAUTION
This symbol alerts you to a dangerous situation. Failure to avoid this situation can result in
minor or medium injury.
NOTICE
This symbol contains information on procedures and other facts which do not result in
personal injury.
2.2.2 Symbols for certain types of information and graphics
Tip
Indicates additional information
Reference to documentation
Reference to graphic
Notice or individual step to be observed
1.
,
2.
,
3.
Series of steps
Result of a step

Liquiphant FTL62 with electronic insert FEL67 About this document
Endress+Hauser 7
1, 2, 3, ...
Item numbers
A, B, C, ...
Views
-
Hazardous area
Indicates the hazardous area
.
Safe area (non-hazardous area)
Indicates the non-hazardous area
2.3 Supplementary device documentation
For an overview of the scope of the associated Technical Documentation, refer to the
following:
•W@M Device Viewer (www.endress.com/deviceviewer): Enter the serial number from
nameplate
•Endress+Hauser Operations App: Enter the serial number from the nameplate or scan
the 2D matrix code (QR code) on the nameplate
The following documentation types are available in the Downloads section of the
Endress+Hauser website (www.endress.com/downloads):
2.3.1 Further applicable documents
• TI01539F
• BA02036F
• KA01479F
• FY001006F, Functional Safety Manual, FTL325P
2.3.2 Technical Information (TI)
Planning aid
The document contains all the technical data on the device and provides an overview of the
accessories and other products that can be ordered for the device.
2.3.3 Brief Operating Instructions (KA)
Guide that takes you quickly to the 1st measured value
The Brief Operating Instructions contain all the essential information from incoming
acceptance to initial commissioning.
2.3.4 Operating Instructions (BA)
Your reference guide
These Operating Instructions contain all the information that is required in various phases of
the life cycle of the device: from product identification, incoming acceptance and storage, to
mounting, connection, operation and commissioning through to troubleshooting,
maintenance and disposal.

Design Liquiphant FTL62 with electronic insert FEL67
8 Endress+Hauser
2.3.5 Safety Instructions (XA)
Depending on the approval, the following Safety Instructions (XA) are supplied with the
device. They are an integral part of the Operating Instructions.
The nameplate indicates the Safety Instructions (XA) that are relevant to the device.
3 Design
3.1 Permitted device types
The details pertaining to functional safety in this manual relate to the device versions listed
below and are valid as of the specified firmware and hardware versions.
Unless otherwise specified, all subsequent versions can also be used for safety functions.
A modification process according to IEC 61508 is applied for device changes.
Valid device versions for safety-related use:
3.1.1 Order codes
FTL62-
Feature: 010 "Approval"
Version: all
Feature: 020 "Output"
Version: A7; FEL67, 2-wire PFM + test button
Feature: 030 "Display, operation"
Version: all
Feature: 040 "Housing; material"
Version: all
Feature: 050 "Electrical connection"
Version: all
Feature: 060 "Application"
Version: all
Feature: 080 "Surface finish"
Version: all
Feature: 085 "Probe design"
Version: all
Feature: 090 "Sensor length, material"
Version: all
Feature: 105 "Process connection, sealing surface"
Version: all

Liquiphant FTL62 with electronic insert FEL67 Design
Endress+Hauser 9
Feature: 110 "Process connection"
Version: all
Feature: 590 "Additional approval"
Version: LA
Advanced diagnostic measures are only implemented in this version. This version must be
selected for use as a safety function as per IEC 61508.
3.2 Identification marking
SIL-certified devices are marked with the SIL logo on the nameplate.
3.3 Safety function
The device's safety functions are:
• Maximum level monitoring (overfill prevention, MAX detection)
• Minimum level monitoring (dry running protection, MIN detection)
3.4 Basic conditions for use in safety-related applications
The measuring system must be used correctly for the specific application, taking into account
the medium properties and ambient conditions. Carefully follow instructions pertaining to
critical process situations and installation conditions from the Operating Instructions. The
application-specific limits must be observed. The specifications in the Operating Instructions
and the Technical Information must not be exceeded.
3.4.1 Density of the medium
Operation is only permitted with liquids:
• Depending on the configured density setting, the density of the liquid must be as follows:
• if the switch position is > 0.7 the density must be over 0.7 g/cm³ (common water- and
oil-based liquids).
• if the switch position is > 0.5 the density must be over 0.5 g/cm³ (e.g., liquefied gas,
isopentane, petroleum ether).
• The gas phase above the liquid may not exceed a maximum permitted density value. The
maximum possible gas density depends on the temperature and the device.

Design Liquiphant FTL62 with electronic insert FEL67
10 Endress+Hauser
1.000
0.100
0.010
ρ[g/cm³]
0.001
+300
+527
-60
-76
+60
+140
+120
+248
+180
+356
+240
+464
±0
+32
[°C]
T
[°F]
1
2
A0026840
 1 Density of gas phase above the medium
1 Switch position for density 0.7 g/cm³
2 Switch position for density 0.5 g/cm³
LCAUTION
Gas density is exceeded!
"Free" status is not detected and "Covered" is always signaled.
‣The gas density may not be exceeded.
• There is no minimum density for the gas phase.
Operation in a vacuum is permitted!
• There is no maximum density for the liquid.
• For more information on the levels of diagnostic coverage, refer to IEC 61508-2:2010
Appendix A.2, Comment 2 and Table A.1.
3.4.2 Buildup (only for MIN detection)
The device may only be used in media that do not tend to cause buildup. Buildup is considered
to be any deposits with a thickness of over 0.5 mm (0.02 in). Buildup can have the effect that