Endress+Hauser Liquiphant M/S Instructions for use

Point level measuring system
Products Solutions Services
Special Documentation
Liquiphant M/S with electronic
insert FEL58 + Nivotester
FTL325N
Functional Safety Manual
SD01522F/00/EN/02.16
71329744
CH1
CH1
[Ex ia]
CH1 CH2
CH2
CH3
CH3
[Ex ia]

Liquiphant M/S with electronic insert FEL58 + Nivotester FTL325N
2 Endress+Hauser
Table of contents
Declaration of conformity ..................... 3
General .................................... 4
Other safety-related characteristic values ............. 5
Useful lifetime of electrical components .............. 13
Certificate ................................ 14
Document information ...................... 15
Document function ........................... 15
Symbols used ............................... 15
Supplementary device documentation ............... 16
Permitted devices types ..................... 17
SIL label on the nameplate ...................... 18
Safety function ............................ 19
Definition of the safety function ................... 19
Restrictions for use in safety-related applications ....... 19
Use in safety instrumented systems ............ 22
Device behavior during operation .................. 22
Device configuration for safety-related applications ...... 22
Proof-testing ............................... 26
Life cycle ................................. 38
Requirements for personnel ..................... 38
Installation ................................. 38
Operation ................................. 38
Maintenance ............................... 38
Repair .................................... 38
Modification ................................ 39
Decommissioning ............................ 39
Appendix ................................ 40
Structure of the measuring system ................. 40
Commissioning or proof test report ................. 42
Further information ........................... 44
Version history .............................. 44

Liquiphant M/S with electronic insert FEL58 + Nivotester FTL325N
Endress+Hauser 3
Declaration of conformity
A0028074

Liquiphant M/S with electronic insert FEL58 + Nivotester FTL325N
4 Endress+Hauser
A0028075
General The components can be operated as different versions:
• Version I (→  6)
One Liquiphant for the direct activation of a NAMUR switching unit (e.g. transmitter, safety-
related PLC) via the NAMUR interface according to EN 50227 (DIN 19234; NAMUR) or
IEC 60947-5-6.
• Version II (→  7)
One Liquiphant with a 1-channel Nivotester; for the activation of an actuator or a safety-related
PLC via switching contacts, for instance
• Version III (→  8)
One Liquiphant with a 3-channel Nivotester; switching contacts are switched in series

Liquiphant M/S with electronic insert FEL58 + Nivotester FTL325N
Endress+Hauser 5
• Version IV (→  9)
Two Liquiphant devices with a 3-channel Nivotester; the switching contacts are switched in series
• Version V (→  11)
Three Liquiphant devices with a 3-channel Nivotester; all channels are used, evaluation is
performed in a safety-related PLC, for example
• Version VI (→  13)
Three Liquiphant devices with a 3-channel Nivotester; only channel 1 has a SIL-specific
monitoring function. Channels 2 and 3 are used for level control of the same level (e.g. Δs). This
level control may not then be considered as a safety measure as part of functional safety according
to EN 61508.
NOTICE
Measuring another, independent level (e.g. in a second tank)
‣The remaining channels may not be used for other levels.
Other safety-related
characteristic values
Please note the following for the tables below:
• A common cause factor β = 10 % has been assumed in the calculations indicated below.
• For multi-channel systems, the PFDavg values already contain common cause failures for the
specific wiring scheme.
• The PFDavg values only apply to the particular wiring scheme for which the values have been
calculated. They are not a suitable basis for making calculations for other wiring schemes.
The use of NC contacts instead of NO contacts, in particular, is not permitted for operation
according to SIL specifications.
• The wiring scheme indicates the number of devices and the circuitry of the level relay
contacts (open when required (demand mode)).
• If there are several devices in a wiring scheme, all the devices have the same settings shown.
• The tables show safety-related values and wiring options for the measuring system.
• FIT = Failure in Time, 1 FIT = 10-9 l/h.

Liquiphant M/S with electronic insert FEL58 + Nivotester FTL325N
6 Endress+Hauser
Specific functional safety parameters:
Version I: Liquiphant M/S
Characteristics as per IEC
61508
Value
Safety function MIN MAX
Example
Wiring scheme
A
A Other safety equipment e.g. actuator/safety-related PLC
SIL 2
HFT 0
Device type B
Mode of operation Low demand mode
SFF 69 % 75 %
MTTR 8 h
λsd 1) 66 FIT 78 FIT
λsu 85 FIT 87 FIT
λdd 13 FIT 12 FIT
λdu 73 FIT 59 FIT
PFDavg for T1 = 1 year 3.18 x 10-4 2.59 x 10-4
MTBF 482 years
Diagnostic test interval 2) ≤60 s
Fault reaction time 3) ≤3 s
System reaction time 4) 1 s (covered > free) 0.5 s (free > covered)
PTC test sequence A 5) 93 %
PTC test sequence B 6) 2 %
PTC test sequence C 7) - 93 %
1) This value takes into account failure types relevant to the function of the electronic components according
to Siemens SN29500.
2) During this time, all diagnostic functions are executed at least once.
3) Time between error detection and error response.
4) Step response time as per DIN EN 61298-2.
5) Proof test coverage when the level is approached, or when the sensor is removed and the tines are
immersed in a medium of similar density and viscosity.
6) Proof test coverage when simulation is performed on the Nivotester or the electronic insert FEL58 by
activating the test button.
7) Proof test coverage when checking the switch point under reference operating conditions.

Liquiphant M/S with electronic insert FEL58 + Nivotester FTL325N
Endress+Hauser 7
Version II: Liquiphant M/S; 1-channel Nivotester FTL325N
Characteristics as per IEC
61508
Value
Safety function MIN MAX
Example
Wiring scheme
ACH1
A Other safety equipment e.g. actuator/safety-related PLC
SIL 2
HFT 0
Device type B
Mode of operation Low demand mode
SFF 85 % 87 %
MTTR 8 h
λsd 1) 66 FIT 78 FIT
λsu 554 FIT
λdd 13 FIT
λdu 113 FIT 100 FIT
PFDavg for T1 = 1 year 4.96 x 10-4 4.37 x 10-4
MTBF 153 years
Diagnostic test interval 2) ≤60 s
Fault reaction time 3) ≤3 s
System reaction time 4) 1 s (covered > free) 0.5 s (free > covered)
PTC test sequence A 5) 92 %
PTC test sequence B 6) 34 % 38 %
PTC test sequence C 7) - 92 %
1) This value takes into account failure types relevant to the function of the electronic components according
to Siemens SN29500.
2) During this time, all diagnostic functions are executed at least once.
3) Time between error detection and error response.
4) Step response time as per DIN EN 61298-2.
5) Proof test coverage when the level is approached, or when the sensor is removed and the tines are
immersed in a medium of similar density and viscosity.
6) Proof test coverage when simulation is performed on the Nivotester or the electronic insert FEL58 by
activating the test button.
7) Proof test coverage when checking the switch point under reference operating conditions.

Liquiphant M/S with electronic insert FEL58 + Nivotester FTL325N
8 Endress+Hauser
Version III: Liquiphant M/S; 3-channel Nivotester FTL325N, CH2 and CH3 in series
Characteristics as per IEC
61508
Value
Safety function MIN MAX
Example
Wiring scheme
A
B C
A
(1oo2)
CH2 CH2
CH3 CH3
CH1 CH1
A Other safety equipment e.g. actuator/safety-related PLC
B Possibility 1
C Possibility 2; 1oo2 assessment
SIL 2
HFT 0
Device type B
Mode of operation Low demand mode
SFF 91 % 93 %
MTTR 8 h
λsd 1) 72 FIT 84 FIT
λsu 809 FIT 812 FIT
λdd 13 FIT
λdu 84 FIT 70 FIT
PFDavg for T1 = 1 year 3.67 x -10-4 3.08 x 10-4
MTBF 117 years
Diagnostic test interval 2) ≤60 s
Fault reaction time 3) ≤3 s
System reaction time 4) 1 s (covered > free) 0.5 s (free > covered)
PTC test sequence A 5) 96 %
PTC test sequence B 6) 51 % 56 %
PTC test sequence C 7) - 96 %
1) This value takes into account failure types relevant to the function of the electronic components according
to Siemens SN29500.
2) During this time, all diagnostic functions are executed at least once.
3) Time between error detection and error response.
4) Step response time as per DIN EN 61298-2.
5) Proof test coverage when the level is approached, or when the sensor is removed and the tines are
immersed in a medium of similar density and viscosity.
6) Proof test coverage when simulation is performed on the Nivotester or the electronic insert FEL58 by
activating the test button.
7) Proof test coverage when checking the switch point under reference operating conditions.

Liquiphant M/S with electronic insert FEL58 + Nivotester FTL325N
Endress+Hauser 9
Version IV: 2 Liquiphant M/S; 3-channel Nivotester FTL325N
Characteristics as per IEC
61508
Value
Safety function MIN MAX
Example
Wiring scheme
A
B C
A
(1oo3)
CH2 CH2
CH3 CH3
CH1 CH1
A Other safety equipment e.g. actuator/safety-related PLC
B Possibility 1
C Possibility 2; 1oo3 assessment
SIL 2
HFT 1
Device type B
Mode of operation Low demand mode
SFF 99 %
MTTR 8 h
λsd 1) 163 FIT 187 FIT
λsu 1 252 FIT 1 231 FIT
λdd 1 FIT
λdu 17 FIT 15 FIT
PFDavg for T1 = 1 year 7.27 x -10-5 6.68 x 10-5
MTBF 80 years
Diagnostic test interval 2) ≤60 s
Fault reaction time 3) ≤3 s
System reaction time 4) 1 s (covered > free) 0.5 s (free > covered)
PTC test sequence A 5) 92 %
PTC test sequence B 6) 34 % 38 %
PTC test sequence C 7) - 92 %
1) This value takes into account failure types relevant to the function of the electronic components according
to Siemens SN29500.
2) During this time, all diagnostic functions are executed at least once.
3) Time between error detection and error response.
4) Step response time as per DIN EN 61298-2.
5) Proof test coverage when the level is approached, or when the sensor is removed and the tines are
immersed in a medium of similar density and viscosity.
6) Proof test coverage when simulation is performed on the Nivotester or the electronic insert FEL58 by
activating the test button.
7) Proof test coverage when checking the switch point under reference operating conditions.

Liquiphant M/S with electronic insert FEL58 + Nivotester FTL325N
10 Endress+Hauser
The failure rates are based on an analysis in accordance with DIN EN 61508-6: 2011-02, Table
D.4, "Using the β-factor to calculate the probability of failure in an E/E/PE safety-related system
due to common cause failures". The calculation gives a β-factor of 10 %. This factor is based on
the failure rates indicated above. If additional measures are implemented during installation to
prevent common cause errors as defined in Table D.1, the β-factor can possibly be reduced to
5 %. Possible measures are:
• Sensors installed in a physically separate location
• Cable routed separately between Liquiphant and Nivotester
• Separate protection from environmental influences: impact, sunshine, EMC protection and/or
overvoltage
• Use of different sensor materials, and combination of high-temperature and normal version