Endress+Hauser nivotester FTL 325 P Instructions for use

Products Solutions Services
Functional Safety Manual
Nivotester FTL325P
Vibronic
Liquiphant + FEL67
FY01006F/00/EN/02.20
71491952
2020-08-31

Nivotester FTL325P
2 Endress+Hauser
Order code:
Ext. ord. cd.:
Ser. no.:
www.endress.com/deviceviewer Endress+Hauser
Operations App
XXXXXXXXXXXX
XXXXX-XXXXXX
XXX.XXXX.XX
Serial number
1.
3.
2.
A0023555

Nivotester FTL325P Table of contents
Endress+Hauser 3
Table of contents
1 Declaration of Conformity ...... 4
1.1 Version II wiring ..................... 4
1.2 Version III wiring .....................6
1.3 Version IV wiring .................... 8
1.4 Version V wiring .................... 10
1.5 Version VI wiring ................... 12
2 About this document .......... 14
2.1 Document function .................. 14
2.2 Symbols used ....................... 14
2.3 Supplementary device documentation .. 15
3 Design .......................... 16
3.1 Permitted devices types .............. 16
3.2 Identification marking ............... 16
3.3 Safety function ..................... 16
3.4 Basic conditions for use in safety-
related applications ................. 18
3.5 Useful lifetime of electric components .. 18
4 Commissioning (installation
and configuration) ............ 18
4.1 Requirements for personnel .......... 18
4.2 Installation ........................ 18
4.3 Commissioning ..................... 19
4.4 Operation ..........................19
4.5 Device configuration for safety-related
applications ........................ 19
5 Operation ...................... 22
5.1 Device behavior when switched on ..... 22
5.2 Device behavior in safety function
demand mode ...................... 22
5.3 Device behavior in the event of an
alarm ............................. 23
6 Proof testing ................... 23
6.1 Basic test sequence .................. 24
6.2 Test sequence A, MIN detection ....... 25
6.3 Test sequence A, MAX detection ...... 26
6.4 Test sequence B, simulation using test
button on Liquiphant ................ 27
6.5 Test sequence B, simulation using test
button on Nivotester ................ 28
6.6 Verification criterion ................ 29
7 Repair and error handling .... 29
7.1 Maintenance ....................... 29
7.2 Repair ............................. 29
7.3 Modification ....................... 30
7.4 Decommissioning ................... 30
7.5 Disposal ........................... 30
7.6 Battery disposal .................... 31
8 Appendix ...................... 31
8.1 Structure of the measuring system ..... 31
8.2 Commissioning or proof test report .... 32
8.3 Version history ..................... 39

Declaration of Conformity Nivotester FTL325P
4 Endress+Hauser
1 Declaration of Conformity
1.1 Version II wiring
SIL_00352_01.20
Declaration of Conformity
Functional Safety according to IEC 61508
Based on NE 130 Form B.1
Endress+Hauser SE+Co. KG, Hauptstraße 1, 79689 Maulburg
being the manufacturer, declares that the product
Liquiphant FTL51B, FTL62, FTL64 with electronic insert FEL67
and Nivotester FTL325P
is suitable for the use in safety-instrumented syst ems according to IEC 61508. The instructions of the
corresponding functional safety manual must be followed.
This declaration of conformity is valid for variant II: One Liquiphant ES with a one channel Nivotester
FTL325P.
A: continuative safety instrumented function, e.g. actuator or S-PLC
This declaration of conformity is exclusively valid for the customer listed in the cover letter of the
respective Endress+Hauser sales center and for the listed products and accessories in delivery status.
Maulburg, 28-July-2020
Endress+Hauser SE+Co. KG
i. V.
Manfred Hammer
Dept. Man. Technology
Quality Management / FSM
Research & Development
A0039479

Nivotester FTL325P Declaration of Conformity
Endress+Hauser 5
1.1.1 Safety-related characteristic values, version II
SIL_00352_01.20
General
Device designation and permissible types Liquiphant with electronic insert FEL67 and Nivotester, variant II
FTL51B/62/64–**A7*************+LA and FTL325P–G/H/N/P/T/W/2/8 ***
Safety-related output signal Relay
Fault signal —
Process variable/function Level switch for liquids
Safety function(s) Overfill protection or operating maximum/minimum detection
Device type acc. to IEC 61508-2 Type A Type B
Operating mode Low Demand Mode High Demand Mode 1) Continuous Mode
Valid hardware version Liquiphant 01.00.ww (ww: any double number)
Nivotester 01.00.ww or 02.00.ww (ww: any double number)
Valid soware version Liquiphant 01.01.zz (zz: any double number)
Safety manual FTL51B: FY01001F, FTL62: FY01018F, FTL64: FY01023F and FY01006F
Type of evalulation
(check only one box)
Complete HW/SW evaluation parallel to development incl.
FMEDA and change request acc. to IEC 61508-2, 3
Evaluation of “proven in use” performance for HW/SW incl. FMEDA
and change request acc. to IEC 61508-2, 3
Evaluation of HW/SW field data to verify „prior use” acc. to
IEC 61511
Evaluation by FMEDA acc. to IEC 61508-2 for devices w/o soware
Evaluation through – report/certificate no. TÜV Rheinland / 968/FSP 1388.02/20 and 968/FSP 1881.01/20
Test documents Development documents Test reports Data sheets
SIL - Integrity
Systematic safety integrity SIL 2 capable SIL 3 capable
Hardware safety integrity Single channel use (HFT = 0)
SIL 2 capable SIL 3 capable
Multi channel use (HFT ³ 1)
SIL 2 capable SIL 3 capable
FMEDA
Safety function MIN MAX —
λDU 2),3) 71 FIT 55 FIT —
λDD 2),3) 141 FIT 107 FIT —
λSU 2),3) 677 FIT 694 FIT —
λSD 2),3) 5 FIT 41 FIT —
SFF 92% 94% —
PFDavg (T1 = 1 year) 3) (single channel architecture) 3.11 × 10-4 2.40× 10-4 —
PFH 3) 7.11 × 10-8 1/h 5.48 × 10-8 1/h —
PTC 4) Test sequence A 97% 98% —
Test sequence B 61% 78% —
λtotal 2),3) 895 FIT 896 FIT —
Diagnostic test interval 5) ≤ 60 s, except RAM check ≤ 10 min —
Fault reaction time 6) ≤ 3 s —
Comments
Nivotester works without soware.
Declaration
Our internal company quality management system ensures information on safety-related systematic faults which become evident
in the future
1) Maximum admissible 1 demand per week.
2) FIT = Failure In Time, number of failures per 109 h
3) Valid for average ambient temperature up to +40 °C (+104 °F)
For continuous operation at ambient temperature close to +60 °C (+140 °F), a factor of 1.5 should be applied
4) PTC = Proof Test Coverage
5) All diagnostic functions are performed at least once within the diagnostic test interval
6) Maximum time between error recognition and error response
A0039480

Declaration of Conformity Nivotester FTL325P
6 Endress+Hauser
1.2 Version III wiring
SIL_00353_01.20
Declaration of Conformity
Functional Safety according to IEC 61508
Based on NE 130 Form B.1
Endress+Hauser SE+Co. KG, Hauptstraße 1, 79689 Maulburg
being the manufacturer, declares that the product
Liquiphant FTL51B, FTL62, FTL64 with electronic insert FEL67
and Nivotester FTL325P
is suitable for the use in safety-instrumented systems according to IEC 61508. The instructions of the
corresponding functional safety manual must be followed.
This declaration of conformity is valid for variant III: One Liquiphant ES with a three channel Nivotester
FTL325P.
A: continuative safety instrumented function, e.g. B: actuator or C: S-PLC
This declaration of conformity is exclusively valid for the customer listed in the cover letter of the
respective Endress+Hauser sales center and for the listed products and accessories in delivery status.
Maulburg, 28-July-2020
Endress+Hauser SE+Co. KG
i. V.
Manfred Hammer
Dept. Man. Technology
Quality Management / FSM
Research & Development
A0039481

Nivotester FTL325P Declaration of Conformity
Endress+Hauser 7
1.2.1 Safety-related characteristic values, version III
SIL_00353_01.20
General
Device designation and permissible types Liquiphant and Nivotester, variant III
FTL51B/62/64–**A7*************+LA and FTL325P–G/H/N/P/T/W/2/8 3*3
Safety-related output signal Relay
Fault signal —
Process variable/function Level switch for liquids
Safety function(s) Overfill protection or operating maximum/minimum detection
Device type acc. to IEC 61508-2 Type A Type B
Operating mode Low Demand Mode High Demand Mode 1) Continuous Mode
Valid hardware version Liquiphant 01.00.ww (ww: any double number)
Nivotester 01.00.ww or 02.00.ww (ww: any double number)
Valid soware version Liquiphant 01.01.zz (zz: any double number)
Safety manual FTL51B: FY01001F, FTL62: FY01018F, FTL64: FY01023F and FY01006F
Type of evalulation
(check only one box)
Complete HW/SW evaluation parallel to development incl.
FMEDA and change request acc. to IEC 61508-2, 3
Evaluation of “proven in use” performance for HW/SW incl. FMEDA
and change request acc. to IEC 61508-2, 3
Evaluation of HW/SW field data to verify „prior use” acc. to
IEC 61511
Evaluation by FMEDA acc. to IEC 61508-2 for devices w/o soware
Evaluation through – report/certificate no. TÜV Rheinland / 968/FSP 1388.02/20 and 968/FSP 1881.01/20
Test documents Development documents Test reports Data sheets
SIL - Integrity
Systematic safety integrity SIL 2 capable SIL 3 capable
Hardware safety integrity Single channel use (HFT = 0)
SIL 2 capable SIL 3 capable
Multi channel use (HFT ³ 1)
SIL 2 capable SIL 3 capable
FMEDA
Safety function MIN MAX —
λDU 2),3) 40 FIT 24 FIT —
λDD 2),3) 140 FIT 106 FIT —
λSU 2),3) 881 FIT 897 FIT —
λSD 2),3) 15 FIT 52 FIT —
SFF 96% 98% —
PFDavg (T1 = 1 year) 3) (single channel architecture) 1.73 × 10-4 1.06 × 10-4 —
PFH 3) 3.95 × 10-8 1/h 2.41 × 10-8 1/h —
PTC 4) Test sequence A 97% 98% —
Test sequence B 73% 85% —
λtotal 2),3) 1076 FIT 1079 FIT —
Diagnostic test interval 5) ≤ 60 s, except RAM check ≤ 10 min —
Fault reaction time 6) ≤ 3 s —
Comments
Nivotester works without soware.
Declaration
Our internal company quality management system ensures information on safety-related systematic faults which become evident
in the future
1) Maximum admissible 1 demand per week.
2) FIT = Failure In Time, number of failures per 109 h
3) Valid for average ambient temperature up to +40 °C (+104 °F)
For continuous operation at ambient temperature close to +60 °C (+140 °F), a factor of 1.5 should be applied
4) PTC = Proof Test Coverage
5) All diagnostic functions are performed at least once within the diagnostic test interval
6) Maximum time between error recognition and error response
A0039482

Declaration of Conformity Nivotester FTL325P
8 Endress+Hauser
1.3 Version IV wiring
SIL_00354_01.20
Declaration of Conformity
Functional Safety according to IEC 61508
Based on NE 130 Form B.1
Endress+Hauser SE+Co. KG, Hauptstraße 1, 79689 Maulburg
being the manufacturer, declares that the product
Liquiphant FTL51B, FTL62, FTL64 with electronic insert FEL67
and Nivotester FTL325P
is suitable for the use in safety-instrumented systems according to IEC 61508. The instructions of the
corresponding functional safety manual must be followed.
This declaration of conformity is valid for variant IV: Two Liquiphants ES with a three channel Nivotester
FTL325P (HFT = 1).
A: continuative safety instrumented function, e.g. B: actuator or C: S-PLC
This declaration of conformity is exclusively valid for the customer listed in the cover letter of the
respective Endress+Hauser sales center and for the listed products and accessories in delivery status.
Maulburg, 28-July-2020
Endress+Hauser SE+Co. KG
i. V.
Manfred Hammer
Dept. Man. Technology
Quality Management / FSM
Research & Development
A0039483

Nivotester FTL325P Declaration of Conformity
Endress+Hauser 9
1.3.1 Safety-related characteristic values, version IV
SIL_00354_01.20
General
Device designation and permissible types Liquiphant and Nivotester, variant IV
FTL51B/62/64–**A7*************+LA and FTL325P–G/H/N/P/T/W/2/8 3*3
Safety-related output signal Relay
Fault signal —
Process variable/function Level switch for liquids
Safety function(s) Overfill protection or operating maximum/minimum detection
Device type acc. to IEC 61508-2 Type A Type B
Operating mode Low Demand Mode High Demand Mode 1) Continuous Mode
Valid hardware version Liquiphant 01.00.ww (ww: any double number)
Nivotester 01.00.ww or 02.00.ww (ww: any double number)
Valid soware version Liquiphant 01.01.zz (zz: any double number)
Safety manual FTL51B: FY01001F, FTL62: FY01018F, FTL64: FY01023F and FY01006F
Type of evalulation
(check only one box)
Complete HW/SW evaluation parallel to development incl.
FMEDA and change request acc. to IEC 61508-2, 3
Evaluation of “proven in use” performance for HW/SW incl. FMEDA
and change request acc. to IEC 61508-2, 3
Evaluation of HW/SW field data to verify „prior use” acc. to
IEC 61511
Evaluation by FMEDA acc. to IEC 61508-2 for devices w/o soware
Evaluation through – report/certificate no. TÜV Rheinland / 968/FSP 1388.02/20 and 968/FSP 1881.01/20
Test documents Development documents Test reports Data sheets
SIL - Integrity
Systematic safety integrity SIL 2 capable SIL 3 capable
Hardware safety integrity Single channel use (HFT = 0)
SIL 2 capable SIL 3 capable
Multi channel use (HFT ³ 1)
SIL 2 capable SIL 3 capable
FMEDA
Safety function MIN MAX —
λDU 2),3) 12 FIT 11 FIT —
λDD 2),3) 8 FIT 6 FIT —
λSU 2),3) 1369 FIT 1371 FIT —
λSD 2),3) 294 FIT 300 FIT —
SFF 99% 99% —
PFDavg (T1 = 1 year) 3) (single channel architecture) 5.38 × 10-5 4.69 × 10-5 —
PFH 3) 1.23 × 10-8 1/h 1.07 × 10-8 1/h —
PTC 4) Test sequence A 97% 98% —
Test sequence B 61% 78% —
λtotal 2),3) 1683 FIT 1688 FIT —
Diagnostic test interval 5) ≤ 60 s, except RAM check ≤ 10 min —
Fault reaction time 6) ≤ 3 s —
Comments
Nivotester works without soware.
Declaration
Our internal company quality management system ensures information on safety-related systematic faults which become evident
in the future
1) Maximum admissible 1 demand per week.
2) FIT = Failure In Time, number of failures per 109 h
3) Valid for average ambient temperature up to +40 °C (+104 °F)
For continuous operation at ambient temperature close to +60 °C (+140 °F), a factor of 1.5 should be applied
4) PTC = Proof Test Coverage
5) All diagnostic functions are performed at least once within the diagnostic test interval
6) Maximum time between error recognition and error response
A0039484

Declaration of Conformity Nivotester FTL325P
10 Endress+Hauser
1.4 Version V wiring
SIL_00355_01.20
Declaration of Conformity
Functional Safety according to IEC 61508
Based on NE 130 Form B.1
Endress+Hauser SE+Co. KG, Hauptstraße 1, 79689 Maulburg
being the manufacturer, declares that the product
Liquiphant FTL51B, FTL62, FTL64 with electronic insert FEL67
and Nivotester FTL325P
is suitable for the use in safety-instrumented systems according to IEC 61508. The instructions of the
corresponding functional safety manual must be followed.
This declaration of conformity is valid for variant V: Three Liquiphants ES with a three channel Nivotester
FTL325P (HFT = 1).
A: continuative safety instrumented function
This declaration of conformity is exclusively valid for the customer listed in the cover letter of the
respective Endress+Hauser sales center and for the listed products and accessories in delivery status.
Maulburg, 28-July-2020
Endress+Hauser SE+Co. KG
i. V.
Manfred Hammer
Dept. Man. Technology
Quality Management / FSM
Research & Development
A0039485