Endress+Hauser nivotester FTL 325 P Instructions for use

Products Solutions Services
Functional Safety Manual
Nivotester FTL325P
Vibronic
Liquiphant + FEL67
FY01006F/00/EN/02.20
71491952
2020-08-31

Nivotester FTL325P
2 Endress+Hauser
Order code:
Ext. ord. cd.:
Ser. no.:
www.endress.com/deviceviewer Endress+Hauser
Operations App
XXXXXXXXXXXX
XXXXX-XXXXXX
XXX.XXXX.XX
Serial number
1.
3.
2.
A0023555

Nivotester FTL325P Table of contents
Endress+Hauser 3
Table of contents
1 Declaration of Conformity ...... 4
1.1 Version II wiring ..................... 4
1.2 Version III wiring .....................6
1.3 Version IV wiring .................... 8
1.4 Version V wiring .................... 10
1.5 Version VI wiring ................... 12
2 About this document .......... 14
2.1 Document function .................. 14
2.2 Symbols used ....................... 14
2.3 Supplementary device documentation .. 15
3 Design .......................... 16
3.1 Permitted devices types .............. 16
3.2 Identification marking ............... 16
3.3 Safety function ..................... 16
3.4 Basic conditions for use in safety-
related applications ................. 18
3.5 Useful lifetime of electric components .. 18
4 Commissioning (installation
and configuration) ............ 18
4.1 Requirements for personnel .......... 18
4.2 Installation ........................ 18
4.3 Commissioning ..................... 19
4.4 Operation ..........................19
4.5 Device configuration for safety-related
applications ........................ 19
5 Operation ...................... 22
5.1 Device behavior when switched on ..... 22
5.2 Device behavior in safety function
demand mode ...................... 22
5.3 Device behavior in the event of an
alarm ............................. 23
6 Proof testing ................... 23
6.1 Basic test sequence .................. 24
6.2 Test sequence A, MIN detection ....... 25
6.3 Test sequence A, MAX detection ...... 26
6.4 Test sequence B, simulation using test
button on Liquiphant ................ 27
6.5 Test sequence B, simulation using test
button on Nivotester ................ 28
6.6 Verification criterion ................ 29
7 Repair and error handling .... 29
7.1 Maintenance ....................... 29
7.2 Repair ............................. 29
7.3 Modification ....................... 30
7.4 Decommissioning ................... 30
7.5 Disposal ........................... 30
7.6 Battery disposal .................... 31
8 Appendix ...................... 31
8.1 Structure of the measuring system ..... 31
8.2 Commissioning or proof test report .... 32
8.3 Version history ..................... 39

Declaration of Conformity Nivotester FTL325P
4 Endress+Hauser
1 Declaration of Conformity
1.1 Version II wiring
SIL_00352_01.20
Declaration of Conformity
Functional Safety according to IEC 61508
Based on NE 130 Form B.1
Endress+Hauser SE+Co. KG, Hauptstraße 1, 79689 Maulburg
being the manufacturer, declares that the product
Liquiphant FTL51B, FTL62, FTL64 with electronic insert FEL67
and Nivotester FTL325P
is suitable for the use in safety-instrumented syst ems according to IEC 61508. The instructions of the
corresponding functional safety manual must be followed.
This declaration of conformity is valid for variant II: One Liquiphant ES with a one channel Nivotester
FTL325P.
A: continuative safety instrumented function, e.g. actuator or S-PLC
This declaration of conformity is exclusively valid for the customer listed in the cover letter of the
respective Endress+Hauser sales center and for the listed products and accessories in delivery status.
Maulburg, 28-July-2020
Endress+Hauser SE+Co. KG
i. V.
Manfred Hammer
Dept. Man. Technology
Quality Management / FSM
Research & Development
A0039479

Nivotester FTL325P Declaration of Conformity
Endress+Hauser 5
1.1.1 Safety-related characteristic values, version II
SIL_00352_01.20
General
Device designation and permissible types Liquiphant with electronic insert FEL67 and Nivotester, variant II
FTL51B/62/64–**A7*************+LA and FTL325P–G/H/N/P/T/W/2/8 ***
Safety-related output signal Relay
Fault signal —
Process variable/function Level switch for liquids
Safety function(s) Overfill protection or operating maximum/minimum detection
Device type acc. to IEC 61508-2 Type A Type B
Operating mode Low Demand Mode High Demand Mode 1) Continuous Mode
Valid hardware version Liquiphant 01.00.ww (ww: any double number)
Nivotester 01.00.ww or 02.00.ww (ww: any double number)
Valid soware version Liquiphant 01.01.zz (zz: any double number)
Safety manual FTL51B: FY01001F, FTL62: FY01018F, FTL64: FY01023F and FY01006F
Type of evalulation
(check only one box)
Complete HW/SW evaluation parallel to development incl.
FMEDA and change request acc. to IEC 61508-2, 3
Evaluation of “proven in use” performance for HW/SW incl. FMEDA
and change request acc. to IEC 61508-2, 3
Evaluation of HW/SW field data to verify „prior use” acc. to
IEC 61511
Evaluation by FMEDA acc. to IEC 61508-2 for devices w/o soware
Evaluation through – report/certificate no. TÜV Rheinland / 968/FSP 1388.02/20 and 968/FSP 1881.01/20
Test documents Development documents Test reports Data sheets
SIL - Integrity
Systematic safety integrity SIL 2 capable SIL 3 capable
Hardware safety integrity Single channel use (HFT = 0)
SIL 2 capable SIL 3 capable
Multi channel use (HFT ³ 1)
SIL 2 capable SIL 3 capable
FMEDA
Safety function MIN MAX —
λDU 2),3) 71 FIT 55 FIT —
λDD 2),3) 141 FIT 107 FIT —
λSU 2),3) 677 FIT 694 FIT —
λSD 2),3) 5 FIT 41 FIT —
SFF 92% 94% —
PFDavg (T1 = 1 year) 3) (single channel architecture) 3.11 × 10-4 2.40× 10-4 —
PFH 3) 7.11 × 10-8 1/h 5.48 × 10-8 1/h —
PTC 4) Test sequence A 97% 98% —
Test sequence B 61% 78% —
λtotal 2),3) 895 FIT 896 FIT —
Diagnostic test interval 5) ≤ 60 s, except RAM check ≤ 10 min —
Fault reaction time 6) ≤ 3 s —
Comments
Nivotester works without soware.
Declaration
Our internal company quality management system ensures information on safety-related systematic faults which become evident
in the future
1) Maximum admissible 1 demand per week.
2) FIT = Failure In Time, number of failures per 109 h
3) Valid for average ambient temperature up to +40 °C (+104 °F)
For continuous operation at ambient temperature close to +60 °C (+140 °F), a factor of 1.5 should be applied
4) PTC = Proof Test Coverage
5) All diagnostic functions are performed at least once within the diagnostic test interval
6) Maximum time between error recognition and error response
A0039480

Declaration of Conformity Nivotester FTL325P
6 Endress+Hauser
1.2 Version III wiring
SIL_00353_01.20
Declaration of Conformity
Functional Safety according to IEC 61508
Based on NE 130 Form B.1
Endress+Hauser SE+Co. KG, Hauptstraße 1, 79689 Maulburg
being the manufacturer, declares that the product
Liquiphant FTL51B, FTL62, FTL64 with electronic insert FEL67
and Nivotester FTL325P
is suitable for the use in safety-instrumented systems according to IEC 61508. The instructions of the
corresponding functional safety manual must be followed.
This declaration of conformity is valid for variant III: One Liquiphant ES with a three channel Nivotester
FTL325P.
A: continuative safety instrumented function, e.g. B: actuator or C: S-PLC
This declaration of conformity is exclusively valid for the customer listed in the cover letter of the
respective Endress+Hauser sales center and for the listed products and accessories in delivery status.
Maulburg, 28-July-2020
Endress+Hauser SE+Co. KG
i. V.
Manfred Hammer
Dept. Man. Technology
Quality Management / FSM
Research & Development
A0039481

Nivotester FTL325P Declaration of Conformity
Endress+Hauser 7
1.2.1 Safety-related characteristic values, version III
SIL_00353_01.20
General
Device designation and permissible types Liquiphant and Nivotester, variant III
FTL51B/62/64–**A7*************+LA and FTL325P–G/H/N/P/T/W/2/8 3*3
Safety-related output signal Relay
Fault signal —
Process variable/function Level switch for liquids
Safety function(s) Overfill protection or operating maximum/minimum detection
Device type acc. to IEC 61508-2 Type A Type B
Operating mode Low Demand Mode High Demand Mode 1) Continuous Mode
Valid hardware version Liquiphant 01.00.ww (ww: any double number)
Nivotester 01.00.ww or 02.00.ww (ww: any double number)
Valid soware version Liquiphant 01.01.zz (zz: any double number)
Safety manual FTL51B: FY01001F, FTL62: FY01018F, FTL64: FY01023F and FY01006F
Type of evalulation
(check only one box)
Complete HW/SW evaluation parallel to development incl.
FMEDA and change request acc. to IEC 61508-2, 3
Evaluation of “proven in use” performance for HW/SW incl. FMEDA
and change request acc. to IEC 61508-2, 3
Evaluation of HW/SW field data to verify „prior use” acc. to
IEC 61511
Evaluation by FMEDA acc. to IEC 61508-2 for devices w/o soware
Evaluation through – report/certificate no. TÜV Rheinland / 968/FSP 1388.02/20 and 968/FSP 1881.01/20
Test documents Development documents Test reports Data sheets
SIL - Integrity
Systematic safety integrity SIL 2 capable SIL 3 capable
Hardware safety integrity Single channel use (HFT = 0)
SIL 2 capable SIL 3 capable
Multi channel use (HFT ³ 1)
SIL 2 capable SIL 3 capable
FMEDA
Safety function MIN MAX —
λDU 2),3) 40 FIT 24 FIT —
λDD 2),3) 140 FIT 106 FIT —
λSU 2),3) 881 FIT 897 FIT —
λSD 2),3) 15 FIT 52 FIT —
SFF 96% 98% —
PFDavg (T1 = 1 year) 3) (single channel architecture) 1.73 × 10-4 1.06 × 10-4 —
PFH 3) 3.95 × 10-8 1/h 2.41 × 10-8 1/h —
PTC 4) Test sequence A 97% 98% —
Test sequence B 73% 85% —
λtotal 2),3) 1076 FIT 1079 FIT —
Diagnostic test interval 5) ≤ 60 s, except RAM check ≤ 10 min —
Fault reaction time 6) ≤ 3 s —
Comments
Nivotester works without soware.
Declaration
Our internal company quality management system ensures information on safety-related systematic faults which become evident
in the future
1) Maximum admissible 1 demand per week.
2) FIT = Failure In Time, number of failures per 109 h
3) Valid for average ambient temperature up to +40 °C (+104 °F)
For continuous operation at ambient temperature close to +60 °C (+140 °F), a factor of 1.5 should be applied
4) PTC = Proof Test Coverage
5) All diagnostic functions are performed at least once within the diagnostic test interval
6) Maximum time between error recognition and error response
A0039482

Declaration of Conformity Nivotester FTL325P
8 Endress+Hauser
1.3 Version IV wiring
SIL_00354_01.20
Declaration of Conformity
Functional Safety according to IEC 61508
Based on NE 130 Form B.1
Endress+Hauser SE+Co. KG, Hauptstraße 1, 79689 Maulburg
being the manufacturer, declares that the product
Liquiphant FTL51B, FTL62, FTL64 with electronic insert FEL67
and Nivotester FTL325P
is suitable for the use in safety-instrumented systems according to IEC 61508. The instructions of the
corresponding functional safety manual must be followed.
This declaration of conformity is valid for variant IV: Two Liquiphants ES with a three channel Nivotester
FTL325P (HFT = 1).
A: continuative safety instrumented function, e.g. B: actuator or C: S-PLC
This declaration of conformity is exclusively valid for the customer listed in the cover letter of the
respective Endress+Hauser sales center and for the listed products and accessories in delivery status.
Maulburg, 28-July-2020
Endress+Hauser SE+Co. KG
i. V.
Manfred Hammer
Dept. Man. Technology
Quality Management / FSM
Research & Development
A0039483

Nivotester FTL325P Declaration of Conformity
Endress+Hauser 9
1.3.1 Safety-related characteristic values, version IV
SIL_00354_01.20
General
Device designation and permissible types Liquiphant and Nivotester, variant IV
FTL51B/62/64–**A7*************+LA and FTL325P–G/H/N/P/T/W/2/8 3*3
Safety-related output signal Relay
Fault signal —
Process variable/function Level switch for liquids
Safety function(s) Overfill protection or operating maximum/minimum detection
Device type acc. to IEC 61508-2 Type A Type B
Operating mode Low Demand Mode High Demand Mode 1) Continuous Mode
Valid hardware version Liquiphant 01.00.ww (ww: any double number)
Nivotester 01.00.ww or 02.00.ww (ww: any double number)
Valid soware version Liquiphant 01.01.zz (zz: any double number)
Safety manual FTL51B: FY01001F, FTL62: FY01018F, FTL64: FY01023F and FY01006F
Type of evalulation
(check only one box)
Complete HW/SW evaluation parallel to development incl.
FMEDA and change request acc. to IEC 61508-2, 3
Evaluation of “proven in use” performance for HW/SW incl. FMEDA
and change request acc. to IEC 61508-2, 3
Evaluation of HW/SW field data to verify „prior use” acc. to
IEC 61511
Evaluation by FMEDA acc. to IEC 61508-2 for devices w/o soware
Evaluation through – report/certificate no. TÜV Rheinland / 968/FSP 1388.02/20 and 968/FSP 1881.01/20
Test documents Development documents Test reports Data sheets
SIL - Integrity
Systematic safety integrity SIL 2 capable SIL 3 capable
Hardware safety integrity Single channel use (HFT = 0)
SIL 2 capable SIL 3 capable
Multi channel use (HFT ³ 1)
SIL 2 capable SIL 3 capable
FMEDA
Safety function MIN MAX —
λDU 2),3) 12 FIT 11 FIT —
λDD 2),3) 8 FIT 6 FIT —
λSU 2),3) 1369 FIT 1371 FIT —
λSD 2),3) 294 FIT 300 FIT —
SFF 99% 99% —
PFDavg (T1 = 1 year) 3) (single channel architecture) 5.38 × 10-5 4.69 × 10-5 —
PFH 3) 1.23 × 10-8 1/h 1.07 × 10-8 1/h —
PTC 4) Test sequence A 97% 98% —
Test sequence B 61% 78% —
λtotal 2),3) 1683 FIT 1688 FIT —
Diagnostic test interval 5) ≤ 60 s, except RAM check ≤ 10 min —
Fault reaction time 6) ≤ 3 s —
Comments
Nivotester works without soware.
Declaration
Our internal company quality management system ensures information on safety-related systematic faults which become evident
in the future
1) Maximum admissible 1 demand per week.
2) FIT = Failure In Time, number of failures per 109 h
3) Valid for average ambient temperature up to +40 °C (+104 °F)
For continuous operation at ambient temperature close to +60 °C (+140 °F), a factor of 1.5 should be applied
4) PTC = Proof Test Coverage
5) All diagnostic functions are performed at least once within the diagnostic test interval
6) Maximum time between error recognition and error response
A0039484

Declaration of Conformity Nivotester FTL325P
10 Endress+Hauser
1.4 Version V wiring
SIL_00355_01.20
Declaration of Conformity
Functional Safety according to IEC 61508
Based on NE 130 Form B.1
Endress+Hauser SE+Co. KG, Hauptstraße 1, 79689 Maulburg
being the manufacturer, declares that the product
Liquiphant FTL51B, FTL62, FTL64 with electronic insert FEL67
and Nivotester FTL325P
is suitable for the use in safety-instrumented systems according to IEC 61508. The instructions of the
corresponding functional safety manual must be followed.
This declaration of conformity is valid for variant V: Three Liquiphants ES with a three channel Nivotester
FTL325P (HFT = 1).
A: continuative safety instrumented function
This declaration of conformity is exclusively valid for the customer listed in the cover letter of the
respective Endress+Hauser sales center and for the listed products and accessories in delivery status.
Maulburg, 28-July-2020
Endress+Hauser SE+Co. KG
i. V.
Manfred Hammer
Dept. Man. Technology
Quality Management / FSM
Research & Development
A0039485

Nivotester FTL325P Declaration of Conformity
Endress+Hauser 11
1.4.1 Safety-related characteristic values, version V
SIL_00355_01.20
General
Device designation and permissible types Liquiphant and Nivotester, variant V
FTL51B/62/64–**A7*************+LA and FTL325P–G/H/N/P/T/W/2/8 3*3
Safety-related output signal Relay
Fault signal —
Process variable/function Level switch for liquids
Safety function(s) Overfill protection or operating maximum/minimum detection
Device type acc. to IEC 61508-2 Type A Type B
Operating mode Low Demand Mode High Demand Mode 1) Continuous Mode
Valid hardware version Liquiphant 01.00.ww (ww: any double number)
Nivotester 01.00.ww or 02.00.ww (ww: any double number)
Valid soware version Liquiphant 01.01.zz (zz: any double number)
Safety manual FTL51B: FY01001F, FTL62: FY01018F, FTL64: FY01023F and FY01006F
Type of evalulation
(check only one box)
Complete HW/SW evaluation parallel to development incl.
FMEDA and change request acc. to IEC 61508-2, 3
Evaluation of “proven in use” performance for HW/SW incl. FMEDA
and change request acc. to IEC 61508-2, 3
Evaluation of HW/SW field data to verify „prior use” acc. to
IEC 61511
Evaluation by FMEDA acc. to IEC 61508-2 for devices w/o soware
Evaluation through – report/certificate no. TÜV Rheinland / 968/FSP 1388.02/20 and 968/FSP 1881.01/20
Test documents Development documents Test reports Data sheets
SIL - Integrity
Systematic safety integrity SIL 2 capable SIL 3 capable
Hardware safety integrity Single channel use (HFT = 0)
SIL 2 capable SIL 3 capable
Multi channel use (HFT ³ 1)
SIL 2 capable SIL 3 capable
FMEDA
Safety function MIN MAX —
λDU 2),3) 14 FIT 13 FIT —
λDD 2),3) 8 FIT 6 FIT —
λSU 2),3) 1583 FIT 1586 FIT —
λSD 2),3) 439 FIT 447 FIT —
SFF 99% 99% —
PFDavg (T1 = 1 year) 3) (single channel architecture) 6.30 × 10-5 5.53 × 10-5 —
PFH 3) 1.44 × 10-8 1/h 1.26 × 10-8 1/h —
PTC 4) Test sequence A 97% 98% —
Test sequence B 61% 78% —
λtotal 2),3) 2045 FIT 2051 FIT —
Diagnostic test interval 5) ≤ 60 s, except RAM check ≤ 10 min —
Fault reaction time 6) ≤ 3 s —
Comments
Nivotester works without soware.
Declaration
Our internal company quality management system ensures information on safety-related systematic faults which become evident
in the future
1) Maximum admissible 1 demand per week.
2) FIT = Failure In Time, number of failures per 109 h
3) Valid for average ambient temperature up to +40 °C (+104 °F)
For continuous operation at ambient temperature close to +60 °C (+140 °F), a factor of 1.5 should be applied
4) PTC = Proof Test Coverage
5) All diagnostic functions are performed at least once within the diagnostic test interval
6) Maximum time between error recognition and error response
A0039486

Declaration of Conformity Nivotester FTL325P
12 Endress+Hauser
1.5 Version VI wiring
SIL_00356_01.20
Declaration of Conformity
Functional Safety according to IEC 61508
Based on NE 130 Form B.1
Endress+Hauser SE+Co. KG, Hauptstraße 1, 79689 Maulburg
being the manufacturer, declares that the product
Liquiphant FTL51B, FTL62, FTL64 with electronic insert FEL67
and Nivotester FTL325P
is suitable for the use in safety-instrumented systems according to IEC 61508. The instructions of the
corresponding functional safety manual must be followed.
This declaration of conformity is valid for variant VI: One Liquiphant ES for safety instrumented function,
two Liquiphants for Δs level control (non SIL) with a three channel Nivotester FTL325P.
A: continuative safety instrumented function, e.g. actuator or S-PLC
This declaration of conformity is exclusively valid for the customer listed in the cover letter of the
respective Endress+Hauser sales center and for the listed products and accessories in delivery status.
Maulburg, 28-July-2020
Endress+Hauser SE+Co. KG
i. V.
Manfred Hammer
Dept. Man. Technology
Quality Management / FSM
Research & Development
A0039487

Nivotester FTL325P Declaration of Conformity
Endress+Hauser 13
1.5.1 Safety-related characteristic values, version VI
SIL_00356_01.20
General
Device designation and permissible types Liquiphant with electronic insert FEL67 and Nivotester, variant VI
FTL51B/62/64–**A7*************+LA and FTL325P–G/H/N/P/T/W/2/8 3*3
Safety-related output signal Relay
Fault signal —
Process variable/function Level switch for liquids
Safety function(s) Overfill protection or operating maximum/minimum detection
Device type acc. to IEC 61508-2 Type A Type B
Operating mode Low Demand Mode High Demand Mode 1) Continuous Mode
Valid hardware version Liquiphant 01.00.ww (ww: any double number)
Nivotester 01.00.ww or 02.00.ww (ww: any double number)
Valid soware version Liquiphant 01.01.zz (zz: any double number)
Safety manual FTL51B: FY01001F, FTL62: FY01018F, FTL64: FY01023F and FY01006F
Type of evalulation
(check only one box)
Complete HW/SW evaluation parallel to development incl.
FMEDA and change request acc. to IEC 61508-2, 3
Evaluation of “proven in use” performance for HW/SW incl. FMEDA
and change request acc. to IEC 61508-2, 3
Evaluation of HW/SW field data to verify „prior use” acc. to
IEC 61511
Evaluation by FMEDA acc. to IEC 61508-2 for devices w/o soware
Evaluation through – report/certificate no. TÜV Rheinland / 968/FSP 1388.02/20 and 968/FSP 1881.01/20
Test documents Development documents Test reports Data sheets
SIL - Integrity
Systematic safety integrity SIL 2 capable SIL 3 capable
Hardware safety integrity Single channel use (HFT = 0)
SIL 2 capable SIL 3 capable
Multi channel use (HFT ³ 1)
SIL 2 capable SIL 3 capable
FMEDA
Safety function MIN MAX —
λDU 2),3) 71 FIT 55 FIT —
λDD 2),3) 141 FIT 107 FIT —
λSU 2),3) 677 FIT 694 FIT —
λSD 2),3) 5 FIT 41 FIT —
SFF 92% 94% —
PFDavg (T1 = 1 year) 3) (single channel architecture) 3.11 × 10-4 2.40× 10-4 —
PFH 3) 7.11 × 10-8 1/h 5.48 × 10-8 1/h —
PTC 4) Test sequence A 97% 98% —
Test sequence B 61% 78% —
λtotal 2),3) 895 FIT 896 FIT —
Diagnostic test interval 5) ≤ 60 s, except RAM check ≤ 10 min —
Fault reaction time 6) ≤ 3 s —
Comments
Nivotester works without soware.
Declaration
Our internal company quality management system ensures information on safety-related systematic faults which become evident
in the future
1) Maximum admissible 1 demand per week.
2) FIT = Failure In Time, number of failures per 109 h
3) Valid for average ambient temperature up to +40 °C (+104 °F)
For continuous operation at ambient temperature close to +60 °C (+140 °F), a factor of 1.5 should be applied
4) PTC = Proof Test Coverage
5) All diagnostic functions are performed at least once within the diagnostic test interval
6) Maximum time between error recognition and error response
A0039488

About this document Nivotester FTL325P
14 Endress+Hauser
2 About this document
2.1 Document function
This supplementary Safety Manual applies in addition to the Operating Instructions, Technical
Information and ATEX Safety Instructions. The supplementary device documentation must be
observed during installation, commissioning and operation. The requirements specific to the
protection function are described in this Safety Manual.
General information on functional safety (SIL) is available at:
•www.endress.com/SIL
• CP01008Z, Brochure "Functional Safety – SIL, Safety Instrumented Systems in the
Process Industry"
2.2 Symbols used
2.2.1 Safety symbols
DANGER
This symbol alerts you to a dangerous situation. Failure to avoid this situation will result in
serious or fatal injury.
WARNING
This symbol alerts you to a dangerous situation. Failure to avoid this situation can result in
serious or fatal injury.
CAUTION
This symbol alerts you to a dangerous situation. Failure to avoid this situation can result in
minor or medium injury.
NOTICE
This symbol contains information on procedures and other facts which do not result in
personal injury.
2.2.2 Symbols for certain types of information and graphics
Tip
Indicates additional information
Reference to documentation
Reference to graphic
Notice or individual step to be observed
1.
,
2.
,
3.
Series of steps
Result of a step

Nivotester FTL325P About this document
Endress+Hauser 15
1, 2, 3, ...
Item numbers
A, B, C, ...
Views
-
Hazardous area
Indicates the hazardous area
.
Safe area (non-hazardous area)
Indicates the non-hazardous area
2.3 Supplementary device documentation
For an overview of the scope of the associated Technical Documentation, refer to the
following:
•W@M Device Viewer (www.endress.com/deviceviewer): Enter the serial number from
nameplate
•Endress+Hauser Operations App: Enter the serial number from the nameplate or scan
the 2D matrix code (QR code) on the nameplate
The following documentation types are available in the Downloads section of the
Endress+Hauser website (www.endress.com/downloads):
2.3.1 Further applicable documents
• TI00350F
• BA01971F, FTL325P, 1-channel
• KA01431F, FTL325P 1-channel
• BA01970F, FTL325P, 3-channel
• KA01432F, FTL325P 3-channel
• FY001001F, Functional Safety Manual FTL51B with electronic insert FEL67
2.3.2 Technical Information (TI)
Planning aid
The document contains all the technical data on the device and provides an overview of the
accessories and other products that can be ordered for the device.
2.3.3 Brief Operating Instructions (KA)
Guide that takes you quickly to the 1st measured value
The Brief Operating Instructions contain all the essential information from incoming
acceptance to initial commissioning.
2.3.4 Operating Instructions (BA)
Your reference guide
These Operating Instructions contain all the information that is required in various phases of
the life cycle of the device: from product identification, incoming acceptance and storage, to
mounting, connection, operation and commissioning through to troubleshooting,
maintenance and disposal.

Design Nivotester FTL325P
16 Endress+Hauser
2.3.5 Safety Instructions (XA)
Depending on the approval, the following Safety Instructions (XA) are supplied with the
device. They are an integral part of the Operating Instructions.
The nameplate indicates the Safety Instructions (XA) that are relevant to the device.
3 Design
3.1 Permitted devices types
The details pertaining to functional safety in this manual relate to the device versions listed
below and are valid as of the specified firmware and hardware versions.
Unless otherwise specified, all subsequent versions can also be used for safety functions.
A modification process according to IEC 61508 is applied for device changes.
Valid device versions for safety-related use:
3.1.1 Ordering features
FTL325P-
Feature: 010 "Approval"
Version: G, H, N, P, T, W, 2, 8
Feature: 020 "Housing"
Version: all
Feature: 030 "Power supply"
Version: all
Feature: 040 "Switch output"
Version: all
Feature: 995 "Marking"
Version: all
3.2 Identification marking
SIL-certified devices are marked with the SIL logo on the nameplate.
3.3 Safety function
The device's safety functions are:
• Maximum level monitoring (overfill prevention, MAX detection)

Nivotester FTL325P Design
Endress+Hauser 17
• Minimum level monitoring (dry running protection, MIN detection)
A maximum of one safety function – either MAX detection or MIN detection of a level –
may be performed with a 3-channel Nivotester unit.
A device combination with non-functional safety functions is only possible in accordance
with version VI.
3.3.1 Other safety-related characteristic values
Please note the following in relation to the Declarations of Conformity with safety-related
characteristic values.
• A common cause factor β = 10 % has been assumed in the calculations specified.
• For multi-channel systems, the PFDavg values already contain common cause failures for the
specific wiring scheme.
• The PFDavg values only apply to the particular wiring scheme for which the values have been
calculated. They are not a suitable basis for making calculations for other wiring schemes.
The use of NC contacts instead of NO contacts, in particular, is not permitted for operation
according to SIL specifications.
• The wiring scheme shows the number of devices and the switching of the contacts in the
level relays (contact open in demand mode).
• If there are several devices in a wiring scheme, all the devices have the same settings
shown.
• The Declarations of Conformity show safety-related values and wiring options for the
measuring system.
• FIT = Failure in Time, 1 FIT = 10-9 1/h
3.3.2 Common cause errors
Where HFT=1, the failure rates are based on an analysis in accordance with
DIN EN 61508-6: 2011-02, Table D.4, "Using the β-factor to calculate the probability of
failure in an E/E/PE safety-related system due to common cause failures".
The calculation gives a β-factor of 10 %.
This factor is based on the failure rates indicated above.
If additional measures are implemented during installation to prevent common cause errors
as defined in Table D.1, the β-factor can possibly be reduced to 5 %.
Possible measures are:
• Sensors installed in a physically separate location
• Cable routed separately between the Liquiphant and Nivotester
• Separate protection from environmental influences:
• Impact
• Sunshine
• EMC protection and/or overvoltage
• Use of different sensor materials
• Combination of high-temperature and normal version

Commissioning (installation and configuration) Nivotester FTL325P
18 Endress+Hauser
3.4 Basic conditions for use in safety-related applications
The measuring system must be used correctly for the specific application, taking into account
the medium properties and ambient conditions. Carefully follow instructions pertaining to
critical process situations and installation conditions from the Operating Instructions. The
application-specific limits must be observed. The specifications in the Operating Instructions
and the Technical Information must not be exceeded.
3.4.1 EMC compatibility
The Nivotester is certified in accordance with IEC 61326-3-2 and is thus suitable for safety-
related, industrial applications in a specified electromagnetic environment. If the specified
electromagnetic ambient conditions are exceeded, the switch status might not be reliably
detected. An unshielded cable up to 1 000 m (3 281 ft) long can be used between the devices
in these environmental conditions. Electromagnetic interference immunity can be further
improved by using shielded cables.
3.5 Useful lifetime of electric components
The established failure rates of electrical components apply within the useful lifetime as per
IEC 61508-2:2010 section 7.4.9.5 note 3.
According to DIN EN 61508-2:2011 section 7.4.9.5 (national footnote N3) appropriate
measures taken by the operator can extend the useful lifetime.
4 Commissioning (installation and configuration)
4.1 Requirements for personnel
The personnel for installation, commissioning, diagnostics and maintenance must fulfill the
following requirements:
‣Trained, qualified specialists must have a relevant qualification for this specific function
and task.
‣Personnel must be authorized by the plant owner/operator.
‣Be familiar with federal/national regulations.
‣Before starting work: personnel must read and understand the instructions in the manual
and supplementary documentation as well as the certificates (depending on the
application).
‣Personnel must follow instructions and comply with general policies.
The operating personnel must fulfill the following requirements:
‣Personnel are instructed and authorized according to the requirements of the task by the
facility's owner-operator.
‣Personnel follow the instructions in this manual.
4.2 Installation
The mounting and wiring of the device and the permitted orientations are described in the
Operating Instructions pertaining to the device.

Nivotester FTL325P Commissioning (installation and configuration)
Endress+Hauser 19
4.3 Commissioning
The device is commissioned using the Commissioning Wizard. The commissioning procedure
is described in the Operating Instructions pertaining to the device.
Prior to operating the device in a safety instrumented system, verification must be performed
by carrying out a test sequence as described in Section 6 Proof testing.
4.4 Operation
The operation of the device is described in the Operating Instructions pertaining to the device.
4.5 Device configuration for safety-related applications
The device settings may not be changed if SIL operation is in progress.
NOTICE
The protective function can be impaired
After commissioning the measuring system, changes to the settings can impact the protective
function
‣After changing the settings, perform a proof test to ensure that the safety function is
working correctly
AB
A0039550
 1 Explanation of switch settings
A Switch must be configured as shown
B Select the same operating mode as on the electronic insert of the safety function
All channel switches on the Nivotester must be configured to the same operating mode.

Commissioning (installation and configuration) Nivotester FTL325P
20 Endress+Hauser
4.5.1 Version II
1 2
ON
CH1
1 2
ON
MAX MIN
ON OFF
A0039533
 2 1-channel Nivotester, version II wiring scheme
4.5.2 Version III
1 2
ON
CH1
1 2
ON
MINMAX
ON OFF
CH2
CH3
1 2
ON
MIN MAX
OFF ON
2
3
1
MODE
A0039534
 3 3-channel Nivotester, version III wiring scheme