Endress+Hauser Proline Prosonic Flow P 500 Instructions for use

Products Solutions Services
Functional Safety Manual
Proline Prosonic Flow P 500
Ultrasonic time-of-flight flowmeter
HART
FY02647D/06/EN/01.21
71510592
2021-05-10
Valid as of version
01.01.zz (Device firmware)

Proline Prosonic Flow P 500 HART Table of contents
Endress+Hauser 3
Table of contents
1 Manufacturer's Declaration .... 4
1.1 Safety-related characteristic values ..... 5
2 About this document ........... 7
2.1 Document function ................... 7
2.2 Using this document .................. 7
2.3 Symbols ............................ 7
2.4 Supplementary device documentation ... 8
3 Permitted device types ......... 9
3.1 SIL label on the nameplate ........... 10
4 Safety function ................ 10
4.1 Definition of the safety function ....... 10
4.2 Restrictions for use in safety-related
applications ........................ 12
5 Use in protective systems ..... 17
5.1 Device behavior during operation ...... 17
5.2 Parameter configuration for safety-
related applications ................. 18
5.3 Proof testing ....................... 26
6 Life cycle ....................... 38
6.1 Requirements for the personnel ....... 38
6.2 Installation ........................ 38
6.3 Commissioning ..................... 38
6.4 Operation ..........................39
6.5 Maintenance ....................... 39
6.6 Repair ............................. 39
6.7 Modification ....................... 39
6.8 Decommissioning ................... 40
7 Appendix ...................... 40
7.1 Structure of the measuring system ..... 40
7.2 Verification or calibration ............ 41
7.3 Notes on the redundant use of multiple
sensors ............................ 41
7.4 Version history ..................... 42

Manufacturer's Declaration Proline Prosonic Flow P 500 HART
4 Endress+Hauser
1 Manufacturer's Declaration
A0045946-EN

Proline Prosonic Flow P 500 HART Manufacturer's Declaration
Endress+Hauser 5
1.1 Safety-related characteristic values
General
Device designation and permitted
versions
9P5B (Prosonic Flow P 500)
Order code for "Output; input 1":
Option BA "4-20mA HART"
Order code for "Output; input 2":
All options
Order code for "Output; input 3":
All options
Order code for "Additional approval":
Option LA "SIL"
Safety-related output signal 4 to 20 mA (output; input 1)
Failure current ≤ 3.6 mA or ≥ 21 mA
Assessed measured variable/
function
Volume flow monitoring
Safety function(s) Min., Max., Range
Device type according to IEC
61508-2
 Type A  Type B
Mode  Low Demand Mode  High Demand Mode  Continuous Mode 1)
Valid hardware version (main
electronics)
From delivery date May 10, 2021
Valid firmware version 01.01.zz and higher (HART; from delivery date May 10, 2021)
Safety manual FY02647D
Type of assessment
(only 1 version can be selected)
 Complete HW/SW assessment in the context of development including
FMEDA and change process according to IEC 61508-2, 3
 Assessment of evidence for proven-in-use HW/SW including FMEDA and
change process according to IEC 61508-2, 3
 Analysis of HW/SW field data for evidence of "prior use" according to IEC
61511
 Assessment by FMEDA according to IEC 61508-2 for devices without software
Test documents Development documents, test reports, data sheets
1) No continuous operation as per IEC 61508: 2011 (section 3.5.16)
SIL integrity
Systematic safety integrity  SIL 2 capability  SIL 3 capability

Manufacturer's Declaration Proline Prosonic Flow P 500 HART
6 Endress+Hauser
Hardware safety integrity Single-channel service
(HFT = 0)
 SIL 2 capability  SIL 3 capability
Multi-channel service
(HFT ≥ 1)
 SIL 2 capability  SIL 3 capability
FMEDA
Safety function(s) Min., Max., Range
λDU 1) 268 FIT
λDD 1) 4062 FIT
λSU 1) 2736 FIT
λSD 1) 4605 FIT
SFF - Safe Failure Fraction 97 %
PFDavg for T1 = 1 year 2) (single-channel architecture) 11.8 · 10-4
PFH 1.4 · 10-7
PTC 3) Up to 99 %
MTBFtot 4) 60 years
Diagnostic test interval 5) 30 min
Fault response time 6) 30 s
Recommended test interval T11 year
1) FIT = Failure In Time, number of failures per 109 h
2) Valid for averaged ambient temperatures up to 40 °C (104 °F) in accordance with the general standard for devices
with SIL capability.
3) PTC = Proof Test Coverage (diagnostic coverage achieved by device failure detection during manual proof testing)
4) This value takes into account all failure types of the electronic components as per Siemens SN29500
5) All diagnostic functions are executed at least once during this time. For operation in high demand mode
according to IEC 61508, the safe use of the devices is limited to a safety function demand rate of ≤ 1/50 h.
6) Maximum time between fault detection and fault response.
Note
The measuring device has been developed for use in "Low Demand" and "High Demand" mode.
Explanation
Our in-house quality management system saves information on safety-related systematic errors that will become
known in the future.

Proline Prosonic Flow P 500 HART About this document
Endress+Hauser 7
2 About this document
2.1 Document function
The document is part of the Operating Instructions and serves as a reference for application-
specific parameters and notes.
• General information about functional safety: SIL
• General information about SIL is available:
In the Downloads area of the Endress+Hauser website: www.endress.com/SIL
2.2 Using this document
2.2.1 Information on the document structure
Additional information regarding:
• The arrangement of the parameters, along with a short description, according to the
Operation menu, Setup menu, Diagnostics menu: Operating Instructions
• Operating concept: Operating Instructions
2.3 Symbols
2.3.1 Safety symbols
DANGER
This symbol alerts you to a dangerous situation. Failure to avoid this situation will result in
serious or fatal injury.
WARNING
This symbol alerts you to a dangerous situation. Failure to avoid this situation can result in
serious or fatal injury.
CAUTION
This symbol alerts you to a dangerous situation. Failure to avoid this situation can result in
minor or medium injury.
NOTICE
This symbol contains information on procedures and other facts which do not result in
personal injury.
2.3.2 Symbols for certain types of information
Symbol Meaning
Permitted
Procedures, processes or actions that are permitted.
Forbidden
Procedures, processes or actions that are forbidden.
Tip
Indicates additional information.

About this document Proline Prosonic Flow P 500 HART
8 Endress+Hauser
Symbol Meaning
Reference to documentation
A
Reference to page
Reference to graphic
Notice or individual step to be observed
1.
,
2.
,
3.
… Series of steps
Result of a step
A0028662
Operation via local display
A0028663
Operation via operating tool
A0028665
Write-protected parameter
2.3.3 Symbols in graphics
Symbol Meaning
1, 2, 3 ... Item numbers
A, B, C, ... Views
A-A, B-B, C-C, ... Sections
2.4 Supplementary device documentation
For an overview of the scope of the associated Technical Documentation, refer to the
following:
•W@M Device Viewer (www.endress.com/deviceviewer): Enter the serial number from
nameplate
•Endress+Hauser Operations App: Enter the serial number from the nameplate or scan
the 2D matrix code (QR code) on the nameplate
This Special Documentation is available:
In the Download Area of the Endress+Hauser Internet site: www.endress.com →
Downloads
This documentation is an integral part of the following Operating Instructions:

Proline Prosonic Flow P 500 HART Permitted device types
Endress+Hauser 9
Measuring device Documentation code
Prosonic Flow P 500 BA02025D
3 Permitted device types
The details pertaining to functional safety in this manual relate to the device versions listed
below and are valid as of the specified software and hardware versions. Unless otherwise
specified, all subsequent versions can also be used for safety functions. A modification process
according to IEC 61508 is applied for any device modifications.
Feature Designation Option selected
– Order code 9P5B (Prosonic Flow P 500)
000 Mounting type All
010 Approval; transmitter; sensor All
015 Power supply All
020 Output; input 1 1) • Option BA "4-20mA HART"
• Option CA "4-20mA HART Ex-i passive"
• Option CC "4-20mA HART Ex-i active"
021 Output; input 2 All
022 Output; input 3 All
030 Display; Operation All
035 Integrated ISEM electronics All
041 Transmitter housing All
050 Electrical connection All
060 sensor version All
065 Process temperature All
066 Cables All
070 Installation set All
480 Device model All
500 Display operating language All
520 Sensor option All
530 Customer-specific configuration All
540 Application package All
570 Service All
580 Test, certificate All
590 Additional approval LA (= SIL) 2)

Safety function Proline Prosonic Flow P 500 HART
10 Endress+Hauser
Feature Designation Option selected
610 Accessory mounted All
620 Accessory enclosed All
850 Firmware version Firmware with SIL capability, e.g. 01.01.zz (HART)
895 Marking All
1) In devices with several outputs, only current output 1 (terminals 26 and 27) is suitable for safety functions. The
other outputs can, if necessary, be connected for non-safety-oriented purposes.
2) Additional selection of further approvals is possible.
3.1 SIL label on the nameplate
Order code:
Ser. no.:
Ext. ord. cd.:
ii
Date:
1
A0031473
1 SIL logo
4 Safety function
4.1 Definition of the safety function
The measuring device's permitted safety functions are:
Monitoring of a maximum or minimum volume flow or a volume flow range for liquid media
4.1.1 Safety-related output signal
The measuring device's safety-related signal is the 4–20 mA analog output signal (output;
input 1). All safety measures refer to this signal exclusively.