Endress+Hauser Nivotester FTL325N-**** Series Instructions for use

Products Solutions Services
Functional Safety Manual
Nivotester FTL325N
Vibronic
Liquiphant + FEL68
FY01005F/00/EN/02.20
71491951
2020-08-31

Nivotester FTL325N
2 Endress+Hauser
Order code:
Ext. ord. cd.:
Ser. no.:
www.endress.com/deviceviewer Endress+Hauser
Operations App
XXXXXXXXXXXX
XXXXX-XXXXXX
XXX.XXXX.XX
Serial number
1.
3.
2.
A0023555

Nivotester FTL325N Table of contents
Endress+Hauser 3
Table of contents
1 Declaration of Conformity ...... 4
1.1 Version II wiring ..................... 4
1.2 Version III wiring .....................6
1.3 Version IV wiring .................... 8
1.4 Version V wiring .................... 10
1.5 Version VI wiring ................... 12
2 About this document .......... 14
2.1 Document function .................. 14
2.2 Symbols used ....................... 14
2.3 Supplementary device documentation .. 15
3 Design .......................... 16
3.1 Permitted devices types .............. 16
3.2 Identification marking ............... 16
3.3 Safety function ..................... 16
3.4 Basic conditions for use in safety-
related applications ................. 18
3.5 Useful lifetime of electric components .. 18
4 Commissioning (installation
and configuration) ............ 18
4.1 Requirements for personnel .......... 18
4.2 Installation ........................ 18
4.3 Commissioning ..................... 19
4.4 Operation ..........................19
4.5 Device configuration for safety-related
applications ........................ 19
5 Operation ...................... 21
5.1 Device behavior when switched on ..... 21
5.2 Device behavior in safety function
demand mode ...................... 22
5.3 Device behavior in the event of an
alarm ............................. 22
6 Proof testing ................... 22
6.1 Basic test sequence .................. 24
6.2 Test sequence A, MIN detection ....... 25
6.3 Test sequence A, MAX detection ...... 26
6.4 Test sequence B, simulation using test
button or test magnet on Liquiphant ... 27
6.5 Test sequence B, simulation with test
button on Nivotester ................ 28
6.6 Verification criterion ................ 29
7 Repair and error handling .... 29
7.1 Maintenance ....................... 29
7.2 Repair ............................. 29
7.3 Modification ....................... 30
7.4 Decommissioning ................... 30
7.5 Disposal ........................... 30
7.6 Battery disposal .................... 31
8 Appendix ...................... 31
8.1 Structure of the measuring system ..... 31
8.2 Commissioning or proof test report .... 32
8.3 Version history ..................... 39

Declaration of Conformity Nivotester FTL325N
4 Endress+Hauser
1 Declaration of Conformity
1.1 Version II wiring
SIL_00358_01.20
Declaration of Conformity
Functional Safety according to IEC 61508
Based on NE 130 Form B.1
Endress+Hauser SE+Co. KG, Hauptstraße 1, 79689 Maulburg
being the manufacturer, declares that the product
Liquiphant FTL51B, FTL62, FTL64 with electronic insert FEL68
and Nivotester FTL325N
is suitable for the use in safety-instrumented syst ems according to IEC 61508. The instructions of the
corresponding functional safety manual must be followed.
This declaration of conformity is valid for variant II: One Liquiphant ES with a one channel Nivotester
FTL325N.
A: continuative safety instrumented function, e.g. actuator or S-PLC
This declaration of conformity is exclusively valid for the customer listed in the cover letter of the
respective Endress+Hauser sales center and for the listed products and accessories in delivery status.
Maulburg, 27-July-2020
Endress+Hauser SE+Co. KG
i. V.
Manfred Hammer
Dept. Man. Technology
Quality Management / FSM
Research & Development
A0039390

Nivotester FTL325N Declaration of Conformity
Endress+Hauser 5
1.1.1 Safety-related characteristic values, version II
SIL_00358_01.20
General
Device designation and permissible types Liquiphant with electronic insert FEL68 and Nivotester, variant II
FTL51B/62/64–**A8*************+LA and FTL325N–G/H/N/P/T/W/2/8 ***
Safety-related output signal Relay
Fault signal —
Process variable/function Level switch for liquids
Safety function(s) Overfill protection or operating maximum/minimum detection
Device type acc. to IEC 61508-2 Type A Type B
Operating mode Low Demand Mode High Demand Mode 1) Continuous Mode
Valid hardware version Liquiphant 01.00.ww (ww: any double number)
Nivotester 01.00.ww or 02.00.ww (ww: any double number)
Valid soware version Liquiphant 01.01.zz (zz: any double number)
Safety manual FTL51B: FY01000F, FTL62: FY01019F, FTL64: FY01024F and FY01005F
Type of evalulation
(check only one box)
Complete HW/SW evaluation parallel to development incl.
FMEDA and change request acc. to IEC 61508-2, 3
Evaluation of “proven in use” performance for HW/SW incl. FMEDA
and change request acc. to IEC 61508-2, 3
Evaluation of HW/SW field data to verify „prior use” acc. to
IEC 61511
Evaluation by FMEDA acc. to IEC 61508-2 for devices w/o soware
Evaluation through – report/certificate no. TÜV Rheinland / 968/FSP 1388.02/20 and 968/FSP 1882.01/20
Test documents Development documents Test reports Data sheets
SIL - Integrity
Systematic safety integrity SIL 2 capable SIL 3 capable
Hardware safety integrity Single channel use (HFT = 0)
SIL 2 capable SIL 3 capable
Multi channel use (HFT ³ 1)
SIL 2 capable SIL 3 capable
FMEDA
Safety function MIN MAX —
λDU 2),3) 75 FIT 60 FIT —
λDD 2),3) 140 FIT 106 FIT —
λSU 2),3) 618 FIT 634 FIT —
λSD 2),3) 5 FIT 41 FIT —
SFF 91% 93% —
PFDavg (T1 = 1 year) 3) (single channel architecture) 3.29 × 10-4 2.61× 10-4 —
PFH 3) 7.51 × 10-8 1/h 5.97 × 10-8 1/h —
PTC 4) Test sequence A 91% 91% —
Test sequence B 59% 74% —
λtotal 2),3) 839 FIT 841 FIT —
Diagnostic test interval 5) ≤ 60 s, except RAM check ≤ 10 min —
Fault reaction time 6) ≤ 3 s —
Comments
Nivotester works without soware.
Declaration
Our internal company quality management system ensures information on safety-related systematic faults which become evident
in the future
1) Maximum admissible 1 demand per week.
2) FIT = Failure In Time, number of failures per 109 h
3) Valid for average ambient temperature up to +40 °C (+104 °F)
For continuous operation at ambient temperature close to +60 °C (+140 °F), a factor of 1.7 should be applied
4) PTC = Proof Test Coverage
5) All diagnostic functions are performed at least once within the diagnostic test interval
6) Maximum time between error recognition and error response
A0039391

Declaration of Conformity Nivotester FTL325N
6 Endress+Hauser
1.2 Version III wiring
SIL_00359_01.20
Declaration of Conformity
Functional Safety according to IEC 61508
Based on NE 130 Form B.1
Endress+Hauser SE+Co. KG, Hauptstraße 1, 79689 Maulburg
being the manufacturer, declares that the product
Liquiphant FTL51B, FTL62, FTL64 with electronic insert FEL68
and Nivotester FTL325N
is suitable for the use in safety-instrumented systems according to IEC 61508. The instructions of the
corresponding functional safety manual must be followed.
This declaration of conformity is valid for variant III: One Liquiphant ES with a three channel Nivotester
FTL325N.
A: continuative safety instrumented function, e.g. B: actuator or C: S-PLC
This declaration of conformity is exclusively valid for the customer listed in the cover letter of the
respective Endress+Hauser sales center and for the listed products and accessories in delivery status.
Maulburg, 27-July-2020
Endress+Hauser SE+Co. KG
i. V.
Manfred Hammer
Dept. Man. Technology
Quality Management / FSM
Research & Development
A0039392

Nivotester FTL325N Declaration of Conformity
Endress+Hauser 7
1.2.1 Safety-related characteristic values, version III
SIL_00359_01.20
General
Device designation and permissible types Liquiphant and Nivotester, variant III
FTL51B/62/64–**A8*************+LA and FTL325N–G/H/N/P/T/W/2/8 3*3
Safety-related output signal Relay
Fault signal —
Process variable/function Level switch for liquids
Safety function(s) Overfill protection or operating maximum/minimum detection
Device type acc. to IEC 61508-2 Type A Type B
Operating mode Low Demand Mode High Demand Mode 1) Continuous Mode
Valid hardware version Liquiphant 01.00.ww (ww: any double number)
Nivotester 01.00.ww or 02.00.ww (ww: any double number)
Valid soware version Liquiphant 01.01.zz (zz: any double number)
Safety manual FTL51B: FY01000F, FTL62: FY01019F, FTL64: FY01024F and FY01005F
Type of evalulation
(check only one box)
Complete HW/SW evaluation parallel to development incl.
FMEDA and change request acc. to IEC 61508-2, 3
Evaluation of “proven in use” performance for HW/SW incl. FMEDA
and change request acc. to IEC 61508-2, 3
Evaluation of HW/SW field data to verify „prior use” acc. to
IEC 61511
Evaluation by FMEDA acc. to IEC 61508-2 for devices w/o soware
Evaluation through – report/certificate no. TÜV Rheinland / 968/FSP 1388.02/20 and 968/FSP 1882.01/20
Test documents Development documents Test reports Data sheets
SIL - Integrity
Systematic safety integrity SIL 2 capable SIL 3 capable
Hardware safety integrity Single channel use (HFT = 0)
SIL 2 capable SIL 3 capable
Multi channel use (HFT ³ 1)
SIL 2 capable SIL 3 capable
FMEDA
Safety function MIN MAX —
λDU 2),3) 45 FIT 30 FIT —
λDD 2),3) 140 FIT 106 FIT —
λSU 2),3) 876 FIT 891 FIT —
λSD 2),3) 12 FIT 47 FIT —
SFF 96% 97% —
PFDavg (T1 = 1 year) 3) (single channel architecture) 1.99 × 10-4 1.32 × 10-4 —
PFH 3) 4.55 × 10-8 1/h 3.01 × 10-8 1/h —
PTC 4) Test sequence A 96% 96% —
Test sequence B 74% 86% —
λtotal 2),3) 1073 FIT 1075 FIT —
Diagnostic test interval 5) ≤ 60 s, except RAM check ≤ 10 min —
Fault reaction time 6) ≤ 3 s —
Comments
Nivotester works without soware.
Declaration
Our internal company quality management system ensures information on safety-related systematic faults which become evident
in the future
1) Maximum admissible 1 demand per week.
2) FIT = Failure In Time, number of failures per 109 h
3) Valid for average ambient temperature up to +40 °C (+104 °F)
For continuous operation at ambient temperature close to +60 °C (+140 °F), a factor of 1.7 should be applied
4) PTC = Proof Test Coverage
5) All diagnostic functions are performed at least once within the diagnostic test interval
6) Maximum time between error recognition and error response
A0039393

Declaration of Conformity Nivotester FTL325N
8 Endress+Hauser
1.3 Version IV wiring
SIL_00360_01.20
Declaration of Conformity
Functional Safety according to IEC 61508
Based on NE 130 Form B.1
Endress+Hauser SE+Co. KG, Hauptstraße 1, 79689 Maulburg
being the manufacturer, declares that the product
Liquiphant FTL51B, FTL62, FTL64 with electronic insert FEL68
and Nivotester FTL325N
is suitable for the use in safety-instrumented systems according to IEC 61508. The instructions of the
corresponding functional safety manual must be followed.
This declaration of conformity is valid for variant IV: Two Liquiphants ES with a three channel Nivotester
FTL325N (HFT=1).
A: continuative safety instrumented function, e.g. B: actuator or C: S-PLC
This declaration of conformity is exclusively valid for the customer listed in the cover letter of the
respective Endress+Hauser sales center and for the listed products and accessories in delivery status.
Maulburg, 27-July-2020
Endress+Hauser SE+Co. KG
i. V.
Manfred Hammer
Dept. Man. Technology
Quality Management / FSM
Research & Development
A0039394

Nivotester FTL325N Declaration of Conformity
Endress+Hauser 9
1.3.1 Safety-related characteristic values, version IV
SIL_00360_01.20
General
Device designation and permissible types Liquiphant and Nivotester, variant IV
FTL51B/62/64–**A8*************+LA and FTL325N–G/H/N/P/T/W/2/8 3*3
Safety-related output signal Relay
Fault signal —
Process variable/function Level switch for liquids
Safety function(s) Overfill protection or operating maximum/minimum detection
Device type acc. to IEC 61508-2 Type A Type B
Operating mode Low Demand Mode High Demand Mode 1) Continuous Mode
Valid hardware version Liquiphant 01.00.ww (ww: any double number)
Nivotester 01.00.ww or 02.00.ww (ww: any double number)
Valid soware version Liquiphant 01.01.zz (zz: any double number)
Safety manual FTL51B: FY01000F, FTL62: FY01019F, FTL64: FY01024F and FY01005F
Type of evalulation
(check only one box)
Complete HW/SW evaluation parallel to development incl.
FMEDA and change request acc. to IEC 61508-2, 3
Evaluation of “proven in use” performance for HW/SW incl. FMEDA
and change request acc. to IEC 61508-2, 3
Evaluation of HW/SW field data to verify „prior use” acc. to
IEC 61511
Evaluation by FMEDA acc. to IEC 61508-2 for devices w/o soware
Evaluation through – report/certificate no. TÜV Rheinland / 968/FSP 1388.02/20 and 968/FSP 1882.01/20
Test documents Development documents Test reports Data sheets
SIL - Integrity
Systematic safety integrity SIL 2 capable SIL 3 capable
Hardware safety integrity Single channel use (HFT = 0)
SIL 2 capable SIL 3 capable
Multi channel use (HFT ³ 1)
SIL 2 capable SIL 3 capable
FMEDA
Safety function MIN MAX —
λDU 2),3) 13 FIT 11 FIT —
λDD 2),3) 7 FIT 6 FIT —
λSU 2),3) 1312 FIT 1314 FIT —
λSD 2),3) 290 FIT 295 FIT —
SFF 99% 99% —
PFDavg (T1 = 1 year) 3) (single channel architecture) 5.60 × 10-5 4.92 × 10-5 —
PFH 3) 1.28 × 10-8 1/h 1.12 × 10-8 1/h —
PTC 4) Test sequence A 91% 91% —
Test sequence B 59% 74% —
λtotal 2),3) 1622 FIT 1626 FIT —
Diagnostic test interval 5) ≤ 60 s, except RAM check ≤ 10 min —
Fault reaction time 6) ≤ 3 s —
Comments
Nivotester works without soware.
Declaration
Our internal company quality management system ensures information on safety-related systematic faults which become evident
in the future
1) Maximum admissible 1 demand per week.
2) FIT = Failure In Time, number of failures per 109 h
3) Valid for average ambient temperature up to +40 °C (+104 °F)
For continuous operation at ambient temperature close to +60 °C (+140 °F), a factor of 1.7 should be applied
4) PTC = Proof Test Coverage
5) All diagnostic functions are performed at least once within the diagnostic test interval
6) Maximum time between error recognition and error response
A0039395

Declaration of Conformity Nivotester FTL325N
10 Endress+Hauser
1.4 Version V wiring
SIL_00361_01.20
Declaration of Conformity
Functional Safety according to IEC 61508
Based on NE 130 Form B.1
Endress+Hauser SE+Co. KG, Hauptstraße 1, 79689 Maulburg
being the manufacturer, declares that the product
Liquiphant FTL51B, FTL62, FTL64 with electronic insert FEL68
and Nivotester FTL325N
is suitable for the use in safety-instrumented systems according to IEC 61508. The instructions of the
corresponding functional safety manual must be followed.
This declaration of conformity is valid for variant V: Three Liquiphants Es with a three channel Nivotester
FTL325N (HFT=1).
A: continuative safety instrumented function
This declaration of conformity is exclusively valid for the customer listed in the cover letter of the
respective Endress+Hauser sales center and for the listed products and accessories in delivery status.
Maulburg, 27-July-2020
Endress+Hauser SE+Co. KG
i. V.
Manfred Hammer
Dept. Man. Technology
Quality Management / FSM
Research & Development
A0039396

Nivotester FTL325N Declaration of Conformity
Endress+Hauser 11
1.4.1 Safety-related characteristic values, version V
SIL_00361_01.20
General
Device designation and permissible types Liquiphant and Nivotester, variant V
FTL51B/62/64–**A8*************+LA and FTL325N–G/H/N/P/T/W/2/8 3*3
Safety-related output signal Relay
Fault signal —
Process variable/function Level switch for liquids
Safety function(s) Overfill protection or operating maximum/minimum detection
Device type acc. to IEC 61508-2 Type A Type B
Operating mode Low Demand Mode High Demand Mode 1) Continuous Mode
Valid hardware version Liquiphant 01.00.ww (ww: any double number)
Nivotester 01.00.ww or 02.00.ww (ww: any double number)
Valid soware version Liquiphant 01.01.zz (zz: any double number)
Safety manual FTL51B: FY01000F, FTL62: FY01019F, FTL64: FY01024F and FY01005F
Type of evalulation
(check only one box)
Complete HW/SW evaluation parallel to development incl.
FMEDA and change request acc. to IEC 61508-2, 3
Evaluation of “proven in use” performance for HW/SW incl. FMEDA
and change request acc. to IEC 61508-2, 3
Evaluation of HW/SW field data to verify „prior use” acc. to
IEC 61511
Evaluation by FMEDA acc. to IEC 61508-2 for devices w/o soware
Evaluation through – report/certificate no. TÜV Rheinland / 968/FSP 1388.02/20 and 968/FSP 1882.01/20
Test documents Development documents Test reports Data sheets
SIL - Integrity
Systematic safety integrity SIL 2 capable SIL 3 capable
Hardware safety integrity Single channel use (HFT = 0)
SIL 2 capable SIL 3 capable
Multi channel use (HFT ³ 1)
SIL 2 capable SIL 3 capable
FMEDA
Safety function MIN MAX —
λDU 2),3) 15 FIT 13 FIT —
λDD 2),3) 7 FIT 6 FIT —
λSU 2),3) 1536 FIT 1538 FIT —
λSD 2),3) 436 FIT 442 FIT —
SFF 99% 99% —
PFDavg (T1 = 1 year) 3) (single channel architecture) 6.46 × 10-5 5.79 × 10-5 —
PFH 3) 1.47 × 10-8 1/h 1.32 × 10-8 1/h —
PTC 4) Test sequence A 91% 91% —
Test sequence B 59% 74% —
λtotal 2),3) 1994 FIT 1999 FIT —
Diagnostic test interval 5) ≤ 60 s, except RAM check ≤ 10 min —
Fault reaction time 6) ≤ 3 s —
Comments
Nivotester works without soware.
Declaration
Our internal company quality management system ensures information on safety-related systematic faults which become evident
in the future
1) Maximum admissible 1 demand per week.
2) FIT = Failure In Time, number of failures per 109 h
3) Valid for average ambient temperature up to +40 °C (+104 °F)
For continuous operation at ambient temperature close to +60 °C (+140 °F), a factor of 1.7 should be applied
4) PTC = Proof Test Coverage
5) All diagnostic functions are performed at least once within the diagnostic test interval
6) Maximum time between error recognition and error response
A0039397

Declaration of Conformity Nivotester FTL325N
12 Endress+Hauser
1.5 Version VI wiring
SIL_00362_01.20
Declaration of Conformity
Functional Safety according to IEC 61508
Based on NE 130 Form B.1
Endress+Hauser SE+Co. KG, Hauptstraße 1, 79689 Maulburg
being the manufacturer, declares that the product
Liquiphant FTL51B, FTL62, FTL64 with electronic insert FEL68
and Nivotester FTL325N
is suitable for the use in safety-instrumented systems according to IEC 61508. The instructions of the
corresponding functional safety manual must be followed.
This declaration of conformity is valid for variant VI: One Liquiphant ES for safety instrumented function,
two Liquphants for Δs level control (non SIL) with a three channel Nivotester FTL325N.
A: continuative safety instrumented function, e.g. actuator or S-PLC
This declaration of conformity is exclusively valid for the customer listed in the cover letter of the
respective Endress+Hauser sales center and for the listed products and accessories in delivery status.
Maulburg, 27-July-2020
Endress+Hauser SE+Co. KG
i. V.
Manfred Hammer
Dept. Man. Technology
Quality Management / FSM
Research & Development
A0039398

Nivotester FTL325N Declaration of Conformity
Endress+Hauser 13
1.5.1 Safety-related characteristic values, version VI
SIL_00362_01.20
General
Device designation and permissible types Liquiphant with electronic insert FEL68 and Nivotester, variant VI
FTL51B/62/64–**A8*************+LA and FTL325N–G/H/N/P/T/W/2/8 3*3
Safety-related output signal Relay
Fault signal —
Process variable/function Level switch for liquids
Safety function(s) Overfill protection or operating maximum/minimum detection
Device type acc. to IEC 61508-2 Type A Type B
Operating mode Low Demand Mode High Demand Mode 1) Continuous Mode
Valid hardware version Liquiphant 01.00.ww (ww: any double number)
Nivotester 01.00.ww or 02.00.ww (ww: any double number)
Valid soware version Liquiphant 01.01.zz (zz: any double number)
Safety manual FTL51B: FY01000F, FTL62: FY01019F, FTL64: FY01024F and FY01005F
Type of evalulation
(check only one box)
Complete HW/SW evaluation parallel to development incl.
FMEDA and change request acc. to IEC 61508-2, 3
Evaluation of “proven in use” performance for HW/SW incl. FMEDA
and change request acc. to IEC 61508-2, 3
Evaluation of HW/SW field data to verify „prior use” acc. to
IEC 61511
Evaluation by FMEDA acc. to IEC 61508-2 for devices w/o soware
Evaluation through – report/certificate no. TÜV Rheinland / 968/FSP 1388.02/20 and 968/FSP 1882.01/20
Test documents Development documents Test reports Data sheets
SIL - Integrity
Systematic safety integrity SIL 2 capable SIL 3 capable
Hardware safety integrity Single channel use (HFT = 0)
SIL 2 capable SIL 3 capable
Multi channel use (HFT ³ 1)
SIL 2 capable SIL 3 capable
FMEDA
Safety function MIN MAX —
λDU 2),3) 75 FIT 60 FIT —
λDD 2),3) 140 FIT 106 FIT —
λSU 2),3) 618 FIT 634 FIT —
λSD 2),3) 5 FIT 41 FIT —
SFF 91% 93% —
PFDavg (T1 = 1 year) 3) (single channel architecture) 3.29 × 10-4 2.61× 10-4 —
PFH 3) 7.51 × 10-8 1/h 5.97 × 10-8 1/h —
PTC 4) Test sequence A 91% 91% —
Test sequence B 59% 74% —
λtotal 2),3) 839 FIT 841 FIT —
Diagnostic test interval 5) ≤ 60 s, except RAM check ≤ 10 min —
Fault reaction time 6) ≤ 3 s —
Comments
Nivotester works without soware.
Declaration
Our internal company quality management system ensures information on safety-related systematic faults which become evident
in the future
1) Maximum admissible 1 demand per week.
2) FIT = Failure In Time, number of failures per 109 h
3) Valid for average ambient temperature up to +40 °C (+104 °F)
For continuous operation at ambient temperature close to +60 °C (+140 °F), a factor of 1.7 should be applied
4) PTC = Proof Test Coverage
5) All diagnostic functions are performed at least once within the diagnostic test interval
6) Maximum time between error recognition and error response
A0039399

About this document Nivotester FTL325N
14 Endress+Hauser
2 About this document
2.1 Document function
This supplementary Safety Manual applies in addition to the Operating Instructions, Technical
Information and ATEX Safety Instructions. The supplementary device documentation must be
observed during installation, commissioning and operation. The requirements specific to the
protection function are described in this Safety Manual.
General information on functional safety (SIL) is available at:
•www.endress.com/SIL
• CP01008Z, Brochure "Functional Safety – SIL, Safety Instrumented Systems in the
Process Industry"
2.2 Symbols used
2.2.1 Safety symbols
DANGER
This symbol alerts you to a dangerous situation. Failure to avoid this situation will result in
serious or fatal injury.
WARNING
This symbol alerts you to a dangerous situation. Failure to avoid this situation can result in
serious or fatal injury.
CAUTION
This symbol alerts you to a dangerous situation. Failure to avoid this situation can result in
minor or medium injury.
NOTICE
This symbol contains information on procedures and other facts which do not result in
personal injury.
2.2.2 Symbols for certain types of information and graphics
Tip
Indicates additional information
Reference to documentation
Reference to graphic
Notice or individual step to be observed
1.
,
2.
,
3.
Series of steps
Result of a step

Nivotester FTL325N About this document
Endress+Hauser 15
1, 2, 3, ...
Item numbers
A, B, C, ...
Views
-
Hazardous area
Indicates the hazardous area
.
Safe area (non-hazardous area)
Indicates the non-hazardous area
2.3 Supplementary device documentation
For an overview of the scope of the associated Technical Documentation, refer to the
following:
•W@M Device Viewer (www.endress.com/deviceviewer): Enter the serial number from
nameplate
•Endress+Hauser Operations App: Enter the serial number from the nameplate or scan
the 2D matrix code (QR code) on the nameplate
The following documentation types are available in the Downloads section of the
Endress+Hauser website (www.endress.com/downloads):
2.3.1 Further applicable documents
• TI00353F
• BA01972F, FTL325N 1-channel
• KA01433F, FTL325N 1-channel
• BA01973F, FTL325N 3-channel
• KA01434F, FTL325N 3-channel
2.3.2 Technical Information (TI)
Planning aid
The document contains all the technical data on the device and provides an overview of the
accessories and other products that can be ordered for the device.
2.3.3 Brief Operating Instructions (KA)
Guide that takes you quickly to the 1st measured value
The Brief Operating Instructions contain all the essential information from incoming
acceptance to initial commissioning.
2.3.4 Operating Instructions (BA)
Your reference guide
These Operating Instructions contain all the information that is required in various phases of
the life cycle of the device: from product identification, incoming acceptance and storage, to
mounting, connection, operation and commissioning through to troubleshooting,
maintenance and disposal.

Design Nivotester FTL325N
16 Endress+Hauser
2.3.5 Safety Instructions (XA)
Depending on the approval, the following Safety Instructions (XA) are supplied with the
device. They are an integral part of the Operating Instructions.
The nameplate indicates the Safety Instructions (XA) that are relevant to the device.
3 Design
3.1 Permitted devices types
The details pertaining to functional safety in this manual relate to the device versions listed
below and are valid as of the specified firmware and hardware versions.
Unless otherwise specified, all subsequent versions can also be used for safety functions.
A modification process according to IEC 61508 is applied for device changes.
Valid device versions for safety-related use:
3.1.1 Ordering features
FTL325N-
Feature: 010 "Approval"
Version: G, H, N, P, T, W, 2, 8
Feature: 020 "Housing"
Version: all
Feature: 030 "Power supply"
Version: all
Feature: 040 "Switch output"
Version: all
Feature: 995 "Marking"
Version: all
3.2 Identification marking
SIL-certified devices are marked with the SIL logo on the nameplate.
3.3 Safety function
The device's safety functions are:
• Maximum level monitoring (overfill prevention, MAX detection)

Nivotester FTL325N Design
Endress+Hauser 17
• Minimum level monitoring (dry running protection, MIN detection)
A maximum of one safety function – either MAX detection or MIN detection of a level –
may be performed with a 3-channel Nivotester unit.
A device combination with non-functional safety functions is only possible in accordance
with version VI.
3.3.1 Other safety-related characteristic values
Please note the following in relation to the Declarations of Conformity with safety-related
characteristic values.
• A common cause factor β = 10 % has been assumed in the calculations specified.
• For multi-channel systems, the PFDavg values already contain common cause failures for the
specific wiring scheme.
• The PFDavg values only apply to the particular wiring scheme for which the values have been
calculated. They are not a suitable basis for making calculations for other wiring schemes.
The use of NC contacts instead of NO contacts, in particular, is not permitted for operation
according to SIL specifications.
• The wiring scheme shows the number of devices and the switching of the contacts in the
level relays (contact open in demand mode).
• If there are several devices in a wiring scheme, all the devices have the same settings
shown.
• The Declarations of Conformity show safety-related values and wiring options for the
measuring system.
• FIT = Failure in Time, 1 FIT = 10-9 1/h
3.3.2 Common cause errors
Where HFT=1, the failure rates are based on an analysis in accordance with
DIN EN 61508-6: 2011-02, Table D.4, "Using the β-factor to calculate the probability of
failure in an E/E/PE safety-related system due to common cause failures".
The calculation gives a β-factor of 10 %.
This factor is based on the failure rates indicated above.
If additional measures are implemented during installation to prevent common cause errors
as defined in Table D.1, the β-factor can possibly be reduced to 5 %.
Possible measures are:
• Sensors installed in a physically separate location
• Cable routed separately between the Liquiphant and Nivotester
• Separate protection from environmental influences:
• Impact
• Sunshine
• EMC protection and/or overvoltage
• Use of different sensor materials
• Combination of high-temperature and normal version

Commissioning (installation and configuration) Nivotester FTL325N
18 Endress+Hauser
3.4 Basic conditions for use in safety-related applications
The measuring system must be used correctly for the specific application, taking into account
the medium properties and ambient conditions. Carefully follow instructions pertaining to
critical process situations and installation conditions from the Operating Instructions. The
application-specific limits must be observed. The specifications in the Operating Instructions
and the Technical Information must not be exceeded.
3.4.1 EMC compatibility
The Nivotester is certified in accordance with IEC 61326-3-2 and is thus suitable for safety-
related, industrial applications in a specified electromagnetic environment. If the specified
electromagnetic ambient conditions are exceeded, the switch status might not be reliably
detected. An unshielded cable can be used between the devices in these environmental
conditions. Electromagnetic interference immunity can be further improved by using shielded
cables.
3.5 Useful lifetime of electric components
The established failure rates of electrical components apply within the useful lifetime as per
IEC 61508-2:2010 section 7.4.9.5 note 3.
According to DIN EN 61508-2:2011 section 7.4.9.5 (national footnote N3) appropriate
measures taken by the operator can extend the useful lifetime.
4 Commissioning (installation and configuration)
4.1 Requirements for personnel
The personnel for installation, commissioning, diagnostics and maintenance must fulfill the
following requirements:
‣Trained, qualified specialists must have a relevant qualification for this specific function
and task.
‣Personnel must be authorized by the plant owner/operator.
‣Be familiar with federal/national regulations.
‣Before starting work: personnel must read and understand the instructions in the manual
and supplementary documentation as well as the certificates (depending on the
application).
‣Personnel must follow instructions and comply with general policies.
The operating personnel must fulfill the following requirements:
‣Personnel are instructed and authorized according to the requirements of the task by the
facility's owner-operator.
‣Personnel follow the instructions in this manual.
4.2 Installation
The mounting and wiring of the device and the permitted orientations are described in the
Operating Instructions pertaining to the device.

Nivotester FTL325N Commissioning (installation and configuration)
Endress+Hauser 19
4.3 Commissioning
The device is commissioned using the Commissioning Wizard. The commissioning procedure
is described in the Operating Instructions pertaining to the device.
Prior to operating the device in a safety instrumented system, verification must be performed
by carrying out a test sequence as described in Section 6 Proof testing.
4.4 Operation
The operation of the device is described in the Operating Instructions pertaining to the device.
4.5 Device configuration for safety-related applications
The device settings may not be changed if SIL operation is in progress.
NOTICE
The protective function can be impaired
After commissioning the measuring system, changes to the settings can impact the protective
function
‣After changing the settings, perform a proof test to ensure that the safety function is
working correctly
4.5.1 Version II
1 2
ON
CH1
1 2
ON
2.1mA 1.2mA
ON OFF
A0039462
 1 1-channel Nivotester, version II wiring scheme

Commissioning (installation and configuration) Nivotester FTL325N
20 Endress+Hauser
4.5.2 Version III
1 2
ON
CH1
1 2
ON
2.1mA 1.2mA
ON OFF
CH2
CH3
3 4
1 2
ON
ON
1.2mA 2.1mA
OFF ON
2
3
1
MODE
A0039463
 2 3-channel Nivotester, version III wiring scheme
4.5.3 Version IV
1 2
ON
CH1
1 2
ON
2.1mA 1.2mA
ON OFF
CH2
CH3
3 4
1 2
ON
ON
1.2mA 2.1mA
OFF ON
2
3
1
MODE
A0039464
 3 3-channel Nivotester, version IV wiring scheme