GHM-Martens STL50 User manual

Operating manual
Safety temperature
limiter
STL50
Approved in accordance with:
DIN EN 14597 (replacing DIN 3440)
SIL 2
Save for later reference.
English
Company / brands of GHM
www.ghm-messtechnik.de

GHM Group – Martens
GHM Messtechnik GmbH | Kiebitzhörn 18 | 22885 Barsbüttel | Germany
Phone [phone] | [email protected] | www.ghm-group.de
2
Content
1Intended use (areas of application) ................................................................................. 3
1.1 Safety signs and symbols ......................................................................................... 3
1.2 Safety instructions ..................................................................................................... 4
1.3 Product liability and warranty .................................................................................... 4
1.4 Standards and directives........................................................................................... 4
1.5 Approvals .................................................................................................................. 4
2Product description.......................................................................................................... 5
2.1 Scope of delivery ....................................................................................................... 5
2.2 Features .................................................................................................................... 5
2.3 Brief information ........................................................................................................ 6
2.4 Dimensions ............................................................................................................... 6
2.5 Connection diagrams ................................................................................................ 7
2.6 Electrical installation .................................................................................................. 8
3Controls and functional description ................................................................................. 9
3.1 Operating and display elements ............................................................................... 9
3.2 Operation .................................................................................................................. 9
3.3 Operating level ........................................................................................................ 11
3.4 Configuration level .................................................................................................. 12
3.5 Error messages ....................................................................................................... 17
3.6 Functional safety ..................................................................................................... 19
3.7 Functional test ......................................................................................................... 20
3.8 Approved temperature probes ................................................................................ 21
4Technical data ............................................................................................................... 22
4.1 Ordering code ......................................................................................................... 23
5Device transport and storage ........................................................................................ 24
6Return to manufacturer ................................................................................................. 24
7Disposal ......................................................................................................................... 24
8Imprint ........................................................................................................................... 24
9Declaration of Conformity .............................................................................................. 25
10 Notes ............................................................................................................................. 26

3
1 Intended use (areas of application)
Refer to the chapter 'Product description' for detailed specifications for
the area of application.
The operational safety of the device is only assured when used as in-
tended in accordance with the specifications in the operating manual.
Intervention beyond the actions described in the operating manual may only be car-
ried out by personnel authorised by the manufacturer for safety and warranty rea-
sons. Conversions or modifications made on one's own authority are expressly pro-
hibited.
Application-specific dangers can emanate from this device when used im-
properly or not as intended.
The device is intended for operation in safety-relevant systems up to
SIL2.
The device is not suitable for use in explosion-prone areas.
General safety instructions, use
This operating manual must be kept in a location such that qualified personnel can
refer to it at all times.
Any processes described in this operating manual may only be carried out by
trained, qualified personnel who are authorised by the owner and wearing protec-
tive clothing. All rights reserved.
1.1 Safety signs and symbols
Warning notices are identified in this document as described below:
DANGER
Warning! This symbol warns of imminent danger which can result
in death, severe bodily injury, or severe property damage in case
of non-observance.
Attention! This symbol warns of potential dangers or harmful situ-
ations which can cause damage to the device or to the environ-
ment in case of non-observance.
Note! This symbol indicates processes which can have a direct
influence on operation or can trigger an unforeseen reaction in
case of non-observance.
Warning! of an area in which explosive atmospheres can form.
This only applies to devices with ATEX approval.

GHM Group – Martens
GHM Messtechnik GmbH | Kiebitzhörn 18 | 22885 Barsbüttel | Germany
Phone [phone] | [email protected] | www.ghm-group.de
4
1.2 Safety instructions
Read the product description before commissioning the device. Ensure that there
are no limitations for use of the product for the relevant applications.
The owner is responsible for ensuring the fault-free operation of the de-
vice. The owner is obligated to ensure compliance and to observe the re-
quired work and safety measures of the current applicable regulations for
the entire duration of use.
1.3 Product liability and warranty
Exclusion of liability:
The contents of the operating manual have been checked to ensure conformity with
the described device. However, deviations cannot be entirely ruled out. Therefore,
we cannot assume any guarantee for complete conformity. The specifications in
this document are checked regularly and any necessary corrections are incorpo-
rated into subsequent versions. This document is subject to technical changes. In
addition, all claims are based on the valid 'Standard Terms for the Supply of Prod-
ucts and Services of the Electrical Industry'.
GHM Messtechnik cannot inspect or repair any devices without the re-
quired form having been filled in completely (see chapter 6 Return to
manufacturer, page 24).
1.4 Standards and directives
Conformity with Directive 2014/30/EU
CE conformity EN 61326-1: 2013
EN 61326-2-2: 2013
1.5 Approvals
EN 14597:2012 Temperature control devices and temperature limiters for
heat generating systems
EN 61508:2011 SIL2 Functional safety of electrical/electronic/programmable
electronic safety-related systems
DANGER

5
2 Product description
The STL50 safety temperature limiter is used wherever thermal processes must be
monitored and the system must be switched to a safe operating state in case of a
fault. If the permissible temperature limit value is reached or an error occurs in the
monitoring device (probe break, probe short-circuit, failure of a component in the
device, error in the software, failure or impermissible value of the supply voltage,
etc.) within the permissible temperature range, the STL50 switches off immediately.
The alarm contact is confirmed, the front-side ALARM LED and the background
lighting of the display illuminate, and the cause of error is shown on the display in
plain text.
A 24 V DC signal for an external alarm is also connected to terminals 17-18.
2.1 Scope of delivery
 Safety temperature limiter STL50 with packaging
 This operating manual
2.2 Features
 Can be used as
STB Safety temperature limiter
ASTB Exhaust gas safety temperature limiter
STW Safety temperature monitor
 Certified according to EN 61508 SIL2
 Pt100 input, 3-wire connection or double thermocouple J, K, N and S
 Programmable temperature limit value and switching hysteresis
 Basic accuracy <0.5 %, ±2 digit
 Reaction time ≤ 0,5 s
 Alarm output 1 relay, SPDT
 Pre-alarm output 1 relay, SPDT
 Analog output 0/4 ... 20mA, 0/2 ... 10V
 Memory function for error message
 Operator lockout (password-protected)
 Case for TS35 DIN rail mounting

GHM Group – Martens
GHM Messtechnik GmbH | Kiebitzhörn 18 | 22885 Barsbüttel | Germany
Phone [phone] | [email protected] | www.ghm-group.de
6
2.3 Brief information
Programming The device is programmed with the buttons on the front
side in combination with the graphic display.
Operating modes The device can be used as:
STB → Maximum or minimum monitoring with catch
Manual reset after fault elimination by pressing the button
on the front side or an externally connected button
ASTB → like before, but with exhaust temperature monitoring
STW → Maximum or minimum monitoring without catch
Automatic reset after return to the permissible range
Switching hysteresis always acts towards a safe range.
Error buffer The last error is stored as plain text and can be viewed
and deleted on the working level.
Temperature probe:
With use of the device in accordance with DIN EN 14597, temperature
sensors that are approved in accordance with DIN EN 14597 must be
used!
2.4 Dimensions
Terminals 21 - 28
Terminals 11 -
Terminals 41 - 48
Terminals 31 - 38
DANGER

7
2.5 Connection diagrams
STL50-1-1R-X-00 STL50-5-1R-X-00
STL50-1-2RAO-X-00 STL50-5-2RAO-X-00

GHM Group – Martens
GHM Messtechnik GmbH | Kiebitzhörn 18 | 22885 Barsbüttel | Germany
Phone [phone] | [email protected] | www.ghm-group.de
8
2.6 Electrical installation
The device may only be installed by an electrician. Compliance with the
national and international regulations for installation of electrical and elec-
tronic systems applicable in the respective country of use is mandatory.
Pt100 input:
The resistance of 4 Ω per line must not be exceeded.
The corresponding line length for copper cable is specified in the table.
The values must be calculated for other line materials and cross-sections.
Maximum line length for copper lines
Line cross-section
Maximum line length
0.14 mm²
32 m
0.25 mm²
58 m
0.5 mm²
116 m
0.75 mm²
174 m
1 mm²
232 m
1.5 mm²
348 m
DANGER

9
3 Controls and functional description
3.1 Operating and display elements
3.2 Operation
The device is operated on 2 levels.
The desired parameter is opened with the button.
Selection within a parameter or adjustment of a value takes place with the and
buttons.
Button combinations (press buttons simultaneously):
+ 1 parameter back
+ parameter is set to “0” or minimum value
19.2°C
Pt100
Limit value 20.0°C
STB max.

GHM Group – Martens
GHM Messtechnik GmbH | Kiebitzhörn 18 | 22885 Barsbüttel | Germany
Phone [phone] | [email protected] | www.ghm-group.de
10
The device initialises after the supply voltage is connected. The device type and
software version appear in the display. After the device is finished initialising, it en-
ters the operating level and the current temperature and all safety-related settings
are displayed. The peak value buffer is displayed by briefly pressing the button.
The configuration level is displayed by pressing and holding the button for 2
seconds. All parameters determining the properties of the device are programmed
here. A password must be entered in order to enter the safety area of the configu-
ration level. If an incorrect password is entered, an error message appears in the
display. The device switches back to the operating level after this message or if no
password is entered. After an incorrect password has been entered three times, the
device enters a safety timeout for 60 minutes. The progress of this safety timeout is
shown in the display. The safety area is accessible with entry of the correct pass-
word. Settings can be made here, which must be protected from unauthorised
change. After the last menu item or if no button is pressed for more than 2 minutes,
the devices switches back to operating level automatically and the current meas-
urement is shown in the display. The configuration level can be exited at any times
by pressing the button for 2 seconds.
Error messages
If errors occur, the messages are shown in clear text on the display. This
simplifies troubleshooting.
Note for commissioning!
The device has standard preconfigured factory settings. Therefore, it
must be adapted to the specific application.
Service
Service of the device is only possible in the factory. Please refer to
chapter 6 Return to manufacturer on page 24.

11
3.3 Operating level
Note: Only the resetting of the peak value buffer is possible on the working level
Display Description
Process display
Only Pt100 Only thermocouple
19.2°C
Pt100
Limit value 20.0°C
STB max.
Type J
STB max.
19.2°C
TC2
TC1
19.1°C
Limit value 20.0°C
19.2°C
Type J
Limit value 20.0°C
STB max.
28.4°C
min.
Peak value display
max.
28.3°C
Reset with ^
Peak value display
Reset with ^
max. 28.4°C
TC2
TC1
min. 28.4°C
max. 28.4°C
max. 28.4°C
No error
Error log memory
Reset with ^
Error log memory display
Deletion of error messages with the button
Switching of the representation for
the actual value display to individual
measurements.
The value that is closer to the value
for STM max. or STB min. is always
displayed.
Peak value display
for minimum and maximum meas-
urement.
Deletion of values with the button
or with each shut-down of the device.

GHM Group – Martens
GHM Messtechnik GmbH | Kiebitzhörn 18 | 22885 Barsbüttel | Germany
Phone [phone] | [email protected] | www.ghm-group.de
12
Note for the display
Parameter only appears with appropriate configuration
Parameter only appears with appropriate device version
3.4 Configuration level
Display Description (entered values are factory settings)
19.2°C
Pt100
Limit value 20.0°C
STB max.
Language
english
> deutsch
Display
°F
> °C
Unit
Display
65%
Contrast
Actuate for 2s
Working level
Language of user guidance
deutsch
english
française
Unit of measure of the display
°C
°F
Contrast of the display
Change of the value within the range 5 ... 100%

13
Display Description (entered values are factory settings)
Security area
0000
Enter password
for safety area
! 0010 !
Change password
Please note
Input
Type K
> Type J
Thermocouple 2x type J
Display
> with
without
decimal place
0.0°C
Sensor correction
Entry of the password for the security level (0010 in condition as delivered)
After an incorrect password has been entered three times, the device
enters a safety timeout for 60 minutes. With the setting 0000 and active
password protection, a jump to the working level takes place.
Change the password
Change the value within the range 0000 ... 9999
Attention:
Write down the password. Resetting to 0010 can only take place in the factory
Input
Type J Double thermocouple Fe-CuNi
Type K Double thermocouple NiCr-Ni
Type N Double thermocouple NiCrSi-NiSi
Type S Double thermocouple Pt10Rh-Pt
Decimal place (only for Pt100 input and double thermocouple type J)
without no decimal place
with one decimal place
Measurement correction
Change of the value in the range -10°C (-10.0°C) ... 10°C (10.0°C)

GHM Group – Martens
GHM Messtechnik GmbH | Kiebitzhörn 18 | 22885 Barsbüttel | Germany
Phone [phone] | [email protected] | www.ghm-group.de
14
Display Description (entered values are factory settings)
Operating mode
STB min.
> STB max.
Safety temp. limiter
20.0°C
Limit value
Alarm output
2.0°C
Hysteresis
Alarm output
40.0°C
Max. Temp. difference
of the thermocouples
Pre-alarm
min.
> OFF
Note: Select operating mode STB for ASTB
Display Operating mode Alarm function
STB max. Safety max
STB min. Temperature limiter; min
STW max. Safety max
STW min. temperature monitor; min
Description:
max: Relay is deactivated when the adjusted limit value is exceeded
min: Relay is deactivated when the adjusted limit value is undercut
Limit value (switching point) alarm output
Change of the value in the corresponding measuring range.
Alarm output hysteresis
Change of the value in the range 1°C (0.1°C) ... 100°C (100.0°C).
Measurement difference of thermocouples
Change of the value in the range 1 °C (1.0°C) ... 5% of final value
of the programmed thermocouple.
Function of the pre-alarm relay
OFF Pre-alarm relay is not used, relay tripped
min. Pre-alarm relay is energised if the alarm value is undercut
max. Pre-alarm relay is energised if the alarm value is exceeded

15
Display Description (entered values are factory settings)
20.0°C
Limit value
pre alarm
2.0°C
Hysteresis
pre alarm
Analog Output
0..20
> OFF
0.0°C
Start
analog output
100.0°C
End
analog output
Pre-alarm relay hysteresis
Change of the value in the range 1°C (0.1°C) ... 100°C (100.0°C).
Alarm value (switching point) of the pre-alarm relay
Change of the value in the corresponding measuring range.
Function of the analog output
OFF
Analog output is switched off
0..20
Analog output 0-20mA and/or 0-10V
4..20
Analog output 4-20mA and/or 2-10V
0..20/22
Analog output 0-20mA and/or 0-10V, in case of error 22mA/11V
4..20/22
Analog output 4-20mA and/or 2-10V, in case of error 22mA/11V
3.6/4..20
Analog output 4-20mA and/or 2-10V, in case of error 3.6mA/1.8V
Start value of the analog output
Change of the value in the range -200°C (-200.0°C) ... 2000°C
(2000.0°C).
End value of the analog output
Change of the value in the range 200°C (-2000.0°C) ... 2000°C
(2000.0°C).

GHM Group – Martens
GHM Messtechnik GmbH | Kiebitzhörn 18 | 22885 Barsbüttel | Germany
Phone [phone] | [email protected] | www.ghm-group.de
16
Display Description (entered values are factory settings)
Display
ON
> AUTO
backlight
Function reset button
> ON
OFF
front side
Parameter lock
ON
> OFF
Configuration level
19.2°C
Pt100
Limit value 20.0°C
STB max.
Background lighting of the display
AUTO Lighting only goes out after only 2 min. if a button is not pressed.
In case of an error and if the relay is switches off, the lighting
switches on and remains active.
ON The lighting is permanently active.
Front-side function reset button
OFF Button disabled
ON Button active
Parameter lock for the configuration level
OFF No parameter lock
ON Parameter locked
Return to the working level

17
3.5 Error messages
Display Description
Suppl. Voltage
too low!
Caution!
Please check
Parameter
locked
Caution!
activated
Incorrect
password
Caution!
1. failed attempt
49min 30s
Sequence
Safety time
Broken
line
Thermocouples
Please check
Measured val.
Thermocouples
Please check
> XXX°C
Measured val.
Thermocouples
Please check
< XXX°C
Short
circuit
Pt100
Please check
The supply voltage does not reach the value that is required for the
device to function safely.
The parameter cannot be changed, because the parameter
lock is activated for the configuration level.
An incorrect password was entered for the security area. The dis-
play returns to password entry after 3 seconds.
.
After an incorrect password has been entered
three times, the device enters a safety timeout for
60 minutes.
A cable interruption is detected at the connection terminals to the
thermocouples. Check connection of the thermocouples.
The measurement exceeds the maximum temperature for
the selected thermocouple.
The measurement undercuts the minimum temperature for
the thermocouple.
A short circuit was detected at the terminals of the Pt100.
Check connection lines and Pt100 probes.

GHM Group – Martens
GHM Messtechnik GmbH | Kiebitzhörn 18 | 22885 Barsbüttel | Germany
Phone [phone] | [email protected] | www.ghm-group.de
18
Error messages
Display Description
Broken
line
Pt100
Please check
Measured val.
Pt100
Please check
> 650°C
Measured val.
Pt100
Please check
< -120°C
Device
temperature
Internal error
Please check
Memory
error
Fatal error
Replace device
Hardware
error
Fatal error
Replace device
Relay
fault
Fatal error
Replace device
A cable interruption was detect at the terminals of the Pt100.
Check connection lines and Pt100 probes.
The measurement exceeds the maximum temperature for Pt100
probes.
The measurement undercuts the minimum temperature for Pt100
probes.
The internal temperature of the device has detected an impermissi-
bly high or low value. Check the installation conditions and envi-
ronmental temperature of the device.
Monitoring of the program- and/or working memory revealed an er-
ror.
The device must be inspected in the factory.
A deviation was detected for an internal voltage.
The device must be inspected in the factory.
An incorrect setting of the relay contact was detected.
The device must be inspected in the factory.

19
3.6 Functional safety
The STL50 safety temperature limiter was developed according to the specifications of the
IEC 61508. This standard describes the functional safety of safety-related programmable
electrical and electronic systems.
The devices is a Class B subsystem with the SIL2 requirement (single-channel). The
safety function of the device relates to the detection and evaluation of the temperature and
the resulting mandatory contact position of the installed relay.
Safe state
The safe state of the device is only provided when the relay is in idle position (closed cur-
rent principle). If the internal diagnostic system recognises an error, the relay switches to
idle position. Therefore, a normally-open contact can be used for integration of the relay
changeover into the monitoring device.
Temperature probe
Connected temperature probes are monitored for cable breaks or short-circuits. With ther-
mocouples, this is only physically possible for double thermocouples. It is not permissible
to use simple thermocouples and connect the inputs in parallel with jumpers. If separate
probe fittings are used, they must be installed next to each other so that they both detect
the same temperature.
In case of faults and errors
If a fault occurs in the system, the cause must be rectified immediately. If the STL50 safety
temperature limiter is decommissioned for this purpose, the process must be safeguarded
in another manner. If there is a device error, we request that you send the device to the
factory with a brief description of the error.
STL50 safety indicators for functional safety
Safety-related output signal
Relay output
Test standard
IEC 61508
Inspection authority
TÜV NORD CERT GmbH
SIL
2
System
Type B
Input
Pt100
Thermocouple
λSD
(rate of detected harmless failures)
1740 FIT
1740 FIT
λSU
(rate of undetected harmless failures)
601 FIT
542 FIT
λDD
(rate of detected dangerous failures)
741 FIT
742 FIT
λDU
(rate of undetected dangerous failures)
127 FIT
105 FIT
(1 FIT = 1 failure / 109 h)
Number of harmless failures (SFF)
96 % 97 %
Average probability of failure (PFDavg)
3.80 x 10-3
2.80 x 10-3
Probability of failure per hour (PFH)
1.27 x 10-7
1.05 x 10-7
Duration of use of safety function
10 Years

GHM Group – Martens
GHM Messtechnik GmbH | Kiebitzhörn 18 | 22885 Barsbüttel | Germany
Phone [phone] | [email protected] | www.ghm-group.de
20
3.7 Functional test
With operation of the device at a higher demand rate, e.g. with process-related frequent activation of the
device, additional functional testing can be omitted in accordance with IEC 61508. This also applies for op-
eration with a low requirement rate, i.e. infrequent activation of the device due to process conditions. The
probability of failure is very low for a service life of 10 years according to SIL2 (see table on page 19).
The temperature probe is replicated with a simulator for a functional test. The inputs can be
connected in parallel for thermocouples.
The test begins with a check of the temperature monitoring. The relay must be active in the good range.
Then a check
- takes place to determine whether the temperature on the display of the STL50 matches the temperature
of the simulator for each test step
- the alarm function when the good temperature range is violated
- the alarm function in case of a probe break (each cable separately) and probe short-circuit.
Correct alarm function of the STL50 is provided if
- the relay is deactivated and the contact switches to rest position,
- the error is shown correctly in plain text on the display,
- the LED alarm on the front of the STL50 illuminates,
- a voltage of 24 V DC is connected to the appropriate terminals for an external alarm.
After the simulator changes the temperature back to the good range, the STL50 functions correctly if the
relay is reactivated, in safety temperature limiter operating mode,
- the relay is not activated until the front RESET button or an external RESET button having been
pressed,
- then the display shows the normal operating data,
- the LED alarm on the front of the STL50 goes out,
- and voltage is no longer connected to the terminals of the external alarm.
In safety temperature limiter operating mode,
- the relay is activated without the front RESET button or an external RESET button having been pressed,
- the display shows the normal operating data,
- the LED alarm on the front of the STL50 goes out;
- and voltage is no longer connected to terminals 17 and 18.
Attention!
If the relay is not deactivated during one of the test steps or temperature and/or causes of error
are not displayed correctly, the STL50 must be sent to the factory for inspection. In the mean-
time, the system must be kept in a safe state by other means.
Special notices!
- The STL50 safety temperature limiter must be installed in a switch cabinet with a protection
rating of at least IP40.
- Strain relief for the connecting cable(s) of the temperature sensor must be provided.
- As protection for the internal device fuse of the STL50, securing the monitoring current circuit with
an external fuse (maximum 1.6 A, medium time lag) is recommended. If the internal fuse is tripped, the
device must be sent to the factory for service!
DANGER