GMI D5090S Instruction Manual

D5090 - 5 A SIL 3 Relay Output Module for NE Load G.M. International ISM0109-16
5 A SIL 3 Relay Output Module for NE Load,
DIN-Rail and Termination Board,
Model D5090S
D5090S
INSTRUCTION & SAFETY MANUAL

2 D5090 - 5 A SIL 3 Relay Output Module for NE Load G.M. International ISM0109-16
General Description: The single channel Relay Output, D5090S is a relay module suitable for the switching of safety related circuits, up to SIL 3 level according to IEC 61508:2010 Ed.2
for high risk industries. It provides isolation between input and output contacts.
Three mutually exclusive (by DIP-Switch programming) monitoring circuits are provided:
1) line input monitoring, to allow DCS/PLC line monitoring function: when enabled, the module permits a wide compatibility towards different DCS/PLC. Driving line pulse testing,
executed by DCS/PLC, is permitted by a dedicated internal circuit, to prevent relay and LED flickering;
2) low voltage input monitoring: when enabled, the module reflects a high impedance state to the control unit when the driving voltage is below the specified threshold;
3) short circuit fault detection: when enabled, it allows DCS/PLC to detect short circuit fault of module.
D5090S provides two NO contacts for normally energized load and a NC contact for service purpose, in order to switch the NE load on both supply lines.
See the following pages for Functional Safety applications with related SIL value.
Mounting on standard DIN-Rail or on customized Termination Boards, in Safe Area / Non Hazardous Location or in Zone 2 / Class I, Division 2 or Class I, Zone 2.
Functional Safety Management Certification:
G.M. International is certified by TUV to conform to IEC61508:2010 part 1 clauses 5-6 for safety related systems up to and included SIL3.
Technical Data
Characteristics
Input: 24 Vdc nom (21.6 to 27.6 Vdc) reverse polarity protected, ripple within voltage limits ≤5 Vpp.
The following monitoring circuits are mutually exclusive:
1) Line input monitoring (DIP-Switch selectable): to allow DCS/PLC line monitoring function (pulse test).
2) Voltage monitoring (DIP-Switch selectable): ≥21.6 Vdc for normal operation, ≤17 Vdc reflects a high impedance (≤10 mA consumption) to the control device.
3) Short circuit fault detection (DIP-Switch selectable): to allow DCS/PLC to detect short circuit fault of module.
Current consumption @ 24 V: 35 mA with relay energized and line input monitoring disabled, 45 mA with relay energized and line input monitoring enabled, typical.
Power dissipation: 0.85 W with 24 V input voltage, relay energized and line input monitoring disabled, 1.1 W with 24 V input voltage, relay energized and line input monitoring
enabled, typical.
Isolation (Test Voltage): Input / All Outputs 2.5 KV ; Out 1 / Out 2: 500V.
Output: 1 voltage free SPDT relay contact identified with outputs: Out 1 (NO contact) terminals 7-11 and Service Load Out (NC contact) terminals 9-10;
1 voltage free SPST relay contact identified with output Out 2 (NO contact) terminals 8-12.
Terminals 7-11 (Out 1) and 8-12 (Out 2) are open when relay is de-energized, closed in energized relay condition.
Service load output (not SIL) at terminals 9-10 is normally close when relay is de-energized, open in energized relay condition.
Contact material: Ag Alloy (Cd free), gold plated.
Contact rating: 5 A 250 Vac 1250 VA, 5 A 250 Vdc 140 W (resistive load), 1 A 24 Vdc, 220 mA 125 Vdc, 110 mA 250 Vdc for UL. Min.Switching current 1 mA.
Contact inrush current: 6 A at 24 Vdc, 250 Vac.
AC / DC Load breaking capacity:
Mechanical / Electrical life: 5 * 106/ 3 * 104operation, typical.
Operate / Release time: 55 / 30 ms, typical.
Frequency response: 10 Hz maximum.
Compatibility:
CE mark compliant, conforms to Directive: 2014/34/EU ATEX, 2014/30/EU EMC, 2014/35/EU LVD, 2011/65/EU RoHS.
Environmental conditions:
Operating: temperature limits – 40 to + 70 °C, relative humidity 95 %, up to 55 °C.
Storage: temperature limits – 45 to + 80 °C.
Max altitude: 2000 m a.s.l.
Safety Description:
ATEX: II 3G Ex ec nC IIC T4 Gc; IECEx / INMETRO: Ex ec nC IIC T4 Gc
UL: NI / I / 2 / ABCD / T4; C-UL: NI / I / 2 / ABCD / T4
FM: NI / I / 2 / ABCD /T4, I / 2 / AEx nA nC / IIC /T4; FMC: NI / I / 2 / ABCD /T4, I / 2 / Ex nA nC / IIC /T4
EAC-EX: 2Ex nA nC IIC T4 Gc X.
CCC: Ex ec nC IIC T4 Gc
UKR TR n. 898: 2ExnAnCIICT4 X.
non-sparking electrical equipment.
-40 °C ≤Ta ≤70 °C.
Approvals:
BVS 10 ATEX E 114 conforms to EN60079-0, EN60079-7, EN60079-15.
IECEx BVS 10.0072 X conforms to IEC60079-0, IEC60079-7, IEC60079-15.
INMETRO DNV 13.0109 X conforms to ABNT NBR IEC60079-0, ABNT NBR IEC60079-7, ABNT NBR IEC60079-15.
UL & C-UL E222308 conforms to UL 61010-1, UL 121201 for UL
and CAN/CSA C22.2 No. 61010-1-12, CSA C22.2 No. 213-17 for C-UL.
FM 3046304 and FMC 3046304C conforms to Class 3600, 3611, 3810, ANSI/ISA-60079-0, ANSI/ISA-60079-15, C22.2 No.142, C22.2 No.213, C22.2 No. 60079-0, C22.2 No. 60079-15.
ЕАЭС RU С-IT.EX01.B.00018/19 conforms to GOST 31610.0, GOST 31610.15.
CCC n. 2020322316000978 conforms to GB/T 3836.1, GB/T 3836.3, GB/T 3834.8
CЦ16.0036 X conforms to ДСТУ 7113, ДСТУ IЕС 60079-15.
TÜV Certificate No. C-IS-236198-04, SIL 3 conforms to IEC61508:2010 Ed.2.
SIL 3 Functional Safety TÜV Certificate conforms to IEC61508:2010 Ed.2, for Management of Functional Safety.
DNV Type Approval Certificate No. TAA00001U0 and KR No.MIL20769-EL002 Certificates for maritime applications.
Mounting: EN/IEC60715 TH 35 DIN-Rail or on customized Termination Board.
Weight: about 125 g.
Connection: by polarized plug-in disconnect screw terminal blocks to accommodate terminations up to 2.5 mm2.
Location: installation in Safe Area/Non Hazardous Locations or Zone 2, Group IIC T4 or Class I, Division 2, Group A,B,C,D, T4 or Class I, Zone 2, Group IIC, T4.
Protection class: IP 20.
Dimensions: Width 12.5 mm, Depth 123 mm, Height 120 mm.
0.20.0
V (V)
I (A)
10
20
30
40
50
100
0.3 0.4 0.5 1 2 3
Resistive
Load
200
4
300
250
0.1 56
DC
resistive
AC
Resistive

3
D5090 - 5 A SIL 3 Relay Output Module for NE LoadG.M. International ISM0109-16
Ordering Information
Front Panel and Features
SIL 3 according to IEC 61508:2010 Ed. 2 for Tproof = 14 / 20 yrs (≤10% / >10 % of total SIF).
PFDavg (1 year) 7.01 E-06, SFF 99.17 % for NE Load.
Systematic capability SIL 3
Installation in Zone 2 / Division 2.
SIL 3 contact for NE load and contact for service purpose.
6 A inrush current at 24 Vdc / 250 Vac.
Line input monitoring in-field DIP Switch selectable.
Driving input voltage monitoring.
Input/Output isolation.
EMC Compatibility to EN61000-6-2, EN61000-6-4, EN61326-1, EN61326-3-1 for safety system.
TÜV Functional Safety Certification.
ATEX, IECEx, UL & C-UL, FM & FM-C, INMETRO, EAC-EX, CCC, UKR TR n. 898, TÜV Certifications.
Type Approval Certificate DNV and KR for maritime applications.
Simplified installation using standard DIN-Rail and plug-in terminal blocks or customized Termination Boards.
Model: D5090S DIN-Rail accessories: Cover and fix MCHP196
CM1 Common pole of Normally Open contact (Out 1)
Terminal block connections
SAFE AREA
NO1 pole of Normally Open contact (Out 2)
CM1 Common pole of Normally Closed contact (Service Load (Not SIL) out)
NC1 pole of Normally Closed contact (Service Load (Not SIL) out)
7
8
9
10
+ Input
1
- Input
2
NO2 pole of Normally Open contact (Out 1)
NO3 pole of Normally Open contact (Out 2)
11
12
7 8
9 10
11 12
12
D5090
7 8
1 2
SIL 3
9 10
STS
11 12

D5090 - 5 A SIL 3 Relay Output Module for NE Load G.M. International ISM0109-16
4
Function Diagram
SAFE AREA, ZONE 2 GROUP IIC T4,
NON HAZARDOUS LOCATIONS, CLASS I, DIVISION 2,
GROUPS A, B, C, D T-Code T4, CLASS I, ZONE 2, GROUP IIC T4
Relay contact shown in de-energized position.
Terminals 7-11 and 8-12 are open; terminals 9-10 are closed.
MODEL D5090S
+
Out 1 (NO contact)
(NO2) 11
(CM1) 7
In
1
2
Service Load Out
Termination
board
connector
Not SIL
Out 2 (NO contact)
(NO1) 8
(NO3) 12
(CM1) 9
(NC1) 10
See the following pages for Functional Safety applications with related SIL value.

5
D5090 - 5 A SIL 3 Relay Output Module for NE LoadG.M. International ISM0109-16
Functional Safety Manual and Applications
Normal state operation De-energized to trip operation
9 - 7
10
11
PLC
Output ON
24 Vdc
NE
Load
SIL 3
12
8
Service
Load
(Not SIL)
- / AC
+ / AC
9 - 7
10
11
PLC
Output OFF
0 Vdc
NE
Load
SIL 3
12
8
Service
Load
(Not SIL)
+ / AC
- / AC
Description:
Input Signal from PLC/DCS is normally High (24 Vdc) and is applied to pins 1-2 in order to Normally Energize (NE) the internal relays.
Input Signal from PLC/DCS is Low (0 Vdc) during “de-energize to trip” operation, in order de-energize the internal relays.
The Load is Normally Energized (NE), therefore its safe state is to be de-energized; the Service Load is normally de-energized, therefore it energizes during
“de-energized to trip” operation.
Disconnection of the NE Load is done on both supply lines.
The following table describes the status (open or closed) of each output contact when the input signal is High or Low.
Safety Function and Failure behavior:
D5090S is considered to be operating in Low Demand mode, as a Type A module, having Hardware Fault Tolerance (HFT) = 0.
In the 1st Functional Safety application, the normal state operation of relay module is energized, with NE (Normally Energized) load.
In case of alarm or request from process, the relay module is de-energized (safe state), de-energizing the load.
The failure behaviour of the relay module is described by the following definitions:
□fail-Safe State: it is defined as the output load being de-energized;
□fail Safe: this failure causes the system to go to the defined fail-safe state without a process demand;
□fail Dangerous: failure mode that does not respond to a demand from the process (i.e. being unable to go to the defined fail-safe state),
so that the output load remains energized.
□fail “No effect”: failure mode of a component that plays a part in implementing the safety function but is neither a safe failure nor a dangerous failure.
When calculating the SFF this failure mode is not taken into account.
□fail “Not part”: failure mode of a component which is not part of the safety function but part of the circuit diagram and is listed for completeness.
When calculating the SFF this failure mode is not taken into account.
Failure rate data: taken from Siemens Standard SN29500.
Failure rate table:
Failure rates table according to IEC 61508:2010 Ed.2 :
PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes ≤10% of total SIF dangerous failures:
PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes >10% of total SIF dangerous failures:
Systematic capability SIL 3.
Operation Input Signal
Pins 1-2
Pins
7/9- 11
Pins
8 - 12
Pins
7/9 - 10
NE Load (SIL3)
Pins 11-12
Service Load
(Not SIL)
Pins 10 — - / AC Supply
Normal High (24 Vdc) Closed Closed Open Energized De-Energized
Trip Low (0 Vdc) Open Open Closed De-Energized Energized
Failure category Failure rates (FIT)
λdd = Total Dangerous Detected failures 0.00
λdu = Total Dangerous Undetected failures 1.60
λsd = Total Safe Detected failures 0.00
λsu = Total Safe Undetected failures 191.40
λtot safe = Total Failure Rate (Safety Function) = λdd + λdu + λsd + λsu 193.00
MTBF (safety function, single channel) = (1 / λtot safe) + MTTR (8 hours) 591 years
λno effect = “No effect” failures 209.60
λnot part = “Not Part” failures 0.00
λtot device = Total Failure Rate (Device) = λtot safe + λno effect + λnot part 402.60
MTBF (device, single channel) = (1 / λtot device) + MTTR (8 hours) 283 years
MTTFS(Total Safe) = 1 / (λsd + λsu) 596 years
MTTFD(Dangerous) = 1 / λdu 71347 years
T[Proof] = 1 year T[Proof] = 14 years
PFDavg = 7.01 E-06 - Valid for SIL 3 PFDavg = 9.81 E-05 - Valid for SIL 3
T[Proof] = 20 years
PFDavg = 1.40 E-04 - Valid for SIL 3
Application D5090S - SIL 3 Load Normally Energized Condition (NE) and Normally Energized Relay,
with interruption of both load supply lines
1)
λsd λsu λdd λdu SFF
0.00 FIT 191.40 FIT 0.00 FIT 1.60 FIT 99.17%

D5090 - 5 A SIL 3 Relay Output Module for NE Load G.M. International ISM0109-16
6
Functional Safety Manual and Applications
Application D5090S - SIL 3 Load Normally Energized Condition (NE) and Normally Energized Relay,
with interruption of only one load supply line
Normal state operation De-energized to trip operation
9 - 7
10
11 PLC
Output ON
24 Vdc
NE
Load
SIL 3
12
8
Service
Load
(Not SIL)
+ / AC
- / AC
9 - 7
10
11 PLC
Output OFF
0 Vdc
NE
Load
SIL 3
12
8
Service
Load
(Not SIL)
+ / AC
- / AC
2)
Description:
Input Signal from PLC/DCS is normally High (24 Vdc) and is applied to pins 1-2 in order to Normally Energize (NE) the internal relays.
Input Signal from PLC/DCS is Low (0 Vdc) during “de-energize to trip” operation, in order de-energize the internal relays.
The Load is Normally Energized (NE), therefore its safe state is to be de-energized; the Service Load is normally de-energized, therefore it energizes during
“de-energized to trip” operation.
Disconnection of the NE Load is done on only one load supply line.
The following table describes the status (open or closed) of each output contact when the input signal is High or Low.
Safety Function and Failure behavior:
D5090S is considered to be operating in Low Demand mode, as a Type A module, having Hardware Fault Tolerance (HFT) = 0.
In the 2nd Functional Safety application, the normal state operation of relay module is energized, with NE (Normally Energized) load.
In case of alarm or request from process, the relay module is de-energized (safe state), de-energizing the load.
The failure behaviour of the relay module is described by the following definitions:
□fail-Safe State: it is defined as the output load being de-energized;
□fail Safe: this failure causes the system to go to the defined fail-safe state without a process demand;
□fail Dangerous: failure mode that does not respond to a demand from the process (i.e. being unable to go to the defined fail-safe state),
so that the output load remains energized.
□fail “No effect”: failure mode of a component that plays a part in implementing the safety function but is neither a safe failure nor a dangerous failure.
When calculating the SFF this failure mode is not taken into account.
□fail “Not part”: failure mode of a component which is not part of the safety function but part of the circuit diagram and is listed for completeness.
When calculating the SFF this failure mode is not taken into account.
Failure rate data: taken from Siemens Standard SN29500.
Failure rate table:
Failure rates table according to IEC 61508:2010 Ed.2 :
PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes ≤10% of total SIF dangerous failures:
PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes >10% of total SIF dangerous failures:
Systematic capability SIL 3.
Operation Input Signal
Pins 1-2
Pins
7/9- 11
Pins
8 - 12
Pins
7/9 - 10
NE Load (SIL3)
Pins 8 — - / AC Supply
Service Load (Not SIL)
Pins 10 — - / AC Supply
Normal High (24 Vdc) Closed Closed Open Energized De-Energized
Trip Low (0 Vdc) Open Open Closed De-Energized Energized
Failure category Failure rates (FIT)
λdd = Total Dangerous Detected failures 0.00
λdu = Total Dangerous Undetected failures 1.60
λsd = Total Safe Detected failures 0.00
λsu = Total Safe Undetected failures 191.40
λtot safe = Total Failure Rate (Safety Function) = λdd + λdu + λsd + λsu 193.00
MTBF (safety function, single channel) = (1 / λtot safe) + MTTR (8 hours) 591 years
λno effect = “No effect” failures 209.60
λnot part = “Not Part” failures 0.00
λtot device = Total Failure Rate (Device) = λtot safe + λno effect + λnot part 402.60
MTBF (device, single channel) = (1 / λtot device) + MTTR (8 hours) 283 years
MTTFS(Total Safe) = 1 / (λsd + λsu) 596 years
MTTFD(Dangerous) = 1 / λdu 71347 years
λsd λsu λdd λdu SFF
0.00 FIT 191.40 FIT 0.00 FIT 1.60 FIT 99.17%
T[Proof] = 1 year T[Proof] = 14 years
PFDavg = 7.01 E-06 - Valid for SIL 3 PFDavg = 9.81 E-05 - Valid for SIL 3
T[Proof] = 20 years
PFDavg = 1.40 E-04 - Valid for SIL 3

7
D5090 - 5 A SIL 3 Relay Output Module for NE LoadG.M. International ISM0109-16
The proof test shall be performed to reveal dangerous faults which are undetected by diagnostic. This means that it is necessary to specify how dangerous undetected faults, which
have been noted during the FMEDA, can be revealed during proof test. The Proof test consists of the following steps:
Testing procedure at T-proof
Steps Action
1Bypass the safety-related PLC or take other appropriate action to avoid a false trip when removing the unit for test.
2For the single channel, verify the input-to-output functionality:
the output load is normally energized by supplying the input channel, while shutdown of the input channel de-energizes the load (safe state).
The channel functionality must be verified for a min to max input voltage change (21.6 to 27.6 Vdc).
In addition, the use of three relays for the single output channel, where the contacts are connected in series, requires to control the single coil by means of
DIP-switches (n°1, 3, 5) and to check the ohmic continuity of the contacts, as described in the following procedure.
1. Do not supply the input channel (terminals “1”-“2”) of the unit under test and verify that the ohmic continuity at the Out 1 and Out 2 contacts (terminals
“7”-“11” and “8”-“12”) is absent (i.e. both the Out 1 contact (series connection of two relay contacts) and the Out 2 contact are open: 1st requisite is
verified). For Out 1 contact, this condition could also be true if only one of two relay contacts in series is open and other is blocked (for welding) into
closed or open position: this will be verified by testing the channel when input is supplied, as described in the point 3 of the procedure.
Instead, the presence of ohmic continuity at the Out 1 implies that both relay contacts in series are blocked (for welding) into closed position, while
the presence of ohmic continuity at the Out 2 implies that the relay contact is blocked (for welding) into closed position.
2. Supply the input channel (terminals “1”-“2”) of the unit under test and verify that the ohmic continuity at the Out 1 and Out 2 contacts (terminals “7”-“11”
and “8”-“12”) is present (i.e. both the Out 1 contact (series connection of two relay contacts) and the Out 2 contact are closed: 2nd requisite is verified).
The absence of ohmic continuity at the Out 1 contact implies that one of two relay contacts in series is blocked (for welding) into open position: this could
only be verified disassembling and individually testing each of two relay contacts. Instead, the absence of ohmic continuity at the Out 2 contact implies
this relay contact is blocked (for welding) into open position.
3. Always supplying the input channel (terminals “1”-“2”) of the unit under test, to verify if one of two relay contacts in series (Out 1) is blocked (for welding)
into closed position, use internal DIP-switches (n°1 and 3) to put in short circuit one relay coil at a time (starting with the 1st coil by DIP-switch n°1, then
going on with the 2nd one by DIP-switch n°3), verifying that the ohmic continuity is always absent between terminals “7”-“11”. The presence of ohmic
continuity implies that a relay contact (the only one with de-energized coil) is blocked (for welding) into closed position.
3Remove the bypass from the safety-related PLC or restore normal operation inserting the unit.
This test reveals almost 99% of all possible Dangerous Undetected failures in the relay module.
Warning
Operation
D5090S relay module is suitable for the switching of safety related circuits, providing isolation between the input and output contacts.
D5090S provides two NO contacts for normally energized load and a NC contact for service purpose, in order to switch the NE load on both supply lines.
See the previous pages for Functional Safety applications with related SIL value.
A “RELAY STATUS” yellow led lights when input is powered, showing that relay is energized.
Installation
D5090 series are relay output module housed in a plastic enclosure suitable for installation on EN/IEC60715 TH 35 DIN-Rail or on customized Termination Board.
D5090 series can be mounted with any orientation over the entire ambient temperature range.
Electrical connection are accommodated by polarized plug-in removable screw terminal blocks which can be plugged in/out into a powered unit without suffering or causing any damage
(for Zone 2 installations check the area to be nonhazardous before servicing). Connect only one individual conductor per each clamping point, use conductors up to 2.5 mm²
(13 AWG) and a torque value of 0.5-0.6 Nm. For USA and Canada installations, use only cables that are suitable for a temperature of at least 85°C. The wiring cables have to be
proportionate in base to the current and the length of the cable.
In case of installation in zone 2, the connecting cables of non-intrinsically safe circuits must be safely routed in a cable duct or similar. The distance between the pluggable connection
terminal and the cable duct should not exceed 500 mm cable length.
On the section “Function Diagram” and enclosure side a block diagram identifies all connections.
Identify the function and location of each connection terminal using the wiring diagram on the corresponding section, as an example:
Connect positive input at terminal “1” and negative input at “2”.
Connect positive or AC load supply line to CM1 Common pole (terminal “7” (for SIL 3 NE load) or “9” (for Not SIL Service Load)).
Connect SIL 3 Normally Energized (NE) Load at terminal “11” and “12”.
Connect negative or AC load supply line at terminal “8” (for SIL 3 NE load).
Connect Not SIL Service Load at terminal “10” and to negative or AC load supply line.
Installation and wiring must be in accordance to the relevant national/international installation standards (e.g. EN/IEC60079-14 Electrical apparatus for explosive gas atmospheres -Part
14: Electrical installations in hazardous areas (other than mines)), make sure that conductors are well isolated from each other and do not produce any unintentional connection.
Connect load relay contacts checking the load rating to be within the contact maximum rating (5 A 250 Vac 1250 VA, 5 A 250 Vdc 140 W resistive load).
To prevent relay contacts from damaging, connect an external protection (fuse or similar), chosen according to the relay breaking capacity diagram from installation
instructions.
The enclosure provides, according to EN60529, an IP20 minimum degree of protection (or similar to NEMA Standard 250 type 1). The equipment shall only be used in an area of at least
pollution degree 2, as defined in IEC 60664-1. When installed in EU Zone 2, the unit shall be installed in an enclosure that provides a minimum ingress protection of IP54 in accordance
with IEC 60079-0. When installed in a Class I, Zone 2 Hazardous Location, the unit shall be mounted in a supplemental AEx or Ex enclosure that provides a degree of protection not less
than IP54 in accordance with UL/CSA 60079-0. When installed in a Class I, Division 2 Hazardous Location, the unit shall be mounted in a supplemental enclosure that provides a degree
of protection not less than IP54. The enclosure must have a door or cover accessible only by the use of a tool. The end user is responsible to ensure that the operating temperature of
the module is not exceeded in the end use application. Units must be protected against dirt, dust, extreme mechanical (e.g. vibration, impact and shock) and thermal stress, and casual
contacts. If enclosure needs to be cleaned use only a cloth lightly moistened by a mixture of detergent in water.
Electrostatic Hazard: to avoid electrostatic hazard, the enclosure of D5090 series must be cleaned only with a damp or antistatic cloth.
Any penetration of cleaning liquid must be avoided to prevent damage to the unit. Any unauthorized card modification must be avoided.
All circuits connected to D5090 series must comply with the overvoltage category II (or better) according to EN/IEC60664-1.
Warning: de-energize main power source (turn off power supply voltage) and disconnect plug-in terminal blocks before opening the enclosure to avoid electrical shock
when connected to live hazardous potential.
D5090 series are electrical apparatus installed on standard EN/IEC60715 TH 35 DIN-Rail located in Safe Area/Non Hazardous Locations or Zone 2, Group IIC T4 or Class I, Division 2,
Group A, B, C, D, T4 Hazardous Area within the specified operating temperature limits Tamb - 40 to +70 °C.
D5090 series must be installed, operated and maintained only by qualified personnel, in accordance to the relevant national/international installation standards (e.g. IEC/EN60079-14
Electrical apparatus for explosive gas atmospheres - Part 14: Electrical installations in hazardous areas (other than mines)), following the established installation rules. De-energize
power source (turn off power supply voltage) before plug or unplug the terminal blocks when installed in Hazardous Area or unless area is known to be nonhazardous.
Warning: substitution of components may impair suitability for Zone 2/Division 2. Avertissement: la substitution des composants peut nuire à l’aptitude à la Zone 2/Div. 2.
Explosion Hazard: to prevent ignition of flammable atmospheres, disconnect power before servicing or unless area is known to be nonhazardous. Danger d'Explosion: pour
éviter l’inflammation d’atmosphères inflammables, débrancher l’alimentation avant l’entretien ou à moins que région est connue pour être non dangereuse.
Warning: de-energize main power source (turn off power supply voltage) and disconnect plug-in terminal blocks before opening the enclosure to avoid electrical shock
when connected to live hazardous potential. Avertissement: débrancher l’alimentation (couper la tension d'alimentation) et les blocs de jonction enfichables avant d’ouvrir
le boîtier pour éviter les chocs électriques lorsqu’ils sont connectés à un potentiel dangereux.
Failure to properly installation or use of the equipment may risk to damage the unit or severe personal injury.
The unit cannot be repaired by the end user and must be returned to the manufacturer or his authorized representative. Any unauthorized modification must be avoided.

D5090 - 5 A SIL 3 Relay Output Module for NE Load G.M. International ISM0109-16
8
Start-up
Before powering the inputs of unit check that all wires are properly connected, also verifying their polarity. Check conductors for exposed wires that could touch each other causing
dangerous unwanted shorts. Enabling input, the “RELAY STATUS” yellow led must be lit and load circuit must be energized because relay output contacts (Out 1 and Out 2) are closed.
Indeed, disabling input, the “RELAY STATUS” yellow led must be turned off and load circuit must be de-energized because relay output contacts (Out 1 and Out 2) are open.
Configuration
An eight position DIP Switch is located on component side of pcb in order to set four mutually exclusive configurations:
1) line input monitoring, to allow DCS/PLC line input monitoring function (driving line pulse testing);
2) low voltage input monitoring (UVLO—under voltage lock out): module reflects a high impedance state to the control unit when the driving voltage is below the specified threshold;
3) short circuit fault detection: it allows DCS/PLC to detect short circuit fault of module;
4) T-proof relay testing.
1) line input monitoring:
WARNING: after T-proof test, dip-switch 1-3-5 must be set to “OFF” position for normal operation.
2) low voltage input monitoring:
3) short circuit fault detection:
4) T-proof relay testing:
DIP switch configurations:
ON
12345678
ON
OFF OFF OFF OFF OFF OFF ON ON
12345678
ON
OFF OFF OFF OFF OFF OFF ON OFF
12345678
ON
OFF ON OFF ON OFF ON ON ON
T-proof relays enable
135
135
Normal Operation
ON ON
OFF
ON
OFFOFF
T-proof relays (dip1 = relay1;
dip3 = relay2; dip5 = relay3)
12345678
ON
ON OFF ON OFF ON OFF ON ON
Please, see next page for testing procedure at T-proof.
This is factory settings