GMI D5294S Instruction Manual

D5294 - 5 A SIL 3 NO contact Relay Out Module for NE or F&G/ND Load with full diagnostic and Modbus G.M. International ISM0123-14
5 A SIL 3 NO contact Relay Output Module
for NE or F&G/ND Load,
with full diagnostic and Modbus, DIN-Rail,
Power Bus and Termination Board, Model D5294S
D5294S
INSTRUCTION & SAFETY MANUAL

2 D5294 - 5 A SIL 3 NO contact Relay Out Module for NE or F&G/ND Load with full diagnostic and Modbus G.M. International ISM0123-14
Technical Data
Characteristics
Supply: 24 Vdc nom (21.6 to 27.6 Vdc) reverse polarity protected, ripple within voltage limits 5 Vpp, 2 A time lag fuse internally protected.
Current consumption @ 24 V: 40 mA typical, with channel de-energized and no fault.
Power dissipation: 1 W typical.
Isolation (Test Voltage): Output/Input 2.5 KV; Output/Supply 2.5 KV; Output/Fault Outputs 2.5 KV; Output/RS485 Modbus 2.5 KV;
Input/Supply 500 V; Input/Fault Output 1 500 V; Input/Fault Output 2 2.5 KV; Input/RS485 Modbus 500 V; Supply/Fault Output 1 500 V;
Supply/Fault Output 2 2.5 KV; Supply/RS485 Modbus 500 V.
Input: 24 Vdc nom (21.6 to 27.6 Vdc) reverse polarity protected, ripple within voltage limits 5 Vpp.
Current consumption @ 24 V: 40 mA (with mirror and no fault).
Power dissipation @ 24 V: 1 W (with mirror and no fault).
Output: voltage free 2+2 SPST relay contact (2 paralleled contacts in series) at terminals 13-15 and 14-16, close when relay energized, open in de-energized condition.
Contact material: Ag Alloy (Cd free), gold plated.
Contact rating: 5 A 250 Vac 1250 VA, 5 A 250 Vdc 140 W (resistive load). Min.switching current 1 mA.
Contact inrush current: 6 A at 24 Vdc, 250 Vac.
Mechanical / Electrical life: 5 * 106/ 3 * 104operation, typical.
Operate / Release time: 8 / 4 ms typical.
Bounce time NO / NC contact: 3 / 8 ms, typical.
Frequency response: 10 Hz maximum.
Fault detection: load and line short/open circuit monitoring
Short output detection: programmable load resistance (5 to 49 Ktypical).
Open output detection: programmable load resistance (5 to 49 Ktypical).
Fault signalling: voltage free NE 1 + 1 SPST relay contacts (closed in normal status),
output de-energized (contacts opened) in fault condition. Fault contact can be reversed via software.
Fault 1 output rating: 500 mA 30 Vac 15 VA, 500 mA 50 Vdc 25 W (resistive load).
Fault 2 output rating: 3 A 250 Vac 750 VA, 3 A 125 Vdc 120 W (resistive load).
Response time: 3/4 sec typical.
Modbus Output: measure data, load and line diagnostic monitoring. Modbus RTU protocol up to 115.2 Kbit/s with RS-485
connection on terminal blocks and Power Bus connector.
Terminating impedance: 100 software selectable,
Transmission speed: 4.8, 9.6, 19.2, 38.4, 57.6, 115.2 Kbit/s.
Transmission cable length: 1200 m up to 93.75 Kbit/s, 1000 m up to 115.2 Kbit/s.
Compatibility:
CE mark compliant, conforms to Directive:
2014/34/EU ATEX, 2014/30/EU EMC, 2014/35/EU LVD, 2011/65/EU RoHS.
Environmental conditions:
Operating: temperature limits – 40 to + 70 °C, relative humidity 95 %, up to 55 °C.
Storage: temperature limits - 45 to + 80 °C.
Safety Description:
ATEX: II 3G Ex nA nC IIC T4 Gc
IECEx / INMETRO / NEPSI: Ex nA nC IIC T4 Gc
FM: NI / I / 2 / ABCD /T4, I / 2 / AEx nA nC / IIC /T4
FMC: NI / I / 2 / ABCD /T4, I / 2 / Ex nA nC / IIC /T4
EAC-EX: 2ExnAnCIICT4 X.
UKR TR n. 898: 2ExnAnCIICT4 X.
non-sparking electrical equipment. -40 °C Ta 70 °C.
Approvals:
BVS 10 ATEX E 114 conforms to EN60079-0, EN60079-15.
IECEx BVS 10.0072 X conforms to IEC60079-0, IEC60079-15
INMETRO DNV 13.0109 X conforms to ABNT NBR IEC60079-0, ABNT NBR IEC60079-15.
UL & C-UL E477485 conforms to ANSI/UL508
FM 3046304 and FMC 3046304C conforms to Class 3600, 3611, 3810, ANSI/ISA-60079-0, ANSI/ISA-60079-15, C22.2 No.142, C22.2 No.213, C22.2 No. 60079-0, C22.2 No. 60079-15.
C-IT.ME92.B.00206 conforms to GOST 30852.0, 30852.14.
C16.0036 X conforms to  7113,  I 60079-15.
GYJ14.1406X conforms to GB3836.1, GB3836.8.
TUV Certificate No. C-IS-236198-04, SIL 3 conforms to IEC61508:2010 Ed. 2.
TÜV Certificate No. C-IS-236198-09, SIL 3 Functional Safety Certificate conforms to IEC61508:2010 Ed.2, for Management of Functional Safety.
SIL 2 conforms to IEC 61511 for Line and Load Diagnostic Functionalities (Pending).
DNV Type Approval Certificate No.A-13625 and KR No.MIL20769-EL002 Certificates for maritime applications.
Patent No. 0001406495 , released on 28/02/2014, valid for 20 years.
Mounting: T35 DIN-Rail according to EN50022, with or without Power Bus or on customized Termination Board.
Weight: about 195 g.
Connection: by polarized plug-in disconnect screw terminal blocks to accommodate terminations up to 2.5 mm2.
Location: installation in Safe Area/Non Hazardous Locations or Zone 2, Group IIC T4 or Class I, Division 2, Group A,B,C,D, T4 or Class I, Zone 2, Group IIC, T4.
Protection class: IP 20.
Dimensions: Width 22.5 mm, Depth 123 mm, Height 120 mm.
General Description: The The D5294S is a relay module suitable for the switching of safety related circuits, up to SIL 3 level according to IEC 61508:2010 Ed. 2 for high risk industries.
It provides isolation between input and output contacts. A wide compatibility towards different DCS/PLC is guaranteed: driving line pulse testing, executed by DCS/PLC, is permitted by
a dedicated internal circuit, to prevent relay and LED flickering. Internal relay coil short circuit is detected by the module. D5294S has 2+2 SPST relay contacts connected in parallel
and then in series to avoid spurious trips and to increase availability (see function diagram). High availability SIL 3 Safety Function for NE load or F&G / ND load is available at Terminal
Blocks 13-14. When the driving signal is low (0 Vdc), the relay is de-energized, contacts at terminals 13-15 and 14-16 are open and load is de-energized. When the driving signal is
high (24 Vdc), the relay is energized, contacts at terminals 13-15 and 14-16 are closed, the load is energized. Load is isolated from supply on both polarities: +/AC, -/AC.
Load and Line Diagnostic: Line and load short/open circuit detection is provided, with solenoid resistance measurement, even in presence of series connected diodes.
A patented proprietary resistance measuring technique performs the load short and open circuit diagnosis in de-energized load status, for DC or AC supply systems. Load RMS voltage
(before and after its energization) and current are measured by the module. Load voltage, current and resistance can automatically be acquired from field. User configurable limits set
the minimum and maximum values of load resistance, supply voltage (DC or AC) and load current. Earth leakage detection on both AC phases is available in de-energized load condi-
tion. The fault in the field is directly mirrored to the PLC DO: few systems may exceptionally require an external resistor at terminals 7 and 8. All diagnostic conditions, that detect a fault
on line and load, open the fault relay contacts and are also available from a RS485 Modbus output to identify any specific fault. Diagnostic functions with fault relay NO contacts and
RS485 Modbus output are SIL 2 rated according to IEC 61511. Mounting on standard DIN-Rail, with or without Power Bus, or on customized Termination Boards, in Safe Area / Non
Hazardous Location or in Zone 2 / Class I, Division 2 or Class I, Zone 2.
Functional Safety Management Certification:
G.M. International is certified by TUV to conform to IEC61508:2010
part 1 clauses 5-6 for safety related systems up to and included SIL3.
The module is fully programmable to set the operation parameters from PC by the GM Pocket Portable Adapter PPC5092 via USB serial line and SWC5090 Configurator software.
Measured values and diagnostic alarms can be read on both serial configuration or Modbus output line.
Available diagnostic functions:
Programming
DC Load breaking capacity:
FSM
SIL 3
Load status Load voltage Load open
circuit
Load short
circuit
Load to earth
leakage
Internal coil
short
OFF PF PF PF PF
ON PF PF PF F
F = available function
PF = available function with programmable thresholds
0.20.0
V (V)
I (A)
10
20
30
40
50
100
0.3 0.4 0.5 1 2 3
Resistive
Load
200
4
300
250
0.1 56
DC
resistive
AC
Resistive
5A
2A
60°C 70°C
Tamb
I (contact rating)

3
D5294 - 5 A SIL 3 NO contact Relay Out Module for NE or F&G/ND Load with full diagnostic and ModbusG.M. International ISM0123-14
Ordering information
Front Panel and Features
SIL 3 according to IEC 61508:2010 Ed. 2 for Tproof = 13 / 20 yrs (10% / >10 % of total SIF) for NE Load,
with PFDavg (1 year) 7.55 E-06, SFF 99.29%
SIL 3 according to IEC 61508:2010 Ed. 2 for Tproof = 6 / 20 yrs (10% / >10 % of total SIF) for F&G/ND Load,
with PFDavg (1 year) 1.49 E-05, SFF 97.52%
SIL 2 according to IEC 61511 for Tproof = 1 / 5 yrs (10% / >10 % of total SIF) for diagnostic with fault relay NO contact,
with PFDavg (1 year) 5.86 E-04, SFF 70.54%
SIL 2 according to IEC 61511 for Tproof = 2 / 10 yrs (10% / >10 % of total SIF) for diagnostic with RS485 Modbus out,
with PFDavg(1 year) 3.85 E-04, SFF 73.82%
Systematic capability SIL 3.
Installation in Zone 2 / Division 2.
Compatible with DCS/PLC pulse testing.
Internal relay coil short circuit detection.
Line and Load short/open circuit detection.
The fault in the field is directly mirrored to the PLC DO.
Solenoid resistance measurement even in presence of serial connected diodes (patented resistance measuring technique).
RMS voltage (before and after load energization) and load current measurement.
Automatic acquisition of voltage, current and load resistance values.
Earth leakage detection on both ac phases in de-energized load condition.
5 A high availability SIL 3 contacts for NE or F&G/ND load.
6 A inrush current at 24 Vdc / 250 Vac.
Input/Output/Supply isolation.
EMC Compatibility to EN61000-6-2, EN61000-6-4, EN61326-1, EN61326-3-1 for safety system.
ATEX, IECEx, UL & C-UL, FM & FM-C, INMETRO, EAC-EX, UKR TR n. 898, NEPSI, TÜV Certifications.
TÜV Functional Safety Certification.
Type Approval Certificate DNV and KR for maritime applications.
Simplified installation using standard DIN-Rail and plug-in terminal blocks, with or without Power Bus, or customized Termination Boards.
Model: D5294S Power Bus and DIN-Rail accessories:
Connector JDFT050 Cover and fix MCHP196
Terminal block male MOR017 Terminal block female MOR022
Operating parameters are programmable from PC by the GM Pocket Portable Adapter
PPC5092 via USB serial line and SWC5090 Configurator software.
Terminal block connections
4 3 2 1
8 7 6 5
12 11 10 9
13 14 15 16
21 22 23 24
(SIL 3) + Output NE Load or F&G/ND Load
SAFE AREA
(SIL 3) - Output NE Load or F&G/ND Load
+ Load Power DC/AC
13
14
15
+ Input
1
- Input
2
Fault Output 1 (30 V, 500 mA)
3
Fault Output 1 (30 V, 500 mA)
4
- Load Power DC/AC
16
Earth
Not used
Not used
21
22
23
A- Modbus Input/Output RS485
5
B+ Modbus Input/Output RS485
6
(Optional external resistor)
7
(Optional external resistor)
8
Not used
24
+ Power Supply 24 Vdc
9
- Power Supply 24 Vdc
10
Fault Output 2 (250 V, 3 A)
11
Fault Output 2 (250 V, 3 A)
12

4 D5294 - 5 A SIL 3 NO contact Relay Out Module for NE or F&G/ND Load with full diagnostic and Modbus G.M. International ISM0123-14
Function Diagram
SAFE AREA, ZONE 2 GROUP IIC T4,
NON HAZARDOUS LOCATIONS, CLASS I, DIVISION 2,
GROUPS A, B, C, D T-Code T4, CLASS I, ZONE 2, GROUP IIC T4
All relay contacts are shown
in de-energized position
To prevent relay contacts from damaging, connect an external protection (fuse or similar),
chosen according to the relay breaking capacity diagram.
MODEL D5294S
+ 15
- 16
+ 13
Load Power DC/AC 11
12
1
2
9 +
10 -
3
4
- 14
(SIL 3) Out
21
Power and
Fault Bus
+
-
F
Modbus RS485
for diagnostic
A-B+
Load and
Line
Diagnostic
Supply 24 Vdc
In
+
Fault Out 2
(250 V, 3 A)
A -
B +
MODBUS
IN/OUT RS485
Fault Out 1
(30 V, 500 mA)
Termination
board
connector
Modbus
RS485 7
8
5
6
NE or F&G/ND Load
external
resistor
Optional
(SIL 2)
(SIL 2)
(SIL 2)
(SIL 2)
(SIL 2)
for Modbus RS485

5
D5294 - 5 A SIL 3 NO contact Relay Out Module for NE or F&G/ND Load with full diagnostic and ModbusG.M. International ISM0123-14
Functional Safety Manual and Applications
Description:
Input Signal from PLC/DCS is normally High (24 Vdc) and is applied to pins 1-2 in order to Normally Energize (NE) the internal relays.
Input Signal from PLC/DCS is Low (0 Vdc) during “de-energized to trip” operation, in order to de-energize the internal relays.
The Load is Normally Energized (NE), therefore its safe state is to be de-energized.
Disconnection of the NE Load is done on both supply lines.
The following table describes the status (open or closed) of each output contact when the input signal is High or Low.
Safety Function and Failure behavior:
D5294S is considered to be operating in Low Demand mode, as a Type A module, having Hardware Fault Tolerance (HFT) = 0.
In the 1st Functional Safety application, the normal state operation of relay module is energized, with NE (Normally Energized) load.
In case of alarm or request from process, the relay module is de-energized (safe state), de-energizing the load.
The failure behaviour of the relay module is described by the following definitions:
fail-Safe State: it is defined as the output load being de-energized;
fail Safe: this failure causes the system to go to the defined fail-safe state without a process demand;
fail Dangerous: failure mode that does not respond to a demand from the process (i.e. being unable to go to the defined fail-safe state),
so that the output load remains energized.
fail “No effect”: failure mode of a component that plays a part in implementing the safety function but is neither a safe failure nor a dangerous failure;
When calculating the SFF this failure mode is not taken into account.
fail “Not part”: failure mode of a component which is not part of the safety function but part of the circuit diagram and is listed for completeness;
When calculating the SFF this failure mode is not taken into account.
Failure rate date: taken from Siemens Standard SN29500.
Failure rate table:
Failure rates table according to IEC 61508:2010 Ed.2 :
PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes 10% of total SIF dangerous failures:
PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes >10% of total SIF dangerous failures:
Systematic capability SIL 3.
Operation Input Signal
Pins 1-2
Pins
15 - 13
Pins
16 - 14
NE Load (SIL3)
Pins 13 - 14
Normal High (24 Vdc) Closed Closed Energized
Trip Low (0 Vdc) Open Open De-Energized
Failure category Failure rates (FIT)
dd = Total Dangerous Detected failures 0.00
du = Total Dangerous Undetected failures 1.72
sd = Total Safe Detected failures 0.00
su = Total Safe Undetected failures 239.20
λtot safe = Total Failure Rate (Safety Function) = λdd + λdu + λsd + λsu 240.92
MTBF (safety function, single channel) = (1 / λtot safe) + MTTR (8 hours) 473 years
no effect = “No effect” failures 187.08
not part = “Not Part” failures 791.79
λtot device = Total Failure Rate (Device) = λtot safe + λno effect + λnot part 1219.79
MTBF (device, single channel) = (1 / λtot device) + MTTR (8 hours) 93 years
T[Proof] = 1 year T[Proof] = 13 years
PFDavg = 7.55 E-06 - Valid for SIL 3 PFDavg = 9.81 E-05 - Valid for SIL 3
T[Proof] = 20 years
PFDavg = 1.51 E-04 - Valid for SIL 3
1) Application for D5294S - SIL 3 for NE Load
- / AC
+ / AC
PLC
Output ON
24 Vdc
- / AC
+ / AC
PLC
Output OFF
0 Vdc
Normal state operation De-energized to trip operation
Load
13
15
16
14
Load
13
15
16
14
λsd λsu λdd λdu SFF
0.00 FIT 239.20 FIT 0.00 FIT 1.72 FIT 99.29%

6 D5294 - 5 A SIL 3 NO contact Relay Out Module for NE or F&G/ND Load with full diagnostic and Modbus G.M. International ISM0123-14
Functional Safety Manual and Applications
Description:
Input Signal from PLC/DCS is normally Low (0 Vdc) and is applied to pins 1-2 in order to Normally De-energize (ND) the internal relays.
Input Signal from PLC/DCS is High (24 Vdc) during “energized to trip” operation, in order to energize the internal relays.
The Load is Normally De-energized (ND), therefore its safe state is to be energized.
Disconnection of the F&G/ND Load is done on both supply lines.
The following table describes the status (open or closed) of each output contact when the input signal is High or Low.
Safety Function and Failure behavior:
D5294S is considered to be operating in Low Demand mode, as a Type A module, having Hardware Fault Tolerance (HFT) = 0.
In the 2nd Functional Safety application, the normal state operation of relay module is de-energized, with ND (Normally De-energized) load.
In case of alarm or request from process, the relay module is energized (safe state), energizing the load.
The failure behaviour of the relay module is described by the following definitions:
fail-Safe State: it is defined as the output load being energized;
fail Safe: this failure causes the system to go to the defined fail-safe state without a process demand;
fail Dangerous: failure mode that does not respond to a demand from the process (i.e. being unable to go to the defined fail-safe state),
so that the output load remains de-energized.
fail “No effect”: failure mode of a component that plays a part in implementing the safety function but is neither a safe failure nor a dangerous failure;
When calculating the SFF this failure mode is not taken into account.
fail “Not part”: failure mode of a component which is not part of the safety function but part of the circuit diagram and is listed for completeness;
When calculating the SFF this failure mode is not taken into account.
Failure rate date: taken from Siemens Standard SN29500.
Failure rate table:
Failure rates table according to IEC 61508:2010 Ed.2 :
PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes 10% of total SIF dangerous failures:
PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes >10% of total SIF dangerous failures:
Systematic capability SIL 3.
Operation Input Signal
Pins 1-2
Pins
15 - 13
Pins
16 - 14
F&G/ND Load (SIL3)
Pins 13 - 14
Normal Low (0 Vdc) Open Open De-Energized
Trip High (24 Vdc) Closed Closed Energized
Failure category Failure rates (FIT)
dd = Total Dangerous Detected failures 0.00
du = Total Dangerous Undetected failures 3.40
sd = Total Safe Detected failures 0.00
su = Total Safe Undetected failures 133.92
λtot safe = Total Failure Rate (Safety Function) = λdd + λdu + λsd + λsu 137.32
MTBF (safety function, single channel) = (1 / λtot safe) + MTTR (8 hours) 831 years
no effect = “No effect” failures 290.68
not part = “Not Part” failures 791.79
λtot device = Total Failure Rate (Device) = λtot safe + λno effect + λnot part 1219.79
MTBF (device, single channel) = (1 / λtot device) + MTTR (8 hours) 93 years
T[Proof] = 1 year T[Proof] = 6 years
PFDavg = 1.49 E-05 - Valid for SIL 3 PFDavg = 8.95 E-05 - Valid for SIL 3
T[Proof] = 20 years
PFDavg = 2.98 E-04 - Valid for SIL 3
2) Application for D5294S - SIL 3 for F&G/ND Load
Load
13
15
- / AC
+ / AC
PLC
Output OFF
0 Vdc
- / AC
+ / AC
PLC
Output ON
24 Vdc
Normal state operation Energized to trip operation
16
14
Load
13
15
16
14
λsd λsu λdd λdu SFF
0.00 FIT 133.92 FIT 0.00 FIT 3.40 FIT 97.52%

7
D5294 - 5 A SIL 3 NO contact Relay Out Module for NE or F&G/ND Load with full diagnostic and ModbusG.M. International ISM0123-14
Configuration
For configuration of T-proof relays testing, some DIP Switches are located on component side of pcb. These switches allow the T-proof relays test (SW1 dip-switch: 1-2-3-4 set “ON” and
see “Testing procedure at T-proof” section for more information).
WARNING: after T-proof test, dip-switch 1-2-3-4 must be set
to “OFF” position for normal operation.
SW1 Dip switch configuration
1234
ON
T-proof relays enable
123
123
Normal Operation
ON ON
OFF
ON
OFFOFF
T-proof relays (dip1 = relay1;
dip2 = relay2; dip3 = relay3;
dip4 = relay4)
4
OFF
ON
4
This is factory settings
The proof test shall be performed to reveal dangerous faults which are undetected by diagnostic. This means that it is necessary to specify how dangerous undetected faults, which
have been noted during the FMEDA, can be revealed during proof test.
Before of specific Proof test, execute the following general proof test: connect the load supply lines to terminal blocks “15” (for +/AC) and “16” (-/AC) and the NE or F&G / ND output load
to terminal blocks “13” (as the positive terminal) and “14” (as the negative terminal); finally, connect the DCS/PLC signal to input channel terminal blocks “1” (as the positive terminal) and
“2” (as the negative terminal). Then, verify the input to output functionality: the output NE load is Normally Energized by supplying the input channel, while shutdown of the input channel
de-energizes (safe state) the load; the output F&G / ND load is Normally De-energized by shutdown of the input channel, while supplying the input channel energizes (safe state) the
load. The channel functionality must be verified for a min to max input voltage change (21.6 to 27.6 Vdc).
Then, disconnect the load supply lines from terminal blocks “15” - “16” and the output load from terminal blocks “13” - “14”. Then, connect an ohmmeter (Ohm. A) between terminal blocks
“15” - “13” and another one (Ohm. B) between terminal blocks “16” - “14”. The specific Proof test consists of the following steps:
Testing procedure at T-proof
Steps Action
1Bypass the safety-related PLC or take other appropriate action to avoid a false trip when removing the unit for test.
21. Do not supply the input channel (terminals “1”-“2”) of the unit under test and verify that ohmmeters Ohm. A and Ohm. B measure absence of ohmic
continuity (i.e. both +/AC and -/AC load lines are interrupted because all NO contacts are open: 1st requisite is verified). For both ohmmeters Ohm. A
or Ohm. B, these measures could also be true if only one of two relay contacts in parallel is open and other is blocked (for welding) into open position:
this will be verified by testing the channel when input is supplied, as described in the point 3 of this procedure. Instead, the presence of ohmic continuity
measured by ohmmeter Ohm. A or Ohm. B, implies that at least one relay contact is blocked (for welding) into closed position: this could be verified
disassembling and individually testing each relay.
2. Supply the input channel (terminals “1”-“2”) of the unit under test and verify that ohmmeters Ohm. A and Ohm. B measure presence of ohmic continuity
(i.e. both +/AC and -/AC load lines are not interrupted because NO contacts are closed: 2nd requisite is verified). The absence of ohmic continuity
measured by ohmmeter Ohm. A or Ohm. B implies that two relay contacts are blocked (for welding) into open position.
3. Supply always the input channel (terminals “1”-“2”) of the unit under test in order to verify if a single contact is blocked (for welding) into open position.
Considering the measures of ohmmeter Ohm. A, set ON internal SW1 DIP-switches (n°1 or 2) to put in short circuit one relay coil at a time (starting with
the 1st coil by DIP-switch n°1, then going on with the 2nd coil by DIP-switch n°2), verifying that ohmic continuity is always present between terminals
“15” - “13”. Considering the measures of ohmmeter Ohm. B, set ON internal SW1 DIP-switches (n°3 or 4) to put in short circuit one relay coil at a time
(starting with the 3rd coil by DIP-switch n°3, then going on with the 4th coil by DIP-switch n°4), verifying that ohmic continuity is always present between
terminals “16” - “14”. In these situations, the absence of ohmic continuity implies that a relay contact (the one with energized coil because the other is
de-energized, being its DIP-switch set ON) is blocked (for welding) into open position.
3Remove the bypass from the safety-related PLC or restore normal operation inserting the unit.
This test reveals almost 99 % of all possible Dangerous Undetected failures in the relay module.

8 D5294 - 5 A SIL 3 NO contact Relay Out Module for NE or F&G/ND Load with full diagnostic and Modbus G.M. International ISM0123-14
Diagnostic Application for D5294S - SIL 2 Fault Relay Output with NO contact
Functional Safety Manual and Applications
De-energized to trip operation - presence of faultNormal state operation - absence of fault
Description:
In this application D5294S module monitors Load Power DC/AC line (Pins 15-16) and Out NE or F&G/ND Load (Pins 13-14) by internal diagnostic circuits and uses Fault Out 1 or
Fault Out 2 NO contact to signal presence of faults on them. At pages 11-12 it’s shown how to configure and to monitor the diagnostic operation parameters (as fault conditions), by
means of Modbus IN/OUT protocol with RS485 connection (Pins 5-6) or by PPC5092 adapter and SWC5090 related software. When diagnostic supply is connected to
Pins 9(+) - 10(-), the power green led is ON. NE or F&G/ND load connected on Pins 13-14 is controlled by input signal Pins 1-2 from PLC/DCS.
As shown in the diagram, Fault Outputs (Out 1 or Out 2) contact can be connected to Safety PLC Input or used to (de-)energize a load by switching its supply lines.
Fault relay contacts (Pins 3-4 for Fault Out 1 or 11-12 for Fault Out 2) are closed in normal state operation, that is absence of faults, so that diagnostic load is normally energized.
This function is valid if “inverted fault relay” parameter is set to “0” or its field is not checked as explained at pages 11-12. In case of faults detected by internal diagnostic circuits,
de-energized to trip operation is applied to fault relay and its contacts become open, so that diagnostic load is de-energized.
The following table describes the status (open or closed) of each fault output contact in absence or presence of faults detected by internal diagnostic circuits:
Safety Function and Failure behavior:
D5294S is considered to be operating in Low Demand mode, as a Type B module, having Hardware Fault Tolerance (HFT) = 0.
The failure behaviour of SPST fault relay output with NO contact and without “invert fault relay” condition by the following definitions:
Fail-Safe State: it is defined as the diagnostic relay output being de-energized, with open contact and de-energizing related load;
Fail Safe: this failure causes the system to go to the defined Fail-Safe state without a process demand;
Fail Dangerous: failure mode that does not respond to a demand from the process (i.e. being unable to go to the defined Fail-Safe state), so that the diagnostic relay output
remains energized or relay contact keeps closed (energizing related load) because of diagnostic measure error more than +/-20% of correct value or due to contact welding;
Fail “No Effect”: failure mode of a component that plays a part in implementing the safety function but that is neither a safe failure nor a dangerous failure; in particular,
diagnostic measure error is less than +/-20% of correct value. When calculating the SFF, this failure mode is not taken into account;
Fail “Not part”: failure mode of a component which is not part of the Safety function but part of the circuit diagram and is listed for completeness. When calculating the SFF,
this failure mode is not taken into account. The input and relay blocks failures are classified as “Not Part” failures.
As the module is supposed to be proven-in-use device, therefore according to the requirements of IEC 61511-1 section 11.4.4, a HFT = 0 is sufficient for SIL 2 (sub-) systems includ-
ing Type B components and having a SFF equal or more than 60%.
Failure rate date: taken from Siemens Standard SN29500.
Failure rate table:
Failure rates table according to IEC 61508:2010 Ed.2 :
This type “B” system has SFF = 70.54% 60% and HFT = 0, which is sufficient to get SIL 2 in accordance with the requirements of IEC 61511-1 section 11.4.4 during
a proven-in-use assessment.
PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes 10% of total SIF dangerous failures:
PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes >10% of total SIF dangerous failures:
Operation Fault Out 1
Pins 3-4
Fault Out 2
Pins 11-12
Normal (absence of fault) Closed Closed
Trip (presence of fault) Open Open
Failure category Failure rates (FIT)
dd = Total Dangerous Detected failures 0.00
du = Total Dangerous Undetected failures 133.49
sd = Total Safe Detected failures 0.00
su = Total Safe Undetected failures 319.66
λtot safe = Total Failure Rate (Safety Function) = λdd + λdu + λsd + λsu 453.15
MTBF (safety function, single channel) = (1 / λtot safe) + MTTR (8 hours) 251 years
no effect = “No effect” failures 215.35
not part = “Not Part” failures 559.70
λtot device = Total Failure Rate (Device) = λtot safe + λno effect + λnot part 1228.20
MTBF (device, single channel) = (1 / λtot device) + MTTR (8 hours) 92 years
T[Proof] = 1 year T[Proof] = 17 years
PFDavg = 5.86 E-04 - Valid for SIL 2 PFDavg = 9.96 E-03 - Valid for SIL 1
T[Proof] = 5 years
PFDavg = 2.93 E-03 - Valid for SIL 2
T[Proof] = 20 years
PFDavg = 1.17 E-02 - Valid for SIL 1
D5294S
9 + 10 -
Diagnostic Supply
24 Vdc
3
4
1
2
5
6
or Safety
PLC
Input
MODBUS
IN/OUT RS485
A-
B+
11
12
or Safety
PLC
Input
14
13
16
15
Load Power
DC/AC
Out NE or
F&G/ND Load
D5294S
9 + 10 -
Diagnostic Supply
24 Vdc
3
4
1
2
5
6
or Safety
PLC
Input
MODBUS
IN/OUT RS485
A-
B+
11
12
or Safety
PLC
Input
14
13
Fault Out 2
Fault Out 1
Fault Out 2
Fault Out 1
Input signal from PLC/DCS Input signal from PLC/DCS
21
16
15
Load Power
DC/AC
21
Out NE or
F&G/ND Load
Energized load
Energized load
Energized load
Energized load
λsd λsu λdd λdu SFF
0.00 FIT 319.66 FIT 0.00 FIT 133.49 FIT 70.54%

9
D5294 - 5 A SIL 3 NO contact Relay Out Module for NE or F&G/ND Load with full diagnostic and ModbusG.M. International ISM0123-14
Functional Safety Manual and Applications
Diagnostic Application for D5294S - SIL 2 for Modbus Output with RS485 connection
Description:
In this application D5294S module monitors Load Power DC/AC line (Pins 15-16) and Out NE or F&G/ND Load (Pins 13-14) by internal diagnostic circuits and uses Modbus protocol
with RS485 connection to signal presence of faults on them. At pages 11-12 it’s shown how to configure and to monitor the diagnostic operation parameters (as fault conditions),
by means of Modbus IN/OUT protocol with RS485 connection (Pins 5-6) or by PPC5092 adapter and SWC5090 related software. When diagnostic supply is connected
to Pins 9(+) - 10(-), the power green led is ON. NE or F&G/ND load connected on Pins 13-14 is controlled by input signal Pins 1-2 from PLC/DCS.
As shown in the diagram, Modbus RS485 is available on Pins 5-6 or on Power Bus connector or on Termination Boards connector. At pages 11-12 it’s described how modbus pa-
rameters change theirs status when internal diagnostic circuits detect presence of faults on Load Power DC/AC line or Out NE or F&G/ND Load.
Safety Function and Failure behavior:
D5294S is considered to be operating in Low Demand mode, as a Type B module, having Hardware Fault Tolerance (HFT) = 0.
The failure behaviour is described by the following definitions:
Fail-Safe State: it is defined as the ModBus communication being shut down OR any analog measure value (expressed in ModBus parameters) going to Fail High or Fail Low;
Fail Safe: this failure causes the system to go to the defined Fail-Safe state without a process demand;
Fail Dangerous: failure mode that does not respond to a demand from the process (i.e. being unable to go to the defined Fail-Safe state), so that any analog measure expressed
in ModBus parameters) is deviated by more than ± 20% of the correct value;
Fail High: it is defined as a failure that causes any analog measure (expressed in ModBus parameters) to go above its maximum allowed value (which can be set by the user);
Fail Low: it is defined as a failure that causes any analog measure (expressed in ModBus parameters) to go below its minimum allowed value (which can be set by the user).
Fail “No Effect”: failure mode of a component that plays a part in implementing the safety function but that is neither a safe failure nor a dangerous failure; in particular,
analog measure (expressed in ModBus parameters) is deviated by less than ± 20% of the correct value. When calculating the SFF, this failure mode is not taken into account;
Fail “Not part”: failure mode of a component which is not part of the Safety function but part of the circuit diagram and is listed for completeness. When calculating the SFF,
this failure mode is not taken into account. The input and relay blocks failures are classified as “Not Part” failures.
As the module is supposed to be proven-in-use device, therefore according to the requirements of IEC 61511-1 section 11.4.4, a HFT = 0 is sufficient for SIL 2 (sub-) systems includ-
ing Type B components and having a SFF equal or more than 60%.
Failure rate date: taken from Siemens Standard SN29500.
Failure rate table:
Failure rates table according to IEC 61508:2010 Ed.2 :
This type “B” system has SFF = 73.82% 60% and HFT = 0, which is sufficient to get SIL 2 in accordance with the requirements of IEC 61511-1 section 11.4.4 during
a proven-in-use assessment.
PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes 10% of total SIF dangerous failures:
PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes >10% of total SIF dangerous failures:
Failure category Failure rates (FIT)
dd = Total Dangerous Detected failures 127.75
du = Total Dangerous Undetected failures 87.46
sd = Total Safe Detected failures 0.00
su = Total Safe Undetected failures 118.83
λtot safe = Total Failure Rate (Safety Function) = λdd + λdu + λsd + λsu 334.04
MTBF (safety function, single channel) = (1 / λtot safe) + MTTR (8 hours) 341 years
no effect = “No effect” failures 212.65
not part = “Not Part” failures 681.50
λtot device = Total Failure Rate (Device) = λtot safe + λno effect + λnot part 1228.20
MTBF (device, single channel) = (1 / λtot device) + MTTR (8 hours) 92 years
T[Proof] = 1 year T[Proof] = 2 years T[Proof] = 20 years
PFDavg = 3.85 E-04 - Valid for SIL 2 PFDavg = 7.70 E-04 - Valid for SIL 2 PFDavg = 7.70 E-03 - Valid for SIL 1
T[Proof] = 10 years
PFDavg = 3.85 E-03 - Valid for SIL 2
T[Proof] = 20 years
PFDavg = 7.70 E-03 - Valid for SIL 1
Termination Board Connector
Modbus RS485
Power Bus
Modbus RS485
MODBUS
IN/OUT RS485
5 A-
B+
D5294S
9 + 10 -
Diagnostic Supply
24 Vdc
1
2
6
14
13
11
12
3
4
Fault Out 2
Fault Out 1
Input signal from PLC/DCS
16
15
Load Power
DC/AC
21
Out NE or
F&G/ND Load
λsd λsu λdd λdu SFF
0.00 FIT 118.83 FIT 125.75 FIT 87.46 FIT 73.82%

10 D5294 - 5 A SIL 3 NO contact Relay Out Module for NE or F&G/ND Load with full diagnostic and Modbus G.M. International ISM0123-14
Warning
Operation
The single channel 5 A Relay Output D5294S is a relay module suitable for the switching of safety related circuits, up to SIL 3 level according to IEC 61508:2010 Ed.2 for high risk
industries. It provides isolation between input and output contacts. D5294S has 2+2 SPST relay contacts connected in parallel and then in series to avoid spurious trip and to increase
availability (see function diagram). High availability SIL 3 Safety Function for NE load or F&G/ND load is available at Terminal Blocks 13-14. When the driving signal is low (0 Vdc), the
relay is de-energized, contacts at terminals 13-15 and 14-16 are open and load is de-energized. When the driving signal is high (24 Vdc), the relay is energized, contacts at terminals
13-15 and 14-16 are closed and the load is energized. Presence of diagnostic circuit power supply, status of input / output channel (energized or de-energized), as well as any type of
fault condition (line and load short/open circuit, relay coil short circuit, etc.) are displayed by related signalling LEDs: green power supply, yellow for status channel and red for fault.
Installation
D5294S is a relay output module housed in a plastic enclosure suitable for installation on T35 DIN-Rail according to EN50022, with or without Power Bus or on customized Termination
Board. D5294S unit can be mounted with any orientation over the entire ambient temperature range. Electrical connection of conductors up to 2.5 mm² are accommodated by polarized
plug-in removable screw terminal blocks which can be plugged in/out into a powered unit without suffering or causing any damage (for Zone 2 installations check the area to be
nonhazardous before servicing). The wiring cables have to be proportionate in base to the current and the length of the cable. On the section “Function Diagram” and enclosure side a
block diagram identifies all connections. Identify the function and location of each connection terminal using the wiring diagram on the corresponding section, as an example:
Connect 24 Vdc power supply positive at terminal “9” and negative at terminal “10”.
Connect positive input at terminal “1” and negative input at “2”.
Connect Fault output 1 (30 V, 500mA) at terminals “3” and “4” and Fault output 2 (250 V, 3A) at terminals “11” and “12”.
Connect A- Modbus RS845 for diagnostic at terminal “5” and B+ at terminal “6”.
Connect positive output NE or F&G/ND load at terminal “13” and negative at terminal “14”.
Connect positive Load Power DC/AC at terminal “15” and negative at terminal “16”.
Connect ground at terminal “21”.
Installation and wiring must be in accordance to the relevant national or international installation standards (e.g. IEC/EN60079-14 Electrical apparatus for explosive gas atmospheres
Part 14: Electrical installations in hazardous areas (other than mines)), make sure that conductors are well isolated from each other and do not produce any unintentional connection.
Connect 2+2 SPST relay contacts checking the load rating to be within the contact maximum rating 5 A 250 Vac 1250 VA, 5 A 250 Vdc 140 W (resistive load). To prevent relay con-
tacts from damaging, connect an external protection (fuse or similar), chosen according to the relay breaking capacity diagram on data sheet. The enclosure provides,
according to EN60529, an IP20 minimum degree of mechanical protection (or similar to NEMA Standard 250 type 1) for indoor installation, outdoor installation requires an additional
enclosure with higher degree of protection (i.e. IP54 to IP65 or NEMA type 12-13) consistent with the effective operating environment of the specific installation. Units must be protected
against dirt, dust, extreme mechanical (e.g. vibration, impact and shock) and thermal stress, and casual contacts. If enclosure needs to be cleaned use only a cloth lightly moistened by a
mixture of detergent in water. Electrostatic Hazard: to avoid electrostatic hazard, the enclosure of D5294S must be cleaned only with a damp or antistatic cloth. Any penetration
of cleaning liquid must be avoided to prevent damage to the unit. Any unauthorized card modification must be avoided. According to EN61010, D5294 must be connected to SELV or
SELV-E supplies. Relay output contact must be connected to load non exceeding category II overvoltage limits. Warning: de-energize main power source (turn off power supply
voltage) and disconnect plug-in terminal blocks before opening the enclosure to avoid electrical shock when connected to live hazardous potential.
D5294S is an electrical apparatus installed into standard EN50022 T35 DIN-Rail located in Safe Area or Zone 2, Group IIC, Temperature Classification T4, Hazardous Area
(according to EN/IEC60079-15) within the specified operating temperature limits Tamb - 40 to +60 °C. D5294S must be installed, operated and maintained only by qualified personnel, in
accordance to the relevant national/international installation standards (e.g. IEC/EN60079-14 Electrical apparatus for explosive gas atmospheres - Part 14: Electrical installations in
hazardous areas (other than mines)), following the established installation rules. De-energize power source (turn off power supply voltage) before plug or unplug the terminal blocks
when installed in Hazardous Area or unless area is known to be nonhazardous. Warning: substitution of components may impair suitability for Zone 2. Warning: de-energize
main power source (turn off power supply voltage) and disconnect plug-in terminal blocks before opening the enclosure to avoid electrical shock when connected to live
hazardous potential. Explosion Hazard: to prevent ignition of flammable or combustible atmospheres, disconnect power before servicing or unless area is known to be
onhazardous. Failure to properly installation or use of the equipment may risk to damage the unit or severe personal injury. The unit cannot be repaired by the end user and must be
returned to the manufacturer or his authorized representative. Any unauthorized modification must be avoided.
According to IEC 61508-2, the proof test will be performed to reveal dangerous faults which cannot be otherwise detected. This means that it is necessary to specify how dangerous
undetected faults, which have been noted during the FMEDA analysis, can be revealed during the proof test.
When the diagnostic circuits of D5294S are used with the 1 +1 SPST fault relay output, the Proof Test consists of the following steps:
Testing procedure at T-proof
Steps Action
1Bypass the Safety PLC or take any other appropriate action to avoid a false trip.
2By means of the configuration software, configure each fault relay output to be energized with closed contacts in normal operation and de-energized with open
contacts when a fault condition occurs. Connect an ohmmeter to each couple of relay contacts and verify that, during the modules normal operation, the fault
relay outputs are energized with presence of ohmic continuity between their contacts.
3Impose a fault condition to any of the analog measures performed by the modules (for example, if coil integrity is enabled, by means of the SW1 dip-switch, it is
possible to short circuit any of the output relay coils). Verify that, during fault condition, the fault relay outputs are de-energized with absence of ohmic continuity
between their contacts. Finally, remove the fault condition (for example, remove the output relay coil short circuit by means of the SW1 dip-switch) and verify that
the fault relay outputs are switched to the energized state with presence of ohmic continuity between their contacts.
7 Remove the bypass from the Safety-related PLC or restore normal operation.
6Restore the loop to full operation
5 Shut down ModBus communication and verify that the configuration software indicates a communication error. Finally, restore ModBus communication and verify
that the configuration software still indicates the values of the performed analog measures with a tolerance lower than +/- 20%.
4 Connect the modules to the RS485 ModBus interface and use the configuration software to read the values of the analog measures performed by the modules.
Impose different line and load conditions by means of AC or DC voltage generator and passive or active load and verify that the values detected by means of the
configuration software are within +/- 20% of the imposed values. Perform this test when the modules output relays are both in the energized and de-energized
states.
This test will reveal approximately 99% of the possible Dangerous Undetected failures in the diagnostic circuits of D5294S when the fault relay output is considered.
When the diagnostic circuits of D5294S are used with the ModBus output with RS485 connection, the Proof Test consists of the following steps:
Steps Action
1Bypass the Safety PLC or take any other appropriate action to avoid a false trip.
2Connect the modules to the RS485 ModBus interface and use the configuration software to read the values of the analog measures performed by the modules.
Impose different line and load conditions by means of AC or DC voltage generator and passive or active load and verify that the values detected by means of
the configuration software are within +/- 20% of the imposed values. Perform this test when the modules output relays are both in the energized and de-
energized states.
3Shut down ModBus communication and verify that the configuration software indicates a communication error. Finally, restore ModBus communication and verify
that the configuration software still indicates the values of the performed analog measures with a tolerance lower than +/- 20%.
5 Remove the bypass from the Safety-related PLC or restore normal operation.
4Restore the loop to full operation
This test will reveal approximately 99% of the possible Dangerous Undetected failures in the diagnostic circuits of D5294S when the ModBus output is considered.

11
D5294 - 5 A SIL 3 NO contact Relay Out Module for NE or F&G/ND Load with full diagnostic and ModbusG.M. International ISM0123-14
PPC5092 Adapter - Operation
The Pocket Portable Adapter type PPC5092 is suitable to connect the module D5294S to a PC via USB serial line, in order to configure and to monitor the operation parameters
by means of SWC5090 software. The PPC5092 unit is connected to D5294S by mini USB and to PC by USB port. This adapter is not ATEX, UL or FM approved and is only to be used
in Safe Area/Non Hazardous Locations. Do not use PPC5092 in Hazardous Area/Hazardous Locations. The PPC5092 adapter is powered by the PC (no battery power) when its USB
port is plugged into the PC. It has a green LED as power-on indication.
SWC5090 Configuration & Monitoring Software
Start-up
Before powering the unit check that all wires are properly connected, particularly supply conductors and their polarity, input and output wires. Check conductors for exposed wires that
could touch each other causing dangerous unwanted shorts. Turn on power for diagnostic circuit, the “power on” green led must be lit. Enabling input, the channel status yellow led must
be lit and load circuit must be energized because 2+2 SPST relay output contacts are closed. Instead, disabling input, the channel status yellow led must be turned off and load circuit
must be de-energized because 2+2 SPST relay output contacts are open.
Configuration
Monitor
Configuration parameters: Screenshots:
USER MANUAL SETTINGS:
Load Supply Voltage RMS
Voltage Upper Limit (V): Maximum allowed load RMS voltage
Voltage Lower Limit (V): Minimum allowed load RMS voltage
Load Current RMS
Current Upper Limit (A): Maximum allowed load RMS current
Current Lower Limit (A): Minimum allowed load RMS current
Load OFF Resistance
Resistance Upper Limit (): Maximum allowed load OFF resistance
Resistance Lower Limit (): Minimum allowed load OFF resistance
Isolation Resistance
Resistance Lower Limit (k): Minimum allowed load-to-earth isolation resistance
FAULT CONDITIONS MONITORING (Command Status [ON]):
Faults contributing to the output cumulative fault when the driver is on.
Load Supply Voltage:
When checked, the load supply voltage can activate the cumulative fault.
Load Current:
When checked, the load current can activate the cumulative fault.
Coil Integrity:
When checked, the short circuit of any coil can activate the cumulative fault.
FAULT CONDITIONS MONITORING (Command Status [OFF]):
Faults contributing to the output cumulative fault when the driver is off.
Load Supply Voltage:
When checked, the load supply voltage can activate the cumulative fault.
Load OFF Resistance:
When checked, the load OFF resistance can activate the cumulative fault.
Isolation Resistance:
When checked, the load-to-earth isolation resistance can activate the cumulative fault.
TAG: Identification of the specific operating loop of the module.
ACQUIRE FUNCTIONS: Acquisition and saving of the diagnostics field parameters.
Acquire OFF parameters:
The currently measured OFF parameters are copied to the USER MANUAL
SETTINGS (available only when the driver is OFF).
Acquire ON parameters:
The currently measured ON parameters are copied to the USER MANUAL SETTINGS
(available only when the driver is ON).
CONTINUOUS SCAN: Continuous measurement of the field parameters.
Start/Stop: Activates/de-activates the measurement of the field parameters.
INVERT FAULT RELAY: When not checked, the output fault contacts open in case of
fault. When checked, the output fault contacts close in case of fault.
For SIL application, this field must not be checked.
Note: For advanced options and details on SWC5090, please refer to ISM0154.

12 D5294 - 5 A SIL 3 NO contact Relay Out Module for NE or F&G/ND Load with full diagnostic and Modbus G.M. International ISM0123-14
Supported ModBus Parameters
Param.
Address Description Notes
0 G.M. Factory Code
Identification
Data
1 Instrument Code
2 Option Code
3 Hardware Release
4 Software Release
16 Modbus Address Communication
Data
17 Modbus Baudrate(1)
18 Modbus Format(1)
64 Measured Load Voltage (2)
Input Data
65 Measured Load Current (3)
69 Driver Status (6)
70 Coil Integrity (7)
72 Masked Fault Status(1)
101 Load Voltage Upper Limit (2)
Input
Configuration
102 Load Voltage Lower Limit (2)
103 Load Current Upper Limit (3)
104 Load Current Lower Limit (3)
112 Fault Mirror Configuration (8)
113 Invert Fault Relay (9)
114 Load Voltage Upper Hysteresis (2)
115 Load Voltage Lower Hysteresis (2)
116 Load Current Upper Hysteresis (3)
117 Load Current Lower Hysteresis (3)
224 Fault Mask (Driver ON) Fault
Conditions
225 Fault Mask (Driver OFF)
464 Command execution(10) Command
548 to 555 Tag(11) Tags
Type(12)
R
R/W
R
R/W
R/W
W
R/W
105 Load Resistance Upper Limit (Low 16 bits) (4)
106 Load Resistance Upper Limit (High 16 bits)
107 Load Resistance Lower Limit (Low 16 bits) (4)
109 Isolation Resistance Lower Limit (5)
108 Load Resistance Lower Limit (High 16 bits)
120 Isolation Resistance Hysteresis (5)
118 Load Resistance Upper Hysteresis (4)
119 Load Resistance Lower Hysteresis (4)
66 Measured Load Resistance (Low 16 bits) (4)
68 Measured Isolation Resistance (5)
67 Measured Load Resistance (High 16 bits)
Index Baudrate
0 4800
1 9600
2 19200
3 38400
4 57600
5 115200
Address 17: Supported ModBus Baudrates
Address 72: Fault status
High Byte Low Byte
Bit position
15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0
Coil Integrity
Load Current
Load Voltage
0= Ok
1= Fault
Each Modbus parameter is described by one 16-bit word.
(1) See command details on the right.
(2) Expressed in 100 mV
(3) Expressed in mA
(4) Expressed in 
(5) Expressed in k
(6) 0= OFF; 1= ON
(7) 0= Fault; 1= Ok
(8) 0= Fault mirror; 1= Always OFF; 2= Always ON
(9) 0= no inversion (open: fault, for SIL application); 1= inverted (open: ok)
(10) All configurations must be confirmed via Addr. 464, see details on the right.
(11) Tags are composed of 16 characters.
Each address contains 2 chars, starting from left.
(12) Parameter Type:
R= read only
W= write only
R/W= read and write
Address 464: Commands
High Byte Low Byte
Bit position
15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0
1 Save Input/Output Configuration
2 Save Modbus Configuration
8 Save Tags
Address 18: Supported Modbus Formats
High Byte Low Byte
Bit position
15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0
Termination resistance (1 = enabled)
Endianness 32 bit Data (0 = Little; 1 = Big)
Supported Modbus Parity:
0 8 data bit, no parity, 1 stop bit
1 8 data bit, even parity, 1 stop bit
2 8 data bit, odd parity, 1 stop bit
Isolation Resistance
Load Resistance
Addresses 224-225: Fault conditions
High Byte Low Byte
Bit position
15 14 13 12 11 10 9 8 7 6 5 4 3 2 1 0
Coil Integrity
Load Current
Load Voltage
0= Ok
1= Fault
Isolation Resistance
Load Resistance
Configuration Parameters:
Configuration parameters:
Code Name Notes
03 read holding registers reads a stream of words from memory
04 read input registers reads a stream of words from memory
08 diagnostics: subcode 0 returns query data
06 write single registers writes a word in memory
16 write multiple registers writes a stream of words in memory
D5294S communicates via Modbus RTU-485 protocol. Below are all available registers.
Parameters Details: