Gmi D1044s Instruction Manual

D1044 - SIL 2 - SIL 3 Digital Relay Output ISM0080-10

D1044S - D1044D

INSTRUCTION & SAFETY MANUAL

SIL 2 - SIL 3 Digital Relay Output

Loop / Bus Powered

DIN-Rail Models D1044S, D1044D

D1044 - SIL 2 - SIL 3 Digital Relay Output G.M. International ISM0080-10

General Description: The single and dual channel DIN Rail Digital Relay Output, D1044S and D1044D, are digital output modules enabling a Safe Area contact, logic level or

drive signal, to control a device in Hazardous Area, providing 3 port isolation (input/output/supply).

Outputs are galvanically isolated and inputs are depolarized to ease wiring operations. Typical applications include switching of Hazardous Area circuits, changing of polarities and

sounder tones, calibrating of strain gauge bridges, resetting of field devices, testing of fire detectors.

Each input channel can be isolated from supply (Bus Powered mode) or externally connected (by wiring) to supply (Loop Powered mode, where the safety PLC directly supplies the

module and its input channel).

Each output channel provides a SPDT relay, with two contacts defined NO (Normally Open) and NC (Normally Close) when the output relay is de-energized.

Considering each channel NE (Normally Energized), the output relay is energized, so that NO contact is closed (useful for NE loads or Hazardous Area circuits) and

NC contact is open (useful for ND loads or Hazardous Area circuits). The safe state is reached when the channel and the output relay are de-energized, so that NO contact is

open (de-energizing loads or Hazardous Area circuits) and NC contact is closed (energizing loads or Hazardous Area circuits).

Function: 1 or 2 channels I.S. relay output, provides 3 port isolation (input/output/supply).

D1044S (Loop / Bus Powered mode) or D1044D (Bus Powered mode with independent channels), as shown in function diagrams:

SIL 2 Safety Function for NE load (de-energized in safe state) is available at Terminal Blocks 9/10-11 and Terminal Blocks 13/14-15.

SIL 2 Safety Function for ND load (energized in safe state) is available at Terminal Blocks 12-11 and Terminal Blocks 16-15.

D1044D (Loop / Bus Powered mode with 1oo2 channel architecture),as shown in function diagram:

SIL 3 Safety Function for NE load (de-energized in safe state) is available at Terminal Blocks 13/14-11.

SIL 3 Safety Function for ND load (energized in safe state) is available at Terminal Blocks 16-15 (or 12-11 because externally connected in parallel).

Signalling LEDs: Power supply indication (green), output status (yellow).

EMC: Fully compliant with CE marking applicable requirements.

Functional Safety Management Certification:

G.M. International is certified by TUV to conform to IEC61508:2010

part 1 clauses 5-6 for safety related systems up to and included SIL3.

Supply: 24 Vdc nom (20 to 30 Vdc) reverse polarity protected, ripple within voltage limits ≤5 Vpp.

Current consumption @ 24 V: 55 mA for 2 channels D1044D, 35 mA for 1 channel D1044S with relays energized.

Power dissipation: 1.35 W for 2 channels D1044D, 0.85 W for 1 channel D1044S with 24 V supply voltage and relays energized.

Max. power consumption: at 30 V supply voltage and relays energized, 1.5 W for 2 channels D1044D, 0.9 W for 1 channel D1044S.

Isolation (Test Voltage): I.S. Out/In 1.5 KV; I.S. Out/Supply 1.5 KV; I.S. Out/I.S. Out 500 V; In/Supply 500 V; In/In 500 V.

Input: switch contact, logic level.

Trip voltage levels: OFF status ≤1.0 V, ON status ≥6.0 V (maximum 30 V).

Current consumption @ 24 V: 3 mA (≈10 KΩinput impedance).

Output I.S.: voltage free SPDT relay contact.

Contact material: AgNi90/10.

Contact rating: 60 Vdc, 2 A for use in Intrinsic Safety applications, 2 A 250 Vac 500 VA, 2 A 250 Vdc 80 W (resistive load) for non Intrinsic Safety applications.

DC Load breaking capacity:

Mechanical / Electrical life: 15 * 106/ 1 * 105operation, typical.

Operate / Release time: 5 / 2 ms typical.

Bounce time NO / NC contact: 1 / 5 ms.

Response time In / Out: 20 ms.

Frequency response: 10 Hz maximum.

Compatibility:

CE mark compliant, conforms to Directive:

2014/34/EU ATEX, 2014/30/EU EMC, 2014/35/EU LVD, 2011/65/EU RoHS.

Environmental conditions:

Operating: temperature limits -20 to + 60 °C, relative humidity max 95 % .

Storage: temperature limits – 45 to + 80 °C.

Safety Description:

ATEX: II (1) G [Ex ia Ga] IIC, II (1) D [Ex ia Da] IIIC, I (M1) [Ex ia Ma] I, II 3G Ex nAC IIC T4 Gc

IECEx / INMETRO: [Ex ia Ga] IIC, Ex ia [Ma] I, [Ex ia Da] IIIC, Ex nAC IIC T4 Gc

FM: : NI / I / 2 / ABCD / T4, NI / I / 2 / IIC / T4, AIS / I, II, III / 1 / ABCDEFG, AEx [ia] IIC

FM-C: NI / I / 2 / ABCD / T4, NI / I / 2 / IIC / T4, AIS / I, II, III / 1 / ABCDEFG, Ex [ia] IIC

EAC-EX: 2Ex nA nC [ia Ga] IIC T4 Gc X, [Ex ia Da] IIIC X, [Ex ia Ma] I X

UKR TR n. 898: 2ExnAnCiaIICT4 X, ExiaI X

associated electrical apparatus.

Uo/Voc = 0 V, Io/Isc = 0 mA, Po/Po = 0 mW at terminals 13/14-15-16, 9/10-11-12

(Uo, Io, Po equal to the connected Intrinsic Safety circuit).

Ui/Vmax = 60 V, Ii/Imax = 2 A, Ci = 0 nF, Li = 0 nH at term. 13/14-15-16, 9/10-11-12.

Um = 250 Vrms, -20 °C ≤Ta ≤60 °C.

Approvals:

DMT 01 ATEX E 042 X conforms to EN60079-0, EN60079-11, EN60079-26.

IECEx BVS 07.0027X conforms to IEC60079-0, IEC60079-11, IEC60079-26,

IMQ 09 ATEX 013 X conforms to EN60079-0, EN60079-15,

IECEx IMQ 13.0011X conforms to IEC60079-0, IEC60079-15

INMETRO DNV 13.0108 X conforms to ABNT NBR IEC60079-0, ABNT NBR IEC60079-11, ABNT NBR IEC60079-15, ABNT NBR IEC60079-26.

FM & FM-C No. 3024643, 3029921C, conforms to Class 3600, 3610, 3611, 3810,

ANSI/ISA 12.12.02, ANSI/ISA 60079-0, ANSI/ISA 60079-11, C22.2 No.142,

C22.2 No.157, C22.2 No.213, E60079-0, E60079-11, E60079-15,

C-IT.MH04.B.00306 conforms to GOST R IEC 60079-0,GOST R IEC 60079-11, GOST R IEC 60079-15.

CЦ16.0034 X conforms to ДСТУ 7113, ГОСТ 22782.5-78, ДСТУ IЕС 60079-15.

TÜV Certificate No. C-IS-236198-04, SIL 2 / SIL 3 conforms to IEC61508:2010 Ed.2.

TÜV Certificate No. C-IS-236198-09, SIL 3 Functional Safety Certificate conforms to IEC61508:2010 Ed.2, for Management of Functional Safety.

DNV No.A-13778 Certificates for maritime applications.

Mounting: T35 DIN Rail according to EN50022.

Weight: about 140 g D1044D, 120 g D1044S.

Connection: by polarized plug-in disconnect screw terminal blocks to accommodate terminations up to 2.5 mm2.

Location: Safe Area/Non Hazardous Locations or Zone 2, Group IIC T4, Class I, Division 2, Groups A, B, C, D Temperature Code T4 and Class I, Zone 2, Group IIC, IIB, IIA

T4 installation.

Protection class: IP 20.

Dimensions: Width 22.5 mm, Depth 99 mm, Height 114.5 mm.

Technical Data

Characteristics

0.20.1

V (V)

I (A)

100

200

300

0.3 0.5 1 2 5

Resistive

Load

FSM

SIL 3

D1044 - SIL 2 - SIL 3 Digital Relay OutputG.M. International ISM0080-10 3

Ordering information

Model: D1044

1 channel S

Power Bus enclosure

2 channels D

Front Panel and Features

SIL 2 according to IEC 61508:2010 Ed. 2 D1044S or D1044D Bus Powered mode for each channel

for Tproof = 6 / 10 yrs (≤10% / >10 % of total SIF).

SIL 2 according to IEC 61508:2010 Ed. 2 D1044S Loop Powered mode

for Tproof = 7 / 10 yrs (≤10% / >10 % of total SIF).

SIL 3 according to IEC 61508:2010 Ed. 2 D1044S or D1044D Loop / Bus Powered mode

with 1oo2 channel architecture for Tproof = 10 yrs (≤10% of total SIF).

PFDavg (1 year) 1.63 E-04, SFF 77.24 % with single channel architecture.

PFDavg (1 year) 8.16 E-06, SFF 99.16 % with 1oo2 channel architecture.

SIL 3 Systematic capability.

Output to Zone 0 (Zone 20), Division 1, installation in Zone 2, Division 2.

Voltage, contact, logic level input.

Two SPDT Relay Output Signals.

Three port isolation, Input/Output/Supply.

EMC Compatibility to EN61000-6-2, EN61000-6-4, EN61326-1.

ATEX, IECEx, FM & FM-C, INMETRO, EAC-EX, UKR n. 898, TÜV Certifications.

TÜV Functional Safety Certification.

Type Approval Certificate DNV for maritime applications.

High Reliability, SMD components.

High Density, two channels per unit.

Simplified installation using standard DIN Rail and plug-in terminal blocks.

250 Vrms (Um) max. voltage allowed to the instruments associated with the barrier.

Output Ch 2 NO (Normally Opened)

HAZARDOUS AREA SAFE AREA

Output Ch 2 NO (Normally Opened)

Output Ch 2 COM (Common)

Output Ch 2 NC (Normally Closed)

Not used

+ Power Supply 24 Vdc

- Power Supply 24 Vdc

Input Ch 1 for Control

Input Ch 2 for Control

Output Ch 1 NO (Normally Opened)

Output Ch 1 COM (Common)

Output Ch 1 NC (Normally Closed)

Terminal block connections

Power Bus and DIN-Rail accessories:

DIN rail anchor MCHP065

DIN rail stopper MOR016

Terminal block male MOR017

Terminal block female MOR022

D1044 - SIL 2 - SIL 3 Digital Relay Output G.M. International ISM0080-10

Parameters Table

Must

Hazardous Area/

Hazardous Locations

Device Parameters

D1044 Associated

Apparatus Parameters

Uo / Voc = 0 V

(Uo equal to the

connected I.S. circuit)

Ui / Vmax

In the system safety analysis, always check the Hazardous Area/Hazardous Locations devices to conform with the related system documentation, if the device is Intrinsically Safe check

its suitability for the Hazardous Area/Hazardous Locations and gas group encountered and that its maximum allowable voltage, current, power (Ui/Vmax, Ii/Imax, Pi/Pi) are not exceeded

by the safety parameters (Uo/Voc, Io/Isc, Po/Po) of the D1044 series Associated Apparatus connected to it. Also consider the maximum operating temperature of the field device, check

that added connecting cable and field device capacitance and inductance do not exceed the limits (Co/Ca, Lo/La, Lo/Ro) given in the Associated Apparatus parameters for the effective

gas group. See parameters on enclosure side and the ones indicated in the table below:

D1044 Terminals

Ch1

Ch2

13/14 - 15 - 16

9/10 - 11 - 12

Io / Isc = 0 mA

(Io equal to the

connected I.S. circuit)

Ch1

Ch2

13/14 - 15 - 16

9/10 - 11 - 12

Po / Po = 0 mW

(Po equal to the

connected I.S. circuit)

Ch1

Ch2

13/14 - 15 - 16

9/10 - 11 - 12

≤

Ii/ Imax≤

Pi / Pi≤

When connected to other intrinsically safe devices or associated apparatus, check that maximum allowable voltage, current (Ui/Vmax, Ii/Imax) of the D1044 Associated Apparatus are

not exceeded by the safety parameters (Uo/Voc, Io/Isc) of the Intrinsically Safe device, indicated in the table below:

Must

Hazardous Area/

Hazardous Locations

Device Parameters

D1044 Associated

Apparatus Parameters

Ui / Vmax = 60V Uo / Voc

D1044 Terminals

Ch1

Ch2

13/14 - 15 - 16

9/10 - 11 - 12

li / Imax = 2 A

Ch1

Ch2

13/14 - 15 - 16

9/10 - 11 - 12

≥

Io / Isc≥

Ci = 0 nF, Li= 0 nH

Ch1

Ch2

13/14 - 15 - 16

9/10 - 11 - 12

For installations in which both the Ci and Li of the Intrinsically Safe apparatus exceed 1 % of the Co and Lo parameters of the Associated Apparatus (excluding the cable),

then 50 % of Co and Lo parameters are applicable and shall not be exceeded (50 % of the Co and Lo become the limits which must include the cable such that

Ci device + C cable ≤50 % of Co and Li device + L cable ≤50 % of Lo).

If the cable parameters are unknown, the following value may be used: Capacitance 60pF per foot (180pF per meter), Inductance 0.20µH per foot (0.60µH per meter).

The Intrinsic Safety Entity Concept allows the interconnection of Intrinsically Safe devices approved with entity parameters not specifically examined in combination as a system

when the above conditions are respected.

For Division 1 and Zone 0 installations, the configuration of Intrinsically Safe Equipment must be FM approved under Entity Concept (or third party approved);

for Division 2 installations, the configuration of Intrinsically Safe Equipment must be FM approved under non-incendive field wiring or Entity Concept (or third party approved).

D1044 - SIL 2 - SIL 3 Digital Relay OutputG.M. International ISM0080-10 5

Function Diagram

HAZARDOUS AREA ZONE 0 (ZONE 20) GROUP IIC,

HAZARDOUS LOCATIONS CLASS I, DIVISION 1, GROUPS A, B, C, D,

CLASS II, DIVISION 1, GROUPS E, F, G, CLASS III, DIVISION 1,

CLASS I, ZONE 0, GROUP IIC

SAFE AREA, ZONE 2 GROUP IIC T4,

NON HAZARDOUS LOCATIONS, CLASS I, DIVISION 2,

GROUPS A, B, C, D T-Code T4, CLASS I, ZONE 2, GROUP IIC T4

MODEL D1044D Bus powered (independent channels)

NC 16

3 +

4 -

Supply 24 Vdc

(SIL 2) Out 1

NO 13/14

COM 15

NC 12

NO 9/10

COM 11

In 1

Control

(SIL 2) Out 2 In 2

Control

MODEL D1044D Bus powered (1oo2 channel architecture)

NC 16

3 +

4 -

Supply 24 Vdc

Out 1

NO 13/14

COM 15

NC 12

NO 9/10

COM 11

In 1

Control

(SIL 3)

2 NO contacts in series connection

(for NE load)

MODEL D1044D Bus powered (1oo2 channel architecture)

NC 16

3 +

4 -

Supply 24 Vdc

Out 1

NO 13/14

COM 15

NC 12

NO 9/10

COM 11

In 1

Control

(SIL 3)

2 NC contacts in parallel connection

(for ND load)

Relay contact shown in

de-energized position

D1044 - SIL 2 - SIL 3 Digital Relay Output G.M. International ISM0080-10

Function Diagram

HAZARDOUS AREA ZONE 0 (ZONE 20) GROUP IIC,

HAZARDOUS LOCATIONS CLASS I, DIVISION 1, GROUPS A, B, C, D,

CLASS II, DIVISION 1, GROUPS E, F, G, CLASS III, DIVISION 1,

CLASS I, ZONE 0, GROUP IIC

SAFE AREA, ZONE 2 GROUP IIC T4,

NON HAZARDOUS LOCATIONS, CLASS I, DIVISION 2,

GROUPS A, B, C, D T-Code T4, CLASS I, ZONE 2, GROUP IIC T4

Relay contact shown in

de-energized position

MODEL D1044D Loop powered (1oo2 channel architecture)

NC 16

3 +

4 -

Out 1

NO 13/14

COM 15

NC 12

NO 9/10

COM 11

(SIL 3)

In 1

Control

2 NO contacts in series connection

(for NE load)

2 NC contacts in parallel connection

(for ND load)

MODEL D1044D Loop powered (1oo2 channel architecture)

NC 16

3 +

4 -

Out 1

NO 13/14

COM 15

NC 12

NO 9/10

COM 11

(SIL 3)

In 1

Control

D1044 - SIL 2 - SIL 3 Digital Relay OutputG.M. International ISM0080-10 7

Function Diagram

HAZARDOUS AREA ZONE 0 (ZONE 20) GROUP IIC,

HAZARDOUS LOCATIONS CLASS I, DIVISION 1, GROUPS A, B, C, D,

CLASS II, DIVISION 1, GROUPS E, F, G, CLASS III, DIVISION 1,

CLASS I, ZONE 0, GROUP IIC

SAFE AREA, ZONE 2 GROUP IIC T4,

NON HAZARDOUS LOCATIONS, CLASS I, DIVISION 2,

GROUPS A, B, C, D T-Code T4, CLASS I, ZONE 2, GROUP IIC T4

MODEL D1044S Bus powered

NC 16

3 +

4 -

Supply 24 Vdc

(SIL 2) Out 1

NO 13/14

COM 15

In 1

Control

MODEL D1044S Loop powered

NC 16

3 +

4 -

(SIL 2) Out 1

NO 13/14

COM 15 =

In 1

Control

Relay contact shown in

de-energized position

D1044 - SIL 2 - SIL 3 Digital Relay Output G.M. International ISM0080-10

Functional Safety Manual and Applications

Application D1044S with Bus Powered Mode

Normal state operation De-energized to trip operation

13/14 PLC

Output signal

ON - 24 Vdc

SIL 2

NE Load

+ V load

- V load

Description:

The module is powered by a 24 Vdc power supply at pins 3 (positive pole) and 4 (negative pole). Input Signal from PLC/DCS is normally High (24 Vdc) and is applied to pins 5-6 in

order to Normally Energize (NE) or Normally De-energize (ND) load.

For NE load, the Input Signal from PLC/DCS is Low (0 Vdc) during “de-energized to trip” operation, in order to de-energize the load.

For ND load, the Input Signal from PLC/DCS is Low (0 Vdc) during “de-energized to trip” operation, in order to energize the load.

The following table describes the status (open or closed) of each output contact when the input signal is High or Low for both NE and ND loads:

Safety Function and Failure behavior:

D1044S is considered to be operating in Low Demand mode, as a Type A module, having Hardware Fault Tolerance (HFT) = 0.

The failure behaviour of D1044S is described by the following definitions:

□fail-Safe State: it is defined as the relay being de-energized (so that the NO-COM contact is open and the NC-COM contact is closed);

□fail Safe: failure mode that causes the module / (sub)system to go to the defined Fail-Safe state without a demand from the process;

□fail Dangerous: failure mode that does not respond to a demand from the process (i.e. being unable to go to the defined fail-safe state), so that the relay remains

energized (that is, the NO-COM contact remains closed and the NC-COM contact remains open);

□fail “No Effect”: failure mode of a component that plays a part in implementing the safety function but that is neither a safe failure nor a dangerous failure.

When calculating the SFF, this failure mode is not taken into account;

□fail “Not part”: failure mode of a component that is not part of the safety function but part of the circuit diagram and is listed for completeness.

When calculating the SFF, this failure mode is not taken into account.

Failure rate date: taken from Siemens Standard SN29500.

Failure rate table:

Failure rates table according to IEC 61508:2010 Ed.2 :

PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes ≤10% of total SIF dangerous failures:

PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes >10% of total SIF dangerous failures:

Systematic capability SIL 3.

Operation Input Signal

Pins 5-6

Pins

13/14 - 15

Pins

15 – 16

NE Load (SIL2)

Pins 15 - -Vload

ND Load (SIL2)

Pins 15 - -Vload

Normal High (24 Vdc) Closed Open Energized De-Energized

Trip Low (0 Vdc) Open Closed De-Energized Energized

Failure category Failure rates (FIT)

λdd = Total Dangerous Detected failures 0.00

λdu = Total Dangerous Undetected failures 37.24

λsd = Total Safe Detected failures 0.00

λsu = Total Safe Undetected failures 126.39

λtot safe = Total Failure Rate (Safety Function) = λdd + λdu + λsd + λsu 163.63

MTBF (safety function, single channel) = (1 / λtot safe) + MTTR (8 hours) 697 years

λno effect = “No effect” failures 106.17

λnot part = “Not Part” failures 2.00

λtot device = Total Failure Rate (Device) = λtot safe + λno effect + λnot part 271.80

MTBF (device, single channel) = (1 / λtot device) + MTTR (8 hours) 420 years

λsd λsu λdd λdu SFF

0.00 FIT 126.39 FIT 0.00 FIT 37.24 FIT 77.24%

T[Proof] = 1 year T[Proof] = 6 years

PFDavg = 1.63 E-04 - Valid for SIL 2 PFDavg = 9.80 E-04 - Valid for SIL 2

T[Proof] = 10 years

PFDavg = 1.63 E-03 - Valid for SIL 2

16 13/14 PLC

Output signal

OFF - 0 Vdc

+ V load

- V load

SIL 2 Normally Energized Relay Condition for ND Load

Normal state operation De-energized to trip operation

16 PLC

Output signal

ON - 24 Vdc

+ V load

- V load

13/14 16 PLC

Output signal

OFF - 0 Vdc

+ V load

- V load

13/14

SIL 2 Normally Energized Relay Condition for NE Load

SIL 2

NE Load

SIL 2

ND Load

SIL 2

ND Load

D1044 - SIL 2 - SIL 3 Digital Relay OutputG.M. International ISM0080-10 9

Description:

Input Signal from PLC/DCS is normally High (24 Vdc) and is applied to pins 3-4 and 5-6 in order to Normally Energize (NE) or Normally De-energize (ND) load.

For NE load, the Input Signal from PLC/DCS is Low (0 Vdc) during “de-energized to trip” operation, in order to de-energize the load.

For ND load, the Input Signal from PLC/DCS is Low (0 Vdc) during “de-energized to trip” operation, in order to energize the load.

The following table describes the status (open or closed) of each output contact when the input signal is High or Low for both NE and ND loads.