GMI D1031D Instruction Manual

D1031 - SIL 2 Switch / Proximity Detector Repeater Transistor Output ISM0009-17
D1031D - D1031Q
INSTRUCTION & SAFETY MANUAL
SIL 2 Switch/Proximity Detector
Repeater Transistor Output
DIN-Rail Models D1031D, D1031Q

D1031 - SIL 2 Switch / Proximity Detector Repeater Transistor Output G.M. International ISM0009-17
2
General Description: The Switch/Proximity Detector Repeater type D1031 is a DIN Rail unit with two or four independent channels. The unit can be configured for contact or proximity
detector, NO or NC and for NO or NC optocoupled open collector transistor output. Each channel enables a Safe Area load to be controlled by a switch, or a proximity detector,
located in Hazardous Area.
D1031Q quad channel type has four independent input channels and actuates the corresponding output transistor. Two actuation modes can be independently DIP switch configured
on each input channel: NO input/NC transistor or NO input/NO transistor. Contact or proximity sensor and its connection line short or open circuit fault detection is also DIP switch
configurable: fault detection can be enabled (in case of fault it de-energizes the corresponding output transistor and turns the fault LED on) or disabled (in case of fault the
corresponding output transistor repeats the input line open or closet status as configured).
D1031D dual channel type has two input channels and four output transistors; the unit has two DIP switch configurable operating modes:
Mode A) input channel actuates in parallel the two output transistors. Transistor actuation mode can be independently configured for each output in two modes:
NO input/NC transitor or NO input/NO transistor.
Mode B) input channel actuates output transistor A configurable in two modes as in mode A above. Output transistor B operates as a fault output (in case of input fault, transistor B
actuates and the fault LED turns on while transistor A repeats the input line as configured). Actuation can be DIP switch configured in two modes:
No input fault/energized transistor (it de-energizes in case of fault) or No input fault/de-energized transistor (it energizes in case of fault).
Function: 2 or 4 channels I.S. switch repeater for contact or EN60947-5-6 proximity. Provides 3 port isolation (input/output/supply).
Signalling LEDs: Power supply indication (green), output status (yellow), line fault (red).
Field Configurability: NO/NC input for contact/proximitor, NO/NC transistor operation and fault detection enable/disable.
EMC: Fully compliant with CE marking applicable requirements.
Characteristics
Supply: 12-24 Vdc nom (10 to 30 Vdc) reverse polarity protected, ripple within voltage limits 5 Vpp.
Current consumption @ 24 V: 50 mA for 4 channels D1031Q, 40 mA for 2 channels D1031D with input closed and transistors energized.
Current consumption @ 12 V: 100 mA for 4 channels D1031Q, 80 mA for 2 channels D1031D with input closed and transistors energized.
Power dissipation: 1.2 W for 4 channels D1031Q, 1.0 W for 2 channels D1031D with 24 V supply voltage, input closed and transistors energized.
Max. power consumption: at 30 V supply voltage, short circuit input and transistors energized, 1.4 W for 4 channels D1031Q, 1.0 W for 2 channels D1031D.
Isolation (Test Voltage): I.S. In/Out 1.5 KV; I.S. In/Supply 1.5 KV; Out/Supply 500 V; Out 1-3/Out 2-4 500 V.
Input switching current levels: ON 2.1 mA, OFF 1.2 mA, switch current 1.65 mA ± 0.2 mA hysteresis.
Fault current levels: open fault 0.2 mA, short fault 6.8 mA
(when enabled both faults de-energize channel transistor with quad channel unit D1031Q or actuate fault transistor with dual channel unit D1031D).
Input equivalent source: 8 V 1 Ktypical (8 V no load, 8 mA short circuit).
Output: voltage free SPST optocoupled open-collector transistor.
Open-collector rating: 100 mA at 35 V (2.0 V voltage drop).
Leakage current: 50 µA at 35 V.
Response time: 500 µs.
Frequency response: 1 KHz maximum.
Compatibility:
CE mark compliant, conforms to Directive: 2014/34/EU ATEX, 2014/30/EU EMC, 2014/35/EU LVD, 2011/65/EU RoHS.
Environmental conditions:
Operating: temperature limits -20 to + 60 °C, relative humidity max 95 %.
Storage: temperature limits -45 to + 80 °C.
Safety Description:
ATEX: II (1)G [Ex ia Ga] IIC, II (1)D [Ex ia Da] IIIC, I (M1) [Ex ia Ma] I, II 3G Ex nA IIC T4 Gc
IECEx / INMETRO: [Ex ia Ga] IIC, [Ex ia Da] IIIC, [Ex ia Ma] I, Ex nA IIC T4 Gc
UL: NI / I / 2 / ABCD / T4, AIS / I, II, III / 1 / ABCDEFG, AEx nC [ia] IIC
C-UL: NI / I / 2 / ABCD / T4, AIS / I, II, III / 1 / ABCDEFG, Ex nC [ia] IIC
FM: NI / I / 2 / ABCD / T4, NI / I / 2 / IIC / T4, AIS / I, II, III / 1 / ABCDEFG, AEx [ia] IIC
FMC: NI / I / 2 / ABCD / T4, NI / I / 2 / IIC / T4, AIS / I, II, III / 1 / ABCDEFG, Ex [ia] IIC
EAC-EX: 2Ex nA [ia Ga] IIC T4 X, [Ex ia Da] IIIC X, [Ex ia Ma] I X.
UKR TR n. 898: 2ExnAiaIICT4 X, ExiaI X
associated apparatus and non-sparking electrical equipment.
Uo/Voc = 10.7 V, Io/Isc = 15 mA, Po/Po = 39 mW at terminals 13-14, 15-16.
Um = 250 Vrms, -20 °C Ta 60 °C.
Approvals:
DMT 01 ATEX E 042 X conforms to EN60079-0, EN60079-11, EN60079-26.
IECEx BVS 07.0027X conforms to IEC60079-0, IEC60079-11, IEC60079-26
IMQ 09 ATEX 013 X conforms to EN60079-0, EN60079-15.
IECEx IMQ 13.0011X conforms to IEC60079-0, IEC60079-15.
INMETRO DNV 13.0108 X conforms to ABNT NBR IEC60079-0, ABNT NBR IEC60079-11, ABNT NBR IEC60079-15, ABNT NBR IEC60079-26.
UL & C-UL E222308 conforms to UL913, UL 60079-0, UL60079-11 for UL and CSA-C22.2 No.157-92, CSA-E60079-0, CSA-E60079-11 for C-UL.
FM & FM-C No. 3024643, 3029921C, conforms to Class 3600, 3610, 3611, 3810 and C22.2 No.142, C22.2 No.157, C22.2 No.213, E60079-0, E60079-11, E60079-15.
C-IT.MH04.B.00306 conforms to GOST R IEC 60079-0,GOST R IEC 60079-11, GOST R IEC 60079-15.
C16.0034 X conforms to  7113,  22782.5-78,  I 60079-15.
TUV Certificate No. C-IS-236198-02, SIL 2 according to IEC 61511.
DNV No.A-13778 and KR No.MIL20769-EL001 Certificates for maritime applications.
Mounting: T35 DIN Rail according to EN50022.
Weight: about 130 g D1031Q, 120 g D1031D.
Connection: by polarized plug-in disconnect screw terminal blocks to accommodate terminations up to 2.5 mm2.
Location: Safe Area/Non Hazardous Locations or Zone 2, Group IIC T4, Class I, Division 2, Groups A, B, C, D Temperature Code T4 and Class I, Zone 2, Group IIC, IIB, IIA
T4 installation.
Protection class: IP 20.
Dimensions: Width 22.5 mm, Depth 99 mm, Height 114.5 mm.
Technical Data

D1031 - SIL 2 Switch / Proximity Detector Repeater Transistor OutputG.M. International ISM0009-17 3
Model: D1031
2 channels D
Power Bus enclosure
4 channels Q
/B
Ordering information
Front Panel and Features
SIL 2 according to IEC 61511. Tproof = 4 / 10 years (10% / >10 % of total SIF)
PFDavg (1 year) 2.16 E-04, SFF 71.85 %;
Input from Zone 0 (Zone 20), Division 1, installation in Zone 2, Division 2.
NO/NC contact/proximity Detector Input.
Four opto isolated voltage free Transistor Output Signals.
Transistor Output for fault detection on dual channel version.
Three port isolation, Input/Output/Supply.
EMC Compatibility to EN61000-6-2, EN61000-6-4.
In-field programmability by DIP Switch.
ATEX, IECEx, UL & C-UL, FM & FM-C, INMETRO, EAC-EX, UKR TR n. 898, TÜV Certifications.
Type Approval Certificate DNV and KR for maritime applications.
High Reliability, SMD components.
High Density, four channels per unit.
Simplified installation using standard DIN Rail and plug-in terminal blocks.
250 Vrms (Um) max. voltage allowed to the instruments associated with the barrier.
Power Bus and DIN-Rail accessories:
DIN rail anchor MCHP065 DIN rail stopper MOR016
Terminal block male MOR017 Terminal block female MOR022

D1031 - SIL 2 Switch / Proximity Detector Repeater Transistor Output G.M. International ISM0009-17
4
D1031Q
+ Input Ch 3 for Proximity or
Input Ch 3 for Voltage free Contact
Terminal block connections
HAZARDOUS AREA SAFE AREA
- Input Ch 3 for Proximity or
Input Ch 3 for Voltage free Contact
+ Input Ch 4 for Proximity or
Input Ch 4 for Voltage free Contact
- Input Ch 4 for Proximity or
Input Ch 4 for Voltage free Contact
9
10
11
12
Output Ch 1
1
Output Common Ch 1 and Ch 3
2
+ Power Supply 24 Vdc
3
- Power Supply 24 Vdc
4
Output Ch 2
5
Output Common Ch 2 and Ch 4
6
Output Ch 3
7
Output Ch 4
8
D1031D
+ Input Ch 1 for Proximity or
Input Ch 1 for Voltage free Contact
HAZARDOUS AREA SAFE AREA
- Input Ch 1 for Proximity or
Input Ch 1 for Voltage free Contact
13
14
Output Ch 1-A
1
Output Common Ch 1-A and Ch 1-B
2
+ Power Supply 24 Vdc
3
- Power Supply 24 Vdc
4
Output Ch 2-A
5
Output Common Ch 2-A and Ch 2-B
6
Output Ch 1-B
7
Output Ch 2-B
8
+ Input Ch 1 for Proximity or
Input Ch 1 for Voltage free Contact
- Input Ch 1 for Proximity or
Input Ch 1 for Voltage free Contact
+ Input Ch 2 for Proximity
Input Ch 2 for Voltage free Contact
- Input Ch 2 for Proximity
Input Ch 2 for Voltage free Contact
13
14
15
16
+ Input Ch 2 for Proximity or
Input Ch 2 for Voltage free Contact
- Input Ch 2 for Proximity or
Input Ch 2 for Voltage free Contact
15
16

D1031 - SIL 2 Switch / Proximity Detector Repeater Transistor OutputG.M. International ISM0009-17 5
Parameters Table
In the system safety analysis, always check the Hazardous Area/Hazardous Locations devices to conform with the related system documentation, if the device is Intrinsically Safe check
its suitability for the Hazardous Area/Hazardous Locations and gas group encountered and that its maximum allowable voltage, current, power (Ui/Vmax, Ii/Imax, Pi/Pi) are not exceeded
by the safety parameters (Uo/Voc, Io/Isc, Po/Po) of the D1031 series Associated Apparatus connected to it. Also consider the maximum operating temperature of the field device, check
that added connecting cable and field device capacitance and inductance do not exceed the limits (Co/Ca, Lo/La, Lo/Ro) given in the Associated Apparatus parameters for the effective
gas group. See parameters on enclosure side and the ones indicated in the table below:
Must
be
Hazardous Area/
Hazardous Locations
Device Parameters
D1031 Associated
Apparatus Parameters
Uo / Voc = 10.7 V Ui / Vmax
D1031 Terminals
Ch1
Ch2
13 -14
15 -16
Ch3
Ch4
9 - 10
11 - 12

Io / Isc = 15 mA li / Imax
Ch1
Ch2
13 -14
15 -16
Ch3
Ch4
9 - 10
11 - 12

Po / Po = 39 mW Pi / Pi
Ch1
Ch2
13 -14
15 -16
Ch3
Ch4
9 - 10
11 - 12

Must
be
Hazardous Area/
Hazardous Locations
Device + Cable Parameters
D1031 Terminals D1031 Associated
Apparatus Parameters
IIC (A, B)
Co / Ca = 2.23 µF
Co / Ca = 69 µF
IIB (C)
IIA (D) Ci / Ci device + C cable
Ch1
Ch2
13 -14
15 -16
Ch3
Ch4
9 - 10
11 - 12

Li / Li device + L cable
Ch1
Ch2
13 -14
15 -16
Ch3
Ch4
9 - 10
11 - 12

Li / Ri device and
L cable / R cable
Ch1
Ch2
13 -14
15 -16
Ch3
Ch4
9 - 10
11 - 12

Co / Ca = 15.6 µF
IIC (A, B)
Lo / La = 172 mH
Lo / La = 1300 mH
IIB (C)
IIA (D)
Lo / La = 689 mH
IIC (A, B)
Lo / Ro = 930 µH/
Lo / Ro = 7440 µH/
IIB (C)
IIA (D)
Lo / Ro = 3720 µH/
NOTE for USA and Canada:
IIC equal to Gas Groups A, B, C, D, E, F and G,
IIB equal to Gas Groups C, D, E, F and G,
IIA equal to Gas Groups D, E, F and G
For installations in which both the Ci and Li of the Intrinsically Safe apparatus exceed 1 % of the Co and Lo parameters of the Associated Apparatus (excluding the cable),
then 50 % of Co and Lo parameters are applicable and shall not be exceeded (50 % of the Co and Lo become the limits which must include the cable such that
Ci device + C cable 50 % of Co and Li device + L cable 50 % of Lo).
If the cable parameters are unknown, the following value may be used: Capacitance 60pF per foot (180pF per meter), Inductance 0.20µH per foot (0.60µH per meter).
The Intrinsic Safety Entity Concept allows the interconnection of Intrinsically Safe devices approved with entity parameters not specifically examined in combination as a system when
the above conditions are respected.
For Division 1 and Zone 0 installations, the configuration of Intrinsically Safe Equipment must be FM approved under Entity Concept (or third party approved);
for Division 2 installations, the configuration of Intrinsically Safe Equipment must be FM approved under non-incendive field wiring or Entity Concept (or third party approved).
Co / Ca = 15.6 µF
I
IIIC
Co / Ca = 60 µF
Lo / La = 689 mH
I
IIIC
Lo / La = 2263 mH
Lo / Ro = 3720 µH/
I
IIIC
Lo / Ro = 12200 µH/

D1031 - SIL 2 Switch / Proximity Detector Repeater Transistor Output G.M. International ISM0009-17
6
Function Diagram
HAZARDOUS AREA ZONE 0 (ZONE 20) GROUP IIC,
HAZARDOUS LOCATIONS CLASS I, DIVISION 1, GROUPS A, B, C, D,
CLASS II, DIVISION 1, GROUPS E, F, G, CLASS III, DIVISION 1,
CLASS I, ZONE 0, GROUP IIC
SAFE AREA, ZONE 2 GROUP IIC T4,
NON HAZARDOUS LOCATIONS, CLASS I, DIVISION 2,
GROUPS A, B, C, D T-Code T4, CLASS I, ZONE 2, GROUP IIC T4
MODEL D1031Q
13
14
3 +
4 -
1
2 Common Channels 1-3
Supply 12-24 Vdc
Out 1
5
6 Common Channels 2-4
Out 2
7Out 3
8Out 4
15
16
9
10
11
12
Common
positive
connection
2 Common Channels 1-3
6 Common Channels 2-4
+
-
In 1
Proximity
+
-
In 2
+
-
In 3
+
-
In 4
=
=
=
=
voltage free
Contact
MODEL D1031D
13
14
3 +
4 -
1
2 Common Channel 1
Supply 12-24 Vdc
Out 1-A
5
6 Common Channel 2
Out 2-A
7Out 1-B
8Out 2-B
15
16
Common
positive
connection
2 Common Channel 1
6 Common Channel 2
+
-
In 1
voltage free
Contact Proximity
+
-
In 2
=
=
=
=

D1031 - SIL 2 Switch / Proximity Detector Repeater Transistor OutputG.M. International ISM0009-17 7
Functional Safety Manual and Application
Application for D1031Q
Failure category Failure rates (FIT)
dd = Total Dangerous Detected failures 0.00
du = Total Dangerous Undetected failures 49.29
sd = Total Safe Detected failures 0.00
su = Total Safe Undetected failures 125.82
λtot safe = Total Failure Rate (Safety Function) = λdd + λdu + λsd + λsu 175.11
MTBF (safety function, one channel) = (1 / λtot safe) + MTTR (8 hours) 651 years
no effect = “No Effect” failures 95.89
not part = “Not Part” failures 125.20
λtot device = Total Failure Rate (Device) = λtot safe + λno effect + λnot part 396.20
MTBF (device) = (1 / λtot device) + MTTR (8 hours) 288 years
λsd λsu λdd λdu SFF
0.00 FIT 125.82 FIT 0.00 FIT 49.29 FIT 71.85%
PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes >10% of total SIF dangerous failures:
PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes 10% of total SIF dangerous failures:
Failure rates table according to IEC 61508:2010 Ed.2 :
Failure rate table:
Safety Function and Failure behavior:
D1031Q is considered to be operating in Low Demand mode, as a Type B module, having Hardware Fault Tolerance (HFT) = 0.
The failure behavior is described from the following definitions :
Fail-Safe State: it is defined as the output being de-energized (so that the output transistor is open).
Fail Safe: failure mode that causes the module / (sub)system to go to the defined fail-safe state without a demand from the process.
Fail Dangerous: failure mode that does not respond to a demand from the process (i.e. being unable to go to the defined fail-safe state), so that the output remains energized.
Fail “No Effect”: failure mode of a component that plays a part in implementing the safety function but is neither a safe failure nor a dangerous failure.
When calculating the SFF, this failure mode is not taken into account;
Fail “Not Part”: failure mode of a component which is not part of the safety function but which is part of the circuit diagram and is listed for completeness.
When calculating the SFF, this failure mode is not taken into account.
As the module is supposed to be proven-in-use device, therefore according to the requirements of IEC 61511-1 section 11.4.4, a HFT = 0 is sufficient for SIL 2 (sub-) systems including
Type B components and having a SFF equal or more than 60%.
The 4 channels of D1031Q module can not be used to increase the hardware fault tolerance, needed for a higher SIL of a certain Safety Function, as they are not completely
independent one from another.
Failure rate date: taken from Siemens Standard SN29500.
Input signal state
Pins 13-14 (In 1-Ch.1) or 15-16 (In 2-Ch.2) or
Pins 9-10 (In 3-Ch.3) or Pins 11-12 (In 4-Ch.4)
Output transistor state
Pins 1-2 (Out 1 - Ch.1) or 5-6 (Out 2 - Ch.2)
Pins 7-2 (Out 3 - Ch.3) or 8-6 (Out 4 - Ch.4)
Channel status
yellow LED
state
Channel fault
red LED
state
Proximity sensor is OFF or switch is open Open (De-energize transistor) OFF OFF
Proximity sensor is ON or switch is closed Closed (Energized transistor) ON OFF
Independently from proximity sensor
or switch state, the input line is break
Open
(De-energized transistor as safe state condition) OFF ON
Independently from proximity sensor
or switch state, the input line is in short circuit
Open
(De-energized transistor as safe state condition) OFF ON
Description: For this application, enable input line fault (open or short) detection and direct input to output transfer function, by set the internal dip-switches in the following mode
(see page 11 for more information):
The module is powered by connecting 24 Vdc power supply to Pins 3 (+ positive) - 4 (- negative). The green LED is lit in presence of supply power.
Input signals from field are applied to Pins 13-14 (In 1 - Ch.1), Pins 15-16 (In 2 - Ch.2), Pins 9-10 (In 3 - Ch.3) and Pins 11-12 (In 4 - Ch.4).
The following table describes for each channel the state (open or closed) of its output contacts when its input signal is in OFF or ON state, and it gives information about turn-on
or turn-off of the related channel status LED and channel fault LED:
Dip-switch position 1 2 3 4
ON/OFF state ON ON ON ON
5
ON
6
ON
7
ON
8
ON
T[Proof] = 1 year T[Proof] = 4 years
PFDavg = 2.16 E-04 Valid for SIL 2 PFDavg = 8.65 E-04 Valid for SIL 2
T[Proof] = 10 years
PFDavg = 2.16 E-03 Valid for SIL 2
This type “B” system has SFF = 71.85 % 60 % and HFT = 0, which is sufficient to get SIL 2 in accordance with the requirements of IEC 61511-1 section 11.4.4 during a proven-in-use
assessment.
OFF operation
Field Input: proximity is OFF
or switch is open
Channel 1
Channel 3
1
2 Out 1 Safety PLC
Input
Supply
24 Vdc
3 + 4 -
13
14
In 1
15
16
In 2
Out 1,2,3,4 transistor are de-energized,
1-2, 5-6, 7-2 and 8-6 are open
9
10
In 3
11
12
In 4
5
6
7
2
8
6
Channel 2
Channel 4
D1031Q Out 2 Safety PLC
Input
Out 3 Safety PLC
Input
Out 4 Safety PLC
Input
ON operation
Safety PLC
Input
Safety PLC
Input
Safety PLC
Input
Safety PLC
Input
Field Input: proximity is ON
or switch is open
Channel 1
Channel 3
1
2 Out 1
Supply
24 Vdc
3 + 4 -
13
14
In 1
15
16
In 2
Out 1,2,3,4 transistor are energized,
1-2, 5-6, 7-2 and 8-6 are closed
9
10
In 3
11
12
In 4
5
6
7
2
8
6
Channel 2
Channel 4
D1031Q
Out 2
Out 3
Out 4

D1031 - SIL 2 Switch / Proximity Detector Repeater Transistor Output G.M. International ISM0009-17
8
Functional Safety Manual and Application
Application for D1031D
Safety Function and Failure behavior:
D1031D is considered to be operating in Low Demand mode, as a Type B module, having Hardware Fault Tolerance (HFT) = 0.
The failure behavior is described from the following definitions :
Fail-Safe State: it is defined as the output being de-energized (so that the output transistor is open)
Fail Safe: failure mode that causes the module / (sub)system to go to the defined fail-safe state without a demand from the process.
Fail Dangerous: failure mode that does not respond to a demand from the process (i.e. being unable to go to the defined fail-safe state), so that the output remains energized.
Fail “No Effect”: failure mode of a component that plays a part in implementing the safety function but is neither a safe failure nor a dangerous failure.
When calculating the SFF, this failure mode is not taken into account;
Fail “Not Part”: failure mode of a component which is not part of the safety function but which is part of the circuit diagram and is listed for completeness.
When calculating the SFF, this failure mode is not taken into account.
As the module is supposed to be proven-in-use device, therefore according to the requirements of IEC 61511-1 section 11.4.4, a HFT = 0 is sufficient for SIL 2 (sub-) systems including
Type B components and having a SFF equal or more than 60%.
Only Out 1-A and Out 2-A are functional safety related, while Out 1-B (Pins 7-2) and Out 2-B (Pins 8-6) as Out 1-A and Out 2-A Duplicator outputs are only for service purpose,
not functional safety related.
Failure rate date: taken from Siemens Standard SN29500.
Description:
For this application, enable input line fault (open or short) detection and direct input to output transfer function, by set the internal dip-switches in the following mode
(see page 13 for more information):
The module is powered by connecting 24 Vdc power supply to Pins 3 (+ positive) - 4 (- negative). The green LED is lit in presence of supply power.
Input signal from field is applied to Pins 13-14 (In 1 - Ch.1) and Pins 15-16 (In 2 - Ch.2).
Only Out 1-A (Pins 1-2) and Out 2-A (Pins 5-6) are functional safety related, while Out 1-B (Pins 7-2) and Out 2-B (Pins 8-6) as Out 1-A and Out 2-A Duplicator outputs are only
for service purpose, not functional safety related.
The following table describes for each channel the state (open or closed) of its output when its input signal is in OFF or ON state, and it gives information about turn-on or turn-off
of its channel status LED and channel fault LED:
Failure category Failure rates (FIT)
dd = Total Dangerous Detected failures 0.00
du = Total Dangerous Undetected failures 49.29
sd = Total Safe Detected failures 0.00
su = Total Safe Undetected failures 125.82
λtot safe = Total Failure Rate (Safety Function) = λdd + λdu + λsd + λsu 175.11
MTBF (safety function, channel 1) = (1 / λtot safe) + MTTR (8 hours) 651 years
no effect = “No Effect” failures 95.89
not part = “Not Part” failures 112.00
λtot device = Total Failure Rate (Device) = λtot safe + λno effect + λnot part 383.00
MTBF (device, channel 1) = (1 / λtot device) + MTTR (8 hours) 298 years
λsd λsu λdd λdu SFF
0.00 FIT 125.82 FIT 0.00 FIT 49.29 FIT 71.85%
PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes >10% of total SIF dangerous failures:
PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes 10% of total SIF dangerous failures:
Failure rates table according to IEC 61508:2010 Ed.2 :
Failure rate table:
T[Proof] = 1 year T[Proof] = 4 years
PFDavg = 2.16 E-04 Valid for SIL 2 PFDavg = 8.65 E-04 Valid for SIL 2
OFF operation
This type “B” system has SFF = 71.85 % 60 % and HFT = 0, which is sufficient to get SIL 2 in accordance with the requirements of IEC 61511-1 section 11.4.4 during a proven-in-use
assessment.
T[Proof] = 10 years
PFDavg = 2.16 E-03 Valid for SIL 2
Field Input: proximity is OFF
or switch is open
Channel 1
1
2 Out 1-A Safety PLC
Input
Supply
24 Vdc
3 + 4 -
13
14
In 1
15
16
In 2
Out 1-A and Out 2-A transistor are
de-energized, 1-2 and 5-6 are open.
Out 1-B and Out 2-B are Out 1-A and Out 2-A
Duplicator outputs
5
6
7
2
8
6
Channel 2
D1031D
Out 2-A Safety PLC
Input
Out 1-B PLC
Input
Out 2-B PLC
Input
Safety PLC
Input
Safety PLC
Input
PLC
Input
PLC
Input
Field Input: proximity is ON
or switch is open
Channel 1
1
2 Out 1-A
Supply
24 Vdc
3 + 4 -
13
14
In 1
15
16
In 2 5
6
7
2
8
6
Channel 2
D1031D
Out 2-A
Out 1-B
Out 2-B
Dip-switch position 1 2 3 4
ON/OFF state ON ON ON ON
5
OFF
6
-
7
OFF
8
-
ON operation
Input signal state
Pins 13-14 (In 1 - Ch.1) or 15-16 (In 2 - Ch.2)
Output transistor state
Out 1-A (Pins 1-2) or Out 2-A (Pins 5-6)
(Functional safety related output)
1-A or 2-A
Ch. status yellow
LED state
1-A or 2-A
Ch. fault red
LED state
Proximity sensor is OFF or switch is open Open (De-energized transistor) OFF OFF
Proximity sensor is ON or switch is closed Closed (Energized transistor) ON OFF
The input line is broken Open (De-energized transistor as safe state condition) OFF ON
The input line is in short circuit Open (De-energized transistor as safe state condition) OFF ON
Out 1-A and Out 2-A transistor are energized,
1-2 and 5-6 are closed.
Out 1-B and Out 2-B are Out 1-A and Out 2-A
Duplicator outputs

D1031 - SIL 2 Switch / Proximity Detector Repeater Transistor OutputG.M. International ISM0009-17 9
D1031 series are isolated Intrinsically Safe Associated Apparatus installed into standard EN50022 T35 DIN Rail located in Safe Area/Non Hazardous Locations or Zone 2, Group IIC,
Temperature Classification T4, Class I, Division 2, Groups A, B, C, D, Temperature Code T4 and Class I, Zone 2, Group IIC, IIB, IIA Temperature Code T4 Hazardous Area/Hazardous
Locations (according to EN/IEC60079-15, FM Class No. 3611, CSA-C22.2 No. 213-M1987, CSA-E60079-15) within the specified operating temperature limits Tamb -20 to +60 °C,
and connected to equipment with a maximum limit for AC power supply Um of 250 Vrms.
Non-incendive field wiring is not recognized by the Canadian Electrical Code, installation is permitted in the US only.
For installation of the unit in a Class I, Division 2 or Class I, Zone 2 location, the wiring between the control equipment and the D1031 associated apparatus shall be accomplished
via conduit connections or another acceptable Division 2, Zone 2 wiring method according to the NEC and the CEC.
Not to be connected to control equipment that uses or generates more than 250 Vrms or Vdc with respect to earth ground.
D1031 series must be installed, operated and maintained only by qualified personnel, in accordance to the relevant national/international installation standards
(e.g. IEC/EN60079-14 Electrical apparatus for explosive gas atmospheres - Part 14: Electrical installations in hazardous areas (other than mines), BS 5345 Pt4, VDE 165,
ANSI/ISA RP12.06.01 Installation of Intrinsically Safe System for Hazardous (Classified) Locations, National Electrical Code NEC ANSI/NFPA 70 Section 504 and 505,
Canadian Electrical Code CEC) following the established installation rules, particular care shall be given to segregation and clear identification of I.S. conductors from non I.S. ones.
De-energize power source (turn off power supply voltage) before plug or unplug the terminal blocks when installed in Hazardous Area/Hazardous Locations or
unless area is known to be nonhazardous.
Warning: substitution of components may impair Intrinsic Safety and suitability for Division 2, Zone 2.
Explosion Hazard: to prevent ignition of flammable or combustible atmospheres, disconnect power before servicing or unless area is known to be nonhazardous.
Failure to properly installation or use of the equipment may risk to damage the unit or severe personal injury.
The unit cannot be repaired by the end user and must be returned to the manufacturer or his authorized representative. Any unauthorized modification must be avoided.
Warning
D1031 Associated Apparatus
FM Approved
under Entity Concept
and non-incendive field wiring
Unclassified Locations or
Hazardous (Classified) Locations
Class I, Division 2, Groups A, B, C, D, T-Code T4
Class I, Zone 2, Group IIC, IIB, IIA, T-Code T4
FM Approved under Entity Concept,
or third party approval
Hazardous (Classified) Locations
Class I, Division 1, Groups A, B, C, D
Class II, Division 1, Groups E, F, G
Class III, Division 1
Class I, Zone 0, Group IIC, IIB, IIA
Intrinsically
Safe Equipment
Must not use or generate
more than 250 Vrms or Vdc
Control
Equipment
Unclassified Locations
Hazardous (Classified) Locations
Class I, Division 2, Groups A, B, C, D
Class II, Division 2, Groups E, F, G
Class III, Division 2
Class I, Zone 2, Group IIC, IIB, IIA
FM Approved under non-incendive field
wiring (permitted only for US installations),
or third party approval
13
14
1
2
+
-
-
+
Power Supply
3
4
16
15
-
+
Intrinsically
Safe Equipment
Unclassified Locations or
Hazardous (Classified) Locations
Class I, Division 2, Groups A, B, C, D, T-Code T4
Class I, Zone 2, Group IIC, IIB, IIA, T-Code T4
Unclassified Locations
Must not use or generate
more than 250 Vrms or Vdc
6
5Control
Equipment
Control
Equipment
Control
Equipment
2
6
8
7
Intrinsically
Safe Equipment -
+
10
9
Intrinsically
Safe Equipment
+
-
11
12
+
-Power Supply
Control
Equipment
Control
Equipment
Control
Equipment
Control
Equipment
14
9
11
12
10
16
15
13
4
3
2
7
8
6
2
6
5
1+
-
+
+
-
-
-
+
Non-incendive
Equipment
Non-incendive
Equipment
Non-incendive
Equipment
Non-incendive
Equipment
D1031 Associated Apparatus
FM Approved
under Entity Concept
and non-incendive field wiring
Testing procedure at T-proof
The proof test shall be performed to reveal dangerous faults which are undetected by diagnostic. This means that it is necessary to specify how dangerous undetected fault,
which have been noted during the FMEDA, can be revealed during proof test.
Note for switch input:use of voltage free electrical contacts with fault detection enabled requires, near the switch at the end of the line, a 1 Kseries connected resistor and a 10 K
parallel connected resistor in order to allow the fault detection circuit to distinguish between a condition of contact close/open and a line open/short circuit fault.
The Proof test consists of the following steps:
Steps Action
1 Bypass the Safety PLC or take any other appropriate action to avoid a false trip.
2 Vary the state conditions of the input sensors / contacts coming from field and verify that the relay or transistor outputs change their state from energized to de-
energized and vice-versa; also check that the de-energized state condition corresponds to the required Safety Function.
3 Disconnect the input wiring coming from the field sensor / contact and check that the corresponding alarm output is de-energized.
4 Short the input connections and verify that the corresponding outputs remains de-energized. In both cases, the corresponding alarm LEDs on the front panel must
be turned red.
5 Restore the loop to full operation.
6 Remove the bypass from the safety-related PLC or restore normal operation.
This test will reveal approximately 99 % of possible Dangerous Undetected failures in the repeater.

D1031 - SIL 2 Switch / Proximity Detector Repeater Transistor Output G.M. International ISM0009-17
10
Start-up
Before powering the unit check that all wires are properly connected, particularly supply conductors and their polarity, input and output wires, also check that Intrinsically Safe conductors
and cable trays are segregated (no direct contacts with other non I.S. conductors) and identified either by color coding, preferably blue, or by marking. Check conductors for exposed
wires that could touch each other causing dangerous unwanted shorts. Turn on power, the “power on” green led must be lit, status and fault led on each channel must be in accordance
with condition of the corresponding input line. If possible close and open input lines one at time checking the corresponding status and fault leds condition as well as output to be correct.
Installation
D1031 series are switch/proximity detector repeaters housed in a plastic enclosure suitable for installation on T35 DIN Rail according to EN50022.
D1031 unit can be mounted with any orientation over the entire ambient temperature range.
Electrical connection of conductors up to 2.5 mm² are accommodated by polarized plug-in removable screw terminal blocks which can be plugged in/out into a powered unit
without suffering or causing any damage (for Zone 2 or Division 2 installations check the area to be nonhazardous before servicing).
The wiring cables have to be proportionate in base to the current and the length of the cable.
On the section “Function Diagram” and enclosure side a block diagram identifies all connections and configuration DIP switches.
Identify the number of channels of the specific card (e.g. D1031D is a dual channel model and D1031Q is a quad channel model), the function and location of each connection terminal
using the wiring diagram on the corresponding section, as an example:
Connect 12-24 Vdc power supply positive at terminal “3” and negative at terminal “4”.
For Model D1031Q connect common output of channel 1-3 at terminal “2” and transistor output at terminal “1” for channel 1 and “7” for channel 3.
For Model D1031Q connect common output of channel 2-4 at terminal “6” and transistor output at terminal “5” for channel 2 and “8” for channel 4.
For Model D1031D connect proximity sensor or voltage free contact at terminal “13” positive and “14” negative for channel 1, connect at terminal “15” and “16” respectively for channel 2.
For Model D1031Q in addition to channel 1-2 connections above, connect terminal “9” positive and “10” negative for channel 3 and “11” positive and “12” negative for channel 4.
Intrinsically Safe conductors must be identified and segregated from non I.S. and wired in accordance to the relevant national/international installation standards
(e.g. EN/IEC60079-14 Electrical apparatus for explosive gas atmospheres - Part 14: Electrical installations in hazardous areas (other than mines), BS 5345 Pt4, VDE 165,
ANSI/ISA RP12.06.01 Installation of Intrinsically Safe System for Hazardous (Classified) Locations, National Electrical Code NEC ANSI/NFPA 70 Section 504 and 505,
Canadian Electrical Code CEC), make sure that conductors are well isolated from each other and do not produce any unintentional connection.
Connect SPST output transistors checking the load rating to be within the maximum rating (100 mA, 35 V resistive load).
The enclosure provides, according to EN60529, an IP20 minimum degree of mechanical protection (or similar to NEMA Standard 250 type 1) for indoor installation, outdoor installation
requires an additional enclosure with higher degree of protection (i.e. IP54 to IP65 or NEMA type 12-13) consistent with the effective operating environment of the specific installation.
Units must be protected against dirt, dust, extreme mechanical (e.g. vibration, impact and shock) and thermal stress, and casual contacts.
If enclosure needs to be cleaned use only a cloth lightly moistened by a mixture of detergent in water.
Electrostatic Hazard: to avoid electrostatic hazard, the enclosure of D1031 must be cleaned only with a damp or antistatic cloth.
Any penetration of cleaning liquid must be avoided to prevent damage to the unit. Any unauthorized card modification must be avoided.
According to EN61010, D1031 series must be connected to SELV or SELV-E supplies.
Operation
D1031 accepts as an input from Hazardous Area/Hazardous Locations a proximity sensor or voltage free electrical contact and repeats their status to Safe Area/Non Hazardous
Locations by optoisolated open collector transistor. Presence of supply power and status of output (energized or de-energized), as well as integrity or fault condition of sensor and
connecting line are displayed by signaling LEDs (green for power, yellow for status and red for fault condition). D1031Q (quad channel type) has four independent input channels and
actuates the corresponding output transistor; two actuation modes can be independently DIP switch configured for each input channel:
Normally open input / Normally close transistor or Normally close input / Normally close transistor.
Contact or proximity sensor and its connection line short or open circuit fault detection is also DIP switch configurable. Fault detection can be enabled (in case of fault de-energizes the
corresponding output channel transistor (open) and turns ON the fault LED) or be disabled (in case of fault the corresponding output channel transistor repeats the input line open or
close status as configured). D1031D (dual channel type) has two input channel and four output transistors; the unit has two DIP switch configurable operating modes:
A) Input channel actuates in parallel output transistors (providing a DPST type of output). Transistors actuation can be independently configured for each output in two modes:
Normally open input / Normally close transistor or Normally close input / Normally close transistor
B) Input channel actuates output transistor (A) configurable in two modes as above. Output transistor B operates as fault output (in case of input fault, transistor B actuates and the
fault LED turns on while transistor A repeats the input line as configured). Actuation can be configured in two modes:
No input fault / Close transistor (it de-energizes in case of fault) or No input fault / Open transistor (it energizes in case of fault).
Note: use of voltage free electrical contacts with fault detection enabled requires, near the switch at the end of the line, a 1 Kseries connected resistor and a 10 Kparallel connected
resistor in order to allow the fault detection circuit to distinguish between a condition of contact close/open and a line open/short circuit fault.

D1031 - SIL 2 Switch / Proximity Detector Repeater Transistor OutputG.M. International ISM0009-17 11
Input Output Input Output
OutputInputOutputInput
A configuration DIP switch is located on component side of pcb. This switch allows the configuration of input/output relationship, fault detection functions and operating mode.
Configuration
Dip switch configuration
D1031Q
2
1
CH1
Setting
Line fault
detection
ON
IN / OUT
Operation
NO-NC or
NC-NO
NO-NO or
NC-NC ON
1
OFF
4
4
3
3
Disabled
(contact / proximity sensor)
Enabled
(proximity sensor or contact
with terminating line resistor)
ON
13
2
OFF
NO
14
OR NC 13
14
13
NO
14
OR NC 13
14
CH2
Setting
Line fault
detection
ON
IN / OUT
Operation
NO-NC or
NC-NO
NO-NO or
NC-NC ON
OFF
Disabled
(contact / proximity sensor)
Enabled
(proximity sensor or contact
with terminating line resistor)
OFF
Side A Panel View
1
NO
2
NC 1
2
1
NO
2
NC 1
2
Input Output Input Output
OutputInputOutputInput
15
NO
16
OR NC 15
16
15
NO
16
OR NC 15
16
5
NO
6
NC 5
6
5
NO
6
NC 5
6
Factory settings
For SIL applications.
For SIL applications.
1234
CH1
5678
CH2 CH3 CH4
ON
ONOFF ONOFF ONOFF ONOFF
For SIL applications.
For SIL applications.

D1031 - SIL 2 Switch / Proximity Detector Repeater Transistor Output G.M. International ISM0009-17
12
8
8
7
7
6
6
5
5
CH3
Setting
Line fault
detection
ON
IN / OUT
Operation
NO-NC or
NC-NO
NO-NO or
NC-NC ON
OFF
Disabled
(contact / proximity sensor)
Enabled
(proximity sensor or contact
with terminating line resistor)
OFF
CH4
Setting
Line fault
detection
ON
IN / OUT
Operation
NO-NC or
NC-NO
NO-NO or
NC-NC ON
OFF
Disabled
(contact / proximity sensor)
Enabled
(proximity sensor or contact
with terminating line resistor)
OFF
Input Output Input Output
OutputInputOutputInput
9
NO
10
OR NC 9
10
9
NO
10
OR NC 9
10
7
NO
2
NC 7
2
7
NO
2
NC 7
2
Input Output Input Output
OutputInputOutputInput
11
NO
12
OR NC 11
12
11
NO
12
OR NC 11
12
8
NO
6
NC 8
6
8
NO
6
NC 8
6
D1031Q Configuration Summary Table
Channel
IN/OUT Operation
NO-NC or NC-NO
NO-NO or NC-NC
(For SIL applications.)
SW2
OFF
SW4
OFF
ON
1 2 Channel
Line fault detection
Disabled
(contact/proximity sensor)
Enabled (For SIL applications.)
(proximity sensor or contact with terminating line resistor)
SW1 SW3
1 2
ON
OFF OFF
ONON
SW5 SW7
3 4
OFF OFF
ON
ON
SW6
OFF
SW8
OFF
ON
3 4
ON
For SIL applications.
For SIL applications.
For SIL applications.
For SIL applications.

D1031 - SIL 2 Switch / Proximity Detector Repeater Transistor OutputG.M. International ISM0009-17 13
5
Dip switch configuration
D1031D
6
6
6
6
5
Configuration
1
CH1
Setting
Line fault
detection
IN / OUT
Operation
NO-NC or
NC-NO
NO-NO or
NC-NC
1
2ON
2
OFF
ON
OFF
Disabled
(contact / proximity sensor)
Enabled
(proximity sensor or contact
with terminating line resistor)
Input Output Input Output
OutputInputOutputInput
13
NO
14
OR NC 13
14
13
NO
14
OR NC 13
14
1
NO
2
NC 1
2
1
NO
2
NC 1
2
B Output
Operation Normal Parallel
Mode
Reverse
Mode
OFF
ON
Fault
Output ON NO
Mode
NC
Mode
OFF
ON
OFF
Out BOut A
Out A Out B
No Fault
No Fault
1
NO
2
7
NO
2
1
NO
2
NC 7
2
7
NO
2
NC 7
2
1234
CH1
5678
ON
CH2
ONOFF ONOFF OFFOFF OFFOFF
For SIL applications.
For SIL applications.
For SIL applications.

D1031 - SIL 2 Switch / Proximity Detector Repeater Transistor Output G.M. International ISM0009-17
14
8
8
8
8
7
7
4
4
3
3
CH2
Setting
Line fault
detection
IN / OUT
Operation
NO-NC or
NC-NO
NO-NO or
NC-NC ON
OFF
ON
OFF
Disabled
(contact / proximity sensor)
Enabled
(proximity sensor or contact
with terminating line resistor)
Input Output Input Output
OutputInputOutputInput
15
NO
16
OR NC 15
16
15
NO
16
OR NC 15
16
5
NO
6
NC 5
6
5
NO
6
NC 5
6
B Output
Operation Normal Parallel
Mode
Reverse
Mode
OFF
ON
Fault
Output ON NO Mode
NC
Mode
OFF
ON
OFF
Out BOut A
Out A Out B
No Fault
No Fault
5
NO
6
8
NO
6
5
NO
6
NC 8
6
8
NO
6
NC 8
6
Channel 1
OFF
ON
Channel 1
OFF
ON
Mode
Direct
Reverse
NO
NC
1
OFF
ON
OFF
ON
D1031D Configuration Summary Table
2
OFF
ON
IN/OUT Operation SW2 B Output Operation SW5 SW6
SW4
NO-NC or NC-NO
NO-NO or NC-NC
(For SIL applications.)
Channel 1
OFF
ON
2
OFF
ON
Line fault detection SW1 SW3
Disabled
Enabled
(For SIL applications.)
2
OFF
ON
OFF
ON
SW8
2
OFF
ON
SW7
Normal
(For SIL applications.)
Fault Output
For SIL applications.
For SIL applications.
For SIL applications.