GMI D5062S Instruction Manual

D5062 - SIL 2 Vibration Transducer Interface G.M. International ISM0184-7
SIL 2 Vibration Transducer Interface,
DIN-Rail and Termination Board,
Model D5062S
D5062S
INSTRUCTION & SAFETY MANUAL

2 D5062 - SIL 2 Vibration Transducer Interface G.M. International ISM0184-7
General Description: The single channel DIN Rail Vibration Transducer Interface D5062S is a high integrity analog input interface suitable for applications requiring SIL 2 level
(according to IEC 61508:2010 Ed. 2) in safety related systems for high risk industries. It provides a fully floating dc supply for energizing vibration transducers, accelerometers or
2-3 wires sensors located in Hazardous Area, and repeats the sensor input voltage in a totally isolated circuit located in Safe Area to drive vibration monitors or analyzers for rotating
machinery control and supervision purposes.
Mounting on standard DIN-Rail, with or without Power Bus, or on customized Termination Boards, in Safe Area / Non Hazardous Location or in Zone 2 / Class I, Division 2 or Class I,
Zone 2.
Functional Safety Management Certification: G.M. International is certified by TUV to conform to IEC61508:2010
part 1 clauses 5-6 for safety related systems up to and included SIL3.
Technical Data
Characteristics
Supply:
24 Vdc nom (18 to 30 Vdc) reverse polarity protected, ripple within voltage limits 5 Vpp, 2 A time lag fuse internally protected.
Current consumption @ 24 V: 75 mA with 20 mA transducer consumption and 2 mA output load, typical.
Power dissipation: 1.3 W with 24 V supply voltage, 20 mA transducer consumption and 2 mA output load typical.
Isolation (Test Voltage):
I.S. In/Out 1.5 KV; I.S. In/Supply 1.5 KV; Out/Supply 500 V.
Input:
0 V to -20 V (10 Kimpedance at terminals 7-8 or 8-9).
3 wires sensor supply voltage:
more than -22 V at 0 mA supply, more than -17 V at 15 mA supply
(current limited at 23 mA) at terminals 7-10 or 9-10.
2 wires sensor supply voltage:
more than -17 V with constant current supply mode at terminals 7-8 or 8-9.
Supply current selectable at 4 mA, 6 mA or 10 mA via internal DIP– Switch.
Output:
0 to -20 V on 10 Kload, with 10 output resistance.
Response time: 10 s (10 to 90 % step change).
Output ripple: 20 mVrms on 0.5 to 20 KHz band.
Frequency response: DC to 20 KHz within 1 dB maximum.
Performance:
Ref. Conditions 24 V supply, 10 Kload, 23 ± 1 °C ambient temperature.
Calibration accuracy: ± 0.05 % of full scale.
Linearity error: ± 0.05 % of full scale.
Supply voltage influence: ± 0.005 % of full scale for a min to max supply change.
Temperature influence: ± 0.005 % on zero and span for a 1 °C change.
Compatibility:
CE mark compliant, conforms to Directive: 2014/34/EU ATEX, 2014/30/EU EMC, 2014/35/EU LVD, 2011/65/EU RoHS.
Environmental conditions:
Operating: temperature limits – 40 to + 70 °C, relative humidity 95 %, up to 55 ° C.
Max altitude: 2000 m a.s.l.
Storage: temperature limits – 45 to + 80 °C.
Safety Description:
ATEX: II 3(1)G Ex nA [ia Ga] IIC T4 Gc, II (1)D [Ex ia Da] IIIC, I (M1) [Ex ia Ma] I
IECEx: Ex nA [ia Ga] IIC T4 Gc, [Ex ia Da] IIIC, [Ex ia Ma] I,
UL: NI / I / 2 / ABCD / T4, AIS / I, II, III / 1 / ABCDEFG, AEx nA [ia Ga] IIC T4 Gc
C-UL: NI / I / 2 / ABCD / T4, AIS / I, II, III / 1 / ABCDEFG, Ex nA [ia Ga] IIC T4 Gc X
UKR TR n. 898: 2ExnAiaIICT4 X, ExiaI X
associated apparatus and non-sparking electrical equipment.
Uo/Voc = 27 V, Io/Isc = 90 mA, Po/Po = 576 mW at terminals 7-8-9-10.
Ui/Vmax = 30 V, Ci = 0 nF, Li = 0 nH at terminals 7-8-9.
Um = 250 Vrms, -40 °C Ta 70 °C.
Approvals :
BVS 14 ATEX E 073 X conforms to EN60079-0, EN60079-11, EN60079-15.
IECEx BVS 14.0044 X conforms to IEC60079-0, IEC60079-11, IEC60079-15.
UL & C-UL E222308 conforms to UL913, UL 60079-0, UL60079-11, UL60079-15, UL121201 for UL
and CSA-E60079-0, CSA-E60079-11, CSA-E60079-15 and CSA-C22.2 No. 213 for C-UL.
C16.0036 X conforms to  7113,  22782.5-78,  I 60079-15.
TC22332 for TIIS approval
TÜV Certificate No. C-IS-224248-01, SIL 2 conforms to IEC61508:2010 Ed. 2.
TÜV Certificate No. C-IS-236198-09, SIL 3 Functional Safety Certificate conforms to IEC61508:2010 Ed.2, for Management of Functional Safety.
DNV No.A-13625 and KR No.MIL20769-EL002 for maritime applications .
Mounting:
EN/IEC60715 TH 35 DIN-Rail, with or without Power Bus or on customized Termination Board.
Weight: about 125 g.
Connection: by polarized plug-in disconnect screw terminal blocks to accomodate terminations up to 2.5 mm2.
Location: installation in Safe Area/Non Hazardous Locations or Zone 2, Group IIC T4 or Class I, Division 2, Group A,B,C,D, T4 or Class I, Zone 2, Group IIC, T4.
Protection class: IP 20.
Dimensions: Width 12.5 mm, Depth 123 mm, Height 120 mm.
Ordering information
Model: D5062S Power Bus and DIN-Rail accessories:
Connector JDFT049
Cover and fix MCHP196
Terminal block male MOR017
Terminal block female MOR022
FSM
SIL 3

3
D5062 - SIL 2 Vibration Transducer InterfaceG.M. International ISM0184-7
Front Panel and Features
SIL 2 according to IEC 61508:2010 Ed. 2 for Tproof = 3 / 20 yrs (10% / >10 % of total SIF)
PFDavg (1 year) 3.35 E -04, SFF 68.08%
Systematic capability SIL 3
Input from Zone 0 (Zone 20), installation in Zone 2.
0 to –20 V Input/Output Signal.
Input selection via DIP-Switch.
Wide band signal transfer.
Input and Output short circuit proof.
High Accuracy.
Three port isolation, Input/Output/Supply.
EMC Compatibility to EN61000-6-2, EN61000-6-4, EN61326-1, EN61326-3-1 for safety system.
ATEX, IECEx, UL & C-UL, UKR TR n. 898, TIIS, TÜV Certifications.
TÜV Functional Safety Certification.
Type Approval Certificate DNV and KR for maritime applications.
Simplified installation using standard DIN-Rail and plug-in terminal blocks, with or without Power Bus,
or customized Termination Boards.
250 Vrms (Um) max. voltage allowed to the instruments associated with the barrier.
Common Input
Terminal block connections
HAZARDOUS AREA SAFE AREA
- Signal Input
- Power Input
7/9
8
10
- Signal Output
1
Common Output
2
+ Power Supply 24 Vdc
5
- Power Supply 24 Vdc
6
5 6
2
1
7 8
10
9
D5062
PWR
SIL 2
7 8
9 10
12
56

4 D5062 - SIL 2 Vibration Transducer Interface G.M. International ISM0184-7
Parameters Table
In the system safety analysis, always check the Hazardous Area/Hazardous Locations devices to conform with the related system documentation, if the device is Intrinsically Safe check
its suitability for the Hazardous Area/Hazardous Locations and group encountered and that its maximum allowable voltage, current, power (Ui/Vmax, Ii/Imax, Pi/Pi) are not exceeded
by the safety parameters (Uo/Voc, Io/Isc, Po/Po) of the D5062 series Associated Apparatus connected to it. Also consider the maximum operating temperature of the field device,
Check that added connecting cable and field device capacitance and inductance do not exceed the limits (Co/Ca, Lo/La, Lo/Ro) given in the Associated Apparatus parameters for the
effective group. See parameters indicated in the table below:
Must
be
Hazardous Area/Hazardous
Locations Device Parameters
D5062 Associated
Apparatus Parameters
D5062 Terminals
Uo / Voc = 27 V Ui / Vmax
7 - 8 - 9 - 10
Io / Isc = 90 mA Ii / Imax
Po / Po = 576 mW Pi / Pi
IIC (A,B)
Co / Ca = 0.09 µF
7 - 8 - 9 - 10
7 - 8 - 9 - 10
Must
be
Hazardous Area/Hazardous
Locations Device Parameters
D5062 Associated
Apparatus Parameters
D5062 Terminals
IIB (C)
Co / Ca = 0.7 µF
IIA (D)
Co / Ca = 2.3 µF
I
Co / Ca = 3.75 µF
IIIC (E, F, G)
Co / Ca = 0.7 µF
7 - 8 - 9 - 10 Ci / Ci device + C cable
IIC (A,B)
Lo / La = 4.1 mH
IIB (C)
Lo / La = 16.4 mH
IIA (D)
Lo / La = 33.9 mH
I
Lo / La = 54 mH
IIIC (E, F, G)
Lo / La = 16.4 mH
7 - 8 - 9 - 10 Li / Li device + L cable
IIC (A,B)
Lo / Ro = 56.8 µH/
IIB (C)
Lo / Ro = 227.3 µH/
IIA (D)
Lo / Ro = 454.7 µH/
I
Lo / Ro = 746.1 µH/
IIIC (E, F, G)
Lo / Ro = 227.3 µH/
7 - 8 - 9 - 10 Li / Ri device and
L cable / R cable
When used with separate powered intrinsically safe devices, check that maximum allowable voltage, current (Ui/Vmax, Ii/Imax) of the D5062 Associated Apparatus are not exceeded by
the safety parameters (Uo/Voc, Io/Isc) of the Intrinsically Safe device, indicated in the table below:
For installations in which both the Ci and Li of the Intrinsically Safe apparatus exceed 1 % of the Co and Lo parameters of the Associated Apparatus (excluding the cable),
then 50 % of Co and Lo parameters are applicable and shall not be exceeded (50 % of the Co and Lo become the limits which must include the cable such that Ci device + C cable
50 % of Co and Li device + L cable 50 % of Lo). The reduced capacitance of the external circuit (including cable) shall not be greater than 1 F for Groups I, IIA, IIB and 600 nF for
Group IIC.
If the cable parameters are unknown, the following values may be used: Capacitance 200pF per meter (60pF per foot), Inductance 1µH per meter (0.20µH per foot).
Must
be
Hazardous Area/Hazardous
Locations Device Parameters
D5062 Associated
Apparatus Parameters
D5062 Terminals
7 - 8 or 8 - 9 Ui / Vmax = 30 V Uo / Voc
7 - 8 or 8 - 9 Ci = 0 nF, Li= 0 nH

5
D5062 - SIL 2 Vibration Transducer InterfaceG.M. International ISM0184-7
Function Diagram
HAZARDOUS AREA ZONE 0 (ZONE 20) GROUP IIC,
HAZARDOUS LOCATIONS CLASS I, DIVISION 1, GROUPS A, B, C, D,
CLASS II, DIVISION 1, GROUPS E, F, G, CLASS III, DIVISION 1,
CLASS I, ZONE 0, GROUP IIC
SAFE AREA, ZONE 2 GROUP IIC T4,
NON HAZARDOUS LOCATIONS, CLASS I, DIVISION 2,
GROUPS A, B, C, D T-Code T4, CLASS I, ZONE 2, GROUP IIC T4
MODEL D5062S
8
9
5 +
6 - Supply 24 Vdc
=
=
7
Out
1
2
In
- Power
3 wires
Vibration
Transducer
- Signal
Common
Signal -
Common Vibration
Monitor
==
=
+
-Termination
board
connector
Power
Bus
Input Sensor
selection
via DIP Switch
3 wires transducers
1 = OFF, 2 = OFF, 3 = OFF, 4 = OFF.
1 2 3 4
ON
OFF
Input configuration selection via internal Dip-Switch
10
7/9

6 D5062 - SIL 2 Vibration Transducer Interface G.M. International ISM0184-7
Function Diagram
HAZARDOUS AREA ZONE 0 (ZONE 20)
GROUP IIC,
HAZARDOUS LOCATIONS CLASS I, DIVI-
SION 1, GROUPS A, B, C, D,
SAFE AREA, ZONE 2 GROUP IIC T4,
NON HAZARDOUS LOCATIONS, CLASS I, DIVISION 2,
GROUPS A, B, C, D T-Code T4, CLASS I, ZONE 2, GROUP IIC T4
Input configuration selection via internal Dip-Switch
1 2 3 4
ON
OFF
2 wires transducers (4 mA)
1 = ON, 2 = OFF, 3 = OFF, 4 = OFF.
1 2 3 4
ON
OFF
2 wires transducers (6 mA)
1 = ON, 2 = ON, 3 = OFF, 4 = OFF.
1 2 3 4
ON
OFF
2 wires transducers (10 mA)
1 = ON, 2 = OFF, 3 = ON, 4 = OFF.
MODEL D5062S
5 +
6 - Supply 24 Vdc
=
=
Out
1
2
In
Signal -
Common Vibration
Monitor
==
=
2 wires
Vibration
Transducer
- Signal
Common
8
9
7
Input Sensor
selection
via DIP Switch
+
-Termination
board
connector
Power
Bus
10
7/9

7
D5062 - SIL 2 Vibration Transducer InterfaceG.M. International ISM0184-7
Function Diagram
HAZARDOUS AREA ZONE 0 (ZONE 20)
GROUP IIC,
HAZARDOUS LOCATIONS CLASS I, DIVI-
SION 1, GROUPS A, B, C, D,
SAFE AREA, ZONE 2 GROUP IIC T4,
NON HAZARDOUS LOCATIONS, CLASS I, DIVISION 2,
GROUPS A, B, C, D T-Code T4, CLASS I, ZONE 2, GROUP IIC T4
Input configuration selection via internal Dip-Switch
1 2 3 4
ON
OFF
2 wires AC transducers
1 = OFF, 2 = OFF, 3 = OFF, 4 = ON.
MODEL D5062S
5 +
6 - Supply 24 Vdc
=
=
Out
1
2
In
Signal -
Common
Vibration
Monitor
==
=
2 wires
Vibration
Transducer
AC Signal
Common
8
9
7
+
-Termination
board
connector
Power
Bus
Input Sensor
selection
via DIP Switch
10
7/9

8 D5062 - SIL 2 Vibration Transducer Interface G.M. International ISM0184-7
Functional Safety Manual and Application
1st Application for D5062S, with 3 wires powered transducer input
Failure category Failure rates (FIT)
dd = Total Dangerous Detected failures 160.84
du = Total Dangerous Undetected failures 71.56
sd = Total Safe Detected failures 0.00
su = Total Safe Undetected failures 0.00
λtot safe = Total Failure Rate (Safety Function) = λdd + λdu + λsd + λsu 232.40
MTBF (safety function, single channel) = (1 / λtot safe) + MTTR (8 hours) 491 years
no effect = “No Effect” failures 269.70
not part = “Not Part” failures 22.70
λtot device = Total Failure Rate (Device) = λtot safe + λno effect + λnot part 524.80
MTBF (device, single channel) = (1 / λtot device) + MTTR (8 hours) 217 years
λsd λsu λdd λdu SFF DCD
0.0 FIT 0.00 FIT 160.84 FIT 71.56 FIT 69.21% 69.21%
T[Proof] = 1 year T[Proof] = 3 years
PFDavg = 3.15E-04 Valid for SIL 2 PFDavg = 9.46E-04 Valid for SIL 2
PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes >10% of total SIF dangerous failures:
PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes 10% of total SIF dangerous failures:
Failure rates table according to IEC 61508:2010 Ed.2 :
Failure rate table:
Safety Function and Failure behavior:
D5062S is considered to be operating in Low Demand mode, as a Type A module, having Hardware Fault Tolerance (HFT) = 0.
The failure behaviour is described by the following definitions:
Fail-Safe State: is defined as the output going Low or High, considering that the safety logic solver can convert the Low or High fail (dangerous detected) to the fail-safe state.
Fail Safe: a failure mode that causes the module / (sub)system to go to the defined fail-safe state without a demand from the process.
Fail Dangerous: failure mode that does not respond to a demand from the process (i.e. being unable to go to the defined fail-safe state) or deviates the output voltage by more
than 5 % of full span (> ± 1 Vdc).
Fail High: a failure mode that causes the output signal to go below the maximum negative voltage (< -20 Vdc). Assuming that the application program in the safety logic solver is
configured to detect High failure and does not automatically trip on this failure, this failure has been classified as a dangerous detected (DD) failure.
Fail Low: a failure mode that causes the output signal to go above the minimum negative voltage (> -0.5 Vdc). Assuming that the application program in the safety logic solver is
configured to detect Low failure and does not automatically trip on this failure, this failure has been classified as a dangerous detected (DD) failure.
Fail “No Effect”: failure mode of a component that plays a part in implementing the safety function but that is neither a safe failure nor a dangerous failure because the output
voltage is deviated by less than 5 % of full span (< ± 1 Vdc). When calculating the SFF, this failure mode is not taken into account.
Fail “Not part”: failure mode of a component that is not part of the safety function but part of the circuit diagram and is listed for completeness. When calculating the SFF, this
failure mode is not taken into account.
Failure rate date: taken from Siemens Standard SN29500.
Description:
For this application, set the internal dip-switches in the following mode (see page 11 for more information):
D5062S Signal -
1
2
Out
Vibration
Monitor -
Safety
PLC Input
The D5062S module is supplied (with 18 to 30Vdc supply voltage) at Pins 5 (+) – 6 (-). The green LED is lit in presence of supply power.
The input transducer supply current is applied between Pins 7/9-10 (Common, -Power) and the input transducer signal (DC or AC) is applied between Pins 8-7/9 (-Signal, Common).
When a DC input transducer is used, a 0 to -20Vdc input signal is applied. For AC transducers, a sinusoidal signal is applied (0 to 20Vpp, DC to 20kHz) together with a -10Vdc offset.
For DC signals, the input signals (0 to -20Vdc) is identically repeated at output Pins 1-2 (-Signal, Common); for AC signals, the AC component of the input signal (0 to 20Vpp, DC to
20kHz) is identically repeated at output Pins 1-2, while the -10Vdc offset is not repeated at the output pins.
T[Proof] = 20 years
PFDavg = 6.31E-03 Valid for SIL 2
Supply
24 Vdc
5 + 6 -
10
In 3 wires
Vibration
Transducer
Dip-switch position (D5062S) 1 2 3 4
3 wires transducer OFF OFF OFF OFF
Systematic capability SIL 3.
Common
8
7/9
- Power
- Signal
Common

9
D5062 - SIL 2 Vibration Transducer InterfaceG.M. International ISM0184-7
Functional Safety Manual and Application
2nd Application for D5062S, with 2 wires powered transducer input
Failure category Failure rates (FIT)
dd = Total Dangerous Detected failures 161.96
du = Total Dangerous Undetected failures 75.95
sd = Total Safe Detected failures 0.00
su = Total Safe Undetected failures 0.00
λtot safe = Total Failure Rate (Safety Function) = λdd + λdu + λsd + λsu 237.91
MTBF (safety function, single channel) = (1 / λtot safe) + MTTR (8 hours) 479 years
no effect = “No Effect” failures 274.79
not part = “Not Part” failures 12.10
λtot device = Total Failure Rate (Device) = λtot safe + λno effect + λnot part 524.80
MTBF (device, single channel) = (1 / λtot device) + MTTR (8 hours) 217 years
λsd λsu λdd λdu SFF DCD
0.0 FIT 0.00 FIT 161.96 FIT 75.95 FIT 68.08% 68.08%
T[Proof] = 1 year T[Proof] = 3 years
PFDavg = 3.35E-04 Valid for SIL 2 PFDavg = 1.00E-04 Valid for SIL 2
PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes >10% of total SIF dangerous failures:
PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes 10% of total SIF dangerous failures:
Failure rates table according to IEC 61508:2010 Ed.2 :
Failure rate table:
Safety Function and Failure behavior:
D5062S is considered to be operating in Low Demand mode, as a Type A module, having Hardware Fault Tolerance (HFT) = 0.
The failure behaviour is described by the following definitions:
Fail-Safe State: is defined as the output going Low or High, considering that the safety logic solver can convert the Low or High fail (dangerous detected) to the fail-safe state.
Fail Safe: a failure mode that causes the module / (sub)system to go to the defined fail-safe state without a demand from the process.
Fail Dangerous: failure mode that does not respond to a demand from the process (i.e. being unable to go to the defined fail-safe state) or deviates the output voltage by more
than 5 % of full span (> ± 1 Vdc).
Fail High: a failure mode that causes the output signal to go below the maximum negative voltage (< -20 Vdc). Assuming that the application program in the safety logic solver is
configured to detect High failure and does not automatically trip on this failure, this failure has been classified as a dangerous detected (DD) failure.
Fail Low: a failure mode that causes the output signal to go above the minimum negative voltage (> -0.5 Vdc). Assuming that the application program in the safety logic solver is
configured to detect Low failure and does not automatically trip on this failure, this failure has been classified as a dangerous detected (DD) failure.
Fail “No Effect”: failure mode of a component that plays a part in implementing the safety function but that is neither a safe failure nor a dangerous failure because the output
voltage is deviated by less than 5 % of full span (< ± 1 Vdc). When calculating the SFF, this failure mode is not taken into account.
Fail “Not part”: failure mode of a component that is not part of the safety function but part of the circuit diagram and is listed for completeness. When calculating the SFF, this
failure mode is not taken into account.
Failure rate date: taken from Siemens Standard SN29500.
Description:
For this application, set the internal dip-switches in the following mode (see page 11 for more information):
D5062S Signal -
1
2
Out
The D5062S module is supplied (with 18 to 30Vdc supply voltage) at Pins 5 (+) – 6 (-). The green LED is lit in presence of supply power.
The input transducer voltage signal (0 to -20Vdc) is applied between Pins 8-7/9 (-Signal, Common). The input transducer supply current is imposed to 4, 6 or 10mA by means of the
internal DIP-switches, as shown above.
The input signal (0 to -20Vdc) is identically repeated at output Pins 1-2 (-Signal, Common).
T[Proof] = 20 years
PFDavg = 6.69E-03 Valid for SIL 2
Supply
24 Vdc
5 + 6 -
10
In 2 wires
Vibration
Transducer
Systematic capability SIL 3.
Common
8
7/9
- Signal
Common
Dip-switch position(D5062S) 1 2 3 4
2 wires transducer (4 mA) ON OFF OFF OFF
2 wires transducer (6 mA) ON ON OFF OFF
2 wires transducer (10 mA) ON OFF ON OFF
Vibration
Monitor -
Safety
PLC Input

10 D5062 - SIL 2 Vibration Transducer Interface G.M. International ISM0184-7
Functional Safety Manual and Application
3rd Application for D5062S, with 2 wires AC (unpowered) transducer input
Failure category Failure rates (FIT)
dd = Total Dangerous Detected failures 160.84
du = Total Dangerous Undetected failures 71.96
sd = Total Safe Detected failures 0.00
su = Total Safe Undetected failures 0.00
λtot safe = Total Failure Rate (Safety Function) = λdd + λdu + λsd + λsu 232.80
MTBF (safety function, single channel) = (1 / λtot safe) + MTTR (8 hours) 490 years
no effect = “No Effect” failures 269.70
not part = “Not Part” failures 22.70
λtot device = Total Failure Rate (Device) = λtot safe + λno effect + λnot part 525.20
MTBF (device, single channel) = (1 / λtot device) + MTTR (8 hours) 217 years
λsd λsu λdd λdu SFF DCD
0.0 FIT 0.00 FIT 160.84 FIT 71.96 FIT 69.09% 69.09%
T[Proof] = 1 year T[Proof] = 3 years
PFDavg = 3.17E-04 Valid for SIL 2 PFDavg = 9.51E-04 Valid for SIL 2
PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes >10% of total SIF dangerous failures:
PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes 10% of total SIF dangerous failures:
Failure rates table according to IEC 61508:2010 Ed.2 :
Failure rate table:
Safety Function and Failure behavior:
D5062S is considered to be operating in Low Demand mode, as a Type A module, having Hardware Fault Tolerance (HFT) = 0.
The failure behaviour is described by the following definitions:
Fail-Safe State: is defined as the output going Low or High, considering that the safety logic solver can convert the Low or High fail (dangerous detected) to the fail-safe state.
Fail Safe: a failure mode that causes the module / (sub)system to go to the defined fail-safe state without a demand from the process.
Fail Dangerous: failure mode that does not respond to a demand from the process (i.e. being unable to go to the defined fail-safe state) or deviates the output voltage by more
than 5 % of full span (> ± 1 Vdc).
Fail High: a failure mode that causes the output signal to go below the maximum negative voltage (< -20 Vdc). Assuming that the application program in the safety logic solver is
configured to detect High failure and does not automatically trip on this failure, this failure has been classified as a dangerous detected (DD) failure.
Fail Low: a failure mode that causes the output signal to go above the minimum negative voltage (> -0.5 Vdc). Assuming that the application program in the safety logic solver is
configured to detect Low failure and does not automatically trip on this failure, this failure has been classified as a dangerous detected (DD) failure.
Fail “No Effect”: failure mode of a component that plays a part in implementing the safety function but that is neither a safe failure nor a dangerous failure because the output
voltage is deviated by less than 5 % of full span (< ± 1 Vdc). When calculating the SFF, this failure mode is not taken into account.
Fail “Not part”: failure mode of a component that is not part of the safety function but part of the circuit diagram and is listed for completeness. When calculating the SFF, this
failure mode is not taken into account.
Failure rate date: taken from Siemens Standard SN29500.
Description:
For this application, set the internal dip-switches in the following mode (see page 11 for more information):
D5062S Signal -
1
2
Out
The D5062S module is supplied (with 18 to 30Vdc supply voltage) at Pins 5 (+) – 6 (-). The green LED is lit in presence of supply power.
The input transducer AC signal (0 to 20Vpp, DC to 20kHz) is applied between Pins 8-7/9 (-Signal, Common). No DC offset must be applied.
The input signal (0 to 20Vpp, DC to 20kHz) is identically repeated at output Pins 1-2 (-Signal, Common).
T[Proof] = 20 years
PFDavg = 6.34E-03 Valid for SIL 2
Supply
24 Vdc
5 + 6 -
10
In 2 wires
Vibration
Transducer
Dip-switch position (D5062S) 1 2 3 4
2 wires AC transducer OFF OFF OFF ON
Systematic capability SIL 3.
Common
8
7/9
AC Signal
Common
Vibration
Monitor -
Safety
PLC Input

11
D5062 - SIL 2 Vibration Transducer InterfaceG.M. International ISM0184-7
T– proof
The proof test shall be performed to reveal dangerous faults which are undetected by diagnostic. This means that it is necessary to specify how dangerous undetected fault, which
have been noted during the FMEDA, can be revealed during proof test.
The Proof test consists of the following steps:
Steps Action
1 Bypass the safety-related Vibration Monitor/PLC or take any other appropriate action in order to avoid a false trip.
2 Connect a calibrated DC input voltage to the interface (terminals 7/9 and 8); in the 0 to -20 Vdc range, check with a 1 Vdc step that the output voltage corresponds
to each input step with a deviation smaller than 1%. This test detects any failure in the basic DC loop transfer function.
3 Connect a frequency generator to the interface (terminals 7/9 and 8); impose a 1 kHz square wave input signal with amplitude in the 0 to -20 Vpp range and -10 Vdc
offset, then check with an oscilloscope that the output waveform maintains the peak-to-peak value with a deviation smaller than 1%. In addition, impose a zero input
signal and verify that the output ripple is 20 mVrms. This test detects any other possible failure in the loop transfer function.
4 Connect a current sinking source (i.e.: 0 ÷ 20 mA current calibrator) between terminals 10 (negative supply) and 7/9 (common) and connect a DVM across the
calibrator terminals. Set the current sink at 1 mA and check if the voltage measure is -21 Vdc at terminal 10, referred to terminal 7/9. Then, set the current sink at
15 mA and check if the voltage measure is -16 Vdc at terminal 10, referred to terminal 7/9. This test detects any failure in the input channel circuit.
5 Restore the loop to full operation.
6 Remove the bypass from the safety-related Vibration Monitor/PLC or restore normal operation.
This test will reveal around 99% of the possible Dangerous Undetected failures.
Configuration
D5062S
ON
3 wires transducers
1 = OFF, 2 = OFF, 3 = OFF, 4 = OFF.
1 2 3 4
ON
OFF
1 2 3 4
ON
OFF
2 wires transducers (4 mA)
1 = ON, 2 = OFF, 3 = OFF, 4 = OFF.
1 2 3 4
ON
OFF
2 wires transducers (6 mA)
1 = ON, 2 = ON, 3 = OFF, 4 = OFF.
1 2 3 4
ON
OFF
2 wires transducers (10 mA)
1 = ON, 2 = OFF, 3 = ON, 4 = OFF.
1 2 3 4
ON
OFF
2 wires AC transducers
1 = OFF, 2 = OFF, 3 = OFF, 4 = ON.
DIP switch configurations (all valid for SIL applications):
This mode is factory settings

12 D5062 - SIL 2 Vibration Transducer Interface G.M. International ISM0184-7
Before powering the unit, check that all wires are properly connected, in particular supply conductors and their polarity and input and output wires; also check that Intrinsically Safe
conductors and cable trays are segregated (that is, they must have no direct contacts with other non I.S. conductors) and identified either by color coding, preferably blue, or marking.
Check conductors for exposed wires that could touch each other causing dangerous unwanted shorts. When the power supply voltage is turned on, the “power on” green led must be lit.
For 3 wires powered sensors, the sensor negative supply voltage (referred to common terminals “7” / “9”) must be more negative than -17 Vdc (supposing a 15 mA maximum value for
the transducer current consumption).
In addition, for 2 or 3 wires powered sensors, the output signal should be corresponding to the input sensor signal, verifying that the output signal is kept within the 0 to - 20 V range
(supposing a 10 Koutput load). Instead, for 2 wires unpowered sensors, the AC output signal should be corresponding to the AC input sensor signal, considering that the output signal
also comprises a -10 Vdc component (absent in the input signal) because of the offset introduced by the DIP switch configuration for 2 wires AC transducers shown in the “Configuration”
section.
D5062 series is isolated Intrinsically Safe Associated Apparatus installed into standard EN/IEC60715 TH 35 DIN-Rail located in Safe Area or Zone 2, Group IIC, Temperature T4 or
Class I, Division 2, Group A, B, C, D, T4 Hazardous Area within the specified operating temperature limits Tamb -40 to +70 °C, and connected to equipment with a maximum limit for
power supply Um of 250 Vrms or Vdc.
Not to be connected to control equipment that uses or generates more than 250 Vrms or Vdc with respect to earth ground.
D5062 series must be installed, operated and maintained only by qualified personnel, in accordance to the relevant national/international installation standards (e.g. EN/IEC60079-14
Electrical apparatus for explosive gas atmospheres - Part 14: Electrical installations in hazardous areas (other than mines)), following the established installation rules, particular care
shall be given to segregation and clear identification of I.S. conductors from non I.S. ones.
De-energize power source (turn off power supply voltage) before plug or unplug the terminal blocks when installed in Hazardous Area or unless area is known to be nonhazardous.
Warning: substitution of components may impair Intrinsic Safety and suitability for Zone 2.
Explosion Hazard: to prevent ignition of flammable or combustible atmospheres, disconnect power before servicing or unless area is known to be nonhazardous.
Failure to properly installation or use of the equipment may risk to damage the unit or severe personal injury.
The unit cannot be repaired by the end user and must be returned to the manufacturer or his authorized representative. Any unauthorized modification must be avoided.
Warning
The D5062 series provides a fully floating DC supply for energizing vibration transducers, accelerometers or 2-3 wires sensors located in Hazardous Area and repeats the sensor input
voltage in a totally isolated circuit located in Safe Area to drive vibration monitors or analyzers for rotating machinery control and supervision purposes.
The module provides 3 port isolation (input / output / supply) and a “POWER ON” green led is lit when the unit is supplied.
Operation
Installation
D5062 series are Vibration Transducer Interface housed in a plastic enclosure suitable for installation on EN/IEC60715 TH 35 DIN-Rail, with or without Power Bus or on customized
Termination Board.
D5062 series can be mounted with any orientation over the entire ambient temperature range.
Electrical connections are accommodated by polarized plug-in removable screw terminal blocks which can be plugged in/out into a powered unit without suffering or causing any damage
(for Zone 2 installations check the area to be nonhazardous before servicing). Connect only one individual conductor per each clamping point, use conductors up to 2.5 mm² and a
torque value of 0.5-0.6 Nm. Use only cables that are suitable for a temperature of at least 85°C.The wiring cables have to be proportionate in base to the current and the length of the
cable.
In the “Function Diagram” section and on the enclosure side, a block diagram identifies all connections.
Intrinsically Safe conductors must be identified and segregated from non I.S. and wired in accordance to the relevant national/international installation standards (e.g. EN/IEC60079-14
Electrical apparatus for explosive gas atmospheres -Part 14: Electrical installations in hazardous areas (other than mines)), make sure that conductors are well isolated from each other
and do not produce any unintentional connection. Isolation in accordance with EN/IEC 60079-11 clause 6.3.13 is provided between non-intrinsically safe circuits and intrinsically safe
circuits.
The enclosure provides, according to EN60529, an IP20 minimum degree of protection (or similar to NEMA Standard 250 type 1). The equipment shall only be used in an area of at least
pollution degree 2, as defined in IEC 60664-1. When installed in EU Zone 2, the unit shall be installed in an enclosure that provides a minimum ingress protection of IP54 in accordance
with IEC 60079-0. When installed in a Class I, Zone 2 Hazardous Location, the unit shall be mounted in a supplemental AEx or Ex enclosure that provides a degree of protection not less
than IP54 in accordance with UL/CSA 60079-0. When installed in a Class I, Division 2 Hazardous Location, the unit shall be mounted in a supplemental enclosure that provides a degree
of protection not less than IP54. The enclosure must have a door or cover accessible only by the use of a tool. The end user is responsible to ensure that the operating temperature of
the module is not exceeded in the end use application.
Units must be protected against dirt, dust, extreme mechanical (e.g. vibration, impact and shock) and thermal stress, and casual contacts. If enclosure needs to be cleaned use only a
cloth lightly moistened by a mixture of detergent in water.
Electrostatic Hazard: to avoid electrostatic hazard, the enclosure of D5062 series must be cleaned only with a damp or antistatic cloth.
Any penetration of cleaning liquid must be avoided to prevent damage to the unit.
Any unauthorized modification must be avoided.
D5062 series must be connected to SELV or PELV supplies.
All circuits connected to D5062 series must comply with the overvoltage category II (or better) according to EN/IEC60664-1.
Start-up