KROHNE OPTISWIRL 4200 Wiring diagram

Vortex flowmeter
Safety manual
Safety manualSafety manual
Safety manual
OPTISWIRL 4200
OPTISWIRL 4200OPTISWIRL 4200
OPTISWIRL 4200 Supplementary Instructions
Supplementary InstructionsSupplementary Instructions
Supplementary Instructions
© KROHNE 07/2017 - 4005006101 - AD OPTISWIRL4200 SIL R01 en

CONTENTS
2
www.krohne.com 07/2017 - 4005006101 - AD OPTISWIRL4200 SIL R01 en
OPTISWIRL 4200
1 Introduction 4
1.1 Scope of the document..................................................................................................... 4
1.2 Revision history ................................................................................................................ 5
1.3 Device description ............................................................................................................ 6
1.4 Related documentation .................................................................................................... 6
1.5 Terms and definitions....................................................................................................... 7
2 Specification of the safety function 8
2.1 Preconditions.................................................................................................................... 8
2.2 Safety application conditions (SAC).................................................................................. 8
2.2.1 General.................................................................................................................................... 8
2.2.2 Installation .............................................................................................................................. 8
2.2.3 Functional safe configuration................................................................................................. 8
2.2.4 Maintenance............................................................................................................................ 8
2.2.5 Operation................................................................................................................................. 9
2.2.6 Homogeneous redundancy ..................................................................................................... 9
2.3 Operation modes ............................................................................................................10
2.4 Definition......................................................................................................................... 11
2.5 Safety reaction and safe state........................................................................................ 12
3 Operation 13
3.1 Preparation for SIL mode operation .............................................................................. 13
3.1.1 Entering the SIL mode key.................................................................................................... 13
3.1.2 Parametrisation for SIL mode operation.............................................................................. 14
3.1.3 Verification of configuration.................................................................................................. 14
3.2 Reconfiguration of a device operated in SIL mode ........................................................ 15
3.3 Switch to non-SIL mode ................................................................................................. 16
3.4 Error conditions.............................................................................................................. 16
3.5 Parameter types ............................................................................................................. 17
4 Service 19
4.1 Maintenance ................................................................................................................... 19
4.2 Availability of services .................................................................................................... 19
4.3 Operation modes and proof test..................................................................................... 19
4.4 Resetting the fail-safe flags........................................................................................... 23
4.5 Troubleshooting.............................................................................................................. 23

CONTENTS
3
www.krohne.com07/2017 - 4005006101 - AD OPTISWIRL4200 SIL R01 en
OPTISWIRL 4200
5 Technical data 24
5.1 General notes ................................................................................................................. 24
5.2 SIL certificate.................................................................................................................. 25
5.3 Declaration ..................................................................................................................... 26
5.4 Safety relevant key indicators ........................................................................................ 27
5.5 Measuring accuracy ....................................................................................................... 28
5.6 Useful lifetime ................................................................................................................ 29
5.7 Support for SIL-approved devices.................................................................................. 29
6 Appendix 30
6.1 Explanations to safety application conditions (SAC)...................................................... 30

1 INTRODUCTION
4
OPTISWIRL 4200
www.krohne.com 07/2017 - 4005006101 - AD OPTISWIRL4200 SIL R01 en
1.1 Scope of the document
This document is the safety manual for the OPTISWIRL 4200. Its content applies if the
measurement device is operated in SIL mode or prepared for SIL mode, respectively.
General Hint
This vortex flowmeter is a functionally safe flowmeter. It may be deployed within safety critical
systems requiring the safety function (for details refer to
Specification of the safety function on
page 8) at a safety integrity level 2, in homogeneous redundant configuration at safety integrity
level 3 (for more information about homogeneous redundancy refer to
Operation modes on page
10).
In case of a detected potentially hazardous failure, the system performs a safety reaction to
bring the device to a safe state, which is indicated by a persistent failure current on the current
output. The device will not enter measuring mode without operator’s interaction.
For safe operation, the operator / integrator must fulfil some conditions. These conditions are
defined as Safety Application Conditions (SAC). For further information refer to
Safety
application conditions (SAC)
on page 8.
INFORMATION!
The data in this supplement only contains the data applicable to the SIL approval. The technical
data for the standard version in the handbook (document [N1]) shall be valid, provided that it is
not rendered invalid or replaced by this supplement. If necessary, parts of [N1] are referenced
herein.
INFORMATION!
Installation, commissioning and maintenance may only be carried out by properly trained and
authorised personnel.
INFORMATION!
Configuration for SIL mode operation needs a login as role "Expert" (for details refer to [N1],
chapter "Security and permissions"]. Nevertheless the operator shall protect the flowmeter
against unauthorised access.

INTRODUCTION 1
5
OPTISWIRL 4200
www.krohne.com07/2017 - 4005006101 - AD OPTISWIRL4200 SIL R01 en
1.2 Revision history
This safety manual is valid for all versions which are operated in SIL mode, identified by the V
numbers according to the following tables, until its incompatibility with a new version is stated.
Code VG16/
SG16
a b cde fgh i j k l m n o p q rstu
vwx
y z
Functional
safety
relevant
x x x x x
Code Description Valid flow sensor codes for SIL
device variant
VG16/SG16 Prefix to code -
aManufacturer specific -
bGeneral information 1, 3, L, M, N
cde Flange connection, rating and sealing surface -
fMeasuring section -
gh Pressure sensor options and gaskets -
iApprovals for hazardous and ordinary locations -
jSignal converter housings 1, 2, 4, 5, 7, A, B, D, E
kSystem design 0 only
lDisplay 1 only
mCable glands -
nFirmware feature -
oProgramming language -
pCommunication options 0 only
qMarking -
rstuvwx Diverse certificates (CoC, calibration, pressure testing, material,
hardness testing, cleaning, X-ray/dye penetration) -
yManual -
zSpare -
INFORMATION!
Check in case a firmware is updated or any part of the device is replaced, whether a new safety
manual is available on the manufacturer's internet site.
Release date Electronic revision Changes and compatibility Documentation
2017-07-10 ER 2.0.0_ Initial version AD OPTISWIRL 4200 SIL R01

1 INTRODUCTION
6
OPTISWIRL 4200
www.krohne.com 07/2017 - 4005006101 - AD OPTISWIRL4200 SIL R01 en
1.3 Device description
The OPTISWIRL 4200 is a 2-wire vortex flowmeter measuring volume flow rate, temperature and
optionally pressure of liquids, steam and gases. From these data the device calculates
normalised flow rate, mass flow rate, power flowrate, etc.
In SIL mode the OPTISWIRL 4200 measures the volume flow rate and outputs the measurement
via the safe 4…20 mA current output.
For measurement in SIL mode the following conditions apply:
•The 4…20 mA current output provides a safe output exclusively.
•Local display, HART
®
Interface and the binary output do not provide a safe output.
•The local display and HART
®
Interface are read-only during SIL mode.
•Parameters can only be changed in non-SIL mode.
•The binary output can also be used in order to provide non-safety related measurement
values.
•The current input can be used for non-safety related functionalities.
1.4 Related documentation
4...20 mA current
output (safe) Current input
↑↓
Tube →Safe subsystem →Non-safe
subsystem
→
Binary output
→
HART
↓
Local display
[N1] OPTISWIRL 4200 Handbook
[N2] IEC 61508-1 to 7:2010 Functional safety of electrical / electronic / programmable electronic safety-
related systems
[N3] Siemens Norm SN 29500, Edition 2004-01
[N4] OPTICHECK Handbook

INTRODUCTION 1
7
OPTISWIRL 4200
www.krohne.com07/2017 - 4005006101 - AD OPTISWIRL4200 SIL R01 en
1.5 Terms and definitions
Term Description
DC Diagnostic Coverage of dangerous failures
EUC Equipment Under Control
Firmware Software embedded in the device
FIT Failure In Time (1x10
-9
failures per hour)
FMEDA Failure Modes, Effects and Diagnostics Analysis
FRT Fault Response Time (diagnostic test interval + Fault Reaction Time)
HFT Hardware Fault Tolerance
I/O Input / output
λ
DD
Rate for dangerous detected failure
λ
DU
Rate for dangerous undetected failure
λ
SD
Rate for safe detected failure
λ
SU
Rate for safe undetected failure
MTBF Mean Time Between Failures
MTTF Mean Time To Failure
MTTR Mean Time To Repair
MTR Mean Time To Restoration
PFD
AVG
Average Probability of Failure on Demand
PFH Probability of a dangerous Failure per Hour
PTC Proof Test Coverage
SFF Safe Failure Fraction
SIL Safety Integrity Level
SIS Safety Instrumented Systems
Systematic
Capability Measure (expressed on a scale of SC 1 to SC 4) of the confidence that the systematic safety integrity of an element meets the requirements of the specified SIL, in respect of the specified element safety function,
when the element is applied in accordance with the instructions.
Type A
system "Non-complex" system (all failure modes are well defined). For more data, refer to subsection 7.4.3.1.2 of IEC 61508-2.
Type B
system "Complex" system (all failure modes are not well defined). For more data, refer to subsection 7.4.3.1.2 of IEC 61508-2.
T
Proof
Proof Test Interval
T
Repair
Time to Repair
T
Test
Internal Diagnostics Test Interval
1oo1 1 out of 1 channel architecture (single architecture performs the safety function)
1oo1D 1 out of 1 channel architecture with diagnostics

2 SPECIFICATION OF THE SAFETY FUNCTION
8
OPTISWIRL 4200
www.krohne.com 07/2017 - 4005006101 - AD OPTISWIRL4200 SIL R01 en
2.1 Preconditions
The device must be operated within the process and ambient conditions specified in the
handbook ([N1]) of the device.
The following chapter defines additional conditions, which have to be obeyed for safety
applications.
2.2 Safety application conditions (SAC)
2.2.1 General
SAC1: System changes
The flowmeter can be deployed as device with safety responsibility. Non specified changes are
not allowed. Especially after maintenance measures, carrier and operator must ensure that no
hazardous states came up, and that all safety application conditions are still met.
2.2.2 Installation
SAC2: Mounting and connecting
[N1] defines requirements regarding installation and electrical connections of the device. These
requirements are safety critical and must be strictly observed.
2.2.3 Functional safe configuration
SAC3: SIL mode
The flowmeter is functionally safe only if configured for operation in SIL mode.
SAC4: Parameter input
Parameters are changed under responsibility of the operator.
2.2.4 Maintenance
SAC5: Maintenance mode
If maintenance mode (for definition refer to Operation modes on page 10) is entered, the device is
operated under responsibility of the operator.
SAC6: Resetting the fail-safe flag
Resetting the fail-safe flag is done under responsibility of the operator. He is responsible for the
correct execution of appropriate tests and the evaluation of test results.
SAC7: Firmware update
Firmware may be updated by authorised personnel only.
INFORMATION!
This chapter defines the conditions which must be met by the operator to ensure safe operation.
Further explanations can be found in appendix I. The safety application condition is valid, while
the related explanation might be incomplete.

SPECIFICATION OF THE SAFETY FUNCTION 2
9
OPTISWIRL 4200
www.krohne.com07/2017 - 4005006101 - AD OPTISWIRL4200 SIL R01 en
SAC8: Inspection intervals
The definition of the maximum proof test intervals (for details refer to Operation modes and
proof test
on page 19) are calculated for operation under reference conditions. The operator is
responsible for adjusting the proof test intervals if the deployment conditions deviate from the
reference conditions.
SAC9: Modification
The flowmeter must not be manipulated.
SAC10: Repair
Repair of the flowmeter must only be done by manufacturer’s personnel or personnel authorised
by the manufacturer. Exceptions regarding replacement with spare parts are shown in chapter
"Service" in [N1]. In all other cases, send the flowmeter to the manufacturer for repair (for
instructions refer to chapter "Returning the device to the manufacturer" in [N1]).
2.2.5 Operation
SAC11: Operational limits
The operational limits as shown in [N1] in the chapter "Technical data" must be observed. To
prevent unintentional trigger of the safety reaction, a permanent operation near the operational
limits should be avoided.
SAC12: Supervision of failure current
If a safety critical failure has been detected, the device outputs a persistent failure current on the
current output (4...20 mA). The operator must supervise both failure currents
(<3.6mAand>21mA).
2.2.6 Homogeneous redundancy
SAC13:
The logic subsystem must compare the current values transmitted by the two flowmeters (or
one dual version respectively) permanently. In case of a difference greater than 4% of the
measurement range over a time interval greater than 30 seconds, the devices must be regarded
as non-safe, or defect respectively.
SAC14:
The two flowmeters (or one dual version respectively) must be operated independently. Any
hazardous re-activeness from the logic subsystem (for details refer to
Operation modes on page
10) on the two measurement devices must be excluded. This means at least:
•Current loops are independently driven.
•Current loops are installed in a way that failures affecting both lines at a time (common
cause) can be avoided.
•The logic subsystem must provide an appropriate low failure rate.

2 SPECIFICATION OF THE SAFETY FUNCTION
10
OPTISWIRL 4200
www.krohne.com 07/2017 - 4005006101 - AD OPTISWIRL4200 SIL R01 en
2.3 Operation modes
SIL mode
In SIL mode, the device executes the safety function and will react safely if an error is detected
which prevents the correct execution of the safety function. In this mode, the device is
functionally safe and the safety relevant key figures like hazard rate, FRT etc. can be guaranteed.
Non-SIL mode
In non-SIL mode, the device operates as a standard device. Its behaviour is state-of-the-art, its
specific functionality depends on the individual, customised parameter settings.
Maintenance mode
Maintenance mode is intended to boot a potentially defect device in order to test it in its normal
operational environment. During this time, operation is done under responsibility of the
operator. To avoid improvident and unintentional entering of the maintenance mode the operator
is requested to enter the password for "Expert" level access.
By entering the (correct) password, the operator acknowledges the above regulation regarding
responsibility, also regarding safety responsibility if the device is operated in SIL mode.
As the maintenance mode is intended for testing, the operator shall provide additional measures
to secure the safety of the overall system. Therefore, the operator shall install additional
measures to provide safety of the overall system.

SPECIFICATION OF THE SAFETY FUNCTION 2
11
OPTISWIRL 4200
www.krohne.com07/2017 - 4005006101 - AD OPTISWIRL4200 SIL R01 en
Homogeneous redundancy
The degree of a functional safe device is determined by the accomplished qualitative safety
integrity level and the quantitative hazard rate determined by the failure rate of the deployed
hardware.
If two or more identically constructed devices are used in parallel (device A is of the same type as
device A’like the "Dual Version"), the hazard rate for the combination (here: sensor subsystem)
can be reduced.
A precondition for this is a logic subsystem comparing the output of devices A and A’: The
complete sensor subsystem fails if at least one of the two devices fails (availability is reduced to
50% of the value of a single device A!).
2.4 Definition
The flowmeter provides a safety function according to the international standard IEC 61508 [N2].
It is defined as follows:
Output of the volume flow rate at the 4...20 mA current output with a maximum delay of
Output of the volume flow rate at the 4...20 mA current output with a maximum delay ofOutput of the volume flow rate at the 4...20 mA current output with a maximum delay of
Output of the volume flow rate at the 4...20 mA current output with a maximum delay of
30 seconds and a measurement accuracy better than 4%.
30 seconds and a measurement accuracy better than 4%.30 seconds and a measurement accuracy better than 4%.
30 seconds and a measurement accuracy better than 4%.
Remarks
•The function is always and only executed in SIL mode.
•The measurement uncertainty of the flowmeter in safe operation equals to those in non-SIL
operation as described in [N1]. It consists of the uncertainty of measurement function and
current output.
•Concerning random errors in the device, the safety tolerance must be considered. The safety
tolerance is the tolerable error before setting the safe state of the device. A random fault can
cause an error of up to 2% of the present measurement value or output current before it is
signaled. For further information refer to
Measuring accuracy on page 28.
Figure 2-1: Homogeneous redundancy
1 Sensor subsystem
2 Measurement device A
3 Measurement device A'
4 Logic subsystem

2 SPECIFICATION OF THE SAFETY FUNCTION
12
OPTISWIRL 4200
www.krohne.com 07/2017 - 4005006101 - AD OPTISWIRL4200 SIL R01 en
2.5 Safety reaction and safe state
The vortex flowmeter reacts safely, as soon as a failure is detected by the output of the low or
high failure current (safety reaction). As an additional feature, temporary and persistent failures
can be distinguished:
•A failure current of approximately 3.5 mA is output in case of a potentially transient failure.
•A failure current of approximately 3.35 mA or below, is output in case that a persistent failure
must be assumed. A device with a persistent failure will not boot into SIL mode without
operator’s interaction any more (for details refer to
Troubleshooting on page 23).
Remarks
•The decision whether a failure is transient or persistent will be made within 30 seconds after
its detection. In case of any doubt, the failure will be evaluated as a persistent one (automatic
booting prohibited).
•A too low volume flow (below the lower sensor limit) is always a transient failure because the
safety function cannot be guaranteed. Measurement accuracy is potentially affected.
•Some failures will prevent the output of the lower failure current. In such cases, the device
tries to output the high failure current (> 21 mA).
•The fault response time is 30 seconds. Any output older than 30 seconds is correct if the
safety reaction is not triggered due to a safety critical device failure.
•Within those 30 seconds, the device may output a so-called temporary low failure current.
With additional diagnostic measures, it tries to distinguish whether a failure is transient or
persistent.

OPERATION 3
13
OPTISWIRL 4200
www.krohne.com07/2017 - 4005006101 - AD OPTISWIRL4200 SIL R01 en
3.1 Preparation for SIL mode operation
For execution of the safety function, the device must be unlocked for SIL mode operation and
configured for SIL mode.
Devices, which have been ordered as SIL devices, have been unlocked for SIL mode by factory
setting. Devices, which have not been ordered as SIL devices, must be unlocked with a key code.
Please contact the manufacturer for registration and individual 4-digit key code.
The preparation for SIL mode is done in three steps:
1. Unlocking of the SIL mode by entering the SIL mode key code (Not applicable for devices or-
dered as SIL devices (for details refer to
Entering the SIL mode key on page 13).
2. Setup the device for SIL mode operation (for details refer to
Parametrisation for SIL mode op-
eration
on page 14).
3. Verification of the actual configuration and subsequent confirmation of successful verification
by setting the SIL jumper (for details refer to
Verification of configuration on page 14).
3.1.1 Entering the SIL mode key
This step has only to be performed once before the first configuration for SIL mode operation. It
is only applicable for devices, which have not been ordered as SIL devices. For basic principles of
local display operation and menu structure overview refer to [N1].
After entering the SIL mode key code and confirming with enter key, return to measuring mode.
INFORMATION!
For entering the SIL mode key code it is required to gain
“ Expert ” access level before (for details
refer to [N1], chapter "Security and permissions").
Menu To do Keys
Enter menu 1 x →
A Quick Setup Go to "C Setup" 2 x ↓
C Process Go to "C6 Device" 1 x →, 5 x ↓
C6 Device Go to "C6.2 Security" 1 x →, 1 x ↓
C6.2 Security Go to "C6.2.4 Unlock SIL" 1 x →, 3 x ↓
C6.2.4 Unlock SIL Enter menu and unlock SIL by entering the four digits of the
password, confirm with enter key 1 x →, ****, 1 x ^
INFORMATION!
Before switching to SIL mode the customer has to ensure the proper condition of the device. In
case of any doubt, a Proof Test may be performed. Previous hours of operation have to be taken
into account for failure rate calculation.

3 OPERATION
14
OPTISWIRL 4200
www.krohne.com 07/2017 - 4005006101 - AD OPTISWIRL4200 SIL R01 en
3.1.2 Parametrisation for SIL mode operation
If question "Switch to SIL mode?" has been confirmed with "YES", the operator will be requested
to enter the password for the access level "Expert" (refer to [N1], chapter "Security and
permissions") and the system will reboot automatically. If question "Switch to SIL mode?" has
been refused with "NO", the device will stay in non-SIL mode. Nevertheless, the changed
parameters are stored persistently.
By displaying "Press key for verification" the device shows preparedness for verification of the
SIL configuration.
3.1.3 Verification of configuration
During configuration verification, the device will output the complete range between 4 and 20 mA
in 2 mA steps and the failure currents <3.6 and >21 mA. Each value will be held for approx.
2 seconds (after the output of >21 mA, the next output will be <3.6 mA again).
The test is performed in an endless loop which can be terminated by setting the SIL jumper or by
refusing the SIL mode request (for details refer to
Reconfiguration of a device operated in SIL
mode
on page 15).
Required equipment
•Calibrated current meter
Execution of the verification
The parameter verification is performed as follows:
• Integrate a calibrated current meter into the current loop.
• The device will perform an automatic restart.
• Confirm request "Press key for verification" by pressing any key.
• Check carefully, whether the device shows <3.6, 4 mA, 6 mA…20, >21 mA in a loop.
• Confirm request "Set SIL jumper or press key to cancel" by setting the SIL jumper or refuse
switch to SIL mode by pressing any key
Display indication To do Keys
Go to SIL measurement page (After
unlocking the SIL mode, a SIL
measurement page will be available)
(0...3) x ↑
Press > button to enter SIL setup Enter SIL configuration menu 1 x →
A Quick Setup Change parameters in "Quick Setup" or
"Setup" as described in [N1] -
Leave Quick Setup" or "Setup" 1 x ^
"Save Configuration?" (only displayed, if
any parameter has been changed) Confirm settings with "YES" or cancel all changes with "NO" YES / NO ^
Switch to SIL mode? Confirm switching to SIL mode with
"YES" or cancel with "NO" YES / NO ^
If last question was confirmed with
"YES": "Password?" Enter password for "Expert" (refer to [N1], chapter "Security and
permissions")
**** ^
Wait for reboot

OPERATION 3
15
OPTISWIRL 4200
www.krohne.com07/2017 - 4005006101 - AD OPTISWIRL4200 SIL R01 en
Setting of the SIL jumper
•Remove the display while device is powered (for details refer to [N1], chapter "Turning the
display").
•Set the jumper to SIL position as shown in the figures below.
•Reattach the display.
After setting the jumper to the SIL position, the flowmeter will perform an automatic reboot and
start operation in SIL mode. The operation in SIL mode is indicated by a small SIL logo.
3.2 Reconfiguration of a device operated in SIL mode
The device must be set to non-SIL mode first, before any parameter can be changed, as changing
of parameters is prohibited in SIL mode.
Follow the steps shown in the next chapter and then reconfigure the device.
Figure 3-1: Jumper position
1 Non-SIL position
2 SIL position
Figure 3-2: Indication of SIL mode
1 SIL logo for indication of SIL mode

3 OPERATION
16
OPTISWIRL 4200
www.krohne.com 07/2017 - 4005006101 - AD OPTISWIRL4200 SIL R01 en
3.3 Switch to non-SIL mode
In order to switch the device from SIL mode to non-SIL mode the following steps have to be
performed.
• Remove the display (for details refer to [N1], chapter "Turning the display").
• Set the jumper to non-SIL position (for details refer to
Preparation for SIL mode operation on
page 13).
• Reattach the display.
• The flowmeter will perform an automatic reset.
• Confirm request "Press key for verification" by pressing any key.
• Refuse request "Set SIL jumper or press key to cancel" by pressing any key.
• Enter password for access level "Expert".
The device will now perform an automatic reboot and start operation in non-SIL mode.
3.4 Error conditions
In principle, the error conditions for non-SIL mode and SIL mode are the same (refer to chapter
"Status messages and diagnostic information" in N1]).
In SIL mode, the following special conditions apply additionally:
•Safety critical failures will always result in an output of a failure current.
•The failure current is the only safety relevant signal. Regarding the safe state of the device,
all other interfaces must be ignored (Example: a failure current indicates a safety critical
defect, even if the HART
®
interface is still online).
•Due to power considerations, the lower failure current is the pre-defined failure current. The
related user’s configuration in non-SIL mode is ignored in SIL mode. High failure current will
only be set if the lower failure current cannot be output for any reasons.
•The events shown in the following table are SIL specific, i. e. they will occur only if the device
is operated in SIL mode.
Status type Event group Description Actions to eliminate the event
FElectronics Emergency off
triggered Restart the device according to given procedure (for details refer to Resetting the fail-safe flags
on page 23).

OPERATION 3
17
OPTISWIRL 4200
www.krohne.com07/2017 - 4005006101 - AD OPTISWIRL4200 SIL R01 en
3.5 Parameter types
In SIL mode the device parameters are distinguished in three parameter types. Two types affect
safety:
•Safety critical data:
Safety critical data:Safety critical data:
Safety critical data: These parameters have a fixed setting and cannot be changed but read
only. They are marked with a padlock symbol.
Parameter Fixed setting Description
Current Out. Meas. Volume Flow Index of the device variable which is mapped to the current
output.
4mA Trimming 0.004 [A] The externally measured analogue level during trimming
(user calibration) of the "Analog Lower Endpoint Value".
20mA Trimming 0.020 [A] The externally measured analogue level during trimming
(user calibration) of the "Analog Upper Endpoint Value".
High Error Current 0.0215 [A] High failure current.
Low Error Current 0.0035 [A] Low failure current.
Analog Lower Endpoint
Value (no menu entry
available)
0.004 [A] Corresponds to 0% range and therefore to the "Lower Range
Value" of the range conversion.
Lower Ext. Range 0.004 [A] The minimum value that the analogue channel is capable of or
is limited to.
Analog Upper Endpoint
Value (no menu entry
available)
0.02 [A] Corresponds to 100% range and therefore to the "Upper
Range Value" of the range conversion.
Upper Ext. Range 0.02 [A] The maximum value that the analogue channel is capable of
or is limited to.
Error Function ALARMSELECTION LOW States whether the alarm is indicated with high or low signal
level or not at all.
Current Loop Mode ON A switch for enabling/disabling loop current signalling.
ON: HART
®
multidrop mode is disabled.
k-Factor / Offset 0.0 Offset value to adapt k-factor.
k-Factor Linear. /
Function OFF Switches the k-factor linearisation on/off.
Up. Pip. Dist. Cor. /
Function OFF Setup of k-factor upstream compensation.
Temp. Comp. / Function ON Setup of k-factor temperature compensation.
Lin. Thermal Exp. 1/K 0.0000175 [per Kelvin] Coefficient of linear thermal expansion (bluff body).
Min/Max Oper. Dens. /
Function OFF Switch for use of upper and lower densities for calculation of sensor limits.
Sensor Overrange 0Is used to determine the high flow cutoff factor.
Vortex Algorithm / Filter
Mode FULL AUTO SETTINGS Filter configuration: "FULL_AUTO_SETTINGS" means that all settings are derived
from Pickup configuration.
Vortex Algorithm / Min.
Amplitude 0.01 [V] Indicator for valid measurement of vortex frequency.
Gain CA 0Piezo configuration.
VA Piezo Test Mode (no
menu entry available) PIEZO TESTMODE OFF Piezo configuration.
Distortion Reduction /
Function ON Amplitude correction.

3 OPERATION
18
OPTISWIRL 4200
www.krohne.com 07/2017 - 4005006101 - AD OPTISWIRL4200 SIL R01 en
•Safety relevant data:
Safety relevant data:Safety relevant data:
Safety relevant data: These parameters can be changed under responsibility of the operator.
Misconfiguration via erroneous setting is detected by the parameter verification procedure
which is executed automatically if the device is setup for SIL mode and parameters have been
changed (for details refer to
Preparation for SIL mode operation on page 13).
•Non-SIL data:
Non-SIL data:Non-SIL data:
Non-SIL data: These parameters do not have any influence on the safety function and may be
changed as in non-SIL mode.
The parametrisation in SIL mode works as described in chapter "Operation" in [N1] for the most
parameters. However, there are some parameters which have an influence on functional safety
if set incorrectly.
For every safety affecting parameter, two values, potentially equal ones, exist in the device: one
is used for non-SIL, the other for SIL operation. Depending on the device’s state, either the one
parameter set or the other is shown or can be edited. As soon as the SIL mode is requested, the
SIL mode parameters become active.
Distortion Reduction /
K_P 204011 Amplitude correction P-factor.
Distortion Reduction / K_I 140737 Amplitude correction I-factor
Distortion Reduction /
Smoothing Factor 2141041197 Amplitude correction filter factor.
Vortex Filter / Filter Type FILTER TYPE NONE Output filter type for vortex.
Vortex Filter / Filter
Length 25 Output filter length.
Vortex Filter / Smoothing
Factor 0.05 Output filter smoothing factor.
Vortex Algorithm / Min.
SNR 50.0 Indicator for valid measurement of vortex frequency.
Time Constant 2.0 [s] Time constant (for filter).
Low Flow Cutoff 0.0 [cubic meters per
second] Low flow cutoff (When the flow rate drops below low flow cutoff , the current output is 4 mA)
Minimum hold time
transient error (no menu
entry available)
5000 [ms] Minimum hold time of the failure current in case of transient
errors.
Vortex Algorithm
Extended Sensor Limits OFF Extended sensor limits
Parameter Fixed setting Description
Access level Parameter Setting / Description
Expert "Lower Range Value" of
the current output For further information refer to
Verification of configuration
on page 14.
Expert "Upper Range Value" of
the current output
Service k-Factor Represents the relation between vortex frequency and flow
velocity.
Expert Density (operating) Used to determine the flow sensor limits.
Expert Temperature (operating) Used for correction of the k-factor.
Expert Fluid Determines signal processing and on-screen menu of the
local display.
Service Nominal Diameter Used to determine the flow sensor limits.

SERVICE 4
19
OPTISWIRL 4200
www.krohne.com07/2017 - 4005006101 - AD OPTISWIRL4200 SIL R01 en
4.1 Maintenance
You must follow the maintenance instructions given in the handbook [N1].
4.2 Availability of services
The manufacturer offers a range of services to support the customer after expiration of the
warranty. These include repair, maintenance, technical support and training.
4.3 Operation modes and proof test
Continuous and high demand mode
If the flowmeter is operated in continuous or high demand mode within the specified
environmental limits, the device needs no proof test during its useful lifetime (for details refer to
Useful lifetime on page 29). Observe SAC 11 regarding useful lifetime and constant failure rates,
respectively.
Low demand mode
The flowmeter includes a comprehensive set of online diagnostic tests which are executed fast
and frequently, resulting in a very low mean down time. Assuming reasonable low repair and
restoration times as well, the device fulfils SIL2 compatible PFD values as well during the whole
useful life time without additional proof tests.
Proof test
Proof tests are required in case of:
•Deployment under extreme conditions beyond the device's specification. In this case,
environmental conditions might increase the failure rate. To keep undetected failures small
such deployment requires more frequent proof tests. For details refer to
Useful lifetime on
page 29, operational limits as set forth in SAC 11 must not be exceeded.
•Achieving the required PFD
AVG
over time.
For this purpose, the following tests can be performed. The diagnostic coverage of all tests
together is nearly as good as the tests and procedures in the factory which were executed during
or at the end of the production cycle. Only flow sensor calibration is missed here which requires
a reference meter.
INFORMATION!
For more precise information, please contact your local sales office.
WARNING!
SIS engineers must calculate the interval of proof tests based on the required PFD
AVG
.

4 SERVICE
20
OPTISWIRL 4200
www.krohne.com 07/2017 - 4005006101 - AD OPTISWIRL4200 SIL R01 en
Proof test coverage
Calibration verification (optional)
A proof test coverage of > 97% can be reached with a calibration verification. If appropriate
facilities are not available, please contact the manufacturer for calibration verification.
Test with simulated vortex frequencies (step 2)
Required equipment
•Power supply 14…30 VDC
•Calibrated frequency generator, accuracy << 1%, two channels 180°phase shifted, 100 mVpp
amplitude (step 2)
•Calibrated current meter (steps 1b and 2)
•OPTICHECK (optionally; step 1a)
Execution of frequency simulation for the proof test
To setup the device for proof testing, the following steps have to be performed:
•Set the device to non-SIL mode (for details refer to
Switch to non-SIL mode on page 16).
•Unfix the electronics housing by loosening the 4 cylinder screws 1and take off the
electronics housing carefully.
Step Measure Proof Test Coverage
1a Current output verification via OPTICHECK [N4] 12%
1b Current output check according to routine in chapter
"Verification of configuration".
2Test with simulated vortex frequencies. 96%
Figure 4-1: Unfixing of the electronics housing
1 Cylinder screws
2 Washers
3 Gasket