KROHNE OPTIWAVE 400 Series Wiring diagram

OPTIWAVE 3500 C / OPTIWAVE 5400 C
OPTIWAVE 6400 C / OPTIWAVE 6500 C
OPTIWAVE 7400 C / OPTIWAVE 7500 C
Safety manual
OPTIWAVE X400 / X500
OPTIWAVE X400 / X500OPTIWAVE X400 / X500
OPTIWAVE X400 / X500 Supplementary Instructions
Supplementary InstructionsSupplementary Instructions
Supplementary Instructions
© KROHNE 10/2020 - 4008265401 - AD SIL OPTIWAVE x4-x500 R01a en

CONTENTS
2
www.krohne.com 10/2020 - 4008265401 - AD SIL OPTIWAVE x4-x500 R01a en
OPTIWAVE X400 / X500
1 Introduction 4
1.1 Scope of the document..................................................................................................... 4
1.2 Revision history ................................................................................................................ 4
1.3 Type code for devices that can operate in SIL mode ....................................................... 5
1.4 Device description ............................................................................................................ 6
1.5 Related documentation .................................................................................................... 7
1.6 Terms and definitions....................................................................................................... 7
2 Specification of the safety function 9
2.1 Preconditions.................................................................................................................... 9
2.2 Definition of the safety function ....................................................................................... 9
2.2.1 General notes.......................................................................................................................... 9
2.2.2 Current output ...................................................................................................................... 10
2.2.3 Fault response time.............................................................................................................. 11
2.3 Safety application conditions (SAC)................................................................................ 12
2.3.1 General.................................................................................................................................. 12
2.3.2 Installation ............................................................................................................................ 12
2.3.3 Electrical connection ............................................................................................................ 13
2.3.4 Functionally-safe configuration............................................................................................ 13
2.4 Operation modes ............................................................................................................14
2.4.1 SIL mode ............................................................................................................................... 14
2.4.2 Non-SIL mode ....................................................................................................................... 14
2.4.3 Maintenance mode................................................................................................................ 14
3 Operation 15
3.1 Operation in SIL mode.................................................................................................... 15
3.1.1 General notes........................................................................................................................ 15
3.1.2 Device configuration for operation in SIL mode................................................................... 15
3.2 How to change the configuration of a device operated in SIL mode ............................. 18
3.2.1 General notes........................................................................................................................ 18
3.2.2 How to change device operation from SIL mode to non-SIL mode ..................................... 18
3.3 Error conditions.............................................................................................................. 19
3.4 Parameter types ............................................................................................................. 21
3.4.1 Safety-critical parameters.................................................................................................... 21
3.4.2 Safety-relevant parameters ................................................................................................. 21
3.4.3 Non-SIL parameters ............................................................................................................. 22
3.4.4 Limits for parameters related to tank configuration ........................................................... 22
3.5 Homogeneous redundancy............................................................................................. 23
3.5.1 How to set up a system with homogeneous redundancy..................................................... 23
3.5.2 How to estimate the effect of common cause failures ........................................................ 24
4 Service 25
4.1 Maintenance ................................................................................................................... 25
4.2 Availability of services .................................................................................................... 25

CONTENTS
3
www.krohne.com10/2020 - 4008265401 - AD SIL OPTIWAVE x4-x500 R01a en
OPTIWAVE X400 / X500
4.3 How to check measurement accuracy before operation in SIL mode .......................... 25
4.3.1 General notes........................................................................................................................ 25
4.3.2 Measurement accuracy check (in process conditions) ........................................................ 25
4.4 Operation modes and proof tests................................................................................... 26
4.5 How to reset the fail-safe flags...................................................................................... 29
4.6 Troubleshooting.............................................................................................................. 29
5 Technical data 30
5.1 Characteristics for the device safety function ............................................................... 30
5.2 Useful lifetime of electronic components...................................................................... 30
5.3 Assumptions ................................................................................................................... 31
5.4 Measuring accuracy ....................................................................................................... 32
5.5 Support for SIL-approved devices.................................................................................. 32
6 Notes 33

1 INTRODUCTION
4
OPTIWAVE X400 / X500
www.krohne.com 10/2020 - 4008265401 - AD SIL OPTIWAVE x4-x500 R01a en
1.1 Scope of the document
This document supplies functional safety data for the devices that follow:
•OPTIWAVE x400 series: OPTIWAVE 5400, OPTIWAVE 6400 and OPTIWAVE 7400
- 24 GHz FMCW radar level transmitters
•OPTIWAVE x500 series: OPTIWAVE 3500, OPTIWAVE 6500 and OPTIWAVE 7500
- 80 GHz FMCW radar level transmitters
This data agrees with the IEC 61508 standard (document [N2]) if the device operates in SIL mode.
1.2 Revision history
Do a check at regular intervals to make sure that the firmware (electronic revision) and the
safety manual for the device is up to date. You can download the latest edition of the safety
manual from the website (Download Center). If the electronic revision is different, speak to your
supplier about the procedure to change the electronic revision of the device.
INFORMATION!
The data in this supplement only contains the data applicable to the SIL approval. The technical
data for the standard version in the handbook (document [N1]) shall be valid, provided that it is
not rendered invalid or replaced by this supplement. If necessary, parts of document [N1] are
referenced herein.
INFORMATION!
Installation, commissioning and maintenance can only be done by qualified personnel. The
system integrator is responsible for correct operation and parameterization of the device. The
system integrator is responsible for the definition and application of measures against
manipulation (e.g. lightning protection system, position of valves etc.).
Release date Electronic revision Changes and compatibility Documentation
2019-11-01 ER ≥2.1.1 First issue AD SIL OPTIWAVE x4-x500 R01
Table 1-1: Revision history

INTRODUCTION 1
5
OPTIWAVE X400 / X500
www.krohne.com10/2020 - 4008265401 - AD SIL OPTIWAVE x4-x500 R01a en
1.3 Type code for devices that can operate in SIL mode
The model name for the level transmitter and its options are identified by the VF type code (or SF
type code, if there are special requirements for the customer order) on the device nameplate.
The type code is a series of alphanumeric characters (0...9 and A...Z).
Do a check of the device nameplate to make sure that device has the correct options for
functional safety.
Refer to the table that follows to find which positions in the type code are related to functional
safety. The position is shown with the letter "x".
The table that follows shows which alphanumeric codes in each position are related to function
safety. If a dash ("—") is shown, all options in this type code position are applicable to functional
safety.
Figure 1-1: Location of the type code on the device nameplate
1 Type code
Type code VF ab cdef g h i j k l m n opqrstuvw
Options related to
functional safety x x x x x x x
Table 1-2: Type code - Options related to functional safety
Code Description Applicable options for SIL devices
VF or SF Device prefix VF; SF
ab Device model
Device modelDevice model
Device model DA; DB; DC; DD; DE; DF
cdef Standard, Version, Regional Directives, Ex Approvals —
gIndustry / Safety
Industry / SafetyIndustry / Safety
Industry / Safety 1, 3, 5, 7, D, E, F, M, N, P
hConstruction —
iConverter version 2, 3

1 INTRODUCTION
6
OPTIWAVE X400 / X500
www.krohne.com 10/2020 - 4008265401 - AD SIL OPTIWAVE x4-x500 R01a en
1.4 Device description
A device that operates in SIL mode is a functionally-safe level transmitter. It can be used in
safety-critical systems where the safety function is necessary (for more data, refer to
Definition
of the safety function
on page 9).
Measurement data is supplied as a current output signal. This output can be used as a safe
output. When the device detects an internal device error or a measurement error, it supplies a
failure current.
The conditions that follow are applicable for measurement in SIL mode:
•The current output can supply a failure current. The current output is the only safe output.
•The local display screen and the HART®interface are not related to the safety function.
•The local display screen and the HART®interface are read-only in SIL mode.
•You can only change parameters in non-SIL mode.
For more data about the failure current, refer to
Error conditions on page 19.
jOutput
OutputOutput
Output 1
kCable entry / cable gland —
lDisplay
DisplayDisplay
Display 4
mDisplay - documentation language —
nEnhanced functions 0
opqrstuvw All other device descriptors —
Table 1-3: Applicable options for SIL devices
Code Description Applicable options for SIL devices
Current output
(safe)
↑
Antenna →Safe subsystem →Non-safe
subsystem →
HART
↓
Local display

INTRODUCTION 1
7
OPTIWAVE X400 / X500
www.krohne.com10/2020 - 4008265401 - AD SIL OPTIWAVE x4-x500 R01a en
1.5 Related documentation
1.6 Terms and definitions
[N1] The applicable handbook for the OPTIWAVE 3500, OPTIWAVE 5400, OPTIWAVE 6400,
OPTIWAVE 6500, OPTIWAVE 7400 or OPTIWAVE 7500. Refer to the latest edition (revision R02 or
later).
[N2] IEC 61508-1 to 7:2010 Functional safety of electrical / electronic / programmable electronic safety-
related systems
[N3] NAMUR Recommendation NE 043 Standardization of the Signal Level for the Failure Information of
Digital Transmitters
DC Diagnostic Coverage of dangerous failures
EUC Equipment Under Control
Firmware Software embedded in the device.
FIT Failure In Time (1×10
-9
failures per hour)
FMEDA Failure Modes, Effects and Diagnostics Analysis
FRT Fault Response Time (diagnostic test interval + Fault Reaction Time). This is the
maximum time that is necessary for the current output to change to the error
value when the safety function has an error condition.
HFT Hardware Fault Tolerance
High demand or
continuous mode Where the frequency of demands for operation made on a safety-related system is greater than one time per year
I/O Input / output
λ
DD
Rate for dangerous detected failure
λ
DU
Rate for dangerous undetected failure
λ
SD
Rate for safe detected failure
λ
SU
Rate for safe undetected failure
Low demand mode Where the frequency of demands for operation made on a safety-related system
is no greater than one time per year
MTBF Mean Time Between Failures
MTTF Mean Time To Failure
MTTR Mean Time To Recovery
MTR Mean Time To Restoration
PFD
AVG
Average Probability of Failure on Demand
PFH Probability of a dangerous Failure per Hour
PLC Programmable logic controller
PTC Proof Test Coverage
Process safety time Time starting when something fails and ending when the 'undesired event' can
no longer be prevented
SAC Safety Application Conditions. Conditions that must be obeyed when you use a
safety-related system or a safety-related sub-system.
SFF Safe Failure Fraction
SIL Safety Integrity Level
SIS Safety Instrumented System

1 INTRODUCTION
8
OPTIWAVE X400 / X500
www.krohne.com 10/2020 - 4008265401 - AD SIL OPTIWAVE x4-x500 R01a en
Systematic Capability Measure (given as a scale of SC 1 to SC 3) of the confidence that the systematic
safety integrity of an element agrees with the conditions of the specified SIL
(related to the safety function of an element), when the element is applied in
accordance with the instructions.
Type A system "Non-complex" system (all failure modes are well defined). For more data, refer
to subsection 7.4.4.1.2 of IEC 61508-2.
Type B system "Complex" system (all failure modes are not well defined). For more data, refer
to subsection 7.4.4.1.3 of IEC 61508-2.
T[Proof] Proof Test Interval
T[Repair] Time to Repair
T[Test] Internal Diagnostics Test Interval
1oo1 1 out of 1 channel architecture (single architecture performs the safety function)
1oo1D 1 out of 1 channel architecture with diagnostics
1oo2 1 out of 2 channel architecture (architecture with homogenous or heterogenous
redundancy performs the safety function) 1
Table 1-4: Terms and definitions
1A system with homogeneous redundancy has two devices that operate with the same parameters. A system with het-
erogeneous redundancy has two devices that operate with different parameters.

SPECIFICATION OF THE SAFETY FUNCTION 2
9
OPTIWAVE X400 / X500
www.krohne.com10/2020 - 4008265401 - AD SIL OPTIWAVE x4-x500 R01a en
2.1 Preconditions
The device must be operated in the process and ambient conditions given in the handbook
(document [N1]) of the device.
Other conditions must be obeyed for safety applications. For more data refer to
Safety
application conditions (SAC)
on page 12.
2.2 Definition of the safety function
2.2.1 General notes
The device contains a safety function that agrees with International Standard IEC 61508
(document [N2]). It can be used in safety-critical systems where the safety function is necessary.
The device can be used in standard configuration with a safety integrity level of "2" and in a
homogeneously redundant configuration at safety integrity level of "3". For more data about
homogeneous redundancy, refer to
Homogeneous redundancy on page 23.
For safe operation, the operator / SIS engineer must obey Safety Application Conditions (SAC).
For more data about Safety Application Conditions, refer to
Safety application conditions (SAC)
on page 12.
When the device detects a failure, it sends a failure current signal at one of two values: ≤3.6 mA
or ≥21 mA. For more data, refer to
Error conditions on page 19. Although the device can be set
to send a high failure current signal (≥21 mA), some hardware failures that have an effect on the
current output (for example, an open circuit or a power supply failure) will always cause the
device to send a low failure current signal (≤3.6 mA). Also, if the device is set to send a low
failure current signal, then a short ciruit failure can cause the device to send a high failure
current signal. Thus, a logic controller must be able to identify the two failure current signals
(high and low) at all times.
If the failure is temporary, the device sends a failure current signal until it does not detect the
failure. It will then automatically start to measure again. If the failure is permanent, then the
operator must cancel the failure signal and restart the device to permit the device to continue to
measure. For more data, refer to
How to reset the fail-safe flags on page 29.

2 SPECIFICATION OF THE SAFETY FUNCTION
10
OPTIWAVE X400 / X500
www.krohne.com 10/2020 - 4008265401 - AD SIL OPTIWAVE x4-x500 R01a en
2.2.2 Current output
The device sends a current output signal that agrees with the correct measured value. This
output has these properties:
•A current that is related to the correct measured value in an interval that is equal to or less
than the Fault Response Time.
•The maximum permitted measurement error is ±4% of the nominal current output range
•The primary measured value is ‘distance’. The secondary (calculated) values include "level",
"volume", "mass" or "linearized measurement". You can set these secondary (calculated)
values as parameters for device operation in SIL mode. These values can then be sent as
safety-related output signals.
•The "volume", "mass", "flow" and the "linearized measurement" values use a strapping table.
This strapping table does a linear interpolation between points for the measured distance
and the secondary (calculated) value (e.g. volume).
The value for Current Output, Full Scale
Current Output, Full ScaleCurrent Output, Full Scale
Current Output, Full Scale (0...100% range) must be in the maximum measuring
range. If the measurement is the same as or less than the minimum limit of the normal range,
then the device will continue to show the minimum value (output "saturated" at 4 mA (standard
output range) or 3.8 mA (extended output range)). If the measurement is the same as or more
than the maximum limit of the normal range, then the device will continue to show the maximum
value (output "saturated" at 3.8 mA (standard output range) or 20.5 mA (extended output range)).
In these two conditions, the current output value is identified as a "non-safe" measurement. The
safe range of the current output is between:
•0.2 mA more than the minimum (saturated) current output for the measuring range, and
•0.5 mA less than the maximum (saturated) current output for the measuring range.
If the device has an internal failure, then this failure causes the device to send a permanent
failure current signal. To restart measurement after a permanent failure, you must reset the
device. For more data, refer to
How to reset the fail-safe flags on page 29.
Process conditions that have an effect on the devices status can cause temporary failures. The
device will try to restart operation.
CAUTION!
If the device measures volume, mass or flow, or uses a linearized scale, then do a check to make
sure that the values used in the strapping table are accurate. For an example of the procedure
you must use, refer to How to check measurement accuracy before operation in SIL mode on
page 25
.
CAUTION!
Make sure that the measured value is not less than the minimum limit or more than the
maximum limit of the measuring range. Do not let the current output become "saturated".

SPECIFICATION OF THE SAFETY FUNCTION 2
11
OPTIWAVE X400 / X500
www.krohne.com10/2020 - 4008265401 - AD SIL OPTIWAVE x4-x500 R01a en
2.2.3 Fault response time
If the device detects a failure, then it changes the current output to the low or high failure
current value in an interval equal to or less than the fault response time. The maximum fault
response time is 50 s.
CAUTION!
Do regular checks for high and low failure currents. If the device cannot automatically restart
operation after a temporary failure, then you must reset the device. For more data, refer to How
to reset the fail-safe flags on page 29
.
CAUTION!
Make sure that the device operates correctly in the safety loop after a manual restart and that
the failure condition does not continue to be applicable.
CAUTION!
Make sure that you use other safety precautions to prevent safety-critical failures that can have
an effect on all of the system. For more data, refer to Operation modes and proof tests on page
26
.

2 SPECIFICATION OF THE SAFETY FUNCTION
12
OPTIWAVE X400 / X500
www.krohne.com 10/2020 - 4008265401 - AD SIL OPTIWAVE x4-x500 R01a en
2.3 Safety application conditions (SAC)
The handbook (document [N1]) gives instructions to correctly install the device and connect it to
an electrical circuit. These instructions are mandatory if you use the device in a safety-related
system.
2.3.1 General
•Unless they are specified in this safety manual, changes to the device configuration are not
permitted. Make sure that the device is in the approved configuration after you do
maintenance on the device. Also make sure that all Safety Application Conditions are obeyed.
Fore more data, refer to
Parameter types on page 21.
2.3.2 Installation
•The maximum permitted measuring distance is 18 m / 59 ft.
•Do the Quick Setup procedures in Program Mode (A Quick Setup menu)before the device
starts to operate in SIL mode. Make sure that the device configuration is correct (parameters
and values).
•If there is build-up on the antenna, make sure that you clean it at regular intervals.
•If it is necessary to set up a system with homogeneous redundancy, then it is permitted to
install more than one device on the same tank or silo. For more data, refer to
Homogeneous
redundancy
on page 23.
•It is not permitted to install more than one independent operating radar on one tank. If there
is more than one, they have to be set up in a redundant configuration, where their output
signals are voted against each other.
•Only qualified personnel are permitted to remove or attach mechanical parts. Do a check of
the device configuration and electronic parts before you operate the device in SIL mode.
•Attach the weather protection accessory if you install the device more than 2000 m / 6560 ft
above sea level.
WARNING!
The device must have the applicable options and settings for the application. The ambient and
process conditions must agree with the technical data given in the handbook (document [N1])
and this document (safety manual). Obey the installation instructions given in the handbook
(document [N1]).
CAUTION!
We recommend that the 4 mA and 20 mA limits of the measuring range are not in the top or
bottom dead zones and the non-linearity zones.

SPECIFICATION OF THE SAFETY FUNCTION 2
13
OPTIWAVE X400 / X500
www.krohne.com10/2020 - 4008265401 - AD SIL OPTIWAVE x4-x500 R01a en
2.3.3 Electrical connection
•Only connect the device to PELV circuits that agree with International Standard IEC 61140.
•Wait for 120 seconds after you de-energize the device before you connect the electrical
cables again.
2.3.4 Functionally-safe configuration
•If you use the device in a continuous mode or high demand mode of operation, the process
safety time must be more than 50 seconds. This minimum time agrees with International
Standard IEC 61508 Part 2 (document [N2]), section 7.4.4.1.4).
•If you use the device in a high demand mode of operation, the maximum frequency of
demands is 1 demand every 83 minutes. This frequency agrees with International Standard
IEC 61508 Part 2 (document [N2]), section 7.4.4.1.4.
•Make sure that the device measures correctly before you operate the device in SIL mode. For
more data about the procedure, refer to
How to check measurement accuracy before
operation in SIL mode
on page 25.
•The SIS engineer must make sure that changes to the device configuration do not have an
effect on the performance of the safety-related system. Use safety precautions for system
protection, if it necessary.

2 SPECIFICATION OF THE SAFETY FUNCTION
14
OPTIWAVE X400 / X500
www.krohne.com 10/2020 - 4008265401 - AD SIL OPTIWAVE x4-x500 R01a en
2.4 Operation modes
2.4.1 SIL mode
The device operates with a safety function. If the safety function detects a failure, it will send a
failure current signal that gives a warning that the safety function cannot continue to operate
correctly. The device continues to be functionally safe and the safety-related data (e.g. hazard
rate, FRT etc.) continues to be applicable.
Devices in SIL mode have these operational conditions:
•Program Mode
Program ModeProgram Mode
Program Mode is not available. Thus, you cannot use the device display screen or a HART®
controller to change the device configuration.
•HART
HARTHART
HART®multidrop
multidropmultidrop
multidrop mode is not available.
•The device cannot simulate measurement values at the output terminals.
2.4.2 Non-SIL mode
The device operates as a standard device. Device operation and error detection agrees with all
the values set in Program Mode by the user. SIL mode constraints are not applicable.
2.4.3 Maintenance mode
You can use "Maintenance" mode to start a device and do tests in normal conditions in the
system.
Enter the "Expert" password to enter "Maintenance" mode. During the tests, you are responsible
for device operation and the possible effects it can have on the system. Make sure that you
change the device configuration back to SIL mode when you complete the tests.
WARNING!
Make sure that you change from "Maintenance" mode to "SIL" mode after you complete the
tests. If you do not change from "Maintenance" mode to "SIL" mode, then the device will not
operate correctly in a safety-related system. Make sure that the safety-related system has
protection from the effects of device operation in "Maintenance" mode.

OPERATION 3
15
OPTIWAVE X400 / X500
www.krohne.com10/2020 - 4008265401 - AD SIL OPTIWAVE x4-x500 R01a en
3.1 Operation in SIL mode
3.1.1 General notes
The device must have the SIL option to operate in SIL mode and use the safety function. If you
sent an order for a device with a SIL option, then SIL mode activation is unlocked and the safety
function is available. A SIL symbol is shown on the top right side of the display screen when the
device operates in SIL mode.
The configuration is protected with a password. For more data on password protection and
device configuration, refer to the "Operation" chapter in the handbook (document [N1]).
For more data about the procedure, refer to
Device configuration for operation in SIL mode on
page 15.
3.1.2 Device configuration for operation in SIL mode
Equipment needed
•Device with the integrated display option
•Ammeter (not supplied)
•Display extractor
Part 1: Set the parameters
• The device is on a measurement screen in Normal mode. Push [

] again and again to go to
the SIL setup screen.
• Push [>
>>
>] to enter Program mode. Push [>
>>
>] again to enter the Quick Setup menu.
• Push [

] two times to go to A3 Login and enter the 4-digit password for the "Expert" access
level (default password: 0058) and push [^
^^
^].
• Go to A4 Application Assistant
A4 Application AssistantA4 Application Assistant
A4 Application Assistant or C Full Setup menus
C Full Setup menusC Full Setup menus
C Full Setup menus to change values.
iIt is not permitted to change menu items that have parameters that are important for the
safety function. The device shows a padlock symbol next to important parameters that are
automatically set and locked for SIL mode.
• Push [^
^^
^] again and again to go back to the top menu.
• Save the new device configuration. Select "Yes".
iThe display screen shows the text: Switch to SIL mode?
• Select "Yes" to change from non-SIL
non-SILnon-SIL
non-SIL mode to SIL
SILSIL
SIL mode.
• Enter the 4-digit password for the "Expert" access level (default password: 0058) and push [^
^^
^]
to accept the change to SIL mode.
iAfter 60 seconds the device will start again. The display screen shows the text: Press key
for verification.
WARNING!
Only qualified personnel can change the device configuration. Record changes to the device
configuration. This report must include the date, the menu item, the old value and the new value.

3 OPERATION
16
OPTIWAVE X400 / X500
www.krohne.com 10/2020 - 4008265401 - AD SIL OPTIWAVE x4-x500 R01a en
Part 2: Current output check
• Connect an ammeter to the circuit.
• Push a button on the keypad.
iThe device will do a check of the current output.
• Look at the current values on the ammeter display screen. The current output automatically
changes in this sequence at intervals of 1 second: 3.5 mA, 4 mA, 6 mA, 8 mA, 10 mA, 12 mA,
14 mA, 16 mA, 18 mA, 20 mA and 21.5 mA.
iThe display screen shows the text "Set SIL jumper or press key to cancel" during this test.
This sequence repeats continuously until you lock the device configuration in SIL Mode
(refer to Part 3) or you push a button on the keypad to cancel this procedure.
Part 3: Lock the device configuration in SIL mode
• Find the two clips that hold the display module in the housing.
• Use the display extractor to remove the display module from the housing. Put the display
extractor in the slots on the module for these clips.
• Carefully remove the display module from housing and then remove the display extractor from
the display module.
• Remove the jumper from the non-SIL mode position.
• Put the jumper in the SIL mode position.
iMake sure that the jumper is correctly connected to the pins on the circuit board. Refer to
the illustration that follows.
• Put the display module back on the electronics block.
iIf the clips make a click sound, then the display module is correctly attached to the
electronics block.
• The device will display the text "LEVEL SENSOR starting up…". After 10 seconds the display
screen will display a measurement screen.
• Make sure that the SIL symbol is shown in the top right corner of the display screen.
iThe device configuration is "locked" and parameters cannot be changed in SIL mode.

OPERATION 3
17
OPTIWAVE X400 / X500
www.krohne.com10/2020 - 4008265401 - AD SIL OPTIWAVE x4-x500 R01a en
You will see the screens that follow after you connect the display module to the electronics
block:
Figure 3-1: How to lock the device configuration in SIL mode
Figure 3-2: Device operation in SIL mode
1 SIL mode symbol (this symbol is only shown in SIL mode)

3 OPERATION
18
OPTIWAVE X400 / X500
www.krohne.com 10/2020 - 4008265401 - AD SIL OPTIWAVE x4-x500 R01a en
3.2 How to change the configuration of a device operated in SIL mode
3.2.1 General notes
It is not permitted to change the configuration of a device in SIL mode. If it is necessary for the
device to use a new parameter in SIL mode, you must put the device in non-SIL mode to change
the configuration.
3.2.2 How to change device operation from SIL mode to non-SIL mode
Equipment needed
•Display extractor
• Find the two clips that hold the display module in the housing.
• Use the display extractor to remove the display module from the housing. Put the display
extractor in the slots on the module for these clips.
• Carefully remove the display module from housing and then remove the display extractor from
the display module.
• Remove the jumper from the SIL
SILSIL
SIL mode position.
• Put the jumper in the non-SIL
non-SILnon-SIL
non-SIL mode position.
iMake sure that the jumper is correctly connected to the pins on the circuit board.
• Put the display module back on the electronics block.
iIf the clips make a click sound, then the display module is correctly attached to the
electronics block. The device display screen shows the text "LEVEL SENSOR starting up…"
for 10 seconds the display screen and then the text "Press key for verification".
• Push a button on the keypad.
iThe device will do a check of the current output.
Figure 3-3: How to change from SIL mode to non-SIL mode
1 "SIL mode" position
2 "non-SIL mode" position

OPERATION 3
19
OPTIWAVE X400 / X500
www.krohne.com10/2020 - 4008265401 - AD SIL OPTIWAVE x4-x500 R01a en
• Look at the current values on the ammeter display screen. The current output automatically
changes in this sequence at intervals of 1 second: 3.5 mA, 4 mA, 6 mA, 8 mA, 10 mA, 12 mA,
14 mA, 16 mA, 18 mA, 20 mA and 21.5 mA.
iThis sequence repeats continuously until you push a button to stop the sequence. The
display screen shows the text "Set SIL jumper or press key to cancel" during this test.
• Push a button on the keypad and enter the password (0058) and push [^
^^
^].
iThe device display screen shows the text "Wait for reboot" and then, after 30 seconds, the
display screen shows a measurement screen in normal mode. The device is in non-SIL
non-SILnon-SIL
non-SIL
mode. The SIL mode symbol is not shown on the top right corner of the display screen.
3.3 Error conditions
The device can detect error conditions. When the device detects an error, it supplies a failure
current value to show that this a temporary (transient) or permanent (persistent) failure.
Error conditions are the same for non-SIL
non-SILnon-SIL
non-SIL mode and SIL
SILSIL
SIL mode, but special conditions are
applicable to SIL
SILSIL
SIL mode. These special conditions are:
•The device will supply a failure current if there is a safety-critical failure.
•The failure current is the only signal that is related to the safety function. Ignore data from
other outputs and display options (e.g. HART®handheld controller etc.).
•Make sure that you monitor the low failure current value (≤3.6 mA) and the high failure
current value (≥21 mA).
•The tables that follows shows the types of error that is related to safety (SIL). Errors in this
group will only occur if you operate the device in SIL
SILSIL
SIL mode.
For more data about error conditions, refer to the tables that follows:
Error conditions related to the device hardware
INFORMATION!
For more data about the procedure to remove the display module, refer to "Turning the display"
section in the handbook (document [N1]).
CAUTION!
Although the device can be set to send a high failure current signal (≥21 mA), some hardware
failures will always cause the device to send a low failure current signal (≤3.6 mA).
Status type Error message Description Corrective actions
FElectronics
All error messages This type of error causes the
device to automatically stop
operation.
Restart the device. For more data
about the procedure to restart
the device, refer to How to reset
the fail-safe flags on page 29.
Table 3-1: Error conditions that can cause a permanent failure current

3 OPERATION
20
OPTIWAVE X400 / X500
www.krohne.com 10/2020 - 4008265401 - AD SIL OPTIWAVE x4-x500 R01a en
Error conditions related to the measured process
For more data, refer to the "Status messages and diagnostic data" section in the handbook
(document [N1]).
Status type Error message Description Corrective actions
FSensor
No Signal There is no signal from the
antenna or the antenna signal is
too weak for a long time.
-
SSensor
Strong Signal The signal amplitude is too large.
It is possible that the signal is
saturated.
-
Peak Lost
(Level Lost) No signal peak was found in the Search Window for a long time
(>20 s).
-
Overfill The signal peak is in the blocking
distance (refer to menu item C1.5
Blocking Distance). There is a
risk that the tank is too full.
-
MSensor
Weak Signal The signal amplitude is too small. -
Bad Measurement
Quality (Old
Measurement)
The measurement value is
incorrect and does not change for
more than 10 s.
-
Empty Spectrum
invalid The empty spectrum recording does not agree with the process
conditions at this time (e.g. the
tank height was changed).
-
MSensor Information
Bad Spectrum
Quality There is a large change in signal strength.
1
Peak Lost in Tank
Bottom The signal was lost near the tank bottom. Spherical or conical
tanks can cause the device to
show this status message.
-
Table 3-2: Error conditions that can cause a temporary failure current
1If the device detects a "Empty spectrum invalid" error, then it supplies a permanent failure current value in SIL mode.
But it is permitted to change the failure current of this error condition and set it to a temporary failure current value.
If you want to change this value, go to menu C7.3.2 Error-Mapping and refer to the "Function description" section in
the handbook (document [N1]).