Magnetrol Eclipse 706-512 User manual

SIL Certified Safety Manual for
Eclipse®Model 706-512X-XXX
High Performance Guided Wave
Radar Level Transmitter
Thi manual complement and i intended to be u ed with the
Magnetrol®Eclip e®Model 706 High Performance Guided Wave
Radar In tallation and Operating manual (Bulletin 57-606).
Safety Function
Th HART®v rsion of th Eclips ®Enhanc d Mod l 706
Guid d Wav Radar (GWR) transmitt r will m asur
l v l and transmit a signal proportional to that l v l
within th stat d saf ty accuracy of ±2% of span (or th
m asur d rror publish d in I/O Manual 57-606,
which v r is gr at r). In addition, wh n continuous,
automatic diagnostics d t ct that th transmitt r cannot
p rform this function, th output will b driv n to th
custom r-sp cifi d out-of-rang signal (i. ., 3.6 mA or
21 mA).
Th Enhanc d Mod l 706 is c rtifi d for us in low
d mand l v l m asur m nt applications.
App ication
Th HART®v rsion of th ECLIPSE Mod l 706
Guid d Wav Radar l v l transmitt r can b appli d in
most proc ss or storag v ss ls, bridl s, and bypass
chamb rs up to th prob ’s rat d t mp ratur and pr s-
sur . It can b us d in liquids, slurri s, or solids with a
di l ctric constant in th rang 1.4–100 to m t th
saf ty syst m r quir m nts of IEC 61508 (Edition 2.0,
2010) and IEC 61511-1.
Benefits
• L v l prot ction to SIL 3 as c rtifi d by xida
C rtification p r IEC 61508/IEC 61511-1.
• Prob d signs to +850 °F (+454 °C), 6250 psig
(430 bar) and full vacuum.
• Cryog nic applications to -320 °F (-190 °C).
• Intrinsically saf , Explosion-proof and Non-Inc ndiv
approvals.
• Quick conn ct/disconn ct prob coupling.

57-657 SIL Certified Safety Manual for ECLIPSE Model 706
Tab e of Contents
Eclipse®Model 706 High Performance Guided Wave Radar Level Transmitter
SIL Safety Manual for Eclipse®Model 706-5 2x-xxx
.0 Introduction ...................................................................3
1.1 Product D scription..................................................3
1.2 Th ory of Op ration.................................................3
1.3 D t rmining Saf ty Int grity L v l (SIL) ..................3
2.0 Applicable Models ..........................................................4
3.0 Level Measuring System .................................................4
3.1 Misc llan ous El ctrical Consid rations ....................5
3.1.1 Pollution D gr 2 .........................................5
3.1.2 El ctromagn tic Compatibility.......................5
4.0 Mean Time To Repair (MTTR).....................................5
5.0 Supplementary Documentation......................................5
6.0 General Instructions.......................................................5
6.1 Syst matic Limitations ..............................................5
6.1.1 Application.....................................................5
6.1.2 Environm ntal................................................6
6.1.2.1 Op rating ........................................6
6.1.2.2 Storag .............................................6
6.2 Installation ................................................................6
6.3 Skill L v l of P rsonn l .............................................6
6.4 N c ssary Tools .........................................................7
6.5 Configuration Information .......................................7
6.5.1 G n ral...........................................................7
6.5.2 Configuration.................................................7
6.5.3 Writ Prot cting/Locking ..............................7
6.6 Sit Acc ptanc T sting .............................................8
6.7 R cording R sults......................................................8
6.8 Maint nanc ..............................................................8
6.8.1 Diagnostics and R spons Tim s....................8
6.8.2 Troubl shooting .............................................8
7.0 Recurrent Function Tests ...............................................9
7.1 Proof T sting.............................................................9
7.1.1 Introduction...................................................9
7.1.2 Int rval...........................................................9
7.1.3 R cording R sults...........................................9
7.1.4 Sugg st d Proof T st.......................................9
8.0 Safety Requirements.....................................................
8.1 Syst m Saf ty Assumptions .....................................11
8.2 Saf ty Function R quir m nts.................................12
8.3 Saf ty Us r Programming and Configuration
R quir m nts ..........................................................12
9.0 Appendices ................................................................... 3
9.1 SIL C rtificat .........................................................13
9.2 FMEDA R port: xida Manag m nt Summary......14
9.3 Sp cific Mod l 706 Valu s ......................................15
9.4 R port: Lif tim of Critical Compon nts................15

3
57-657 SIL Certified Safety Manual for ECLIPSE Model 706
1.0 Introduction
1.1 Product Description
Th ECLIPSE Mod l 706 High P rformanc Guid d Wav
Radar L v l Transmitt r is a two-wir , loop-pow r d
24 VDC l v l transmitt r bas d on Guid d Wav Radar
(GWR) t chnology.
NOTE: For Safety Instrumented Systems usage, it is assumed that the
4 20 mA output is used as the safety variable.
Th analog output from th Mod l 706 m ts th NAMUR
NE 43 standard (3.8 mA to 20.5 mA usabl ). Th transmitt r
contains s lf-diagnostics and is programm d to driv th
output to a us r-s l ct d failur stat , ith r low or high,
upon int rnal d t ction of a diagnostic indicator. Th d vic
can b quipp d with or without an optional non-int rf ring
graphic liquid crystal display (LCD).
Tabl 1 indicat s th v rsion of th ECLIPSE Mod l 706
transmitt r that has b n c rtifi d for SIL 2/3 applications.
1.2 Theory of Operation
Guid d Wav Radar is bas d upon th principl of TDR
(Tim Domain R fl ctom try). TDR utiliz s puls s of l ctro-
magn tic n rgy transmitt d down a wav guid (prob ).
Wh n a puls r ach s a liquid surfac that has a high r
di l ctric constant than th air (εr= 1) in which it is trav ling,
a portion of th puls is r fl ct d. Th transit tim of th
puls is th n m asur d via ultra high-sp d timing circuitry
that provid s an accurat m asur of th liquid l v l. Th
amplitud of th r fl ction d p nds on th di l ctric con-
stant of th product. Th high r th di l ctric constant, th
larg r th r fl ction.
1.3 Determining Safety Integrity Leve (SIL)
Saf ty Instrum nt d Syst m d sign rs using th Enhanc d
ECLIPSE Mod l 706 must v rify th ir d sign p r applicabl
standards, including IEC 61511-1.
Thr limits must b m t to achi v a giv n SIL l v l:
1. Th PFDAVG numb rs for th ntir Saf ty Instrum nt d
Function (SIF) must b calculat d. Tabl 2 shows th r la-
tionship b tw n th Saf ty Int grity L v l (SIL) and th
Probability of Failur on D mand Av rag (PFDAVG).
2. Archit ctur constraints must b m t for ach subsyst m.
Tabl 3 can b us d to d t rmin th achi vabl SIL as a
function of th Hardwar Fault Tol ranc (HFT) and th
Table 3
Minimum hardware fault tolerance
Type B sensors, final elements and non-PE logic solvers
SFF
Hardware Fault
Tolerance (HFT)
012
None: <60% Not
Allowed SIL 1 SIL 2
Low: 60% to <90% SIL 1 SIL 2 SIL 3
Medium: 90% to <99% SIL 2 SIL 3
High: ≥99% SIL 3
Table 2
SIL vs. PFDavg
Safety
Integrity Level
(SIL)
Target Average
probability of failure
on demand (PFDavg)
4≥10-5 to <10-4
3≥10-4 to <10-3
2≥10-3 to <10-2
1≥10-2 to <10-1
1 Transmitters:
Model 706, 706-512*-*** (HART)
Hardware Version (or later)
Analog Board 030-9160-001 Rev K
Digital Board 030-9159-001 Rev AC
Wiring Board 030-9165-001 Rev F
Software Version (or later)
Model 706 HT 1.0 A. ex
2 Probes:
All ECLIPSE probes can be utilized.
Refer to I/O Manual 57-606 for
complete probe offering.
Table 1
En anced ECLIPSE Model Numbers

457-657 SIL Certified Safety Manual for ECLIPSE Model 706
Saf Failur Fraction (SFF) for ach subsyst m in a saf ty
syst m (Typ B–compl x compon nts as p r IEC 61508
Part 2) of which th l v l transmitt r is just on compon nt.
3. All products chos n for us in th SIF must m t th
r quir m nts of IEC 61508 for th giv n SIL Capability
l v l or b justifi d bas d on prov n in us data coll ct d for
ach job.
Th xSIL ntia tool from xida is r comm nd d for d sign
v rification. This automatically ch cks all thr limits and
displays th r sults for any giv n d sign. Th ECLIPSE
Mod l 706 is in th xSIL ntia databas . This tool contains
all n d d failur rat , failur mod , SIL Capability and
common caus data as w ll as sugg st d proof t st m thods.
2.0 App icab e Mode s
This manual is only applicabl to th HART v rsions of
th ECLIPSE Mod l 706 transmitt r shown in Tabl 1.
NOTE: Ensure that the Model 706 transmitter and probe are installed
as a set matched by the Serial Number shown on the name
plates.
3.0 Leve Measuring System
Th diagram at l ft shows th structur of a typical m asuring
syst m incorporating th ECLIPSE Mod l 706 transmitt r.
This SIL 2/3 C rtifi d d vic is only availabl with an ana-
log signal (4–20 mA) with HART communications; and,
th m asur m nt signal us d by th logic solv r can b th
analog 4–20 mA signal proportional to th L v l, Int rfac
L v l or Upp r Lay r Thickn ss.
• For fault monitoring, th logic unit must r cogniz both
high alarms (≥ 21.5 mA) and low alarms (≤ 3.6 mA).
• If th logic solv r loop us s intrinsic saf ty barri rs, caution
must b tak n to nsur th loop continu s to op rat
prop rly und r th low alarm condition.
• Th only unsaf mod is wh n th unit is r ading an
incorr ct l v l within th 4–20 mA rang (> ±2% d viation).
• MAGNETROL d fin s th fault d mod as on in which
th 4–20 mA curr nt is driv n out of rang (i. ., l ss than
3.8 mA or gr at r than 21.5 mA).
• Volum and flow ar not includ d in th saf ty function
for th ECLIPSE Mod l 706.
• Th 4–20 mA output signal can b configur d for ov r-
rang p r NAMUR NE43.
Actuator
PACTware with
Eclipse® DTM
HART Modem
Eclipse® Model 706
Logic
Unit

5
57-657 SIL Certified Safety Manual for ECLIPSE Model 706
3.1 Misce aneous E ectrica Considerations
Following ar misc llan ous l ctrical issu s to b consid r d
in a saf ty syst m.
3.1.1 Pollution Degree 2
Th ECLIPSE Mod l 706 transmitt r is d sign d for us
in a Cat gory II, Pollution D gr 2 installation, which is
d fin d by a nonconductiv pollution of th sort wh r
occasionally a t mporary conductivity caus d by cond nsation
must b xp ct d.
This is th usual pollution d gr us d for quipm nt b ing
valuat d to IEC/EN 61010.
3.1.2 Electromagnetic Compatibility
Th ECLIPSE Mod l 706 is d sign d to m t th r quir -
m nts of EN 61326 and NAMUR NE21.
4.0 Mean Time To Repair (MTTR)
SIL d t rminations ar bas d on a numb r of factors including
th M an Tim To R pair (MTTR). Th analysis for th
ECLIPSE Mod l 706 is bas d on a MTTR of 24 hours.
5.0 Supp ementary Documentation
• Th ECLIPSE Mod l 706 Installation and Op rating
Manual 57-606 must b availabl to nsur prop r
installation of th transmitt r.
• Th following El ctronic D vic D scription Fil is r quir d
if HART is us d:
• Manufactur r Cod 0x56
• Mod l 706 D vic ID 0x56E0, d vic r vision 1,
DD r vision 2.
• For d vic installations in a classifi d ar a, th r l vant saf ty
instructions and l ctrical cod s must b follow d.
6.0 Genera Instructions
6.1 Systematic Limitations
Th following instructions must b obs rv d to avoid
syst matic failur s:
6.1.1 Application
Choosing th prop r Guid d Wav Radar (GWR) prob is
th most important d cision in th application proc ss.

657-657 SIL Certified Safety Manual for ECLIPSE Model 706
Coaxial, twin fl xibl cabl , and singl l m nt (rod or cabl )
ar th thr basic configurations. As th prob configuration
stablish s fundam ntal p rformanc charact ristics, th
prob for us with th ECLIPSE Mod l 706 transmitt r
should b s l ct d as appropriat for th application.
Th Mod l 706 is d sign d for us in many applications in
proc ss industri s. Consult factory for assistanc with prob
options.
Car ful s l ction of prob d sign and mat rials for a sp cific
application will minimiz m dia buildup on th prob .
R f r to Installation and Op rating Manual 57-606 for
mor information.
6.1.2 Environmental
R f r to Installation and Op rating Manual 57-606 for
Environm ntal limitations.
6.1.2.1 Operating
Th op rating t mp ratur rang is -40 to +175 °F (-40 to
+80 °C).
6.1.2.2 Storage
Th d vic should b stor d in its original shipping box
and not b subj ct d to t mp ratur s outsid th storag
t mp ratur rang of -50 to +185 °F (-46 to +85 °C).
6.2 Insta ation
R f r to th Mod l 706 Installation and Op rating Manual
57-606 manual for compl t installation instructions.
• Contains information on th us , changing and r s tting of
th password-prot ction function.
• Provid s m nu s l ction it ms for configuration of th
transmitt r as a l v l s nsing d vic .
• Off rs configuration r comm ndations.
• Input voltag and loop r sistanc must b within th saf
op rating ar a of th d vic .
6.3 Ski Leve of Personne
P rsonn l following th proc dur s of this saf ty manual
should hav t chnical xp rtis qual to or gr at r than that
of a qualifi d Instrum nt T chnician.

7
57-657 SIL Certified Safety Manual for ECLIPSE Model 706
6.4 Necessary Too s
Following ar th n c ssary tools n d d to carry out th
pr scrib d proc dur s:
• Op n-wr nch s or adjustabl wr nch to fit th proc ss
conn ction siz and typ .
• Coaxial prob : 11⁄2" (38mm)
• Twin Rod and Singl rod prob s: 17⁄8" (47mm)
• Transmitt r: 11⁄2" (38mm)
• Torqu wr nch is highly d sirabl
• Flat-blad scr wdriv r
• Cabl cutt r and 3⁄32" (2.5mm) h x wr nch (7y1, 7y2, 7y5
and 7y7 Fl xibl prob s only)
• Digital multim t r or digital volt/amm t r
• 24 VDC pow r supply, 23 mA minimum
6.5 Configuration Information
6.5.1 General
Th ECLIPSE Mod l 706 transmitt r can b configur d via
th local display, a HART compatibl handh ld t rminal, or
a PC using PACTware™and th associat d DTM.
6.5.2 Configuration
Ensur th Mod l 706 transmitt r has b n prop rly config-
ur d for th application and prob . Sp cial consid ration
should b giv n to th following configuration param t rs:
Dielectric Range: Ensur this is s t to “1.7–3.0” for th
majority of typical hydrocarbon applications or “B low 1.7”
for propan and butan applications.
Failure Alarm: DO NOT choos HOLD for this param -
t r as a Fault will not b annunciat d on th curr nt loop.
Blocking Distance: This valu MUST b Z ro for ov rfill
applications. Consult factory prior to making any chang s.
Analog Output Mode: Ensur this is s t to ENABLED.
Level Threshold Mode: S t to FIXED VALUE if us d in a
hydrocarbon application with any possibility of wat r bottoms.
User Password: Must b chang d to a sp cific valu oth r
than Z ro.
6.5.3 Write Protecting / Locking
Th Mod l 706 transmitt r can b prot ct d with a num rical
password b tw n 0 and 59,999.
NOTE: Default Password = 0 = Password disabled.

R f r to th Mod l 706 Installation and Op rating Manual
Bull tin 57-606 for additional information on password
prot ction.
For an SIS syst m, it is r quir d that, aft r configuration of
th syst m is compl t , a password is utiliz d to pr v nt
inadv rt nt chang s to th d vic .
6.6 Site Acceptance Testing
To nsur prop r op ration aft r installation and configura-
tion, a sit acc ptanc t st should b compl t d. This
proc dur is id ntical to th Proof T st Proc dur d scrib d
in S ction 7.1.4.
6.7 Recording Resu ts
R sults of Sit Acc ptanc T sting must b r cord d for
futur r f r nc .
6.8 Maintenance
With no moving parts to w ar out or los tol ranc , routin
maint nanc is not r quir d.
6.8.1 Diagnostics and Response Times
Continuous int rnal diagnostics ar pr s nt within th
Enhanc d ECLIPSE Mod l 706 transmitt r. In th v nt a
Fault is d t ct d, a m ssag will app ar on th LCD and th
output curr nt will b driv n to 3.6 mA or 22mA d p nding
on how th FAULT param t r is configur d.
A) Start-up Tim :
a. From application of pow r to normal op rat-
ing mod : 6 s conds
b. From application of pow r to Fault mod :
29 s conds or l ss (Assuming a Fault is pr s nt
upon start-up)
B) Diagnostic T st Int rval: 15 s conds
a. This is d fin d as th tim from th normal
op rating mod to th Fault mod upon th
occurr nc of a fault.
C) Saf ty Function R spons Tim :
3 s conds (with Damping=0)
6.8.2 Troubleshooting
R port all failur s to th MAGNETROL T chnical Support
D partm nt.
R f r to th Mod l 706 Installation and Op rating Manual
Bull tin 57-606 for troubl shooting d vic rrors.
857-657 SIL Certified Safety Manual for ECLIPSE Model 706

9
57-657 SIL Certified Safety Manual for ECLIPSE Model 706
Step Action
1 Bypass the PLC or take other action to avoid a false trip.
2
Inspect the unit in detail outside and inside for physical damage or evidence of environmental or
process leaks
a.) Inspect the exterior of the Unit housing. If there is any evidence of physical damage that may
impact the integrity of the housing and the environmental protection, the unit should be repaired
or replaced.
b.) Inspect the interior of the unit. Any evidence of moisture, from process or environment, is an
indication of housing damage, and the unit should be repaired or replaced.
3
Use the unit’s DIAGNOSTICS menu to observe Present Status, and review EVENT HISTORY in the
Event Log. Up to 10 events are stored. The events will be date and time stamped if the internal clock is
set and running. It is suggested that the internal clock be set at the time of commissioning of the unit.
If the clock is set at the time of the proof test, event times are calculated.
a.) Choose the menu DIAGNOSTICS / Present Status.
i.) Present Status should indicate OK.
b.) Choose the menu DIAGNOSTICS / EVENT HISTORY/ Event Log
i.) Any FAULT or WARNING messages must be investigated and understood.
ii.) Corrective actions should be taken for FAULT messages. continued on next page
• As th r ar no moving parts in this d vic , th only main-
t nanc r quir d is th SIL Proof T st.
• Firmwar can only b upgrad d by factory p rsonn l.
7.0 Recurrent Function Tests
7.1 Proof Testing
7.1.1 Introduction
Following is th proc dur utiliz d to d t ct Dang rous
Und t ct d (DU) failur s.
7.1.2 Interval
To maintain th appropriat Saf ty Int grity L v l of a
Saf ty Instrum nt d Syst m, it is imp rativ that th ntir
syst m b t st d at r gular tim int rvals (shown as TI in th
appropriat standards). Th suitabl SIL for th Mod l 706
transmitt r is bas d on th assumption that th nd us r
will carry out this t st and insp ction at l ast onc p r y ar.
NOTE: It is the responsibility of the owner/operator to select the type
of inspection and the time period for these tests.
7.1.3 Recording Results
R sults of th Proof T st should b r cord d for futur
r f r nc .
7.1.4 Suggested Proof Test
Th sugg st d proof t st b low, in combination with th
built-in automatic diagnostics, will d t ct 98% of possibl
DU failur s in Mod l 706-512x-xxx.

10 57-657 SIL Certified Safety Manual for ECLIPSE Model 706
Step Action
4
Use the DIAGNOSTICS menu to perform a “CURRENT LOOP TEST”. Select DIAGNOSTICS /
ADVANCED DIAGNOSTICS / TRANSMITTER TESTS / Analog Output Test to change the output loop
current and confirm the actual current matches the value chosen.
a.) Send a HART command to the transmitter (or use the local interface) to go to the high alarm
current output, 22 mA, and verify that the analog current reaches the valve.
i.) This step tests for compliance voltage problems such as low supply voltage or increased
wiring resistance.
ii.) This also tests for current loop control circuitry and adjustment problems.
b.) Send a HART command to the transmitter (or use the local interface) to go to the low alarm
current output, 3.6 mA, and verify that the analog current reaches the valve.
i.) This step tests for high quiescent current and supply voltage problems.
ii.) This also tests for current loop control circuitry and adjustment problems.
c.) Exit the “Analog Output Test” and confirm that the output returns to its original state—with the
proper loop current as indicated and controlled by the unit.
5
Use the DIAGNOSTICS menu to observe the present Echo Curve. Confirm that the ECHO Waveform is
normal. The echo curve is dependent on the type of probe, the installation conditions and the level of
process on the probe. Comparison of the present Echo Curve to the one stored at the time of commis-
sioning the unit gives additional confidence of the normal operation of the unit. Use of the DTM and
digital communications is necessary for comparison of echo curves.
a.) Select DIAGNOSTICS/ ECHO CURVE/ View Echo Curve
i.) Observe the present Echo Curve, identify the characteristic portions of the waveform related
to the FIDUCIAL, Process level, End of Probe and other features.
ii.) Confirm that the FIDUCIAL appears acceptable. Confirm the FIDUCIAL is located where
expected.
iii.) Confirm that the signal from the process level appears normal and is located as expected.
iv.) Verify that the baseline of the waveform is smooth and flat.
v.) Compare to Echo Curve from commissioning in the FIDUCIAL area.
b.) Access the Fiducial Ticks and Fiducial Strength values in the menu: DIAGNOSTICS /
ADVANCES DIAGNOSTICS / INTERNAL VALUES
i.) Observe and record:
1.) Fiducial Ticks _____________
2.) Fiducial Strength _____________
ii.) Confirm that these values match the previous values.
1.) Fiducial Ticks differs within ±100
2.) Fiducial Strength differs within ±15
6Perform two-point calibration check of the transmitter by applying level to two points on the probe and
compare the transmitter display reading and the current level value to a known reference measurement.
7If the calibration is correct the proof test is complete. Proceed to step 9.
8
If the calibration is incorrect, remove the transmitter and probe from the process. Inspect the probe for
buildup or clogging. Clean the probe, if necessary. Perform a bench calibration check by shorting the
probe at two points. Measure the level from the bottom of the probe to the two points and compare to
the transmitter display and current level readings.
a.) If the calibration is off by more than 2%, contact the factory for assistance.
b.) If the calibration is correct, the proof test in complete.
c.) Re-install the probe and transmitter.
9Restore loop to full operation.
10 Remove the bypass from the safety PLC to restore normal operation.

11
57-657 SIL Certified Safety Manual for ECLIPSE Model 706
Assumptions for Safety
The user SIF will detect and properly handle annunciation of detected fault conditions signaled by the alarm level
output according to the specific requirements of the SIF.
Proper operation of the Eclipse Model 706 is dependent on having the voltage across the transmitter terminals
meet the Safe Operating Area requirements during normal operation.
A user SIF integrating the Eclipse Model 706 current loop output will detect faulted field wiring and other faults
resulting in a current loop value signal outside of the specified range and take proper actions to maintain safety
integrity according to the specific requirements of the SIF.
Optional Local User Interface will not be relied upon by the end user SIF during normal operation and will be con-
sidered non-interfering to the safety function.
HART communications will not be relied upon by the end user for the SIF normal operation and will be considered
non-interfering to the safety function.
The impact of end user configured damping values is not included in the published safety (function) response
time. (The end user must consider this as part of overall time response of the SIF.)
The end user will independently verify all changes to end user configured parameters and validate the safety func-
tionality prior to reliance on the product for safety protection.
The end user will enable the User Password to lock out any end user modifiable configuration parameters avail-
able via the Local User Interface during normal operation.
The end user will enable the User Password to lock out any end user modifiable configuration parameters avail-
able via the HART interface during normal operation.
The end user will have proper procedures in place to ensure safe operation over the product life cycle.
The end user will ensure the device is properly installed per the product literature. The proper probe will be used
for the application with the transmitter properly connected to the probe.
The end user must not select HOLD for the alarm output.
Loop Current mode must be enabled.
8.0 Safety Requirements
This s ction sp cifi s thos saf ty charact ristics allocat d
to th ECLIPSE Mod l 706 that ar conditions for its
acc ptanc as a SIL c rtifi d d vic .
NOTE: This SIL evaluation has assumed that the customer will be able
to acknowledge an over- or under-current condition via the
Logic Solver.
8.1 System Safety Assumptions
Th Syst m Saf ty Assumptions provid a list of saf ty r l -
vant assumptions mad on th usag of th product ov r th
saf ty lif cycl of a us r Saf ty Int grity Function, SIF.
Magn trol cannot dir ctly control th us r lif cycl of a SIF
using this product but n ds to hav assumptions on how
th product will b us d. It is important that us rs hav full
knowl dg of th s assumptions to nsur th y ar m t wh n
using th product as part of a SIF. This is to nsur th
product is us d in a mann r consist nt with th saf ty d sign.
This s ction only lists product sp cific assumptions and is
not int nd d to sp cify m asur s r quir d of th nd us r
that ar standard r quir m nts for saf ty applications.

12 57-657 SIL Certified Safety Manual for ECLIPSE Model 706
8.2 Safety Function Requirements
This s ction lists th Saf ty Function R quir m nts that
sp cify what saf ty r l vant functionality is to b p rform d
for impl m ntation of th saf ty int grity function and also
to maintain th d sir d l v l of saf ty int grity. Th s
r quir m nts may also rul out particular functionality for
SIF usag that could l ad to d signs that ar difficult to vali-
dat for d t rministic p rformanc or saf ty int grity.
Safety Function Requirement
Upon application of power and successful initialization, the Eclipse Model 706 s all enter the Normal Mode or
Faulted Mode of operation.
Upon application of power and successful initialization, the Eclipse Model 706 s all enter the Normal Mode
operation within 6 seconds.
Upon application of power and successful initialization, the Eclipse Model 706 s all enter the Faulted Mode of
operation in less than 29 seconds.
The Eclipse Model 706 s all transition to the Faulted Mode from the Normal Mode within the Diagnostic Test
Interval after a diagnostic event occurs. The safety function will respond to a change from the user’s process
within the safety (function) response time.
The Eclipse Model 706 s all transition to the Faulted Mode from the Normal Mode within the Diagnostic Test
Interval of 15 seconds after a diagnostic event occurs.
The safety function output of the Eclipse Model 706 s all respond to a change from the user’s process within
the safety (function) response time of 3 seconds assuming Damping is set to 0.
The Eclipse Model 706 may leave the Faulted Mode when all diagnostics are clear.
8.3 Safety User Programming and
Configuration Requirements
Th Saf ty Us r Programming and Configuration
R quir m nts provid th r quir m nts for fi ld configura-
tion of th d vic r quir d to cr at and maintain SIF con-
figurations. Th s r quir m nts should provid th n c s-
sary guidanc to nsur that th ngin ring nvironm nt
will m t both th int nd d mark t and saf ty c rtification
r quir m nts, along with guidanc and us r r strictions doc-
um nt d in th saf ty manual.
Safety User Programming Requirement
Setup, configuration, and maintenance functionality for the Eclipse Model 706 s all be supported by the
non-interfering HART communications interface.
Setup, configuration and maintenance functionality for the Eclipse Model 706 s all be supported by the optional
Local User Interface.

13
57-657 SIL Certified Safety Manual for ECLIPSE Model 706
9.0 Appendices
9.1 SIL Certificate

14 57-657 SIL Certified Safety Manual for ECLIPSE Model 706
9.2 FMEDA Report: exida Management S mmary

15
57-657 SIL Certified Safety Manual for ECLIPSE Model 706
9.3 Specific Mode 706 Va ues
9.4 Report: Lifetime of Critica Components
According to s ction 7.4.9.5 of IEC 61508-2, a us ful lif -
tim , bas d on xp ri nc , should b assum d.
Although a constant failur rat is assum d by probabilistic
stimation m thod, this only appli s provid d that th
us ful lif tim of compon nts is not xc d d. B yond th ir
us ful lif tim th r sult of th probabilistic calculation
m thod is th r for m aningl ss, as th probability of failur
significantly incr as s with tim . Th us ful lif tim is
highly d p nd nt on th subsyst m its lf and its op rating
conditions.
Th assumption of a constant failur rat is bas d on th
bathtub curv . Th r for it is obvious that th PFDavg
calculation is only valid for compon nts that hav this
constant domain and that th validity of th calculation is
limit d to th us ful lif tim of ach compon nt.
Th xp ct d us ful lif of ECLIPSE Mod l 706-512x-xxx
is at l ast 50 y ars.
It is th r sponsibility of th nd us r to maintain and
op rat th Mod l 706-512x-xxx p r manufactur r’s instruc-
tions. Furth rmor , r gular insp ction should indicat that
all compon nts ar cl an and fr from damag .
Wh n plant xp ri nc indicat s a short r lif tim than
indicat d h r , th numb r bas d on plant xp ri nc
should b us d.
Product ECLIPSE
Model 706-512x-xxx
SIL SIL 2
HFT 0
SFF 93.1%
PFDavg Refer to FMEDA report

BULLETIN: 57-657.0
EFFECTIVE: June 2016
705 Enterprise Street • Aurora, Illinois 60504-8149 • 630-969-4000 • Fax [phone]
[email protected] • www.magnetrol.com
Copyright © 2016 Magnetrol International, Incorporated. All rights reserved. Printed in the USA.
ASSURED QUALITY & SERVICE COST LESS
ECLIPSE Guided Wave Radar trans itters ay be protected by one or ore of the following U.S. Patent Nos.
US 6,626,038; US 6,640,629; US 6,642,807; US 6867729; US 6879282; US 6906662. Other patents pending.
Disclaimer
The SIL values in this document are based on an FMEDA analysis usin exida’s SILVER Tool. MAGNETROL
accepts no liability whatsoever for the use of these numbers or for the correctness of the standards on which the
eneral calculation methods are based.
Magnetrol, Magnetrol logotype and Eclipse are registered trade arks of Magnetrol International, Incorporated.
FOUNDATION fieldbus logo is a registered trade ark of the Fieldbus Foundation.
HART is a registered trade ark of the HART Co unication Foundation.
PACTware is trade ark of PACTware Consortiu .
References
• IEC 61508 Edition 2.0,2010
“Functional Safety of Electrical/Electronic/
Pro rammable Electronic Safety Related Systems”
• ANSI/ISA-84.00.01-2004 Part 1 (IEC 61511-1Mod)
“Functional Safety: Safety Instrumented Systems for
the Process Industry Sector – Part 1 Hardware and
Software Requirements”
• ANSI/ISA-84.00.01-2004 Part 2 (IEC 61511-2Mod)
“Functional Safety: Safety Instrumented Systems for
the Process Industry Sector – Part 2 Guidelines for
the Application of ANSI/ISA84.00.01-2004 Part 1
(IEC 61511-1 Mod) – Informative”
• ANSI/ISA-84.00.01-2004 Part 3 (IEC 61511-3Mod)
“Functional Safety: Safety Instrumented Systems for
the Process Industry Sector – Part 3 Guidance for the
Determination of the Required Safety Inte rity Levels
– Informative”
• ANSI/ISA-TR84.00.04 Part 1 (IEC 61511 Mod)
“Guideline on the Implementation of ANSI/ISA-
84.00.01-2004”
Service Policy
Owners of MAGNETROL controls may request the
return of a control or any part of a control for complete
rebuildin or replacement. They will be rebuilt or replaced
promptly. Controls returned under our service policy must
be returned by prepaid transportation. MAGNETROL
will repair or replace the control at no cost to the pur-
chaser (or owner) other than transportation if:
1. Returned within the warranty period; and
2. The factory inspection finds the cause of the claim to
be covered under the warranty.
If the trouble is the result of conditions beyond our con-
trol; or, is NOT covered by the warranty, there will be
char es for labor and the parts required to rebuild or
replace the equipment.
In some cases it may be expedient to ship replacement
parts; or, in extreme cases a complete new control, to
replace the ori inal equipment before it is returned. If
this is desired, notify the factory of both the model and
serial numbers of the control to be replaced. In such
cases, credit for the materials returned will be determined
on the basis of the applicability of our warranty.
No claims for misapplication, labor, direct or consequen-
tial dama e will be allowed.
Return Material Procedure
So that we may efficiently process any materials that are
returned, it is essential that a “Return Material
Authorization” (RMA) number be obtained from the
factory prior to the material’s return. This is available
throu h a MAGNETROL local representative or by con-
tactin the factory. Please supply the followin information:
1. Company Name
2. Description of Material
3. Serial Number
4. Reason for Return
5. Application
Any unit that was used in a process must be properly
cleaned in accordance with OSHA standards, before it is
returned to the factory.
A Material Safety Data Sheet (MSDS) must accompany
material that was used in any media.
All shipments returned to the factory must be by prepaid
transportation.
All replacements will be shipped F.O.B. factory.