turck IM(X)18-DI03-4S-4T1R User guide

Your Global Automation Partner
Safety Manual
IM(X)18-DI03-4S-4T1R
Isolating Switching
Amplifier

2 Hans Turck GmbH & Co. KG | T [phone] | F [phone] | [e-mail] | www.turck.com
Contents

3
V01.00 | 2021/10
1 About this Document 5
2 Scope 5
3 Safety Integrity Level 6
4 Product Description 6
4.1 Safety Function 6
4.2 Safe State 6
4.3 PFH: Probability of dangerous failure per hour (High Demand mode) 7
4.4 PFD: Average probability of dangerous failure on demand (Low Demand mode) 7
5 Safety-Planning 8
5.1 Architectural specicatons 8
5.2 Assumptions 8
5.2.1 FMEDA results 9
5.3 Examples of using this results 10
5.3.1 Probability of dangerous failure per hour (High Demand Mode) 10
5.3.2 Average probability of dangerous failure on demand (Low Demand Mode) 10
6 Operating Instructions 10
6.1 General 10
6.2 Before operation 12
6.2.1 Parameterization 14
6.3 Operation 15
6.4 After operation 15
7 Connection and Wiring Diagrams 16
7.1 Output transistor 16
7.1.1 Wiring diagrams 16
8 Terms and Abbreviations 17
9 Proof Tests 17
10 Certicate 18
11 Document history 18
Contents

4 Hans Turck GmbH & Co. KG | T [phone] | F [phone] | [e-mail] | www.turck.com

5
V01.00 | 2021/10
1 About this Document
This safety manual contains all information that is required to operate the device in functional
safety systems. Read this manual carefully before using the device.
This document addresses only functional safety according to IEC 61508. Other aspects, such as
intrinsic safety, are not considered.
All instructions must be followed in order to assure functional safety.
Always make sure that this is the latest version of the safety manual at www.turck.com. The
English version is considered the definitive document. Care was taken in the production of the
translations of this document. If there is any uncertainty in its interpretation. Always refer to the
English version of the safety manual or contact Turck directly.
2 Scope
This safety manual is valid for the following devices.
ID Productname Number of
Channels
Clamps Power-Bridge Intrinsic Safety
100030007 IMX18-DI03-4S-4T1R-S/24VDC 4 screw no yes
100030009 IMX18-DI03-4S-4T1R-SPR/24VDC 4 screw yes yes
100030008 IMX18-DI03-4S-4T1R-S/24VDC/CC 4 spring type
terminal
no yes
100030010 IMX18-DI03-4S-4T1R-SPR/24VDC/CC 4 spring type
terminal
yes yes
100030003 IM18-DI03-4S-4T1R-S/24VDC 4 screw no no
100030005 IM18-DI03-4S-4T1R-SPR/24VDC 4 screw yes no
100030004 IM18-DI03-4S-4T1R-S/24VDC/CC 4 spring type
terminal
no no
100030006 IM18-DI03-4S-4T1R-SPR/24VDC/CC 4 spring type
terminal
yes no
The following chapters cover the devices
■IMX18-DI03-4S-4T1R-S
■IM18-DI03-4S-4T1R-S

6 Hans Turck GmbH & Co. KG | T [phone] | F [phone] | [e-mail] | www.turck.com
Safety Integrity Level
3 Safety Integrity Level
The devices are rated to a SIL of:
SIL 2
4 Product Description
The isolating switching amplifiers are used for the galvanically isolated transmission of binary
signals from sensors and mechanical contacts. Sensors acc. to EN 60947-5-6 (NAMUR) or me-
chanical contacts can be connected.
The output circuits are isolated from the input circuits and are designed as potential free
transistor.
The input is specified according to EN 60947-5-6.
The device detects a short circuit when an input current of 6.2 mA is exceeded. The short-circuit
condition will end when the input current falls below 5.9 mA.
A rotary switch assignes the inputs to the outputs
SIL2 – 1oo1 [Ex] [Ax]
Depending on the input signal and according to the configuration (line monitoring, effective
direction), the output assumes the safe state within 20 ms. This leads to the opening of the
normally open contact.
4.1 Safety Function
According to the input signal and the configuration (linemonitoring, effective direction, map-
ping of inputs and outputs) the transistor output is within 20 ms locked.
See „6.2.1 Parameterization“ on page 14 for input signals and configuration.
More than one channel must not be used for the same safety function, e.g. to increase the hard-
ware failure tolerance to achieve a higher SIL, as they contain common components
The Power-Bridge is not part of the safety-function.
The LED is not part of the safety-function.
The common alarm output is not part of the safety-function.
4.2 Safe State
The safe state is always the“low” state.
The“low” state depends on the output type:
Output type Requirement state “Low”
Transistor Transistor is locked

7
V01.00 | 2021/10
4.3 PFH: Probability of dangerous failure per hour (High Demand mode)
A SIL2 is specified.
In the following table 3 from 7.6.2.9 EN 61508-1:2010 is a PFH of less than 10-6 h-1 required.
A failure limit of 1 FIT corresponds to a PFH of 10-9 h-1.
Table 3 from 7.6.2.9 EN 61508-1
Safety Integrity
Level (SIL)
Probablity of dangerous Failure per Hour from the safety function [h-1] (PFH)
4 ≥ 10-9 … < 10-8
3 ≥ 10-8 … < 10-7
2 ≥ 10-7 … < 10-6
1 ≥ 10-6 … < 10-5
In the safety chain, the device is granted a share of 10% of the respective failure limit value.
10%
100%
IM ActuatorSensor
This means that the failure limit value must be less than or equal 100 FIT. (PFH <= 10-7 h-1)
4.4 PFD: Average probability of dangerous failure on demand (Low Demand mode)
A SIL2 is specified.
In the following table 2 from 7.6.2.9 EN 61508-1:2010 is a PFDavg of less than 10-2 h-1 required.
Table 2 from 7.6.2.9 EN 61508-1
Safety Integrity
Level (SIL)
Average probability of a dangerous failure when the safety function is requested
(PFDavg)
4 ≥ 10-5 … < 10-4
3 ≥ 10-4 … < 10-3
2 ≥ 10-3 … < 10-2
1 ≥ 10-2 … < 10-1
In the safety chain, the device is granted a share of 10 % of the respective failure limit value.

8 Hans Turck GmbH & Co. KG | T [phone] | F [phone] | [e-mail] | www.turck.com
Safety-Planning
10%
100%
IM ActuatorSensor
This means that the failure limit value must be less than 10-3 .
The basis of the consideration is a test interval of 8760 h and an MTTR or MRT of 24 h.
5 Safety-Planning
Planning a safety-related loop
This chapter provides information for planning a safety-related loop.
The device is not specified for a certain application. Make sure that the data provided in this
chapter is valid for your target application.
Special application-specific factors may cause the premature wear of the device and must be
taken into consideration when planning systems; take special measures to compensate for a
lack of experience based values, e.g. through implementation of shorter test intervals.
The suitability for specific applications must be assessed by considering the particular overall
safety-related system with regard to the requirements of IEC 61508.
Safety-planning must only be carried out by trained and qualified personnel.
If there is any doubt contact Turck directly.
5.1 Architectural specicatons
Due to architectural considerations the following characteristics are specified:
Type A
HFT 0
Useful lifetime:
Experience has shown that the useful lifetime often lies within a range of 8 to 12 years. It can
be significantly less if elements are operated near their specification limits. However, it can
be extended by appropriate measures. For example, heavy temperature fluctuations could
potentially decrease the useful lifetime, as constant temperature below 40 °C could potentially
increase the useful lifetime.
5.2 Assumptions
■Failure rates are constant for 10 years, wear out mechanisms are not included
■Propagation of failures are not relevant
■External power supply failure rates are not included
■All components that are not part of the safety function and cannot influence the safety
function (feedback immune) are excluded.
■The activations of line-monitoring can improve the results

9
V01.00 | 2021/10
5.2.1 FMEDA results
A SIL2 is specified.
According to table 2 and table 3 from 7.4.4.2.2 EN 61508-1:2010, depending on the operating
mode (Typ A or Typ B) and taking into account the hardware fault tolerance of HFT=0, the fol-
lowing SFF values are applied:
■For type A devices, the SFF must be greater than 60 %.
■For type B devices, the SFF must be greater than 90 %.
Table 2 from 7.4.4.2.2 EN 61508-2 (Typ A)
Part of safe failures of an element HFT=0 HFT=1 HFT=2
< 60 % SIL 1 SIL 2 SIL 3
60 % … < 90 % SIL 2 SIL 3 SIL 4
90 % … < 99 % SIL 3 SIL 4 SIL 4
≥ 99 % SIL 3 SIL 4 SIL 4
Table 3 from 7.4.4.2.2 EN 61508-2 (Typ B)
Part of safe failures of an element HFT=0 HFT=1 HFT=2
< 60 % not allowed SIL 1 SIL 2
60 % … < 90 % SIL 1 SIL 2 SIL 3
90 % … < 99 % SIL 2 SIL 3 SIL 4
≥ 99 % SIL 3 SIL 4 SIL 4
The following safety characteristic are the results of the FMEDA.
According to the configuration (inversion-mode, line-monitoring) the results of the FMEDA
vary. In this case the worst-case configuration is regarded
λSD λSU λDD λDU No
eect
SFF DC
IMX18-DI03-4S-4T1R 0 247.99 6.90 79.20 256.31 76.29 8.01
IM18-DI03-4S-4T1R 0 247.99 6.90 79.20 256.31 76.29 8.01
The stated Safe Failure Fraction (SFF) is for reference only. The complete subsystem will need to
be evaluated to determine the overall SFF.
The failure rates used in this analysis are the basic failure rates from the Siemens standard
SN29500 based on the average ambient temperature of components of 40 °C.
„No effect” is a failure mode of a component that plays part in implementing the safety func-
tion but is neither a safe nor a dangerous failure. According to IEC 62061, it would be possible
to classify the„No effect”failures as„Safe Undetected” failures. Not doing so represents the
worst-case

10 Hans Turck GmbH & Co. KG | T [phone] | F [phone] | [email protected] | www.turck.com
Operating Instructions
5.3 Examples of using this results
5.3.1 Probability of dangerous failure per hour (High Demand Mode)
The PFH values are based on a worst-case diagnostic test rate and a reaction time of 20 ms. The
ratio of the diagnostic test rate to the demand rate shall equal or exceed 100.
PFH
IMX18-DI03-4S-4T1R 7.92E-08 1/h
IM18-DI03-4S-4T1R 7.92E-08 1/h
5.3.2 Average probability of dangerous failure on demand (Low Demand Mode)
With the FMEDA results and the values specified in the following table the average frequency of
dangerous failure can be calculated exemplarily:
T1 8760 h
MTTR 24 h
MTR 24 h
PFDavg
IMX18-DI03-4S-4T1R 3.49E-04
IM18-DI03-4S-4T1R 3.49E-04
6 Operating Instructions
6.1 General
➤ The device must be registered online: http://www.turck.com/SIL or with the supplied SIL
registration card. This must be filled in with all required information upon receipt and sent to
Turck.
➤ The device must only be carried out, fitted, installed, operated, commissioned and main-
tained by trained and qualified personnel.
➤ The device is not specified for a certain application. Make sure that application-specific as-
pects are considered.
➤ Data from other documents, e.g. data sheets, is not valid for functional safety operation. De-
vices must be used in cabinets in an typical industrial field environment only. The following
restrictions describe the operation and storage conditions:
➤ Ensure that the environment complies with the following ratings
Minimum ambient temperature -25 °C
Maximum ambient temperature 70 °C
Minimum storage temperature -40 °C
Maximum storage temperature 80 °C
Maximum air humidity 95 %
Minimum air pressure 80 kPa
Maximum air pressure 110 kPa
➤ The average temperature over a long period of time directly on the exterior sidewall of the
housing must be maximum 40 °C.