WIKA T32.1S.000-S Guide de l'utilisateur

Safety manual

Sicherheitshandbuch

Manuel de sécurité

Manual de seguridad

Information on functional safety

for temperature transmitter model T32.xS

Hinweise zur funktionalen Sicherheit

für Temperaturtransmitter Typ T32.xS

Indications relatives à la sécurité fonctionnelle

pour transmetteur de température type T32.xS

Notas acerca de la seguridad funcional

para transmisores de temperatura modelo T32.xS

Head mounting version Rail mounting version

model T32.1S model T32.3S

Full assessment per IEC 61508

certified by TÜV Rheinland

Safety manual model T32.xS

Page 3 - 20

Sicherheitshandbuch Typ T32.xS

Seite 21 - 34

Manuel de sécurité type T32.xS

Page 35 - 48

Manual de seguridad modelo T32.xS

Página 49 - 62

11583631.04 10/2017 EN/DE/FR/ES

WIKA safety manual temperature transmitter T32.xS

11583631.04 10/2017 EN/DE/FR/ES

WIKA safety manual temperature transmitter T32.xS

Contents

1. General information 4

1.1 History of this document . . . . . . . . . . . . . . . . . . . . . . 4

1.2 Other applicable instrument documentation . . . . . . . . . . . . . . . 4

1.3 Relevant standards . . . . . . . . . . . . . . . . . . . . . . . 5

1.4 Abbreviations and terms . . . . . . . . . . . . . . . . . . . . . . 5

2. Safety 6

2.1 Intended use in safety applications . . . . . . . . . . . . . . . . . . 6

2.2 Labelling, safety marking. . . . . . . . . . . . . . . . . . . . . . 8

2.3 Restrictions to operating modes . . . . . . . . . . . . . . . . . . . 10

2.4 Error signaling . . . . . . . . . . . . . . . . . . . . . . . . . 10

2.5 Write protection . . . . . . . . . . . . . . . . . . . . . . . . .11

2.6 Accuracy of the safe measuring function . . . . . . . . . . . . . . . . 12

2.7 Configuration changes . . . . . . . . . . . . . . . . . . . . . . 13

2.8 Commissioning and recurring tests . . . . . . . . . . . . . . . . . . 14

2.8.1 Proof test of the transmitter's complete signal processing chain . . . . . . . 14

2.8.2 Reduced proof test - limited testing of the transmitter's signal processing chain . . 15

2.9 Information on the determination of safety-relevant parameters. . . . . . . . . 16

2.10 Decommissioning the transmitter . . . . . . . . . . . . . . . . . . .16

Appendix: SIL declaration of conformity 17

11583631.04 10/2017 EN/DE/FR/ES

WIKA safety manual temperature transmitter T32.xS

1. General information

1.1 History of this document

Documentation changes (compared with the previous issue)

Issue Remarks Firmware

April 2010 First issue T32.1S/T32.3S

(from firmware rev. 2.2.1)

May 2010 4 languages

(+ French, + Spanish)

T32.1S/T32.3S

(from firmware rev. 2.2.1)

November 2010 Monitoring of the output limits (optional, with SIL

versions from 01 January 2011 not activated as

default)

T32.1S/T32.3S

(from firmware rev. 2.2.1)

April 2014 Update of the failure rates

Evaluation in accordance with IEC 61508:2010

T32.1S/T32.3S

(from firmware rev. 2.2.3)

October 2017 Optional: HART®7 version T32.1S/T32.3S

(from firmware rev. 2.2.3)

This safety manual for functional safety is concerned with the WIKA model T32.1S/

T32.3S temperature transmitters (from firmware rev. 2.2.3) only as a component of a safety

function.This safety manual applies in conjunction with the documentation mentioned

under 1.2 “Other applicable instrument documentation”. In addition, the safety instructions

in the operating instructions must be observed.

These operating instructions contain important information on working with the model

T32.1S/T32.3S temperature transmitter. Working safely requires that all safety instructions

and work instructions are observed.

The marking on the product label for the instruments with SIL version is shown

in the following illustrations. Only model T32.xS.0xx-Sis suitable for operation

in safety-related applications!

Model T32.xS.0xx-S can be combined with the available Ex versions.

1.2 Other applicable instrument documentation

In addition to this safety manual the operating instructions for model T32.xS

(Article no.: 11258421) and the data sheet TE 32.04 are applicable.

1. General information

11583631.04 10/2017 EN/DE/FR/ES

WIKA safety manual temperature transmitter T32.xS

1.3 Relevant standards

Standard Model T32.xS

IEC 61508:2010 Functional safety of electrical/electronic/programmable/ electronic safety-

related systems

1.4 Abbreviations and terms

Abbreviation Description

λSD + λSU λSD safe detected + λSU safe undetected

A safe failure is present when the measuring system switches to the defined

safe state or the fault signalling mode without the process demanding it.

λDD + λDU λDD dangerous detected + λDU dangerous undetected

Generally a failure to danger occurs if the measuring system, through this, can

switch into a dangerous or functionally inoperable condition. With detected

failures to danger, the failure is detected by diagnostic tests or proof testing,

for example, where the system switches to the safe state.With undetected

failures to danger, the failure is not detected through diagnostic tests.

Operating mode

with low demand

rate

In this operating mode, the safety function of the safety system is only carried

out on request.The frequency of the request is no more than once a year.

DC Diagnostic coverage, percentage of failures to danger that are detected by

automatic diagnostic online tests.

FMEDA Failure modes, effects and diagnostic analysis, methods to detect failure

causes, and also their impact on the system, and to define diagnostic

measures.

HFT Hardware fault tolerance, capability of a functional unit to continue the

execution of the demanded function when faults or deviations exist.

MooN (M out of

N) architecture

The architecture describes the specific configuration of hardware and software

in a system. N is the number of parallel channels and M defines how many

channels must be working correctly.

MRT Mean Repair Time

MTTR Mean Time To Repair

PFDavg Average probability of a dangerous failure on demand of the safety function

SC Systematic capability

The systematic capability of an element (SC 1 to SC 4) states that the

systematic safety integrity for the corresponding SIL is achieved.

SFF Safe Failure Fraction

SIL Safety Integrity Level, the international standard IEC 61508 defines four

discrete safety integrity levels (SIL 1 to SIL 4). Each level corresponds to a

range of probability with which a safety-related system performs the specified

safety functions in accordance with the requirements.The higher the safety

integrity level of the safety-related system, the greater the probability that the

safety function is executed.

1. General information

11583631.04 10/2017 EN/DE/FR/ES

WIKA safety manual temperature transmitter T32.xS

Abbreviation Description

T1or Tproof Interval of the proof tests (in hours, typically one year (8,760 h))

Following this interval, the proof test will be carried out.

Proof test Proof testing for the detection of hidden failures to danger in a safety-related

system so that, if necessary through repair, the system can be placed, as far

as possible, in an “as-new” condition.

For further relevant abbreviations, see IEC 61508-4.

2. Safety

2.1 Intended use in safety applications

All safety functions relate exclusively to the analogue output signal (4 … 20 mA).The

instrument is certified to SIL 2 (IEC 61508). Due to the systematic capability of the

transmitter for SC 3, it is possible, depending on the safety integrity of the hardware, to use

the instrument in homogenous redundant systems up to SIL 3.

Taking into account the error detection functions of the model T32.xS temperature

transmitter, the following temperature sensors connected to the transmitter achieve a

sufficient SFF (Safe Failure Fraction) for SIL 2 of > 60 %.

■

Thermocouples with internal or external Pt100 cold junction

(Type E, J, T, U, R, S, B, K, L, N)

■

Resistance temperature sensors with 2-, 3- or 4-wire connection

(Pt100, JPt100, Ni100, Pt1000, Pt500, Pt25, Pt10)

■

Dual thermocouples or dual resistance temperature sensors

Only permitted in the operating modes “Sensor 1 and sensor 2 redundant”, “Mean

value”, “Minimum value”, “Maximum value” and if both sensors are being used

for the monitoring of the same measuring point.The operating mode “Differential

measurement” is not permitted.

The temperature transmitter achieves, for all recognised connections for temperature

sensors, an SFF (Safe Failure Fraction) sufficient for SIL 2 of > 90 %.

The instrument generates a current signal in the approved measuring mode of a nominal

4 … 20 mA, that is dependent upon the sensor signal.The effective range of the output

signal limited to a minimum of 3.8 mA and a maximum of 20.5 mA (factory setting in basic

configuration).

1. General information / 2. Safety

11583631.04 10/2017 EN/DE/FR/ES

WIKA safety manual temperature transmitter T32.xS

WARNING!

Do not exceed the specifications for model T32.xS given in the data sheet

and operating instructions. In order to ensure a safe functionality of the current

output, the correct terminal voltage must be present in the instrument.

The following terminal voltage limits apply:

Instrument model Terminal voltage limits

T32.1S.000-S

T32.3S.000-S

DC 10.5 ... 42 V

T32.1S.0IS-S

T32.3S.0IS-S

DC 10.5 ... 30 V

T32.1S.0NI-S

T32.3S.0NI-S

DC 10.5 ... 40 V

T32.1S.0IC-S

T32.3S.0IC-S

DC 10.5 ... 30 V

WARNING!

Only the temperature sensors listed in chapter 2.1 are approved for use in a

safety-related application.

The following sensors and operating modes are NOT allowed for operation in a

safety-relevant application:

■

Potentiometers

■

Other resistance sensors

■

Other mV sensors

■

Differential mode in duplex sensor operation

2. Safety

11583631.04 10/2017 EN/DE/FR/ES

WIKA safety manual temperature transmitter T32.xS



 







Model

with SIL: T32.1S.0IS-S

without SIL: T32.1S.0IS-Z

Date of manufacture (year-month)

Serial number

Ex marking

Approval logos, SIL version (only for SIL)

Power supply

Output signal, HART®version

Sensor, Pt100 or RTD

Measuring range

TAG no.













2.2 Labelling, safety marking

Product label (example)

■

Head mounting version, model T32.1S

2. Safety

11583631.04 10/2017 EN/DE/FR/ES

WIKA safety manual temperature transmitter T32.xS

■

Rail mounting version, model T32.3S

2. Safety



 

















Model

with SIL: T32.3S.0IS-S

without SIL: T32.3S.0IS-Z

Date of manufacture (year-month)

Ex marking

Approval logos, SIL version (only for SIL)

Power supply

Output signal, HART®version

Pin assignment

TAG no.

Measuring range

Sensor, Pt100 or RTD

Serial number

Before mounting and commissioning the instrument, ensure you

read the operating instructions!

11583631.04 10/2017 EN/DE/FR/ES

WIKA safety manual temperature transmitter T32.xS

2.3 Restrictions to operating modes

WARNING!

Under the following operating conditions, the safety function of the instrument

is not guaranteed:

■

During configuration

■

When the write protection is deactivated

■

When the HART® multi-drop mode is activated

■

Measured value transmission via HART®protocol

■

During a simulation

■

During the proof test

2.4 Error signaling

The model T32.xS temperature transmitter monitors the connected sensor and its own

hardware for errors. In the event of a known error condition the instrument generates an

error signalling current.

The response time to the sensor error is a maximum of 90 seconds.

This implies the discovery of the following potential errors:

■

Sensor break

■

Sensor short-circuit (only for resistance temperature sensors, not for thermocouples)

■

Inadmissibly high lead resistance (not with resistance temperature sensors with 2-wire

connection)

The online diagnosis test interval of the instrument should be a maximum of 35 minutes.

This implies the discovery of the following potential instrument errors:

■

ROM error

■

EEPROM error

■

RAM error

■

Program-counter error

■

Stack-pointer error

Furthermore, the following monitoring functions are carried out continuously:

■

Logical program flow control

■

Internal communication errors

■

Over sensor upper limit

■

Under sensor lower limit

■

Cold junction temperature outside permissible limits (only for thermocouples)

■

Duplex sensor drift monitoring (activated optionally)

■

Configuration error

■

Monitoring of the permissible instrument temperature (optional, activated by default for

SIL versions)

■

Monitoring of the output limits (optional, with SIL versions from 01 January 2011 not

activated as default)

2. Safety

Ce manuel convient aux modèles suivants

Table des matières

Langues :

Autres manuels WIKA Émetteur

Manuels Émetteur populaires d'autres marques

NIVELCO

NIVELCO EasyTREK SCA-300 Series Manuel du propriétaire

Honeywell

Honeywell 5816WMBR Manuel utilisateur

Kamstrup

Kamstrup READy MTU Mode d'emploi

Omega

Omega ZW Series Manuel utilisateur

ABB

ABB Field 264H Mode d’emploi

Alinco

Alinco DJ-V17T Manuel utilisateur

Dejero

Dejero EnGo 3x Manuel utilisateur

Rosemount

Rosemount 4600 Manuel utilisateur

Speaka Professional

Speaka Professional 2342740 Manuel utilisateur

trubomat

trubomat GAB 1000 Manuel utilisateur

Teledyne Analytical Instruments

Teledyne Analytical Instruments LXT-380 Manuel utilisateur

Rondish

Rondish UT-11 Manuel utilisateur

MG 10JRE Manuel utilisateur

Burkert

Burkert 8177 Manuel utilisateur

Firetide

Firetide HotPort 3203 Manuel

Tele Radio

Tele Radio T9-02 Manuel utilisateur

Rotronic

Rotronic HygroFlex HF3 Series Manuel utilisateur

Jamara

Jamara FCX6 Pro Tel Manuel utilisateur