Professional Documents
Culture Documents
SD077D/06/en/05.06
71027168
Proline Promass 80/83
Table of contents
Introduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Depiction of a safety system (protection function) . . . . . . . . . . . . . 4
2 Endress+Hauser
Proline Promass 80/83
SIL2-80-83-Conformity-en-06
Endress+Hauser 3
Proline Promass 80/83
Introduction
Depiction of a safety system The following tables define the achievable SIL or the requirements regarding the “Average Probability of a
(protection function) Dangerous Failure on Demand” (PFDavg), the “Hardware Fault Tolerance” (HFT) and the “Safe Failure
Fraction” (SFF) of the safety system. The specific values for the Promass measuring system can be found in the
tables in the appendix. Permitted failure probability of the complete safety function dependent on the SIL for
systems which must react on demand, e.g. exceeding a defined max. flow (Source: IEC 61508, Part 1):
SIL PFDavg
The following table shows the achievable Safety Integrity Level (SIL) as a function of the probability of safety-
oriented failures and the hardware fault tolerance of the complete safety system for type B systems (complex
components, for definition see IEC 61508, Part 2):
SFF HFT
0 1 (0)1) 2 (1)1)
1) In accordance with IEC 61511-1 (chapter 11.4.4), the HFT can be reduced by one (values in brackets)
if the devices used fulfill the following conditions:
- the device is proven in use
- only process-relevant parameters can be changed at the device (e.g. measuring range, ... ),
- changing the process-relevant parameters is protected (e.g. password, jumper, ... ),
- the function requires less than SIL 4.
A single Promass 80/83 can be used in safety relevant SIL 2 loop. In a safety relevant SIL 3 loop
Promass 80/83 must be used in addition with a different measuring principle. Two Promass in homogeneous
redundancy do not fulfill the SIL 3 requirements.
Additional information about functional safety can be found in the brochure from Endress+Hauser called
“Functional safety in the Process Industry – risk reduction with Safety Instrumented Systems” (CP002Z).
4 Endress+Hauser
Proline Promass 80/83
Promass 80
Promass 83 Actuator
4...20 mA
Logic Unit
SIL2-80-83 system
The safety-related signal of the Promass 80/83 is the analog output signal 4...20 mA. All safety functions refer
to exclusively this output. In addition, the Promass 80/83 performs the communication via HART and contains
all HART features with additional diagnostics information.
An analog signal (4...20 mA) proportional to the flow is generated in the transmitter (Promass 80/83) and is
fed to a downstream logic unit (e.g. PLC, ... ).
The logic unit monitors the analog signal to ensure that it does not exceed the max. value and/or goes below
the min. value. For fault monitoring, the Logic Unit must detect both HI-alarms (≥ 21.5 mA) and LO-alarms
(≤ 3.8 mA).
The characteristic values determined (see appendix) apply only to the current output (4...20 mA) of the
following versions:
• Promass 80***–***********(*)
(*) = Order option for inputs/outputs: A / D / S / T / 8
• Promass 83***–***********(*)
(*) = Order option for inputs/outputs: A / B / C / D / E / L / M / R / S / T / U / W / 0 / 2 / 3 / 4 / 5 / 6
Safety function data The mandatory settings and safety function data emanate from the chapter “Settings and installation
instructions” and the appendix.
The measuring system’s reaction time is ≤5 s.
! Note!
MTTR is set at eight hours.
Supplementary device The following documentation must be available for the measuring system:
documentation
This document also includes information on application limits and ambient conditions as well as the functional
specifications of the current output.
For devices with an explosion protection approval, the corresponding Safety Instructions (XA) or Control
Drawings (ZD) must also be observed.
Endress+Hauser 5
Proline Promass 80/83
Settings instructions The Promass 80/83 measuring devices can be configured in safety relevant circuits in a number of different
ways:
• Via on-site operation (LCD display)
• Via HART handheld terminal DXR 375
• Via PC (remote operation) using service and configuration software (e.g. “ToF Tool - Fieldtool Package”)
The tools mentioned can also be used to retrieve information on the software and hardware revision of the
device.
Further instructions on settings can be found in the corresponding Operating Instructions (BA) → see
“Supplementary device documentation” (page 5).
Monitoring of max./min. flow The following table shows the settings which are necessary for the use of Promass 80/83 in a safety function.
The possible applications are:
• Monitoring of maximum flow
• Monitoring of minimum flow
• Monitoring of flow range (maximum and minimum flow)
The settings refer to the flow value corresponding to the 4...20 mA current output value.
Group Name of function in the group Allowed setting when Promass is used for a
safety function
SUPERVISION ASSIGN SYSTEM ERROR OFF (the assignment of information messages and
fault messages may not be changed)
A detailed description of the functions of the device can be found in the appropriate “Description of Device
Functions” → see “Supplementary device documentation” (page 5).
6 Endress+Hauser
Proline Promass 80/83
Locking In order to protect the process relevant parameters against change, the software has to be locked. This is done
via a code set by the customer.
Promass 83:
When using a HART interface, the HART write protection must be activated. This can be done via a jumper on
the I/O board. Please refer to the appropriate Operating Instructions for the correct procedure to activate the
HART write protection → see “Supplementary device documentation” (page 5).
Setting instructions for The determined limit value (mA value corresponding to chosen max. and/or min. flow) must be entered at the
evaluation unit subsequent limit contactor (Logic Unit). For all adjustment and setting procedures, refer to the relevant
Operating Instructions.
Response in operation and The response in operation and failures is described in the “Operating Instructions” of the device
failure → see “Supplementary device documentation” (page 5).
! Note!
• Any repair to the device must be carried out by the manufacturer only.
• Device failures must be reported to the manufacturer. The user provides a detailed statement to the
manufacturer describing the failures and any possible effects. There is also an information flow as to whether
this is a dangerous failure or a failure which cannot be detected directly.
• In accordance with IEC 61508-2, Section 7.4.7.4, Note 3, experience shows that the useful service life of
electrical components lies between 8 and 12 years.
• In the event of failure of a SIL-labeled Endress+Hauser device, which has been operated in a safety relevant
circuit, the “Declaration of Contamination and Cleaning” with the corresponding note “Used in SIL safety
relevant circuit” must be enclosed when the defective device is returned.
Recurrent functional test of The operativeness of the safety function must be checked at appropriate time intervals (see appendix
the measuring system → page 8). We recommend completing a check at least once a year. It is the responsibility of the user to select
the type of check and the intervals in the specified time frame. The check must be carried out in such a way
that it is proven that the safety function works perfectly in interaction with all components. This can be
guaranteed by approaching the flow limit values or comparing the totalizer with a balancing option (e.g. filling
a tank) once per maintenance period. In this way, a “Diagnostic Coverage” of 100% is achieved in both
instances. If the operativeness of the flow sensor/transmitter can be determined otherwise (exclusion of errors
that impair function), the check can also be completed by simulating the corresponding output signal.
Endress+Hauser 7
Proline Promass 80/83
! Note!
• The safety-related characteristic values are described separately for each of these “categories” → see sections
“Category 1 – 10”. The tables and graphics provided in these category sections contain all the important
characteristic values for the Promass 80 and/or Promass 83 measuring systems.
The values apply to all possible applications:
– Monitoring maximum flow
– Monitoring minimum flow
– Monitoring flow range (maximum and minimum flow)
• The failure rates indicated refer to the failure rates of SN29500 at an ambient temperature of +40 °C.
The values were obtained by examining devices with software version 2.01.00.
Promass 80
80 *** – ***********D – Curr. outp. / freq. outp. / status outp. / status inp. 1 P. 10
80 *** – ***********8 – Curr. outp. / curr. outp. 2 / freq. outp. / status inp. 5 P. 14
80 *** – ***********D Ex Curr. outp. / freq. outp. / status outp. / status inp. 2 P. 11
Promass 83
83 *** – ***********M – Curr. outp. / freq. outp. / freq. outp. 2 / status inp. 5 P. 14
83 *** – ***********0 – Curr. outp. / curr. outp. 2 / curr. outp. 3 / status inp. 5 P. 14
83 *** – ***********2 – Curr. outp. / curr. outp. 2 / freq. outp. / relay 5 P. 14
83 *** – ***********5 – Curr. outp. / freq. outp. / curr. inp. / status inp. 5 P. 14
83 *** – ***********6 – Curr. outp. / curr. outp. 2 / curr. inp. / status inp. 5 P. 14
8 Endress+Hauser
Proline Promass 80/83
83 *** – ***********0 Ex Curr. outp. / curr. outp. 2 / curr. outp. 3 / status inp. 6 P. 15
83 *** – ***********5 Ex Curr. outp. / freq. outp. / curr. inp. / status inp. 6 P. 15
83 *** – ***********6 Ex Curr. outp. / curr. outp. 2 / curr. inp. / status inp. 6 P. 15
Endress+Hauser 9
Proline Promass 80/83
1001D structure
3,50E–02
Probability
3,00E–02
2,50E–02
2,00E–02
1,50E–02
1,00E–02
5,00E–03
0,00E+00
0,0 2,0 4,0 6,0 8,0 10,0
PFD avg Years
SIL2-80-83-Config1-3-5-en
Failure categories λsd [FIT] λsu [FIT] λdd [FIT] λdu [FIT] SFF
Failure categories λsd [FIT] λsu [FIT] λdd [FIT] λdu [FIT] SFF
! Note!
Detailed information on the term “dangerous failure” is provided on page 9.
10 Endress+Hauser
Proline Promass 80/83
1001D structure
3,50E–02
Probability
3,00E–02
2,50E–02
2,00E–02
1,50E–02
1,00E–02
5,00E–03
0,00E+00
0,0 2,0 4,0 6,0 8,0 10,0
PFD avg Years
SIL2-80-83-Config2-4-6-8-9-10-en
Failure categories λsd [FIT] λsu [FIT] λdd [FIT] λdu [FIT] SFF
Failure categories λsd [FIT] λsu [FIT] λdd [FIT] λdu [FIT] SFF
! Note!
Detailed information on the term “dangerous failure” is provided on page 9.
Endress+Hauser 11
Proline Promass 80/83
1001D structure
3,50E–02
Probability
3,00E–02
2,50E–02
2,00E–02
1,50E–02
1,00E–02
5,00E–03
0,00E+00
0,0 2,0 4,0 6,0 8,0 10,0
PFD avg Years
SIL2-80-83-Config1-3-5-en
Failure categories λsd [FIT] λsu [FIT] λdd [FIT] λdu [FIT] SFF
Failure categories λsd [FIT] λsu [FIT] λdd [FIT] λdu [FIT] SFF
! Note!
Detailed information on the term “dangerous failure” is provided on page 9.
12 Endress+Hauser
Proline Promass 80/83
1001D structure
3,50E–02
Probability
3,00E–02
2,50E–02
2,00E–02
1,50E–02
1,00E–02
5,00E–03
0,00E+00
0,0 2,0 4,0 6,0 8,0 10,0
PFD avg Years
SIL2-80-83-Config2-4-6-8-9-10-en
Failure categories λsd [FIT] λsu [FIT] λdd [FIT] λdu [FIT] SFF
Failure categories λsd [FIT] λsu [FIT] λdd [FIT] λdu [FIT] SFF
! Note!
Detailed information on the term “dangerous failure” is provided on page 9.
Endress+Hauser 13
Proline Promass 80/83
1001D structure
3,50E–02
Probability
3,00E–02
2,50E–02
2,00E–02
1,50E–02
1,00E–02
5,00E–03
0,00E+00
0,0 2,0 4,0 6,0 8,0 10,0
PFD avg Years
SIL2-80-83-Config1-3-5-en
Failure categories λsd [FIT] λsu [FIT] λdd [FIT] λdu [FIT] SFF
Failure categories λsd [FIT] λsu [FIT] λdd [FIT] λdu [FIT] SFF
! Note!
Detailed information on the term “dangerous failure” is provided on page 9.
14 Endress+Hauser
Proline Promass 80/83
1001D structure
3,50E–02
Probability
3,00E–02
2,50E–02
2,00E–02
1,50E–02
1,00E–02
5,00E–03
0,00E+00
0,0 2,0 4,0 6,0 8,0 10,0
PFD avg Years
SIL2-80-83-Config2-4-6-8-9-10-en
Failure categories λsd [FIT] λsu [FIT] λdd [FIT] λdu [FIT] SFF
Failure categories λsd [FIT] λsu [FIT] λdd [FIT] λdu [FIT] SFF
! Note!
Detailed information on the term “dangerous failure” is provided on page 9.
Endress+Hauser 15
Proline Promass 80/83
1001D structure
3,50E–02
Probability
3,00E–02
2,50E–02
2,00E–02
1,50E–02
1,00E–02
5,00E–03
0,00E+00
0,0 2,0 4,0 6,0 8,0 10,0
PFD avg Years
SIL2-80-83-Config7-en
Failure categories λsd [FIT] λsu [FIT] λdd [FIT] λdu [FIT] SFF
Failure categories λsd [FIT] λsu [FIT] λdd [FIT] λdu [FIT] SFF
! Note!
Detailed information on the term “dangerous failure” is provided on page 9.
16 Endress+Hauser
Proline Promass 80/83
1001D structure
3,50E–02
Probability
3,00E–02
2,50E–02
2,00E–02
1,50E–02
1,00E–02
5,00E–03
0,00E+00
0,0 2,0 4,0 6,0 8,0 10,0
PFD avg Years
SIL2-80-83-Config2-4-6-8-9-10-en
Failure categories λsd [FIT] λsu [FIT] λdd [FIT] λdu [FIT] SFF
Failure categories λsd [FIT] λsu [FIT] λdd [FIT] λdu [FIT] SFF
! Note!
Detailed information on the term “dangerous failure” is provided on page 9.
Endress+Hauser 17
Proline Promass 80/83
1001D structure
3,50E–02
Probability
3,00E–02
2,50E–02
2,00E–02
1,50E–02
1,00E–02
5,00E–03
0,00E+00
0,0 2,0 4,0 6,0 8,0 10,0
PFD avg Years
SIL2-80-83-Config2-4-6-8-9-10-en
Failure categories λsd [FIT] λsu [FIT] λdd [FIT] λdu [FIT] SFF
Failure categories λsd [FIT] λsu [FIT] λdd [FIT] λdu [FIT] SFF
! Note!
Detailed information on the term “dangerous failure” is provided on page 9.
18 Endress+Hauser
Proline Promass 80/83
1001D structure
3,50E–02
Probability
3,00E–02
2,50E–02
2,00E–02
1,50E–02
1,00E–02
5,00E–03
0,00E+00
0,0 2,0 4,0 6,0 8,0 10,0
PFD avg Years
SIL2-80-83-Config2-4-6-8-9-10-en
Failure categories λsd [FIT] λsu [FIT] λdd [FIT] λdu [FIT] SFF
Failure categories λsd [FIT] λsu [FIT] λdd [FIT] λdu [FIT] SFF
! Note!
Detailed information on the term “dangerous failure” is provided on page 9.
Endress+Hauser 19
Proline Promass 80/83
SIL2-80-83-Manag-Summary-Page1-06
20 Endress+Hauser
Proline Promass 80/83
SIL2-80-83-Manag-Summary-Page2-06
Endress+Hauser 21
Proline Promass 80/83
SIL2-80-83-Manag-Summary-Page3-06
22 Endress+Hauser
Proline Promass 80/83
SIL2-80-83-Manag-Summary-Page4-06
Endress+Hauser 23
Proline Promass 80/83
International Headquarters
Endress+Hauser
GmbH+Co. KG
Instruments International
Colmarer Str. 6
79576 Weil am Rhein
Deutschland
Tel. +49 76 21 9 75 02
Fax +49 76 21 9 75 34 5
www.endress.com
info@ii.endress.com
SD077D/06/en/05.06
71027168
FM+SGML 6.0 ProMoDo