4.3.2
4.3.3
4.3.4
4.4
failure rates
The basic failure rates from the Siemens standard SN 29500 are used as the failure
rate database.
Failure rates are constant, wear-out mechanisms are not included.
external power supply failure rates are not included.
4.5
Safe parameterisation
The user is responsible for verifying the correctness of the configuration
parameters. (See section 14 Safe parameterisation - user responsibility).
Manual override may not be used for safety applications.
4.6
Installation in hazardous areas
The IeCex Installation drawing, aTeX Installation drawing and FM Installation
drawing shall be followed if the products are installed in hazardous areas.
5
functional specification of the safety function
Conversion of current signals (0...20 ma or 4...20 ma), RTD sensor signals or thermocouple
sensor signals from hazardous areas to a 4...20 ma current output signal, in two separately
configurable channels, within specified accuracy.
For RTD sensors, cable resistances of up to 50 W per wire can be compensated if 3- or 4-wire
connection is configured.
For thermocouple sensors, cold junction temperature errors can be compensated, either by an
internally mounted temperature sensor, or by an accessory connector with a built-in temperature
sensor. The selection of CJC measurement must be done and verified by the end user.
6
functional specification of the non-safety functions
The status relay (terminal 33 and 34), error signal on power rail (terminal 91) and LeD outputs
are not suitable for use in any Safety Instrumented Function.
9113 TeMpeRaTuRe / ma CONVeRTeR
Sensor errors
If Sensor error detection is disabled, if current input range 0...20 ma is
selected or if input type pt10, pt20, or pt50 is selected, the end user must
ensure that the applied sensor including wiring has a failure rate qualifying
it for the safety application without sensor error detection enabled.
For pt10, pt20 and pt50 input types, this only relates to short-circuited
sensor detection.
process calibration
If a process calibration is taken into SIL-mode operation, it is mandatory
that the accuracy of the device (and sensor, if applicable) are tested by the
end user after SIL-mode is entered, in addition to the normal functional
test. Refer to section 14 - Safe parameterisation - user responsibility.
analogue output
The connected safety pLC shall be able to detect and handle the fault
indications on the analogue output of the 9113 converter by having a
NaMuR Ne43-compliant current input.
Version No. V5R0
Safety Manual
5