4.3.2
4.3.3
4.3.4
4.3.5
4.4
failure rates
The basic failure rates from the Siemens standard SN 29500 are used as the failure
rate database.
Failure rates are constant, wear-out mechanisms are not included.
External power supply failure rates are not included.
4.5
Safe parameterisation
The user is responsible for verifying the correctness of the configuration
parameters. (See section 14 Safe parameterisation - user responsibility).
Manual override may not be used for safety applications.
4.6
Installation in hazardous areas
The IECEx Installation drawing, ATEX Installation drawing and FM Installation
drawing shall be followed if the products are installed in hazardous areas.
5
functional specification of the safety function
Conversion of current signals (0...20 mA or 4...20 mA), voltage signals, potentiometer, linear
resistance, RTD sensor signals or thermocouple sensor signals from hazardous areas to a
4...20 mA current output signal, and/or an output relay, within specified accuracy.
9116 Universal converter
the end user must ensure that the applied sensor wiring does not introduce
failures exceeding the requirements for the safety application.
Sensor errors
If the loop supply is used to supply a current input signal, the sensor error
indication shall be enabled on the safety output(s).
If sensor error detection is disabled, or if any of the conficurations below
are used, the user must ensure that the applied sensor, including wiring,
has a failure rate that qualifies it for the safety application without sensor
error detection enabled:
• Input is current, 0-20 mA
• Input is voltage
• Input is linear resistance and R_0% < 18 W (no short circuit detection)
• Input it Pt10, Pt20 or Pt50 (no short circuit detection)
• Input is potentiometer (no short circuit detection on arm)
Process calibration
If a process calibration is taken into SIL-mode operation, it is mandatory
that the accuracy of the device (and sensor, if applicable) are tested by the
end user after SIL-mode is entered, in addition to the normal functional
test. Refer to section 14 - Safe parameterisation - user responsibility.
analogue output
The connected safety PLC shall be able to detect and handle the fault
indications on the analogue output of the 9116 converter by having a
NAMUR NE43-compliant current input.
Relay output
The relay output shall only be connected to equiment which has a current
limiting function of 2 A.
Version No. V3R0
safety Manual
5