Endress+Hauser Nivotester FTL325P - 2.5 Product safety; 2.6 IT security; 3 Product design

Nivotester FTL325P Declaration of Conformity
Endress+Hauser 7
1.2.1 Safety-related characteristic values, version III
SIL_00353_01.20
General
Device designation and permissible types
Liquiphant and Nivotester, variant III
FTL51B/62/64–**A7*************+LA and FTL325P–G/H/N/P/T/W/2/8 3*3
Safety-related output signal Relay
Fault signal —
Process variable/function Level switch for liquids
Safety function(s) Overfill protection or operating maximum/minimum detection
Device type acc. to IEC 61508-2 Type A Type B
Operating mode Low Demand Mode High Demand Mode
1)
Continuous Mode
Valid hardware version
Liquiphant 01.00.ww (ww: any double number)
Nivotester 01.00.ww or 02.00.ww (ww: any double number)
Valid soware version Liquiphant 01.01.zz (zz: any double number)
Safety manual FTL51B: FY01001F, FTL62: FY01018F, FTL64: FY01023F and FY01006F
Type of evalulation
(check only one box)
Complete HW/SW evaluation parallel to development incl.
FMEDA and change request acc. to IEC 61508-2, 3
Evaluation of “proven in use” performance for HW/SW incl. FMEDA
and change request acc. to IEC 61508-2, 3
Evaluation of HW/SW field data to verify „prior use” acc. to
IEC 61511
Evaluation by FMEDA acc. to IEC 61508-2 for devices w/o soware
Evaluation through – report/certificate no. TÜV Rheinland / 968/FSP 1388.02/20 and 968/FSP 1881.01/20
Test documents Development documents Test reports Data sheets
SIL - Integrity
Systematic safety integrity SIL 2 capable SIL 3 capable
Hardware safety integrity
Single channel use (HFT = 0)
SIL 2 capable SIL 3 capable
Multi channel use (HFT ³ 1)
SIL 2 capable SIL 3 capable
FMEDA
Safety function MIN MAX —
λ
DU
2),3)
40 FIT 24 FIT —
λ
DD
2),3)
140 FIT 106 FIT —
λ
SU
2),3)
881 FIT 897 FIT —
λ
SD
2),3)
15 FIT 52 FIT —
SFF 96% 98% —
PFD
avg
(T
1
= 1 year)
3)
(single channel architecture) 1.73 × 10
-4
1.06 × 10
-4
—
PFH
3)
3.95 × 10
-8
1/h 2.41 × 10
-8
1/h —
PTC
4)
Test sequence A 97% 98% —
Test sequence B 73% 85% —
λ
total
2),3)
1076 FIT 1079 FIT —
Diagnostic test interval
5)
≤ 60 s, except RAM check ≤ 10 min —
Fault reaction time
6)
≤ 3 s —
Comments
Nivotester works without soware.
Declaration
Our internal company quality management system ensures information on safety-related systematic faults which become evident
in the future
1)
Maximum admissible 1 demand per week.
2)
FIT = Failure In Time, number of failures per 10
9
h
3)
Valid for average ambient temperature up to +40 °C (+104 °F)
For continuous operation at ambient temperature close to +60 °C (+140 °F), a factor of 1.5 should be applied
4)
PTC = Proof Test Coverage
5)
All diagnostic functions are performed at least once within the diagnostic test interval
6)
Maximum time between error recognition and error response
A0039482