REV 0, June 2005 Page 377
Operation Manual SUPREMA
15. Special conditions
15. Special conditions to comply with the requirements of
DIN EN 61508 for SIL 3 according to TUEV Certificate No.
15.1 Conditions for configuration, installation, operation and
maintenance
15.1.1 Safety Conditions
1. Two independent sensors must be used in the same area.
2. The sensors in the same area must be connected to different MAI 20 (analogue input)
modules.
3. For SIL 3 applications a redundant configuration must be installed in accordance with figure
15-1and figure 15-2. (For higher availability a third processor card may be used).
4. The Locking (Inhibit) of measuring inputs is only allowed during maintenance and repair.
5. After any configuration or parameterisation a verification has to be completed by reading
back the data and comparing with the Suprema configuration or parameterisation software.
6. The alarm conditions of the Suprema must be periodically checked together with the typical
gas calibration checks. The alarm and relay functions must be tested at least once per
year.
7. The locking (inhibit) of measuring points must be safety related processed via the inhibit
relay.
8. Failure of measuring points must be safety related signalled via the MS-Fail relay.
9. Sensor cables must be protected from mechanical damage (e. g. by using armoured cable).
10. The relays must be energised under normal conditions.
11. The relay contacts must be protected with a fuse rated at 0.6 of the nominal specified relay
contact current.
12. The system fail relay contacts must be safety related processed for warning purposes.
13. All inputs of MSI-Module must be used in open and short circuit detection mode.
14. In galvanically coupled system components the ground connections of all power supplies
must be connected.
15. In case of failure of any component the repair or replacement must be completed within
72 hours.
16. Only modules and components with the Hardware and Software-Versions specified in
chapter 4.1.1 may be used.
17. The contacts of the relays for the same alarm on subsystem A and B, are to be interconnected
serially or to be processed safety-related.
18. The notes in the Operation Manual for installation, operation and maintenance have to be
considered.
19. An ambient temperature above 40 °C is to be avoided.
20. All devices connected to one MRO module must have the same voltage level.
21. The ground fault current recognition of the MFI Modules is to be tested at least annually.
22. External power supplies must fulfil, as a minimum, the requirements of EN 60950 and
EN 50178.
To Next Page
Loading...
