Planning the use   
3.7 Requirements for fail-safe operation 
  KP8, KP8F, KP32F 
42  Operating Instructions, 11/2011, A5E03284305-02 
3.7  Requirements for fail-safe operation 
3.7.1  Sensor for 1oo1 mode 
The following safety categories can be achieved with the HMI device: 
●  SIL2 corresponding to IEC 61508 
●  PL d corresponding to IEC 13849-1 
●  Category 3 according to EN 954 
 
 
Note 
Have the fail-safe part of the system checked and accepted by a registered company in 
regards to the prescribed technical safety controls before commissioning the HMI device.
Sensor Requirements for Fail-Safe Sensors 
 
NOTICE 
 
Qualified sensor 
If you do not use any qualified, normed sensors, the safety categories SIL2, PL d and 
category 3 will not be reached. 
Only use qualified sensors corresponding with IEC 60947. 
 
 
Note 
Our electronics are equipped with such safety engineering features so that 98% of the 
maximum permissible probability of hazardous faults is due to all other components of the 
safety function. This corresponds to the recommended load division in safety engineering 
between sensing devices, actuating devices, and electronic switching for input, processing, 
and output. 
The probability of hazardous faults and the rate of occurrence of hazardous faults of a safety 
function must comply with an upper limit determined by an SIL or PL. For a description of the 
HMI device, refer to section "Technical specifications (Page 107)".