Planning the use
3.7 Requirements for fail-safe operation
KP8, KP8F, KP32F
44 Operating Instructions, 11/2011, A5E03284305-02
Sensor Requirements for Fail-Safe Sensors
NOTICE
Qualified sensor
If you do not use any qualified, normed sensors, the safety categories SIL3, PL e and
category 4 will not be reached.
Only use qualified sensors corresponding with IEC 60947.
Note
Our electronics are equipped with such safety engineering features so that 98% of the
maximum permissible probability of hazardous faults is due to all other components of the
safety function. This corresponds to the recommended load division in safety engineering
between sensing devices, actuating devices, and electronic switching for input, processing,
and output.
The probability of hazardous faults and the rate of occurrence of hazardous faults of a safety
function must comply with an upper limit determined by an SIL or PL. For a description of the
HMI device, refer to section "Technical specifications (Page 107)".
If y
ou operate the HMI dev
ice with an EMERGENCY-STOP button, you must use a 2-
channel equivalent sensor switching - see section "General (Page 55)".
Proof-test interval
Note the following:
● They have a considerable safety responsibility for the instrumentation with sensors.
● Sensors normally do not survive a proof-test interval of 10 years corresponding with
IEC 61508.
The sensors clearly lose their safety.
Note
In order to reach the safety categories SIL3, PL e and category 4, high-quality sensors
are required. The sensors used must fulfill the standards IEC EN 60947-5-1:2004 and
IEC EN 60947-5-5:1997 (VDE 0660, section 200).
The contacts of the sensors must be weld-resistant in accordance with the standard
IEC EN 60947-5. Ensure the short-circuit-free connection of the emergency-stop button.
Define an ideal proof-test interval for the used sensor.