Endress+Hauser Micropilot FMR60 Instructions for use
Free space radar for liquids and bulk solids with 4 to 20 mA output signal
Products Solutions Services
Special Documentation
Micropilot FMR60/62/67
Functional Safety Manual
SD01950F/00/EN/01.17
71355048
Micropilot FMR60/62/67
2 Endress+Hauser
Table of contents
Declaration of Conformity .................... 3
Other safety-related characteristic values ............. 5
Useful lifetime of electric components ................ 5
Document information ....................... 6
Document function ............................ 6
Using this document ........................... 6
Symbols used ................................ 6
Supplementary device documentation ................ 7
Permitted devices types ...................... 8
SIL label on the nameplate ....................... 8
Safety function ............................. 9
Definition of the safety function .................... 9
Safety-related signal ........................... 9
Restrictions for use in safety-related applications ........ 9
Use in protective systems .................... 11
Device behavior during operation .................. 11
Parameter configuration for safety-related applications ... 12
Proof-testing ............................... 19
Life cycle ................................ 25
Requirements for personnel ..................... 25
Installation ................................. 25
Commissioning .............................. 25
Operation ................................. 25
Maintenance ............................... 25
Repairs ................................... 26
Modification ................................ 27
Decommissioning ............................ 27
Appendix ................................ 28
Structure of the measuring system ................. 28
Proof-testing ............................... 30
Further information ........................... 30
Change history .............................. 30
Micropilot FMR60/62/67
Endress+Hauser 3
Declaration of Conformity
A0033673
Micropilot FMR60/62/67
4 Endress+Hauser
A0033675
Micropilot FMR60/62/67
Endress+Hauser 5
Other safety-related
characteristic values Characteristics as per IEC 61508 Value
System reaction time as per DIN EN 61298-2 In "Increased safety mode"
• for "Medium type = Liquid": <19 s
• for "Medium type = Solid": < 300 s
In "Expert mode"
• for "Medium type = Liquid":
– very fast <6 s
– slow <90 s
• For "Medium type = Solid":
– very fast <6 s
– slow <710 s
Useful lifetime of electric
components
The established failure rates of electrical components apply within the useful lifetime as per
IEC 61508-2:2010 section 7.4.9.5, note 3. In accordance with DIN EN 61508-2:2011 section
7.4.9.5, national footnote N3, appropriate measures taken by the manufacturer and operator can
extend the useful lifetime.
Micropilot FMR60/62/67
6 Endress+Hauser
Document information
Document function The document is part of the Operating Instructions and serves as a reference for application-specific
parameters and notes.
• General information about functional safety: SIL
• General information about SIL is available:
In the Download Area of the Endress+Hauser Internet site: www.de.endress.com/SIL
Using this document Information on the document structure
For the arrangement of the parameters as per the Operation menu, Setup menu, Diagnostics
menu, along with a short description, see the Operating Instructions for the device
Symbols used Safety symbols
Symbol Meaning
DANGER
DANGER!
This symbol alerts you to a dangerous situation. Failure to avoid this situation will
result in serious or fatal injury.
WARNING
WARNING!
This symbol alerts you to a dangerous situation. Failure to avoid this situation can
result in serious or fatal injury.
CAUTION
CAUTION!
This symbol alerts you to a dangerous situation. Failure to avoid this situation can
result in minor or medium injury.
NOTICE
NOTE!
This symbol contains information on procedures and other facts which do not result in
personal injury.
Symbols for certain types of information
Symbol Meaning
A0011193
Tip
Indicates additional information.
Reference to documentation
A
Reference to page
Reference to graphic
1.
,
2.
,
3.
… Series of steps
Symbols in graphics
Symbol Meaning
1, 2, 3,... Item numbers
1.
,
2.
,
3.
… Series of steps
A, B, C, ... Views
Micropilot FMR60/62/67
Endress+Hauser 7
Supplementary device
documentation Documentation Comment
Technical Information:
• TI01302F/00 (FMR60)
• TI01303F/00 (FMR62)
• TI01304F/00 (FMR67)
The documentation is available on the Internet:
→ www.endress.com
Operating Instructions
• BA01618F/00 (FMR60)
• BA01619F/00 (FMR62)
• BA01620F/00 (FMR67)
The documentation is available on the Internet:
→ www.endress.com
Brief Operating Instructions:
• KA01251F/00 (FMR60)
• KA01252F/00 (FMR62)
• KA01253F/00 (FMR67)
• The document is provided with the device.
• The documentation is available on the Internet:
→ www.endress.com
Description of Device Parameters:
GP01101F/00 (in preparation)
The documentation is available on the Internet:
→ www.endress.com
Safety instructions depending on the selected option
"Approval".
Additional safety instructions (XA, ZE) are supplied with
certified device version.
Please refer to the nameplate for the relevant safety
instructions.
This supplementary Safety Manual applies in addition to the Operating Instructions, Technical
Information and ATEX Safety Instructions. The supplementary device documentation must be
observed during installation, commissioning and operation. The requirements specific to the
protection function are described in this Safety Manual.
Micropilot FMR60/62/67
8 Endress+Hauser
Permitted devices types
The details pertaining to functional safety in this manual relate to the device versions listed below
and are valid as of the specified software and hardware version. Unless otherwise specified, all
subsequent versions can also be used for safety functions. A modification process according to
IEC 61508 is applied for device changes.
Valid device versions for safety-related use:
Ordering feature Designation Option
010 Approval All
020 Power Supply;
Output
• A
• B 1)
• C 2)
• K
2-wire; 4-20 mA HART
2-wire; 4-20 mA HART, switch output
2-wire; 4-20 mA HART, 4-20 mA
4-wire 90-253 VAC; 4-20 mA HART
030 Display; operation All
040 Housing All
050 Electrical connection All
070 Antenna All
090 Seal All
100 Process connection All
500 Additional
Operation Language
All
540 Application package All
550 Calibration All
570 Service All
580 Test; Certificate All
590 Additional approval LA 3) SIL
610 Accessory mounted All
620 Accessory enclosed All
850 Firmware version If no version is selected here, the latest SIL-enabled SW is supplied.
Alternatively, the following SW version may be selected :
72 01.00.zz, HART 7, DevRev01
1) For this version with one current output and one switching output, only the current output (terminals 1
and 2) is suitable for safety functions. The switching output can, if necessary, be wired for non-safety-
oriented purposes.
2) For this version with 2 current outputs, only the first output (terminals 1 and 2) is suitable for safety
functions. The second output can, if necessary, be wired for non-safety-oriented purposes.
3) An additional selection of any further versions is possible.
• Valid firmware version: as of 01.00.zz (→ nameplate of the device)
• Valid hardware version (electronics): as of date of production 28.02.2017 (→ nameplate of the
device)
SIL label on the nameplate SIL certified devices are marked with the following symbol on the nameplate:
Micropilot FMR60/62/67
Endress+Hauser 9
Safety function
Definition of the safety
function
The device's safety functions are:
Safety function (level measurement)
• Maximum point level monitoring (overfill protection)
• Minimum point level monitoring (dry run protection)
• Level range monitoring
The safety functions include level measurement of a liquid or bulk solid.
Safety-related signal The safety-related signal is the analog output signal: 4 to 20 mA. All safety measures refer to this
signal exclusively.
For devices with current output and switch output (ordering feature 020 "Power Supply; Output",
option B "2-wire; 4-20 mA HART, switch output"), only the current output (terminals 1 and 2) is
approved for safety functions. The switch output (terminals 3 and 4) can, if necessary, be wired for
non-safety-oriented purposes.
For devices with two current outputs (ordering feature 020 "Power Supply; Output", option C "2-wire;
4-20 mA HART + 4-20 mA analog"), only the first current output (terminals 1 and 2) is approved for
safety functions. The second output (terminals 3 and 4) can, if necessary, be wired for non-safety-
oriented purposes.
The device additionally communicates for information only via HART and contains all HART features
with additional device information.
The safety-related output signal is fed to a downstream logic unit, e.g. a programmable logic
controller or a limit signal transmitter where it is monitored for the following:
• Exceed and/or undershoot a specific level limit.
• The occurrence of a fault, e.g. error current (≤3.6 mA, ≥21.0 mA, interruption or short-circuit of
the signal line).
In case of fault it must be ensured that the equipment under control achieves or maintains a
safe state.
Restrictions for use in safety-
related applications
• The measuring system must be used correctly for the specific application, taken into account the
medium properties and ambient conditions. Carefully follow instructions pertaining to critical
process situations and installation conditions from the Operating Instructions. The application-
specific limits must be observed.
• Information on the safety-related signal, (→ 9).
• The specifications from the Operating Instructions must not be exceeded, (→ 7).
• The following restrictions also applies to safety-related use:
– Strong, pulse-like EMC interference on the line can cause transient (< 1 s) deviations ≥ ±2% in
the output signal. For this reason, filtering with a time constant of ≥ 1 s should be performed in
the downstream logic unit.
– The error range is device specific and is defined according to FMEDA (Failure Modes, Effects and
Diagnostic Analysis) on delivery. It includes all influential factors described in the Technical
Information (e.g. non-linearity, non-repeatability, hysteresis, zero drift, temperature drift, EMC
influences).
According to IEC / EN 61508 the safety related failures are classified into different categories,
see the following table. The table shows the implications for the safety-related analog output
signal and for measuring uncertainty.
Micropilot FMR60/62/67
10 Endress+Hauser
Safety related error Explanation Implications for the
safety related output
signal
Implications for the
measuring uncertainty
(Position, see figure
→ 10)
No device error Safe:
No error
None 1 Is within the
specification (see TI,
BA, ...)
λSD Safe detected:
Safe failure which can be
detected
Causes the output signal
to signal the failsafe mode
(see, → 11)
3 No implications
λSU Safe undetected:
Safe failure which cannot
be detected
Is within the defined error
range
2 May be beyond the
specification
λDD Dangerous detected:
Dangerous failure which
can be detected
(Diagnostic within the
device)
Causes the output signal
to signal the failsafe mode
(see, → 11)
3 No implications
λDU Dangerous undetected:
Dangerous failure which
cannot be detected
May be outside the
defined error range
4 May be outside the
defined error range
I [mA]
B
C
A
t
1
2
4
3
3
A0025264
A HI-Alarm ≥21 mA
B Error range ±2 %
C LO-Alarm ≤3.6 mA
Dangerous undetected failures in this scenario
An incorrect output signal that deviates from the real measured value by more than 2 %, but is still
in the range of 4 to 20 mA, is considered a dangerous, undetected failure.
Other manuals for Micropilot FMR60
3
This manual suits for next models
2
Table of contents
Other Endress+Hauser Radar manuals
Endress+Hauser
Endress+Hauser Micropilot FMR50 Technical specifications
Endress+Hauser
Endress+Hauser Micropilot FWR30 User manual
Endress+Hauser
Endress+Hauser Micropilot FMR67B User manual
Endress+Hauser
Endress+Hauser Micropilot FMR66B User manual
Endress+Hauser
Endress+Hauser Levelflex FMP53 User manual
Endress+Hauser
Endress+Hauser Micropilot FWR30 User manual
Endress+Hauser
Endress+Hauser Levelflex FMP55 User manual
Endress+Hauser
Endress+Hauser Micropilot FMR20 Technical specifications
Endress+Hauser
Endress+Hauser Micropilot FMR53 Technical specifications
Endress+Hauser
Endress+Hauser Levelflex FMP55 User manual
Endress+Hauser
Endress+Hauser Levelflex FMP50 Technical specifications
Endress+Hauser
Endress+Hauser Micropilot S FMR540 User manual
Endress+Hauser
Endress+Hauser Levelflex FMP56 User manual
Endress+Hauser
Endress+Hauser Levelflex FMP53 Manual
Endress+Hauser
Endress+Hauser Levelflex FMP51 User manual
Endress+Hauser
Endress+Hauser Micropilot FMR50 Technical specifications
Endress+Hauser
Endress+Hauser Levelflex FMP56 User manual
Endress+Hauser
Endress+Hauser Micropilot M FMR244 User manual
Endress+Hauser
Endress+Hauser Micropilot M FMR245 User manual
Endress+Hauser
Endress+Hauser FOUNDATION Fieldbus Micropilot FMR51 Technical specifications
Endress+Hauser
Endress+Hauser Levelflex FMP55 Technical specifications
Endress+Hauser
Endress+Hauser Micropilot FMR63B Manual
Endress+Hauser
Endress+Hauser FOUNDATION Fieldbus Micropilot FMR56 Technical specifications
Endress+Hauser
Endress+Hauser Levelflex FMP53 FOUNDATION Fieldbus Technical specifications
