MACX MCR-EX-SL-RTD-I...

Transcription

1 Temperature transducer with intrinsically safe input for resistance thermometers and resistance-type sensors INTERFACE Data Sheet _en_00 PHOENIX CONTACT Description The programmable temperature transducer MACX MCR-EX-SL-RTD-I... is designed for intrinsically safe operation of resistance thermometers and resistance-type sensors installed in Ex areas. The measured values are converted into a linear 0/ ma signal for driving of a non-intrinsically safe load. The devices can be installed in zone 2 with the "n" (EN ) protection type. The temperature transducer is supplied with an order-specific configuration on the basis of the order key and is calibrated ready for operation. The set configuration is printed on the label on the side of the housing. The...-NC versions are supplied with a standard configuration (see "Order key" on page 3). Features such as sensor type, connection method, measuring range, measuring unit, filter, alarm signal and output range can be configured with the help of the MACX MCR-CONF software. The IFS-USB-PROG-ADAPTER programming adapter is to be used for connecting the device to the PC. Changes to the configuration and parameterization data can be performed during operation with a connected Ex measuring circuit as well as in a disconnected state. 1.1 Properties Input for resistance thermometers and resistance-type sensors, [Ex ia] IIC Output ma or ma Configuration with the software Up to SIL 2 according to EN on output ma Electrical 3-way isolation Installation in zone 2 permissible Power supply via DIN rail connector possible With screw or spring-cage connection The device is a corresponding item of electrical equipment for intrinsically safe circuits. It is designed for use in zone 2, if specific conditions are observed. When installing and operating the device, the applicable safety directives (including national safety directives), accident prevention regulations, as well as general technical regulations must be observed. Please observe the safety regulations and installation notes on page 6. Make sure you always use the latest documentation. It can be downloaded at This data sheet is valid for the products listed on the following page:

2 Table of contents 1 Description Ordering data Order key Technical data Safety regulations and installation notes Installation Configuration Comparison of safety data Safety-related applications (SIL 2) Ordering data Ex i temperature transducer Description Type Order No. Pcs./Pkt. Temperature transducer for resistance thermometers and resistance-type sensors, Ex i, configured according to order key, with screw connection Temperature transducer for resistance thermometers and resistance-type sensors, Ex i, standard configuration, with screw connection Temperature transducer for resistance thermometers and resistance-type sensors, Ex i, configured according to order key, with spring-cage connection Temperature transducer for resistance thermometers and resistance-type sensors, Ex i, standard configuration, with spring-cage connection MACX MCR-EX-SL-RTD-I MACX MCR-EX-SL-RTD-I-NC MACX MCR-EX-SL-RTD-I-SP MACX MCR-EX-SL-RTD-I-SP-NC Accessories Description Type Order No. Pcs./Pkt. DIN rail connectors (T-BUS), 5-pos., for bridging the supply voltage, can be snapped onto NS 35/... DIN rail in acc. with EN Power and error evaluation module, including the relevant DIN rail connector ME 17.5 TBUS 1.5/5-ST-3.81 GN Screw connection Spring-cage connection Programming adapter for MACX MCR... devices. With USB interface for programming with the MACX MCR-CONF software ME 6.2 TBUS-2 1.5/5-ST-3.81 GN MACX MCR-PTB MACX MCR-PTB-SP IFS-USB-PROG-ADAPTER For additional accessories, please refer to the "INTERFACE" catalog from Phoenix Contact _en_00 PHOENIX CONTACT 2

3 3 Order key The standard configuration is entered as an example. Order No. Sensor type Safety Integrity Connection method Measuring range Unit of measureme Output Filter Level (SIL) Start End nt Oversampling Moving average value / PT100 / ON / 3 / 0 / 100 / C / OUT02 / 5 / 1 / =...- RTD-I =...- RTD-I-SP see below ON = 2 = 2-wire at 4 ma at 20 ma C = C OUT01 = 1 = 1 value 1 = 1 value Active 3 = 3-wire (e.g. (e.g. F = F ma 3 = 3 values 2 = 2 values NONE = 4 = 4-wire 0 C) 100 C) O = 5 = 5 values 3 = 3 values Not active ON only if OUT02 = ma 7 10 = 7 values = 10 values 4 = 4 values output range = see below 20 = 20 values OUT02 Alarm signal Manufacturer s Calibration Certificate Short circuit/ overrange Sensor break/ underrange Manufacturer s Calibration Certificate WKZ... / I035 / I215 / NONE I000 = 0 ma I000 = 0 ma NONE = without WKZ I035 = 3.5 ma I035 = 3.5 ma YES = with WKZ (a charge I215 = 21.5 ma I215 = 21.5 ma will be made) I035 only if output range = OUT02 YESPLUS = WKZ with 5 measuring The alarm signals for short circuit/overange points (a charge will be and sensor break/underrange can also be made) set individually by software. Sensor type to Measuring range smallest range PT50 = Pt 50 IEC/EN C 50 k PT100 = Pt 100 IEC/EN C 50 k PT200 = Pt 200 IEC/EN C 50 k PT500 = Pt 500 IEC/EN C 50 k PT100S = Pt 100 Sama RC C 50 k PT500S = Pt 500 Sama RC C 50 k NI100DIN = Ni 100 DIN C 50 k NI500DIN = Ni 500 DIN C 50 k CU50 = Cu C 50 k CU53 = Cu C 50 k RES01 = Resistance Conversion aid for temperature from C to F: 9 T [ F] = T [ C] _en_00 PHOENIX CONTACT 3

4 4 Technical data Input Input signal, intrinsically safe - Resistance thermometer IEC/EN 60751: Pt 50, Pt 100, Pt 200, Pt 500 Sensors Sama RC : Pt 100, Pt 500 (2-, 3-, 4-conductor connection method) DIN 43760: Ni 100, Ni 500 Cu 50, Cu 53 - Resistance Cable resistance Sensor input current Measuring range 50 per cable 200 A... 1 ma Min. 50 K Output Output signal Load Behavior in the event of sensor error Output ripple ma / ma max. 500 according to NE 43 (or freely definable) < 50 A ss, <10 A rms General data Supply voltage range Current consumption Power dissipation Temperature coefficient Step response ( %) see filter settings in "Order key" on page 3: when oversampling = 10 and moving average value = V DC V DC < 40 ma (24 V DC) < 1 W 0.01 %/K with SIL typically 800 ms maximum 1200 ms without SIL typically 700 ms maximum 1100 ms Transmission error, total M = Measuring range) 0.05 % x 100 [K] / M [K] %; Pt 50, Cu 50, Cu 53: 0.05 % x 400 [K] / M [K] % ZERO / SPAN adjustment (with MACX MCR-CONF) 5 % / 5 % Electrical isolation 3-way, between input/output/power supply Input/output/supply 300 V rms (rated insulation voltage, surge voltage category II, pollution degree 2, safe isolation as per EN 61010, EN 50178) 2.5 kv AC (50 Hz, 1 min., test voltage) Input/output Input/power supply 375 V (peak value according to EN ) 375 V (peak value according to EN ) Ambient temperature Operation -20 C C Storage/transport -40 C C Permissible humidity (operation) 5%... 95% (no condensation) Shock 15g, IEC Vibration 2g, IEC Status indicator Green LED (supply voltage, PWR) Red LED, flashing (cable error, sensor error, ERR) Red LED (module error, ERR) Housing material polyamide (PA 6.6) Color Green Degree of protection Dimensions (width x height x depth) Inflammability class according to UL 94 Design IP mm x mm x 108 mm (with screw terminal blocks) 12.4 mm x mm x 117 mm (with spring-cage terminal blocks) V0 Terminal housing for mounting on DIN rails _en_00 PHOENIX CONTACT 4

5 Conformance EMC directive 2004/108/EC EN ; EN ; EN Ex directive (ATEX) EN , EN , EN , EN , EN Safety data according to ATEX for intrinsically safe circuits Max. voltage U o 6 V Max. current I o 6.3 ma Max. power P o 9.4 mw Gas group Ex ia II C Ex ia II B Maximum external inductance L o 100 mh 10 mh 1 mh 100 mh 10 mh 1 mh Maximum external capacitance C o 1.4 F 1.9 F 2.7 F 6.9 F 9.4 F 15 F Maximum voltage U m 253 V AC (125 V DC) Approvals ATEX IECEx approval UL USA/Canada Functional safety (SIL) Connection data MACX MCR-EX-SL-RTD-I(-NC) Conductor cross-section Solid (minimum/maximum) Stranded (minimum/maximum) AWG/kcmil (minimum/maximum) Stripping length Connection method Tightening torque Connection data MACX MCR-EX-SL-RTD-I-SP(-NC) Conductor cross-section Solid (minimum/maximum) Stranded (minimum/maximum) AWG/kcmil (minimum/maximum) Stripping length Connection method X II (1)G [Ex ia] IIC; X II (1)D [Ex iad] IBExU 09 ATEX 1013 X II 3G Ex na ic IIC T4 X IBExU 09 ATEX 1013 [Ex ia] IIC; [Ex iad]; Ex na ic [ia] IIC T4 IECEx IBE X Applied for SIL 2 TÜV Rheinland 968/EZ374.00/ mm 2 / 2.5 mm mm 2 / 2.5 mm 2 24/14 7 mm Pluggable screw connection Minimum 0.5 Nm/maximum 0.6 Nm 0.2 mm 2 / 1.5 mm mm 2 / 1.5 mm 2 24/16 8 mm Spring-cage connection _en_00 PHOENIX CONTACT 5

6 5 Safety regulations and installation notes 5.1 Installation and operation Follow the installation instructions. NOTE: Installation, operation, and maintenance may only be carried out by qualified specialist personnel. When installing and operating the device, the applicable safety directives (including national safety directives), accident prevention regulations, as well as general technical regulations must be observed. NOTE: The circuits inside the device must not be accessed. Do not repair the device yourself, replace it with an equivalent device. Repairs may only be carried out by the manufacturer. NOTE: The IP20 degree of protection (IEC 60529/EN 60529) of the device is intended for use in a clean and dry environment. The device must not be subject to mechanical strain and/or thermal loads, which exceed the limits described. NOTE: Only specified devices from Phoenix Contact may be connected to the 12-pos. S-PORT interface. For the safety data, please refer to the operating instructions and certificates (EC type-examination, other approvals, if necessary). 5.2 Safety regulations for installation in a potentially explosive area Regulations for intrinsically safe circuits When carrying out measurements on the intrinsically safe side, be sure to observe the relevant regulations regarding the connection of intrinsically safe equipment. Only use equipment approved for intrinsically safe circuits. Installation in zone 2 The device is associated equipment of the "Ex-i" protection type and suitable for installation in zone 2. Observe the specified conditions for use in potentially explosive areas. Install the device in a suitable, approved housing with a minimum of IP54 degree of protection. At the same time, observe IEC / EN requirements. Disconnect the block power supply before: snapping it on or disconnecting it Connecting or disconnecting cables of non-intrinsically safe circuits. Only use category 3G modules (ATEX 94/9/EC). Installation in areas with a danger of dust explosions The device is not designed for use in areas with a danger of dust explosions. Connection to the intrinsically safe circuit in areas with a danger of dust explosions (zones 20, 21, and 22) is only permitted if the equipment connected to this circuit is approved for this zone (e.g., category 1D, 2D or 3D). 5.3 Use in safety-related applications (SIL 2) When using the MACX MCR-EX-SL-RTD-I... in safety-related applications, observe the instructions in Section 9, as the requirements differ for safety-related functions. NOTE: Install the device in a suitable housing with a minimum of IP54 degree of protection. If the device has been used in non-intrinsically safe circuits, it must not be used again in intrinsically safe circuits. Clearly label the module as being non-intrinsically safe _en_00 PHOENIX CONTACT 6

7 6 Installation NOTE: Electrostatic discharge The device contains components that can be damaged or destroyed by electrostatic discharge. When handling the device, observe the necessary safety precautions against electrostatic discharge (ESD) according to EN and EN Take protective measures against electrostatic discharge before opening the front cover Basic circuit diagram IN 4.2 μc μc 4.1 OUT PWR ERR MACX MCR-EX-SL-RTD-I-SP Zone 0,1,2 Zone 20,21,22 Div. 1,2 Figure Design GND +24V Power GND +24V Zone 2 Div. 2 Basic circuit diagram with connection terminal blocks 1 Figure 3 MACX MCR-EX-SL-RTD-I-SP(-NC) structure 1 COMBICON plug connectors 2 12-pos. S-PORT interface 3 PWR LED power supply 4 ERR LED module error, cable and sensor error, underrange or overrange 5 Metal lock for fixing to DIN rail 6 Connection option for DIN rail connector 6.3 Dimensions 99 12, ,5 PWR ERR MACX MCR-EX-SL-RTD-I Figure 4 Dimensions (in mm) Figure 2 MACX MCR-EX-SL-RTD-I(-NC) structure _en_00 PHOENIX CONTACT 7

8 6.4 Mounting A If the module has been used in non-intrinsically safe circuits, it must not be used again in intrinsically safe circuits. Clearly label the module as being non-intrinsically safe. B C 1 Lay intrinsically safe and non-intrinsically safe cables separately. Screw connection: Insert the wire into the corresponding connection terminal block. Use a screwdriver to tighten the screw in the opening above the connection terminal block. Spring-cage connection: Insert a screwdriver into the opening above the connection terminal block. Insert the wire into the corresponding connection terminal block. 6.6 Voltage supply NOTE: Never connect the supply voltage directly to the DIN rail connector. It is not permitted to draw power from the DIN rail connector or from individual MACX-MCR-. 2 Figure 5 Mounting and removing Mount the device on a 35 mm DIN rail according to EN When using the DIN rail connector, first place it into the DIN rail (see A C, Figure 5). It is used to bridge the voltage supply and for error messages. Please also ensure you observe the direction of the module and DIN rail connector when snapping into position: Snap-on foot at the bottom (2) and connector (1) on the left. Install the module in a suitable housing to meet the requirements for the protection class. Before operating, check for correct function and wiring of the MACX MCR-EX-SL-RTD-I..., in particular the wiring and marking of the intrinsically safe circuits. 6.5 Connecting the cables Screw terminal blocks (for MACX MCR-EX-SL-RTD-I(-NC)); litz wires provided with ferrules. Permissible cable cross-section: 0.2 mm 2 to 2.5 mm 2 Spring-cage terminal blocks (for MACX MCR-EX-SL-RTD-I-SP(-NC)); litz wires provided with ferrules. Permissible cable cross-section: 0.2 mm 2 to 1.5 mm 2 The modules can be powered via the connection terminal blocks 1.1 (+24 V) and 1.2 (GND) or via the DIN rail connector (ME 6.2 TBUS-..., Order No ). Depending on the number of modules to be powered, the voltage is either fed via the MACX MCR-EX-SL-RTD-I... or the supply and error evaluation module MACX MCR-PTB(-SP) on the DIN rail connector. Supply via the module Where the total current consumption of the aligned modules does not exceed 400 ma, the power can be supplied directly at the connection terminal blocks of the module. We recommend connecting a 400-mA-fuse (normal-blow or slow-blow) upstream. The voltage supply is provided at the connection terminal blocks 1.1 (+24 V) and 1.2 (GND). Supply via the power and error evaluation module MACX MCR-PTB(-SP) The supply voltage is fed in via the module MACX MCR-PTB(-SP) on the DIN rail connectors. The supply voltage can be provided as either simple or redundant. The module MACX MCR-PTB(-SP) has integrated error evaluation. An auxiliary supply failure or fuse error is registered to a relay contact and displayed via a flashing LED _en_00 PHOENIX CONTACT 8

9 6.7 Sensor types Resistance thermometer Sensor type to Measuring range smallest range PT50 = Pt 50 IEC/EN C 50 k PT100 = Pt 100 IEC/EN C 50 k PT200 = Pt 200 IEC/EN C 50 k PT500 = Pt 500 IEC/EN C 50 k PT100S = Pt 100 Sama RC C 50 k PT500S = Pt 500 Sama RC C 50 k NI100DIN = Ni 100 DIN C 50 k NI500DIN = Ni 500 DIN C 50 k CU50 = Cu C 50 k CU53 = Cu C 50 k Depending on the connection method, the following terminal points are to be connected for temperature measurement with resistance thermometers (see Figure 1 on page 7): 2-wire connection method: Terminals 4.1, 4.2 The cable resistance can be compensated with the help of the MACX MCR-CONF program. 3-wire connection method: Terminals 4.1, 4.2, 5.1 In the case of the 3-wire connection method, ensure that all three cables have the same length. 4-wire connection method: Terminals 4.1, 4.2, 5.1, 5.2 Measuring resistance The terminal points 4.1 and 4.2 are used for measuring differing resistance. Resistances < 3 will not be detected. Sensor type to Measuring range smallest range RES01 = Resistance Configuration When making changes to the configuration data, use the MACX MCR-CONF software (free download: Connect the device and PC with the help of the IFS-USB-PROG-ADAPTER (Order No ). Figure 6 When configuring in zone 2, the PC used must be approved for use in zone 2. Information on configuration, parameterization and service options (e. g. online monitoring) and their execution can be found in the online help of the software IFS-USB-PROG-ADAPTER Changes to the configuration and parameterization data can be performed during operation with a connected Ex measuring circuit as well as in a disconnected state PWR ERR MACX MCR-EX-SL-RTD-I System requirements IBM PC or compatible computer with 400 MHz or higher with at least 256 MB RAM at least 15 MB available hard disk space Free USB-interface, at least USB 1.1 Screen resolution of 1024 x 768 pixels Windows 2000 SP4, Windows XP SP2 The drivers for the IFS-USB-PROG-ADAPTER USB programming adapter are installed automatically _en_00 PHOENIX CONTACT 9

10 8 Comparison of safety data Safety data for Field devices: Temperature transducer: For the values for U o,i o, P o,l o and C o, please refer to "Safety data according to ATEX for intrinsically safe circuits" on page 5. Requirements for intrinsic safety (simple circuits): U i U o I i I o P i P o L i + L c L o Compare the safety data before connecting a device located in the intrinsically safe area to the MACX MCR-EX-SL-RTD-I... U i, I i, P i, L i, C i U o, I o, P o, L o, C o C i + C c C o (L c and C c depend on the cables/lines used) _en_00 PHOENIX CONTACT 10

11 9 Safety-related applications (SIL 2) Valid hardware and software versions NOTE: Only those devices with SIL designation and device software with revision or higher are certified for SIL 2. SIL regulations apply to the following modules: MACX MCR-EX-SL-RTD-I, Order No MACX MCR-EX-SL-RTD-I-SP, Order No Safety-related measuring transducers of the MAXC MCR-(EX-)-SL-RTD series are certified by the TÜV Rheinland according to EN for SIL 2: Certificate and test report No.: TÜV Rheinland 968/EZ374.00/ Safety function and safety requirements NOTE: The evaluation unit following the measuring transducer (e. g. safety-related PLC) must recognize these states and correspondingly control the actuator as the final link in the safety chain. There are two safety functions and two monitoring functions. The first safety function of the device refers to the transmission of an analog signal with a tolerance of ±5 % or ±10 % of the measured value in the case of the Pt 200, Pt 500, Pt 500 Sama, Ni 500 sensors and resistance measurements of R > 500. If an output signal deviates more that ±5 % (±10 %) from the input signal, the output of the measuring transducer will supply a current smaller than 2 ma. This state is also defined as the failsafe state. Since monitoring of the deviation is continuous, a Continuous" mode of operation exists for this safety function. The second safety function refers to the monitoring of the measuring transducer hardware. When an internal error is detected, the failsafe state is reported to the following devices. Since a hardware error is rarely to be expected, it is assumed that this safety function resulted from a low demand. In the case of the first and second safety functions, the safety state is entered within the "Process Safety Time" after detection of an error. The startup test is executed after switching the supply voltage off and back on again, or after resetting the device via the serial interface or during an active restart. If the error is still present, it will be detected during the test. In this case, the device will immediately switch back to the failsafe state. The input monitoring function refers to the monitoring of the sensor connected to the input for cable breaks and short circuits < 5 (line fault). In this case, the output signal is set to a value in the range of ma or higher than 21 ma. The following SPS is then in a position to distinguish such an error from those of security functions 1 and 2 (failsafe state). Enabling (valid measured value within the range of 4 20 ma) occurs automatically as soon as the error has been eliminated. The output monitoring function refers to the monitoring of the output signal. If the measuring transducer discovers a cable break in the output signal path, the output current is interrupted to enable the following device to detect the error. Enabling (valid measured value within the range of 4 20 ma) occurs automatically as soon as the error has been eliminated. Evaluation The safety functions 1 and 2 refer to errors in the measuring transducer that are detected and passed on. Errors where the measuring transducer does not follow a change of input signal or supplies an output signal that deviates from the intended value by more than ±5 % (±10 %), will be evaluated as dangerous ( d ) errors. Safe errors ( s ) are those errors where the measuring transducer switches to the failsafe state or supplies an output signal, that does not deviate from the intended value by more than ±5 % (±10 %). Both safe ( s ) and dangerous ( d ) errors can be detected by diagnostic measures. Detected dangerous ( dd ) errors are then handled in the same way as safe errors. The monitoring functions refer to events whose cause is detected and reported outside of the device _en_00 PHOENIX CONTACT 11

12 Summary: Safety/ monitoring function Output signal range The evaluation unit following the measuring transducer (e. g. safety-related PLC) must recognize these states and correspondingly control the actuator as the final link in the safety chain. The safe state of the measuring transducer equals 0 ma. Due to restart attempts, it is possible that the output switches between 0 or 2 ma currents. For the following PLC it is necessary that < 2 ma values are interpreted as failsafe. If an external PC is connected via the interface when this state occurs, the output will be temporarily (< 1 ms) switched to 2 ma for diagnostics in order to check internal functions. Together with the actual signal transmission, continuous checks and diagnostic functions are performed in the measuring transducers in order to detect faulty behavior. The Process Safety Time (diagnostics test interval) is the time taken to carry out these tests and repeat them in full. Random hardware errors are detected during this time. The Process Safety Time takes 35 seconds. 9.2 Safety integrity requirements Failure rates Type B device (according to EN ) Safety Integrity Level (SIL) 2 HFT = 0 1oo1 architecture sd su dd du SFF DC D HFT % 90.2 % 0 *10-7 *10-7 *10-8 *10-7 The entire failure rate is: 9.62 * 10-7 Safe state Reason Safety function ma 2 ma Deviation < 5 % (10 %) Safety function ma 2 ma Device error Input monitoring ma 3.6 ma; 21 ma Line fault input Output monitoring ma = 0 ma Line fault output MTBF (Mean Time Between Failures) is: 119 years. The probability of a dangerous failure per hour for the "Continuous" mode of operation and the mean probability of failure of the specified function for the "low demand" mode of operation are determined from the error rate: PDF AVG values T[PROOF] = 1 year 2 years 3 years 5 years 7 years 8 years PFD AVG = 1.3 * 2.6 * 3.91 * 6.51 * 9.11 * 1.04 * PFH* = 3.23 * 10-8 /h The calculation is performed assuming a checking interval of 1 year and a repair time of 8 hours. On the basis of the value determined for the mean probability of failure PFD AVG, the checking interval can be increased up to 7 years. The information is valid under these conditions: The failure rates of the components used remain constant throughout the period of use. Propagation of errors by the device in the system is not taken into consideration. The time taken for repair (= replacement) is eight hours. The failure rates of the external power supply are not taken into consideration. The average temperature in which the device is to be used is + 40 C. In this case, normal industrial conditions are assumed. The failure rates stated refer to a mean ambient temperature of + 40 C. For a mean ambient temperature of + 60 C, the failure rates must be multiplied by a factor of 2.5. The factor of 2.5 is based on empirical values gathered. 9.3 Configuring an SIL device The device can be ordered as a pre-configured SIL device (see 1.) or the user can configure the SIL device himself (see 2.). 1. Standard configured devices (NC) are supplied as SIL-configured devices with 4 20 ma outputs. 2. Customer-specific configured devices cannot be supplied as non-sil devices. Configuration data is shown on a label. The configuration can be read out and changed at any time for all devices. Configuring safety-related applications Connect the device and PC with the help of the IFS-USB-PROG-ADAPTER (Order No ) _en_00 PHOENIX CONTACT 12

13 Load the MACX MCR-CONF configuration software (free download at: Read out the current configuration. Enter the configuration mode password under Service Locking (default is 0000). Activate / deactivate SIL under Configuration Functional Safety. In the case of "SIL ON", it is also possible to deactivate the "Restart after fail-safe" item here. This means that in the event of an error, the measuring transducer will revert to the failsafe status according to safety functions 1 and 2 and not subsequently restart. Write the modified configuration data to the measuring transducer. Check that the new configuration data in the control window is correct and confirm with "OK" or "Cancel" if not correct. WARNING: If Functional Safety is activated by a reconfiguration or changes to the active Functional Safety configuration, the rules under "Installation and startup" on page 14 must be observed. WARNING: Limitations on safety-related applications Only ma, limited programming of output current in the case of line faults (2 ma I Out 3.6 ma or I Out 21 ma) WARNING: Once new configuration data has been written, the device performs a warm start that changes the device. The following control device must be adapted to these modifications. WARNING: In order to ensure safety, the device must be securely write protected. Write protection is created by assigning passwords. Changing the password The measuring transducer has two password levels. The password for each level is stored in the device. The first level only allows modification of the parameterization (measuring range etc.). The second level allows full access which means that sensors can also be modified or Functional Safety functions (configuration) deactivated. Both passwords are set to 0000 by default. Secure the measuring transducer with a corresponding password if it is being used in safety-related systems. Changing the password for the configuration mode Load the MACX MCR-CONF configuration software. Read out the current configuration. Enter the configuration mode password under Service Locking (default is 0000). Click Service Locking Change. Choose a password that does not correspond to patterns such as 1234 or Enter the old password and then the new secure password twice. After the configuration mode password has been changed, the password for the parameterization mode can be changed. Enter the configuration mode password under Service Locking (default is 0000). Click Service Locking Change. Choose a password that does not correspond to patterns such as 1234 or Enter the old password twice and then the new secure password. If both passwords were chosen at the same time, subsequent entering of the password will start the higher-order mode (the configuration mode). If the passwords are not the same, only the second part of the above-mentioned instructions must be carried out for changing the parameterization password. NOTE: Write the new passwords to the configuration data in the measuring transducer in order to save them. Activating/deactivating write protection Write protection is fully deactivated by entering the password for configuration mode under Service Locking and partially deactivated by entering the password for parameterization mode. The device can be unlocked again by deleting the password entered in Service Locking. WARNING: The software write protection only automatically locks again after a reset or after exiting the configuration interface. It remains locked until it is explicitly reset _en_00 PHOENIX CONTACT 13

14 9.4 Installation and startup During installation, always observe the instructions in the PACKB.MACX-MCR-EX-SL-RTD-I (MNR ) package slip. The package slip is supplied with the device. You can also download it at the following address: It is recommendable to install the measuring transducer into a lockable housing with IP54 protection. Check that the configuration of the measuring transducer is correct for the intended application. Connect the measuring transducer according to the installation instructions. Make sure that the sensor connected corresponds to the configuration Check the functionality of the measuring transducer with sensor connected for correct function (this is possible with the monitoring function in the configuration software.) Start the loop and check it for correct function. 9.5 Notes on operation Only the green LED (PWR) is on during normal operation. If an error occurs during operation and the red LED (ERR) flashes, there is a line fault. The output current of the measuring transducer is between ma or is higher than 21.0 ma (in the case of errors in the sensor circuit) or is 0 ma (in the case of a cable break in the output circuit). Check all signal lines. The device will automatically switch back to normal operation after the error has been eliminated. If an error occurs during operation and the red LED (ERR) is permanently on, the device has switched to "safe state" (output current is less than 2 ma). Restart the device in order to return it to normal operation. If no PC/Laptop has been connected, you can also interrupt the voltage supply. Or you can carry out a warm start with the help of the configuration software (Service Reset). The measuring transducer should then return to normal operation. If not, the measuring transducer must be replaced. 9.6 Recurring checks (SIL 2) The function of the entire safety circuit must be checked regularly according to EN and EN The intervals for checking are specified by the intervals of each individual device within the safety loop. It is the operators' responsibility to select the type of checks and the checking intervals in the specified time period. The MACX MCR-EX-SL-RTD measuring transducer must be checked at least every 7 years (maximum proof test interval). Checking must be carried out in such a way that the correct function of the safety equipment together with all components can be substantiated. Possible procedure for recurring checks for discovering dangerous and undetected device failures. A calibrated sensor simulator (RTD/TC) and a calibrated digital multimeter are necessary for checking the measuring transducer. Connect the sensor simulator to the input of the measuring transducer using the appropriate connection method. Connect the digital multimeter in current measuring mode (20 ma range) to the output. The measuring range limits and intermediate values are specified with the sensor simulator. The corresponding output values of the measuring transducer must be checked on the digital multimeter. If the output values deviate from the expected values, this can be corrected by the ZERO/SPAN function of the software. Line faults (break and short circuit) are to be simulated on the input terminals, the configured leakage currents are to be determined on the output. If the function test result is negative, the measuring transducer must be taken out of operation and the process put into a safe state by other measures. 9.7 Repair Devices have a long service life, are protected against malfunction and do not require maintenance. However if a device should fail, send it back to Phoenix Contact immediately. The type of malfunction and possible reasons must also be stated. Please use the original packaging or other suitable safe packaging when sending devices back for repair or recalibration. Phoenix Contact GmbH & Co KG Abteilung Service und Reparatur Flachsmarktstr. 8 D Blomberg GERMANY _en_00 PHOENIX CONTACT 14

15 9.8 Standards (SIL 2) The measuring transducers are developed and tested according to the following standards: EN 61508: 2001 EN : 2006 IEC : 2006 Functional safety of electrical/electronic/ programmable electronic safety-related systems Electrical equipment for measurement, control and laboratory use EMC requirements Electrical equipment for measurement, control and laboratory use EMC requirements part 3-2: Noise immunity requirements for devices that perform safety-related functions or are used for safety-related functions (functional safety) applications in industrial areas with special electromagnetic environments 9.9 Abbreviations Abbreviation DC D Diagnostic Coverage of Dangerous Failures HFT Hardware Fault Tolerance d dd du s MTBF PFD avg PFH SFF SIL Rate of Dangerous Failures Rate of Dangerous Detected Failures Rate of Dangerous Undetected Failures Rate of Safe Failures Mean Time Between Failures Average Probability of Failure on Demand Probability of a Dangerous Failure per Hour Safe Failure Fraction Safety Integrity Level Meaning Diagnostic coverage: DC D = dd /( du + dd ) Hardware fault tolerance: Ability of a function unit to continue with execution of a demanded function despite existing errors or deviation Proportion of dangerous failures per hour Proportion of detected dangerous failures per hour Proportion of undetected dangerous failures per hour Proportion of harmless failures per hour Mean Time Between Failures Average probability of dangerous failure on demand of a safety function Failure probability per hour for the safety function Proportion of harmless failures: Proportion of failures without potential that would set the safety-related system to a dangerous or non-permissible function state The IEC international standard defines four discrete Safety Integrity Levels (SIL 1 to 4). Each level corresponds to a probability range for failure of a safety function. The higher the Safety Integrity Level of safety-related systems, the lower the probability that the required safety functions will not be performed _en_00 PHOENIX CONTACT GmbH & Co. KG Blomberg Germany Phone: PHOENIX CONTACT P.O.Box 4100 Harrisburg PA USA Phone: