vm600 safety manual.book-e1 - istec international · vm600 functional safety manual mavm600-fs/e...

34
VM600 Functional Safety Manual MAVM600-FS/E Edition 1 - 18 November 2009 Vibro-Meter SA Route de Moncor 4 CH - 1701 Fribourg SWITZERLAND www.vibro-meter.com TITLE PAGE Functional Safety Manual VM600 Machinery Protection Safety Integrated System

Upload: dangnhi

Post on 25-Jun-2018

237 views

Category:

Documents


6 download

TRANSCRIPT

Page 1: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

VM600 Functional Safety Manual MAVM600-FS/EEdition 1 - 18 November 2009

Vibro-Meter SARoute de Moncor 4CH - 1701 Fribourg

SWITZERLAND

www.vibro-meter.com

TITLE PAGE

Functional Safety Manual

VM600 Machinery ProtectionSafety Integrated System

Page 2: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

ii VM600 Functional Safety Manual MAVM600-FS/EEdition 1 - 18 November 2009

REVISION RECORD SHEET

The duly signed master copy of this page is stored by the Technical Publications Department of Vibro-Meter S.A. and can be obtained by writing to the Technical Publications Manager.

Edition Dateof Issue

Written by / Modified by

PM No. Description Signature

1 18.11.2009 O. Dixon / P. Ward - - -

First edition based on the document “VM600 safety manual release ver 00” which was approved by TÜV Nord. This document has been edited to align with VM Energy publication standards.

OD / PW

Department Name Date Signature

Technical content approved by

Quality FSM O. Dixon 18.11.2009 OD

Product Management S. Adamo 18.11.2009 SA

Document released by Technical Publications P. Ward 18.11.2009 PW

Page 3: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

VM600 Functional Safety Manual MAVM600-FS/E iiiEdition 1 - 18 November 2009

COPYRIGHT

IMPORTANT NOTICE

All statements, technical information and recommendations in this document which relate to the products supplied by Vibro-Meter SA are based on information believed to be reliable, but unless otherwise expressly agreed in writing with Vibro-Meter, the accuracy or completeness of such data is not guaranteed. Before using this product, you must evaluate it and determine if it is suitable for your intended application. Unless otherwise expressly agreed in writing with Vibro-Meter, you assume all risks and liability associated with such use. Vibro-Meter takes no responsibility for

any statements related to the product which are not contained in a current English language Vibro-Meter publication, nor for any statements contained in extracts, summaries, translations or any other documents not

authored and produced by Vibro-Meter.

EXPORT CONTROL

The information contained in this document may be subject to export control regulations of the European Community, USA or other countries. Each recipient of this document is responsible for ensuring that the transfer or

use of any information contained in this document complies with all relevant export control regulations. ECC no. N/A.

COPYRIGHT

Copyright © Vibro-Meter SA, 2009

All rights reserved

Published and printed by Vibro-Meter SA in Fribourg, Switzerland

The names of actual companies and products mentioned herein may be the trademarks of their respective owners.

The information contained in this document is subject to change without notice. This information shall not be used, duplicated or disclosed, in whole or in part,

without the express written permission of Vibro-Meter.

Page 4: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

iv VM600 Functional Safety Manual MAVM600-FS/EEdition 1 - 18 November 2009

THIS PAGE INTENTIONALLY LEFT BLANK

Page 5: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

VM600 Functional Safety Manual MAVM600-FS/E vEdition 1 - 18 November 2009

PREFACE

About This ManualThis manual provides reference information on using Vibro-Meter’s VM600 Series systems in functionalsafety contexts. It is applicable to the following VM600 systems:• Machinery Protection System (MPS).

Who Should Use This Manual?The manual is written for the designers and operators of process monitoring and process control systemsusing Vibro-Meter’s VM600 Series systems.The system designers and operators are assumed to have the necessary technical training in safetyengineering, electronics and mechanical engineering (professional certificate/diploma or equivalent) toenable them to install, program and use the system(s).

Structure of the ManualThis section gives an overview of the structure of the document and the information contained within it.Some information has been deliberately repeated in different sections of the document to minimizecross-referencing and to facilitate understanding through reiteration.The chapters are presented in a logical order. You should read those that are most relevant to you andthen keep the document at hand for future reference.The structure of the document is as follows:

Chapter 1 IntroductionExplains the purpose and scope of this document.

Chapter 2 CertificationHighlights the VM600 system certification achieved.

Chapter 3 Safety IssuesProvides information on the safety issues related to the use of a VM600system in a functional safety context.

Chapter 4 DisposalProvides advice on how to dispose of your electrical and electronicequipment at the end of its life.

Chapter 5 Customer SupportProvides contact details for technical queries and for getting equipmentrepaired. Includes a customer feedback form allowing the user to provide uswith valuable feedback on our documentation.

Page 6: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

vi VM600 Functional Safety Manual MAVM600-FS/EEdition 1 - 18 November 2009

AbbreviationsThe following table defines the abbreviations found in this manual as well as in associated Vibro-Meterdocumentation.

Abbreviation Meaning

ABE04x VM600 rackCRC cyclic redundancy checkCSA Canadian Standards AssociationDC diagnostic coverageEUC equipment under controlFMEDA failure modes, effects and diagnostic analysisHFT hardware fault tolerance

IEC 61508IEC standard “Functional safety of electrical/electronic/programmable electronic safety-related systems”

IOC4T VM600 input/output card (for MPC4)

ISO 13849-1ISO standard “Safety of machinery - Safety-related parts of control systems - Part 1: General principles for design”

MPC4 VM600 machinery protection cardMPS machinery protection systemMPS1 VM600 softwareMTTFd mean time to fail dangerousN/A not applicable, not availablePFD probability of failure on demandPL performance levelPLC programmable logic controllerPSU power supply unitRLC16 VM600 relay cardRPM revolutions per minuteRPS6U VM600 power supplySFF safe failure fractionSIL safety integrity levelSIS safety integrated systemSP safety parametersSRS safety related system

TÜV technical inspection agency (from the German - Technischer Überwachungs-Verein)

Page 7: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

VM600 Functional Safety Manual MAVM600-FS/E viiEdition 1 - 18 November 2009

VM Vibro-Meter SA

VM600 Vibro-Meter’s VM600 series of machinery protection systems and conditon monitoring systems

WEEE waste electrical and electronic equipment

Abbreviation Meaning

Page 8: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

viii VM600 Functional Safety Manual MAVM600-FS/EEdition 1 - 18 November 2009

THIS PAGE INTENTIONALLY LEFT BLANK

Page 9: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

VM600 Functional Safety Manual MAVM600-FS/E ixEdition 1 - 18 November 2009

Symbols and Styles Used in This ManualSAFETY

SAFETY

Symbols and Styles Used in This ManualThe following symbols are used in this manual where appropriate:

NOTE : This is an example of the NOTE paragraph style. This draws the operator’sattention to additional information or advice relating to the subject.

Important Remarks on Safety

Additional RemarksEvery effort has been made to include specific safety-related procedures in this manual usingthe symbols described above. However, operating personnel are expected to follow allgenerally accepted safety procedures.Safety procedures should be communicated to all personnel who are liable to operate theequipment described in this manual.Vibro-Meter does not accept any liability for injury or material damage caused by failure toobey any safety-related instructions or due to any modification, transformation or repaircarried out on the equipment without written permission from Vibro-Meter. Any modification,transformation or repair carried out on the equipment without written permission fromVibro-Meter will invalidate any warranty.

The WARNING safety symbolTHIS INTRODUCES DIRECTIVES, PROCEDURES OR PRECAUTIONARY MEASURES WHICHMUST BE EXECUTED OR FOLLOWED. FAILURE TO OBEY A WARNING CAN RESULT ININJURY TO THE OPERATOR OR THIRD PARTIES.

The CAUTION safety symbolThis draws the operator's attention to information, directives or procedureswhich must be executed or followed. Failure to obey a caution can result indamage to equipment.

Read this manual carefully and observe the safety instructions before usingthe equipment described.

Page 10: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

x VM600 Functional Safety Manual MAVM600-FS/EEdition 1 - 18 November 2009

THIS PAGE INTENTIONALLY LEFT BLANK

Page 11: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

VM600 Functional Safety Manual MAVM600-FS/E xiEdition 1 - 18 November 2009

TABLE OF CONTENTS

TITLE PAGE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . i

REVISION RECORD SHEET . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ii

COPYRIGHT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . iii

PREFACE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . v

SAFETY. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . ix

TABLE OF CONTENTS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi

1 INTRODUCTION . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1

1.1 Purpose . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-11.2 Scope . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-11.3 Warning. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-21.4 Reference Part Numbers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-21.5 Applicable Documents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-3

Page 12: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

xii VM600 Functional Safety Manual MAVM600-FS/EEdition 1 - 18 November 2009

2 CERTIFICATION . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1

3 SAFETY ISSUES . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-1

3.1 VM600 in a Safety Related System. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-13.2 Valid Safety Configurations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-13.3 Safety Inputs and Outputs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-13.4 Safety Function . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-23.5 ISO 13849-1 Performance Level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-33.6 Safety Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-33.7 Protection of Relay Contacts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-33.8 Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-43.9 Configuring the System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-4

3.9.1 Define the levels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-43.9.2 Define the alarm outputs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-43.9.3 Upload the levels and configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-43.9.4 Configuration verification. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-4

3.10 Commissioning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-53.10.1 Guidelines for commissioning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-5

3.11 Offline Proof Test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-63.12 Repair and Maintenance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-6

3.12.1 Guidelines for the proof test . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-63.12.1.1 Reset . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-63.12.1.2 Threshold tests . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-63.12.1.3 Maintenance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-7

4 DISPOSAL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-1

5 CUSTOMER SUPPORT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-1

5.1 Contacting Us . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-15.2 Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-15.3 Sales and Repairs Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-15.4 Customer Feedback . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-2

FAILURE REPORT FORM

CUSTOMER FEEDBACK FORM

Page 13: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

VM600 Functional Safety Manual MAVM600-FS/E 1 - 1Edition 1 - 18 November 2009

PurposeINTRODUCTION

1 INTRODUCTION

1.1 PurposeThe purpose of this document is to describe the use of a VM600 machinery protection system(MPS) in a functional safety context as defined by IEC 61508 and ISO 13849-1.

1.2 ScopeThe document applies to VM600 series machinery protection systems as outlined below inFigure 1-1 and Table 1-1.

Part Description Mandatory Comment

ABE04x Rack Yes 19” rack

RPS6U Power supply YesTwo PSUs should be used.The PSUs can be AC or DC.

MPC4 Machinery protection card (4+2 channels) Yes 1 to n cards

IOC4T Input/output card Yes 1 per MPC4 cardRLC16 Relay expansion card NoMPS1 Software Yes

Table 1-1 : System modules

Figure 1-1 : The VM600 machinery protection system in a safety related system

Page 14: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

1 - 2 VM600 Functional Safety Manual MAVM600-FS/EEdition 1 - 18 November 2009

WarningINTRODUCTION

1.3 WarningThe following symbol introduces directives, procedures or precautionary measures whichmust be executed or followed.

FAILURE TO OBEY A WARNING MIGHT RESULT IN INJURY TO THE OPERATOR OR THIRD PARTIES ANDDAMAGE TO EQUIPMENT.

1.4 Reference Part Numbers

Part Number Card / Product Name

204-040-100-012 Standard 19” rack204-040-100-112 Standard 19” rack insulated version204-040-100-211 Standard 19” rack CSA standard204-042-100-012 Standard 19” rack Siemens standard204-042-100-211 Standard 19” rack Siemens CSA standard200-510-071-113 MPC4200-560-000-113 IOC4T200-570-000-111 RLC16

200-582-200-013 RPS6U 24VDC

200-582-300-013 RPS6U 48VDC

200-582-400-011 RPS6U 72VDC

200-582-600-013 RPS6U 110VDC

200-582-500-013 RPS6U 110/230 VAC

209-500-100-022 MPS1 software (used to configure cards)

Table 1-2 : Reference part numbers

Page 15: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

VM600 Functional Safety Manual MAVM600-FS/E 1 - 3Edition 1 - 18 November 2009

Applicable DocumentsINTRODUCTION

1.5 Applicable Documents

Document Name Document Number Edition

Hardware Manual with Application Description Machinery Protection System (MPS) Standard Version

MPS Hardware Manual (Standard Version) MAMPS-HW/E

10

Software Manual MPS1 Configuration Software for Machinery Protection System

MPS1 Software Manual MAMPS1-SW/E 6

Table 1-3 : Applicable documents

Page 16: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

1 - 4 VM600 Functional Safety Manual MAVM600-FS/EEdition 1 - 18 November 2009

Applicable DocumentsINTRODUCTION

THIS PAGE INTENTIONALLY LEFT BLANK

Page 17: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

VM600 Functional Safety Manual MAVM600-FS/E 2 - 1Edition 1 - 18 November 2009

CERTIFICATION

2 CERTIFICATIONThe VM600 system as described in this document is certified by TÜV® NORD to the followinglevels:• IEC 61508 Safety Integrated Level 1• ISO 13849-1 performance level C.

A scanned copy of the safety certificate issued by TÜV® NORD is shown on the followingpage (see Figure 2-1).

Page 18: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

2 - 2 VM600 Functional Safety Manual MAVM600-FS/EEdition 1 - 18 November 2009

CERTIFICATION

Figure 2-1 : TÜV NORD certificate

Page 19: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

VM600 Functional Safety Manual MAVM600-FS/E 3 - 1Edition 1 - 18 November 2009

VM600 in a Safety Related SystemSAFETY ISSUES

3 SAFETY ISSUES

3.1 VM600 in a Safety Related System

When a VM600 is part of a safety related system (SRS), certain configuration restrictionsmust be applied. In particular:• The output relays must be configured as de-energized to trip. Specifically:

• the relay is energized when the monitored levels are within their specified tolerances• the relay is de-energized to indicate an alarm.

• The use of the VM function danger bypass is not allowed.• The use of the VM function trip multiply is not allowed.• The alarm must be defined as ‘latching’.

3.2 Valid Safety ConfigurationsThe VM600 machinery protection system (MPS) can be configured in many differentarrangements. These configurations are described in more detail in the hardware manual(see 1.5 - Applicable Documents). For example, the VM600 can be used to protect rotatingmachines in a safety related system.

3.3 Safety Inputs and Outputs

Monitored Signal Valid for SRS Reference in HW Manual

Broad-Band Absolute Bearing Vibration Yes Section 7.1Tracking No Section 7.2Relative Shaft Vibration with Gap Monitoring Yes Section 7.3Absolute Shaft Vibration Yes Section 7.4Shaft Position Yes Section 7.5

Table 3-1 : Overview of valid safety configurations

Signal Comments Reference in HW Manual

MPC4 CH1-CH4 (inputs) Ensure cabling follows the guidelines Table 9-1 part 1

MPC4 relay contacts (outputs) Table 9-1 part 2

Table 3-2 : Overview of valid safety inputs and outputs

Page 20: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

3 - 2 VM600 Functional Safety Manual MAVM600-FS/EEdition 1 - 18 November 2009

Safety FunctionSAFETY ISSUES

3.4 Safety FunctionWith reference to IEC 61508 the safety function for the system is defined below.

For the required safety function SF1, the following safety parameters (SP) are required inaccordance with IEC 61508.

SF Number Description Safe State

Required Safety

Parameters

SF1

If an input value (or values) exceed(s) a predefined limit, then a trip activation signal is made.

De-energize to trip (open relay contact).That is, the EUC and the VM600 interpret a de-energized state as a safe state.

See table below

Table 3-3 : Safety function

SP Number Safety Parameter Requirement Comment

SP1 Safety integrity level SIL 1SP2 Operational mode Low demand modeSP3a Component type sensor Type B

Component type logic (measuring logic) Type B

Component type actuator (relay) Type A

SP4 Hardware fault tolerance (HFT) 0

Single channel architecture of an already existing proven-in-use system

should be used for SIL 1 application without any

changes

SP5 Probability of failure on demand (PFD) ≥ 10-2 to 10-1

PFD by proof test years FMEDA

0.5 1.0 2.0 5.05.5e-3 1.1e-3 2.2e-2 5.0e-2

SP6Safe failure fraction (SFF) for Type A subsystem

< 60% for SIL 1 and HFT 0

Safe failure fraction (SFF) for Type B subsystem

60% to < 90% for SIL 1 and HFT 0

Table 3-4 : Safety parameters

Page 21: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

VM600 Functional Safety Manual MAVM600-FS/E 3 - 3Edition 1 - 18 November 2009

ISO 13849-1 Performance LevelSAFETY ISSUES

In practice, the output relay or relays are normally the ‘input’ to a safety related PLC that takesthis input together with other safety related signals.

3.5 ISO 13849-1 Performance LevelThe table below shows the breakdown of performance level (PL) by diagnostic coverage andmean time to dangerous failure (MTTFd).

The calculated results for the VM600 MPS are shown in the following table.

3.6 Safety TimeAfter the defined safety level threshold has been exceeded, the VM600 system will open theassociated safety relay within 100 ms.

3.7 Protection of Relay Contacts

In a safety system it is important to protect against a relay contact becoming welded due toexcessive current being inadvertently passed. Therefore, the outputs must be protected by a5A(T) fuse.

DC / MTTFd Without Without Low Medium Low Medium High

Low a Not covered a b b c Not

covered

Medium b Not covered b c c d Not

covered

HIgh Not covered c c d d d e

Table 3-5 : Determination of the performance level according to DIN EN ISO 13849-1

Component MTTFd (years)

MTTFd Category

Postulated DC for PL c

DC according to

FMEDAPL

VM600 MPS 118 High < 60% 35.64% c

Table 3-6 : ISO 13849 performance level achieved

Page 22: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

3 - 4 VM600 Functional Safety Manual MAVM600-FS/EEdition 1 - 18 November 2009

InstallationSAFETY ISSUES

3.8 InstallationThe system shall be installed following the procedures described in the MPS HardwareManual (Standard Version) MAMPS-HW/E (see 1.5 - Applicable Documents). Environmentalrestrictions are described in Appendix A of the manual.

3.9 Configuring the System

It is important that the levels (vibration and so on) are adjusted to suit the system underprotection and that a manual verification is made of the parameters that are uploaded to thesystem (MPC4 card).Note that the procedures described should only be performed by competent and authorizedpersonnel following the plant specific guidelines in force at the installation site.

3.9.1 Define the levelsThe choice of alarm levels must be made in consultation with the site manager. It is the enduser’s responsibility to ensure that the alarm levels are appropriate for the particular systembeing protected.The levels are defined using the MPS1 software (supplied) or the MPS2 software (optional).Please refer to the appropriate documentation for complete information.

3.9.2 Define the alarm outputsAny relay on the MPC4 or RLC16 cards can be configured to provide the safety function. Aspreviously noted, the alarms must be:• configured as ‘latching’• de-energized to ‘trip’.

3.9.3 Upload the levels and configurationOnce the system parameters have been correctly defined using the MPS software, theconfiguration for each MPC4 card must be uploaded to the card. This procedure is describedin the MPS1 Software Manual MAMPS1-SW/E (see 1.5 - Applicable Documents).

3.9.4 Configuration verificationWhilst the actual upload of data is controlled by CRC verification and other techniques, inorder to fulfil the IEC 61508 requirements a manual verification of this upload is required. Theverification is made by downloading the configuration from the MPC4 card to the computerand comparing the data received with the original data uploaded to the card.This procedure is described below.• Select the appropriate MPC4 card on the MPS software (as used in 3.9.3 - Upload the

levels and configuration).

Page 23: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

VM600 Functional Safety Manual MAVM600-FS/E 3 - 5Edition 1 - 18 November 2009

CommissioningSAFETY ISSUES

• Use the Dump to File option to save the configuration as pc_card_1.csv.• Define a dummy rack using a Tag name from_sys_1.• Select this rack, connect to the MPC4 card concerned and read its configuration back to

the computer.• Dump this file as sys_card_1.csv.• Using the MS-DOS fc (file compare) command, compare the two files. The only

difference should be the download time as shown in Figure 3-1.

NOTE : If any differences exist, then the upload must be repeated and the comparisonrepeated.

3.10 Commissioning

The system should be commissioned as an integral part of the overall SIS commissioning.

INSTALLATION AND COMMISSIONING SHOULD ONLY BE PERFORMED BY COMPETENT ANDAUTHORIZED PERSONNEL FOLLOWING THE PLANT SPECIFIC GUIDELINES IN FORCE AT THEINSTALLATION.

3.10.1 Guidelines for commissioningInstalling a VM 600 system is fully described in section 8 of the MPS Hardware Manual(Standard Version) MAMPS-HW/E.

Figure 3-1 : MS-DOS fc command screen shot

Page 24: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

3 - 6 VM600 Functional Safety Manual MAVM600-FS/EEdition 1 - 18 November 2009

Offline Proof TestSAFETY ISSUES

3.11 Offline Proof Test

When the VM600 is taken offline, the attached system and equipment are no longerprotected. Therefore, this procedure should only be undertaken by authorized personnelrespecting the overall plant operations procedures. There should be no need to remove theequipment from site to perform these tests unless it is considered more convenient.The offline proof test reveals any dangerous faults that might not be detected in normaloperation.For a VM600 system the proof test must be performed every 5 years or less.

3.12 Repair and Maintenance

If the VM600 system is under maintenance or repair, then the attached system andequipment may no longer be protected. Therefore, this procedure should only be undertakenby authorized personnel respecting the overall plant operations procedures.

3.12.1 Guidelines for the proof test

3.12.1.1 Reset

1- Reset the system by performing a cold start. That is, turn off and then turn on the rack.2- Verify the safety relay status by performing a continuity test.3- Observe the diagnostic LEDs and note any abnormalities. Refer to the MPS hardware

manual for further information.

3.12.1.2 Threshold tests

These tests are essentially a sub-set of the site commissioning plan. As such, they will varywidely depending on the number of channels configured, the sensor type, and so on.The levels used have to be determined for each particular installation. An example for onechannel of a vibration alarm is given below.1- Disconnect the IOC4T from the sensor cables.2- Simulate an N1 vibration signal at a site specific frequency for 100% RPM.3- Inject a signal at (0.8 x alarm level) and verify that the system does not trip.4- Inject a signal at (1.2 x alarm level) and verify that the system does trip.

Page 25: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

VM600 Functional Safety Manual MAVM600-FS/E 3 - 7Edition 1 - 18 November 2009

Repair and MaintenanceSAFETY ISSUES

3.12.1.3 Maintenance

System maintenance should be performed following the guidelines in the MPS HardwareManual (Standard Version) MAMPS-HW/E (see 1.5 - Applicable Documents). When theVM600 is taken offline, the attached system and equipment are no longer protected.Therefore, maintenance should only be undertaken by authorized personnel respecting theoverall plant operations procedures.

Page 26: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

3 - 8 VM600 Functional Safety Manual MAVM600-FS/EEdition 1 - 18 November 2009

Repair and MaintenanceSAFETY ISSUES

THIS PAGE INTENTIONALLY LEFT BLANK

Page 27: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

VM600 Functional Safety Manual MAVM600-FS/E 4 - 1Edition 1 - 18 November 2009

DISPOSAL

4 DISPOSALIf it is decided to scrap a VM600 system, then it must be disposed of in an environmentallyfriendly manner. In European Community countries, the Waste Electrical and ElectronicEquipment (WEEE) directive is applicable.• According to the WEEE Directive 2002/96/EC, all waste electrical and electronic

equipment should be collected separately and then treated and disposed of inaccordance with the best available and environmentally friendly techniques. Wasteelectrical and electronic equipment may contain substances hazardous to theenvironment (and to humans) but it is also a valuable resource of new raw materials.Therefore, it is important to collect electrical and electronic waste separately from otherwaste.

Figure 4-1 : WEEE logo

Page 28: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

4 - 2 VM600 Functional Safety Manual MAVM600-FS/EEdition 1 - 18 November 2009

DISPOSAL

THIS PAGE INTENTIONALLY LEFT BLANK

Page 29: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

VM600 Functional Safety Manual MAVM600-FS/E 5 - 1Edition 1 - 18 November 2009

Contacting UsCUSTOMER SUPPORT

5 CUSTOMER SUPPORT

5.1 Contacting UsVibro-Meter’s worldwide customer support network offers a range of support including 5.2 -Technical Support and 5.3 - Sales and Repairs Support. For customer support, pleasecontact your local Vibro-Meter representative. Alternatively, contact our main office:

Customer supportVibro-Meter SA

Route de Moncor 4PO Box 1616

CH-1701 FribourgSwitzerland

Telephone: +41 (0)26 407 11 11E-mail: [email protected]

Web: www.vibro-meter.com

Vibro-Meter SA is an operating company of Meggitt PLC.

5.2 Technical SupportVibro-Meter’s technical support team provide both pre-sales and post-sales technicalsupport, including:1- General advice2- Technical advice3- Troubleshooting4- Site visits.

NOTE : For further information, please contact Vibro-Meter (see 5.1 - Contacting Us).

5.3 Sales and Repairs SupportVibro-Meter’s sales team provide both pre-sales and post-sales support, including advice on:1- New products2- Spare parts3- Repairs.

NOTE : If a product has to be returned to Vibro-Meter for repairs, then it should beaccompanied by a completed Failure Report Form on page 5-3.

Page 30: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

5 - 2 VM600 Functional Safety Manual MAVM600-FS/EEdition 1 - 18 November 2009

Customer FeedbackCUSTOMER SUPPORT

5.4 Customer FeedbackAs part of our continuing commitment to improving customer service, we warmly welcomeyour opinions. To provide feedback, please complete the Customer Feedback Form on page5-5 and return it Vibro-Meter’s main office (see 5.1 - Contacting Us).

Page 31: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

VM600 Functional Safety Manual MAVM600-FS/E 5 - 3Edition 1 - 18 November 2009

Customer FeedbackCUSTOMER SUPPORT

FAILURE REPORT FORMIf the product has to be returned to Vibro-Meter for repairs, then:1- Complete this failure report form.2- Attach a photocopy of this report to the faulty unit and retain the original copy for your records.3- Send the product and the attached failure report form to Vibro-Meter by registered post.

NOTE : Please provide as much information as possible in order to assist fault diagnosis.

NOTE : A failure report MUST be sent with each faulty product.

Contact details: Name Job title

Company Email

Address

Country Post code

Telephone Fax

Signature Date

Product details:Product type:

Serial number (S/N): Part number (P/N):

Vibro-Meter order number:

Date of purchase: Site where installed:

Is the failure (put an ⌧ where appropriate):

Continuous? Intermittent? Temperature dependent?

Safety related information:Is the product installed in a safety related system?

Yes No

If the answer is yes, then please answer the questions on the following page...

(Continued overleaf)

Page 32: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

5 - 4 VM600 Functional Safety Manual MAVM600-FS/EEdition 1 - 18 November 2009

Customer FeedbackCUSTOMER SUPPORT

Safety related information: (Continued)

Did the system fail* in a dangerous state (that is, failure did not result in the safe state)?

Yes No Not applicable

Did the system fail* to a safe mode (that is, the safety relay opened but the trip was spurious)?

Yes No Not applicable*For example, a broken LED is merely a cosmetic failure.

Description of failure:

(Please continue on a separate sheet if necessary)

Page 33: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

VM600 Functional Safety Manual MAVM600-FS/E 5 - 5Edition 1 - 18 November 2009

Customer FeedbackCUSTOMER SUPPORT

.

CUSTOMER FEEDBACK FORM

Title of manual:VM600 Machinery Protection Safety Integrated System Functional Safety Manual

Reference: MAVM600-FS/E Version: Edition 1 Date of issue: 18 November 2009

Customer contact details:Name Job Title

Company Email

Address

Signature Date

General feedback:Please answer the following questions:• Is the document well organized? Yes No • Is the information technically accurate? Yes No • Is more technical detail required? Yes No • Are the instructions clear and complete? Yes No • Are the descriptions easy to understand? Yes No • Are the examples and diagrams/photos helpful? Yes No • Are there enough examples and diagrams/photos? Yes No • Is the style/wording easy to read? Yes No • Is any information not included? (please list in “comments” below) Yes No

Additional feedback:

(Please continue overleaf)

Page 34: VM600 Safety Manual.book-e1 - Istec International · VM600 Functional Safety Manual MAVM600-FS/E Edition 1 ... (MPS). Who Should Use This ... MTTFd mean time to fail dangerous

5 - 6 VM600 Functional Safety Manual MAVM600-FS/EEdition 1 - 18 November 2009

Customer FeedbackCUSTOMER SUPPORT

(Continued)

(Please continue on a separate sheet if necessary)