Safety Manual; Standard Foundation; Features; Qualification - Pfannenberg PMF 2015-SIL Betriebsanleitung/Sicherheitshandbuch

4. Safety Manual

4.1. Standard foundation


IEC61508

IEC61511

EN ISO 13849-1
With the identification of the device with the CE sign, Pfannenberg GmbH confirms the fulfilment of the legal
requirements of the applicable EC guidelines.
The PMF 2015-SIL flashing light fulfils the requirements of the functional safety according to IEC 61508,
IEC 61511 and EN ISO 13849-1

4.2. Features

The flashing light described alone does not perform any protective function (partial system), but is concepted
for installation as an output device with diagnosis (output) in the loop of a protective function (SIF). The de-
vice (see Fig. 1 to Fig. 3) only ever shows a partial system of a technical safety system (SIS). It should be
observed through the system integrator that the entire 'loop', according to the use, has to meet the required
safety integration level (SIL). The system integrator must establish all measures in order to reach or maintain
the safe condition in the SIS in the case of a fault.
The diagnosis system of the device diagnoses the optical warning signals of the failed release and function
upon request and reports this via an alarm relay to a superior control system.
This does not constitute an online diagnosis within the meaning of IEC61508 and, without further measures,
has no influence on the intermediary values PFH, PFD, SFF and HFT. The diagnosis can only be used for
the following uses/architectures:

Systems with small requirement rate of the safety function (low demand) which are regularly subject
to a test release. If the regular test is automated, then it can be evaluated so that the diagnosis cov-
erage flows into the calculation of the reliability data.

Systems in which the safety function can be tested before the existence of the dangerous condition,
such as starting alarms of machines, for example.

4.3. Qualification

Handling according to this operating manual and safety manual can only be carried out by trained electrical
technical personnel authorised by the plant operator.
The integration of this flashing light in an application is to be carried out according to the rules of the func-
tional safety.
Proof tests and their proof can only be carried out by authorised electrical technical personnel.

4.4. Evaluations

4.4.1. Use as a starting alarm of machines

For use as a starting alarm of machines, the function of the generation of the optical warning signal channel
is to be assessed as a function of the machine. The safe condition is reached when the optical warning sys-
tem works reliably. The diagnosis channel monitors this function and, upon failure, leads in the safe condition
via a safety loop. This architecture is illustrated schematically in Fig. 6.
Starting alarms and similar uses are architectures that can normally be attributed to the 'high demand mode'.
Immediately before switching on the machine or entering the dangerous condition, an automatic function test
must be carried out by a superior control system, such as described in section 4.8. Only after a successful
test can there be an approval. This automatic test ensures that the function of the monitoring channel is, in
Datei/ file name:085501931e D-E-F.doc
Functional safety of electrical/ electronic/ programmable electronic
safety-related systems
Functional safety – safety instrumented systems for the
process industry sector
Safety-related parts of control systems
20 / 44 Zeichnungsnr./ Drwg-no.: 11516-42e