actuators auma norm (without controls) auma matic · pdf fileauma actuators and actuator...
TRANSCRIPT
Actuators
AUMA NORM (without controls)
AUMA MATIC
Functional SafetyManual
NOTICE for use!
This document is only valid in combination with the current operation instructions enclosed with the device.
Purpose of the document:
The present documents informs about the actions required for using the device in safety-related systems inaccordance with IEC 61508 or IEC 61511.
Reference documents:● EXIDA Report No. AUMA 07/07-32 R003 and EXIDA Report No. AUMA 10/03-05 R006.● Operation instructions (Assembly, operation, commissioning) for actuator
Reference documents can be downloaded from the Internet (www.auma.com) or ordered directly from AUMA(refer to <Addresses>).
Table of contents Page
41. Terminology............................................................................................................................41.1. Abbreviations and concepts
62. Application and validity.........................................................................................................62.1. Range of application62.2. Standards62.3. Valid device types
83. Architecture, configuration and applications......................................................................83.1. Architecture (actuator sizing)83.2. Configuration (setting)83.3. Applications (environmental conditions)
94. Safety instrumented systems and safety functions...........................................................94.1. Safety instrumented system including an actuator94.2. Safety functions
104.3. Redundant system architecture
115. Installation, commissioning and operation.........................................................................115.1. Installation125.2. Commissioning125.3. Operation125.4. Lifetime125.5. Decommissioning
146. Tests and maintenance..........................................................................................................146.1. Safety equipment: check146.2. Proof test (verification for safe actuator function)146.3. Maintenance
157. Safety parameters..................................................................................................................157.1. Determination of parameters157.2. Specific safety parameters for actuators of SA .1 type range.177.3. Specific parameters for actuators of SA .2 type range197.4. Specific parameters for actuators of SG .1 type range.
2
ActuatorsTable of contents
228. SIL Declaration of Conformity (example).............................................................................
249. Index........................................................................................................................................
25Addresses...............................................................................................................................
3
ActuatorsTable of contents
1. Terminology
Information sources ● IEC 61508-4, Functional safety of electrical/electronic/programmable electronicsafety-related systems – Part 4: Definitions and abbreviations
● IEC 61511-1, Functional safety - Safety instrumented systems for the processindustry sector – Part 1: Framework, definitions, system, hardware and softwarerequirements
1.1 Abbreviations and concepts
To evaluate safety functions, the lambda values or the PFD value (Probability ofDangerous Failure on Demand) and the SFF value (Safe Failure Fraction) are themain requirement. Further parameters are required to assess the individualcomponents. These figures are explained in the table below.
Table 1: Abbreviations of safety parameters
DescriptionEnglishFigureNumber of safe failuresLambda Safeλ S
Number of dangerous failuresLambda Dangerousλ D
Number of undetected dangerous failu-res
Lambda Dangerous Undedectedλ DU
Number of detected dangerous failuresLambda Dangerous Dedectedλ DD
Diagnostic Coverage - ratio betweenthe failure rate of faults detected bydiagnostic tests and overall failure rateof the component or subsystem. Thediagnostic coverage does not includeany faults detected during proof tests.
Diagnostic CoverageDC
Mean probability of failureMean Time Between FailureMTBF
Fraction of safe failuresSafe Failure FractionSFF
Average probability of dangerous failu-res on demand of a safety function.
Average Probability of dangerous Fai-lure on Demand
PFDavg
Ability of a function unit to continueperformance of a requested function inthe event of existing faults or deviati-ons.
Hardware Failure ToleranceHFT
Interval for proof testTime for proofTproof
SIL Safety Integrity Level
The international standard IEC 61508 defines 4 levels (SIL 1 through SIL 4).
Safety function Function to be implemented by SIS or a safety-related system for risk reduction withthe objective to achieve or maintain a safe state for the plant/equipment with respectto a specific hazardous event.
Safety instrumentedfunction (SIF)
Function with defined safety integrity level (SIL) required to achieve functional safety.
Safety instrumentedsystem (SIS)
Safety instrumented system for executing a single or several safety instrumentedfunctions A SIS consists of sensor(s), logic system and actor(s).
Safety-related system A safety-related system includes all factors (hardware, software, human factors)necessary to implement one or several safety functions. Consequently, safety functionfailures would result in a significant increase in safety risks for people and/or theenvironment.
A safety-related system can comprise stand-alone systems dedicated to perform aparticular safety function or can be integrated into a plant.
Proof test Periodic test performed to detect dangerous hidden failures in a safety-related systemso that, if necessary, a repair can restore the system to an "as new" condition or asclose as practical to this condition.
4
ActuatorsTerminology
MTTR (Mean Time ToRestoration)
Mean time required to restore a system once a system failure has occurred. MTTRindicates the time required for system restoration on an average. It is therefore animportant parameter for system availability.The time for planning tasks and operatingresources is also included. It should be reduced to a minimum.
5
ActuatorsTerminology
2. Application and validity
2.1 Range of application
AUMA actuators and actuator controls with the safety functions mentioned in thismanual are intended for operation of industrial valves and are suitable for use insafety instrumented systems in accordance with IEC 61508 or IEC 61511.
2.2 Standards
Both actuators and actuator controls meet the following requirements:
● IEC 61508: Functional safety of electrical/electronic/programmable electronicsafety-related systems
● IEC 61010-1: Safety requirements for electrical equipment for measurement,control, and laboratory use - Part 1: General requirements
● IEC 61326: Electrical equipment for measurement, control and laboratory use- EMC requirements
● Explosion protection according to ATEX (if specified)
2.3 Valid device types
The data on functional safety contained in this manual applies to the device typesindicated.
Table 2: Suitable device types of SA .1 series
Parametertable
ControlType of dutyMotorpower supply
AUMAcontrols
AUMAactuator
5via externalcontrols
S2-15 minS2-30 minS4-25 %S4-50 %
3-phase ACwithoutSA 07.1 – SA 16.1SAR 07.1 – SAR 16.1SAExC 07.1 – SAExC 16.1SARExC 07.01 – SARExC 16.1
S2-15 minS4-25 %
3-phase ACSAN 07.1 – SAN 16.1SARN 07.1 – SARN 16.1
6OPEN, CLOSES2-15 minS2-30 minS4-25 %S4-50 %
3-phase ACAM 01.1AM 02.1
SA 07.1 – SA 16.1SAR 07.1 – SAR 16.1 7ESD
OPEN/CLOSE(EMERGENCYsignal)
8OPEN, CLOSES2-15 minS2-30 minS4-25 %S4-50 %
3-phase ACAMExB 01.1AMExC 01.1
SAExC 07.1 – SAExC 16.1SARExC 07.01 – SARExC 16.1 9ESD
OPEN/CLOSE(EMERGENCYsignal)
Table 3: Suitable device types of SA .2 series
Parametertable
ControlType of dutyMotorpower supply
AUMAcontrols
Type
10via externalcontrols
S2-15 minS2-30 minS4-25 %S4-50 %
3-phase ACwithoutSA 07.2 – SA 16.2SAR 07.2 – SAR 16.2SAEx 07.2 – SAEx 16.2SAREx 07.2 – SAREx 16.2
11OPEN, CLOSES2-15 minS2-30 minS4-25 %S4-50 %
3-phase ACAM 01.1AM 02.1
SA 07.2 – SA 16.2SAR 07.2 – SAR 16.2 on requestESD
OPEN/CLOSE(EMERGENCYsignal)
12OPEN, CLOSES2-15 minS2-30 minS4-25 %S4-50 %
3-phase ACAMExC 01.1SAEx 07.2 – SAEx 16.2SAREx 07.2 – SAREx 16.2 on requestESD
OPEN/CLOSE(EMERGENCYsignal)
6
ActuatorsApplication and validity
Table 4: Suitable device types of SG .1 series
Parametertable
ControlType of dutyMotorpower supply
AUMAcontrols
Type
13via externalcontrols
S2-15 min3-phase AC1-phase AC24 V DC
withoutSG 05.1 – SG 12.1SGExC 051. – SGExC 12.1
13via externalcontrols
S4-25 %3-phase ACwithoutSGR 05. – SGR 12.1
14OPEN, CLOSES2-15 min3-phase AC1-phase AC
AM 01.1SG 051. – SG 12.1
15ESDOPEN/CLOSE(EMERGENCYsignal)
14OPEN, CLOSES4-25 %3-phase ACAM 01.1SGR 05. – SGR 12.1
15ESDOPEN/CLOSE(EMERGENCYsignal)
16OPEN, CLOSES2-15 min3-phase AC1-phase AC
AMExC 01.1SGExC 05.1 – SGExC 12.1
17ESDOPEN/CLOSE(EMERGENCYsignal)
7
ActuatorsApplication and validity
3. Architecture, configuration and applications
3.1 Architecture (actuator sizing)
For actuator architecture (actuator sizing) the maximum torques, running torquesand operating times are taken into consideration.
Incorrect actuator architecture can lead to device damage within the safety-related system!
Possible consequences can be valve damage, motor overheating, contactor jamming,defective thyristors, heating up or damage to cables.
→ The actuator technical data must imperatively be observed when selecting theactuator.
→ Sufficient reserves have to be provided to ensure that actuators are capable ofreliably opening or closing the valve even in the event of an accident or under-voltage.
3.2 Configuration (setting)
Configuration (setting) of safety-relevant functions are performed as described inthe operation instructions or in the present manual (functional safety).
3.3 Applications (environmental conditions)
When specifying and using the actuators within safety instrumented systems,particular attention has to be paid that the permissible service conditions and theEMC requirements by the peripheral devices are met. Service conditions are indicatedin the technical data sheets.
● Enclosure protection● Corrosion protection● Ambient temperature● Vibration resistanceIf the actual ambient temperatures exceed an average of +40 °C, the lambda valueshave to be incremented by a safety factor. For an average temperature of +60 °C,this factor is defined at 2.5.
8
ActuatorsArchitecture, configuration and applications
4. Safety instrumented systems and safety functions
4.1 Safety instrumented system including an actuator
Typically, a safety instrumented system including an actuator is composed of thecomponents as shown in the figure.
Figure 1: Typical safety instrumented system
[1] Sensor[2] Controls (safety PLC)[3] Actuator[4] Valve[5] Distributed control system (DCS)
The safety integrity level is always assigned to an overall safety instrumented systemand not to an individual component.
For an individual component (e.g. an actuator), safety instrumented parameters aredetermined. These parameters are used to assign the devices to a potential safetyintegrity level (SIL). The final classification of the safety integrated system can onlybe made after assessing and calculating all subsystems.
4.2 Safety functions
To determine the SIL parameters, the safety function of a device (function which hasto be performed in case of an emergency to operate the plant into a safe state) hasto be considered.
In calculating the safety actuator parameters, the following safety functions are takeninto account:
● ESD function (Emergency Shut Down): safe opening/closing- A signal (standard: low active) causes the actuator to travel to the configu-
red direction (OPEN/CLOSE).
● ESD function: safe opening/closing with Partial Valve Stroke Test- A partial valve stroke test requires additional actions within external controls
(safety PLC).
● SS function (Safe Stop): safe standstill- An operation command (in directions OPEN or CLOSE) will only be exe-
cuted if an additional enable signal for the operation command is applied.- If this is not the case, operation in directions OPEN or CLOSE is stopped
or even suspended (motor is switched off).
9
ActuatorsSafety instrumented systems and safety functions
4.3 Redundant system architecture
Besides the already described typical safety instrumented system including anactuator, safety can be increased by integrating a second, redundant valve andactuator with actuator controls into the safety instrumented system. The decision onthe correct variant depends on the safety instrumented function.
Figure 2: Redundant system with safe ESD for safe closing
Figure 3: Redundant system with safe ESD for safe opening
10
ActuatorsSafety instrumented systems and safety functions
5. Installation, commissioning and operation
Information Installation and commissioning have to be documented by means of an assemblyreport and a final inspection record. Installation must be carried out exclusively bysuitably qualified personnel.
5.1 Installation
General installation tasks (assembly, electrical connection) have to be performedaccording to the operation instructions pertaining to the device and the enclosedorder-specific wiring diagram.
Figure 4: Example of wiring diagram with inputs OPEN, CLOSE and collective fault signal K9
[1] Input signals OPEN and CLOSE[2] Collective fault via output contact K9
Figure 5: Example of wiring diagram with ESD input EMERGENCY-CLOSE and collective fault signal K9
[1] ESD input EMERGENCY-CLOSE[2] Collective fault via output contact K9
11
ActuatorsInstallation, commissioning and operation
● Depending on the customer's choice, input signals OPEN and CLOSE or ESDinput EMERGENCY of AUMA actuators and actuator controls may either beconfigured Low Active or High Active.
● For AUMA MATIC version with safety function ESD "Safe opening/closing",operation to safe position via inputs OPEN and CLOSE is only possible if theselector switch is in position Remote control (REMOTE). We recommendlocking the selector switch in position REMOTE to prevent unauthorised opera-tion. Limit switches, torque switches and thermo switches are active.
● For AUMA MATIC version with safety function ESD "Safe opening/closing" viaESD EMERGENCY input, the actuator will be operated to the safe position ifrequested and irrespective of the selector switch position. For the ESD function,the safe position (OPEN or CLOSED) has to be set in the factory.
● A signal is issued via collective fault K9 once thermal protection or torqueswitches trip. This fault signal must imperatively be evaluated by the safetyPLC. In the event of a fault signal, the actuator must immediately be inspectedand repaired, if required.
● For versions with safety function ESD "Safe opening/closing", 3-phase powersupply has to be provided. During phase failure or at undervoltage, an alarmis also displayed via the fault output contact.The middle LED at the local controlsof AUMA MATIC is illuminated in red.
Information ● AUMA actuators such as AUMA NORM version require appropriate motorcontrols for operation. These controls must be considered when evaluating thecomplete safety instrumented system (SIS).
● Valve position indication is made via potentiometer or 4 – 20 mA signals. Ho-wever, these factors are not part of the determination for safety-relevant para-meters.
5.2 Commissioning
The operation instructions pertaining to the device must be observed for generalcommissioning.
Risk of immediate actuator operation when switching on!
Risk of personal injuries or damage to the valve
→ Ensure that input signal ESD (EMERGENCY) is applied in compliance with theconfiguration when switching on.
After commissioning, the safe function of the actuator must be verified.
5.3 Operation
Regular maintenance and device checks in the Tproof intervals as defined by theplant operator are the basis for safe operation.
The operation instructions pertaining to the device must be observed for operation.
5.4 Lifetime
Lifetime of actuators is described in the technical data sheets or the operationinstructions.
Safety-relevant parameters are valid for the cycles or modulating steps specified inthe technical data for typical periods of 10 to 15 years. After this period, the probabilityof failure rises.
5.5 Decommissioning
When decommissioning an actuator with safety functions, the following must beobserved:
● Impact of decommissioning on relevant devices, equipment or other work mustbe evaluated.
● Safety and warning instructions contained in the actuator operation instructionsmust be met.
12
ActuatorsInstallation, commissioning and operation
● Decommissioning must be carried out exclusively by suitably qualified personnel.● Decommissioning must be recorded in compliance with regular requirements.
13
ActuatorsInstallation, commissioning and operation
6. Tests and maintenanceTest and maintenance actions must be exclusively performed by appropriately trainedand authorised staff.
Information Any test/maintenance must be recorded in a test/maintenance report.
6.1 Safety equipment: check
All safety functions within safety equipment must be checked for perfect functionalityand safety at appropriate intervals. The intervals for safety equipment are to bedefined by the plant operator.
6.2 Proof test (verification for safe actuator function)
The proof test serves the purpose to verify the safety-relevant functions of the actuatorand actuator controls.
Proof tests shall reveal dangerous faults which might be undetected until a safetyfunction is started and consequently result in a potentially dangerous mode of failure.
The safety-relevant signal input is appropriately assigned to check the safety-relevantfunction. As a consequence, the actuators must perform the safety function (if equipedwith AUMA MATIC without fault indication at output contact K9).
Check list for verification and validation of safety functions:● Has running in direction OPEN via input OPEN (XK2) been performed?● Has running in direction CLOSE via input CLOSE (XK3) been performed?● Has ESD EMERGENCY input (if available) via input (XK12) been checked?● Has collective fault output contact (K9) been verified?The collective fault output contact can be activated via manual torque switch testusing the test buttons. Refer to the relevant chapter in the actuator operationinstructions.
Intervals:
A proof test interval describes the time between two proof tests. Functionality mustbe checked in appropriate intervals. The intervals are to be defined by the plantoperator.
In any case, the safety-relevant functions must be checked after commissioning andfollowing any maintenance work or repair as well as during the Tproof intervals definedin safety assessment.
6.3 Maintenance
Maintenance and service actions must be exclusively performed by appropriatelytrained and authorised staff.
After maintenance and service interventions, an additional functional test to validatethe safety function is imperatively required.
Information AUMA actuators prioritise motor operation to manual operation.This means that theactuator automatically switches to motor operation if requested. However, we recom-mend activating motor operation after any maintenance and service interventions.
14
ActuatorsTests and maintenance
7. Safety parameters
7.1 Determination of parameters
● The calculation of the safety instrumented parameters is based on the indicatedsafety functions. Hardware assessments are based on Failure Modes, Effectsand Diagnostic Analysis (FMEDA). FMEDA is a step to assess functional devicesafety in compliance with IEC 61508. On the basis of FMEDA, the failure ratesand the fraction of safe failures of a device are determined.
● Experience data and data taken from the EXIDA database for mechanicalcomponents are used to deduce failure rates. The electronic failure rates asbase failures rates are taken from the SIEMENS Standard SN 29500.
● In compliance with table 2 of IEC 61508-1, the average target PFD measurefor systems with low demand mode are:- SIL 1 safety functions: ≥ 10-2 to < 10-1
- SIL 2 safety functions: ≥ 10-3 to < 10-2
- SIL 3 safety functions: ≥ 10-4 to < 10-3
Since actuators only represent a fraction of the overall safety function, the ac-tuator PFD should not account for more than 37.5 % of the permissible totalvalue (PFDavg) of a safety function. This results in the following values:- Actuator PFD for SIL 1 applications: ≤ 3.75E-02- Actuator PFD for SIL 2 applications: ≤ 3.75E-03
● Electric actuators with actuator controls are classified as type A componentswith a hardware fault tolerance of 0. The SFF for the type A subsystem shouldbe < 60 % according to table 2 of IEC 61508-2 for SIL 1 (subsystems with ahardware fault tolerance of 0). The SFF for the type A subsystem should bebetween 60 % and < 90 % according to table 2 of IEC 61508-2 for SIL 2 (sub-systems with a hardware fault tolerance of 0).
As previously mentioned in the section on planning, safeguarding power supply andresulting calculations are the responsibility of the plant operator.
The plant operator has to ensure that faults are eliminated within MTTR; otherwisethe data of the quantative results is no longer valid.
7.2 Specific safety parameters for actuators of SA .1 type range.
The following parameter tables provide an example of safety instrumented parametersfor the different versions. Complete data records of safety instrumented parametersof all variants are available within the EXIDA test report.
Table 5: SA .1 type range in AUMA NORM version (without actuator controls)
SA 07.1 – SA 16.1/SAR 07.1 – SAR 16.1SAExC 07.1 – SAExC 16.1/SARExC 07.1 – SARExC 16.1SAN 07.1 – SAN 16.1/SARN 07.1 – SARN 16.1
SS (fail as is):ESD with PVST1)ESDSafety function
AUMA 07/07-32 R003Version V12
AUMA 07/07-32 R003Version V11
AUMA 07/07-32 R003Version V10
Reference
639 FIT403 FIT403 FITλsafe
0 FIT196 FIT0 FITλ DD
15 FIT56 FIT252 FITλ DU
0 %77 %0 %DCD
162 years162 years162 yearsMTBF
–91 %61 %SFF
PFDavg = 6.69E-05PFDavg = 2.83E-04PFDavg = 1.10E-03T[proof] = 1 year
PFDavg = 1.34E-04PFDavg = 5.42E-04PFDavg = 2.20E-03T[proof] = 2 years
PFDavg = 3.35E-04PFDavg = 1.29E-03PFDavg = 5.50E-03T[proof] = 5 years
–SIL 2SIL 2SIL AC2)
The partial valve stroke test shall be performed 10 times more than the expected stroke demand.1)
15
ActuatorsSafety parameters
SIL AC means that the calculated data is within the range for the appropriate SIL, but does not meanthat all relevant conditions of IEC 61508 are complied with.
2)
Table 6: SA .1 type range with AM 01.1/AM 02.1 actuator controls
SA 07.1 – SA 16.1/SAR 07.1 – SAR 16.1Wiring diagram MSP 1110KC3--F18E1 KMS TP110/001 or 114/001Fault evaluation via collective fault output contact K9
SS (fail as is):ESD with PVST1)ESDSafety function
AUMA 07/07-32 R003Version V15
AUMA 07/07-32 R003Version V14
AUMA 07/07-32 R003Version V13
Reference
1267 FIT681 FIT687 FITλsafe
0 FIT634 FIT290 FITλ DD
223 FIT61 FIT521 FITλ DU
0 %91 %36 %DCD
74 years79 years72 yearsMTBF
–95 %65 %SFF
PFDavg = 9.75E-04PFDavg = 3.82E-04PFDavg = 2.28E-03T[proof] = 1 year
PFDavg = 1.95E-03PFDavg = 6.87E-04PFDavg = 4.55E-03T[proof] = 2 years
PFDavg = 4.86E-03PFDavg = 1.52E-03PFDavg = 1.13E-02T[proof] = 5 years
–SIL 2SIL 2SIL AC2)
The partial valve stroke test shall be performed 10 times more than the expected stroke demand.1)SIL AC means that the calculated data is within the range for the appropriate SIL, but does not meanthat all relevant conditions of IEC 61508 are complied with.
2)
Table 7: SA .1 type range with AM 01.1/AM 02.1 actuator controls
SA 07.1 – SA 16.1/SAR 07.1 – SAR 16.1Wiring diagram MSP 1111FC3--F18E1 KMS TP114/201Fault evaluation via collective fault output contact K9ESD safety function via EMERGENCY input
ESD with PVST1)ESDSafety function
AUMA 07/07-32 R003Version V20
AUMA 07/07-32 R003Version V19
Reference
690 FIT686 FITλsafe
613 FIT290 FITλ DD
61 FIT491 FITλ DU
91 %37 %DCD
77 years71 yearsMTBF
95 %66 %SFF
PFDavg = 3.77E-04PFDavg = 2.14E-03T[proof] = 1 year
PFDavg = 6.80E-04PFDavg = 4.28E-03T[proof] = 2 years
PFDavg = 1.51E-03PFDavg = 1.07E-02T[proof] = 5 years
SIL 2SIL 2SIL AC2)
The partial valve stroke test shall be performed 10 times more than the expected stroke demand.1)SIL AC means that the calculated data is within the range for the appropriate SIL, but does not meanthat all relevant conditions of IEC 61508 are complied with.
2)
16
ActuatorsSafety parameters
Table 8: SA .1 type range with AMExB 01.1/AMExC 01.1 actuator controls
SAExC 07.1 – SAExC 16.1/SARExC 07.1 – SARExC 16.1Wiring diagram MSP E310KC3--FF8EC KMS TP 200/001 or 204/001Fault evaluation via collective fault output contact K9
SS (fail as is):ESD with PVST1)ESDSafety function
AUMA 07/07-32 R003Version V18
AUMA 07/07-32 R003Version V17
AUMA 07/07-32 R003Version V16
Reference
1267 FIT838 FIT843 FITλsafe
0 FIT883 FIT367 FITλ DD
223 FIT63 FIT696 FITλ DU
0 %93 %35 %DCD
74 years61 years57 yearsMTBF
–96 %63 %SFF
PFDavg = 9.75E-04PFDavg = 4.38E-04PFDavg = 3.04E-03T[proof] = 1 year
PFDavg = 1.95E-03PFDavg = 7.69E-04PFDavg = 6.06E-03T[proof] = 2 years
PFDavg = 4.86E-03PFDavg = 1.65E-03PFDavg = 1.51E-02T[proof] = 5 years
–SIL 2SIL 2SIL AC2)
The partial valve stroke test shall be performed 10 times more than the expected stroke demand.1)SIL AC means that the calculated data is within the range for the appropriate SIL, but does not meanthat all relevant conditions of IEC 61508 are complied with.
2)
Table 9: SA .1 type range with AMExB 01.1/AMExC 01.1 actuator controls
SAExC 07.1 – SAExC 16.1/SARExC 07.1 – SARExC 16.1Wiring diagram MSP E311FC3--FF8EC KMS TP 214/201Fault evaluation via collective fault output contact K9ESD safety function via EMERGENCY input
ESD with PVST1)ESDSafety function
AUMA 07/07-32 R003Version V22
AUMA 07/07-32 R003Version V21
Reference
847 FIT843 FITλsafe
862 FIT367 FITλ DD
63 FIT665 FITλ DU
93 %36 %DCD
60 years57 yearsMTBF
96 %64 %SFF
PFDavg = 4.34E-04PFDavg = 2.91E-03T[proof] = 1 year
PFDavg = 7.62E-04PFDavg = 5.80E-03T[proof] = 2 years
PFDavg = 1.64E-03PFDavg = 1.44E-02T[proof] = 5 years
SIL 2SIL 2SIL AC2)
The partial valve stroke test shall be performed 10 times more than the expected stroke demand.1)SIL AC means that the calculated data is within the range for the appropriate SIL, but does not meanthat all relevant conditions of IEC 61508 are complied with.
2)
7.3 Specific parameters for actuators of SA .2 type range
The following parameter tables provide an example of safety instrumented parametersfor the different versions. Complete data records of safety instrumented parametersof all variants are available within the EXIDA test report.
Safety parameters depend on the safety function. For actuators with integral controls,the safety parameters further depend on the wiring diagram version.
17
ActuatorsSafety parameters
Table 10: SA .2 type range in AUMA NORM version (without actuator controls)
SA 07.2 – SA 16.2, SAR 07.2 – SAR 16.2SAEx 07.2 – SAEx 16.2/SAREx 07.2 – SAREx 16.2
ESD with PVST1)ESDSafety function
AUMA 10/3-053 R006Version V2
AUMA 10/03-053 R006Version V1
Reference
367 FIT367 FITλsafe
162 FIT0 FITλ DD
41 FIT203 FITλ DU
80 %0 %DCD
200 years200 yearsMTBF
92 %64 %SFF
PFDavg = 4.96E-04PFDavg = 1.05E-03T[proof] = 1 year
PFDavg = 6.55E-04PFDavg = 1.92E-03T[proof] = 2 years
PFDavg = 1.13E-03PFDavg = 4.53E-03T[proof] = 5 years
SIL 2SIL 2SIL AC2)
The partial valve stroke test shall be performed 10 times more than the expected stroke demand.1)SIL AC means that the calculated data is within the range for the appropriate SIL, but does not meanthat all relevant conditions of IEC 61508 are complied with.
2)
Table 11: SA .2 type range with AM 01.1/AM 02.1 actuator controls
SA 07.2 – SA 16.2/SAR 07.2 – SAR 16.2Wiring diagram MSP 1110KC3--F18E1 TPA00R1AB-101-000Fault evaluation via collective fault output contact K9
SS (fail as is):ESD with PVST1)ESDSafety function
AUMA 07/07-32 R003Version V58
AUMA 07/07-32 R003Version V57
AUMA 07/07-32 R003Version V56
Reference
1190 FIT646 FIT651 FITλsafe
0 FIT600 FIT290 FITλ DD
219 FIT46 FIT472 FITλ DU
0 %93 %38 %DCD
81 years87 years79 yearsMTBF
–96 %66 %SFF
PFDavg = 9.59E-04PFDavg = 3.09E-04PFDavg = 2.06E-03T[proof] = 1 year
PFDavg = 1.92E-03PFDavg = 5.45E-04PFDavg = 4.12E-03T[proof] = 2 years
PFDavg = 4.78E-03PFDavg = 1.18E-03PFDavg = 1.03E-02T[proof] = 5 years
–SIL 2SIL 2SIL AC2)
The partial valve stroke test shall be performed 10 times more than the expected stroke demand.1)SIL AC means that the calculated data is within the range for the appropriate SIL, but does not meanthat all relevant conditions of IEC 61508 are complied with.
2)
Table 12: SA .2 type range with AMExC 01.1 actuator controls
SAEx 07.2 – SAEx 16.2/SAREx 07.2 – SAREx 16.2Wiring diagram MSP E310KC3--FF8EC TPA00R2AB-1E1-000Fault evaluation via collective fault output contact K9
SS (fail as is):ESD with PVST1)ESDSafety function
AUMA 07/07-32 R003Version V55
AUMA 07/07-32 R003Version V54
AUMA 07/07-32 R003Version V53
Reference
1190 FIT802 FIT808 FITλsafe
0 FIT849 FIT367 FITλ DD
219 FIT48 FIT647 FITλ DU
0 %95 %36 %DCD
81 years66 years62 yearsMTBF
–97 %64 %SFF
18
ActuatorsSafety parameters
SAEx 07.2 – SAEx 16.2/SAREx 07.2 – SAREx 16.2Wiring diagram MSP E310KC3--FF8EC TPA00R2AB-1E1-000Fault evaluation via collective fault output contact K9
SS (fail as is):ESD with PVST1)ESDSafety function
AUMA 07/07-32 R003Version V55
AUMA 07/07-32 R003Version V54
AUMA 07/07-32 R003Version V53
Reference
PFDavg = 9.59E-04PFDavg = 3.65E-04PFDavg = 2.82E-03T[proof] = 1 year
PFDavg = 1.92E-03PFDavg = 6.27E-04PFDavg = 5.64E-03T[proof] = 2 years
PFDavg = 4.78E-03PFDavg = 1.31E-03PFDavg = 1.40E-02T[proof] = 5 years
–SIL 2SIL 2SIL AC2)
The partial valve stroke test shall be performed 10 times more than the expected stroke demand.1)SIL AC means that the calculated data is within the range for the appropriate SIL, but does not meanthat all relevant conditions of IEC 61508 are complied with.
2)
7.4 Specific parameters for actuators of SG .1 type range.
The following parameter tables provide an example of safety instrumented parametersfor the different versions. Complete data records of safety instrumented parametersof all variants are available within the EXIDA test report.
Table 13: SG .1 type range in AUMA NORM version (without actuator controls)
SG 05.1 – SG 12.1/SGR 05.1 – SGR 12.1SGExC 05.1 – SGExC 12.1
SS (Fail as is)ESD with PVST1)ESDSafety function
AUMA 07/07-32 R003Version V3
AUMA 07/07-32 R003Version V2
AUMA 07/07-32 R003Version V1
Reference
434 FIT174 FIT174 FITλsafe
0 FIT244 FIT0 FITλ DD
3 FIT19 FIT263 FITλ DU
0 %93 %0 %DCD
261 years261 years261 yearsMTBF
–95 %39 %SFF
PFDavg = 1.41E-05PFDavg = 1.27E-04PFDavg = 1.15E-03T[proof] = 1 year
PFDavg = 2.82E-05PFDavg = 2.23E-04PFDavg = 2.30E-03T[proof] = 2 years
PFDavg = 7.03E-05PFDavg = 4.84E-04PFDavg = 5.74E-03T[proof] = 5 years
–SIL 2SIL 1SIL AC2)
The partial valve stroke test shall be performed 10 times more than the expected stroke demand.1)SIL AC means that the calculated data is within the range for the appropriate SIL, but does not meanthat all relevant conditions of IEC 61508 are complied with.
2)
Table 14: SG .1 type range with AM 01.1 actuator controls
SG 05.1 – SG 12.1/SGR 05.1 – SGR 12.1Wiring diagram MSP 1110KC3--F18E1 KMS TP110/001 or 114/001Fault evaluation via collective fault output contact K9
SS (fail as is):ESD with PVST1)ESDSafety function
AUMA 07/07-32 R003Version V6
AUMA 07/07-32 R003Version V5
AUMA 07/07-32 R003Version V4
Reference
1062 FIT452 FIT441 FITλsafe
0 FIT683 FIT238 FITλ DD
211 FIT23 FIT631 FITλ DU
0 %97 %27 %DCD
90 years96 years87 yearsMTBF
–98 %50 %SFF
PFDavg = 9.23E-04PFDavg = 2.26E-04PFDavg = 2.76E-03T[proof] = 1 year
19
ActuatorsSafety parameters
SG 05.1 – SG 12.1/SGR 05.1 – SGR 12.1Wiring diagram MSP 1110KC3--F18E1 KMS TP110/001 or 114/001Fault evaluation via collective fault output contact K9
SS (fail as is):ESD with PVST1)ESDSafety function
AUMA 07/07-32 R003Version V6
AUMA 07/07-32 R003Version V5
AUMA 07/07-32 R003Version V4
Reference
PFDavg = 1.84E-03PFDavg = 3.69E-04PFDavg = 5.50E-03T[proof] = 2 years
PFDavg = 4.60E-03PFDavg = 7.14E-04PFDavg = 1.37E-02T[proof] = 5 years
–SIL 2SIL 1SIL AC2)
The partial valve stroke test shall be performed 10 times more than the expected stroke demand.1)SIL AC means that the calculated data is within the range for the appropriate SIL, but does not meanthat all relevant conditions of IEC 61508 are complied with.
2)
Table 15: SG .1 type range with AM 01.1 actuator controls
SG 05.1 – SG 12.1/SGR 05.1 – SGR 12.1Wiring diagram MSP 1111FC3--F18E1 KMS TP104/201Fault evaluation via collective fault output contact K9ESD safety function via EMERGENCY input
ESD with PVST1)ESDSafety function
AUMA 07/07-32 R003Version V24
AUMA 07/07-32 R003Version V23
Reference
461 FIT411 FITλsafe
662 FIT238 FITλ DD
23 FIT600 FITλ DU
97 %28 %DCD
94 years85 yearsMTBF
98 %51 %SFF
PFDavg = 2.21E-04PFDavg = 2.62E-03T[proof] = 1 year
PFDavg = 3.62E-04PFDavg = 5.24E-03T[proof] = 2 years
PFDavg = 7.03E-04PFDavg = 1.30E-02T[proof] = 5 years
SIL 2SIL 1SIL AC2)
The partial valve stroke test shall be performed 10 times more than the expected stroke demand.1)SIL AC means that the calculated data is within the range for the appropriate SIL, but does not meanthat all relevant conditions of IEC 61508 are complied with.
2)
Table 16: SG .1 type range with AMExB 01.1/AMExC 01.1 actuator controls
SGExC 05.1 – SGExC 12.1Wiring diagram MSP E310KC3--FF8EC KMS TP 200/001 or 204/001Fault evaluation via collective fault output contact K9
SS (fail as is):ESD with PVST1)ESDSafety function
AUMA 07/07-32 R003Version V9
AUMA 07/07-32 R003Version V8
AUMA 07/07-32 R003Version V7
Reference
1062 FIT608 FIT614 FITλsafe
0 FIT932 FIT367 FITλ DD
211 FIT26 FIT707 FITλ DU
0 %97 %34 %DCD
90 years72 years66 yearsMTBF
–98 %58 %SFF
PFDavg = 9.23E-04PFDavg = 2.82E-04PFDavg = 3.09E-03T[proof] = 1 year
PFDavg = 1.84E-03PFDavg = 4.51E-04PFDavg = 6.16E-03T[proof] = 2 years
PFDavg = 4.60E-03PFDavg = 8.45E-04PFDavg = 1.53E-02T[proof] = 5 years
–SIL 2SIL 1SIL AC2)
The partial valve stroke test shall be performed 10 times more than the expected stroke demand.1)SIL AC means that the calculated data is within the range for the appropriate SIL, but does not meanthat all relevant conditions of IEC 61508 are complied with.
2)
20
ActuatorsSafety parameters
Table 17: SG .1 type range with AMExB 01.1/AMExC 01.1 actuator controls
SGExC 05.1 – SGExC 12.1Wiring diagram MSP E311FC3--FF8EC KMS TP 204/201Fault evaluation via collective fault output contact K9ESD safety function via EMERGENCY input
ESD with PVST1)ESDSafety function
AUMA 07/07-32 R003Version V26
AUMA 07/07-32 R003Version V25
Reference
618 FIT614 FITλsafe
911 FIT367 FITλ DD
25 FIT676 FITλ DU
97 %35 %DCD
70 years65 yearsMTBF
98 %59 %SFF
PFDavg = 2.78E-04PFDavg = 2.95E-03T[proof] = 1 year
PFDavg = 4.44E-04PFDavg = 5.90E-03T[proof] = 2 years
PFDavg = 8.34E-04PFDavg = 1.47E-02T[proof] = 5 years
SIL 2SIL 1SIL AC2)
The partial valve stroke test shall be performed 10 times more than the expected stroke demand.1)SIL AC means that the calculated data is within the range for the appropriate SIL, but does not meanthat all relevant conditions of IEC 61508 are complied with.
2)
21
ActuatorsSafety parameters
8. SIL Declaration of Conformity (example)
22
ActuatorsSIL Declaration of Conformity (example)
23
ActuatorsSIL Declaration of Conformity (example)
Index
AActuator definition 8Ambient conditions 8Architecture 8
CCommissioning 12Configuration 8
DDC 4Declaration of Conformity 22Decommissioning 12Device types 6Diagnostic coverage (DC) 4
HHFT 4
IInstallation 11Interval for proof test 4
LLambda values 4 , 15 , 17 , 19Lifetime 12Low Demand Mode 15
MMTBF 4MTTR (Mean Time To Resto-ration)
5
Maintenance 14Mean Time Between Failures(MTBF)
4
OOperation 12
PPFD 4PFD for actuator 15Parameters, safety 15Probability of failure 4 , 12Proof test 4 , 14 , 14
RRange of application 6
SSFF 4SIL 4Safe failure fraction (SFF) 4 , 15 , 17 , 19Safety function 4Safety functions 9Safety instrumented function(SIF)
4
Safety instrumented system 9Safety instrumented system(SIS)
4
Safety-related system 4Service conditions 8Setting 8Standards 6
TT proof 4Tests 14
24
ActuatorsIndex
Europe
AUMA Riester GmbH & Co. KG
Plant MüllheimDE 79373 MüllheimTel +49 7631 809 - 0Fax +49 7631 809 - [email protected]
Plant Ostfildern - NellingenDE 73747 OstfildernTel +49 711 34803 - 0Fax +49 711 34803 - [email protected]
Service-Center KölnDE 50858 KölnTel +49 2234 2037 - 900Fax +49 2234 2037 - [email protected]
Service-Center MagdeburgDE 39167 NiederndodelebenTel +49 39204 759 - 0Fax +49 39204 759 - [email protected]
Service-Center BayernDE 85386 EchingTel +49 81 65 9017- 0Fax +49 81 65 9017- [email protected]
AUMA Armaturenantriebe GmbHAT 2512 TribuswinkelTel +43 2252 82540Fax +43 2252 [email protected]
AUMA (Schweiz) AGCH 8965 BerikonTel +41 566 400945Fax +41 566 [email protected]
AUMA Servopohony spol. s.r.o.CZ 250 01 Brandýs n.L.-St.BoleslavTel +420 326 396 993Fax +420 326 303 [email protected]
OY AUMATOR ABFI 02230 EspooTel +358 9 5840 22Fax +358 9 5840 [email protected]
AUMA France S.A.R.L.FR 95157 Taverny CedexTel +33 1 39327272Fax +33 1 [email protected]
AUMA ACTUATORS Ltd.UK Clevedon, North Somerset BS21 6THTel +44 1275 871141Fax +44 1275 [email protected]
AUMA ITALIANA S.r.l. a socio unicoIT 20023 Cerro Maggiore (MI)Tel +39 0331 51351Fax +39 0331 [email protected]
AUMA BENELUX B.V.NL 2314 XT LeidenTel +31 71 581 40 40Fax +31 71 581 40 [email protected]
AUMA Polska Sp. z o.o.PL 41-219 SosnowiecTel +48 32 783 52 00Fax +48 32 783 52 [email protected]
OOO Priwody AUMARU 124365 Moscow a/ya 11Tel +7 495 221 64 28Fax +7 495 221 64 [email protected]
ERICHS ARMATUR ABSE 20039 MalmöTel +46 40 311550Fax +46 40 [email protected]
GRØNBECH & SØNNER A/SDK 2450 København SVTel+45 33 26 63 00Fax+45 33 26 63 [email protected]
IBEROPLAN S.A.ES 28027 MadridTel+34 91 3717130Fax+34 91 [email protected]
D. G. Bellos & Co. O.E.GR 13671 Acharnai AthensTel+30 210 2409485Fax+30 210 [email protected]
SIGURD SØRUM ASNO 1300 SandvikaTel+47 67572600Fax+47 [email protected]
INDUSTRAPT 2710-297 SintraTel+351 2 1910 95 00Fax+351 2 1910 95 [email protected]
Auma Endüstri Kontrol Sistemleri Limited irketiTR 06810 AnkaraTel+90 312 217 32 88Fax+90 312 217 33 [email protected]
AUMA Technology utomations Ltd.UA 02099 KiyivTel+38 044 586-53-03Fax+38 044 [email protected]
Africa
AUMA South Africa (Pty) Ltd.ZA 1560 SpringsTel +27 11 3632880Fax +27 11 [email protected]
A.T.E.C.EG CairoTel +20 2 23599680 - 23590861Fax +20 2 [email protected]
CMR Contrôle Maintenance RégulationTN 1002 TunisTel +216 71 903 577Fax +216 71 903 [email protected]
MANZ INCORPORATED LTD.NG Port HarcourtTel +234-84-462741Fax [email protected]
America
AUMA ACTUATORS INC.US PA 15317 CanonsburgTel +1 724-743-AUMA (2862)Fax +1 [email protected]
AUMA Argentina Representative OfficeAR 1609 BoulogneTel/Fax +54 232 246 [email protected]
AUMA Automação do Brasil Ltda.BR São PauloTel +55 11 [email protected]
AUMA Chile Representative OfficeCL 9500414 BuinTel +56 2 821 4108Fax +56 2 281 [email protected]
TROY-ONTOR Inc.CA L4N 8X1 Barrie OntarioTel +1 705 721-8246Fax +1 705 [email protected]
25
AUMA worldwide
Ferrostaal de Colombia Ltda.CO Bogotá D.C.Tel +57 1 401 1300Fax+57 1 416 [email protected]
PROCONTIC Procesos y ControlAutomáticoEC QuitoTel +593 2 292 0431Fax +593 2 292 [email protected]
Corsusa International S.A.C.PE Miraflores - LimaTel +511444-1200 / 0044 / 2321Fax [email protected]
PASSCO Inc.PR 00936-4153 San JuanTel +18 09 78 77 20 87 85Fax +18 09 78 77 31 72 [email protected]
SuplibarcaVE Maracaibo Estado, ZuliaTel +58 261 7 555 667Fax +58 261 7 532 [email protected]
Asia
AUMA Actuators (Tianjin) Co., Ltd.CN 300457 TianjinTel +86 22 6625 1310Fax +86 22 6625 [email protected]
AUMA INDIA PRIVATE LIMITEDIN 560 058 BangaloreTel +91 80 2839 4656Fax +91 80 2839 [email protected]
AUMA JAPAN Co., Ltd.JP 211–0016 Nakaharaku, Kawasaki-shiKanagawaTel +81 44 863 8371Fax +81 44 863 [email protected]
AUMA ACTUATORS (Singapore) Pte Ltd.SG 569551 SingaporeTel +65 6 4818750Fax +65 6 [email protected]
AUMA Actuators Middle East W.L.L.AE 15268 Salmabad 704Tel +973 17877377Fax +973 [email protected]
PERFECT CONTROLS Ltd.HK Tsuen Wan, KowloonTel +852 2493 7726Fax +852 2416 [email protected]
DW Controls Co., Ltd.KR 153-702 SeoulTel +82 2 2624 3400Fax +82 2 2624 [email protected]
Sunny Valves and Intertrade Corp. Ltd.TH 10120 Yannawa BangkokTel +66 2 2400656Fax +66 2 [email protected]/
Top Advance Enterprises Ltd.TW Jhonghe City Taipei Hsien (235)Tel +886 2 2225 1718Fax +886 2 8228 [email protected]
Australia
BARRON GJM Pty. Ltd.AU NSW 1570 ArtarmonTel +61 294361088Fax +61 [email protected]
26
AUMA worldwide
27
AUMA worldwide
AUMA Riester GmbH & Co. KGP.O.Box 1362D 79373 MuellheimTel +49 7631 809 - 0Fax +49 7631 809 - [email protected]
Y005.687/003/en/3.13
For detailed information on AUMA products refer to the Internet: www.auma.com