MAGNETROL 961

SIL Safety Manual for
Echotel Model 961/962
Functional Safety Manual
Ultrasonic
Level Switches
This manual complements and is intended to be used with
the Magnetrol Echotel Model 961/962 Ultrasonic Single and
Dual Point Level Switches Installation and Operating Manual
(Bulletin 51-646, dated October 2008 or later).
Application
Echotel Model 961/962 ultrasonic level switches utilize
pulsed signal technology to detect high, low, or dualpoint level in a broad range of liquid media applications.
The advanced self-test technology provides reliability
and continuous testing of electronics, transducer, piezoelectric crystals, and electromagnetic noise.
Benefits
Model 961
Model 962
The Echotel Model 961/962 ultrasonic level switches
provide the following benefits:
• Single or dual point liquid level measurement
• Adjustable time-delay for turbulent aerated liquids
• Reliable liquid level measurement independent of
changes in media density, conductivity, or temperature
• Relay output or mA current shift with separate
malfunction indication
• Integral or remote mount electronics
• Pulsed signal technology
• Extensive FM, CSA, and ATEX explosion proof and
intrinsically safe approvals
• Suitable for Safety Integrity Level (SIL) 2 loops
Echotel Model 961/962 Ultrasonic Level Switches
Table of Contents
SIL Safety Manual for Model 961/962....................................1
Echotel Model 961/962 Ultrasonic Level Switches...........1
Application.......................................................................1
Benefits ............................................................................1
1.0 Introduction ...................................................................3
1.1 Product Description ..................................................3
1.2 Theory of Operation.................................................3
1.2.1 Transducer Design..........................................4
1.2.2 Transducer Materials ......................................4
1.3 Determining Safety Integrity Level (SIL) ..................4
2.0 Applicable Models ..........................................................5
3.0 Mean Time To Repair (MTTR).....................................5
4.0 Supplementary Documentation......................................5
5.0 Instructions ....................................................................6
5.1 Systematic Limitations ..............................................6
5.1.1 Application Locations.....................................6
5.1.2 Operating Temperature ..................................6
5.1.3 Operating Pressure .........................................6
5.1.4 Environmental................................................6
5.2 Skill Level of Personnel .............................................6
5.3 Necessary Tools .........................................................7
5.4 Storage ......................................................................7
5.5 Installation ................................................................7
5.5.1 Hygienic-Specific Installation .........................8
5.5.2 Pump-Specific Installation..............................8
5.6 Configuration ...........................................................8
5.6.1 Time-delay Potentiometer ..............................8
5.6.2 Level Test Push Button...................................8
5.6.3 Malfunction Test Push Button........................9
5.6.4 High/Low DIP Switch ...................................9
5.6.5 Independent/Joint DIP Switch.......................9
5.6.6 Loop Test Push Button...................................9
5.6.7 Fault Test Push Button .................................10
5.6.8 22/3.6 DIP Switch .......................................10
5.6.9 PC/LC DIP Switch ......................................10
5.7 Site Acceptance Testing ...........................................10
5.8 Maintenance ............................................................10
5.8.1 Diagnostics...................................................11
5.8.2 Troubleshooting ...........................................11
6.0 Appendices ...................................................................12
6.1 SIL Declaration of Conformity ...............................12
6.2 FMEDA Report Management Summary ................13
6.2.1 Model 961 Loop-Powered Level Switch .......13
6.2.2 Model 961 AC/DC Ultrasonic
Level Switch with Relay Output...................13
6.2.3 Model 962 Loop-Powered Ultrasonic
Level Switches ..............................................14
6.2.4 Model 962 AC/DC Ultrasonic
Level Switch with Relay Output...................14
6.3 Report - Lifetime of Critical Components ..............15
51-650 Echotel SIL Safety Manual
1.0
Introduction
1.1
Product Description
Echotel Model 961 and 962 ultrasonic level switches
utilize pulsed signal technology to detect high, low, or dual
point level in a broad range of liquid media applications.
Model 961 is a single point level switch. Model 962 is a
dual point switch used as a level controller or to control
pumps in an auto-fill or auto-empty mode.
Both Model 961 and 962 switches are suitable for use in
Safety Integrity Level (SIL) 2 loops.
1.2
Ultrasonic
transducer
Transmit
crystal
Figure 1
Ultrasonic Signal Transmission
Across Transducer Gap
51-650 Echotel SIL Safety Manual
Receive
crystal
Theory of Operation
Model 961/962 switches utilize ultrasonic energy to detect
the presence or absence of liquid in a single or dual point
transducer. Ultrasonic contact level technology uses highfrequency sound waves that are easily transmitted across a
transducer gap (see Figure 1) in the presence of a liquid
media, but are attenuated when the gap is dry. Mode 961/962
switches use an ultrasonic frequency of 2 MHz to perform
this liquid level measurement in a wide variety of process
media and application conditions.
The transducer uses a pair of piezoelectric crystals that are
encapsulated in epoxy at the tip of the transducer. The crystals are made of a ceramic material that vibrates at a given
frequency when subjected to an applied voltage. The transmit crystal converts the applied voltage from the electronics
into an ultrasonic signal. When liquid is present in the gap,
the receive crystal senses the ultrasonic signal from the
transmit crystal and converts it back to an electrical signal.
This signal is sent to the electronics to indicate the presence
of liquid in the transducer gap. When there is no liquid
present, the ultrasonic signal is attenuated and is not detected
by the receive crystal.
3
1.2.1 Transducer Design
Magnetrol’s advanced transducer design performs in difficult
process conditions. Model 961 has a tip-sensitive transducer
with an arched gap increasing its performance in aerated or
foamy liquids. Model 962 has a tip-sensitive lower gap and
flow-through upper gap permitting separations of 125 inches
(318 cm).
1.2.2 Transducer Materials
A broad selection of transducer materials is available for the
Model 961/962. Metallic transducers include 316 SS,
Hastelloy® C, and Monel®. The 316 SS transducer has a
NACE construction option for sour gas service, and can
also be built per ASME B31.1 and B31.3 piping codes.
Thermoplastic transducers include Kynar® and CPVC.
These corrosion resistant plastic transducers feature a stiffening tube that runs the length of the transducer for extra
rigidity. Kynar-faced 316 SS flange options are offered with
the Kynar transducers.
1.3
Table 1
SIL vs. PFDavg
Safety
Integrity Level
(SIL)
4
3
2
1
Target Average
Probability of Failure
on Demand (PFDavg)
≥10-5 to <10-4
≥10-3 to <10-2
≥10-2 to <10-1
0
1
2
SIL 1
SIL 2
60% to <90% SIL 1
SIL 2
SIL 3
Medium: 90% to <99% SIL 2
SIL 3
Low:
High: ≥99%
4
Table 2 can be used to determine the achievable SIL as a
function of the Hardware Fault Tolerance (HFT) and the
Safe Failure Fraction (SFF) for the complete safety system
(Type B–complex components as per IEC 61508 Part 2) of
which the level transmitter is one component.
Hardware Fault
Tolerance (HFT)
Not
Allowed
None: <60%
Tables 1 and 2 define the criteria for the achievable SIL
against the target mode of operation in Demand Mode
Operation.
Table 1 shows the relationship between the SIL and the
Probability of Failure on Demand Average (PFDavg).
≥10-4 to <10-3
Table 2
Minimum Hardware Fault Tolerance
SFF
Determining Safety Integrity Level (SIL)
SIL 3
51-650 Echotel SIL Safety Manual
2.0
Applicable Models
This manual is applicable to the following models of the
Echotel ultrasonic level switches with relay output or
current shift output:
• Model 961 Single Point Level Switches
• Model 962 Dual Point Level Switches
3.0
Mean Time To Repair (MTTR)
SIL determinations are based on a number of factors including
the Mean Time To Repair (MTTR). The analysis for the
Echotel Model 961/962 ultrasonic level switch is based on
a MTTR of 24 hours.
4.0
Supplementary Documentation
Refer to the following documents as supplements to this
Echotel Model 961/962 SIL Safety Manual:
• Echotel Model 961/962 Ultrasonic Single and Dual Point
Level Switches Installation and Operating Manual
• Magnetrol Model 961 AC/DC Ultrasonic Level Switch with
Relay Output, Failure Modes, Effects, and Diagnostic Analysis
• Magnetrol Model 961 Loop-Powered Ultrasonic Level
Switch, Failure Modes, Effects, and Diagnostic Analysis
• Magnetrol Model 962 AC/DC Ultrasonic Level Switch with
Relay Output, Failure Modes, Effects, and Diagnostic Analysis
• Magnetrol Model 962 Loop-Powered Ultrasonic Level
Switch, Failure Modes, Effects, and Diagnostic Analysis
NOTE: The Failure Modes, Effects, and Diagnostic Analysis (FMEDA)
reports can be found in the Downloads tab of the Echotel
961/962 on our website at: www.magnetrol.com.
51-650 Echotel SIL Safety Manual
5
5.0
Instructions
5.1
Systematic Limitations
The following application and environmental limitations
must be observed to avoid systematic failures.
5.1.1 Application Locations
The Model 961/962 ultrasonic level switch should be located
for easy access for service, configuration, and monitoring.
There should be sufficient headroom to allow installation
and removal of the unit. Special precautions should be
made to prevent exposure to corrosive atmosphere, excessive
vibration, shock, or physical damage.
5.1.2 Operating Temperature
The ambient temperature range for the 961/962 electronics is
-40° to +160° F (-40° to + 70° C). The operating temperature for the transducer is dependent on transducer material
(see Table 3).
Table 3
9A1/9M1 Transducer Operating Temperatures
316 Stainless Steel,
Hastelloy C, and Monel
-40° to +325° F (-40° to +163° C)
Kynar
-40° to +250° F (-40° to +121° C)
CPVC
-40° to +180° F (-40° to 82° C)
5.1.3 Operating Pressure
Maximum operating pressures are dependent on the transducer material. Refer to Section 3.4 in the Echotel Model
961/962 Ultrasonic Level Switches Installation and Operating
Manual (Bulletin 51-646).
5.1.4 Environmental
See Section 3.4 of the Echotel Model 961/962 Ultrasonic
Single and Dual Point Level Switches Installation and
Operating Manual (Bulletin 51-646) for environmental
limitations.
5.2
Skill Level of Personnel
Personnel following the procedures of this safety manual
should have technical expertise equal to or greater than that
of a qualified instrument technician.
6
51-650 Echotel SIL Safety Manual
5.3
Necessary Tools
High Alarm
Fill Line
Dual Point Alarm
No special equipment or tools are required to install Echotel
Model 961/962 ultrasonic level switch. The following items
are recommended:
• Wrenches, flange gaskets, and flange bolting appropriate for
process connection(s)
• Screwdrivers and assorted tools for making conduit and
electrical connections
Pump
Protection
• Digital multimeter or DVM for troubleshooting
Low Alarm
5.4
Storage
Figure 2
Model 961/962 should be stored in its original shipping
box and not be subjected to temperatures outside the storage temperature range -40° F to +160° F (-40° C to
+70° C), as shown in Section 3.1 of the Echotel Model
961/962 Ultrasonic Level Switches Installation and Operating
Manual (Bulletin 51.646).
Typical Mounting Orientations
5.5
Use wrench on flats
Process
connection
Figure 3
Vertical Mounting
Bottom View
Installation
The Model 961 single point switch may be used for high or
low level alarm, overfill protection, or seal pot level and
pump protection. Model 961 can be mounted vertically or
horizontally in vessels, bridles, or pipes.
The Model 962 dual point switch may be used to measure
high/low, high/high, or low/low levels. It can be used as a
level controller or to control pumps in an auto-fill or autoempty mode. Model 962 must be top mounted.
Refer Figures 2–5 to the Echotel Model 961/962 Ultrasonic
Single and Dual Point Level Switches Installation and
Operating Manual (Bulletin 51.646) for the proper installation instructions.
Bottom View
Figure 4
Figure 5
Horizontal Mounting
Nozzle Mounting
51-650 Echotel SIL Safety Manual
7
5.5.1 Hygienic-Specific Installation
The hygienic version of the Model 961 is available with a
deep-drawn 304 stainless steel housing. A variety of hygienic
process connections are offered for use in food and beverage,
pharmaceutical, and biotechnology applications. These
hygienic transducers have 3-A (Authorization #596), EHEDG
certification (per TNO Report # V4772/01) and a 20 Ra
finish providing a uniform and ultra-smooth surface that
inhibits microbial growth. Electron beam welding technology
is utilized to facilitate a crevice-free surface inside the transducer tip. This allows these transducers to be used in a wide
variety of hygienic applications where CIP (clean-in-place) is
used to remove any contamination from the transducer surface.
5.5.2 Pump-Specific Installation
A DIP switch on the Model 962 allows it to be configured
to control level, or to function as a pump controller. In the
pump control mode the unit can perform auto-fill or autoempty of tanks, sumps, or wet wells. The tip sensitive lower
gap allows liquid levels to be pumped down to within 1⁄4"
from the bottom of the vessel. The rigidity of the flow
through upper gap allows the Model 962 to be used even
when sumps experience severe turbulence from vessel fill lines.
5.6
Configuration
Refer to Section 2.5 in the Echotel Model 961/962
Ultrasonic Single and Dual Point Level Switches Installation
and Operating Manual (Bulletin 51.646) for complete
configuration instructions.
5.6.1 Time-Delay Potentiometer
The time-delay potentiometer is used in applications where
turbulence or splashing may cause false level alarm. The
response time can be adjusted from factory-set standard of
0.5 seconds to a maximum of 45 seconds. The time-delay
potentiometer is an option for both Model 961 and Model 962
in either line-powered or loop-power configuration.
5.6.2 Level Test Push Button
The level test push button is used to manually test the
DPDT process level relay and whatever is connected to the
relay. Pressing this push button reverses the state of the
DPDT relay from engaged to de-engaged, or vise-versa.
The level test push button is an option for both Model 961
and Model 962 in line-powered configuration only.
8
51-650 Echotel SIL Safety Manual
5.6.3 Malfunction Test Push Button
The malfunction test push button is used to manually test
the SPDT malfunction relay and whatever is connected to
the relay. Pressing and holding this push button for 2 seconds
causes the SPDT relay to de-engage, indicating a fault
condition. The malfunction test push button is an option
for both the Model 961 and Model 962 in line-powered
configuration only.
5.6.4 High/Low DIP Switch
The Hi/Lo DIP switch is used to select whether the switch
is used as a high-level fail-safe or a low-level fail-safe switch.
See Section 2.5 of the Echotel Model 961/962 Ultrasonic
Single and Dual Point Level Switches Installation and
Operating Manual (Bulletin 51.646) for high/low DIP
switch configuration tables.
5.6.5 Independent/Joint DIP Switch
The I/J DIP switch is used to configure the SPDT malfunction relay to act independently or jointly with the DPDT
process-level relay. In the factory-set I position, the SPDT
and DPDT relays act independent of each other. In the
J position, both the SPDT and DPDT relays will de-engage
when a fault is detected. The I/J DIP switch is an option for
the Model 961 in line-powered configuration only.
5.6.6 Loop Test Push Button
The loop test push button is used to manually test the loop
current output. For Model 961, pressing the loop test push
button reverses the output from 8 mA to 16 mA or from
16 mA to 8 mA. For Model 962, pressing the loop test push
button changes the output from 8 mA to 12 mA, 12 mA to
16 mA, or 16 mA to 8 mA.
51-650 Echotel SIL Safety Manual
9
5.6.7 Fault Test Push Button
The fault test push button is used to manually change the
mA values to that selected at the 22/3.6 DIP switch.
Pressing this push button for 2 seconds simulates a circuit
test failure. The output goes to the selected fault current of
either 22 or 3.6 mA, and all 3 LEDs go dark. The fault test
push button is an option on both Model 961 and Model 962
in loop-powered configuration only.
5.6.8 22/3.6 DIP Switch
The 22/3.6 switch is used to produce a 22 mA or 3.6 mA
output when the unit detects a fault. The 22/3.6 switch is
on both the Model 961 and Model 962 in loop-powered
configuration only.
5.6.9 PC/LC DIP Switch
The PC/LC DIP switch is used to select pump control (PC)
or level control (LC) mode. In PC mode, the switch functions as a pump controller where the relays latch to enable
an auto fill or auto empty operation. In LC mode, the
switch functions as a level controller where the relays operate independently of each other. See Section 2.5 of the
Echotel Model 961/962 Ultrasonic Single and Dual Point
Level Switches Installation and Operating Manual (Bulletin
51.646) for proper setting of the PC/LC DIP switches.
5.7
Site Acceptance Testing
Complete a site acceptance test to ensure proper operation
after installation and configuration. Results of site acceptance testing should be recorded for future reference.
5.8
Maintenance
• Report all failures to Magnetrol.
• Firmware can only be upgraded by factory personnel.
10
51-650 Echotel SIL Safety Manual
5.8.1 Diagnostics
Model 961/962 has a unique diagnostics feature to assist in
troubleshooting should a failure occur. A microprocessor in
the electronics continuously monitors all self-test data.
Should a fault occur, the microprocessor can determine
whether the malfunction is due to the electronics, transducer,
piezoelectric crystals, or the presence of environmental noise.
Table 4
Diagnostic Push Buttons and LED Indications
Electronics Version
Push Button
LED
961 with 5 amp relays
LEVEL TEST
FAULT
961 with current shift
LOOP TEST
FAULT
962 with 5 amp relays
LEVEL TEST
FAULT
962 with 5 amp relays
LOOP TEST
16 mA
Table 4 shows the push buttons and LEDs used for each
version of the 961/962 for diagnostic troubleshooting:
5.8.2 Troubleshooting
Model 961/962 has a diagnostic push button and Fault LED
used to assist in troubleshooting the switch (see Table 5).
Table 5
Troubleshooting Faults and Corrective Actions
Flashes
1 flash
2 flashes
3 flashes
Fault
Action
Indicates a problem with either the
transducer, piezoelectric crystals,
or the interconnection wiring.
Check wiring inside the housing to
make sure that all wires are
secure in their respective terminal
blocks. Make sure that all the
terminal block screws are fully
tightened. If all wires are secure
then contact the factory. Replace
transducer if needed. Refer to
Section 3.8 of the Installation and
Operating Manual for proper
replacement part numbers.
Indicates a problem with one of
the electronics boards.
Contact the factory for a replacement electronics module. Refer
Section 3.8 of the Installation and
Operating Manual for spare electronics modules part numbers.
Indicates excessive levels of
environmental noise.
Check if any source may be causing the interference, such as VFD
(variable frequency drive), radiated
electrical interference (two-way
radio transceiver) or mechanical
vibration from nearby source.
Refer to Section 3.7 of the Echotel Ultrasonic Single and
Dual Point Level Switches Installation and Operating Manual
(Bulletin 51.646) for troubleshooting device errors.
51-650 Echotel SIL Safety Manual
11
6.0
Appendices
6.1
SIL Declaration of Conformity
Functional safety according to IEC 61508.
Magnetrol International, Incorporated 5300 Belmont Road,
Downers Grove, Illinois 60515 declares as the manufacturer,
that the level switches:
Echotel Model 961/962 Ultrasonic Single and
Dual Point Level Switches
are suitable for use in safety instrumented systems according
to IEC 61508, if the safety instructions and following
parameters are observed:
FIT = Failure in Time (1×10-9 failures per hour)
Model 961
Loop-Powered
Model 961 AC/DC
Line-Powered
Model 962
Loop-Powered
Model 961 AC/DC
Line-Powered
2
2
2
2
Proof Test Interval
1 Year
1 Year
1 Year
1 Year
SFF
91.4%
92.0%
91.8%
91.5%
1.61E-04
1.77E-04
1.87E-04
2.31E-04
0 FIT
0 FIT
0 FIT
0 FIT
96 FIT
106 FIT
110 FIT
130 FIT
λdd
288 FIT
351 FIT
362 FIT
427 FIT
λdu
36 FIT
40 FIT
42 FIT
52 FIT
Product
SIL
PFDavg Œ
λsd
λsu
Œ
As determined in compliance with ANSI/ISA-84.01 clause 9.2.3 for 1oo1 system.
Magnetrol International, Incorporated
5300 Belmont Road
Downers Grove, Illinois 60515
12
Name
Name
Title
Title
Date
Date
51-650 Echotel SIL Safety Manual
6.2
FMEDA Report Management Summary
6.2.1 Model 961 Loop-powered Level Switch
The Model 961 ultrasonic level switch is a complex device
classified as Type B according to IEC61508, having a hardware
fault tolerance of 0. This 24 VDC loop-powered unit contains
self diagnostics programmed to output either 3.6 mA or
22 mA during a failure state. Additionally, any output that
exceeds the nominal values of 8 mA and 16 mA by a
tolerance of ±1.6 mA must be detected as a fault by the
logic solver. The FMEDA analysis assures the diagnostic
signal is being transmitted to a logic solver programmed to
detect over-scale and under-scale currents.
The Model 961 failure rates are shown on Table 6.
Table 6
Model 961 IEC 61508 Format Failure Rates
Failure Category
λsd
λsu
λdd
λdu
SFF
Model 961
0 FIT
96 FIT
288 FIT
36 FIT
91.4%
These failure rates can be used in a probabilistic model of a
Safety Instrumented Function (SIF) to determine suitability
in part of Safety Instrumented System (SIS) usage in a
particular Safety Integrity Level (SIL). A more complete
listing of failure rates is provided in Section C.4 of the
FMEDA for the 961 Loop-Powered Switch.
6.2.2 Model 961 AD/DC Ultrasonic Level Switch
with Relay Output
The Model 961 ultrasonic level switch is a complex device
and is classified as Type B according to IEC 61508 having a
hardware fault tolerance of 0. The Model 961 ultrasonic
level switch is an 18–32 VDC or 102–265 VAC power
device that provides relay outputs. Model 961 has only one
output failure state (fail-safe), with the relay de-energized.
Model 961 failure rates are shown in Table 7.
Table 7
Model 961 IEC 61508 Format Failure Rates
Failure Category
λsd
λsu
λdd
λdu
SFF
Model 961
0 FIT
106 FIT
351 FIT
40 FIT
92.0%
A more complete listing of failure rates is provided in
Section C.4 of the FMEDA for the 961 Line-Powered Switch.
51-650 Echotel SIL Safety Manual
13
6.2.3 Model 962 Loop-powered
Ultrasonic Level Switches
The Model 962 ultrasonic level switch is a complex device
classified as Type B according to IEC61508, having a hardware
fault tolerance of 0. This 24 VDC loop-powered unit
contains self diagnostics programmed to output either 3.6 mA
or 22 mA during a failure state. Additionally, any output
that exceeds the nominal values of 8 mA and 16 mA by a
tolerance of ±1.6 mA must be detected as a fault by the
logic solver. The FMEDA analysis assumes the diagnostic
signal is being transmitted to a logic solver programmed to
detect over-scale and under-scale currents.
Model 962 failure rates are shown in Table 8.
Table 8
Model 962 IEC 61508 Format Failure Rates
Failure Category
λsd
λsu
λdd
λdu
SFF
Model 961
0 FIT
110 FIT
362 FIT
42 FIT
91.8%
A more complete listing of failure rates is provided in Table 1,
of the FMEDA for the 962 Loop-powered Switch.
6.2.4 Model 962 AC/DC Ultrasonic Level Switch
with Relay Output
The Model 962 ultrasonic level switch is a complex device
classified as Type B according to IEC61508, having a hardware
fault tolerance of 0. The Model 962 ultrasonic level switch
is an 18–32 VDC or 102–265 VAC power device that provides relay outputs. The Model 962 has only one output
failure state (fail-safe) with the relay de-energized.
The Model 962 failure rates are shown in Table 9.
Table 9
Model 962 IEC 61508 Format Failure Rates
Failure Category
λsd
λsu
λdd
λdu
SFF
Model 961
0 FIT
130 FIT
427 FIT
52 FIT
91.5%
A complete listing of failure rates is provided in Table 1 of
the FMEDA for the 962 Line-Powered Switch.
14
51-650 Echotel SIL Safety Manual
6.3
Report - Lifetime of Critical Components
According to Section 7.4 of IEC 61508-2, a useful lifetime,
based on experience, should be assumed.
Although a constant failure rate is assumed by the probabilistic estimation method, this only applies provided that
the useful lifetime of components is not exceeded. Beyond
their useful lifetime, the result of the probabilistic calculation method is therefore meaningless, as the probability of
failure significantly increases with time. The useful lifetime
is highly dependent on the subsystem itself and its operating
conditions.
This assumption of a constant failure rate is based on the
bathtub curve. Therefore it is obvious that the PFDavg
calculation is only valid for components that have this
constant domain and that the validity of the calculation is
limited to the useful lifetime of each component.
As there are no electrolytic capacitors used, there are no
electrical components that limit the useful lifetime of
the system.
Based on general field failure data, a useful life period of
approximately 50 years is expected for the Echotel Model
961/962 Ultrasonic Level Switches.
When plant experience indicates a shorter useful lifetime
than indicated, the number based on plant experience
should be used.
51-650 Echotel SIL Safety Manual
15
References
• ANSI/ISA-84.00.01-2004 Part 1 (IEC 61511-1Mod)
“Functional Safety: Safety Instrumented Systems for
the Process Industry Sector –Part 1 Hardware and
Software Requirements”
• ANSI/ISA-84.00.01-2004 Part 2 (IEC 61511-2Mod)
“Functional Safety: Safety Instrumented Systems for
the Process Industry Sector –Part 2 Guidelines for the
Application of ANSI/ISA84.00.01-2004 Part 1 (IEC
61511-1 Mod) –Informative”
• ANSI/ISA-84.00.01-2004 Part 3 (IEC 61511-3Mod)
“Functional Safety: Safety Instrumented Systems for the
Process Industry Sector –Part 3 Guidance for the
Determination of the Required Safety Integrity Levels –
Informative”
• ANSI/ISA-TR84.00.04 Part 1 (IEC 61511 Mod)
“Guideline on the Implementation of ANSI/ISA84.00.01-2004”
Disclaimer
The SIL values in this document are based on an FMEDA analysis using exida’s SILVER Tool. Magnetrol accepts
no liability whatsoever for the use of these numbers of for the correctness of the standards on which the general
calculation methods are based.
ASSURED QUALITY & SERVICE COST LESS
Service Policy
Owners of Magnetrol controls may request the return of
a control or any part of a control for complete rebuilding
or replacement. They will be rebuilt or replaced promptly.
Controls returned under our service policy must be
returned by prepaid transportation. Magnetrol will repair
or replace the control at no cost to the purchaser (or
owner) other than transportation if:
1. Returned within the warranty period; and
2. The factory inspection finds the cause of the claim to
be covered under the warranty.
If the trouble is the result of conditions beyond our
control; or, is NOT covered by the warranty, there will be
charges for labor and the parts required to rebuild or
replace the equipment.
In some cases it may be expedient to ship replacement
parts; or, in extreme cases a complete new control, to
replace the original equipment before it is returned. If this
is desired, notify the factory of both the model and serial
numbers of the control to be replaced. In such cases, credit
for the materials returned will be determined on the basis
of the applicability of our warranty.
Return Material Procedure
So that we may efficiently process any materials that
are returned, it is essential that a “Return Material
Authorization” (RMA) number be obtained from the
factory prior to the material’s return. This is available
through Magnetrol’s local representative or by contacting
the factory. Please supply the following information:
1.
2.
3.
4.
5.
Company Name
Description of Material
Serial Number
Reason for Return
Application
Any unit that was used in a process must be properly
cleaned in accordance with OSHA standards, before it is
returned to the factory.
A Material Safety Data Sheet (MSDS) must accompany
material that was used in any media.
All shipments returned to the factory must be by prepaid
transportation.
All replacements will be shipped F.O.B. factory.
No claims for misapplication, labor, direct or consequential
damage will be allowed.
5300 Belmont Road • Downers Grove, Illinois 60515-4499 • 630-969-4000 • Fax 630-969-9489 • www.magnetrol.com
145 Jardin Drive, Units 1 & 2 • Concord, Ontario Canada L4K 1X7 • 905-738-9600 • Fax 905-738-1306
Heikensstraat 6 • B 9240 Zele, Belgium • 052 45.11.11 • Fax 052 45.09.93
Regent Business Ctr., Jubilee Rd. • Burgess Hill, Sussex RH15 9TL U.K. • 01444-871313 • Fax 01444-871317
Copyright © 2010 Magnetrol International, Incorporated. All rights reserved. Printed in the USA.
Magnetrol, Magnetrol logotype, and Echotel are registered trademarks of Magnetrol International.
Hastelloy® is a registered trademark of HAYNES INTERNATIONAL, INC. (DELAWARE CORPORATION).
Monel® is a registered trademark of the INCO family of companies.
Kynar® is a registered trademark of Elf Atochem North America, Inc.
BULLETIN: 51-650.0
EFFECTIVE: July 2010