Functional Safety certification

Introduction

The TSX PAY 262 Emergency Stop module (ES module) is certified according to EN SO 13849-1 and IEC 61508 by INERIS.

It can be used as part of safety functions:

safety of machinery according to EN ISO 13849-1
functional safety of programmable electronic equipment according to IEC 61508
reference of the Declaration of Conformity is S1B6233700

Certification

The TSX PAY 262 is certified for:

EN ISO 13849-1: Safety of machinery for use in applications up to category 4
IEC 61508 and IEC 62061 for use in applications up to and including SIL3

For the certification of the functional aspects only the TSX PAY 262 and its accessories are taken into account. The complete system that contains the TSX PAY 262 and ensures the functional safety of a machine or system is not certified.

The following architectures have been selected to be certified:

Emergency Stop with double contact SIL3
Stop with single contact SIL1

This table summarizes the certification safety functions:

Certification	Emergency Stop with double contact	Stop with single contact
IEC 61508	SIL3	SIL1
IEC 62061	SIL3 CL	SIL1 CL
EN 954-1	Category 4	Category 2
EN ISO 13849-1	Category 4 PL “e“	Category 2 PL “c“
IEC 60204-1	Category stop 0	Category stop 0

This table summarizes the result of safety analysis of the Emergency Stop and Stop functions for the TSX PAY 262 module:

Standard	Parameter	Emergency Stop with double contact	Stop with single contact
IEC 61508 Ed2	PFD10y avg	1.04 x 10-4	3.14 x 10-3
	PFD1y avg	1.03 x 10-5	3.15 x 10-4
	PFHequ_1y	1.17 FIT	35.9 FIT
	SFF channel 1	72.9 %	–
	SFF channel 2	72.9 %	–
	SFF global	98.4 %	72.9 %
	Type	A	A
	HFT	1	0
	DC of proof test	99.9%	99.9%
	SIL1	3	1
IEC 620612	SIL CL claimed	3	1
EN 954-13	Category	4	2
EN / ISO 13849-14	PL5	e	c
	Category	4	2
	PFD10y avg	1.04 x 10-4	3.14 x 10-3

(1)The TSX PAY 262 can be used in a safety function up to SIL3 or SIL1. Using an ES module is a necessary but not sufficient precondition for the certification of a SIL3 application. A SIL3 application must also fulfil the requirements of IEC 61508.

(2)Because the standard IEC 62061 is an integration standard, this standard distinguishes the global safety function from components which constitute the safety function.9

(3)According to table 6 of IEC 62061 (2005).

(4)According to table 4 of EN ISO 13849-1 (2008).

(5)The PL evaluation has to be done at the system level. The fitter or the integrator of the Preventa TSX PAY 262 has to do the system PL evaluation by including sensor and actuator data with numbers from the table above. A typical example is given below.