Schneider Electric SEPED303001EN Extract Functional Safety Sepam 80 Instructions

Schneider Electric SEPED303001EN Extract Functional Safety Sepam 80

Functional Safety (IEC 61508)

The safety functions listed in the table below have obtained the “Safety Integrity Level” classification

• SIL 2, when used with “undervoltage coils”.
• SIL 1, when used with “shunt tripping coils”.
• SIL 2, when used with “shunt tripping coils” and when associated with an external safety device (an upstream backup protection relay shall be connected to the downstream trip coil, either directly or through the watchdog relay of the downstream protection relay).

Functions assessed

Safety for use

The limitation of use are

• Wiring schematics shall comply with requirements defined in the “SIL Wiring schematics of Sepam series 80” section.
• Digital Inputs used in the safety functions shall be redundant and connected to two different MES modules. Sensors connected to these inputs shall have a safety level adapted to the requirements of the function provided by the Sepam series 80.
• Analogue sensors shall have a safety level adapted to the requirements of the function provided by the Sepam series 80.
• External actuators driven by Sepam series 80 outputs shall have an adequate level of safety.
• Parameter settings shall be coherent and be validated during set up.
• Periodic maintenance tests shall be carried out every 5 years to detect.
  non-covered faults.

ATEX
Only 49 RMS safety function with undervoltage coil is under the scope of the INERIS 16ATEX0029X EC type examination certificate. Install, use and maintain the Sepam series 80 protection relays in accordance with document reference “Sepam series 80 – Use in ATEX Atmospheres” SEPED303007. This document can be downloaded from www.schneider-electric.com

Logic using a shunt tripping In the case of logic using a shunt tripping, the tripping coils are not permanently supplied and they must be supplied via output contacts 01 and 02 to trip the MV circuit breaker  If Sepam series 80 is “in operation”, i.e. exhibits no anomalies, it is able to detect all faults on the MV network (e.g. short-circuit). In this case

• The output contacts 01 and 02t11 close, thus immediately tripping the MV circuit-breaker. The move to the “safe” position thus takes place. Only one of the outputs, 01 or 02, in the closed status is required to trip the circuit breaker.

• The watchdog relay remains in a “no fault” status (watchdog coil is supplied).
  In event of a move to the “fall back” position (further to product internal failure):

• The output contacts 01 and 02 remain open, thus not tripping the MV circuitbreaker. Priority is thus given to availability of the installation to the detriment of its safety.

• The watchdog relay moves to a “fault” status (no supply to watchdog coil). It
  informs the user that it can no longer perform its safety function and the automation system external to the product must implement, for the time required for its maintenance (24 hours at most), a replacement device offering the same level of safety.

This operation configuration is not fail safe as, in event of failure of the power supply used to control the coils; the Sepam series 80 cannot trip the network.

Wiring schemes when using 2 shunt trip coils

Documents / Resources

| Schneider Electric SEPED303001EN Extract Functional Safety Sepam 80 [pdf] Instructions
SEPED303001EN, Extract Functional Safety Sepam 80, Functional Safety Sepam 80, Safety Sepam 80, Sepam 80
---|---

Read User Manual Online (PDF format)

Read User Manual Online (PDF format)  >>

Download This Manual (PDF format)

Download this manual  >>