Product Data Sheet Deltav Sis Electronic Marshalling Deltav Sis en 57822
Product Data Sheet Deltav Sis Electronic Marshalling Deltav Sis en 57822
Product Data Sheet Deltav Sis Electronic Marshalling Deltav Sis en 57822
February 2021
Introduction
The DeltaV SIS process safety system has a uniquely scalable
modular architecture that is based on the CHARMs Smart
Logic Solver (CSLS) and the unprecedented flexibility and ease
of use of the Emerson Electronic Marshalling solution. Each
CSLS provides I/O processing, SIL 3-capable logic solving,
and diagnostics in a single logic solver. The CSLS supports up
to 96 individually configurable channels, allowing flexibility for
implementing safety instrumented functions and is designed
specifically for multi-core home run cables or field junction box
installation. All communications are completely redundant
from the channel (LS IS CHARM) to the CSLS. Integrated
HART® I/O brings field diagnostics into the CSLS.
www.emerson.com/deltav 2
DeltaV SIS with IS Electronic Marshalling February 2021
Product Description The only difference between the two CSLSs is that one
communicates with the engineering and operator workstations
as well as the dedicated LSN. This CSLS has the Active light
For Use in SIL 3 Applications illuminated. The other CSLS is communicating only with
With a safe failure fraction (SFF) greater than 99%, both simplex the LSN.
and redundant installations of the DeltaV SIS CSLS meet the SIL
3 requirements of IEC 61508 with no restrictions. Redundant Logic Solver Switchover
CSLSs increase availability, but because both simplex and
In the event that a failure is detected in one of the CSLSs, the
redundant CSLSs provide hardware fault tolerance and safe
CSLS will automatically go into a failed state. In this condition,
failure fraction to meet SIL 3 requirements, redundancy does
there is no impact to the partner CSLS or the physical outputs.
not increase safety.
The partner CSLS continues to read inputs, execute logic, and
drive outputs. The transition from redundant to simplex is
SIF-based Approach completely bumpless.
The DeltaV SIS system design was based on IEC 61511 SIF
Both logic solvers in a redundant pair are monitored for
concept, where every logic solver is a container for a small
integrity alarms at all times, and an integrity error in either
number of SIFs. Unlike other system architectures, with
CSLS will notify the operator of a failure. Events that can cause
modular logic solving architecture, the logic solver is no longer
integrity alarms include:
a single point of failure for the entire process. If failures were
to occur, only the equipment tied to the logic solver would Hardware failure within a logic solver,
be affected. Communications failure between a logic solver and the LSN,
The DeltaV SIS SIF-based approach does not mean that all Communications failure between a redundant pair of logic
of the safety logic and I/O have to fit into one logic solver. solvers, and
All input data is made available to every logic Solver on the
LSN every 50ms the same as the local inputs on every CSLS. Removal of a logic solver from the carrier.
With DeltaV SIS logic solvers, neither the scan rate nor The health and status of both logic solvers and their channels
the execution of a SIF is altered by changes or additions are available in the Diagnostics Explorer.
to another SIF. DeltaV SIS logic solvers always execute When one CSLS of a redundant pair of logic solvers is removed
deterministically, every 50 ms, regardless of how much online, there is no disturbance to the process. When the
I/O is running on the system. missing CSLS is replaced with another, the new CSLS completes
its power-up self-tests before the active CSLS cross-loads the
Redundancy current database. In safe areas, failed CSLSs can be replaced
The redundant logic solvers include two CSLSs installed side-by- under power. In hazardous areas, appropriate installation
side on the CSLS Carrier. The CSLS Carrier has redundant power procedures must be followed.
and communication connections to the baseplates that are
wired to the field devices. Each CSLS of the redundant pair has Online proof testing
a separate power supply. Online proof testing can be performed on a redundant
No control strategy configuration is required to take advantage pair of logic solvers. The desired proof-test interval is set in
of CSLS redundancy because the DeltaV SIS auto-sense the configuration. The logic solvers perform the proof test
capability automatically recognizes the redundant pair of cards. automatically, with a warning provided to the operator before
the automatic proof test is started.
When redundancy is chosen, the two CSLSs run in parallel
at all times. Both read the inputs from the I/O terminals,
both execute the logic and both drive the outputs at the I/O
terminals. There is no concept of primary and backup or master
and slave, which is unlike any other safety system.
www.emerson.com/deltav 3
DeltaV SIS with IS Electronic Marshalling February 2021
Diagnostics The DeltaV SIS logic solver can also generate HART commands
to initiate a partial stroke test in a digital valve controller. The
The DeltaV SIS logic solvers execute extensive self-testing on a
operators can initiate partial stroke tests manually from their
continuous basis to detect potential faults. Faults detected by
operator workstations or they can be scheduled to occur
logic solver diagnostics can be associated with the logic solver
automatically based on the specified test interval. The results
itself or associated with field devices, field wiring, or other
from these tests are captured and integrated with the system
conditions not related to hardware.
event history. An alarm can be generated if a partial stroke test
DeltaV SIS provides standard alarms to annunciate faults fails, alerting maintenance that there is a potential problem
detected by logic solvers in the operator interface. No special with a valve.
configuration is required. When a diagnostic alarm occurs, it
appears on the alarm banner of the operator interface. The DeltaV SIS Electronic Marshalling
operator is shown the type of alarm (failed, maintenance, etc.), hardware includes:
as well as text for the active condition or “multiple conditions” if
CSLS Carrier (DIN rail mounted and supports a redundant
more than one alert condition is active for the particular alarm.
pair of CSLSs, redundant 24V DC power connectivity, and
redundant Ethernet Safety Network communication Ports).
Sequence of Events Capability
CSLS (provides redundant safety logic processing and
With DeltaV SIS, events are automatically generated as function
communication to up to 96 LS IS CHARMs).
blocks are executed within a module scan. Events are time
stamped with a resolution of <1 ms, and they are recorded in IS CHARM base plate (DIN rail mounted with interleaving
the sequence that they occur in the Event Chronicle. When power and bus connectors. Supports 12 LS IS CHARMS and
using standard function blocks such as input blocks, voter their terminal blocks).
blocks, and cause and effect blocks, a standard set of events
IS CHARM Terminal Block (removable terminal block
are automatically generated without special configuration or
providing terminal connections to field wiring and physical
programing required. For example, I/O failures, trip limits, first-
latch for LS IS CHARM).
outs, and other similar events are automatically time stamped
by function blocks and recorded in the Event Chronicle. When LS IS CHARMs (Logic Solver Characterization Module for each
a process variable exceeds the trip limit, DeltaV SIS records the field signal. Provides basic analog to digital conversion and
event along with the analog value and the trip condition. signal isolation to the redundant communication bus).
In general, when there is a plant event that triggers an ESD Cable Extenders that provide flexibility in carrier mounting.
from the SIS, one input will exceed a trip limit on one scan and
I/O bus termination (provides bus terminations for redundant
this will cause outputs to trip and more inputs will then change
I/O bus).
state. Sequence of Events Recording has been used to find that
first input that caused the trip by looking at all of the inputs Labeling features for base plate and channel identification.
in the plant. With the DeltaV SIS system, the operator simply Intrinsically Safe (IS) LS CHARMs are designed to meet IEC EX ia
filters the Event Chronicle for first-out trips, and the first-out is level of safety and are suitable for connecting to field devices
clearly visible. installed in Class 1 Division 1 Hazardous Locations or Zone 1/0
If higher resolution is required for some channels then they can Hazardous Areas. The CSLS and LS IS CHARMs are rated for
be wired to both the DeltaV SIS Logic Solver and also to a DeltaV installation in a Class 1 Division 2 Hazardous location, a Zone 2
Discrete Input Card for Sequence of Events, which provides a hazardous area or in the safe area.
resolution of 0.25 ms. The CSLS carrier is mounted to the top of a vertical DIN
rail and up to eight IS CHARM Baseplates are mounted below
Integrated HART it, snapping easily to the DIN rail as they are connected to
Integrated HART I/O brings field diagnostics into the logic each other. The bus termination assembly is attached at the
solver. Field device diagnostics information is not just for bottom. A standard DIN-rail lock is used to keep the entire
pass-through to AMS Device Manager; it is available inside assembly in place.
the logic solver.
www.emerson.com/deltav 4
DeltaV SIS with IS Electronic Marshalling February 2021
A pair of CSLSs installs on the carrier and communicates over a LS IS CHARMs can be added to any existing baseplate position
redundant Ethernet safety network with up to 15 other CSLSs and autosensed online. Additional CSLSs can be added online.
and 1 SZ controller, allowing great flexibility and ease of system
expansion. Safety Network Ports are available for copper only. LS IS CHARM Types
SZ controllers connect to both the area control network and A variety of analog and discrete LS IS CHARMs are available to
the LSN to isolate the CSLSs from the process control system. meet your specific requirements. The following LS IS CHARMs
The SZ controllers has replaceable Ethernet Isolation Ports for are available starting with v12.3.x:
connection to both LSN and the DeltaV Area Control network.
LS IS AI 4-20 mA HART
Starting in DeltaV v14.3 a new Keylock Ethernet Isolation Port,
in yellow color plastic, which enable the key inhibit unlock LS IS DI NAMUR
switch on the carrier to allow the key to inhibit the unlock
The following LS IS CHARMs are available starting v13.3.x:
command to all CSLSs on the LSN.
LS IS RTD
Only DeltaV SIS Smart Switches are supported on the LSN.
LS IS Thermocouple /mV
Each IS baseplate is ordered pre-loaded with 12 IS terminal
blocks that are ready to receive field wires from two-, three-, All LS IS CHARMs have a bi-color Power/Integrity LED that
and four-wire devices. Electronic Marshalling eliminates the indicates the health of the LS IS CHARM. The indications provide
need to partition the I/O wiring to specific channels based on clear, actionable instruction to the maintenance personnel.
signal type. Simply connect field signal multi-cores in an orderly
Green Solid: Normal Operation
fashion as desired. Install the appropriate LS IS CHARM to
complete the field circuit and the signal is ready to be used by Green Blink: Normal awaiting configuration
the CSLS. No cross-wiring required. Red Blink: Fault detected on wiring
All LS IS CHARMs are energy limited devices that prevent Red Solid: Internal Fault detected]
the possibility of an explosion, even if wires are accidently
shorted together. In addition, each LS IS CHARM acts as a Discrete LS-CHARMs have a Yellow LED to indicate the state of
circuit protection device and field wiring disconnect. Each LS IS the field signal. (On = circuit is energized)
CHARM provides surge protection to meet industry standards All LS-CHARMs meet ISA 71.04-1985 severity level G3 (harsh)
in the area of EMC. Under extreme overvoltage conditions due corrosion specifications
to incorrect field wiring, the LS IS CHARM will act as a fuse to
protect adjacent channels. Signal faults are thus isolated to the I/O Terminal Block Options
single LS IS CHARM.
LS IS CHARMs are designed to work with the IS Terminal Blocks,
LS IS CHARMs can be partially ejected to a locked position that which are light blue in color, designating the field wiring as
disconnects the field wiring from the system to perform field intrinsically safe. LS IS CHARMs are mechanically different and
maintenance actions or to remove power to a field device. will not install in non-IS terminal blocks, ensuring there is no
Activating the LS IS CHARM latch ejects the LS IS CHARM to error in the installation.
the detent position. Closing the latch locks the LS IS CHARM in
place and isolates the field wiring for field work. There are two different IS Terminal blocks available to meet the
wiring needs of field signals.
IS baseplate extenders and cables provide great flexibility to
the IS CHARM installation in existing cabinets or in custom IS Standard Terminal Block
enclosures. Cables are redundant, each carrying 24V DC IS Thermocouple / mV Terminal Block
field power, 6.3V DC LS-CHARM power and one of the
communication busses. The IS Terminal block has four terminals, supporting the
traditional discrete and analog two- and four-wire sensor
Bus termination provides added robustness for the field instrumentation signals as well two-, three-, and four-wire
communication bus and is installed at the end of the RTD Sensors.
physical bus.
www.emerson.com/deltav 5
DeltaV SIS with IS Electronic Marshalling February 2021
IS CHARM Baseplates
IS CHARM baseplates are mechanically different than non-IS
baseplates, ensuring there is no error in the installation of the
IS CHARM Standard Terminal Block. Terminal Blocks or CHARMs (non-IS). A baseplate separator
is needed on the beginning and on the end of any IS CHARM
baseplate row, also in between any of the IS CHARM baseplates.
You can add IS CHARM baseplates to non-IS CHARM baseplates
and any of the other components, like the CSLS carrier, CHARM
baseplate extenders and CHARM baseplate terminators.
Maximum number of Remote I/O Nodes (CIOCs and/or WIOCs) reporting to a single SZ Controller. 4
Maximum number of CSLS I/O channels on a single SZ Controller: 96 CHARMs I/O channels × 16 CSLS. 1536
Maximum number of CSLSs in a single DeltaV SIS system: 100 SZ controllers × 16 CSLS per SZ controller. 1600
www.emerson.com/deltav 6
DeltaV SIS with IS Electronic Marshalling February 2021
Hardware Specifications
Common Environmental Specifications (all components)
Operating temperature * -40 to 70°C (-40 to 158°F)
Protection rating IP 20
Vibration 1mm Peak-to-Peak from 2 to 13.2 Hz; 0.7g from 13.2 to 150 Hz.
*Operating any electronics at the higher end of its temperature range for long periods of time will shorten its expected lifetime,
see Effects of Heat and Airflow Inside an Enclosure White Paper for more information.
www.emerson.com/deltav 7
DeltaV SIS with IS Electronic Marshalling February 2021
www.emerson.com/deltav 8
DeltaV SIS with IS Electronic Marshalling February 2021
www.emerson.com/deltav 9
DeltaV SIS with IS Electronic Marshalling February 2021
www.emerson.com/deltav 10
DeltaV SIS with IS Electronic Marshalling February 2021
LS IS CHARM.
www.emerson.com/deltav 11
DeltaV SIS with IS Electronic Marshalling February 2021
www.emerson.com/deltav 12
DeltaV SIS with IS Electronic Marshalling February 2021
Address Plug.
www.emerson.com/deltav 13
DeltaV SIS with IS Electronic Marshalling February 2021
SZ Controller Hardware
Specifications for SZ Controller and Carriers
Capacity One (simplex) or two (redundant) SZ Controllers
Redundant Ethernet Connections Through Copper twisted pair: 10/100BASE-TX with RJ45 connectors;
Replaceable Ethernet Isolation Ports (EIPs) or Full duplex operation - 100 m distance
Keylock Ethernet Isolation Ports
Dual Vertical Safety Carrier Mounting DIN rail latch to vertical orientated T-type rail
Dual Horizontal Safety Carrier Mounting DIN rail latch to horizontally orientated T-type rail
Input Power +24V DC ± 10% at 325 mA maximum for simplex; 575 mA maximum for redundant
Heat Dissipation (Redundant) Seven Watts maximum for simplex; 13 Watts maximum for redundant
Mounting One or two slots on the Dual Vertical or Horizontal Safety Carrier
BPCS Module Execution Rates 100ms, 200ms, 500ms, 1s, 2s, 5s, 10s, 30s, 60s
LED Indicators
Green – Power Indicates DC power is applied.
www.emerson.com/deltav 14
DeltaV SIS with IS Electronic Marshalling February 2021
CSLS Hardware
Specifications for CSLS Carrier
Capacity One (simplex) or two (redundant) CSLS and one (simplex) or
two (redundant) Power Modules
Input Power (Redundant) +24V DC ± 10% at 12.5 A maximum
Network Ports (SNPs) Copper twisted pair: 10/100BASE-TX with RJ45 connectors;
Full duplex operation - 100 m distance
Mounting DIN rail latch to vertical orientated T-type rail
Heat Dissipation per Carrier with Redundant CSLS Pair 18 Watts maximum, which includes:
13 Watts for redundant CSLS (7 Watts for simplex)
Three Watts for redundant Power Modules
One Watt per Safety Network Port
LED Indicators
www.emerson.com/deltav 15
DeltaV SIS with IS Electronic Marshalling February 2021
www.emerson.com/deltav 16
DeltaV SIS with IS Electronic Marshalling February 2021
Color Black
*Actual Current draw is determined by type of CHARM and associated field devices.
www.emerson.com/deltav 17
DeltaV SIS with IS Electronic Marshalling February 2021
www.emerson.com/deltav 18
DeltaV SIS with IS Electronic Marshalling February 2021
Simplified Circuit and Connection Diagrams for LS IS AI-CHARM 4 to 20 mA HART Two-Wire and Four-Wire transmitters.
www.emerson.com/deltav 19
DeltaV SIS with IS Electronic Marshalling February 2021
LS IS RTD CHARM
Specifications for LS IS RTD Input CHARM
Sensor Types RTD input (Types listed in Table)
www.emerson.com/deltav 20
DeltaV SIS with IS Electronic Marshalling February 2021
LS IS Thermocouple / mV CHARM
Specifications for LS IS Thermocouple/mV Input CHARM
Sensor Types B, E, J, K, N, R, S, T, uncharacterized
•Thermocouple Low level voltage source (±20 mV, ±50 mV, and ±100 mV)
•mV
Full Scale Signal Range See Table next page
www.emerson.com/deltav 21
DeltaV SIS with IS Electronic Marshalling February 2021
Simplified Circuit and Connection Diagram for LS IS Thermocouple/mV CHARM with IS Thermocouple/mV Terminal Block.
www.emerson.com/deltav 22
DeltaV SIS with IS Electronic Marshalling February 2021
Wetting Voltage 8V DC ± 1V DC
Fault detection capable with NAMUR sensor or with an optional Guaranteed short circuit: <100 Ω
field resistor pack* as shown on Option 2 in diagram below Guaranteed good status: 360 Ω to 20 kΩ
(Option 1 in diagram below is not fault detection capable) Guaranteed open circuit: > 75 kΩ
Configurable Channel Types: Dry contact or discrete state sensor changing <2 Hz
•Discrete Input
Isolation Galvanically isolated according to EN 60079-11.
Voltage peak value 375V DC.
CHARM Power Req. 28 mA max @ 24V DC ±10%
www.emerson.com/deltav 23
DeltaV SIS with IS Electronic Marshalling February 2021
SZ Controllers with DeltaV SIS v12.3 or later software. CSA C22.2 No. 60079-0
CSLS (CSLS): LS IS CHARMs installed on IS CHARM baseplates CSA C22.2 No. 60079-11
can be connected to a CSLS carrier, using a baseplate
CSA C22.2 No. 60079-15
separator and a special fuse in each of the two power supply
lines of the CSLS carrier. ATEX
CE
EMC- EN 61326-1
FM
FM 3600
FM 3610
FM 3611
ANSI/ISA 60079-0
ANSI/ISA 60079-11
ANSI/ISA 60079-15
www.emerson.com/deltav 24
DeltaV SIS with IS Electronic Marshalling February 2021
Installation:
DeltaV SIS with IS Electronic Marshalling can be installed and
used based on the following Standards (see actual certificates II 3 (1) G Ex nA [ia Ga] IIC Gc
for exact product markings for each product):
Field Circuits:
FM (USA)
II (1) G [Ex ia Ga] IIC
Installation: II (1) D [Ex ia Da] IIIC
Installation:
Field Circuits:
www.emerson.com/deltav 25
DeltaV SIS with IS Electronic Marshalling February 2021
Ordering Information
SZ Controllers and CSLSs
www.emerson.com/deltav 26
DeltaV SIS with IS Electronic Marshalling February 2021
Each vertical DIN rail requires a DIN Rail stop to lock baseplates in position. Order VE4054DRS, which is a box of 5.
Ordering Information
LS IS CHARMs
LS IS Thermocouple/mV SS4309T01*
LS IS RTD SS4310T01*
www.emerson.com/deltav 27
DeltaV SIS with IS Electronic Marshalling February 2021
www.emerson.com/deltav 28
DeltaV SIS with IS Electronic Marshalling February 2021
Prerequisites
DeltaV SIS with IS Electronic Marshalling hardware requires DeltaV SIS v12.3. or later software.
LS IS Thermocouple/mV CHARM requires DeltaV SIS v13.3. or later software to be able to configure and use the CHARM.
LS IS RTD CHARM requires DeltaV SIS v13.3. or later software to be able to configure and use the CHARM.
Keylock Ethernet Isolation Port requires DeltaV SIS v14.3 or later software
IS CHARM FUSE
* Two of these Fuse Assemblies have to be ordered with any SS6501T01 or SS6501T05, when used with IS CHARM baseplates.
www.emerson.com/deltav 29
DeltaV SIS with IS Electronic Marshalling February 2021
Ethernet Isolation Port; twisted copper; for Dual Vertical or Horizontal Safety Carriers KL1604X1-BA1
Keylock Ethernet Isolation Port; twisted copper; for Dual Vertical or Horizontal Safety Carriers KL1604X1-BB1
Set of 2 Replacement Keys for Keylock Switch on CSLS and Dual Vertical SS6201
and Horizontal Safety Carriers