D1030S - D1030D

INSTRUCTION & SAFETY MANUAL

SIL 2 Switch/Proximity Detector
Repeater Relay Output
DIN-Rail Models D1030S, D1030D

D1030 - SIL 2 Switch / Proximity Detector Repeater Relay Output ISM0008-17

 Characteristics
General Description: The Switch/Proximity Detector Repeater type D1030 is a DIN Rail unit with one or two independent channels.
The unit can be configured for contact or proximity detector, NO or NC and for NE or ND SPDT relay output contact. Each channel enables a Safe Area load to be controlled by
a switch, or a proximity detector, located in Hazardous Area.
D1030D dual channel type has two independent input channels and actuates the corresponding output relay. Two actuation modes can be independently DIP switch configured on
each input channel: NO input/NE relay or NO input/ND relay. Contact or proximity sensor and its connection line short or open circuit fault detection is also DIP switch configurable:
fault detection can be enabled (in case of fault it de-energizes the corresponding output relay and turns the fault LED on) or disabled (in case of fault the corresponding output relay
repeats the input line open or closed status as configured).
D1030S single channel type has one input channel and two output relays; the unit has two DIP switch configurable operating modes:
Mode A) input channel actuates in parallel the two output relays (DPDT contact). Relay actuation mode can be independently configured for each output in two modes:
NO input/NE relay or NO input/ND relay.
Mode B) input channel actuates output relay A configurable in two modes as in mode A above. Output relay B operates as a fault output (in case of input fault, relay B actuates and the
fault LED turns on while relay A repeats the input line as configured). Actuation can be DIP switch configured in two modes:
No input fault/energized relay (it de-energizes in case of fault) or No input fault/de-energized relay (it energizes in case of fault).
Function: 1 or 2 channels I.S. switch repeater for contact or EN60947-5-6 proximity. Provides 3 port isolation (input/output/supply).
Signalling LEDs: Power supply indication (green), output status (yellow), line fault (red).
Field Configurability: NO/NC input for contact/proximitor, NE/ND relay operation and fault detection enable/disable.
EMC: Fully compliant with CE marking applicable requirements.

Technical Data
Supply: 24 Vdc nom (20 to 30 Vdc) reverse polarity protected, ripple within voltage limits ≤ 5 Vpp.
Current consumption @ 24 V: 60 mA for 2 channels D1030D, 55 mA for 1 channel D1030S with input closed and relays energized.
Power dissipation: 1.4 W for 2 channels D1030D, 1.3 W for 1 channel D1030S with 24 V supply voltage, input closed and relays energized.
Max. power consumption: at 30 V supply voltage, short circuit input and relays energized, 1.8 W for 2 channels D1030D, 1.7 W for 1 channel D1030S.
Isolation (Test Voltage): I.S. In/Out 1.5 KV; I.S. In/Supply 1.5 KV; Out/Supply 1.5 KV; Out/Out 1.5 KV.
Input switching current levels: ON ≥ 2.1 mA, OFF ≤ 1.2 mA, switch current ≈ 1.65 mA ± 0.2 mA hysteresis.
Fault current levels: open fault ≤ 0.2 mA, short fault ≥ 6.8 mA
(when enabled both faults de-energize channel relay with dual channel unit D1030D or actuate fault relay with single channel unit D1030S).
Input equivalent source: 8 V 1 KΩ typical (8 V no load, 8 mA short circuit).
Output: voltage free SPDT relay contact.
Contact material: AgCdO.
Contact rating: 2 A 250 Vac 500 VA, 2 A 250 Vdc 80 W (resistive load).
DC Load breaking capacity:
V (V)

300
200
Resistive
Load
100

50
40
30
20

10 I (A)
0.1 0.2 0.3 0.5 1 2 5
Mechanical / Electrical life: 30 * 106 / 1 * 105 operation, typical.
Operate / Release time: 7 / 3 ms typical.
Bounce time NO / NC contact: 3 / 5 ms.
Response time: 20 ms.
Frequency response: 10 Hz maximum.
Compatibility:
CE mark compliant, conforms to Directive:
2014/34/EU ATEX, 2014/30/EU EMC, 2014/35/EU LVD, 2011/65/EU RoHS.
Environmental conditions:
Operating: temperature limits -20 to + 60 °C,
relative humidity max 90 % non condensing, up to 35 °C.
Storage: temperature limits -45 to + 80 °C.
Safety Description:

ATEX: II (1)G [Ex ia Ga] IIC, II (1)D [Ex ia Da] IIIC, I (M1) [Ex ia Ma] I, II 3G Ex ec nC IIC T4 Gc; IECEx: [Ex ia Ga] IIC, [Ex ia Da] IIIC, [Ex ia Ma] I, Ex ec nC IIC T4 Gc
INMETRO: [Ex ia Ga] IIC, [Ex ia Da] IIIC, [Ex ia Ma] I
UL: AIS / I, II, III / 1 / ABCDEFG, [AEx ia] IIC; C-UL: AIS / I, II, III / 1 / ABCDEFG, [Ex ia] IIC
FM: NI / I / 2 / ABCD / T4, NI / I / 2 / IIC / T4, AIS / I, II, III / 1 / ABCDEFG, AEx [ia] IIC; FMC: NI / I / 2 / ABCD / T4, NI / I / 2 / IIC / T4, AIS / I, II, III / 1 / ABCDEFG, Ex [ia] IIC
EAC-EX: 2Ex nA nC [ia Ga] IIC T4 X, [Ex ia Da] IIIC X, [Ex ia Ma] I X.
UKR TR n. 898: 2ExnAnCiaIICT4 X, ExiaI X
Uo/Voc = 10.7 V, Io/Isc = 15 mA, Po/Po = 39 mW at terminals 13-14, 15-16.
Um = 250 Vrms, -20 °C ≤ Ta ≤ 60 °C.
Approvals:
DMT 01 ATEX E 042 X conforms to EN60079-0, EN60079-11; IECEx BVS 07.0027X conforms to IEC60079-0, IEC60079-11.
IMQ 09 ATEX 013 X conforms to EN60079-0, EN60079-7, EN60079-15; IECEx IMQ 13.0011X conforms to IEC60079-0, IEC60079-7, IEC60079-15.
INMETRO DNV 13.0108 X conforms to ABNT NBR IEC60079-0, ABNT NBR IEC60079-11.
UL & C-UL E222308 conforms to UL913, UL 60079-0, UL60079-11 for UL and CSA-C22.2 No.157-92, CSA-E60079-0, CSA-E60079-11 for C-UL.
FM & FM-C No. 3024643, 3029921C, conforms to Class 3600, 3610, 3611, 3810 and C22.2 No.142, C22.2 No.157, C22.2 No.213, E60079-0, E60079-11, E60079-15.
ЕАЭС RU С-IT.HA67.B.00113/20 conforms to GOST 31610.0, GOST 31610.11, GOST 31610.15.
CЦ 16.0034 X conforms to ДСТУ 7113, ГОСТ 22782.5-78, ДСТУ IЕС 60079-15.
TÜV Declaration of Compliance No. C-IS-722238330, SIL 2 according to IEC 61508:2010 Ed.2.
SIL 3 Functional Safety TÜV Certificate conforms to IEC61508:2010 Ed.2, for Management of Functional Safety.
DNV No. TAA00002BM and KR No.MIL20769-EL001 Cert. for maritime applications.
Mounting: EN/IEC60715 TH 35 DIN-Rail.
Weight: about 135 g D1030D, 130 g D1030S.
Connection: by polarized plug-in disconnect screw terminal blocks to accomodate terminations up to 2.5 mm2.
Location: Safe Area/Non Hazardous Locations or Zone 2, Group IIC T4, Class I, Division 2, Groups A, B, C, D Temperature Code T4 and Class I, Zone 2, Group IIC, IIB, IIA T4
installation.
Protection class:IP 20. Dimensions: Width 22.5 mm, Depth 99 mm, Height 114.5 mm.

2 D1030 - SIL 2 Switch / Proximity Detector Repeater Relay Output G.M. International ISM0008-17
 Ordering information

Model: D1030
1 channel S
Power Bus and DIN-Rail accessories:
2 channels D DIN rail anchor MCHP065 DIN rail stopper MORT016
Power Bus enclosure /B Terminal block male MORT017 Terminal block female MORT022

Front Panel and Features

1 2 3 4 SIL 2 according to to IEC 61508:2010 (Route 2H) with Tproof = 5 / 10 years (≤10% / >10 % of total SIF).
5 6 7 8 SC2: Systematic Capability SIL2.
Input from Zone 0 (Zone 20), Division 1, installation in Zone 2, Division 2.
NO/NC contact/proximity Detector Input.
Two SPDT Relay Output Signals.
SPDT Relay Output for fault detection on single channel version.
Three port isolation, Input/Output/Supply.
PWR ON
EMC Compatibility to EN61000-6-2, EN61000-6-4, EN61326-1.
1 2
STATUS/ In-field programmability by DIP Switch.
FAULT
ATEX, IECEx, UL & C-UL, FM & FM-C, INMETRO, EAC-EX, UKR TR n. 898, TÜV Certifications.
D1030 Type Approval Certificate DNV and KR for maritime applications.
High Reliability, SMD components.
High Density, two channels per unit.
13 14 15 16 Simplified installation using standard DIN Rail and plug-in terminal blocks.
250 Vrms (Um) max. voltage allowed to the instruments associated with the barrier.

G.M. International ISM0008-17 D1030 - SIL 2 Switch / Proximity Detector Repeater Relay Output 3
 Parameters Table
In the system safety analysis, always check the Hazardous Area/Hazardous Locations devices to conform with the related system documentation, if the device is Intrinsically Safe check
its suitability for the Hazardous Area/Hazardous Locations and gas group encountered and that its maximum allowable voltage, current, power (Ui/Vmax, Ii/Imax, Pi/Pi) are not exceeded
by the safety parameters (Uo/Voc, Io/Isc, Po/Po) of the D1030 series Associated Apparatus connected to it. Also consider the maximum operating temperature of the field device, check
that added connecting cable and field device capacitance and inductance do not exceed the limits (Co/Ca, Lo/La, Lo/Ro) given in the Associated Apparatus parameters for the effective
gas group. See parameters on enclosure side and the ones indicated in the table below:

Hazardous Area/
D1030 Associated Must
D1030 Terminals Hazardous Locations
Apparatus Parameters be
Device Parameters

Ch1 13 -14
Uo / Voc = 10.7 V ≤ Ui / Vmax
Ch2 15 -16

Ch1 13 -14
Io / Isc = 15 mA ≤ Ii/ Imax
Ch2 15 -16

Ch1 13 -14
Po / Po = 39 mW ≤ Pi / Pi
Ch2 15 -16

Hazardous Area/
D1030 Associated Must
D1030 Terminals Hazardous Locations
Apparatus Parameters be
Device + Cable Parameters

Co / Ca = 2.23 µF IIC (A, B)

Ch1 13 -14
Co / Ca = 15.6 µF IIB (C)
Co / Ca = 69 µF IIA (D) ≥ Ci / Ci device + C cable

Ch2 15 -16
Co / Ca = 60 µF I
Co / Ca = 15.6 µF IIIC

Lo / La = 172 mH IIC (A, B)

Ch1 13 -14
Lo / La = 689 mH IIB (C)
Lo / La = 1300 mH IIA (D) ≥ Li / Li device + L cable

Ch2 15 -16
Lo / La = 2263 mH I
Lo / La = 689 mH IIIC

Lo / Ro = 930 µH/Ω IIC (A, B)

Ch1 13 -14
Lo / Ro = 3720 µH/Ω IIA (D)
Li / Ri device and
Lo / Ro = 7440 µH/Ω IIA (D) ≥
L cable / R cable
Ch2 15 -16
Lo / Ro = 12200 µH/Ω I
Lo / Ro = 3720 µH/Ω IIIC

NOTE for USA and Canada:

IIC equal to Gas Groups A, B, C, D, E, F and G
IIB equal to Gas Groups C, D, E, F and G
IIA equal to Gas Groups D, E, F and G

For installations in which both the Ci and Li of the Intrinsically Safe apparatus exceed 1% of the Co and Lo parameters of the Associated Apparatus (excluding the cable),
then 50% of Co and Lo parameters are applicable and shall not be exceeded (50% of the Co and Lo become the limits which must include the cable such that Ci device + C cable ≤
50 % of Co and Li device + L cable ≤ 50 % of Lo). The reduced capacitance of the external circuit (including cable) shall not be greater than 1 μF for Groups I, IIA, IIB and 600 nF for
Group IIC. If the cable parameters are unknown, the following value may be used: Capacitance 200 pF per meter (60 pF per foot), Inductance 1 µH per meter (0.20 µH per foot).
The Intrinsic Safety Entity Concept allows the interconnection of Intrinsically Safe devices approved with entity parameters not specifically examined in combination as a system when
the above conditions are respected.
For Division 1 and Zone 0 installations, the configuration of Intrinsically Safe Equipment must be FM approved under Entity Concept (or third party approved);
for Division 2 installations, the configuration of Intrinsically Safe Equipment must be FM approved under non-incendive field wiring or Entity Concept (or third party approved).

G.M. International ISM0008-17 D1030 - SIL 2 Switch / Proximity Detector Repeater Relay Output 5
 Function Diagram
HAZARDOUS AREA ZONE 0 (ZONE 20) GROUP IIC,
SAFE AREA, ZONE 2 GROUP IIC T4,
HAZARDOUS LOCATIONS CLASS I, DIVISION 1, GROUPS A, B, C, D,
NON HAZARDOUS LOCATIONS, CLASS I, DIVISION 2,
CLASS II, DIVISION 1, GROUPS E, F, G, CLASS III, DIVISION 1,
GROUPS A, B, C, D T-Code T4, CLASS I, ZONE 2, GROUP IIC T4
CLASS I, ZONE 0, GROUP IIC

MODEL D1030D

3+
=
4 - Supply 24 Vdc
Common
positive
=
voltage free connection
Contact Proximity 8 NC
+ 13 = 2 NO
In 1 14 Out 1
- 1 COM
voltage free
Contact Proximity 7 NC
+ 15
6 NO
In 2 16 Out 2
- = 5 COM

MODEL D1030S

3+
=
4 - Supply 24 Vdc
=
voltage free
Contact Proximity 8 NC
+ 13 =
2 NO
In 1 14 Out 1-A
- = 1 COM

7 NC
6 NO
Out 1-B
5 COM

Relay contact shown in de-energized position

6 D1030 - SIL 2 Switch / Proximity Detector Repeater Relay Output G.M. International ISM0008-17
 Functional Safety Manual and Application
Application for D1030D
OFF operation Supply ON operation Supply
24 Vdc Out 1 relay is de-energized, 24 Vdc Out 1 relay is energized,
Field Input: proximity is OFF Field Input: proximity is ON
or switch is open 2-1 is open, 8-1 is closed or switch is closed 2-1 is closed, 8-1 is open
3+ 4- 3+ 4-
13 8 Safety 13 8 Safety
In 1 In 1
R2
R1
14 Channel 1 2 Out 1 PLC R1
14 Channel 1 2 Out 1 PLC
R2
Input Input
1 1

Out 2 relay is de-energized, Out 2 relay is energized,

Field Input: proximity is OFF D1030D Field Input: proximity is ON D1030D
6-5 is open, 7-5 is closed 6-5 is closed, 7-5 is open
or switch is open (Ch.1 and Ch.2) or switch is closed (Ch.1 and Ch.2)
7 Safety 7 Safety
15 15
In 2 R1 Out 2 PLC In 2 R1 Out 2 PLC
R2 16 Channel 2 6 R2 16 Channel 2 6
Input Input
5 5

WARNING: R1 and R2 end of line resistors with voltage free contact are required for line fault detection

Description: For this application, enable input line fault (open or short) detection and direct input to output transfer function, by set the internal dip-switches in the following mode
(see page 11 for more information):
Dip-switch position 1 2 3 4
ON/OFF state ON ON ON ON
The module is powered by connecting 24 Vdc power supply to Pins 3 (+ positive) - 4 (- negative). The green LED is lit in presence of supply power.
Input signals from field are applied to Pins 13-14 (In 1 - Ch.1) and Pins 15-16 (In 2 - Ch.2).
The following table describes for each channel the state (open or closed) of its output contacts when its input signal is in OFF or ON state, and it gives information about turn-on
or turn-off of the related channel status LED and channel fault LED:
Input signal state Output relay contact state Output relay contact state Channel status Channel fault
Pins 13-14 (In 1 - Ch.1) or 15-16 (In 2 - Ch.2) Pins 2-1 (Out 1 - Ch.1) or 6-5 (Out 2 - Ch.2) Pins 8-1 (Out 1 - Ch.1) or 7-5 (Out 2 - Ch.2) yellow LED red LED state
state
Proximity sensor is OFF or switch is open Open (De-energize relay) Closed (De-energized relay) OFF OFF
Proximity sensor is ON or switch is closed Closed (Energized relay) Open (Energize relay) ON OFF
Independently from proximity sensor Open Closed OFF ON
or switch state, the input line is break (De-energized relay as safe state condition) (De-energized relay as safe state condition)
Independently from proximity sensor Open Closed OFF ON
or switch state, the input line is in short circuit (De-energized relay as safe state condition) (De-energized relay as safe state condition)
Safety Function and Failure behavior:
D1030D is considered to be operating in Low Demand mode, as a Type B module, having Hardware Fault Tolerance (HFT) = 0.
The failure behavior is described from the following definitions, valid for each channel:
□ Fail-Safe State: it is defined as the channel output relay being de-energized (its NO contact is open and its NC contact is closed).
□ Fail Safe: failure mode that causes the module / (sub)system to go to the defined fail-safe state without a demand from the process.
□ Fail Dangerous: failure mode that does not respond to a demand from the process (i.e. being unable to go to the defined fail-safe state), so that the channel output relay remains
energized (its NO contact holds closed and its NC contact keeps open).
□ Fail Dangerous Detected: a dangerous failure which has been detected from module internal diagnostics so that channel output relay is forced to be de-energized (as Fail-Safe
state, with its NO contact is open and its NC contact is closed).
□ Fail “No Effect”: failure mode of a component that plays a part in implementing the safety function but is neither a safe failure nor a dangerous failure.
When calculating the SFF, this failure mode is not taken into account;
□ Fail “Not Part”: failure mode of a component which is not part of the safety function but which is part of the circuit diagram and is listed for completeness.
When calculating the SFF, this failure mode is not taken into account.
As the module has been evaluated in accordance with Route 2H (proven-in-use) of the IEC 61508:2010, Diagnostic Coverage DC ≥ 60% is required for Type B elements.
Being HFT = 0, in Low Demand mode the maximum achievable functional safety level is SIL 2.
The 2 channels of D1030D module can not be used to increase the hardware fault tolerance, needed for a higher SIL of a certain Safety Function, as they are not completely
independent one from another. Failure rate data: taken from Siemens Standard SN29500.
Failure rate table:
Failure category Failure rates (FIT)
λdd = Total Dangerous Detected failures 73.09
λdu = Total Dangerous Undetected failures 39.44
λsd = Total Safe Detected failures 0.00
λsu = Total Safe Undetected failures 78.94
λtot safe = Total Failure Rate (Safety Function) = λdd + λdu + λsd + λsu 191.47
MTBF (safety function, one channel) = (1 / λtot safe) + MTTR (8 hours) 596 years
λno effect = “No Effect” failures 115.90
λnot part = “Not Part” failures 72.52
λtot device = Total Failure Rate (Device) = λtot safe + λno effect + λnot part 379.89
MTBF (device) = (1 / λtot device) + MTTR (8 hours) 300 years
Failure rates table according to IEC 61508:2010 Ed.2 :
λsd λsu λdd λdu DC SFF
0.00 FIT 78.94 FIT 73.09 FIT 39.44 FIT 64.95% 79.40%
where DC means the diagnostic coverage for the input sensor by module internal diagnostic circuits. This type “B” system, operating in Low Demand mode with HFT = 0,
has got DC = 64.95 % ≥ 60 % as required by Route 2H evaluation (proven-in-use) of the IEC 61508:2010.
PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes ≤10% of total SIF dangerous failures:
T[Proof] = 1 year T[Proof] = 5 years
PFDavg = 1.74 E-04 Valid for SIL 2 PFDavg = 8.70 E-04 Valid for SIL 2
PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes >10% of total SIF dangerous failures:
T[Proof] = 10 years
PFDavg = 1.74 E-03 Valid for SIL 2
SC 2: Systematic capability SIL 2.

G.M. International ISM0008-17 D1030 - SIL 2 Switch / Proximity Detector Repeater Relay Output 7
 Functional Safety Manual and Application
Application for D1030S
OFF operation Supply ON operation Supply
24 Vdc Out 1-A relay is de-energized, 24 Vdc Out 1-A relay is energized,
Field Input: proximity is OFF Field Input: proximity is ON
or switch is open 2-1 is open, 8-1 is closed or switch is closed 2-1 is closed, 8-1 is open
3+ 4- 3+ 4-
8 Safety 13 8 Safety
13
In 1 In 1
R1
14 Channel 1 2 Out 1-A PLC R2
R1
14 Channel 1 2 Out 1-A PLC
R2
Input Input
1 1

D1030S Out 1-B is Out 1-A Duplicator D1030S Out 1-B is Out 1-A Duplicator
7 7
PLC Out 1-B
PLC
6 Out 1-B 6
Input Input
5 5

WARNING: R1 and R2 end of line resistors with voltage free contact are required for line fault detection

Description: For this application, enable input line fault (open or short) detection and direct input to output transfer function, by set the internal dip-switches in the following mode
(see page 12 for more information):
Dip-switch position 1 2 3 4
ON/OFF state ON ON OFF -
The module is powered by connecting 24 Vdc power supply to Pins 3 (+ positive) - 4 (- negative). The green LED is lit in presence of supply power.
Input signal from field is applied to Pins 13-14 (In 1 - Ch.1).
Only Out 1-A is functional safety related, while Out 1-B (Pins 6-5 or 7-5) (as Duplicator of Out 1-A output) is only for service purpose, not functional safety related.
The following table describes for Channel 1 the state (open or closed) of its output when its input signal is in OFF or ON state, and it gives information about turn-on or turn-off
of its channel status LED and channel fault LED:
Input signal state Output relay contact state Output relay contact state Channel status Channel fault
Pins 13-14 (In 1 - Ch.1) Pins 2-1 (Out 1-A - Ch.1) Pins 8-1 (Out 1-A - Ch.1) yellow LED state red LED state
Proximity sensor is OFF or switch is open Open (De-energize relay) Closed (De-energized relay) OFF OFF
Proximity sensor is ON or switch is closed Closed (Energized relay) Open (Energize relay) ON OFF
Independently from proximity sensor Open Closed OFF ON
or switch state, the input line is break (De-energized relay as safe state condition) (De-energized relay as safe state condition)
Independently from proximity sensor Open Closed OFF ON
or switch state, the input line is in short circuit (De-energized relay as safe state condition) (De-energized relay as safe state condition)
Safety Function and Failure behavior:
D1030S is considered to be operating in Low Demand mode, as a Type B module, having Hardware Fault Tolerance (HFT) = 0.
The failure behavior is described from the following definitions, valid for each channel:
□ Fail-Safe State: it is defined as the channel output relay being de-energized (its NO contact is open and its NC contact is closed).
□ Fail Safe: failure mode that causes the module / (sub)system to go to the defined fail-safe state without a demand from the process.
□ Fail Dangerous: failure mode that does not respond to a demand from the process (i.e. being unable to go to the defined fail-safe state), so that the channel output relay remains
energized (its NO contact holds closed and its NC contact keeps open).
□ Fail Dangerous Detected: a dangerous failure which has been detected from module internal diagnostics so that channel output relay is forced to be de-energized (as Fail-Safe
state, with its NO contact is open and its NC contact is closed).
□ Fail “No Effect”: failure mode of a component that plays a part in implementing the safety function but is neither a safe failure nor a dangerous failure.
When calculating the SFF, this failure mode is not taken into account;
□ Fail “Not Part”: failure mode of a component which is not part of the safety function but which is part of the circuit diagram and is listed for completeness.
When calculating the SFF, this failure mode is not taken into account.
As the module has been evaluated in accordance with Route 2H (proven-in-use) of the IEC 61508:2010, Diagnostic Coverage DC ≥ 60% is required for Type B elements.
Being HFT = 0, in Low Demand mode the maximum achievable functional safety level is SIL 2.
Only Out 1-A is functional safety related, while Out 1-B (Pins 6-5 or 7-5) (as Duplicator of Out 1-A output) is only for service purpose, not functional safety related.
Failure rate data: taken from Siemens Standard SN29500.
Failure rate table:
Failure category Failure rates (FIT)
λdd = Total Dangerous Detected failures 73.09
λdu = Total Dangerous Undetected failures 39.44
λsd = Total Safe Detected failures 0.00
λsu = Total Safe Undetected failures 78.94
λtot safe = Total Failure Rate (Safety Function) = λdd + λdu + λsd + λsu 191.47
MTBF (safety function, channel 1, Out 1-A) = (1 / λtot safe) + MTTR (8 hours) 596 years
λno effect = “No Effect” failures 115.90
λnot part = “Not Part” failures 65.92
λtot device = Total Failure Rate (Device) = λtot safe + λno effect + λnot part 373.29
MTBF (device) = (1 / λtot device) + MTTR (8 hours) 306 years
Failure rates table according to IEC 61508:2010 Ed.2 :
λsd λsu λdd λdu DC SFF
0.00 FIT 78.94 FIT 73.09 FIT 39.44 FIT 64.95% 79.40%
where DC means the diagnostic coverage for the input sensor by module internal diagnostic circuits. This type “B” system, operating in Low Demand mode with HFT = 0,
has got DC = 64.95 % ≥ 60 % as required by Route 2H evaluation (proven-in-use) of the IEC 61508:2010.
PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes ≤10% of total SIF dangerous failures:
T[Proof] = 1 year T[Proof] = 5 years
PFDavg = 1.74 E-04 Valid for SIL 2 PFDavg = 8.70 E-04 Valid for SIL 2
PFDavg vs T[Proof] table (assuming Proof Test coverage of 99%), with determination of SIL supposing module contributes >10% of total SIF dangerous failures:
T[Proof] = 10 years
PFDavg = 1.74 E-03 Valid for SIL 2
SC 2: Systematic capability SIL 2.

8 D1030 - SIL 2 Switch / Proximity Detector Repeater Relay Output G.M. International ISM0008-17
 Testing procedure at T-proof
The proof test shall be performed to reveal dangerous faults which are undetected by diagnostic.
This means that it is necessary to specify how dangerous undetected fault, which have been noted during the FMEDA, can be revealed during proof test.
Note for switch input: to detect a broken wire, or a short circuit condition, in the input connections it is necessary to mount, close to the switches, the end of line resistors:
R1=1 KΩ typical (470 Ω to 2 KΩ range) resistor in series and R2=10 kΩ typical (5 KΩ to 15 KΩ range) resistor in parallel to the contacts.
The Proof test consists of the following steps:
Steps Action
1 Bypass the Safety PLC or take any other appropriate action to avoid a false trip.
2 Vary the state conditions of the input sensor / contact coming from field and verify that the relay channel output changes its state from energized to de-energized
and vice-versa; also check that the de-energized state condition corresponds to the required Safe State of the Safety Function.
3 Disconnect the input wiring coming from the field sensor / contact and check that the relay channel output remains de-energized.
4 Short the input connection and verify that the relay channel output remains de-energized. In both 3rd and 4th steps, the corresponding alarm LED on the front
panel must be turned red .
5 Restore the loop to full operation.
6 Remove the bypass from the safety-related PLC or restore normal operation.
This test will reveal approximately 99 % of possible Dangerous Undetected failures in the switch/proximity repeater.

Warning
D1030 series are isolated Intrinsically Safe Associated Apparatus installed into standard EN/IEC60715 TH 35 DIN-Rail. located in Safe Area/Non Hazardous Locations or Zone 2, Group
IIC, Temperature Classification T4, Class I, Division 2, Groups A, B, C, D, Temperature Code T4 and Class I, Zone 2, Group IIC, IIB, IIA Temperature Code T4 Hazardous Area/
Hazardous Locations (according to FM Class No. 3611, CSA-C22.2 No. 213-M1987, CSA-E60079-15) within the specified operating temperature limits Tamb -20 to +60 °C, and connect-
ed to equipment with a maximum limit for AC power supply Um of 250 Vrms.

Hazardous (Classified) Locations Unclassified Locations or Unclassified Locations

Class I, Division 1, Groups A, B, C, D Hazardous (Classified) Locations
Class II, Division 1, Groups E, F, G Class I, Division 2, Groups A, B, C, D, T-Code T4 Must not use or generate
Class III, Division 1 Class I, Zone 2, Group IIC, IIB, IIA, T-Code T4 more than 250 Vrms or Vdc
Class I, Zone 0, Group IIC, IIB, IIA
+ 13 1
Intrinsically
Safe Equipment
- 14 2 Control
8 Equipment

D1030 Associated Apparatus

+ 15 5
Intrinsically
- 16 FM Approved 6 Control
Safe Equipment
under Entity Concept 7 Equipment
and non-incendive field wiring
3 +

FM Approved under Entity Concept, 4 - Power Supply

or third party approval

Hazardous (Classified) Locations Unclassified Locations or Unclassified Locations

Class I, Division 2, Groups A, B, C, D Hazardous (Classified) Locations
Class II, Division 2, Groups E, F, G Class I, Division 2, Groups A, B, C, D, T-Code T4 Must not use or generate
Class III, Division 2 Class I, Zone 2, Group IIC, IIB, IIA, T-Code T4 more than 250 Vrms or Vdc
Class I, Zone 2, Group IIC, IIB, IIA
+ 13 1
Non-incendive
Equipment
- 14 2 Control
8 Equipment

D1030 Associated Apparatus

+ 15 5
Non-incendive
- 16 FM Approved 6 Control
Equipment
under Entity Concept 7 Equipment
and non-incendive field wiring

FM Approved under non-incendive field 3 +

wiring (permitted only for US installations), 4 - Power Supply
or third party approval

Non-incendive field wiring is not recognized by the Canadian Electrical Code, installation is permitted in the US only.
For installation of the unit in a Class I, Division 2 or Class I, Zone 2 location, the wiring between the control equipment and the D1030 associated Apparatus shall be accomplished
via conduit connections or another acceptable Division 2, Zone 2 wiring method according to the NEC and the CEC.
Not to be connected to control equipment that uses or generates more than 250 Vrms or Vdc with respect to earth ground.
D1030 series must be installed, operated and maintained only by qualified personnel, in accordance to the relevant national/international installation standards
(e.g. IEC/EN60079-14 Electrical apparatus for explosive gas atmospheres - Part 14: Electrical installations in hazardous areas (other than mines), BS 5345 Pt4, VDE 165,
ANSI/ISA RP12.06.01 Installation of Intrinsically Safe System for Hazardous (Classified) Locations, National Electrical Code NEC ANSI/NFPA 70 Section 504 and 505,
Canadian Electrical Code CEC) following the established installation rules, particular care shall be given to segregation and clear identification of I.S. conductors from non I.S. ones.
De-energize power source (turn off power supply voltage) before plug or unplug the terminal blocks when installed in Hazardous Area/Hazardous Locations or
unless area is known to be nonhazardous.
Warning: substitution of components may impair Intrinsic Safety and suitability for Division 2, Zone 2.
Warning: de-energize main power source (turn off power supply voltage) and disconnect plug-in terminal blocks before opening the enclosure to avoid electrical shock
when connected to live hazardous potential. Explosion Hazard: to prevent ignition of flammable or combustible atmospheres, disconnect power before servicing or unless
area is known to be nonhazardous.
Failure to properly installation or use of the equipment may risk to damage the unit or severe personal injury.
The unit cannot be repaired by the end user and must be returned to the manufacturer or his authorized representative. Any unauthorized modification must be avoided.

G.M. International ISM0008-17 D1030 - SIL 2 Switch / Proximity Detector Repeater Relay Output 9
 Operation
D1030 accepts as an input from Hazardous Area/Hazardous Locations a proximity sensor or voltage free electrical contact and repeats their status to Safe Area/Non Hazardous
Locations by a voltage free SPDT relay contact. Presence of supply power and status of output (energized or de-energized), as well as integrity or fault condition of sensor and
connecting line are displayed by signaling LEDs (green for power, yellow for status and red for fault condition).
D1030D (dual channel type) has two independent input channels and actuates the corresponding output relay SPDT contact; two actuation modes can be independently DIP switch
configured for each input channel: Normally open input / Normally energized relay or Normally close input / Normally energized relay.
Contact or proximity sensor and its connection line short or open circuit fault detection is also DIP switch configurable. Fault detection can be enabled (in case of fault de-energizes the
corresponding output channel relay and turns ON the fault LED) or be disabled (in case of fault the corresponding output channel relay repeats the input line open or close status as
configured). D1030S (single channel type) has one input channel and two output relays; the unit has two DIP switch configurable operating modes:
A) Input channel actuates in parallel output relays SPDT contacts (providing a DPDT type of output). Relays actuation can be independently configured for each output in two modes:
Normally open input / Normally energized relay or Normally close input / Normally energized relay
B) Input channel actuates output relay (A) SPDT contacts configurable in two modes as above. Output relay B operates as fault output (in case of input fault, relay B actuates and the
fault LED turns on while relay A repeats the input line as configured). Actuation can be configured in two modes:
No input fault / Energized relay (it de-energizes in case of fault) or No input fault / De-energized relay (it energizes in case of fault).
Note: use of voltage free electrical contacts with fault detection enabled requires, near the switch at the end of the line, a 1 KΩ series connected resistor and a 10 KΩ parallel connected
resistor in order to allow the fault detection circuit to distinguish between a condition of contact close/open and a line open/short circuit fault.

Installation
D1030 series are switch/proximity detector repeaters housed in a plastic enclosure suitable for installation on EN/IEC60715 TH 35 DIN-Rail.
D1030 unit can be mounted with any orientation over the entire ambient temperature range, see section “Installation in Cabinet” and "Installation of Electronic Equipments in Cabinet"
Instruction Manual D1000 series for detailed instructions.
Electrical connection of conductors up to 2.5 mm² are accommodated by polarized plug-in removable screw terminal blocks which can be plugged in/out into a powered unit
without suffering or causing any damage (for Zone 2 or Division 2 installations check the area to be nonhazardous before servicing).
The wiring cables have to be proportionate in base to the current and the length of the cable.
On the section “Function Diagram” and enclosure side a block diagram identifies all connections and configuration DIP switches.
Identify the number of channels of the specific card (e.g. D1030S is a single channel model and D1030D is a dual channel model), the function and location of each connection terminal
using the wiring diagram on the corresponding section, as an example:
Connect 24 Vdc power supply positive at terminal “3” and negative at terminal “4”.
For Model D1030S connect common relay contact output of channel 1 at terminal “1”, normally closed contact at “8” and normally opened contact at “2”.
For Model D1030D connect common relay contact output of channel 2 at terminal “5”, normally closed contact at “7” and normally opened contact at “6”.
For Model D1030S connect proximity sensor or voltage free contact at terminal “13” for positive and “14” for negative.
For Model D1030D in addition to channel 1 connections above, connect terminal “15” for positive and “16” for negative on channel 2.

Intrinsically Safe conductors must be identified and segregated from non I.S. and wired in accordance to the relevant national/international installation standards
(e.g. EN/IEC60079-14 Electrical apparatus for explosive gas atmospheres - Part 14: Electrical installations in hazardous areas (other than mines), BS 5345 Pt4, VDE 165,
ANSI/ISA RP12.06.01 Installation of Intrinsically Safe System for Hazardous (Classified) Locations, National Electrical Code NEC ANSI/NFPA 70 Section 504 and 505,
Canadian Electrical Code CEC), make sure that conductors are well isolated from each other and do not produce any unintentional connection.
Connect SPDT relay contacts checking the load rating to be within the contact maximum rating (2 A, 250 V, 500 VA 80 W resistive load).
The enclosure provides, according to EN/IEC 60529, an IP20 minimum degree of protection. The equipment shall only be used in an area of at least pollution degree 2, as defined in EN/
IEC 60664-1. For hazardous location, the unit shall be installed in an enclosure that provides a minimum ingress protection of IP54 in accordance with EN/IEC 60079-0, that must have a
door or cover accessible only by the use of a tool. Units must be protected against dirt, dust, extreme mechanical (e.g. vibration, impact and shock) and thermal stress, and casual
contacts.
If enclosure needs to be cleaned use only a cloth lightly moistened by a mixture of detergent in water.
Electrostatic Hazard: to avoid electrostatic hazard, the enclosure of D1030 must be cleaned only with a damp or antistatic cloth.
Any penetration of cleaning liquid must be avoided to prevent damage to the unit. Any unauthorized card modification must be avoided.
According to EN61010, D1030 series must be connected to SELV or SELV-E supplies.
Relay output contact must be connected to loads non exceeding category I, pollution degree I overvoltage limits.
Warning: de-energize main power source (turn off power supply voltage) and disconnect plug-in terminal blocks before opening the enclosure to avoid electrical shock
when connected to live hazardous potential.

Start-up
Before powering the unit check that all wires are properly connected, particularly supply conductors and their polarity, input and output wires, also check that Intrinsically Safe conductors
and cable trays are segregated (no direct contacts with other non I.S. conductors) and identified either by color coding, preferably blue, or by marking. Check conductors for exposed
wires that could touch each other causing dangerous unwanted shorts. Turn on power, the “power on” green led must be lit, status and fault led on each channel must be in accordance
with condition of the corresponding input line. If possible close and open input lines one at time checking the corresponding status and fault leds condition as well as output to be correct.

10 D1030 - SIL 2 Switch / Proximity Detector Repeater Relay Output G.M. International ISM0008-17
 Configuration
A configuration DIP switch is located on component side of pcb. This switch allows the configuration of input/output relationship, fault detection functions and operating mode.

CH1 Line fault Disabled

OFF
Setting detection (contact / proximity sensor) 1

Enabled
(proximity sensor or contact ON For SIL applications.
with terminating line resistor) 1

Input Output Input Output

13 1 13 1
IN / OUT NO-NE or NO NE NC ND
OR OFF
Operation NC-ND
2
2 2
14 8 14 8

Input Output Input Output

13 1 13 1
NO ND NC NE
NO-ND or OR
NC-NE ON
2
2 2
14 8 14 8 For SIL applications.

Side A Panel View

CH1 CH2

ON
Factory settings
1 2 3 4 ON
OFF ON OFF ON

Dip switch configuration

D1030D

CH2 Line fault Disabled

OFF
Setting detection (contact / proximity sensor) 3

Enabled
(proximity sensor or contact ON
with terminating line resistor) 3

For SIL applications.

Input Output Input Output
NO 15 5 15 5
IN / OUT NO-NE or NE NC ND
OR OFF
Operation NC-ND
4
6 6
16 7 16 7

Input Output Input Output

NO 15 ND 5 15 5
NO-ND or NC NE
OR ON
NC-NE
4
6 6
16 7 16 7 For SIL applications.

G.M. International ISM0008-17 D1030 - SIL 2 Switch / Proximity Detector Repeater Relay Output 11
 Configuration

Dip switch configuration

D1030S CH1

CH Line fault Disabled

OFF ON
Setting detection (contact / proximity sensor) 1

1 2 3 4
Enabled OFF ON OFF OFF
(proximity sensor or contact ON
with terminating line resistor) 1 Factory settings
For SIL applications.

Input Output Input Output

13 1 13 1
IN / OUT NO-NE or NO NE NC ND
OR OFF
Operation NC-ND 2
2 2
14 8 14 8

Input Output Input Output

13 1 13 1
NO ND NC NE
NO-ND or
OR ON
NC-NE 2
2 2
14 8 14 8 For SIL applications.

Out A Out B
NE 1 NE 5
B Output Parallel
Normal OFF OFF
Operation 3 Mode 4
2 6
For SIL applications. 8 7

Out A Out B
NE 1 ND 5
Reverse ON
Mode 4
2 6
8 7

No Fault
ND 5
Fault ND
ON OFF
Output 3
Mode 4
6
7

No Fault
NE 5
NE
ON
Mode 4
6
7
D1030D Configuration Summary Table

Channel 1 2 Channel 1 2
IN/OUT Operation SW2 SW4 Line fault detection SW1 SW3

Disabled
NO-NE or NC-ND OFF OFF OFF OFF
(contact/proximity sensor)

Enabled (For SIL applications.)

NO-ND or NC-NE
ON ON (proximity sensor or contact with terminating line resistor, ON ON
(For SIL applications.)
detects field open circuit and short circuit de-energizing output)

D1030S Configuration Summary Table

IN/OUT Operation SW2 Line fault detection SW1 B Output Operation SW3 Mode SW4
Direct OFF
Normal
NO-NE or NC-ND OFF Disabled OFF OFF
(For SIL applications.) Reverse ON
ND OFF
NO-ND or NC-NE Enabled
ON ON Fault Output ON
(For SIL applications.) (For SIL applications.) NE ON

12 D1030 - SIL 2 Switch / Proximity Detector Repeater Relay Output G.M. International ISM0008-17