Safety Function Proof Test

The safety function proof test is performed for each SIL* group on the island. A SIL group may comprise multiple SIL avatars managed by one SIL Interface Module (SIM).

The safety function proof test is successful if upon activation of the emergency stop device associated with a SIL group, all SIL starters belonging to that SIL group enter the safe state (the load is de-energized).

NOTE: For Stop Category 0 (uncontrolled stop), the stop should be immediate. For Stop Category 1 (controlled stop) the stop is effective after a delay.*

Perform the steps in the following table for each SIL group on the island to perform the safety function proof test.

Safety Function Proof Test

1	Activate the emergency stop device associated with the SIL group, and check that all SIL starters belonging to the group enter the safe state (the load is de-energized).
	NOTE: The Device Status (DS) LED will flash red on the SIL starters, indicating a Device Minor Event state.
	If the test does not pass: The emergency stop device may be connected to the wrong SIM. Check these connections. The emergency stop device may not be correctly wired to the SIM. Check these connections. Some SIL avatars may not be attached to the expected SIL Group. Check the configuration.
2	In the TeSys™ island DTM or OMT AVATARS panel, in the DIAGNOSTICS section, check the STATUS and EVENT LOGS to verify that SIL Group Status is equal to "Stop Command." In the Event Log it will read “SIL Group Stop cmd, Safe State achieved.”
2	If the test does not pass: Some SIL avatars may not be attached to the expected SIL Group. Check the configuration.
3	In the DEVICES section of the DIAGNOSTICS panel, verify that the SIL Interface Module (SIM) Status is equal to "Stop Command.” In the Event Log it will read “SIL Group Stop cmd, Safe State achieved.”
3	If the test does not pass: The emergency stop device may be connected to the wrong SIM. Check these connections. The emergency stop device may not be correctly wired to the SIM. Check these connections.
4	Apply a start command to a SIL avatar belonging to the SIL group and verify that the start is unsuccessful: the starters should remain open and the start command should be disregarded until the emergency stop device is reset.
4	If the test does not pass: Some SIL avatars may not be attached to the expected SIL Group. Check the configuration. If any of these tests continue not to pass despite corrective actions, do not continue to operate the island. Replace the devices that did not pass the tests.
5	After the safety function proof test is complete, reset the emergency stop device and verify that all SIL starters and SIL interface modules are in Ready state (the DS LED is steady green).