While the information in this document is presented in good faith and believed to be accurate,
Honeywell disclaims any implied warranties of merchantability and fitness for a particular
purpose and makes no express warranties except as may be stated in the written agreement with
and for its customers. In no event is Honeywell liable to anyone for any indirect, special, or
consequential damages. The information and specifications in this document are subject to
change without notice.
Honeywell, TDC 3000, SFC, SmartLine, PlantScape, Experion PKS, and TotalPlant are
registered trademarks of Honeywell International Inc. Other brand or product names are
trademarks of their respective owners.
The following list id entifies publ ications that m ay contain inform a tion re levant to the information
in this document.
STT850
• STT850 SmartLine Temperature Tr ansmitter Specifications, 34-TT-03-14
• STT850 SmartLine Temperature Transmitter Quick Start Installation Guide,
# 34-TT-25-04
• STT 850 SmartLine Temperature Transmitter User Manual, Document # 34-TT-25-03
• STT850 SmartLine Temperature Transmitter HART/DE Option User’s Manual,
# 34-TT-25-06
STT750
• STT750 SmartLine Temperature Tr ansm itt er Spec if icat ion, 34-TT-03-16
• STT750 SmartLine Temperature Transmitter Quick Start Installation Guide,
# 34-TT-25-14
• STT 750 SmartLine Temperature Transmitter User Manual, Document # 34-TT-25-13
• STT750 SmartLine Temperature Tr ansm itt er HAR T Optio n Use r’s Man ual,
# 34-TT-25-16
Patent Notice
The Honeywell STT850 SmartLine Temperature Transmitter family is covered by one or more of
the following U. S. Patents: 5,485,753; 5,811,690; 6,041,659; 6,055,633; 7,786,878; 8,073,098;
and other patents pending.
Revision 6 HART® Communications Options Safety Manual iii
Support and Contact Information
United States and
Canada
1-800-343-0228 Customer Service
1-800-423-9883 Global Technical Support
For Europe, Asia Pacific, North and South America contact details, refer to the back page of this
manual or the appropriate Honeywell Solution Support web site:
Honeywell Corporate www.honeywellprocess.com
Honeywell Process Solutions www.honeywellprocess.com/temperature-transmitters/
Training Classes http://www.honeywellprocess.com/en-US/training
Telephone and Email Contacts
Area Organization Phone Number
Honeywell Inc.
Global Email Support Honeywell Process Solutions ask-ssc@honeywell.com
iv HART Option Safety Manual Revision 6
1oo1
One out of one
Basic Safety
The equipment must be designed and manufactured such that it protects
condition
DU
Dangerous Undetected failures
FMEDA
Failure Modes, Effects and Diagnostic Analysis
Functional
The ability of a system to carry out the actions necessary to achieve or
GTS
Global Technical Support Center
HART®
Highway Addressable Remote Transducer
HFT
Hardware Fault Tolerance
Low demand
Mode, where the frequency of demands for operation made on a safety-
the proof test frequency.
PFD
Average Probability of Failure on Demand
Safety
Freedom from unacceptable risk of harm
Safety
The investigation to arrive at a judgment - based on evidence - of the
SFF
Safe Failure Fraction, the fraction of the overall failure rate of a device
SIF
Safety Instrumented Function, a set of equipment intended to reduce the
SIL
Safety Integrity Level, discrete level (one out of a possible four) for
SIS
Safety Instrumented System – Implementation of one or more Safety
Terms and Abbreviations
against risk of damage to persons by electrical shock and other hazards
and against resulting fire and explosion. The protection must be effective
under all conditions of the nominal operation and under single fault
Safety
mode
AVG
Assessment
to maintain a defined safe state for the equipment / machinery / plant /
apparatus under control of the system
related system is no greater than one per year and no greater than twice
safety achieved by safety-related systems. Further definitions of terms
used for safety techniques and measures and the description of safety
related systems are given in IEC 61508-4.
that results in either a safe fault or a diagnosed unsafe fault.
risk due to a specific hazard (a safety loop).
specifying the safety integrity requirements of the safety functions to be
allocated to the E/E/PE safety-related systems where Safety Integr ity
Level 4 has the highest level of safety integrity and Safety Integrity Level
1 has the lowest.
Instrumented Functions. A SIS is composed of any combination of
sensor(s), logic solver(s), and final element(s).
Revision 6 HART® Communications Options Safety Manual v
Contents
Terms and Abbreviations ................................................................................................................. v
5 — Operation and Maintenance with the HONEYWELL STT850 & STT750 ........... 6
Proof test ............................................................................................................................................. 6
This section is intended for user’s who have our STT850 & STT750 SmartLine Temperature
Transmitter with the HART
specifically covered by this manual.
IEC 61508 Ed. 2.0 compliant hardware/software revisions for the STT850 & STT750 SmartLine
Temperature Transmitter can be found in the Exida and TÜV Certification Reports.
In addition, the most recent release information can be found in the following document:
The HONEYWELL STT850 & STT750 measures the temperature (or mV, Volts or ohms) of a
process and reports the measurement within a safety accuracy of 2%.
Secondary Safety Functions
The HONEYWELL STT850 & STT750 performs automatic diagnostics to detect internal failures
and reports these failures via out of band signals on the 4 – 20 mA output.
The transmitter needs a power cycle in order to recover from this condition.
If the Digital Output (STT850 only) is configured for "Critical Diagnostic" then it will turn on
when the automatic diagnostics detect an internal failure.
Systematic Integrity: SIL 3 Capable
SIL 3 Capability:
The product has met manufacturer design process requirements of Safety Integrity Level (SIL) 3.
These are intended to achieve sufficient integrity against systematic errors of design by the
manufacturer. A Safety Instrumented Function (SIF) designed with this product must not be used
at a SIL level higher than the statement without “prior use” justification by end user or diverse
technology redundancy in the design.
This is a Type B device.
2 HART Option Safety Manual Revision 6
3 — Designing with the HONEYWELL STT850 & STT750
Diagnostic Response Time
The HONEYWELL STT850 & STT750 will report a n internal fai lu re wi thin 12 minutes of fault
occurrence (worst case).
The transmitter will be put to burnout output if
1. PV is not updated in 5 seconds
2. 4-20mA Output Current is not as expected in 2.5 minutes
3. Electronics fault is found in 12 minutes (worst case).
4. If the Digital Output (STT850 only) is configured for "Critical Diagnostic" then it will
turn on at these same times
The transmitter needs to be power cycled in order to recover from the burnout condition.
Logic Solver Inputs
The logic solver must be configured so that the engineering range in the transmitter matches the
expected range of the logic solver.
To take advantage of the internal diagnostics in the STT850 & STT750, the logic solver must be
configured to annunciate an out of band current reading (greater than 20.8 mA. or less than 3.8
mA.) in standard configuration or (greater than 20.5 mA. or less than 3.8 mA.) with Namur
configuration as a diagnostic fault. The logic solver configuration must consider the slew time of
the current signal and ensure that filtering is used to prevent a false diagnostic failure
annunciation.
If the Digital Output (STT850 only) is used for a Logic Solver application, then the transmitter
must be configured to use only the High Burnout mode as the Digital Output is shut off when the
transmitter is in Low Burnout."
Reliability data and lifetime limit
A detailed Failure Mode, Effects, and Diagnostics Analysis (FMEDA) report is available from
HONEYWELL. This report details all failure rates and failure modes, common cause factors for
applications with redundant devices and the expected lifetime of the HONEYWELL STT850 &
STT750 AND STT750.
The HONEYWELL STT850 & STT750 is intended for low demand mode applications up to SIL
2 for use in a simplex (1oo1) configuration, depending on the PFD
Safety Instrumented Function. STT850 & STT750 is classified as type B device according to
IEC61508, having a hardware fault tolerance of 0.
The development process of the HONEYWELL STT850 & STT750 is certified up to SIL3,
allowing redundant use of the transmitter up to this Safety Integrity Level, depending the PFD
calculation of the entire Safety Instrumented Function.
When using the HONEYWELL STT850 & STT750 in a redundant configuration, a common
cause factor should be included in reliability calculations. For reliability calculation details, useful
lifetime and SFF, see the FMEDA report.
The reliability data listed the FMEDA report is only valid for the useful life time of the
HONEYWELL STT850 & STT750. The failure rates of the HONEYWELL STT850 & STT750
may increase sometime after this period. Reliability calculations based on the data listed in the
FMEDA report for mission times beyond the lifetime may yield results that are too optimistic, i.e.
the calculated Safety Integrity Level will not be achieved.
Failure rates of the T/C, RTD, and E/U meter must be added and considered in the overall failure
rate for the STT850 & STT750.
The environmental limits of the HONEYWELL STT850 & STT750 are specified in the customer
spec sheets as given in the STT850 & STT750 Specification 34-TT-03-14.
Application limits
The application limits of the HONEYWELL STT850 & STT750 are specified in the User
Manual. If the transmitter is used outside of the application limits the reliability data provided
becomes invalid.
4 HART Option Safety Manual Revision 6
4 — Installation with the HONEYWELL STT850 & STT750
The person with knowledge of safety operations will be required to do the installation and
operation. No special installation is required in addition to the standard installation practices
outlined in the STT850 & STT750 Smart Transmitter User Manual. However please note that
when the device is in safety operation the optional write protect must be set in hardware and
software both so that the device is write protected and HART
This can be done using the write protect jumper. See STT850 & STT750 Smart Transmitter User
Manuals for details concerning the write protect jumper (STT850 – 34-TT-25-03,
STT750 – 34-TT-25-13). Default configuration of Latching and Break detect parameters is
disabled from sensor firmware version 1.010300. Note that when the device is in safety operation
the Latching and Break Detect parameters must be enabled.
If the Digital Output (STT850 only) function is being used in a Safety Application then it too
should be set for Latching. Also, as the Digital Output is disabled when the transmitter is in the
Low-burnout mode, then when using a Digital Output in a Safety Application the transmitter
should only be configured to use High-burnout mode. See STT850 & STT750 Smart T ransmitter
User Manuals for details concerning these parameters
The software write protect is also available in the device with a password to disable the software
write protect. The default password is “0000”. It can be enabled / disabled through HART host.
IEC 61508 Ed. 2.0 compliant hardware/software revisions for the STT850 & STT750 can be
found in the Exida and TÜV Certification Reports. In addition, the most recent release
information can be found in the following document:
The following parameters need to be set in order to maintain the designed safety integrity:
mA Fault action
(Upscale/Downscale)
Engineering Range All engineering range parameters must be entered to match
Note: As of HART Communication Module Firmware v1.060500 (Part No. 50087658-701) and
greater, the mA Fault action and Engineering Range parameters are no longer factory defaulted to
enabled. For SIL compliance, these parameters must be set to enabled by the user prior to being
used in a SIL system.
The transmitter is shipped with a default failsafe direction of
upscale (21.5 mA.). This is acceptable for all high trip
applications. For low trip applications, the fail-safe direction
is downscale (3.5 mA.). A jumper on the transmitter may be
changed to accomplish this action, see the User Manual.
the trip points in the safety logic solver. These parameters
must be verified during the installation and commissioning to
ensure that the correct parameters are set in the transmitter.
Engineering range parameters can be verified by reading
these parameters from the local display or by checking
actual calibration of the transmitter.
The objective of proof testing is to detect failures within the HONEYWELL STT850 & STT750
that are not detected by the automatic diagnostics of the transmitter. Of main concern are
undetected failures that prevent the safety instrumented function from performing its intended
function.
The frequency of proof testing, or the proof test interval, is to be determined in reliability
calculations for the safety instrumented functions for which the HONEYWELL STT850 &
STT750 is applied. The Exida exSILentia® tool is reco mmended for these calculations. The
proof tests must be performed more frequently than, or as frequently as specified in the
calculation in order to maintain the required safety integrity of the safety instrumented function.
The following proof test is recommended. It consists of a simple HART
output test. The results of the proof test need to be documented and this documentation should be
part of a plant safety management system. Any failures that are detected and that compromise
functional safety should be reported to the Global Technical Support Center (GTS).
See STT850 & STT750 Smart Transmitter User Manual for more details (STT850 – 34-TT-2503, STT750 – 34-TT-25-13).
Step Action
5 — Operation and Maintenance with the
HONEYWELL STT850 & STT750
®
driven min to max
1 Bypass the safety PLC or take other appropriate action to avoid a false trip, following
Management of Change procedures.
2
Send a HART
the analog current reaches that value.
This procedure tests for compliance voltage problems such as a low loop power supply voltage
or increased wiring resistance. This also tests for other possible failures.
3 Send a HART® command to the transmitter to go to the low alarm current output and verify that
the analog current reaches that value. This test checks for possible quiescent current related
failures.
4 Use the HART® communicator to view detailed critical and non-critical device stat us to ensure
no alarms or warnings are present in the transmitter.
5 Verify all safety critical configuration parameters.
6 The WP jumper state should be checked to see if it is in WP mode first, and then changed to
Enable to ensure a change is detected by device while configuring, and then moved back to WP
after the configuration is complete. Then it should be verified again.
7 Calibrate the device as per calibration procedure given below.
8 Restore the loop to full operation.
9 Power cycle or cold reset to clear soft errors in memory (RAM).
10 Remove the bypass from the safety PLC or otherwise restore normal operation.
11 If Digital Output (DO) is present, change the monitored input such that the DO turns on and off.
Monitor the output to confirm that the DO works as expected.
®
command to the transmitter to go to the high alarm current output and verify that
6 HART Option Safety Manual Revision 6
This test will det ec t approximately 30% of possible DU failures in the tra nsmitter (Proof Test
Coverage). An alternative proof test consisting of proof test 1 with actual two point temperature
calibration plus verification of the temperature measurement will detect approximately 48% of
possible DU failures.
The person(s) performing the proof test of the HONEYWELL STT850 & STT750 should be
trained in SIS operations, including transmitter maintenance and company Management of
Change procedures. Tools required are: handheld communicator.
Calibration procedure
The transmitter should be taken out of service. The source for the input Temperature must be very
precise, and certified for correct operation.
Step Action
1 Connect the HART host and establish the communications.
2 Go to Online > Device Setup > Calibration > Calibration Methods menu.
3 Go to “D/A Trim”
4 Message “Warn loop should be removed from automatic control” will appear. Press “Ok”.
5 Message “Connect reference meter” will appear. Connect the reference meter and press “Ok”.
6 Message “Setting fld device output to 4mA” will appear. Press “Ok”. Message “Enter meter value
(4,000mA)” will appear with a textbox to enter actual value observed on meter. Enter the actual
value and press “Enter”.
7 Message “Fld dev output 4,000mA equal to reference meter?” will appear with Yes/No selection.
Select “Yes” and “Enter”.
8 Message “Setting field device output to 20mA” will appear. Press “Ok”.
9 Message “Fld dev output 20,000mA equal to reference meter?” will appear with Yes/No selection.
Select “Yes” and “Enter”.
10 Message “Returning fld dev to original output” will appear. Press “Ok”.
11 Now Double click “URV Correct” method
12 Message “WARN-Loop should be removed from automatic control” will appear. Press “Ok”.
13
Message “Please enter calibration date” will appear. Enter the current date and press “Ok”.
14 Message “Please enter current calibration time in 24 hr clock format (hour field)” will appear.
Enter the current time hour and press “Ok”.
15 Message “please enter current calibration time (min field)” will appear. Enter the current time
minutes and press “Ok”.
16 Message “Apply URV Temperature” will appear.
17 Adjust the PV input to the required URV value. Press “Ok”.
18 Message “Press ok when Temperature is stable” will appear. Press “Ok”
19 The correct URV operation will happen .
20 Message “Loop may be returned to automatic control” will appear. Press “Ok”.
21 Follow the same procedure for “Correct LRV” (replace URV in above procedure by LRV) and
When configuring the HONEYWELL STT850 & STT750 through a remote host, it is
recommended that parameters tha t affect the 4 -20ma analog output be verified using an alternate
utility, before using the transmitter in a SIS. This helps to ensure that the parameters that are
entered remotely by the host are not inadvertently changed from the user intended values.
he procedure can consist of listing the parameters and their values entered in the host
T
application. Then, using an alternative application, the same parameters are read back and noted
in the same form. The form is then signed, dated, and filed for future reference. See Table 1 Example Verification Form for an example of this form.
ote that using the same host application to verify the remotely entered values will not provide as
N
much assurance as using an alternate application.
T
able 1 - Example Verification Form
8 HART Option Safety Manual Revision 6
Repair and replacement
Any failures that are detected and that compromise functional safety should be reported to the
Global Technical Support Center (GTS).
When replacing the HONEYWELL STT850 & STT750 the procedures in the installation manual
should be followed.
Firmware update
The user will not be required to perform any firmware updates. If the user has selected the
firmware upgrade option, it can be done by Honeywell service representative.