Designing and Proof Testing Safety-Related Load Switching with KFD2-RSH-1.2E.L3

Pepperl+Fuchs KFD2-RSH-1.2E.L3 is a one-channel relay module intended for safety-related switching of load circuits. It accepts a 24 V DC logic command on the control side and switches an externally supplied field load through a relay contact output. The module provides line fault transparency, internal diagnostics, a separate fault indication, and capability up to SIL 3 when applied within a correctly designed safety function. It is commonly considered for contactors, shutdown loads, interposing relays, and other applications requiring an energized-to-safe switching concept.

Energized-to-Safe Must Match the Process Design

KFD2-RSH-1.2E.L3 is designed for energized-to-safe operation. The system designer must define what relay state produces the safe process condition and what happens after loss of module power, loss of logic command, relay fault, open load circuit, short circuit, or external field supply failure. The module should not be selected only from its SIL rating or contact current.

Prepare a cause-and-effect description covering the control-system digital output, KFD2-RSH-1.2E.L3 input, relay contacts, external voltage, load, feedback, and final process action. The safe state may require a contactor to energize, a valve circuit to remain powered, or another specific behavior. Verify that every failure mode moves the process toward the intended result or produces a detectable fault response.

Input and Output Are Different Electrical Domains

The control-side input uses a 19 to 26.4 V DC logic signal. The relay output switches an externally supplied field circuit, with recommended connectable ranges of 50 to 230 V AC or 60 to 110 V DC for the designated function. Contact loading, inrush current, power factor, inductive suppression, minimum switching current, fuse selection, and derating must be reviewed for the real load.

A relay may carry a steady current comfortably while experiencing damaging inrush when a contactor coil, transformer, lamp, or capacitive load is energized. Use the manufacturer derating curves and provide the required external current limitation. Protect the contacts with an appropriate fuse as required by the safety instructions.

Diagnostics Need an Operating Response

KFD2-RSH-1.2E.L3 includes internal diagnostics, line fault transparency, LED indication, and a fault indication output. These features are valuable only when the control system and maintenance procedures respond appropriately. Define alarm text that identifies the exact module and load circuit, distinguishes a process trip from a diagnosed wiring fault, and tells operators whether immediate action is required.

Internal fault detection and line monitoring can affect the permitted switching sequence and timing. Record DIP-switch settings before replacement and verify them against the approved safety design. Do not copy settings from a neighboring channel without confirming that the load, test-pulse behavior, and diagnostic requirement are the same.

Proof Test the Complete Switching Path

1. Confirm the full model KFD2-RSH-1.2E.L3, hardware condition, Power Rail or terminal supply, and DIP-switch configuration.
2. Verify the safe-state definition, test permit, bypass control, and communication with operations.
3. Apply normal control commands and confirm input, relay, load, and feedback indications.
4. Remove the logic command and verify the designed safe reaction.
5. Create approved open-circuit and short-circuit test conditions and confirm line-fault response.
6. Verify the separate fault indication reaches the correct control-system alarm.
7. Test external field-supply loss and confirm the process response and diagnostic message.
8. Restore every connection, fuse, bypass, and force, then independently confirm normal operation.

Proof-test interval and coverage must come from the safety requirements specification and reliability calculation. Capability up to SIL 3 does not mean the complete loop automatically achieves SIL 3. Sensor or command source, logic solver, relay module, field wiring, load, final element, diagnostics, maintenance, and management of change all contribute to achieved integrity.

Installation Environment and Service Life

The module mounts on a 35 mm DIN rail and has IP20 protection. Pepperl+Fuchs requires an appropriate surrounding enclosure and, for applicable Zone 2 use, an enclosure meeting the specified protection requirements. Observe ambient-temperature derating, cabinet ventilation, pollution degree, overvoltage category, conductor size, terminal torque, and rules for connecting energized circuits.

Relay life depends on load and switching duty. Record the number and frequency of operations where the application cycles regularly. A contact used near its maximum switching capability can require a different maintenance strategy from a relay that changes state only during proof testing.

Management of Change Protects the Safety Claim

Changes to the load, fuse, suppression device, field voltage, logic solver output, or proof-test interval can alter the behavior of the safety function even when KFD2-RSH-1.2E.L3 remains unchanged. Route these changes through the plant management-of-change process. Update the cause-and-effect chart, loop drawing, calculation, test procedure, spare list, and operator alarm guidance before returning the function to service.

The completed proof-test record should show the model and serial information, switch settings, test instruments, simulated faults, observed diagnostics, output state, final-element response, restored bypasses, and approval signatures. Record any part of the function that could not be tested and assign a follow-up action. Clear evidence is essential when the relay operates infrequently and its last successful demand may have occurred months or years earlier.

Store an approved replacement plan with the spare KFD2-RSH-1.2E.L3. It should identify the correct fuse, terminal arrangement, switch positions, safe isolation steps, required permits, and proof-test procedure. A prepared plan shortens outage work while preserving the checks needed for a safety-related circuit.

Replacement and Purchase Details

Before removing KFD2-RSH-1.2E.L3, photograph the label, terminals, fuses, LEDs, and DIP switches. Record the external field voltage, load type, steady current, inrush characteristic, and safety-function reference. After replacement, carry out the approved proof test; a successful manual relay click is not enough.

For quotation, provide KFD2-RSH-1.2E.L3, quantity, destination country, required delivery date, and a clear product-label photo. Mention whether Power Rail feed modules, terminals, fuses, or related signal conditioners are required. Sunup-MTL can assist with model confirmation, quotation, export packing, and global shipment. Final functional-safety assessment, load suitability, wiring, configuration, and proof testing remain the responsibility of qualified personnel using current Pepperl+Fuchs documentation.