---

1. a fault, as in 4.14.1 a) and 4.14.7;

2. faults of supervised functions, as in 4.14.1 to 4.14.6, where only these functions are affected.

NOTE See also annex B.

1. the program shall be held in non-volatile memory, which can only be written to at access level 4.

2. it shall be possible to identify the version reference(s) of the program at access lev&l 3. The version reference(s) shall be in accordance with the documentation of 6.6.1.

rOi Sil6 SpBGhiC Cicitd., th© following ГвциіГвГҐівГцЗ Знйіі apply;

1. the alteration of site specific data shall only be possible at access level 3 or 4;

2. the alteration of site specific data shall not affect the structure of the program;

3. the site specific data shall be given a version reference, which shall be updated when each set of alterations is carried out;

4. it shall be possible to identify the version reference of the site specific data at access level 3;

5. if stored in volatile memory, the site-specific data shall be protected against power loss by a back-up energy source which can only be separated from the memory at access level 4, and which is capable of maintaining the memory contents for at least two weeks;

6. If stored in read-write memory, there shall be a mechanism which prevents the memory being written to during normal operation at access level 1 or 2, such that its contents are protected during a failure in program execution.

The contents of the memory containing the site specific data shall be automatically checked at intervals not exceeding 1 h. The checking device shall signal a system fault if a corruption of the memory contents is detected.

1. A functional description of the main program flow, including:

• a brief description of each module and the tasks it performs;

• the way in which the modules interact;

• the way in which the modules are called, including any interrupt processing;

• the overall hierarchy of the program.

The functional description of the main program flow shall be explained using a clear methodology appropriate to the nature of the software, e.g. graphical representations of the system design, the data flows and control flows.

2. A description of which areas of memory are used to store the program, site specific data and running data. Where dynamic memory management is employed, a separation shall be implemented between the program, site specific data and running data and this shall be described in connection with the method of memory allocation.

3. A description of how the software interacts with the hardware of the e.c.d.

1. a description of each module, as it is implemented in the source code of the program, containing :

1. the name of the module;

2. the identification of the author(s);

3. the date and/or version reference;

4. a description of the tasks performed;

5. a description of the interfaces, including the type of data transfer, the valid data range, and the checking for valid data;

2. the source code listing, including all global and local variables, constants and labels used, and sufficient comment for the program flow to be recognised;

3. details of any software tools used in the preparation of the program (e.g. high level design tools, compilers, assemblers).

In the event of a system fault as specified in 6.3 and 6.5 not more than one flooding zone shall be affected. Where the room and its false floor are subdivided into two flooding zones, a system fault may affect these two flooding zones.

7. Marking

The e.c.d. shall be marked with the following information, which shall be legible at access level 1:

1. the name or trademark of the manufacturer or supplier;

2. the model designation (type or number);

3. the environmental class (according to 4.2).

It shall be possible to identify a code or number identifying the production period of the e.c.d., at access level 2 or 3.

The marking shall be non-detachable and permanent.

Where the requirements of ZA.3 give the same information as above, the requirements of this clause 7 have been met.

7. Documentation

   1. The manufacturer shall prepare and maintain documentation.

   2. The documentation shall be submitted to the testing authority and shall comprise at least the following:

1. A general description of the equipment, including a list of the features and functions relating to:

1. compulsory and optional functions with requirements of this European Standard;

2. ancillary functions not required by this European Standard;

2. A technical specification of the inputs and outputs of the e.c.d. sufficient to permit an assessment of the mechanical, electrical and software compatibility with other components of the system, including:

1. the power requirements for recommended operation;

2. the maximum number of external connectable devices and transmission paths;

3. the maximum and minimum electrical ratings for each input and output;information on the communication parameters on transmission paths;

4. recommended types of cable for each transmission path;

5. fuse ratings;

3. Installation information, including mounting instructions;

4. Operating instructions;

5. Configuring and commissioning instructions;

6. Maintenance and routine testing instructions.

• the main parts of the e.c.d. and their tasks;

• the way in which the parts interact;

• circuit diagrams;

• component lists;

• layouts;

• design drawings.

This documentation shall also comprise details of any components specific to the manufacturer (e.g. customised integrated circuits).

7. 4. All documentation normally supplied by and specified by the manufacturer for use by the end user shall be supplied with the device and constitute part of the supply.

8. Tests

   1. General test requirements

      1. Unless otherwise stated in a test procedure, the testing shall be carried out after the test specimen has been allowed to stabilise in the standard atmospheric conditions for testing as described in EN 60068-1 as follows:

Temperature: (15 to 35) °С

Relative humidity: (25 to 75) %

Atmospheric pressure: (860 to 1060) hPa

The temperature and humidity shall be substantially constant for each environmental test where the standard atmospheric conditions are applied.

If the test procedure requires the specimen to be in the quiescent condition, it shall be connected to a power supply according to the requirements in EN 54-4. Unless otherwise required, the power supply shall be in the quiescent condition. All inputs and outputs shall be connected to appropriate cables and equipment or to 28dummy loads. At least one of each type of transmission path shall be maximum loaded as specified by the manufacturer.

"Taef ог'ОГ'ігг»e*} oKoli ha лапал/'+л'-І al laaol Iha ІлІІлшіпл гіачілао¹

і ww* Ґ.ІИІ ч^і. iUU^i U.w і 4zii V .Ї .. iy k-W iv W-.

1. a triggering signal input device which simulates an f.d.a.s.;

2. a manual triggering device;

3. an emergency hold device, if an emergency hold function is provided;

4. an emergency abort device, if an emergency abort function is provided;

5. actuator(s);

6. alarm equipment.

NOTE Peripheral devices can be kept during the tests in the standard atmospheric conditions.

9.2 Functional tests

a) Test of the Activated/Released Condition

Initiate the Activated Condition by the:

1. triggering signal input device which simulates an f.d.a.s.;

2. manual triggering device.

After each step check that the e.c.d. is in the Activated/Released Condition and that the transmission paths to the alarm equipment and actuator(s) and ancillary device(s) are active.

Check that the set delay time is within the tolerance limits, if a delay function is provided. Check that the set flooding time is within the tolerance limits, if a control flooding time is provided.

In a second test sequence, if an emergency hold function is provided, the emergency hold device shall be activated:

• during the pre-discharge warning time;

• immediately after activation of the actuator(s).

Check that

• in the first case the triggering signal for the actuator(s) is delayed for the time the emergency hold device is activated;

• in the second case the activated actuator is not influenced;

• the activation of the alarm equipment and ancillary equipment is not influenced in any case.

Check after each step that the conditions are indicated correctly.

In a third test sequence, if an emergency abort function is provided, the emergency abort device shall be activated:

uuiiiiy tiie quiesceiil СОПОціОіі, iuiiOvVeCi uy an input triggering uigt іЗІ;

— during the pre-discharge warning time.

Check that the output to the actuator(s) is not activated.

Check after each step that the conditions are indicated correctly.

2. Test of Fault warning condition and monitoring;

Initiate and reset successively fault warnings corresponding at least to short circuit and interruption in the following transmission paths to the:

• actuator(s);

• alarm equipment;

• manual triggering device(s);

• emergency hold device, if an emergency hold function is provided;

• emergency abort device, if an emergency abort function is provided;

• f.d.a.s.;

• device(s) for monitoring, if a monitoring function is provided;

• non-electrical disable device, if a separate monitoring function is provided;

In addition, initiate and reset successively fault warnings corresponding also to a loss of each of the power sources.

Check after each step that the conditions are indicated correctly.

If an emergency hold and/or abort function is provided, check that no activation of the transmission path to the actuator(s) is possible, when a fault is present on the transmission path to the emergency hold and/or abort device.

2. Test of the Disabled condition;

1. Disable and re-enable the function of processing alarm signals from the transmission path to an f.d.a.s.

2. Disable and re-enable the function of processing alarm signals from the transmission path to manual

triggering device(s).

3. Disable and re-enable the transmission path to the actuator(s).

4. Disable and re-enable the transmission path to the alarm equipment, if this function is provided.

5. Disable and re-enable the transmission path to equipment outside the fire extinguishing system (triggering of doors, ventilation shut down, plant shut down etc.), if this function is provided.

Check that the operation of the disablement controls result in the correct indication on the e.c.d.; that only the intended parts of the system are disabled, except the disabling of the transmission path to the alarm equipment, where the simultaneous disablement of the transmission path to the actuator(s) is required, and that on removal of the disablement the function is restored.

One or more test specimen(s) are subjected to environmental tests in accordance with EN 54-2, with the following exceptions end amendments:

1. the fire alarm condition of EN 54-2 is considered equivalent to the activated and released condition of this standard;

2. wherever a functional test is required, it shall be carried out in accordance with 9.1 and 9.2;

3. for e.c.d.s class В or e.c.d.s class D the test "damp heat, steady state (operational)” is replaced by the test "damp heat, cyclic (operational)" in accordance with 9.4;

4. for e.c.d.s class C or e.c.d.s class D the test schedule is extended by an additional corrosion-test (endurance) in accordance with 9.5;

5. in the test "cold (operational)" the test temperature during conditioning shall be:

• (-5 ± 3) °С for e.c.d.s class A or e.c.d.s class C;

• (-20 ± 3) °С for e.c.d.s class В or e.c.d.s class D.

6. In the test "vibration, sinusoidal (operational)" the acceleration amplitude shall be:

• 0,981 m/s² (0,1 g_n) for e.c.d.s class A or e.c.d.s class B;

• 4,905 m/s² (0,5 g_n) for e.c.d.s class C or e.c.d.s class D.

7. In the test "vibration, sinusoidal (endurance)" the acceleration amplitude shall be:

• 4,905 m/s² (0,5 g_n) for e.c.d.s class A or e.c.d.s class B;

• 9,81 m/s² (1,0 g_n) for e.c.d.s class C or e.c.d.s class D.

The object of the test is to demonstrate the ability of the equipment to function correctly at high relative humidity (with condensation) which may occur for short periods in the anticipated service environment.

Use the test procedure described in EN 60068-2-30, using the variant 1 test cycle and controlled recovery conditions.

Э.4.2.2 Initial examination

Before conditioning, subject the specimen to the functional test.

9.4.2.3 State of the specimen during conditioning

Mount the specimen as specified in 9.1.2 and connect it to suitable power supply, monitoring and loading equipment (see 9.1.4). The specimen shall be in the quiescent condition.

Apply the following severity of conditioning:

1. lower temperature: (25 ± 3) °С;

2. upper temperature (55 ± 2) °С;

3. relative humidity at lower temperature: (93 ± 3) %;

4. relative humidity at upper temperature: (93 ± 3) %;

5. number of cycles: 2.

Monitor the specimen during the conditioning period to detect any change in status. During the last hour of the conditioning period, subject the specimen to the functional test.

After the recovery period, subject the specimen to the functional test and inspect it visually for mechanical damage both externally and internally.

During this test, the specimen shall not change status, except when such a change is a result of the functional test.

When subjected to the functional test the specimen shall respond correctly.

9.5 Sulphur dioxide (SO2) corrosion (endurance)

The object of the test is to demonstrate the ability of the equipment to withstand the corrosive effects of sulphur dioxide as an atmospheric pollutant.

Use the test procedure described in prEN 60068-2-42 Test Kc, except that the conditioning shall be as described below.

Э.5.2.2 Initial examination

Before conditioning, subject the specimen to the functional test.

9.5.2.3 State of the specimen during conditioning

Mount the specimen as specified in 9.1.2 and connect it to a suitable power supply, monitoring and loading equipment (see 9.1.4). The specimen shall not be supplied with power during the conditioning.

Э.5.2.4 Conditioning

Apply the following conditioning for class C or class D e.c.d.s:

-Temperature: (25±2) °С; •

- Relative humidity

(93 ± 3) %;

- SO2 concentration:

(25 ± 5) p.g/g;

-

21 days.

Duration:

9.5.2.5 Final measurements

Immediately after conditioning the specimen shall be subjected to a drying period of 16 h at 40 °С and a relative humidity of maximum 50 %, followed by a recovery period of 1 h to 2 h at standard atmospheric conditions. After this recovery period subject the specimen to the functional test and inspect it visually for mechanical damage both externally and internally.

9.5.3 Requirements

When subjected to the functional test the specimen shall respond correctly.

10 Evaluation of conformity

The compliance of the component with the requirements of this European Standard shall be demonstrated by:

• initial type testing,

• factory production control by the manufacturer.

NOTE The manufacturer is a natural or legal person, who places the component on the market under his own name. Normally, the manufacturer designs and manufactures the component himself. As a first alternative, he may have it designed, manufactured, assembled, packed, processed or labelled by subcontracting. As a second alternative he may assemble, pack, process, or label ready-made products.

The manufacturer shall ensure:

• that the initial type testing in accordance with this European Standard is initiated and carried out (where relevant, under the control of a product certification body); and

• that the component continuously complies with the initial type testing samples, for which compliance with this European Standard has been verified.

He shall always retain the overall control and shall have the necessary competence to take the responsibility for the component.

The manufacturer shall be fully responsible for the conformity of that component to all relevant regulatory requirements. However, where the manufacturer uses components already shown to conform to those requirements relevant for that component (e.g. by CE marking) the manufacturer is not required to repeat the evaluation which led to such conformity. Where the manufacturer uses components not already shown to conform, it is his responsibility to undertake the necessary evaluation to show conformity.