12 Rockwell Automation Publication 1791ES-UM001G-EN-P - November 2016
Chapter 1 Safety Function Operation
The module is designed for use in applications where the safety state is the off 
state.
Self-diagnostic Functions
Self-diagnostics are performed when the power is turned on and periodically 
during operation. If a fatal internal module error occurs, the red module status 
(MS) indicator illuminates, and the safety outputs and input data and status to 
the network turn off.
Configuration Lock
After configuration data has been downloaded and verified, the configuration 
data within the module can be protected.
For GuardLogix® systems, the status indicator is not used. For information 
about safety signatures, see the appropriate GuardLogix Safety Reference 
Manual, which is listed in the Additional Resources on page 10
.
I/O Status Data 
The module provides status data for monitoring the 
I/O circuits and I/O data. The status data includes the following data, which 
the controllers can read. 1 = ON/Normal, and 0 = OFF/Fault/Alarm.
• Individual point input status
•Combined input status
• Individual point output status
• Combined output status
• Individual test output status
• Individual output readback (actual ON/OFF state of the outputs)
Status data indicate whether each safety input, safety output, or test output is 
normal (normal status: ON, faulted status: OFF). For fatal errors, 
communication connections can be broken, so the status data cannot be read.
Combined status is provided by an AND of the status of all safety inputs or all 
safety outputs. When all inputs or outputs are normal, the respective combined 
status is ON. When one or more of them has an error, the respective combined 
status is OFF. This status is known as the combined safety input status or 
combined safety output status.