Rockwell Automation Publication 5094-UM001E-EN-P - April 2020 77
Safety I/O Module Features Chapter 5
Safety Output
Module Features
This section describes features that are available only on the FLEX 5000 I/O
safety output modules.
The 5094-OB16S and 5094-OB16SXT modules are safety sourcing output
module that use 16 digital safety outputs. You use the sourcing outputs in
Sourcing Output mode.
Safety Application Suitability Levels
Tab le 16 describes the safety application suitability levels for a 5094-OB16S or
5094-OB16SXT module.
• Solid-state outputs
• Safety outputs can be pulse-tested to detect field wiring short circuits to
24V DC
• Supports field-power loss detection and configurable channel-level output
state in Program mode and Communications Fault mode
Table 16 - Safety Application Suitability for 5094-OB16S and 5094-OB16SXT Module
Suitability Level Conditions Notes
Applications that are rated up to, and including,
SIL 3 as defined in IEC 61508, IEC 61511, and
IEC 62061, and PLc, cat. 2 as defined in
ISO 13849-1
Use single-channel mode.
– Point mode is Safety Pulse Test or Safety.
Consider the following:
• The channel mode type, that is, single or dual, affects
Category. You can use the modules in SIL 3, PLe
applications regardless of channel mode type.
• The requirement that Point mode be Safety Pulse Test
assumes that only the safety I/O module provide
diagnostics to a specific Suitability Level.
The larger safety system within which the safety I/O
module resides can provide the diagnostics necessary
to achieve the stated Suitability Level without the
requirement that Point mode be Safety Pulse Test.
To achieve the specific Safety Integrity Level, see
Appendix C
, Application/Wiring Examples for Safety
I/O Modules on page 181.
Applications that are rated up to, and including,
SIL CL3, PLe, Cat.4, as defined in IEC 61508,
IEC 61551, IEC 62061, and ISO 13849-1
1. The module uses single-channel mode.
– Point mode is Safety Pulse Test or Safety.
– Use IEC60947 certified Safety Contactor.
– Use sheathed cable or cable trunk to separate channel
wiring to mitigate short-circuit faults.
2. The module uses dual-channel mode.
–Point mode is Safety.
– Use sheathed cable or cable trunk to separate channel
wiring to mitigate short-circuit faults.
3. The module uses dual-channel mode.
– Point mode is Safety Pulse Test.