Rockwell Automation Publication 5094-UM001E-EN-P - April 2020 77
Safety I/O Module Features Chapter 5
Safety Output 
Module Features
This section describes features that are available only on the FLEX 5000 I/O 
safety output modules.
The 5094-OB16S and 5094-OB16SXT modules are safety sourcing output 
module that use 16 digital safety outputs. You use the sourcing outputs in 
Sourcing Output mode.
Safety Application Suitability Levels
Tab le 16  describes the safety application suitability levels for a 5094-OB16S or 
5094-OB16SXT module.
• Solid-state outputs
• Safety outputs can be pulse-tested to detect field wiring short circuits to 
24V DC
• Supports field-power loss detection and configurable channel-level output 
state in Program mode and Communications Fault mode
Table 16 - Safety Application Suitability for 5094-OB16S and 5094-OB16SXT Module
Suitability Level Conditions Notes
Applications that are rated up to, and including, 
SIL 3 as defined in IEC 61508, IEC 61511, and 
IEC 62061, and PLc, cat. 2 as defined in 
ISO 13849-1
Use single-channel mode.
– Point mode is Safety Pulse Test or Safety.
Consider the following:
• The channel mode type, that is, single or dual, affects 
Category. You can use the modules in SIL 3, PLe 
applications regardless of channel mode type.
• The requirement that Point mode be Safety Pulse Test 
assumes that only the safety I/O module provide 
diagnostics to a specific Suitability Level.
The larger safety system within which the safety I/O 
module resides can provide the diagnostics necessary 
to achieve the stated Suitability Level without the 
requirement that Point mode be Safety Pulse Test.
To achieve the specific Safety Integrity Level, see 
Appendix C
, Application/Wiring Examples for Safety 
I/O Modules on page 181.
Applications that are rated up to, and including, 
SIL CL3, PLe, Cat.4, as defined in IEC 61508, 
IEC 61551, IEC 62061, and ISO 13849-1
1. The module uses single-channel mode.
– Point mode is Safety Pulse Test or Safety.
– Use IEC60947 certified Safety Contactor.
– Use sheathed cable or cable trunk to separate channel 
wiring to mitigate short-circuit faults.
2. The module uses dual-channel mode.
–Point mode is Safety.
– Use sheathed cable or cable trunk to separate channel 
wiring to mitigate short-circuit faults.
3. The module uses dual-channel mode.
– Point mode is Safety Pulse Test.