Rockwell Automation Publication 5094-UM001E-EN-P - April 2020 121
Configure and Replace Safety Modules Chapter 7
Replace a Module in a Logix 5000 System
Consider the following conditions before you replace a FLEX 5000 safety I/O 
module in a Logix 5000™ system:
• If you rely on a portion of the CIP Safety system to maintain SIL 3 
behavior during module replacement and functional testing, you must use 
the Configure Only When No Safety Signature Exists feature. 
• If you rely on the entire routable CIP Safety control system to maintain 
SIL 3/PL (d or e) during the replacement and functional testing of a 
module, you can use the Configure Always feature. 
Replacement with ‘Configure Only When No Safety Signature Exists’ Enabled
When a module is replaced, the configuration is downloaded from the safety 
controller if the DeviceID of the new module matches the original. The 
DeviceID is updated whenever the SNN is set.
If the project is configured with Configure Only When No Safety Signature 
Exists enabled, follow the appropriate instructions in to replace a FLEX 5000 
safety I/O module. 
After you complete the steps in a scenario correctly, the DeviceID matches the 
original. This match enables the safety controller to download the proper module 
configuration, and re-establish the safety connection.
Table 20 - Replace a FLEX 5000 Safety I/O Module
Controller Safety 
Signature Exists
Replacement Module 
Condition
Action Required
No No SNN (Out-of-box) None. The module is ready for use.
Yes or No Same SNN as original safety task 
configuration
None. The module is ready for use.
Yes No SNN (Out-of-box) Complete the steps in Set the SNN Manually
 on 
page 119.
Yes Different SNN from original 
safety task configuration
1. Reset to Out-of-Box Configuration
 on page 120.
2. Set the SNN Manually on page 119. 
No 1. Reset to Out-of-Box Configuration
 on page 120.
2. Follow your company-prescribed procedures to 
functionally test the replaced I/O device and system 
and to authorize the system for use.