Rockwell Automation Publication 5094-UM001C-EN-P - April 2019 121
Configure and Replace Safety Modules Chapter 7
Replace a Module in a Logix 5000 System
Consider the following conditions before you replace a FLEX 5000 safety I/O
module in a Logix 5000™ system:
• If you rely on a portion of the CIP Safety system to maintain SIL 3
behavior during module replacement and functional testing, you must use
the Configure Only When No Safety Signature Exists feature.
• If you rely on the entire routable CIP Safety control system to maintain
SIL 3/PL (d or e) during the replacement and functional testing of a
module, you can use the Configure Always feature.
Replacement with ‘Configure Only When No Safety Signature Exists’ Enabled
When a module is replaced, the configuration is downloaded from the safety
controller if the DeviceID of the new module matches the original. The
DeviceID is updated whenever the SNN is set.
If the project is configured with Configure Only When No Safety Signature
Exists enabled, follow the appropriate instructions in to replace a FLEX 5000
safety I/O module.
After you complete the steps in a scenario correctly, the DeviceID matches the
original. This match enables the safety controller to download the proper module
configuration, and re-establish the safety connection.
Table 18 - Replace a FLEX 5000 Safety I/O Module
Controller Safety
Signature Exists
Replacement Module
Condition
Action Required
No No SNN (Out-of-box) None. The module is ready for use.
Yes or No Same SNN as original safety task
configuration
None. The module is ready for use.
Yes No SNN (Out-of-box) Complete the steps in Set the SNN Manually
on
page 119.
Yes Different SNN from original
safety task configuration
1. Reset to Out-of-Box Configuration
on page 120.
2. Set the SNN Manually
on page 119.
No 1. Reset to Out-of-Box Configuration
on page 120.
2. Follow your company-prescribed procedures to
functionally test the replaced I/O device and system
and to authorize the system for use.