36 Rockwell Automation Publication 5094-UM001C-EN-P - April 2019
Chapter 1 Digital I/O Module Operation in a Logix 5000 Control System
Protected Operations
To maintain the secure operation of your FLEX 5000 digital I/O module,
operations that can disrupt module operation are restricted based on the module
operating mode. Table 8
describes the restrictions.
Considerations Specific to
Safety Modules
FLEX 5000 safety I/O modules have additional items to be aware of. Type
approval, certification, and suitability for use in safety applications vary by
catalog number.
These modules can be used with GuardLogix 5580 and Compact GuardLogix
5380 safety controllers in applications up to SIL 3, PLe, Cat. 4 in single-channel
and dual-channel configurations. Studio 5000 Logix DesignerĀ®, version 32 or
later, is the configuration and programming tool for these modules.
Table 8 - Protected Operations on FLEX 5000 Digital I/O Modules
Current Module Operation
Activity
Firmware
Update
Request
Module Reset
Request
Connection
Request
Configuration
Change
Connection or
Data Format
Change
Electronic
Keying
Change
RPI Change
Connection not running Accepted
Connection running Rejected Accepted
(1)
Accepted
(2)
Not allowed
(3)
Accepted
(4)
Firmware update is in process Rejected
(1) Only requests for Listen Only connections are accepted.
(2) Configuration change is accepted in the following scenarios:
- Changes are made in the Module Properties dialog box and you click Apply.
- Changes are made in the Configuration tags and you send a Reconfigure Module MSG to the module.
(3) The difference between Rejected and Not allowed is that rejected activities can be attempted in the Logix Designer application but do not take effect. The activities that are not allowed, that is,
attempts to change the Connection or Data Format used, do not occur in the Logix Designer application.
For example, if you attempt to reset a module that is connected to the owner-controller, the Logix Designer application executes the request and alerts you that it was rejected. If you attempt to
change the data format on a module that is connected to an owner-controller, the Logix Designer application does not execute the attempted change. The application only alerts you that the change
is not allowed. In the case, if the change is attempted online, the Module Definition dialog box field that changes the data format is disabled.
(4) The change occurs after the connection is closed and reopened. You can close and reopen the connection in the following ways:
- Change the project while it is offline and download the updated project before going online again.
- Change the project while it is online and click Apply or OK in the Module Properties dialog box. In this case, a dialog box alerts you of the ramifications before the change is made.
STATUS
POWER
SAFETY DIGITAL 16 INPUT 24 VDC
5094-IB16S
5
5
TB3I
FLEX 5000
TM
I/O
0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15
IMPORTANT Functional safety certification and performance of FLEX 5000 I/O safety
modules requires that the modules operate in conditions at or below the
ambient operating temperature specification.
The Probability of Failure on Demand (PFD) and average frequency of a
dangerous failure per hour (PFH) calculations for these modules are based
on the module operating conditions adhering to the ambient operating
temperature specification.
For more information on the maximum ambient operating temperature
specification for FLEX 5000 I/O safety modules, see the FLEX 5000 Modules
Specifications Technical Data, publication 5094-TD001
.