Rockwell Automation Publication 5094-UM001C-EN-P - April 2019 79
Safety I/O Module Features Chapter 5
Safety Output
Module Features
This section describes features that are available only on the FLEX 5000 I/O
safety output modules.
The 5094-OB16S and 5094-OB16SXT modules are safety sourcing output
module that use 16 digital safety outputs. You use the sourcing outputs in
Sourcing Output mode.
Safety Application Suitability Levels
Tabl e 15 describes the safety application suitability levels for a 5094-OB16S or
5094-OB16SXT module.
• Solid-state outputs
• Safety outputs can be pulse-tested to detect field wiring short circuits to
24V DC
• Supports field-power loss detection and configurable channel-level output
state in Fault and Program modes
Table 15 - Safety Application Suitability for 5094-OB16S and 5094-OB16SXT Module
Suitability Level Conditions Notes
Applications that are rated up to, and including,
SIL 3 as defined in IEC 61508, IEC 61511, and
IEC 62061, and PLc, cat. 2 as defined in
ISO 13849-1
Use single-channel mode.
– Point mode is Safety Pulse Test or Safety.
Consider the following:
• The channel mode type, that is, single or
dual, affects Category. You can use the
modules in SIL 3, PLe applications
regardless of channel mode type.
• The requirement that Point mode be
Safety Pulse Test assumes that only the
safety I/O module provide diagnostics to a
specific Suitability Level.
The larger safety system within which the
safety I/O module resides can provide the
diagnostics necessary to achieve the
stated Suitability Level without the
requirement that Point mode be Safety
Pulse Test.
To achieve the specific Safety Integrity
Level, see Appendix C
, Application/Wiring
Examples for Safety I/O Modules on
page 155.
Applications that are rated up to, and including,
SIL CL3, PLe, Cat.4, as defined in IEC 61508,
IEC 61551, IEC 62061, and ISO 13849-1
1. The module uses single-channel mode.
– Point mode is Safety Pulse Test or Safety.
– Use IEC60947 certified Safety Contactor.
– Use shredded cable or cable trunk to separate channel wiring to
mitigate short-circuit faults.
2. The module uses dual-channel mode.
–Point mode is Safety.
– Use shredded cable or cable trunk to separate channel wiring to
mitigate short-circuit faults.
3. The module uses dual-channel
mode.
– Point mode is Safety Pulse Test.