ControlLogix 5590 Controllers Technical Resources

CIP Security™ is a standard, open-source communication mechanism that helps to provide a secure data transport across an EtherNet/IP™ network. 

CIP Security™ lets CIP™-connected devices authenticate each other before transmitting and receiving data.CIP™ Security uses the following security properties to help devices protect themselves from malicious communication:

• Device Identity and Authentication

• Data Integrity and Authentication

• Data Confidentiality

Rockwell Automation uses the following products to implement CIP Security™ solution:

• FactoryTalk® Policy Manager software (includes FactoryTalk® System Services)

• FactoryTalk® Linx software (lets workstation software communicate securely using CIP Security™)

• Studio 5000 Logix Designer® application (This application required to interface with CIP Security™-enabled Logix controllers. The minimum application version varies by controller product family.)

See the requirements for your products to verify the correct product versions for your solution.

For more information on CIP Security™, for example, a list of CIP Security™-capable products and publications that describe how to use the products, including limitations and considerations, see the following:

• Rockwell Automation Industrial Cybersecurity Solutions

• CIP Security with Rockwell Automation Products Application Technique, publication SECURE-AT001 (describes the CIP Security™-capable products, minimum software versions and product firmware revisions, and publications that describe how to use the products)

Related information:

ControlLogix® redundancy is designed for non-safety applications that require high availability. When redundant controllers are configured for redundancy, the primary controller executes standard tasks and crossloads standard data to the secondary controller.

The redundant controllers can communicate with only standard I/O modules in a remote chassis via concurrent or non-concurrent communication.

Related information:

Logix SIS is designed for safety applications that require high availability. Logix SIS can achieve up to SIL 2 or SIL 3 safety ratings. When redundant controllers are configured for Logix SIS, logic executes as follows:

• Both primary and secondary controllers simultaneously execute the safety task and all safety data remains synchronized.

• Only the primary controller executes standard tasks and crossloads standard data to the secondary controller.

The redundant safety-enabled controllers can communicate with a mix of standard and safety I/O modules in a remote chassis. For safety I/O communication, concurrent communication must be configured between 1756-EN4TR modules in the redundant chassis and the remote safety I/O modules.

You can enable all ControlLogix® 5590 controllers for safety. A safety-enabled controller can support up to SIL 3 and PLe safety applications.

• Without a safety partner installed, you can achieve SIL 2/PLd (Category 3) with the use of the safety task and safety I/O.
• With the use of the safety task and a safety partner that is installed, you can achieve SIL 3/PLe (Category 4) capability.
• Logix SIS can achieve up to SIL 3/PLe (Category 3) capability.

A controller that is enabled for safety can communicate with safety I/O devices via CIP Safety™ over an EtherNet/IP™ network (safety I/O modules, integrated safety drives, integrated safety components). You can interface to local standard I/O in the backplane via standard tasks while you interface with remote safety I/O through the Ethernet ports.

For standard tasks, a safety-enabled controller supports:

• Ladder Diagram (LD)
• Structured Text (ST)
• Function Block Diagram (FBD)
• Sequential Function Chart (SFC)

For the safety task, safety-enabled controllers support Ladder Diagram only.

Related information: