Controller Properties dialog box - Safety tab settings

Use the settings on the
Safety
 tab in the
Controller Properties
 dialog box to view and edit safety properties for the Safety controller.
The ability to change the settings on this tab can be controlled by
FactoryTalk Security
 permissions.
Parameter
Description
Safety Enabled
Enabled and disables Safety for ControlLogix 5590 controllers. When selected, the controller is a safety controller. Clear the check box to disable Safety. When disabled, the controller acts as a standard controller.
TIP: You can set this parameter for the ControlLogix 5590 controller only when the controller is offline, the Safety application is in the Unlocked state, and no safety signature exists.
IMPORTANT: Changing the Safety Enabled state causes these results in the project:
  • When you enable safety, a new safety task is created, default safety program and routine are created under this safety task.
  • When you disable safety:
    • The safety task is converted to a standard periodic task; the safety program and safety routine are converted to a standard program and a standard routine.
    • Safety instructions show a verification error.
    • All safety consumed tags are deleted, and other controller-scoped or program-scoped safety tags are changed to standard tags.
    • Safety tag mappings are removed.
    • Safety I/O modules are deleted.
    • Safety Network Number (SNN) of safety supported Ethernet ports are removed.
Safety Application
Indicates whether the Safety application is locked or unlocked.
Safety Lock/Unlock
Opens the
Safety Lock/Unlock
 dialog box to change the lock state of the Safety application.
Safety Status
Provides status information for the Safety application when the controller is online. Possible status messages include:
  • Safety Task OK
  • Safety Task inoperable
  • There cannot be a safety partner when the safety level is SIL2/PLd
  • The safety partner is missing or unavailable (SIL3/PLe only)
  • The hardware revision of the safety partner is not compatible with the primary controller (SIL3/PLe only)
  • The firmware revision of the safety partner is not compatible with the primary controller (SIL3/PLe only)
Safety Signature
Displays the Safety signature, which consists of the ID, Date, and Time values corresponding to the validation of the Safety controller project. The date and time values correspond to when the signature was generated. The ID is a unique value calculated by the controller over the memory contents at the time the signature is generated.
TIP: Compact GuardLogix 5380, GuardLogix 5580, and ControlLogix 5590 controllers have a 32 byte ID. Only the first 4 bytes of the ID display on the tab. Click Browse button to view and copy the entire 32 byte ID.
When a Safety signature exists, there are editing restrictions similar to when the Safety application is in the Locked state.
If a Safety Signature does not exist, the ID is set to <None> and the Date and Time values are blank and unavailable.
Browse button
Opens the
Safety Signature ID
 dialog box to view and copy the entire 32 byte ID for Compact GuardLogix 5380, GuardLogix 5580, and ControlLogix 5590 Safety controllers.
This button is available only when a Safety signature exists for Compact GuardLogix 5380, GuardLogix 5580, and ControlLogix 5590 controllers.
Generate
When the controller is online and the Safety application is in the Unlocked state, generates a Safety signature in the controller.
The required controller mode depends on your controller model and version of Logix Designer:
  • On Compact GuardLogix 5370 and GuardLogix 5570 controllers, you can generate a Safety signature only when the controller is in
    Program
     mode.
  • In Logix Designer versions 37 and earlier, on Compact GuardLogix 5380 and GuardLogix 5580 controllers, you can generate a Safety Signature only when the controller is in
    Program
     mode.
  • In Logix Designer versions 38 and later, on Compact GuardLogix 5380, GuardLogix 5580, and ControlLogix 5590 controllers, you can generate a Safety Signature when the controller is in either
    Program
     mode or
    Remote Run
     mode.
Copy
When a Safety signature exists, copies the ID, Date, and Time of the Safety signature to the clipboard.
Delete
When a Safety signature exists and the Safety application is in the Unlocked state, deletes the Safety signature.
Protect Signature in Run Mode
Enables/disables Run Mode Protection. When selected, the safety signature cannot be deleted while the controller is in Run Mode, regardless of the Safety application state.
Clear the check box to disable Run Mode Protection.
When Replacing Safety I/O
Determines whether the controller sets the safety network number (SNN) of a safety I/O module that is connected to and has configuration data for when a safety signature exists.
  • Configure Only When No Safety Signature Exits
  • Configure Always
Safety Level
For
GuardLogix
 5580 Safety controllers and ControlLogix 5590 Safety controllers, determines whether the project is at a safety level SIL2/PLd or SIL3/PLe.
For all other types of controllers, it's the current SIL level of the controller.
TIP:
This parameter can only be set for the
GuardLogix
 5580 and ControlLogix 5590 controller when the controller is offline, the Safety application is in the Unlocked state, and no safety signature exists.
For
GuardLogix
 5580 and ControlLogix 5590 controllers, the caution image L5K_node_yellowcautionicon and message appears when the safety level is SIL2/PLd. Modules should not be installed adjacent to the controller when:
  • The controller is operating above +55 degrees C (+131 degrees F), and
  • The power dissipation of the module is greater than 6.2W
Refer to the
ControlLogix
 5580 and
GuardLogix
 5580 Controllers User Manual,
 1756-UM543, for more information about SIL2/PLd requirements.
IMPORTANT:
Changing the
Safety Level
 has the following results in the project.
  • When changing from SIL2/PLd to SIL3/PLe, a safety partner is created in the I/O Configuration tree.
  • When changing from SIL3/PLe to SIL2/PLd, the safety partner is deleted from the I/O Configuration tree.
Safety Network Number(s)
Displays the port and the 6-byte hexadecimal safety network number (SNN) assigned to the port.
If the controller has more than one port that supports a CIP Safety connection, the SNN for each port is displayed on the tab.
For example, for a
Compact GuardLogix
 5380 controller in A1/A2 Dual IP mode, the tab shows the SNN for the Backplane port and A1 and A2 Ethernet ports.
Browse button
Opens the
Safety Network Number
 dialog box to view and assign a SNN. The software can automatically assign the SNN, or it can be assigned manually.
  • Time-based format
     - the SNN is generated based on the creation date and time (to the millisecond) of the project.
  • Manual
     - Manually enter a number between 1 and 9999, per network type.
The button is not available when:
  • The project is online with the controller.
  • The project has a safety signature or is safety locked.
  • The user does not have security permissions to edit the controller settings.
Provide Feedback
Have questions or feedback about this documentation? Please submit your feedback here.
Normal