Locking a Safety I/O Module Configuration

Each safety I/O module has a configuration locking button, which you can find at the top front of the module. The purpose of the locking function is to help prevent unintended changes to I/O module configuration. For example, locking the I/O module's current configuration can stop an attempt to assign the module a fake configuration, or merely help protect against configuration mistakes.

To achieve the intended safety integrity level (SIL), lock each safety I/O module after it has been configured, but before you begin or resume operations.

The lock and unlock mechanisms work as follows:

  • To lock a safety I/O module configuration, press and hold down the lock button for more than 3 seconds, then release the button.

  • To unlock a safety I/O module configuration, press and hold down the lock button for more than 3 seconds, then release the button.

Scenarios for Locking Safety I/O Module configurations

The procedure you follow to lock the configuration of SIL3 safety I/O modules will vary, depending on the scenario, which can be:

  • First configuration of the I/O modules

  • Fast device replacement of I/O modules

  • Perform a change configuration on the fly (CCOTF) for I/O modules

The procedure for each scenario is described below.

First configuration of SIL3 I/O safety modules:

Step

Action

1

Connect Control Expert to the M580 safety PAC.

2

Use the Transfer project from PLC command to load the project from the PAC into Control Expert.

3

In the PLC bus window in Control Expert, open each SIL3 safety I/O module and confirm that each module is accurately configured.

4

In an animation table in Control Expert, view the DDDT for each SIL3 safety I/O module and confirm that the configuration of each module is the same as in step 3, above.

5

Lock the configuration of each SIL3 I/O module by pressing and holding down the configuration locking button for more than 3 seconds, then release the button.

6

Check in an animation table the validity of the lock bit status (CONF_LOCKED) for each SIL3 I/O module.

Fast device replacement of a SIL3 I/O safety module:

Step

Action

1

Replace the SIL3 safety I/O module with a new one.

2

Connect Control Expert to the M580 safety PAC in maintenance operating mode.

3

In the PLC bus window in Control Expert, open each SIL3 safety I/O module and confirm that each module is accurately configured.

4

In an animation table in Control Expert, view the DDDT for each SIL3 safety I/O module and confirm that the configuration of each module has not changed and is the same as in step 3, above.

5

Lock the configuration of each SIL3 I/O module by pressing and holding down the configuration locking button for more than 3 seconds, then release the button.

6

Check in an animation table the validity of the lock bit status (CONF_LOCKED) for each SIL3 I/O module.

Performing CCOTF to add a new SIL3 I/O safety module:

Step

Action

1

Connect Control Expert to the M580 safety PAC in maintenance operating mode.

2

Add a new SIL3 safety I/O module to the configuration, and edit the module settings if necessary.

3

Execute the Build > Build Changes command.

4

In the PLC bus window in Control Expert, open each SIL3 safety I/O module and confirm that each module is accurately configured.

5

In an animation table in Control Expert, view the DDDT for each SIL3 safety I/O module and confirm that the configuration of each module has not changed and is the same as in step 3, above.

6

Lock the configuration of each SIL3 I/O module by pressing and holding down the configuration locking button for more than 3 seconds, then release the button.

7

Check in an animation table the validity of the lock bit status (CONF_LOCKED) for each SIL3 I/O module.

8

In the PLC menu of Control Expert, command the PAC to enter safety mode.