Reference Manual · Publication 1756-RM095 · Rockwell Automation

GuardLogix Safety Application Instruction Set Reference Manual

This reference manual documents the Logix 5000 Controller Safety Application Instruction Set for Compact GuardLogix 5370, GuardLogix 5570, Compact GuardLogix 5380, GuardLogix 5580, and ControlLogix 5590 controllers. It covers certified safety instructions for SIL 3 per IEC 61508 and Performance Level PLe Category 4 per ISO 13849-1, including dual-channel input, muting, drive safety, and metal form instructions. The manual provides operand descriptions, timing diagrams, wiring and programming examples, and I/O point mapping for Safety I/O modules.

Download PDF
SIL 3 Safety Level
PLe, Category 4 Performance Level
TUV; DGUV Certifying Body
September 2025 Publication Date

Document Preview

Open the full PDF in a new tab  · Publication 1756-RM095

Specifications

Supported Controllers

Compact GuardLogix Compact GuardLogix 5370, Compact GuardLogix 5380
GuardLogix GuardLogix 5570, GuardLogix 5580
ControlLogix ControlLogix 5590 (added in revision 1756-RM095O)

CROUT Instruction Operand Ranges

Feedback Reaction Time range 5 to 1000 ms
Feedback Type options Positive (1) or Negative (0)

DCA / DCAF Instruction Operand Ranges

Discrepancy Time valid range 5 to 3000 ms (0 disables timer)
Automatic Reset: Output 1 energizes 50 ms after both channels are back within the Tolerance and Limit settings
Inconsistent Time Period (DIN) 500 ms

I/O Module Tag Mapping Coverage

1732 and 1791 Safety I/O modules Point Status and Combined Status
1734 Safety I/O modules Point Status and Combined Status
1756, 5069, and 5094 Safety I/O modules Point Status (Combined Status not applicable)

Certifications & Compliance

TUV (all listed safety, drive safety, and metal form instructions) DGUV (AVC, CBCM, CBIM, CBSSM, CPM, CROUT, CSM, DCM, DCS, DCSRT, DCST, DCSTL, EPMS, MMVC, MVC, THRSe: GuardLogix and 1768 Compact GuardLogix firmware 17...21 only; not DGUV-certified for Compact GuardLogix 5370)

Document Contents

Full PDF covers the following topics in detail:

  • Overview: De-Energize to Trip systems, Input and Output Line Conditioning, I/O Point Mapping, Status-Safety I/O
  • Safety Instructions: CROUT, DIN, DCA, DCAF, DCM, DCSRT, DCS, DCST, DCSTL, DCSTM, FSBM, SMAT, THRSe, TSAM, TSSM: with wiring and programming examples
  • Metal Form Instructions: AVC, CSM, CBCM, CBIM, CPM, CBSSM, EPMS, MVC, MMVC: with wiring and programming examples
  • Drive Safety Instructions: SBC, SDI, SFX, SLP, SLS, SOS, SS1, SS2
  • RSLogix 5000 Software Version 14 and later instructions: DIN, RIN, ESTOP, ENPEN, LC, FPMS, ROUT, THRS
  • Common Attributes: Math status flags, immediate values, data conversions, index through arrays, bit addressing
  • Certified instruction tables with TUV and DGUV certification status
  • Backing tag usage warnings and migration guide from legacy to preferred instructions

Frequently Asked Questions

Which controllers support the safety instructions in this manual?
The safety instructions apply to the Compact GuardLogix 5370, GuardLogix 5570, Compact GuardLogix 5380, GuardLogix 5580, and ControlLogix 5590 controllers. The CompactLogix 5480 was removed from the supported list in this release.
What safety ratings do these instructions support?
The instructions are type-approved and certified for safety-related functions up to and including Safety Integrity Level (SIL) 3 per IEC 61508, and Performance Level PLe (Category 4) per ISO 13849-1.
What programming languages are supported for safety instructions?
Safety instructions are available in Ladder Diagram only. Function Block and Structured Text are not available for any of the safety instructions documented in this manual.
How does a GuardLogix controller behave when a fault is detected?
GuardLogix safety controllers are part of a De-Energize to Trip system. When a fault is detected, all outputs are set to zero. The controller also automatically sets input values associated with faulty input modules to zero.
What is the configurable Feedback Reaction Time range for the CROUT instruction?
The Feedback Reaction Time for the CROUT instruction can be set between 5 and 1000 ms. This specifies how long the instruction waits for Feedback 1 and Feedback 2 to reflect the state of Output 1 and Output 2.
Which legacy instructions should be replaced with newer preferred instructions?
Rockwell Automation recommends replacing DIN and RIN with DCS or DCM, ESTOP with DCS, ENPEN with DCSRT or DCS, LC with DCSTM or DCS or TSAM or TSSM or FSBM, FPMS with EPMS, ROUT with CROUT, and THRS with THRSe when using Logix Designer version 17 or later.
What happens to safety instruction outputs when executed on a false rung?
When a safety instruction is executed on a false rung, all outputs including prompts and fault indicators are set to zero. Internal state machines continue to run and change states based on the inputs.

Disclaimer