This release includes security enhancements as a part of our ongoing efforts to improve security. For information regarding Rockwell Automation's vulnerability disclosure process, please reference the Rockwell Automation Vulnerability Policy.
Access Denied dialog box does not appear when users without FactoryTalk Security access attempt to modify Motion Configuration (Lgx00184951)
Studio 5000 Logix Designer v29.00
Corrected Anomaly with Studio Logix Designer v30.00
When a user without Motion: Modify Configuration security credentials attempts to modify the motion configuration, an Access Denied dialog box does not appear.
This release has the following requirements.
Firmware Requirements – 1769 CompactLogix Controllers
Catalog Numbers 1769-L31, 1769-L32C, 1769-L32E, 1769-L35CR, 1769-L35E
Consider the following before upgrading the firmware on your 1769 CompactLogix controller:
|
Consideration
|
Description
|
| Avoid Interrupting the
Firmware Upgrade
|
When upgrading your controller firmware, it is extremely
important to allow the upgrade to complete without
interruption.
If you interrupt the firmware upgrade either in the software or
by disturbing the physical media, you may render the
controller inoperable.
During an upgrade of the CompactLogix firmware, the
ControlFLASH™ utility displays various progress dialog
boxes. The progress dialog boxes contain these status
statements:
It is crucial that you do not interrupt the firmware upgrade
while these progress statements are displayed. Once the
Update Status dialog box indicates that the firmware upgrade
is complete, you may adjust your controller’s network
connection, make changes using controller-related software,
or cycle controller power.
|
|
End Cap Needed for
Firmware Upgrade
|
Attempting a firmware upgrade without the controller end cap
attached does not complete.
When upgrading your controller firmware, verify that your end
cap is properly attached and locked. If you attempt to upgrade
without the end cap attached, your firmware upgrade may not
complete successfully.
|
|
Controller Memory Limits
|
If your controller is close to its memory limit and this
firmware revision requires more project memory, you can
upgrade to a controller that has more memory.
|
|
Avoid Loss of
Communication During
Firmware Upgrade
|
Loss of communication or power during a controller firmware
upgrade may result in the controller’s rejection of the new
firmware. If the controller firmware upgrade fails due to those
conditions described, the following corrective actions may be
required.
|
|
Disconnect Controller from
DH-485 Network Before
Firmware Upgrade
|
If your controller is connected to a DH-485 network,
disconnect it from the DH-485 network before you update the
firmware of the controller. If you update the firmware of a
controller while it is connected to a DH-485 network,
communication on the network may stop.
|
| Firmware Upgrade on
1769-L32E or 1769-L35E
Controller
IMPORTANT: This
consideration applies only to
1769-L32E and 1769-L35E
controllers.
|
We recommend that you complete the following tasks before
attempting a firmware upgrade on a 1769-L32E or 1769-L35E:
IMPORTANT: If you cannot perform the tasks listed above
before attempting a controller firmware upgrade, Ethernet
traffic on the controller’s Ethernet port may cause the
ControlFLASH utility to timeout during the firmware upgrade. If
the timeout condition is not handled properly, you may render
the Ethernet port on the controller inoperable, requiring you to
return the controller to Rockwell Automation for repair.
In the event that a ControlFLASH timeout occurs, the software
displays an error dialog indicating that the ‘Target Device
failed to report the new revision number’, or that the upgrade
‘Failed to begin update to the target device’.
If the error dialog boxes display, check the MS status
indicator. If the indicator is flashing red, the upgrade is still in
progress and should not be interrupted. Do not cycle power to
the controller while the status indicator is flashing red.
If the upgrade completes, the controller power cycles itself and
indicates the upgrade is complete with a solid green MS status
indicator. The time required to complete the upgrade is
dependent on the level of Ethernet traffic.
If the controller does not complete the upgrade, the MS status
indicator continues flashing red. In this case, contact Rockwell
Automation Services and Support.
|
| Use of ControlFLASH
software, Version 9 (CPR9
SR3) with Firmware
Revision 19
IMPORTANT: This
consideration applies only
when you are using
firmware revision 19.
|
Consider the following before you install the ControlFLASH
software, version 9:
|
This release corrects the following anomalies.
Corrected: Logix Firmware 20.014
Controller Logs Minor Fault Code 3 Type 93 (00129124, 00129117)
Known Anomaly
|
Cat. No.
|
Identified As Of
|
|
1769-L23E-QB1B,
1769-L23E-QBFC1B,
1769-L23-QBFC1B
|
Firmware Revision 20.011/RSLogix 5000
Software Version 20
|
|
1769-L31, 1769-L32C,
1769-L32E,1769-L35CR, 1769-L35E
|
Firmware Revision 20.011/RSLogix 5000
Software Version 20
|
Regardless of how you configure the RPIs for the I/O on the local CompactBus, the controller logs a minor fault Code 3 Type 93. If you clear this error, the fault will occur again in 35…40 minutes.
If this minor error is appearing more frequently, you have an application issue that needs to be corrected; for example, RPIs are set too fast, there are user tasks at or above priority 6, the controller is performing high-speed trending.
Tag Incorrectly Identified as Being on Scan (Lgx00148404)
Corrected as of:
Known Anomaly First Identified as of:
Catalog Numbers:
If you use RSLinx® Enterprise software for HMI communication and you try to modify or delete a controller tag online or try to modify an I/O module configuration, you can get the error 'Failed to modify properties. Tag is actively being read by one or more clients.' The controller improperly determines that a tag is on scan when it is not.
This release has the following known anomalies.
Applications with PowerFlex drives in the I/O configuration can experience a major non-recoverable fault (MNRF) (00200734, 00200735, 00200600, 00200599)
Corrected Anomaly as of Firmware Revision 31.011 and 30.014 for these catalog numbers:
Corrected Anomaly as of Firmware Revision 31.011 and 30.013 for these catalog numbers:
Known Anomaly First Identified as of Firmware Revision 28.011 for these catalog numbers:
Known Anomaly First Identified as of Firmware Revision 20.011 for these catalog numbers:
If a controller already has an application loaded into it that contains PowerFlex drives in the I/O configuration, a MNRF (Major Non-Recoverable Fault) can occur when any of the following occurs:
For more information and workarounds, see Knowledgebase document 1067997.
These anomalies are from previous releases but are still known in this release.
PI Function Block Appears to Stop Executing
Known Anomaly First Identified as of:
The PI Function block appears to stop executing as the output does not change and instruction faults are logged.
If the PI instruction is being used in Linear mode, this floating point equation is used to calculate the ITerm.
Due to the use of the single-precision floating point values, it is possible. This possibility is dependant on on the values of WLD and KP, for the ITerm value to be small enough, less than 0.0000001, to be lost when adding to the ITermn-1.
For more information regarding the PI instruction, see the Logix5000™ Controllers Process Control and Drives Instructions User Manual, publication 1756-RM006.
Alarm Systems Timeout Changes Require New Download (00069461)
Known Anomaly First Identified as of:
Changes made to the Buffer Timeout value for FactoryTalk® Alarm subscribers do not take effect until the existing buffer has been deleted.
The FactoryTalk alarm buffer (stored in Logix controller memory) is designed to persist through power cycles. If you change the Buffer Timeout value (via the Communication Setup dialog in FactoryTalk View SE), the controller does not use the new timeout value until the existing buffer is deleted and then recreated. To force recreation of this buffer, you can either:
Cycle Power to Clear a Major Fault
Known Anomaly First Identified as of:
If a 1769 I/O fault occurs, you must cycle power to the CompactLogix™ controller after clearing the major fault. I/O communication is not restored until after the power cycle. Never use the fault handling routine to clear local I/O faults. Clear local I/O faults manually on a per case basis, and then the controller must be power cycled.
Time Synchronization Causes Controller to Become Local Master
Known Anomaly First Identified as of:
Enabling the time synchronization feature of a CompactLogix™ controller results in the controller becoming the local master. It does not result in the controller synchronizing with other wallclock times in the system.
Fault/Program States Not Supported by Using the Module Configuration
Dialog Box
Known Anomaly First Identified as of:
This anomaly applies to CompactLogix™ systems as follows:
In this description, the term I/O module refers to 1769 Compact output modules or output points on 1769 Compact combination modules.
RSLogix™ 5000 software does not support Fault/Program state action for I/O modules in CompactLogix systems. The controller cannot trigger the configured Fault/Program state action. You can configure the Fault/Program state action in RSLogix 5000 software, but the configuration does not take effect.
If either of the following conditions exists, outputs turn off, regardless of the Fault/Program state action configuration:
Additionally, RSLogix 5000 software generates configuration tags for any I/O modules in the project. Some of the tags define configuration (C) data type members that include attributes for Fault/Program states, also known as alternate output states.
Because CompactLogix systems do not support Fault/Program state action for I/O modules, do not configure the attribute tags listed in the following table.
Attribute Tags to Avoid
|
Digital Output Modules
|
Analog Output Modules
|
|
Where CHx = the channel number
|
Using Automatic Device Configuration (00129165)
Known Anomaly First Identified as of:
When using the Automatic Device Configuration (ADC) feature, the Logix controller ‘owns’ the configuration in the drive. Do not use the HIM or other external tools, such as DriveExplorer™, to change drive parameters. Doing so can cause a sequence of events to occur that results in the connection between the controller and the drive to be dropped. Also, the controller cannot re-establish the connection.
Consider using the Write Mask function (drive Parameter 888 - [Write Mask Cfg]) to prevent tools that are connected to ports other than the Embedded EtherNet/IP port from writing to the drive.
ALMA and ALMD Tag Members Mismatch (00119996)
Known Anomaly First Identified as of:
The MinDurationPRE and MinDurationACC members of ALARM_ANALOG and ALARM_DIGITAL tags are defined as DINT (signed double integer) but they are treated as UDINT (unsigned double integer) by Logix firmware. This causes negative values of the tag members to be handled as large positive numbers when they must be handled as zero.
Accept Edits Effect on Controller Log (00122622)
Known Anomaly First Identified as of:
When you accept edits in LD, ST, and FBD, the controller will log an ‘Online Edit’ entry in the controller log. Accepting edits in an SFC routine is done by performing a partial import, resulting in a ‘Transaction Commit’ entry in the controller log.
This function is confusing because you can select to mask both entries separately. Selecting only Online edits would cause the Audit Value to change only when FBD, ST, and LD edits are made. SFC online edits would change the Audit Value only if the ‘Partial Import Online Transaction Completed’ bit was set.
Maximum Simultaneous Active Reconfigure Messages (00125204)
Known Anomaly First Identified as of:
The controller only supports three active reconfigure messages at a time. If more than three are triggered at a time, they complete (DN bit goes high), but not all modules are reconfigured.
For example, if you send five reconfiguration messages simultaneously, three reconfigure messages truly complete (DN bit goes high), and the I/O modules are reconfigured. The other two reconfigure messages indicate complete (DN bit goes high), but the I/O modules is not reconfigured. In this case, the last two are supposed to have errored (ER bit), but do not.
Corrected: Logix Firmware/Studio 5000 Software 21.011
Log On to FactoryTalk Dialog Box Displays When Launching RSLogix 5000 (00124955)
Known Anomaly First Identified as of:
When launching RSLogix™ 5000 software, the Log On to FactoryTalk® dialog box can display. This dialog box can be seen when you do not have Administrator privileges on the personal computer and the current user does not exist in the FactoryTalk directory. If this dialog box is canceled, the RSLogix 5000 software is not launched. When the dialog box is displayed, entering the credentials for a user that has Administrator privileges on the personal computer allows RSLogix 5000 software to be launched.
To avoid seeing this dialog box, you can add the current user or user group to the FactoryTalk directory. Follow these steps to add a user or user group to the FactoryTalk directory.
(In some cases, to continue, you need to provide credentials for a user with Administrator privileges.)
(You can click Check Names to verify that the name was found.)
The Log On to FactoryTalk dialog box can also be displayed when you are using Remote Desktop to connect to the personal computer running RSLogix 5000 software.
This dialog box appears because FactoryTalk Security does not recognize the computer name. To enable access through Remote Desktop for a specific computer, you must add the name of the computer initiating the Remote Desktop connection to the Network\System\Computers and Groups\Computers folder in the FactoryTalk Administration Console.
To allow all computers to connect, follow these steps.
IMPORTANT: If Use single sign-on is set to disable in FactoryTalk software, then the Log On to FactoryTalk dialog box is displayed each time RSLogix 5000 software is launched. When this is launched, proper user credentials must be entered to continue. (By default, ‘Use single sign-on’ is set to enable.)
SFC Action Body Executes Erroneously (00124697)
Known Anomaly First Identified as of:
In SFCs, when using time-limited actions in steps, if the program stays on a given step for greater than 24 days (2**32 ms) the accumulator of the timer (ACC) rolls over and the action body starts to execute again.
The time-limited action initializes its timer when it starts (step is first scanned). On subsequent scans, it compares the timers PRE and ACC value. If ACC<PRE, the action body executes. If ACC >=PRE, it is not executed. When the rollover occurs, the ACC,PRE, and the action body incorrectly exectutes.
Arithmetic State Flags (00122480)
Known Anomaly First Identified as of:
Arithmetic State flags anomalies.
Logix CPU Security Tool Unavailable
Known Anomaly First Identified as of:
The Logix CPU security tool does not work with version 20 controllers.
RSLogix 5000 Clock Update Does Not Support Some Operating Systems
Known Anomaly First Identified as of:
The RSLogix 5000 Clock Update tool does not support Windows 7 or Windows Server 2008 operating systems.
Fail Drive Connection on Peripheral Error (Lgx00138238)
Corrected Anomaly with Firmware Revision 21.011 and Firmware Revision 20.019
Known Anomaly First Identified as of Firmware Revision 20.011
Catalog Numbers:
If you use a PowerFlex® drive that supports automatic drive configuration (ADC) and has a peripheral that is configured to Fail Drive Connection on Peripheral Error, the controller can experience a major non-recoverable fault (MNRF) when your application is downloaded to the controller.
Local Expansion Modules Configured to Use IOT Instruction (Lgx00136059, Lgx00148390, Lgx00148392, Lgx00148394, and Lgx00148395)
Corrected Anomaly with Firmware Revision 24.011 and Firmware Revision 20.019
Known Anomaly First Identified as of Firmware Revision 20.011
Catalog Numbers:
If any local expansion modules, that is, 1769 Compact I/O™ modules, are configured to use the Immediate Output (IOT) instruction, the controller can experience a major non-recoverable fault (MNRF) at powerup.
To recover from the fault, clear the fault and redownload the project.
To work around this anomaly, configure local expansion modules so that Major Fault On Controller if Connection Fails in Run Mode is enabled.
MAJ Instruction (Lgx00136317, Lgx00150458)
Corrected Anomaly with Studio 5000® Environment Software Revision 21.011, RSLogix 5000® Software Revision 20 and Controller Firmware Revision 20.019
Known Anomaly First Identified as of Firmware Revision 20.011
Catalog Numbers:
An axis can move in the wrong direction in the following conditions:
– Profile Type = Trapezoidal
In this case, the direction on the faceplate is set to forward.
– Profile Type = S-curve
In this case, the sign of the current axis velocity of the axis being merged via the MAJ instruction and the sign of the velocity that is specified by the combination of the Direction parameter and Speed parameter on the faceplate are inconsistent.
You can complete the following tasks to work around this anomaly:
Always set the Speed parameter to +1.0.
If the current axis velocity is unknown, use a GSV instruction to obtain it.
CompactLogix Wall Clock Time (WCT) jumps ahead by 100 years (Lgx00152701, Lgx00179778)
Corrected Anomaly with Firmware Revision 20.019
Known Anomaly First Identified as of Firmware Revision 17
Catalog Numbers:
The WCT (WallClockTime) of the controller can jump 100 years on a power cycle. This jump can be seen as a one-time 100-year jump or a 100-year jump on every power cycle.
|
Product and Series
|
Continual 100-year
jump on power cycle
|
One-time 100-year jump
on power cycle
|
|
1769-L3x/L2x
|
Yes
|
No
|
|
1768-L4x/A and B
|
No
|
No
|
|
1768-L4x/C and D
|
Yes
|
No
|
|
1756-L63/A
|
No
|
No
|
|
ControlLogix 5560
Controllers series B
|
Yes
|
No
|
|
CompactLogix 5370
|
No
|
No
|
|
1756-L7x
|
No
|
Yes
|
The continual 100-year jump occurs 2 years after a program has been downloaded to a controller after the memory had been cleared / set to default.
The one-time 100-year jump occurs if the WCT is set to a value that has the year from 1990...1999.
Reconfigure Message Instruction Causes a Major Non-Recoverable Fault (Lgx00131221)
Corrected Anomaly with Firmware Revision 20.018
Known Anomaly First Identified as of Firmware Revision 20.011
Catalog Numbers:
If a message instruction is configured to reconfigure an I/O module, it causes the Controller to Experience a major non-recoverable fault (MNRF).
See Knowledgebase document 576267.
Controller Faults When Alarm Instruction is Executed (Lgx00135333)
Corrected Anomaly with Firmware Revision 20.019
Known Anomaly First Identified as of Firmware Revision 20.011
Catalog Numbers:
If an Analog Alarm (ALMA) or Digital Alarm (ALMD) instruction has a string-type associated tag and the string has a negative length, the controller can experience a major non-recoverable fault (MNRF) when the instruction is executed.
UID and UIE Instructions in a Continuous Task (00149169, 00144170)
|
Controllers
|
First Known in
Firmware Revision
|
Corrected in
Firmware Revision
|
|
CompactLogix™ 5370
|
20.011
|
20.019, 24.011 and
later
|
|
GuardLogix® 5570
|
20.011
|
24.011 and
later
|
|
ControlLogix® 5570
|
20.011
|
20.019, 24.011 and
later
|
|
ControlLogix 5560
|
20.011
|
20.019
|
|
1768 CompactLogix L4
|
20.011
|
20.019
|
If the UID (User Interrupt Disable) and UIE (User Interrupt Enable) instructions are used in a continuous task on powerup the controller could major non-recoverable fault (MNRF).
Message Instructions in Add-On Instruction PreScan and Main Logic Routines (Lgx00152820)
Known Anomaly since Firmware Revision 16
Catalog Numbers:
If a message instruction with the same backing tag is used in an Add-On Instruction in the Prescan and Main Logic routine, the controller on a transition to Run mode does one of the following:
Or
Controller Does Not Detect I/O Module Fault (Lgx00142152, Lgx00142156, Lgx00141744, Lgx00140532)
Corrected Anomaly with Firmware Revision 24.011 and Firmware Revision 20.019
Known Anomaly First Identified as of Firmware Revision 20.011
Catalog Numbers:
In some applications, the controller does not detect I/O module faults on 1769 Compact I/O™ modules. The anomaly occurs when the modules are used as local I/O modules. In this case, the following are a result:
The controller status indicators do not indicate the existence of the fault. Instead, they appear as if the controller is communicating with modules as expected.
The controller does not experience a fault, even if the project configuration calls for a fault on the controller if an I/O fault exists. Instead, the controller continues to operate as if no fault exists.
We recommend that you monitor the controller I/O status tags for I/O module faults. If an I/O module fault occurs, cycle power to the module.
For more information on this anomaly, see Knowledgebase document 558834, CompactLogix controller does not properly handle some 1769 I/O module faults”. The article is accessible from the Rockwell Automation® Technical Support Center at http://www.rockwellautomation.com/support/overview.page.