Controller May Not Re-establish Outgoing Secured I/O Connections After Cable Breaks or Power-Cycles (1432106, 1489122, 1804298, 2136899)

In a CIP Security™ application, the controller may not re-establish secured I/O connections after multiple cable breaks or power cycles.

The Studio 5000 Logix Designer® application shows:

(Code 16#0204) Connection Request Error: Connection request timed out

If you experience this anomaly, power cycle the controller again.

Controller Can Fail to Re-Establish an Outgoing Secured I/O Connection to Remote I/O Modules After a Cable-Break (1753900)

CVE-2022-3752: Denial-of-Service Vulnerability That Affects Logix 5000™ Controllers

For a full list of the potentially affected Rockwell Automation products and a description of the vulnerability, see Knowledgebase Product Notice Logix Controllers Vulnerable to Denial-of-Service Attack.

CVE 2024-5659: Multicast Request Causes Major Nonrecoverable Fault on Select Controllers

For a full list of the potentially affected Rockwell Automation products and a description of the vulnerability, see Security Advisory ControlLogix and GuardLogix Vulnerable to Multicast Request Causes major nonrecoverable fault on Select Controllers.

Safety Signature Generation with Use of a Fanuc Robot Can Generate a Type 14 Code 07 Major Fault (960746, 960795, 960808)

Attempting to generate a safety signature after modifying the configuration of a Fanuc Robot will result in a Type 14 Code 07 Major Fault. The workaround is to download to the controller before generating the safety signature.

Safety Controllers Can Experience a MNRF/Assert on Power-Up Following Online Deletion of Safety Tags (1016653, 1027858)

Compact GuardLogix 5380 and GuardLogix 5580 controllers can experience a major non-recoverable fault (MNRF/assert) that occurs on power-up following the online deletion of safety tags.

For more information, see Knowledgebase Technote Product Notice 2021-04-006 - Compact GuardLogix 5380 and GuardLogix 5580 May Experience a Major Non-Recoverable Fault / Assert On Power-Up Following Online Deletion of Safety Tags.

Actual Position of Mover Axis Does Not Match the Physical Location For iTRAK 5730 (1046443, 1064016)

An offset is introduced in the Actual Position of the Mover Axis when the position of the axis is recovered after any of the following:

• iTRAK® power cycle
• a controller power cycle
• a network interruption

For more information, see Knowledgebase Technote iTRAK 5730: Actual Position of Mover Axis does not match the physical location.

Custom Communication Drivers Can Display Error When Accessing Tags (1093759, 1093806)

Custom communication drivers that are written using the Logix 5000 Controllers Data Access Programming Manual, 1756-PM020G-EN-P, can display error code 0x04 or 0x05 when attempting to access a structure and tags within the structure using Symbol Instance Addressing.

To avoid this anomaly, access a structure and tags within the structure using Symbolic Segment Addressing.

This anomaly does not affect Rockwell Automation communication software packages.

A Controller Producing Tags, Consumed by Two Or More Controllers Can MNRF/Assert (987186)

If network disruptions are present that cause connections to drop, the producing controller can experience a major nonrecoverable fault (MNRF/Assert). The likelihood of the MNRF/Assert occurring on a producing controller increases as the:

• Number of consuming controllers increases.
• Number of consuming tags increases.
• Amount of network disruptions increases.

FactoryTalk Batch Server Does Not Re-Connect to The PhaseManager™ Phases on The Controller After a Download (1084737, 1087383, 1087379)

Downloading a large ACD file improperly places the phases in the controller into an unknown state instead of the expected Idle state. This occurs more often with larger projects but does not occur every time. To recover, cycle power on the controller or break the connection between FactoryTalk® Batch and the controller for a duration longer than the connection timeout.

MAR and MAW Instructions Do Not Execute Properly After Controller Power Is Cycled (1120359, 1161982)

If a controller is powered down while a Motion Arm Registration (MAR) and/or a Motion Arm Watch (MAW) instruction is active, the state of the instruction will not be accurate on controller power up.

• A Motion Disarm Registration (MDR) is required to reset the MAR instruction.
• A Motion Disarm Watch (MDW) is required to reset to the MAW instruction.

For more information, see the Knowledgebase Technote MAR or MAW Instruction Not Executing Properly After a Power cycle.

AxisHomedStatus Bit Clears After Storing Project to Nonvolatile Memory (1169495, 1218911)

For a motion axis that was previously homed, the AxisHomedStatus bit will clear (value=0) after a project is stored to Nonvolatile Memory. See Knowledgebase Technote AxisHomeStatus bit cleared after storing project to the SD card.

Controller Input Data Associated with Remote 5069/5094 Standard Modules Can Be Inconsistent When Communication Errors Occur (1297430)

Remote 5069\5094 standard modules with unicast connection type can have inconsistent data when communication errors occur.

For more information, see Knowledgebase Technote Controller Input Data Associated with Remote 5069/5094 Standard Modules Can Be Inconsistent When Communication Errors Occur.

PCMD Returns Incorrect Error Code (1056295)

Equipment Phase Command (PCMD) returns the incorrect error code “0x6003, HIGH_PRIORITY_OWNED” when it should return “0x6004, NOT_ATTACHED”

CIP™ Axis Velocity Loop Causes Controller To MNRF/Assert (1008498, 1006943)

Setting the Axis Direct Command Velocity Tag to “Not a Number” (NaN) causes the controller to experience a major nonrecoverable fault/assert.

Task Switching of User Tasks When Executing Multiple RTOS Instructions Can Cause A MNRF/Assert (1105041)

If the application contains RTOS (Real to String) instructions in different user tasks and the following execution occurs:

• Task A is executing an RTOS.
• Task A is interrupted to execute Task B.
• Task B executes an RTOS.
• Task A completes the RTOS previously interrupted.

A major nonrecoverable fault (MNRF/Assert) can occur.

For information on how to work around this in user application code, see Knowledgebase Technote RTOS instruction execution causes controller to MNRF.

An OPC Client Requests an Excessively High Number of OPC Groups from RSLinx Classic’s OPC Interface (1239180, 1646089)

If an OPC Client requests a high number of OPC groups, this causes RSLinx® Classic to make a high number of optimized tag requests to a Logix controller and causes the Logix controller to experience a major nonrecoverable fault.

Inverting Motion Polarity Does Not Invert the Value of Certain Signal Attributes (1329074, 1332544)

When the axis Motion Polarity bit is set to inverted, certain Signal attributes for a CIP™ axis will display a value opposite of the programmed direction of the axis.

The affected signal attributes are:

• #365 Fine Command Position

• #495 Torque Estimate

• #432 Position Reference

• #523 Motor Electrical Angle

• #565 Slip Compensation

• #600 Output Frequency

• #601 Output Current

• #602 Output Voltage

• #603 Output Power

• #1403 Velocity Feedback 1

• #1453 Velocity Feedback 2

For more information, see the Knowledgebase Technote Inverting Motion Polarity Does Not Invert the Value of Certain Signal Attributes.

1. Update the firmware on the controller.
2. Open the final copy of the project and download it to the controller.
3. Stay in Program Mode and store the project to the SD card.
4. When the storing process is complete, the controller can be put into Run Mode.

Applying Online Changes to an Armor PowerFlex Drive Can Cause an Error (3310370)

If you apply changes to non-safety parameters of an Armor™ PowerFlex® Drive while online, this can trigger ‘Error during AOP Apply’ in the Studio 5000 Logix Designer® application.

*The correction for this anomaly in firmware revision 35.016 also requires an upgrade to version 35.03 of Logix Designer.

You must also perform these steps with the application.

1. Open the project file and perform a compact and delete of cache.
   1. Go to File → Compact.
   2. When the Compact Project File dialog appears, make sure the ‘Delete cached build data’ checkbox is selected.
2. Download the project to the controller.

SD Status Indicator Flashes When I/O Connection Errors Exist (1917586, 1917602, 1917603)

The SD status indicator flashes and decreases SD card performance when I/O connection errors exist. The impact on SD card performance is directly related to the number of I/O connection errors present at that time.

Accepting Online Edits Can Cause a Controller MNRF or Software Error (2111853, 2111905, 2111908)

The controller can experience a major non-recoverable fault (MNRF) - Type 14 Code 7, or a software error, when the following are created online:

• Safety program Input parameters

• Safety program Public parameters

• Safety program Local tags

For more information, see Knowledgebase Technote 5580/5380 Safety Controller Assert, Major Recoverable Fault type 14 code 7, or software error.

Controller Can Experience a MNRF When You Inhibit and Uninhibit an Axis and Drive (2069903, 2162056, 2162057)

Inhibiting the Axis and then the associated Drive with SSV instructions (in that order) can cause the controller to experience a major non-recoverable fault (MNRF).

Workaround: Inhibit the Drive, then inhibit the Axis (in that order). The order of uninhibiting the axis and drive does not matter.

Safety I/O Connection Times Increase in Controller Firmware (2018378, 2018379, 2282804)

When the controller establishes a connection to safety I/O, the connection time is increased. The increase connection time is based on the number of safety I/O listed in the I/O tree and the state of the I/O devices (powered up or powered down).

Online Configuration of I/O Devices can Cause a MNRF/Assert (3231324, 3385069, 3335724, 3355887, 3355890)

When an I/O device is owned by the controller, if you make an online change with either the module properties dialog or a MSG instruction with a “Module Reconfigure” message type, the controller can MNRF/assert.

There is a higher probability for this anomaly to occur when there are many unconnected I/O devices in the I/O tree.

We recommend that you inhibit devices in the I/O tree that are not powered or do not exist on the network. If possible, inhibit the device while offline with the controller and then download the application to the controller.

This anomaly does not impact all I/O devices:

• Common I/O devices include: 1718 Ex I/O, 1719 Ex I/O, ArmorBlock® I/O, Compact 5000® I/O, FLEX 5000® I/O, Armor™ PowerFlex® Drives, E300™ Electronic Overload Relays, Dynamix™ 1444 Series modules.

• For all impacted I/O devices, see Knowledgebase Technote Determining the I/O Devices that Utilize an EDS AOP

Workaround:

Inhibit the I/O connection to the device while online before you start any reconfiguration. Once you complete the reconfiguration, then uninhibit the I/O connection.

Download Results in a Safety I/O Connection Error (1929038)

When downloading a safety-locked application without a safety signature, a (16#080a) Safety Parameter Error: Invalid CPCRC error occurs on all safety IO connections.

The workaround is to unlock the controller and either:

• Do not safety-lock the application and download the application to the controller,
• Download the application to the controller, and while in program mode: apply a safety signature, safety-lock the application, and then transition the controller to run mode.

Known Anomaly First Identified in:

• ControlLogix® 5580 Controllers, Revision 32.011
• ControlLogix 5580 Process Controllers, Revision 33.011
• GuardLogix® 5580 Controllers, Revision 32.011
• CompactLogix™ 5380 Motion Controllers, Revision 32.011
• CompactLogix 5380 Process Controllers, Revision 33.011
• Compact GuardLogix 5380 SIL2 Controllers, Revision 32.011
• Compact GuardLogix 5380 SIL3 Controllers, Revision 32.013

Minor fluctuations of the system time offset both on the producer controller and consumer controller side can cause minor velocity spikes, typically less than 1 % on the consumed axes in the remote controller.

This behavior is aesthetic and does not impact functionality.

Known Anomaly First Identified as of Firmware Revision 32.012

Catalog Numbers:

• ControlLogix® 5580 Controllers
• ControlLogix 5580 Process Controllers
  
• CompactLogix™ 5380 Controllers
• CompactLogix 5380 Process Controllers
  
• GuardLogix® 5580 Controllers
• Compact GuardLogix 5380 Controllers
• CompactLogix 5480 Controllers

Work arounds to consider:

When enabling SFC forces, the system displays erroneous information (4041343, 4177971, 4177979, 4177981)

Despite these messages, SFC forcing functions as expected.

Connected Uncached Messages Fail (00173896)

• GuardLogix® 5580 Controllers, Revision 29.011
• ControlLogix® 5580 Controllers, Revision 28.011
• ControlLogix 5580 Process Controllers, Revision 33.011
• CompactLogix™ 5380 Controllers, Revision 28.011
• CompactLogix 5380 Process Controllers, Revision 33.011
• Compact GuardLogix 5380 SIL 2 Controllers, Revision 31.011
• Compact GuardLogix 5380 SIL 3 Controllers, Revision 32.013
• CompactLogix 5480 Controllers, Revision 32.011

Connected UnCached messages that are sent to the controller can fail. This anomaly typically occurs if the Connected UnCached messages are sent when the controller is handling many messages and has temporarily run out of buffer resources.

To work around the anomaly, try the following:

• Cache connections. As many as 256 connections are available.
• Use the message instructions in a periodic task instead of a continuous task.
• Do not trigger messages as quickly as possible.

MSF Instruction Clears the .DriveEnableStatus Bit after the .DN is Set (00175088)

Known Anomaly First Identified in:

• ControlLogix® 5580 Controllers, Revision 28.011
• ControlLogix 5580 Process Controllers, Revision 33.011
• GuardLogix® 5580 Controllers, Revision 29.011
• CompactLogix™ 5380 Motion Controllers, Revision 28.011
• CompactLogix 5380 Process Controllers, Revision 33.011
• Compact GuardLogix 5380 SIL2 Controllers, Revision 31.011
• Compact GuardLogix 5380 SIL3 Controllers, Revision 32.013
• CompactLogix 5480 Controllers, Revision 32.011

The Motion Servo Off (MSF) instruction can report a .DN (Done) status before the drive clears the .DriveEnableStatus bit.

IP Route Table Web Page Shows the Mask in Reverse Order (00183121)

Corrected anomaly with Firmware Revision 31.011

Known Anomaly First Identified as of Firmware Revision 28.011

Catalog Numbers: CompactLogix™ 5380, ControlLogix® 5580

The IP Route Table diagnostic web page shows the mask in reverse order (0.255.255.255).

Value That Is Outside the Supported WallClockTime Range (00182341, 00182342, 00190288, Lgx00169520)

Corrected Anomaly in:

• ControlLogix® 5570, Firmware Revision 30.011 and 20.019
• GuardLogix® 5570, Firmware Revision 30.011
• CompactLogix™ 5370, Firmware Revision 30.011 and 20.019
• Compact GuardLogix 5370, Firmware Revision 30.011
• ControlLogix 5560, Firmware Revision 20.019

Known Anomaly First Identified in:

• ControlLogix® 5580, Firmware Revision 28.011
• ControlLogix 5580 Process, Firmware Revision 33.011
• GuardLogix® 5580, Firmware Revision 31.011

• CompactLogix™ 5380, Firmware Revision 28.011
• CompactLogix 5380 Process, Firmware Revision 33.011
• Compact GuardLogix 5380 SIL2, Firmware Revision 31.011
• Compact GuardLogix 5380 SIL3, Firmware Revision 32.013
• CompactLogix 5480, Firmware Revision 32.011

• ControlLogix 5570, Firmware Revision 19.011
• GuardLogix 5570, Firmware Revision 20.011

• CompactLogix 5370, Firmware Revision 20.011
• Compact GuardLogix 5370, Firmware Revision 28.011

• ControlLogix 5560, Firmware Revision 11.011

When reading or viewing the WCT (WallClockTime) of the controller, the year can show a value of 586XXX (where the XXX is any values). This means that the wallclock value is outside the valid range for EPoch time.

The range of the WCT has been tightened in the controller to 1/1/1970 00:00:00.000...12/31/2069 23:59:59.999. If the controller tries to handle a value outside the defined range, the controller does not apply the new value. It now logs a minor fault, Type 13 Code 21. The fault displays an unknown fault in the RSLogix 5000® software.

When the fault is logged, the WCT of the controller is set to 1/1/19XX 00:00:00.000, where XX is 81...86. The year corresponds to the Info[0] value for the minor fault.

• GuardLogix® 5580 Controllers, Revision 31.011
• ControlLogix® 5580 Controllers, Revision 31.011
• ControlLogix 5580 Process Controllers, Revision 33.011
• CompactLogix™ 5380 Controllers, Revision 31.011
• CompactLogix 5380 Process Controllers, Revision 33.011
• Compact GuardLogix 5380 SIL 2 Controllers, Revision 31.011
• Compact GuardLogix 5380 SIL 3 Controllers, Revision 32.013
• CompactLogix 5480 Controllers, Revision 32.011

GuardLogix 5580 Controller Can Experience a MNRF if Safety Partner is Removed (00215763)

Known Anomaly First Identified as of Firmware Revision 32.011

Catalog Numbers: GuardLogix 5580® Controllers

SDI Instruction Triggers the SDI Limit After the Configured SDI Position Window (1163130)

SDI Safety Instruction triggers SDI Limit after the SDI Position Window with 16-bit encoder rollover. See Knowledgebase Technote GuardLogix Safe Direction (SDI) unintended motion at SFX Feedback Position encoder rollover.

SDI Safety Instruction False Triggers the SDI Limit (1165263)

SDI Safety Instruction false triggers SDI Limit with 16-bit encoder rollover. See Knowledgebase Technote 843ES CIP Safety Encoder experience Safe Direction (SDI) Limit at rollover.

PortPhysicalAddressInfo GSV Does Not Populate After Controller Power Cycle (1451494, 1514584)

When a Get System Value (GSV) instruction configured for Class Name: TimeSynchronize and Attribute Name: PortPhysicalAddressInfo executes after a controller power cycle, the physical address (MAC ID) does not populate.

Online Edit to Compact 5000 I/O and FLEX 5000 I/O Safety Modules Can Cause a Controller MNRF (1660629, 2301013)

If an online edit is made to the configuration of an inhibited Compact 5000® I/O or inhibited FLEX 5000® I/O safety module, and a safety task watchdog occurs while the safety task is running, the controller can experience a major nonrecoverable fault (MNRF).

Controller Can Assert When A THRS Safety Instruction Exists in An Application That Has a Safety Signature Applied (1766633, 1770546, 1770549)

The Two Hand Run Station (THRS) instruction can cause safety controllers to assert when a safety signature is applied. If an update to one of these versions or later is not possible, it is recommended to use the Two Hand Run Station Enhanced (THRSe) safety instruction, which has additional features and does not have this anomalous behavior.

MCTPO Conflict Causes Incorrect Instruction Outputs (1806725)

When you use a Motion Calculate Transform Position with Orientation (MCTPO) instruction in multiple tasks simultaneously, the MCTPO reports an incorrect transform position.

To work around this anomaly, place a User Interrupt Disable (UID) instruction before each MCTPO instruction in each task, then place a User Interrupt Enable (UIE) instruction after each MCTPO operation in each task. If all the MCTPO instructions are used in only one task, no change needs to be made.

Controller Can MNRF When Executing CPS Instruction with Specific Data Types (1800992, 2129625, 2129629)

When executing a Synchronous Copy File (CPS) instruction with a motion diagnostics connection as the source or destination tag, the controller can experience a major nonrecoverable fault (MNRF).

To work around this anomaly, do not use motion diagnostics connections (such as AB:Motion_Diagnostics:S:1) as arguments to the CPS instruction. If a copy is still necessary, use a non-synchronous copy via the COP instruction.

Sent Bytes Per Second Displays a Larger Incorrect Value (1548181)

Under HMI/MSG Connected (EtherNet/IP Port) on the device Diagnostic webpages, Sent Bytes Per Second displays a much larger incorrect value, not the actual sent bytes per second.

Controller Can MNRF During Online Edit (2123008, 2306717, 3741373)

Controller Can Become Unresponsive When You Inhibit or Uninhibit a Module (3080005)

1. Upgrade the controller’s firmware.
2. Install the latest release of software associated with the major revision of firmware.
3. Open the project file and perform a compact and delete of cache.
   1. Go to File → Compact
   2. When the Compact Project File dialog appears, make sure the Delete cached build data checkbox is checked.

4. Download the project to the controller.

TSSM Instruction May Not Function as Documented (3343045, 3343050, 3343083, 3343105)

For additional information, see Knowledgebase Article Unexpected TSSM Instruction Behaviour.

Download of signed application with 5094-IJ2IS or 5094-IRT8S fails (3797237, 3862512, 3862515)

Consumer Axis State Shows Configuring/Synchronizing When A PTP Loss Fault Occurs on Producer Axis (36092)

With firmware revision 34.011 or later, when PTP Loss fault occurs on a Producer Axis, the Consumer Axis State now shows Configuring/Synchronizing. With firmware revision V33.011, the Consumer Axis State would be Faulted when a PTP Loss Fault occurred on the Producer Axis.

New Firmware Updates Can Impact the Performance of Message Rate Capacity HMI/MSG (Class 3) Data

Each new major revision of the controller/communication module firmware provides additional features and functionality, but this consumes additional processing power from the module even if the features are not utilized. This manifests as degrading HMI/messaging performance for the respective module.

Despite this degradation, the specifications defined for the respective modules have been maintained:

To improve the messaging capacity, it is recommended to employ the following:

• For high-frequency messaging, utilize connected cached messages

• Utilize message reads as opposed to message writes; they’re more efficient

• For ControlLogix 5580 controllers, route HMI/messages through communication modules in the chassis as opposed to going directly to the embedded port of the controller
  • Offloading some of the processing to the communications module results in greater messaging capacity than using the front port alone
  • This recommendation does not apply to I/O or produce/consume data, it is more efficient and there is more capacity for that data to route through the embedded port of the controller
• Upgrade to a 5590 controller
  • The HMI/messaging messaging capacity is doubled through the embedded ethernet port

For more information, see these publications:

• ControlLogix and GuardLogix Controller Specifications Technical Data, publication 1756-TD001

• CompactLogix 5380, Compact GuardLogix 5380, and CompactLogix 5480 Controllers Specifications Technical Data, publication 5069-TD002

• 1756 ControlLogix Communication Modules Specifications Technical Data, publication 1756-TD003

The RunMode state will provide the mode of the Producing controller from within the Consuming tag’s data. The RunMode state does not provide unique values in the Producing tag’s data. To monitor the state of the Producing controller within the Producing controller’s logic, use a Get System Value (GSV), with the Object set to ControllerDevice and the Attribute set to Status.

This application note applies to all firmware revisions of:

• GuardLogix® 5580, GuardLogix 5570, and GuardLogix 5560 controllers
• Compact GuardLogix 5380 and Compact GuardLogix 5370 controllers
• Compact GuardLogix L4 controllers

• All major and minor firmware releases for GuardLogix controller systems are certified for use in safety applications. As part of the certification process, Rockwell Automation tests the safety-related firmware functions (for example the CIP Safety™ communication subsystems, embedded safety instruction execution, and safety-related diagnostic functions). The firmware release notes identify changes to safety-related functions.
• Perform an impact analysis of the planned firmware upgrade.
  • Review of the firmware release notes for changes in safety-related functionality.
  • Review of hardware and firmware compatibility in the Product Compatibility and Download site to identify potential compatibility conflicts.
  • Any modification, enhancement, or adaptation of your validated software must be planned and analyzed for any impact to the functional safety system as described in the ‘Edit Your Safety Application’ section in the safety reference manual for your controller.
• You must remove and regenerate the safety signature as part of the firmware upgrade process. Use the online and offline edit process described in the safety reference manual for your controller.

• GuardLogix 5580 and Compact GuardLogix 5380 Safety Reference Manual, 1756-RM012
• GuardLogix 5570 and Compact GuardLogix 5370 Safety Reference Manual, 1756-RM099
• GuardLogix 5560 and Compact GuardLogix L4 Safety Reference Manual, 1756-RM093

1. From the Product Compatibility and Download Center:
   1. Review all firmware release notes, starting with the original firmware revision through the new firmware revision, to identify any changes that impact the safety-related implementation of the application.
   2. Review hardware and firmware compatibility to identify any restrictions between the original system components and the new system components.
2. Perform a hazard and risk assessment for any changes identified during the impact analysis and determine what additional testing is necessary.
3. Perform the online and offline edit process described in the safety reference manual for your controller. You can restrict the ‘Test the Application’ block to the testing identified by the hazard and risk assessment.

PXRQ Instruction Can Cause a Controller MNRF/Assert

Writing to the Equipment Phase External Request (PXRQ) instruction control\backing tag needs to be conditioned with a set .PC bit of the control\backing tag or the controller can MNRF/assert.