Release Notes

ControlLogix 5580 Process Controller, use ControlLogix 5580 Harsh Corrosive Environment Process Controller as a direct replaceme
Version 35.011 (released 11/2022)

Catalog Number 1756-L83EP (series B)

These release notes describe version information for 1756-L83EP, version 35.011 (released 11/2022).

Security

This release includes security enhancements as a part of our ongoing efforts to improve security. For information regarding Rockwell Automation's vulnerability disclosure process, please reference the Rockwell Automation Vulnerability Policy.

Controller May Not Re-establish Outgoing Secured I/O Connections After Cable Breaks or Power-Cycles (1432106, 1489122, 1804298, 2136899)

Controllers
First Known in Firmware Revision
Corrected in Firmware Revision
CompactLogix™ 5380
34.011
34.014, 35.011 and later
Compact GuardLogix® 5380 SIL 2
34.011
34.014, 35.011 and later
Compact GuardLogix 5380 SIL 3
34.011
34.014, 35.011 and later
CompactLogix 5380 Process
34.011
34.014, 35.011 and later
CompactLogix 5480
34.011
34.014, 35.011 and later
ControlLogix® 5580
34.011
34.014, 35.011 and later
GuardLogix 5580
34.011
34.014, 35.011 and later
ControlLogix 5580 Process
34.011
34.014, 35.011 and later


In a CIP Security™ application, the controller may not re-establish secured I/O connections after multiple cable breaks or power cycles.

The Studio 5000 Logix Designer® application shows:

(Code 16#0204) Connection Request Error: Connection request timed out

If you experience this anomaly, power cycle the controller again.


CVE-2024-3493: Logix Controllers and Communication Modules Vulnerable to MNRF Due to Invalid Header Value

Controllers and Communication Modules
First Known in Firmware Revision
Corrected in Firmware Revision
CompactLogix™ 5380
35.011
35.013, 36.011 and later
Compact GuardLogix® 5380 SIL 2
35.011
35.013, 36.011 and later
Compact GuardLogix 5380 SIL 3
35.011
35.013, 36.011 and later
CompactLogix 5380 Process
35.011
35.013, 36.011 and later
CompactLogix 5480
35.011
35.013, 36.011 and later
ControlLogix® 5580
35.011
35.013, 36.011 and later
GuardLogix 5580
35.011
35.013, 36.011 and later
ControlLogix 5580 Process
35.011
35.013, 36.011 and later
1756-EN4TR, 1756-EN4TRK, 1756-EN4TRXT
5.001
6.001 and later


For a full list of the potentially affected Rockwell Automation products and a description of the vulnerability, see Security Advisory ControlLogix and GuardLogix Vulnerable to major nonrecoverable fault due to Invalid Header Value.


  

CVE 2024-5659: Multicast Request Causes Major Nonrecoverable Fault on Select Controllers

Controllers and Communication Modules
First Known in Firmware Revision
Corrected in Firmware Revision
CompactLogix™ 5380
34.011
V34.014, V35.013, V36.011 and later
Compact GuardLogix® 5380 SIL 2
34.011
V34.014, V35.013, V36.011 and later
Compact GuardLogix 5380 SIL 3
34.011
V34.014, V35.013, V36.011 and later
CompactLogix 5380 Process
34.011
V34.014, V35.013, V36.011 and later
CompactLogix 5480
34.011
V34.014, V35.013, V36.011 and later
ControlLogix® 5580
34.011
V34.014, V35.013, V36.011 and later
GuardLogix 5580
34.011
V34.014, V35.013, V36.011 and later
ControlLogix 5580 Process
34.011
V34.014, V35.013, V36.011 and later
1756-EN4TR, 1756-EN4TRK, 1756-EN4TRXT
4.001
6.001 and later


For a full list of the potentially affected Rockwell Automation products and a description of the vulnerability, see Security Advisory ControlLogix and GuardLogix Vulnerable to Multicast Request Causes major nonrecoverable fault on Select Controllers.



  

Controller Can Fail to Re-Establish an Outgoing Secured I/O Connection to Remote I/O Modules After a Cable-Break (1753900)

Controllers
First Known in Firmware Revision
Corrected in Firmware Revision
CompactLogix™ 5380
34.011
36.011 and later
Compact GuardLogix® 5380 SIL 2
34.011
36.011 and later
Compact GuardLogix 5380 SIL 3
34.011
36.011 and later
CompactLogix 5380 Process
34.011
36.011 and later
ControlLogix® 5580
34.011
36.011 and later
GuardLogix 5580
34.011
36.011 and later
ControlLogix 5580 Process
34.011
36.011 and later

In a CIP Security application, if the cables of a secured, remote 1756-EN4TR EtherNet/IP adapter are disconnected multiple times, the controller can fail to reconnect to the I/O modules in the remote chassis.

If you experience this anomaly, either power cycle the remote chassis, or remove and insert the 1756-EN4TR module under power.



Improved Product Resiliency for Redundancy Firmware Bundle Version 35.011_kit2

Product improvements have been made to increase product resiliency to potentially disruptive activities. These enhancements have been verified not to affect product safety, performance, expected life, configuration, or operation of the product. Rockwell Automation recommends that you follow good Industrial Control System (ICS) security practices that include regular product updates. To maintain authenticity, obtain product updates and new releases directly from Rockwell Automation.




Requirements

This release has the following requirements.

ControlLogix® 5580 Redundancy System Update Migration Paths

General Rules:
• Going to a later minor revision and/or kit is acceptable.
• Going to the next major revision is acceptable.
• Going through more than one major revision requires you to perform the RSU process multiple times.

Redundancy System Update Migration Path Limitations:
  
From Firmware Revision
Firmware Revision Updates Conditionally Not Allowed (1)
33.011_kit1
33.011_kit2
33.012_kit1
33.015_kit1
33.015_kit2
34.011_kit1
33.017_kit1
34.011_kit1, 34.011_kit2, 34.014_kit1
34.011_kit1
34.011_kit2
35.011_kit1
34.014_kit1
35.011_kit1, 35.011_kit2, 35.011_kit3
34.014_kit2
35.011_kit1, 35.011_kit2, 35.011_kit3, 35.013_kit1, 35.013_kit2, 35.014_kit1
34.015_kit1
35.011_kit1, 35.011_kit2, 35.011_kit3, 35.013_kit1, 35.013_kit2, 35.014_kit1
35.011_kit1
35.011_kit2
35.011_kit3
35.013_kit1
35.013_kit2
36.011_kit1
35.014_kit1
36.011_kit1
36.011_kit1
36.011_kit2
37.011_kit1
  
  1. Depending on the modules used in the local rack, you may not be able to update the system with RSU. See Knowledgebase Technote ControlLogix: Redundancy Firmware Bundle Revision History to see which modules are at an older firmware in the newer redundancy bundle.



  

ControlLogix Redundancy Compatible Software for Revision 35.011_kit1

Catalog Numbers: ControlLogix® 5580 controllers*

Software
Required Software Version, Min
CompareTool
9.01.00
ControlFLASH Plus™
5.00.00
FactoryTalk® Services Platform
6.31.00 (CPR9-SR13)
FactoryTalk Activation Manager
5.00.00 (CPR9-SR13)
FactoryTalk Alarms and Events(1)
6.31.00 (CPR9-SR13)
FactoryTalk AssetCentre
12.00.00 (CPR9-SR13)
FactoryTalk Batch
15.00.00 (3)
FactoryTalk View Site Edition(2)
13.00.00 (CPR9-SR13)
FactoryTalk Linx Redundancy Module Configuration Tool
9.01.00
FactoryTalk Linx (4)
6.31 (CPR9-SR13)
RSLinx® Classic
4.30 (CPR9-SR13)
Studio 5000 Logix Designer®
35.00.00

(1) You must download a FactoryTalk Alarm and Events patch. See Knowledgebase Article Master list of all available Patch TOCs.

(2) The installation of FactoryTalk View Site Edition also installs FactoryTalk Services Platform, which installs FactoryTalk Alarms and Events. Also, if you download and install the latest FactoryTalk Services Patch Rollup, this patch automatically installs the patch for FactoryTalk Alarms and Events.

(3) Use the most recent FactoryTalk Batch Patch Roll-up with this redundancy firmware revision. For the most recent patch roll-up, see Knowledgebase Article Master list of all available Patch TOCs.

(4) For the most recent FactoryTalk Linx patch roll-up, see Rockwell Automation Knowledgebase Article Master list of all available Patch TOCs.





ControlLogix Redundancy System Components Revision 35.011_kit1

Catalog Numbers

This redundancy system revision includes the following:

Cat. No.
Module Description
Series
Firmware Revision
1756-EN2F 1756-EN2FK
ControlLogix EtherNet/IP™ fiber communication module
C
11.0031
B or earlier
5.008 or 5.0282
1756-EN2T
ControlLogix EtherNet/IP communication module
D
11.0031
C or earlier
5.008 or 5.0282
1756-EN2TK
ControlLogix EtherNet/IP communication module (conformal coated)
D
11.0031
1756-EN2TXT
ControlLogix-XT™ EtherNet/IP communication module
D
11.0031
C or earlier
5.008 or 5.0282
 
1756-EN2TP 1756-EN2TPK
1756-EN2TPXT
ControlLogix EtherNet/IP communication module – Parallel Redundancy Protocol (PRP)
A
11.0031
1756-EN2TR
ControlLogix EtherNet/IP communication module
C
11.0031
B or earlier
5.008 or 5.0282
1756-EN2TRK
ControlLogix EtherNet/IP communication module (conformal coated)
C
11.0031
1756-EN2TRXT
ControlLogix-XT EtherNet/IP communication module
C
11.0031
B
5.0282
1756-EN4TR 1756-EN4TRK 1756-EN4TRXT
ControlLogix EtherNet/IP communication module
A
5.001
1756-L81E
1756-L81EK 1756-L82E
1756-L82EK 1756-L83E
1756-L83EK
1756-L84E
1756-L84EK
1756-L85E
1756-L85EK
ControlLogix 5580 standard controllers
B
35.011
1756-L81E-NSE
1756-L82E-NSE 1756-L83E-NSE 1756-L84E-NSE 1756-L85E-NSE
ControlLogix 5580 No Stored Energy (NSE) controllers
B
35.011
1756-L81EXT
1756-L82EXT
1756-L83EXT 1756-L84EXT 1756-L85EXT
ControlLogix-XT 5580 controllers
B
35.011
1756-L81EP 1756-L83EP 1756-L85EP
ControlLogix 5580 process controllers
B
35.011
1756-RM2
ControlLogix redundancy module
All
20.031
1756-RM2K
ControlLogix redundancy module (conformal coated)
All
20.031
1756-RM2XT
ControlLogix-XT redundancy module
All
20.031
1756-N2
Slot Filler Module
All
N/A


(1) Firmware revision 11.003 is digitally signed firmware.

(2) Firmware revision 5.028 is digitally signed firmware. Firmware revision 5.008 is unsigned firmware.

EtherNet/IP is a trademark of ODVA, Inc.



Additional Resources for Revision 35.011_kit1

For more information on how to install, configure and use your ControlLogix redundancy system, see:



Digitally Signed Ethernet Module Firmware for Revision 35.011_kit1

Catalog Numbers

1756-EN2T/C, 1756-EN2TXT/C 1756-EN2T/D, 1756-EN2TK/D, 1756-EN2TXT/D, 1756-EN2TR/B,
1756-EN2TRXT/B, 1756-EN2TR/C, 1756-EN2TRK/C, 1756- EN2TP/A, 1756-EN2TPK/A, 1756-EN2TPXT/A, 1756-EN2F/B, 1756-EN2FK/B, 1756-EN2F/C, 1756-EN2FK/C, 1756-EN4TR/A, 1756-EN4TRK/A,
1756-EN4TRXT/A

Digitally signed firmware provides more security over the unsigned firmware. This firmware is different based on the EtherNet/IP™ communication modules you use.

Cat. No.
Supported Firmware Revisions
Digitally Signed Firmware
Included with this Redundancy Bundle
1756-EN2T/D
1756-EN2TK/D
1756-EN2TXT/D
11.003
Yes
Yes
1756-EN2T/C or earlier
1756-EN2TXT/C or earlier
5.008
No
Yes
5.028
Yes
No
1756-EN2TP/A
1756-EN2TPK/A
1756-EN2TPXT/A
11.003
Yes
Yes
1756-EN2TR/C
1756-EN2TRK/C
11.003
Yes
Yes
1756-EN2TR/B or earlier
1756-EN2TRXT/B or earlier
5.008
No
Yes
5.028
Yes
No
1756-EN2F/C
1756-EN2FK/C
11.003
Yes
Yes
1756-EN2F/B or earlier
1756-EN2FK/B or earlier
5.008
No
Yes
5.028
Yes
No
1756-EN4TR/A
1756-EN4TRK/A
1756-EN4TRXT/A
5.001
Yes
Yes


Firmware revision 5.028 is not included in the redundancy system, revision 35.011_kit1 firmware bundle. You must download and install this digitally signed firmware after the redundancy bundle is installed.

Important: When you install the digitally signed firmware, that is, firmware revision 5.028, into a 1756-EN2T/C (or earlier), 1756-EN2TR/B (or earlier), or 1756-EN2F/B (or earlier) module, the installation makes the module incompatible with some firmware revisions. For example, after you update firmware, the module supports use of only digitally signed firmware. The module rejects any unsigned firmware updates.

You can download firmware revision 5.028 and the redundancy system firmware bundle, revision 35.011_kit1, at the Product Compatibility and Download Center.

Tip: Select the base catalog number in ControlFLASH PLUS™ software when upgrading extended temperature or conformal coated modules. For example, select the 1756-EN2TR when upgrading a 1756-EN2TRXT module. Extended temperature and conformal coated modules use the same Redundancy module ControlFLASH PLUS™ kit.

EtherNet/IP is a trademark of ODVA, Inc.

Controller Restrictions in Redundancy Systems with Revision 35.011_kit1

Known Restrictions as of ControlLogix® Redundancy Revision 35.011_kit1

This revision supports the following:

Catalog Numbers

1756-EN2T, 1756-EN2TK, 1756-EN2TR, 1756-EN2TXT, 1756-EN2F, 1756-EN2FK, 1756-EN2TP, 1756-EN2TPK, 1756-EN2TPXT:

1756-EN4TR, 1756-EN4TRK, 1756-EN4TRXT:

ControlLogix 5580 redundancy-enabled controllers, 1756-EN2T, 1756-EN2TK, 1756-EN2TR, 1756-EN2TRK, 1756-EN2TRXT, 1756-EN2TXT, 1756-EN2F, 1756-EN2FK, 1756-EN2TP, 1756-EN2TPK, 1756-EN2TPXT, 1756-EN4TR, 1756-EN4TRK, 1756-EN4TRXT:

CIP Sync™ Technology Included in Redundant Systems:

IMPORTANT: Before you use this enhancement in a redundancy system, see these publications for a full understanding of CIP Sync technology in any system:
  1. The Grandmaster status transfers from the original primary controller to the new primary controller. This transfer can take longer to complete than if Grandmaster status was transferred between devices in a non-redundant system.
  2. The synchronization of the redundancy system can take longer when you use CIP Sync technology.

ControlLogix 5580 controllers

1756-EN2T, 1756-EN2TK, 1756-EN2TR, 1756-EN2TRK, 1756-EN2TRXT, 1756-EN2TXT, 1756-EN2F, 1756-EN2FK, 1756-EN2TP, 1756-EN2TPK, 1756-EN2TPXT:

CIP, CIP Sync, and EtherNet/IP are trademarks of ODVA, Inc.



  

Compatible Software for Controller Firmware Revision 35.011

System Requirements as of Revision 35.011 for these catalog numbers:

This table identifies the minimum software versions that are compatible with firmware revision 35.011:

Software
Version
 
Studio 5000 Logix Designer®
35.00.00
 
RSLinx® Classic
4.30.00
 
FactoryTalk® Linx
6.31.00
 
ControlFLASH™
15.06.00
 
ControlFLASH Plus™
5.00.00
 




ControlLogix Redundancy Compatible Software for Revision 35.011_kit2

Catalog Numbers: ControlLogix® 5580 controllers (including ControlLogix-XT™ and K versions).

Software
Required Software Version, Min
CompareTool
9.01.00
ControlFLASH Plus™
5.00.00
FactoryTalk® Services Platform
6.31.00 (CPR9-SR13)
FactoryTalk Activation Manager
5.00.00 (CPR9-SR13)
FactoryTalk Alarms and Events(1)
6.31.00 (CPR9-SR13)
FactoryTalk AssetCentre
12.00.00 (CPR9-SR13)
FactoryTalk Batch
15.00.00 (3)
FactoryTalk View Site Edition(2)
13.00.00 (CPR9-SR13)
FactoryTalk Linx Redundancy Module Configuration Tool
9.01.00
FactoryTalk Linx (4)
6.31 (CPR9-SR13)
RSLinx® Classic
4.30 (CPR9-SR13)
Studio 5000 Logix Designer®
35.00.00

(1) You must download a FactoryTalk Alarm and Events patch. See Knowledgebase Article Master list of all available Patch TOCs.

(2) The installation of FactoryTalk View Site Edition also installs FactoryTalk Services Platform, which installs FactoryTalk Alarms and Events. Also, if you download and install the latest FactoryTalk Services Patch Rollup, this patch automatically installs the patch for FactoryTalk Alarms and Events.

(3) Use the most recent FactoryTalk Batch Patch Roll-up with this redundancy firmware revision. For the most recent patch roll-up, see Knowledgebase Article Master list of all available Patch TOCs.

(4) For the most recent FactoryTalk Linx patch roll-up, see Rockwell Automation Knowledgebase Article Master list of all available Patch TOCs.


Digitally Signed Ethernet Module Firmware for Revision 35.011_kit2

Catalog Numbers

1756-EN2T/C, 1756-EN2TXT/C 1756-EN2T/D, 1756-EN2TK/D, 1756-EN2TXT/D, 1756-EN2TR/B, 1756-EN2TRXT/B, 1756-EN2TR/C, 1756-EN2TRK/C, 1756- EN2TP/A, 1756-EN2TPK/A, 1756-EN2TPXT/A, 1756-EN2F/B, 1756-EN2FK/B, 1756-EN2F/C, 1756-EN2FK/C, 1756-EN4TR/A, 1756-EN4TRK/A, 1756-EN4TRXT/A

Digitally signed firmware provides more security over the unsigned firmware. This firmware is different based on the EtherNet/IP communication modules you use.

Cat. No.
Supported Firmware Revisions
Digitally Signed Firmware
Included with this Redundancy Bundle
1756-EN2T/D
1756-EN2TK/D
1756-EN2TXT/D
11.004
Yes
Yes
1756-EN2T/C or earlier
1756-EN2TXT/C or earlier
5.009
No
Yes
5.029
Yes
No
1756-EN2TP/A
1756-EN2TPK/A
1756-EN2TPXT/A
11.004
Yes
Yes
1756-EN2TR/C
1756-EN2TRK/C
11.004
Yes
Yes
1756-EN2TR/B or earlier
1756-EN2TRXT/B or earlier
5.009
No
Yes
5.029
Yes
No
1756-EN2F/C
1756-EN2FK/C
11.004
Yes
Yes
1756-EN2F/B or earlier
1756-EN2FK/B or earlier
5.009
No
Yes
5.029
Yes
No
1756-EN4TR/A
1756-EN4TRK/A
1756-EN4TRXT/A
5.002
Yes
Yes


Firmware revision 5.029 is not included in the redundancy system, revision 35.011_kit2 firmware bundle. You must download and install this digitally signed firmware after the redundancy bundle is installed.

Important: When you install the digitally signed firmware, that is, firmware revision 5.029, into a 1756-EN2T/C (or earlier), 1756-EN2TR/B (or earlier), or 1756-EN2F/B (or earlier) module, the installation makes the module incompatible with some firmware revisions. For example, after you update firmware, the module supports use of only digitally signed firmware. The module rejects any unsigned firmware updates.

You can download firmware revision 5.029 and the redundancy system firmware bundle, revision 35.011_kit2, at the Product Compatibility and Download Center.

Tip: Select the base catalog number in ControlFLASH PLUS™ software when upgrading extended temperature or conformal coated modules. For example, select the 1756-EN2TR when upgrading a 1756-EN2TRXT module. Extended temperature and conformal coated modules use the same Redundancy module ControlFLASH PLUS kit.


ControlLogix Redundancy System Components Revision 35.011_kit2

Catalog Numbers: ControlLogix® 5580 controllers, 1756-RM2, 1756-RM2K, 1756-RM2XT

This redundancy system revision includes the following:

Cat. No.
Module Description
Series
Firmware Revision
1756-EN2F 1756-EN2FK
ControlLogix EtherNet/IP fiber communication module
C
11.0041
B or earlier
5.009 or 5.0292
1756-EN2T
ControlLogix EtherNet/IP communication module
D
11.0041
C or earlier
5.009 or 5.0292
1756-EN2TK
ControlLogix EtherNet/IP communication module (conformal coated)
D
11.0041
1756-EN2TXT
ControlLogix-XT™ EtherNet/IP communication module
D
11.0041
C or earlier
5.009 or 5.0292
 
1756-EN2TP 1756-EN2TPK
1756-EN2TPXT
ControlLogix EtherNet/IP communication module – Parallel Redundancy Protocol (PRP)
A
11.0041
1756-EN2TR
ControlLogix EtherNet/IP communication module
C
11.0041
B or earlier
5.009 or 5.0292
1756-EN2TRK
ControlLogix EtherNet/IP communication module (conformal coated)
C
11.0041
1756-EN2TRXT
ControlLogix-XT EtherNet/IP communication module
C
11.0041
B
5.0292
1756-EN4TR, 1756-EN4TRK,
1756-EN4TRXT
ControlLogix EtherNet/IP communication module
A
5.002
1756-L81E, 1756-L81EK, 1756-L82E,
1756-L82EK, 1756-L83E, 1756-L83EK
1756-L84E, 1756-L84EK, 1756-L85E
1756-L85EK
ControlLogix 5580 standard controllers
B
35.011
1756-L81E-NSE, 1756-L82E-NSE, 1756-L83E-NSE, 1756-L84E-NSE, 1756-L85E-NSE
ControlLogix 5580 No Stored Energy (NSE) controllers
B
35.011
1756-L81EXT, 1756-L82EXT,
1756-L83EXT, 1756-L84EXT,
1756-L85EXT
ControlLogix-XT 5580 controllers
B
35.011
1756-L81EP, 1756-L83EP, 1756-L85EP
ControlLogix 5580 process controllers
B
35.011
1756-RM2
ControlLogix redundancy module
All
20.031
1756-RM2K
ControlLogix redundancy module (conformal coated)
All
20.031
1756-RM2XT
ControlLogix-XT redundancy module
All
20.031
1756-N2
Slot Filler Module
All
N/A

(1) Firmware revision 11.004 is digitally signed firmware.

(2) Firmware revision 5.029 is digitally signed firmware. Firmware revision 5.009 is unsigned firmware.

Additional Resources for Revision 35.011_kit2

For more information on how to install, configure and use your ControlLogix redundancy system, see:

The ControlLogix Redundancy Modules Installation Instructions, publication 1756-IN087.
The ControlLogix 5580 Redundant Controller User Manual, publication 1756-UM015.
High Availability System Reference Manual, publication HIGHAV-RM002-EN-P.
Replacement Guidelines: Logix 5000™ Controllers, publication 1756-RM100.


Controller Restrictions in Redundancy Systems with Revision 35.011_kit2

Known Restrictions as of ControlLogix® Redundancy Revision 35.011_kit2

This revision supports the following: ControlLogix 5580 controllers, 1756-RM2, 1756-RM2K, and 1756-RM2XT modules.

1756-EN2T, 1756-EN2TK, 1756-EN2TR, 1756-EN2TXT, 1756-EN2F, 1756-EN2FK, 1756-EN2TP, 1756-EN2TPK, 1756-EN2TPXT:

The 1756-EN2x communication modules do not support bumpless I/O on switchover with Immediate Output (IOT) instructions. Because these modules do not support bumpless I/O on switchover with the IOT instruction, they cannot override the RPI in a remote chassis and immediately send new data over the EtherNet/IP network.

1756-EN4TR, 1756-EN4TRK, 1756-EN4TRXT:

The 1756-EN4TR modules with firmware revision 4.001 or later support CIP Security for program upload/download/monitoring (not I/O) when the modules are paired with redundant ControlLogix 5580 controllers in the redundant chassis pair. The ControlLogix 5580 controllers must be at firmware revision 35.011 or later, and the 1756-EN4TR pair must be configured for non-IP address swapping.

The 1756-EN4TR modules are also supported in a remote rack as a standard adapter or in a redundant adapter architecture.

ControlLogix 5580 redundancy-enabled controllers, 1756-EN2T, 1756-EN2TK, 1756-EN2TR, 1756-EN2TRK, 1756-EN2TRXT, 1756-EN2TXT, 1756-EN2F, 1756-EN2FK, 1756-EN2TP, 1756-EN2TPK, 1756-EN2TPXT, 1756-EN4TR, 1756-EN4TRK, 1756-EN4TRXT:

A redundant controller project cannot contain consumed Unicast connections. The project can contain produced Unicast tags that are consumed by remote consumers.

CIP Sync Technology Included in Redundant Systems:

1 - There are differences between CIP Sync technology in non-redundant systems and redundancy systems.
2 - IMPORTANT: Before you use this enhancement in a redundancy system, see these publications for a full understanding of CIP Sync technology in any system:
- ControlLogix 5580 Redundant Controller User Manual, publication 1756-UM015
- Integrated Architecture® and CIP Sync Configuration Application Technique, publication IA-AT003
Consider the following when you use CIP Sync technology in a redundancy system:
1 - If you enable CIP Sync Time Synchronization in the controllers in a redundant chassis pair, you must also enable Time Synchronization in the EtherNet/IP communication modules in the redundant chassis pair so all devices have one path to the Grandmaster.

2 - If time synchronization is enabled in any controller in the primary chassis of a disqualified Redundant Chassis Pair, and no EtherNet/IP communication modules in the primary chassis have time synchronization enabled, the redundant chassis pair attempts to qualify. However, in these application conditions, the attempt to qualify fails.

3 - While CIP Sync technology can handle multiple paths between master and slave clocks, it resolves mastership most effectively if you configure the redundant paths so that Time Synchronization is enabled in only the minimum required number of EtherNet/IP communication modules.
For example, if your redundant chassis pair has three 1756-EN2T communication modules and all are connected to the same network, enable Time Synchronization in only one of the modules.

4 - If the primary controller is the Grandmaster, the redundancy system automatically manages the CIP Sync clock attributes so that the controller in the primary chassis is always set to be the Grandmaster instead of the secondary controller. This clock management makes sure that a change to a new Grandmaster when the redundancy system switches over.

5 - When a switchover occurs, these events take place:
- The Grandmaster status transfers from the original primary controller to the new primary controller. This transfer can take longer to complete than if Grandmaster status was transferred between devices in a non-redundant system.
- The synchronization of the redundancy system can take longer when you use CIP Sync technology.

ControlLogix 5580 controllers

You can have only one controller in each chassis in a redundant chassis pair.

The embedded EtherNet port is disabled when the controller is enabled for redundancy.

Do not use Match Project to Controller property with redundant controllers. If you use the Match Project to Controller property available in the Advanced tab of the Controller Properties dialog box, you cannot go online with, download to, or upload from the new primary controller after a switchover. This is because the serial number of the new primary controller is not the same as the serial number of the old primary controller and the project cannot be matched to the new primary controller.

The Firmware Supervisor feature is not supported in a redundant system.

You cannot use event tasks in a ControlLogix redundancy system. When you enable redundancy, you must change event tasks to nonevent tasks or delete them from your project.

You cannot use Motion in ControlLogix redundancy systems. A remote controller can contain motion instructions even if it is on the same network as a redundancy system.

Under some error conditions, often configuration related, the 1756-RM2 module continually attempts to requalify the system while the error prevents it from being successful. This causes the redundancy module error log to fill with the same error condition. If the system is in this condition, the redundancy module display cycles between QFNG and DISQ. To stop this from happening, change the redundancy module synchronization trigger in the Redundancy Module Configuration Tool (RMCT) to Never, until the error condition is corrected.

The MinDurationACC alarm tag member value does not update, and it stays at a 0 value. This change does not affect the MinDuration calculations.

1756-EN2T, 1756-EN2TK, 1756-EN2TR, 1756-EN2TRK, 1756-EN2TRXT, 1756-EN2TXT, 1756-EN2F, 1756-EN2FK, 1756-EN2TP, 1756-EN2TPK, 1756-EN2TPXT:

The System Event History displays a `Module Failure’ entry when you insert a 1756-EN2x communication module in the chassis while the redundant chassis pair is synchronized. This is not indicative of any module failure; instead, it indicates that only a communication module was inserted in the chassis.



  

ControlLogix Redundancy Compatible Software for Revision 35.011_kit3

Catalog Numbers: ControlLogix® 5580 controllers (including ControlLogix-XT™ and K versions).

Software
Required Software Version, Min
CompareTool
9.01.00
ControlFLASH Plus™
5.00.00
FactoryTalk® Services Platform
6.31.00 (CPR9-SR13)
FactoryTalk Activation Manager
5.00.00 (CPR9-SR13)
FactoryTalk Alarms and Events(1)
6.31.00 (CPR9-SR13)
FactoryTalk AssetCentre
12.00.00 (CPR9-SR13)
FactoryTalk Batch
15.00.00 (3)
FactoryTalk View Site Edition(2)
13.00.00 (CPR9-SR13)
FactoryTalk Linx Redundancy Module Configuration Tool
9.01.00
FactoryTalk Linx (4)
6.31 (CPR9-SR13)
RSLinx® Classic
4.30 (CPR9-SR13)
Studio 5000 Logix Designer®
35.00.00

(1) You must download a FactoryTalk Alarm and Events patch. See Knowledgebase Article Master list of all available Patch TOCs.

(2) The installation of FactoryTalk View Site Edition also installs FactoryTalk Services Platform, which installs FactoryTalk Alarms and Events. Also, if you download and install the latest FactoryTalk Services Patch Rollup, this patch automatically installs the patch for FactoryTalk Alarms and Events.

(3) Use the most recent FactoryTalk Batch Patch Roll-up with this redundancy firmware revision. For the most recent patch roll-up, see Knowledgebase Article Master list of all available Patch TOCs.

(4) For the most recent FactoryTalk Linx patch roll-up, see Rockwell Automation Knowledgebase Article Master list of all available Patch TOCs.


Digitally Signed Ethernet Module Firmware for Revision 35.011_kit3

Catalog Numbers

1756-EN2T/C, 1756-EN2TXT/C 1756-EN2T/D, 1756-EN2TK/D, 1756-EN2TXT/D, 1756-EN2TR/B, 1756-EN2TRXT/B, 1756-EN2TR/C, 1756-EN2TRK/C, 1756- EN2TP/A, 1756-EN2TPK/A, 1756-EN2TPXT/A, 1756-EN2F/B, 1756-EN2FK/B, 1756-EN2F/C, 1756-EN2FK/C, 1756-EN4TR/A, 1756-EN4TRK/A, 1756-EN4TRXT/A

Digitally signed firmware provides more security over the unsigned firmware. This firmware is different based on the EtherNet/IP communication modules you use.

Cat. No.
Supported Firmware Revisions
Digitally Signed Firmware
Included with this Redundancy Bundle
1756-EN2T/D
1756-EN2TK/D
1756-EN2TXT/D
11.004
Yes
Yes
1756-EN2T/C or earlier
1756-EN2TXT/C or earlier
5.009
No
Yes
5.029
Yes
No
1756-EN2TP/A
1756-EN2TPK/A
1756-EN2TPXT/A
11.004
Yes
Yes
1756-EN2TR/C
1756-EN2TRK/C
11.004
Yes
Yes
1756-EN2TR/B or earlier
1756-EN2TRXT/B or earlier
5.009
No
Yes
5.029
Yes
No
1756-EN2F/C
1756-EN2FK/C
11.004
Yes
Yes
1756-EN2F/B or earlier
1756-EN2FK/B or earlier
5.009
No
Yes
5.029
Yes
No
1756-EN4TR/A
1756-EN4TRK/A
1756-EN4TRXT/A
5.003
Yes
Yes


Firmware revision 5.029 is not included in the redundancy system, revision 35.011_kit3 firmware bundle. You must download and install this digitally signed firmware after the redundancy bundle is installed.

Important: When you install the digitally signed firmware, that is, firmware revision 5.029, into a 1756-EN2T/C (or earlier), 1756-EN2TR/B (or earlier), or 1756-EN2F/B (or earlier) module, the installation makes the module incompatible with some firmware revisions. For example, after you update firmware, the module supports use of only digitally signed firmware. The module rejects any unsigned firmware updates.

You can download firmware revision 5.029 and the redundancy system firmware bundle, revision 35.011_kit3, at the Product Compatibility and Download Center.

Tip: Select the base catalog number in ControlFLASH PLUS™ software when upgrading extended temperature or conformal coated modules. For example, select the 1756-EN2TR when upgrading a 1756-EN2TRXT module. Extended temperature and conformal coated modules use the same Redundancy module ControlFLASH PLUS kit.


ControlLogix Redundancy System Components Revision 35.011_kit3

Catalog Numbers: ControlLogix® 5580 controllers, 1756-RM2, 1756-RM2K, 1756-RM2XT

This redundancy system revision includes the following:

Cat. No.
Module Description
Series
Firmware Revision
1756-EN2F 1756-EN2FK
ControlLogix EtherNet/IP fiber communication module
C
11.0041
B or earlier
5.009 or 5.0292
1756-EN2T
ControlLogix EtherNet/IP communication module
D
11.0041
C or earlier
5.009 or 5.0292
1756-EN2TK
ControlLogix EtherNet/IP communication module (conformal coated)
D
11.0041
1756-EN2TXT
ControlLogix-XT™ EtherNet/IP communication module
D
11.0041
C or earlier
5.009 or 5.0292
 
1756-EN2TP 1756-EN2TPK
1756-EN2TPXT
ControlLogix EtherNet/IP communication module – Parallel Redundancy Protocol (PRP)
A
11.0041
1756-EN2TR
ControlLogix EtherNet/IP communication module
C
11.0041
B or earlier
5.009 or 5.0292
1756-EN2TRK
ControlLogix EtherNet/IP communication module (conformal coated)
C
11.0041
1756-EN2TRXT
ControlLogix-XT EtherNet/IP communication module
C
11.0041
B
5.0292
1756-EN4TR, 1756-EN4TRK,
1756-EN4TRXT
ControlLogix EtherNet/IP communication module
A
5.003
1756-L81E, 1756-L81EK, 1756-L82E,
1756-L82EK, 1756-L83E, 1756-L83EK
1756-L84E, 1756-L84EK, 1756-L85E
1756-L85EK
ControlLogix 5580 standard controllers
B
35.011
1756-L81E-NSE, 1756-L82E-NSE, 1756-L83E-NSE, 1756-L84E-NSE, 1756-L85E-NSE
ControlLogix 5580 No Stored Energy (NSE) controllers
B
35.011
1756-L81EXT, 1756-L82EXT,
1756-L83EXT, 1756-L84EXT,
1756-L85EXT
ControlLogix-XT 5580 controllers
B
35.011
1756-L81EP, 1756-L83EP, 1756-L85EP
ControlLogix 5580 process controllers
B
35.011
1756-RM2
ControlLogix redundancy module
All
20.031
1756-RM2K
ControlLogix redundancy module (conformal coated)
All
20.031
1756-RM2XT
ControlLogix-XT redundancy module
All
20.031
1756-N2
Slot Filler Module
All
N/A

(1) Firmware revision 11.004 is digitally signed firmware.

(2) Firmware revision 5.029 is digitally signed firmware. Firmware revision 5.009 is unsigned firmware.

Additional Resources for Revision 35.011_kit3

For more information on how to install, configure and use your ControlLogix redundancy system, see:

The ControlLogix Redundancy Modules Installation Instructions, publication 1756-IN087.
The ControlLogix 5580 Redundant Controller User Manual, publication 1756-UM015.
High Availability System Reference Manual, publication HIGHAV-RM002.
Replacement Guidelines: Logix 5000™ Controllers, publication 1756-RM100.


Controller Restrictions in Redundancy Systems with Revision 35.011_kit3

Known Restrictions as of ControlLogix® Redundancy Revision 35.011_kit3

This revision supports the following: ControlLogix 5580 controllers, 1756-RM2, 1756-RM2K, and 1756-RM2XT modules.

1756-EN2T, 1756-EN2TK, 1756-EN2TR, 1756-EN2TXT, 1756-EN2F, 1756-EN2FK, 1756-EN2TP, 1756-EN2TPK, 1756-EN2TPXT:

The 1756-EN2x communication modules do not support bumpless I/O on switchover with Immediate Output (IOT) instructions. Because these modules do not support bumpless I/O on switchover with the IOT instruction, they cannot override the RPI in a remote chassis and immediately send new data over the EtherNet/IP network.

1756-EN4TR, 1756-EN4TRK, 1756-EN4TRXT:

The 1756-EN4TR modules with firmware revision 4.001 or later support CIP Security for program upload/download/monitoring (not I/O) when the modules are paired with redundant ControlLogix 5580 controllers in the redundant chassis pair. The ControlLogix 5580 controllers must be at firmware revision 35.011 or later, and the 1756-EN4TR pair must be configured for non-IP address swapping.

The 1756-EN4TR modules are also supported in a remote rack as a standard adapter or in a redundant adapter architecture.

ControlLogix 5580 redundancy-enabled controllers, 1756-EN2T, 1756-EN2TK, 1756-EN2TR, 1756-EN2TRK, 1756-EN2TRXT, 1756-EN2TXT, 1756-EN2F, 1756-EN2FK, 1756-EN2TP, 1756-EN2TPK, 1756-EN2TPXT, 1756-EN4TR, 1756-EN4TRK, 1756-EN4TRXT:

A redundant controller project cannot contain consumed Unicast connections. The project can contain produced Unicast tags that are consumed by remote consumers.

CIP Sync Technology Included in Redundant Systems:

1 - There are differences between CIP Sync technology in non-redundant systems and redundancy systems.
2 - IMPORTANT: Before you use this enhancement in a redundancy system, see these publications for a full understanding of CIP Sync technology in any system:
- ControlLogix 5580 Redundant Controller User Manual, publication 1756-UM015
- Integrated Architecture® and CIP Sync Configuration Application Technique, publication IA-AT003
Consider the following when you use CIP Sync technology in a redundancy system:
1 - If you enable CIP Sync Time Synchronization in the controllers in a redundant chassis pair, you must also enable Time Synchronization in the EtherNet/IP communication modules in the redundant chassis pair so all devices have one path to the Grandmaster.

2 - If time synchronization is enabled in any controller in the primary chassis of a disqualified Redundant Chassis Pair, and no EtherNet/IP communication modules in the primary chassis have time synchronization enabled, the redundant chassis pair attempts to qualify. However, in these application conditions, the attempt to qualify fails.

3 - While CIP Sync technology can handle multiple paths between master and slave clocks, it resolves mastership most effectively if you configure the redundant paths so that Time Synchronization is enabled in only the minimum required number of EtherNet/IP communication modules.
For example, if your redundant chassis pair has three 1756-EN2T communication modules and all are connected to the same network, enable Time Synchronization in only one of the modules.

4 - If the primary controller is the Grandmaster, the redundancy system automatically manages the CIP Sync clock attributes so that the controller in the primary chassis is always set to be the Grandmaster instead of the secondary controller. This clock management makes sure that a change to a new Grandmaster when the redundancy system switches over.

When a switchover occurs, these events take place:
- The Grandmaster status transfers from the original primary controller to the new primary controller. This transfer can take longer to complete than if Grandmaster status was transferred between devices in a non-redundant system.
- The synchronization of the redundancy system can take longer when you use CIP Sync technology.

ControlLogix 5580 controllers

You can have only one controller in each chassis in a redundant chassis pair.

The embedded EtherNet port is disabled when the controller is enabled for redundancy.

Do not use Match Project to Controller property with redundant controllers. If you use the Match Project to Controller property available in the Advanced tab of the Controller Properties dialog box, you cannot go online with, download to, or upload from the new primary controller after a switchover. This is because the serial number of the new primary controller is not the same as the serial number of the old primary controller and the project cannot be matched to the new primary controller.

The Firmware Supervisor feature is not supported in a redundant system.

You cannot use event tasks in a ControlLogix redundancy system. When you enable redundancy, you must change event tasks to nonevent tasks or delete them from your project.

You cannot use Motion in ControlLogix redundancy systems. A remote controller can contain motion instructions even if it is on the same network as a redundancy system.

Under some error conditions, often configuration related, the 1756-RM2 module continually attempts to requalify the system while the error prevents it from being successful. This causes the redundancy module error log to fill with the same error condition. If the system is in this condition, the redundancy module display cycles between QFNG and DISQ. To stop this from happening, change the redundancy module synchronization trigger in the Redundancy Module Configuration Tool (RMCT) to Never, until the error condition is corrected.

The MinDurationACC alarm tag member value does not update, and it stays at a 0 value. This change does not affect the MinDuration calculations.

1756-EN2T, 1756-EN2TK, 1756-EN2TR, 1756-EN2TRK, 1756-EN2TRXT, 1756-EN2TXT, 1756-EN2F, 1756-EN2FK, 1756-EN2TP, 1756-EN2TPK, 1756-EN2TPXT:

The System Event History displays a `Module Failure’ entry when you insert a 1756-EN2x communication module in the chassis while the redundant chassis pair is synchronized. This is not indicative of any module failure; instead, it indicates that only a communication module was inserted in the chassis.

  

Features

This release includes the following system features.

SequenceManager Available

Controllers
System Feature First Identified as of Firmware Revision
CompactLogix™ 5370
28.011
Compact GuardLogix® 5370
28.011
ControlLogix® 5570
28.011
GuardLogix 5570
28.011
CompactLogix 5380 Process
35.011
ControlLogix 5580 Process
35.011


SequenceManager functionality is available with this release.

You can use SequenceManager to create an Equipment Sequence program to run a unit batch process in a Logix controller. Used in combination with PhaseManager, SequenceManager follows the ISA-88 methodology for automated batch control.

Combining full state model execution, View Site Edition (SE) ActiveX controls, and batch event logging, this product provides flexible and scalable controller base batching solutions to single unit and OEM applications.


  

Corrected Anomalies in This Release

This release corrects the following anomalies.

PortPhysicalAddressInfo GSV Does Not Populate After Controller Power Cycle (1451494, 1514584)

Controllers
First Known in Firmware Revision
Corrected in Firmware Revision
CompactLogix® 5380
28.011
34.015, 35.011 and later
Compact GuardLogix® 5380 SIL 2
31.011
34.015, 35.011 and later
Compact GuardLogix 5380 SIL 3
32.013
34.015, 35.011 and later
CompactLogix 5380 Process
33.011
34.015, 35.011 and later
CompactLogix 5480
32.011
34.015, 35.011 and later
ControlLogix® 5580
28.011
34.015, 35.011 and later
GuardLogix 5580
31.011
34.015, 35.011 and later
ControlLogix 5580 Process
33.011
34.015, 35.011 and later


When a Get System Value (GSV) instruction configured for Class Name: TimeSynchronize and Attribute Name: PortPhysicalAddressInfo executes after a controller power cycle, the physical address (MAC ID) does not populate.


PlantPAx® Embedded Instruction PAIM – Does not pass through all SrcQ values from Inp_SrcQ (1384787, 1672172, 1664909)

Controllers
First Known in Firmware Revision
Corrected in Firmware Revision
ControlLogix® 5580 Process
33.011
33.015, 34.014, 35.011 and later
CompactLogix™ 5380 Process
33.011
33.015,  34.014, 35.011 and later


The Process Multi Sensor Analog Input (PAIM) instruction is only able to pass values of 0, 1, 32, or 35 to the SrcQ Output Parameter from the Inp_SrcQ Input Parameter. All remaining supported values of the SrcQ Output Parameter are not passed through correctly.

For more information on supported values for the SrcQ Output Parameter, search for the PAIM instruction in the Studio 5000 Logix Designer ® online help.



Rejection of Messages Received by IO-Link Devices in a High Availability Application (1631817, 1767445)

Controllers
First Known in Firmware Revision
Corrected in Firmware Revision
ControlLogix® 5580
34.011
34.014, 35.011 and later
ControlLogix 5580 Process
34.011
34.014, 35.011 and later


In a high availability application, I/O devices that accept reconfiguration messages only from the owner device (the one which initiated communication to the target /IO device) reject any reconfiguration sent via message communication with a 16#0010 error code.



Controller Can MNRF When Executing CPS Instruction with Specific Data Types (1800992, 2129625, 2129629)

Controllers
First Known in Firmware Revision
Corrected in Firmware Revision
CompactLogix™ 5380
28.011
33.017, 34.014, 35.011 and later
Compact GuardLogix® 5380 SIL 2
31.011
33.017, 34.014, 35.011 and later
Compact GuardLogix 5380 SIL 3
32.013
33.017, 34.014, 35.011 and later
CompactLogix 5380 Process
33.011
33.017, 34.014, 35.011 and later
CompactLogix 5480
32.011
33.017, 34.014, 35.011 and later
ControlLogix® 5580
28.011
33.017, 34.014, 35.011 and later
GuardLogix 5580
31.011
33.017, 34.014, 35.011 and later
ControlLogix 5580 Process
33.011
33.017, 34.014, 35.011 and later


When executing a Synchronous Copy File (CPS) instruction with a motion diagnostics connection as the source or destination tag, the controller can experience a major nonrecoverable fault (MNRF).

To work around this anomaly, do not use motion diagnostics connections (such as AB:Motion_Diagnostics:S:1) as arguments to the CPS instruction. If a copy is still necessary, use a non-synchronous copy via the COP instruction.



Sent Bytes Per Second Displays a Larger Incorrect Value (1548181)

Controllers and Communication Modules
First Known in Firmware Revision
Corrected in Firmware Revision
CompactLogix™ 5380
28.011
35.011 and later
Compact GuardLogix® 5380 SIL 2
31.011
35.011 and later
Compact GuardLogix 5380 SIL 3
32.013
35.011 and later
CompactLogix 5380 Process
33.011
35.011 and later
CompactLogix 5480
32.011
35.011 and later
ControlLogix® 5580
28.011
35.011 and later
GuardLogix 5580
31.011
35.011 and later
ControlLogix 5580 Process
33.011
35.011 and later
1756-EN4TR, 1756-EN4TRK, 1756-EN4TRXT
2.01
5.001 and later


Under HMI/MSG Connected (EtherNet/IP Port) on the device Diagnostic webpages, Sent Bytes Per Second displays a much larger incorrect value, not the actual sent bytes per second.




PlantPAx® Embedded Instruction PVSD - Unlimited Jog Request Stops When Horn Time Expires (1662547, 1795646, 1795647)

Controllers
First Known in Firmware Revision
Corrected in Firmware Revision
ControlLogix® 5580 Process
33.011
33.017, 34.014, 35.011 and later
CompactLogix™ 5380 Process
33.011
33.017, 34.014, 35.011 and later


When the Process Variable Speed Drive (PVSD) instruction is configured to enable unlimited jog with a nonzero horn sound time, and the Jog button is pushed and held, then the jog command stops when the horn sound stops. The expected result is for the jog to continue after the horn sound stops.

To work around this anomaly, set the jog timer to a very large number instead of zero.




PlantPAx® Embedded Instruction PMTR - Unlimited Jog Request Stops When Horn Time Expires (1657427, 3397702)

Controllers
First Known in Firmware Revision
Corrected in Firmware Revision
ControlLogix® 5580 Process
33.011
33.017, 35.011 and later
CompactLogix™ 5380 Process
33.011
35.011 and later


When the Process Motor (PMTR) instruction is configured to enable unlimited jog with a nonzero horn sound time, and Jog button is pushed and held, then the jog command stops when the horn sound stops.

The expected result is for the jog to continue after the horn sound stops.

To work around this anomaly, set the jog timer to a very large number instead of zero.


PlantPAx® Embedded Instruction PAI - Deviation Alarm Settings Not Checked in Logic (1661684, 3637718)

Controllers
First Known in Firmware Revision
Corrected in Firmware Revision
ControlLogix® 5580 Process
33.011
33.017, 35.011 and later
CompactLogix™ 5380 Process
33.011
33.017, 35.011 and later


The Process Analog Input (PAI) instruction logic allows the instruction to process infeasible deviation alarm settings. High deviation limit (Cfg_HiDevLim) can be set negative and low deviation limit (Cfg_LoDevLim) can be set positive, which results in an incorrect calculation.

To work around this anomaly, follow the parameter description and take care writing proper values from the range specified.




PlantPAx® Embedded Instruction PAI - Infeasible Low Deviation Deadband Setting Allowed (1661686, 3559581)

Controllers
First Known in Firmware Revision
Corrected in Firmware Revision
ControlLogix® 5580 Process
33.011
33.017, 35.011 and later
CompactLogix™ 5380 Process
33.011
33.017, 35.011 and later


The Process Analog Input (PAI) instruction logic accepts a low deviation deadband (Cfg_LoDevDB) setting, violating the range of feasible values.

To work around this anomaly, set the low deviation deadband parameter to ≥ -Cfg_LoDevLim and ≤ 0.




PlantPAx® Embedded Instruction PAI - Infeasible High Deviation Deadband Setting Allowed (1661688, 3559637)

Controllers
First Known in Firmware Revision
Corrected in Firmware Revision
ControlLogix® 5580 Process
33.011
33.017, 35.011 and later
CompactLogix™ 5380 Process
33.011
33.017, 35.011 and later


The Process Analog Input (PAI) instruction logic accepts a high deviation deadband (Cfg_HiDevDB) setting, violating range of feasible values.

To work around this anomaly, set the high deviation deadband parameter to ≥ 0 and ≤ Cfg_HiDevLim.


  

Known Anomalies in This Release

This release has the following known anomalies.

Studio 5000 Logix Designer Trends Can Cause the Controller to MNRF (3062715, 3081542)

 

Controllers
First Known in Firmware Revision
Corrected in Firmware Revision
CompactLogix™ 5380
35.011
35.013, 36.011 and later
Compact GuardLogix® 5380 SIL 2
35.011
35.013, 36.011 and later
Compact GuardLogix 5380 SIL 3
35.011
35.013, 36.011 and later
CompactLogix 5380 Process
35.011
35.013, 36.011 and later
CompactLogix 5480
35.011
35.013, 36.011 and later
ControlLogix® 5580
35.011
35.013, 36.011 and later
GuardLogix 5580
35.011
35.013, 36.011 and later
ControlLogix 5580 Process
35.011
35.013, 36.011 and later


If the Studio 5000 Logix Designer® application shuts down unexpectedly while running trends, the controller can experience a major non-recoverable fault (MNRF).


Workaround: If the Logix Designer application is running trends and shuts down unexpectedly, open Microsoft Windows Task Manager, select the RATrendSrvU.exe task, and click End task.




A Project with Multiple FLEXHA 5000 I/O Modules can Fail to Download to the Controller (3196845, 1867140)

Controllers
First Known in Firmware Revision
Corrected in Firmware Revision
ControlLogix® 5580
35.011
35.013, 36.011 and later
GuardLogix 5580
35.011
35.013, 36.011 and later
ControlLogix 5580 Process
35.011
35.013, 36.011 and later

A Studio 5000 Logix Designer application that has a large number (greater than 200) of FLEXHA 5000™ Universal I/O modules (5015-U8IHFTXT) in the I/O tree can fail to download to the controller.



I/O Device Configured Within a 5032 IO-Link Module Stuck in Shutting Down State (2003359, 2117004)

Controllers
First Known in Firmware Revision
Corrected in Firmware Revision
CompactLogix™ 5380
35.011
35.013, 36.011 and later
Compact GuardLogix® 5380 SIL 2
35.011
35.013, 36.011 and later
Compact GuardLogix 5380 SIL 3
35.011
35.013, 36.011 and later
CompactLogix 5380 Process
35.011
35.013, 36.011 and later
CompactLogix 5480
35.011
35.013, 36.011 and later
ControlLogix® 5580
35.011
35.013, 36.011 and later
GuardLogix 5580
35.011
35.013, 36.011 and later
ControlLogix 5580 Process
35.011
35.013, 36.011 and later

If the configuration of an I/O device within a 5032 IO-Link module fails while performing greater than 20 simultaneous configurations, one or more I/O devices can get stuck in the Shutting Down state.

For more information, see Knowledgebase Technote IO-Link device shows Shutting Down.



Open Socket Functionality Not Behaving as Expected (1957130, 1957175)

Controllers and Communication Modules
First Known in Firmware Revision
Corrected in Firmware Revision
CompactLogix™ 5380
35.011
35.013, 36.011 and later
Compact GuardLogix® 5380 SIL 2
35.011
35.013, 36.011 and later
Compact GuardLogix 5380 SIL 3
35.011
35.013, 36.011 and later
CompactLogix 5380 Process
35.011
35.013, 36.011 and later
CompactLogix 5480
35.011
35.013, 36.011 and later
ControlLogix® 5580
35.011
35.013, 36.011 and later
GuardLogix 5580
35.011
35.013, 36.011 and later
ControlLogix 5580 Process
35.011
35.013, 36.011 and later
1756-EN4TR, 1756-EN4TRK, 1756-EN4TRXT
5.001


In a Socket Read Message, when reading an empty TCP Ethernet Buffer (buffer length of 0), the expectation is that a 12 byte header will be returned for the Socket Read Message’s .DN_LEN ([MessageTag].DN_LEN=12).

Instead, 0 bytes are returned by the message ([MessageTag].DN_LEN=0).

This anomaly affects the Rockwell Automation® Sample Code Add-On Instructions and Applications. For more information and a workaround for this anomaly, see the Knowledgebase Technote Socket functionality may not behave as expected in specific Logix controllers at version 35.011 and 1756-EN4TR version 5.001.


Known Anomalies from Previous Releases

These anomalies are from previous releases but are still known in this release.

Concurrent Updates of 1756-RM2 and Communication Modules Causes 1756-RM2 To MNRF/ASSERT (987259)

Devices
First Known in Firmware Revision
Corrected in Firmware Revision
1756-RM2/1756-RM2XT
20.030
ControlLogix® 5570 redundant controllers
34.051
ControlLogix 5580 controllers
33.011
ControlLogix 5580 Process controllers
33.011

If you update the 1756-RM2 module to revision 20.030 or later while concurrently updating 1756-ENx communication modules to revision 5.008 or 5.028, the 1756-RM2 firmware update fails. The 1756-RM2 displays "ERAS" and/or "E813 Comm Error".

To work around this issue, do not select the 1756-RM2 module along with 1756-ENx revision 5.0xx modules for concurrent updates.

If you do experience a 1756-RM2 firmware update failure:

  1. Power cycle the 1756-RM2 to clear the fault (E813).
  2. After other concurrent updates are completed, relaunch ControlFLASH Plus® and update the 1756-RM2 module.

See the Knowledgebase Technote Concurrent flashing of 1756-RM2 and Communication modules causes 1756-RM2 to fail.


  

Controller Can MNRF During Online Edit (2123008, 2306717, 3741373)

Controllers
First Known in Firmware Revision
Corrected in Firmware Revision
CompactLogix® 5380
33.011
34.015, 35.014, 36.011 and later
Compact GuardLogix® 5380 SIL 2
33.011
34.015, 35.014, 36.011 and later
Compact GuardLogix 5380 SIL 3
33.011
34.015, 35.014, 36.011 and later
CompactLogix 5380 Process
33.011
34.015, 35.014, 36.011 and later
CompactLogix 5480
33.011
34.015, 35.014, 36.011 and later
ControlLogix® 5580
33.011
34.015, 35.014, 36.011 and later
GuardLogix 5580
33.011
34.015, 35.014, 36.011 and later
ControlLogix 5580 Process
33.011
34.015, 35.014, 36.011 and later

The controller can experience a major nonrecoverable fault (MNRF) when at least two Tag-based Alarm instances have their activation condition changed to Rate of Change Positive/Negative within the same transaction while being online with controller.
  

Controller Can Become Unresponsive When You Inhibit or Uninhibit a Module (3080005)

Controllers
First Known in Firmware Revision
Corrected in Firmware Revision
CompactLogix™ 5380
33.011
36.011 and later
Compact GuardLogix® 5380 SIL 2
33.011
36.011 and later
Compact GuardLogix 5380 SIL 3
33.011
36.011 and later
CompactLogix 5380 Process
33.011
36.011 and later
CompactLogix 5480
33.011
36.011 and later
ControlLogix® 5580
33.011
36.011 and later
GuardLogix 5580
33.011
36.011 and later
ControlLogix 5580 Process
33.011
36.011 and later

If the controller program continually executes an SSV that inhibits or un-inhibits a module, and you simultaneously inhibit or uninhibit the module via the Module Properties dialog, the controller can become unresponsive.

Workaround: The program should only execute the SSV when the module must be inhibited or uninhibited.



Controller Can Experience a MNRF When You Inhibit and Uninhibit an Axis and Drive (2069903, 2162056, 2162057)

 

Controllers
First Known in Firmware Revision
Corrected in Firmware Revision
CompactLogix™ 5380
34.011
34.014, 35.013, 36.011 and later
Compact GuardLogix® 5380 SIL 2
34.011
34.014, 35.013, 36.011 and later
Compact GuardLogix 5380 SIL 3
34.011
34.014, 35.013, 36.011 and later
CompactLogix 5380 Process
34.011
34.014, 35.013, 36.011 and later
CompactLogix 5480
34.011
34.014, 35.013, 36.011 and later
ControlLogix® 5580
34.011
34.014, 35.013, 36.011 and later
GuardLogix 5580
34.011
34.014, 35.013, 36.011 and later
ControlLogix 5580 Process
34.011
34.014, 35.013, 36.011 and later


Inhibiting the Axis and then the associated Drive with SSV instructions (in that order) can cause the controller to experience a major non-recoverable fault (MNRF).

Workaround: Inhibit the Drive, then inhibit the Axis (in that order). The order of uninhibiting the axis and drive does not matter.


PAO - PlantPAx® Embedded Instruction
Products: ControlLogix® 5580 Process Controllers, CompactLogix™ 5380 Process Controller
Anomaly
First Known in Firmware Revision
Corrected in Firmware Revision
When limit switches are used for feedback instead of an analog position feedback, the indication on the dialog box and HMI was not accurate to the position of the valve.
(2185730, 2296172, 2296183, 2296204)
33.011
33.017, 34.014, 35.013, 36.011 and later
The deviation alarm (Sts_Dev) incorrectly alarms when the instruction was “Out of Service” (Sts_OoS).
(2185779, 2297867, 2297871, 3064567)
33.011
33.017, 34.014, 35.013, 36.011 and later
Cfg_CVIntlk incorrectly limits the value between Cfg_CVEUMin and Cfg_CVEUMax.
(2185788, 2297912, 2297916, 2297921)
33.011
33.017, 34.014, 35.013, 36.011 and later



Online Configuration of I/O Devices can Cause a MNRF/Assert (3231324, 3385069, 3355887, 3355890)

Controllers
First Known in Firmware Revision
Corrected in Firmware Revision
CompactLogix® 5380
34.011
34.015, 35.014, 37.011 and later
Compact GuardLogix® 5380 SIL 2
34.011
34.015, 35.014, 37.011 and later
Compact GuardLogix 5380 SIL 3
34.011
34.015, 35.014, 37.011 and later
CompactLogix 5380 Process
34.011
34.015, 35.014, 37.011 and later
CompactLogix 5480
34.011
34.015, 35.014, 37.011 and later
ControlLogix® 5580
34.011
34.015, 35.014, 37.011 and later
GuardLogix 5580
34.011
34.015, 35.014, 37.011 and later
ControlLogix 5580 Process
34.011
34.015, 35.014, 37.011 and later
1756-L8x Enhanced Redundancy Firmware Bundle
33.011
33.017, 34.015, 35.014, 37.011 and later


When an I/O device is owned by the controller, if you make an online change with either the module properties dialog or a MSG instruction with a “Module Reconfigure” message type, the controller can MNRF/assert.

There is a higher probability for this anomaly to occur when there are many unconnected I/O devices in the I/O tree.

We recommend that you inhibit devices in the I/O tree that are not powered or do not exist on the network. If possible, inhibit the device while offline with the controller and then download the application to the controller.

This anomaly does not impact all I/O devices:

• Common I/O devices include: 1718 Ex I/O, 1719 Ex I/O, ArmorBlock® I/O, Compact 5000® I/O, FLEX 5000® I/O, Armor™ PowerFlex® Drives, E300™ Electronic Overload Relays, Dynamix™ 1444 Series modules.

• For all impacted I/O devices, see Knowledgebase Technote Determining the I/O devices for release note reference number 3231324

Workaround:

Inhibit the I/O connection to the device while online before you start any reconfiguration. Once you complete the reconfiguration, then uninhibit the I/O connection.


Connected Uncached Messages Fail (00173896)

Known Anomaly First Identified in:

Connected UnCached messages that are sent to the controller can fail. This anomaly typically occurs if the Connected UnCached messages are sent when the controller is handling many messages and has temporarily run out of buffer resources.

To work around the anomaly, try the following:





A String Length of a Large Number or Negative Value Can Cause a Controller MNRF (3091640, 3362995)
  
Controllers
First Known in Firmware Revision
Corrected in Firmware Revision
CompactLogix™ 5380
30.011
36.011
Compact GuardLogix® 5380 SIL 2
31.011
36.011
Compact GuardLogix 5380 SIL 3
32.013
36.011
CompactLogix 5380 Process
33.011
36.011
CompactLogix 5480
32.012
36.011
ControlLogix® 5580
30.011
36.011
GuardLogix 5580
31.011
36.011
ControlLogix 5580 Process
33.011
36.011

A string length (.LEN) of a number greater than 65535, or negative value, used in application code can cause the controller to experience a Major Non-Recoverable Fault (MNRF)/assert.


Controller Can Assert When Motion Instruction Accel And/Or Decel Operands Are Out of Range (3341103, 3453883, 3453882, 3453889)
  
Controllers
First Known in Firmware Revision
Corrected in Firmware Revision
CompactLogix® 5370
20.011
37.011 and later
Compact GuardLogix® 5370
28.011
37.011 and later
ControlLogix® 5570
20.011
37.011 and later
GuardLogix 5570
20.011
37.011 and later
CompactLogix 5380
29.011
34.015, 35.014, 37.011 and later
Compact GuardLogix 5380 SIL 2
31.011
34.015, 35.014, 37.011 and later
Compact GuardLogix 5380 SIL 3
32.013
34.015, 35.014, 37.011 and later
CompactLogix 5380 Process
33.011
34.015, 35.014, 37.011 and later
CompactLogix 5480
32.011
34.015, 35.014, 37.011 and later
ControlLogix 5580
28.011
34.015, 35.014, 37.011 and later
GuardLogix 5580
31.011
34.015, 35.014, 37.011 and later
ControlLogix 5580 Process
33.011
34.015, 35.014, 37.011 and later

When MAM, MAJ, MCD, MAG, and MAS instruction Accel and/or Decel operands are near zero, a controller assert can occur.

For more information, see Knowledgebase Article Studio 5000 Motion Instruction Error Code 13 Accel and Decel out-of-range limits.





A Controller Can Assert if the Start and Destination Cartesian Coordinate Positions Are the Same When a MCLM Instruction Executes (3663402)
  
Controllers
First Known in Firmware Revision
Corrected in Firmware Revision
CompactLogix® 5370
31.011
37.011 and later
CompactLogix 5380
28.011
37.011 and later
Compact GuardLogix® 5380 SIL 2
31.011
37.011 and later
Compact GuardLogix 5380 SIL 3
32.013
37.011 and later
CompactLogix 5380 Process
33.011
37.011 and later
CompactLogix 5480
32.012
37.011 and later
ControlLogix® 5580
28.011
37.011 and later
GuardLogix 5580
31.011
37.011 and later
ControlLogix 5580 Process
33.011
37.011 and later

A controller assert can occur when the cartesian coordinate position before the start of a Motion Coordinated Linear Move (MCLM) instruction is the same as the destination cartesian coordinate position in MCLM instruction:

And
• The moving direction of the leader DOES NOT match the MCLM lock direction.
• The leader is moving negatively and MCLM is set to immediate forward.

Or
• The leader is moving positively and MCLM is set to immediate reverse.


Online Editing with Automatic Diagnostics Enabled Can Result in a Controller Assert (3865183)
  
Controllers
First Known in Firmware Revision
Corrected in Firmware Revision
CompactLogix® 5380
33.011
Compact GuardLogix® 5380 SIL 2
33.011
Compact GuardLogix 5380 SIL 3
33.011
CompactLogix 5380 Process
33.011
CompactLogix 5480
33.011
ControlLogix® 5580
33.011
GuardLogix 5580
33.011
ControlLogix 5580 Process
33.011

A controller assert can occur when the following conditions exist:
• Automatic Diagnostics is enabled (the default setting).
• Communication % utilization that is greater than or equal to 90% is reported on the controller Tasks webpage.
And
• Modules are added or deleted while online.
• The Application is downloaded to a controller.
To avoid controller asserts, make sure the Communication % utilization is less than 90%, or temporarily or permanently disable Automatic Diagnostics on the Controller Properties Advanced tab.

graphic



MSF Instruction Clears the .DriveEnableStatus Bit after the .DN is Set (00175088)

Known Anomaly First Identified in:

The Motion Servo Off (MSF) instruction can report a .DN (Done) status before the drive clears the .DriveEnableStatus bit.


Value That Is Outside the Supported WallClockTime Range (00182341, 00182342, 00190288, Lgx00169520)

Corrected Anomaly in:

Known Anomaly First Identified in:

  
  
  
  


When reading or viewing the WCT (WallClockTime) of the controller, the year can show a value of 586XXX (where the XXX is any values). This means that the wallclock value is outside the valid range for EPoch time.

The range of the WCT has been tightened in the controller to 1/1/1970 00:00:00.000...12/31/2069 23:59:59.999. If the controller tries to handle a value outside the defined range, the controller does not apply the new value. It now logs a minor fault, Type 13 Code 21. The fault displays an unknown fault in the RSLogix 5000® software.

graphic

When the fault is logged, the WCT of the controller is set to 1/1/19XX 00:00:00.000, where XX is 81...86. The year corresponds to the Info[0] value for the minor fault.



  
Unable to establish connection to 32 client instances of the TCP/IP SocketObject (00180261)
Known Anomaly First Identified in:
You cannot connect to 32 instances of the TCP/IP socket object. The maximum number of connections is 31.

Velocity Disturbances on Consumed Axes While Running Constant Speed (00217531)

Known Anomaly First Identified in:

Minor fluctuations of the system time offset both on the producer controller and consumer controller side can cause minor velocity spikes, typically less than 1 % on the consumed axes in the remote controller.

This behavior is aesthetic and does not impact functionality.


SCARA 4D Coupled: Moving J6 Axis on Target Side Causes Motion on J6 and J3 Axes (00229999)


Known Anomaly First Identified as of Firmware Revision 32.012

Catalog Numbers:


In some SCARA 4D coupled robots, there is a mechanical coupling between Joint 3 and Joint 6 axes, due to a ball screw mechanism. The Z and Rz axes are decoupled in firmware, so that you will not notice Z movement due to rotation on Rz when you make a move on the source coordinate system.

If you try to make a move on J6 in the target coordinate system, you will notice movement in J3 due to rotation of J6. You must decouple the J3 and J6 axes in your application code to cancel movement on J3 when J6 is moved.


Removing Security Policy Can Result in Lost Access to The Controller (00233531)

Known Anomaly First Identified as of Firmware Revision 33.011

Catalog Numbers: ControlLogix® 5580 Controllers, ControlLogix 5580 Process Controllers

If you remove a security policy from the controller in FactoryTalk® Policy Manager, version 1.0.0 and then try to download a project with Studio 5000 Logix Designer® application, the download fails.

You also cannot change the controller's IP address with FactoryTalk Linx or RSLinx® software.

To resolve the anomaly, reset the controller to the factory default state.

MCTPO Conflict Causes Incorrect Instruction Outputs (1806725)

Controllers
First Known in Firmware Revision
Corrected in Firmware Revision
CompactLogix™ 5380
31.011
Compact GuardLogix® 5380 SIL 2
31.011
Compact GuardLogix 5380 SIL 3
32.013
CompactLogix 5380 Process
33.011
CompactLogix 5480
32.011
ControlLogix® 5580
31.011
GuardLogix 5580
31.011
ControlLogix 5580 Process
33.011


When you use a Motion Calculate Transform Position with Orientation (MCTPO) instruction in multiple tasks simultaneously, the MCTPO reports an incorrect transform position.

To work around this anomaly, place a User Interrupt Disable (UID) instruction before each MCTPO instruction in each task, then place a User Interrupt Enable (UIE) instruction after each MCTPO operation in each task. If all the MCTPO instructions are used in only one task, no change needs to be made.




SD Status Indicator Flashes When I/O Connection Errors Exist (1917586, 1917602, 1917603)

Controllers
First Known in Firmware Revision
Corrected in Firmware Revision
CompactLogix™ 5380
34.011
34.014, 35.013, 36.011 and later
Compact GuardLogix® 5380 SIL 2
34.011
34.014, 35.013, 36.011 and later
Compact GuardLogix 5380 SIL 3
34.011
34.014, 35.013, 36.011 and later
CompactLogix 5380 Process
34.011
34.014, 35.013, 36.011 and later
CompactLogix 5480
34.011
34.014, 35.013, 36.011 and later
ControlLogix® 5580
34.011
34.014, 35.013, 36.011 and later
GuardLogix 5580
34.011
34.014, 35.013, 36.011 and later
ControlLogix 5580 Process
34.011
34.014, 35.013, 36.011 and later


The SD status indicator flashes and decreases SD card performance when I/O connection errors exist. The impact on SD card performance is directly related to the number of I/O connection errors present at that time.



Disqualification of Redundant Chassis Pair Due to Concurrent Connection Timeout (1895856)

Communication Modules
First Known in Firmware Revision
Corrected in Firmware Revision
1756-EN4TR, 1756-EN4TRK,
1756-EN4TRXT
5.001
5.003

In a ControlLogix® 5580 Redundancy system, if 1756-EN4TR modules in the redundant chassis pair (RCP) are configured for Concurrent Communication, then the RCP can experience a disqualification due to a concurrent connection timeout.
  
Rockwell Automation recognizes that some of the terms that are currently used in our industry and in this publication are not in alignment with the movement toward inclusive language in technology. We are proactively collaborating with industry peers to find alternatives to such terms and making changes to our products and content. Please excuse the use of such terms in our content while we implement these changes.

Copyright © 2025 Rockwell Automation, Inc. All rights reserved.
Rockwell Automation, Allen-Bradley, and FactoryTalk are trademarks of Rockwell Automation, Inc.
To view a complete list of Rockwell Automation trademarks please click here.
Trademarks not belonging to Rockwell Automation are property of their respective companies.