ifm · Functional Safety

Safety over IO-Link & Safe I/O

Use IFM Safety over IO-Link to connect compatible safety sensors and actuators through a safe field I/O module while tunnelling PROFIsafe communication through the standard IO-Link infrastructure. This is a safety-system architecture—not a replacement for risk assessment or safety-function validation.

PROFIsafe8 safe OSSD inputs4 safe outputsUp to SIL 3 / PL e
ifm safety sensor used within a Safety over IO-Link architecture
System architecture

Safe field I/O without a separate safety fieldbus cable

The AL200S PROFIsafe IO-Link module is connected through a normal IO-Link master. PROFIsafe telegrams are tunnelled through the standard IO-Link communication to the safety controller.

Safety devicesOSSD sensors / safe contacts
Safe field moduleAL200S
Standard field layerIO-Link master
Safe protocolPROFIsafe to safety PLC
Important: The stated component capability does not by itself make the complete machine PL e or SIL 3. The full safety function—including sensors, logic, outputs, wiring, diagnostics and validation—must achieve the required performance.
AL200S capabilities

A compact safe I/O point in the field

Current IFM information positions AL200S as the core Safety over IO-Link module.

Safe inputs8Digital OSSD inputs
Safe outputs4Powerful outputs
ProtocolPROFIsafeTunnelled via IO-Link
CapabilitySIL 3 / PL eComponent/system capability per IFM data

Standard IO-Link wiring

The safe module connects on the hardware side through normal IO-Link infrastructure, reducing separate field wiring.

Separate actuator power

A separate 24 V supply via L-coded M12 allows connection of higher-power safe actuators.

Configurable output logic

IFM documents the outputs as configurable for PNP or NPN switching.

Machine-safety applications

Field-mounted safe I/O and wiring simplification

The architecture is especially relevant when safety devices are distributed around the machine.

Safety light curtains

Bring OSSD outputs from compatible light curtains into the safe field module near the machine.

Review light curtains →

Guard switches

Integrate compatible coded/magnetic safety-device outputs within the verified safe architecture.

Review safety switches →

E-STOP / safe contacts

Use the safe input architecture for suitable safety contacts according to the detailed module/system design.

Safe actuators

Use the safe outputs for appropriately engineered actuator circuits with the required external power and validation.

When it fits

Safety over IO-Link for distributed wiring

It is not automatically the best answer for every small machine. A conventional safety relay or direct safety-controller I/O may be simpler where only one or two local safety functions exist.

Good fitMultiple distributed OSSD devices and actuators around a machine.
Good fitExisting IO-Link field architecture where PROFIsafe is available at the safety controller.
Review carefullySmall standalone machines where additional field architecture adds complexity.
MandatoryConfirm safety PLC, PROFIsafe configuration, device compatibility and full safety-function validation.
Requirement capture

Safety over IO-Link requirements

This page should never be used to select safety hardware from part number alone.

Safety functionsE-STOP, guards, light curtains, actuators and reset/restart behaviour.
Target PL / SILRequired risk-reduction level from the machine safety assessment.
Safety controllerPLC/controller and PROFIsafe capability.
IO-Link masterInstalled/current master architecture and port allocation.
Device countNumber, type and location of OSSD/contact devices and outputs.
Power architectureSafe-output load, 24 V distribution and cable lengths.