Controls, data and cyber security

PLC and HMI Obsolescence: Controls Retrofit Guide

Assess packaging-machine control obsolescence using backups, source code, hardware availability, interfaces, safety boundaries, validation and downtime risk.

Updated 1 September 2026Evidence-led production guidance7–10 minute read

Direct answer

Start with an asset and software inventory. Confirm PLC, HMI, drives, remote I/O, safety hardware, networks, licences, source files and backups. Then compare targeted replacement, platform migration and complete machine replacement using supportability and production risk.

Why this matters

A failed obsolete component can turn a repair into a redesign. Controls retrofits also change interfaces, recipes and fault behaviour, so they need testing beyond simply making the machine run.

Decision table

AreaRecordDecision effect
HardwareModel, firmware and spare statusFailure exposure
SoftwareSource, password, licence and backupRecoverability
InterfacesSensors, drives, printers and line handshakesMigration scope
SafetySeparate safety functions and validationCompliance scope
ProductionFormats, recipes, output and downtime windowAcceptance plan

Information to collect

  • Inventory all control components.
  • Verify usable backups by restoring offline where possible.
  • Identify unsupported operating systems and licences.
  • Map safety and standard-control boundaries.
  • Record line and data interfaces.
  • Estimate downtime and fallback plan.

Practical method

  1. 1

    Prioritise components by failure consequence and availability.

  2. 2

    Secure source files and machine images.

  3. 3

    Prototype interfaces and recipes.

  4. 4

    Run a defined factory or offline test.

  5. 5

    Validate the machine and line after installation.

Common mistakes to avoid

  • Replacing only the HMI while leaving an unsupported PLC.
  • Assuming old source code matches the running machine.
  • Changing safety functions without appropriate validation.
  • Losing recipes and calibration data.
  • Scheduling migration without production fallback.

Questions people also ask

When is a controls retrofit worthwhile?

When the mechanical machine remains suitable but controls support, reliability or integration creates material lifecycle risk.

What should be backed up?

PLC, HMI, drives, robots, vision, recipes, parameters, licences, network settings and documentation.

Can old and new controls run together?

Sometimes during staged migration, but interfaces and failure modes must be engineered and tested.

Does a retrofit affect compliance?

It can. Assess whether the change affects safety functions, intended use, documentation or conformity obligations.

Relevant machinery routes

Continue from the requirement to the equipment

Use the specialist route that matches the product, pack and process. Final suitability requires representative samples, output targets and site information.

Ask a production question