System configuration management using encapsulation and discovery is provided. The configuration management may include requesting, by a first electronic control unit comprising a processor, feature information associated with a second electronic control unit. The feature information may include data related to a set of features implemented by the second electronic control unit. The configuration management may also include loading, by the first electronic control unit, an internal control for a first feature of the set of features based on a determination that the first feature is not loaded on the first electronic control unit.

System configuration management using encapsulation and discovery is provided. The configuration management may include requesting, by a first electronic control unit comprising a processor, feature information associated with a second electronic control unit. The feature information may include data related to a set of features implemented by the second electronic control unit. The configuration management may also include loading, by the first electronic control unit, an internal control for a first feature of the set of features based on a determination that the first feature is not loaded on the first electronic control unit.

Described is a method for verifying the functional integrity of a safety controller that provides safety functions for one or more machines and has a central evaluation and control unit for operating the safety controller. The method comprises: powering on the safety controller; verifying a stored machine-readable instruction as to whether a commissioning test is to be executed; if verified, displaying information indicating that the commissioning test is to be executed; initiating a verification routine executable by the safety controller, the evaluation and control unit automatically verifying via the verification routine whether a user has successfully verified each of the safety functions; if all of the safety functions are successfully verified, deleting the machine-readable instruction that the commissioning test is to be executed; and if not all of the safety functions are successfully verified, storing the machine-readable instruction, indicating that the commissioning test is to be executed anew.