Abstract: A controller continues to operate an ice making machine in a safe mode when a failure of a component is detected. While in the safe mode due to failure of an ice thickness probe, the freeze cycle freeze time is based on an average freeze time of a predetermined number of the most previous freeze cycles prior to the failure. While in the safe mode due to failure of a water level probe, the water valve on time is based on an average water valve on time of a predetermined number of the most previous freeze cycles prior to the failure. If the failure is uncured after a predetermined time, the controller causes the ice making machine to enter a standby mode or disables the ice making machine from making ice.