Valve Actuator Fail-Safe Action and Spring Return Design

The fail-safe action of a valve actuator determines what position the valve moves to when motive power is lost—whether the process fluid supply fails, electrical power is interrupted, or a control signal is lost. Fail-safe action is a fundamental safety requirement for valves in safety instrumented systems and process safety applications. Specifying the correct fail-safe position (fail-open, fail-closed, or fail-last) requires analysis of the process hazard and the consequences of valve movement under all failure scenarios.

Fail-Closed vs. Fail-Open Philosophy

Fail-closed (FC) valves spring-return to the closed position when instrument air or electrical power is lost. Fail-closed is appropriate when the default safe condition is to stop flow—for example, a fuel isolation valve that should close on loss of control to prevent uncontrolled fuel flow. Fail-open (FO) valves spring-return to the fully open position on power loss. Fail-open is appropriate when the safe condition is to maintain flow—for example, a cooling water valve that should remain open to prevent equipment overheating if control is lost. The fail-safe designation must be verified by process hazard analysis (PHA) to confirm that the designated failure position is indeed safer than the alternative for all credible failure scenarios.

• Fail-closed (FC): spring returns valve to closed, stops flow on power loss

• Fail-open (FO): spring returns valve to full open, maintains flow on power loss

• Fail-last (FL): valve stays in last position (requires double-acting actuator with lockout)

• PHA required: always verify fail-safe direction by process hazard analysis

• Solenoid valve de-energize-to-trip: safety-critical systems use de-energized = safe state

Spring Return Actuator Design

Spring-return pneumatic actuators use a compressed spring to provide the fail-safe force that drives the valve to its safe position when instrument air is removed. The spring must provide sufficient force to overcome all opposing forces: differential pressure unbalance on the plug, packing friction, seat friction, and actuator seal friction. The spring force is balanced against the actuator air pressure to determine the bench set range—the air pressure range over which the valve travels from fully open to fully closed (or vice versa). For safety applications, the spring must be capable of closing (or opening) the valve against maximum differential pressure with no air supply and with packing friction at its maximum value.

Double-Acting Actuators with Fail-Safe Mechanisms

Double-acting actuators use air pressure on both sides of the piston or diaphragm to drive the valve in both directions, providing higher thrust or torque than spring-return designs for the same actuator size. Fail-safe action for double-acting actuators is achieved using a volume tank (accumulator) that stores compressed air to drive the valve to the safe position on air supply failure, or a hydraulic or electrohydraulic lock system for fail-last applications. Volume tanks must be sized to store sufficient energy to stroke the valve to the safe position under worst-case conditions (maximum differential pressure) from any intermediate position. Fail-safe double-acting actuators are used where the required actuator force exceeds the capability of available spring-return actuator sizes.