— A Practical Guide for Engineers, EPCs, and Project Teams
Every control valve must have a defined behaviour when its motive power fails—whether that is instrument air, electrical power, or a control signal. The fail-safe position is not an accessory or an afterthought. It is a fundamental design decision that determines what the plant does when something goes wrong: whether a valve opens to relieve pressure, closes to isolate a hazard, or holds its last position to preserve process stability.
Getting this decision wrong is not just an engineering inconvenience. It can mean the difference between a controlled shutdown and a catastrophic release. A feedwater valve that fails closed on a boiler can lead to a low-water trip; an ESD valve that fails open can continue feeding fuel to a fire.
This guide explains the three fail-safe valve positions—fail open (FO), fail closed (FC), and fail in place (FL)—how they are achieved mechanically, how to select the right one for each application, and how to verify it during FAT, SAT, and commissioning.
1. What Is a Fail-Safe Valve Position?
A fail-safe valve position is the defined valve position the valve moves to (or stays in) when its motive power or control signal is lost.
What constitutes a "failure"?
| Failure Type | Description |
|---|---|
| Loss of instrument air | Compressed air supply drops below the minimum required to operate the actuator |
| Loss of electrical power | Power to the actuator, solenoid valve, or positioner is interrupted |
| Loss of control signal | The 4–20 mA signal drops below 3.6 mA (or above 21 mA), or the communication fails |
| Actuator failure | Diaphragm rupture, piston seal failure, spring failure |
| Solenoid de-energisation | The solenoid valve reverts to its de-energised state |
| Positioner failure | The positioner loses its air supply or internal pilot function |
Key principle: The fail-safe position is determined by the combination of actuator configuration (spring return or double-acting), valve action (air-to-open or air-to-close), and solenoid valve configuration. All three must be aligned.
2. Fail Closed (FC)
Definition: On loss of motive power or signal, the valve moves to the fully closed position.
2.1 How It Is Achieved
| Configuration | Mechanism |
|---|---|
| Spring-return actuator + air-to-open | Air pressure opens the valve; the spring closes it on air failure |
| Double-acting + spring-return | Spring returns the valve to closed position |
| Electric actuator + battery backup | Battery drives the motor to the closed position |
| Electric actuator + spring return | Spring closes the valve on power failure |
2.2 When to Use Fail Closed
| Application | Why FC Is Required |
|---|---|
| Fuel gas to a burner | Stops fuel supply on failure; prevents explosive atmosphere |
| Feed to a reactor | Stops uncontrolled reaction; prevents runaway |
| Steam to a process | Prevents overheating and pressure buildup |
| Chemical dosing | Stops chemical injection; prevents over-treatment or contamination |
| Product discharge to a flare | Prevents uncontrolled flaring |
| Instrument air supply | Prevents loss of air to downstream users |
| ESD isolation valves | Isolates the hazard source |
Selection rule of thumb: If the process condition on loss of control would lead to overpressure, overtemperature, overfilling, runaway reaction, or environmental release, the valve should fail closed.
2.3 Common FC Configurations
text
Air Failure ──► Spring closes valve Signal Failure ──► Solenoid de-energises ──► Air exhausts ──► Spring closes valve Power Failure ──► Solenoid de-energises ──► Air exhausts ──► Spring closes valve
3. Fail Open (FO)
Definition: On loss of motive power or signal, the valve moves to the fully open position.
3.1 How It Is Achieved
| Configuration | Mechanism |
|---|---|
| Spring-return actuator + air-to-close | Air pressure closes the valve; the spring opens it on air failure |
| Double-acting + spring-return | Spring returns the valve to open position |
| Electric actuator + battery backup | Battery drives the motor to the open position |
| Electric actuator + spring return | Spring opens the valve on power failure |
3.2 When to Use Fail Open
| Application | Why FO Is Required |
|---|---|
| Cooling water to a heat exchanger | Maintains cooling on failure; prevents overheating and runaway |
| Relief or vent lines | Opens to relieve pressure; prevents overpressure |
| Fire water supply valves | Opens to supply fire water during a fire |
| Quench or emergency cooling | Opens to dilute or cool a hazardous condition |
| Flare header valves | Opens to relieve to the flare system |
| Boiler feedwater | Opens to maintain drum level (in some designs) |
| Anti-surge recycle valves | Opens to protect the compressor from surge |
Selection rule of thumb: If the process condition on loss of control would lead to loss of cooling, loss of ventilation, loss of pressure relief, or compressor surge, the valve should fail open.
3.3 Common FO Configurations
text
Air Failure ──► Spring opens valve Signal Failure ──► Solenoid de-energises ──► Air exhausts ──► Spring opens valve Power Failure ──► Solenoid de-energises ──► Air exhausts ──► Spring opens valve
Special note: For FO service, the solenoid valve must be configured so that de-energisation causes the valve to open. This is typically achieved with a normally closed (NC) solenoid in an air-to-close actuator, or a normally open (NO) solenoid in an air-to-open actuator—depending on the fail-safe logic.
4. Fail in Place / Fail Last (FL)
Definition: On loss of motive power or signal, the valve stays in its last position. It neither opens nor closes.
4.1 How It Is Achieved
| Configuration | Mechanism |
|---|---|
| Double-acting pneumatic actuator without spring | Air is trapped in both actuator chambers; valve holds position |
| Double-acting actuator + lock-up valve | Lock-up valve traps air on signal or supply failure |
| Electric actuator without backup | Motor stops; gearbox holds position |
| Electric actuator + fail-last logic | Controller holds last position on power failure |
4.2 When to Use Fail in Place
| Application | Why FL Is Required |
|---|---|
| Non-critical flow control | No safety consequence; process can be adjusted manually |
| Mixing and blending valves | Holding position preserves product quality |
| Level control (averaging) | Sudden closing or opening could cause upstream/downstream upset |
| Utility control valves | No safety consequence; avoids unnecessary process disturbance |
| Valves with very large actuators | Spring-return would be prohibitively large and expensive |
| Valves where FO and FC both create hazards | Holding position is the safest option |
Selection rule of thumb: Use fail-in-place only when neither opening nor closing creates a safety risk—and when the process can tolerate the valve remaining at its last position until operator intervention.
4.3 Common FL Configurations
text
Air Failure ──► Lock-up valve traps air ──► Valve holds position Signal Failure ──► Lock-up valve traps air ──► Valve holds position Power Failure ──► Motor stops, brake engages ──► Valve holds position
Critical warning: Fail-in-place is not a safety function. It must never be used for ESD, SIS, or any loop where opening or closing is required to protect the process.
5. Head-to-Head Comparison
| Feature | Fail Closed (FC) | Fail Open (FO) | Fail in Place (FL) |
|---|---|---|---|
| Position on failure | Fully closed | Fully open | Last position |
| Typical actuator | Spring-return air-to-open | Spring-return air-to-close | Double-acting without spring, or electric |
| Solenoid valve | De-energise to close | De-energise to open | Lock-up valve |
| Safety role | Isolate hazard | Relieve hazard / maintain cooling | No safety role |
| Common applications | Fuel gas, feed, ESD isolation | Cooling water, relief, fire water | Mixing, blending, non-critical control |
| Ease of implementation | Simple (standard spring) | Simple (standard spring) | Requires lock-up valve or electric actuator |
| Cost | Low to moderate | Low to moderate | Moderate to high (large actuators) |
| Failure mode risk | Can cause low-level or no-flow trips | Can cause overfill or overpressure | Can leave process in unsafe state |
6. How Fail-Safe Position Is Determined
6.1 The Decision Process
The fail-safe position must be determined through a systematic safety assessment, not by preference.
| Step | Activity |
|---|---|
| 1 | Identify the valve's function and its role in the process |
| 2 | Determine the consequence of the valve failing open (overpressure, overfill, release) |
| 3 | Determine the consequence of the valve failing closed (loss of cooling, no-flow, no relief) |
| 4 | Determine the consequence of the valve holding position (process stays in unsafe state) |
| 5 | Select the position that results in the lowest overall risk |
| 6 | Verify the decision in HAZOP and LOPA studies |
| 7 | Document the decision in the cause-and-effect matrix and loop diagram |
6.2 The Cause-and-Effect Matrix
The fail-safe position must be clearly documented in the cause-and-effect (C&E) matrix, which defines:
The initiating cause
The valve action (open, close, hold)
The final element affected
The expected response time
Example:
| Cause | Action | Final Element | Position |
|---|---|---|---|
| High pressure in separator | Close | PV-101 (inlet) | FC |
| High pressure in separator | Open | PV-102 (relief) | FO |
| Loss of instrument air | Hold | FV-201 (mixing) | FL |
| ESD activation | Close | SDV-301 (fuel gas) | FC |
6.3 Interaction with Actuator and Solenoid Selection
The fail-safe position is determined by the combination of:
text
Fail-Safe Position = Valve Action (ATO/ATC) + Actuator Type (Spring/Double-Acting) + Solenoid Configuration (Energise-to-Open/Energise-to-Close)
Important: The same physical valve can be configured for FC or FO by changing the actuator configuration and solenoid logic. Always verify the final configuration against the cause-and-effect matrix.
6.4 Air-to-Open vs Air-to-Close
| Valve Action | Air Supply | Spring Action | Fail Position |
|---|---|---|---|
| Air-to-open (ATO) | Opens the valve | Closes on air failure | Fail Closed |
| Air-to-close (ATC) | Closes the valve | Opens on air failure | Fail Open |
Note: The fail position is determined by the spring action, not the air action. The air action is the normal operating state; the spring action is the failure state.
7. Practical Examples
Example 1: Fuel Gas Control Valve to a Fired Heater
Function: Controls fuel gas flow to the burner
Failure consequence: If it fails open, fuel continues to the burner with no combustion control → explosive atmosphere in the furnace
Selected position: Fail Closed (FC)
Configuration: Spring-return actuator, air-to-open, de-energise-to-close solenoid
Example 2: Cooling Water Control Valve to a Reactor
Function: Controls cooling water flow to remove reaction heat
Failure consequence: If it fails closed, cooling is lost → reaction runaway → overpressure
Selected position: Fail Open (FO)
Configuration: Spring-return actuator, air-to-close, de-energise-to-open solenoid
Example 3: Mixing Valve in a Blending Line
Function: Controls the ratio of two streams for product blending
Failure consequence: If it opens, product goes off-spec; if it closes, product goes off-spec. Neither is immediately hazardous.
Selected position: Fail in Place (FL)
Configuration: Double-acting actuator, lock-up valve on air failure
Example 4: ESD Isolation Valve on a Hydrocarbon Pipeline
Function: Isolates the pipeline on emergency shutdown
Failure consequence: If it fails open, the hazardous release continues
Selected position: Fail Closed (FC)
Configuration: Spring-return actuator, air-to-open, solenoid de-energised by ESD signal
Example 5: Relief Header Valve to the Flare System
Function: Opens to route relief gas to the flare
Failure consequence: If it fails closed, pressure cannot be relieved → overpressure
Selected position: Fail Open (FO)
Configuration: Spring-return actuator, air-to-close, solenoid de-energised on high-pressure
8. Verifying Fail-Safe Position During FAT, SAT and Commissioning
Fail-safe position must be physically verified—not just assumed from the datasheet.
8.1 FAT Verification
| Check | Method |
|---|---|
| Actuator type | Verify spring-return or double-acting matches the specification |
| Valve action | Verify ATO or ATC matches the specification |
| Solenoid configuration | Verify NC or NO logic matches the specification |
| Fail direction | Apply air, then remove air; observe valve action |
| Nameplate marking | Verify fail position is stamped on the nameplate |
8.2 SAT Verification
| Check | Method |
|---|---|
| Physical installation | Verify actuator and solenoid installed correctly |
| Air supply | Verify air supply pressure |
| Signal wiring | Verify polarity and loop continuity |
| Fail-safe action | Remove air supply; observe valve position |
| Signal fail-safe action | Remove control signal; observe valve position |
| Power fail-safe action | Remove electrical power; observe valve position |
8.3 Commissioning Verification
| Check | Method |
|---|---|
| Cause-and-effect matrix | Verify the valve action matches the C&E matrix |
| ESD response | Verify valve response time and position |
| Documentation | Verify the loop diagram shows the correct fail position |
| Operator training | Verify operators understand the fail-safe behaviour |
Best practice: Every fail-safe verification must be documented with a signed test sheet, including the valve tag, the test method, the observed position, and the test personnel.
9. Common Mistakes to Avoid
| Mistake | Consequence | Prevention |
|---|---|---|
| Assuming fail position from actuator type alone | Wrong fail position; safety risk | Verify valve action + actuator + solenoid as a system |
| Confusing air-to-open with fail-open | Wrong valve action; unsafe failure | Verify spring action, not air action |
| Solenoid de-energise logic not matching fail position | Valve fails in wrong direction | Verify solenoid NC/NO logic against C&E matrix |
| No verification during FAT | Wrong configuration shipped to site | Test fail action at FAT |
| No verification during SAT | Wrong installation; unsafe response | Test fail action at SAT |
| C&E matrix not updated | Valve action does not match the safety study | Update C&E matrix after any change |
| Fail-in-place used for safety function | No safe action on failure | Never use FL for ESD/SIS |
| Air-to-close valve used for FC service | Valve fails open | Verify valve action against fail requirement |
| Lock-up valve not tested | Fail-in-place does not hold | Test lock-up valve function |
| Spring corrosion | Spring fails to return valve | Regular inspection; appropriate materials |
| Inadequate air supply | Spring cannot overcome air pressure | Verify air supply pressure and spring sizing |
10. Applicable Standards
| Standard | Scope |
|---|---|
| IEC 60534-1 | Industrial-process control valves—terminology |
| IEC 60534-2-1 | Flow capacity—sizing equations |
| IEC 60534-6 | Mounting of positioners |
| API 553 | Refinery valves and accessories for control and safety systems |
| API 6D | Pipeline valves—actuator requirements |
| IEC 61508 / IEC 61511 | Functional safety—SIL requirements |
| IEC 60079 | Explosive atmospheres—equipment certification |
| ISO 5211 | Valve actuator attachment |
| EN 15714 | Industrial valves—actuators |
| ISA-5.1 | Instrumentation symbols and identification |
11. Why Choose Anhui Tiankang for Fail-Safe Valve Solutions?
Anhui Tiankang (Group) Co., Ltd. has nearly five decades of experience in industrial instrumentation and control valves. We provide complete valve and actuator solutions with verified fail-safe configuration.
Products for fail-safe applications:
| Product | Fail-Safe Configuration |
|---|---|
| Pneumatic diaphragm control valve | FC or FO with spring-return |
| Pneumatic piston control valve | FC, FO, or FL |
| Electric control valve | FC or FO with battery backup; FL standard |
| ESD shut-off valves | FC with fast stroking |
| Anti-surge valves | FO with fast stroking |
| Pressure relief valves | FO |
| Lock-up valves | FL for double-acting actuators |
| Solenoid valves | NC, NO, or universal configuration |
| Positioners | HART, SIL-rated, with fail-safe feedback |
Engineering support:
Fail-safe position assessment per HAZOP and C&E matrix
Actuator selection and spring sizing
Solenoid valve logic verification
FAT and SAT fail-safe verification procedures
Commissioning support
Core advantages:
Complete certifications: CCC Ex, ATEX, IECEx, SIL
CNAS-accredited laboratory: full performance testing
Long-term supplier to CNPC, Sinopec, CNOOC, and international EPC projects
One-stop supply: valves + actuators + positioners + accessories
12. Conclusion
The fail-safe position of a control valve is not a detail to be left to the vendor's default. It is a safety decision that must be made during design, documented in the cause-and-effect matrix, verified during FAT and SAT, and understood by the operators who run the plant.
Key takeaways:
| Fail Position | When to Use | Typical Applications |
|---|---|---|
| Fail Closed (FC) | Opening would cause overpressure, runaway, release | Fuel gas, feed, ESD isolation |
| Fail Open (FO) | Closing would cause loss of cooling, no relief, surge | Cooling water, relief, fire water |
| Fail in Place (FL) | Neither opening nor closing is hazardous | Mixing, blending, non-critical control |
The most important rules:
Verify the complete system—valve action, actuator type, and solenoid logic must all align.
Fail position ≠ air action—the spring action determines the failure position, not the normal operating air action.
Never use fail-in-place for safety functions—ESD and SIS valves must always move to a defined safe position.
Verify physically—test the fail-safe action at FAT, SAT, and commissioning.
Document everything—the cause-and-effect matrix, loop diagram, and nameplate must all agree.
Remember: A valve that fails in the wrong direction is worse than a valve that does not fail at all. The fail-safe position is the last line of defence between a process upset and a safety incident—get it right, verify it, and document it.
Contact Us
For fail-safe valve selection, actuator sizing, or project quotations, please contact:
Yin Shuangjie
International Sales Manager
📧 Email: [email protected]
📱 WhatsApp / Zalo: +86 17856068126
🌐 Website: http://www.tiankang-global.com/
Anhui Tiankang – Your partner for reliable valve automation and instrumentation solutions.
