Procédure de test du circuit d'arrêt d'urgence : vérification fonctionnelle, mesure du temps de réponse et documentation

1. Scope & Purpose

This guide provides a comprehensive procedure for the functional verification, response time measurement, and documentation of Emergency Stop (E-stop) circuits on industrial machinery. Adherence to this procedure is critical for ensuring the safety of personnel, minimizing equipment damage during fault conditions, and maintaining compliance with international safety standards such as ISO 13850 (Safety of machinery – Emergency stop function – Principles for design) and NFPA 79 (Electrical Standard for Industrial Machinery).

This maintenance procedure is mandatory for all machinery equipped with E-stop circuits and shall be performed:

• Quarterly (every three months) as part of scheduled preventative maintenance.
• After any modification, repair, or replacement of E-stop components or associated control circuitry.
• Prior to commissioning new or relocated machinery.
• Following any incident where an E-stop was activated.

The primary objective is to verify that all E-stop devices and their associated safety circuits reliably achieve a Category 0 or Category 1 stop, as defined by IEC 60204-1 (Safety of machinery – Electrical equipment of machines – Part 1: General requirements), within acceptable response times.

2. Safety Precautions

WARNING: Performing maintenance on E-stop circuits involves working with energized electrical systems and potentially hazardous mechanical energy. Failure to follow these safety precautions can result in severe injury, electrocution, or death.

• Lockout/Tagout (LOTO): Always apply a comprehensive Lockout/Tagout procedure in accordance with OSHA 29 CFR 1910.147 (Control of Hazardous Energy) before commencing any work on the E-stop circuit or machinery. Verify zero energy state (electrical, hydraulic, pneumatic, mechanical) using appropriate test equipment.
• Personal Protective Equipment (PPE): Mandatorily wear appropriate PPE, including but not limited to: Arc-rated (AR) clothing (minimum HRC 2), safety glasses (ANSI Z87.1 compliant), electrical-rated gloves (e.g., Class 00 for <500V, ASTM D120 standard), and safety footwear (ASTM F2413 compliant).
• Hazardous Energy Verification: Before touching any components, verify the absence of voltage using a properly rated and calibrated Non-Contact Voltage Tester (NCVT) and a Digital Multimeter (DMM).
• Unexpected Machine Movement: Be aware that machinery may contain stored energy that could cause unexpected movement. Secure all moving parts, if necessary, using mechanical blocks or restraints.
• Confined Spaces: If working in confined spaces, follow all confined space entry procedures (e.g., OSHA 29 CFR 1910.146), including atmospheric monitoring and standby personnel.

3. Tools & Materials Required

4. Pre-Maintenance Inspection Checklist

5. Step-by-Step Procedure

5.1. Pre-Test Preparation

1. Review Documentation: Obtain and review the latest electrical schematics, control wiring diagrams, safety function block diagrams, and OEM maintenance manuals specific to the machine’s E-stop system. Note the expected E-stop category (0 or 1).
2. Notify Personnel: Inform all relevant production and maintenance personnel that E-stop testing will commence and that the machine will be temporarily unavailable.
3. Establish Safe Work Area: Barricade the work area if necessary to prevent unauthorized access.
4. Apply Lockout/Tagout (LOTO):
   1. Identify all energy sources for the machine (electrical, hydraulic, pneumatic, mechanical).
   2. De-energize and isolate all identified energy sources.
   3. Apply personal LOTO devices (padlocks, tags) to each energy isolating device.
   4. Common mistake: Failing to verify zero energy. Always use a DMM to confirm the absence of voltage on all phases and control circuits after LOTO and before proceeding.
5. PPE Donning: Ensure all required PPE (Arc-rated clothing, safety glasses, electrical gloves, safety footwear) is correctly donned.

5.2. Functional Verification

This section involves temporarily restoring power to the control circuit ONLY, to test E-stop functionality under controlled conditions. Ensure all main power disconnects remain LOTO’d until explicitly instructed otherwise.

1. Partial Power Restoration (Control Circuit): Carefully restore power to the machine’s control circuit ONLY, if required for E-stop circuit operation. Confirm main power to motors/actuators remains disconnected and LOTO’d.
2. Test Each E-stop Device (Sequential Activation):
   1. Starting with the first E-stop device, momentarily activate it by pushing the button or pulling the cord.
   2. Visual Indicator: Verify that the machine ceases all hazardous motion immediately (Category 0 stop) or initiates a controlled stop followed by power removal (Category 1 stop), as per OEM specifications. Observe relevant status lights on the control panel or safety relay.
   3. DMM Verification (Contact Status): Using the DMM set to continuity or resistance mode, confirm the normally closed (NC) contacts of the E-stop device open (infinite resistance) and normally open (NO) contacts close (near zero resistance) upon activation.
   4. Documentation: Record the E-stop device ID, the observed machine response, and DMM readings on the E-stop Test Report Form.
   5. Reset Procedure: After verifying activation, manually reset the E-stop device (turn or pull). Do not attempt to restart the machine yet.
   6. Repeat: Proceed to the next E-stop device and repeat steps 5.2.2a through 5.2.2e until all E-stops on the machine have been tested individually.
3. Simultaneous Activation Test (If Applicable): If the E-stop architecture involves multiple E-stops in series or parallel, activate two or more E-stops simultaneously (e.g., one button and one pull cord) to verify redundant operation.
4. Power Off Control Circuit: Once all functional tests are complete, de-energize and LOTO the control circuit power supply.

5.3. Response Time Measurement (Advanced)

This procedure quantifies the total stopping time from E-stop activation to the cessation of hazardous motion. This often requires the machine to be running in a controlled test mode.

WARNING: Response time measurement requires the machine to be in an operational state. Ensure only essential personnel are in the vicinity and that all safety protocols are strictly followed.

1. Pre-Measurement Setup:
   1. Remove all LOTO devices (only after confirming all personnel are clear and all guards are in place).
   2. Power up the machine to a controlled operational state (e.g., low speed, no load).
   3. Position the stopwatch/digital timer such that it can be activated precisely at E-stop initiation and stopped upon full cessation of hazardous motion. Some advanced safety analyzers can automate this.
2. Measure Response Time for Each E-stop:
   1. Initiate machine motion (e.g., conveyor running, spindle rotating).
   2. Simultaneously activate an E-stop device and start the timer.
   3. Stop the timer precisely when all hazardous motion ceases.
   4. Record the measured time. Repeat this measurement three (3) times for each E-stop device and calculate the average.
   5. Acceptance Criteria: Compare the average measured response time against the OEM specified maximum permissible stopping time (e.g., <500ms for mechanical brake engagement, <100ms for safety relay drop-out time). Adhere to performance level (PL) or safety integrity level (SIL) requirements.
   6. Documentation: Record all three measurements and the average time for each E-stop on the E-stop Test Report Form. Note any deviations.
   7. Common mistake: Inaccurate timing due to manual response. For critical systems, consider using a safety light curtain or laser sensor to trigger the timer automatically upon motion cessation.
3. System Restore: Once all response time measurements are complete, bring the machine to a safe stop and re-apply full LOTO for final checks.

5.4. Post-Maintenance Checks & Documentation

1. Internal Wiring & Terminations: Re-apply LOTO. Open E-stop enclosures and control panels. Inspect internal wiring for damage and verify all wire terminations are secure. Re-torque terminal screws to manufacturer specifications (e.g., M3 screws for control wiring: 0.6 Nm / 5.3 in-lb).
2. Gasket & Enclosure Seal: Ensure E-stop enclosures are properly sealed, and gaskets are intact to maintain IP rating (e.g., IP65 or IP67).
3. Test Report Completion: Ensure the E-stop Test Report Form is fully completed, including:
   1. Date and time of test.
   2. Names and signatures of technicians performing the test.
   3. Machine ID and location.
   4. Results of all functional and response time tests (Pass/Fail).
   5. Any corrective actions taken.
   6. Calibration status of test equipment used.
4. System Handover: Present the completed E-stop Test Report to the relevant supervisor or production manager. Explain any deviations or follow-up actions required.
5. LOTO Removal: Only remove LOTO devices after all personnel are clear, all tools are accounted for, and the system is confirmed safe for operation.

6. Post-Maintenance Verification Checklist

7. Troubleshooting Guide

8. Recommended Maintenance Schedule

9. Spare Parts Reference

For detailed specifications and ordering, please visit the UNITEC-D E-catalog.

10. References

• ISO 13850:2015 – Safety of machinery – Emergency stop function – Principles for design.
• IEC 60204-1:2018 – Safety of machinery – Electrical equipment of machines – Part 1: General requirements.
• NFPA 79:2021 – Electrical Standard for Industrial Machinery.
• OSHA 29 CFR 1910.147 – The Control of Hazardous Energy (Lockout/Tagout).
• ANSI Z87.1 – Occupational and Educational Personal Eye and Face Protection Devices.
• ASTM D120 – Standard Specification for Rubber Insulating Gloves.
• ASTM F2413 – Standard Specification for Performance Requirements for Protective (Safety) Toe Cap Footwear.
• Original Equipment Manufacturer (OEM) Maintenance Manuals and Electrical Schematics.