A press becomes hazardous when a person can reach the point of operation, a moving ram, the workpiece, or an ejection path while damaging force is available. A rating under 6 tons does not remove that hazard. Guarding is required wherever the commissioning assessment identifies reachable hazardous motion; two-hand control is one possible protective measure, not an automatic substitute for guards.
Hazard boundary and safeguarding decision
The term point of operation here means the area where the ram, tooling, and workpiece perform the straightening operation. Start by defining every way a hand or other body part can enter that area from the front, sides, rear, above, and below. Include access created by an open-frame structure or movable tooling.
Evaluate hazards beyond crushing between the ram and workpiece. A straightening operation can release stored energy from a bent part, eject a poorly supported workpiece, dislodge tooling, or expose personnel to hydraulic pressure. Also consider loading, alignment, adjustment, jam clearing, inspection, and maintenance rather than assessing only the normal powered stroke.
Do not use press tonnage as the safeguarding criterion. The decision depends on access to damaging motion, how the work is held, whether hands enter the die space, the behavior of the hydraulic system after a stop demand, and the regulations applying to the installed workplace.
- Map each hazardous zone and its possible direction of access.
- Identify who can enter each zone, including operators and nearby personnel.
- Classify access as routine production access, occasional setup access, or maintenance access.
- Select a physical guard or protective device for every access path. Record any task that requires a separate safe-work method.
Check 1: Expect the assessment to account for the front, sides, rear, workpiece ejection path, and stored hydraulic or mechanical energy. An unclassified access route means the safeguarding design is incomplete.
Fixed and interlocked guard layout
Use fixed guards for openings that do not require routine access. A fixed guard should resist expected contact and should require a deliberate maintenance action for removal. Position it so personnel cannot reach over, under, around, or through it into hazardous motion.
Where production requires opening a guard, use an interlocked movable guard if that method fits the process. Opening it must generate a stop demand through the safety-related control system. The guard must remain effective against unexpected restart; closing a guard alone must not start a cycle unless the complete control design and applicable requirements explicitly permit that behavior.
Stopping the pump motor does not by itself prove that ram motion has become safe. Residual pressure, gravity, valve leakage, an accumulator, or load-induced movement can preserve or recreate motion. Guard design and control design must therefore be evaluated together.
| Condition | Preferred safeguard | Commissioning concern |
|---|---|---|
| No production access needed | Fixed guard | Reach around all edges |
| Repeated loading access | Interlocked guard or suitable presence-sensing protection | Stopping performance and restart prevention |
| Open access with operator positioned at controls | Validated two-hand control where the risk assessment permits it | Other-person access and defeat resistance |
| Setup or maintenance inside the hazard zone | Energy isolation and mechanical restraint as required by the task | Stored pressure and gravity-supported loads |
Check 2: Expect every non-operating access point to be physically closed or monitored. With an interlocked guard open, a normal cycle command must not create hazardous motion.
Two-hand control function
A two-hand control requires the operator to actuate two separate devices according to the control system's documented simultaneity requirement. It must resist tie-down, prevent a new cycle from one continuously held device, and require both devices to return before another initiation. A two-hand trip merely initiates motion and may release the operator's hands afterward; it is not equivalent to a control that keeps both hands occupied through the hazardous portion.
Locate the devices so one person cannot operate both with one hand, a hand and another body part, or an improvised object. Establish their distance from the hazard using the applicable safeguarding method and measured stopping performance. Do not choose a convenient distance or copy another machine's layout.
Two-hand control protects only the person using it. It does not prevent a second person from reaching into an open side or rear area, and it does not contain an ejected workpiece. Supplement it with fixed or interlocked guards wherever another person can enter the hazard zone.
- Connect each actuator as an independently monitored safety input.
- Configure simultaneity, anti-tie-down, anti-repeat, and release behavior according to the selected safety device documentation.
- Route the safety output through the elements that remove or control hazardous motion.
- Set the operator position only after measuring the press stopping response.
Check 3: Expect no cycle when one button is pressed first and held, when only one button is used, or when either button fails to return. Expect a valid command only after both devices have been released and correctly actuated again.
Hydraulic and safety-control connections
The safety function must act on the source and control path capable of producing ram motion. A standard control input that merely cancels a software command may leave energy at the directional valve or actuator. Trace the complete chain from the two-hand stations and guard interlocks through the safety logic, final switching elements, hydraulic valves, cylinder, and load.
Define the required safe response for each operating state. Depending on the machine design and assessment, that response may be stopping, preventing further advance, retracting, or holding against gravity and load forces. Select the response from the actual hydraulic circuit; an uncontrolled reversal can introduce a different hazard.
Include fault detection and reset behavior. Restoration of power, release of an emergency stop, or closing an interlocked guard must not produce an unexpected stroke. Place manual reset controls where the person resetting can inspect the protected area without reaching through the safeguard.
Check 4: Expect each safeguard demand to produce the defined safe response at the ram, not merely a changed controller indication. After power restoration or safeguard reset, expect the press to remain stationary until a separate valid cycle command is made.
Commissioning functional tests
Test the assembled machine with tooling and a representative workpiece because load, fluid temperature, valve condition, and mechanical compliance affect stopping behavior. Use controlled conditions that prevent personnel from entering the potential motion or ejection path.
- Single-device test: Operate each two-hand device alone. Expect no hazardous stroke.
- Tie-down test: Hold one device and actuate the other. Expect no new cycle.
- Release test: Release either device during the hazardous portion when the safety design requires maintained actuation. Expect the defined safe response.
- Guard test: Open each interlocked guard. Expect cycle inhibition and the specified response to existing motion.
- Restart test: Restore a guard, power, or reset condition. Expect no automatic hazardous movement.
- Access test: Examine every opening from realistic body positions. Expect no route to the point of operation while force is available.
- Stopping test: Measure stopping response using the selected safeguarding method. Expect the protective-device location to meet the calculated separation requirement.
Check 5: Expect every test to pass repeatedly without relying on operator reaction. Record failures against the input device, safety logic, output element, hydraulic response, or physical guard rather than bypassing the failed function.
End-to-end validation and release
A bare or catalog press configuration does not establish that the installed application is ready for unrestricted production. Tooling, workpiece geometry, loading method, operating mode, and workplace access determine the final safeguards. The company integrating and operating the press must reconcile the completed installation with applicable machine-guarding and workplace requirements.
Validate normal production, setup, fault recovery, cleaning, and maintenance separately. Document the hazard boundaries, safeguard selections, control behavior, stopping measurements, test results, and authorized methods for tasks requiring energy isolation. Revalidate after changes to tooling, valves, controls, operating modes, workpiece support, or guard geometry.
Check 6: Run one complete production sequence from loading through unloading. Expect the operator's hands to remain outside the hazardous zone, all other access paths to remain protected, safeguard actuation to produce the defined safe response, and reset to leave the ram stationary pending a new command.
Frequently Asked Questions
Does a hydraulic press under 6 tons need guarding?
Low tonnage is not a safeguarding exemption. If a person can reach crushing, shearing, tooling, or ejection hazards while damaging force is available, protect that access and document the selected method.
Can I use two-hand control instead of a press guard?
Only where the risk assessment accepts it for the operator's access. Guard side and rear access, protect other personnel, and address workpiece ejection because two-hand control does not control those hazards.
Does stopping the hydraulic pump make the ram safe?
Not necessarily. Test for residual pressure, gravity, valve leakage, stored energy, and load-induced movement; the safety function must produce the defined response at the ram.
Can I release a guarded press after testing each device?
Release it only after the final end-to-end test: load a representative part, run the complete sequence, actuate every safeguard, verify the defined ram response, and confirm that resetting leaves the press stationary until a new valid command.