Stop Doing These Things to a Barrier First
When an intrinsically safe loop misbehaves, the barrier gets blamed and the same three moves come out of the toolbox. All three are wrong.
- Putting an ohmmeter or megger across a barrier still wired in the loop. The meter's test voltage is applied to the hazardous-side terminals through the barrier's own components. That bypasses the energy limit the barrier exists to enforce and can push voltage into field wiring that runs through the hazardous area. It also tells you nothing useful: the resistive and diode path reads differently depending on meter polarity and range, so the number cannot be compared to a spec.
- Scheduling periodic "functional tests" by injecting current or voltage into the barrier. No such test is required. A barrier is a passive protective device, not an instrument with drift. Injecting signals on the safe side to see what comes out the hazardous side risks blowing the internal fuse on a Zener barrier and creates the same energy-injection hazard as the meter.
- Trying to repair a barrier that reads open. The internal fuse in a Zener barrier is not serviceable. It opened because the barrier did its job under an overvoltage event. Replace the unit; do not bridge, re-fuse, or pot-strip it.
Habit for the night shift: if the loop is dead, get it running with a like-for-like spare barrier, then find out what killed the first one.
Understand Why In-Circuit Meter Tests Fail
A Zener (shunt-diode) barrier is a fuse, a series resistor, and Zener diodes to a dedicated intrinsically safe earth. Under normal conditions the diodes are non-conducting and the loop sees only the series resistance. If the safe-side voltage rises above the Zener rating, the diodes clamp it to earth and the fuse opens before the diodes can overheat. The whole safety case rests on two things: the earth path being low-resistance, and nobody applying energy to the terminals that the barrier was not certified to handle.
An ohmmeter defeats both. Its source is connected directly across terminals, so on some ranges it forward-biases the diodes and reads nonsense, and on others it can exceed the fuse's rating. Insulation testers are worse: several hundred volts across a shunt-diode barrier will open the fuse outright and can damage the diodes without opening the fuse, leaving a barrier that passes continuity but no longer clamps.
Isolated (galvanic) barriers use transformer or opto isolation and an active output stage instead of a shunt earth. They have no fuse to blow with a meter, but the same rule applies: the hazardous-side terminals are only certified for the field device listed on the control drawing, not for a test instrument.
Run the Annual Installation Check
No special maintenance is required on an intrinsically safe system. Once a year, walk the barrier panel and its field cabling against the control drawing and record the items below. Everything on this list is a visual or a mechanical check, or a resistance measurement on the earth conductor with the barrier disconnected from it.
| Check | Acceptance | How |
|---|---|---|
| Terminal connections | Tight, no discoloration | Torque screws to the barrier manufacturer's figure; look for heat marks on ferrules |
| IS earth conductor | Less than 1 Ω from barrier earth bar to the plant IS earth point | Lift the earth link from the barrier rail, measure the conductor end-to-end with a low-ohms meter, reconnect and retorque |
| Moisture and dirt | Barrier bodies, rails, and terminals dry and clean | Inspect for condensation trails, corrosion on the earth bar, dust bridging terminals |
| Wiring separation | IS conductors in their own conduit, tray, or partitioned duct; separation maintained inside the panel | Trace the hazardous-side cables from barrier to panel gland and out; open junction boxes on the route |
| Identification | IS wiring and terminals marked as intrinsically safe (blue is the usual convention) | Check cable sheath, terminal blocks, and panel labels match the control drawing |
| Barrier identity | Part number and rating on each barrier matches the loop's control drawing | Read the label; a wrong swap during a breakdown is the most common finding |
Stop here if the earth measures over 1 Ω, if an IS cable is found sharing a raceway with power conductors, or if a barrier part number does not match the drawing. Each of those is a loss of the safety concept, not a housekeeping item.
Fix What the Check Finds
- Earth over 1 Ω. Clean and retorque every lug in the path first; corrosion at the panel earth bar or the plant IS earth electrode connection is the usual cause. If the conductor itself is undersized or damaged, replace it with the size on the control drawing. Re-measure before reconnecting barriers.
- Moisture in the panel. Dry the enclosure, find the ingress point (gland, door seal, conduit without a drain), and correct it. Inspect each barrier's terminals for green or white corrosion. A barrier with corroded hazardous-side terminals gets replaced, not cleaned.
- IS wiring sharing a raceway with 480 VAC or other power conductors. This is the failure that shows up on plants that were modified after commissioning. Re-route the IS cables into dedicated conduit or a partitioned tray. Until that is done, the loop is not intrinsically safe regardless of what the barrier does.
- Wrong or unlabeled barrier. Replace with the part number on the control drawing. Retag the terminal strip. Update the drawing if the loop was legitimately changed.
- Dead loop after an overvoltage event. Swap the barrier, then find the source: a mis-wired safe-side supply, a lightning strike on a long field run, or a maintenance test instrument. If the cause is not found, the replacement will fail the same way.
Verify the Loop Without Touching the Barrier
Proof that the loop works comes from the loop, not from the barrier. After any swap or repair:
- Confirm the IS earth link is reconnected and tight.
- Restore power on the safe side and read the field signal at the controller or receiver input.
- Drive the field device through its normal range (stroke the valve, change the process variable, actuate the switch) and confirm the reading tracks. Loop resistance added by a Zener barrier is fixed; if the signal now sits low or saturates, check the receiver's input impedance and the loop supply voltage against the barrier's end-to-end resistance on its datasheet.
- For a switch input, confirm both states are seen. For a 4-20 mA loop, confirm live zero and full scale.
- Record the barrier part number, date, and reason for change on the loop sheet.
If a functional check is wanted on the field side, do it with the certified field device or a certified intrinsically safe simulator connected at the field terminals, never with a bench meter at the barrier.
Know When to Replace and When to Escalate
Replace a barrier when the loop reads open with the field device and cable proven good, when terminals show corrosion or heat damage, when it has been subjected to an insulation test, or when its part number does not match the control drawing. Barriers are cheap relative to the certification behind them; keep spares of every part number in the panel.
Stop and call the barrier manufacturer's technical support, or the plant's hazardous-area authority, before doing anything not covered above: any proposed change to barrier type, cable length, or field device, any earth path that cannot be brought under 1 Ω with the existing conductor, or any doubt about whether a loop's protection concept is still intact. Getting the loop running is a night-shift job; re-establishing the intrinsic safety case is not.
FAQ
How do I test an intrinsically safe barrier with a multimeter?
Do not. A meter applied across a barrier still wired in the loop bypasses the energy limit and can inject voltage into the hazardous-area wiring. Verify the loop by reading the field signal at the receiver, and replace a barrier that reads open.
How often do I need to inspect IS barriers?
Once a year. Check terminal tightness, an IS earth path under 1 Ω, freedom from moisture and dirt, and separation and identification of the IS wiring in the panel and conduits. No periodic functional test of the barrier itself is required.
How do I know if a Zener barrier has blown?
The loop reads open with the field device and cable proven good. The internal fuse opened on an overvoltage event and is not serviceable; swap the barrier for the same part number and then find the overvoltage source before it takes the replacement.