A valve actuator choice starts with the required response to each loss of energy, not with a blanket rule that on/off valves use one actuator type and emergency valves use another. For the stated 10-inch trunnion-mounted ball valve, the process decision is fail closed. That points toward a spring-return actuator when closure must occur after motive-air or hydraulic-pressure loss. It does not, by itself, prove that the valve will shut tightly, move fast enough, or develop enough torque.
Reject the usual quick fixes
Do not select a spring-return actuator only because the valve is tagged as an XV, described as an emergency shutdown valve, or required to provide “Total Shut Off.” Those descriptions address different functions:
| Quick decision | Why it fails | Required correction |
|---|---|---|
| Use spring return because the valve is on/off | Many ordinary on/off valves use double-acting actuators. The tag does not define the safe state. | Read the trip action and fail position from the process safety requirements and P&ID. |
| Use double acting because both directions need high torque | A standard double-acting actuator has no passive return stroke after motive-pressure loss. | Add a documented stored-energy scheme or choose spring return when loss of motive pressure must close the valve. |
| Treat fail closed as tight shutoff | Fail direction describes motion. Seat leakage depends on valve construction, seat condition, differential pressure, available seating torque, and the specified leakage acceptance criterion. | Specify fail action and leakage performance separately. |
| Assume a standard selects the actuator type | The decision is installation-specific and depends on process consequences, operating duty, and credible failures. | Use applicable standards to verify the finished design, then document the selection through the process hazard and functional requirements. |
Before moving on, obtain one approved statement that says what the valve must do after a trip and after loss of motive power. For this application, that statement must explicitly say fail closed.
Define the safe state from the process
Challenge “fail closed” against the actual process response. Determine what happens to upstream and downstream pressure, pumps, compressors, heat input, recycle paths, and relief paths during a plant-wide outage and during a local outage. A valve may need to close on one event, remain in position on another, or continue controlled movement long enough to place the unit in a safe state.
The stated services create two separate operating cases that belong in the actuator calculation:
| Service case | Temperature | Pressure stated | Flow stated | Design question |
|---|---|---|---|---|
| Vapor C2/C4 | 40 °C | 44.3 kg/sq. cm. | 44.3 kg/s | What differential pressure can exist when the trip commands closure? |
| Vapor regeneration gas | 290 °C | 4.4 kg/sq. cm. | Not stated | How does the specified valve and seat construction affect hot operating torque and leakage? |
Do not infer seat construction from temperature alone. Retrieve the valve datasheet, approved trim and seat materials, pressure-temperature limits, required shutoff class, and manufacturer torque data for both services. The line is stated as 10-inch A106 Grade B seamless pipe to ASME B36.10, but line material and dimensional standard do not determine actuator action.
Record the consequence of failure to close, failure to open, unintended movement, and failure in an intermediate position. Proceed only when the process owner has accepted fail closed for each defined trip and loss-of-energy case.
Separate every energy failure
“Power failure” is too broad for commissioning. Trace electrical control power, instrument air or hydraulic supply, solenoid state, positioner output, tubing, and any stored-energy device separately. A spring-return pneumatic actuator normally uses motive pressure for one direction and stored spring energy for the return direction. A double-acting actuator applies motive pressure to alternate sides and normally loses controlled motion when that pressure disappears.
| Failure | Spring-return fail-closed arrangement | Double-acting arrangement |
|---|---|---|
| Trip signal or electrical power loss | A correctly selected de-energize-to-trip solenoid vents the actuator so the spring closes the valve. | The valve moves only if the pneumatic or hydraulic circuit deliberately routes stored pressure to the closing side. |
| Instrument-air loss | The spring can close the valve if spring torque exceeds the required valve torque through the full stroke. | The valve may drift, stop, or move under process forces unless a stored-energy and control scheme defines its response. |
| Solenoid failure | Failure response depends on the solenoid failure mode, spool condition, exhaust path, and wiring. | A stuck or failed solenoid can block the commanded pressure path even when an accumulator is charged. |
| Mechanical binding or excessive valve torque | The spring may stall before the seat is reached. | Supply pressure may still be insufficient to complete the stroke. |
A secured instrument-air buffer vessel can support a double-acting design, but it turns fail action into an engineered subsystem. Size it from the actuator volume, minimum usable pressure, required number of strokes, leakage allowance, and environmental conditions; obtain those inputs from the selected equipment documentation rather than guessing them.
Stroke the proposed circuit with electrical power present, then repeat after isolating motive supply. The observed final position must match the failure matrix before actuator sizing continues.
Confirm torque and shutoff requirements
Request the valve manufacturer’s torque curve for the actual valve build and both stated services. A ball valve does not present constant torque. Breakaway, running, and end-to-seat demands differ, while a spring-return actuator’s available torque changes through its stroke. Compare torque at corresponding angular positions, not just one advertised maximum value.
Include the specified differential pressure at closure, process temperature, seat and seal materials, service condition, operating frequency, and any required design margin in the manufacturer’s sizing review. The 290 °C regeneration-gas case may govern material selection or torque, while the 44.3 kg/sq. cm. C2/C4 case may govern pressure load. Calculate against both and use the governing case.
Keep these acceptance requirements separate:
- Travel: The valve reaches the mechanically defined closed position.
- Torque: The actuator maintains adequate output throughout travel and at the seat.
- Time: The assembly completes the safety action within the process requirement.
- Leakage: The closed valve meets the specified test method and acceptance limit.
If ISO 5208 leakage rate B is required, place that exact requirement on the valve datasheet and test documentation. Do not translate “Total Shut Off” into rate B without written confirmation. Continue only after the approved torque comparison covers the entire stroke and identifies the governing service.
Select the fail-closed architecture
Choose a spring-return actuator when the valve must close after loss of motive pressure and spring torque can satisfy the full torque curve. This is the direct fail-closed architecture for the stated requirement because the closing energy is stored mechanically at the actuator.
Choose double acting only when the process requirement permits loss of controlled movement, calls for a different failure response, or an engineered stored-energy package provides the required closing action. A double-acting actuator alone is not a reliable fail-in-place device: process differential pressure, leakage, mechanical imbalance, and control-circuit behavior can move the valve after supply loss.
Mixed control and emergency-shutdown duty needs an additional review. Pneumatic compressibility, valve-seat friction, linkage friction, positioner behavior, and actuator sizing can create deadband, hysteresis, or slow response. A large actuator selected for shutdown torque may perform poorly at fine positioning. If the valve must throttle and isolate, define which function governs and whether separate valves provide a maintainable design.
Approve the architecture only when the actuator action, solenoid action, stored energy, and process safe state all produce closure from the same failure matrix.
Connect and commission the trip chain
- Confirm the valve moves freely and that its open and closed mechanical limits match the valve manufacturer’s instructions.
- Mount the actuator in the orientation that produces spring-to-close action. Verify coupling alignment before applying full torque.
- Connect motive supply through the selected filter, regulator, tubing, solenoid, and exhaust path. Check that each component has suitable pressure, temperature, flow, and service ratings from its documentation.
- Wire the trip circuit so the documented safe state is produced by the selected energized or de-energized condition. Label the normal and trip states at the solenoid and termination points.
- Set position indication from actual valve position. Do not use solenoid state or actuator pressure as proof that the ball reached the seat.
- Stroke the valve locally, then from the control system. Confirm command indication, valve movement, and independent open and closed feedback agree.
- Simulate the defined electrical failure and verify the exhaust route releases pressure without an unintended restriction.
- Isolate motive supply and verify spring energy closes the valve from each operating position required by the test plan.
If the stroke hesitates, stop adjusting travel stops to hide the symptom. Check supply pressure under flow, exhaust restriction, tubing condition, alignment, valve friction, and torque sizing. Release the assembly for trip testing only after closed feedback comes from the valve’s actual closed position.
Prove the complete safety action
Run the final test from the initiating event to the process endpoint. A local actuator stroke proves only part of the chain. Test the sensor or simulated input, logic action, output circuit, solenoid, pneumatic or hydraulic path, actuator, valve travel, closed-position feedback, and required process isolation.
Record starting position, process condition, motive-supply pressure, trip source, final position, travel result, feedback state, and leakage-test result where leakage is part of the requirement. Test local loss of electrical power separately from plant-wide power loss and motive-supply loss. For a stored-air double-acting design, test at the documented minimum stored pressure and after the specified standby condition taken from the approved design.
Repeat the functional test through the maintenance interval defined by the site’s safety and reliability program. Trend stroke behavior and investigate growing travel time, incomplete seating, air leakage, position disagreement, or rising torque before the valve loses its protective function. The end-to-end check passes only when every defined failure reaches the approved fail-closed state and the separate leakage criterion also passes.
FAQ
What happens if instrument air fails on a double-acting valve actuator?
A standard double-acting actuator loses its controlled pressure source and may stop, drift, or move under process forces. Closing requires a designed stored-energy source, control circuit, and proof test covering the minimum usable pressure.
What happens if a spring-return actuator reaches closed position but the valve still leaks?
Fail-closed travel has succeeded, but shutoff performance has not. Check available seating torque, actual differential pressure, seat condition, mechanical stops, and the specified leakage test independently.
What happens if torque data or the approved fail state are missing?
Stop before ordering or stroking the assembly against process pressure; field adjustments cannot replace a defined safe state or a full-stroke torque comparison. Escalate to the valve and actuator manufacturers’ official support channels and the responsible process-safety authority for approved selection data.