Valve Actuator Fail-Safe Action: Fail-Closed, Fail-Open, and Fail-Last

The fail-safe action of an actuated valve defines what the valve does when its motive power or control signal is lost - on a loss of instrument air, electrical power, or the control system command. It is one of the most important process-safety decisions in valve automation, because the fail direction determines whether a plant upset drives the process toward a safe state or toward a hazardous one. The three fundamental fail actions are fail-closed (FC), fail-open (FO), and fail-last / fail-in-place (FL).

The Three Fail-Safe Actions

Fail-Closed (FC / Air-to-Open)

A fail-closed valve moves to the fully closed position on loss of power or signal. It is also called air-to-open, because instrument air is needed to open it and the spring drives it closed when air is lost. FC is selected where stopping flow is the safe state - fuel-gas lines to burners, feed to a reactor that could run away, and most emergency shutdown (ESD) isolation valves.

Fail-Open (FO / Air-to-Close)

A fail-open valve moves to the fully open position on loss of power or signal. It is also called air-to-close. FO is selected where maintaining or increasing flow is the safe state - cooling-water and quench lines that must keep flowing to protect equipment, compressor anti-surge recycle valves that must open to protect the compressor, and pressure-relief bypass paths.

Fail-Last (FL / Fail-in-Place)

A fail-last valve stays in its last position on loss of power. It is used where neither fully open nor fully closed is inherently safe, or where a sudden large process swing would itself be hazardous - for example large control valves on tight-level or tight-pressure loops. FL is typical of double-acting pneumatic actuators without a spring, and of electric actuators without a spring or battery backup; a true fail-safe FL usually requires a lock-up valve (to trap air) or a backup energy source.

Spring-Return vs Double-Acting Actuators

Fail action is delivered by the actuator design. A spring-return actuator stores energy in a spring that drives the valve to a defined safe position when motive power is lost - this gives inherent fail-closed or fail-open behaviour and is the standard for ESD and safety duty. A double-acting actuator uses air (or hydraulic pressure) on both sides of the piston and has no spring, so on loss of air it fails in place unless a spring-return module, an accumulator, or a lock-up/dump valve is added.

Fail-Safe in Emergency Shutdown (ESD) Service

Emergency shutdown valves are the highest-integrity fail-safe application. They normally sit fully open (or fully closed) and must move to the safe position fast and reliably on a trip signal. They are built around spring-return actuators with fail-safe solenoid valves that vent air to drive the spring stroke, and they are engineered to a Safety Integrity Level (SIL) under IEC 61508 and IEC 61511. Key features include partial-stroke testing (PST) to prove the valve will move without a full shutdown, redundant solenoids for high SIL, quick-exhaust valves for fast stroke, and fire-safe, low-emission construction.

• Spring-return actuator sized with margin for the worst-case seating torque plus a safety factor.
• Fail-safe solenoid valve that de-energises to vent, so loss of signal drives the safe stroke.
• Partial-stroke testing to reveal dangerous undetected failures without process shutdown.
• Quick-exhaust or dump valves for fast closure on large actuators.
• SIL verification per IEC 61511 with documented PFDavg, proof-test interval, and safe failure fraction.
• Fire-safe design to API 607/6FA and NACE MR0175 where flammable or sour media are handled.

How to Select the Fail Direction

1. 1Identify the hazard: what happens to the process if this valve loses power at the worst moment?
2. 2Determine the safe state: does stopping flow, maintaining flow, or holding position minimise the hazard?
3. 3Map safe state to fail action: safe-when-closed = FC, safe-when-open = FO, safe-when-held = FL.
4. 4Confirm with the process hazard analysis (HAZOP) and any SIL/LOPA study for safety-instrumented functions.
5. 5Select the actuator: spring-return for FC/FO, double-acting with backup and lock-up for FL.
6. 6Verify motive-power selection - pneumatic spring-return is preferred for fast, self-contained fail-safe action.

Standards and Documentation

Actuated fail-safe valve assemblies are specified against the valve standards (API 6D, API 609, API 6A), actuator sizing and mounting to ISO 5211 and the flange/torque data of the valve, and the functional-safety standards IEC 61508 and IEC 61511 for ESD duty. Fire-safe and sour-service requirements follow API 607/API 6FA and NACE MR0175. Documentation should include the actuator sizing calculation, the fail-action confirmation, and, for safety functions, the SIL capability certificate.

Vajra Industrial Solutions supplies actuated valve packages with the correct fail-safe action for your process - spring-return pneumatic actuators for fail-closed and fail-open duty, double-acting actuators with lock-up and accumulator backup for fail-last loops, and SIL-rated ESD assemblies with partial-stroke capability - all sized, mounted, and documented to your functional-safety specification.