Preventing Control Output Chattering in APL Valve Block VlvL - SafePos and MonSafeP Configuration

Control output (Ctrl) chattering or toggling in the Advanced Process Library (APL) valve block VlvL occurs when dynamic feedback signals are erroneously interconnected to the SafePos parameter. SafePos defines the static, de-energized fail-safe position of the valve (SafePos = 0 for fail-closed where Ctrl=1 opens; SafePos = 1 for fail-open where Ctrl=0 opens). Interconnecting dynamic valve feedback to SafePos creates an oscillatory feedback loop where actuator movement continuously inverts the control logic. To resolve this, parameterize SafePos as a static configuration constant (0 or 1), route dynamic safety shutdown interlocks to the Protect or Trip inputs, and enable MonSafeP only if monitoring transition time to safe state.

Executive Summary

The VlvL (Valve - Large, FB1899) block in the SIMATIC PCS 7 Advanced Process Library governs the operational control, interlock management, and position monitoring of digital process valves. During commissioning, automation engineers occasionally observe an abnormal failure mode where the block's physical output command (Ctrl) toggles rapidly (chatters) between ON and OFF on every execution cycle when SafePos = 1 and MonSafeP = 1. This behavior threatens physical equipment, risking actuator coil burnout or pneumatic valve oscillation. This failure does not stem from internal library bugs, but from a fundamental engineering misconception regarding the SafePos parameter: wiring runtime position feedback or trip commands to SafePos creates an inverted closed-loop logic race condition. This technical guide details the correct parameterization of fail-safe valve states in APL.

Functional Mechanics of VlvL: SafePos and Neutral Position Logic

In industrial process engineering, control valves feature a defined physical mechanical neutral position dictated by spring-return actuators:

Fail Closed (De-energized = Closed): Configured with SafePos = 0. In this mode, asserting Ctrl = 1 energizes the solenoid to open the valve, while Ctrl = 0 de-energizes the solenoid to close the valve.
Fail Open (De-energized = Open): Configured with SafePos = 1. In this mode, the electrical control logic is inverted: asserting Ctrl = 0 de-energizes the solenoid to allow the valve to open, while Ctrl = 1 energizes the solenoid to close it.

Root Cause Analysis: Why Dynamic Interconnections Cause Chattering

Parameter SafePos is designed as a static commissioning attribute reflecting the valve's physical spring return. If an engineer connects the valve's position feedback signal (e.g. FbkOpen) or a dynamic interlock to SafePos:

When the valve is commanded to open, Ctrl asserts.
As soon as the position feedback actuates, SafePos dynamically flips from 0 to 1.
Inverting SafePos instantaneously inverts the control definition of Ctrl within the internal block execution cycle.
Ctrl drops to 0, which clears the feedback signal.
Clearing feedback flips SafePos back to 0, causing Ctrl to re-assert.
This creates continuous cyclic chattering at the OB execution frequency (e.g. every 100 ms).

Safe Position Monitoring via MonSafeP and SafePosTi

When MonSafeP = 1 (Monitor Safe Position is enabled), VlvL monitors whether the valve successfully achieves its neutral safe position following an interlock trip or emergency shutdown within the duration specified by SafePosTi.

If the valve fails to reach SafePos before SafePosTi elapses, the block triggers a maintenance alarm (SafePosErr = 1). This function monitors compliance with safety states, but does not alter control logic.

VlvL Parameter Configuration and Interlock Matrix

The following table summarizes the parameters, functions, and engineering rules for VlvL fail-safe configuration:

Parameter NameData TypePermitted Connection TypeFunctional PurposeCorrect Engineering SettingSafePosBOOLStatic Constant Only (No Dynamic CFC Line)Defines de-energized mechanical valve state.0 = Fail Closed, 1 = Fail OpenMonSafePBOOLStatic Constant (0 or 1)Enables monitoring of transition to safe position.Set to 1 if safe state timing is critical.SafePosTiREALStatic Constant (Seconds)Maximum allowed time to achieve safe position.Typically set to 5.0 to 15.0 seconds.ProtectStructDynamic Interlock ConnectionHigh-priority safety interlock to force safe state.Interconnect to safety logic or ESD matrix.IntlockStructDynamic Interlock ConnectionOperational interlock preventing valve opening.Interconnect to process permissive logic.CtrlStructConnect to Output Driver (Pcs7DiOu)Actuator digital command output to field.Interconnect to field solenoid valve driver.

Step-by-Step Rectification Procedure in CFC

Method 1: Restoring Static SafePos Parameterization

Open the CFC chart containing the affected VlvL block in SIMATIC Manager.
Inspect input SafePos. If an interconnection line is present, select the line and press Delete to sever the link.
Double-click SafePos to open its properties.
Set the static value:
* Enter 0 if the valve springs closed when unpowered (Fail Closed).
* Enter 1 if the valve springs open when unpowered (Fail Open).
Ensure that valve position feedback switches from the field are wired strictly to inputs FbkOpen and FbkClose.

Method 2: Correctly Routing Emergency Shutdown Signals

If the intention was to force the valve to its safe position during an emergency or trip condition, identify the safety signal.
Route the trip signal into input Protect (Protection Interlock) or Trip.
Compile CFC changes (Chart > Compile > Changes Only) and download to the controller.

Verification

To verify that VlvL operates stably without output chattering:

Manual Command Test: In WinCC Runtime, open the valve faceplate. Command the valve to OPEN. Confirm that output Ctrl.Value transitions to steady 1 (or 0 if SafePos=1) without pulsing.
Interlock Trip Test: Trigger an active interlock on Protect. Confirm that VlvL immediately drives the valve to its safe position and that Ctrl remains stable.
Safe Position Monitoring Check: Verify that with MonSafeP = 1, when the valve reaches its safe limit within SafePosTi, no SafePosErr alarms are generated.

Limitations and Operational Precautions

Mechanical Damage Risk: Never leave a chattering valve block connected to physical field outputs; continuous relay cycling can weld solenoid contacts and rupture pneumatic diaphragms.
Inverted Output Wiring: When SafePos = 1 is configured, field technicians must be informed that Ctrl = 0 energizes or opens the process stream to avoid commissioning accidents.
Feature Bit Dependencies: Ensure that Feature.Bit2 (Resetting the command outputs dependent on feedback) is parameterized according to plant electrical solenoid specifications.

Engineer FAQ

Can SafePos be dynamically switched between 0 and 1 during runtime?

No. SafePos reflects the mechanical physical construction of the valve actuator (spring to open vs spring to close) and must remain a fixed static constant.

Which input should be used to force the valve closed during an alarm?

Use the Protect or Intlock inputs. Asserting a protection interlock immediately overrides manual and automatic commands and forces the valve to its safe position.

What happens if MonSafeP is enabled but SafePosTi is set to 0.0 seconds?

The block will immediately generate a SafePosErr alarm upon tripping because the physical valve cannot travel to its limit switch in zero seconds.

Technical References

Related Tags

https://industrialautomation.net/search?query=simatic-pcs7
https://industrialautomation.net/search?query=advanced-process-library
https://industrialautomation.net/search?query=valve-control
https://industrialautomation.net/search?query=safety-interlocks

6 respuestas

Preventing Control Output Chattering in APL Valve Block VlvL - SafePos and MonSafeP Configuration