- Emergency Isolation Valves (EIVs) are safety-critical devices whose entire purpose is to function reliably in the worst possible scenario — when everything else has gone wrong — making their specification, testing, and maintenance programme the most important valve engineering work on any hazardous facility.
- EIV specification must integrate process engineering (the fluid service and isolation requirement), safety engineering (the SIL level from the Safety Instrumented System assessment), and mechanical engineering (the valve type, actuator, and fail-safe mechanism) into a coherent, verified design.
- Partial stroke testing (PST) capability, solenoid valve selection, instrument tubing design, and proof test procedures are all part of the EIV specification package — not afterthoughts — and getting them right determines whether the safety function the EIV provides actually achieves its claimed safety integrity level in practice.
Emergency Isolation Valves are the valves you never want to operate. They sit there, in their fail-safe positions, year after year, confirming their availability through periodic proof tests, and hopefully never seeing an actual emergency demand. But when the demand comes — a major leak, a fire signal, a loss of containment — they must function. No hesitation, no sticking, no partial stroke. The specification of an EIV is the specification of a device whose success is measured by the one moment it may face in its entire service life. That demands precision.
What Is an EIV and Where Is It Required?
An Emergency Isolation Valve is a remotely operated, fail-safe valve that closes automatically on receipt of a shutdown signal from the Safety Instrumented System (SIS). EIVs are required wherever the hazard analysis (HAZOP, LOPA) has identified that a block valve needs to function as part of a Safety Instrumented Function (SIF) to reduce the risk of a process hazard to an acceptable level.
Typical EIV applications include: isolation of large hydrocarbon inventory vessels (storage tanks, separators, slug catchers) to limit inventory release in a leak or fire scenario; fuel gas isolation to gas turbines and fired equipment on ESD signal; high-integrity pipeline isolation valves (HIPIV) on long pipelines to limit hydrocarbon release in a pipeline rupture; and subsea production tree master valves that isolate the well on loss of containment from the flowline.
Safety Integrity Level (SIL) Requirements
IEC 61511 requires that Safety Instrumented Functions are assessed for the required Safety Integrity Level (SIL 1, 2, 3, or 4) based on the risk reduction needed. Most process plant EIV applications require SIL 1 or SIL 2. SIL 3 is less common but exists in the highest-consequence applications. SIL 4 is essentially never used in process industry — it implies risk reduction of 10,000:1 from the SIF alone, which is impractical to verify.
The EIV (as the final element of the SIF) must contribute a Probability of Failure on Demand (PFDavg) that, combined with the initiator and logic solver PFD contributions, achieves the overall SIF PFDavg target. For SIL 1, the overall SIF PFDavg must be between 0.1 and 0.01. For SIL 2, between 0.01 and 0.001. The valve manufacturer must provide IEC 61508 failure mode data — specifically the dangerous undetected failure rate (λDU) — to enable the SIL verification calculation. Demand this data as part of the valve procurement package; without it, the SIL verification cannot be completed.
Valve Type Selection for EIV Service
Ball valves are the dominant choice for EIV service in process plant for sizes up to DN400. Their quarter-turn operation provides fast closure (typically 3-15 seconds depending on size and actuator), inherent tight shut-off with soft or metal seats, and straightforward full-bore opening for normal process flow. Trunnion-mounted ball valves are specified for larger sizes (DN100+) where floating ball operating torques would be excessive.
Gate valves (expanding gate or through-conduit) are preferred for pipeline EIV applications where full-bore isolation for pigging is required. API 6D through-conduit gate valves with hydraulic actuators are the standard for mainline pipeline EIV applications.
For the EIV valve selection, specify: fire safe certification (API 607 or ISO 10497) — mandatory for hydrocarbon service; anti-static provision; bidirectional sealing capability; and metal-to-metal backup seat capability if the application includes fire exposure scenarios where soft seats may be destroyed.
Actuator Selection and Fail-Safe Design
The EIV actuator must provide reliable fail-safe closure in all credible fault scenarios. Spring-return pneumatic actuators are the standard for most process plant EIV applications — the spring provides the closing force independently of any external energy source. On loss of instrument air (from compressor failure, air main rupture, or power loss), the spring drives the valve to the safe closed position without any requirement for an active signal or power.
Actuator sizing must account for the maximum valve closing torque under worst-case differential pressure — which may be significantly higher than normal operating differential. For a ball valve EIV on a high-pressure gas system, the worst-case closing scenario might be with full upstream pressure on one side and atmospheric pressure downstream. The actuator spring must provide sufficient torque margin to close the valve against this condition with a safety factor (typically 1.25-1.5x) to account for packing friction variation and seat wear over time.
Accumulator-assisted actuators are used where instrument air supply reliability is a concern — a local accumulator holds sufficient air volume to complete one (or more) valve stroke(s) after instrument air loss. For the most critical EIV applications on remote or unmanned installations, battery-backed electric actuators with spring-return cartridge provide fail-safe closure with complete independence from pneumatic supply.
Solenoid Valve Specification
The solenoid valve (SOV) that vents the actuator supply air on ESD signal is a critical element of the EIV safety function and must be specified with the same rigour as the valve and actuator. For SIL 2 applications, a 1oo2 (one-out-of-two) redundant SOV arrangement is typically required to achieve the necessary PFDavg contribution from the SOV alone. Two SOVs wired in parallel (de-energise-to-operate) means either SOV failing to operate on demand does not prevent valve closure — the redundant SOV ensures the actuator is vented.
SOV specifications for EIV service must include: enclosure rating (IP65 minimum for outdoor service, IP67 for wash-down zones), area classification rating (ATEX/IECEx Zone 1 or Zone 2 as required), power supply voltage and current consumption, coil life expectancy, and proof test interval consistent with the SIF proof test requirement. The SOV failure mode must be confirmed — it must de-energise-to-actuate (fail-safe open in the vent position on power loss) to match the spring-return actuator fail-safe design.
Partial Stroke Testing
Partial Stroke Testing (PST) is the in-service diagnostic technique that strokes the EIV a small distance (typically 10-30% of travel) without taking it out of service, detecting actuator, positioner, or valve mechanical failures that would prevent full stroke on demand. PST improves the diagnostic coverage of the EIV — detecting dangerous undetected failures between proof tests — and can improve the effective PFDavg contribution of the EIV to the SIF, potentially allowing extended proof test intervals without compromising the achieved SIL.
PST can be implemented manually (operator-initiated from the control room), automatically on a timed basis, or triggered by process conditions. The PST system typically uses a smart partial stroke testing positioner or a dedicated PST controller that monitors valve travel and detects if the valve fails to stroke the commanded distance within a defined time window — an indication of mechanical binding or actuator malfunction.
EIV specification is the intersection of process safety and valve engineering, and it requires expertise in both disciplines to get right. The valve that fails to close when the ESD is demanded has made every cost saving, every procurement shortcut, and every missed proof test completely irrelevant. Specify it correctly, test it regularly, and document everything. That’s the standard.