Boiler Interlocks, Trips and Burner Management
A boiler’s controls keep it running well; its protections stop it from running unsafely. Interlocks prevent a dangerous action from starting, and trips shut the boiler down when a dangerous condition appears. Together they are only as good as their independence and their testing.
You'll learn
- Distinguish controls, interlocks and trips
- List the main boiler trips and what each prevents
- Describe what a burner management system does
- Test protections and avoid defeating them
Before this: Burners and flame safety, Level control elements
Controls, interlocks and trips
- Controls keep the boiler at its set points: pressure, level, combustion.
- Interlocks stop an action unless conditions are safe: the burner cannot light until the purge is complete and air flow is proven.
- Trips shut the boiler down when a dangerous condition occurs: low water, flame failure, high pressure.
Protections are deliberately separate from controls. If the same sensor both controls the level and trips the boiler on low level, one failure removes both.
The usual trips
| Trip | Protects against |
|---|---|
| Low-low water level | Overheating of uncovered heating surfaces |
| High steam pressure | Over-pressure, ahead of the safety valves |
| Flame failure | Unburnt fuel accumulating in the furnace |
| Combustion air or fan failure | Firing without enough air |
| Low or high fuel pressure, low oil temperature | Poor combustion, flame instability |
| ID fan failure or high furnace pressure (solid fuel) | Flame and gas pushed into the boiler house |
| Emergency stop | Any condition an operator judges dangerous |
Trips that matter most lock out: the boiler cannot restart until the cause is cleared and the lockout is reset by hand, so it never cycles back on into the same danger.
Burner management and testing
A burner management system (BMS) is the safety logic around the burner: it enforces purge, proves ignition and main flame, supervises the flame continuously, monitors the fuel valves and the trip inputs, and shuts the fuel off when any condition fails. It is separate from the combustion control that sets the firing rate, and is usually built from certified flame safeguards or safety-rated controllers.
- Test every trip on a schedule, by creating the real condition where it is safe to do so — lowering the water, simulating flame loss — not only by pressing test buttons.
- Record each test, who did it and the result.
- Any bypass of a protection, for maintenance or testing, is controlled by a written permit, time-limited, and removed before the boiler is left.
- After a trip, find the cause before resetting.
Key takeaways
- Controls hold set points; interlocks prevent unsafe starts; trips stop the boiler on danger.
- Main trips: low-low water, high pressure, flame failure, air and fuel failures, ID fan failure.
- A burner management system enforces purge, flame proving and supervision, separately from combustion control.
- Test protections by real conditions, record them, and never leave one bypassed.