4.3 Furnace Safety Controls & Troubleshooting Sequences
Key Takeaways
- The microprocessor ignition sequence follows a rigid safety progression: thermostat call (R-W) -> limit circuit check -> draft inducer energized -> pressure switch proves draft -> pre-purge (15–45s) -> igniter warmup -> gas valve opens -> flame rectification proven within trial for ignition (4–7s) -> indoor blower on-delay (30–60s).
- Primary high limit switches are normally closed automatic-reset bimetallic discs that open at 160–200°F upon airflow restriction, instantly de-energizing the gas valve while running the indoor blower continuously.
- Flame rollout switches detect flame spilling outside the heat exchanger vestibule caused by restricted flues or cracked cells; they are manual-reset devices requiring physical technician inspection before resetting.
- Differential pressure switches verify sufficient negative static draft across the heat exchanger before energizing the ignition source, protecting against blocked vents, inducer failure, or plugged condensate drains.
- Cracked heat exchangers are diagnosed through visual inspection, borescope cameras, draft disturbance tests, and electronic combustion analysis (detecting flue gas CO spikes or sudden flue O2 increases >1–2% when the indoor blower motor starts).
Gas Furnace Safety Controls & Sequence of Operation
Modern induced-draft gas furnaces rely on an Integrated Furnace Control (IFC) microprocessor that continuously polls safety sensors before, during, and after every heating cycle. If any safety interlock opens or fails to close in the designated sequence, the control board halts ignition and flashes diagnostic LED fault codes.
Master Sequence of Operation (Step-by-Step)
+---------------------------------------------------------------------------------------------------+
| FURNACE IGNITION TIMING & EVENT SEQUENCE |
+---------------------------------------------------------------------------------------------------+
| 1. CALL FOR HEAT: Thermostat closes R to W (24VAC signal applied to IFC). |
| 2. SAFETY SELF-CHECK: IFC verifies High Limit, Rollout, and Aux Limit switches are CLOSED. |
| 3. PRESSURE SWITCH CHECK: IFC confirms Differential Pressure Switch is OPEN (proves not welded). |
| 4. INDUCER START: 120VAC Draft Inducer Blower motor is energized. |
| 5. DRAFT PROVEN: Inducer creates draft; Differential Pressure Switch CLOSES. |
| 6. PRE-PURGE CYCLE: Inducer runs for 15 to 45 seconds to purge residual combustible gases. |
| 7. IGNITER WARMUP: Hot Surface Igniter (HSI) energizes (15 to 45s) or DSI spark activates. |
| 8. GAS VALVE OPENS: 24VAC energized to Main Combination Gas Valve. |
| 9. TRIAL FOR IGNITION (TFI): Main burners light; flame sensor must detect >= 1.0 uA DC in 4-7s. |
| 10. IGNITER OFF: HSI de-energizes after flame proofing. |
| 11. BLOWER ON-DELAY: Indoor circulating blower energizes 30 to 60 seconds after flame confirmation.|
| 12. RUN CYCLE: Continuous safety monitoring (Limits, Flame, Pressure Switch, Rollout). |
| 13. CALL SATISFIED: Thermostat R-W opens; 24VAC gas valve immediately de-energizes and shuts. |
| 14. POST-PURGE: Draft Inducer runs for 15 seconds to clear combustion products from flue. |
| 15. BLOWER OFF-DELAY: Indoor blower runs for 90 to 180 seconds to extract residual plenum heat. |
+---------------------------------------------------------------------------------------------------+
Lockout Logic: Soft vs. Hard Lockout
- Soft Lockout (1-Hour Auto-Reset): Occurs when the furnace fails 3 to 5 consecutive trials for ignition (e.g., due to low gas pressure or an oxidized flame sensor). The IFC disables ignition for 1 hour to prevent gas accumulation, then automatically re-attempts the sequence.
- Hard Lockout (Manual Reset Required): Occurs when a critical safety limit opens (e.g., High Limit open for $>3\text{ minutes}$, Flame Rollout trip, or limit trip with failed blower). The furnace requires a technician to cut line-voltage power at the disconnect switch to reset the microprocessor.
Dedicated Furnace Safety Controls
+---------------------------------------------------------------------------------------------------+
| FURNACE SAFETY CONTROLS MATRIX |
+---------------------------------------------------------------------------------------------------+
| SAFETY DEVICE | ELECTRICAL STATE | TRIP THRESHOLD | RESET TYPE | ACTION ON TRIP|
+---------------------------+-------------------+-------------------+---------------+---------------+
| Primary High Limit | Normally Closed | 160°F to 200°F | Auto Reset | Gas Valve OFF |
| | (24VAC String) | (Supply Plenum) | (Bimetal) | Blower ON Cont|
+---------------------------+-------------------+-------------------+---------------+---------------+
| Flame Rollout Switch | Normally Closed | 250°F to 350°F | Manual Reset | Gas Valve OFF |
| | (24VAC String) | (Burner Chamber) | (Pushbutton) | Hard Lockout |
+---------------------------+-------------------+-------------------+---------------+---------------+
| Differential Pressure SW | Normally Open | -0.40" to -1.20" | Auto (Pressure| Aborts Before |
| | (24VAC Sense) | w.c. Negative | Decay) | Pre-Purge/HSI |
+---------------------------+-------------------+-------------------+---------------+---------------+
| Blower Door Interlock | Normally Open | Push-button Door | Mechanical | Cuts 120VAC |
| | (120VAC Line) | Contact | (Door Close) | Entire Furnace|
+---------------------------+-------------------+-------------------+---------------+---------------+
| Auxiliary High Limit | Normally Closed | 140°F to 160°F | Auto / Manual | Gas Valve OFF |
| | (24VAC String) | (Blower Housing) | Bimetal | Blower ON Cont|
+---------------------------+-------------------+-------------------+---------------+---------------+
1. Primary High Limit Switch
Mounted directly in the supply air plenum above the primary heat exchanger. It utilizes a bimetallic snap-disc calibrated to open if plenum air temperatures exceed $160^\circ\text{F to }200^\circ\text{F}$.
- System Response: Opening the high limit immediately cuts 24VAC to the gas valve while simultaneously energizing the indoor blower motor at high speed to cool the heat exchanger and prevent fire.
- Common Root Causes: Extremely dirty air filters, failed blower motor run capacitor, restricted supply/return registers, closed zoning dampers, or severely undersized ductwork.
2. Flame Rollout Switch
Mounted on the top or sides of the burner vestibule. It detects burning gases spilling out of the heat exchanger face.
- System Response: Shuts off the gas valve and forces a hard lockout requiring manual pushbutton reset.
- Common Root Causes: Blocked secondary condensing heat exchanger coil, restricted chimney/flue vent, birds' nests in exhaust termination, extreme building depressurization/downdraft, or severely cracked heat exchanger cells.
3. Differential Pressure Switch
A diaphragm-actuated microswitch connected via silicone tubing to the draft inducer housing and collector box. It measures the negative static pressure created by the combustion draft fan.
- Operating Principle: The switch is Normally Open. The IFC verifies it is open before starting the inducer (proving contacts are not welded shut). Once the inducer reaches speed and pulls negative draft (e.g., $-0.65\text{ in. w.c.}$), the diaphragm pulls the switch Closed.
- Common Root Causes of Failure: Clogged condensate trap in 90%+ furnaces (water backs up into collector box), cracked/kinked silicone sensing tubing, blocked vent/intake pipe, failed inducer motor, or loose inducer blower impeller.
Troubleshooting Cracked Heat Exchangers
A breach or crack in a heat exchanger allows deadly carbon monoxide and combustion flue gases to be drawn into the circulating supply air stream, contaminating the occupied living space.
+---------------------------------------------------------------------------------------------------+
| CRACKED HEAT EXCHANGER DIAGNOSTIC PROTOCOLS |
+---------------------------------------------------------------------------------------------------+
| METHOD 1: VISUAL & BORESCOPE INSPECTION |
| - Direct camera inspection of high-stress areas: welded seams, clamshell eyelets, and bends. |
| - Physical signs: Rust flakes, white mineral trails, soot marks, or visible structural fractures. |
+---------------------------------------------------------------------------------------------------+
| METHOD 2: FLAME DISTURBANCE & AIR MOVEMENT TEST |
| - Fire burners and visually observe flame pattern through sight glass. |
| - The instant the indoor circulating blower starts: if flames flutter, waver, roll back, or jump |
| violently, supply air pressure is penetrating the heat exchanger breach. |
+---------------------------------------------------------------------------------------------------+
| METHOD 3: ELECTRONIC COMBUSTION ANALYSIS (FLUE GAS SHIFT TEST) |
| - Insert calibrated combustion analyzer probe into exhaust stack before draft inducer. |
| - Record baseline Flue O2 %, Flue CO ppm, and Stack Temperature during pre-purge and burner fire.|
| - When indoor blower motor energizes (30-60s later): |
| * A sudden INCREASE in Flue O2 by > 1.0% to 2.0% confirms indoor supply air dilution. |
| * A sudden SPIKE in Flue CO (e.g., from 40 ppm to 400+ ppm) confirms flame chilling/breach. |
+---------------------------------------------------------------------------------------------------+
Safety Mandate: Under ACCA guidelines and national safety standards, if a heat exchanger is confirmed to be cracked or breached, the furnace must be immediately shut off, red-tagged, and isolated at the gas and electrical shutoffs, and the customer must be notified in writing. Field welding or patching of residential heat exchangers is strictly prohibited by code.
What immediate electrical response occurs when a furnace primary high limit switch opens during a normal heating cycle?
During a combustion analysis test, which flue gas reading shift upon indoor blower motor startup definitively indicates a cracked or breached heat exchanger?
A technician observes that a draft inducer motor starts on a call for heat, runs continuously for 60 seconds, but the hot surface igniter never glows and no ignition occurs. What is the most probable fault?