8.1 Elevator Emergency Recall Operation & Shunt Trip Interfaces

Key Takeaways

  • Under NFPA 72 Section 21.3 and ASME A17.1 Rule 2.27.3.2, an elevator lobby smoke detector on the designated primary landing recalls the car to the designated alternate landing, while lobby detectors on all other floors recall the car to the primary landing.
  • The firefighter's hat visual annunciator flashes only when smoke or heat is detected in the elevator machine room, control room, control space, or hoistway, warning emergency responders that the elevator equipment environment is compromised.
  • Smoke detectors are prohibited from being installed in elevator hoistways unless the hoistway is protected by an automatic sprinkler system or required for hoistway venting per NFPA 72 Section 21.3.6.
  • Elevator power shunt trip per NFPA 72 Section 21.4 requires a heat detector installed within 24 inches (610 mm) of each sprinkler head, rated with a lower temperature and faster thermal response (RTI) than the sprinkler head.
  • Under NFPA 72 Section 21.4.3, control circuits utilized to trip elevator main-line power must be continuously monitored for integrity; loss of shunt trip control power must initiate a supervisory or trouble signal at the FACU.
Last updated: September 2026

8.1 Elevator Emergency Recall Operation & Shunt Trip Interfaces

Core Overview: The interface between fire alarm systems and vertical transportation is one of the most heavily scrutinized life safety intersections in commercial building design. Governed jointly by NFPA 72 (National Fire Alarm and Signaling Code, 2022 edition, Chapter 21), ASME A17.1 / CSA B44 (Safety Code for Elevators and Escalators), and IBC Chapter 30, elevator emergency operations require flawless execution of two primary safety functions: Phase I Emergency Recall Operation (capturing cars and delivering them safely to emergency responders) and Elevator Power Shunt Trip (cutting main feeder power before sprinkler discharge occurs to prevent hoistway brake failure or uncontrolled car movement). Engineering technologists must master initiating device layout, control relay placement, relay contact isolation, and the complex operational logic governing primary landing, alternate landing, and firefighter hat visual annunciation.


Regulatory Framework & Code Coordination

Designing fire alarm interfaces for elevators requires coordinating requirements across three distinct code bodies. Discrepancies between the electrical contractor, fire alarm designer, elevator contractor, and mechanical engineer frequently lead to failed acceptance testing if code responsibilities are not clearly demarcated.

+-------------------------------------------------------------------------+
|                   ELEVATOR LIFE SAFETY CODE INTERSECTION                |
|                                                                         |
|   NFPA 72 (CHAPTER 21)                  ASME A17.1 / CSA B44            |
|   - Initiating device spacing           - Elevator car operating panel  |
|   - Circuit integrity monitoring        - Phase I recall controller     |
|   - Shunt trip heat detection           - Phase II in-cab firefighter   |
|   - Output interface relays             - Hat annunciator lamp behavior |
|                     \                         /                         |
|                      v                       v                          |
|               +-------------------------------------+                   |
|               |     BUILDING LIFE SAFETY SYSTEM     |                   |
|               |  (IBC 2021 CHAPTER 30 INTERFACES)   |                   |
|               +-------------------------------------+                   |
+-------------------------------------------------------------------------+
  • NFPA 72 Section 21.3: Dictates the selection, placement, and performance of initiating devices dedicated to elevator recall and visual warning signals.
  • NFPA 72 Section 21.4: Governs the thermal initiating devices, power supply supervision, and control relays utilized for elevator power shunt trip.
  • ASME A17.1 / CSA B44 (Section 2.27): Establishes the operational response of the elevator controller once fire alarm dry contacts transition state, including door reopening sequences, call cancellation, and Phase II in-cab firefighter operations.
  • IBC Section 3005 & 3006: Dictates building construction requirements, elevator lobby enclosure mandates, and hoistway/machine room sprinkler protection.

Phase I Emergency Recall Operation

Phase I Emergency Recall is an automated operating mode that removes passenger elevators from general public use and summons them non-stop to a designated floor. Upon arrival, the elevator doors open and remain open, permitting passengers to exit safely and making the cars immediately available to arriving firefighters.

Initiating Device Layout (NFPA 72 Section 21.3.5)

To trigger Phase I recall automatically, system-connected smoke detectors (or approved heat detectors where environmental conditions dictate) must be installed in three specific locations:

  1. Elevator Lobbies: Installed on every floor served by the elevator bank. Per NFPA 72 Section 17.7.5.4.2, lobby smoke detectors must be located on the ceiling within 21 feet (6.4 m) of the centerline of each elevator door controlled by the detector.
  2. Elevator Machine Rooms, Control Rooms, and Machinery Spaces: Dedicated smoke detectors must be installed in all spaces housing elevator driving machines, motor generator sets, or microprocessor dispatch controllers.
  3. Elevator Hoistways: Dedicated detectors are installed at the top of the elevator hoistway ONLY when automatic sprinklers are installed inside the hoistway. Under NFPA 72 Section 21.3.6, smoke detectors are strictly prohibited in hoistways that do not contain sprinklers, because high-velocity air drafts, piston effects, brake dust, and grease create severe false alarm risks.

Designated Primary vs. Alternate Landing Recall Logic

The fire alarm control unit (FACU) must provide independent, dedicated dry-contact outputs to the elevator controller to execute Phase I recall. The recall logic operates on a strict spatial hierarchy:

  • Designated Primary Landing: The primary recall level is designated by the local Authority Having Jurisdiction (AHJ) and is typically the building's main ground-floor egress level (Level 1 / Street Level) providing direct exterior access for fire apparatus.
  • Designated Alternate Landing: The alternate recall level is approved by the AHJ and is typically an upper or lower floor (such as Level 2 or Basement) that provides an unimpeded path of egress away from the primary lobby.
+-------------------------------------------------------------------------+
|                    PHASE I RECALL LOGIC FLOWCHART                       |
|                                                                         |
|   +-----------------------------------------------------------------+   |
|   |                   INITIATING DEVICE ACTUATION                   |   |
|   +-----------------------------------------------------------------+   |
|               |                                         |               |
|               v                                         v               |
|   [ LOBBY DETECTOR ON ANY FLOOR ]            [ LOBBY DETECTOR ON THE ]  |
|   [ OTHER THAN PRIMARY LEVEL    ]            [ PRIMARY LEVEL ITSELF  ]  |
|               |                                         |               |
|               v                                         v               |
|   [ CARS RECALL TO DESIGNATED   ]            [ CARS RECALL TO DESIGNATED]  |
|   [     PRIMARY LANDING         ]            [    ALTERNATE LANDING     ]  |
|   [ (Doors open and stay open)  ]            [ (Doors open & stay open) ]  |
+-------------------------------------------------------------------------+

Machine Room and Hoistway Recall Hierarchy

  • Elevator Machine Room / Hoistway Detector Actuation: Recalls the elevator cars to the Designated Primary Landing, UNLESS the machine room or hoistway space is physically located at the primary landing. If the machine room is located at the primary level, activation of its detector must recall the cars to the Designated Alternate Landing.
Initiating Device LocationSpecific Trigger ConditionElevator Car DestinationFirefighter Hat Indicator Status
Elevator Lobby (Floors 2 through Roof)Smoke detected in corridor/lobbyPrimary Designated Landing (Level 1)STEADY (Continuous illumination)
Elevator Lobby (Primary Level / Level 1)Smoke detected at primary exit floorAlternate Designated Landing (Level 2)STEADY (Continuous illumination)
Elevator Machine Room / Control RoomSmoke or heat detected in equipment roomPrimary Landing (or Alternate if MR on 1)FLASHING (Warning signal)
Elevator Hoistway (Top of shaft)Smoke or heat detected in sprinklered shaftPrimary Landing (or Alternate if shaft base)FLASHING (Warning signal)

The Firefighter's Hat Annunciator: Steady vs. Flashing

Inside every modern passenger elevator car operating panel (COP) and at the designated landing call station, ASME A17.1 mandates an illuminated visual indicator depicting a firefighter's helmet. Firefighters entering a building during a structural fire rely on this indicator to determine whether it is safe to operate the car in Phase II In-Car Emergency Operation.

+-------------------------------------------------------------------------+
|                   FIREFIGHTER HAT SIGNAL DIFFERENTIATION                |
|                                                                         |
|   STEADY ILLUMINATION:                                                  |
|   +-----------+   Phase I Emergency Recall is active.                   |
|   |  [HAT]    |   Initiated by a normal floor lobby smoke detector.     |
|   | (STEADY)  |   Hoistway and machine room environments are safe.      |
|   +-----------+   Firefighters MAY use elevator under Phase II control. |
|                                                                         |
|   FLASHING ILLUMINATION:                                                |
|   +-----------+   CRITICAL WARNING: Fire/Smoke detected in the          |
|   |  [HAT]    |   elevator machine room, control room, or hoistway!     |
|   | (FLASHING)|   Structural cables, traction drives, or car enclosure  |
|   +-----------+   may fail catastrophically. DO NOT USE ELEVATOR.       |
+-------------------------------------------------------------------------+

[!IMPORTANT] Critical Exam Rule — Hat Signal Activation: The fire alarm system must provide a separate, dedicated control relay contact to the elevator controller specifically for hat flashing. Under NFPA 72 Section 21.3.8 and ASME A17.1 Rule 2.27.3.2.6:

  • Lobby smoke detectors illuminate the hat STEADY.
  • Machine room, control room, machinery space, and hoistway detectors cause the hat to FLASH.
  • If an elevator is already recalled with a steady hat, and a machine room detector subsequently activates, the steady hat must immediately transition to FLASHING.

Elevator Power Shunt Trip Operations (NFPA 72 Section 21.4)

Elevator power shunt trip is a catastrophic safety intervention designed to disconnect primary high-voltage electrical feeder power to the elevator driving machine before water from a fire sprinkler system discharges into the hoistway or machine room.

Why Shunt Trip is Mandatory When Sprinklers are Present

When water discharges from an automatic sprinkler onto a hot traction hoist machine or hydraulic pump unit, three life-threatening hazards occur:

  1. Water on elevator traction wire ropes and drive sheaves causes instantaneous loss of friction, resulting in uncontrolled car counterweight descent or cab plummeting.
  2. Water inside elevator cab guide shoes or electrical brake solenoids can short-circuit safety interlocks, releasing the mechanical brake while the car is between floors.
  3. Electrical arcing across 480VAC three-phase motor terminals creates an immediate electrocution hazard for trapped occupants and responding firefighters.

Under IBC Section 3005.5 and ASME A17.1 Rule 2.8.3.3, if fire sprinklers are installed in elevator machine rooms, control spaces, or hoistways, an automatic means to disconnect main-line power must be provided.

+-------------------------------------------------------------------------+
|                   ELEVATOR SHUNT TRIP PHYSICAL SENSING                  |
|                                                                         |
|                       CEILING / ROOF DECK                               |
|   ===========================================================           |
|                 |                                   |                   |
|                 | Rigid Pipe                        | Electrical Box    |
|                 v                                   v                   |
|         +---------------+                   +---------------+           |
|         |   SPRINKLER   |                   | HEAT DETECTOR |           |
|         |     HEAD      | <--- <= 24" ----> |  (SHUTDOWN)   |           |
|         | (165°F / Ord) |     (610 mm)      | (135°F / Ord) |           |
|         +---------------+                   +---------------+           |
|                                                                         |
|   Sequence: Heat detector trips at 135°F -> FACU energizes Shunt Trip   |
|   circuit breaker -> Main power drops -> Sprinkler opens at 165°F.      |
+-------------------------------------------------------------------------+

Shunt Trip Initiating Device Placement & Temperature Rating

To ensure power is disconnected prior to sprinkler discharge, NFPA 72 Section 21.4 establishes rigid detection criteria:

  1. Location: Heat detectors dedicated to shunt trip must be installed within 24 inches (610 mm) of each sprinkler head (NFPA 72 Section 21.4.2).
  2. Temperature Rating & Response Time: The heat detector must have a lower temperature rating and a faster response time index (RTI) than the adjacent sprinkler head:
    • Where ordinary temperature sprinklers (165°F / 74°C) are installed, heat detectors rated at 135°F (57°C) must be utilized.
    • Where intermediate temperature sprinklers (212°F / 100°C) are installed, heat detectors rated at 175°F to 190°F are specified.
  3. Prohibition of Waterflow Switches for Shunt Trip: Installers frequently ask if a sprinkler waterflow switch can trip the shunt breaker. NFPA 72 Section 21.4.1 strictly prohibits the use of waterflow switches with time-delay retards for shunt trip, because the retard delay (typically 30–45 seconds) would allow water to discharge and flood the elevator machinery for over half a minute before electrical power was disconnected.

Shunt Trip Power Supply & Circuit Monitoring (NFPA 72 Section 21.4.3)

The electrical mechanism that opens the main elevator feeder breaker is a shunt trip coil located inside the distribution switchgear. Operating this coil requires an external control voltage (typically 120VAC or 24VDC).

  • Mandatory Integrity Monitoring: Under NFPA 72 Section 21.4.3, the power source supplying the shunt trip circuit breaker coil must be continuously monitored for integrity by the fire alarm system.
  • Loss of Control Power: If the breaker supplying power to the shunt trip coil trips, or if control power is lost, the fire alarm system must instantly annunciate a visual and audible supervisory or trouble signal at the FACU. An unmonitored shunt trip control circuit is a severe life safety violation because a fire would result in sprinklers discharging without power ever being cut.

Interface Wiring & Control Relay Proximity (NFPA 72 Section 21.2.4)

All control circuits interfacing the fire alarm system with elevator recall and shunt trip controllers must comply with strict physical proximity mandates:

  • The 3-Foot Rule: Under NFPA 72 Section 21.2.4, control relays or addressable control output modules must be located within 3 feet (0.9 m) of the elevator controller or motor starter cabinet.
  • Conduit Protection: The electrical conductors interconnecting the fire alarm relay contacts and the elevator controller input terminals must be enclosed in a rigid or flexible metallic raceway.
  • Contact Segregation: A standard multi-car elevator bank requires at least four independent, electrically isolated dry-contact outputs from the fire alarm system:
    1. Output 1: Primary Designated Recall contact.
    2. Output 2: Alternate Designated Recall contact.
    3. Output 3: Firefighter Hat Visual Annunciation (Flashing command).
    4. Output 4: Power Shunt Trip Actuation contact (operating the switchgear shunt coil).

Realistic Exam Traps & NICET Level III Gotchas

Trap 1: Smoke Detectors in Non-Sprinklered Hoistways

  • Exam Scenario: A job specification calls for installing addressable smoke detectors at the top of every elevator hoistway in a 10-story hotel, but the hoistways are completely dry (no sprinklers installed).
  • Code Reality: Red tag. NFPA 72 Section 21.3.6 explicitly states that smoke detectors shall not be installed in hoistways unless automatic sprinklers are installed in the hoistway or smoke detection is required for hoistway venting/pressurization. Installing smoke detectors in dry hoistways results in chronic false alarms caused by elevator air movement and shaft debris.

Trap 2: Using Sprinkler Waterflow to Shunt Trip Elevator Power

  • Exam Scenario: A contractor connects the auxiliary dry contacts of a sprinkler riser vane-type waterflow switch directly to the elevator shunt trip breaker to save the cost of installing heat detectors in the machine room.
  • Code Reality: Violation of NFPA 72 Section 21.4.1. Vane-type waterflow switches have mechanical retards (up to 90 seconds) to prevent false alarms from water surges. Even with a 0-second retard, waterflow switches actuate after water is already flowing through the piping and discharging out the head. Shunt trip must disconnect power before water discharge begins, which can only be accomplished via a heat detector with a lower thermal threshold.

Trap 3: Elevator Recall Output Programming on the Primary Floor

  • Exam Scenario: A technician programs all lobby smoke detectors on Floors 1 through 5 to activate the Primary Recall relay.
  • Code Reality: Severe programming error. If smoke activates the detector in the Level 1 lobby (the primary landing), the car would recall directly to Level 1, opening its doors into a flaming, smoke-filled lobby and killing the occupants inside. Level 1 must be programmed exclusively to activate the Alternate Recall relay.
Test Your Knowledge

An engineering technologist is designing an elevator power shunt trip interface for a high-rise bank where automatic sprinklers are installed in the elevator machine room and hoistway ceiling per NFPA 13. According to NFPA 72 Section 21.4 and ASME A17.1, what are the precise requirements regarding the location, temperature rating, and circuit monitoring for the initiating devices dedicated to shunt trip actuation?

A
B
C
D
Test Your Knowledge

During acceptance testing of a 10-story commercial office building, a fire alarm technician tests the elevator emergency operations interface. The building's designated primary recall landing is Level 1, and the designated alternate landing is Level 2. When the smoke detector in the Level 1 elevator lobby is actuated, what is the required operational recall response of the elevators and what is the visual display on the firefighter's hat annunciator?

A
B
C
D
Test Your Knowledge

A fire alarm design plan specifies smoke detectors mounted inside an elevator hoistway that does not contain any fire sprinklers. Under NFPA 72 Section 21.3.6, how should a Level III engineering technologist resolve this design detail during submittal review?

A
B
C
D