15.3 Elevator Recall, HVAC Shutdown, Door Release, and Suppression Release

A fire alarm system that only rings horns has not finished the job in a building with elevators, air handlers, fire-door hold-opens, or a pre-action valve. Those outputs are emergency control functions: the FACU, or a listed releasing panel, changes the state of another building system when a designated initiating device operates.

The New York DOS exam will mix four functions that share a control module and a set of contacts but have different life-safety goals:

1. Elevator Phase I recall — get the cars to a safe landing and take them away from the public.
2. HVAC shutdown or smoke control — stop ordinary air movement, or start the engineered smoke-control sequence.
3. Door release — drop hold-open magnets so fire doors latch.
4. Suppression release — trip a listed pre-action, deluge, or clean-agent releasing circuit.

The occupancy codes and the approved sequence of operations decide which of those functions exist. NFPA 72 and the equipment listing decide how the fire-alarm side is wired and supervised. ASME A17.1/CSA B44 (the elevator safety code) decides how the elevator responds once the recall inputs change state. You do not need to recite subsection numbers you have not opened. You do need the commonly taught interaction.

Elevator Phase I recall: primary versus alternate

Phase I Emergency Recall Operation (firefighter’s emergency operation) automatically returns elevator cars to a designated landing when smoke is detected in the elevator spaces. Occupants are not delivered onto a fire floor. Firefighters then know where the cars are.

Two landings appear on every recall question:

• The designated (primary) level is the normal recall floor, usually the lobby or main egress level the fire department will use.
• The alternate level is the backup landing used when the designated-level lobby itself is the one in alarm, so cars do not open into that smoke.

Initiating devices that are commonly taught as allowed to start Phase I are automatic detectors in:

• each elevator lobby served by those cars,
• the elevator machine room, machinery space, control room, or control space, and
• the hoistway, where detection is provided there (often because sprinklers are present in the hoistway).

Those detectors belong on the building fire alarm system. Locally powered smoke alarms and stand-alone heat detectors are the wrong devices for recall. Manual fire alarm boxes and smoke detectors in ordinary corridors or offices are not supposed to start recall unless the AHJ has required that extra input. A pull station in the mail room should not dump every car to the lobby.

Where the cars go

Use this decision tree — it is the one installer courses still drill:

• Smoke in a lobby that is not the designated level → Phase I to the designated / primary landing.
• Smoke in the designated-level lobby → Phase I to the alternate landing.
• Smoke in the machine room or hoistway that is not at the designated level → Phase I to the designated landing.
• Smoke in a machine room or hoistway that is associated with the designated level → treat it like a designated-level fire: cars go to the alternate landing so they do not park in the involved space.

The fire-hat (firefighter helmet) indicator in the car is commonly taught this way: a steady hat when lobby detection starts recall; a flashing hat when machine-room or hoistway detection started the recall, so firefighters know the elevator equipment space itself may be involved. Confirm the project sequence of operations — do not invent a hat-flash rule the elevator contractor has wired differently — but expect that distinction on a DOS-style item.

Phase II is in-car firefighter operation: a key switch in the car lets firefighters run the elevator with door control under their command. The fire-alarm trade proves the detector and the recall relays. The elevator trade proves the car actually travels, parks, and opens, and that Phase II works. If each trade only tests its half, the building can have two green logbooks and cars that still will not recall. Acceptance testing has to exercise the whole chain.

Shunt trip when sprinklers wet the elevator equipment

Where sprinklers are installed in the machine room or hoistway, a shunt-trip arrangement is commonly used to remove power from the elevator before those sprinklers discharge, so a live traction machine is not hit with water. A heat detector is typically placed near each such sprinkler to operate the shunt trip. The power disconnect is supervised so a breaker that is already open shows as a supervisory or trouble condition. This is coordination work: sprinkler fitter, electrician, elevator contractor, and alarm licensee. The alarm side still owns the detection and the supervisory interface.

Environments that will nuisance-alarm a spot smoke detector (an unheated garage lobby, a dusty hoistway) may use a listed heat detector or another method the AHJ accepts for that space. The principle stays the same: the device that starts recall is a recall-initiating device on the building fire alarm system, not a hardware-store smoke alarm glued to the transom.

HVAC fan shutdown and smoke-control interfaces

Ordinary HVAC shutdown stops supply and return fans so the air-handling unit does not move smoke into other zones. A duct smoke detector, an area smoke detector, or a general-alarm output can drive that shutdown, depending on the approved sequence. The fire-alarm output is usually a control module or a relay: contacts change state, the motor starter drops out, and the FACU supervises the circuit.

Smoke control is a different animal. Stair pressurization, atrium exhaust, and firefighter smoke-control panels are engineered sequences. Some fans must stop. Some fans must start and keep running. If you treat every air handler as “shut it down on any alarm,” you can disable the system that was designed to keep a stair usable. Read the smoke-control sequence. Use the outputs the drawings assigned. Do not land a single “HVAC shutdown” relay on a pressurization fan.

Duct detectors that you met in Chapter 14 are often the initiating side of a unit shutdown. This chapter’s point is the control side: the FACU must operate a listed interface, the circuit must be supervised, and the function must be tested by proving the fan actually stopped (or started) — not only that a LED on the module lit.

New York AHJs, including a local fire marshal acting under GBL 69-z, will ask to see that interface work during inspection. FDNY in the city has its own smoke-control and elevator witness practices. Those local inspections do not rewrite 195.2, and they do not turn this exam into a city COF test. They do mean the installed sequence has to match the approved documents.

Door hold-open magnets: release on alarm, fail-safe

Fire doors and smoke doors are often held open during the business day by electromagnetic door holders (wall or floor magnets, or closer-mounted holders). On a fire alarm, those magnets must release so the closer can shut and latch the door and restore the barrier.

Teach the power logic out loud:

• The magnet is energized to hold the door open.
• Alarm removes that energy (or opens the circuit) and the door closes.
• Loss of power also releases the door. That is fail-safe life-safety behavior: the door fails to the closed, protective position.

Do not confuse hold-open magnets with fail-secure electric locks that stay locked when power dies. An access-control maglock on an egress door has its own unlocking rules; those are not a substitute for fire-door hold-open release. If the exam says “door holder” or “hold-open magnet,” the answer is release and close, not “lock the opening.”

Wiring is typically a control circuit from the FACU — a control module, a dedicated release circuit, or contacts that de-energize a holder power supply. Holders on a notification-appliance circuit are a field shortcut that can fail supervision or overload the NAC; use the interface the panel listing and the drawings allow. After release, walk the door: it must close and latch. A magnet that dropped while the closer was broken has not completed the emergency control function.

Suppression release: listed panels, and the 195.2 pipe split

Releasing is fire-alarm work that trips a suppression system. The three systems the exam expects you to recognize are:

• Pre-action. Sprinkler piping is dry or charged with air. Detection (often two detectors or a cross-zone arrangement) opens the pre-action valve so water fills the pipe. Individual closed heads then open as they would on a wet system. Used where accidental discharge is costly (freezers, computer rooms, museums).
• Deluge. Heads or nozzles are open. Detection opens the deluge valve and water (or foam) flows from every outlet at once. Used on high-challenge hazards.
• Clean agent (and similar special-extinguishing systems). Detection starts a predischarge warning, an abort station may be provided, and a listed releasing circuit opens the agent cylinders.

The releasing device — solenoid, actuator, or releasing module — must be driven by a listed releasing control unit. Some FACUs carry a releasing listing. Some projects use a dedicated releasing panel that reports to the building FACU. Either way, you do not operate a suppression solenoid from a spare unlisted relay and a hope.

Cross-zoning (two detectors in alarm before release), abort switches, release-disable or maintenance switches, and predischarge timers are part of the approved releasing sequence. They exist to prevent a single dirty detector from dumping agent. They are not optional extras you delete to save a module.

What 195.2 does and does not exempt

19 NYCRR 195.2(c)(1) says a DOS security or fire alarm installer license is not required for the installation, maintenance, or servicing of sprinkler systems. That exemption is the piping — the suppression contractor’s valves, mains, and heads.

It does not move the following off the alarm license:

• Waterflow switches and the conductors that carry them to the FACU.
• Tamper switches on control valves, and other supervisory switches (air pressure, tank level) that the fire alarm must supervise.
• Releasing detection, releasing circuits, abort stations, and the listed releasing panel.
• The monitor and control modules that tie those devices to the FACU.

195.2(c)(2) still leaves line-voltage connections to an outlet, junction box, or distribution panel to the electrical trade. A releasing panel’s 120-volt feed is electrician work. The low-voltage releasing circuit is alarm work.

If a freezer pre-action job has a sprinkler fitter rolling pipe and an unlicensed helper landing the releasing solenoids “because it is part of the sprinkler,” that helper is in the alarm business without a license. If an alarm technician starts cutting sprinkler pipe, that technician has left the alarm license and entered someone else’s trade. The exam wants that boundary, not a speech about who is friendlier on the job.

Monitor modules versus control modules

Addressable systems use modules to reach devices that are not smoke or heat sensors. Keep the direction of information straight.

A waterflow switch on a wet riser is a monitor story: the sprinkler trade mounts the paddle; the alarm trade lands the supervised circuit and programs an alarm. A door holder is a control story: the FACU removes power so the door closes. Elevator recall is usually several control outputs (designated-level recall, alternate-level recall, and the fire-hat / flashing-hat input the elevator controller expects) plus the monitor-side smoke detectors that start the sequence.

Using the wrong module is a classic service call. A control module cannot “see” a tamper switch. A monitor module cannot trip a deluge solenoid. Conventional systems do the same jobs with IDC zones (inputs) and relay or NAC-style outputs; the names change, the direction does not.

GBL 69-z and the inspection you should expect

After the modules are programmed, GBL 69-z still lets local law govern inspection of fire alarms by a fire marshal or other person designated under that local law. Expect the inspector to ask for a recall test that actually moves the cars, an HVAC or smoke-control test that matches the sequence of operations, door-release walks that end with latched doors, and a releasing-system test performed with the suppression contractor under a safe inhibit or test mode. The local inspection does not replace the DOS license, and it does not authorize an unlicensed company to install the interfaces.

Worked scenarios

Scenario A. Smoke in the third-floor elevator lobby. Cars should Phase I to the designated landing, park, and open. A pull station on the third-floor corridor should not start that recall on a typical sequence.

Scenario B. Smoke in the designated-level lobby. Cars should Phase I to the alternate landing. If they come to the smoky main lobby, the primary/alternate programming is backwards — a common commissioning defect.

Scenario C. A hold-open magnet stays energized during a general alarm. Occupants walk through an open fire door into a smoke barrier that no longer exists. That is a failed emergency control function, not a “door hardware” problem you can leave for next month.

Scenario D. A pre-action valve in a records room. The sprinkler contractor owns the pipe and the valve body. The DOS-licensed alarm company owns the detectors, the listed releasing panel, the abort station, and the monitor modules on valve tamper and waterflow. 195.2 does not let the sprinkler exemption swallow that electrical interface.

Exam traps

• Recall is not “any alarm in the building.”
• Designated-level lobby smoke goes alternate, not primary.
• HVAC shutdown is not the same sequence as engineered smoke control.
• Door holders are fail-safe release, not fail-secure locking.
• Sprinkler pipe is exempt from the alarm license; waterflow, tamper, and releasing are not.
• Monitor = input. Control = output. Mixing them is a wrong answer and a dead solenoid.