8.4 Emergency Control Functions: Elevators, HVAC, Doors and Egress
Key Takeaways
- Elevator Phase I recall is initiated by smoke detectors in elevator lobbies, machine rooms, machinery spaces, control rooms and control spaces, and hoistways where required.
- A detector at the designated level recalls cars to the alternate level; detectors at any other level recall cars to the designated level.
- Where sprinklers are installed in an elevator machine room or hoistway, elevator power shutdown (shunt trip) must be initiated by a detection device other than the sprinkler, and must occur before sprinkler discharge.
- Duct smoke detection shuts down the air handling equipment it serves; it is not a substitute for open-area detection and normally does not initiate general evacuation.
- Door hold-open devices release on alarm, and electrically locked egress doors must unlock on the initiating signals required by the applicable code so occupants can leave.
Why This Section Matters
Emergency control functions are where a fire alarm system stops being a warning device and starts operating the building. They are also where a programming error has physical consequences — a car that parks on the fire floor, a door that stays locked, an air handler that keeps pushing smoke. NFPA 72 Chapter 21 defines the interfaces; the sequence of operation documents them.
1. Elevator Recall — Phase I Emergency Recall Operation
Which detectors initiate recall
| Location | Function |
|---|---|
| Elevator lobbies (each floor served) | Primary recall initiation |
| Elevator machine rooms, machinery spaces, control rooms and control spaces | Recall initiation |
| Elevator hoistways where sprinklers are installed or otherwise required | Recall initiation |
Detectors used for elevator recall are dedicated to that function: general area smoke detection elsewhere on the floor does not initiate recall, so that a fire remote from the elevator does not needlessly remove the cars from service.
Which way the cars go
| Detector that operates | Cars recall to |
|---|---|
| Any detector at the designated level (usually the main lobby) | The alternate level |
| A detector at any other level, or in a machine room, machinery space, control room, control space, or hoistway | The designated level |
The logic is simple once stated: never send the cars to the floor that is on fire. If the designated level is compromised, the cars go somewhere else.
A visible signal (the flashing hat/helmet symbol) in the car indicates Phase I operation. Phase II is firefighters' in-car operation and is initiated by the fire service with a key, not by the fire alarm system.
2. Elevator Power Shutdown (Shunt Trip)
Where automatic sprinklers are installed in the elevator machine room, machinery space, control room, control space or hoistway, water on the elevator's electrical equipment can cause uncontrolled movement or brake failure. NFPA 72 Chapter 21 and the elevator safety code therefore require the elevator's main line power to be disconnected before sprinkler discharge.
Two requirements dominate the exam:
- The shutdown must be initiated by a detection device other than the sprinkler itself — typically a fixed-temperature heat detector located within the required distance of each sprinkler and with a temperature rating below the sprinkler's operating temperature, so it operates first.
- The shutdown must occur before water is applied, which is why the heat detector's rating and location are prescribed rather than left to judgment.
Sequence: heat detector at the sprinkler operates → shunt trip coil energizes → elevator main line disconnect opens → sprinkler operates on a de-energized elevator.
Note that recall (a smoke detector function) and shutdown (a heat detector function) are different control functions with different initiating devices. Confusing them is a classic exam trap.
3. HVAC Control
| Initiating device | Typical control action | Signal type at the panel |
|---|---|---|
| Duct smoke detector in supply or return | Shut down or otherwise control the air handling unit it serves | Commonly supervisory for a shutdown-only function; alarm where the code requires |
| Area smoke detection in a smoke-control zone | Operate dampers and fans per the smoke control sequence | Alarm |
| General alarm | Shut down or reconfigure air handling per the design | Alarm |
Two principles:
- A duct smoke detector's purpose is to prevent the distribution of smoke through the duct system. NFPA 72 is explicit that duct detection is not a substitute for open-area detection and is not intended to provide life-safety warning for occupants.
- Where a duct detector's only function is to shut down the fan, it commonly initiates a supervisory signal rather than general evacuation, so that a dirty detector does not evacuate the building. The design decision must appear in the sequence of operation.
Smoke control systems (dedicated or non-dedicated) add engineered fan and damper sequences with their own testing requirements; the fire alarm system provides the initiating signals and the required control interface.
4. Door Control
| Device | Normal state | On alarm |
|---|---|---|
| Magnetic door holder on a corridor or stair door | Energized, holding the door open | De-energizes, allowing the door closer to close the door |
| Electrically locked egress door | Locked | Unlocks on the initiating signals required by the applicable code — commonly on activation of the fire alarm system and always on loss of power |
| Access-controlled egress door | Locked with sensor release | Releases per the building code, including on loss of power |
| Fire door with a closer and hold-open | Held open by a listed device | Releases and closes to maintain the rated assembly |
The rule that matters most: fail-safe means the door unlocks when power is lost. Egress must never depend on the continued operation of a locking device during a fire.
Door hold-open devices are usually powered from a supervised source so that a failure is annunciated, and their release must be verified during acceptance and periodic testing.
5. Other Emergency Control Functions
| Function | Typical interface |
|---|---|
| Fuel and power shutoff to cooking appliances | Kitchen hood suppression discharge switch |
| Damper closure in fire and smoke barriers | Alarm or duct detector input, per the smoke/fire damper design |
| Emergency generator start | Building electrical design; the fire alarm system may provide a signal |
| Process shutdown in industrial occupancies | Control module to plant control system |
| Exit marking audible notification | Where required, distinctive audible devices at exits |
| Mass notification override | Per the ECS/MNS priority scheme in Chapter 24 |
Every one of these must appear in the written sequence of operation and in the record drawings delivered to the owner — in Texas, under 28 TAC § 34.619(c).
6. Acceptance and Periodic Verification
Emergency control functions are verified by operating the initiating device and observing the controlled equipment, not by simulating the input at the panel:
- Operate the elevator lobby detector and watch the cars travel to the correct level with the visible signal illuminated.
- Operate the heat detector in the machine room and confirm the shunt trip opens the disconnect.
- Operate the duct detector and confirm the specific air handler it serves shuts down — and that the correct unit shuts down, which is why the remote indicator must be labeled with the equipment served.
- Operate a general alarm and confirm door holders release and electrically locked egress doors unlock.
Any change to the controlled equipment — a replaced air handler, a re-grouped elevator bank, a new door hardware package — invalidates the previous verification and requires retesting and a documentation update.
7. Worked Fact Patterns
Pattern A. A smoke detector in the second-floor elevator lobby of a five-story building operates; the designated level is the first floor. → Cars recall to the designated level (first floor), because the initiating detector is not at the designated level.
Pattern B. A smoke detector in the first-floor (designated level) elevator lobby operates. → Cars recall to the alternate level, because the designated level may be involved.
Pattern C. An installer wires the elevator machine room smoke detector to the shunt trip. → Wrong device. Power shutdown before sprinkler discharge is initiated by a detection device other than the sprinkler — customarily a fixed-temperature heat detector located at the sprinkler with a rating below the sprinkler's operating temperature. The smoke detector's role is recall.
Pattern D. A duct smoke detector is programmed to sound general evacuation throughout a hospital. → Question the design. Duct detection exists to prevent smoke distribution and is not a substitute for open-area detection; a shutdown-only duct detector commonly initiates a supervisory signal. The programmed behavior must match the documented sequence of operation and the applicable code.
Pattern E. During a fire alarm test, an electrically locked stairwell re-entry door remains locked. → Failure. Electrically locked egress doors must unlock on the signals required by the applicable code and on loss of power. Correct the interface, retest, and update the documentation.
A smoke detector located in the elevator lobby at the designated level operates. Where must the elevators recall?
Where automatic sprinklers are installed in an elevator machine room, what must initiate the disconnection of elevator main line power, and when?
Which statement correctly describes the role of a duct smoke detector under NFPA 72?