Objective. Students will locate, identify, and describe the code-mandated function and trip conditions of every primary safety device on a traction elevator—governor, car safety, counterweight safety, buffers, and terminal stopping devices—citing the applicable A17.1 rule for each.
This lesson, its worked examples and its practice questions has not yet been verified by a licensed professional engineer or master tradesperson or by a certification or approval body. It is a study draft and may contain errors. Do not use it as instructions for work on a job site or on live equipment. Always follow your instructor, your supervising professional, and current official references and regulations.
VoTechWorks program approval and accreditation are still in progress. Credentials are issued only by the certifying bodies named in each program, after their own exams.
A traction elevator suspends a loaded car on steel ropes driven by an electric machine. If any part of that system fails—rope, brake, controller—the car can move uncontrolled at dangerous speed. ASME A17.1, Safety Code for Elevators and Escalators, is the foundation document that specifies every device required to prevent injury in that event. As a pre-apprentice, you must be able to locate, name, and explain the required function of each primary safety device before you ever touch an elevator in service.
Before any hands-on lab work, the elevator must be placed under full lockout/tagout (LOTO) in accordance with OSHA energy-control procedures. Each student applies a personal lock to the hasp at the main disconnect; no lock is removed until that student is clear of all pinch points, pit, and overhead. Wear required PPE—hard hat, safety glasses, and steel-toed footwear—throughout.
The governor is a centrifugal speed-sensing device mounted in the machine room or overhead. As the governor sheave spins with the car, weighted flyweights respond to rotational speed. A17.1 requires the governor to perform two distinct actions as car speed rises above rated speed. First, at a set overspeed threshold, it must activate an electrical safety switch that cuts power to the driving machine and applies the brake. If the car continues to accelerate, the governor reaches its tripping speed, mechanically grips the governor rope, and initiates the car safety. The code specifies maximum permissible tripping speeds based on rated car speed; these limits ensure the car safety can stop the car within an acceptable distance. The governor must be sealed after adjustment so that the trip speed cannot be changed without breaking the seal.
The car safety (also called the car safeties or safety gear) is mounted on the car frame. When the governor trips, it pulls the governor rope taut, which lifts the governor rope gripper or actuating linkage, driving the safety jaws into the guide rails. The wedging or roller action clamps the car to the rails and brings it to a controlled stop. A17.1 distinguishes between instantaneous safeties (acceptable only at low rated speeds) and progressive or flexible-guide-clamp safeties, which apply stopping force gradually and are required above certain rated speeds. The distinction matters because instantaneous safeties can produce deceleration forces that injure passengers at higher speeds. The car safety must be capable of stopping and holding the car with rated load at governor tripping speed.
When ropes fail, the counterweight can fall into the pit just as the car would. A17.1 requires a counterweight safety when the space below the runway is occupied by areas accessible to persons. The counterweight safety works on the same principle as the car safety—a governor (sometimes the same unit, sometimes a separate one) trips and drives jaws into the guide rails to stop the descending counterweight. Students should confirm whether the training elevator has a counterweight governor and where it is mounted.
Buffers are energy-absorbing devices installed in the pit under the car and under the counterweight. They are the last line of defense if the car or counterweight travels past the terminal landings. A17.1 recognizes two types:
The code specifies the minimum stroke of oil buffers based on rated speed, ensuring enough travel to decelerate the car within acceptable g-forces. In the lab, you will check that each buffer is fully extended (not compressed or leaking) and that the oil-buffer return switch is in the normal position—a compressed oil buffer must prevent normal elevator operation until it has fully returned.
A17.1 requires multiple layers of protection against overtravel at the terminal floors:
1. Normal terminal stopping devices (often called final travel limit or terminal slowdown switches) slow the car as it approaches the top or bottom landing under normal operation.
2. Final limit switches cut power to the driving machine and brake if the car travels past the normal stopping point. These are not part of normal operation—their activation indicates a malfunction. The elevator must not resume operation until the cause is investigated.
3. Slack-rope devices (on drum machines or where applicable) detect loss of rope tension and remove power, preventing the drum from winding rope over itself or allowing the car to free-fall.
Final limit switches must be positioned so they are triggered before the car or counterweight strikes a buffer, giving the buffer work to do only after electrical means have already attempted to stop travel.
During the Component Identification Drill, you will physically locate each device and attach a color-coded tag. The rule is simple: if the LOTO is not complete, no tag goes on any device. Verify zero energy state—no movement, no electrical potential at the controller—before entering the pit or working overhead. Each tag you attach must include the device name, its location, and the A17.1 rule that requires it. Recording the rule is not busywork; the NEIEP curriculum and NAEC CET both test whether technicians can connect a physical component to its code basis.
Understand the cascade: (1) Car accelerates past rated speed → (2) Governor electrical switch opens, machine power cut, brake sets → (3) If car continues, governor reaches trip speed, rope gripped → (4) Car safety jaws engage rails, car stops → (5) If all else fails, car or counterweight contacts buffer. Each step has a corresponding A17.1 rule. Knowing that sequence means you can read a malfunction scenario and immediately identify which layer of protection failed and which rule was violated.
Answer each question, then check it. Nothing is recorded; this is your own practice.
A free tech program — complimentary, as our commitment to get America working. Help us build VoTechWorks. Tell us what works, what doesn’t, and what you want to learn.