Hydraulic Elevator Safety Requirements

Hydraulic Elevator Safety Requirements Under ASME A17.1

Hydraulic elevators use pressurized fluid—almost always a petroleum-based or biodegradable hydraulic oil—to raise and lower a car. Because the system operates under pressure and relies on a buried or in-ground cylinder in many installations, ASME A17.1 (the Safety Code for Elevators and Escalators) mandates a specific set of safety devices to protect passengers, mechanics, and the building. This lab ties those code requirements to real hardware on a training unit.

Types of Hydraulic Elevators

Two configurations appear on your diagram worksheets.

Direct-acting (holeless or in-ground cylinder): The plunger or piston connects directly to the car frame. Fluid pressure acts directly on the plunger to raise the car; controlled release lowers it.

Roped hydraulic: A sheave and rope system multiplies travel, allowing a shorter cylinder to serve a taller rise. The rope arrangement means the car moves farther than the plunger, so forces are distributed differently—but all the same fluid-side safety devices still apply.

Knowing which type you are working on matters because pit dimensions, pipe routing, and the location of devices differ between them.

Required Safety Devices—Fluid Side

Pressure-Relief Valve

The pressure-relief valve is the primary overpressure protection for the hydraulic system. ASME A17.1 requires that this valve be set so it opens before the system pressure can exceed a defined ratio above the working pressure needed to lift the car at full rated load. The valve must be located at the power unit and must discharge oil back into the reservoir—never to atmosphere in a way that creates a slip hazard. A seized or absent relief valve allows pressure to build without limit, risking cylinder or fitting failure and catastrophic car movement.

Lowering Valve (Manual Lowering)

In the event of a power failure, the lowering valve allows controlled, manual descent of the car by releasing oil back to the tank at a limited flow rate. A17.1 requires the valve to be operable from outside the machine room or from a designated location so that trapped passengers can be rescued. The valve must not allow the car to descend faster than the rated lowering speed.

Rupture Valve (Hydraulic Runaway Protection)

If a main pressure pipe fails, oil will drain rapidly and the car can drop uncontrolled. The rupture valve—also called a velocity fuse or pipe-rupture valve—senses abnormal flow rate and closes automatically, stopping car descent. A17.1 requires this device on systems where the effect of a pipe failure would cause the car to lower beyond the lowest landing. It is typically mounted directly on or very close to the cylinder port so the shortest possible length of pipe is unprotected.

Oil-Level (Low-Oil) Switch

The power unit must be equipped with a device that stops the pump motor and prevents upward movement when the fluid in the reservoir drops below a safe operating level. Running the pump without adequate fluid causes pump damage and, more critically, can allow air into the system, producing erratic or uncontrolled car movement.

Required Safety Devices—Mechanical and Pit Side

The pit contains several devices common to all elevator types and some specific to hydraulics.

• Pit stop switch: A manually operated switch within reach from the pit access door that removes power from the elevator, allowing safe pit entry. A17.1 requires it to be within sight of the pit ladder bottom.
• Pit lighting and outlet: Required for safe maintenance access.
• Buffers: Spring or oil buffers at the bottom limit the energy of an overtravel event. Hydraulic elevators typically use spring buffers matched to the car's rated speed.
• Car safeties (roped hydraulic): A roped-hydraulic car must have a safety device on the car frame that grips the guide rails if rope failure or runaway descent occurs, in the same way a traction elevator does.
• Cylinder pressure test records: A17.1 requires periodic pressure testing of in-ground cylinders to detect corrosion or wall thinning before a failure occurs.

Lockout/Tagout Before Any Inspection

Before touching any component on the hydraulic power unit during this lab, you must follow your site-specific lockout/tagout (LOTO) procedure:

1. Notify affected personnel and shut down the power unit.

2. De-energize the disconnect and apply your personal lock.

3. Block the car mechanically on rated mechanical stops—never rely on fluid pressure to hold the car while you work beneath or on the system.

4. Verify zero pressure at the gauge before loosening any fitting.

5. Wear safety glasses and your lab coat or work shirt at all times in the lab.

Oil under pressure stores enormous energy. A line that is not de-pressurized can inject fluid through skin at pressures that cause severe tissue damage—a hydraulic injection injury is a medical emergency.

Reading System Pressure

With the car safely blocked and LOTO in place, observe the system pressure gauge on the power unit. This value is the working pressure at full load. The relief valve must be set to open at a pressure that does not exceed the code-allowed ratio above working pressure. The actual setting is recorded on the relief-valve tag or in the maintenance log. Your job in today's lab is to verify that the tag value is at or below the maximum allowable setting you calculate. If the tag value exceeds the limit, the unit is not in compliance and must not be returned to service until the valve is adjusted and re-verified.

Restoring Service After a Safety Device Failure

A17.1 is clear: an elevator shall not be returned to passenger service until every required safety device is functional and tested. If you find a bypassed switch, a missing rupture valve, or a relief valve that does not open at the correct pressure, the unit must remain out of service and the appropriate authority having jurisdiction (AHJ) notified. Document every deficiency in writing.