Instrumentation & Control

Control valves — fail position, cavitation and why oversizing ruins control

What a positioner actually does, why the fail-safe position is a process safety decision that must be verified rather than assumed, the difference between cavitation and flashing and what each does to the trim, and why a valve sized for the line rather than the duty controls badly.

IntermediateOil & GasPetrochemicalPharmaceutical

Standards referencedIEC 60534ANSI/FCI 70-2ISA 75.01

The transmitter measures, the controller decides, and the control valve is the only part of the loop that actually does anything to the process. It is also the part most likely to be blamed for a problem it is merely revealing — and the part most often specified by whoever was choosing the pipe.

Fail position is a safety decision

When instrument air is lost, a valve goes somewhere. Which way it goes is decided by the actuator spring and the valve construction, and that choice comes from the process hazard.

  • Fail closed — the spring drives it shut. Feed to a fired heater, fuel gas to a burner.
  • Fail open — the spring drives it open. Cooling water to an exotherm, a relief path.
  • Fail last position — a lock-up valve holds the air. Chosen where moving either way is worse than staying put.

The positioner

Give an actuator a signal and it balances air pressure against spring force. Friction from the packing, and process force on the plug, both upset that balance — so the valve ends up somewhere near where it was told rather than where it was told.

A positioner closes a loop around that. It measures actual stem position, compares it with the demand, and adjusts the air until they agree. It is what turns an approximate device into a controllable one.

Feeding it is an I/P converter, which turns the 4–20 mA signal into a proportional air pressure, and a filter regulator supplying clean dry air at the right pressure. Both are small, cheap and near the top of the list of things that cause a valve to move sluggishly for no obvious reason.

On a large actuator a volume booster is added, because a positioner can only pass so much air. Without one the signal is correct and the movement is late.

Sizing: the failure that gets blamed on tuning

The sizing calculation works from the required flow and the available pressure drop to a flow coefficient, Cv. The valve is then chosen to cover that with travel to spare at both ends — typically operating somewhere between 20 % and 80 % open.

The valve also needs a meaningful share of the system pressure drop. If the pipe, the exchanger and the orifice plate take nearly all of it, opening the valve further changes almost nothing, and the loop behaves as though the valve were stuck.

Control valve flow characteristicsSource: IEC 60534; characteristic is set by the trim shape
Equal percentageEach equal step of travel changes flow by an equal percentage — small at first, steep near openMost of the pressure drop is elsewhere in the system, and varies with flowTemperature and most flow control loops
LinearFlow is proportional to valve travelThe valve holds most of the system pressure drop, and it stays roughly constantLevel control, and flow control on a constant-drop system
Quick openingMost of the flow is reached in the first part of the travelOn/off or near on/off duty rather than modulationRelief paths, dump valves, on-off service
Modified parabolicBetween linear and equal percentageA compromise where the system drop varies moderatelyWide-rangeability loops

The characteristic describes how flow changes as the valve opens. The aim is that the INSTALLED behaviour is roughly linear once the rest of the system's pressure drop is taken into account — which is why equal percentage trim, whose inherent curve is far from linear, is the most common choice in process plant.

Cavitation and flashing

Fluid accelerates through the restriction, and as it accelerates its pressure falls. At the narrowest point — the vena contracta — pressure is at its lowest. If it drops below the fluid’s vapour pressure, the liquid boils.

What happens next depends entirely on the downstream pressure, and it produces two completely different problems.

Cavitation — downstream pressure recovers above the vapour pressure, so the bubbles collapse. Each implosion is tiny, local and violent. The damage is sharp pitting on the trim and body just downstream of the seat, and it sounds like gravel going through the valve.

Flashing — downstream pressure stays below the vapour pressure, so the bubbles remain. Nothing implodes. Instead a fast two-phase stream scours the valve, and the damage is smooth, polished erosion.

Two pressure profiles through a control valve. Both dip below vapour pressure at the vena contracta so bubbles form. In cavitation the downstream pressure recovers above vapour pressure and the bubbles implode, pitting the trim. In flashing it stays below, the bubbles remain, and a fast two-phase stream polishes the surfaces.
Identical up to the vena contracta. What happens downstream is what decides which problem you have.
A control valve plug standing on a workbench with its stem upward. The upper machined surfaces are still bright and smooth, but the tapered throttling face below the seating line has been eaten into a rough, deeply pocketed texture like cinder or coarse sponge. A clean seat ring lies on the bench in front of it for comparison.
The same plug, machined to a few hundredths, above and below the seating line. That cindered texture is the accumulated work of countless individual bubble collapses, each one too small to see — and it stops abruptly where the pressure had already recovered.

Seat leakage: a control valve is not a block valve

Control valve seat leakage classesSource: ANSI/FCI 70-2 and IEC 60534-4
Class IBy agreement — no test requiredAnythingWhere shut-off genuinely does not matter
Class II0.5 % of rated capacityMetal seat, no special lappingGeneral-purpose double-seated valves
Class III0.1 % of rated capacityMetal seat, lappedWhere a tighter metal seat is worth paying for
Class IV0.01 % of rated capacityMetal seat, carefully lappedThe common default for a single-seated metal control valve
Class V5 × 10⁻¹² m³/s per mm of port per bar differentialMetal seat with high seating forceWhere near-tight metal shut-off is needed at temperature
Class VIMeasured in bubbles per minute, by port sizeSoft seat — elastomer or PTFE insertThe tightest control valve class; still not an isolation valve

A control valve is built to modulate, not to isolate. Even Class VI passes a measurable amount, so a control valve is never a substitute for a block valve — and a shutdown valve is specified against a different requirement for that reason.

Even the tightest class passes a measurable amount. That is not a defect — a control valve is built to modulate, and tight shut-off costs seating force, trim life and often controllability.

Which is why a shutdown valve is a different device with a different requirement. A control valve passing a little when closed is usually of no consequence; a shutdown valve doing the same has not isolated the hazard it was installed to isolate.

An emergency shutdown valve on a process line with a spring-return actuator, a solenoid valve mounted in its air line and a limit switch box on top.
A shutdown valve: spring-return actuator, solenoid in the air line, position switches. It has one job and it does it by losing air.

Shutdown valves and partial stroke testing

A shutdown valve’s solenoid is normally de-energise to trip. Losing the supply produces the safe outcome, so a broken wire is a trip rather than a silent failure.

The dominant failure mode for a valve that sits still for years is seizing. A partial stroke test moves it perhaps 10 or 15 % and returns it, with the plant running, which proves it is not stuck.

It cannot prove the valve will fully close or seal, so it extends the interval between full proof tests rather than replacing them.

Testing that means something

Stroke the valve at several intermediate points, approaching each from both directions. Full open and full shut tells you almost nothing about the region the loop actually lives in.

What you are looking for is sticking, hysteresis — a different position for the same signal depending on which way you came — and dead band. Then time the stroke, because on a shutdown valve the closure time is part of the safety case, not a performance figure.

What to take away

  • Fail position is a process safety requirement. Remove the air and watch. Check the handwheel is not wound in.
  • A positioner closes a loop around stem position, which is what makes the valve controllable at all.
  • Size to the duty, never the line. An oversized valve does all its controlling in the first few per cent of travel and hunts, and retuning will not save it.
  • Cavitation collapses, flashing does not. Pitted trim means cavitation and can be designed out; polished trim means flashing and must be accommodated.
  • Even Class VI leaks. A control valve is not an isolation valve.
  • A shutdown solenoid is de-energise to trip, and partial stroke testing catches seizing without proving closure.
  • Stroke at intermediate points from both directions. Both ends of travel prove nothing about the middle.

Check your understanding

7 questions. Nothing is recorded — this is just for you.

1How do you establish which way a control valve fails on loss of instrument air?
2What is cavitation in a control valve?
3How does flashing differ from cavitation?
4A control valve is sized to the line size rather than to the duty. What is the likely consequence?
5What does a positioner do that a plain actuator does not?
6Why is a solenoid valve in a shutdown valve's air line normally de-energise-to-trip?
7Why is a valve stroked at several intermediate points rather than only fully open and fully shut?

#instrumentation#control-valve#actuator#positioner#cavitation#final-element