EN 230:2005

SLOVENSKI STANDARD
01-januar-2006
1DGRPHãþD
SIST EN 230:2000
SIST EN 230:2000/AC:2000
Sistemi za avtomatski nadzor za oljne gorilnike
Automatic burner control systems for oil burners
Feuerungsautomaten für Ölbrenner
Systemes automatiques de commande et de sécurité pour bruleurs a fioul
Ta slovenski standard je istoveten z: EN 230:2005
ICS:
27.060.10 *RULOQLNLQDWHNRþHLQWUGR Liquid and solid fuel burners
JRULYR
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

EUROPEAN STANDARD EN 230
NORME EUROPÉENNE
EUROPÄISCHE NORM
June 2005
ICS 27.060.10 Supersedes EN 230:1990
English version
Automatic burner control systems for oil burners
Systèmes automatiques de commande et de sècurité pour Feuerungsautomaten für Ölbrenner
brûleurs à fioul
This European Standard was approved by CEN on 14 February 2005.

CEN members are bound to comply with the CEN/CENELEC Internal Regulations which stipulate the conditions for giving this
European Standard the status of a national standard without any alteration. Up-to-date lists and bibliographical references
concerning such national standards may be obtained on application to the Central Secretariat or to any CEN member.

This European Standard exists in three official versions (English, French, German). A version in any other language made by
translation under the responsibility of a CEN member into its own language and notified to the Central Secretariat has the same
status as the official versions.

CEN members are the national standards bodies of Austria, Belgium, Cyprus, Czech Republic, Denmark, Estonia, Finland,
France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland,
Portugal, Slovakia, Slovenia, Spain, Sweden, Switzerland and United Kingdom.

EUROPEAN COMMITTEE FOR STANDARDIZATION
COMITÉ EUROPÉEN DE NORMALISATION

EUROPÄISCHES KOMITEE FÜR NORMUNG

Management Centre: rue de Stassart, 36  B-1050 Brussels
© 2005 CEN All rights of exploitation in any form and by any means reserved Ref. No. EN 230:2005: E
worldwide for CEN national Members.

Contents Page
Foreword .3
Introduction.4
1 Scope .5
2 Normative references .5
3 Terms and definitions.6
4 Classification.11
5 Normal conditions for testing and measurement tolerances .13
6 Constructional requirements .13
7 Functional requirements .17
8 Protection against environmental influences.26
9 Protection against internal faults.34
10 Additional requirements for complex electronics .37
11 Marking, installation and operating instructions (see also Annex C).39

Annex A (normative) Electrical/electronic component fault modes tables .42
Annex B (informative) Functional characteristics of burner control systems, to be given by the
appliance standard .45
Annex C (normative) Requirements for DC supplied burner controls.46
Annex D (informative) Functional diagrams of oil burner controls.49
Bibliography.55

Foreword
This document (EN 230:2005) has been prepared by Technical Committee CEN/TC 47 “Atomizing oil burners
and their components-Function-safety-testing”, the secretariat of which is held by DIN.
This European Standard shall be given the status of a national standard, either by publication of an identical
text or by endorsement, at the latest by December 2005, and conflicting national standards shall be withdrawn
at the latest by June 2008.
Attention is drawn to the possibility that some of the elements of this document may be the subject of patent
rights. CEN [and/or CENELEC] shall not be held responsible for identifying any or all such patent rights.
This document supersedes EN 230:1990.
According to edition 1990 the following fundamental changes are carried out:
 protection against environmental influences;
 additional requirements for complex electronics.
 the structure and wherever possible the definitions and requirements are taken over from EN 298:2003-
09.
According to the CEN/CENELEC Internal Regulations, the national standards organizations of the following
countries are bound to implement this European Standard: Austria, Belgium, Cyprus, Czech Republic,
Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy, Latvia, Lithuania,
Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Slovakia, Slovenia, Spain, Sweden, Switzerland
and the United Kingdom.
Introduction
Whilst this document is written primarily for Automatic Oil Burner Control Systems used on or in appliance for
cooking, heating, hot water production, refrigeration, lighting or washing and having, where applicable, a normal
water temperature not exceeding 105 °C, it may be usefully quoted, as a whole or in part, by standards for other
equipment.
The functional characteristics of the automatic burner control systems, programming units, and their associated
flame detector devices, in so far as they are not laid down in this document, are given by the standards for the
appliances for which the automatic burner control systems are intended.
This document deals with immunity aspects of Electromagnetic Compatibility (EMC) only. Since automatic
burner control systems are intended for use as an integrated or incorporated part of an appliance, further EMC
tests (both immunity and emission) may be required for the intended use.
1 Scope
This document specifies the requirements, operating conditions and test methods for burner control systems for
automatic and semi-automatic oil burners with or without fans.
It also applies to dual fuel burners, for use with either oil or gaseous fuels, when operating on oil.
This document covers type testing only.
This document also applies to automatic burner control systems, programming units or flame detector devices
that include additional functions.
Automatic burner control systems utilising thermo-electric flame supervision devices are not covered by this
document.
2 Normative references
The following referenced documents are indispensable for the application of this document. For dated
references, only the edition cited applies. For undated references, the latest edition of the referenced
document (including any amendments) applies.
EN 267:1999, Forced draught oil burners – Definitions, requirements, testing, marking
EN 60068-2-6:1995, Environmental testing – Part 2: Tests – Test Fc: Vibration (sinusoidal) (IEC 60068-2
6:1995 + Corrigendum 1995)
EN 60127-1:1991, Miniature fuses – Part 1: Definitions for miniature fuses and general requirements for
miniature fuse-links (IEC 60127-1:1988)
EN 60335-1:2002, Household and similar electrical appliances – Safety – Part 1: General requirements (IEC
60335-1:2001, modified)
EN 60529, Degrees of protection provided by enclosures (IP Code) (IEC 60529:1989)
EN 60730-1:2000, Automatic electrical controls for household and similar use – Part 1: General requirements
(IEC 60730-1:1999, modified)
EN 60730-2-5:2002, Automatic electrical controls for household and similar use – Part 2-5: Particular
requirements for automatic electrical burner control systems (IEC 60730-2-5:2000, modified)
EN 61000-4-2, Electromagnetic compatibility (EMC) – Part 4: Testing and measuring techniques –
Section 2: Electrostatic discharge immunity test – Basic EMC publication (IEC 61000-4-2:1995)
EN 61000-4-3, Electromagnetic compatibility (EMC) – Part 4-3: Testing and measurement techniques –
Radiated, radio-frequency, electromagnetic field immunity test (IEC 61000-4-3:2002)
EN 61000-4-4, Electromagnetic compatibility (EMC) – Part 4: Testing and measurement techniques –
Section 4: Electrical fast transient/burst immunity test (IEC 61000-4-4:1995)
EN 61000-4-5, Electromagnetic compatibility (EMC) – Part 4: Testing and measurement techniques –
Section 5: Surge immunity test (IEC 61000-4-5:1995)
EN 61000-4-6, Electromagnetic compatibility (EMC) – Part 4: Testing and measurement techniques –
Section 6: Immunity to conducted disturbances, induced by radio-frequency fields (IEC 61000-4-6:1996)
EN 61000-4-11, Electromagnetic compatibility (EMC) – Part 4: Testing and measurement techniques –
Section 11: Voltage dips, short interruptions and voltage variations immunity tests (IEC 61000-4-11:2004).
EN 61558-2-6:1997, Safety of power transformers, power supply units and similar – Part 2-6: Particular
requirements for safety isolating transformers for general use (IEC 61558-2-6:1997)
EN 61558-2-17:1997, Safety of power transformers, power supply units and similar — Part 2-17: Particular
requirements for transformers for switch mode power supplies (IEC 61558-2-17:1997)
IEC 60384-14, Fixed capacitors for use in electronic equipment – Part 14: Sectional specification: Fixed
capacitors for electromagnetic interference suppression and connection to the supply mains
IEC 60384-16, Fixed capacitors for use in electronic equipment – Part 16: Sectional specification: Fixed
metallized polypropylene film dielectric d. c. capacitors
ISO 7637-1:2002, Road vehicles – Electrical disturbances from conduction and coupling – Part 1: Definitions
and general considerations
ISO 7637-2:1990, Road vehicles – Electrical disturbance by conduction and coupling – Part 2: Electrical
transient conduction along supply lines only
3 Terms and definitions
For the purposes of this document, the following terms and definitions apply.
3.1
flame detector device
device by which the presence of a flame is detected and signalled;
it can consist of a flame sensor, an amplifier and a relay for signal transmission. These parts, with the possible
exception of the actual flame sensor, can be assembled in a single housing for use in conjunction with a
programming unit
[EN 298:2003, term 3.1]
3.2
flame sensor
actual flame-sensing element, the output signal or value of which is used as the input for the flame detector
amplifier
[EN 298:2003, term 3.2]
3.3
sensed flame and flame signal
3.3.1
sensed flame
physical value monitored by the flame sensor
[EN 298:2003, term 3.3.1]
3.3.2
flame signal
signal given by the flame detector device in case of sensed flame
[EN 298:2003, term 3.3.2]
3.4
flame simulation
condition which occurs when the flame signal indicates the presence of a flame when in reality no flame is
present
[EN 298:2003, term 3.4]
3.5
programming unit
unit which reacts to signals from control and safety devices, gives control commands, controls the start-up
sequence, supervises the burner operation and causes controlled shut-down, and if necessary safety
shut-down and lock-out;
the programming unit follows a predetermined sequence of actions and always operates in conjunction with a
flame detector device
[EN 298:2003, term 3.5]
3.6
automatic burner control system
system comprising at least a programming unit and all the elements of a flame detector device;
the various functions of an automatic burner control system may be in one or more housings
[EN 298:2003, term 3.6]
3.7
start position
stage, where the system is not in lock-out position, has not yet received the start signal but can proceed with
the start-up sequence when required;
at this stage, the output terminals for any automatic shut-off valve and ignition device are not energised
[EN 298:2003, term 3.7]
3.8
start signal
signal e.g. from a regulating device, which releases the system from its start position and commences the
predetermined programme
[EN 298:2003, term 3.8]
3.9
burner ignition systems
3.9.1
automatic electrical ignition
system in which the fuel is ignited using only electrical energy
3.9.1.1
ignition by controlled spark
system which allows the fuel to be released only when the presence of the ignition spark has been proven
3.9.1.2
ignition by non controlled spark
system in which the ignition spark is not proven
3.9.2
automatic ignition with liquid or gaseous fuel
system by which the fuel is ignited by a pilot burner using liquid or gaseous fuel; the operation of the pilot
burner may be either interrupted or intermittent.
Interrupted pilot burners may be operated manually.
Intermittent pilot or first stage burners are operated automatically
3.9.2.1
ignition by controlled pilot burner
system which release the main fuel when the ignition burner flame is present
3.9.2.2
ignition by non-controlled pilot burner
system in which the release of the main fuel is not prevented by the absence of the flame of the pilot burner
3.10
start-up sequence
sequence of actions executed by the system which brings the burner from the start position to the running
position
[EN 298:2003, term 3.22.1]
3.11
programme
sequence of control operations determined by the programming unit involving switching on, starting up,
supervising and switching off the burner (see diagrams in Annex D)
3.12
waiting time
for burners without fans, this is the interval between the start signal being given and the energization of the
ignition device. During this time natural ventilation of the combustion chamber and the flue passages may take
place
3.13
purge time
period during which the combustion chamber is compulsorily ventilated without any fuel being supplied
3.13.1
pre-purge time
period preceding the signal to open the fuel valve during which the combustion chamber is compulsorily
ventilated
3.13.2
post-purge time
period following the signal to close the fuel valve during which the combustion chamber is compulsorily
ventilated
3.14
ignition
3.14.1
total ignition time
period during which the ignition device is in operation. Pre-ignition, actual ignition and post-ignition times make
up the total ignition time
3.14.2
pre-ignition time
period between the start of the ignition cycle and the signal to open the valve
3.14.3
ignition time
period between the signal to open the valve and the first indication of the flame signal
3.14.4
post-ignition time
period between the first indication of the flame signal and the shut-off signal to the ignition device
3.15
safety time
duration of the maximum permissible time during which the burner control unit gives the signal to open the fuel
valve without there being a flame signal
3.15.1.
first safety time
time starting from the signal for release of the fuel and terminating at the moment at which the signal for
interrupting the fuel supply is given
NOTE Where there is no second safety time, this is called the safety time.
3.15.2
second safety time
where there is a first safety time applicable to either a pilot or start flame only, the second safety time is the
interval between the main valve being energised and the main valve being de-energised if the flame detector
signals the absence of a flame
3.15.3
safety time during operation
time starting at the moment the sensed flame is extinguished and ending at the moment the signal for
interrupting the fuel supply is given
3.16
pilot or start flame proving period
interval between the end of the first safety time and the beginning of the second safety time which is used to
prove that the pilot or start flame is stable
[EN 298:2003, term 3.28]
3.17
intermittent first stage
first stage that is ignited prior to ignition of the main flame and is shut off simultaneously with it
[EN 298:2003, term 3.29]
3.18
interrupted first stage
first stage that is ignited each time the burner is started up and which is extinguished at the end of the second
safety time
3.19
running position of the system
position of the system in which the burner is in normal operation under the supervision of the programming unit
and its flame detector device
[EN 298:2003, term 3.15]
3.20
controlled shut-down
process by which the power to the shut-off valve(s) is removed before any other action takes place, e.g. as a
result of the action of a controlling function
3.21
safety shut-down
process which is effected immediately following the response of a protection device or the detection of a fault
in the automatic burner control system and which prevents the burner from going into operation or puts the
burner out of operation. The resulting state of the system is defined by deactivated terminals for the shut-off
valves and the ignition
3.22
lock-out
3.22.1
non-volatile lock-out
safety shut-down condition of the system, such that a restart can only be accomplished by a manual reset of
the system and by no other means
[EN 298:2003, term 3.18.1]
3.22.2
volatile lock-out
safety shut-down condition of the system, such that a restart can only be accomplished by either the manual
reset of the system, or an interruption of the main power and its subsequent restoration
[EN 298:2003, term 3.18.2]
3.23
ignition-restoration
process by which, following loss of flame signal, the ignition device will be switched on again without total
interruption of the fuel supply
3.24
recycling
process by which, after a safety shut-down, a full start-up sequence is automatically repeated
[EN 298:2003, term 3.20]
3.25
operation systems
3.25.1
systems for non-permanent operation
systems that are designed to remain in the running position for less than 24 h
[EN 298:2003, term 3.24]
3.25.2
systems for permanent operation
systems that are designed to remain in the running position for longer than 24 h without interruption
[EN 298:2003, term 3.23]
3.26
self-checking function of the system and the flame detector
automatic internal function of the device which checks the operation of the system and the flame detector
3.27
burner without fan
burner where the primary air required for combustion is provided by the action of the fuel and the secondary
air is freely available from the surroundings
3.28
burner with fan
burner in which some or all of the air required for the combustion is supplied by means of a fan (i.e. forced
draught or induced draught)
[EN 298:2003, term 3.14]
3.29
maximum throughput
mass of fuel consumed during one hour at the highest throughput stated by the manufacturer
Unit: kg/h
[EN 267:1999, term 3.2.1.1]
4 Classification
To assist with the specification of systems with regard to particular applications, the codes according to Table 1
shall be used.
The letter O shall be used for any character that is not relevant.
Table 1 — Classification codes
character specification code
1st character denotes as:
forced draught F
natural draught A
both B
2nd character denotes method of ignition:
interrupted pilot I
intermittent pilot or first stage T
direct main burner ignition at full M
rate
3rd character denoted first action following flame
failure:
non-volatile lock-out
L
volatile lock-out
V
recycling
C
ignition restoration
R
4th character denotes type of final action:
non-volatile lock-out L
volatile lock out V
ignition restoration R
5th character denotes:
fixed times X
adjustable times J
both B
6th character denotes:
self-check as required in 7.5.6 K
non-self-check N
both B
7th character "S" denotes:
a device with a special system
deviating from the specification of
this document
"WLE" denotes:
a device suitable for an
application combined with air-
heaters (see 7.1; 7.8).
NOTE  Other required specification data are given in Clause 11.

5 Normal conditions for testing and measurement tolerances
All the tests shall be carried out under normal conditions unless otherwise specified. The normal conditions
are:
 rated voltage or rated voltage range;
 rated frequency;
 ambient temperature of (20 ± 5) °C.
The error of measurement shall not exceed:
 for time measurements:    ± 0,1 s;
 for temperature measurements:   ± 1 K;
 for supply frequency measurements:   ± 0,1 Hz;
 for electrical supply measurements:   ± 0,5 %.
All measurements shall be made after stable temperature conditions have been achieved.
The tests shall be carried out in the mounting position specified by the manufacturer.
When several mounting positions are specified, the tests shall be carried out with the system installed in the
least favourable position.
6 Constructional requirements
6.1 General
The quality of the materials, the design and the structure of the components used shall be such that the
automatic burner control systems and flame detector devices will operate safely and in accordance with the
requirements of this document – for a reasonable period of time (service life) under the normally expected
mechanical, chemical, thermal and environmental conditions, even in the event of such carelessness as may
occur in normal use, provided that the manufacturer's instructions for installation, adjustment, operation and
maintenance are complied with. Compliance is checked by carrying out the tests specified in this document.
The system shall be designed such that changes in critical circuit component values (such as those affecting
timing or sequence) within the component manufacturer's declared worst case tolerances, including the long
term stability, shall result in the system continuing to function in accordance with this document. Compliance
shall be checked by worst case analysis.
The construction of any additional functions included in the automatic burner control system, programming
unit or flame detector for which no provisions exist in this document, shall be such that they do not degrade
the safe and correct operation of the automatic burner control system, programming unit or flame detector.
The system shall include at least two operating elements to directly de-energise the safety relevant oil valve
terminals.
NOTE A single relay switching two independent contacts is considered to be only one operating element.
6.2 Protection provided by the enclosure
The class of protection for systems with their own enclosure shall be a minimum of IP 40 according to
EN 60529. For systems for use in the open air the protection shall be a minimum of IP 54 according to
EN 60529.
For systems without enclosure, protection shall be provided by the burner in which it is installed.
6.3 Electrical equipment
The electrical equipment shall comply with the requirements of EN 60730-2-5:2002 Clauses 8, 9, 10, 11, 12,
13, 14, 18, 19, 20, 21, 22, 23 and 24.
If the supply voltage polarity can affect the safety either provisions to avoid an uncontrolled opening of an oil
valve shall be provided or clear warnings shall be given to the user of the control system of the burner.
6.4 Long-term performance
6.4.1 General
All components of the system, and its associated flame detector device shall be able to withstand
250 000 burner start-up operations (255 000 where resistance to vibration is declared) and still comply with
this document. This requirement shall be attested by the manufacturer by following the requirements detailed
in 6.4.2.2.
6.4.2 Long-term performance test
6.4.2.1 General
The test of 6.4.2.2 and the test of 6.4.2.3 shall not be carried out on the same test sample. The tests as
described in 7.9 shall be carried out before and after the long-term performance tests of 6.4.2.2 and 6.4.2.3.
Additionally, on completion of the tests described in 6.4.2.3, the tests described in EN 60730-1:2000, 13.2.2
through 13.2.4 shall be carried out.
6.4.2.2 Tests to be carried out
The test of burner start-up operations shall be carried out with the terminals loaded with the loads and power
factors as declared by the manufacturer.
The system and its flame detector device shall be tested under the following conditions:
a) the purpose of the test is to cycle components of an electronic circuit between the extremes of
temperature likely to occur during normal use and which may result from ambient temperature variation,
mounting surface temperature variation, supply voltage variation, or the change from an operating
condition to a non-operating condition or vice versa.
The following conditions shall form the basis of the test:
1) Duration of the test:
the duration of test shall be 14 days.
2) Electrical conditions:
the system is loaded according to the ratings declared by the manufacturer, the voltage then being
increased to 110 % of maximum declared rated voltage except that for 30 min during each 24 h
period of the test the voltage is reduced to 90 % of minimum declared rated voltage. The change of
voltage shall not be synchronised with the change of temperature. Each 24 h period shall also
include at least one period in the order of 30 s during which the supply voltage is switched off.
3) Thermal conditions:
the ambient temperature and/or the mounting surface temperature are varied between the maximum
declared ambient temperature or 60 °C, whichever is higher, and the minimum declared ambient
temperature or 0 °C, whichever is lower, to cause the temperature of the components of the
electronic circuit to be cycled between the resulting extremes. The rate of ambient and/or mounting
surface temperature change shall be in the order of 1 °C/min and the extremes of temperature
maintained for approximately 1 h.
NOTE 1 Care should be taken to avoid the occurrence of condensation during this test.
4) Rate of operation:
during the test the system shall be cycled through its operational modes at the fastest possible rate
up to a maximum of six cycles/min subject to the need to cycle components between their
temperature extremes.
The number of cycles of operation completed during this test shall be recorded and if this number is
less than 45 000 the remaining cycles shall be executed at the declared rated voltage and at ambient
temperature.
b) 2 500 operations at the maximum declared ambient temperature or 60 °C, whichever is higher, and at
110 % of maximum declared rated voltage;
c) 2 500 operations at the minimum declared ambient temperature or 0 °C, whichever is lower, and at 85 %
of the minimum declared rated voltage;
d) the system shall also be tested under the following conditions:
1) 2 500 cycles without flame presence;
2) 2 500 cycles with the flame signal disappearing during operation.
e) when resistance to vibration is declared by the manufacturer, the following sinusoidal vibration test is to
be carried out.
NOTE 2 The object of the test is to demonstrate the ability of the system to withstand the long-term effects of vibration
at levels declared by the manufacturer.
During the exposures the system shall be mounted on a rigid fixture by means of the specified fastening
arrangement.
The test shall be performed in accordance with EN 60068-2-6:1995, test Fc.
The test is performed with the following minimum severity conditions:
Frequency range: 10 Hz to 150 Hz
Transition frequency 58 Hz
Acceleration amplitude 1.0 g or higher if declared by the manufacturer
Amplitude (below transition frequency) or in 0,075 mm
correspondence with acceleration amplitude
according to EN 60068-2-6:1995, Table 5
Sweep rate: 1 octave per minute
Number of sweep cycles 10
Number of axes 3, mutually perpendicular

The systems shall be in the start position during the exposure. A performance test as described in 7.9 shall be
carried out towards the end of each exposure. A visual inspection shall be carried out after the termination of
the exposure. No mechanical damage shall be found.
NOTE 2 By agreement between the manufacturer and the test authority the safety and purge times used during the
above tests may be chosen to be as short as practicable so that the endurance test is not unnecessarily prolonged.
During the tests a), b) c) and d) described above, the system shall be operated in such a way that the normal
start-up sequence is performed. The time that the system is held in the running position and the time that the
control loop is interrupted before the cycle is repeated shall be agreed between the manufacturer and the test
authority.
If times have been shortened (see note above), on completion of the endurance test, the purge times shall not
have decreased nor the safety times have increased from those times measured before the commencement
of the test.
6.4.2.3 Test to be carried out by the system manufacturer
The system manufacturer shall carry out and declare that the system has completed a minimum of
250 000 burner start-up operations with the terminals loaded with the loads and power factors as declared,
without failure.
The system and its flame detector device shall have been tested under the following conditions:
a) the number of operations at the declared rated voltage and at ambient temperature shall be 225 000;
b) the number of operations at the maximum declared ambient temperature or 60 °C, whichever is higher,
and at 110 % of the maximum declared rated voltage shall be 12 500 operations;
c) the number of operations at the minimum declared ambient temperature or 0 °C, whichever is lower, and
at 85 % of the minimum declared rated voltage shall be 12 500 operations.
NOTE The safety and purge times used during the above tests may be chosen to be as short as practicable so that
the endurance test is not unnecessarily prolonged.
During the tests described above, the system shall be operated in such a way that a complete start-up
sequence is performed.
If times have been shortened (see note above), on completion of the endurance test the purge times shall not
have decreased nor the safety times have increased from those times measured before the commencement
of the test.
7 Functional requirements
7.1 General
Any additional functions included in the automatic burner control system, programming unit or flame detector
for which no provisions exist in this document, shall be such that they do not degrade the safe and correct
operation of the automatic burner control system, programming unit or flame detector.
If there are no particular requirements concerning the type of lock out following safety shut-down in the
relevant appliance standard a non-volatile lock-out is required.
If the functional behaviour deviates from this document the manufacturer has to declare this by giving detailed
information and reasons for the deviation.
Adjustment of parameters e.g. programme timings and programme sequences is permitted but shall only be
possible by means of providing protection against access by uninstructed persons or shall be declared as
requiring such protection in the application.
7.2 Programme
7.2.1 General
7.2.1.1 The programme shall be in accordance with the details provided by the manufacturer's
instructions.
7.2.1.2 The programme shall be such that it is not possible to perform two or more actions which in
combination will cause injury to persons or damage to property. The order of the actions shall be fixed in such
a manner that it is not possible to change their order.
7.2.1.3 The automatic shut-off valve(s) for the fuel shall not be energised before the ignition device.
7.2.1.4 When a system has a start flame proving period it shall not be less than that declared by the
manufacturer.
7.2.1.5 In case of spark supervision, this function shall be performed prior to the release of fuel.
7.2.1.6 During each start-up sequence, the system shall check for a flame signal. If a flame signal occurs
the system shall either not initiate the next step in the start-up sequence, or proceed to safety shut-down. This
checking operation shall take place before release of fuel and shall be of sufficient duration to ensure a safe
and reliable check (see 7.6).
7.2.2 Safety actions
The required checks in the programme shall lead to the following actions:
 if an air-supervision device is indicating an inadequate air supply during the period between pre-purge
time and running position, the system shall directly proceed to at least safety shut-down before release of
fuel;
 if inadequate air supply is indicated while the system is in the running position, the system shall directly
proceed to at least safety shut-down;
 if no flame signal is sensed at the end of the first or second safety time, the system shall proceed to
lock-out or recycle, if applicable;
 the action of an external protection device shall lead to at least safety shut-down;
 if a spark supervision device is utilised, failure to detect a spark during the manufacturer's declared spark
supervision period shall lead to at least safety shut-down before fuel is released.
7.2.3 Flame failure
Depending on the design of the system, one of the following actions shall occur following loss of flame signal
during burner operation:
 safety shut-down and recycling (see 7.2.4 and 7.4);
 Ignition restoration (see 7.2.5 and 7.4);
 lock-out (see 7.4).
7.2.4 Recycling
Systems with recycling shall be designed such that they meet the requirement of 7.4 and the subsequent
start-up sequence shall be that which is normally performed by the system.
Following this action, the flame signal shall be present by the end of the first safety time of the last permitted
ignition attempt; if not, the system shall proceed to lock-out.
7.2.5 Ignition restoration
Systems with ignition restoration shall be designed such that the ignition device shall be energised within 1 s,
following the loss of the flame signal.
Following this action, the flame signal shall be present at the end of the first safety time; if not, the system
shall proceed to lock-out.
7.2.6 Supervision of the combustion air supply
The supervision of the combustion air supply for burners with fans shall be achieved in such a manner and by
using such devices as are prescribed in the relevant burner and/or appliance standards.
When a system performs a check for air supply simulation, burner start-up shall be prevented in case of a
failure of this device.
7.2.7 Supervision of other external devices during the start-up sequence
If the system controls and/or supervises external devices (e.g. air damper actuators, auxiliary contacts of oil
valves, automatic leakage test devices, other contacts which shall be position-checked prior to or during each
start-up sequence), the start-up sequence shall continue only after these external devices have been
successfully checked.
7.2.8 Operation of the burner under extreme conditions
Burner control units shall be protected against low voltage supply. Extreme voltage drop shall not endanger
the operation of the installation (see 8.2).
If a burner control system is to be applied outside a temperature range of 0 °C to 60 °C only those units
specified for such use by the manufacturers and successfully tested by the test house shall be used (see 8.1).
7.3 Timing and operational sequences
7.3.1 General
Where these times can be adjusted using an existing scale on the component, the scale shall be accurate
to ± 10 % of the indicated value. The means of adjustment shall be readily identifiable (e.g. colour-coded).
7.3.2 Safety times
The safety times given below are maximum permissible values under normal operating conditions (rated
voltage U and ambient temperature approximately 20 °C).
N
Table 2 — Safety times
Maximum fuel throughput Safety time max. (s)
kg/h
at ignition during operation during operation
ignition restoration
for recycling
Up to and including 30 10 10 1
above 30 5 1 1
It is permitted, however, under limit operating conditions (voltage between 0,85 U and 1,1 U , at ambient
N N
temperatures between 0 °C and 60 °C) that the safety times given in the table may be increased by 100 % for
burners with nominal throughput up to and including 30 kg/h and by 25 % for burners with nominal throughput
in excess of 30 kg/h in case where the appliance standard has no special requirements.
For burners with a nominal throughput equal to or less than 30 kg/h not provided with pre-purge, or where the
pre-purge is less than 5 s, the safety times may be increased without however exceeding 20 s under limit
operating conditions.
7.3.3 Pre-purge time
The requirements of EN 267:1999, 5.2.4, shall be met.
The electric ignition device shall be operating from the start of pre-purge period.
This requirement is not applicable to burners:
 either fitted with a device which during the pre-purge period prevents the operation of the ignition means
when the fuel pressure upstream of the shut-off valve does not exceed 20 % of the atomising pressure;
 or fitted with two shut-off valves in series;
 or mounted on generators which are subject to special requirements, such as ovens, kilns, air heaters,
steam boilers or used in multiburner installations.
Finally, the ignition device for gas-fired pilot burners shall not be energised during the pre-purge time.
7.3.4 Ignition by pilot burner (see also operating examples in Annex D)
7.3.4.1 Ignition by non-supervised gas fired pilot burner
If an ignition system incorporating a non-supervised gas-fired pilot burner is used, the period during which the
supply of fuel to the pilot burner is allowed shall not exceed 5 s. This period is limited by the signal for
releasing the fuel to the pilot burner and the main burner. In addition, the electrical ignition device of the pilot
burner shall not assist in the ignition of the main burner.
7.3.4.2 Ignition by supervised gas-fired pilot burner
If an ignition system incorporating a supervised pilot burner is used, the supply to the pilot burner valve(s)
shall be interrupted if the pilot burner flame has not been established within 5 s. The supply of fuel to a
permanent pilot burner shall be cut off within 5 s after loss of the pilot flame.
7.3.4.3 Ignition by oil-fired pilot burner
The requirements of 7.3.4.1 and 7.3.4.2 also apply to oil fired pilot burners. For the periods during which these
burners are allowed to be in operation without a flame being present, the values contained in the table in 7.3.2
with reference to the maximum fuel throughput of the pilot burner are applicable.
7.3.5 Post-ignition
It is allowed to run the ignition into operating period if there is no flame simulation caused by the ignition
system.
7.4 Ignition-restoration, recycling and shut-down after flame extinction
7.47.47.47.4.1111  Safety shut-down of burners with a throughput ≤ 30 kg/h
The fuel supply shall be automatically cut off and safety shut-down shall occur not later than at the end of the
safety time, if:
a) during burner start-up, the flame has not been established on expiry of the safety time;
b) during operation the flame is extinguished, and is not apparent at the end of the safety time, following one
attempt at ignition restoration or recycling, which shall take place not later than 1 s after the loss of flame.
A new start of the burner shall not be possible until the burner control unit has been manually reset.
7.4.2 Safety shut-down of burners with a throughput > 30 kg/h
The fuel supply shall be automatically cut off and safety shut-down shall occur not later than at the end of the
safety time, if:
a) during burner start-up, the flame had not been established on expiry of the safety time;
b) during operation the flame is extinguished, and is not apparent at the end of the safety time, following one
attempt at recycling, which shall take place not later than 1 s after the loss of flame.
A new start of the burner shall not be possible until the burner control unit has been manually reset.
7.4.3 Reaction time to achieve lock-out
Whenever lock-out is required, it shall be achieved within 30 s after safety shut-down.
7.5 Flame detector and system
7.5.1 Sensors for visible light
These considerations apply to the mean value of the appliances or sensors to be tested.
If the illumination intensity is < 0,5 lx during operation, sensors for visible light are not allowed. When using
flame detection devices equipped with sensors for light, the maximum response of which is within the visible
spectrum, these devices shall fulfil the requirements as detailed in a) to c):
a) For an illumination intensity of the burner flame during operation of less than 3 lx at 2 856 K the
requirements shown in Figure 1 a) shall be met.
Any signal for presence of light before release of fuel (spurious light signals) shall be at a lower level of
illumination than that for the signal for absence of light by extinguishing of the flame during operation
(negative switching differential). The switching circuit for the negative switching differential shall be
checked against possible interruptions, by the implementation of suitable measures, e.g. at least simple
active or passive redundancy. Such flame detectors shall be tested together with the burner to which they
are fitted.
b) in case of an illumination intensity of the burner flame during operation of less than 7 lx at 2 856 K the
requirements shown in Figure 1 b) shall be met.
Any signal for presence of light before release of fuel (spurious light signals) shall be at a lower level
...