How the IMI Maxseal Redundant Valve Manifold Improves SIS Availability and Functional Safety

In Safety Instrumented Systems (SIS), maintaining both functional safety and process availability is a constant engineering challenge. Emergency Shutdown (ESD) valves are expected to operate instantly when demanded, yet unnecessary shutdowns can result in significant production losses. Consequently, engineers increasingly use redundant solenoid architectures to reduce single-point failures while preserving operational continuity.

The IMI Maxseal Redundant Valve Manifold (RVM) is specifically designed to improve reliability within safety-critical valve automation systems. By integrating multiple solenoid valves within a compact manifold assembly, the RVM helps increase diagnostic coverage, reduce leak paths, simplify maintenance, and support demanding Safety Instrumented Functions (SIFs) in accordance with modern functional safety practices.

What Is a Redundant Valve Manifold?

A Redundant Valve Manifold (RVM) is an integrated assembly of multiple solenoid valves arranged in a voting architecture such as 1oo2, 2oo2, or 2oo3. Instead of relying on a single solenoid valve to control an actuator within a Safety Instrumented System, redundancy distributes control across multiple channels to reduce the probability of dangerous failures and improve overall loop availability.

These systems are commonly installed within Emergency Shutdown (ESD) valve assemblies, process shutdown systems, and critical isolation applications where both safety performance and operational uptime are important engineering objectives.

Why Redundancy Matters in Safety Instrumented Systems

In many SIS applications, the solenoid pilot valve represents one of the most common potential failure points within the final control element. A single failure can lead to an unwanted process shutdown or, more critically, prevent the safety function from operating when required.

Redundant architectures help address these risks by introducing fault tolerance, improving diagnostic capability, and allowing maintenance activities to occur without necessarily removing the entire safety function from service.

• Reduced single-point failures within SIS loops
• Improved operational availability
• Lower Probability of Failure on Demand (PFDavg)
• Enhanced diagnostic coverage
• Support for IEC 61508 and IEC 61511 safety strategies
• Reduced risk of spurious trips

Available Voting Architectures

The IMI Maxseal RVM supports several redundancy configurations, allowing engineers to balance safety requirements and production availability according to the specific Safety Instrumented Function.

1oo2 Architecture (One-Out-Of-Two)

A 1oo2 configuration uses two solenoid valves operating in parallel. Either channel can initiate the safety action, meaning that a single trip command or failure condition will move the final element to its safe state.

This architecture prioritizes safety performance by maximizing shutdown capability and reducing the likelihood of a dangerous failure to trip.

• Strong safety focus
• Fast fault response
• Reduced probability of failure to trip
• Common in critical shutdown applications

2oo2 Architecture (Two-Out-Of-Two)

A 2oo2 arrangement requires both solenoid channels to initiate a trip command before the shutdown action occurs.

This approach significantly reduces the risk of nuisance trips caused by individual component failures, signal disturbances, or isolated instrumentation faults.

• Higher process availability
• Reduced spurious shutdown risk
• Suitable for production-critical processes
• Less tolerant of dangerous failures than 2oo3 systems

2oo3 Architecture (Two-Out-Of-Three)

The 2oo3 architecture combines three independent solenoid channels operating within a two-out-of-three voting arrangement.

This configuration is often regarded as the optimum balance between functional safety and operational availability because the system can tolerate a single channel failure while maintaining both shutdown capability and production continuity.

• Tolerance of single-channel failures
• Reduced spurious trip probability
• Improved safety availability
• Supports online maintenance and diagnostics
• Common in high-integrity SIS applications

Why 2oo3 Voting Is Frequently Selected for High-Availability SIS Applications

Many critical process facilities require both exceptional safety performance and maximum uptime. In these environments, unnecessary shutdowns may result in substantial production losses while insufficient fault tolerance may compromise safety objectives.

The 2oo3 voting strategy provides a practical compromise between these competing requirements. Because the system can continue operating despite a single channel failure, maintenance teams can investigate faults and perform diagnostics without immediately shutting down the process.

For this reason, 2oo3 architectures are frequently used in LNG facilities, offshore platforms, refineries, petrochemical plants, and other high-consequence industrial operations.

Engineering Specifications of the IMI Maxseal RVM

Integrated Manifold Design Advantages

Traditional redundant systems are often assembled using separate solenoid valves, tubing, fittings, brackets, and interconnecting pipework. While functional, these assemblies introduce numerous potential leak points and increase installation complexity.

The integrated manifold design of the IMI Maxseal RVM consolidates these components into a single engineered assembly, improving reliability while simplifying installation and maintenance.

• Reduced leak paths
• Smaller installation footprint
• Lower assembly weight
• Simplified maintenance procedures
• Improved reliability through reduced connections

Optional Integrated Maintenance Bypass

Maintenance access is an important consideration within critical shutdown systems. The IMI Maxseal RVM can be supplied with an integrated bypass arrangement that allows maintenance personnel to isolate individual channels for inspection or replacement while maintaining process operation where permitted by site procedures.

Secure mechanical locking arrangements help prevent unauthorized bypass activation while preserving safety management requirements.

Visual Diagnostics and Failure Indication

Routine inspection and diagnostic verification become significantly easier when maintenance teams have immediate visibility into valve status.

Optional mechanical visual indicators provide clear channel status information, helping operators identify abnormal conditions before they affect SIS performance or shutdown reliability.

Typical Applications for Redundant Valve Manifolds

• Emergency Shutdown (ESD) valve systems
• Safety Instrumented Systems (SIS)
• Oil and gas production facilities
• LNG liquefaction and regasification plants
• Petrochemical processing facilities
• Refineries and hydrocarbon terminals
• Power generation facilities
• Offshore production platforms
• Hydrogen and clean-energy process systems

Engineering Considerations for RVM Selection

Selecting the appropriate redundancy architecture requires evaluation of both safety objectives and operational requirements. Factors commonly considered during design include:

• Target SIL requirements
• Safety Instrumented Function design objectives
• Acceptable spurious trip frequency
• Required process availability
• Actuator type and operating medium
• Pneumatic or hydraulic operation
• Maintenance philosophy
• Online testing and bypass requirements
• Diagnostic coverage objectives

Proper architecture selection helps optimize both safety performance and lifecycle reliability while minimizing unnecessary operational interruptions.

Frequently Asked Questions

What is a Redundant Valve Manifold?

A Redundant Valve Manifold is an integrated assembly of multiple solenoid valves configured using voting logic such as 1oo2, 2oo2, or 2oo3 to improve SIS reliability and reduce single-point failures.

What is 2oo3 voting logic?

A 2oo3 voting architecture uses three independent channels and requires two channels to agree before executing a shutdown action. This arrangement balances safety integrity and process availability while tolerating a single channel failure.

What is the difference between 1oo2 and 2oo2 architectures?

A 1oo2 system prioritizes shutdown capability because either channel can trigger the safety action. A 2oo2 system prioritizes process availability because both channels must initiate the trip before shutdown occurs.

Can a Redundant Valve Manifold improve SIL performance?

Redundancy, diagnostic coverage, and fault tolerance can contribute to improved Safety Instrumented Function performance and support SIL verification calculations when incorporated into a properly engineered SIS design.

What industries commonly use Redundant Valve Manifolds?

Oil and gas, LNG, petrochemical, power generation, offshore production, and other high-consequence process industries frequently use redundant valve manifolds to improve shutdown reliability and safety availability.

Key Takeaway

The IMI Maxseal Redundant Valve Manifold provides an integrated solution for improving Safety Instrumented System reliability, reducing single-point failures, and balancing process availability with functional safety objectives. Through support for 1oo2, 2oo2, and 2oo3 voting architectures, the platform enables engineers to select the redundancy strategy that best aligns with their operational and safety requirements.

For critical ESD and SIS applications, redundancy is not simply an equipment feature—it is an engineering strategy for maintaining shutdown integrity, reducing operational risk, and supporting long-term plant reliability.