Firefighting apparatus interlock chains are designed to ISO 14119 and ISO 13849-1, with guard-locking switches rated PLe, 60 N minimum direct-opening force, IP65/IP67 sealing, and B10d duty lives of 20,000,000 cycles feeding the PFH calculation [S1][S4].
The selection is driven by the hazard class of the pump, foam proportioner, and chemical storage enclosures, not by the switch catalogue: a pump bay with a 10 s run-down time needs guard-locking to ISO 14119 type 2, while a low-inertia foam tank access is fine with a coded tongue switch to type 1 [S1][S10].
Where a safety interlock earns its place on a fire truck or pump skid
Fire apparatus uses interlock switches on three distinct access points: pump house doors, foam proportioner enclosures, and drive-line guards. The relevant baseline is ISO 14119, which classifies interlocking devices associated with guards and dictates the positive-opening contact principle the NC contacts must satisfy [S1][S9].
For each, the published numbers are tight: 8 mm minimum direct-opening travel, 60 N minimum direct-opening force, thermal current (Ith) 2.5 to 8 A, rated insulation voltage (Ui) 300 to 400 V, and enclosure rating IP65 to IP67 per IEC 60529, with an operating window of -25 to +70 C [S1][S4]. The 20,000,000-cycle B10d figure from the Eaton datasheet is the duty-life input the ISO 13849-1:2023 PFH calculation requires, and the conversion has to be done before the safety integrity claim is auditable [S1].
Type-by-type comparison: tongue, guard-locking, RFID-coded
Three switch families compete for fire apparatus slots, and the decision rides on coding level, run-down time, and mechanical life. Mechanical tongue switches to ISO 14119 type 1 carry a 2,000,000-operation positive-opening credit under EN 60947-5-1 Annex K, lower cost, and easier field replacement, but they accept defeat with a bent pin [S1][S10].
Guard-locking solenoid switches to type 2 add a locking force that holds the door closed until the safety output confirms a safe state, with direct-opening travel of 8 mm and direct-opening force of 60 N minimum cited by IDEC [S1]. Non-contact RFID-coded switches to type 4 publish a PFHd commonly 1x10⁻⁹ to 5x10⁻⁹ for PLe-rated sensors, with mission time 20 years; they tolerate several millimetres of misalignment and resist low-level defeat, at higher unit cost [S1][S10].
Spec lines for comparison: tongue OX-D2/D3 at IP65/IP67, Ui 400 V, Ith 8 A, AC-15, le 2 A, Uimp 4 kV, mechanical life over 1,000,000 operations, electrical over 300,000, and operating frequency at or below 20 cycles/minute [S4]. Guard-locking series such as the 440G Atlas 5, 440G-MT, 440G-MZ, 440G TLS-GD2, and 440G-EZ electromagnetic interlocking switch carry the same EN 60947-5-1 baseline with integrated solenoid monitoring [S3][S5][S7].
Standards and certification chain that bind the spec
Every interlock on a fire truck or foam skid lives inside a safety chain that has to satisfy ISO 14119 for the device, ISO 13849-1 up to PLe or IEC 62061 up to SIL 3 for the chain, and EN 60947-5-1 for the contact block. The positive-opening NC contact is a hard requirement of the standard, not a marketing line [S1][S9][S10].
Direct opening means the NC contact is mechanically forced open by the actuator: spring failure alone cannot keep the contact closed, which is the failure mode the standard recognises as positively driven rather than spring-dependent [S1][S9]. On the bench, the DADISICK OX-D2/D3 datasheet quantifies this as a forced disengagement force of 60 N minimum and a forced breakaway distance of 10 mm minimum, both initial values [S4]. For the wider fire apparatus, NFPA 1900 (the standard for automotive fire apparatus) and EN 1846-2 for rescue vehicles also drive enclosure, vibration, and EMC expectations, and the interlock datasheet has to clear those before the switch reaches the BOM.
Environment, sealing, and the fire-apparatus reality
A pump house sees salt spray, road grime, foam detergent, and -20 to +60 C ambient swings, so the spec line that decides the part is sealing and material, not contact count. IDEC quotes IP67, operating temperature -25 to +70 C and storage -40 to +80 C, with relative humidity 45 to 85 % non-condensing, which brackets most fire-apparatus service envelopes [S1]. The DADISICK line rates -20 to +60 C non-freezing with the durability envelope at 5 to 35 C and 40 to 70 % RH for the published mechanical life [S4].
Mounting torque is also spec-grade: the IDEM KLP datasheet specifies 4.0 Nm on M5 fixing bolts, 1.5 Nm on lid and head bolts, and a 3 mm actuator-to-stop gap when the guard is closed, a tighter set than field installers typically apply [S1]. Outside the published envelope, condensation freezes inside the head, the positively-driven contacts stick, and the switch fails the ISO 14119 type requirement without the part itself being defective.
Selection logic for firefighting: who the switch is for, and who it is not
Use a guard-locking solenoid interlock on any access door guarding a hazard with measurable run-down: pump drive couplings, foam proportioner drive shafts, compressed air foam system (CAFS) blenders. Use a coded tongue switch to ISO 14119 type 1 on simple electrical cabinets and low-inertia enclosures where the stop is faster than the access time. Use an RFID-coded switch where the guard sits in a public-facing environment (an airport rescue pumper, a hazmat unit) and defeat resistance matters more than cost [S1][S10].
Do not use a mechanical interlock where the hazard is perimeter access to a large robot cell: presence-sensing safety mats and light curtains cover that risk better, and a door switch on a fence line is theatre, not safeguarding. For broader machine safety integration, the door interlock is one node in a chain that includes E-stops, light curtains, and safety PLCs, and the interlock datasheet has to fit the chain's PLe claim. Related selection notes for adjacent fire-apparatus work appear in the Safety Interlock Switch Selection for Mining Operations and Safety Interlock Switch Selection for Electrical Work: Spec Map articles, and a side-by-side look at the drive-train switch is in the Industrial Ethernet Switch Sizing and Selection Guide.
Limitations and the honest failure modes
Every mechanical interlock has a weak point: the actuator key. Schmersal literature is explicit that actuator keys are tamper-resistant, not tamper-proof, and a high-bypass guard can still be defeated with a second key, a bent pin, or by prying the door against the switch body on a poorly-installed unit [S1]. The mitigation is mechanical: a separate door-mounted stop, not the switch face, must take the closing impact.
Electrical contacts have a finite life. Even at 20,000,000 B10d, an application that cycles the guard every 10 s runs the mechanism through roughly 3,000,000 operations per year, which is the territory where preventive replacement schedules, not warranties, decide uptime [S1]. IP67 keeps out splash and brief immersion but is not a substitute for stainless heads and food-grade housings on foam-system washdown; the safety barrier and safety fence reference pages detail how the switch sits in a wider fire safety chain, while the safety certification page maps the third-party audit trail a fire apparatus builder has to produce before delivery.