The emergency stop button on a deep hole drilling machine is the last line of defense when something goes wrong — a tool crash, a coolant line burst, an operator caught in the machine. If the E-stop does not stop all hazardous motion immediately, the consequences can be severe. Despite this critical role, E-stop circuits are often tested cursorily or not at all. A systematic testing program verifies that every E-stop device on every machine functions correctly and stops all hazardous functions within the required time.
E-Stop Circuit Types
Type Comparison
| Circuit Type | Architecture | Safety Level | Reset Method | Common Applications |
|---|
| Hardwired (direct) | E-stop button directly opens motor contactor coil circuit | High — failsafe | Twist-to-release — manual reset | Simple machines — older equipment |
| Safety relay monitored | E-stop → safety relay → contactors | Very high — redundant — monitored | Safety relay reset + button release | Most industrial machines |
| PLC-based (safety-rated) | E-stop → safety PLC → contactors via safety outputs | Very high — programmable | PLC reset + safety relay reset | Complex machines with safety PLC |
| PLd / PLe (Performance Level d/e) | Redundant channels — monitored — certified | Highest — SIL 3 / PL e | Per manufacturer | High-risk applications |
E-Stop Device Types
| Device Type | Typical Location | Advantages | Disadvantages |
|---|
| Push-button (red on yellow) | Machine control panel — pendant | Standard — easy to reach | Limited to one location |
| Pull-cord (along machine length) | Along long machines — guideway | Accessible from anywhere along machine | Can be pulled accidentally |
| Foot-operated pedal | At operator station | Hands-free operation | Accidental activation |
| Key-operated | Remote stations | Prevents unauthorized restart | Slower to activate |
Testing Procedures
Frequency Requirements
| Test Type | Frequency | What It Verifies | Standard Reference |
|---|
| Functional test (visual) | Daily (at start of shift) | E-stop buttons present — undamaged — accessible | IEC 60204-1 |
| Operational test | Weekly | Each E-stop stops machine motion | ISO 13850 |
| Full circuit test | Monthly | Complete circuit integrity — redundant channels | NFPA 79 |
| Timed stop test | Annually | Stop time within specification | ISO 13855 |
| Safety relay test | Annually | Safety relay function — replacement interval | Per manufacturer |
Daily Functional Test
| Step | Action | Detail |
|---|
| 1 | Visually inspect all E-stop devices | Red push-button on yellow background — not damaged |
| 2 | Verify E-stop is accessible | Not blocked by parts, tools, or debris |
| 3 | Check E-stop labeling | Clearly marked — not faded |
| 4 | Verify mushroom-head button condition | Not cracked — not stuck |
| 5 | Document inspection | Pass/fail — date — inspector |
Weekly Operational Test
| Step | Action | Detail |
|---|
| 1 | Ensure machine is in safe condition | No tool in cut — no personnel near hazards |
| 2 | Start machine — bring to operating state | Spindle running at low speed — coolant pump on |
| 3 | Activate E-stop button | Push firmly — button should latch |
| 4 | Verify all hazardous motion stops | Spindle stops — coolant pump stops — axis motion stops |
| 5 | Verify no automatic restart | Machine must not restart when E-stop is released |
| 6 | Release E-stop (twist or pull) | Button returns to normal position |
| 7 | Verify machine will not restart automatically | Must require manual reset |
| 8 | Perform manual reset per machine procedure | — |
| 9 | Document test results | Pass/fail — date — inspector |
Monthly Full Circuit Test
| Step | Action | Detail |
|---|
| 1 | Lockout/tagout machine | LOTO per procedure |
| 2 | Open electrical enclosure | Access to safety circuit components |
| 3 | Check E-stop wiring | Terminals tight — no corrosion — no chafing |
| 4 | Check safety relay | LED status — no fault codes |
| 5 | Check contactors | Clean contacts — no welding — no pitting |
| 6 | Test each E-stop station individually | All E-stop devices on machine — each must stop motion |
| 7 | Test with redundant channel monitoring | Verify both channels of safety circuit function |
| 8 | Measure stop time (if equipped with stop time monitor) | Within specification |
| 9 | Close enclosure — restore power | — |
| 10 | Full operational test per weekly procedure | — |
| 11 | Document results | Detailed report — signed |
Circuit Verification
| Check | Method | Acceptance | Frequency |
|---|
| Continuity of E-stop wiring | Measure resistance from button to safety relay | < 1 ohm | Annually |
| Contact state (NC contacts) | Check normally closed contacts open on E-stop activation | All NC contacts open | Monthly |
| Redundant channel agreement | Both channels must agree within time limit | Both channels open within 50 ms | Monthly |
| Safety relay self-test | Initiate safety relay test function | No fault codes | Monthly |
| Contactor welding check | Check contactor for welded contacts | No welding — clean contacts | Monthly |
| Reset circuit function | After E-stop — verify manual reset required | Machine does not restart automatically | Weekly |
| Stop time measurement | Measure time from E-stop activation to motion stop | Per machine specification (typically < 500 ms) | Annually |
Compliance Standards
| Standard | Title | Key Requirement for E-Stop |
|---|
| ISO 13850 | Safety of machinery — Emergency stop function | E-stop must override all other functions — must stop hazardous motion — must require manual reset |
| IEC 60204-1 | Safety of machinery — Electrical equipment of machines | E-stop circuit must be hardwired (not software-only) — must use NC contacts — must be red on yellow |
| NFPA 79 | Electrical Standard for Industrial Machinery | E-stop must stop all hazardous motion — must be readily accessible — must be clearly marked |
| ISO 13849-1 | Safety of machinery — Safety-related parts of control systems | Performance Level (PL) rating for safety circuit — PL d or PL e required for E-stop |
| ISO 13855 | Safety of machinery — Positioning of safeguards | Stop time measurement required for safety distance calculation |
Common E-Stop Faults
| Fault | Symptom | Cause | Corrective Action |
|---|
| E-stop does not stop machine | Machine continues running after E-stop activation | Welded contactor — bypassed circuit — safety relay failure | Replace contactor — restore circuit — replace relay |
| Machine restarts automatically after E-stop release | Automatic restart — no manual reset | Incorrect wiring — wrong safety relay configuration | Correct wiring — configure for manual reset |
| E-stop button stuck in pressed position | Button does not latch or release | Mechanical damage — debris in button | Replace E-stop button |
| Intermittent E-stop activation | Machine stops randomly | Chafed wire — loose terminal — moisture in button | Repair wiring — dry or replace button |
| Safety relay fault | Machine will not start — fault code on relay | Channel mismatch — contactor feedback failure — internal fault | Check wiring — replace relay if internal fault |
| E-stop LED not illuminated (illuminated types) | No light | Internal LED failed — power supply issue | Replace button — check power |
| Pull-cord tension incorrect | Cord too loose or too tight | Stretch — improper installation | Adjust tension mechanism |
FAQ
How often should emergency stop circuits be tested on deep hole drilling machines?
Daily: visual inspection of all E-stop devices — check for damage and accessibility. Weekly: operational test — activate each E-stop while the machine is running (spindle, coolant pump, axis motion) and verify all hazardous motion stops immediately. Monthly: full circuit test — including redundant channel verification, contactor inspection, and safety relay status check. Annually: timed stop test — measure the actual stop time and verify it is within the machine specification. All tests should be documented with date, inspector, and pass/fail result. The weekly operational test is the most important — it takes 2 minutes but catches most E-stop faults.
What should happen when an E-stop is pressed on a deep hole drilling machine?
When an E-stop is pressed: all hazardous motion must stop immediately — the spindle must stop rotation (coast to stop — no braking if brake is not a safety function), the coolant pump must stop (high-pressure coolant can cause injury), all axis motion must stop (feed stops — slide motion stops), the machine must not restart automatically when the E-stop is released (manual reset required — typically by pressing a reset button), and the E-stop button must latch in the pressed position (twist-to-release or pull-to-release). The E-stop must override all other machine functions — it cannot be bypassed by any CNC mode or programming.
What are the legal requirements for E-stop testing?
Legal requirements vary by jurisdiction but generally follow: OSHA 29 CFR 1910.147 (Control of Hazardous Energy — lockout/tagout) requires that energy isolation devices (including E-stop where used as isolation) be tested periodically. ANSI/NFPA 79 (Electrical Standard for Industrial Machinery) requires that E-stop circuits be tested at regular intervals. ISO 13850 requires that the E-stop function be tested periodically. In practice: OSHA requires that E-stop testing be documented as part of the machine safety program. A documented weekly E-stop test program demonstrates regulatory compliance and due diligence. Without documentation, there is no proof that testing occurred.
Can an E-stop circuit be tested without stopping production?
No — the E-stop circuit must be tested while the machine is in operation to verify that it actually stops hazardous motion. A visual inspection (button is present and undamaged) does not verify the circuit function. The weekly operational test takes approximately 2 minutes per machine — schedule it at a shift change, during a natural production break, or as part of the startup procedure at the beginning of a shift. For machines running 24/7, coordinate with production scheduling. The 2 minutes of production time per week is negligible compared to the safety risk of an untested E-stop circuit.
What is a safety relay and how does it work in an E-stop circuit?
A safety relay is a dedicated device that monitors the E-stop circuit and controls the power contactors that supply energy to hazardous machine functions. It uses redundant internal circuits (two channels) — both channels must agree on the E-stop state for the machine to operate. If one channel fails, the safety relay opens the contactors and prevents machine operation. The safety relay also monitors the contactors themselves (feedback monitoring) — it verifies that the contactors actually opened when commanded. This redundancy and monitoring provides much higher safety integrity than a simple hardwired E-stop circuit. Safety relays are typically replaced every 5–10 years or after a fault — check the manufacturer's recommended service life.
Emergency stop circuit testing is a legal requirement and a moral obligation. Test every E-stop device on every machine weekly — activate it while the machine is running and verify all hazardous motion stops. Perform full circuit tests monthly — including redundant channel verification and contactor inspection. Document every test. A 2-minute weekly test is a small investment for the certainty that your machine's most important safety system will work when it is needed. This article reflects industry practice as of 2026.
