Burner Management System (BMS) Design Fundamentals
A Burner Management System (BMS) is the safety layer standing between a combustion process and a catastrophic failure. It governs startup sequencing, flame supervision, and shutdown logic — and unlike general process control, it’s subject to strict code requirements that leave little room for interpretation.
Core Functions a BMS Must Perform
- Pre-purge airflow verification before ignition is permitted
- Pilot and main flame proving with continuous flame supervision
- Safety shutoff valve sequencing and proof-of-closure monitoring
- Automatic shutdown on any safety interlock fault, with lockout requiring manual reset
NFPA 86 and the Cause-and-Effect Matrix
Every BMS design starts with a cause-and-effect matrix mapping each possible fault — low fuel pressure, high temperature, loss of combustion air — to its required system response. NFPA 86 sets minimum requirements for which faults must trigger a safety shutdown versus an alarm, and the matrix is the document that gets reviewed line by line during commissioning and TSSA approval.
Hardwired Safety vs. PLC Logic
A frequent design question is how much of the safety function can live in the PLC versus dedicated hardwired safety relays or a burner management controller. Code requirements and insurance carrier preferences both influence this — critical safety interlocks are typically kept in dedicated safety hardware, with the PLC handling sequencing and operator interface on top.
Flame Supervision Technology Choices
- UV scanners — fast response, common for gas and light oil flames
- UV/IR combined scanners — reduce false trips from ambient radiation sources
- Flame rod (rectification) — simple and reliable for smaller atmospheric burners
Next Steps
BMS design isn’t a place to cut corners on documentation — the cause-and-effect matrix, wiring diagrams, and sequence of operations all get scrutinized during TSSA review and insurance audits.