HES 9600 Fail Safe vs Fail Secure
The HES 9600 ships in fail-secure mode (locked when unpowered) and converts to fail-safe via internal jumper. Fail-secure mode is required for Florida Building Code FL# 14307 windstorm certification and ANSI/SDI A250.13 compliance. Fail-safe mode voids windstorm ratings but may be required by fire marshals for specific egress paths.
What is the difference between fail-safe and fail-secure?
Fail-secure locks the door when power is removed; fail-safe unlocks the door when power is removed. The "fail" refers to what happens during a power failure. Fail-secure maintains security during outages; fail-safe ensures egress during outages.
| Characteristic | Fail-Secure | Fail-Safe |
|---|---|---|
| Power removed | Door locks | Door unlocks |
| Power applied | Door unlocks | Door locks |
| Priority | Security | Egress |
| Power failure | Building secured | Building accessible |
| Typical use | Exterior, secure areas | Fire exits, emergency |
| Windstorm rated | ✓ Yes | ✗ No |
How does fail-secure work?
In fail-secure mode, the solenoid keeper remains in the locked position when unpowered, and retracts to unlock when power is applied. This means the strike requires a momentary power pulse to release the latchbolt. Access control systems send a brief signal (typically 3–10 seconds) when granting access.
Fail-Secure Operation Sequence
- Normal state: Strike is locked (no power)
- Access granted: Panel sends power to strike
- Strike unlocks: Solenoid retracts, latchbolt can release
- Door opens: User pushes panic bar, exits
- Timer expires: Panel cuts power, strike re-locks
Fail-secure mode is more energy-efficient because power is only consumed during unlock events. A building with 100 fail-secure strikes uses significantly less power than 100 continuously-powered fail-safe strikes.
How does fail-safe work?
In fail-safe mode, the solenoid keeper remains in the unlocked position when unpowered, and extends to lock when power is applied. This means the strike requires continuous power to maintain the locked condition. Any power interruption immediately unlocks the door.
Fail-Safe Operation Sequence
- Normal state: Strike is locked (power continuously applied)
- Access granted: Panel cuts power to strike
- Strike unlocks: Solenoid releases, latchbolt can release
- Door opens: User pushes panic bar, exits
- Timer expires: Panel restores power, strike re-locks
Fail-safe mode requires continuous power to maintain security. Any power interruption—from outages, wiring faults, or breaker trips—will unlock all fail-safe doors simultaneously. This makes fail-safe unsuitable for most security applications.
When should I use fail-secure mode?
Use fail-secure for exterior doors, secure areas, data centers, and any application where security must be maintained during power failures. Fail-secure is the default and most common configuration for the HES 9600.
Fail-Secure Applications
- Exterior entrance doors — Building perimeter security
- Server rooms and data centers — Sensitive infrastructure
- Pharmacies and controlled substance storage — DEA compliance
- Hurricane/windstorm zones — Florida Building Code compliance
- Detention and correctional facilities — Inmate security
- Bank vaults and cash rooms — High-value areas
When should I use fail-safe mode?
Use fail-safe only when fire code or emergency egress requirements mandate unlocking during power failures. Fail-safe is less common and typically specified by fire marshals for specific egress paths where life safety overrides security concerns.
Fail-Safe Applications
- Primary fire exit routes — When required by fire marshal
- Assembly occupancy egress — Theaters, arenas, convention centers
- Healthcare patient areas — When evacuation priority required
- Elevator lobbies — Fire department access requirements
The HES 9600 is designed for use with panic hardware. Occupants can always exit by pressing the panic bar, regardless of the strike's fail-secure or fail-safe configuration. The operation mode only affects entry from the secure side.
Does fail-safe mode affect windstorm certification?
Yes—converting the HES 9600 to fail-safe mode removes the windstorm rating. Florida Building Code approval (FL# 14307) and ANSI/SDI A250.13 certification require fail-secure operation. Fail-safe strikes cannot be used in hurricane-rated assemblies.
| Certification | Fail-Secure | Fail-Safe |
|---|---|---|
| ANSI/BHMA A156.31 Grade 1 | ✓ Valid | ✓ Valid |
| UL 294 | ✓ Valid | ✓ Valid |
| UL 1034 | ✓ Valid | ✓ Valid |
| ANSI/SDI A250.13 Windstorm | ✓ Valid | ✗ Voided |
| Florida Building Code FL# 14307 | ✓ Valid | ✗ Voided |
How do I change the HES 9600 from fail-secure to fail-safe?
The HES 9600 fail-safe/fail-secure configuration is changed by repositioning an internal jumper on the solenoid assembly. This requires removing the decorative cover and accessing the mechanism. Consult the installation instructions for exact jumper locations.
Configuration Change Procedure
- Disconnect power from the strike
- Remove the decorative cover
- Locate the fail-safe/fail-secure jumper
- Move jumper to desired position (labeled on mechanism)
- Restore power and test operation
- Verify correct behavior before reinstalling cover
The HES 9600 ships in fail-secure mode. If you're unsure of the current configuration, test operation by disconnecting power—if the strike locks, it's fail-secure; if it unlocks, it's fail-safe.
Summary: Which mode should I choose?
For most applications, use fail-secure mode. Only specify fail-safe when explicitly required by fire code for a specific egress path, and never use fail-safe in windstorm-rated assemblies.
| Application | Recommended Mode |
|---|---|
| General commercial exterior | Fail-Secure |
| Hurricane zone (Florida, coastal) | Fail-Secure (required) |
| High-security interior | Fail-Secure |
| Fire exit (when required by AHJ) | Fail-Safe |
| Assembly occupancy egress | Fail-Safe (verify with fire marshal) |