Hazardous Area Classification & Protection Concepts — Contain It, or Never Start It
The 02:40 call-out
A pressure transmitter on a hydrogen make-up line has failed. The night-shift electrician has a spare in the store. It is the right range, the right process connection, the right 4–20 mA signal, and the label says Ex. He fits it, lands the cable in the existing gland, closes the lid and books the job.
Guess first: what could be wrong, given that the transmitter is certified Ex?
Three separate things could each be wrong — and none of them is visible in a photograph of the
lid. The spare may be Ex e where the area needs Ex d. It may be IIB where the gas is
hydrogen (IIC). And even if it is the correct Ex db IIC T4 Gb unit, the gland he reused
may not be certified for that enclosure — in which case the assembly in front of him is no
longer a flameproof device at all, whatever the nameplate says.
The misconception, stated plainly
"Explosion-proof and intrinsically safe are the same thing — both mean 'safe for a hazardous area', so either will do."
It is an understandable belief. Both appear in the same specification, both carry an Ex marking, both are sold as "hazardous area rated". Let it stand for a moment, then look at what each one actually does:
- Ex d (flameproof / explosion-proof) — assumes the explosion happens. Gas gets in, a spark ignites it, and the enclosure is built to survive the internal pressure and to cool the escaping products below the ignition temperature on their way out through a machined gap.
- Ex i (intrinsic safety) — assumes the explosion must never happen. The circuit is limited in voltage, current, power and stored energy so that no spark it can produce — even under fault — carries enough energy to ignite the gas.
One contains a fire. The other guarantees there is never a fire. They are opposite philosophies, and the engineering consequences run in opposite directions: Ex d wants thick metal, heavy castings, five threads of engagement and a torque wrench; Ex i wants thin wires, a barrier, a documented energy budget and a limit on cable length. Swap one for the other and you have not "used a different brand of safety" — you have removed the safety.
Symbol & abbreviation key
Read the subscripts and suffixes as words and the marking becomes a sentence.
- AIT — auto-ignition temperature: the surface temperature at which the gas ignites with no spark at all · °C
- MIE — minimum ignition energy: the smallest spark energy that will light the gas · mJ (or µJ)
- MESG — maximum experimental safe gap: the widest gap through which a flame will not propagate out of a standard test vessel · mm
- MIC ratio — minimum igniting current of the gas ÷ that of methane · dimensionless
- EPL — equipment protection level:
Ga/Gb/Gcfor gas (Da/Db/Dcfor dust); the letter says how many faults the protection survives - Zone 0 / 1 / 2 — IEC classification by how often the flammable atmosphere is present
- Division 1 / 2 — the older NEC/NFPA classification of the same idea, in two bands
- IIA / IIB / IIC — IEC gas groups, easiest to hardest (propane → ethylene → hydrogen)
- T1 … T6 — temperature class: the equipment's maximum surface temperature, 450 °C down to 85 °C
- Uo, Io, Po, Co, Lo — the output limits of an IS barrier: volts, amps, watts, and the maximum external capacitance and inductance it can safely drive
- Ui, Ii, Pi, Ci, Li — the input limits and internal reactances of the IS field device
- Ex d / e / i / p / n / m / o / q — the protection concepts (see next section)
Why "II"? And where did Group I go?
IEC 60079 splits equipment into Group I (underground coal mines — firedamp/methane plus coal
dust, with its own rules because a mine cannot be evacuated quickly), Group II (surface
industry, explosive gas atmospheres) and Group III (explosive dust atmospheres: IIIA
combustible flyings, IIIB non-conductive dust, IIIC conductive dust). Everything an oil, gas or
chemical plant buys is Group II or Group III — hence every marking on a plant starts II. The
sub-letters A/B/C then rank the difficulty of the gas inside Group II. Group III's A/B/C rank
the conductivity of the dust, which is a different idea entirely wearing the same letters.
The ignition triangle — and what each concept removes
Nothing burns without all three of fuel (flammable gas or vapour in its flammable range), oxygen (air, essentially always present outdoors) and an ignition source (an electrical spark, or a hot surface). Remove any one leg and there is no fire. That single sentence organises the whole Ex catalogue:
| Concept | What it does | Leg removed | Typical EPL / zone |
|---|---|---|---|
| Ex d flameproof | contains the internal explosion; quenches and cools the flame in a machined gap | none — contained instead | db → Zone 1 (and 2) |
| Ex e increased safety | construction with no arcing/sparking parts and limited surface temperature in normal service | ignition source | eb → Zone 1, ec → Zone 2 |
| Ex i intrinsic safety | limits voltage, current, power and stored L and C below the gas MIE | ignition source (energetically) | ia → Zone 0, ib → Zone 1, ic → Zone 2 |
| Ex p pressurisation | purges the enclosure, then holds a clean-air/inert overpressure so gas cannot enter | fuel | pxb Zone 1 → safe, pzc Zone 2 → safe |
| Ex m / o / q encapsulation, oil, powder | physically separates the source from the atmosphere | fuel (contact with it) | ma/mb/mc |
Ex n (now largely ec + nR) |
Zone 2 only — "won't spark in normal operation" or restricted breathing | ignition source, normal service only | nR, ec → Zone 2 |
Look down the "leg removed" column and the misconception dies on its own: Ex d removes nothing. It is the only concept in the list that accepts the explosion and engineers the consequence. Everything else prevents it.
See the two philosophies side by side — a flameproof enclosure with its flame path highlighted and hot gases leaving cooled, then the same duty done as an intrinsically safe loop with a barrier, and the ignition triangle showing which leg each one removes: ▶ open the interactive: electrical hazardous area 3d
Ex nA is gone — and that matters when you read an old datasheet
IEC 60079-15 used to cover nA (non-sparking), nC (enclosed-break / hermetically sealed) and
nR (restricted breathing). From the 2010/2017 revisions, nA was withdrawn and re-homed as
Ex ec inside IEC 60079-7 (increased safety, EPL Gc), and the sealed-device concepts moved to
Ex mc / Ex ic / Ex db. nR remains. So a 2005 datasheet saying Ex nA II T4 and a 2024
one saying Ex ec IIC T4 Gc may describe the same product. Reading the old mark as "some
obsolete lesser thing" and rejecting it is as wrong as assuming the two are interchangeable
without checking the certificate — always go to the certificate, not the folklore.
Where the gas is: zones, divisions and presence-hours
Classification is a probability statement about the atmosphere, made by process and safety engineers (IEC 60079-10-1, or API RP 505 / NFPA 497), not a statement about the equipment:
Zone 0 : explosive atmosphere present CONTINUOUSLY, for long periods, or frequently
Zone 1 : LIKELY to occur in normal operation, occasionally
Zone 2 : NOT likely in normal operation; if it does occur, only for a SHORT period
The usual order-of-magnitude guidance behind those words (not a code requirement, but how the numbers are normally reasoned about):
Zone 0 > 1000 h/year Zone 1 10 – 1000 h/year Zone 2 < 10 h/year
That is why Zone 0 is nearly always inside something — inside a tank above the liquid, inside a vent stack, inside a closed sump. The open plot of a process unit is almost never Zone 0.
The North American Division system says the same thing with one fewer band:
Division 1 ≈ Zone 0 + Zone 1 Division 2 ≈ Zone 2
The mapping is deliberately conservative in one direction only: a Division 1 area covers the Zone 0 duty and the Zone 1 duty, so Division-1 equipment is not automatically Zone 0 equipment in the IEC sense. NEC Article 505 now lets US projects use the zone system directly, which is why you meet both on the same brownfield site.
How hard the gas is: groups and temperature classes
Two independent axes. Confusing them is the second-most common error after the Ex d / Ex i mix-up.
Axis 1 — gas group ranks how easily the gas is ignited and how easily its flame squeezes through a gap. It is set by MESG and the MIC ratio:
IIA MESG > 0.90 mm propane, methane, petrol vapour, most hydrocarbons
IIB MESG 0.50–0.90 mm ethylene, ethylene oxide, coke-oven gas
IIC MESG < 0.50 mm HYDROGEN (0.29 mm) and ACETYLENE (0.37 mm)
Equipment certified for a harder group covers the easier ones: IIC equipment is acceptable in
IIB and IIA areas, never the reverse. (The IIB + H2 marking is a real middle case: tested with
hydrogen but not with acetylene.)
Axis 2 — temperature class caps the equipment's maximum surface temperature, and it must sit below the gas's auto-ignition temperature:
T1 = 450 °C T2 = 300 °C T3 = 200 °C T4 = 135 °C T5 = 100 °C T6 = 85 °C
requirement: T-class surface temperature < AIT of the gas
A colder class covers a hotter one: T6 equipment is acceptable wherever T1–T5 is required.
Why hydrogen is the hard case — and why it is also the easy case. Hydrogen has the smallest practical MESG (0.29 mm) and an MIE of about 0.019 mJ, roughly one-thirteenth of propane's 0.25 mJ — a spark you cannot feel, see or hear will light it. So on Axis 1 it is the worst gas in industry: flameproof joints must be machined to hundredths of a millimetre over a long path, and an IS barrier for IIC must throttle energy an order of magnitude harder than for IIA. But hydrogen's AIT is 560 °C, so on Axis 2 it is one of the easiest gases: a plain T1 surface clears it. Carbon disulphide, a benign-looking IIC liquid, has an AIT of 90 °C and forces T6 on everything near it. Group and T-class do not track each other. You must read both.
Try the combinations yourself — pick a zone, pick a real gas, pick an equipment type, and watch which concepts survive, with the marking string assembled and checked live: ▶ open the interactive: electrical hazardous area calc
The two numbers are measuring two different physics
MESG is a flame-quenching measurement: a standard 20 cm³ sphere is filled with the gas at its most easily ignited concentration, ignited, and the flanged gap widened until flame escapes and lights the surrounding test atmosphere. It is about heat loss to the gap walls beating the flame's heat release — pure geometry and thermal conduction. That is why it sets the Ex d joint dimensions. MIE is a spark-energy measurement from a calibrated capacitive discharge. That is why it sets the Ex i energy budget. The MIC ratio (against methane) is a third measurement — break-spark current in an inductive test circuit — and it exists because some gases order differently by spark current than by gap. IEC 60079-20-1 tabulates all three per substance; a gas is placed in the group given by whichever parameter is worse.
Reading the marking — and how a certificate dies in the field
Take a full nameplate and read it left to right:
II 2 G Ex db IIC T4 Gb IP66
│ │ │ │ │ │ │ │
│ │ │ │ │ │ │ └─ EPL: gas, "b" = safe with one expected fault → Zone 1
│ │ │ │ │ │ └────── max surface temperature 135 °C
│ │ │ │ │ └─────────── gas group: hydrogen/acetylene capable
│ │ │ │ └───────────────── flameproof enclosure, protection level b
│ │ │ └────────────────────── explosion-protected to IEC 60079
│ │ └─────────────────────────── G = gas atmosphere (D = dust)
│ └─────────────────────────────── ATEX category 2 (≈ Zone 1)
└──────────────────────────────────── ATEX equipment group II (surface industry)
Now the part that fails audits. A certificate covers an assembly, not a lump of metal. The
Ex db claim on that plate is only true while every one of the following holds:
- Every cable entry is a certified Ex d entry device of the right group, thread form and length, with the minimum thread engagement (commonly 5 full threads or 8 mm). A commercial gland, or an Ex e gland, in an Ex d enclosure makes the whole thing uncertified.
- A barrier gland is used where the certificate requires one. Unfilled cable interstices are a flame path: hot gas travels along the inside of the cable into the next junction box. This is the classic way an explosion propagates from a "flameproof" device.
- Every unused entry is closed with a certified Ex d stopping plug, fitted from outside, correct thread — not a commercial blanking plug, not PTFE tape and hope.
- The flame-path faces are undamaged, unpainted and not gasketed. A scratch across a machined joint, a coat of site paint in the gap, or a "helpful" O-ring added to stop water ingress can each destroy the quench. Protect with the certificate-permitted grease only.
- Every cover bolt is present, the correct grade, and torqued. The enclosure is rated by test against the internal explosion pressure; four of eight bolts is not the tested article.
The equivalent list for Ex i is shorter but just as unforgiving: the loop is only intrinsically safe if the whole loop is — barrier, cable and field device together — and the cable length is part of the certificate, because cable capacitance and inductance are stored energy.
Worked example — one IS loop and one T-class check
(a) How long can the IS cable be? A galvanic isolator for a 4–20 mA transmitter:
Barrier output Uo = 28.0 V Io = 93 mA Po = 651 mW Co = 83 nF Lo = 4.2 mH
Field device Ui = 30.0 V Ii = 100 mA Pi = 750 mW Ci = 5 nF Li = 10 µH
Cable 200 pF/m capacitance, 1.0 µH/m inductance
Matching rules — barrier output must not exceed device input, and the barrier must be able to carry the external reactance left over after the device's own:
Uo ≤ Ui → 28.0 ≤ 30.0 ✓ Io ≤ Ii → 93 ≤ 100 ✓ Po ≤ Pi → 651 ≤ 750 ✓
C_cable,max = Co − Ci = 83 − 5 = 78 nF → 78 000 pF ÷ 200 pF/m = 390 m
L_cable,max = Lo − Li = 4.2 − 0.01 = 4.19 mH → 4190 µH ÷ 1.0 µH/m = 4190 m
Capacitance governs: 390 m. Route the cable 400 m and the loop is no longer certified — not because anything got hotter or drew more current, but because the cable itself now stores enough charge to make an igniting spark when a terminal is broken. Nothing on the transmitter nameplate tells you this. It lives in the loop drawing and the IS calculation sheet.
(b) Which temperature class? Diethyl ether, used as a solvent, has an AIT of 160 °C:
T3 = 200 °C → 200 > 160 ✗ the equipment surface could ignite the vapour with no spark
T4 = 135 °C → 135 < 160 ✓ acceptable
So a IIB T4 device is required — and note that diethyl ether is only IIB, while hydrogen
next door is IIC T1. The ether needs the colder surface; the hydrogen needs the tighter gap.
Neither requirement helps with the other.
Common pitfalls
- Treating Ex d and Ex i as interchangeable — the headline error. Also: assuming an "IS transmitter" is safe when wired to a non-IS power supply. Intrinsic safety is a property of the loop, not of the box.
- Reading the NEC and IEC group letters as if they matched. They run in opposite directions: NEC Group A (acetylene) and B (hydrogen) correspond to IEC IIC; NEC C ≈ IIB; NEC D ≈ IIA. "Group B" and "Group IIB" are nearly opposites.
- Assuming Division 1 equipment is Zone 0 equipment. Division 1 spans Zone 0 and Zone 1;
only an EPL
Ga(ia,da,ma) device is a Zone 0 device. - Picking the T-class from the gas group. Hydrogen is IIC T1; carbon disulphide is IIC T6. Same group, five classes apart.
- Forgetting the ambient temperature range on the certificate (e.g. −20 °C to +60 °C). A T-class is only valid inside it; a hot enclosure in a 55 °C desert summer may drop a class.
- Glands, plugs, bolts and paint — the four field failures listed above. The commonest real finding on an Ex inspection (IEC 60079-17) is not a wrong concept; it is a right concept wrecked by an uncertified entry or a missing bolt.
- Losing the IS cable-length limit when a loop is re-routed or a junction box is added.
- Ignoring dust. A gas-certified
Gbdevice is not aDbdevice; combustible dust needs IIIA/IIIB/IIIC, a T-class quoted as a surface temperature in °C, and IP6X sealing.
Outcome
- Ignition needs fuel + oxygen + source. Every Ex concept except one removes a leg: Ex e/Ex i/Ex n remove the source, Ex p/m/o/q remove the fuel. Ex d removes nothing — it contains the explosion and quenches the flame in a machined gap. Contain versus prevent: opposite philosophies, not synonyms.
- Zones say how often gas is present (0 → continuous, 1 → normal-operation occasional, 2 → abnormal and brief); Division 1 ≈ Zone 0 + 1, Division 2 ≈ Zone 2.
- Gas group (MESG/MIE) and temperature class (AIT) are independent axes. IIC covers IIB and IIA; T6 covers T1–T5. Hydrogen is the worst gas for gap and spark energy (MESG 0.29 mm, MIE 0.019 mJ) and one of the mildest for temperature (AIT 560 °C, T1).
- An Ex certificate covers an assembly: wrong gland, missing barrier gland, uncertified stopping plug, damaged flame path or missing bolts each void it in the field. For Ex i, the cable length is part of the certificate — Co − Ci and Lo − Li set the metres.
- Interactive: ▶ open the interactive: electrical hazardous area calc — zone + gas + equipment in, acceptable concepts and a decoded marking out, with invalid combinations flagged and explained.
- 3D: ▶ open the interactive: electrical hazardous area 3d — one field device shown as Ex d (flame path, hot gas leaving cooled, and what a wrong gland does), as Ex i (barrier-limited energy, spark below MIE) and as Ex p (purged), with the ignition triangle showing the leg removed.
Open items
- Add dust (Group III) properly: EPL Da/Db/Dc, layer vs cloud temperature limits, and how IP rating substitutes for the flame path.
- Add the Ex inspection grades of IEC 60079-17 (visual / close / detailed) and a sample checklist.
- Worked Ex p purge calculation: volume exchanges, leakage rate, purge time and the pressure switch settings.
- Cross-link to the instrumentation topics: an IS loop's energy budget interacts with HART and with multi-drop barriers.
One sheet from EPiC Circle
Interactive engineering lessons across every EPC discipline — calculators, 3D models and misconception-first teaching. Free to read; sign in to track progress, take the quizzes and ask questions.
Open in EPiC Circle →Educational teaching material — simplified and illustrative. Not for engineering
design use.
© EPiC Circle · provided by PipeAxis