When Does a Burner Management System Need to Be Retrofitted? Signs, Triggers, and What the Process Looks Like

A burner management system (BMS) is the safety control of any fired equipment, from a small heater in a food and beverage plant to a multi-burner reboiler or sulfur recovery unit process gas burner at a refinery or gas plant. When it works, it protects people, equipment, and products. When it begins to fail, the consequences range from nuisance shutdowns to serious safety hazards.

For plant and operations engineers, the question is rarely whether a BMS retrofit will be needed. It’s when, and what to do about it. This guide walks through the signs that trigger a retrofit, what the retrofit process actually involves, and what to look for in the firm you hire to execute the work.

Signs Your Burner Management System Needs a Retrofit

Most BMS retrofits are triggered by one of three conditions: an aging system that no longer meets current code, a near-miss or upset event that exposed a gap in the existing safety logic, or obsolescence of the controller hardware itself. The signs below appear well before a forced shutdown, and operations teams that catch them early have far more control over scope, schedule, and budget.

Performance and Reliability Signs

• Frequent nuisance trips. If the system shuts down under conditions that turn out to be false alarms, sensors, logic, or relays may be drifting out of tolerance. Safety sensors are designed to fail in a safe state.  As these components age, they will frequently cause a furnace trip, interrupting operations.
• Difficulty sourcing replacement parts. Discontinued flame safeguard controllers, obsolete safety controllers or PLCs, or hard-to-find I/O modules signal that the system is past its supportable life.
• Manual workarounds in operating procedures.  Unfortunately, temporarily bypassing interlocks or jumpering safety inputs to keep equipment running is a temptation for plant maintenance personnel. The obvious hazard is that bypassing combustion safeguard inputs leaves the original safety case the system was designed to support no longer intact.
• Slow or unreliable startup sequences. Interrupted purge timers, ignition sequences that misfire, or valve proving that intermittently fails all point to degraded components.

Safety and Compliance Triggers

• Recent NFPA code updates. NFPA-85 (boilers), NFPA-86 (industrial ovens and furnaces), and NFPA-87 (fired fluid heaters) are updated on regular cycles. A BMS designed to an older edition may no longer meet the current code that applies to your installation.
• Insurance carrier or AHJ findings. Insurance inspections and Authority Having Jurisdiction reviews often flag legacy systems for retrofit before the operator would have prioritized the work.
• Near-miss or upset event. Repeated failed ignition attempts, a delayed shutdown, frequent operating outages, or a safety-related event frequently trigger a root cause review, and the BMS is the first system audited.
• Process change. If burner capacity, fuel type, or duty cycle has changed since the original BMS was commissioned, the existing safety logic may no longer match the process risk.

What a BMS Retrofit Project Actually Involves

A BMS retrofit is more than swapping a controller. Done correctly, it covers the full safety lifecycle from hazard analysis through commissioning. The phases below describe what a qualified engineering firm will deliver.

1. Front-End Assessment

The project starts with a site walk and a review of existing documentation, including the original cause-and-effect matrix, P&IDs, electrical drawings, and any prior incident reports. The goal is to establish what the existing system does, where it falls short, and what the retrofit needs to deliver. This phase also confirms which NFPA code edition the new system must meet.

2. Safety Design and Specification

Next comes the updated cause-and-effect matrix, a revised functional specification, and a controller selection that matches the project’s Safety Integrity Level (SIL) requirements. Many retrofits move from a standalone flame safeguard controller to a Safety PLC platform when the application warrants higher SIL coverage or when integration with the broader plant control system is part of the scope.

3. Fabrication and Factory Acceptance Testing

Panel and fuel train fabrication happens off-site in a controlled environment. Before the panel ships, a fully hardwired Factory Acceptance Test (FAT) verifies every input, output, interlock, and shutdown sequence against the cause-and-effect matrix. A thorough FAT with the client’s engineering, operations, and maintenance teams in the room is the single most effective way to cut on-site commissioning time.

4. Installation, Commissioning, and Documentation

On-site work includes panel and fuel skid installation, field wiring verification, loop checks, and burner-specific commissioning. The project closes with as-built drawings, an updated cause-and-effect matrix, and a complete documentation package that supports future audits, training, and the next round of maintenance.

What to Look for in a BMS Retrofit Partner

BMS retrofits sit at the intersection of safety engineering, controls integration, and fabrication. A firm that only handles one of those disciplines will need to subcontract the others, which adds risk, cost, and schedule. The qualifications below separate qualified integrators from generalists.

• NFPA code expertise. Verify that the firm designs to NFPA-85, NFPA-86, and NFPA-87, as applicable to your equipment, and that they can speak to the current edition governing your installation.
• UL panel certifications. UL 508A is the baseline for industrial control panels. UL 698A applies to hazardous (classified) locations protected with Intrinsically Safe (IS) field circuits, and UL 1203 applies to explosion-proof and dust-ignition-proof equipment. The certifications a firm holds may impact the compliance inspections of your facility.  
• Safety PLC and SIS experience. ANSI/ISA S84 Safety Instrumented Systems and Safety PLCs require specific design practices. 
• In-house fabrication. Firms that engineer and fabricate under one roof can run hardwired FATs against the actual production panel before it ships. That single capability typically substantially reduces on-site commissioning time.
• Single-point responsibility. When engineering, integration, and fabrication sit inside one organization, the design intent is preserved from specification through commissioning. There is no finger-pointing between vendors when something needs to be adjusted.

How Principal Technology Approaches BMS Retrofits

Principal Technology has been engineering, integrating, and fabricating burner management and fuel train systems since 1997. Our BMS retrofits are designed to NFPA-85, NFPA-86, and NFPA-87 as applicable, ranging from standard flame safeguard controllers to Safety PLC-based systems for higher-SIL applications. Our panels carry UL 508A, UL 698A, or UL 1203 certifications, covering general-purpose, intrinsically safe (IS) for hazardous locations, and explosion-proof installations.

Every retrofit is built in our Plano, Texas, facility, where the hardwired FAT happens before the panel ever leaves the shop. Clients sit at the same table as our engineers during FAT, which is consistently the step that gives operations teams confidence that the system will perform on day one.

Because PTI’s engineering, system integration, and fabrication groups all sit under one roof, the cause-and-effect matrix written in the specification phase is the same document the panel is tested against and the same document operators reference after commissioning. There is no translation loss between teams.

Ready to scope a BMS retrofit?

If aging equipment or operations upgrades have put a BMS retrofit on your plate, contact us today to discuss your project.