weighing-booths Installation and Commissioning: IQ/OQ Validation Protocol for Containment Integrity

weighing-booths Installation and Commissioning: IQ/OQ Validation Protocol for Containment Integrity

1. Executive Summary

Installation and commissioning of weighing-booths containment systems requires systematic execution of three validation phases—Installation Qualification (IQ), Operational Qualification (OQ), and Performance Qualification (PQ)—each with documented acceptance criteria tied to international standards including ISO 14644, ASTM E779, and GMP Annex 1. The following critical procedures must be executed in sequence: (1) IQ documentation preparation and equipment verification against design specifications, with objective evidence collected for each item and deviations formally reported per FDA 21 CFR Part 211 requirements. (2) On-site pressure decay testing using ASTM E779 methodology at 250 Pa differential pressure, with acceptance threshold of ≤0.1 L/s at 25 Pa for biosafety level 2 containment, performed with the door in operational (inflated) condition and all openings sealed. (3) Interlock timing sequence verification under both normal and failure-mode conditions, including simultaneous-open prevention testing and HVAC interlock response measurement, with all delays recorded and verified within specified ranges of 0.5–2 seconds per step.


2. IQ Documentation Preparation and Equipment Verification Against Design Specifications

Installation Qualification (IQ) protocol execution begins with structured documentation that references the validation master plan, manufacturer design specifications, and Factory Acceptance Test (FAT) records; any IQ item not meeting acceptance criteria must be formally documented in a deviation report with impact assessment and corrective action before sign-off.

Prerequisite: Validation Master Plan Alignment and Design Specification Review

Before on-site installation begins, the commissioning team must obtain and review three foundational documents: the validation master plan (VMP) that defines the scope and acceptance criteria for all three qualification phases, the manufacturer design specification that details equipment model, serial number, rated capacity, and operational parameters, and the FAT report from the factory that confirms pre-delivery testing results. The site installation environment must be verified to match the design specification: ambient temperature range 18–26°C, relative humidity 35–65%, and cleanroom classification ISO Class 7 or better per ISO 14644-1:2024 [ISO 14644-1:2024]. If the site environment deviates from the design specification, a formal environmental deviation must be documented and approved before proceeding.

Procedure: IQ Item Verification and Objective Evidence Collection

The IQ protocol must address ten mandatory items, each with specific acceptance criteria and linked objective evidence. Equipment identification verification requires photographic documentation of the model nameplate, serial number, manufacturer name, and year of manufacture; this photograph must be attached to the IQ record and cross-referenced to the purchase order and design specification. Installation environment verification requires temperature and humidity logging over a minimum 24-hour period using a calibrated data logger (accuracy ±1°C and ±3% RH); the logged data must be graphed and attached to the IQ record with notation of any excursions outside the 18–26°C and 35–65% range. Utilities verification requires measurement of incoming electrical supply voltage (±10% of rated voltage per IEC 60038), frequency (50 Hz or 60 Hz ±0.5 Hz), and compressed air supply pressure (6 bar ±0.5 bar) and oil content (≤0.1 mg/m³ per ISO 8573-1:2010 [ISO 8573-1:2010] Class 2); all measurements must be recorded with calibrated test equipment and certificates of calibration attached. Software and firmware version verification requires screenshot capture of the control system HMI (Human Machine Interface) displaying the installed firmware version, PLC (Programmable Logic Controller) software version, and any security patches; these screenshots must be compared against the design specification and FAT report to confirm no unauthorized modifications occurred during shipment or storage.

IQ Item Acceptance Criterion Objective Evidence Deviation Threshold
Equipment Identification Model, serial number, and year match design specification Nameplate photograph + purchase order cross-reference Any mismatch
Environmental Conditions Temperature 18–26°C, humidity 35–65% over 24 hours Calibrated data logger graph + certificate of calibration >2 excursions or >1°C deviation
Electrical Supply Voltage ±10%, frequency ±0.5 Hz Multimeter measurement + calibration certificate Any out-of-range reading
Compressed Air Pressure 6 bar ±0.5 bar, oil content ≤0.1 mg/m³ per ISO 8573-1 Pressure gauge + oil analysis report Pressure <5.5 bar or oil >0.15 mg/m³
Software Version Firmware and PLC software match FAT report HMI screenshot + FAT report comparison Any version mismatch

Acceptance: IQ Completion and Deviation Management

All ten IQ items must achieve acceptance status before OQ testing begins. Any IQ item that does not meet its acceptance criterion must be documented in a formal deviation report that includes the item name, acceptance criterion, as-found result, root cause analysis, proposed corrective action, and re-test plan. The deviation report must be reviewed and approved by the site quality representative and the manufacturer's commissioning engineer before corrective action is executed. After corrective action is completed, the affected IQ item must be re-tested and the re-test result documented in the same deviation report; only after re-test acceptance can the IQ phase be closed. The IQ completion sign-off must be dated and signed by the site quality representative, the commissioning engineer, and the equipment operator, with copies retained in the validation file per GMP Annex 1 [GMP Annex 1] and FDA 21 CFR Part 211.192 [FDA 21 CFR Part 211] requirements. Facilities that execute IQ testing without formal deviation management create regulatory audit findings because the validation file cannot demonstrate that all acceptance criteria were met before OQ commenced.


3. On-Site Pressure Decay Testing Using ASTM E779 Methodology for Airtightness Verification

Pressure decay testing using ASTM E779-10 [ASTM E779-10] methodology quantifies the airtightness of the weighing-booths enclosure by measuring the rate at which internal pressure decays after the system is pressurized and isolated; this test must be performed with the door in operational (inflated) condition to validate the complete sealing system under actual use conditions, not just the frame seal.

Prerequisite: Test Equipment Calibration and Enclosure Preparation

Before pressure decay testing begins, all test equipment must be calibrated and certificates of calibration must be current (within 12 months). The differential pressure gauge must have a minimum resolution of 0.1 Pa and accuracy of ±2% of full scale; a typical range is 0–500 Pa. A reference barometric pressure gauge must be installed outside the enclosure to account for atmospheric pressure changes during the test. The enclosure must be prepared by sealing all openings except the test port: the door must be in the closed and inflated condition (pneumatic seal pressurized to the design setpoint, typically 0.3–0.5 bar gauge), all pass-through ports must be sealed with blanking plates, and any exhaust or intake dampers must be in the closed position. The interior surface must be visually inspected for any visible cracks, gaps, or damage to the sealing surfaces; if damage is observed, the enclosure must not be tested until repairs are completed and re-inspected.

Procedure: Pressure Decay Test Execution and Data Recording

The test procedure follows ASTM E779-10 [ASTM E779-10] exactly: (1) pressurize the enclosure to 250 Pa above ambient using a calibrated pressure source (typically a hand pump or low-pressure compressor with a regulator); (2) isolate the enclosure by closing the isolation valve; (3) record the initial pressure reading and the barometric pressure reading; (4) wait 1 minute for pressure stabilization; (5) record the pressure reading at the 1-minute mark; (6) calculate the pressure decay rate in Pa/minute; (7) repeat the test a minimum of three times. For each test run, record the following data: initial pressure (Pa), final pressure after 1 minute (Pa), barometric pressure (Pa), ambient temperature (°C), and calculated decay rate (Pa/minute). The air leakage rate in liters per second at 25 Pa is calculated using the formula: Q = (ΔP × V) / (t × 25 Pa), where ΔP is the pressure decay in Pa, V is the enclosure volume in liters, and t is the time interval in seconds. All three test runs must be recorded in a test data sheet with the average decay rate calculated and compared to the acceptance criterion.

Test Run Initial Pressure (Pa) Final Pressure (Pa) Decay Rate (Pa/min) Calculated Leakage (L/s @ 25 Pa) Pass/Fail
Run 1 250 235 15 0.08 Pass
Run 2 250 236 14 0.075 Pass
Run 3 250 234 16 0.085 Pass
Average 15 0.08 Pass

Acceptance: Leakage Rate Threshold and Test Documentation

For biosafety level 2 containment, the acceptance criterion is a leakage rate of ≤0.1 L/s at 25 Pa per ASTM E779-10 [ASTM E779-10]. For biosafety level 3 containment, the acceptance criterion is ≤0.05 L/s at 25 Pa. The average of the three test runs must meet the acceptance criterion; if any single run exceeds the criterion by more than 10%, that run must be repeated and documented as a repeat test. The test data sheet must include the test date, time, ambient conditions (temperature, barometric pressure, relative humidity), test equipment model numbers and calibration certificate numbers, the name and signature of the technician performing the test, and the name and signature of the quality representative witnessing the test. If the leakage rate exceeds the acceptance criterion, a formal deviation report must be initiated that documents the as-found leakage rate, the suspected failure mode (e.g., door seal degradation, frame gap, pass-through port leak), and the corrective action (e.g., door seal replacement, frame re-torquing, port re-sealing). After corrective action, the pressure decay test must be repeated and the repeat test result documented in the same deviation report. Facilities that perform pressure decay testing with the door unseated or with openings not fully sealed obtain invalid test results that do not represent the actual sealing system performance under operational conditions.


4. Interlock Timing Sequence Verification Under Normal and Failure-Mode Conditions

Interlock logic validation requires testing both normal operating sequences (door open/close, HVAC response) and failure modes (power loss, communication loss, sensor faults) to confirm that the safety-critical interlock behavior meets the design specification under all conditions, not only under normal operation.

Prerequisite: Interlock Logic Diagram Review and Test Equipment Setup

Before interlock testing begins, the commissioning team must obtain and review the interlock logic diagram that shows all door-to-door interlocks, door-to-HVAC interlocks, and sensor inputs (door position switches, pressure transducers, BMS communication). The logic diagram must specify the sequence of events for each interlock condition: for example, "when door A is opened, door B lock must remain engaged for a minimum of 2 seconds after door A seal deflates." A stopwatch or digital timer (resolution 0.1 second) must be available to measure all interlock timing delays. The BMS (Building Management System) communication interface must be verified to be operational: if the interlock logic includes BMS-based interlocks (e.g., "prevent door open if exhaust fan is not running"), the BMS communication must be tested for connectivity and response time before interlock testing begins. A test plan must be prepared that lists all interlock conditions to be tested, the test procedure for each condition, the expected result, and the acceptance criterion.

Procedure: Normal Sequence Testing and Simultaneous-Open Prevention Verification

Normal sequence testing begins with the door in the closed and sealed condition. Initiate a door open request via the HMI (Human Machine Interface) and observe the sequence: (1) the pneumatic seal should deflate (pressure drops from 0.3–0.5 bar to 0 bar); (2) after seal deflation, the door lock should release (mechanical lock disengages); (3) the door should open freely. Record the time from "open request" to "seal deflation complete" and from "seal deflation complete" to "lock release." Repeat this sequence three times and record the timing for each cycle. Then test the reverse sequence: close the door, verify the lock engages, verify the seal inflates to the design setpoint (0.3–0.5 bar), and verify the door is locked. Record the timing for each step. Simultaneous-open prevention testing requires attempting to open door B while door A is in the open position: initiate a door B open request via the HMI and verify that door B lock remains engaged (does not release) and that the HMI displays a "door interlock active" message. Record the time delay between the door B open request and the interlock blocking message. Repeat this test three times. HVAC interlock testing requires monitoring the exhaust fan speed during door open/close cycles: when door A opens, the exhaust fan should increase to high-speed setpoint (typically 100% of rated speed); when door A closes, the exhaust fan should return to normal speed (typically 50% of rated speed) after a time delay of 30–60 seconds. Record the fan speed before door open, immediately after door open, and at 30-second intervals after door close until the fan returns to normal speed.

Interlock Condition Test Procedure Expected Result Acceptance Criterion As-Found Result Pass/Fail
Door A Open Sequence Initiate open request, measure seal deflation time Seal deflates within 2 seconds, lock releases within 1 second after deflation Seal deflation ≤2 sec, lock release ≤1 sec after deflation Seal 1.8 sec, lock 0.9 sec Pass
Simultaneous-Open Prevention Attempt to open door B while door A open Door B lock remains engaged, interlock message displays Door B lock does not release, message displays within 0.5 sec Lock held, message at 0.3 sec Pass
HVAC Interlock Response Open door A, monitor exhaust fan speed Fan increases to 100% within 2 seconds Fan speed ≥95% within 2 seconds of door open Fan at 98% at 1.8 sec Pass

Acceptance: Failure-Mode Testing and Interlock Timing Validation

After normal sequence testing is completed and all timing measurements are within specification, failure-mode testing must be executed. Power loss test: simulate a loss of power to the interlock controller by disconnecting the 24 VDC power supply; verify that both doors enter a safe state (unlocked for egress) within 5 seconds and that a "power loss" alarm is displayed on the HMI. BMS communication loss test: simulate a loss of communication between the interlock controller and the BMS by disconnecting the Ethernet cable or disabling the communication port; verify that the interlock controller continues to operate in local mode (door open/close functions via HMI remain operational) and that a "BMS communication loss" alarm is displayed. Sensor open circuit test: simulate an open circuit on a critical sensor (e.g., door position switch) by disconnecting the sensor wiring; verify that a "sensor fault" alarm is displayed and that the interlock logic enters a safe state (e.g., prevents door open if the door position sensor is faulted). All failure-mode test results must be documented in the OQ test record with the as-found result, the acceptance criterion, and the pass/fail determination. Facilities that test interlock logic only under normal operating conditions without testing failure modes accept an unquantified safety risk because the actual interlock behavior during real fault conditions remains unvalidated.


5. OQ Test Execution Protocol: Performance Testing and Alarm Response Validation

Operational Qualification (OQ) testing validates that the weighing-booths system operates correctly under all specified conditions, including manual and automatic control modes, setpoint adjustment, alarm activation and acknowledgment, and BMS communication; OQ tests must be executed in the sequence defined by the OQ protocol to ensure that prerequisite tests are completed before dependent tests.

Prerequisite: OQ Protocol Review and Test Sequence Planning

Before OQ testing begins, the commissioning team must obtain the OQ protocol document that defines the test sequence, prerequisite tests for each OQ item, test procedures, expected results, and acceptance criteria. The OQ protocol must reference the completed IQ items that are prerequisites for each OQ test: for example, "OQ Test 3 (Pressure Control Accuracy) requires completion of IQ Item 5 (Compressed Air Supply Verification) and OQ Test 1 (Manual Mode Operation)." A test execution plan must be prepared that lists all OQ tests in the protocol-defined sequence and identifies any dependencies between tests. The commissioning team must verify that all prerequisite tests are completed before starting a dependent test; if a prerequisite test fails, the dependent test must not be executed until the prerequisite test is corrected and re-tested. All test equipment used during OQ testing must be calibrated and certificates of calibration must be current; this includes pressure gauges, thermometers, stopwatches, and any other measurement instruments.

Procedure: OQ Test Execution in Protocol-Defined Sequence with Deviation Management

OQ Test 1 (Manual Mode Operation) requires the operator to manually open and close the door via the HMI and verify that the door responds correctly to each command. Record the time from "open command" to "door fully open" and from "close command" to "door fully closed" for three cycles; the acceptance criterion is that all cycles complete within the specified time range (typically 5–10 seconds per cycle). OQ Test 2 (Automatic Mode Operation) requires the system to be placed in automatic mode and a cycle initiated via the HMI; verify that the system executes the complete cycle (door open, dwell time, door close) without operator intervention and that the cycle time matches the design specification (typically 30–60 seconds total). OQ Test 3 (Pressure Control Accuracy) requires the system to maintain the pneumatic seal pressure within ±0.05 bar of the design setpoint (e.g., 0.4 bar ±0.05 bar) during a 10-minute continuous operation test; record the pressure reading every 30 seconds and verify that no reading deviates more than ±0.05 bar from the setpoint. OQ Test 4 (Alarm Response – Low Pressure) requires the system to detect a low-pressure condition and activate an alarm; simulate a low-pressure condition by reducing the compressed air supply pressure below the alarm threshold (typically 5.5 bar) and verify that a "low pressure" alarm is displayed on the HMI and that an audible alarm sounds within 2 seconds. OQ Test 5 (BMS Communication) requires the system to communicate with the BMS via the specified protocol (typically Modbus RTU or BACnet); verify that the BMS can read the system status (door position, pressure, alarm state) and that the BMS can send commands (open door, acknowledge alarm) and the system responds correctly. If any OQ test fails, the test must be documented in a deviation report that includes the test name, acceptance criterion, as-found result, root cause analysis, and proposed corrective action; after corrective action is completed, the failed test must be repeated and the repeat test result documented in the same deviation report.

OQ Test Acceptance Criterion Test Equipment As-Found Result Pass/Fail Deviation Report
Manual Mode Cycle time 5–10 sec, 3 cycles Stopwatch 6.2, 6.1, 6.3 sec Pass None
Automatic Mode Cycle time within ±5% of design spec Stopwatch + HMI timer 58 sec (design 60 sec) Pass None
Pressure Control Pressure ±0.05 bar over 10 min Calibrated pressure gauge 0.38–0.42 bar Pass None
Low Pressure Alarm Alarm displays within 2 sec of low pressure Pressure regulator + stopwatch Alarm at 1.8 sec Pass None
BMS Communication BMS reads status, accepts commands BMS terminal + network analyzer All parameters readable, commands executed Pass None

Acceptance: OQ Completion and Protocol Amendment Documentation

All OQ tests must be executed in the sequence defined by the OQ protocol. If a protocol deviation occurs (e.g., a test is executed out of sequence, or a test procedure is modified during execution), the deviation must be documented and approved before proceeding. Protocol amendments must be recorded in a separate amendment log that includes the amendment date, the test affected, the reason for the amendment, the approval signature, and the date the amendment was approved. After all OQ tests are completed and all deviations are closed, the OQ phase is complete and the OQ completion sign-off must be dated and signed by the site quality representative, the commissioning engineer, and the equipment operator. The OQ test record must include all test data sheets, deviation reports, protocol amendments, and sign-off documentation, retained in the validation file per GMP Annex 1 [GMP Annex 1] and FDA 21 CFR Part 211.192 [FDA 21 CFR Part 211] requirements. Facilities that execute OQ tests in an arbitrary sequence or without documenting protocol amendments create regulatory non-compliance findings because the validation file cannot demonstrate that the OQ protocol was followed as written.


6. FAQ — Installation & Commissioning Guide

Q1: What is the immediate post-delivery inspection checklist for weighing-booths equipment?
Upon delivery, verify that the equipment model, serial number, and year of manufacture match the purchase order and design specification by photographing the nameplate. Inspect the exterior for any visible damage (dents, cracks, corrosion) and document with photographs; if damage is observed, file a damage claim with the freight carrier before accepting the shipment. Verify that all accessories listed in the packing list are present (door seals, fasteners, documentation, test certificates) and store in a climate-controlled environment (18–26°C, 35–65% RH) until installation begins.

Q2: What civil works and site preparation are required before installation begins?
The installation site must be prepared to ISO Class 7 cleanroom standard per ISO 14644-1:2024 [ISO 14644-1:2024] or better, with ambient temperature maintained at 18–26°C and relative humidity at 35–65%. The floor must be level (±3 mm over 3 meters) and capable of supporting the equipment weight plus a 50% safety factor; verify floor load capacity with a structural engineer if uncertain. Electrical power supply must be verified to be within ±10% of the rated voltage and frequency ±0.5 Hz per IEC 60038 [IEC 60038]; compressed air supply must be verified to be 6 bar ±0.5 bar with oil content ≤0.1 mg/m³ per ISO 8573-1:2010 [ISO 8573-1:2010] Class 2.

Q3: What are the standard differential pressure settings for biosafety containment zones?
For biosafety level 2 containment, the pneumatic seal pressure is typically set to 0.3–0.5 bar gauge (3–5 kPa gauge) to provide a positive seal without excessive force on the door frame. For biosafety level 3 containment, the seal pressure may be increased to 0.5–0.7 bar gauge (5–7 kPa gauge) to provide additional sealing margin. The actual setpoint must be specified in the design specification and verified during IQ testing; any deviation from the design specification must be documented in a deviation report and approved before OQ testing begins.

Q4: What is a quick field-based airtightness verification method without specialized equipment?
A qualitative smoke test can be performed using a smoke stick or smoke tube: pressurize the enclosure to 250 Pa using a hand pump, then move the smoke stick around all seams, joints, and openings; if smoke is drawn into the enclosure, a leak is present at that location. This qualitative test does not replace the quantitative ASTM E779-10 [ASTM E779-10] pressure decay test but can quickly identify gross leaks (>1 L/s) that require immediate repair before formal testing.

Q5: What BMS integration parameters must be verified for interoperability?
The BMS communication protocol (typically Modbus RTU or BACnet) must be verified to match the design specification; confirm the serial port parameters (baud rate, data bits, stop bits, parity) and the device address. Verify that the BMS can read all required system parameters (door position, pressure, alarm state) and that the BMS can send all required commands (open door, close door, acknowledge alarm); test communication with a network analyzer or BMS terminal to confirm all parameters are readable and all commands execute correctly.

Q6: What spare parts and maintenance scheduling are recommended for critical sealing components?
The pneumatic door seal (typically elastomer material) should be inspected quarterly for visible degradation (cracks, hardening, loss of elasticity) and replaced annually or after 10,000 inflation-deflation cycles, whichever occurs first. Compressed air filters should be replaced every 6 months or when the pressure drop across the filter exceeds 0.5 bar. Pressure transducers and differential pressure gauges should be recalibrated annually per ISO 17025 [ISO 17025] standards to maintain measurement accuracy within ±2% of full scale.


7. References & Data Sources

ISO 14644-1:2024. Cleanrooms and associated controlled environments — Part 1: Classification of air cleanliness by particle concentration. International Organization for Standardization.

ISO 8573-1:2010. Compressed air — Part 1: Contaminants and purity classes. International Organization for Standardization.

ASTM E779-10. Standard Test Method for Determining Air Leakage Rate by Fan Pressurization. ASTM International.

GMP Annex 1. Manufacture of Sterile Medicinal Products. European Commission, European Medicines Agency.

FDA 21 CFR Part 211. Current Good Manufacturing Practice for Finished Pharmaceuticals. U.S. Food and Drug Administration.

ISO 17025:2017. General requirements for the competence of testing and calibration laboratories. International Organization for Standardization.

IEC 60038:2009. IEC standard voltages. International Electrotechnical Commission.

WHO Laboratory Biosafety Manual. Third Edition. World Health Organization.

CDC Biosafety in Microbiological and Biomedical Laboratories (BMBL). Fifth Edition. Centers for Disease Control and Prevention.

ISO 14698-1:2003. Cleanrooms and associated controlled environments — Biocontamination control — Part 1: General principles and methods. International Organization for Standardization.

ASHRAE 52.2-2017. Method of Testing General Ventilation Air-Cleaning Devices for Removal Efficiency by Particle Size. American Society of Heating, Refrigerating and Air-Conditioning Engineers.


8. Disclaimer

This installation and commissioning guide is based on publicly available engineering standards, published industry data, and documented field validation procedures referenced in the standards section. Given the critical safety requirements of biosafety laboratories and cleanroom containment systems, all installation and commissioning activities must be performed by qualified personnel, validated against on-site conditions, and reviewed against manufacturer-provided IQ/OQ/PQ documentation before operational handover. The procedures and acceptance criteria presented in this article reflect general industry engineering practice and do not replace manufacturer-specific installation instructions or site-specific risk assessments required by applicable regulatory authorities.