Semiconductor Fab Tool — Etch / CVD Process Equipment
Project Summary
| Field | Detail |
|---|---|
| Application | Etch or CVD process tool with flammable/toxic process gases, RF power supply, gas cabinet |
| Industry | Semiconductor manufacturing fab |
| Primary standards | SEMI S2 + S8 + S14 + IEC 60204-1 + ISO 12100 |
| US electrical | NFPA 79 + NEC + UL 508A |
| Unique hazards | Toxic/flammable process gases, RF energy, high-voltage plasma supply, cleanroom fire risk |
Standard Stack
| Standard | Role |
|---|---|
| ISO 12100 | Risk assessment foundation |
| ISO 13849-1 | Safety function performance level (PLd typical for tool interlocks) |
| SEMI S2 | Equipment EH&S — electrical safety, LOTO, interlock design, chemical safety |
| SEMI S8 | Ergonomics — control placement, maintenance access, force limits |
| SEMI S14 | Fire risk assessment — gas shutoff, detection, suppression |
| IEC 60204-1 | Machine electrical equipment design |
| NFPA 79 | US machine electrical (required by most US fabs alongside IEC 60204-1) |
| NEC | US facility installation |
| UL 508A | US control panel listing |
| IEC 62443 | Cybersecurity for fab host interface |
Design Workflow Overview
flowchart LR
A[Phase 1<br/>Risk Assessment<br/>and Safety Architecture]
B[Phase 2<br/>Electrical Design]
C[Phase 3<br/>Ergonomics and<br/>Documentation]
D[Phase 4<br/>Fab Qualification]
A --> B --> C --> D
Design Workflow
Phase 1 — Risk Assessment and Safety Architecture
Step 1: ISO 12100 Risk Assessment
- Identify all hazard sources: RF, HV, flammable gas, toxic gas, hot surfaces,
rotating parts, pinch points in wafer handling
- Estimate risk (severity × probability) for each hazard
- Determine required risk reduction — most personnel hazards target PLd
Step 2: Interlock Architecture (SEMI S2 + ISO 13849-1)
- Map each hazard to a safety function (door interlock, E-stop, gas shutoff, HV interlock)
- Select safety relay or safety PLC for interlocks independent of process control
- Interlocks must fail to safe state (de-energize, close valves, stop motion)
- Manual reset required after any safety interlock actuation
Step 3: SEMI S14 Fire Risk Assessment
- List all flammable and pyrophoric gas lines
- Identify ignition sources: electrical arcs, hot surfaces, RF sparking
- Define fire scenarios: credible combination of fuel, ignition, oxidizer
- Determine required: automatic shutoff, detection type, clean agent suppression
Phase 2 — Electrical Design
Step 4: IEC 60204-1 / NFPA 79 Electrical Design
- Power distribution: main disconnect, branch circuit protection, transformer isolation
- Control circuit: 24 VDC safety bus separated from process control bus
- E-stop circuit: dual-channel, NC contacts, monitored (Category 3 / PLd minimum)
- All exposed conductive parts grounded; equipotential bonding per IEC 60204-1 §8
Step 5: High-Voltage Interlock Design (SEMI S2)
- RF generator and bias supply: door interlock de-energizes RF before panel opens
- Interlock: hardwired, not software-only; must be Category 3 minimum
- Capacitor bank: discharge to <50 V within 5 s of HV isolation
OR: discharge indicator + access interlock
Step 6: Gas Control System Design (SEMI S2 + S14)
- All toxic and flammable gas lines: normally-closed pneumatic shutoff valves
- Pressure switch per line: detects line break, triggers automatic shutoff
- Exhaust flow monitoring: exhaust confirmed before any process gas flow allowed
- Gas detector(s): concentration alarm triggers shutoff + exhaust increase + alert
Phase 3 — Ergonomics and Documentation
Step 7: SEMI S8 Ergonomics Review
- E-stop placement: 600–1400 mm from floor, ≤40 N actuation force
- Operator panel: within normal visual field, no glare, text legible at 600 mm
- Maintenance access: field-replaceable items accessible without removing unrelated parts
- Minimum access clearance: 600 mm wide × 900 mm high
Step 8: Documentation Package
- Electrical schematic (single-line + control circuit)
- Safety interlock list (each interlock: type, input, output, safe state, reset)
- LOTO procedure (one padlock per isolation point, posted on tool)
- Hazardous materials inventory (gases, chemicals, quantities)
- Fire risk assessment report (SEMI S14)
- Installation and utilities requirements
Phase 4 — Fab Qualification
Step 9: SEMI S2 EH&S Review
- Fab EH&S team reviews documentation package
- Tool walkthrough: verify all interlocks, LOTO points, labels, E-stops
- Witness interlock functional tests: door interlocks, E-stop, gas shutoff on alarm
Step 10: IEC 62443 Cybersecurity Assessment (if networked)
- Identify tool interfaces: fab host (SECS/GEM), remote diagnostics, maintenance port
- Define security zone boundary and conduit to fab network
- Apply appropriate SL-T (typically SL 1–2 for process tools)
- Harden: disable unused ports, enforce authentication, log events
Gas Delivery Control System
graph TD
GC[Gas Cabinet<br/>Zone / Source]
subgraph "Gas Lines"
MFC1[MFC — Process Gas A]
MFC2[MFC — Process Gas B]
SOV1[NC Shutoff Valve A]
SOV2[NC Shutoff Valve B]
PS1[Pressure Switch A]
PS2[Pressure Switch B]
end
subgraph "Safety Interlock System"
GD[Gas Detector<br/>Toxic / Flammable]
EF[Exhaust Flow Monitor]
SIS[Safety PLC<br/>ISO 13849-1 PLd]
end
subgraph "Process Chamber"
CH[Etch / CVD Chamber]
RF[RF Power Supply<br/>HV Interlock]
end
GC --> SOV1 --> MFC1 --> CH
GC --> SOV2 --> MFC2 --> CH
PS1 --> SIS
PS2 --> SIS
GD -->|Alarm| SIS
EF -->|Confirm flow| SIS
SIS -->|Close on fault| SOV1
SIS -->|Close on fault| SOV2
SIS -->|Disable RF| RF
Process Start Permissive Flow
flowchart TD
A[Start Request] --> B{Exhaust flow confirmed?}
B -->|No| X1[Block start]
B -->|Yes| C{Gas detector clear?}
C -->|No| X1
C -->|Yes| D{Doors and panels closed?}
D -->|No| X1
D -->|Yes| E{HV and RF interlock healthy?}
E -->|No| X1
E -->|Yes| F{Manual safety reset complete?}
F -->|No| X1
F -->|Yes| G[Enable gas path and RF permit]
G --> H[Recipe start allowed]
Fault Trip Sequence
flowchart TD
F[Fault Detected] --> T{Fault Type}
T -->|Gas alarm| S[Safety PLC]
T -->|Exhaust low| S
T -->|Door open| S
T -->|E-stop| S
S --> V[Close NC gas valves]
S --> R[Disable RF and HV]
S --> M[Stop wafer handling motion]
V --> A[Alarm and event log]
R --> A
M --> A
A --> Q{Safe conditions restored<br/>and manual reset complete?}
Q -->|No| L[Remain latched safe]
Q -->|Yes| N[Return to standby]
Key Engineering Decisions
Capacitor discharge: 5-second rule vs. interlock approach (SEMI S2): The 5-second discharge is cleanest — use a bleed resistor across the capacitor bank. If the time constant makes 5 seconds impractical (large bank, high voltage), use a discharge indicator (a panel-mounted meter showing capacitor voltage) plus a proximity interlock that prevents panel opening until the meter reads <50 V. The meter must be readable without opening the panel.
RF interlock vs. RF generator software disable: RF must be disabled by a hardwired interlock before any panel opens — not by the recipe software. The generator must have a hardware enable input that the safety relay drives. Recipe-level RF off is insufficient for personnel protection.
HV Access Interlock Flow
flowchart TD
A[Access request] --> B[Hardwire RF and HV isolation]
B --> C{Capacitor voltage below safe threshold?}
C -->|No| D[Keep panel interlocked closed]
D --> E[Show discharge indicator]
E -->|wait for bleed-down| C
C -->|Yes| F[Permit panel opening]
Clean agent suppression in the tool enclosure: If the SEMI S14 fire risk assessment determines suppression is required, use FM-200 or Novec 1230 (water is prohibited in cleanrooms). The suppression system must interface with the facility fire alarm — actuation must trigger a facility alarm even if the agent was discharged locally.
Cybersecurity Zone Diagram
flowchart LR
FH[Fab Host Network]
FW[Firewall or Conduit Boundary]
TC[Tool Controller]
SP[Safety PLC]
MP[Maintenance Port]
RD[Remote Diagnostics]
FH --> FW --> TC
TC -. hardwired only .- SP
MP --> TC
RD --> FW
See Semiconductor industry overlay →
See 15-Standard Compliance Stack scenario →
This site is an independent educational reference for industrial automation standards. It paraphrases and organizes guidance in original language; it is not a substitute for the official published standards, professional engineering judgment, or legal review, and content has not been independently verified against current published editions.
Items marked Review pending await technical review against the identified edition. Items marked Planned have no reviewed source material behind them. Do not rely on this site for compliance determinations, safety-critical design decisions, or legal interpretation.