UFC 3-490-06 Elevators: ASME A17.1, Seismic, and Cybersecurity

UFC 3-490-06 is the Department of Defense’s governing standard for elevators, escalators, platform lifts, dumbwaiters, material lifts, and moving walks in military facilities. It uses ASME A17.1 as its baseline safety code and then adds tri-service requirements that go beyond commercial practice: larger machine rooms, wider hoistway clearances, prohibited hydraulic designs, expanded emergency communication, and specific documentation for acceptance. The document was originally published on June 8, 2018, and updated through Change 1 on January 13, 2021.¹

What the Standard Covers

UFC 3-490-06 applies to all planning, design, construction, modernization, repair, maintenance, and equipment installation in DoD buildings, regardless of funding source.² New construction and significant upgrades to existing systems are both in scope, and the equipment types covered include passenger and freight elevators, wheelchair platform lifts, dumbwaiters, material lifts, escalators, and moving walks.¹

Overseas projects face an extra layer. Construction outside the United States is also governed by Status of Forces Agreements, Host Nation Funded Construction Agreements, and sometimes Bilateral Infrastructure Agreements. The project team must follow whichever standard is most stringent.² The UFC almost always controls the technical design, but local agreements can add permitting, labor, or environmental discharge requirements the UFC doesn’t address.

How It Modifies ASME A17.1

Every elevator in a DoD facility must meet ASME A17.1, and the UFC layers military-specific modifications on top.² These deltas exist because military facilities have longer service lives and more demanding maintenance cycles than typical commercial buildings, and a design that barely meets ASME A17.1 can be code-compliant but impractical over 50 years of government maintenance.

The most significant modifications:

A single electric traction elevator requires a machine room of at least 120 square feet with no interior wall shorter than 10 feet. A single hydraulic elevator needs at least 72 square feet with a minimum wall length of 8 feet.²
Minimum horizontal clearance of 20 inches between the elevator platform and any hoistway wall, maintained for the full height of the hoistway, so personnel can work safely inside during inspections.²
Telescopic plunger and inverted cylinder/plunger hydraulic elevator designs are not allowed.²
Non-coated steel hoist ropes are required for traction elevators so inspectors can visually and physically evaluate rope wear and strand breakage.²
The in-cab communication device must automatically place a secondary phone call if the first goes unanswered within 45 seconds, reflecting that some installations have limited on-site monitoring staff.²

Physical Infrastructure Requirements

Machine Rooms and Access

Every machine room must be reachable via a clear access route from the building’s exterior entrance, with a continuous minimum width of 3 feet and a minimum height of 7 feet. Equipment clearances inside the room are tightly specified: at least 18 inches between any building component and a traction drive machine, and at least 10 inches around overspeed governors and hydraulic pump units.² Lighting in hoistways and machine rooms must provide a minimum of 19 foot-candles.¹

Machine-room-less configurations are permitted but require structural reinforcements and specialized access panels in hoistway walls or ceilings. Those panels must allow operation, maintenance, service, inspection, and testing without personnel entering the hoistway under normal conditions.²

Pit Drainage and Ventilation

Every elevator hoistway must include a sump pit, a submersible sump pump, and permanent discharge piping routed outside the hoistway and machine room. The sump pump must handle at least 50 gallons per minute per elevator, regardless of head pressure or piping length.² That capacity matters because fire suppression sprinklers can dump significant water into the hoistway, and a pump that can’t keep up will flood the pit and damage safety equipment. The discharge location must be coordinated with the installation’s environmental department and local regulations.

Each hoistway pit also requires a weatherproof louver with a minimum free area of 3 square feet or 3.5 percent of the pit area, whichever is greater, to prevent buildup of hydraulic fluid fumes and moisture.²

Seismic Design

For installations in seismically active areas, UFC 3-490-06 references UFC 3-310-04 (Seismic Design for Buildings) for structural protection. Rail brackets, guide rails, and anchorage requirements flow from that companion document rather than from UFC 3-490-06 directly, so designers working in high-risk zones need to coordinate both during planning.

Fire Safety and Sprinkler Integration

When a sprinkler system in the hoistway activates, the flow switch must trigger a shunt trip breaker that immediately cuts power to the elevator. The UFC requires this disconnection to be instantaneous, and the flow switch cannot have any built-in time delay. One exception applies: a sprinkler head positioned within 24 inches of the pit floor must not trigger the power cutoff, so a low-mounted sprinkler activating during a minor water event doesn’t strand the elevator between floors.²

Fire service recall uses the two-phase system required by ASME A17.1. Phase I activates when a smoke detector in an elevator lobby, hoistway, or machine room triggers, or when someone turns a three-position key switch in the lobby. The car returns to the main egress floor without stopping and holds its doors open. If smoke is detected on the main egress floor itself, the car travels to a designated alternate floor. Phase II gives firefighters direct control of the car from inside the cab using a separate key switch.¹

Accessibility Under ABA Standards

DoD facilities fall under the Architectural Barriers Act rather than the ADA, so UFC 3-490-06 references the ABA Accessibility Standard for Department of Defense Facilities. Any elevator used to move personnel must be designed as a passenger elevator and comply with the Deputy Secretary of Defense memorandum on access for people with disabilities.² The ABA standard itself references ASME A17.1 as the foundational safety code for federally funded elevators.³

Cars must include tactile signage with raised characters and Grade 2 braille for floor designations, car controls, and emergency communication devices. Braille appears below the raised characters, and all tactile signs need a non-glare finish with sufficient color contrast. Mounting height for tactile signs is restricted to between 48 and 60 inches above the floor.⁴ Cab dimensions, door timing, and control panel layouts follow the ABA parameters as well.³

Cybersecurity Requirements

Modern elevator control systems rely on networks for dispatching, monitoring, and diagnostics. UFC 4-010-06 establishes cybersecurity requirements for all facility-related control systems with a network connection, and elevators are explicitly identified as one of the control system types that must be validated during design.⁵

That document defines a process based on the DoD’s Risk Management Framework, with guidance for systems assigned “low” or “moderate” impact levels. Designing a system in accordance with UFC 4-010-06 does not automatically produce an Authority to Operate, but it positions the system better to receive one.⁵ For elevator contractors, network-connected diagnostic ports, remote monitoring connections, and building automation integrations all need to be addressed in the cybersecurity design documentation, not treated as afterthoughts during commissioning.

Testing Documentation for Acceptance

Before an elevator can be accepted, the contractor must compile a complete data package documenting every performance metric. Many projects stall here, not because the elevator doesn’t work but because the paperwork isn’t in order.

Full-load safety test results, recorded at rated capacity to verify safeties, buffers, and overspeed governors function correctly.¹
Documented results from both Phase I recall and Phase II firefighter operation testing.¹
Measured hydraulic pressure or cable tension readings that match the original design submittal.¹
Emergency power transfer timing, confirming the elevator returns to a designated floor within the specified window during a power outage.¹
Component-level manufacturer specifications for the motor, controller, safety devices, and major assemblies.

Speed, capacity, and travel distance must be measured during the final installation phase rather than pulled from catalog specifications. Required forms are available through the Unified Facilities Guide Specifications system and the Whole Building Design Guide portal.¹ Collect subcontractor approvals and sign-offs before the official walkthrough; missing signatures are a common reason packages get kicked back.

Inspection and Certificate to Operate

Once the package is assembled, a Qualified Elevator Inspector conducts a physical walkthrough. The inspector evaluates the mechanical, electrical, and safety components against the data in the testing logs, checking that the equipment meets code and that the documentation accurately reflects what was installed.¹ Qualified Elevator Inspectors must meet the requirements of ASME QEI-1, which establishes qualifications, duties, and responsibilities for personnel inspecting and testing elevators, escalators, and moving walks.

After the inspector signs off, the contractor submits the full package to the Authority Having Jurisdiction, typically the base’s engineering or public works department. Some installations also require a physical filing in addition to digital submission, depending on local administrative protocols. If everything checks out, the Authority Having Jurisdiction issues a Certificate of Compliance or Permit to Operate. That certificate must be displayed inside the elevator car or maintained in the facility manager’s office. Without it, the equipment gets tagged out of service until every deficiency is resolved.¹

Financial Exposure from Delays

Equipment sitting idle during acceptance carries real financial consequences. Federal construction contracts routinely include liquidated damages provisions that assess a daily charge for each calendar day of delay beyond the contract completion date. The Federal Acquisition Regulation requires these provisions to describe the daily rate and account for the government’s costs of continued inspection, supervision, and any expenses tied to delayed completion, such as renting substitute facilities.⁶ The daily rate varies by contract, but elevator certification failures are a common trigger because they can delay occupancy of an entire building.

Obligations After Acceptance

UFC 3-490-06 doesn’t stop at installation. The document explicitly applies to maintenance and operation, and elevator safety code officials conduct periodic inspections throughout the equipment’s service life. The larger-than-commercial machine room clearances and non-coated hoist rope requirements exist specifically to keep those inspections practical.²

Inspection procedures follow ASME A17.2, a companion to the A17.1 safety code covering recommended inspection and testing methods for elevators, escalators, and moving walks. Treat the initial acceptance documentation as the baseline record every future inspection will be compared against. When maintenance contractors replace components or make adjustments, update that record; an inspection that reveals undocumented modifications can pull the equipment from service until the paperwork catches up.

1
Whole Building Design Guide. UFC 3-490-06 Elevators, with Change 1
2
Whole Building Design Guide. UFC 3-490-06 Elevators
3
U.S. Access Board. Guide to the ABA Accessibility Standards – Chapter 4: Elevators and Platform Lifts
4
U.S. Access Board. Communication Elements and Features Signs
5
Whole Building Design Guide. UFC 4-010-06 Cybersecurity of Facility-Related Control Systems
6
Acquisition.GOV. Federal Acquisition Regulation Subpart 11.5 – Liquidated Damages