A yacht passerelle control job starts at the pin, not at the teak. Captains call when the gangway will not leave the trunk, when it deploys but will not lock, or when the local station says stowed and the bosun can still see plank in the air. The cylinders are often still sound. What aged out is the board that used to run them.
We design and build the panel around that boarding bridge. PLC, local station, bridge indication, the interlocks that keep stow and deploy from overlapping. Fort Lauderdale and Newport, because that is where the boats already are. Skip the carbon-fiber brochure. Demand a package that still tells the truth when the next night watch, or the next surveyor, is the one looking.
How yacht passerelle control actually fails
Most of the time the plank is not the story. Limit switches drift after a season of working against a trunk that has taken a little more list than the drawing assumed. A proximity sensor sits a few millimeters off after someone painted the housing. A stow pin that never quite seats still trips a cheap locked contact because the contact was wired as pin-in-hole, not pin-home-and-confirmed. The bridge page is happy. The passerelle is not.
Electro-hydraulic packs have their own flavor. A pump that still makes some pressure but not enough to rotate against heel. A solenoid that sticks once a week and then behaves for the surveyor. Rotary limit boxes that fog internally and start reporting last Tuesday's state. Crew begin carrying a mental list: this function we trust, that one we walk the aft deck and watch by eye. Bad habit. A boarding bridge is a moving load over a quay. You do not manage that with a flashlight and optimism.
Ship-ring hydraulics fail smaller and then all at once. A valve that shares a manifold with a crane. Pressure that dumps when someone else calls a function. A sequence that used to wait for pin confirmation and now just times out and hopes. You get intermittent stow. Then you get a permanent stowed that is wrong. Then someone wedges the local lever because the party is on the dock.
Obsolete passerelle electronics sit under all of that. Proprietary I/O. A pendant with no spare. A CPU that a specialist in Italy might still talk about if they are not already on a boat in Palma. Same shape of failure as the hydraulic stack on a 46m Trinity hydraulic control refit: good mechanicals, dead brain, parts you cannot buy. We are not going to invent a passerelle nameplate or a fake yard story. The failure is common enough without one.
Hydraulic vs electro-hydraulic on a passerelle PLC
Two plants, same control problem. A hydraulic passerelle lives on the vessel's hydraulic ring. Cylinders, lock pins, rotate, telescope. The pump is already in the engine room. The passerelle PLC has to share that world without fighting it: do not call rotate if the lock is in, do not call extend if rotate is not confirmed, do not dump pressure into a stow while someone is on the plank.
An electro-hydraulic unit is a self-contained pack. Electric motor, small tank, dedicated valves, usually closer to the trunk. Easier to isolate. Easier to lose when the OEM controller dies, because the pack and the brain were sold as one sealed story. Either way the sequence is the same. Unlock. Clear the trunk. Rotate or fold. Telescope. Lower to the quay, or into float if the boat lives with tide. Reverse it to stow. Confirm the pin. Then, and only then, tell the watch it is made.
A passerelle PLC that only watches a pair of pushbuttons is a relay panel with extra steps. It has to see pin out, pin in, stow limit, deploy limit, rotation ends, telescope ends, and usually a pressure or current that says the cylinder actually moved. IFM sensors earn their keep here. Digital. Stable. Alarming into the PLC instead of sitting on a gauge in the trunk nobody opens until the oil is already dark.
Do not let a quote mix a new plank with a new controller unless the mechanicals are condemned. If the cylinders still stroke, the locks still pin, and the walking surface is true, you need electronics you can still buy. That is the conversation we already had on hydraulics with a 2002 Trinity: Koopnautic/Quantum aged out, tanks and valves stayed, WAGO PFC200 and Beijer X2 went in. Boarding bridges rhyme with that. Custom is the logic and the pages. It should not mean a unique controller you cannot replace. That is the line we try to hold on yacht PLC and HMI refits generally, and it is the line that matters on a gangway.
What yacht passerelle control has to confirm before deploy
Stow and deploy are not two buttons. They are a list of gates. Pin and lock confirmation first. If the stow pin is in, nothing rotates. If the pin is commanded out and the switch never changes, you stop. You do not try it again into a bent ram. Limit switches at the trunk, at full rotate, at telescope in and out. If a switch is missing, the HMI says so in English. A silent retry loop is how you teach people to ignore the page.
Passerelle not over people. That sentence has to live in the logic, not in a toolbox talk. Local deadman at the station that can see the plank. Photocells or area sensors if the installation has them, and if they nuisance-trip you fix the aiming, you do not jumper them. Audible before motion. Visual if the trunk is a blind pocket. Crew who have lived with a passerelle that starts on a bridge command while a steward is under it will tape over the remote. Then you have a finding waiting for a name.
List and heel are not a footnote. A boarding bridge that deploys fine in a flat marina will fight a five-degree list on a windy Fort Lauderdale wall. Hydraulic pressure that was enough on the shop floor is not enough with the plank working uphill. Float mode, if you have it, is for tide against a fixed quay. It is not an excuse to skip pin confirmation. Self-centering and slew-lock, if the OEM built them in hydraulically, still need the PLC to know they happened. Do not assume a hydraulic convenience is a confirmed state.
Traveling is a third state. Stowed. Deployed. The ugly middle. If your screen only has two lamps, it is lying about the third. Indication has to be independent of the command. A failed output should not paint a green stowed. Local indicators at the station, plus the bridge or ECR mimic. Surveyors who care will ask. A chief who has had a plank in the water while the page said home already knows.
Power matters more than people admit on a quote. The pack, or the ring valves, want a supply that is not sharing a convenience board. Indication that survives a main-loss long enough for the watch to see what the plank actually did. Manual override on the manifold is the piece everyone forgets until the drill. Handles missing. Seals dry. Ninety seconds that turns into five minutes of swearing on a quay with guests. Put the hand valves in the commissioning list, not in a footnote. We will not pretend a logo on a datasheet is your class certificate. Lloyd's, DNV, Bureau Veritas each ask in their own voice. Your job is a package that can answer: what happens on power loss, what still indicates, what still holds the pin, and whether the log matches the plank.
Local station vs bridge on yacht boarding bridge control
A package that only lives on a touchscreen is one cracked glass away from a problem. Logic in the PLC. Display on the HMI. If the Beijer goes dark, the boarding bridge should sit in a defined state, not a random one. Captains should ask that in the first meeting. If the screen fails, what still runs, and what is locked out on purpose.
Local station is for the people who can see the plank. Hold-to-run. View of the quay, the trunk, and whoever is about to walk. Bridge or ECR is for the people responsible for the vessel: stowed, deployed, traveling, fault. Mixing those without a master mode is how you get a passerelle hunting while a bosun is on it. Wireless pendants exist. They are a convenience, not a substitute for a fixed local that still works when the radio pack is in a drawer.
Permissions matter in the same boring way they matter on hydraulics. Deck should not hunt through unrelated graphics to stow the passerelle. Interior should not have a guest-facing tile that can deploy it. Engineering should see the fault: travel timeout, pin mismatch, low hydraulic pressure, limit that never arrived. One hardware family can still be several views. Ask for the split in the spec, not as a favor after commissioning. And ask where the second HMI lives if the boat actually runs from two places. Wheelhouse and ECR. Sometimes a local panel at the boarding station the crew already uses. Do not discover that on sea trial.
The night watch will live on three pages if you write them honestly. Overview: stowed, deployed, traveling, pin. Alarm list in English a bosun can act on. One equipment page with commanded versus confirmed for each motion. If you need a speech to explain a graphic, the page is wrong. Twenty minutes of walkthrough, not a binder. Training is short when the HMI tells the truth.
What a boarding bridge PLC package has to include
Bring a short list. You do not need to become a programmer. You do need answers a chief can live with after the yard leaves.
- Which motions are in scope (unlock, rotate or fold, telescope, lower, float, stow) and which mechanical items are staying because they are sound
- Pin and lock confirmation as part of stowed, not a lamp that means maybe
- Stowed, deployed, and traveling indication, independent of the command circuit
- Local hold-to-run with a view of the plank, bridge or ECR status, and what a pendant is allowed to do
- Passerelle not over people: deadman, audible, photocells or area sensors if fitted, and what happens if they fail
- List and heel: whether the pack still makes pressure, whether float is real, whether slew-lock is confirmed
- What happens on main power loss, HMI failure, and a missing limit, including whether indication survives
- Alarm list in English: travel timeout, pin mismatch, low hydraulic pressure, limit that never arrived, motion commanded against a lock
- Spare CPU, spare HMI, spare I/O slice, whether those parts are still manufactured, and where they sit (boat, Fort Lauderdale shop, vendor)
- Drawings, I/O list with terminal numbers that match the wire labels, and a page index the next technician can use
We reccomend a spare CPU, spare HMI, and a spare I/O slice on the boat, not in a vendor warehouse two time zones away. WAGO, Beijer, and IFM for that reason. Industrial parts with a marine track record. Not a sealed yacht-only box whose last spare lives in a drawer in another country. Current production is the practical definition of supportable. A pretty pendant is not.
Commissioning is function-based. Unlock. Rotate. Telescope. Lower. Float if you have it. Stow. Pin. Each local. Each remote. Combinations you actually use, because a yacht is not a lab bench. Deploy from the local with a pad in the path, in the yard, and see whether the obstruction behavior is real. Indication versus a person standing at the trunk calling states on the radio. If a surveyor is in the picture, this is when you generate the evidence. Do not wait until they are on the quay asking why the mimic and the pin disagree.
Fort Lauderdale yards will try to parallel this with other trades. Fine, if nobody is painting the plank, temporarily lifting a limit switch, or cutting a feedback pair the night before sea trial. Newport in season has the same problem and less calendar. A control-only passerelle job can sit inside a yard period you already have. A mechanical plank replacement cannot. Do not let a quote mix them without saying so. Panels can be built off the boat. Field devices cannot be commissioned in a shop drawing.
Adam (Electrical Engineer) will care about the enclosure. Cage clamp, labeled, a drawing that matches the wire. Caleb (Head Systems Engineer) will care whether local, remote, pin, and indication are actually separate circuits in the logic, not four coils that happen to share a name. Kyle (Operations) will care whether this fits the Fort Lauderdale window you already booked for paint, or the shorter Newport season you cannot slide. Those are the real constraints. Pretty gangway graphics are not.
If you want the same conversation we have on other ugly subsystems, start with the existing passerelle drawings and whatever electrical package still exists. Even a faded I/O list beats a walkthrough guess. We would rather tell you the OEM panel can wait than rip out a system that is still supportable. The watch needs yacht passerelle control that tells the truth, a PLC that still has a spare, and a yard window that does not become the season.