6.3 Equipment validation: IQ/OQ/PQ
Verification (inspecting the final product) only indicates if a mistake was made; Validation (rigorously qualifying the machine process) ensures a mistake cannot be made in the first place. In high-reliability EMS manufacturing, quality cannot just be “inspected” into a product at the end of the line—especially when the truly critical characteristics are completely hidden from view (e.g. internal solder joint grain structure, chemical conformal coating adhesion, trapped underfill voiding). Equipment Validation is the mandatory engineering forensic proof that the production machine is statistically capable of exactly delivering the required specific output, definitively proven before a single live production unit is ever put at risk.
The validation V-model
Section titled “The validation V-model”Engineering validation is definitely not a single, pencil-whipped administrative event; it is a highly structured trilogy of physical evidence. Each logic gate must be successfully passed sequentially, with full management sign-off.
1. Installation Qualification (IQ) – “is it installed correctly?”
Section titled “1. Installation Qualification (IQ) – “is it installed correctly?””- Objective: Formally verify the physical environment and the static state of the equipment against the original manufacturer’s engineering specifications.
- Scope:
- Utilities: Input Voltage (V), Frequency (Hz), Clean Air Pressure (PSI), Exhaust Flow (CFM).
- Safety: Functioning E-Stops, Light Curtains, Physical Interlocks.
- Environment: Verified ESD Grounding (< 1.0 Ω), Ambient Temperature/Humidity control.
- The “Kill” Rule: If the IQ formally fails (e.g. measured exhaust flow is insufficient), DO NOT POWER ON THE MACHINE to attempt OQ. You risk severe equipment damage or operator safety violations.
2. Operational Qualification (OQ) – “does it functionally operate as defined?”
Section titled “2. Operational Qualification (OQ) – “does it functionally operate as defined?””- Objective: Verify that the equipment functions flawlessly at the extreme limits of its defined operating window (Formal Worst Case Testing).
- Scope:
- Alarms: Actively simulate realistic physical failures (e.g. abruptly open a safety door, drop air pressure). Does the machine gracefully and safely stop?
- Ramp Rates: Can the multi-zone reflow oven maintain a 3˚C/sec thermal ramp rate under maximum thermal mass load?
- Software: Explicitly verify machine software version control, password security hierarchy, and automated data logging integrity.
- The Logic: If the machine cannot hold a required physical setpoint during a static “dry run,” it will fail unpredictably under the stress of a real production load.
3. Performance qualification (PQ) – “is the process statistically stable under load?”
Section titled “3. Performance qualification (PQ) – “is the process statistically stable under load?””- Objective: Generating undeniable statistical proof of long-term process capability using actual live production material.
- Scope:
- Run Size: Typically mandates 3 consecutive production shifts or 3 distinctly separate material lots.
- Metric: Must scientifically demonstrate a Cₚₖ ≥ 1.33 (or 1.67 for brand-new, high-value equipment) on all critical-to-quality parameters.
- Evidence: Requires destructive physical analysis: Cross-section internal analysis, component shear testing, 3D X-ray verification.
Re-validation triggers
Section titled “Re-validation triggers”A formal Validation is merely a reliable snapshot in time. The equipment must be formally re-validated whenever the underlying physics of the process significantly changes.
Rigid Decision Logic for Re-Validation:
- If the Equipment is moved more than 3 meters across the floor -> A new IQ + OQ must be performed. (Unseen vibration during the move can easily loosen sensors or alter machine bed leveling).
- If a Critical Internal Component is Replaced (e.g. Reflow Heater Motor, Wave Solder Pot) -> A new OQ + PQ must be performed.
- If a Software Upgrade occurs (Major System Revision) -> A new OQ must be performed (focusing heavily on valid data integrity and safety alarms).
- If only the routine Annual Instrument Calibration is performed -> No formal Validation is required. (Remember: Calibration ≠ Validation).
Recap: Equipment Validation Protocol
Section titled “Recap: Equipment Validation Protocol”| Phase | Objective | Critical Requirement | Success Criteria | Evidence |
|---|---|---|---|---|
| IQ | Verify correct installation per OEM specs. | ESD Grounding < 1.0 Ω; Utilities (Voltage, Air Pressure, Exhaust CFM) per spec; Safety systems functional. | Full compliance with all specifications. | Signed utility & safety verification protocol. |
| OQ | Verify flawless function at operational limits. | Maintains setpoints (e.g., 3˚C/sec ramp) under load; Alarms trigger on simulated failures; Software version/security verified. | Stable operation under all defined worst-case conditions. | Signed dry-run test protocol with alarm & software verification. |
| PQ | Prove statistical process capability with live material. | Cₚₖ ≥ 1.33 (or ≥ 1.67 for new equipment) on all CTQs; Run 3 consecutive shifts or 3 separate lots. | Demonstrated statistical stability and capability. | Report with Cₚₖ values and destructive analysis (cross-section, X-ray, shear test). |
| Re-Validation Trigger | Action Required | Condition | ||
| Perform IQ + OQ | Equipment moved > 3 meters. | |||
| Perform OQ + PQ | Critical internal component replaced (e.g., heater, pump). | |||
| Perform OQ | Major software system revision. | |||
| No validation required | Routine annual instrument calibration only. |