Index: firmware/App/Services/WatchdogMgmt.c
===================================================================
diff -u -r88b5435baa604c699d2d4b752667fa055ed5574a -rb7bab430753d711cd322587ec9e029f63c6f03a5
--- firmware/App/Services/WatchdogMgmt.c	(.../WatchdogMgmt.c)	(revision 88b5435baa604c699d2d4b752667fa055ed5574a)
+++ firmware/App/Services/WatchdogMgmt.c	(.../WatchdogMgmt.c)	(revision b7bab430753d711cd322587ec9e029f63c6f03a5)
@@ -16,7 +16,8 @@
 ***************************************************************************/
 
 #include "CPLD.h"
-#include "InternalADC.h"
+#include "InternalADC.h"
+#include "OperationModes.h"
 #include "SystemCommMessages.h"
 #include "Timers.h"
 #include "WatchdogMgmt.h"
@@ -29,10 +30,12 @@
 // ********** private definitions **********
 
 #define MIN_WATCHDOG_PET_INTERVAL_MS        45                                  ///< Minimum watchdog pet interval.
+
 #define WATCHDOG_POST_TIMEOUT_MS            500                                 ///< Watchdog POST timeout in ms.
-#define WATCHDOG_RECOVERY_TIME_MS           250                                 ///< Watchdog recovery time in ms.
+#define WATCHDOG_RECOVERY_TIME_MS           500                                 ///< Watchdog recovery time in ms.
 
 #define MAX_24V_LEVEL_ON_WATCHDOG_EXPIRED   5.0                                 ///< Maximum voltage on 24V line when watchdog is expired.  // TODO - check w/ Systems.  Takes time for V to bleed off.  Had to raise to 5V.
+#define MIN_24V_LEVEL_ON_WATCHDOG_RECOVER   22.6                                ///< Minimum voltage on 24V line when watchdog is recovered.
 
 /// List of watchdog states.
 typedef enum Button_Self_Test_States
@@ -111,10 +114,11 @@
     }
 
     // check to see if watchdog has expired
-    if ( getCPLDWatchdogExpired() == PIN_SIGNAL_HIGH )
+    if ( getCPLDWatchdogExpired() == PIN_SIGNAL_LOW )
     {
         // ignore expired watchdog until after watchdog POST
-        if ( WATCHDOG_SELF_TEST_STATE_COMPLETE == watchdogSelfTestState )
+        if ( ( WATCHDOG_SELF_TEST_STATE_COMPLETE == watchdogSelfTestState ) ||
+             ( getCurrentOperationMode() != DG_MODE_INIT ) )
         {
 #ifndef DEBUG_ENABLED
             activateAlarmNoData( ALARM_ID_WATCHDOG_EXPIRED );
@@ -164,33 +168,44 @@
             {
                 // waiting here for w.d. test period to prevent this task from checking in - watchdog should expire
             }
-            if ( getCPLDWatchdogExpired() == PIN_SIGNAL_HIGH )
+            if ( getCPLDWatchdogExpired() == PIN_SIGNAL_LOW )
             {
                 F32 v24 = getIntADCVoltageConverted( INT_ADC_MAIN_24_VOLTS );
 
                 // Verify 24V is down when w.d. expired
                 if ( v24 > MAX_24V_LEVEL_ON_WATCHDOG_EXPIRED )
                 {
-                    SET_ALARM_WITH_2_F32_DATA( ALARM_ID_WATCHDOG_POST_TEST_FAILED, 2.0, v24 );
+                    SET_ALARM_WITH_2_F32_DATA( ALARM_ID_DG_WATCHDOG_POST_TEST_FAILED, 2.0, v24 );
                     watchdogSelfTestStatus = SELF_TEST_STATUS_FAILED;
                 }
-                else
-                {
-                    watchdogSelfTestStatus = SELF_TEST_STATUS_PASSED;
-                }
             }
             else
             {
-                activateAlarmNoData( ALARM_ID_WATCHDOG_POST_TEST_FAILED );
+                SET_ALARM_WITH_1_U32_DATA( ALARM_ID_DG_WATCHDOG_POST_TEST_FAILED, 1 );
                 watchdogSelfTestStatus = SELF_TEST_STATUS_FAILED;
             }
-            watchdogSelfTestTimerCount = getMSTimerCount();
-            watchdogSelfTestState = WATCHDOG_SELF_TEST_STATE_RECOVER;
+            watchdogSelfTestTimerCount = getMSTimerCount();
+            watchdogSelfTestState = WATCHDOG_SELF_TEST_STATE_RECOVER;
             break;
 
         case WATCHDOG_SELF_TEST_STATE_RECOVER:
             if ( TRUE == didTimeout( watchdogSelfTestTimerCount, WATCHDOG_RECOVERY_TIME_MS ) )
             {
+                if ( getCPLDWatchdogExpired() == PIN_SIGNAL_HIGH )
+                {
+                    F32 v24 = getIntADCVoltageConverted( INT_ADC_MAIN_24_VOLTS );
+
+                    // Verify 24V is down when w.d. recovered
+                    if ( v24 < MIN_24V_LEVEL_ON_WATCHDOG_RECOVER )
+                    {
+                        SET_ALARM_WITH_2_F32_DATA( ALARM_ID_DG_WATCHDOG_POST_TEST_FAILED, 3.0, v24 );
+                        watchdogSelfTestStatus = SELF_TEST_STATUS_FAILED;
+                    }
+                    else
+                    {
+                        watchdogSelfTestStatus = SELF_TEST_STATUS_PASSED;
+                    }
+                }
                 result = watchdogSelfTestStatus;
                 watchdogSelfTestState = WATCHDOG_SELF_TEST_STATE_COMPLETE;
             }