⚡ Blog Mission: Transforming past incidents into actionable insights to prevent future accidents.
Sunday

LOTO of Parallel Generators

Why isolating the main circuit breaker is not enough when performing lockout/tagout on parallel generators, and how to isolate control systems.

1. Introduction & Context

Lockout/Tagout (LOTO) is the cornerstone of industrial safety, ensuring that equipment is isolated from hazardous energy sources before work begins. When performing maintenance on a generator, the immediate instinct of many technicians is to simply lock open the main power circuit breaker. However, on generators—especially those configured to run in parallel with other units or the utility grid—isolating the main breaker leaves multiple latent energy sources active, posing severe risk of accidental generator start-up, motorization, or electrocution.

2. The Core Issue

A generator is a complex energy system containing mechanical, chemical (battery), and multiple electrical systems. If you only open and lock out the main circuit breaker, you fail to isolate the system’s control and excitation paths:

  • Accidental Auto-Start: Parallel generators are typically managed by an automatic power management system (PMS) or PLC. If the PMS detects a voltage dip or a test signal, it can send a remote start command. If the control circuit is not isolated, the engine will start, cranking the alternator and turning shafts that technicians may be working on.
  • Motorization (Reverse Power): If the main breaker is closed for testing and fails to isolate properly, or if there is a control failure, the generator can act as a motor (motorization). The utility grid or other generators will backfeed power into the alternator, spinning the engine shafts at high speeds and creating extreme mechanical hazards.
  • Excitation Feedback: A generator requires DC excitation current fed into the rotor windings to generate AC voltage. If the excitation control circuit is not isolated and locked out, a technician rotating the engine manually during maintenance can cause the generator to produce lethal voltages on its output terminals, even if the engine is not running.
  • DC Starter Systems: The 24VDC starting battery represents a massive chemical and mechanical energy source. Accidental starter engagement during engine inspection can cause immediate amputation or crushing.

For a generator to be in a true zero-energy state, all four paths—Power, Control, Starter, and Fuel—must be locked out.

3. Actionable Takeaways

  • Isolate the 24VDC Starter Battery: Always disconnect and lock out the DC starting battery disconnect switch. This physically prevents the engine starter motor from cranking.
  • Lock Out the Remote Start Controls: Pull and lock out the control fuses or open the isolated control circuit breaker that supplies the automatic start/stop and synchronizing circuits from the PMS.
  • Lock and Block the Fuel Supply: Close and lock out the manual fuel supply valves (diesel or natural gas) to prevent the engine from receiving fuel.
  • Verify Zero Energy at Terminals: Before beginning work on the stator or alternator windings, verify the absence of voltage at the generator terminals using a contact multimeter, confirming both AC and DC potentials are zero.
Post Conclusion
Correct Practice — Confirmed This post describes a confirmed correct and protected practice.
ELI CRITICALITY SCALE

Likelihood × Consequence Risk Matrix

Every post on this blog is classified using this industrial risk matrix. Badge colors map directly to the resulting criticality level.

Full Guide →
Likelihood ↓ / Consequence → Minor Moderate Serious Fatal
Almost Certain L1 L2 L3 L3
Likely L0 L1 L2 L3
Possible L0 L0 L1 L2
Unlikely L0 L0 L0 L1
Badge Key
L0
Normal
Educational / correct practice
L1
Advisory
Near-miss / equipment damage
L2
Warning
Serious injury potential
L3
Critical
Fatality / catastrophic failure