Key Takeaways
- LOTO ensures all energy sources are isolated before anyone works on solar equipment
- Required by OSHA (29 CFR 1910.147) for all maintenance and service activities
- Solar systems present unique LOTO challenges because panels generate voltage whenever exposed to light
- Proper LOTO requires locks, tags, verified de-energization, and documented procedures
- Failure to follow LOTO procedures is one of the leading causes of electrical injuries in solar
- Every solar company must have a written LOTO program and train all field personnel
What Is Lockout/Tagout?
Lockout/Tagout (LOTO) is a safety procedure designed to protect workers from the unexpected release of hazardous energy during maintenance, repair, or inspection of equipment. In the solar industry, LOTO specifically addresses the isolation of electrical energy sources — DC from solar panels, AC from inverters, and stored energy in batteries or capacitors — before anyone works on system components.
The “lockout” component involves placing a physical lock on energy-isolating devices (disconnects, breakers, switches) to prevent them from being re-energized. The “tagout” component adds a written tag identifying who applied the lock, when, and why. Together, they create a verifiable chain of safety that prevents accidental energization while workers are in contact with electrical components.
Solar PV systems present a unique LOTO challenge: solar panels generate DC voltage whenever exposed to sunlight. Unlike conventional electrical systems, you cannot simply flip a switch to stop generation. This makes proper LOTO procedures especially critical — and more complex — in solar work.
LOTO violations are consistently among the top 10 most-cited OSHA standards. In solar, where DC voltages can exceed 600V and arc flash energy is significant, the consequences of skipping LOTO procedures can be fatal.
How LOTO Works in Solar
The LOTO process for solar PV systems follows a structured sequence:
Notify Affected Personnel
Inform all workers in the area that the system will be de-energized for maintenance. Identify all energy sources — DC (panels), AC (grid/inverter), and stored energy (batteries, capacitors).
Shut Down the System
Follow the manufacturer’s shutdown sequence: turn off the inverter, open the AC disconnect, then open the DC disconnect. For battery systems, open the battery disconnect as well.
Isolate Energy Sources
Open all energy-isolating devices (disconnects, breakers, combiner box switches). For DC isolation, activate rapid shutdown if the system is equipped. Cover panels with opaque material if accessible and necessary.
Apply Locks and Tags
Each worker applies their personal lock and tag to every energy-isolating device. Only the person who applied the lock may remove it. Tags must include the worker’s name, date, and reason for LOTO.
Verify De-Energization
Use a calibrated voltage tester to verify zero energy at all work points. Test DC conductors, AC conductors, and capacitor discharge points. This step is not optional — it is the final confirmation of safety.
Perform Work & Remove LOTO
Complete the maintenance work. When finished, each worker removes only their own lock and tag. Re-energize the system in reverse order after confirming all workers are clear.
Safe to Work = All Disconnects Open + All Locks Applied + Zero Voltage Verified + All Workers NotifiedTypes of Energy Hazards in Solar Systems
Solar installations involve multiple energy sources that must be addressed during LOTO:
DC from Solar Panels
Solar panels generate DC voltage whenever exposed to light — even on cloudy days. String voltages can reach 600V+ (residential) or 1,000–1,500V (commercial/utility). This energy source cannot be “switched off” at the panel level.
AC from Inverter / Grid
The inverter output and grid connection carry AC voltage (120/240V residential, 208/480V commercial). AC energy is isolated via breakers and disconnects. Always verify both sides of the inverter are de-energized.
Battery Energy Storage
Battery systems (lithium-ion, lead-acid) store significant energy that remains available even after disconnection. Batteries require dedicated isolation procedures and may take time to safely discharge.
Capacitor Discharge
Inverters and power electronics contain capacitors that store energy after shutdown. Allow manufacturer-specified discharge time (typically 5–10 minutes) before working on inverter internals.
The most dangerous aspect of solar LOTO is the DC side. Panels cannot be turned off — they produce voltage whenever light hits them. Even with the DC disconnect open, the conductors between the panels and the disconnect remain energized. Rapid shutdown systems (required by NEC 2017+) reduce this hazard but do not eliminate it entirely at the module level.
Required LOTO Equipment
Proper LOTO requires specific equipment. Using improvised alternatives is never acceptable:
| Equipment | Purpose | Requirements |
|---|---|---|
| Padlocks | Physically prevent re-energization | One lock per worker per disconnect; keyed differently |
| Lockout Hasps | Allow multiple locks on one disconnect | Multi-hole hasp for group LOTO situations |
| Tags | Identify who locked out and why | Durable, weather-resistant, include name and date |
| Voltage Tester | Verify zero energy state | Calibrated, rated for system voltage, CAT III or IV |
| Proving Unit | Verify tester is working | Test the tester before and after each use |
| Lock Box | Store group LOTO keys | For complex multi-worker maintenance operations |
V_max = V_oc (at lowest expected temperature) × Number of Panels in SeriesPractical Guidance
LOTO applies to every phase of solar system work. Here’s role-specific guidance:
- Design for safe isolation. Include clearly labeled disconnects at accessible locations. Use solar design software to place DC and AC disconnects per code requirements and ensure they’re reachable without ladders or confined space entry.
- Specify rapid shutdown compliance. NEC 690.12 requires rapid shutdown for all new installations. Design the system to reduce rooftop conductor voltage to 80V within 30 seconds of shutdown initiation.
- Label all disconnects on plans. The electrical plan set should clearly show every energy-isolating device location. This documentation becomes part of the LOTO procedure for the life of the system.
- Consider maintenance access in layout. Panel layouts that allow safe access to combiner boxes and junction boxes reduce the risk of shortcuts during future LOTO operations.
- Follow LOTO during installation. Even during initial installation, LOTO applies the moment panels are connected and exposed to light. Lock out partially wired strings before taking breaks or switching tasks.
- Never skip voltage verification. Always test for zero energy with a calibrated meter, even if you just opened the disconnect yourself. This is the step that catches wiring errors and unexpected backfeed.
- Carry personal LOTO kits. Every field worker should have their own set of locks, tags, and a calibrated voltage tester. Sharing locks defeats the purpose of individual lockout protection.
- Document every LOTO event. Maintain a written LOTO log for each job. Record the date, time, system, worker names, and verification readings. This documentation protects the company legally and demonstrates compliance.
- Develop system-specific LOTO procedures. Each solar installation should have a written LOTO procedure based on its specific equipment layout. Include disconnect locations, shutdown sequence, and verification points.
- Train all O&M personnel annually. OSHA requires documented LOTO training for all authorized and affected employees. Refresher training and periodic audits ensure procedures are followed consistently.
- Establish group LOTO protocols. When multiple technicians work on the same system, use a group LOTO procedure with a designated coordinator. Each worker still applies their own individual lock.
- Audit LOTO compliance quarterly. Regular audits catch procedural drift before it causes injuries. Review lock condition, tag legibility, tester calibration, and procedure documentation during each audit.
Design Systems with Safety Built In
SurgePV’s solar design software automatically places disconnects and labels per NEC requirements, creating designs that support safe LOTO procedures from day one.
Start Free TrialNo credit card required
Real-World Examples
Residential Inverter Replacement
A homeowner’s string inverter fails after 12 years. The O&M technician follows the LOTO procedure: shuts down the inverter via the software interface, opens the AC disconnect, opens the DC disconnect, applies personal locks and tags to both disconnects, and verifies zero voltage on both the AC and DC terminals with a calibrated CAT III meter. The old inverter is safely removed and the replacement installed. The entire LOTO process adds 10 minutes to the job but eliminates the risk of electrocution from 480V DC or 240V AC.
Commercial Roof Repair
A warehouse needs roof repairs in an area covered by a 100 kW solar array. The roofing contractor cannot work safely with energized conductors above them. The solar O&M team initiates LOTO: shuts down the inverter, opens all disconnects, activates rapid shutdown to reduce rooftop conductor voltages below 80V, and applies locks at the main service panel, inverter AC disconnect, and DC disconnect. The roofing crew is cleared to work only after the O&M team verifies zero voltage at the nearest junction box.
Utility-Scale: Group LOTO During Maintenance
A 5 MW solar farm undergoes annual tracker maintenance requiring 8 technicians. The site supervisor implements group LOTO: a designated coordinator locks out the main switchgear and all relevant combiners. Each technician then applies their personal lock to a group lockbox. Work proceeds across the site. At the end of the day, each technician removes their lock. Only after all 8 personal locks are removed does the coordinator remove the master locks and re-energize the system.
Common LOTO Mistakes in Solar
Avoiding these common errors prevents injuries and OSHA citations:
| Mistake | Risk | Correct Practice |
|---|---|---|
| Using tape instead of locks | No physical prevention of re-energization | Always use rated padlocks |
| Skipping voltage verification | Working on energized conductors unknowingly | Test with calibrated meter every time |
| One lock for the whole crew | Only one person’s safety is protected | Each worker applies their own lock |
| Forgetting DC side | DC voltage present whenever panels see light | Lock out DC disconnects and verify |
| Removing someone else’s lock | Victim may still be working on the system | Only the person who applied the lock may remove it |
| No written procedure | OSHA violation; inconsistent practices | Maintain written, site-specific LOTO procedures |
Always “try” the equipment after applying locks — attempt to start the inverter or close the disconnect while locked. If the lock and isolation are properly applied, nothing should happen. This simple test catches situations where the wrong disconnect was locked or the lock didn’t fully engage. It takes 5 seconds and could save a life.
Frequently Asked Questions
What is lockout/tagout in solar energy?
Lockout/tagout (LOTO) is a safety procedure that ensures all electrical energy sources in a solar PV system are properly isolated and de-energized before workers perform maintenance, repair, or inspection. It involves physically locking energy-isolating devices (disconnects, breakers) in the off position and attaching identification tags. LOTO is required by OSHA for all service and maintenance activities on solar installations.
Why is LOTO especially important for solar systems?
Solar panels generate DC voltage whenever exposed to light — they cannot be completely “turned off” at the source. This means even with the inverter shut down and disconnects open, the DC conductors between the panels and the first disconnect point remain energized during daylight. String voltages can exceed 600V (residential) or 1,500V (utility-scale), making LOTO verification especially critical for worker safety.
What are the OSHA requirements for solar LOTO?
OSHA’s LOTO standard (29 CFR 1910.147) requires employers to: develop and document energy control procedures for each machine or system, provide locks and tags for all authorized employees, train all authorized and affected personnel, conduct periodic inspections at least annually, and ensure that only the person who applied a lock may remove it. Violations can result in fines of $16,000+ per instance, with willful violations reaching $160,000+.
What is the difference between LOTO and rapid shutdown?
Rapid shutdown (NEC 690.12) is a code requirement that reduces conductor voltages on the roof to 80V or less within 30 seconds of system shutdown — primarily designed for firefighter safety. LOTO (OSHA 29 CFR 1910.147) is a worker safety procedure for maintenance that requires physical locks, tags, and verified de-energization. They are complementary: rapid shutdown reduces the voltage that LOTO must address, but LOTO is still required for safe maintenance work.
About the Contributors
CEO & Co-Founder · SurgePV
Keyur Rakholiya is CEO & Co-Founder of SurgePV and Founder of Heaven Green Energy Limited, where he has delivered over 1 GW of solar projects across commercial, utility, and rooftop sectors in India. With 10+ years in the solar industry, he has managed 800+ project deliveries, evaluated 20+ solar design platforms firsthand, and led engineering teams of 50+ people.
Content Head · SurgePV
Rainer Neumann is Content Head at SurgePV and a solar PV engineer with 10+ years of experience designing commercial and utility-scale systems across Europe and MENA. He has delivered 500+ installations, tested 15+ solar design software platforms firsthand, and specialises in shading analysis, string sizing, and international electrical code compliance.