Many data center electrical incidents occur not because equipment is poorly designed, but because a switching action creates an unintended system state. Interlocking reduces the probability of unsafe or electrically incompatible operations, but it cannot replace disciplined procedures and competent operators.
What an interlock does
An interlock prevents or restricts one operation based on the state of another device. For example, an interlock may prevent two incomers from being closed simultaneously if the system is not designed for paralleling, or prevent an earthing switch from closing onto an energized circuit.
The interlock logic should reflect the approved electrical operating philosophy.
Mechanical interlocks
Mechanical interlocks use physical mechanisms to prevent conflicting operations. Their advantage is that they do not depend on software or control power for the basic restriction. However, they still require inspection, correct adjustment and understanding of the mechanical sequence.
Electrical interlocks
Electrical interlocks use auxiliary contacts, relays, PLC logic or control circuits to permit or block breaker operation. They can support more complex operating rules and remote control but introduce dependencies on control power, wiring, logic and communications.
Commissioning should verify both normal permissives and failure behavior.
Key interlocks
Trapped-key systems enforce a physical operating sequence by allowing a key to be released only when a device reaches the required safe state. They can be valuable where a defined sequence is essential for source switching, isolation or access.
The key sequence must match the actual electrical design and should be controlled so spare or duplicate keys do not defeat the safety concept.
Interlocks are not a switching procedure
An interlock may prevent one incorrect action, but it cannot verify the operator's overall objective. A professional switching procedure identifies the starting configuration, target configuration, each switching step, expected indication, hold points, rollback plan and person responsible.
For high-risk operations, independent checking or peer verification can reduce human error.
LOTO and electrical isolation
Lockout/Tagout or the applicable local electrical isolation procedure must be used where equipment is being made safe for work. Switching for operational redundancy and isolation for maintenance are related but different activities.
Before work begins, the team must establish and verify the safe condition according to applicable regulations and site rules.
Never bypass an interlock casually
Interlock bypass may occasionally be required for testing or exceptional maintenance, but it should be treated as a controlled high-risk condition. Authorization, risk assessment, temporary controls, time limitation and restoration verification are essential.
An interlock left defeated after maintenance can create a hidden future hazard.
Human-machine interface matters
Operators need clear indication of breaker positions, source status, interlock conditions and unavailable permissives. Ambiguous mimic diagrams, stale labels or unclear SCADA indications increase switching risk.
Local labels, one-line diagrams and remote displays should describe the same system configuration.
Switching procedure essentials
- Confirm the latest approved single-line diagram.
- Verify the existing system state before the first action.
- Confirm available redundancy and load capacity.
- Identify interlocks and expected permissives.
- State every switching step explicitly.
- Verify indication after each critical operation.
- Define abort and rollback conditions.
- Use independent verification for high-risk steps where required.
- Confirm the final configuration and remove temporary bypasses.
Key takeaway
Interlocking is an engineering barrier against unsafe switching, but safe operation comes from layers: correct design, reliable interlocks, accurate diagrams, controlled procedures, competent people and verification. In a data center, a few seconds of switching can change the resilience of the entire facility, so every operation deserves deliberate control.
References and Further Reading
- IEC 60947 series, Low-voltage switchgear and controlgear.
- Applicable local electrical safety and isolation regulations.
- Switchgear manufacturer operation and maintenance manuals.
