Isolating a pump controller with two supplies and a live PV array
A registered electrician must replace a failed contactor and thermal overload inside the controller of a 400 V three-phase irrigation pump on a dairy farm. The pump is fed from a switchboard 120 m away via a 63 A switch-fuse; the isolator has no integral lock and the fuse carriers are the only means of isolation at that board. At the pump there is a 4-pin socket-outlet used as a local isolator, and a 230 V control supply taken from a separate farm lighting circuit runs the controller heater and status light. The same main switchboard has a 5 kW grid-tied solar inverter connected on the supply side of the main switch. The farmer is called away and says a farmhand may turn up later. It is 11 am on a fine day.
1. Set out the isolation procedure for this job, including how you deal with an isolator that cannot be locked.
Read the worked answer
Identify every source first
- The 400 V pump circuit at the 63 A switch-fuse.
- The 230 V control supply from the separate lighting circuit.
- The PV inverter, which remains a source of supply in daylight.
- Any stored energy in the controller (control transformer, contactor coils, suppression capacitors).
Isolate and secure
- Open the 63 A switch-fuse, remove the fuse carriers, and secure them - keep them on your person or fit a lockable fuse carrier.
- Where the switch itself has no lock, fit a temporary lock-off device or a multi-lock hasp; if none is available, removing and retaining the carriers is the lock-off, together with a danger tag on the switch.
- Unplug the 4-pin plug at the pump and retain the plug end (or lock the socket) so the local isolator cannot be closed.
- Isolate the 230 V control circuit at its own protective device and lock or tag it.
- Isolate the PV at its AC isolator and its DC isolator. Because the inverter is connected on the supply side of the main switch, the main switch does not isolate it.
Prove dead
- Prove the tester on a known live source or proving unit before testing.
- Test at the controller terminals: phase-phase, phase-neutral, phase-earth, and neutral-earth.
- Prove the tester again afterwards.
- Treat the controller as live until proven dead, and remember a contactor may be held closed by a supply you have not yet found.
Judgement point: the absence of a lock on the isolator is not a reason to work live or to rely on a verbal warning to the farmhand.
2. After isolating everything you can find, what could still be live in the controller, and how do you manage it?
Read the worked answer
Potential live parts after isolation
- The PV array side. The DC side of the array and the inverter's DC section remain live whenever there is daylight. Isolation at the AC isolator does not de-energise the modules or the DC cabling.
- The control circuit. It is fed from a different final circuit on a different board. It must be isolated at its own device, and the neutral must be isolated or proven dead too.
- Back-feed through control wiring. Status/run signals from other equipment or a telemetry/SCADA link can bring a potential into the controller terminals.
- Stored energy. Suppression capacitors, and the DC bus of any variable-speed drive on site, can hold a dangerous charge after isolation.
- The pump motor terminals if the motor has a separate supply or a space heater circuit.
Management
- Prove dead at each set of terminals separately; do not assume a dead busbar means the whole enclosure is dead.
- Label the PV DC as live and do not open or work on DC cabling unless competent and authorised for that work.
- Discharge or allow discharge time for capacitors per manufacturer instructions before touching terminals.
- Keep a lock, tag or physical barrier on each point of isolation; if someone else may arrive, the tag and lock are the only thing that speaks for you.
3. Describe the checks and sequence for returning the pump to service, and the safety issue around who re-energises.
Read the worked answer
Before re-energising
- Confirm the replacement contactor coil voltage and the overload setting match the motor nameplate FLC (an overload set for the old motor is a common cause of repeat failures).
- Insulation resistance test on the motor windings and the circuit to earth, and a continuity check of the control circuit.
- Check all terminations are correctly torqued, phase conductors are in the right order (phase rotation for a three-phase motor), and the enclosure, glanding and IP rating are restored.
- Refit covers and confirm nothing is left inside the enclosure.
- Replace guards and covers on the pump.
Re-energising sequence
- Locks and tags are removed only by the person who applied them, or under that person's direct control. Removal is in reverse order, and the person who isolated should be the one who energises.
- The control supply is restored first, and the control function proved with the pump isolated, if the design allows.
- Then the local isolator is closed, the remote switch-fuse carriers refitted, and the pump started and observed for direction, current draw on all phases, noise and vibration.
- If the pump is fed from a VSD, check the drive parameters are unchanged.
Safety issue
The farmhand arriving mid-job is a real hazard: he may see an open switch and close it to 'help'. The lock, the removed fuse carriers and the tag are the control measures. A verbal warning to someone who is not on site is not a control measure, and the electrician should not rely on it.