UPS Maintenance Bypass Switching Sequence: Transfer and Return Procedure
A UPS maintenance bypass transfer changes the critical-load path while several energized sources may remain connected. For a double conversion UPS system or 24/7 online UPS system supporting a critical load, the sequence must coordinate the inverter, static bypass, mechanical bypass, output isolation, AC inputs, battery, auxiliary power, and stored energy.
For background on load-transfer terminology, see 0 ms vs 4 ms UPS transfer time. Parallel installations should also account for the architecture questions described in N+1 vs 2N UPS redundancy and the site's four-unit parallel UPS test case.
There is no universal switching sequence for every UPS. Common-input and dual-input systems differ. Parallel systems add shared breakers and load-sharing controls. Some products start on AC before the battery is connected; others use a different order. Interlocks and breaker names also vary.
This guide explains the logic that an approved site procedure should follow. It does not replace the manufacturer procedure or authorize switching.
Review Static Bypass vs Maintenance Bypass before using the state model below. For the complete system comparison, see Internal vs External Maintenance Bypass in UPS Systems. The internal maintenance bypass guide explains the different isolation boundary inside the UPS cabinet.
Safety boundary: Only qualified and authorized personnel should perform the transfer using the current single-line diagram, approved switching sheet, operating manual, interlock logic, and site electrical-safety process.
Before writing a procedure, define the expected state of every device in:
- Normal inverter operation
- Static bypass operation
- Controlled transfer overlap
- External maintenance bypass operation
- UPS isolated for work
A sixth set of states is needed for return to normal operation. The procedure should identify the actual load source at every stage.
| State | Typical load path | Required confirmation | What this state does not prove |
|---|---|---|---|
| Normal inverter | Rectifier/DC link/inverter to load | Inverter carries the load; output values and alarms are normal | Bypass source is suitable for transfer |
| Static bypass | Bypass source/static switch to load | Static-bypass indication and stable load values | UPS power terminals are isolated |
| Controlled overlap | UPS bypass path and external path briefly connected | Interlock permissive, source compatibility and expected current | Independent sources may be paralleled safely |
| External maintenance bypass | External source/MBB to load | External path carries the load before UPS separation | UPS is de-energized or safe to touch |
| UPS isolated | External path supplies load; UPS sources opened as designed | Locks/tags, discharge time and absence-of-voltage testing are complete | The load retains inverter conditioning or battery support |
The switching authority should verify:
- Approved single-line diagram and procedure match the installed equipment.
- UPS alarms and event logs have been reviewed.
- Bypass source voltage and frequency are acceptable.
- UPS output and bypass source are synchronized where required.
- Critical load is within the bypass path rating.
- Generator or alternate-source status is understood.
- No maintenance or temporary wiring has changed the configuration.
- Interlocks and position indications are functional.
- Relevant teams have been notified under the site process.
- Contingency action is defined if transfer is inhibited or the source fails.
Do not begin a routine transfer simply because the bypass-available lamp is on. Verify the conditions specified by the UPS and switchgear manufacturer.
Before approving the switching sheet, confirm that the installed architecture matches the External Maintenance Bypass Cabinet Design guide and that the bypass path has been checked using the UPS Maintenance Bypass Sizing guide.
Confirm the intended source, voltage, frequency, phase relationship, capacity, and protection state. In dual-input systems, identify whether the external maintenance path originates from the same source as the UPS static bypass.
For many systems, the inverter is first removed as the active load source and the load transfers through the UPS static switch. Confirm the actual state from the UPS indication and required electrical measurements.
If the UPS cannot transfer because the bypass source is out of tolerance or synchronization, stop and follow the equipment-specific contingency procedure.
Operate the MBB only when the interlock and approved procedure permit it. In many no-break arrangements, the external path temporarily overlaps the UPS static-bypass path.
That overlap is safe only when the system was designed for a controlled closed transition. Never connect independent or unsynchronized sources based on phase sequence alone.
After confirming that the external bypass path is carrying the load, open the specified UPS output or system isolation device. The load is now supplied through the external path.
Open the applicable devices for:
- Rectifier or common AC input
- Separate static-bypass input
- Battery or other energy storage
- Auxiliary supplies
- Parallel-system connections
- Other documented backfeed paths
The order is product- and system-specific. Follow the approved switching sheet.
Maintenance-bypass operation and electrical isolation are different milestones. Before work:
- Apply the site lockout/tagout or equivalent energy-control procedure.
- Use the manufacturer's specified stored-energy discharge time.
- Test the voltage tester before use.
- Test every relevant phase, neutral, DC, and auxiliary terminal.
- Re-test the voltage tester after use.
- Apply grounding or other controls when required by the site rules.
Schneider Electric's published procedures for some three-phase systems require all applicable input, bypass-input, output, battery, and system devices to be opened, followed by a defined waiting period and measurement for hazardous voltage.
Confirm that the work is complete, temporary grounds or test leads are addressed under the site process, connections are torqued, protective earth is intact, barriers and covers are restored, and tools or conductive objects have been removed.
Locks and tags should be removed only according to the site's controlled process and by the authorized persons.
The correct order may include common input, separate bypass input, auxiliary power, battery, or other devices. There is no valid global rule that the battery must always be closed before AC input or that AC must always be first.
Allow the UPS to complete startup and self-checks. Confirm that it reaches the state required for reconnection, often static bypass.
Verify required voltage, frequency, phase relationship, alarms, breaker status, and event log. In parallel systems, confirm the state of every module and any shared controls.
Close the specified output or system device only when the interlock and procedure permit. The external path and UPS static-bypass path may temporarily overlap in a designed no-break transition.
Open the MBB after the approved UPS path is established and confirmed. Verify that the load remains supplied through the intended UPS bypass path.
Command the inverter on or transfer from static bypass according to the product procedure. Confirm load current, output voltage, frequency, battery status, redundancy, load sharing, alarms, and remote monitoring.
The required order changes with:
- Common versus dual AC inputs
- Internal versus external maintenance bypass
- Transformer-based versus transformerless UPS
- Single versus parallel operation
- Battery topology and control power source
- Three-pole, four-pole, or overlapping-neutral switching
- Generator and alternate-source configuration
- Manufacturer interlock design
When neutral is switched or remains solidly connected, incorporate the requirements described in 3-Pole vs 4-Pole Neutral Switching for UPS Maintenance Bypass.
For example, one Schneider procedure starts a UPS from maintenance bypass by closing the unit input, static-switch input where present, and battery, then placing the UPS in bypass before closing its output and opening the MBB. An Eaton product manual specifies a different device set and includes a separate neutral-switch step. Both can be correct for their respective products.
| Published example | Product-specific feature | Practical lesson |
|---|---|---|
| Schneider Electric example | Uses named input, static-switch input, battery, output and maintenance-bypass devices in a defined sequence | Device names and permissives must match the installed system |
| Eaton 93E example | Includes a dedicated neutral-switch instruction and warns that power remains present in maintenance bypass | Neutral state and residual energization must be addressed explicitly |
These examples illustrate why a procedure should identify the exact manufacturer, model, control version, switchboard arrangement and drawing revision it covers.
Each line should contain:
- Step number
- Device tag exactly matching the physical label
- Required initial state
- Action
- Expected indication or measurement
- Hold point or independent verification
- Abort condition
- Final state
Include a state table and marked single-line diagram. Avoid vague directions such as “turn off the UPS” or “close bypass.” Specify which device and how the state is verified.
| Field | What to record |
|---|---|
| Step and device tag | Exact identifier matching the drawing and physical label |
| Required initial state | Breaker position, UPS mode, source status and permissive |
| Authorized action | One defined operation performed by the assigned person |
| Expected result | Indication, voltage, current, alarm or status change |
| Hold point | Independent check or approval required before continuing |
| Abort condition | Specific mismatch or limit that stops the sequence |
| Recorded evidence | Time, operator, verifier and measured value where required |
For critical facilities, consider independent checking by a second authorized person and a formal switching permit.
The site procedure should identify what requires work to stop, such as:
- Bypass source outside permitted limits
- UPS refuses static-bypass transfer
- Unexpected breaker or interlock position
- Load step or abnormal current
- Voltage disturbance during transition
- Source, generator, or transformer alarm
- Inconsistent phase or synchronization indication
- Unexpected voltage after isolation
- Any drawing or label mismatch
The response to each condition must be product-specific. Do not improvise a reverse sequence under pressure.
A switching sheet should be reviewed against the as-built system rather than only against a design drawing. During commissioning or an approved maintenance window:
- Walk down every device tag and physical location.
- Confirm that remote and local position indications agree.
- Test mechanical, key, and electrical interlocks.
- Verify that the UPS permissive signals behave as documented.
- Record expected voltage and current at each hold point.
- Confirm communications with downstream operators and monitoring systems.
- Prove the rollback or contingency plan without inventing steps during the event.
Where a live critical load makes a full functional transfer unacceptable, use the manufacturer's approved test method or a controlled test load. Record any untested assumption and close it through a later planned test.
The procedure should have an owner, revision number, approval record, and drawing reference. Review it after:
- UPS firmware or control changes
- Breaker or interlock replacement
- Generator or transformer changes
- Addition of parallel UPS modules
- Neutral or grounding modifications
- Protection-setting changes
- Any transfer that produces an unexpected indication or alarm
Keep obsolete copies out of the operating area. A technically correct old procedure can become hazardous after a single-line change.
- Treating a generic online sequence as a site SOP
- Closing MBB while the inverter is unsynchronized and connected
- Opening UOB before the external path is confirmed
- Assuming MBB closure de-energizes the UPS
- Forgetting separate bypass input or battery sources
- Omitting capacitor discharge time and voltage testing
- Using old breaker names after switchgear modifications
- Returning the inverter before the intended bypass path is established
- Changing the sequence to “save time” without engineering review
No. It depends on source compatibility, UPS state, switchgear design, interlocks, and the approved procedure. Some systems require an interruption.
The correct order is model-specific. Follow the manufacturer procedure and site switching sheet.
No. Interlocks reduce certain errors but do not verify source quality, isolation boundaries, stored energy, or the maintenance release.
Yes, under an approved commissioning plan that accounts for load risk. The final verified sequence should be recorded and controlled.
A safe maintenance-bypass sequence is a verified transition between defined electrical states. It coordinates load continuity with source compatibility, isolation, stored-energy control, and voltage testing.
Use generic logic to understand the system, then write and validate the actual procedure from the installed one-line diagram and manufacturer documentation.
CTA: Ask our UPS engineering team to review your maintenance-bypass state table and switching procedure. Provide the equipment model, current one-line diagram, interlock description, and source arrangement.
Written by: Jim Zhou, UPS Technical Engineer
Technically reviewed by: Black Lin, Chief Engineer
Published: October 15, 2026
Last updated: October 15, 2026
Safety notice: This state logic is not a site switching procedure. Only qualified and authorized personnel may switch the installed system using its approved drawing, operating manual, interlock logic, and controlled switching sheet.
- Schneider Electric — example external maintenance-bypass transfer for a parallel system
- Schneider Electric — example startup from maintenance bypass
- Eaton 93E installation and operation manual
- IEC 62040-1:2017 — general and safety requirements for UPS
- OSHA 29 CFR 1910.147 — control of hazardous energy, where applicable
