PV rapid shutdown field guide: NEC 690.12

Rapid shutdown, and the live zone it shrinks

Rapid shutdown is a required method for cutting the voltage in a building-mounted PV system down to a safe level fast, on a single action, so a firefighter or other responder is not working over live DC. A normal grid-tied array does not go dead when you switch the inverter off. The modules make voltage any time light hits them, and the conductors between the modules and the inverter stay energized in daylight no matter what the inverter is doing. Rapid shutdown shrinks that live zone in seconds when someone operates the switch.

The PV system wiring guide covers the whole installation: the DC strings, the disconnects, grounding, and the interconnection. This guide is the rapid-shutdown piece of Article 690 specifically, 690.12 and the labeling at 690.56(C). The emergency and standby power guide covers the separate world of life-safety power sources under Article 700. Rapid shutdown is not a power source. It is the opposite, a way to make the array stop being one where a responder is about to put hands and tools.

Why rapid shutdown exists at all

A PV module is a current source driven by sunlight, and you cannot turn the sun off. Open the AC disconnect, shut the inverter down, and the modules on the roof are still sitting at their open-circuit voltage, which on a residential string runs into the hundreds of volts DC. The DC conductors from the array to the inverter carry that voltage in full daylight, every day, whether the system is producing or idle.

Now put a firefighter on that roof during a fire. They cut ventilation holes with a saw, they pull modules, they breach the roof deck, and the DC conductors are in the path of all of it. DC does not cross zero the way AC does, so an arc on a DC circuit is harder to clear and a shock tends to hold on instead of letting go. That is the hazard rapid shutdown removes. The action does not protect the equipment. It protects the person cutting into the building.

The voltage scales with the array, which is why the hazard grew with system size. A long series string can sit near its open-circuit voltage on a cold, bright morning, when modules make their highest voltage, and that is the worst case the design has to assume. More modules in series means more volts on the conductors a responder meets. Rapid shutdown is the answer the code reached for once roofs started carrying that much DC.

What rapid shutdown does not do

Rapid shutdown protects a responder in an emergency. It does not make the array safe for an electrician to work on. After you operate the initiator, the modules are still in sunlight, so the moment you start pulling connectors inside the array you can be back into live DC at each module. Rapid shutdown drops the conductors to the controlled limits. It does not turn the modules off, because nothing short of darkness or a cover does that.

This trips up crews who treat the rapid-shutdown button as a lockout. It is not one. For service work you follow the normal de-energizing and verification procedure for the equipment you are touching, including covering modules or working module by module, and you do not rely on the rapid-shutdown state. The function exists for the firefighter who has no time and no procedure, breaching a roof in smoke. It buys that person a survivable voltage for the few minutes they are up there. It does not replace lockout, test-before-touch, or the manufacturer's service instructions for the people who do this for a living.

What does NEC 690.12 require?

NEC 690.12 requires PV systems on or in buildings to have rapid shutdown, initiated by a single action, that brings the controlled conductors down to defined voltage limits within a set time. The single action is the part people skip. One switch, one motion, has to start the whole sequence, so a responder does not have to find and operate a string of disconnects while the building burns.

The controlled conductors are the PV circuit conductors that leave the immediate area of the array. The code splits them into two zones, inside the array boundary and outside it, and sets a different voltage limit for each, both reached within the same time window. The specific voltages, the time, and the boundary distance have moved between code editions, so confirm them against the edition the jurisdiction has adopted. What has held steady across cycles is the intent: one action, fast, to a touch-safe level around and on the array.

What are the rapid shutdown voltage limits?

Under recent editions of NEC 690.12, rapid shutdown drives the controlled conductors to two limits keyed to the array boundary. Outside the boundary, the conductors come down to a low touch-safe voltage, commonly stated as 30 V or less, within 30 seconds of initiation. Inside the boundary, the limit is higher, commonly 80 V or less, within that same 30 seconds. Confirm both numbers and the time against the adopted edition before you design to them.

The split is deliberate. Outside the array, where a responder is most likely to put a hand or a tool, the code wants the voltage down near nothing. Inside the array, between the modules, getting to a true low voltage is harder, so the limit is set at a level judged survivable for the short time a responder spends in that zone. The 30-second clock runs from the single action, not from whenever the inverter happens to stop. Build the system so it actually meets the inside-boundary number, because that is the one that catches new installs.

What is the array boundary?

The array boundary is the line that decides which voltage limit a given conductor has to meet. In recent NEC editions it is defined as 1 ft (305 mm) outside the array in all directions. Inside that line, the higher inside-boundary limit applies. Step past it and the conductor has to reach the lower outside-boundary limit instead.

The boundary is a small distance, and that is the point. The code is drawing a tight ring around the live area of the array and saying everything beyond that ring has to be near dead, while the area within the modules can sit at a controlled but higher level. On a roof plan, the boundary is roughly the array footprint plus a foot. The home-run conductors that leave the array for the inverter or a combiner cross outside the boundary almost immediately, so they fall under the lower limit. Verify the boundary distance against the adopted edition, since the figure is code-defined and has been refined across cycles.

How rapid shutdown changed from 2014 to 2017 and 2020

Rapid shutdown first appeared in the 2014 NEC, and it worked at the conductor level. The rule limited PV conductors more than about 5 ft inside a building, or more than about 10 ft from the array, to roughly 30 V within 10 seconds of initiation. You could meet that with a contactor or disconnecting means out at the array that dropped the home-run conductors, while the array itself stayed live. The roof remained energized between the modules.

The 2017 edition closed that gap by introducing the array boundary and the inside-versus-outside split, with an inside-boundary limit that pushed the industry toward module-level control. The 2020 edition kept the boundary approach and added the listed PV hazard control system as another path to the inside-boundary protection. The 2023 and 2026 editions carried the same array-boundary thresholds forward, so the current code still turns on the 80 volt inside and 30 volt outside limits within 30 seconds. The direction across editions is consistent: the live zone keeps shrinking toward the individual module. If you are working to an older adopted edition, the conductor-level approach may still be legal there, but a conductor-level system does not meet the inside-boundary limit a newer edition requires.

How module-level power electronics meet rapid shutdown

Module-level power electronics, or MLPE, is the common way to hit the inside-boundary limit, because the shutdown happens at each module instead of out at a combiner. Two product types dominate. Microinverters sit under each module and convert DC to AC right there, so when rapid shutdown initiates the high-voltage DC between modules collapses and there is little of it on the roof to begin with. DC optimizers sit under each module on a string-inverter system and, on the rapid-shutdown signal, drop their output to a low per-module voltage.

Both approaches bring the conductors between modules down toward the inside-boundary limit because the controlling electronics are at the module, not somewhere downstream. The keep-alive signal is the detail that bites in the field. Most MLPE holds the modules up only while it sees a signal from the inverter or a transmitter, so when the initiator opens, the signal stops and the modules drop. That also means a wiring fault or a dead transmitter can drop the array on its own, which is safe but reads as a production fault until you trace it.

String inverter with a per-module shutdown device

You do not have to run MLPE to meet the inside-boundary limit. A string inverter paired with listed PV rapid shutdown equipment (PVRSE) at each module gets there too. The PVRSE is a small device mounted at or in the module connection that disconnects or clamps the module on the rapid-shutdown signal, while the string inverter does the normal DC-to-AC conversion downstream. From a fire-safety standpoint the result is the same as optimizers: the roof drops to the inside-boundary level when the initiator opens.

The catch is that the inverter, the transmitter, and the per-module devices have to be a matched, listed combination. You do not get to bolt a generic disconnect from one maker onto an inverter from another and call it compliant. The manufacturer's instructions spell out which devices form a listed system together, and the inspector will check that the parts on the roof match that list. Mix and match outside the listing and you have an unlisted assembly, which fails on paper even when it functions on the roof.

The initiation device and where it goes

The initiation device is the switch that starts rapid shutdown, and it has to be reachable by the people who need it in an emergency. Recent editions require a single initiation device for the system, located at a readily accessible spot, commonly at or near the service disconnect or the PV system disconnect where a responder expects to find it. Earlier editions allowed several switches; the trend has been toward one clearly identified control so nobody is hunting during a fire.

Coordinate the location with the fire marshal before it is mounted, because they are the ones who will use it. The common arrangement ties rapid shutdown to the service or PV disconnect, so opening the disconnect also initiates shutdown. That means the responder's normal first move, killing power at the service, also drops the roof. Whatever the arrangement, the switch has to be labeled and obvious. A rapid-shutdown system with a perfectly compliant initiator buried behind equipment in a back room is a system the firefighter never finds in time.

Rapid shutdown labeling under 690.56(C)

NEC 690.56(C) requires a permanent label at the service and at the rapid-shutdown switch telling responders the system has rapid shutdown and what it controls. The mandated wording in recent editions reads to the effect of SOLAR PV SYSTEM EQUIPPED WITH RAPID SHUTDOWN, and the label has to state whether the system reduces conductors outside the array boundary only, or both inside and outside the boundary. That distinction tells a firefighter how to treat the roof itself.

The label is not a sticker you improvise. Recent editions call for a reflective-style placard, commonly white lettering on a red background with a minimum letter height and a simple roof diagram showing the array and the boundary, and it has to meet the durability requirements at 690.56 and 110.21(B) so it is still legible years later. Confirm the exact wording, format, and letter height against the adopted edition, since the labeling text has been revised across cycles. A missing or wrong rapid-shutdown label is one of the most common rejections on an otherwise clean PV job.

Listed PV rapid shutdown equipment and systems

Rapid shutdown is met with listed equipment, not field-assembled parts. The listing comes under UL 1741, the standard for inverters and interconnection equipment, which recognizes two configurations. PV rapid shutdown equipment (PVRSE) is listed as a component, evaluated on its own, which gives you flexibility in how you combine it. A PV rapid shutdown system (PVRSS) is listed as a system, normally the inverter plus the rapid-shutdown components together, evaluated as a working set.

What an inspector wants to see is that the pieces on the roof form a listed combination, either a PVRSS or PVRSE assembled per the manufacturer's instructions into a compliant system. The manufacturer's documentation is the authority on which parts go together, and it carries the markings that prove the listing. Pulling a non-listed disconnect into the DC string to save a few dollars breaks the listing for the whole assembly. The listed PVRSS or PVRSE is what makes the rapid-shutdown claim defensible, and it is the first thing a careful inspector traces back to the cut sheets.

UL 3741 hazard control as an alternative

The 2020 NEC added a second path for the area inside the array boundary: a PV hazard control system listed to UL 3741. Instead of dropping every module to the inside-boundary voltage, a UL 3741 system is evaluated as a complete listed assembly that keeps a responder safe on and around the array without module-level shutdown of every conductor. The whole system, modules, racking, conductors, and the components that limit the hazard, is tested together to show a firefighter is protected from shock during the operations they actually perform.

This matters most on larger commercial arrays, where module-level electronics on every panel are expensive and add failure points. A UL 3741 system can satisfy the inside-boundary requirement at the array level instead. It is still a listed system, so the same rule applies: you install the evaluated assembly as listed, not a lookalike you put together yourself. Confirm that the adopted edition recognizes the UL 3741 path, since it entered the code in the 2020 cycle and earlier editions do not contemplate it.

Testing rapid shutdown at commissioning

Rapid shutdown is not done until you have operated the initiator and watched the voltage fall. At commissioning, with the array in daylight, trigger the single initiation device and confirm the controlled conductors drop to the required limits within the time the code allows. Measure it. A meter on the DC conductors showing the voltage collapse to the inside-boundary level is the proof. A label and a wiring diagram are not.

Test the real responder action, not a bench shortcut. If the design ties rapid shutdown to the service disconnect, open the service disconnect and verify the roof drops, because that is what the firefighter will do. Document the before and after voltage and the time it took. This is also where you catch the install that was wired right but never actually triggers, the transmitter that was never connected, or the one optimizer that did not pair. Skip the test and the first time anyone learns the system does not drop is during a fire, which is the one moment you do not get to redo it.

Retest after any change that touches the array or the controls. Adding a string, swapping an inverter, or replacing a module device can break a pairing or move a conductor across the boundary, and the closeout test you ran in spring does not cover the work you did in fall. Some jurisdictions want the rapid-shutdown test witnessed, so confirm with the AHJ whether they need to see it operate before they sign off.

Rapid shutdown versus arc-fault and ground-fault protection

Rapid shutdown is one of several safety functions in Article 690, and crews mix them up. Rapid shutdown reduces voltage on a single action for responder safety. DC arc-fault protection, also required for PV, detects the electrical signature of a series arc in the DC circuit and shuts the inverter down to stop a fire from starting. Ground-fault protection detects current leaking to ground. They solve different problems and they are not interchangeable.

The practical consequence is that meeting one does not meet the others. An inverter with arc-fault detection still needs rapid shutdown if the array is on a building, and a rapid-shutdown system does nothing about a developing series arc on its own. On a plan review, the inspector checks each function separately. When an arc-fault event takes the array offline, it can also drop rapid shutdown as a side effect, because the keep-alive signal stops, which is safe but sends crews chasing a rapid-shutdown fault when the real event was an arc-fault trip upstream. Read the inverter fault log before you decide which function acted.

Fire marshal and AHJ coordination

The fire marshal has a direct stake in rapid shutdown, and in most jurisdictions they weigh in on where the initiation switch and the labeling go. Bring them in early. Where the switch lives, how it is marked, and how roof access and array layout are arranged are decisions the fire service cares about, because they are the ones arriving at 2 a.m. to a structure with panels on it.

The electrical AHJ enforces 690.12 and 690.56(C) at inspection, but the fire code adopted in the jurisdiction can add its own requirements on top: access pathways, setbacks around the array, and marking that go beyond the NEC text. Those vary widely by jurisdiction. The safe move is to confirm both the adopted NEC edition and the adopted fire code, and to settle the switch location and signage with the AHJ before the equipment is mounted, not after the inspector flags it. A relocation after the fact means new conduit, new labels, and a second inspection.

Do I need rapid shutdown on a ground-mount array?

Generally no. NEC 690.12 applies to PV systems on or in buildings, and a standalone ground-mount array is neither, so rapid shutdown usually does not apply to it. The reasoning follows the hazard: rapid shutdown exists to protect responders cutting into a building, and there is no roof to cut into on a pole or rack in a field. The conductors are not running through occupied structure.

The line gets crossed when the array's conductors enter a building. If the DC or the PV output conductors run into an occupied building to reach the inverter or the service, the in-building portion can pull the system back under the rapid-shutdown rules. A small structure built solely to house PV equipment is treated differently than an occupied building, but the details vary, so confirm with the AHJ. Do not assume a ground mount is automatically exempt the moment its wiring touches a building. Verify against the adopted edition and how the local jurisdiction reads it.

Adding rapid shutdown to an existing array

Retrofit comes up two ways: a code-required upgrade when you alter an old system, and a voluntary add for safety. The trigger is usually the adopted code edition and what the AHJ requires when you pull a permit. An existing array installed legally under an older edition is generally allowed to stay as it was approved, but once you change it enough to require a new permit, the jurisdiction can make you bring rapid shutdown up to the current edition.

The practical work is rarely a clean drop-in. Adding module-level shutdown to an existing string array means getting under every module to add PVRSE or optimizers, matching them to a listed combination with the existing or a new inverter, and adding the initiator and labeling. On a commercial roof, a different listed approach, including a UL 3741 system, is sometimes the cheaper route than retrofitting electronics under hundreds of modules. Price the listing path before you commit, and confirm with the AHJ exactly which edition and which scope of work triggers the upgrade.

Where rapid shutdown goes wrong in the field

The failures cluster, and most are not the electronics. The biggest is the system that was never tested, so an install with a wiring mistake passes through closeout looking fine and only reveals itself the day a responder needs it. Right behind it is the inside-boundary miss: a conductor-level approach put on a new roof under a recent edition, which drops the home runs but leaves the array energized between modules, exactly the zone the newer limit was written to cover.

Then come the listing problems. Someone swaps in a disconnect or a combiner that is not part of the listed PVRSS, and the assembly is no longer listed even though every piece is UL-marked on its own. Labeling is the quiet one. A placard with the wrong wording, the wrong format, or one that has faded off a south-facing service in two summers is a rejection and a callback. And the initiator nobody can find, mounted behind equipment or unmarked, defeats the whole point on the one night it matters. None of these show up in daylight production numbers, which is why they survive until an inspection or an emergency surfaces them.

Field checklist

What to document

The record is what proves the system met 690.12 on the day it was tested, and it is what the next electrician reads before touching the array. Capture the adopted code edition, the listed equipment, the boundary used, the measured voltages, and the time, so the result is reproducible.

Write down the controlled-conductor limits you designed to, and verify them against the adopted edition rather than copying a number from memory, because the figures have moved across cycles. The numbers below are the common values, not a guarantee for your jurisdiction.

Common mistakes

• No rapid shutdown at all where the array is on or in a building and 690.12 requires it.
• A conductor-level system that does not meet the inside-boundary limit on a new install under a recent edition.
• Mixing non-listed parts instead of installing a listed PVRSS, PVRSE, or UL 3741 system per the instructions.
• Missing, wrong, or non-durable rapid-shutdown labeling under 690.56(C).
• An initiation device a firefighter cannot find or reach, or several switches where one is required.
• Never testing rapid shutdown at commissioning, so nobody knows whether the roof actually drops.

Standards and references

NEC 690.12 is the rapid-shutdown requirement itself, setting the single-action initiation, the controlled-conductor limits, and the array boundary. NEC 690.56(C) is the labeling that tells a responder the system has rapid shutdown and what it controls. Both sit in Article 690, the PV article, and both have been revised across the 2014, 2017, 2020, and later cycles, so the controlling text is whatever edition the jurisdiction has adopted, with local amendments.

The equipment listings live under UL 1741, the standard for inverters and interconnection equipment, which is where the PVRSE and PVRSS configurations are evaluated. UL 3741 is the separate standard for PV hazard control systems, the array-level alternative for the inside-boundary protection. The fire marshal and the adopted fire code can add access and marking requirements on top of the NEC. The equipment manufacturer's instructions and the product listing are the final word on which parts form a compliant system. Treat the 30 V, 80 V, 30-second, and 1 ft figures as edition-dependent, and confirm each against the adopted NEC before it goes on a submittal.

Units, terms, and acronyms

Rapid shutdown carries its own set of acronyms, and they show up across cut sheets, plan sets, and inspection notes with little explanation.

The PVRSE and PVRSS distinction is the one that trips people, since they sound interchangeable and are not: one is component-listed, the other system-listed. The numbers stay in DC volts for the conductor limits, seconds for the time, and feet for the boundary, with metric equivalents on imported equipment.

Rapid shutdown

Reducing a building-mounted PV system's controlled conductors to a safe voltage quickly on a single action, for responder safety

Controlled conductors

The PV circuit conductors that rapid shutdown is required to de-energize

Array boundary

A code-defined line a short distance outside the array, commonly 1 ft, that splits the inside and outside voltage limits

MLPE

Module-level power electronics, microinverters or DC optimizers that control voltage at each module

PVRSE

PV rapid shutdown equipment, a component listed on its own under UL 1741

PVRSS

PV rapid shutdown system, the inverter and rapid-shutdown components listed together under UL 1741

PVHCS / UL 3741

PV hazard control system, an array-level listed alternative for the inside-boundary protection

Initiation device

The single switch that starts rapid shutdown, located where a responder can reach it

Related tools

Calculators and readiness checks for this work

Compare your options

FAQ

People also ask

• What is NEC 690 rapid shutdown?
• What is the difference between emergency and standby power?
• What does the NEMA number on a plug mean?
• What is selective coordination?
• What is available fault current?