Lockout/tagout works on a simple promise: isolate the energy source, verify zero energy, and the equipment stays safe to work on until someone deliberately removes the lock. That promise depends on one thing being true -- that the energy source can actually be turned off.
A solar PV array breaks that assumption. As long as sunlight -- or in some cases even bright ambient light -- hits the modules, they generate voltage. There is no switch, breaker, or disconnect that reaches up into the sky and turns off the sun. You can isolate a PV system from the rest of the electrical system. You cannot fully de-energize the modules themselves.
Why Traditional LOTO Breaks Down on a PV System
Standard LOTO training assumes every circuit has a controllable source: a breaker, a disconnect, a valve, something a worker can physically open and lock. Opening a PV array disconnect does exactly what it's supposed to do -- it isolates everything downstream of that point. What it does not do is change what's happening at the modules themselves.
The conductors between the modules and that disconnect -- the source circuit conductors -- stay energized by the photovoltaic effect for as long as light is reaching the cells. Open the disconnect, lock it, tag it, and those upstream conductors are still capable of producing voltage and current. That's a fundamentally different hazard than a motor circuit or a lighting panel, where opening the right breaker genuinely removes the energy.
Where the Energized Boundary Actually Sits
It helps to think through the path deliberately: modules generate voltage at the cell level, feed into source circuit conductors, which typically run to a combiner box, then out as an output circuit toward an inverter or disconnect. A disconnect at the inverter, or a breaker at a combiner box, controls what happens downstream of that point -- it does not control what the modules themselves are producing upstream.
That means a worker opening a combiner box to troubleshoot a string, or working inside a junction box on the array side, is working on conductors that can be energized regardless of what's been locked out closer to the building. Knowing exactly where that boundary sits on a given system -- and communicating it clearly on the permit -- is the difference between a controlled task and a surprise.
Field Controls That Actually Work
Because the hazard can't be eliminated the way it can on a conventional circuit, PV-specific work relies on a layered set of controls instead of a single lockout point:
- Opaque covering -- fully covering modules with an opaque blanket or tarp blocks light and suppresses voltage generation close to zero. This is the closest equivalent PV work has to de-energizing the source, and it's treated as a required step, not an optional one, whenever module-level or source-circuit work is planned.
- Timing -- working before sunrise, after sunset, or in heavy overcast reduces voltage, but low light is not the same as no light. It reduces risk; it does not eliminate the hazard.
- Treat source-circuit conductors as energized by default -- even with modules covered and disconnects open, the working assumption should be that voltage can still be present unless it has been verified otherwise.
- Insulated tools and voltage-rated PPE -- used as standard practice for this category of work, not reserved for jobs where energized work has already been decided on.
- Verify absence of voltage at the actual point of work -- every time, with a properly rated meter, immediately before touching conductors. A disconnect's position tells you what should be true. A meter reading at the point of work tells you what actually is.
What This Means for Your Written Program
The underlying goal is the same one that drives any electrically safe work condition: eliminate the hazard where you can, and control what you can't eliminate. On a PV system, full de-energization of the array itself typically isn't achievable through a disconnect alone, so the program has to lean harder on the compensating measures above -- module covering, verified isolation of everything that can be isolated, and treating anything upstream of that boundary as potentially energized work requiring the appropriate permit and PPE.
A lock on a disconnect is necessary on a PV system. It has never once been sufficient.
Train for the Difference
A worker who's only ever done conventional electrical LOTO can walk onto a solar site with real experience and still miss this -- because the mental model that's kept them safe for years (lock it, tag it, it's dead) doesn't fully apply here. Anyone who works combiner boxes, source circuits, rapid shutdown equipment, or module-level connections needs PV-specific hazard recognition built into their qualification, not assumed as a carryover from general electrical training.
The sun doesn't clock out, doesn't respect a permit, and doesn't care what's written on your tag. Plan the work accordingly.