1.2 High-Voltage De-Energizing, Lockout/Tagout & Three-Point Voltage Verification
Key Takeaways
- Vehicle de-energization follows a strict sequence: power off READY mode, isolate smart key fobs 15–20 feet away or in an RF pouch, and disconnect the 12V auxiliary negative battery terminal.
- Disconnecting the 12V auxiliary battery de-energizes the coil circuits of the System Main Relays (SMRs/contactors), preventing them from closing and disarming the SRS pyrotechnic squibs.
- The Manual Service Disconnect (MSD) or service plug physically splits the high-voltage battery pack string in half and must be secured using a dedicated Lockout/Tagout (LOTO) padlock retained by the technician.
- Technicians must observe a mandatory 5-to-10-minute waiting period to allow inverter DC bus filter capacitors to discharge through internal passive bleeder resistors.
- The Three-Point (Live-Dead-Live) test on a CAT III 1,000V DMM is mandatory: prove meter on a known live source, verify exactly 0.0V DC across HV+/HV- and to chassis ground (and <0.1V AC on phases), and immediately re-prove the meter on the live source.
Last updated: August 2026
1.2 High-Voltage De-Energizing, Lockout/Tagout & Three-Point Voltage Verification
High-voltage hybrid and electric vehicles do not have a single "kill switch" that guarantees immediate zero energy across all internal components. Even after turning off the ignition, high-voltage contactors can stick closed, 12V electronic control units can wake up unexpectedly, and inverter filter capacitors can retain lethal 400V+ DC charges for several minutes.
To safely perform mechanical or electrical repairs on high-voltage components, technicians must execute a systematic, non-negotiable 6-Step High-Voltage De-Energization and Isolation Verification Protocol.
1. High-Voltage Contactors & SMR Operation
The high-voltage battery pack is isolated from the vehicle's electrical distribution network by electromechanical relays known as System Main Relays (SMRs) in Toyota/Lexus architectures or High-Voltage Contactors in industry-wide terminology.
+-----------------------------------------------------------------------------------------+
| HIGH-VOLTAGE SMR / CONTACTOR ARCHITECTURE |
| |
| +---------------------------------------------------------+ |
| | HIGH-VOLTAGE BATTERY PACK (ENCLOSURE) | |
| | | |
| (+) BAT ----+---> [ SMR-B / Contactor (+) ] --------------------------+----> HV (+) |
| | | TO |
| | +-> [ SMR-P (Precharge) ] -> [ Resistor (e.g. 20-40Ω)]-+ INVERTER |
| | | | DC BUS |
| (-) BAT ----+--+-> [ SMR-G / Contactor (-) ] -------------------------+----> HV (-) |
| | | |
| | [ MANUAL SERVICE DISCONNECT (MSD) ] | |
| | (Physically splits battery cells in center) | |
| +---------------------------------------------------------+ |
| ^ |
| | 12V Control Coils |
| +---------------------------------------------------------+ |
| | BMS / HYBRID VEHICLE ECU (12V CONTROL) | |
| +---------------------------------------------------------+ |
+-----------------------------------------------------------------------------------------+
The Three Contactors:
- SMR-B / Positive Contactor: Connects the positive terminal of the high-voltage battery string to the inverter DC positive busbar.
- SMR-G / Negative Contactor: Connects the negative terminal of the high-voltage battery string to the inverter DC negative busbar.
- SMR-P / Pre-Charge Contactor & Resistor: Closes before SMR-B/SMR-G during power-up. It routes current through a 20–40 Ω pre-charge resistor to charge the inverter filter capacitors slowly. This prevents massive inrush current (which could reach hundreds of amps) from welding the main contactor contacts together.
Safety Implication: SMRs/contactors are normally open (NO) spring-loaded relays held closed only by 12V electromagnetic coils driven by the Hybrid/EV ECU. Cutting 12V power drops coil excitation, causing internal springs to force the contacts open.
2. The 6-Step De-Energization & Verification Workflow
Every vehicle de-energization procedure must proceed through six distinct phases in exact order:
+-----------------------------------------------------------------------------------------+
| 6-STEP HIGH-VOLTAGE DE-ENERGIZATION SEQUENCE |
| |
| [STEP 1: VEHICLE SHUTDOWN & KEY FOB ISOLATION] |
| - Switch ignition OFF; verify 'READY' light extinguishes |
| - Move Smart Key fobs >= 15-20 feet (5-6 m) away or place in Faraday RF pouch |
| | |
| v |
| [STEP 2: 12V AUXILIARY BATTERY DISCONNECTION] |
| - Disconnect 12V negative (-) terminal; isolate cable end with insulating boot |
| - Rationale: Disables BMS/ECU contactor drive logic and disarms SRS pyrotechnics |
| | |
| v |
| [STEP 3: DON CERTIFIED HIGH-VOLTAGE PPE] |
| - Put on ASTM D120 Class 0 gloves + ASTM F696 leather protectors + ANSI Z87.1 eyewear |
| | |
| v |
| [STEP 4: EXTRACT MANUAL SERVICE DISCONNECT (MSD) & APPLY LOTO] |
| - Unlock two-stage lever (opens HVIL); remove service plug from battery pack |
| - Apply Lockout/Tagout padlock and danger tag; technician retains the ONLY key |
| | |
| v |
| [STEP 5: OBSERVE CAPACITOR DISCHARGE BUFFER PERIOD] |
| - Wait 5 to 10 minutes (per OEM manual) for inverter bleeder resistors to discharge |
| | |
| v |
| [STEP 6: THREE-POINT (LIVE-DEAD-LIVE) VOLTAGE VERIFICATION] |
| - 6a: Test CAT III 1,000V DMM on known live source (e.g. 12V battery / proving unit) |
| - 6b: Measure Inverter Terminals: HV+ to HV- (0.0V DC), HV+ to GND (0.0V DC), |
| HV- to GND (0.0V DC), and Phase-to-Phase / Phase-to-GND AC (<0.1V AC) |
| - 6c: Re-test DMM on known live source to verify meter functionality during test |
+-----------------------------------------------------------------------------------------+
3. Detailed Step Analysis
Step 1: Power Down & Key Fob Isolation
- Depress the Power/Start button to switch the vehicle completely OFF. Confirm that the dashboard
READYindicator is extinguished. - Modern passive entry keyless systems emit continuous ultra-high frequency (UHF) polling signals. If the key fob remains in or near the vehicle, accidental activation of accessories, telematics remote climate pre-conditioning, or automated charging cycles can command the contactors to close.
- Requirement: Move all smart key fobs at least 15 to 20 feet (5 to 6 meters) away from the vehicle, or place the fobs in a dedicated Faraday RF-blocking pouch/box.
Step 2: 12V Auxiliary Negative Battery Disconnection
- Locate the 12V auxiliary lead-acid or lithium battery. Disconnect the negative (-) battery cable first and wrap the terminal with a non-conductive insulating cap.
- Technical Purpose:
- The Hybrid/EV control module requires 12V to energize the SMR/contactor coils. With 12V removed, contactors cannot physically close under software command.
- Disconnecting 12V eliminates the power source for the Supplemental Restraint System (SRS) airbag squibs, preventing accidental pyrotechnic deployment while working around high-voltage harnesses.
Step 3: Don Certified High-Voltage PPE
- Put on ASTM D120 Class 0 rubber insulating gloves with ASTM F696 leather outer protectors and ANSI Z87.1 safety glasses with side shields before approaching the high-voltage battery service disconnect.
Step 4: Remove Manual Service Disconnect (MSD) & Apply Lockout/Tagout (LOTO)
- The Manual Service Disconnect (MSD) or High-Voltage Service Plug is located on or inside the battery pack housing:
- It incorporates a heavy-duty internal fuse (e.g., 200A–400A fast-acting high-voltage ceramic fuse).
- It features a two-stage mechanical interlock lever:
- Stage 1: Flipping the release lever opens the High Voltage Interlock Loop (HVIL) contact pins. This signals the BMS to immediately de-energize contactors before high-power contacts separate, preventing electrical arc-drawing.
- Stage 2: Pulling the lever outward physically unseats the high-voltage bridging busbars from the battery string.
- Physically removing the MSD splits the high-voltage battery pack in half. A 400V pack is divided into two isolated 200V sections inside the pack, eliminating full voltage from the external output terminals.
- Lockout/Tagout (LOTO): Once the MSD is removed, the technician must place a dedicated LOTO safety hasp and padlock through the MSD receptacle or lock the MSD inside a dedicated lockout box. Attach a visible tag reading:
"DANGER: DO NOT OPERATE - HIGH VOLTAGE WORK IN PROGRESS"with the technician's name and date. The technician must place the single physical key in their pocket. Nobody else in the workshop may hold a duplicate key.
+-----------------------------------------------------------------------------------------+
| LOCKOUT / TAGOUT (LOTO) BEST PRACTICES |
| |
| - One Technician, One Lock, One Key. Never share keys or leave padlocks unlocked. |
| - If multiple technicians work on the same vehicle, use a multi-lock hasp. Each |
| technician must attach their own personal padlock. |
| - Tag must be heavy-duty, weather-resistant, and clearly state: |
| * Date & Time of Isolation |
| * Technician Name & Contact Number |
| * Specific Work Order Number |
+-----------------------------------------------------------------------------------------+
Step 5: Capacitor Discharge Buffer Period
- Inside the inverter/power control module, massive electrolytic or metallized polypropylene film filter capacitors (500 µF to 2,000 µF) smooth DC bus ripple. These capacitors store lethal energy ($E = \frac{1}{2} C V^2$) at 300V–800V DC.
- Discharge Mechanisms:
- Active Discharge: When the vehicle powers down, the inverter gate drivers pulse the IGBT/SiC switches to dump capacitor energy through the motor stator windings or an internal discharge transistor in under 5 seconds.
- Passive Discharge: If active discharge fails, fixed high-resistance bleeder resistors wired across the DC bus drain capacitor voltage slowly to ground.
- Mandatory Buffer: Technicians must wait 5 to 10 minutes (verify exact vehicle OEM specification) before removing the inverter access cover to allow complete bleeder discharge.
4. The Three-Point (Live-Dead-Live) Voltage Verification Test
Never assume a circuit is dead because the MSD is pulled or the 12V battery is disconnected. Contactors can weld shut in a closed state, or bleeder resistors can fail open. The Three-Point Test (Live-Dead-Live) is the definitive standard under NFPA 70E and OSHA for proving zero electrical potential.
+-----------------------------------------------------------------------------------------+
| THREE-POINT (LIVE - DEAD - LIVE) VOLTAGE VERIFICATION |
| |
| [POINT 1: PROVE METER ON LIVE SOURCE] |
| - Select DC Volts on CAT III 1,000V DMM. |
| - Measure known live voltage (e.g. 12V battery = 12.6V DC or dedicated proving unit).|
| - Confirms meter display, internal fuse, switch, and test leads are 100% operational. |
| | |
| v |
| [POINT 2: MEASURE HIGH-VOLTAGE INVERTER TERMINALS (DEAD TEST)] |
| - Remove inverter access cover (PPE still on). |
| - Measure 4-point test matrix: |
| 1. HV Positive (+) to HV Negative (-) ---> MUST EQUAL 0.0V DC |
| 2. HV Positive (+) to Chassis Body Ground ---> MUST EQUAL 0.0V DC |
| 3. HV Negative (-) to Chassis Body Ground ---> MUST EQUAL 0.0V DC |
| 4. Motor Phase Terminals (U-V, V-W, W-U, Phase-GND) ---> MUST BE < 0.1V AC |
| | |
| v |
| [POINT 3: RE-PROVE METER ON LIVE SOURCE] |
| - IMMEDIATELY return DMM leads to the known live voltage source (12V battery). |
| - Verify meter still registers live voltage (12.6V DC). |
| - Proves meter did not fail open or blow an internal fuse during Point 2. |
+-----------------------------------------------------------------------------------------+
| Measurement Point | Meter Setting | Expected Voltage | Safe Condition Criteria |
| :--- | :--- | :--- | :--- |
| **HV(+) to HV(-)** | DC Volts | **0.0 V DC** | Complete DC bus capacitor discharge |
| **HV(+) to Chassis Ground** | DC Volts | **0.0 V DC** | Zero positive line-to-chassis potential |
| **HV(-) to Chassis Ground** | DC Volts | **0.0 V DC** | Zero negative line-to-chassis potential |
| **Motor Phases (U-V-W)** | AC Volts | **< 0.1 V AC** | Zero residual back-EMF / AC ripple |
| **Phase to Chassis Ground** | AC Volts | **< 0.1 V AC** | Zero motor winding leakage potential |
Critical Diagnostic Rule: Any voltage reading above 0.0V DC (or >0.1V AC) indicates a dangerous failure: stuck contactors, open discharge resistors, or active back-EMF. STOP IMMEDIATELY. Do not touch bare busbars. Replace the cover and re-evaluate the de-energization sequence.
Once Point 3 re-proves the meter on the live source, the vehicle is officially certified De-Energized and safe for mechanical and electrical service.
Loading diagram...
Test Your Knowledge
Why must the 12V auxiliary negative battery terminal be disconnected and isolated during the vehicle de-energization procedure?
A
B
C
D
Test Your Knowledge
What is the primary function of the Manual Service Disconnect (MSD) two-stage mechanical release lever?
A
B
C
D
Test Your Knowledge
When performing the Three-Point (Live-Dead-Live) zero-voltage verification test on an inverter DC bus, which step correctly confirms that the test meter was fully functional during the zero-voltage measurement?
A
B
C
D