Blog · Lockout/tagout · 29 CFR 1910.147

How to Isolate Machine Energy Before Repairs

By Safety-Video · Published
Technician operating an energy isolating device on a machine

The machine is stopped. The start button is off. That does not mean it is safe to put your hands inside. Knowing how to isolate machine energy means controlling every source that can move, drop, rotate, heat, crush, electrocute, or release pressure while someone is servicing equipment.

A worker loses when the team treats shutdown as lockout. A stopped conveyor can still have gravity working against it. A press can still hold hydraulic pressure. A mixer can restart when someone restores power upstream. “I thought it was locked out” is not a defense after an amputation.

How to isolate machine energy the right way

For general industry equipment, OSHA's lockout/tagout standard is 29 CFR 1910.147. The basic rule is straightforward: before servicing or maintenance exposes a worker to unexpected startup or release of stored energy, the employer must use an energy-control procedure that actually prevents that release.

The details matter because machines do not run on electricity alone. Energy may be electrical, mechanical, hydraulic, pneumatic, chemical, thermal, or gravity. One piece of equipment can have several sources, and missing one is enough to get someone hurt.

Start by identifying the work and the energy

Before anyone reaches into a point of operation, clears a jam, changes a blade, replaces a belt, or repairs a guard, stop and look at the job. What will be opened, removed, entered, adjusted, or placed in the line of fire? The answer determines whether normal operating procedures are enough or whether lockout/tagout is required.

Then identify every energy source. Follow the equipment, not just the nearest disconnect. A packaging line may have electrical feeds, air lines, a hydraulic lift, a gravity-loaded section, and a hot sealing unit. A forklift charging station may have electrical energy and battery hazards. A suspended load may be powered down but still ready to fall.

The machine-specific energy-control procedure should identify the isolation points, the order for shutting down and restarting, the method for restraining stored energy, and how workers verify isolation. If there is no clear procedure, that is not a reason to improvise. It is a reason to stop and get the employer or supervisor involved.

Shut down using the normal controls

Tell affected employees what is happening before shutting equipment down. Operators, nearby workers, and anyone relying on that machine need to know it will be taken out of service and why. A quick heads-up prevents someone from trying to restart equipment because production suddenly stopped.

Use the normal stop button, control panel, or operating procedure to shut the machine down. This is only the first step. Emergency stops, selector switches, and push buttons are controls, not energy-isolating devices. A stop button can be reset. A control circuit can fail. Someone can hit the wrong button.

Isolate every energy source

Operate the actual energy-isolating devices: open and disconnect electrical disconnects, close and lock valves, block mechanical movement, isolate hydraulic or pneumatic supply, and secure any source of gravity or stored force. The device must physically prevent transmission or release of energy.

A padlock goes on the disconnect, valve, or other isolation device whenever the device can accept a lock. The authorized employee doing the work applies their own lock. That lock is personal. It should not come off because a supervisor wants the line moving again or because the next shift says the repair looks finished.

Tags are warnings, not physical restraints. OSHA allows tagout alone only in limited situations where an energy-isolating device cannot be locked out and the employer can show the tagout program provides full employee protection. In plain terms: a tag is not a substitute for a lock just because locks are inconvenient.

Control stored energy before work starts

Turning off the supply does not make stored energy disappear. Bleed air from lines. Drain or relieve hydraulic pressure. Discharge electrical capacitors according to the equipment procedure. Let hot parts cool where needed. Block, brace, pin, or lower elevated components so gravity cannot move them.

This is where rushed jobs go bad. A mechanic may lock an electrical disconnect and assume the work is safe, while a cylinder remains pressurized or a counterweight remains suspended. If a machine part can move after isolation, treat that movement as an active hazard until it is restrained.

Do not use a body part as a test block. Do not trust a cylinder to “probably hold.” Use rated blocking and restraints designed for the load. A piece of scrap lumber, a wrench, or a forklift parked under a raised component is not a serious energy-control plan.

Verify zero energy, then begin

Verification is the step people skip when the job is familiar. It is also the step that catches a missed disconnect, a backfeed, a shared air header, or a valve that does not fully close.

First, make sure no one is exposed to moving parts. Then attempt to start the equipment using the normal controls. Return controls to the off or neutral position afterward. Check gauges, indicators, pressure readings, voltage, temperature, or movement as required by the job and procedure.

For electrical work, verification can require properly rated test equipment and qualified employees. Testing itself can expose a worker to live electrical hazards. That is not a task to hand to the nearest employee with a meter. Follow the electrical safety procedure and use workers trained for that work.

Who can apply locks and remove them?

OSHA distinguishes between authorized and affected employees. Authorized employees perform the lockout/tagout because they service or maintain the machine. Affected employees operate the equipment or work in the area affected by the shutdown. They need to understand the purpose of the lockout and must not attempt to restart or use the equipment.

Each authorized worker needs personal control. If three maintenance workers are inside or working on a machine, one lock on the disconnect does not protect all three unless a group lockout procedure gives each worker equivalent personal protection. That may involve a lock box, hasps, or another documented group-lockout method.

A group lock box can work well when a designated authorized employee applies the primary isolation locks, places the keys in the box, and every worker applies a personal lock to that box. The critical point is personal protection: no one starts work until their lock is on, and the equipment cannot be re-energized until every personal lock is off.

Shift changes and contractor work need the same discipline. Incoming workers must apply their protection before outgoing workers remove theirs. When outside contractors are involved, the host employer and contractor must communicate their energy-control procedures. Nobody should be guessing which company owns the lockout.

Removing another worker's lock is not a casual management decision. Employers need a specific procedure for that unusual situation, including verifying the worker is not at the facility and notifying them before they resume work. Cutting a lock because “we need the machine” sends every employee the wrong message.

Common shortcuts that fail

The dangerous shortcuts are usually familiar:

  • Relying on the stop button or emergency stop instead of locking an isolating device.
  • Locking electrical power but ignoring air, hydraulic pressure, heat, gravity, or motion.
  • Starting work before bleeding, blocking, discharging, or otherwise restraining stored energy.
  • Using one employee's lock to cover a group of workers without a proper group procedure.
  • Skipping the tryout or verification because the machine has been locked out “a hundred times.”

Production pressure is real. So are deadlines, truck appointments, and supervisors waiting on a line to come back up. None of that changes the energy in the machine. If the work exposes someone to hazardous energy, the lockout must protect the worker, not merely document that someone meant to be careful.

Restoring equipment safely

Before removing locks and restoring energy, inspect the area. Confirm tools, blocks, jumpers, and loose materials are removed. Make sure machine components are intact and guards are back in place. Account for employees and make sure everyone is positioned safely.

The authorized employee who applied a lock should remove it after their work is complete. Notify affected employees before startup. Then restore energy in the sequence required by the equipment procedure and watch for abnormal movement, leaks, or control problems.

A lockout is not paperwork for the binder. It is the point where a worker takes control of a machine before the machine takes control of the worker. If you cannot identify, isolate, restrain, and verify every energy source, the job is not ready to start.