PV rapid shutdown — quickly lowering rooftop voltage for the fire service

The guide on §712 (PV installations) and the guide on DC arc-fault detection in PV strings cover, respectively, the general installation requirements and one specific DC fault mechanism. This article covers a different, fire-safety-driven question: what happens to the DC voltage on the roof itself once the fire service arrives, and why simply switching off the inverter on the AC side does not solve that problem.

The core problem: a PV string keeps carrying voltage as long as light falls on it

A PV panel, unlike almost any other source in an installation, cannot be switched off with a switch: as long as sufficient light falls on the panel, it generates voltage. A series-connected string of panels can therefore, even when the inverter has been fully disconnected from the grid and switched off on the AC side, still carry the full open-circuit voltage of the string — for a larger residential or commercial installation that can reach several hundred volts DC across the wiring on and around the roof. For a fire crew that needs to access the roof to ventilate, cut an opening, or apply extinguishing water, that persistent high voltage is a real electrocution and arc-flash risk that is independent of the fire itself.

What rapid shutdown actually requires: lowering voltage, not just disconnecting

The rapid-shutdown principle (elaborated among others in NEC 690.12 in the US, with a comparable intent found in IEC 60364-7-712) does not only require the PV installation to be disconnected from the grid, but that the voltage on and around the roof itself be lowered within a short, specified time (typically a few seconds after activation in the reference standard) to a safe level — in practice usually to a maximum of a few tens of volts per conductor pair within the array boundary, and to an even lower level within the installation zone outside the array.

This is fundamentally different from switching off the inverter: an inverter that simply stops delivering power to the grid does not interrupt the DC circuit between the panels and the inverter — the string keeps carrying the full open-circuit voltage all the way to the inverter's DC input, precisely the part of the installation that is most often located on or near the roof.

How module-level power electronics (MLPE) solve this

Rapid shutdown is achieved in practice with module-level power electronics (MLPE): electronics that control the voltage per panel or per short string section, instead of only at the central inverter:

Power optimizers: small DC/DC converters, one per panel or per pair of panels, that regulate the voltage of that part of the string. When rapid shutdown is activated (via a physical switch or the loss of a communication signal from the inverter), the optimizers switch their output back to a low, safe level, splitting the string as a whole into small, safe voltage sections.
Micro-inverters: convert the DC voltage of each panel individually into AC right on the roof. Because there is no longer a long DC series chain per panel, there is structurally no high-voltage DC string present — the rapid-shutdown question largely disappears here through the design itself, rather than through an additional protective function.

See also the guide on hotspot and bypass diodes under partial shading for another scenario where MLPE-like, per-panel electronics are already relevant — there to limit power loss under shading, here to quickly lower the voltage in an emergency.

Note: rapid shutdown is an additional, specifically fire-safety-driven requirement, not a replacement for the already existing DC arc-fault detection (series arc faults during normal operation) or the inverter's anti-islanding protection (preventing the installation from keeping an "island" energized after a grid outage). All three measures exist alongside each other and each covers a different scenario.

Practical relevance

When assessing a roof-mounted PV installation for rapid-shutdown compliance, it is not enough to check whether an AC-side emergency switch is present — that switches the inverter off the grid, but often leaves the DC string on the roof untouched. Instead, verify whether the installation is actually equipped with MLPE (optimizers or micro-inverters) or an equivalent provision that genuinely lowers the voltage within the array and installation zone within the required time after activation, and whether the activation switch itself is mounted in a location that is logical and clearly marked for the fire service.

Common mistakes

Assuming an AC-side emergency switch is sufficient — that disconnects the inverter from the grid, but often leaves the DC string between the panels and the inverter fully energized.
Confusing rapid shutdown with DC arc-fault detection or anti-islanding — these are three separate measures for three separate scenarios that do not replace one another.
Not applying MLPE to a string that runs across the entire roof plane, leaving the full open-circuit voltage of the string present on the roof itself, even after activating a simple AC-side switch.
Placing the activation switch in an unclear or hard-to-reach location, causing the fire service to lose valuable time locating it during an actual response.