Interlocking Engineering for EHV GIS Substations

1. Why Interlocking Is a First-Order Design Input, Not an Afterthought

In an extra-high-voltage gas-insulated substation, the interlocking scheme is the last line of defense between a routine switching order and a catastrophic event. A disconnector opened under load, a breaker closed onto a grounded bus, or an earth switch applied to an energized section can destroy primary equipment, collapse a diameter, and put personnel at severe risk. Interlocking logic exists to make those events mechanically and electrically impossible — not merely procedurally discouraged.

At Keentel Engineering, we treat interlocking design and verification the same way we treat grid interconnection: as a first-order engineering input that must be resolved early, not a documentation task cleaned up at the end of a project. The interlocking philosophy shapes the bay layout, the control architecture, the SCADA point list, the maintenance procedures, and ultimately the operational flexibility of the substation for its entire service life.



This article walks through interlocking engineering for a 380–400 kV class GIS diameter arranged in the one-and-a-half breaker scheme. We cover the roles of the bus-side, middle, and line-side circuit breakers; the isolators and earth switches that surround them; the distinction between the service position and the test position; SF6 gas density interlocks; and the specific permissive conditions that govern each closing and opening operation. A detailed FAQ follows the main article.

2. The One-and-a-Half Breaker Diameter: Anatomy of the Bay

In a one-and-a-half breaker arrangement, two circuits share three circuit breakers connected in series between two main busbars. Each diameter contains a bus-side breaker tied to Bus 1, a second bus-side breaker tied to Bus 2, and a middle breaker shared between the two circuits. Each circuit taps the diameter between a bus-side breaker and the middle breaker.

Every circuit breaker in the diameter is flanked by two motor-operated isolators (disconnectors), and each isolator section carries its own maintenance earth switches. Line-side isolators connect each circuit to the diameter, line earth switches provide grounding for outgoing circuits, and dedicated busbar earth switches allow each main bus to be grounded for maintenance. Current transformer cores are distributed through the diameter to support protection zones that overlap across each breaker.

The value of this topology is redundancy: either circuit can remain in service with any single breaker out for maintenance, and a bus outage does not interrupt either circuit. But that same flexibility multiplies the number of possible switching states which is exactly why the interlocking matrix for a one-and-a-half breaker diameter is substantially more complex than for a single-bus or double-bus arrangement, and why it deserves rigorous engineering review at the design stage.

Keentel Perspective

The interlocking matrix is where the single-line diagram meets operational reality. Every cell in that matrix is a claim about what can never happen in the field. We recommend a formal, line-by-line interlocking review with the utility’s operations staff in the room before control wiring design is released for construction.

3. The "Complete Position" Operating Philosophy

Under normal operating conditions, a well-run one-and-a-half breaker diameter is maintained in what operators call the complete position: all three circuit breakers and all series isolators in the diameter are kept closed, even if one of the two circuits is de-energized at its remote end. If a circuit is out of service, its line isolator remains closed along with everything else in the string.

This practice delivers two operational benefits. First, restoration is fast returning the idle circuit to service requires only remote-end action rather than a local switching sequence. Second, it keeps the diameter’s protection zones intact and simplifies the operator’s mental model: the default state of the bay is "everything closed," and any departure from that state is a deliberate, logged exception associated with maintenance or a fault.

4. Status Signaling: Why "Fully Open" and "Fully Closed" Matter

Interlocking logic does not act on simple open/closed indications alone. GIS switchgear reports device positions with a richer vocabulary, and the distinction between an in-travel device and a device that has completed its stroke is fundamental to safe permissive logic.

The engineering significance of FO and FCL is straightforward: an isolator caught mid-stroke has neither the dielectric withstand of the open position nor the current-carrying capability of the closed position. Permissive logic built on full-travel confirmation rather than momentary auxiliary contacts  ensures that no downstream operation is enabled while any interlocked device is still in motion.

5. Circuit Breaker Interlocking: The Bus-Side Breaker

Consider the bus-side circuit breaker connected to Bus 1. It sits between two series isolators — a bus-side isolator toward the busbar and a diameter-side isolator toward the circuit tap — and each isolator section carries its own earth switches. The breaker is governed by two separate interlocking tables: one for closing and one for opening. The asymmetry between them is deliberate, and understanding it is essential for anyone writing or reviewing switching orders.

5.1 Closing in the Service Position

Closing a breaker in the service position means connecting it into a live network, so the permissive chain is the most restrictive in the entire scheme. Four independent conditions must be satisfied:

• Isolator status — Both series isolators flanking the breaker must be confirmed Fully Closed (FCL). This guarantees the electrical path through the breaker is continuous and secure before any current is asked to flow. The line isolator further out in the circuit may be either fully open or fully closed depending on the circuit’s operating state  it is not part of this breaker’s closing permissive.
• Synchronization The synchro-check relay must confirm that voltage magnitude, phase angle, and frequency match across the open breaker contacts. Closing across a mismatch drives severe transient torques into rotating plant, stresses transformer windings, and can destabilize the local network. The synchro-check permissive is bypassed only under a controlled maintenance condition.
• SF6 gas density The breaker cannot be closed if gas density has fallen to the Stage 1 alarm threshold, and it is absolutely locked out at Stage 2. Closing is deliberately held to a stricter standard than opening: a breaker that closes with marginal gas may be called on to interrupt a fault an instant later with degraded arc-quenching capability.
• Control authority The close command is accepted from the control hierarchy defined in the interlocking table local, remote, or SCADA with the selector-switch position determining which path is live at any moment.

5.2 Opening: Fewer Conditions, One Critical Restriction

Opening a circuit breaker is intentionally easier than closing it. A breaker is the one device in the bay designed to interrupt load and fault current, so the logic never wants to obstruct a trip. Opening does not depend on synchronization, on the position of surrounding earth switches, or on maintenance status. The breaker can be opened with SF6 gas at the Stage 1 alarm level; only the Stage 2 lockout condition blocks it.

There is, however, one restriction that matters enormously: the breaker must not be operated while either of its series isolators is in motion. If the breaker changes state mid-stroke of an isolator, load current can be made or broken across the isolator’s contacts — contacts that have no arc-control capability whatsoever. The result is contact destruction, internal flashover in the GIS enclosure, and a forced outage of the diameter. The interlocking logic enforces this by blocking breaker commands whenever the flanking isolators report an in-travel condition.

Open commands are accepted from four control points: the local control cubicle at the equipment, the remote operator station, SCADA, and a dedicated emergency control path that overrides standard hierarchy restrictions in critical situations.

6. SF6 Gas Density Supervision: The Two-Stage Interlock

SF6 provides both the dielectric insulation and the arc-quenching medium for the breaker, and its effectiveness depends on gas density, not merely pressure. GIS installations therefore use temperature-compensated density monitors with two supervised thresholds feeding directly into the interlocking logic:

Design Note

The asymmetry between Stage 1 and Stage 2 is intentional and worth preserving in every scheme review: at alarm level the system still allows the breaker to remove itself from service, but refuses to let it take on new duty. Lockout at Stage 2 recognizes that operating a breaker with critically low gas density is more dangerous than leaving it in its current state while the gas system is attended to.

Modern gas monitoring extends beyond the hardwired interlock: networked density sensors, trend analysis, leak-rate forecasting, and alarm escalation through station automation systems give maintenance teams days or weeks of warning before an interlock threshold is ever reached. Keentel routinely specifies communicating density monitoring in new GIS designs so that Stage 1 alarms become rare events rather than routine ones.

7. Service Position vs. Test Position: Two States, Two Logics

Every withdrawable or GIS-class breaker installation distinguishes between two fundamental operating states, and the interlocking logic changes completely between them.

7.1 The Service Position

In the service position, the breaker is fully connected to the high-voltage power system and to its control and auxiliary circuits. Its primary contacts are engaged with the busbars and primary conductors; it conducts load current, interrupts fault current, and responds to protection and control commands. This is the breaker doing its job.

Three requirements define a healthy service position:

• Proper primary engagement — The primary contacts must be fully engaged with the high-voltage circuit. Partial engagement causes localized heating, arcing, and progressive contact damage.
• Control connectivity — Control and auxiliary circuits must be live and proven, so open/close commands and status feedback (position, alarms, trip events) flow reliably between the breaker and the control system or SCADA.
• Position interlocking — Interlocks must prevent the breaker from moving between service and any other position except through the correct, deliberate sequence.

Supporting safety measures include unambiguous position indication (mechanical and electronic), locking of the breaker in the service position during operation, and continuous monitoring of contact resistance, temperature, and gas density.

7.2 The Test Position

In the test position, the breaker is electrically and mechanically disconnected from the high-voltage system but remains connected to its control and auxiliary circuits. The breaker cannot conduct primary current in this state — and that is precisely the point. The test position exists so that the full secondary ecosystem around the breaker can be exercised without touching the live network.

The test position supports four categories of work:

• Routine operational testing — Exercising open/close operations, trip mechanisms, and auxiliary contacts with no primary consequence.
• Protection verification — Injecting into protection schemes — overcurrent, earth fault, differential — and proving trip paths end-to-end without disturbing the in-service system.
• Maintenance and inspection — Servicing and inspecting the breaker while it is positively isolated from the high-voltage circuit.
• Pre-commissioning tests — Proving every system on a newly installed or freshly serviced breaker before it is returned to service.

7.3 Side-by-Side Comparison

8. Closing the Breaker in the Test Position

When a breaker is placed in the test position, the interlocking logic inverts several of its service-position rules and the inversions are as instructive as the rules themselves.

• Isolation is mandatory — Both series isolators must be confirmed Fully Open. In service, closed isolators guarantee a continuous path; in test, open isolators guarantee complete separation from system voltage so the breaker can be cycled with zero risk of accidental energization.
• No synchro-check — With no system voltage on either side of the breaker, there is nothing to synchronize to. The synchro-check permissive is removed from the closing chain.
• SCADA closing disabled — Test-position operation is permitted from the local panel, the remote operator station, and the emergency path — but closing from SCADA is deliberately disabled. A dispatcher looking at a system-wide display should never be able to cycle a breaker that field personnel may be working around.
• SF6 interlock remains — Gas density supervision does not relax in the test position. If density falls below the Stage 1 or Stage 2 thresholds, operation is inhibited — a breaker with inadequate insulation should not be cycled even for test purposes.


Field Safety Insight

Disabling SCADA control in the test position is one of the quiet, high-value details of a well-designed interlocking scheme. It converts an administrative rule ("do not operate remotely during maintenance") into an engineered impossibility — which is the entire philosophy of interlocking in one sentence.

9. Isolator Interlocking: The Bus-Side Isolator

Isolators provide visible, verifiable isolation, but they have no capability to make or break load current. Every permissive in an isolator’s interlocking table exists to guarantee the isolator only ever operates on a dead, current-free section. The conditions differ sharply between service and test regimes.

9.1 Service Position Conditions

For the bus-side isolator — the device connecting the diameter to the main busbar — three conditions must be proven before operation is permitted in the service position:

• Breaker open — The associated circuit breaker must be open. With the breaker open, no current can flow through the isolator during its stroke.
• Adjacent earth switches open — The earth switches on both isolator sections adjacent to the breaker must be open. This prevents the isolator from connecting an energized busbar into a grounded section — a bolted fault by design.
• Busbar earth switch open — The busbar earth switch on the associated main bus must be open, proving the busbar itself is not grounded while the isolator connects to it.

9.2 Test Position Conditions

In the test (maintenance) regime the logic changes character entirely:

• Breaker status becomes irrelevant — The isolator may be operated regardless of whether the circuit breaker is open or closed. During maintenance the primary circuit is already dead and grounded, so the breaker’s position is no longer a safety constraint — and maintenance activities frequently require cycling isolators with the breaker in either state.
• Earth switches must be closed — The adjacent earth switch and the busbar earth switch must be closed. This is the exact inversion of the service-position rule: in service, grounding anywhere near the isolator is forbidden; in test, positive grounding everywhere around the work area is mandatory. The grounded envelope is what protects personnel from induced voltages and inadvertent energization.
  

10. Isolator Interlocking: The Diameter-Side Isolator

The isolator on the other flank of the breaker — between the breaker and the circuit tap — follows the same philosophy with its own set of interlocked devices.

10.1 Service Position Conditions

• Breaker open — The associated circuit breaker must be open, for the same current-free reason as before.
• All adjacent earth switches open — All earth switches electrically adjacent to the isolator — the earth switches on both breaker flanks and the earth switch on the circuit-tap section — must be open, preventing any inadvertent grounding of the operating path.

10.2 Test Position Conditions

• Breaker status irrelevant — The isolator may be operated regardless of breaker status, providing the flexibility maintenance work requires.
• Grounded envelope required — The earth switch on the breaker-side section and the earth switch on the circuit-tap section must be closed, keeping the entire working envelope positively grounded throughout the operation.

The Underlying Pattern

Read enough interlocking tables and a single pattern emerges. Service position: prove the path is dead (breaker open) and ungrounded (earth switches open) before an isolator moves. Test position: prove the path is dead and grounded before anything moves. The earth-switch conditions flip polarity between the two regimes  and that flip is the signature of a correctly engineered scheme.

11. How Keentel Engineering Supports GIS Interlocking Projects

Interlocking engineering sits at the intersection of primary design, protection and control, and operations — which is exactly where Keentel Engineering works every day. Our support for utility and developer clients on EHV GIS projects includes:

• Interlocking design & review — Development and independent review of interlocking matrices and permissive tables for one-and-a-half breaker, double-bus, and breaker-and-a-half hybrid arrangements.
• Factory & site acceptance testing — Verification that vendor GIS interlocking logic, hardwired and IEC 61850 GOOSE-based, matches the approved scheme — including witness testing of service/test position transfers, SF6 threshold responses, and control-hierarchy behavior.
• Operations documentation — Switching-order development, standard operating procedures for line isolation and restoration, and operator training material aligned to the as-built interlocking scheme.
• Full-lifecycle engineering — Substation and interconnection engineering across the full project lifecycle — from POI studies and EMT modeling through detailed substation design commissioning support, and NERC compliance.

If your project involves a new GIS bay, a retrofit into an existing diameter, or an interlocking scheme that has never had an independent line-by-line review, our team can help. Contact Keentel Engineering at 813-389-7871 or contact@keentelengineering.c

Frequently Asked Questions

The questions below expand on the concepts in the article and reflect the questions our engineers most often field from operations, maintenance, and protection teams working on EHV GIS installations.

About Keentel Engineering

Keentel Engineering is a power systems and grid interconnection consulting firm serving utilities, developers, and independent power producers nationwide. Our services span EMT and PSS/E modeling, POI interconnection engineering, substation and transmission line design, utility-scale renewables and BESS engineering, owner’s engineer services, and NERC O&P compliance. We believe grid interconnection — and the interlocking, protection, and control engineering that supports it — is a first-order design input, not a late-stage administrative step.

Disclaimer:



This document is published by Keentel Engineering for general informational and educational purposes. It does not constitute engineering advice for any specific installation, and switching or interlocking decisions for any facility must be based on that facility’s approved drawings, interlocking tables, and operating procedures. All product names, trademarks, and registered trademarks referenced are the property of their respective owners. Keentel Engineering is not affiliated with, endorsed by, or sponsored by any equipment manufacturer or organization mentioned or implied herein.