Auxiliary engines rarely get the attention the main engine does, yet they decide whether the ship keeps steering, cooling, pumping and lighting. A blackout at sea is not only a technical failure, it is a loss of manoeuvrability that turns into a reportable incident, a PSC finding or worse if it happens in traffic or heavy weather. Most blackouts are traceable to the same short list: fuel or air supply problems, governor and load-sharing faults, protection settings nobody has tested, a standby set that failed to start, or low-load running that fouled the engine over months. This guide covers the upkeep that keeps power available: load sharing and standby arrangements, generator overhaul intervals and what to record, alarm and trip testing, emergency generator routines against the SOLAS requirements, and the switchboard checks that are easy to defer and expensive to skip. If your alarm tests and running hours live on paper, try Marine Inspection free and keep them with the machinery record.

Power available, or power assumed?

Load sharing, standby starting, protection settings and the emergency set are all things that look fine until the day they are needed. Test them, record them, and keep the evidence where a surveyor can see it.

Main switchboard, typical sea load
DG 1
62%
Online
DG 2
58%
Online
DG 3
0%
Standby
Main busbar
Two sets sharing evenly, one proven standby. That is the state to maintain.

The rules behind emergency power

These are the figures a surveyor or PSC officer works from. They shape the test routine for the emergency generator and the recovery plan after a blackout.

45 secondsThe emergency generator must start automatically and take its full rated load within 45 seconds of a main power failure
18 / 36 hoursFuel endurance for the emergency source: 18 hours on cargo ships, 36 hours on passenger ships
30 minutesA transitional source, usually batteries, supplies essential services while the emergency set starts
30 minutesShips built on or after 1 July 1998 must be able to restore propulsion from a dead ship condition within 30 minutes of blackout
3 + 3 startsTwo independent starting means: three consecutive starts from the primary, and three within 30 minutes from the secondary

How blackouts actually develop

A blackout is usually a chain, not a single failure. Each link is somewhere maintenance or testing can break it before the busbar goes dead.

Trigger
  • Fuel supply loss: filter blocked, booster pump, changeover error
  • Cooling or lube oil low pressure trip
  • Governor or AVR fault, load swings
  • Overload after a heavy consumer cuts in
  • Earth fault or short circuit on a feeder
Where it escalates
  • Load sharing unbalanced, one set trips on overload
  • Preferential trips not set or not working
  • Standby set fails to start or breaker does not close
  • Protection settings wrong or untested
  • Bus tie configuration leaves no redundancy
What keeps the lights on
  • Standby start and auto-synchronising tested on schedule
  • Preferential trip and protection tested and logged
  • Fuel system upkeep, clean filters, correct changeover
  • Even load sharing and balanced running hours
  • Blackout recovery drilled, sequence known by the watch

Maintenance intervals for medium-speed auxiliaries

Four-stroke auxiliary engines are opened far more often than the main engine, and their intervals depend on fuel, load profile and maker. Use these as planning bands only, and set the real figures from the engine manual. Record every job against running hours so the trend, not the calendar, drives the next decision.

ItemPlanning bandWhat to recordWhy it matters
Lube oil sample and analysisEvery few hundred hoursViscosity, BN, water, wear metals, insolublesEarliest warning of bearing or liner trouble
Fuel injector overhaul and testEvery 2,000–4,000 hOpening pressure, spray pattern, leak-offCombustion, exhaust temperatures, fouling
Cylinder head, valves and seatsEvery 6,000–12,000 hValve clearance, seat condition, rotator functionCompression and exhaust valve burn-through
Piston, rings and linerEvery 12,000–18,000 hRing gaps, groove wear, liner bore and ovalityBlow-by, oil consumption, crankcase deposits
Main and big end bearingsPer maker and class cycleClearances, shell condition, bolt tighteningCatastrophic failure risk if missed
Turbocharger and air coolersPer maker, with condition checksFouling, vibration, air and gas temperatures, pressure dropCharge air, load capability, surging
Generator end and windingsPeriodic, plus after any wettingInsulation resistance, bearing hours, air gap, cleanlinessEarth faults and winding failure

Balance the running hours across the sets

Uneven running concentrates wear on one set and leaves the others under-proven. Long periods at low load on a set kept online "just in case" also cause fouling, turbocharger deposits and unburnt fuel in the exhaust. Rotate duty so hours stay comparable, and run sets at a sensible load band rather than lightly loaded for weeks.

Running hours over a year, two fleets' habits compared
Unbalanced
DG 1
4,750
DG 2
2,200
DG 3
600

One set carries the fleet, one is barely proven.

Rotated
DG 1
2,600
DG 2
2,500
DG 3
2,450

Overhauls fall due predictably and every set is proven.

Illustrative example of hours per generator over twelve months, not measured data.

Alarm, trip and protection testing

Protection that has never been tested is an assumption. Build these into the planned maintenance system with a record for each test, because this is exactly what surveyors sample. Keep the method and the result, not just a tick.

TestTypical frequencyMethod and evidence
Standby generator auto-startMonthlySimulate the start signal, time the start and breaker close, log the result
Auto-synchronising and load sharingMonthlyParallel the sets, check kW and kVAr sharing across the range
Preferential tripsPer SMS, at least annuallySimulate overload, confirm the trip sequence and timing
Engine safety trips: overspeed, low oil pressure, high temperaturePer maker and classTest at the sensor or test device, record set point and actual trip value
Reverse power and overcurrent protectionPer class survey cycleSecondary injection or approved method, keep the test sheet
Insulation resistance of generators and main feedersRegularly, and after any wettingMegger readings trended over time, not single pass or fail values
Blackout recovery drillPer SMSFull sequence to restoring propulsion, timed and debriefed
Every test above needs a record with a result.Marine Inspection captures the reading, the set point and a photo at the panel, then keeps it against the machinery item for the surveyor.
See it in a demo

Emergency generator: the routine that matters

The emergency set spends its life waiting. A test run on no load proves the engine starts, but not much else, so build the routine around what the regulations actually require it to do.

Weekly
  • Run the engine and check parameters, leaks and batteries
  • Confirm fuel level, and that the tank is topped and clean
  • Check the space heater, ventilation and access are clear
Monthly
  • Test the automatic start on loss of main power, timed against the 45-second requirement
  • Run on load, not just on no load
  • Test both starting means, including the secondary
Periodically and at survey
  • Prove the emergency switchboard supplies its services
  • Test the dead ship recovery arrangement, timed to the 30-minute requirement where it applies
  • Check protection settings, insulation resistance and battery capacity
Common findingsNo load applied during tests, fuel tank low or contaminated, batteries flat or past their life, the second starting means never tested, and the test records incomplete or written up afterwards from memory.

Switchboard and electrical upkeep

Most electrical failures announce themselves first as heat, moisture or a drifting insulation reading. These checks are simple, easy to defer and cheap compared with a burnt breaker or a lost generator.

Thermographic or temperature checksLook for hot joints and loose connections at rated load, before they carbonise.
Circuit breaker servicingContacts, arc chutes, closing springs and trip units, on the maker's interval.
Earth fault monitoringInvestigate the lamp indication or alarm at once, and log which circuit was found.
Cleanliness and moistureDust, salt and damp on busbars and terminals, plus panel heaters working.
Battery systemsElectrolyte, charging voltage, load test, and replacement dates recorded.
Documentation at the panelSingle line diagram, protection settings and test records available to the surveyor.

Frequently asked questions

How often should the emergency generator be tested?

Common shipboard practice is a weekly run and a monthly test that includes automatic start on loss of main power and running on load, with the exact routine set by the company SMS and the maker's instructions.

What causes most blackouts on ships?

Fuel supply problems, cooling and lube oil trips, governor or AVR faults, overload after a heavy consumer starts, and standby sets that fail to start. Each is addressed by routine testing rather than by more equipment.

Why is running a generator at low load a problem?

Extended light loading leads to poor combustion, fouling, turbocharger deposits and unburnt fuel in the exhaust system. Match the number of sets online to the load rather than keeping one lightly loaded indefinitely.

How long must emergency power last?

The emergency source must supply its services for 18 hours on cargo ships and 36 hours on passenger ships, with a transitional source covering the first 30 minutes.

What records will a surveyor ask for?

Running hours, overhaul records with measurements, alarm and trip test sheets with set points and results, insulation resistance trends, and emergency generator test logs. See our guide to weak maintenance records.

System ready
Keep every test, reading and running hour in one record

Marine Inspection captures alarm tests, insulation readings, overhaul measurements and photos at the panel or the engine, offline, and builds the survey pack from the same data.