Ship Blackout at Sea: SOLAS Bridge Procedures Explained

A total blackout strips propulsion, steering, navigation lights, and most bridge systems simultaneously. What follows in the first minutes determines whether the vessel recovers safely or becomes a hazard to itself and others.

SOLAS Chapter II-1 sets the framework — emergency generator cut-in times, dead ship conditions, steering gear requirements. This article covers the sequence from the moment the lights go out to the point where power is restored or external assistance is required.

What is a ship blackout?

A ship blackout is the total loss of electrical power from the main switchboard, causing simultaneous failure of propulsion, steering systems, navigation equipment, and lighting. It differs from a partial power failure in that no main-bus services remain available.

The term blackout refers specifically to the main switchboard losing all power. Emergency systems — emergency generator, UPS-backed equipment, battery-backed navigation lights — are designed to operate independently of the main bus and should survive a blackout if correctly maintained and tested.

A blackout is not the same as a dead ship condition, though one can lead to the other. The dead ship condition under SOLAS Chapter II-1 Regulation 3 requires that propulsion, boilers, and all auxiliaries are inoperable. A blackout that is recovered within minutes may never reach that threshold.

What causes a ship blackout?

A ship blackout occurs when the main switchboard loses power due to generator failure, fuel system interruption, protection system trips, automation faults, or electrical faults on the main bus. Most blackouts have a single root cause that cascades through the power management system.

Generator failure

Generator trips are the most common blackout cause on merchant ships. An overload condition — where total connected load exceeds generator capacity — triggers the overcurrent protection and shuts the generator down. Reverse power trips occur when two generators are running in parallel and load sharing becomes unstable.

A short circuit anywhere on the main bus will cause immediate generator protection trip. The generator itself is not damaged, but the fault must be isolated before the machine can be restarted and reconnected to the bus.

Fuel system failure

Air ingress into the fuel system causes the main engine and generators to lose combustion simultaneously. This typically follows a fuel transfer error, a tank running dry, or a rupture in the suction line. Clogged fuel filters — particularly after a fuel changeover — restrict flow and cause progressive power reduction before a full blackout.

Contaminated fuel affects all generators simultaneously if they share the same service tank. A vessel that suffers a blackout immediately after bunkering should treat fuel contamination as the primary suspect.

Power management system (PMS) fault

Modern vessels use a power management system to control automatic load sharing, generator start and stop sequencing, and blackout prevention. A PMS software fault or a faulty sensor can cause the system to shed load incorrectly, disconnect a running generator, or prevent the standby generator from starting automatically.

PMS faults are particularly dangerous because they can disable the automatic recovery — the standby generator may fail to cut in precisely because the system that should start it has malfunctioned. Manual intervention from the engine room is required immediately.

Human error

Incorrect manual load sharing during generator changeover is a frequent blackout cause during port manoeuvres and canal transits. Taking a generator offline before the standby machine has properly picked up load causes a momentary overload that trips all running machines. Engine room procedures for parallel operation must be followed without shortcuts.

Fire or flooding in the engine room

A fire or flooding casualty in the engine room may require emergency shutdown of all running machinery, causing a deliberate blackout. In this case the blackout is a consequence of the casualty response, not the primary problem. Emergency generator cut-in and bridge notification follow the same sequence regardless of cause.

What happens on the bridge in the first 60 seconds of a total blackout?

In the first seconds, the OOW loses propulsion, navigation lights, gyrocompass repeaters, ECDIS, radar, and the autopilot simultaneously. The magnetic compass remains operational. The emergency lighting cuts in automatically — but it illuminates only, it does not restore any navigational function.

The OOW’s immediate actions run in parallel, not in sequence. Alert the master and engine room by telephone or intercom — UHF handhelds should be grabbed from the charging rack immediately, as the internal telephone exchange may be on the failed bus. Post a lookout if none is already stationed.

The vessel is now in an uncontrolled drift. Residual speed over ground may continue for several minutes depending on vessel type and sea state. A laden VLCC will carry way for considerably longer than an unladen bulk carrier. The OOW must immediately assess the vessel’s position relative to any hazard — shoal water, traffic, TSS boundary.

What is the OOW’s priority order in the first 60 seconds?

• Grab UHF handheld radio — internal comms may be offline
• Alert master — regardless of time of day
• Alert engine room — chief engineer and duty engineer
• Post additional lookout — eyes are now the primary navigation tool
• Note time, position, heading, and speed at moment of blackout
• Check magnetic compass — only reliable heading reference
• Assess proximity to hazards — chart last known position manually if ECDIS is offline
• Do not touch the autopilot — it has no power; switch to manual steering station

The 60-second window is not for diagnosis — that is the engine room’s task. The bridge job in the first minute is to account for the vessel’s movement and communicate. Everything else follows.

What does SOLAS require for emergency generator cut-in time?

SOLAS Chapter II-1 Regulation 42 requires the emergency source of electrical power to come into operation automatically within 45 seconds of failure of the main electrical supply. For passenger ships, the requirement under Regulation 42.3 is the same 45-second automatic cut-in.

The emergency generator supplies a defined set of essential services — not full ship power. SOLAS Chapter II-1 Regulation 42.2 specifies the minimum loads: emergency lighting, navigation lights, internal communication systems, fire detection and alarm systems, VHF radio, the steering gear position indicator, and the daylight signalling lamp.

Navigation systems — ECDIS, radar, AIS, gyrocompass — are not automatically included in the emergency generator load unless the vessel’s electrical engineer has specifically connected them to the emergency switchboard. In practice, many vessels have radar and AIS on the emergency bus; many do not. Know your own vessel’s emergency load schedule before the blackout happens.

What is the difference between the emergency generator and the transitional source?

SOLAS Chapter II-1 Regulation 42.1 requires a transitional source of emergency power — typically batteries — capable of supplying essential services for 30 minutes while the emergency generator starts. This covers navigation lights, internal communications, and the alarm systems during the 45-second cut-in period.

The emergency generator must be capable of operating independently of the main machinery space. It is located outside the main engine room, with its own fuel supply, starting system, and cooling. A fire or flooding casualty that takes out the engine room cannot simultaneously disable a correctly positioned emergency generator.

What is the dead ship condition definition under SOLAS?

SOLAS Chapter II-1 Regulation 3 defines the dead ship condition as the state in which the main propulsion plant, boilers, and auxiliaries are not in operation due to the absence of power. A total blackout that cannot be recovered by the emergency generator within the transitional period constitutes a dead ship situation.

The dead ship condition is not simply a power failure — it is the complete loss of the vessel’s ability to manoeuvre under its own power. Under COLREGs Rule 3(f), a vessel not under command is one unable to manoeuvre as required by the rules due to exceptional circumstances. A dead ship meets this definition.

The practical consequence is that the vessel must exhibit two all-round red lights in a vertical line, or two balls by day, under COLREGs Rule 27. These signals cannot be shown from the normal navigation light panel without power — the OOW must identify the backup battery-powered NUC lights in the bridge emergency equipment locker immediately.

How long can a vessel maintain steering and navigation in a dead ship condition?

Emergency generator autonomy under SOLAS Chapter II-1 Regulation 42 requires fuel sufficient for 18 hours of operation for cargo ships. This provides 18 hours of emergency lighting, navigation lights, and essential communications — but not propulsion.

Without propulsion, the vessel’s heading is controlled only by wind and current. Residual rudder effect disappears as speed drops below steerage way — typically around 2 to 3 knots depending on vessel type. Below that speed, the rudder has no meaningful effect regardless of helm position.

How is power restored after a ship blackout?

Power restoration after a blackout follows a controlled restart sequence from the engine room. The sequence is not a single switch — it requires fault identification, protection reset, generator restart, and careful load reconnection. Rushing the sequence risks a second blackout.

The first step is identifying what caused the initial trip. Restarting a generator into an unfixed fault will cause an immediate re-trip. The duty engineer checks the main switchboard for earth faults, overcurrent indicators, and reverse power alarms before attempting any restart.

What is the controlled restart sequence?

• Identify cause of generator trip — check protection relay indicators on main switchboard
• Isolate any fault on the bus — earth fault, short circuit, or overloaded feeder
• Reset protection systems — only after the fault is confirmed isolated or identified
• Start standby generator — verify it reaches rated speed and voltage before connecting
• Connect generator to dead main bus — close the breaker carefully, monitor for fault re-trip
• Re-energise essential auxiliaries first — steering gear, fuel pumps, cooling water pumps
• Restore propulsion auxiliaries — lube oil, fuel booster, main engine turning gear
• Start main engine — only after auxiliary systems are confirmed stable
• Reconnect non-essential loads last — accommodation, deck equipment, cargo systems

Load sequencing is critical. Reconnecting all loads simultaneously after a dead bus restoration will overload the first generator back online and cause an immediate second blackout. The chief engineer sequences loads in order of operational priority, with delays between steps to monitor current draw.

The time from blackout to main engine available is vessel-dependent. A modern diesel-electric vessel may restore propulsion faster than a conventional slow-speed main engine installation that requires turning gear engagement, air start, and warming-through time. The main engine systems involved in the restart — fuel supply, lubrication, cooling, air start — must all be confirmed operational before the bridge requests propulsion.

The bridge must be notified at each stage: generator on bus, steering available, propulsion available. These notifications allow the OOW to update the master, adjust anchoring decisions, and revise any external communications already made. Do not assume the engine room will call — the bridge should request status updates actively.

What happens to the steering gear when a ship loses power?

Most cargo ships use an electro-hydraulic steering gear. Main power loss cuts the electric motors driving the hydraulic pumps, which eliminates rudder control from the autopilot and the main steering position. The rudder does not go hard over — it freezes in its last position as hydraulic pressure bleeds down.

The steering gear system on merchant ships is designed with redundancy under SOLAS Chapter II-1 Regulation 29. Two independent hydraulic systems must be capable of operating separately. Steering gear requirements under SOLAS include the ability to bring the rudder from 35 degrees on one side to 30 degrees on the other side within 28 seconds, with the ship at maximum ahead service speed.

On emergency generator power, at least one steering gear hydraulic pump must be capable of operation. The emergency generator load schedule must include the steering gear power supply — SOLAS Chapter II-1 Regulation 42.2.2 requires this. Verify it is connected on your vessel by checking the emergency switchboard configuration.

What is the manual steering changeover procedure during a blackout?

Manual steering changeover means transferring rudder control from the bridge autopilot or main steering console to direct local control at the steering gear room, or to the bridge manual helm if hydraulic pressure is restored by the emergency generator. The procedure is vessel-specific but the principle is consistent.

• Confirm emergency generator has cut in and steering gear pump is energised
• Switch steering mode selector from autopilot to manual at the bridge console
• Take the wheel — confirm rudder responds by watching the rudder angle indicator
• If bridge steering is unresponsive, send officer or AB to steering gear room
• Steering gear room has a local control panel — rudder can be operated directly
• Establish communication between bridge and steering gear room — UHF radio
• Helm orders must be given in degrees, not in directional terms, at steering gear room

Local steering from the steering gear room is the last powered option before anchoring or requesting a tug. It is slow and requires constant communication. Practise it during steering gear drills — SOLAS Chapter II-1 Regulation 29 requires a steering drill to be held every three months.

When is dropping the anchor the correct action during a blackout?

Anchoring during a blackout is a last resort, not a default response. It is the correct action when the vessel has lost all steering and propulsion, is in shoal water within anchor range, and is drifting toward a hazard that cannot be avoided by other means. In deep open water, anchoring achieves nothing.

The anchor windlass is electrically driven on most vessels and will not function without power. The emergency generator does not typically supply the windlass — it is not on the SOLAS essential services list. Dropping the anchor in a blackout therefore usually means releasing the brake manually, relying on the weight of the cable to run out.

Before releasing the brake, the OOW must assess: water depth versus available cable, seabed type, vessel’s speed over ground, and proximity of other hazards. Anchoring in deep water requires sufficient cable scope — the standard working ratio is 3:1 chain to depth in calm conditions, rising to 6:1 or more in strong wind or current. Releasing a brake at speed in 80 metres of water will run out all available cable and likely part the chain.

What conditions make emergency anchoring viable?

• Depth within anchor range — generally under 80 metres for a standard cargo ship
• Vessel speed reduced to near zero — ideally below 2 knots over ground
• Sufficient cable available — minimum 3x water depth in shackles
• Seabed suitable — sand or mud; rocky bottom provides poor holding
• No overhead obstructions — power cables, bridge spans, traffic separation lanes
• Sea room to swing — the vessel will swing on the cable once anchored

Anchoring in a TSS or fairway during a blackout creates a collision hazard for other traffic. If anchoring is unavoidable in a channel, the NUC signals must be shown and a MAYDAY or PAN PAN broadcast must go out on VHF Channel 16 immediately — before the anchor is let go if possible.

How does the risk profile differ between a blackout in open ocean versus confined waters?

A blackout in open ocean is an engineering casualty. The vessel drifts, loses way, and waits for power restoration. The timeline to danger is measured in hours, not minutes. With sea room in all directions, no traffic, and no shoal water within hundreds of miles, the immediate threat to the ship is negligible.

A blackout in confined waters — a channel, approach fairway, TSS, or anchorage — is a collision and grounding emergency from the first second. Traffic density, restricted manoeuvring room, and tidal current all compress the available response time. A vessel drifting in the Dover Strait or in a port approach channel has minutes before it becomes a hazard to other ships.

Passage planning under SOLAS Chapter V Regulation 34 requires that contingency actions for power loss be considered during the planning stage. A well-executed passage plan identifies the points of highest blackout risk — narrow channels, TSS entry and exit points, anchorage approaches — and states the abort and emergency anchoring positions in advance.

What are the specific hazards in confined water blackouts?

• Tidal set — current will push the vessel off track regardless of last heading
• Squat effect — a vessel losing way in shallow water may initially squat toward the bottom
• Traffic — vessels in a TSS or channel cannot take avoiding action for a NUC vessel instantly
• Port VTS — may not immediately know you are NUC; notify on VHF as first priority
• Tugs — request immediately; tug response time from port is typically 20 to 40 minutes
• Anchoring — may be prohibited in the channel; check the chart before the transit

The bridge team workload in a confined waters blackout is extreme. The master must be called immediately. A second officer on the bridge within the first two minutes is not optional — the OOW cannot simultaneously manage communications, plot position, handle anchoring decisions, and maintain a visual watch alone.

What are the GMDSS communication obligations during a ship blackout?

The GMDSS obligation depends on the level of danger. A blackout in open water with no immediate threat to the vessel does not require a distress call. It may require an urgency call — PAN PAN on VHF Channel 16 — if the vessel is in or near a traffic separation scheme or if its drift creates a hazard to others.

A MAYDAY is required under SOLAS Chapter IV when the ship or persons aboard are in grave and imminent danger requiring immediate assistance. A total blackout in confined waters, or one where the vessel is drifting toward shoal water without the ability to anchor, meets this threshold. The international distress signal requirements and the VHF Channel 16 procedure apply — the GMDSS equipment on the emergency bus must be operational for this call.

GMDSS equipment required on the emergency bus under SOLAS Chapter IV includes VHF DSC radio, MF/HF DSC radio (if fitted in the relevant sea area), NAVTEX receiver, and EPIRB. The EPIRB activates automatically or manually — in a dead ship situation that may become an abandonment, manual activation should be considered early, not as a last resort.

What is the correct VHF procedure for a blackout in confined waters?

• Channel 16 — broadcast your position, situation, and intentions
• PAN PAN if hazard to navigation; MAYDAY if grave and imminent danger
• Contact port VTS or coast guard on their working channel after the initial call
• Identify yourself by vessel name, MMSI, position, heading, and speed
• State nature of casualty — total blackout, estimated time to power restoration if known
• Request tug assistance if in confined waters and power not restored within 10 minutes

Do not wait for confirmation that the situation is a MAYDAY before broadcasting. The OOW makes the call based on the situation as it exists at that moment. If power is restored two minutes later, the situation can be downgraded. A MAYDAY broadcast that turns out to be unnecessary has no consequences. A delayed MAYDAY that should have gone out earlier has serious ones.

What are the flag state and company notification requirements after a blackout?

ISM Code Chapter 9 requires the Master to report any accident, incident, or near-miss involving the ship or its personnel to the company without delay. A total blackout is a reportable incident regardless of whether it resulted in damage, grounding, or collision. The report must go to the designated person ashore (DPA) through the company’s emergency contact system.

Flag state notification requirements vary by registry but most follow the IMO Casualty Investigation Code, which requires the flag state to be notified of marine casualties and incidents. A blackout that results in a grounding, collision, or significant equipment damage triggers mandatory reporting. A blackout with no consequences may still require notification under the vessel’s SMS procedures.

Port state control officers who board following a blackout incident will examine the Official Log Book entries, the engine room log, and the bridge movement book for the period of the casualty. Accurate, timestamped entries made during and immediately after the event are critical. Port state control deficiency reports following a blackout typically cite steering gear drills not conducted, emergency generator tests not logged, and NUC lights not operationally ready.

What must the Official Log Book entry for a blackout include?

• Time and position of blackout
• Time emergency generator cut in — confirm it was within 45 seconds per SOLAS
• Time master was called and time master arrived on bridge
• Sequence of actions taken — steering changeover, communications, anchoring if applicable
• Time power was restored and by what means
• Any VHF communications made — channel, content, response received
• Names and positions of all personnel on watch during the incident
• Any damage, deficiency, or near-miss resulting from the blackout

Frequently Asked Questions