Microwave Door Interlock Verification
Purpose
A microwave's interlocks are not a convenience feature that stops the turntable when you open the door. They are a sequenced protective system, and one of the switches in it exists specifically to destroy the line fuse if another one fails. So a microwave that blows its fuse when the door is opened is usually not a fuse problem. It is the safety system working exactly as designed, telling you a primary interlock has welded closed.
The tech who fits a fuse and hands the oven back has removed the only thing standing between the customer and a magnetron that can energize with the door open. The oven will work. It will also blow the next fuse, and somewhere between those two events it may not.
Scope
Interlock verification on residential and light commercial microwave ovens, countertop, over-the-range, built-in and the microwave section of a combination wall oven: the door, hinges, latch heads and their alignment, the primary, secondary and monitor interlock switches, the actuation sequence between them, and the leakage survey that closes the job.
It does not cover the isolation and capacitor discharge that must happen before the cabinet comes off, which is the microwave capacitor discharge before service SOP and runs first, every entry. It does not cover magnetron, transformer or inverter diagnosis, or commercial microwaves, which the commercial kitchen appliance service call SOP handles.
Roles and the handoff between them
| Role | What they own | What they hand off |
|---|---|---|
| Office at booking | Whether the oven has blown a fuse, how many times, and whether the door is damaged | The fuse history, because repeat fuses turn a parts call into an interlock investigation |
| Technician | Discharge verification, switch tests, the sequence check, the leakage survey | A record with measured leakage beside the limit it was compared to |
| Shop or owner | A calibrated survey meter and the matched interlock switch sets | The meter, because without it no door or interlock work can be released |
| Office after the visit | Red tag handling and the replacement conversation | A condemned oven communicated as a safety finding, not an upsell |
The safety gate before the cabinet comes off
The cabinet does not come off until the isolation and capacitor discharge in the microwave capacitor discharge before service SOP has been run and the verification reading recorded. That SOP owns the sequence and the stop rules. Nothing in this procedure starts before it is complete, and it is repeated after every power-up.
No interlock switch is jumpered, taped, propped or defeated for any test, at any time. Where a test needs the oven to run, it runs with the cabinet fully assembled and the door operating normally, and the tests in this procedure that need the door open are continuity tests with the oven isolated. If a test cannot be done without defeating a switch, the test does not get done and the diagnosis goes back a step.
The oven is never run empty. A load of about 275 mL of water in a suitable container goes in the cavity for every operating test, because an empty cavity reflects power back into the magnetron and destroys it. If there is no container, the test waits.
Microwave energy heats tissue, and the lens of the eye is among the least tolerant of it. During any survey or run test the tech stays back from the door seam, holds the probe by its handle with the spacer against the surface, and keeps a face away from the door perimeter. If leakage reads above the shop action level below, the oven goes off, is unplugged and is red tagged rather than surveyed again more carefully.
The procedure
Read the door and the fuse history before any power is applied. Close the door and sight the gap all round, work each hinge, check each latch head for chips, and look into the cavity and at the waveguide cover. Acceptance: door closing square with an even perimeter gap, latch heads unbroken, hinges without play, cavity liner and waveguide cover free of burn-through or arc pitting, and the fuse count on the ticket. Wrong looks like a door that must be pushed to latch. Stop rule: a bent door, sprung hinge or burned waveguide cover is a red tag and a replacement recommendation, not an adjustment. Hazard: an oven with cavity damage is not operated even briefly, because it may no longer contain the field.
Run the discharge SOP and record its verification reading before touching anything inside. Acceptance: isolation and discharge verified by instrument, with the reading written on the ticket, per that SOP's own acceptance. Wrong looks like a dwell time substituted for a measurement. Stop rule: that SOP's stop rules govern; if the capacitor will not verify discharged, the cabinet stays shut. Hazard: this circuit kills rather than injures, and a failed bleeder resistor gives no outward symptom, so it is verified every entry.
Check mechanical actuation before you blame a switch. With the oven isolated, work the door slowly and watch each latch head enter its slot and depress its actuator. Acceptance: every head entering fully with its actuator moving through full travel and returning, no side play letting a head miss its slot, no bent lever or cracked switch body. Wrong looks like a head that clips the edge of the slot, a door alignment fault presenting as an intermittent switch. Stop rule: a bent actuator is not straightened; the switch set is replaced. Hazard: fingers sit between the latch heads and the frame, so the door is moved slowly and by its handle only.
Test each switch in both door states against the schematic and know which is which. Meter continuity at each switch with the door open, then closed. Acceptance: primary and secondary reading open with the door open and closed with it shut, and the monitor reading closed with the door open and open with it shut, which is the opposite sense and is the point of it. Wrong looks like a primary reading closed with the door open, a welded contact and the reason the fuse blew. Stop rule: any switch outside its expected state means replacing the interlock switches as the matched set the service data specifies, never individually, never adjusted. Hazard: this is done isolated with the discharge verified, and no switch is operated by hand with power available.
Verify the sequence, not just the states. With the meter still on, close the door slowly and watch the order, then open it slowly and watch again. Acceptance: on closing, the monitor opens before the primary closes; on opening, the primary opens before the monitor closes. Wrong looks like both correct in their end states and overlapping in the middle, which blows a fuse on every door operation and reads as a random fault. Stop rule: a sequence fault after a matched set is fitted is a door or latch geometry problem, and the oven is not run until it is resolved or condemned. Hazard: unchanged from step 4, the oven stays isolated and discharged.
Reassemble fully, restore power, and prove the protective function you disturbed. Refit the cabinet and every screw before power goes near it, put the water load in, then run and cycle the door. Acceptance: the oven stopping instantly on door open every time, restarting only on a deliberate start, the fuse holding through ten consecutive door cycles, and no burning smell or arcing sound. Wrong looks like an oven that runs a second or two after the door opens. Stop rule: a fuse that opens during the cycles means the sequence was not fixed, and the oven goes back to step 4 rather than getting another fuse. Hazard: this puts a high voltage circuit and a magnetron back into service in the customer's kitchen, so the cabinet is complete, the tech stands clear of the door perimeter, and nobody else is at the counter.
Survey for leakage with a calibrated meter and compare it to a stated limit. With the water load in and the oven running, move the probe with its spacer around the full door perimeter, the viewing screen, the vents and every seam you disturbed, at the scan rate the meter's instructions state, commonly no faster than about 1 in per second. Acceptance: every point below our shop red-tag level of 1 mW/cm2 at 5 cm, which sits well inside the 5 mW/cm2 in-service limit that 21 CFR 1030.10 sets at any point 5 cm or more from the surface with the specified water load. Wrong looks like a survey done with a meter whose calibration date has passed, which is not a survey. Stop rule: any point at or above the shop level means the oven goes off, is unplugged, is red tagged and is not returned to service; if the shop has no calibrated meter, no door or interlock work is released at all. Hazard: the probe is held by its handle with the body back from the seam, and the survey is never performed with the cabinet off.
The record this produces
- Door: perimeter gap, hinge play, latch head condition, cavity and waveguide cover condition.
- Fuse history: how many, over what period, and what was done each time.
- Discharge: the verification reading from the discharge SOP, on this visit.
- Switch tests: each switch, its expected state and its measured state, in both door positions.
- Sequence: the observed order in both directions, written as an order, not a tick.
- Leakage: the highest reading, where it was, the limit compared to, and the meter's calibration date.
The leakage line with its calibration date is what makes the oven defensible months later. A tick in a box is not a survey.
One run of this standard, filled in
An over-the-range oven, five years old. Complaint: keeps blowing its internal line fuse, twice replaced by the customer in a month, and it seems to go when the door is opened.
- Step 1: door closes square, even perimeter gap, latch heads unbroken, hinges tight, cavity liner and waveguide cover clean. Fuse count recorded as two in about four weeks. Pass.
- Step 2: unit brought down onto a bench, isolation and discharge run per the discharge SOP, verification reading recorded on the ticket. Pass.
- Step 3: all latch heads enter their slots fully and return, actuators moving through full travel, no bent levers. Pass.
- Step 4: with the door open the secondary reads open as expected and the monitor reads closed as expected, but the primary reads closed. Fail. Welded contacts. Stop rule taken: the full matched interlock set specified in the service data is replaced, not the one switch, and no fuse is fitted until it is.
- Step 5: with the new set in, closing the door shows the monitor opening before the primary closes; opening shows the primary opening before the monitor closes. Order correct both ways. Pass.
- Step 6: cabinet fully refitted, 275 mL water load in, oven restored. Stops instantly on every door open across ten consecutive cycles, fuse holds all ten, no arcing sound. Pass.
- Step 7: survey with a meter in calibration, spacer against the surface, around the door perimeter, screen, vents and the seams disturbed. Highest reading 0.3 mW/cm2 at the lower door seam. That is 0.7 mW/cm2 under our 1 mW/cm2 shop level, and the 5 mW/cm2 in-service limit is about 17 times the reading. Pass.
What the customer was told matters as much as the repair. The fuse was not failing. The monitor switch was blowing it on purpose every time the door opened, because the primary had welded closed and the monitor's whole job is to short the line and take the fuse out rather than let a magnetron sit on a live circuit behind an open door. Two fuses meant the system protected them twice. That is why they stopped fitting fuses themselves.
References
- 21 CFR 1030.10, the federal performance standard for microwave ovens, which sets the leakage limits and the measurement conditions, including the distance from the surface and the water load. The 5 mW/cm2 in-service figure used in step 7 comes from there; confirm the current text rather than working from memory.
- The manufacturer's service data for the model, which owns the schematic, the expected state of each interlock switch, and whether the switches must be replaced as a matched set.
- The survey meter's own instructions, which own the scan rate, the spacer geometry and the calibration interval that make a reading admissible.
- See related: the microwave capacitor discharge before service SOP, which owns the isolation and discharge this procedure depends on, and the end-of-visit operation demonstration SOP.