CO Alarm Triggered During Generator Operation, Response

Purpose

This procedure guarantees that a CO alarm activation while a standby generator is running ends with every occupant safe, the actual exhaust fault identified and fixed, and the unit re-verified under load before it runs unattended again, not with the alarm silenced and the unit assumed fine because it stopped beeping or nobody feels sick anymore. Carbon monoxide has no smell and no warning stage before it disables someone, so the alarm working correctly is often the only signal a family gets. A tech who treats a stopped alarm as a solved problem, rather than as an unexplained event that needs a found and corrected cause, is the reason a second, worse activation happens on the next cold night the unit runs long.

Scope

Covers the emergency response from the moment a CO alarm activates, hardwired dwelling alarm, plug-in unit, or the generator controller's own CO shutdown feature, while the generator is running or has run within the last several hours. Applies to residential and light commercial standby installs. Does not cover the install-time opening survey and clearance commissioning, which the exhaust clearance and CO safety standard owns in full; this procedure reuses that standard's clearance table and commissioning method rather than re-deriving them. Does not cover a cracked exhaust flex or degraded joint found during a routine PM visit with no alarm event and no elevated reading, which the exhaust flex troubleshooting file owns as a lower-urgency wear case.

Roles and responsibilities

Stop before anything else moves

Treat every CO alarm activation as real, regardless of whether anyone smells or feels anything, because CO is odorless and by the time a person feels sick the exposure is already significant. Get everyone, including pets, out of the structure immediately, and do not let anyone go back in for a phone, keys, or to silence the alarm. If any occupant reports dizziness, headache, confusion, nausea, or has lost consciousness, call 911 immediately and specifically report a suspected CO exposure so responding EMS bring a CO oximeter rather than treating it as a generic sick call, and do not let that person drive themselves, an elevated carboxyhemoglobin level can cause loss of consciousness at the wheel with no further warning. Do not restart the generator, silence the alarm, or re-enter to open windows until this procedure reaches its re-entry step. Call the shop so a tech is dispatched the same day; this is never a next-week appointment.

The procedure

1. Confirm by phone or on arrival that every occupant is accounted for and out of the structure, and ask specifically about symptoms rather than a general "everyone okay." Acceptance: a named headcount with a symptom yes-or-no for each person. Wrong looks like accepting "we're fine" without asking directly. Stop rule: any reported symptom routes to 911 immediately regardless of how mild or how confidently the customer downplays it, a mild headache in this context is a real data point, not a maybe. Hazard: none new at this step; it is confirmation from outside the structure.
2. Approach with a calibrated personal CO monitor and a handheld meter, and take a reading at the entry point before going any further in. The EPA's 8-hour outdoor air quality standard for CO is 9 ppm; a dwelling reading meaningfully above that at the door is treated as elevated, not ambient. Acceptance: an entry reading recorded before crossing the threshold. Wrong looks like walking straight to the alarm to silence it. Stop rule: an entry reading above background means the space ventilates first, doors and windows opened from outside where possible, HVAC set to fresh-air or off rather than recirculating, before any further entry. Hazard: entering an unmeasured, potentially elevated space without a personal monitor running.
3. Locate the generator and confirm whether it is still running before approaching it. Stop it remotely through the controller's app or a remote stop switch if one exists rather than walking into a mechanical room or garage that is still reading elevated. Acceptance: engine confirmed stopped, by remote confirmation or a visual check from a position with a clean reading. Wrong looks like heading straight for the local stop button inside an unmeasured enclosure. Stop rule: if no remote stop exists and the space is still elevated, ventilate and wait for the reading to drop before entering to reach the local switch, not before. Hazard: standing at the exhaust discharge, or inside an elevated enclosure, to reach a local stop.
4. Re-walk the opening survey from the original commissioning record against current conditions, not from memory of what it said. Check every window, door, vent, and intake the exhaust could reach, and specifically look for what changed since install, snow or debris at the termination, a new structure, an enclosed porch, storage stacked against the discharge. Acceptance: every opening from the commissioning file re-measured or re-checked, with any changed condition flagged in writing. Wrong looks like assuming the original survey still holds because the siting passed once. Stop rule: any opening now inside its applicable clearance, or any physical obstruction at the termination, blocks restart until corrected. Hazard: none new; stay upwind if any part of the unit is still cooling from operation.
5. With the unit shut down, inspect the full hot exhaust path for the actual fault: a cracked flex section, a corroded muffler, a manifold gasket, a loosened clamp, or a damaged termination. Acceptance: a specific, named, photographed fault, not a general "looked fine on inspection." Wrong looks like closing the visit with no identified cause because a test start ran clean. Stop rule: finding no fault does not mean there is none; the unit does not return to unattended service on an unexplained alarm. Hazard: a hot exhaust component burns on contact even after it looks cooled down; verify surface temperature by IR or wear insulated gloves before hand contact on any component that ran in the last hour.
6. Correct the identified fault, then leak-test the entire hot path with the engine at operating temperature, not just the joint that was repaired. Use a soap solution or an electronic combustible/CO detector at every joint from manifold to termination. If the reading the crew itself is working in during this test approaches or exceeds the 50 ppm 8-hour occupational limit under 29 CFR 1910.1000 Table Z-1, rotate to fresh air rather than finishing the test in place. Acceptance: no bubble formation and no detector response at any joint on the full path. Wrong looks like retesting only the one joint that was worked and calling the rest good by assumption. Stop rule: any joint that responds gets remade and retested hot; a cold-only recheck is never accepted as proof. Hazard: a running engine exposes the tech testing joints to CO and hot surfaces at close range; stay upwind of the discharge and carry a personal monitor for the full test.
7. Recommission with a loaded reading exactly as the install standard specifies: engine under a real load step, meter at every monitored opening and at grade near the enclosure, held for at least two continuous minutes. Confirm the dwelling's own CO alarms test and function before leaving. Acceptance: every monitored point at or below background, sustained for the full two minutes under load, dwelling alarms confirmed functioning on their test button. Wrong looks like a single instant reading at no load. Stop rule: any point above background under load stops sign-off outright; the unit does not go back into unattended overnight operation that day, whatever the schedule pressure. Hazard: an elevated reading at a monitored point means CO is reaching that point right now; back away immediately rather than leaning in for a confirming second look.
8. Only after step 7 passes clean, reset the alarm, clear occupants to re-enter, and document the full event with the customer's signed acknowledgment of the re-verification trigger. Acceptance: a complete written record and a signed acknowledgment on file. Wrong looks like a verbal summary with nothing recorded. Stop rule: the job does not close, and the office does not mark the ticket complete, without the signed record and without the original CO safety commissioning file updated to reflect this event and its cause.

The record this produces

Date and time of activation, occupant symptom check and whether 911 was called, entry and post-repair meter readings, the re-walked opening survey with any changed condition noted, the fault found with photos, the repair performed, the hot leak-retest result, the loaded recommissioning reading, the dwelling alarm test result, and the customer's signature. This updates, rather than duplicates, the original exhaust clearance and CO safety commissioning record, so the next tech at that address sees the full history, not just the latest visit.

Worked pass: a snowstorm outage, one symptomatic occupant

A family calls at 9 PM during a storm-driven outage. The kitchen's hardwired alarm is sounding; the generator has been running about 40 minutes. The on-call tech gets everyone out by phone, and one occupant reports a mild headache. Under the stop rule, 911 is called immediately for a suspected CO exposure even though everyone is walking and talking normally, because a headache in this setting is treated as real, not dismissed as tiredness.

The tech arrives after EMS clears the occupant (mild exposure, no transport needed) and meters at the front door: 22 ppm, well above the 9 ppm EPA reference. The house is ventilated from outside for several minutes before entry. Once the interior reading drops to background, the tech enters, locates the genset, and stops it remotely through the app rather than opening the garage.

Step 4's opening survey finds the cause fast: the exhaust termination, clear at commissioning two winters earlier, is now half buried by a plow berm that was not there at install. Step 5's inspection finds no cracked or leaking joint anywhere on the hot path, so the fault is the obstruction, not a failed part. The tech clears the termination, and step 6's hot leak test comes back clean at every joint.

Step 7 is where this pass fails. Under a real load step, the reading at the kitchen window comes back at 12 ppm, still above the 9 ppm reference, because that night's wind is pushing the plume straight at the window even with the snow cleared. The stop rule fires: the unit does not go back into unattended overnight operation on this reading. The tech adds a discharge extension that redirects the plume away from that wall, retests under load, and this time the kitchen window reads at background, sustained the full two minutes. The unit is cleared, the alarms are function-tested, and the family signs the re-verification acknowledgment before the tech leaves.

References

• See related: Exhaust clearance and CO safety standard, for the install-time opening survey and clearance table this procedure reuses rather than re-derives.
• See related: Exhaust flex cracked but sealed troubleshooting file, for a wear-only finding with no alarm event or elevated reading.
• NFPA 37 Standard for the Installation and Use of Stationary Combustion Engines and Gas Turbines, current locally adopted edition, for termination siting and combustible clearance.
• EPA National Ambient Air Quality Standards, 8-hour CO reference of 9 ppm, used here as the elevated-reading benchmark for an occupied dwelling.
• 29 CFR 1910.1000 Table Z-1, for the 50 ppm 8-hour occupational CO exposure limit governing how long the crew works an elevated space during testing.
• UL 2034, for residential and commercial CO alarm listing requirements.