Roof Penetrations and the Secondary Water Barrier

Why this matters

In a hurricane, shingles come off. The roofs that keep the house dry anyway are the ones where the layer underneath the shingles was built to be a roof on its own: sheathing joints sealed, underlayment that stays down, every hole through the deck closed at that layer, not just at the surface. When a tech cuts a new flue, vent or conduit through that roof and restores only the shingles and the boot, the house now has one place where the second barrier is missing, and it is exactly where water goes once the shingles around it blow off. Nobody sees it at checkout. It shows up as a ceiling stain after the first named storm, under the one penetration your shop added.

What the secondary water barrier is

A pitched roof is layered. From the bottom: the deck (plywood or OSB sheathing), then the underlayment, then the roof covering (shingles, tile, metal) with flashings at every edge and penetration. In ordinary weather the covering sheds the water and the underlayment is a backup. In a high-wind event the covering is lost in patches, starting at the edges, corners and ridge, and the underlayment becomes the roof.

Conventional mechanically fastened felt does that job poorly; it tears around its fasteners and peels once wind gets under a lifted edge. Post-storm investigations by insurance-industry researchers found that much of the interior water damage in hurricanes entered through the joints between sheathing panels after the covering and underlayment were gone, which is why high-wind practice moved to a sealed roof deck: one of three approaches.

• Taped joints. A strip of self-adhered membrane over every sheathing joint, then underlayment over the whole deck.
• Full self-adhered membrane. A self-adhering polymer-modified underlayment bonded to the whole deck.
• Heavier fastened underlayment. Specified heavier or synthetic underlayment with closely spaced fasteners and caps, which keeps the layer down but does not seal the joints the way the first two do.

Each of these is a continuous layer. A penetration is a hole in it, and the barrier is only as continuous as the worst-restored hole.

The code layers, with Florida as the strong example

The model code. The IRC's underlayment section (R905.1.1 in the 2021 edition, as adopted) requires heavier underlayment and closer fastening where the ultimate design wind speed is 140 mph or more, and lists sealed-deck approaches among the permitted methods. Whether a sealed deck is required or only permitted depends on your jurisdiction's adoption and amendments.

Florida. The Florida Building Code is statewide, so it needs no local adoption. Since its 7th edition (2020), the residential volume's underlayment section has required new roofs and replacement roofs to use one of a short menu of enhanced underlayment methods, including the taped-joint and full-membrane approaches, and the Existing Building volume carries reroofs into it. The menu and its details have changed between editions, so read the edition in force on the permit date rather than relying on how the last job was done. Florida's uniform wind-mitigation inspection form, which insurers use to grant premium credits, asks whether the roof has secondary water resistance, so the barrier also has a direct line to the owner's insurance.

Everywhere else in hurricane country. Gulf and Atlantic coastal jurisdictions range from requiring a sealed deck to permitting it to never mentioning it, and some owners have one because a voluntary resilience program or an insurer incentive paid for it. You cannot tell from the shingles. Treat any roof in a high-wind area as possibly carrying a sealed deck until you have looked.

Every trade that opens the roof owns this

The roofer installed the barrier, but most holes in it are cut later by somebody else:

• HVAC: a new flue or vent, a high-efficiency intake and exhaust pair, a bath or kitchen exhaust termination, a rooftop curb.
• Plumbing: a new vent stack, a relocated vent, a solar water heating loop.
• Electrical and solar: a service mast, conduit penetrations, and dozens of racking attachments, each a fastener through the deck.
• Low-voltage and satellite: mounts and cable entries.

The habit that breaks the barrier is consistent across trades: cut the hole, set the boot or flashing, weave the shingles back, seal the top. The boot is flashed to the covering, which is correct and necessary, but the membrane or tape that was under it has been cut and left open around the hole. If the covering stays, nothing happens. If the shingles above and around that boot blow off, wind-driven rain runs down the exposed underlayment straight into the cut.

What a restored penetration looks like

The barrier is rebuilt at its own layer before the flashing and covering go back. Water sheds downslope, so every lap puts the upslope piece over the downslope piece.

Section through a vent pipe, roof sloping down to right

        upslope                          downslope
 shingles -------\                 /----------- shingles
 boot flange      \______[pipe]___/  over lower shingles
 patch membrane ======== | | =========  laps onto
   (upslope edge under   | |            underlayment
    field underlayment)  | |            below
 underlayment ---------  | |  -----------------
 joint tape ...........  | |  ..........
 sheathing ============  | |  ==================
                         | |

Read it bottom to top. The cut through the joint tape and underlayment is covered by a patch of compatible self-adhered membrane that extends well past the hole on all sides, tucked under the field underlayment on its upslope edge and lapped over it downslope. The boot's upper flange goes under the shingles above; its lower flange sits on top of the shingles below. Each layer is closed before the next one covers it.

Three details decide whether it holds:

• Compatibility. Use a membrane the field underlayment's manufacturer lists as compatible, and check what it may touch. Some self-adhered products are incompatible with certain sealants or plastic pipe.
• Hot penetrations. A self-adhered membrane is combustible and cannot touch a hot flue. A gas vent or metal chimney keeps the clearance to combustibles its listing requires, so the barrier at a hot penetration is a metal flashing or collar designed for that clearance, with the membrane stopped back from the pipe.
• Temperature. Self-adhered membranes have a minimum application temperature and bond poorly to dusty or wet deck. Clean and dry the deck around the hole before the patch goes on.

A worked example: a new intake and exhaust through a sealed deck

An HVAC shop in coastal Florida is converting a house to a high-efficiency furnace that needs a 3-inch intake and a 3-inch exhaust through the roof. The roof is a four-year-old shingle roof installed under the 7th edition, with taped joints.

Before the cut. The tech, working under the shop's fall protection for residential roofs (on construction work, 29 CFR 1926.501(b)(13) sets the trigger at 6 feet above a lower level), lifts the shingles at the planned location and finds the joint tape running directly under the mark: the two holes straddle a sheathing joint. Moving the termination one rafter bay over puts both holes in the field of a panel, clear of the joint, which leaves the tape intact. That is the cheapest correct fix available, and it is made before anything is cut.

The cut. Two holes, each about 3.5 inches across for the pipe and coupling clearance, cut through shingles, underlayment and deck. The shingles above each hole are lifted and the nails pulled carefully so they can go back.

The restoration. The shop default is a membrane patch extending at least 6 inches past the hole in every direction, where the membrane manufacturer's own minimum does not ask for more. For a 3.5-inch hole that makes a square of 3.5 plus 6 plus 6, or 15.5 inches on a side. The two hole centers are 8 inches apart, and each hole's patch reaches 1.75 plus 6, or 7.75 inches, from its center, so two separate patches would overlap by 15.5 minus 8, or 7.5 inches. One patch covers both: 8 plus 15.5, or 23.5 inches wide, cut to 24, by 16 inches tall. Its upslope edge is slid under the field underlayment, the downslope edge laps over it, and the pipes pass through tight holes in the patch, sealed at the pipe with the membrane manufacturer's listed detail. These pipes are plastic and carry cool flue gas from a condensing furnace, so a membrane is allowed to meet the pipe; the same patch would be wrong around a hot metal vent.

The flashing and covering. Boots set with the upper flange under the course above and the lower flange over the course below, shingles re-nailed and sealed per the shingle manufacturer.

The record. Photos of the patch before the boots go on, and a note on the ticket that the deck was a taped-deck roof and the barrier was restored at its own layer. If the owner later has a wind-mitigation inspection, that photo is the only evidence the barrier is still continuous.

What would change it. Had the holes landed on the joint with nowhere to move them, the patch would need to cover the cut tape for its full exposed length plus the margin, and the shop should tell the roofer before cutting, since many roofing workmanship warranties exclude damage from another trade's penetrations. On a tile roof, common in the same counties, the underlayment is the primary water barrier and the tile mostly sheds and protects it, so a cut at that layer is the whole roof, and penetrations there are often best left to a tile roofer.

How to tell the barrier was broken on a past job

On a callback for a leak at a penetration after a storm, lift the shingles around the boot. A clean hole cut through tape or membrane with nothing lapped over it, or felt patched over a self-adhered membrane with no bond, is the signature. Water staining on the deck downslope of the hole and dry deck upslope confirms the entry point was the cut, not the boot.

References

• International Residential Code R905.1.1 (underlayment), 2021 edition, as adopted by your jurisdiction.
• Florida Building Code, Residential and Existing Building volumes, in the edition in force on the permit date.
• Underlayment, membrane and shingle manufacturers' installation instructions; appliance and vent listings for clearance to combustibles.
• 29 CFR 1926.501(b)(13) for fall protection in residential construction.
• See related: How Service Work Quietly Removes a House's Hazard Resistance; Wind Uplift and the Continuous Load Path.