In short. A generator control system is the sensors, controller logic, wiring, breaker interfaces and operating rules that decide when a diesel set starts, how it proves itself fit to take load, how it connects to the bus, how it shares load and how it stops. A reliable installation starts from a written functional description, defines what happens when a signal is lost, and is proven by testing the whole sequence rather than the controller alone.
What a generator control system includes
When a set arrives on site it carries an engine-mounted or panel-mounted controller that handles cranking, engine protection, voltage and frequency metering and basic alarms. That device is necessary but it is not the control system. The control system is everything between the decision to start and the load receiving power, and it extends into the switchgear, the transfer equipment and, increasingly, the building’s monitoring network.
| Layer | Typical equipment | Responsibility |
|---|---|---|
| Engine and alternator control | Genset controller, governor or ECM, AVR | Crank, run, protect, regulate voltage and speed |
| Source supervision | Mains sensing relay or AMF function | Decide the normal supply has failed or returned |
| Transfer and connection | ATS, contactors, ACB with motor and close coil | Move the load, confirm breaker state |
| Multi-set coordination | Synchroniser, load-share module, master or PMS | Parallel sets, divide kW and kVAr, sequence starts and stops |
| Supervision and records | Modbus gateway, SCADA, BMS, remote monitoring | Alarms, trends, event logs, remote visibility |
Each layer has its own guide in this section. Automatic mains failure logic is in AMF control logic, connecting sets to a live bus is in synchronising controls, dividing load after connection is in load-sharing controls, plant-level sequencing is in master generator controllers, mixed-source coordination is in microgrid controllers, and data and remote access are in communications and remote monitoring.
Start from a functional description, not a feature list
The single most useful document on a generator project is a one or two page functional description. It states, in plain sentences, what the installation does in each operating condition. The utility fails, the set starts after a confirmed delay, voltage and frequency are proven, the transfer happens, the utility returns, the return is confirmed for a stated time, the load transfers back, the set cools down and stops. The same description covers abnormal cases such as a failed start, a trip during run, and loss of control power.
Once written, the description is the basis for selecting equipment, writing the input and output list, setting timers and, above all, writing the commissioning test. Without it, each party assumes the other has thought about the awkward cases, and the awkward case is discovered during a real outage.
Map inputs, outputs and ownership
Every signal in the functional description has to exist physically. A controller may offer breaker feedback inputs, but if the ACB has no auxiliary contact wired back, the controller is guessing. The I/O map lists each sensing input, each command output, which device owns it, its fail state, and how it is wired.
Decide who protects what
Engine protection, such as low oil pressure, high coolant temperature and overspeed, belongs in the genset controller and should never depend on an external PLC or a communication link. Electrical protection, such as overcurrent, reverse power and under-frequency, is set according to the protection coordination study and may live in the controller or in a separate relay depending on the size of the set. Operational decisions, such as which set runs first, can sit in a master controller. The split should be deliberate and documented, because overlapping protection causes nuisance trips and gaps cause damage.
Define behaviour when signals are lost
A control design is judged by what it does with bad information. If mains sensing fails, does the set start unnecessarily or does the installation lose automatic backup without anyone knowing? If the communication link between a master controller and a set is lost, does the set hold its last command, fall back to local control, or shut down? The answers should be written down and tested. Our preference is that each set remains capable of safe local automatic operation when supervisory layers are unavailable.
Control power is part of the control system
A diesel generator’s control system runs on a 12 V or 24 V battery during the very moment the building has no other power. A weak battery, a charger that failed months ago, or a corroded terminal will defeat the most sophisticated logic. The battery, the mains-powered float charger, the engine-driven alternator and the wiring between them are control components and deserve the same inspection as the controller. Battery and charger service is part of every service visit.
Legacy panels and modernisation
Many sets in Telangana industry are twenty years old with sound engines and alternators behind relay-logic panels that nobody fully understands. Typical findings on inspection are undocumented bypass links, timers set by trial and error, burnt contactor coils, mains sensing on one phase only, and a battery charger that is unplugged. Controls modernisation replaces the decision-making layer while keeping the machine. A good retrofit begins with a survey of the existing wiring and sequence, produces a new functional description and I/O map, fits a modern controller with event logging, and ends with a witnessed test of normal and abnormal sequences. It should also leave behind drawings that match the panel. The approach is set out in controller diagnostics.
Testing proves the sequence, not the display
A controller that powers up, shows the right voltage and starts the engine when the test button is pressed has proven very little. Commissioning must exercise the written functional description. On a single-set installation that means opening the incoming utility breaker and watching the full automatic sequence through to retransfer and cooldown, then repeating it with a simulated failed start and with the set already running. On a paralleling plant it adds dead-bus closure, live-bus synchronising, load sharing, a simulated set trip under load, and load shedding if fitted. Every test is recorded with the settings in force, and the configuration file of each controller is saved and labelled with the date.
Related photographs and videos
Common mistakes
- Selecting a controller from a feature comparison and assuming the installation will therefore behave correctly. The sequence is defined by wiring, settings and interfaces, and a capable controller wired to nothing proves nothing.
- Sensing the mains on a single phase. A phase loss or severe unbalance on the other phases leaves motors running single-phased while the controller sees a healthy supply.
- Routing engine protection through a PLC or network. A PLC fault or a cable break then disables the protection that stops the engine from destroying itself.
- Treating the starting battery as a consumable rather than a control component. The set is found healthy at every service and still fails to crank on the night of the outage.
What to send us
Send photographs of the panel interior and the controller nameplate, the existing single-line diagram and control schematics if any exist, and a short description of how the installation is supposed to behave, including anything it currently does wrong. For a multi-set plant include the number and rating of the sets and whether a utility tie or paralleling is involved. Use the application engineering enquiry for new or modernised control schemes.
Questions engineers ask
What is the difference between a genset controller and an AMF panel?
The genset controller manages the engine and alternator, including cranking, protection and metering. An AMF panel adds supervision of the utility supply and control of the changeover, so the set starts and the load transfers without an operator. Many modern controllers combine both functions in one device, but the changeover contactors or breakers and their wiring are still separate equipment that must be engineered and tested.
Can an old generator be fitted with a modern controller?
Usually yes. A mechanical-governor engine with a conventional AVR can be controlled by a modern AMF or synchronising controller as long as the sensors, actuator interfaces and alternator sensing are correctly engineered. Engines with electronic control modules require a controller that speaks the engine’s data link. The retrofit should include a survey, a new functional description and a full sequence test.
Who should hold the controller settings and software?
The owner. Keep a dated copy of every controller configuration file, the protection settings and the commissioning record with the installation, and treat any change as a controlled change that is tested and recorded. A site that depends on the installer’s laptop for its settings has no settings.
Does remote monitoring mean the generator can be started remotely?
Not necessarily, and it should not be enabled by default. Monitoring reads data. Remote control issues commands, which raises safety questions about personnel working on the set and the switchgear. Enable remote start only with a documented permission scheme, local lock-out, and a test that proves it.
Technical content reviewed by Srinivas Reddy, Managing Partner, Reddy Generators. Last updated 19 October 2026.