Skip to main content
← Fire Protection Systems
SYSTEM COMPONENTS

Sprinkler System Controller
The Brain of the Operation

How electronic supervision transforms a collection of pipes into an intelligent, communicative life safety network.

By Stanislav Samek, Samektra · 9 min read · Last updated April 26, 2026
Complete fire pump controller room — electric fire pump controller (left), transfer switch (center), jockey controller (right).
Tyco Red-E fire pump controller — digital display behind the viewing window (left door) and three trim gauges on the right door (suction pressure, discharge pressure, sensing-line pressure). The "Manual Release Located Inside" label points to the mechanical override behind the locked door.

The Problem: A System Without a Voice

A fire sprinkler system without a controller is a "dumb" system. If a pipe bursts, a valve is accidentally closed, or the air compressor fails — nobody knows. The most significant risk is an unmonitored impairment: a control valve left in the closed position after maintenance, silently rendering the entire system dead.

Key Functions of the Controller

The controller in a modern sprinkler room is typically a Dedicated Function Fire Alarm System per NFPA 72, designed specifically to monitor the sprinkler system NFPA 72, §23.8.

Valve Supervision

Monitors tamper switches on every control valve. If a valve moves from its "Normally Open" position, the controller generates a Supervisory Signal.

Waterflow Alarms

When a sprinkler activates and water moves through the flow switch, the controller initiates a full building alarm and signals the fire department.

Pressure Monitoring

For dry and pre-action systems, monitors air/nitrogen pressure. Warns staff before the system accidentally trips if the compressor fails.

Fire Pump Coordination

Dedicated NFPA 20 controller manages high-voltage startup sequences, monitors pump health — phase reversal, motor overload, loss of power.

Technical Concept: "Electrically Supervised"

"Electrically Supervised" is the gold standard in modern fire protection. The controller doesn't just wait for a signal — it constantly checks the integrity of the wiring itself. If a wire is cut or a sensor fails, the controller detects the open circuit and throws a Trouble Signal NFPA 72, §12.6.

Three Signal Types

ALARM

Waterflow detected — fire condition

SUPERVISORY

Valve tampered or pressure abnormal

TROUBLE

Wiring fault, sensor failure, communication loss

NFPA 25 & 72 Compliance

Semi-AnnualTest all valve tamper switches. Controller must receive a supervisory signal within 2 revolutions of the valve handwheel or 1/5 of total travel.NFPA 25, §13.3.3
AnnualTest all waterflow alarm devices. Verify signal transmission to the supervising station within 90 seconds of activation.NFPA 72, §14.2.2
HourlyTransmission path check-in: the controller must verify communication with the central monitoring station at least once every hour automatically.NFPA 72, §26.6
ContinuousBattery backup: secondary power must support 24 hours of standby plus 5 minutes of alarm operation. Batteries tested semi-annually.NFPA 72, §10.6.7

Fire Pump Controller — Inside the Cabinet

The fire pump controller is the most complex piece of equipment in the pump room. Understanding what is inside the cabinet — and what every indicator light and switch does — is essential for inspectors, facility managers, and fire department personnel who may need to interact with it during an emergency.

Front Panel Indicators

Every listed fire pump controller has indicator lights on the front panel: POWER ON (green), PUMP RUNNING (red/amber), PHASE REVERSAL (red), PHASE FAILURE (red), and CONTROLLER TROUBLE (yellow). During the weekly churn test, the inspector must verify each indicator illuminates correctly. A burned-out indicator bulb means the signal still reaches the FACP — but the local annunciation at the controller is lost.

Manual Start / Stop

Every controller has a MANUAL START push button and an EMERGENCY STOP push button or switch on the front panel. These work without any password. The manual start overrides all automatic logic — if the pressure switch fails, a building engineer can still start the pump by pressing the button. The emergency stop is the ONLY way to stop a pump that started automatically — automatic stop is prohibited by NFPA 20.

AUTO / OFF / MANUAL Switch

The main selector switch must be in AUTO at all times. In AUTO, the pump starts from a pressure drop signal or fire alarm signal. In MANUAL, it only starts from the front-panel button. In OFF, the pump cannot start at all. A controller found in OFF or MANUAL during an inspection is an immediate deficiency — the system is effectively disabled.

Internal Components

Behind the cabinet doors: main contactor (the heavy-duty relay that connects motor power), circuit breaker (short-circuit protection only — NOT overload), pressure switch connections, alarm relay outputs (to FACP), phase monitor relay, control transformer, terminal strips for field wiring, and the digital display board (on newer controllers). All connections must be torqued and inspected annually.

Inside the cabinets — fire pump controller lineup with all doors open. Left to right: main controller section (circuit breaker, contactors, control relays, status panel), power section (fuses, motor contactor, overload heaters), and transfer switch / VFD section (variable frequency drives, power contactors, terminal blocks). This is what an inspector sees during the annual internal inspection.

Controller Alarm Signals to the FACP

The fire pump controller sends multiple distinct signals to the building fire alarm control panel (FACP). Each signal must be wired to the correct zone type — mixing them up is one of the most common programming errors:

Pump RunningSUPERVISORYTells the FACP (and central station) that the fire pump has started. This is a supervisory signal, not an alarm — the pump running is an expected response to a pressure drop, not a fire condition by itself.
Phase ReversalTROUBLETwo power phases are swapped — the motor would spin backward. Controller prevents starting and sends a trouble signal. Common after utility work on the building transformer. Watch phase reversal testing: youtube.com/watch?v=Ygz0YC7Iv2E
Phase Loss / Power FailureTROUBLEOne or more power phases are missing. Controller cannot start the pump on normal power. If an ATS is present, it should transfer to generator.
Controller TroubleTROUBLEGeneral fault condition — could be a pressure switch failure, internal relay fault, or loss of control power. Requires investigation.
Pump Did Not Start (Diesel)TROUBLEAfter 6 cranking attempts, the diesel engine failed to start. Controller has locked out automatic cranking. Manual start still available at the controller.

▶ Watch: Fire Pump Controller Quick Overview

Quick overview of fire pump controller components, indicators, and operation. · Open on YouTube ↗

Common Default Controller Passwords

Fire pump controllers with digital displays require a password to access programming, view alarm history, or change setpoints. In practice, most facilities never change the factory default. Knowing these can save 30 minutes during an inspection or emergency:

Known Factory Default Passwords by Manufacturer
Tornatech2112Most common fire pump controller in North America. Password 2112 is almost universal across their GPX, DGX, and TDX series.
Metron (Novec)1234Metron FD series controllers. Some newer models use 0000.
Firetrol (Emerson)1234 or 3456FTA series controllers. Older mechanical units have no password. Newer digital displays typically 1234.
Eaton / Cutler-Hammer0000 or 1111FD series fire pump controllers. Check the instruction manual behind the door panel.
Master Control (MC)1234MC series controllers, common in smaller installations.
Hubbell / WPI2112 or 1234WPI acquired Tornatech — newer units often retain the 2112 default.

⚠ Field Tips

  • Check behind the door: Most controllers have the default password printed on a sticker inside the cabinet door or in the instruction manual pocket mounted inside the enclosure.
  • Write it down for the facility: If the password has been changed from default, ask the installing contractor to document it and store it with the fire protection system records. A locked-out controller during an emergency is a serious problem.
  • Password protects programming, not operation: The manual start/stop buttons on the front panel work without any password. The password only gates access to the digital display menu for changing setpoints, viewing alarm history, and adjusting timing parameters.
  • After a power cycle: Some older controllers reset to default password after a power loss. If you cannot get in with the changed password, try cycling power and entering the factory default immediately.

Types of Fire Protection Controllers

Not all red cabinets in the pump room do the same thing. A complete fire pump installation can have three or four separate controllers, each with a distinct role defined by NFPA 20:

Electric Fire Pump Controller

The main controller — handles automatic start from pressure drop, manual start/stop, phase monitoring, running signal to FACP, and locked rotor protection. Must be listed for fire pump service per NFPA 20 §10. Cannot have overload protection that prevents starting. The largest and most complex cabinet in the pump room.

Diesel Engine Controller

Manages the automatic cranking sequence (6 attempts across dual battery sets), engine monitoring (oil pressure, coolant temp, overspeed), fuel level supervision, and alarm signals. Must be listed per NFPA 20 §12.4. Includes battery charger status indicators and manual override.

Jockey Pump Controller

A smaller, simpler controller that starts and stops the jockey pump based on system pressure. When pressure drops slightly (normal leakage/thermal contraction), the jockey pump runs to restore pressure. When pressure drops significantly (sprinkler head opened), the jockey pump cannot keep up and the main fire pump controller takes over. Listed per NFPA 20 §10.7.

Automatic Transfer Switch (ATS)

Not technically a controller, but often mounted in the same lineup. Transfers the fire pump from normal power to emergency power (generator) when utility fails. Must be specifically listed for fire pump service — standard building ATSes are not acceptable. Per NFPA 20 §9.7.

Jockey Pump Controller — The Unsung Hero

Yes, jockey pumps have their own dedicated controller — and it is one of the most critical settings in the entire fire pump room. The jockey pump controller has two pressure setpoints that must be calibrated precisely:

Start PressureTypically 5-10 PSI above fire pump startWhen system pressure drops to this level (from normal leakage, thermal contraction, or a tiny weep), the jockey pump turns on and restores pressure. Set HIGH enough to keep the fire pump from starting unnecessarily.
Stop PressureTypically 5-10 PSI above startWhen the jockey pump raises pressure to this level, it shuts off. The gap between start and stop is the "deadband" — too narrow and the jockey short-cycles, too wide and the pressure swings are excessive.
Fire Pump StartBelow jockey start (set by fire pump controller)If pressure drops below the jockey pump start AND keeps dropping (because the jockey cannot keep up — meaning a real sprinkler head opened), the fire pump controller activates the main pump. The 10-PSI stacking between jockey start and fire pump start is the buffer zone.

The 3 AM False Alarm Problem

If the jockey pump controller setpoints are wrong — or the jockey pump itself is undersized or failed — every small pressure drop goes straight to the fire pump. The fire pump starts at full power, creates a pressure surge that trips the waterflow switch, and the building gets a fire alarm at 3 AM. Facilities that experience recurring late-night waterflow alarms should check their jockey pump controller settings first.

Things You Might Not Know About Fire Protection Controllers

The Controller Must Allow the Motor to Destroy Itself

Unlike any other motor controller in a building, a fire pump controller has no overload protection. NFPA 20 §10.4.4 requires the controller to let the motor draw locked rotor current indefinitely — even if the motor overheats and burns out. The logic: a pump that runs during a fire and then dies has done its job. A pump that trips off to save itself while people are still inside has failed. The controller protects people, not equipment.

The Burj Khalifa Has 7 Fire Pump Zones

At 2,717 feet, the Burj Khalifa in Dubai cannot use a single fire pump to push water to the top. Instead, the building uses a cascading multi-zone fire pump system — each zone has its own pump, controller, and water storage tank, with each zone boosting pressure to feed the zone above it. The controllers must sequence across zones, with the top zone starting first and working downward. The controller coordination logic is custom-engineered for the building.

Some Controllers Can Text You

Modern fire pump controllers from manufacturers like Tornatech, Metron, and Eaton/Cutler-Hammer offer optional cellular or IP communication modules. The controller sends SMS or email alerts when the pump starts, stops, or enters a trouble condition. For facilities with remote or unmanned pump rooms, this means the building engineer gets a text message at 2 AM saying "Fire Pump 1 Running — Automatic Start" instead of finding out at 8 AM when they arrive.

Japan Uses Earthquake-Triggered Controllers

In seismically active regions like Japan and California, fire pump controllers can be integrated with seismic sensors. When an earthquake exceeding a set magnitude is detected, the controller can automatically start the fire pump and pressurize the standpipe system in anticipation of earthquake-induced fires — before any sprinkler head opens or any smoke is detected. This proactive start compensates for the delay between earthquake damage and fire ignition.

A Jockey Pump Cycles 50-100 Times Per Day

In a healthy system with minor normal leakage, the jockey pump may cycle (start and stop) 50-100 times per day. Each cycle runs for 30-90 seconds — just long enough to restore 5-10 PSI. This is normal. But if the jockey pump is cycling every 2-3 minutes continuously, it means the system has a leak that exceeds the jockey pump's capacity. The jockey controller often has a cycle counter — tracking this number over time reveals developing leaks before they become visible.

Offshore Oil Platforms Use Diesel-Hydraulic Controllers

On offshore oil rigs and FPSOs (Floating Production Storage and Offloading vessels), fire pump controllers must operate in explosive atmospheres classified as Zone 1 or Zone 2. Standard electrical controllers would be an ignition source. Instead, these platforms use pneumatic or hydraulic control systems that can start diesel fire pumps without any electrical spark. The controllers use compressed air logic circuits — no electronics, no spark, no ignition risk.

The Transfer Switch Has Its Own Brain

A fire pump ATS is not a simple relay — it monitors both power sources continuously, detects voltage sag/loss on the normal source, transfers to emergency within seconds, and only retransfers back to normal when the utility voltage has been stable for a preset time (typically 30 minutes). It must also handle an in-phase transfer to prevent the motor from experiencing a voltage transient that could damage the pump coupling. Cheap building ATSes cannot do this — fire pump ATSes are specifically listed.

Controllers Must Survive Their Own Fire

NFPA 20 §4.12 requires fire pump rooms to have 2-hour fire-rated separation. But even within the rated room, the controller must be positioned where it is accessible, not blocked by piping, and has adequate clearance for the doors to open fully. After a fire at a UK warehouse in 2013, investigators found that the fire pump controller was destroyed by heat before the pump room's rated enclosure failed — the controller was mounted on a non-rated interior wall. Placement matters as much as the rating.

▶ Watch: Firetrol Electric Fire Pump Controller — Overview & Setup

Source: Firetrol · Open on YouTube ↗

Frequently Asked Questions

What is a "dedicated function" fire alarm control unit?
NFPA 72 §23.8: a FACU dedicated to monitoring one specific fire-protection function (e.g. just the sprinkler waterflow + tamper switches, just a kitchen suppression system, just a fire pump). The advantage is isolation — a problem with one system's monitoring does not take down the whole building fire alarm. Common in small commercial and residential applications where a full premises-wide FACP is overkill.
What signals must a sprinkler controller monitor?
NFPA 25 §13.3.3 + NFPA 72 §17/26: every waterflow switch (alarm), every control valve tamper switch (supervisory), low air pressure on dry/preaction systems (supervisory), low building temperature on water-filled spaces (supervisory — typically 40°F threshold), low water level on tanks, and fire pump running/loss-of-power (supervisory). Each must annunciate distinctly.
How fast must the controller respond to a trouble condition?
NFPA 72 §10.18.4 — within 200 seconds of the fault. This includes broken wires (open circuit), ground faults, and loss of communication with a remote device. Annual testing per NFPA 72 §14 verifies this — disconnect a supervisory device and time the panel's trouble annunciation.
Can a fire alarm panel and a sprinkler controller be the same unit?
Yes — most modern installations combine them into a single addressable FACP. A "sprinkler controller" as a stand-alone unit is becoming less common; instead the FACP manages both the building fire alarm and the sprinkler-system supervision through SLC-connected modules. Either approach is code-compliant if the resulting system meets NFPA 72 + NFPA 25.
How are central station signals transmitted from the controller?
NFPA 72 §26 — at least two independent communication paths typically required (IP primary + cellular backup is the modern standard; dual phone lines are legacy DACT). Loss of any one path triggers a trouble signal. The signal types transmitted: alarm (fire), supervisory (fire-protection feature off-normal), and trouble (system fault).

References

1. NFPA 72: National Fire Alarm and Signaling Code, §23.8, §12.6, §26.6.

2. NFPA 25: ITM of Water-Based Fire Protection Systems, §13.3.3.

3. NFPA 20: Standard for the Installation of Stationary Pumps for Fire Protection.

4. NFSA: Fire Sprinkler Monitoring and Supervision.

5. NFPA Blog: Fire Department Use of Sprinkler Systems.

DISCUSSION
Be the first to contribute.

Open the discussion panel to comment, flag an inaccuracy, add field experience, or ask a question. Approved contributions earn SRP and may be incorporated into the article.