What This Article Covers
This guide is for commercial contractors, security consultants, and facility managers evaluating electrified mortise locksets where the specification calls for both levers locked in fail secure mode — meaning no lever on either side of the door operates freely without power or a valid credential. If you have ever wondered why this function exists, which openings it suits, and where it creates a code problem you will not catch until final inspection, read on.
What "Both Levers Locked" Actually Means at the Opening
A standard fail secure electrified mortise lock energizes the inside lever so occupants can exit freely whenever power is applied. De-energize it and the latch holds — the outside lever is locked — but the inside lever still turns freely to allow egress.
A double-cylinder, both-levers-locked function is different. When the system is in the secured state, neither lever operates. Exit requires either a credential at a reader, a key in the inside cylinder, or a command signal from the access control panel. This is not a subtle distinction. It changes the life-safety calculus of the opening entirely.
Where This Function Actually Belongs
The both-levers-locked configuration is a legitimate and sometimes necessary function, but it is narrowly applicable. Appropriate openings typically share several characteristics:
- High-security or sensitive-compartmented spaces where tailgating from the inside is a real threat — server rooms, pharmacy vaults, evidence rooms, currency processing areas.
- Doors not on a required means of egress — this is the non-negotiable filter that must be applied before spec day.
- Locations where the authority having jurisdiction (AHJ) has explicitly reviewed and approved the locking arrangement — never assume approval.
- Industrial and utility spaces where access control from both sides is operationally required and alternate egress paths exist.
In healthcare, government, and higher-education settings, this function sometimes appears on controlled-substance storage rooms, IT infrastructure closets, and records rooms — always off the main egress path and always with a secondary exit strategy documented in the fire plan.
The Life-Safety Trap: Why This Function Gets Mis-Specified
The most common mistake is specifying a both-levers-locked fail secure function on a door that the building code treats as part of a means of egress — even if the designer did not intend it that way.
NFPA 101 and the International Building Code (IBC) set clear requirements: doors on a required egress path must be openable from the egress side without a key, special knowledge, or effort beyond a single release operation. A locked inside lever fails that test. If the AHJ walks the job and finds this function on a corridor door, a stairwell door, or any door that the occupant load calculation routes egress through, you are looking at a rejected inspection and potentially a costly lock swap after the door is already in the wall.
The manufacturer installation instructions for the Accentra 8800 Series electrified mortise line reinforce this directly: the system shall not be installed in fail secure mode unless permitted by the local authority having jurisdiction, and it shall not interfere with the operation of listed panic hardware. That language is not boilerplate — it is a field stop that should trigger a conversation with the AHJ before the product ships.
The Inside Cylinder: Why It Must Be Included and Verified
In a both-levers-locked function, the inside cylinder is not a trim option — it is a life-safety component. When power fails or the access control system goes offline, the inside cylinder is the mechanical override that allows egress without a reader. Omitting it from the hardware set, or leaving it uncylindred during a phased occupancy, creates an immediately life-threatening condition.
On the specification side, make sure the inside cylinder is called out explicitly in the hardware set and that its keyway is part of the master key system for the facility. It does no good in an emergency if the key lives in a drawer at the security desk two buildings away.
For facilities using a restricted keyway system, this is also the opening where key control matters most — a copied key to a server room or evidence vault is a serious security event. Corbin Russwin, Sargent, and other preferred lines offer restricted keyway options that integrate cleanly with electrified mortise cylinders.
Power Transfer: Getting Electricity to the Lock Without Compromising the Door
An electrified mortise lock in a hollow metal door needs a reliable path for low-voltage wiring from the frame through the door to the lockbody. The two common approaches are a door cord (also called a door loop) and an electrified hinge or power transfer hinge.
- Door cord / loop: A coiled cable running through the hinge edge of the door. Simple to install, but exposed, and a maintenance liability on high-cycle doors.
- Electrified transfer hinge: Power runs through the hinge barrel itself — no exposed cord, cleaner look, fire rating is maintained. The ElectroLynx connector system from ASSA ABLOY uses snap-together Molex connectors that make the hinge-to-lock wiring plug-and-play on pre-wired doors from compatible manufacturers.
For any fail secure electrified mortise installation, wire gauge matters. Voltage drop across a long run can prevent the lock from operating reliably. The Accentra 8800 Series, for example, draws 15mA continuous at 12V or 24V but peaks at 500mA during actuation. Consult the wire gauge chart in the manufacturer's installation instructions and confirm your run length supports the operating voltage within the allowable tolerance before the conduit gets filled.
Always coordinate with Division 26 (electrical) and Division 28 (electronic safety and security) on the project spec. An electrified mortise lock that arrives on site without a confirmed power source and access control interface is a door that will not pass final.
Specifying Checklist for Both-Levers-Locked Fail Secure
- Confirmed the door is not on a required means of egress path
- AHJ pre-approval obtained or scheduled
- Inside cylinder included, keyway tied to master key system
- Fail secure function explicitly called out in Division 08 hardware set
- Power transfer method selected and coordinated with Division 26 and 28
- Wire gauge and run length calculated against lock current draw
- Alternate egress path identified and documented in the fire plan
- Monitoring (door position switch or latch monitor) included if access control system requires feedback
Bottom Line for the Field
The both-levers-locked fail secure electrified mortise function is a precision tool, not a default security upgrade. It solves a real problem on a narrow set of openings, and it creates a serious life-safety problem on every other one. Nail down the egress path question first, get AHJ sign-off, include the inside cylinder, confirm your power transfer path, and coordinate across divisions before the hardware ships.
DoorwaysPlus carries electrified mortise locksets from Accentra (formerly Yale), Corbin Russwin, Sargent, and other preferred lines in a range of functions including fail safe, fail secure, and the both-levers-locked configurations covered here. If you need help matching a function to an opening or finding a comparable option for an existing specification, the team at DoorwaysPlus can work through the details with you.