The Power Goes Out. Both Levers Are Locked. Now What?
This article is for contractors, security integrators, facility managers, and architects who specify or commission electrified mortise locksets with a fail secure function, no cylinder override, and bilateral lever lockout. The question it answers is simple but consequential: when the building loses power or the access control system goes down, what is your plan for that door?
Understanding the answer before the opening is commissioned — not after the first incident — is the difference between a well-engineered security workflow and a very expensive emergency call.
What Does This Function Actually Mean?
A fail secure electrified mortise lockset with both levers locked and no cylinder override is exactly what the name says: when electrical power is removed, the lock remains locked. Neither lever — inside nor outside — operates the latchbolt. And because there is no mechanical key cylinder override on the outside, a physical key cannot defeat the lock state.
That last detail is not an omission. It is an intentional design choice for specific high-security applications. But it creates a dependency that every person involved in the project must understand: this door does not open without power and a valid credential signal from the access control system.
Accentra (formerly Yale Security) offers this configuration in their 8800 Series EcoFlex electrified mortise line — a field-proven platform that accepts 12 or 24VDC and draws roughly 15mA in continuous hold mode, making it compatible with most commercial access control power supplies.
Where This Configuration Is Specified — and Why
You do not find this function on a typical office corridor door. The no-cylinder-override, both-levers-locked configuration shows up where the threat model demands that no mechanical bypass exist. Common applications include:
- Pharmacy dispensing rooms in healthcare facilities, where DEA compliance and controlled substance security require documented electronic access logs and no mechanical workaround
- Server rooms and network operations centers in commercial and institutional buildings
- Evidence storage in law enforcement facilities
- Cash counting rooms in retail and gaming environments
- High-security research labs where chain-of-custody integrity is audited
In each of these settings, the owner has decided that the risk of unauthorized mechanical bypass outweighs the inconvenience of strict power-and-credential dependency. That is a legitimate security engineering decision — but it comes with obligations that must be addressed at spec time, not move-in time.
The Three Questions Every Specifier Must Answer Before This Hardware Ships
1. What Is the Power Failure Recovery Plan?
A fail secure lock holds locked on power loss. If the building experiences a power outage, UPS failure, or access control panel crash, that door stays shut. For an evidence room or server closet, that may be acceptable. For any opening on a required egress path, it is not — and here the code picture matters.
The installation instructions for Accentra 8800 Series EcoFlex locks include a direct warning: the system shall not be installed in fail secure mode unless permitted by the local authority having jurisdiction, and it shall not interfere with the operation of listed panic hardware. That is a manufacturer-level restatement of the broader life-safety framework under IBC and NFPA 101.
Specifiers should confirm with the AHJ early. Required egress doors that serve occupied spaces are almost never appropriate candidates for this function. Interior security rooms with secondary egress paths are the typical fit.
For the power failure scenario, the project team needs documented answers to:
- Is there a dedicated UPS on the access control power supply for this opening?
- What is the UPS runtime, and who monitors its battery health?
- Is there a facility-side manual override procedure (supervised key, security desk release, etc.) that does not depend on the lock hardware itself?
- Who holds authority to authorize emergency access, and how is that documented?
2. How Is the Door Wired, and Who Owns That Coordination?
An electrified mortise lockset needs power delivered through the door — and on a hollow metal door without a factory-installed wiring harness, that means a power transfer method must be specified separately. Options include an electrified hinge (such as those compatible with the ElectroLynx connector system), a door loop, or a surface-mounted power transfer device.
The Accentra 8800 EcoFlex accepts ElectroLynx connectors on ASSA ABLOY Group pre-wired doors, which simplifies field termination significantly. On non-pre-wired openings, the installer removes the connector and terminates with crimp splices or wire nuts per local code. Either way, the lock is polarity sensitive — reversed wiring will cause a malfunction that looks like a dead lock but is actually a wiring error.
This is the coordination step that most commonly gets missed on fast-track projects: the door hardware subcontractor specifies the lock, the electrical subcontractor pulls power to the frame, and nobody owns the connection across the hinge. Assign that responsibility in the specification or pre-installation meeting, not during punch list.
Wiring methods must comply with ANSI/NFPA 70 (National Electrical Code) and local codes. The spec should cross-reference Division 26 and Division 28 explicitly so neither the electrical nor the security contractor assumes the other is handling the door-side termination.
3. What Is the Egress Strategy on the Secure Side?
Both levers locked means the inside lever does not retract the latch without power. That is the function. On a door that is not on a required egress path, that is acceptable. But even on an interior security room, the occupant experience during a power interruption matters.
If someone could be inside the room when power drops, the sequence needs to address how they get out. Options typically include:
- A local REX (request-to-exit) button wired to the panel that releases the lock electronically — but this still requires panel power
- A parallel UPS circuit that keeps the lock powered for a defined interval
- An alternate egress path from the secure space that is not controlled by this hardware
- An occupancy sensor or timer-release integrated into the access control programming
None of these are hardware-only decisions. They are system design decisions that belong in the access control sequence documentation — and they need to be verified during commissioning, not assumed.
Why the Hardware Schedule Note Is Not Enough
A hardware schedule entry that reads "fail secure, both levers locked, no cylinder override" communicates the lock function correctly. What it does not communicate is the downstream system logic, the power infrastructure, or the emergency access procedure. Those belong in the project's access control narrative, the Division 26 coordination notes, and the owner's operations manual.
Preferred brands for this class of electrified mortise hardware — including Accentra, Corbin Russwin, Sargent, and Hager — offer stable product lines with consistent part availability, which matters when a facility needs to service or replace a solenoid or monitor switch years after original installation. Specifying from lines with predictable parts continuity reduces the risk of a security-critical opening becoming unserviceable due to discontinued components.
Commissioning Checklist Before This Opening Goes Live
- Confirm AHJ approval for fail secure function at this opening
- Verify polarity at the lock before applying full power
- Test both levers in the de-energized (locked) state to confirm neither operates the latch
- Test credential release from the access control panel — confirm latch retracts on valid signal
- Test UPS fallback — disconnect primary power and confirm UPS runtime meets project requirements
- Document the emergency access procedure and deliver it to facility management in writing
- Confirm Division 28 and Division 26 sign-off on door-side wiring terminations
Specify the Right Hardware From the Start
DoorwaysPlus carries electrified mortise locksets from Accentra and other preferred commercial lines suited to high-security interior openings. If you are working through a hardware schedule that includes fail secure functions with restricted egress requirements, our team can help you match the right lock body, trim, and power transfer components to the opening — and flag coordination gaps before they become field problems.